claude-code-session-manager 0.87.0 → 0.88.0

package/src/main/seedAgentPersonas.cjs

@@ -130,4 +130,4 @@ async function seedAgentPersonas({ logger = console, writeLog = () => {} } = {})
   }
 }
 
-module.exports = { seedAgentPersonas, markerPath, MAX_ATTEMPTS };
+module.exports = { seedAgentPersonas, markerPath, MAX_ATTEMPTS, PERSONAS };

package/src/main/seedDevPlugin.cjs

@@ -1,7 +1,7 @@
 /**
  * First-boot seeder for the bundled `session-manager-dev` plugin.
  *
- * The plugin (its 10 dev skills) ships inside the npx distribution. To make it
+ * The plugin (the dev skills under plugins/session-manager-dev/skills) ships inside the npx distribution. To make it
  * a true default, the app installs it on first launch from its own bundled
  * marketplace (offline — no GitHub/registry). Idempotent two ways:
  *

package/src/main/seedSchedulerMcp.cjs

@@ -35,7 +35,7 @@ const fs = require('node:fs');
 const path = require('node:path');
 const os = require('node:os');
 const { spawn } = require('node:child_process');
-const { resolveClaudeBin } = require('./lib/claudeBin.cjs');
+const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claudeBin.cjs');
 const { cleanChildEnv, pathWithUserBins } = require('./lib/cleanEnv.cjs');
 const { writeJsonSync } = require('./config.cjs');
 
@@ -106,13 +106,14 @@ function scriptPathMissing() {
  *  No shell:true — argv array passed directly to spawn. */
 function runClaudeMcpAdd(serverPath) {
   return new Promise((resolve) => {
-    const claudeBin = resolveClaudeBin();
+    const target = claudeSpawnTarget('aux', 'mcp-add');
     let proc;
     try {
       proc = spawn(
-        claudeBin,
+        target.command,
         ['mcp', 'add', SERVER_NAME, '--scope', 'user', '--', 'node', serverPath],
         {
+          ...(target.argv0 ? { argv0: target.argv0 } : {}),
           cwd: os.homedir(),
           env: cleanChildEnv({ PATH: pathWithUserBins() }),
           stdio: 'ignore',
@@ -130,13 +131,13 @@ function runClaudeMcpAdd(serverPath) {
 /** Run `claude mcp remove session-manager-scheduler --scope user`, best-effort. */
 function runClaudeMcpRemove() {
   return new Promise((resolve) => {
-    const claudeBin = resolveClaudeBin();
+    const target = claudeSpawnTarget('aux', 'mcp-remove');
     let proc;
     try {
       proc = spawn(
-        claudeBin,
+        target.command,
         ['mcp', 'remove', SERVER_NAME, '--scope', 'user'],
-        { cwd: os.homedir(), env: cleanChildEnv({ PATH: pathWithUserBins() }), stdio: 'ignore' }
+        { cwd: os.homedir(), env: cleanChildEnv({ PATH: pathWithUserBins() }), stdio: 'ignore', ...(target.argv0 ? { argv0: target.argv0 } : {}) }
       );
     } catch (err) {
       resolve({ ok: false, error: err?.message ?? String(err) });

package/src/main/seedStatus.cjs

@@ -43,7 +43,7 @@ const FIXES = {
   'dev-plugin': 'Open Plugins → Library and click Install next to "session-manager-dev".',
   'scheduler-mcp': () =>
     `Run in a terminal: claude mcp add ${seedSchedulerMcp.SERVER_NAME} --scope user -- node ${seedSchedulerMcp.serverScriptPath()}`,
-  'agent-personas': 'Copy src/seed/agents/architect.md and dev-lead.md into ~/.claude/agents/ (skip any that already exist there).',
+  'agent-personas': `Copy ${seedAgentPersonas.PERSONAS.map((n) => `src/seed/agents/${n}.md`).join(', ')} into ~/.claude/agents/ (skip any that already exist there).`,
 };
 
