monomind 2.0.3 → 2.1.0

package/packages/@monomind/cli/dist/src/routing/route-layer-factory.js

@@ -56,6 +56,35 @@ function runWorker(task) {
             reject(new Error('embed worker timed out'));
         }, WORKER_TIMEOUT_MS);
         timer.unref?.();
+        // Resolve as soon as the result marker is *seen*, rather than waiting for
+        // the child's `close` event. This is a robustness net: onnxruntime's
+        // native thread pool can keep the child's event loop alive after it has
+        // already written its result, so `close` may never fire (or only fires
+        // after a slow OS-level teardown). embed-worker.ts explicitly
+        // process.exit()s right after writing the marker, but resolving here too
+        // means a future regression in that exit call degrades to "resolves
+        // immediately, child lingers" instead of "silently discards a correct
+        // result after a 90s timeout".
+        const tryResolveFromMarker = () => {
+            if (settled)
+                return;
+            const markedLine = stdout
+                .split('\n')
+                .reverse()
+                .find((l) => l.startsWith(RESULT_MARKER));
+            if (!markedLine)
+                return;
+            try {
+                const parsed = JSON.parse(markedLine.slice(RESULT_MARKER.length));
+                settled = true;
+                clearTimeout(timer);
+                resolve(parsed);
+            }
+            catch {
+                // Marker line present but not yet valid JSON (unlikely — it's written
+                // in one shot) — fall through and let `close`/timeout handle it.
+            }
+        };
         child.stdout?.on('data', (d) => {
             stdout += d.toString();
             if (stdout.length > MAX_WORKER_OUTPUT) {
@@ -68,7 +97,9 @@ function runWorker(task) {
                 }
                 catch { /* already dead */ }
                 reject(new Error('embed worker produced excessive output'));
+                return;
             }
+            tryResolveFromMarker();
         });
         child.stderr?.on('data', (d) => { if (stderr.length < MAX_WORKER_OUTPUT)
             stderr += d.toString(); });

package/packages/@monomind/cli/dist/src/services/config-file-manager.d.ts

@@ -2,11 +2,32 @@
  * Config File Manager
  * Shared JSON config file persistence with atomic writes and Zod validation
  */
+/**
+ * Default config values.
+ *
+ * IMPORTANT: never hand this object (or a shallow `{ ...DEFAULT_CONFIG }`
+ * copy) out directly — its nested sections (`agents`, `swarm`, `memory`, ...)
+ * would be shared-by-reference with every caller, so one caller mutating
+ * `config.swarm.maxAgents` would silently corrupt this module-level constant
+ * for the rest of the process. Always hand out `cloneDefaultConfig()`.
+ */
+declare const DEFAULT_CONFIG: Record<string, unknown>;
+/** Exposed read-only for callers (e.g. config-adapter.ts) that need to
+ * agree with this module's defaults instead of hardcoding their own. */
+export { DEFAULT_CONFIG };
 export declare class ConfigFileManager {
     private configPath;
     private config;
     /** Find config file in search paths starting from cwd */
     findConfig(cwd: string): string | null;
+    /**
+     * Load config from an EXACT file path (used by `--config <file>` / `-c`).
+     * Unlike load()/findConfig(), this never falls back to directory search —
+     * an explicitly-named config file that doesn't exist or fails to parse is
+     * an error, not a silent fallback to defaults or an unrelated file in the
+     * same directory.
+     */
+    loadExact(filePath: string): Record<string, unknown>;
     /** Load config from file, returns null if not found */
     load(cwd: string): Record<string, unknown> | null;
     /** Get the current config, loading if needed */

