symbiot 0.33.0 → 0.34.0

package/README.md

@@ -12,17 +12,17 @@ symbiot            your last 7 days, written up   (same as: symbiot week)
 symbiot standup    yesterday + today, for standup
 symbiot todo       what's still on your plate
 symbiot app        open the visual app in your browser
-symbiot drift      what's out of sync / at risk across your repos
 symbiot push       write tasks into each repo for your coding agent
-symbiot mail       add the mail you sent to your write-ups (local, no API)
-symbiot models     recommend AI models for your hardware
-symbiot setup-local  set up a free local model (Ollama), one command
+symbiot drift      what's out of sync / at risk across your repos
 symbiot login      connect it to an AI (once)
 symbiot whoami     show how it's connected
 symbiot logout     forget saved credentials
 symbiot help
 ```
 
+A few newer extras (email, CI checks, local-model setup) are
+[experimental](#experimental).
+
 ## Install
 
 ```bash
@@ -54,7 +54,7 @@ Tabs:
   **no AI key**; reviews and suggestions use your chosen model. While the scan runs
   the Map shows its progress.
 - **Drift** — the [`symbiot drift`](#whats-out-of-sync-symbiot-drift) report, with
-  "fetch latest" and "check CI" toggles.
+  a "fetch latest" toggle (and an [experimental](#experimental) "check CI").
 - **Week / Standup / Todo** — the write-ups (these use your chosen AI).
 - **Tasks** — a checklist, grouped by kind (Fixes, Tests & CI, Docs, …). Filter by
   type or repo, then **Send to repos** to hand just those to your agent (see
@@ -71,9 +71,9 @@ Tabs:
   did** — files changed and commits made, read from git, whichever agent it was.
   When an agent leaves **questions, options or ideas** for you, they show up on its
   block (see [Questions from your agent](#questions-from-your-agent)).
-- **Settings** — your AI, the folders to scan, your agent command, your
-  [email](#your-email-without-an-api-symbiot-mail), model recommendations and a
-  one-click local model.
+- **Settings** — your AI, the folders to scan and your agent command, plus the
+  [experimental](#experimental) email, model recommendations and one-click local
+  model.
 
 **Stays current by itself.** The app checks npm for a newer Symbiot every couple of
 minutes (and whenever you come back to the window); the version you're on is shown
@@ -82,7 +82,10 @@ version, relaunches the app on the same address, and the open window reloads its
 onto it. Restart `symbiot app` yourself and the open window reconnects the same way.
 
 The app listens on port **7391** so its address survives restarts; set
-`SYMBIOT_PORT` to use another (it falls back to a free port if that one is busy).
+`SYMBIOT_PORT` to use another. **One app at a time:** running `symbiot app` while
+it's already running just opens the existing window instead of starting a second
+copy (`SYMBIOT_FORCE_NEW=1` starts one anyway). If something else holds the port,
+it falls back to a free one.
 It works on **Linux, macOS and Windows**; with no Chromium-family browser to open
 the chrome-less window, it uses your default browser.
 
@@ -130,7 +133,7 @@ a template — `{dir}` is the repo path, `{prompt}` is the instruction to read
 `TASKS.md` — so it works with any agent or editor:
 
 ```
-claude -p "{prompt}" --permission-mode acceptEdits
+claude -p "{prompt}" --permission-mode acceptEdits --allowedTools "Bash(npm test:*)" "Bash(node:*)"
 aider --message "{prompt}" --yes
 code {dir}
 ```
@@ -139,12 +142,16 @@ Settings shows **one-click presets** for what's installed on your machine. A
 preset only fills in the command box; the saved command is what runs.
 
 - **Agents** (all make changes, ready for your review): Claude Code, Codex
-  (OpenAI), Aider, Cursor agent, Gemini CLI.
+  (OpenAI), Aider, Cursor agent, Gemini CLI. The Claude preset may also run
+  `npm test` and `node`, so it can check its own work; a command saved from the
+  older preset is upgraded automatically, and an edited one is left alone.
 - **Orca IDE** (any OS): opens the repo in Orca — either just the repo, to use
   Orca's own agent, or with Claude running in a new tab. It launches Orca if it's
   closed and waits for it to be ready first.
-- **Editors:** VS Code, Cursor, Windsurf, Zed, Sublime Text, IntelliJ IDEA, Neovim
-  (on macOS, also found as `.app` bundles when the CLI isn't on your PATH).
+- **Editors — opens only, no review:** VS Code, Cursor, Windsurf, Zed, Sublime
+  Text, IntelliJ IDEA, Neovim (on macOS, also found as `.app` bundles when the CLI
+  isn't on your PATH). They just open the repo. Nothing comes back for review unless
+  you run an agent there yourself, and Neovim needs a terminal to open in.
 
