toolroll 0.9.46 → 0.9.47

package/dist/serve.js

@@ -8,7 +8,7 @@ import { projectBatchChecks, setProjectBatchChecks } from './batch-policy.js';
 import { CHECK_LEVEL_WORDS, isCheckLevel, liveQuickCommand, projectCheckLevel, quickVerifyKey, setProjectCheckLevel, suggestQuickCommand } from './check-levels.js';
 import { repositoryContextHtml } from './repository-context-ui.js';
 import { browserAssetsAvailable, browserWorkspaceDocument, serveBrowserAsset } from './browser-shell.js';
-import { browserCrewOf, browserCrewFromIndex, browserWorkActionHref, browserProjectsOf, browserNavigationOf } from './browser-workspace.js';
+import { browserCrewOf, browserCrewFromIndex, browserWorkActionHref, browserProjectsOf, browserNavigationOf, needsYouLabelOf } from './browser-workspace.js';
 import { configureLeadFollow, leadFollowStatus, runLeadFollowPass } from './lead-follow.js';
 import { cancelCommitment, conditionWords, openCommitments } from './lead-commitments.js';
 import { startMaintenance } from './maintenance.js';
@@ -44,6 +44,8 @@ import { addRoutine, removeRoutine, runRoutine } from "./teammate-desk.js";
 import { sendTeammateWeeklies, undoCall } from "./teammate-week.js";
 import { answerTeammateQuestion } from "./teammate-work.js";
 import { createFlowRooms, flowFingerprint } from "./flow-live.js";
+import { createTaskRooms, taskFingerprint } from "./task-live.js";
+import { runActivityOf } from "./task-activity.js";
 import { disconnectGoogle, finishGoogleConsent, GOOGLE_CALLBACK, googleConnected, googleConsent, readGoogleMail, saveGoogleClient } from "./google-mail.js";
 import { mailboxAccess, readThroughImap } from "./mailbox.js";
 import { readEmailSettings, saveEmailSettings, sendingAccount, sendThroughServer, setFlowSecret } from "./flow-actions.js";
@@ -749,6 +751,7 @@ export function createDecisionServer(options) {
     const connectVisits = new Map();
     /** Flows open in a browser (v88): who's here, and a nudge when one changes. */
     const flowRooms = createFlowRooms(flow => flowFingerprint(store, flow));
+    const taskRooms = createTaskRooms(root => taskFingerprint(store, root, clock()));
     const teamChatProvider = () => { const enabled = chatEnablement(); return enabled.ok ? { config: enabled.config, key: enabled.key } : null; };
     const team = createTeamRuntime({ store, repos: codingProjects, evidenceRoot, clock, workspaceRevision,
         ...(options.chatFetcher ? { fetcher: options.chatFetcher } : {}),
@@ -1831,9 +1834,9 @@ export function createDecisionServer(options) {
         }
         const read = new Set(["/settings/flows", "/settings/skills", "/settings/knowledge", "/settings", "/settings/learning", "/recipes", "/recipes/run", "/recipes/start", "/recipes/new", "/recipes/edit", "/recipes/from-task", "/recipes/preview", "/recipes/export", "/", "/inbox", "/work", "/projects", "/people", "/ledger", "/ledger/export", "/next", "/board", "/tasks", "/tasks/new", "/runs", "/review", "/done", "/routines", "/menu"]);
         const write = new Set(["/settings/flows/on", "/settings/skills/import", "/settings/skills/change", "/settings/skills/revise", "/settings/knowledge/change", "/settings/knowledge/refresh", "/settings/learning/change", "/recipes/prepare", "/recipes/preview", "/recipes/import", "/recipes/save", "/recipes/launch", "/projects/select", "/tasks/add", "/routines/add"]);
-        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|confirm-stopped|stop|resume-arm|resume)$");
+        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence|/live)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|confirm-stopped|stop|resume-arm|resume)$");
         const resource = request.method === "GET"
-            ? /^\/(?:r|d)\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(path) || /^\/routines\/[0-9]{1,15}$/.test(path) || path === "/flows" || /^\/flows\/[0-9]{1,15}(\/insights|\/export|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(path) || path === "/flows/new" || /^\/flows\/new\/[a-z-]{1,40}$/.test(path)
+            ? /^\/(?:r|d)\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(path) || /^\/routines\/[0-9]{1,15}$/.test(path) || path === "/flows" || /^\/flows\/[0-9]{1,15}(\/insights|\/export|\/live|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(path) || path === "/flows/new" || /^\/flows\/new\/[a-z-]{1,40}$/.test(path)
             : /^\/d\/[0-9]{1,15}\/answer$/.test(path) || /^\/routines\/[0-9]{1,15}\/(approve|refresh|pause|resume|run-now)$/.test(path) || path === "/flows/new" || /^\/flows\/new\/[a-z-]{1,40}$/.test(path) || path === "/flows/import" || /^\/flows\/[0-9]{1,15}\/(save|cards|archive|scripts)$/.test(path) || /^\/flows\/[0-9]{1,15}\/cards\/[0-9]{1,15}\/(move|decide|cancel|comment|assign|watch)$/.test(path) || /^\/flows\/[0-9]{1,15}\/triggers(\/[0-9]{1,15}\/(pause|resume|remove|check|press|renew|secret|share|unshare))?$/.test(path) || /^\/r\/[0-9]{1,15}\/(note|comment|revise|draft-repair|checks|add-tests)$/.test(path);
         if (!(request.method === "GET" ? read : write).has(path) && task === null && !resource) {
             refuse(response, who, 403, "This area requires instance access. Your account operates within its assigned projects.", "/projects");
@@ -1891,6 +1894,10 @@ export function createDecisionServer(options) {
             }
             project = wanted;
         }
+        // Every page's Tasks count covers this one project view, whatever project the page itself shows.
