toolroll 0.9.73 → 0.9.75

package/dist/server/console.css

@@ -172,6 +172,30 @@
     color: color-mix(in srgb, var(--running) 72%, var(--foreground)); border-color: var(--border);
   }
   .badge-cut { background: var(--muted); }
+  /* The status chip (components/ui/badge.tsx `size="chip"`, after ReUI's light badge with a dot): 20px, 6px
+     corners, a soft wash, 11.5px words and a 6px dot. Needs you is the amber wash with its words leaned toward ink
+     (4.5:1); the dot is decoration and the word carries the meaning. */
+  .chip {
+    display: inline-flex; align-items: center; gap: .375rem; height: 1.25rem; padding: 0 .375rem; border-radius: var(--so-radius-sm);
+    font-family: var(--font-sans); font-size: .71875rem; font-weight: 500; line-height: 1; white-space: nowrap; vertical-align: middle;
+    background: var(--so-neutral-soft); color: var(--so-ink);
+  }
+  /* Ink words, the tone in the dot (the Agents → Live chip); Needs you keeps amber words leaned toward ink. */
+  .chip-dot { width: .375rem; height: .375rem; flex-shrink: 0; border-radius: var(--so-radius-full); background: var(--so-neutral-ink); }
+  .chip-needs { background: var(--so-warning-soft); color: color-mix(in oklab, var(--so-warning) 85%, var(--so-ink)); }
+  .chip-needs .chip-dot { background: var(--so-warning); }
+  .chip-live { background: var(--so-info-soft); }
+  .chip-live .chip-dot { background: var(--so-info); }
+  .chip-done { background: var(--so-success-soft); }
+  .chip-done .chip-dot { background: var(--so-success); }
+  .chip-failed { background: var(--so-danger-soft); }
+  .chip-failed .chip-dot { background: var(--so-danger); }
+  /* The frame (components/ui/frame.tsx, after ReUI's Frame): a raised well with a hairline, its heading on the
+     well's fill, and paper panels whose corners sit concentric inside it. No shadow on a panel. */
+  .frame { display: flex; flex-direction: column; gap: .25rem; padding: .25rem; border: 1px solid var(--so-line); border-radius: var(--so-radius-card); background: var(--so-raised); }
+  .frame-head { display: flex; align-items: center; justify-content: space-between; gap: .5rem; min-height: 2rem; padding: .25rem .625rem; }
+  .frame-panel { position: relative; border: 1px solid var(--so-line); border-radius: calc(var(--so-radius-card) - .25rem - 1px); background: var(--so-paper); padding: .75rem .875rem; }
+  .frame-panel.waits { border-color: var(--so-warning); }
 
