pilotswarm 0.5.44 → 0.5.47

package/ui/core/src/reducer.js

@@ -832,6 +832,17 @@ export function appReducer(state, action) {
             if (Boolean(action.enabled) === Boolean(state.ui.touchScale)) return state;
             return { ...state, ui: { ...state.ui, touchScale: Boolean(action.enabled) } };
 
+        case "ui/agentPickerUsage": {
+            const usage = action.usage && typeof action.usage === "object" && !Array.isArray(action.usage)
+                ? action.usage
+                : {};
+            return { ...state, ui: { ...state.ui, agentPickerUsage: usage } };
+        }
+
+        case "ui/sessionDetailCollapsed":
+            if (Boolean(action.collapsed) === Boolean(state.ui.sessionDetailCollapsed)) return state;
+            return { ...state, ui: { ...state.ui, sessionDetailCollapsed: Boolean(action.collapsed) } };
+
         case "profileSettings/apply": {
             const settings = action.settings && typeof action.settings === "object" && !Array.isArray(action.settings)
                 ? action.settings
@@ -845,6 +856,11 @@ export function appReducer(state, action) {
             // say "rich" fall through to the transcript below.
             const hasTouchScale = Object.prototype.hasOwnProperty.call(settings, "touchScale")
                 && typeof settings.touchScale === "boolean";
+            const hasSessionDetailCollapsed = Object.prototype.hasOwnProperty.call(settings, "sessionDetailCollapsed")
+                && typeof settings.sessionDetailCollapsed === "boolean";
+            const hasAgentPickerUsage = Object.prototype.hasOwnProperty.call(settings, "agentPickerUsage")
+                && settings.agentPickerUsage && typeof settings.agentPickerUsage === "object"
+                && !Array.isArray(settings.agentPickerUsage);
             const hasRightPaneMode = Object.prototype.hasOwnProperty.call(settings, "rightPaneMode")
                 && (settings.rightPaneMode === "canvas" || settings.rightPaneMode === "panes");
             // The two independent columns. A profile written by a build that
@@ -921,6 +937,12 @@ export function appReducer(state, action) {
                     ...selection.ui,
                     themeId: hasTheme ? settings.themeId.trim() : selection.ui.themeId,
                     touchScale: hasTouchScale ? settings.touchScale : selection.ui.touchScale,
+                    sessionDetailCollapsed: hasSessionDetailCollapsed
+                        ? settings.sessionDetailCollapsed
+                        : selection.ui.sessionDetailCollapsed,
+                    agentPickerUsage: hasAgentPickerUsage
+                        ? settings.agentPickerUsage
+                        : selection.ui.agentPickerUsage,
                     rightPaneMode: hasRightPaneMode ? settings.rightPaneMode : selection.ui.rightPaneMode,
                     ...(nextDesktopPanes
                         ? { canvasOpen: nextDesktopPanes.canvasOpen, diagnosticsOpen: nextDesktopPanes.diagnosticsOpen, canvasZen: nextDesktopPanes.zen === true }
@@ -2458,6 +2480,29 @@ export function appReducer(state, action) {
                 },
             };
         }
+        /**
+         * Put the banner down.
+         *
+         * A failed mutation writes mutation.error, which the Model Providers
+         * pane renders as a red band. Nothing cleared it except the NEXT
+         * mutation, so cancelling a failed sheet left the band sitting there
+         * over an unchanged list, and it survived until something else
+         * succeeded. The sheet that raised it owns it; when that sheet goes,
+         * so does this.
+         */
+        case "admin/modelProviders/mutationDismissed": {
+            if (!state.admin?.modelProviders?.mutation?.error) return state;
+            return {
+                ...state,
+                admin: {
+                    ...state.admin,
+                    modelProviders: {
+                        ...state.admin.modelProviders,
+                        mutation: { ...state.admin.modelProviders.mutation, error: null },
+                    },
+                },
+            };
+        }
         case "admin/modelProviders/select": {
             return {
                 ...state,
@@ -2495,6 +2540,7 @@ export function appReducer(state, action) {
         }
         case "admin/modelProviders/createBegin": {
             const draft = String(action.name || "");
+            const update = action.mode === "update";
             return {
                 ...state,
                 admin: {
@@ -2503,12 +2549,13 @@ export function appReducer(state, action) {
                         ...state.admin.modelProviders,
                         create: {
                             editing: true,
-                            stage: "name",
-                            name: "",
+                            mode: update ? "update" : "create",
+                            stage: update || action.stage === "credential" ? "credential" : "name",
+                            name: update ? draft : "",
                             typeId: String(action.typeId || ""),
                             shared: action.shared === true,
-                            draft,
-                            cursorIndex: draft.length,
+                            draft: update ? "" : draft,
+                            cursorIndex: update ? 0 : draft.length,
                             saving: false,
                             error: null,
                         },

