symbiot 0.41.5 → 0.41.7

package/README.md

@@ -267,6 +267,16 @@ Tasks waiting for review aren't re-sent to the agent, and while the repo's agent
 is still running, Approve waits ("agent still working"), so half-done work isn't
 committed.
 
+**Tasks about tasks.** An agent can't edit your task list, so a task like
+`Drop the "gosolr's own WhatsApp number" task` or ``Merge the two `WA_WABA_ID`
+tasks into one`` is done once you approve it. The tasks it names then leave your
+list, so a later **Send to repos** doesn't bring them back: a dropped one is
+archived, and of merged ones the newest stays and the rest are archived. Symbiot
+finds them by the quoted name before the word "task": tasks in that repo, from
+before the approval, with all of its words ("'s" aside). If it names more than
+four, it's too vague, and nothing is removed. In the archived view they're marked
+**dropped** or **merged**, and one you restore stays.
+
 **Releases.** The review card warns about merged work that isn't released yet,
 measured the way the repo releases: from its last `v*` tag, or, for a repo whose
 GitHub workflow runs `npm publish` on every push to its default branch, from the
@@ -315,6 +325,18 @@ preset only fills in the command box; the saved command is what runs.
   isn't on your PATH). They just open the repo. Nothing comes back for review unless
   you run an agent there yourself, and Neovim needs a terminal to open in.
 
+**Connectors.** The connectors you've linked to Claude (claude.ai's Google Drive,
+Gmail, Notion…, and servers added with `claude mcp add`) are only usable by an
+unattended run when `--allowedTools` names them, so a run asked to check your
+Drive or mail used to be refused. Symbiot now adds each one's rule
+(`mcp__claude_ai_Google_Drive` covers `mcp__claude_ai_Google_Drive__search_files`
+and the rest of its tools) to a Claude command on every run. It reads them from
+`~/.claude.json`, so linking one takes effect on the next run, and your saved
+command stays as you typed it. A connector still waiting to be authorized at
+claude.ai isn't added. Settings → Handoff lists them, and says so when your
+command isn't Claude and its runs can't use them. Claude in Orca's tab asks you
+before using one.
+
 Each run is logged to `.symbiot/agent.log` in the repo and shown live in the
 **Agents** tab. The command is saved as `agentCmd` in
 `~/.config/symbiot/config.json` — it's your command, Symbiot only fills in
@@ -369,6 +391,16 @@ keep going with everything that doesn't depend on an answer, and to ask instead
 doing anything destructive. Both files live in `.symbiot/`, so they're never
 committed.
 
+**A run that stopped on questions isn't repeated for nothing.** When a run ends
+having asked questions you haven't answered, with tasks still unticked, Symbiot
+keeps what it ran with in `.symbiot/blocked.json`. The next send to that repo
+starts no agent until something it could act on changes: `.env` (or another
+`.env.*` file there), `ANSWERS.md`, the agent command (a command you allowed, a
+connector), or a task it didn't have. Otherwise the run would only ask the same
+questions again. The send says so, with **Start it anyway** for when what changed
+is somewhere else (`symbiot push --open --force` from the terminal). **Draft a
+reply** always starts its run.
+
 ## What's out of sync? `symbiot drift`
 
 ```bash

package/agents.mjs

@@ -4,9 +4,9 @@
 import { spawn } from "node:child_process";
 import { homedir } from "node:os";
 import { join } from "node:path";
-import { readFileSync, writeFileSync, mkdirSync, existsSync, openSync, writeSync, unlinkSync } from "node:fs";
-import { randomBytes } from "node:crypto";
-import { loadConfig, saveConfig, loadTasks, sameTask, sh, hasCmd } from "./core.mjs";
+import { readFileSync, writeFileSync, mkdirSync, existsSync, openSync, writeSync, unlinkSync, readdirSync, statSync } from "node:fs";
+import { randomBytes, createHash } from "node:crypto";
+import { loadConfig, saveConfig, loadTasks, sameTask, taskWords, sh, hasCmd } from "./core.mjs";
 
 const HANDOFFS = []; // live registry of agents Symbiot has handed work to
 // ---- hand a repo (+ its tasks) to the user's agent — generic, settings-based
@@ -48,21 +48,50 @@ function grantRule(tool) {
   t = t.replace(/[()"'`]/g, "").replace(/:\*$/, "").trim();
   return t ? `Bash(${t}:*)` : "";
 }
+// Add a rule to a Claude command's --allowedTools (or start the flag), once.
+function allowTool(cmd, t) {
+  if (!t || cmd.includes(`"${t}"`)) return cmd;
+  if (/--allowedTools\b/.test(cmd)) return cmd.replace(/(--allowedTools\s+(?:"[^"]*"\s*)+)/, (m) => m.trimEnd() + ` "${t}" `);
+  return cmd + ` --allowedTools "${t}"`;
+}
+const isClaudeCmd = (cmd) => /^\s*claude\b/.test(String(cmd || ""));
 function grantAgent({ tool, dir } = {}) {
   const cfg = loadConfig(); let cmd = (cfg.agentCmd || CLAUDE_CMD).trim();
-  if (!/^\s*claude\b/.test(cmd)) return { error: "Grants apply to the Claude agent command. Pick a Claude preset first, or edit the command directly." };
-  if (tool) {
-    const t = grantRule(tool);
-    if (t && !cmd.includes(`"${t}"`)) {
-      if (/--allowedTools\b/.test(cmd)) cmd = cmd.replace(/(--allowedTools\s+(?:"[^"]*"\s*)+)/, (m) => m.trimEnd() + ` "${t}" `);
-      else cmd += ` --allowedTools "${t}"`;
-    }
-  }
+  if (!isClaudeCmd(cmd)) return { error: "Grants apply to the Claude agent command. Pick a Claude preset first, or edit the command directly." };
+  if (tool) cmd = allowTool(cmd, grantRule(tool));
   if (dir) { const d = String(dir).trim(); if (d && !cmd.includes(`--add-dir "${d}"`)) cmd += ` --add-dir "${d}"`; }
   cmd = cmd.replace(/\s+/g, " ").trim();
   cfg.agentCmd = cmd; saveConfig(cfg);
   return { ok: true, cmd };
 }
+// ---- connectors: what the user linked to Claude, for its runs -------------
+// Connectors linked to Claude (claude.ai's Google Drive, Gmail, Notion…, and
+// servers added with `claude mcp add`) are tools to an unattended run only when
+// --allowedTools names them: `claude -p` can't ask, so a run told to check your
+// Drive or mail was refused and said it had no access. From ~/.claude.json: the
+// claude.ai connectors that have connected (claudeAiMcpEverConnected), the
+// user's own servers and this folder's. One waiting to be authorized
+// (mcpNeedsAuthNoticed) is listed but not ready. Its rule, mcp__<name>, allows
+// all its tools; Claude names them with anything but letters, digits, _ and -
+// made _ ("claude.ai Google Drive" -> mcp__claude_ai_Google_Drive__search_files).
