let-them-talk 3.4.3 → 3.5.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## [3.5.0] - 2026-03-15
+
+### Added — Group Conversation Mode
+- **`set_conversation_mode("group")`** — enables free multi-agent collaboration with auto-broadcast
+- **`listen_group()`** — batch message receiver with random stagger (1-3s) to prevent simultaneous responses
+- Returns ALL unconsumed messages + last 20 messages of context + hints about silent agents
+- Auto-broadcast in group mode: every message is shared with all agents automatically
+- Cooldown enforcement: agents must wait 3s between sends to maintain conversation flow
+- Cascade prevention: broadcast copies don't trigger further broadcasts
+- MCP tools: 27 → 29
+
+### Added — Dashboard Features
+- **Notification panel** — bell icon with badge count, dropdown event feed (agent online/offline, listening status changes)
+- **Agent leaderboard** — performance scoring (0-100) with responsiveness, activity, reliability, collaboration dimensions
+- **Cross-project search** — "All Projects" toggle in search bar, searches across all registered projects
+- **Animated replay export** — Export conversation as self-playing HTML file with typing animations and play/pause controls
+- **Ollama integration** — `npx let-them-talk init --ollama` auto-detects Ollama, creates bridge script for local models
+
+### Fixed — PID & Registration Integrity
+- Registration file locking with try/finally (prevents race conditions when multiple agents register simultaneously)
+- PID stale detection uses `last_activity` with 30s threshold (prevents false "alive" from Windows PID reuse)
+- Lock file cleaned up on process exit
+- Dashboard inject/nudge snapshots project context at click time (prevents wrong-project race)
+
+### Security
+- `toolHandoff` and workflow auto-handoff now check `canSendTo` permissions
+- `lastSentAt` updated in `toolBroadcast` (prevents cooldown bypass)
+- `config.json` added to both server and dashboard reset cleanup
+- Auto-broadcast respects `canSendTo` per recipient
+
+## [3.4.4] - 2026-03-15
+
+### Fixed
+- Add project now accepts any existing directory (removed requirement for package.json or .git)
+- Init safely backs up corrupted .mcp.json and settings.json before overwriting
+
+### Changed
+- Removed plugin references from website and docs
+- Website updated with security features (LAN auth token, CSRF, CSP)
+
 ## [3.4.3] - 2026-03-15
 
 ### Removed — Plugin System

package/LICENSE

@@ -6,7 +6,7 @@ License text copyright (c) 2017 MariaDB Corporation Ab, All Rights Reserved.
 Parameters
 
 Licensor:             Dekelelz
-Licensed Work:        Let Them Talk v3.4.3
+Licensed Work:        Let Them Talk v3.5.0
                       The Licensed Work is (c) 2024-2026 Dekelelz.
 Additional Use Grant: You may make use of the Licensed Work, provided that
                       you may not use the Licensed Work for a Commercial

package/README.md

@@ -72,7 +72,7 @@ Run `npx let-them-talk init --all` to configure all three at once.
        |                       |                       |
        +----------- .agent-bridge/ directory ----------+
                     messages · agents · tasks
-                    profiles · workflows · plugins
+                    profiles · workflows · permissions
                               |
                               v
                     Web Dashboard :3000
@@ -84,19 +84,20 @@ Each terminal spawns its own MCP server process. All processes share a `.agent-b
 
