symbiot 0.63.6 → 0.63.7

package/CHANGELOG.md

@@ -2,6 +2,42 @@
 
 What each Symbiot release brought, newest first. When Approve bumps the version, it writes that release here from the tasks it approved, worded as release notes by your connected AI (or in the tasks' own words without one). The app shows the releases newer than yours under "What's new" when it offers an update, and once more after you update.
 
+## 0.63.7 — 2026-10-12
+
+- **`symbiot capture Symbiot` works in one go.** It used to refuse, because your running Symbiot shows your real work, and needed a copy started by hand. It now starts a throwaway Symbiot with a made-up company in it (Acme: its repos, its agents' questions, what arrived, its week, a Marketing draft), captures Home, the Workdesk, the Dashboard, the Week, the Map and Marketing, then stops it and deletes it. Symbiot's own tray can be brought up to date after every release.
+- **Captures no longer blur a page's backdrop.** A drawing behind the whole page (Symbiot's liquid) was taken for a picture that might show faces, so every capture of Symbiot came out blurred end to end. A page's live title isn't taken for a notification either.
+- **Your computer's reports on your phone.** The phone's Reports opened only the phone's own, which was empty. The copy your computer sends the phone now carries its 5 newest reports, so you can read an audit or a plan away from your desk, offline too. Each says which computer it's from. A long one comes in its first part, which says the rest is on your computer.
+- **A Reddit draft previews as a Reddit post.** Marketing showed every draft as a LinkedIn post. A Reddit one now shows as Reddit would: its subreddit, who posts it, its title, its flair, then the body, with `code` set as code. It counts the title against Reddit's 300 characters.
+- **Each agent gets its own tab in Symbiot's hidden browser.** Two agents using `symbiot screens` at once (one on LinkedIn, one in the Twilio console) shared one page, so a scheduled post being written lost its text and picture between steps, and one agent's typing could land on the other's page. Now each agent's next step carries on from its own page, just as it left it.
+- **"← All reports" stays in view on a long report.** It no longer scrolls away with the report: the bar with it, and the report's path where it fits, stays pinned under the Reports header, so the list is one click away from anywhere in it.
+- **A draft post opens large on Marketing.** Click a draft (in Needs you, in what its agent drafted, its preview, or a card on the posts board) and it opens over the page: its pictures and video near full size, its whole text in reading type, which product it's for and where it goes (LinkedIn, or r/ClaudeAI with its flair). Click a picture to see it alone, and go through a post's pictures with the arrow keys or a swipe. Approve, Edit and Skip work right there. Esc, the X or a click outside closes it. The pick tray's captures open large the same way.
+- **A handover the loop guard stops still reaches its lane.** After four handovers in a row, Symbiot doesn't start another agent, so two lanes can't pass the same thing back and forth. It used to drop the handover there, so ops' User-Agent fix for this repo was only found by reading `lanes.json`. It now lands in the receiving repo's tasks for its next run, and the lane that sent it sees why it didn't start.
+- **Agents can change one line of a post without retyping it.** `symbiot screens type <id> <field> --replace "old" "new"` types over only that part of a field, so the rest stays as it is. Retyping a scheduled LinkedIn post to change one word had dropped its picture. If the words aren't there, or are there more than once, nothing changes and it says so.
+- **Symbiot records a desktop app's window under Wayland too.** On COSMIC, GNOME or KDE, a window that isn't running under XWayland used to be out of reach for `symbiot capture --window`. It now goes through your desktop's own screen sharing: you pick the window in its prompt the first time (a notification says which one), and Symbiot remembers it, so later captures of it don't ask.
+- **Your phone finds your computer on your Wi-Fi, even with a VPN on.** With Tailscale (or another VPN) running, your computer told the phone on your network it was at the VPN's address, which the phone can't reach, so it couldn't find the computer again after the router handed out new addresses. It now answers each phone with the address on that phone's own network, and never gives out a VPN's.
+- **Agents can pick from a website's dropdown.** `symbiot screens choose <id> <menu> "<option>"` picks an option in a native `<select>` (a DNS record's type, say), and the fields that depend on it update, like the Priority box an MX record turns on.
+- The npm package and the installers now list garth@symbiot.co.za as the author.
+- **Your phone's Home is what you act on there.** Paired with your computer, it no longer opens on the liquid with your computer's work behind a droplet: it's a plain list, with what needs you there first (its agents' questions to answer, its work to Approve), then its tasks to tick or add, then what Watch found. What the phone itself needs sits under your computer's, its setup in one row. Settings, Reports, the Dashboard and the rest are a row along the top, one tap each. On a phone-sized screen the header fits on one line too: the look switch isn't cut off any more.
