@worca/app 1.6.0-rc.1 → 1.6.0-rc.3

package/README.md

@@ -234,7 +234,7 @@ See [`docs/team-policy.md`](docs/team-policy.md).
   into that model's agent spawns. Share a model catalog as a plugin, with
   secrets required at install time.
 - **No first-party account needed** — run and chat titles are written by the
-  model the run or chat itself uses (Settings › General › Title generation picks
+  model the run or chat itself uses (Settings › Models › Title generation picks
   a fixed one instead), endpoint-routed models carry Claude Code's internal
   haiku/sonnet/opus/fable tier keys so nothing falls back to the Anthropic API,
   and *Hide built-in models* (Settings › Models) drops the built-ins from every

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@worca/app",
-  "version": "1.6.0-rc.1",
+  "version": "1.6.0-rc.3",
   "description": "Worca — deterministic multi-agent pipeline that drives Claude Code (headless) through Plan -> Refine -> Implement -> Review, with a CLI, an installable /worca skill, and a web UI.",
   "license": "MIT",
   "author": "Sinisha Djukic",

package/src/core/ask/events.mjs

@@ -291,6 +291,7 @@ export function createTurnReducer({
   let lastResult = null;
   let reducerErrors = 0;
   let summary = null;
+  let cliErrorText = '';          // what a <synthetic> CLI message said (its API-error line)
   const pendingHooks = [];         // promises returned by onProposal — settle() awaits them
 
   // ── helpers ──
@@ -420,7 +421,18 @@ export function createTurnReducer({
     const content = Array.isArray(msg.content) ? msg.content : [];
     if (isMain) {
       sawAssistant = true;
-      if (id) {
+      // A `<synthetic>` message is the CLI speaking for itself — the API-refusal
+      // line it fabricates when a call fails (model: "<synthetic>"). It is not
+      // the model's answer: it must never enter the answer text (it would read
+      // as a reply above the failure notice), so it is kept aside for the error
+      // notice's detail instead.
+      if (msg.model === '<synthetic>') {
+        const t = content
+          .filter((c) => c && c.type === 'text' && typeof c.text === 'string')
+          .map((c) => c.text)
+          .join('');
+        if (t) cliErrorText = cliErrorText ? `${cliErrorText}\n${t}` : t;
+      } else if (id) {
         if (messages.has('__main__') && !messages.has(id)) {              // deltas arrived before any message_start: adopt them
           messages.set(id, messages.get('__main__'));
           messages.delete('__main__');
@@ -710,7 +722,7 @@ export function createTurnReducer({
       return {
         text: mainText(), blocks: blocks.map(clone), usage: currentUsage(), costUsd: currentCost(), sessionId,
         ...terminal(), sawInit, sawAssistant, sawResult, agents: blocks.filter((b) => b.kind === 'agent').length,
-        runningAgents, labels: [...labels], reducerErrors,
+        runningAgents, labels: [...labels], reducerErrors, cliErrorText: cliErrorText || null,
       };
     },
     finish() {
@@ -736,10 +748,13 @@ export function createTurnReducer({
           a.costUsd = est[i].costUsd == null ? null : Math.round(est[i].costUsd * scale * 1e6) / 1e6;
         });
       }
-      const text = mainText() || (lastResult && typeof lastResult.result === 'string' ? lastResult.result : '');
+      // The result-text fallback only speaks for a REAL answer: an is_error
+      // result carries the API's refusal line, never the model's reply.
+      const text = mainText() || (lastResult && !lastResult.is_error && typeof lastResult.result === 'string' ? lastResult.result : '');
       summary = {
         text: redact(text), blocks: blocks.map(clone), usage: currentUsage(), costUsd: currentCost(), sessionId,
         ...terminal(), sawInit, sawAssistant, sawResult, agents: agents.length, labels: [...labels], reducerErrors,
+        cliErrorText: cliErrorText || null,
       };
       return summary;
     },

package/src/core/ask/models.mjs

@@ -6,6 +6,7 @@
 import { listModels as realListModels, EFFORTS } from '../config.mjs';
 import { listPluginModels as realPluginModels, pluginModelSecretStatus as realSecretStatus } from '../plugin-models.mjs';
 import { ASK_LIMITS } from './limits.mjs';
+import { effortlessModels as realEffortless } from '../bridge/upstream.mjs';
 