+        const facts = requestContext.getStore();
+        if (facts !== undefined)
+            facts.lens = project;
         // Exact result links carry their own read context. Check the stored
         // placement against both account and instance access before using it;
         // viewing a result never changes the session's selected project, and
@@ -1975,7 +1982,7 @@ export function createDecisionServer(options) {
             url.pathname !== "/menu" &&
             url.pathname !== "/recipes" &&
             // A flow names its own project; the list spans every project.
-            url.pathname !== "/flows" && url.pathname !== "/flows/import" && !/^\/flows\/[0-9]{1,15}(\/insights|\/export|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(url.pathname) &&
+            url.pathname !== "/flows" && url.pathname !== "/flows/import" && !/^\/flows\/[0-9]{1,15}(\/insights|\/export|\/live|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(url.pathname) &&
             // The gallery (Flows → New) asks for its project on each template's page.
             url.pathname !== "/flows/new" && !/^\/flows\/new\/[a-z-]{1,40}$/.test(url.pathname) &&
             // Teammates (v92) name their own project, like flows.
@@ -1983,7 +1990,7 @@ export function createDecisionServer(options) {
             // New work names its project in the form (a dropdown of known
             // projects); /tasks/add still admits the posted repo on its own.
             url.pathname !== "/tasks/new" && url.pathname !== "/tasks/add" &&
-            !/^\/t\/[^/]+(\/evidence)?$/.test(url.pathname) &&
+            !/^\/t\/[^/]+(\/evidence|\/live)?$/.test(url.pathname) &&
             !/^\/r\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(url.pathname) &&
             !url.pathname.startsWith("/d/") && !url.pathname.startsWith("/contest/") &&
             url.pathname !== "/projects" &&
@@ -2276,6 +2283,8 @@ export function createDecisionServer(options) {
             const docked = projectThread === null ? null : dockedConversation(who, null, projectThread, now, `/work?project=${encodeURIComponent(projectThread)}`);
             if (docked !== null)
                 page.workspace = { ...page.workspace, conversation: docked, pageHtml: page.body };
+            // Without a docked chat the list reads itself: 10 s while any of its tasks is building, else 30 s.
+            page.refreshSeconds = work.totals.running > 0 ? 10 : 30;
             return sendScreen(response, 200, page);
         }
         if (url.pathname === "/next") {
@@ -3057,6 +3066,26 @@ export function createDecisionServer(options) {
             const chrome = chromeFor(project, "tasks");
             return sendScreen(response, 200, newTaskPage(chrome, project, csrf, revision, null, chainable, store.permissionDefault().mode, store.qualityDefault().mode, chrome.projects ?? []));
         }
+        const taskLive = matchTaskPath(url.pathname, "/live$");
+        if (taskLive !== null) {
+            // The live task page: a nudge the moment the task changes, and who else
+            // has it open. Hints only — the page reads the task the usual way.
+            if (who.via !== "cookie")
+                return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
+            const family = familyOf(taskLive.taskId);
+            if (family === null || family.problem !== null)
+                return respond(response, 404, "application/json", JSON.stringify({ error: "task" }));
+            response.writeHead(200, { "content-type": "text/event-stream", "cache-control": "no-store", "x-content-type-options": "nosniff", "x-accel-buffering": "no" });
+            const name = who.name, repo = family.root.repo;
+            taskRooms.join(family.root.id, {
+                name, response,
+                // Rechecked while open, from the cookie and the account (never a request's context): a sign-out or a narrowed account stops it.
