symbiot 0.37.0 → 0.39.0

package/README.md

@@ -146,6 +146,13 @@ size of the uncommitted change and a **Show diff** button. For each repo:
 
 Tasks waiting for review aren't re-sent to the agent.
 
+**Releases.** For a repo that releases with `v*` tags, the review card warns when
+the default branch is past its last tag (merged work that isn't released). If
+`package.json`'s version is already released and the changes don't touch it, a
+**Version** picker next to Approve bumps it in the same PR: a patch by default, or a
+minor, or keep it. It updates `package.json` and the lockfile's own version, and the
+PR says which tag to push once it merges.
+
 If a repo you sent tasks to has uncommitted changes but no ticked task (say the
 agent made a fix and didn't tick anything), it still shows up here, with
 **Approve changes without a task → PR**. That ships the changes the same way, on
@@ -411,18 +418,33 @@ in the screenshot's own pixels, plus its **centre**, the point a click would aim
 `~/.config/symbiot/screens/screens.json` (next to each screen's PNG), where an
 agent or script can read it.
 
+**More than one display?** Symbiot reads how your displays are laid out
+(`cosmic-randr`, `wlr-randr`, `kscreen-doctor` or `xrandr` on Linux, PowerShell on
+Windows, AppKit on macOS) and a picker appears next to Capture: **each display**
+(one screen per display, named after it, e.g. "PR page · HDMI-1 (left)"), **one
+display only**, or **all displays in one image**. The choice is remembered. A
+screenshot you already took of the whole desktop has **Split by display**, which
+cuts it up the same way and moves each region onto the display it's on (the whole
+image stays). A display's screen remembers where that display sits, so **Click
+here** lands on the right display, and its blueprint gives each region's point on
+the whole desktop too (`desktop`). If the screenshot doesn't match the layout (say
+a display was plugged in since), Symbiot keeps it whole and says why.
+
 **Click here** on a region moves your mouse to the region's centre and clicks there,
 on your real screen. It asks you to confirm every time, and can wait 3, 5 or 10
 seconds first so you can bring the right window to the front. It clicks with
-`cliclick` on macOS (`brew install cliclick`), and on Linux with `xdotool` on X11 or
-`ydotool` on Wayland (which needs access to `/dev/uinput`, and `ydotoold` running for
-ydotool 1.x). Windows can't click yet. Nothing types yet.
+`cliclick` on macOS (`brew install cliclick`), with PowerShell on Windows (nothing to
+install), and on Linux with `xdotool` on X11 or `ydotool` on Wayland (which needs
+access to `/dev/uinput`, and `ydotoold` running for ydotool 1.x). Nothing types yet.
 
 Capture uses the screenshot tool your system has: `screencapture` on macOS,
 PowerShell on Windows, and on Linux `gnome-screenshot`, `spectacle`,
 `cosmic-screenshot`, `grim` or `xfce4-screenshooter` (plus `scrot` / ImageMagick
 `import` on X11). Why it's experimental: Wayland desktops restrict screenshots, so
-capture may fail or ask for permission (use **Load image** then). And on a scaled
+capture may fail or ask for permission (use **Load image** then). If your desktop
+has screenshots turned off for the app Symbiot was started from (say, the COSMIC
+dock), Symbiot says so and offers **Allow screenshots**, which turns them on for
+apps started that way. And on a scaled
 (HiDPI) display, screenshot pixels can differ from the coordinates a click tool
 expects. Symbiot rescales for `xdotool` and for `cliclick` on a Retina screen, but
 it can't read the scale on Wayland, and ydotool's moves follow your pointer

package/index.mjs

@@ -32,7 +32,7 @@ import { detectMailSources, mailActivity } from "./mail.mjs";
 import { CONFIG_PATH, loadConfig, saveConfig, loadTasks, saveTasks, sh, hasCmd, repoState } from "./core.mjs";
 import { HANDOFF_PROMPT, QUESTIONS_MAX, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, fillHandoff, runHandoff, runningHandoff, writeTasks, startHeldTasks, detectHandoffs, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, parseQuestions, agentQuestions, answerQuestions, agentsList } from "./agents.mjs";
 import { gitDefaultBranch, loadDeploys, driftRepo } from "./drift.mjs";
-import { loadScreens, screenImage, captureScreen, importScreen, setRegions, renameScreen, removeScreen, blueprint, clickRegion } from "./screens.mjs";
+import { loadScreens, screenImage, captureScreen, splitScreen, listMonitors, allowScreenshots, importScreen, setRegions, renameScreen, removeScreen, blueprint, clickRegion } from "./screens.mjs";
 import { weeklyState, setWeekly, runWeekly, startWeekly, autostartState, setAutostart } from "./desktop.mjs";
 
