toolroll 0.8.1 → 0.9.0

package/dist/serve.js

@@ -56,6 +56,8 @@ import { prepareWorkspaceRevision, WorkspaceValidatorCache } from "./workspace-r
 import { workIndexPage, workCountsByProject, WorkIndexCursorError } from "./work-index.js";
 import { openWorkDecisionOf } from "./work-summary.js";
 import { assignmentOf, checkAssignmentAsOperator } from './assignment.js';
+import { pullRequestSettingsHtml, PULL_REQUEST_SETTINGS_CSS } from './pull-request-ui.js';
+import { checkPublishing, completeAndOpenPullRequest, mergeAsPerson, pullRequestBlocker, pullRequestViewOf, publishingOf, saveMergeSettings, savePublishing, MERGE_METHODS } from './pull-request-flow.js';
 import { leadBriefHtml, LEAD_CONTEXT_CSS } from './lead-context.js';
 import { assignmentCatchUp } from './assignment-brief.js';
 import { assignmentCardOf, assignmentStatusOf, assignmentSummaryHtml, assignmentWithEvidence, ASSIGNMENT_CSS } from './assignment-ui.js';
@@ -167,7 +169,8 @@ import { dirname } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { loadOrCreateVapidKeys, validatePushEndpoint } from "./push.js";
 import { parseGithubRepo, previewGithubRepo, cloneGithubRepo, listGithubRepos, isLargeRepo } from "./onboard.js";
-import { verifiedAuthor, LEAD_THREAD } from "./store.js";
+import { verifiedAuthor, LEAD_THREAD, isDigestTime } from "./store.js";
+import { digestTimes } from "./digest-times.js";
 import { updateRepos, addRepos, removeRepos } from "./repos.js";
 import { run as execRun } from "./exec.js";
 import { findFirstTasks, firstResultWords, firstRunSteps, firstTaskSuggestions, SANDBOX_COMMAND } from "./first-run.js";
@@ -201,11 +204,16 @@ import { accessFromGroups, accountNameFor, discoverOidc, exchangeOidcCode, newOi
 import { readSsoSettings, removeSsoSettings, saveSsoSettings, SSO_CALLBACK, ssoChangeWords } from "./sso-settings.js";
 import { monitoringChange, readMonitoring, saveMonitoring } from "./monitoring-settings.js";
 import { MONITORING_CSS, monitoringHtml, signingSecretHtml } from "./monitoring-ui.js";
+import { INTEGRATIONS_CSS, integrationsHtml } from "./integrations-ui.js";
+import { createIntegrationMonitor } from "./integrations.js";
 import { BACKUP_CSS, backupHtml } from "./backup-ui.js";
 import { BACKUP_EVERY_HOURS, MAX_KEEP, backupFolderOf, backupNow, checkBackupFolder, defaultBackupFolder } from "./backup.js";
 import { prometheusMetrics } from "./metrics.js";
 import { SPEND_CSS, spendCsv, spendHtml } from "./spend-ui.js";
 import { RETENTION_CSS, retentionHtml } from "./retention-ui.js";
+import { STORAGE_CSS, storageHtml } from "./storage-ui.js";
+import { bytesWords, parseCleanup } from "./storage.js";
+import { checkoutPlan, cleanCheckouts, discardCheckout, previewDigest } from "./checkout-cleanup.js";
 import { UPDATES_CSS, newerThan, updateStepsHtml, updatesHtml, updatesScript } from "./toolroll-update-ui.js";
 import { abandonRuntimeUpdate, launchRuntimeUpdate, markWhatsNewSeen, prepareRuntimeUpdate, requestRuntimeUpdateCancel, runningWorkWords, runtimeUpdateStatus, runtimeUpdateTerminal, currentRuntime } from "./toolroll-update.js";
 import { latestVersionNow } from "./releases.js";
@@ -393,6 +401,8 @@ export function createDecisionServer(options) {
         }
     }
     const clock = options.clock ?? (() => new Date());
+    /** Task checkouts, for Settings → Storage: the pool's own root, or the folder beside the database. */
+    const storagePool = (databaseFile) => new WorktreePool(store, { root: options.poolRoot ?? join(dirname(databaseFile), "worktrees") });
     const install = installMethod(options.installBin);
     /** What the last daily check found (the cache only, never the network), or nothing while checks are off. */
     const updateFacts = () => {
@@ -433,6 +443,19 @@ export function createDecisionServer(options) {
         catch { /* the pause keeps its own state */ }
         return value;
     };
+    // Settings → Integrations: checked in the background with a short cache, as the first-run suggestions are.
+    const integrations = createIntegrationMonitor(() => ({
+        store,
+        dir: options.configDir ?? null,
+        telegramTokenFile: options.telegramTokenFile ?? null,
+        env: process.env,
+        repos: managedRepos(),
+        gh: options.firstTaskRunner ?? execRun,
+        checkConnection: connectionCheck,
+        toolHome,
+        clock,
+        ...options.integrationIo,
+    }));
     const modelCatalog = openRouterModelsCache(options.modelCatalogFetcher);
     const modelSeams = {
         home: providerHome,
@@ -1411,7 +1434,7 @@ export function createDecisionServer(options) {
                             !url.searchParams.has('task') && !url.searchParams.has('result') && !url.searchParams.has('request')) {
                             const key = createHash('sha256').update(JSON.stringify([workspaceIncarnation, who.name,
                                 who.session.generation, who.session.csrf, who.session.project, who.session.projectRevision,
-                                admissionList(), url.pathname + url.search])).digest('hex');
+                                admissionList(), url.pathname + url.search, localSignIn?.signedIn ?? null])).digest('hex');
                             const revision = workspaceRevision.current(), now = clock();
                             const prior = workspaceValidators.get(key);
                             if (prior && prior.revision === revision && prior.expiresAt > now.getTime() && request.headers['if-none-match'] === prior.etag) {
@@ -1561,7 +1584,7 @@ export function createDecisionServer(options) {
         }
         const read = new Set(["/settings/skills", "/settings/knowledge", "/settings", "/settings/learning", "/recipes", "/recipes/run", "/recipes/start", "/recipes/new", "/recipes/edit", "/recipes/from-task", "/recipes/preview", "/recipes/export", "/", "/inbox", "/work", "/projects", "/people", "/ledger", "/ledger/export", "/next", "/board", "/tasks", "/tasks/new", "/runs", "/review", "/done", "/routines", "/menu"]);
         const write = new Set(["/settings/skills/import", "/settings/skills/change", "/settings/skills/revise", "/settings/knowledge/change", "/settings/knowledge/refresh", "/settings/learning/change", "/recipes/prepare", "/recipes/preview", "/recipes/import", "/recipes/save", "/recipes/launch", "/projects/select", "/tasks/add", "/routines/add"]);
-        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|stop|resume-arm|resume)$");
+        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|stop|resume-arm|resume)$");
         const resource = request.method === "GET"
             ? /^\/(?:r|d)\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(path) || /^\/routines\/[0-9]{1,15}$/.test(path) || path === "/flows" || /^\/flows\/[0-9]{1,15}(\/insights|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(path)
             : /^\/d\/[0-9]{1,15}\/answer$/.test(path) || /^\/routines\/[0-9]{1,15}\/(approve|refresh|pause|resume|run-now)$/.test(path) || path === "/flows/new" || /^\/flows\/[0-9]{1,15}\/(save|cards|archive|scripts)$/.test(path) || /^\/flows\/[0-9]{1,15}\/cards\/[0-9]{1,15}\/(move|decide|cancel|comment|assign|watch)$/.test(path) || /^\/flows\/[0-9]{1,15}\/triggers(\/[0-9]{1,15}\/(pause|resume|remove|check|press|renew|secret|share|unshare))?$/.test(path) || /^\/r\/[0-9]{1,15}\/(note|comment|revise|draft-repair)$/.test(path);
@@ -3300,7 +3323,7 @@ export function createDecisionServer(options) {
                     back: { href: roomId ? "/chat?conversation=" + encodeURIComponent(roomId) : taskChatHref(focusTask?.id ?? ""), label: "Back to chat" },
                 }) + (who.role === 'approver' && focusTask?.assignment?.state === 'ready-to-check'
                     && focusTask.assignment.receipt?.runId === resultRun.id
-                    ? completionForm(focusTask.assignment.receipt.taskId, resultRun.id, focusTask.assignment.receipt.digest, who.session.csrf) : '');
+                    ? completionForm(focusTask.assignment.receipt.taskId, resultRun.id, focusTask.assignment.receipt.digest, who.session.csrf, pullRequestTargetOf(resultRun.id)) : '');
             const focusProblem = requestedTask !== null && focusTask === null
                 ? "That task is not available in this workspace."