 /** { 'dev-plugin': {status, fix}, 'scheduler-mcp': {status, fix}, 'agent-personas': {status, fix} } */

package/src/main/supervisor.cjs

@@ -16,7 +16,8 @@ const path = require('node:path');
 const os = require('node:os');
 const { spawn, execFileSync } = require('node:child_process');
 const { ipcMain } = require('electron');
-const { resolveClaudeBin } = require('./lib/claudeBin.cjs');
+const { resolveClaudeBin, claudeSpawnTarget } = require('./lib/claudeBin.cjs');
+const { withProcRole } = require('./lib/cleanEnv.cjs');
 
 const HOME = os.homedir();
 const SUPERVISOR_LOG_PATH = path.join(HOME, '.claude', 'session-manager', 'supervisor.log');
@@ -207,7 +208,8 @@ function runProbe(claudeBin, prompt) {
   return new Promise((resolve) => {
     let child;
     try {
-      child = spawn(claudeBin, [
+      const target = claudeSpawnTarget('aux', 'supervisor', claudeBin);
+      child = spawn(target.command, [
         '-p', prompt,
         '--model', 'claude-opus-4-7',
         '--no-session-persistence',
@@ -215,7 +217,7 @@ function runProbe(claudeBin, prompt) {
         '--max-budget-usd', '0.10',
         '--dangerously-skip-permissions',
         '--allowedTools', 'Bash',
-      ], { stdio: ['ignore', 'pipe', 'pipe'] });
+      ], { env: withProcRole(process.env, 'aux'), stdio: ['ignore', 'pipe', 'pipe'], ...(target.argv0 ? { argv0: target.argv0 } : {}) });
     } catch (e) {
       console.error('[supervisor] probe spawn failed:', e?.message);
       resolve({ verdict: 'ok', action: 'none', targetPid: null, reason: `spawn failed: ${e?.message}`, costUsd: null });

package/src/main/usage.cjs

@@ -23,6 +23,7 @@ const os = require('node:os');
 const { ipcMain } = require('electron');
 const { refreshIfNeeded, expiresAtMs } = require('./lib/credentials.cjs');
 const { writeJson } = require('./config.cjs');
+const { createUsageCircuit, singleFlight } = require('./lib/usageCircuit.cjs');
 
 const USAGE_URL = 'https://api.anthropic.com/api/oauth/usage';
 
@@ -146,6 +147,18 @@ function classifyUsageResponse(status, bodyText) {
 
 let cache = null;
 let hydrationPromise = null;
+// Retry-After suppression window: while `now < retryNotBeforeMs`, fetchUsage()
+// refuses to issue another request and instead replays `lastRateLimitedResult`
+// (annotated `suppressed: true`) — set only from a 429's Retry-After header.
+let retryNotBeforeMs = 0;
+let lastRateLimitedResult = null;
+
+// Single shared circuit for the /api/oauth/usage meter. Both callers — the
+// renderer's billing:fetch IPC handler and the scheduler's pollLoop — go
+// through this same fetchUsage(), so a success recorded from EITHER caller
+// clears the streak for both, and concurrent callers coalesce into one HTTP
+// request via singleFlight.
+const circuit = createUsageCircuit();
 
 async function hydrateCache() {
   try {
@@ -155,23 +168,17 @@ async function hydrateCache() {
   }
 }
 
+function ensureHydrated() {
+  if (!hydrationPromise) hydrationPromise = hydrateCache();
+  return hydrationPromise;
+}
+
 async function persistCache(c) {
   await writeJson(CACHE_PATH, c);
 }
 
-async function fetchUsage() {
-  // Test stub: SM_MOCK_BILLING_KIND lets e2e tests simulate billing API responses
-  // without hitting the real endpoint. Only active when SM_E2E=1 to prevent
-  // accidental use in production.
-  if (process.env.SM_E2E === '1' && process.env.SM_MOCK_BILLING_KIND) {
-    const kind = process.env.SM_MOCK_BILLING_KIND;
-    if (kind === 'meter_rate_limited') return { kind: 'meter_rate_limited', message: 'e2e stub', httpStatus: 429 };
-    if (kind === 'transient') return { kind: 'transient', message: 'e2e stub', httpStatus: 503 };
-    if (kind === 'auth') return { kind: 'auth', message: 'e2e stub', httpStatus: 401 };
-    // 'ok' stub returns a minimal valid payload.
-    return { kind: 'ok', data: { usage: { five_hour: { utilization: 10, resets_at: null }, seven_day: { utilization: 10, resets_at: null }, seven_day_sonnet: null, seven_day_opus: null, extra_usage: null }, subscriptionType: null, rateLimitTier: null, credentialsExpiresAt: null, fetchedAt: Date.now() } };
-  }
-
+/** The actual network round-trip, coalesced across concurrent callers below. */
+async function networkFetchUsage() {
   // Check expiry and attempt proactive refresh before touching the network.
   const refresh = await refreshIfNeeded();
   if (refresh.kind === 'auth') {
@@ -181,6 +188,7 @@ async function fetchUsage() {
   // 'ok' or 'unsupported' — creds present and not yet expired
   const creds = refresh.creds;
 
