wherdr 2.4.0 → 2.6.0

package/docs/configuration.md

@@ -3,7 +3,7 @@
 [Documentation](README.md) · [Project](../README.md)
 
 - **Themes**: wherdr Titanium (default), herdr.dev and Herdr's built-in themes, or follow your Herdr theme.
-  **English and French** interface.
+  English interface.
 
 ## Configuration
 
@@ -20,7 +20,7 @@ native service (read at each start: `wherdr restart`, or **R** in the panel).
 | `TAILNET_REFRESH_MS` | `30000` | How often wherdr reads again what `tailscale serve` publishes for its port. |
 | `HERDR_WEB_ALLOWED_HOSTS` | *(empty)* | Additional hostnames or IP addresses allowed to open the app, comma-separated. |
 | `PASSKEY_USER` | `wherdr` | User name stored with the passkeys. |
-| `DATA_DIR` | `./data` | VAPID keys, push subscriptions, passkeys, recent folders, and `settings.json`: the display settings that follow you across devices (theme, machine bar and groups, home list, Board and file browser preferences). Screen-dependent ones (content width, sidebar width, terminal size and rendering), the language, the last tab or filter and drafts stay in each browser. |
+| `DATA_DIR` | `./data` | VAPID keys, push subscriptions, passkeys, recent folders, and `settings.json`: the display settings that follow you across devices (theme, machine bar and groups, home list, Board and file browser preferences). Screen-dependent ones (content width, sidebar width, terminal size and rendering), the last tab or filter and drafts stay in each browser. |
 | `HERDR_BIN` | `~/.local/bin/herdr`, else `herdr` in `PATH` | Herdr binary. |
 | `HERDR_WEB_SESSION` | *(default session)* | Named Herdr session to drive. Not `HERDR_SESSION`, which Herdr reads itself. |
 | `HERDR_PROJECTS_DATA_DIR` | `~/.herdr-projects/data` | herdr-projects' data folder, where wherdr reads the `PATH` it recorded ([Agent PATH](installation.md#agent-path)). |
@@ -34,8 +34,7 @@ native service (read at each start: `wherdr restart`, or **R** in the panel).
 | `TZ` | `UTC` | Time zone. |
 
 In the app, **Settings** holds display preferences such as theme, typing effect and what the
-home screen shows; these follow you across devices through `settings.json`. Language,
-notifications, terminal text size and renderer remain device-specific. The passkey lock is
+home screen shows; these follow you across devices through `settings.json`. Notifications, terminal text size and renderer remain device-specific. The passkey lock is
 managed under Settings › Security.
 
 ## Paste diagnostics

package/docs/conversation.md

@@ -8,6 +8,7 @@
   A command the agent proposes (shell code block, or inline `! command`) can be copied without
   its prompt, or run in the agent's shell mode (`!`, Claude Code, Codex and omp) after you
   confirm the full command.
+- **SVG diagrams**: complete code fences labelled `svg` render as isolated, theme-aware images. **Source / Preview**, beside **Copy** in the card header, switches the same card between the diagram and its original markup; **Copy** always copies that markup. Click or use Enter/Space on the image for the existing full-screen viewer. Static shapes, text and local definitions are supported, up to 150,000 source characters, 2,000 source elements and 10,000 expanded reference instances. Incomplete, unsupported or unsafe diagrams stay readable code. Scripts, foreign HTML, animation and external resources are rejected; raw inline SVG is not inserted into the page. Other fence languages and file-explorer document fences remain code.
 - **Interactive agent screens**: in a conversation, an uncertain menu or panel opens the
   pane's real terminal in a modal window, with arrows, Enter, Escape, Tab, digits and y/n.
   The rest of the app waits behind a scrim (the window fills the screen on a phone); in a
@@ -39,6 +40,14 @@
   pane and opens a new one for the same agent (the same conversation, or the same herdr-projects
   coordinator or task, as after `coordinator restart`), the view moves to the new pane and the
   draft comes along. A pane closed for good keeps it under its banner, with **Copy draft**.
+- **omp context**: beside the model, plain text shows a whole-number percentage and
+  estimated tokens in uppercase `K`. Select it for the window, original percentage,
+  estimate details and terminal status; no separate status row is added. Estimates use
+  omp's rounded percentage, not cumulative token consumption. Unknown readings stay hidden.
+  Working panes refresh even when not selected; unviewed resting panes retain their reading.
+  Failed or gauge-free reads are marked as last known. On touch screens, context details
+  appear with the model picker when the composer expands. Escape closes details without
+  stopping the agent.
 - **Model and effort pickers** for Claude Code, Codex and omp (omp: its
   "Switch Model" selector, `/switch` or `/model`, and its thinking level, changed with its own
   ⇧⇥ cycle). Changes apply **to the current session only**; wherdr never changes your default
@@ -100,7 +109,7 @@ same lines as text, a fallback if the tokens misbehave. The message sent is the
 
 A **closed question**, one that yes or no answers in full, also gets **Yes** and **No** next to
 its `↳` (at the end of its row in the list style). A tap refers to the question and writes the
-answer under it, in the language of the interface, exactly as Reply and typing would; nothing is sent, so several questions can be
+answer under it (`Yes` or `No`), exactly as Reply and typing would; nothing is sent, so several questions can be
 answered in a row before sending. On a computer a click hands the field the focus, the caret
 right after the answer, so Enter sends it at once; the keyboard stays down on a phone, and a
 button pressed with the keyboard keeps the focus. Tapping the other answer
@@ -115,8 +124,7 @@ them, gets a panel right under it: **OK to all** refers to the whole table and w
 under it (a second tap takes it back), and each row has **Yes**, **No** and `↳`, which refer to
 the row by its number and write `Yes` or `No` under it, or nothing for an answer in words; a row
 that asks an open question has `↳` alone. Every answer names the message and the row, even for
-the last message: the agent may write another one before you send. In French: `OK tout`, `Oui`,
-`Non`. Here too everything is composed in the field and you send; on a computer the field takes the focus
+the last message: the agent may write another one before you send. Here too everything is composed in the field and you send; on a computer the field takes the focus
 after a click, so Enter sends. A table qualifies when it has a
 number column (a header `#`, `N°`, `No`, `Num`, `ID` or `Q` over short numbers, each once) and a
 question column, known by its header (`Question`, `Decision`, `Choix`…), by cells that all end

package/docs/design.md

@@ -97,7 +97,7 @@ implementations.
 ## Text and layout checks
 
 Follow [Contributing: Conventions](../CONTRIBUTING.md#conventions) for English
-keys, mandatory French translations and `t()` / `tl()` usage. Do not duplicate
+only interface text and `t()` / `tl()` usage; French translations are optional. Do not duplicate
 those translation rules here. Examples: the translated Send label in
 [Composer.vue](../app/components/Composer.vue) and Back in
 [AgentView.vue](../app/components/AgentView.vue).

