toolroll 0.9.45 → 0.9.47

package/dist/serve.js

@@ -8,7 +8,7 @@ import { projectBatchChecks, setProjectBatchChecks } from './batch-policy.js';
 import { CHECK_LEVEL_WORDS, isCheckLevel, liveQuickCommand, projectCheckLevel, quickVerifyKey, setProjectCheckLevel, suggestQuickCommand } from './check-levels.js';
 import { repositoryContextHtml } from './repository-context-ui.js';
 import { browserAssetsAvailable, browserWorkspaceDocument, serveBrowserAsset } from './browser-shell.js';
-import { browserCrewOf, browserCrewFromIndex, browserWorkActionHref, browserProjectsOf, browserNavigationOf } from './browser-workspace.js';
+import { browserCrewOf, browserCrewFromIndex, browserWorkActionHref, browserProjectsOf, browserNavigationOf, needsYouLabelOf } from './browser-workspace.js';
 import { configureLeadFollow, leadFollowStatus, runLeadFollowPass } from './lead-follow.js';
 import { cancelCommitment, conditionWords, openCommitments } from './lead-commitments.js';
 import { startMaintenance } from './maintenance.js';
@@ -44,6 +44,8 @@ import { addRoutine, removeRoutine, runRoutine } from "./teammate-desk.js";
 import { sendTeammateWeeklies, undoCall } from "./teammate-week.js";
 import { answerTeammateQuestion } from "./teammate-work.js";
 import { createFlowRooms, flowFingerprint } from "./flow-live.js";
+import { createTaskRooms, taskFingerprint } from "./task-live.js";
+import { runActivityOf } from "./task-activity.js";
 import { disconnectGoogle, finishGoogleConsent, GOOGLE_CALLBACK, googleConnected, googleConsent, readGoogleMail, saveGoogleClient } from "./google-mail.js";
 import { mailboxAccess, readThroughImap } from "./mailbox.js";
 import { readEmailSettings, saveEmailSettings, sendingAccount, sendThroughServer, setFlowSecret } from "./flow-actions.js";
@@ -262,9 +264,15 @@ import { LIMITS_CSS, limitsHtml, limitsView } from "./limits-ui.js";
 import { budgetHoldWords, budgetLabel, budgetStates, monthNamed, monthOf, spendItems, teammateNames as teammateNamesOf, usd as spendUsd } from "./spend.js";
 import { targetOf } from "./monitoring.js";
 import { SSO_CSS, ssoSettingsHtml } from "./sso-ui.js";
-import { mintApiToken, parseApiToken, secretMatches, TOKEN_DAYS } from "./api-tokens.js";
+import { mintApiToken, parseApiToken, secretMatches, TOKEN_DAYS, tokenLive, tokenProjects } from "./api-tokens.js";
 import { createMcpHttp } from "./mcp-http.js";
+import { FLUSH_MS as REQUEST_BUDGET_FLUSH_MS, parseLimit, PER_DAY_MAX as REQUEST_BUDGET_PER_DAY_MAX, PER_MINUTE_MAX as REQUEST_BUDGET_PER_MINUTE_MAX, RequestBudget, setLimitOverride } from "./request-budget.js";
+import { hstsFor, LOOPBACK_PEERS, plainHttpRefusal, transportOf } from "./public-access.js";
+import { createOAuthHttp, oauthTokenAllowed, resourceMetadataUrl } from "./mcp-oauth.js";
 import { CREDENTIALS_CSS, credentialsHtml, tokenShownHtml } from "./credentials-ui.js";
+import { REQUEST_LIMITS_CSS, requestLimitsHtml, tokenLimitWords } from "./request-budget-ui.js";
+import { PEOPLE_AUDIT_CSS, personAuditHtml, personHref } from "./people-audit-ui.js";
+import { cursorOf as auditCursorOf, remoteAudit } from "./remote-audit.js";
 import { logEvent } from "./log.js";
 import { modeTermsFromJson, modeWords, presetTerms, modeTermsJson, modeDigestOf, MODE_MAX_DAYS } from "./modes.js";
 import { PROVIDER_KEY_ENV, SUBSCRIPTION_CAPABLE, clearProviderKey, readProviderKey, keyStatus, plausibleKey, readAuthMode, readAuthModeStrict, saveProviderKey, setAuthMode, verifyProviderKey, verdictWords } from "./keys.js";
@@ -535,7 +543,7 @@ export function createDecisionServer(options) {
      * the trusted proxy itself appended; earlier entries are client-typed). */
     function joinSourceOf(request) {
         const peer = request.socket.remoteAddress ?? "unknown";
-        const loopback = peer === "127.0.0.1" || peer === "::1" || peer === "::ffff:127.0.0.1";
+        const loopback = LOOPBACK_PEERS.has(peer);
         if (!loopback)
             return peer;
         const forwarded = request.headers["x-forwarded-for"];
@@ -581,7 +589,7 @@ export function createDecisionServer(options) {
     /** This computer, and nothing in front of it: a loopback peer that names a loopback address, with no forwarding proxy. */
     const fromThisComputer = (request) => {
         const peer = request.socket.remoteAddress ?? "";
-        const loopback = peer === "127.0.0.1" || peer === "::1" || peer === "::ffff:127.0.0.1";
+        const loopback = LOOPBACK_PEERS.has(peer);
         return loopback && request.headers["x-forwarded-for"] === undefined && request.headers["forwarded"] === undefined
             && /^(localhost|127\.0\.0\.1|\[::1\]):[0-9]{1,5}$/.test(request.headers.host ?? "");
     };
@@ -743,6 +751,7 @@ export function createDecisionServer(options) {
     const connectVisits = new Map();
     /** Flows open in a browser (v88): who's here, and a nudge when one changes. */
     const flowRooms = createFlowRooms(flow => flowFingerprint(store, flow));
+    const taskRooms = createTaskRooms(root => taskFingerprint(store, root, clock()));
     const teamChatProvider = () => { const enabled = chatEnablement(); return enabled.ok ? { config: enabled.config, key: enabled.key } : null; };
     const team = createTeamRuntime({ store, repos: codingProjects, evidenceRoot, clock, workspaceRevision,
         ...(options.chatFetcher ? { fetcher: options.chatFetcher } : {}),
@@ -797,16 +806,19 @@ export function createDecisionServer(options) {
             return who?.via === 'cookie' ? teamBrowserReply(reply, actor, who.session.csrf) : reply;
         }, cursor: team.cursor, streams: teamStreams,
     });
+    // v112: one request budget per server for person API tokens, shared by /api/cli and /mcp (request-budget.ts).