package/ui/core/src/selectors.js

@@ -1812,6 +1812,21 @@ function prefixRuns(text, color = "gray", options = {}) {
 // (block) chat renderer can consume the same labeling rules without the
 // terminal run/prefix shape. Returns { time, glyph, glyphColor, roleLabel,
 // roleColor }.
+/**
+ * Is this the agent's own opening instruction rather than something a person
+ * sent? The kickoff goes onto the queue as a user-role prompt — that is how a
+ * turn starts — but it is stamped with a SYSTEM sender at the origin
+ * (client.ts, createAgentSession). Anything a person actually sends carries a
+ * `kind: "user"` sender stamped from the validated auth context.
+ *
+ * Sessions created before the stamp existed have no sender on that message, so
+ * their kickoff still reads as "You". Nothing can distinguish it after the
+ * fact; only new sessions are correct.
+ */
+export function isAgentKickoffMessage(message) {
+    return message?.role === "user" && message?.sender?.kind === "system";
+}
+
 function describeChatMessageHeader(message, options = {}) {
     const time = formatTimestamp(message?.createdAt || message?.time);
     // A user.message is labeled from the CURRENT VIEWER's perspective: "You"
@@ -1837,7 +1852,12 @@ function describeChatMessageHeader(message, options = {}) {
     );
     const ownerSuffix = senderIsOwner ? " (owner)" : "";
 
-    const roleLabel = isUser
+    const roleLabel = isAgentKickoffMessage(message)
+        // Belt and braces: the chat pane collapses a kickoff before it reaches
+        // here, but the TUI and any other renderer share this labeling, and
+        // "You" is the one label this message must never carry.
+        ? (sender?.display || "System")
+        : isUser
         ? ((fromOtherPerson ? (sender.display || sender.subject || "User") : "You") + ownerSuffix)
         : message?.role === "assistant"
             ? "Agent"
@@ -2440,6 +2460,22 @@ function buildChatMessageLines(message, maxWidth, options = {}) {
         }
     }
 
+    // An agent's opening instruction is plumbing, not conversation. It rides
+    // the queue as a user-role prompt (that is how a turn starts), so without
+    // this it rendered as a full chat message attributed to "You" — the
+    // reader's own transcript opening with a wall of instructions they never
+    // wrote. Collapsed to one line, openable, same affordance as a sub-agent
+    // response.
+    if (isAgentKickoffMessage(message)) {
+        return [buildSystemNoticeLine({
+            title: message?.sender?.display || "Agent kickoff",
+            summary: "opening instruction",
+            timestamp: formatTimestamp(message?.createdAt || message?.time),
+            body: message?.text || "",
+            color: "gray",
+        })];
+    }
+
     if (message?.role !== "user" && message?.role !== "assistant") {
         const strippedSystemText = stripLeadingRehydrationNoticeText(message?.text || "");
         if (message?.role === "system" && !strippedSystemText) {
@@ -2950,16 +2986,28 @@ export function selectCanvasView(state) {
 }
 
 /**
- * A validated canvas response on its way to the agent. Flagged so the PORTAL
- * chat skips it (the canvas redraw is the visible half of the loop) while the
- * TUI — which renders no canvas and would otherwise show a silent gap in the
- * conversation — gets a compact dim line.
+ * A validated canvas response on its way to the agent. Flagged `canvasAction`
+ * so each host renders it its own way: the TUI prints the compact dim line
+ * below, while the portal collapses it to a single row that opens to show the
+ * payload. Both need the same facts, so the action name and the full payload
+ * ride on the line rather than only inside the truncated runs.
  */
 function buildCanvasActionLine(message) {
     const dataKeys = message?.data && typeof message.data === "object" ? Object.keys(message.data) : [];
     const detail = dataKeys.length === 1 && typeof message.data[dataKeys[0]] === "string"
         ? message.data[dataKeys[0]].slice(0, 120)
         : (dataKeys.length ? JSON.stringify(message.data).slice(0, 120) : "");
+    let payload = "";
+    if (dataKeys.length) {
+        // A page can post anything that survives structured clone; JSON.stringify
+        // throws on a cycle or a BigInt, and this runs inside the transcript
+        // render path where a throw blanks the whole conversation.
+        try {
+            payload = JSON.stringify(message.data, null, 2);
+        } catch {
+            payload = "";
+        }
+    }
     return {
         runs: [
             { text: "[canvas] ", color: "cyan", bold: true },
@@ -2967,6 +3015,10 @@ function buildCanvasActionLine(message) {
             ...(detail ? [{ text: ` — ${detail}`, color: "gray" }] : []),
         ],
         canvasAction: true,
+        canvasActionName: message?.action || "action",
+        canvasActionDetail: detail,
+        canvasActionPayload: payload,
+        canvasActionTime: message?.time || "",
     };
 }
 
