omni-notify-mcp 1.3.287 → 1.3.289

package/dist/gateway/chatPage.js

@@ -42,199 +42,6 @@ export function servingLine() {
     const line = `BN ${me.build} · pid ${me.pid} · started ${storedStamp(me.startedAt)}`;
     return `<div id="serving" class="idbar" data-be-tip="The process that answered this page — the build its own code was loaded from, its process id, and when that process started — and when this page's sign-in expires"><span class="srv">${line}</span><small id="expires" hidden></small></div>`;
 }
-/** A reply body drawn as Markdown, node by node: every character of the source reaches the page through
- * `textContent`, so raw HTML in a reply stays literal text and nothing it names can run, load or navigate. A link is
- * an anchor only for http, https and mailto; any other scheme stays the literal source. A table is a real table
- * inside its own sideways scroller, so a wide one never widens the bubble that holds it. Plain text is unchanged:
- * the body keeps `white-space: pre-wrap`, so a reply with no Markdown reads exactly as it did. */
-export function markdownBody(doc, source) {
-    const body = doc.createElement("div");
-    body.className = "body";
-    const text = (parent, value) => { parent.append(doc.createTextNode(value)); };
-    const inline = (parent, source) => {
-        let at = 0;
-        while (at < source.length) {
-            const rest = source.slice(at);
-            let m = /^`([^`\n]+)`/.exec(rest);
-            if (m !== null) {
-                const code = doc.createElement("code");
-                text(code, m[1]);
-                parent.append(code);
-                at += m[0].length;
-                continue;
-            }
-            m = /^!\[([^\]\n]*)\]\([^)\s]*\)/.exec(rest);
-            if (m !== null) {
-                text(parent, m[1]);
-                at += m[0].length;
-                continue;
-            }
-            m = /^\[([^\]\n]+)\]\(([^)\s]+)\)/.exec(rest);
-            if (m !== null) {
-                const target = m[2];
-                if (/^(https?:|mailto:)/i.test(target)) {
-                    const link = doc.createElement("a");
-                    link.setAttribute("href", target);
-                    link.setAttribute("target", "_blank");
-                    link.setAttribute("rel", "noopener noreferrer");
-                    inline(link, m[1]);
-                    parent.append(link);
-                }
-                else
-                    text(parent, m[0]);
-                at += m[0].length;
-                continue;
-            }
-            m = /^(\*\*|__)(?=\S)([\s\S]*?\S)\1/.exec(rest);
-            if (m !== null) {
-                const strong = doc.createElement("strong");
-                inline(strong, m[2]);
-                parent.append(strong);
-                at += m[0].length;
-                continue;
-            }
-            m = /^(\*|_)(?=\S)([\s\S]*?\S)\1/.exec(rest);
-            if (m !== null) {
-                const em = doc.createElement("em");
-                inline(em, m[2]);
-                parent.append(em);
-                at += m[0].length;
-                continue;
-            }
-            const stop = rest.slice(1).search(/[`*_!\[]/);
-            const take = stop === -1 ? rest.length : stop + 1;
-            text(parent, rest.slice(0, take));
-            at += take;
-        }
-    };
-    const cells = (line) => {
-        let row = line.trim();
-        if (row.startsWith("|"))
-            row = row.slice(1);
-        if (row.endsWith("|"))
-            row = row.slice(0, -1);
-        return row.split("|").map((cell) => cell.trim());
-    };
-    const isRow = (line) => line.trim() !== "" && line.indexOf("|") !== -1;
-    const isRule = (line) => /^\s*\|?\s*:?-{2,}:?\s*(\|\s*:?-{2,}:?\s*)*\|?\s*$/.test(line);
-    const isBlock = (line) => /^\s*(#{1,6}\s|```|>|\||([-*+]|\d+[.)])\s)/.test(line);
-    const lines = String(source ?? "").split(/\r?\n/);
-    let i = 0;
-    while (i < lines.length) {
-        const line = lines[i];
-        if (line.trim() === "") {
-            i++;
-            continue;
-        }
-        if (/^\s*```/.test(line)) {
-            const fenced = [];
-            i++;
-            while (i < lines.length && !/^\s*```/.test(lines[i])) {
-                fenced.push(lines[i]);
-                i++;
-            }
-            i++;
-            const pre = doc.createElement("pre");
-            const code = doc.createElement("code");
-            text(code, fenced.join("\n"));
-            pre.append(code);
-            body.append(pre);
-            continue;
-        }
-        if (isRow(line) && i + 1 < lines.length && isRule(lines[i + 1])) {
-            const head = doc.createElement("thead");
-            const headRow = doc.createElement("tr");
-            cells(line).forEach((cell) => { const th = doc.createElement("th"); inline(th, cell); headRow.append(th); });
-            head.append(headRow);
-            const rows = doc.createElement("tbody");
-            i += 2;
