orionfold-relay 0.25.0 → 0.26.0

package/dist/cli.js

@@ -1186,7 +1186,7 @@ var CURRENT_PLUGIN_API_VERSION, CAPABILITY_VALUES, ORIGIN_VALUES, PrimitivesBund
 var init_types = __esm({
   "src/lib/plugins/sdk/types.ts"() {
     "use strict";
-    CURRENT_PLUGIN_API_VERSION = "0.25";
+    CURRENT_PLUGIN_API_VERSION = "0.26";
     CAPABILITY_VALUES = ["fs", "net", "child_process", "env"];
     ORIGIN_VALUES = ["ainative-internal", "third-party"];
     PrimitivesBundleManifestSchema = z.object({
@@ -4614,6 +4614,19 @@ var init_history = __esm({
   }
 });
 
+// src/lib/http/self-base-url.ts
+function getSelfBaseUrl() {
+  const explicit = process.env.RELAY_SELF_BASE_URL || process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL;
+  if (explicit) return explicit;
+  const port = process.env.PORT || "3000";
+  return `http://127.0.0.1:${port}`;
+}
+var init_self_base_url = __esm({
+  "src/lib/http/self-base-url.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/workflows/delay.ts
 function parseDuration(input) {
   const match = input.match(DURATION_PATTERN);
@@ -12969,7 +12982,7 @@ var init_registry6 = __esm({
     init_registry5();
     init_installer();
     init_schedule_spec();
-    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.24"]);
+    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.25"]);
     pluginCache = null;
     lastLoadedPluginIds = /* @__PURE__ */ new Set();
     PluginTableSchema = z16.object({
@@ -15281,7 +15294,7 @@ Guidelines for schema inference:
         try {
           const table = await getTable(args.tableId);
           if (!table) return err("Table not found");
-          const baseUrl = process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+          const baseUrl = getSelfBaseUrl();
           return ok({
             url: `${baseUrl}/api/tables/${args.tableId}/export?format=${args.format}`,
             table: table.name,
@@ -15727,7 +15740,7 @@ Guidelines for schema inference:
   ];
 }
 function getBaseUrl() {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+  return getSelfBaseUrl();
 }
 var init_table_tools = __esm({
   "src/lib/chat/tools/table-tools.ts"() {
@@ -15738,6 +15751,7 @@ var init_table_tools = __esm({
     init_history();
     init_import();
     init_enrichment();
+    init_self_base_url();
   }
 });
 
@@ -25379,13 +25393,15 @@ async function fireAction(actionType, config, rowData, meta) {
 Trigger data: ${JSON.stringify(rowData, null, 2)}` : `Triggered by table row change.
 
 Data: ${JSON.stringify(rowData, null, 2)}`;
-    await fetch(`${getBaseUrl2()}/api/tasks`, {
+    await fetch(`${getSelfBaseUrl()}/api/tasks`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         title: config.title ?? "Triggered Task",
         description,
-        projectId: config.projectId ?? null
+        // createTaskSchema wants `string | undefined`, not null — sending null
+        // 400s the self-call and the task is never created. Omit when absent.
+        ...config.projectId ? { projectId: config.projectId } : {}
       })
     });
     return;
@@ -25411,7 +25427,7 @@ Data: ${JSON.stringify(rowData, null, 2)}`;
     return;
   }
   if (actionType === "run_workflow" && config.workflowId) {
-    await fetch(`${getBaseUrl2()}/api/workflows/${config.workflowId}/execute`, {
+    await fetch(`${getSelfBaseUrl()}/api/workflows/${config.workflowId}/execute`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -25429,14 +25445,12 @@ function deriveAppIdFromBlueprintId(blueprintId) {
   if (idx <= 0) return null;
   return blueprintId.slice(0, idx);
 }
-function getBaseUrl2() {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
-}
 var init_trigger_evaluator = __esm({
   "src/lib/tables/trigger-evaluator.ts"() {
     "use strict";
     init_db();
     init_schema();
+    init_self_base_url();
   }
 });
 
