toolroll 0.9.103 → 0.9.105

package/dist/server/chat.js

@@ -3,7 +3,6 @@ import { approvalPasswordField } from "../approval-password.js";
 import { CHAT_ACTION_LOCAL_ACTS, localOwnerRefusal } from "../local-owner.js";
 import { handlersOf } from './handler-registry.js';
 import { DEPRECATED_PAGE } from "../deprecations.js";
-/** chat handlers, moved without changing their route bodies. */
 import { randomBytes } from "node:crypto";
 import { chmodSync, rmSync as rmFileSync, writeFileSync as writeFsFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -48,19 +47,11 @@ import { completionForm, hardBlockerOf, homePhaseWords, owedAcceptanceOf, result
 import { browserCaller, oneLineUa } from "./session.js";
 export function createChatHandlers(runtime) {
     const { firstRunStepsNow, managedRepos, leadWords, store, options, phoneSetup, visible, liveTurns, leadSaid, evidenceRoot, clock, sessions, CHAT_CANDIDATE_TTL_MS, chatFetcher, CHAT_CANDIDATES_PER_APPROVER, chatCeilingDigest, workAccess, familyOf, firstTasks, leadPrincipal, taskChatFocus, chatScopeOf, leadConversationRows, demoLeadHere, sendScreen, chromeFor, teamBrowserReply, team, teamChatProvider, runVisible, runIsLive, resultDetailOf, pullRequestTargetOf, chatEnablement, sharedIndexPage, startLeadConversation, projectFamilyPeek, needsYouBadge, liveRefreshSeconds, chatKeyFor, chatCatalog, chatCatalogKnown, providerHome, mintApprovalNonce, checkLocalAgents, agentSignInCommand, bustBadge, authenticateApprover, revisionDestination, armTaskResume, consumeApprovalNonce } = runtime;
-    // The read-only refresh (package 2): the same JSON status as before —
-    // session binding, the send receipt, the live turn — plus a version
-    // of the DISPLAYED facts and, only when the caller's version differs,
-    // the server-rendered thread / task fragments the page swaps into
-    // its safe regions. No-store, cookie-and-approver only, the same
-    // admission and ceiling checks as the page; nothing here writes.
     async function mateStatus(ctx) {
         const { url, response, now } = ctx;
         const who = browserCaller(ctx.who);
         const found = store.activeLeadSession(who.name);
         const principal = leadPrincipal(who);
-        // Quiet page visits: a membership conversation not started yet is still a page to keep current (its task's
-        // progress and approval); it reads as session 0, and nothing here starts it.
         const enabled = chatEnablement();
         const notStarted = principal !== null && enabled.ok && enabled.billing === "subscription" && (found === null || found.ceilingDigest !== principal.ceilingDigest);
         const session = notStarted ? null : found;
@@ -69,13 +60,10 @@ export function createChatHandlers(runtime) {
         }
         const sessionId = session?.id ?? NOT_STARTED_SESSION;
         const request = url.searchParams.get("request") ?? "";
-        // Received: the engine took it, or the lead queue holds it (a queued acknowledgement lost on the way still frees the draft).
         const received = session !== null && /^[a-f0-9]{32}$/.test(request) && store.leadRequestReceived(session.id, request);
         const requestedTask = url.searchParams.get("task");
         const focusTask = requestedTask === null || requestedTask === "" ? null : taskChatFocus(requestedTask, now, who, { mintNonce: false });
         if (requestedTask !== null && requestedTask !== "" && focusTask === null) {
-            // The lens's task is gone or no longer admitted: the page keeps its
-            // draft and says so; it never falls back to the unified thread.
             return respond(response, 200, "application/json", JSON.stringify({ session: sessionId, task: requestedTask, unavailable: true, received }));
         }
         const chatProject = focusTask !== null ? null : chatProjectOf(url.searchParams.getAll("project").filter(one => one !== ""));
@@ -102,7 +90,6 @@ export function createChatHandlers(runtime) {
             ...(fragments === null ? {} : { fragments }),
         }));
     }
-    // `toolroll demo`: Chat is the scripted lead, never a model.
     async function demoLive(ctx) {
         const { who, response } = ctx;
         const lead = demoLeadHere();
@@ -125,8 +112,6 @@ export function createChatHandlers(runtime) {
                 functional: { script: DEMO_CHAT_SCRIPT, fetches: true },
             }));
         }
-        // Cookie sessions only (Codex v3 review, change 7): drafts live in
-        // THIS session's memory; a bearer caller has nowhere to keep them.