+                valid: () => { const again = identify(request, false); return again !== null && again.name === name && rowVisible(liveCeiling(), repo) && store.accountCanAccess(name, repo); },
+            });
+            request.once("close", () => { if (!response.writableEnded)
+                response.end(); });
+            return;
+        }
         const task = matchTaskPath(url.pathname, "");
         if (task !== null) {
             const family = familyOf(task.taskId);
@@ -3841,7 +3870,8 @@ export function createDecisionServer(options) {
             // Console v2: the landing's live view (who is working, four counts, Catch up in tabs).
             const home = focusTask === null && chatProject === null && !roomId ? chatHomeOf(who, repos, now) : null;
             const withFirstRun = (shown) => firstRun === undefined && phone === undefined && home === null ? shown
-                : { ...shown, workspace: { ...shown.workspace, ...(firstRun === undefined ? {} : { firstRun }), ...(phone === undefined ? {} : { phone }), ...(home === null ? {} : { home }) } };
+                : { ...shown, ...(home === null ? {} : { refreshSeconds: liveRefreshSeconds() }),
+                    workspace: { ...shown.workspace, ...(firstRun === undefined ? {} : { firstRun }), ...(phone === undefined ? {} : { phone }), ...(home === null ? {} : { home }) } };
             if (enabled.ok && mateSession !== null && principal !== null && !ceilingStale) {
                 {
                     const said = takeMateNote(who.session.csrf, mateSession.id);
@@ -5173,17 +5203,24 @@ export function createDecisionServer(options) {
             catch {
                 notices.push('Crew updates are unavailable. Open Tasks to inspect saved work.');
             }
-            // "Wake me only for these": the navigation carries the count of tasks
-            // waiting on a person behind its Tasks link — the open project's, or
-            // everything this person may see — so it matches that page's Needs you tab.
-            let needsYou = 0;
+            // A running row says what its agent did last, and when (the task page's own line).
             try {
-                needsYou = (requestFacts.workCounts ?? workCountsByProject(store, clock(), workAccess()))
-                    .filter(one => s.chrome?.project == null || one.repo === s.chrome.project).reduce((sum, one) => sum + one.totals['needs-you'], 0);
-            }
-            catch {
-                needsYou = 0;
-            }
+                const now = clock(), live = new Map();
+                if (crew.crew.length > 0)
+                    for (const run of store.liveRuns(now)) {
+                        const root = familyOf(run.taskId)?.root.id;
+                        if (root !== undefined && !live.has(root))
+                            live.set(root, runActivityOf(store, run, now));
+                    }
+                if (live.size > 0)
+                    crew = { ...crew, crew: crew.crew.map(item => { const activity = live.get(item.id); return activity === undefined ? item : { ...item, activity }; }) };
+            }
+            catch { /* the rows keep their status; the line returns on the next read */ }
+            // "Wake me only for these": the navigation carries the sidebar's own
+            // Tasks count (chromeFor) and links to the project view it covers, so
+            // it matches that page's Needs you tab on every screen.
+            const needsYou = s.chrome.inboxCount;
+            const tasksProject = s.chrome.inboxProject === undefined ? s.chrome.project : s.chrome.inboxProject;
             // The person's own project and task conversations (v77), for the
             // sidebar's chat list; a thread whose project is out of view is left out.
             let chats = [];
@@ -5219,7 +5256,7 @@ export function createDecisionServer(options) {
                 catchUpHtml: extras.catchUpHtml ?? '', controlsHtml: extras.controlsHtml ?? '', notices, view: extras.view ?? null,
                 ...(s.chrome.demo ? { demo: { text: DEMO_BANNER, short: DEMO_BANNER_SHORT } } : {}),
                 pageHtml: extras.pageHtml === undefined ? (conversation === null ? pageHtml : null) : extras.pageHtml,
-                navigation: [...browserNavigationOf(currentPath, s.chrome.project, needsYou), { label: 'Workspace tools', href: '/menu', active: path.pathname === '/menu' }],
+                navigation: [...browserNavigationOf(currentPath, s.chrome.project, needsYou, tasksProject, s.chrome.inboxLabel), { label: 'Workspace tools', href: '/menu', active: path.pathname === '/menu' }],
                 chats,
                 ...(s.refreshSeconds === undefined ? {} : { refreshSeconds: Math.max(5, Math.floor(s.refreshSeconds)) }),
                 ...(s.chrome.signIn === undefined ? {} : { signIn: s.chrome.signIn }),
@@ -5274,12 +5311,6 @@ export function createDecisionServer(options) {
         // functional script polls.
