@saadnvd1/agent-os 0.3.839 → 0.3.845

package/components/Workspaces/WorkspaceModelsForm.tsx

@@ -2,7 +2,7 @@
 
 import { useState } from "react";
 import { PickerSetting } from "@/components/Settings/PickerSetting";
-import { SettingSection } from "@/components/Settings/SettingRow";
+import { SettingBlock } from "@/components/Settings/SettingRow";
 import { ModelSelect } from "@/components/Models/ModelSelect";
 import {
   useModelsQuery,
@@ -28,45 +28,44 @@ export function WorkspaceModelsForm({ workspaceId }: { workspaceId: string }) {
   const set = Object.keys(roles).length;
 
   return (
-    <div className="space-y-2">
-      <button
-        type="button"
-        className="text-muted-foreground hover:text-foreground h-11 text-left text-xs md:h-auto"
-        onClick={() => setOpen((o) => !o)}
-        aria-expanded={open}
-      >
-        Models: {set ? `${set} set for this workspace` : "as Settings › Models"}{" "}
-        {open ? "▴" : "▾"}
-      </button>
-      {open && (
-        <SettingSection>
-          {WORKSPACE_ROLES.map((role) => (
-            <PickerSetting<string | null>
-              key={role}
-              id={`ws-${workspaceId}-${role}`}
-              label={ROLE_LABELS[role].label}
-              value={roles[role] ?? null}
-              defaultValue={null}
-              onSave={(ref) => {
-                const next = { ...roles };
-                if (ref) next[role] = ref;
-                else delete next[role];
-                return update.mutateAsync({ roles: next });
-              }}
-              render={({ value, commit }) => (
-                <ModelSelect
-                  id={`ws-${workspaceId}-${role}`}
-                  value={value}
-                  effective={models.data?.effective}
-                  inheritLabel={`As Settings (${models.data?.effective.roles[role] ?? "…"})`}
-                  disabled={!models.data}
-                  onChange={commit}
-                />
-              )}
-            />
-          ))}
-        </SettingSection>
-      )}
-    </div>
+    <>
+      <SettingBlock id={`models-${workspaceId}`} label="Models">
+        <button
+          type="button"
+          className="text-muted-foreground hover:text-foreground flex min-h-11 w-full items-center text-left text-xs md:min-h-0"
+          onClick={() => setOpen((o) => !o)}
+          aria-expanded={open}
+        >
+          {set ? `${set} set for this workspace` : "As Settings › Models"}{" "}
+          {open ? "▴" : "▾"}
+        </button>
+      </SettingBlock>
+      {open &&
+        WORKSPACE_ROLES.map((role) => (
+          <PickerSetting<string | null>
+            key={role}
+            id={`ws-${workspaceId}-${role}`}
+            label={ROLE_LABELS[role].label}
+            value={roles[role] ?? null}
+            defaultValue={null}
+            onSave={(ref) => {
+              const next = { ...roles };
+              if (ref) next[role] = ref;
+              else delete next[role];
+              return update.mutateAsync({ roles: next });
+            }}
+            render={({ value, commit }) => (
+              <ModelSelect
+                id={`ws-${workspaceId}-${role}`}
+                value={value}
+                effective={models.data?.effective}
+                inheritLabel={`As Settings (${models.data?.effective.roles[role] ?? "…"})`}
+                disabled={!models.data}
+                onChange={commit}
+              />
+            )}
+          />
+        ))}
+    </>
   );
 }