package/packages/@monomind/cli/dist/src/services/config-file-manager.js

@@ -10,7 +10,15 @@ const CONFIG_FILENAMES = [
     'monomind.config.json',
     '.monomind/config.json',
 ];
-/** Default config values */
+/**
+ * Default config values.
+ *
+ * IMPORTANT: never hand this object (or a shallow `{ ...DEFAULT_CONFIG }`
+ * copy) out directly — its nested sections (`agents`, `swarm`, `memory`, ...)
+ * would be shared-by-reference with every caller, so one caller mutating
+ * `config.swarm.maxAgents` would silently corrupt this module-level constant
+ * for the rest of the process. Always hand out `cloneDefaultConfig()`.
+ */
 const DEFAULT_CONFIG = {
     version: '3.5',
     agents: {
@@ -61,6 +69,20 @@ const DEFAULT_CONFIG = {
         },
     },
 };
+/**
+ * Deep-clone the default config so every caller gets its own independent
+ * object graph. `{ ...DEFAULT_CONFIG }` is only a shallow copy — its nested
+ * sub-configs (`agents`, `swarm`, `memory`, ...) would remain the SAME
+ * object references as the module-level constant, so mutating a nested
+ * field on one caller's copy would corrupt the shared default for every
+ * subsequent caller in the process.
+ */
+function cloneDefaultConfig() {
+    return structuredClone(DEFAULT_CONFIG);
+}
+/** Exposed read-only for callers (e.g. config-adapter.ts) that need to
+ * agree with this module's defaults instead of hardcoding their own. */
+export { DEFAULT_CONFIG };
 export class ConfigFileManager {
     configPath = null;
     config = null;
@@ -83,6 +105,36 @@ export class ConfigFileManager {
         }
         return null;
     }
+    /**
+     * Load config from an EXACT file path (used by `--config <file>` / `-c`).
+     * Unlike load()/findConfig(), this never falls back to directory search —
+     * an explicitly-named config file that doesn't exist or fails to parse is
+     * an error, not a silent fallback to defaults or an unrelated file in the
+     * same directory.
+     */
+    loadExact(filePath) {
+        const resolved = path.resolve(filePath);
+        if (!fs.existsSync(resolved)) {
+            throw new Error(`Config file not found: ${resolved}`);
+        }
+        let content;
+        try {
+            content = fs.readFileSync(resolved, 'utf-8');
+        }
+        catch (err) {
+            throw new Error(`Failed to read config file ${resolved}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        let parsed;
+        try {
+            parsed = JSON.parse(content);
+        }
+        catch (err) {
+            throw new Error(`Failed to parse config file ${resolved}: ${err instanceof Error ? err.message : String(err)}`);
+        }
+        this.configPath = resolved;
+        this.config = sanitizeConfigObject(parsed);
+        return this.config;
+    }
     /** Load config from file, returns null if not found */
     load(cwd) {
         this.configPath = this.findConfig(cwd);
@@ -106,7 +158,7 @@ export class ConfigFileManager {
         if (this.config === null) {
             this.load(cwd);
         }
-        return this.config ?? { ...DEFAULT_CONFIG };
+        return this.config ?? cloneDefaultConfig();
     }
     /** Get a nested config value by dot-separated key */
     get(cwd, key) {
@@ -136,7 +188,7 @@ export class ConfigFileManager {
         // cross-process atomic without an OS-level flock, but combined with the
         // O_EXCL atomic rename it prevents the most common credential-clobber
         // window where two CLIs interleave their getConfig→set→write cycles.
-        let onDisk = { ...DEFAULT_CONFIG };
+        let onDisk = cloneDefaultConfig();
         if (fs.existsSync(targetPath)) {
             try {
                 const parsed = JSON.parse(fs.readFileSync(targetPath, 'utf-8'));
@@ -155,7 +207,7 @@ export class ConfigFileManager {
         if (fs.existsSync(targetPath) && !force) {
             throw new Error(`Config file already exists: ${targetPath}. Use --force to overwrite.`);
         }
-        const config = { ...DEFAULT_CONFIG, ...(overrides ? sanitizeConfigObject(overrides) : {}) };
+        const config = { ...cloneDefaultConfig(), ...(overrides ? sanitizeConfigObject(overrides) : {}) };
         this.writeAtomic(targetPath, config);
         this.config = config;
         this.configPath = targetPath;
@@ -164,8 +216,9 @@ export class ConfigFileManager {
     /** Reset config to defaults */
     reset(cwd) {
         const targetPath = this.configPath ?? path.resolve(cwd, CONFIG_FILENAMES[0]);
-        this.writeAtomic(targetPath, DEFAULT_CONFIG);
-        this.config = { ...DEFAULT_CONFIG };
+        const fresh = cloneDefaultConfig();
+        this.writeAtomic(targetPath, fresh);
+        this.config = fresh;
         this.configPath = targetPath;
         return targetPath;
     }
@@ -228,7 +281,7 @@ export class ConfigFileManager {
     }
     /** Get default config */
     getDefaults() {
-        return { ...DEFAULT_CONFIG };
+        return cloneDefaultConfig();
     }
     /** Atomic write with restrictive 0o600 mode.
      * SECURITY: this config file may contain API keys (per `commands/providers.ts`).

package/packages/@monomind/cli/dist/src/services/crash-reporter.js

@@ -84,7 +84,8 @@ export function redact(text) {
         /(?:secret|password|passwd|pwd)\s*[:=]\s*['"]?[^\s'"]{8,}['"]?/gi,
         /(?:token|bearer)\s*[:=]\s*['"]?[^\s'"]{10,}['"]?/gi,
         /-----BEGIN (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----[\s\S]*?-----END (?:RSA |EC |DSA |OPENSSH )?PRIVATE KEY-----/g,
-        /sk-[a-zA-Z0-9]{20,}/g,
+        /sk-ant-[a-zA-Z0-9_-]{20,}/g,
+        /sk-[a-zA-Z0-9_-]{20,}/g,
         /ghp_[a-zA-Z0-9]{36}/g,
         /gho_[a-zA-Z0-9]{36}/g,
         /npm_[a-zA-Z0-9]{36}/g,