package/docs/devices.md

@@ -38,6 +38,30 @@
 
 ### On a phone
 
+- **Compact agent header**: a 44 px bar holds Back, one two-line identity, Terminal and Options.
+  The identity shows the pane name, then its square state indicator, state label and agent kind.
+  Tap it (always available, even for a lone pane) for the machine/space context and everything
+  that manages panes and tabs: switching (listed only when there are several; a lone pane shows its
+  full name and state instead), then the current
+  pane (rename, split, move, swap, copy ID, then **Close this conversation** or **Close this
+  terminal**: only that pane, from either view) and the current tab (rename, new tab, tab
+  overview). **Close entire space…** stands apart, and only when the space holds other panes: a
+  lone pane has a single close, whose confirmation says the space closes too. A tab closes from its
+  overview, which says how many panes go. Every close confirmation names what stops, how many tabs
+  and panes go and what stays open; if the structure changes while it is open and the close would
+  now take more, the updated confirmation is shown again. Long names ellipsize; multiple panes
+  show their position, never 1/1.
+  Options keeps the conversation, the agent and its tools: Terminal/Conversation, search,
+  notifications, changes, files, plugin actions, take control, restart, reconnect and settings.
+- **Terminal function keys** start closed. The square chevron button above Send shows or hides
+  one horizontally scrolling row in both Conversation and Terminal. It holds Ctrl, Esc, Tab,
+  arrows, Enter, Ctrl+C, Backspace and the remaining modifiers and function keys. The phone-keyboard
+  toggle comes first, and Home, End, PgUp, PgDn, Insert and Delete are available in both modes.
+  In Conversation the keyboard toggle focuses the message field, and navigation uses the
+  named-key API without opening a terminal connection.
+  Select Shift then Tab for Shift+Tab. Closing the bar clears any armed modifier.
+  The input stays on one row at rest and expands while editing. Desktop and tablet layouts
+  keep their existing controls.
 - **Installable app (PWA)** on iPhone and Android, with safe-area and keyboard handling.
 - **Web Push notifications** when an agent finishes or needs you (with its question), and for
   `herdr notification show` (plugins, scripts).
@@ -45,6 +69,10 @@
 - **Split tabs on a small screen**: a plan of the tab's panes in Herdr's proportions, then each
   pane full screen with a mini-map and swipe to its neighbours.
 - **Terminal key bar** (Esc, Enter, arrows, Shift+Tab, Ctrl+C…) and touch scrolling.
+  On iPhone and iPad a tap on the terminal does not open the on-screen keyboard: type in the
+  message field, or tap the key bar's keyboard button to type in the terminal.
+  Terminal links back to this app stay in the current window on a phone; external
+  links still open separately.
 - **Offline reading** of the last known state and of recently opened conversations.
 
 ### On an iPad

package/docs/home.md

@@ -23,6 +23,9 @@
   the first 2.0 load; turning it on again is kept. Other agents
   also use dense rows, with a last-answer preview in normal mode; waiting agents keep their
   questions and one-tap answers in both modes.
+  omp cards show context usage as a thin bottom-border line, without changing row height or
+  click targets. Open the conversation for percentage and estimated-token details. Resting
+  panes retain their last reading; unknown readings stay hidden.
   With [herdr-projects](board.md#works-great-with-herdr-projects), the board's spaces follow Herdr's sidebar:
   the Coordinators on top, then one group per repo, headed by its project coordinator (the repo's
   name, the wherdr mark, **Coordinator** and its state), a bar that folds the group and sums up its
@@ -59,3 +62,29 @@ cards remain the default. Board tasks and repository headers keep their existing
 grouping, and **Show terminals** still controls plain terminal rows. The setting
 follows you across devices. Workspace drag reordering is disabled in this view;
 switch it off to reorder spaces.
+
+## What the counters count
+
+The three counters at the top of the home (**Your turn**, **Working**, **Ready**) count the
+rows of the list under them: **one row, one count**, in the state that row shows. The counters,
+the rows' state (their badge, accent and place in their group), the repo bar and the machine
+bar's numbers all come from the same functions (`taskStat`, `memberStat` and `countedPanes` in
+`shared/boardLinks.ts`, `homeCounts` in `shared/homeCounts.ts`).
+
+- **A Board task** counts once, by its state on the Board, whatever helpers (reviewer, planner,
+  attempts) it has open and in however many spaces. **Needs you** and **Ready to approve** are
+  **Your turn**: you must act. A task ready to approve keeps its *Ready to approve* label, but its
+  badge and row accent use the Your turn colour, and it sits with the tasks waiting for you. A
+  task that waits for you still counts once its agent has exited or its space was closed.
+  **Working** is the Board's working group (reviews and checks included); **To do** and
+  **Done** are Ready.
+- **A coordinator** (the Board's, a machine's or a project's) is a row with its own state square:
+  it counts by that state, like any agent row. The repo bar's summary (`3 TASKS · 1 YOUR TURN`)
+  is the one exception: it counts the repo's tasks only, since its coordinator's row and state
+  sit right above it.
+- **A row standing for several terminals** (a space with several agents, its card showing their
+  number) counts once, in the state the row shows: its most urgent terminal. With Settings ›
+  Appearance › Home screen › **Individual agents** on, each agent is a row, and a count. A
+  space shared by several tasks, or by a coordinator and other agents, is split into one row per
+  task or agent, and counts the same way.
+- Each counter's number uses its own state colour, that of its legend square.