@@ -25899,8 +25913,8 @@ import { execFileSync as execFileSync3 } from "child_process";
 import yaml12 from "js-yaml";
 import semver from "semver";
 function relayCoreVersion() {
-  if (semver.valid("0.25.0")) {
-    return "0.25.0";
+  if (semver.valid("0.26.0")) {
+    return "0.26.0";
   }
   try {
     const root = getAppRoot(import.meta.dirname, 3);
@@ -26078,6 +26092,11 @@ async function installPack(source, options = {}) {
       const { reloadBlueprints: reloadBlueprints2 } = await Promise.resolve().then(() => (init_registry3(), registry_exports3));
       reloadBlueprints2();
     }
+    try {
+      const { revalidateTag } = await import("next/cache");
+      revalidateTag(`app-runtime:${pack.meta.id}`, { expire: 0 });
+    } catch {
+    }
     return {
       packId: pack.meta.id,
       packVersion: pack.meta.version,
@@ -27548,6 +27567,11 @@ Falling back to development mode for this run \u2014 Relay still works, but slow
       RELAY_DATA_DIR: DATA_DIR,
       RELAY_LAUNCH_CWD: launchCwd2,
       PORT: String(actualPort),
+      // Origin for Relay's internal loopback self-calls (trigger dispatch,
+      // compose table tools). The server always listens on loopback even when
+      // bound to a non-loopback host, so self-calls target 127.0.0.1 + the real
+      // port — never :3000, never the LAN IP. Fixes issue #29.
+      RELAY_SELF_BASE_URL: buildSidecarUrl(actualPort, "127.0.0.1"),
       ...opts.safeMode ? { RELAY_SAFE_MODE: "true" } : {},
       // In dev mode, Next blocks cross-origin /_next/* dev-asset requests from
       // the LAN client's IP, breaking the app over the network (issue #13).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orionfold-relay",
-  "version": "0.25.0",
+  "version": "0.26.0",
   "description": "Orionfold Relay — a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.",
   "keywords": [
     "ai",

package/src/app/api/chat/conversations/route.ts

@@ -51,7 +51,10 @@ export async function POST(req: NextRequest) {
     );
   }
 
-  const validRuntimes = ["claude-code", "openai-codex-app-server"];
+  // "ollama" is first-class: getRuntimeForModel() returns it for local models,
+  // engine.ts routes it to sendOllamaMessage. Omitting it here 400'd the
+  // "Best privacy (local only)" tier's first chat/compose on a fresh install (#30).
+  const validRuntimes = ["claude-code", "openai-codex-app-server", "ollama"];
   if (!validRuntimes.includes(runtimeId)) {
     return NextResponse.json(
       { error: `Invalid runtimeId. Must be one of: ${validRuntimes.join(", ")}` },

package/src/app/api/data/clear/route.ts

@@ -4,7 +4,14 @@ import { isDataOpsAllowed } from "@/lib/data/staging-gate";
 
 export async function POST() {
   if (!isDataOpsAllowed()) {
-    return NextResponse.json(null, { status: 404 });
+    return NextResponse.json(
+      {
+        success: false,
+        error:
+          "Clearing data is a staging-only tool and is disabled on this build.",
+      },
+      { status: 403 }
+    );
   }
 
   try {

package/src/app/api/data/seed/route.ts

@@ -4,7 +4,14 @@ import { isDataOpsAllowed } from "@/lib/data/staging-gate";
 
 export async function POST() {
   if (!isDataOpsAllowed()) {
-    return NextResponse.json(null, { status: 404 });
+    return NextResponse.json(
+      {
+        success: false,
+        error:
+          "Sample data seeding is a staging-only tool and is disabled on this build.",
+      },
+      { status: 403 }
+    );
   }
 
   try {

package/src/app/settings/page.tsx

@@ -14,10 +14,12 @@ import { ChannelsSection } from "@/components/settings/channels-section";
 import { InstanceSection } from "@/components/instance/instance-section";
 import { LicenseSection } from "@/components/settings/license-section";
 import { PageShell } from "@/components/shared/page-shell";
+import { isDataOpsAllowed } from "@/lib/data/staging-gate";
 
 export const dynamic = "force-dynamic";
 
 export default function SettingsPage() {
+  const dataOpsAllowed = isDataOpsAllowed();
   return (
     <PageShell
       title="Settings"
@@ -38,7 +40,7 @@ export default function SettingsPage() {
         <BudgetGuardrailsSection />
         <PermissionsSections />
         <DatabaseSnapshotsSection />
-        <DataManagementSection />
+        <DataManagementSection allowed={dataOpsAllowed} />
       </div>
     </PageShell>
   );

