clementine-agent 1.2.1 → 1.2.3

package/dist/cli/dashboard.js

@@ -18,7 +18,7 @@ import cron from 'node-cron';
 import { TunnelManager } from './tunnel.js';
 import { AgentManager } from '../agent/agent-manager.js';
 import { discoverMcpServers, getClaudeIntegrations } from '../agent/mcp-bridge.js';
-import { AGENTS_DIR } from '../config.js';
+import { AGENTS_DIR, SESSIONS_FILE } from '../config.js';
 import { parseTasks } from '../tools/shared.js';
 import { todayISO } from '../gateway/cron-scheduler.js';
 import { goalsRouter } from './routes/goals.js';
@@ -1439,44 +1439,92 @@ export async function cmdDashboard(opts) {
     writeFileSync(tokenPath, dashboardToken, { mode: 0o600 });
     // ── Remote access + session management ─────────────────────────────
     const remoteConfig = loadRemoteConfig();
-    const sessions = new Map(); // sessionId → expiresAt
+    const sessions = new Map();
     let tunnelManager = null;
-    const SESSION_MAX_AGE = 24 * 60 * 60 * 1000; // 24 hours
+    const SESSION_TTL_DEFAULT = 24 * 60 * 60 * 1000; // 24 hours
+    const SESSION_TTL_PERSISTENT = 30 * 24 * 60 * 60 * 1000; // 30 days
     const loginRateLimit = { count: 0, resetAt: Date.now() + 15 * 60 * 1000 };
+    function loadSessions() {
+        if (!existsSync(SESSIONS_FILE))
+            return;
+        try {
+            const raw = JSON.parse(readFileSync(SESSIONS_FILE, 'utf-8'));
+            const now = Date.now();
+            for (const s of raw) {
+                if (s && s.id && s.expiresAt > now)
+                    sessions.set(s.id, s);
+            }
+        }
+        catch { /* corrupt file — start fresh */ }
+    }
+    function persistSessions() {
+        try {
+            writeFileSync(SESSIONS_FILE, JSON.stringify(Array.from(sessions.values()), null, 2), { mode: 0o600 });
+        }
+        catch { /* best-effort; in-memory store still works */ }
+    }
+    loadSessions();
     function isRemoteRequest(req) {
         // cloudflared sets CF-Connecting-IP for tunneled traffic
         return Boolean(req.headers['cf-connecting-ip']);
     }
-    function hasValidSession(req) {
+    function readSessionId(req) {
         const cookie = req.headers.cookie ?? '';
         const match = cookie.match(/__clem_session=([a-f0-9]+)/);
-        if (!match)
+        return match ? match[1] : null;
+    }
+    function hasValidSession(req) {
+        const sessionId = readSessionId(req);
+        if (!sessionId)
             return false;
-        const sessionId = match[1];
-        const expiresAt = sessions.get(sessionId);
-        if (!expiresAt || Date.now() > expiresAt) {
-            sessions.delete(sessionId);
+        const record = sessions.get(sessionId);
+        if (!record || Date.now() > record.expiresAt) {
+            if (record) {
+                sessions.delete(sessionId);
+                persistSessions();
+            }
             return false;
         }
+        record.lastUsedAt = Date.now();
+        // Don't persist on every request — the cleanup interval will pick it up
         return true;
     }
-    function createSession(res) {
+    function createSession(res, req, persistent = false) {
         const sessionId = randomBytes(32).toString('hex');
-        sessions.set(sessionId, Date.now() + SESSION_MAX_AGE);
+        const ttl = persistent ? SESSION_TTL_PERSISTENT : SESSION_TTL_DEFAULT;
+        const now = Date.now();
+        const record = {
+            id: sessionId,
+            expiresAt: now + ttl,
+            persistent,
+            createdAt: now,
+            lastUsedAt: now,
+            userAgent: typeof req.headers['user-agent'] === 'string' ? req.headers['user-agent'].slice(0, 200) : undefined,
+        };
+        sessions.set(sessionId, record);
+        persistSessions();
         res.cookie('__clem_session', sessionId, {
             httpOnly: true,
             sameSite: 'lax',
-            maxAge: SESSION_MAX_AGE,
+            maxAge: ttl,
             path: '/',
         });
+        return sessionId;
+    }
+    function revokeSession(sessionId) {
+        const existed = sessions.delete(sessionId);
+        if (existed)
+            persistSessions();
+        return existed;
     }
-    // Clean expired sessions every 10 minutes
+    // Clean expired sessions every 10 minutes; also persist lastUsedAt updates
     setInterval(() => {
         const now = Date.now();
-        for (const [id, exp] of sessions) {
-            if (now > exp)
+        for (const [id, rec] of sessions) {
+            if (now > rec.expiresAt)
                 sessions.delete(id);
         }
+        persistSessions();
     }, 10 * 60 * 1000);
     // Quick ping — bypasses all middleware, tests /api path routing
     app.get('/api/ping', (_req, res) => { res.json({ pong: true }); });
@@ -1734,7 +1782,7 @@ export async function cmdDashboard(opts) {
             res.status(429).json({ error: 'Too many login attempts. Try again later.' });
             return;
         }
-        const { token } = req.body ?? {};
+        const { token, remember } = req.body ?? {};
         if (!token || typeof token !== 'string') {
             res.status(400).json({ error: 'Token is required' });
             return;
@@ -1748,13 +1796,48 @@ export async function cmdDashboard(opts) {
             res.status(401).json({ error: 'Invalid access token' });
             return;
         }
-        createSession(res);
+        createSession(res, req, Boolean(remember));
         res.json({ ok: true });
     });
-    app.get('/auth/logout', (_req, res) => {
+    app.get('/auth/logout', (req, res) => {
+        const sessionId = readSessionId(req);
+        if (sessionId)
+            revokeSession(sessionId);
         res.clearCookie('__clem_session', { path: '/' });
         res.redirect('/');
     });
+    // List active sessions (cookie-authenticated; bearer-token gate doesn't apply at /auth/*)
+    app.get('/auth/sessions', (req, res) => {
+        if (!hasValidSession(req)) {
+            res.status(401).json({ error: 'Unauthorized' });
+            return;
+        }
+        const currentId = readSessionId(req);
+        const list = Array.from(sessions.values())
+            .sort((a, b) => b.lastUsedAt - a.lastUsedAt)
+            .map(s => ({
+            id: s.id,
+            createdAt: s.createdAt,
+            lastUsedAt: s.lastUsedAt,
+            expiresAt: s.expiresAt,
+            persistent: s.persistent,
+            userAgent: s.userAgent ?? null,
+            current: s.id === currentId,
+        }));
+        res.json({ sessions: list });
+    });
+    app.delete('/auth/sessions/:id', (req, res) => {
