toolroll 0.9.62 → 0.9.65

package/dist/server/flows.js

@@ -18,9 +18,10 @@ import { assignFlowCard, commentOnFlowCard, watchFlowCard } from "../flow-people
 import { saveScript } from "../flow-scripts.js";
 import { chooseFlowCard } from "../flow-send.js";
 import { exportFlow, fetchFlowFile, FlowFileError, importFlow, parseFlowFile, planFlowImport } from "../flow-share.js";
-import { addFlowTriggerTo, checkFlowTriggerNow, pressFlowButton, removeFlowTrigger, removeLinearKey, setFlowTriggerOn, renewFlowHook, saveHooksBase, saveLinearKey, saveLinearSigningSecret, shareFlowButton, stopSharingFlowButton } from "../flow-triggers.js";
+import { addFlowTriggerTo, checkFlowTriggerNow, pressFlowButton, removeFlowTrigger, removeLinearKey, setFlowTriggerOn, renewFlowHook, saveHooksBase, saveLinearKey, saveSigningSecret, setUpFlowHook, changeFlowHookSender, setFlowHookScope, shareFlowButton, stopSharingFlowButton, rawTakesDeliveries } from "../flow-triggers.js";
 import { FLOW_IMPORT_SCRIPT, flowFallbackHtml, flowImportHtml, flowsListHtml, flowView } from "../flows-ui.js";
 import { FLOW_TEMPLATES, FlowContractError, validateFlowDefinition, withZoneNames } from "../flows.js";
+import { prepareUnattendedCandidates, parseUnattendedAsk, revokeUnattended, signUnattended, untilWords } from "../flow-unattended.js";
 import { keyStatus } from "../keys.js";
 import { kitPageHtml, kitsGalleryHtml } from "../kits-ui.js";
 import { addKitGithubTrigger, addKitSample, kitOf, setUpKit } from "../kits.js";
@@ -42,7 +43,7 @@ import { redirect, respond, SAFETY, taskHref } from "./http.js";
 import { html } from "../html.js";
 import {} from "./session.js";
 export function createFlowsHandlers(runtime) {
-    const { store, clock, sendScreen, chromeFor, consoleProjects, options, visible, flowRooms, identify, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
+    const { store, clock, sendScreen, chromeFor, consoleProjects, options, visible, flowRooms, identify, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, authenticateCredential, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
     // ---- reads ---------------------------------------------------------------
     /** A gallery template's page (Flows → New → Use this): its questions, the preview of these answers, and Create. */
     function sendGalleryUse(response, who, template, projects, repo, given, name, notice, said = null) {
@@ -148,7 +149,7 @@ export function createFlowsHandlers(runtime) {
             return refuse(response, who, 404, "No such flow in your projects.", "/flows");
         const selected = Number(url.searchParams.get("card")), start = Number(url.searchParams.get("start"));
         const view = flowView(store, flow, { name: who.name, approver: who.via === "cookie" && who.role === "approver" }, Number.isSafeInteger(selected) && selected > 0 ? selected : null, { dir: options.configDir ?? null, repos: consoleProjects(), startTrigger: Number.isSafeInteger(start) && start > 0 ? start : null,
-            sortReady: keyStatus("openrouter", providerHome).set, toolHome });
+            sortReady: keyStatus("openrouter", providerHome).set, toolHome, now: clock() });
         if (url.searchParams.get("format") === "json")
             return respond(response, 200, "application/json; charset=utf-8", JSON.stringify(checkResponse("flowView", view)));
         return sendScreen(response, 200, screen(flow.name, html `<p><a href="/flows">Flows</a></p><h1>${flow.name}</h1>${flowFallbackHtml(view)}`, { chrome: chromeFor(flow.repo, "flows"), workspace: { view } }));
@@ -546,7 +547,7 @@ export function createFlowsHandlers(runtime) {
         }
         const definition = flowDefinitionOf(flow);
         const dir = options.configDir ?? null;
-        const viewNow = () => flowView(store, store.getFlow(flow.id) ?? flow, { name: who.name, approver: true }, null, { dir, repos: projects, sortReady: keyStatus("openrouter", providerHome).set, toolHome });
+        const viewNow = () => flowView(store, store.getFlow(flow.id) ?? flow, { name: who.name, approver: true }, null, { dir, repos: projects, sortReady: keyStatus("openrouter", providerHome).set, toolHome, now });
         const settle = (said, extra = {}) => {
             // Move what can move right away (a message, a decision's next zone); workers file and run the tasks.
             try {
@@ -571,7 +572,13 @@ export function createFlowsHandlers(runtime) {
             catch {
                 return answer(400, { ok: false, said: "That trigger couldn't be read." });
             }
-            const made = addFlowTriggerTo(store, flow, raw, who.name, now, dir);
+            // A trigger that takes deliveries mints an address: a credential act (docs/plans/passwordless.md).
