@arcforgelabs/flow 2026.10.34 → 2026.10.36

package/README.md

@@ -40,7 +40,7 @@ run a lab.
 | `docs/JOB_INVOICE_LINKS.md` | The pipeline: how each job links to its customer and to the accounting invoice that bills it |
 | `docs/INVOICING_RULES.md` | The invoicing rules that draft a job's invoice, and the two ways an invoice goes to Xero |
 | `docs/INVOICE_RULES.md` | Invoice rules a lab builds (When, If, Then) that make a ready job wait or never draft |
-| `docs/INVOICE_SENDING.md` | Drafts, Problem and Ready invoices, Mark ready, and Send all ready to the accounting system |
+| `docs/INVOICE_SENDING.md` | Drafts, Problem and Ready invoices, Finalise, a changed job, and Send all ready to the accounting system |
 | `docs/RECONCILE.md` | The daily reconcile: counts and totals per day across the work system's copy, the ledger and the accounting copy |
 | `docs/ALERTS.md` | Quiet alerts: the slim line on a page when something there needs a person, and how a person dismisses it |
 | `docs/AUTOMATIONS.md` | Automations: Flow routines that mark jobs ready to invoice and draft them, each on or off |
@@ -48,6 +48,7 @@ run a lab.
 | `docs/CUSTOM_FIELDS.md` | Custom fields: the lab's own fields for its jobs, kept in Flow only, and how a board move checks for conflicts |
 | `docs/JOB_BOARD_MOVES.md` | Moving jobs on the Jobs board: custom field moves stay in Flow; Seazona stage moves become a hand-off |
 | `docs/PRICE_LIST.md` | The price list: Flow's own codes and prices, their links to Xero items and Seazona products, and the price check |
+| `docs/AI_BOTS.md` | The AI bots: ClawSweeper reviews and the Docs Agent, their ClawRouter budget and cost, and setup |
 | `docs/LOW_RISK_MERGE.md` | The low-risk merge lane: which pull requests merge themselves when green, with ClawSweeper's risk labels |
 | `docs/RELEASING.md` | Versions and channels, the release workflows, how to cut and roll back a release, and the one-time setup |
 | `docs/SELF_HOSTING.md` | Running a Flow release with Docker, Node or Replit, the update notice, and Clerk sign-in |