+function claudeConnectors(dir = "", file = join(homedir(), ".claude.json")) {
+  let j = {}; try { j = JSON.parse(readFileSync(file, "utf8")) || {}; } catch {}
+  const names = (x) => Array.isArray(x) ? x.filter((s) => typeof s === "string" && s) : [];
+  const servers = (o) => o && typeof o === "object" && !Array.isArray(o) ? Object.keys(o) : [];
+  const proj = dir && j.projects && typeof j.projects === "object" ? j.projects[dir] : null;
+  const needsAuth = new Set(names(j.mcpNeedsAuthNoticed));
+  return [...new Set([...names(j.claudeAiMcpEverConnected), ...servers(j.mcpServers), ...servers(proj && proj.mcpServers)])]
+    .map((name) => ({ name, rule: "mcp__" + name.replace(/[^A-Za-z0-9_-]/g, "_"), ready: !needsAuth.has(name) }));
+}
+// A Claude command with the ready connectors' rules added, for this run only:
+// the saved command stays as typed, so linking or unlinking one takes effect on
+// the next run. Any other agent's command runs as-is (Settings says so).
+function withConnectors(tmpl, dir, file) {
+  if (!isClaudeCmd(tmpl)) return tmpl;
+  return claudeConnectors(dir, file).filter((c) => c.ready).reduce((cmd, c) => allowTool(cmd, c.rule), tmpl).replace(/\s+$/, "");
+}
+// For Settings → Handoff: the connectors, and whether this command's runs get them.
+function connectorsInfo(file) { return { claude: isClaudeCmd(handoffCmd()), list: claudeConnectors("", file).map(({ name, ready }) => ({ name, ready })) }; }
 const fillHandoff = (tmpl, repoPath) => tmpl.replace(/\{dir\}/g, shSingle(repoPath)).replace(/\{prompt\}/g, escDq(HANDOFF_PROMPT));
 // One agent per folder: two identical runs once started on the same repo 6s
 // apart and raced each other. The registry catches a second click in this
@@ -74,15 +103,21 @@ const fillHandoff = (tmpl, repoPath) => tmpl.replace(/\{dir\}/g, shSingle(repoPa
 // A folder's .symbiot/handoff.json ({ name, env }) names its job and joins its
 // environment, on every run there, a rerun with answers too: a draft reply's
 // folder (watch.mjs) carries SYMBIOT_DRAFT, which refuses a press on Send.
-function runHandoff(repoPath) {
-  const tmpl = handoffCmd(); if (!tmpl || !repoPath) return null;
+// A folder whose last run stopped on questions, with nothing changed since
+// that could answer them, gets no run: { blocked, questions, note }
+// (blockedAgain). force starts one anyway (something changed elsewhere).
+function runHandoff(repoPath, { force = false } = {}) {
+  let tmpl = handoffCmd(); if (!tmpl || !repoPath) return null;
   let opts = {}; try { opts = JSON.parse(readSymbiot(repoPath, "handoff.json")) || {}; } catch {}
   const busy = runningHandoff(repoPath); if (busy) return { busy: true, id: busy.id || "", pid: busy.pid, auto: !!busy.auto };
   releaseHeldTasks(repoPath); // held for an agent another process started, which has since exited
+  tmpl = withConnectors(tmpl, repoPath);
+  const blocked = !force && blockedAgain(repoPath, tmpl); if (blocked) return blocked;
   const lock = join(repoPath, ".symbiot", LOCK);
   const env = opts.env && typeof opts.env === "object" ? Object.fromEntries(Object.entries(opts.env).map(([k, v]) => [k, String(v)])) : null;
-  const e = track(typeof opts.name === "string" && opts.name ? opts.name.slice(0, 80) : repoPath.split("/").pop(), fillHandoff(tmpl, repoPath), repoPath, () => {
+  const e = track(typeof opts.name === "string" && opts.name ? opts.name.slice(0, 80) : repoPath.split("/").pop(), fillHandoff(tmpl, repoPath), repoPath, (code) => {
     try { if (JSON.parse(readFileSync(lock, "utf8")).pid === e.pid) unlinkSync(lock); } catch {}
+    noteBlocked(repoPath, tmpl, e.startedAt, code);
     startHeldTasks(repoPath); // tasks sent while it ran land now; start on them as that Send would have
   }, env);
   if (!e) return null;
@@ -90,6 +125,38 @@ function runHandoff(repoPath) {
   if (e.pid) try { writeFileSync(lock, JSON.stringify({ pid: e.pid, id: e.id, startedAt: e.startedAt, owner: process.pid })); } catch {}
   return e;
 }
+// ---- a run that would only report the same blockers again -------------------
+// A run that ends having asked questions (QUESTIONS.md written during it, some
+// still unanswered) with tasks left unticked is blocked on the user: noteBlocked
+// keeps what it ran with in .symbiot/blocked.json. Another run on the same
+// inputs could only say the same things again, so blockedAgain refuses one
+// until something it could act on changes: .env (the values it asked for),
+// ANSWERS.md, the agent command (a grant, a connector) or a task it didn't have.