+- **Symbiot only answers for you when the answer is purely an action.** A question whose recommended option says something before its agent tag ("Yes, it's through. Agent: …"), or has no tag at all, states a fact only you know, so it comes to you instead of being picked for you.
+- **A handover says where it stands, on the block of the lane that sent it.** Each one shows whether its lane has it yet and, if not, why: not picked up yet, queued behind a busy agent, waiting for the run on its earlier version to end, or couldn't go. Once it's with its lane, you see how far that agent has got (tasks ticked, what it's doing now) until its answer comes back. It shows in the Agents tab and on the project on the Workdesk.
+- **A sent handover no longer looks unsent.** Once everything in a lane's `.symbiot/HANDOFF.md` has gone, Symbiot rewrites the file as a dated list of what went where. whatsapp_module's agent had seen its file still there and told you it hadn't been sent, while ops had both its handovers running.
+- **Answering a question on Home works again, and you see it work.** A card that shows a question in plain words (a permission ask with Allow, or one naming a file) sent those plain words back, which matched no question, so Allow and Send did nothing and the error only showed in Home's talk. Its answer now goes under the agent's own question. A click shows at once (the button pressed, "Sending…"), then the card goes, or says on itself what went wrong. Pressing it again doesn't add a second answer, and a card you've answered doesn't come back while Home catches up. A long question your phone shows cut short is still found too.
+- **A question about work that's since been done says so.** When a lane asks about something it handed over, and the lane that took it has finished it, its card says who did it and puts Close it first. whatsapp_module kept asking whether it could put the WhatsApp module back on sts-prod after ops had already done it.
+- **Done in the Symbiot Browser closes it, every time.** Done could find nothing to close when Symbiot had been started from a terminal, so the window stayed open and no site was checked, however often you pressed it. It now closes every window of it, says at once that it's closing, and tells you if Symbiot isn't answering. Closing it with its X does the same as Done: Symbiot checks each site within a minute. A site the browser can't read yet is tried again a little later, instead of being skipped.
+- **Reddit's sign-in is read right.** Signed out, Reddit's home page has no password box, only a Log In button, so Symbiot couldn't tell the two apart. A page whose own button is just "Log in" or "Sign in" now counts as signed out. Once a site you were asked to sign in to reads signed in, the agent's question about it is answered for you and that agent carries on, so Marketing's "sign in to www.reddit.com" clears by itself.
+- **Agents can use Screens while the app runs.** Every map, press and type failed with "The Symbiot Browser is open: click Done", with no window open: a hidden Chrome on Symbiot's browser profile that the app hadn't started itself was taken for the Symbiot Browser. Symbiot now reads whether the Chrome holding the profile is hidden. A hidden one left by another Symbiot (a one-off command, or an app from before an update) gets a few seconds to finish, then is closed.
+- **Symbiot captures your product for its posts by itself, so you don't need a demo video.** **Capture a product** on the Marketing page, or `symbiot capture <product>`, opens it in a browser of its own, works out its key screens from its routes and README, and takes a picture of each and short clips (MP4 and GIF). A desktop app's window is recorded instead. Marketing's agent does this on a product's first run.
+- **Nothing private reaches the pick tray unblurred.** Before a capture lands there, Symbiot blurs names, emails, phone numbers, addresses, keys and tokens, account and card numbers, what's typed into forms, notifications, chats, avatars and pictures, and text inside pictures. The Marketing page shows each box. Switch any off, or draw your own over anything it missed. A desktop recording says to look it over first, because Symbiot can't see faces in a window, and it can't go on a post until you've clicked **Looked it over**. The unblurred originals are never shown and never posted.
+- Added a check that a step naming a file is done only once that file has actually changed.
+- Changed the update process to wait and retry when a newly listed version can't be downloaded yet.
+- Fixed Symbiot failing to update on Linux.
+- Fixed the reply watcher counting your own sent email as the reply you were waiting for.
+- Fixed the reply watcher firing on inbox rows where the newest message is your own.
+- Changed Symbiot's guard to let agents read public SSH keys, while private keys and everything else there stay blocked.
+- Changed pairing so scanning the code on your computer opens the Android app straight away, without the website first.
+- Changed the phone relay setup for symbiot.co.za to retry once the Cloudflare token has the permissions it needs.
+- Added reaching your computer from your phone away from home through a relay that only passes sealed messages.
+
 ## 0.63.6
 