   .card {
     border: 1px solid var(--glass-border); border-radius: var(--radius); background: var(--glass);
@@ -1749,13 +1773,13 @@
      says which way it folds. */
   @media (max-width: 760px) {
     .board { display: flex; flex-direction: column; align-items: stretch; gap: .5rem; padding-bottom: 0; }
-    .board .lane { min-height: 0; padding: 0 .625rem .125rem; }
+    .board .lane { min-height: 0; padding: 0 .25rem .25rem; }
     .board .lane > summary {
       cursor: pointer; display: flex; align-items: center; min-height: 2.75rem; margin: 0;
       -webkit-tap-highlight-color: transparent;
     }
-    .board .lane > summary h2 { flex: 1; font-size: .75rem; }
-    .board .lane > summary .lane-count { border: 1px solid var(--border); border-radius: 999px; padding: .04rem .5rem; margin-left: .25rem; }
+    .board .lane > summary { padding: 0 .375rem; }
+    .board .lane > summary h2 { flex: 1; }
     .board .lane > summary::after {
       content: ""; width: .5rem; height: .5rem; flex: none; margin-right: .25rem;
       border-right: 1.5px solid var(--muted-foreground); border-bottom: 1.5px solid var(--muted-foreground);
@@ -1763,63 +1787,66 @@
     }
     .board .lane[open] > summary::after { transform: rotate(225deg) translateY(-.125rem); }
     .board .lane .hint { margin-bottom: .25rem; }
-    .board .lane .lane-card:last-of-type { margin-bottom: .5rem; }
+    .board .lane .lane-card:last-of-type { margin-bottom: 0; }
     .board .lane-attention { order: 0; }
     .board .lane-building { order: 1; }
     .board .lane-queued { order: 2; }
     .board .lane-waiting { order: 3; }
     .board .lane-done { order: 4; }
   }
+  /* A lane is a frame (components/ui/frame.tsx, after ReUI's Frame): a raised well with a hairline, its head a
+     status chip and a mono count on the well's fill, its cards paper panels at concentric corners. Only the lane
+     that waits on a person is amber: its chip, and each card's thin full outline. No fill, no stripe, no shadow. */
   .lane {
-    background: color-mix(in srgb, var(--card) 45%, var(--background)); border: 1px solid var(--border);
-    border-radius: var(--radius); padding: .625rem; min-height: 12rem;
+    background: var(--so-raised); border: 1px solid var(--so-line);
+    border-radius: var(--so-radius-card); padding: .25rem; min-height: 12rem;
   }
-  .lane > summary { list-style: none; cursor: default; margin: 0 0 .125rem; }
+  .lane > summary { list-style: none; cursor: default; margin: 0; padding: .375rem .375rem .125rem; }
   .lane > summary::-webkit-details-marker { display: none; }
-  .lane h2 { display: flex; align-items: center; gap: .4rem; margin: 0; font-size: .6875rem; }
+  .lane h2 { display: flex; align-items: center; gap: .5rem; margin: 0; font-size: .8125rem; font-weight: 600; }
   .lane h2 a { color: inherit; text-decoration: none; }
   @media (hover: hover) and (pointer: fine) { .lane h2 a:hover { text-decoration: underline; } }
-  .lane .hint { margin-top: 0; }
-  .lane-count { color: var(--muted-foreground); font-weight: 400; font-variant-numeric: tabular-nums; }
-  .lane h2::before {
-    content: ""; width: .375rem; height: .375rem; border-radius: var(--so-radius-full); flex: none;
-    background: var(--muted-foreground); opacity: .55;
-  }
-  .lane-attention h2::before { background: var(--brand); opacity: 1; }
-  .lane-building h2::before { background: var(--running); opacity: 1; }
-  .lane-done h2::before { background: var(--muted-foreground); opacity: 1; }
+  .lane .hint { margin: 0; padding: .125rem .375rem .375rem; }
+  .lane-count { color: var(--muted-foreground); font-family: var(--font-mono); font-size: .6875rem; font-weight: 500; font-variant-numeric: tabular-nums; }
   .lane-card {
-    display: block; text-decoration: none; color: inherit;
-    background: var(--card); border: 1px solid var(--border);
-    border-radius: calc(var(--radius) - 2px); padding: .5rem .625rem; margin-top: .5rem;
-  }
-  @media (hover: hover) and (pointer: fine) { .lane-card:hover { border-color: color-mix(in srgb, var(--border) 55%, var(--muted-foreground)); } }
-  .lane-card .id { display: block; font-family: var(--font-mono); font-size: .6875rem; color: var(--muted-foreground); margin-bottom: .125rem; overflow-wrap: anywhere; }
-  .lane-card .t { display: block; font-size: .8125rem; font-weight: 500; line-height: 1.35; }
+    display: flex; flex-direction: column; text-decoration: none; color: inherit;
+    background: var(--so-paper); border: 1px solid var(--so-line);
+    border-radius: calc(var(--so-radius-card) - .25rem - 1px); padding: .625rem .75rem; margin-top: .25rem;
+  }
+  .lane-attention .lane-card { border-color: var(--so-warning); }
+  /* The order view's columns are frames too, with roomier insides (a form, a note) and a quiet dot by the name. */
+  .lane.queue-column { padding: .5rem; }
+  .queue-column > h2::before { content: ""; width: .375rem; height: .375rem; border-radius: var(--so-radius-full); flex: none; background: var(--muted-foreground); opacity: .55; }
+  @media (hover: hover) and (pointer: fine) { .lane-card:hover { background: var(--so-raised); } }
+  /* The title leads; the task id is a machine fact under it, in mono. */
+  .lane-card .t { display: block; font-size: .84375rem; font-weight: 500; line-height: 1.35; }
+  .lane-card .why { display: block; margin-top: .125rem; font-size: .75rem; color: var(--muted-foreground); }
+  .lane-card .id { display: block; margin-top: .375rem; font-family: var(--font-mono); font-size: .75rem; color: var(--muted-foreground); overflow-wrap: anywhere; }
+  .lane-card .who { display: block; margin-top: .125rem; font-size: .75rem; color: var(--muted-foreground); overflow-wrap: anywhere; }
+  .lane-card .who .mono { display: inline; margin: 0; font-family: var(--font-mono); font-size: .6875rem; }
   .lane-card .dot { margin-right: .4rem; }
   .lane-card .meta, .lane-card .mono { display: block; margin-top: .125rem; font-size: .75rem; }
-  .lane-card .why { display: block; margin-top: .125rem; font-size: .75rem; color: var(--muted-foreground); }
-  /* The facts: mono key–value pairs, keys dim, values ink — one grammar on every lane. */
-  .lane-card .facts { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: .0625rem .625rem; margin-top: .4rem; font-size: .6875rem; line-height: 1.5; }
+  /* The facts: a muted word, then the value; only a machine's own words (a name, a model, a branch, a clock) are mono. */
+  .lane-card .facts { display: grid; grid-template-columns: max-content minmax(0, 1fr); gap: .0625rem .625rem; margin-top: .25rem; font-size: .75rem; line-height: 1.5; }
   .lane-card .fact { display: contents; }
-  .lane-card .fact .k { color: var(--muted-foreground); font-family: var(--font-mono); }
-  .lane-card .fact .v { font-family: var(--font-mono); color: var(--foreground); overflow-wrap: anywhere; font-variant-numeric: tabular-nums; }
-  .lane-card .chips { display: flex; flex-wrap: wrap; gap: .25rem; margin-top: .4rem; }
+  .lane-card .fact .k { color: var(--muted-foreground); }
+  .lane-card .fact .v { color: var(--foreground); overflow-wrap: anywhere; font-variant-numeric: tabular-nums; }
+  .lane-card .fact .v.mono { display: inline; margin: 0; font-family: var(--font-mono); font-size: .6875rem; }
+  .lane-card .chips { display: flex; flex-wrap: wrap; gap: .25rem; margin-top: .5rem; }
   .lane-card .chips .badge { margin: 0; }
-  /* The live strip on a building card: stage and clock in an inset well —
-     the run's own facts, never a percent. */
+  /* The live strip on a building card: the stage in words, the clock in mono, on a sunken well. */
   .lane-card .live-line {
     display: flex; align-items: center; justify-content: space-between; gap: .5rem; margin-top: .375rem;
-    padding: .3rem .5rem; border-radius: calc(var(--radius) - 4px); background: var(--muted);
-    font-family: var(--font-mono); font-size: .6875rem; color: var(--running); font-variant-numeric: tabular-nums;
+    padding: .3rem .5rem; border-radius: var(--so-radius-sm); background: var(--so-raised);
+    font-size: .75rem; color: var(--so-info);
   }
-  .lane-card .live-line .clock { color: var(--muted-foreground); }
+  .lane-card .live-line .clock { color: var(--muted-foreground); font-family: var(--font-mono); font-size: .6875rem; font-variant-numeric: tabular-nums; }
   /* The build's steps — set up, writing, checking and committing: three quiet
      ticks, the current one in the running hue. A stage, never a percent. */
   .lane-card .steps { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); gap: .1875rem; margin-top: .5rem; }
-  .lane-card .steps i { height: .1875rem; border-radius: 999px; background: var(--border); }
-  .lane-card .steps i.on { background: color-mix(in srgb, var(--running) 45%, var(--border)); }
-  .lane-card .steps i.now { background: var(--running); }
+  .lane-card .steps i { height: .1875rem; border-radius: var(--so-radius-full); background: var(--so-line); }
+  .lane-card .steps i.on { background: color-mix(in srgb, var(--so-info) 45%, var(--so-line)); }
+  .lane-card .steps i.now { background: var(--so-info); }
 