+const BLOCKED = "blocked.json";
+const digest = (s) => createHash("sha1").update(String(s)).digest("hex").slice(0, 16);
+const openTasks = (path) => readSymbiot(path, "TASKS.md").split("\n").filter((l) => /^\s*-\s*\[ \]/.test(l)).map((l) => taskWords(l.replace(/^\s*-\s*\[ \]\s*/, ""))).filter(Boolean);
+function runInputs(path, cmd) {
+  let files = [], env = ""; try { files = readdirSync(path).filter((f) => /^\.env(\..+)?$/.test(f) && !/\.(example|sample|template)$/.test(f)).sort(); } catch {}
+  for (const f of files) { try { env += f + "\0" + readFileSync(join(path, f), "utf8") + "\0"; } catch {} }
+  return { env: digest(env), answers: digest(readSymbiot(path, "ANSWERS.md")), cmd: digest(cmd), open: openTasks(path) };
+}
+function noteBlocked(path, cmd, startedAt, code) {
+  const f = join(path, ".symbiot", BLOCKED);
+  let asked = false; try { asked = statSync(join(path, ".symbiot", "QUESTIONS.md")).mtimeMs >= startedAt; } catch {}
+  const questions = asked ? agentQuestions(path, "").questions.length : 0, inputs = runInputs(path, cmd);
+  try {
+    if (code === 0 && questions && inputs.open.length) writeFileSync(f, JSON.stringify({ at: Date.now(), questions, ...inputs }));
+    else unlinkSync(f);
+  } catch {}
+}
+function blockedAgain(path, cmd) {
+  let b = null; try { b = JSON.parse(readSymbiot(path, BLOCKED)); } catch {}
+  if (!b || !Array.isArray(b.open)) return null;
+  const now = runInputs(path, cmd), was = new Set(b.open);
+  if (now.env !== b.env || now.answers !== b.answers || now.cmd !== b.cmd || !now.open.length || now.open.some((t) => !was.has(t))) return null;
+  const n = b.questions || 0, them = n === 1 ? "it" : "them";
+  return { blocked: true, questions: n, note: `Not started: the last run here stopped on ${n} question${n === 1 ? "" : "s"}, and .env and ANSWERS.md haven't changed since, so another run would only ask again. Answer ${them} or change .env, then send again.` };
+}
 const LOCK = "agent.pid";
 const LOCK_MAX_AGE = 12 * 3600 * 1000; // older than this, the pid has probably been reused
 const pidAlive = (pid) => { try { process.kill(pid, 0); return true; } catch (err) { return !!err && err.code === "EPERM"; } };
@@ -132,7 +199,7 @@ function releaseHeldTasks(path) {
 // once, so this can't loop. Returns the new job, or null.
 function startHeldTasks(path) {
   if (!releaseHeldTasks(path) || !/^\s*-\s*\[ \]/m.test(readSymbiot(path, "TASKS.md"))) return null;
-  const n = runHandoff(path); if (!n || n.busy) return null;
+  const n = runHandoff(path); if (!n || n.busy || n.blocked) return null;
   n.fromHeld = true; return n;
 }
 // Presets. [cmd, label, macAppName] — macApp used to launch GUI editors on macOS
@@ -348,7 +415,7 @@ function answerQuestions(path, answers, opts = {}) {
     writeFileSync(join(path, ".symbiot", "ANSWERS.md"), prev.replace(/\s*$/, "\n") + rows.map((x) => `\n### ${x.q}\n${x.a}\n_answered ${day}_\n`).join(""));
   } catch (e) { return { error: "Couldn't write ANSWERS.md: " + ((e && e.message) || e) }; }
   const out = { ok: true, saved: rows.length };
-  if (opts.rerun) { const e = runHandoff(path); if (e && e.busy) out.note = "Answers saved. An agent is still running in that folder, so another wasn't started. Send them again once it finishes."; else if (e) out.rerun = e.id; else out.note = "Answers saved. Set an agent command in Settings to have the agent pick them up automatically."; }
+  if (opts.rerun) { const e = runHandoff(path); if (e && e.busy) out.note = "Answers saved. An agent is still running in that folder, so another wasn't started. Send them again once it finishes."; else if (e && e.blocked) out.note = "Answers saved. " + e.note; else if (e) out.rerun = e.id; else out.note = "Answers saved. Set an agent command in Settings to have the agent pick them up automatically."; }
   return out;
 }
 // The open tasks' titles in a held brief (TASKS.next.md), or null if nothing is held.
@@ -367,4 +434,4 @@ function agentsList() {
   });
 }
 
-export { HANDOFFS, HANDOFF_PROMPT, QUESTIONS_MAX, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, grantRule, fillHandoff, runHandoff, runningHandoff, writeTasks, releaseHeldTasks, startHeldTasks, detectHandoffs, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, agentChanges, parseQuestions, suggestionTarget, agentQuestions, answerQuestions, agentsList };
+export { HANDOFFS, HANDOFF_PROMPT, QUESTIONS_MAX, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, grantRule, allowTool, claudeConnectors, withConnectors, connectorsInfo, fillHandoff, runHandoff, blockedAgain, runningHandoff, writeTasks, releaseHeldTasks, startHeldTasks, detectHandoffs, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, agentChanges, parseQuestions, suggestionTarget, agentQuestions, answerQuestions, agentsList };

package/core.mjs

@@ -41,12 +41,49 @@ function saveTasks(t) { try { mkdirSync(CONFIG_DIR, { recursive: true }); writeF
 // with a clause more on the end. An extension only counts when the shorter one
 // is a whole sentence (8+ words), so "Fix the bug" never swallows "Fix the bug
 // in the login form".