package/docs/installation.md

@@ -58,7 +58,7 @@ The script ([read it first](https://wherdr.dev/install), source in
    Mac with Homebrew, otherwise the official Node.js 22 build from nodejs.org, its checksum
    checked, unpacked in `~/wherdr/node` (used by wherdr only: your `PATH` is not changed). With
    musl libc (Alpine) it gives the install links instead;
-4. runs `herdr plugin install afloury/wherdr --yes`: the [Herdr plugin](plugins.md#install-as-a-herdr-plugin)
+4. runs `herdr plugin install afloury/wherdr --ref 2.x --yes`: the [Herdr plugin](plugins.md#install-as-a-herdr-plugin)
    downloads the GitHub release package of its version (checksum checked, no wait for npm),
    installs it in `~/wherdr/app`, starts it on `http://localhost:7683`, opens the setup guide in
    your browser (first install) and binds **prefix+i** to its panel;
@@ -87,7 +87,7 @@ Settings, as environment variables (`curl -fsSL https://wherdr.dev/install | WHE
 | `WHERDR_SERVICE` | — | `off`: no login service; wherdr then starts with Herdr only (the plugin's startup hook). |
 | `WHERDR_YES` | — | `1` answers yes to every question (non-interactive use), installing Node.js included. |
 | `WHERDR_NO_BROWSER` | — | `1` never opens a browser. |
-| `WHERDR_REF` | main | Git tag or branch of the plugin. |
+| `WHERDR_REF` | `2.x` | Git tag or branch of the plugin (`2.x` is the wherdr 2 release branch). |
 | `WHERDR_PLUGIN` | `afloury/wherdr` | A local checkout to link and build instead (development, tests). |
 
 Update: run the command again (it offers the update), **U** in the wherdr panel, or **Update** in
@@ -134,6 +134,13 @@ home screen and in Settings › About, with the release notes and the exact comm
 Hide it until the next version with ×. Set `WHERDR_UPDATE_CHECK=off` to disable the check. The
 installed version is shown in Settings › About.
 
+Updates stay within the running major version: wherdr 2 only offers 2.x releases, and the
+one-tap update refuses to install a new major. When wherdr 3 is published, the home screen shows
+a **“wherdr 3 is out”** card instead of the banner, with its release notes, its migration guide and a
+Copy button for the command that installs wherdr 3 **beside** wherdr 2 (it only prints its plan
+until you add `--yes`). wherdr 2 keeps running with its data, and 2.x fixes are still offered in
+Settings › About.
+
 GitHub release packages (including the bundled agent skill) and Homebrew
 updates are published without waiting for npm moderation. Native plugin installs and updates
 use the GitHub `.tgz` and verify its SHA-256 checksum before extraction. A failed one-tap
@@ -142,7 +149,9 @@ GitHub first, then the prebuilt npm package of the exact same version (with its
 This also keeps older 1.3.x releases without GitHub archives installable with Node.js or Bun.
 Packages predating the bundled skill retain the plugin checkout's commands and skill, so
 skill refresh, installation and uninstallation remain available.
-The installer fetches `main` explicitly unless you set `WHERDR_REF`.
+The installer fetches the `2.x` branch unless you set `WHERDR_REF`. The plugin update command
+adds `--ref 2.x`, and a git checkout follows `2.x` (`git checkout 2.x`) before pulling: `main`
+holds wherdr 3.
 
 The SHA-256 checksum detects damaged downloads. It is served beside the archive, so someone
 who can replace both files can make them match; it does not prove the publisher’s identity
@@ -175,10 +184,10 @@ and the app says so. Every step is logged in `~/wherdr/update.log`.
 | Setup | Update command (in the wherdr folder) |
 | --- | --- |
 | The one command | Run `curl -fsSL https://wherdr.dev/install \| sh` again: it offers the update (GitHub release package) |
-| Herdr plugin, Node.js | **U** in the **wherdr** panel, or `herdr plugin install afloury/wherdr --yes` (wherdr restarts on the new version) |
+| Herdr plugin, Node.js | **U** in the **wherdr** panel, or `herdr plugin install afloury/wherdr --ref 2.x --yes` (wherdr restarts on the new version) |
 | `wherdr` command (npm) | `npm install -g wherdr@latest && wherdr restart` (npx: stop it, then `npx wherdr@latest`) |
 | `wherdr` command (Homebrew) | `brew upgrade wherdr`, then `brew services restart wherdr` |
-| From source | `git pull && npm ci && npm run build`, then restart wherdr |
+| From source | `git checkout 2.x && git pull && npm ci && npm run build`, then restart wherdr |
 
 Update notices also show the number of newer stable releases and up to four
 additional version numbers besides the latest. This measures published releases,