package/packages/@monomind/cli/dist/src/ui/dashboard.html

@@ -4448,9 +4448,9 @@ function appendChatViewEvent(ev, animate) {
   const atBottom = !animate || (feed.scrollHeight - feed.scrollTop - feed.clientHeight < 80);
   const ts = ev.ts ? new Date(ev.ts).toLocaleTimeString([],{hour:'2-digit',minute:'2-digit',second:'2-digit'}) : '';
   if (ev.type === 'run:start') {
-    el = mkCVSys('▶ Run started' + (ev.goal ? ': ' + esc(ev.goal.slice(0,80)) : '') + (ev.bossRole ? ' · boss: ' + esc(ev.bossRole) : ''), ts);
+    el = mkCVSys('▶ Run started' + (ev.goal ? ': ' + (ev.goal.slice(0,80)) : '') + (ev.bossRole ? ' · boss: ' + (ev.bossRole) : ''), ts);
   } else if (ev.type === 'run:cycle:complete') {
-    el = mkCVSys('◎ Cycle complete' + (ev.pending != null ? ' · ' + esc(String(ev.pending)) + ' tasks pending' : ''), ts);
+    el = mkCVSys('◎ Cycle complete' + (ev.pending != null ? ' · ' + (String(ev.pending)) + ' tasks pending' : ''), ts);
   } else if (ev.type === 'intercom') {
     el = mkCVIntercom(ev.from, ev.to, ev.msg || '', ts);
   } else if (ev.type === 'org:comms') {
@@ -4459,15 +4459,15 @@ function appendChatViewEvent(ev, animate) {
     if (ev.to && ev.to !== 'all') el = mkCVIntercom(_cvCommsFrom, ev.to, ev.msg || '', ts);
     else el = mkCVAgent(_cvCommsFrom, ev.msg || '', ts, 'org:comms');
   } else if (ev.type === 'org:agent:online') {
-    el = mkCVSys('[' + esc(ev.org || '') + '] ' + esc(ev.role || ev.title || '?') + ' online' + (ev.title && ev.role && ev.title !== ev.role ? ' (' + esc(ev.title) + ')' : ''), ts);
+    el = mkCVSys('[' + (ev.org || '') + '] ' + (ev.role || ev.title || '?') + ' online' + (ev.title && ev.role && ev.title !== ev.role ? ' (' + (ev.title) + ')' : ''), ts);
   } else if (ev.type === 'org:checkpoint') {
-    el = mkCVSys('[checkpoint] ' + esc(ev.summary || ev.progress || ev.msg || ''), ts);
+    el = mkCVSys('[checkpoint] ' + (ev.summary || ev.progress || ev.msg || ''), ts);
   } else if (ev.type === 'org:start') {
-    el = mkCVSys('[org:start] ' + esc(ev.org || ''), ts);
+    el = mkCVSys('[org:start] ' + (ev.org || ''), ts);
   } else if (ev.type === 'run:complete') {
-    el = mkCVSys('■ Run complete' + (ev.status ? ' [' + esc(ev.status) + ']' : ''), ts);
+    el = mkCVSys('■ Run complete' + (ev.status ? ' [' + (ev.status) + ']' : ''), ts);
   } else if (ev.type === 'org:complete') {
-    el = mkCVSys('■ Org complete' + (ev.org ? ' — ' + esc(ev.org) : ''), ts);
+    el = mkCVSys('■ Org complete' + (ev.org ? ' — ' + (ev.org) : ''), ts);
   } else if (ev.type === 'agent:result') {
     el = mkCVResult(ev.agent || ev.from || '?', ev.result || ev.msg || ev.message || ev.summary || '', ts);
   } else if (ev.type === 'agent:spawn') {
@@ -4487,36 +4487,36 @@ function appendChatViewEvent(ev, animate) {
     const _auAgent = ev.role || ev.agentType || '?';
     const _auCost = ev.cost_usd != null ? '$' + Number(ev.cost_usd).toFixed(4) : '';
     const _auTok = (ev.tokens_in || ev.tokens_out) ? ((ev.tokens_in||0)).toLocaleString() + '↑ ' + ((ev.tokens_out||0)).toLocaleString() + '↓' : '';
-    el = mkCVSys('◈ ' + esc(_auAgent) + (_auTok ? ' · ' + _auTok : '') + (_auCost ? ' · ' + _auCost : ''), ts);
+    el = mkCVSys('◈ ' + (_auAgent) + (_auTok ? ' · ' + _auTok : '') + (_auCost ? ' · ' + _auCost : ''), ts);
   } else if (ev.type === 'agent:message') {
     el = mkCVAgent(ev.agent || ev.name || ev.role || '?', ev.msg || ev.message || ev.content || '', ts, ev.type);
   } else if (ev.type === 'session:start') {
-    el = mkCVSys('Session started' + (ev.prompt ? ': ' + esc(ev.prompt.slice(0,80)) : ''), ts);
+    el = mkCVSys('Session started' + (ev.prompt ? ': ' + (ev.prompt.slice(0,80)) : ''), ts);