+  let result;
   let r;
   try {
     r = await fetch(USAGE_URL, {
@@ -192,64 +200,107 @@ async function fetchUsage() {
       signal: AbortSignal.timeout(10_000),
     });
   } catch (e) {
-    return { kind: 'transient', message: e.message || String(e), httpStatus: null };
-  }
-  if (r.status === 401 || r.status === 403) {
-    const body = await r.text().catch(() => '');
-    const ms = expiresAtMs(creds);
-    return { kind: 'auth', message: body.slice(0, 200) || `HTTP ${r.status}`, httpStatus: r.status, expiredAt: ms };
-  }
-  if (r.status === 408 || r.status >= 500) {
-    const body = await r.text().catch(() => '');
-    return { kind: 'transient', message: body.slice(0, 200) || `HTTP ${r.status}`, httpStatus: r.status };
+    result = { kind: 'transient', message: e.message || String(e), httpStatus: null };
   }
-  if (r.status === 429) {
-    const body = await r.text().catch(() => '');
-    let parsed = null;
-    try { parsed = JSON.parse(body); } catch { /* */ }
-    if (parsed?.error?.type === 'rate_limit_error') {
-      return {
-        kind: 'meter_rate_limited',
-        message: body.slice(0, 200),
-        httpStatus: 429,
-        retryAfterMs: parseRetryAfterMs(r.headers.get('retry-after')),
+  if (!result) {
+    if (r.status === 401 || r.status === 403) {
+      const body = await r.text().catch(() => '');
+      const ms = expiresAtMs(creds);
+      result = { kind: 'auth', message: body.slice(0, 200) || `HTTP ${r.status}`, httpStatus: r.status, expiredAt: ms };
+    } else if (r.status === 408 || r.status >= 500) {
+      const body = await r.text().catch(() => '');
+      result = { kind: 'transient', message: body.slice(0, 200) || `HTTP ${r.status}`, httpStatus: r.status };
+    } else if (r.status === 429) {
+      const body = await r.text().catch(() => '');
+      let parsed = null;
+      try { parsed = JSON.parse(body); } catch { /* */ }
+      if (parsed?.error?.type === 'rate_limit_error') {
+        result = {
+          kind: 'meter_rate_limited',
+          message: body.slice(0, 200),
+          httpStatus: 429,
+          retryAfterMs: parseRetryAfterMs(r.headers.get('retry-after')),
+        };
+      } else {
+        result = { kind: 'transient', message: body.slice(0, 200) || 'HTTP 429', httpStatus: 429 };
+      }
+    } else if (!r.ok) {
+      const body = await r.text().catch(() => '');
+      result = { kind: 'transient', message: body.slice(0, 200) || `HTTP ${r.status}`, httpStatus: r.status };
+    } else {
+      const usage = await r.json();
+      result = {
+        kind: 'ok',
+        data: {
+          usage,
+          subscriptionType: creds.subscriptionType ?? null,
+          rateLimitTier: creds.rateLimitTier ?? null,
+          credentialsExpiresAt: creds.expiresAt ?? null,
+          fetchedAt: Date.now(),
+        },
       };
     }
-    return { kind: 'transient', message: body.slice(0, 200) || 'HTTP 429', httpStatus: 429 };
   }
-  if (!r.ok) {
-    const body = await r.text().catch(() => '');
-    return { kind: 'transient', message: body.slice(0, 200) || `HTTP ${r.status}`, httpStatus: r.status };
+
+  if (result.kind === 'ok') {
+    cache = { data: result.data, fetchedAt: Date.now(), sourceCredsExpiresAt: result.data.credentialsExpiresAt };
+    persistCache(cache).catch(() => {});
+    retryNotBeforeMs = 0;
+    lastRateLimitedResult = null;
+    circuit.recordSuccess(result.data);
+  } else if (result.kind === 'meter_rate_limited') {
+    lastRateLimitedResult = result;
+    if (Number.isFinite(result.retryAfterMs) && result.retryAfterMs > 0) {
+      retryNotBeforeMs = Date.now() + result.retryAfterMs;
+    }
+    circuit.recordFailure(result.kind);
+  } else if (result.kind === 'transient') {
+    circuit.recordFailure(result.kind);
   }
-  const usage = await r.json();
-  return {
-    kind: 'ok',
-    data: {
-      usage,
-      subscriptionType: creds.subscriptionType ?? null,
-      rateLimitTier: creds.rateLimitTier ?? null,
-      credentialsExpiresAt: creds.expiresAt ?? null,
-      fetchedAt: Date.now(),
-    },
-  };
+  return result;
 }
 