package/npm-shrinkwrap.json

@@ -1,15 +1,15 @@
 {
   "name": "@arcforgelabs/flow",
-  "version": "2026.10.34",
+  "version": "2026.10.36",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@arcforgelabs/flow",
-      "version": "2026.10.34",
+      "version": "2026.10.36",
       "license": "MIT",
       "dependencies": {
-        "@clerk/backend": "3.23.2",
+        "@clerk/backend": "3.25.0",
         "@fontsource-variable/atkinson-hyperlegible-next": "5.3.0",
         "@fontsource-variable/dm-sans": "5.3.0",
         "@fontsource-variable/geist": "5.3.0",
@@ -21,10 +21,11 @@
         "@fontsource-variable/playfair-display": "5.3.0",
         "@fontsource-variable/plus-jakarta-sans": "5.3.0",
         "@fontsource-variable/space-grotesk": "5.3.0",
-        "@sentry/node": "11.4.0",
-        "drizzle-orm": "0.45.3",
+        "@sentry/node": "11.8.0",
+        "drizzle-orm": "0.45.4",
         "express": "5.3.0",
-        "express-rate-limit": "8.7.0",
+        "express-rate-limit": "8.7.1",
+        "lucide-static": "1.59.0",
         "pdfkit": "0.20.2",
         "pg": "8.23.1"
       },
@@ -39,9 +40,9 @@
       }
     },
     "node_modules/@clerk/backend": {
-      "version": "3.23.2",
-      "resolved": "https://registry.npmjs.org/@clerk/backend/-/backend-3.23.2.tgz",
-      "integrity": "sha512-QW2qJPY7xQyn5SrNWJ+xO7o6va60X9/v4nX8y5zq8OJFS10X7GlEz8s5PDKTgo6W6SWb8L3APhrZH+LTp7yuNw==",
+      "version": "3.25.0",
+      "resolved": "https://registry.npmjs.org/@clerk/backend/-/backend-3.25.0.tgz",
+      "integrity": "sha512-hmJS0a61FO08PDaV2MtZ/hj6pE+cQBRmpxR8oUFGQTXewOQLLOAbcgob0rmFAnMNuHgXfsYf3NVxcQCUOWE+QA==",
       "license": "MIT",
       "dependencies": {
         "@clerk/shared": "^4.40.0",
@@ -809,6 +810,9 @@
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -825,6 +829,9 @@
       "cpu": [
         "arm64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -841,6 +848,9 @@
       "cpu": [
         "ppc64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -857,6 +867,9 @@
       "cpu": [
         "riscv64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -873,6 +886,9 @@
       "cpu": [
         "riscv64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -889,6 +905,9 @@
       "cpu": [
         "s390x"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -905,6 +924,9 @@
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "glibc"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -921,6 +943,9 @@
       "cpu": [
         "x64"
       ],
+      "libc": [
+        "musl"
+      ],
       "license": "MIT",
       "optional": true,
       "os": [
@@ -1004,12 +1029,12 @@
       }
     },
     "node_modules/@sentry/bundler-plugins": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/@sentry/bundler-plugins/-/bundler-plugins-11.4.0.tgz",
-      "integrity": "sha512-THgOMIaA0AMVF4TiCIbugK2jlLYCBIhRF0gclrj7Fte3RMZytkXeH8XeoaR6C6MJTyLCNkEOEccwX9Jj2xOc8g==",
+      "version": "11.8.0",
+      "resolved": "https://registry.npmjs.org/@sentry/bundler-plugins/-/bundler-plugins-11.8.0.tgz",
+      "integrity": "sha512-rQrbL2lYPyiiO6ngdpbbfPKyEzVVQsz1FG+aE8jUiUYs72gvmDmZmRyl9VDCGLrHZfIEwaQMT1t6WQH5nopu5A==",
       "license": "MIT",
       "dependencies": {
-        "@sentry/core": "11.4.0",
+        "@sentry/core": "11.8.0",
         "dotenv": "^17.4.2",
         "glob": "^13.0.6",
         "magic-string": "~0.30.8 || ^1.0.0",
@@ -1038,52 +1063,52 @@
       }
     },
     "node_modules/@sentry/conventions": {
-      "version": "0.25.0",
-      "resolved": "https://registry.npmjs.org/@sentry/conventions/-/conventions-0.25.0.tgz",
-      "integrity": "sha512-7SouCAX3qx+AzLsxb6gbl3dKVWNhp2wFjdYQ/T90sGwqPPQUoZVA9YwsWwvx07hqcCiSqFW9mUAzyUftASnuhQ==",
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@sentry/conventions/-/conventions-0.27.0.tgz",
+      "integrity": "sha512-Mrqd/o7n/z7qWSYfQQA7x4fFTA0IqOG6JNsbBpnC97khPwZk7n6DPtOO7YgaYplSl8R8QLRbBz9Xv2lVhToSAg==",