 ## Highlights
 
-- **27 MCP tools** — messaging, tasks, workflows, profiles, workspaces, branching, plugins
-- **Premium dashboard** — glassmorphism UI, Inter font, gradient accents, SSE real-time (~200ms)
-- **Stats & analytics** — per-agent message counts, response times, hourly activity charts, velocity
-- **Conversation templates** — 4 built-in multi-agent workflows (Code Review, Debug Squad, Feature Dev, Research & Write)
+- **29 MCP tools** — messaging, tasks, workflows, profiles, workspaces, branching, group chat
+- **Group conversation mode** — free multi-agent collaboration with auto-broadcast, stagger delays, and cooldown
+- **Premium dashboard** — glassmorphism UI, notifications panel, agent leaderboard, cross-project search
+- **Animated replay export** — export conversations as self-playing HTML with typing animations
+- **Ollama integration** — `npx let-them-talk init --ollama` for local AI models
+- **Stats & analytics** — per-agent scores, response times, hourly charts, conversation velocity
+- **Conversation templates** — 4 built-in workflows (Code Review, Debug Squad, Feature Dev, Research & Write)
 - **Message management** — edit, delete, copy messages with full edit history
 - **Task management** — drag-and-drop kanban board between agents
 - **Workflow pipelines** — multi-step automation with auto-handoff
 - **Agent profiles** — display names, SVG avatars, roles, bios
 - **Conversation branching** — fork at any point, isolated history per branch
-- **Compact view** — dense message toggle for power users, persists to localStorage
-- **Multi-format export** — HTML, Markdown, and JSON export
-- **CLI tools** — send messages and check status directly from the command line
-- **Plugin system** — extend with custom tools, 30s sandboxed execution
+- **Multi-format export** — HTML, Markdown, JSON, and animated replay
+- **Secure by default** — CSRF, LAN auth tokens, CSP, permissions, registration locking
 - **Zero config** — one `npx` command, auto-detects your CLI, works immediately
 
 ## Agent Templates
@@ -147,7 +148,7 @@ Launch with `npx let-them-talk dashboard` — opens at `http://localhost:3000`.
 - Browser notifications and sound alerts
 - LAN mode for phone access
 
-## MCP Tools (27 + plugins)
+## MCP Tools (27)
 
 <details>
 <summary><strong>Messaging (13 tools)</strong></summary>
@@ -207,38 +208,6 @@ Launch with `npx let-them-talk dashboard` — opens at `http://localhost:3000`.
 
 </details>
 
-## Plugins
-
-Extend Let Them Talk with custom tools. Drop a `.js` file in `.agent-bridge/plugins/`.
-
-```javascript
-module.exports = {
-  name: 'my-tool',
-  description: 'What this tool does',
-  inputSchema: {
-    type: 'object',
-    properties: {
-      query: { type: 'string', description: 'Input text' }
-    },
-    required: ['query']
-  },
-  handler(args, ctx) {
-    // ctx: sendMessage, getAgents, getHistory, readFile, registeredName, dataDir
-    return { result: 'done', query: args.query };
-  }
-};
-```
-
-```bash
-npx let-them-talk plugin add my-tool.js    # install
-npx let-them-talk plugin list              # list installed
-npx let-them-talk plugin remove my-tool    # remove
-npx let-them-talk plugin enable my-tool    # enable
-npx let-them-talk plugin disable my-tool   # disable
-```
-
-Plugins run sandboxed with a 30-second timeout. Manage via CLI or dashboard.
-
 ## CLI Reference
 
 ```bash
@@ -248,7 +217,8 @@ npx let-them-talk init --template <name>   # use a team template
 npx let-them-talk templates                # list templates
 npx let-them-talk dashboard                # launch web dashboard
 npx let-them-talk reset                    # clear conversation data
-npx let-them-talk plugin <subcommand>      # manage plugins
+npx let-them-talk msg <agent> <text>       # send a message from CLI
+npx let-them-talk status                  # show active agents
 npx let-them-talk help                     # show help
 ```
 
@@ -268,7 +238,7 @@ Let Them Talk is a **local message broker**. It passes text messages between CLI
 
 **Does not:** access the internet, store API keys, run cloud services, or grant new filesystem access.
 
-**Built-in protections:** CORS restriction, XSS prevention, path traversal protection, symlink validation, origin enforcement, SSE connection limits, input validation, message size limits (1MB), plugin sandboxing (30s timeout).
+**Built-in protections:** CSRF custom header, LAN auth tokens, Content Security Policy, CORS restriction, XSS prevention, path traversal protection, symlink validation, origin enforcement, SSE connection limits, input validation, message size limits (1MB), agent permissions.
 