+        if (!hasValidSession(req)) {
+            res.status(401).json({ error: 'Unauthorized' });
+            return;
+        }
+        const targetId = req.params.id;
+        const existed = revokeSession(targetId);
+        if (readSessionId(req) === targetId) {
+            res.clearCookie('__clem_session', { path: '/' });
+        }
+        res.json({ ok: existed });
+    });
     // ── Anthropic OAuth routes ──────────────────────────────────────
     // Check current auth status by spawning a lightweight SDK query
     // Anthropic auth status — check daemon's .env for API key presence instead of importing the SDK
@@ -4521,6 +4604,24 @@ If the tool returns nothing or errors, return an empty array \`[]\`.`,
     // instead of having to wait for auto-extraction to drift in the right
     // direction. Soft-delete via deleted_at; FTS trigger keeps deleted
     // content out of search results.
+    // Memory Health snapshot — single endpoint feeding the dashboard tab.
+    // Read-only aggregate over the existing tables; no caching needed (cheap).
+    app.get('/api/memory/health', async (_req, res) => {
+        try {
+            const gateway = await getGateway();
+            const store = gateway.assistant?.memoryStore;
+            if (!store?.getMemoryHealth) {
+                res.status(503).json({ error: 'Memory store not available' });
+                return;
+            }
+            const graphStore = gateway.assistant?.graphStore;
+            const health = store.getMemoryHealth({ graphStore, topCitedLimit: 10 });
+            res.json({ ok: true, health });
+        }
+        catch (err) {
+            res.status(500).json({ error: String(err) });
+        }
+    });
     app.get('/api/memory/chunks/:id', async (req, res) => {
         try {
             const id = Number(req.params.id);
@@ -10355,31 +10456,24 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
   <!-- Sidebar -->
   <nav class="sidebar">
     <div class="nav-section">
-      <div class="nav-section-title">Command Center</div>
+      <div class="nav-section-title">Today</div>
       <div class="nav-item active" data-page="home">
         <span class="nav-icon">&#9679;</span> Home
       </div>
       <div class="nav-item" data-page="chat">
         <span class="nav-icon">&#128172;</span> Chat
       </div>
-    </div>
-    <div class="nav-section">
-      <div class="nav-section-title">Build</div>
-      <div class="nav-item" data-page="builder">
-        <span class="nav-icon">&#128736;</span> Builder
-      </div>
-      <div class="nav-item" data-page="team">
-        <span class="nav-icon">&#128101;</span> The Office
+      <div class="nav-item" data-page="daily-plan">
+        <span class="nav-icon">&#128197;</span> Daily Plan
       </div>
-      <div class="nav-item" data-page="projects">
-        <span class="nav-icon">&#128194;</span> Projects
+      <div class="nav-item" data-page="goals">
+        <span class="nav-icon">&#127919;</span> Goals
       </div>
     </div>
     <div class="nav-section">
-      <div class="nav-section-title">Team</div>
-      <div id="team-nav"></div>
-      <div class="team-hire-btn" onclick="showAgentCreateModal()">
-        <span style="font-size:14px">+</span> Hire Agent
+      <div class="nav-section-title">Brain</div>
+      <div class="nav-item" data-page="intelligence">
+        <span class="nav-icon">&#129504;</span> Brain
       </div>
     </div>
     <div class="nav-section">
@@ -10388,29 +10482,64 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
         <span class="nav-icon">&#9200;</span> Scheduled Tasks
         <span class="nav-badge" id="nav-cron-count">0</span>
       </div>
-      <div class="nav-item" onclick="openSkillStudio()">
-        <span class="nav-icon">&#128161;</span> Skill Studio
+      <div class="nav-item" onclick="openAutomationsTab('skills')">
+        <span class="nav-icon">&#128737;</span> Skills
         <span class="nav-badge" id="nav-skill-count" style="display:none">0</span>
       </div>
+      <div class="nav-item" onclick="openAutomationsTab('timers')">
+        <span class="nav-icon">&#9201;</span> Timers
+      </div>
       <div class="nav-item" data-page="workflows">
         <span class="nav-icon">&#128260;</span> Workflows
       </div>
+      <div class="nav-item" data-page="unleashed">
+        <span class="nav-icon">&#128640;</span> Unleashed
+        <span class="nav-badge" id="nav-unleashed-count" style="display:none">0</span>
+      </div>
     </div>
     <div class="nav-section">
-      <div class="nav-section-title">Insights</div>
+      <div class="nav-section-title">Team</div>
+      <div class="nav-item" data-page="team">
+        <span class="nav-icon">&#128101;</span> The Office
+      </div>
       <div class="nav-item" data-page="team-status">
         <span class="nav-icon">&#128202;</span> Team Status
       </div>
-      <div class="nav-item" data-page="intelligence">
-        <span class="nav-icon">&#129504;</span> Brain
+      <div id="team-nav"></div>
+      <div class="team-hire-btn" onclick="showAgentCreateModal()">
+        <span style="font-size:14px">+</span> Hire Agent
+      </div>
+    </div>
+    <div class="nav-section">
+      <div class="nav-section-title">Build</div>
+      <div class="nav-item" data-page="builder">
+        <span class="nav-icon">&#128736;</span> Builder
+      </div>
+      <div class="nav-item" onclick="openSkillStudio()">
+        <span class="nav-icon">&#128161;</span> Skill Studio
       </div>
+      <div class="nav-item" data-page="projects">
+        <span class="nav-icon">&#128194;</span> Projects
+      </div>
+    </div>
+    <div class="nav-section">
+      <div class="nav-section-title">Insights</div>
       <div class="nav-item" data-page="claims">
         <span class="nav-icon">&#128274;</span> Trust &amp; Claims
         <span class="nav-badge" id="nav-trust-score" style="display:none">--</span>
       </div>
+      <div class="nav-item" data-page="metrics">
+        <span class="nav-icon">&#128200;</span> Metrics
+      </div>
+      <div class="nav-item" data-page="memory-health">
+        <span class="nav-icon">&#129504;</span> Memory Health
+      </div>
       <div class="nav-item" data-page="logs">
         <span class="nav-icon">&#128220;</span> Logs
       </div>
+      <div class="nav-item" data-page="sessions">
+        <span class="nav-icon">&#128221;</span> Sessions
+      </div>
     </div>
     <div class="nav-section">
       <div class="nav-section-title">System</div>
@@ -10511,50 +10640,26 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
         </div>
       </div>
 
