spectoflow 0.31.0 → 0.32.0

package/README.md

@@ -24,6 +24,17 @@ An **agent-agnostic** spec-driven development framework with a **real-time local
 You speak in plain language; the framework classifies your intent and runs the right workflow. No
 ceremonial command to start.
 
+## Quick start
+
+```bash
+npm install -g spectoflow
+cd my-project && spectoflow init     # fits the workflow to your project, detects your agents
+spectoflow dashboard                 # → http://localhost:4319
+```
+
+Then just tell your coding agent what you want to build. Optional, once per machine:
+`spectoflow brain setup` so your agents remember you across projects.
+
 **Works with whichever coding agent you have.** `init` auto-detects what's installed; the dashboard's
 topbar always shows the **active agent**, front and center, with a switcher — pick another and it's
 verified as genuinely installed before activating (a red **"No agent found"** if none is), never
@@ -205,6 +216,11 @@ that another website sent — a malicious page, a DNS-rebinding trick, or a tunn
 machine can't drive it. Clicking a link to it from another site still opens it. To reach your projects from
 another device, use the online dashboard ([below](#going-online-optional-local-hub-vs-relay-server)).
 
+**A custom agent command needs your OK.** `config.json → runners` sets the command that launches each agent,
+and that file is committed — it can come from a cloned repository or a teammate's change. A command other than
+the agent's default only runs once you allow it on this machine: Personalize → *Agent & automation* → **Allow
+on this machine**, or `spectoflow runners allow <agent>`. Change the command and it asks again.
+
 ### One hub, every project
 
 There is only ever **one dashboard process on your machine**, no matter how many projects you have.

package/bin/spectoflow.js

@@ -394,6 +394,30 @@ function workflowCmd() {
   console.log(`\n  ${c.g('✓')} ${changed.length} step(s) updated in .spectoflow/workflow.md\n`);
 }
 
+// ---- runners: the commands that launch agents, and which custom ones are allowed on this machine (D76) ----
+function runnersCmd() {
+  const root = process.cwd();
+  if (!fs.existsSync(path.join(root, '.spectoflow', 'config.json'))) { console.log('No spectoflow project here. Run: spectoflow init'); process.exitCode = 1; return; }
+  const trust = require('../lib/runner-trust');
+  const runners = store.readConfig(root).runners || {};
+  if (argv[1] === 'allow') {
+    const which = argv[2];
+    if (!which || typeof runners[which] !== 'string') { console.log(`${c.y('!')} Usage: spectoflow runners allow <agent>   ${c.dim('— one of: ' + (Object.keys(runners).join(', ') || 'none'))}`); process.exitCode = 1; return; }
+    if (trust.isDefault(which, runners[which])) { console.log(`${c.dim('·')} ${which} uses the default command — nothing to allow.`); return; }
+    trust.trust(root, which, runners[which]);
+    console.log(`${c.g('✓')} allowed on this machine for this project: ${c.bold(which)} → ${runners[which]}`);
+    return;
+  }
+  console.log(wordmark());
+  const w = Math.max(4, ...Object.keys(runners).map((k) => k.length));
+  for (const [which, cmd] of Object.entries(runners)) {
+    const state = trust.isDefault(which, cmd) ? c.dim('default') : trust.isTrusted(root, which, cmd) ? c.g('allowed') : c.y('needs your OK');
+    console.log(`  ${which.padEnd(w)}  ${state.padEnd(24)}  ${cmd}`);
+  }
+  if (!Object.keys(runners).length) console.log(c.dim('  (no runners in config.json)'));
+  if (trust.untrusted(root, { runners }).length) console.log(`\n  ${c.dim('a custom command only runs once allowed:')} ${c.g('spectoflow runners allow <agent>')}\n`);
+}
+
 // ---- brain: the user's second brain (~/.spectoflow/brain.md), shared by every project ----
 function brainCmd() {
   const brain = require('../lib/brain');
@@ -493,6 +517,11 @@ async function startDashboard() {
   const boardUrl = (p) => (entry ? `http://localhost:${p}/p/${entry.id}/board` : `http://localhost:${p}/`);
   const info = workspace.readLock();
   if (info && info.port && await probeDashboard(info.port)) {
+    // A hub started by an older spectoflow keeps running that old code: replace it (D77).
+    if (info.version !== VERSION) {
+      console.log(`${c.cy('↻')} the running hub is ${info.version ? 'spectoflow v' + info.version : 'an older spectoflow'} — restarting it on v${VERSION}`);
+      return restartDashboard();
+    }
     console.log(`${c.g('●')} hub already running → ${c.bold(boardUrl(info.port))}`);
     await printOnlineLine(info.port, true);
     return printDashboardCommands();
@@ -728,6 +757,7 @@ const HELP = {
     ${c.g('brain setup')}    register the MCP server in each installed agent's USER-level config (once
                    per machine; never touches an existing entry; Goose gets a snippet to paste)
   Learned facts are added directly by default: ${c.g('spectoflow config set brain.autoAdd false')} to confirm them first.`,
+  runners: `${c.bold('spectoflow runners')} ${c.dim('[allow <agent>]')}\n\n  The commands that launch each agent (${c.dim('.spectoflow/config.json → runners')}). A command other than the\n  agent's default only runs once you allow it on this machine — config.json is committed, so it can come\n  from a cloned repository, a teammate, or an agent's edit.\n    ${c.g('runners')}                list them: default · allowed · needs your OK\n    ${c.g('runners allow <agent>')}  allow that agent's current command, for this project, on this machine`,
   stop: `${c.bold('spectoflow stop')}\n  Stop the running dashboard (alias for ${c.g('spectoflow dashboard stop')}).`,
   config: `${c.bold('spectoflow config')} ${c.dim('[get <key> | set <key> <value>]')}\n
   Global settings that apply to every project on this machine, stored in ${c.dim('~/.spectoflow/config.json')}:
@@ -745,6 +775,7 @@ const fns = {
   config: configCmd,
   mcp: () => require('../lib/mcp-server').serve({ version: VERSION }),
   brain: brainCmd,
+  runners: runnersCmd,
   agents: () => { console.log(wordmark()); printAgents(false); },
   skills: () => { console.log(wordmark()); printSkills(false); },
   workflow: workflowCmd,

package/lib/dashboard/files.js

@@ -38,6 +38,15 @@ function realUnderRoot(root, abs) {
   return real;
 }
 
+// Files that make tools run commands on their own — the agent launcher (config.json runners), hooks,
+// MCP server definitions, editor tasks. Someone editing through the online dashboard must never be able
+// to change them: that would turn a project write into running anything on the owner's machine (D76).
+const EXEC_CONFIG = ['.git', '.spectoflow/config.json', '.spectoflow/hooks', '.spectoflow/lib', '.claude', '.mcp.json', '.cursor', '.codex', '.gemini', '.kiro', '.vscode', '.idea', '.husky'];
+function isExecConfig(rel) {
+  const n = String(rel || '').replace(/\\/g, '/').replace(/^\/+/, '').replace(/\/+$/, '').toLowerCase();
+  return EXEC_CONFIG.some((p) => n === p || n.startsWith(p + '/'));
+}
+
 function isUnderGit(rel) {
   const n = String(rel || '').replace(/\\/g, '/').replace(/^\/+/, '');
   return n === '.git' || n.startsWith('.git/');
@@ -83,9 +92,10 @@ function readFile(root, rel) {
   return { content: buf.toString('utf8') };
 }
 
-function writeFile(root, rel, content) {
+function writeFile(root, rel, content, { remote = false } = {}) {
   if (typeof content !== 'string') return { error: 'Missing content.' };
   if (isUnderGit(rel)) return { error: 'Writes under .git are blocked.' };
+  if (remote && isExecConfig(rel)) return { error: 'This file controls commands run on the owner\'s machine: it can only be edited locally.' };
   const abs = safePath(root, rel);
   if (!abs) return { error: 'Invalid path.' };
   const parentDir = path.dirname(abs);
@@ -95,8 +105,9 @@ function writeFile(root, rel, content) {
   return { ok: true };
 }
 
-function mkdir(root, rel) {
+function mkdir(root, rel, { remote = false } = {}) {
   if (isUnderGit(rel)) return { error: 'Cannot create folders under .git.' };
+  if (remote && isExecConfig(rel)) return { error: 'This folder controls commands run on the owner\'s machine: it can only be changed locally.' };
   const abs = safePath(root, rel);
   if (!abs) return { error: 'Invalid path.' };
   const parentDir = path.dirname(abs);
@@ -105,4 +116,4 @@ function mkdir(root, rel) {
   return { ok: true };
 }
 
-module.exports = { tree, readFile, writeFile, mkdir };
+module.exports = { tree, readFile, writeFile, mkdir, isExecConfig };

package/lib/dashboard/handlers.js

@@ -68,6 +68,7 @@ function createHandlers(root) {
     // A process restart loses any in-flight orchestration; clear a stale 'running'/'awaiting_approval'
     // so the 409 guard in orchestrate.start can't wedge forever. Not a resume — just un-wedging.
     try { orchestrator.reconcileOnBoot(root); } catch (_) {}
+    try { require('./runner').reconcileRunsOnBoot(root); } catch (_) {}
   }
   return {
     handleApi,

package/lib/dashboard/hub-server.js

@@ -278,7 +278,7 @@ function serveStatic(reqPath, req, res, root) {
 const PROJECT_PREFIX = /^\/p\/([0-9a-f]{6})(\/.*)?$/;
 
 const LOCK = workspace.lockPath();
-function writeLock(){ try{ fs.mkdirSync(path.dirname(LOCK),{recursive:true}); fs.writeFileSync(LOCK, JSON.stringify({ pid:process.pid, port:PORT, url:`http://localhost:${PORT}`, startedAt:new Date().toISOString() })+'\n'); }catch{} }
+function writeLock(){ try{ fs.mkdirSync(path.dirname(LOCK),{recursive:true}); fs.writeFileSync(LOCK, JSON.stringify({ pid:process.pid, port:PORT, url:`http://localhost:${PORT}`, version:VERSION, startedAt:new Date().toISOString() })+'\n'); }catch{} }
 function clearLock(){ try{ const l=JSON.parse(fs.readFileSync(LOCK,'utf8')); if(l.pid===process.pid) fs.unlinkSync(LOCK); }catch{} }
 process.on('exit', clearLock);
 ['SIGINT','SIGTERM'].forEach((s)=> process.on(s, ()=>{ if (connector) connector.stop(); clearLock(); process.exit(0); }));