 Each run is logged to `.symbiot/agent.log` in the repo and shown live in the
 **Agents** tab. The command is saved as `agentCmd` in
@@ -184,7 +191,6 @@ committed.
 ```bash
 symbiot drift          # local git facts only — fast, no network
 symbiot drift --fetch  # fetch from origin first, so "behind" is current
-symbiot drift --ci     # also check GitHub Actions state (needs gh)
 ```
 
 A **deterministic** report of what's out of sync, stuck, or at risk across your
@@ -195,10 +201,9 @@ not new work), **uncommitted work**, **behind upstream**, **multiple worktrees**
 branch** (the "merged but main didn't move" trap — split into *likely never
 landed*, when files the PR added are missing from main, and *probably re-done*,
 when they're all there), and — if you configure it — **production running code
-that isn't on your default branch**. With `--ci` it tells a real failing run apart
-from **CI that isn't running at all** (jobs never started — usually a billing or
-spending limit), quoting GitHub's reason when it can. Works on local-only repos
-too: without a remote it compares against your local default branch.
+that isn't on your default branch**. Works on local-only repos too: without a
+remote it compares against your local default branch. (CI checks with `--ci` are
+[experimental](#ci-status-symbiot-drift---ci).)
 
 For the production check, add a per-repo deploy command to
 `~/.config/symbiot/deploys.json` (read only from your own config, never from a
@@ -206,31 +211,6 @@ repo), keyed by repo path or folder name, that prints the deployed commit sha:
 `{ "/path/to/repo": "ssh prod cat ~/app/.deployed-sha" }`. Also the **Drift** tab
 in the app.
 
-## Which model? Ask your machine
-
-```bash
-symbiot models
-```
-
-Reads your RAM / CPU / GPU and recommends **local models by tier** (min / med / max,
-marking which fit your RAM) to run free & private via [Ollama](https://ollama.com),
-plus **paid** options (Claude / OpenAI / Gemini, cheap → top). Also available as
-a button in the app's Settings.
-
-### A free local model in one command: `symbiot setup-local`
-
-```bash
-symbiot setup-local                      # the best model for your RAM
-symbiot setup-local --model llama3.2:3b  # or pick one
-```
-
-Starts Ollama if it isn't running, downloads the model (with progress), and
-switches Symbiot over to it — free, private, nothing leaves your machine. If
-Ollama isn't installed yet it prints the one-line install for your OS (Homebrew on
-macOS, winget on Windows, the official script on Linux) and you re-run it after.
-Also the **Set up a free local model** button in Settings, where the download shows
-in the Agents tab and Symbiot switches over when it finishes.
-
 ## Connect it (once)
 
 Pick the AI you want it to write with:
@@ -270,34 +250,6 @@ It summarises the commits **you** authored — matching all your identities in e
 repo (per-repo and global email, your GitHub noreply address, your name), and
 counting everyone if that filter would drop almost all of an active repo's history.
 
-## Your email, without an API: `symbiot mail`
-
-```bash
-symbiot mail                 # what mail it can read, and what you sent this week
-symbiot mail --on            # use it in week / standup   (--off to stop)
-symbiot mail --add ~/Takeout/Mail/All\ mail.mbox   # an export, or any mail folder
-```
-
-Much of a week's work happens over email, so Week and Standup can include **what
-you sent**. There's no Gmail or Outlook API, no OAuth, no app to register and no
-password. Symbiot reads the mail a desktop client already keeps on your computer,
-so anyone can link theirs the same way:
-
-- **Thunderbird** (Linux, macOS, Windows, including Snap and Flatpak installs),
-  **Apple Mail**, **Evolution**, **KMail**, and **mutt/neomutt** or any
-  `~/Maildir` / `~/mail` are found automatically. Symbiot only looks at their
-  **Sent** folders.
-- **Webmail only?** Add an export. Google Takeout gives you an `.mbox`, and Symbiot
-  keeps just the messages with Gmail's *Sent* label (or from one of your
-  addresses). You can also point it at any `.mbox` file or a folder of `.eml`
-  files.
-
-It reads **headers only** (date, recipients, subject), never a message body. It's
-**off until you switch it on**, in Settings (*Email*) or with `symbiot mail --on`.
-**Preview** shows exactly what a write-up would see. On macOS, reading Apple Mail
-needs Full Disk Access for your terminal. Outlook for Windows keeps mail in `.pst`
-files, which Symbiot can't read, so export to `.mbox` or use Thunderbird.
-
 ## Where it looks
 
