toolroll 0.9.63 → 0.9.65

package/dist/server/chat.js

@@ -1,3 +1,4 @@
+import { freshFacts, freshlyApprovable, freshnessFor, spendingOnlyOnSuccess, withFreshness } from "../scope.js";
 import { handlersOf } from './handler-registry.js';
 import { DEPRECATED_PAGE } from "../deprecations.js";
 /** chat handlers, moved without changing their route bodies. */
@@ -34,9 +35,9 @@ import { runActivityOf } from "../task-activity.js";
 import { teamWorkspaceHtml } from '../team-ui.js';
 import { loadBotToken, redactToken } from "../telegram.js";
 import { WORK_INDEX_MAX_LIMIT, workIndexPage } from "../work-index.js";
-import { html, htmlString, postForm } from "../html.js";
+import { html, htmlString, postForm, reauth } from "../html.js";
 import { requestContext } from "./request-context.js";
-import { refuse, screen } from "./chrome.js";
+import { refuse, screen, whenTime } from "./chrome.js";
 import { chatResultHref, chatReturnWithLatest, chatReturnWithSaid, projectChatHref, redirect, respond, safeChatReturn, safeReturn, taskChatHref, taskHref } from "./http.js";
 import { chatAckPage, chatPage, coordinatorProposalsSection, decisionsFor, leadAfterComposerHtml, leadChatVersion, leadMintCard, leadPage, leadThreadHtml, PHONE_CARD_FACT, TASK_COMPOSER_MODES, taskChatLiveRegion, teamProposalCardParts } from "./render-chat.js";
 import {} from "./render-pages.js";
@@ -60,17 +61,18 @@ export function createChatHandlers(runtime) {
         }
         store.sweepStaleLeadTurns(now);
         const request = url.searchParams.get("request") ?? "";
-        const receipt = /^[a-f0-9]{32}$/.test(request) ? store.leadRequestReceipt(session.id, request) : null;
+        // Received: the engine took it, or the lead queue holds it (a queued acknowledgement lost on the way still frees the draft).
+        const received = /^[a-f0-9]{32}$/.test(request) && store.leadRequestReceived(session.id, request);
         const requestedTask = url.searchParams.get("task");
         const focusTask = requestedTask === null || requestedTask === "" ? null : taskChatFocus(requestedTask, now, who, { mintNonce: false });
         if (requestedTask !== null && requestedTask !== "" && focusTask === null) {
             // The lens's task is gone or no longer admitted: the page keeps its
             // draft and says so; it never falls back to the unified thread.
-            return respond(response, 200, "application/json", JSON.stringify({ session: session.id, task: requestedTask, unavailable: true, received: receipt !== null }));
+            return respond(response, 200, "application/json", JSON.stringify({ session: session.id, task: requestedTask, unavailable: true, received }));
         }
         const chatProject = focusTask !== null ? null : chatProjectOf(url.searchParams.getAll("project").filter(one => one !== ""));
         if (chatProject === undefined)
-            return respond(response, 200, "application/json", JSON.stringify({ session: session.id, unavailable: true, received: receipt !== null }));
+            return respond(response, 200, "application/json", JSON.stringify({ session: session.id, unavailable: true, received }));
         const rows = leadConversationRows(who, principal, focusTask, now, chatProject);
         const version = leadChatVersion({ ...rows, focusTask });
         const known = url.searchParams.get("version") ?? "";
@@ -87,7 +89,7 @@ export function createChatHandlers(runtime) {
             task: focusTask?.id ?? "",
             version,
             pending: rows.pending !== null,
-            received: receipt !== null,
+            received,
             approval: focusTask?.approval?.digest ?? "",
             ...(fragments === null ? {} : { fragments }),
         }));
@@ -357,7 +359,7 @@ export function createChatHandlers(runtime) {
         // The one nonce in chat — this screen restates exact financial terms
         // and re-enables spend, which is precisely what nonces are for.
         const nonce = mintApprovalNonce(who.name, `chat-ack-${turn.id}`, String(turn.reservedMicrousd));
-        return sendScreen(response, 200, chatAckPage(chromeFor(project, "chat"), turn, nonce));
+        return sendScreen(response, 200, chatAckPage(chromeFor(project, "chat"), turn, nonce, store.leadTurnOfStep(turn.id)));
     }
     async function sharedActionReview(ctx) {
         const { url, response } = ctx;
@@ -391,7 +393,22 @@ export function createChatHandlers(runtime) {
             const review = mintSharedActionReview(store, principal, id, evidenceRoot, clock()), action = review.payload;
             const terms = action.terms.map(term => html `<p style="white-space:pre-wrap;overflow-wrap:anywhere">${term}</p>`);
             const evidenceLink = action.operation === 'result_accept' ? html `<a href="/r/${Number(action.request['run'])}">Inspect this result</a>` : '';
-            const content = html `<section class="shared-action"><h1>${action.title}</h1>${evidenceLink}${terms}${postForm(`/chat/proposal/${id}/confirm`, html `<label class="arm"><input type="checkbox" name="confirm" value="yes" required>I confirm this exact action</label>${CHAT_ACTIONS[action.operation].password ? html `<label>Your password<input type="password" name="token" autocomplete="current-password" required></label>` : ''}<button>${CHAT_ACTIONS[action.operation].label}</button>`, { returnTo: '/chat', hidden: { nonce: review.nonce } })}</section>`;
+            // Cockpit B2: approving standard work may stand on a password remembered on this session, exactly as on the task
+            // page (the same rule approve() applies when the form comes back); the field then may be left empty.
