mulmoterminal 4.9.0 → 4.10.0

package/README.md

@@ -364,9 +364,10 @@ The launcher detects it and prints the exact, OS-appropriate removal command; ru
   see [Agents: Claude & Codex](#agents-claude--codex) and [Scripts (Run menu)](#scripts-run-menu).
 - In dev (`yarn dev`) the Vite dev server runs on its own port (`CLIENT_PORT`,
   default `6856`) and proxies `/ws` (a prefix covering `/ws/codex`, `/ws/launch`, and
-  `/ws/run`), `/ws/pubsub`, `/api`, and `/artifacts` to the backend (`PORT`, default
-  `34567`) — so you open the Vite port (e.g. `http://localhost:6856`). In production the
-  backend serves the built client from `dist/` on `PORT`, and you open that.
+  `/ws/run`), `/ws/pubsub`, `/api`, `/artifacts`, and `/htmlfile` to the backend
+  (`PORT`, default `34567`) — so you open the Vite port (e.g. `http://localhost:6856`).
+  In production the backend serves the built client from `dist/` on `PORT`, and you open
+  that.
 
 ---
 
@@ -539,7 +540,8 @@ the `claude` / `codex` sessions themselves.
 | `CLAUDE_BIN` | `claude`       | The Claude Code binary to spawn. On Windows a bare name is resolved on `PATH` before it reaches the PTY layer (which matches file names exactly): to the `.exe` when there is one, otherwise to the `.cmd` shim an npm-global install leaves, run through `cmd.exe`. |
 | `CLAUDE_CWD` | current dir    | Working directory each `claude` PTY runs in; determines which project's sessions are listed. Via `npx mulmoterminal@latest` it defaults to the directory you ran the command from (override with `--cwd <dir>`, relative allowed); when the server is run directly it falls back to `~/mulmoclaude`. A value read from `.env` must be an absolute path (`~` is not expanded). |
 | `CLAUDE_PERMISSION_MODE` | `auto` | Permission mode passed to each `claude` spawn. |
-| `MT_TITLE_MODEL` | `haiku` | Model used for the cell header's AI title (a cheap/fast model summarizing the recent turns). Accepts a `--model` alias or a full model id. |
+| `MT_TITLE_SOURCE` | `transcript` | Where the cell header's AI title comes from. `transcript` reads the title Claude Code writes into its own transcript — no extra process. `headless` restores the old behaviour of summarizing the recent turns with `claude -p`, which costs a model call but follows a session whose topic drifts (Claude's own title is written once and never revised). |
+| `MT_TITLE_MODEL` | `haiku` | Model used for the cell header's AI title. Only read when `MT_TITLE_SOURCE=headless`. Accepts a `--model` alias or a full model id. |
 | `CODEX_BIN`  | `codex`        | The Codex CLI binary to spawn. |
 | `CODEX_MODEL`| codex default  | Model passed to Codex as `--model` (unset = Codex's own default). |
 | `CODEX_HOME` | `~/.codex`     | Codex home — where its session rollouts and MulmoTerminal-mirrored skills live. |
@@ -602,6 +604,7 @@ The Settings modal (the gear button) persists per-user UI choices to `~/.mulmote
 | `appendSystemPrompt` | Whether a spawned Claude session is asked to end a reply with a **closing summary** — what was asked, what was achieved, what was not (see [Closing summary](#closing-summary)). **On by default**; set `false` to opt out, and a directory's `.mulmoterminal.json` outranks this. Settings → **Sessions and background tasks** has the switch. Read per spawn, so no restart is needed, though a session already running keeps what it was launched with. `true` / `false` only. |
 | `autoDirIcon` | Whether a project that sets no `icon` shows the favicon its repository already ships (`public/favicon.svg`, `apple-touch-icon.png`, a web manifest — first hit wins, ordered by how the image survives at 14px). **On by default**; Settings → **Directory appearance** has the switch. A single project opts out with `"icon": false` in its own `.mulmoterminal.json`, which this does not override. A key that was written and got it wrong shows nothing rather than falling back — a broken setting has to look broken. `true` / `false` only. |
 | `cockpitLines` | `{ summary, prompt, response }` — how many lines each **cockpit-roster** row shows before it clamps (default `2` / `2` / `3`, each clamped to `1`–`20`). Raising them trades how many sessions fit on screen for reading a long one in place. Three steppers in Settings → **Waiting rows**. |
+| `showLoadAverage` | Whether the grid header draws this machine's **load average** beside the 5h / 7d usage windows, as a percentage of its cores (`load 334%` = a 20-core machine with 66.8 runnable processes). **On by default**; amber at 100%, red at 200%, hover for the raw 1 / 5 / 15-minute figures. Settings → **Grid header read-outs** has the switch. A host that keeps no load average (Windows) shows nothing rather than `0%`, whatever this says. `true` / `false` only. |
 | `fontFamily` | The **terminal font** every session renders in — a CSS font-family stack, e.g. `"'Cica', 'MS Gothic', monospace"`. Set it in Settings → **Terminal font**, applied at once; editing the file instead needs a **restart** (this config is read once at startup). Unset uses the built-in stack (JetBrains Mono / Fira Code / Menlo / Consolas, then CJK faces for Japanese, Korean and Chinese). Unlike the per-browser font **size**, this is one value for the whole host — it names fonts, and which fonts exist is a property of the machine. A directory can override it. See the [Configuration guide](https://receptron.github.io/mulmoterminal/guide/en/config.html#font-family). |
 
