omni-notify-mcp 1.3.286 → 1.3.288

package/dist/gateway/chatPage.js

@@ -42,199 +42,6 @@ export function servingLine() {
     const line = `BN ${me.build} · pid ${me.pid} · started ${storedStamp(me.startedAt)}`;
     return `<div id="serving" class="idbar" data-be-tip="The process that answered this page — the build its own code was loaded from, its process id, and when that process started — and when this page's sign-in expires"><span class="srv">${line}</span><small id="expires" hidden></small></div>`;
 }
-/** A reply body drawn as Markdown, node by node: every character of the source reaches the page through
- * `textContent`, so raw HTML in a reply stays literal text and nothing it names can run, load or navigate. A link is
- * an anchor only for http, https and mailto; any other scheme stays the literal source. A table is a real table
- * inside its own sideways scroller, so a wide one never widens the bubble that holds it. Plain text is unchanged:
- * the body keeps `white-space: pre-wrap`, so a reply with no Markdown reads exactly as it did. */
-export function markdownBody(doc, source) {
-    const body = doc.createElement("div");
-    body.className = "body";
-    const text = (parent, value) => { parent.append(doc.createTextNode(value)); };
-    const inline = (parent, source) => {
-        let at = 0;
-        while (at < source.length) {
-            const rest = source.slice(at);
-            let m = /^`([^`\n]+)`/.exec(rest);
-            if (m !== null) {
-                const code = doc.createElement("code");
-                text(code, m[1]);
-                parent.append(code);
-                at += m[0].length;
-                continue;
-            }
-            m = /^!\[([^\]\n]*)\]\([^)\s]*\)/.exec(rest);
-            if (m !== null) {
-                text(parent, m[1]);
-                at += m[0].length;
-                continue;
-            }
-            m = /^\[([^\]\n]+)\]\(([^)\s]+)\)/.exec(rest);
-            if (m !== null) {
-                const target = m[2];
-                if (/^(https?:|mailto:)/i.test(target)) {
-                    const link = doc.createElement("a");
-                    link.setAttribute("href", target);
-                    link.setAttribute("target", "_blank");
-                    link.setAttribute("rel", "noopener noreferrer");
-                    inline(link, m[1]);
-                    parent.append(link);
-                }
-                else
-                    text(parent, m[0]);
-                at += m[0].length;
-                continue;
-            }
-            m = /^(\*\*|__)(?=\S)([\s\S]*?\S)\1/.exec(rest);
-            if (m !== null) {
-                const strong = doc.createElement("strong");
-                inline(strong, m[2]);
-                parent.append(strong);
-                at += m[0].length;
-                continue;
-            }
-            m = /^(\*|_)(?=\S)([\s\S]*?\S)\1/.exec(rest);
-            if (m !== null) {
-                const em = doc.createElement("em");
-                inline(em, m[2]);
-                parent.append(em);
-                at += m[0].length;
-                continue;
-            }
-            const stop = rest.slice(1).search(/[`*_!\[]/);
-            const take = stop === -1 ? rest.length : stop + 1;
-            text(parent, rest.slice(0, take));
-            at += take;
-        }
-    };
-    const cells = (line) => {
-        let row = line.trim();
-        if (row.startsWith("|"))
-            row = row.slice(1);
-        if (row.endsWith("|"))
-            row = row.slice(0, -1);
-        return row.split("|").map((cell) => cell.trim());
-    };
-    const isRow = (line) => line.trim() !== "" && line.indexOf("|") !== -1;
-    const isRule = (line) => /^\s*\|?\s*:?-{2,}:?\s*(\|\s*:?-{2,}:?\s*)*\|?\s*$/.test(line);
-    const isBlock = (line) => /^\s*(#{1,6}\s|```|>|\||([-*+]|\d+[.)])\s)/.test(line);
-    const lines = String(source ?? "").split(/\r?\n/);
-    let i = 0;
-    while (i < lines.length) {
-        const line = lines[i];
-        if (line.trim() === "") {
-            i++;
-            continue;
-        }
-        if (/^\s*```/.test(line)) {
-            const fenced = [];
-            i++;
-            while (i < lines.length && !/^\s*```/.test(lines[i])) {
-                fenced.push(lines[i]);
-                i++;
-            }
-            i++;
-            const pre = doc.createElement("pre");
-            const code = doc.createElement("code");
-            text(code, fenced.join("\n"));
-            pre.append(code);
-            body.append(pre);
-            continue;
-        }
-        if (isRow(line) && i + 1 < lines.length && isRule(lines[i + 1])) {
-            const head = doc.createElement("thead");
-            const headRow = doc.createElement("tr");
-            cells(line).forEach((cell) => { const th = doc.createElement("th"); inline(th, cell); headRow.append(th); });
-            head.append(headRow);
-            const rows = doc.createElement("tbody");
-            i += 2;
-            while (i < lines.length && isRow(lines[i])) {
-                const tr = doc.createElement("tr");
-                cells(lines[i]).forEach((cell) => { const td = doc.createElement("td"); inline(td, cell); tr.append(td); });
-                rows.append(tr);
-                i++;
-            }
-            const table = doc.createElement("table");
-            table.append(head, rows);
-            const box = doc.createElement("div");
-            box.className = "tbl";
-            box.append(table);
-            body.append(box);
-            continue;
-        }
-        const heading = /^\s*(#{1,6})\s+(.*)$/.exec(line);
-        if (heading !== null) {
-            const h = doc.createElement("h" + Math.min(heading[1].length + 2, 6));
-            inline(h, heading[2].replace(/\s+#+\s*$/, ""));
-            body.append(h);
-            i++;
-            continue;
-        }
-        if (/^\s*([-*_])\s*(\1\s*){2,}$/.test(line)) {
-            body.append(doc.createElement("hr"));
-            i++;
-            continue;
-        }
-        if (/^\s*>/.test(line)) {
-            const quoted = [];
-            while (i < lines.length && /^\s*>/.test(lines[i])) {
-                quoted.push(lines[i].replace(/^\s*>\s?/, ""));
-                i++;
-            }
-            const quote = doc.createElement("blockquote");
-            markdownBodyInto(doc, quote, quoted.join("\n"));
-            body.append(quote);
-            continue;
-        }
-        if (/^\s*([-*+]|\d+[.)])\s+/.test(line)) {
-            const items = [];
-            while (i < lines.length && (/^\s*([-*+]|\d+[.)])\s+/.test(lines[i]) || (items.length > 0 && /^\s{2,}\S/.test(lines[i]) && lines[i].trim() !== ""))) {
-                const item = /^(\s*)([-*+]|\d+[.)])\s+(.*)$/.exec(lines[i]);
-                if (item === null) {
-                    items[items.length - 1].source += " " + lines[i].trim();
-                    i++;
-                    continue;
-                }
-                items.push({ depth: Math.floor(item[1].length / 2), ordered: /\d/.test(item[2]), source: item[3] });
-                i++;
-            }
-            const lists = [];
-            const containerFor = (depth, ordered) => {
-                while (lists.length > 0 && lists[lists.length - 1].depth > depth)
-                    lists.pop();
-                if (lists.length === 0 || lists[lists.length - 1].depth < depth) {
-                    const made = doc.createElement(ordered ? "ol" : "ul");
-                    if (lists.length === 0)
-                        body.append(made);
-                    else
-                        lists[lists.length - 1].node.lastElementChild.appendChild(made);
-                    lists.push({ depth, node: made });
-                }
-                return lists[lists.length - 1].node;
-            };
-            items.forEach((item) => {
-                const list = containerFor(item.depth, item.ordered);
-                const li = doc.createElement("li");
-                inline(li, item.source);
-                list.append(li);
-            });
-            continue;
-        }
-        const paragraph = [];
-        while (i < lines.length && lines[i].trim() !== "" && (paragraph.length === 0 || !isBlock(lines[i]))) {
-            paragraph.push(lines[i]);
-            i++;
-        }
-        const para = doc.createElement("p");
-        inline(para, paragraph.join("\n"));
-        body.append(para);
-    }
-    return body;
-}
-/** The same drawing for a nested block (a blockquote's own paragraphs and lists), appending into `into`. */
-export function markdownBodyInto(doc, into, source) {
-    markdownBody(doc, source).childNodes.forEach((child) => into.append(child));
-}
 /** The look every page of the door shares (#2873): BN's page and each service page the public gateway serves. */
 export const PAGE_STYLE = `:root{--bg:#fff;--fg:#111;--mut:#667;--line:#d8dce2;--me:#0b5fff;--agent:#eef1f5;--bad:#a40000}
 @media(prefers-color-scheme:dark){:root{--bg:#14171c;--fg:#e8eaed;--mut:#9aa3b0;--line:#2b313b;--agent:#222831;--me:#2f6df0;--bad:#ff8a80}}
@@ -382,13 +189,13 @@ async function resumeSignIn() {
 }
 function startSignIn() { if (token) resumeSignIn().catch(function (err) { signIn("Could not check sign-in: " + err.message); }); else signIn(""); }`;
 /**
- * The conversations half of BN's one page: the list he manages and the transcript he reads and resumes. It is carried
- * verbatim from the deleted Conversations page (#3401) into the native CLI page — the table, its per-row actions, the
- * project picker and the transcript/timing view — because that capability lives nowhere else. Its ONE creation
- * control (the New form and `POST /v1/conversations`) is NOT carried: the native CLI page's New Agent is the one way
- * to create an agent. The functions here rely on the page's shared `el`, `api`, `base`, `main`, `show`, `sent` and
- * `storedStamp`, provided by the page's own script, and on the header buttons it builds (`btnBack`,
- * `btnShelf`, `btnStop`).
+ * The conversations half of BN's one page: the list he manages — the table, its per-row actions and the project picker.
+ * It is carried from the deleted Conversations page (#3401) into the native CLI page because that capability lives
+ * nowhere else. The transcript view is NOT carried and is gone (#3640): every conversation now opens on the provider's
+ * own full interactive CLI, so what was the record's reading view is the terminal itself. Its ONE creation control (the
+ * New form and `POST /v1/conversations`) is NOT carried either: the native CLI page's New Agent is the one way to
+ * create an agent. The functions here rely on the page's shared `el`, `api`, `base`, `main`, `show` and `storedStamp`,
+ * provided by the page's own script, and on the header buttons it builds (`btnBack`, `btnShelf`).
  */
 export const CONVERSATIONS_VIEWS = `
 /** The one way this page puts text on the clipboard, calling back with what happened. */
@@ -685,7 +492,7 @@ async function listView(shelf) {
         var actrow = el("div", "actrow");
         var acts = el("div", "acts");
         var open = el("button", "", "📂 Open");
-        open.onclick = function (e) { e.stopPropagation(); go("chat", node.c.id); };
+        open.onclick = function (e) { e.stopPropagation(); go("term", node.c.id); };
         acts.append(open);
         // A turn conversation is STOPPED — its agent runs no further turn and a later message resumes it. A console
         // session's own CLI is CLOSED — that process ends and the record stays as history. Never the same label.
@@ -713,8 +520,8 @@ async function listView(shelf) {
       tr.append(cell);
       node.cells.push({ td: cell, col: col });
     });
-    tr.onclick = function (e) { if (e.shiftKey) { e.preventDefault(); extendRange(node); return; } go("chat", node.c.id); };
-    tr.onkeydown = function (e) { if (e.target === tr && (e.key === "Enter" || e.key === " ")) { e.preventDefault(); go("chat", node.c.id); } };
+    tr.onclick = function (e) { if (e.shiftKey) { e.preventDefault(); extendRange(node); return; } go("term", node.c.id); };
+    tr.onkeydown = function (e) { if (e.target === tr && (e.key === "Enter" || e.key === " ")) { e.preventDefault(); go("term", node.c.id); } };
     return node;
   };
   var updateNode = function (node, c) {
@@ -919,233 +726,6 @@ async function listView(shelf) {
   window.addEventListener("resize", listResize);
   run();
 }
-
-function chatView(meta, why) {
-  var mine = show("chat", meta.project ? base(meta.project) : "No project");
-  var shelved = meta.shelf === "archived";
-  var badge = el("span", "badge", "");
-  var banner = el("div", "rowmeta", "");
-  var facts = el("div", "convmeta");
-  facts.append(idLine(meta.id), timeLine(meta), el("div", "rowmeta", agentLine(meta)), el("span", "origin", originOf(meta)), badge, banner);
-  main.append(facts);
-  var after = 0;
-  text.value = ""; text.style.height = "";
-  var closed = meta.state === "closed";
-  var following = false;