                 : requestedResult !== null && focusTask !== null && resultRun === null
@@ -3616,6 +3639,13 @@ export function createDecisionServer(options) {
                 sessions: store.webSessions(everyone ? null : who.name).map(one => ({ ...one, here: one.idHash === here })), tokens: store.apiTokens(everyone ? null : who.name) };
             return sendScreen(response, 200, screen("Sessions & tokens", `<p><a href="/settings">Settings</a></p><h1>Sessions &amp; tokens</h1>${credentialsHtml(view, who.session.csrf, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings") }));
         }
+        // Settings → Integrations: which integrations work. The list is the last checks; a render never waits on one.
+        if (url.pathname === "/settings/integrations") {
+            if (who.via !== "cookie" || who.role !== "approver" || restricted() || !options.configDir)
+                return refuse(response, who, 403, "An installation approver sees integrations.", "/settings");
+            const list = integrations.list();
+            return sendScreen(response, 200, screen("Integrations", `<p><a href="/settings">Settings</a></p><h1>Integrations</h1>${integrationsHtml(list, who.session.csrf, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem"), checking: integrations.checking })}`, { chrome: chromeFor(project, "settings") }));
+        }
         // v104: Settings → Monitoring, where the audit stream and traces go. An instance operator's page.
         if (url.pathname === "/settings/monitoring") {
             if (who.via !== "cookie" || !store.isInstanceOperator(who.name) || !options.configDir)
@@ -3635,7 +3665,7 @@ export function createDecisionServer(options) {
             const current = options.updates?.current ?? PACKAGE_VERSION;
             // While update checks are off the page asks npm nothing until Check now.
             const checksOff = updateChecksOff(process.env, options.configDir ?? dirname(databaseFile)).off && url.searchParams.get("check") !== "now";
-            const view = { current, latest: active ? { version: current } : checksOff ? { off: true } : await latestReleaseFor(options.updates?.latest), method: options.updates?.method ?? installMethod(), journal: status.journal, running: status.running, whatsNew: status.whatsNew, csrf: who.session.csrf };
+            const view = { current, latest: active ? { version: current } : checksOff ? { off: true } : await latestReleaseFor(options.updates?.latest), method: options.updates?.method ?? installMethod(), journal: status.journal, running: status.running, whatsNew: status.whatsNew, rollbackTo: status.lastUpdate?.to === current ? status.lastUpdate.from : null, csrf: who.session.csrf };
             return sendScreen(response, 200, screen("Updates", `<p><a href="/settings">Settings</a></p><h1>Updates</h1>${updatesHtml(view, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings"), ...(active ? { functional: { script: updatesScript(), fetches: true } } : {}) }));
         }
         // v105: Settings → Retention, how long each kind of data is kept. An instance operator's page.
@@ -3645,6 +3675,29 @@ export function createDecisionServer(options) {
             const view = { periods: store.retentionPeriods(), next: retentionPlan(store, evidenceRoot, now).counts, lastSweep: lastSweepAt(store), csrf: who.session.csrf };
             return sendScreen(response, 200, screen("Retention", `<p><a href="/settings">Settings</a></p><h1>Retention</h1>${retentionHtml(view, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings") }));
         }
+        // Settings → Storage: what task checkouts use, cleaning up now (the preview behind the password), and when a
+        // finished task's clean checkout goes by itself. An instance operator's page.
+        if (url.pathname === "/settings/storage") {
+            const databaseFile = store.databaseFile();
+            if (who.via !== "cookie" || !store.isInstanceOperator(who.name) || databaseFile === null)
+                return refuse(response, who, 403, "An instance operator looks after storage.", "/settings");
+            const plan = await checkoutPlan(store, storagePool(databaseFile), now, { manual: true });
+            return sendScreen(response, 200, screen("Storage", `<p><a href="/settings">Settings</a></p><h1>Storage</h1>${storageHtml({ plan, csrf: who.session.csrf }, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings") }));
+        }
+        // Settings → Projects → Pull requests: one project's setup. Off, the checks run on open, so the page says
+        // exactly what turning on would do, or what to fix first.
+        if (url.pathname === "/settings/pull-requests") {
+            const repo = url.searchParams.get("repo") ?? "";
+            const known = [...new Set([...managedRepos(), ...store.knownRepos(), ...store.listProjects().map(one => one.path)])];
+            if (who.via !== "cookie" || !known.includes(repo) || !visible(repo))
+                return refuse(response, who, 404, "No such project.", "/projects");
+            const publishing = publishingOf(store, repo);
+            const canChange = who.role === "approver" && !store.isDemo();
+            const check = publishing.on || !canChange ? null : await checkPublishing(repo, options.publishExec === undefined ? {} : { exec: options.publishExec });
+            const html = pullRequestSettingsHtml({ repo, name: projectName(repo), csrf: who.session.csrf, canChange, publishing, check,
+                said: url.searchParams.get("said"), problem: url.searchParams.get("problem") });
+            return sendScreen(response, 200, screen("Pull requests", `<p><a href="/projects">Projects</a></p><h1>Pull requests</h1>${html}`, { chrome: chromeFor(project, "projects") }));
+        }
         // Sprint 8: Settings → Backups, how the last backup went and the schedule. An instance operator's page.
         if (url.pathname === "/settings/backups") {
             const databaseFile = store.databaseFile();
@@ -3819,6 +3872,9 @@ export function createDecisionServer(options) {
                 // The installation fact: when the first Ready result arrived, measured from the first account.
                 const at = store.firstSuccessAt(now), since = store.installationStartedAt();
                 return at === null || since === null ? null : firstResultWords(since, at);
+            })(), (() => {
+                const chosen = store.notificationPreference(who.name);
+                return { mode: chosen.mode, digestAt: chosen.digestAt };
             })()));
         }
         if (url.pathname === "/push/key") {
@@ -3873,17 +3929,19 @@ export function createDecisionServer(options) {
     /**
      * Whether a coding agent is signed in where the work runs. This machine's
      * own checks (the ones Settings makes) speak only for a worker on this
-     * machine; a worker elsewhere speaks through its own readiness report, and
+     * machine, or for the first one while none is registered yet (it is started
+     * here); a worker elsewhere speaks through its own readiness report, and
      * the console never claims to have checked that machine (finding 15).
      * Nothing here waits on a probe: this machine's answer is the last one
-     * seen, refreshed in the background.
+     * seen, refreshed in the background, and null until the first one is in.