-function registerBillingHandlers() {
-  hydrationPromise = hydrateCache();
+// Concurrent callers (the renderer's billing:fetch and the scheduler's
+// pollLoop) coalesce into this one in-flight promise instead of each firing
+// their own request against a rate-limited endpoint.
+const singleFlightNetworkFetch = singleFlight(networkFetchUsage);
 
-  ipcMain.handle('billing:fetch', async () => {
-    if (hydrationPromise) { await hydrationPromise; hydrationPromise = null; }
+/**
+ * The single owner of caching, single-flight de-duplication and Retry-After
+ * suppression for the usage meter. Every caller — renderer IPC and scheduler
+ * pollLoop alike — must go through this function rather than hitting the
+ * network or the cache file directly.
+ */
+async function fetchUsage() {
+  // Test stub: SM_MOCK_BILLING_KIND lets e2e tests simulate billing API responses
+  // without hitting the real endpoint. Only active when SM_E2E=1 to prevent
+  // accidental use in production.
+  if (process.env.SM_E2E === '1' && process.env.SM_MOCK_BILLING_KIND) {
+    const kind = process.env.SM_MOCK_BILLING_KIND;
+    if (kind === 'meter_rate_limited') return { kind: 'meter_rate_limited', message: 'e2e stub', httpStatus: 429 };
+    if (kind === 'transient') return { kind: 'transient', message: 'e2e stub', httpStatus: 503 };
+    if (kind === 'auth') return { kind: 'auth', message: 'e2e stub', httpStatus: 401 };
+    // 'ok' stub returns a minimal valid payload.
+    return { kind: 'ok', data: { usage: { five_hour: { utilization: 10, resets_at: null }, seven_day: { utilization: 10, resets_at: null }, seven_day_sonnet: null, seven_day_opus: null, extra_usage: null }, subscriptionType: null, rateLimitTier: null, credentialsExpiresAt: null, fetchedAt: Date.now() } };
+  }
 
-    if (cache && cache.fetchedAt && Date.now() - cache.fetchedAt < OK_CACHE_TTL_MS) {
-      return { kind: 'ok', data: cache.data };
-    }
+  await ensureHydrated();
+
+  if (cache && cache.fetchedAt && Date.now() - cache.fetchedAt < OK_CACHE_TTL_MS) {
+    return { kind: 'ok', data: cache.data };
+  }
+
+  if (lastRateLimitedResult && retryNotBeforeMs && Date.now() < retryNotBeforeMs) {
+    return { ...lastRateLimitedResult, suppressed: true };
+  }
+
+  return singleFlightNetworkFetch();
+}
 
+function registerBillingHandlers() {
+  ipcMain.handle('billing:fetch', async () => {
     const r = await fetchUsage();
-    if (r.kind === 'ok') {
-      cache = { data: r.data, fetchedAt: Date.now(), sourceCredsExpiresAt: r.data.credentialsExpiresAt };
-      persistCache(cache).catch(() => {});
-      return { kind: 'ok', data: r.data };
-    }
+    if (r.kind === 'ok') return { kind: 'ok', data: r.data };
     if (r.kind === 'auth') {
       if (cache) return { kind: 'auth', message: r.message, httpStatus: r.httpStatus, expiredAt: r.expiredAt, cached: cache.data, staleSince: cache.fetchedAt };
       return r;
@@ -259,11 +310,24 @@ function registerBillingHandlers() {
       return r;
     }
     if (r.kind === 'meter_rate_limited') {
-      if (cache) return { kind: 'meter_rate_limited', message: r.message, httpStatus: r.httpStatus, retryAfterMs: r.retryAfterMs, cached: cache.data, staleSince: cache.fetchedAt };
+      if (cache) return { kind: 'meter_rate_limited', message: r.message, httpStatus: r.httpStatus, retryAfterMs: r.retryAfterMs, suppressed: r.suppressed, cached: cache.data, staleSince: cache.fetchedAt };
       return r;
     }
     return r; // config
   });
 }
 