   /* The worker strip: one quiet tile per worker above the lanes — what it is
      building here, the stage, the clock. Ink and lines only; the running dot
@@ -2613,8 +2640,9 @@ button { min-height: 44px; }
   .chat-workspace.projects-open::before { animation: fade 180ms ease-out; }
   .switcher[open] .switcher-menu { animation: rise 160ms ease-out; }
   @media (hover: hover) and (pointer: fine) {
-    .lane-card, .decide-card, .menu-row, .chat-overview-item, .proposal { transition: border-color .15s, transform .15s, box-shadow .15s; }
-    .lane-card:hover, .decide-card:hover, .menu-row:hover {
+    .lane-card, .decide-card, .menu-row, .chat-overview-item, .proposal { transition: border-color .15s, background-color .15s, transform .15s, box-shadow .15s; }
+    /* Board cards are panels in a frame: a hover fills them raised, never a shadow. */
+    .decide-card:hover, .menu-row:hover {
      
       box-shadow: 0 2px 8px -2px rgb(0 0 0 / .35);
     }

package/dist/server/http.d.ts

@@ -165,6 +165,11 @@ export type ServeOptions = {
      * the exact part of the ceiling, so an addition or removal shows without a restart. */
     admittedRepos?: () => readonly string[];
     connectionProbe?: typeof execRun;
+    /** The console's background checks (docs/plans/get-side-effects.md): sign-in checks, integration checks, model
+     * lists and the tidy-ups pages used to do. On for `up` and `serve`; a test turns them on, and `backgroundChecksMs` sets
+     * how often they run and ask this computer's agents again. */
+    backgroundChecks?: boolean;
+    backgroundChecksMs?: number;
     connectionHome?: string;
     /** Test seam for Chat's first tasks: the `gh` and `git grep` reads. */
     firstTaskRunner?: typeof execRun;

package/dist/server/last-checks.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The last answer of each check a page shows (docs/plans/get-side-effects.md). A page reads `known`; the background
+ * checks and a person's Check now (a POST) call `run`. One per console, held in memory: a restart asks again.
+ */
+export type LastCheck<T> = {
+    at: number;
+    value: T;
+};
+export declare class LastChecks {
+    private readonly answers;
+    private readonly running;
+    known<T>(key: string): LastCheck<T> | null;
+    /** Whether the last answer is older than `everyMs` (or missing). */
+    due(key: string, everyMs: number, now?: number): boolean;
+    /** Run the check (one at a time per key) and keep its answer. */
+    run<T>(key: string, check: () => Promise<T>): Promise<T>;
+}

package/dist/server/last-checks.js

@@ -0,0 +1,22 @@
+export class LastChecks {
+    answers = new Map();
+    running = new Map();
+    known(key) {
+        return this.answers.get(key) ?? null;
+    }
+    /** Whether the last answer is older than `everyMs` (or missing). */
+    due(key, everyMs, now = Date.now()) {
+        const last = this.answers.get(key);
+        return last === undefined || now - last.at >= everyMs;
+    }
+    /** Run the check (one at a time per key) and keep its answer. */
+    run(key, check) {
+        const pending = this.running.get(key);
+        if (pending !== undefined)
+            return pending;
+        const started = check().then(value => { this.answers.set(key, { at: Date.now(), value }); return value; })
+            .finally(() => { this.running.delete(key); });
+        this.running.set(key, started);
+        return started;
+    }
+}

package/dist/server/live.d.ts

@@ -45,6 +45,10 @@ export type LiveRoom = {
 } | {
     kind: "agent";
     run: number;
+}
+/** The Agents view's Live grid (agents-live-room.ts): per viewer, watching only. */
+ | {
+    kind: "agents-live";
 };
 /** A room's name, read strictly: anything else is not a room. */
 export declare function parseLiveRoom(name: string): LiveRoom | null;