+            const freshSince = (() => {
+                const task = typeof action.request['task'] === 'string' ? action.request['task'] : null;
+                if (action.operation !== 'scope_approve' || task === null)
+                    return null;
+                const scope = store.getScope(task), fresh = withFreshness('approve-standard', () => freshnessFor(who.name, Date.now(), true));
+                if (scope === null || fresh === null)
+                    return null;
+                const gate = store.approvalGate(task, who.name, 'person');
+                return freshlyApprovable(store, task, scope, gate.verdict === 'seal' && !gate.protectedWork) ? new Date(fresh.at) : null;
+            })();
+            const passwordField = !CHAT_ACTIONS[action.operation].password ? '' : reauth(freshSince === null
+                ? html `<label>Your password<input type="password" name="token" autocomplete="current-password" required></label>`
+                : html `<label>Your password<input type="password" name="token" autocomplete="current-password"></label><p class="approval-password-note" data-approval-fresh>Your password from ${whenTime(freshSince.toISOString())} is remembered on this computer — leave this blank to approve with it, or type it again.</p>`);
+            const content = html `<section class="shared-action"><h1>${action.title}</h1>${evidenceLink}${terms}${postForm(`/chat/proposal/${id}/confirm`, html `<label class="arm"><input type="checkbox" name="confirm" value="yes" required>I confirm this exact action</label>${passwordField}<button>${CHAT_ACTIONS[action.operation].label}</button>`, { returnTo: '/chat', hidden: { nonce: review.nonce } })}</section>`;
             return sendScreen(response, 200, screen('Review action', content, { chrome: chromeFor(action.repo, 'chat') }));
         }
         catch (error) {
@@ -665,6 +682,22 @@ export function createChatHandlers(runtime) {
         leadSaid.delete(who.session.csrf);
         return redirect(response, back);
     }
+    /** Remove a message still waiting in the person's lead queue: theirs only, only while it waits; its words are forgotten. */
+    async function leadQueuedRemove(ctx) {
+        const { url, who, request, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.leadQueuedRemove);
+        if (who.via !== "cookie")
+            return refuse(response, who, 403, "the lead is a browser surface");
+        const wantsJson = String(request.headers["accept"] ?? "").includes("application/json");
+        const back = safeChatReturn(body.get("return"));
+        const outcome = runtime.personalQueue.queue.remove(who.name, Number(url.pathname.split("/")[3]), now);
+        const words = outcome === "removed" ? "Removed. It won't be sent." : outcome === "started" ? "Already sent: it started before it could be removed." : "That message isn't waiting.";
+        if (wantsJson)
+            return respond(response, outcome === "not-found" ? 404 : outcome === "started" ? 409 : 200, "application/json", JSON.stringify({ ok: outcome === "removed", said: words }));
+        if (outcome === "not-found")
+            return refuse(response, who, 404, words, back);
+        return redirect(response, chatReturnWithSaid(back, words));
+    }
     async function leadStop(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.leadStop);
@@ -722,7 +755,12 @@ export function createChatHandlers(runtime) {
                 noteLead(who.session.csrf, null, "that proposal was already acted on");
             return redirect(response, chatReturnWithLatest(back));
         }
-        const outcome = confirmLeadProposal(store, principal, id, now, { chatProvider: teamChatProvider, confirm: body.get("confirm") === "yes", via: "web", evidenceRoot, ...(body.has("nonce") ? { actionReview: { nonce: body.get("nonce") ?? "", password: body.get("token") ?? "" } } : {}) });
+        // A scope approval's re-check is spent only if the whole confirmation commits (one transaction: the proposal's
+        // settlement included). Any other action spends it whatever comes of it (its effects aren't all in the database).
+        const confirmIt = () => confirmLeadProposal(store, principal, id, now, { chatProvider: teamChatProvider, confirm: body.get("confirm") === "yes", via: "web", evidenceRoot, ...(body.has("nonce") ? { actionReview: { nonce: body.get("nonce") ?? "", password: body.get("token") ?? "" } } : {}) });
+        const proposed = store.getLeadProposal(id);
+        const approving = proposed?.kind === "action" && sharedActionPayload(proposed.payload)?.operation === "scope_approve";
+        const outcome = approving ? spendingOnlyOnSuccess(confirmIt, result => !result.ok || ("already" in result && result.already === true)) : confirmIt();
         if (cardJson) {
             if (!outcome.ok)
                 return cardAnswer(outcome.reason === "standing" ? 403 : outcome.reason === "not-yours" ? 404 : 409, false, outcome.said);
@@ -839,10 +877,12 @@ export function createChatHandlers(runtime) {
         // its own terms and the thread shows why.
         const leadSession = who.role === "approver" ? store.activeLeadSession(who.name) : null;
         if (leadSession !== null) {
-            const requestId = body.get("request");
-            if (requestId !== null && (body.getAll("request").length !== 1 || body.getAll("request-session").length !== 1 || body.get("request-session") !== String(leadSession.id))) {
+            const sentRequest = body.get("request");
+            if (sentRequest !== null && (body.getAll("request").length !== 1 || body.getAll("request-session").length !== 1 || body.get("request-session") !== String(leadSession.id))) {
                 return said(409, "This conversation changed. Reload it before sending your message.");
             }
+            // Every send has one identity (a form without one gets it here): a message that waits is known by it.
+            const requestId = sentRequest ?? randomBytes(16).toString("hex");
             const principal = leadPrincipal(who);
             if (principal === null)
                 return wantsJson ? said(403, "your approver standing changed — sign in again") : refuse(response, who, 403, "your approver standing changed — sign in again", back);
@@ -851,15 +891,50 @@ export function createChatHandlers(runtime) {
                 return said(400, `a message is 1 to ${LEAD_MESSAGE_MAX_CHARS} characters`, leadSession.id);
             }
             const opened = store.openLeadThread(who.name, principal.ceilingDigest, now, chatScopeOf(focusTask, chatProject));
-            const onProgress = beginLiveTurn(opened.thread.id);
-            void runLeadTurn({ store, who: principal, session: leadSession, thread: opened.thread, config: enabled.config, key: enabled.key, message, onProgress, channel: "console", ...(requestId === null ? {} : { requestId }), ...(focusTask === null && chatProject !== null ? { context: `Current project: ${projectName(chatProject)} (${chatProject}). Keep this conversation about that project unless the operator explicitly asks to broaden it; use it as the repo for project tools.` } : {}), ...(focusTask === null ? {} : { context: `Current task: ${focusTask.id}. Read it with get_task before answering or proposing changes. Read its currentExecution next and bind new actions to that exact execution. Never replace the target of a prior proposal with a newer revision. Keep this turn about that task unless the operator explicitly asks to broaden it.${resultContext}${modeContext}` }), fetcher: chatFetcher, ...(options.subscriptionChatRunner === undefined ? {} : { subscriptionRunner: options.subscriptionChatRunner }), clock, evidenceRoot })
+            // The personal queue (docs/plans/lead-message-queue.md): while this person's lead is busy, or something of theirs
+            // waits, the message waits its turn instead of being refused. A request the engine already took replays as before.
+            const queueContext = focusTask !== null
+                ? { task: focusTask.id, ...(viewedRun === null ? {} : { result: viewedRun.id }), ...(modeValue === null ? {} : { mode: modeValue }) }
+                : chatProject !== null ? { project: chatProject } : null;
+            const queueIt = () => runtime.personalQueue.queue.sendOrQueue({ approver: who.name, approverGeneration: principal.generation, session: leadSession.id,
+                ceilingDigest: principal.ceilingDigest, thread: opened.thread.id, text: message, requestId, context: queueContext }, clock());
+            // A message the engine would refuse for a secret never waits (nothing stored): it goes straight to the engine,
+            // which refuses it before any row exists, exactly as when the lead is free.