-      <!-- Home Tabs: Activity | Metrics | Agents | Sessions -->
-      <div class="tab-bar" id="home-tabs">
-        <button class="active" onclick="switchTab('home','activity')">Activity</button>
-        <button onclick="switchTab('home','metrics')">Metrics</button>
-        <button onclick="switchTab('home','agents')">Agents</button>
-        <button onclick="switchTab('home','sessions')">Sessions</button>
-      </div>
-      <div id="home-tab-content">
-        <div class="tab-pane active" id="tab-home-activity">
-          <div class="card">
-            <div class="card-header" style="display:flex;justify-content:space-between;align-items:center">
-              <span>Live Activity</span>
-              <div style="display:flex;gap:6px;align-items:center">
-                <select id="activity-source-filter" onchange="refreshActivity()" style="font-size:11px;padding:2px 6px;border:1px solid var(--border);border-radius:4px;background:var(--bg-secondary);color:var(--text-primary)">
-                  <option value="">All Sources</option>
-                  <option value="cron">Cron</option>
-                  <option value="activity">Activities</option>
-                  <option value="send">Emails</option>
-                  <option value="approval">Approvals</option>
-                  <option value="memory">Memory</option>
-                </select>
-                <select id="activity-agent-filter" onchange="refreshActivity()" style="font-size:11px;padding:2px 6px;border:1px solid var(--border);border-radius:4px;background:var(--bg-secondary);color:var(--text-primary)">
-                  <option value="">All Agents</option>
-                </select>
-              </div>
-            </div>
-            <div class="card-body" id="panel-activity"><div class="empty-state">Loading...</div></div>
+      <!-- Live Activity feed — primary home content. Metrics, Sessions, and per-agent stats moved to dedicated sidebar pages. -->
+      <div class="card">
+        <div class="card-header" style="display:flex;justify-content:space-between;align-items:center">
+          <span>Live Activity</span>
+          <div style="display:flex;gap:6px;align-items:center">
+            <select id="activity-source-filter" onchange="refreshActivity()" style="font-size:11px;padding:2px 6px;border:1px solid var(--border);border-radius:4px;background:var(--bg-secondary);color:var(--text-primary)">
+              <option value="">All Sources</option>
+              <option value="cron">Cron</option>
+              <option value="activity">Activities</option>
+              <option value="send">Emails</option>
+              <option value="approval">Approvals</option>
+              <option value="memory">Memory</option>
+            </select>
+            <select id="activity-agent-filter" onchange="refreshActivity()" style="font-size:11px;padding:2px 6px;border:1px solid var(--border);border-radius:4px;background:var(--bg-secondary);color:var(--text-primary)">
+              <option value="">All Agents</option>
+            </select>
           </div>
         </div>
-        <div class="tab-pane" id="tab-home-metrics">
-          <div id="metrics-content-home"><div class="empty-state">Loading metrics...</div></div>
-        </div>
-        <div class="tab-pane" id="tab-home-agents">
-          <div id="panel-agents-compare"><div class="empty-state">Loading agent stats...</div></div>
-        </div>
-        <div class="tab-pane" id="tab-home-sessions">
-          <div id="panel-sessions-home"><div class="empty-state">Loading sessions...</div></div>
-        </div>
+        <div class="card-body" id="panel-activity"><div class="empty-state">Loading...</div></div>
       </div>
-
-      <div class="card" id="claude-integrations-widget" style="display:none;margin-top:16px"></div>
-      <div class="card" id="mcp-status-widget" style="display:none;margin-top:16px"></div>
-      <!-- Hidden: Quick controls data target (kept for refreshStatus compat) -->
-      <div id="panel-controls" style="display:none"></div>
     </div>
 