         return page(response, status, html, nonce, s.functional?.fetches === true || chromeLayer || sensitiveChrome !== "");
     }
-    /** The badge cache: five seconds per project — mutations invalidate it. */
-    const badgeCache = new Map();
-    /** The needs-you count every surface wears for a project (workspace
-     * package 1): Work's own Needs-you membership, cached per viewer and
-     * project, so the rail, the phone tab, the scope bar, the project cards,
-     * the chat overview, and the Needs-you tab never disagree. */
     /** The Chat landing's live view: each agent at work now with its task and
      * phase, four counts, plan-window use (never dollars: subscriptions don't
      * bill per run) and Catch up's items, each tagged with its tab. Reads only. */
@@ -5289,7 +5320,8 @@ export function createDecisionServer(options) {
         const agents = store.liveRuns(now).filter(run => admitted(run.repo)).map(run => {
             const root = familyOf(run.taskId)?.root ?? null;
             return { runId: run.id, taskId: root?.id ?? run.taskId, title: root?.title ?? run.title, href: taskHref(root?.id ?? run.taskId),
-                agent: `${providerName(run.provider)} on ${run.runner}`, phase: homePhaseWords(run), project: run.repo === null ? null : projectName(run.repo), since: run.startedAt };
+                agent: `${providerName(run.provider)} on ${run.runner}`, phase: homePhaseWords(run), project: run.repo === null ? null : projectName(run.repo), since: run.startedAt,
+                activity: runActivityOf(store, run, now) };
         });
         const all = workIndexPage(store, now, access, { view: "all", limit: WORK_INDEX_MAX_LIMIT });
         const needs = workIndexPage(store, now, access, { view: "needs-you", limit: WORK_INDEX_MAX_LIMIT });
@@ -5323,19 +5355,13 @@ export function createDecisionServer(options) {
             planUse: (windows?.tiles ?? []).map(one => ({ name: one.name, window: one.window, percent: one.percent, detail: one.detail, tone: one.tone })),
         };
     }
+    /** The needs-you count every surface wears, read from this request's own
+     * Work counts (one query per request, never a cached earlier one), so a
+     * live page's badge and its Needs you tab always agree. */
     function needsYouBadge(project) {
-        const actor = requestContext.getStore()?.actor;
-        const key = `${actor ?? ""}:${actor === undefined ? "" : store.accountOf(actor)?.generation}:${project ?? ""}`;
-        const cached = badgeCache.get(key);
-        if (cached !== undefined && Date.now() - cached.at <= 5_000)
-            return cached;
-        const counted = needsYouCount(project);
-        const badge = { at: Date.now(), count: counted.count, saturated: counted.saturated };
-        badgeCache.set(key, badge);
-        return badge;
+        return needsYouCount(project);
     }
     const bustBadge = () => {
-        badgeCache.clear();
         paletteCache.clear();
     };
     /** The sidebar's facts for this request. */
@@ -5343,7 +5369,12 @@ export function createDecisionServer(options) {
         if (restricted() && !visible(project))
             project = null;
         const actor = requestContext.getStore()?.actor;
-        const badge = needsYouBadge(project);
+        // One Tasks count per request: Needs you in the request's project view
+        // (the open project, else every admitted project), never the page's own
+        // project — a flow or task in another project shows the same number.
+        const lens = requestContext.getStore()?.lens;
+        const inboxProject = lens !== undefined && (!restricted() || visible(lens)) ? lens : project;
+        const badge = needsYouBadge(inboxProject);
         const liveMode = project === null ? null : store.activeMode(project, clock());
         const liveModeTerms = liveMode === null ? null : modeTermsFromJson(liveMode.termsJson);
         let projectPeek = project === null ? null : undefined;
@@ -5383,6 +5414,9 @@ export function createDecisionServer(options) {
             ...(facts === undefined ? {} : { csrf: facts.csrf, returnTo: facts.returnTo }),
             inboxCount: badge.count,
             inboxSaturated: badge.saturated,
+            inboxProject,
+            inboxLabel: needsYouLabelOf(badge.count, inboxProject === null ? null
+                : store.listProjects().find(one => one.path === inboxProject)?.name ?? projectName(inboxProject), badge.saturated),
             settings: true,
             ...(store.isDemo() ? { demo: true } : {}),
             ...(() => { const signIn = signInNotices(store); return signIn.length === 0 ? {} : { signIn }; })(),
@@ -5436,6 +5470,10 @@ export function createDecisionServer(options) {
             .reduce((sum, one) => sum + one.totals['needs-you'], 0);
         return { count, saturated: false };
     }
+    /** A live page's own beat without a docked chat: 10 s while any admitted task is building, else 30 s. */
+    function liveRefreshSeconds() {
+        return projectCounts(clock()).some(one => one.totals.running > 0) ? 10 : 30;
+    }
     function projectFamilyPeek(repo, now) {
         const row = projectCounts(now).find(one => one.repo === repo);
         return { waiting: row?.totals['needs-you'] ?? 0, running: row?.totals.running ?? 0,
@@ -6239,6 +6277,9 @@ export function createDecisionServer(options) {
         // What went wrong reads the family's latest finished attempt, as the Tasks row does.
         presentedData.failure = failureOf(presentedData.family?.runs ?? data.runs, data.assignment ?? null);
         presentedData.runChecks = runChecksHere(data.assignment?.receipt?.runId ?? null, who, taskHref(taskId));
+        const liveRun = data.liveRunId == null ? undefined : data.runs.find(one => one.id === data.liveRunId);
+        if (liveRun !== undefined)
+            presentedData.activity = runActivityOf(store, liveRun, clock());
         presentedData.demo = store.isDemo();
         const paneProject = restricted() ? store.lookupRef(taskId)?.repo ?? null : who.via === "cookie" ? who.session.project : null;
         const page = taskPage(paneProject === null && !unscopedMode
@@ -6249,11 +6290,19 @@ export function createDecisionServer(options) {
         const docked = focus === null ? null : dockedConversation(who, focus, null, clock(), taskHref(focus.id));
         // The conversation is the page's own thread here, so the page drops its Ask tab;
         // only an approver is offered a road to message the agent.