package/components/Workspaces/WorkspacePanel.tsx

@@ -0,0 +1,73 @@
+"use client";
+
+import { useUpdateWorkspace } from "@/data/workspaces";
+import type { Workspace } from "@/lib/db";
+import {
+  NumberSetting,
+  SwitchSetting,
+} from "@/components/Settings/settings-fields";
+import { SettingSection } from "@/components/Settings/SettingRow";
+import { SETTING_DEFAULTS } from "@/lib/settings/defaults";
+import { HqFolderForm } from "./HqFolderForm";
+import { McpServersForm } from "./McpServersForm";
+import { ProjectTiersForm } from "./ProjectTiersForm";
+import { RulesForm } from "./RulesForm";
+import { WorkspaceModeForm } from "./WorkspaceModeForm";
+import { WorkspaceModelsForm } from "./WorkspaceModelsForm";
+
+// One workspace's settings, in titled groups.
+export function WorkspacePanel({ workspace: w }: { workspace: Workspace }) {
+  const update = useUpdateWorkspace();
+  return (
+    <div aria-label={`${w.name} settings`} role="group">
+      <SettingSection
+        title="Limits & mode"
+        help="Tasks over the limit wait in Queued and start by themselves, in order, when a running one finishes."
+      >
+        <NumberSetting
+          id={`task-limit-${w.id}`}
+          label="Tasks at a time"
+          value={w.max_running_tasks ?? 0}
+          defaultValue={0}
+          onSave={(n) =>
+            update.mutateAsync({
+              id: w.id,
+              maxRunningTasks: n === 0 ? null : n,
+            })
+          }
+          min={1}
+          integer
+          unit="at a time"
+          optional={{ off: 0, on: SETTING_DEFAULTS.taskLimitOn }}
+        />
+        <WorkspaceModeForm workspaceId={w.id} />
+      </SettingSection>
+      <SettingSection
+        title="Orchestrator"
+        help="What this workspace's orchestrator may do, which models it runs on, and where its session logs go."
+      >
+        <SwitchSetting
+          id={`full-access-${w.id}`}
+          label="Full access"
+          help="Its shell and file writes aren't checked. Applies when its conversation next restarts."
+          checked={w.orch_full_access}
+          confirm="Let this orchestrator act without approval? It can push, commit, edit any repository or file on this machine, merge a PR directly, and edit .claude files. Off: the deny list, write limits and merge-only-through-the-gates apply."
+          confirmLabel="Turn on full access"
+          onSave={(on) => update.mutateAsync({ id: w.id, orchFullAccess: on })}
+        />
+        <SwitchSetting
+          id={`wake-${w.id}`}
+          label="Wake tasks on CI failures and reviews"
+          help="A task's agent is messaged once when a check fails on its PR, and when someone reviews or comments."
+          checked={w.wake_tasks_on_pr}
+          onSave={(on) => update.mutateAsync({ id: w.id, wakeTasksOnPR: on })}
+        />
+        <WorkspaceModelsForm workspaceId={w.id} />
+        <HqFolderForm workspaceId={w.id} />
+      </SettingSection>
+      <RulesForm workspaceId={w.id} />
+      <McpServersForm workspace={w} />
+      <ProjectTiersForm workspaceId={w.id} />
+    </div>
+  );
+}

package/components/Workspaces/WorkspacePicker.tsx

@@ -0,0 +1,44 @@
+"use client";
+
+import {
+  Select,
+  SelectContent,
+  SelectItem,
+  SelectTrigger,
+  SelectValue,
+} from "@/components/ui/select";
+import type { Workspace } from "@/lib/db";
+
+// Which workspace's settings the page shows.
+export function WorkspacePicker({
+  workspaces,
+  value,
+  onChange,
+}: {
+  workspaces: Workspace[];
+  value: string;
+  onChange: (id: string) => void;
+}) {
+  return (
+    <div className="mb-4 flex items-center gap-3">
+      <label htmlFor="settings-workspace" className="text-sm font-medium">
+        Workspace
+      </label>
+      <Select value={value} onValueChange={onChange}>
+        <SelectTrigger
+          id="settings-workspace"
+          className="h-11 min-w-0 flex-1 text-base sm:max-w-xs md:h-9 md:text-sm"
+        >
+          <SelectValue />
+        </SelectTrigger>
+        <SelectContent>
+          {workspaces.map((w) => (
+            <SelectItem key={w.id} value={w.id}>
+              {w.name}
+            </SelectItem>
+          ))}
+        </SelectContent>
+      </Select>
+    </div>
+  );
+}

