palmier 0.9.2 → 0.9.4

package/palmier-server/pwa/src/components/HostMenu.tsx

@@ -245,7 +245,7 @@ export default function HostMenu({ daemonVersion, linkedClientToken, request, on
             className="btn btn-primary btn-full"
             onClick={() => { if (!confirmLeaveDraft()) return; navigate("/pair"); if (!isDesktop) close(); }}
           >
-            Pair New Host
+            Add New Host
           </button>
         </div>
       </>)}
@@ -256,11 +256,11 @@ export default function HostMenu({ daemonVersion, linkedClientToken, request, on
           <div className="drawer-section">
             <h3 className="drawer-section-label">Device Capabilities</h3>
             {isLinkedDevice ? (
-              <CapabilityToggles onChange={onEnabledCapabilitiesChange} />
+              <CapabilityToggles onChange={onEnabledCapabilitiesChange} confirmDisable />
             ) : (
               <>
                 <p className="drawer-section-hint">
-                  This device isn't the linked device for this host, so it can't provide capabilities (SMS, contacts, location, etc.).
+                  This device isn't the linked device for the host, so it can't provide capabilities (SMS, contacts, location, etc.).
                 </p>
                 <button
                   className="btn btn-secondary btn-full"
@@ -273,7 +273,7 @@ export default function HostMenu({ daemonVersion, linkedClientToken, request, on
                   }}
                   disabled={linkingBusy}
                 >
-                  {linkingBusy ? "Linking…" : "Link this device"}
+                  {linkingBusy ? "Linking…" : "Link the host to this device"}
                 </button>
               </>
             )}
@@ -300,11 +300,11 @@ export default function HostMenu({ daemonVersion, linkedClientToken, request, on
   const deleteModal = confirmingDeleteId && createPortal(
     <div className="confirm-modal-overlay" onClick={() => setConfirmingDeleteId(null)}>
       <div className="confirm-modal" onClick={(e) => e.stopPropagation()}>
-        <h2 className="confirm-modal-title">Unpair host?</h2>
+        <h2 className="confirm-modal-title">Remove host?</h2>
         <p className="confirm-modal-message">
-          "{pairedHosts.find((h) => h.hostId === confirmingDeleteId)?.name || confirmingDeleteId.slice(0, 8)}" will be unpaired.
+          "{pairedHosts.find((h) => h.hostId === confirmingDeleteId)?.name || confirmingDeleteId.slice(0, 8)}" will be {deletingIsLinked ? "removed and unlinked" : "removed"}.
           {deletingIsLinked && (
-            <> This device is currently linked to the host — unpairing will revoke its access to all device capabilities (SMS, contacts, location, etc.) until another device is linked.</>
+            <> This device is currently linked to the host — unlinking will revoke its access to all device capabilities (SMS, contacts, location, etc.) until another device is linked.</>
           )}
         </p>
         <div className="confirm-modal-actions">
@@ -318,7 +318,7 @@ export default function HostMenu({ daemonVersion, linkedClientToken, request, on
             className="btn btn-danger"
             onClick={() => handleDelete(confirmingDeleteId)}
           >
-            Unpair
+            Remove
           </button>
         </div>
       </div>
@@ -329,9 +329,9 @@ export default function HostMenu({ daemonVersion, linkedClientToken, request, on
   const linkModal = confirmingLink && createPortal(
     <div className="confirm-modal-overlay" onClick={() => setConfirmingLink(false)}>
       <div className="confirm-modal" onClick={(e) => e.stopPropagation()}>
-        <h2 className="confirm-modal-title">Link this device?</h2>
+        <h2 className="confirm-modal-title">Link the host to this device?</h2>
         <p className="confirm-modal-message">
-          Only one device can be linked at a time — switching will disable those capabilities on the currently linked device.
+          Another device is already linked to this host. Only one device can be linked to the host — switching will disable those capabilities on the currently linked device.
         </p>
         <div className="confirm-modal-actions">
           <button

package/palmier-server/pwa/src/components/{PlanDialog.tsx → PermissionsDialog.tsx}

@@ -1,14 +1,14 @@
 import type { RequiredPermission } from "../types";
 