 **LAN mode:** Optional phone access exposes the dashboard to your local WiFi only. Requires explicit activation.
 

package/cli.js

@@ -3,14 +3,15 @@
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
+const { execSync } = require('child_process');
 
 const command = process.argv[2];
 
 function printUsage() {
   console.log(`
-  Let Them Talk — Agent Bridge v3.4.3
+  Let Them Talk — Agent Bridge v3.5.0
   MCP message broker for inter-agent communication
-  Supports: Claude Code, Gemini CLI, Codex CLI
+  Supports: Claude Code, Gemini CLI, Codex CLI, Ollama
 
   Usage:
     npx let-them-talk init              Auto-detect CLI and configure MCP
@@ -18,7 +19,8 @@ function printUsage() {
     npx let-them-talk init --gemini     Configure for Gemini CLI
     npx let-them-talk init --codex      Configure for Codex CLI
     npx let-them-talk init --all        Configure for all supported CLIs
-    npx let-them-talk init --template T  Initialize with a team template (pair, team, review, debate)
+    npx let-them-talk init --ollama    Setup Ollama agent bridge (local LLM)
+    npx let-them-talk init --template T  Initialize with a team template (pair, team, review, debate, ollama)
     npx let-them-talk templates         List available agent templates
     npx let-them-talk dashboard         Launch the web dashboard (http://localhost:3000)
     npx let-them-talk dashboard --lan   Launch dashboard accessible on LAN (phone/tablet)
@@ -52,6 +54,16 @@ function detectCLIs() {
   return detected;
 }
 
+// Detect Ollama installation
+function detectOllama() {
+  try {
+    const version = execSync('ollama --version', { encoding: 'utf8', timeout: 5000 }).trim();
+    return { installed: true, version };
+  } catch {
+    return { installed: false };
+  }
+}
+
 // The data directory where all agents read/write — must be the same for server + dashboard
 function dataDir(cwd) {
   return path.join(cwd, '.agent-bridge').replace(/\\/g, '/');
@@ -65,7 +77,12 @@ function setupClaude(serverPath, cwd) {
     try {
       mcpConfig = JSON.parse(fs.readFileSync(mcpConfigPath, 'utf8'));
       if (!mcpConfig.mcpServers) mcpConfig.mcpServers = {};
-    } catch {}
+    } catch {
+      // Backup corrupted file before overwriting
+      const backup = mcpConfigPath + '.backup';
+      fs.copyFileSync(mcpConfigPath, backup);
+      console.log('  [warn] Existing .mcp.json was invalid — backed up to .mcp.json.backup');
+    }
   }
 
   mcpConfig.mcpServers['agent-bridge'] = {
@@ -93,7 +110,11 @@ function setupGemini(serverPath, cwd) {
     try {
       settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
       if (!settings.mcpServers) settings.mcpServers = {};
-    } catch {}
+    } catch {
+      const backup = settingsPath + '.backup';
+      fs.copyFileSync(settingsPath, backup);
+      console.log('  [warn] Existing settings.json was invalid — backed up to settings.json.backup');
+    }
   }
 
   settings.mcpServers['agent-bridge'] = {
@@ -138,6 +159,131 @@ AGENT_BRIDGE_DATA_DIR = ${JSON.stringify(dataDir(cwd))}
   console.log('  [ok] Codex CLI: .codex/config.toml updated');
 }
 