package/dist/server/live.js

@@ -9,9 +9,11 @@ import { handlersOf } from "./handler-registry.js";
 import { respond } from "./http.js";
 import { adapterPolicy } from "./route-policy.js";
 import { requestContext } from "./request-context.js";
+import { createAgentsLiveRooms } from "./agents-live-room.js";
+import { leadTilesFor } from "./agents-live-lead.js";
 /** A page asks for a few rooms at once: its workspace, what it shows, its conversation. */
 export const LIVE_ROOMS_PER_PAGE = 6;
-const ROOM_NAME = /^(workspace|task|flow|chat|team|agent|summary)(?::([^?]{1,400}))?(?:\?([^#]{0,600}))?$/;
+const ROOM_NAME = /^(workspace|task|flow|chat|team|agent|summary|agents-live)(?::([^?]{1,400}))?(?:\?([^#]{0,600}))?$/;
 /** At most one workspace nudge a second: a burst of writes is one re-read, the first heard at once. */
 const WORKSPACE_SETTLE_MS = 1_000;
 /** A running reply's preview: at most one snapshot every 80 ms; the last one always goes out. */
@@ -34,6 +36,7 @@ export function parseLiveRoom(name) {
     switch (kind) {
         case "workspace": return key === null && query === undefined ? { kind } : null;
         case "summary": return key === null && query === undefined ? { kind } : null;
+        case "agents-live": return key === null && query === undefined ? { kind } : null;
         case "task": return key !== null && key !== "" && query === undefined ? { kind, task: key } : null;
         case "flow": {
             const flow = Number(key), card = params.get("card");
@@ -92,6 +95,11 @@ export function createLiveHandlers(runtime, live) {
     const chatViewers = new Set();
     // One agent's open view (Agents board): what it shows, keyed by the exact run.
     const agentRooms = createLiveRooms(run => agentRunFingerprint(store, run), null, { bus: live.bus });
+    // The Live grid: one room per viewer and scope, watching only (no lease, no seen mark).
+    // Each Live page's own lead tiles, read as its viewer's saved session now (a page's room key carries the page).
+    const liveLeads = new Map();
+    const agentsLive = createAgentsLiveRooms({ store, bus: live.bus, evidenceRoot: runtime.evidenceRoot, localRunner: runtime.options.localRunner, clock, visible,
+        leads: key => liveLeads.get(key)?.() ?? null, forget: key => liveLeads.delete(key) });
     const readBrowser = (request, who) => rereadBrowser(runtime, request, who);
     const sameBrowser = (request, who) => () => readBrowser(request, who) !== null;
     function admitted(viewer, thread) {
@@ -196,10 +204,11 @@ export function createLiveHandlers(runtime, live) {
         if ([...url.searchParams.keys()].some(key => key !== "room") || names.length === 0 || names.length > LIVE_ROOMS_PER_PAGE || new Set(names).size !== names.length)
             return json(response, 400, { error: "room" });
         const rooms = names.map(name => ({ name, room: parseLiveRoom(name) }));
-        if (rooms.some(one => one.room === null) || rooms.filter(one => one.room?.kind === "agent").length > 1 || rooms.filter(one => one.room?.kind === "workspace").length > 1 || rooms.filter(one => one.room?.kind === "chat").length > 1 || rooms.filter(one => one.room?.kind === "team").length > 1 || rooms.filter(one => one.room?.kind === "summary").length > 1)
+        if (rooms.some(one => one.room === null) || rooms.filter(one => one.room?.kind === "agent").length > 1 || rooms.filter(one => one.room?.kind === "workspace").length > 1 || rooms.filter(one => one.room?.kind === "chat").length > 1 || rooms.filter(one => one.room?.kind === "team").length > 1 || rooms.filter(one => one.room?.kind === "summary").length > 1 || rooms.filter(one => one.room?.kind === "agents-live").length > 1)
             return json(response, 400, { error: "room" });
         // Admit every room before the stream opens, with the answers each page's own stream gave.
         const joins = [];
+        let refusedJoin = false;
         for (const { name, room } of rooms) {
             if (room.kind !== "team" && who.via !== "cookie")
                 return json(response, 403, { error: "session" });
@@ -216,6 +225,33 @@ export function createLiveHandlers(runtime, live) {
                 joins.push(connection => summaryRooms.join(summaryKey(who.name, scope), { name: who.name, room: name, connection,
                     valid: () => signedIn() && live.projectScopeFor(who.name) === scope }));
             }
+            else if (room.kind === "agents-live") {
+                const browser = who;
+                const scope = live.projectScopeFor(who.name);
+                if (scope === null)
+                    return json(response, 404, { error: "agents-live" });
+                const signedIn = sameBrowser(request, browser);
+                const valid = () => signedIn() && live.projectScopeFor(who.name) === scope;
+                joins.push(connection => {
+                    // Proved before the room is made or read: an invalid viewer never causes a look at a file.
+                    let ok = false;
+                    try {
+                        ok = valid();
+                    }
+                    catch {
+                        ok = false;
+                    }
+                    if (!ok) {
+                        connection.send(name, "gone");
+                        refusedJoin = true;
+                        return;
+                    }
+                    // Each page's own room (its key carries this connection): a newcomer is never handed a digest computed earlier.
+                    const key = agentsLive.keyOf(who.name, scope, randomBytes(9).toString("hex"));
+                    liveLeads.set(key, () => { const again = readBrowser(request, browser); return again === null ? null : leadTilesFor(runtime, again); });
+                    agentsLive.rooms.join(key, { name: who.name, room: name, connection, valid });
+                });
+            }
             else if (room.kind === "task") {
                 const browser = who;
                 const family = familyOf(room.task);
@@ -342,6 +378,9 @@ export function createLiveHandlers(runtime, live) {
         for (const join of joins)
             if (connection.open)
                 join(connection);
+        // A page whose only room was refused at its join ends now (`ended`), its keep-alive stopped, not left open.
+        if (refusedJoin && connection.rooms === 0)
+            connection.refuse(() => connection.close());
         request.once("close", () => connection.close());
     }
     const detachChat = live.bus.subscribe(() => {
@@ -357,6 +396,7 @@ export function createLiveHandlers(runtime, live) {
             summaryRooms.close();
             teamRooms.close();
             agentRooms.close();
+            agentsLive.rooms.close();
             for (const viewer of [...chatViewers])
                 viewer.connection.close();
         },