      */
     function agentSignedIn(now) {
         const here = hostname();
-        const workers = store.listRunners().filter(one => one.retiredAt === null && runnerAlive(one, now));
-        if ((options.localRunner !== undefined || workers.some(one => one.host === here)) && localAgentSignedIn())
+        const registered = store.listRunners().filter(one => one.retiredAt === null);
+        const workers = registered.filter(one => runnerAlive(one, now));
+        if (workers.some(one => one.host !== here && store.providerReadiness(one.name).some(seen => seen.state === "ready")))
             return true;
-        return workers.some(one => one.host !== here && store.providerReadiness(one.name).some(seen => seen.state === "ready"));
+        return options.localRunner !== undefined || registered.length === 0 || workers.some(one => one.host === here) ? localAgentSignedIn() : false;
     }
     let localSignIn = null;
     let localSignInChecking = false;
@@ -3895,7 +3953,7 @@ export function createDecisionServer(options) {
                 .catch(() => { })
                 .finally(() => { localSignInChecking = false; });
         }
-        return localSignIn?.signedIn ?? false;
+        return localSignIn?.signedIn ?? null;
     }
     /** First tasks per project: the last ones found (safe generic ones until then), re-read in the background at most
      * every ten minutes. A render never waits on `gh` or `git grep`. */
@@ -3923,7 +3981,7 @@ export function createDecisionServer(options) {
         return {
             steps,
             suggestions: taskFiled || repo === null ? [] : firstTasksFor(repo),
-            sandbox: steps.find(one => one.key === "agent")?.done === false ? SANDBOX_COMMAND : null,
+            sandbox: steps.find(one => one.key === "agent" && !one.done && !one.checking) ? SANDBOX_COMMAND : null,
         };
     }
     // ---- fleet chat (v13) ----------------------------------------------------
@@ -4887,7 +4945,7 @@ export function createDecisionServer(options) {
             peeks[one.path] = peekOf(one.path);
         for (const path of candidates)
             peeks[path] = peekOf(path);
-        return sendScreen(response, status, projectsPage(chromeFor(open, "projects"), recent, [...candidates], open, csrf, problem, !restricted() && unscopedMode, !restricted() && (ceiling.roots.length > 0 || unscopedMode), onboardState, peeks, returnTo));
+        return sendScreen(response, status, projectsPage(chromeFor(open, "projects"), recent, [...candidates], open, csrf, problem, !restricted() && unscopedMode, !restricted() && (ceiling.roots.length > 0 || unscopedMode), onboardState, peeks, returnTo, who.via === "cookie" ? (path) => publishingOf(store, path).on : undefined));
     }
     /** The task screen, shared by the GET and by every refusal that re-renders it. */
     /**
@@ -5345,6 +5403,41 @@ export function createDecisionServer(options) {
                     : completionReceiptView(store, latest, store.artifactsFor(latest.id), evidenceRoot, reviewFactsFor(latest.id)),
         };
     }
+    /** The newest pull request any version of this task opened through Complete; else, for a result completed
+     * without one, the offer to open it (an approver's browser session only). */
+    /** Where "Complete and open a pull request" would open one for this result, or null when it isn't offered. */
+    function pullRequestTargetOf(runId) {
+        const run = store.getRun(runId);
+        const publishing = publishingOf(store, run === null ? null : store.refById(run.taskRef)?.repo ?? null);
+        if (!publishing.on || publishing.legacy || store.publicationForRun(runId) !== null || pullRequestBlocker(store, runId) !== null)
+            return null;
+        return `${publishing.githubRepo} into ${publishing.base}`;
+    }
+    function taskPullRequestOf(taskId, who) {
+        const family = familyOf(taskId);
+        const rootId = family?.root.id ?? taskId;
+        const ids = family === null ? [taskId] : [...family.versions.map(one => one.id)].reverse();
+        const repo = store.lookupRef(taskId)?.repo ?? null;
+        const publishing = publishingOf(store, repo);
+        const target = publishing.on ? publishing.base : null;
+        for (const id of ids) {
+            const ref = store.lookupRef(id);
+            if (ref === null)
+                continue;
+            for (const run of store.runsFor(ref.id)) {
+                const view = pullRequestViewOf(store, run.id);
+                if (view !== null)
+                    return { taskId: rootId, view: { ...view, canMerge: view.canMerge && who.role === "approver" && who.via === "cookie" }, offer: null, target };
+            }
+        }
+        if (!publishing.on || who.via !== "cookie" || who.role !== "approver")
+            return null;
+        const assignment = assignmentOf(store, taskId, clock(), { principal: "operator", repos: admissionList(), includeUnplaced: visible(null) }, evidenceRoot);
+        const receipt = assignment?.receipt ?? null;
+        if (assignment?.state !== "complete" || receipt === null || store.publicationForRun(receipt.runId) !== null || pullRequestBlocker(store, receipt.runId) !== null)
+            return null;
+        return { taskId: rootId, view: null, offer: { taskId: receipt.taskId, runId: receipt.runId, digest: receipt.digest }, target };
+    }
     function taskScreen(response, who, taskId, problem, status, scopeDraft, cancelDraft) {
         const admittedFamily = familyOf(taskId);
         if (admittedFamily?.problem != null)
@@ -5360,6 +5453,7 @@ export function createDecisionServer(options) {
             presentedData.scopeDraft = scopeDraft;
         if (cancelDraft !== undefined)
             presentedData.cancelDraft = cancelDraft;
+        presentedData.pullRequest = taskPullRequestOf(taskId, who);
         const paneProject = restricted() ? store.lookupRef(taskId)?.repo ?? null : who.via === "cookie" ? who.session.project : null;
         const page = taskPage(paneProject === null && !unscopedMode
             ? chromeFor(paneProject, "tasks")
@@ -6620,6 +6714,75 @@ export function createDecisionServer(options) {
                 store.setRetentionPeriod(one.kind, one.days ?? null, who.name, now);
             return back("said", changed.length === 0 ? "Nothing changed." : "Saved. The next daily sweep uses these periods.");
         }
+        // Settings → Storage: when a finished task's clean checkout goes, cleaning up what the preview showed, and throwing
+        // away a checkout kept for its changes. Each takes the password; the ledger keeps every change and removal.
+        if (url.pathname === "/settings/storage" || url.pathname === "/settings/storage/clean" || url.pathname === "/settings/storage/discard") {
+            const databaseFile = store.databaseFile();
+            if (who.via !== "cookie" || !store.isInstanceOperator(who.name) || databaseFile === null)
+                return refuse(response, who, 403, "An instance operator looks after storage.", "/settings");
+            const back = (key, words) => redirect(response, `/settings/storage?${key}=${encodeURIComponent(words)}`);
+            const what = url.pathname.endsWith("/clean") ? "clean up" : url.pathname.endsWith("/discard") ? "discard a checkout" : "change checkout cleanup";
+            if (!authenticateApprover(store, who.name, body.get("password") ?? "").ok)
+                return back("problem", `Enter your Toolroll password to ${what}.`);
+            if (url.pathname === "/settings/storage") {
+                const cleanup = parseCleanup(body.get("cleanup") ?? "");
+                if (cleanup === undefined)
+                    return back("problem", "Choose when a finished task's checkout is removed.");
+                const before = store.checkoutCleanup();
+                store.setCheckoutCleanup(cleanup, who.name, now);
+                return back("said", cleanup === before ? "Nothing changed." : "Saved.");
+            }
+            const pool = storagePool(databaseFile);
+            if (url.pathname.endsWith("/clean")) {
+                // Only what the preview showed goes: when that changed since, the person looks again.