-        const taskView = page.workspace?.view?.kind === "task" ? { ...page.workspace.view, ...(docked === null ? {} : { tabs: [] }), ...(who.role === "approver" ? {} : { chatHref: null }) } : page.workspace?.view;
+        const taskView = page.workspace?.view?.kind === "task" ? { ...page.workspace.view, ...(docked === null ? {} : { tabs: [] }), ...(who.role === "approver" ? {} : { chatHref: null }),
+            // A signed-in page hears the moment the task changes, and who else has it open.
+            ...(who.via === "cookie" ? { live: { href: `${taskHref(family?.root.id ?? taskId)}/live`, at: (() => { try {
+                        return taskFingerprint(store, family?.root.id ?? taskId, clock());
+                    }
+                    catch {
+                        return null;
+                    } })() } } : {}) } : page.workspace?.view;
         if (docked !== null)
             page.workspace = { ...page.workspace, ...(taskView === undefined ? {} : { view: taskView }), conversation: docked, pageHtml: page.body };
         else if (taskView !== undefined && page.workspace !== undefined)
             page.workspace = { ...page.workspace, view: taskView };
+        page.refreshSeconds = liveRefreshSeconds();
         return sendScreen(response, status, page);
     }
     /** The routine screen: the standing order restated, its verbs, its ledger. */
@@ -12509,6 +12558,7 @@ export function createDecisionServer(options) {
             stream.end();
         chatStreams.clear();
         flowRooms.close();
+        taskRooms.close();
         void Promise.all([closeCoding(), bounded(team.close()), bounded(leadMaintenance?.stop())]).then(() => closeServer(callback)).catch(error => {
             if (callback)
                 callback(error instanceof Error ? error : Error('Coding session shutdown failed.'));
@@ -16781,9 +16831,9 @@ function shell(title, body, options = {}) {
     // destination it now lives under. The count rides Work: it is the
     // saturated needs-you count, exactly as the inbox row wore it.
     const primary = chrome.active === "code" ? "work" : primaryDestinationOf(chrome.active);
-    const primaryItem = (key, href, label, count) => `<a href="${href}" aria-label="${escape(label)}" title="${escape(label)}"${primary === key ? ' class="active" aria-current="page"' : ""}${key === "work" && count !== undefined ? ` data-waiting="${count}"` : ""}>` +
+    const primaryItem = (key, href, label, count) => `<a href="${href}" aria-label="${escape(key === "work" && count !== undefined && count > 0 && chrome.inboxLabel !== undefined ? `${label}, ${chrome.inboxLabel}` : label)}" title="${escape(label)}"${primary === key ? ' class="active" aria-current="page"' : ""}${key === "work" && count !== undefined ? ` data-waiting="${count}"` : ""}>` +
         `<span class="glyph">${NAV_ICONS[key] ?? ""}</span>${label}` +
-        `${count !== undefined && count > 0 ? ` <span class="count badge badge-open">${count}${chrome.inboxSaturated ? "+" : ""}</span>` : ""}</a>`;
+        `${count !== undefined && count > 0 ? ` <span${chrome.inboxLabel === undefined ? "" : ` aria-label="${escape(chrome.inboxLabel)}" title="${escape(chrome.inboxLabel)}"`} class="count badge badge-open">${count}${chrome.inboxSaturated ? "+" : ""}</span>` : ""}</a>`;
     const side = [
         `<aside class="side">`,
         `<div class="side-head"><a class="brand" href="${chrome.chat === true ? "/chat" : "/work"}"><span class="brand-long">Toolroll</span><span class="brand-short">T</span></a>`,
@@ -16869,7 +16919,7 @@ function shell(title, body, options = {}) {
     // A phone tab says THAT something waits, with a dot; the number is on
     // the Work views themselves (Linear Mobile's rule — one tap away).
     `<a href="${href}"${primary === key ? ' class="active" aria-current="page"' : ""}><span class="glyph">${TAB_ICONS[key]}</span>${label}` +
-        `${count !== undefined && count > 0 ? `<span class="dot-badge" role="img" aria-label="${count} waiting"></span>` : ""}</a>`;
+        `${count !== undefined && count > 0 ? `<span class="dot-badge" role="img" aria-label="${escape(chrome.inboxLabel ?? `${count} waiting`)}"></span>` : ""}</a>`;
     // Three primary tabs, the same three as the rail: chat where allowed,
     // work, projects. Tools and settings sit behind the header's menu action.
     const tabbar = [
@@ -22037,6 +22087,8 @@ function taskBodyParts(data) {
         retry,
         runChecks,
         progress,
+        // One quiet line under the step: what the agent did last, and when.