package/lib/dashboard/meeting.js

@@ -10,7 +10,8 @@
 const { spawn } = require('child_process');
 const store = require('../store');
 const files = require('./files');
-const { resolveRunnerCommand } = require('./runner');
+const { resolveRunnerCommand, trackChild } = require('./runner');
+const runnerTrust = require('../runner-trust');
 const { formatLog } = require('./summarize'); // reused as-is rather than reimplemented — see report
 
 const TASK_LIMIT = 20; // mirrors summarize.js's own DEFAULT_LIMIT philosophy (cap, most-recent-last)
@@ -82,6 +83,8 @@ function runMeetingGenerate(root, { agent, date } = {}, emit) {
   const which = agent || cfg.agent || 'claude';
   const cmdStr = resolveRunnerCommand(root, cfg, which);
   if (!cmdStr) return { error: `No runner configured for "${which}".` };
+  const blocked = runnerTrust.blockedMessage(root, which, cmdStr);
+  if (blocked) return { error: blocked, untrustedRunner: { agent: which, command: cmdStr } };
 
   const day = date || todayLocal();
   if (!isValidDate(day)) return { error: 'Invalid date.' };
@@ -103,6 +106,7 @@ function runMeetingGenerate(root, { agent, date } = {}, emit) {
   let out = '';
   child.stdout && child.stdout.on('data', (d) => { out += d.toString(); });
   child.stderr && child.stderr.on('data', (d) => { out += d.toString(); });
+  trackChild(root, child);
   child.on('close', (code) => {
     const text = out.trim() || (code === 0 ? '(no output)' : `meeting generate failed (exit ${code})`);
     files.writeFile(root, meetingPath(day), text);

package/lib/dashboard/ops.js

@@ -11,7 +11,7 @@ const fs = require('fs');
 const path = require('path');
 const store = require('../store');
 const files = require('./files');
-const { startRun } = require('./runner');
+const { startRun, stopRuns } = require('./runner');
 const { runSummarize } = require('./summarize');
 const { runMeetingGenerate, todayLocal } = require('./meeting');
 const orchestrator = require('./orchestrator');
@@ -21,6 +21,7 @@ const brain = require('../brain');
 const brainSetup = require('../brain-setup');
 const globalConfig = require('../global-config');
 const workflowDetect = require('../workflow-detect');
+const runnerTrust = require('../runner-trust');
 
 const PKG_VERSION = require('../../package.json').version;
 
@@ -163,14 +164,26 @@ const ops = {
     // todayLocal() header comment for why this, not the browser's date, is the one source of truth
     // for which .spectoflow/meetings/<date>.md "today" resolves to.
     p.todayDate = todayLocal();
+    p.untrustedRunners = runnerTrust.untrusted(root, p.config);
+    p.kitVersion = PKG_VERSION;
     return p;
   },
   'agentfile.read': async (root, { path: rel }) => readAgentFile(root, rel),
 
   'files.tree': async (root) => ({ tree: files.tree(root) }),
   'files.read': async (root, { path: rel }) => filesResult(files.readFile(root, rel || '')),
-  'files.write': async (root, { path: rel, content }, ctx) => changed(ctx, filesResult(files.writeFile(root, rel, content))),
-  'files.mkdir': async (root, { path: rel }, ctx) => changed(ctx, filesResult(files.mkdir(root, rel))),
+  'files.write': async (root, { path: rel, content }, ctx) => changed(ctx, filesResult(files.writeFile(root, rel, content, { remote: !!ctx.remote }))),
+  'files.mkdir': async (root, { path: rel }, ctx) => changed(ctx, filesResult(files.mkdir(root, rel, { remote: !!ctx.remote }))),
+
+  // Allow, on this machine, the custom command config.json sets for one agent (D76). Local only: the relay
+  // doesn't list this op, and ctx.remote is refused here too.
+  'runners.trust': async (root, { agent }, ctx) => {
+    if (ctx && ctx.remote) throw new OpError(404, 'Unknown operation.');
+    const cmd = ((store.readConfig(root).runners) || {})[agent];
+    if (typeof cmd !== 'string' || !cmd.trim()) notFound(`No custom command set for "${agent}".`);
+    runnerTrust.trust(root, agent, cmd);
+    return changed(ctx, { ok: true, agent, command: cmd });
+  },
 
   'task.add': async (root, { title, phase, file, owner, level }, ctx) => {
     const t = store.addTask(root, { title: text(title, 'A title is required.'), phase, file, owner, level });
@@ -222,6 +235,14 @@ const ops = {
     if (r.error) bad(r.error);
     return { runId: r.runId };
   },
+  // Bring the project's framework files up to the installed spectoflow (same as `spectoflow update`). Local
+  // only: it writes framework files on the owner's machine (D77).
+  'project.update': async (root, _args, ctx) => {
+    if (ctx && ctx.remote) throw new OpError(404, 'Unknown operation.');
+    const r = require('../update').runUpdate({ projectRoot: root, templatesDir: path.join(__dirname, '..', '..', 'templates'), version: PKG_VERSION });
+    return changed(ctx, { fromVersion: r.fromVersion, toVersion: r.toVersion, refreshed: r.refreshed.length + r.created.length + r.forced.length + r.removed.length, review: r.newSidecar });
+  },
+  'run.stop': async (root, _args, ctx) => changed(ctx, { stopped: stopRuns(root) }),
   'chat.summarize': async (root, { agent }, ctx) => {
     const r = runSummarize(root, { agent }, ctx.emit);
     if (r.error) bad(r.error);

package/lib/dashboard/orchestrator.js

@@ -90,7 +90,7 @@ function defaultRunStep({ root, step, agent, skill, request, learn = true }, emi
     // logPrompt:false — the orchestrator already posts a clean "→ step (agent)" line; the raw
     // priming prompt would otherwise show as a noisy user bubble.
     const r = startRun(root, { prompt, agent: tool, logPrompt: false, learn }, (e) => { emit(e); if (e.type === 'run-end') resolve(e.code); });
-    if (r.error) { emit({ type: 'message', message: { role: 'orchestrator', kind: 'status', text: r.error } }); resolve(1); }
+    if (r.error) { post(root, 'orchestrator', 'status', r.error, emit); resolve(1); }
   });
 }
 