 - **Approve opens on what you came for.** Clicking Review and approve on Home showed every project's work waiting for review, each task in full, with the Approve button several screens down. Now you see only that project, with its Approve button straight under its name, and its tasks one line each: the first three, with the rest a click away. Click a task to read it all. The other projects waiting on you are one line, with a button to show them.

package/README.md

@@ -300,8 +300,8 @@ in the repo's `SYMBIOT_KEYSTORE_B64` and `SYMBIOT_KEYSTORE_PASS` secrets (see
 ### Your phone
 
 Your computer's work, on your phone: your tasks, what needs you, your agents'
-questions, the work waiting for your Approve, and what Watch found (as a
-notification too). Experimental.
+questions, the work waiting for your Approve, and what Watch found, each as a
+notification too when it's new. Experimental.
 
 - **Pair it.** On the computer, Setup's **Your phone** step (or Settings → **Your
   phone**) switches the link on and shows a QR. Point your phone's camera at it and
@@ -979,6 +979,35 @@ launches or pricing; any agent can hand work to it too, as `marketing`.
   shows as the agent's option ("🤖 Agent: …, once you approve its preview"). Only
   signing in, for a platform that isn't linked or has signed out, is yours. It never
   posts what you haven't approved, and never signs in as you.
+- **Symbiot captures your product itself: no demo video needed.** **Capture a
+  product** on the Marketing page (or `symbiot capture <product>`, which its agent runs
+  on a product's first run) opens it in a browser of its own, with a fresh profile, so
+  nothing you're signed in to shows. It works out the key screens from the product's
+  routes (Next, Nuxt, SvelteKit, Astro, Remix, Express and the like, React and Vue
+  Router, Flask, FastAPI, Django, Rails) and the addresses its README gives, and takes
+  a picture of each and a short clip of the first few (MP4 and GIF, and a tour of them
+  one after another). Its address: the one you give, else the app of it running here;
+  start it with its demo data if it has some. Symbiot itself is captured from a copy
+  with made-up work in it (Acme, a company that doesn't exist), started for the capture
+  and stopped after it, never your own app with your work in it: `symbiot capture
+  Symbiot` brings its tray up to date in one go. A desktop app's window is recorded
+  instead (`--window "<title>"`: an X11 or XWayland window on Linux by its title; a
+  Wayland window (COSMIC, GNOME, KDE) through the desktop's own screen sharing, where
+  you pick it in its prompt once and Symbiot remembers it; by its title on Windows; the
+  screen on a Mac).
+- **What could get you into trouble is blurred before it reaches the tray**: names
+  (the people Symbiot remembers, the product's git authors, the one beside an avatar,
+  a customer's in a table, and any in the lane's `.symbiot/names.json`), emails, phone
+  numbers, street addresses, API keys, tokens and secrets, account, card and IBAN
+  numbers, what's typed into forms, notifications, chats, avatars and pictures (faces),
+  and text inside pictures (read with `tesseract`, where it's installed). A clip moves
+  a window at a time, so what's private is found in each moment it shows. Each
+  capture's boxes are listed on it: switch one off, or **Draw a blur box** over
+  anything it missed (a box you drew can be removed). A desktop recording, where
+  Symbiot can't see faces or pictures, and any capture whose pictures' text couldn't
+  be read, says so, and goes on a post only once you've clicked **Looked it over**.
+  The unblurred originals stay in the lane's `.symbiot/tray-originals/`: never shown,
+  never put on a post.
 - **Its work waits for your OK like any project's** (**Approve** commits it in its
   folder), and its questions reach you like any agent's. Answering one says
   **Sent to Marketing**, the lane it went to.
@@ -1319,6 +1348,8 @@ symbiot screens type <id> "Search mail" "invoice" --enter --yes   # type into a
                                        # (--yes isn't needed on a site under Trusted sites in Settings)
 symbiot screens type <id> To "sam@example.com" --yes   # without --enter: the text stays in the field...
 symbiot screens press <new id> Send --yes  # ...for a press on the screen that just printed
+symbiot screens type <id> "Post text" --replace "Monday" "Tuesday" --yes   # change only that part of a field:
+                                       # the rest, a post's picture too, stays as it is
 symbiot screens upload <id> "Add media" ~/clip.mp4 --yes   # put a file in the page's file box: the field,
                                        # or the button a site hides it behind ("used" says which box)
 symbiot screens scroll <id>            # "more": "below"? scroll down and map the next part (or up, top, bottom)
@@ -1429,8 +1460,9 @@ what's next.
 **On your phone.** Your phone can show your computer's work, through Symbiot
 there (the [Android app](#the-android-app-apk), or Symbiot in
 [Termux](#on-your-phone-android-in-termux)): your tasks, what needs you, your
-agents' questions, the work waiting for your Approve, and what Watch found, which
-also comes as a notification. From the phone you can add and tick tasks, answer
+agents' questions, the work waiting for your Approve, and what Watch found. Each
+of those comes as a notification too, when it's new, so nothing waits on you
+until you happen to open the app. From the phone you can add and tick tasks, answer
 your agents and approve. See [Your phone](#your-phone) for how it works.
 