package/src/components/apps/kit-view/slots/header.tsx

@@ -22,8 +22,8 @@ interface HeaderSlotProps {
 export function HeaderSlotView({ slot, manifestPane }: HeaderSlotProps) {
   const { title, description, status, actions, cadenceChip, runNowBlueprintId, runNowVariables, periodChip, triggerSourceChip } = slot;
   return (
-    <div className="flex flex-col gap-1 sm:flex-row sm:items-center sm:justify-between sm:gap-4">
-      <div className="min-w-0 flex-1">
+    <div className="flex flex-col gap-2 sm:flex-row sm:flex-wrap sm:items-center sm:justify-between sm:gap-x-4 sm:gap-y-2">
+      <div className="min-w-0 flex-1 sm:min-w-[16rem]">
         <h1 className="text-xl font-semibold tracking-tight line-clamp-2" title={title}>
           {title}
         </h1>
@@ -33,7 +33,13 @@ export function HeaderSlotView({ slot, manifestPane }: HeaderSlotProps) {
           </p>
         )}
       </div>
-      <div className="flex flex-wrap items-center gap-2 mt-2 sm:mt-0 sm:flex-nowrap sm:shrink-0">
+      {/*
+       * Action group stays a single non-wrapping row (chips + Run + manifest
+       * never split across lines). When the title can't yield enough inline
+       * space, the PARENT's flex-wrap drops this whole group to its own row —
+       * an intentional stack, not an accidental two-line break (FEAT-4).
+       */}
+      <div className="flex flex-nowrap items-center gap-2 sm:shrink-0">
         {status && <StatusChip status={status} size="md" />}
         {cadenceChip && (
           <ScheduleCadenceChip

package/src/components/apps/run-now-button.tsx

@@ -5,6 +5,7 @@ import { Button } from "@/components/ui/button";
 import { Play } from "lucide-react";
 import { toast } from "sonner";
 import { RunNowSheet } from "./run-now-sheet";
+import { toastDraftCreated } from "./run-now-toast";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface RunNowButtonProps {
@@ -63,12 +64,15 @@ export function RunNowButton({
       });
       if (!res.ok) {
         const err = (await res.json().catch(() => ({}))) as { error?: string };
-        toast.error(err.error ?? `Failed to start (${res.status})`);
+        toast.error(err.error ?? `Failed to create draft (${res.status})`);
         return;
       }
-      toast.success("Run started");
+      const body = (await res.json().catch(() => ({}))) as {
+        workflowId?: string;
+      };
+      toastDraftCreated(body.workflowId);
     } catch (err) {
-      toast.error(err instanceof Error ? err.message : "Run failed");
+      toast.error(err instanceof Error ? err.message : "Could not create draft");
     } finally {
       setPending(false);
     }

package/src/components/apps/run-now-sheet.tsx

@@ -13,6 +13,7 @@ import {
 } from "@/components/ui/sheet";
 import { VariableInput } from "@/components/workflows/variable-input";
 import { validateVariables } from "@/lib/workflows/blueprints/validate-variables";
+import { toastDraftCreated } from "./run-now-toast";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface RunNowSheetProps {
@@ -74,10 +75,13 @@ export function RunNowSheet({
         }
         return;
       }
-      toast.success("Run started");
+      const body = (await res.json().catch(() => ({}))) as {
+        workflowId?: string;
+      };
+      toastDraftCreated(body.workflowId);
       setOpen(false);
     } catch (err) {
-      toast.error(err instanceof Error ? err.message : "Run failed");
+      toast.error(err instanceof Error ? err.message : "Could not create draft");
     } finally {
       setPending(false);
     }

package/src/components/apps/run-now-toast.ts

@@ -0,0 +1,27 @@
+import { toast } from "sonner";
+
+/**
+ * BUG-4: "Run now" POSTs the blueprint instantiate endpoint, which creates a
+ * `draft` workflow and does NOT dispatch it. The old toast said "Run started",
+ * which is a lie — nothing runs until the user hits Execute on the workflow
+ * detail page. Surface the truth: a draft was created, and deep-link to where
+ * it can be executed.
+ *
+ * Shared by `run-now-button.tsx` (direct POST) and `run-now-sheet.tsx`
+ * (variable path) so the honest copy can't drift between the two.
+ */
+export function toastDraftCreated(workflowId: string | undefined): void {
+  if (!workflowId) {
+    // No id to link to — still don't claim it started.
+    toast.success("Draft created. Open it in Workflows to Execute.");
+    return;
+  }
+  toast.success("Draft created. Open it in Workflows to Execute.", {
+    action: {
+      label: "Open workflow",
+      onClick: () => {
+        window.location.assign(`/workflows/${workflowId}`);
+      },
+    },
+  });
+}