package/dist/server/pages.js

@@ -26,6 +26,11 @@ import { LEDGER_CSV_HEADER, ledgerCsvRows } from "../ledger-csv.js";
 import { ledgerBody } from "../ledger-view.js";
 import { agentLanesOf, agentRowOf, agentsBoardOf, agentFactsFor, laneWindowOf, sealedDiffOf } from "../agents-board.js";
 import { markAgentSeen } from "../agent-board.js";
+import { agentsLiveOf } from "../agents-live.js";
+import { readChildWindow } from "../live-children-read.js";
+import { leadFiledLinks } from "./agents-live-filed.js";
+import { readMainWindow } from "../live-main-read.js";
+import { runLiveCommands } from "../store.js";
 import { prometheusMetrics } from "../metrics.js";
 import { readMonitoring } from "../monitoring-settings.js";
 import { targetOf } from "../monitoring.js";
@@ -38,6 +43,7 @@ import { healthWords } from "../server-telemetry.js";
 import { tally } from "../summary.js";
 import { serveInstallAsset } from "./pages-assets.js";
 import { healthz } from "./remote-hooks.js";
+import { leadsStillAdmitted, leadTilesFor } from './agents-live-lead.js';
 import { refuse, regionScript, screen, settingsRows, WORKSPACE_STYLE, workToolRows } from "./chrome.js";
 import { redirect, respond, safeReturn, SAFETY, taskHref } from "./http.js";
 import { assignmentOf } from "../assignment.js";
@@ -46,8 +52,9 @@ import { browsePage, fleetBody, fleetScript, githubIdentityOf, githubReposPage,
 import { capsPage } from "./render-settings.js";
 import { decisionAnswerScript, taskBody } from "./render-tasks.js";
 import {} from "./session.js";
+import { rereadBrowser } from "./live.js";
 export function createPagesHandlers(runtime) {
-    const { clock, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
+    const { clock, lastChecks, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
     // The filesystem browser (operator request): pick a project folder by
     // looking, not typing. CONFINED to exactly what opening allows —
     // explicit --repo mode has an enumerable list and gets no browser at
@@ -117,7 +124,8 @@ export function createPagesHandlers(runtime) {
         const { who, response } = ctx;
         if (store.isDemo())
             return refuse(response, who, 403, "the sandbox never talks to GitHub");
-        const listed = await (options.ghList ?? listGithubRepos)();
+        // The last listing (docs/plans/get-side-effects.md): List repositories posts; opening the page asks GitHub nothing.
+        const listed = lastChecks.known("github-repos")?.value ?? null;
         // What this machine already has, matched by the clone's own recorded
         // origin — registered projects first, then the immediate children of
         // the configured roots. Identities are compared case-insensitively
@@ -136,7 +144,7 @@ export function createPagesHandlers(runtime) {
         // Roots are walked ONLY when there are listed repos to match against
         // (finding 1), through an iterator that stops at 400 entries — a
         // directory with a million children costs 400 stats, not a scan.
-        if (listed.ok && listed.repos.length > 0) {
+        if (listed !== null && listed.ok && listed.repos.length > 0) {
             for (const root of ceiling.roots) {
                 const children = [];
                 try {
@@ -176,6 +184,14 @@ export function createPagesHandlers(runtime) {
             openProject: who.via === "cookie" ? who.session.project ?? null : null,
         }));
     }
+    // List repositories / Refresh list: ask the GitHub CLI signed in on this machine, then show the page.
+    async function projectsGithubList(ctx) {
+        const { who, response } = ctx;
+        if (store.isDemo())
+            return refuse(response, who, 403, "the sandbox never talks to GitHub");
+        await lastChecks.run("github-repos", () => (options.ghList ?? listGithubRepos)());
+        return redirect(response, "/projects/github");
+    }
     async function projectsIndex(ctx) {
         const { url, who, response } = ctx;
         return void projectsScreen(response, who, url.searchParams.get("said"), 200, safeReturn(url.searchParams.get("return")));
@@ -444,8 +460,14 @@ export function createPagesHandlers(runtime) {
         const now = clock();
         const access = workAccess();
         const asked = url.searchParams.get("run");
+        // The Live grid only watches (docs/plans/agents-view.md §3): it branches off before an opened agent is built, so
+        // viewing it never marks a run seen, takes a watch or offers a composer — a reload of ?view=live&run=… included.
+        const watching = url.searchParams.get("view") === "live";
+        // Live is a browser session's only, like its reads (no token sees the grid).
+        if (watching && who.via !== "cookie")
+            return respond(response, 403, "text/plain; charset=utf-8", "The Live view is for a signed-in browser.");
         let selected = null;
-        if (asked !== null && /^[1-9][0-9]{0,9}$/.test(asked)) {
+        if (!watching && asked !== null && /^[1-9][0-9]{0,9}$/.test(asked)) {
             const run = store.getRun(Number(asked));
             const facts = run === null || !runVisible(run) ? null : agentFactsFor(store, run.id, access, who.name);
             if (facts !== null) {
@@ -485,6 +507,11 @@ export function createPagesHandlers(runtime) {
                 };
             }
         }
+        // The Live grid is drawn in the browser from its own read-only reads (agents-live-view.tsx): no board facts here.
+        if (watching) {
+            const view = { kind: "agents", groups: [], selected: null, lanes: null, empty: null, live: true };
+            return sendScreen(response, 200, screen("Agents", html `<h1>Agents</h1><p class="meta">Live needs JavaScript.</p>`, { chrome: chromeFor(project, "runs"), workspace: { view } }));
+        }
         const groups = agentsBoardOf(store, now, access, who.name, evidenceRoot);
         const lanes = selected === null ? agentLanesOf(store, now, access, who.name, laneWindowOf(url.searchParams.get("window"))) : null;
         const view = { kind: "agents", groups, selected, lanes,