 **More than one display?** Symbiot reads how your displays are laid out
@@ -1472,7 +1504,9 @@ its own browser. **Settings → Links → Open the Symbiot Browser** (or `symbio
 opens it: a window of its own listing your sites, each with whether you're signed in and
 a **Sign in** button, plus an address bar for any other site. Sign in the usual way
 (the site's own login and 2FA; Symbiot never sees a password), then click **Done**: it
-closes and Symbiot checks each site.
+closes and Symbiot checks each site. Closing it with its X does the same. An agent's
+question asking you to sign in to a site is answered for you once that site reads
+signed in, and the agent carries on.
 
 ## Any language
 

package/agents.mjs

@@ -286,7 +286,8 @@ function runHandoff(repoPath, { force = false, lost = false } = {}) {
   const lock = join(repoPath, ".symbiot", LOCK);
   const own = opts.env && typeof opts.env === "object" ? Object.fromEntries(Object.entries(opts.env).map(([k, v]) => [k, String(v)])) : null, boxEnv = sandboxEnv(box);
   const owner = licenceState().plan === "owner" ? { SYMBIOT_OWNER: "1" } : null; // the guard lets only the owner's runs touch Symbiot's own files
-  const env = own || boxEnv || owner ? { ...(own || {}), ...(boxEnv || {}), ...(owner || {}) } : null;
+  // SYMBIOT_AGENT: which run a `symbiot screens` command comes from, so it gets its own tab in the app's hidden browser
+  const env = { ...(own || {}), ...(boxEnv || {}), ...(owner || {}), SYMBIOT_AGENT: repoPath };
   const e = track(typeof opts.name === "string" && opts.name ? opts.name.slice(0, 80) : repoPath.split("/").pop(), fillHandoff(runCmd, repoPath, resume ? RESUME_PROMPT : HANDOFF_PROMPT), repoPath, (code) => {
     if (noteSession(repoPath, code, !!resume) === "lost") { setTimeout(() => { try { runHandoff(repoPath, { force: true, lost: true }); } catch {} }, 300); return; } // its conversation is gone: start afresh
     try { if (JSON.parse(readFileSync(lock, "utf8")).pid === e.pid) unlinkSync(lock); } catch {}
@@ -661,6 +662,15 @@ function namedFiles(text, dir) {
   return out.filter((f, i) => out.findIndex((g) => g.path === f.path) === i).slice(0, 5);
 }
 const fileSig = (p) => { try { const s = statSync(p); return s.mtimeMs + ":" + s.size; } catch { return "none"; } };
+// A step of yours that names files: the ones it names, if none has changed since
+// `since` (the run that asked ended), each { name, at: its last change, 0 if it
+// isn't there }; [] when it names none or one has changed. Done on its card started
+// a run told "Done: the user did it" while the `.env` it named was last changed on
+// 2026-10-06, days before the run asked.
+function unchangedStep(text, dir, since) {
+  const files = namedFiles(text, dir).map((f) => { let at = 0; try { at = statSync(f.path).mtimeMs; } catch {} return { name: f.name, at }; });
+  return files.length && !files.some((f) => f.at > since) ? files : [];
+}
 // What a folder is waiting on: { step, files: [names], cmd, at, rerun }, or null
 // once a file it names, or the agent command, has changed. Then waiting.json
 // goes, unless a run was asked for: startWaiting needs it to start that one (the