+            const ingress = rawTakesDeliveries(raw);
+            if (ingress && !authenticateCredential(who, body.get("password") ?? "").ok)
+                return answer(403, { ok: false, said: "Enter your Toolroll password to make a webhook address." });
+            const made = addFlowTriggerTo(store, flow, raw, who.name, now, dir, ingress ? { ingress: "proved" } : {});
+            if (made.ok)
+                await prepareUnattendedCandidates(store, flow.id);
             return made.ok ? settle(made.said, made.reveal === null ? {} : { reveal: made.reveal }) : answer(400, { ok: false, said: made.message });
         }
         if (action === "scripts") {
@@ -579,8 +586,10 @@ export function createFlowsHandlers(runtime) {
             if (body.get("approve") === "yes")
                 return store.approveFlowScript(flow.repo, body.get("name") ?? "") ? settle("Approved. Zones that run it go on.") : answer(404, { ok: false, said: "That script isn't waiting for approval." });
             if (body.get("remove") === "yes")
-                return store.removeFlowScript(flow.repo, body.get("name") ?? "") ? settle("Script removed. Zones that ran it wait until it's back.") : answer(404, { ok: false, said: "There's no script by that name." });
+                return store.removeFlowScript(flow.repo, body.get("name") ?? "", who.name, now) ? settle("Script removed. Zones that ran it wait until it's back.") : answer(404, { ok: false, said: "There's no script by that name." });
             const saved = saveScript(store, flow.repo, { name: body.get("name"), about: body.get("about"), body: body.get("body"), timeoutMinutes: body.get("timeoutMinutes"), language: body.get("language"), file: body.get("file") }, who.name, now);
+            if (saved.ok)
+                await prepareUnattendedCandidates(store, flow.id);
             return saved.ok ? settle(saved.said) : answer(400, { ok: false, said: saved.message });
         }
         if (action === "linear-key" || action === "hooks-address") {
@@ -604,6 +613,19 @@ export function createFlowsHandlers(runtime) {
             store.archiveFlow(flow.id, who.name, now);
             return redirect(response, "/flows");
         }
+        if (action === "unattended") {
+            // The owner's password signs exactly the terms the panel showed; a flow saved meanwhile is refused (sawRevision).
+            if (!authenticateApprover(who, body.get("password") ?? "").ok)
+                return answer(403, { ok: false, said: "That password isn't right. Nothing was signed." });
+            const asked = parseUnattendedAsk({ days: body.get("days"), budget: body.get("budget"), runs: body.get("runs"), include: body.get("include") });
+            if (!asked.ok)
+                return answer(400, { ok: false, said: asked.message });
+            const signed = await signUnattended(store, { flow: flow.id, signer: who.name, ask: asked.ask, sawRevision: Number(body.get("revision")), sawSchedules: body.get("schedules") ?? "" }, now);
+            return signed.ok ? settle(`Runs on its own until ${untilWords(signed.grant.absoluteExpiry)}.`) : answer(409, { ok: false, said: signed.message });
+        }
+        if (action === "unattended-off") {
+            return revokeUnattended(store, flow.id, who.name, now) ? settle("It no longer runs on its own. New cards wait for you.") : answer(409, { ok: false, said: "It wasn't running on its own." });
+        }
         if (action === "save") {
             let saved, drawn;
             try {
@@ -637,6 +659,8 @@ export function createFlowsHandlers(runtime) {
             if (dir === null)
                 return answer(409, { ok: false, said: "Secrets are kept on the console's computer." });
             const saved = setFlowSecret(dir, flow.repo, (body.get("name") ?? "").trim(), body.get("value") ?? "");
+            if (saved.ok)
+                await prepareUnattendedCandidates(store, flow.id);
             return saved.ok ? settle(saved.said) : answer(400, { ok: false, said: saved.message });
         }
         // Adding a card.
@@ -702,13 +726,17 @@ export function createFlowsHandlers(runtime) {
         if (trigger === null || trigger.flow !== flow.id || trigger.state === "removed")
             return answer(404, { ok: false, said: "That trigger isn't on this flow." });
         if (verb === "pause" || verb === "resume") {
-            setFlowTriggerOn(store, trigger, verb === "resume", now);
+            setFlowTriggerOn(store, trigger, verb === "resume", now, who.name);
             return settle(verb === "pause" ? "Trigger paused." : "Trigger on again.");
         }
         if (verb === "remove") {
-            removeFlowTrigger(store, trigger, now, dir);
