interlatch 0.27.0__tar.gz → 0.27.2__tar.gz

{interlatch-0.27.0 → interlatch-0.27.2}/CHANGELOG.md

@@ -3,6 +3,21 @@
 <!-- Don't add lines here: a pull request puts its line in a new file in changelog.d/ (see changelog.d/README.md),
      and each release moves the files it took into a dated section below. -->
 
+## 0.27.1 (2026-10-16)
+
+- **IBM Bob as the analyzer:** a key that is only in your shell (`BOB_API_KEY`, or a provider's `*_API_KEY`) used to
+  leave sessions unanalyzed in the background while `interlatch install` called it ready; install now offers to save
+  it, and `interlatch status` says when background analysis can't see it. Bob is told it has no tools and a call that
+  reaches for one is tried once more, and failed knowledge bases are named by project instead of a cut-off path
+  ([Analysis](docs/analysis.md)).
+
+## 0.27.0 (2026-10-16)
+
+- **Formations:** the Party page builds decks, teams of one to three agents in the order they fight, up to five
+  of them. The Arena fields the deck you pick, as a relay: lead against lead, and whoever wins a bout stays on with
+  the HP it has left. A deck of one is the old champion duel. Sheets now carry the lineup (format 3), so arena players
+  on older versions don't meet newer ones until they update ([Party](docs/party.md#formations)).
+
 ## 0.26.0 (2026-10-16)
 
 - **Adventure:** a new page in Innerlatch puts every lesson that counts on a pixel world map, one region per attribute

{interlatch-0.27.0 → interlatch-0.27.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: interlatch
-Version: 0.27.0
+Version: 0.27.2
 Summary: Shared memory for your coding agents: records every session (Claude Code, Codex, Copilot, Bob, Antigravity, OpenCode) locally and keeps what they learned, each lesson linked to the session it came from.
 Project-URL: Homepage, https://interlatch.com
 Project-URL: Documentation, https://interlatch.com/docs/

interlatch-0.27.2/changelog.d/hub-browser-sessions.md

@@ -0,0 +1,4 @@
+- **One row per browser on Team › People:** opening the hub from your own dashboard again no longer leaves the
+  browser's previous session behind, so the same browser stops piling up as more and more rows. Older sessions already
+  there fold into one line under the browser, with one **Revoke them**, and the People table stacks each person on a
+  narrow window instead of cutting off its buttons.

{interlatch-0.27.0 → interlatch-0.27.2}/docs/analysis.md

@@ -54,9 +54,11 @@ instance, have no cache split (so no cost estimate), Bob tasks have no per-call
      call is thrown away and the analysis counts as failed.
    - **IBM Bob** (`backend = "bob"`): Bob Shell's `bob run --format stream-json --max-turns 1 --disable-mcp
      --disable-subagents`, with every tool group disabled, in a throwaway workspace whose custom mode holds
-     Interlatch's instructions and no tools; as with Codex, a reply that follows any tool call is thrown away. Headless
-     runs need a Bob API key (the app's sign-in isn't used): `interlatch config set-key bob`, the IBM Bob tab in
-     **Status › Analysis**, or `BOB_API_KEY`. Bob picks its own model. It keeps each analysis in its own task list;
+     Interlatch's instructions and no tools; as with Codex, a reply that follows any tool call is thrown away (and the
+     call tried once more). Headless runs need a Bob API key (the app's sign-in isn't used): `interlatch config set-key
+     bob` or the IBM Bob tab in **Status › Analysis**. `BOB_API_KEY` works too, but only from a terminal that has it:
+     background analysis and the dashboard don't see your shell's variables, so `interlatch install` offers to save it.
+     Bob picks its own model. It keeps each analysis in its own task list;
      Interlatch doesn't import those as sessions.
 
    - **A model provider's API** (`backend = "anthropic"`, `"bedrock"`, `"openai"`, `"azure"`, `"openrouter"`,

{interlatch-0.27.0 → interlatch-0.27.2}/docs/ja/analysis.md

@@ -49,9 +49,10 @@ Codex、Copilot、Bob、Antigravity、OpenCode のセッションも、ログに
      ないため、Interlatch はイベントストリームも読みます：ツール呼び出しのあとに来た応答は捨てられ、その分析は失敗として扱われます。
    - **IBM Bob**（`backend = "bob"`）：Bob Shell の `bob run --format stream-json --max-turns 1 --disable-mcp
      --disable-subagents`。ツールグループをすべて無効にし、Interlatch の指示だけを持つツールなしのカスタムモードを置いた使い捨ての
-     ワークスペースで実行します。Codex と同じく、ツール呼び出しのあとに来た応答は捨てます。ヘッドレス実行には Bob の API キーが
-     必要です（アプリのサインインは使われません）：`interlatch config set-key bob`、**Status › Analysis** の IBM Bob タブ、
-     または `BOB_API_KEY`。モデルは Bob が選びます。Bob は各分析を自身のタスク一覧に残しますが、Interlatch はそれをセッションとして
+     ワークスペースで実行します。Codex と同じく、ツール呼び出しのあとに来た応答は捨てます（その呼び出しは一度だけやり直します）。
+     ヘッドレス実行には Bob の API キーが必要です（アプリのサインインは使われません）：`interlatch config set-key bob` または
+     **Status › Analysis** の IBM Bob タブ。`BOB_API_KEY` も使えますが、それを持つターミナルからだけです。バックグラウンドの
+     分析とダッシュボードはシェルの変数を見ないため、`interlatch install` が保存を提案します。モデルは Bob が選びます。Bob は各分析を自身のタスク一覧に残しますが、Interlatch はそれをセッションとして
      取り込みません。
 