+                const plan = await checkoutPlan(store, pool, clock(), { manual: true });
+                if (plan.go.length === 0)
+                    return back("said", "Nothing to clean up.");
+                if (body.get("preview") !== previewDigest(plan))
+                    return back("problem", "What a clean-up would remove changed since you looked. Check the list again.");
+                const done = await cleanCheckouts(store, pool, clock, { manual: true, actor: who.name, only: new Set(plan.go.map(one => one.path)) });
+                return back("said", done.removed.length === 0 ? "Nothing was removed: those checkouts are no longer ready to go." : `Removed ${done.removed.length} checkout${done.removed.length === 1 ? "" : "s"}, about ${bytesWords(done.freed)}. Their branches stay.`);
+            }
+            const done = await discardCheckout(store, pool, body.get("path") ?? "", now, who.name);
+            return done.ok ? back("said", `Discarded, about ${bytesWords(done.bytes)}. Its branch stays.`) : back("problem", done.message);
+        }
+        // Pull requests for one project: turn on (the checks run again and must match what the page showed), merge
+        // settings, or turn off. Each takes the password and lands in the ledger.
+        if (url.pathname === "/settings/pull-requests") {
+            const repo = body.get("repo") ?? "";
+            const known = [...new Set([...managedRepos(), ...store.knownRepos(), ...store.listProjects().map(one => one.path)])];
+            if (who.via !== "cookie" || !known.includes(repo) || !visible(repo))
+                return refuse(response, who, 404, "No such project.", "/projects");
+            if (who.role !== "approver" || store.isDemo())
+                return refuse(response, who, 403, "An approver sets up pull requests.", "/projects");
+            const back = (key, words) => redirect(response, `/settings/pull-requests?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+            const act = body.get("act");
+            if (!authenticateApprover(store, who.name, body.get("password") ?? "", repo).ok)
+                return back("problem", "Enter your Toolroll password to change pull requests.");
+            if (act === "on") {
+                const checked = await checkPublishing(repo, options.publishExec === undefined ? {} : { exec: options.publishExec });
+                if (!checked.ok)
+                    return back("problem", checked.message);
+                if (checked.plan.githubRepo !== body.get("github") || checked.plan.base !== body.get("base"))
+                    return back("problem", "GitHub answered differently from what you saw. Check the details again.");
+                savePublishing(store, checked.plan, who.name, {}, now);
+                return back("said", "Pull requests are on.");
+            }
+            if (act === "settings") {
+                const method = body.get("method") ?? "";
+                if (!MERGE_METHODS.includes(method))
+                    return back("problem", "Choose a merge method.");
+                const saved = saveMergeSettings(store, repo, { mergeMethod: method, mergeWhenGreen: body.get("when-green") === "1" }, who.name, now);
+                return saved.ok ? back("said", "Saved.") : back("problem", saved.message);
+            }
+            if (act === "off") {
+                const revoked = store.revokePublicationGrant(repo, who.name, now);
+                if (revoked)
+                    store.recordAction({ at: now.toISOString(), actor: who.name, repo, taskId: null, runId: null, action: "pull requests turned off", outcome: "off", source: "policy" });
+                return back("said", revoked ? "Pull requests are off." : "Pull requests were already off.");
+            }
+            return back("problem", "That change isn't available.");
+        }
         // Sprint 8: back up now. An instance operator; the outcome is kept like a scheduled one's.
         if (url.pathname === "/settings/backups/now") {
             const databaseFile = store.databaseFile();
@@ -6668,6 +6831,18 @@ export function createDecisionServer(options) {
                 "cache-control": "no-store", "x-content-type-options": "nosniff" });
             return void response.end(zip);
         }
+        // Settings → Integrations → Send test: one harmless read-only check of one integration, now.
+        if (url.pathname === "/settings/integrations/test") {
+            if (who.via !== "cookie" || who.role !== "approver" || restricted() || !options.configDir)
+                return refuse(response, who, 403, "An installation approver tests integrations.", "/settings");
+            const key = body.get("key") ?? "";
+            const back = (name, words) => redirect(response, `/settings/integrations?${name}=${encodeURIComponent(words)}`);
+            const checked = (await integrations.check([key])).find(one => one.key === key);
+            if (checked === undefined)
+                return back("problem", "That integration isn't here any more.");
+            return checked.state === "connected" ? back("said", `${checked.name} works${checked.account === null ? "" : ` (${checked.account})`}.`)
+                : back("problem", `${checked.name}: ${checked.action.kind === "fix" ? checked.action.words : "not set up."}`);
+        }
         // v104: change where monitoring goes. A step-up; the ledger keeps before → after (addresses, never secrets).
         if (url.pathname === "/settings/monitoring") {
             if (who.via !== "cookie" || !store.isInstanceOperator(who.name) || !options.configDir)
@@ -7227,6 +7402,20 @@ export function createDecisionServer(options) {
                 ? "New tasks now use Strict / release. Approved tasks keep their setting."
                 : "New tasks now use Default quality. Approved tasks keep their setting.")}`);
         }
+        if (url.pathname === "/settings/notifications") {
+            // Each person's own choice: a closed list of modes and a 24-hour HH:MM, or off.
+            const mode = body.get("mode"), time = (body.get("digest") ?? "").trim();
+            if (mode !== null && mode !== "quiet" && mode !== "all")
+                return refuse(response, who, 400, "choose Only when I'm needed or Every step", "/settings");
+            if (time !== "" && time !== "off" && !isDigestTime(time))
+                return refuse(response, who, 400, "the evening digest time is HH:MM, or off", "/settings");
+            const before = store.notificationPreference(who.name);
+            const after = store.setNotificationPreference(who.name, { ...(mode === null ? {} : { mode }), ...(time === "" ? {} : { digestAt: time === "off" ? null : time }) }, who.name, now);
+            const said = after.mode !== before.mode
+                ? after.mode === "quiet" ? "Chats now message you only when you're needed." : "Chats now message you at every step."
+                : after.digestAt === null ? "Evening digest off." : `Evening digest at ${after.digestAt}.`;
+            return redirect(response, `/settings?said=${encodeURIComponent(said)}`);
+        }
         if (url.pathname === "/settings/telegram-digest" && options.telegramTokenFile !== undefined) {
             // The cadence is a closed list of minutes — never a free number from
             // a form; "off" clears it. Any approver session may set it.
@@ -7958,7 +8147,28 @@ export function createDecisionServer(options) {
         if (attendAct !== null) {
             return attendMutation(response, who, attendAct.taskId, attendAct.verb, body, now);
         }
-        const act = matchTaskPath(url.pathname, "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|block|unblock|repair-dependency|next|reopen|steer|follow-up|accept-proof|accept-revision|reject-revision|route|retry-review|complete|stop|resume-arm|resume)$");
+        const act = matchTaskPath(url.pathname, "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|block|unblock|repair-dependency|next|reopen|steer|follow-up|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|stop|resume-arm|resume)$");
+        if (act !== null && act.verb === "merge") {
+            // Merging is a person's act behind their password, typed again: a browser session, an approver, the exact
+            // result's pull request. The flow re-reads GitHub before merging and records who merged in the ledger.