package/components/Workspaces/WorkspaceSettings.test.ts

@@ -0,0 +1,153 @@
+import "@/components/Chat/composer/test-dom";
+import { act, createElement } from "react";
+import { createRoot, type Root } from "react-dom/client";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+for (const key of Object.getOwnPropertyNames(window))
+  if (
+    /^(HTML|SVG|Event|CustomEvent|FocusEvent|DocumentFragment|Node|Element|Mutation)/.test(
+      key
+    ) &&
+    !(key in globalThis)
+  )
+    Object.defineProperty(globalThis, key, {
+      value: (window as unknown as Record<string, unknown>)[key],
+      configurable: true,
+      writable: true,
+    });
+(
+  globalThis as { IS_REACT_ACT_ENVIRONMENT?: boolean }
+).IS_REACT_ACT_ENVIRONMENT = true;
+
+const ws = (id: string, name: string, limit: number | null) => ({
+  id,
+  name,
+  max_running_tasks: limit,
+  orch_full_access: false,
+  wake_tasks_on_pr: true,
+  orch_mcp_servers: [],
+});
+const state = vi.hoisted(() => ({
+  workspaces: [] as unknown[],
+  projects: [] as unknown[],
+  sidebar: null as unknown,
+  update: vi.fn(),
+}));
+vi.mock("sonner", () => ({ toast: { error: vi.fn() } }));
+vi.mock("@/data/workspaces", () => ({
+  useWorkspacesQuery: () => ({ isPending: false, data: state.workspaces }),
+  useUpdateWorkspace: () => ({ mutateAsync: state.update }),
+}));
+vi.mock("@/data/projects", () => ({
+  useProjectsQuery: () => ({ data: state.projects }),
+}));
+vi.mock("@/hooks/useSelectedWorkspace", () => ({
+  useSelectedWorkspace: () => ({ workspace: state.sidebar }),
+}));
+vi.mock("@/components/Settings/AppWideLimits", () => ({
+  AppWideLimits: () => null,
+}));
+for (const name of [
+  "RulesForm",
+  "McpServersForm",
+  "HqFolderForm",
+  "ProjectTiersForm",
+  "WorkspaceModeForm",
+  "WorkspaceModelsForm",
+])
+  vi.doMock(`./${name}`, () => ({
+    [name]: () => null,
+  }));
+
+const { WorkspaceSettings } = await import("./WorkspaceSettings");
+const { SettingsQueryContext } =
+  await import("@/components/Settings/SettingRow");
+
+let root: Root;
+let host: HTMLDivElement;
+beforeEach(() => {
+  localStorage.clear();
+  state.update.mockReset().mockResolvedValue(undefined);
+  state.workspaces = [ws("w1", "Alpha", null), ws("w2", "Beta", 2)];
+  state.projects = [
+    { id: "p1", name: "beta-api", workspace_id: "w2", is_uncategorized: false },
+  ];
+  state.sidebar = null;
+  host = document.createElement("div");
+  document.body.appendChild(host);
+  root = createRoot(host);
+});
+afterEach(async () => {
+  await act(async () => root.unmount());
+  host.remove();
+});
+
+const render = (query = "") =>
+  act(async () =>
+    root.render(
+      createElement(
+        SettingsQueryContext.Provider,
+        { value: query },
+        createElement(WorkspaceSettings)
+      )
+    )
+  );
+const picker = () => host.querySelector<HTMLElement>("#settings-workspace")!;
+const titles = () => [...host.querySelectorAll("h3")].map((h) => h.textContent);
+const limit = () =>
+  host.querySelector<HTMLInputElement>("#task-limit-w1, #task-limit-w2")!;
+
+describe("WorkspaceSettings", () => {
+  it("shows one workspace at a time, in titled groups", async () => {
+    await render();
+    expect(host.querySelectorAll('[role="group"]')).toHaveLength(1);
+    expect(picker().textContent).toBe("Alpha");
+    expect(titles()).toEqual(
+      expect.arrayContaining(["Limits & mode", "Orchestrator"])
+    );
+    expect(host.textContent).not.toContain("Running task limit:");
+  });
+
+  it("preselects the sidebar's workspace", async () => {
+    state.sidebar = state.workspaces[1];
+    await render();
+    expect(picker().textContent).toBe("Beta");
+  });
+
+  it("remembers the choice", async () => {
+    localStorage.setItem("agentOS-settings-workspace", "w2");
+    await render();
+    expect(picker().textContent).toBe("Beta");
+  });
+
+  it("greys the number while the limit is off, keeping its value", async () => {
+    await render();
+    expect(limit().id).toBe("task-limit-w1");
+    expect(limit().disabled).toBe(true);
+    expect(limit().value).toBe("3");
+    expect(host.textContent).not.toContain("Default");
+  });
+
+  it("enables the number when a limit is set, and hints the default", async () => {
+    localStorage.setItem("agentOS-settings-workspace", "w2");
+    await render();
+    expect(limit().disabled).toBe(false);
+    expect(limit().value).toBe("2");
+    expect(host.textContent).toContain("Default: off");
+    expect(
+      [...host.querySelectorAll("button")].some(
+        (b) => b.textContent === "Reset"
+      )
+    ).toBe(true);
+  });
+
+  it("a search matching only another workspace's project switches to it", async () => {
+    await render("beta-api");
+    expect(picker().textContent).toBe("Beta");
+  });
+
+  it("a search matching rows on every page stays on the current workspace", async () => {
+    await render("mcp");
+    expect(picker().textContent).toBe("Alpha");
+  });
+});