-            while (i < lines.length && isRow(lines[i])) {
-                const tr = doc.createElement("tr");
-                cells(lines[i]).forEach((cell) => { const td = doc.createElement("td"); inline(td, cell); tr.append(td); });
-                rows.append(tr);
-                i++;
-            }
-            const table = doc.createElement("table");
-            table.append(head, rows);
-            const box = doc.createElement("div");
-            box.className = "tbl";
-            box.append(table);
-            body.append(box);
-            continue;
-        }
-        const heading = /^\s*(#{1,6})\s+(.*)$/.exec(line);
-        if (heading !== null) {
-            const h = doc.createElement("h" + Math.min(heading[1].length + 2, 6));
-            inline(h, heading[2].replace(/\s+#+\s*$/, ""));
-            body.append(h);
-            i++;
-            continue;
-        }
-        if (/^\s*([-*_])\s*(\1\s*){2,}$/.test(line)) {
-            body.append(doc.createElement("hr"));
-            i++;
-            continue;
-        }
-        if (/^\s*>/.test(line)) {
-            const quoted = [];
-            while (i < lines.length && /^\s*>/.test(lines[i])) {
-                quoted.push(lines[i].replace(/^\s*>\s?/, ""));
-                i++;
-            }
-            const quote = doc.createElement("blockquote");
-            markdownBodyInto(doc, quote, quoted.join("\n"));
-            body.append(quote);
-            continue;
-        }
-        if (/^\s*([-*+]|\d+[.)])\s+/.test(line)) {
-            const items = [];
-            while (i < lines.length && (/^\s*([-*+]|\d+[.)])\s+/.test(lines[i]) || (items.length > 0 && /^\s{2,}\S/.test(lines[i]) && lines[i].trim() !== ""))) {
-                const item = /^(\s*)([-*+]|\d+[.)])\s+(.*)$/.exec(lines[i]);
-                if (item === null) {
-                    items[items.length - 1].source += " " + lines[i].trim();
-                    i++;
-                    continue;
-                }
-                items.push({ depth: Math.floor(item[1].length / 2), ordered: /\d/.test(item[2]), source: item[3] });
-                i++;
-            }
-            const lists = [];
-            const containerFor = (depth, ordered) => {
-                while (lists.length > 0 && lists[lists.length - 1].depth > depth)
-                    lists.pop();
-                if (lists.length === 0 || lists[lists.length - 1].depth < depth) {
-                    const made = doc.createElement(ordered ? "ol" : "ul");
-                    if (lists.length === 0)
-                        body.append(made);
-                    else
-                        lists[lists.length - 1].node.lastElementChild.appendChild(made);
-                    lists.push({ depth, node: made });
-                }
-                return lists[lists.length - 1].node;
-            };
-            items.forEach((item) => {
-                const list = containerFor(item.depth, item.ordered);
-                const li = doc.createElement("li");
-                inline(li, item.source);
-                list.append(li);
-            });
-            continue;
-        }
-        const paragraph = [];
-        while (i < lines.length && lines[i].trim() !== "" && (paragraph.length === 0 || !isBlock(lines[i]))) {
-            paragraph.push(lines[i]);
-            i++;
-        }
-        const para = doc.createElement("p");
-        inline(para, paragraph.join("\n"));
-        body.append(para);
-    }
-    return body;
-}
-/** The same drawing for a nested block (a blockquote's own paragraphs and lists), appending into `into`. */
-export function markdownBodyInto(doc, into, source) {
-    markdownBody(doc, source).childNodes.forEach((child) => into.append(child));
-}
 /** The look every page of the door shares (#2873): BN's page and each service page the public gateway serves. */
 export const PAGE_STYLE = `:root{--bg:#fff;--fg:#111;--mut:#667;--line:#d8dce2;--me:#0b5fff;--agent:#eef1f5;--bad:#a40000}
 @media(prefers-color-scheme:dark){:root{--bg:#14171c;--fg:#e8eaed;--mut:#9aa3b0;--line:#2b313b;--agent:#222831;--me:#2f6df0;--bad:#ff8a80}}
@@ -382,13 +189,13 @@ async function resumeSignIn() {
 }
 function startSignIn() { if (token) resumeSignIn().catch(function (err) { signIn("Could not check sign-in: " + err.message); }); else signIn(""); }`;
 /**
- * The conversations half of BN's one page: the list he manages and the transcript he reads and resumes. It is carried
- * verbatim from the deleted Conversations page (#3401) into the native CLI page — the table, its per-row actions, the
- * project picker and the transcript/timing view — because that capability lives nowhere else. Its ONE creation
- * control (the New form and `POST /v1/conversations`) is NOT carried: the native CLI page's New Agent is the one way
- * to create an agent. The functions here rely on the page's shared `el`, `api`, `base`, `main`, `show`, `sent` and
- * `storedStamp`, provided by the page's own script, and on the header buttons it builds (`btnBack`,
- * `btnShelf`, `btnStop`).
