claude-finops 0.17.0 → 0.18.0

package/README.md

@@ -10,8 +10,8 @@ It answers, in a few clicks:
 
 Everything runs on `127.0.0.1` with the Python standard library. No dependencies, and
 no data leaves the machine. No outbound calls except a once-a-day version check
-against the npm registry (disable with `--no-update-check`), and provider APIs only
-if you add a key.
+against the npm registry (disable with `--no-update-check`), and Anthropic's cost API
+only if you add an Admin key.
 
 ```bash
 npx claude-finops
@@ -85,8 +85,8 @@ no reason — each with the estimated money attached.
 
 ![Waste detection](https://raw.githubusercontent.com/mohit-raj-purohit/claude-finops/main/docs/img/waste.png)
 
-**Whether the model you are on is the right one.** Per-model cost and efficiency,
-plus a switch analysis that prices the same workload on a cheaper model.
+**Whether the model you are on is the right one.** Per-model cost and efficiency, and
+what each model really cost on the same kind of work, measured rather than repriced.
 
 ![Model analysis](https://raw.githubusercontent.com/mohit-raj-purohit/claude-finops/main/docs/img/models.png)
 
@@ -108,7 +108,7 @@ set.
   or estimated.
 - **Your data stays put.** It binds to `127.0.0.1`. No outbound calls except a
   once-a-day version check against the npm registry (disable with
-  `--no-update-check`), and provider APIs only if you add a key. The warehouse lives
+  `--no-update-check`), and Anthropic's cost API only if you add an Admin key. The warehouse lives
   in `~/.claude-finops`, so upgrading or deleting the package never touches it.
 - **It tells you what to change**, not just what happened — usually with a prompt you
   can paste into Claude Code.
@@ -135,7 +135,6 @@ rather than guessing:
 - Plan tier, allowance, and remaining credits
 - Message / request allowances
 - Billed invoice amounts
-- Assistant response text (only usage metadata is extracted)
 - Lines changed, commits, pull requests, bugs fixed
 
 Wherever one of these would appear, you get **"Unavailable from connected Claude
@@ -149,7 +148,7 @@ labelled as your own configured figures.
 
 **Command center** — Executive overview (spend, tokens, usage %, remaining, forecast,
 today vs yesterday) opening with the ⚡ Act now strip, running sessions you can
-interrupt, compact, hand over or close, an AI FinOps Advisor that answers "what should I do today?" from live data, and a
+interrupt, compact, hand over, rename or close, an AI FinOps Advisor that answers "what should I do today?" from live data, and a
 0–100 FinOps scorecard with per-dimension reasoning.
 
 **Usage** — Interactive timeline across 10 metrics and 6 time ranges with day
@@ -167,8 +166,9 @@ latency and efficiency; five leaderboards; prompt intelligence (spend by activit
 and a Claude Code view (tools, files, branches, cost per repository).
 
 **Optimize** — A waste detector with seven rules, each showing the exact prompts or
-sessions it flagged; a recommendation engine that stays quiet without evidence; and
-anomaly detection you can click through to the underlying sessions.
+sessions it flagged; Subagent models, measured per subagent type; a recommendation
+engine that stays quiet without evidence; and anomaly detection you can click through
+to the underlying sessions.
 
 **Plan** — Forecast with conservative/expected/high scenario bands, and budgets with
 Budget → Actual → Forecast → Variance and configurable alert thresholds.
@@ -177,6 +177,11 @@ Global search spans prompt text, sessions, projects, models, tools and dates. Gl
 filters (date, model, project, category, cost/token thresholds, sandbox toggle) update
 every chart and KPI. Everything exports to CSV/JSON, plus a printable PDF report.
 
+Every page, and the side panel when it shows a session or a prompt, has its own URL, so a
+refresh keeps you where you were and Back/Forward work. Next to the version, the header
+says whether the dashboard runs from the npm install or from a source checkout (with its
+commit).
+
 ---
 
 ## Configuration
@@ -187,9 +192,10 @@ Two files, both editable without touching code. The server picks up changes to
 ### `config/pricing.json`
 
 Model prices per million tokens, kept strictly separate from usage data so the table
-can be updated as prices change. A `claude-*` model with no entry is priced as
-`unpriced` ($0, flagged as such in the Model analysis view) rather than silently
-billed at another model's rate.
+can be updated as prices change. A new `claude-*` model with no entry yet is priced
+like the newest listed model of its family and marked as such, instead of showing $0.
+A model that isn't Claude (such as a free local model behind a `claude-qwen` launcher)
+costs $0.
 
 ### `config/settings.json`
 
@@ -320,8 +326,8 @@ claude-finops                 start the dashboard
 claude-finops --rebuild       re-read transcripts, then start
 claude-finops --stop          stop it
 claude-finops --where         where your data, settings and keys live
-claude-finops --set-key       store a provider API key (hidden prompt, 0600)
-claude-finops --keys          which provider keys are configured
+claude-finops --set-key       store the Anthropic Admin API key (hidden prompt, 0600)
+claude-finops --keys          whether that key is configured
 claude-finops --install-statusline    model, context % and 5-hour limit under every prompt
 claude-finops --uninstall-statusline  remove it again
 claude-finops --install-guard         warn near, and ask at, your per-session token budget
@@ -344,7 +350,7 @@ Everything the app writes lives outside the install folder, in one state directo
   data/cloud_cache.json   cached billing figures
   data/server.pid|.log    running server
   settings.local.json     budgets and limits set in the UI
-  secrets.local.json      provider API keys (0600)
+  secrets.local.json      Anthropic Admin API key (0600)
 ```
 