    - **モデルプロバイダーの API**（`backend = "anthropic"`、`"bedrock"`、`"openai"`、`"azure"`、`"openrouter"`、

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/analysis/runners/bob.py

@@ -18,6 +18,19 @@ from .process import run_sleep_aware
 BOB_TOOL_GROUPS = ("artifact", "browser", "edit", "execute", "mcp", "mode", "plan", "read", "skill", "subagent",
                    "subtask", "todo")
 BOB_MODE = "interlatch-analyst"
+# Bob reads tool calls out of the reply's text, so a model can write one with every tool group off; saying so up front
+# makes that rare, and a call that does it anyway is retried once (TOOL_TRIES).
+NO_TOOLS = ("You have no tools here: don't call or write one (no list_files, read_file or the like). Everything you "
+            "need is in the message; answer it directly.")
+TOOL_TRIES = 2
+
+
+class _ToolUsed(LLMError):
+    """The model called a tool, so its reply was discarded; `cost_usd` is what the call cost."""
+
+    def __init__(self, msg: str, cost_usd: float):
+        super().__init__(msg)
+        self.cost_usd = cost_usd
 
 
 class BobRunner(Runner):
@@ -57,6 +70,23 @@ class BobRunner(Runner):
 
     def _call(self, prompt: str, *, system: str, model: str | None, effort: str | None, timeout: int | None,
               max_budget_usd: float | None) -> tuple[LLMResult, str]:
+        spent = 0.0
+        for attempt in range(1, TOOL_TRIES + 1):
+            try:
+                res, text = self._run(prompt, system=f"{system}\n\n{NO_TOOLS}", timeout=timeout,
+                                      max_budget_usd=max_budget_usd)
+            except _ToolUsed as exc:
+                spent += exc.cost_usd
+                if attempt == TOOL_TRIES:
+                    raise
+                continue
+            res.cost_usd += spent
+            return res, text
+        raise AssertionError("unreachable")
+
+    def _run(self, prompt: str, *, system: str, timeout: int | None,
+             max_budget_usd: float | None) -> tuple[LLMResult, str]:
+        """One `bob run`."""
         if not self.bin:
             raise LLMError("bob executable not found (set analysis.bob_bin in config.toml)")
         key, _ = self._key()
@@ -103,7 +133,8 @@ class BobRunner(Runner):
         stats = (result or {}).get("stats") or {}
         if acted or stats.get("tool_calls"):
             names = ", ".join(sorted(set(tools))) or f"{stats.get('tool_calls')} call(s)"
-            raise LLMError(f"bob used a tool ({names}); the reply was discarded")
+            raise _ToolUsed(f"bob used a tool ({names}); the reply was discarded",
+                            float(stats.get("session_costs") or 0.0))
         text = "".join(parts)
         if returncode != 0 or not result or result.get("status") != "success" or not text:
             msg = "; ".join(errors) or str((result or {}).get("error") or "") or html.unescape(stderr).strip()

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/analysis/runners/settings.py

@@ -89,6 +89,14 @@ def key_source(cfg: Config, provider: str) -> tuple[str | None, str]:
     return None, ""
 
 
+def env_only_key(cfg: Config, provider: str) -> str | None:
+    """The environment variable `provider`'s key comes from when it isn't stored. The background jobs and the
+    dashboard run from launchd (Task Scheduler on Windows) without the shell's variables, so they don't see it:
+    analysis then runs only from a terminal that has it."""
+    key, source = key_source(cfg, provider)
+    return source[1:] if key and source.startswith("$") else None
+
+
 def settings(cfg: Config, provider: str) -> dict:
     """[providers.<provider>] from config.toml, keeping only known keys of the right type."""
     raw = cfg.providers.get(provider) or {}

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/cli/commands/knowledge.py

@@ -6,7 +6,7 @@ from __future__ import annotations
 import json
 import sys
 
-from ..common import analyzer_label, escape_markup, load_cfg, new_console, open_archive
+from ..common import analyzer_label, escape_markup, failed_label, load_cfg, new_console, open_archive
 
 
 def cmd_analyze(args) -> int:
@@ -59,7 +59,7 @@ def cmd_analyze(args) -> int:
                         export=export_markdown, progress=lambda m: print(f"  {m}"))
     print(f"{report.summary()} · analysis cost {human_cost(report.cost_usd)}")
     for sid, err in report.failed:
-        print(f"  ! {sid[:8]}: {err[:300]}", file=sys.stderr)
+        print(f"  ! {failed_label(sid)}: {err[:300]}", file=sys.stderr)
     return 0 if not report.failed else 1
 