       "license": "MIT",
       "engines": {
         "node": ">=14"
       }
     },
     "node_modules/@sentry/core": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/@sentry/core/-/core-11.4.0.tgz",
-      "integrity": "sha512-kAhK8XVJuzu1IKx9uSu04OISxTU9BcIyDVOWbY/ATUCYr5Z6L7GRBtOGOlYCbxEuPtdZCw5TrbphnBsyO9fuTA==",
+      "version": "11.8.0",
+      "resolved": "https://registry.npmjs.org/@sentry/core/-/core-11.8.0.tgz",
+      "integrity": "sha512-4MVTthk6C/1oQFjbVIfygHyNkx2YGbwNLml0kJji0vjJXy6ZNls9zdIp0FTBTi4e3189IcSc5OXD4qcJdmEeKA==",
       "license": "MIT",
       "dependencies": {
-        "@sentry/conventions": "^0.25.0"
+        "@sentry/conventions": "^0.27.0"
       },
       "engines": {
         "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
       }
     },
     "node_modules/@sentry/node": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/@sentry/node/-/node-11.4.0.tgz",
-      "integrity": "sha512-fW587LsZnsuGt1V++59xFCtZ/7jGO3GQq1F+l/Jx5DS18QApXQ99vlfS9H5bxuWixfi5/22ea9M8XjFpkkuzQg==",
+      "version": "11.8.0",
+      "resolved": "https://registry.npmjs.org/@sentry/node/-/node-11.8.0.tgz",
+      "integrity": "sha512-8vFPfCRYoUYmsno+OYdvtf5akIUUvd7FvcuIGcfrge8S/bSLFRKq58YtFmX25JFcrMNZ2oQD8r0jkgZfm/2iuA==",
       "license": "MIT",
       "dependencies": {
         "@opentelemetry/api": "^1.9.1",
-        "@sentry/bundler-plugins": "11.4.0",
-        "@sentry/conventions": "^0.25.0",
-        "@sentry/core": "11.4.0",
-        "@sentry/opentelemetry": "11.4.0",
-        "@sentry/server-runtime-injection": "11.4.0",
-        "@sentry/server-utils": "11.4.0"
+        "@sentry/bundler-plugins": "11.8.0",
+        "@sentry/conventions": "^0.27.0",
+        "@sentry/core": "11.8.0",
+        "@sentry/opentelemetry": "11.8.0",
+        "@sentry/server-runtime-injection": "11.8.0",
+        "@sentry/server-utils": "11.8.0"
       },
       "engines": {
         "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
       }
     },
     "node_modules/@sentry/opentelemetry": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/@sentry/opentelemetry/-/opentelemetry-11.4.0.tgz",
-      "integrity": "sha512-GGDmV+VIGU1p3KGtgR32wrRJejSfEuafbEcSUK7Ww5oxDMYJyHXRSbFjVvGMoAG1ezTl0U6WtMUoWmalsfYHZg==",
+      "version": "11.8.0",
+      "resolved": "https://registry.npmjs.org/@sentry/opentelemetry/-/opentelemetry-11.8.0.tgz",
+      "integrity": "sha512-wKuG2SbHHiGDT/fgT4X5n2usO4AjVkYfAj41002mZ18JZU3mNLeCq+qw/nnDIYbcsfIMOUm/eMh3ShKCE+DpXQ==",
       "license": "MIT",
       "dependencies": {
-        "@sentry/conventions": "^0.25.0",
-        "@sentry/core": "11.4.0"
+        "@sentry/conventions": "^0.27.0",
+        "@sentry/core": "11.8.0"
       },
       "engines": {
         "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
@@ -1093,27 +1118,27 @@
       }
     },
     "node_modules/@sentry/server-runtime-injection": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/@sentry/server-runtime-injection/-/server-runtime-injection-11.4.0.tgz",
-      "integrity": "sha512-8IaiqIJuJySztjxdC0UXP3lHlBAr8HsI8kUMEDV7REYhgmz2+B4BmKyyvaZfeasJlAvzkvSOLZ/Xco7kPikZdQ==",
+      "version": "11.8.0",
+      "resolved": "https://registry.npmjs.org/@sentry/server-runtime-injection/-/server-runtime-injection-11.8.0.tgz",
+      "integrity": "sha512-4uB4E8+9ni5NcJ463aYK/+n1hTMw/vSt4s+AkQ84CKigRDwv2FNNnD1AWpipWNj/xEQ6eQbUitGl7wg7/Ri8Pg==",
       "license": "MIT",
       "dependencies": {
-        "@sentry/core": "11.4.0",
-        "@sentry/server-utils": "11.4.0"
+        "@sentry/core": "11.8.0",
+        "@sentry/server-utils": "11.8.0"
       },
       "engines": {
         "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
       }
     },
     "node_modules/@sentry/server-utils": {
-      "version": "11.4.0",
-      "resolved": "https://registry.npmjs.org/@sentry/server-utils/-/server-utils-11.4.0.tgz",
