symbiot 0.63.5 → 0.63.7

package/home.mjs

@@ -16,11 +16,11 @@ import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { watchBoard, draftReply, draftCards, draftAnswer } from "./watch.mjs";
 import { pendingReview, pushTasks, addTask, taskType } from "./tasks.mjs";
 import { estimate, estimateWords } from "./estimate.mjs";
-import { setHandoffCmd, agentsList, runHandoff, runningHandoff, handoffCmd, loadRuns, connectorsInfo, parkedPaths, agentMissing, settleNeeds, pickAgent, detectHandoffs, linkReach } from "./agents.mjs";
+import { setHandoffCmd, agentsList, runHandoff, runningHandoff, handoffCmd, loadRuns, connectorsInfo, parkedPaths, agentMissing, settleNeeds, pickAgent, detectHandoffs, linkReach, unchangedStep } from "./agents.mjs";
 import { linksState, signInAsked } from "./links.mjs";
 import { knowledgeState } from "./knowledge.mjs";
 import { CONFIG_DIR, loadTasks, saveTasks, loadConfig, saveConfig, sameTask } from "./core.mjs";
-import { lanesState, stuckHandovers, allowHandover, skipHandover } from "./lanes.mjs";
+import { lanesState, stuckHandovers, allowHandover, skipHandover, handingOf, loadLedger, doneSince } from "./lanes.mjs";
 import { converse, actIn, actNow, taskIn, loadMind } from "./mind.mjs";
 import { repoPathMap, laneMap, reposState, scanRoots } from "./scan.mjs";
 import { resolveProvider, PROVIDERS, claudeState } from "./ai.mjs";
@@ -312,6 +312,7 @@ function homeState({ now = Date.now(), fresh = false, deps = {} } = {}) {
   const confirmed = deps.confirmed || (() => { try { return !!loadConfig().reposConfirmed; } catch { return false; } });
   const waits = deps.waits || (() => { try { return awaitingState().waits; } catch { return []; } });
   const clashes = deps.clashes || (() => { try { return newClashes(); } catch { return []; } });
+  let led; const finished = deps.doneSince || ((path, q) => { try { return doneSince(path, q, { ledger: (led = led || loadLedger()), now }); } catch { return null; } });
   // can a reply be noticed? Email on (mail on this computer), or an inbox watched and signed in
   const seesInbox = deps.seesInbox || (() => { try { return inboxSight(); } catch { return true; } });
   // the agent the handoff command runs, gone from this computer; Claude connectors linked here but signed out
@@ -354,8 +355,12 @@ function homeState({ now = Date.now(), fresh = false, deps = {} } = {}) {
     const qs = (a.ask && a.ask.questions) || [], q = qs[0];
     if (!q) continue;
     const lane = laneOfPath(a.path, map), repo = lane || (lane === "" ? "" : a.name);
+    // the work it asks about is done already (another lane took it and ticked it): the card says so, and Close it is first
+    const pa = plainAsk(a.path, q), done = finished(a.path, q.q), opts = (q.options || []).slice(0, 2);
+    const closed = done ? { done, options: [`Close it: ${done.lane} has done this already (${done.text}). Check that it's so, and carry on without asking again. (recommended)`, opts[0]].filter(Boolean),
+      labels: ["Close it: it's done", ...(opts[0] ? [blobLabel(pa.labels ? pa.labels[0] : opts[0])] : [])] } : {};
     you.push({ kind: "ask", id: "ask:" + a.path, path: a.path, repo, name: repo ? named(lane ? map[lane] : a.path, repo) : plain(String(a.name || "an agent").replace(/^Agent:\s*/, ""), 60),
-      title: `${a.name} asks`, sub: String(q.q || "").slice(0, 90), ...plainAsk(a.path, q), options: (q.options || []).slice(0, 2), ...(qs.length > 1 ? { more: qs.length - 1 } : {}), ...signInCard([q.q, ...(q.options || []).slice(0, 2)]), shape: "agents" });
+      title: `${a.name} asks`, sub: String(q.q || "").slice(0, 90), ...pa, options: opts, ...closed, ...(qs.length > 1 ? { more: qs.length - 1 } : {}), ...signInCard([q.q, ...opts]), shape: "agents" });
   }
   // What stopped and can't go on without you, as a question too: a handover that
   // couldn't start (lanes.mjs stuckHandovers: "Allow this run access to ~/Company?"),
@@ -429,6 +434,8 @@ function PLAIN_RULE(r) {
   if (first === "sudo") return "make changes as administrator";
   return `run ${first}`;
 }
+// a label without its "(recommended)": a second button isn't the recommended one
+const blobLabel = (l) => String(l || "").replace(/\s*\(recommended\)\s*$/i, "");
 function plainAsk(path, q) {
   const text = String(q.q || ""), opts = (q.options || []).slice(0, 2);
   let ask = text, labels = opts.map((o) => o.replace(PATHISH, "a file"));
@@ -437,7 +444,11 @@ function plainAsk(path, q) {
     ask = `${text.replace(PATHISH, "a file")}${rules.length ? ` It wants to ${rules.slice(0, 6).join(", ")}${rules.length > 6 ? `, and ${rules.length - 6} more things` : ""}.` : ""} If you say no, it skips that part and tells you what it left out.`;
     labels = opts.map((o) => (/allowlist\.proposed/i.test(o) ? "Allow" + (/recommended/i.test(o) ? " (recommended)" : "") : o.replace(PATHISH, "a file")));
   }
-  return { q: ask.replace(PATHISH, "a file"), ...(labels.some((l, i) => l !== opts[i]) ? { labels } : {}) };
+  // raw: the question as the agent wrote it, the key its answer is saved under (agents.mjs
+  // answerQuestions). Sending the plain words back matched nothing, so a permission card's
+  // Allow, and Send under it, did nothing at all (whatsapp_module, 2026-10-12).
+  const shown = ask.replace(PATHISH, "a file");
+  return { q: shown, ...(shown !== text ? { raw: text } : {}), ...(labels.some((l, i) => l !== opts[i]) ? { labels } : {}) };
 }
 
