orionfold-relay 0.28.0 → 0.29.0

package/dist/cli.js

@@ -1186,7 +1186,7 @@ var CURRENT_PLUGIN_API_VERSION, CAPABILITY_VALUES, ORIGIN_VALUES, PrimitivesBund
 var init_types = __esm({
   "src/lib/plugins/sdk/types.ts"() {
     "use strict";
-    CURRENT_PLUGIN_API_VERSION = "0.28";
+    CURRENT_PLUGIN_API_VERSION = "0.29";
     CAPABILITY_VALUES = ["fs", "net", "child_process", "env"];
     ORIGIN_VALUES = ["ainative-internal", "third-party"];
     PrimitivesBundleManifestSchema = z.object({
@@ -3262,7 +3262,7 @@ function buildPrimitivesSummary(manifest) {
   const tableCount = manifest.tables.length;
   const scheduleCount = manifest.schedules.length;
   if (profileCount > 0) {
-    parts.push(pluralize(profileCount, "Profile", "profiles"));
+    parts.push(pluralize(profileCount, "Agent", "agents"));
   }
   if (blueprintCount > 0) {
     parts.push(pluralize(blueprintCount, "Blueprint", "blueprints"));
@@ -13010,7 +13010,7 @@ var init_registry6 = __esm({
     init_registry5();
     init_installer();
     init_schedule_spec();
-    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.27"]);
+    SUPPORTED_API_VERSIONS = /* @__PURE__ */ new Set([CURRENT_PLUGIN_API_VERSION, "0.28"]);
     pluginCache = null;
     lastLoadedPluginIds = /* @__PURE__ */ new Set();
     PluginTableSchema = z16.object({
@@ -25941,8 +25941,8 @@ import { execFileSync as execFileSync3 } from "child_process";
 import yaml12 from "js-yaml";
 import semver from "semver";
 function relayCoreVersion() {
-  if (semver.valid("0.28.0")) {
-    return "0.28.0";
+  if (semver.valid("0.29.0")) {
+    return "0.29.0";
   }
   try {
     const root = getAppRoot(import.meta.dirname, 3);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orionfold-relay",
-  "version": "0.28.0",
+  "version": "0.29.0",
   "description": "Orionfold Relay — a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.",
   "keywords": [
     "ai",