 Days, "today" and the billing period follow this computer's time zone (Claude Code
@@ -380,17 +386,22 @@ if the Claude desktop app is installed, its Cowork transcripts and
 server binds to `127.0.0.1` only, but treat the database and any export you
 generate as sensitive.
 
-**Hide prompts** (the eye icon in the top bar) hides prompt text and session titles as dots,
+Claude's replies are **not** stored in the database. A prompt's detail panel reads the reply
+straight from that session's transcript in `~/.claude/projects` when you open it, and says so
+if the transcript has been deleted.
+
+**Hide prompts** (the eye icon in the top bar) hides prompt text, Claude's replies and session titles as dots,
 for when you share your screen. Session titles fall back to their short id. The
-setting is remembered in that browser. It only changes what the page shows: the
+setting is remembered in that browser. The side panel has the same button, and using it there
+keeps the panel open. It only changes what the page shows: the
 database and exports still contain the full text.
 
 The app makes exactly one outbound request of its own: once a day it asks
 `registry.npmjs.org` what the latest `claude-finops` version is, so it can tell
 you when an upgrade is out (npm has no way to push one at you). It sends nothing
 about you or your usage. Turn it off with `NO_UPDATE_NOTIFIER=1` or
-`CLAUDE_FINOPS_NO_UPDATE_CHECK=1`. Provider cost APIs are called only if you
-configure a key (with `--set-key` or on the Settings page), and only
+`CLAUDE_FINOPS_NO_UPDATE_CHECK=1`. Anthropic's cost API is called only if you
+add an Admin key (with `--set-key` or on the Settings page), and only
 when you click Refresh on Billed vs local.
 
 ---
@@ -449,13 +460,18 @@ files on Windows.
   Code saves the name itself. In herdr, the agents sidebar gets the same name. Anywhere it can't
   type, the command lands on your clipboard.
 - **Recent** (clock icon in the top bar, or press `R`) opens a side panel on any page: running sessions first,
-  with Resume, Compact and Stop (Interrupt), then past sessions newest first. Click a session to
-  list its prompts, and click a prompt for its full details. Search matches your prompt text.
+  with Resume, Compact and Stop (Interrupt), working ones first, then past sessions by their last
+  prompt. The sort button at the top puts the last-used past session on top or at the bottom;
+  running sessions always stay on top. Click a session to list its prompts, newest first; its own
+  sort button flips that list to oldest first. Click a prompt for its full details. Search matches your prompt text.
   It covers all dates but keeps the project filters. Close and Force kill stay on
   Running sessions.
 - **Interrupt / Close / Force kill** (Running sessions) send the session's process a signal
   (in herdr, Interrupt presses Esc in the session's pane instead). Each asks you to click twice. Interrupt is macOS/Linux only: on Windows there is no way to
-  interrupt one console process without hitting the others in its window.
+  interrupt one console process without hitting the others in its window. A session that is
+  working is marked **Working now**, and closing it, or one used in the last 50 minutes, warns you
+  first. **Close selected** closes several idle sessions at once; a session that starts working
+  before you confirm is skipped.
 - **Install statusline** (Act now, or `--install-statusline`) adds a `statusLine` entry to
   `~/.claude/settings.json`, keeping a `.finops-backup` copy. It won't replace a statusline you
   already have.

package/finops/analytics.py

@@ -672,11 +672,12 @@ class Analytics:
     def sessions(self, f=None, limit=500, order="cost", offset=0):
         w, p = self.where(f)
         ob = {"cost": "cost DESC", "tokens": "tokens DESC", "duration": "s.duration_s DESC",
-              "recent": "s.started_at DESC", "prompts": "prompts DESC"}.get(order, "cost DESC")
+              "recent": "s.started_at DESC", "prompts": "prompts DESC",
+              "last_active": "last_ts DESC", "last_active_asc": "last_ts ASC"}.get(order, "cost DESC")
         rows = self.q(f"""
           SELECT s.id session_id, s.title, s.git_branch, s.cli_version, s.started_at,
                  s.ended_at, s.duration_s, s.files_touched, pr.name project, pr.id project_id,
-                 s.agent, s.source_file, pr.path project_path,
+                 MAX(r.ts) last_ts, s.agent, s.source_file, pr.path project_path,
                  s.billable_tokens session_tokens,
                  COUNT(DISTINCT r.prompt_id) prompts, COUNT(*) requests,
                  SUM(r.tool_call_count) tool_calls,
@@ -817,6 +818,28 @@ class Analytics:
             p["category_evidence"] = []
         return p
 
