toolroll 0.8.2 → 0.9.1

package/dist/serve.js

@@ -25,6 +25,8 @@ import { grantTool, revokeTool, rulesFromForm, setToolRules } from "./teammate-t
 import { addKitGithubTrigger, addKitSample, kitInstalled, kitOf, setUpKit } from "./kits.js";
 import { CONNECT_CALLBACK, connectionsOf, finishConnect, oneClickOf, startConnect } from "./mcp-connect.js";
 import { KITS_CSS, kitPageHtml, kitsGalleryHtml } from "./kits-ui.js";
+import { STARTERS_CSS, startersHtml } from "./flow-starters-ui.js";
+import { starterForWork, starterOf, startersFor, switchOnStarter } from "./flow-starters.js";
 import { createTeammateFrom, labelOf, nameOf, saveSoul, setTeammateState, teammateSettings, sendTeammateSummaries } from "./teammate-admin.js";
 import { editMemory, forgetMemory, tellTeammate } from "./teammate-memory.js";
 import { addRoutine, removeRoutine, runRoutine } from "./teammate-desk.js";
@@ -56,6 +58,8 @@ import { prepareWorkspaceRevision, WorkspaceValidatorCache } from "./workspace-r
 import { workIndexPage, workCountsByProject, WorkIndexCursorError } from "./work-index.js";
 import { openWorkDecisionOf } from "./work-summary.js";
 import { assignmentOf, checkAssignmentAsOperator } from './assignment.js';
+import { pullRequestSettingsHtml, PULL_REQUEST_SETTINGS_CSS } from './pull-request-ui.js';
+import { checkPublishing, completeAndOpenPullRequest, mergeAsPerson, pullRequestBlocker, pullRequestViewOf, publishingOf, saveMergeSettings, savePublishing, MERGE_METHODS } from './pull-request-flow.js';
 import { leadBriefHtml, LEAD_CONTEXT_CSS } from './lead-context.js';
 import { assignmentCatchUp } from './assignment-brief.js';
 import { assignmentCardOf, assignmentStatusOf, assignmentSummaryHtml, assignmentWithEvidence, ASSIGNMENT_CSS } from './assignment-ui.js';
@@ -167,7 +171,8 @@ import { dirname } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { loadOrCreateVapidKeys, validatePushEndpoint } from "./push.js";
 import { parseGithubRepo, previewGithubRepo, cloneGithubRepo, listGithubRepos, isLargeRepo } from "./onboard.js";
-import { verifiedAuthor, LEAD_THREAD } from "./store.js";
+import { verifiedAuthor, LEAD_THREAD, isDigestTime } from "./store.js";
+import { digestTimes } from "./digest-times.js";
 import { updateRepos, addRepos, removeRepos } from "./repos.js";
 import { run as execRun } from "./exec.js";
 import { findFirstTasks, firstResultWords, firstRunSteps, firstTaskSuggestions, SANDBOX_COMMAND } from "./first-run.js";
@@ -201,6 +206,8 @@ import { accessFromGroups, accountNameFor, discoverOidc, exchangeOidcCode, newOi
 import { readSsoSettings, removeSsoSettings, saveSsoSettings, SSO_CALLBACK, ssoChangeWords } from "./sso-settings.js";
 import { monitoringChange, readMonitoring, saveMonitoring } from "./monitoring-settings.js";
 import { MONITORING_CSS, monitoringHtml, signingSecretHtml } from "./monitoring-ui.js";
+import { INTEGRATIONS_CSS, integrationsHtml } from "./integrations-ui.js";
+import { createIntegrationMonitor } from "./integrations.js";
 import { BACKUP_CSS, backupHtml } from "./backup-ui.js";
 import { BACKUP_EVERY_HOURS, MAX_KEEP, backupFolderOf, backupNow, checkBackupFolder, defaultBackupFolder } from "./backup.js";
 import { prometheusMetrics } from "./metrics.js";
@@ -241,6 +248,7 @@ import { cachedRelease, isNewer, runnerVersions, setUpdateChecks, updateChecksOf
 import { installMethod } from "./install-method.js";
 import { PACKAGE_VERSION } from "./version.js";
 import { updateNoticeWords } from "./update-notice.js";
+import { whenHtml } from "./when-html.js";
 const SESSION_COOKIE = "standing-orders_session";
 const BODY_CAP = 16 * 1024;
 // URL encoding can triple UTF-8 bytes. Admit the existing bounded task
@@ -438,6 +446,19 @@ export function createDecisionServer(options) {
         catch { /* the pause keeps its own state */ }
         return value;
     };
+    // Settings → Integrations: checked in the background with a short cache, as the first-run suggestions are.
+    const integrations = createIntegrationMonitor(() => ({
+        store,
+        dir: options.configDir ?? null,
+        telegramTokenFile: options.telegramTokenFile ?? null,
+        env: process.env,
+        repos: managedRepos(),
+        gh: options.firstTaskRunner ?? execRun,
+        checkConnection: connectionCheck,
+        toolHome,
+        clock,
+        ...options.integrationIo,
+    }));
     const modelCatalog = openRouterModelsCache(options.modelCatalogFetcher);
     const modelSeams = {
         home: providerHome,
@@ -1564,9 +1585,9 @@ export function createDecisionServer(options) {
             refuse(response, who, 404, 'No such action in your projects.', '/projects');
             return false;
         }
-        const read = new Set(["/settings/skills", "/settings/knowledge", "/settings", "/settings/learning", "/recipes", "/recipes/run", "/recipes/start", "/recipes/new", "/recipes/edit", "/recipes/from-task", "/recipes/preview", "/recipes/export", "/", "/inbox", "/work", "/projects", "/people", "/ledger", "/ledger/export", "/next", "/board", "/tasks", "/tasks/new", "/runs", "/review", "/done", "/routines", "/menu"]);
-        const write = new Set(["/settings/skills/import", "/settings/skills/change", "/settings/skills/revise", "/settings/knowledge/change", "/settings/knowledge/refresh", "/settings/learning/change", "/recipes/prepare", "/recipes/preview", "/recipes/import", "/recipes/save", "/recipes/launch", "/projects/select", "/tasks/add", "/routines/add"]);
-        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|stop|resume-arm|resume)$");
+        const read = new Set(["/settings/flows", "/settings/skills", "/settings/knowledge", "/settings", "/settings/learning", "/recipes", "/recipes/run", "/recipes/start", "/recipes/new", "/recipes/edit", "/recipes/from-task", "/recipes/preview", "/recipes/export", "/", "/inbox", "/work", "/projects", "/people", "/ledger", "/ledger/export", "/next", "/board", "/tasks", "/tasks/new", "/runs", "/review", "/done", "/routines", "/menu"]);
+        const write = new Set(["/settings/flows/on", "/settings/skills/import", "/settings/skills/change", "/settings/skills/revise", "/settings/knowledge/change", "/settings/knowledge/refresh", "/settings/learning/change", "/recipes/prepare", "/recipes/preview", "/recipes/import", "/recipes/save", "/recipes/launch", "/projects/select", "/tasks/add", "/routines/add"]);
+        const task = matchTaskPath(path, request.method === "GET" ? "(/evidence)?$" : "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|next|reopen|steer|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|stop|resume-arm|resume)$");
         const resource = request.method === "GET"
             ? /^\/(?:r|d)\/[0-9]{1,15}(?:\/evidence\/[0-9]{1,15})?$/.test(path) || /^\/routines\/[0-9]{1,15}$/.test(path) || path === "/flows" || /^\/flows\/[0-9]{1,15}(\/insights|\/runs\/[0-9]{1,15}\/[0-9]{1,15})?$/.test(path)
             : /^\/d\/[0-9]{1,15}\/answer$/.test(path) || /^\/routines\/[0-9]{1,15}\/(approve|refresh|pause|resume|run-now)$/.test(path) || path === "/flows/new" || /^\/flows\/[0-9]{1,15}\/(save|cards|archive|scripts)$/.test(path) || /^\/flows\/[0-9]{1,15}\/cards\/[0-9]{1,15}\/(move|decide|cancel|comment|assign|watch)$/.test(path) || /^\/flows\/[0-9]{1,15}\/triggers(\/[0-9]{1,15}\/(pause|resume|remove|check|press|renew|secret|share|unshare))?$/.test(path) || /^\/r\/[0-9]{1,15}\/(note|comment|revise|draft-repair)$/.test(path);
@@ -3305,7 +3326,7 @@ export function createDecisionServer(options) {
                     back: { href: roomId ? "/chat?conversation=" + encodeURIComponent(roomId) : taskChatHref(focusTask?.id ?? ""), label: "Back to chat" },
                 }) + (who.role === 'approver' && focusTask?.assignment?.state === 'ready-to-check'
                     && focusTask.assignment.receipt?.runId === resultRun.id
-                    ? completionForm(focusTask.assignment.receipt.taskId, resultRun.id, focusTask.assignment.receipt.digest, who.session.csrf) : '');
+                    ? completionForm(focusTask.assignment.receipt.taskId, resultRun.id, focusTask.assignment.receipt.digest, who.session.csrf, pullRequestTargetOf(resultRun.id)) : '');
             const focusProblem = requestedTask !== null && focusTask === null
                 ? "That task is not available in this workspace."
                 : requestedResult !== null && focusTask !== null && resultRun === null
@@ -3621,6 +3642,27 @@ export function createDecisionServer(options) {
                 sessions: store.webSessions(everyone ? null : who.name).map(one => ({ ...one, here: one.idHash === here })), tokens: store.apiTokens(everyone ? null : who.name) };
             return sendScreen(response, 200, screen("Sessions & tokens", `<p><a href="/settings">Settings</a></p><h1>Sessions &amp; tokens</h1>${credentialsHtml(view, who.session.csrf, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings") }));
         }
+        // Settings → Flows: the starter flows, each switched on with one yes. ?starter= marks the one a task's
+        // "Do this every time…" asked about.
+        if (url.pathname === "/settings/flows") {
+            const projects = [...new Set([...(admissionList() ?? []), ...managedRepos(), ...store.knownRepos()])].filter(visible);
+            const chosen = url.searchParams.get("repo") ?? project ?? projects[0] ?? "";
+            if (chosen && !projects.includes(chosen))
+                return refuse(response, who, 403, "That project is outside your access.", "/settings");
+            const content = chosen === "" ? "<p>Add a project to switch on starter flows.</p>" : startersHtml({
+                repo: chosen, projects: projects.map(path => ({ path, name: projectName(path) })), starters: startersFor(store, chosen), csrf: who.via === "cookie" ? who.session.csrf : "",
+                canSwitch: who.via === "cookie" && who.role === "approver" && !store.isDemo(), suggested: starterOf(url.searchParams.get("starter") ?? "")?.id ?? null,
+                said: url.searchParams.get("said"), problem: url.searchParams.get("problem")
+            });
+            return sendScreen(response, 200, screen("Flows", `<p><a href="/settings">Settings</a></p><h1>Flows</h1>${content}`, { chrome: chromeFor(chosen || project, "settings") }));
+        }
+        // Settings → Integrations: which integrations work. The list is the last checks; a render never waits on one.