+    const requestBudget = new RequestBudget({ store, ...(options.requestBudgetClock === undefined ? {} : { clock: options.requestBudgetClock }) });
     // Remote CLI: one live API token names the person; the shared command boundary decides everything else.
     const cliEndpoint = (request, response) => handleCliHttp(request, response, {
+        admit: principal => requestBudget.admit(principal.tokenId, "api"),
         authenticate: request => {
-            const who = identify(request, false);
+            const who = identify(request, false, true);
             const id = parseApiToken(/^Bearer (so_\S+)$/.exec(request.headers.authorization ?? "")?.[1] ?? "")?.id;
             const row = id === undefined ? undefined : store.apiTokenSecret(id)?.row;
             const account = who === null ? null : store.accountOf(who.name);
             if (who?.via !== "bearer" || who.token === undefined || row === undefined || row.account !== who.name || account === null || account.revokedAt !== null)
                 return null;
-            return { kind: "person", account: who.name, generation: account.generation, scope: row.access, tokenId: row.id, projects: account.projects === null ? null : [...account.projects] };
+            return { kind: "person", account: who.name, generation: account.generation, scope: row.access, tokenId: row.id, projects: tokenProjects(account.projects, row.projects) };
         },
         run: async () => options.cliRunner ?? (await import("./operate.js")).runOperateAs ?? null,
         modeOf: options.cliModeOf,
@@ -876,6 +888,15 @@ export function createDecisionServer(options) {
         timer.unref?.();
         server.on("close", () => clearInterval(timer));
     }
+    {
+        const flushBudget = () => { try {
+            requestBudget.flush();
+        }
+        catch { /* the next admit refuses if the database is unwell */ } };
+        const timer = setInterval(flushBudget, REQUEST_BUDGET_FLUSH_MS);
+        timer.unref?.();
+        server.on("close", () => { clearInterval(timer); flushBudget(); });
+    }
     const servedPort = () => {
         const address = server.address();
         return typeof address === "object" && address !== null ? address.port : null;
@@ -1237,6 +1258,17 @@ export function createDecisionServer(options) {
         if (!allowedHost(request.headers.host)) {
             return respond(response, 421, "text/html; charset=utf-8", wrongHostPage(wrongHost(request.headers.host)));
         }
+        // A real domain (public-access.ts): HSTS for the public https host reached over HTTPS, and no API token over
+        // plain HTTP from outside this computer and the tailnet — refused before anything reads or checks it.
+        const transport = transportOf({ peer: request.socket.remoteAddress, joinSource: joinSourceOf(request), forwardedProto: request.headers["x-forwarded-proto"], forwarded: request.headers["forwarded"] });
+        const hsts = hstsFor(publicOrigin?.host ?? null, request.headers.host, transport);
+        if (hsts !== null)
+            response.setHeader("Strict-Transport-Security", hsts);
+        const insecure = plainHttpRefusal(transport, hook.pathname, request.headers.authorization);
+        if (insecure !== null) {
+            request.resume();
+            return respond(response, 403, "text/plain; charset=utf-8", insecure);
+        }
         const url = new URL(request.url ?? "/", "http://placeholder");
         // A token in a URL is a token in history, logs, and referers. Refused
         // outright rather than ignored, so nobody learns the habit works.
@@ -1246,6 +1278,9 @@ export function createDecisionServer(options) {
         // The MCP gateway over HTTP (mcp-http.ts): coordinators and people's own API tokens, after the Host check.
         if (url.pathname === "/mcp")
             return mcpHttp(request, response);
+        // MCP sign-in (mcp-oauth.ts): its discovery documents, client registration, consent and tokens.
+        if (await oauthHttp(request, response, url))
+            return;
         // Back from Google's consent screen (v89). The session cookie is SameSite=Strict and stays behind on
         // a return from another site: the visit's one-time state (made by a signed-in approver) is the proof.
         if (url.pathname === GOOGLE_CALLBACK && request.method === "GET")
@@ -1799,9 +1834,9 @@ export function createDecisionServer(options) {
         }
         const read = new Set(["/settings/flows", "/settings/skills", "/settings/knowledge", "/settings", "/settings/learning", "/recipes", "/recipes/run", "/recipes/start", "/recipes/new", "/recipes/edit", "/recipes/from-task", "/recipes/preview", "/recipes/export", "/", "/inbox", "/work", "/projects", "/people", "/ledger", "/ledger/export", "/next", "/board", "/tasks", "/tasks/new", "/runs", "/review", "/done", "/routines", "/menu"]);
         const write = new Set(["/settings/flows/on", "/settings/skills/import", "/settings/skills/change", "/settings/skills/revise", "/settings/knowledge/change", "/settings/knowledge/refresh", "/settings/learning/change", "/recipes/prepare", "/recipes/preview", "/recipes/import", "/recipes/save", "/recipes/launch", "/projects/select", "/tasks/add", "/routines/add"]);
-        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|confirm-stopped|stop|resume-arm|resume)$");
+        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence|/live)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|confirm-stopped|stop|resume-arm|resume)$");
         const resource = request.method === "GET"
-            ? /^\/(?:r|d)\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(path) || /^\/routines\/[0-9]{1,15}$/.test(path) || path === "/flows" || /^\/flows\/[0-9]{1,15}(\/insights|\/export|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(path) || path === "/flows/new" || /^\/flows\/new\/[a-z-]{1,40}$/.test(path)
+            ? /^\/(?:r|d)\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(path) || /^\/routines\/[0-9]{1,15}$/.test(path) || path === "/flows" || /^\/flows\/[0-9]{1,15}(\/insights|\/export|\/live|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(path) || path === "/flows/new" || /^\/flows\/new\/[a-z-]{1,40}$/.test(path)
             : /^\/d\/[0-9]{1,15}\/answer$/.test(path) || /^\/routines\/[0-9]{1,15}\/(approve|refresh|pause|resume|run-now)$/.test(path) || path === "/flows/new" || /^\/flows\/new\/[a-z-]{1,40}$/.test(path) || path === "/flows/import" || /^\/flows\/[0-9]{1,15}\/(save|cards|archive|scripts)$/.test(path) || /^\/flows\/[0-9]{1,15}\/cards\/[0-9]{1,15}\/(move|decide|cancel|comment|assign|watch)$/.test(path) || /^\/flows\/[0-9]{1,15}\/triggers(\/[0-9]{1,15}\/(pause|resume|remove|check|press|renew|secret|share|unshare))?$/.test(path) || /^\/r\/[0-9]{1,15}\/(note|comment|revise|draft-repair|checks|add-tests)$/.test(path);
         if (!(request.method === "GET" ? read : write).has(path) && task === null && !resource) {
             refuse(response, who, 403, "This area requires instance access. Your account operates within its assigned projects.", "/projects");
@@ -1859,6 +1894,10 @@ export function createDecisionServer(options) {
             }
             project = wanted;
         }
+        // Every page's Tasks count covers this one project view, whatever project the page itself shows.
