symbiot 0.54.3 → 0.55.0

package/CHANGELOG.md

@@ -2,6 +2,23 @@
 
 What each Symbiot release brought, newest first. When Approve bumps the version, it writes that release here from the tasks it approved, worded as release notes by your connected AI (or in the tasks' own words without one). The app shows the releases newer than yours under "What's new" when it offers an update, and once more after you update.
 
+## 0.55.0
+
+- **Away: Super+S.** Symbiot full screen while you're away from the desk: the orb at rest, the time, the agents at work and what each is doing, how many things only you can do, and how much waits on what you watch. Counts only, never anyone's words. Any key or click brings you back. On X11 with more than one screen the orb bounces across all of them; under Wayland (COSMIC, GNOME, KDE) it's one window on your screen, because no app may place windows there. `symbiot away --shortcut` sets up Super+S (on COSMIC it's done for you). Super+Esc still locks.
+- **Approve no longer strands a commit.** It picked a branch name only by what's local, so a name already on GitHub (an earlier PR of that name, merged) had its push refused, and the approved work sat in a commit with no PR. Now it picks a name free on GitHub too, and if a push is still refused, it moves the commit to a fresh name and pushes that.
+
+## 0.54.4 — 2026-10-07
+
+- Removed the "Add a task" row from Tasks, since you add tasks through the bottom chat bar, and moved Send to repos beside Close.
+- Fixed agent runs that wait on you, such as unsent drafts or steps only you can take, so they now appear on Home with what to check first.
+- Moved the Reports Refresh button so it sits beside Close instead of under it.
+- Added a Marketing section with post drafts, replies marked "maybe a customer", picture tools and the 4-week table, moved off the Dashboard.
+- Reviewed where sandboxing for agent runs stands, with no changes to the app.
+- Added marks on Connections showing which sites your agents can also use, visible before you link them.
+- Changed the Dashboard to lead with what you watch; posts now appear under Marketing once drafting is possible.
+- Fixed Home's right-side orbs overlapping zone names on screens 1366–1440 pixels wide.
+- Added a "Pick your agent" step on first run that sets up the detected agent, such as Claude Code, in one click.
+
 ## 0.54.3 — 2026-10-07
 
 - Added questions on Home for stuck or failed agent runs, so you can allow access, skip, or run them again right there.

package/README.md

@@ -93,8 +93,10 @@ It opens on [the liquid](#the-liquid-a-home-that-shapes-itself-to-you); each of
   a "fetch latest" toggle (and an [experimental](#experimental) "check CI").
 - **Week / Standup / Todo** — the write-ups (these use your chosen AI), set as a
   readable page with its dates; **Copy** copies the text as written.
-- **Tasks** — a checklist, grouped by kind (Fixes, Tests & CI, Docs, …). Filter by
-  type or repo, then **Send to repos** to hand just those to your agent (see
+- **Tasks** — a checklist, grouped by kind (Fixes, Tests & CI, Docs, …). You add
+  a task by telling Symbiot in the bar at the bottom: it files it under the right
+  project. Filter by type or repo, then **Send to repos** (at the top, beside
+  Close) to hand just those to your agent (see
   [`symbiot push`](#hand-tasks-to-your-coding-agent-symbiot-push)). What your agent
   finishes lands in **Awaiting your review** (see
   [Review and approve](#review-and-approve-the-agents-work)). A task you tick
@@ -641,6 +643,23 @@ of this: it adapts to you.
 Everything it learns stays on this computer: `adapt.json` and `mind.json` in
 Symbiot's config folder, readable by you only.
 
+### Away: Super+S
+
+Stepping away? **Super+S** (or `symbiot away`) puts Symbiot full screen: the orb at
+rest, the time, and what's going on. That means the agents at work and what each is
+doing, how many things only you can do, and how much waits on what you watch. It shows
+counts only, never anyone's words, so it's fine on a screen across the room. Any key
+or click (or Super+S again) brings you back.
+
+On one screen the orb rests in the middle. On X11 desktops with more screens it
+bounces across all of them, one window per screen, with the orb crossing from one to
+the next. Under Wayland (COSMIC, GNOME, KDE) no app may place a window on a screen, so
+it's one window on the screen you're on.
+
+`symbiot away --shortcut` sets up Super+S. On COSMIC that's done for you (it replaces
+COSMIC's own Super+S, which stacks windows); elsewhere it tells you what to bind.
+Away isn't a lock: **Super+Esc** still locks the computer.
+
 ## Link your work
 
 **Connections** (on the Dashboard, and in Settings) has one entry per standard work site: Gmail,
@@ -685,14 +704,15 @@ release tags and dated `CHANGELOG.md` sections in the repos Symbiot already scan
 and nothing else. **It never posts by itself**, and it doesn't schedule.
 
 - **Your voice.** Put 5–10 posts you wrote in `~/.config/symbiot/voice.md`, with a
-  line of `---` between each. Or link LinkedIn (above) and click **Fill from
-  LinkedIn** on the Dashboard (`symbiot post voice --linkedin`), which reads your
+  line of `---` between each. Or link LinkedIn (above, or **Link LinkedIn** under
+  **Marketing**) and click **Fill from LinkedIn** there (`symbiot post voice --linkedin`), which reads your
   recent posts in Symbiot's signed-in browser. Without examples it doesn't draft.
 - **Only what git shows.** Your AI gets the week as numbered facts and must say
   which ones each post uses. A post that names a number, version, name or user
   count the facts don't show is sent back once, then dropped. When every draft is
   dropped, Symbiot tries once more from the start by itself before giving up.
-- **You approve each one.** The drafts wait on the **Dashboard** with **Approve**,
+- **You approve each one.** The drafts wait under **Marketing**, a section of its
+  own (its orb shows on Home once posts can be drafted), with **Approve**,
   **Edit** and **Skip**. Approve copies the post to your clipboard and opens
   LinkedIn's share box: you paste it and post it yourself.
 - **Pictures and videos.** Each draft says in a line what picture or short video
@@ -709,10 +729,15 @@ and nothing else. **It never posts by itself**, and it doesn't schedule.
 - **Everything is logged** in `~/.config/symbiot/posts-log.jsonl`: each draft,
   edit, approval and skip, with its text, date and platform.
 - **Replies.** Linked LinkedIn is watched like an inbox: new comments and mentions
-  show on its Dashboard card, marked **maybe a customer** when they ask how to
-  install it, what it costs or about team use. **Draft a reply** has your agent
+  show under **Marketing** (and on its Dashboard card), marked **maybe a customer**
+  when they ask how to install it, what it costs or about team use. **Draft a reply** has your agent
   type a reply into the comment box without posting it (it can't press Post,
   Comment, Reply or Send), and write it in its brief for you to paste.
+- **The 4-week test.** Marketing keeps a row a week: posts published (and how
+  many had a picture), replies, profile visits (LinkedIn's own count), installs
+  (npm downloads of the packages your posts are about) and pricing questions.
+  Week 1 is the first week a post goes out; to move it, put
+  `{ "start": "2026-10-13" }` in `~/.config/symbiot/post-test.json`.