-  // ONE console: the stored record and the turn still arriving are the same surface, so the only thing that marks a
-  // streamed line is that it is provisional — it is taken back the moment the turn's own line lands in the record.
-  var clearLive = function () { Array.prototype.forEach.call(main.querySelectorAll(".line.tail"), function (row) { row.remove(); }); };
-  var liveTail = function (kind, who, text) {
-    var row = el("div", "line tail " + kind);
-    row.append(el("span", "stamp", ""), el("span", "who", who), el("span", "say", ""));
-    row.lastElementChild.textContent = text;
-    main.append(row);
-    main.scrollTop = main.scrollHeight;
-    return row;
-  };
-  // The agent's own words and its own reasoning, the two told apart, exactly as the stream names them (#3611), each
-  // written into the one console as it arrives (#3613) — deltas of the same kind run on into the line already open.
-  var liveText = function (kind, text) {
-    if (shelved || closed) return;
-
-    var last = main.lastElementChild;
-    var open = last !== null && last.className === "line tail " + kind ? last.lastElementChild : null;
-    if (open === null) open = liveTail(kind, kind === "thinking" ? "…" : "agent", "").lastElementChild;
-    open.textContent += text;
-    if (kind === "thinking") open.parentNode.className = "line tail thinking";
-    main.scrollTop = main.scrollHeight;
-  };
-  var liveDoing = function (text) {
-    if (shelved || closed) return;
-
-    var last = main.lastElementChild;
-    if (last !== null && last.className === "line tail doing" && last.lastElementChild.textContent === text) return;
-    liveTail("doing", "⚙", text);
-  };
-  var badged = function (state) {
-    var running = !shelved && state !== "closed";
-    badge.className = "badge " + (running ? "live" : "history");
-    badge.textContent = running ? "🟢 LIVE" : "⏸ HISTORY";
-    badge.title = running ? "A CLI on this machine answers messages sent here" : "Nothing is running for this conversation — this is its stored record";
-    banner.textContent = running
-      ? "A CLI on this machine is behind this conversation. What it is thinking, what it is writing and the tool it is on are written into this console as they arrive; each turn then stays here as its own stored line. This is the conversation's console, not the CLI's own terminal screen."
-      : "Read-only replay of this conversation's stored record: what was sent, what the agent answered and what BN reported. No CLI is running for it and its terminal screen was not kept, so nothing here is live — a message sent from the box below resumes it.";
-    // Why this conversation is on its record rather than on a CLI of its own: the refusal is said here, ON this
-    // conversation, in the CLI's own absence — never a pane that looks the same whether the CLI is there or not (#3620).
-    if (why !== undefined && why !== "") banner.textContent = why + " " + banner.textContent;
-    if (!running) clearLive();
-  };
-  var sync = function (state) { closed = state === "closed"; btnStop.disabled = closed; text.placeholder = !closed ? "Message" : shelved ? "Archived - send a message to resume it" : "Stopped - send a message to resume"; badged(state); if (!following && !shelved && !closed) { following = true; follow(); } };
-  var stick = function () { main.scrollTop = main.scrollHeight; };
-  var notice = el("div", "err");
-  var asked = {};
-  var ENDS = { answer: 1, failed: 1, ask: 1 };
-  // The turn is over — its own line is in the record, so the lines the stream had only provisionally written are given back.
-  var ENDED = { answer: 1, failed: 1, stopped: 1 };
-  var took = function (ms) {
-    var s = Math.max(0, Math.round(ms / 1000)), m = Math.floor(s / 60), h = Math.floor(m / 60);
-    return h > 0 ? h + "h " + (m % 60) + "m " + (s % 60) + "s" : m > 0 ? m + "m " + (s % 60) + "s" : s + "s";
-  };
-  var queuedText = function (t, show, why) {
-    return t.queuedMs !== undefined ? show(t.queuedMs) + " queued" + (why || "") : t.queued === false ? "not queued" : "queue not measured";
-  };
-  var activeText = function (t, show, why) {
-    return t.agentMs !== undefined ? show(t.agentMs) + " active" + (why || "") : "agent time not measured";
-  };
-  var add = function (event, got) {
-    var role = event.role === "user" ? "user" : event.role === "agent" ? "agent" : "system";
-    var who = role === "user" ? "›" : role === "agent" ? "⏺" : "·";
-    var when = storedStamp(event.ts);
-    if (role === "user") asked[event.n] = event.ts;
-    else if (ENDS[event.kind] && asked[event.turn] !== undefined) {
-      var t = event.timing, wall = took(Date.parse(event.ts) - Date.parse(asked[event.turn]));
-      var endToEnd = t === undefined ? wall + " end to end (no layer timing stored for this one: queue and agent time are not measured)"
-        : t.bnMs !== undefined ? took(t.bnMs) + " end to end"
-        : wall + " end to end (the door's arrival was not measured)";
-      when += " - " + endToEnd + (t === undefined ? "" : " · " + queuedText(t, took) + " · " + activeText(t, took));
-    }
-    var row = el("div", "line " + role);
-    row.append(el("span", "stamp", when), el("span", "who", who), el("span", "say", event.text));
-    main.append(row);
-    if (event.timing || (role === "agent" && ENDS[event.kind])) timed(row, event, got);
-    after = Math.max(after, event.n);
-  };
-  var ms = function (n) { return Math.round(n).toLocaleString() + " ms"; };
-  var timed = function (box, event, got) {
-    var t = event.timing || {}, s = sent[meta.id + ":" + event.turn];
-    var tm = el("details", "tm"), head = el("summary"), wrap = el("div", "box"), table = el("table");
-    var line = function (layer, value, cls) {
-      var tr = el("tr", cls || "");
-      tr.append(el("td", "", layer), el("td", "ms", value === undefined ? "unmeasured" : ms(value)));
-      table.append(tr);
-    };
-    var traced = event.trace ? " · trace " + event.trace : "";
-    if (typeof t.totalMs !== "number") {
-      head.textContent = "⏱ no measured timing for this response";
-      tm.append(head);
-      box.append(tm);
-      return;
-    }
-    var bn = t.bnMs;
-    var hold = got.servedAt - Date.parse(event.ts);
-    var summary = (bn === undefined
-      ? "⏱ end to end not measured for this turn: its door measured no arrival to count from"
-      : "⏱ " + ms(bn) + " end to end (request arrived → answer stored)")
-      + " · " + queuedText(t, ms, " (message stored → turn started)")
-      + " · " + activeText(t, ms, " (the agent CLI's own share)")
-      + traced;
-    if (bn !== undefined) line("BN: request arrived → answer stored (bnMs)", bn, "sum");
-    t.rows.forEach(function (r) { line(r.layer, r.ms, r.part ? "part" : ""); });
-    if (s) line("BN: answer stored → served to this page's read", hold);
-    line("BN's own total, message stored → answer stored (inside the end to end above, never the agent's time)", t.totalMs, "sum");
-    var copyNote = el("span", "copynote");
-    var copy = el("button", "copy", "Copy");
-    copy.onclick = function (e) {
-      e.preventDefault(); e.stopPropagation();
-      var lines = [head.textContent || ""];
-      table.querySelectorAll("tr").forEach(function (tr) {
-        var cells = tr.querySelectorAll("td");
-        lines.push(cells[0].textContent + "\\t" + cells[1].textContent);
-      });
-      copyText(lines.join("\\n"),
-        function () { copyNote.textContent = "Copied"; setTimeout(function () { copyNote.textContent = ""; }, 1500); },
-        function () { copyNote.textContent = "Copy failed — the rows are above to select by hand"; });
-    };
-    var bar = el("div", "tmbar"); bar.append(copyNote, copy);
-    tm.append(head, wrap); wrap.append(bar, table); box.append(tm);
-    head.textContent = summary;
-    if (!s) {
-      line("page and network: not measured — this message was not sent from this page view", undefined);
-      return;
-    }
-    requestAnimationFrame(function () {
-      var shown = performance.now(), render = shown - got.at, total = shown - s.clickAt;
-      line("page: answer received → shown", render);
-      line("↳ outside BN: this page → BN → this page — UNMEASURED (measured by neither end, and never worked out by subtracting BN's figures from this page's total)", undefined, "part");
-      line("total, Send pressed → answer shown — this page's own clock, BN's rows above inside it", total, "sum");
-      head.textContent = summary + " · this page " + ms(total) + " from Send to shown";
-    });
-  };
-  var poll = async function () {
-    while (mine === view) {
-      try {
-        var data = await api("GET", "/v1/conversations/" + meta.id + "/events?after=" + after + "&wait=25");
-        if (mine !== view) return;
-        var got = { at: performance.now(), servedAt: data.servedAt };
-        notice.remove();
-        data.events.forEach(function (event) { add(event, got); });
-        if (data.events.length > 0) stick();
-        sync(data.state);
-      } catch (err) {
-        if (err.message === "signed out") return;
-        if (mine === view) { notice.textContent = err.message; main.append(notice); stick(); }
-        await new Promise(function (r) { setTimeout(r, 4000); });
-      }
-    }
-  };
-  /**
-   * The live stream of this conversation (#3611): the agent's own reasoning, its own words and the tool it is on, as they
-   * arrive, read from the conversation's own stream on the same door. A turn frame that ends or pauses the turn means its
-   * record line is written, so the live box empties and the record takes over; a turn's own start and its "still working"
-   * progress do not, or the reasoning already on screen would be wiped mid-turn. A drop mid-stream re-attaches from the
-   * last frame read, so nothing is shown twice and nothing is missed, and a first read that failed is retried by the next
-   * pass of the events poll rather than giving the view up.
-   */
-  var follow = async function () {
-    var at = null;
-    for (;;) {
-      if (mine !== view) return;
-      var control = new AbortController();
-      stopStream = function () { control.abort(); };
-      try {
-        var response = await fetch("/v1/conversations/" + meta.id + "/stream" + (at === null ? "" : "?after=" + at), { headers: { authorization: "Bearer " + token }, signal: control.signal });
-        if (response.status === 401) { signIn("Sign in again to reach your CLI."); return; }
-        if (!response.ok || response.body === null) throw Error("the gateway answered " + response.status);
-        notice.remove();
-        var reader = response.body.getReader(), decoder = new TextDecoder(), buffer = "";
-        for (;;) {
-          var chunk = await reader.read();
-          if (chunk.done) { await new Promise(function (r) { setTimeout(r, 1000); }); break; }
-          if (mine !== view) { reader.cancel(); return; }
-          buffer += decoder.decode(chunk.value, { stream: true });
-          var lines = buffer.split("\\n");
-          buffer = lines.pop();
-          lines.forEach(function (line) {
-            if (line.indexOf("data: ") !== 0) return;
-            var frame = JSON.parse(line.slice(6));
-            at = frame.seq;
-            if (frame.kind === "turn") { if (ENDED[frame.event]) clearLive(); }
-            else if (frame.kind === "doing") liveDoing(frame.text);
-            else liveText(frame.kind, frame.text);
-          });
-        }
-      } catch (err) {
-        if (mine !== view || control.signal.aborted) return;
-        // OWNER: this view's own feed of the agent's stream — a failed read is emptied and restarted here, never left to reach the record or any other view.
-        if (!(err instanceof Error)) throw err;
-        clearLive();
-        if (at === null) {
-          notice.textContent = "This conversation's live stream could not be read — " + err.message + ". Its record below is unaffected and the stream is tried again.";
-          if (!notice.isConnected) main.append(notice);
-          following = false;
-          return;
-        }
-        await new Promise(function (r) { setTimeout(r, 3000); });
-      }
-    }
-  };
-  sync(meta.state);
-  btnStop.onclick = async function () { btnStop.disabled = true; try { var stopped = await api("DELETE", "/v1/conversations/" + meta.id); if (mine === view) sync(stopped.state); } catch (err) { btnStop.disabled = false; main.append(el("div", "err", err.message)); } };
-  btnSend.onclick = async function () {
-    var body = text.value;
-    if (!body.trim()) return;
-    btnSend.disabled = true;
-    try { var clickAt = performance.now(); var posted = await api("POST", "/v1/conversations/" + meta.id + "/messages", { text: body }); sent[meta.id + ":" + posted.n] = { clickAt: clickAt }; text.value = ""; text.style.height = ""; shelved = false; if (closed && mine === view) sync("idle"); }
-    catch (err) { main.append(el("div", "err", err.message)); }
-    btnSend.disabled = false;
-  };
-  poll();
-}
 `;
 /** What a service page adds to the shared look: one card per VS Code window, with its screens. */
 const SERVICE_STYLE = `.win{border:1px solid var(--line);border-radius:10px;margin:0 0 8px;padding:10px}