+        const facts = requestContext.getStore();
+        if (facts !== undefined)
+            facts.lens = project;
         // Exact result links carry their own read context. Check the stored
         // placement against both account and instance access before using it;
         // viewing a result never changes the session's selected project, and
@@ -1943,7 +1982,7 @@ export function createDecisionServer(options) {
             url.pathname !== "/menu" &&
             url.pathname !== "/recipes" &&
             // A flow names its own project; the list spans every project.
-            url.pathname !== "/flows" && url.pathname !== "/flows/import" && !/^\/flows\/[0-9]{1,15}(\/insights|\/export|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(url.pathname) &&
+            url.pathname !== "/flows" && url.pathname !== "/flows/import" && !/^\/flows\/[0-9]{1,15}(\/insights|\/export|\/live|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(url.pathname) &&
             // The gallery (Flows → New) asks for its project on each template's page.
             url.pathname !== "/flows/new" && !/^\/flows\/new\/[a-z-]{1,40}$/.test(url.pathname) &&
             // Teammates (v92) name their own project, like flows.
@@ -1951,7 +1990,7 @@ export function createDecisionServer(options) {
             // New work names its project in the form (a dropdown of known
             // projects); /tasks/add still admits the posted repo on its own.
             url.pathname !== "/tasks/new" && url.pathname !== "/tasks/add" &&
-            !/^\/t\/[^/]+(\/evidence)?$/.test(url.pathname) &&
+            !/^\/t\/[^/]+(\/evidence|\/live)?$/.test(url.pathname) &&
             !/^\/r\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(url.pathname) &&
             !url.pathname.startsWith("/d/") && !url.pathname.startsWith("/contest/") &&
             url.pathname !== "/projects" &&
@@ -2244,6 +2283,8 @@ export function createDecisionServer(options) {
             const docked = projectThread === null ? null : dockedConversation(who, null, projectThread, now, `/work?project=${encodeURIComponent(projectThread)}`);
             if (docked !== null)
                 page.workspace = { ...page.workspace, conversation: docked, pageHtml: page.body };
+            // Without a docked chat the list reads itself: 10 s while any of its tasks is building, else 30 s.
+            page.refreshSeconds = work.totals.running > 0 ? 10 : 30;
             return sendScreen(response, 200, page);
         }
         if (url.pathname === "/next") {
@@ -2752,11 +2793,26 @@ export function createDecisionServer(options) {
             return sendScreen(response, 200, screen("mode", [`<h1>Operating mode</h1><p>Authorize this project's automatic approvals once, for up to ${MODE_MAX_DAYS} days. Select the touchpoints below; the signature covers the exact choices. Existing modes keep their original terms.</p><p class="meta">Scope changes, agent questions, and requested revisions still require your attention. Automatic merging also needs a publication grant.</p>`, current, signForm].join("\n"), { chrome: chromeFor(project, "mode") }));
         }
         if (url.pathname === "/people") {
+            // People → a person: their API tokens and remote activity (people-audit-ui.ts). An approver may open anyone, within
+            // their projects; anyone else only themselves. Another person reads exactly like nobody.
+            const person = url.searchParams.get("person");
+            if (person !== null) {
+                const token = (url.searchParams.get("token-name") ?? "").slice(0, 60) || null, before = url.searchParams.get("before");
+                const cursor = before === null ? null : auditCursorOf(before);
+                if (before !== null && cursor === null)
+                    return refuse(response, who, 400, "Invalid activity cursor.", "/people");
+                const page = who.role === "approver" || person === who.name
+                    ? remoteAudit(store, { self: who.name, everyone: who.role === "approver", repos: admissionList(), unplaced: store.isInstanceOperator(who.name) }, { person, token, source: null, since: null }, { before: cursor })
+                    : null;
+                if (page === null || !page.ok)
+                    return refuse(response, who, 404, "No such person.", "/people");
+                return sendScreen(response, 200, screen("people", personAuditHtml({ name: person, tokens: store.apiTokens(person), actions: page.actions, token, nextCursor: page.nextCursor, now }), { chrome: chromeFor(project, "people") }));
+            }
             // Approvers see everyone (D7's ceiling: every fact already passed
             // the process admission); a viewer sees exactly themselves (U3).