 
 ```bash
 symbiot post                    # draft this week's 3 posts

package/adapt.mjs

@@ -48,7 +48,7 @@ const MIN_EVENTS = 12;                   // under this many uses, adaptation fad
 const HICK_COVER = 0.9, HICK_MIN = 3, HICK_MAX = 7;
 const HYSTERESIS = 0.15;
 const FITTS = { a: 0.1, b: 0.15 };       // seconds; only ratios matter here
-const SHAPES = ["board", "map", "tasks", "agents", "week", "standup", "todo", "drift", "settings", "reports"];
+const SHAPES = ["board", "map", "tasks", "agents", "week", "standup", "todo", "drift", "settings", "reports", "marketing"];
 
 function loadAdapt(file = ADAPT_FILE) {
   try { const d = JSON.parse(readFileSync(file, "utf8")); return { shapes: d.shapes || {}, trans: d.trans || {}, hours: d.hours || {}, modes: d.modes || {}, slots: d.slots || {}, shown: d.shown || null, events: d.events || 0 }; }

package/agents.mjs

@@ -9,7 +9,7 @@ import { readFileSync, writeFileSync, mkdirSync, existsSync, openSync, writeSync
 import { randomBytes, createHash } from "node:crypto";
 import { CONFIG_DIR, loadConfig, saveConfig, loadTasks, TASK_MAX, clipWords, sameTask, taskWords, sh, hasCmd } from "./core.mjs";
 import { parseRun, lastRunText, readRunLog } from "./work.mjs";
-import { parseFacts } from "./handover.mjs";
+import { parseFacts, leftToYou } from "./handover.mjs";
 import { scanRoots, repoPathMap } from "./scan.mjs";
 import { knowledgeFolders } from "./knowledge.mjs";
 
@@ -141,6 +141,17 @@ function connectorsLine(tmpl = handoffCmd(), file, linked) {
 // For Settings → Handoff: the connectors, whether this command's runs get them, and
 // the sites linked in Symbiot that aren't Claude connectors (so runs can't use them).
 function connectorsInfo(file) { const conns = claudeConnectors("", file); return { claude: isClaudeCmd(handoffCmd()), list: conns.map(({ name, ready }) => ({ name, ready })), links: linkedConnectors(conns) }; }
+// Connections, before you link: which sites agent runs can use too. A link signs
+// Symbiot's browser in; a run reaches a site only through Claude's own connector for
+// it (LINK_CONNECTOR), and only with Claude Code as your agent (or, with none picked
+// yet, on this computer to pick). { claude, sites: { id: { name, connector, ready } } }:
+// connector "" while you haven't connected it in claude.ai.
+const claudeAgent = () => { const c = handoffCmd(); return isClaudeCmd(c) || (!c && hasCmd("claude")); };
+function linkReach(conns = claudeConnectors(), claude = claudeAgent()) {
+  const sites = {};
+  for (const [id, [name, re]] of Object.entries(LINK_CONNECTOR)) { const c = conns.find((x) => re.test(x.name)); sites[id] = { name, connector: c ? c.name : "", ready: !!c && c.ready }; }
+  return { claude, sites };
+}
 const fillHandoff = (tmpl, repoPath, prompt = HANDOFF_PROMPT) => tmpl.replace(/\{dir\}/g, shSingle(repoPath)).replace(/\{prompt\}/g, escDq(prompt));
 // ---- agents work on their own --------------------------------------------------------
 // Talk to an agent and it just does the work: permission checks skipped, one
@@ -271,14 +282,54 @@ function earlierRuns() {
   for (const r of loadRuns()) {
     if (tracked.has(r.path) || !existsSync(join(r.path, ".symbiot"))) continue;
     const busy = runningHandoff(r.path), ask = agentQuestions(r.path, r.name), wait = waitingFor(r.path), facts = busy ? [] : factsOf(r.path);
-    if (!busy && !ask.questions.length && !wait && !facts.length) continue;
     const log = join(r.path, ".symbiot", "agent.log"), startedAt = (busy && busy.startedAt) || Number(r.startedAt) || Date.now();
-    let tail = "", work = null, progress = null, end = Date.now(); try { ({ tail, work, progress } = workOf(r.path, readRunLog(log))); if (!busy) end = statSync(log).mtimeMs; } catch {}
-    out.push({ id: "earlier-" + digest(r.path).slice(0, 8), name: String(r.name || r.path.split("/").pop()), path: r.path, status: busy ? "running" : "done", earlier: true, elapsed: Math.max(0, end - startedAt), exitCode: null, tail, work, progress, changed: agentChanges(r.path, startedAt), ask, held: heldTasks(r.path), waiting: wait, remember: facts.length ? facts : null, fromHeld: false });
+    let end = Date.now(); if (!busy) try { end = statSync(log).mtimeMs; } catch {}
+    const needs = busy ? null : needsOf(r.path, { final: lastFinal(r.path), waiting: wait, end });
+    if (!busy && !ask.questions.length && !wait && !facts.length && !needs) continue;
+    let tail = "", work = null, progress = null; try { ({ tail, work, progress } = workOf(r.path, readRunLog(log))); } catch {}
+    out.push({ id: "earlier-" + digest(r.path).slice(0, 8), name: String(r.name || r.path.split("/").pop()), path: r.path, status: busy ? "running" : "done", earlier: true, startedAt, endedAt: busy ? null : end, elapsed: Math.max(0, end - startedAt), exitCode: null, tail, work, progress, changed: agentChanges(r.path, startedAt), ask, held: heldTasks(r.path), waiting: wait, needs, remember: facts.length ? facts : null, fromHeld: false });
   }
   return out;
 }
 
+// ---- what a finished run left to you ----------------------------------------
+// A run that ended saying something waits on you (handover.mjs leftToYou: "the
+// draft isn't sent", "needs sudo, and only you can do that"), or waiting on a step
+// an answer of yours picked (waitingFor), needs you, and says so: on its block in
+// Agents and on Home, with what to check first. It did end, so before this nothing
+// showed it: Home said nothing needed you while a reply to Cale sat in Drafts. It
+// stays for NEEDS_FOR, until you go ahead or skip it (settled.json keeps which, per
+// folder), a newer run there says something else, or a newer ops run took up the
+// same task. { kind: "approve"|"step", what, check, label, key, waiting? } or null.
+const NEEDS_FOR = 3 * 86400000, SETTLED = join(CONFIG_DIR, "settled.json"), ACT_DIR = join(CONFIG_DIR, "drafts") + "/";
+const loadSettled = () => { try { const o = JSON.parse(readFileSync(SETTLED, "utf8")); return o && typeof o === "object" && !Array.isArray(o) ? o : {}; } catch { return {}; } };
+function settleNeeds(path, key) {
+  const o = loadSettled(); o[path] = String(key || "");
+  try { mkdirSync(CONFIG_DIR, { recursive: true }); writeFileSync(SETTLED, JSON.stringify(o, null, 2), { mode: 0o600 }); } catch {}
+}
+// A streaming run's last words (its final answer), read once per change of its log.