package/dist/gateway/conversations.js

@@ -460,6 +460,32 @@ export function resolveProject(project, text = "") {
         throw new GatewayError(400, `the request names no project and the home project ${home} under ${workspaceRoot()} holds no BACKLOG.md; name a project (${(names.length > 0 ? names : allowedProjects()).join(", ")}) or set NOTIFY_AGENT_HOME_PROJECT`);
     return join(workspaceRoot(), chosen);
 }
+/**
+ * The workspace a session is CREATED in, from the name its creation supplied (#3640): exactly one of the allowed project
+ * names, resolved to its folder. A creation that names none is refused here by name with what to send — nothing is ever
+ * minted on a folder the caller did not choose, and no request's own text stands in for it.
+ */
+export function namedProject(project) {
+    if (typeof project !== "string" || project.trim() === "")
+        throw new GatewayError(400, `a new session needs the workspace it runs in: send project as exactly one of ${allowedProjects().join(", ")}`);
+    return projectFolder(project);
+}
+/**
+ * The folder a session is CREATED in, proved to be one of the allowed projects' folders: a creation that supplies no
+ * folder at all is refused by name, exactly as one that supplies a wrong one is (#3640) — this is the record's own
+ * guard, so no door can mint a record on a folder nobody chose.
+ */
+export function createdFolder(project) {
+    if (typeof project !== "string" || project.trim() === "")
+        throw new GatewayError(400, `a new session needs the workspace it runs in: send project as exactly one of ${allowedProjects().join(", ")}`);
+    return allowedFolder(project);
+}
+/** The agent CLI a session is CREATED on, from the name its creation supplied (#3640): nothing is minted on a provider the caller never named. */
+export function namedProvider(provider) {
+    if (typeof provider !== "string" || providerFor(provider) === undefined)
+        throw new GatewayError(400, `a new session needs the agent CLI it runs: send provider as exactly one of ${PROVIDER_NAMES.join(", ")}`);
+    return provider;
+}
 /** Every project folder under the workspace root, by name, with whether it is a Git repository. */
 export function listProjects() {
     const root = workspaceRoot();
@@ -472,7 +498,7 @@ export function listProjects() {
         .sort((a, b) => a.name.localeCompare(b.name));
     return { root, projects };
 }
-/** The record every new conversation starts from: one id, one unstarted session of its own, no turn run and nothing spent. A console session carries its mode, its owner and its notice HERE, in the one write that mints it, so the record is never on disk describing itself as a turn conversation the session driver would read its events for. */
+/** The record every new conversation starts from: one id, one unstarted session of its own, no turn run and nothing spent. Its workspace and its agent CLI are required and are bound HERE, in the one write that mints it (#3640): a record cannot exist without either, so no door can leave one to be filled in later. A console session carries its mode, its owner and its notice here too, so the record is never on disk describing itself as a turn conversation the session driver would read its events for. */
 function newConversation(input) {
     mkdirSync(agentDir(), { recursive: true });
     const now = new Date().toISOString();
@@ -508,30 +534,35 @@ export function openInteractiveConversation(project, provider, model, owner) {
 /** Every door measures its own wait: `receivedMs` is the first half of the turn's `bnMs`, so a door that had none could not name BN's whole time. */
 export function startConversation(input) {
     requireConversationEnabled();
-    const project = allowedFolder(input.project);
-    if (providerFor(input.provider) === undefined)
-        throw new GatewayError(400, `provider must be one of ${PROVIDER_NAMES.join(", ")}`);
-    const meta = newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, slack: input.slack, email: input.email, project, provider: input.provider, model: input.model, state: "queued" });
+    const project = createdFolder(input.project);
+    const provider = namedProvider(input.provider);
+    const meta = newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, slack: input.slack, email: input.email, project, provider, model: input.model, state: "queued" });
     appendEvent(meta.id, { role: "user", text: input.text, receivedMs: input.receivedMs, ...input.arrival });
     return meta;
 }
 /**
- * Opens a conversation with nothing in it: no message, no project and no agent work (#2723). Nothing is asked, so no user
- * event is stored and no process is started, and opening one costs nothing. Its project is picked now or at any time later,
- * or resolved by its first message's own text; the conversation keeps its id and its whole transcript across a switch.
+ * Opens a conversation with nothing in it: no message and no agent work (#2723). Nothing is asked, so no user event is
+ * stored and no process is started, and opening one costs nothing. Its workspace — the folder, resolved from the name
+ * the call supplied — and its agent CLI are named BY THE CALL that opens it (#3640), so it is never an empty
+ * conversation waiting for either; it keeps its id and its whole transcript across a later switch of the folder.
  */
 export function openConversation(input) {
     requireConversationEnabled();
-    if (providerFor(input.provider) === undefined)
-        throw new GatewayError(400, `provider must be one of ${PROVIDER_NAMES.join(", ")}`);
-    const project = input.project === undefined ? undefined : projectFolder(input.project);
-    return newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, project, provider: input.provider, model: input.model, state: "idle" });
+    const project = createdFolder(input.project);
+    const provider = namedProvider(input.provider);
+    return newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, project, provider, model: input.model, state: "idle" });
 }
 /**
- * Sets or switches the folder the conversation's agent works in (#2723). A Claude session id belongs to the folder it was
- * created in, so the record gets a new session id and an unstarted session while BN's own conversation id and transcript
- * stay: the next turn creates its session in the new folder, never resuming the old folder's one against the new cwd. A
- * change while a turn is in flight is refused, because a running process is never moved out from under its own work.
+ * Sets or switches the folder the conversation's agent works in (#2723), reached by every door that offers it: the Web
+ * UI's per-row picker and the agent's own `agent_project`. THE AGENT IS NOT REPLACED. A session is resumed by its id from
+ * any folder — measured: a session written in one folder resumed from another recalled its earlier turn and worked in the
+ * new folder — so the record keeps its session id and the next turn carries the same agent on in the new folder with its
+ * whole history. The provider process is not moved either: its folder is fixed at its start, so the driver ends it and
+ * opens a new one where the record now points, exactly as it does for a resume after an idle spell.
+ *
+ * A change is refused at two safe boundaries, both because a running process is never moved under itself: while a turn is
+ * in flight, and while a CLI of the browser's own holds the conversation — that CLI runs in a folder of its own and no
+ * door can move it.
  */
 export function setConversationProject(id, project) {
     requireConversationEnabled();
@@ -543,13 +574,15 @@ export function setConversationProject(id, project) {
     // NULL-OK: field turn is OPTIONAL and therefore it is ok to check for NULL
     if (turn !== undefined)
         throw new GatewayError(409, `turn ${turn.turn} is ${turn.started ? "running" : "waiting to start"} since ${clockOf(turn.startedAt)}, so the project cannot change until it ends — a running process is never moved under itself`);
+    if (cliOwns(meta))
+        throw new GatewayError(409, "a CLI is running this conversation's own session, and a running CLI cannot be moved to another folder — close the CLI, change the project, then open it again");
     const folder = projectFolder(project);
     // NULL-OK: field project is OPTIONAL and therefore it is ok to check for NULL
     if (meta.project !== undefined && sameFolder(meta.project, folder))
         return meta;
-    // The record is written first: the folder the next turn runs in comes from it, so a transcript line may never claim a switch the record does not hold.
-    const switched = updateConversation(id, { project: folder, sessionId: randomUUID(), started: false, providerArchived: undefined });
-    appendEvent(id, { role: "system", kind: "status", text: `📁 Project set to ${basename(folder)} — the next turn starts a fresh agent session there.` });
+    // The record is written first: the folder the next turn runs in comes from it, so a transcript line may never claim a switch the record does not hold. `providerArchived` is cleared because a later finish must confirm the provider's archive again rather than trust a handshake from before this work.
+    const switched = updateConversation(id, { project: folder, providerArchived: undefined });
+    appendEvent(id, { role: "system", kind: "status", text: `📁 Project set to ${basename(folder)} — the next turn carries this same agent on in that folder.` });
     return switched;
 }
 /** Appends the message; a stopped conversation is resumed first, so its next turn picks the agent's own session up where it stopped. A message stored while a turn runs gets its place in line at once, so nobody waits behind it in silence. `receivedMs` is the door's own measured wait, as in `startConversation`. */