+// Or nearly the same (nearTask): an agent that suggests a task again rewords
+// it, and TASKS.md listed both.
 const taskWords = (s) => String(s || "").toLowerCase().replace(/[^\p{L}\p{N}]+/gu, " ").trim();
 function sameTask(a, b) {
   const x = taskWords(a), y = taskWords(b); if (!x || !y) return false;
   if (x === y) return true;
   const [s, l] = x.length < y.length ? [x, y] : [y, x];
-  return s.split(" ").length >= 8 && l.startsWith(s + " ");
+  return (s.split(" ").length >= 8 && l.startsWith(s + " ")) || nearTask(a, b);
+}
+// Nearly the same task, two ways:
+// - nearly all the same words in the same order, 12+ words each ("…nothing
+//   recorded since 2026-08-03" and "…since 2026-08-04")
+// - the same first sentence of 5+ words, with only what follows it different:
+//   "Set `WA_WABA_ID` in `.env`. It's needed to list templates" / "…to create Flows"
+// Never when each names something the other doesn't: "Watch Gmail…" and
+// "Watch WhatsApp…" are two tasks, however alike the rest. A name is a word
+// with a capital that doesn't just start a sentence (Gmail, WhatsApp, WA).
+const NEAR = 0.85, NEAR_WORDS = 12, LEAD_WORDS = 5;
+function wordsOf(s) {
+  s = String(s || "");
+  return [...s.matchAll(/[\p{L}\p{N}]+/gu)].map((m) => {
+    const w = m[0], before = s.slice(0, m.index);
+    const starts = !before.trim() || /[.!?]["'`)\]]*\s*$/.test(before);
+    return { w: w.toLowerCase(), name: w.length > 1 && /\p{Lu}/u.test(w) && (!starts || /\p{Lu}/u.test(w.slice(1))) };
+  });
+}
+// The first sentence's words, when more follows it ("" when it's all one sentence).
+function leadOf(s) { const m = String(s || "").match(/^(.*?[.!?])["'`)\]]*\s+\S/s); return m ? taskWords(m[1]) : ""; }
+function nearTask(a, b) {
+  const x = wordsOf(a), y = wordsOf(b), m = x.length, n = y.length; if (!m || !n) return false;
+  const lead = leadOf(a), sameLead = !!lead && lead === leadOf(b) && lead.split(" ").length >= LEAD_WORDS;
+  if (!sameLead && (Math.min(m, n) < NEAR_WORDS || Math.min(m, n) / Math.max(m, n) < NEAR)) return false;
+  // the longest run of words both have in order, and the words left over on each side
+  const L = Array.from({ length: m + 1 }, () => new Uint16Array(n + 1));
+  for (let i = m - 1; i >= 0; i--) for (let j = n - 1; j >= 0; j--) L[i][j] = x[i].w === y[j].w ? L[i + 1][j + 1] + 1 : Math.max(L[i + 1][j], L[i][j + 1]);
+  if (!sameLead && (2 * L[0][0]) / (m + n) < NEAR) return false;
+  let i = 0, j = 0, nx = false, ny = false;
+  while (i < m && j < n) {
+    if (x[i].w === y[j].w) { i++; j++; } else if (L[i + 1][j] >= L[i][j + 1]) { if (x[i++].name) nx = true; } else if (y[j++].name) ny = true;
+  }
+  for (; i < m; i++) if (x[i].name) nx = true;
+  for (; j < n; j++) if (y[j].name) ny = true;
+  return !(nx && ny);
 }
 // One of each: near-duplicates collapse into the wording that says the most.
 function uniqueTasks(texts) {

package/index.mjs

@@ -81,9 +81,11 @@ function cmdPush() {
   if (has("open")) {
     if (!r.handoff) console.log("\n" + c.y("No agent command set.") + c.d("  Set one in `symbiot app` Settings, or `agentCmd` in ~/.config/symbiot/config.json (use {dir} and {prompt})."));
     else {
-      const busy = r.written.map((w) => ({ w, e: runHandoff(w.path) })).filter((x) => x.e && x.e.busy);
-      const n = r.written.length - busy.length;
+      const runs = r.written.map((w) => ({ w, e: runHandoff(w.path, { force: has("force") }) }));
+      const busy = runs.filter((x) => x.e && x.e.busy), blocked = runs.filter((x) => x.e && x.e.blocked);
+      const n = r.written.length - busy.length - blocked.length;
       if (n) console.log("\n" + c.g("→ ") + `Handed ${n} repo(s) to your agent (${r.handoff}).`);
+      for (const { w, e } of blocked) console.log("\n" + c.y(`${w.name}: `) + e.note + c.d("  (--force starts it anyway)"));
       for (const { w, e } of busy) console.log("\n" + c.y("Not started: ") + `${w.name} already has an agent running.` + c.d(e.auto ? "  Its new tasks are held, and the app starts an agent on them when it finishes." : "  Its new tasks are held until it finishes. After that, the app starts an agent on them the next time it checks the repo (opening its Tasks tab), or send again."));
     }
   } else {
@@ -522,7 +524,7 @@ ${c.b("Usage")}
   symbiot todo                      what's still on your plate
   symbiot app                       open the visual app in your browser
   symbiot drift [--fetch]           what's out of sync / at risk across repos
-  symbiot push [--open]             write tasks into each repo (and run your agent)
+  symbiot push [--open [--force]]   write tasks into each repo (and run your agent)
   symbiot login                     connect it to an AI (once)
   symbiot whoami                    show how it's connected
   symbiot logout                    forget saved credentials

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "symbiot",
-  "version": "0.41.5",
+  "version": "0.41.7",