+            if (who.via !== "cookie" || who.role !== "approver")
+                return refuse(response, who, 403, "Only an approver can merge.");
+            if (store.isDemo())
+                return taskScreen(response, who, act.taskId, "The demo merges nothing.", 403);
+            const ref = store.lookupRef(act.taskId);
+            if (ref === null || !visible(ref.repo))
+                return refuse(response, who, 404, "no such task", "/tasks");
+            const named = (body.get("run") ?? "").trim();
+            const run = /^[0-9]{1,15}$/.test(named) ? store.getRun(Number(named)) : null;
+            const runTask = run === null ? null : store.externalIdFor(run.taskRef);
+            if (run === null || runTask === null || familyOf(runTask)?.root.id !== (familyOf(act.taskId)?.root.id ?? act.taskId)) {
+                return taskScreen(response, who, act.taskId, "That pull request isn't part of this task.", 409);
+            }
+            const merged = await mergeAsPerson(store, { runId: run.id, name: who.name, password: body.get("token") ?? "", ...(options.publishExec === undefined ? {} : { exec: options.publishExec }), clock });
+            if (!merged.ok)
+                return taskScreen(response, who, act.taskId, merged.message, merged.reason === "password" ? 403 : 409);
+            return redirect(response, `${taskHref(act.taskId)}#merge`);
+        }
         if (act !== null) {
             return taskMutation(response, who, act.taskId, act.verb, body, now);
         }
@@ -9995,6 +10205,14 @@ export function createDecisionServer(options) {
                 if (current === null || current.receipt?.taskId !== taskId || !/^[0-9]{1,15}$/.test(namedRun) || current.receipt.runId !== Number(namedRun)) {
                     return taskScreen(response, who, taskId, "This result changed. Open the current result before marking it complete.", 409);
                 }
+                if (body.get("publish") === "1") {
+                    // "Complete and open a pull request": the same exact-receipt completion, plus the owed PR for this
+                    // exact commit in one transaction. The watch process pushes and opens it; the task shows its progress.
+                    const opened = completeAndOpenPullRequest(store, { taskId, digest, runId: Number(namedRun), who: principal, root: evidenceRoot }, now);
+                    if (!opened.ok)
+                        return taskScreen(response, who, taskId, opened.message, 409);
+                    return redirect(response, `${taskHref(familyOf(taskId)?.root.id ?? taskId)}#merge`);
+                }
                 const completed = checkAssignmentAsOperator(store, taskId, digest, principal, now, evidenceRoot);
                 if (!completed.ok)
                     return taskScreen(response, who, taskId, completed.message, 409);
@@ -10519,6 +10737,7 @@ export function createDecisionServer(options) {
             proof,
             terminal,
             publication,
+            pullRequestTo: pullRequestTargetOf(run.id),
             ciFailing: publication !== null && publication.prNumber !== null && store.hasOpenCiEpisode(publication.githubRepo, publication.prNumber),
             files,
             outsideTouches: files.filter(one => one.outsideTouches).map(one => one.path),
@@ -12898,6 +13117,23 @@ ${THEME_DARK}
   .status-line[data-tone="ready"] .status-dot, .status-line[data-tone="done"] .status-dot { background: var(--success); }
   .status-line[data-tone="muted"] { color: var(--muted-foreground); font-weight: 500; }
   .status-line[data-tone="muted"] .status-dot { background: var(--border); }
+  .pull-request { display: grid; gap: .35rem; }
+  .pull-request p { margin: 0; overflow-wrap: anywhere; }
+  .pull-request-head { display: flex; flex-wrap: wrap; align-items: baseline; gap: .25rem .75rem; }
+  .pull-request-head a, .pull-request .meta a { display: inline-flex; align-items: center; min-height: 44px; }
+  .pull-request-head strong { font-size: 1.0625rem; font-weight: 600; color: var(--foreground); display: inline-flex; align-items: center; gap: .5rem; }
+  .pull-request-head strong::before { content: ""; width: .5rem; height: .5rem; border-radius: 999px; background: var(--muted-foreground); }
+  .pull-request--ok .pull-request-head strong::before { background: var(--success, #15803d); }
+  .pull-request--problem .pull-request-head strong::before { background: var(--destructive, #b91c1c); }
+  .pull-request-act { display: flex; flex-wrap: wrap; align-items: flex-end; gap: .5rem .75rem; margin: .25rem 0 0; }
+  .pull-request-act .meta { flex: 1 1 100%; }
+  .pull-request-act label { display: grid; gap: .25rem; flex: 1 1 12rem; margin: 0; }
+  .pull-request-act label input { margin: 0; min-height: 44px; box-sizing: border-box; width: 100%; }
+  .pull-request-act button { min-height: 44px; white-space: nowrap; }
+  .result-complete-actions { display: flex; flex-wrap: wrap; gap: .5rem; }
+  .result-complete-actions button { white-space: nowrap; }
+  .result-complete-actions button[name=publish], .pull-request-act button { background: var(--primary); color: var(--primary-foreground); border-color: var(--primary); font-weight: 600; }
+  @media (max-width: 480px) { .pull-request-act button, .result-complete-actions button { flex: 1 1 100%; } }
   .receipt-publication { position: relative; z-index: 1; margin: .35rem 0 0; font-size: .8125rem; color: var(--muted-foreground); }
   /* A raw repository path in ordinary copy wraps at any point rather than
      widening the page (the phone task-list overflow, package 1). */
@@ -14066,7 +14302,7 @@ button.pick-file { min-height: 1.75rem; padding: 0 .55rem; font-size: .75rem; }
 const THEME_CONTROLS_CSS = `.task-repo select{width:100%;min-height:2.75rem;font-size:1rem}.task-repo-add{margin:.35rem .1rem .5rem}.task-repo-add a{display:inline-flex;align-items:center;min-height:2.25rem}details.result-request-open.result-request-form>summary{border:0;background:transparent;padding:.5rem 0;min-height:2.75rem;font-weight:600;display:list-item;list-style:revert}details.result-request-open.result-request-form>summary::-webkit-details-marker{display:revert}form.js-autosave button[type=submit]{display:none}.provider-row{border-bottom:1px solid var(--so-line);padding:.35rem 0}.provider-row:first-of-type{border-top:1px solid var(--so-line)}.provider-head{display:flex;align-items:center;gap:.75rem;margin:.4rem 0 0}.provider-status{display:inline-flex;align-items:center;gap:.4rem;color:var(--so-muted);font-size:.875rem}.provider-status i{width:.5rem;height:.5rem;border-radius:50%;background:var(--so-muted)}.provider-status--ok i{background:var(--so-success)}.provider-status--warn i{background:var(--so-attention)}.provider-status--off i{background:transparent;border:1.5px solid var(--so-muted)}details.provider-manage>summary{cursor:pointer;color:var(--so-accent-text);font-size:.875rem;min-height:2.5rem;display:list-item;padding-block:.5rem}.card.props .row{display:grid;gap:.1rem;margin:0 0 .75rem}.card.props .row>.meta{display:block;font-size:.75rem}.card.props .row>.meta::first-letter{text-transform:uppercase}.card.props .row>.mono{font-family:var(--font-sans);font-size:.875rem}.card.props .row>.mono .seal{font-family:var(--font-mono);font-size:.8125rem}details.evidence-files{margin:1rem 0}details.evidence-files>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:600}details.evidence-files ul{list-style:none;margin:0;padding:0}details.evidence-files li{display:flex;justify-content:space-between;gap:1rem;padding:.5rem 0;border-bottom:1px solid var(--so-line)}.result-action .result-feedback-link{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;text-decoration:none}@media(hover:hover) and (pointer:fine){.result-action .result-feedback-link:hover{background:var(--so-raised)}}.so-sr-only{position:absolute!important;width:1px!important;height:1px!important;padding:0!important;margin:-1px!important;overflow:hidden!important;clip:rect(0,0,0,0)!important;white-space:nowrap!important;border:0!important}.verdict{margin:.5rem 0 .75rem}.verdict-chips{display:flex;flex-wrap:wrap;gap:.4rem;list-style:none;padding:0;margin:0}.verdict-chip{display:inline-flex;align-items:center;gap:.3rem;min-height:1.75rem;padding:.2rem .65rem;border-radius:999px;font-size:.8125rem;font-weight:600;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}.verdict-chip svg{width:.9rem;height:.9rem}.verdict-chip--success{background:var(--so-success-soft);color:var(--so-success)}.verdict-chip--danger{background:var(--so-danger-soft);color:var(--so-danger)}.verdict-chip--warning{background:var(--so-warning-soft);color:var(--so-warning)}.verdict-chip--info{background:var(--so-info-soft);color:var(--so-info)}.verdict-by{margin:.4rem 0 0}details.result-request-open{margin:.5rem 0}details.result-request-open>summary{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;cursor:pointer;list-style:none}details.result-request-open>summary::-webkit-details-marker{display:none}details.result-request-open[open]>summary{margin-bottom:.75rem}.settings-tiles{display:grid;grid-template-columns:repeat(auto-fill,minmax(8.5rem,1fr));gap:.5rem;margin:0 0 2rem}.settings-tiles a{display:flex;align-items:center;gap:.6rem;min-height:3rem;padding:.65rem .8rem;border:1px solid var(--so-line);border-radius:.625rem;background:var(--so-paper);color:var(--so-ink);text-decoration:none;font-weight:550;font-size:.875rem}@media(hover:hover) and (pointer:fine){.settings-tiles a:hover{border-color:var(--so-input-line);background:var(--so-raised)}}.settings-tiles svg{width:1.1rem;height:1.1rem;flex-shrink:0;color:var(--so-accent-text)}details.settings-more{margin:.25rem 0 1.25rem}details.settings-more>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:550}details.settings-more>summary .meta{font-weight:400;margin-left:.35rem}.settings-changed{margin-top:-.25rem}.appearance{margin:0 0 28px}.appearance h2{margin:0 0 10px}.theme-switch{display:inline-flex;flex-wrap:nowrap;max-width:100%;gap:4px;padding:4px;margin:0;border:1px solid var(--so-line);border-radius:10px;background:var(--so-raised)}.theme-switch .theme-choice,.so-native-region .theme-switch .theme-choice{flex:1 1 0;width:auto;white-space:nowrap;min-height:40px;padding:8px 16px;border:0;border-radius:7px;background:transparent;color:var(--so-muted);font:inherit;font-weight:550;box-shadow:none;cursor:pointer}@media(hover:hover) and (pointer:fine){.theme-switch .theme-choice:hover{color:var(--so-ink)}}.theme-switch .theme-choice[aria-pressed="true"]{background:var(--so-paper);color:var(--so-ink);box-shadow:0 1px 2px rgb(0 0 0 / .1)}.appearance .meta{margin:8px 0 0}@media(max-width:600px){.theme-switch .theme-choice{min-height:44px}}.update-notes{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit;max-height:18rem;overflow:auto}`;
 /** The page CSS this module writes itself (not the imported modules'), for the stylesheet contract tests. */
 export const PAGE_CSS = STYLE + THEME_CONTROLS_CSS;
-const WORKSPACE_STYLE = styleAsset(STYLE + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + TEAMMATE_CSS + KITS_CSS + SSO_CSS + CREDENTIALS_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + LEAD_CONTEXT_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
+const WORKSPACE_STYLE = styleAsset(STYLE + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + INTEGRATIONS_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + TEAMMATE_CSS + KITS_CSS + SSO_CSS + CREDENTIALS_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + LEAD_CONTEXT_CSS + PULL_REQUEST_SETTINGS_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
 /**
  * The board's liveness: fetch this page's own fragment on a timer and swap
  * it in place — no flicker, no scroll reset, no long-lived stream to manage,
@@ -14725,7 +14961,7 @@ function inboxPage(chrome, data) {
             `<p><strong>Get to your first result</strong></p>` +
             data.wizard
                 .map(step => `<p class="row" data-step="${step.key}"><span class="mono" aria-hidden="true">${step.done ? "\u2713" : "\u25cb"}</span> <strong>${escape(step.title)}</strong>` +
-                (step.action === null ? ` <span class="meta">done</span>`
+                (step.checking ? ` <span class="meta">checking…</span>` : step.action === null ? ` <span class="meta">done</span>`
                     : step.action.kind === "link" ? ` <a href="${escape(step.action.href)}">${escape(step.action.label)}</a>`
                         : ` <code>${escape(step.action.command)}</code>`) +
                 `</p>`)
@@ -17520,7 +17756,7 @@ function githubReposPage(chrome, data) {
         `<p class="row" style="margin-top:.6rem"><a class="badge" href="/projects">← back to projects</a></p>`,
     ].join("\n"), { chrome });
 }
-function projectsPage(chrome, recent, candidates, open, csrf, problem, _unscopedMode, browsable = false, onboard = null, peeks = {}, returnTo = "/") {
+function projectsPage(chrome, recent, candidates, open, csrf, problem, _unscopedMode, browsable = false, onboard = null, peeks = {}, returnTo = "/", pullRequestsOn) {
     // The onboarding card (repo onboarding, findings 1-39): preview first,
     // then a password-confirmed clone into a configured root. Disabled
     // states explain themselves in words (finding 28/39).
@@ -17610,6 +17846,7 @@ function projectsPage(chrome, recent, candidates, open, csrf, problem, _unscoped
         return {
             name, path, shortPath: path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path, open: open !== null && open === path, openedAt,
             knowledgeHref: `/settings/knowledge?repo=${encodeURIComponent(path)}`,
+            ...(pullRequestsOn === undefined ? {} : { pullRequests: { href: `/settings/pull-requests?repo=${encodeURIComponent(path)}`, on: pullRequestsOn(path) } }),
             peek: peek === null ? null : [
                 ...(peek.waiting > 0 ? [{ label: `${peek.waiting} waiting on you`, href: "/", tone: "attention" }] : []),
                 ...(peek.running > 0 ? [{ label: `${peek.running} running`, href: "/runs", tone: "neutral" }] : []),
@@ -18999,6 +19236,9 @@ function taskBodyParts(data) {
             return "no project — no publication grant can apply";
         if (grant === null)
             return "branch only — publishing is not set up";
+        if (grant.publishOn === "complete") {
+            return `pull requests to ${grant.githubRepo} into ${grant.base} when completed · ${grant.mergeWhenGreen === true ? "merges when checks pass" : "a person merges"} (${grant.mergeMethod ?? "squash"})`;
+        }
         return [
             grant.capabilities.includes("push-branch") ? `may push ${grant.headPrefix}* to ${grant.githubRepo}` : "cannot push",
             grant.capabilities.includes("open-pr") ? `may open a PR against ${grant.base}${grant.draft ? " (draft)" : ""}` : null,
@@ -19054,7 +19294,8 @@ function taskBodyParts(data) {
         facts.push({ label: "Budget", parts: [`${data.budgetHold} · `, { label: "Spend", href: "/spend" }] });
     if (data.policyHold != null)
         facts.push({ label: "Policy", parts: [`${data.policyHold} · `, { label: "Policy", href: "/settings/policy" }] });
-    if (data.publication !== null && data.publication !== undefined) {
+    // The pull-request card already says this once, with its action.