package/docs/networks.md

@@ -26,7 +26,10 @@ tailscale serve --bg --https=7683 http://127.0.0.1:7683
 ```
 
 Tailscale Serve listens on HTTPS port 7683 of your tailnet name, with a valid certificate, and
-forwards to wherdr's local HTTP port. Only devices of your tailnet can reach it.
+forwards to wherdr's local HTTP port. Only devices of your tailnet can reach it, and wherdr
+answers only **your own** devices among them: another user's device in a team tailnet, a node
+shared in from another tailnet or a tagged node is refused until you set up a passkey (see
+[Your own devices only](security.md#own-devices)).
 
 **wherdr enables that address by itself**, on a server without a screen too: at startup, every
 30 seconds, and when an address it does not know yet is opened, it reads what `tailscale serve`
@@ -59,9 +62,11 @@ desktop layout can replace the Herdr terminal client for daily work.
 **5. Passkey lock** (optional): Settings → Security → **Enable passkey lock**. The
 first passkey asks for a bootstrap token, printed in the server log (`~/wherdr/wherdr.log`,
 **L** in the wherdr panel); it changes on each restart and is only needed for that first passkey. Add a passkey on each of
-your devices after that (see [New device](security.md#new-device)). Without one, every device of your
-tailnet can control your agents: enough when the tailnet is yours alone, a passkey adds a lock
-on each device when someone else shares the tailnet or your devices.
+your devices after that (see [New device](security.md#new-device)). Without one, wherdr
+answers this computer and your own tailnet devices; devices of other people on your tailnet are
+always refused (with a passkey, they reach the lock screen). A passkey adds an automatic lock on
+each device if you want one, for example on a computer other people log in to (see
+[Shared computers](security.md#shared-computers)).
 
 **6. More machines** (optional): register your other computers in Herdr over SSH
 (`herdr machine add`, see [Several machines (SSH)](machines.md#several-machines-ssh)). Their agents show

package/docs/notifications.md

@@ -52,6 +52,13 @@ The screen reads top to bottom:
    others). Each says how it differs from the default; removing one goes back to it.
 4. **This device's notifications** only asks this browser or phone for permission to
    show push notifications, and shows whether it is allowed, blocked or not asked yet.
+   Below it, every registered device is listed with the result of the last push sent to it:
+   delivered, expired (404/410: the browser dropped the subscription), rejected (401/403),
+   push service unreachable, or failed with its HTTP status. Each device keeps its own result,
+   so one device's success never hides another's failure. An expired device is no longer
+   tried; **Remove** forgets it (otherwise it goes away on its own after 30 days). Only the
+   time, the class and the status code are stored in `data/push.json`, never the push
+   service's response.
 
 A coordinator's exception is kept by its identity (machine, Herdr session, level and
 repo), not its pane: it still applies after `coordinator new` or a restart.

package/docs/plugins.md

@@ -7,7 +7,7 @@
 This is what [the one command](installation.md#the-one-command) installs; you can also run it yourself, on Linux
 and macOS, with Herdr ≥ 0.9.1 (no checks for Herdr or Node.js first). In three lines:
 
-1. Run `herdr plugin install afloury/wherdr`: it installs wherdr, starts it
+1. Run `herdr plugin install afloury/wherdr --ref 2.x`: it installs wherdr, starts it
    (`✓ wherdr is running → http://localhost:7683`) and, at the first install on a computer with a
    screen, opens the setup guide in your browser (`open` on macOS, `xdg-open` on Linux with a
    display; a headless server, or `WHERDR_NO_BROWSER=1` in the environment of the install, just

package/docs/quick-start.md

@@ -33,20 +33,21 @@ address and the phone steps instead. See [The one command](installation.md#the-o
 
 **wherdr 2.0 runs only natively**, as your user, so it can act on the
 [herdr-projects Board](board.md#works-great-with-herdr-projects) (Coordinator, reply, start, stop,
-approve). Other ways, after it: `herdr plugin install afloury/wherdr` (the same plugin, without
+approve). Other ways, after it: `herdr plugin install afloury/wherdr --ref 2.x` (the same plugin, without
 the checks), and [the `wherdr` command](command.md#the-wherdr-command) from npm or Homebrew (npm can hold a
 new release for up to two days; the installer gets it from GitHub at once).
 
 At first launch, wherdr opens a **setup guide**: the Herdr agents it found, your phone
-(Tailscale), then the passkey lock and notifications. Skip it any time; finishing or skipping is
+(Tailscale), then notifications. Skip it any time; finishing or skipping is
 saved on the server (`data/onboarding.json`), so your other devices do not show it again. Reopen
 it from Settings › About › **Setup guide**. On a phone that already opens wherdr through its
 tailnet address, the phone step becomes Add to Home Screen.
 
-**Passkeys are tied to the address they are created on.** Once wherdr's tailnet address is
-published and answers, the guide opened on `localhost` shows **Continue on
-<machine>.<tailnet>.ts.net**, which reopens it at the same step on that address, and its Security
-step (like Settings › Security) sends the passkey lock there. Nothing redirects on its own:
+Once wherdr's tailnet address is published and answers, the guide opened on `localhost` shows
+**Continue on <machine>.<tailnet>.ts.net**, which reopens it at the same step on that address
+(notifications and the installed app need it). The guide does not propose a passkey: the
+optional passkey lock is in Settings › Security, which also sends it to that address, since
+**passkeys are tied to the address they are created on**. Nothing redirects on its own:
 `localhost` stays valid on the computer. The installer, the Herdr plugin and `wherdr open` open
 that address too when it is already published.
 

package/docs/quotas.md

@@ -30,7 +30,16 @@ week, with reset times), for every online machine.
 
 - **Codex**: nothing to do, Codex writes its limits in its session files. Machines on different
   Codex accounts get one block each (told apart by a short hash of the account ID found in the
-  session files; `~/.codex/auth.json` is never read).
+  session files; `~/.codex/auth.json` is never read). Codex only writes that account ID in