   } else if (ev.type === 'session:complete') {
-    el = mkCVSys('Session complete' + (ev.status ? ' — ' + esc(ev.status) : ''), ts);
+    el = mkCVSys('Session complete' + (ev.status ? ' — ' + (ev.status) : ''), ts);
   } else if (ev.type === 'domain:dispatch') {
-    el = mkCVSys('→ ' + esc(ev.domain || '') + (ev.cmd ? ': ' + esc(ev.cmd.slice(0,80)) : ''), ts);
+    el = mkCVSys('→ ' + (ev.domain || '') + (ev.cmd ? ': ' + (ev.cmd.slice(0,80)) : ''), ts);
   } else if (ev.type === 'domain:complete') {
-    el = mkCVSys('✓ ' + esc(ev.domain || '') + (ev.status ? ' [' + esc(ev.status) + ']' : ''), ts);
+    el = mkCVSys('✓ ' + (ev.domain || '') + (ev.status ? ' [' + (ev.status) + ']' : ''), ts);
   } else if (ev.type === 'loop:start') {
-    el = mkCVSys('◎ Loop: ' + esc(ev.command || '') + (ev.repeat ? ' ×' + esc(String(ev.repeat)) : ''), ts);
+    el = mkCVSys('◎ Loop: ' + (ev.command || '') + (ev.repeat ? ' ×' + (String(ev.repeat)) : ''), ts);
     if (currentView === 'loops') renderLoops();
   } else if (ev.type === 'loop:complete') {
-    el = mkCVSys('■ Loop done: ' + esc(ev.command || '') + (ev.ranReps ? ' (' + esc(String(ev.ranReps)) + ' runs)' : ''), ts);
+    el = mkCVSys('■ Loop done: ' + (ev.command || '') + (ev.ranReps ? ' (' + (String(ev.ranReps)) + ' runs)' : ''), ts);
     if (currentView === 'loops') renderLoops();
   } else if (ev.type === 'loop:tick') {
     const _tickLbl = ev.rep != null
-      ? 'rep ' + esc(String(ev.rep)) + ' done' + (ev.wait != null ? ' → next in ' + esc(String(ev.wait)) + 's' : '')
-      : esc(ev.command || ev.loopId || ev.id || '');
+      ? 'rep ' + (String(ev.rep)) + ' done' + (ev.wait != null ? ' → next in ' + (String(ev.wait)) + 's' : '')
+      : (ev.command || ev.loopId || ev.id || '');
     el = mkCVSys('◷ ' + _tickLbl, ts);
     el.dataset.evType = 'loop:tick';
     if (feed.lastElementChild?.dataset?.evType === 'loop:tick') feed.lastElementChild.remove();
     if (currentView === 'loops') renderLoops();
   } else if (ev.type === 'loop:hil' || ev.type === 'loop:hil:waiting') {
-    el = mkCVSys('⚠ Loop HIL: ' + esc(ev.command || ev.loopId || ev.id || ''), ts);
+    el = mkCVSys('⚠ Loop HIL: ' + (ev.command || ev.loopId || ev.id || ''), ts);
     if (currentView === 'loops') renderLoops();
   } else if (ev.type === 'loop:hil:resolved') {
-    el = mkCVSys('✓ Loop HIL resolved: ' + esc(ev.loopId || ev.command || ''), ts);
+    el = mkCVSys('✓ Loop HIL resolved: ' + (ev.loopId || ev.command || ''), ts);
     if (currentView === 'loops') renderLoops();
   } else if (ev.type === 'file:write') {
     el = mkCVFileCard(ev.name || ev.path || '?', ev.path || '', ev.size || 0, ts);
@@ -4527,12 +4527,12 @@ function appendChatViewEvent(ev, animate) {
   } else if (ev.type === 'agent:browse') {
     el = mkCVTool('BROWSE', ev.payload || ev.url || '', '', 'oklch(65% 0.15 190)', ts);
   } else if (ev.type === 'org:agent:offline') {
-    el = mkCVSys('◌ ' + esc(ev.title || ev.role || '?') + ' offline' + (ev.org ? ' [' + esc(ev.org) + ']' : ''), ts);
+    el = mkCVSys('◌ ' + (ev.title || ev.role || '?') + ' offline' + (ev.org ? ' [' + (ev.org) + ']' : ''), ts);
   } else if (ev.type === 'org:error') {
-    el = mkCVSys('⚠ Error: ' + esc(ev.msg || ev.error || ev.message || ''), ts);
+    el = mkCVSys('⚠ Error: ' + (ev.msg || ev.error || ev.message || ''), ts);
     el.classList.add('cv-err');
   } else {
-    el = mkCVSys(esc(ev.type || 'event'), ts);
+    el = mkCVSys((ev.type || 'event'), ts);
   }
   if (animate) el.classList.add('cv-new');
   feed.appendChild(el);
@@ -4671,10 +4671,10 @@ function mkCVTool(tag, cmd, output, color, ts) {
   return d;
 }
 