 const HERE = fileURLToPath(new URL(".", import.meta.url));
@@ -105,6 +105,10 @@ function addTask(text, repo) {
   text = String(text || "").trim().slice(0, 300);
   if (!text) return { error: "empty" };
   const t = loadTasks();
+  // The same text already open in the same repo (in review counts): that task, not a duplicate.
+  const same = (s) => String(s || "").replace(/\s+/g, " ").trim().toLowerCase();
+  const dup = t.find((x) => !x.done && !x.archived && (x.repo || "") === (repo || "") && same(x.text) === same(text));
+  if (dup) return { ...dup, duplicate: true };
   const item = { id: randomBytes(6).toString("hex"), text, repo: repo || "", done: false, ts: Date.now() };
   t.unshift(item); saveTasks(t); return item;
 }
@@ -163,6 +167,58 @@ function workingDiff(path, cap = 400000) {
   }
   return d.length > cap ? d.slice(0, cap) + "\n… (diff truncated)" : d;
 }
+// Merged work that isn't released yet: how many commits the default branch (or
+// origin's copy, where approved PRs merge) is past its last v* tag, or null when
+// it isn't, or the repo doesn't release with v* tags. bump: the version these
+// uncommitted changes set in package.json, if they change it.
+function unreleased(path) {
+  const base = gitDefaultBranch(path); let best = null;
+  for (const ref of ["refs/heads/" + base, "refs/remotes/origin/" + base]) {
+    const tag = git(path, ["describe", "--tags", "--abbrev=0", "--match", "v*", ref]).out; if (!tag) continue;
+    const ahead = +git(path, ["rev-list", "--count", tag + ".." + ref]).out || 0;
+    if (!best || ahead > best.ahead) best = { base, tag, ahead };
+  }
+  if (!best || !best.ahead) return null;
+  const ver = (s) => { try { return String(JSON.parse(s).version || ""); } catch { return ""; } };
+  let now = ""; try { now = ver(readFileSync(join(path, "package.json"), "utf8")); } catch {}
+  const was = ver(git(path, ["show", "HEAD:package.json"]).out);
+  return { ...best, ...(now && was && now !== was ? { bump: now } : {}) };
+}
+// Approve can bump the version in the PR itself, for a repo that releases with
+// v* tags: offered when the committed version is already released (its v* tag
+// exists) and these changes don't change it. { version, patch, minor } or null.
+function bumpOffer(path) {
+  const ver = (s) => { try { return String(JSON.parse(s).version || ""); } catch { return ""; } };
+  const was = ver(git(path, ["show", "HEAD:package.json"]).out), m = was.match(/^(\d+)\.(\d+)\.(\d+)$/); if (!m) return null;
+  let now = ""; try { now = ver(readFileSync(join(path, "package.json"), "utf8")); } catch {}
+  if (now !== was || !git(path, ["rev-parse", "-q", "--verify", "refs/tags/v" + was]).ok) return null;
+  return { version: was, patch: `${m[1]}.${m[2]}.${+m[3] + 1}`, minor: `${m[1]}.${+m[2] + 1}.0` };
+}
+// Set the version in package.json and in package-lock.json / npm-shrinkwrap.json
+// (top level and its "" package), keeping each file's indent. Gives back a
+// function that restores them, for when the ship fails.
+function setVersion(path, to) {
+  const saved = [];
+  for (const f of ["package.json", "package-lock.json", "npm-shrinkwrap.json"]) {
+    const file = join(path, f); let text = "", j = null;
+    try { text = readFileSync(file, "utf8"); j = JSON.parse(text); } catch { continue; }
+    if (!j || typeof j !== "object" || (f !== "package.json" && !("version" in j))) continue;
+    j.version = to; if (f !== "package.json" && j.packages && j.packages[""]) j.packages[""].version = to;
+    writeFileSync(file, JSON.stringify(j, null, (text.match(/^[ \t]+(?=")/m) || ["  "])[0]) + (text.endsWith("\n") ? "\n" : ""));
+    saved.push([file, text]);
+  }
+  return () => { for (const [file, text] of saved) try { writeFileSync(file, text); } catch {} };
+}
+// Ship with the version bumped when opts.bump is "patch" or "minor" and the repo
+// is offered one (bumpOffer). The bump is put back if the ship fails.
+function shipWithBump(path, texts, opts) {
+  const offer = (opts.bump === "patch" || opts.bump === "minor") && bumpOffer(path);
+  if (!offer) return shipChanges(path, texts, opts);
+  const to = offer[opts.bump], undo = setVersion(path, to);
+  const r = shipChanges(path, texts, { ...opts, bumped: to });
+  if (r.error) { undo(); return r; }
+  return { ...r, bumped: to };
+}
 // Repos with tasks awaiting review, plus repos Symbiot sent tasks to that have
 // uncommitted changes no ticked task covers (untasked: approve them as-is).
 // running: an agent is still editing there, so its changes may be half done.
@@ -171,10 +227,10 @@ function pendingReview() {
   const sent = [...new Set(t.filter((x) => x.repo && !x.archived && !by[x.repo]).map((x) => x.repo))];
   const map = Object.keys(by).length || sent.length ? repoPathMap() : {};
   const am = autoMergeRepos();
-  const out = Object.keys(by).sort().map((repo) => { const path = map[repo] || ""; return { repo, path, tasks: by[repo], autoMerge: am.includes(repo), running: !!(path && runningHandoff(path)), ...(path ? workingChanges(path) : { branch: "", files: [], stat: "" }) }; });
+  const out = Object.keys(by).sort().map((repo) => { const path = map[repo] || ""; return { repo, path, tasks: by[repo], autoMerge: am.includes(repo), running: !!(path && runningHandoff(path)), ...(path ? { ...workingChanges(path), unreleased: unreleased(path), bumpOffer: bumpOffer(path) } : { branch: "", files: [], stat: "" }) }; });
   for (const repo of sent.sort()) {
     const path = map[repo]; if (!path || !existsSync(join(path, ".symbiot", "TASKS.md"))) continue;
-    const wc = workingChanges(path); if (wc.files.length) out.push({ repo, path, tasks: [], untasked: true, autoMerge: am.includes(repo), running: !!runningHandoff(path), ...wc });
+    const wc = workingChanges(path); if (wc.files.length) out.push({ repo, path, tasks: [], untasked: true, autoMerge: am.includes(repo), running: !!runningHandoff(path), ...wc, unreleased: unreleased(path), bumpOffer: bumpOffer(path) });
   }
   return out;
 }
@@ -203,7 +259,7 @@ function shipChanges(path, texts, opts = {}) {
   const add = git(path, ["add", "-A"]); if (!add.ok) return { error: "git add failed: " + add.err, branch };
   git(path, ["reset", "-q", "--", ".symbiot"]); // never ship Symbiot's own scratch
   const subject = !texts.length ? "symbiot: changes approved without a task" : texts.length === 1 ? (texts[0].length > 72 ? texts[0].slice(0, 71).replace(/\s+\S*$/, "") + "…" : texts[0]) : `symbiot: ${texts.length} approved tasks`;
-  const body = texts.length ? texts.map((x) => "- " + x).join("\n") : "No ticked task covers these changes.";
+  const body = (texts.length ? texts.map((x) => "- " + x).join("\n") : "No ticked task covers these changes.") + (opts.bumped ? `\n\nBumps the version to ${opts.bumped}. After this merges, tag v${opts.bumped} on ${base} to release it.` : "");
   const cm = git(path, ["commit", "-m", subject, "-m", body]); if (!cm.ok) return { error: "Commit failed: " + (cm.err || cm.out), branch };
   const out = { ok: true, branch, base, commit: git(path, ["rev-parse", "--short", "HEAD"]).out, subject };
   if (opts.push === false) return out;
@@ -236,7 +292,7 @@ function approveRepo(repo, opts = {}) {
   if (!items.length) return { error: "Nothing awaiting review for " + (repo || "(no repo)") + "." };
   const path = repoPathMap()[repo]; if (!path) return { error: "Repo not found: " + repo };
   const busy = stillWorking(repo, path); if (busy) return busy;
-  const r = shipChanges(path, items.map((x) => x.text), { ...opts, autoMerge: opts.autoMerge !== undefined ? opts.autoMerge : autoMergeRepos().includes(repo) });
+  const r = shipWithBump(path, items.map((x) => x.text), { ...opts, autoMerge: opts.autoMerge !== undefined ? opts.autoMerge : autoMergeRepos().includes(repo) });
   if (r.error) return r;
   const now = Date.now();
   for (const x of items) { x.review = false; x.done = true; x.archived = true; x.archivedAt = now; x.approvedAt = now; for (const k of ["branch", "commit", "pr"]) if (r[k]) x[k] = r[k]; }
@@ -251,7 +307,7 @@ function approveChanges(repo, opts = {}) {
   const path = repoPathMap()[repo]; if (!path) return { error: "Repo not found: " + (repo || "(no repo)") };
   const busy = stillWorking(repo, path); if (busy) return busy;
   if (!workingChanges(path).files.length) return { error: "No uncommitted changes in " + repo + "." };
-  const r = shipChanges(path, [], { ...opts, autoMerge: opts.autoMerge !== undefined ? opts.autoMerge : autoMergeRepos().includes(repo) });
+  const r = shipWithBump(path, [], { ...opts, autoMerge: opts.autoMerge !== undefined ? opts.autoMerge : autoMergeRepos().includes(repo) });
   return r.error ? r : { ...r, approved: 0 };
 }
 // Not right: reopen it and untick it in TASKS.md so the agent picks it up again.
@@ -1457,7 +1513,7 @@ async function cmdApp() {
     } catch {}
   }
   const json = (res, obj) => { res.writeHead(200, { "content-type": "application/json" }); res.end(JSON.stringify(obj)); };
-  const screenOut = (s) => (s && s.id ? { ...s, blueprint: blueprint(s) } : s);
+  const screenOut = (s) => (s && s.id ? { ...s, blueprint: blueprint(s) } : s && s.screens ? { ...s, screens: s.screens.map(screenOut) } : s);
   const server = createServer(async (req, res) => {
     const u = new URL(req.url, "http://127.0.0.1");
     if (req.method === "GET" && u.pathname === "/") { res.writeHead(200, { "content-type": "text/html; charset=utf-8" }); res.end(EMBEDDED_UI); return; }
@@ -1484,8 +1540,8 @@ async function cmdApp() {
       if (u.pathname === "/api/tasks/chat/clear" && req.method === "POST") { const b = await readBody(req); return json(res, clearTaskChat(String(b.id || ""))); }
       if (u.pathname === "/api/pending") return json(res, pendingReview()); // ticked by the agent, awaiting approval
       if (u.pathname === "/api/pending/diff") { const p = repoPathMap()[u.searchParams.get("repo") || ""]; return json(res, { diff: p ? workingDiff(p) : "" }); }
-      if (u.pathname === "/api/pending/approve" && req.method === "POST") { const b = await readBody(req); return json(res, approveRepo(String(b.repo || ""))); }
-      if (u.pathname === "/api/pending/approve-changes" && req.method === "POST") { const b = await readBody(req); return json(res, approveChanges(String(b.repo || ""))); }
+      if (u.pathname === "/api/pending/approve" && req.method === "POST") { const b = await readBody(req); return json(res, approveRepo(String(b.repo || ""), { bump: b.bump })); }
+      if (u.pathname === "/api/pending/approve-changes" && req.method === "POST") { const b = await readBody(req); return json(res, approveChanges(String(b.repo || ""), { bump: b.bump })); }
       if (u.pathname === "/api/pending/sendback" && req.method === "POST") { const b = await readBody(req); return json(res, sendBack(String(b.id || ""))); }
       if (u.pathname === "/api/automerge" && req.method === "POST") { const b = await readBody(req); return json(res, setAutoMerge(String(b.repo || ""), !!b.on)); }
       if (u.pathname === "/api/tasks/push" && req.method === "POST") { const b = await readBody(req); return json(res, pushTasks(b)); }
@@ -1513,7 +1569,13 @@ async function cmdApp() {
       // src, so it carries the token in the query (?t=), which the check above accepts.
       if (u.pathname === "/api/screens") return json(res, loadScreens().map(screenOut));
       if (u.pathname === "/api/screens/image") { const f = screenImage(u.searchParams.get("id")); if (!f) { res.writeHead(404); res.end("not found"); return; } res.writeHead(200, { "content-type": "image/png", "cache-control": "private, max-age=86400" }); res.end(readFileSync(f)); return; } // a screen's image never changes
-      if (u.pathname === "/api/screens/capture" && req.method === "POST") { const b = await readBody(req); const d = Math.min(10, Math.max(0, Number(b.delay) || 0)); if (d) await new Promise((r) => setTimeout(r, d * 1000)); return json(res, screenOut(captureScreen(b.name))); }
+      if (u.pathname === "/api/screens/capture" && req.method === "POST") { const b = await readBody(req); const d = Math.min(10, Math.max(0, Number(b.delay) || 0)); if (d) await new Promise((r) => setTimeout(r, d * 1000)); return json(res, screenOut(captureScreen(b.name, typeof b.which === "string" ? b.which : "all"))); }
+      // The displays connected now (for "which display" next to Capture). macOS
+      // can't take them all in one image (screencapture takes one display at a time).
+      if (u.pathname === "/api/screens/monitors") return json(res, { monitors: listMonitors(), whole: process.platform !== "darwin" });
+      if (u.pathname === "/api/screens/split" && req.method === "POST") { const b = await readBody(req); return json(res, screenOut(splitScreen(String(b.id || "")))); }
+      // Changes a desktop permission, so only on the user's confirmed click.
+      if (u.pathname === "/api/screens/allow" && req.method === "POST") { const b = await readBody(req); if (b.confirmed !== true) return json(res, { error: "Allowing screenshots needs your confirmation." }); return json(res, allowScreenshots()); }
       if (u.pathname === "/api/screens/import" && req.method === "POST") { const b = await readBody(req); return json(res, screenOut(importScreen(b.name, b.png))); }
       if (u.pathname === "/api/screens/regions" && req.method === "POST") { const b = await readBody(req); return json(res, screenOut(setRegions(String(b.id || ""), b.regions))); }
       if (u.pathname === "/api/screens/rename" && req.method === "POST") { const b = await readBody(req); return json(res, screenOut(renameScreen(String(b.id || ""), b.name))); }
@@ -1647,4 +1709,4 @@ const isMain = (() => {
 })();
 if (isMain) main();
 