+// Setup Ollama agent bridge script
+function setupOllama(serverPath, cwd) {
+  const dir = dataDir(cwd);
+  const scriptPath = path.join(cwd, '.agent-bridge', 'ollama-agent.js');
+
+  if (!fs.existsSync(path.join(cwd, '.agent-bridge'))) {
+    fs.mkdirSync(path.join(cwd, '.agent-bridge'), { recursive: true });
+  }
+
+  const script = `#!/usr/bin/env node
+// ollama-agent.js - bridges Ollama to Let Them Talk
+// Usage: node .agent-bridge/ollama-agent.js [agent-name] [model]
+const fs = require('fs'), path = require('path'), http = require('http');
+const DATA_DIR = path.join(__dirname);
+const name = process.argv[2] || 'Ollama';
+const model = process.argv[3] || 'llama3';
+const OLLAMA_URL = process.env.OLLAMA_URL || 'http://localhost:11434';
+
+function readJson(f) { try { return JSON.parse(fs.readFileSync(f, 'utf8')); } catch { return {}; } }
+function readJsonl(f) { if (!fs.existsSync(f)) return []; return fs.readFileSync(f, 'utf8').split('\\n').filter(l => l.trim()).map(l => { try { return JSON.parse(l); } catch { return null; } }).filter(Boolean); }
+
+// Register agent
+function register() {
+  const agentsFile = path.join(DATA_DIR, 'agents.json');
+  const agents = readJson(agentsFile);
+  agents[name] = { pid: process.pid, timestamp: new Date().toISOString(), last_activity: new Date().toISOString(), provider: 'Ollama (' + model + ')' };
+  fs.writeFileSync(agentsFile, JSON.stringify(agents, null, 2));
+  console.log('[' + name + '] Registered (PID ' + process.pid + ', model: ' + model + ')');
+}
+
+// Update heartbeat
+function heartbeat() {
+  const agentsFile = path.join(DATA_DIR, 'agents.json');
+  const agents = readJson(agentsFile);
+  if (agents[name]) {
+    agents[name].last_activity = new Date().toISOString();
+    agents[name].pid = process.pid;
+    fs.writeFileSync(agentsFile, JSON.stringify(agents, null, 2));
+  }
+}
+
+// Call Ollama API
+function callOllama(prompt) {
+  return new Promise(function(resolve, reject) {
+    const url = new URL(OLLAMA_URL + '/api/chat');
+    const body = JSON.stringify({ model: model, messages: [{ role: 'user', content: prompt }], stream: false });
+    const req = http.request(url, { method: 'POST', headers: { 'Content-Type': 'application/json' } }, function(res) {
+      let data = '';
+      res.on('data', function(c) { data += c; });
+      res.on('end', function() {
+        try { const j = JSON.parse(data); resolve(j.message ? j.message.content : data); }
+        catch { resolve(data); }
+      });
+    });
+    req.on('error', reject);
+    req.write(body);
+    req.end();
+  });
+}
+
+// Send a message
+function sendMessage(to, content) {
+  const msgId = 'm' + Date.now().toString(36) + Math.random().toString(36).slice(2, 6);
+  const msg = { id: msgId, from: name, to: to, content: content, timestamp: new Date().toISOString() };
+  fs.appendFileSync(path.join(DATA_DIR, 'messages.jsonl'), JSON.stringify(msg) + '\\n');
+  fs.appendFileSync(path.join(DATA_DIR, 'history.jsonl'), JSON.stringify(msg) + '\\n');
+  console.log('[' + name + '] -> ' + to + ': ' + content.substring(0, 80) + (content.length > 80 ? '...' : ''));
+}
+
+// Listen for messages
+let lastOffset = 0;
+function checkMessages() {
+  const consumedFile = path.join(DATA_DIR, 'consumed-' + name + '.json');
+  const consumed = readJson(consumedFile);
+  lastOffset = consumed.offset || 0;
+
+  const messages = readJsonl(path.join(DATA_DIR, 'messages.jsonl'));
+  const newMsgs = messages.slice(lastOffset).filter(function(m) {
+    return m.to === name || (m.to === 'all' && m.from !== name);
+  });
+
+  if (newMsgs.length > 0) {
+    consumed.offset = messages.length;
+    fs.writeFileSync(consumedFile, JSON.stringify(consumed));
+  }
+
+  return newMsgs;
+}
+
+async function processMessages() {
+  const msgs = checkMessages();
+  for (const m of msgs) {
+    console.log('[' + name + '] <- ' + m.from + ': ' + m.content.substring(0, 80));
+    try {
+      const response = await callOllama(m.content);
+      sendMessage(m.from, response);
+    } catch (e) {
+      sendMessage(m.from, 'Error calling Ollama: ' + e.message);
+    }
+  }
+}
+
+// Main loop
+register();
+const hb = setInterval(heartbeat, 10000);
+hb.unref();
+console.log('[' + name + '] Listening for messages... (Ctrl+C to stop)');
+setInterval(processMessages, 2000);
+
+// Cleanup on exit
+process.on('SIGINT', function() { console.log('\\n[' + name + '] Shutting down.'); process.exit(0); });
+`;
+
+  fs.writeFileSync(scriptPath, script);
+  console.log('  [ok] Ollama agent script created: .agent-bridge/ollama-agent.js');
+  console.log('');
+  console.log('  Launch an Ollama agent with:');
+  console.log('    node .agent-bridge/ollama-agent.js <name> <model>');
+  console.log('');
+  console.log('  Examples:');
+  console.log('    node .agent-bridge/ollama-agent.js Ollama llama3');
+  console.log('    node .agent-bridge/ollama-agent.js Coder codellama');
+  console.log('    node .agent-bridge/ollama-agent.js Writer mistral');
+}
+
 function init() {
   const cwd = process.cwd();
   const serverPath = path.join(__dirname, 'server.js').replace(/\\/g, '/');
@@ -159,6 +305,18 @@ function init() {
     targets = ['codex'];
   } else if (flag === '--all') {
     targets = ['claude', 'gemini', 'codex'];
+  } else if (flag === '--ollama') {
+    const ollama = detectOllama();
+    if (!ollama.installed) {
+      console.log('  Ollama not found. Install it from: https://ollama.com/download');
+      console.log('  After installing, run: ollama pull llama3');
+      console.log('');
+    } else {
+      console.log('  Ollama detected: ' + ollama.version);
+      setupOllama(serverPath, cwd);
+    }
+    targets = detectCLIs();
+    if (targets.length === 0) targets = ['claude'];
   } else {
     // Auto-detect
     targets = detectCLIs();