 

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/cli/commands/operations.py

@@ -13,6 +13,7 @@ from ..common import load_cfg, new_console, open_archive, wait_for_port
 def cmd_status(args) -> int:
     from ....analysis.queue import PAUSE_KEY, QUEUE_REASON_LABEL, count_pending
     from ....analysis.runners.factory import make_runner
+    from ....analysis.runners.settings import env_only_key
     from ....core.util import human_cost, local_str
     from ....runtime.install import UI_LABEL, hooks_installed, launchd_status, mcp_registered, statusline_installed
     from ....runtime.statusline import WINDOW_LABEL, plan_usage
@@ -53,6 +54,9 @@ def cmd_status(args) -> int:
     runner = make_runner(cfg)
     console.print(f"  {ok(mcp_registered())} MCP server registered   {ok(runner.available())} analysis by {runner.label}: "
                   f"{runner.where() if runner.available() else runner.unavailable_reason()}")
+    if runner.available() and (env := env_only_key(cfg, runner.name)):
+        console.print(f"    [yellow]![/] its key is only in ${env}: background analysis and the dashboard don't see it "
+                      f"(`interlatch config set-key {runner.name}` saves it)", highlight=False)
     console.print(f"  sessions: {sum(counts.values())} · " + " · ".join(f"{k}: {v}" for k, v in sorted(counts.items())))
     console.print(f"  analysis queue: {pending['ready']} ready now, {pending['queued']} queued in all, {pending['held']} held · "
                   f"model {runner.model_label()} · auto={'on' if cfg.analysis.auto else 'off'} · spent {human_cost(spent)}")

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/cli/commands/recording.py

@@ -7,7 +7,7 @@ import argparse
 import json
 import sys
 
-from ..common import escape_markup, load_cfg, new_console, open_archive, push_now
+from ..common import escape_markup, failed_label, load_cfg, new_console, open_archive, push_now
 
 
 def cmd_hook(args) -> int:
@@ -91,7 +91,7 @@ def cmd_work(args) -> int:
                         progress=lambda m: print(f"  {m}"))
     print(report.summary())
     for sid, err in report.failed:
-        print(f"  ! {sid[:8]}: {err[:200]}", file=sys.stderr)
+        print(f"  ! {failed_label(sid)}: {err[:200]}", file=sys.stderr)
     return 0 if not report.failed else 1
 
 

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/cli/commands/setup.py

@@ -8,7 +8,7 @@ import json
 import sys
 
 from ....core.config import set_config_value
-from ..common import analyzer_label, load_cfg, new_console, open_archive, wait_for_port
+from ..common import analyzer_label, failed_label, load_cfg, new_console, open_archive, wait_for_port
 
 
 def _ask(question: str, default: bool) -> bool:
@@ -222,7 +222,7 @@ def _analyze_now(cfg, console, ids: list[str], waiting: int, later: str) -> str:
                   f"{terms} glossary term{'s' * (terms != 1)}"
                   + (f", Map themes for {themed} categor{'ies' if themed != 1 else 'y'}" if themed else ""), highlight=False)
     for target, err in report.failed[:3]:
-        console.print(f"  [red]![/] {target[:40]}: {err[:200]}", highlight=False)
+        console.print(f"  [red]![/] {failed_label(target)}: {err[:200]}", highlight=False)
     if report.paused_until:
         from ....core.util import local_str
 
@@ -293,6 +293,8 @@ def cmd_install(args) -> int:
     console.print("[bold]Interlatch setup[/]\n")
     analyzer = _choose_analyzer(cfg, console, ask=ask, dry_run=args.dry_run, conn=conn, interactive=interactive,
                                 choice=args.backend)
+    if analyzer:
+        _keep_env_key(cfg, console, analyzer, ask=ask, interactive=interactive)
     if " -m " in exe:
         console.print(f"[yellow]`interlatch` is not on PATH[/]; hooks will run `{exe}`. "
                       "`uv tool install interlatch` gives it a stable path.\n", highlight=False)
@@ -443,13 +445,37 @@ def _runner_for(cfg, name: str):
     return make_runner(replace(cfg, analysis=replace(cfg.analysis, backend=name)))
 