+    if (data.publication !== null && data.publication !== undefined && data.pullRequest?.view == null) {
         const prHref = safePrUrl(data.publication.prUrl), pr = `PR #${data.publication.prNumber ?? "?"}`;
         facts.push({ label: "Published", parts: [prHref === null ? pr : { label: pr, href: prHref },
                 ` · ${data.publication.state}${data.publication.remoteState !== null ? ` · ${data.publication.remoteState.toLowerCase()} on GitHub` : ""}${data.publication.lastCheckState !== null ? ` · CI ${data.publication.lastCheckState} at last observation` : " · no checks observed"}`] });
@@ -19235,7 +19476,9 @@ function taskBodyParts(data) {
             : data.filedVia === null || data.filedVia === undefined
                 ? ""
                 : ` · filed via ${escape(data.filedVia)}`}${data.deliverable === "report" ? ` · <span class="badge">scout</span>` : ""}</p>`;
-    const assignmentOptions = data.assignment == null ? null : { workStatus: status, hideAction: approveForm !== "" && data.dispatch?.action === "approve-scope", problem: status.tone === "problem", diagnostics: [...(status.diagnostics ?? []), ...(status.tone === "problem" && status.detail !== data.assignment.detail ? [status] : [])] };
+    // A pull request that can be merged (or opened) owns the one primary action; the result stays in its section.
+    const pullRequestActs = data.csrf !== "" && (data.pullRequest?.view?.canMerge === true || (data.pullRequest?.view == null && data.pullRequest?.offer != null));
+    const assignmentOptions = data.assignment == null ? null : { workStatus: status, hideAction: (approveForm !== "" && data.dispatch?.action === "approve-scope") || pullRequestActs, problem: status.tone === "problem", diagnostics: [...(status.diagnostics ?? []), ...(status.tone === "problem" && status.detail !== data.assignment.detail ? [status] : [])] };
     // The result takes over from the task status as soon as it is ready.
     const statusHtml = (data.assignment != null && assignmentOptions !== null ? assignmentSummaryHtml(data.assignment, assignmentOptions) : receiptLeads ? completionReceiptCard(data.completion.receipt, task.id, "task", status) : taskStatusCard(status, task.id, data.dispatch ?? null, liveRunId, approveForm !== "" && data.dispatch?.action === "approve-scope")) + checkProgressHtml(data.checkProgress ?? null);
     // The exact-run control (v52), directly under the scheduler's answer:
@@ -19365,6 +19608,7 @@ function taskBodyParts(data) {
         approval: approvalHtml,
         lead: [
             { key: "history", html: data.history ?? "" }, { key: "control", html: controlHtml }, { key: "problem", html: problemHtml },
+            { key: "pull-request", html: data.pullRequest == null ? "" : pullRequestCardHtml(data.pullRequest, data.csrf) },
             { key: "needs-scope", html: needsScopeCard }, { key: "progress", html: progressCard }, { key: "revisions", html: revisionLedgerCard },
             { key: "plan", html: planCard }, { key: "mirror", html: mirrorCard }, { key: "contest", html: contestCard }, { key: "attempt", html: attemptPanel },
         ].filter(one => one.html !== ""),
@@ -19869,7 +20113,7 @@ function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user)
     const complete = assignment?.state === "ready-to-check" && assignment.receipt !== null && canRetryReview && csrf !== ""
         ? { action: `${taskHref(view.taskId)}/complete`, receipt: assignment.receipt.digest, run: run.id } : null;
     if (complete !== null)
-        parts.push(completionForm(view.taskId, run.id, complete.receipt, csrf));
+        parts.push(completionForm(view.taskId, run.id, complete.receipt, csrf, view.detail?.pullRequestTo ?? null));
     if (view.notes.length > 0) {
         parts.push(`<section class="card cockpit-section" data-cockpit-section="notes"><h3>operator notes</h3>` +
             view.notes.map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span> ${escape(one.note)}</p>`).join("\n") +
@@ -19883,8 +20127,41 @@ function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user)
         },
     };
 }
-function completionForm(taskId, runId, digest, csrf) {
-    return `<form method="post" action="${taskHref(taskId)}/complete" class="card result-complete"><input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="receipt" value="${escape(digest)}"><input type="hidden" name="run" value="${runId}"><p class="meta">After inspecting the work, mark this result complete. Checks stay unchanged; nothing is published or deployed.</p><button type="submit" style="min-height:44px">Mark complete</button></form>`;
+function completionForm(taskId, runId, digest, csrf, pullRequestTo = null) {
+    const hidden = `<input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="receipt" value="${escape(digest)}"><input type="hidden" name="run" value="${runId}">`;
+    if (pullRequestTo !== null) {
+        // With pull requests set up: the PR is the primary road, a bare completion the quiet one beside it.
+        return `<form method="post" action="${taskHref(taskId)}/complete" class="card result-complete">${hidden}<p class="meta">After inspecting the work, mark this result complete. A pull request opens on ${escape(pullRequestTo)} from this exact commit.</p><div class="result-complete-actions"><button type="submit" name="publish" value="1" style="min-height:44px">Complete and open a pull request</button><button type="submit" class="secondary" style="min-height:44px">Complete only</button></div></form>`;
+    }
+    return `<form method="post" action="${taskHref(taskId)}/complete" class="card result-complete">${hidden}<p class="meta">After inspecting the work, mark this result complete. Checks stay unchanged; nothing is published or deployed.</p><button type="submit" style="min-height:44px">Mark complete</button></form>`;
+}
+/** The pull request, in one card: its state and link, one line of detail, and the one action it needs — Merge
+ * behind the password when checks passed, or Open a pull request for a result completed without one. */
+function pullRequestCardHtml(pr, csrf) {
+    if (pr.view === null) {
+        if (pr.offer === null || csrf === "")
+            return "";
+        return `<section class="card pull-request" id="merge" data-pull-request="none"><div class="pull-request-head"><strong>No pull request</strong></div>` +
+            `<p class="meta">This result was completed without one.</p>` +
+            `<form method="post" action="${taskHref(pr.offer.taskId)}/complete" class="pull-request-act"><input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="receipt" value="${escape(pr.offer.digest)}"><input type="hidden" name="run" value="${pr.offer.runId}"><input type="hidden" name="publish" value="1">` +
+            `<button type="submit" class="secondary">Open a pull request</button></form></section>`;
+    }
+    const view = pr.view;
+    const url = safePrUrl(view.prUrl);
+    const link = view.prNumber === null ? "" : url === null ? `<span class="mono">PR #${view.prNumber}</span>` : `<a href="${escape(url)}" class="mono" rel="noreferrer" target="_blank">PR #${view.prNumber}</a>`;
+    const tone = view.state === "ready" || view.state === "merged" ? "ok" : view.state === "failing" || view.state === "failed" || view.state === "closed" ? "problem" : "waiting";
+    const revision = view.revisionTask === null || view.state !== "failing" ? "" : ` <a href="${taskHref(view.revisionTask)}">Open revision</a>`;
+    const merged = view.mergeCommit === null ? "" : `<p class="meta">Merge commit <span class="mono">${escape(view.mergeCommit.slice(0, 12))}</span></p>`;
+    const target = pr.target === null ? "the base branch" : pr.target;
+    const act = !view.canMerge || csrf === "" || view.prNumber === null ? "" :
+        `<form method="post" action="${taskHref(pr.taskId)}/merge" class="pull-request-act" data-merge-form>` +
+            `<input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="run" value="${view.runId}">` +
+            `<p class="meta">${escape(view.mergeMethod === "squash" ? "Squash-merges" : view.mergeMethod === "rebase" ? "Rebase-merges" : "Merges")} PR #${view.prNumber} into ${escape(target)} and deletes its branch.</p>` +
+            `<label>Password<input type="password" name="token" autocomplete="current-password" required></label>` +
+            `<button type="submit">Merge</button></form>`;
+    return `<section class="card pull-request pull-request--${tone}" id="merge" data-pull-request="${escape(view.state)}">` +
+        `<div class="pull-request-head"><strong>${escape(view.label)}</strong>${link}</div>` +
+        `<p class="meta">${escape(view.detail)}${revision}</p>${merged}${act}</section>`;
 }
 /** Exactly one primary road per result, chosen from its state; the
  * others stay reachable from their own sections. Every form posts to the
@@ -21489,7 +21766,7 @@ function telegramDeliveryWords(store, bot) {
         return `Telegram pushes new messages to ${state.url}${state.problem === null ? "." : `, but ${state.problem.charAt(0).toLowerCase()}${state.problem.slice(1)}.`}`;
     return `Toolroll asks Telegram for new messages every few seconds${state?.problem ? ` (${state.problem})` : ""}.`;
 }
-function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null, push = null, providerKeys = null, digest = null, permissionDefault = null, qualityDefault = null, email = null, telegramDelivery = null, workers = null, updates = null, firstResult = null) {
+function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null, push = null, providerKeys = null, digest = null, permissionDefault = null, qualityDefault = null, email = null, telegramDelivery = null, workers = null, updates = null, firstResult = null, chatNotices = null) {
     const permissionCard = permissionDefault === null
         ? ""
         : [
@@ -21518,7 +21795,23 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
                 ? ""
                 : `<p class="meta settings-changed">Changed ${escape(when(qualityDefault.updatedAt))}${qualityDefault.updatedBy === null ? "" : ` by ${escape(qualityDefault.updatedBy)}`}</p>`,
         ].join("\n");
-    const digestCard = digest === null || csrf === ""
+    // Quiet chat: this person's own choice. The installation's Telegram cadence only bundles Every step updates.