-export { authorship, repoState, readmeInfo, repoShape, houseRules, findAllRepos, buildMap, reportFooter, detectHardware, recommendModels, computeDrift, driftRepo, gitDefaultBranch, buildTasksMd, taskType, EMBEDDED_UI, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, fillHandoff, handoffCmd, setHandoffCmd, ORCA_CLAUDE_CMD, CLAUDE_CMD, HANDOFF_PROMPT, shipChanges, syncTasks, pendingReview, approveRepo, approveChanges, sendBack, pushTasks, semverGt, updateCmd, parseQuestions, agentQuestions };
+export { authorship, repoState, readmeInfo, repoShape, houseRules, findAllRepos, buildMap, reportFooter, detectHardware, recommendModels, computeDrift, driftRepo, gitDefaultBranch, buildTasksMd, taskType, EMBEDDED_UI, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, fillHandoff, handoffCmd, setHandoffCmd, ORCA_CLAUDE_CMD, CLAUDE_CMD, HANDOFF_PROMPT, shipChanges, shipWithBump, bumpOffer, setVersion, syncTasks, pendingReview, unreleased, addTask, approveRepo, approveChanges, sendBack, pushTasks, semverGt, updateCmd, parseQuestions, agentQuestions };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "symbiot",
-  "version": "0.37.0",
+  "version": "0.39.0",
   "description": "Your week, written from your real work. Reads your local git and writes it up with the AI of your choice — Claude, OpenAI, Gemini, or a local model.",
   "type": "module",
   "bin": {

package/screens.mjs

@@ -4,12 +4,15 @@
 // asked (the app confirms each click). Nothing types yet.
 //
 // Stored in ~/.config/symbiot/screens/: <id>.png per screen, and screens.json =
-// [{ id, name, w, h, ts, via, regions: [{ id, label, x, y, w, h }] }], which is
-// also what an agent or script reads to find a region.
+// [{ id, name, w, h, ts, via, monitor?, regions: [{ id, label, x, y, w, h }] }],
+// which is also what an agent or script reads to find a region. `monitor` is set
+// when the screen is one display of several: { name, x, y, w, h, where } is where
+// that display sits on the desktop, in the units the click tool uses.
 import { spawnSync } from "node:child_process";
 import { join } from "node:path";
 import { readFileSync, writeFileSync, mkdirSync, existsSync, unlinkSync, readdirSync, renameSync, rmSync } from "node:fs";
 import { randomBytes } from "node:crypto";
+import { inflateSync, deflateSync } from "node:zlib";
 import { CONFIG_DIR, hasCmd } from "./core.mjs";
 
 const SCREENS_DIR = join(CONFIG_DIR, "screens");
@@ -30,40 +33,296 @@ function pngSize(buf) {
   return w && h ? { w, h } : null;
 }
 