 
+def _keep_env_key(cfg, console, runner, *, ask, interactive: bool) -> None:
+    """Offer to save the analyzer's API key when it is only in this shell's environment, which the background jobs
+    and the dashboard don't see. Never saved without asking."""
+    import os
+
+    from ....analysis.runners.settings import env_only_key, set_key
+
+    env = env_only_key(cfg, runner.name)
+    if not env:
+        return
+    if interactive and ask(f"Your {runner.label} key is in ${env}, which background analysis and the dashboard don't "
+                           "see. Save it in ~/.interlatch, readable by you only?", True):
+        set_key(cfg, runner.name, os.environ[env])
+        console.print(f"Saved your {runner.label} key.\n", highlight=False)
+        return
+    console.print(f"[yellow]Your {runner.label} key is only in ${env}[/]: `interlatch analyze` works from this "
+                  "terminal, but background analysis and the dashboard don't see it. "
+                  f"`interlatch config set-key {runner.name}` saves it.\n", highlight=False)
+
+
 def _backend_state(runner) -> str:
     """Whether `runner` can analyze now, in a few words, for the list install shows."""
     import re
 
     from ....analysis.runners.factory import AGENTS
+    from ....analysis.runners.settings import env_only_key
 
     if runner.available():
+        env = env_only_key(runner.cfg, runner.name)
+        if env:
+            return f"ready in this terminal only · ${env}"
         if runner.name in AGENTS:
             return "ready · your Bob API key" if runner.name == "bob" else "ready · your own login and plan"
         return f"ready · {runner.model_label()}" + (" on this computer" if runner.local() else "")
@@ -772,10 +798,14 @@ def _config_set(cfg, key: str | None, value: str | None) -> int:
     print(f"[{section}] {name} = {literal}")
     if key == "analysis.backend":
         from ....analysis.runners.factory import make_runner
+        from ....analysis.runners.settings import env_only_key
 
         runner = make_runner(load_config(cfg.home))
         if not runner.available():
             print(f"note: {runner.unavailable_reason()}; analysis waits until it is set up")
+        elif env := env_only_key(runner.cfg, runner.name):
+            print(f"note: the {runner.label} key is only in ${env}, which background analysis and the dashboard don't "
+                  f"see; `interlatch config set-key {runner.name}` saves it")
     return 0
 
 

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/cli/common.py

@@ -22,6 +22,23 @@ def open_archive(cfg):
     return connect(cfg.db_path)
 
 
+def failed_label(target: str) -> str:
+    """What a worker run failed on, as its error lines name it: a session's short id, a project's folder name (from a
+    knowledge base, "glossary:<path>" or "themes:<category>"), or the global playbook."""
+    from ...knowledge.synthesize import GLOBAL
+
+    kind, sep, rest = target.partition(":")
+    if sep and kind == "glossary":
+        return f"glossary {failed_label(rest)}"
+    if sep and kind == "themes":
+        return f"themes {rest}"
+    if target == GLOBAL:
+        return "global playbook"
+    if "/" in target or "\\" in target:
+        return target.replace("\\", "/").rstrip("/").rsplit("/", 1)[-1] or target
+    return target[:8]
+
+
 def new_console():
     """A rich console for a command's output."""
     from rich.console import Console

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/web/api/hub_admin.py

@@ -135,11 +135,12 @@ def action_team_store_save(ctx: Context, body: dict) -> dict:
     return {"ok": True, "store": team_store_info(ctx), "status": team_store_status(ctx)}
 
 
-def people_info(ctx: Context) -> dict:
+def people_info(ctx: Context, session: str | None = None) -> dict:
+    """The People page; `session` is the viewer's own browser session, which the page marks as this browser."""
     from ....sharing import people
     from ....sharing.projects import hub_projects
 
-    return {"people": people.listing(ctx.conn), "shared_token": ctx.cfg.hub_shared_token,
+    return {"people": people.listing(ctx.conn, session), "shared_token": ctx.cfg.hub_shared_token,
             "address": ctx.cfg.hub_address or None, "audit": people.audit_log(ctx.conn, 50),
             "roles": list(people.ROLES), "projects": hub_projects(ctx.conn)}
 
@@ -212,8 +213,11 @@ def action_people(ctx: Context, verb: str, body: dict, by: dict | None, address:
             people.set_projects(ctx.conn, pid, _projects_body(ctx, body), by=by)
         elif verb == "remove":
             people.remove(ctx.conn, pid, by=by)
-        elif verb == "revoke":
-            if not people.revoke(ctx.conn, pid, str(body.get("token") or ""), by=by):
+        elif verb == "revoke":  # one token, or several (a browser's older sessions, at once)
+            tokens = body.get("tokens") if isinstance(body.get("tokens"), list) else [body.get("token")]
+            if not tokens or len(tokens) > 500:
+                return {"error": tr("no such computer or browser session")}, 400
+            if not sum(people.revoke(ctx.conn, pid, str(x or ""), by=by) for x in tokens):
                 return {"error": tr("no such computer or browser session")}, 400
         else:
             return {"error": tr("not found")}, 404