+    def prompt_reply(self, pid):
+        """Claude's reply to one prompt, read from the transcript when asked for."""
+        from . import guard as G
+        from .etl import DEFAULT_SOURCE, reply_from_transcript
+        p = self.one("SELECT pr.uuid, pr.session_id, s.source_file FROM prompts pr"
+                     " LEFT JOIN sessions s ON s.id=pr.session_id WHERE pr.id=?", (pid,))
+        if not p:
+            return {"error": "not found"}
+        path = p["source_file"]
+        if not path or not os.path.exists(path):
+            path = G.find_transcript(p["session_id"],
+                                     [os.environ.get("CLAUDE_PROJECTS") or DEFAULT_SOURCE])
+        if not p["uuid"] or not path:
+            return {"ok": False, "reason": "The transcript for this session is no longer on disk."}
+        try:
+            r = reply_from_transcript(path, p["uuid"])
+        except OSError:
+            return {"ok": False, "reason": "The transcript could not be read."}
+        if not r["found"]:
+            return {"ok": False, "reason": "This prompt was not found in its transcript."}
+        return {"ok": True, **r}
+
     def session_detail(self, sid, f=None):
         s = self.one("""SELECT s.*, pr.name project FROM sessions s
                         JOIN projects pr ON pr.id=s.project_id WHERE s.id=?""", (sid,))

package/finops/api.py

@@ -580,7 +580,7 @@ class Handler(BaseHTTPRequestHandler):
             return self.send_json(Diagnoser(a).breakdown(f))
         if route == "live":
             from .procs import list_sessions, ACTIONS
-            rows = sorted((dict(s, resume=f"claude --resume {s.get('session_id')}")
+            rows = sorted((dict(s, signalable=True, resume=f"claude --resume {s.get('session_id')}")
                            for s in list_sessions(a.pricing)), key=lambda x: -(x.get("context") or 0))
             return self.send_json({"sessions": rows, "actions": list(ACTIONS)})
         if route.startswith("session_prompts/"):
@@ -611,6 +611,13 @@ class Handler(BaseHTTPRequestHandler):
                 raise BadRequest("id must be an integer")
             d = a.prompt_detail(pid, f)
             return self.send_json(d, 404 if isinstance(d, dict) and d.get("error") else 200)
+        if route.startswith("prompt_reply/"):
+            try:
+                pid = int(route.split("/")[1])
+            except ValueError:
+                raise BadRequest("id must be an integer")
+            d = a.prompt_reply(pid)
+            return self.send_json(d, 404 if d.get("error") else 200)
         if route.startswith("session/"):
             d = a.session_detail(route.split("/", 1)[1], f)
             return self.send_json(d, 404 if isinstance(d, dict) and d.get("error") else 200)

package/finops/etl.py

@@ -183,6 +183,43 @@ def _text_of(content):
     return "\n".join(x for x in out if x)
 
 
+def _is_human_prompt(r):
+    """A user line that load_file counts as a prompt (not a tool result, meta or injected text)."""
+    if r.get("type") != "user" or r.get("toolUseResult") is not None or r.get("isMeta"):
+        return False
+    text = _text_of((r.get("message") or {}).get("content"))
+    return bool(text.strip()) and not text.lstrip().startswith(INJECTED_PREFIXES)
+
+
+REPLY_MAX_CHARS = 60_000
+
+
+def reply_from_transcript(path, prompt_uuid):
+    """Claude's text replies to one prompt, read from its transcript on demand (never stored).
+    Returns the text blocks in order, from the prompt up to the next human prompt."""
+    parts, found = [], False
+    with open(path, errors="replace") as fh:
+        for line in fh:
+            if not found and prompt_uuid not in line:
+                continue
+            try:
+                r = json.loads(line)
+            except json.JSONDecodeError:
+                continue
+            if not found:
+                found = r.get("uuid") == prompt_uuid
+                continue
+            if _is_human_prompt(r):
+                break
+            if r.get("type") == "assistant" and not r.get("isSidechain"):
+                text = _text_of((r.get("message") or {}).get("content")).strip()
+                if text:
+                    parts.append(text)
+    text = "\n\n".join(parts)
+    return {"found": found, "parts": len(parts), "text": text[:REPLY_MAX_CHARS],
+            "truncated": len(text) > REPLY_MAX_CHARS}
+
+
 IMAGE_CHARS = 1600 * 4   # an image costs ~1.6K tokens, not its base64 length
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claude-finops",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "Local FinOps dashboard for Claude Code: what you used, what it cost, why it cost that much, and what to change. Reads your own transcripts, no API key, no data leaves the machine.",
   "bin": {
     "claude-finops": "bin/claude-finops.js"