 /**
  * @param {{
@@ -13,6 +14,7 @@ import { ASK_LIMITS } from './limits.mjs';
  *   pluginModels?: ()=>Array<{plugin:string,id:string,secrets?:string[]}>,
  *   secretStatus?: (plugin:string)=>Array<{key:string,set:boolean}>,
  *   defaults?: {defaultModel:string, defaultEffort:string},
+ *   effortless?: ()=>Set<string>,
  * }} [deps]
  */
 export function createAskModels({
@@ -20,6 +22,7 @@ export function createAskModels({
   pluginModels = realPluginModels,
   secretStatus = realSecretStatus,
   defaults = ASK_LIMITS,
+  effortless = realEffortless,
 } = {}) {
   /**
    * lc id -> the modelSecrets keys that model needs but that are NOT set.
@@ -71,6 +74,7 @@ export function createAskModels({
   async function askCatalog({ withSecrets = true } = {}) {
     const all = await listModels('');
     const models = [];
+    const noEffort = effortless();
     let missing = null; // lazily built on the first plugin entry
     for (const m of all) {
       if (!m || typeof m.id !== 'string') continue;
@@ -88,7 +92,10 @@ export function createAskModels({
         hasEnv: m.hasEnv === true,
       };
       if (custom === 'plugin' && typeof m.plugin === 'string' && m.plugin) entry.plugin = m.plugin;
-      if (m.hidden === true) entry.hidden = true;   // the picker skips it; validation does not (#422)
+      if (m.hidden === true) entry.hidden = true;
+      // Its upstream refused a reasoning effort (bridge/upstream.mjs leaves it out from then
+      // on): the picker shows the effort as not applicable. The effort still validates.
+      if (noEffort.has(m.id)) entry.noEffort = true;   // the picker skips it; validation does not (#422)
       // Only globals and plugin entries can arrive flagged: composeCatalog emits an
       // UNSHADOWED built-in as {...m, custom:false, hasEnv:false} with no
       // ...unreliable(lc) (src/core/config.mjs:200), so a built-in in model_cost_flags

package/src/core/ask/turn.mjs

@@ -47,6 +47,27 @@ export function createAskTurn(opts) { return new AskTurn(opts); }
 
 const TERMINAL = new Set(['done', 'stopped', 'error']);
 
+// The classified notice's raw-detail cap — the runner's own reject is already
+// tail-capped tighter than this; the slice(-N) here only bounds the unusual
+// non-runner error paths so a huge message can never bloat the persisted block.
+const ERROR_DETAIL_MAX = 2000;
+
+/** The human line a classified failure carries. The block is persisted and
+ *  shared by every viewer, so the wording is level-neutral: it names where a
+ *  remedy lives (including which interface mode gates it) instead of assuming
+ *  one. Pure, exported for tests. */
+export function humanErrorText(errorClass) {
+  switch (errorClass) {
+    case 'model': return "This model isn't available in your environment — Claude Code couldn't use it. Try another model, or add your custom model in Settings › Models (Expert mode).";
+    case 'auth': return 'Authentication failed — check the credentials behind this model.';
+    case 'usage_limit': return 'A usage limit was reached — wait for it to reset.';
+    case 'rate_limit': return 'The endpoint is rate-limiting — try again shortly.';
+    case 'quota': return 'A quota/billing problem was reported — check the account behind this model.';
+    case 'network': return 'The endpoint was unreachable — check your connection and retry.';
+    default: return null;
+  }
+}
+
 class AskTurn extends EventEmitter {
   constructor({
     threadId, assistantMessageId, userMessageId,
@@ -546,6 +567,28 @@ class AskTurn extends EventEmitter {
     for (const b of this.reducer.snapshot().blocks) {
       if (b && b.kind === 'card' && b.state === 'building') this.reducer.updateBlock(b.id, { state: 'failed', error: 'the reply ended before the proposal was ready' });
     }
+    // A classified failure tells the user what happened and what to do, as a
+    // notice block: it rides the terminal write below (like _limitNotice's
+    // notice), so the human line survives a reload, and the extra fields
+    // (errorClass, detail) let the chat render its recovery affordance. The
+    // wording is level-neutral — the block is shared by every viewer — and
+    // an UNCLASSIFIED error adds nothing: the raw message stays the only
+    // evidence, exactly as before.
+    if (kind === 'error' && errorClass) {
+      // The detail carries the full evidence: the runner's exit verdict, plus
+      // the CLI's own refusal line when it spoke synthetically (it is often
+      // the clearest statement of the cause). Skipped when the runner message
+      // already contains it — an empty stderr makes the runner echo it verbatim.
+      const cli = this.reducer.snapshot().cliErrorText;
+      const extra = cli && message && !String(message).includes(cli) ? cli : null;
+      const detail = [message, extra].filter((s) => s && String(s).trim()).join('\n');
+      this.reducer.addBlock({
+        kind: 'notice',
+        text: humanErrorText(errorClass),
+        errorClass,
+        detail: detail ? String(detail).slice(-ERROR_DETAIL_MAX) : null,
+      });
+    }
     const summary = this.reducer.finish();
     const finalStatus = kind === 'error' ? 'error' : status;
     // Already AUTHORITATIVE: the reducer applied this turn's per-model cost
@@ -594,8 +637,11 @@ class AskTurn extends EventEmitter {
       // out, the CLI may not even say so (`unrecognized_model` on a first-party id),
       // so claude-auth asks `claude auth status` instead of trusting the text.
       const signedOut = await d.failedBecauseSignedOut({ message, model: this.model }).catch(() => false);
+      // The persisted blocks ride along, mirroring ask-done: the live client
+      // must render the same classified notice a reload re-derives — an
+      // ask-error frame without them shows the raw message until refresh.
       this._frame({
-        type: 'ask-error', message: message || 'unknown error',
+        type: 'ask-error', message: message || 'unknown error', blocks: summary.blocks,
         ...(errorClass !== undefined ? { errorClass } : {}),
         ...(signedOut ? { code: CLAUDE_SIGNED_OUT_CODE } : {}),
       });
@@ -658,7 +704,11 @@ class AskTurn extends EventEmitter {
       await d.fs.writeFile(
         mcpConfigPath,
         JSON.stringify(d.buildMcpConfig({ homeBase, threadId: this.threadId, serverPath: d.serverPath, ...(this.reader ? { reader: this.reader } : {}), ...(this.relay ? { relay: this.relay } : {}), ...(this.web ? { web: this.web } : {}) }), null, 2),
-        { encoding: 'utf8', mode: 0o600 },          // never a key value (webKeyVar: the key rides the process env)
+        // Never a key value (webKeyVar: the key rides the process env). A relayed turn runs as
+        // the person's agent user (agent-pool.mjs), which reads this file through its group: the
+        // scratch dir is setgid worca-share (2770), so 0640 reaches the agent users and nobody
+        // else. It carries this turn's relay token, which that agent must present anyway.
+        { encoding: 'utf8', mode: this.relay ? 0o640 : 0o600 },
       );
       // One 30-minute budget for the whole turn, retry included. The timedOut
       // flag and abort() run in ONE synchronous callback, so R-C always reads