+  conversations created with a ChatGPT login by a recent Codex version. A reading without it
+  joins another machine's reading only when both show the same 5-hour window and the same
+  weekly window (resets within a minute, week already started), a sign of one account: the
+  machines then share one Codex row at the top, like Claude. Otherwise it stays under its own
+  machine and is never merged with another conversation or machine. A new conversation identifies an account switch even before it
+  logs limits; until a reading for that account is available, no Codex gauge is shown. Failed reads do not
+  reuse an older machine snapshot, and remembered weekly limits cannot cross account
+  identities. Without a known fingerprint, remembered weekly corrections are not reused,
+  even on the same machine. Session files are read from `~/.codex/sessions`.
 - **Claude Code** only gives them to its status line. On each machine, install wherdr's
   invisible status line (it displays nothing, and chains to your existing status line if you
   have one):

package/docs/release-notes-2.5.0.md

@@ -0,0 +1,25 @@
+## New
+
+You can choose the order of the phone key bar in Settings › Terminal, with a preview and a reset to the default. The order is saved on the device and shared by Conversation and Terminal. Thanks to [@followcat](https://github.com/followcat) for the idea.
+
+Notification settings show each registered device's last push delivery result and let you remove expired registrations.
+
+## Improved
+
+The interface is always in English, including on browsers previously set to French. Messages written by you and your agents keep their original language. The phone header chevron has a full-size button box, and desktop view switching uses a single action button.
+
+The agent skill explains how to share verified links that users can open. Focused unit and component coverage replaces repeated browser cases, CI shards phone tests, and full develop coverage runs nightly. Develop prereleases are built only from commits that passed CI.
+
+## Fixed
+
+After a server restart, machines recover independently and existing panes remain visible until their machine has been read or confirmed offline. Codex quota readings stay with the correct account, and Home WORKING counters follow Board groups without counting remote tasks twice.
+
+On iPhone and iPad, tapping the terminal keeps the keyboard closed; the message field and keyboard button still open it. Phone navigation returns from tasks to the Board, wherdr links reuse the existing window, and closing a terminal no longer falsely reports that its process stopped.
+
+Conversation images can load from other machines and ports on the same tailnet, with an explanation and an open link when loading fails. Codex photo placeholders no longer appear as message text, older explicitly resumed conversations can be found, and current Codex sessions no longer show a false restart-to-update notice. omp provider errors now appear in the conversation, and coordinators can be found by conversation after their pane closes.
+
+## Update
+
+No migration is required from 2.4.0. Node.js 22 or newer and Herdr 0.9.1 or newer remain required. The Board continues to support herdr-projects 1.2.x, not Shepherdr 2.x.
+
+[Full changelog](https://github.com/afloury/wherdr/blob/v2.5.0/CHANGELOG.md)

package/docs/release-notes-2.6.0.md

@@ -0,0 +1,29 @@
+## New
+
+2.6 is the last new version of wherdr 2. It gets you ready for wherdr 3, which installs **beside** wherdr 2 rather than replacing it.
+
+- **Updates stay on wherdr 2.** The update check only offers 2.x versions. When wherdr 3 is published, the Update button never installs it, and wherdr 2 fixes (2.6.1, 2.6.2…) are still offered.
+- **A "wherdr 3 is out" card.** Once wherdr 3 is released, Home shows a card instead of the update banner, with links to its release notes and its migration guide, and a Copy button for the command that installs wherdr 3 beside this version. That command shows its plan first and changes nothing until you add `--yes`. wherdr 2 keeps running with its data, so you can compare both and go back at any time.
+- **Installs follow the 2.x branch.** The Herdr plugin now updates from the `2.x` branch (**U** in the panel, and the update command, add `--ref 2.x`), and the curl installer installs `2.x` by default (`WHERDR_REF` still picks another branch or tag). If you run wherdr from a git checkout, switch it to the release branch once with `git checkout 2.x` before pulling; the update banner shows that command.
+- **SVG diagrams in conversations.** A static `svg` code block shows as a theme-aware preview you can enlarge or copy; unsafe or incomplete content stays plain code. Thanks to [@guileen](https://github.com/guileen).
+- **omp context at a glance.** Agent rows and the composer show how much of omp's context is used.
+
+## Improved
+
+- **Tighter security on the tailnet.** Without a passkey, only your own Tailscale devices can open wherdr; another user's device in a team tailnet, or a shared-in or tagged node, is refused until a passkey is set. A locked device learns nothing before unlocking (no passkey names, machine name or server clock). **Lock all devices** now invalidates every session, push subscription and open connection at once.
+- **Lighter conversation reads.** While an agent writes, wherdr reads only what was added to its transcript.
+
+## Fixed
+
+- A finished task's Agent tab shows the agent's conversation instead of the shell left behind.
+- Conversations reopen at their reading position, are not redrawn when nothing changed, and keep a sent message visible while reads fail for a while.
+- A repeated Enter (from a dictation app, for example) no longer sends the same message twice, and a single stray Escape no longer stops the agent.
+- Home counters and badges agree on task states, the Board grouping appears right after a reload, and two machines on one Codex account share one quota row.
+- Reconnecting after a suspend or a redeploy no longer hangs on a stalled read.
+- On macOS, when wherdr runs as a service, Settings › Phone no longer says *not connected* while Tailscale runs, and Web Push works.
+
+## Update
+
+No migration is required from 2.5.0. Node.js 22 or newer and Herdr 0.9.1 or newer remain required. Git checkouts: run `git checkout 2.x` once before your next `git pull`.
+
+[Full changelog](https://github.com/afloury/wherdr/blob/v2.6.0/CHANGELOG.md)