+        if (url.pathname === "/settings/integrations") {
+            if (who.via !== "cookie" || who.role !== "approver" || restricted() || !options.configDir)
+                return refuse(response, who, 403, "An installation approver sees integrations.", "/settings");
+            const list = integrations.list();
+            return sendScreen(response, 200, screen("Integrations", `<p><a href="/settings">Settings</a></p><h1>Integrations</h1>${integrationsHtml(list, who.session.csrf, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem"), checking: integrations.checking })}`, { chrome: chromeFor(project, "settings") }));
+        }
         // v104: Settings → Monitoring, where the audit stream and traces go. An instance operator's page.
         if (url.pathname === "/settings/monitoring") {
             if (who.via !== "cookie" || !store.isInstanceOperator(who.name) || !options.configDir)
@@ -3659,6 +3701,20 @@ export function createDecisionServer(options) {
             const plan = await checkoutPlan(store, storagePool(databaseFile), now, { manual: true });
             return sendScreen(response, 200, screen("Storage", `<p><a href="/settings">Settings</a></p><h1>Storage</h1>${storageHtml({ plan, csrf: who.session.csrf }, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") })}`, { chrome: chromeFor(project, "settings") }));
         }
+        // Settings → Projects → Pull requests: one project's setup. Off, the checks run on open, so the page says
+        // exactly what turning on would do, or what to fix first.
+        if (url.pathname === "/settings/pull-requests") {
+            const repo = url.searchParams.get("repo") ?? "";
+            const known = [...new Set([...managedRepos(), ...store.knownRepos(), ...store.listProjects().map(one => one.path)])];
+            if (who.via !== "cookie" || !known.includes(repo) || !visible(repo))
+                return refuse(response, who, 404, "No such project.", "/projects");
+            const publishing = publishingOf(store, repo);
+            const canChange = who.role === "approver" && !store.isDemo();
+            const check = publishing.on || !canChange ? null : await checkPublishing(repo, options.publishExec === undefined ? {} : { exec: options.publishExec });
+            const html = pullRequestSettingsHtml({ repo, name: projectName(repo), csrf: who.session.csrf, canChange, publishing, check,
+                said: url.searchParams.get("said"), problem: url.searchParams.get("problem") });
+            return sendScreen(response, 200, screen("Pull requests", `<p><a href="/projects">Projects</a></p><h1>Pull requests</h1>${html}`, { chrome: chromeFor(project, "projects") }));
+        }
         // Sprint 8: Settings → Backups, how the last backup went and the schedule. An instance operator's page.
         if (url.pathname === "/settings/backups") {
             const databaseFile = store.databaseFile();
@@ -3833,6 +3889,9 @@ export function createDecisionServer(options) {
                 // The installation fact: when the first Ready result arrived, measured from the first account.
                 const at = store.firstSuccessAt(now), since = store.installationStartedAt();
                 return at === null || since === null ? null : firstResultWords(since, at);
+            })(), (() => {
+                const chosen = store.notificationPreference(who.name);
+                return { mode: chosen.mode, digestAt: chosen.digestAt };
             })()));
         }
         if (url.pathname === "/push/key") {
@@ -4848,7 +4907,7 @@ export function createDecisionServer(options) {
             .map(run => `<a class="item${run.id === currentId ? " current" : ""}" href="/r/${run.id}">` +
             `<span class="t">#${run.id} \u00b7 ${escape(run.taskId)}</span>` +
             `<span class="m">${runOutcomeBadge(run, live.has(run.id))}` +
-            `<span class="mono">${escape(when(run.startedAt))}</span></span></a>`)
+            `<span class="mono">${whenTime(run.startedAt)}</span></span></a>`)
             .join("\n");
         return `<h2>builds</h2>\n${items === "" ? `<p class="meta">none yet</p>` : items}`;
     }
@@ -4903,7 +4962,7 @@ export function createDecisionServer(options) {
             peeks[one.path] = peekOf(one.path);
         for (const path of candidates)
             peeks[path] = peekOf(path);
-        return sendScreen(response, status, projectsPage(chromeFor(open, "projects"), recent, [...candidates], open, csrf, problem, !restricted() && unscopedMode, !restricted() && (ceiling.roots.length > 0 || unscopedMode), onboardState, peeks, returnTo));
+        return sendScreen(response, status, projectsPage(chromeFor(open, "projects"), recent, [...candidates], open, csrf, problem, !restricted() && unscopedMode, !restricted() && (ceiling.roots.length > 0 || unscopedMode), onboardState, peeks, returnTo, who.via === "cookie" ? (path) => publishingOf(store, path).on : undefined));
     }
     /** The task screen, shared by the GET and by every refusal that re-renders it. */
     /**
@@ -5361,6 +5420,41 @@ export function createDecisionServer(options) {
                     : completionReceiptView(store, latest, store.artifactsFor(latest.id), evidenceRoot, reviewFactsFor(latest.id)),
         };
     }
+    /** The newest pull request any version of this task opened through Complete; else, for a result completed
+     * without one, the offer to open it (an approver's browser session only). */
+    /** Where "Complete and open a pull request" would open one for this result, or null when it isn't offered. */
+    function pullRequestTargetOf(runId) {
+        const run = store.getRun(runId);
+        const publishing = publishingOf(store, run === null ? null : store.refById(run.taskRef)?.repo ?? null);
+        if (!publishing.on || publishing.legacy || store.publicationForRun(runId) !== null || pullRequestBlocker(store, runId) !== null)
+            return null;
+        return `${publishing.githubRepo} into ${publishing.base}`;
+    }
+    function taskPullRequestOf(taskId, who) {
+        const family = familyOf(taskId);
+        const rootId = family?.root.id ?? taskId;
+        const ids = family === null ? [taskId] : [...family.versions.map(one => one.id)].reverse();
+        const repo = store.lookupRef(taskId)?.repo ?? null;
+        const publishing = publishingOf(store, repo);
+        const target = publishing.on ? publishing.base : null;
+        for (const id of ids) {
+            const ref = store.lookupRef(id);
+            if (ref === null)
+                continue;
+            for (const run of store.runsFor(ref.id)) {
+                const view = pullRequestViewOf(store, run.id);
+                if (view !== null)
+                    return { taskId: rootId, view: { ...view, canMerge: view.canMerge && who.role === "approver" && who.via === "cookie" }, offer: null, target };
+            }
+        }
+        if (!publishing.on || who.via !== "cookie" || who.role !== "approver")
+            return null;
+        const assignment = assignmentOf(store, taskId, clock(), { principal: "operator", repos: admissionList(), includeUnplaced: visible(null) }, evidenceRoot);
+        const receipt = assignment?.receipt ?? null;
+        if (assignment?.state !== "complete" || receipt === null || store.publicationForRun(receipt.runId) !== null || pullRequestBlocker(store, receipt.runId) !== null)
+            return null;
+        return { taskId: rootId, view: null, offer: { taskId: receipt.taskId, runId: receipt.runId, digest: receipt.digest }, target };
+    }
     function taskScreen(response, who, taskId, problem, status, scopeDraft, cancelDraft) {
         const admittedFamily = familyOf(taskId);
         if (admittedFamily?.problem != null)
@@ -5376,6 +5470,7 @@ export function createDecisionServer(options) {
             presentedData.scopeDraft = scopeDraft;
         if (cancelDraft !== undefined)
             presentedData.cancelDraft = cancelDraft;
+        presentedData.pullRequest = taskPullRequestOf(taskId, who);
         const paneProject = restricted() ? store.lookupRef(taskId)?.repo ?? null : who.via === "cookie" ? who.session.project : null;
         const page = taskPage(paneProject === null && !unscopedMode
             ? chromeFor(paneProject, "tasks")
@@ -6196,7 +6291,12 @@ export function createDecisionServer(options) {
                     return redirect(response, `/flows?problem=${encodeURIComponent("Choose one of your projects.")}`);
                 const template = FLOW_TEMPLATES.find(one => one.id === body.get("template")) ?? FLOW_TEMPLATES[0];
                 const name = (body.get("name") ?? "").replace(/[\u0000-\u001f\u007f]/g, "").trim().slice(0, 80) || template.label;
-                return redirect(response, `/flows/${store.createFlow({ repo, name, definitionJson: JSON.stringify(template.definition), by: who.name }, now)}`);
+                const made = store.createFlow({ repo, name, definitionJson: JSON.stringify(template.definition), by: who.name }, now);
+                // A template that starts from something (Issues to PRs: labelled issues) comes with its trigger.
+                const trigger = template.trigger === undefined ? null : addFlowTriggerTo(store, store.getFlow(made), template.trigger, who.name, now, options.configDir ?? null);
+                if (trigger !== null && !trigger.ok)
+                    return redirect(response, `/flows?problem=${encodeURIComponent(`${name} was made, but its trigger wasn't: ${trigger.message} Add one on its Triggers panel.`)}`);
+                return redirect(response, `/flows/${made}`);
             }
             const flow = store.getFlow(Number((flowPost ?? triggerPost)[1]));
             if (flow === null || flow.state !== "active" || !visible(flow.repo))
@@ -6668,6 +6768,43 @@ export function createDecisionServer(options) {
             const done = await discardCheckout(store, pool, body.get("path") ?? "", now, who.name);
             return done.ok ? back("said", `Discarded, about ${bytesWords(done.bytes)}. Its branch stays.`) : back("problem", done.message);
         }
+        // Pull requests for one project: turn on (the checks run again and must match what the page showed), merge
+        // settings, or turn off. Each takes the password and lands in the ledger.
+        if (url.pathname === "/settings/pull-requests") {
+            const repo = body.get("repo") ?? "";
+            const known = [...new Set([...managedRepos(), ...store.knownRepos(), ...store.listProjects().map(one => one.path)])];
+            if (who.via !== "cookie" || !known.includes(repo) || !visible(repo))
+                return refuse(response, who, 404, "No such project.", "/projects");
+            if (who.role !== "approver" || store.isDemo())
+                return refuse(response, who, 403, "An approver sets up pull requests.", "/projects");
+            const back = (key, words) => redirect(response, `/settings/pull-requests?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+            const act = body.get("act");
+            if (!authenticateApprover(store, who.name, body.get("password") ?? "", repo).ok)
+                return back("problem", "Enter your Toolroll password to change pull requests.");
+            if (act === "on") {
+                const checked = await checkPublishing(repo, options.publishExec === undefined ? {} : { exec: options.publishExec });
+                if (!checked.ok)
+                    return back("problem", checked.message);
+                if (checked.plan.githubRepo !== body.get("github") || checked.plan.base !== body.get("base"))
+                    return back("problem", "GitHub answered differently from what you saw. Check the details again.");
+                savePublishing(store, checked.plan, who.name, {}, now);
+                return back("said", "Pull requests are on.");
+            }
+            if (act === "settings") {
+                const method = body.get("method") ?? "";
+                if (!MERGE_METHODS.includes(method))
+                    return back("problem", "Choose a merge method.");
+                const saved = saveMergeSettings(store, repo, { mergeMethod: method, mergeWhenGreen: body.get("when-green") === "1" }, who.name, now);
+                return saved.ok ? back("said", "Saved.") : back("problem", saved.message);
+            }
+            if (act === "off") {
+                const revoked = store.revokePublicationGrant(repo, who.name, now);
+                if (revoked)
+                    store.recordAction({ at: now.toISOString(), actor: who.name, repo, taskId: null, runId: null, action: "pull requests turned off", outcome: "off", source: "policy" });
+                return back("said", revoked ? "Pull requests are off." : "Pull requests were already off.");
+            }
+            return back("problem", "That change isn't available.");
+        }
         // Sprint 8: back up now. An instance operator; the outcome is kept like a scheduled one's.
         if (url.pathname === "/settings/backups/now") {
             const databaseFile = store.databaseFile();
@@ -6716,6 +6853,33 @@ export function createDecisionServer(options) {
                 "cache-control": "no-store", "x-content-type-options": "nosniff" });
             return void response.end(zip);
         }
+        // Settings → Flows → Switch on: a starter flow's zones and trigger, made together.