 function homeAnswer(id, { pick, text = "" } = {}, deps = {}) {
@@ -466,7 +477,14 @@ function homeAnswer(id, { pick, text = "" } = {}, deps = {}) {
     const settle = deps.settle || settleNeeds;
     if (!go) { settle(a.path, n.key); dropped.add(id); return { ok: true, said: "Skipped. It won't ask again." }; }
     if ((deps.running || runningHandoff)(a.path)) return { ok: true, said: "An agent is already at work there." };
-    const said = n.kind === "approve" ? `Go ahead: ${text || "do it as you had it, once you've checked what you flagged"}.` : `Done: the user did it${text ? ` (${text})` : ""}. Check it worked, then carry on.`;
+    // Done it, on a step that names a file (`.env`): only once that file has changed since
+    // the run asked. In your own words it goes ahead (done some other way), its agent told.
+    const still = n.kind === "approve" ? [] : (deps.unchanged || unchangedStep)(`${n.what} ${n.check || ""}`, a.path, a.endedAt || a.startedAt || 0);
+    const last = still.map((f) => `\`${f.name}\` ${f.at ? `was last changed on ${new Date(f.at).toISOString().slice(0, 10)}` : "isn't there"}`).join(" and ");
+    if (still.length && !text) return { error: `${last.replace(/`/g, "")}, before its agent asked, so it isn't done yet. Make the change and press Done it again, or say how you did it.` };
+    const said = n.kind === "approve" ? `Go ahead: ${text || "do it as you had it, once you've checked what you flagged"}.`
+      : still.length ? `The user says it's done (${text}), but ${last}, before you asked. Check it yourself before relying on it, then carry on.`
+      : `Done: the user did it${text ? ` (${text})` : ""}. Check it worked, then carry on.`;
     noteAnswer(a.path, n.what, said);
     const e = (deps.run || runHandoff)(a.path, { force: true });
     if (e && e.id && !e.blocked) { settle(a.path, n.key); dropped.add(id); }
@@ -673,6 +691,9 @@ function workScene({ deps = {}, full = false } = {}) {
     for (const q of qs) { p.qs = p.qs || []; if (p.qs.length < 3) p.qs.push({ q: q.q, options: (q.options || []).slice(0, 3), path: a.path, ...signInCard([q.q, ...(q.options || []).slice(0, 3)]) }); }
     for (const s of ideas) { p.ideas = p.ideas || []; if (p.ideas.length < 4) p.ideas.push({ text: plain(s.text, 200), full: String(s.text), repo: s.repo || l, path: a.path }); }
   }
+  // what each lane handed over and hasn't heard back on, with where it stands and how far the run on it has got
+  let led; const handing = deps.handing || ((path) => { try { return handingOf(path, { map, ledger: (led = led || loadLedger()) }); } catch { return []; } });
+  for (const [repo, path] of Object.entries(map)) { const h = handing(path); if (h.length) at(repo).handing = h.slice(0, 3); }
   const stuck = deps.stuck || (() => { try { return stuckHandovers(); } catch { return []; } });
   const drafts = deps.drafts || (() => { try { return draftCards(); } catch { return []; } });
   for (const t of troubles({ stuck: stuck(), list: AG, map, named, drafts: drafts() })) {

package/index.mjs

@@ -38,7 +38,7 @@ import { gitDefaultBranch, loadDeploys, driftRepo, computeDrift } from "./drift.
 import { buildTasksMd, taskType, shipChanges, shipWithBump, bumpOffer, learnNpm, releaseNeeded, withReleases, setVersion, syncTasks, pendingReview, unreleased, publishesOnMerge, addTask, approveRepo, approveChanges, sendBack, pushTasks } from "./tasks.mjs";
 import { produce, mailState, setMail, sentMail } from "./writeups.mjs";
 import { loadScreens, screenImage, blueprint } from "./screens.mjs";
-import { mapPage, wholePage, pressRegion, typeRegion, uploadRegion, uploadFiles, scrollPage, signIn, isTrusted } from "./headless.mjs";
+import { mapPage, wholePage, pressRegion, typeRegion, chooseRegion, uploadRegion, uploadFiles, scrollPage, signIn, isTrusted } from "./headless.mjs";
 import { watchState, addWatch, removeWatch, seenWatch, newsSince, markNews, checkWatch, setBrief, draftReply, watchBoard, boardLine, boardChat, boardTalk, clearBoardChat } from "./watch.mjs";
 import { PORT as PHONE_PORT, phoneState, pairComputer, pollComputer, forgetComputer, parsePairLink } from "./phone.mjs";
 import { qrMatrix } from "./qr.mjs";
@@ -408,19 +408,22 @@ async function cmdScreens() {
     for (const s of list) console.log(`${s.id}  ${s.name}  ${c.d(`${(s.regions || []).length} regions · ${s.page ? s.page.url : s.w + "×" + s.h + " " + s.via}`)}`);
     return;
   }
-  if (sub === "map") { const body = { site: a1, name: flag("name", ""), whole: has("whole") }; return out(screenJson((await viaApp("/api/screens/map", body)) || await mapPage(body.site, body.name, { whole: body.whole }))); }
+  // whose tab in the app's hidden browser: the agent run's folder (SYMBIOT_AGENT), else here, so
+  // two agents at once each keep their own page (headless.mjs withPage)
+  const who = process.env.SYMBIOT_AGENT || process.cwd();
+  if (sub === "map") { const body = { site: a1, name: flag("name", ""), whole: has("whole"), who }; return out(screenJson((await viaApp("/api/screens/map", body)) || await mapPage(body.site, body.name, { whole: body.whole, who }))); }
   if (sub === "whole") {
     const s = find(a1); if (!s) return out({ error: "No screen " + (a1 || "") + ". symbiot screens lists them." });
-    return out(screenJson((await viaApp("/api/screens/whole", { id: s.id })) || await wholePage(s.id)));
+    return out(screenJson((await viaApp("/api/screens/whole", { id: s.id, who })) || await wholePage(s.id, { who })));
   }
   if (sub === "scroll") {
     const s = find(a1); if (!s) return out({ error: "No screen " + (a1 || "") + ". symbiot screens lists them." });
-    const body = { id: s.id, to: a2 || "down" };
-    return out(screenJson((await viaApp("/api/screens/scroll", body)) || await scrollPage(body.id, body.to)));
+    const body = { id: s.id, to: a2 || "down", who };
+    return out(screenJson((await viaApp("/api/screens/scroll", body)) || await scrollPage(body.id, body.to, { who })));
   }
   if (sub === "show") { const s = find(a1); return out(s ? screenJson(s) : { error: "No screen " + (a1 || "") + ". symbiot screens lists them." }); }
   if (sub === "signin") { const r = (await viaApp("/api/screens/signin", { site: a1 })) || await signIn(a1); return out(r.ok ? { ...r, next: "Sign in in the window that opened, close it, then map again." } : r); }
-  if (sub === "press" || sub === "type" || sub === "upload") {
+  if (sub === "press" || sub === "type" || sub === "choose" || sub === "upload") {
     const s = find(a1); if (!s) return out({ error: "No screen " + (a1 || "") + ". symbiot screens lists them." });
     const want = String(a2 || "").toLowerCase(), rs = s.regions || [];
     const r = rs.find((x) => x.id === a2) || rs.find((x) => x.label.toLowerCase() === want) || (rs.filter((x) => x.label.toLowerCase().includes(want)).length === 1 && rs.find((x) => x.label.toLowerCase().includes(want)));
@@ -428,9 +431,11 @@ async function cmdScreens() {
     // a draft reply's agent (SYMBIOT_DRAFT, watch.mjs) never presses Send, or Enter (it sends in a chat)
     // upload: the files resolved and checked here, where a relative path means something
     const f = sub === "upload" ? uploadFiles([a3, ...more]) : null; if (f && f.error) return out(f);
-    const body = { id: s.id, region: r.id, confirmed: has("yes"), noSend: !!process.env.SYMBIOT_DRAFT, ...(sub === "type" ? { text: a3, enter: has("enter") } : {}), ...(f ? { files: f.files } : {}) };
-    const done = (await viaApp("/api/screens/" + sub, body)) || (sub === "press" ? await pressRegion(s.id, r.id, { confirmed: body.confirmed, noSend: body.noSend }) : sub === "type" ? await typeRegion(s.id, r.id, a3, { enter: body.enter, confirmed: body.confirmed, noSend: body.noSend }) : await uploadRegion(s.id, r.id, f.files, { confirmed: body.confirmed }));
-    if (f && done && /answered 404/.test(done.error || "")) return out({ error: "The Symbiot app that's running is older than this command and can't upload: restart it (symbiot app), then try again." });
+    // type --replace "old" "new": only that part of the field typed over
+    const part = sub === "type" && has("replace") ? { replace: String(a3 == null ? "" : a3), text: String(more[0] == null ? "" : more[0]) } : null;
+    const body = { id: s.id, region: r.id, confirmed: has("yes"), noSend: !!process.env.SYMBIOT_DRAFT, who, ...(sub === "type" ? (part || { text: a3 }) : {}), ...(sub === "type" ? { enter: has("enter") } : {}), ...(sub === "choose" ? { option: a3 } : {}), ...(f ? { files: f.files } : {}) };
+    const done = (await viaApp("/api/screens/" + (part ? "replace" : sub), body)) || (sub === "press" ? await pressRegion(s.id, r.id, { confirmed: body.confirmed, noSend: body.noSend, who }) : sub === "type" ? await typeRegion(s.id, r.id, body.text, { enter: body.enter, confirmed: body.confirmed, noSend: body.noSend, who, ...(part ? { replace: part.replace } : {}) }) : sub === "choose" ? await chooseRegion(s.id, r.id, a3, { confirmed: body.confirmed, who }) : await uploadRegion(s.id, r.id, f.files, { confirmed: body.confirmed, who }));
+    if ((f || part || sub === "choose") && done && /answered 404/.test(done.error || "")) return out({ error: `The Symbiot app that's running is older than this command and can't ${f ? "upload" : part ? "replace part of a field" : "choose"}: restart it (symbiot app), then try again.` });
     // not a trusted site: say how to go ahead (only you can trust a site, in the app's Settings)
     if (done && done.confirm) return out({ error: `${done.error} Add --yes to go ahead, or list ${done.host} under Trusted sites in Symbiot's Settings.` });
     return out(screenJson(done));
@@ -445,6 +450,12 @@ async function cmdScreens() {
   symbiot screens press <id> <region> [--yes]  press a region there, map where it lands
   symbiot screens type <id> <field> "text" [--enter] [--yes]
                                                type into a field (Enter sends it), map the result
+  symbiot screens type <id> <field> --replace "old" "new" [--yes]
+                                               change only that part of what's in the field,
+                                               the rest (a post's picture too) left as it is
+  symbiot screens choose <id> <menu> "option" [--yes]
+                                               pick an option in a menu (a dropdown: MX in a
+                                               record type), by its label; map the result
   symbiot screens upload <id> <field> <file> [<file>…] [--yes]
                                                put a file in the page's file box (a picture or
                                                video for a post): <field> is the box, or the
@@ -459,8 +470,9 @@ async function cmdScreens() {
   symbiot browser [site]                      the Symbiot Browser: sign in to your sites for Symbiot
   symbiot screens signin <site>               sign in once, in the Symbiot Browser
   --yes is needed (press, type, upload) unless the page's site is under Trusted sites in the app's Settings.
-  While the app runs, these use its hidden browser, which stays open a few minutes:
-  press on the screen the last command printed carries on from that page as it is
+  While the app runs, these use its hidden browser, which stays open a few minutes, with
+  a tab for each agent: press on the screen the last command printed carries on from that
+  page as it is
   (type without --enter, then press the form's button).`);
   if (sub !== "help") process.exitCode = 1;
 }
@@ -858,6 +870,44 @@ async function cmdMarketing() {
   if (sub !== "help") process.exitCode = 1;
 }
 