@@ -804,12 +814,18 @@ function droppedTasks(path) {
 // Swap the held brief in, keeping the ticks the agent made meanwhile: a tick
 // is how a task reaches review, so dropping one would lose that task's work.
 // A task the agent deleted meanwhile stays out, and stays deleted in handed.json.
+// A tick with a note after it ("… — Done: the card sent …", as the brief asks for a
+// stale one) is the same task: an exact match lost the Needs-you fix's tick when the
+// marketing handover was held behind its run, and the task came back open (2026-10-12).
+// The agent's own line, note and all, is what lands.
 function releaseHeldTasks(path) {
   const held = readSymbiot(path, HELD); if (!held || runningHandoff(path)) return false;
   const isTick = /^\s*-\s*\[x\]\s*/i, key = (l) => l.replace(/^\s*-\s*\[[ x]\]\s*/i, "").trim().toLowerCase();
-  const ticked = new Set(readSymbiot(path, "TASKS.md").split("\n").filter((l) => isTick.test(l)).map(key));
+  const ticked = readSymbiot(path, "TASKS.md").split("\n").filter((l) => isTick.test(l)).map((l) => ({ k: key(l), line: l }));
+  const noted = (t, k) => t.startsWith(k) && /^\s*(?:—|–|-{1,2}|:|\(|\.\s)/.test(t.slice(k.length));
+  const tickOf = (k) => ticked.find((t) => t.k === k) || ticked.find((t) => noted(t.k, k) || sameTask(t.k, k));
   const gone = droppedTasks(path).map((d) => d.text), isGone = (l) => /^\s*-\s*\[ \]/.test(l) && gone.some((g) => sameTask(g, key(l)));
-  const md = held.split("\n").filter((l) => !isGone(l)).map((l) => /^\s*-\s*\[ \]/.test(l) && ticked.has(key(l)) ? l.replace("[ ]", "[x]") : l).join("\n");
+  const md = held.split("\n").filter((l) => !isGone(l)).map((l) => { const t = /^\s*-\s*\[ \]/.test(l) && tickOf(key(l)); return t ? l.match(/^\s*/)[0] + t.line.trimStart() : l; }).join("\n");
   try { writeFileSync(join(path, ".symbiot", "TASKS.md"), md); unlinkSync(join(path, ".symbiot", HELD)); noteHanded(path, md, gone); return true; } catch { return false; }
 }
 // Land the held brief and, if it leaves anything open, start an agent on it.
@@ -1195,11 +1211,15 @@ function autoAllow(path) {
 // A question whose answer the agent already knows isn't the user's: when its own
 // recommended option is a step it takes itself (not 👤), and nothing in the question or
 // that option is an approval, goes out, costs money, touches an account or a machine, or
-// can't be undone, Symbiot picks it and the agent carries on. Everything else still comes to the user.
+// can't be undone, Symbiot picks it and the agent carries on. Only a pure action, though:
+// an option that says anything before its 🤖 tag ("Yes, it's through. 🤖 Agent: …"), or
+// has no tag at all, states a fact or a choice only the user knows, so it goes to them.
+// Everything else still comes to the user.
+const pureAction = (o) => /^[\s*_]*🤖/u.test(String(o || ""));
 const OUTWARD = /\b(approv\w*|publish\w*|releas\w*|push\w*|merg\w*|send\w*|sent|post\w*|repl\w*|e-?mail\w*|pay\w*|spend\w*|buy\w*|money|bill\w*|cost\w*|delet\w*|remov\w*|uninstall\w*|wip\w*|drop\w*|password\w*|2fa|token\w*|keys?|sign(?:ed|s)?[- ]?in|log(?:ged)?[- ]?in|accounts?|subscription|plan|tunnel\w*|prox\w*|ssh|vm|servers?|restart\w*|stop\w*|kill\w*|broker\w*|trad\w*|bank\w*|npm|deploy\w*|install\w*|phone|whatsapp|linkedin|github\.com|live|production|prod)\b|\byour (?:default|settings?|profile)\b/i;