   "description": "Your week, written from your real work. Reads your local git and writes it up with the AI of your choice — Claude, OpenAI, Gemini, or a local model.",
   "type": "module",
   "bin": {

package/server.mjs

@@ -10,7 +10,7 @@ import { createServer } from "node:http";
 import { randomBytes } from "node:crypto";
 import { EMBEDDED_UI } from "./ui.mjs";
 import { VERSION, LATEST_VERSION, semverGt, checkLatest, loadConfig, saveConfig, loadTasks, hasCmd, chromeBinary } from "./core.mjs";
-import { shSingle, handoffCmd, setHandoffCmd, grantAgent, runHandoff, track, detectHandoffs, answerQuestions, agentsList } from "./agents.mjs";
+import { shSingle, handoffCmd, setHandoffCmd, grantAgent, runHandoff, track, detectHandoffs, connectorsInfo, answerQuestions, agentsList } from "./agents.mjs";
 import { PROVIDERS, resolveProvider, connectProvider, detectHardware, recommendModels, hasOllama, ollamaInstall, ensureOllama, useOllamaModel } from "./ai.mjs";
 import { SCAN, SCAN_TIMEOUT_MS, scanRoots, scanHome, addScanRoot, removeScanRoot, buildMap, nodeDetail, repoPathMap } from "./scan.mjs";
 import { computeDrift } from "./drift.mjs";
@@ -161,10 +161,10 @@ async function startApp({ bin, since = 7, all = false, c = PLAIN_COLOURS } = {})
       if (u.pathname === "/api/scanroots") return json(res, { roots: loadConfig().scanRoots || [], effective: scanRoots(), home: scanHome() });
       if (u.pathname === "/api/scanroots/add" && req.method === "POST") { const b = await readBody(req); return json(res, addScanRoot(String(b.path || ""))); }
       if (u.pathname === "/api/scanroots/remove" && req.method === "POST") { const b = await readBody(req); return json(res, removeScanRoot(String(b.path || ""))); }
-      if (u.pathname === "/api/agentcfg") { const d = detectHandoffs(); return json(res, { cmd: handoffCmd(), agents: d.agents, editors: d.editors }); }
+      if (u.pathname === "/api/agentcfg") { const d = detectHandoffs(); return json(res, { cmd: handoffCmd(), agents: d.agents, editors: d.editors, connectors: connectorsInfo() }); }
       if (u.pathname === "/api/agentcmd" && req.method === "POST") { const b = await readBody(req); return json(res, setHandoffCmd(b.cmd)); }
       if (u.pathname === "/api/agent/grant" && req.method === "POST") { const b = await readBody(req); return json(res, grantAgent({ tool: b.tool, dir: b.dir })); }
-      if (u.pathname === "/api/open" && req.method === "POST") { const b = await readBody(req); const e = runHandoff(String(b.path || "")); return json(res, { opened: !!e && !e.busy, busy: !!(e && e.busy), auto: !!(e && e.auto), id: e ? e.id : "" }); }
+      if (u.pathname === "/api/open" && req.method === "POST") { const b = await readBody(req); const e = runHandoff(String(b.path || ""), { force: !!b.force }); return json(res, { opened: !!e && !e.busy && !e.blocked, busy: !!(e && e.busy), auto: !!(e && e.auto), blocked: !!(e && e.blocked), note: (e && e.note) || "", id: (e && e.id) || "" }); }
       if (u.pathname === "/api/setup-local" && req.method === "POST") {
         const b = await readBody(req);
         if (!hasOllama()) return json(res, { error: "not-installed", install: ollamaInstall() });

package/tasks.mjs

@@ -30,13 +30,42 @@ function addTask(text, repo) {
 }
 function toggleTask(id) { const t = loadTasks(); const it = t.find((x) => x.id === id); if (it) { it.done = !it.done; saveTasks(t); } return it || { error: "not found" }; }
 function removeTask(id) { saveTasks(loadTasks().filter((x) => x.id !== id)); return { ok: true }; }
-function restoreTask(id) { const t = loadTasks(); const it = t.find((x) => x.id === id); if (it) { it.archived = false; it.done = false; delete it.archivedAt; saveTasks(t); } return it || { error: "not found" }; }
+function restoreTask(id) { const t = loadTasks(); const it = t.find((x) => x.id === id); if (it) { it.archived = false; it.done = false; delete it.archivedAt; if (it.removedBy) { it.kept = true; delete it.removedBy; delete it.merged; } saveTasks(t); } return it || { error: "not found" }; }
 // Which task texts the agent checked off in a repo's .symbiot/TASKS.md
 function completedInRepo(repoPath) {
   try { return readFileSync(join(repoPath, ".symbiot", "TASKS.md"), "utf8").split("\n").filter((l) => /^\s*-\s*\[x\]/i.test(l)).map((l) => l.replace(/^\s*-\s*\[x\]\s*/i, "").trim().toLowerCase()); }
   catch { return []; }
 }
 
+// A task that removes others: `Drop the "gosolr's own WhatsApp number" task`,
+// "Merge the two `WA_WABA_ID` tasks into one". An agent can't edit your task
+// list, so approving one was all that happened: the tasks it named stayed open,
+// and every regenerated TASKS.md brought them back. Once it's approved, they go
+// here: dropped ones are archived, merged ones too, all but the newest. It
+// names them with a quoted phrase (`…`, "…", “…”) whose words are all in
+// theirs ('s aside), and only reaches open tasks in its repo from before its
+// approval. A phrase that names more than MAX_REMOVED is too vague to act on.
+// Archived, each keeps removedBy (and merged); one you restore stays (kept).