 By default Symbiot scans your **home folder**. To point it at where your work
@@ -327,7 +279,7 @@ instead of hanging. The CLI shows scan progress on one line as it goes.
 
 - **Reads:** your local git — commit messages and changed-file names, plus
   `TODO`/`FIXME` markers and uncommitted changes for `todo`. If you switch
-  [email](#your-email-without-an-api-symbiot-mail) on, it also reads the headers
+  [email](#your-sent-email-without-an-api-symbiot-mail) on, it also reads the headers
   of mail you sent (subject, recipients, date). All local.
 - **Sends to the AI:** commit messages and dates, changed-file **names**, the
   folder structure, `TODO`/`FIXME` lines, and (for a repo review) an excerpt of
@@ -341,6 +293,66 @@ instead of hanging. The CLI shows scan progress on one line as it goes.
 - **Runs only what you set:** the agent command is yours, and deploy commands are
   read only from your own `~/.config/symbiot/`, never from a repo.
 
+## Experimental
+
+These work and are tested, but are newer or depend on things Symbiot can't fully
+check, so they may change. Everything above works without them.
+
+### Your sent email, without an API: `symbiot mail`
+
+```bash
+symbiot mail                 # what mail it can read, and what you sent this week
+symbiot mail --on            # use it in week / standup   (--off to stop)
+symbiot mail --add ~/Takeout/Mail/All\ mail.mbox   # an export, or any mail folder
+```
+
+Week and Standup can include **what you sent**. It needs no Gmail or Outlook API,
+OAuth, app registration or password: Symbiot reads the mail a desktop client
+already keeps on your computer, so anyone can link theirs the same way.
+**Thunderbird** (including Snap and Flatpak), **Apple Mail**, **Evolution**,
+**KMail**, and **mutt/neomutt** or any `~/Maildir` / `~/mail` are found
+automatically, and only their **Sent** folders are read. Webmail only? Add an
+export: Google Takeout gives you an `.mbox`, and Symbiot keeps just the messages
+with Gmail's *Sent* label (or from one of your addresses). Any `.mbox` file or
+folder of `.eml` files works too.
+
+It reads **headers only** (date, recipients, subject), never a message body, and
+it's **off until you switch it on** in Settings (*Email*) or with
+`symbiot mail --on`. **Preview** shows exactly what a write-up would see. Why it's
+experimental: the tests cover mbox and Maildir, but it hasn't been tried against
+real Apple Mail, Evolution or KMail stores. On macOS, reading Apple Mail needs Full
+Disk Access for your terminal. Outlook for Windows (`.pst`) isn't supported:
+export to `.mbox` or use Thunderbird.
+
+### CI status: `symbiot drift --ci`
+
+```bash
+symbiot drift --ci     # also check GitHub Actions state (needs gh)
+```
+
+Adds CI to the drift report, telling a real failing run apart from **CI that isn't
+running at all** (jobs never started, usually a billing or spending limit) and
+quoting GitHub's reason when it can. Also the **check CI** toggle in the Drift tab.
+Why it's experimental: it needs the GitHub CLI (`gh`), only covers GitHub Actions,
+and spotting "not running" is a heuristic.
+
+### Local models: `symbiot models` and `symbiot setup-local`
+
+```bash
+symbiot models                           # recommend models for this machine
+symbiot setup-local                      # the best local model for your RAM
+symbiot setup-local --model llama3.2:3b  # or pick one
+```
+
+`models` reads your RAM / CPU / GPU and recommends **local models by tier** (min /
+med / max, marking which fit your RAM) to run free and private via
+[Ollama](https://ollama.com), plus **paid** options (Claude / OpenAI / Gemini,
+cheap → top). `setup-local` starts Ollama if it isn't running, downloads the model
+with progress, and switches Symbiot over to it. If Ollama isn't installed it prints
+the one-line install for your OS and you re-run it after. Both are buttons in
+Settings, where the download shows in the Agents tab. You can always pick a model
+yourself with `symbiot login`.
+
 ## Config
 