package/components/Workspaces/WorkspaceSettings.tsx

@@ -1,31 +1,55 @@
 "use client";
 
+import { useContext, useState } from "react";
 import { settingsUiActions } from "@/stores/settingsUi";
-import { useUpdateWorkspace, useWorkspacesQuery } from "@/data/workspaces";
-import { RulesForm } from "./RulesForm";
-import { McpServersForm } from "./McpServersForm";
-import { HqFolderForm } from "./HqFolderForm";
-import { ProjectTiersForm } from "./ProjectTiersForm";
-import { WorkspaceModeForm } from "./WorkspaceModeForm";
-import { WorkspaceModelsForm } from "./WorkspaceModelsForm";
+import { useWorkspacesQuery } from "@/data/workspaces";
+import { useProjectsQuery } from "@/data/projects";
 import { AppWideLimits } from "@/components/Settings/AppWideLimits";
 import {
-  NumberSetting,
-  SwitchSetting,
-} from "@/components/Settings/settings-fields";
-import { SettingSection } from "@/components/Settings/SettingRow";
-import { SETTING_DEFAULTS } from "@/lib/settings/defaults";
+  matchesQuery,
+  SettingsQueryContext,
+} from "@/components/Settings/SettingRow";
+import { WorkspacePanel } from "./WorkspacePanel";
+import { WorkspacePicker } from "./WorkspacePicker";
+import { useSettingsWorkspace } from "./useSettingsWorkspace";
 
-// Settings > Workspaces: each workspace's own settings.
+// What every workspace's page has, for the search box to find.
+const SHARED_ROWS =
+  "tasks at a time limit operating mode orchestrator full access wake ci failures reviews models hq folder session logs rules mcp servers projects production fast merge tier";
+
+// Settings > Workspaces: one workspace's settings at a time.
 export function WorkspaceSettings() {
   const { data: workspaces, isPending, isError, error } = useWorkspacesQuery();
-  const update = useUpdateWorkspace();
+  const { data: projects } = useProjectsQuery();
+  const query = useContext(SettingsQueryContext);
+  const { current, choose } = useSettingsWorkspace(workspaces ?? []);
+  // The search a hand-picked workspace overrides.
+  const [pinnedFor, setPinnedFor] = useState<string | null>(null);
+
+  // A search that matches only another workspace (its name, a project) shows
+  // that workspace; the shared rows are on every page, so they never move it.
+  const searchHit =
+    query.trim() &&
+    workspaces &&
+    current &&
+    pinnedFor !== query &&
+    !matchesQuery(query, SHARED_ROWS)
+      ? workspaces.find((w) =>
+          matchesQuery(
+            query,
+            w.name,
+            ...(projects ?? [])
+              .filter((p) => p.workspace_id === w.id)
+              .map((p) => p.name)
+          )
+        )
+      : undefined;
 
   if (isPending)
     return <div className="bg-muted/40 h-32 animate-pulse rounded-lg" />;
   if (isError)
     return <p className="text-destructive text-sm">{error.message}</p>;
-  if (!workspaces.length)
+  if (!workspaces.length || !current)
     return (
       <p className="text-muted-foreground text-sm">
         No workspaces yet. Make one from the workspace menu at the top of the
@@ -33,74 +57,24 @@ export function WorkspaceSettings() {
       </p>
     );
 