+const REMOVES = /^\s*(drop|remove|delete|merge|combine|dedupe|deduplicate)\b/i, MAX_REMOVED = 4;
+const noPossessive = (s) => String(s || "").replace(/['’]s\b/gi, "");
+function removalOf(text) {
+  const s = String(text || ""), m = s.match(REMOVES), at = s.search(/\btasks?\b/i); if (!m || at < 0) return null;
+  // up to "task": "…the two `WA_WABA_ID` tasks. Both are the same edit to `.env`" names no `.env` task
+  const phrases = [...s.slice(0, at).matchAll(/`([^`]+)`|"([^"]+)"|“([^”]+)”/g)].map((x) => taskWords(noPossessive(x[1] || x[2] || x[3]))).filter(Boolean);
+  return phrases.length ? { merge: /^(merge|combine|dedupe)/i.test(m[1]), phrases } : null;
+}
+function applyRemovals(t) {
+  let n = 0; const now = Date.now();
+  for (const r of t.filter((x) => x.approvedAt && x.repo)) {
+    const rm = removalOf(r.text); if (!rm) continue;
+    const named = (x) => { const w = new Set(taskWords(noPossessive(x.text)).split(" ")); return rm.phrases.some((p) => p.split(" ").every((y) => w.has(y))); };
+    const hit = t.filter((x) => x !== r && x.repo === r.repo && !x.done && !x.archived && !x.review && !x.kept && (x.ts || 0) < r.approvedAt && named(x));
+    if (hit.length > MAX_REMOVED || (rm.merge && hit.length < 2)) continue;
+    const go = rm.merge ? hit.sort((a, b) => (b.ts || 0) - (a.ts || 0)).slice(1) : hit;
+    for (const x of go) { Object.assign(x, { done: true, archived: true, archivedAt: now, removedBy: r.id }); if (rm.merge) x.merged = true; n++; }
+  }
+  return n;
+}
 // "Check what was handed out, see what's completed, then archive it" — with an
 // approval step in between. An agent ticking an item in TASKS.md means "done,
 // please review", NOT archived: it waits in review until the user approves it
@@ -52,8 +81,9 @@ function syncTasks() {
     if (checkedByRepo[x.repo].some((c) => sameTask(c, x.text))) { x.review = true; x.reviewAt = Date.now(); review++; }
   }
   for (const x of t) { if (x.done && !x.archived) { x.archived = true; x.archivedAt = Date.now(); archived++; } }
+  const removed = applyRemovals(t);
   saveTasks(t);
-  return { review, archived, started };
+  return { review, archived, started, removed };
 }
 // git with an argv (task text goes into commit messages — never through a shell)
 function git(repo, args, timeout = 30000) {
@@ -352,8 +382,9 @@ function approveRepo(repo, opts = {}) {
   if (r.error) return r;
   const now = Date.now();
   for (const x of items) { x.review = false; x.done = true; x.archived = true; x.archivedAt = now; x.approvedAt = now; for (const k of ["branch", "commit", "pr"]) if (r[k]) x[k] = r[k]; }
+  const removed = applyRemovals(t);
   saveTasks(t);
-  return { ...r, approved: items.length };
+  return { ...r, approved: items.length, ...(removed ? { removed } : {}) };
 }
 // "Approve changes without a task": ship the uncommitted changes even though no
 // ticked task is behind them (a fix the agent made but didn't tick). If tasks are
@@ -415,7 +446,8 @@ function buildTasksMd(name, ctx, list) {
   return L.join("\n") + "\n";
 }
 function pushTasks(filter) {
-  let tasks = loadTasks().filter((t) => !t.done && !t.archived && !t.review);
+  const all = loadTasks(); if (applyRemovals(all)) saveTasks(all); // what an approved Drop/Merge named never goes out again
+  let tasks = all.filter((t) => !t.done && !t.archived && !t.review);
   if (filter && filter.type) tasks = tasks.filter((t) => taskType(t.text) === filter.type);
   if (filter && filter.repo) tasks = tasks.filter((t) => t.repo === filter.repo);
   if (!tasks.length) return { empty: true, written: [], unresolved: [] };
@@ -445,4 +477,4 @@ function pushTasks(filter) {
   return { empty: false, written, unresolved, handoff: handoffCmd() };
 }
 
-export { addTask, toggleTask, removeTask, restoreTask, completedInRepo, syncTasks, workingChanges, workingDiff, publishesOnMerge, unreleased, bumpOffer, learnNpm, releaseNeeded, withReleases, setVersion, shipWithBump, pendingReview, commitSubject, shipChanges, autoMergeRepos, setAutoMerge, approveRepo, approveChanges, sendBack, TASK_ORDER, taskType, buildTasksMd, pushTasks };
+export { addTask, toggleTask, removeTask, restoreTask, completedInRepo, removalOf, applyRemovals, syncTasks, workingChanges, workingDiff, publishesOnMerge, unreleased, bumpOffer, learnNpm, releaseNeeded, withReleases, setVersion, shipWithBump, pendingReview, commitSubject, shipChanges, autoMergeRepos, setAutoMerge, approveRepo, approveChanges, sendBack, TASK_ORDER, taskType, buildTasksMd, pushTasks };

package/ui.mjs

@@ -255,6 +255,7 @@ label.check input{width:auto}
 <input id="agentcmd" type="text" placeholder="e.g.  aider --message &quot;{prompt}&quot; --yes   ·   code {dir}   ·   leave blank to just write the file">
 <div class="note muted">Runs in each repo after tasks are written. Use <b>{dir}</b> = repo path, <b>{prompt}</b> = the task instruction. Works with any agent or editor &mdash; it's your command.</div>
 <div id="agentpresets" style="margin-top:8px"></div>
+<div class="note muted" id="agentconnectors"></div>
 <div id="grantbox" style="margin-top:10px">
 <label style="font-size:12px;color:var(--faint)">When an agent asks to run something or read a folder, grant it here instead of editing the command:</label>
 <div class="row" style="margin-top:6px"><input id="granttool" placeholder="allow a command, e.g. python3 or pytest" style="flex:1"><button class="ghost" id="granttoolbtn">Allow command</button></div>
@@ -402,7 +403,7 @@ if(r.error==='not-connected'){el.innerHTML="<h4>AI review &middot; <span class='
 var body=r.text||'(no output)';reviewCache[path]={text:body,verdict:r.verdict||"",ideas:r.ideas||[],footer:r.footer};el.innerHTML=reviewHtml(name,body,r.verdict||"",r.ideas||[],tasks,r.footer);wireIdeas();});}