package/dashboard.html

@@ -2611,6 +2611,13 @@
     </div>
   </div>
   <div class="header-actions">
+    <div style="position:relative;display:inline-block">
+      <button class="notif-toggle" id="notif-bell" onclick="toggleNotifPanel()" title="Notifications" style="position:relative">&#x1f514;<span id="notif-badge" style="display:none;position:absolute;top:-4px;right:-4px;background:var(--red);color:#fff;font-size:8px;font-weight:700;min-width:14px;height:14px;border-radius:7px;text-align:center;line-height:14px;padding:0 3px">0</span></button>
+      <div id="notif-panel" style="display:none;position:absolute;right:0;top:100%;margin-top:8px;background:var(--surface);border:1px solid var(--border-light);border-radius:12px;width:320px;max-height:400px;overflow-y:auto;z-index:300;box-shadow:var(--shadow-lg)">
+        <div style="padding:12px 16px;border-bottom:1px solid var(--border);font-weight:600;font-size:13px;display:flex;justify-content:space-between;align-items:center">Notifications <button onclick="clearNotifications()" style="background:none;border:none;color:var(--text-muted);font-size:11px;cursor:pointer">Clear</button></div>
+        <div id="notif-list" style="padding:4px 0"><div style="padding:16px;text-align:center;color:var(--text-muted);font-size:12px">No notifications yet</div></div>
+      </div>
+    </div>
     <button class="notif-toggle" id="notif-toggle" onclick="toggleNotifications()" title="Browser notifications">&#x1f514;</button>
     <button class="theme-toggle" id="theme-toggle" onclick="toggleTheme()" title="Toggle dark/light theme">&#x1f319;</button>
     <button class="sound-toggle" id="sound-toggle" onclick="toggleSound()" title="Toggle notification sound">&#x1f508;</button>
@@ -2623,6 +2630,7 @@
         <div style="padding:7px 12px;font-size:12px;cursor:pointer;transition:background 0.1s" onmouseover="this.style.background='var(--surface-3)'" onmouseout="this.style.background=''" onclick="exportShareableHTML();toggleExportMenu()">HTML (shareable)</div>
         <div style="padding:7px 12px;font-size:12px;cursor:pointer;transition:background 0.1s" onmouseover="this.style.background='var(--surface-3)'" onmouseout="this.style.background=''" onclick="exportConversation();toggleExportMenu()">Markdown (.md)</div>
         <div style="padding:7px 12px;font-size:12px;cursor:pointer;transition:background 0.1s" onmouseover="this.style.background='var(--surface-3)'" onmouseout="this.style.background=''" onclick="exportJSON();toggleExportMenu()">JSON (.json)</div>
+        <div style="padding:7px 12px;font-size:12px;cursor:pointer;transition:background 0.1s;border-top:1px solid var(--border)" onmouseover="this.style.background='var(--surface-3)'" onmouseout="this.style.background=''" onclick="exportReplay();toggleExportMenu()">Animated Replay (.html)</div>
       </div>
     </div>
     <button class="btn btn-danger" onclick="doReset()">Reset</button>
@@ -2744,6 +2752,7 @@
     <div class="branch-tabs" id="branch-tabs"></div>
     <div class="search-bar" id="search-bar">
       <input class="search-input" id="search-input" placeholder="Search messages...  ( / )" oninput="onSearch()">
+      <button id="search-all-btn" onclick="toggleSearchAll()" title="Search across all projects" style="background:var(--surface-2);border:1px solid var(--border);border-radius:6px;padding:4px 8px;font-size:10px;cursor:pointer;color:var(--text-muted);white-space:nowrap;transition:all 0.2s">All Projects</button>
       <span class="search-count" id="search-count"></span>
       <button class="compact-toggle" id="compact-toggle" onclick="toggleCompactMode()" title="Toggle compact view">Compact</button>
     </div>
@@ -2778,7 +2787,7 @@
   </div>
 </div>
 <div class="app-footer">
-  <span>Let Them Talk v3.4.3</span>
+  <span>Let Them Talk v3.5.0</span>
 </div>
 <div class="profile-popup" id="profile-popup" onclick="event.stopPropagation()">
   <div class="profile-popup-header">
@@ -3182,8 +3191,10 @@ function renderAgents(agents) {
 }
 