+const FINALS = new Map();
+function lastFinal(path) {
+  const log = join(path, ".symbiot", "agent.log"); let m = 0; try { m = statSync(log).mtimeMs; } catch { return ""; }
+  const c = FINALS.get(path); if (c && c.m === m) return c.final;
+  let final = ""; try { const w = parseRun(lastRunText(readRunLog(log))); final = w.stream ? w.final : ""; } catch {}
+  FINALS.set(path, { m, final }); return final;
+}
+const firstTask = (path) => (readSymbiot(path, "TASKS.md").match(/^\s*-\s*\[[ x]\]\s*(.+)$/im) || [])[1] || "";
+// an ops run (a folder of its own each time) whose task a newer ops run took up
+function takenUp(path, end) {
+  if (!path.startsWith(ACT_DIR)) return false;
+  const t = firstTask(path); return !!t && loadRuns().some((r) => r.path !== path && r.path.startsWith(ACT_DIR) && Number(r.startedAt) > end && sameTask(firstTask(r.path), t));
+}
+function needsOf(path, { final = "", waiting = null, end = Date.now(), now = Date.now() } = {}) {
+  if (now - end > NEEDS_FOR) return null;
+  const n = waiting ? { kind: "step", what: clipWords(String(waiting.step || "").replace(/^\s*👤\s*(You\s*(\([^)]*\))?:)?\s*/, "").trim(), 240), check: "", label: "", waiting: true } : leftToYou(final);
+  if (!n || !n.what) return null;
+  const key = digest(n.what);
+  if (loadSettled()[path] === key || takenUp(path, end)) return null;
+  return { ...n, key };
+}
+
 // ---- a step that's yours: wait for it -----------------------------------------
 // An answer that picks a "👤 You:" option leaves a step for the user to do (put a
 // key in .env, allow a command in Settings). Starting the agent before it's done
@@ -484,6 +535,9 @@ const AGENT_LIST = [
   ["gemini", "Gemini — make changes", 'gemini --yolo -p "{prompt}"'],
   ["cursor-agent", "Cursor agent", 'cursor-agent -p "{prompt}"'],
 ];
+// The agent to offer a new user in one click (Home's "Pick your agent"): the first
+// coding agent on this computer, in AGENT_LIST's order (Claude Code first). null if none.
+function pickAgent() { const a = AGENT_LIST.find(([cmd]) => hasCmd(cmd)); return a ? { label: a[1], name: a[1].split(" — ")[0], tmpl: a[2] } : null; }
 function detectHandoffs() {
   const editors = [];
   for (const [cmd, label, app] of IDE_LIST) {
@@ -885,8 +939,10 @@ function agentsList() {
     const { tail, work, progress } = workOf(e.path, readRunLog(e.log));
     const first = !seen.has(e.path); seen.add(e.path);
     const facts = first && e.status !== "running" ? factsOf(e.path) : [];
-    return { id: e.id, name: e.name, path: e.path, status: e.status, startedAt: e.startedAt, endedAt: e.endedAt, elapsed: (e.endedAt || Date.now()) - e.startedAt, exitCode: e.exitCode, tail, work, progress, changed: agentChanges(e.path, e.startedAt), ask: first ? agentQuestions(e.path, e.name) : null, held: first ? heldTasks(e.path) : null, waiting: first && e.status !== "running" ? waitingFor(e.path) : null, remember: facts.length ? facts : null, fromHeld: !!e.fromHeld };
+    const waiting = first && e.status !== "running" ? waitingFor(e.path) : null;
+    const needs = first && e.status !== "running" ? needsOf(e.path, { final: work ? tail : "", waiting, end: e.endedAt || Date.now() }) : null;
+    return { id: e.id, name: e.name, path: e.path, status: e.status, startedAt: e.startedAt, endedAt: e.endedAt, elapsed: (e.endedAt || Date.now()) - e.startedAt, exitCode: e.exitCode, tail, work, progress, changed: agentChanges(e.path, e.startedAt), ask: first ? agentQuestions(e.path, e.name) : null, held: first ? heldTasks(e.path) : null, waiting, needs, remember: facts.length ? facts : null, fromHeld: !!e.fromHeld };
   }).concat(earlierRuns());
 }
 
-export { FACTS, factsOf, knownRun, withStream, workOf, HANDOFFS, HANDOFF_PROMPT, QUESTIONS_MAX, OPTIONS_SHOWN, IDEAS_SHOWN, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, grantRule, allowTool, claudeConnectors, withConnectors, linkedConnectors, connectorsLine, connectorsInfo, fillHandoff, runHandoff, PARKED_NOTE, parkedPaths, isParked, parkLane, agentMissing, blockedAgain, runningHandoff, loadRuns, earlierRuns, namedFiles, waitingFor, startWaiting, writeTasks, droppedTasks, releaseHeldTasks, startHeldTasks, detectHandoffs, findOrcaCli, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, agentChanges, parseQuestions, suggestionTarget, skipIdea, agentQuestions, answerQuestions, agentsList , autoAllow, autoAllowSweep, allowlistInWork, installAllowlist, inWork, withScope , withTrust, resumeFor, noteSession, trustFull, GUARD_SETTINGS };
+export { FACTS, factsOf, knownRun, withStream, workOf, HANDOFFS, HANDOFF_PROMPT, QUESTIONS_MAX, OPTIONS_SHOWN, IDEAS_SHOWN, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, grantRule, allowTool, claudeConnectors, withConnectors, linkedConnectors, connectorsLine, connectorsInfo, linkReach, fillHandoff, runHandoff, PARKED_NOTE, parkedPaths, isParked, parkLane, agentMissing, blockedAgain, runningHandoff, loadRuns, earlierRuns, namedFiles, waitingFor, startWaiting, writeTasks, droppedTasks, releaseHeldTasks, startHeldTasks, detectHandoffs, pickAgent, findOrcaCli, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, agentChanges, parseQuestions, suggestionTarget, skipIdea, agentQuestions, answerQuestions, agentsList, needsOf, settleNeeds, NEEDS_FOR , autoAllow, autoAllowSweep, allowlistInWork, installAllowlist, inWork, withScope , withTrust, resumeFor, noteSession, trustFull, GUARD_SETTINGS };

package/away.mjs

@@ -0,0 +1,107 @@
+// symbiot — Away: Symbiot full screen on every screen while you're away from the
+// desk (Super+S, or `symbiot away`): the orb at rest, the time, and what's going on
+// (agents at work and what they're doing, how much waits on you), counts only, no
+// one's words. One screen: the orb in the middle. More: it bounces across all of
+// them, one kiosk window per screen, each working out where the orb is from the
+// same clock over the screens' shared area and drawing it while it's on that
+// screen, so it crosses from one to the next with nothing passed between them.
+// That needs windows placed on screens, which only X allows: under Wayland (COSMIC,
+// GNOME, KDE) no app can put a window on a screen, and COSMIC ignored every way tried
+// (X moves, Chrome's position flags, fullscreen on a given screen, a keypress for its
+// own move-to-screen shortcut). So under Wayland it's one window, full screen where
+// you are, the orb in the middle. Each window's profile lets Symbiot's address see the
+// screens and go full screen without a click, so nothing asks.
+// Any key or click, or Super+S again, closes every window. Not a lock: Super+Esc
+// locks the computer.