+// Windows: user32 calls for PowerShell. DPI-aware first, so with display scaling
+// the capture is the whole screen in real pixels and a click lands in the same ones.
+const WIN_USER32 = "Add-Type -Namespace Symbiot -Name User32 -MemberDefinition '[DllImport(\"user32.dll\")] public static extern bool SetProcessDPIAware(); [DllImport(\"user32.dll\")] public static extern bool SetCursorPos(int x, int y); [DllImport(\"user32.dll\")] public static extern void mouse_event(uint f, uint dx, uint dy, uint d, System.UIntPtr e);'; ";
+const WIN_DPI = WIN_USER32 + "[Symbiot.User32]::SetProcessDPIAware() | Out-Null; ";
+// -EncodedCommand (base64 UTF-16LE) carries the script's quotes through untouched.
+const psEncoded = (script) => ["powershell", ["-NoProfile", "-NonInteractive", "-EncodedCommand", Buffer.from(script, "utf16le").toString("base64")]];
+
+// Cutting a PNG into pieces (one per display), with no dependencies: decode the
+// pixels (zlib + PNG's row filters), copy each rectangle out, encode it again.
+// 8- and 16-bit images, the kind screenshot tools write; null for anything else.
+const PNG_SIG = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+const CHANNELS = { 0: 1, 2: 3, 3: 1, 4: 2, 6: 4 };
+const KEEP_CHUNKS = new Set(["PLTE", "tRNS", "gAMA", "sRGB", "cHRM", "iCCP", "pHYs"]);
+const CRC_TABLE = Array.from({ length: 256 }, (_, n) => { let c = n; for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1; return c >>> 0; });
+function crc32(buf) { let c = 0xffffffff; for (let i = 0; i < buf.length; i++) c = CRC_TABLE[(c ^ buf[i]) & 255] ^ (c >>> 8); return (c ^ 0xffffffff) >>> 0; }
+function pngChunk(type, data) {
+  const out = Buffer.alloc(12 + data.length); out.writeUInt32BE(data.length, 0); out.write(type, 4, "ascii"); data.copy(out, 8);
+  out.writeUInt32BE(crc32(out.subarray(4, 8 + data.length)), 8 + data.length); return out;
+}
+const paeth = (a, b, c) => { const p = a + b - c, pa = Math.abs(p - a), pb = Math.abs(p - b), pc = Math.abs(p - c); return pa <= pb && pa <= pc ? a : pb <= pc ? b : c; };
+function pngDecode(buf) {
+  const size = pngSize(buf); if (!size) return null;
+  const depth = buf[24], ctype = buf[25];
+  if (!CHANNELS[ctype] || (depth !== 8 && depth !== 16) || buf[28] /* interlaced */) return null;
+  const bpp = CHANNELS[ctype] * depth / 8, stride = size.w * bpp, idat = [], keep = [];
+  for (let p = 8; p + 12 <= buf.length;) {
+    const len = buf.readUInt32BE(p), type = buf.toString("ascii", p + 4, p + 8), end = p + 12 + len;
+    if (end > buf.length) return null;
+    if (type === "IDAT") idat.push(buf.subarray(p + 8, p + 8 + len)); else if (KEEP_CHUNKS.has(type)) keep.push(buf.subarray(p, end));
+    if (type === "IEND") break;
+    p = end;
+  }
+  let raw; try { raw = inflateSync(Buffer.concat(idat)); } catch { return null; }
+  if (raw.length < (stride + 1) * size.h) return null;
+  const px = Buffer.alloc(stride * size.h);
+  for (let y = 0; y < size.h; y++) {
+    const f = raw[y * (stride + 1)], s = y * (stride + 1) + 1, o = y * stride, u = o - stride;
+    if (f > 4) return null;
+    for (let i = 0; i < stride; i++) {
+      const a = i >= bpp ? px[o + i - bpp] : 0, b = y ? px[u + i] : 0, v = raw[s + i];
+      px[o + i] = f === 0 ? v : f === 1 ? v + a : f === 2 ? v + b : f === 3 ? v + ((a + b) >> 1) : v + paeth(a, b, y && i >= bpp ? px[u + i - bpp] : 0);
+    }
+  }
+  return { ...size, depth, ctype, bpp, stride, px, keep };
+}
+function pngCrop(img, r) {
+  const rs = r.w * img.bpp, raw = Buffer.alloc((rs + 1) * r.h); // each row: filter 0, then its pixels
+  for (let y = 0; y < r.h; y++) { const from = (r.y + y) * img.stride + r.x * img.bpp; img.px.copy(raw, y * (rs + 1) + 1, from, from + rs); }
+  const ihdr = Buffer.alloc(13); ihdr.writeUInt32BE(r.w, 0); ihdr.writeUInt32BE(r.h, 4); ihdr[8] = img.depth; ihdr[9] = img.ctype;
+  return Buffer.concat([PNG_SIG, pngChunk("IHDR", ihdr), ...img.keep, pngChunk("IDAT", deflateSync(raw)), pngChunk("IEND", Buffer.alloc(0))]);
+}
+// One PNG per rectangle ({ x, y, w, h } in the image's pixels), or null when the
+// image can't be read or a rectangle doesn't fit inside it.
+function splitPng(buf, rects) {
+  const img = pngDecode(buf); if (!img) return null;
+  if (!rects.every((r) => r.x >= 0 && r.y >= 0 && r.w > 0 && r.h > 0 && r.x + r.w <= img.w && r.y + r.h <= img.h)) return null;
+  return rects.map((r) => pngCrop(img, r));
+}
+
+// Displays: where each one sits on the desktop, as { name, x, y, w, h } in the
+// units the click tool uses (logical pixels on Wayland, X pixels on X11, physical
+// pixels from the virtual screen's corner on Windows, points on macOS). Each
+// parser reads one tool's output.
+const rotated = (t) => /90|270/.test(String(t || ""));
+function parseCosmicRandr(kdl) {
+  const out = [];
+  for (const block of String(kdl || "").split(/^output /m).slice(1)) {
+    const head = block.split("\n")[0], name = (head.match(/^"([^"]+)"/) || [])[1];
+    const pos = block.match(/^\s*position (-?\d+) (-?\d+)/m), mode = block.match(/^\s*mode (\d+) (\d+) \d+[^\n]*current=#true/m);
+    if (!name || /enabled=#false/.test(head) || !pos || !mode) continue;
+    const sc = Number((block.match(/^\s*scale ([\d.]+)/m) || [])[1]) || 1, d = block.match(/^\s*description make="([^"]*)" model="([^"]*)"/m);
+    let w = +mode[1] / sc, h = +mode[2] / sc; if (rotated((block.match(/^\s*transform "([^"]*)"/m) || [])[1])) [w, h] = [h, w];
+    out.push({ name, model: d ? (d[1] + " " + d[2]).trim() : "", x: +pos[1], y: +pos[2], w: Math.round(w), h: Math.round(h) });
+  }
+  return out;
+}
+function parseWlrRandr(json) { // sway, Hyprland, river, labwc…
+  let a; try { a = JSON.parse(json); } catch { return []; }
+  return (Array.isArray(a) ? a : []).map((o) => {
+    const m = o && o.enabled !== false && o.position && (o.modes || []).find((x) => x.current); if (!m) return null;
+    const sc = Number(o.scale) || 1; let w = m.width / sc, h = m.height / sc; if (rotated(o.transform)) [w, h] = [h, w];
+    return { name: String(o.name || ""), model: [o.make, o.model].filter((x) => x && x !== "Unknown").join(" "), x: +o.position.x, y: +o.position.y, w: Math.round(w), h: Math.round(h) };
+  }).filter(Boolean);
+}
+function parseKscreen(json) { // KDE Plasma
+  let a; try { a = JSON.parse(json); } catch { return []; }
+  return ((a && a.outputs) || []).map((o) => {
+    const m = o && o.enabled && o.connected !== false && o.pos && (o.modes || []).find((x) => String(x.id) === String(o.currentModeId)); if (!m || !m.size) return null;
+    const sc = Number(o.scale) || 1; let w = m.size.width / sc, h = m.size.height / sc; if (o.rotation === 2 || o.rotation === 8) [w, h] = [h, w];
+    return { name: String(o.name || ""), model: "", x: +o.pos.x, y: +o.pos.y, w: Math.round(w), h: Math.round(h) };
+  }).filter(Boolean);
+}
+function parseXrandr(text) { // " 0: +*HDMI-1 1600/440x900/250+0+0  HDMI-1"
+  return [...String(text || "").matchAll(/^\s*\d+:\s+\S+\s+(\d+)\/\d+x(\d+)\/\d+\+(-?\d+)\+(-?\d+)\s+(\S+)/gm)].map((m) => ({ name: m[5], model: "", x: +m[3], y: +m[4], w: +m[1], h: +m[2] }));
+}
+function parseLines(text) { // "name|x|y|w|h" per display, from the Windows and macOS scripts below
+  return String(text || "").split(/\r?\n/).map((l, i) => { const p = l.trim().split("|"); return p.length === 5 ? { name: p[0].replace(/^\\\\\.\\/, "") || "Display " + (i + 1), model: "", x: +p[1], y: +p[2], w: Math.round(+p[3]), h: Math.round(+p[4]), display: i + 1 } : null; }).filter(Boolean);
+}
+const WIN_SCREENS = WIN_DPI + "Add-Type -AssemblyName System.Windows.Forms; $b = [System.Windows.Forms.SystemInformation]::VirtualScreen; [System.Windows.Forms.Screen]::AllScreens | ForEach-Object { $_.DeviceName + '|' + ($_.Bounds.X - $b.Left) + '|' + ($_.Bounds.Y - $b.Top) + '|' + $_.Bounds.Width + '|' + $_.Bounds.Height }";
+// NSScreen frames are in points from the main display's bottom-left corner; this
+// flips them to top-left, which is what cliclick uses. screens[0] is the main
+// display, which is screencapture's -D 1.
+const MAC_SCREENS = "ObjC.import('AppKit'); var s = $.NSScreen.screens, top = s.objectAtIndex(0).frame.size.height, out = []; for (var i = 0; i < s.count; i++) { var o = s.objectAtIndex(i), f = o.frame, n = 'Display ' + (i + 1); try { n = ObjC.unwrap(o.localizedName) || n; } catch (e) {} out.push(String(n).replace(/[|]/g, ' ') + '|' + f.origin.x + '|' + (top - f.origin.y - f.size.height) + '|' + f.size.width + '|' + f.size.height); } out.join('\\n')";
+// Tools that list the displays, in order, as [cmd, args, parser].
+function monitorCmds(platform = process.platform, wayland = process.env.XDG_SESSION_TYPE === "wayland") {
+  if (platform === "darwin") return [["osascript", ["-l", "JavaScript", "-e", MAC_SCREENS], parseLines]];
+  if (platform === "win32") return [[...psEncoded(WIN_SCREENS), parseLines]];
+  const xr = ["xrandr", ["--listmonitors"], parseXrandr]; // on Wayland, through Xwayland: right unless the display is scaled
+  return wayland ? [["cosmic-randr", ["list", "--kdl"], parseCosmicRandr], ["wlr-randr", ["--json"], parseWlrRandr], ["kscreen-doctor", ["-j"], parseKscreen], xr] : [xr];
+}
+// Drop what can't be used, fold mirrored displays into one, order them left to
+// right and say where each one is ("left", "right", "top"…) when there are several.
+function tidyMonitors(list) {
+  const out = [];
+  for (const m of list || []) {
+    if (!m || !m.name || ![m.x, m.y, m.w, m.h].every(Number.isFinite) || m.w <= 0 || m.h <= 0) continue;
+    const twin = out.find((o) => o.x === m.x && o.y === m.y && o.w === m.w && o.h === m.h);
+    if (twin) twin.name += "+" + m.name; else out.push({ ...m });
+  }
+  out.sort((a, b) => a.x - b.x || a.y - b.y);
+  const overlap = (a0, a1, b0, b1) => a0 < b1 && b0 < a1, n = out.length;
+  const rank = (i) => (i === 0 ? 0 : i === n - 1 ? 2 : 1);
+  if (n > 1 && out.every((a) => out.every((b) => overlap(a.y, a.y + a.h, b.y, b.y + b.h)))) out.forEach((m, i) => { m.where = ["left", n > 3 ? "middle " + i : "middle", "right"][rank(i)]; });
+  else if (n > 1 && out.every((a) => out.every((b) => overlap(a.x, a.x + a.w, b.x, b.x + b.w)))) [...out].sort((a, b) => a.y - b.y).forEach((m, i) => { m.where = ["top", n > 3 ? "middle " + i : "middle", "bottom"][rank(i)]; });
+  return out;
+}
+// The displays connected now, from the first tool here that lists them; [] if none can.
+function listMonitors() {
+  const linux = process.platform !== "win32" && process.platform !== "darwin";
+  for (const [cmd, args, parse] of monitorCmds()) {
+    if (linux && !hasCmd(cmd)) continue;
+    const p = spawnSync(cmd, args, { encoding: "utf8", timeout: 8000, killSignal: "SIGKILL" });
+    const mons = p.status === 0 ? tidyMonitors(parse(p.stdout)) : [];
+    if (mons.length) return mons;
+  }
+  return [];
+}
+// Where each display is in a screenshot of the whole desktop, in its pixels: the
+// layout's bounding box, scaled to fit the image (a HiDPI capture is bigger than
+// the layout's logical size). null when the image isn't the whole layout, e.g. a
+// tool that took one display only, or an image from another setup.
+function monitorAreas(monitors, w, h) {
+  if (!monitors || monitors.length < 2) return null;
+  const x0 = Math.min(...monitors.map((m) => m.x)), y0 = Math.min(...monitors.map((m) => m.y));
+  const lw = Math.max(...monitors.map((m) => m.x + m.w)) - x0, lh = Math.max(...monitors.map((m) => m.y + m.h)) - y0, k = w / lw;
+  if (!(k >= 0.25 && k <= 4) || Math.abs(h - lh * k) > Math.max(2, 2 * k)) return null;
+  return monitors.map((m) => {
+    const x = Math.round((m.x - x0) * k), y = Math.round((m.y - y0) * k);
+    return { ...m, area: { x, y, w: Math.min(w - x, Math.round(m.w * k)), h: Math.min(h - y, Math.round(m.h * k)) } };
+  });
+}
+const monitorLabel = (m) => m.name + (m.where ? " (" + m.where + ")" : "");
+const monitorOf = (m) => ({ name: m.name, x: m.x, y: m.y, w: m.w, h: m.h, ...(m.where ? { where: m.where } : {}) });
+
 // Screenshot tools to try, in order, as [cmd, args] that write a PNG to `file`,
 // or [cmd, args, dir] for a tool that only takes a folder (it picks the name).
 // scrot and import only see X11, which on Wayland is a blank screen, so they're
-// left out there.
-function captureCmds(file, platform = process.platform, wayland = process.env.XDG_SESSION_TYPE === "wayland") {
-  if (platform === "darwin") return [["screencapture", ["-x", "-t", "png", file]]];
+// left out there. Each captures the whole desktop (every display in one image),
+// except screencapture: the main display, or `display` (1 = main, 2…) if given.
+function captureCmds(file, platform = process.platform, wayland = process.env.XDG_SESSION_TYPE === "wayland", display = 0) {
+  if (platform === "darwin") return [["screencapture", ["-x", ...(display ? ["-D", String(display)] : []), "-t", "png", file]]];
   if (platform === "win32") {