     <!-- ═══ Builder Page — Conversational Artifact Creation ═══ -->
@@ -10835,6 +10940,10 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
           <div id="graph-detail-panel" style="margin-top:12px"></div>
         </div>
         <div class="tab-pane" id="tab-intelligence-memory">
+          <div style="margin-bottom:12px;font-size:13px;color:var(--text-muted)">
+            Stats and content browsing. For janitor, integrity, write queue, and staleness diagnostics see
+            <a href="#" onclick="navigateTo('memory-health');return false" style="color:var(--accent)">Memory Health &rarr;</a>
+          </div>
           <div class="grid-2" id="memory-stats"></div>
           <div class="card">
             <div class="card-header">MEMORY.md</div>
@@ -11963,8 +12072,10 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
       </script>
     </div>
 
-    <!-- Hidden: Sessions (shown in Home tabs in Phase 2) -->
-    <div class="page" id="page-sessions" style="display:none">
+    <!-- ═══ Sessions Page ═══ -->
+    <div class="page" id="page-sessions">
+      <div class="page-title">Sessions</div>
+      <p style="color:var(--text-muted);margin-bottom:16px">Active conversation sessions across channels. Each session is a continuous thread with one user.</p>
       <div id="panel-sessions"><div class="empty-state">Loading...</div></div>
     </div>
 
@@ -12046,11 +12157,23 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
       </div>
     </div>
 
-    <!-- Hidden: Metrics (shown in Home tabs in Phase 2) -->
-    <div class="page" id="page-metrics" style="display:none">
+    <!-- ═══ Metrics Page ═══ -->
+    <div class="page" id="page-metrics">
+      <div class="page-title">Metrics</div>
+      <p style="color:var(--text-muted);margin-bottom:16px">Time-saved estimates, run success rates, and per-job breakdowns.</p>
       <div id="metrics-content"><div class="empty-state">Loading metrics...</div></div>
     </div>
 
+    <!-- ═══ Memory Health Page ═══ -->
+    <div class="page" id="page-memory-health">
+      <div class="page-title">Memory Health</div>
+      <p style="color:var(--text-muted);margin-bottom:16px">Bounded growth, retrieval signal, and curation drift &mdash; everything the janitor manages.</p>
+      <div style="display:flex;gap:8px;margin-bottom:16px">
+        <button class="btn btn-sm" onclick="refreshMemoryHealth()">Refresh</button>
+      </div>
+      <div id="memory-health-content"><div class="empty-state">Loading memory health...</div></div>
+    </div>
+
     <!-- ═══ Daily Plan Page ═══ -->
     <div class="page" id="page-daily-plan">
       <div style="display:flex;align-items:center;justify-content:space-between;margin-bottom:20px">
@@ -12068,8 +12191,10 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
       </details>
     </div>
 
-    <!-- Hidden: Goals (moved to Agent Detail in Phase 3) -->
-    <div class="page" id="page-goals" style="display:none">
+    <!-- ═══ Goals Page ═══ -->
+    <div class="page" id="page-goals">
+      <div class="page-title">Goals</div>
+      <p style="color:var(--text-muted);margin-bottom:16px">Long-running objectives the team is contributing to. Tracks per-agent contribution and run success rate.</p>
       <div id="goals-progress-content"><div class="empty-state">Loading goals...</div></div>
     </div>
 