package/src/core/bridge/provider-ops.mjs

@@ -19,7 +19,7 @@ import {
 } from './providers/copilot.mjs';
 import { keyOptional } from './registry.mjs';
 import { listEndpointModels, catalogEntryForEndpointModel, importableModel } from './providers/endpoint.mjs';
-import { brokerEnabled, brokerInfo, cachedBrokerInfo, mintSpawnToken, revokeSpawnToken, slotBaseUrl } from '../broker-client.mjs';
+import { brokerEnabled, brokerInfo, cachedBrokerInfo, mintSpawnToken, revokeSpawnToken, slotBaseUrl, personSlots } from '../broker-client.mjs';
 import { routeUpstream } from '../broker-routing.mjs';
 import { resolveBillTo } from '../billing.mjs';
 
@@ -129,7 +129,7 @@ const secretSource = (v) => (!v ? null : modelEnvRef(v) ? 'env' : 'stored');
  * a network call to GitHub — and is null when the account exposes none.
  * @param {{quota?:boolean, fetch?:typeof fetch}} [opts]
  */
-export async function providersState({ quota = false, fetch: f } = {}) {
+export async function providersState({ quota = false, fetch: f, person = resolveBillTo(null) } = {}) {
   const all = allProviders();
   const c = all.copilot;
   const token = resolveProviderSecret(c.githubToken);
@@ -161,11 +161,47 @@ export async function providersState({ quota = false, fetch: f } = {}) {
       maxConcurrent: p.maxConcurrent,
     };
   };
-  // With the credential broker on, keys and the Copilot sign-in are per person on its key page.
-  const broker = brokerEnabled() ? { enabled: true, keyPage: cachedBrokerInfo()?.publicUrl || null, mode: cachedBrokerInfo()?.mode || null } : { enabled: false };
+  // With the credential broker on, keys and the Copilot sign-in are per person on its key page:
+  // each provider's state is the viewer's own slot there, not worca's (empty) settings.
+  const broker = brokerEnabled() ? await brokerProviders(all, person) : { enabled: false };
   return { copilot, openai: keyed('openai'), anthropic: keyed('anthropic'), broker };
 }
 