-interface PlanDialogProps {
+interface PermissionsDialogProps {
   permissions?: RequiredPermission[];
 }
 
-export default function PlanDialog({ permissions }: PlanDialogProps) {
+export default function PermissionsDialog({ permissions }: PermissionsDialogProps) {
   return (
-    <div className="plan-dialog">
+    <div className="permissions-dialog">
       <h2>Granted Permissions</h2>
-      <div className="plan-dialog-scroll">
+      <div className="permissions-dialog-scroll">
         {permissions && permissions.length > 0 ? (
           <div className="permissions-section">
             <ul className="permissions-list">
@@ -21,10 +21,10 @@ export default function PlanDialog({ permissions }: PlanDialogProps) {
             </ul>
           </div>
         ) : (
-          <p className="plan-empty">No permissions have been granted for this task.</p>
+          <p className="permissions-empty">No permissions have been granted for this task.</p>
         )}
       </div>
-      <div className="plan-dialog-actions">
+      <div className="permissions-dialog-actions">
         <button className="btn btn-secondary" onClick={() => history.back()}>
           Back
         </button>

package/palmier-server/pwa/src/components/RunDetailView.tsx

@@ -5,6 +5,7 @@ import remarkGfm from "remark-gfm";
 import remarkBreaks from "remark-breaks";
 import { getAgentLabel } from "../agentLabels";
 import { formatTime } from "../formatTime";
+import { useBackClose } from "../hooks/useBackClose";
 import type { ConversationMessage } from "../types";
 
 interface RunDetailViewProps {
@@ -26,6 +27,7 @@ export default function RunDetailView({ connected, hostId, request, subscribeEve
   const isFollowupRunning = runState === "followup";
   const isAgentGenerating = runState === "started" || runState === "followup";
   const [reportDialog, setReportDialog] = useState<{ file: string; content?: string; data_url?: string } | null>(null);
+  useBackClose(reportDialog !== null, () => setReportDialog(null));
   const [aborting, setAborting] = useState(false);
   const [followupText, setFollowupText] = useState("");
   const [sendingFollowup, setSendingFollowup] = useState(false);
@@ -298,7 +300,7 @@ export default function RunDetailView({ connected, hostId, request, subscribeEve
                 ref={followupInputRef}
                 className="chat-input"
                 type="text"
-                placeholder="Follow-up message"
+                placeholder="Follow up"
                 value={followupText}
                 onChange={(e) => setFollowupText(e.target.value)}
                 disabled={sendingFollowup}

package/palmier-server/pwa/src/components/SessionsView.tsx

@@ -278,6 +278,7 @@ export default function SessionsView({ connected, hostId, request, subscribeEven
               revealedId={revealedKey}
               setRevealedId={setRevealedKey}
               onDelete={() => deleteEntry(entry)}
+              confirmMessage="Delete this session? Its run history will be removed from the host."
               onClick={() => !entry.error && handleCardClick(entry.task_id, entry.run_id)}
             >
               <div className="sessions-card">

package/palmier-server/pwa/src/components/SwipeToDeleteRow.tsx

@@ -11,9 +11,11 @@ interface SwipeToDeleteRowProps {
   children: ReactNode;
   /** Label for the action button (default "Delete"). */
   actionLabel?: string;
+  /** Message shown in the native confirm() dialog (default "Delete this item? This can't be undone."). */
+  confirmMessage?: string;
 }
 
-const REVEAL_WIDTH = 88;              // px width of the action button
+const REVEAL_WIDTH = 72;              // px width of the action button
 const OPEN_THRESHOLD = REVEAL_WIDTH / 2;
 const AXIS_LOCK_THRESHOLD = 6;        // px of horizontal travel before we claim the gesture
 
