daily-focus 1.1.1-dev.2 → 1.2.0-dev.4

package/README.md

@@ -131,11 +131,13 @@ notes live too; the reply streams in there, and you can follow up in the same
 conversation. The panel stays on the item it was opened for while you move through
 the list.
 
-It reads and drafts, and that is all. An email reply is created as a Gmail draft on
-the thread, so it is waiting there when you open the mail; a reply to a reviewer is
-handed back as text for you to post. It never sends, posts, or edits a file, and it
-has no checkout: fixing conflicts or a build is work for a real coding session, and
-this is for the questions you would otherwise answer by opening six tabs.
+It is told to read and draft, and nothing more. An email reply is created as a Gmail
+draft on the thread, so it is waiting there when you open the mail; a reply to a
+reviewer is handed back as text for you to post. It is told never to send, post, or
+edit a file, and it has no checkout: fixing conflicts or a build is work for a real
+coding session, and this is for the questions you would otherwise answer by opening
+six tabs. How much of that the CLI itself enforces differs between Claude Code and
+Codex; see [What the assistant can do](SETUP.md#what-the-assistant-can-do).
 
 ## The morning agent
 

package/SETUP.md

@@ -98,7 +98,7 @@ under **Morning agent** in the settings. In `.env` or the environment that is:
 DAILY_FOCUS_AGENT=codex
 ```
 
-Each scheduled morning at 07:00 local time the dashboard starts the agent through
+Each scheduled morning at 07:00 your time the dashboard starts the agent through
 that CLI, headless, in the store, and the brief appears when it finishes. Set
 `DAILY_FOCUS_AGENT_AT` to another time, such as `06:30`. The dashboard has to be
 running at the time; if it wasn't, it runs the agent as soon as it is started that
@@ -110,6 +110,15 @@ otherwise; see [Match your working week](#match-your-working-week).
 refresh icon still does. A new store's first brief always comes from the setup
 steps' button, so the clock never runs the agent before you've told it where to look.
 
+"Your time" is the time zone of the browser you last looked at the dashboard
+in. The page tells the dashboard when it loads, reconnects or comes back into view,
+and when the browser's own zone changes, so a dashboard on a Mac at home follows
+you abroad as soon as you open it there. The dashboard also follows the Mac it runs
+on when that Mac changes time zones, which covers the morning after a flight before
+you have opened it. Whichever changed last wins, and the dashboard remembers it
+across restarts. Every date and time on the page is shown in that zone; a browser
+somewhere else says so under the page title.
+
 Whichever way it starts, every run lands in the same place: the report it gives when
 it finishes, and a chat where you can ask it why it did what it did. See
 [The morning agent's runs](#the-morning-agents-runs).
@@ -117,14 +126,23 @@ it finishes, and a chat where you can ask it why it did what it did. See
 The agent reaches your sources the way the CLI does:
 
 - **Codex** runs in its workspace-write sandbox with network access, confined to the
-  store. Connectors from the Codex app are found through its plugin catalogue. There
-  is nobody to approve a command outside the sandbox, so the agent reports that
-  restriction for any `gh` command that needs it, such as switching accounts.
+  store. Connectors from the Codex app are found through its plugin catalogue, and
+  every write through one is refused: a connector tool counts as a write unless it
+  is marked read-only. A command that needs to leave the sandbox, such as `gh`
+  switching accounts, is decided by your own Codex approval settings, as it would be
+  in your Codex. With nobody set to approve, the agent reports that restriction; with
+  Codex's automatic reviewer, the reviewer decides. The dashboard won't start a run
+  on a Codex older than 0.144.0, which would ignore the refusal of connector writes;
+  update Codex if a run fails saying so.
 - **Claude Code** may write `items.json` and nothing else in the store, and reach
   its sources with only what `DAILY_FOCUS_AGENT_TOOLS` allows. The default covers
   GitHub, Jira, web pages and the claude.ai Gmail connector. Add your calendar, chat
   and document connectors to the list by name, or the brief will report them as
-  unreachable.
+  unreachable. The default allows every Gmail tool, sending included, and `gh` and
+  `acli` can write as well as read; the agent's instructions forbid changing
+  anything. To narrow Gmail to reading, name its tools instead of the connector, as
+  [What the assistant can do](#what-the-assistant-can-do) shows, without the two
+  draft tools.
 
 Set `DAILY_FOCUS_AGENT_MODEL` and `DAILY_FOCUS_AGENT_EFFORT` if the CLI's own
 defaults are not what you want for a brief; a brief is worth a high effort. If the
@@ -268,14 +286,53 @@ the CLI is configured with; `DAILY_FOCUS_ASSISTANT_MODEL` and
 `DAILY_FOCUS_ASSISTANT_EFFORT` override them. If the server can't find the CLI,
 set `DAILY_FOCUS_ASSISTANT_BIN` to its path.
 
-The assistant reads and drafts; it never sends, posts or edits anything, and it has
-no checkout to work in. That is deliberate. Fixing merge conflicts or a failing build
-belongs in a real coding session; this panel is for the questions you'd otherwise
-answer by opening six tabs. The Gmail draft is the one thing it creates, through the
-Gmail tool the CLI has: with Claude Code that is the claude.ai Gmail connector, which
-`DAILY_FOCUS_ASSISTANT_TOOLS` allows by default; with Codex it is the Gmail plugin
-from the Codex app, which the CLI finds through its plugin catalogue. Without either,
-the assistant hands you the text instead and says so.
+The assistant is told to read and draft, and never to send, post or edit anything,
+and it has no checkout to work in. That is deliberate. Fixing merge conflicts or a
+failing build belongs in a real coding session; this panel is for the questions you'd
+otherwise answer by opening six tabs. The Gmail draft is the one thing it creates,
+and revises when you ask, through the Gmail tool the CLI has: with Claude Code that
+is the claude.ai Gmail connector, which `DAILY_FOCUS_ASSISTANT_TOOLS` allows by
+default; with Codex it is the Gmail app linked to your ChatGPT account, which the CLI
+finds through its plugin catalogue. Without either, the assistant hands you the text
+instead and says so.
+
+### What the assistant can do
+
+The assistant runs the CLI you already use, with the access that CLI already has.