package/dist/gateway/mcpDoor.js

@@ -17,8 +17,8 @@ import { performance } from "perf_hooks";
 import { z } from "zod";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
-import { GatewayError, MAX_WAIT_SECONDS, archiveConversation, deleteConversation, describeConversation, lastEventNumber, listProjects, openConversation, readConversation, routeAsk, requireConversationEnabled, resolveProject, sendToConversation, setConversationProject, shelvedConversations, stampWaitReturn, startConversation, stopConversation, unarchiveConversation, waitForEvents, waitForTurn, workspaceRoot, allowedProjects, } from "./conversations.js";
-import { DEFAULT_PROVIDER } from "./provider.js";
+import { GatewayError, MAX_WAIT_SECONDS, archiveConversation, deleteConversation, describeConversation, lastEventNumber, listProjects, namedProject, namedProvider, openConversation, readConversation, routeAsk, requireConversationEnabled, sendToConversation, setConversationProject, shelvedConversations, stampWaitReturn, startConversation, stopConversation, unarchiveConversation, waitForEvents, waitForTurn, workspaceRoot, allowedProjects, } from "./conversations.js";
+import { PROVIDER_NAMES } from "./providers.js";
 import { iconsFor } from "./iconDoor.js";
 import { grantClient, publicBase } from "./oauthDoor.js";
 import { bearer, personId, sessionSignIn, tokenProves } from "./passkeyDoor.js";
@@ -41,8 +41,8 @@ async function act(run) {
 }
 const INSTRUCTIONS = `BullseyeNotify (BN) runs a Claude Code agent on this machine, with access to the user's files, git repositories, shell, MCP servers, skills and rules.
 agent_prompt sends the user's request to that agent and returns its answer. It covers questions about the user's projects, files, code, builds and servers.
-A fresh agent starts in the project folder the request is about: the project named in the request text, else a board-bearing default (never a folder without a BACKLOG.md, unless project names that folder explicitly), under the workspace root (${workspaceRoot()}). The only projects are ${allowedProjects().join(" and ")}; project accepts exactly those names, never a path. agent_prompt needs no folder path and no conversation id; pass project only to pick the project yourself. agent_projects lists the projects.
-agent_open opens an empty conversation and starts nothing: it takes no text and no project, spends nothing and returns the id of a session whose project is picked with agent_project and then asked with agent_send. A conversation opened with no project resolves one from its first message's own text, else the default project.
+A NEW conversation names the folder it works in and the agent CLI it runs, in the same call that creates it: project and provider are both required, and a call that leaves either out is refused with what to send — nothing is ever started in a folder or on a CLI the caller did not choose. project is exactly one of ${allowedProjects().join(", ")}, under the workspace root (${workspaceRoot()}), never a path, and agent_projects lists them with their paths; provider is exactly one of ${PROVIDER_NAMES.join(", ")}. A call that goes on with a conversation that already exists needs neither, because both were bound when it was created.
+agent_open opens a conversation with no message and starts nothing: it names its project and provider as above, spends nothing and returns the id of a session to ask with agent_send and read with agent_wait. The folder of an existing conversation is switched with agent_project, which never starts a new agent and never makes a new conversation.
 An agent works on the project it runs in: its own folder is the board it writes to, so work belonging to another project is never done from this agent — tell the user in one line which project the work belongs to, then start that project's own agent: agent_start with project naming the project and text carrying the request (agent_prompt with project for a quick answer), read its answer with agent_wait and relay it.
 A request that changes a project is a Story, and the Story belongs on that project's own board: the agent of that project — this conversation's own agent when the work is this project's, the agent this conversation starts with agent_start as above when it belongs to another project — files it or joins it with the bullseye-backlog MCP server that project's folder declares, before any work is done on it. Once a Story is on the board the normal BB → FleetView workflow owns its execution and dispatches the subagents that run it, so BN stays free for the user's questions and follows the Story's progress on the board. A short read-only question or a status check is answered directly. Every agent respects the shared claim store, the one claims file this machine's doors write, so no Story is executed twice: a message naming a Story claims that Story in its conversation's own name for the length of its turn — a read-only question or a status check included — and a message whose Story another session already claims fails that turn in the claims file's own words, naming the holder. The long task in the example below goes the same way: agent_start and agent_wait are how such a request is sent and read, and the Story it becomes is filed and run as above.
 Each agent_prompt goes on with the same agent as the previous one from this connection, also when a different project is named; new=true starts a fresh agent. With no conversation named, BN also starts a fresh agent by itself when the newest agent is busy, is not waiting for an answer to a question it asked, and the ask does not point at the work already under way — so the ask never waits behind that turn. An ask that does point at the work under way (a follow-up, "are you done?", "stop") goes to the agent that is doing that work, even when a later independent ask opened another agent. A stopped conversation resumes on its next message.
@@ -133,8 +133,8 @@ function buildServer(caller, base) {
         text: z.string().min(1).describe("The user's request, as the user wrote it"),
         conversation: z.string().min(1).optional().describe("A 'conversation' id an earlier agent_prompt returned, to address that agent; without it the call goes on with this connection's current agent"),
         new: z.boolean().optional().describe("true starts a fresh agent instead of going on with the current one; with a conversation named it is ignored, because that conversation is addressed as usual"),
-        project: z.enum(allowedProjects()).optional().describe(`The project a fresh agent starts in: exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted. Without it the agent starts in the project the request text names, else a default project that holds a board. Used only when a fresh agent starts`),
-        provider: z.string().min(1).optional(),
+        project: z.enum(allowedProjects()).optional().describe(`The workspace of a NEW conversation: exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted. Required whenever this call creates one — no conversation named and no agent open to go on with, or new=true — and never taken from the request text`),
+        provider: z.string().min(1).optional().describe(`The agent CLI a NEW conversation runs: exactly one of ${PROVIDER_NAMES.join(", ")}. Required whenever this call creates one, beside project`),
         model: z.string().min(1).optional(),
     }, ({ text, conversation, new: fresh, project, provider, model }) => act(async () => {
         const call = randomUUID().slice(0, 8);
@@ -155,7 +155,7 @@ function buildServer(caller, base) {
         }
         // NULL-OK: field target is OPTIONAL and therefore it is ok to check for NULL
         const sent = target === undefined
-            ? { id: startConversation({ platform: "mcp", technical: true, chat: caller, project: resolveProject(project, text), provider: provider ?? DEFAULT_PROVIDER, model, text, receivedMs: Math.round(performance.now() - arrived), arrival }).id, turn: 1 }
+            ? { id: startConversation({ platform: "mcp", technical: true, chat: caller, project: namedProject(project), provider: namedProvider(provider), model, text, receivedMs: Math.round(performance.now() - arrived), arrival }).id, turn: 1 }
             : { id: target, turn: sendToConversation(target, text, Math.round(performance.now() - arrived), arrival).n };
         const { events, ended, turn } = await waitForTurn(sent.id, sent.turn, MAX_WAIT_SECONDS);
         const meta = readConversation(sent.id);
@@ -183,14 +183,14 @@ function buildServer(caller, base) {
         return { ...head, working: true, waitedMs, events: others, after, next: `call agent_wait with id="${sent.id}", after=${after}, wait=${MAX_WAIT_SECONDS} until an event of kind answer, ask, failed or stopped arrives` };
     }));
     server.tool("agent_projects", `The project folders on this machine (the folders under ${workspaceRoot()}), each with its absolute path and whether it is a git repository.`, {}, () => act(() => listProjects()));
-    server.tool("agent_start", `Creates a new conversation AND submits text as its first task (turn 1) in one call, and returns {id, state} at once without waiting for the agent. The way to run a long or autonomous task: read its progress and answer with agent_wait {id, after:1, wait:${MAX_WAIT_SECONDS}}, again with the after each reply returned, until an event of kind answer, ask or failed with turn 1, or of kind stopped, arrives. The task is already submitted, so do not also agent_send the same text, and do not call agent_start again for it — each call starts another agent on the task. agent_prompt sends and waits in one blocking call instead.`, { project: z.enum(allowedProjects()).optional().describe(`Exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted. Omit it to run in the project the text names, else a default project that holds a board`), text: z.string().min(1).describe("The first task, submitted by this call itself"), provider: z.string().min(1).optional(), model: z.string().min(1).optional() }, ({ project, text, provider, model }) => act(() => {
+    server.tool("agent_start", `Creates a new conversation AND submits text as its first task (turn 1) in one call, and returns {id, state} at once without waiting for the agent. The way to run a long or autonomous task: read its progress and answer with agent_wait {id, after:1, wait:${MAX_WAIT_SECONDS}}, again with the after each reply returned, until an event of kind answer, ask or failed with turn 1, or of kind stopped, arrives. The task is already submitted, so do not also agent_send the same text, and do not call agent_start again for it — each call starts another agent on the task. agent_prompt sends and waits in one blocking call instead.`, { project: z.enum(allowedProjects()).optional().describe(`The workspace this conversation runs in: exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted. Required here, because this call creates the conversation — it is never resolved from the text`), text: z.string().min(1).describe("The first task, submitted by this call itself"), provider: z.string().min(1).optional().describe(`The agent CLI this conversation runs: exactly one of ${PROVIDER_NAMES.join(", ")}. Required here, beside project`), model: z.string().min(1).optional() }, ({ project, text, provider, model }) => act(() => {
         const arrived = performance.now();
         const arrival = arrivalOf(requestIdOf(), randomUUID().slice(0, 8));