package/docs/security.md

@@ -10,7 +10,7 @@ wherdr drives Herdr, so **it can run anything as your user**.
   network** (Tailscale or [equivalent](networks.md#other-private-networks)). Never add a public route
   (port forwarding, public reverse proxy, ngrok…); the only exception is a Cloudflare Tunnel
   behind Cloudflare Access, with its risks (it needs `WHERDR_TRUSTED_NETWORKS=any`).
-- It answers only this computer and the tailnet: see [Network access](security.md#network-access).
+- It answers only this computer and your own tailnet devices: see [Network access](security.md#network-access).
 - Requests are accepted only for `localhost`, loopback addresses, the runtime's hostname, the
   hostname in `APP_URL`, the tailnet name `tailscale serve` publishes for wherdr's own port
   (read from Tailscale on the machine, never from a request, and only while it is published),
@@ -29,21 +29,48 @@ wherdr drives Herdr, so **it can run anything as your user**.
 
   A network error or a server restart never locks the app. **Lock all devices** (Settings →
   Security, for a lost or stolen device) ends every session, this one included, and keeps the
-  passkeys: each device unlocks again with its own. Turning the lock off removes the passkeys and
-  invalidates every session. Lost passkey: delete `data/auth.json` on the server; the app is open
-  again to whoever can reach it.
+  passkeys: each device unlocks again with its own. It draws a new signing secret and a new random
+  session generation, so even a cookie forged by someone who once read `data/auth.json` stops
+  working; open WebSockets close at once, and every push subscription is removed (a device
+  subscribes again by itself once unlocked; its own quiet setting is reset). Turning the lock off
+  does the same and removes the passkeys; every open app then posts its push subscription again
+  at once, and an app that was closed or asleep does so when it opens or reconnects. The first start after upgrading to this version ends the open
+  sessions once (the old numeric generation is replaced); the passkeys stay. Lost passkey: delete
+  `data/auth.json` on the server; the app is open again to whoever can reach it.
+- **Before the unlock**, a locked device only learns that the app is locked: no passkey names or
+  dates, no machine name, no server clock. Unlocking lists no key: the device offers its own
+  passkey for the site (passkeys are registered as discoverable credentials). Unlock attempts
+  are limited to 10 per minute per client, and at most 100 unlock challenges wait at once.
+- **Protected files**: the file browser and the file paths shown in conversations never preview,
+  download or stream wherdr's data folder (`DATA_DIR`, with `auth.json`, the push keys and
+  subscriptions), `~/.ssh` or `~/.config/herdr`, on any machine, even through a symlink or inside
+  a browsed project. Agents themselves can still read them: the lock protects the app, not the
+  machine.
 - <a id="new-device"></a>**New device**: it can only get in with an existing passkey. Unlock it
   with a passkey synced by your password manager (iCloud Keychain, Google Password Manager,
   1Password…), or with the passkey of another device through the browser's "use a phone or
   tablet" QR code, then Settings → Security → **Add this device** to give it its own passkey.
-- Without a passkey, **anyone who can reach the address can control your agents**: every device
-  on your tailnet, and every user of your tailnet if you share it.
+- By default, with no passkey, wherdr answers **this computer and your own tailnet devices**:
+  devices of other people on your tailnet are always filtered out (no setting turns this off).
+  Whoever uses this computer or one of your devices can control your agents, other OS users of
+  this computer included (see [Shared computers](security.md#shared-computers)). The passkey is
+  optional: it adds an automatic lock on each device if you want one, and then lets other
+  people's tailnet devices reach that lock.
 - Writes require `Content-Type: application/json` (or `image/*` for photos, `application/octet-stream` for attached files) and an `Origin`
-  matching the host, WebSockets included. API reads sent from another site (links, images,
+  matching the host, WebSockets included. Request bodies are read with a size limit (256 KB for
+  JSON, 20 MB for photos, 30 MB for attached files), chunked bodies included: past it the server
+  stops reading, answers `too_large` and closes the connection. API reads sent from another site (links, images,
   `no-cors` fetches, reported by the browser's `Sec-Fetch-Site`) are refused too.
 - A strict Content Security Policy limits scripts to the app's own origin and hashed inline
   scripts, and connections to that origin and its WebSockets. It also blocks embedded objects
   and framing.
+- Images in agent replies load from the app's own origin (`data:` and `blob:` included) and,
+  over HTTPS only, from any machine and port of the tailnet wherdr is reached on
+  (`https://*.<tailnet>.ts.net:*`). That tailnet is read from Tailscale on the machine, from
+  `APP_URL`, from `HERDR_WEB_ALLOWED_HOSTS` and from what `tailscale serve` publishes, never from
+  a request; a name outside `*.ts.net` adds nothing. Any other image (public sites, another
+  tailnet, plain HTTP, Tailscale IP addresses) is refused by the browser and shown as a note with
+  a link to open it in a new tab.
 - wherdr never changes your agents' global settings: model and effort changes are for the
   current session only.
 
@@ -51,17 +78,19 @@ See [SECURITY.md](../SECURITY.md) to report a vulnerability.
 
 ### Network access
 
-wherdr answers **this computer and your tailnet only**. A device on any other network (a coffee shop
+wherdr answers **this computer and your own tailnet devices only**. A device on any other network (a coffee shop
 Wi-Fi, an office LAN, the Internet) gets HTTP 403 (`network`), with a page that says why, even
-when it knows the address and the port. The passkey lock is never required, on any network: it
-is an extra lock on top, and it needs HTTPS (or `localhost`).
+when it knows the address and the port. The passkey lock is never required for this computer
+and your own devices: it is an extra lock on top, and it needs HTTPS (or `localhost`). Other
+people's tailnet devices get in only once a passkey is set up (see below).
 
 **Good practices**
 
 - Prefer **Tailscale** (`tailscale serve`): a private HTTPS address, only for your devices.