package/src/components/chat/chat-session-provider.tsx

@@ -297,7 +297,16 @@ export function ChatSessionProvider({ children }: { children: ReactNode }) {
           ...(opts?.title ? { title: opts.title } : {}),
         }),
       });
-      if (!res.ok) return null;
+      if (!res.ok) {
+        // Never swallow a create failure silently again (#30): a rejected
+        // runtime/model used to clear the composer with no signal at all.
+        const detail = await res
+          .json()
+          .then((b) => (b as { error?: string })?.error)
+          .catch(() => null);
+        toast.error(detail || "Couldn't start a chat with this model. Try another model.");
+        return null;
+      }
       const conversation = (await res.json()) as ConversationRow;
       setConversations((prev) => [conversation, ...prev]);
       // Set empty messages BEFORE activating so the conversation has an

package/src/components/settings/data-management-section.tsx

@@ -15,7 +15,35 @@ import { ConfirmDialog } from "@/components/shared/confirm-dialog";
 import { toast } from "sonner";
 import { Loader2, Trash2, Database } from "lucide-react";
 
-export function DataManagementSection() {
+/**
+ * Reads a JSON body defensively. A gated route returns an explanatory
+ * `{success:false,error}` body with a non-2xx status; a genuine network/parse
+ * failure has no parseable body. Distinguishing the two is what stops a
+ * deliberate gate (403) from being disguised as "Network error" (BUG-5).
+ */
+async function readResult(
+  res: Response
+): Promise<{ ok: boolean; body: Record<string, unknown> | null }> {
+  let body: Record<string, unknown> | null = null;
+  try {
+    body = (await res.json()) as Record<string, unknown> | null;
+  } catch {
+    body = null;
+  }
+  return { ok: res.ok, body };
+}
+
+/** Prefer the route's explanatory reason; fall back to the HTTP status. */
+function failureMessage(
+  res: Response,
+  body: Record<string, unknown> | null,
+  fallback: string
+): string {
+  if (body && typeof body.error === "string") return body.error;
+  return `${fallback} (HTTP ${res.status})`;
+}
+
+export function DataManagementSection({ allowed = true }: { allowed?: boolean }) {
   const [clearOpen, setClearOpen] = useState(false);
   const [seedOpen, setSeedOpen] = useState(false);
   const [loading, setLoading] = useState(false);
@@ -24,14 +52,14 @@ export function DataManagementSection() {
     setLoading(true);
     try {
       const res = await fetch("/api/data/clear", { method: "POST" });
-      const data = await res.json();
-      if (data.success) {
-        const d = data.deleted;
+      const { ok, body } = await readResult(res);
+      if (ok && body?.success) {
+        const d = body.deleted as Record<string, number>;
         toast.success(
           `Cleared ${d.projects} projects, ${d.tasks} tasks, ${d.workflows} workflows, ${d.schedules} schedules, ${d.documents} documents, ${d.conversations} conversations, ${d.chatMessages} messages, ${d.learnedContext} learned context, ${d.views} views, ${d.usageLedger} usage entries, ${d.agentLogs} logs, ${d.notifications} notifications, ${d.sampleProfiles} sample profiles, ${d.files} files`
         );
       } else {
-        toast.error(`Clear failed: ${data.error}`);
+        toast.error(failureMessage(res, body, "Clear failed"));
       }
     } catch {
       toast.error("Clear failed. Network error");
@@ -44,14 +72,14 @@ export function DataManagementSection() {
     setLoading(true);
     try {
       const res = await fetch("/api/data/seed", { method: "POST" });
-      const data = await res.json();
-      if (data.success) {
-        const s = data.seeded;
+      const { ok, body } = await readResult(res);
+      if (ok && body?.success) {
+        const s = body.seeded as Record<string, number>;
         toast.success(
           `Seeded ${s.profiles} profiles, ${s.projects} projects, ${s.tasks} tasks, ${s.workflows} workflows, ${s.schedules} schedules, ${s.documents} documents, ${s.userTables} tables (${s.userTableRows} rows, ${s.tableViews} views, ${s.tableTriggers} triggers, ${s.tableRelationships} links), ${s.conversations} conversations, ${s.chatMessages} messages, ${s.agentMemory} memories, ${s.agentMessages} handoffs, ${s.channelConfigs} channels (${s.channelBindings} bindings), ${s.environmentScans} scans (${s.environmentArtifacts} artifacts, ${s.environmentCheckpoints} checkpoints, ${s.environmentTemplates} templates), ${s.workflowExecutionStats} workflow-stats, ${s.scheduleFiringMetrics} firing-metrics, ${s.usageLedger} usage entries, ${s.learnedContext} learned context, ${s.views} views, ${s.profileTestResults} test results, ${s.repoImports} repo imports, ${s.agentLogs} logs, ${s.notifications} notifications`
         );
       } else {
-        toast.error(`Seed failed: ${data.error}`);
+        toast.error(failureMessage(res, body, "Seed failed"));
       }
     } catch {
       toast.error("Seed failed. Network error");
@@ -60,6 +88,25 @@ export function DataManagementSection() {
     }
   }
 