package/lib/dashboard/public/app.js

@@ -300,7 +300,7 @@ async function load(){
   const r = await fetch(withProject('/api/project')); P = await r.json();
   syncSettingsFromServer();
   REMOTE=typeof P.online==='boolean'; // known before the first paint: the brain tab is hidden online
-  render(); setOffline(P);
+  render(); setOffline(P); renderUpdateBar(); notifyOrchestration();
   if(!REMOTE && !brainData) loadBrain();
   if(openTaskId) openDrawer(openTaskId,true);
 }
@@ -315,7 +315,7 @@ function connect(){
     let m; try{ m=JSON.parse(ev.data); }catch{ return; }
     if(m.type==='change'||m.type==='message') return scheduleLoad(); // messages live from runtime.messages
     if(m.type==='brain') return loadBrain();                    // ~/.spectoflow/brain.md changed (page, MCP, run line)
-    if(m.type==='run-start'||m.type==='run-end') { chatState.forEach(st=>{ st.rawBlock=null; }); sseBusy=(m.type==='run-start'); updateChatBusyUI(); return; }
+    if(m.type==='run-start'||m.type==='run-end') { chatState.forEach(st=>{ st.rawBlock=null; }); sseBusy=(m.type==='run-start'); updateChatBusyUI(); if(m.type==='run-end') notify(t(m.code===0?'notify.done':'notify.failed',{project:P&&P.projectName||'spectoflow'}), ''); return; }
     if(m.type==='run-line') return appendRaw(m.chunk);          // raw output is ephemeral (not logged)
   };
   es.onerror = ()=>{ $('#sync').classList.add('offline'); $('#syncLabel').textContent='offline'; };
@@ -376,6 +376,40 @@ function renderApproval(container){
   const acts=el('div','c-actions'); acts.append(a,c); row.append(acts);
   container.append(row); scrollChat(container);
 }
+// A launch refused before any agent ran (no runner, a custom command not allowed yet…) has no run-start/
+// run-end to show for it: say so in the chat, without persisting anything.
+function showChatError(message){
+  chatContainers().forEach(container=>{
+    clearIdle(container);
+    const st=stateFor(container); st.rawBlock=null;
+    container.append(el('div','msg chat-error',message));
+    scrollChat(container);
+  });
+}
+// Native browser notifications when an agent finishes or a step waits for approval — only while this tab
+// isn't in front (D77). Permission is asked on the user's own click that starts agent work, never unprompted.
+function askNotifyPermission(){ try{ if('Notification' in window && Notification.permission==='default') Notification.requestPermission(); }catch(_){} }
+function notify(title,body){
+  try{
+    if(!document.hidden || !('Notification' in window) || Notification.permission!=='granted') return;
+    const n=new Notification(title,{body,tag:'spectoflow-'+(P&&P.projectName||'')});
+    n.onclick=()=>{ window.focus(); n.close(); };
+  }catch(_){}
+}
+let notifiedApproval='';
+function notifyOrchestration(){
+  const o=P&&P.runtime&&P.runtime.orchestration; if(!o) return;
+  const step=o.steps&&o.steps[o.currentStep];
+  const key=o.status==='awaiting_approval'?`${o.id}:${o.currentStep}`:'';
+  if(key && key!==notifiedApproval){ notify(t('notify.approval',{project:P.projectName||'spectoflow'}), step?step.name:''); }
+  notifiedApproval=key;
+}
+async function postRunRequest(url,body){
+  askNotifyPermission();
+  const r=await fetch(withProject(url),{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)});
+  if(!r.ok){ const d=await r.json().catch(()=>({})); showChatError(d.error||t('files.saveError')); if(/needs your OK/.test(d.error||'')) scheduleLoad(); }
+  return r.ok;
+}
 function appendRaw(chunk){
   chatContainers().forEach(container=>{
     const st=stateFor(container);
@@ -413,7 +447,7 @@ async function doRun(promptEl,agentEl){
   const agent=agentEl.value;
   const ex=expandForSend(raw);
   const body=ex ? {prompt:ex.prompt, display:ex.display, agent} : {prompt:raw, agent};
-  await fetch(withProject('/api/run'),{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(body)});
+  if(!(await postRunRequest('/api/run',body))) return;
   promptEl.value=''; hideCmdMenu(); // the prompt renders as a bubble from the message log
 }
 async function doOrchestrate(promptEl){
@@ -421,7 +455,7 @@ async function doOrchestrate(promptEl){
   promptEl=promptEl||$('#runPrompt');
   const raw=promptEl.value.trim(); if(!raw) return;
   const ex=expandForSend(raw);
-  await fetch(withProject('/api/orchestrate'),{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({request: ex?ex.prompt:raw})});
+  if(!(await postRunRequest('/api/orchestrate',{request: ex?ex.prompt:raw}))) return;
   promptEl.value=''; hideCmdMenu();
 }
 // ---- slash-command autocomplete: a single reused #cmdMenu popover, anchored above whichever chat
@@ -488,7 +522,7 @@ async function summarizeChat(agentEl){
   if(isChatBusy()) return;
   const agent=(agentEl||$('#tabRunAgent'))?.value;
   flash();
-  await fetch(withProject('/api/chat/summarize'),{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({agent})});
+  await postRunRequest('/api/chat/summarize',{agent});
 }
 async function clearChat(){
   flash();
@@ -1060,6 +1094,42 @@ function renderWfSuggest(){
   const cancel=el('button','btn',t('workflow.dismiss')); cancel.type='button'; cancel.addEventListener('click',closeWfSuggest);
   acts.append(applyBtn,cancel); box.append(acts);
 }
+// Personalize → a custom agent command set by config.json, not yet allowed on this machine (D76).
+function renderUntrustedRunners(){
+  const box=$('#setRunnersTrust'); if(!box) return;
+  const list=(!REMOTE && P && P.untrustedRunners) || [];
+  box.innerHTML=''; box.hidden=!list.length;
+  if(!list.length) return;
+  box.append(el('div','runner-trust-title',t('runners.title')), el('div','runner-trust-hint',t('runners.hint')));
+  list.forEach(r=>{
+    const row=el('div','runner-trust-row');
+    row.append(el('span','runner-trust-agent',r.agent), el('code','runner-trust-cmd',r.command));
+    const b=el('button','btn',t('runners.allow')); b.type='button';
+    b.addEventListener('click',async()=>{ b.disabled=true; flash(); await fetch(withProject('/api/runners/trust'),{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({agent:r.agent})}); scheduleLoad(); });
+    row.append(b); box.append(row);
+  });
+}
+// The project's framework files are older than the installed spectoflow (D77). Local only.
+const semverLess=(a,b)=>{ const x=String(a||'').split('.').map(Number), y=String(b||'').split('.').map(Number); for(let i=0;i<3;i++){ if((x[i]||0)!==(y[i]||0)) return (x[i]||0)<(y[i]||0); } return false; };
+let updateNote='';
+function renderUpdateBar(){
+  const bar=$('#updateBar'); if(!bar) return;
+  const stale=!REMOTE && P && P.version && P.kitVersion && semverLess(P.version,P.kitVersion);
+  bar.hidden=!stale && !updateNote;
+  $('#updateText').textContent=updateNote || (stale ? t('update.banner',{from:'v'+P.version,to:'v'+P.kitVersion}) : '');
+  $('#updateBtn').hidden=!stale;
+}
+async function updateProject(){
+  const b=$('#updateBtn'); b.disabled=true; flash();
+  try{
+    const r=await fetch(withProject('/api/project/update'),{method:'POST'});
+    const d=await r.json().catch(()=>({}));
+    if(!r.ok) throw new Error(d.error||'error');
+    updateNote=t('update.done',{n:d.refreshed})+(d.review&&d.review.length?' '+t('update.review',{n:d.review.length}):'');
+  }catch(e){ updateNote=t('update.error'); }
+  b.disabled=false; scheduleLoad();
+  setTimeout(()=>{ updateNote=''; renderUpdateBar(); },8000);
+}
 function wfDetailRow(k,v){ const r=el('div','wf-detail-row'); r.append(el('span','wf-detail-k',k), el('span','wf-detail-v',v)); return r; }
 function wfPopFill(pop, s, idx){
   const skill=(P.skills||[]).find(x=>x.name===s.skill);
@@ -1281,6 +1351,7 @@ function renderSettings(){
   setLangSelect(c.language||'en');
   setAgentSelects();
   const wfAuto=$('#setWorkflowAuto'); if(wfAuto) wfAuto.checked=!!c.workflowAutoEnable;
+  renderUntrustedRunners();
   // design switcher — options from the DESIGNS registry (designs.js)
   const dsel=$('#setDesign');
   if(dsel){
@@ -1475,7 +1546,7 @@ function renderCustomize(){
 async function czSubmit(kind,description,agent){
   const cfg=CZ_KINDS.find((c)=>c.kind===kind);
   const prompt=description?cfg.promptAdd(description):cfg.promptAuto;
-  await fetch(withProject('/api/run'),{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({prompt,agent})});
+  await postRunRequest('/api/run',{prompt,agent});
   const root=$('#czRoot'); if(root) root.dataset.open='';
   navigateTab('chat');
 }
@@ -2610,7 +2681,9 @@ $('#blAddCancel').addEventListener('click', closeBacklogAddForm);
 $('#blAddSubmit').addEventListener('click', submitBacklogAdd);
 $('#blAddTitle').addEventListener('keydown', e=>{ if(e.key==='Enter') submitBacklogAdd(); });
 // attention tab: add a note + filter chips
+$$('.chat-stop').forEach(b=>b.addEventListener('click',async()=>{ b.disabled=true; flash(); try{ await fetch(withProject('/api/run/stop'),{method:'POST'}); }finally{ setTimeout(()=>{ b.disabled=false; },800); } }));
 $('#wfAnalyzeBtn').addEventListener('click',analyzeWorkflow);
+$('#updateBtn').addEventListener('click',updateProject);
 $('#setWorkflowAuto').addEventListener('change',(e)=>{ if(P&&P.config) P.config.workflowAutoEnable=e.target.checked; saveSetting({workflowAutoEnable:e.target.checked}); });
 $('#brainAutoAdd').addEventListener('change',(e)=>brainAct(()=>brainCall('POST','/api/brain/settings',{autoAdd:e.target.checked})));
 $('#attnAddBtn').addEventListener('click',()=>{ const t=$('#attnInput'); const v=t.value.trim(); if(v){ addAttn(v); t.value=''; } });