+        if (url.pathname === "/settings/flows/on") {
+            const repo = body.get("repo") ?? "";
+            const back = (key, words) => redirect(response, `/settings/flows?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+            const known = [...new Set([...(admissionList() ?? []), ...managedRepos(), ...store.knownRepos()])];
+            if (who.via !== "cookie" || who.role !== "approver" || store.isDemo())
+                return refuse(response, who, 403, "An approver switches starter flows on.", "/settings/flows");
+            if (!known.includes(repo) || !visible(repo))
+                return refuse(response, who, 404, "No such project.", "/settings/flows");
+            const starter = starterOf(body.get("starter") ?? "");
+            if (starter === null)
+                return back("problem", "Choose a starter flow.");
+            const switched = switchOnStarter(store, starter, repo, who.name, clock(), options.configDir ?? null);
+            return switched.ok ? back("said", switched.said) : back("problem", switched.said);
+        }
+        // Settings → Integrations → Send test: one harmless read-only check of one integration, now.
+        if (url.pathname === "/settings/integrations/test") {
+            if (who.via !== "cookie" || who.role !== "approver" || restricted() || !options.configDir)
+                return refuse(response, who, 403, "An installation approver tests integrations.", "/settings");
+            const key = body.get("key") ?? "";
+            const back = (name, words) => redirect(response, `/settings/integrations?${name}=${encodeURIComponent(words)}`);
+            const checked = (await integrations.check([key])).find(one => one.key === key);
+            if (checked === undefined)
+                return back("problem", "That integration isn't here any more.");
+            return checked.state === "connected" ? back("said", `${checked.name} works${checked.account === null ? "" : ` (${checked.account})`}.`)
+                : back("problem", `${checked.name}: ${checked.action.kind === "fix" ? checked.action.words : "not set up."}`);
+        }
         // v104: change where monitoring goes. A step-up; the ledger keeps before → after (addresses, never secrets).
         if (url.pathname === "/settings/monitoring") {
             if (who.via !== "cookie" || !store.isInstanceOperator(who.name) || !options.configDir)
@@ -7275,6 +7439,20 @@ export function createDecisionServer(options) {
                 ? "New tasks now use Strict / release. Approved tasks keep their setting."
                 : "New tasks now use Default quality. Approved tasks keep their setting.")}`);
         }
+        if (url.pathname === "/settings/notifications") {
+            // Each person's own choice: a closed list of modes and a 24-hour HH:MM, or off.
+            const mode = body.get("mode"), time = (body.get("digest") ?? "").trim();
+            if (mode !== null && mode !== "quiet" && mode !== "all")
+                return refuse(response, who, 400, "choose Only when I'm needed or Every step", "/settings");
+            if (time !== "" && time !== "off" && !isDigestTime(time))
+                return refuse(response, who, 400, "the evening digest time is HH:MM, or off", "/settings");
+            const before = store.notificationPreference(who.name);
+            const after = store.setNotificationPreference(who.name, { ...(mode === null ? {} : { mode }), ...(time === "" ? {} : { digestAt: time === "off" ? null : time }) }, who.name, now);
+            const said = after.mode !== before.mode
+                ? after.mode === "quiet" ? "Chats now message you only when you're needed." : "Chats now message you at every step."
+                : after.digestAt === null ? "Evening digest off." : `Evening digest at ${after.digestAt}.`;
+            return redirect(response, `/settings?said=${encodeURIComponent(said)}`);
+        }
         if (url.pathname === "/settings/telegram-digest" && options.telegramTokenFile !== undefined) {
             // The cadence is a closed list of minutes — never a free number from
             // a form; "off" clears it. Any approver session may set it.
@@ -8006,7 +8184,28 @@ export function createDecisionServer(options) {
         if (attendAct !== null) {
             return attendMutation(response, who, attendAct.taskId, attendAct.verb, body, now);
         }
-        const act = matchTaskPath(url.pathname, "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|block|unblock|repair-dependency|next|reopen|steer|follow-up|accept-proof|accept-revision|reject-revision|route|retry-review|complete|stop|resume-arm|resume)$");
+        const act = matchTaskPath(url.pathname, "/(hold|unhold|requeue|cancel|scope|approve|plan|plan-edit|block|unblock|repair-dependency|next|reopen|steer|follow-up|accept-proof|accept-revision|reject-revision|route|retry-review|complete|merge|stop|resume-arm|resume)$");
+        if (act !== null && act.verb === "merge") {
+            // Merging is a person's act behind their password, typed again: a browser session, an approver, the exact
+            // result's pull request. The flow re-reads GitHub before merging and records who merged in the ledger.
+            if (who.via !== "cookie" || who.role !== "approver")
+                return refuse(response, who, 403, "Only an approver can merge.");
+            if (store.isDemo())
+                return taskScreen(response, who, act.taskId, "The demo merges nothing.", 403);
+            const ref = store.lookupRef(act.taskId);
+            if (ref === null || !visible(ref.repo))
+                return refuse(response, who, 404, "no such task", "/tasks");
+            const named = (body.get("run") ?? "").trim();
+            const run = /^[0-9]{1,15}$/.test(named) ? store.getRun(Number(named)) : null;
+            const runTask = run === null ? null : store.externalIdFor(run.taskRef);
+            if (run === null || runTask === null || familyOf(runTask)?.root.id !== (familyOf(act.taskId)?.root.id ?? act.taskId)) {
+                return taskScreen(response, who, act.taskId, "That pull request isn't part of this task.", 409);
+            }
+            const merged = await mergeAsPerson(store, { runId: run.id, name: who.name, password: body.get("token") ?? "", ...(options.publishExec === undefined ? {} : { exec: options.publishExec }), clock });
+            if (!merged.ok)
+                return taskScreen(response, who, act.taskId, merged.message, merged.reason === "password" ? 403 : 409);
+            return redirect(response, `${taskHref(act.taskId)}#merge`);
+        }
         if (act !== null) {
             return taskMutation(response, who, act.taskId, act.verb, body, now);
         }
@@ -9232,7 +9431,7 @@ export function createDecisionServer(options) {
             `<p class="meta">worker</p><p class="recap" style="margin-top:0">${escape(terms.runner)} (this machine)</p>` +
             `<p class="meta">spending</p><p class="recap" style="margin-top:0">up to about $${(terms.budgetMicrousd / 1_000_000).toFixed(2)} — the agent stops as soon as its total crosses this; the final step may run a little past it</p>` +
             `<p class="meta">conversation</p><p class="recap" style="margin-top:0">at most ${terms.maxSessionTurns} messages to the agent, this whole session; each may work up to ${Math.round(terms.turnTimeoutSeconds / 60)} minutes — one that runs past that ends the whole session. If it needs a repair, the repair uses the same session, model, and clock.</p>` +
-            `<p class="meta">while you watch — a signed term</p><p class="recap" style="margin-top:0">your console being open is what keeps it running — any page of it, this one included; close the console and the session winds down within a minute. Everything ends by ${escape(when(terms.absoluteExpiry))} regardless. One attempt; it never converts into unattended work.</p>` +
+            `<p class="meta">while you watch — a signed term</p><p class="recap" style="margin-top:0">your console being open is what keeps it running — any page of it, this one included; close the console and the session winds down within a minute. Everything ends by ${whenTime(terms.absoluteExpiry)} regardless. One attempt; it never converts into unattended work.</p>` +
             (quick
                 ? `<p class="meta">your signed mode covers this mint — no password; the mode is re-proved as you confirm, and the session is stamped with its signature</p>`
                 : `<label>your password, typed again — a signed-in session alone cannot authorize work<input type="password" name="token" autocomplete="current-password"></label>`) +
@@ -10043,6 +10242,14 @@ export function createDecisionServer(options) {
                 if (current === null || current.receipt?.taskId !== taskId || !/^[0-9]{1,15}$/.test(namedRun) || current.receipt.runId !== Number(namedRun)) {
                     return taskScreen(response, who, taskId, "This result changed. Open the current result before marking it complete.", 409);
                 }
+                if (body.get("publish") === "1") {
+                    // "Complete and open a pull request": the same exact-receipt completion, plus the owed PR for this
+                    // exact commit in one transaction. The watch process pushes and opens it; the task shows its progress.
+                    const opened = completeAndOpenPullRequest(store, { taskId, digest, runId: Number(namedRun), who: principal, root: evidenceRoot }, now);
+                    if (!opened.ok)
+                        return taskScreen(response, who, taskId, opened.message, 409);
+                    return redirect(response, `${taskHref(familyOf(taskId)?.root.id ?? taskId)}#merge`);
+                }
                 const completed = checkAssignmentAsOperator(store, taskId, digest, principal, now, evidenceRoot);
                 if (!completed.ok)
                     return taskScreen(response, who, taskId, completed.message, 409);
@@ -10567,6 +10774,7 @@ export function createDecisionServer(options) {
             proof,
             terminal,
             publication,
+            pullRequestTo: pullRequestTargetOf(run.id),
             ciFailing: publication !== null && publication.prNumber !== null && store.hasOpenCiEpisode(publication.githubRepo, publication.prNumber),
             files,
             outsideTouches: files.filter(one => one.outsideTouches).map(one => one.path),
@@ -10806,6 +11014,10 @@ function consoleSpend(summary) {
 function when(iso) {
     return iso === null ? "" : iso.slice(0, 16).replace("T", " ");
 }
+/** The same minute as a `<time>`: the full stamp on a desk, "16:39" / "Yesterday 16:39" / "Sep 28" on a phone. */
+function whenTime(iso) {
+    return iso === null ? "" : whenHtml(iso, when(iso));
+}
 /** Overdue is derived at render — display never writes. */
 function isOverdue(decision, now) {
     if (decision.state === "expired")
@@ -11293,7 +11505,7 @@ function agentsAvailabilityHtml(projection) {
     const items = [...seen.values()].map(leg => {