+  if (!allowed) {
+    return (
+      <Card className="surface-card">
+        <CardHeader>
+          <CardTitle>Data Management</CardTitle>
+          <CardDescription>
+            Reset or populate your Orionfold Relay instance
+          </CardDescription>
+        </CardHeader>
+        <CardContent>
+          <p className="text-sm text-muted-foreground">
+            Seeding and clearing sample data are staging-only tools. They are
+            turned off on this build so your real data stays safe.
+          </p>
+        </CardContent>
+      </Card>
+    );
+  }
+
   return (
     <>
       <Card className="surface-card">

package/src/lib/apps/view-kits/data.ts

@@ -162,6 +162,7 @@ async function loadRuntimeStateUncached(
 
 async function loadBaseline(app: AppDetail): Promise<RuntimeState> {
   let recentTaskCount: number | undefined;
+  let activeRunCount = 0;
   try {
     const rows = db
       .select({ value: count() })
@@ -169,12 +170,22 @@ async function loadBaseline(app: AppDetail): Promise<RuntimeState> {
       .where(eq(tasks.projectId, app.id))
       .all();
     recentTaskCount = rows[0]?.value ?? 0;
+    // BUG-2: the header status must reflect whether the app is ACTUALLY
+    // running something, not a hardcoded literal. Count in-flight tasks
+    // (status = "running") for this app so kits can render Ready vs Running.
+    const running = db
+      .select({ value: count() })
+      .from(tasks)
+      .where(and(eq(tasks.projectId, app.id), eq(tasks.status, "running")))
+      .all();
+    activeRunCount = running[0]?.value ?? 0;
   } catch {
     recentTaskCount = undefined;
+    activeRunCount = 0;
   }
   const firstCron = app.manifest.schedules[0]?.cron;
   const scheduleCadence = firstCron ? humanizeCron(firstCron) : null;
-  return { app, recentTaskCount, scheduleCadence };
+  return { app, recentTaskCount, scheduleCadence, activeRunCount };
 }
 
 async function loadCadence(

package/src/lib/apps/view-kits/header-status.ts

@@ -0,0 +1,14 @@
+import type { HeaderSlot, RuntimeState } from "./types";
+
+/**
+ * BUG-2: derive the app header's status chip from real run state instead of a
+ * hardcoded `"running"` literal. An app pulses "Running" ONLY while a task is
+ * actually in flight; otherwise it reads a calm, non-pulsing "Ready".
+ *
+ * All 7 view-kit builders share this so the fake-green-pulse-on-idle defect
+ * can't reappear in one kit. `activeRunCount` is populated once in the data
+ * layer's `loadBaseline` and spread into every kit's RuntimeState.
+ */
+export function headerStatus(runtime: RuntimeState): HeaderSlot["status"] {
+  return (runtime.activeRunCount ?? 0) > 0 ? "running" : "ready";
+}

package/src/lib/apps/view-kits/kits/coach.ts

@@ -9,6 +9,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface CoachProjection extends KitProjection {
@@ -82,7 +83,7 @@ export const coachKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
         runNowBlueprintId: projection.runsBlueprintId,
         runNowVariables: projection.runsBlueprintVars,

package/src/lib/apps/view-kits/kits/inbox.ts

@@ -12,6 +12,7 @@ import type {
   TriggerSource,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface InboxProjection extends KitProjection {
@@ -113,7 +114,7 @@ export const inboxKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         runNowBlueprintId: isRowInsert ? undefined : projection.draftBlueprintId,
         runNowVariables: projection.draftBlueprintVars,
         triggerSourceChip: projection.triggerSource,

package/src/lib/apps/view-kits/kits/ledger.ts

@@ -13,6 +13,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 type KpiSpec = NonNullable<ViewConfig["bindings"]["kpis"]>[number];
@@ -134,7 +135,7 @@ export const ledgerKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         runNowBlueprintId: projection.runsBlueprintId,
         runNowVariables: projection.runsBlueprintVars,
         periodChip: { current: projection.period },

package/src/lib/apps/view-kits/kits/placeholder.ts

@@ -8,6 +8,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 
 /**
  * Phase 1.1 placeholder kit. Lands the seam: every app dispatches through
@@ -41,7 +42,7 @@ export const placeholderKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? "Composed app",
-        status: "running",
+        status: headerStatus(runtime),
       },
       footer: {
         appId: app.id,

package/src/lib/apps/view-kits/kits/research.ts

@@ -11,6 +11,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 import type { BlueprintVariable } from "@/lib/workflows/blueprints/types";
 
 interface ResearchProjection extends KitProjection {
@@ -106,7 +107,7 @@ export const researchKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
         runNowBlueprintId: projection.synthesisBlueprintId,
         runNowVariables: projection.synthesisBlueprintVars,

package/src/lib/apps/view-kits/kits/tracker.ts

@@ -11,6 +11,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 
 type KpiSpec = NonNullable<ViewConfig["bindings"]["kpis"]>[number];
 