 function autoPick(q) {
   const rec = (q.options || []).filter((o) => /\(recommended\b/i.test(o));
-  if (rec.length !== 1 || yourStep(rec[0])) return "";
+  if (rec.length !== 1 || yourStep(rec[0]) || !pureAction(rec[0])) return "";
   return OUTWARD.test(`${q.q} ${q.context || ""} ${rec[0]}`) ? "" : rec[0];
 }
 function autoDecide(path) {
@@ -1254,15 +1274,28 @@ function grantFromStep(step, path = "", notes = {}) {
   if (tool && !/^(sudo|rm|dd|mkfs)$/.test(tool)) { const r = grantAgent({ tool }); if (r && r.ok) got.push(tool); }
   return got.length ? got : null;
 }
+// The question an answer is for, from qKey -> question: the same words, or the start of
+// one (a phone shows a long question cut short, ending in "…"), when only one starts so.
+function findQuestion(qs, q) {
+  const k = qKey(q); if (!k) return "";
+  if (qs.has(k)) return qs.get(k);
+  const cut = k.replace(/\s*(…|\.\.\.)$/, ""); if (cut === k || cut.length < 20) return "";
+  const hits = [...qs.keys()].filter((x) => x.startsWith(cut));
+  return hits.length === 1 ? qs.get(hits[0]) : "";
+}
 const stepText = (a) => String(a).split("🤖")[0].replace(/^\s*👤\s*(You:)?\s*/, "").replace(/\s*\(recommended\)\s*$/i, "").trim();
 function answerQuestions(path, answers, opts = {}) {
   path = String(path || "");
   if (!path || !knownRun(path)) return { error: "No agent has run in that folder." };
   const open = new Map(agentQuestions(path, "").questions.map((x) => [qKey(x.q), x.q]));
-  const rows = (Array.isArray(answers) ? answers : [])
-    .map((x) => ({ q: open.get(qKey(x && x.q)), a: String((x && x.a) || "").replace(/^\s*#+/gm, "").trim().slice(0, TASK_MAX) }))
-    .filter((x) => x.q && x.a);
-  if (!rows.length) return { error: "Pick or type at least one answer." };
+  const given = (Array.isArray(answers) ? answers : []).map((x) => ({ q: String((x && x.q) || ""), a: String((x && x.a) || "").replace(/^\s*#+/gm, "").trim().slice(0, TASK_MAX) })).filter((x) => x.a);
+  const rows = given.map((x) => ({ q: findQuestion(open, x.q), a: x.a })).filter((x) => x.q);
+  // pressed twice, or answered on another screen first: it's in ANSWERS.md already, so nothing is added again
+  if (!rows.length && given.length) {
+    const had = new Map([...readSymbiot(path, "ANSWERS.md").matchAll(/^###\s+(.+)$/gm)].map((m) => [qKey(m[1]), m[1]]));
+    if (given.every((x) => findQuestion(had, x.q))) return { ok: true, saved: 0, already: true, note: "That was answered already: its agent has it." };
+  }
+  if (!rows.length) return { error: given.length ? "That question isn't open any more: its agent changed or closed it. Look again on its block on the Workdesk." : "Pick or type at least one answer." };
   const prev = readSymbiot(path, "ANSWERS.md") || "# Answers from the user\nAnswers to the questions in QUESTIONS.md, newest last. Follow them; ask again in QUESTIONS.md if one is unclear.\n";
   const day = new Date().toISOString().slice(0, 10);
   try {
@@ -1350,4 +1383,4 @@ function agentsList() {
   }).concat(earlierRuns());
 }
 