package/src/app/api/instance/identity/route.ts

@@ -0,0 +1,80 @@
+import { NextResponse } from "next/server";
+import { valid as semverValid } from "semver";
+import { relayCoreVersion } from "@/lib/packs/install";
+import { getLicensedIdentity } from "@/lib/licensing/store";
+import { getRuntimeSetupStates, pickActiveRuntime } from "@/lib/settings/runtime-setup";
+import { resolvePreferredModel } from "@/lib/agents/runtime/model-preference";
+
+/**
+ * GET /api/instance/identity
+ *
+ * The consolidated instance-identity read for the top-chrome bar cluster and
+ * the rail RUNTIME cell. One poll, one loading state, three fields:
+ *
+ *   - version:    the running relay-core version ("0.28.0"), or null.
+ *   - activeModel: the concrete model the active runtime would run ("claude-opus-4-8"),
+ *                  or null when nothing resolves.
+ *   - licenseTag: a discriminated union — { kind:"licensed", label } or { kind:"community" }.
+ *
+ * Two shadow-path rules (Engineering Principle #3 — data flows have shadow paths):
+ *
+ *   1. `version` is null, NEVER "0.0.0". `relayCoreVersion()` falls back to
+ *      "0.0.0" when the build-time `__RELAY_CORE_VERSION__` global is missing or
+ *      malformed (the Next 16 `defineServer` raw-string gotcha). We surface that
+ *      fallback as `null` so the bar renders NOTHING rather than a wrong version.
+ *      Absent > wrong.
+ *   2. `licenseTag` is a discriminated union, never a nullable string, so a
+ *      missing name can never render as a dangling "Licensed to ". The store's
+ *      `getLicensedIdentity()` already fails OPEN to community (null); the union
+ *      makes that community fallback explicit at the type level.
+ *
+ * This is a live read of mutable server state (license files, runtime auth,
+ * model preference) — never cached.
+ */
+export const dynamic = "force-dynamic";
+
+export type LicenseTag =
+  | { kind: "licensed"; label: string }
+  | { kind: "community" };
+
+export interface InstanceIdentityResponse {
+  version: string | null;
+  activeModel: string | null;
+  licenseTag: LicenseTag;
+}
+
+export async function GET() {
+  try {
+    // Version: treat the "0.0.0" build-fallback as absent (rule 1).
+    const rawVersion = relayCoreVersion();
+    const version =
+      semverValid(rawVersion) && rawVersion !== "0.0.0" ? rawVersion : null;
+
+    // License tag: fails open to community (rule 2).
+    const label = getLicensedIdentity();
+    const licenseTag: LicenseTag = label
+      ? { kind: "licensed", label }
+      : { kind: "community" };
+
+    // Active model: the concrete model the active runtime would run.
+    let activeModel: string | null = null;
+    try {
+      const states = await getRuntimeSetupStates();
+      const { runtimeId } = pickActiveRuntime(states);
+      activeModel = (await resolvePreferredModel(runtimeId)).modelId;
+    } catch {
+      // No runtime configured / preference read failed — leave null; the rail
+      // falls back to the runtimeLabel so the cell is never blank.
+      activeModel = null;
+    }
+
+    const body: InstanceIdentityResponse = { version, activeModel, licenseTag };
+    return NextResponse.json(body);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    // Zero silent failures — surface the fault to server logs, and let the
+    // client hook fall into its `status:"error"` branch (cluster renders nothing).
+    console.error("[instance/identity] read failed:", message);
+    return NextResponse.json({ error: message }, { status: 500 });
+  }
+}