+        activity: liveRun === undefined ? null : data.activity ?? null,
         stop,
         record,
         earlier,

package/dist/setup-guide.d.ts

@@ -15,10 +15,10 @@ export declare function detectPreparation(repo: string): {
 } | null;
 /** Browser installation may write only this known file inside its project. */
 export declare function previewProjectInstructions(repo: string): {
+    content?: never;
     ok: false;
     message: string;
     plan?: never;
-    content?: never;
     fingerprint?: never;
     installed?: never;
 } | {
@@ -30,10 +30,10 @@ export declare function previewProjectInstructions(repo: string): {
     installed: boolean;
 };
 export declare function addProjectInstructions(repo: string, fingerprint: string): {
+    content?: never;
     ok: false;
     message: string;
     plan?: never;
-    content?: never;
     fingerprint?: never;
     installed?: never;
 } | import("./skills.js").InstallResult;

package/dist/store.d.ts

@@ -2,6 +2,7 @@ import type { DecisionOption } from "./contracts/decision.js";
 import { type SavedToolAction, type SavedToolRule } from "./contracts/store-json.js";
 import type { FlowCardChange, FlowCardFields } from "./contracts/flow-card.js";
 import { type Actor } from "./actor.js";
+import { type LiveActivityKind } from "./live.js";
 import { type TokenPurpose } from "./api-tokens.js";
 import { type CriterionMatrixRow, type CriterionJudgementWord } from "./proof.js";
 import { type ExecutionProfile, type ChainEntry, type UnattendedPermissionMode, type AcceptanceCriterion } from "./scope.js";
@@ -69,6 +70,10 @@ export declare const FLOW_SEND_SCHEMA = "\nCREATE TABLE IF NOT EXISTS flow_send
 /** An owner's lasting choice to approve plans and merges from their paired chat (chat-approval.ts), for all their
  * projects (scope '*') or one (its path), with the limits they agreed to. Off unless a row says on; a project's own row
  * outranks the all-projects one. `generation` is the account's at the change: a reset password ends it. */
+/** What a running agent did last (live tasks): one row per run, a fixed kind from live.ts's
+ * vocabulary and when — never text, tool names or arguments. Display state, not evidence;
+ * a finished run's row goes with the live log's own retention (sweepRunActivity). */
+export declare const RUN_ACTIVITY_SCHEMA = "\nCREATE TABLE IF NOT EXISTS run_activity (\n  run  INTEGER PRIMARY KEY REFERENCES run(id) ON DELETE CASCADE,\n  kind TEXT NOT NULL CHECK (kind IN ('session','message','edit','command','read','search','lookup','plan','delegate','tool')),\n  at   TEXT NOT NULL\n);\n";
 export declare const CHAT_APPROVAL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS chat_approval_setting (\n  approver             TEXT NOT NULL,\n  scope                TEXT NOT NULL,\n  enabled              INTEGER NOT NULL CHECK (enabled IN (0,1)),\n  full_access          INTEGER NOT NULL DEFAULT 0 CHECK (full_access IN (0,1)),\n  attempt_cap_microusd INTEGER CHECK (attempt_cap_microusd IS NULL OR attempt_cap_microusd >= 0),\n  generation           INTEGER NOT NULL,\n  digest               TEXT NOT NULL,\n  updated_by           TEXT NOT NULL,\n  updated_at           TEXT NOT NULL,\n  PRIMARY KEY (approver, scope)\n);\n";
 /** The second tap on a flow decision in Telegram (telegram-flow.ts): Approve arms Yes and Cancel, bound to the binding,
  * chat, message and exact visit of the card; Yes decides it once. */
@@ -5601,6 +5606,17 @@ export declare class Store {
      * page and focused chat render live, including once the run that wrote
      * it has ended. */
     latestCheckpointForTask(taskRef: number): RunCheckpoint | null;
+    /** What the agent did last on this run (live tasks): one fixed kind and when, replacing the last. */
+    recordRunActivity(run: number, kind: LiveActivityKind, now: Date): void;
+    /** A run's last recorded activity and its newest progress checkpoint's time, in one read. */
+    runActivity(run: number): {
+        kind: LiveActivityKind | null;
+        at: string | null;
+        progressAt: string | null;
+    };
+    /** The live log's own retention: a finished run's activity goes once older than `retainMs`, and beyond the newest
+     * `bound` finished runs; a live run's always stays. */
+    sweepRunActivity(now: Date, retainMs: number, bound: number): number;
     /** One run's full checkpoint history, oldest first. */
     checkpointHistory(run: number): RunCheckpoint[];
     /** The newest scout run's report for a task (v34), when one exists. */

package/dist/store.js

@@ -12,6 +12,7 @@ import { cardOutputsForStore, cardOutputsFromStore } from "./contracts/stage-out
 import { chatControlHref, chatResultHref } from "./chat-controls.js";
 import { actorLabel, currentActor, leadSecretMatches, mintLeadToken, parseLeadToken } from "./actor.js";
 import { scanForSecrets } from "./evidence.js";
+import { LIVE_ACTIVITY_KINDS } from "./live.js";
 import { tokenPurpose, tokenRotationProblem } from "./api-tokens.js";
 /**
  * The database: a small task store, and the operational overlay beside it.