-module.exports = { registerBillingHandlers, fetchUsage, classifyUsageResponse, parseRetryAfterMs, usageMeterApplicable, readClaudeSettingsAuth };
+module.exports = {
+  registerBillingHandlers,
+  fetchUsage,
+  classifyUsageResponse,
+  parseRetryAfterMs,
+  usageMeterApplicable,
+  readClaudeSettingsAuth,
+  // The single shared breaker instance — scheduler.cjs's pollLoop (and every
+  // other consumer) reads THIS object's state()/openedAt()/
+  // getConsecutiveFailures() rather than deriving its own, so a failure
+  // recorded via any path (poller, executor 429) opens the same circuit.
+  usageCircuit: circuit,
+  __usageCircuitForTest: circuit,
+};

package/src/preload/api.d.ts

@@ -356,22 +356,23 @@ export interface DelegationReadinessCheck {
     | 'agent-personas'
     | 'prd-write-guard'
     | 'destructive-git-guard'
-    | 'inline-implementation-guard';
+    | 'inline-implementation-guard'
+    | 'self-schedule-guard';
   label: string;
   ok: boolean;
   detail: string;
   fix: string | null;
   /** Non-null when Session Manager can install this fix itself, one press. */
-  fixAction: 'install-prd-write-guard' | 'install-destructive-git-guard' | 'install-inline-implementation-guard' | null;
+  fixAction: 'install-prd-write-guard' | 'install-destructive-git-guard' | 'install-inline-implementation-guard' | 'install-self-schedule-guard' | null;
   /** True when ok:true is a WARNING (still passing, but worth a human's attention) — today only scheduler-mcp-project-duplicate. */
   warn?: boolean;
   /** True when this check didn't run because a precondition (another check) already failed — reported ok:true, not a failure. */
   skipped?: boolean;
 }
 
-/** Result of installPrdWriteGuard, installDestructiveGitGuard, and
- *  installInlineImplementationGuard alike (delegationReadiness.cjs) — the
- *  three installers share one contract. */
+/** Result of installPrdWriteGuard, installDestructiveGitGuard,
+ *  installInlineImplementationGuard, and installSelfScheduleGuard alike
+ *  (delegationReadiness.cjs) — all four installers share one contract. */
 export interface InstallGuardResult {
   ok: boolean;
   action: 'installed' | 'repaired' | 'already-installed' | 'error';
@@ -658,13 +659,6 @@ export interface ScheduleJobStatusHistoryEntry {
   at: string;
 }
 
-export interface SchedulePaths {
-  root: string;
-  prds: string;
-  runs: string;
-  queue: string;
-}
-
 export type SchedulePauseReason = 'rate_limit' | 'auth' | 'network' | 'manual' | 'reset_failure';
 
 export interface SchedulePauseInfo {
@@ -858,8 +852,6 @@ export interface ScheduleStateSnapshot {
    * is saturated. Null before the first tick that evaluated it.
    */
   loadGate?: ScheduleLoadGate | null;
-  /** Returned only by the initial state() call, not the broadcast event. */
-  paths?: SchedulePaths;
 }
 
 export interface ScheduleLoadGate {
@@ -1081,26 +1073,6 @@ export interface WatcherClosedEvent {
   watcherId: string;
 }
 
-export interface TeamMember {
-  name: string;
-  agentType: string | null;
-  model: string | null;
-}
-
-export interface TeamInfo {
-  name: string;
-  configPath: string;
-  description: string | null;
-  leadAgentId: string | null;
-  members: TeamMember[];
-  memberCount: number;
-  inboxDepth: number;
-}
-
-export interface TeamsListResult {
-  teams: TeamInfo[];
-}
-
 // ────────────────────────────────────────────── Bundle D — queue ops
 
 export interface LintFinding {
@@ -1297,29 +1269,12 @@ export type ProjectBriefUpdateResult =
   | { ok: true; brief: ProjectBrief }
   | { ok: false; error: string };
 