@@ -4005,6 +4057,11 @@ export function selectAdminConsole(state) {
             && pkg.owner.provider === principal.provider
             && pkg.owner.subject === principal.subject),
     );
+    // Editor-level: may change contents and rollout (publish, pin,
+    // enable/disable). The server computes `canEdit` per viewer (admin, owner
+    // or a granted editor); ownsPackage stays the owner-only gate for scope,
+    // delete and the editor list.
+    const canEditPackage = (pkg) => ownsPackage(pkg) || Boolean(pkg?.canEdit);
     // Built once per render, not per row.
     const ownerDirectory = ownerDirectoryFromSessions(state?.sessions?.byId);
     // Same rule as the session list: the owner chip only earns its place when
@@ -4046,7 +4103,7 @@ export function selectAdminConsole(state) {
         semver: pkg.active?.semver || null,
         sha7: pkg.active?.sha256 ? String(pkg.active.sha256).slice(0, 7) : null,
         agentCount: Array.isArray(pkg.active?.manifest?.agents) ? pkg.active.manifest.agents.length : 0,
-        canManage: ownsPackage(pkg),
+        canManage: canEditPackage(pkg),
         // A user-scope package belongs to a PERSON, so it carries the same
         // owner-initials chip the session rows use. Shared packages belong to
         // the deployment and keep the scope badge instead.
@@ -4157,13 +4214,25 @@ export function selectAdminConsole(state) {
                 && installedRowFor(worker)?.status === "ok").length
             : 0;
         const canManage = detail ? ownsPackage(detail) : (summary ? ownsPackage(summary) : false);
+        const canEdit = detail ? canEditPackage(detail) : (summary ? canEditPackage(summary) : false);
         packageDetail = {
             name: pkgState.selectedName,
             loading: Boolean(pkgState.detailLoading),
             error: pkgState.detailError || null,
             scope: (detail?.scope || summary?.scope) === "shared" ? "shared" : "user",
             enabled: detail ? Boolean(detail.enabled) : Boolean(summary?.enabled),
+            // canManage = owner/admin (scope, delete, editors);
+            // canEdit   = canManage OR granted editor (publish, pin, enable).
             canManage,
+            canEdit,
+            editors: Array.isArray(detail?.editors)
+                ? detail.editors.map((e) => ({
+                    provider: e.provider,
+                    subject: e.subject,
+                    label: e.displayName || e.email || e.subject,
+                    grantedByDisplay: e.grantedByDisplay || null,
+                }))
+                : [],
             createdBy: detail?.createdBy || summary?.createdBy || null,
             createdAtText: adminPkgDate(detail?.createdAt || summary?.createdAt),
             description: typeof manifest.description === "string" ? manifest.description : "",
@@ -4605,6 +4674,7 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
     const create = admin.modelProviders?.create || {};
     if (!admin.visible || !create.editing) return null;
     const credentialStage = create.stage === "credential";
+    const updating = create.mode === "update";
     const shared = create.shared === true;
     const ownTitle = /github/i.test(create.typeId || "")
         ? "Add GitHub Copilot provider"
@@ -4612,7 +4682,9 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
     const value = String(create.draft || "");
     return {
         type: "adminProviderCreate",
-        title: credentialStage
+        title: updating
+            ? `Update key for ${create.name}`
+            : credentialStage
             ? (shared ? "Add shared model provider" : ownTitle)
             : (shared ? "Name the shared provider" : ownTitle),
         label: credentialStage ? "credential" : "provider name",
@@ -4634,7 +4706,7 @@ export function selectAdminProviderCreateModal(state, maxWidth = 76) {
                 { text: "Letters, numbers, dot, dash, and underscore only.", color: "gray" },
             ],
         helpLines: credentialStage
-            ? ["Type/paste credential", "Enter  create provider", "Esc  cancel and clear"]
+            ? ["Type/paste credential", `Enter  ${updating ? "update key" : "create provider"}`, "Esc  cancel and clear"]
             : ["Type provider name", "Tab  next provider type", "Enter  continue to credential", "Esc  cancel"],
     };
 }
@@ -5194,16 +5266,17 @@ export function selectStatusBar(state) {
     }
     if (state.ui.modal?.type === "themePicker") {
         return {
-            left: "Select a shared portal/TUI theme",
+            left: "Select a theme",
             right: "up/down move · enter apply · esc close",
         };
     }
     if (state.ui.modal?.type === "sessionAgentPicker") {
         return {
             left: "Select an agent for the new session",
-            // Enter no longer always creates — on a section header it opens or
-            // closes — and the disclosure keys have to be named somewhere.
-            right: "up/down move · ←/→ open/close · enter start · esc cancel",
+            // Every row is an agent now, so Enter always starts one. The
+            // arrows are no longer named because they no longer do anything
+            // here — they belong to the search box, where they move the caret.
+            right: "type to search · up/down move · enter start · esc cancel",
         };
     }
     if (state.ui.modal?.type === "sessionGroupPicker") {
@@ -6470,15 +6543,23 @@ export function selectSessionAgentPickerModal(state, maxWidth = 76) {
             ], contentWidth);
         } else {
             const callable = item?.kind === "generic" || item?.supportsDirectStart !== false;
-            // A sub-agent that cannot be started is shown, not hidden — seeing
-            // what a package is made of is most of the value of grouping it.
-            // Dimming plus the └ connector carries it; the detail pane spells
-            // out why. An extra "called only" tag on the row was redundant with
-            // both, and read as a sentence fragment.
-            const glyph = item?.kind === "generic" ? "○ " : (item?.depth || 0) > 0 && item?.parentAgentName ? "└ " : "★ ";
+            // ONE LINE PER AGENT. The package is trailing metadata rather than a
+            // row of its own, so the list is as long as the number of agents —
+            // the grouped shape spent a second row on every single-agent package
+            // saying the same thing twice.
+            const glyph = item?.kind === "generic" ? "○ " : "★ ";
+            const name = item?.title || item?.agentName || item?.id || "Agent";
+            const pkg = item?.kind === "generic" ? "" : (item?.packageTitle || item?.packageName || "");
+            // Only shown while sorting BY use, where the number is the sort key
+            // and therefore explains the order. Everywhere else it is noise.
+            const uses = modal.sort === "used" && Number(item?.usageCount) > 0
+                ? `  ${item.usageCount}×`
+                : "";
             labelRuns = fitRuns([
                 { text: `${indent}${glyph}`, color: callable ? "yellow" : "gray" },
-                { text: item?.title || item?.agentName || item?.id || "Agent", color: callable ? "white" : "gray", bold: callable },
+                { text: name, color: callable ? "white" : "gray", bold: callable },
+                ...(pkg ? [{ text: `  ${pkg}`, color: "gray" }] : []),
+                ...(uses ? [{ text: uses, color: "cyan" }] : []),
             ], contentWidth);
         }
 