         const state = leg.readiness === "ready" ? "ready" : leg.readiness === "unavailable" ? "unavailable" : "not yet checked";
         const detail = leg.readiness === "unavailable" && leg.readinessReason !== null ? ` (${escape(leg.readinessReason)})` : "";
-        return `<li class="agents-availability-${escape(leg.readiness)}"><span class="mono">${escape(leg.provider)}</span> ${state}${detail}${leg.readinessRunner === null ? "" : ` <span class="meta">— ${escape(leg.readinessRunner)}${leg.observedAt === null ? "" : `, ${escape(when(leg.observedAt))}`}</span>`}</li>`;
+        return `<li class="agents-availability-${escape(leg.readiness)}"><span class="mono">${escape(leg.provider)}</span> ${state}${detail}${leg.readinessRunner === null ? "" : ` <span class="meta">— ${escape(leg.readinessRunner)}${leg.observedAt === null ? "" : `, ${whenTime(leg.observedAt)}`}</span>`}</li>`;
     });
     return `<p class="meta agents-availability-label">Availability right now</p><ul class="agents-availability">${items.join("")}</ul>`;
 }
@@ -11383,7 +11595,7 @@ function agentsCardHtml(taskId, view, csrf, canEdit) {
     const overrides = view.overrides.length === 0
         ? ""
         : `<ul class="agents-overrides">${view.overrides
-            .map(one => `<li><span>${escape(ROLE_NOUN[one.phase])} → <span class="mono">${escape(one.provider)} · ${escape(one.model)}</span> <span class="meta">by ${escape(one.by)} ${escape(when(one.at))}</span></span>` +
+            .map(one => `<li><span>${escape(ROLE_NOUN[one.phase])} → <span class="mono">${escape(one.provider)} · ${escape(one.model)}</span> <span class="meta">by ${escape(one.by)} ${whenTime(one.at)}</span></span>` +
             (canEdit && view.editable ? `<form method="post" action="${taskHref(taskId)}/route" class="agents-clear">${hidden}<input type="hidden" name="clear-phase" value="${escape(one.phase)}"><button type="submit" class="secondary" aria-label="clear the ${escape(ROLE_NOUN[one.phase].toLowerCase())} choice">clear</button></form>` : "") +
             `</li>`)
             .join("")}</ul>`;
@@ -11556,6 +11768,9 @@ ${THEME_MAPPING}
     --so-ease-out: cubic-bezier(.23, 1, .32, 1);
     --font-sans: "Geist", ui-sans-serif, system-ui, -apple-system, "Segoe UI", sans-serif;
     --font-mono: "Geist Mono", ui-monospace, "SF Mono", SFMono-Regular, Menlo, Consolas, monospace;
+    /* Phone spacing steps (760px and narrower): side gutter, gap under the
+       header, gap between page blocks, between rows, and inside a card. */
+    --so-phone-gutter: 14px; --so-phone-gap: 12px; --so-phone-block: 14px; --so-phone-row: 8px; --so-phone-card: 12px;
   }
   @media (prefers-color-scheme: dark) {
     :root:not([data-theme="light"]) {
@@ -12946,6 +13161,23 @@ ${THEME_DARK}
   .status-line[data-tone="ready"] .status-dot, .status-line[data-tone="done"] .status-dot { background: var(--success); }
   .status-line[data-tone="muted"] { color: var(--muted-foreground); font-weight: 500; }
   .status-line[data-tone="muted"] .status-dot { background: var(--border); }
+  .pull-request { display: grid; gap: .35rem; }
+  .pull-request p { margin: 0; overflow-wrap: anywhere; }
+  .pull-request-head { display: flex; flex-wrap: wrap; align-items: baseline; gap: .25rem .75rem; }
+  .pull-request-head a, .pull-request .meta a { display: inline-flex; align-items: center; min-height: 44px; }
+  .pull-request-head strong { font-size: 1.0625rem; font-weight: 600; color: var(--foreground); display: inline-flex; align-items: center; gap: .5rem; }
+  .pull-request-head strong::before { content: ""; width: .5rem; height: .5rem; border-radius: 999px; background: var(--muted-foreground); }
+  .pull-request--ok .pull-request-head strong::before { background: var(--success, #15803d); }
+  .pull-request--problem .pull-request-head strong::before { background: var(--destructive, #b91c1c); }
+  .pull-request-act { display: flex; flex-wrap: wrap; align-items: flex-end; gap: .5rem .75rem; margin: .25rem 0 0; }
+  .pull-request-act .meta { flex: 1 1 100%; }
+  .pull-request-act label { display: grid; gap: .25rem; flex: 1 1 12rem; margin: 0; }
+  .pull-request-act label input { margin: 0; min-height: 44px; box-sizing: border-box; width: 100%; }
+  .pull-request-act button { min-height: 44px; white-space: nowrap; }
+  .result-complete-actions { display: flex; flex-wrap: wrap; gap: .5rem; }
+  .result-complete-actions button { white-space: nowrap; }
+  .result-complete-actions button[name=publish], .pull-request-act button { background: var(--primary); color: var(--primary-foreground); border-color: var(--primary); font-weight: 600; }
+  @media (max-width: 480px) { .pull-request-act button, .result-complete-actions button { flex: 1 1 100%; } }
   .receipt-publication { position: relative; z-index: 1; margin: .35rem 0 0; font-size: .8125rem; color: var(--muted-foreground); }
   /* A raw repository path in ordinary copy wraps at any point rather than
      widening the page (the phone task-list overflow, package 1). */
@@ -14109,12 +14341,27 @@ button.pick-file { min-height: 1.75rem; padding: 0 .55rem; font-size: .75rem; }
   }
   .sticky-actions button { margin: 0; }
 }
+
+/* A time a person reads (when-html.ts): the full stamp on a desk, the short
+   one on a phone; the full stamp stays in the title. */
+.so-when-short { display: none; }
+@media (max-width: 760px) {
+  .so-when-full { display: none; }
+  .so-when-short { display: inline; }
+  /* Server pages outside the workspace keep the same phone rhythm. */
+  main { padding: var(--so-phone-gap) var(--so-phone-gutter) 3rem; }
+  h2 { margin: 1.25rem 0 .375rem; }
+  .card { padding: var(--so-phone-card); margin: var(--so-phone-row) 0; }
+  .problem { padding: .5rem .625rem; margin: var(--so-phone-row) 0; }
+  .meta, .hint { line-height: 1.35; }
+  details { margin: var(--so-phone-row) 0; }
+}
 `;
 /** Appearance: a three-way segmented switch, one tap per choice. */
 const THEME_CONTROLS_CSS = `.task-repo select{width:100%;min-height:2.75rem;font-size:1rem}.task-repo-add{margin:.35rem .1rem .5rem}.task-repo-add a{display:inline-flex;align-items:center;min-height:2.25rem}details.result-request-open.result-request-form>summary{border:0;background:transparent;padding:.5rem 0;min-height:2.75rem;font-weight:600;display:list-item;list-style:revert}details.result-request-open.result-request-form>summary::-webkit-details-marker{display:revert}form.js-autosave button[type=submit]{display:none}.provider-row{border-bottom:1px solid var(--so-line);padding:.35rem 0}.provider-row:first-of-type{border-top:1px solid var(--so-line)}.provider-head{display:flex;align-items:center;gap:.75rem;margin:.4rem 0 0}.provider-status{display:inline-flex;align-items:center;gap:.4rem;color:var(--so-muted);font-size:.875rem}.provider-status i{width:.5rem;height:.5rem;border-radius:50%;background:var(--so-muted)}.provider-status--ok i{background:var(--so-success)}.provider-status--warn i{background:var(--so-attention)}.provider-status--off i{background:transparent;border:1.5px solid var(--so-muted)}details.provider-manage>summary{cursor:pointer;color:var(--so-accent-text);font-size:.875rem;min-height:2.5rem;display:list-item;padding-block:.5rem}.card.props .row{display:grid;gap:.1rem;margin:0 0 .75rem}.card.props .row>.meta{display:block;font-size:.75rem}.card.props .row>.meta::first-letter{text-transform:uppercase}.card.props .row>.mono{font-family:var(--font-sans);font-size:.875rem}.card.props .row>.mono .seal{font-family:var(--font-mono);font-size:.8125rem}details.evidence-files{margin:1rem 0}details.evidence-files>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:600}details.evidence-files ul{list-style:none;margin:0;padding:0}details.evidence-files li{display:flex;justify-content:space-between;gap:1rem;padding:.5rem 0;border-bottom:1px solid var(--so-line)}.result-action .result-feedback-link{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;text-decoration:none}@media(hover:hover) and (pointer:fine){.result-action .result-feedback-link:hover{background:var(--so-raised)}}.so-sr-only{position:absolute!important;width:1px!important;height:1px!important;padding:0!important;margin:-1px!important;overflow:hidden!important;clip:rect(0,0,0,0)!important;white-space:nowrap!important;border:0!important}.verdict{margin:.5rem 0 .75rem}.verdict-chips{display:flex;flex-wrap:wrap;gap:.4rem;list-style:none;padding:0;margin:0}.verdict-chip{display:inline-flex;align-items:center;gap:.3rem;min-height:1.75rem;padding:.2rem .65rem;border-radius:999px;font-size:.8125rem;font-weight:600;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}.verdict-chip svg{width:.9rem;height:.9rem}.verdict-chip--success{background:var(--so-success-soft);color:var(--so-success)}.verdict-chip--danger{background:var(--so-danger-soft);color:var(--so-danger)}.verdict-chip--warning{background:var(--so-warning-soft);color:var(--so-warning)}.verdict-chip--info{background:var(--so-info-soft);color:var(--so-info)}.verdict-by{margin:.4rem 0 0}details.result-request-open{margin:.5rem 0}details.result-request-open>summary{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;cursor:pointer;list-style:none}details.result-request-open>summary::-webkit-details-marker{display:none}details.result-request-open[open]>summary{margin-bottom:.75rem}.settings-tiles{display:grid;grid-template-columns:repeat(auto-fill,minmax(8.5rem,1fr));gap:.5rem;margin:0 0 2rem}.settings-tiles a{display:flex;align-items:center;gap:.6rem;min-height:3rem;padding:.65rem .8rem;border:1px solid var(--so-line);border-radius:.625rem;background:var(--so-paper);color:var(--so-ink);text-decoration:none;font-weight:550;font-size:.875rem}@media(hover:hover) and (pointer:fine){.settings-tiles a:hover{border-color:var(--so-input-line);background:var(--so-raised)}}.settings-tiles svg{width:1.1rem;height:1.1rem;flex-shrink:0;color:var(--so-accent-text)}details.settings-more{margin:.25rem 0 1.25rem}details.settings-more>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:550}details.settings-more>summary .meta{font-weight:400;margin-left:.35rem}.settings-changed{margin-top:-.25rem}.appearance{margin:0 0 28px}.appearance h2{margin:0 0 10px}.theme-switch{display:inline-flex;flex-wrap:nowrap;max-width:100%;gap:4px;padding:4px;margin:0;border:1px solid var(--so-line);border-radius:10px;background:var(--so-raised)}.theme-switch .theme-choice,.so-native-region .theme-switch .theme-choice{flex:1 1 0;width:auto;white-space:nowrap;min-height:40px;padding:8px 16px;border:0;border-radius:7px;background:transparent;color:var(--so-muted);font:inherit;font-weight:550;box-shadow:none;cursor:pointer}@media(hover:hover) and (pointer:fine){.theme-switch .theme-choice:hover{color:var(--so-ink)}}.theme-switch .theme-choice[aria-pressed="true"]{background:var(--so-paper);color:var(--so-ink);box-shadow:0 1px 2px rgb(0 0 0 / .1)}.appearance .meta{margin:8px 0 0}@media(max-width:600px){.theme-switch .theme-choice{min-height:44px}}.update-notes{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit;max-height:18rem;overflow:auto}`;
 /** The page CSS this module writes itself (not the imported modules'), for the stylesheet contract tests. */