 Everything lives in `~/.config/symbiot/`: `config.json` (your AI, `scanRoots`,
@@ -353,6 +365,7 @@ conventions every repo review must respect, alongside each repo's own
   `claude-haiku-4-5`, `gemini-1.5-pro`).
 - `SYMBIOT_SCAN_TIMEOUT` — the scan time limit, in seconds (default 60).
 - `SYMBIOT_PORT` — the app's port (default 7391).
+- `SYMBIOT_FORCE_NEW=1` — start a second app even if one is already running.
 - `symbiot whoami` shows the active provider, model, and where the credential
   came from. `symbiot logout` forgets saved credentials.
 
@@ -362,26 +375,44 @@ conventions every repo review must respect, alongside each repo's own
 npm test
 ```
 
-Runs four suites, all against throwaway repos and an isolated `HOME`:
+Runs five suites, all against throwaway repos, an isolated `HOME` and (for the
+update check) a fake npm registry:
 
 - `test/load.mjs` — the shipped files parse and load: `node --check` on each
   module, `ui.mjs` imported on its own with its page's JavaScript parsed, every
   local import listed in package.json `"files"`, and the `bin` entry point shipped.
 - `test/fixtures.mjs` — accuracy fixtures: the facts Symbiot collects (identity
   matching, stale checkouts, worktrees, drift) and the `symbiot drift` report as
-  printed, the scan time limit, the agent handoff, and the review → approve cycle.
+  printed, the scan time limit, the agent handoff, review → send back → approve →
+  ship (including a repo that gitignores `.symbiot/`), agent questions, mail
+  ingestion (`symbiot mail` end to end), and the update command.
 - `test/smoke.mjs` — boots `symbiot app`, runs the page's own JavaScript against
   a fake DOM (every tab, every button), hits every endpoint the UI calls with the
-  method the UI uses, and checks POST-only endpoints refuse GET and `/api` needs
-  the token.
+  method the UI uses, checks POST-only endpoints refuse GET and `/api` needs the
+  token, and checks the update banner can't loop.
+- `test/app.mjs` — the app's lifecycle: a second `symbiot app` reuses the running
+  one (and `SYMBIOT_FORCE_NEW` / a foreign server on the port don't), and the
+  update check only offers a higher npm version.
 - `test/install.mjs` — runs the CLI through a bin symlink, then `npm pack` +
   global install into a temp prefix: `symbiot help`, every shipped file present,
   and the installed `symbiot app` serving its page. Needs npm registry access for
   dependencies; `SYMBIOT_SKIP_INSTALL_TEST=1` skips that part.
 
-`SYMBIOT_NO_OPEN=1` stops `symbiot app` opening a window (the tests set it).
-Releases publish from a version tag via `.github/workflows/publish.yml`, and only
-after the full suite passes in CI.
+`SYMBIOT_NO_OPEN=1` stops `symbiot app` opening a window (the tests set it), and
+`SYMBIOT_REGISTRY` points its update check at another registry. CI
+(`.github/workflows/ci.yml`) runs the whole suite on every pull request.
+
+**Releasing.** Bump the version in the pull request, merge it into `main`, then tag
+`main`'s commit:
+
+```bash
+git checkout main && git pull
+git tag v$(node -p "require('./package.json').version") && git push origin --tags
+```
+
+`.github/workflows/publish.yml` publishes from that tag only if it's on `main`,
+matches `package.json`, and the full suite passes. A tag on any other branch is
+refused, so what's on npm is always what's on `main`.
 
 ---
 

package/index.mjs

@@ -64,7 +64,17 @@ let LATEST_VERSION = ""; // newest symbiot on npm, checked in the background
 // a.b.c numeric compare: only a HIGHER npm version is an update (a local build
 // ahead of npm must not be offered a "newer" older one)
 function semverGt(a, b) { const p = (v) => String(v || "").replace(/^v/, "").split(/[.-]/).slice(0, 3).map((n) => parseInt(n, 10) || 0); const x = p(a), y = p(b); for (let i = 0; i < 3; i++) if (x[i] !== y[i]) return x[i] > y[i]; return false; }