             if (restricted()) {
                 const projects = admissionList() ?? [];
-                return sendScreen(response, 200, screen("people", `<h1>Your access</h1><p>${personChip(who.name)} · ${who.role === "approver" ? "operator" : "viewer"}</p><p>${who.role === "approver" ? "You can create, manage, and approve work in these projects." : "You can read work in these projects."}</p><ul>${projects.map(repo => `<li>${escape(projectName(repo))}</li>`).join("")}</ul><p class="meta">An instance operator manages invitations and project access.</p>`, { chrome: chromeFor(project, "people") }));
+                return sendScreen(response, 200, screen("people", `<h1>Your access</h1><p>${personChip(who.name)} · ${who.role === "approver" ? "operator" : "viewer"}</p><p>${who.role === "approver" ? "You can create, manage, and approve work in these projects." : "You can read work in these projects."}</p><ul>${projects.map(repo => `<li>${escape(projectName(repo))}</li>`).join("")}</ul><p class="meta">An instance operator manages invitations and project access.</p><p><a href="${escape(personHref(who.name))}">Your remote activity</a></p>`, { chrome: chromeFor(project, "people") }));
             }
             const approverView = store.isInstanceOperator(who.name);
             const accounts = store.accountFacts().filter(one => approverView || one.name === who.name);
@@ -2787,6 +2843,7 @@ export function createDecisionServer(options) {
                     `<p class="meta">${one.projects === null ? "All projects" : one.projects.length === 0 ? "No project access" : one.projects.map(repo => escape(projectName(repo))).join(", ")}</p>`,
                     approverView && one.revokedAt === null ? `<details><summary>Edit project access</summary><form method="post" action="/people/projects">${hiddenFields({ csrf, name: one.name })}${accessFields(one.projects)}<label>Your password<input type="password" name="token" autocomplete="current-password" required></label><p class="meta">Changing access signs this person out and ends their derived sessions and modes. Previously approved work stays recorded.</p><button type="submit">Save project access</button></form></details>` : "",
                     `<p class="meta">${seen === null ? "not signed in right now" : `signed in \u2014 active ${escape(new Date(seen).toISOString().slice(11, 16))} UTC`} \u00b7 joined ${escape(one.addedAt.slice(0, 10))}</p>`,
+                    `<p><a href="${escape(personHref(one.name))}">Tokens and remote activity</a></p>`,
                     attended.length === 0
                         ? ""
                         : `<p class="row">watching now: ${attended.map(session => `<a href="/t/${escape(session.taskId)}">${escape(session.taskId)}</a>`).join(", ")}</p>`,
@@ -3009,6 +3066,26 @@ export function createDecisionServer(options) {
             const chrome = chromeFor(project, "tasks");
             return sendScreen(response, 200, newTaskPage(chrome, project, csrf, revision, null, chainable, store.permissionDefault().mode, store.qualityDefault().mode, chrome.projects ?? []));
         }
+        const taskLive = matchTaskPath(url.pathname, "/live$");
+        if (taskLive !== null) {
+            // The live task page: a nudge the moment the task changes, and who else
+            // has it open. Hints only — the page reads the task the usual way.
+            if (who.via !== "cookie")
+                return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
+            const family = familyOf(taskLive.taskId);
+            if (family === null || family.problem !== null)
+                return respond(response, 404, "application/json", JSON.stringify({ error: "task" }));
+            response.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-store", "x-content-type-options": "nosniff", "x-accel-buffering": "no" });
+            const name = who.name, repo = family.root.repo;
+            taskRooms.join(family.root.id, {
+                name, response,
+                // Rechecked while open, from the cookie and the account (never a request's context): a sign-out or a narrowed account stops it.
+                valid: () => { const again = identify(request, false); return again !== null && again.name === name && rowVisible(liveCeiling(), repo) && store.accountCanAccess(name, repo); },
+            });
+            request.once("close", () => { if (!response.writableEnded)
+                response.end(); });
+            return;
+        }
         const task = matchTaskPath(url.pathname, "");
         if (task !== null) {
             const family = familyOf(task.taskId);
@@ -3065,7 +3142,7 @@ export function createDecisionServer(options) {
                 if (tokenId === null)
                     return true;
                 const token = store.apiTokenSecret(tokenId)?.row;
-                return token !== undefined && token.revokedAt === null && Date.parse(token.expiresAt) > Date.now();
+                return token !== undefined && tokenLive(token, Date.now());
             };
             // The whole walk it starts from is shared by exports in the same minute; a reader who stops reading for a minute is let go.
             const pieces = ledgerExportChunks(store, { from, to }, { repos: access.repos, instance: store.isInstanceOperator(who.name) }, access, who.name, now, evidenceRoot);
@@ -3793,7 +3870,8 @@ export function createDecisionServer(options) {
             // Console v2: the landing's live view (who is working, four counts, Catch up in tabs).
             const home = focusTask === null && chatProject === null && !roomId ? chatHomeOf(who, repos, now) : null;
             const withFirstRun = (shown) => firstRun === undefined && phone === undefined && home === null ? shown
-                : { ...shown, workspace: { ...shown.workspace, ...(firstRun === undefined ? {} : { firstRun }), ...(phone === undefined ? {} : { phone }), ...(home === null ? {} : { home }) } };
+                : { ...shown, ...(home === null ? {} : { refreshSeconds: liveRefreshSeconds() }),
+                    workspace: { ...shown.workspace, ...(firstRun === undefined ? {} : { firstRun }), ...(phone === undefined ? {} : { phone }), ...(home === null ? {} : { home }) } };
             if (enabled.ok && mateSession !== null && principal !== null && !ceilingStale) {
                 {
                     const said = takeMateNote(who.session.csrf, mateSession.id);
@@ -4034,7 +4112,8 @@ export function createDecisionServer(options) {
             const everyone = url.searchParams.get("everyone") === "1" && store.isInstanceOperator(who.name);
             const here = sessions.hashOf(who.session);
             const view = { who: who.name, everyone, canSeeEveryone: store.isInstanceOperator(who.name), now: Date.now(),
-                sessions: store.webSessions(everyone ? null : who.name).map(one => ({ ...one, here: one.idHash === here })), tokens: store.apiTokens(everyone ? null : who.name) };
+                sessions: store.webSessions(everyone ? null : who.name).map(one => ({ ...one, here: one.idHash === here })), tokens: store.apiTokens(everyone ? null : who.name),
+                limits: { note: tokenLimitWords.bind(null, store.handle), section: store.isInstanceOperator(who.name) ? requestLimitsHtml(store.handle, store.apiTokens(null), who.session.csrf, Date.now()) : "" } };
             return sendScreen(response, 200, screen("Sessions & tokens", `<p><a href="/settings">Settings</a></p><h1>Sessions &amp; tokens</h1>${credentialsHtml(view, who.session.csrf, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings") }));
         }
         // Settings → Flows: the starter flows, each switched on with one yes. ?starter= marks the one a task's
@@ -5124,17 +5203,24 @@ export function createDecisionServer(options) {
             catch {
                 notices.push('Crew updates are unavailable. Open Tasks to inspect saved work.');
             }
-            // "Wake me only for these": the navigation carries the count of tasks
-            // waiting on a person behind its Tasks link — the open project's, or
-            // everything this person may see — so it matches that page's Needs you tab.