+import { spawn, spawnSync } from "node:child_process";
+import { mkdirSync, readFileSync, writeFileSync, existsSync } from "node:fs";
+import { join } from "node:path";
+import { homedir } from "node:os";
+import { CONFIG_DIR, chromeBinary } from "./core.mjs";
+
+// The screens, from `xrandr --listmonitors` (X, and XWayland under COSMIC, GNOME and
+// KDE): [{ x, y, w, h }], left to right. [] when it can't tell (then one window).
+function parseMonitors(text) {
+  const out = [];
+  for (const m of String(text || "").matchAll(/^\s*\d+:\s+\S+\s+(\d+)\/\d+x(\d+)\/\d+\+(-?\d+)\+(-?\d+)/gm)) out.push({ w: +m[1], h: +m[2], x: +m[3], y: +m[4] });
+  return out.sort((a, b) => a.x - b.x || a.y - b.y);
+}
+function screens() {
+  for (const d of [process.env.DISPLAY, ":0", ":1"].filter(Boolean)) {
+    const r = spawnSync("xrandr", ["--listmonitors"], { encoding: "utf8", timeout: 3000, env: { ...process.env, DISPLAY: d } });
+    const s = r.status === 0 ? parseMonitors(r.stdout) : [];
+    if (s.length) return { list: s, display: d };
+  }
+  return { list: [], display: "" };
+}
+// Each window's place in the shared area: { x, y, w, h } plus the area's size, as
+// the page's query (?away=1&ax=…&ay=…&gw=…&gh=…&n=…&t0=…).
+function awayQueries(list, t0 = Date.now()) {
+  if (!list.length) return [`away=1&n=1&t0=${t0}`];
+  const x0 = Math.min(...list.map((s) => s.x)), y0 = Math.min(...list.map((s) => s.y));
+  const gw = Math.max(...list.map((s) => s.x + s.w)) - x0, gh = Math.max(...list.map((s) => s.y + s.h)) - y0;
+  return list.map((s) => `away=1&n=${list.length}&ax=${s.x - x0}&ay=${s.y - y0}&aw=${s.w}&ah=${s.h}&gw=${gw}&gh=${gh}&t0=${t0}`);
+}
+
+let KIDS = [];
+const awayOpen = () => KIDS.some((k) => k.exitCode === null && !k.killed);
+function closeAway() {
+  for (const k of KIDS) { try { process.kill(-k.pid, "SIGTERM"); } catch { try { k.kill("SIGTERM"); } catch {} } }
+  const n = KIDS.length; KIDS = []; return n;
+}
+// The two permissions an Away window needs, for the app's address only, in the
+// window's own profile: the screens (window_placement) and fullscreen without a
+// click (automatic_fullscreen). Chrome keeps them when it writes the file back.
+function grantProfile(dir, origin) {
+  const f = join(dir, "Default", "Preferences"); let p = {}; try { p = JSON.parse(readFileSync(f, "utf8")) || {}; } catch {}
+  const ex = (((p.profile ||= {}).content_settings ||= {}).exceptions ||= {});
+  for (const k of ["window_placement", "automatic_fullscreen"]) (ex[k] ||= {})[`${origin},*`] = { setting: 1 };
+  try { mkdirSync(join(dir, "Default"), { recursive: true }); writeFileSync(f, JSON.stringify(p)); } catch {}
+}
+// Opens a window per screen on the app's url (http://127.0.0.1:port/?t=token), the
+// i-th told it's for screen i (si). Each has a profile of its own under Symbiot's
+// config, so its flags take (a window for a profile already open would join that
+// browser and ignore them).
+const placeable = (env = process.env) => (env.XDG_SESSION_TYPE || "").toLowerCase() === "x11" || (!env.WAYLAND_DISPLAY && !!env.DISPLAY);
+function openAway(url, { chrome = chromeBinary(), scr = placeable() ? screens() : { list: [], display: "" }, now = Date.now() } = {}) {
+  if (!chrome) return { error: "Away needs Chrome or Chromium on this computer." };
+  closeAway();
+  const qs = awayQueries(scr.list, now);
+  const origin = (String(url).match(/^https?:\/\/[^/?#]+/) || [""])[0];
+  qs.forEach((q, i) => {
+    const s = scr.list[i], dir = join(CONFIG_DIR, "away", String(i)); grantProfile(dir, origin);
+    const args = ["--user-data-dir=" + dir, "--no-first-run", "--no-default-browser-check", "--disable-session-crashed-bubble", "--hide-crash-restore-bubble", "--noerrdialogs", "--kiosk"];
+    if (s) args.push(`--window-position=${s.x},${s.y}`, `--window-size=${s.w},${s.h}`); // X places it on its screen
+    args.push(url + (url.includes("?") ? "&" : "?") + q + `&si=${i}`);
+    try { const k = spawn(chrome, args, { detached: true, stdio: "ignore", env: { ...process.env, ...(s && scr.display ? { DISPLAY: scr.display } : {}) } }); k.on("exit", () => {}); k.unref(); KIDS.push(k); } catch {}
+  });
+  return { open: KIDS.length > 0, screens: Math.max(1, scr.list.length) };
+}
+// Open, close (open: false) or, with neither said, the other way round.
+function toggleAway(url, open, deps) {
+  const want = open === undefined || open === null ? !awayOpen() : !!open;
+  if (!want) { closeAway(); return { open: false }; }
+  return openAway(url, deps);
+}
+
+// ---- the shortcut -------------------------------------------------------------
+// Super+S runs `symbiot away`. COSMIC: a custom shortcut in its config (it reloads
+// it as it changes; one for Super+S takes over the default there, which stacks
+// windows). Elsewhere it says how to add one.
+const COSMIC_CUSTOM = (home = homedir()) => join(home, ".config", "cosmic", "com.system76.CosmicSettings.Shortcuts", "v1", "custom");
+function shortcutLine(cmd) { return `    (modifiers: [Super], key: "s"): Spawn(${JSON.stringify(cmd)}),`; }
+// The new custom file: whatever was there, minus any Super+S, plus ours.
+function withShortcut(text, cmd) {
+  const body = String(text || "").trim().replace(/^\{/, "").replace(/\}\s*$/, "");
+  const kept = body.split("\n").filter((l) => l.trim() && !/\(modifiers:\s*\[\s*Super\s*,?\s*\],\s*key:\s*"s"\s*\)/.test(l));
+  return "{\n" + [...kept.map((l) => l.replace(/\s*$/, "")), shortcutLine(cmd)].join("\n") + "\n}\n";
+}
+function installShortcut({ cmd, home = homedir(), desktop = process.env.XDG_CURRENT_DESKTOP || "" } = {}) {
+  if (!/cosmic/i.test(desktop)) return { manual: true, note: `Add a keyboard shortcut in your desktop's settings: Super+S runs  ${cmd}` };
+  const f = COSMIC_CUSTOM(home);
+  let had = ""; try { had = existsSync(f) ? readFileSync(f, "utf8") : ""; } catch {}
+  try { mkdirSync(join(f, ".."), { recursive: true }); writeFileSync(f, withShortcut(had, cmd)); } catch (e) { return { error: "Couldn't write " + f + ": " + ((e && e.message) || e) }; }
+  return { ok: true, file: f, replaced: /key:\s*"s"/.test(had) };
+}
+
+export { placeable, grantProfile, parseMonitors, screens, awayQueries, openAway, closeAway, awayOpen, toggleAway, withShortcut, installShortcut, COSMIC_CUSTOM };

package/handover.mjs

@@ -24,7 +24,7 @@ function handoverRules(lanes = [], here = "") {
 }
 // The rule for options in QUESTIONS.md: the user gets only what no agent can do,
 // and the option says which kind it is.