@@ -989,9 +1016,74 @@ export function createPagesHandlers(runtime) {
         response.setHeader("cache-control", "no-store");
         return respond(response, 200, "application/json", JSON.stringify({ proof: createHmac("sha256", Buffer.from(identity, "hex")).update(challenge).digest("hex") }));
     }
+    // The Live grid (docs/plans/agents-view.md §3), kept after every other handler.
+    /** The Live grid's tiles (JSON, read-only): every role's running agents and those that just ended, that this viewer
+     * may see — the console's ceiling and the account's own access, proved per run, on every request. */
+    async function agentsLive(ctx) {
+        const { who, request, response } = ctx;
+        response.setHeader("cache-control", "no-store");
+        // A browser session only (the route says so too): live output is never a token's to read.
+        if (who.via !== "cookie")
+            return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
+        const browser = who;
+        const canSee = (run) => { const repo = taskRepoOf(run.taskRef); return repo !== null && visible(repo) && store.accountCanAccess(who.name, repo); };
+        const tiles = agentsLiveOf(store, clock(), { canSee, localRunner: options.localRunner });
+        // The viewer's own lead turns, admitted as their chat is, from the session as it is saved now.
+        const current = rereadBrowser(runtime, request, browser);
+        const leads = current === null ? [] : leadTilesFor(runtime, current);
+        // Re-proved right before delivery: the session still held, each tile's run still in view from its current row, and
+        // each lead turn still admitted, from the session as it is saved now.
+        const again = current === null ? null : rereadBrowser(runtime, request, browser);
+        if (again === null)
+            return respond(response, 401, "application/json", JSON.stringify({ error: "session" }));
+        const shown = tiles.filter(tile => { const run = store.getRun(tile.runId); return run !== null && canSee(run); });
+        // Work the viewer's own lead filed nests under it (docs/plans/lead-dispatched-tiles.md): proved from the store now,
+        // for the tiles already shown, and only ever for their owner.
+        const filed = again.role === "approver" ? leadFiledLinks(store, again.name, shown.map(tile => tile.runId)) : new Map();
+        return respond(response, 200, "application/json", JSON.stringify({ tiles: shown.map(tile => ({ ...tile, filedBy: filed.get(tile.runId) ?? null })), leads: leadsStillAdmitted(runtime, again, leads) }));
+    }
+    /** This console's key for the Live grid's read cursors: random, in memory only (never where a build can reach), so a
+     * restart makes old cursors start over visibly. A cursor is state, never permission. */
+    const liveCursorKey = randomBytes(32);
+    /** One window of a run's live output for the Live grid (JSON, read-only): its own records or its subagents'. Access
+     * is proved before the read (ceiling, account, this computer's run) and again after it, before a byte is sent. */
+    async function agentsLiveRead(ctx) {
+        const { url, who, response } = ctx;
+        response.setHeader("cache-control", "no-store");
+        // A browser session only (the route says so too): live output is never a token's to read.
+        if (who.via !== "cookie")
+            return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
+        const runId = Number(url.pathname.slice("/agents/live/".length));
+        const file = url.searchParams.get("file");
+        const cursor = url.searchParams.get("cursor");
+        if ((file !== "main" && file !== "sub") || [...url.searchParams.keys()].some(key => key !== "file" && key !== "cursor")) {
+            return respond(response, 400, "application/json", JSON.stringify({ error: "request" }));
+        }
+        const browser = who;
+        // The saved session still held (not just the cookie), and the run still in view from its current row.
+        const allowed = () => {
+            if (rereadBrowser(runtime, ctx.request, browser) === null)
+                return false;
+            const run = store.getRun(runId);
+            const repo = run === null ? null : taskRepoOf(run.taskRef);
+            return run !== null && repo !== null && runVisible(run) && store.accountCanAccess(who.name, repo);
+        };
+        if (!allowed())
+            return respond(response, 404, "application/json", JSON.stringify({ error: "run" }));
+        if (options.localRunner === undefined || store.getRun(runId)?.runner !== options.localRunner) {
+            return allowed() ? respond(response, 200, "application/json", JSON.stringify({ error: "off" })) : respond(response, 404, "application/json", JSON.stringify({ error: "run" }));
+        }
+        const read = { key: liveCursorKey, commands: runLiveCommands(store, runId) };
+        const window = file === "sub" ? readChildWindow(evidenceRoot, runId, cursor, read) : readMainWindow(evidenceRoot, runId, cursor, read);
+        // Re-proved after the read: a narrowed account or a run gone from view gets nothing it read.
+        if (!allowed() || store.getRun(runId)?.runner !== options.localRunner)
+            return respond(response, 404, "application/json", JSON.stringify({ error: "run" }));
+        return respond(response, 200, "application/json", JSON.stringify(window.ok ? window : { error: window.reason }));
+    }
     const registrations = handlersOf("pages", {
         "projects.browse": projectsBrowse,
         "projects.github": projectsGithub,
+        "projects.github-list": projectsGithubList,
         "projects.page": projectsIndex,
         "home": homeRedirect,
         "morning": morningAlias,
@@ -1001,6 +1093,8 @@ export function createPagesHandlers(runtime) {
         "system": systemScreen,
         "peek": peekPage,
         "agents": agentsPage,
+        "agents.live": agentsLive,
+        "agents.live.read": agentsLiveRead,
         "fleet": fleetPage,
         "ledger.export": ledgerExport,
         "menu": menuPage,