package/lib/dashboard/public/i18n.js

@@ -90,6 +90,10 @@ en: {
   'drawer.agent':'Agent','drawer.skill':'Skill','drawer.file':'File · {rel}',
   'drawer.loading':'Loading…','drawer.loadError':'Could not load this file.','files.title':'Files','files.sub':'Browse the project\'s files — view Markdown & HTML, edit any text file, create new ones.','files.newFile':'+ File','files.newFolder':'+ Folder','files.pickFile':'Select a file to view it.','files.empty':'No files yet.','files.edit':'Edit','files.preview':'Preview','files.save':'Save','files.saved':'✓ saved','files.saveError':'Could not save this file.','files.loadError':'Could not load this file.','files.binary':'This file can\'t be previewed here (not text).','files.discardConfirm':'Discard unsaved changes?','files.newFilePrompt':'New file name (e.g. todo.md):','files.newFolderPrompt':'New folder name:','files.projectRoot':'project root','files.creatingIn':'Creating in: {path}','files.refresh':'Refresh','files.discard':'Discard','files.create':'Create',
   'notes.sub':'A freeform scratchpad for this project — Markdown, autosaved as you type. Only you (and whoever else opens this dashboard) can see it.','notes.saving':'Saving…',
+  'notify.done':'{project}: the agent finished','notify.failed':'{project}: the agent stopped with an error','notify.approval':'{project}: a step is waiting for your approval',
+  'update.banner':'This project uses spectoflow {from}; {to} is installed.','update.button':'Update the project','update.done':'Project updated: {n} framework file(s) refreshed.','update.review':'{n} file(s) you had edited: the new version is saved next to each as .new.','update.error':'Could not update the project.',
+  'chat.stop':'Stop',
+  'runners.title':'A custom command needs your OK','runners.hint':'This project’s config.json launches an agent with a command other than its default. It only runs once you allow it on this machine.','runners.allow':'Allow on this machine',
   'workflow.analyze':'Analyze the project','workflow.analyzeTitle':'Look at the project and suggest which steps fit it now','workflow.detected':'Detected: {type} · {phase}','workflow.type.app':'application','workflow.type.infra':'infrastructure','workflow.type.data':'data','workflow.phase.design':'design phase, no code yet','workflow.phase.build':'has code','workflow.matches':'Your workflow already matches the project.','workflow.apply':'Apply','workflow.dismiss':'Close','workflow.applied':'{n} step(s) updated.','workflow.analyzeError':'Could not analyze the project.','workflow.on':'on','workflow.off':'off','workflow.reason.always':'always useful','workflow.reason.design-no-code':'no code yet','workflow.reason.has-code':'the project has code','workflow.reason.has-tests':'the project has tests','workflow.reason.infra-no-tests':'infrastructure project with no tests','workflow.reason.data-quality':'data project — data quality tests','workflow.reason.has-integration-tests':'integration tests exist','workflow.reason.no-integration-tests':'no integration tests yet','workflow.reason.has-e2e-setup':'an end-to-end test setup exists','workflow.reason.no-e2e-setup':'no end-to-end test setup','settings.workflowAuto':'Let the agent enable workflow steps when needed','settings.workflowAutoHint':'Off: it asks you first. It never disables a step on its own.',
   'brain.sub':'What spectoflow has learned about you, shared by all your projects and given to your agent in every session. Add or fix anything.','brain.autoAdd':'Add what the agent learns directly','brain.autoAddOn':'New facts are added right away — you can fix or delete them here.','brain.autoAddOff':'New facts wait in “To confirm” until you accept them.','brain.agents':'Reachable by:','brain.agentWired':'Connected: this agent reads and grows your second brain','brain.agentNotWired':'Not connected yet','brain.setupHint':'Run {cmd} to connect the others.','brain.noAgents':'No coding agent found on this machine.','brain.tooMany':'{n} entries — all of it is given to your agent in every session. Consider removing what is no longer true.','brain.empty':'Nothing yet. As you work, your agent notes durable things about you here — your role, your preferences, how you like to work, what to avoid. You can also add them yourself below.','brain.toConfirm':'To confirm','brain.confirm':'Confirm','brain.confirmAll':'Confirm all','brain.reject':'Reject','brain.cat.profile':'Profile','brain.cat.preferences':'Preferences','brain.cat.workflow':'Working style','brain.cat.avoid':'Avoid','brain.catHint.profile':'Who you are: role, skills, context.','brain.catHint.preferences':'Tools, languages, code style, formats you prefer.','brain.catHint.workflow':'How you like the agent to work with you.','brain.catHint.avoid':'What the agent should never do.','brain.catEmpty':'Nothing here yet.','brain.addPlaceholder':'Add a fact…','brain.duplicate':'Already in your second brain.','brain.byAgent':'learned by the agent','brain.byYou':'added by you','brain.path':'Stored in {path} — never inside a project.','brain.error':'Could not reach your second brain.',
   'meeting.sub':'One dated note per day for this project — write it yourself, or have the active agent draft it from recent tasks and chat activity.','meeting.history':'History','meeting.today':'today','meeting.generate':'Generate','meeting.generateTitle':'Generate today\'s note from recent activity','meeting.overwriteWarn':'This will overwrite today\'s note.','meeting.generateAnyway':'Generate anyway',
@@ -211,6 +215,10 @@ fr: {
   'drawer.agent':'Agent','drawer.skill':'Compétence','drawer.file':'Fichier · {rel}',
   'drawer.loading':'Chargement…','drawer.loadError':'Impossible de charger ce fichier.','files.title':'Fichiers','files.sub':'Parcourez les fichiers du projet — visualisez Markdown et HTML, modifiez tout fichier texte, créez-en de nouveaux.','files.newFile':'+ Fichier','files.newFolder':'+ Dossier','files.pickFile':'Sélectionnez un fichier pour l’afficher.','files.empty':'Aucun fichier pour l’instant.','files.edit':'Modifier','files.preview':'Aperçu','files.save':'Enregistrer','files.saved':'✓ enregistré','files.saveError':'Impossible d’enregistrer ce fichier.','files.loadError':'Impossible de charger ce fichier.','files.binary':'Ce fichier ne peut pas être prévisualisé ici (non textuel).','files.discardConfirm':'Abandonner les modifications non enregistrées ?','files.newFilePrompt':'Nom du nouveau fichier (ex. todo.md) :','files.newFolderPrompt':'Nom du nouveau dossier :','files.projectRoot':'racine du projet','files.creatingIn':'Création dans : {path}','files.refresh':'Actualiser','files.discard':'Annuler','files.create':'Créer',
   'notes.sub':'Un bloc-note libre pour ce projet — Markdown, enregistré automatiquement au fil de la frappe. Visible uniquement par vous (et quiconque ouvre ce tableau de bord).','notes.saving':'Enregistrement…',
+  'notify.done':'{project} : l’agent a terminé','notify.failed':'{project} : l’agent s’est arrêté sur une erreur','notify.approval':'{project} : une étape attend votre approbation',
+  'update.banner':'Ce projet utilise spectoflow {from} ; {to} est installé.','update.button':'Mettre à jour le projet','update.done':'Projet mis à jour : {n} fichier(s) du framework rafraîchi(s).','update.review':'{n} fichier(s) que vous aviez modifié(s) : la nouvelle version est enregistrée à côté en .new.','update.error':'Impossible de mettre à jour le projet.',
+  'chat.stop':'Arrêter',
+  'runners.title':'Une commande personnalisée attend votre accord','runners.hint':'Le config.json de ce projet lance un agent avec une commande différente de celle par défaut. Elle ne s’exécute qu’une fois autorisée sur cette machine.','runners.allow':'Autoriser sur cette machine',
   'workflow.analyze':'Analyser le projet','workflow.analyzeTitle':'Examiner le projet et proposer les étapes qui lui conviennent maintenant','workflow.detected':'Détecté : {type} · {phase}','workflow.type.app':'application','workflow.type.infra':'infrastructure','workflow.type.data':'données','workflow.phase.design':'phase de conception, pas encore de code','workflow.phase.build':'contient du code','workflow.matches':'Votre workflow correspond déjà au projet.','workflow.apply':'Appliquer','workflow.dismiss':'Fermer','workflow.applied':'{n} étape(s) mise(s) à jour.','workflow.analyzeError':'Impossible d’analyser le projet.','workflow.on':'activée','workflow.off':'désactivée','workflow.reason.always':'toujours utile','workflow.reason.design-no-code':'pas encore de code','workflow.reason.has-code':'le projet contient du code','workflow.reason.has-tests':'le projet a des tests','workflow.reason.infra-no-tests':'projet d’infrastructure sans tests','workflow.reason.data-quality':'projet de données — tests de qualité des données','workflow.reason.has-integration-tests':'des tests d’intégration existent','workflow.reason.no-integration-tests':'pas encore de tests d’intégration','workflow.reason.has-e2e-setup':'une configuration de tests de bout en bout existe','workflow.reason.no-e2e-setup':'pas de configuration de tests de bout en bout','settings.workflowAuto':'Laisser l’agent activer les étapes du workflow quand il faut','settings.workflowAutoHint':'Désactivé : il vous demande d’abord. Il ne désactive jamais une étape de lui-même.',
   'brain.sub':'Ce que spectoflow a appris sur vous, partagé par tous vos projets et donné à votre agent à chaque session. Ajoutez ou corrigez ce que vous voulez.','brain.autoAdd':'Ajouter directement ce que l’agent apprend','brain.autoAddOn':'Les nouveaux faits sont ajoutés tout de suite — vous pouvez les corriger ou les supprimer ici.','brain.autoAddOff':'Les nouveaux faits attendent dans « À confirmer » jusqu’à votre validation.','brain.agents':'Accessible par :','brain.agentWired':'Connecté : cet agent lit et enrichit votre second cerveau','brain.agentNotWired':'Pas encore connecté','brain.setupHint':'Lancez {cmd} pour connecter les autres.','brain.noAgents':'Aucun agent de code trouvé sur cette machine.','brain.tooMany':'{n} entrées — tout est donné à votre agent à chaque session. Pensez à retirer ce qui n’est plus vrai.','brain.empty':'Rien pour l’instant. Au fil de votre travail, votre agent note ici des choses durables sur vous — votre rôle, vos préférences, votre façon de travailler, ce qu’il faut éviter. Vous pouvez aussi les ajouter vous-même ci-dessous.','brain.toConfirm':'À confirmer','brain.confirm':'Confirmer','brain.confirmAll':'Tout confirmer','brain.reject':'Rejeter','brain.cat.profile':'Profil','brain.cat.preferences':'Préférences','brain.cat.workflow':'Façon de travailler','brain.cat.avoid':'À éviter','brain.catHint.profile':'Qui vous êtes : rôle, compétences, contexte.','brain.catHint.preferences':'Outils, langues, style de code, formats que vous préférez.','brain.catHint.workflow':'Comment vous aimez que l’agent travaille avec vous.','brain.catHint.avoid':'Ce que l’agent ne doit jamais faire.','brain.catEmpty':'Rien ici pour l’instant.','brain.addPlaceholder':'Ajouter un fait…','brain.duplicate':'Déjà dans votre second cerveau.','brain.byAgent':'appris par l’agent','brain.byYou':'ajouté par vous','brain.path':'Stocké dans {path} — jamais dans un projet.','brain.error':'Impossible d’accéder à votre second cerveau.',
   'meeting.sub':'Une note datée par jour pour ce projet — rédigez-la vous-même, ou laissez l’agent actif la rédiger à partir des tâches récentes et du chat.','meeting.history':'Historique','meeting.today':'aujourd’hui','meeting.generate':'Générer','meeting.generateTitle':'Générer la note du jour à partir de l’activité récente','meeting.overwriteWarn':'Cela va écraser la note d’aujourd’hui.','meeting.generateAnyway':'Générer quand même',
@@ -332,6 +340,10 @@ es: {
   'drawer.agent':'Agente','drawer.skill':'Habilidad','drawer.file':'Archivo · {rel}',