-async function checkLatest() { try { const r = await fetch("https://registry.npmjs.org/symbiot"); if (!r.ok) return; const j = await r.json(); LATEST_VERSION = (j["dist-tags"] && j["dist-tags"].latest) || ""; } catch {} }
+// SYMBIOT_REGISTRY points the check at another registry (the tests use a fake one)
+const REGISTRY = (process.env.SYMBIOT_REGISTRY || "https://registry.npmjs.org").replace(/\/+$/, "");
+async function checkLatest() { try { const r = await fetch(REGISTRY + "/symbiot"); if (!r.ok) return; const j = await r.json(); LATEST_VERSION = (j["dist-tags"] && j["dist-tags"].latest) || ""; } catch {} }
+// The in-app update installs the EXACT newest version (not the `latest` tag, which
+// npm's cache/propagation can resolve stale — that caused an update loop where the
+// install kept re-fetching the same old version). --prefer-online skips a stale
+// cached packument.
+function updateCmd(latest, current, platform = process.platform) {
+  const target = latest && semverGt(latest, current) ? latest : "latest";
+  return { target, cmd: (platform === "win32" ? "npm i -g " : "npm install -g ") + "symbiot@" + target + " --prefer-online" };
+}
 
 // ---- colour + spinner ------------------------------------------------------
 const c = PLAIN
@@ -753,7 +763,7 @@ const escDq = (s) => String(s).replace(/[\\"$`]/g, "\\$&");
 // Plain words only: in the Orca preset this passes through two shells, so no
 // backticks or $ (escDq covers one level).
 const HANDOFF_PROMPT = "Read .symbiot/TASKS.md and implement the unchecked items in this repo. Tick each item [x] in that file as you finish it and leave your changes uncommitted, so they can be reviewed and approved. If you need a decision, or have ideas or options for the user, write them to .symbiot/QUESTIONS.md as TASKS.md explains, and read .symbiot/ANSWERS.md first if it exists. Confirm before anything destructive.";
-function handoffCmd() { const cfg = loadConfig(); return migrateOrcaCmd(cfg.agentCmd) || (cfg.ide ? `${cfg.ide} {dir}` : ""); } // ide = legacy
+function handoffCmd() { const cfg = loadConfig(); return migrateOrcaCmd(migrateClaudeCmd(cfg.agentCmd)) || (cfg.ide ? `${cfg.ide} {dir}` : ""); } // ide = legacy
 // Save the template ("" clears it). Either way the legacy `ide` key goes.
 function setHandoffCmd(cmd) {
   const cfg = loadConfig(); const v = String(cmd || "").trim();
@@ -772,8 +782,13 @@ const IDE_LIST = [["code", "VS Code", "Visual Studio Code"], ["cursor", "Cursor"
 // [cmd, label, template]. Only agents that leave changes to review: a handoff
 // runs unattended, so a "plan only" run can't ask anything and leaves nothing to
 // approve — that preset was dropped (a saved one still runs as-is).
+// Claude: acceptEdits alone still blocks every shell command, so a run could
+// never run its own tests and had to leave test work unticked. Allow just the
+// test runner and node.
+const CLAUDE_CMD = 'claude -p "{prompt}" --permission-mode acceptEdits --allowedTools "Bash(npm test:*)" "Bash(node:*)"';
+const CLAUDE_CMD_OLD = 'claude -p "{prompt}" --permission-mode acceptEdits'; // ≤0.33
 const AGENT_LIST = [
-  ["claude", "Claude Code — make changes", 'claude -p "{prompt}" --permission-mode acceptEdits'],
+  ["claude", "Claude Code — make changes", CLAUDE_CMD],
   ["codex", "Codex (OpenAI/GPT) — make changes", 'codex exec --full-auto "{prompt}"'],
   ["aider", "Aider — make changes", 'aider --message "{prompt}" --yes'],
   ["gemini", "Gemini — make changes", 'gemini --yolo -p "{prompt}"'],
@@ -835,6 +850,13 @@ function migrateOrcaCmd(cmd) {
   if (rebuilt !== cmd) { try { const cfg = loadConfig(); if (cfg.agentCmd === cmd) { cfg.agentCmd = rebuilt; saveConfig(cfg); } } catch {} }
   return rebuilt;
 }