-const ONLY_YOU = "- Only what no agent can do is the user's: their body (a phone in their hand, a cable, which network they're on), their identity or secrets (signing in, a 2FA code, a token from a provider's console) or a decision that's theirs (closing an account, spending money, sending something in their name). Start such an option with `👤 You (only you: <which>):`, e.g. `👤 You (only you: your Meta token): paste it into .env`. Anything an agent could do, yours or another lane's, is never a 👤 step: do it, or hand it over. An option where picking it is enough starts with `🤖 Agent:`. Tag actions only: an option that just reports what the user saw or decides (`it notified me`, `not tried yet`) gets no tag. A permission your run doesn't have (a command, a folder) is never a chore for the user. Write the rules, as narrow as the task needs, to `.symbiot/allowlist.proposed.json` (`{\"permissions\": {\"allow\": [...], \"deny\": [...], \"additionalDirectories\": [...]}}`), ask for it in QUESTIONS.md with the option `👤 You (only you: a permission): allow the list in .symbiot/allowlist.proposed.json`, and stop. If it stays inside the user's work (the folders they gave Symbiot, not ~/.ssh or ~/.config), asks for nothing wide, and doesn't publish or reach another machine, Symbiot turns it on by itself and runs you again: no question reaches the user. Their knowledge folders are already yours to read. Never ask them to copy files or run claude in a terminal for it. Decide what can be undone yourself, as a trusted colleague would: the approach, names, which of two fixes, how to lay files out; pick, do it, and say what you chose and why in your last message. Ask only about what can't be undone, costs money, goes out in the user's name, or needs who they are, and then give 2–3 options with your pick first, marked (recommended). Their answer comes back into this same conversation, so you'll remember everything when it does. Symbiot's membrane (its guard) stops the few things only the user does (pushing to main, publishing, deleting outside your folder, sudo, their keys); if it stops you, ask, don't work around it.";
+const ONLY_YOU = "- Only what no agent can do is the user's: their body (a phone in their hand, a cable, which network they're on), their identity or secrets (signing in, a 2FA code, a token from a provider's console) or a decision that's theirs (closing an account, spending money, sending something in their name). Start such an option with `👤 You (only you: <which>):`, e.g. `👤 You (only you: your Meta token): paste it into .env`. Anything an agent could do, yours or another lane's, is never a 👤 step: do it, or hand it over. An option where picking it is enough starts with `🤖 Agent:`. Tag actions only: an option that just reports what the user saw or decides (`it notified me`, `not tried yet`) gets no tag. A permission your run doesn't have (a command, a folder) is never a chore for the user. Write the rules, as narrow as the task needs, to `.symbiot/allowlist.proposed.json` (`{\"permissions\": {\"allow\": [...], \"deny\": [...], \"additionalDirectories\": [...]}}`), ask for it in QUESTIONS.md with the option `👤 You (only you: a permission): allow the list in .symbiot/allowlist.proposed.json`, and stop. If it stays inside the user's work (the folders they gave Symbiot, not ~/.ssh or ~/.config), asks for nothing wide, and doesn't publish or reach another machine, Symbiot turns it on by itself and runs you again: no question reaches the user. Their knowledge folders are already yours to read. Never ask them to copy files or run claude in a terminal for it. Decide what can be undone yourself, as a trusted colleague would: the approach, names, which of two fixes, how to lay files out; pick, do it, and say what you chose and why in your last message. Ask only about what can't be undone, costs money, goes out in the user's name, or needs who they are, and then give 2–3 options with your pick first, marked (recommended). Their answer comes back into this same conversation, so you'll remember everything when it does. Symbiot's membrane (its guard) stops the few things only the user does (pushing to main, publishing, deleting outside your folder, sudo, their keys); if it stops you, ask, don't work around it. Whatever waits on the user's OK (sending, posting, deleting, paying, closing) or on a step only they can take goes in QUESTIONS.md as a question, with what they should check first in its context line, never only in your last message: they aren't asked about what your last message says.";
 
 // What a run hands back to Symbiot itself (handback.mjs reads it): facts for
 // memory, and emails that wait on a reply, which Symbiot then watches for; and
@@ -53,6 +53,45 @@ function parseAwaiting(text) {
   })).filter((x) => x.subject).slice(0, 20);
 }
 
+// ---- what a run's last words leave to the user ----------------------------------
+// A run that ends saying something waits on the user ("the draft isn't sent",
+// "only you can do that", "needs sudo") without asking it in QUESTIONS.md left it
+// where nothing showed it: the email to Jono sat in Drafts and nothing asked for
+// the OK. leftToYou finds it: { kind, what, check, label } or null.
+// kind "approve": what an agent does once the user says go (send, post, delete, pay,
+// close); "step": what only the user can do (sudo, a password, signing in). what:
+// the sentence that says so; check: what to check first (the catch it named, else
+// the point's next sentence); label: the point's bold name ("Reply to Cale").