-    const ps = "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $b = [System.Windows.Forms.SystemInformation]::VirtualScreen; $bmp = New-Object System.Drawing.Bitmap $b.Width, $b.Height; $g = [System.Drawing.Graphics]::FromImage($bmp); $g.CopyFromScreen($b.Left, $b.Top, 0, 0, $bmp.Size); $bmp.Save('" + file.replace(/'/g, "''") + "', [System.Drawing.Imaging.ImageFormat]::Png)";
-    return [["powershell", ["-NoProfile", "-Command", ps]]];
+    const ps = WIN_DPI + "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $b = [System.Windows.Forms.SystemInformation]::VirtualScreen; $bmp = New-Object System.Drawing.Bitmap $b.Width, $b.Height; $g = [System.Drawing.Graphics]::FromImage($bmp); $g.CopyFromScreen($b.Left, $b.Top, 0, 0, $bmp.Size); $bmp.Save('" + file.replace(/'/g, "''") + "', [System.Drawing.Imaging.ImageFormat]::Png)";
+    return [psEncoded(ps)];
   }
   const dir = file.replace(/\.png$/, ".d");
   return [["gnome-screenshot", ["-f", file]], ["spectacle", ["-b", "-n", "-f", "-o", file]], ["cosmic-screenshot", ["--interactive=false", "--modal=false", "--notify=false", "--save-dir", dir], dir], ["grim", [file]],
     ["xfce4-screenshooter", ["-f", "-s", file]], ...(wayland ? [] : [["scrot", [file]], ["import", ["-window", "root", file]]])];
 }
-function addScreen(id, name, size, via) {
-  const s = { id, name: String(name || "").trim().slice(0, 80) || "Screen " + new Date().toLocaleString(), w: size.w, h: size.h, ts: Date.now(), via, regions: [] };
-  saveScreens([s, ...loadScreens()]);
-  return s;
+// On Wayland, cosmic-screenshot (and other portal tools) ask xdg-desktop-portal,
+// which keys its screenshot permission on the app that started us: the systemd
+// unit in our cgroup, app[-<launcher>]-<AppID>-<random>.scope or
+// app[-<launcher>]-<AppID>[@<random>].service. Started from the COSMIC dock,
+// that's com.system76.CosmicAppList; from a terminal, "" (no app id).
+function portalAppId(cgroup) {
+  const unit = String(cgroup || "").trim().split("\n").pop().split("/").pop();
+  const m = unit.match(/^app-(?:[A-Za-z0-9]+-)?(.+?)(?:-[^-]*)?\.scope$/) || unit.match(/^app-(?:[A-Za-z0-9]+-)?(.+?)(?:@.*)?\.service$/);
+  const id = m ? m[1].replace(/\\x2d/g, "-") : "";
+  return /^[A-Za-z_][\w-]*(\.[A-Za-z_][\w-]*)+$/.test(id) ? id : "";
 }
-// Take a screenshot of the whole screen with the first tool that works here.
-function captureScreen(name) {
-  const id = randomBytes(6).toString("hex"), file = screenFile(id), tried = [];
-  try { mkdirSync(SCREENS_DIR, { recursive: true }); } catch (e) { return { error: String((e && e.message) || e) }; }
-  const posix = process.platform !== "win32" && process.platform !== "darwin";
-  for (const [cmd, args, dir] of captureCmds(file)) {
-    if (posix && !hasCmd(cmd)) continue;
+const PERMS = ["--session", "--dest", "org.freedesktop.impl.portal.PermissionStore", "--object-path", "/org/freedesktop/impl/portal/PermissionStore", "--method"];
+// The app id the portal has screenshots turned off for (it answers "no" without
+// asking again), or "" when they're allowed, unset or it can't be read.
+function screenshotBlocked() {
+  if (process.platform !== "linux" || !hasCmd("gdbus")) return "";
+  let id = ""; try { id = portalAppId(readFileSync("/proc/self/cgroup", "utf8")); } catch {}
+  if (!id) return "";
+  const out = String(spawnSync("gdbus", ["call", ...PERMS, "org.freedesktop.impl.portal.PermissionStore.Lookup", "screenshot", "screenshot"], { encoding: "utf8", timeout: 5000 }).stdout || "");
+  const m = out.match(new RegExp("'" + id.replace(/[.\\-]/g, "\\$&") + "': \\['(\\w+)'"));
+  return m && m[1] === "no" ? id : "";
+}
+// Turn screenshots on for the app id that blocks them. Only when the user asks,
+// in the app: it's their desktop's permission, and it covers every app started
+// the same way (e.g. everything from the COSMIC dock).
+function allowScreenshots() {
+  const id = screenshotBlocked(); if (!id) return { error: "Screenshots aren't turned off for Symbiot. Try Capture screen again." };
+  const p = spawnSync("gdbus", ["call", ...PERMS, "org.freedesktop.impl.portal.PermissionStore.SetPermission", "screenshot", "true", "screenshot", id, "['yes']"], { encoding: "utf8", timeout: 5000 });
+  return p.status === 0 ? { ok: true, app: id } : { error: "Couldn't change the permission: " + (String(p.stderr || "").trim() || "exit " + p.status) };
+}
+const newId = () => randomBytes(6).toString("hex");
+const defaultName = () => "Screen " + new Date().toLocaleString();
+function addScreens(list) { saveScreens([...list, ...loadScreens()]); return list; }
+const screenOf = (id, name, size, via, extra = {}) => ({ id, name: String(name || "").trim().slice(0, 80) || defaultName(), w: size.w, h: size.h, ts: Date.now(), via, ...extra, regions: extra.regions || [] });
+function addScreen(id, name, size, via, extra) { return addScreens([screenOf(id, name, size, via, extra)])[0]; }
+// "<name> · HDMI-1 (left)", kept within the 80 characters a name can have.
+const pieceName = (name, m) => { const tail = " · " + monitorLabel(m), base = String(name || "").trim() || defaultName(); return base.slice(0, Math.max(10, 80 - tail.length)) + tail; };
+
+// Run the screenshot tools until one writes a PNG to `file`: { size, via }, or
+// { tried } with the tools that ran and failed.
+function shoot(file, display) {
+  const tried = [], linux = process.platform !== "win32" && process.platform !== "darwin";
+  for (const [cmd, args, dir] of captureCmds(file, process.platform, process.env.XDG_SESSION_TYPE === "wayland", display)) {
+    if (linux && !hasCmd(cmd)) continue;
     tried.push(cmd);
     if (dir) try { mkdirSync(dir, { recursive: true }); } catch {}
     spawnSync(cmd, args, { stdio: "ignore", timeout: 20000, killSignal: "SIGKILL" });
     if (dir) { try { const f = readdirSync(dir).find((x) => /\.png$/i.test(x)); if (f) renameSync(join(dir, f), file); } catch {} rmSync(dir, { recursive: true, force: true }); }
     let size = null; try { size = pngSize(readFileSync(file)); } catch {}
-    if (size) return addScreen(id, name, size, cmd);
+    if (size) return { size, via: cmd };
     try { unlinkSync(file); } catch {}
   }
+  return { tried };
+}
+// Cut a whole-desktop PNG into one screen per display in `want` (each with its
+// regions, if `regions` are given in the whole image's pixels). null when the
+// image doesn't match how the displays are laid out now.
+function piecesOf(buf, size, monitors, want, name, via, regions) {
+  const areas = monitorAreas(monitors, size.w, size.h); if (!areas) return null;
+  const mine = areas.filter((a) => want.some((m) => m.name === a.name));
+  const pngs = mine.length && splitPng(buf, mine.map((a) => a.area)); if (!pngs) return null;
+  const ids = mine.map(() => newId());
+  try { pngs.forEach((p, i) => writeFileSync(screenFile(ids[i]), p)); } catch (e) { ids.forEach((id) => { try { unlinkSync(screenFile(id)); } catch {} }); return { error: String((e && e.message) || e) }; }
+  return addScreens(mine.map((a, i) => {
+    // a region goes with the display its centre is on, moved into that display's pixels
+    const rs = (regions || []).filter((r) => { const c = center(r); return c.x >= a.area.x && c.x < a.area.x + a.area.w && c.y >= a.area.y && c.y < a.area.y + a.area.h; })
+      .map((r) => { const x = Math.max(0, r.x - a.area.x), y = Math.max(0, r.y - a.area.y); return { ...r, x, y, w: Math.max(1, Math.min(a.area.w - x, r.x + r.w - a.area.x - x)), h: Math.max(1, Math.min(a.area.h - y, r.y + r.h - a.area.y - y)) }; });
+    return screenOf(ids[i], pieceName(name, a), { w: a.area.w, h: a.area.h }, via, { monitor: monitorOf(a), regions: rs });
+  }));
+}
+const layoutOf = (mons) => mons.map((m) => `${m.name} ${m.w}×${m.h} at ${m.x},${m.y}`).join(", ");
+
+// Take a screenshot with the first tool that works here. `which` picks what to
+// keep when there are several displays: "all" (one image of the whole desktop,
+// the default), "each" (one screen per display) or a display's name (just that
+// one). Gives the screen, or { screens: [...] } for several, or { error }.
+// When the screenshot can't be cut up, it keeps the whole image and says why (`note`).
+function captureScreen(name, which = "all") {
+  try { mkdirSync(SCREENS_DIR, { recursive: true }); } catch (e) { return { error: String((e && e.message) || e) }; }
+  const mons = which && which !== "all" ? listMonitors() : [], want = which === "each" ? mons : mons.filter((m) => m.name === which);
+  if (which && which !== "all" && which !== "each" && !want.length) return { error: `There's no display called ${which} connected now. Pick one again.` };
+  // macOS: screencapture takes one display at a time, in its own pixels
+  if (process.platform === "darwin" && mons.length > 1) {
+    const out = [];
+    for (const m of want) {
+      const id = newId(), r = shoot(screenFile(id), m.display);
+      if (!r.size) { if (out.length) break; return captureFailed(r.tried); }
+      out.push(screenOf(id, pieceName(name, m), r.size, r.via, { monitor: monitorOf(m) }));
+    }
+    addScreens(out);
+    return out.length === 1 ? out[0] : { screens: out };
+  }
+  const id = newId(), file = screenFile(id), r = shoot(file);
+  if (!r.size) return captureFailed(r.tried);
+  if (!mons.length && which && which !== "all") return { ...addScreen(id, name, r.size, r.via), note: "Couldn't read how your displays are laid out (Symbiot asks cosmic-randr, wlr-randr, kscreen-doctor or xrandr), so it's kept as one image." };
+  if (mons.length < 2) return addScreen(id, name, r.size, r.via); // one display: the image is that display
+  let buf = null; try { buf = readFileSync(file); } catch {}
+  const pieces = buf && piecesOf(buf, r.size, mons, want, name, r.via);
+  if (!pieces || pieces.error) {
+    const why = pieces && pieces.error ? "Couldn't save the pieces (" + pieces.error + ")" : `The screenshot (${r.size.w}×${r.size.h}) doesn't match how your displays are laid out (${layoutOf(mons)})`;
+    return { ...addScreen(id, name, r.size, r.via), note: why + ", so it's kept as one image." };
+  }
+  try { unlinkSync(file); } catch {}
+  return pieces.length === 1 ? pieces[0] : { screens: pieces };
+}
+// Cut a saved screen of the whole desktop into one screen per display, regions
+// included. The original stays, so nothing is lost if the cut looks wrong.
+function splitScreen(id) {
+  const s = loadScreens().find((x) => x.id === id); if (!s) return { error: "not found" };
+  if (s.monitor) return { error: "This screen is already one display." };
+  const mons = listMonitors();
+  if (mons.length < 2) return { error: mons.length ? "Only one display is connected now, so there's nothing to split it into." : "Couldn't read how your displays are laid out (Symbiot asks cosmic-randr, wlr-randr, kscreen-doctor or xrandr on Linux)." };
+  let buf = null; try { buf = readFileSync(screenFile(id)); } catch {}
+  if (!buf) return { error: "This screen's image is missing." };
+  const pieces = piecesOf(buf, s, mons, mons, s.name, s.via, s.regions);
+  if (!pieces) return { error: `This image (${s.w}×${s.h}) doesn't match how your displays are laid out now (${layoutOf(mons)}), so it can't be split by display.` };
+  return pieces.error ? pieces : { screens: pieces };
+}
+function captureFailed(tried) {
+  const blocked = tried.length && screenshotBlocked();
+  if (blocked) return { error: `Your desktop has screenshots turned off for apps started from ${blocked}, which is how Symbiot was started (tried ${tried.join(", ")}). Allow screenshots to turn them back on, or take one yourself and use Load image.`, blocked };
   return { error: tried.length ? `Couldn't take a screenshot (tried ${tried.join(", ")}). Take one yourself and use Load image.` : "No screenshot tool found. Install gnome-screenshot, spectacle, grim or scrot, or take one yourself and use Load image." };
 }
 // A PNG you already have (base64, or a data: URL), for when capture can't run.
@@ -99,20 +358,29 @@ function removeScreen(id) {
   return { ok: true };
 }
 const center = (r) => ({ x: r.x + Math.floor(r.w / 2), y: r.y + Math.floor(r.h / 2) });
-// What automation reads: each region with the point to aim at (its centre).
+// Where a point in a one-display screen's pixels is on the desktop, in the click
+// tool's units: from that display's corner, scaled to its size (so a HiDPI or
+// Retina capture still lands right).
+const onDesktop = (s, p) => ({ x: Math.round(s.monitor.x + p.x * s.monitor.w / s.w), y: Math.round(s.monitor.y + p.y * s.monitor.h / s.h) });
+// What automation reads: each region with the point to aim at (its centre), and
+// for one display of several, which display and that point on the whole desktop.
 function blueprint(s) {
-  return { screen: s.name, size: { w: s.w, h: s.h }, regions: (s.regions || []).map((r) => ({ label: r.label, x: r.x, y: r.y, w: r.w, h: r.h, center: center(r) })) };
+  return { screen: s.name, size: { w: s.w, h: s.h }, ...(s.monitor ? { monitor: s.monitor } : {}),
+    regions: (s.regions || []).map((r) => ({ label: r.label, x: r.x, y: r.y, w: r.w, h: r.h, center: center(r), ...(s.monitor ? { desktop: onDesktop(s, center(r)) } : {}) })) };
 }
 