+            if (scanForSecrets(message).length === 0 && store.leadRequestReceipt(leadSession.id, requestId) === null) {
+                const decided = queueIt();
+                if (decided.kind === "conflict")
+                    return said(409, "This message was already sent with different words. Reload the conversation to see it.", leadSession.id);
+                if (decided.kind === "full")
+                    return said(409, decided.message, leadSession.id);
+                if (decided.kind === "queued") {
+                    runtime.personalQueue.kick();
+                    return wantsJson
+                        ? respond(response, 202, "application/json", JSON.stringify({ ok: true, queued: true, session: leadSession.id, task: focusTask?.id ?? "", ...(chatProject === null ? {} : { project: chatProject }), request: requestId, message: decided.row.message, status: decided.row.status }))
+                        : redirect(response, chatReturnWithLatest(back));
+                }
+            }
+            // The live display starts once this message holds a turn: a refusal (a secret, a turn still running) never blanks
+            // the display of a reply that is still running in the same conversation.
+            let onProgress;
+            const ended = (ok) => { if (onProgress !== undefined)
+                endLiveTurn(opened.thread.id, ok, onProgress); };
+            // Detached work never carries this request's browser session (Passwordless reads it): it runs with no session facts.
+            void freshFacts.run(null, () => runLeadTurn({ store, who: principal, session: leadSession, thread: opened.thread, config: enabled.config, key: enabled.key, message,
+                onAdmitted: () => { onProgress = beginLiveTurn(opened.thread.id); }, onProgress: event => onProgress?.(event), channel: "console", requestId, ...(focusTask === null && chatProject !== null ? { context: `Current project: ${projectName(chatProject)} (${chatProject}). Keep this conversation about that project unless the operator explicitly asks to broaden it; use it as the repo for project tools.` } : {}), ...(focusTask === null ? {} : { context: `Current task: ${focusTask.id}. Read it with get_task before answering or proposing changes. Read its currentExecution next and bind new actions to that exact execution. Never replace the target of a prior proposal with a newer revision. Keep this turn about that task unless the operator explicitly asks to broaden it.${resultContext}${modeContext}` }), fetcher: chatFetcher, ...(options.subscriptionChatRunner === undefined ? {} : { subscriptionRunner: options.subscriptionChatRunner }), clock, evidenceRoot }))
                 .then(outcome => {
+                // Lost a race to another turn of this person's between deciding and admission: it waits instead of being refused.
+                if (!outcome.ok && "refused" in outcome && (outcome.refused === "concurrent" || outcome.refused === "backlog") && queueIt().kind === "queued") {
+                    ended(false);
+                    return;
+                }
                 // A turn that saved its outcome in the thread (one stopped at its deadline) is said there, once.
                 if (!outcome.ok && !("saved" in outcome && outcome.saved === true))
                     noteLead(who.session.csrf, "turn" in outcome ? outcome.turn : null, outcome.message);
-                endLiveTurn(opened.thread.id, outcome.ok);
+                ended(outcome.ok);
             })
-                .catch(() => { noteLead(who.session.csrf, null, "the turn failed unexpectedly"); endLiveTurn(opened.thread.id, false); });
+                .catch(() => { noteLead(who.session.csrf, null, "the turn failed unexpectedly"); ended(false); })
+                // A personal turn ended: the next waiting message (this person's or anyone's) may start now.
+                .finally(() => runtime.personalQueue.kick());
             // Accepted for the engine, not received: the receipt is written by
             // the turn's own admission, and the status poll is where the page
             // learns of it — the same road as after a native send.
@@ -877,10 +952,6 @@ export function createChatHandlers(runtime) {
         }
         // The password, typed again, on EVERY message (v2 ruling 2): chat is
         // spend, and a seven-day cookie is not a spend credential.
-        const password = body.get("token") ?? "";
-        if (password === "" || !authenticateApprover(who, password).ok) {
-            return redirect(response, `/chat?said=${encodeURIComponent("chat spends — your password, typed again, with every message")}`);
-        }
         const message = (body.get("message") ?? "").trim();
         if (message === "" || message.length > 2_000) {
             return redirect(response, `/chat?said=${encodeURIComponent("a message is 1 to 2000 characters")}`);
@@ -912,16 +983,28 @@ export function createChatHandlers(runtime) {
         if (disallowed !== null)
             return redirect(response, `/chat?said=${encodeURIComponent(disallowed)}`);
         const reserved = worstCaseForPrice(enabled.price, Buffer.byteLength(composed.body, "utf8"));
-        const opened = store.openChatTurn({
-            approver: who.name,
-            credentialKey: enabled.credentialKey,
-            provider: enabled.config.provider,
-            model: enabled.config.model,
-            reservedMicrousd: reserved,
-            dailyTurns: enabled.config.dailyTurns,
-            weeklyCeilingMicrousd: enabled.config.weeklyCeilingMicrousd,
-            deadlineMs: TURN_WALL_CLOCK_MS + 10_000,
-        }, now);
+        // The password comes last, right where the turn opens: every refusal above leaves an explicit re-check unspent,
+        // and a turn that doesn't open (a cap, a budget) puts it back.
+        const password = body.get("token") ?? "";
+        const opened = spendingOnlyOnSuccess(() => {
+            // Typed now, or (cockpit B2) a password or explicit provider re-check given on this session, on a direct local
+            // request, within its window. An ordinary provider sign-in never starts that window.