+  const shown = searchHit ?? current;
   return (
-    <div className="space-y-4">
-      <p className="text-muted-foreground text-sm">
-        Running task limit: tasks over it wait in the Queued list and start by
-        themselves, in order, when a running one finishes.
-      </p>
-      {workspaces.map((w) => (
-        <section
-          key={w.id}
-          aria-label={w.name}
-          className="bg-muted/40 space-y-3 rounded-lg px-3 py-3"
-        >
-          <h3 className="truncate text-sm font-medium">{w.name}</h3>
-          <SettingSection>
-            <NumberSetting
-              id={`task-limit-${w.id}`}
-              label="Tasks at a time"
-              help="Cap on tasks running at once. The rest wait in Queued and start in order."
-              value={w.max_running_tasks ?? 0}
-              defaultValue={0}
-              onSave={(n) =>
-                update.mutateAsync({
-                  id: w.id,
-                  maxRunningTasks: n === 0 ? null : n,
-                })
-              }
-              min={1}
-              integer
-              unit="at a time"
-              optional={{ off: 0, on: SETTING_DEFAULTS.taskLimitOn }}
-            />
-          </SettingSection>
-          <WorkspaceModeForm workspaceId={w.id} />
-          <RulesForm workspaceId={w.id} />
-          <WorkspaceModelsForm workspaceId={w.id} />
-          <McpServersForm workspace={w} />
-          <HqFolderForm workspaceId={w.id} />
-          <ProjectTiersForm workspaceId={w.id} />
-          <SettingSection>
-            <SwitchSetting
-              id={`wake-${w.id}`}
-              label="Wake tasks on CI failures and reviews"
-              help="A task's agent is messaged once when a check fails on its PR, and when someone reviews or comments."
-              checked={w.wake_tasks_on_pr}
-              onSave={(on) =>
-                update.mutateAsync({ id: w.id, wakeTasksOnPR: on })
-              }
-            />
-            <SwitchSetting
-              id={`full-access-${w.id}`}
-              label="Orchestrator full access"
-              help="Its shell and file writes aren't checked. Applies when its conversation next restarts."
-              checked={w.orch_full_access}
-              confirm="Let this orchestrator act without approval? It can push, commit, edit any repository or file on this machine, merge a PR directly, and edit .claude files. Off: the deny list, write limits and merge-only-through-the-gates apply."
-              confirmLabel="Turn on full access"
-              onSave={(on) =>
-                update.mutateAsync({ id: w.id, orchFullAccess: on })
-              }
-            />
-          </SettingSection>
-        </section>
-      ))}
+    <div>
+      <WorkspacePicker
+        workspaces={workspaces}
+        value={shown.id}
+        onChange={(id) => {
+          setPinnedFor(query);
+          choose(id);
+        }}
+      />
+      <WorkspacePanel key={shown.id} workspace={shown} />
       <AppWideLimits />
       <p className="text-muted-foreground text-sm">
         Fresh starts and compaction are app-wide:{" "}
         <button
           type="button"
-          className="text-primary underline-offset-2 hover:underline"
+          className="text-primary -my-3 min-h-11 underline-offset-2 hover:underline"
           onClick={() => settingsUiActions.show("context")}
         >
           open Context

package/components/Workspaces/useSettingsWorkspace.ts

@@ -0,0 +1,47 @@
+"use client";
+
+import { useCallback, useSyncExternalStore } from "react";
+import type { Workspace } from "@/lib/db";
+import { useSelectedWorkspace } from "@/hooks/useSelectedWorkspace";
+
+const KEY = "agentOS-settings-workspace";
+
+const listeners = new Set<() => void>();
+
+function subscribe(fn: () => void) {
+  listeners.add(fn);
+  window.addEventListener("storage", fn);
+  return () => {
+    listeners.delete(fn);
+    window.removeEventListener("storage", fn);
+  };
+}
+
+function read(): string | null {
+  try {
+    return localStorage.getItem(KEY);
+  } catch {
+    return null;
+  }
+}
+
+// Which workspace Settings > Workspaces shows: the one picked here last,
+// else the sidebar's, else the first. A remembered one since deleted falls
+// through.
+export function useSettingsWorkspace(workspaces: Workspace[]) {
+  const { workspace: sidebar } = useSelectedWorkspace();
+  const picked = useSyncExternalStore(subscribe, read, () => null);
+  const choose = useCallback((id: string) => {
+    try {
+      localStorage.setItem(KEY, id);
+    } catch {
+      // Not remembered; the choice still holds for this visit.
+    }
+    listeners.forEach((fn) => fn());
+  }, []);
+  const current =
+    workspaces.find((w) => w.id === picked) ??
+    workspaces.find((w) => w.id === sidebar?.id) ??
+    workspaces[0];
+  return { current, choose };
+}

