pending + running rebuilds, meta-updates, and first-spawns. one runs at a time; meta-update cascades nest under their parent. dedup: re-enqueueing a still-queued op collapses into the existing entry.

select inputs to nix flake update in /meta/. selected agents rebuild in sequence after the lock bump; the submitting agent learns each outcome via the usual rebuilt system event.

all-agents build log history. click a row to expand stdout + stderr. live builds stream in real time.

◆ C4P4B1L1T13S ◆

per-agent capability grants. capabilities unlock gated MCP tools and system access. toggle any cells across both tables, then hit "save all" at the bottom — each changed agent rebuilds exactly once.

◆ T00L GR0UPS ◆

per-agent tool-group permissions. columns are filled from the backend — adding a new group requires no UI change. agents without an explicit entry use the role default (agents: messaging, meta, inbox, execution).