+            removeFlowTrigger(store, trigger, now, dir, who.name);
             return settle("Trigger removed.");
         }
+        // A public form link and a new webhook address each open a way in: credential acts, a password typed now.
+        if ((verb === "share" || verb === "renew") && !authenticateCredential(who, body.get("password") ?? "").ok) {
+            return answer(403, { ok: false, said: verb === "share" ? "Enter your Toolroll password to share a form link." : "Enter your Toolroll password to make a new address." });
+        }
         if (verb === "share") {
             const shared = shareFlowButton(store, trigger, now, dir);
             return shared.ok ? settle(shared.said, { reveal: shared.reveal }) : answer(409, { ok: false, said: shared.message });
@@ -717,6 +745,11 @@ export function createFlowsHandlers(runtime) {
             stopSharingFlowButton(store, trigger, now);
             return settle("The form link no longer works.");
         }
+        // v126: a person has seen that deliveries were turned away (the banner stays until then).
+        if (verb === "dropped") {
+            store.clearFlowDeliveriesDropped(trigger.id);
+            return settle("Cleared.");
+        }
         if (verb === "press") {
             let answers;
             try {
@@ -744,11 +777,24 @@ export function createFlowsHandlers(runtime) {
             const renewed = renewFlowHook(store, trigger, now, dir);
             return renewed.ok ? settle(renewed.said, { reveal: renewed.reveal }) : answer(409, { ok: false, said: renewed.message });
         }
-        // Linear's signing secret, pasted on this secure panel behind the password — never in chat.
-        if (!authenticateApprover(who, body.get("password") ?? "").ok)
-            return answer(403, { ok: false, said: "Enter your Toolroll password to save a secret." });
-        const saved = saveLinearSigningSecret(trigger, body.get("secret") ?? "", dir);
-        return saved.ok ? settle("Signing secret saved. Linear's deliveries can be proved now.") : answer(400, { ok: false, said: saved.message });
+        // A webhook's credentials change only on this secure panel, behind the password — never in chat (v126): a secret
+        // pasted (Linear's, Sentry's, Vercel's), one made and shown once with a new address, or who signs its deliveries.
+        if (!authenticateCredential(who, body.get("password") ?? "").ok)
+            return answer(403, { ok: false, said: verb === "secret" ? "Enter your Toolroll password to save a secret." : "Enter your Toolroll password to change how this webhook is proved." });
+        if (verb === "setup") {
+            const made = setUpFlowHook(store, trigger, now, dir);
+            return made.ok ? settle(made.said, { reveal: made.reveal }) : answer(409, { ok: false, said: made.message });
+        }
+        if (verb === "scope") {
+            const scoped = setFlowHookScope(store, trigger, { project: body.get("project"), team: body.get("team") }, who.name, now);
+            return scoped.ok ? settle(scoped.said) : answer(400, { ok: false, said: scoped.message });
+        }
+        if (verb === "sender") {
+            const changed = changeFlowHookSender(store, trigger, body.get("sender"), who.name, now, dir);
+            return changed.ok ? settle(changed.said) : answer(400, { ok: false, said: changed.message });
+        }
+        const saved = saveSigningSecret(store, trigger, body.get("secret") ?? "", now, dir);
+        return saved.ok ? settle(saved.said) : answer(400, { ok: false, said: saved.message });
     };
     const recipeAct = (step) => async (ctx) => {
         const { who, request, response, now, posted } = ctx;
@@ -887,6 +933,8 @@ export function createFlowsHandlers(runtime) {
         "flow.linear-key": flowAct("linear-key"),
         "flow.hooks-address": flowAct("hooks-address"),
         "flow.secrets": flowAct("secrets"),
+        "flow.unattended": flowAct("unattended"),
+        "flow.unattended-off": flowAct("unattended-off"),
         "flow.triggers": flowAct("triggers"),
         "flow.card.move": cardAct("move"),
         "flow.card.decide": cardAct("decide"),
@@ -902,6 +950,10 @@ export function createFlowsHandlers(runtime) {
         "flow.trigger.press": triggerAct("press"),
         "flow.trigger.renew": triggerAct("renew"),
         "flow.trigger.secret": triggerAct("secret"),
+        "flow.trigger.setup": triggerAct("setup"),
+        "flow.trigger.sender": triggerAct("sender"),
+        "flow.trigger.scope": triggerAct("scope"),
+        "flow.trigger.dropped": triggerAct("dropped"),
         "flow.trigger.share": triggerAct("share"),
         "flow.trigger.unshare": triggerAct("unshare"),
         "recipes.prepare-send": recipeAct("prepare"),