+ * The conversations half of BN's one page: the list he manages — the table, its per-row actions and the project picker.
+ * It is carried from the deleted Conversations page (#3401) into the native CLI page because that capability lives
+ * nowhere else. The transcript view is NOT carried and is gone (#3640): every conversation now opens on the provider's
+ * own full interactive CLI, so what was the record's reading view is the terminal itself. Its ONE creation control (the
+ * New form and `POST /v1/conversations`) is NOT carried either: the native CLI page's New Agent is the one way to
+ * create an agent. The functions here rely on the page's shared `el`, `api`, `base`, `main`, `show` and `storedStamp`,
+ * provided by the page's own script, and on the header buttons it builds (`btnBack`, `btnShelf`).
  */
 export const CONVERSATIONS_VIEWS = `
 /** The one way this page puts text on the clipboard, calling back with what happened. */
@@ -685,7 +492,7 @@ async function listView(shelf) {
         var actrow = el("div", "actrow");
         var acts = el("div", "acts");
         var open = el("button", "", "📂 Open");
-        open.onclick = function (e) { e.stopPropagation(); go("chat", node.c.id); };
+        open.onclick = function (e) { e.stopPropagation(); go("term", node.c.id); };
         acts.append(open);
         // A turn conversation is STOPPED — its agent runs no further turn and a later message resumes it. A console
         // session's own CLI is CLOSED — that process ends and the record stays as history. Never the same label.
@@ -713,8 +520,8 @@ async function listView(shelf) {
       tr.append(cell);
       node.cells.push({ td: cell, col: col });
     });
-    tr.onclick = function (e) { if (e.shiftKey) { e.preventDefault(); extendRange(node); return; } go("chat", node.c.id); };
-    tr.onkeydown = function (e) { if (e.target === tr && (e.key === "Enter" || e.key === " ")) { e.preventDefault(); go("chat", node.c.id); } };
+    tr.onclick = function (e) { if (e.shiftKey) { e.preventDefault(); extendRange(node); return; } go("term", node.c.id); };
+    tr.onkeydown = function (e) { if (e.target === tr && (e.key === "Enter" || e.key === " ")) { e.preventDefault(); go("term", node.c.id); } };
     return node;
   };
   var updateNode = function (node, c) {
@@ -919,233 +726,6 @@ async function listView(shelf) {
   window.addEventListener("resize", listResize);
   run();
 }
-
-function chatView(meta, why) {
-  var mine = show("chat", meta.project ? base(meta.project) : "No project");
-  var shelved = meta.shelf === "archived";
-  var badge = el("span", "badge", "");
-  var banner = el("div", "rowmeta", "");
-  var facts = el("div", "convmeta");
-  facts.append(idLine(meta.id), timeLine(meta), el("div", "rowmeta", agentLine(meta)), el("span", "origin", originOf(meta)), badge, banner);
-  main.append(facts);
-  var after = 0;
-  text.value = ""; text.style.height = "";
-  var closed = meta.state === "closed";
-  var following = false;
-  // ONE console: the stored record and the turn still arriving are the same surface, so the only thing that marks a
-  // streamed line is that it is provisional — it is taken back the moment the turn's own line lands in the record.