 // Click tools to try, in order, as a list of [cmd, args] steps that move the
 // mouse to (x, y) and left-click there. xdotool only reaches X11 windows, so on
 // Wayland it's ydotool (it needs /dev/uinput). ydotool 1.x moves relative unless
 // told --absolute and takes a button code; 0.1.x (Debian/Ubuntu) moves to the
-// point and takes a button number.
+// point and takes a button number. On Windows, PowerShell: SetCursorPos, offset
+// by the virtual screen's corner (the capture's 0,0), then left down + up.
+// cliclick reads "-5" as relative, so a display left of or above the main one
+// gets "=-5" (absolute).
 function clickCmds(x, y, platform = process.platform, wayland = process.env.XDG_SESSION_TYPE === "wayland", ydotool1 = false) {
-  x = String(x); y = String(y);
-  if (platform === "darwin") return [[["cliclick", ["c:" + x + "," + y]]]];
-  if (platform === "win32") return [];
+  x = String(Math.round(Number(x)) || 0); y = String(Math.round(Number(y)) || 0);
+  if (platform === "darwin") return [[["cliclick", ["c:" + x.replace(/^-/, "=-") + "," + y.replace(/^-/, "=-")]]]];
+  if (platform === "win32") return [[psEncoded(WIN_DPI + "Add-Type -AssemblyName System.Windows.Forms; $b = [System.Windows.Forms.SystemInformation]::VirtualScreen; if (-not [Symbiot.User32]::SetCursorPos($b.Left + " + x + ", $b.Top + " + y + ")) { [Console]::Error.WriteLine('SetCursorPos failed'); exit 1 }; Start-Sleep -Milliseconds 50; [Symbiot.User32]::mouse_event(2, 0, 0, 0, [UIntPtr]::Zero); [Symbiot.User32]::mouse_event(4, 0, 0, 0, [UIntPtr]::Zero)")]];
   const ydo = ydotool1 ? [["ydotool", ["mousemove", "--absolute", "-x", x, "-y", y]], ["ydotool", ["click", "0xC0"]]] : [["ydotool", ["mousemove", x, y]], ["ydotool", ["click", "1"]]];
   const xdo = [["xdotool", ["mousemove", "--sync", x, y, "click", "1"]]];
   return wayland ? [ydo] : [xdo, ydo];
@@ -131,13 +399,14 @@ function clickSpace(tool) {
 function clickRegion(id, regionId) {
   const s = loadScreens().find((x) => x.id === id); if (!s) return { error: "not found" };
   const r = (s.regions || []).find((x) => x.id === regionId); if (!r) return { error: "That region is gone. Reload the screen." };
-  if (process.platform === "win32") return { error: "Clicking isn't supported on Windows yet." };
   const c = center(r), wayland = process.env.XDG_SESSION_TYPE === "wayland";
   // The first tool that's installed does it. If that fails it says so, rather
   // than trying the next one: a half-done move + click could otherwise click twice.
   const tool = clickCmds(c.x, c.y).map((st) => st[0][0]).find((t) => hasCmd(t));
   if (tool) {
-    const sp = clickSpace(tool), x = sp ? Math.round(c.x * sp.w / s.w) : c.x, y = sp ? Math.round(c.y * sp.h / s.h) : c.y;
+    // one display of several: its place on the desktop; the whole desktop: rescaled to the click tool's size
+    const sp = !s.monitor && clickSpace(tool), d = s.monitor ? onDesktop(s, c) : null;
+    const x = d ? d.x : sp ? Math.round(c.x * sp.w / s.w) : c.x, y = d ? d.y : sp ? Math.round(c.y * sp.h / s.h) : c.y;
     const steps = clickCmds(x, y, process.platform, wayland, tool === "ydotool" && ydotoolIs1()).find((st) => st[0][0] === tool);
     for (const [cmd, args] of steps) {
       const p = spawnSync(cmd, args, { encoding: "utf8", timeout: 10000, killSignal: "SIGKILL" });
@@ -145,8 +414,8 @@ function clickRegion(id, regionId) {
     }
     return { ok: true, label: r.label, x, y, via: tool };
   }
-  const want = process.platform === "darwin" ? "cliclick (brew install cliclick)" : wayland ? "ydotool" : "xdotool or ydotool";
+  const want = process.platform === "darwin" ? "cliclick (brew install cliclick)" : process.platform === "win32" ? "Windows PowerShell" : wayland ? "ydotool" : "xdotool or ydotool";
   return { error: `No click tool found. Install ${want}.` };
 }
 