-export { CHANGES, toKnownHost, continueLanes, autoPick, autoDecide, FACTS, factsOf, knownRun, withStream, workOf, HANDOFFS, HANDOFF_PROMPT, QUESTIONS_MAX, OPTIONS_SHOWN, IDEAS_SHOWN, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, grantRule, allowTool, claudeConnectors, withConnectors, linkedConnectors, connectorsLine, connectorsInfo, linkReach, fillHandoff, runHandoff, nothingToDo, PARKED_NOTE, parkedPaths, isParked, parkLane, agentMissing, blockedAgain, runningHandoff, loadRuns, earlierRuns, namedFiles, waitingFor, startWaiting, noteUntracked, untrackedBefore, forgetUntracked, writeTasks, droppedTasks, releaseHeldTasks, startHeldTasks, detectHandoffs, pickAgent, findOrcaCli, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, agentChanges, parseQuestions, suggestionTarget, skipIdea, agentQuestions, answerQuestions, agentsList, needsOf, settleNeeds, NEEDS_FOR, readLastWords, readNeeds, parseRead, READ_FILE, autoAllow, autoAllowSweep, allowlistInWork, installAllowlist, inWork, withScope, withTrust, sandboxFor, sandboxEnv, sandboxNeeds, sandboxState, sandboxWrites, SANDBOX_DIR, resumeFor, noteSession, trustFull, GUARD_SETTINGS, isUrgent, urgentFirst, urgentUndo, urgentDone, urgentSweep, urgentState , licenceGate };
+export { CHANGES, toKnownHost, continueLanes, autoPick, autoDecide, FACTS, factsOf, knownRun, withStream, workOf, HANDOFFS, HANDOFF_PROMPT, QUESTIONS_MAX, OPTIONS_SHOWN, IDEAS_SHOWN, shSingle, CLAUDE_CMD, ORCA_CLAUDE_CMD, handoffCmd, setHandoffCmd, grantAgent, grantRule, allowTool, claudeConnectors, withConnectors, linkedConnectors, connectorsLine, connectorsInfo, linkReach, fillHandoff, runHandoff, nothingToDo, PARKED_NOTE, parkedPaths, isParked, parkLane, agentMissing, blockedAgain, runningHandoff, loadRuns, earlierRuns, namedFiles, unchangedStep, waitingFor, startWaiting, noteUntracked, untrackedBefore, forgetUntracked, writeTasks, droppedTasks, releaseHeldTasks, startHeldTasks, detectHandoffs, pickAgent, findOrcaCli, orcaHandoffCmd, migrateOrcaCmd, migrateClaudeCmd, track, agentChanges, parseQuestions, suggestionTarget, skipIdea, agentQuestions, answerQuestions, agentsList, needsOf, settleNeeds, NEEDS_FOR, readLastWords, readNeeds, parseRead, READ_FILE, autoAllow, autoAllowSweep, allowlistInWork, installAllowlist, inWork, withScope, withTrust, sandboxFor, sandboxEnv, sandboxNeeds, sandboxState, sandboxWrites, SANDBOX_DIR, resumeFor, noteSession, trustFull, GUARD_SETTINGS, isUrgent, urgentFirst, urgentUndo, urgentDone, urgentSweep, urgentState , licenceGate };