+            if (!withFreshness("chat-send", () => authenticateApprover(who, password)).ok)
+                return null;
+            return store.openChatTurn({
+                approver: who.name,
+                credentialKey: enabled.credentialKey,
+                provider: enabled.config.provider,
+                model: enabled.config.model,
+                reservedMicrousd: reserved,
+                dailyTurns: enabled.config.dailyTurns,
+                weeklyCeilingMicrousd: enabled.config.weeklyCeilingMicrousd,
+                deadlineMs: TURN_WALL_CLOCK_MS + 10_000,
+            }, now);
+        }, result => result === null || !result.ok);
+        if (opened === null) {
+            return redirect(response, `/chat?said=${encodeURIComponent("chat spends — your password, typed again, with every message")}`);
+        }
         if (!opened.ok) {
             const said = opened.reason === "latched"
                 ? "a turn with unknown cost blocks this credential — acknowledge it below first"
@@ -1046,6 +1129,9 @@ export function createChatHandlers(runtime) {
         const wanted = values[0] ?? "";
         return values.length === 1 && visible(wanted) && managedRepos().includes(wanted) ? wanted : undefined;
     }
+    /** Which live display each progress handle started: ending a turn ends only its own display (a turn stopped from
+     * another window that settles late can never end the next turn's). */
+    const progressOf = new WeakMap();
     function beginLiveTurn(thread) {
         const previous = liveTurns.get(thread);
         if (previous?.expiry)
@@ -1055,7 +1141,7 @@ export function createChatHandlers(runtime) {
         // A page that has this conversation open follows the reply (GET /live, its chat room).
         runtime.liveTurnStarted(thread);
         const current = () => live.steps.at(-1) ?? (live.steps.push({ tools: [], toolCalls: [], text: "" }), live.steps.at(-1));
-        return event => {
+        const progress = (event) => {
             if (live.done)
                 return;
             if (event.kind === "step")
@@ -1078,11 +1164,15 @@ export function createChatHandlers(runtime) {
             for (const listener of live.listeners)
                 listener();
         };
+        progressOf.set(progress, live);
+        return progress;
     }
-    function endLiveTurn(thread, ok) {
+    function endLiveTurn(thread, ok, progress) {
         const live = liveTurns.get(thread);
         if (live === undefined || live.done)
             return;
+        if (progress !== undefined && progressOf.get(progress) !== live)
+            return;
         live.done = true;
         live.ok = ok;
         for (const listener of live.listeners)
@@ -1388,6 +1478,7 @@ export function createChatHandlers(runtime) {
         "chat.mate-follow": leadFollow,
         "chat.mate-end": leadEnd,
         "chat.mate-stop": leadStop,
+        "chat.queued-remove": leadQueuedRemove,
         "chat.proposal.confirm": chatProposalAct("confirm"),
         "chat.proposal.dismiss": chatProposalAct("dismiss"),
         "coordinator.proposal.confirm": coordinatorProposalAct("confirm"),

package/dist/server/chrome.d.ts

@@ -134,7 +134,8 @@ export declare function regionScript(regionId: string, fragmentName: string, pat
  * protocol, not an HTML fragment — the response is raw sanitized text and
  * the ONLY sink is textContent, so nothing here can become markup. One
  * request in flight, visibility-paused, stops on `final`, and a `replaced`
- * answer restarts from zero with a visible line — never a silent re-read.
+ * answer — or another file's generation — restarts from zero with a visible
+ * line, never a silent re-read.
  */
 export declare function transcriptScript(path?: string, elementId?: string): string;
 /**
@@ -170,6 +171,10 @@ export type Screen = {
     /** Render sensitive even when no password field is visible — one-time
      * secrets and judgment calls the classifier cannot see. */
     forceSensitive?: boolean;
+    /** The page's sensitivity, said explicitly (cockpit §2, R14): true for a page that asks for a password or shows a
+     * secret even when no password field renders (an SSO step-up, a fresh-password grant); false only where a page is
+     * known safe. Unset: judged from the page as authored. A sensitive page has no sidebar states and no summary room. */
+    sensitive?: boolean;
     /** Structured conversation; complex guarded forms stay native islands. */
     workspace?: Partial<Pick<BrowserWorkspace, 'conversation' | 'team' | 'focus' | 'result' | 'notices' | 'view' | 'firstRun' | 'phone' | 'home'>> & {
         /** Markup the workspace shows in place; it becomes bytes where the page's JSON is written (sendScreen). */

package/dist/server/chrome.js

@@ -223,9 +223,17 @@ export function regionScript(regionId, fragmentName, path) {
         // A fragment that marks itself final stops: a finished or abandoned build is not fetched again.
         `.then(function(){busy=false;tell();if(region.querySelector("[data-region-stop]")){stopped=true;if(stamp)stamp.textContent="";return;}if(again)refresh();});}` +
         `function heard(name){if(name==="change"||name==="reload")refresh();}` +
-        `if(document.documentElement.dataset.live==="1"){addEventListener("so:live",function(e){heard(e.detail&&e.detail.event);});}` +
-        `else if(typeof EventSource!=="undefined"){var es=new EventSource("/live?room=workspace");` +
+        // On a workspace page the page's one stream (browser/live.ts) carries the workspace room: ask it, never open a second.
+        `function mine(e){var d=e.detail;if(d&&(d.room==="workspace"||d.room===null))heard(d.event);}` +
+        `if(document.getElementById("standing-orders-workspace")){(window.__soLiveRooms=window.__soLiveRooms||[]).push("workspace");addEventListener("so:live",mine);}` +
+        `else if(document.documentElement.dataset.live==="1"){addEventListener("so:live",mine);}` +
+        // Refused (signed out, access lost): stop instead of reconnecting at once into a request that can't sign in, and
+        // listen again in 30 s, as the page's own stream does (browser/live.ts RETRY_MS).
+        `else if(typeof EventSource!=="undefined"){var listen=function(){var es=new EventSource("/live?room=workspace");` +
         `es.addEventListener("change",function(){heard("change");});es.addEventListener("reload",function(){heard("reload");});` +
+        // A retry the server answers with an error (still signed out) is given up by the browser: try again later too.
+        `var again=function(){es.close();setTimeout(listen,30000);};` +
+        `es.addEventListener("ended",again);es.addEventListener("error",function(){if(es.readyState===2)again();});};listen();` +
         `document.addEventListener("visibilitychange",function(){if(!document.hidden)refresh();});}` +
         `})();`);
 }
@@ -234,23 +242,24 @@ export function regionScript(regionId, fragmentName, path) {
  * protocol, not an HTML fragment — the response is raw sanitized text and
  * the ONLY sink is textContent, so nothing here can become markup. One
  * request in flight, visibility-paused, stops on `final`, and a `replaced`
- * answer restarts from zero with a visible line — never a silent re-read.
+ * answer — or another file's generation — restarts from zero with a visible
+ * line, never a silent re-read.