package/dist/server/guards.d.ts

@@ -41,6 +41,7 @@ export interface GuardsRuntime {
 }
 export declare function createSharedGuards(runtime: GuardsRuntime): {
     authenticateApprover: (who: Who, token: string, repo?: string | null) => ReturnType<typeof checkApproverPassword>;
+    authenticateCredential: (who: Who, token: string, repo?: string | null) => ReturnType<typeof checkApproverPassword>;
     authorizeMutation: (request: IncomingMessage, who: Who, body: FormView<FormFieldOf<"mutationGuard">>) => {
         status: number;
         message: string;

package/dist/server/guards.js

@@ -6,23 +6,29 @@ import { tokenLive, tokenProjects } from "../api-tokens.js";
 import { oauthProjects, oauthTokenAllowed } from "../mcp-oauth.js";
 import { REMOTE_MESSAGES, reproveRemote } from "../operate-remote.js";
 import { canonicalProject, rowVisible } from "../project.js";
-import { authenticateAccount, authenticateApprover as checkApproverPassword } from "../scope.js";
+import { authenticateAccount, authenticateApprover as checkApproverPassword, credentialProof } from "../scope.js";
 import { SourceBudget } from "../sign-in-guard.js";
 import {} from "../store.js";
 import { requestContext } from "./request-context.js";
 import { refuse } from "./chrome.js";
 import { matchTaskPath } from "./http.js";
-import { PersistentSessions, SESSION_ABSOLUTE_MS, SESSION_COOKIE, SESSION_IDLE_MS } from "./session.js";
+import { PersistentSessions, SESSION_COOKIE, sessionWithinLifetime } from "./session.js";
 export function createSharedGuards(runtime) {
     // v99: wrong passwords. One address guessing across names runs out of tries here; each name
     // locks on its own (sign-in-guard.ts), and every lock, whatever road it came by, is kept.
     /**
-     * Every step-up in the console (v100): a person the identity provider
-     * checked in the last ten minutes confirms with that (an empty password
-     * field); anyone else types their password. Standing (an approver, with
-     * access to the project) is checked either way.
+     * Every step-up in the console: a password typed now, or (an empty field) an explicit identity-provider re-check
+     * made on request and not yet spent, or — inside an allowlisted act only — a remembered password (cockpit B2,
+     * scope.ts proveAccountNow / freshnessFor, reading the request's live facts). Standing (an approver, with access to
+     * the project) is checked either way.
      */
-    // v100: the shared check honours a fresh identity-provider sign-in itself (freshIdentitySignIn, set per request below).
+    /** A credential act (docs/plans/passwordless.md): only a password typed now (or a one-use provider re-check) proves it. */
+    function authenticateCredential(who, token, repo) {
+        if (who.via !== "cookie")
+            return { ok: false, reason: "not-an-approver" };
+        const proved = checkApproverPassword(runtime.store, who.name, token, repo, { credential: true });
+        return !proved.ok || credentialProof(proved.method) ? proved : { ok: false, reason: "not-an-approver" };
+    }
     function authenticateApprover(who, token, repo) {
         // Re-entering a password never upgrades a machine credential into a browser ceremony.
         if (who.via !== "cookie")
@@ -332,7 +338,7 @@ export function createSharedGuards(runtime) {
         }
         for (const [id, session] of found === null ? [] : [found]) {
             const now = Date.now();
-            if (now - session.lastSeen > SESSION_IDLE_MS || now - session.createdAt > SESSION_ABSOLUTE_MS) {
+            if (!sessionWithinLifetime(session, now)) {
                 runtime.sessions.delete(id);
                 return null;
             }
@@ -340,10 +346,18 @@ export function createSharedGuards(runtime) {
                 runtime.sessions.delete(id);
                 return null;
             }
+            // Ended in another process (or from Sessions): the cached copy is dropped, never used.
+            if (!runtime.sessions.stillSaved(id)) {
+                Map.prototype.delete.call(runtime.sessions, id);
+                return null;
+            }
             if (touch) {
                 session.lastSeen = now;
                 runtime.sessions.persist(session, true);
             }
+            // A touch that found the session ended elsewhere dropped it: this request is not signed in by it.
+            if (touch && !runtime.sessions.holds(session))
+                return null;
             return session;
         }
         return null;
@@ -356,5 +370,5 @@ export function createSharedGuards(runtime) {
     function runVisible(run) {
         return visible(taskRepoOf(run.taskRef));
     }
-    return { authenticateApprover, authorizeMutation, projectOf, resolveRouteProject, projectRequestAllowed, identify, lookupSession, restricted, visible, admissionList, codingActorAllowed, codingProjectAllowed, workAccess, familyOf, taskRepoOf, runVisible };
+    return { authenticateApprover, authenticateCredential, authorizeMutation, projectOf, resolveRouteProject, projectRequestAllowed, identify, lookupSession, restricted, visible, admissionList, codingActorAllowed, codingProjectAllowed, workAccess, familyOf, taskRepoOf, runVisible };
 }