 var ALLTASKS=[];var PENDTASKS=[];var TFILTER={type:'',repo:''};var TARCH=false;
 var TORDER=['Fixes','Tests & CI','Security','Performance','Refactor','UI/UX','Docs','Features & other'];
-function taskRow(t,arch){return "<div class='task"+(t.done?" done":"")+"' data-id='"+esc(t.id)+"'>"+(arch?"":"<input type='checkbox' class='taskchk' title='mark done (auto-archives on sync)'"+(t.done?" checked":"")+">")+"<span class='t'>"+esc(t.text)+"</span>"+(t.repo?"<span class='rp'>"+esc(t.repo)+"</span>":"")+askBtn(t)+(arch?"<button class='rm restore' title='restore to active'>&#8630;</button>":"<button class='rm' title='remove'>&times;</button>")+"</div>";}
+function taskRow(t,arch){return "<div class='task"+(t.done?" done":"")+"' data-id='"+esc(t.id)+"'>"+(arch?"":"<input type='checkbox' class='taskchk' title='mark done (auto-archives on sync)'"+(t.done?" checked":"")+">")+"<span class='t'>"+esc(t.text)+"</span>"+(t.repo?"<span class='rp'>"+esc(t.repo)+"</span>":"")+(arch&&t.removedBy?"<span class='rp' title='An approved task "+(t.merged?"merged it into another":"dropped it")+". Restore it to keep it.'>"+(t.merged?"merged":"dropped")+"</span>":"")+askBtn(t)+(arch?"<button class='rm restore' title='restore to active'>&#8630;</button>":"<button class='rm' title='remove'>&times;</button>")+"</div>";}
 function wireTaskRows(el){el.querySelectorAll('.task').forEach(function(row){var id=row.getAttribute('data-id');
 var cb=row.querySelector('.taskchk');if(cb)cb.addEventListener('change',function(){api('/api/tasks/toggle',{id:id}).then(function(){row.classList.toggle('done');});});
 wireAsk(row,id);
@@ -588,13 +589,21 @@ if(r.empty){btn.disabled=false;o.innerHTML="<div class='muted' style='margin-top
 var n=(r.written||[]).length;var opens=[];var h="<div class='drift' style='margin-top:10px'><div class='dh'><span class='dot-c'></span><span class='dn'>Done &mdash; wrote "+n+" file"+(n===1?"":"s")+"</span></div>";
 if(n){h+="<ul>";r.written.forEach(function(w){h+="<li class='info'>&#10003; <b>"+esc(w.name)+"</b> <span class='ev'>"+esc(w.file)+" ("+w.count+" task"+(w.count===1?"":"s")+")</span>"+(w.held?" <span class='ev'>&#9208; held: an agent is still running there, so these land when it finishes</span>":"")+"</li>";});h+="</ul>";}
 if(r.unresolved&&r.unresolved.length){var names=r.unresolved.map(function(u){return u.name;}).join(", ");var hasNoRepo=r.unresolved.some(function(u){return u.name==='(no repo)';});h+="<div class='dd' style='margin-top:6px'>&#9888; not sent: "+esc(names)+". "+(hasNoRepo?"Pick a repo in the dropdown next to <b>Add</b> so the task has somewhere to go.":"That repo isn't in the map &mdash; add its folder in Settings.")+"</div>";}
-if(r.handoff&&r.written&&r.written.length){opens=r.written.map(function(w){return api('/api/open',{path:w.path}).then(function(x){if(x&&x.busy){var d=document.createElement('div');d.className='dd';d.innerHTML="&#9888; <b>"+esc(w.name)+"</b> already has an agent running, so another wasn&#39;t started. "+(x.auto?"Its new tasks are held, and an agent starts on them when it finishes.":"Its new tasks are held until it finishes. After that, an agent starts on them the next time this tab checks the repo, or send again.");o.appendChild(d);}}).catch(function(){});});h+="<div class='dd' style='margin-top:8px'>&#129302; Handed "+n+" repo(s) to your agent &mdash; opening the <b>Agents</b> tab to watch it work&hellip;</div>";setTimeout(function(){setTab('agents');},500);}
+if(r.handoff&&r.written&&r.written.length){opens=r.written.map(function(w){return api('/api/open',{path:w.path}).then(function(x){if(x&&x.blocked){var d=document.createElement('div');d.className='dd';d.innerHTML="&#9208; <b>"+esc(w.name)+"</b>: "+esc(x.note)+" <button class='ghost' style='padding:2px 8px;font-size:12px'>Start it anyway</button>";d.querySelector('button').addEventListener('click',function(){this.disabled=true;api('/api/open',{path:w.path,force:true}).then(function(y){d.innerHTML=y&&y.opened?"&#10003; Started an agent in <b>"+esc(w.name)+"</b>.":"&#9888; <b>"+esc(w.name)+"</b>: "+(y&&y.busy?"an agent is already running there.":"it didn&#39;t start. Check the command in Settings.");});});o.appendChild(d);}if(x&&x.busy){var d=document.createElement('div');d.className='dd';d.innerHTML="&#9888; <b>"+esc(w.name)+"</b> already has an agent running, so another wasn&#39;t started. "+(x.auto?"Its new tasks are held, and an agent starts on them when it finishes.":"Its new tasks are held until it finishes. After that, an agent starts on them the next time this tab checks the repo, or send again.");o.appendChild(d);}}).catch(function(){});});h+="<div class='dd' style='margin-top:8px'>&#129302; Handed "+n+" repo(s) to your agent &mdash; opening the <b>Agents</b> tab to watch it work&hellip;</div>";setTimeout(function(){setTab('agents');},500);}
 else{h+="<div class='dd' style='margin-top:8px'>Set an <b>agent command</b> in Settings to auto-run it on send (and watch it in the Agents tab). For now, tell your agent: <b>“Read .symbiot/TASKS.md and implement the unchecked items.”</b></div>";}
 h+="</div>";
 o.innerHTML=h;
 // re-enable only once every handoff has started (or been refused), so a double click can't send twice
 Promise.all(opens).then(function(){btn.disabled=false;});}).catch(function(e){btn.disabled=false;o.innerHTML="<div class='err' style='margin-top:10px'>Couldn&#39;t write tasks: "+esc(String((e&&e.message)||e))+"</div>";});}
+// Connectors linked to Claude (claude.ai's Drive, Gmail…) reach Claude runs only: say which, or that this command doesn't get them.