+// ---- `symbiot capture`: a product's pictures and clips, for its pick tray (capture.mjs) ----
+// Run by the app (it has the browser and ffmpeg, and the tray is its), else here. What
+// Marketing's agent runs on a product's first run, instead of capture scripts of its own.
+async function cmdCapture() {
+  const VAL = ["--url", "--window", "--screens", "--seconds"];
+  const [product = "help"] = argv.slice(1).filter((x, i, all) => !x.startsWith("--") && !VAL.includes(all[i - 1]));
+  if (product === "help" || has("help")) {
+    console.log(`${c.b("symbiot capture")} ${c.d("— pictures and short clips of a product, for Marketing's pick tray")}
+  symbiot capture <product> [--url <its address>] [--screens /a,/b] [--seconds 6] [--no-clips]
+                                            a web app: its key screens (from its routes and
+                                            README), each a picture, the first few a clip too
+  symbiot capture <product> --window "<its window's title>" [--seconds 6]
+                                            a desktop app: its window, a picture and a clip
+                                            (under Wayland you pick it in your desktop's
+                                            screen-sharing prompt, the first time only)
+  Its address: --url, else the app of it running here (start it first, with demo data
+  where it has some). Symbiot itself: a copy with made-up work in it, started and
+  stopped for the capture, never your own.
+  Before anything reaches the tray, names, emails, phone numbers,
+  addresses, keys and tokens, account and card numbers, what's typed into forms,
+  notifications, chats, avatars and pictures are found and blurred. Look them over
+  under Marketing: switch a box off, or draw one of your own. The unblurred originals
+  stay in the lane's .symbiot/tray-originals/, never posted.`);
+    if (product !== "help") process.exitCode = 1;
+    return;
+  }
+  const body = { product, url: flag("url", ""), window: flag("window", ""), screens: String(flag("screens", "")).split(",").map((x) => x.trim()).filter(Boolean), clips: !has("no-clips"), ...(Number(flag("seconds", 0)) > 0 ? { seconds: Number(flag("seconds", 0)) } : {}) };
+  console.log(c.d(`Capturing ${product}: a minute or two…`));
+  const r = (await viaApp("/api/marketing/capture", body)) || await (await import("./capture.mjs")).captureProduct(body);
+  if (r.error) { console.log(c.y(r.error)); process.exitCode = 1; return; }
+  console.log(`${c.g("✓")} ${r.note}`);
+  for (const it of r.items || []) console.log(c.d(`  ${r.tray}/${it}`));
+  for (const s of r.skipped || []) console.log(c.y(`  ${s.clip ? "no clip of" : "skipped"} ${s.path}: ${s.why}`));
+  for (const f of r.failed || []) console.log(c.y(`  not blurred yet: ${f}`));
+  if (r.warning) console.log(c.y(r.warning));
+  if (r.seed) console.log(c.d(`  It has demo data (${r.seed}): capture with that loaded, not real data.`));
+}
+
 // ---- `symbiot reports`: what agents wrote up for you (reports.mjs) ---------------
 function cmdReports() {
   const id = argv.slice(1).find((x) => !x.startsWith("--"));
@@ -910,6 +960,9 @@ ${c.b("Experimental")}
   symbiot marketing posted <draft> --url <link>
                                     mark a Marketing draft posted (or superseded);
                                     symbiot marketing help for more
+  symbiot capture <product>         pictures and clips of a product for Marketing's
+                                    pick tray, blurred where they show anything private
+                                    (symbiot capture help for more)
   symbiot screens map <site>        map a web page's buttons in a hidden browser
                                     (symbiot screens help for more)
   symbiot watch add <screen id>     keep track of a mapped page: what's new on it
@@ -963,6 +1016,7 @@ async function main() {
   if (cmd === "phone") return cmdPhone();
   if (cmd === "post" || cmd === "posts") return cmdPost();
   if (cmd === "marketing") return cmdMarketing();
+  if (cmd === "capture") return cmdCapture();
   if (cmd === "knowledge" || cmd === "know") return cmdKnowledge();
   if (cmd === "reports" || cmd === "report") return cmdReports();
   if (cmd === "week")return cmdRun("week");