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/web/handler.py

@@ -129,14 +129,17 @@ def make_handler(app: App, port: int):
                     and (self.headers.get("X-Forwarded-Proto") or "").strip().lower() == "https")
 
         def _session(self) -> str:
+            return next(iter(self._sessions()), "")
+
+        def _sessions(self) -> tuple[str, ...]:
+            """The session cookies this browser sent: the current one first, then one from before the rename."""
             from http.cookies import CookieError, SimpleCookie
 
             try:
                 jar = SimpleCookie(self.headers.get("Cookie") or "")
             except CookieError:
-                return ""
-            morsel = jar.get(SESSION_COOKIE) or jar.get(LEGACY_SESSION_COOKIE)
-            return morsel.value if morsel else ""
+                return ()
+            return tuple(m.value for m in (jar.get(SESSION_COOKIE), jar.get(LEGACY_SESSION_COOKIE)) if m and m.value)
 
         def _session_cookie(self, value: str, max_age: int) -> str:
             secure = "; Secure" if self._proxied_https() else ""
@@ -205,7 +208,8 @@ def make_handler(app: App, port: int):
             try:
                 if wait:
                     raise people.PeopleError(TOO_MANY_CODES, seconds=wait)  # the code isn't looked at
-                _person, session = people.open_browser(app.conn, code, label=self.headers.get("User-Agent"))
+                _person, session = people.open_browser(app.conn, code, label=self.headers.get("User-Agent"),
+                                                       replaces=self._sessions())  # this browser's old session ends
             except people.PeopleError as exc:
                 if isinstance(exc, people.UnknownCode):
                     app.code_attempts.wrong(who)

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/interfaces/web/routes.py

@@ -179,7 +179,7 @@ def _unseen_suggestions(h, ctx, m, q):
 
 GET: list[Route] = [
     Route("/api/me", ANYONE, lambda h, ctx, m, q: h._json(h._me())),
-    Route("/api/people", ADMIN, lambda h, ctx, m, q: h._json(api.hub_admin.people_info(ctx))),
+    Route("/api/people", ADMIN, lambda h, ctx, m, q: h._json(api.hub_admin.people_info(ctx, h._session()))),
     Route("/api/overview", ANYONE, lambda h, ctx, m, q: h._json(api.status.overview(ctx, q, limited=h.limited))),
     # a person's own computer only
     Route("/api/leaderboard", LEADERBOARD, lambda h, ctx, m, q: h._json(api.leaderboard.leaderboard(ctx, q))),

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/sharing/people.py

@@ -265,9 +265,11 @@ def _admins(conn: sqlite3.Connection) -> list[int]:
     return [r[0] for r in conn.execute("SELECT id FROM people WHERE role = 'admin' AND removed_at IS NULL")]
 
 
-def listing(conn: sqlite3.Connection) -> list[dict]:
-    """Everyone on the hub, with their computers, open browser sessions and unused invites (no secrets)."""
+def listing(conn: sqlite3.Connection, session: str | None = None) -> list[dict]:
+    """Everyone on the hub, with their computers, open browser sessions and unused invites (no secrets). The browser
+    session `session` (the viewer's own cookie) is marked `this`."""
     now = _iso(_now())
+    mine = _hash(session) if session else None
     out = []
     for p in conn.execute("SELECT * FROM people WHERE removed_at IS NULL ORDER BY role = 'admin' DESC, name"):
         p = dict(p)
@@ -278,7 +280,8 @@ def listing(conn: sqlite3.Connection) -> list[dict]:
             "WHERE t.person_id = ? AND t.revoked_at IS NULL ORDER BY t.created_at", (p["id"],))]
         p["computers"] = [{"id": t["token_hash"][:16], "machine_id": t["machine_id"], "name": t["machine_name"] or t["label"],
                            "since": t["created_at"], "last_used": t["last_used"]} for t in toks if t["kind"] == "computer"]
-        p["browsers"] = [{"id": t["token_hash"][:16], "label": t["label"], "since": t["created_at"], "last_used": t["last_used"]}
+        p["browsers"] = [{"id": t["token_hash"][:16], "label": t["label"], "since": t["created_at"], "last_used": t["last_used"],
+                          **({"this": True} if t["token_hash"] == mine else {})}
                          for t in toks if t["kind"] == "browser" and not (t["expires_at"] and t["expires_at"] < now)]
         p["invites"] = [{"expires_at": r[0], "created_at": r[1]} for r in conn.execute(
             "SELECT expires_at, created_at FROM people_codes WHERE person_id = ? AND kind = 'invite' AND used_at IS NULL "
@@ -416,11 +419,17 @@ def join_computer(conn: sqlite3.Connection, code: str, machine_id: str, machine_
     return p, token
 