package/dist/server/http.d.ts

@@ -1,4 +1,5 @@
 /** HTTP answers every console route shares: server options, body limits, safe responses, redirects and return paths. */
+import type { TerminalHost } from "../live-terminal.js";
 import { type Html } from "../html.js";
 import { type CliHttpOptions, type RunOperateAs } from "../cli-http.js";
 import { type CodingWorkspace } from "../coding-workspace.js";
@@ -25,6 +26,8 @@ export type ServeOptions = {
     installBin?: string;
     /** Native coding workspace injection for isolated integration tests. */
     codingWorkspace?: CodingWorkspace;
+    /** Live terminals (tests stand their own in; null turns them off). Default: one on a machine that runs agents. */
+    terminalHost?: TerminalHost | null;
     /** Read-only worker connections for heavy reads (read-executor.ts); 0 reads in-process. Default: off under tests. */
     readWorkers?: number;
     store: Store;
@@ -141,6 +144,10 @@ export type ServeOptions = {
     connectFetch?: typeof fetch;
     /** Tests: every request sign-in with the identity provider makes (discovery, keys, tokens). */
     ssoFetch?: typeof fetch;
+    /** Cockpit B1: this `up` console's instance secret (null: none — the instance route answers 404). */
+    instanceSecret?: () => string | null;
+    /** Cockpit E: how Finder is asked to reveal a proved checkout (tests pass their own; never a launch). True: shown. */
+    revealPath?: (path: string) => Promise<boolean> | boolean;
     chatEnv?: Record<string, string | undefined>;
     /**
      * The live peek's locality ASSERTION (live-peek v3 §3): the administrator

package/dist/server/http.js

@@ -1,4 +1,3 @@
-/** HTTP answers every console route shares: server options, body limits, safe responses, redirects and return paths. */
 import { html, htmlString, isHtml } from "../html.js";
 import { chatResultHref as sharedResultHref } from "../chat-controls.js";
 import {} from "../cli-http.js";
@@ -117,7 +116,9 @@ export function goOutside(response, to, words, bind) {
     response.end(htmlString(html `<!doctype html><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta http-equiv="refresh" content="0;url=${to}"><title>Toolroll</title>${HANDOFF_STYLE}<p>${words} <a href="${to}">Continue</a></p>`));
 }
 export function redirect(response, to) {
-    response.writeHead(303, { ...SAFETY, Location: to });
+    // Set as a header (not only in writeHead) so the answer can be read back after: a refused act's redirect names it.
+    response.setHeader("Location", to);
+    response.writeHead(303, { ...SAFETY });
     response.end();
 }
 export const taskChatHref = (taskId) => `/chat?task=${encodeURIComponent(taskId)}`;