+var CONNECTORS=[];
+function renderConnectors(){var el=document.getElementById('agentconnectors');if(!CONNECTORS.length){el.innerHTML='';return;}
+var nm=function(c){return "<b>"+esc(c.name.replace(/^claude\\.ai\\s+/i,''))+"</b>";},ready=CONNECTORS.filter(function(c){return c.ready;}),wait=CONNECTORS.filter(function(c){return !c.ready;});
+var cmd=document.getElementById('agentcmd').value;if(/orca-ide/.test(cmd)&&/claude/.test(cmd)){el.innerHTML="&#128268; Claude in Orca&#39;s tab asks you before it uses your connectors ("+CONNECTORS.map(nm).join(", ")+").";return;}
+if(!/^\\s*claude\\b/.test(cmd)){el.innerHTML="&#128268; Your Claude connectors ("+CONNECTORS.map(nm).join(", ")+") reach Claude Code runs only. This command isn&#39;t Claude, so its runs can&#39;t use them.";return;}
+el.innerHTML=(ready.length?"&#128268; Your agent&#39;s runs can use "+ready.map(nm).join(", ")+": linked to Claude, so each run allows their tools.":"")+(wait.length?(ready.length?" ":"&#128268; ")+wait.map(nm).join(", ")+(wait.length===1?" needs":" need")+" authorizing in your claude.ai connector settings first.":"");}
 function loadAgentCfg(){api('/api/agentcfg').then(function(d){document.getElementById('agentcmd').value=d.cmd||'';
+CONNECTORS=(d.connectors&&d.connectors.list)||[];renderConnectors();
 var chips=[];(d.agents||[]).forEach(function(a){chips.push(a);});(d.editors||[]).forEach(function(e){chips.push(e);});
 var box=document.getElementById('agentpresets');
 if(!chips.length){box.innerHTML="<span class='muted' style='font-size:12px'>Nothing detected on PATH &mdash; type your own command above.</span>";return;}
@@ -604,7 +613,7 @@ var h="<span class='muted' style='font-size:12px'>Detected &mdash; click to use:
 if(chips.length>na)h+="<div class='muted' style='font-size:12px;margin-top:8px'>Editors &mdash; opens only, no review:</div>"+chips.slice(na).map(function(c,i){return chip(c,na+i);}).join("");
 box.innerHTML=h;
 box.querySelectorAll('.preset').forEach(function(btn){btn.addEventListener('click',function(){document.getElementById('agentcmd').value=chips[+btn.getAttribute('data-i')].tmpl;saveAgent();});});});}
-function saveAgent(){api('/api/agentcmd',{cmd:document.getElementById('agentcmd').value});}
+function saveAgent(){renderConnectors();api('/api/agentcmd',{cmd:document.getElementById('agentcmd').value});}
 function grant(kind){var i=document.getElementById(kind==='tool'?'granttool':'grantdir');var v=(i.value||'').trim();if(!v)return;var body={};body[kind]=v;api('/api/agent/grant',body).then(function(r){var n=document.getElementById('grantnote');if(!r||r.error){n.className='note err';n.textContent=(r&&r.error)||'could not grant';return;}i.value='';n.className='note ok';n.textContent=(kind==='tool'?'Command allowed':'Folder allowed')+' — the agent can use it on its next run.';if(r.cmd)document.getElementById('agentcmd').value=r.cmd;});}
 function loadScanRoots(){api('/api/scanroots').then(function(d){var box=document.getElementById('scanroots');var roots=d.effective||[];
 box.innerHTML=roots.map(function(r){var custom=(d.roots||[]).indexOf(r)>=0;return "<div class='task' data-p='"+esc(r)+"'><span class='t' style='font-family:ui-monospace,monospace;font-size:12px'>"+esc(r)+"</span>"+(r===d.home?"<span class='rp'>home</span>":"")+(custom?"<button class='rm rmroot' title='remove'>&times;</button>":"")+"</div>";}).join("");

package/watch.mjs

@@ -358,7 +358,7 @@ function draftReply(id, { run = runHandoff } = {}) {
     writeFileSync(join(dir, ".symbiot", "TASKS.md"), chat ? chatBrief(n, w) : draftBrief(n, w));
     writeFileSync(join(dir, ".symbiot", "handoff.json"), JSON.stringify({ name: ("Draft: " + n.text).slice(0, 60), env: { SYMBIOT_DRAFT: "1" } }));
   } catch (e) { return { error: "Couldn't write the brief: " + ((e && e.message) || e) }; }
-  const e = run(dir);
+  const e = run(dir, { force: true }); // a click on Draft a reply asks for a run, even after one stopped on a question
   if (!e) return { error: "Your agent didn't start. Check its command in Settings → Handoff." };
   if (e.busy) return { error: "Your agent is still drafting this one. It's in the Agents tab." };
   const d2 = loadWatch(), n2 = d2.news.find((x) => x.id === id); if (n2) { n2.drafted = Date.now(); saveWatch(d2); }