 - A network you add **without HTTPS** gets no passkey, no installed app and no notifications, and
   any device on that network can control your agents.
-- **Create a passkey** as soon as wherdr is reached over HTTPS.
+- **Passkey** (optional, over HTTPS): an automatic lock on each device, if you want one. Your
+  own devices get in without it.
 
 How a request is judged, before anything else (WebSockets included):
 
@@ -74,6 +103,20 @@ How a request is judged, before anything else (WebSockets included):
     reads that from Tailscale every 10 seconds (the CLI or Tailscale's socket); an
     interface address in that range proves nothing, since a LAN may use it too. When Tailscale is
     stopped, missing or unreadable for 30 seconds, no direct connection counts as tailnet.
+  - <a id="own-devices"></a>*Your own devices only*: a peer counts when Tailscale lists it under
+    the same user as this machine (`UserID`), is not tagged, and is not a node of someone you
+    shared this machine with (`ShareeNode`). Every other peer is refused with HTTP 403 (`network`, `why: foreign`) while
+    no passkey is set up: another user's device in a team tailnet, a machine someone
+    [shared](https://tailscale.com/kb/1084/sharing) with you (it belongs to another user), a
+    device of someone you shared this machine with, a tagged node (tagged devices
+    belong to no user, your own tagged servers included). When the machine running wherdr is
+    itself tagged, its owner is unknown: no peer counts as yours, so only this computer gets in
+    until a passkey is set up. The same rule applies to the client `tailscale serve` names in
+    `X-Forwarded-For`: without a passkey, it must be one of your devices in the latest reading
+    (a device that joined in the last seconds, or any device while Tailscale cannot be read, is
+    refused). The other peers are remembered from the last valid reading, so a failed reading
+    does not let them in. Once a passkey is set up, they are let through to the lock screen and
+    need that passkey like any device.
 - **Proxy headers**, only when the peer is this computer (a proxy on the machine, such as
   `tailscale serve`): every address in `X-Forwarded-For`, `Forwarded`, `X-Real-IP`,
   `CF-Connecting-IP` must be loopback, the tailnet or a trusted range too. They can only refuse
@@ -99,6 +142,13 @@ How a request is judged, before anything else (WebSockets included):
   loopback or this machine's tailnet address as Tailscale reports it, with Tailscale running
   (`HOST=0.0.0.0`, a LAN address), and says how to fix it.
 
+> [!IMPORTANT]
+> <a id="shared-computers"></a>**Every user of this computer counts as this computer.** Loopback
+> connections are not tied to an OS user: on a machine where other people have an account (a
+> shared server, a lab machine), any of them can open `http://127.0.0.1:7683/` and control
+> your agents. wherdr keeps loopback open so you can always reach it on your own machine. On a
+> machine others log in to, the optional passkey locks loopback too.
+
 > [!IMPORTANT]
 > **A relay on this computer counts as this computer.** A reverse proxy or TCP forward you run
 > on the machine (nginx without forwarded headers, `socat`, an SSH tunnel, a tunnel client) opens

package/docs/troubleshooting.md

@@ -20,6 +20,10 @@
 - **HTTP 403 "wherdr only answers this computer and your tailnet"**: the device is on another
   network (Wi-Fi, LAN). Open wherdr through Tailscale, or name that private network in
   `WHERDR_TRUSTED_NETWORKS` ([Network access](security.md#network-access)).
+- **HTTP 403 "This device is not one of the owner's"**: Tailscale lists the device under another
+  user (a team tailnet), as shared in from another tailnet, or as a tagged node. Without a passkey,
+  wherdr only answers your own devices: log that device in to Tailscale with your own account, or
+  set up a passkey ([Your own devices only](security.md#own-devices)).
 - **HTTP 403 "Tailscale Funnel opens wherdr to the Internet"**: turn Funnel off for wherdr’s port (`tailscale funnel status`).
 - **wherdr stops at startup with "Refusing to listen on …"**: `HOST` is not loopback nor this
   machine's tailnet address. Set `HOST=127.0.0.1` and use `tailscale serve`, or see

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wherdr",
-  "version": "2.4.0",
+  "version": "2.6.0",
   "license": "MIT",
   "type": "module",
   "description": "Unofficial mobile web client (PWA) to drive the coding agents running in Herdr",

package/skills/wherdr/SKILL.md

@@ -30,6 +30,27 @@ So a message from the Board is the user's own words: answer and act on it as on
 from them. Report your progress with `herdr-projects report` as usual: the Board shows the
 state, the message and the progress you report, the pull request and the review.
 
+## Links
+
+- **Files:** verify that the file exists and is readable on the agent's machine, then
+  write its absolute path in inline code (backticks), optionally with `:line` or
+  `:line:column` (these suffixes are stripped, not navigated to). Chat recognizes
+  paths; Markdown file links do not use its file viewer. `~/` means that machine's
+  home; relative paths use the pane's working folder, falling back to home when
+  unknown or outside home. Never use a path relative to another folder (such as a
+  vault). The file and its symlink target must stay inside that machine's home.
+  Terminal links open only HTTP(S) URLs, not file paths.
+- **Web:** give an absolute HTTPS URL reachable from the user's phone and other
+  machines (for example through their tailnet). Never offer localhost, loopback
+  addresses (including `127.0.0.1`) or relative URLs as portable links. Follow
+  redirects and verify a successful HTTP status and the final destination; a local
+  response alone does not prove access from another device.
+- **Images:** prefer displaying them directly in chat (web images must come from
+  wherdr's own origin or an HTTPS tailnet address). For an image URL, verify
+  that the final response serves the image itself with an `image/*` Content-Type,
+  rather than an HTML page.
+- If no verified link is available, say so clearly instead of offering a broken one.
+
 ## What the Board does not do
 
 No task is added, delegated, stopped, archived or cleared from wherdr: the user asks the

package/.output/public/_nuxt/AgentView.B12D6ccj.css

@@ -1 +0,0 @@