 export const PAGE_CSS = STYLE + THEME_CONTROLS_CSS;
-const WORKSPACE_STYLE = styleAsset(STYLE + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + TEAMMATE_CSS + KITS_CSS + SSO_CSS + CREDENTIALS_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + LEAD_CONTEXT_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
+const WORKSPACE_STYLE = styleAsset(STYLE + APPROVAL_RULES_CSS + SPEND_CSS + RETENTION_CSS + STORAGE_CSS + UPDATES_CSS + LIMITS_CSS + MONITORING_CSS + INTEGRATIONS_CSS + BACKUP_CSS + EXPORT_CSS + PROJECT_DELETE_CSS + POLICY_CSS + EVIDENCE_PACK_CSS + THEME_CONTROLS_CSS + CODING_CSS + CODING_SHIPPING_CSS + RECIPE_CSS + SKILLS_CSS + TOOLS_CSS + FLOWS_CSS + TEAMMATE_CSS + KITS_CSS + STARTERS_CSS + SSO_CSS + CREDENTIALS_CSS + KNOWLEDGE_CSS + MODELS_CSS + CHAT_POLISH_CSS + TRANSITIONS_CSS + WORKSPACE_MOTION_CSS + ASSIGNMENT_CSS + LEAD_CONTEXT_CSS + PULL_REQUEST_SETTINGS_CSS + '.learning{min-width:0;overflow-wrap:anywhere}.learning .card{min-width:0}.learning code,.learning blockquote,.learning pre{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word}.learning button,.learning summary,.learning .button-link{min-height:44px}.learning button{white-space:nowrap}.learning summary{padding:12px 0;cursor:pointer}.learning form{margin:12px 0}.learning select{max-width:100%}.learning blockquote{margin:8px 0}.learning ul{padding-left:20px}');
 /**
  * The board's liveness: fetch this page's own fragment on a timer and swap
  * it in place — no flicker, no scroll reset, no long-lived stream to manage,
@@ -14784,7 +15031,7 @@ function inboxPage(chrome, data) {
         : `<div class="card builder-notice" data-builder-status="${data.worker.registered === 0 ? "not-connected" : "disconnected"}">` +
             (data.worker.registered === 0
                 ? `<strong>No builder is connected yet.</strong> Toolroll is open, but no machine is connected to do project work. On the machine where the project lives, open that folder and run <span class="mono">toolroll up</span>. Keep Toolroll running; approved work starts automatically.`
-                : `<strong>Builder disconnected.</strong> ${data.worker.registered} builder${data.worker.registered === 1 ? " is" : "s are"} configured, last checked in ${data.worker.lastHeard === null ? "never" : escape(when(data.worker.lastHeard))}. Reopen Toolroll on that machine. Queued work starts automatically when a builder reconnects.`) +
+                : `<strong>Builder disconnected.</strong> ${data.worker.registered} builder${data.worker.registered === 1 ? " is" : "s are"} configured, last checked in ${data.worker.lastHeard === null ? "never" : whenTime(data.worker.lastHeard)}. Reopen Toolroll on that machine. Queued work starts automatically when a builder reconnects.`) +
             `</div>`;
     return screen("inbox", [
         `<h1>Inbox</h1>`,
@@ -14852,8 +15099,8 @@ function systemPage(chrome, data) {
         ? ""
         : `<div class="stat-card"><span class="k"><span class="dot ${data.episode.endedAt === null ? "dot-ok pulse" : "dot-off"}"></span>Toolroll</span>` +
             `<span class="v">${data.episode.endedAt === null
-                ? `running since ${escape(when(data.episode.startedAt))}`
-                : `last run: ${data.episode.built} built, ${data.episode.broke} broke \u00b7 ended ${escape(when(data.episode.endedAt))}`}</span></div>`;
+                ? `running since ${whenTime(data.episode.startedAt)}`
+                : `last run: ${data.episode.built} built, ${data.episode.broke} broke \u00b7 ended ${whenTime(data.episode.endedAt)}`}</span></div>`;
     const cards = [...runnerCards, watchCard, ...worktreeCards].filter(one => one !== "");
     const PHASE_SAID = {
         plan: "planning sessions ask questions and draft the plan you approve",
@@ -15123,7 +15370,7 @@ function donePage(chrome, rows, ciRed) {
             return (`<div class="card"><p><a href="${taskHref(row.taskId)}"><strong>${escape(row.title)}</strong></a>` +
                 `${row.outcome === "no-change" ? ` <span class="badge">no change needed</span>` : ""}${pr}${needsVerification}${criterionMatrixSummary(row.proofMatrix)}</p>` +
                 `${row.handoff === null ? "" : `<p class="meta">${escape(row.handoff.length > 200 ? row.handoff.slice(0, 200) + "\u2026" : row.handoff)}</p>`}` +
-                `<p class="meta mono">${escape(row.taskId)} \u00b7 ${escape(when(row.completedAt))}${row.ranMinutes === null ? "" : ` \u00b7 ran ${row.ranMinutes}m`}${row.provider === null ? "" : ` \u00b7 ${escape(runCostWords({ authMode: row.authMode, costUsd: row.costUsd, tokensIn: null, tokensOut: null }))}`}` +
+                `<p class="meta mono">${escape(row.taskId)} \u00b7 ${whenTime(row.completedAt)}${row.ranMinutes === null ? "" : ` \u00b7 ran ${row.ranMinutes}m`}${row.provider === null ? "" : ` \u00b7 ${escape(runCostWords({ authMode: row.authMode, costUsd: row.costUsd, tokensIn: null, tokensOut: null }))}`}` +
                 ` \u00b7 <a href="${reviewHref(row.taskId)}">review \u2192</a></p></div>`);
         })
             .join("\n");
@@ -16560,7 +16807,7 @@ function routineScreenPage(chrome, data) {
         `<p class="meta">${routine.paused ? "resuming fires again at the next due slot" : "pausing stops firing instantly; a running instance finishes"}${runNowForm === "" ? "" : " · run now spawns an extra instance without touching the schedule — spend outside the schedule takes your password again"}</p>` +
         `</div>`;
     const ledger = fires.length === 0
-        ? `<p class="meta">No firings yet${approved && routine.nextFireAt !== null ? ` — first at ${escape(when(routine.nextFireAt))}` : ""}.</p>`
+        ? `<p class="meta">No firings yet${approved && routine.nextFireAt !== null ? ` — first at ${whenTime(routine.nextFireAt)}` : ""}.</p>`
         : fires
             .map(fire => {
             const said = fire.outcome === "fired"
@@ -16569,7 +16816,7 @@ function routineScreenPage(chrome, data) {
                     : `<a href="${taskHref(fire.instanceTaskId)}" class="mono">${escape(fire.instanceTaskId)}</a>${fire.instanceState === null ? "" : ` <span class="badge badge-${escape(fire.instanceState)}">${escape(fire.instanceState)}</span>`}`
                 : `<span class="meta">skipped — ${escape(fire.reason ?? "")}</span>`;
             const slot = fire.scheduledFor.replace(/^manual:/, "");
-            return `<p class="row">${said}<span class="right meta mono">${fire.reason === "manual" ? "run now · " : ""}${escape(when(slot))}</span></p>`;
+            return `<p class="row">${said}<span class="right meta mono">${fire.reason === "manual" ? "run now · " : ""}${whenTime(slot)}</span></p>`;
         })
             .join("\n");
     return screen(`routine · ${routine.name}`, [
@@ -16581,7 +16828,7 @@ function routineScreenPage(chrome, data) {
             ? `<div class="problem">stopped behind <a href="${taskHref(data.blocker.taskId)}" class="mono">${escape(data.blocker.taskId)}</a> (${escape(data.blocker.state)}) — the track resumes when it finishes or is cancelled</div>`
             : "",
         approved && !routine.paused && routine.nextFireAt !== null
-            ? `<p class="meta">next fire ${escape(when(routine.nextFireAt))}</p>`
+            ? `<p class="meta">next fire ${whenTime(routine.nextFireAt)}</p>`
             : "",
         "<h2>the standing order</h2>",
         terms,
@@ -16675,8 +16922,8 @@ function homePage(chrome, data) {
         ? ""
         : `<div class="stat-card"><span class="k"><span class="dot ${data.episode.endedAt === null ? "dot-ok pulse" : "dot-off"}"></span>Toolroll</span>` +
             `<span class="v">${data.episode.endedAt === null
-                ? `running since ${escape(when(data.episode.startedAt))}`
-                : `last window: ${data.episode.built} built, ${data.episode.broke} broke \u00b7 ended ${escape(when(data.episode.endedAt))}`}</span></div>`;
+                ? `running since ${whenTime(data.episode.startedAt)}`
+                : `last window: ${data.episode.built} built, ${data.episode.broke} broke \u00b7 ended ${whenTime(data.episode.endedAt)}`}</span></div>`;
     const fleetCards = [...runnerCards, watchCard, ...worktreeCards].filter(one => one !== "");
     const fleet = fleetCards.length === 0
         ? `<h2>system status</h2><p class="hint">No builder is connected yet. On the machine where the project lives, open that folder and run <code>toolroll up</code>.</p>`
@@ -17357,7 +17604,7 @@ function contestPage(chrome, data) {
             `only one result will be kept as the task's outcome; the rest stay archived with their evidence</p>`,
         data.problem === null ? "" : `<div class="problem">${escape(data.problem)}</div>`,
         `<p class="row"><strong>${escape((CONTEST_STATE_WORDS[contest.state] ?? "the tournament is in an unexpected state — the records have the detail").replace(/tournament/g, contestNoun(contest.kind)))}</strong></p>`,
-        contest.pickedBy === null ? "" : `<p class="meta">picked by ${escape(contest.pickedBy)} at ${escape(when(contest.pickedAt ?? ""))}</p>`,
+        contest.pickedBy === null ? "" : `<p class="meta">picked by ${escape(contest.pickedBy)} at ${whenTime(contest.pickedAt ?? "")}</p>`,
         contest.kind === "comparison"
             ? `<p class="row"><strong>spend</strong> ${escape(contestDollars(data.totalMicrousd))} measured on the lanes that report dollars` +
                 `${data.anyUnknown ? ` <span class="meta">— the rest report tokens only</span>` : ""}</p>`
@@ -17554,7 +17801,7 @@ function githubReposPage(chrome, data) {
                     `<div class="row"><strong>${escape(repo.nameWithOwner)}</strong>${repo.isPrivate ? ` <span class="badge">private</span>` : ""}`,
                     `<span class="right">${action}</span></div>`,
                     localPath === null
-                        ? `<p class="meta">not on this machine yet${/^\d{4}-\d{2}-\d{2}T/.test(repo.updatedAt) ? ` · pushed ${escape(when(repo.updatedAt))}` : ""}</p>`
+                        ? `<p class="meta">not on this machine yet${/^\d{4}-\d{2}-\d{2}T/.test(repo.updatedAt) ? ` · pushed ${whenTime(repo.updatedAt)}` : ""}</p>`
                         : `<p class="meta mono" style="overflow-wrap:anywhere;margin:.2rem 0">${escape(localPath)}</p>`,
                     repo.description === "" ? "" : `<p class="meta">${escape(repo.description)}</p>`,
                     `</div>`,
@@ -17568,7 +17815,7 @@ function githubReposPage(chrome, data) {
         `<p class="row" style="margin-top:.6rem"><a class="badge" href="/projects">← back to projects</a></p>`,
     ].join("\n"), { chrome });
 }
-function projectsPage(chrome, recent, candidates, open, csrf, problem, _unscopedMode, browsable = false, onboard = null, peeks = {}, returnTo = "/") {
+function projectsPage(chrome, recent, candidates, open, csrf, problem, _unscopedMode, browsable = false, onboard = null, peeks = {}, returnTo = "/", pullRequestsOn) {
     // The onboarding card (repo onboarding, findings 1-39): preview first,
     // then a password-confirmed clone into a configured root. Disabled
     // states explain themselves in words (finding 28/39).