 Every MulmoTerminal on the machine shares this one file, so an older build could save over a key a
@@ -855,7 +858,10 @@ them. They exist as separate projects because each has its own compiler options
 `noUncheckedIndexedAccess` off).
 
 In dev, open the Vite URL; its proxy forwards `/ws`, `/ws/pubsub`, and `/api` to
-`:34567`. In production, run `yarn build` then `yarn server` and open
+`:34567`, plus the two mounts that serve a presentHtml page to the Canvas iframe,
+`/artifacts` and `/htmlfile` — a page path missing from that list is answered by
+Vite's SPA catch-all with `index.html`, which renders as a blank iframe rather
+than an error. In production, run `yarn build` then `yarn server` and open
 `http://localhost:34567`.
 
 ---
@@ -1515,6 +1521,14 @@ The browser sends the cell's xterm buffer as `log`; the server truncates it to t
 last **32 KB** (the tail, where errors + the exit line live), runs the CLI with the
 log piped on stdin (argv — no shell), and returns its answer. Same-origin guarded.
 
+The summarizer gets **no tools** (#1769): the spawn carries a `--settings` deny of `*`,
+a `--disallowedTools` list, no MCP servers, and a working directory outside any
+repository. A deny rule outranks the ambient allow rules — including the user-level
+`~/.claude/settings.json`, which a neutral working directory does not escape — and it
+covers tools that do not exist yet, which a list of names cannot. The log being
+summarized is not content we control, so this is the guarantee rather than the prompt's
+wording (the prompt says it too).
+
 **Request `application/json`**:
 
 ```jsonc
@@ -1912,15 +1926,24 @@ appears, at which point the on-disk title takes over.
 The raw last prompt is a poor cell-header label once a session becomes a
 back-and-forth: a follow-up is either a trivial ack (`ok`, `はい` — skipped, so the
 header keeps showing the now-stale opening task) or context-dependent (`2番目にして`
-— meaningless on its own). So the server summarizes the **recent turns** with a cheap
-model (`MT_TITLE_MODEL`, default `haiku`) into a short title and shows it in the cell
-header (falling back to the last prompt when there's no title yet).
-
-Generation is kept low-cost — it runs at a turn's `Stop` (when the reply is on disk)
-only when a title is **due**: none yet, the newest prompt was a trivial/context-dependent
-ack (so the raw last prompt would be stale), or every few turns to keep a long session's
-title current. The title lives in memory (never written into Claude's own transcript); a
-resumed session falls back to any on-disk `ai-title`.
+— meaningless on its own). So the header shows a short **AI title** instead, falling back
+to the last prompt when there is none yet.
+
+By default that title is **read, not generated**: Claude Code writes an `ai-title` record
+into its own transcript, and the server picks it up from the pass it already makes over
+that file. Nothing is spawned, so nothing has to be given tools — the previous behaviour
+launched a full `claude -p` session per title, and one of those ran `git push origin main`
+in a working repository (#1769). The cost is freshness: Claude's own title is written once
+per session and never revised, so it describes what the session STARTED as. Set
+`MT_TITLE_SOURCE=headless` to go back to summarizing the recent turns with a cheap model
+(`MT_TITLE_MODEL`, default `haiku`), which does follow a drifting topic.
+
+Either way the title is refreshed on the same schedule — at a turn's `Stop` (when the reply
+is on disk) and only when one is **due**: none yet, the newest prompt was a
+trivial/context-dependent ack (so the raw last prompt would be stale), or every few turns.
+The cadence matters much less now that the default source costs nothing to read. The title
+this server is showing lives in memory (this repo never writes `ai-title` lines into Claude's
+own transcript); a resumed session falls back to the on-disk `ai-title` directly.
 
 ### Session note
 
@@ -1998,7 +2021,8 @@ common/           Shared by server/ and src/ — both tsconfigs include it, so a
                   wire type either side decides from belongs HERE, never mirrored in both:
                   dirChrome.ts, ghItems.ts, gitStatus.ts, launchOptions.ts, shortcuts.ts,
                   sourceExtensions.ts, modelPresets.ts, modelIds.ts, theme*.ts, …
-vite.config.ts    Dev proxy for /ws (+ /ws/codex, /ws/launch, /ws/run), /ws/pubsub, /api, /artifacts
+vite.config.ts    Dev proxy for /ws (+ /ws/codex, /ws/launch, /ws/run), /ws/pubsub, /api,
+                  /artifacts, /htmlfile
 vitest.config.ts  jsdom test environment
 ```
 