package/src/app/api/settings/glance/route.ts

@@ -0,0 +1,166 @@
+import { NextResponse } from "next/server";
+import { count } from "drizzle-orm";
+import { getLicensedIdentity } from "@/lib/licensing/store";
+import {
+  getRuntimeSetupStates,
+  pickActiveRuntime,
+} from "@/lib/settings/runtime-setup";
+import { resolvePreferredModel } from "@/lib/agents/runtime/model-preference";
+import { getBudgetGuardrailSnapshot } from "@/lib/settings/budget-guardrails";
+import { getRoutingPreference } from "@/lib/settings/routing";
+import { getActivePresets } from "@/lib/settings/permission-presets";
+import { getAllowedPermissions } from "@/lib/settings/permissions";
+import { getSetting } from "@/lib/settings/helpers";
+import { SETTINGS_KEYS, type RoutingPreference } from "@/lib/constants/settings";
+import { db } from "@/lib/db";
+import { channelConfigs } from "@/lib/db/schema";
+import type { LicenseTag } from "@/app/api/instance/identity/route";
+
+/**
+ * GET /api/settings/glance
+ *
+ * The consolidated settings read for the FEAT-14 settings-at-a-glance rail.
+ * One poll, one loading state, four grouped clusters (Runtime · Budget ·
+ * Permissions · Integrations) summarized as compact read-only fields. Aggregates
+ * the ~8 settings lib sources SERVER-SIDE (direct lib calls in one Promise.all,
+ * never an HTTP fan-out), mirroring /api/instance/identity's discipline.
+ *
+ * Shadow-path rules (Engineering Principle #3 — data flows have shadow paths):
+ * EVERY field is independently nullable, and each source is resolved in its own
+ * `.catch(() => null)` so one failing read (e.g. no runtime configured) NULLS
+ * only its own field — the rail still renders the chips that resolved. A total
+ * route failure returns 500 and the client hook collapses the rail to nothing
+ * (no crash, no half-rendered skeleton). Absent > wrong, everywhere.
+ *
+ * Live read of mutable server state (license files, runtime auth, budget policy,
+ * permission allow-list, channel rows) — never cached.
+ */
+export const dynamic = "force-dynamic";
+
+export type { LicenseTag };
+
+export interface SettingsGlanceResponse {
+  // Runtime cluster
+  activeRuntimeLabel: string | null;
+  activeModel: string | null;
+  routingPreference: RoutingPreference | null;
+  configuredRuntimeCount: number | null;
+  sdkTimeoutSeconds: number | null;
+  maxTurns: number | null;
+  // Budget cluster
+  licenseTag: LicenseTag;
+  budgetMonthlyCapUsd: number | null;
+  // Permissions cluster
+  activePreset: string | null; // most-permissive active preset id, or null
+  allowedPermissionCount: number | null;
+  // Integrations cluster
+  webSearchEnabled: boolean | null;
+  channelCount: number | null;
+  autoPromoteSkills: boolean | null;
+}
+
+// The active preset id, choosing the MOST permissive when several are fully
+// satisfied by the current allow-list (full-auto ⊃ git-safe ⊃ read-only), so
+// the glance reports the effective posture rather than a subset preset.
+function pickPreset(activePresets: string[]): string | null {
+  for (const id of ["full-auto", "git-safe", "read-only"]) {
+    if (activePresets.includes(id)) return id;
+  }
+  return activePresets[0] ?? null;
+}
+
+async function resolveRuntime(): Promise<{
+  label: string | null;
+  model: string | null;
+  configuredCount: number | null;
+}> {
+  const states = await getRuntimeSetupStates();
+  const { runtimeId, runtimeLabel } = pickActiveRuntime(states);
+  // Count runtimes the user has actually set up (any state marked configured).
+  const configuredCount = Object.values(states).filter(
+    (s) => (s as { configured?: boolean }).configured,
+  ).length;
+  let model: string | null = null;
+  try {
+    model = (await resolvePreferredModel(runtimeId)).modelId;
+  } catch {
+    model = null;
+  }
+  return { label: runtimeLabel, model, configuredCount };
+}
+
+// Parse a numeric setting stored as a string; null/NaN → null (shadow path).
+function numSetting(raw: string | null): number | null {
+  if (raw == null) return null;
+  const n = Number(raw);
+  return Number.isFinite(n) ? n : null;
+}
+
+async function countChannels(): Promise<number> {
+  const [row] = await db.select({ value: count() }).from(channelConfigs);
+  return row?.value ?? 0;
+}
+
+export async function GET() {
+  try {
+    // Each source resolves independently; a single failing read nulls only its
+    // own field(s) — the rail renders whatever resolved.
+    const [
+      runtime,
+      label,
+      budget,
+      routing,
+      presets,
+      allowed,
+      exa,
+      channels,
+      sdkTimeout,
+      maxTurns,
+      autoPromote,
+    ] = await Promise.all([
+      resolveRuntime().catch(() => ({
+        label: null,
+        model: null,
+        configuredCount: null,
+      })),
+      Promise.resolve(getLicensedIdentity()).catch(() => null),
+      getBudgetGuardrailSnapshot().catch(() => null),
+      getRoutingPreference().catch(() => null),
+      getActivePresets().catch(() => null),
+      getAllowedPermissions().catch(() => null),
+      getSetting(SETTINGS_KEYS.EXA_SEARCH_MCP_ENABLED).catch(() => null),
+      countChannels().catch(() => null),
+      getSetting(SETTINGS_KEYS.SDK_TIMEOUT_SECONDS).catch(() => null),
+      getSetting(SETTINGS_KEYS.MAX_TURNS).catch(() => null),
+      getSetting(SETTINGS_KEYS.AUTO_PROMOTE_SKILLS).catch(() => null),
+    ]);
+
+    const licenseTag: LicenseTag = label
+      ? { kind: "licensed", label }
+      : { kind: "community" };
+
+    const body: SettingsGlanceResponse = {
+      activeRuntimeLabel: runtime.label,
+      activeModel: runtime.model,
+      routingPreference: routing,
+      configuredRuntimeCount: runtime.configuredCount,
+      sdkTimeoutSeconds: numSetting(sdkTimeout),
+      maxTurns: numSetting(maxTurns),
+      licenseTag,
+      budgetMonthlyCapUsd: budget?.policy.overall.monthlySpendCapUsd ?? null,
+      activePreset: presets ? pickPreset(presets) : null,
+      allowedPermissionCount: allowed?.length ?? null,
+      // exa is stored as the string "true"/"false"; null (unread) → null, not false.
+      webSearchEnabled: exa == null ? null : exa === "true",
+      channelCount: channels,
+      autoPromoteSkills: autoPromote == null ? null : autoPromote === "true",
+    };
+    return NextResponse.json(body);
+  } catch (err) {
+    const message = err instanceof Error ? err.message : String(err);
+    // Zero silent failures — surface to server logs, let the hook fall into
+    // status:"error" (the whole rail collapses to nothing).
+    console.error("[settings/glance] read failed:", message);
+    return NextResponse.json({ error: message }, { status: 500 });
+  }
+}