   'drawer.loading':'Cargando…','drawer.loadError':'No se pudo cargar este archivo.','files.title':'Archivos','files.sub':'Explora los archivos del proyecto — visualiza Markdown y HTML, edita cualquier archivo de texto, crea otros nuevos.','files.newFile':'+ Archivo','files.newFolder':'+ Carpeta','files.pickFile':'Selecciona un archivo para verlo.','files.empty':'Aún no hay archivos.','files.edit':'Editar','files.preview':'Vista previa','files.save':'Guardar','files.saved':'✓ guardado','files.saveError':'No se pudo guardar este archivo.','files.loadError':'No se pudo cargar este archivo.','files.binary':'Este archivo no se puede previsualizar aquí (no es texto).','files.discardConfirm':'¿Descartar los cambios sin guardar?','files.newFilePrompt':'Nombre del nuevo archivo (p. ej. todo.md):','files.newFolderPrompt':'Nombre de la nueva carpeta:','files.projectRoot':'raíz del proyecto','files.creatingIn':'Creando en: {path}','files.refresh':'Actualizar','files.discard':'Descartar','files.create':'Crear',
   'notes.sub':'Un bloc de notas libre para este proyecto — Markdown, guardado automáticamente mientras escribes. Solo tú (y quien más abra este panel) puedes verlo.','notes.saving':'Guardando…',
+  'notify.done':'{project}: el agente ha terminado','notify.failed':'{project}: el agente se detuvo con un error','notify.approval':'{project}: un paso espera tu aprobación',
+  'update.banner':'Este proyecto usa spectoflow {from}; está instalado {to}.','update.button':'Actualizar el proyecto','update.done':'Proyecto actualizado: {n} archivo(s) del framework renovado(s).','update.review':'{n} archivo(s) que habías editado: la nueva versión se guarda al lado como .new.','update.error':'No se pudo actualizar el proyecto.',
+  'chat.stop':'Detener',
+  'runners.title':'Un comando personalizado espera tu aprobación','runners.hint':'El config.json de este proyecto lanza un agente con un comando distinto del predeterminado. Solo se ejecuta cuando lo autorizas en esta máquina.','runners.allow':'Autorizar en esta máquina',
   'workflow.analyze':'Analizar el proyecto','workflow.analyzeTitle':'Examinar el proyecto y proponer los pasos que le convienen ahora','workflow.detected':'Detectado: {type} · {phase}','workflow.type.app':'aplicación','workflow.type.infra':'infraestructura','workflow.type.data':'datos','workflow.phase.design':'fase de diseño, aún sin código','workflow.phase.build':'tiene código','workflow.matches':'Tu workflow ya corresponde al proyecto.','workflow.apply':'Aplicar','workflow.dismiss':'Cerrar','workflow.applied':'{n} paso(s) actualizado(s).','workflow.analyzeError':'No se pudo analizar el proyecto.','workflow.on':'activado','workflow.off':'desactivado','workflow.reason.always':'siempre útil','workflow.reason.design-no-code':'aún no hay código','workflow.reason.has-code':'el proyecto tiene código','workflow.reason.has-tests':'el proyecto tiene tests','workflow.reason.infra-no-tests':'proyecto de infraestructura sin tests','workflow.reason.data-quality':'proyecto de datos — tests de calidad de datos','workflow.reason.has-integration-tests':'existen tests de integración','workflow.reason.no-integration-tests':'aún no hay tests de integración','workflow.reason.has-e2e-setup':'existe una configuración de tests end-to-end','workflow.reason.no-e2e-setup':'no hay configuración de tests end-to-end','settings.workflowAuto':'Dejar que el agente active pasos del workflow cuando haga falta','settings.workflowAutoHint':'Desactivado: te pregunta antes. Nunca desactiva un paso por su cuenta.',
   'brain.sub':'Lo que spectoflow ha aprendido sobre ti, compartido por todos tus proyectos y dado a tu agente en cada sesión. Añade o corrige lo que quieras.','brain.autoAdd':'Añadir directamente lo que aprende el agente','brain.autoAddOn':'Los nuevos datos se añaden al instante — puedes corregirlos o borrarlos aquí.','brain.autoAddOff':'Los nuevos datos esperan en «Por confirmar» hasta que los aceptes.','brain.agents':'Accesible por:','brain.agentWired':'Conectado: este agente lee y amplía tu segundo cerebro','brain.agentNotWired':'Aún no conectado','brain.setupHint':'Ejecuta {cmd} para conectar los demás.','brain.noAgents':'No se encontró ningún agente de código en esta máquina.','brain.tooMany':'{n} entradas — todo se da a tu agente en cada sesión. Plantéate quitar lo que ya no sea cierto.','brain.empty':'Nada todavía. Mientras trabajas, tu agente anota aquí cosas duraderas sobre ti — tu rol, tus preferencias, cómo te gusta trabajar, qué evitar. También puedes añadirlas tú abajo.','brain.toConfirm':'Por confirmar','brain.confirm':'Confirmar','brain.confirmAll':'Confirmar todo','brain.reject':'Rechazar','brain.cat.profile':'Perfil','brain.cat.preferences':'Preferencias','brain.cat.workflow':'Forma de trabajar','brain.cat.avoid':'Evitar','brain.catHint.profile':'Quién eres: rol, habilidades, contexto.','brain.catHint.preferences':'Herramientas, idiomas, estilo de código, formatos que prefieres.','brain.catHint.workflow':'Cómo te gusta que el agente trabaje contigo.','brain.catHint.avoid':'Lo que el agente nunca debe hacer.','brain.catEmpty':'Nada aquí todavía.','brain.addPlaceholder':'Añadir un dato…','brain.duplicate':'Ya está en tu segundo cerebro.','brain.byAgent':'aprendido por el agente','brain.byYou':'añadido por ti','brain.path':'Guardado en {path} — nunca dentro de un proyecto.','brain.error':'No se pudo acceder a tu segundo cerebro.',
   'meeting.sub':'Una nota fechada por día para este proyecto — escríbela tú mismo, o deja que el agente activo la redacte a partir de las tareas y el chat recientes.','meeting.history':'Historial','meeting.today':'hoy','meeting.generate':'Generar','meeting.generateTitle':'Generar la nota de hoy a partir de la actividad reciente','meeting.overwriteWarn':'Esto sobrescribirá la nota de hoy.','meeting.generateAnyway':'Generar de todos modos',
@@ -453,6 +465,10 @@ de: {
   'drawer.agent':'Agent','drawer.skill':'Skill','drawer.file':'Datei · {rel}',
   'drawer.loading':'Lädt…','drawer.loadError':'Diese Datei konnte nicht geladen werden.','files.title':'Dateien','files.sub':'Durchsuche die Projektdateien — Markdown & HTML ansehen, jede Textdatei bearbeiten, neue erstellen.','files.newFile':'+ Datei','files.newFolder':'+ Ordner','files.pickFile':'Wähle eine Datei aus, um sie anzuzeigen.','files.empty':'Noch keine Dateien.','files.edit':'Bearbeiten','files.preview':'Vorschau','files.save':'Speichern','files.saved':'✓ gespeichert','files.saveError':'Diese Datei konnte nicht gespeichert werden.','files.loadError':'Diese Datei konnte nicht geladen werden.','files.binary':'Diese Datei kann hier nicht angezeigt werden (kein Text).','files.discardConfirm':'Nicht gespeicherte Änderungen verwerfen?','files.newFilePrompt':'Name der neuen Datei (z. B. todo.md):','files.newFolderPrompt':'Name des neuen Ordners:','files.projectRoot':'Projektstamm','files.creatingIn':'Erstellen in: {path}','files.refresh':'Aktualisieren','files.discard':'Verwerfen','files.create':'Erstellen',
   'notes.sub':'Ein freier Notizblock für dieses Projekt — Markdown, automatisch gespeichert während der Eingabe. Nur du (und wer sonst dieses Dashboard öffnet) siehst ihn.','notes.saving':'Speichert…',
+  'notify.done':'{project}: der Agent ist fertig','notify.failed':'{project}: der Agent hat mit einem Fehler aufgehört','notify.approval':'{project}: ein Schritt wartet auf deine Freigabe',
+  'update.banner':'Dieses Projekt nutzt spectoflow {from}; installiert ist {to}.','update.button':'Projekt aktualisieren','update.done':'Projekt aktualisiert: {n} Framework-Datei(en) erneuert.','update.review':'{n} von dir bearbeitete Datei(en): die neue Version liegt jeweils daneben als .new.','update.error':'Das Projekt konnte nicht aktualisiert werden.',
+  'chat.stop':'Stoppen',
+  'runners.title':'Ein eigener Befehl braucht deine Zustimmung','runners.hint':'Die config.json dieses Projekts startet einen Agenten mit einem anderen als dem Standardbefehl. Er läuft erst, wenn du ihn auf diesem Rechner erlaubst.','runners.allow':'Auf diesem Rechner erlauben',
   'workflow.analyze':'Projekt analysieren','workflow.analyzeTitle':'Das Projekt ansehen und vorschlagen, welche Schritte jetzt passen','workflow.detected':'Erkannt: {type} · {phase}','workflow.type.app':'Anwendung','workflow.type.infra':'Infrastruktur','workflow.type.data':'Daten','workflow.phase.design':'Entwurfsphase, noch kein Code','workflow.phase.build':'enthält Code','workflow.matches':'Dein Workflow passt bereits zum Projekt.','workflow.apply':'Anwenden','workflow.dismiss':'Schließen','workflow.applied':'{n} Schritt(e) aktualisiert.','workflow.analyzeError':'Das Projekt konnte nicht analysiert werden.','workflow.on':'an','workflow.off':'aus','workflow.reason.always':'immer nützlich','workflow.reason.design-no-code':'noch kein Code','workflow.reason.has-code':'das Projekt enthält Code','workflow.reason.has-tests':'das Projekt hat Tests','workflow.reason.infra-no-tests':'Infrastrukturprojekt ohne Tests','workflow.reason.data-quality':'Datenprojekt — Datenqualitätstests','workflow.reason.has-integration-tests':'Integrationstests vorhanden','workflow.reason.no-integration-tests':'noch keine Integrationstests','workflow.reason.has-e2e-setup':'ein End-to-End-Test-Setup ist vorhanden','workflow.reason.no-e2e-setup':'kein End-to-End-Test-Setup','settings.workflowAuto':'Den Agenten Workflow-Schritte bei Bedarf aktivieren lassen','settings.workflowAutoHint':'Aus: er fragt dich vorher. Er deaktiviert nie selbst einen Schritt.',
   'brain.sub':'Was spectoflow über dich gelernt hat — geteilt von all deinen Projekten und deinem Agenten in jeder Sitzung mitgegeben. Ergänze oder korrigiere, was du willst.','brain.autoAdd':'Was der Agent lernt, direkt hinzufügen','brain.autoAddOn':'Neue Fakten werden sofort hinzugefügt — du kannst sie hier korrigieren oder löschen.','brain.autoAddOff':'Neue Fakten warten unter „Zu bestätigen“, bis du sie annimmst.','brain.agents':'Erreichbar für:','brain.agentWired':'Verbunden: dieser Agent liest und erweitert dein zweites Gehirn','brain.agentNotWired':'Noch nicht verbunden','brain.setupHint':'Führe {cmd} aus, um die anderen zu verbinden.','brain.noAgents':'Kein Coding-Agent auf diesem Rechner gefunden.','brain.tooMany':'{n} Einträge — alles wird deinem Agenten in jeder Sitzung mitgegeben. Entferne, was nicht mehr stimmt.','brain.empty':'Noch nichts. Während du arbeitest, notiert dein Agent hier Dauerhaftes über dich — deine Rolle, deine Vorlieben, wie du gern arbeitest, was zu vermeiden ist. Du kannst sie auch unten selbst hinzufügen.','brain.toConfirm':'Zu bestätigen','brain.confirm':'Bestätigen','brain.confirmAll':'Alle bestätigen','brain.reject':'Ablehnen','brain.cat.profile':'Profil','brain.cat.preferences':'Vorlieben','brain.cat.workflow':'Arbeitsweise','brain.cat.avoid':'Vermeiden','brain.catHint.profile':'Wer du bist: Rolle, Fähigkeiten, Kontext.','brain.catHint.preferences':'Werkzeuge, Sprachen, Code-Stil, Formate, die du bevorzugst.','brain.catHint.workflow':'Wie der Agent mit dir arbeiten soll.','brain.catHint.avoid':'Was der Agent nie tun soll.','brain.catEmpty':'Hier ist noch nichts.','brain.addPlaceholder':'Fakt hinzufügen…','brain.duplicate':'Schon in deinem zweiten Gehirn.','brain.byAgent':'vom Agenten gelernt','brain.byYou':'von dir hinzugefügt','brain.path':'Gespeichert in {path} — nie in einem Projekt.','brain.error':'Dein zweites Gehirn ist nicht erreichbar.',
   'meeting.sub':'Eine datierte Notiz pro Tag für dieses Projekt — schreibe sie selbst, oder lass sie vom aktiven Agenten aus den letzten Aufgaben und dem Chat entwerfen.','meeting.history':'Verlauf','meeting.today':'heute','meeting.generate':'Generieren','meeting.generateTitle':'Die heutige Notiz aus der letzten Aktivität generieren','meeting.overwriteWarn':'Dies überschreibt die heutige Notiz.','meeting.generateAnyway':'Trotzdem generieren',
@@ -574,6 +590,10 @@ pt: {
   'drawer.agent':'Agente','drawer.skill':'Habilidade','drawer.file':'Ficheiro · {rel}',