package/lanes.mjs

@@ -14,15 +14,17 @@
 // result?, reportedAt? }] }. status: started, held (that lane's agent was busy:
 // it starts when it's free), blocked (it didn't start, and nothing running there will
 // start it: note says why), done (reported back) or error (reported back too).
-// chain: how many handovers in a row led here; past MAX_CHAIN it stops, so two
-// lanes can't hand the same thing back and forth forever.
+// chain: how many handovers in a row led here; past MAX_CHAIN no agent is started on
+// it, so two lanes can't hand the same thing back and forth forever. To a repo it's
+// still added to that lane's tasks (blocked), for its next run: dropped, ops's
+// User-Agent fix for symbiot was only found in lanes.json (2026-10-12).
 import { join, basename, dirname, resolve, relative } from "node:path";
 import { homedir } from "node:os";
 import { readFileSync, writeFileSync, existsSync, mkdirSync, readdirSync, chmodSync, statSync } from "node:fs";
 import { createHash, randomBytes } from "node:crypto";
 import { execFile } from "node:child_process";
 import { CONFIG_DIR, loadTasks, clipWords } from "./core.mjs";
-import { runHandoff, runningHandoff, waitingFor, agentQuestions, findOrcaCli, installAllowlist, writeTasks } from "./agents.mjs";
+import { runHandoff, runningHandoff, waitingFor, agentQuestions, findOrcaCli, installAllowlist, writeTasks, workOf } from "./agents.mjs";
 import { addTask, removeTask, pushTasks } from "./tasks.mjs";
 import { actNow, actBrief } from "./mind.mjs";
 import { laneMap } from "./scan.mjs";
@@ -86,7 +88,7 @@ function dispatch(path, { map = laneMap(), act = actNow, run = runHandoff, add =
   const from = { lane: laneOf(path, map), path }, parent = ledger.handoffs.filter((h) => h.to.path === path).pop(), chain = (parent ? parent.chain : 0) + 1;
   const started = [];
   for (const h of asked) {
-    const key = createHash("sha1").update(path + "\n" + h.lane.toLowerCase() + "\n" + h.text).digest("hex").slice(0, 16);
+    const key = keyOf(path, h);
     if (ledger.handoffs.some((x) => x.key === key || (x.was || []).includes(key))) continue;
     const prior = supersedes(h, from, ledger, { running, tasks });
     if (prior) {
@@ -106,8 +108,8 @@ function dispatch(path, { map = laneMap(), act = actNow, run = runHandoff, add =
       started.push(prior); continue;
     }
     const e = { id: randomBytes(4).toString("hex"), key, from, to: { lane: h.lane, path: "" }, text: h.text, at: now, chain, status: "started" };
-    const to = laneTarget(h.lane, map);
-    if (chain > MAX_CHAIN) Object.assign(e, { status: "error", error: `${MAX_CHAIN} handovers in a row led here, so this one wasn't started. Do it yourself, or ask the user.` });
+    const to = laneTarget(h.lane, map), looped = chain > MAX_CHAIN;
+    if (looped && (!to || to.lane === OPS || to.lane.toLowerCase() === from.lane.toLowerCase())) Object.assign(e, { status: "error", error: `${MAX_CHAIN} handovers in a row led here, so this one wasn't started. Do it yourself, or ask the user.` });
     else if (!to) Object.assign(e, { status: "error", error: `There's no lane called ${h.lane}. Lanes: ops, or a repo: ${Object.keys(map).slice(0, 30).join(", ")}.` });
     else if (to.lane.toLowerCase() === from.lane.toLowerCase()) Object.assign(e, { status: "error", error: `${to.lane} is your own lane: do it yourself.` });
     else if (to.lane === OPS) {
@@ -119,12 +121,13 @@ function dispatch(path, { map = laneMap(), act = actNow, run = runHandoff, add =
       if (t.error) Object.assign(e, { status: "error", error: t.error });
       else {
         push({ repo: to.lane });
-        const r = run(to.path) || {};
-        Object.assign(e, { to, task: t.id, ...startedAs(r) });
+        if (looped) Object.assign(e, { to, task: t.id, status: "blocked", note: `${MAX_CHAIN} handovers in a row led here, so no agent was started on it: it waits in ${to.lane}'s tasks for its next run` });
+        else { const r = run(to.path) || {}; Object.assign(e, { to, task: t.id, ...startedAs(r) }); }
       }
     }
     ledger.handoffs.push(e); started.push(e);
   }
+  noteSent(path, asked, ledger);
   return started;
 }
 
