flagon-io/g1t

Part of #311, slice 2. This PR does not close it.

A conversation with g1t is not a session; it links to the sessions it starts (the owner's call).

New and Ask

• Chat's New has a first tab, g1t: a claude.ai-style composer with a repository picker, a work item picker, and a mode picker shown once an item is chosen.
• With no repository, it is a conversation with g1t on the workspace's key, so everything the old Ask sheet did still works.
• With a repository, it starts a hosted session (start_agent_session now takes a prompt when there is no work item) and opens a new conversation with g1t. That conversation holds what you asked, then g1t's session card. The card links to the session's page and shows Working, then Done, live. It is written by the new chat RPC g1t_session, which only acts in the viewer's own g1t DM.
• The top bar's Ask opens New over the current page. The Ask sheet, its unused pieces and the use-stick-to-bottom dependency are removed.

Session page

• For whoever may answer a running hosted session, the page reads as a chat: your messages on the right (g1t's setup folded away), and the agent's text and quiet tool runs on the left.
• Approvals and a Working / Waiting indicator sit inline. The composer is pinned at the bottom, with Stop.
• Streaming: follow_agent_session claims the session's next provider read atomically, so Anthropic is read at most once every 2 s per session however many people watch. The page polls a light route every 2.5 s, only while it's visible and the session is running.
• Follow up: an ended session offers "Continue in a new session", which carries over its link, branch, PRs and the end of its report. g1t ends a run when its session goes idle, so the old session can't be resumed.

Docs: ask, chat ("Start a conversation with g1t"), sessions, home, index.

No billing changes: tokens stay on the workspace's own Anthropic key, and nothing is metered.

Validation:

• cargo tests for integrations, contracts and api; workspace and wasm32 checks.
• Tests for the contracts package and services/chat.
• Web typecheck, tests (1183), build, load-check and deploy-check.
• Conformance (including a new CLAIM_READ SQLite check), test:deploy, astro and prettier.
• Screenshots of the composer, the conversation (desktop and phone) and the card.
• The full flow has not been tested against a live Anthropic account.

Dependency review

Passed. 1 dependency changes, none vulnerable.

package-lock.json

This check fails on vulnerabilities of high severity or higher. Change it in the repository's Security settings.