+The dashboard narrows some of that, and leaves the rest to the assistant's
+instructions. What the CLI itself enforces:
+
+- **Claude Code** may use only the tools in `DAILY_FOCUS_ASSISTANT_TOOLS`, and never
+  its file-editing tools, whatever the list says; anything else is refused rather
+  than asked about. Rules in your own Claude Code settings that allow a tool still
+  apply. The default list is broader than the assistant needs:
+  `mcp__claude_ai_Gmail` allows every tool on the Gmail connector, sending and
+  deleting included, and `gh` and `acli` can comment, merge and move tickets as well
+  as read. Only the instructions keep it from doing those. To hold it to reading
+  mail and drafting replies, name the Gmail tools instead of the connector:
+
+  ```dotenv
+  DAILY_FOCUS_ASSISTANT_TOOLS=Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail__search_threads,mcp__claude_ai_Gmail__get_thread,mcp__claude_ai_Gmail__get_message,mcp__claude_ai_Gmail__list_labels,mcp__claude_ai_Gmail__list_drafts,mcp__claude_ai_Gmail__get_draft,mcp__claude_ai_Gmail__create_draft,mcp__claude_ai_Gmail__update_draft
+  ```
+
+  A tool left off the list is refused, so if the connector renames one, the
+  assistant reports that it can't reach your mail rather than working around it.
+- **Codex** refuses every write through a connector (Gmail, Calendar, Drive, GitHub
+  and the other apps your ChatGPT account links) except creating and revising a
+  Gmail draft. A connector tool counts as a write unless it is marked read-only. A
+  tool you have told Codex to always allow, or an app given approval settings of its
+  own in your Codex config, keeps them. Computer use, the plugins that act in your
+  apps and browser with your sign-ins, is off unless you turn on
+  `DAILY_FOCUS_ASSISTANT_COMPUTER_USE`; the dashboard checks with Codex that it is
+  off before each session, and refuses to start one it can't confirm. Shell
+  commands follow your own Codex config: the sandbox keeps writes in the
+  assistant's working directory, and a command that needs to leave it is decided
+  by your Codex approval settings, as it would be in your own Codex. That keeps
+  `gh` working, and means it can write. All of this needs Codex 0.149.0 or
+  newer, and the page warns when yours is older. Before 0.144.0 Codex silently
+  ignores the refusal of connector writes, so the dashboard won't start the
+  assistant or the morning agent on it at all; before 0.149.0 it can't switch
+  computer use off, so the assistant won't answer while that setting is off.
 
 Its instructions live in `prompts/assistant.md`, linked into the store as
 `assistant.md` each time the dashboard starts. What it says stays in the chat in the panel: it
@@ -484,13 +541,14 @@ matters when `DAILY_FOCUS_FREE_WINDOWS` is off.
 | `DAILY_FOCUS_ASSISTANT_BIN` | *the CLI's name* | Path to the assistant's CLI, for when the server's PATH lacks it. `~` is expanded |
 | `DAILY_FOCUS_ASSISTANT_MODEL` | *the CLI's own* | Model passed to the CLI untouched: an alias like `opus`, or a full id. Unset passes no flag |
 | `DAILY_FOCUS_ASSISTANT_EFFORT` | *the CLI's own* | Effort passed to the CLI untouched: `low`, `medium`, `high`, `xhigh` or `max`. Unset passes no flag |
-| `DAILY_FOCUS_ASSISTANT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use without asking, in its permission syntax, comma-separated. Editing tools are denied regardless. Ignored by Codex |
+| `DAILY_FOCUS_ASSISTANT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use without asking, in its permission syntax, comma-separated. Editing tools are denied regardless. The default allows every Gmail tool, sending included; see [What the assistant can do](#what-the-assistant-can-do) to narrow it. Ignored by Codex |
+| `DAILY_FOCUS_ASSISTANT_COMPUTER_USE` | `off` | `on` lets the assistant use Codex's computer-use and browser plugins, which act in your apps and browser with your sign-ins. `off` switches them off for its runs. Ignored by Claude Code, which uses only the tools in its list |
 | `DAILY_FOCUS_AGENT` | `off` | `codex` or `claude` lets the dashboard run the morning agent through that CLI: each scheduled morning, and from the refresh icon beside the brief's age. `off` hides it |
 | `DAILY_FOCUS_AGENT_AT` | `07:00` | Local time, `HH:MM`, at which the dashboard starts the agent on each scheduled day, or as soon as it is running after that. `off` means it never starts one on its own; the refresh icon still does. Needs `DAILY_FOCUS_AGENT` |
 | `DAILY_FOCUS_AGENT_BIN` | *the CLI's name* | Path to that CLI, for when the server's PATH lacks it. `~` is expanded |
 | `DAILY_FOCUS_AGENT_MODEL` | *the CLI's own* | Model passed to the CLI untouched. Unset passes no flag |
 | `DAILY_FOCUS_AGENT_EFFORT` | *the CLI's own* | Effort passed to the CLI untouched. Unset passes no flag |
-| `DAILY_FOCUS_AGENT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use to reach your sources, in its permission syntax, comma-separated. Writing `items.json`, and nothing else in the store, is allowed regardless. Ignored by Codex |
+| `DAILY_FOCUS_AGENT_TOOLS` | `Bash(gh *),Bash(acli *),WebFetch,mcp__claude_ai_Gmail` | What Claude Code may use to reach your sources, in its permission syntax, comma-separated. Writing `items.json`, and nothing else in the store, is allowed regardless. The default allows every Gmail tool, sending included. Ignored by Codex |
 