package/dist/server/live.d.ts

@@ -1,10 +1,32 @@
+/**
+ * GET /live: one stream per page, joined to every room the page shows.
+ *
+ *   room=workspace              the reader's workspace may have changed (any meaningful write, or a lapse)
+ *   room=task:<id>              the task family changed; who else has it open
+ *   room=flow:<id>?card=&editing=  the flow changed; who else is on it, and on which card
+ *   room=chat[?task=|?project=] the reader's own lead reply, as it runs (the only room that carries content)
+ *   room=team[?conversation=]   the team conversation's cursor moved
+ *   room=agent:<run>            one agent on the Agents board changed; while open, this person watches it (no pings)
+ *   room=summary                the reader's project states (the sidebar): each change carries the snapshot; never watching or seeing
+ *
+ * Every room is validated before anything is looked up, and admitted with
+ * the same checks and answers as the page it belongs to, before the stream
+ * opens; each is re-proved on every signal and its safety-net check, and a
+ * viewer who no longer passes hears `gone`. Events name their room. A page
+ * that falls behind gets one `reload` and the stream ends, so its
+ * EventSource reconnects (live-bus.ts).
+ */
+import type { IncomingMessage } from "node:http";
 import { type LiveBus } from "../live-bus.js";
 import type { WorkspaceRevision } from "../workspace-revision.js";
 import type { ServerRuntime } from "./runtime.js";
+import type { Who } from "./session.js";
 /** A page asks for a few rooms at once: its workspace, what it shows, its conversation. */
-export declare const LIVE_ROOMS_PER_PAGE = 5;
+export declare const LIVE_ROOMS_PER_PAGE = 6;
 export type LiveRoom = {
     kind: "workspace";
+} | {
+    kind: "summary";
 } | {
     kind: "task";
     task: string;
@@ -26,10 +48,21 @@ export type LiveRoom = {
 };
 /** A room's name, read strictly: anything else is not a room. */
 export declare function parseLiveRoom(name: string): LiveRoom | null;
+/** The same session, still signed in, from the cookie and the account (never this request's context): a live room's and
+ * a live terminal's re-proof. Null when it was signed out, ended elsewhere, revoked, rotated or re-roled. */
+export declare function rereadBrowser(runtime: Pick<ServerRuntime, "identify" | "sessions" | "store">, request: IncomingMessage, who: Who & {
+    via: "cookie";
+}): (Who & {
+    via: "cookie";
+}) | null;
 export declare function createLiveHandlers(runtime: ServerRuntime, live: {
     bus: LiveBus;
     workspaceRevision: WorkspaceRevision;
     chatProjectOf: (projects: string[]) => string | null | undefined;
+    /** One account's sidebar snapshot for one scope (serve.ts projectSummaryFor); null: gone, or the scope moved. */
+    projectSummaryFor: (account: string, scope: string) => string | null;
+    /** What one account may see now (serve.ts projectScopeFor); null: no such account. */
+    projectScopeFor: (account: string) => string | null;
 }): {
     registrations: import("./handler-registry.js").Registration[];
     turnStarted: (thread: number) => void;