@@ -103,7 +104,7 @@ export const trackerKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? undefined,
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
         runNowBlueprintId: projection.runsBlueprintId,
       },

package/src/lib/apps/view-kits/kits/workflow-hub.ts

@@ -11,6 +11,7 @@ import type {
   RuntimeState,
   ViewModel,
 } from "../types";
+import { headerStatus } from "../header-status";
 
 type KpiSpec = NonNullable<ViewConfig["bindings"]["kpis"]>[number];
 
@@ -120,7 +121,7 @@ export const workflowHubKit: KitDefinition = {
       header: {
         title: app.name,
         description: app.description ?? "Composed app",
-        status: "running",
+        status: headerStatus(runtime),
         cadenceChip: runtime.cadence ?? undefined,
       },
       kpis: runtime.evaluatedKpis ?? [],

package/src/lib/apps/view-kits/types.ts

@@ -65,6 +65,12 @@ export interface TimelineRun {
 export interface RuntimeState {
   app: AppDetail;
   recentTaskCount?: number;
+  /**
+   * BUG-2: number of tasks currently in flight (status = "running") for this
+   * app. Drives the header status chip — Ready (idle) vs Running — so an idle
+   * app never pulses a fake "Running" literal.
+   */
+  activeRunCount?: number;
   scheduleCadence?: string | null;
   /** Phase 2: hero table content for Tracker kit (columns + last-N rows). */
   heroTable?: HeroTableData | null;
@@ -176,7 +182,7 @@ export type TriggerSource =
 export interface HeaderSlot {
   title: string;
   description?: string;
-  status?: "running" | "queued" | "completed" | "failed" | "planned";
+  status?: "ready" | "running" | "queued" | "completed" | "failed" | "planned";
   /** Right-aligned actions; rendered as ReactNode so kits can compose. */
   actions?: ReactNode;
   /** Phase 2: render a ScheduleCadenceChip when present. */

package/src/lib/chat/files/search.ts

@@ -41,6 +41,11 @@ export function searchFiles(
         encoding: "utf-8",
         maxBuffer: 10 * 1024 * 1024,
         timeout: 3000,
+        // Route git's stderr to a pipe (discarded via the catch) instead of
+        // inheriting the console, so a non-git cwd can't leak a raw
+        // `fatal: not a git repository` line to a customer's console. Mirrors
+        // src/lib/environment/workspace-context.ts / src/lib/instance/git-ops.ts.
+        stdio: ["ignore", "pipe", "pipe"],
       }
     );
   } catch {

package/src/lib/chat/tools/table-tools.ts

@@ -26,6 +26,7 @@ import {
   createImportRecord,
 } from "@/lib/tables/import";
 import { createEnrichmentWorkflow } from "@/lib/tables/enrichment";
+import { getSelfBaseUrl } from "@/lib/http/self-base-url";
 import type { ColumnDef } from "@/lib/tables/types";
 
 export function tableTools(ctx: ToolContext) {
@@ -599,7 +600,7 @@ Guidelines for schema inference:
         try {
           const table = await getTable(args.tableId);
           if (!table) return err("Table not found");
-          const baseUrl = process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+          const baseUrl = getSelfBaseUrl();
           return ok({
             url: `${baseUrl}/api/tables/${args.tableId}/export?format=${args.format}`,
             table: table.name,
@@ -1067,5 +1068,7 @@ Guidelines for schema inference:
 }
 
 function getBaseUrl(): string {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+  // Loopback self-call origin — derived from the real bind port, not a bare
+  // :3000 literal (issue #29). See @/lib/http/self-base-url.
+  return getSelfBaseUrl();
 }