-            let needsYou = 0;
+            // A running row says what its agent did last, and when (the task page's own line).
             try {
-                needsYou = (requestFacts.workCounts ?? workCountsByProject(store, clock(), workAccess()))
-                    .filter(one => s.chrome?.project == null || one.repo === s.chrome.project).reduce((sum, one) => sum + one.totals['needs-you'], 0);
-            }
-            catch {
-                needsYou = 0;
-            }
+                const now = clock(), live = new Map();
+                if (crew.crew.length > 0)
+                    for (const run of store.liveRuns(now)) {
+                        const root = familyOf(run.taskId)?.root.id;
+                        if (root !== undefined && !live.has(root))
+                            live.set(root, runActivityOf(store, run, now));
+                    }
+                if (live.size > 0)
+                    crew = { ...crew, crew: crew.crew.map(item => { const activity = live.get(item.id); return activity === undefined ? item : { ...item, activity }; }) };
+            }
+            catch { /* the rows keep their status; the line returns on the next read */ }
+            // "Wake me only for these": the navigation carries the sidebar's own
+            // Tasks count (chromeFor) and links to the project view it covers, so
+            // it matches that page's Needs you tab on every screen.
+            const needsYou = s.chrome.inboxCount;
+            const tasksProject = s.chrome.inboxProject === undefined ? s.chrome.project : s.chrome.inboxProject;
             // The person's own project and task conversations (v77), for the
             // sidebar's chat list; a thread whose project is out of view is left out.
             let chats = [];
@@ -5170,7 +5256,7 @@ export function createDecisionServer(options) {
                 catchUpHtml: extras.catchUpHtml ?? '', controlsHtml: extras.controlsHtml ?? '', notices, view: extras.view ?? null,
                 ...(s.chrome.demo ? { demo: { text: DEMO_BANNER, short: DEMO_BANNER_SHORT } } : {}),
                 pageHtml: extras.pageHtml === undefined ? (conversation === null ? pageHtml : null) : extras.pageHtml,
-                navigation: [...browserNavigationOf(currentPath, s.chrome.project, needsYou), { label: 'Workspace tools', href: '/menu', active: path.pathname === '/menu' }],
+                navigation: [...browserNavigationOf(currentPath, s.chrome.project, needsYou, tasksProject, s.chrome.inboxLabel), { label: 'Workspace tools', href: '/menu', active: path.pathname === '/menu' }],
                 chats,
                 ...(s.refreshSeconds === undefined ? {} : { refreshSeconds: Math.max(5, Math.floor(s.refreshSeconds)) }),
                 ...(s.chrome.signIn === undefined ? {} : { signIn: s.chrome.signIn }),
@@ -5225,12 +5311,6 @@ export function createDecisionServer(options) {
         // functional script polls.
         return page(response, status, html, nonce, s.functional?.fetches === true || chromeLayer || sensitiveChrome !== "");
     }
-    /** The badge cache: five seconds per project — mutations invalidate it. */
-    const badgeCache = new Map();
-    /** The needs-you count every surface wears for a project (workspace
-     * package 1): Work's own Needs-you membership, cached per viewer and
-     * project, so the rail, the phone tab, the scope bar, the project cards,
-     * the chat overview, and the Needs-you tab never disagree. */
     /** The Chat landing's live view: each agent at work now with its task and
      * phase, four counts, plan-window use (never dollars: subscriptions don't
      * bill per run) and Catch up's items, each tagged with its tab. Reads only. */
@@ -5240,7 +5320,8 @@ export function createDecisionServer(options) {
         const agents = store.liveRuns(now).filter(run => admitted(run.repo)).map(run => {
             const root = familyOf(run.taskId)?.root ?? null;
             return { runId: run.id, taskId: root?.id ?? run.taskId, title: root?.title ?? run.title, href: taskHref(root?.id ?? run.taskId),
-                agent: `${providerName(run.provider)} on ${run.runner}`, phase: homePhaseWords(run), project: run.repo === null ? null : projectName(run.repo), since: run.startedAt };
+                agent: `${providerName(run.provider)} on ${run.runner}`, phase: homePhaseWords(run), project: run.repo === null ? null : projectName(run.repo), since: run.startedAt,
+                activity: runActivityOf(store, run, now) };
         });
         const all = workIndexPage(store, now, access, { view: "all", limit: WORK_INDEX_MAX_LIMIT });
         const needs = workIndexPage(store, now, access, { view: "needs-you", limit: WORK_INDEX_MAX_LIMIT });
@@ -5274,19 +5355,13 @@ export function createDecisionServer(options) {
             planUse: (windows?.tiles ?? []).map(one => ({ name: one.name, window: one.window, percent: one.percent, detail: one.detail, tone: one.tone })),
         };
     }
+    /** The needs-you count every surface wears, read from this request's own
+     * Work counts (one query per request, never a cached earlier one), so a
+     * live page's badge and its Needs you tab always agree. */
     function needsYouBadge(project) {
-        const actor = requestContext.getStore()?.actor;
-        const key = `${actor ?? ""}:${actor === undefined ? "" : store.accountOf(actor)?.generation}:${project ?? ""}`;
-        const cached = badgeCache.get(key);
-        if (cached !== undefined && Date.now() - cached.at <= 5_000)
-            return cached;
-        const counted = needsYouCount(project);
-        const badge = { at: Date.now(), count: counted.count, saturated: counted.saturated };
-        badgeCache.set(key, badge);
-        return badge;
+        return needsYouCount(project);
     }
     const bustBadge = () => {
-        badgeCache.clear();
         paletteCache.clear();
     };
     /** The sidebar's facts for this request. */
@@ -5294,7 +5369,12 @@ export function createDecisionServer(options) {
         if (restricted() && !visible(project))
             project = null;
         const actor = requestContext.getStore()?.actor;
-        const badge = needsYouBadge(project);
+        // One Tasks count per request: Needs you in the request's project view
+        // (the open project, else every admitted project), never the page's own
+        // project — a flow or task in another project shows the same number.