+/**
+ * The Providers card's view of the broker: which slot each provider spends from and the viewer's
+ * state in it — {slot, state:'set'|'missing'|'invalid'|'operator'|'keyless'|'none', suffix?, error?}.
+ * Never throws: an unreachable broker leaves the states out and says why.
+ */
+async function brokerProviders(all, person) {
+  const info = cachedBrokerInfo() || await brokerInfo().catch(() => null);
+  const out = { enabled: true, keyPage: info?.publicUrl || null, mode: info?.mode || null, providers: {} };
+  const slots = info?.slots || [];
+  const route = (name) => {
+    if (name === 'copilot') {
+      const s = slots.find((x) => x.auth === 'copilot');
+      return s ? { slot: s.id } : { state: 'none', error: 'the credential broker has no GitHub Copilot slot' };
+    }
+    const r = routeUpstream({ provider: name, baseUrl: all[name].baseUrl || null }, { slots });
+    return r.slot ? { slot: r.slot } : r.keyless ? { state: 'keyless' } : { state: 'none', error: r.error };
+  };
+  for (const name of ['copilot', 'openai', 'anthropic']) out.providers[name] = route(name);
+  const who = out.mode === 'multi' ? person : 'local';
+  if (!who || (out.mode === 'multi' && who === 'local')) { out.signInNeeded = true; return out; }
+  try {
+    const mine = new Map(((await personSlots(who)).slots || []).map((x) => [x.id, x]));
+    for (const p of Object.values(out.providers)) {
+      if (!p.slot) continue;
+      const s = mine.get(p.slot);
+      p.state = s ? s.state : 'missing';
+      if (s && s.suffix) p.suffix = s.suffix;
+      if (s && s.label) p.label = s.label;
+    }
+  } catch (err) {
+    out.error = err.message;
+  }
+  return out;
+}
+
 /** Patch a provider from the UI/CLI; masked key echoes are dropped ("keep"). */
 export async function patchProvider(name, patch = {}) {
   if (!UPSTREAM_PROVIDERS.includes(name)) throw new Error(`unknown provider ${JSON.stringify(name)}`);

package/src/core/bridge/upstream.mjs

@@ -35,6 +35,23 @@ function applySchemaDrops(body, d) {
   return d ? withoutTools(withToolSchemaKeywordsDropped(body, d.keywords), d.tools) : body;
 }
 
+// Models that refused a reasoning effort on the Anthropic passthrough (Copilot serves
+// claude-haiku-4.5 without one): the CLI's output_config.effort is left out of their
+// requests. Learned like schemaDrops, and listed so the Ask picker can grey the effort out.
+const effortDrops = new Set();   // catalog ids
+const EFFORT_REFUSED_RE = /does not support (?:reasoning )?effort|effort[^.]{0,40}not supported/i;
+export function _resetEffortDrops() { effortDrops.clear(); }
+/** Catalog ids whose upstream refused a reasoning effort since boot. */
+export function effortlessModels() { return new Set(effortDrops); }
+function withoutEffort(body) {
+  const oc = body && body.output_config;
+  if (!oc || typeof oc !== 'object' || !('effort' in oc)) return body;
+  const { effort: _drop, ...rest } = oc;
+  const out = { ...body };
+  if (Object.keys(rest).length) out.output_config = rest; else delete out.output_config;
+  return out;
+}
+
 /** Once-per-process warning (dropped fields, queue notices). */
 function warnOnce(key, line, log) {
   if (warned.has(key)) return;
@@ -157,6 +174,7 @@ export async function handleMessages({ entry, body, requestHeaders = {}, tag = '
   let outBody;
   if (us.api === 'anthropic') {
     outBody = { ...body, model: us.model };
+    if (effortDrops.has(entry.id)) outBody = withoutEffort(outBody);
   } else {
     const responses = us.api === 'openai-responses';
     const t = (responses ? toResponsesRequest : toChatRequest)(body, { upstreamModel: us.model, capabilities: us.capabilities });
@@ -236,6 +254,17 @@ export async function handleMessages({ entry, body, requestHeaders = {}, tag = '
         payload = JSON.stringify(outBody);
         res = await doFetch(prep);
       }
+      // A reasoning effort the model does not take: leave it out, remember that, retry once.
+      if (res.status === 400 && us.api === 'anthropic' && outBody.output_config && 'effort' in outBody.output_config) {
+        const text = await res.clone().text().catch(() => '');
+        if (EFFORT_REFUSED_RE.test(text)) {
+          effortDrops.add(entry.id);
+          warnOnce(`effort:${entry.id}`, `[worca] bridge: model ${JSON.stringify(entry.id)} takes no reasoning effort — leaving it out of its requests`, log);
+          outBody = withoutEffort(outBody);
+          payload = JSON.stringify(outBody);
+          res = await doFetch(prep);
+        }
+      }
     } catch (err) {
       if (signal && signal.aborted) return reply.end();
       const e = mapNetworkError(err, { provider: us.provider });