@@ -33,6 +35,7 @@ export default function SwipeToDeleteRow({
   onClick,
   children,
   actionLabel = "Delete",
+  confirmMessage = "Delete this item? This can't be undone.",
 }: SwipeToDeleteRowProps) {
   const revealed = revealedId === id;
   const [dragOffset, setDragOffset] = useState(0);
@@ -137,11 +140,18 @@ export default function SwipeToDeleteRow({
         type="button"
         className="swipe-row-action"
         style={{ width: REVEAL_WIDTH }}
-        onClick={(e) => { e.stopPropagation(); onDelete(); }}
+        onClick={(e) => { e.stopPropagation(); if (window.confirm(confirmMessage)) onDelete(); }}
         tabIndex={revealed ? 0 : -1}
         aria-hidden={!revealed}
+        aria-label={actionLabel}
       >
-        {actionLabel}
+        <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="currentColor" strokeWidth="2" strokeLinecap="round" strokeLinejoin="round" aria-hidden="true">
+          <polyline points="3 6 5 6 21 6" />
+          <path d="M19 6l-1 14a2 2 0 0 1-2 2H8a2 2 0 0 1-2-2L5 6" />
+          <path d="M10 11v6M14 11v6" />
+          <path d="M9 6V4a2 2 0 0 1 2-2h2a2 2 0 0 1 2 2v2" />
+        </svg>
+        <span className="swipe-row-action-label">{actionLabel}</span>
       </button>
       <div
         className={`swipe-row-content ${dragging ? "swipe-row-content-dragging" : ""}`}

package/palmier-server/pwa/src/components/TaskForm.tsx

@@ -2,7 +2,7 @@ import { useEffect, useState, useCallback, useRef } from "react";
 import { Capacitor } from "@capacitor/core";
 import { useHostConnection } from "../contexts/HostConnectionContext";
 import { useHostStore } from "../contexts/HostStoreContext";
-import PlanDialog from "./PlanDialog";
+import PermissionsDialog from "./PermissionsDialog";
 import { useBackClose } from "../hooks/useBackClose";
 import { Device } from "../native/Device";
 import type { AgentInfo, Task } from "../types";
@@ -139,7 +139,9 @@ export default function TaskForm({ initial, agents, hostPlatform, isNotification
   const [requiresConfirmation, setRequiresConfirmation] = useState(
     initial?.requires_confirmation ?? false
   );
-  const [scheduleEnabled, setScheduleEnabled] = useState(initial?.schedule_enabled ?? true);
+  const [scheduleEnabled, setScheduleEnabled] = useState(
+    initial?.schedule_type ? (initial.schedule_enabled ?? true) : true,
+  );
   const [yoloMode, setYoloMode] = useState(initial?.yolo_mode ?? false);
   const [foregroundMode, setForegroundMode] = useState(initial?.foreground_mode ?? false);
   const [command, setCommand] = useState(initial?.command ?? "");
@@ -220,7 +222,7 @@ export default function TaskForm({ initial, agents, hostPlatform, isNotification
     || agent !== (initial?.agent ?? "")
     || scheduleMode !== initialMode
     || requiresConfirmation !== (initial?.requires_confirmation ?? false)
-    || scheduleEnabled !== (initial?.schedule_enabled ?? true)
+    || scheduleEnabled !== (initial?.schedule_type ? (initial.schedule_enabled ?? true) : true)
     || yoloMode !== (initial?.yolo_mode ?? false)
     || foregroundMode !== (initial?.foreground_mode ?? false)
     || (modeIsCommand && command !== (initial?.command ?? ""))
@@ -313,7 +315,7 @@ export default function TaskForm({ initial, agents, hostPlatform, isNotification
         agent,
         schedule_type: scheduleType,
         schedule_values: scheduleValues.length > 0 ? scheduleValues : null,
-        schedule_enabled: scheduleMode !== "ondemand" && scheduleEnabled,
+        schedule_enabled: scheduleMode === "ondemand" ? true : scheduleEnabled,
         requires_confirmation: modeIsScheduled ? requiresConfirmation : false,
         yolo_mode: yoloMode,
         foreground_mode: foregroundMode,
@@ -362,7 +364,7 @@ export default function TaskForm({ initial, agents, hostPlatform, isNotification
     <div className="task-form-overlay">
       <div className="task-form">
         {planDialogOpen ? (
-          <PlanDialog permissions={initial?.permissions} />
+          <PermissionsDialog permissions={initial?.permissions} />
         ) : (<>
         <div className="task-form-header">
           <h2>{initial ? "Edit Task" : "New Task"}</h2>