   'drawer.loading':'A carregar…','drawer.loadError':'Não foi possível carregar este ficheiro.','files.title':'Ficheiros','files.sub':'Percorra os ficheiros do projeto — veja Markdown e HTML, edite qualquer ficheiro de texto, crie novos.','files.newFile':'+ Ficheiro','files.newFolder':'+ Pasta','files.pickFile':'Selecione um ficheiro para o ver.','files.empty':'Ainda não há ficheiros.','files.edit':'Editar','files.preview':'Pré-visualizar','files.save':'Guardar','files.saved':'✓ guardado','files.saveError':'Não foi possível guardar este ficheiro.','files.loadError':'Não foi possível carregar este ficheiro.','files.binary':'Este ficheiro não pode ser pré-visualizado aqui (não é texto).','files.discardConfirm':'Descartar alterações não guardadas?','files.newFilePrompt':'Nome do novo ficheiro (ex. todo.md):','files.newFolderPrompt':'Nome da nova pasta:','files.projectRoot':'raiz do projeto','files.creatingIn':'A criar em: {path}','files.refresh':'Atualizar','files.discard':'Descartar','files.create':'Criar',
   'notes.sub':'Um bloco de notas livre para este projeto — Markdown, guardado automaticamente enquanto escreve. Só você (e quem mais abrir este painel) o vê.','notes.saving':'A guardar…',
+  'notify.done':'{project}: o agente terminou','notify.failed':'{project}: o agente parou com um erro','notify.approval':'{project}: um passo aguarda a sua aprovação',
+  'update.banner':'Este projeto usa spectoflow {from}; está instalado {to}.','update.button':'Atualizar o projeto','update.done':'Projeto atualizado: {n} ficheiro(s) do framework renovado(s).','update.review':'{n} ficheiro(s) que tinha editado: a nova versão fica ao lado como .new.','update.error':'Não foi possível atualizar o projeto.',
+  'chat.stop':'Parar',
+  'runners.title':'Um comando personalizado aguarda a sua aprovação','runners.hint':'O config.json deste projeto inicia um agente com um comando diferente do predefinido. Só é executado depois de o autorizar nesta máquina.','runners.allow':'Autorizar nesta máquina',
   'workflow.analyze':'Analisar o projeto','workflow.analyzeTitle':'Examinar o projeto e propor os passos que lhe convêm agora','workflow.detected':'Detetado: {type} · {phase}','workflow.type.app':'aplicação','workflow.type.infra':'infraestrutura','workflow.type.data':'dados','workflow.phase.design':'fase de conceção, ainda sem código','workflow.phase.build':'tem código','workflow.matches':'O seu workflow já corresponde ao projeto.','workflow.apply':'Aplicar','workflow.dismiss':'Fechar','workflow.applied':'{n} passo(s) atualizado(s).','workflow.analyzeError':'Não foi possível analisar o projeto.','workflow.on':'ativado','workflow.off':'desativado','workflow.reason.always':'sempre útil','workflow.reason.design-no-code':'ainda sem código','workflow.reason.has-code':'o projeto tem código','workflow.reason.has-tests':'o projeto tem testes','workflow.reason.infra-no-tests':'projeto de infraestrutura sem testes','workflow.reason.data-quality':'projeto de dados — testes de qualidade de dados','workflow.reason.has-integration-tests':'existem testes de integração','workflow.reason.no-integration-tests':'ainda sem testes de integração','workflow.reason.has-e2e-setup':'existe uma configuração de testes ponta a ponta','workflow.reason.no-e2e-setup':'sem configuração de testes ponta a ponta','settings.workflowAuto':'Deixar o agente ativar passos do workflow quando necessário','settings.workflowAutoHint':'Desativado: pergunta-lhe primeiro. Nunca desativa um passo por conta própria.',
   'brain.sub':'O que o spectoflow aprendeu sobre si, partilhado por todos os seus projetos e dado ao seu agente em cada sessão. Acrescente ou corrija o que quiser.','brain.autoAdd':'Adicionar diretamente o que o agente aprende','brain.autoAddOn':'Os novos factos são adicionados de imediato — pode corrigi-los ou apagá-los aqui.','brain.autoAddOff':'Os novos factos esperam em «A confirmar» até os aceitar.','brain.agents':'Acessível por:','brain.agentWired':'Ligado: este agente lê e enriquece o seu segundo cérebro','brain.agentNotWired':'Ainda não ligado','brain.setupHint':'Execute {cmd} para ligar os outros.','brain.noAgents':'Nenhum agente de código encontrado nesta máquina.','brain.tooMany':'{n} entradas — tudo é dado ao seu agente em cada sessão. Pense em retirar o que já não é verdade.','brain.empty':'Ainda nada. À medida que trabalha, o seu agente anota aqui coisas duradouras sobre si — o seu papel, as suas preferências, como gosta de trabalhar, o que evitar. Também as pode adicionar abaixo.','brain.toConfirm':'A confirmar','brain.confirm':'Confirmar','brain.confirmAll':'Confirmar tudo','brain.reject':'Rejeitar','brain.cat.profile':'Perfil','brain.cat.preferences':'Preferências','brain.cat.workflow':'Forma de trabalhar','brain.cat.avoid':'A evitar','brain.catHint.profile':'Quem é: papel, competências, contexto.','brain.catHint.preferences':'Ferramentas, línguas, estilo de código, formatos que prefere.','brain.catHint.workflow':'Como gosta que o agente trabalhe consigo.','brain.catHint.avoid':'O que o agente nunca deve fazer.','brain.catEmpty':'Ainda nada aqui.','brain.addPlaceholder':'Adicionar um facto…','brain.duplicate':'Já está no seu segundo cérebro.','brain.byAgent':'aprendido pelo agente','brain.byYou':'adicionado por si','brain.path':'Guardado em {path} — nunca dentro de um projeto.','brain.error':'Não foi possível aceder ao seu segundo cérebro.',
   'meeting.sub':'Uma nota datada por dia para este projeto — escreva-a você mesmo, ou deixe o agente ativo redigi-la a partir das tarefas e do chat recentes.','meeting.history':'Histórico','meeting.today':'hoje','meeting.generate':'Gerar','meeting.generateTitle':'Gerar a nota de hoje a partir da atividade recente','meeting.overwriteWarn':'Isto vai substituir a nota de hoje.','meeting.generateAnyway':'Gerar mesmo assim',
@@ -695,6 +715,10 @@ it: {
   'drawer.agent':'Agente','drawer.skill':'Skill','drawer.file':'File · {rel}',
   'drawer.loading':'Caricamento…','drawer.loadError':'Impossibile caricare questo file.','files.title':'File','files.sub':'Sfoglia i file del progetto — visualizza Markdown e HTML, modifica qualsiasi file di testo, creane di nuovi.','files.newFile':'+ File','files.newFolder':'+ Cartella','files.pickFile':'Seleziona un file per visualizzarlo.','files.empty':'Nessun file ancora.','files.edit':'Modifica','files.preview':'Anteprima','files.save':'Salva','files.saved':'✓ salvato','files.saveError':'Impossibile salvare questo file.','files.loadError':'Impossibile caricare questo file.','files.binary':'Questo file non può essere visualizzato qui (non è testo).','files.discardConfirm':'Scartare le modifiche non salvate?','files.newFilePrompt':'Nome del nuovo file (es. todo.md):','files.newFolderPrompt':'Nome della nuova cartella:','files.projectRoot':'radice del progetto','files.creatingIn':'Creazione in: {path}','files.refresh':'Aggiorna','files.discard':'Scarta','files.create':'Crea',
   'notes.sub':'Un blocco note libero per questo progetto — Markdown, salvato automaticamente mentre scrivi. Solo tu (e chiunque altro apra questa dashboard) puoi vederlo.','notes.saving':'Salvataggio…',
+  'notify.done':'{project}: l’agente ha finito','notify.failed':'{project}: l’agente si è fermato con un errore','notify.approval':'{project}: un passo attende la tua approvazione',
+  'update.banner':'Questo progetto usa spectoflow {from}; è installato {to}.','update.button':'Aggiorna il progetto','update.done':'Progetto aggiornato: {n} file del framework rinnovati.','update.review':'{n} file che avevi modificato: la nuova versione è salvata accanto come .new.','update.error':'Impossibile aggiornare il progetto.',
+  'chat.stop':'Ferma',
+  'runners.title':'Un comando personalizzato attende la tua approvazione','runners.hint':'Il config.json di questo progetto avvia un agente con un comando diverso da quello predefinito. Viene eseguito solo dopo che lo autorizzi su questa macchina.','runners.allow':'Autorizza su questa macchina',
   'workflow.analyze':'Analizza il progetto','workflow.analyzeTitle':'Esaminare il progetto e proporre i passi adatti ora','workflow.detected':'Rilevato: {type} · {phase}','workflow.type.app':'applicazione','workflow.type.infra':'infrastruttura','workflow.type.data':'dati','workflow.phase.design':'fase di progettazione, ancora nessun codice','workflow.phase.build':'contiene codice','workflow.matches':'Il tuo workflow corrisponde già al progetto.','workflow.apply':'Applica','workflow.dismiss':'Chiudi','workflow.applied':'{n} passo/i aggiornato/i.','workflow.analyzeError':'Impossibile analizzare il progetto.','workflow.on':'attivo','workflow.off':'disattivo','workflow.reason.always':'sempre utile','workflow.reason.design-no-code':'ancora nessun codice','workflow.reason.has-code':'il progetto contiene codice','workflow.reason.has-tests':'il progetto ha dei test','workflow.reason.infra-no-tests':'progetto di infrastruttura senza test','workflow.reason.data-quality':'progetto di dati — test di qualità dei dati','workflow.reason.has-integration-tests':'esistono test di integrazione','workflow.reason.no-integration-tests':'ancora nessun test di integrazione','workflow.reason.has-e2e-setup':'esiste una configurazione di test end-to-end','workflow.reason.no-e2e-setup':'nessuna configurazione di test end-to-end','settings.workflowAuto':'Lascia che l’agente attivi i passi del workflow quando serve','settings.workflowAutoHint':'Disattivato: ti chiede prima. Non disattiva mai un passo da solo.',
   'brain.sub':'Ciò che spectoflow ha imparato su di te, condiviso da tutti i tuoi progetti e dato al tuo agente in ogni sessione. Aggiungi o correggi ciò che vuoi.','brain.autoAdd':'Aggiungi direttamente ciò che l’agente impara','brain.autoAddOn':'I nuovi fatti vengono aggiunti subito — puoi correggerli o eliminarli qui.','brain.autoAddOff':'I nuovi fatti attendono in «Da confermare» finché non li accetti.','brain.agents':'Raggiungibile da:','brain.agentWired':'Collegato: questo agente legge e arricchisce il tuo secondo cervello','brain.agentNotWired':'Non ancora collegato','brain.setupHint':'Esegui {cmd} per collegare gli altri.','brain.noAgents':'Nessun agente di programmazione trovato su questa macchina.','brain.tooMany':'{n} voci — tutto viene dato al tuo agente in ogni sessione. Valuta di rimuovere ciò che non è più vero.','brain.empty':'Ancora niente. Mentre lavori, il tuo agente annota qui cose durature su di te — il tuo ruolo, le tue preferenze, come ti piace lavorare, cosa evitare. Puoi anche aggiungerle tu qui sotto.','brain.toConfirm':'Da confermare','brain.confirm':'Conferma','brain.confirmAll':'Conferma tutto','brain.reject':'Rifiuta','brain.cat.profile':'Profilo','brain.cat.preferences':'Preferenze','brain.cat.workflow':'Modo di lavorare','brain.cat.avoid':'Da evitare','brain.catHint.profile':'Chi sei: ruolo, competenze, contesto.','brain.catHint.preferences':'Strumenti, lingue, stile di codice, formati che preferisci.','brain.catHint.workflow':'Come ti piace che l’agente lavori con te.','brain.catHint.avoid':'Ciò che l’agente non deve mai fare.','brain.catEmpty':'Ancora niente qui.','brain.addPlaceholder':'Aggiungi un fatto…','brain.duplicate':'Già nel tuo secondo cervello.','brain.byAgent':'imparato dall’agente','brain.byYou':'aggiunto da te','brain.path':'Salvato in {path} — mai dentro un progetto.','brain.error':'Impossibile raggiungere il tuo secondo cervello.',
   'meeting.sub':'Una nota datata al giorno per questo progetto — scrivila tu stesso, oppure lascia che l’agente attivo la scriva a partire dalle attività e dalla chat recenti.','meeting.history':'Cronologia','meeting.today':'oggi','meeting.generate':'Genera','meeting.generateTitle':'Genera la nota di oggi dall’attività recente','meeting.overwriteWarn':'Questo sovrascriverà la nota di oggi.','meeting.generateAnyway':'Genera comunque',