@@ -17658,6 +17905,7 @@ function projectsPage(chrome, recent, candidates, open, csrf, problem, _unscoped
         return {
             name, path, shortPath: path.startsWith(`${home}/`) ? `~${path.slice(home.length)}` : path, open: open !== null && open === path, openedAt,
             knowledgeHref: `/settings/knowledge?repo=${encodeURIComponent(path)}`,
+            ...(pullRequestsOn === undefined ? {} : { pullRequests: { href: `/settings/pull-requests?repo=${encodeURIComponent(path)}`, on: pullRequestsOn(path) } }),
             peek: peek === null ? null : [
                 ...(peek.waiting > 0 ? [{ label: `${peek.waiting} waiting on you`, href: "/", tone: "attention" }] : []),
                 ...(peek.running > 0 ? [{ label: `${peek.running} running`, href: "/runs", tone: "neutral" }] : []),
@@ -18254,7 +18502,7 @@ function planRevisionLedgerHtml(ledger, taskId, csrf) {
         : `<details class="plan-revision-history"><summary>revision history (${ledger.history.length})</summary>` +
             ledger.history
                 .map(one => `<p class="row"><span class="mono">rev ${one.revision}</span> <span class="badge">${escape(one.status)}</span> ` +
-                `<span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span> — ${escape(one.reason)}</p>`)
+                `<span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)}</span> — ${escape(one.reason)}</p>`)
                 .join("\n") +
             `</details>`;
     return (`<div class="card plan-revision"><span class="eyebrow">plan updated</span><h2>Using plan revision ${current.revision}</h2>` +
@@ -18591,7 +18839,7 @@ function taskBodyParts(data) {
                     ? `attached to build #${one.attachedRun} — delivery not yet proven`
                     : "waiting for the next attempt";
     const steerRows = steering
-        .map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))} · ${escape(steerState(one))}</span> ` +
+        .map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)} · ${escape(steerState(one))}</span> ` +
         `${escape(one.note)}</p>`)
         .join("\n");
     const steerForm = data.csrf === "" || task.state === "done" || task.state === "cancelled" || (data.contest ?? null) !== null
@@ -18607,7 +18855,7 @@ function taskBodyParts(data) {
         : `<h2>holds</h2>` +
             data.holds
                 .map(hold => `<p class="row">${escape(holdOwnerWords(hold.ownerKind))} — ${escape(hold.reason)}` +
-                `${hold.until === null ? "" : ` <span class="meta">until ${escape(when(hold.until))}</span>`}</p>`)
+                `${hold.until === null ? "" : ` <span class="meta">until ${whenTime(hold.until)}</span>`}</p>`)
                 .join("\n") +
             `<p class="meta">only your hold can be lifted here — waits caused by questions, incidents, or retry delays clear on their own</p>`;
     const approval = approvalOf(scope);
@@ -18633,7 +18881,7 @@ function taskBodyParts(data) {
             })(),
             acceptanceCeremonyHtml(scope.acceptance),
             approval.approved
-                ? `<p class="meta scope-seal">Approved by ${escape(approval.by)} · ${escape(when(approval.at))} · <span class="seal">signs ${shortDigest(scope.digest)}</span><span class="so-sr-only"> — approval binds to this exact wording</span></p>`
+                ? `<p class="meta scope-seal">Approved by ${escape(approval.by)} · ${whenTime(approval.at)} · <span class="seal">signs ${shortDigest(scope.digest)}</span><span class="so-sr-only"> — approval binds to this exact wording</span></p>`
                 : `<p class="meta"><span class="seal">signs ${shortDigest(scope.digest)}</span> — approval binds to this exact wording</p>` +
                     `<p class="meta">Not approved${approval.reason === "changed" ? " — approved once, then rewritten" : ""}</p>`,
             `</div>`,
@@ -18839,7 +19087,7 @@ function taskBodyParts(data) {
             ? [
                 `<div class="card" data-attended="${escape(attended.open.id)}">`,
                 `<p><strong>attended session</strong> <span class="meta">${escape(attended.open.state)}</span></p>`,
-                `<p class="meta">${attended.open.running ? "the agent is running — your open console keeps it live" : "waiting to dispatch to this machine"} · ${attended.open.turnsUsed}/${attended.open.cap} messages · $${(attended.open.spentMicrousd / 1_000_000).toFixed(2)} of $${(attended.open.budgetMicrousd / 1_000_000).toFixed(2)} · everything ends by ${escape(when(attended.open.expiresAt))}</p>`,
+                `<p class="meta">${attended.open.running ? "the agent is running — your open console keeps it live" : "waiting to dispatch to this machine"} · ${attended.open.turnsUsed}/${attended.open.cap} messages · $${(attended.open.spentMicrousd / 1_000_000).toFixed(2)} of $${(attended.open.budgetMicrousd / 1_000_000).toFixed(2)} · everything ends by ${whenTime(attended.open.expiresAt)}</p>`,
                 `<p class="meta">this page being open keeps it alive — close it and the session winds down within a minute</p>`,
                 `<form method="post" action="${taskHref(task.id)}/attend-revoke" class="inline">`,
                 `<input type="hidden" name="csrf" value="${escape(data.csrf)}">`,
@@ -18992,7 +19240,7 @@ function taskBodyParts(data) {
                     runOutcomeBadge(run, run.id === liveHistoryRunId) +
                     `${run.reason === null ? "" : ` <span class="meta">${escape(reasonWords(run.reason))}</span>`}` +
                     ` <span class="meta mono">${escape(bits.join(" · "))}</span>` +
-                    `<span class="right meta mono">${escape(when(run.startedAt))}</span></p>`);
+                    `<span class="right meta mono">${whenTime(run.startedAt)}</span></p>`);
             })
                 .join("\n");
     // ---- the right rail (slice 1c) ------------------------------------------
@@ -19047,6 +19295,9 @@ function taskBodyParts(data) {
             return "no project — no publication grant can apply";
         if (grant === null)
             return "branch only — publishing is not set up";
+        if (grant.publishOn === "complete") {
+            return `pull requests to ${grant.githubRepo} into ${grant.base} when completed · ${grant.mergeWhenGreen === true ? "merges when checks pass" : "a person merges"} (${grant.mergeMethod ?? "squash"})`;
+        }
         return [
             grant.capabilities.includes("push-branch") ? `may push ${grant.headPrefix}* to ${grant.githubRepo}` : "cannot push",
             grant.capabilities.includes("open-pr") ? `may open a PR against ${grant.base}${grant.draft ? " (draft)" : ""}` : null,
@@ -19068,7 +19319,7 @@ function taskBodyParts(data) {
     const scopeRow = scope === null
         ? prop("scope", "none yet")
         : approval.approved
-            ? prop("approved scope", `<span class="seal">signs ${shortDigest(scope.digest)}</span> · ${escape(qualityModeTitle(scope.qualityMode ?? "default"))} · approved by ${escape(approval.by)} · ${escape(when(approval.at))}`)
+            ? prop("approved scope", `<span class="seal">signs ${shortDigest(scope.digest)}</span> · ${escape(qualityModeTitle(scope.qualityMode ?? "default"))} · approved by ${escape(approval.by)} · ${whenTime(approval.at)}`)
             : prop("scope", approval.reason === "changed" ? "rewritten since its approval — needs a new yes" : "not approved");
     const strikesRow = data.strikes > 0 ? prop("strikes", `${data.strikes} failed attempt(s)`) : "";
     const propsCard = `<div class="card props">${workerRow}${queueRow}${scopeRow}${publishesRow}${economics}${strikesRow}</div>`;
@@ -19102,7 +19353,8 @@ function taskBodyParts(data) {
         facts.push({ label: "Budget", parts: [`${data.budgetHold} · `, { label: "Spend", href: "/spend" }] });
     if (data.policyHold != null)
         facts.push({ label: "Policy", parts: [`${data.policyHold} · `, { label: "Policy", href: "/settings/policy" }] });
-    if (data.publication !== null && data.publication !== undefined) {
+    // The pull-request card already says this once, with its action.
+    if (data.publication !== null && data.publication !== undefined && data.pullRequest?.view == null) {
         const prHref = safePrUrl(data.publication.prUrl), pr = `PR #${data.publication.prNumber ?? "?"}`;
         facts.push({ label: "Published", parts: [prHref === null ? pr : { label: pr, href: prHref },
                 ` · ${data.publication.state}${data.publication.remoteState !== null ? ` · ${data.publication.remoteState.toLowerCase()} on GitHub` : ""}${data.publication.lastCheckState !== null ? ` · CI ${data.publication.lastCheckState} at last observation` : " · no checks observed"}`] });
@@ -19283,7 +19535,9 @@ function taskBodyParts(data) {
             : data.filedVia === null || data.filedVia === undefined
                 ? ""
                 : ` · filed via ${escape(data.filedVia)}`}${data.deliverable === "report" ? ` · <span class="badge">scout</span>` : ""}</p>`;
-    const assignmentOptions = data.assignment == null ? null : { workStatus: status, hideAction: approveForm !== "" && data.dispatch?.action === "approve-scope", problem: status.tone === "problem", diagnostics: [...(status.diagnostics ?? []), ...(status.tone === "problem" && status.detail !== data.assignment.detail ? [status] : [])] };
+    // A pull request that can be merged (or opened) owns the one primary action; the result stays in its section.
+    const pullRequestActs = data.csrf !== "" && (data.pullRequest?.view?.canMerge === true || (data.pullRequest?.view == null && data.pullRequest?.offer != null));
+    const assignmentOptions = data.assignment == null ? null : { workStatus: status, hideAction: (approveForm !== "" && data.dispatch?.action === "approve-scope") || pullRequestActs, problem: status.tone === "problem", diagnostics: [...(status.diagnostics ?? []), ...(status.tone === "problem" && status.detail !== data.assignment.detail ? [status] : [])] };
     // The result takes over from the task status as soon as it is ready.
     const statusHtml = (data.assignment != null && assignmentOptions !== null ? assignmentSummaryHtml(data.assignment, assignmentOptions) : receiptLeads ? completionReceiptCard(data.completion.receipt, task.id, "task", status) : taskStatusCard(status, task.id, data.dispatch ?? null, liveRunId, approveForm !== "" && data.dispatch?.action === "approve-scope")) + checkProgressHtml(data.checkProgress ?? null);
     // The exact-run control (v52), directly under the scheduler's answer:
@@ -19413,6 +19667,7 @@ function taskBodyParts(data) {
         approval: approvalHtml,
         lead: [
             { key: "history", html: data.history ?? "" }, { key: "control", html: controlHtml }, { key: "problem", html: problemHtml },
+            { key: "pull-request", html: data.pullRequest == null ? "" : pullRequestCardHtml(data.pullRequest, data.csrf) },
             { key: "needs-scope", html: needsScopeCard }, { key: "progress", html: progressCard }, { key: "revisions", html: revisionLedgerCard },
             { key: "plan", html: planCard }, { key: "mirror", html: mirrorCard }, { key: "contest", html: contestCard }, { key: "attempt", html: attemptPanel },
         ].filter(one => one.html !== ""),
@@ -19428,6 +19683,11 @@ function taskBodyParts(data) {
             { id: "task-diagnostics", title: "Task options", html: optionsHtml, open: optionsOpen, count: null },
         ],
         cancel: cancelForm === "" ? null : { html: cancelForm, open: data.cancelDraft !== undefined },
+        // "Do this every time…": the starter flow that does this kind of work on its own, one yes away.
+        everyTime: data.repo === null || data.csrf === "" ? null : (() => {
+            const starter = starterForWork(`${task.title}\n${scope?.goal ?? ""}`);
+            return { href: `/settings/flows?repo=${encodeURIComponent(data.repo)}&starter=${starter.id}#starter-${starter.id}`, starter: starter.name };
+        })(),
     };
     return { html, view };
 }
@@ -19770,7 +20030,7 @@ function reviewCockpitPage(chrome, data) {
                     : `<span class="cockpit-why">${statusLineHtml(status)}</span>`;
                 return (`<li data-review-priority="${row.priority.band}"><a class="cockpit-row${current ? " current" : ""}" href="${escape(reviewHref(row.taskId, row.runId, row.repo))}"${current ? ` aria-current="page"` : ""}>` +
                     `<span class="cockpit-row-head"><strong>${escape(row.title)}</strong></span>` +
-                    `<span class="cockpit-row-meta">${escape(when(row.completedAt))}${row.runId === null ? " · no build" : row.outcome === "no-change" ? " · no change" : ""}${row.prNumber === null ? "" : ` · PR #${row.prNumber}`}</span>` +
+                    `<span class="cockpit-row-meta">${whenTime(row.completedAt)}${row.runId === null ? " · no build" : row.outcome === "no-change" ? " · no change" : ""}${row.prNumber === null ? "" : ` · PR #${row.prNumber}`}</span>` +
                     (row.historyProblem ? `<span class="cockpit-why" data-history-problem>History unavailable</span>` : why) +
                     (status !== null && row.ciFailing ? `<span class="cockpit-why">CI is failing</span>` : "") +
                     `</a></li>`);
@@ -19858,7 +20118,7 @@ function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user)
                 ? "the scope changed after approval — the words below are the current text, not the signed one"
                 : "never approved — the result was built without a signed scope";
         const approval = intent.approval.approved
-            ? `approved by ${escape(intent.approvedBy ?? "an operator")} · ${escape(when(intent.approval.at))}`
+            ? `approved by ${escape(intent.approvedBy ?? "an operator")} · ${whenTime(intent.approval.at)}`
             : approvalWords;
         const body = `<p class="recap" style="margin-top:.25rem"><strong>goal</strong> ${escape(intent.goal)}</p>` +
             (intent.outOfScope === null ? `<p class="meta">no boundary was stated</p>` : `<p class="recap"><strong>not this</strong> ${escape(intent.outOfScope)}</p>`) +
@@ -19917,10 +20177,10 @@ function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user)
     const complete = assignment?.state === "ready-to-check" && assignment.receipt !== null && canRetryReview && csrf !== ""
         ? { action: `${taskHref(view.taskId)}/complete`, receipt: assignment.receipt.digest, run: run.id } : null;
     if (complete !== null)
-        parts.push(completionForm(view.taskId, run.id, complete.receipt, csrf));
+        parts.push(completionForm(view.taskId, run.id, complete.receipt, csrf, view.detail?.pullRequestTo ?? null));
     if (view.notes.length > 0) {
         parts.push(`<section class="card cockpit-section" data-cockpit-section="notes"><h3>operator notes</h3>` +
-            view.notes.map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span> ${escape(one.note)}</p>`).join("\n") +
+            view.notes.map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)}</span> ${escape(one.note)}</p>`).join("\n") +
             `</section>`);
     }
     return {
@@ -19931,8 +20191,41 @@ function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user)
         },
     };
 }
-function completionForm(taskId, runId, digest, csrf) {
-    return `<form method="post" action="${taskHref(taskId)}/complete" class="card result-complete"><input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="receipt" value="${escape(digest)}"><input type="hidden" name="run" value="${runId}"><p class="meta">After inspecting the work, mark this result complete. Checks stay unchanged; nothing is published or deployed.</p><button type="submit" style="min-height:44px">Mark complete</button></form>`;
+function completionForm(taskId, runId, digest, csrf, pullRequestTo = null) {
+    const hidden = `<input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="receipt" value="${escape(digest)}"><input type="hidden" name="run" value="${runId}">`;
+    if (pullRequestTo !== null) {
+        // With pull requests set up: the PR is the primary road, a bare completion the quiet one beside it.