package/common/machineLoad.ts

@@ -0,0 +1,64 @@
+// The machine's own run-queue load, shown beside the 5h / 7d usage gauges (#1786): "may I start
+// another agent right now?" is a question about this host, and it was the one number the grid
+// header did not carry.
+//
+// Shared because both sides decide from it: the server reads the kernel's figures, the header
+// turns them into a percentage of the cores it has.
+
+import { isRecord } from "./isRecord.js";
+
+export interface MachineLoad {
+  /** The 1 / 5 / 15 minute averages, as the kernel reports them. */
+  avg1: number;
+  avg5: number;
+  avg15: number;
+  /** What makes the averages readable — 66.8 is quiet on 128 cores and hopeless on 4. */
+  cores: number;
+}
+
+/** Windows keeps no load average, and Node says so by returning `[0, 0, 0]` rather than failing.
+ *  Decided on the PLATFORM and never on the values: an idle mac reports 0.00 too, and reading
+ *  that as "unknown" would drop the one reading we can vouch for. */
+export const keepsLoadAverage = (platform: string): boolean => platform !== "win32";
+
+// A negative average, a NaN, or a machine claiming zero cores describes no machine. Rejected
+// whole rather than per field: the percentage divides one by the other, so a reading missing
+// either half cannot be drawn at all.
+const usableLoad = (avg1: number, avg5: number, avg15: number, cores: number): MachineLoad | null => {
+  const sane = (n: number): boolean => Number.isFinite(n) && n >= 0;
+  if (!sane(avg1) || !sane(avg5) || !sane(avg15)) return null;
+  if (!Number.isInteger(cores) || cores <= 0) return null;
+  return { avg1, avg5, avg15, cores };
+};
+
+/** The reading, or null where there is nothing to report. Pure — `node:os` is touched by the one
+ *  caller in `server/infra/machine-load.ts`, so every rule here stays testable without waiting for
+ *  a machine that happens to be busy. */
+export function machineLoadFrom(averages: readonly number[], cores: number, platform: string): MachineLoad | null {
+  if (!keepsLoadAverage(platform)) return null;
+  const [avg1, avg5, avg15] = averages;
+  if (avg1 === undefined || avg5 === undefined || avg15 === undefined) return null;
+  return usableLoad(avg1, avg5, avg15, cores);
+}
+
+/** What the browser accepts back. A field of the wrong type is not "absent" — it is a shape this
+ *  client has not been taught, and rendering half of it would put a number on screen that no
+ *  machine reported. */
+export function parseMachineLoad(value: unknown): MachineLoad | null {
+  if (!isRecord(value)) return null;
+  const { avg1, avg5, avg15, cores } = value;
+  if (typeof avg1 !== "number" || typeof avg5 !== "number" || typeof avg15 !== "number" || typeof cores !== "number") return null;
+  return usableLoad(avg1, avg5, avg15, cores);
+}
+
+/** What a `GET /api/load` body means, in the one place both the meaning and the shape are known.
+ *
+ *  `null` is "nothing usable arrived" — a body this client cannot read says nothing about the
+ *  machine, so whatever is on screen stays until it goes stale. `{ load: null }` is the opposite:
+ *  the host answering that it keeps no load average, which the header must act on at once. */
+export function readLoadBody(body: unknown): { load: MachineLoad | null } | null {
+  if (!isRecord(body)) return null;
+  if (body.load === null) return { load: null };
+  const load = parseMachineLoad(body.load);
+  return load ? { load } : null;
+}