package/dist/server/people-tokens.js

@@ -39,7 +39,7 @@ export function sameVisitCheck(authTime, startedAt, now) {
     return Math.min(Math.max(at, startedAt), now);
 }
 export function createPeopleHandlers(runtime) {
-    const { joinBySource, ssoOffer, ssoVisits, ssoSettings, options, clock, ssoHandoffs, managedRepos, store, visible, admissionList, sendScreen, chromeFor, restricted, sessions, consoleProjects, authenticateApprover, authenticateCredential, bustBadge, projectOf, signInLinks, linkKey, fromThisComputer, recordSignIn, passwordAllowed, arrival, defaultProject, cookieSecure, consoleOrigin, providerFor, joinSourceOf, signInBudget, signInActor, minutesWords } = runtime;
+    const { joinBySource, ssoOffer, ssoVisits, ssoSettings, options, clock, ssoHandoffs, managedRepos, store, visible, admissionList, sendScreen, chromeFor, restricted, sessions, consoleProjects, authenticateApprover, authenticateCredential, bustBadge, projectOf, signInLinks, linkKey, fromThisComputer, recordSignIn, passwordAllowed, arrival, defaultProject, cookieSecure, consoleOrigin, providerFor, providerKnown, joinSourceOf, signInBudget, signInActor, minutesWords } = runtime;
     // v101: Settings → Sessions & tokens: where you're signed in, and your API tokens. An instance operator can see everyone's.
     async function sessionsPage(ctx) {
         const { url, who, response, project } = ctx;
@@ -353,9 +353,12 @@ ${reauth(html `<label>Password <input type="password" name="token" autocomplete=
         const origin = consoleOrigin(request.headers.host);
         if (origin === null)
             return page(response, 400, loginPage("Sign in from this computer (localhost) or from your https address.", returnTo, ssoOffer()));
-        const found = await providerFor(settings.issuer);
-        if (!found.ok)
-            return page(response, 502, loginPage(`${settings.label} isn't answering: ${found.said}`, returnTo, ssoOffer()));
+        // Discovered as the console starts and in the background (docs/plans/get-side-effects.md): following this link
+        // fetches nothing.
+        const known = providerKnown(settings.issuer);
+        if (known === null)
+            return page(response, 503, loginPage(`${settings.label} isn't answering yet. Try again in a moment.`, returnTo, ssoOffer()));
+        const found = { provider: known };
         const visit = newOidcVisit(), redirectUri = `${origin}${SSO_CALLBACK}`;
         for (const [key, one] of ssoVisits)
             if (one.expires < Date.now())

package/dist/server/render-chat.d.ts

@@ -359,8 +359,14 @@ export declare function leadAfterComposerHtml(data: {
     pending: LeadTurn | null;
     focusTask: TaskChatFocus | null;
 }): Html;
+/** A conversation shown before it exists (quiet page visits): its page binds sends to this session id, and the first
+ * send starts the conversation (chatSend). A visit never starts one. */
+export declare const NOT_STARTED_SESSION = 0;
 export declare function leadPage(chrome: Chrome, data: LeadThreadRows & {
-    session: LeadSession;
+    /** Null: no conversation yet; the first message starts one. */
+    session: LeadSession | null;
+    /** Whose conversation this is (the session's approver once it exists). */
+    approver: string;
     /** A project's own thread (v77); null for the lead conversation or a task. */
     chatProject?: string | null;
     follow?: {
@@ -390,6 +396,14 @@ export type LiveTurn = {
     ok: boolean;
     listeners: Set<() => void>;
     expiry?: NodeJS.Timeout;
+    /** For the Live grid's lead tile (agents-live-lead.ts): the turn's id once it says it, when it started and ended, and
+     * when each step began (epoch ms). Never sent to the chat room. */
+    turn?: number;
+    startedAt?: number;
+    endedAt?: number;
+    stepAt?: number[];
+    /** Per step: its text is the provider's finished answer, secret-checked whole (lead.ts `final`). */
+    confirmed?: boolean[];
 };
 export type ChatEnablement = {
     ok: true;