@@ -359,6 +360,16 @@ CREATE INDEX IF NOT EXISTS telegram_flow_choice_visit ON telegram_flow_choice (c
 /** An owner's lasting choice to approve plans and merges from their paired chat (chat-approval.ts), for all their
  * projects (scope '*') or one (its path), with the limits they agreed to. Off unless a row says on; a project's own row
  * outranks the all-projects one. `generation` is the account's at the change: a reset password ends it. */
+/** What a running agent did last (live tasks): one row per run, a fixed kind from live.ts's
+ * vocabulary and when — never text, tool names or arguments. Display state, not evidence;
+ * a finished run's row goes with the live log's own retention (sweepRunActivity). */
+export const RUN_ACTIVITY_SCHEMA = `
+CREATE TABLE IF NOT EXISTS run_activity (
+  run  INTEGER PRIMARY KEY REFERENCES run(id) ON DELETE CASCADE,
+  kind TEXT NOT NULL CHECK (kind IN ('session','message','edit','command','read','search','lookup','plan','delegate','tool')),
+  at   TEXT NOT NULL
+);
+`;
 export const CHAT_APPROVAL_SCHEMA = `
 CREATE TABLE IF NOT EXISTS chat_approval_setting (
   approver             TEXT NOT NULL,
@@ -4090,6 +4101,8 @@ function initializeStore(db, file) {
     db.exec(CHAT_DECIDE_SCHEMA);
     // An owner's lasting chat-approval setting (no version bump: additive only; absent means off).
     db.exec(CHAT_APPROVAL_SCHEMA);
+    // What a running agent did last (no version bump: additive only; absent means no word yet).
+    db.exec(RUN_ACTIVITY_SCHEMA);
     db.exec(TELEGRAM_FLOW_CONFIRM_SCHEMA);
     // A flow's "Send to me" and "Person chooses" zones (no version bump: additive only).
     db.exec(FLOW_SEND_SCHEMA);
@@ -17523,6 +17536,27 @@ export class Store {
         const row = this.db.prepare("SELECT * FROM run_checkpoint WHERE task_ref = ? ORDER BY id DESC LIMIT 1").get(taskRef);
         return row === undefined ? null : readRunCheckpoint(row);
     }
+    /** What the agent did last on this run (live tasks): one fixed kind and when, replacing the last. */
+    recordRunActivity(run, kind, now) {
+        this.db.prepare("INSERT INTO run_activity (run, kind, at) VALUES (?, ?, ?) ON CONFLICT (run) DO UPDATE SET kind = excluded.kind, at = excluded.at")
+            .run(run, kind, now.toISOString());
+    }
+    /** A run's last recorded activity and its newest progress checkpoint's time, in one read. */
+    runActivity(run) {
+        const row = this.db.prepare(`SELECT (SELECT kind FROM run_activity WHERE run = ?1) AS kind, (SELECT at FROM run_activity WHERE run = ?1) AS at,
+      (SELECT created_at FROM run_checkpoint WHERE run = ?1 ORDER BY id DESC LIMIT 1) AS progress_at`).get(run);
+        const kind = typeof row["kind"] === "string" && LIVE_ACTIVITY_KINDS.includes(row["kind"]) ? row["kind"] : null;
+        return { kind, at: kind === null ? null : String(row["at"]), progressAt: row["progress_at"] == null ? null : String(row["progress_at"]) };
+    }
+    /** The live log's own retention: a finished run's activity goes once older than `retainMs`, and beyond the newest
+     * `bound` finished runs; a live run's always stays. */
+    sweepRunActivity(now, retainMs, bound) {
+        const finished = "run IN (SELECT id FROM run WHERE outcome IS NOT NULL)";
+        const aged = this.db.prepare(`DELETE FROM run_activity WHERE at < ? AND ${finished}`).run(new Date(now.getTime() - retainMs).toISOString()).changes;
+        const over = this.db.prepare(`DELETE FROM run_activity WHERE ${finished} AND run NOT IN (SELECT run FROM run_activity WHERE ${finished} ORDER BY at DESC, run DESC LIMIT ?)`)
+            .run(Math.max(0, Math.floor(bound))).changes;
+        return Number(aged) + Number(over);
+    }
     /** One run's full checkpoint history, oldest first. */
     checkpointHistory(run) {
         return this.db.prepare("SELECT * FROM run_checkpoint WHERE run = ? ORDER BY id ASC").all(run).map(readRunCheckpoint);

package/dist/task-activity.d.ts

@@ -0,0 +1,27 @@
+/**
+ * What a running agent did last, recorded and read (live tasks).