+const HELD = /\b(?:isn['’]t|wasn['’]t|not|never|hasn['’]t been|haven['’]t|didn['’]t) (?:yet )?(?:been )?(?:sent|send it|posted|post it)\b|\bunsent\b|\bbefore you (?:send|post)\b|\bfor you to (?:send|post)\b|\b(?:send|sending|post|posting) it yourself\b|\byou(?:['’]ll| will) (?:send|post) it\b|\bwaits? (?:on|for) your (?:ok|okay|go-ahead|approval|say-so)\b/i;
+const YOURS = /\bonly you (?:can|could|do)\b|\b(?:needs?|waits? (?:on|for)|waiting (?:on|for)) (?:your (?!review)\w+|you to)\b|\btype your password\b|\bneeds sudo\b/i;
+const DID = /\b(?:I|we)(?:['’]ve| have)? (?:sent|posted|deleted|paid|closed)\b|\balready (?:went out|sent|posted)\b|\bnothing (?:was |is )?(?:sent|posted)\b/i;
+const ACTS = /\b(?:send|sent|sending|post|posted|publish|delete|remove|pay|close|cancel)\b/i;
+const CATCH = /\b(?:catch|before you|check|make sure|careful|fix (?:that|it)|first)\b/i;
+const NOT_THEIRS = /\bconnectors?\b|\bclaude\.ai\b/i; // a connector to sign in again shows on Home already
+const SENDS = /draft|reply|email|mail|message|post/i;
+function leftToYou(text) {
+  const points = String(text || "").replace(/```[\s\S]*?```/g, (m) => m.replace(/\s+/g, " ")).split(/\n+|\s+-\s+(?=\*\*)/).map((p) => p.replace(/^\s*[-*•]\s+/, "").trim()).filter(Boolean)
+    .map((p) => { const lm = p.match(/^\*\*([^*]{2,60}?):?\*\*:?\s*/), body = lm ? p.slice(lm[0].length) : p;
+      return { label: lm ? lm[1].trim() : "", ss: body.split(/(?<=[.!?:])\s+(?=[A-Z`"*(])/).map((s) => s.trim()).filter(Boolean), off: NOT_THEIRS.test(p) }; });
+  const clean = (x, n) => { x = String(x || "").replace(/\*\*/g, "").replace(/\s+/g, " ").trim(); return x.length > n ? x.slice(0, n - 1).replace(/\s+\S*$/, "") + "…" : x; };
+  for (let k = 0; k < points.length; k++) {
+    const { label, ss, off } = points[k]; if (off) continue;
+    const i = ss.findIndex((s) => !DID.test(s) && (HELD.test(s) || YOURS.test(s)));
+    if (i < 0) continue;
+    const s = ss[i], next = points[k + 1] && !points[k + 1].off ? points[k + 1].ss : [];
+    // what to check first: the catch it named (in this point, then the next), else what it says next
+    const catches = ss.filter((x, j) => j !== i && CATCH.test(x) && !DID.test(x));
+    const elsewhere = points.filter((p, j) => j !== k && !p.off).flatMap((p) => p.ss.filter((x) => /\byourself\b|\bbefore you\b|\bcatch\b/i.test(x) && !DID.test(x)).map((x) => (p.label ? `${p.label}: ${x}` : x)));
+    let check = (catches.length ? catches.slice(0, 2).join(" ") : elsewhere[0]) || ss[i + 1] || next[0] || "";
+    if (/:$/.test(check)) { const seq = [...ss.slice(i + 1), ...next, ...((points[k + 2] && points[k + 2].ss) || [])], at = seq.indexOf(check); if (at >= 0 && seq[at + 1]) check += " " + seq[at + 1]; } // "paste this:" and then the command
+    // "The draft isn't sent." says which draft only in its own point ("**Draft:** it's in Gmail, to …")
+    const about = !label && SENDS.test(s) ? points.find((p) => p.label && SENDS.test(p.label) && p.ss.length) : null;
+    const what = label ? `${label}: ${s}` : about ? `${s} ${about.label}: ${about.ss[0]}` : s;
+    return { kind: HELD.test(s) || ACTS.test(s) ? "approve" : "step", what: clean(what, 240), check: clean(check === s ? "" : check, 240), label: clean(label || (about && about.label), 60) };
+  }
+  return null;
+}
+
 // What an agent handed over: [{ lane, text }] from its .symbiot/HANDOFF.md.
 function parseHandoffs(md) {
   const out = []; let cur = null;
@@ -65,4 +104,4 @@ function parseHandoffs(md) {
   return out.map((h) => ({ lane: h.lane, text: h.text.trim().slice(0, HANDOVER_MAX) })).filter((h) => h.lane && h.text);
 }
 
-export { OPS, HANDOVER_MAX, handoverRules, ONLY_YOU, HANDBACK, parseFacts, parseAwaiting, parseHandoffs };
+export { OPS, HANDOVER_MAX, handoverRules, ONLY_YOU, HANDBACK, parseFacts, parseAwaiting, parseHandoffs, leftToYou };

package/home.mjs

@@ -14,7 +14,7 @@ import { homedir } from "node:os";
 import { readFileSync, writeFileSync } from "node:fs";
 import { watchBoard } from "./watch.mjs";
 import { pendingReview, pushTasks } from "./tasks.mjs";
-import { agentsList, runHandoff, runningHandoff, handoffCmd, connectorsInfo, parkedPaths, agentMissing } from "./agents.mjs";
+import { agentsList, runHandoff, runningHandoff, handoffCmd, connectorsInfo, parkedPaths, agentMissing, settleNeeds, pickAgent } from "./agents.mjs";
 import { linksState } from "./links.mjs";
 import { knowledgeState } from "./knowledge.mjs";
 import { CONFIG_DIR, loadTasks } from "./core.mjs";
@@ -25,6 +25,7 @@ import { resolveProvider } from "./ai.mjs";
 import { reportsNews } from "./reports.mjs";
 import { awaitingState, inboxSight } from "./handback.mjs";
 import { newClashes } from "./checks.mjs";
+import { postsState } from "./post.mjs";
 
 const KEEP = 15000; // the slower reads (git per repo awaiting review) are cached this long
 let cached = null;
@@ -54,9 +55,11 @@ const laneOfPath = (path, map) => Object.keys(map || {}).find((n) => map[n] ===
 const FAILED_FOR = 86400000, dropped = new Set();
 const firstLine = (t) => String(t || "").split("\n").find((l) => l.trim()) || "";
 // What stopped and can't go on without you, as questions: a handover that couldn't
-// start (lanes.mjs stuckHandovers: "Allow this run access to ~/Company?"), and a run
-// that ended in an error. Each is answered on its blob (homeAnswer), on Home and on
-// its lane in Tasks. repo: its lane ("" for an ops run).
+// start (lanes.mjs stuckHandovers: "Allow this run access to ~/Company?"), a run
+// that ended waiting on you (agents.mjs needsOf: a draft for your OK, a sudo step,
+// a step your answer left you) with what to check first, and a run that ended in an
+// error. Each is answered on its blob (homeAnswer), on Home and on its lane in
+// Tasks. repo: its lane ("" for an ops run).