package/src/app/api/telemetry/route.ts

@@ -17,12 +17,7 @@ import {
   getCompletionsByDay,
   getFailuresByDay,
 } from "@/lib/queries/chart-data";
-import {
-  DEFAULT_AGENT_RUNTIME,
-  SUPPORTED_AGENT_RUNTIMES,
-  type AgentRuntimeId,
-} from "@/lib/agents/runtime/catalog";
-import type { RuntimeSetupState } from "@/lib/settings/runtime-setup";
+import { pickActiveRuntime } from "@/lib/settings/runtime-setup";
 import type { TelemetrySnapshot } from "@/components/shell/telemetry-types";
 
 // Telemetry is a live read of mutable server state; never let a route or the
@@ -97,24 +92,6 @@ function getHostMetrics(): { cpuLoadPct: number | null; memUsedPct: number | nul
   return { cpuLoadPct, memUsedPct };
 }
 
-// Pick the runtime to surface in the RUNTIME cell: the default (claude-code) if
-// it is configured, otherwise the first configured runtime in catalog order, and
-// failing that the default's label (so the cell shows "Claude Code · anthropic"
-// with the understanding it is not yet set up, rather than an empty cell).
-function pickActiveRuntime(
-  states: Record<AgentRuntimeId, RuntimeSetupState>,
-): { runtimeLabel: string | null; providerId: string | null } {
-  const ordered: AgentRuntimeId[] = [
-    DEFAULT_AGENT_RUNTIME,
-    ...SUPPORTED_AGENT_RUNTIMES.filter((id) => id !== DEFAULT_AGENT_RUNTIME),
-  ];
-  const configured = ordered.find((id) => states[id]?.configured);
-  const chosen = configured ?? DEFAULT_AGENT_RUNTIME;
-  const state = states[chosen];
-  if (!state) return { runtimeLabel: null, providerId: null };
-  return { runtimeLabel: state.label, providerId: state.providerId };
-}
-
 export async function GET() {
   try {
     const todayMidnight = new Date();

package/src/app/globals.css

@@ -103,6 +103,25 @@
   --surface-3: oklch(0.96 0.006 250);
   --surface-foreground: oklch(0.14 0.02 250);
 