 ## If something looks wrong
 

package/dist/{audit-W3O6CLOF.js → audit-ITRXIX6T.js}

@@ -1,3 +1,7 @@
+import {
+  readSystemZone,
+  startingZone
+} from "./chunk-AIQO2YAI.js";
 import {
   linkState
 } from "./chunk-QKT2FAB5.js";
@@ -8,7 +12,7 @@ import {
   readArchiveIndex,
   resolveItems,
   runContractChecks
-} from "./chunk-UM2EPNWR.js";
+} from "./chunk-26JG3D5C.js";
 import {
   BRIEF_REFRESH_GRACE_HOURS,
   describeSchedule,
@@ -18,7 +22,7 @@ import {
   resolveSchedule,
   runsOn,
   workingMsBetween
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 import {
   command
 } from "./chunk-BC2W7NND.js";
@@ -27,6 +31,7 @@ import {
 import { readFile, readdir } from "node:fs/promises";
 import { resolve } from "node:path";
 var config = loadConfig();
+process.env.TZ = (await startingZone(config.timeZoneFile, await readSystemZone())).timeZone;
 var store = new Store(config);
 var failures = 0;
 var warnings = 0;

package/dist/{chunk-UM2EPNWR.js → chunk-26JG3D5C.js}

@@ -14,7 +14,7 @@ import {
   startOfLocalDay,
   workingDaysSince,
   workingMsBetween
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 
 // src/fs.ts
 import { mkdir, rename, writeFile } from "node:fs/promises";

package/dist/chunk-AIQO2YAI.js

@@ -0,0 +1,107 @@
+import {
+  writeJsonAtomic
+} from "./chunk-26JG3D5C.js";
+import {
+  localTimeZone
+} from "./chunk-RNE27FQY.js";
+
+// src/zone.ts
+import { readFile, readlink } from "node:fs/promises";
+function validZone(raw) {
+  if (typeof raw !== "string" || !/^[A-Za-z][A-Za-z0-9_+\-/]*$/.test(raw)) return null;
+  try {
+    new Intl.DateTimeFormat("en", { timeZone: raw });
+    return raw;
+  } catch {
+    return null;
+  }
+}
+async function readSystemZone(path = "/etc/localtime") {
+  try {
+    const target = await readlink(path);
+    const name = /zoneinfo\/(?:posix\/|right\/)?(.+)$/.exec(target)?.[1];
+    return validZone(name);
+  } catch {
+    return null;
+  }
+}
+async function startingZone(file, system) {
+  const saved = await loadZoneFile(file);
+  if (!saved) return { timeZone: localTimeZone(), moved: false };
+  if (system && saved.systemTimeZone && system !== saved.systemTimeZone) return { timeZone: system, moved: true };
+  return { timeZone: saved.timeZone, moved: false };
+}
+async function loadZoneFile(file) {
+  let parsed;
+  try {
+    parsed = JSON.parse(await readFile(file, "utf8"));
+  } catch {
+    return null;
+  }
+  const record = parsed ?? {};
+  const timeZone = validZone(record.timeZone);
+  if (!timeZone) return null;
+  return { timeZone, systemTimeZone: validZone(record.systemTimeZone) };
+}
+var TimeZoneKeeper = class {
+  #file;
+  #readSystem;
+  #current = localTimeZone();
+  /** The Mac's zone as last read, so `checkSystem` acts on a change rather than a difference. */
+  #system = null;
+  constructor(file, readSystem = readSystemZone) {
+    this.#file = file;
+    this.#readSystem = readSystem;
+  }
+  get current() {
+    return this.#current;
+  }
+  /** Decide the zone at startup; see `startingZone`. */
+  async start() {
+    this.#system = await this.#readSystem();
+    const { timeZone, moved } = await startingZone(this.#file, this.#system);
+    if (moved) await this.#adopt(timeZone);
+    else this.#apply(timeZone);
+  }
+  /** A browser says it is in `zone`. True if that changed the dashboard's. */
+  async report(zone) {
+    if (zone === this.#current) return false;
+    await this.#adopt(zone);
+    return true;
+  }
+  /** Follow the Mac if its zone has changed since last read. True if that changed the dashboard's. */
+  async checkSystem() {
+    const system = await this.#readSystem();
+    if (!system || system === this.#system) return false;
+    this.#system = system;
+    if (system === this.#current) {
+      await this.#save();
+      return false;
+    }
+    await this.#adopt(system);
+    return true;
+  }
+  async #adopt(zone) {
+    this.#apply(zone);
+    await this.#save();
+  }
+  #apply(zone) {
+    this.#current = zone;
+    process.env.TZ = zone;
+  }
+  async #save() {
+    const file = { timeZone: this.#current, systemTimeZone: this.#system };
+    try {
+      await writeJsonAtomic(this.#file, file);
+    } catch (err) {
+      console.warn(`[daily-focus] could not save the time zone: ${err.message}`);
+    }
+  }
+};
+
+export {
+  validZone,
+  readSystemZone,
+  startingZone,
+  TimeZoneKeeper
+};

package/dist/{chunk-OPASVYLR.js → chunk-RNE27FQY.js}

@@ -353,7 +353,8 @@ function envAssistant(env) {
     binPath: expandHome((env.DAILY_FOCUS_ASSISTANT_BIN ?? "").trim() || (agent ?? "claude")),
     model: envString("DAILY_FOCUS_ASSISTANT_MODEL", "", env) || null,
     effort: envString("DAILY_FOCUS_ASSISTANT_EFFORT", "", env) || null,
-    tools: tools.length > 0 ? tools : DEFAULT_ASSISTANT_TOOLS
+    tools: tools.length > 0 ? tools : DEFAULT_ASSISTANT_TOOLS,
+    computerUse: envFlag("DAILY_FOCUS_ASSISTANT_COMPUTER_USE", false, env)
   };
 }
 var DEFAULT_ASSISTANT_TOOLS = ["Bash(gh *)", "Bash(acli *)", "WebFetch", "mcp__claude_ai_Gmail"];
@@ -444,6 +445,7 @@ function loadConfig(env = loadEnv()) {
     pullsFile: resolve2(dataDir, "prs.json"),
     calendarFile: resolve2(dataDir, "calendar.json"),
     ticketsFile: resolve2(dataDir, "tickets.json"),
+    timeZoneFile: resolve2(dataDir, "timezone.json"),
     // The same 1 to 120 the session endpoint holds a start to.