-      "integrity": "sha512-GA4RvjRXyKFawD7Zi5AlgHPvm9Q8d9VeWer6g9qj4mDavi+VuNFhRmhgsv1qU1l3hlUeMYCpbKhpDOaOH/TcoQ==",
+      "version": "11.8.0",
+      "resolved": "https://registry.npmjs.org/@sentry/server-utils/-/server-utils-11.8.0.tgz",
+      "integrity": "sha512-2MRFz1rXxnuDGafl6o/itwKHZeZn5hUZYeXNbQK012uO/a2pXhEc8Zh3FeO5L4tjGrIWHx419saAFnKwbVC2IQ==",
       "license": "MIT",
       "dependencies": {
         "@opentelemetry/api": "^1.9.1",
-        "@sentry/conventions": "^0.25.0",
-        "@sentry/core": "11.4.0"
+        "@sentry/conventions": "^0.27.0",
+        "@sentry/core": "11.8.0"
       },
       "engines": {
         "node": ">=20.19.0 <22.0.0 || >=22.12.0 <23.0.0 || >=23.2.0"
@@ -1399,9 +1424,9 @@
       }
     },
     "node_modules/drizzle-orm": {
-      "version": "0.45.3",
-      "resolved": "https://registry.npmjs.org/drizzle-orm/-/drizzle-orm-0.45.3.tgz",
-      "integrity": "sha512-CAloER21cDdcgZ1OmjrZX82EeRNsdP+y0onX/eyoYDaYzki/adrAa91lzM5jWh7zZPK4qUbw/6LGv9J+A+uizA==",
+      "version": "0.45.4",
+      "resolved": "https://registry.npmjs.org/drizzle-orm/-/drizzle-orm-0.45.4.tgz",
+      "integrity": "sha512-NiM1YZpJ2UxyeE67DpDDZ+Tsw4YLX3trSlkNT7Tm9eKoUNb1LvaAaQzXgYQsWs+AQ9TUmmwMmBOCXuqqxUWKKQ==",
       "license": "Apache-2.0",
       "peerDependencies": {
         "@aws-sdk/client-rds-data": ">=3",
@@ -1687,9 +1712,9 @@
       }
     },
     "node_modules/express-rate-limit": {
-      "version": "8.7.0",
-      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.0.tgz",
-      "integrity": "sha512-hOwV7WOxXfjRpAM1DSJWZDXx3GhplwD8IfwuwvogD8i1Qnkgosw/H45s4ZnFAUHDAhPjlY9hLBvJhKmGMyY26g==",
+      "version": "8.7.1",
+      "resolved": "https://registry.npmjs.org/express-rate-limit/-/express-rate-limit-8.7.1.tgz",
+      "integrity": "sha512-2FXbqkygil3mZiXzEtM0IjE/UBmBNot0J1GEVrJT4JbrvwOSoEtqtO+wHbiMQELWe1eNvHoYRg2dkjOid+6JkA==",
       "license": "MIT",
       "dependencies": {
         "debug": "^4.4.3",
@@ -2021,6 +2046,12 @@
         "node": "20 || >=22"
       }
     },
+    "node_modules/lucide-static": {
+      "version": "1.59.0",
+      "resolved": "https://registry.npmjs.org/lucide-static/-/lucide-static-1.59.0.tgz",
+      "integrity": "sha512-MuHZYaXbHgzN2QO6D3OM19bj09A+8GJiFSdXIMlbnLLEGQQ9+NRH2KaCxuivevD3Y23vM74kV17XBifgtqhfEg==",
+      "license": "ISC"
+    },
     "node_modules/magic-string": {
       "version": "1.4.3",
       "resolved": "https://registry.npmjs.org/magic-string/-/magic-string-1.4.3.tgz",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@arcforgelabs/flow",
-  "version": "2026.10.34",
+  "version": "2026.10.36",
   "description": "Invoicing, bill entry and a financial dashboard for labs, with Seazona and Xero integrations.",
   "license": "MIT",
   "repository": {
@@ -32,11 +32,12 @@
     "start": "node server/index.js",
     "test": "node --test --test-concurrency=1 test/*.test.js",
     "changelog:check": "node scripts/release/changelog.mjs check",
+    "release:stable": "node scripts/release/release-stable.mjs",
     "theme:contrast": "node scripts/theme-contrast.mjs",
     "db:generate": "drizzle-kit generate && node scripts/db-guard-migrations.js"
   },
   "dependencies": {
-    "@clerk/backend": "3.23.2",
+    "@clerk/backend": "3.25.0",
     "@fontsource-variable/atkinson-hyperlegible-next": "5.3.0",
     "@fontsource-variable/dm-sans": "5.3.0",
     "@fontsource-variable/geist": "5.3.0",
@@ -48,10 +49,11 @@
     "@fontsource-variable/playfair-display": "5.3.0",
     "@fontsource-variable/plus-jakarta-sans": "5.3.0",
     "@fontsource-variable/space-grotesk": "5.3.0",
-    "@sentry/node": "11.4.0",
-    "drizzle-orm": "0.45.3",
+    "@sentry/node": "11.8.0",
+    "drizzle-orm": "0.45.4",
     "express": "5.3.0",
-    "express-rate-limit": "8.7.0",
+    "express-rate-limit": "8.7.1",
+    "lucide-static": "1.59.0",
     "pdfkit": "0.20.2",
     "pg": "8.23.1"
   },