+  /* Instrument palette (WS3, 2026-07-05) — the relay-website technique ported
+     into the app: a two-tier teal blueprint grid, translucent teal elevation
+     washes, and an accent glow, ALL derived from --primary so they track the
+     theme automatically (dark teal vs light teal, no .dark override needed).
+     These are ADDITIVE — surfaces stay neutral; the teal lives only in the
+     grid/glow/wash LAYERS painted over neutral surfaces (per the website). Light
+     washes run slightly hotter than dark since teal-on-white is subtle. */
+  --grid-line: color-mix(in oklch, var(--primary) 10%, transparent);   /* fine 24px hairline */
+  --grid-major: color-mix(in oklch, var(--primary) 18%, transparent);  /* major 120px line */
+  --glow-accent: color-mix(in oklch, var(--primary) 22%, transparent); /* ambient accent (light) */
+  --wash-1: color-mix(in oklch, var(--primary) 5%, transparent);       /* faintest teal wash */
+  --wash-2: color-mix(in oklch, var(--primary) 8%, transparent);
+  --wash-3: color-mix(in oklch, var(--primary) 12%, transparent);      /* strongest teal wash */
+  /* The translucent instrument rail: a tint of --surface-2 the grid reads
+     through, + a faint teal seam-glow on the rail's top edge. */
+  /* Rail is now 100% OPAQUE per operator — solid --surface-2, no grid through. */
+  --rail-surface: var(--surface-2);
+  --rail-glow: color-mix(in oklch, var(--primary) 12%, transparent);
+
   /* Accent */
   --accent: oklch(0.955 0.01 250);
   --accent-foreground: oklch(0.25 0.03 250);
@@ -173,6 +192,34 @@
   --space-10: 40px;
   --space-12: 48px;
   --space-16: 64px;
+
+  /* Top-chrome geometry — the two-tier app bar's real stacked height. The
+     telemetry rail's sticky `top` MUST equal this (rail slides UNDER the header
+     otherwise). Theme-agnostic, so declared once here, not in .dark. */
+  --chrome-tier1: 3.5rem;  /* h-14 — tier-1 nav bar */
+  --chrome-tier2: 2.75rem; /* h-11 — tier-2 sub-nav */
+  --chrome-header: calc(var(--chrome-tier1) + var(--chrome-tier2)); /* 100px */
+  /* The telemetry rail's height (was a magic h-[88px]). The settings-glance
+     collapsed row parks sticky BELOW the rail, so its `top` is header + rail;
+     tokenizing keeps that offset honest if the rail height ever changes. We do
+     NOT fold these into --chrome-header — that token is the telemetry rail's own
+     `top` and folding rail height in would shove the rail under the header. */
+  /* Telemetry rail height. The rail is now auto-height (content + symmetric
+     py-2.5), so this MUST equal that rendered height or the glance rail (which
+     parks at header + rail) leaves a gap / overlaps. Expressed in rem so it
+     tracks the root font like --chrome-header: the rail's 3-line cell +
+     2×0.625rem padding renders ~4.95rem (≈69px at the operator's 14px root). */
+  --chrome-rail: 4.95rem;
+  --chrome-glance-top: calc(var(--chrome-header) + var(--chrome-rail)); /* glance sticky top */
+
+  /* Named z-scale — formalizes values previously scattered as magic numbers
+     (z-20/z-30/100/9999). Header always wins over rail; grid sits below all
+     chrome; overlays and toasts stay on top. */
+  --z-canvas-grid: 0;
+  --z-rail: 30;
+  --z-header: 40;
+  --z-overlay: 100;
+  --z-toast: 9999;
 }
 
 /* =============================================================
@@ -202,12 +249,33 @@
   --muted: oklch(0.20 0.02 250);             /* Derivation: matches secondary */
   --muted-foreground: oklch(0.66 0.02 250);  /* L0.66 on L0.14 bg ≈ 5.3:1 — clears WCAG AA 4.5:1 even un-diluted (was L0.58 ≈ 3.6:1, failed) */
 
-  /* Surfaces — 3-tier dark hierarchy */
-  --surface-1: oklch(0.18 0.02 250);         /* Derivation: base + 0.04 */
-  --surface-2: oklch(0.16 0.02 250);         /* Derivation: base + 0.02 */
-  --surface-3: oklch(0.14 0.02 250);         /* Derivation: equals base */
+  /* Surfaces — 3-tier dark hierarchy. Steps widened from 0.02L to ~0.035L:
+     near the dark end of oklch the eye reads a 0.02 lightness step as almost
+     flat (unlike light mode, where 0.025 near white reads clearly), so the
+     chrome tiers looked uniform. s-1 stays 0.18 (card/sidebar baseline — no
+     shift), s-2/s-3 recede further so the descending elevation is legible. */
+  --surface-1: oklch(0.185 0.02 250);        /* frontmost — card/sidebar baseline */
+  --surface-2: oklch(0.15 0.02 250);         /* steps back */
+  --surface-3: oklch(0.115 0.018 250);       /* deepest — the instrument rail */
   --surface-foreground: oklch(0.92 0.01 250);
 