package/palmier-server/pwa/src/constants.ts

@@ -1,2 +1,2 @@
 /** Bump when a breaking host change is made. */
-export const MIN_HOST_VERSION = "0.8.11";
+export const MIN_HOST_VERSION = "0.9.2";

package/palmier-server/pwa/src/contexts/HostConnectionContext.tsx

@@ -173,6 +173,14 @@ export function HostConnectionProvider({ children, activeHost }: { children: Rea
               config.natsJwt,
               new TextEncoder().encode(config.natsNkeySeed),
             ),
+            // Default is 2 min — too slow to notice a silently-dead WebSocket
+            // when the user has the page foregrounded but the network drops.
+            // The resume-probe useEffect below catches dead conns within 2s
+            // when the user returns to the app, so this background heartbeat
+            // can stay conservative (maxPingOut: 2 → ~60s) and avoid false
+            // positives from transient network jitter.
+            pingInterval: 30_000,
+            maxPingOut: 2,
           });
           if (cancelled) { conn.close().catch(() => {}); return; }
           console.log("[NATS] Connected");
@@ -211,17 +219,24 @@ export function HostConnectionProvider({ children, activeHost }: { children: Rea
     };
   }, [isDirectHost, activeHost]);
 
-  // Mobile WebViews suspend WebSockets when the app backgrounds; nats.ws often
-  // doesn't notice the dead socket on resume, leaving RPCs to hang/throw "Not
-  // connected." Force-close on resume so the connectLoop reconnects with a
-  // fresh socket.
+  // WebSockets can die silently — mobile WebViews suspend them on background,
+  // laptops on sleep, networks on switch. On any resume (visibility change on
+  // web, foreground on native), probe the connection with a short-timeout
+  // flush (PING/PONG round-trip); close only if it doesn't respond. nats.ws's
+  // own pingInterval catches it eventually, but probing on resume gets us
+  // back faster when the user immediately fires an RPC.
   useEffect(() => {
     if (isDirectHost) return;
     const handle = CapacitorApp.addListener("appStateChange", (state: { isActive: boolean }) => {
-      if (state.isActive && ncRef.current) {
-        console.log("[NATS] App resumed; cycling NATS conn to recover from possible dead socket");
-        ncRef.current.close().catch(() => {});
-      }
+      if (!state.isActive || !ncRef.current) return;
+      const conn = ncRef.current;
+      Promise.race([
+        conn.flush(),
+        new Promise<void>((_, reject) => setTimeout(() => reject(new Error("ping timeout")), 2_000)),
+      ]).catch(() => {
+        console.log("[NATS] Resume probe failed — cycling conn");
+        conn.close().catch(() => {});
+      });
     });
     return () => { handle.then((h) => h.remove()); };
   }, [isDirectHost]);

package/palmier-server/pwa/src/pages/PairHost.tsx

@@ -141,8 +141,11 @@ export default function PairHost() {
               <h3 className="pair-instruction-heading">Setting up a new host?</h3>
               <ol className="pair-steps">
                 <li>Install at least one agent CLI (e.g., <a href="https://www.palmier.me/agents" target="_blank" rel="noopener noreferrer">Claude Code, Gemini CLI, Codex CLI</a>)</li>
-                <li>Install Palmier on your host machine:
-                  <code className="pair-command">npm install -g palmier</code>
+                <li>Install Palmier on your host machine.
+                  <span className="pair-platform-label">Linux / macOS:</span>
+                  <code className="pair-command">curl -fsSL https://palmier.me/install.sh | bash</code>
+                  <span className="pair-platform-label">Windows (PowerShell):</span>
+                  <code className="pair-command">irm https://palmier.me/install.ps1 | iex</code>
                 </li>
                 <li>Run the setup wizard:
                   <code className="pair-command">palmier init</code>
@@ -189,8 +192,12 @@ export default function PairHost() {
                 disabled={pairing}
               />
               <span className="pair-checkbox-text">
-                <span className="pair-checkbox-title">Link this device</span>
-                <span className="pair-checkbox-hint">The host will use this device for SMS, contacts, calendar, location, and alarms. Only one device can be linked at a time.</span>
+                <span className="pair-checkbox-title">Link the host to this device</span>
+                <span className="pair-checkbox-hint">
+                  {makeLinked
+                    ? "The host will use this device for SMS, contacts, calendar, location, and alarms. Only one device can be linked to the host."
+                    : "This device won't provide SMS, contacts, calendar, location, or alarms to the host. You can link it later from the menu."}
+                </span>
               </span>
             </label>
           )}