  */
 export function transcriptScript(path, elementId = "live-transcript") {
     const base = path === undefined ? "location.pathname" : JSON.stringify(path);
     return (`(function(){var out=document.getElementById(${JSON.stringify(elementId)});if(!out)return;` +
-        `var from=0,busy=false,stopped=false;` +
+        `var from=0,gen="",inkey=false,ktail="",busy=false,stopped=false;` +
         `function near(){return out.scrollHeight-out.scrollTop-out.clientHeight<40;}` +
         `function go(){if(stopped)return;if(busy||document.hidden){later();return;}busy=true;` +
-        `fetch(${base}+"?fragment=transcript&from="+from,{redirect:"manual",cache:"no-store"})` +
+        `fetch(${base}+"?fragment=transcript&from="+from+(gen?"&gen="+encodeURIComponent(gen):"")+(inkey?"&inkey=1":"")+(ktail?"&ktail="+encodeURIComponent(ktail):""),{redirect:"manual",cache:"no-store"})` +
         `.then(function(r){if(r.type==="opaqueredirect"||r.status===401||r.status===403){stopped=true;return null;}` +
         `if(r.status===409)return{error:"replaced"};return r.ok?r.json():null;})` +
         `.then(function(d){busy=false;if(d===null){later();return;}if(stopped)return;` +
-        `if(d.error==="replaced"){from=0;out.textContent="[the view restarted]\\n";later();return;}` +
+        `if(d.error==="replaced"){from=0;gen="";inkey=false;ktail="";out.textContent="[the view restarted]\\n";later();return;}` +
         `if(d.error){stopped=true;return;}` +
         `var stick=near();` +
         `if(typeof d.text==="string"&&d.text!==""){out.appendChild(document.createTextNode(d.text));if(stick)out.scrollTop=out.scrollHeight;}` +
-        `if(typeof d.nextOffset==="number"&&d.nextOffset>=from){from=d.nextOffset;}` +
+        `if(typeof d.nextOffset==="number"&&d.nextOffset>=from){from=d.nextOffset;}if(typeof d.gen==="string")gen=d.gen;if(typeof d.inKey==="boolean")inkey=d.inKey;if(typeof d.keyTail==="string")ktail=d.keyTail;` +
         `if(d.final===true){stopped=true;var m=document.getElementById(${JSON.stringify(`${elementId}-state`)});` +
         `if(m)m.textContent="the agent finished — the record on this page is the story";return;}` +
         `later();})` +
@@ -680,6 +689,8 @@ export const NAV_ICONS = {
 export function workToolRows(scoped = false, _offersChat = false, offersCode = false) {
     const rows = [
         // D5: coding sessions are deprecated; /code still opens this release, but nothing links to it.
+        // Live terminals: an operator's own Claude Code, Codex or shell, in a real terminal (docs/plans/live-terminal.md).
+        ...(offersCode ? [{ key: "code", href: "/term", label: "Live", hint: "your own terminals: Claude Code, Codex or a shell" }] : []),
         { key: "inbox", href: "/inbox", label: "Inbox", hint: "questions, approvals, and repairs to act on" },
         { key: "board", href: "/board", label: "Board", hint: "lanes by state, with the order view" },
         { key: "tasks", href: "/tasks", label: "Task list", hint: "everything, filterable by state" },

package/dist/server/console.css

@@ -182,7 +182,7 @@
      the act that resolves the screen. Cards, frames, and seals are neutral. */
   .badge-open, .badge-parked { color: var(--foreground); }
   .count {
-    min-width: 1.25rem; padding-inline: .35rem; border-radius: 9999px;
+    min-width: 1.25rem; padding-inline: .35rem; border-radius: var(--so-radius-full);
   }
   .count.badge-open {
     background: var(--brand-soft); color: var(--brand);
@@ -627,7 +627,7 @@
   .requirement-heading .badge { margin: 0; white-space: normal; }
   .requirement-statement { margin: .5rem 0; line-height: 1.55; white-space: pre-wrap; }
   .requirement-review { margin: .4rem 0; font-size: .78rem; color: var(--muted-foreground); }
-  .requirement-warning { margin: .65rem 0; padding: .6rem .75rem; border: 1px solid color-mix(in srgb, var(--warning) 35%, var(--border)); border-radius: 8px; background: var(--warning-soft); font-size: .8125rem; }
+  .requirement-warning { margin: .65rem 0; padding: .6rem .75rem; border: 1px solid color-mix(in srgb, var(--warning) 35%, var(--border)); border-radius: var(--so-radius-md); background: var(--warning-soft); font-size: .8125rem; }
   .requirement-warning strong { font-size: .78rem; }
   .requirement-warning p { margin: .3rem 0 0; }
   .requirement-issues { font-size: .8125rem; }
@@ -663,7 +663,7 @@
 
   .filters { font-size: 0.8125rem; color: var(--muted-foreground); }
   .filters a, .filters strong {
-    display: inline-block; padding: .25rem .625rem; border-radius: 9999px; text-decoration: none;
+    display: inline-block; padding: .25rem .625rem; border-radius: var(--so-radius-full); text-decoration: none;
     color: var(--muted-foreground); font-weight: 500;
   }
   .filters strong { background: var(--muted); color: var(--foreground); }
@@ -884,13 +884,18 @@
   }
   .banner .badge { margin-right: .5rem; }
   /* Chat in `toolroll demo`: the scripted lead's conversation. */
-  .demo-chat { display: flex; flex-direction: column; gap: 1rem; max-width: 46rem; margin: 0 auto; padding-bottom: 1rem; }
+  .demo-chat { display: flex; flex-direction: column; gap: 1rem; max-width: 46rem; min-height: 100%; margin: 0 auto; }
+  .demo-thread { flex: 1 0 auto; }
+  /* Empty: the greeting, the suggestions and the composer sit together in the middle, as in any modern chat. */
+  .demo-chat--empty { justify-content: center; min-height: min(70vh, 40rem); }
+  .demo-chat--empty .demo-thread { flex: 0 0 auto; }
   .demo-thread { display: flex; flex-direction: column; gap: 1.25rem; }
   .demo-turn { display: flex; flex-direction: column; gap: .75rem; scroll-margin-top: 1rem; }
   .demo-said p { margin: 0; }
-  .demo-you { align-self: flex-end; max-width: min(34rem, 85%); background: var(--so-ink); color: var(--so-paper); border-radius: .875rem .875rem .25rem .875rem; padding: .55rem .85rem; overflow-wrap: anywhere; }
