One daemon already saw every session; the dashboard only ever showed one of
them well. Under four parallel agents it failed in specific ways, each fixed
here:
- Sessions were identified by workspace basename, so two agents in one repo
were indistinguishable. The daemon now hands out a small ordinal badge in
arrival order and the web UI colours each agent by it — rows, timeline
lines, and approval cards, which previously asked you to approve `rm -rf`
"in remote-grok" without saying which one.
- `currentTool` held a single call, so parallel tools overwrote each other.
It is now a list; durations are matched FIFO per tool name, since hook
payloads carry no call id.
- One 400-event ring, evicted oldest-first, let a chatty agent blank
everyone else's history. Eviction now takes from whichever session holds
the most of the ring.
- Sessions sorted by recency jumped under a moving thumb. They are ordered
waiting -> error -> working -> idle -> ended, ties on badge, so an agent
keeps its slot.
- Events carry no workspace root, so a restart came back with a full
timeline and an empty roster. The session map is persisted to
sessions.json (debounced, flushed on shutdown, 12h cutoff on load).
In-flight tools are dropped on the way out: they belonged to a process
that no longer exists.
- Snapshot pushes now back off to 1s once a snapshot exceeds 24KB, since
full-snapshot SSE cost scales with agent count.
- Pending approvals are ordered by which expires first, not by arrival.
`glance status` and /local/status report the roster by state. e2e suite:
220 passed, 0 failed.
/hook/record and /hook/approve accepted anything that reached the port. That is
not "loopback only": `tailscale serve` proxies tailnet traffic to 127.0.0.1, so
anyone who could reach the tunnel could forge timeline events and answer
approval prompts. Both endpoints now require a 32-byte secret from
$GLANCE_HOME/hook.secret (0600, created once, never rotated so nothing in
flight is 403'd mid-session), compared in constant time before the body is
read, as an x-glance-hook header or a ?k= parameter. Requests carrying
x-forwarded-* are refused outright: a local hook process never sends them and a
tunnelled caller always does. The check applies to /hook/* only, so the
dashboard is unaffected.
While wiring that up: the 13 passive `type: "http"` hooks could never have
worked. Grok Build's http runner rejects every scheme but https, then resolves
the host and blocks private/link-local/CGNAT addresses (validate_hook_url +
is_blocked_ip), so neither loopback-over-http nor *.ts.net (100.64/10) can be a
hook target - and it sends no header but Content-Type, so such a hook could not
authenticate anyway. They were failing validation silently on every event. All
of them are now command hooks running bin/glance-record.mjs, which costs a Node
start and can present the secret.
hooks.json is generated from hooks/hooks.template.json by scripts/gen-hooks.mjs
(npm run build, glance sync-hooks). It creates the secret, derives the approval
hook's timeout from approval.timeoutMs instead of hand-copying 125, and refuses
to write a hook that cannot fire: bad type, non-positive timeout, non-https
http URL, missing bin/ script, or a leftover placeholder. A template that
embeds the token makes the output 0600 with a warning.
Fail-open is unchanged: a missing, stale or rejected secret degrades to "no
telemetry", and glance-approve.mjs still allows on every error path. glance
status warns when the on-disk secret no longer matches the daemon's.
Validated with the e2e suite (190 checks, including no-token/wrong-token/
same-length-token 403s, ?k= acceptance, x-forwarded-* refusal, and the
recorder's fail-open paths) and a clean npm run build.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
iceBear67