-function mkCVSys(html, ts) {
+function mkCVSys(text, ts) {
   const d = document.createElement('div');
   d.className = 'cv-msg cv-sys';
-  d.innerHTML = `<div class="cv-bub"><span class="cv-etype">SYS</span><span class="cv-text">${html}</span><span class="cv-ts">${ts}</span></div>`;
+  d.innerHTML = `<div class="cv-bub"><span class="cv-etype">SYS</span><span class="cv-text">${esc(text)}</span><span class="cv-ts">${ts}</span></div>`;
   return d;
 }
 
@@ -8014,18 +8014,18 @@ function _odtAppendEvent(ev, animate) {
   const ts = ev.ts ? new Date(ev.ts).toLocaleTimeString([],{hour:'2-digit',minute:'2-digit',second:'2-digit'}) : '';
   let el;
   if (ev.type === 'run:start') {
-    el = mkCVSys('▶ Run started' + (ev.goal ? ': ' + esc(ev.goal.slice(0,80)) : '') + (ev.bossRole ? ' · boss: ' + esc(ev.bossRole) : ''), ts);
+    el = mkCVSys('▶ Run started' + (ev.goal ? ': ' + (ev.goal.slice(0,80)) : '') + (ev.bossRole ? ' · boss: ' + (ev.bossRole) : ''), ts);
   } else if (ev.type === 'run:cycle:complete') {
-    el = mkCVSys('◎ Cycle complete' + (ev.pending != null ? ' · ' + esc(String(ev.pending)) + ' tasks pending' : ''), ts);
+    el = mkCVSys('◎ Cycle complete' + (ev.pending != null ? ' · ' + (String(ev.pending)) + ' tasks pending' : ''), ts);
   } else if (ev.type === 'run:complete') {
-    el = mkCVSys('■ Run complete' + (ev.status ? ' [' + esc(ev.status) + ']' : ''), ts);
+    el = mkCVSys('■ Run complete' + (ev.status ? ' [' + (ev.status) + ']' : ''), ts);
   } else if (ev.type === 'org:comms') {
     // Some older runs use ev.role instead of ev.from — normalise before rendering
     const _commsFrom = ev.from || ev.role || 'boss';
     if (ev.to && ev.to !== 'all') el = mkCVIntercom(_commsFrom, ev.to, ev.msg || '', ts);
     else el = mkCVAgent(_commsFrom, ev.msg || '', ts, 'org:comms');
   } else if (ev.type === 'org:agent:online') {
-    el = mkCVSys('◉ ' + esc(ev.title || ev.role || '?') + ' online', ts);
+    el = mkCVSys('◉ ' + (ev.title || ev.role || '?') + ' online', ts);
   } else if (ev.type === 'org:checkpoint') {
     el = mkCVAgent('boss', ev.summary || ev.progress || ev.msg || '', ts, 'org:checkpoint');
   } else if (ev.type === 'org:start' || ev.type === 'org:complete') {
@@ -8041,32 +8041,32 @@ function _odtAppendEvent(ev, animate) {
   } else if (ev.type === 'agent:message') {
     el = mkCVAgent(ev.agent || ev.name || ev.role || '?', ev.msg || ev.message || ev.content || '', ts, ev.type);
   } else if (ev.type === 'session:start') {
-    el = mkCVSys('▶ ' + esc((ev.prompt || '').replace(/^running org:\s*/i,'').slice(0,80) || 'Session started'), ts);
+    el = mkCVSys('▶ ' + ((ev.prompt || '').replace(/^running org:\s*/i,'').slice(0,80) || 'Session started'), ts);
   } else if (ev.type === 'session:complete') {
-    el = mkCVSys('■ Complete' + (ev.status ? ' — ' + esc(ev.status) : ''), ts);
+    el = mkCVSys('■ Complete' + (ev.status ? ' — ' + (ev.status) : ''), ts);
   } else if (ev.type === 'domain:dispatch') {
-    el = mkCVSys('→ ' + esc(ev.domain || '') + (ev.cmd ? ': ' + esc(ev.cmd.slice(0,80)) : ''), ts);
+    el = mkCVSys('→ ' + (ev.domain || '') + (ev.cmd ? ': ' + (ev.cmd.slice(0,80)) : ''), ts);
   } else if (ev.type === 'domain:complete') {
-    el = mkCVSys('✓ ' + esc(ev.domain || '') + (ev.status ? ' [' + esc(ev.status) + ']' : ''), ts);
+    el = mkCVSys('✓ ' + (ev.domain || '') + (ev.status ? ' [' + (ev.status) + ']' : ''), ts);
   } else if (ev.type === 'loop:start') {
-    el = mkCVSys('Loop: ' + esc(ev.command || ''), ts);
+    el = mkCVSys('Loop: ' + (ev.command || ''), ts);
   } else if (ev.type === 'loop:complete') {
-    el = mkCVSys('Loop done: ' + esc(ev.command || '') + (ev.ranReps ? ' (' + ev.ranReps + ' runs)' : ''), ts);
+    el = mkCVSys('Loop done: ' + (ev.command || '') + (ev.ranReps ? ' (' + ev.ranReps + ' runs)' : ''), ts);
   } else if (ev.type === 'loop:tick') {
     const _trep = ev.rep ?? ev.fromRep;
     const _tnext = ev.nextRep ?? ev.toRep;
     const tickLabel = _trep != null
-      ? 'rep ' + esc(String(_trep)) + ' done' + (_tnext != null ? ' → rep ' + esc(String(_tnext)) + (ev.wait != null ? ' in ' + esc(String(ev.wait)) + 's' : '') : '')
-      : esc(ev.command || ev.loopId || '');
+      ? 'rep ' + (String(_trep)) + ' done' + (_tnext != null ? ' → rep ' + (String(_tnext)) + (ev.wait != null ? ' in ' + (String(ev.wait)) + 's' : '') : '')
+      : (ev.command || ev.loopId || '');
     el = mkCVSys('◷ ' + tickLabel, ts);
     el.dataset.evType = 'loop:tick';
     // Collapse: replace the previous loop:tick if it's the last element — prevents the
     // feed from flooding with one entry per rep in long-running loops (e.g. --repeat 9999).
     if (feed.lastElementChild?.dataset?.evType === 'loop:tick') feed.lastElementChild.remove();
   } else if (ev.type === 'loop:hil' || ev.type === 'loop:hil:waiting') {
-    el = mkCVSys('⚠ Loop HIL: ' + esc(ev.command || ev.loopId || ''), ts);
+    el = mkCVSys('⚠ Loop HIL: ' + (ev.command || ev.loopId || ''), ts);
   } else if (ev.type === 'loop:hil:resolved') {
-    el = mkCVSys('✓ Loop HIL resolved: ' + esc(ev.loopId || ''), ts);
+    el = mkCVSys('✓ Loop HIL resolved: ' + (ev.loopId || ''), ts);
   } else if (ev.type === 'agent:edit' || ev.type === 'agent:write') {
     el = mkCVTool('EDIT', ev.payload || ev.file || ev.path || '', '', 'oklch(65% 0.20 270)', ts);
   } else if (ev.type === 'agent:bash') {
@@ -8074,15 +8074,15 @@ function _odtAppendEvent(ev, animate) {
   } else if (ev.type === 'agent:browse') {
     el = mkCVTool('BROWSE', ev.payload || ev.url || '', '', 'oklch(65% 0.15 190)', ts);
   } else if (ev.type === 'org:error') {
-    el = mkCVSys('⚠ Error: ' + esc(ev.msg || ev.error || ev.message || ''), ts);
+    el = mkCVSys('⚠ Error: ' + (ev.msg || ev.error || ev.message || ''), ts);
     el.classList.add('cv-err');
   } else if (ev.type === 'org:agent:offline') {
-    el = mkCVSys('◌ ' + esc(ev.title || ev.role || '?') + ' offline', ts);
+    el = mkCVSys('◌ ' + (ev.title || ev.role || '?') + ' offline', ts);
   } else if (ev.type === 'user:message') {
     el = mkCVAgent('you', ev.text || ev.msg || ev.message || '', ts, 'user:message');
     el.classList.add('cv-user-msg');
   } else {
-    el = mkCVSys(esc(ev.type || 'event'), ts);
+    el = mkCVSys((ev.type || 'event'), ts);
   }
   if (animate) el.classList.add('cv-new');
   feed.appendChild(el);