+// Upgrade a saved Claude preset from ≤0.33 to the current one. Exact match only:
+// a command the user edited is theirs and runs as-is.
+function migrateClaudeCmd(cmd) {
+  if (typeof cmd !== "string" || cmd.trim() !== CLAUDE_CMD_OLD) return cmd;
+  try { const cfg = loadConfig(); if (cfg.agentCmd === cmd) { cfg.agentCmd = CLAUDE_CMD; saveConfig(cfg); } } catch {}
+  return CLAUDE_CMD;
+}
 // Cross-platform detection for the presets (and gh / the app's browser).
 // "Is this command available?": command -v on posix, where on win.
 function hasCmd(cmd) { try { return !!sh(process.platform === "win32" ? `where ${cmd}` : `command -v ${cmd}`).trim(); } catch { return false; } }
@@ -1789,7 +1811,7 @@ async function cmdApp() {
       if (r && r.ok) {
         const p = await r.json().catch(() => ({}));
         if (p && p.version) {
-          const url = `http://127.0.0.1:${PORT}/?t=${TOKEN}`; const how = openApp(url);
+          const url = `http://127.0.0.1:${PORT}/?t=${TOKEN}`; const how = process.env.SYMBIOT_NO_OPEN === "1" ? "" : openApp(url);
           console.log(`\n${c.g("●")} ${c.b("Symbiot")} is already running (v${p.version}) at ${c.b(url)}`);
           console.log(how ? c.d(`  Opened the existing window (a ${how}).`) : c.d("  Open that URL in your browser."));
           console.log(c.d("  (Not starting a second copy. Set SYMBIOT_FORCE_NEW=1 to force one.)"));
@@ -1852,14 +1874,10 @@ async function cmdApp() {
       if (u.pathname === "/api/connect" && req.method === "POST") { return json(res, await connectProvider(await readBody(req))); }
       if (u.pathname === "/api/ping") { if (u.searchParams.get("fresh") === "1") await checkLatest(); return json(res, { version: VERSION, started: SERVER_STARTED, latest: LATEST_VERSION, newer: semverGt(LATEST_VERSION, VERSION) }); }
       if (u.pathname === "/api/update" && req.method === "POST") {
-        // Install the EXACT newest version (not the `latest` tag, which npm's
-        // cache/propagation can resolve stale — that caused an update loop where
-        // the install kept re-fetching the same old version), then relaunch this
-        // same app (same port+token => same URL) and exit. --prefer-online skips
-        // a stale cached packument. The page's heartbeat reconnects and reloads.
-        const target = LATEST_VERSION && semverGt(LATEST_VERSION, VERSION) ? LATEST_VERSION : "latest";
-        const pkg = "symbiot@" + target;
-        const inst = (process.platform === "win32" ? "npm i -g " : "npm install -g ") + pkg + " --prefer-online";
+        // Install the exact newest version (see updateCmd), then relaunch this
+        // same app (same port+token => same URL) and exit. The page's heartbeat
+        // reconnects and reloads.
+        const { target, cmd: inst } = updateCmd(LATEST_VERSION, VERSION);
         const e = track("symbiot update", inst, homedir(), (code) => {
           if (code !== 0) return;
           try { const ch = spawn(process.execPath, process.argv.slice(1), { detached: true, stdio: "ignore", env: process.env }); ch.unref(); } catch {}
@@ -1896,7 +1914,7 @@ function cmdMail() {
   const add = flag("add", null);
   if (add) { const r = setMail({ add }); if (r.error) console.log(c.y(r.error)); }
   const m = mailState();
-  console.log(`\n${c.g("●")} ${c.b("Symbiot mail")} ${c.d("· " + (m.enabled ? "on — what you sent feeds week and standup" : "off"))}\n`);
+  console.log(`\n${c.g("●")} ${c.b("Symbiot mail")} ${c.d("(experimental) · " + (m.enabled ? "on — what you sent feeds week and standup" : "off"))}\n`);
   const srcs = [...m.detected.map((d) => [d.path, d.kind]), ...m.sources.map((p) => [p, "added"])];
   if (!srcs.length) console.log(c.y("No mail found on this computer.") + c.d("  Use a desktop mail app (Thunderbird, Apple Mail, Evolution…), or add an export:  symbiot mail --add ~/Takeout/Mail/All.mbox"));