package/src/core/failure-policy.mjs

@@ -84,6 +84,9 @@ export const FAILURE_POLICY = Object.freeze({
     // A self-parked auto run pauses as RECOVERABLE (the class is kept: "resume when
     // it clears"); a user who gives up on the prompt pauses as ERROR (a verdict).
     auth:        cell(pause(REASON.RECOVERABLE), prompt(pause(REASON.ERROR))),
+    // The model id itself was refused — retrying the same id is futile. The
+    // run parks as an error; resume retries the node once the model is fixed.
+    model:       both(pause(REASON.ERROR)),
     quota:       cell(pause(REASON.RECOVERABLE), prompt(pause(REASON.ERROR))),
     rate_limit:  cell(retry(RECOVERY_MAX_AUTO_ATTEMPTS, pause(REASON.RECOVERABLE)), prompt(pause(REASON.ERROR))),
     network:     cell(retry(RECOVERY_MAX_AUTO_ATTEMPTS, pause(REASON.RECOVERABLE)), prompt(pause(REASON.ERROR))),

package/src/core/model-test.mjs

@@ -22,6 +22,7 @@ const SYSTEM = 'You are a connectivity check. Reply with exactly OK.';
 export function hintFor(errorClass) {
   switch (errorClass) {
     case 'auth': return 'authentication failed — check the token/secret for this model';
+    case 'model': return 'this model id is not served by the endpoint — pick a model the endpoint serves, or add yours in Settings › Models';
     case 'network': return 'endpoint unreachable — check ANTHROPIC_BASE_URL';
     case 'rate_limit': return 'the endpoint is rate-limiting or overloaded — try again shortly';
     case 'quota': return 'quota/billing problem — check the account behind this endpoint';

package/src/core/recoverable-error.mjs

@@ -15,7 +15,7 @@
 // recoverable and retried. Structured error-code detection is out of scope.
 //
 // @param {Error|string|unknown} err
-// @returns {'auth'|'usage_limit'|'rate_limit'|'quota'|'network'|null}
+// @returns {'auth'|'model'|'usage_limit'|'rate_limit'|'quota'|'network'|null}
 export function classifyError(err) {
   // A producer that saw MORE evidence than the message carries stamps the
   // verdict directly: claude-runner classifies the FULL stderr stream line-by-
@@ -32,6 +32,15 @@ export function classifyError(err) {
   // it, so it pauses like the session limit below instead of retrying as a 429.
   if (FREE_DAILY_RE.test(msg)) return 'usage_limit';
   if (/\b401\b|invalid authentication|authentication_error|please run .*login|not logged in/i.test(msg)) return 'auth';
+  // The model id itself is the problem — refused by the endpoint it was sent to,
+  // or named by a catalog-miss error. The remedy is a different model id, never
+  // a retry. The stderr notice `[claude-code:unrecognized_model]` is deliberately
+  // NOT classified here: the runner treats it as a benign notice
+  // (claude-runner BENIGN_STDERR_PATTERNS) — it fires on every spawn whose id the
+  // CLI does not know, and never states the cause. The phrases are specific
+  // CLI/API wordings so an ordinary message that merely mentions a model stays
+  // unclassified.
+  if (/no access to this model|isn't described by this version's model catalog|model not found/i.test(msg)) return 'model';
   // Session/usage caps that only clear after a multi-hour reset (the CLI prints
   // "You've hit your session limit · resets 6pm"). Distinct from rate_limit (a
   // few-second 429/overloaded burst) because retrying is futile — the orchestrator
@@ -136,7 +145,7 @@ export function brokerHint(err, cls = classifyError(err)) {
 // SAME order as the regex chain above. First-match-wins there equals
 // strongest-class-wins here, because every per-line match (the patterns are
 // unanchored) is also a whole-text match.
-const CLASS_ORDER = ['auth', 'usage_limit', 'rate_limit', 'quota', 'network'];
+const CLASS_ORDER = ['auth', 'model', 'usage_limit', 'rate_limit', 'quota', 'network'];
 
 /** Fold two classification results, keeping the higher-precedence class. */
 export function strongestClass(a, b) {

package/ui/public/app.js

@@ -773,7 +773,7 @@ function paintBudget() {
     topAmt.classList.toggle('over', !!b.blocked);
   }
   applyBudgetToNewView();
-  if (currentView() === 'settings') paintBudgetReadout();
+  if (currentView() === 'settings' && currentSettingsTab === 'runs') paintBudgetReadout();
   repaintCostBanners();
 }
 
@@ -1066,7 +1066,7 @@ function handleServerMessage(msg) {
     if (currentView() === 'projects') paintProjectPolicyCells(true);
     if (currentView() === 'workspaces') paintWsPolicyLines(true);
     if (currentView() === 'team-policy' && !tpState.editing) loadTeamPolicyView();
-    if (currentView() === 'settings') paintTeamCapsReadout(true);
+    if (currentView() === 'settings' && currentSettingsTab === 'runs') paintTeamCapsReadout(true);
     if (currentView() === 'settings' && currentSettingsTab === 'plugins') paintPluginsPolicy(true);
     if (currentView() === 'new') schedulePolicyLine();
     return;
@@ -10953,7 +10953,7 @@ try {
   if (mq && typeof mq.addEventListener === 'function') mq.addEventListener('change', () => applyTheme(document.documentElement.dataset.theme));
 } catch { /* no media queries here */ }
 