+  /* Instrument palette (WS3) — dark. Derived from --primary (dark teal
+     oklch 0.78/.13/192). Grid alpha halved from 12/22% → 6/11% per operator
+     ("50% darker"): the teal recedes toward the charcoal ground so the grid
+     reads subtler/dimmer. Washes track --primary; surfaces stay neutral. */
+  --grid-line: color-mix(in oklch, var(--primary) 6%, transparent);    /* fine 24px hairline */
+  --grid-major: color-mix(in oklch, var(--primary) 11%, transparent);  /* major 120px line */
+  --glow-accent: color-mix(in oklch, var(--primary) 26%, transparent); /* ambient accent (dark) */
+  --wash-1: color-mix(in oklch, var(--primary) 4%, transparent);
+  --wash-2: color-mix(in oklch, var(--primary) 6%, transparent);
+  --wash-3: color-mix(in oklch, var(--primary) 10%, transparent);
+  /* Dark rail: 100% OPAQUE per operator, on --surface-1 (L0.185) — a solid
+     lifted chrome band clearly above the canvas --background (0.14). --surface-1
+     (not --surface-2, which is only 0.01L above the bg) keeps the band distinct;
+     opaque means no grid shows through. */
+  --rail-surface: var(--surface-1);
+  --rail-glow: color-mix(in oklch, var(--primary) 14%, transparent);
+
   /* Accent */
   --accent: oklch(0.20 0.02 250);
   --accent-foreground: oklch(0.92 0.01 250);
@@ -537,7 +605,7 @@
 .of-boot {
   position: fixed;
   inset: 0;
-  z-index: 100;
+  z-index: var(--z-overlay);
   display: flex;
   flex-direction: column;
   align-items: center;
@@ -562,6 +630,104 @@
   overflow: hidden;
 }
 