 function sendNudge(agentName) {
+  var lockedProject = activeProject;
+  var pq = lockedProject ? '?project=' + encodeURIComponent(lockedProject) : '';
   var body = JSON.stringify({ to: agentName, content: 'Hey ' + agentName + ', the user is waiting for you. Please check for new messages and continue your work.' });
-  lttFetch('/api/inject' + projectParam(), {
+  lttFetch('/api/inject' + pq, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
     body: body
@@ -3240,8 +3251,11 @@ function doInject() {
   var content = document.getElementById('inject-content').value.trim();
   if (!target || !content) return;
 
+  // Lock project context at send time — prevents race if user switches project mid-type
+  var lockedProject = activeProject;
+  var pq = lockedProject ? '?project=' + encodeURIComponent(lockedProject) : '';
   var body = JSON.stringify({ to: target, content: content });
-  lttFetch('/api/inject' + projectParam(), {
+  lttFetch('/api/inject' + pq, {
     method: 'POST',
     headers: { 'Content-Type': 'application/json' },
     body: body
@@ -3558,6 +3572,10 @@ var searchQuery = '';
 
 function onSearch() {
   searchQuery = document.getElementById('search-input').value.toLowerCase().trim();
+  if (searchAllMode && searchQuery.length >= 2) {
+    searchAllProjects(searchQuery);
+    return;
+  }
   lastMessageCount = 0;
   renderMessages(cachedHistory);
 }
@@ -4281,6 +4299,7 @@ function fetchStats() {
   lttFetch('/api/stats' + pq).then(function(r) { return r.json(); }).then(function(data) {
     renderStats(data);
   }).catch(function(e) { console.error('Stats fetch failed:', e); });
+  fetchScores();
 }
 
 function renderStats(data) {
@@ -4356,6 +4375,11 @@ function renderStats(data) {
   }
   html += '</div></div>';
 
+  html += '<div style="background:var(--surface);border:1px solid var(--border);border-radius:10px;padding:16px;margin-top:16px">' +
+    '<h3 style="font-size:14px;font-weight:700;margin-bottom:12px;color:var(--accent)">Agent Leaderboard</h3>' +
+    '<div id="scores-area"><div style="color:var(--text-muted);font-size:12px">Loading scores...</div></div>' +
+  '</div>';
+
   el.innerHTML = html;
 }
 
