- /ws-pty carries the dashboard token like /ws (the terminal never attached
with DASHBOARD_TOKEN set), and so does everything that cannot send the
header: images, downloads, exports, drops (withToken/tokenHeader). A
refused upgrade answers 401/403 and is logged and counted by reason.
- The browser asks for a missing or wrong token (401 EUNAUTHORIZED) and takes
?token= from the link agenthub start prints, dropping it from the URL.
- The CLI sends the token (DASHBOARD_TOKEN, else the one the running server
publishes 0600 in <data dir>/runtime/dashboard-token); MCP and statusline
read the same file.
- DASHBOARD_HOST takes a list, and 127.0.0.1 is always listened on too, so a
LAN-only bind keeps hooks and the CLI working.
- agenthub start --host/--allowed-hosts/--token are saved in
<data dir>/network.json for every later start; a wide bind gets a token;
every reachable URL is printed.
- tmux < 3.7 is an amber, once-per-version notice that says only the pane
scrollbar is missing, with a ~/.local build instead of sudo make install.
- INSTALL: PATH belongs in ~/.profile for sudo -iu/ssh; WSL mirrored notes.
Internal SmartGift build of a Claude Code monitoring dashboard.
Lanes: a durable unit of parallel agent work, one per working directory,
tracked across session restarts. Managed lanes are git worktrees the
dashboard provisions and can reset or remove behind a three-check destroy
guard and a counted preflight; adopted lanes are directories you already
own and are never destroyable.
Pipelines: a lane moves through pipeline stages. A stage the agent declares
with evidence renders green; a stage inferred from the tool-event stream
renders dashed amber and never counts as done. Detection is forward-only
within a 30-minute window, and never writes the declared stage.
Workspace: one page at /run with a lane grid, the selected lane's pipeline,
and a full Claude console behind a disclosure.
nntrivi2001