+/* =============================================================
+   BLUEPRINT GRID (FEAT-15 → instrument palette WS3, 2026-07-05)
+   Two grids, both FULL-BLEED (no radial mask):
+
+   • CANVAS (#main-content): the two-tier TEAL grid (fine 24px
+     --grid-line + major 120px --grid-major), covering the canvas
+     EVENLY edge to edge.
+   • RAIL (.rail-instrument): a UNIFORM single-tier 24px grid.
+
+   NO radial edge-mask on either. The mask faded the grid before the
+   centered content edge, leaving a dark ungridded band that read as
+   a ~15px "border" framing the container (operator). A uniform grid
+   has no fade zone, so no perceived frame. `.rail-instrument` also
+   owns position:sticky (avoids the [aria-label] specificity trap
+   that clobbered it). Both derive from --primary → light/dark track
+   automatically. Painted on ::before at --z-canvas-grid (0).
+   ============================================================= */
+#main-content {
+  position: relative;
+}
+#main-content::before {
+  content: "";
+  position: absolute;
+  inset: 0;
+  z-index: var(--z-canvas-grid);
+  pointer-events: none;
+  /* Two tiers: fine 24px cells + major 120px cells. */
+  background-image:
+    repeating-linear-gradient(to right, var(--grid-line) 0 1px, transparent 1px 24px),
+    repeating-linear-gradient(to bottom, var(--grid-line) 0 1px, transparent 1px 24px),
+    repeating-linear-gradient(to right, var(--grid-major) 0 1px, transparent 1px 120px),
+    repeating-linear-gradient(to bottom, var(--grid-major) 0 1px, transparent 1px 120px);
+}
+
+/* Translucent instrument rail (WS2) — a tint of --surface-2 the grid reads
+   through, so the sparkline "graphs" pop while cell values stay legible + a
+   teal seam-glow (inset top) marks the chrome↔canvas seam. `.rail-instrument`
+   OWNS position:sticky here (specificity 0,1,0 on the class) instead of the
+   telemetry rail joining the grid's `[aria-label]` position:relative rule
+   (0,1,1) — that attribute selector out-specifies Tailwind's `.sticky` and
+   silently demoted the rail to relative, so it scrolled away. */
+.rail-instrument {
+  position: sticky;
+  background: var(--rail-surface);
+  box-shadow: inset 0 1px 0 0 var(--rail-glow);
+}
+/* Telemetry-cell vertical dividers: --border (L0.26 dark) is too low-contrast
+   over the lifted rail band, so bump the rail's own cell dividers to
+   --border-strong (L0.32). Scoped to the rail (the [aria-label] attribute
+   selector out-specifies Tailwind's `.border-border`, so no source-order
+   reliance) — no other border-border consumer shifts. */
+[aria-label="Telemetry"] > * {
+  border-right-color: var(--border-strong);
+}
+/* The rail is now 100% OPAQUE (--rail-surface = solid surface), so it carries NO
+   grid: an opaque background does not hide a ::before grid (the pseudo paints
+   ABOVE the background), so the grid ::before was removed rather than relying on
+   opacity. The rail is a clean solid band; the canvas keeps its own grid. */
+
+/* =============================================================
+   SETTINGS-AT-A-GLANCE RAIL (FEAT-14, WS4 · 2026-07-05)
+   A two-level progressive-disclosure rail below the telemetry
+   rail. It reads as ONE coherent chrome surface (the same
+   translucent instrument family as the telemetry rail), NOT a
+   stack of detached cards. Depth is carried by teal WASHES and
+   HAIRLINES, never by lighter/darker solid bands (that inverted
+   the hierarchy and made pills read as inconsistent dark strips):
+     • row    collapsed chip row — translucent chrome + seam-glow
+     • panel  expanded ground — same chrome family as the row
+     • tile   group cluster — faint teal wash + hairline, no hard card
+     • pill   key/value line — borderless, a hairline rule between
+              rows; the value sits on the tile, not on a solid band
+   Collapsed row is sticky under the telemetry rail (top =
+   --chrome-glance-top); the expanded panel pushes content (no jank).
+   ============================================================= */
+.glance-row {
+  /* Translucent chrome over the grid + a teal seam-glow on the TOP
+     edge marking the telemetry-rail↔glance seam. */
+  background: var(--rail-surface);
+  box-shadow: inset 0 1px 0 0 var(--rail-glow);
+}
+.glance-panel {
+  /* Expanded ground — the SAME translucent chrome family as the row,
+     so panel + row read as one surface (not a lighter/darker band). */
+  background: var(--rail-surface);
+}
+/* Compact cell — the SAME grammar as the telemetry RailCell (mono-uppercase
+   label over a value, left-aligned, a right-hairline vertical divider between
+   cells). Used for BOTH the collapsed summary chips and the expanded panel
+   cells, so the glance rail speaks one visual language with the telemetry rail
+   above it. The last cell in a row drops its divider. */
+.glance-cell {
+  border-right: 1px solid var(--grid-line);
+}
+.glance-cell:last-child {
+  border-right: none;
+}
+
 /* =============================================================
    BASE STYLES
    ============================================================= */
@@ -587,7 +753,7 @@ body {
   width: 1px;
   height: 1px;
   overflow: hidden;
-  z-index: 9999;
+  z-index: var(--z-toast);
 }
 .skip-nav:focus {
   position: fixed;

package/src/app/layout.tsx

@@ -65,8 +65,12 @@ const CRITICAL_THEME_CSS = `
     color-scheme: dark;
     --background: oklch(0.14 0.02 250);
     --foreground: oklch(0.92 0.01 250);
-    --surface-1: oklch(0.18 0.02 250);
-    --surface-2: oklch(0.16 0.02 250);
+    /* KEEP IN SYNC with globals.css .dark --surface-* (widened tier steps,
+       2026-07-04). This inline critical-CSS wins via html.dark specificity
+       during the anti-FOUC window; a stale copy here silently overrides the
+       real tokens. */
+    --surface-1: oklch(0.185 0.02 250);
+    --surface-2: oklch(0.15 0.02 250);
     --border: oklch(0.26 0.015 250);
   }
   /* Root rem base. Fixed 14px left the whole rem-based design tiny on high-res