@@ -179,6 +182,73 @@ function partlyDone(path, { ledger = loadLedger() } = {}) {
   for (const h of parseHandoffs(readSym(path, "HANDOFF.md"))) if (!mine.some((x) => x.to.lane.toLowerCase() === h.lane.toLowerCase() && x.text === h.text)) handed.push({ lane: h.lane, text: clipWords(firstLine(h.text), 90) });
   return questions || handed.length ? { questions, handed: handed.slice(0, 3) } : null;
 }
+// What a folder handed over that hasn't come back yet, each with where it stands,
+// for that lane's block (Agents, Home): the sections of its HANDOFF.md not sent
+// yet, and the ledger's handovers from it, with how far the receiving run has got.
+// whatsapp_module's test-number handover sat from 07:33 (2026-10-12) behind ops's
+// run on its earlier version, and nothing on its block said so, so the user
+// answered as if ops already had it. [{ lane, text, gone, why, doing?, progress? }]:
+// gone, its lane has it (why says how it's going); otherwise why says what it waits on.
+const keyOf = (path, h) => createHash("sha1").update(path + "\n" + h.lane.toLowerCase() + "\n" + h.text).digest("hex").slice(0, 16);
+const findSent = (ledger, key) => ledger.handoffs.slice().reverse().find((x) => x.key === key) || ledger.handoffs.slice().reverse().find((x) => (x.was || []).includes(key));
+// What the run there is doing and how far through its tasks it is.
+function runWork(p) { try { const { work, progress } = workOf(p, readSym(p, "agent.log")); const t = work && (work.todos || []).find((x) => x.status === "in_progress"); return { doing: clipWords(String((t && t.active) || (work && work.doing) || ""), 100), progress }; } catch { return {}; } }
+function handingOf(path, { ledger, map, running = runningHandoff, now = Date.now(), changedAt, work = runWork } = {}) {
+  if (!path) return [];
+  ledger = ledger || loadLedger();
+  const asked = parseHandoffs(readSym(path, "HANDOFF.md"));
+  const mine = ledger.handoffs.filter((x) => x.from.path === path && !x.skipped && now - (x.at || 0) < STUCK_FOR && (x.status === "error" ? !pastIt(x, ledger.handoffs) : !x.reportedAt && x.status !== "done")); // one that couldn't go stays until you Allow or Skip it
+  if (!asked.length && !mine.length) return [];
+  map = map || laneMap();
+  if (changedAt == null) try { changedAt = statSync(join(path, ".symbiot", "HANDOFF.md")).mtimeMs; } catch { changedAt = now; }
+  const scanned = path.startsWith(ACT_DIR) || Object.values(map).includes(path), out = [];
+  const short = (t) => clipWords(firstLine(t).replace(/\*\*/g, ""), 120);
+  for (const h of asked) {
+    if (findSent(ledger, keyOf(path, h))) continue; // sent: the ledger's row says where it stands
+    const age = now - changedAt, row = (why) => out.push({ lane: h.lane, text: short(h.text), gone: false, why });
+    if (!scanned) row("Not sent: Symbiot doesn't have this folder as a lane, so it never reads its HANDOFF.md");
+    else if (age < 60000) row("Not sent yet: Symbiot picks it up within 20 seconds");
+    else row(`Not sent after ${ago(age)}: Symbiot only sends handovers while its app is open`);
+  }
+  for (const e of mine.slice().reverse()) {
+    const row = (gone, why, more = {}) => out.push({ lane: e.to.lane, text: short(e.text), gone, why, ...more });
+    if (e.status === "error") { row(false, `Couldn't hand it over: ${e.error || "it didn't start"}`); continue; }
+    const p = e.to.path, going = !!(p && running(p)), began = p ? lastRunStart(p) : 0;
+    if (began < e.at && going) row(true, e.superseded ? `Sent: ${e.to.lane} is on the earlier version now (its run started ${ago(now - began)} ago), and gets this one when that run ends` : `Sent, and queued: ${e.to.lane}'s agent is busy, and starts on it when that run ends`);
+    else if (began < e.at && e.status === "blocked") row(false, `Sent, but it didn't start: ${e.note || "its agent didn't start"}`);
+    else if (began < e.at) row(true, `Sent: ${e.to.lane}'s agent starts on it when it's free`);
+    else if (going) { const w = work(p) || {}; row(true, "Sent: its agent is on it now", { ...(w.doing ? { doing: w.doing } : {}), ...(w.progress ? { progress: w.progress } : {}) }); }
+    else if (openQuestions(p)) row(true, "Sent: its agent asked you something first");
+    else row(true, "Sent: its run ended, and what it did comes back within 20 seconds");
+  }
+  return out.slice(0, 6);
+}
+const ago = (ms) => { const m = Math.round(ms / 60000); return m < 1 ? "under a minute" : m < 120 ? `${m} min` : `${Math.round(m / 60)} hours`; };
+// Once what's in a HANDOFF.md has gone, the file says so instead of still reading
+// like a handover waiting to go: whatsapp_module's agent saw its file still there
+// and told the user it hadn't been sent, while ops had both its handovers running
+// (2026-10-12). The sections become a dated list of what went where, newest first;
+// a new "### <lane>" section added to it is sent as usual.
+const stamp = (t) => { const d = new Date(t), p = (n) => String(n).padStart(2, "0"); return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`; };
+function sentState(e, key) {
+  if (e.status === "error") return `couldn't hand it over: ${String(e.error || "it didn't start").replace(/\.$/, "")}`;
+  if (e.key !== key) return "sent earlier, and replaced since by a newer version";
+  if (e.superseded) return e.to.lane === OPS ? "replaces the version sent earlier: ops's run on that one gets it when it ends" : `replaces the version sent earlier, as a task in ${e.to.lane}`;
+  if (e.status === "held") return `queued in ${e.to.lane}: its agent was busy, and starts on it when that run ends`;
+  if (e.status === "blocked") return `added to ${e.to.lane}'s tasks, but its agent didn't start (${String(e.note || "").replace(/\.$/, "")})`;
+  return `${e.to.lane}'s agent started on it`;
+}
+function noteSent(path, asked, ledger) {
+  const file = join(path, ".symbiot", "HANDOFF.md");
+  const rows = asked.map((h) => { const key = keyOf(path, h), e = findSent(ledger, key); return e ? `- ${stamp(e.at || Date.now())} → **${e.to.lane}**: ${sentState(e, key)}. "${clipWords(firstLine(h.text).replace(/\*\*/g, ""), 100)}"` : null; });
+  if (!rows.length || rows.some((r) => !r)) return false;
+  const had = readSym(path, "HANDOFF.md");
+  if (JSON.stringify(parseHandoffs(had)) !== JSON.stringify(asked)) return false; // its agent is writing to it: next pass
+  const lines = had.split("\n"), at = lines.findIndex((l) => /^##\s+Sent\s*$/.test(l)), before = [];
+  if (at >= 0) for (const l of lines.slice(at + 1)) { if (/^#/.test(l)) break; if (/^- /.test(l)) before.push(l); }
+  const md = `# Handovers: sent\nSymbiot sent what was in this file to its lane, so nothing here waits to go. Each lane's agent works on it (the Agents tab shows how far it has got), and what it did comes back to you in \`.symbiot/ANSWERS.md\`. To hand over something else, or a changed version of one below, add a \`### <lane>\` section to this file: Symbiot sends it within 20 seconds.\n\n## Sent\n${[...rows, ...before].slice(0, 12).join("\n")}\n`;
+  try { writeFileSync(file, md); return true; } catch { return false; }
+}
 // Tell the agent that asked: the result as an answer in its ANSWERS.md, then
 // start it again to carry on (unless it's still running: it reads it next time).
 // Not past a step of the user's it waits on (a key for .env, "don't start another
@@ -231,6 +301,26 @@ function alike(a, b) {
   let n = 0; for (const w of s) if (l.has(w)) n++;
   return n / s.size >= 0.5;
 }
+// A lane's question about work it handed over, once that work is done: whatsapp_module
+// asked "Can I reach sts-prod myself to put the WhatsApp module back?" after its two
+// handovers to ops stopped, and kept asking on Home after ops had put it back and ticked
+// it (2026-10-12). It's out of date when three quarters of its words (sts-prod counts
+// whole) are in one of this lane's handovers from the last week, the one it's most about,
+// and the lane that took it has ticked it in its TASKS.md. { lane, text } for the card, or null.
+const DONE_WITHIN = 7 * 86400000, ASK_SKIP = new Set(["can", "the", "and", "for", "you", "now", "how", "its", "it's", "myself", "yourself", ...COMMON]);
+const askWords = (s) => new Set(String(s || "").toLowerCase().replace(/[^a-z0-9\s'-]/g, " ").split(/\s+/).map((w) => w.replace(/^[-']+|[-']+$/g, "")).filter((w) => w.length > 2 && !ASK_SKIP.has(w)).map((w) => w.replace(/s$/, "")));
+function doneSince(path, q, { ledger = loadLedger(), now = Date.now(), read = readSym } = {}) {
+  const want = askWords(q); if (!path || want.size < 3) return null;
+  let best = null, top = 0.75; // the handover it's most about, newest first on a tie
+  for (const h of ledger.handoffs.slice().reverse()) {
+    if (h.from.path !== path || h.skipped || h.status === "error" || !h.to.path || now - (h.at || 0) > DONE_WITHIN) continue;
+    const has = askWords(firstLine(h.text)); let n = 0; for (const w of want) if (has.has(w)) n++;
+    if (n / want.size > top || (!best && n / want.size === top)) { best = h; top = n / want.size; }
+  }
+  if (!best) return null;
+  const head = firstLine(best.text), ticked = read(best.to.path, "TASKS.md").split("\n").filter((l) => /^\s*(?:[-*+]|\d+[.)])\s*\[[xX]\]/.test(l));
+  return ticked.some((l) => alike(l, head)) ? { lane: best.to.lane, text: clipWords(head.replace(/\*\*/g, "").replace(/^What['’]s needed:\s*/i, ""), 120) } : null;
+}
 // The folders a handover names that a run would need: ones on this computer, not
 // the asking run's own, not Symbiot's, not your home itself or a hidden one in it
 // (~/.ssh). A file named in one counts as the folder it's in. Outermost only, 3 at most.
@@ -352,4 +442,4 @@ function lanesState() {
   return { handoffs: out.slice(0, 30) };
 }
 