package/palmier-server/pwa/src/pages/PairSetup.tsx

@@ -74,9 +74,9 @@ export default function PairSetup() {
   const linkModal = phase === "confirming" && createPortal(
     <div className="confirm-modal-overlay" onClick={cancelLink}>
       <div className="confirm-modal" onClick={(e) => e.stopPropagation()}>
-        <h2 className="confirm-modal-title">Link this device?</h2>
+        <h2 className="confirm-modal-title">Link the host to this device?</h2>
         <p className="confirm-modal-message">
-          Only one device can be linked at a time — switching will disable those capabilities on the currently linked device.
+          Another device is already linked to this host. Only one device can be linked to the host — switching will disable those capabilities on the currently linked device.
         </p>
         <div className="confirm-modal-actions">
           <button className="btn btn-secondary" onClick={cancelLink}>Cancel</button>
@@ -89,19 +89,21 @@ export default function PairSetup() {
 
   if (phase === "loading" || phase === "confirming" || phase === "linking" || phase === "linkError") {
     const isWizardCandidate = isFirstHost;
+    const showSpinner = phase === "loading" || phase === "confirming" || phase === "linking";
     return (
       <div className="pair-setup">
         <div className="pair-setup-inner">
           {isWizardCandidate && <h1 className="pair-setup-title">Device Capabilities</h1>}
           <div className="pair-setup-loading">
-            {phase === "loading" && "Connecting to host…"}
-            {phase === "confirming" && "Awaiting confirmation…"}
-            {phase === "linking" && "Linking device…"}
+            {showSpinner && <span className="spinner spinner-lg" />}
+            {phase === "loading" && <span>Connecting to host…</span>}
+            {phase === "confirming" && <span>Awaiting confirmation…</span>}
+            {phase === "linking" && <span>Linking device…</span>}
             {phase === "linkError" && (
               <>
                 <p className="pair-error">{linkError}</p>
                 <button className="btn btn-primary" onClick={retryLink}>Retry</button>
-                <button className="btn btn-secondary" onClick={goToHost} style={{ marginTop: 8 }}>Skip linking</button>
+                <button className="btn btn-secondary" onClick={goToHost}>Skip linking</button>
               </>
             )}
           </div>

package/palmier-server/pwa/vite.config.ts

@@ -24,7 +24,7 @@ export default defineConfig({
       manifest: {
         name: "Palmier",
         short_name: "Palmier",
-        description: "Control AI agents running on your machine from any device. Schedule tasks, monitor runs, and stay in control.",
+        description: "Bridge your AI agents and your phone. Your AI agents use your phone as a tool — GPS, email, calendar, contacts — and you also use your phone as an agent remote.",
         start_url: "/",
         display: "standalone",
         background_color: "#ffffff",

package/palmier-server/spec.md

@@ -144,8 +144,8 @@ If no clients exist, the host skips client validation (backward compatibility fo
 
 Each host tracks a single **linked device** — the one paired device responsible for answering device capability requests (SMS, contacts, calendar, location, alarm, ringer, email, battery). The host stores only `{ clientToken, fcmToken }` in `~/.config/palmier/linked-device.json`; it has no knowledge of which capabilities are actually enabled on the device. That set lives in Android SharedPreferences on the linked device itself and is consulted by the FCM handlers as a local kill-switch.
 