-        const meta = startConversation({ platform: "mcp", technical: true, chat: caller, project: resolveProject(project, text), provider: provider ?? DEFAULT_PROVIDER, model, text, receivedMs: Math.round(performance.now() - arrived), arrival });
+        const meta = startConversation({ platform: "mcp", technical: true, chat: caller, project: namedProject(project), provider: namedProvider(provider), model, text, receivedMs: Math.round(performance.now() - arrived), arrival });
         return { id: meta.id, state: meta.state };
     }));
-    server.tool("agent_open", `Opens a new, empty conversation and starts no agent: no text, no project, no process started and nothing spent. It returns {id, state} at once. A conversation opened with no project gets one from agent_project, or from its first message's own text (else the default project); its id and its whole transcript stay across a later switch. Ask it with agent_send and read it with agent_wait.`, { project: z.enum(allowedProjects()).optional().describe(`Exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted. Omit it to leave the project unset until one is picked or the first message names one`), provider: z.string().min(1).optional(), model: z.string().min(1).optional() }, ({ project, provider, model }) => act(() => {
-        const meta = openConversation({ platform: "mcp", technical: true, chat: caller, project, provider: provider ?? DEFAULT_PROVIDER, model });
+    server.tool("agent_open", `Opens a new conversation with no message and starts no agent: no text, no process started and nothing spent. It returns {id, state} at once. It names the workspace and the agent CLI the conversation opens on — project and provider are required here, because a conversation is never minted on either without the caller choosing it. Ask it with agent_send and read it with agent_wait; the folder can be switched afterwards with agent_project, and the conversation keeps its id and its whole transcript.`, { project: z.enum(allowedProjects()).optional().describe(`Exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted. Required here, because this call creates the conversation — it is never resolved from anything else`), provider: z.string().min(1).optional().describe(`The agent CLI the conversation runs: exactly one of ${PROVIDER_NAMES.join(", ")}. Required here, beside project`), model: z.string().min(1).optional() }, ({ project, provider, model }) => act(() => {
+        const meta = openConversation({ platform: "mcp", technical: true, chat: caller, project: namedProject(project), provider: namedProvider(provider), model });
         return { id: meta.id, state: meta.state };
     }));
     server.tool("agent_send", `Sends a message to a conversation that already exists (agent_start or agent_prompt made it) and returns {n} at once without waiting for the agent. n is the message's position in the log and the number of the turn it starts: read its answer with agent_wait {id, after:n, wait:${MAX_WAIT_SECONDS}}. A message sent while a turn runs is queued behind that turn, not an interrupt; one sent after the agent asked a question is the answer to it, and that turn goes on under the asking turn's number. A stopped or archived conversation resumes. Each call submits its text once more, so do not repeat a send that returned.`, { id: z.string().min(1).describe("The conversation id agent_start returned, or the 'conversation' agent_prompt returned"), text: z.string().min(1).describe("The follow-up message; the first task belongs in agent_start") }, ({ id, text }) => act(async () => {
@@ -236,7 +236,7 @@ function buildServer(caller, base) {
             }
         }).then((result) => { row(outcome ?? `refused why=${result.content[0]?.text ?? "the call was refused"}`); return result; }, (err) => { row(outcome ?? `refused why=${err instanceof Error ? err.message : String(err)}`); throw err; });
     });
-    server.tool("agent_project", `Sets or switches the project folder a conversation's agent works in — before its first message, or between any two turns, also after work in another project. The next turn's agent runs in that folder and writes to its board, while the conversation's id and its whole transcript stay. A Claude session id belongs to one folder, so the switch starts the next turn as a fresh session there. A switch while a turn is running is refused with the running turn's number, and the record keeps its old project.`, { id: z.string().min(1).describe("The conversation id agent_open or agent_start returned, or the 'conversation' agent_prompt returned"), project: z.enum(allowedProjects()).describe(`Exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted`) }, ({ id, project }) => act(() => setConversationProject(id, project)));
+    server.tool("agent_project", `Sets or switches the project folder a conversation's agent works in — before its first message, or between any two turns, also after work in another project. The next turn's agent runs in that folder and writes to its board, while the conversation's id, its whole transcript and the agent itself stay: the same session carries on in the new folder with its earlier turns in hand, so this NEVER starts a new agent and never makes a new conversation. A switch is refused at two safe boundaries — while a turn is running, named with the running turn's number, and while a browser CLI is running the conversation's own session, because a running process is never moved under itself. Either refusal leaves the record on its old project.`, { id: z.string().min(1).describe("The conversation id agent_open or agent_start returned, or the 'conversation' agent_prompt returned"), project: z.enum(allowedProjects()).describe(`Exactly one of ${allowedProjects().join(" or ")}, resolved under ${workspaceRoot()}; no path is accepted`) }, ({ id, project }) => act(() => setConversationProject(id, project)));
     server.tool("agent_status", "One conversation's project (absent until one is chosen), provider, model and state, with its title (the name its session carries in Claude's session list), its lifecycle (active while a turn runs, is queued or waits on the user's answer; idle when open with no turn; completed once stopped or archived) and beside (the conversation of the same connection it was opened next to, if any).", { id: z.string().min(1) }, ({ id }) => act(() => describeConversation(readConversation(id))));
     server.tool("agent_stream", `Where to attach to a conversation's LIVE stream: the agent's own thinking and its output AS THEY ARRIVE, not only the finished reply that agent_prompt and agent_wait carry. It returns {conversation, url, after, console?}. Attach to url with a plain HTTP GET; the answer is a Server-Sent Events stream, one 'data: <frame>' line per frame, and a frame is {seq, ts, kind, text, turn} where kind is thinking (the agent's reasoning), output (the agent's own words), doing (the tool the turn is on) or turn (a start, status, question, answer or failure line). Reconnect with ?after=<seq> of the last frame you read and you are handed every frame past it: nothing you already received is repeated and nothing new is missed. It is a read — it starts no agent, spends nothing and changes nothing — and it is the live feed of the agent that agent_start or agent_send is running. When the id names a CLI console session (a full CLI opened in the browser and mirrored at /terminal), the url is that SAME session's console output at /v1/terminals/<id>/console (frame {seq, ts, kind:"output", text, reset}), and console is true: agent_send and agent_prompt type into that live CLI and no second CLI is created.`, { id: z.string().min(1).describe("The conversation id agent_start, agent_prompt or agent_open returned"), after: z.number().int().min(0).optional().describe("The last frame seq you already have; the stream resumes past it") }, ({ id, after }) => act(() => {
         // A CLI console session (one opened in the browser) streams the CLI's OWN output (#3434) — the SAME session, not a

package/dist/gateway/restDoor.js

@@ -9,14 +9,13 @@
  * once a passkey is enrolled the gateway token is honoured only on a request from this machine.
  */
 import { createServer } from "http";
-import { GatewayError, archiveConversation, deleteConversation, listProjects, monotonicMs, openConversation, readConversation, requireConversationEnabled, resolveProject, sendToConversation, setConversationProject, shelvedConversations, startConversation, stopConversation, unarchiveConversation, waitForEvents, } from "./conversations.js";
+import { GatewayError, archiveConversation, deleteConversation, listProjects, monotonicMs, namedProject, namedProvider, openConversation, readConversation, requireConversationEnabled, sendToConversation, setConversationProject, shelvedConversations, startConversation, stopConversation, unarchiveConversation, waitForEvents, } from "./conversations.js";
 import { CHAT_HEADERS } from "./chatPage.js";
 import { isIconPath, serveIcon } from "./iconDoor.js";
 import { handleMcp } from "./mcpDoor.js";
 import { MCP_PATH, accessGranted, challenge, handleOAuth, isOAuthPath, publicBase } from "./oauthDoor.js";
 import { bearer, bearerAdmitted, handlePasskey, isPasskeyPath, localOnly, personId } from "./passkeyDoor.js";
 import { agentStreamFor } from "./agentStream.js";
-import { DEFAULT_PROVIDER } from "./provider.js";
 import { terminalConsole, terminalRoute, terminalSockets } from "./terminalDoor.js";
 import { conversationSwitchRead, panelState, saveConversationSwitch, saveSetting } from "./panel.js";
 import { PANEL_PAGES, panelHtml } from "./panelPage.js";
@@ -136,16 +135,16 @@ async function route(req, url, arrivedAt) {
             return { status: 200, body: { conversations: shelvedConversations(shelfOf(url)) } };
         if (method === "POST") {
             const body = await readJson(req);
-            const provider = typeof body.provider === "string" && body.provider.length > 0 ? body.provider : DEFAULT_PROVIDER;
+            const provider = namedProvider(body.provider);
             const model = typeof body.model === "string" && body.model.length > 0 ? body.model : undefined;
             const receivedMs = monotonicMs() - arrivedAt;
-            const project = typeof body.project === "string" && body.project.trim().length > 0 ? body.project : undefined;
+            const project = namedProject(body.project);
             // A text that is left out opens an empty conversation (#2723); one that is sent must carry something, so a blank text is still refused.
             const text = body.text === undefined ? undefined : requiredText(body, "text");
-            // Neither field is required: a body with no text opens an empty conversation and starts nothing, and a project left out is resolved from the text, else the home project.
+            // The workspace and the agent CLI are named by this call and bound by it (#3640): neither is resolved from the text and neither has a default.
             const meta = text === undefined
                 ? openConversation({ platform: "rest", project, provider, model })
-                : startConversation({ platform: "rest", project: resolveProject(project, text), provider, model, text, receivedMs });
+                : startConversation({ platform: "rest", project, provider, model, text, receivedMs });
             return { status: 201, body: { id: meta.id, state: meta.state, receivedMs } };
         }
     }