     sessionMinutes: envBounded("DAILY_FOCUS_SESSION_MINUTES", 25, 1, 120, env),
     awayAfterMinutes: envBounded("DAILY_FOCUS_AWAY_AFTER", profile === "personal" ? 0 : 10, 0, 24 * 60, env),

package/dist/{chunk-GFCWPYEI.js → chunk-SX5FPS3A.js}

@@ -1,3 +1,105 @@
+// src/codex.ts
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
+var GMAIL_CONNECTOR = "connector_2128aebfecb84f64a069897515042a44";
+var CONNECTOR_POLICY = [
+  'apps._default.default_tools_approval_mode="writes"',
+  'apps._default.approvals_reviewer="user"'
+];
+var GMAIL_DRAFTS = ["create_draft", "update_draft"].map(
+  (tool) => `apps.${GMAIL_CONNECTOR}.tools.${tool}.approval_mode="approve"`
+);
+var COMPUTER_USE_PLUGINS = [
+  "unified-computer-use@openai-bundled",
+  "computer-use@openai-bundled",
+  "browser@openai-bundled",
+  "chrome@openai-bundled"
+];
+var COMPUTER_USE_SERVERS = ["node_repl", "cua_repl", "computer-use"];
+var LIST_TIMEOUT_MS = 3e4;
+var exec = promisify(execFile);
+var defaultExec = async (file, args, { timeout }) => {
+  try {
+    const { stdout } = await exec(file, args, { timeout, maxBuffer: 16 * 1024 * 1024 });
+    return stdout;
+  } catch (err) {
+    const stderr = String(err.stderr ?? "").trim();
+    if (!stderr) throw err;
+    throw new Error(stderr.split("\n").slice(0, 2).join(" "));
+  }
+};
+function configArgs(overrides) {
+  return overrides.flatMap((override) => ["-c", override]);
+}
+async function enabledServers(bin, overrides, run) {
+  const output = await run(bin, ["mcp", "list", "--json", ...configArgs(overrides)], { timeout: LIST_TIMEOUT_MS });
+  let servers;
+  try {
+    servers = JSON.parse(output);
+  } catch {
+    throw new Error("codex mcp list --json printed something other than JSON");
+  }
+  if (!Array.isArray(servers)) throw new Error("codex mcp list --json printed something other than a list");
+  return servers.filter((server) => typeof server?.name === "string").filter((server) => server.enabled !== false).map((server) => server.name);
+}
+async function computerUseOff(bin, run = defaultExec) {
+  const overrides = COMPUTER_USE_PLUGINS.map((plugin) => `plugins.${plugin}.enabled=false`);
+  const left = (await enabledServers(bin, overrides, run)).filter((name) => COMPUTER_USE_SERVERS.includes(name));
+  if (left.length === 0) return overrides;
+  overrides.push(...left.map((name) => `mcp_servers.${name}.enabled=false`));
+  const still = (await enabledServers(bin, overrides, run)).filter((name) => COMPUTER_USE_SERVERS.includes(name));
+  if (still.length > 0) throw new Error(`Codex still starts ${still.join(", ")}`);
+  return overrides;
+}
+var CODEX_CONNECTOR_POLICY = "0.144.0";
+var CODEX_MINIMUM = "0.149.0";
+function versionParts(text) {
+  const match = /(\d+)\.(\d+)\.(\d+)/.exec(text);
+  return match ? match.slice(1, 4).map(Number) : null;
+}
+function olderThan(version, than) {
+  const a = versionParts(version);
+  const b = versionParts(than);
+  if (!a || !b) return false;
+  for (let i = 0; i < 3; i++) {
+    if (a[i] !== b[i]) return a[i] < b[i];
+  }
+  return false;
+}
+async function codexVersion(bin, run = defaultExec) {
+  try {
+    return versionParts(await run(bin, ["--version"], { timeout: LIST_TIMEOUT_MS }))?.join(".") ?? null;
+  } catch {
+    return null;
+  }
+}
+function refusalFor(version) {
+  if (!version || !olderThan(version, CODEX_CONNECTOR_POLICY)) return null;
+  return `Codex ${version} is older than ${CODEX_CONNECTOR_POLICY}, which ignores the dashboard's refusal of connector writes without saying so, so the dashboard won't run it. Update Codex`;
+}
+var CodexGate = class {
+  #bin;
+  #run;
+  #cleared = false;
+  constructor(bin, run = defaultExec) {
+    this.#bin = bin;
+    this.#run = run;
+  }
+  async refusal() {
+    if (this.#cleared) return null;
+    const version = await codexVersion(this.#bin, this.#run);
+    const refusal = refusalFor(version);
+    if (version && !refusal) this.#cleared = true;
+    return refusal;
+  }
+};
+async function codexVersionWarning(bin, run = defaultExec) {
+  const version = await codexVersion(bin, run);
+  if (!version || !olderThan(version, CODEX_MINIMUM)) return null;
+  const consequence = olderThan(version, CODEX_CONNECTOR_POLICY) ? `Before ${CODEX_CONNECTOR_POLICY} Codex ignores the dashboard's refusal of connector writes without saying so, so the dashboard won't start the agent or the assistant on it.` : `Before ${CODEX_MINIMUM} Codex can't switch computer use off, so the assistant won't answer while computer use is off in its settings.`;
+  return `Codex ${version} is older than ${CODEX_MINIMUM}, the oldest the dashboard's limits on Codex work with. ${consequence} Update Codex.`;
+}
+
 // src/assistant.ts
 import { spawn } from "node:child_process";
 import { randomUUID } from "node:crypto";
@@ -166,13 +268,20 @@ var claudeAdapter = {
   }
 };
 var codexAdapter = {
-  args({ prompt, sessionId, model, effort }) {
+  args({ prompt, sessionId, model, effort, drafts, codexConfig }) {
     const args = ["exec"];
     if (sessionId) args.push("resume");
     args.push("--json", "--skip-git-repo-check");
-    args.push("-c", 'sandbox_mode="workspace-write"', "-c", "sandbox_workspace_write.network_access=true");
-    if (model) args.push("-c", `model=${JSON.stringify(model)}`);
-    if (effort) args.push("-c", `model_reasoning_effort=${JSON.stringify(effort)}`);
+    const config = [
+      'sandbox_mode="workspace-write"',
+      "sandbox_workspace_write.network_access=true",
+      ...CONNECTOR_POLICY,
+      ...drafts ? GMAIL_DRAFTS : [],
+      ...codexConfig
+    ];
+    if (model) config.push(`model=${JSON.stringify(model)}`);
+    if (effort) config.push(`model_reasoning_effort=${JSON.stringify(effort)}`);
+    args.push(...configArgs(config));
     if (sessionId) args.push(sessionId);
     args.push(prompt);
     return args;
@@ -219,10 +328,17 @@ var Assistant = class _Assistant {
   config;
   hooks;
   spawnFn;
-  constructor(config, hooks, spawnFn = spawn) {
+  execFn;
+  /** Refuses a Codex too old to hold to the connector rules; see `codex.ts`. */
+  codexGate;
+  /** What switches computer use off, once Codex has said; see `computerUseConfig`. */
+  codexOff = null;
+  constructor(config, hooks, spawnFn = spawn, execFn) {
     this.config = config;
     this.hooks = hooks;
     this.spawnFn = spawnFn;
+    this.execFn = execFn;
+    this.codexGate = new CodexGate(config.assistant.binPath, execFn);
   }
   get enabled() {
     return this.config.assistant.agent !== null;
@@ -329,6 +445,19 @@ ${typed}` : action.request : typed;
     });
     const prompt = previous ? resolved.request : composePrompt(await this.instructions(), context, resolved.request, this.config.profile);
     await mkdir(this.config.assistantDir, { recursive: true });
+    const refusal = agent === "codex" ? await this.codexGate.refusal() : null;
+    if (refusal) {
+      await this.finish(turn, { ok: false, error: refusal });
+      return turn;
+    }
+    let codexConfig;
+    try {
+      codexConfig = await this.computerUseConfig();
+    } catch (err) {
+      const error = err.code === "ENOENT" ? this.spawnError(err) : `computer use is off in the settings, and Codex could not confirm it: ${err.message}. Update Codex, or turn computer use on for the assistant`;
+      await this.finish(turn, { ok: false, error });
+      return turn;
+    }
     const adapter = ADAPTERS[agent];
     const args = adapter.args({
       prompt,
@@ -336,7 +465,9 @@ ${typed}` : action.request : typed;
       model: this.config.assistant.model,
       effort: this.config.assistant.effort,
       tools: this.config.assistant.tools,
-      denyEdits: true
+      denyEdits: true,
+      drafts: true,
+      codexConfig
     });
     let child;
     try {
@@ -421,6 +552,20 @@ ${event.text}` : event.text;
     }
     this.hooks.onChange();
   }
+  /**
+   * What switches computer use off, when the assistant runs Codex and the user
+   * hasn't turned it on. Asked of Codex once and kept for the life of the
+   * process; settings that change it restart the dashboard anyway. A failure
+   * isn't kept, so the next turn asks again.