-- **Opt-in at pair time.** The PWA shows a "Link this device" checkbox during pairing (native only, default on). If checked, the pair flow continues to a setup step that calls `device.link` with the FCM token. On the very first host pair (when the device has no other paired hosts), that step also shows a one-time "Device Capabilities" screen with all toggles default OFF; the user opts into each one, and Finish writes the set to SharedPreferences. On subsequent host pairs the capability screen is skipped — the device-wide enabled set is host-agnostic and set once.
-- **Reassignment.** Any paired device can take over as the linked device from the drawer's "Link this device" button. This displaces the previous linked device (its drawer toggles go dark).
+- **Opt-in at pair time.** The PWA shows a "Link the host to this device" checkbox during pairing (native only, default on). If checked, the pair flow continues to a setup step that calls `device.link` with the FCM token. On the very first host pair (when the device has no other paired hosts), that step also shows a one-time "Device Capabilities" screen with all toggles default OFF; the user opts into each one, and Finish writes the set to SharedPreferences. On subsequent host pairs the capability screen is skipped — the device-wide enabled set is host-agnostic and set once.
+- **Reassignment.** Any paired device can take over as the linked device from the drawer's "Link the host to this device" button. This displaces the previous linked device (its drawer toggles go dark).
 - **Loss.** If the linked device is unpaired (via `clients.revoke_self` or CLI `palmier clients revoke`), `linked-device.json` is cleared and capability tools return "No linked device configured" until the user picks a new one.
 - **Routing.** MCP capability tools look up the linked device once per invocation and publish FCM to its token (via `host.<host_id>.fcm.<capability>` relayed by the server). Non-linked devices aren't woken and don't receive capability FCMs.
 

package/src/commands/run.ts

@@ -199,6 +199,9 @@ export async function runCommand(taskId: string): Promise<void> {
     if (nc && !nc.isClosed()) {
       await nc.drain();
     }
+    if (task.frontmatter.one_off) {
+      try { getPlatform().removeTaskTimer(taskId); } catch { /* best-effort */ }
+    }
   };
 
   try {

package/src/commands/serve.ts

@@ -5,7 +5,7 @@ import { connectNats } from "../nats-client.js";
 import { createRpcHandler } from "../rpc-handler.js";
 import { startNatsTransport } from "../transports/nats-transport.js";
 import { startHttpTransport } from "../transports/http-transport.js";
-import { getTaskDir, readTaskStatus, writeTaskStatus, parseTaskFile, appendRunMessage, listTasks } from "../task.js";
+import { getTaskDir, readTaskStatus, writeTaskStatus, parseTaskFile, appendRunMessage, listTasks, readFollowupStatus, deleteFollowupStatus } from "../task.js";
 import { publishHostEvent } from "../events.js";
 import { getPlatform } from "../platform/index.js";
 import { detectAgents } from "../agents/agent.js";
@@ -21,58 +21,83 @@ const POLL_INTERVAL_MS = 30_000;
 const DAEMON_PID_FILE = path.join(CONFIG_DIR, "daemon.pid");
 
 /**
- * Reconcile tasks stuck in "started" whose process is no longer alive.
+ * Reconcile tasks stuck in "started" whose process is no longer alive, and
+ * clean up OS scheduler units for one-off tasks that have already terminated.
  * The system scheduler (Task Scheduler / systemd) is the authoritative source.
  */
 async function checkStaleTasks(
   config: HostConfig,
   nc: NatsConnection | undefined,
 ): Promise<void> {
-  const tasksJsonl = path.join(config.projectRoot, "tasks.jsonl");
-  if (!fs.existsSync(tasksJsonl)) return;
+  const tasksRoot = path.join(config.projectRoot, "tasks");
+  if (!fs.existsSync(tasksRoot)) return;
 
   const platform = getPlatform();
-  const lines = fs.readFileSync(tasksJsonl, "utf-8").split("\n").filter(Boolean);
-  for (const line of lines) {
-    let taskId: string;
-    try {
-      taskId = (JSON.parse(line) as { task_id: string }).task_id;
-    } catch { continue; }
+  const taskIds = fs.readdirSync(tasksRoot).filter((f) =>
+    fs.statSync(path.join(tasksRoot, f)).isDirectory()
+  );
 