         if (who.via !== "cookie")
             return refuse(response, who, 403, "chat is a browser surface — it keeps your drafts in the session");
         const teamAsked = url.searchParams.get('team') === '1' || url.searchParams.has('conversation') || url.searchParams.has('lead') || url.searchParams.has('proposal');
@@ -153,12 +138,9 @@ export function createChatHandlers(runtime) {
                 chrome: chromeFor(null, 'chat', undefined, 'all'), workspace: { team: reply.snapshot, notices: [DEPRECATED_PAGE.team, ...(said ? [said] : [])] },
             }));
         }
-        // Settling a turn past its deadline (its spend) and expiring old proposals are the background passes' work, never a
-        // page visit's (docs/plans/get-side-effects.md); the lead's follow pass sweeps every few seconds.
         sweepChatDrafts(Date.now());
         const requestedTask = url.searchParams.get("task");
         const focusTask = taskChatFocus(requestedTask, now, who, { mintNonce: !requestContext.getStore()?.workspaceRead });
-        // A project's own thread (v77): /chat?project=<path>. A task lens wins.
         const chatProject = focusTask !== null ? null : chatProjectOf(url.searchParams.getAll("project"));
         if (chatProject === undefined)
             return refuse(response, who, 404, "That project is not available in this workspace.", "/chat");
@@ -166,8 +148,6 @@ export function createChatHandlers(runtime) {
             url.searchParams.set("task", focusTask.id);
             return redirect(response, `/chat?${url.searchParams.toString()}`);
         }
-        // A seal receipt names the exact child it returned. Reopening an old
-        // receipt must not present a newer revision's approval as its answer.
         const requestedRevision = url.searchParams.get("revision");
         if (requestedRevision !== null) {
             if (focusTask === null || !focusTask.family.versions.some(one => one.id === requestedRevision) || url.searchParams.has("result")) {
@@ -176,10 +156,6 @@ export function createChatHandlers(runtime) {
             if (requestedRevision !== focusTask.executionId)
                 return redirect(response, `${taskHref(focusTask.id)}?version=${encodeURIComponent(requestedRevision)}`);
         }
-        // The result detail (package 3): `?result=<run>` names one finished
-        // build OF THIS TASK; anything else — another task's run, a live or
-        // failed attempt, a number that is no run — says so and shows the
-        // conversation alone. The task lens is never inferred from the run.
         const requestedResult = url.searchParams.get("result");
         const resultRun = (() => {
             if (focusTask === null || requestedResult === null || !/^[0-9]{1,15}$/.test(requestedResult))
@@ -193,8 +169,6 @@ export function createChatHandlers(runtime) {
         })();
         const roomId = url.searchParams.get('conversation');
         const resultLink = (href) => roomId ? href + '&conversation=' + encodeURIComponent(roomId) : href;
-        // Accept and finish is here: the one act that accepts the person's own checks and finishes the task.
-        // Never offered where Complete is refused whatever is accepted (a failed check, a HIGH finding).
         const finishes = resultRun !== null && who.role === 'approver' && focusTask?.assignment?.state === 'ready-to-check' && focusTask.assignment.receipt?.runId === resultRun.id &&
             hardBlockerOf(focusTask.assignment) === null;
         const resultPanel = resultRun === null
@@ -232,7 +206,6 @@ export function createChatHandlers(runtime) {
                 },
             }));
         }
-        // Pending cards, and the recently answered ones so the door's words are read (last 30).
         const repos = managedRepos();
         const allCoordinatorRows = who.role === "approver" ? store.listCoordinatorProposals({ repos, states: ["pending", "confirmed", "refused"], limit: 30 }) : [];
         const coordinatorRows = focusTask === null
@@ -241,24 +214,11 @@ export function createChatHandlers(runtime) {
         const enabled = chatEnablement();
         const pending = store.liveChatTurnFor(who.name);
         const latched = enabled.ok ? store.latchedChatTurns(enabled.credentialKey) : [];
-        // The mate (mate arc §5): while a mate session is live, /chat IS the
-        // thread — the same rows the CLI reads. Without one, fleet chat as
-        // before, plus the card that mints a session.
         const leadSession = enabled.ok && who.role === "approver" ? store.activeLeadSession(who.name) : null;
         const principal = enabled.ok && who.role === "approver" ? leadPrincipal(who) : null;
-        // Chat opens ready to talk (2026-09-23): an approver in good standing
-        // needs no second password to start their own conversation. Quiet page
-        // visits (2026-10-27): a visit only shows it. With no membership
-        // conversation yet (or only one under another ceiling), the page shows
-        // the composer and the first message starts one (chatSend); nothing
-        // here writes. Direct-API chat keeps a one-tap Start with its visible
-        // spending limit (no password).
         const settingsView = url.searchParams.get("settings") === "1";
         const notStarted = !settingsView && enabled.ok && enabled.billing === "subscription" && principal !== null &&
             (leadSession === null || leadSession.ceilingDigest !== principal.ceilingDigest);
-        // A session under another ceiling is not continuable from here; a GET
-        // writes nothing (slice-2 review, finding 7) — the mint card below
-        // starts a new conversation, and minting ends the old session.
         const ceilingStale = !notStarted && enabled.ok && leadSession !== null && principal !== null && leadSession.ceilingDigest !== principal.ceilingDigest;
         const catchUp = leadBriefHtml(assignmentCatchUp(store, now, { principal: "operator", repos }, { limit: 6 }, evidenceRoot));
         const chatProjects = repos.map((repo, index) => {
@@ -267,8 +227,6 @@ export function createChatHandlers(runtime) {
                 peek = projectFamilyPeek(repo, now);
             }
             catch {
-                // The project rail is orientation, like chrome's project peek: a
-                // failed count must not make the conversation itself disappear.