@@ -8537,7 +8618,7 @@ export function selectThemePickerModal(state, maxWidth = 80) {
             [{
                 text: previewingTheme
                     ? `Previewing now. Cancel reverts to ${originalTheme?.label || "the previous theme"}.`
-                    : "Currently active in this TUI session.",
+                    : "Currently active.",
                 color: previewingTheme ? "yellow" : "green",
             }],
             buildThemeSwatchRuns([

package/ui/core/src/state.js

@@ -359,6 +359,17 @@ export function createInitialState({ mode = "local", branding = null, docs = nul
             // portrait is not the only case — a wall display or a shared screen wants
             // the same thing — so it is a preference, not a viewport query.
             touchScale: false,
+            // The session detail box starts folded to its one-line summary. It
+            // is ten rows of reference detail against a list you are trying to
+            // read, and most of it is looked up once per session, not per
+            // glance. Expanding is one click and the choice persists.
+            sessionDetailCollapsed: true,
+            // Per-person agent start counts, {agentName: n}. Drives the
+            // picker's default "Most used" sort. State-owned so every writer
+            // of the profile document sees the same value at the same moment;
+            // a preserved ref refreshed by a 5s poll lost the count to the
+            // very next save.
+            agentPickerUsage: {},
             modal: null,
             fullscreenPane: null,
             layout: {

package/ui/react/src/components.js

@@ -2152,6 +2152,7 @@ function buildAdminModelProviderLines(view) {
     if (providers.page !== "shared") {
         lines.push([
             { text: " e ", color: "green", bold: true }, { text: "add  ", color: "gray" },
+            { text: "U ", color: "yellow", bold: true }, { text: "update key  ", color: "gray" },
             { text: "d ", color: "red", bold: true }, { text: "delete  ", color: "gray" },
             { text: "u ", color: "cyan", bold: true }, { text: "my default  ", color: "gray" },
             ...(view.isAdmin ? [{ text: "t ", color: "yellow", bold: true }, { text: "system use  ", color: "gray" }] : []),