+  for (const taskId of taskIds) {
     const taskDir = getTaskDir(config.projectRoot, taskId);
     const status = readTaskStatus(taskDir);
-    if (!status || status.running_state !== "started") continue;
-
-    if (platform.isTaskRunning(taskId)) continue;
-
-    console.log(`[monitor] Task ${taskId} process exited unexpectedly, marking as failed.`);
-    const endTime = Date.now();
-    writeTaskStatus(taskDir, { running_state: "failed", time_stamp: endTime });
-
-    const runId = fs.readdirSync(taskDir)
-      .filter((f) => /^\d+$/.test(f) && fs.existsSync(path.join(taskDir, f, "TASKRUN.md")))
-      .sort()
-      .pop();
+    if (!status) continue;
+
+    let task;
+    try { task = parseTaskFile(taskDir); } catch { continue; }
+
+    if (status.running_state === "started" && !platform.isTaskRunning(taskId)) {
+      console.log(`[monitor] Task ${taskId} process exited unexpectedly, marking as failed.`);
+      const endTime = Date.now();
+      writeTaskStatus(taskDir, { running_state: "failed", time_stamp: endTime });
+
+      const runId = fs.readdirSync(taskDir)
+        .filter((f) => /^\d+$/.test(f) && fs.existsSync(path.join(taskDir, f, "TASKRUN.md")))
+        .sort()
+        .pop();
+
+      if (runId) {
+        appendRunMessage(taskDir, runId, {
+          role: "status",
+          time: endTime,
+          content: "",
+          type: "failed",
+        });
+      }
 
-    if (runId) {
-      appendRunMessage(taskDir, runId, {
-        role: "status",
-        time: endTime,
-        content: "",
-        type: "failed",
+      await publishHostEvent(nc, config.hostId, taskId, {
+        event_type: "running-state",
+        running_state: "failed",
+        name: task.frontmatter.name || taskId,
       });
     }
 
-    let taskName = taskId;
-    try {
-      taskName = parseTaskFile(taskDir).frontmatter.name || taskId;
-    } catch { /* fallback to taskId */ }
+    if (task.frontmatter.one_off && status.running_state !== "started") {
+      try { platform.removeTaskTimer(taskId); } catch { /* best-effort */ }
+    }
 
-    await publishHostEvent(nc, config.hostId, taskId, {
-      event_type: "running-state",
-      running_state: "failed",
-      name: taskName,
-    });
+    // Reconcile orphaned follow-ups: if a run has a persisted follow-up PID
+    // but that process is no longer alive, clear the file and mark the run
+    // as failed so the UI doesn't claim it's still running.
+    const runIds = fs.readdirSync(taskDir).filter((f) =>
+      /^\d+$/.test(f) && fs.existsSync(path.join(taskDir, f, "TASKRUN.md"))
+    );
+    for (const runId of runIds) {
+      const runDir = path.join(taskDir, runId);
+      const followup = readFollowupStatus(runDir);
+      if (!followup) continue;
+      try {
+        process.kill(followup.pid, 0);
+      } catch {
+        deleteFollowupStatus(runDir);
+        appendRunMessage(taskDir, runId, {
+          role: "status",
+          time: Date.now(),
+          content: "",
+          type: "failed",
+        });
+        await publishHostEvent(nc, config.hostId, taskId, { event_type: "result-updated", run_id: runId });
+      }
+    }
   }
 }
 

package/src/platform/linux.ts

@@ -185,6 +185,15 @@ Environment=PATH=${process.env.PATH || "/usr/local/bin:/usr/bin:/bin"}
 `;
 
     fs.writeFileSync(path.join(UNIT_DIR, serviceName), serviceContent, "utf-8");
+
+    // Tear down any previously installed timer unit so on-demand tasks don't
+    // keep firing on the old schedule. Service unit stays so startTask works.
+    const timerPath = path.join(UNIT_DIR, timerName);
+    if (fs.existsSync(timerPath)) {
+      try { execSync(`systemctl --user stop ${timerName}`, { encoding: "utf-8" }); } catch { /* not running */ }
+      try { execSync(`systemctl --user disable ${timerName}`, { encoding: "utf-8" }); } catch { /* not enabled */ }
+      fs.unlinkSync(timerPath);
+    }
     daemonReload();
 
     if (!task.frontmatter.schedule_enabled) return;