package/dist/server/live.js

@@ -10,8 +10,8 @@ import { respond } from "./http.js";
 import { adapterPolicy } from "./route-policy.js";
 import { requestContext } from "./request-context.js";
 /** A page asks for a few rooms at once: its workspace, what it shows, its conversation. */
-export const LIVE_ROOMS_PER_PAGE = 5;
-const ROOM_NAME = /^(workspace|task|flow|chat|team|agent)(?::([^?]{1,400}))?(?:\?([^#]{0,600}))?$/;
+export const LIVE_ROOMS_PER_PAGE = 6;
+const ROOM_NAME = /^(workspace|task|flow|chat|team|agent|summary)(?::([^?]{1,400}))?(?:\?([^#]{0,600}))?$/;
 /** At most one workspace nudge a second: a burst of writes is one re-read, the first heard at once. */
 const WORKSPACE_SETTLE_MS = 1_000;
 /** A running reply's preview: at most one snapshot every 80 ms; the last one always goes out. */
@@ -33,6 +33,7 @@ export function parseLiveRoom(name) {
     const only = (...allowed) => [...params.keys()].every(one => allowed.includes(one)) && allowed.every(one => params.getAll(one).length <= 1);
     switch (kind) {
         case "workspace": return key === null && query === undefined ? { kind } : null;
+        case "summary": return key === null && query === undefined ? { kind } : null;
         case "task": return key !== null && key !== "" && query === undefined ? { kind, task: key } : null;
         case "flow": {
             const flow = Number(key), card = params.get("card");
@@ -53,11 +54,34 @@ export function parseLiveRoom(name) {
     }
     return null;
 }
+/** The same session, still signed in, from the cookie and the account (never this request's context): a live room's and
+ * a live terminal's re-proof. Null when it was signed out, ended elsewhere, revoked, rotated or re-roled. */
+export function rereadBrowser(runtime, request, who) {
+    const again = runtime.identify(request, false);
+    if (again?.via !== "cookie" || again.name !== who.name || again.session.generation !== who.session.generation)
+        return null;
+    // The in-memory session may still exist after another process ends the saved session.
+    const hash = runtime.sessions.hashOf(again.session);
+    const saved = hash === null ? null : runtime.store.webSession(hash), account = runtime.store.accountOf(again.name);
+    if (saved === null || account === null || account.revokedAt !== null || account.generation !== again.session.generation
+        || saved.generation !== account.generation || saved.role !== account.role || again.role !== account.role)
+        return null;
+    return again;
+}
 const json = (response, status, value) => respond(response, status, "application/json", JSON.stringify(value));
 export function createLiveHandlers(runtime, live) {
     const { store, identify, liveCeiling, familyOf, taskRooms, flowRooms, clock, leadPrincipal, taskChatFocus, chatScopeOf, liveTurns, team, visible } = runtime;
     // The reader's workspace: one room for everyone, nudged by any meaningful write or a clock-bound lapse.
     const workspaceRooms = createLiveRooms(() => `${live.workspaceRevision.current()}:${live.workspaceRevision.expiresAt(clock())}`, null, { bus: live.bus, minIntervalMs: WORKSPACE_SETTLE_MS });
+    // The reader's project states, per account AND scope: the fingerprint IS the snapshot, so each `change` carries it
+    // (`at`). Every delivery re-proves the viewer's scope, so a snapshot read for a wider scope (a cached one, a held
+    // one, one a newcomer would be handed on joining) never reaches a narrowed reader: it hears `gone` instead. Reads
+    // settle: a burst of writes is one read, while every signal still re-proves at once.
+    const summaryKey = (account, scope) => JSON.stringify([account, scope]);
+    const summaryRooms = createLiveRooms(key => {
+        const [account, scope] = JSON.parse(key);
+        return live.projectSummaryFor(account, scope);
+    }, null, { bus: live.bus, minIntervalMs: WORKSPACE_SETTLE_MS, readSettleMs: WORKSPACE_SETTLE_MS });
     // A team audience is per actor (and per token): its key carries who reads, the room keeps how to read as them.
     const teamActors = new Map();
     const teamRooms = createLiveRooms(key => {
@@ -68,19 +92,7 @@ export function createLiveHandlers(runtime, live) {
     const chatViewers = new Set();
     // One agent's open view (Agents board): what it shows, keyed by the exact run.
     const agentRooms = createLiveRooms(run => agentRunFingerprint(store, run), null, { bus: live.bus });
-    /** The same session, still signed in, from the cookie and the account (never this request's context). */
-    const readBrowser = (request, who) => {
-        const again = identify(request, false);
-        if (again?.via !== "cookie" || again.name !== who.name || again.session.generation !== who.session.generation)
-            return null;
-        // The in-memory session may still exist after another process ends the saved session.
-        const hash = runtime.sessions.hashOf(again.session);
-        const saved = hash === null ? null : store.webSession(hash), account = store.accountOf(again.name);
-        if (saved === null || account === null || account.revokedAt !== null || account.generation !== again.session.generation
-            || saved.generation !== account.generation || saved.role !== account.role || again.role !== account.role)
-            return null;
-        return again;
-    };
+    const readBrowser = (request, who) => rereadBrowser(runtime, request, who);
     const sameBrowser = (request, who) => () => readBrowser(request, who) !== null;
     function admitted(viewer, thread) {
         let valid = false;
@@ -90,7 +102,7 @@ export function createLiveHandlers(runtime, live) {
         catch { /* Failed proof stops this room. */ }
         if (!valid) {
             viewer.connection.send(viewer.room, "gone");
-            viewer.leave();
+            viewer.connection.refuse(() => viewer.leave());
         }
         return valid;
     }
@@ -184,7 +196,7 @@ export function createLiveHandlers(runtime, live) {
         if ([...url.searchParams.keys()].some(key => key !== "room") || names.length === 0 || names.length > LIVE_ROOMS_PER_PAGE || new Set(names).size !== names.length)
             return json(response, 400, { error: "room" });
         const rooms = names.map(name => ({ name, room: parseLiveRoom(name) }));
-        if (rooms.some(one => one.room === null) || rooms.filter(one => one.room?.kind === "agent").length > 1 || rooms.filter(one => one.room?.kind === "workspace").length > 1 || rooms.filter(one => one.room?.kind === "chat").length > 1 || rooms.filter(one => one.room?.kind === "team").length > 1)
+        if (rooms.some(one => one.room === null) || rooms.filter(one => one.room?.kind === "agent").length > 1 || rooms.filter(one => one.room?.kind === "workspace").length > 1 || rooms.filter(one => one.room?.kind === "chat").length > 1 || rooms.filter(one => one.room?.kind === "team").length > 1 || rooms.filter(one => one.room?.kind === "summary").length > 1)
             return json(response, 400, { error: "room" });
         // Admit every room before the stream opens, with the answers each page's own stream gave.
         const joins = [];
@@ -195,6 +207,15 @@ export function createLiveHandlers(runtime, live) {
                 const browser = who;
                 joins.push(connection => workspaceRooms.join("workspace", { name: who.name, room: name, connection, valid: sameBrowser(request, browser) }));
             }
+            else if (room.kind === "summary") {
+                const browser = who;
+                const scope = live.projectScopeFor(who.name);
+                if (scope === null)
+                    return json(response, 404, { error: "summary" });
+                const signedIn = sameBrowser(request, browser);
+                joins.push(connection => summaryRooms.join(summaryKey(who.name, scope), { name: who.name, room: name, connection,
+                    valid: () => signedIn() && live.projectScopeFor(who.name) === scope }));
+            }
             else if (room.kind === "task") {
                 const browser = who;
                 const family = familyOf(room.task);
@@ -333,6 +354,7 @@ export function createLiveHandlers(runtime, live) {
         close() {
             detachChat();
             workspaceRooms.close();
+            summaryRooms.close();
             teamRooms.close();
             agentRooms.close();
             for (const viewer of [...chatViewers])