 
-def open_browser(conn: sqlite3.Connection, code: str, label: str | None = None) -> tuple[dict, str]:
-    """Redeem an invite or a sign-in code in a browser: (person, session secret for the cookie)."""
+def open_browser(conn: sqlite3.Connection, code: str, label: str | None = None,
+                 replaces: tuple[str, ...] = ()) -> tuple[dict, str]:
+    """Redeem an invite or a sign-in code in a browser: (person, session secret for the cookie). `replaces` are the
+    sessions that browser's cookies held: the new cookie takes their place, so they end here rather than linger,
+    unused, as more rows on the People page until they expire. Only once the code was good: a wrong one ends nothing."""
     p = _take_code(conn, code, ("invite", "signin"))
     session = secrets.token_urlsafe(32)
     now = _now()
+    for old in {s for s in replaces if s}:
+        conn.execute("UPDATE people_tokens SET revoked_at = ? WHERE token_hash = ? AND kind = 'browser' AND revoked_at IS NULL",
+                     (_iso(now), _hash(old)))
     conn.execute("INSERT INTO people_tokens(token_hash, person_id, kind, label, created_at, expires_at, last_used) "
                  "VALUES (?, ?, 'browser', ?, ?, ?, ?)",
                  (_hash(session), p["id"], (label or "")[:200] or None, _iso(now), _iso(now + timedelta(days=BROWSER_DAYS)), _iso(now)))

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/web/app.css

@@ -2064,8 +2064,21 @@ a.ar-tile-media.empty:hover { background: var(--accent-wash); }
 .pp-table select { max-width: 150px; }
 .pp-tok { display: flex; align-items: center; gap: 6px; flex-wrap: wrap; padding: 1px 0; }
 .pp-tok .icon { width: 13px; height: 13px; color: var(--muted); flex: none; }
-.pp-actions { white-space: nowrap; text-align: right; }
-.pp-actions .btn + .btn { margin-left: 6px; }
+.pp-actions > div { display: flex; flex-wrap: wrap; justify-content: flex-end; gap: 6px; } /* a narrow table stacks them */
+.pp-actions .btn { white-space: nowrap; }
+.pp-older { padding-left: 19px; font-size: 12.5px; }
+/* a narrow card: each person as a block (name and role, then projects, computers and browsers, actions), no sideways scroll */
+.pp-wrap { container-type: inline-size; }
+@container (max-width: 720px) {
+  .pp-table thead { display: none; }
+  .pp-table, .pp-table tbody, .pp-table td { display: block; }
+  .pp-table tr { display: grid; grid-template-columns: minmax(0, 1fr) auto; gap: 6px 12px; padding: 10px 0; border-bottom: 1px solid var(--grid); }
+  .pp-table tr[hidden] { display: none; }
+  .pp-table tr.pp-edit { display: block; padding-top: 0; }
+  table.data.pp-table td { border: 0; padding: 0; min-width: 0; }
+  .pp-table td:nth-child(n+3) { grid-column: 1 / -1; }
+  .pp-actions > div { justify-content: flex-start; }
+}
 .link-btn.danger { color: var(--critical-ink); }
 .people-form { margin-bottom: 6px; }
 .pp-scope { border: 1px solid var(--border); border-radius: 6px; padding: 8px 12px 10px; margin: 0 0 12px; min-width: 0; }

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/web/app.js

@@ -6352,8 +6352,28 @@ function peopleCard(dv) {
     } }, t("Revoke"));
     return h("div", { class: "pp-tok" }, icon(kind === "computer" ? "devices" : "page"),
       h("span", { title: kind === "browser" ? x.label || "" : x.machine_id || "" }, label),
+      x.this ? h("span", { class: "muted" }, t("this browser")) : null,
       h("span", { class: "muted" }, x.last_used ? t("used {ago}", { ago: ago(x.last_used) }) : t("since {ago}", { ago: ago(x.since) })), revoke);
   };
+  // a person's sessions in the same browser: the one in use (or used last) on its own row, the older ones folded into one
+  // row with one Revoke (they pile up from sign-ins before a browser's new session ended its old one)
+  const browserRows = (p, browsers) => {
+    const groups = new Map();
+    for (const b of browsers) groups.set(uaLabel(b.label), [...(groups.get(uaLabel(b.label)) || []), b]);
+    const used = (x) => x.last_used || x.since || "";
+    return [...groups.entries()].flatMap(([label, list]) => {
+      const [kept, ...older] = [...list].sort((a, b) => Number(!!b.this) - Number(!!a.this) || (used(a) < used(b) ? 1 : used(a) > used(b) ? -1 : 0));
+      if (!older.length) return [tokenRow(p, kept, "browser")];
+      const revoke = h("button", { class: "link-btn danger", type: "button", onclick: async () => {
+        if (!confirm(tn(older.length, "End {n} older session of {name} in {browser}? Only the one used last stays; any other browser still using one has to sign in again.",
+          "End {n} older sessions of {name} in {browser}? Only the one used last stays; any other browser still using one has to sign in again.", { name: p.name, browser: label }))) return;
+        revoke.disabled = true;
+        if (await send("/api/people/revoke", { id: p.id, tokens: older.map((x) => x.id) })) { toast(t("Revoked.")); load(); } else revoke.disabled = false;
+      } }, t("Revoke them"));
+      return [tokenRow(p, kept, "browser"), h("div", { class: "pp-tok pp-older" },
+        h("span", { class: "muted" }, tn(older.length, "+ {n} older session, last used {ago}", "+ {n} older sessions, last used {ago}", { ago: ago(used(older[0])) })), revoke)];
+    });
+  };
   const personRow = (p, roles) => {
     const me = ME?.viewer?.id != null && ME.viewer.id === p.id;
     const sel = h("select", { "aria-label": t("Role of {name}", { name: p.name }), onchange: async () => {
@@ -6408,9 +6428,9 @@ function peopleCard(dv) {
       h("td", null, sel),
       scope,
       h("td", null, computers.length || browsers.length
-        ? [...computers.map((c) => tokenRow(p, c, "computer")), ...browsers.map((b) => tokenRow(p, b, "browser"))]
+        ? [...computers.map((c) => tokenRow(p, c, "computer")), ...browserRows(p, browsers)]
         : h("span", { class: "muted" }, lastInvite ? t("Not joined yet") : t("No computer or browser yet: make a new invite"))),
-      h("td", { class: "pp-actions" }, reinvite, remove)), editRow];
+      h("td", { class: "pp-actions" }, h("div", null, reinvite, remove))), editRow];
   };
 