+        const lens = requestContext.getStore()?.lens;
+        const inboxProject = lens !== undefined && (!restricted() || visible(lens)) ? lens : project;
+        const badge = needsYouBadge(inboxProject);
         const liveMode = project === null ? null : store.activeMode(project, clock());
         const liveModeTerms = liveMode === null ? null : modeTermsFromJson(liveMode.termsJson);
         let projectPeek = project === null ? null : undefined;
@@ -5334,6 +5414,9 @@ export function createDecisionServer(options) {
             ...(facts === undefined ? {} : { csrf: facts.csrf, returnTo: facts.returnTo }),
             inboxCount: badge.count,
             inboxSaturated: badge.saturated,
+            inboxProject,
+            inboxLabel: needsYouLabelOf(badge.count, inboxProject === null ? null
+                : store.listProjects().find(one => one.path === inboxProject)?.name ?? projectName(inboxProject), badge.saturated),
             settings: true,
             ...(store.isDemo() ? { demo: true } : {}),
             ...(() => { const signIn = signInNotices(store); return signIn.length === 0 ? {} : { signIn }; })(),
@@ -5387,6 +5470,10 @@ export function createDecisionServer(options) {
             .reduce((sum, one) => sum + one.totals['needs-you'], 0);
         return { count, saturated: false };
     }
+    /** A live page's own beat without a docked chat: 10 s while any admitted task is building, else 30 s. */
+    function liveRefreshSeconds() {
+        return projectCounts(clock()).some(one => one.totals.running > 0) ? 10 : 30;
+    }
     function projectFamilyPeek(repo, now) {
         const row = projectCounts(now).find(one => one.repo === repo);
         return { waiting: row?.totals['needs-you'] ?? 0, running: row?.totals.running ?? 0,
@@ -6190,6 +6277,9 @@ export function createDecisionServer(options) {
         // What went wrong reads the family's latest finished attempt, as the Tasks row does.
         presentedData.failure = failureOf(presentedData.family?.runs ?? data.runs, data.assignment ?? null);
         presentedData.runChecks = runChecksHere(data.assignment?.receipt?.runId ?? null, who, taskHref(taskId));
+        const liveRun = data.liveRunId == null ? undefined : data.runs.find(one => one.id === data.liveRunId);
+        if (liveRun !== undefined)
+            presentedData.activity = runActivityOf(store, liveRun, clock());
         presentedData.demo = store.isDemo();
         const paneProject = restricted() ? store.lookupRef(taskId)?.repo ?? null : who.via === "cookie" ? who.session.project : null;
         const page = taskPage(paneProject === null && !unscopedMode
@@ -6200,11 +6290,19 @@ export function createDecisionServer(options) {
         const docked = focus === null ? null : dockedConversation(who, focus, null, clock(), taskHref(focus.id));
         // The conversation is the page's own thread here, so the page drops its Ask tab;
         // only an approver is offered a road to message the agent.
-        const taskView = page.workspace?.view?.kind === "task" ? { ...page.workspace.view, ...(docked === null ? {} : { tabs: [] }), ...(who.role === "approver" ? {} : { chatHref: null }) } : page.workspace?.view;
+        const taskView = page.workspace?.view?.kind === "task" ? { ...page.workspace.view, ...(docked === null ? {} : { tabs: [] }), ...(who.role === "approver" ? {} : { chatHref: null }),
+            // A signed-in page hears the moment the task changes, and who else has it open.
+            ...(who.via === "cookie" ? { live: { href: `${taskHref(family?.root.id ?? taskId)}/live`, at: (() => { try {
+                        return taskFingerprint(store, family?.root.id ?? taskId, clock());
+                    }
+                    catch {
+                        return null;
+                    } })() } } : {}) } : page.workspace?.view;
         if (docked !== null)
             page.workspace = { ...page.workspace, ...(taskView === undefined ? {} : { view: taskView }), conversation: docked, pageHtml: page.body };
         else if (taskView !== undefined && page.workspace !== undefined)
             page.workspace = { ...page.workspace, view: taskView };
+        page.refreshSeconds = liveRefreshSeconds();
         return sendScreen(response, status, page);
     }
     /** The routine screen: the standing order restated, its verbs, its ledger. */
@@ -7472,6 +7570,31 @@ export function createDecisionServer(options) {
             store.setApprovalRules(repo, next, who.name, now);
             return back("said", `Saved. ${rulesSummary(next)}`);
         }
+        // v112: request limits for API tokens (request-budget.ts). An instance operator, in a browser, with their password;
+        // never over /api/cli or /mcp (a token never reaches a console form).