package/packages/@monomind/cli/dist/src/ui/orgs.html

@@ -383,6 +383,37 @@ html, body {
   content: '—'; color: oklch(36% 0.008 186 / 0.5); flex-shrink: 0; margin-top: 1px;
 }
 
+/* ── Files tab ──────────────────────────────────────────────────── */
+#files-pane { padding: 20px; }
+.files-grid {
+  display: grid; grid-template-columns: repeat(auto-fill, minmax(260px, 1fr));
+  gap: 10px;
+}
+.file-card {
+  background: var(--bg-panel);
+  border: 1px solid var(--border); border-radius: 3px;
+  padding: 10px 12px;
+  display: flex; align-items: center; gap: 10px;
+  transition: border-color 0.12s;
+}
+.file-card:hover { border-color: var(--teal-dim); }
+.fc-icon { font-size: 18px; flex-shrink: 0; }
+.fc-body { flex: 1; min-width: 0; }
+.fc-name {
+  font-size: 12px; color: var(--text); font-weight: 500;
+  white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+}
+.fc-meta {
+  font-size: 9px; color: var(--dim); margin-top: 2px;
+  white-space: nowrap; overflow: hidden; text-overflow: ellipsis;
+}
+.fc-view {
+  flex-shrink: 0; background: #1a3a5a; color: #5d9fd9; border: 1px solid #2980b944;
+  border-radius: 4px; padding: 4px 10px; font-size: 10px; font-weight: 700; cursor: pointer;
+}
+.fc-view:hover { background: #204a70; }
+.fc-binary { flex-shrink: 0; font-size: 9px; color: var(--dim); }
+
 /* ── Activity / event log ───────────────────────────────────────── */
 #activity-pane { padding: 20px; }
 #activity-log { display: flex; flex-direction: column; gap: 0; }
@@ -819,6 +850,7 @@ html, body {
         <button class="tab-btn" onclick="switchTab('roles')">ROLES</button>
         <button class="tab-btn" onclick="switchTab('activity')">ACTIVITY</button>
         <button class="tab-btn" onclick="switchTab('health')">HEALTH</button>
+        <button class="tab-btn" onclick="switchTab('files')">FILES</button>
         <button class="tab-btn" onclick="switchTab('chat')">CHAT</button>
       </div>
 