-export { LEDGER, MAX_CHAIN, loadLedger, laneOf, lastRunStart, dispatch, outcome, report, lanesTick, lanesState, aboutIt, partlyDone, remoteKey, orcaMoves, orcaRelink, stuckHandovers, allowHandover, skipHandover, namedDirs, alike };
+export { LEDGER, MAX_CHAIN, loadLedger, laneOf, lastRunStart, dispatch, outcome, report, handingOf, lanesTick, lanesState, aboutIt, partlyDone, remoteKey, orcaMoves, orcaRelink, stuckHandovers, allowHandover, skipHandover, namedDirs, alike, doneSince };

package/links.mjs

@@ -24,6 +24,7 @@ import { readFileSync } from "node:fs";
 import { CONFIG_DIR, loadConfig, saveConfig } from "./core.mjs";
 import { siteUrl, signIn, readPage, trustedSites, trustSite, untrustSite } from "./headless.mjs";
 import { watchState, addWatch, removeWatch, checkWatch, GITHUB_INBOX } from "./watch.mjs";
+import { loadRuns, agentQuestions, answerQuestions } from "./agents.mjs";
 
 // The standard sites. url is where you sign in and, with watch, the page that's
 // read for what's new; hosts are trusted along with it.
@@ -136,12 +137,61 @@ async function checkLink(id, { check = checkWatch, read = readPage } = {}) {
   if (l[id].watch) { const r = await check(l[id].watch); if (r && r.busy) return { busy: true, item: linksState().items.find((x) => x.id === id) }; }
   else {
     const p = await read(e.url, { password: true });
-    if (p && p.busy) return { busy: true, item: linksState().items.find((x) => x.id === id) };
+    if (p && (p.busy || WINDOW_OPEN.test(p.error || ""))) return { busy: true, item: linksState().items.find((x) => x.id === id) };
     const l2 = linked(); if (!l2[id]) return { error: `${e.name} isn't linked.` };
     l2[id] = { ...l2[id], ok: !!(p && !p.error && !p.login), checked: Date.now() }; saveLinked(l2);
   }
   return { ok: true, item: linksState().items.find((x) => x.id === id) };
 }
+const WINDOW_OPEN = /Symbiot Browser is open/;
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+// Once the Symbiot Browser closes (Done, or its X: server.mjs): each linked site not read
+// signed in yet is read now. One the hidden browser can't take yet (an agent's page open in
+// it, or the window not quite gone) is tried again a little later, so a check never just
+// doesn't happen. Gives the items read signed in.
+async function checkSignIns({ check = checkLink, tries = 6, wait = 10000 } = {}) {
+  let todo = linksState().items.filter((x) => x.state !== "off" && x.state !== "ok").map((x) => x.id);
+  const now = [];
+  for (let i = 0; i < tries && todo.length; i++) {
+    if (i) await sleep(wait);
+    const again = [];
+    for (const id of todo) {
+      let r = null; try { r = await check(id); } catch {}
+      const it = r && r.item;
+      if (it && it.state === "ok") now.push(it);
+      else if (r && (r.busy || (it && WINDOW_OPEN.test(it.note || "")))) again.push(id);
+    }
+    todo = again;
+  }
+  return now;
+}
+// A question an agent left asking you to sign in to a site ("sign in to www.reddit.com in the
+// Symbiot Browser, then click Done"), once that site reads signed in: answered for you, and its
+// agent carries on. Before, it sat on Home after the sign-in it asked for was done. Gives
+// [{ path, q }] answered.
+function settleSignIns(items, { paths, ask = agentQuestions, answer = answerQuestions } = {}) {
+  const list = catalog().list, hosts = (items || []).flatMap((x) => { const e = list.find((c) => c.id === x.id); return e ? e.hosts.map((h) => ({ h, name: e.name })) : []; });
+  if (!hosts.length) return [];
+  const on = (site) => { const h = hostOf(siteUrl(site)); return h.includes(".") && hosts.find((x) => h === x.h || h.endsWith("." + x.h) || x.h.endsWith("." + h)); };
+  if (!paths) { try { paths = [...new Set(loadRuns().map((r) => r.path).filter(Boolean))]; } catch { paths = []; } }
+  const done = [];
+  for (const path of paths) {
+    let qs = []; try { qs = ask(path, "").questions || []; } catch {}
+    const rows = qs.map((q) => { const s = signInAsked([q.q, ...(q.options || [])].join("\n")), x = s && on(s.site); return x ? { q: q.q, a: `Done: you're signed in to ${x.name} in the Symbiot Browser now (Symbiot read it signed in just now), so carry on with it.` } : null; }).filter(Boolean);
+    if (!rows.length) continue;
+    let r = null; try { r = answer(path, rows.map((x) => ({ q: x.q, a: x.a })), { rerun: true }); } catch {}
+    if (r && r.ok) done.push(...rows.map((x) => ({ path, q: x.q })));
+  }
+  return done;
+}
+// Done in the Symbiot Browser, its X, or its last window going (server.mjs): the sites are
+// checked, and the questions that settles answered. One at a time, so Done and the window
+// closing because of it are checked once. Gives { signedIn, answered }.
+let CHECKING = null;
+function sitesCheck({ check = checkSignIns, settle = settleSignIns, after = 1500 } = {}) {
+  return CHECKING || (CHECKING = sleep(after).then(() => check()).then((ok) => ({ signedIn: ok, answered: settle(ok) }))
+    .catch(() => ({ signedIn: [], answered: [] })).finally(() => { CHECKING = null; }));
+}
 // Unlink: stop watching it, and untrust the hosts this link trusted (never ones
 // you trusted yourself). A host another link still uses (Outlook and Outlook
 // Calendar share one) passes to that link instead, so it goes when the last
@@ -191,4 +241,4 @@ function signInAsked(text) {
   return null;
 }
 
-export { CATALOG, catalog, cleanEntry, linksState, linkSite, checkLink, unlinkSite, addSite, ownSites, signInAsked, OWN };
+export { CATALOG, catalog, cleanEntry, linksState, linkSite, checkLink, checkSignIns, settleSignIns, sitesCheck, unlinkSite, addSite, ownSites, signInAsked, OWN };