@@ -4686,6 +4710,163 @@ function switchBranch(name) {
   poll();
 }
 
+// ==================== v3.5: NOTIFICATIONS PANEL ====================
+
+var notifData = [];
+var notifSeen = 0;
+
+function toggleNotifPanel() {
+  var panel = document.getElementById('notif-panel');
+  var isOpen = panel.style.display !== 'none';
+  panel.style.display = isOpen ? 'none' : 'block';
+  if (!isOpen) {
+    notifSeen = notifData.length;
+    updateNotifBadge();
+    fetchNotifications();
+  }
+}
+
+function fetchNotifications() {
+  var pq = projectParam();
+  lttFetch('/api/notifications' + pq).then(function(r) { return r.json(); }).then(function(data) {
+    notifData = Array.isArray(data) ? data : [];
+    renderNotifList();
+    updateNotifBadge();
+  }).catch(function() {});
+}
+
+function renderNotifList() {
+  var el = document.getElementById('notif-list');
+  if (!notifData.length) { el.innerHTML = '<div style="padding:16px;text-align:center;color:var(--text-muted);font-size:12px">No notifications yet</div>'; return; }
+  var html = '';
+  for (var i = notifData.length - 1; i >= 0; i--) {
+    var n = notifData[i];
+    var icon = n.type === 'online' ? '&#x1f7e2;' : n.type === 'offline' ? '&#x1f534;' : n.type === 'listening' ? '&#x1f50a;' : '&#x1f515;';
+    var time = new Date(n.timestamp).toLocaleTimeString();
+    html += '<div style="padding:8px 16px;border-bottom:1px solid var(--border);font-size:12px;display:flex;gap:8px;align-items:center">' +
+      '<span>' + icon + '</span>' +
+      '<div style="flex:1"><div style="color:var(--text)">' + escapeHtml(n.message) + '</div><div style="color:var(--text-muted);font-size:10px">' + time + '</div></div>' +
+    '</div>';
+  }
+  el.innerHTML = html;
+}
+
+function updateNotifBadge() {
+  var badge = document.getElementById('notif-badge');
+  var unseen = notifData.length - notifSeen;
+  if (unseen > 0) { badge.textContent = unseen; badge.style.display = 'block'; }
+  else { badge.style.display = 'none'; }
+}
+
+function clearNotifications() {
+  notifData = [];
+  notifSeen = 0;
+  renderNotifList();
+  updateNotifBadge();
+}
+
+// Close notif panel on outside click
+document.addEventListener('click', function(e) {
+  var panel = document.getElementById('notif-panel');
+  var bell = document.getElementById('notif-bell');
+  if (panel && panel.style.display !== 'none' && !panel.contains(e.target) && e.target !== bell && !bell.contains(e.target)) {
+    panel.style.display = 'none';
+  }
+});
+
+// ==================== v3.5: CROSS-PROJECT SEARCH ====================
+
+var searchAllMode = false;
+
+function toggleSearchAll() {
+  searchAllMode = !searchAllMode;
+  var btn = document.getElementById('search-all-btn');
+  btn.style.background = searchAllMode ? 'var(--accent-dim)' : 'var(--surface-2)';
+  btn.style.color = searchAllMode ? 'var(--accent)' : 'var(--text-muted)';
+  btn.style.borderColor = searchAllMode ? 'var(--accent)' : 'var(--border)';
+  if (searchAllMode) {
+    document.getElementById('search-input').placeholder = 'Search ALL projects...';
+  } else {
+    document.getElementById('search-input').placeholder = 'Search messages...  ( / )';
+  }
+  onSearch();
+}
+
+function searchAllProjects(query) {
+  if (!query || query.length < 2) return;
+  var countEl = document.getElementById('search-count');
+  countEl.textContent = 'Searching...';
+  lttFetch('/api/search-all?q=' + encodeURIComponent(query) + '&limit=30').then(function(r) { return r.json(); }).then(function(data) {
+    if (data.error) { countEl.textContent = data.error; return; }
+    countEl.textContent = data.total + ' results across ' + data.results.length + ' projects';
+    // Render results in the messages area
+    var area = document.getElementById('messages');