@@ -937,6 +969,14 @@ html, body {
           </div>
         </div>
 
+        <!-- Files tab: every asset any agent in this org has produced, across all runs -->
+        <div class="tab-pane" id="tab-files">
+          <div id="files-pane">
+            <div id="files-empty" class="act-empty" style="display:none">No files produced yet.</div>
+            <div id="files-grid" class="files-grid"></div>
+          </div>
+        </div>
+
         <!-- Chat tab -->
         <div class="tab-pane" id="tab-chat">
           <div id="chat-pane">
@@ -1081,9 +1121,61 @@ window.switchTab = function(tab) {
   const mainBody = document.getElementById('main-body');
   if (mainBody) mainBody.classList.toggle('chat-active', tab === 'chat');
   if (tab === 'chat') renderChatTab();
+  else if (tab === 'files') renderFilesTab();
   else if (orgDetailData) renderTab(tab);
 };
 
+// ── Files tab: every asset produced by this org, deduped by path, latest first ──
+function collectOrgArtifacts() {
+  const bySessions = chatSessions.filter(orgSessionMatch);
+  const seen = new Map(); // path -> { art, ts, from }
+  bySessions.forEach(s => (s.events || []).forEach(ev => {
+    if (ev.type !== 'org:artifact') return;
+    const art = ev.artifact || (ev.path ? { path: ev.path, label: ev.label, mimeType: ev.mimeType } : null);
+    if (!art || !art.path) return;
+    const prev = seen.get(art.path);
+    if (!prev || (ev.ts || 0) >= prev.ts) seen.set(art.path, { art, ts: ev.ts || 0, from: ev.from || '' });
+  }));
+  return Array.from(seen.values()).sort((a, b) => b.ts - a.ts);
+}
+
+function mkFileCard(entry) {
+  const { art, ts, from } = entry;
+  const el = document.createElement('div');
+  el.className = 'file-card';
+  const isText = (art.mimeType || '').startsWith('text/') || (art.mimeType || '') === 'application/json';
+  const labelRaw = art.label || (art.path || 'file').split('/').pop();
+  const timeStr = ts ? new Date(ts).toLocaleString([], { month: 'short', day: 'numeric', hour: '2-digit', minute: '2-digit' }) : '';
+  const meta = [from, art.path ? art.path.split('/').slice(-3).join('/') : null, timeStr].filter(Boolean).join(' · ');
+  el.innerHTML = `
+    <div class="fc-icon">📄</div>
+    <div class="fc-body">
+      <div class="fc-name">${esc(labelRaw)}</div>
+      <div class="fc-meta">${esc(meta)}</div>
+    </div>
+    ${isText && art.path
+      ? `<button class="fc-view" onclick="viewArtifact(${JSON.stringify(art.path)},${JSON.stringify(labelRaw)})">View</button>`
+      : `<span class="fc-binary">Binary</span>`}
+  `;
+  return el;
+}
+
+function paintFilesGrid() {
+  const grid = document.getElementById('files-grid');
+  const empty = document.getElementById('files-empty');
+  if (!grid) return;
+  const files = collectOrgArtifacts();
+  grid.innerHTML = '';
+  if (!files.length) { if (empty) empty.style.display = 'block'; return; }
+  if (empty) empty.style.display = 'none';
+  files.forEach(entry => grid.appendChild(mkFileCard(entry)));
+}
+
+function renderFilesTab() {
+  paintFilesGrid(); // paint immediately with whatever's cached
+  loadChatSessions().then(() => { if (currentTab === 'files') paintFilesGrid(); });
+}
+
 // ── Render all orgs in sidebar ────────────────────────────────────
 function renderSidebar() {
   const list = document.getElementById('sb-list');
@@ -1689,8 +1781,13 @@ function orgSessionMatch(s) {
   const orgLc = selectedOrg.toLowerCase();
   const prompt = (s.prompt || '').toLowerCase();
   if (prompt.includes('running org: ' + orgLc) || prompt.includes('org: ' + orgLc)) return true;
-  // Also check events for an org field
-  return (s.events || []).some(ev => (ev.org || '').toLowerCase() === orgLc);
+  // Only genuine org-run events (org:comms, org:artifact, org:start, ...) count.
+  // agent:bash / agent:edit / etc. also carry an `org` field (ambient "which
+  // org was active while this Claude Code session ran" tagging) — matching on
+  // those too would pull an unrelated dev session's entire tool-call history
+  // into this org's Chat/Files tabs whenever that org happened to be running
+  // at the same time.
+  return (s.events || []).some(ev => (ev.type || '').startsWith('org:') && (ev.org || '').toLowerCase() === orgLc);
 }
 