package/content/whats-new.json

@@ -1985,6 +1985,30 @@
       "area": "Settings",
       "text": "More settings now save as you change them, and revoking a passkey or link asks inline instead of with a browser pop-up.",
       "url": "https://github.com/saadnvd1/agent-os/pull/563"
+    },
+    {
+      "id": 564,
+      "date": "2026-11-02",
+      "kind": "fixed",
+      "area": "Updates",
+      "text": "Updating AgentOS no longer rolls back a good update when the machine's automatic deploy restarts the server at the same moment.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/564"
+    },
+    {
+      "id": 565,
+      "date": "2026-11-02",
+      "kind": "improved",
+      "area": "Settings",
+      "text": "The Workspaces settings page now shows one workspace at a time, in clear groups, with rules you can read in full and edit in place.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/565"
+    },
+    {
+      "id": 568,
+      "date": "2026-11-02",
+      "kind": "fixed",
+      "area": "Sidebar",
+      "text": "Renaming a session for the first time no longer closes the name box before you can type.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/568"
     }
   ]
 }

package/lib/away/deploy.ts

@@ -33,6 +33,14 @@ export const HEALTH_GRACE_MS = 3 * 60 * 1000;
 export const GAP_MARGIN_MS = 10 * 60 * 1000;
 const DEFAULT_GAP_S = 3600;
 
+type HealthAnswer = {
+  ok: boolean;
+  why?: string;
+  startedAt?: number;
+  // The commit the running server was built from, when it says.
+  build?: string;
+};
+
 export interface DeployDeps {
   // When the deploy last restarted the server, in ms; null when unknown.
   restartedAt: (file: string) => number | null;
@@ -43,9 +51,7 @@ export interface DeployDeps {
   contains: (repo: string, tip: string, sha: string) => Promise<boolean>;
   // startedAt, when the server says when it started (AgentOS's
   // /api/health does), so a deploy that never restarted it is caught.
-  health: (
-    url: string
-  ) => Promise<{ ok: boolean; why?: string; startedAt?: number }>;
+  health: (url: string) => Promise<HealthAnswer>;
   // When GitHub made the merge commit, in ms (0 when unknown): the time a
   // restart has to come after. Not when AgentOS noticed the merge, which
   // can be after a restart that already took it.
@@ -78,18 +84,25 @@ async function contains(
   return ancestor();
 }
 
-async function health(
-  url: string
-): Promise<{ ok: boolean; why?: string; startedAt?: number }> {
+async function health(url: string): Promise<HealthAnswer> {
   try {
     const res = await fetch(url, { signal: AbortSignal.timeout(5000) });
     if (!res.ok) return { ok: false, why: `HTTP ${res.status}` };
     const body = (await res.json().catch(() => null)) as {
       startedAt?: unknown;
+      build?: unknown;
     } | null;
     const startedAt =
       typeof body?.startedAt === "string" ? Date.parse(body.startedAt) : NaN;
-    return Number.isFinite(startedAt) ? { ok: true, startedAt } : { ok: true };
+    const build =
+      typeof body?.build === "string" && SHA.test(body.build)
+        ? body.build
+        : undefined;
+    return {
+      ok: true,
+      ...(Number.isFinite(startedAt) ? { startedAt } : {}),
+      ...(build ? { build } : {}),
+    };
   } catch (error) {
     return {
       ok: false,
@@ -161,6 +174,20 @@ async function judge(
     if (!config.health) return { state: "ok", detail: `${short} deployed` };
     const url = healthUrl(config.health);
     const answer = await deps.health(url);
+    // autodeploy's marker can name a build that isn't running (a rolled-back
+    // update); what the server says it runs decides.
+    if (
+      answer.ok &&
+      answer.build &&
+      !(await deps.contains(input.repo, answer.build, mergeSha))
+    ) {
+      if (input.now - deployed.at < HEALTH_GRACE_MS)
+        return { state: "pending" };
+      return {
+        state: "failed",
+        detail: `not deployed: the server is running ${answer.build.slice(0, 7)}, which doesn't have ${short}`,
+      };
+    }
     const merged =
       answer.ok && answer.startedAt !== undefined
         ? await deps.committedAt(input.repo, mergeSha)