-export { loadScreens, screenImage, pngSize, captureCmds, captureScreen, importScreen, setRegions, renameScreen, removeScreen, blueprint, clickCmds, clickRegion };
+export { loadScreens, screenImage, pngSize, pngDecode, splitPng, captureCmds, monitorCmds, parseCosmicRandr, parseWlrRandr, parseKscreen, parseXrandr, parseLines, tidyMonitors, monitorAreas, listMonitors, portalAppId, allowScreenshots, captureScreen, splitScreen, importScreen, setRegions, renameScreen, removeScreen, blueprint, clickCmds, clickRegion };

package/ui.mjs

@@ -165,8 +165,8 @@ label.check input{width:auto}
 <div id="review" class="review hidden"></div>
 <div style="margin-top:22px;border-top:1px solid var(--line);padding-top:4px">
 <div class="tgroup">Screens <span class="tcount">experimental &middot; blueprints for screen automation</span></div>
-<div class="note muted" style="margin-top:2px">Capture a screen, then drag a box over each part that matters (a button, a field, a menu) and name it. Each region keeps its pixel coordinates and its centre, ready for automation to aim at. <b>Click here</b> on a region clicks its centre on your real screen, after you confirm. Nothing types yet.</div>
-<div class="row" style="margin-top:10px"><input id="screenname" placeholder="name the screen, e.g. GitHub PR page" style="flex:1"><select id="screendelay" title="wait first, so you can bring the right window to the front" style="flex:0 0 auto;width:auto"><option value="0">now</option><option value="3">in 3s</option><option value="5">in 5s</option><option value="10">in 10s</option></select><button class="ghost" id="capture">Capture screen</button><button class="ghost" id="screenload" title="use a PNG screenshot you already have">Load image</button><input type="file" id="screenfile" accept="image/png" class="hidden"></div>
+<div class="note muted" style="margin-top:2px">Capture a screen, then drag a box over each part that matters (a button, a field, a menu) and name it. Each region keeps its pixel coordinates and its centre, ready for automation to aim at. With more than one display, pick which one to capture, or one screen per display. <b>Click here</b> on a region clicks its centre on your real screen, after you confirm. Nothing types yet.</div>
+<div class="row" style="margin-top:10px"><input id="screenname" placeholder="name the screen, e.g. GitHub PR page" style="flex:1"><select id="screenwhich" class="hidden" title="which display to capture" style="flex:0 0 auto;width:auto"></select><select id="screendelay" title="wait first, so you can bring the right window to the front" style="flex:0 0 auto;width:auto"><option value="0">now</option><option value="3">in 3s</option><option value="5">in 5s</option><option value="10">in 10s</option></select><button class="ghost" id="capture">Capture screen</button><button class="ghost" id="screenload" title="use a PNG screenshot you already have">Load image</button><input type="file" id="screenfile" accept="image/png" class="hidden"></div>
 <div id="screenmsg"></div>
 <div id="screenlist" class="taskfilter"></div>
 <div id="screenview"></div>
@@ -414,6 +414,10 @@ h+="<div class='rcard' data-repo='"+esc(r.repo)+"'><div class='rhead'><b>"+esc(r
 r.tasks.forEach(function(t){PENDTASKS.push(t);h+="<div class='task' data-id='"+esc(t.id)+"'><span class='t'>"+esc(t.text)+"</span>"+askBtn(t)+"<button class='rm sendback' title='not right - send back to the agent (unticks it)'>&#8630;</button></div>";});
 if(r.untasked)h+="<div class='muted' style='margin:6px 0'>Uncommitted changes with no ticked task behind them. Check the diff before you approve.</div>";
 if(r.running)h+="<div class='muted' style='margin:6px 0'>&#9203; Agent still working: its changes may be half done. Approve unlocks when it finishes.</div>";
+var ur=r.unreleased;if(ur)h+="<div class='muted' style='margin:6px 0'><span class='err'>Unreleased:</span> <code>"+esc(ur.base)+"</code> is "+ur.ahead+" commit"+(ur.ahead>1?"s":"")+" past <code>"+esc(ur.tag)+"</code>, so merged work isn't released yet. "+(ur.bump?"These changes bump the version to <b>"+esc(ur.bump)+"</b>: after the PR merges, tag <code>v"+esc(ur.bump)+"</code> on <code>"+esc(ur.base)+"</code> to release it.":r.bumpOffer&&r.files.length?"Approve can bump the version in this PR (below); tag it after the PR merges to release it.":"Bump the version (here or in a later PR) and tag it to release it.")+"</div>";
+// The version is already released (its v* tag exists) and these changes keep it:
+// Approve bumps it in the PR too, a patch unless you pick otherwise.
+var bo=r.bumpOffer;if(bo&&r.files.length)h+="<div class='row' style='margin:6px 0;font-size:12px'><span class='muted'>Version</span><select class='bumpsel' title='bump the version in package.json (and the lockfile) in this PR' style='flex:0 0 auto;width:auto'><option value='patch'>bump to "+esc(bo.patch)+" (patch)</option><option value='minor'>bump to "+esc(bo.minor)+" (minor)</option><option value=''>keep "+esc(bo.version)+"</option></select></div>";
 h+="<div class='row'><button class='act approve'"+(r.path&&!r.running?"":" disabled")+(r.running?" title='the agent is still editing this repo'>"+(r.untasked?"Approve changes without a task":"Approve")+" &middot; agent still working":r.untasked?" data-untasked='1' title='commit on a branch, push and open a PR, without a task'>Approve changes without a task &rarr; PR":" title='commit on a branch, push, open a PR, then archive'>Approve &rarr; "+(r.files.length?"PR":"archive"))+"</button>"+(r.files.length?"<button class='ghost showdiff'>Show diff</button>":"")+"<label title='Queue GitHub auto-merge so this PR lands once its CI checks pass. Needs Allow auto-merge on the repo.' style='margin-left:auto;font-size:12px;color:var(--faint);display:flex;align-items:center;gap:6px'><input type='checkbox' class='amtoggle' style='width:auto'"+(r.autoMerge?" checked":"")+"> auto-merge on green CI</label></div><div class='rdiff hidden'></div></div>";});
 el.innerHTML=h;
 el.querySelectorAll('.rcard').forEach(function(card){var repo=card.getAttribute('data-repo');
@@ -423,12 +427,13 @@ var amt=card.querySelector('.amtoggle');if(amt)amt.addEventListener('change',fun
 var sd=card.querySelector('.showdiff'),pre=card.querySelector('.rdiff');
 if(sd)sd.addEventListener('click',function(){if(!pre.classList.contains('hidden')){pre.classList.add('hidden');sd.textContent='Show diff';return;}
 pre.textContent='Loading...';pre.classList.remove('hidden');sd.textContent='Hide diff';api('/api/pending/diff?repo='+encodeURIComponent(repo)).then(function(d){pre.textContent=(d&&d.diff)||'(no changes)';});});
-var ap=card.querySelector('.approve');if(ap)ap.addEventListener('click',function(){ap.disabled=true;ap.textContent='Committing & pushing...';
-api(ap.getAttribute('data-untasked')?'/api/pending/approve-changes':'/api/pending/approve',{repo:repo}).then(function(r){var o=document.getElementById('reviewout');
+var ap=card.querySelector('.approve'),bs=card.querySelector('.bumpsel');if(ap)ap.addEventListener('click',function(){ap.disabled=true;ap.textContent='Committing & pushing...';
+api(ap.getAttribute('data-untasked')?'/api/pending/approve-changes':'/api/pending/approve',{repo:repo,bump:bs?bs.value:''}).then(function(r){var o=document.getElementById('reviewout');
 if(!r||r.error){ap.disabled=false;ap.textContent='Approve - retry';o.innerHTML="<div class='note err'>"+esc(repo)+": "+esc((r&&r.error)||'failed')+"</div>";return;}
 var m="&#10003; <b>"+esc(repo)+"</b>: approved "+(r.approved?r.approved+" task"+(r.approved>1?"s":""):"changes without a task");
 if(r.commit)m+=" &middot; committed <code>"+esc(r.commit)+"</code> on <code>"+esc(r.branch)+"</code>";
 if(r.pr)m+=" &middot; <a href='"+esc(r.pr)+"' target='_blank' rel='noopener'>open PR</a>";
+if(r.bumped)m+="<div class='muted'>Bumps the version to <b>"+esc(r.bumped)+"</b>. After the PR merges, run <code>git pull &amp;&amp; git tag v"+esc(r.bumped)+" &amp;&amp; git push origin --tags</code> on <code>"+esc(r.base||'main')+"</code> to release it.</div>";
 if(r.autoMerge==='queued')m+=" &middot; will auto-merge when CI passes";
 else if(r.autoMerge==='unavailable')m+="<div class='muted'>auto-merge not enabled for this repo on GitHub (Settings &rarr; General &rarr; Allow auto-merge)"+(r.autoMergeErr?": "+esc(r.autoMergeErr):"")+"</div>";
 if(r.note)m+="<div class='muted'>"+esc(r.note)+"</div>";
@@ -589,7 +594,15 @@ api("/api/map").then(function(g){done=true;mapLoaded=true;if(!g.nodes||!g.nodes.
 // Screens: a screenshot plus named regions, the blueprint (screens.mjs). Drag on
 // the image to mark a region; coordinates are the screenshot's own pixels.
 // Names stay out of attributes (esc() doesn't escape quotes): rows carry indexes.
-var SCREENS=[],SCREEN=null,SDRAG=null,SPEND=null,SCLICKDELAY=3;
+var SCREENS=[],SCREEN=null,SDRAG=null,SPEND=null,SCLICKDELAY=3,MONITORS=[],SWHICH=[];
+// With several displays, Capture asks which: each one as its own screen, one of
+// them, or (not on macOS) all of them in one image. The choice is remembered.
+function loadMonitorsUI(){api('/api/screens/monitors').then(function(x){MONITORS=(x&&x.monitors)||[];var sel=$('screenwhich');
+if(MONITORS.length<2){SWHICH=[];sel.innerHTML='';sel.classList.add('hidden');renderScreen();return;}
+SWHICH=[['each','each display']].concat(MONITORS.map(function(m){return [m.name,esc(m.name)+(m.where?' ('+esc(m.where)+')':'')+' only &middot; '+m.w+'&times;'+m.h];}));if(!x||x.whole!==false)SWHICH.push(['all','all displays in one image']);
+var saved='',at=0;try{saved=localStorage.getItem('symbiot_screenwhich')||'';}catch(e){}SWHICH.forEach(function(o,i){if(o[0]===saved)at=i;});
+sel.innerHTML=SWHICH.map(function(o,i){return "<option value='"+i+"'>"+o[1]+"</option>";}).join('');sel.value=String(at);sel.classList.remove('hidden');renderScreen();});}
+function screenWhich(){var sel=$('screenwhich'),o=SWHICH[+sel.value];return (!sel.classList.contains('hidden')&&o)?o[0]:'all';}
 function loadScreensUI(){api('/api/screens').then(function(list){SCREENS=list||[];var id=SCREEN&&SCREEN.id;SCREEN=null;SCREENS.forEach(function(s){if(s.id===id)SCREEN=s;});renderScreenList();renderScreen();});}
 function renderScreenList(){var box=$('screenlist');if(!SCREENS.length){box.innerHTML="<span class='muted' style='font-size:12px'>No screens yet.</span>";return;}