 function populateChatSelect() {
@@ -1834,21 +1931,21 @@ function appendChatEvent(ev, animate) {
   } else if (ev.type === 'agent:spawn') {
     const col = dc(ev.domain);
     const name = ev.agentType || ev.from || ev.agent || 'agent';
-    el = mkAgent(name, `spawned: ${esc(ev.task||'task')}`, ts, col, 'spawn');
+    el = mkAgent(name, `spawned: ${ev.task||'task'}`, ts, col, 'spawn');
   } else if (ev.type === 'agent:complete') {
     const name = ev.agentType || ev.role || ev.from || 'agent';
     const result = (ev.result || '').slice(0, 300);
     const cost = ev.cost_usd ? ` · $${parseFloat(ev.cost_usd).toFixed(4)}` : '';
     const tools = ev.toolCalls?.length ? ` · ${ev.toolCalls.slice(0,4).join(', ')}` : '';
-    el = mkAgent(name, `${esc(result) || 'done'}${esc(tools)}${esc(cost)}`, ts, dc(ev.domain), 'complete');
+    el = mkAgent(name, `${result || 'done'}${tools}${cost}`, ts, dc(ev.domain), 'complete');
   } else if (ev.type === 'org:comms') {
-    el = mkIntercom(ev.from || 'boss', ev.to || 'agent', esc(ev.msg || ev.message || ''), ts);
+    el = mkIntercom(ev.from || 'boss', ev.to || 'agent', ev.msg || ev.message || '', ts);
   } else if (ev.type === 'agent:message') {
-    el = mkAgent(ev.agent||'agent', esc(ev.text||''), ts, dc(ev.domain), null);
+    el = mkAgent(ev.agent||'agent', ev.text||'', ts, dc(ev.domain), null);
   } else if (ev.type === 'intercom') {
-    el = mkIntercom(ev.from, ev.to, esc(ev.msg||''), ts);
+    el = mkIntercom(ev.from, ev.to, ev.msg||'', ts);
   } else if (ev.type === 'user:message') {
-    el = mkUser(esc(ev.text||ev.msg||''), ts);
+    el = mkUser(ev.text||ev.msg||'', ts);
   } else if (ev.type === 'loop:start') {
     el = mkSys(`🔁 Loop: ${esc(ev.command||'')} (${ev.repeat||'?'} runs)`, ts);
   } else if (ev.type === 'loop:complete') {
@@ -1876,13 +1973,13 @@ function mkAgent(name, text, ts, color, typeTag) {
   el.className = 'cmsg cagent';
   const tagStyle = color ? `style="border-color:${color}44;color:${color}"` : '';
   const ttag = typeTag ? `<span class="cevtype">${esc(typeTag)}</span>` : '';
-  el.innerHTML = `<div class="cmsg-meta"><span class="ctag" ${tagStyle}>${esc(name)}</span>${ttag}<span class="cts">${ts}</span></div><div class="cbubble">${text}</div>`;
+  el.innerHTML = `<div class="cmsg-meta"><span class="ctag" ${tagStyle}>${esc(name)}</span>${ttag}<span class="cts">${ts}</span></div><div class="cbubble">${esc(text)}</div>`;
   return el;
 }
 function mkIntercom(from, to, text, ts) {
   const el = document.createElement('div');
   el.className = 'cmsg cic';
-  el.innerHTML = `<div class="cmsg-meta"><span class="ctag sender">${esc(from||'?')}</span><span class="cic-arrow">→</span><span class="ctag receiver">${esc(to||'?')}</span><span class="cevtype">intercom</span><span class="cts">${ts}</span></div><div class="cbubble">${text}</div>`;
+  el.innerHTML = `<div class="cmsg-meta"><span class="ctag sender">${esc(from||'?')}</span><span class="cic-arrow">→</span><span class="ctag receiver">${esc(to||'?')}</span><span class="cevtype">intercom</span><span class="cts">${ts}</span></div><div class="cbubble">${esc(text)}</div>`;
   return el;
 }
 function mkArtifact(art, ts) {
@@ -1901,7 +1998,7 @@ function mkArtifact(art, ts) {
 function mkUser(text, ts) {
   const el = document.createElement('div');
   el.className = 'cmsg cuser';
-  el.innerHTML = `<div class="cmsg-meta" style="justify-content:flex-end"><span class="cts">${ts}</span><span class="ctag" style="border-color:oklch(68% 0.18 250 / 0.35);color:oklch(68% 0.14 250)">you</span></div><div class="cbubble">${text}</div>`;
+  el.innerHTML = `<div class="cmsg-meta" style="justify-content:flex-end"><span class="cts">${ts}</span><span class="ctag" style="border-color:oklch(68% 0.18 250 / 0.35);color:oklch(68% 0.14 250)">you</span></div><div class="cbubble">${esc(text)}</div>`;
   return el;
 }
 
@@ -2042,6 +2139,8 @@ function handleMmEvent(ev) {
       appendChatEvent(ev, true);
       chatScrollFeed();
     }
+    // Live-update the Files tab when a new asset lands while it's open
+    if (ev.type === 'org:artifact' && currentTab === 'files') paintFilesGrid();
   }
 }