+  .demo-you { align-self: flex-end; max-width: min(34rem, 85%); background: var(--so-soft); color: var(--so-ink); border: 1px solid var(--so-line); border-radius: 1rem 1rem .3rem 1rem; padding: .5rem .85rem; overflow-wrap: anywhere; }
   .demo-lead { max-width: 40rem; }
-  .demo-who { font-size: .75rem; font-weight: 600; color: var(--so-muted); margin-bottom: .15rem !important; }
+  .demo-who { display: flex; align-items: center; gap: .45rem; font-size: .8125rem; font-weight: 600; color: var(--so-ink); margin-bottom: .3rem !important; }
+  .demo-avatar { display: inline-grid; place-items: center; width: 1.25rem; height: 1.25rem; border-radius: 50%; background: var(--so-ink); color: var(--so-paper); font-size: .6875rem; font-weight: 700; }
   .demo-chat .card { margin: 0; padding: 1rem 1.125rem; }
   .demo-chat .card h2 { font-size: .9375rem; margin: .1rem 0 .4rem; }
   .demo-chat .card h3 { font-size: .75rem; font-weight: 600; color: var(--so-muted); margin: .75rem 0 .25rem; }
@@ -938,13 +943,22 @@
   .demo-evidence figure { margin: 0 0 .5rem; }
   .demo-evidence img { display: block; width: 100%; height: auto; border: 1px solid var(--so-line); border-radius: .5rem; }
   .demo-evidence figcaption { margin-top: .35rem; }
-  .demo-hint { padding: 1.25rem 0 .25rem; }
-  .demo-hint-title { font-size: .9375rem; font-weight: 600; margin: 0 0 .75rem; }
-  .demo-suggestions { display: flex; flex-wrap: wrap; gap: .5rem; margin: 0; }
-  .demo-suggestions button { min-height: 2.5rem; border-radius: 999px; padding: .35rem .95rem; }
-  .demo-composer { position: sticky; bottom: 0; padding: .75rem 0 .25rem; background: var(--so-paper); flex-direction: row; align-items: flex-end; }
-  .demo-chat .demo-composer textarea { flex: 1 1 auto; width: auto; min-width: 0; min-height: 2.75rem; }
-  .demo-chat .demo-composer button { flex: none; width: auto; min-height: 2.75rem; padding-inline: 1.1rem; }
+  .demo-hint { text-align: center; padding: 0 0 .5rem; }
+  .demo-hint-title { font-size: 1.375rem; font-weight: 600; letter-spacing: -.01em; margin: 0 0 .35rem; }
+  .demo-hint-sub { color: var(--so-muted); font-size: .875rem; margin: 0 0 1rem; }
+  .demo-suggestions { display: flex; flex-wrap: wrap; justify-content: center; gap: .5rem; margin: 0; padding: 0; border: 0; background: none; }
+  .demo-chat .demo-suggestions button { min-height: 2.25rem; border-radius: 999px; padding: .3rem .9rem; border: 1px solid var(--so-line); background: var(--so-paper); color: var(--so-muted); font-weight: 500; box-shadow: none; }
+  @media (hover: hover) and (pointer: fine) { .demo-chat .demo-suggestions button:hover { color: var(--so-ink); border-color: var(--so-input-line); background: var(--so-soft); } }
+  /* The composer: one card docked at the bottom, a borderless box that grows, the hint and a round send inside. */
+  .demo-composer { position: sticky; bottom: 0; margin: 0; padding: .75rem 0 1rem; border: 0; border-radius: 0; box-shadow: none; background: linear-gradient(to bottom, transparent, var(--so-paper) 1.25rem); }
+  .demo-composer-card { display: flex; flex-direction: column; gap: .35rem; padding: .7rem .7rem .55rem .9rem; border: 1px solid var(--so-input-line); border-radius: 1rem; background: var(--so-paper); box-shadow: 0 1px 2px rgba(0,0,0,.04), 0 4px 16px rgba(0,0,0,.04); transition: border-color .12s var(--so-ease-out), box-shadow .12s var(--so-ease-out); }
+  .demo-composer-card:focus-within { border-color: var(--so-muted); box-shadow: 0 0 0 3px var(--so-soft); }
+  .demo-chat .demo-composer textarea { width: 100%; min-height: 1.6rem; max-height: 12rem; field-sizing: content; padding: .15rem 0; border: 0; border-radius: 0; background: none; box-shadow: none; resize: none; font-size: .9375rem; line-height: 1.55; }
+  .demo-chat .demo-composer textarea:focus-visible { outline: 0; }
+  .demo-composer-bar { display: flex; align-items: center; justify-content: space-between; gap: .75rem; }
+  .demo-composer-bar > span { color: var(--so-muted); font-size: .75rem; }
+  .demo-chat .demo-composer .demo-send { display: inline-grid; place-items: center; flex: none; width: 2rem; min-height: 2rem; height: 2rem; padding: 0; border-radius: 50%; }
+  .demo-composer-card:has(textarea:placeholder-shown) .demo-send { opacity: .35; }
   .banner a { color: var(--muted-foreground); }
   .sign-in-banner form { display: inline; margin: 0 0 0 .5rem; padding: 0; border: 0; background: transparent; }
 
@@ -1190,26 +1204,26 @@
      rows, who builds in one line, one Approve & start beside the password,
      and every other signed term in one Details fold at the end. Sentence
      case, Geist, 12px and up; prose capped at 75ch. */
-  .approval-sheet { display: grid; gap: 16px; margin: 0; padding: 20px; border: 1px solid var(--border); border-radius: 10px; background: var(--card); }
+  .approval-sheet { display: grid; gap: var(--so-space-lg); margin: 0; padding: var(--so-space-xl); border: 1px solid var(--border); border-radius: var(--so-radius-card); background: var(--card); }
   .approval-sheet.approve-form > :not(input) { margin: 0; }
   .approval-sheet-title { margin: 0; font-size: 15px; font-weight: 600; line-height: 1.4; letter-spacing: -.01em; }
   .approval-revision, .approval-note { max-width: 75ch; font-size: 14px; line-height: 1.6; overflow-wrap: anywhere; }
   .approval-note { color: var(--muted-foreground); }
   .approval-rows { display: grid; gap: 14px; margin: 0; }
-  .approval-row { display: grid; grid-template-columns: 7.5rem minmax(0, 1fr); gap: 16px; }
+  .approval-row { display: grid; grid-template-columns: 7.5rem minmax(0, 1fr); gap: var(--so-space-lg); }
   .approval-row dt { margin: 0; color: var(--muted-foreground); font-size: 13px; font-weight: 500; line-height: 1.6; }
   .approval-row dd { min-width: 0; max-width: 75ch; margin: 0; font-size: 14px; line-height: 1.6; overflow-wrap: anywhere; }
   .approval-row dd p, .approval-sheet .approval-goal { margin: 0; font-size: 14px; line-height: 1.6; }
-  .approval-row dd :is(ol, ul) { display: grid; gap: 4px; margin: 0; padding-left: 1.25rem; }