+ *
+ * The recorder sits beside the live log on the agent's stream and keeps one
+ * row per run: a fixed kind from live.ts's vocabulary and when. No text, no
+ * tool names, no arguments are ever kept, so nothing here can leak a secret.
+ * The reader picks the newer of that row and the run's latest progress
+ * checkpoint, and asks the runner's heartbeat whether the worker still
+ * answers. Neither side reads or stats a live-log file.
+ */
+import { type RunActivity } from "./activity-line.js";
+import type { Store } from "./store.js";
+type Observer = {
+    observe(event: Record<string, unknown>): void;
+    close(): void;
+};
+/** Watch a run's stream for what the agent does, alongside its live log (which may be null). Fail-soft: a write
+ * that fails never touches the run. */
+export declare function withRunActivity(liveLog: Observer | null, store: Pick<Store, "recordRunActivity">, run: number, clock: () => Date): Observer;
+/** A live run's last activity: the newer of its recorded kind and its latest progress checkpoint, else when it
+ * started; and "offline" only when its registered worker's heartbeat has lapsed. */
+export declare function runActivityOf(store: Store, run: {
+    id: number;
+    runner: string;
+    startedAt: string;
+}, now: Date): RunActivity;
+export {};

package/dist/task-activity.js

@@ -0,0 +1,53 @@
+/**
+ * What a running agent did last, recorded and read (live tasks).
+ *
+ * The recorder sits beside the live log on the agent's stream and keeps one
+ * row per run: a fixed kind from live.ts's vocabulary and when. No text, no
+ * tool names, no arguments are ever kept, so nothing here can leak a secret.
+ * The reader picks the newer of that row and the run's latest progress
+ * checkpoint, and asks the runner's heartbeat whether the worker still
+ * answers. Neither side reads or stats a live-log file.
+ */
+import { ACTIVITY_WORDS } from "./activity-line.js";
+import { liveActivityKind } from "./live.js";
+import { isAlive } from "./runner.js";
+/** At most one write per run this often while the kind stays the same: the age is in seconds, not milliseconds. */
+const SAME_KIND_EVERY_MS = 5_000;
+/** Watch a run's stream for what the agent does, alongside its live log (which may be null). Fail-soft: a write
+ * that fails never touches the run. */
+export function withRunActivity(liveLog, store, run, clock) {
+    let last = null;
+    return {
+        observe(event) {
+            liveLog?.observe(event);
+            const kind = liveActivityKind(event);
+            if (kind === null)
+                return;
+            try {
+                const now = clock();
+                if (last !== null && last.kind === kind && now.getTime() - last.at < SAME_KIND_EVERY_MS)
+                    return;
+                store.recordRunActivity(run, kind, now);
+                last = { kind, at: now.getTime() };
+            }
+            catch { /* display state: the next event tries again */ }
+        },
+        close() { liveLog?.close(); },
+    };
+}
+/** A live run's last activity: the newer of its recorded kind and its latest progress checkpoint, else when it
+ * started; and "offline" only when its registered worker's heartbeat has lapsed. */
+export function runActivityOf(store, run, now) {
+    const recorded = store.runActivity(run.id);
+    let what = ACTIVITY_WORDS["started"], at = run.startedAt;
+    if (recorded.kind !== null && recorded.at !== null && recorded.at >= at) {
+        what = ACTIVITY_WORDS[recorded.kind] ?? ACTIVITY_WORDS["tool"];
+        at = recorded.at;
+    }
+    if (recorded.progressAt !== null && recorded.progressAt > at) {
+        what = ACTIVITY_WORDS["progress"];
+        at = recorded.progressAt;
+    }
+    const worker = store.getRunner(run.runner)?.runner;
+    return { what, at, worker: worker === undefined || isAlive(worker, now) ? "online" : "offline" };
+}

package/dist/task-live.d.ts

@@ -0,0 +1,17 @@
+import type { ServerResponse } from "node:http";
+import { type Store } from "./store.js";
+export type TaskViewer = {
+    name: string;
+    response: ServerResponse;
+    valid: () => boolean;
+};
+/** What changes when anything on the task page changes: one read over the family, kept short and opaque. */
+export declare function taskFingerprint(store: Store, root: string, now: Date, livenessMs?: number): string | null;
+export type TaskRooms = {
+    /** Keep this page's stream on the task family until it closes; the first events say where it stands and who's here. */
+    join: (root: string, viewer: TaskViewer) => void;
+    /** Every stream, ended (the server is closing). */
+    close: () => void;
+    size: () => number;
+};
+export declare function createTaskRooms(fingerprint: (root: string) => string | null, tickMs?: number): TaskRooms;