package/lib/dashboard/public/index.html

@@ -79,6 +79,7 @@
   </header>
 
   <div class="offline-bar" id="offlineBar" hidden><span class="offline-dot"></span><span id="offlineText"></span></div>
+  <div class="update-bar" id="updateBar" hidden><span id="updateText"></span> <button class="btn btn-xs" id="updateBtn" type="button" data-i18n="update.button">Update the project</button></div>
 
   <main class="stage">
     <!-- BOARD -->
@@ -358,7 +359,7 @@
           </div>
         </div>
         <p class="chat-warn" data-i18n-html="chat.warn">⚠ Launches a real agent (<code>config.json → runners</code>) that can modify files &amp; run commands.</p>
-        <p class="chat-status" id="tabChatStatus" hidden><span class="spinner" aria-hidden="true"></span><span data-i18n="chat.running">Agent running…</span></p>
+        <p class="chat-status" id="tabChatStatus" hidden><span class="spinner" aria-hidden="true"></span><span data-i18n="chat.running">Agent running…</span> <button class="btn btn-xs chat-stop" type="button" data-i18n="chat.stop">Stop</button></p>
       </div>
     </section>
 
@@ -393,6 +394,7 @@
               <select id="setAgent" class="settings-select"></select>
               <span class="settings-field-hint is-empty" id="setAgentHint" data-i18n="topbar.agent.none" hidden>No agent found</span>
             </label>
+            <div class="runner-trust" id="setRunnersTrust" hidden></div>
             <label class="settings-field">
               <span class="settings-field-label" data-i18n="field.mode">Autonomy mode</span>
               <select id="setMode" class="settings-select">
@@ -498,7 +500,7 @@
       <button id="orchBtn" class="btn chat-send" data-i18n-title="chat.orchestrateTitle" data-i18n="action.orchestrate" title="Walk the enabled workflow">Orchestrate</button>
     </div>
     <p class="chat-warn" data-i18n-html="chat.warn">⚠ Launches a real agent (<code>config.json → runners</code>) that can modify files &amp; run commands.</p>
-    <p class="chat-status" id="widgetChatStatus" hidden><span class="spinner" aria-hidden="true"></span><span data-i18n="chat.running">Agent running…</span></p>
+    <p class="chat-status" id="widgetChatStatus" hidden><span class="spinner" aria-hidden="true"></span><span data-i18n="chat.running">Agent running…</span> <button class="btn btn-xs chat-stop" type="button" data-i18n="chat.stop">Stop</button></p>
   </div>
 
   <!-- Slash-command autocomplete popover, reused by both #runPrompt and #tabRunPrompt (app.js) -->

package/lib/dashboard/public/styles.css

@@ -659,6 +659,20 @@ body.booting .ring-svg circle:last-of-type { transform-origin:center; animation:
 .attn-edit { width:100%; min-height:64px; font-family:inherit; font-size:14px; padding:8px; border:1px solid var(--cool); border-radius:8px; background:var(--surface-2); color:var(--ink); box-sizing:border-box; }
 .attn-actions { display:flex; flex-wrap:wrap; gap:8px; margin-top:11px; }
 
+/* ---- Project framework older than the installed spectoflow (D77) ---- */
+.update-bar { display:flex; flex-wrap:wrap; align-items:center; gap:6px 10px; padding:7px 22px; font-size:12.5px; background:color-mix(in srgb,var(--signal) 12%,var(--surface)); border-bottom:1px solid var(--line); color:var(--ink); }
+.update-bar[hidden] { display:none; }
+
+/* ---- Custom agent commands awaiting the user's OK (D76) ---- */
+.runner-trust { border:1px solid color-mix(in srgb,var(--s-blocked) 45%,var(--line)); border-radius:var(--radius); padding:10px 12px; display:flex; flex-direction:column; gap:8px; }
+.runner-trust[hidden] { display:none; }
+.runner-trust-title { font-size:13px; font-weight:600; color:var(--s-blocked); }
+.runner-trust-hint { font-size:12px; color:var(--muted); }
+.runner-trust-row { display:flex; flex-wrap:wrap; align-items:center; gap:6px 10px; }
+.runner-trust-agent { font-weight:600; font-size:13px; }
+.runner-trust-cmd { font-family:var(--mono); font-size:11.5px; background:var(--surface-2); border:1px solid var(--line); border-radius:5px; padding:2px 6px; overflow-wrap:anywhere; flex:1 1 180px; }
+.msg.chat-error { color:var(--s-blocked); border:1px solid color-mix(in srgb,var(--s-blocked) 40%,var(--line)); border-radius:8px; padding:8px 10px; font-size:12.5px; white-space:pre-wrap; }
+
 /* ---- Workflow → Analyze the project ---- */
 .wf-analyze { display:flex; flex-direction:column; align-items:flex-start; gap:10px; margin:2px 0 16px; }
 .wf-suggest { align-self:stretch; border:1px solid var(--line); border-left:3px solid var(--signal); border-radius:var(--radius); background:var(--surface); padding:12px 14px; display:flex; flex-direction:column; gap:10px; max-width:820px; }

package/lib/dashboard/routes.js

@@ -23,12 +23,16 @@ const ROUTES = [
   ['GET', '/api/workflow/suggest', 'workflow.suggest', () => ({})],
   ['POST', '/api/workflow/apply', 'workflow.apply', (_u, b) => b],
   ['POST', '/api/run', 'run.start', (_u, b) => b],
+  ['POST', '/api/run/stop', 'run.stop', () => ({})],
   ['POST', '/api/chat/summarize', 'chat.summarize', (_u, b) => b],
   ['POST', '/api/meeting/generate', 'meeting.generate', (_u, b) => b],
   ['POST', '/api/chat/clear', 'chat.clear', () => ({})],
   ['POST', '/api/orchestrate', 'orchestrate.start', (_u, b) => b],
   ['POST', '/api/orchestrate/approve', 'orchestrate.approve', (_u, b) => b],
   ['POST', '/api/settings', 'settings.save', (_u, b) => b],
+  // Local only — deliberately absent from server/src/relay.js's OP_PERMISSIONS (D76, D77).
+  ['POST', '/api/project/update', 'project.update', () => ({})],
+  ['POST', '/api/runners/trust', 'runners.trust', (_u, b) => b],
   ['POST', '/api/attention', 'attention.add', (_u, b) => b],
   ['POST', /^\/api\/attention\/[^/]+\/promote$/, 'attention.promote', (_u, _b, p) => ({ id: seg(p, 3) })],
   ['PATCH', /^\/api\/attention\/[^/]+$/, 'attention.update', (_u, b, p) => ({ id: seg(p, 3), patch: b })],

package/lib/dashboard/runner.js

@@ -7,11 +7,13 @@
  *
  * Kept separate from the HTTP layer so the pipeline is unit-testable without a server.
  */
+const path = require('path');
 const { spawn } = require('child_process');
 const store = require('../store');
 const adapters = require('../adapters');
 const detect = require('../detect');
 const brain = require('../brain');
+const runnerTrust = require('../runner-trust');
 
 // The command to run `which`: config.json's own runners map first (an explicit user choice always
 // wins), falling back to the registry's default for a known, headless-capable, genuinely-installed
@@ -24,12 +26,39 @@ function resolveRunnerCommand(root, cfg, which, opts) {
   return null;
 }
 