package/web/app.js

@@ -237,6 +237,7 @@ const IP = {
   terminal: '<rect x="2" y="4" width="20" height="16" rx="2"/><path d="m6 9 3 3-3 3M12 15h6"/>',
   message: '<path d="M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z"/>',
   sortDesc: '<path d="M11 5h10M11 9h7M11 13h4M3 17l3 3 3-3M6 18V4"/>',
+  sortAsc: '<path d="M11 5h4M11 9h7M11 13h10M3 7l3-3 3 3M6 6v14"/>',
   tag: '<path d="M12.6 2.6A2 2 0 0 0 11.2 2H4a2 2 0 0 0-2 2v7.2a2 2 0 0 0 .6 1.4l8.7 8.7a2.4 2.4 0 0 0 3.4 0l6.6-6.6a2.4 2.4 0 0 0 0-3.4z"/><circle cx="7.5" cy="7.5" r="1.5"/>',
   code: '<path d="m16 18 6-6-6-6M8 6l-6 6 6 6"/>',
   scan: '<path d="M3 7V5a2 2 0 0 1 2-2h2M17 3h2a2 2 0 0 1 2 2v2M21 17v2a2 2 0 0 1-2 2h-2M7 21H5a2 2 0 0 1-2-2v-2"/><circle cx="11.5" cy="11.5" r="3.5"/><path d="m17 17-3-3"/>',
@@ -319,12 +320,7 @@ function shell() {
   themeLabel();
   $('#refresh').onclick = () => { bust(); render(); };
   maskLabel();
-  $('#mask').onclick = () => {
-    MASKED = !MASKED;
-    try { localStorage.setItem(MASK_KEY, MASKED ? '1' : '0'); } catch (_) {}
-    maskLabel(); closeDrawer(); render();
-    if (RECENT.open) { RECENT.offset = 0; renderRecent(); }
-  };
+  $('#mask').onclick = () => toggleMask();
   $('#recent-btn').onclick = () => toggleRecent();
   updateChip();
   $('#sync').onclick = runSync;
@@ -396,6 +392,17 @@ async function scopeStrip() {
     cell('Active days', fmtInt(o.active_days));
 }
 
+// From a drawer, the drawer is drawn again in the new state instead of being closed.
+function toggleMask(fromDrawer) {
+  MASKED = !MASKED;
+  try { localStorage.setItem(MASK_KEY, MASKED ? '1' : '0'); } catch (_) {}
+  const dr = fromDrawer && S.drawerRoute;
+  maskLabel();
+  if (!dr) closeDrawer();
+  render();
+  if (RECENT.open) { RECENT.offset = 0; renderRecent(); }
+  if (dr) openDrawerRoute(dr);
+}
 function maskLabel() {
   const b = $('#mask');
   // The icon shows the current state: an open eye while prompts are visible.
@@ -555,10 +562,14 @@ function drawer(title, bodyHtml, sub) {
   const d = h(`<aside class="drawer"><header>
       <h2>${esc(title)}</h2>${sub ? `<span class="crumbs">${sub}</span>` : ''}
       <span class="spacer"></span>
+      <button class="iconbtn" data-mask aria-pressed="${MASKED}"
+        title="${MASKED ? 'Prompt text is hidden. Click to show it' : 'Hide prompt text and session titles'}"
+        >${I(MASKED ? 'eyeOff' : 'eye')} ${MASKED ? 'Show prompts' : 'Hide prompts'}</button>
       <button class="iconbtn" data-x>Close ${I('x')}</button></header>
     <div class="content">${bodyHtml}</div></aside>`);
   scrim.onclick = closeDrawer;
   d.querySelector('[data-x]').onclick = closeDrawer;
+  d.querySelector('[data-mask]').onclick = () => toggleMask(true);
   document.body.append(scrim, d);
   return d;
 }
@@ -597,6 +608,8 @@ async function openPrompt(id) {
         <span>${fmtInt(p.char_len)} chars · ${fmtInt(p.word_len)} words</span>
         ${p.source ? `<span class="pill">${esc(p.source)}</span>` : ''}
       </div>`, {badge: BADGE.actual})}
+    ${card('Claude\'s response', '<div id="pr-reply"><div class="note">Reading the transcript…</div></div>',
+      {badge: BADGE.actual, hint: 'read from the transcript when you open this; not stored'})}
     ${card('Requests in this turn', table([
       {h: 'Time', f: r => `<span class="mono">${esc((r.ts||'').slice(11,19))}</span>`},
       {h: 'Model', f: r => `<span class="swatch" style="background:${modelColor(r.model)}"></span>${esc(modelName(r.model))}`},
@@ -627,10 +640,22 @@ async function openPrompt(id) {
       <dt>Models</dt><dd>${esc(p.models || '—')}</dd>
       <dt>Tool calls</dt><dd>${fmtInt(p.tool_calls)}</dd>
       <dt>Avg latency</dt><dd>${p.latency_ms ? (p.latency_ms/1000).toFixed(1)+'s' : NA()}</dd>
-      <dt>Response text</dt><dd>${NA()} — transcripts are parsed for usage metadata, not stored replies</dd>
     </dl>`)}`;
   const link = d.querySelector('[data-sess]');
   if (link) link.onclick = () => openSession(link.dataset.sess);
+  drawReply(d.querySelector('#pr-reply'), id);
+}
+
+async function drawReply(box, id) {
+  let r;
+  try { r = await fetch(`/api/prompt_reply/${id}`).then(x => x.json()); }
+  catch (e) { r = {ok: false, reason: e.message}; }
+  if (!box.isConnected) return;   // drawer closed or replaced while reading
+  if (!r.ok) { box.innerHTML = `<div class="na">${esc(r.reason || r.error || 'Could not read the reply.')}</div>`; return; }
+  box.innerHTML = r.text
+    ? `<div class="prompt-text">${esc(pt(r.text))}</div>${r.truncated
+      ? '<div class="note" style="margin-top:6px">Long reply: only the first part is shown.</div>' : ''}`
+    : '<div class="na">No text reply: Claude only ran tools for this prompt.</div>';
 }
 