package/dist/gateway/sessionDriver.js

@@ -27,7 +27,7 @@ import { DEFAULT_CAPACITY } from "../shared/agentSession.js";
 import { AgentTurnFailed } from "./provider.js";
 import { PROVIDER_NAMES, providerFor } from "./providers.js";
 import { agentStream, dropAgentStream } from "./agentStream.js";
-import { GatewayError, agentDir, appendEvent, archiveConversation, conversationRefusal, eventsSize, listConversations, monotonicMs, purgeConversation, allowedFolder, isAllowedFolder, readConversation, readEvents, reopenConversation, resolveProject, titleOf, turnInFlight, hasBoard, resumedInLog, shelfInLog, storeChanged, stopConversation, stoppedInLog, updateConversation, } from "./conversations.js";
+import { GatewayError, agentDir, appendEvent, archiveConversation, conversationRefusal, eventsSize, listConversations, monotonicMs, purgeConversation, allowedFolder, isAllowedFolder, readConversation, readEvents, reopenConversation, titleOf, turnInFlight, hasBoard, resumedInLog, shelfInLog, storeChanged, stopConversation, stoppedInLog, updateConversation, } from "./conversations.js";
 // GATE: Meni's ruling 4A — a conversation silent this long frees its process; its next message resumes the session.
 export const IDLE_MS = 30 * 60_000;
 // GATE: Meni's ruling 6A — a turn that has said nothing for this long posts one status line, and another after each such spell.
@@ -631,10 +631,12 @@ export class SessionDriver {
                 // NULL-OK: field next is OPTIONAL and therefore it is ok to check for NULL
                 if (next === undefined)
                     return;
-                // A conversation opened with no project gets one the moment its message arrives, stored on the record before the turn starts; a message whose project cannot be resolved fails its own turn and is consumed, so the next beat takes the next message.
-                let project = c.project;
+                // The record's own folder is the folder the turn runs in (#3640): it was bound by the call that created the conversation, so nothing is resolved from the message and nothing is defaulted here. A record left without one — one minted before the workspace became mandatory — fails its own turn and is consumed, so the next beat takes the next message.
+                let project;
                 try {
-                    project = project === undefined ? this.projectFor(c, next) : allowedFolder(project);
+                    if (c.project === undefined)
+                        throw new GatewayError(409, "this conversation has no workspace, and a session runs in the folder it was created with — set one with agent_project, then send the message again, or start a new session naming project and provider");
+                    project = allowedFolder(c.project);
                 }
                 catch (err) {
                     if (!(err instanceof GatewayError))
@@ -694,16 +696,6 @@ export class SessionDriver {
             this.driving.delete(id);
         }
     }
-    /**
-     * The folder a message to a conversation opened with no project runs in, stored on the record before its turn starts:
-     * the project the message names, else the home project. A refusal it throws is answered by the loop that asked with the
-     * message consumed, so nothing sits in the log waiting for ever.
-     */
-    projectFor(c, message) {
-        const project = resolveProject(undefined, message.text);
-        updateConversation(c.id, { project });
-        return project;
-    }
     /**
      * The hold this conversation takes on the story its message is about, or none when the message names no story: the story is read
      * from the message's own text the same way its project is, and held in this conversation's own name so every door names it as the holder.
@@ -743,7 +735,7 @@ export class SessionDriver {
             process.stderr.write(`[agent-gateway] the hold of ${conversationId} on #${hold.storyId} could not be released: ${err.message}\n`);
         }
     }
-    /** The session's process, started when it has none: a free slot, else the slot of the longest-idle session, else a place in line. A held process started in another folder is ended first — its session id belongs to that folder, so this turn opens a fresh one where the record now points. */
+    /** The session's process, started when it has none: a free slot, else the slot of the longest-idle session, else a place in line. A held process started in another folder is ended first — a process's folder cannot change — and the next one runs there on the SAME session id, so the same agent carries on in the folder the record now points at. */
     slot(c, turn, provider, project) {
         const own = this.lives.get(c.id);
         if (own !== undefined) {

package/dist/gateway/terminalDoor.js

@@ -1,5 +1,5 @@
 import { WebSocketServer, WebSocket } from "ws";
-import { GatewayError, INTERACTIVE_ONLY, allowedFolder, listConversations, readConversation, updateConversation, requireConversationEnabled, resolveProject } from "./conversations.js";
+import { GatewayError, INTERACTIVE_ONLY, allowedFolder, listConversations, namedProject, namedProvider, readConversation, updateConversation, requireConversationEnabled } from "./conversations.js";
 import { attachNativeTerminal, closeNativeTerminal, nativeTerminal, nativeTerminals, openNativeTerminal } from "./nativeTerminal.js";
 import { bearer, bearerAdmitted, personId, sessionExpiresAt } from "./passkeyDoor.js";
 import { PROVIDER_NAMES, providerFor } from "./providers.js";
@@ -188,7 +188,7 @@ export async function terminalRoute(req, url, readJson) {
                     throw new GatewayError(409, `This conversation's agent is "${meta.provider}", which this gateway does not run, so no CLI can be opened on it.`);
                 // NULL-OK: field project is OPTIONAL and therefore it is ok to check for NULL
                 if (meta.project === undefined)
-                    throw new GatewayError(409, "This conversation has no project yet, and a CLI runs in a folder. Set one with agent_project, or send it a message so its own text picks one, then open the CLI.");
+                    throw new GatewayError(409, "This conversation has no workspace: it was made before one was required, and a CLI runs in a folder. Set one with agent_project, then open the CLI.");
                 const terminal = attachNativeTerminal(owner, { provider: attachedProvider, project: allowedFolder(meta.project), model: meta.model, conversation: meta.id, ...dimensions(body) });
                 const refusal = await terminal.started;
                 if (refusal !== undefined) {
@@ -197,10 +197,10 @@ export async function terminalRoute(req, url, readJson) {
                 }
                 return { status: 201, body: terminal.info() };
             }
-            const provider = providerFor(String(body.provider));
-            if (!provider)
-                throw new GatewayError(400, "Choose Claude, Codex or Copilot.");
-            const project = resolveProject(typeof body.project === "string" ? body.project : undefined);
+            // A New Agent session names BOTH: which CLI runs, and the folder it runs in (#3640). Neither is defaulted and
+            // neither is taken from anything else the request carries, so a form that posts an unset select is refused here.
+            const provider = providerFor(namedProvider(body.provider));
+            const project = namedProject(body.project);
             const model = typeof body.model === "string" && body.model.trim() ? body.model.trim() : undefined;
             if (model !== undefined && !/^[a-zA-Z0-9._:/-]+$/.test(model))
                 throw new GatewayError(400, "Model must be its CLI name, without spaces or shell characters.");