+    var html = '';
+    for (var i = 0; i < data.results.length; i++) {
+      var proj = data.results[i];
+      html += '<div class="date-sep">' + escapeHtml(proj.project) + ' (' + proj.messages.length + ')</div>';
+      for (var j = 0; j < proj.messages.length; j++) {
+        var m = proj.messages[j];
+        var time = new Date(m.timestamp).toLocaleString();
+        html += '<div class="message" style="opacity:0.85">' +
+          '<div class="msg-body"><div class="msg-header"><span class="msg-from" style="color:var(--accent)">' + escapeHtml(m.from) + '</span>' +
+          '<span class="msg-arrow">&rarr;</span><span class="msg-to">' + escapeHtml(m.to || 'all') + '</span>' +
+          '<span class="msg-time">' + time + '</span></div>' +
+          '<div class="msg-content">' + escapeHtml(m.content.substring(0, 300)) + (m.content.length > 300 ? '...' : '') + '</div></div></div>';
+      }
+    }
+    if (!html) html = '<div class="empty-state"><div class="empty-text">No results found</div></div>';
+    area.innerHTML = html;
+  }).catch(function() { countEl.textContent = 'Search failed'; });
+}
+
+// ==================== v3.5: REPLAY EXPORT ====================
+
+function exportReplay() {
+  var pq = projectParam();
+  window.location.href = '/api/export-replay' + (pq || '?') + (_lttToken ? '&token=' + encodeURIComponent(_lttToken) : '');
+}
+
+// ==================== v3.5: PERFORMANCE SCORES ====================
+
+function fetchScores() {
+  var pq = projectParam();
+  lttFetch('/api/scores' + pq).then(function(r) { return r.json(); }).then(function(data) {
+    renderScores(data);
+  }).catch(function() {});
+}
+
+function renderScores(data) {
+  if (!data || !data.agents) return;
+  var el = document.getElementById('scores-area');
+  if (!el) return;
+  var agents = data.agents;
+  var names = Object.keys(agents).sort(function(a, b) { return agents[b].score - agents[a].score; });
+  if (!names.length) { el.innerHTML = '<div style="color:var(--text-muted);font-size:12px;padding:16px;text-align:center">No agent data yet</div>'; return; }
+
+  var html = '<div style="display:grid;gap:8px">';
+  for (var i = 0; i < names.length; i++) {
+    var n = names[i];
+    var a = agents[n];
+    var medal = i === 0 ? '&#x1f947;' : i === 1 ? '&#x1f948;' : i === 2 ? '&#x1f949;' : '#' + (i + 1);
+    var scoreColor = a.score >= 80 ? 'var(--green)' : a.score >= 60 ? 'var(--accent)' : a.score >= 40 ? 'var(--orange)' : 'var(--red)';
+    html += '<div style="background:var(--surface-2);border:1px solid var(--border);border-radius:10px;padding:12px 16px;display:flex;align-items:center;gap:12px">' +
+      '<div style="font-size:18px;width:28px;text-align:center">' + medal + '</div>' +
+      '<div style="flex:1;min-width:0"><div style="font-weight:600;font-size:13px">' + escapeHtml(n) + '</div>' +
+        '<div style="display:flex;gap:12px;margin-top:4px;font-size:10px;color:var(--text-muted)">' +
+          '<span>Resp: ' + a.responsiveness + '</span>' +
+          '<span>Act: ' + a.activity + '</span>' +
+          '<span>Rel: ' + a.reliability + '</span>' +
+          '<span>Collab: ' + a.collaboration + '</span>' +
+        '</div>' +
+      '</div>' +
+      '<div style="font-size:22px;font-weight:700;color:' + scoreColor + '">' + a.score + '</div>' +
+    '</div>';
+  }
+  html += '</div>';
+  el.innerHTML = html;
+}
+
 // ==================== POLLING ====================
 
 function poll() {
@@ -4737,6 +4918,7 @@ function poll() {
     renderBookmarksSidebar();
     fetchActivity();
     fetchBranches();
+    fetchNotifications();
     updateTypingIndicator(cachedAgents);
     if (activeView === 'tasks') fetchTasks();
     if (activeView === 'workspaces') fetchWorkspaces();