-// ────────────────────────────────────────────── Project Pages (PRD 929-932, 969, project-home-hosted-html-spec)
-export interface ProjectPagesOutput {
-  home: string;
-  /** Absent when `isDefault` is true — the shipped default only covers the home lens. */
-  marketing?: string;
-  /** Absent when `isDefault` is true — the shipped default only covers the home lens. */
-  feature?: string;
-  /** Absent when `isDefault` is true — the shipped default only covers the home lens. */
-  architecture?: string;
-  /** Absent for output generated before the 'brief' lens existed (PRD 969), or
-   *  when `isDefault` is true — a project must regenerate to pick it up. */
-  brief?: string;
-  /** null for the shipped default (never generated). */
-  generatedAt: string | null;
-  /** True when `home` is the build-time shipped default, not this project's own
-   *  generated output — the renderer must label provenance rather than infer it. */
-  isDefault: boolean;
-}
-
+// ────────────────────────────────────────────── Project Pages (single home.html)
 export interface ProjectPagesGetResult {
-  /** Never null in practice — a project with no generated output still gets the
-   *  shipped default (isDefault: true). The type stays nullable defensively. */
-  output: ProjectPagesOutput | null;
+  /** Contents of session-manager-operations/project-pages/home.html, or null when it has not been generated. */
+  html: string | null;
+  /** home.html's mtime, or null when `html` is null. */
+  mtimeMs: number | null;
 }
 
 // ────────────────────────────────────────────── Host on Bilko.run
@@ -1593,7 +1548,8 @@ export interface SessionManagerAPI {
     gitBranch: (cwd: string) => Promise<string | null>;
     /** Publish target for 'build'-tagged Epics — null disables the Build toolbar button. */
     resolveBuildTarget: (cwd: string) => Promise<BuildTarget | null>;
-    rebootApp: () => void;
+    /** Default: request a drain-first restart. `force: true` restarts immediately, killing running jobs. */
+    rebootApp: (opts?: { force?: boolean }) => void;
     testFireHook: (args: TestFireHookArgs) => Promise<TestFireHookResult>;
     /** F7 — true under SM_E2E=1; renderer uses this to suppress wizard auto-trigger. */
     isE2E: () => Promise<boolean>;
@@ -1615,6 +1571,7 @@ export interface SessionManagerAPI {
     installPrdWriteGuard: (cwd: string) => Promise<InstallGuardResult>;
     installDestructiveGitGuard: (cwd: string) => Promise<InstallGuardResult>;
     installInlineImplementationGuard: (cwd: string) => Promise<InstallGuardResult>;
+    installSelfScheduleGuard: (cwd: string) => Promise<InstallGuardResult>;
     onNewSession: (handler: () => void) => () => void;
     onRebootSession: (handler: () => void) => () => void;
     archiveProject: (encoded: string) => Promise<{ ok: boolean; error?: string }>;
@@ -1832,6 +1789,7 @@ export interface SessionManagerAPI {
     resetJob: (slug: string) => Promise<{ ok: boolean; error?: string }>;
     runNow: () => Promise<{ ok: boolean }>;
     forceTick: () => Promise<ActionOutcome>;
+    pause: () => Promise<{ ok: boolean }>;
     resume: () => Promise<{ ok: boolean }>;
     /** Re-scan prds/ and merge into queue.json; broadcasts updated state. */
     rescan: () => Promise<ActionOutcome>;
@@ -1875,10 +1833,6 @@ export interface SessionManagerAPI {
     /** Return last 50 supervisor log entries, descending by ts. */
     getLog: () => Promise<SupervisorLogEntry[]>;
   };
-  teams: {
-    /** Enumerate ~/.claude/teams/<name>/config.json + inbox depths. */
-    list: () => Promise<TeamsListResult>;
-  };
   plugins: {
     /** Run `claude plugin install <slug>` in a hidden pty. Streams output
      *  via `onInstallProgress`. Returns { ok, exitCode } on exit.
@@ -1936,14 +1890,14 @@ export interface SessionManagerAPI {
     update: (cwd: string, patch: ProjectBriefPatch) => Promise<ProjectBriefUpdateResult>;
   };
   projectPages: {
-    /** Read output/*.html + manifest.json (or `{output: null}` if none exist yet). Never fires an LLM call. */
+    /** Read project-pages/home.html (`{html: null, mtimeMs: null}` if it does not exist yet). Never fires an LLM call. */
     get: (cwd: string) => Promise<ProjectPagesGetResult>;
     /** Start pushing `onChanged` events for this cwd's output dir. Refcounted per cwd; `ok:false` (reason 'ephemeral'|'invalid-cwd') means no live updates are possible, not an error. */
     watch: (cwd: string) => Promise<{ ok: boolean; reason?: 'ephemeral' | 'invalid-cwd' }>;
     /** Stop pushing `onChanged` events for this cwd — must be paired 1:1 with a prior `watch` call. */
     unwatch: (cwd: string) => Promise<{ ok: boolean }>;
-    /** Fires whenever a watched cwd's project-pages output dir changes, carrying the freshly recomputed output. */
-    onChanged: (handler: (payload: { cwd: string; output: ProjectPagesOutput | null }) => void) => () => void;
+    /** Fires whenever a watched cwd's home.html is added/changed/removed, carrying the freshly read result. */
+    onChanged: (handler: (payload: { cwd: string } & ProjectPagesGetResult) => void) => () => void;
   };
   bilkoHost: {
     /** Read compatibility-gate inputs + any existing bundle/publish state. Never fires an LLM call. */