-// Settings › General › Scheduled runs: the defaults a new schedule inherits.
+// Settings › Runs › Scheduled runs: the defaults a new schedule inherits.
 function setSchedDefaultsMsg(text, kind) { setHintMsg('schedDefaultsMsg', text, kind); }
 function paintScheduleSettings(data) {
   const d = data && data.schedule;
@@ -12702,6 +12702,7 @@ async function loadModelsView() {
     const pdata = await safeJson(pres);
     mvState.providers = pres.ok ? pdata : null;
     renderModelsViewBody();
+    void paintHelperModelCards();
     // "+ Add model…" from a picker on another page: the dialog opens once the catalog is here.
     if (mvState.openEditorOnLoad) { mvState.openEditorOnLoad = false; openModelEditorDialog(); }
     // Copilot's models feed the editor's upstream-id datalist; fetched in the
@@ -12716,6 +12717,18 @@ async function loadModelsView() {
   }
 }
 
+// Settings › Models › Title generation + Auto workflow model: both pickers list the catalog, so they
+// repaint whenever it loads — a model added a moment ago is selectable without leaving the tab.
+async function paintHelperModelCards() {
+  try {
+    const res = await fetch('/api/settings');
+    if (!res.ok) return;
+    const data = await safeJson(res);
+    await paintTitleModelSettings(data);
+    await paintAutoModelSettings(data);
+  } catch { /* the cards keep their last paint */ }
+}
+
 /** The Providers tab: the same card, on a page of its own (§8.1). */
 async function loadProvidersView() {
   if (!el.providersList) return;
@@ -13886,7 +13899,7 @@ if (runListEl) {
       if (runId) confirmCostOverride(runId, overrideBtn);
       return;
     }
-    if (e.target.closest && e.target.closest('.cb-settings')) { location.hash = 'settings'; return; }
+    if (e.target.closest && e.target.closest('.cb-settings')) { location.hash = 'settings/runs'; return; }
     // Team-cap banner (team-policy design board 9): continue past, or open the page.
     const pastBtn = e.target.closest && e.target.closest('.cb-past-team-cap');
     if (pastBtn) {
@@ -14575,7 +14588,7 @@ if (tpSection) tpSection.addEventListener('click', async (e) => {
   await handlePolicyPluginClick(e);
 });
 