package/server/api/custom-fields.js

@@ -1,6 +1,6 @@
 import express from 'express';
 import {
-  CUSTOM_FIELD_TYPES, GROUPABLE_TYPES, OPTION_COLORS, archiveField, createField, jobFieldHistory, listFields,
+  CUSTOM_FIELD_TYPES, GROUPABLE_TYPES, OPTION_COLORS, archiveField, choosablePeople, createField, jobFieldHistory, listFields,
   listJobFieldValues, orderFields, setJobFieldValue, updateField,
 } from '../core/custom-fields.js';
 import { FlowError } from '../core/errors.js';
@@ -8,7 +8,8 @@ import { resolveOrganisation } from './invoicing.js';
 
 // Custom fields for jobs (server/core/custom-fields.js, docs/CUSTOM_FIELDS.md).
 //
-//   GET  /api/custom-fields[?archived=1]          the lab's fields, and the work systems' own fields (read only)
+//   GET  /api/custom-fields[?archived=1]          the lab's fields, the work systems' own fields (read only),
+//        and the people a person field can name
 //   POST /api/custom-fields { name, type[, options] }        owner or admin: make a field
 //   PUT  /api/custom-fields/order { ids }                   owner or admin: the field order
 //   PUT  /api/custom-fields/:id { name?, options? }         owner or admin: rename, change options
@@ -70,8 +71,8 @@ export function createCustomFieldsRouter({ db, personAuth, work = () => [], log
   router.get('/', ...signedIn, handle(async (req, res) => {
     const organisationId = await organisationOf(req);
     const archived = req.query.archived === '1' || req.query.archived === 'true';
-    const [fields, system] = await Promise.all([listFields(db, organisationId, { archived }), systemFields()]);
-    res.json({ ok: true, fields, systemFields: system, types: CUSTOM_FIELD_TYPES, groupable: GROUPABLE_TYPES, colors: OPTION_COLORS });
+    const [fields, system, chosen] = await Promise.all([listFields(db, organisationId, { archived }), systemFields(), choosablePeople(db)]);
+    res.json({ ok: true, fields, systemFields: system, people: chosen, types: CUSTOM_FIELD_TYPES, groupable: GROUPABLE_TYPES, colors: OPTION_COLORS });
   }));
 
   router.post('/', ...manager, handle(async (req, res) => {

package/server/api/invoicing.js

@@ -21,7 +21,9 @@ import { jobReference } from '../core/references.js';
 import {
   acceptFindings, archivePriceItem, checkPrices, createPriceItem, linkPriceItem, readCatalogues, readPriceList, unlinkPriceItem, updatePriceItem,
 } from '../core/price-list.js';
-import { draftInvoiceForObligation, explainObligation, listObligations, setReady, useSourceLines } from '../core/ledger.js';
+import {
+  draftInvoiceForObligation, explainObligation, jobChangeFor, listObligations, setReady, useSourceLines,
+} from '../core/ledger.js';
 import { isHistoryHeld } from '../core/history.js';
 import { invoicePdfDocument, pdfFields, pdfFilename, renderInvoicePdf } from '../core/invoice-pdf.js';
 import { invoiceView, invoiceViews, markNotReady, markReady, sendAgain, sendAllReady } from '../core/sending.js';
@@ -234,6 +236,15 @@ const jobOf = (o) => (o ? {
   id: o.id, sourceSystem: o.sourceSystem, sourceJobRef: o.sourceJobRef, caseRef: o.caseRef, practitioner: o.practitioner, shippedOn: o.shippedOn,
 } : null);
 
+// A job with its work system's name and its link in that system's web app
+// (jobLink: no live call), for the Linked column.
+function withLink(job, systems) {
+  if (!job) return null;
+  const source = systems.find((a) => a.id === job.sourceSystem) ?? null;
+  const link = typeof source?.capabilities.jobLink === 'function' ? source.capabilities.jobLink({ sourceJobRef: job.sourceJobRef }) : null;
+  return { ...job, systemName: source?.name ?? job.sourceSystem, link: link ?? null };
+}
+
 async function jobsByInvoice(db, organisationId, invoiceIds) {
   if (!invoiceIds.length) return new Map();
   const rows = await db.select().from(billingObligations)
@@ -241,15 +252,37 @@ async function jobsByInvoice(db, organisationId, invoiceIds) {
   return new Map(rows.map((o) => [o.invoiceId, jobOf(o)]));
 }
 