package/src/preload/index.cjs

@@ -9,7 +9,7 @@ contextBridge.exposeInMainWorld('api', {
     pickDirectory: () => ipcRenderer.invoke('app:pick-directory'),
     gitBranch: (cwd) => ipcRenderer.invoke('app:git-branch', { cwd }),
     resolveBuildTarget: (cwd) => ipcRenderer.invoke('build:resolve-target', { cwd }),
-    rebootApp: () => ipcRenderer.send('app:reboot-app'),
+    rebootApp: (opts) => ipcRenderer.send('app:reboot-app', opts),
     archiveProject: (encoded) => ipcRenderer.invoke('app:archive-project', { encoded }),
     testFireHook: (args) => ipcRenderer.invoke('app:test-fire-hook', args),
     // F7: lets the renderer suppress the wizard auto-trigger under SM_E2E=1.
@@ -236,6 +236,7 @@ contextBridge.exposeInMainWorld('api', {
     resetJob: (slug) => ipcRenderer.invoke('schedule:reset-job', { slug }),
     runNow: () => ipcRenderer.invoke('schedule:run-now'),
     forceTick: () => ipcRenderer.invoke('schedule:force-tick'),
+    pause: () => ipcRenderer.invoke('schedule:pause'),
     resume: () => ipcRenderer.invoke('schedule:resume'),
     rescan: () => ipcRenderer.invoke('schedule:rescan'),
     clearQueue: () => ipcRenderer.invoke('schedule:clear-queue'),
@@ -281,9 +282,6 @@ contextBridge.exposeInMainWorld('api', {
     tickNow: () => ipcRenderer.invoke('supervisor:tick-now'),
     getLog: () => ipcRenderer.invoke('supervisor:get-log'),
   },
-  teams: {
-    list: () => ipcRenderer.invoke('teams:list'),
-  },
   plugins: {
     install: (payload) => ipcRenderer.invoke('plugins:install', payload),
     abort: (slug) => ipcRenderer.invoke('plugins:abort', slug),

package/src/seed/agents/project-home-builder.md

@@ -1,59 +1,42 @@
 ---
 name: project-home-builder
-description: Generates a project's 5 static Project Page HTML files (Home / Marketing Landing / Feature Description / Architecture Overview / Brief) by following the session-manager app's own MCP contract for the pipeline — portable to any machine with the app installed, no source-repo paths required.
+description: Reads a project and writes ONE self-contained overview page (home.html) for its Project Home tab, then saves it with a single project_home_write call.
 tools: Read, Grep, Glob, Bash, Write, Edit
-title: Project Pages — Builder
+title: Project Home — Builder
 ---
 