-  var clearLive = function () { Array.prototype.forEach.call(main.querySelectorAll(".line.tail"), function (row) { row.remove(); }); };
-  var liveTail = function (kind, who, text) {
-    var row = el("div", "line tail " + kind);
-    row.append(el("span", "stamp", ""), el("span", "who", who), el("span", "say", ""));
-    row.lastElementChild.textContent = text;
-    main.append(row);
-    main.scrollTop = main.scrollHeight;
-    return row;
-  };
-  // The agent's own words and its own reasoning, the two told apart, exactly as the stream names them (#3611), each
-  // written into the one console as it arrives (#3613) — deltas of the same kind run on into the line already open.
-  var liveText = function (kind, text) {
-    if (shelved || closed) return;
-
-    var last = main.lastElementChild;
-    var open = last !== null && last.className === "line tail " + kind ? last.lastElementChild : null;
-    if (open === null) open = liveTail(kind, kind === "thinking" ? "…" : "agent", "").lastElementChild;
-    open.textContent += text;
-    if (kind === "thinking") open.parentNode.className = "line tail thinking";
-    main.scrollTop = main.scrollHeight;
-  };
-  var liveDoing = function (text) {
-    if (shelved || closed) return;
-
-    var last = main.lastElementChild;
-    if (last !== null && last.className === "line tail doing" && last.lastElementChild.textContent === text) return;
-    liveTail("doing", "⚙", text);
-  };
-  var badged = function (state) {
-    var running = !shelved && state !== "closed";
-    badge.className = "badge " + (running ? "live" : "history");
-    badge.textContent = running ? "🟢 LIVE" : "⏸ HISTORY";
-    badge.title = running ? "A CLI on this machine answers messages sent here" : "Nothing is running for this conversation — this is its stored record";
-    banner.textContent = running
-      ? "A CLI on this machine is behind this conversation. What it is thinking, what it is writing and the tool it is on are written into this console as they arrive; each turn then stays here as its own stored line. This is the conversation's console, not the CLI's own terminal screen."
-      : "Read-only replay of this conversation's stored record: what was sent, what the agent answered and what BN reported. No CLI is running for it and its terminal screen was not kept, so nothing here is live — a message sent from the box below resumes it.";
-    // Why this conversation is on its record rather than on a CLI of its own: the refusal is said here, ON this
-    // conversation, in the CLI's own absence — never a pane that looks the same whether the CLI is there or not (#3620).
-    if (why !== undefined && why !== "") banner.textContent = why + " " + banner.textContent;
-    if (!running) clearLive();
-  };
-  var sync = function (state) { closed = state === "closed"; btnStop.disabled = closed; text.placeholder = !closed ? "Message" : shelved ? "Archived - send a message to resume it" : "Stopped - send a message to resume"; badged(state); if (!following && !shelved && !closed) { following = true; follow(); } };
-  var stick = function () { main.scrollTop = main.scrollHeight; };
-  var notice = el("div", "err");
-  var asked = {};
-  var ENDS = { answer: 1, failed: 1, ask: 1 };
-  // The turn is over — its own line is in the record, so the lines the stream had only provisionally written are given back.