@@ -12296,6 +12421,7 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
       <div class="tab-bar" id="settings-tabs">
         <button class="active" onclick="switchTab('settings','general')">General</button>
         <button onclick="switchTab('settings','remote')">Remote Access</button>
+        <button onclick="switchTab('settings','security')">Security</button>
         <button onclick="switchTab('settings','integrations')">Integrations</button>
         <button onclick="switchTab('settings','notifications')">Notifications</button>
       </div>
@@ -12318,6 +12444,21 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
             </div>
           </div>
         </div>
+        <div class="tab-pane" id="tab-settings-security">
+          <div class="card">
+            <div class="card-header" style="display:flex;align-items:center;justify-content:space-between">
+              <span>Active Sessions</span>
+              <button class="btn-sm" style="font-size:11px" onclick="refreshAuthSessions()">Refresh</button>
+            </div>
+            <div class="card-body" style="padding:0" id="sessions-list">
+              <div class="empty-state" style="padding:24px">Loading sessions...</div>
+            </div>
+          </div>
+          <p style="color:var(--text-muted);font-size:12px;margin-top:12px">
+            Sessions persist across daemon restarts. "Remember me" sessions last 30 days; standard sessions expire after 24 hours.
+            Revoke any device you no longer trust.
+          </p>
+        </div>
         <div class="tab-pane" id="tab-settings-integrations">
           <div class="card" style="margin-bottom:20px">
             <div class="card-header" style="display:flex;align-items:center;justify-content:space-between">
@@ -12399,19 +12540,6 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
         <div class="tab-pane" id="tab-settings-notifications">
           <div id="digest-settings-content"><div class="empty-state">Loading...</div></div>
         </div>
-        <div class="tab-pane" id="tab-settings-projects">
-          <p style="color:var(--text-muted);margin-bottom:16px">Link projects to give Clementine automatic access to their tools and MCP servers. When you mention a linked project's keywords in chat, Clementine switches into that project's context automatically.</p>
-          <div class="card" style="margin-bottom:20px">
-            <div class="card-header" style="display:flex;align-items:center;justify-content:space-between">
-              <span>Workspace Directories</span>
-              <button class="btn btn-sm btn-primary" onclick="promptAddWorkspaceDir()" style="font-size:11px">+ Add Path</button>
-            </div>
-            <div class="card-body" id="workspace-dirs-list" style="font-size:13px">
-              <div class="empty-state">Loading...</div>
-            </div>
-          </div>
-          <div id="panel-projects"><div class="empty-state">Loading...</div></div>
-        </div>
       </div>
     </div>
 
@@ -12438,6 +12566,13 @@ if('serviceWorker' in navigator){navigator.serviceWorker.getRegistrations().then
       <div id="panel-workflows-page"><div class="empty-state">Loading workflows...</div></div>
     </div>
 
+    <!-- ═══ Unleashed Page ═══ -->
+    <div class="page" id="page-unleashed">
+      <div class="page-title">Unleashed</div>
+      <p style="color:var(--text-muted);margin-bottom:16px">Long-running autonomous tasks that work in phases with checkpointing. Cancel a task by dropping a CANCEL marker — the agent stops at the next phase boundary.</p>
+      <div id="panel-unleashed"><div class="empty-state">Loading...</div></div>
+    </div>
+
   </div><!-- /content -->
 </div><!-- /layout -->
 
@@ -13097,6 +13232,12 @@ function navigateTo(page, opts) {
   if (page === 'team') { refreshTeam(); }
   if (page === 'projects') { refreshProjects(); }
   if (page === 'workflows') { refreshWorkflows(); }
+  if (page === 'unleashed') { refreshUnleashed(); }
+  if (page === 'goals') { refreshGoalsProgress(); }
+  if (page === 'metrics') { refreshMetrics(); }
+  if (page === 'memory-health') { refreshMemoryHealth(); }
+  if (page === 'sessions') { refreshSessions(); }
+  if (page === 'daily-plan') { refreshDailyPlan(); }
   if (page === 'agent-detail' && opts.agentSlug != null) {
     currentAgentSlug = opts.agentSlug;
     renderAgentDetail(opts.agentSlug);
@@ -13104,6 +13245,69 @@ function navigateTo(page, opts) {
   closeSidebar();
 }
 
+// Shortcut nav items that drop into a sub-tab on the Automations page
+function openAutomationsTab(tab) {
+  navigateTo('automations');
+  setTimeout(function() { switchTab('automations', tab); }, 0);
+}
+
+async function refreshUnleashed() {
+  var el = document.getElementById('panel-unleashed');
+  if (!el) return;
+  try {
+    var r = await apiFetch('/api/unleashed');
+    var d = await r.json();
+    var tasks = d.tasks || [];
+    var badge = document.getElementById('nav-unleashed-count');
+    if (badge) {
+      var running = tasks.filter(function(t) { return t.status === 'running'; }).length;
+      if (running > 0) { badge.style.display = ''; badge.textContent = String(running); }
+      else { badge.style.display = 'none'; }
+    }
+    if (tasks.length === 0) {
+      el.innerHTML = '<div class="empty-state" style="padding:24px">No unleashed tasks. Schedule a cron job in <a href="#" onclick="navigateTo(\\'automations\\');return false">Scheduled Tasks</a> with mode = "unleashed" to start one.</div>';
+      return;
+    }
+    var html = '<table style="width:100%;border-collapse:collapse;font-size:13px"><thead><tr style="border-bottom:1px solid var(--border);background:var(--bg-tertiary)">';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Task</th>';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Status</th>';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Phase</th>';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Started</th>';
+    html += '<th style="padding:8px 12px;text-align:right;color:var(--text-muted);font-weight:600">Action</th>';
+    html += '</tr></thead><tbody>';
+    tasks.forEach(function(t) {
+      var statusColor = t.status === 'running' ? 'var(--green)' : t.status === 'completed' ? 'var(--blue)' : t.status === 'cancelled' ? 'var(--text-muted)' : 'var(--orange)';
+      html += '<tr style="border-bottom:1px solid var(--border)">';
+      html += '<td style="padding:10px 12px;font-weight:600">' + esc(t.name || '—') + '</td>';
+      html += '<td style="padding:10px 12px"><span style="color:' + statusColor + ';font-size:11px;font-weight:600;text-transform:uppercase">' + esc(t.status || 'unknown') + '</span></td>';
+      html += '<td style="padding:10px 12px;color:var(--text-muted)">' + esc(t.phase != null ? String(t.phase) : '—') + '</td>';
+      html += '<td style="padding:10px 12px;color:var(--text-muted)">' + esc(t.startedAt || '—') + '</td>';
+      html += '<td style="padding:10px 12px;text-align:right">';
+      if (t.status === 'running') {
+        html += '<button class="btn-sm" style="font-size:11px;color:#ef4444" onclick="cancelUnleashed(\\'' + esc(t.name) + '\\')">Cancel</button>';
+      }
+      html += '</td></tr>';
+    });
+    html += '</tbody></table>';
+    el.innerHTML = html;
+  } catch (ex) {
+    el.innerHTML = '<div class="empty-state" style="padding:24px">Error: ' + esc(String(ex)) + '</div>';
+  }
+}
+
+async function cancelUnleashed(name) {
+  if (!confirm('Cancel unleashed task "' + name + '"? It will stop at the next phase boundary.')) return;
+  try {
+    var r = await apiFetch('/api/unleashed/' + encodeURIComponent(name) + '/cancel', { method: 'POST' });
+    var d = await r.json();
+    if (d.ok) toast('Cancel requested', 'success');
+    else toast(d.error || 'Cancel failed', 'error');
+    refreshUnleashed();
+  } catch (ex) {
+    toast('Cancel failed: ' + ex, 'error');
+  }
+}
+
 // Bind static nav items
 document.querySelectorAll('.nav-item').forEach(item => {
   item.addEventListener('click', () => {
@@ -13141,20 +13345,97 @@ function switchTab(group, tab) {
     if (tab === 'graph') refreshGraph();
     if (tab === 'memory') refreshMemory();
   }
-  if (group === 'home') {
-    if (tab === 'metrics') refreshHomeMetrics();
-    if (tab === 'sessions') refreshHomeSessions();
-    if (tab === 'activity') refreshActivity();
-    if (tab === 'agents') refreshAgentComparison();
-  }
   if (group === 'settings') {
     if (tab === 'integrations') refreshSalesforce();
-    if (tab === 'projects') refreshProjects();
     if (tab === 'remote') refreshRemoteAccess();
+    if (tab === 'security') refreshAuthSessions();
     if (tab === 'notifications') refreshDigestSettings();
   }
 }
 
