instar 1.3.1611 → 1.3.1612

package/dashboard/console/console.css

@@ -1161,8 +1161,10 @@ a.machine-line-link:hover { border-color: var(--accent); color: var(--text); }
 /* Queue pace card (docs/specs/queue-pace.md) */
 .pace-card { grid-column: 1 / -1; margin-top: var(--s-4, 16px); }
 .pace-lines { list-style: none; margin: var(--s-2, 8px) 0 0; padding: 0; display: grid; gap: 8px; }
-.pace-line { display: flex; align-items: baseline; gap: 8px; flex-wrap: wrap; font-size: 14px; color: var(--text); }
+.pace-line { display: grid; grid-template-columns: auto 1fr; align-items: baseline; column-gap: 8px; font-size: 14px; color: var(--text); }
 .pace-line .dot { position: relative; top: -1px; }
+.pace-line .pace-text { min-width: 0; }
+.pace-line .pace-prs { grid-column: 2; }
 .pace-line[data-tone="muted"] .pace-text { color: var(--text-muted); }
 .pace-prs { display: inline-flex; gap: 6px; flex-wrap: wrap; font-size: 13px; }
 .mb-pace { margin-top: 4px; }

package/dashboard/console/console.js

@@ -393,6 +393,8 @@ function paintCard(def, model, repaint = false) {
     foot.append(b);
   } else foot.append(el('span', { class: 'card-age', text: extra > 0 ? `and ${extra} more` : '' }));
   if (def.href) foot.append(el('a', { href: def.href, text: 'Open', 'aria-label': `Open ${def.title} in the dashboard` }));
+  // An empty footer would leave a blank band (and its divider) under the rows.
+  foot.hidden = !foot.textContent.trim() && !foot.querySelector('a, button');
   return model;
 }
 
@@ -565,7 +567,6 @@ function renderGroup(main, g) {
     el('section', { class: 'group-head' },
       el('div', { class: 'eyebrow', text: g.label }),
       el('h1', { text: g.question }),
-      el('p', { text: 'Each of these opens in the dashboard, where everything works exactly as before.' }),
     ),
     el('div', { class: 'tiles' }, g.tabs.map((t) => tile(t))),
     ...groupExtras(g, { get }), // the Development tile (Work, maintainer mode only) and the developer-tools switch (Settings)
@@ -585,8 +586,8 @@ function renderGroup(main, g) {
 
 function footNote() {
   return el('p', { class: 'foot-note' },
-    document.createTextNode('This is the new Instar console. Everything is still in the '),
-    el('a', { href: '/dashboard', text: 'legacy dashboard' }),
+    document.createTextNode('The older dashboard is still available: '),
+    el('a', { href: '/dashboard', text: 'open the legacy dashboard' }),
     document.createTextNode('.'),
   );
 }

package/dashboard/console/home-model.js

@@ -166,7 +166,10 @@ export function buildNeeds(res, now = Date.now(), names = {}) {
     return {
       key: groupKey(top), stale, last: g.last, prio: PRIORITY[top.priority] ?? 9,
       main: top.title || top.summary || 'Untitled item',
-      sub: [g.items.length > 1 ? `${g.items.length} copies` : null, [...g.machines].join(', ') || null, String(top.priority || '').toLowerCase()].filter(Boolean).join(' · '),
+      // The machine only when the title does not already start with it; the
+      // priority word is the queue's bookkeeping, not something to act on.
+      sub: [g.items.length > 1 ? `${g.items.length} copies` : null,
+        [...g.machines].filter((m) => !String(top.title || top.summary || '').startsWith(`${m}:`)).join(', ') || null].filter(Boolean).join(' · '),
       end: (ago(g.last, now) || '').replace(' ago', '') ? `${ago(g.last, now)}` : '',
       tone: stale ? 'unknown' : (top.priority === 'URGENT' ? 'bad' : 'attn'),
       detail: top.description || top.body || '',

package/dashboard/console/messages-model.js

@@ -82,7 +82,8 @@ export function buildMessagesPage(statusRes, healthRes, now = Date.now(), topicN
     const automatic = held.filter(h => h.producerKind === 'server-automation').length;
     headline = heldHeadline(held.length, replies, automatic, held.length - replies - automatic);
   } else if (expired) headline = `${expired} ${expired === 1 ? 'message' : 'messages'} expired before delivery.`;
-  else headline = 'No messages are held.';
+  // Held replies are a fault, never a feature to report on: with none, the page is just Messages.
+  else headline = 'Messages to you';
   const sub = [
     held.length ? 'I need to restore delivery. This is not a task for you.' : null,
     individual.length && individual[individual.length - 1].sinceTs ? `The oldest has waited ${ago(individual[individual.length - 1].sinceTs, now).replace(' ago', '')}.` : null,