package/dist/gateway/terminalPage.js

@@ -11,11 +11,12 @@ function asset(name, installed) {
     return readFileSync(existsSync(packaged) ? fileURLToPath(packaged) : require.resolve(installed), "utf8");
 }
 /**
- * BN's ONE page: the Conversations list and the view each conversation opens in. Every conversation opens in the same
- * CLI-style view, labelled MCP or User by where it came from. A live CLI session attaches to its terminal; a message
- * conversation shows its structured record, which is not terminal output. ▶ New Agent is the one control that starts a
- * CLI agent. Browser history drives the views: each view is a history entry, Back pops it, and Conversations unwinds to
- * the list at the root entry.
+ * BN's ONE page: the Conversations list and the terminal each conversation opens in. Every conversation opens on the
+ * provider's own full interactive CLI — its slash commands, prompts and menus answered by the real CLI — whether MCP or
+ * this page started the session, and the list labels it by where it came from. There is no record view and no message
+ * box: a conversation's record is not terminal output, and MCP reaches the SAME CLI by the same id. ▶ New Agent is the
+ * one control that starts a CLI agent. Browser history drives the views: each view is a history entry, Back pops it, and
+ * Conversations unwinds to the list at the root entry.
  */
 export function terminalHtml() {
     const js = asset("xterm.js", "@xterm/xterm/lib/xterm.js").replace(/<\/script/gi, "<\\/script");
@@ -23,7 +24,9 @@ export function terminalHtml() {
     const css = asset("xterm.css", "@xterm/xterm/css/xterm.css");
     return `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>BN native CLI</title>${ICON_HEAD}<style>${PAGE_STYLE}
 ${css}
-body{height:100dvh;margin:0;display:flex;flex-direction:column}header{flex-wrap:wrap}main{flex:1;min-height:0;padding:12px;overflow:hidden}main.scroll{overflow-y:auto}#terminal{height:100%;width:100%}.setup{display:flex;gap:8px;flex-wrap:wrap}.setup select,.setup input{font:inherit;padding:8px}#status{color:var(--mut);padding:4px 12px;font-size:13px;overflow-wrap:anywhere}a{color:inherit}.origin{font-size:12px;border:1px solid var(--line);border-radius:4px;padding:0 6px;margin-left:6px;white-space:nowrap}main.cli-style{background:#101217;color:#d6dbe6;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}main.cli-style .origin{border-color:#3a4150;color:#d6dbe6}
+body{height:100dvh;margin:0;display:flex;flex-direction:column}header{flex-wrap:wrap}main{flex:1;min-height:0;padding:12px;overflow:hidden}main.scroll{overflow-y:auto}#terminal{height:100%;width:100%}.setup{display:flex;gap:8px;flex-wrap:wrap}.setup select,.setup input{font:inherit;padding:8px}
+/* The one control that moves the view: the way back to the newest output after reading up through the scrollback. */
+button.latest{border-color:#3a4150;background:#1b202a;color:#d6dbe6}button.latest[hidden]{display:none}#status{color:var(--mut);padding:4px 12px;font-size:13px;overflow-wrap:anywhere}a{color:inherit}.origin{font-size:12px;border:1px solid var(--line);border-radius:4px;padding:0 6px;margin-left:6px;white-space:nowrap}main.cli-style{background:#101217;color:#d6dbe6;font-family:ui-monospace,SFMono-Regular,Menlo,Consolas,monospace}main.cli-style .origin{border-color:#3a4150;color:#d6dbe6}
 /* The console is one surface: a line is text on the console's own background, never a banded card, whatever class the page's own stylesheet gives a message. */
 main.cli-style .line{background:none;border:0;border-radius:0;margin:0;max-width:none;padding:1px 0;color:inherit}
 main.cli-style .convmeta{border-color:#2a303c}main.cli-style .copyid{background:#1b202a;border-color:#3a4150;color:#d6dbe6}main.cli-style .err{color:#ff9a8f}
@@ -46,14 +49,13 @@ main.cli-style .badge.history{color:#c3cad6;border-color:#3a4150;background:tran
 .line .tm table{border-collapse:collapse;width:100%}
 .line .tm td{padding:1px 4px;border-top:1px solid #2a303c;vertical-align:top;overflow-wrap:anywhere}
 main.cli-style p.system{color:var(--mut)}
-</style></head><body><header><button id="back" hidden>Back</button><h1 id="title">Conversations</h1><a href="/settings" style="color:inherit">⚙️ Settings</a><a href="/public-access" style="color:inherit">🌐 Public access</a><button id="newagent" hidden>＋ New Agent</button><button id="convs" hidden title="Back to the live Conversations list">📋 Conversations</button><button id="shelf" hidden title="Show the archived conversations">🗂️ Archived</button><button id="stop" hidden>Stop</button><button id="logout" hidden>🚪 Logout</button></header>
+</style></head><body><header><button id="back" hidden>Back</button><h1 id="title">Conversations</h1><a href="/settings" style="color:inherit">⚙️ Settings</a><a href="/public-access" style="color:inherit">🌐 Public access</a><button id="newagent" hidden>＋ New Agent</button><button id="convs" hidden title="Back to the live Conversations list">📋 Conversations</button><button id="shelf" hidden title="Show the archived conversations">🗂️ Archived</button><button id="logout" hidden>🚪 Logout</button></header>
 ${servingLine()}<div id="status" role="status" hidden></div><main id="main"></main>
-<footer id="bar" hidden><textarea id="text" placeholder="Message"></textarea><button id="send" class="go">Send</button></footer>
 <script>${js}
 ${fit}</script><script>${PASSKEY_SCRIPT}
 ${SIGN_IN_SCRIPT}
-var main=document.getElementById("main"),note=document.getElementById("status"),title=document.getElementById("title"),bar=document.getElementById("bar");
-var text=document.getElementById("text"),btnSend=document.getElementById("send"),btnBack=document.getElementById("back"),btnShelf=document.getElementById("shelf"),btnStop=document.getElementById("stop");
+var main=document.getElementById("main"),note=document.getElementById("status"),title=document.getElementById("title");
+var btnBack=document.getElementById("back"),btnShelf=document.getElementById("shelf");
 var btnNew=document.getElementById("newagent"),btnConvs=document.getElementById("convs");
 var view=0,sent={},listResize=null,terminal,fitAddon,socket,reconnect,observer,arrival=null,stopStream=null;
 var AGENTS = ${JSON.stringify(PROVIDER_CHOICES)};
@@ -64,7 +66,7 @@ var carried=/(?:^#|&)token=([^&]+)/.exec(location.hash);
 if(carried){token=decodeURIComponent(carried[1]);keep(token);history.replaceState(history.state,"",location.pathname+location.search);}
 // A link may name the view to open on arrival: /terminal?view=term&id=<id> or ?view=chat&id=<id>.
 var deepLink=new URLSearchParams(location.search);
-if((deepLink.get("view")==="term"||deepLink.get("view")==="chat")&&deepLink.get("id")){arrival={view:deepLink.get("view"),id:deepLink.get("id")};}
+if(deepLink.get("view")&&deepLink.get("id")){arrival={view:deepLink.get("view"),id:deepLink.get("id")};}
 
 function el(tag,cls,content){var node=document.createElement(tag);if(cls)node.className=cls;if(content!==undefined)node.textContent=content;return node;}
 
@@ -82,13 +84,11 @@ function show(name,heading){
   btnConvs.hidden=name==="signin"||name==="list";
   // The shelf control is shown only where it changes the shelf; on the archived shelf it would be a button that does nothing.
   btnShelf.hidden=name!=="list";
-  btnStop.hidden=name!=="chat";
-  bar.hidden=name!=="chat";
   note.hidden=name!=="terminal"&&name!=="new";
   btnLogout.hidden=name==="signin";
   expiryNotice.hidden=name==="signin";
   main.classList.toggle("scroll",name!=="terminal");
-  main.classList.toggle("cli-style",name==="chat"||name==="terminal"||name==="gone");
+  main.classList.toggle("cli-style",name==="terminal"||name==="gone");
   document.body.classList.toggle("wide",inList);
   main.replaceChildren();
   return view;
@@ -125,31 +125,28 @@ function render(state){
   if(state.view==="new")return newAgentView();
   return openRecordView(state.view,state.id);
 }
-/** Opens a conversation in its console view: a live CLI attaches, a turn conversation shows its record and its live stream. */
+/** Opens a conversation in its terminal — the ONLY session view there is. There is no record view and no message box:
+ * a session reached from this page is the provider's own full interactive CLI, the same experience as running Claude,
+ * Codex or Copilot in a local terminal, with its slash commands, its prompts and its menus answered by the real CLI. */
 async function openRecordView(name,id){
   var mine=view;
   try{
     var meta=await api("GET","/v1/conversations/"+id);
     if(mine!==view)return;
-    if(name==="term"||meta.mode==="interactive-only")return cliOrGone(meta);
-    return cliOrRecord(meta);
+    return openCli(meta);
   }catch(error){if(mine===view){show("new","Conversation");note.textContent=error.message;}}
 }
-/** An existing conversation opens on a CLI of its OWN (#3620): the CLI runs that conversation's own agent session, so the
- * page, MCP and the CLI's own transcript are one session with one history — the same native CLI a New Agent session gets.
- * One whose CLI is already running is simply attached; one the CLI cannot take over — a turn in flight, no project yet, a
- * provider whose CLI keeps no resumable session — opens on its record with the reason in plain words, never a dead pane. */
-async function cliOrRecord(meta){
+/** ONE path for every conversation, whatever made it (#3620, #3640): a session started over MCP and one started by
+ * ＋ New Agent open the same way, on a CLI of the conversation's OWN session — the CLI runs that session, so this page,
+ * MCP and the CLI's own transcript are one session with one history. A CLI already running for it is attached; one that
+ * is not is started here and attached. Nothing is drawn from the conversation's record: its record is not terminal
+ * output, and MCP reaches the SAME CLI by the same id (agent_send types into it, agent_stream reads its console).
+ * A conversation the CLI cannot be opened on says why in plain words — never a transcript with a message box. */
+async function openCli(meta){
   var mine=view,alive=true;
   try{await api("GET","/v1/terminals/"+meta.id);}catch(error){if(error.status!==404)throw error;alive=false;}
   if(mine!==view)return;
   if(alive)return cliAttach(meta.id,originOf(meta));
-  // A conversation with nothing running takes a CLI of its own when its OWN session can be run (#3620): an open one, and
-  // an MCP conversation whose session its agent has already written — BN hands an MCP conversation's turn back and shelves
-  // it as history the moment it ends, so an MCP session that has answered is a shelved record that is still exactly the
-  // session a resume runs. Anything else is history: no live shell is ever invented for a session that has none.
-  var resumable=meta.platform==="mcp"&&meta.started===true;
-  if((meta.shelf!==undefined||meta.state==="closed")&&!resumable)return chatView(meta);
   try{
     var started=await api("POST","/v1/terminals",{conversation:meta.id,cols:100,rows:30});
     if(mine!==view)return;
@@ -157,28 +154,21 @@ async function cliOrRecord(meta){
   }catch(error){
     if(mine!==view)return;
     if(error.status===404)return goneView(meta);
-    chatView(meta,error.message);
+    goneView(meta,error.message);
   }
 }
-/** A console session opens on the CLI this machine is running for it; one whose CLI is gone — it ended, or BN was
- * restarted past it (terminalDoor closes every console session as the gateway comes up) — is never drawn as a terminal
- * that cannot answer. Its screen was never kept, so it says so in plain words instead of a black pane reattaching (#3611).
- * Only the door's own 404 says the CLI is gone: any other failure is a read that did not happen, and a failed read never
- * means "does not exist", so it is raised rather than reported as a session that has ended. */
-async function cliOrGone(meta){
-  var mine=view,alive=true;
-  try{await api("GET","/v1/terminals/"+meta.id);}catch(error){if(error.status!==404)throw error;alive=false;}
-  if(mine!==view)return;
-  if(alive)return cliAttach(meta.id,originOf(meta));
-  return goneView(meta);
-}
-/** A console session whose CLI this machine no longer holds. Nothing is replayed: its terminal screen was never stored. */
-function goneView(meta){
+/** A conversation whose CLI is not there and cannot be opened right now, in plain words: the reason is the refusal when
+ * the attach was tried and said no, and absent when the CLI this machine held for it is simply gone — it ended, or BN
+ * was restarted past it (terminalDoor closes every console session as the gateway comes up). Its screen was never
+ * stored, so nothing is replayed: it says so rather than drawing a black pane that cannot answer (#3611). */
+function goneView(meta,why){
   show("gone","CLI session");
   var facts=el("div","convmeta");
-  facts.append(idLine(meta.id),timeLine(meta),el("div","rowmeta",agentLine(meta)),el("span","origin",originOf(meta)),el("span","badge history","⏸ HISTORY"));
+  facts.append(idLine(meta.id),timeLine(meta),el("div","rowmeta",agentLine(meta)),el("span","origin",originOf(meta)),el("span","badge history","⏸ NO CLI"));
   main.append(facts);
-  main.append(el("p","system","This session's CLI is not running on this machine any more — it ended, or BN was restarted past it. Its terminal screen was never kept, so there is nothing to attach to and nothing to replay."));
+  main.append(el("p","system",why===undefined
+    ?"This session's CLI is not running on this machine any more — it ended, or BN was restarted past it. Its terminal screen was never kept, so there is nothing to attach to and nothing to replay."
+    :"This session's terminal could not be opened: "+why));
   main.append(el("p","system","MCP and REST still reach the same session by this id, and ＋ New Agent starts a fresh CLI."));
 }
 /** Back: the previous view when this page has one, otherwise the Conversations list. */
@@ -192,23 +182,53 @@ function toList(){
 }
 