   const inviteForm = (roles, first) => {
@@ -6478,7 +6498,7 @@ function peopleCard(dv) {
     box.replaceChildren(); append(box, [ // append() flattens the arrays and skips nulls
       cardHead(t("People"), { iconName: "preference", hint: people.length ? tn(people.length, "{n} person", "{n} people") : null }),
       people.length ? [
-        h("div", { class: "table-wrap" }, h("table", { class: "data pp-table" },
+        h("div", { class: "table-wrap pp-wrap" }, h("table", { class: "data pp-table" },
           h("thead", null, h("tr", null, ...[t("Person"), t("Role"), t("Projects"), t("Computers and browsers"), ""].map((x) => h("th", null, x)))),
           h("tbody", null, people.map((p) => personRow(p, roles))))),
         h("p", { class: "muted" }, t("Admins invite people and change this hub's settings; members' computers send here and get their teammates' lessons back; read-only people only open this dashboard. Whoever is at this computer is always an admin."))]

{interlatch-0.27.0 → interlatch-0.27.2}/src/interlatch/web/ja.js

@@ -1645,6 +1645,12 @@ window.INTERLATCH_JA = {
   "Revoked.": "取り消しました。",
   "Revoke": "取り消す",
   "used {ago}": "最終使用 {ago}",
+  "this browser": "このブラウザー",
+  "Revoke them": "まとめて取り消す",
+  "+ {n} older session, last used {ago}": "ほかに古いセッション {n} 件（最終使用 {ago}）",
+  "+ {n} older sessions, last used {ago}": "ほかに古いセッション {n} 件（最終使用 {ago}）",
+  "End {n} older session of {name} in {browser}? Only the one used last stays; any other browser still using one has to sign in again.": "{browser} での {name} さんの古いセッション {n} 件を終了しますか？ 最後に使ったものだけが残ります。まだそれを使っているほかのブラウザーでは再びサインインが必要になります。",
+  "End {n} older sessions of {name} in {browser}? Only the one used last stays; any other browser still using one has to sign in again.": "{browser} での {name} さんの古いセッション {n} 件を終了しますか？ 最後に使ったものだけが残ります。まだそれを使っているほかのブラウザーでは再びサインインが必要になります。",
   "since {ago}": "{ago}から",
   "Role of {name}": "{name} さんのロール",
   "{name} is now: {role}.": "{name} さんのロールを{role}にしました。",

{interlatch-0.27.0 → interlatch-0.27.2}/tests/test_bob_analysis.py

@@ -12,7 +12,7 @@ import pytest
 from interlatch.core.config import load_config, set_config_value
 from interlatch.analysis.runners.base import LLMError, UsageLimitError
 from interlatch.analysis.runners.factory import make_runner
-from interlatch.analysis.runners.bob import BOB_TOOL_GROUPS, BobRunner
+from interlatch.analysis.runners.bob import BOB_TOOL_GROUPS, NO_TOOLS, BobRunner
 from interlatch.analysis.runners.settings import key_source, set_key
 from interlatch.application.workflows import run_worker
 