+async function refreshAuthSessions() {
+  var el = document.getElementById('sessions-list');
+  if (!el) return;
+  try {
+    var r = await fetch('/auth/sessions', { credentials: 'same-origin' });
+    if (!r.ok) {
+      if (r.status === 401) {
+        el.innerHTML = '<div class="empty-state" style="padding:24px">Session-based view is only available for tunneled remote access. Localhost runs do not need login.</div>';
+        return;
+      }
+      el.innerHTML = '<div class="empty-state" style="padding:24px">Failed to load sessions.</div>';
+      return;
+    }
+    var d = await r.json();
+    var rows = (d.sessions || []);
+    if (rows.length === 0) {
+      el.innerHTML = '<div class="empty-state" style="padding:24px">No active sessions.</div>';
+      return;
+    }
+    function fmt(t) {
+      if (!t) return '—';
+      var diff = Date.now() - t;
+      var s = Math.floor(diff / 1000);
+      if (s < 60) return s + 's ago';
+      if (s < 3600) return Math.floor(s / 60) + 'm ago';
+      if (s < 86400) return Math.floor(s / 3600) + 'h ago';
+      return Math.floor(s / 86400) + 'd ago';
+    }
+    function fmtExpires(t) {
+      var diff = t - Date.now();
+      if (diff <= 0) return 'expired';
+      var d = Math.floor(diff / 86400000);
+      if (d > 1) return 'in ' + d + ' days';
+      var h = Math.floor(diff / 3600000);
+      if (h > 1) return 'in ' + h + ' hours';
+      return 'in ' + Math.floor(diff / 60000) + ' min';
+    }
+    var html = '<table style="width:100%;border-collapse:collapse;font-size:13px">';
+    html += '<thead><tr style="border-bottom:1px solid var(--border);background:var(--bg-tertiary)">';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Device</th>';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Created</th>';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Last used</th>';
+    html += '<th style="padding:8px 12px;text-align:left;color:var(--text-muted);font-weight:600">Expires</th>';
+    html += '<th style="padding:8px 12px;text-align:right;color:var(--text-muted);font-weight:600">Action</th>';
+    html += '</tr></thead><tbody>';
+    rows.forEach(function(s) {
+      var ua = s.userAgent || 'Unknown device';
+      var label = s.persistent ? '<span style="background:#f97316;color:#fff;padding:1px 6px;border-radius:3px;font-size:10px;margin-left:6px">Remember</span>' : '';
+      var current = s.current ? '<span style="background:#10b981;color:#fff;padding:1px 6px;border-radius:3px;font-size:10px;margin-left:6px">This device</span>' : '';
+      html += '<tr style="border-bottom:1px solid var(--border)">';
+      html += '<td style="padding:10px 12px;max-width:260px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap">' + esc(ua) + label + current + '</td>';
+      html += '<td style="padding:10px 12px;color:var(--text-muted)">' + fmt(s.createdAt) + '</td>';
+      html += '<td style="padding:10px 12px;color:var(--text-muted)">' + fmt(s.lastUsedAt) + '</td>';
+      html += '<td style="padding:10px 12px;color:var(--text-muted)">' + fmtExpires(s.expiresAt) + '</td>';
+      html += '<td style="padding:10px 12px;text-align:right">';
+      html += '<button class="btn-sm" style="font-size:11px;color:#ef4444" onclick="revokeSession(\\'' + esc(s.id) + '\\',' + (s.current ? 'true' : 'false') + ')">Revoke</button>';
+      html += '</td></tr>';
+    });
+    html += '</tbody></table>';
+    el.innerHTML = html;
+  } catch (ex) {
+    el.innerHTML = '<div class="empty-state" style="padding:24px">Error: ' + esc(String(ex)) + '</div>';
+  }
+}
+
+async function revokeSession(id, isCurrent) {
+  var msg = isCurrent
+    ? 'Revoke this session? You will be signed out immediately.'
+    : 'Revoke this session?';
+  if (!confirm(msg)) return;
+  try {
+    var r = await fetch('/auth/sessions/' + encodeURIComponent(id), { method: 'DELETE', credentials: 'same-origin' });
+    if (!r.ok) { alert('Revoke failed'); return; }
+    if (isCurrent) {
+      window.location.href = '/';
+      return;
+    }
+    refreshAuthSessions();
+  } catch (ex) {
+    alert('Revoke failed: ' + ex);
+  }
+}
+
 // ── Dynamic Team Nav ─────────────────────
 function renderTeamNav(agents) {
   var container = document.getElementById('team-nav');
@@ -16618,6 +16899,144 @@ async function saveUserModelSlot(slot) {
   } catch (e) { toast('Save failed: ' + String(e), 'error'); }
 }
 