package/common/showLoadAverage.ts

@@ -0,0 +1,17 @@
+// The one place the `showLoadAverage` setting is defined (#1786). Both sides decide from it — the
+// server sanitizes what the config file says, the browser hydrates a flag from the same field —
+// and a default that disagrees across the two shows up only as a checkbox that does not match
+// what the server does.
+
+/** ON unless the config says otherwise: the read-out is the feature, and a header that has to be
+ *  switched on is one nobody finds. */
+export const SHOW_LOAD_AVERAGE_DEFAULT = true;
+
+// The KEY deliberately stays a literal on both sides. `settings-coverage.spec.ts` proves a
+// setting is reachable by finding `createGlobalFlag("<key>"` in the Settings sources, so a shared
+// constant there buys nothing and silently removes that guarantee — the name is already pinned,
+// it is the DEFAULT that could drift unseen.
+
+/** Anything that is not a boolean is "unconfigured", which is what every config file written
+ *  before this feature existed contains. */
+export const sanitizeShowLoadAverage = (input: unknown): boolean => (typeof input === "boolean" ? input : SHOW_LOAD_AVERAGE_DEFAULT);

package/dist/assets/{abnfDiagram-N423BO3Z-D0pzqjdS-tsokipTX.js → abnfDiagram-N423BO3Z-D0pzqjdS-BvsHO44n.js}

@@ -1 +1 @@
-import{n as e}from"./chunk-Y2CYZVJY-Bdt8pFDJ-DsF7k-Jl.js";import{f as t}from"./src-CvsWqFln-Tc7ZSrRz.js";import{_ as n,g as r}from"./mermaid-parser.core-C1baW7NG-BzDlu5Ub.js";import"./chunk-I66GZJ75-DSPCVCny-CcYhEHb5.js";import"./chunk-3NCLNEKW-CBztX243-DSaECkf1.js";import{n as i,r as a,t as o}from"./chunk-6Q2QTUOP-Cx8nz5_t-CzxkXkeW.js";import{t as s}from"./chunk-JWPE2WC7-BQ3zXr2k-DSd3Ct95.js";var c=r().RailroadAbnf.parser.LangiumParser,l=e(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=e(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=e(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=e(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=e(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=e(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=e(e=>{s(e,a),e.title&&a.setTitle(e.title),e.rules.map(e=>a.addRule(m(e)))},`populateDb`),g={parser:{parse:e(e=>{a.clear(),t.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;t.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),t.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:a}},db:a,renderer:o,styles:i};export{g as diagram};
+import{n as e}from"./chunk-Y2CYZVJY-Bdt8pFDJ-DsF7k-Jl.js";import{f as t}from"./src-CvsWqFln-Tc7ZSrRz.js";import{_ as n,g as r}from"./mermaid-parser.core-C1baW7NG-C1lkUbAr.js";import"./chunk-I66GZJ75-DSPCVCny-DOUjXnuq.js";import"./chunk-3NCLNEKW-CBztX243-CwupLy1v.js";import{n as i,r as a,t as o}from"./chunk-6Q2QTUOP-Cx8nz5_t-KpLSy3XB.js";import{t as s}from"./chunk-JWPE2WC7-BQ3zXr2k-DSd3Ct95.js";var c=r().RailroadAbnf.parser.LangiumParser,l=e(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=e(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=e(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=e(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=e(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=e(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=e(e=>{s(e,a),e.title&&a.setTitle(e.title),e.rules.map(e=>a.addRule(m(e)))},`populateDb`),g={parser:{parse:e(e=>{a.clear(),t.debug(`[ABNF Parser] Starting Langium parse`);let r=c.parse(e);if(r.lexerErrors.length>0||r.parserErrors.length>0)throw new n(r);let i=r.value;t.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),t.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:a}},db:a,renderer:o,styles:i};export{g as diagram};

package/dist/assets/architecture-TIHT7OUA-Cqhmai3f-CLCb_c-T.js

@@ -0,0 +1 @@
+import{f as e}from"./mermaid-parser.core-C1baW7NG-C1lkUbAr.js";export{e as createArchitectureServices};