package/src/lib/constants/status-families.ts

@@ -41,12 +41,24 @@ export interface StatusDefinition {
   live?: boolean;
 }
 
+// Neutral, non-pulsing surface token (used by planned/ready idle states).
+const MUTED = "muted-foreground";
+
 // ── Lifecycle statuses ───────────────────────────────────────────
 export const lifecycleStatuses: Record<string, StatusDefinition> = {
   planned: {
     label: "Planned",
     icon: Circle,
-    colorToken: "muted-foreground",
+    colorToken: MUTED,
+    badgeVariant: "outline",
+  },
+  // BUG-2: installed & healthy with nothing in flight. Calm, NON-pulsing —
+  // an idle app must not show the green "Running" ping. Neutral (muted) reads
+  // as "steady/ready", not a success/completion state.
+  ready: {
+    label: "Ready",
+    icon: CheckCircle2,
+    colorToken: MUTED,
     badgeVariant: "outline",
   },
   queued: {

package/src/lib/environment/git-manager.ts

@@ -19,6 +19,11 @@ function git(args: string[], cwd: string): GitResult {
       cwd,
       encoding: "utf-8",
       timeout: 10000,
+      // Route git's stderr to a pipe (discarded here) instead of inheriting
+      // the console, so a non-git cwd can't leak a raw `fatal: not a git
+      // repository` line to a customer's first-run log. Mirrors
+      // src/lib/environment/workspace-context.ts / src/lib/instance/git-ops.ts.
+      stdio: ["ignore", "pipe", "pipe"],
     }).trim();
     return { success: true, output };
   } catch (e) {

package/src/lib/http/self-base-url.ts

@@ -0,0 +1,42 @@
+/**
+ * Base URL for Relay's internal loopback self-calls (server → its OWN API).
+ *
+ * Several server-side paths call Relay's own HTTP API — the table-trigger
+ * dispatcher fires `POST /api/tasks` / `/api/workflows/:id/execute`, and the
+ * compose chat tools hit `/api/tables/:id/triggers`, `/export`, `/templates`,
+ * etc. These are loopback self-fetches, so the origin must be *this* server's
+ * own address, not a hardcoded one.
+ *
+ * The bug this fixes: the old fallback was a bare `http://localhost:3000`, which
+ * silently broke every instance NOT on port 3000 (`--port`, `--hostname
+ * 0.0.0.0`, containers, staging on :3199). The CLI sets neither `NEXTAUTH_URL`
+ * nor `NEXT_PUBLIC_APP_URL`, so that fallback was always used → `TypeError:
+ * fetch failed`, caught + swallowed to a server-log line, zero user-facing
+ * signal (issue #29). See memory `self-http-calls-hardcode-3000`.
+ *
+ * Precedence:
+ *   1. `RELAY_SELF_BASE_URL` — explicit override the CLI threads from the known
+ *      bind port (loopback host + real port).
+ *   2. `NEXTAUTH_URL` / `NEXT_PUBLIC_APP_URL` — reverse-proxy / custom-origin
+ *      escape hatch (unchanged behavior for those deployments).
+ *   3. `http://127.0.0.1:${PORT}` — loopback + the real port. The server always
+ *      listens on loopback even when bound to `0.0.0.0` (INADDR_ANY includes the
+ *      loopback interface), so a self-call must target 127.0.0.1, never the LAN
+ *      IP or `0.0.0.0`. `PORT` is already in the child env (`bin/cli.ts`).
+ *   4. `http://127.0.0.1:3000` — last-resort default when even `PORT` is absent.
+ *
+ * ZERO-IMPORT LEAF: this module reads only `process.env` and does string work.
+ * It is imported by `table-tools.ts`, which is reachable from the runtime
+ * catalog — a non-leaf import here would risk the module-load cycle the
+ * smoke-budget rule guards. Keep it import-free. See memory
+ * `shared-constant-zero-import-leaf`.
+ */
+export function getSelfBaseUrl(): string {
+  const explicit =
+    process.env.RELAY_SELF_BASE_URL ||
+    process.env.NEXTAUTH_URL ||
+    process.env.NEXT_PUBLIC_APP_URL;
+  if (explicit) return explicit;
+  const port = process.env.PORT || "3000";
+  return `http://127.0.0.1:${port}`;
+}

package/src/lib/packs/install.ts

@@ -361,6 +361,25 @@ export async function installPack(
       reloadBlueprints();
     }
 