+async function seedUserModel() {
+  var seedPanel = document.getElementById('user-model-seed-panel');
+  if (!seedPanel) return;
+  seedPanel.style.display = 'block';
+  seedPanel.innerHTML =
+    '<div class="card" style="padding:14px;border-left:3px solid var(--accent,#f59e0b)">'
+    + '<div style="font-weight:600;margin-bottom:6px">✨ Analyzing your existing memory…</div>'
+    + '<div style="font-size:12px;color:var(--text-muted)">Running Haiku over MEMORY.md, top-salience chunks, and recent session summaries. Usually 5–15 seconds.</div>'
+    + '</div>';
+  try {
+    var r = await apiFetch('/api/user-model/seed', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: '{}',
+    });
+    var d = await r.json();
+    if (!d.ok || !d.proposals) {
+      seedPanel.innerHTML =
+        '<div class="card" style="padding:14px;border-left:3px solid var(--red,#ef4444)">'
+        + '<div style="font-weight:600;margin-bottom:6px">Seed failed</div>'
+        + '<div style="font-size:12px;color:var(--text-muted)">' + esc(d.error || 'Unknown error') + '</div>'
+        + '<div style="margin-top:10px"><button class="btn" onclick="dismissSeedPanel()" style="font-size:12px">Dismiss</button></div>'
+        + '</div>';
+      return;
+    }
+    renderSeedProposals(d.proposals);
+  } catch (e) {
+    seedPanel.innerHTML =
+      '<div class="card" style="padding:14px;border-left:3px solid var(--red,#ef4444)">'
+      + '<div style="font-weight:600">Seed failed: ' + esc(String(e)) + '</div>'
+      + '<div style="margin-top:10px"><button class="btn" onclick="dismissSeedPanel()" style="font-size:12px">Dismiss</button></div>'
+      + '</div>';
+  }
+}
+
+function renderSeedProposals(p) {
+  var seedPanel = document.getElementById('user-model-seed-panel');
+  if (!seedPanel) return;
+  var labelMap = {
+    user_facts: 'User Facts',
+    goals: 'Active Goals',
+    relationships: 'Key Relationships',
+    agent_persona: 'Agent Persona',
+  };
+  var slots = ['user_facts', 'goals', 'relationships', 'agent_persona'];
+  var anyContent = slots.some(function(s) { return (p[s] || '').trim().length > 0; });
+  if (!anyContent) {
+    seedPanel.innerHTML =
+      '<div class="card" style="padding:14px;border-left:3px solid var(--accent,#f59e0b)">'
+      + '<div style="font-weight:600;margin-bottom:4px">No clear signal in memory yet</div>'
+      + '<div style="font-size:12px;color:var(--text-muted)">Haiku analyzed ' + (p.sourceCount || 0) + ' source items but found no facts strong enough to seed slots. Have a few conversations and try again, or fill the slots manually below.</div>'
+      + '<div style="margin-top:10px"><button class="btn" onclick="dismissSeedPanel()" style="font-size:12px">Dismiss</button></div>'
+      + '</div>';
+    return;
+  }
+  var html = '<div class="card" style="padding:14px;border-left:3px solid var(--accent,#f59e0b)">';
+  html += '<div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:8px;gap:8px;flex-wrap:wrap">';
+  html += '<div><div style="font-weight:600">✨ Proposed values from memory</div>';
+  html += '<div style="font-size:11px;color:var(--text-muted)">Reviewed ' + (p.sourceCount || 0) + ' source items. Edit any slot before applying. Skipped slots stay empty.</div></div>';
+  html += '<div style="display:flex;gap:6px"><button class="btn-primary" onclick="applyAllSeedSlots()" style="font-size:12px">Apply all</button><button class="btn" onclick="dismissSeedPanel()" style="font-size:12px">Dismiss</button></div>';
+  html += '</div>';
+  for (var i = 0; i < slots.length; i++) {
+    var slot = slots[i];
+    var content = (p[slot] || '').trim();
+    if (!content) continue;
+    var label = labelMap[slot] || slot;
+    html += '<div class="seed-slot-card" data-slot="' + esc(slot) + '" style="margin-top:10px;padding:10px;background:var(--bg-input);border-radius:6px">';
+    html += '<div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:6px">';
+    html += '<div style="font-weight:600;font-size:13px">' + esc(label) + '</div>';
+    html += '<div style="display:flex;gap:6px"><button class="btn-primary" onclick="applySeedSlot(\\'' + esc(slot) + '\\')" style="font-size:11px;padding:2px 10px">Apply</button><button class="btn" onclick="skipSeedSlot(\\'' + esc(slot) + '\\')" style="font-size:11px;padding:2px 10px">Skip</button></div>';
+    html += '</div>';
+    html += '<textarea id="seed-textarea-' + esc(slot) + '" style="width:100%;min-height:70px;padding:6px;border:1px solid var(--border);border-radius:4px;background:var(--bg);color:var(--text);font-family:inherit;font-size:12px;resize:vertical">' + esc(content) + '</textarea>';
+    html += '</div>';
+  }
+  html += '</div>';
+  seedPanel.innerHTML = html;
+}
+
+async function applySeedSlot(slot) {
+  var ta = document.getElementById('seed-textarea-' + slot);
+  if (!ta) return;
+  var content = ta.value;
+  var scope = document.getElementById('user-model-scope');
+  var agentSlug = scope && scope.value ? scope.value : null;
+  try {
+    var r = await apiFetch('/api/user-model/' + encodeURIComponent(slot), {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ content: content, agentSlug: agentSlug }),
+    });
+    var d = await r.json();
+    if (d.ok) {
+      toast('Applied ' + slot, 'success');
+      var card = document.querySelector('.seed-slot-card[data-slot="' + slot + '"]');
+      if (card) card.remove();
+      loadUserModel();
+    } else {
+      toast('Apply failed: ' + (d.error || 'unknown'), 'error');
+    }
+  } catch (e) { toast('Apply failed: ' + String(e), 'error'); }
+}
+
+function skipSeedSlot(slot) {
+  var card = document.querySelector('.seed-slot-card[data-slot="' + slot + '"]');
+  if (card) card.remove();
+}
+
+async function applyAllSeedSlots() {
+  var slots = ['user_facts', 'goals', 'relationships', 'agent_persona'];
+  var applied = 0;
+  for (var i = 0; i < slots.length; i++) {
+    var ta = document.getElementById('seed-textarea-' + slots[i]);
+    if (!ta || !ta.value.trim()) continue;
+    var scope = document.getElementById('user-model-scope');
+    var agentSlug = scope && scope.value ? scope.value : null;
+    try {
+      var r = await apiFetch('/api/user-model/' + encodeURIComponent(slots[i]), {
+        method: 'PUT',
+        headers: { 'Content-Type': 'application/json' },
+        body: JSON.stringify({ content: ta.value, agentSlug: agentSlug }),
+      });
+      var d = await r.json();
+      if (d.ok) applied++;
+    } catch (e) { /* continue */ }
+  }
+  toast('Applied ' + applied + ' slot' + (applied === 1 ? '' : 's'), 'success');
+  dismissSeedPanel();
+  loadUserModel();
+}
+
+function dismissSeedPanel() {
+  var seedPanel = document.getElementById('user-model-seed-panel');
+  if (seedPanel) {
+    seedPanel.style.display = 'none';
+    seedPanel.innerHTML = '';
+  }
+}
+
 async function clearUserModelSlot(slot) {
   if (!confirm('Clear the "' + slot + '" slot? This deletes everything currently stored there.')) return;
   var scope = document.getElementById('user-model-scope');
@@ -17413,6 +17832,192 @@ function formatTokens(n) {
   return String(n);
 }
 