-// Settings › Budget (board 7): each home's caps as a readout, the tightest as a chip on the labels.
+// Settings › Runs › Budget (board 7): each home's caps as a readout, the tightest as a chip on the labels.
 async function paintTeamCapsReadout(force = false) {
   if (!el.teamCapsReadout) return;
   const data = await loadTpScopes({ force });
@@ -17377,7 +17390,7 @@ function paintHdBanners(screen, record, data) {
       { pauseReason, pauseDetail, pipelineId: record.id, totalCostUsd: st.totalCostUsd },
       { budget: budgetState.budget || {}, fmt: { usd: fmtUsd, usd4: fmtUsd4, duration: fmtDuration, estTitle } });
     const settingsBtn = banner.querySelector('.cb-settings');
-    if (settingsBtn) settingsBtn.addEventListener('click', () => { location.hash = 'settings'; });
+    if (settingsBtn) settingsBtn.addEventListener('click', () => { location.hash = 'settings/runs'; });
     const overrideBtn = banner.querySelector('.cb-override');
     if (overrideBtn) {
       overrideBtn.addEventListener('click', () => {
@@ -22537,7 +22550,7 @@ el.runDetail?.addEventListener('click', (e) => {
   if (!r) return;
   const override = e.target.closest && e.target.closest('.cb-override');
   if (override) { confirmCostOverride(r.runId, override); return; }   // async, fire-and-forget
-  if (e.target.closest && e.target.closest('.cb-settings')) { location.hash = 'settings'; return; }
+  if (e.target.closest && e.target.closest('.cb-settings')) { location.hash = 'settings/runs'; return; }
   const past = e.target.closest && e.target.closest('.cb-past-team-cap');
   if (past) { confirmPastTeamCap(r.runId, past); return; }             // team-policy board 9
   if (e.target.closest && e.target.closest('.cb-policy-open')) { location.hash = 'team-policy'; return; }
@@ -23654,11 +23667,11 @@ const VIEW_MIN_LEVEL = Object.freeze({
   'team-metrics': 'expert', 'team-policy': 'expert', agents: 'expert', scripts: 'expert',
   schedules: 'advanced',
 });
-const SETTINGS_TAB_MIN_LEVEL = Object.freeze({ guardrails: 'advanced', plugins: 'advanced', memory: 'advanced', models: 'expert', providers: 'expert' });
+const SETTINGS_TAB_MIN_LEVEL = Object.freeze({ ask: 'advanced', guardrails: 'advanced', plugins: 'advanced', memory: 'advanced', models: 'expert', providers: 'expert' });
 const VIEW_TITLES = Object.freeze({
   stats: 'Statistics', composer: 'Workflow Composer', workspaces: 'Workspaces', 'workspace-create': 'Workspaces',
   'agent-create': 'Create agent', 'team-metrics': 'Team metrics', 'team-policy': 'Team policy', agents: 'Agents', scripts: 'Scripts',
-  guardrails: 'Guardrails', plugins: 'Plugins', memory: 'Memory', models: 'Models', providers: 'Providers',
+  guardrails: 'Guardrails', plugins: 'Plugins', memory: 'Memory', models: 'Models', providers: 'Providers', ask: 'Ask Worca',
   schedules: 'Schedules',
 });
 function pageMinLevel() {
@@ -23715,7 +23728,10 @@ document.addEventListener('worca:level', () => {
 // The tab is the Settings view's hash param; a guardrail deep link nests its id
 // behind it (#settings/guardrails/<id>). parseHash splits on the FIRST '/' only,
 // so that is view 'settings', param 'guardrails/<id>' — no parseHash change.
-const SETTINGS_TABS = ['general', 'guardrails', 'models', 'providers', 'plugins', 'memory'];
+const SETTINGS_TABS = ['general', 'runs', 'ask', 'guardrails', 'memory', 'plugins', 'models', 'providers'];
+// The tabs whose cards GET /api/settings paints (loadSettings paints every card, wherever it sits).
+// Models is not one: loadModelsView repaints its two helper-model cards with the catalog.
+const SETTINGS_FORM_TABS = ['general', 'runs', 'ask'];
 const settingsPanes = $$('[data-view="settings"] .settings-pane');
 // Old top-level hashes keep working. The hashchange listener DROPS any view it
 // does not know, so without this map a bookmark or an old in-app link would
@@ -23965,7 +23981,7 @@ function showSettingsTab(param = '') {
   // request, and re-entry refetches (which is what lets grvExitWizard's
   // '#settings/guardrails/<id>' -> '#settings/guardrails' hop reset the wizard).
   paintLevelBanner();
-  if (tab === 'general') loadSettings();
+  if (SETTINGS_FORM_TABS.includes(tab)) loadSettings();
   if (tab === 'guardrails') loadGuardrailsView(sub);
   if (tab === 'models') loadModelsView(sub);
   if (tab === 'providers') loadProvidersView();

package/ui/public/ask-model.mjs

@@ -188,6 +188,9 @@ export function createThreadModel({ threadId }) {
         break;
       case 'ask-error':
         row.text = live.text;
+        // The terminal blocks ride the frame (as on ask-done): the classified
+        // notice arrives live, so the chat renders it without waiting for a reload.
+        if (Array.isArray(frame.blocks)) row.blocks = frame.blocks;
         row.status = 'error';
         row.errorMessage = frame.message || 'unknown error';
         row.errorCode = frame.code || null;

package/ui/public/ask-panel.mjs

@@ -1234,7 +1234,9 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
     const flagged = !!entry && (entry.costUnreliable === true
       || (Array.isArray(entry.secretsMissing) && entry.secretsMissing.length > 0));
     el.modelBtnLabel.textContent = (entry ? entry.label : st.picker.model) + (flagged ? ' ⚠' : '');
-    el.modelBtnEffort.textContent = st.picker.effort;
+    // A model that takes no reasoning effort shows none (the bridge leaves it out).
+    el.modelBtnEffort.textContent = entry && entry.noEffort ? '' : st.picker.effort;
+    el.modelBtnEffort.hidden = !!(entry && entry.noEffort);
   }
 
   function coerceEffort(entry, effort) {
@@ -1311,8 +1313,10 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
       .catch(() => { /* the next message stores the pick anyway */ });
   }
 