+    // Defense-in-depth for the app-detail Data Cache. `loadRuntimeState`
+    // (src/lib/apps/view-kits/data.ts) wraps its projection in
+    // unstable_cache({ revalidate:30, tags:['app-runtime:<id>'] }). Reloading
+    // the registry above fixes getBlueprint(), but a Data-Cache snapshot taken
+    // in the 30s window before enrichment populated could still serve husk
+    // cards (raw ids, no Run button). Invalidating the tag here guarantees the
+    // freshly-installed app's page reads a live projection, not a stale one.
+    // (Did not reproduce on a from-scratch install — the registry singleton is
+    // populated before first render — but this closes the latent race.)
+    try {
+      const { revalidateTag } = await import("next/cache");
+      // Next 16 requires a profile/expiry arg. expire:0 = purge the tagged
+      // entry immediately so the next render recomputes the projection.
+      revalidateTag(`app-runtime:${pack.meta.id}`, { expire: 0 });
+    } catch {
+      // revalidateTag is a no-op outside a Next request/render scope (e.g. the
+      // CLI install path). Never let cache housekeeping fail an install.
+    }
+
     // 6. Report — zero silent steps.
     return {
       packId: pack.meta.id,

package/src/lib/plugins/examples/echo-server/plugin.yaml

@@ -1,6 +1,6 @@
 id: echo-server
 version: 0.1.0
-apiVersion: "0.25"
+apiVersion: "0.26"
 kind: chat-tools
 name: Echo Server
 description: |

package/src/lib/plugins/examples/finance-pack/plugin.yaml

@@ -1,6 +1,6 @@
 id: finance-pack
 version: 0.1.0
-apiVersion: "0.25"
+apiVersion: "0.26"
 kind: primitives-bundle
 name: Finance Pack
 description: |

package/src/lib/plugins/examples/reading-radar/plugin.yaml

@@ -1,6 +1,6 @@
 id: reading-radar
 version: 0.1.0
-apiVersion: "0.25"
+apiVersion: "0.26"
 kind: primitives-bundle
 name: Reading Radar
 description: |

package/src/lib/plugins/registry.ts

@@ -53,7 +53,7 @@ import type { ScheduleSpec } from "@/lib/validators/schedule-spec";
 // unfixed from 0.15.0 through 0.16.0 — treat the window test's failure as
 // a release blocker, not noise). The 0.13→0.14 three-MINOR bridge is over;
 // this is the standard 2-MINOR window now.
-const SUPPORTED_API_VERSIONS = new Set([CURRENT_PLUGIN_API_VERSION, "0.24"]);
+const SUPPORTED_API_VERSIONS = new Set([CURRENT_PLUGIN_API_VERSION, "0.25"]);
 
 /** Test-helper export so the window-enforcement test can read state. */
 export function isSupportedApiVersion(apiVersion: string): boolean {

package/src/lib/plugins/sdk/types.ts

@@ -6,7 +6,7 @@ import { z } from "zod";
 // (a hardcoded copy there once drifted to "0.14" — scaffolded plugins would
 // have been disabled on load the moment the window tightened). Bump on every
 // MINOR release; api-version-window.test.ts fails if this goes stale.
-export const CURRENT_PLUGIN_API_VERSION = "0.25";
+export const CURRENT_PLUGIN_API_VERSION = "0.26";
 
 // Shared capability tuple — single source of truth used by Zod schema and
 // capability-check.ts hash derivation. Exported so consumers don't need a

package/src/lib/tables/trigger-evaluator.ts

@@ -6,6 +6,7 @@
 import { db } from "@/lib/db";
 import { userTableTriggers } from "@/lib/db/schema";
 import { eq, and } from "drizzle-orm";
+import { getSelfBaseUrl } from "@/lib/http/self-base-url";
 import type { FilterSpec } from "./types";
 
 type TriggerEvent = "row_added" | "row_updated" | "row_deleted";
@@ -147,13 +148,15 @@ async function fireAction(
       ? `${config.description}\n\nTrigger data: ${JSON.stringify(rowData, null, 2)}`
       : `Triggered by table row change.\n\nData: ${JSON.stringify(rowData, null, 2)}`;
 
-    await fetch(`${getBaseUrl()}/api/tasks`, {
+    await fetch(`${getSelfBaseUrl()}/api/tasks`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         title: config.title ?? "Triggered Task",
         description,
-        projectId: config.projectId ?? null,
+        // createTaskSchema wants `string | undefined`, not null — sending null
+        // 400s the self-call and the task is never created. Omit when absent.
+        ...(config.projectId ? { projectId: config.projectId } : {}),
       }),
     });
     return;
@@ -187,7 +190,7 @@ async function fireAction(
   }
 
   if (actionType === "run_workflow" && config.workflowId) {
-    await fetch(`${getBaseUrl()}/api/workflows/${config.workflowId}/execute`, {
+    await fetch(`${getSelfBaseUrl()}/api/workflows/${config.workflowId}/execute`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -212,6 +215,3 @@ function deriveAppIdFromBlueprintId(blueprintId: string): string | null {
   return blueprintId.slice(0, idx);
 }
 
-function getBaseUrl(): string {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
-}