   for (const [p, k] of srcs) console.log(`  ${c.g("·")} ${p}  ${c.d(k)}`);
@@ -1915,16 +1933,19 @@ ${c.b("Usage")}
   symbiot standup                   yesterday + today, for standup
   symbiot todo                      what's still on your plate
   symbiot app                       open the visual app in your browser
-  symbiot drift                     what's out of sync / at risk across repos
+  symbiot drift [--fetch]           what's out of sync / at risk across repos
   symbiot push [--open]             write tasks into each repo (and run your agent)
-  symbiot mail [--on|--off]         use the mail you sent in write-ups (local, no API)
-  symbiot models                    recommend AI models for your hardware
-  symbiot setup-local [--model X]   install/run a free local model (Ollama)
   symbiot login                     connect it to an AI (once)
   symbiot whoami                    show how it's connected
   symbiot logout                    forget saved credentials
   symbiot help
 
+${c.b("Experimental")}
+  symbiot drift --ci                also check GitHub Actions (needs gh)
+  symbiot mail [--on|--off]         use the mail you sent in write-ups (local, no API)
+  symbiot models                    recommend AI models for your hardware
+  symbiot setup-local [--model X]   install/run a free local model (Ollama)
+
 ${c.b("Options")}
   --dir <path>    where your repos are (default: ${homedir()})
   --since <days>  window for 'week' (default 7)
@@ -1969,4 +1990,4 @@ const isMain = (() => {
 })();
 if (isMain) main();
 
-export { authorship, repoState, readmeInfo, repoShape, houseRules, findAllRepos, buildMap, reportFooter, detectHardware, recommendModels, computeDrift, driftRepo, gitDefaultBranch, buildTasksMd, taskType, EMBEDDED_UI, orcaHandoffCmd, migrateOrcaCmd, fillHandoff, handoffCmd, setHandoffCmd, ORCA_CLAUDE_CMD, HANDOFF_PROMPT, shipChanges, syncTasks, pendingReview, approveRepo, sendBack, pushTasks, semverGt, parseQuestions, agentQuestions };
+export { authorship, repoState, readmeInfo, repoShape, houseRules, findAllRepos, buildMap, reportFooter, detectHardware, recommendModels, computeDrift, driftRepo, gitDefaultBranch, buildTasksMd, taskType, EMBEDDED_UI, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, fillHandoff, handoffCmd, setHandoffCmd, ORCA_CLAUDE_CMD, CLAUDE_CMD, HANDOFF_PROMPT, shipChanges, syncTasks, pendingReview, approveRepo, sendBack, pushTasks, semverGt, updateCmd, parseQuestions, agentQuestions };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "symbiot",
-  "version": "0.33.0",
+  "version": "0.34.0",
   "description": "Your week, written from your real work. Reads your local git and writes it up with the AI of your choice — Claude, OpenAI, Gemini, or a local model.",
   "type": "module",
   "bin": {
@@ -44,6 +44,6 @@
     "@anthropic-ai/sdk": "^0.128.0"
   },
   "scripts": {
-    "test": "node test/load.mjs && node test/fixtures.mjs && node test/smoke.mjs && node test/install.mjs"
+    "test": "node test/load.mjs && node test/fixtures.mjs && node test/smoke.mjs && node test/app.mjs && node test/install.mjs"
   }
 }

package/ui.mjs

@@ -183,7 +183,7 @@ label.check input{width:auto}
 <section id="panel-drift" class="hidden">
 <div class="row"><span class="muted">What's out of sync, stuck or at risk across your repos — local git facts.</span>
 <label class="muted" style="margin-left:auto"><input type="checkbox" id="driftfetch"> fetch latest</label>
-<label class="muted"><input type="checkbox" id="driftci"> check CI (needs gh)</label>
+<label class="muted"><input type="checkbox" id="driftci"> check CI (needs gh, experimental)</label>
 <button class="ghost" id="driftrun">Rescan</button></div>
 <div id="driftout"></div>
 </section>