-async function invoiceDetail(db, organisationId, invoiceId, accounting = null) {
+// The job changed after its invoice was made (ledger.js, jobChangeFor): what
+// changed, with customer names, and the work system's link to the job.
+async function jobChangeDetail(db, organisationId, invoiceId, work) {
+  const change = await jobChangeFor(db, organisationId, invoiceId);
+  if (!change) return null;
+  let contact = null;
+  if (change.contact) {
+    const ids = [change.contact.was, change.contact.now].filter(Boolean);
+    const rows = ids.length ? await db.select({ id: contacts.id, name: contacts.name }).from(contacts)
+      .where(and(eq(contacts.organisationId, organisationId), inArray(contacts.id, ids))) : [];
+    const nameOf = (id) => rows.find((r) => r.id === id)?.name ?? null;
+    contact = { was: nameOf(change.contact.was), now: nameOf(change.contact.now) };
+  }
+  const source = work.find((a) => a.id === change.sourceSystem) ?? null;
+  const link = typeof source?.capabilities.jobLink === 'function'
+    ? source.capabilities.jobLink({ sourceJobRef: change.sourceJobRef, sourceInvoiceRef: change.sourceInvoiceRef })
+    : null;
+  return { ...change, contact, systemName: source?.name ?? change.sourceSystem, link: link ?? null };
+}
+
+async function invoiceDetail(db, organisationId, invoiceId, accounting = null, work = []) {
   const invoice = await getInvoice(db, organisationId, invoiceId);
-  const [[contact], versions, jobs] = await Promise.all([
+  const [[contact], versions, jobs, jobChange] = await Promise.all([
     db.select({ id: contacts.id, name: contacts.name, email: contacts.email }).from(contacts)
       .where(and(eq(contacts.organisationId, organisationId), eq(contacts.id, invoice.contactId))),
     listInvoiceVersions(db, organisationId, invoiceId),
     jobsByInvoice(db, organisationId, [invoiceId]),
+    jobChangeDetail(db, organisationId, invoiceId, work),
   ]);
   return {
+    jobChange,
     ...invoice,
     ...(await invoiceView(db, organisationId, invoice, { accounting })),
     // Where a draft goes when it is sent, and how: this customer's send mode.
@@ -319,6 +352,7 @@ export function createInvoicingRouter({
       return { rows, jobs: await jobsByInvoice(db, organisationId, rows.map((r) => r.invoice.id)) };
     })();
     const [views, counted, { rows, jobs }, mode] = await Promise.all([checking, counting, listing, sendMode]);
+    const systems = work();
     const counts = Object.fromEntries(INVOICE_STATUSES.map((s) => [s, 0]));
     for (const { status: s, n } of counted) counts[s] = n;
     counts.to_check = views.toCheck.length;
@@ -331,7 +365,7 @@ export function createInvoicingRouter({
       invoices: rows.map(({ invoice, contactName }) => ({
         ...invoice,
         contactName,
-        job: jobs.get(invoice.id) ?? null,
+        job: withLink(jobs.get(invoice.id) ?? null, systems),
         view: views.problems.has(invoice.id) ? 'problem' : ready.has(invoice.id) ? 'ready' : toCheck.has(invoice.id) ? 'to_check'
           : views.sending.has(invoice.id) ? 'sending' : null,
         problems: views.problems.get(invoice.id) ?? [],
@@ -339,6 +373,8 @@ export function createInvoicingRouter({
       counts,
       sendsTo: system?.name ?? null,
       sendMode: mode,
+      // The Linked column: one icon for each connected system.
+      linksTo: [...systems.map((a) => ({ id: a.id, name: a.name, kind: 'work' })), ...(system ? [{ id: system.id, name: system.name, kind: 'accounting' }] : [])],
     });
   }));
 