 function troubles({ stuck = [], list = [], map = {}, named = displayName, now = Date.now() } = {}) {
   const out = [], seen = new Set();
   for (const t of stuck) {
@@ -66,9 +69,16 @@ function troubles({ stuck = [], list = [], map = {}, named = displayName, now =
   }
   for (const a of list) {
     if (seen.has(a.path)) continue; seen.add(a.path); // the newest run in each folder (agentsList: newest first)
+    if (a.status === "running" || (a.ask && a.ask.questions && a.ask.questions.length)) continue; // at work, or it asked: that's its question
+    const lane = laneOfPath(a.path, map), repo = lane || "", nm = repo ? named(map[lane], repo) : plain(String(a.name || "an agent").replace(/^Agent:\s*/, "").replace(/^\W*What['’]s needed:\W*/i, "").replace(/^./, (c) => c.toUpperCase()), 60);
+    const n = a.needs;
+    if (n && !dropped.has("needs:" + a.id)) {
+      const ok = n.kind === "approve";
+      out.push({ kind: "ask", fix: "needs", id: "needs:" + a.id, path: a.path, repo, name: nm, title: ok ? `${nm} waits for your OK` : `${nm} needs you`, sub: plain(n.label || n.what, 90),
+        q: n.what + (n.check ? ` Check first: ${n.check}` : ""), options: ok ? ["Go ahead (recommended)", "Skip"] : ["Done it (recommended)", "Skip"], shape: "agents" });
+      continue;
+    }
     if (a.status !== "failed" || dropped.has(a.id) || (a.endedAt && now - a.endedAt > FAILED_FOR)) continue;
-    if (a.ask && a.ask.questions && a.ask.questions.length) continue; // it asked: that's its question
-    const lane = laneOfPath(a.path, map), repo = lane || "", nm = repo ? named(map[lane], repo) : plain(String(a.name || "an agent").replace(/^Agent:\s*/, ""), 60);
     const said = plain(String(a.tail || "").split(/\n+/).filter((l) => l.trim()).pop() || "", 140);
     out.push({ kind: "ask", fix: "failed", id: "failed:" + a.id, path: a.path, repo, name: nm, title: `${nm}'s run stopped`, sub: said || `it exited with code ${a.exitCode}`,
       q: `Its run stopped with an error${said ? `: ${said}` : ` (exit code ${a.exitCode})`}. Run it again?`, options: ["Run it again (recommended)", "Skip"], shape: "agents" });
@@ -96,6 +106,10 @@ function homeState({ now = Date.now(), fresh = false, deps = {} } = {}) {
   const agentGone = deps.agentGone || (() => { try { return handoffCmd() ? agentMissing() : ""; } catch { return ""; } });
   const signedOut = deps.signedOut || (() => { try { const c = connectorsInfo(); return c.claude ? (c.links || []).filter((x) => x.connector && !x.ready) : []; } catch { return []; } });
   const stuck = deps.stuck || (() => { try { return stuckHandovers({ now }); } catch { return []; } });
+  const agentCmd = deps.agentCmd || (() => { try { return handoffCmd(); } catch { return "x"; } });
+  const offer = deps.pickAgent || (() => { try { return pickAgent(); } catch { return null; } });
+  // Marketing (its own section, off the Dashboard) once posts can be drafted, or there are some
+  const marketing = deps.marketing || (() => { try { const p = postsState(); return !!(p.canDraft || p.posts.length || p.done.length); } catch { return false; } });
   const named = deps.name || displayName;
   const you = [], map = repos() || {};
   // What Symbiot works through (an AI, your agent, the connectors runs use) shows
@@ -105,6 +119,9 @@ function homeState({ now = Date.now(), fresh = false, deps = {} } = {}) {
   const gone = agentGone(); if (gone) you.push({ kind: "setup", id: "setup:agent", urgent: true, title: "Your agent is unavailable", sub: `${gone} isn't on this computer any more, so no task can start`, shape: "settings", focus: "agent" });
   for (const c of signedOut()) you.push({ kind: "setup", id: "setup:conn:" + c.id, urgent: true, title: `Reconnect ${c.name}`, sub: `its Claude connector is signed out, so agent runs can't use ${c.name}`, shape: "settings", focus: "agent" });
   if (!Object.keys(map).length) you.push({ kind: "setup", id: "setup:folders", title: "Show me your work", sub: "where your repos are", shape: "settings", focus: "work" });
+  // no agent yet: Send to repos and Go would only write TASKS.md files nothing runs, so
+  // Home didn't say "All handled" truthfully. One click for the one on this computer.
+  if (!agentCmd()) { const p = offer(); you.push({ kind: "setup", id: "setup:pick", title: "Pick your agent", sub: p ? `${p.name} is on this computer: one click and it takes your tasks` : "the coding agent that takes your tasks", shape: "settings", focus: "agent", ...(p ? { pick: { name: p.name, tmpl: p.tmpl } } : {}) }); }
   for (const r of pending()) {
     if (!r.path || r.running) continue;
     const n = (r.tasks || []).length, files = (r.files || []).length;
@@ -140,17 +157,23 @@ function homeState({ now = Date.now(), fresh = false, deps = {} } = {}) {
   if (rep.count) feeds.push({ id: "feed:reports", title: "Reports", sub: `${rep.count} unread`, latest: rep.latest, count: rep.count, shape: "reports" });
   const hs = ((lanes() || {}).handoffs || []).slice(0, 5).map((h) => ({ from: h.from, to: h.to, text: h.text, status: h.status, ...(h.times > 1 ? { times: h.times } : {}) }));
   const working = list.filter((a) => a.status === "running").length;
-  const out = { you: you.slice(0, 6), youCount: you.length, feeds: feeds.slice(0, 6), lanes: hs, working, at: now };
+  const out = { you: you.slice(0, 6), youCount: you.length, feeds: feeds.slice(0, 6), lanes: hs, working, marketing: marketing(), at: now };
   if (!deps.board) cached = out;
   return out;
 }
 
-// An answer on a stuck handover's or a failed run's blob. pick: the option's place
-// (0 goes ahead, 1 skips); text: your own words, which go ahead with them unless
-// they say no. The handover's run (lanes.mjs allowHandover) reports back to the
-// agent that asked; a failed run starts again in its folder, with your words in its
-// ANSWERS.md. { ok, said } or { error }.
+// An answer on a stuck handover's, a waiting run's or a failed run's blob. pick: the
+// option's place (0 goes ahead, 1 skips); text: your own words, which go ahead with
+// them unless they say no. The handover's run (lanes.mjs allowHandover) reports back
+// to the agent that asked; a run waiting on your OK or your step starts again with
+// "go ahead" or "done" in its ANSWERS.md (skipped, it doesn't ask again); a failed
+// run starts again in its folder, with your words in its ANSWERS.md. { ok, said } or { error }.
 const SAYS_NO = /^\s*(skip|no|nope|don'?t|do not|cancel|leave it|never ?mind|stop)\b/i;
+// An answer, in the folder's ANSWERS.md, for the run that picks it up.
+function noteAnswer(path, heading, text) {
+  const f = join(path, ".symbiot", "ANSWERS.md"); let had = ""; try { had = readFileSync(f, "utf8"); } catch {}
+  try { writeFileSync(f, `${(had || "# Answers\n").replace(/\s*$/, "")}\n\n### ${String(heading).replace(/\s+/g, " ").trim()}\n${text}\n_answered ${new Date().toISOString().slice(0, 10)}_\n`); } catch {}
+}
 function homeAnswer(id, { pick, text = "" } = {}, deps = {}) {
   id = String(id || ""); text = String(text || "").trim().slice(0, 2000);
   const go = text ? !SAYS_NO.test(text) : Number(pick) === 0, ref = id.replace(/^\w+:/, "");
@@ -164,11 +187,22 @@ function homeAnswer(id, { pick, text = "" } = {}, deps = {}) {
     const a = (deps.agents || agentsList)().find((x) => x.id === ref); if (!a) return { error: "That run isn't here any more." };
     if (!go) { dropped.add(ref); return { ok: true, said: "Skipped." }; }
     if ((deps.running || runningHandoff)(a.path)) return { ok: true, said: "An agent is already at work there." };
-    if (text) { const f = join(a.path, ".symbiot", "ANSWERS.md"); let had = ""; try { had = readFileSync(f, "utf8"); } catch {}
-      try { writeFileSync(f, `${(had || "# Answers\n").replace(/\s*$/, "")}\n\n### Your last run stopped with an error\n${text}\n_answered ${new Date().toISOString().slice(0, 10)}_\n`); } catch {} }
+    if (text) noteAnswer(a.path, "Your last run stopped with an error", text);
     const e = (deps.run || runHandoff)(a.path, { force: true }); dropped.add(ref);
     return e && e.id && !e.blocked ? { ok: true, said: "Running it again.", rerun: e.id } : { error: (e && e.note) || "It didn't start. Check your agent in Settings." };
   }
+  if (id.startsWith("needs:")) {
+    const a = (deps.agents || agentsList)().find((x) => x.id === ref), n = a && a.needs;
+    if (!n) return { error: "That isn't waiting on you any more." };
+    const settle = deps.settle || settleNeeds;
+    if (!go) { settle(a.path, n.key); dropped.add(id); return { ok: true, said: "Skipped. It won't ask again." }; }
+    if ((deps.running || runningHandoff)(a.path)) return { ok: true, said: "An agent is already at work there." };
+    const said = n.kind === "approve" ? `Go ahead: ${text || "do it as you had it, once you've checked what you flagged"}.` : `Done: the user did it${text ? ` (${text})` : ""}. Check it worked, then carry on.`;
+    noteAnswer(a.path, n.what, said);
+    const e = (deps.run || runHandoff)(a.path, { force: true });
+    if (e && e.id && !e.blocked) { settle(a.path, n.key); dropped.add(id); }
+    return e && e.id && !e.blocked ? { ok: true, said: n.kind === "approve" ? "Its agent is going ahead." : "Its agent is checking and carrying on.", rerun: e.id } : { error: (e && e.note) || "It didn't start. Check your agent in Settings." };
+  }
   return { error: "Answer that one on its block in Agents." };
 }
 

package/index.mjs

@@ -328,6 +328,20 @@ async function viaApp(path, body) {
     return r.ok ? await r.json() : { error: `Symbiot's app answered ${r.status}.` };
   } catch (e) { return { error: "Lost Symbiot's app mid-way: " + ((e && e.message) || e) }; }
 }
+// symbiot away: Symbiot full screen on every screen (again: closes it). --shortcut:
+// Super+S runs it (on COSMIC it's set up; elsewhere it says how).