package/marketing.mjs

@@ -126,9 +126,9 @@ function draftFiles(dir = MARKETING_DIR, names = [], { max = 30 } = {}) {
 // two `---` lines, and the rest is notes (with the picture and the date they name).
 const MEDIA_TYPES = { png: "image/png", jpg: "image/jpeg", jpeg: "image/jpeg", gif: "image/gif", webp: "image/webp", mp4: "video/mp4", mov: "video/quicktime", webm: "video/webm" };
 const SEE_MORE = 210; // where LinkedIn's feed cuts a post off with "…see more"
-const HEAD_KEYS = { product: "product", platform: "platform", when: "when", schedule: "when", date: "when", media: "media", image: "media", video: "media", picture: "media" };
+const HEAD_KEYS = { product: "product", platform: "platform", when: "when", schedule: "when", date: "when", media: "media", image: "media", video: "media", picture: "media", where: "where", subreddit: "where", community: "where", flair: "flair" };
 function parseDraft(text) {
-  const src = String(text || "").replace(/\r\n/g, "\n"), out = { title: "", product: "", platform: "", when: "", media: [], body: "", notes: "", format: "" };
+  const src = String(text || "").replace(/\r\n/g, "\n"), out = { title: "", product: "", platform: "", when: "", media: [], body: "", notes: "", format: "", where: "", flair: "" };
   const lines = src.split("\n"), head = [];
   let i = 0;
   for (; i < lines.length; i++) { const l = lines[i]; if (/^##\s/.test(l) || /^\s*-{3,}\s*$/.test(l)) break; head.push(l); }
@@ -175,10 +175,12 @@ function author({ cfg = loadConfig(), dir = MARKETING_DIR } = {}) {
   return { name: name || "You", headline: String(p.headline || "").trim(), avatar: !!avatar, initials: (name || "You").split(/\s+/).map((w) => w[0]).join("").slice(0, 2).toUpperCase() };
 }
 // A file of the lane's, by its path there, only if it is there (no ../ out of it).
+// Never in .symbiot/ (the unblurred originals a capture was made from, tray-originals, are
+// there) nor .git/: nothing there is served, previewed or put on a post.
 function inLane(dir, rel) {
   if (!rel || /\0/.test(rel)) return "";
   const f = join(dir, String(rel));
-  try { const real = realpathSync(f), root = realpathSync(dir); return real.startsWith(root + "/") ? real : ""; } catch { return ""; }
+  try { const real = realpathSync(f), root = realpathSync(dir); return real.startsWith(root + "/") && !/^\.(?:symbiot|git)(?:\/|$)/.test(real.slice(root.length + 1)) ? real : ""; } catch { return ""; }
 }
 // The text an approval is for: a draft's post changed after you approved it isn't approved.
 const sigOf = (body) => createHash("sha256").update(String(body || "")).digest("hex").slice(0, 16);
@@ -247,15 +249,41 @@ function draftPreview(rel, { dir = MARKETING_DIR, cfg } = {}) {
   const d = parseDraft(readFileSync(f, "utf8")), base = relative(realpathSync(dir), dirname(f));
   const media = d.media.map((m) => { const r = join(base, m), ext = m.split(".").pop().toLowerCase(); return inLane(dir, r) && MEDIA_TYPES[ext] ? { rel: r, name: basename(m), kind: MEDIA_TYPES[ext].startsWith("video") ? "video" : "image" } : null; }).filter(Boolean);
   const st = statusOf(dir, rel, d.body);
-  return { rel, title: d.title, product: d.product, platform: d.platform, when: d.when, body: d.body, ...seeMore(d.body), hashtags: d.body.match(/#[\p{L}\p{N}_]+/gu) || [], chars: d.body.length,
+  return { rel, title: d.title, product: d.product, platform: d.platform, when: d.when, ...whereOf(d), body: d.body, ...seeMore(d.body), hashtags: d.body.match(/#[\p{L}\p{N}_]+/gu) || [], chars: d.body.length,
     media, missing: d.media.filter((m) => !media.some((x) => x.name === basename(m))), notes: d.notes, format: d.format, author: author({ cfg, dir }), status: st ? st.status : "", statusAt: st ? st.at : 0,
     ...(st && FINAL.includes(st.status) ? { final: finalSay(st), posted: st.posted || 0, postedOn: st.postedOn || "", url: st.url || "", by: [].concat(st.by || []), edited: !!st.edited } : {}) };
 }
+// Where a draft goes, past its platform: a subreddit (its where: or subreddit: line, else
+// the first r/<name> its notes give, as r/ClaudeAI's draft does), and its flair (a flair:
+// line, else 'flair "…"' in its notes). { where, flair, handle? }, each "" when it doesn't
+// say; handle, the u/<name> a Reddit draft's notes say it's posted as.
+function whereOf(d) {
+  const reddit = /reddit/i.test(d.platform || ""), sub = (t) => { const m = String(t || "").match(/(?:^|[^\w/])\/?r\/([A-Za-z0-9_]{2,21})\b/); return m ? `r/${m[1]}` : ""; };
+  const w = String(d.where || "").trim(), where = w ? (reddit && (sub(w) || (/^[A-Za-z0-9_]{2,21}$/.test(w) ? `r/${w}` : ""))) || w : reddit ? sub(d.notes) : "";
+  const fl = d.flair || (reddit ? (String(d.notes || "").match(/\bflair\s*[:]?\s*["“]([^"”\n]{1,64})["”]/i) || [])[1] || "" : "");
+  const handle = reddit ? (String(d.notes || "").match(/(?:^|[^\w/])\/?u\/([A-Za-z0-9_-]{3,20})\b/) || [])[1] || "" : ""; // who it's posted as, where the notes say
+  return { where, flair: String(fl).trim(), ...(handle ? { handle: `u/${handle}` } : {}) };
+}
 // A picture or video a draft shows, or the avatar in config.profile: { file, type } or null.
 function laneMedia(rel, { dir = MARKETING_DIR, cfg = loadConfig() } = {}) {
   const f = rel === "avatar" ? String(((cfg && cfg.profile) || {}).avatar || "") : inLane(dir, rel), type = f && MEDIA_TYPES[f.split(".").pop().toLowerCase()];
   return type && existsSync(f) ? { file: f, type } : null;
 }
+// A capture of a pick tray (tray.mjs) that Symbiot couldn't vouch for alone (a desktop
+// recording, a clip, one whose pictures' text wasn't read) says why in its .blur.json
+// (review) until you've looked it over (reviewed); a reel, until its clips have been. Till
+// then it goes on no post. reviewOf: why, for a capture by name; lookOver: for a file.
+const readJsonFile = (f) => { try { return JSON.parse(readFileSync(f, "utf8")); } catch { return null; } };
+function reviewOf(root, name, kind = "", parts = []) {
+  const one = (n) => { const sp = /^\w[\w.-]{0,100}$/.test(String(n)) ? readJsonFile(join(root, `${n}.blur.json`)) : null; return sp && sp.review && !sp.reviewed ? String(sp.review) : ""; };
+  if (kind === "reel") { const p = (parts || []).find((x) => one(x)); return p ? `Look over its clip ${p} first: ${one(p)}` : ""; }
+  return one(name);
+}
+function lookOver(rel, { dir = MARKETING_DIR } = {}) {
+  const m = String(rel || "").match(/^(drafts\/[^/]+\/tray)\/([^/]+)$/); if (!m) return "";
+  const idx = readJsonFile(join(dir, m[1], "tray.json")) || {}, it = (Array.isArray(idx.items) ? idx.items : []).find((x) => x && Array.isArray(x.files) && x.files.includes(m[2]));
+  return it ? reviewOf(join(dir, m[1]), it.name, it.kind, it.parts) : "";
+}
 // A post's picture or video, picked (the pick tray, tray.mjs): its `media:` line set to the
 // files, by their path in the lane, written next to the draft's own (`media: tray/home.png`);
 // the post itself untouched. Approved before, it asks for your OK again: what you approved
@@ -269,6 +297,7 @@ function setDraftMedia(rel, files, { dir = MARKETING_DIR } = {}) {
   for (const m of [].concat(files || []).map((x) => draftRel(x, dir)).filter(Boolean)) {
     const p = inLane(dir, m), type = p && MEDIA_TYPES[p.split(".").pop().toLowerCase()];
     if (!type) return { error: `${m} isn't a picture or video in the lane.` };