-  var ENDED = { answer: 1, failed: 1, stopped: 1 };
-  var took = function (ms) {
-    var s = Math.max(0, Math.round(ms / 1000)), m = Math.floor(s / 60), h = Math.floor(m / 60);
-    return h > 0 ? h + "h " + (m % 60) + "m " + (s % 60) + "s" : m > 0 ? m + "m " + (s % 60) + "s" : s + "s";
-  };
-  var queuedText = function (t, show, why) {
-    return t.queuedMs !== undefined ? show(t.queuedMs) + " queued" + (why || "") : t.queued === false ? "not queued" : "queue not measured";
-  };
-  var activeText = function (t, show, why) {
-    return t.agentMs !== undefined ? show(t.agentMs) + " active" + (why || "") : "agent time not measured";
-  };
-  var add = function (event, got) {
-    var role = event.role === "user" ? "user" : event.role === "agent" ? "agent" : "system";
-    var who = role === "user" ? "›" : role === "agent" ? "⏺" : "·";
-    var when = storedStamp(event.ts);
-    if (role === "user") asked[event.n] = event.ts;
-    else if (ENDS[event.kind] && asked[event.turn] !== undefined) {
-      var t = event.timing, wall = took(Date.parse(event.ts) - Date.parse(asked[event.turn]));
-      var endToEnd = t === undefined ? wall + " end to end (no layer timing stored for this one: queue and agent time are not measured)"
-        : t.bnMs !== undefined ? took(t.bnMs) + " end to end"
-        : wall + " end to end (the door's arrival was not measured)";
-      when += " - " + endToEnd + (t === undefined ? "" : " · " + queuedText(t, took) + " · " + activeText(t, took));
-    }
-    var row = el("div", "line " + role);
-    row.append(el("span", "stamp", when), el("span", "who", who), el("span", "say", event.text));
-    main.append(row);
-    if (event.timing || (role === "agent" && ENDS[event.kind])) timed(row, event, got);
-    after = Math.max(after, event.n);
-  };
-  var ms = function (n) { return Math.round(n).toLocaleString() + " ms"; };
-  var timed = function (box, event, got) {
-    var t = event.timing || {}, s = sent[meta.id + ":" + event.turn];
-    var tm = el("details", "tm"), head = el("summary"), wrap = el("div", "box"), table = el("table");
-    var line = function (layer, value, cls) {
-      var tr = el("tr", cls || "");
-      tr.append(el("td", "", layer), el("td", "ms", value === undefined ? "unmeasured" : ms(value)));
-      table.append(tr);
-    };
-    var traced = event.trace ? " · trace " + event.trace : "";
-    if (typeof t.totalMs !== "number") {
-      head.textContent = "⏱ no measured timing for this response";
-      tm.append(head);
-      box.append(tm);
-      return;
-    }
-    var bn = t.bnMs;
-    var hold = got.servedAt - Date.parse(event.ts);
-    var summary = (bn === undefined
-      ? "⏱ end to end not measured for this turn: its door measured no arrival to count from"
-      : "⏱ " + ms(bn) + " end to end (request arrived → answer stored)")
-      + " · " + queuedText(t, ms, " (message stored → turn started)")
-      + " · " + activeText(t, ms, " (the agent CLI's own share)")
-      + traced;
-    if (bn !== undefined) line("BN: request arrived → answer stored (bnMs)", bn, "sum");
-    t.rows.forEach(function (r) { line(r.layer, r.ms, r.part ? "part" : ""); });
-    if (s) line("BN: answer stored → served to this page's read", hold);
-    line("BN's own total, message stored → answer stored (inside the end to end above, never the agent's time)", t.totalMs, "sum");
-    var copyNote = el("span", "copynote");
-    var copy = el("button", "copy", "Copy");
-    copy.onclick = function (e) {
-      e.preventDefault(); e.stopPropagation();
-      var lines = [head.textContent || ""];
-      table.querySelectorAll("tr").forEach(function (tr) {
-        var cells = tr.querySelectorAll("td");
-        lines.push(cells[0].textContent + "\\t" + cells[1].textContent);
-      });
-      copyText(lines.join("\\n"),
-        function () { copyNote.textContent = "Copied"; setTimeout(function () { copyNote.textContent = ""; }, 1500); },
-        function () { copyNote.textContent = "Copy failed — the rows are above to select by hand"; });
-    };
-    var bar = el("div", "tmbar"); bar.append(copyNote, copy);
-    tm.append(head, wrap); wrap.append(bar, table); box.append(tm);
-    head.textContent = summary;
-    if (!s) {
-      line("page and network: not measured — this message was not sent from this page view", undefined);
-      return;
-    }
-    requestAnimationFrame(function () {
-      var shown = performance.now(), render = shown - got.at, total = shown - s.clickAt;
-      line("page: answer received → shown", render);
-      line("↳ outside BN: this page → BN → this page — UNMEASURED (measured by neither end, and never worked out by subtracting BN's figures from this page's total)", undefined, "part");
-      line("total, Send pressed → answer shown — this page's own clock, BN's rows above inside it", total, "sum");
-      head.textContent = summary + " · this page " + ms(total) + " from Send to shown";
-    });
-  };
-  var poll = async function () {
-    while (mine === view) {
-      try {
-        var data = await api("GET", "/v1/conversations/" + meta.id + "/events?after=" + after + "&wait=25");
-        if (mine !== view) return;
-        var got = { at: performance.now(), servedAt: data.servedAt };
-        notice.remove();
-        data.events.forEach(function (event) { add(event, got); });
-        if (data.events.length > 0) stick();
-        sync(data.state);
-      } catch (err) {
-        if (err.message === "signed out") return;
-        if (mine === view) { notice.textContent = err.message; main.append(notice); stick(); }
-        await new Promise(function (r) { setTimeout(r, 4000); });
-      }
-    }
-  };
-  /**
-   * The live stream of this conversation (#3611): the agent's own reasoning, its own words and the tool it is on, as they
-   * arrive, read from the conversation's own stream on the same door. A turn frame that ends or pauses the turn means its
-   * record line is written, so the live box empties and the record takes over; a turn's own start and its "still working"
-   * progress do not, or the reasoning already on screen would be wiped mid-turn. A drop mid-stream re-attaches from the
-   * last frame read, so nothing is shown twice and nothing is missed, and a first read that failed is retried by the next
-   * pass of the events poll rather than giving the view up.