-  function loadCatalog() {
-    if (st.catalog) return Promise.resolve(st.catalog);
+  // fresh: fetch again even with a catalog in hand. Models imported (or keys set on the key
+  // page) after the first load reach the menu when it next opens, without a page reload.
+  function loadCatalog({ fresh = false } = {}) {
+    if (st.catalog && !fresh) return Promise.resolve(st.catalog);
     if (st.catalogLoading) return st.catalogLoading;
     st.catalogLoading = Promise.resolve()
       .then(() => fetch('/api/ask/models'))
@@ -1420,7 +1424,9 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
       if (m.id === st.picker.model) item.appendChild(make('span', 'ask-model-check', '✓'));
       return item;
     };
+    let shownPane = 'main';
     const renderPane = (pane) => {
+      shownPane = pane;
       panel.replaceChildren();
       if (pane === 'effort') {
         const back = menuItem('ask-pane-back', () => renderPane('main'));
@@ -1446,11 +1452,19 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
         const { primary, rest } = splitCatalog();
         for (const m of primary) panel.appendChild(modelItem(m));
         panel.appendChild(make('div', 'ask-pop-divider'));
-        const effortRow = menuItem('ask-effort-row', () => renderPane('effort'));
+        const noEffort = !!catalogEntry(st.picker.model)?.noEffort;
+        const effortRow = menuItem('ask-effort-row', noEffort ? null : () => renderPane('effort'));
         effortRow.setAttribute('data-ask-effort-row', '');
         effortRow.appendChild(make('span', null, 'Effort'));
-        effortRow.appendChild(make('span', 'ask-pop-row-value', st.picker.effort));
-        effortRow.appendChild(make('span', 'ask-pop-row-chev', '›'));
+        if (noEffort) {
+          // The model's provider refused a reasoning effort; worca leaves it out of the request.
+          effortRow.disabled = true;
+          effortRow.title = 'This model takes no reasoning effort, so none is sent.';
+          effortRow.appendChild(make('span', 'ask-pop-row-value', 'not supported'));
+        } else {
+          effortRow.appendChild(make('span', 'ask-pop-row-value', st.picker.effort));
+          effortRow.appendChild(make('span', 'ask-pop-row-chev', '›'));
+        }
         panel.appendChild(effortRow);
         if (rest.length) {
           const moreRow = menuItem('ask-more-models', () => renderPane('more'));
@@ -1462,7 +1476,11 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
       }
       focusFirst();
     };
-    loadCatalog().then(() => { if (st.popover && st.popover.panel === panel) renderPane('main'); });
+    // What we have paints at once; the refetch repaints the main pane if it is still showing.
+    const had = st.catalog;
+    loadCatalog({ fresh: true }).then((c) => {
+      if (c !== had && shownPane === 'main' && st.popover && st.popover.panel === panel) renderPane('main');
+    });
     renderPane('main');
   }
 
@@ -1770,6 +1788,16 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
       a.setAttribute('href', b.href);
       n.appendChild(a);
     }
+    // The raw failure evidence, for those who debug: expert only — the human
+    // line above is the explanation at every level.
+    if (b.errorClass && b.detail) {
+      const det = doc.createElement('details');
+      det.className = 'ask-error-details';
+      det.dataset.minLevel = 'expert';
+      det.appendChild(make('summary', null, 'Details'));
+      det.appendChild(make('div', 'ask-error-detail-text', b.detail));
+      n.appendChild(det);
+    }
     return n;
   }
 
@@ -3689,7 +3717,6 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
           else if (b.kind === 'card') wrap.appendChild(buildCard(b, cur));
         }
         if (cur.status === 'error') {
-          const explained = (cur.blocks || []).some((b) => b && b.kind === 'notice');
           if (cur.errorCode === 'claude-signed-out' && typeof openClaudeSetup === 'function') {
             // The CLI's raw "Not logged in" → one line whose link opens Connect Claude Code.
             const line = make('div', 'ask-error-line', "Claude Code isn't signed in. ");
@@ -3698,8 +3725,17 @@ export function createAskPanel({ doc, win, fetch, sendWs, confirm, getPageContex
             link.addEventListener('click', (e) => { e.preventDefault(); openClaudeSetup(); });
             line.appendChild(link);
             wrap.appendChild(line);
-          } else if (cur.errorMessage) wrap.appendChild(make('div', 'ask-error-line', cur.errorMessage));
-          else if (!explained) wrap.appendChild(make('div', 'ask-error-line', 'This turn ended with an error.'));
+          } else {
+            // A classified notice (errorClass on the block) IS the explanation —
+            // it renders the human line and, at expert, the raw detail in its
+            // own expander. The raw line here is only for the unclassified case.
+            const classified = (cur.blocks || []).some((b) => b && b.kind === 'notice' && b.errorClass);
+            if (!classified) {
+              const explained = (cur.blocks || []).some((b) => b && b.kind === 'notice');
+              if (cur.errorMessage) wrap.appendChild(make('div', 'ask-error-line', cur.errorMessage));
+              else if (!explained) wrap.appendChild(make('div', 'ask-error-line', 'This turn ended with an error.'));
+            }
+          }
         }
         if (isLiveRow(cur)) {
           wrap.appendChild(ensureThinking());   // last child: the bottom of the message