+        return `<form method="post" action="${taskHref(taskId)}/complete" class="card result-complete">${hidden}<p class="meta">After inspecting the work, mark this result complete. A pull request opens on ${escape(pullRequestTo)} from this exact commit.</p><div class="result-complete-actions"><button type="submit" name="publish" value="1" style="min-height:44px">Complete and open a pull request</button><button type="submit" class="secondary" style="min-height:44px">Complete only</button></div></form>`;
+    }
+    return `<form method="post" action="${taskHref(taskId)}/complete" class="card result-complete">${hidden}<p class="meta">After inspecting the work, mark this result complete. Checks stay unchanged; nothing is published or deployed.</p><button type="submit" style="min-height:44px">Mark complete</button></form>`;
+}
+/** The pull request, in one card: its state and link, one line of detail, and the one action it needs — Merge
+ * behind the password when checks passed, or Open a pull request for a result completed without one. */
+function pullRequestCardHtml(pr, csrf) {
+    if (pr.view === null) {
+        if (pr.offer === null || csrf === "")
+            return "";
+        return `<section class="card pull-request" id="merge" data-pull-request="none"><div class="pull-request-head"><strong>No pull request</strong></div>` +
+            `<p class="meta">This result was completed without one.</p>` +
+            `<form method="post" action="${taskHref(pr.offer.taskId)}/complete" class="pull-request-act"><input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="receipt" value="${escape(pr.offer.digest)}"><input type="hidden" name="run" value="${pr.offer.runId}"><input type="hidden" name="publish" value="1">` +
+            `<button type="submit" class="secondary">Open a pull request</button></form></section>`;
+    }
+    const view = pr.view;
+    const url = safePrUrl(view.prUrl);
+    const link = view.prNumber === null ? "" : url === null ? `<span class="mono">PR #${view.prNumber}</span>` : `<a href="${escape(url)}" class="mono" rel="noreferrer" target="_blank">PR #${view.prNumber}</a>`;
+    const tone = view.state === "ready" || view.state === "merged" ? "ok" : view.state === "failing" || view.state === "failed" || view.state === "closed" ? "problem" : "waiting";
+    const revision = view.revisionTask === null || view.state !== "failing" ? "" : ` <a href="${taskHref(view.revisionTask)}">Open revision</a>`;
+    const merged = view.mergeCommit === null ? "" : `<p class="meta">Merge commit <span class="mono">${escape(view.mergeCommit.slice(0, 12))}</span></p>`;
+    const target = pr.target === null ? "the base branch" : pr.target;
+    const act = !view.canMerge || csrf === "" || view.prNumber === null ? "" :
+        `<form method="post" action="${taskHref(pr.taskId)}/merge" class="pull-request-act" data-merge-form>` +
+            `<input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="run" value="${view.runId}">` +
+            `<p class="meta">${escape(view.mergeMethod === "squash" ? "Squash-merges" : view.mergeMethod === "rebase" ? "Rebase-merges" : "Merges")} PR #${view.prNumber} into ${escape(target)} and deletes its branch.</p>` +
+            `<label>Password<input type="password" name="token" autocomplete="current-password" required></label>` +
+            `<button type="submit">Merge</button></form>`;
+    return `<section class="card pull-request pull-request--${tone}" id="merge" data-pull-request="${escape(view.state)}">` +
+        `<div class="pull-request-head"><strong>${escape(view.label)}</strong>${link}</div>` +
+        `<p class="meta">${escape(view.detail)}${revision}</p>${merged}${act}</section>`;
 }
 /** Exactly one primary road per result, chosen from its state; the
  * others stay reachable from their own sections. Every form posts to the
@@ -20083,7 +20376,7 @@ function runsPage(chrome, rows, liveIds, nextCursor, verdicts = new Map(), accep
                 needsVerification +
                 criterionMatrixSummary(verdicts.get(run.id)?.matrix ?? []) +
                 `${run.provider === "claude" ? "" : ` <span class="meta mono">${escape(run.provider)}</span>`}` +
-                `<span class="right meta mono">${escape(when(run.startedAt))}` +
+                `<span class="right meta mono">${whenTime(run.startedAt)}` +
                 `${run.providerStartedAt === null && run.tokensIn === null && run.tokensOut === null && run.costUsd === null ? "" : ` \u00b7 ${escape(runCostWords(run, liveIds.has(run.id)))}`}</span></p>`);
         })
             .join("\n");
@@ -20580,7 +20873,7 @@ function evidenceBundleCard(view, run, publication = null, review = null) {
         parts.push(`<p class="row" data-proof-verdict="${escape(dispatchStatusToken(view.verdict))}">${statusLineHtml(status)} <span class="meta">${escape(verificationExplanation(view.verdict, view.reasons))}</span></p>`);
     }
     if (view.accepted !== null) {
-        parts.push(`<p class="meta">Accepted with an exception by <span class="mono">${escape(view.accepted.by)}</span> · ${escape(when(view.accepted.at))}${view.accepted.note === null ? "" : ` — ${escape(view.accepted.note)}`}</p>`);
+        parts.push(`<p class="meta">Accepted with an exception by <span class="mono">${escape(view.accepted.by)}</span> · ${whenTime(view.accepted.at)}${view.accepted.note === null ? "" : ` — ${escape(view.accepted.note)}`}</p>`);
     }
     parts.push(criterionMatrixHtml(view.matrix, { runId, links: view.matrixLinks }));
     parts.push(semanticCoverageHtml(view.matrix, view.qualityMode));
@@ -20856,7 +21149,7 @@ function resultPanelParts(detail, o) {
         (publication === null || publication.prNumber === null
             ? ""
             : ` ${prUrl === null ? `<span class="mono">PR #${publication.prNumber}</span>` : `<a href="${escape(prUrl)}">PR #${publication.prNumber}</a>`}` +
-                `<span class="meta" data-ci-observed="${escape(detail.ciFailing ? "failing" : (publication.lastCheckState ?? "none"))}"> · ${detail.ciFailing ? "CI failing at the last check" : publication.lastCheckState === "passing" ? `CI passing, observed ${escape(when(publication.lastCheckAt))}` : publication.lastCheckState === "running" ? "CI still running at the last check" : "no CI checks found — verify on GitHub"}</span>`) +
+                `<span class="meta" data-ci-observed="${escape(detail.ciFailing ? "failing" : (publication.lastCheckState ?? "none"))}"> · ${detail.ciFailing ? "CI failing at the last check" : publication.lastCheckState === "passing" ? `CI passing, observed ${whenTime(publication.lastCheckAt)}` : publication.lastCheckState === "running" ? "CI still running at the last check" : "no CI checks found — verify on GitHub"}</span>`) +
         `</p>`;
     const agent = runAgentWords(detail.route);
     const links = [];
@@ -20872,7 +21165,7 @@ function resultPanelParts(detail, o) {
     summaryParts.push(`<details class="result-details" data-result-details><summary>Build details</summary>` +
         (unavailableShots.length === 0 ? "" : `<ul class="result-unavailable meta" data-result-unavailable="${unavailableShots.length}">${unavailableShots.map(one => `<li>Screenshot unavailable — <span class="mono">${escape(one.path)}</span>: ${escape(one.problem ?? "")}</li>`).join("")}</ul>`) +
         `<dl class="result-facts">` +
-        `<div><dt>Build</dt><dd>#${runId} · ${escape(run.runner)}${agent === null ? ` · ${escape(run.provider)}` : ""}${run.finishedAt === null ? "" : ` · ${escape(when(run.finishedAt))}`}</dd></div>` +
+        `<div><dt>Build</dt><dd>#${runId} · ${escape(run.runner)}${agent === null ? ` · ${escape(run.provider)}` : ""}${run.finishedAt === null ? "" : ` · ${whenTime(run.finishedAt)}`}</dd></div>` +
         (agent === null ? "" : `<div><dt>Agent</dt><dd>${escape(agent)}</dd></div>`) +
         `<div><dt>Commits</dt><dd>${facts.head === null
             ? facts.base === null ? "no commit recorded" : `<span class="mono">${escape(facts.base.slice(0, 12))}</span> <span class="meta">base · no head recorded</span>`
@@ -20951,7 +21244,7 @@ function resultPanelParts(detail, o) {
             checkParts.push(`<p class="meta" data-proof-verdict="none">No verification result is available for this build.</p>`);
         }
         if (proof.accepted !== null)
-            checkParts.push(`<p class="meta">${humanReview ? "Accepted after human review" : "Accepted with an exception"} by <span class="mono">${escape(proof.accepted.by)}</span> · ${escape(when(proof.accepted.at))}${proof.accepted.note === null ? "" : ` — ${escape(proof.accepted.note)}`}</p>`);
+            checkParts.push(`<p class="meta">${humanReview ? "Accepted after human review" : "Accepted with an exception"} by <span class="mono">${escape(proof.accepted.by)}</span> · ${whenTime(proof.accepted.at)}${proof.accepted.note === null ? "" : ` — ${escape(proof.accepted.note)}`}</p>`);
         if (proof.matrix.length === 0) {
             checkParts.push(detail.signedCriteria > 0 ? `<p class="meta">The approved scope has ${detail.signedCriteria} requirement${detail.signedCriteria === 1 ? "" : "s"}, but this build has no requirement-by-requirement verification.</p>` : `<p class="meta">This scope signed no acceptance checks.</p>`);
         }
@@ -21002,7 +21295,7 @@ function resultPanelParts(detail, o) {
     };
     if (detail.comments.length > 0) {
         requestParts.push(`<p class="meta">Saved for later · ${detail.comments.length}</p><div class="diff-comments" data-result-notes="${detail.comments.length}">` +
-            detail.comments.map(one => `<div class="diff-comment"><span class="diff-comment-pin" aria-hidden="true"></span><p>${one.path === null ? "" : pathWords(one.path, one.line)}${escape(one.note)}</p><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span></div>`).join("") +
+            detail.comments.map(one => `<div class="diff-comment"><span class="diff-comment-pin" aria-hidden="true"></span><p>${one.path === null ? "" : pathWords(one.path, one.line)}${escape(one.note)}</p><span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)}</span></div>`).join("") +
             `</div>`);
         if (o.csrf !== "" && !detail.canAnnotate) {
             requestParts.push(`<form method="post" action="/r/${runId}/revise" class="card revision-from-comments"><input type="hidden" name="csrf" value="${escape(o.csrf)}"><input type="hidden" name="return" value="${escape(o.returnTo)}">${revisionSealFields(detail.comments, detail.sourceDigest)}` +
@@ -21011,7 +21304,7 @@ function resultPanelParts(detail, o) {
         }
     }
     if ((detail.pastComments?.length ?? 0) > 0) {
-        requestParts.push(`<details class="result-feedback-history"><summary>Earlier feedback</summary><div class="diff-comments" data-past-feedback>${detail.pastComments.map(one => `<div class="diff-comment"><p>${one.path === null ? "" : pathWords(one.path, one.line)}${escape(one.note)}</p><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span></div>`).join("")}</div></details>`);