 box.innerHTML="<span class='fl'>Screens</span>"+SCREENS.map(function(s,i){return "<button class='fchip"+(SCREEN&&SCREEN.id===s.id?" on":"")+"' data-i='"+i+"'>"+esc(s.name)+" <span class='tcount'>"+(s.regions||[]).length+"</span></button>";}).join('');
@@ -597,7 +610,7 @@ box.querySelectorAll('.fchip').forEach(function(b){b.addEventListener('click',fu
 function scrPct(v,of){return (v/of*100).toFixed(3)+'%';}
 function scrBox(r,s,cls){return "<div class='scrbox"+(cls?" "+cls:"")+"' style='left:"+scrPct(r.x,s.w)+";top:"+scrPct(r.y,s.h)+";width:"+scrPct(r.w,s.w)+";height:"+scrPct(r.h,s.h)+"'>"+(r.label?"<span>"+esc(r.label)+"</span>":"")+"</div>";}
 function renderScreen(){var v=$('screenview'),s=SCREEN;if(!s){v.innerHTML='';return;}
-var h="<div class='row' style='margin-top:10px'><input id='scrname' title='rename this screen' style='flex:1'><span class='muted'>"+s.w+" &times; "+s.h+" px</span><button class='ghost' id='scrcopy' title='copy the regions and their coordinates as JSON'>Copy blueprint</button><button class='ghost' id='scrdel'>Delete</button></div>";
+var h="<div class='row' style='margin-top:10px'><input id='scrname' title='rename this screen' style='flex:1'><span class='muted'>"+(s.monitor?esc(s.monitor.name)+(s.monitor.where?" ("+esc(s.monitor.where)+")":"")+" &middot; ":"")+s.w+" &times; "+s.h+" px</span>"+(!s.monitor&&MONITORS.length>1?"<button class='ghost' id='scrsplit' title='cut this screenshot into one screen per display, regions included (this one stays)'>Split by display</button>":"")+"<button class='ghost' id='scrcopy' title='copy the regions and their coordinates as JSON'>Copy blueprint</button><button class='ghost' id='scrdel'>Delete</button></div>";
 h+="<div class='scrwrap' id='scrwrap'><img src='/api/screens/image?id="+encodeURIComponent(s.id)+"&t="+encodeURIComponent(T)+"' alt='' draggable='false'>"+(s.regions||[]).map(function(r){return scrBox(r,s,'');}).join('')+(SPEND?scrBox(SPEND,s,'draw'):"")+"<div class='scrbox draw hidden' id='scrdraw'></div></div>";
 h+="<div class='mapbar' id='scrbar'>Drag on the screenshot to mark a region &middot; coordinates are screenshot pixels</div>";
 h+="<div class='row"+(SPEND?"":" hidden")+"' id='scrlabel' style='margin-top:8px'><input id='scrlabelin' placeholder='name this region, e.g. Merge button' style='flex:1'><button class='act' id='scrlabelok'>Add region</button><button class='ghost' id='scrlabelno'>Cancel</button></div>";
@@ -615,6 +628,7 @@ nm.value=s.name;
 nm.addEventListener('change',function(){var n=(nm.value||'').trim();if(n)api('/api/screens/rename',{id:s.id,name:n}).then(screenSaved);});
 $('scrcopy').addEventListener('click',function(){var b=$('scrcopy');navigator.clipboard.writeText(JSON.stringify(s.blueprint,null,2));b.textContent='Copied';setTimeout(function(){b.textContent='Copy blueprint';},1400);});
 $('scrdel').addEventListener('click',function(){if(typeof confirm==='function'&&!confirm('Delete this screen and its regions?'))return;api('/api/screens/remove',{id:s.id}).then(function(){SCREEN=null;SPEND=null;loadScreensUI();});});
+var sp=$('scrsplit');if(sp)sp.addEventListener('click',function(){sp.disabled=true;$('screenmsg').innerHTML="<div class='note muted'>Splitting&hellip;</div>";api('/api/screens/split',{id:s.id}).then(function(x){sp.disabled=false;screenAdded(x);if(x&&x.screens)$('screenmsg').insertAdjacentHTML('beforeend',"<div class='note muted'>The whole image is still there too. Delete it if you don't need it.</div>");}).catch(function(e){sp.disabled=false;screenErr(String((e&&e.message)||e));});});
 wrap.addEventListener('pointerdown',function(ev){if(ev.button)return;ev.preventDefault();SDRAG=scrPoint(ev);try{wrap.setPointerCapture(ev.pointerId);}catch(e){}});
 wrap.addEventListener('pointermove',function(ev){var p=scrPoint(ev);if(!SDRAG){bar.innerHTML='<b>x '+p.x+', y '+p.y+'</b> &middot; drag to mark a region';return;}
 var r=scrRect(SDRAG,p);bar.innerHTML='<b>x '+r.x+', y '+r.y+' &middot; '+r.w+'&times;'+r.h+'</b>';draw.classList.remove('hidden');draw.style.left=scrPct(r.x,s.w);draw.style.top=scrPct(r.y,s.h);draw.style.width=scrPct(r.w,s.w);draw.style.height=scrPct(r.h,s.h);});
@@ -628,15 +642,23 @@ var cd=$('scrclickdelay');if(cd)cd.addEventListener('change',function(){SCLICKDE
 $('scrregions').querySelectorAll('.scrclick').forEach(function(b){b.addEventListener('click',function(){clickUI(s,+b.closest('.task').getAttribute('data-i'),b);});});}
 // A real click: confirmed every time (no confirm() to ask with means no click).
 function clickUI(s,i,b){var r=(s.regions||[])[i],c=s.blueprint&&s.blueprint.regions[i];if(!r||!c)return;var d=SCLICKDELAY;
-var q="Move your mouse to “"+r.label+"” at ("+c.center.x+", "+c.center.y+") and click there"+(d?" in "+d+" seconds":" now")+"?\\n\\nIt clicks whatever is at that spot on your screen"+(d?" by then, so bring the right window to the front.":".")+(s.via==='loaded'?"\\n\\nThis screen was loaded from an image: check it matches your screen now.":"");
+var q="Move your mouse to “"+r.label+"” at ("+c.center.x+", "+c.center.y+")"+(s.monitor?" on "+s.monitor.name+(s.monitor.where?" ("+s.monitor.where+")":""):"")+" and click there"+(d?" in "+d+" seconds":" now")+"?\\n\\nIt clicks whatever is at that spot on your screen"+(d?" by then, so bring the right window to the front.":".")+(s.via==='loaded'?"\\n\\nThis screen was loaded from an image: check it matches your screen now.":"");
 if(typeof confirm!=='function'||!confirm(q))return;
 b.disabled=true;$('screenmsg').innerHTML="<div class='note muted'>"+(d?"Clicking “"+esc(r.label)+"” in "+d+"s &mdash; bring the right window to the front&hellip;":"Clicking&hellip;")+"</div>";
 api('/api/screens/click',{id:s.id,region:r.id,delay:d,confirmed:true}).then(function(x){b.disabled=false;if(!x||x.error){screenErr((x&&x.error)||'failed');return;}
 $('screenmsg').innerHTML="<div class='note ok'>&#10003; Clicked “"+esc(x.label)+"” at ("+x.x+", "+x.y+") with "+esc(x.via)+".</div>";}).catch(function(e){b.disabled=false;screenErr(String((e&&e.message)||e));});}
-function screenAdded(s){if(!s||s.error){screenErr((s&&s.error)||'failed');return;}$('screenmsg').innerHTML='';$('screenname').value='';SCREEN=s;SPEND=null;loadScreensUI();}
+// One screen, or { screens } (one per display); a note says why a capture was kept whole.
+function screenAdded(s){if(!s||s.error){screenErr((s&&s.error)||'failed');if(s&&s.blocked)allowShotsBtn(s.blocked);return;}var list=s.screens||[s];
+$('screenmsg').innerHTML=s.note?"<div class='note muted'>"+esc(s.note)+"</div>":list.length>1?"<div class='note ok'>&#10003; One screen per display: "+list.map(function(x){return esc(x.monitor?x.monitor.name+(x.monitor.where?" ("+x.monitor.where+")":""):x.name);}).join(', ')+".</div>":'';
+$('screenname').value='';SCREEN=list[0];SPEND=null;loadScreensUI();}
 function captureUI(){var b=$('capture'),d=+($('screendelay').value||0);b.disabled=true;
 $('screenmsg').innerHTML="<div class='note muted'>"+(d?"Capturing in "+d+"s &mdash; bring the window you want to the front&hellip;":"Capturing&hellip;")+"</div>";
-api('/api/screens/capture',{name:$('screenname').value||'',delay:d}).then(function(s){b.disabled=false;screenAdded(s);}).catch(function(e){b.disabled=false;screenErr(String((e&&e.message)||e));});}
+api('/api/screens/capture',{name:$('screenname').value||'',delay:d,which:screenWhich()}).then(function(s){b.disabled=false;screenAdded(s);loadMonitorsUI();}).catch(function(e){b.disabled=false;screenErr(String((e&&e.message)||e));});}
+// The desktop's screenshot permission is off for the app Symbiot was started
+// from: turn it on (asked first, it covers every app started that way), then capture.
+function allowShotsBtn(app){$('screenmsg').insertAdjacentHTML('beforeend',"<div class='row' style='margin-top:6px'><button class='act' id='scrallow'>Allow screenshots</button></div>");
+$('scrallow').addEventListener('click',function(){if(typeof confirm!=='function'||!confirm("Turn screenshots on for apps started from "+app+"?\\n\\nYour desktop keeps this permission per app, and Symbiot shares it with "+app+", so it covers every app started that way, not only Symbiot."))return;
+$('scrallow').disabled=true;api('/api/screens/allow',{confirmed:true}).then(function(x){if(!x||x.error){screenErr((x&&x.error)||'failed');return;}captureUI();}).catch(function(e){screenErr(String((e&&e.message)||e));});});}
 function pickImageUI(){var f=$('screenfile');if(f&&f.click)f.click();}
 function importUI(){var f=$('screenfile'),file=f&&f.files&&f.files[0];if(!file)return;$('screenmsg').innerHTML="<div class='note muted'>Loading&hellip;</div>";
 var rd=new FileReader();rd.onload=function(){api('/api/screens/import',{name:$('screenname').value||file.name.replace(/[.]png$/i,''),png:rd.result}).then(function(s){f.value='';screenAdded(s);});};rd.readAsDataURL(file);}
@@ -687,6 +709,7 @@ document.getElementById('newtask').addEventListener('keydown',function(e){if(e.k
 document.getElementById('capture').addEventListener('click',captureUI);
 document.getElementById('screenload').addEventListener('click',pickImageUI);
 document.getElementById('screenfile').addEventListener('change',importUI);
+document.getElementById('screenwhich').addEventListener('change',function(){try{localStorage.setItem('symbiot_screenwhich',screenWhich());}catch(e){}});
 document.getElementById('weeklyon').addEventListener('change',saveWeekly);
 document.getElementById('weeklyday').addEventListener('change',saveWeekly);
 document.getElementById('weeklyhour').addEventListener('change',saveWeekly);
@@ -725,5 +748,5 @@ function heartbeat(fresh){
 function doUpdate(){updBusy=true;try{localStorage.setItem('symbiot_update_tried',document.getElementById('ver').textContent.replace(/^v/,''));}catch(e){}var b=ubar();b.className='updatebar show';b.textContent='Updating & restarting… this page will reload itself when it is back.';api('/api/update',{});}
 setInterval(heartbeat,4000);heartbeat(true);
 window.addEventListener('focus',function(){heartbeat(true);}); // re-check for updates when you come back to the window
-initGraphEvents();syncP();refresh();loadMap();loadAgentCfg();loadScanRoots();loadMail();loadScreensUI();loadDesktop();
+initGraphEvents();syncP();refresh();loadMap();loadAgentCfg();loadScanRoots();loadMail();loadScreensUI();loadMonitorsUI();loadDesktop();
 </script></body></html>`;