+   */
+  computerUseConfig() {
+    if (this.config.assistant.agent !== "codex" || this.config.assistant.computerUse) return Promise.resolve([]);
+    this.codexOff ??= computerUseOff(this.config.assistant.binPath, this.execFn).catch((err) => {
+      this.codexOff = null;
+      throw err;
+    });
+    return this.codexOff;
+  }
   spawnError(err) {
     const code = err.code;
     const bin = this.config.assistant.binPath;
@@ -450,6 +595,8 @@ ${event.text}` : event.text;
 };
 
 export {
+  CodexGate,
+  codexVersionWarning,
   QUICK_ACTIONS,
   ADAPTERS,
   Assistant

package/dist/{chunk-Q5OKXJXT.js → chunk-UY6HQLGE.js}

@@ -1,6 +1,6 @@
 import {
   localDateKey
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 
 // src/sample.ts
 function timeOn(now, hour, minute = 0) {

package/dist/cli.js

@@ -49,7 +49,7 @@ function shouldOpen(flag) {
   return flag && process.stdout.isTTY === true && !process.env.CI;
 }
 async function demo(open, profile) {
-  const { demoEnv, demoIntegrations, demoProfile, writeDemoStore } = await import("./demo-OQLT3QWP.js");
+  const { demoEnv, demoIntegrations, demoProfile, writeDemoStore } = await import("./demo-KVFAVGO7.js");
   const chosen = demoProfile(profile);
   const store = await mkdtemp(join(tmpdir(), "daily-focus-demo-"));
   process.on("exit", () => rmSync(store, { recursive: true, force: true }));
@@ -65,7 +65,7 @@ async function demo(open, profile) {
   );
 }
 async function start(open, onStarted, options = {}) {
-  const { runServer } = await import("./server-5O3LQVEY.js");
+  const { runServer } = await import("./server-SOCS3SZJ.js");
   await runServer({
     ...options,
     onStarted: (url) => {
@@ -162,20 +162,20 @@ async function main(argv) {
       }
       return start(open);
     case "service": {
-      const { main: service } = await import("./service-6ZFOHPWN.js");
+      const { main: service } = await import("./service-NAAAV67B.js");
       process.exitCode = await service(values.remove ? ["--remove"] : []);
       return;
     }
     // These three are scripts that do their work as they load, and read their
     // own flags from the command line.
     case "init":
-      await import("./init-DEVCAQZZ.js");
+      await import("./init-57WHZZNG.js");
       return;
     case "audit":
-      await import("./audit-W3O6CLOF.js");
+      await import("./audit-ITRXIX6T.js");
       return;
     case "seed":
-      await import("./seed-SMKNFYTC.js");
+      await import("./seed-VALN2TCQ.js");
       return;
     case "build-calendar":
       return buildCalendar();

package/dist/{demo-OQLT3QWP.js → demo-KVFAVGO7.js}

@@ -1,15 +1,15 @@
 import {
   QUICK_ACTIONS
-} from "./chunk-GFCWPYEI.js";
+} from "./chunk-SX5FPS3A.js";
 import {
   dateFromNow,
   sampleBrief,
   sampleGeneratedAt
-} from "./chunk-Q5OKXJXT.js";
+} from "./chunk-UY6HQLGE.js";
 import {
   PROFILES,
   localDateKey
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 import "./chunk-BC2W7NND.js";
 
 // src/demo.ts

package/dist/{init-DEVCAQZZ.js → init-57WHZZNG.js}

@@ -8,7 +8,7 @@ import {
 } from "./chunk-QKT2FAB5.js";
 import {
   loadConfig
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 import {
   PACKAGED,
   command

package/dist/{seed-SMKNFYTC.js → seed-VALN2TCQ.js}

@@ -1,12 +1,12 @@
 import {
   sampleBrief
-} from "./chunk-Q5OKXJXT.js";
+} from "./chunk-UY6HQLGE.js";
 import {
   Store
-} from "./chunk-UM2EPNWR.js";
+} from "./chunk-26JG3D5C.js";
 import {
   loadConfig
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 import {
   command
 } from "./chunk-BC2W7NND.js";

package/dist/{server-5O3LQVEY.js → server-SOCS3SZJ.js}

@@ -1,11 +1,17 @@
 import {
   ADAPTERS,
-  Assistant
-} from "./chunk-GFCWPYEI.js";
+  Assistant,
+  CodexGate,
+  codexVersionWarning
+} from "./chunk-SX5FPS3A.js";
 import {
   FOCUS_TEMPLATE,
   sourcesTemplate
 } from "./chunk-V2UN3JYL.js";
+import {
+  TimeZoneKeeper,
+  validZone
+} from "./chunk-AIQO2YAI.js";
 import {
   describeLink,
   linkStore,
@@ -20,7 +26,7 @@ import {
   stopSession,
   tempPathFor,
   writeJsonAtomic
-} from "./chunk-UM2EPNWR.js";
+} from "./chunk-26JG3D5C.js";
 import {
   CLI_NAMES,
   LAUNCH_SETTINGS,
@@ -36,7 +42,7 @@ import {
   readDotEnv,
   resolveSchedule,
   scheduledRunDue
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 import {
   PACKAGED,
   command,
@@ -1488,7 +1494,8 @@ async function runHelper(appPath, selfAddresses) {
   const out = join(tmpdir(), `daily-focus-calendar-${process.pid}-${Date.now()}.json`);
   try {
     try {
-      await run2("/usr/bin/open", ["-n", "-a", appPath, "--args", out, selfAddresses.join(",")], {
+      const zone = process.env.TZ ? ["--env", `TZ=${process.env.TZ}`] : [];
+      await run2("/usr/bin/open", ["-n", "-a", appPath, ...zone, "--args", out, selfAddresses.join(",")], {
         timeout: HELPER_TIMEOUT_MS
       });
     } catch (err) {
@@ -2501,10 +2508,13 @@ var AgentRunner = class {
   config;
   hooks;
   spawnFn;
-  constructor(config, hooks, spawnFn = spawn) {
+  /** Refuses a Codex too old to hold to the connector rules; see `codex.ts`. */
+  codexGate;
+  constructor(config, hooks, spawnFn = spawn, execFn) {
     this.config = config;
     this.hooks = hooks;
     this.spawnFn = spawnFn;
+    this.codexGate = new CodexGate(config.agent.binPath, execFn);
   }
   get enabled() {
     return this.config.agent.cli !== null;
@@ -2627,7 +2637,9 @@ var AgentRunner = class {
       model: this.config.agent.model,
       effort: this.config.agent.effort,
       tools: [...briefWritingTools(), ...this.config.agent.tools],
-      denyEdits: false
+      denyEdits: false,
+      drafts: false,
+      codexConfig: []
     });
     await this.spawnInto(run6, null, args, RUN_TIMEOUT_MS, "gave up after an hour");
     return run6;
@@ -2673,7 +2685,9 @@ var AgentRunner = class {
       effort: this.config.agent.effort,
       // The sources, and not the brief: a chat is given nothing to write.