-   */
-  var follow = async function () {
-    var at = null;
-    for (;;) {
-      if (mine !== view) return;
-      var control = new AbortController();
-      stopStream = function () { control.abort(); };
-      try {
-        var response = await fetch("/v1/conversations/" + meta.id + "/stream" + (at === null ? "" : "?after=" + at), { headers: { authorization: "Bearer " + token }, signal: control.signal });
-        if (response.status === 401) { signIn("Sign in again to reach your CLI."); return; }
-        if (!response.ok || response.body === null) throw Error("the gateway answered " + response.status);
-        notice.remove();
-        var reader = response.body.getReader(), decoder = new TextDecoder(), buffer = "";
-        for (;;) {
-          var chunk = await reader.read();
-          if (chunk.done) { await new Promise(function (r) { setTimeout(r, 1000); }); break; }
-          if (mine !== view) { reader.cancel(); return; }
-          buffer += decoder.decode(chunk.value, { stream: true });
-          var lines = buffer.split("\\n");
-          buffer = lines.pop();
-          lines.forEach(function (line) {
-            if (line.indexOf("data: ") !== 0) return;
-            var frame = JSON.parse(line.slice(6));
-            at = frame.seq;
-            if (frame.kind === "turn") { if (ENDED[frame.event]) clearLive(); }
-            else if (frame.kind === "doing") liveDoing(frame.text);
-            else liveText(frame.kind, frame.text);
-          });
-        }
-      } catch (err) {
-        if (mine !== view || control.signal.aborted) return;
-        // OWNER: this view's own feed of the agent's stream — a failed read is emptied and restarted here, never left to reach the record or any other view.
-        if (!(err instanceof Error)) throw err;
-        clearLive();
-        if (at === null) {
-          notice.textContent = "This conversation's live stream could not be read — " + err.message + ". Its record below is unaffected and the stream is tried again.";
-          if (!notice.isConnected) main.append(notice);
-          following = false;
-          return;
-        }
-        await new Promise(function (r) { setTimeout(r, 3000); });
-      }
-    }
-  };
-  sync(meta.state);
-  btnStop.onclick = async function () { btnStop.disabled = true; try { var stopped = await api("DELETE", "/v1/conversations/" + meta.id); if (mine === view) sync(stopped.state); } catch (err) { btnStop.disabled = false; main.append(el("div", "err", err.message)); } };
-  btnSend.onclick = async function () {
-    var body = text.value;
-    if (!body.trim()) return;
-    btnSend.disabled = true;
-    try { var clickAt = performance.now(); var posted = await api("POST", "/v1/conversations/" + meta.id + "/messages", { text: body }); sent[meta.id + ":" + posted.n] = { clickAt: clickAt }; text.value = ""; text.style.height = ""; shelved = false; if (closed && mine === view) sync("idle"); }
-    catch (err) { main.append(el("div", "err", err.message)); }
-    btnSend.disabled = false;
-  };
-  poll();
-}
 `;
 /** What a service page adds to the shared look: one card per VS Code window, with its screens. */
 const SERVICE_STYLE = `.win{border:1px solid var(--line);border-radius:10px;margin:0 0 8px;padding:10px}

package/dist/gateway/conversations.js

@@ -460,6 +460,32 @@ export function resolveProject(project, text = "") {
         throw new GatewayError(400, `the request names no project and the home project ${home} under ${workspaceRoot()} holds no BACKLOG.md; name a project (${(names.length > 0 ? names : allowedProjects()).join(", ")}) or set NOTIFY_AGENT_HOME_PROJECT`);
     return join(workspaceRoot(), chosen);
 }
+/**
+ * The workspace a session is CREATED in, from the name its creation supplied (#3640): exactly one of the allowed project
+ * names, resolved to its folder. A creation that names none is refused here by name with what to send — nothing is ever
+ * minted on a folder the caller did not choose, and no request's own text stands in for it.