+// Agent processes in flight, per project — so a stuck one can be stopped from the dashboard. Runs, summaries
+// and meeting notes all register here.
+const inFlight = new Map();
+function trackChild(root, child) {
+  const key = path.resolve(root);
+  if (!inFlight.has(key)) inFlight.set(key, new Set());
+  inFlight.get(key).add(child);
+  child.on('close', () => { const set = inFlight.get(key); if (set) set.delete(child); });
+}
+// Stop every agent process running for this project → how many were signalled.
+function stopRuns(root) {
+  const set = inFlight.get(path.resolve(root));
+  if (!set || !set.size) return 0;
+  for (const child of set) { try { child.kill(); } catch (_) {} }
+  return set.size;
+}
+// After a crash or restart, runs recorded as running can't be: mark them interrupted.
+function reconcileRunsOnBoot(root) {
+  const rt = store.readRuntime(root);
+  const stale = (rt.agents || []).filter((a) => a.status === 'running');
+  if (!stale.length) return 0;
+  const now = new Date().toISOString();
+  stale.forEach((a) => { a.status = 'interrupted'; a.endedAt = a.endedAt || now; });
+  store.writeRuntime(root, rt);
+  return stale.length;
+}
+
 function runStart(root, run) {
   const rt = store.readRuntime(root); rt.agents = rt.agents || []; rt.agents.push(run); store.writeRuntime(root, rt);
 }
-function runEnd(root, id, code) {
+function runEnd(root, id, code, signal) {
   const rt = store.readRuntime(root); const a = (rt.agents || []).find((x) => x.id === id);
-  if (a) { a.status = code === 0 ? 'done' : 'failed'; a.endedAt = new Date().toISOString(); }
+  if (a) { a.status = signal ? 'stopped' : code === 0 ? 'done' : 'failed'; a.endedAt = new Date().toISOString(); }
   store.writeRuntime(root, rt);
 }
 // Buffer a stream into whole lines; flush() emits any trailing partial line at close.
@@ -80,6 +109,8 @@ function startRun(root, { prompt, agent, logPrompt = true, display, learn = true
   const which = agent || cfg.agent || 'claude';
   const cmdStr = resolveRunnerCommand(root, cfg, which);
   if (!cmdStr) return { error: `No runner configured for "${which}".` };
+  const blocked = runnerTrust.blockedMessage(root, which, cmdStr);
+  if (blocked) return { error: blocked, untrustedRunner: { agent: which, command: cmdStr } };
   const parts = cmdStr.split(/\s+/).filter(Boolean);
   const runId = 'r' + Date.now().toString(36);
   const p = String(prompt).trim();
@@ -110,6 +141,7 @@ function startRun(root, { prompt, agent, logPrompt = true, display, learn = true
   // End the child's stdin immediately: a child that reads stdin (or a Windows pipe that
   // otherwise keeps 'close' from firing) can't stall the run waiting on input that never comes.
   try { child.stdin && child.stdin.end(); } catch {}
+  trackChild(root, child);
 
   const onLine = (line) => {
     // A learn line is swallowed either way. When recorded, it ALWAYS waits in "To confirm", whatever
@@ -132,14 +164,14 @@ function startRun(root, { prompt, agent, logPrompt = true, display, learn = true
   child.stdout && child.stdout.on('data', (d) => out.feed(d));
   child.stderr && child.stderr.on('data', (d) => err.feed(d));
   child.on('error', (e) => emit({ type: 'run-line', runId, chunk: 'error: ' + e.message + '\n' }));
-  child.on('close', (code) => {
+  child.on('close', (code, signal) => {
     out.flush(); err.flush();
-    runEnd(root, runId, code);
-    const sm = store.appendMessage(root, { role: which, kind: 'status', text: `finished (exit ${code})`, agent: which, runId });
+    runEnd(root, runId, code, signal);
+    const sm = store.appendMessage(root, { role: which, kind: 'status', text: signal ? 'stopped' : `finished (exit ${code})`, agent: which, runId });
     emit({ type: 'message', message: sm });
     emit({ type: 'run-end', runId, code }); emit({ type: 'change' });
   });
   return { runId, child };
 }
 
-module.exports = { startRun, resolveRunnerCommand, parseLearnLine };
+module.exports = { startRun, resolveRunnerCommand, parseLearnLine, trackChild, stopRuns, reconcileRunsOnBoot };

package/lib/dashboard/summarize.js

@@ -8,7 +8,8 @@
  */
 const { spawn } = require('child_process');
 const store = require('../store');
-const { resolveRunnerCommand } = require('./runner');
+const { resolveRunnerCommand, trackChild } = require('./runner');
+const runnerTrust = require('../runner-trust');
 
 const DEFAULT_LIMIT = 40;
 
@@ -26,6 +27,8 @@ function runSummarize(root, { agent } = {}, emit) {
   const which = agent || cfg.agent || 'claude';
   const cmdStr = resolveRunnerCommand(root, cfg, which);
   if (!cmdStr) return { error: `No runner configured for "${which}".` };
+  const blocked = runnerTrust.blockedMessage(root, which, cmdStr);
+  if (blocked) return { error: blocked, untrustedRunner: { agent: which, command: cmdStr } };
 
   const rt = store.readRuntime(root);
   const messages = (rt.messages || []).filter((m) => m.kind !== 'summary');
@@ -52,6 +55,7 @@ function runSummarize(root, { agent } = {}, emit) {
   let out = '';
   child.stdout && child.stdout.on('data', (d) => { out += d.toString(); });
   child.stderr && child.stderr.on('data', (d) => { out += d.toString(); });
+  trackChild(root, child);
   child.on('close', (code) => {
     const text = out.trim() || (code === 0 ? '(no output)' : `summarize failed (exit ${code})`);
     const summary = {

package/lib/runner-trust.js

@@ -0,0 +1,48 @@
+'use strict';
+/*
+ * A project's config.json can set the command that launches an agent (`runners`). That file is committed
+ * and can be written by others — a cloned repository, a teammate's change, a member of the online
+ * dashboard, or an agent run told to edit it — so a command that isn't the registry's default for that
+ * agent only runs once the user has allowed it on THIS machine. Trust lives outside every project
+ * (~/.spectoflow/trusted-runners.json) and is bound to the exact command: change it, and it must be
+ * allowed again. Default commands never ask. (D76)
+ */
+const fs = require('fs');
+const path = require('path');
+const globalConfig = require('./global-config');
+const adapters = require('./adapters');
+
+function storePath() { return path.join(globalConfig.homeDir(), 'trusted-runners.json'); }
+function readStore() { try { return JSON.parse(fs.readFileSync(storePath(), 'utf8')) || {}; } catch { return {}; } }
+function projectKey(root) { try { return fs.realpathSync(root); } catch { return path.resolve(root); } }
+
+const defaultRunner = (which) => { const a = adapters.knownAgents().find((x) => x.id === which); return a ? a.runner : null; };
+const isDefault = (which, cmd) => !!cmd && cmd === defaultRunner(which);
+
+function isTrusted(root, which, cmd) {
+  if (!cmd || isDefault(which, cmd)) return true;
+  const allowed = readStore()[projectKey(root)];
+  return !!(allowed && allowed[which] === cmd);
+}
+
+function trust(root, which, cmd) {
+  const store = readStore(), key = projectKey(root);
+  store[key] = { ...(store[key] || {}), [which]: cmd };
+  fs.mkdirSync(path.dirname(storePath()), { recursive: true });
+  fs.writeFileSync(storePath(), JSON.stringify(store, null, 2) + '\n', { mode: 0o600 });
+}
+
+// The project's runners that would be refused right now → [{ agent, command }].
+function untrusted(root, cfg) {
+  return Object.entries((cfg && cfg.runners) || {})
+    .filter(([which, cmd]) => typeof cmd === 'string' && !isTrusted(root, which, cmd))
+    .map(([agent, command]) => ({ agent, command }));
+}
+
+// null when `cmd` may run; otherwise the message explaining why not and how to allow it.
+function blockedMessage(root, which, cmd) {
+  if (isTrusted(root, which, cmd)) return null;
+  return `For your safety, this project's custom command for "${which}" needs your OK once on this machine before it runs: ${cmd} — allow it in Personalize → Agent & automation, or run: spectoflow runners allow ${which}`;
+}
+
+module.exports = { isTrusted, isDefault, trust, untrusted, blockedMessage, storePath };

package/lib/store.js

@@ -182,7 +182,8 @@ function addTask(projectRoot, { file, phase, title, owner, level, status } = {})
 }
 
 function writeAtomic(fp, content) {
-  const tmp = fp + '.tmp';
+  // Unique temp name: the hub and a CLI command can write the same file at the same moment.
+  const tmp = `${fp}.${process.pid}.${Math.random().toString(36).slice(2, 8)}.tmp`;
   fs.writeFileSync(tmp, content, 'utf8');
   fs.renameSync(tmp, fp);
 }
@@ -193,7 +194,10 @@ function readRuntime(projectRoot) {
   try { return JSON.parse(fs.readFileSync(runtimePath(projectRoot), 'utf8')); }
   catch { return { agents: [], tests: {}, messages: [], updatedAt: null }; }
 }
+// runtime.json is volatile and re-read on every dashboard refresh: keep it bounded. The newest entries win.
+const RUNTIME_LIMITS = { messages: 500, agents: 100 };
 function writeRuntime(projectRoot, rt) {
+  for (const [key, max] of Object.entries(RUNTIME_LIMITS)) if (Array.isArray(rt[key]) && rt[key].length > max) rt[key] = rt[key].slice(-max);
   rt.updatedAt = new Date().toISOString();
   writeAtomic(runtimePath(projectRoot), JSON.stringify(rt, null, 2) + '\n');
   return rt;
@@ -378,6 +382,6 @@ function readSkills(projectRoot) {
 module.exports = {
   parseTaskLine, buildTaskLine, parsePlan, readPlans, readSpecs, updateTaskLine, addTaskComment,
   nextTaskId, addTask,
-  readRuntime, writeRuntime, parseAgentLine, appendMessage, readConfig, readWorkflow, readProject,
+  readRuntime, writeRuntime, RUNTIME_LIMITS, parseAgentLine, appendMessage, readConfig, readWorkflow, readProject,
   readAgents, readSkills, readCustomDashboards, recordSnapshot, resolvePlansDir, resolveSpecsDir,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spectoflow",
-  "version": "0.31.0",
+  "version": "0.32.0",
   "description": "Agent-agnostic spec-driven development framework + real-time local control plane. Markdown artifacts, intent router, workflow-by-scope.",
   "keywords": [
     "spec-driven-development",