 async function openSession(id) {
@@ -2119,6 +2144,9 @@ VIEWS.live = async (page) => {
   const canInterrupt = liveActions.includes('interrupt');
   const busy = list.filter(x => x.status === 'busy');
   const sevOf = x => x.severity === 'high' ? 'high' : x.severity === 'medium' ? 'medium' : 'low';
+  // Idle, but used in the last 50 minutes: probably still in use, so closing it asks louder.
+  const RECENT_S = 50 * 60;
+  const recentlyUsed = x => x.status !== 'busy' && x.last_write_s != null && x.last_write_s < RECENT_S;
   page.innerHTML = `
     ${usage0 ? card('Plan usage right now', `<div id="live-usage">${usageBody(usage0)}</div>`,
       {badge: BADGE.actual, hint: 'Claude Code\'s own /usage: plan limits, not cost. Costs no tokens.',
@@ -2136,10 +2164,18 @@ VIEWS.live = async (page) => {
       <b>Close</b> exits the session cleanly; copy its resume command to bring it back.
       <b>Force kill</b> is for a session that won't close. Each button asks you to click twice.
       <span class="spacer"></span><button class="btn pb-copy" id="live-refresh">${I('reload')} Refresh</button></div>
+    ${list.some(x => x.signalable) ? `<div class="live-bulk">
+      <label><input type="checkbox" id="live-all"> Select all idle</label>
+      <button class="act warn" id="live-close-sel" disabled>${I('stop')} Close selected</button>
+      <span class="note">Sessions that are working are never closed in bulk.</span>
+      <span class="live-msg" id="live-bulk-msg" role="status"></span></div>` : ''}
     <div class="stack">${list.map((x, i) => `
-      <div class="item sev-${sevOf(x)}" data-i="${i}">
-        <div class="hd">${x.status === 'busy' ? '<span class="live-dot"></span>' : '<span class="idle-dot"></span>'}
+      <div class="item sev-${sevOf(x)}${x.status === 'busy' ? ' working' : ''}" data-i="${i}">
+        <div class="hd">${x.signalable ? `<input type="checkbox" class="live-pick" aria-label="Select for bulk close"${x.status === 'busy'
+            ? ' disabled title="Working now: bulk close skips it"' : ''}>` : ''}
+          ${x.status === 'busy' ? '<span class="live-dot"></span>' : '<span class="idle-dot"></span>'}
           <span class="sname">${esc((!MASKED && x.name) || shortId(x.session_id))}</span> <span class="note">· ${esc(x.project)}${x.pid ? ` · pid ${x.pid}` : ''}${x.model ? ` · ${esc(x.model)}` : ''}</span>
+          ${x.status === 'busy' ? '<span class="status healthy">Working now</span>' : ''}
           ${x.hosts_dashboard ? '<span class="status high">runs this dashboard</span>' : ''}
           ${limitBadge(x.session_id)}
           <span class="spacer"></span>
@@ -2186,6 +2222,54 @@ VIEWS.live = async (page) => {
           </div></div>` : ''}
       </div>`).join('') || '<div class="empty">No Claude Code sessions are running</div>'}</div>`;
   $('#live-refresh', page).onclick = () => render();
+  const all = $('#live-all', page), closeSel = $('#live-close-sel', page), bulkMsg = $('#live-bulk-msg', page);
+  if (all) {
+    const picks = () => [...page.querySelectorAll('.live-pick')];
+    const chosen = () => picks().filter(c => c.checked && !c.disabled).map(c => list[+c.closest('.item').dataset.i]);
+    const sync = () => {
+      const n = chosen().length, open = picks().filter(c => !c.disabled);
+      closeSel.disabled = !n;
+      closeSel.classList.remove('armed');
+      closeSel.innerHTML = `${I('stop')} Close selected${n ? ` (${n})` : ''}`;
+      all.checked = open.length > 0 && open.every(c => c.checked);
+      all.indeterminate = n > 0 && !all.checked;
+    };
+    all.onchange = () => { picks().forEach(c => { if (!c.disabled) c.checked = all.checked; }); sync(); };
+    picks().forEach(c => c.onchange = sync);
+    closeSel.onclick = async () => {
+      const sel = chosen();
+      if (!sel.length) return;
+      if (!closeSel.classList.contains('armed')) {   // two clicks, like each row's Close
+        const recent = sel.filter(recentlyUsed).length;
+        closeSel.classList.add('armed');
+        closeSel.textContent = `Click again to close ${sel.length} session${sel.length > 1 ? 's' : ''}` + (recent
+          ? `. ${recent} of them ${recent > 1 ? 'were' : 'was'} used in the last 50 min, maybe still in use` : '');
+        setTimeout(() => { if (closeSel.classList.contains('armed')) sync(); }, recent ? 6000 : 4000);
+        return;
+      }
+      closeSel.classList.remove('armed'); closeSel.disabled = true; closeSel.textContent = 'Closing…';
+      // Status is read again right before closing: a session that started working since the
+      // page was drawn is skipped, not stopped mid-task.
+      let now = [];
+      try { now = (await fetch('/api/live').then(r => r.json())).sessions || []; } catch {}
+      const status = new Map(now.map(s => [s.pid, s.status]));
+      let closed = 0, skipped = 0;
+      const failed = [];
+      for (const x of sel) {
+        if (!status.has(x.pid)) continue;                       // already gone
+        if (status.get(x.pid) === 'busy') { skipped++; continue; }
+        try {
+          const r = await sessionAction(x.pid, 'close');
+          if (r.ok) closed++; else failed.push(`${(!MASKED && x.name) || shortId(x.session_id)}: ${r.error}`);
+        } catch (e) { failed.push(e.message); }
+      }
+      bulkMsg.className = 'live-msg ' + (failed.length ? 'err' : 'ok');
+      bulkMsg.textContent = [`Closed ${closed}.`, skipped ? `Skipped ${skipped} that started working.` : '',
+        failed.length ? `Failed: ${failed.join('; ')}` : ''].filter(Boolean).join(' ');
+      setTimeout(() => render(), failed.length ? 4000 : 1500);
+    };
+    sync();
+  }
   const ub = $('#usage-refresh', page);
   if (ub) ub.onclick = async () => {
     ub.disabled = true; ub.textContent = 'Reading…';
@@ -2255,9 +2339,15 @@ VIEWS.live = async (page) => {
         if (!b.classList.contains('armed')) {
           row.querySelectorAll('button.armed').forEach(o => { o.classList.remove('armed'); o.textContent = o.dataset.label; });
           b.dataset.label = label; b.classList.add('armed');
+          const stopping = ['close', 'kill'].includes(b.dataset.a);