+        requestParts.push(`<details class="result-feedback-history"><summary>Earlier feedback</summary><div class="diff-comments" data-past-feedback>${detail.pastComments.map(one => `<div class="diff-comment"><p>${one.path === null ? "" : pathWords(one.path, one.line)}${escape(one.note)}</p><span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)}</span></div>`).join("")}</div></details>`);
     }
     for (const revision of detail.revisions) {
         // The child's standing is the shared status projection's own words
@@ -21230,7 +21523,7 @@ function runPage(chrome, run, taskId, artifacts, terminal = null, notes = [], cs
                         ? "the brief"
                         : turn.sourceKind === "answer"
                             ? "your answer"
-                            : "repair (machine)"} · ${escape(when(turn.recordedAt))}${turnWords(turn)}</span> ${escape(oneLineOf(turn.text, 240))}</p>`)
+                            : "repair (machine)"} · ${whenTime(turn.recordedAt)}${turnWords(turn)}</span> ${escape(oneLineOf(turn.text, 240))}</p>`)
                     .join("\n")) +
             (heldTurns.open && csrf !== ""
                 ? `<form method="post" action="/r/${run.id}/turn" class="row">` +
@@ -21305,7 +21598,7 @@ function runPage(chrome, run, taskId, artifacts, terminal = null, notes = [], cs
     const commentRows = comments
         .map(one => `<div class="diff-comment"><span class="diff-comment-pin" aria-hidden="true"></span><p>` +
         `${one.path === null ? "" : commentPathWords(one.path, one.line)}` +
-        `${escape(one.note)}</p><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span></div>`)
+        `${escape(one.note)}</p><span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)}</span></div>`)
         .join("\n");
     const commentForm = csrf === "" || !hasTerminalDiff
         ? ""
@@ -21349,7 +21642,7 @@ function runPage(chrome, run, taskId, artifacts, terminal = null, notes = [], cs
     const noteRows = notes.length === 0
         ? ""
         : notes
-            .map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${escape(when(one.createdAt))}</span> ` +
+            .map(one => `<p class="row"><span class="meta">${escape(one.author)} · ${whenTime(one.createdAt)}</span> ` +
             `${escape(one.note)}</p>`)
             .join("\n");
     const noteForm = csrf === ""
@@ -21537,7 +21830,7 @@ function telegramDeliveryWords(store, bot) {
         return `Telegram pushes new messages to ${state.url}${state.problem === null ? "." : `, but ${state.problem.charAt(0).toLowerCase()}${state.problem.slice(1)}.`}`;
     return `Toolroll asks Telegram for new messages every few seconds${state?.problem ? ` (${state.problem})` : ""}.`;
 }
-function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null, push = null, providerKeys = null, digest = null, permissionDefault = null, qualityDefault = null, email = null, telegramDelivery = null, workers = null, updates = null, firstResult = null) {
+function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null, push = null, providerKeys = null, digest = null, permissionDefault = null, qualityDefault = null, email = null, telegramDelivery = null, workers = null, updates = null, firstResult = null, chatNotices = null) {
     const permissionCard = permissionDefault === null
         ? ""
         : [
@@ -21550,7 +21843,7 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
                 : `<div class="card"><p><strong>${permissionDefault.mode === "bypassPermissions" ? "Full access" : "Auto"}</strong></p><p class="meta">an approver can change this default</p></div>`,
             permissionDefault.updatedAt === null
                 ? ""
-                : `<p class="meta settings-changed">Changed ${escape(when(permissionDefault.updatedAt))}${permissionDefault.updatedBy === null ? "" : ` by ${escape(permissionDefault.updatedBy)}`}</p>`,
+                : `<p class="meta settings-changed">Changed ${whenTime(permissionDefault.updatedAt)}${permissionDefault.updatedBy === null ? "" : ` by ${escape(permissionDefault.updatedBy)}`}</p>`,
         ].join("\n");
     const qualityCard = qualityDefault === null
         ? ""
@@ -21564,9 +21857,25 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
                 : `<div class="card"><p><strong>${escape(qualityModeTitle(qualityDefault.mode))}</strong></p><p class="meta">an approver can change this default</p></div>`,
             qualityDefault.updatedAt === null
                 ? ""
-                : `<p class="meta settings-changed">Changed ${escape(when(qualityDefault.updatedAt))}${qualityDefault.updatedBy === null ? "" : ` by ${escape(qualityDefault.updatedBy)}`}</p>`,
+                : `<p class="meta settings-changed">Changed ${whenTime(qualityDefault.updatedAt)}${qualityDefault.updatedBy === null ? "" : ` by ${escape(qualityDefault.updatedBy)}`}</p>`,
+        ].join("\n");
+    // Quiet chat: this person's own choice. The installation's Telegram cadence only bundles Every step updates.
+    const chatCard = chatNotices === null || csrf === ""
+        ? ""
+        : [
+            "<h3>Chat messages</h3>",
+            `<form method="post" action="/settings/notifications" class="card" data-autosave>`,
+            `<input type="hidden" name="csrf" value="${escape(csrf)}">`,
+            `<label><input type="radio" name="mode" value="quiet"${chatNotices.mode === "quiet" ? " checked" : ""}> Only when I'm needed <span class="meta">· one message per task, updated as it moves</span></label>`,
+            `<label><input type="radio" name="mode" value="all"${chatNotices.mode === "all" ? " checked" : ""}> Every step <span class="meta">· a new message for each update</span></label>`,
+            `<label>Evening digest<select name="digest">` +
+                digestTimes(chatNotices.digestAt).map(([value, label]) => `<option value="${value}"${value === (chatNotices.digestAt ?? "off") ? " selected" : ""}>${label}</option>`).join("") +
+                `</select></label>`,
+            `<p class="meta">One message: what finished, what waits, what failed.</p>`,
+            `<button type="submit">Save</button>`,
+            `</form>`,
         ].join("\n");
-    const digestCard = digest === null || csrf === ""
+    const digestCard = digest === null || csrf === "" || chatNotices?.mode === "quiet"
         ? ""
         : [
             "<h3>Telegram digest</h3>",
@@ -21651,7 +21960,7 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
                 : `<p class="meta">Alerts need a secure (https) address for this app.</p>`,
             ...push.devices
                 .filter(one => one.retiredAt === null || one.retiredReason === "gone")
-                .map(one => `<p class="row">${escape(one.uaWords)} · since ${escape(when(one.createdAt))}` +
+                .map(one => `<p class="row">${escape(one.uaWords)} · since ${whenTime(one.createdAt)}` +
                 `${one.retiredAt !== null ? ` · <span class="meta">expired</span>` : one.consecutiveFailures >= 20 ? ` · <span class="meta">failing</span>` : ""}` +
                 (one.retiredAt === null
                     ? ` <form method="post" action="/push/remove" class="inline"><input type="hidden" name="csrf" value="${escape(csrf)}"><input type="hidden" name="id" value="${one.id}"><button type="submit">Remove</button></form>`
@@ -21729,7 +22038,8 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
         }),
         services: messaging === null || messaging.configured.length === 0 ? null : { configured: messaging.configured, channel: messaging.channel, implicit: messaging.implicit },
         push: push === null || csrf === "" ? null : { available: push.available, devices: push.devices.filter(one => one.retiredAt === null || one.retiredReason === "gone").map(one => ({ id: one.id, words: `${one.uaWords} · since ${when(one.createdAt)}`, state: one.retiredAt !== null ? "expired" : one.consecutiveFailures >= 20 ? "failing" : "ok", removable: one.retiredAt === null })) },
-        digest: digest === null || csrf === "" ? null : { every: digest.everyMs === null ? "off" : String(Math.round(digest.everyMs / 60_000)), held: digest.everyMs === null ? null : `${digest.held} routine fact(s) held` },
+        chat: chatNotices === null || csrf === "" ? null : chatNotices,
+        digest: digest === null || csrf === "" || chatNotices?.mode === "quiet" ? null : { every: digest.everyMs === null ? "off" : String(Math.round(digest.everyMs / 60_000)), held: digest.everyMs === null ? null : `${digest.held} routine fact(s) held` },
         telegram: { state: hasEnv ? "from the environment" : existing === null ? "not set" : "saved", current, delivery: telegramDelivery },
         email,
         workers,
@@ -21746,7 +22056,8 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
         workersCard(workers),
         updatesCard(updates, csrf),
         firstResult === null ? "" : `<p class="meta" data-first-result>${escape(firstResult)}</p>`,
-        pushCard === "" && messagingCard === "" && digestCard === "" ? "" : `<h2>Notifications</h2>`,
+        pushCard === "" && messagingCard === "" && digestCard === "" && chatCard === "" ? "" : `<h2>Notifications</h2>`,
+        chatCard,
         messagingCard,
         pushCard,
         digestCard,
@@ -21842,6 +22153,8 @@ function settingsTiles() {
     return `<nav class="settings-tiles" aria-label="Settings sections">${tiles.map(([href, label, icon]) => `<a href="${href}">${strokeIcon(icon)}<span>${label}</span></a>`).join("")}</nav>`;
 }
 const SETTINGS_TILE_ICONS = [
+    ["/settings/flows", "Flows", `<rect x="3" y="3" width="7" height="7" rx="1.5"/><rect x="14" y="14" width="7" height="7" rx="1.5"/><path d="M10 6.5h4a3 3 0 0 1 3 3V14"/>`],
+    ["/settings/integrations", "Integrations", `<path d="M9 2v6M15 2v6"/><path d="M6 8h12v4a6 6 0 0 1-12 0z"/><path d="M12 18v4"/>`],
     ["/settings/models", "Models", `<rect x="4" y="4" width="16" height="16" rx="2"/><rect x="9" y="9" width="6" height="6"/><path d="M9 2v2M15 2v2M9 20v2M15 20v2M2 9h2M2 15h2M20 9h2M20 15h2"/>`],
     ["/settings/skills", "Skills", `<path d="m12 3 1.9 5.8L20 10l-5 3.6L16.8 20 12 16.4 7.2 20 9 13.6 4 10l6.1-1.2z"/>`],
     ["/settings/tools", "Tools", `<path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"/>`],
@@ -21902,7 +22215,7 @@ function nextPage(chrome, data) {
     if (item.kind === "decision") {
         const { decision } = item;
         card =
-            `<h1>${escape(decision.taskId)} <span class="meta">asked ${escape(when(decision.createdAt))}</span></h1>` +
+            `<h1>${escape(decision.taskId)} <span class="meta">asked ${whenTime(decision.createdAt)}</span></h1>` +
                 `<div class="recap">${escape(decision.recap)}</div>` +
                 `<div class="question">${escape(decision.question)}</div>` +
                 decisionOptionForms(decision, data.csrf, "next");