package/src/app/page.tsx

@@ -81,8 +81,8 @@ export default async function HomePage() {
     // the welcome path so we don't pay the read on every dashboard hit.
     const starters = listStarters();
     return (
-      <div className="bg-background min-h-screen p-4 sm:p-6">
-        <div className="surface-page-shell min-h-[calc(100dvh-2rem)] rounded-xl p-5 sm:p-6 lg:p-7 space-y-6">
+      <div className="bg-background min-h-screen">
+        <div className="surface-page-shell min-h-screen p-5 sm:p-6 lg:p-7 space-y-6">
           <WelcomeLanding starters={starters} />
         </div>
       </div>
@@ -176,8 +176,8 @@ export default async function HomePage() {
   );
 
   return (
-    <div className="bg-background min-h-screen p-4 sm:p-6">
-      <div className="surface-page-shell min-h-[calc(100dvh-2rem)] rounded-xl p-5 sm:p-6 lg:p-7">
+    <div className="bg-background min-h-screen">
+      <div className="surface-page-shell min-h-screen p-5 sm:p-6 lg:p-7">
         <Greeting
           runningCount={runningResult.count}
           awaitingCount={awaitingResult.count}

package/src/components/apps/kit-view/kit-view.tsx

@@ -31,6 +31,25 @@ export function KitView({ model }: KitViewProps) {
               {model.secondaryLead}
             </p>
           )}
+          {model.secondarySteps && model.secondarySteps.length > 0 && (
+            <ol className="flex flex-wrap items-center gap-x-2 gap-y-1.5">
+              {model.secondarySteps.map((step, i) => (
+                <li key={step.n} className="flex items-center gap-2">
+                  <span className="flex h-5 w-5 shrink-0 items-center justify-center rounded-full bg-primary/10 text-xs font-medium text-primary">
+                    {step.n}
+                  </span>
+                  <span className="text-sm text-muted-foreground">
+                    {step.text}
+                  </span>
+                  {i < model.secondarySteps!.length - 1 && (
+                    <span aria-hidden className="text-muted-foreground/40">
+                      →
+                    </span>
+                  )}
+                </li>
+              ))}
+            </ol>
+          )}
           <SecondarySlotView slots={model.secondary} />
         </div>
       )}

package/src/components/apps/last-run-card.tsx

@@ -166,16 +166,18 @@ export function RunnableBlueprintCard({
               variables={card.variables}
               label="Run"
             />
-            {/* FEAT-6: on the "Start here" card, name both verbs for a
-                first-time user. Only the primary card carries this hint, so the
-                grid stays scannable (progressive disclosure). */}
-            {card.isPrimary && (
-              <p className="text-xs text-muted-foreground">
-                {card.variables.length > 0
+            {/* CF-FEAT-5: name both verbs on EVERY card, not just the primary,
+                so no card leaves the two buttons unexplained. The "Start here"
+                card carries the fuller sentence (it may also mention the
+                variable prompt); the rest carry a compact one-liner so the grid
+                stays scannable (progressive disclosure). */}
+            <p className="text-xs text-muted-foreground">
+              {card.isPrimary
+                ? card.variables.length > 0
                   ? "Run asks a few questions, then starts a workflow you can watch. Create workflow saves a draft to run later."
-                  : "Run starts a workflow you can watch. Create workflow saves a draft to run later."}
-              </p>
-            )}
+                  : "Run starts a workflow you can watch. Create workflow saves a draft to run later."
+                : "Run starts it now. Create workflow saves a draft."}
+            </p>
           </div>
         )}
       </CardContent>