-You are the project-home-builder. Your whole job is to generate a project's Project Home pages by
-following the exact protocol the session-manager app hands you over MCP — never by re-deriving the
-pipeline from a repo you may not have, and never by inventing content.
-
-## Ground on the live contract, every run
-
-1. Call `project_home_get_contract` FIRST, before composing or reading anything else. It returns
-   everything you need: the operating protocol, the `ProjectPageSummary`/`ProjectPagePicks` JSON
-   schemas, the full component catalog for every lens (which slots exist, which variants are
-   available per slot, and each variant's own selection notes), the exact output paths, and the
-   full pipeline spec text.
-2. Follow the protocol the contract response describes. It is the single source of truth for this
-   run — do not fall back to a remembered or assumed version of the pipeline shape.
-3. If `project_home_get_contract` is unavailable, errors, or the MCP tools it depends on
-   (`project_home_validate_summary`, `project_home_render`, `project_home_status`) are not present
-   in this session's toolset: **report that plainly and stop.** Do not attempt to build, script, or
-   hand-roll any part of the pipeline yourself, and do not treat the missing contract as a coding
-   task for this Epic. The pipeline is owned by the session-manager app, not by the target project.
+You are the project-home-builder. Your whole job is to read the real project and produce a single
+self-contained HTML overview page, then hand it to the app with one `project_home_write` call.
+
+## What the page is
+
+One overview page for a person opening this project for the first time. It covers:
+
+- **What it is** — a one- or two-sentence description of the project.
+- **Who it's for** — the audience or user the project serves.
+- **Structure** — the main directories/modules and what each one does.
+- **How to run it** — the real install / build / start steps.
+- **Key commands** — the commands a contributor actually uses (test, lint, build, etc.).
 
 ## Hard rules
 
-- **Never fabricate.** Every field of the summary you author must trace to something concrete about
-  the real project: an Epic goal, a source file/dir, a documented convention, a git log entry, or an
-  existing project brief. An omitted field beats an invented one, every time — no invented stats, no
-  invented testimonials/quotes, no invented screenshots.
-- **Author the summary from real evidence.** Read the target project itself (its repo tree, its git
-  history, its own docs/brief, its active Epics) to build the `ProjectPageSummary` the contract's
-  schema describes — the contract gives you the shape, not the content.
-- **Validate before you render.** Call `project_home_validate_summary` with your composed summary
-  and fix every returned `{field, message}` error, re-validating until it reports `valid: true`.
-  Don't skip straight to rendering an unvalidated summary.
-- **Choose picks from the returned catalog only.** For every lens/slot the contract's catalog lists,
-  pick the one variant that genuinely fits this project's summary content, using the catalog's own
-  per-variant notes — never a variant name you assumed instead of one the catalog actually offered.
-- **Respect existing picks on a regenerate.** If the project already has picks for a slot, keep them
-  unless this run was explicitly asked to start over — same spirit as any other pinned-content
-  regenerate.
-- **Cost-gated, manual only.** This is a real-cost pass. Run it once per explicit "Generate" /
-  "Regenerate" request — never automatically, never in a loop.
+- **Never fabricate.** Every claim must trace to something you read in the project: its README,
+  manifest (`package.json`, `pyproject.toml`, ...), source tree, docs, or git history. An omitted
+  section beats an invented one — no invented stats, quotes, screenshots, or features.
+- **Read before you write.** Explore the repo itself (tree, manifest, docs, recent git log) first.
+- **Self-contained HTML only.** One complete HTML document with all CSS inline in a `<style>` block.
+  No `<script src>`, no `<link href="http...">`, no `@import`, no `url(http...)`, no external fonts
+  or images. Keep it under 1 MB. Support both light and dark color schemes.
+- **Cost-gated, manual only.** Run once per explicit "Generate" / "Regenerate" request — never
+  automatically, never in a loop.
 
 ## Protocol
 
-1. `project_home_get_contract` — read its protocol, schemas, and catalog before anything else.
-2. Gather real evidence about the target project and compose a `ProjectPageSummary` matching the
-   contract's schema.
-3. `project_home_validate_summary` with that summary — fix and repeat until `valid: true`.
-4. Choose one variant per lens/slot from the contract's catalog, forming a `ProjectPagePicks` object
-   in the shape the contract specifies.
-5. `project_home_render` with the validated summary and the picks — this is the only write path;
-   it re-validates server-side and writes nothing on schema failure.
-6. `project_home_status` — confirm the expected files now exist with a fresh `generatedAt`, and
-   report what was generated.
+1. Read the project: manifest, README/docs, directory structure, key scripts, recent commits.
+2. Compose the single HTML document described above.
+3. Call `project_home_write` exactly once with `{ html }`. It validates the document and writes it as
+   the project's Project Home page.
+4. If the tool rejects the HTML, fix the reported problem and call it again; if
+   `project_home_write` is unavailable in this session, report that plainly and stop — do not build
+   any tooling in the target project as a workaround.
+5. Report in one or two lines what the page covers.