+        if (url.pathname === "/settings/request-limits") {
+            const body = readForm(posted, CONSOLE_FORMS.requestLimits);
+            if (who.via !== "cookie" || !store.isInstanceOperator(who.name))
+                return refuse(response, who, 403, "An instance operator sets request limits.", "/settings/sessions");
+            const back = (key, words) => redirect(response, `/settings/sessions?${key}=${encodeURIComponent(words)}`);
+            const target = body.get("target") ?? "";
+            const token = target === "*" ? null : store.apiTokens(null).find(one => one.id === target && one.revokedAt === null) ?? null;
+            if (target !== "*" && token === null)
+                return back("problem", "That token is no longer live. Nothing changed.");
+            if (!authenticateApprover(store, who.name, body.get("password") ?? "").ok)
+                return back("problem", "Enter your Toolroll password to change request limits.");
+            const read = (name) => parseLimit(body.get(name) ?? "", name === "per-day" ? REQUEST_BUDGET_PER_DAY_MAX : REQUEST_BUDGET_PER_MINUTE_MAX);
+            const clear = body.get("action") === "clear";
+            const fields = clear ? { readPerMinute: null, actPerMinute: null, perDay: null }
+                : token === null ? { readPerMinute: read("read-per-minute"), actPerMinute: read("act-per-minute"), perDay: read("per-day") }
+                    : { readPerMinute: token.access === "read" ? read("per-minute") : null, actPerMinute: token.access === "act" ? read("per-minute") : null, perDay: read("per-day") };
+            const problem = Object.values(fields).find((value) => value !== null && typeof value === "object");
+            if (problem !== undefined)
+                return back("problem", `${problem.problem} Nothing changed.`);
+            setLimitOverride(store, target, fields, who.name, now);
+            const label = token === null ? "Everyone's tokens" : token.name;
+            return back("said", clear || Object.values(fields).every(value => value === null) ? `${label}: default limits.` : `${label}: limits saved.`);
+        }
         if (url.pathname === "/settings/sessions") {
             const body = readForm(posted, CONSOLE_FORMS.sessions);
             if (who.via !== "cookie")
@@ -11780,10 +11903,32 @@ export function createDecisionServer(options) {
             approved: (() => { const scope = store.getScope(taskId); return scope !== null && approvalOf(scope).approved; })(),
         }));
     }
-    const mcpHttp = createMcpHttp({ store, clock, evidenceRoot, signedIn: request => identify(request) !== null,
+    const mcpHttp = createMcpHttp({ store, clock, evidenceRoot, signedIn: request => identify(request, true, true) !== null, admit: person => requestBudget.admit(person.principal.tokenId, "mcp"),
+        resourceMetadata: request => { const origin = consoleOrigin(request.headers.host); return origin === null ? null : resourceMetadataUrl(origin); },
         enrolled: () => [...new Set([...managedRepos(), ...store.listProjects().map(project => project.path)])], ...(options.runOperateAs === undefined ? {} : { runAs: options.runOperateAs }) });
+    // MCP sign-in: the console's own sign-in and step-up, a same-site consent form, and the person's current projects.
+    const oauthHttp = createOAuthHttp({ store, clock,
+        originOf: request => consoleOrigin(request.headers.host),
+        requesterKey: joinSourceOf,
+        session: request => {
+            const who = identify(request, false);
+            if (who === null || who.via !== "cookie")
+                return null;
+            return { name: who.name, role: who.role, csrf: who.session.csrf,
+                sso: who.session.sso === undefined ? null : { label: ssoSettings()?.label ?? "your identity provider", fresh: Date.now() - who.session.sso.at < SSO_FRESH_MS } };
+        },
+        sameSite: request => {
+            const origin = request.headers.origin, referer = request.headers.referer;
+            const named = typeof origin === "string" && origin !== "null" ? origin : typeof referer === "string" ? referer : null;
+            return named !== null && allowedHost(named.replace(/^https?:\/\//, "").split("/")[0]);
+        },
+        // The step-up for a credential: the person's password, or (empty) a fresh identity-provider check. What they may
+        // grant (their role, their projects) is checked beside it.
+        confirm: (session, typed) => typed === "" ? session.sso?.fresh === true : authenticateAccount(store, session.name, typed).ok,
+        projectsFor: account => store.knownRepos().filter(repo => store.accountCanAccess(account, repo)).sort(),
+    });
     // ---- identity ------------------------------------------------------------
-    function identify(request, touch = true) {
+    function identify(request, touch = true, limited = false) {
         // v101: an API token. Wrong ones spend the address's tries like a wrong password; expired or revoked ones, and a removed account's, name no one.
         const presented = /^Bearer (so_\S+)$/.exec(request.headers.authorization ?? "")?.[1];
         if (presented !== undefined) {
@@ -11796,11 +11941,18 @@ export function createDecisionServer(options) {
                 signInBudget.failed(source, at);
                 return null;
             }
-            if (kept.row.revokedAt !== null || Date.parse(kept.row.expiresAt) <= at)
+            if (!tokenLive(kept.row, at))
+                return null;
+            // v111: a token limited to some projects signs in only where its limit travels with it (the remote CLI and MCP,
+            // through Principal.projects); the console's own pages and APIs check the account's access alone, so it is refused there.
+            if (kept.row.projects !== null && !limited)
                 return null;
             const account = store.accountOf(kept.row.account);
             if (account === null || account.revokedAt !== null)
                 return null;
+            // v113: an MCP sign-in's token works only at /mcp, while its access secret is fresh (mcp-oauth.ts).
+            if (!oauthTokenAllowed(store, kept.row.id, new URL(request.url ?? "/", "http://placeholder").pathname, new Date(at)))
+                return null;
             store.touchApiToken(kept.row.id, new Date(at));
             return { name: kept.row.account, via: "bearer", role: kept.row.access === "read" ? "viewer" : account.role, token: kept.row.name };
         }
@@ -12395,6 +12547,10 @@ export function createDecisionServer(options) {
     const closeServer = server.close.bind(server);
     server.close = ((callback) => {
         leadClosing = true;
+        try {
+            requestBudget.flush();
+        }
+        catch { /* saved again on the close event when it can be */ }
         for (const stream of teamStreams)
             stream.end();
         teamStreams.clear();
@@ -12402,6 +12558,7 @@ export function createDecisionServer(options) {
             stream.end();
         chatStreams.clear();
         flowRooms.close();
+        taskRooms.close();
         void Promise.all([closeCoding(), bounded(team.close()), bounded(leadMaintenance?.stop())]).then(() => closeServer(callback)).catch(error => {
             if (callback)
                 callback(error instanceof Error ? error : Error('Coding session shutdown failed.'));
@@ -16304,7 +16461,7 @@ const INBOX_TABS_CSS = '.inbox-tabs{display:inline-flex;gap:2px;max-width:100%;o
     '.inbox-ask{margin:18px 0 0}.inbox-ask>h2{display:flex;align-items:baseline;gap:8px;margin:0 0 4px;font-size:15px;font-weight:600}.inbox-ask>h2 .count{font:500 12px var(--so-mono,ui-monospace,monospace);font-variant-numeric:tabular-nums;color:var(--so-muted)}.inbox-ask h3{font-size:13px;font-weight:600;margin:12px 0 4px}' +
     '.inbox-unread{display:none;position:absolute;top:4px;right:3px;width:6px;height:6px;border-radius:50%;background:var(--so-signal)}' +
     '@media (max-width:760px){.inbox-tabs{display:flex;width:100%}.inbox-tabs a{flex:1;justify-content:center;min-height:44px;padding:0 6px}.inbox-unread{display:block}}';
-const WORKSPACE_STYLE = styleAsset(STYLE + BRAND_MARK_CSS + INBOX_TABS_CSS + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + INTEGRATIONS_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + TEAMMATE_CSS + KITS_CSS + STARTERS_CSS + GALLERY_CSS + SSO_CSS + CREDENTIALS_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + TASK_STATUS_CSS + LEAD_CONTEXT_CSS + PULL_REQUEST_SETTINGS_CSS + CHECK_SETTINGS_CSS + DISCLOSURE_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
+const WORKSPACE_STYLE = styleAsset(STYLE + BRAND_MARK_CSS + INBOX_TABS_CSS + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + INTEGRATIONS_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + TEAMMATE_CSS + KITS_CSS + STARTERS_CSS + GALLERY_CSS + SSO_CSS + CREDENTIALS_CSS + REQUEST_LIMITS_CSS + PEOPLE_AUDIT_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + TASK_STATUS_CSS + LEAD_CONTEXT_CSS + PULL_REQUEST_SETTINGS_CSS + CHECK_SETTINGS_CSS + DISCLOSURE_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
 /**
  * The board's liveness: fetch this page's own fragment on a timer and swap
  * it in place — no flicker, no scroll reset, no long-lived stream to manage,
@@ -16674,9 +16831,9 @@ function shell(title, body, options = {}) {
     // destination it now lives under. The count rides Work: it is the
     // saturated needs-you count, exactly as the inbox row wore it.