       tools: this.config.agent.tools,
-      denyEdits: true
+      denyEdits: true,
+      drafts: false,
+      codexConfig: []
     });
     await this.spawnInto(run6, turn, args, TURN_TIMEOUT_MS, "gave up after ten minutes");
     return turn;
@@ -2687,6 +2701,11 @@ var AgentRunner = class {
     const cli = run6.cli;
     const adapter = ADAPTERS[cli];
     await mkdir(this.config.dataDir, { recursive: true });
+    const refusal2 = cli === "codex" ? await this.codexGate.refusal() : null;
+    if (refusal2) {
+      await this.finish(run6, turn, { ok: false, error: refusal2 });
+      return;
+    }
     let child;
     try {
       child = this.spawnFn(this.config.agent.binPath, args, {
@@ -3010,7 +3029,7 @@ var SETTINGS = [
     key: "DAILY_FOCUS_AGENT_TOOLS",
     group: "agent",
     label: "Tools Claude Code may use",
-    help: "In Claude Code's permission syntax, comma-separated. Add your calendar, chat and document connectors by name, or the brief reports them as unreachable. Ignored by Codex.",
+    help: "In Claude Code's permission syntax, comma-separated. Add your calendar, chat and document connectors by name, or the brief reports them as unreachable. The default allows every Gmail tool, sending included; name the tools you want instead to narrow it. Ignored by Codex.",
     kind: "list",
     fallback: always("Bash(gh *), Bash(acli *), WebFetch, mcp__claude_ai_Gmail"),
     advanced: true
@@ -3037,7 +3056,7 @@ var SETTINGS = [
     key: "DAILY_FOCUS_ASSISTANT",
     group: "assistant",
     label: "Answer questions with",
-    help: "Puts an assistant in every item's panel. It reads and drafts, and never sends, posts or edits.",
+    help: "Puts an assistant in every item's panel, told to read and draft and never to send, post or edit. Under Codex, every connector write but a Gmail draft is refused.",
     kind: "choice",
     choices: OFF_OR_CLI,
     fallback: always("Off")
@@ -3063,11 +3082,19 @@ var SETTINGS = [
     key: "DAILY_FOCUS_ASSISTANT_TOOLS",
     group: "assistant",
     label: "Tools Claude Code may use",
-    help: "In Claude Code's permission syntax, comma-separated. Editing tools are denied whatever this says. Ignored by Codex.",
+    help: "In Claude Code's permission syntax, comma-separated. Editing tools are denied whatever this says. The default allows every Gmail tool, sending included; name the tools you want instead to narrow it. Ignored by Codex.",
     kind: "list",
     fallback: always("Bash(gh *), Bash(acli *), WebFetch, mcp__claude_ai_Gmail"),
     advanced: true
   },
+  {
+    key: "DAILY_FOCUS_ASSISTANT_COMPUTER_USE",
+    group: "assistant",
+    label: "Computer use",
+    help: "Codex only. On lets the assistant use Codex's computer-use and browser plugins, which act in your apps and browser with your sign-ins. Off switches them off for its runs. Claude Code uses only the tools in its list.",
+    kind: "flag",
+    fallback: always("Off")
+  },
   {
     key: "DAILY_FOCUS_ASSISTANT_BIN",
     group: "assistant",
@@ -3686,6 +3713,8 @@ async function startServer(env, options = {}) {
   const store = new Store(config);
   await store.ensureDataDir();
   const storeId = await store.fingerprint();
+  const zone = new TimeZoneKeeper(config.timeZoneFile, options.readSystemZone);
+  await zone.start();
   for (const outcome of await linkStore(config)) {
     if (outcome.result === "linked") console.log(`[daily-focus] linked ${describeLink(config, outcome)}`);
     if (outcome.result === "failed") console.warn(`[daily-focus] could not link ${outcome.name}: ${outcome.detail}`);
@@ -3715,6 +3744,15 @@ async function startServer(env, options = {}) {
       restartWhenIdle();
     }
   });
+  let codexWarnings = [];
+  const codexBins = /* @__PURE__ */ new Set();
+  if (config.agent.cli === "codex") codexBins.add(config.agent.binPath);
+  if (config.assistant.agent === "codex") codexBins.add(config.assistant.binPath);
+  void Promise.all([...codexBins].map((bin) => codexVersionWarning(bin))).then((found) => {
+    codexWarnings = [...new Set(found.filter((warning) => warning !== null))];
+    for (const warning of codexWarnings) console.warn(`[daily-focus] ${warning}`);
+    if (codexWarnings.length > 0) void broadcast();
+  });
   function requestRestart() {
     restart = options.onRestart ? "waiting" : "manual";
     restartWhenIdle();
@@ -3742,7 +3780,7 @@ async function startServer(env, options = {}) {
       tickets: tickets.view(actions, now),
       assistant: assistant.view(),
       agentRun: agent.view(now),
-      setupWarnings: [...configWarnings, ...linkWarning ? [linkWarning] : []],
+      setupWarnings: [...configWarnings, ...codexWarnings, ...linkWarning ? [linkWarning] : []],
       restart,
       setup,
       assetVersion,
@@ -3781,6 +3819,8 @@ data: ${payload}
         basename(tempPathFor(config.pullsFile)),
         basename(config.ticketsFile),
         basename(tempPathFor(config.ticketsFile)),
+        basename(config.timeZoneFile),
+        basename(tempPathFor(config.timeZoneFile)),
         // Appended by this process, which broadcasts on its own.