+ */
+export function namedProject(project) {
+    if (typeof project !== "string" || project.trim() === "")
+        throw new GatewayError(400, `a new session needs the workspace it runs in: send project as exactly one of ${allowedProjects().join(", ")}`);
+    return projectFolder(project);
+}
+/**
+ * The folder a session is CREATED in, proved to be one of the allowed projects' folders: a creation that supplies no
+ * folder at all is refused by name, exactly as one that supplies a wrong one is (#3640) — this is the record's own
+ * guard, so no door can mint a record on a folder nobody chose.
+ */
+export function createdFolder(project) {
+    if (typeof project !== "string" || project.trim() === "")
+        throw new GatewayError(400, `a new session needs the workspace it runs in: send project as exactly one of ${allowedProjects().join(", ")}`);
+    return allowedFolder(project);
+}
+/** The agent CLI a session is CREATED on, from the name its creation supplied (#3640): nothing is minted on a provider the caller never named. */
+export function namedProvider(provider) {
+    if (typeof provider !== "string" || providerFor(provider) === undefined)
+        throw new GatewayError(400, `a new session needs the agent CLI it runs: send provider as exactly one of ${PROVIDER_NAMES.join(", ")}`);
+    return provider;
+}
 /** Every project folder under the workspace root, by name, with whether it is a Git repository. */
 export function listProjects() {
     const root = workspaceRoot();
@@ -472,7 +498,7 @@ export function listProjects() {
         .sort((a, b) => a.name.localeCompare(b.name));
     return { root, projects };
 }
-/** The record every new conversation starts from: one id, one unstarted session of its own, no turn run and nothing spent. A console session carries its mode, its owner and its notice HERE, in the one write that mints it, so the record is never on disk describing itself as a turn conversation the session driver would read its events for. */
+/** The record every new conversation starts from: one id, one unstarted session of its own, no turn run and nothing spent. Its workspace and its agent CLI are required and are bound HERE, in the one write that mints it (#3640): a record cannot exist without either, so no door can leave one to be filled in later. A console session carries its mode, its owner and its notice here too, so the record is never on disk describing itself as a turn conversation the session driver would read its events for. */
 function newConversation(input) {
     mkdirSync(agentDir(), { recursive: true });
     const now = new Date().toISOString();
@@ -508,30 +534,35 @@ export function openInteractiveConversation(project, provider, model, owner) {
 /** Every door measures its own wait: `receivedMs` is the first half of the turn's `bnMs`, so a door that had none could not name BN's whole time. */
 export function startConversation(input) {
     requireConversationEnabled();
-    const project = allowedFolder(input.project);
-    if (providerFor(input.provider) === undefined)
-        throw new GatewayError(400, `provider must be one of ${PROVIDER_NAMES.join(", ")}`);
-    const meta = newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, slack: input.slack, email: input.email, project, provider: input.provider, model: input.model, state: "queued" });
+    const project = createdFolder(input.project);
+    const provider = namedProvider(input.provider);
+    const meta = newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, slack: input.slack, email: input.email, project, provider, model: input.model, state: "queued" });
     appendEvent(meta.id, { role: "user", text: input.text, receivedMs: input.receivedMs, ...input.arrival });
     return meta;
 }
 /**
- * Opens a conversation with nothing in it: no message, no project and no agent work (#2723). Nothing is asked, so no user
- * event is stored and no process is started, and opening one costs nothing. Its project is picked now or at any time later,
- * or resolved by its first message's own text; the conversation keeps its id and its whole transcript across a switch.