+  .approval-row dd :is(ol, ul) { display: grid; gap: var(--so-space-xs); margin: 0; padding-left: 1.25rem; }
   .approval-row dd ol + p { margin-top: 6px; }
   .approval-row dd .approval-paths { margin-top: 2px; padding-left: 0; }
   .approval-row dd .approval-paths li { font-size: 13px; }
-  .approval-amendment { max-width: 75ch; padding: 12px 14px; border-radius: 8px; background: var(--muted); font-size: 14px; line-height: 1.55; overflow-wrap: anywhere; }
+  .approval-amendment { max-width: 75ch; padding: var(--so-space-md) 14px; border-radius: var(--so-radius-md); background: var(--muted); font-size: 14px; line-height: 1.55; overflow-wrap: anywhere; }
   .approval-amendment p { margin: 0; }
-  .approval-amendment ul { display: grid; gap: 4px; margin: 6px 0; padding-left: 1.25rem; }
+  .approval-amendment ul { display: grid; gap: var(--so-space-xs); margin: 6px 0; padding-left: 1.25rem; }
   .agents-size { margin: 0; font-size: 13px; line-height: 1.5; }
   .approval-who { max-width: 75ch; color: var(--muted-foreground); font-size: 13px; line-height: 1.5; }
-  .approval-act { display: grid; grid-template-columns: minmax(0, 20rem) auto; justify-content: start; align-items: center; gap: 8px; }
+  .approval-act { display: grid; grid-template-columns: minmax(0, 20rem) auto; justify-content: start; align-items: center; gap: var(--so-space-sm); }
   .approval-password { margin: 0; }
   .approval-act input[type=password] { margin: 0; font-family: var(--font-sans); }
   .approval-act button { margin: 0; min-height: 2.125rem; white-space: nowrap; }
@@ -1218,7 +1232,7 @@
   .approval-sheet .approval-allowing + .approval-you-check { margin-top: -10px; }
   .approval-act > button { grid-column: 2; grid-row: 1; }
   .approval-password-note { grid-column: 1; grid-row: 2; margin: 0; color: var(--muted-foreground); font-size: 13px; line-height: 1.5; }
-  .approval-secondary { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+  .approval-secondary { display: flex; flex-wrap: wrap; align-items: center; gap: var(--so-space-sm); }
   details.approval-edit, details.approval-edit[open] { margin: 0; padding: 0; border: 0; border-radius: 0; background: none; }
   /* Edit plan, in place: the rows become fields where they stood; the
      approval act and Details step aside until it is saved or cancelled. */
@@ -1233,32 +1247,32 @@
   .approval-secondary:has(> .approval-edit[open]) > a { display: none; }
   .approval-editor { display: grid; gap: 14px; }
   .approval-editor .problem { margin: 0; }
-  .approval-field { display: grid; gap: 4px; min-width: 0; margin: 0; padding: 0; border: 0; }
+  .approval-field { display: grid; gap: var(--so-space-xs); min-width: 0; margin: 0; padding: 0; border: 0; }
   .approval-field-label { padding: 0; color: var(--muted-foreground); font-size: 13px; font-weight: 500; line-height: 1.6; }
   .approval-field-hint { color: var(--muted-foreground); font-size: 12px; line-height: 1.5; }
   .approval-field textarea, .approval-field input[type=text] { width: 100%; max-width: 75ch; margin: 0; font-family: var(--font-sans); font-size: 14px; line-height: 1.55; }
   .approval-requirements { display: grid; gap: 6px; margin: 2px 0 0; padding: 0; list-style: none; }
-  .approval-edit-act { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; }
+  .approval-edit-act { display: flex; flex-wrap: wrap; align-items: center; gap: var(--so-space-sm); }
   .approval-edit-act button { margin: 0; min-height: 2.125rem; white-space: nowrap; }
-  .approval-link { display: inline-flex; align-items: center; min-height: 32px; padding: 0 12px; border: 1px solid var(--border); border-radius: 8px; background: var(--card); color: var(--foreground); font-size: 13px; font-weight: 500; text-decoration: none; }
+  .approval-link { display: inline-flex; align-items: center; min-height: 32px; padding: 0 var(--so-space-md); border: 1px solid var(--border); border-radius: var(--so-radius-md); background: var(--card); color: var(--foreground); font-size: 13px; font-weight: 500; text-decoration: none; }
   .approval-secondary > .approval-link:not(:first-child) { border-color: transparent; background: none; color: var(--muted-foreground); }
   @media (hover: hover) and (pointer: fine) { .approval-link:hover { background: var(--muted); color: var(--foreground); } }
   details.approval-details { margin: 0; padding: 0; border: 0; border-top: 1px solid var(--border); border-radius: 0; background: none; }
   details.approval-details[open] { padding-bottom: 0; }
-  .approval-details > summary { display: flex; align-items: center; min-height: 40px; padding: 4px 0 0; font-size: 13px; }
-  .approval-detail { max-width: 75ch; margin: 12px 0 0; font-size: 13px; line-height: 1.55; overflow-wrap: anywhere; }
-  .approval-detail h3 { margin: 0 0 4px; font-size: 13px; font-weight: 600; letter-spacing: 0; text-transform: none; }
-  .approval-detail p, .approval-detail ul, .approval-detail dl { margin: 4px 0; }
+  .approval-details > summary { display: flex; align-items: center; min-height: 40px; padding: var(--so-space-xs) 0 0; font-size: 13px; }
+  .approval-detail { max-width: 75ch; margin: var(--so-space-md) 0 0; font-size: 13px; line-height: 1.55; overflow-wrap: anywhere; }
+  .approval-detail h3 { margin: 0 0 var(--so-space-xs); font-size: 13px; font-weight: 600; letter-spacing: 0; text-transform: none; }
+  .approval-detail p, .approval-detail ul, .approval-detail dl { margin: var(--so-space-xs) 0; }
   .approval-detail ul { padding-left: 1.25rem; }
   .approval-detail .revision-card { margin: 0; padding: 0; border: 0; background: none; }
-  .approval-roles { display: grid; gap: 8px; }
-  .approval-roles > div { display: grid; grid-template-columns: 6rem minmax(0, 1fr); gap: 12px; }
+  .approval-roles { display: grid; gap: var(--so-space-sm); }
+  .approval-roles > div { display: grid; grid-template-columns: 6rem minmax(0, 1fr); gap: var(--so-space-md); }
   .approval-roles dt { color: var(--muted-foreground); font-weight: 500; }
   .approval-roles dd { margin: 0; }