@@ -28,8 +28,11 @@ modes = json.load(open(os.path.join(ws, ".bob", "custom_modes.yaml")))["customMo
 mode = next(m for m in modes if m["slug"] == args[args.index("--mode") + 1])
 with open(os.environ["FAKE_BOB_LOG"], "a") as fh:
     fh.write(json.dumps({"args": args, "prompt_chars": len(prompt), "groups": mode["groups"], "cwd": os.getcwd(),
-                         "key": os.environ.get("BOB_API_KEY"), "internal": os.environ.get("INTERLATCH_INTERNAL")}) + "\n")
+                         "key": os.environ.get("BOB_API_KEY"), "internal": os.environ.get("INTERLATCH_INTERNAL"),
+                         "role": mode["roleDefinition"]}) + "\n")
 how = os.environ.get("FAKE_BOB_MODE", "ok")
+if how == "tool-once":  # only the first call reaches for a tool
+    how = "tool" if sum(1 for _ in open(os.environ["FAKE_BOB_LOG"])) == 1 else "ok"
 if how == "license":
     print("Error: A license agreement is required. Please accept the license terms before proceeding.", file=sys.stderr)
     sys.exit(1)
@@ -83,6 +86,7 @@ def test_bob_runs_headless_with_no_tools(bob_env):
     assert args[args.index("--disable-tool-groups") + 1].split(",") == list(BOB_TOOL_GROUPS)
     assert args[args.index("--max-cost") + 1] == "3.00"
     assert call["groups"] == [] and call["key"] == "bob-test-key" and call["internal"] == "1"
+    assert call["role"].startswith("Summarize the session.") and call["role"].endswith(NO_TOOLS)
     workspace = args[args.index("--workspace") + 1]
     assert cfg.is_internal_path(workspace) and call["cwd"] == workspace
     assert not (cfg.home / "workdir" / "bob").exists() or not any((cfg.home / "workdir" / "bob").iterdir())  # removed
@@ -92,6 +96,16 @@ def test_bob_reply_after_a_tool_call_is_discarded(bob_env, monkeypatch):
     monkeypatch.setenv("FAKE_BOB_MODE", "tool")
     with pytest.raises(LLMError, match=r"used a tool \(execute_command\); the reply was discarded"):
         make_runner(bob_env["cfg"]).run("x", {"type": "object"}, system="Summarize the session.")
+    assert len(bob_calls(bob_env)) == 2  # tried again once
+
+
+def test_bob_retries_once_after_a_tool_call(bob_env, monkeypatch):
+    """Bob reads tool calls out of the reply's text, so the model can write one with every group off: one more try."""
+    monkeypatch.setenv("FAKE_BOB_MODE", "tool-once")
+    res = make_runner(bob_env["cfg"]).run("<transcript>hello</transcript>", {"type": "object"},
+                                          system="Summarize the session.")
+    assert res.data["title"] == "Fixed login token expiry bug"
+    assert len(bob_calls(bob_env)) == 2 and res.cost_usd == pytest.approx(0.062)  # the discarded call is paid for too
 
 
 def test_bob_license_or_key_problem_pauses(bob_env, monkeypatch):
@@ -176,3 +190,16 @@ def test_dashboard_sets_agent_models(env):
     assert load_config(env["cfg"].home).analysis.codex_model == ""
     assert "error" in api.settings.action_agent(app.context(), {"agent": "bob", "settings": {"model": "x"}})  # Bob picks its own model
     assert "error" in api.settings.action_agent(app.context(), {"agent": "claude", "settings": {"model": "sonnet\nbackend = 'x'"}})
+
+
+def test_failed_lines_name_projects_not_cut_paths():
+    """A worker run's error lines: `! /Users/a: …` named a knowledge base that failed only by its path's first 8
+    characters."""
+    from interlatch.interfaces.cli.common import failed_label
+
+    assert failed_label("0eb2ccdb-58fc-420f-b7ac-cbdbabfe1f9a") == "0eb2ccdb"
+    assert failed_label("/Users/a/Projects/agents-chronicle") == "agents-chronicle"
+    assert failed_label("glossary:/Users/a/Projects/agents-chronicle/") == "glossary agents-chronicle"
+    assert failed_label(r"C:\Users\a\Projects\app") == "app"
+    assert failed_label("__global__") == "global playbook" and failed_label("themes:Tooling and CI") == "themes Tooling and CI"
+    assert failed_label("2026-W41") == "2026-W41"

{interlatch-0.27.0 → interlatch-0.27.2}/tests/test_people.py

@@ -74,6 +74,20 @@ def test_browser_sessions_signin_and_removal(conn):
     assert people.add(conn, "Vic", "vic@example.com", "member")["role"] == "member"  # can be added again
 
 
+def test_a_browser_signing_in_again_ends_its_old_session(conn):
+    vic = people.add(conn, "Vic", "vic@example.com", "readonly")
+    _, first = people.open_browser(conn, people.signin_code(conn, vic), "Edge")
+    _, other = people.open_browser(conn, people.signin_code(conn, vic), "Safari")  # another browser keeps its own
+    with pytest.raises(people.PeopleError):
+        people.open_browser(conn, "AAAA-BBBB-CCCC", "Edge", replaces=(first,))  # a wrong code ends nothing
+    assert people.browser_person(conn, first)
+    _, second = people.open_browser(conn, people.signin_code(conn, vic), "Edge", replaces=(first, "", "not-a-session"))
+    assert people.browser_person(conn, first) is None and people.browser_person(conn, second) and people.browser_person(conn, other)
+    listed = people.listing(conn, second)[0]["browsers"]
+    assert [b["label"] for b in listed] == ["Safari", "Edge"] and [b.get("this") for b in listed] == [None, True]
+    assert not any(b.get("this") for b in people.listing(conn)[0]["browsers"])
+
+
 def test_wrong_codes_make_an_address_wait():
     t = [1000.0]
     a = people.CodeAttempts(clock=lambda: t[0])