-.header-menu[data-v-562a5bfa]{display:contents}.grid-backdrop[data-v-a290ab6b]{z-index:-1;pointer-events:none;contain:strict;overflow:hidden}.gbd-dots[data-v-a290ab6b],.grid-backdrop[data-v-a290ab6b]{position:absolute;inset:0}.gbd-dots[data-v-a290ab6b]{background-image:radial-gradient(circle at 32px 32px,color-mix(in srgb,var(--muted) 60%,transparent) 1.4px,transparent 2.2px),linear-gradient(color-mix(in srgb,var(--line) 30%,transparent) 1px,transparent 1px),linear-gradient(90deg,color-mix(in srgb,var(--line) 30%,transparent) 1px,transparent 1px),radial-gradient(ellipse 50% 40% at 50% 25%,color-mix(in srgb,var(--accent) 6%,transparent),transparent 75%);background-position:calc(50% - 32px) -32px,top,top,0 0;background-size:64px 64px,64px 64px,64px 64px,100% 100%;-webkit-mask:radial-gradient(85% 75% at 50% 35%,#000 25%,#00000073 60%,#0000 88%);mask:radial-gradient(85% 75% at 50% 35%,#000 25%,#00000073 60%,#0000 88%)}.gbd-packets[data-v-a290ab6b]{position:absolute;inset:0;-webkit-mask:radial-gradient(70% 60% at 50% 30%,#000 30%,#0000 75%);mask:radial-gradient(70% 60% at 50% 30%,#000 30%,#0000 75%)}.gbd-packets[data-v-a290ab6b] .pkt{will-change:transform,opacity;--c:var(--accent);display:block;position:absolute}.gbd-packets[data-v-a290ab6b] .pkt.alt{--c:var(--lav)}.gbd-packets[data-v-a290ab6b] .pkt.h{background:linear-gradient(90deg,transparent,var(--c));width:56px;height:1px;margin-left:-56px}.gbd-packets[data-v-a290ab6b] .pkt.h.rev{background:linear-gradient(270deg,transparent,var(--c));margin-left:0}.gbd-packets[data-v-a290ab6b] .pkt.h:after{content:"";background:var(--c);width:6px;height:5px;box-shadow:0 0 10px var(--c);position:absolute;top:-2px;right:-3px}.gbd-packets[data-v-a290ab6b] .pkt.h.rev:after{left:-3px;right:auto}.gbd-packets[data-v-a290ab6b] .pkt.v{background:linear-gradient(180deg,transparent,var(--c));width:1px;height:56px;margin-top:-56px}.gbd-packets[data-v-a290ab6b] .pkt.v.rev{background:linear-gradient(0deg,transparent,var(--c));margin-top:0}.gbd-packets[data-v-a290ab6b] .pkt.v:after{content:"";background:var(--c);width:5px;height:6px;box-shadow:0 0 10px var(--c);position:absolute;bottom:-3px;left:-2px}.gbd-packets[data-v-a290ab6b] .pkt.v.rev:after{top:-3px;bottom:auto}.gbd-vignette[data-v-a290ab6b]{background:linear-gradient(to right,var(--bg),transparent 14%,transparent 86%,var(--bg)),linear-gradient(to bottom,var(--bg),transparent 18%,transparent 70%,var(--bg));position:absolute;inset:0}.xterm{cursor:text;-webkit-user-select:none;user-select:none;position:relative}.xterm.focus,.xterm:focus{outline:none}.xterm .xterm-helpers{z-index:5;position:absolute;top:0}.xterm .xterm-helper-textarea{opacity:0;z-index:-5;white-space:nowrap;resize:none;border:0;width:0;height:0;margin:0;padding:0;position:absolute;top:0;left:-9999em;overflow:hidden}.xterm .composition-view{color:#fff;white-space:nowrap;z-index:1;background:#000;display:none;position:absolute}.xterm .composition-view.active{display:block}.xterm .xterm-viewport{cursor:default;background-color:#000;position:absolute;inset:0;overflow-y:scroll}.xterm .xterm-screen{position:relative}.xterm .xterm-screen canvas{position:absolute;top:0;left:0}.xterm .xterm-scroll-area{visibility:hidden}.xterm-char-measure-element{visibility:hidden;line-height:normal;display:inline-block;position:absolute;top:0;left:-9999em}.xterm.enable-mouse-events{cursor:default}.xterm .xterm-cursor-pointer,.xterm.xterm-cursor-pointer{cursor:pointer}.xterm.column-select.focus{cursor:crosshair}.xterm .xterm-accessibility:not(.debug),.xterm .xterm-message{z-index:10;color:#0000;pointer-events:none;position:absolute;inset:0}.xterm .xterm-accessibility-tree:not(.debug) ::-moz-selection{color:#0000}.xterm .xterm-accessibility-tree:not(.debug) ::selection{color:#0000}.xterm .xterm-accessibility-tree{-webkit-user-select:text;user-select:text;white-space:pre}.xterm .live-region{width:1px;height:1px;position:absolute;left:-9999px;overflow:hidden}.xterm-dim{opacity:1!important}.xterm-underline-1{text-decoration:underline}.xterm-underline-2{-webkit-text-decoration:underline double;text-decoration:underline double}.xterm-underline-3{-webkit-text-decoration:underline wavy;text-decoration:underline wavy}.xterm-underline-4{-webkit-text-decoration:underline dotted;text-decoration:underline dotted}.xterm-underline-5{-webkit-text-decoration:underline dashed;text-decoration:underline dashed}.xterm-overline{text-decoration:overline}.xterm-overline.xterm-underline-1{text-decoration:underline overline}.xterm-overline.xterm-underline-2{-webkit-text-decoration:overline double underline;-webkit-text-decoration:overline double underline;text-decoration:overline double underline}.xterm-overline.xterm-underline-3{-webkit-text-decoration:overline wavy underline;-webkit-text-decoration:overline wavy underline;text-decoration:overline wavy underline}.xterm-overline.xterm-underline-4{-webkit-text-decoration:overline dotted underline;-webkit-text-decoration:overline dotted underline;text-decoration:overline dotted underline}.xterm-overline.xterm-underline-5{-webkit-text-decoration:overline dashed underline;-webkit-text-decoration:overline dashed underline;text-decoration:overline dashed underline}.xterm-strikethrough{text-decoration:line-through}.xterm-screen .xterm-decoration-container .xterm-decoration{z-index:6;position:absolute}.xterm-screen .xterm-decoration-container .xterm-decoration.xterm-decoration-top-layer{z-index:7}.xterm-decoration-overview-ruler{z-index:8;pointer-events:none;position:absolute;top:0;right:0}.xterm-decoration-top{z-index:2;position:relative}.key-modifier[aria-pressed=true][data-v-33673e53]{background:var(--accent);color:var(--on-accent);border-color:var(--accent)}.usage-limit-card[data-v-8c0c9595]{border-top:1px solid var(--line);white-space:normal;text-align:left;color:var(--ochre);flex-wrap:wrap;justify-content:flex-start;padding-top:8px}.restart-text small[data-v-8c0c9595]{color:var(--muted);display:block}.dismissible-transcript-note[data-v-745f7953]{flex:none;align-items:center;gap:8px;padding:0 4px 0 12px;display:flex}.dismissible-transcript-note>span[data-v-745f7953]{flex:1;padding:7px 0}.dismissible-transcript-note>button[data-v-745f7953]{min-width:40px;min-height:40px;color:var(--muted);font:22px/1 var(--sans);touch-action:manipulation;border-radius:6px;flex:none;align-self:stretch}.dismissible-transcript-note>button[data-v-745f7953]:focus-visible,.dismissible-transcript-note>button[data-v-745f7953]:hover{color:var(--text);background:var(--line-soft)}