@@ -386,7 +422,7 @@ export function createInvoicingRouter({
   router.get('/invoices/:id', ...signedIn, handle(log, async (req, res) => {
     const invoiceId = pathId(req.params.id, 'invoice');
     const organisationId = await organisationOf(req);
-    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting()) });
+    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting(), work()) });
   }));
 
   router.get('/invoices/:id/pdf', ...signedIn, handle(log, async (req, res) => {
@@ -415,7 +451,7 @@ export function createInvoicingRouter({
       lines: body.lines === undefined ? [] : readLines(body.lines),
     });
     log.info?.(`[invoicing] organisation ${organisationId}: person ${req.person.id} made draft invoice ${draft.id}`);
-    res.status(201).json({ ok: true, invoice: await invoiceDetail(db, organisationId, draft.id, accounting()) });
+    res.status(201).json({ ok: true, invoice: await invoiceDetail(db, organisationId, draft.id, accounting(), work()) });
   }));
 
   router.patch('/invoices/:id', ...signedIn, handle(log, async (req, res) => {
@@ -429,16 +465,22 @@ export function createInvoicingRouter({
     if (body.lines !== undefined) changes.lines = readLines(body.lines);
     if (!Object.keys(changes).length) throw invalid('nothing to change: send contactId, reference, dueDate or lines');
     await updateDraftInvoice(db, organisationId, invoiceId, changes);
-    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting()) });
+    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting(), work()) });
   }));
 
   router.post('/invoices/:id/issue', ...manager, handle(log, async (req, res) => {
     const invoiceId = pathId(req.params.id, 'invoice');
     const organisationId = await organisationOf(req);
     const issueDate = optionalDate(req.body?.issueDate, 'issueDate') ?? today();
+    // A draft whose job changed after it was made waits for a person to fix
+    // the job at its source or adopt the change (ledger.js), as Move to
+    // Ready and Send do.
+    const { problems } = await invoiceView(db, organisationId, await getInvoice(db, organisationId, invoiceId));
+    const held = problems.find((p) => p.code === 'job_review');
+    if (held) throw new FlowError('not_ready', `${held.message} Nothing was finalised.`);
     const issued = await issueInvoice(db, organisationId, invoiceId, { issuedBy: `person:${req.person.id}`, issueDate });
     log.info?.(`[invoicing] organisation ${organisationId}: person ${req.person.id} issued invoice ${issued.number} (version ${issued.issuedVersion})`);
-    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting()) });
+    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting(), work()) });
   }));
 
   router.post('/invoices/:id/revise', ...manager, handle(log, async (req, res) => {
@@ -446,7 +488,7 @@ export function createInvoicingRouter({
     const organisationId = await organisationOf(req);
     await reviseInvoice(db, organisationId, invoiceId);
     log.info?.(`[invoicing] organisation ${organisationId}: person ${req.person.id} opened invoice ${invoiceId} for revision`);
-    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting()) });
+    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting(), work()) });
   }));
 
   router.post('/invoices/:id/void', ...manager, handle(log, async (req, res) => {
@@ -454,7 +496,7 @@ export function createInvoicingRouter({
     const organisationId = await organisationOf(req);
     await voidInvoice(db, organisationId, invoiceId);
     log.info?.(`[invoicing] organisation ${organisationId}: person ${req.person.id} voided invoice ${invoiceId}`);
-    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting()) });
+    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoiceId, accounting(), work()) });
   }));
 
   router.get('/contacts', ...signedIn, handle(log, async (req, res) => {
@@ -525,7 +567,7 @@ export function createInvoicingRouter({
     const reference = obligation ? await jobReference(db, organisationId, obligation, { template, work: source }) : null;
     const { invoice } = await draftInvoiceForObligation(db, organisationId, obligationId, { liveCheck, actor: `person:${req.person.id}`, reference });
     log.info?.(`[invoicing] organisation ${organisationId}: person ${req.person.id} drafted invoice ${invoice.id} from job ${obligationId}`);
-    res.status(201).json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoice.id) });
+    res.status(201).json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoice.id, accounting(), work()) });
   }));
 
   // "Use new lines": the job changed in the work system after its draft was
@@ -534,7 +576,7 @@ export function createInvoicingRouter({
     const obligationId = pathId(req.params.id, 'job');
     const organisationId = await organisationOf(req);
     const { invoice } = await useSourceLines(db, organisationId, obligationId, { actor: `person:${req.person.id}` });
-    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoice.id) });
+    res.json({ ok: true, invoice: await invoiceDetail(db, organisationId, invoice.id, accounting(), work()) });
   }));
 
   router.post('/jobs/:id/ready', ...signedIn, handle(log, async (req, res) => {

package/server/auth/people.js

@@ -2,6 +2,7 @@ import { and, asc, eq, isNull, ne, sql } from 'drizzle-orm';
 import { people, PERSON_ROLES } from '../db/schema.js';
 import { FlowError } from '../core/errors.js';
 import { isThemeFamily, normalizeAccent } from '../theme/themes.js';
+import { normaliseJobsView } from '../ui/job-view.js';
 import { isPlainEmail } from './settings.js';
 