         basename(config.assistantLogFile),
         basename(config.agentLogFile)
@@ -3822,10 +3862,23 @@ data: ${payload}
   await checkPresence();
   await assistant.start();
   await agent.start();
-  async function clockTick() {
+  let ticks = Promise.resolve();
+  function clockTick() {
+    ticks = ticks.then(tickOnce).catch((err) => {
+      console.error(`[daily-focus] the morning clock failed: ${err.message}`);
+    });
+    return ticks;
+  }
+  async function tickOnce() {
+    if (await zone.checkSystem()) zoneMoved();
     if (restart === "waiting" || await firstBriefPending(config)) return;
     await agent.tick();
   }
+  function zoneMoved() {
+    console.log(`[daily-focus] time zone is now ${zone.current}`);
+    void calendar.refresh();
+    void broadcast();
+  }
   void clockTick();
   const agentClock = setInterval(() => {
     void clockTick();
@@ -3909,6 +3962,26 @@ data: ${JSON.stringify(await buildState())}
       sendState(res, await buildState());
       return;
     }
+    if (path === "/api/timezone" && req.method === "POST") {
+      let body;
+      try {
+        body = JSON.parse(await readBody(req));
+      } catch (err) {
+        sendJSON(res, 400, { error: `invalid JSON body: ${err.message}` });
+        return;
+      }
+      const timeZone = validZone(body?.timeZone);
+      if (!timeZone) {
+        sendJSON(res, 400, { error: '"timeZone" must be an IANA time zone, such as Europe/Copenhagen' });
+        return;
+      }
+      if (await zone.report(timeZone)) {
+        zoneMoved();
+        await clockTick();
+      }
+      sendState(res, await buildState());
+      return;
+    }
     if (path === "/api/calendar/refresh" && req.method === "POST") {
       await calendar.refresh();
       sendState(res, await buildState());

package/dist/{service-6ZFOHPWN.js → service-NAAAV67B.js}

@@ -1,6 +1,6 @@
 import {
   loadConfig
-} from "./chunk-OPASVYLR.js";
+} from "./chunk-RNE27FQY.js";
 import {
   IN_NPX_CACHE,
   PACKAGED,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "daily-focus",
-  "version": "1.1.1-dev.2",
+  "version": "1.2.0-dev.4",
   "description": "An interactive dashboard of what you should focus on today at work",
   "keywords": [
     "dashboard",

package/public/app.js

@@ -1010,6 +1010,9 @@ function subscribe(onState, onError) {
   source.addEventListener("open", () => onError(null));
   return () => source.close();
 }
+function postTimeZone(timeZone) {
+  return post("/api/timezone", { timeZone });
+}
 function postSession(body) {
   return post("/api/session", body);
 }
@@ -1293,15 +1296,28 @@ function ThemeToggle({ ui: ui2, handlers: handlers2 }) {
 }
 
 // client/format.ts
-var timeFmt = new Intl.DateTimeFormat(void 0, { hour: "2-digit", minute: "2-digit" });
-var dayFmt = new Intl.DateTimeFormat(void 0, {
+var DAY_FORMAT = {
   weekday: "long",
   day: "numeric",
   month: "long"
-});
-var shortDayFmt = new Intl.DateTimeFormat(void 0, { day: "numeric", month: "short" });
-var shortDayYearFmt = new Intl.DateTimeFormat(void 0, { day: "numeric", month: "short", year: "numeric" });
-var weekdayFmt = new Intl.DateTimeFormat(void 0, { weekday: "long" });
+};
+function formatters(timeZone) {
+  return {
+    time: new Intl.DateTimeFormat(void 0, { timeZone, hour: "2-digit", minute: "2-digit" }),
+    day: new Intl.DateTimeFormat(void 0, { timeZone, ...DAY_FORMAT }),
+    shortDay: new Intl.DateTimeFormat(void 0, { timeZone, day: "numeric", month: "short" }),
+    shortDayYear: new Intl.DateTimeFormat(void 0, { timeZone, day: "numeric", month: "short", year: "numeric" }),
+    weekday: new Intl.DateTimeFormat(void 0, { timeZone, weekday: "long" })
+  };
+}
+var clockFormats = formatters();
+var dateFormats = formatters("UTC");
+var DATE_ONLY = /^\d{4}-\d{2}-\d{2}$/;
+function formatted(value, kind) {
+  const bare = typeof value === "string" && DATE_ONLY.test(value);
+  const d4 = bare ? /* @__PURE__ */ new Date(`${value}T00:00:00Z`) : parseDate(value);
+  return d4 && !Number.isNaN(d4.getTime()) ? (bare ? dateFormats : clockFormats)[kind].format(d4) : "";
+}
 function parseDate(value) {
   if (typeof value !== "string" || value === "") return null;
   const dateOnly = /^(\d{4})-(\d{2})-(\d{2})$/.exec(value);
@@ -1310,20 +1326,16 @@ function parseDate(value) {
   return Number.isNaN(d4.getTime()) ? null : d4;
 }
 function formatTime(value) {
-  const d4 = parseDate(value);
-  return d4 ? timeFmt.format(d4) : "";
+  return formatted(value, "time");
 }
 function formatDay(value) {
-  const d4 = parseDate(value);
-  return d4 ? dayFmt.format(d4) : "";
+  return formatted(value, "day");
 }
 function formatShortDay(value) {
-  const d4 = parseDate(value);
-  return d4 ? shortDayFmt.format(d4) : "";
+  return formatted(value, "shortDay");
 }
 function formatWeekday(value) {
-  const d4 = parseDate(value);
-  return d4 ? weekdayFmt.format(d4) : "";
+  return formatted(value, "weekday");
 }
 var dayKeyFmt = null;
 var calendarZone;
@@ -1331,9 +1343,11 @@ function setCalendarZone(timeZone) {
   if (timeZone === calendarZone) return;
   calendarZone = timeZone;
   try {
+    clockFormats = formatters(timeZone);
     dayKeyFmt = timeZone ? new Intl.DateTimeFormat("en-US", { timeZone, year: "numeric", month: "2-digit", day: "2-digit" }) : null;
   } catch {
     dayKeyFmt = null;
+    clockFormats = formatters();
   }
 }
 function dayKey(d4) {
@@ -1370,8 +1384,8 @@ function daysFromToday(value, now = /* @__PURE__ */ new Date()) {
   }
   const target = parseDate(value);
   if (!target) return null;
-  const a4 = new Date(now.getFullYear(), now.getMonth(), now.getDate()).getTime();
-  const b4 = new Date(target.getFullYear(), target.getMonth(), target.getDate()).getTime();
+  const a4 = Date.UTC(...splitKey(dayKey(now)));
+  const b4 = Date.UTC(...splitKey(dayKey(target)));
   return Math.round((b4 - a4) / 864e5);
 }