+ * Opens a conversation with nothing in it: no message and no agent work (#2723). Nothing is asked, so no user event is
+ * stored and no process is started, and opening one costs nothing. Its workspace — the folder, resolved from the name
+ * the call supplied — and its agent CLI are named BY THE CALL that opens it (#3640), so it is never an empty
+ * conversation waiting for either; it keeps its id and its whole transcript across a later switch of the folder.
  */
 export function openConversation(input) {
     requireConversationEnabled();
-    if (providerFor(input.provider) === undefined)
-        throw new GatewayError(400, `provider must be one of ${PROVIDER_NAMES.join(", ")}`);
-    const project = input.project === undefined ? undefined : projectFolder(input.project);
-    return newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, project, provider: input.provider, model: input.model, state: "idle" });
+    const project = createdFolder(input.project);
+    const provider = namedProvider(input.provider);
+    return newConversation({ platform: input.platform, technical: input.technical, chat: input.chat, project, provider, model: input.model, state: "idle" });
 }
 /**
- * Sets or switches the folder the conversation's agent works in (#2723). A Claude session id belongs to the folder it was
- * created in, so the record gets a new session id and an unstarted session while BN's own conversation id and transcript
- * stay: the next turn creates its session in the new folder, never resuming the old folder's one against the new cwd. A
- * change while a turn is in flight is refused, because a running process is never moved out from under its own work.
+ * Sets or switches the folder the conversation's agent works in (#2723), reached by every door that offers it: the Web
+ * UI's per-row picker and the agent's own `agent_project`. THE AGENT IS NOT REPLACED. A session is resumed by its id from
+ * any folder — measured: a session written in one folder resumed from another recalled its earlier turn and worked in the
+ * new folder — so the record keeps its session id and the next turn carries the same agent on in the new folder with its
+ * whole history. The provider process is not moved either: its folder is fixed at its start, so the driver ends it and
+ * opens a new one where the record now points, exactly as it does for a resume after an idle spell.
+ *
+ * A change is refused at two safe boundaries, both because a running process is never moved under itself: while a turn is
+ * in flight, and while a CLI of the browser's own holds the conversation — that CLI runs in a folder of its own and no
+ * door can move it.
  */
 export function setConversationProject(id, project) {
     requireConversationEnabled();
@@ -543,13 +574,15 @@ export function setConversationProject(id, project) {
     // NULL-OK: field turn is OPTIONAL and therefore it is ok to check for NULL
     if (turn !== undefined)
         throw new GatewayError(409, `turn ${turn.turn} is ${turn.started ? "running" : "waiting to start"} since ${clockOf(turn.startedAt)}, so the project cannot change until it ends — a running process is never moved under itself`);
+    if (cliOwns(meta))
+        throw new GatewayError(409, "a CLI is running this conversation's own session, and a running CLI cannot be moved to another folder — close the CLI, change the project, then open it again");
     const folder = projectFolder(project);
     // NULL-OK: field project is OPTIONAL and therefore it is ok to check for NULL
     if (meta.project !== undefined && sameFolder(meta.project, folder))
         return meta;
-    // The record is written first: the folder the next turn runs in comes from it, so a transcript line may never claim a switch the record does not hold.
-    const switched = updateConversation(id, { project: folder, sessionId: randomUUID(), started: false, providerArchived: undefined });
-    appendEvent(id, { role: "system", kind: "status", text: `📁 Project set to ${basename(folder)} — the next turn starts a fresh agent session there.` });
+    // The record is written first: the folder the next turn runs in comes from it, so a transcript line may never claim a switch the record does not hold. `providerArchived` is cleared because a later finish must confirm the provider's archive again rather than trust a handshake from before this work.
+    const switched = updateConversation(id, { project: folder, providerArchived: undefined });
+    appendEvent(id, { role: "system", kind: "status", text: `📁 Project set to ${basename(folder)} — the next turn carries this same agent on in that folder.` });
     return switched;
 }
 /** Appends the message; a stopped conversation is resumed first, so its next turn picks the agent's own session up where it stopped. A message stored while a turn runs gets its place in line at once, so nobody waits behind it in silence. `receivedMs` is the door's own measured wait, as in `startConversation`. */