package/dashboard/console/messages.js

@@ -43,7 +43,7 @@ export async function renderMessages(main, ctx) {
       el('span', { class: 'need-sub', text: 'Who wrote each message is private to you. One unlock lasts about 15 minutes in this page.' }),
       el('button', { class: 'btn-primary btn-inline', type: 'button', text: 'Unlock', onclick: async () => { const a = await askPin({ title: 'Message records', explain: 'Unlock message records. Your PIN is not kept; the unlock lives in this page until it expires.', adapter: 'session' }); if (a) refresh(); } })) : null;
     setKids(main, el('div', { class: 'msg-page' },
-      pageHead({ eyebrow: 'People · Messages to you', headline: hf ? heldHeadline(hf.count, hf.sessionReplies, hf.automaticMessages, hf.otherMessages) : 'Messages to you', sub: hf ? 'I’m handling delivery. Unlock to see the individual records.' : '', tone: hf && hf.count ? 'attn' : 'muted' }),
+      pageHead({ eyebrow: 'People · Messages to you', headline: hf && hf.count ? heldHeadline(hf.count, hf.sessionReplies, hf.automaticMessages, hf.otherMessages) : 'Messages to you', sub: hf && hf.count ? 'I’m handling delivery. Unlock to see the individual records.' : '', tone: hf && hf.count ? 'attn' : 'muted' }),
       unlock || cantTell(page.reason), legacyLink()));
     return;
   }

package/dashboard/console/pace-model.js

@@ -60,6 +60,11 @@ export function paceLine(q, showMachine = false) {
   if (person && q.verdict === 'falling-behind') verdict = 'waiting on you';
   if (q.verdict === 'catching-up' && typeof q.daysToClear === 'number' && !person) verdict += `, about ${fmtRate(q.daysToClear)} days to clear`;
   const inR = fmtRate(q.inflowPerDay), outR = fmtRate(q.outflowPerDay);
+  // Nothing in, nothing done, but items still open: that is a stalled pile, not "steady".
+  const open = Number(q.open);
+  if (!Number(q.inflowPerDay) && !Number(q.outflowPerDay) && open > 0) {
+    return `${label}${where}: nothing came in or got done this week; ${open} still open`;
+  }
   const rates = inR !== null && outR !== null ? `${inR} a day in, ${outR} done — ` : '';
   let line = `${label}${where}: ${rates}${verdict}`;
   if (q.verdict === 'falling-behind') {

package/dashboard/console/pace.js

@@ -17,7 +17,9 @@ export function paceCard(get) {
     const machines = new Set(queues.map((q) => q.machine));
     const anyBehind = queues.some((q) => toneOf(q) === 'attn');
     host.dataset.state = anyBehind ? 'attn' : 'ok';
-    const lines = queues.map((q) => {
+    // A queue with nothing coming in, nothing done and nothing open says nothing.
+    const idle = (q) => !Number(q.inflowPerDay) && !Number(q.outflowPerDay) && !Number(q.open);
+    const lines = queues.filter((q) => !idle(q)).map((q) => {
       const tone = toneOf(q);
       const li = el('li', { class: 'pace-line', 'data-tone': tone },
         el('span', { class: `dot ${DOT[tone] || ''}`.trim() }),

package/dashboard/console/plans-model.js

@@ -162,9 +162,25 @@ function recheckText(e, now) {
   return { text: `rechecking ${new Date(t).toLocaleDateString([], { weekday: 'short', month: 'short', day: 'numeric' })}`, overdue: false };
 }
 