+    const why = lookOver(m, { dir }); if (why) return { error: `Look it over first, on the Marketing page: ${why}`, review: true };
     media.push({ name: relative(dirname(f), p), video: type.startsWith("video") });
   }
   if (media.length > 1 && media.some((m) => m.video)) return { error: "A post takes one video, or pictures, not both." };
@@ -289,20 +318,24 @@ function setDraftMedia(rel, files, { dir = MARKETING_DIR } = {}) {
 // ---- its brief ----------------------------------------------------------------------------
 // The lines TASKS.md gets for this lane (tasks.mjs buildTasksMd): what it is, the products
 // its tasks name and where each one's code and docs are, and its rules.
-function marketingBrief(list = [], { map = {}, names = productNames(map) } = {}) {
+function marketingBrief(list = [], { map = {}, names = productNames(map), dir = MARKETING_DIR } = {}) {
   const named = [...new Set(list.map((t) => productOf(t.text, names)).filter(Boolean))];
   // its repo: by folder, or by its name as people say it (Dailify is in CallForge AI)
   const pathOf = (p) => { const k = Object.keys(map).find((n) => n !== MARKETING && map[n] && [n, basename(map[n]), displayName(map[n], n)].some((x) => x.toLowerCase() === p.toLowerCase())); return k ? map[k] : ""; };
   const where = named.map((p) => ({ p, path: pathOf(p) }));
+  // a product with no pick tray yet: its first run starts by capturing it (capture.mjs)
+  const trayless = where.filter((w) => w.path && !existsSync(join(dir, DRAFTS, w.p.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, ""), "tray", "tray.json")));
   return ["## This lane: marketing",
     "This lane markets every product the user makes, not one repo's: posts, demo videos and screenshots, launches, landing-page copy, campaigns. This folder is the lane's own (a local git repo, no remote): what you write here is reviewed and approved under Marketing in Symbiot.",
     ...(where.length ? ["- **Products in these tasks** (read each one's README and docs for what it is and its end goal):", ...where.map((w) => `  - ${w.p}${w.path ? `: \`${w.path}\`` : " (not one of the user's repos here: ask in QUESTIONS.md where it lives, or hand it over)"}`)] : []),
+    ...trayless.map((w) => `- **${w.p} has no pick tray yet: start by capturing it.** Run \`node "${CLI}" capture "${w.p}"\` (add \`--url <its address>\` if it isn't running here; start it first with its demo data if it has some; \`--window "<title>"\` for a desktop app). Symbiot opens it in a browser of its own, takes its key screens from its routes and README as pictures and short clips, and blurs anything private before they reach \`${DRAFTS}/<product>/tray/\`. Then build its posts around those.`),
+    `- Pictures and clips of a product come from Symbiot's capture (\`node "${CLI}" capture <product>\`), never a capture script of your own: Symbiot won't run one with the app's access. A post's picture or video is one from its pick tray (\`${DRAFTS}/<product>/tray/\`), blurred, that the user has looked over there; never an unblurred original (\`.symbiot/tray-originals/\`), and never a screenshot you took yourself. Say in the draft's notes which capture you'd use; the user picks it on the Marketing page.`,
     `- Write each piece as a \`.md\` under \`${DRAFTS}/<product>/\` (\`${DRAFTS}/dailify/launch-post.md\`), a \`# \` title first, then \`product: <Product>\`, so the Marketing page tags it. Its screenshots and clips go next to it.`,
     "- Every post opens with a strong hook (its first line written for reach), says plainly what the product is, and states its end goal. Where the end goal isn't written down, draft one and flag it in QUESTIONS.md for the user to confirm.",
     `- Each draft holds the post apart from your notes: a \`# \` title, then \`product:\`, \`platform:\` (linkedin), \`when:\` (YYYY-MM-DD HH:MM, if it's scheduled) and \`media:\` (its picture or video, next to it) lines, then \`## Post\` with exactly the text that goes out (its line breaks, its hashtags) and nothing else, then \`## Notes\` for your reasoning, sources and anything for the user. Symbiot shows \`## Post\` as the platform's own preview, and what you post is that text, unchanged.`,
-    `- The user's only step is approving each post's preview under Marketing in Symbiot: never ask them to post, schedule, paste or attach anything themselves, and never mark that as a 👤 step. Symbiot's browser is signed in to the platforms they linked (LinkedIn among them): once a post is approved (ANSWERS.md says "Approved: <its file>"), you post it, or schedule it in the platform's own scheduler for its \`when:\`, through that browser (\`node "${CLI}" screens map <the platform's page>\`, then \`screens type\` and \`screens press\`, and \`screens upload <id> "<its Add media button>" <file>\` for its pictures or video), with the approved text and media, then check it's there.`
+    `- The user's only step is approving each post's preview under Marketing in Symbiot: never ask them to post, schedule, paste or attach anything themselves, and never mark that as a 👤 step. Symbiot's browser is signed in to the platforms they linked (LinkedIn among them): once a post is approved (ANSWERS.md says "Approved: <its file>"), you post it, or schedule it in the platform's own scheduler for its \`when:\`, through that browser (\`node "${CLI}" screens map <the platform's page>\`, then \`screens type\` and \`screens press\` (to change part of a post already written or scheduled, \`screens type <id> <field> --replace "<old words>" "<new words>"\`: retyping all of it drops its picture), and \`screens upload <id> "<its Add media button>" <file>\` for its pictures or video), with the approved text and media, then check it's there.`
       + " A post not yet approved is a question in QUESTIONS.md with a 🤖 Agent: option (\"🤖 Agent: post it on Tuesday at 08:00, once you approve its preview\"), and what to check first in its context line. Never offer doing it by hand, and never ask them to sign in to or link a platform that's linked: use its session. Only signing in (a platform not linked yet, or a real attempt found its session expired: say so) is the user's: `👤 You (only you: signing in to LinkedIn)`. Never sign in as them, and never post what they haven't approved.",
     `- Once a post is out (or in the platform's scheduler), mark it posted with its link: \`node "${CLI}" marketing posted <its file> --url <the post's link>\` (\`--at "YYYY-MM-DD HH:MM"\` for a scheduled one). A post you redo in a new file: mark the old one \`node "${CLI}" marketing superseded <old file> --by <new file>\`. Either takes it off the user's list for good, and Symbiot then refuses to approve or post it again: never edit \`.symbiot/drafts.json\` by hand.`];
 }
 
-export { MARKETING, MARKETING_DIR, displayName, productNames, ensureMarketing, productOf, untagged, tagged, MARKETING_WORDS, draftFiles, marketingBrief, parseDraft, seeMore, SEE_MORE, draftPreview, setDraftStatus, draftStatuses, laneMedia, draftRel, setDraftMedia, postedCmd, MEDIA_TYPES, inLane, day };
+export { MARKETING, MARKETING_DIR, displayName, productNames, ensureMarketing, productOf, untagged, tagged, MARKETING_WORDS, draftFiles, marketingBrief, parseDraft, seeMore, SEE_MORE, draftPreview, setDraftStatus, draftStatuses, laneMedia, draftRel, setDraftMedia, reviewOf, lookOver, postedCmd, MEDIA_TYPES, inLane, day };