package/browser.html

@@ -24,6 +24,7 @@ form.go{display:flex;gap:10px}
 form.go input{flex:1;min-width:0;padding:12px 16px;border-radius:999px;border:1px solid var(--line);background:var(--panel);color:var(--bone);font:15px var(--sans)}
 button{font:600 14px var(--sans);border-radius:999px;padding:10px 18px;border:1px solid var(--line);background:transparent;color:var(--bone);cursor:pointer}
 button.main{background:var(--bone);color:var(--bg);border-color:var(--bone)}
+button:disabled{opacity:.6;cursor:progress}
 button:focus-visible,input:focus-visible{outline:2px solid var(--amber);outline-offset:2px}
 h2{margin:6px 0 0;font:600 12px var(--sans);letter-spacing:.14em;text-transform:uppercase;color:var(--faint)}
 .sites{display:grid;grid-template-columns:repeat(auto-fill,minmax(250px,1fr));gap:12px}
@@ -36,6 +37,7 @@ h2{margin:6px 0 0;font:600 12px var(--sans);letter-spacing:.14em;text-transform:
 .done{display:flex;align-items:center;gap:16px;flex-wrap:wrap;padding:18px 20px;border-radius:18px;border:1px solid var(--line);background:var(--panel)}
 .done p{margin:0;flex:1;min-width:220px;font-size:14px}
 .msg{min-height:20px;font-size:14px;color:var(--amber)}
+#donemsg{flex-basis:100%;min-height:0}#donemsg:empty{display:none}
 </style>
 </head>
 <body>
@@ -54,13 +56,15 @@ h2{margin:6px 0 0;font:600 12px var(--sans);letter-spacing:.14em;text-transform:
   <div class="done">
     <p><b>Signed in?</b> Click Done: the Symbiot Browser closes and Symbiot checks each site, so the ticks come up in Symbiot within a minute.</p>
     <button class="main" id="done" type="button">Done</button>
+    <div class="msg" id="donemsg" role="status"></div>
   </div>
 </main>
 <script>
 var T = new URLSearchParams(location.search).get("t") || "";
-function api(path, body) { return fetch(path, { method: body ? "POST" : "GET", headers: { "x-symbiot-token": T, "content-type": "application/json" }, body: body ? JSON.stringify(body) : undefined }).then(function (r) { return r.json(); }); }
+function api(path, body) { return fetch(path, { method: body ? "POST" : "GET", headers: { "x-symbiot-token": T, "content-type": "application/json" }, body: body ? JSON.stringify(body) : undefined }).then(function (r) { if (!r.ok) throw new Error("Symbiot answered " + r.status); return r.json(); }); }
 function esc(s) { return String(s == null ? "" : s).replace(/[&<>"']/g, function (c) { return { "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[c]; }); }
 function say(t) { document.getElementById("msg").textContent = t || ""; }
+function sayDone(t) { document.getElementById("donemsg").textContent = t || ""; } // beside Done, where you clicked
 // a window of this same browser (so the sign-in is Symbiot's), the size of a laptop screen
 function openSite(url) { var w = window.open(url, "_blank", "popup=no,width=1200,height=860"); if (!w) say("Your browser blocked the window: allow pop-ups for this page, then try again."); return w; }
 function fromInput(v) { v = String(v || "").trim(); if (!v) return ""; if (/^https?:\/\//i.test(v)) return v; if (/^[a-z0-9-]+$/i.test(v)) return "https://" + v.toLowerCase() + ".com"; return "https://" + v; }
@@ -76,7 +80,8 @@ function render(d) {
   });
   document.getElementById("list").innerHTML = h;
 }
-function load() { api("/api/links").then(render).catch(function () { say("Symbiot isn't answering. Is it still running?"); }); }
+// hub=1: this page is still here (a reload isn't a close: server.mjs /api/browser/closed)
+function load() { api("/api/links?hub=1").then(render).catch(function () { say("Symbiot isn't answering. Is it still running?"); }); }
 document.getElementById("list").addEventListener("click", function (e) {
   var b = e.target.closest && e.target.closest("button[data-id]"); if (!b) return;
   var url = b.getAttribute("data-url"), id = b.getAttribute("data-id");
@@ -88,7 +93,20 @@ document.getElementById("list").addEventListener("click", function (e) {
 });
 // any site: opened, and kept under Your sites with whether you're signed in (links.mjs addSite)
 document.getElementById("go").addEventListener("submit", function (e) { e.preventDefault(); var u = fromInput(document.getElementById("addr").value); if (!u) return; openSite(u); api("/api/links/site", { site: u, here: true }).then(function (r) { if (r && !r.error) { say("Sign in to it in the window that opened, then come back here. It's under " + ((r.item && r.item.group) || "Your sites") + " now."); load(); } }).catch(function () {}); });
-document.getElementById("done").addEventListener("click", function () { say("Closing, and checking your sites…"); api("/api/browser/done", {}).catch(function () {}); });
+// Done: Symbiot closes this browser (every window of it) and checks each site. Pressed, it
+// says so at once and can't be pressed again meanwhile; if Symbiot can't close it, or isn't
+// answering, it says that rather than nothing happening (2026-10-12).
+var DONE = false, doneBtn = document.getElementById("done");
+doneBtn.addEventListener("click", function () {
+  if (DONE) return; DONE = true; doneBtn.disabled = true; doneBtn.textContent = "Closing…";
+  sayDone("Closing, and checking your sites…");
+  api("/api/browser/done", {}).then(function (r) {
+    // still here: nothing of it was found to close, so this window closes itself
+    setTimeout(function () { window.close(); setTimeout(function () { DONE = false; doneBtn.disabled = false; doneBtn.textContent = "Done"; sayDone("Symbiot is checking your sites. Close this window with its X if it stays open."); }, 800); }, (r && r.closed) ? 3000 : 300);
+  }).catch(function () { DONE = false; doneBtn.disabled = false; doneBtn.textContent = "Done"; sayDone("Symbiot isn't answering, so it couldn't close this or check your sites. Is it still running? Then click Done again."); });
+});
+// Its X: Symbiot hears it as it goes, closes the rest of it and checks each site, as Done does.
+window.addEventListener("pagehide", function () { if (!DONE && navigator.sendBeacon) navigator.sendBeacon("/api/browser/closed?t=" + encodeURIComponent(T), ""); });
 load(); setInterval(load, 5000);
 </script>
 </body>