+          const loud = stopping && (x.status === 'busy' || recentlyUsed(x));
           b.textContent = x.hosts_dashboard && !['interrupt', 'compact'].includes(b.dataset.a)
-            ? 'Sure? This is the session that launched the dashboard (the dashboard keeps running)' : `Click again to ${b.dataset.a}`;
-          setTimeout(() => { if (b.classList.contains('armed')) { b.classList.remove('armed'); b.textContent = label; } }, 4000);
+            ? 'Sure? This is the session that launched the dashboard (the dashboard keeps running)'
+            : stopping && x.status === 'busy' ? 'It is working right now. Click again to stop it mid-task'
+            : loud ? `Used ${dur(x.last_write_s)} ago, maybe still in use. Click again to ${b.dataset.a} anyway`
+            : `Click again to ${b.dataset.a}`;
+          setTimeout(() => { if (b.classList.contains('armed')) { b.classList.remove('armed'); b.textContent = label; } },
+            loud ? 6000 : 4000);
           return;
         }
         b.classList.remove('armed'); b.disabled = true; b.textContent = 'Working…';
@@ -3562,7 +3652,11 @@ async function render() {
    Past sessions and their prompts from any page, without leaving it. Resume and
    stop act on sessions, so the list is grouped by session; running ones sit on
    top. Close and Force kill stay on Running sessions, one click away from here. */
-const RECENT = {open: false, offset: 0, limit: 30, q: '', open_ids: new Set()};
+// The header sort button orders past sessions: last used on top, or (oldest) at the bottom.
+// Running sessions always stay on top.
+// A session's prompts list newest first; its sort button flips that session to oldest first.
+const RECENT = {open: false, offset: 0, limit: 30, q: '', open_ids: new Set(), oldest: false, oldest_ids: new Set()};
+const oldestFirst = sid => RECENT.oldest_ids.has(sid);
 // Recent means all time: keep project filters, drop the date range and thresholds.
 const recentQs = () => { const p = new URLSearchParams(qs());
   ['start', 'end', 'min_cost', 'min_tokens'].forEach(k => p.delete(k)); return p.toString(); };
@@ -3578,12 +3672,25 @@ function toggleRecent(force) {
   const scrim = h('<div class="recent-scrim"></div>');
   const p = h(`<aside class="recent" aria-label="Recent sessions"><header>
       <h2>Recent</h2><span class="note">all time · project filters apply</span>
-      <span class="spacer"></span><button class="iconbtn" data-x>Close ${I('x')}</button></header>
+      <span class="spacer"></span>
+      <button class="iconbtn sq" data-sort-all aria-label="Session order"></button>
+      <button class="iconbtn" data-x>Close ${I('x')}</button></header>
     <div class="recent-search"><span class="mag">${I('search')}</span>
       <input id="recent-q" placeholder="Search your prompts…" value="${esc(RECENT.q)}"></div>
     <div class="content"><div class="loading">Loading…</div></div></aside>`);
   scrim.onclick = () => toggleRecent(false);
   p.querySelector('[data-x]').onclick = () => toggleRecent(false);
+  const sortAll = p.querySelector('[data-sort-all]');
+  const sortAllLabel = () => {
+    sortAll.innerHTML = I(RECENT.oldest ? 'sortAsc' : 'sortDesc');
+    sortAll.title = RECENT.oldest ? 'Sessions: last used at the bottom. Click to put it on top'
+      : 'Sessions: last used on top. Click to put it at the bottom';
+  };
+  sortAllLabel();
+  sortAll.onclick = () => {
+    RECENT.oldest = !RECENT.oldest; sortAllLabel();
+    RECENT.offset = 0; renderRecent();
+  };
   let t;
   p.querySelector('#recent-q').oninput = e => { clearTimeout(t);
     t = setTimeout(() => { RECENT.q = e.target.value.trim(); RECENT.offset = 0; renderRecent(); }, 260); };
@@ -3601,11 +3708,13 @@ async function renderRecent() {
       .then(r => r.json()).catch(() => ({sessions: []})),
     RECENT.q
       ? fetch(`/api/prompts?${recentQs()}&order=recent&limit=${RECENT.limit}&offset=${RECENT.offset}&q=${encodeURIComponent(RECENT.q)}`).then(r => r.json())
-      : fetch(`/api/sessions?${recentQs()}&order=recent&limit=${RECENT.limit}&offset=${RECENT.offset}`).then(r => r.json())]);
+      : fetch(`/api/sessions?${recentQs()}&order=${RECENT.oldest ? 'last_active_asc' : 'last_active'}&limit=${RECENT.limit}&offset=${RECENT.offset}`).then(r => r.json())]);
   if (!$('.recent')) return;   // closed while loading
   const rows = res.rows || [];
   const liveIds = new Set(((live || {}).sessions || RECENT.live || []).map(x => x.session_id));
-  if (live) RECENT.live = live.sessions || [];
+  // Working sessions first, then the one written to most recently.
+  if (live) RECENT.live = (live.sessions || []).slice().sort((a, b) =>
+    (b.status === 'busy') - (a.status === 'busy') || (a.last_write_s ?? 1e12) - (b.last_write_s ?? 1e12));
   const html = RECENT.q ? recentPrompts(rows) : recentSessions(rows, liveIds);
   const shown = RECENT.offset + rows.length;
   const moreBtn = shown < (res.total || 0)
@@ -3640,14 +3749,19 @@ const recentSessions = (rows, liveIds) => rows.map(r => `
       <span class="recent-title">${esc(stitle(r))}</span><span class="spacer"></span>
       <span class="note">${fmtUSD(r.cost)}</span></div>
     <div class="mt"><span>${esc(r.project || '')}</span><span>${fmtInt(r.prompts)} prompts</span>
-      <span>${fmtWhen(r.started_at)}</span></div>
+      <span title="Last prompt">${fmtWhen(r.last_ts || r.started_at)}</span></div>
     <div class="live-actions">
       ${r.resume ? `<button class="act ghost" data-resume="${esc(r.resume)}" title="Copy: ${esc(r.resume)}">${I('copy')} Resume</button>` : ''}
       <button class="act ghost" data-open-sess="${esc(r.session_id)}">Details</button>
-      <span class="spacer"></span><span class="note recent-caret">${I(RECENT.open_ids.has(r.session_id) ? 'chevDown' : 'chevRight')} prompts</span></div>
+      <span class="spacer"></span>${sortBtn(r.session_id)}<span class="note recent-caret">${I(RECENT.open_ids.has(r.session_id) ? 'chevDown' : 'chevRight')} prompts</span></div>
     <div class="recent-prompts"${RECENT.open_ids.has(r.session_id) ? '' : ' hidden'}></div></div>`).join('')
   || '<div class="empty">No sessions for these filters</div>';
 