@@ -216,15 +216,16 @@ label.check input{width:auto}
 <div id="agentpresets" style="margin-top:8px"></div>
 </div>
 <div style="margin-top:20px;border-top:1px solid var(--line);padding-top:16px">
-<label>Email &mdash; add what you sent to Week and Standup</label>
+<label>Email &mdash; add what you sent to Week and Standup <span class="muted">(experimental)</span></label>
 <label class="check"><input type="checkbox" id="mailon"> Use my sent email (subjects &amp; recipients only)</label>
 <div id="mailsources"></div>
 <div class="row" style="margin-top:6px"><input id="newmail" placeholder="add a mail folder or .mbox file  (e.g. a Google Takeout export)" style="flex:1"><button class="ghost" id="addmail">Add</button><button class="ghost" id="mailpreview">Preview</button></div>
 <input id="mailaddrs" type="text" placeholder="your email addresses, comma-separated  (only needed for a whole-mailbox export)">
-<div class="note muted" id="mailnote">No API, no OAuth, no password: Symbiot reads the mail your desktop mail app (Thunderbird, Apple Mail, Evolution, mutt&hellip;) already keeps on this computer, or an exported .mbox &mdash; so anyone can link theirs. Headers only, never a message body; off until you tick it.</div>
+<div class="note muted" id="mailnote">No API, no OAuth, no password: Symbiot reads the mail your desktop mail app (Thunderbird, Apple Mail, Evolution, mutt&hellip;) already keeps on this computer, or an exported .mbox &mdash; so anyone can link theirs. Headers only, never a message body; off until you tick it. Experimental: tested with mbox and Maildir, not yet on real Apple Mail, Evolution or KMail stores.</div>
 <div id="mailout"></div>
 </div>
 <div style="margin-top:20px;border-top:1px solid var(--line);padding-top:16px">
+<label>Local models <span class="muted">(experimental)</span></label>
 <button class="ghost" id="recbtn">Recommend models for my machine</button>
 <button class="ghost" id="setuplocal" style="margin-left:8px">Set up a free local model</button>
 <div id="setupout" class="note muted" style="margin-top:10px"></div>
@@ -489,7 +490,11 @@ function loadAgentCfg(){api('/api/agentcfg').then(function(d){document.getElemen
 var chips=[];(d.agents||[]).forEach(function(a){chips.push(a);});(d.editors||[]).forEach(function(e){chips.push(e);});
 var box=document.getElementById('agentpresets');
 if(!chips.length){box.innerHTML="<span class='muted' style='font-size:12px'>Nothing detected on PATH &mdash; type your own command above.</span>";return;}
-box.innerHTML="<span class='muted' style='font-size:12px'>Detected &mdash; click to use:</span><br>"+chips.map(function(c,i){return "<button class='ghost preset' data-i='"+i+"' style='padding:4px 10px;font-size:12px;margin:5px 5px 0 0'>"+esc(c.label)+"</button>";}).join("");
+// Agents leave changes for review; an editor preset only opens the repo, so say so.
+var na=(d.agents||[]).length;function chip(c,i){return "<button class='ghost preset' data-i='"+i+"' style='padding:4px 10px;font-size:12px;margin:5px 5px 0 0'>"+esc(c.label)+"</button>";}
+var h="<span class='muted' style='font-size:12px'>Detected &mdash; click to use:</span><br>"+chips.slice(0,na).map(chip).join("");
+if(chips.length>na)h+="<div class='muted' style='font-size:12px;margin-top:8px'>Editors &mdash; opens only, no review:</div>"+chips.slice(na).map(function(c,i){return chip(c,na+i);}).join("");
+box.innerHTML=h;
 box.querySelectorAll('.preset').forEach(function(btn){btn.addEventListener('click',function(){document.getElementById('agentcmd').value=chips[+btn.getAttribute('data-i')].tmpl;saveAgent();});});});}
 function saveAgent(){api('/api/agentcmd',{cmd:document.getElementById('agentcmd').value});}
 function loadScanRoots(){api('/api/scanroots').then(function(d){var box=document.getElementById('scanroots');var roots=d.effective||[];