 // The people who may sign in, and their roles. Only an owner changes this
@@ -50,6 +51,40 @@ export async function setPersonAppearance(db, { id, appearance }) {
   return row.appearance;
 }
 
+// The pages a person can keep their own view of, each with its check.
+// Each page is named in a switch, never looked up by the name a request
+// sends, so a name such as "constructor" can only be refused.
+function viewCheck(page) {
+  switch (page) {
+    case 'jobs': return normaliseJobsView;
+    default: return null;
+  }
+}
+const VIEW_PAGE_NAMES = ['jobs'];
+
+// A person's saved views as Flow sends them: only the known pages, each
+// checked, so a view saved by an older Flow still loads.
+export function normaliseViews(input) {
+  const value = input && typeof input === 'object' ? input : {};
+  const out = {};
+  for (const page of VIEW_PAGE_NAMES) if (value[page]) out[page] = viewCheck(page)(value[page]);
+  return out;
+}
+
+// Each person keeps their own view of a page; saving one page leaves the
+// others as they were.
+export async function setPersonView(db, { id, page, view }) {
+  const normalise = viewCheck(page);
+  if (typeof normalise !== 'function') throw new FlowError('not_found', 'no such page');
+  const value = normalise(view);
+  const [row] = await db.update(people)
+    .set({ views: sql`coalesce(${people.views}, '{}'::jsonb) || ${JSON.stringify({ [page]: value })}::jsonb`, updatedAt: new Date() })
+    .where(eq(people.id, id))
+    .returning();
+  if (!row) throw new FlowError('not_found', 'person not found');
+  return value;
+}
+
 export async function findPersonById(db, id) {
   const [row] = await db.select().from(people).where(eq(people.id, id));
   return row ?? null;

package/server/auth/routes.js

@@ -8,9 +8,11 @@ import {
   listPeople,
   normaliseEmail,
   normaliseAppearance,
+  normaliseViews,
   publicPerson,
   removePerson,
   setPersonAppearance,
+  setPersonView,
   updatePerson,
 } from './people.js';
 import { isPlainEmail } from './settings.js';
@@ -99,6 +101,7 @@ export function createSignInRouter({ settings, db, clerk, personAuth, defaultFam
       body.ownerActions = { allowed: Boolean(check.verified), by: check.by ?? null };
     }
     body.appearance = req.person.appearance ? normaliseAppearance(req.person.appearance) : null;
+    body.views = normaliseViews(req.person.views);
     res.json(body);
   });
 
@@ -112,6 +115,17 @@ export function createSignInRouter({ settings, db, clerk, personAuth, defaultFam
     }
   });
 
+  // Each person sets their own view of a page (how Jobs groups, sorts and
+  // filters); it follows their account.
+  router.put('/api/me/views/:page', requireSession, express.json({ limit: '8kb' }), async (req, res) => {
+    try {
+      const view = await setPersonView(db, { id: req.person.id, page: req.params.page, view: req.body });
+      res.json({ ok: true, view });
+    } catch (error) {
+      sendError(res, error, log);
+    }
+  });
+
   // Only an owner manages people.
   const people = express.Router();
   people.use(requireSession, requireOwner, express.json({ limit: '16kb' }));

package/server/core/custom-fields.js

@@ -286,6 +286,14 @@ export async function listJobFieldValues(db, organisationId, { jobs = null } = {
   return rows.filter((r) => !wanted || wanted.has(`${r.sourceSystem}\u0000${r.sourceJobRef}`)).map(publicValue);
 }
 
+// The people a person field can name: every active person, by id and name
+// (the part of the email before @ when they have no name), A to Z.
+export async function choosablePeople(db) {
+  const rows = await db.select({ id: people.id, name: people.name, email: people.email }).from(people).where(eq(people.status, 'active'));
+  return rows.map((r) => ({ id: r.id, name: r.name?.trim() || r.email.replace(/@.*/, '') }))
+    .sort((a, b) => a.name.localeCompare(b.name));
+}
+
 // What happened to one job's custom field values, newest first.
 export async function jobFieldHistory(db, organisationId, raw, { limit = 50 } = {}) {
   const job = readJob(raw);