+// The deferral detector recorded whole reply commands (`cat <<'EOF' | <reply script> N`
+// + the message + `EOF`), signed links included (2026-11-02). Show the message's first line,
+// with credential-looking query values masked; a command with no message text is named, not
+// printed.
+const SECRET_QUERY = /([?&](?:sig|signature|token|key|auth|access_token)[^=&\s]*=)[^&\s]+/gi;
+const SHELL_START = /^\s*(?:cd|cat|curl|echo|node|bash|sh|gh|git|python3?|npx)\b/;
+export function blockerText(raw) {
+  const s = String(raw || '');
+  const doc = /<<-?\s*['"]?(\w+)['"]?[^\n]*\n([\s\S]*?)(?:\n[ \t]*\1[ \t]*(?:\n|$)|$)/.exec(s);
+  let body = doc ? doc[2] : s;
+  if (!doc && SHELL_START.test(body)) return 'Flagged in a command I ran (no message text)';
+  body = body.replace(SECRET_QUERY, '$1…');
+  const line = body.split('\n').map((l) => l.trim()).find(Boolean) || '';
+  return line.length > 220 ? `${line.slice(0, 219)}…` : line;
+}
+
 /** A blocker as a row: { key, main, sub, end, tone, kind, record }. */
 export function blockerRow(e, now = Date.now()) {
-  const main = e.detectedText || e.origin || 'A blocker';
+  const main = blockerText(e.detectedText) || e.origin || 'A blocker';
   let sub; let tone = null; let kind;
   if (e.state === 'true-blocker') { const r = recheckText(e, now); sub = `Truly stuck for now · ${r.text}`; tone = 'bad'; kind = 'stuck'; }
   else if (e.state === 'access-requested') { sub = 'Waiting on you for access'; tone = 'attn'; kind = 'needs-you'; }

package/dashboard/console/promises.js

@@ -56,7 +56,8 @@ export async function renderPromises(main, ctx) {
     }),
     page.coverage ? note(page.coverage) : null,
     el('div', { class: 'page-sections' },
-      section({ id: 'waiting', title: 'Waiting on you', rows: s.waiting.map((r) => ({ ...r, tone: 'attn' })), empty: 'Nothing is waiting on you.', onRow: open }),
+      // When nothing waits on the operator the headline already says so; an empty card would repeat it.
+      s.waiting.length ? section({ id: 'waiting', title: 'Waiting on you', rows: s.waiting.map((r) => ({ ...r, tone: 'attn' })), empty: 'Nothing is waiting on you.', onRow: open }) : null,
       section({ id: 'carrying', title: 'I’m handling', rows: s.carrying, collapsed: true, onRow: open }),
       section({ id: 'handled', title: 'Older, still open', rows: s.handled.map((r) => ({ ...r, tone: 'unknown' })), collapsed: true, onRow: open }),
       section({ id: 'closed', title: 'Closed this week', rows: s.closed, collapsed: true, onRow: open }),

package/dashboard/console/secrets-model.js

@@ -124,8 +124,18 @@ export function buildRequests(res, opts = {}) {
  * (names only); falls back to the secret-sync key list when that is switched off. Lengths
  * and values are never read into the model.
  */
+// A saved Secret Drop is stored under `secretDrops.<64-hex token>` (often with
+// "(+N nested)"): a token, not a name. Show them as one counted line instead.
+const DROP_KEY = /^secretDrops\.[0-9a-f]{16,}\b/;
+function groupDrops(names) {
+  const drops = names.filter((n) => DROP_KEY.test(n)).length;
+  if (!drops) return names;
+  const rest = names.filter((n) => !DROP_KEY.test(n));
+  return [...rest, drops === 1 ? 'Saved Secret Drop submission (1)' : `Saved Secret Drop submissions (${drops})`].sort((a, b) => a.localeCompare(b));
+}
+
 export function buildKeys(ctxRes, syncRes) {
-  const clean = (arr) => [...new Set(arr.filter((n) => typeof n === 'string' && n.trim()).map((n) => n.trim()))].sort((a, b) => a.localeCompare(b));
+  const clean = (arr) => groupDrops([...new Set(arr.filter((n) => typeof n === 'string' && n.trim()).map((n) => n.trim()))]).sort((a, b) => a.localeCompare(b));
   if (ctxRes && ctxRes.ok && ctxRes.data && Array.isArray(ctxRes.data.names)) {
     const vaultState = ctxRes.data.vaultState;
     if (vaultState === 'decrypt-failed') return { ok: false, decryptFailed: true, names: [], reason: 'Can’t open the saved keys on this machine.' };

package/dist/commands/server.js

@@ -22302,7 +22302,7 @@ export async function startServer(options) {
                 greenPrAutoMerger?.attachLocalVerify({
                     effectiveFloor: () => (rec ? rec.effectiveFloor() : null),
                     mainHealth: () => svc.mainHealth().state,
-                    hasRecord: (pr, head, base) => !!svc.getRecord(pr, head, base),
+                    hasRecord: (pr, head, base) => wiring.hasPassingRecord(svc, pr, head, base),
                     requestVerify: (pr) => svc.request(pr, { explicit: false }),
                     // Dry-run posting also suppresses the watcher's actions→local disarm write.
                     postStatuses: () => liveConfig.get('monitoring.localVerify.postStatuses', false) === true,