package/dist/server/pages-assets.js

@@ -6,6 +6,9 @@ const PWA_ICON_192 = "iVBORw0KGgoAAAANSUhEUgAAAMAAAADACAIAAADdvvtQAAAB1klEQVR42u
 const PWA_ICON_512 = "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";
 const PWA_ICON_APPLE = "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";
 const PWA_ICON_SVG = `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 100 100"><rect x="6" y="6" width="88" height="88" rx="14" fill="#1a202c"/><rect x="28" y="28" width="44" height="8" rx="4" fill="#ebebeb"/><rect x="28" y="47" width="44" height="8" rx="4" fill="#ebebeb"/><rect x="28" y="66" width="44" height="8" rx="4" fill="#ebebeb"/></svg>`;
+/** The icon with the attention dot (cockpit §3): a tab whose reader has something waiting shows it. Same origin, so
+ * the page's img-src 'self' allows it; nothing about the reader rides the asset. */
+const PWA_ICON_ATTENTION_SVG = PWA_ICON_SVG.replace("</svg>", `<circle cx="78" cy="22" r="20" fill="#bb2649" stroke="#ffffff" stroke-width="6"/></svg>`);
 /** The typefaces by route: exact names only, served pre-auth like the icons. */
 const FONT_FILES = {
     "/fonts/geist-sans-400.woff2": GEIST_SANS_400,
@@ -87,6 +90,8 @@ export function serveInstallAsset(response, pathname, respond) {
         return asset("image/png", Buffer.from(PWA_ICON_APPLE, "base64"));
     if (pathname === "/icon.svg")
         return asset("image/svg+xml", PWA_ICON_SVG);
+    if (pathname === "/icon-attention.svg")
+        return asset("image/svg+xml", PWA_ICON_ATTENTION_SVG);
     if (pathname === "/icon-192.png")
         return asset("image/png", Buffer.from(PWA_ICON_192, "base64"));
     if (pathname === "/icon-512.png")