+async function cmdAway() {
+  if (has("shortcut")) {
+    const { installShortcut } = await import("./away.mjs");
+    const r = installShortcut({ cmd: `${process.execPath} ${process.argv[1]} away` });
+    if (r.error) { console.log(c.y(r.error)); process.exitCode = 1; return; }
+    console.log(r.manual ? r.note : `${c.g("✓")} Super+S now opens Away${r.replaced ? " (it replaces what Super+S did before)" : ""}. ${c.d(r.file)}`);
+    return;
+  }
+  const r = await viaApp("/api/away", {});
+  if (!r) { console.log(c.y("Symbiot's app isn't running.") + c.d("  Start it with  symbiot app,  then Away works.")); process.exitCode = 1; return; }
+  if (r.error) { console.log(c.y(r.error)); process.exitCode = 1; }
+}
 async function cmdScreens() {
   const [sub = "list", a1, a2, a3] = argv.slice(1).filter((x, i, all) => !x.startsWith("--") && all[i - 1] !== "--name");
   const out = (x) => { console.log(JSON.stringify(x, null, 2)); if (x && x.error) process.exitCode = 1; };
@@ -636,7 +650,7 @@ async function cmdPost() {
     if (r.retried) console.log("\n" + c.d("The first try kept none (each claimed what git doesn't show), so Symbiot tried again by itself."));
     if (r.pictures) console.log(c.d(`${r.pictures === 1 ? "One draft names" : `${r.pictures} drafts name`} a screen of an app you run here, so ${r.pictures === 1 ? "it has its picture" : "they have their pictures"} already: keep or remove (symbiot post remove <id> <media id>).`));
     if (r.dropped.length) console.log("\n" + c.y(`Dropped ${r.dropped.length}: `) + r.dropped.map((x) => `${POST_KIND[x.kind] || x.kind} (${x.cited ? "claimed " + x.unsupported.join(", ") + ", which git doesn't show" : "cited nothing from git"})`).join("; "));
-    console.log("\n" + c.d(`${r.posts.length} draft${r.posts.length === 1 ? "" : "s"} from ${r.facts} things git shows this week, in the voice of your ${r.voice} example${r.voice === 1 ? "" : "s"}. They wait on the app's Dashboard too.`));
+    console.log("\n" + c.d(`${r.posts.length} draft${r.posts.length === 1 ? "" : "s"} from ${r.facts} things git shows this week, in the voice of your ${r.voice} example${r.voice === 1 ? "" : "s"}. They wait under Marketing in the app too.`));
     console.log(c.d("Nothing is posted until you approve one:  symbiot post approve <id>  (or edit / skip)."));
     return;
   }
@@ -753,6 +767,8 @@ ${c.b("Usage")}
   symbiot standup                   yesterday + today, for standup
   symbiot todo                      what's still on your plate
   symbiot app                       open the visual app in your browser
+  symbiot away [--shortcut]         Symbiot full screen on every screen while you're away;
+                                    again closes it. --shortcut: Super+S does it
   symbiot app --fresh [--keep]      try it as someone new: a brand-new Symbiot in
                                     a throwaway home, none of your data or accounts
   symbiot drift [--fetch]           what's out of sync / at risk across repos
@@ -808,6 +824,7 @@ async function main() {
   if (cmd === "logout") return cmdLogout();
   if (cmd === "whoami" || cmd === "status") return cmdWhoami();
   if (cmd === "app" || cmd === "ui") return cmdApp();
+  if (cmd === "away") return cmdAway();
   if (cmd === "models" || cmd === "hardware") return cmdModels();
   if (cmd === "setup-local" || cmd === "setup-ollama") return cmdSetupLocal();
   if (cmd === "drift") return cmdDrift();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "symbiot",
-  "version": "0.54.3",
+  "version": "0.55.0",
   "description": "Your week, written from your real work. Reads your local git and writes it up with the AI of your choice \u2014 Claude, OpenAI, Gemini, or a local model.",
   "type": "module",
   "bin": {
@@ -42,7 +42,8 @@
     "LICENSE",
     "fonts",
     "mapknn.mjs",
-    "guard.mjs"
+    "guard.mjs",
+    "away.mjs"
   ],
   "engines": {
     "node": ">=18"
@@ -75,7 +76,7 @@
     "@anthropic-ai/sdk": "^0.128.0"
   },
   "scripts": {
-    "test": "node test/load.mjs && node test/fixtures.mjs && node test/links.mjs && node test/post.mjs && node test/peek.mjs && node test/mind.mjs && node test/knowledge.mjs && node test/checks.mjs &&node test/lanes.mjs && node test/handback.mjs && node test/autoallow.mjs && node test/guard.mjs && node test/reports.mjs && node test/sandbox.mjs && node test/adapt.mjs && node test/work.mjs && node test/mapknn.mjs && node test/paths.mjs && node test/smoke.mjs && node test/app.mjs && node test/install.mjs",
+    "test": "node test/load.mjs && node test/fixtures.mjs && node test/links.mjs && node test/post.mjs && node test/peek.mjs && node test/mind.mjs && node test/knowledge.mjs && node test/checks.mjs &&node test/lanes.mjs && node test/handback.mjs && node test/autoallow.mjs && node test/guard.mjs && node test/reports.mjs && node test/sandbox.mjs && node test/adapt.mjs && node test/work.mjs && node test/mapknn.mjs && node test/away.mjs && node test/paths.mjs && node test/smoke.mjs && node test/app.mjs && node test/install.mjs",
     "lint": "eslint ."
   },
   "devDependencies": {