+const sortBtn = sid => { const old = oldestFirst(sid);
+  return `<button class="act ghost recent-sort" data-sort title="${old
+    ? 'Prompts: oldest first. Click for newest first' : 'Prompts: newest first. Click for oldest first'}"
+    aria-label="Prompt order">${I(old ? 'sortAsc' : 'sortDesc')}</button>`; };
+
 const promptLine = x => `<a href="#" class="recent-p" data-prompt="${x.prompt_id}" title="${esc(pt(x.preview))}">
   <span class="mono sub">${esc((x.ts || '').slice(5, 16).replace('T', ' '))}</span>
   <span class="recent-pv">${esc(pt(x.preview) || '—')}</span>
@@ -3663,7 +3777,8 @@ async function loadSessionPrompts(host, sid) {
   host.innerHTML = '<div class="note">Loading…</div>';
   try {
     const s = await fetch(`/api/session/${encodeURIComponent(sid)}`).then(r => r.json());
-    const ps = s.prompts || [];
+    const ps = s.prompts || [];   // oldest first from the API
+    if (!oldestFirst(sid)) ps.reverse();
     host.innerHTML = ps.length ? ps.map(promptLine).join('') : '<div class="note">No prompts recorded</div>';
     wireRecent(host);
   } catch (e) { host.innerHTML = `<div class="live-msg err">${esc(e.message)}</div>`; }
@@ -3682,6 +3797,15 @@ function wireRecent(root) {
   root.querySelectorAll('.item[data-sess]').forEach(it => {
     const host = it.querySelector('.recent-prompts'), sid = it.dataset.sess;
     if (!host.hidden && !host.childElementCount) loadSessionPrompts(host, sid);
+    const sb = it.querySelector('[data-sort]');
+    sb.onclick = e => {
+      e.stopPropagation();
+      RECENT.oldest_ids.has(sid) ? RECENT.oldest_ids.delete(sid) : RECENT.oldest_ids.add(sid);
+      const t = h(sortBtn(sid));
+      sb.innerHTML = t.innerHTML; sb.title = t.title;
+      if (host.hidden) it.click();   // sorting a closed list opens it
+      else loadSessionPrompts(host, sid);
+    };
     it.onclick = e => {
       if (e.target.closest('button, a, .recent-prompts')) return;
       host.hidden = !host.hidden;