     const primary = chrome.active === "code" ? "work" : primaryDestinationOf(chrome.active);
-    const primaryItem = (key, href, label, count) => `<a href="${href}" aria-label="${escape(label)}" title="${escape(label)}"${primary === key ? ' class="active" aria-current="page"' : ""}${key === "work" && count !== undefined ? ` data-waiting="${count}"` : ""}>` +
+    const primaryItem = (key, href, label, count) => `<a href="${href}" aria-label="${escape(key === "work" && count !== undefined && count > 0 && chrome.inboxLabel !== undefined ? `${label}, ${chrome.inboxLabel}` : label)}" title="${escape(label)}"${primary === key ? ' class="active" aria-current="page"' : ""}${key === "work" && count !== undefined ? ` data-waiting="${count}"` : ""}>` +
         `<span class="glyph">${NAV_ICONS[key] ?? ""}</span>${label}` +
-        `${count !== undefined && count > 0 ? ` <span class="count badge badge-open">${count}${chrome.inboxSaturated ? "+" : ""}</span>` : ""}</a>`;
+        `${count !== undefined && count > 0 ? ` <span${chrome.inboxLabel === undefined ? "" : ` aria-label="${escape(chrome.inboxLabel)}" title="${escape(chrome.inboxLabel)}"`} class="count badge badge-open">${count}${chrome.inboxSaturated ? "+" : ""}</span>` : ""}</a>`;
     const side = [
         `<aside class="side">`,
         `<div class="side-head"><a class="brand" href="${chrome.chat === true ? "/chat" : "/work"}"><span class="brand-long">Toolroll</span><span class="brand-short">T</span></a>`,
@@ -16762,7 +16919,7 @@ function shell(title, body, options = {}) {
     // A phone tab says THAT something waits, with a dot; the number is on
     // the Work views themselves (Linear Mobile's rule — one tap away).
     `<a href="${href}"${primary === key ? ' class="active" aria-current="page"' : ""}><span class="glyph">${TAB_ICONS[key]}</span>${label}` +
-        `${count !== undefined && count > 0 ? `<span class="dot-badge" role="img" aria-label="${count} waiting"></span>` : ""}</a>`;
+        `${count !== undefined && count > 0 ? `<span class="dot-badge" role="img" aria-label="${escape(chrome.inboxLabel ?? `${count} waiting`)}"></span>` : ""}</a>`;
     // Three primary tabs, the same three as the rail: chat where allowed,
     // work, projects. Tools and settings sit behind the header's menu action.
     const tabbar = [
@@ -20132,7 +20289,7 @@ function safeReturn(raw) {
  * button can name. Nothing here is a second redirect framework: one
  * same-site path, or "/".
  */
-const LOGIN_RETURN_PAGES = /^\/(t\/[^/]+|r\/[1-9]\d*|code(?:\/[a-f0-9]{32}(?:\/ship)?)?|review|chat|work|board|projects|routines|recipes|fleet|settings(\/[a-z-]+)?|mode)$/;
+const LOGIN_RETURN_PAGES = /^\/(oauth\/authorize|t\/[^/]+|r\/[1-9]\d*|code(?:\/[a-f0-9]{32}(?:\/ship)?)?|review|chat|work|board|projects|routines|recipes|fleet|settings(\/[a-z-]+)?|mode)$/;
 function loginReturn(raw) {
     const safe = safeReturn(raw);
     if (safe === "/")
@@ -21930,6 +22087,8 @@ function taskBodyParts(data) {
         retry,
         runChecks,
         progress,
+        // One quiet line under the step: what the agent did last, and when.
+        activity: liveRun === undefined ? null : data.activity ?? null,
         stop,
         record,
         earlier,

package/dist/setup-guide.d.ts

@@ -15,10 +15,10 @@ export declare function detectPreparation(repo: string): {
 } | null;
 /** Browser installation may write only this known file inside its project. */
 export declare function previewProjectInstructions(repo: string): {
+    content?: never;
     ok: false;
     message: string;
     plan?: never;
-    content?: never;
     fingerprint?: never;
     installed?: never;
 } | {
@@ -30,10 +30,10 @@ export declare function previewProjectInstructions(repo: string): {
     installed: boolean;
 };
 export declare function addProjectInstructions(repo: string, fingerprint: string): {
+    content?: never;
     ok: false;
     message: string;
     plan?: never;
-    content?: never;
     fingerprint?: never;
     installed?: never;
 } | import("./skills.js").InstallResult;