package/dist/server/render-chat.js

@@ -952,18 +952,25 @@ export function leadThreadHtml(data) {
 export function leadAfterComposerHtml(data) {
     return html `<div id="chat-after-composer" data-chat-region="after">${data.messages.length === 0 && data.pending === null ? leadPromptStarters(data.focusTask) : ""}</div>`;
 }
+/** A conversation shown before it exists (quiet page visits): its page binds sends to this session id, and the first
+ * send starts the conversation (chatSend). A visit never starts one. */
+export const NOT_STARTED_SESSION = 0;
 export function leadPage(chrome, data) {
     const subscription = isSubscriptionChatProvider(data.config.provider);
     const chatProject = data.focusTask === null ? data.chatProject ?? null : null;
     const returnTo = data.focusTask !== null ? taskChatHref(data.focusTask.id) : chatProject !== null ? projectChatHref(chatProject) : "/chat";
+    const sessionId = data.session?.id ?? NOT_STARTED_SESSION;
+    const approver = data.session?.approver ?? data.approver;
     const controlsHtml = joinHtml([
-        html `<details class="lead-follow"><summary>Automatic crew updates${data.follow?.enabled ? ' · On' : ''}</summary><p class="meta">${data.follow?.detail ?? 'Automatic crew updates are off.'}</p>${postForm("/chat/mate/follow", html `${data.follow?.enabled ? '' : html `<p>The lead responds when results or decisions arrive. Uses this conversation’s ${subscription ? 'membership usage, with no dollar maximum' : 'remaining spend allowance'} and daily turn limit. Existing task approvals still apply.</p>`}<button type="submit" class="quiet">${data.follow?.enabled ? 'Pause updates' : 'Enable updates'}</button>`, { returnTo, hidden: { enabled: data.follow?.enabled ? 'no' : 'yes' } })}</details>`,
+        data.session === null ? "" : html `<details class="lead-follow"><summary>Automatic crew updates${data.follow?.enabled ? ' · On' : ''}</summary><p class="meta">${data.follow?.detail ?? 'Automatic crew updates are off.'}</p>${postForm("/chat/mate/follow", html `${data.follow?.enabled ? '' : html `<p>The lead responds when results or decisions arrive. Uses this conversation’s ${subscription ? 'membership usage, with no dollar maximum' : 'remaining spend allowance'} and daily turn limit. Existing task approvals still apply.</p>`}<button type="submit" class="quiet">${data.follow?.enabled ? 'Pause updates' : 'Enable updates'}</button>`, { returnTo, hidden: { enabled: data.follow?.enabled ? 'no' : 'yes' } })}</details>`,
         html `<details class="chat-limits chat-session-details"><summary>Conversation details<span class="meta">${subscription ? "membership" : data.config.provider}</span></summary>\n${joinHtml([
             html `<div class="chat-budget"><span class="mono">${data.config.provider} · ${data.config.model}</span><span>${data.turnsToday} / ${data.config.dailyTurns} turns today</span>${subscription
                 ? html `<span>membership login · no dollar ceiling</span>`
-                : html `<span>this conversation: ${chatMoney(data.session.spentMicrousd)} of ${chatMoney(data.session.ceilingMicrousd)}</span><span>this week ${chatMoney(data.weeklySpent)} of ${chatMoney(data.config.weeklyCeilingMicrousd)}</span>`}</div>`,
-            html `<p class="meta">Started ${data.session.mintedAt.slice(0, 16).replace("T", " ")}Z. It stays open until you end it; only bounded recent context is sent to the model.</p>`,
-            postForm("/chat/mate/end", html `<button type="submit" class="quiet">End the conversation and forget the thread</button>`, { attrs: { class: "inline" }, returnTo }),
+                : html `<span>this conversation: ${chatMoney(data.session?.spentMicrousd ?? 0)} of ${chatMoney(data.session?.ceilingMicrousd ?? 0)}</span><span>this week ${chatMoney(data.weeklySpent)} of ${chatMoney(data.config.weeklyCeilingMicrousd)}</span>`}</div>`,
+            data.session === null
+                ? html `<p class="meta">No conversation yet. Send a message to start one.</p>`
+                : html `<p class="meta">Started ${data.session.mintedAt.slice(0, 16).replace("T", " ")}Z. It stays open until you end it; only bounded recent context is sent to the model.</p>`,
+            data.session === null ? "" : postForm("/chat/mate/end", html `<button type="submit" class="quiet">End the conversation and forget the thread</button>`, { attrs: { class: "inline" }, returnTo }),
             data.recent.length === 0
                 ? ""
                 : html `<p class="meta">Recent turns: ${joinHtml(data.recent
@@ -996,8 +1003,8 @@ export function leadPage(chrome, data) {
         html `<label>Message<textarea id="chat-message" name="message" rows="1" maxlength="${LEAD_MESSAGE_MAX_CHARS}" placeholder="${data.focusTask !== null ? "Ask about this task…" : chatProject !== null ? `Ask about ${projectName(chatProject)}…` : "Describe what you want done…"}"></textarea></label>`,
         html `<button type="submit" aria-label="${data.pending === null ? "send message" : "send message — it waits for the current reply"}">Send</button>`,
     ], "\n"), {
-        attrs: { class: "card composer", id: latestReply === null && data.pending === null ? "latest" : "chat-composer", "aria-label": "message the lead", "data-chat-session": data.session.id, "data-chat-task": data.focusTask?.id ?? "", "data-chat-user": data.session.approver, "data-chat-busy": data.pending === null ? "0" : "1", "data-chat-version": leadChatVersion(data), "data-chat-approval": data.focusTask?.approval?.digest ?? "" },
-        hidden: { request: randomBytes(16).toString("hex"), "request-session": data.session.id, task: data.focusTask?.id, project: chatProject, result: data.resultRunId },
+        attrs: { class: "card composer", id: latestReply === null && data.pending === null ? "latest" : "chat-composer", "aria-label": "message the lead", "data-chat-session": sessionId, "data-chat-task": data.focusTask?.id ?? "", "data-chat-user": approver, "data-chat-busy": data.pending === null ? "0" : "1", "data-chat-version": leadChatVersion(data), "data-chat-approval": data.focusTask?.approval?.digest ?? "" },
+        hidden: { request: randomBytes(16).toString("hex"), "request-session": sessionId, task: data.focusTask?.id, project: chatProject, result: data.resultRunId },
     }), 
     // Concise pass (2026-09-13): the status line speaks only when there is
     // a state to report — a reply in progress here, the connection from
@@ -1009,7 +1016,7 @@ export function leadPage(chrome, data) {
     return screen("chat", chatWorkspace(joinHtml(conversation, "\n"), data.projects, false, data.focusTask, data.resultPanel ?? null), { chrome, functional: { script: CHAT_CONTINUITY_SCRIPT + CHAT_UI_SCRIPT + (data.focusTask === null ? "" : RESULT_REVIEW_SCRIPT), fetches: true },
         workspace: {
             conversation: {
-                sessionId: data.session.id, user: data.session.approver, version: leadChatVersion(data),
+                sessionId, user: approver, version: leadChatVersion(data),
                 messages: leadBrowserMessages(data, data.focusTask === null && chatProject === null ? null : returnTo, { task: data.focusTask?.id ?? null, project: chatProject }),
                 pendingTurnId: data.pending?.id ?? null, requestId: randomBytes(16).toString('hex'), maxChars: LEAD_MESSAGE_MAX_CHARS,
                 taskId: data.focusTask?.id ?? null, resultRunId: data.resultRunId ?? null, project: chatProject,