+    const chatCard = chatNotices === null || csrf === ""
+        ? ""
+        : [
+            "<h3>Chat messages</h3>",
+            `<form method="post" action="/settings/notifications" class="card" data-autosave>`,
+            `<input type="hidden" name="csrf" value="${escape(csrf)}">`,
+            `<label><input type="radio" name="mode" value="quiet"${chatNotices.mode === "quiet" ? " checked" : ""}> Only when I'm needed <span class="meta">· one message per task, updated as it moves</span></label>`,
+            `<label><input type="radio" name="mode" value="all"${chatNotices.mode === "all" ? " checked" : ""}> Every step <span class="meta">· a new message for each update</span></label>`,
+            `<label>Evening digest<select name="digest">` +
+                digestTimes(chatNotices.digestAt).map(([value, label]) => `<option value="${value}"${value === (chatNotices.digestAt ?? "off") ? " selected" : ""}>${label}</option>`).join("") +
+                `</select></label>`,
+            `<p class="meta">One message: what finished, what waits, what failed.</p>`,
+            `<button type="submit">Save</button>`,
+            `</form>`,
+        ].join("\n");
+    const digestCard = digest === null || csrf === "" || chatNotices?.mode === "quiet"
         ? ""
         : [
             "<h3>Telegram digest</h3>",
@@ -21681,7 +21974,8 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
         }),
         services: messaging === null || messaging.configured.length === 0 ? null : { configured: messaging.configured, channel: messaging.channel, implicit: messaging.implicit },
         push: push === null || csrf === "" ? null : { available: push.available, devices: push.devices.filter(one => one.retiredAt === null || one.retiredReason === "gone").map(one => ({ id: one.id, words: `${one.uaWords} · since ${when(one.createdAt)}`, state: one.retiredAt !== null ? "expired" : one.consecutiveFailures >= 20 ? "failing" : "ok", removable: one.retiredAt === null })) },
-        digest: digest === null || csrf === "" ? null : { every: digest.everyMs === null ? "off" : String(Math.round(digest.everyMs / 60_000)), held: digest.everyMs === null ? null : `${digest.held} routine fact(s) held` },
+        chat: chatNotices === null || csrf === "" ? null : chatNotices,
+        digest: digest === null || csrf === "" || chatNotices?.mode === "quiet" ? null : { every: digest.everyMs === null ? "off" : String(Math.round(digest.everyMs / 60_000)), held: digest.everyMs === null ? null : `${digest.held} routine fact(s) held` },
         telegram: { state: hasEnv ? "from the environment" : existing === null ? "not set" : "saved", current, delivery: telegramDelivery },
         email,
         workers,
@@ -21698,7 +21992,8 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
         workersCard(workers),
         updatesCard(updates, csrf),
         firstResult === null ? "" : `<p class="meta" data-first-result>${escape(firstResult)}</p>`,
-        pushCard === "" && messagingCard === "" && digestCard === "" ? "" : `<h2>Notifications</h2>`,
+        pushCard === "" && messagingCard === "" && digestCard === "" && chatCard === "" ? "" : `<h2>Notifications</h2>`,
+        chatCard,
         messagingCard,
         pushCard,
         digestCard,
@@ -21794,6 +22089,7 @@ function settingsTiles() {
     return `<nav class="settings-tiles" aria-label="Settings sections">${tiles.map(([href, label, icon]) => `<a href="${href}">${strokeIcon(icon)}<span>${label}</span></a>`).join("")}</nav>`;
 }
 const SETTINGS_TILE_ICONS = [
+    ["/settings/integrations", "Integrations", `<path d="M9 2v6M15 2v6"/><path d="M6 8h12v4a6 6 0 0 1-12 0z"/><path d="M12 18v4"/>`],
     ["/settings/models", "Models", `<rect x="4" y="4" width="16" height="16" rx="2"/><rect x="9" y="9" width="6" height="6"/><path d="M9 2v2M15 2v2M9 20v2M15 20v2M2 9h2M2 15h2M20 9h2M20 15h2"/>`],
     ["/settings/skills", "Skills", `<path d="m12 3 1.9 5.8L20 10l-5 3.6L16.8 20 12 16.4 7.2 20 9 13.6 4 10l6.1-1.2z"/>`],
     ["/settings/tools", "Tools", `<path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"/>`],
@@ -21810,6 +22106,7 @@ const SETTINGS_TILE_ICONS = [
     ["/settings/approval", "Approval rules", `<path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="m9 12 2 2 4-4"/>`],
     ["/settings/monitoring", "Monitoring", `<path d="M22 12h-4l-3 9L9 3l-3 9H2"/>`],
     ["/settings/retention", "Retention", `<circle cx="12" cy="12" r="9"/><path d="M12 7v5l3 2"/>`],
+    ["/settings/storage", "Storage", `<path d="M22 12H2"/><path d="M5.45 5.11 2 12v6a2 2 0 0 0 2 2h16a2 2 0 0 0 2-2v-6l-3.45-6.89A2 2 0 0 0 16.76 4H7.24a2 2 0 0 0-1.79 1.11z"/><path d="M6 16h.01M10 16h.01"/>`],
     ["/settings/updates", "Updates", `<path d="M21 12a9 9 0 1 1-2.64-6.36"/><path d="M21 3v6h-6"/>`],
     ["/settings/backups", "Backups", `<ellipse cx="12" cy="5" rx="9" ry="3"/><path d="M3 5v14c0 1.7 4 3 9 3s9-1.3 9-3V5"/><path d="M3 12c0 1.7 4 3 9 3s9-1.3 9-3"/>`],
     ["/settings/data", "Data", `<path d="M21 15v4a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2v-4"/><path d="m7 10 5 5 5-5"/><path d="M12 15V3"/>`],