 function relativeDay(value, now = /* @__PURE__ */ new Date()) {
@@ -1402,7 +1416,7 @@ function relativeTime(value, now = /* @__PURE__ */ new Date()) {
   if (hours < 48) return `${hours} h ago`;
   const days = Math.round(hours / 24);
   if (days <= 30) return `${days} days ago`;
-  return d4.getFullYear() === now.getFullYear() ? formatShortDay(value) : shortDayYearFmt.format(d4);
+  return dayKey(d4).slice(0, 4) === dayKey(now).slice(0, 4) ? formatShortDay(value) : formatted(value, "shortDayYear");
 }
 function firstLine(text) {
   const line = String(text).split("\n").find((l5) => l5.trim() !== "") ?? "";
@@ -3458,6 +3472,46 @@ function parkButton(row, ui2, handlers2, menuKey) {
   );
 }
 
+// client/zone.ts
+var ZONE_CHECK_MS = 6e4;
+function browserZone() {
+  return Intl.DateTimeFormat().resolvedOptions().timeZone;
+}
+function sameZone(a4, b4) {
+  if (a4 === b4) return true;
+  try {
+    const canonical = (zone2) => new Intl.DateTimeFormat("en", { timeZone: zone2 }).resolvedOptions().timeZone;
+    return canonical(a4) === canonical(b4);
+  } catch {
+    return false;
+  }
+}
+function watchZone(deps) {
+  let seen = deps.browserZone();
+  let sending = null;
+  function tellIfElsewhere() {
+    const here = deps.browserZone();
+    const there = deps.dashboardZone();
+    if (there === void 0 || sameZone(here, there) || sending === here) return;
+    sending = here;
+    deps.send(here).catch((err) => console.warn(`[daily-focus] could not tell the dashboard this browser is in ${here}:`, err)).finally(() => {
+      sending = null;
+    });
+  }
+  return {
+    look() {
+      seen = deps.browserZone();
+      if (deps.visible()) tellIfElsewhere();
+    },
+    check() {
+      const here = deps.browserZone();
+      if (here === seen) return;
+      seen = here;
+      tellIfElsewhere();
+    }
+  };
+}
+
 // client/chrome.ts
 function Header({ state: state2, ui: ui2, handlers: handlers2 }) {
   const error = ui2.connectionError.value;
@@ -3468,7 +3522,8 @@ function Header({ state: state2, ui: ui2, handlers: handlers2 }) {
       "div",
       { class: "page-header__titles" },
       el("h1", null, "Daily Focus"),
-      el("p", { class: "page-header__date", id: "header-date" }, state2 ? headerDate(state2) : "")
+      el("p", { class: "page-header__date", id: "header-date" }, state2 ? headerDate(state2) : ""),
+      state2 ? zoneLine(state2) : null
     ),
     el(
       "div",
@@ -3562,6 +3617,11 @@ function headerDate(state2) {
   const today = dayKey(new Date(state2.now));
   return formatDay(state2.brief.date ?? today) || formatDay(today);
 }
+function zoneLine(state2) {
+  if (sameZone(browserZone(), state2.timeZone)) return null;
+  const at = state2.agentRun?.schedule ? ` \xB7 Morning agent at ${state2.agentRun.schedule.at}` : "";
+  return el("p", { class: "page-header__zone", id: "header-zone" }, `Times in ${state2.timeZone}${at}`);
+}
 function freshness(state2, handlers2) {
   let text;
   let stale;
@@ -3717,7 +3777,7 @@ function HelpDialog(_props) {
     el(
       "p",
       { class: "help__note" },
-      `Done, snoozed and dismissed all tell the morning agent to leave an item out of tomorrow's brief. A note is sent along with it as free text. On both boards only snooze and note apply: a pull request stays until it's merged or closed, and a ticket whose status looks wrong is put right in Jira rather than here. Click a card to open its panel, where its notes and the assistant live; the panel stays on the item it was opened for. The assistant is a CLI run on your machine; it reads and drafts, never sends or posts. Click "updated \u2026 ago" in the header to open the morning agent's latest run: its report, earlier runs, and a place to ask it why it did what it did.`
+      `Done, snoozed and dismissed all tell the morning agent to leave an item out of tomorrow's brief. A note is sent along with it as free text. On both boards only snooze and note apply: a pull request stays until it's merged or closed, and a ticket whose status looks wrong is put right in Jira rather than here. Click a card to open its panel, where its notes and the assistant live; the panel stays on the item it was opened for. The assistant is a CLI run on your machine, told to read and draft, never to send or post. Click "updated \u2026 ago" in the header to open the morning agent's latest run: its report, earlier runs, and a place to ask it why it did what it did.`
     ),
     el("form", { method: "dialog" }, el("button", { type: "submit", class: "button" }, "Close"))
   );
@@ -5164,15 +5224,31 @@ j3(() => {
 installKeyboard(handlers);
 await refresh();
 startLocalTick();
+var zone = watchZone({
+  browserZone,
+  dashboardZone: () => state.value?.timeZone,
+  visible: () => document.visibilityState === "visible",
+  send: async (timeZone) => adoptState(await postTimeZone(timeZone))
+});
+zone.look();
+document.addEventListener("visibilitychange", () => zone.look());
+window.addEventListener("focus", () => zone.look());
+setInterval(() => zone.check(), ZONE_CHECK_MS);
 followLocation();
 window.addEventListener("popstate", followLocation);
 window.addEventListener("hashchange", followLocation);
+var reconnected = false;
 subscribe(
   // A server push is authoritative, but must not yank a row out from under an
   // in-flight click; adoptState keeps anything pending at its optimistic status.
-  (next) => adoptState(next),
+  (next) => {
+    adoptState(next);
+    if (reconnected) zone.look();
+    reconnected = false;
+  },
   (err) => {
     ui.connectionError.value = err;
+    if (err === null) reconnected = true;
   }
 );
 //# sourceMappingURL=app.js.map

package/public/style.css

@@ -161,6 +161,12 @@ a {
   gap: 8px;
 }
 
+.page-header__zone {
+  margin: 3px 0 0;
+  color: var(--ink-2);
+  font-size: 12px;
+}
+
 .freshness {
   color: var(--ink-3);
   font-size: 13px;