   .approval-roles dd ul { margin: 2px 0 0; color: var(--muted-foreground); }
   .chat-plan .approval-sheet { padding: 0; border: 0; background: none; }
   @media (max-width: 760px) {
-    .approval-sheet { gap: 12px; padding: 14px; }
+    .approval-sheet { gap: var(--so-space-md); padding: 14px; }
     .approval-row { grid-template-columns: 1fr; gap: 2px; }
     .approval-act { grid-template-columns: 1fr; }
     .approval-act > button, .approval-password-note { grid-column: auto; grid-row: auto; }
@@ -1269,7 +1283,7 @@
       position: sticky; bottom: 0; z-index: 20; margin: 0 -14px; padding: 10px 14px calc(10px + env(safe-area-inset-bottom, 0px));
       border-top: 1px solid var(--border); background: var(--card);
     }
-    .approval-link { min-height: 44px; padding: 0 16px; }
+    .approval-link { min-height: 44px; padding: 0 var(--so-space-lg); }
     .approval-edit[open] > summary { top: 6px; right: 6px; }
     .approval-field textarea, .approval-field input[type=text] { font-size: 16px; }
     .approval-edit-act button { width: 100%; min-height: 44px; font-size: 16px; }
@@ -1719,7 +1733,7 @@
     .tabbar a { position: relative; }
     .tabbar a .dot-badge {
       position: absolute; top: .3125rem; left: calc(50% + .375rem);
-      width: .375rem; height: .375rem; border-radius: 9999px; background: var(--brand);
+      width: .375rem; height: .375rem; border-radius: var(--so-radius-full); background: var(--brand);
     }
     .content > main { padding: 1rem 1rem calc(4.5rem + env(safe-area-inset-bottom, 0rem)); }
     .project-add-card { padding: 1rem; }
@@ -1752,7 +1766,7 @@
     white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
   .stat-card .v { font-size: .75rem; color: var(--muted-foreground); margin-top: .25rem;
     white-space: nowrap; overflow: hidden; text-overflow: ellipsis; }
-  .dot { display: inline-block; width: .5rem; height: .5rem; border-radius: 9999px; flex: none; }
+  .dot { display: inline-block; width: .5rem; height: .5rem; border-radius: var(--so-radius-full); flex: none; }
   .dot-ok { background: var(--success); }
   /* Caution without a claim on the operator: quiet, not magenta. */
   .dot-warn { background: var(--muted-foreground); }
@@ -1787,13 +1801,13 @@
   .sso-step-up { display: inline-flex; align-items: center; min-height: 36px; font-size: .9rem; }
   .sso-step-up[data-sso-step-up="confirmed"] { color: var(--so-success); }
   .sso-step-up[data-sso-step-up="confirmed"]::before { content: "✓"; margin-right: 6px; }
-  .login-shell .login-sso { display: flex; justify-content: center; align-items: center; min-height: 44px; border-radius: 8px; background: var(--so-accent); color: var(--so-on-accent); font-weight: 600; text-decoration: none; margin: 0 0 1rem; }
+  .login-shell .login-sso { display: flex; justify-content: center; align-items: center; min-height: 44px; border-radius: var(--so-radius-md); background: var(--so-accent); color: var(--so-on-accent); font-weight: 600; text-decoration: none; margin: 0 0 1rem; }
   @media (hover: hover) and (pointer: fine) { .login-shell .login-sso:hover { background: var(--so-accent-hover); } }
   .login-shell .login-password > summary { text-align: center; font-size: .875rem; color: var(--muted-foreground); cursor: pointer; margin: 0 0 .75rem; }
   .focus-page { max-width: 40rem; margin: 0 auto; padding: 2rem 1.25rem 3rem; }
   .focus-page .focus-brand { display: inline-flex; margin: 0 0 2.5rem; }
   .focus-page h1 { margin: 0 0 1rem; }
-  .secret-value { overflow-wrap: anywhere; font-size: .95rem; padding: .75rem .875rem; margin: .75rem 0; border: 1px solid var(--border); border-radius: 8px; background: var(--background); user-select: all; }
+  .secret-value { overflow-wrap: anywhere; font-size: .95rem; padding: .75rem .875rem; margin: .75rem 0; border: 1px solid var(--border); border-radius: var(--so-radius-md); background: var(--background); user-select: all; }
 
   @media (max-width: 640px) {
     button, form.option button { min-height: 2.75rem; }
@@ -1845,7 +1859,7 @@
   .lane .hint { margin-top: 0; }
   .lane-count { color: var(--muted-foreground); font-weight: 400; font-variant-numeric: tabular-nums; }
   .lane h2::before {
-    content: ""; width: .375rem; height: .375rem; border-radius: 9999px; flex: none;
+    content: ""; width: .375rem; height: .375rem; border-radius: var(--so-radius-full); flex: none;
     background: var(--muted-foreground); opacity: .55;
   }
   .lane-attention h2::before { background: var(--brand); opacity: 1; }
@@ -1901,7 +1915,7 @@
   .command-metric .value { display: block; margin-top: .25rem; font-size: 1.5rem; font-weight: 600; line-height: 1.15; font-variant-numeric: tabular-nums; font-family: var(--font-mono); }
   .command-metric .label { display: flex; align-items: center; gap: .4rem; font-weight: 500; font-size: .8125rem; }
   .command-metric .label::before {
-    content: ""; width: .375rem; height: .375rem; border-radius: 9999px;
+    content: ""; width: .375rem; height: .375rem; border-radius: var(--so-radius-full);
     background: var(--muted-foreground); flex: none;
   }
   .command-metric .detail { display: block; color: var(--muted-foreground); font-size: .6875rem; margin-top: .18rem; }
@@ -2433,7 +2447,7 @@
   }
   .workspace-stats .pulse-stat b { display: block; color: var(--foreground); font-weight: 600; font-family: var(--font-mono); font-size: 1.125rem; line-height: 1.2; font-variant-numeric: tabular-nums; }
   .workspace-stats .pulse-stat.hot b { color: var(--brand); }
-  .workspace-bar { display: flex; gap: 2px; height: .375rem; margin-top: .625rem; border-radius: 9999px; overflow: hidden; background: var(--muted); }
+  .workspace-bar { display: flex; gap: 2px; height: .375rem; margin-top: .625rem; border-radius: var(--so-radius-full); overflow: hidden; background: var(--muted); }
   .workspace-bar .seg { flex: 1 1 0; }
   .workspace-bar .seg.attention { background: var(--brand); }
   .workspace-bar .seg.building { background: var(--running); }