package/web/styles.css

@@ -488,6 +488,10 @@ table.tbl .sub { font-size:10.5px; color:var(--muted); }
 .live-msg { font-size: 11.5px; }
 .live-msg.ok { color: var(--good-ink); } .live-msg.err { color: var(--critical-ink); }
 .item.gone { opacity: .45; }
+.item.working { outline: 2px solid var(--good); outline-offset: -1px; }
+.live-pick { margin: 0; cursor: pointer; }
+.live-bulk { display: flex; gap: 10px; flex-wrap: wrap; align-items: center; margin: 4px 0 8px; }
+.live-bulk label { display: inline-flex; gap: 6px; align-items: center; font-size: 12px; font-weight: 600; cursor: pointer; }
 
 /* An explicit display beats the hidden attribute, so the panel has to opt back
    out or it is permanently open. */
@@ -574,7 +578,9 @@ table.tbl .sub { font-size:10.5px; color:var(--muted); }
 .recent > header { padding:13px 16px; background:var(--surface); border-bottom:1px solid var(--border);
           display:flex; align-items:center; gap:10px; }
 .recent > header h2 { margin:0; font-size:14.5px; font-weight:640; }
+.recent > header .iconbtn.sq { width:32px; padding:0; justify-content:center; }
 .recent-search { position:relative; padding:10px 16px 0; }
+.recent-sort { padding:3px 6px; margin-right:6px; }
 .recent-search input { width:100%; box-sizing:border-box; padding:7px 10px 7px 28px; border-radius:8px;
           font-size:12.5px; border:1px solid var(--border); background:var(--surface-2); color:var(--text); }
 .recent-search .mag { position:absolute; left:26px; top:calc(50% + 5px); transform:translateY(-50%);