+function formatBytes(n) {
+  if (n == null) return '—';
+  if (n < 1024) return n + ' B';
+  if (n < 1024 * 1024) return (n / 1024).toFixed(1) + ' KB';
+  if (n < 1024 * 1024 * 1024) return (n / 1024 / 1024).toFixed(1) + ' MB';
+  return (n / 1024 / 1024 / 1024).toFixed(2) + ' GB';
+}
+
+async function refreshMemoryHealth() {
+  var el = document.getElementById('memory-health-content');
+  if (!el) return;
+  try {
+    var r = await apiFetch('/api/memory/health');
+    var d = await r.json();
+    if (!d.ok || !d.health) {
+      el.innerHTML = '<div class="empty-state">' + esc(d.error || 'No data') + '</div>';
+      return;
+    }
+    var h = d.health;
+    var consolidatedPct = h.chunks.total > 0
+      ? ((h.chunks.consolidated / h.chunks.total) * 100).toFixed(1)
+      : '0.0';
+    var zombiePct = h.chunks.total > 0
+      ? ((h.chunks.zombieCount / h.chunks.total) * 100).toFixed(1)
+      : '0.0';
+
+    var html = '';
+
+    // Hero tiles row.
+    html += '<div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:12px;margin-bottom:20px">';
+    html += '<div class="metric-hero"><div class="metric-hero-value">' + (h.chunks.total || 0)
+      + '</div><div class="metric-hero-label">Total Chunks</div>'
+      + '<div class="metric-hero-sub">' + (h.chunks.pinned || 0) + ' pinned &middot; ' + (h.chunks.softDeleted || 0) + ' soft-deleted</div></div>';
+    html += '<div class="metric-hero"><div class="metric-hero-value">' + consolidatedPct
+      + '%</div><div class="metric-hero-label">Consolidated</div>'
+      + '<div class="metric-hero-sub">' + (h.chunks.consolidated || 0) + ' of ' + (h.chunks.total || 0) + ' chunks</div></div>';
+    html += '<div class="metric-hero"><div class="metric-hero-value">' + (h.chunks.zombieCount || 0)
+      + '</div><div class="metric-hero-label">Zombies</div>'
+      + '<div class="metric-hero-sub">' + zombiePct + '% of total &middot; eligible to expire</div></div>';
+    html += '<div class="metric-hero"><div class="metric-hero-value">' + formatBytes(h.dbSizeBytes)
+      + '</div><div class="metric-hero-label">DB File Size</div>'
+      + '<div class="metric-hero-sub">last vacuum: ' + esc(h.lastVacuumAt || 'never') + '</div></div>';
+    html += '</div>';
+
+    // Two-column layout: categories + table sizes on left, top cited on right.
+    html += '<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px">';
+
+    // Left column: categories.
+    html += '<div class="card"><div class="card-header"><h3>Chunks by Category</h3></div><div class="card-body">';
+    if (!h.chunksByCategory || h.chunksByCategory.length === 0) {
+      html += '<div class="empty-state">No chunks yet.</div>';
+    } else {
+      html += '<table class="data-table"><thead><tr><th>Category</th><th style="text-align:right">Count</th></tr></thead><tbody>';
+      for (var i = 0; i < h.chunksByCategory.length; i++) {
+        var c = h.chunksByCategory[i];
+        html += '<tr><td>' + esc(c.category || '—') + '</td><td style="text-align:right">' + c.count + '</td></tr>';
+      }
+      html += '</tbody></table>';
+    }
+    html += '</div></div>';
+
+    // Right column: top cited.
+    html += '<div class="card"><div class="card-header"><h3>Top Cited (last 30d)</h3></div><div class="card-body">';
+    if (!h.topCitedLast30d || h.topCitedLast30d.length === 0) {
+      html += '<div class="empty-state">No outcomes recorded in the last 30 days.</div>';
+    } else {
+      html += '<table class="data-table"><thead><tr><th>Source</th><th>Section</th><th style="text-align:right">Refs</th></tr></thead><tbody>';
+      for (var j = 0; j < h.topCitedLast30d.length; j++) {
+        var t = h.topCitedLast30d[j];
+        html += '<tr><td>' + esc(t.sourceFile || '—') + '</td><td>' + esc(t.section || '—')
+          + '</td><td style="text-align:right">' + t.refCount + '</td></tr>';
+      }
+      html += '</tbody></table>';
+    }
+    html += '</div></div>';
+
+    html += '</div>';
+
+    // Staleness section — high-salience drift + user-model age.
+    var staleSlots = h.staleUserModelSlots || [];
+    var staleChunks = h.staleHighSalienceChunks || [];
+    if (staleSlots.length > 0 || staleChunks.length > 0) {
+      html += '<div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-top:16px">';
+
+      html += '<div class="card"><div class="card-header"><h3>Stale User-Model Slots</h3></div><div class="card-body">';
+      if (staleSlots.length === 0) {
+        html += '<div class="empty-state">All slots fresh.</div>';
+      } else {
+        html += '<table class="data-table"><thead><tr><th>Slot</th><th>Agent</th><th style="text-align:right">Age (days)</th></tr></thead><tbody>';
+        for (var ss = 0; ss < staleSlots.length; ss++) {
+          var s = staleSlots[ss];
+          html += '<tr><td>' + esc(s.slot) + '</td><td>' + esc(s.agentSlug || 'global') + '</td><td style="text-align:right">' + s.ageDays + '</td></tr>';
+        }
+        html += '</tbody></table>';
+      }
+      html += '</div></div>';
+
+      html += '<div class="card"><div class="card-header"><h3>Stale High-Salience Chunks</h3><div style="font-size:11px;color:var(--text-muted)">High salience but EMA gone negative &mdash; ranked but not cited</div></div><div class="card-body">';
+      if (staleChunks.length === 0) {
+        html += '<div class="empty-state">No drift detected.</div>';
+      } else {
+        html += '<table class="data-table"><thead><tr><th>Source</th><th>Section</th><th style="text-align:right">Salience</th><th style="text-align:right">EMA</th></tr></thead><tbody>';
+        for (var sc = 0; sc < staleChunks.length; sc++) {
+          var sk = staleChunks[sc];
+          html += '<tr><td>' + esc(sk.sourceFile || '') + '</td><td>' + esc(sk.section || '') + '</td><td style="text-align:right">' + sk.salience.toFixed(2) + '</td><td style="text-align:right">' + sk.lastOutcomeScore.toFixed(2) + '</td></tr>';
+        }
+        html += '</tbody></table>';
+      }
+      html += '</div></div>';
+      html += '</div>';
+    }
+
+    // Cache + write queue + integrity row.
+    html += '<div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(260px,1fr));gap:16px;margin-top:16px">';
+
+    if (h.chunkCacheStats) {
+      var cs = h.chunkCacheStats;
+      var hitRatePct = (cs.hitRate * 100).toFixed(1);
+      html += '<div class="card"><div class="card-header"><h3>Hot Chunk Cache</h3></div><div class="card-body">';
+      html += '<div style="display:flex;gap:18px;flex-wrap:wrap;font-size:13px">';
+      html += '<div><strong>' + hitRatePct + '%</strong> hit rate</div>';
+      html += '<div><strong>' + cs.hits + '</strong> hits</div>';
+      html += '<div><strong>' + cs.misses + '</strong> misses</div>';
+      html += '<div><strong>' + cs.size + ' / ' + cs.capacity + '</strong> entries</div>';
+      html += '<div><strong>' + cs.evictions + '</strong> evictions</div>';
+      html += '</div></div></div>';
+    }
+
+    // Async write queue status.
+    var wq = h.writeQueue;
+    html += '<div class="card"><div class="card-header"><h3>Async Write Queue</h3></div><div class="card-body">';
+    if (!wq) {
+      html += '<div style="font-size:13px;color:var(--text-muted)">Sync mode (queue disabled)</div>';
+    } else {
+      html += '<div style="display:flex;gap:18px;flex-wrap:wrap;font-size:13px">';
+      html += '<div><strong>' + wq.size + '</strong> pending</div>';
+      html += '<div><strong>' + wq.dropped + '</strong> dropped (back-pressure)</div>';
+      html += '</div>';
+    }
+    html += '</div></div>';
+
+    // Integrity report.
+    var ir = h.lastIntegrityReport;
+    html += '<div class="card"><div class="card-header"><h3>Integrity</h3></div><div class="card-body">';
+    if (!ir) {
+      html += '<div style="font-size:13px;color:var(--text-muted)">No probes have run yet.</div>';
+    } else {
+      var ftsLabel = ir.ftsOk
+        ? '<span style="color:var(--green,#3a3)">ok</span>'
+        : (ir.ftsRebuilt ? '<span style="color:var(--orange,#f80)">rebuilt</span>' : '<span style="color:var(--red,#c33)">failing</span>');
+      html += '<div style="display:flex;gap:18px;flex-wrap:wrap;font-size:13px">';
+      html += '<div>FTS5: ' + ftsLabel + '</div>';
+      html += '<div><strong>' + ir.orphanRefsNulled + '</strong> orphan refs nulled</div>';
+      html += '<div><strong>' + ir.missingEmbeddings + '</strong> missing embeddings</div>';
+      html += '<div style="color:var(--text-muted)">last: ' + esc(ir.ranAt || '') + '</div>';
+      html += '</div>';
+    }
+    html += '</div></div>';
+
+    html += '</div>';
+
+    // Table row counts (full width).
+    html += '<div class="card" style="margin-top:16px"><div class="card-header"><h3>Table Sizes</h3></div><div class="card-body">';
+    var tableRows = Object.keys(h.tableRowCounts || {}).sort(function(a, b) {
+      return (h.tableRowCounts[b] || 0) - (h.tableRowCounts[a] || 0);
+    });
+    if (tableRows.length === 0) {
+      html += '<div class="empty-state">No table data.</div>';
+    } else {
+      html += '<table class="data-table"><thead><tr><th>Table</th><th style="text-align:right">Rows</th></tr></thead><tbody>';
+      for (var k = 0; k < tableRows.length; k++) {
+        var tn = tableRows[k];
+        var rowCount = h.tableRowCounts[tn];
+        var label = rowCount === -1 ? '<span style="color:var(--text-muted)">missing</span>' : String(rowCount);
+        html += '<tr><td>' + esc(tn) + '</td><td style="text-align:right">' + label + '</td></tr>';
+      }
+      html += '</tbody></table>';
+    }
+    html += '</div></div>';
+
+    el.innerHTML = html;
+  } catch (err) {
+    el.innerHTML = '<div class="empty-state">Failed to load: ' + esc(String(err)) + '</div>';
+  }
+}
+
 async function refreshMetrics() {
   try {
     const [r, ur] = await Promise.all([apiFetch('/api/metrics'), apiFetch('/api/metrics/usage')]);
@@ -21435,6 +22040,14 @@ function getLoginPageHTML() {
     margin-top: 24px; font-size: 12px;
     color: #475569; text-align: center; line-height: 1.5;
   }
+  .remember-row {
+    display: flex; align-items: center; gap: 8px;
+    margin: 16px 0; font-size: 13px; color: #94a3b8;
+    cursor: pointer; user-select: none;
+  }
+  .remember-row input[type="checkbox"] {
+    accent-color: #f97316; width: 14px; height: 14px; cursor: pointer;
+  }
 </style>
 </head>
 <body>
@@ -21448,6 +22061,10 @@ function getLoginPageHTML() {
         <input type="password" class="form-input" id="token-input"
           placeholder="clem_XXXX-XXXX-XXXX" autocomplete="off" autofocus>
       </div>
+      <label class="remember-row">
+        <input type="checkbox" id="remember-input">
+        <span>Remember me on this device for 30 days</span>
+      </label>
       <button type="submit" class="btn-login" id="login-btn">Sign In</button>
       <div class="error-msg" id="error-msg"></div>
     </form>
@@ -21462,6 +22079,7 @@ function getLoginPageHTML() {
       var btn = document.getElementById('login-btn');
       var err = document.getElementById('error-msg');
       var token = document.getElementById('token-input').value.trim();
+      var remember = document.getElementById('remember-input').checked;
       if (!token) return;
       btn.disabled = true;
       btn.textContent = 'Signing in...';
@@ -21470,7 +22088,7 @@ function getLoginPageHTML() {
         var r = await fetch('/auth/login', {
           method: 'POST',
           headers: { 'Content-Type': 'application/json' },
-          body: JSON.stringify({ token: token })
+          body: JSON.stringify({ token: token, remember: remember })
         });
         var d = await r.json();
         if (d.ok) {