 async function newAgentView(){
-  var mine=show("new","New Agent");note.textContent="Starts a CLI agent on this machine. Its conversation then opens in the same view.";
+  var mine=show("new","New Agent");
   var setup=el("div","setup"),provider=el("select"),project=el("select"),model=el("input"),open=el("button","go","▶ New Agent");
   provider.setAttribute("aria-label","CLI provider");project.setAttribute("aria-label","Project");model.setAttribute("aria-label","Model");model.placeholder="Model (CLI default if empty)";
+  // Both selects open on an empty "choose" option and ▶ New Agent is pressed only once BOTH carry a real choice (#3640):
+  // nothing is posted while either is unset, so no session is ever started in a folder or on a CLI that was not chosen,
+  // and the notice says in plain words what is still to be chosen.
+  var cliPlaceholder=el("option","","Choose a CLI…"),folderPlaceholder=el("option","","Choose a workspace…");
+  cliPlaceholder.value="";folderPlaceholder.value="";provider.append(cliPlaceholder);project.append(folderPlaceholder);
   setup.append(provider,project,model,open);main.append(setup);
-  try{var folders=await api("GET","/v1/projects");if(mine!==view)return;folders.projects.filter(function(p){return p.board;}).forEach(function(p){var option=el("option","",p.name);option.value=p.name;project.append(option);});
+  var folders=[],catalog=[];
+  function sync(){
+    var chosen=catalog.filter(function(entry){return entry.name===provider.value;})[0];
+    model.hidden=!(chosen&&chosen.model);if(model.hidden)model.value="";
+    var missing=[];
+    if(catalog.length===0)missing.push("a CLI to run (this gateway lists none)");else if(provider.value==="")missing.push("the CLI to run");
+    if(folders.length===0)missing.push("a workspace to run in (no project here holds a BACKLOG.md)");else if(project.value==="")missing.push("the workspace to run in");
+    open.disabled=missing.length>0;
+    note.textContent=missing.length>0
+      ?"Choose "+missing.join(" and ")+" before starting a session."
+      :"Starts a session with "+(chosen.label||chosen.name)+" in "+project.value+". Its conversation then opens in the same view.";
+  }
+  try{var listed=await api("GET","/v1/projects");if(mine!==view)return;folders=listed.projects.filter(function(p){return p.board;});folders.forEach(function(p){var option=el("option","",p.name);option.value=p.name;project.append(option);});
     var sessions=await api("GET","/v1/terminals");if(mine!==view)return;
-    var catalog=sessions.providers||[];
+    catalog=sessions.providers||[];
     catalog.forEach(function(entry){var option=el("option","",entry.label||entry.name);option.value=entry.name;provider.append(option);});
-    function syncModel(){var chosen=catalog.filter(function(entry){return entry.name===provider.value;})[0];model.hidden=!(chosen&&chosen.model);if(model.hidden)model.value="";}
-    provider.onchange=syncModel;syncModel();
   }catch(error){fail(error);}
-  open.onclick=async function(){open.disabled=true;try{var s=await api("POST","/v1/terminals",{provider:provider.value,project:project.value,model:model.hidden?"":model.value,cols:100,rows:30});if(mine===view)swap("term",s.id);}catch(error){fail(error);open.disabled=false;}};
+  provider.onchange=sync;project.onchange=sync;sync();
+  open.onclick=async function(){
+    // The one place that posts a New Agent request: an unset field is never sent for a door to fill in.
+    if(provider.value===""||project.value===""){sync();return;}
+    open.disabled=true;
+    try{var s=await api("POST","/v1/terminals",{provider:provider.value,project:project.value,model:model.hidden?"":model.value,cols:100,rows:30});if(mine===view)swap("term",s.id);}catch(error){fail(error);open.disabled=false;}
+  };
 }
 
 async function cliAttach(id,origin){
-  var mine=show("terminal","Native CLI · "+id),toolbar=el("div","setup"),back=el("button","","↩ Back"),reattach=el("button","","🔌 Reattach"),copy=el("button","","⧉ Copy selection"),close=el("button","","⏹ Close CLI"),host=el("div");host.id="terminal";main.style.display="flex";main.style.flexDirection="column";host.style.flex="1";host.style.minHeight="0";toolbar.append(back,reattach,copy,close,el("span","origin",origin));main.append(toolbar,host);
+  var mine=show("terminal","Native CLI · "+id),toolbar=el("div","setup"),back=el("button","","↩ Back"),reattach=el("button","","🔌 Reattach"),copy=el("button","","⧉ Copy selection"),latest=el("button","latest","↓ Newest"),close=el("button","","⏹ Close CLI"),host=el("div");host.id="terminal";main.style.display="flex";main.style.flexDirection="column";host.style.flex="1";host.style.minHeight="0";toolbar.append(back,reattach,copy,latest,close,el("span","origin",origin));main.append(toolbar,host);
   terminal=new Terminal({cursorBlink:true,theme:{background:"#101217"},allowProposedApi:true});fitAddon=new FitAddon.FitAddon();terminal.loadAddon(fitAddon);terminal.open(host);terminal.focus();var term=terminal;
+  // Reading back through the scrollback is the reader's own act, so it is never taken away from them: output arriving
+  // while they are scrolled up leaves the view exactly where they put it, and ↓ Newest is the deliberate way back to the
+  // newest line. The control is shown only when there is somewhere to go back to, so it is never a button that does
+  // nothing, and it goes the instant they are at the newest output again.
+  var atNewest=function(){var b=term.buffer.active;return b.viewportY>=b.baseY;};
+  var syncLatest=function(){latest.hidden=atNewest();};
+  latest.onclick=function(){term.scrollToBottom();term.focus();syncLatest();};
+  term.onScroll(syncLatest);
+  term.onWriteParsed(syncLatest);
   // xterm turns every keystroke into the CLI's input, so Ctrl+C and Ctrl+V never reach the browser's own clipboard.
   // Returning false hands that one key back to the browser: Ctrl+C copies the selected text and does not interrupt
   // the CLI unless nothing is selected, and Ctrl+V pastes the clipboard into the CLI.
@@ -274,8 +294,6 @@ ${CONVERSATIONS_VIEWS}
 btnBack.onclick=goBack;
 btnConvs.onclick=toList;
 btnNew.onclick=function(){go("new");};
-text.oninput=function(){text.style.height="44px";text.style.height=Math.min(text.scrollHeight+2,140)+"px";};
-text.onkeydown=function(e){if(e.key!=="Enter"||e.isComposing)return;e.preventDefault();if(e.ctrlKey||e.metaKey||e.shiftKey){text.setRangeText("\\n",text.selectionStart,text.selectionEnd,"end");text.oninput();return;}btnSend.click();};
 /** Where the page lands once signed in: the Conversations list, or the view a link named on arrival. */
 function home(){
   var arrived=history.state&&history.state.bn;

package/dist/shared/webhost/webviewShim.js

@@ -11,6 +11,14 @@ const PICKER_SOURCE = String.raw `
     document.body.appendChild(bar);
   }
 
+  function refused(text) {
+    notice("__bullseye-workspace-refused", text);
+    var shown = document.getElementById("__bullseye-workspace-refused");
+    if (shown !== null) {
+      shown.textContent = text;
+    }
+  }
+
   var peekHome = new URLSearchParams(window.location.search).get("bullseye-peek");
   var peeking = peekable && peekHome !== null;
   var moved = "bullseye-workspace-moved";
@@ -90,14 +98,14 @@ const PICKER_SOURCE = String.raw `
         }
         window.fetch("/__bullseye/workspaces", { method: "POST", body: JSON.stringify({ label: picked }) }).then(function (answer) {
           if (!answer.ok) {
-            notice("__bullseye-workspace-refused", "⛔ That workspace could not be picked (" + answer.status + ") — this page stays where it is");
+            refused("⛔ That workspace could not be picked (" + answer.status + ") — this page stays where it is");
             undo();
             return;
           }
           window.sessionStorage.setItem(moved, picked);
           window.location.assign(served.workspaces[picked][page]);
         }, function () {
-          notice("__bullseye-workspace-refused", "⛔ That workspace could not be picked — this page stays where it is");
+          refused("⛔ That workspace could not be picked — this page stays where it is");
           undo();
         });
       }, "no workspace named"));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "omni-notify-mcp",
-  "version": "1.3.286",
+  "version": "1.3.288",
   "description": "Reach your AI agents from anywhere — and let them reach you. One stdio process serves the whole tool surface to Claude Code, GitHub Copilot Chat and Codex: desktop, Telegram, Slack, ntfy, Discord, Teams and SMS are configured in one file, and agents notify you when long work finishes or a decision is needed, ask you a question and wait for your answer, and receive and reply to the messages you send them — with Do Not Disturb and idle detection deciding what actually gets through.",
   "main": "dist/index.js",
   "type": "module",