             }
             return { id: `r${index + 1}`, label: projectName(repo), path: repo, peek };
         });
@@ -281,14 +239,10 @@ export function createChatHandlers(runtime) {
                 fleetSnapshot.attentionCount = needsYouBadge(null);
             }
             catch {
-                // The project rail already degrades each pulse independently.
-                // A failed briefing query must not make the conversation vanish.
             }
         }
-        // The first run belongs to the lead conversation, for someone who can act on it.
         const firstRun = focusTask === null && who.role === "approver" ? chatFirstRun(now, chatProject) : undefined;
         const phone = focusTask === null && who.via === "cookie" ? phoneCard(who, now) : undefined;
-        // Console v2: the landing's live view (who is working, four counts, Catch up in tabs).
         const home = focusTask === null && chatProject === null && !roomId ? chatHomeOf(who, repos, now) : null;
         const withFirstRun = (shown) => firstRun === undefined && phone === undefined && home === null ? shown
             : { ...shown, ...(home === null ? {} : { refreshSeconds: liveRefreshSeconds() }),
@@ -362,8 +316,6 @@ export function createChatHandlers(runtime) {
         if (turn === null || !turn.unknownSpend || turn.acknowledgedAt !== null) {
             return refuse(response, who, 404, "no acknowledgement is waiting there", "/chat");
         }
-        // The one nonce in chat — this screen restates exact financial terms
-        // and re-enables spend, which is precisely what nonces are for.
         const nonce = mintApprovalNonce(who.name, `chat-ack-${turn.id}`, String(turn.reservedMicrousd));
         return sendScreen(response, 200, chatAckPage(chromeFor(project, "chat"), turn, nonce, store.leadTurnOfStep(turn.id)));
     }
@@ -392,7 +344,6 @@ export function createChatHandlers(runtime) {
             const id = proposalId, saved = store.getLeadProposal(id), savedAction = saved?.kind === 'action' ? sharedActionPayload(saved.payload) : null;
             if (saved && savedAction && saved.state !== 'pending' && (sharedConversation !== null || store.getLeadThread(saved.thread)?.approver === principal.name) && principal.repos.includes(savedAction.repo) && store.accountCanAccess(principal.name, savedAction.repo)) {
                 const task = typeof saved.outcome?.['taskId'] === 'string' ? saved.outcome['taskId'] : typeof savedAction.request['task'] === 'string' ? savedAction.request['task'] : null;
-                // A flow action leads back to its flow (a page path of our own making, never the proposal's words).
                 const flowId = savedAction.operation.startsWith('flow_') && Number.isSafeInteger(savedAction.request['flow']) ? Number(savedAction.request['flow']) : null;
                 const destination = task ? taskHref(task) : flowId !== null ? `/flows/${flowId}` : `/settings/${savedAction.operation.startsWith('skill_') ? 'skills' : 'knowledge'}?repo=${encodeURIComponent(savedAction.repo)}`;
                 const said = typeof saved.outcome?.['said'] === 'string' ? saved.outcome['said'] : saved.state === 'dismissed' ? 'Action dismissed.' : saved.state === 'expired' ? 'This proposal expired. Ask for a fresh proposal.' : 'This action has no completed outcome yet.';
@@ -401,9 +352,6 @@ export function createChatHandlers(runtime) {
             const review = mintSharedActionReview(store, principal, id, evidenceRoot, clock()), action = review.payload;
             const terms = action.terms.map(term => html `<p style="white-space:pre-wrap;overflow-wrap:anywhere">${term}</p>`);
             const evidenceLink = action.operation === 'result_accept' ? html `<a href="/r/${Number(action.request['run'])}">Inspect this result</a>` : '';
-            // Cockpit B2: approving standard work may stand on a password remembered on this session, exactly as on the task
-            // page (the same rule approve() applies when the form comes back); the field then may be left empty.
-            // The one password rule every approve form reads (approval-password.ts).
             const freshSince = (() => {
                 const task = typeof action.request['task'] === 'string' ? action.request['task'] : null;
                 if (action.operation !== 'scope_approve' || task === null)
@@ -414,8 +362,6 @@ export function createChatHandlers(runtime) {
                 const field = approvalPasswordField(store, { name: who.name, taskId: task, scope, passwordless: false, localOwner: false, freshAt: fresh?.at ?? null, returnTo: '/chat' });
                 return field.field === 'remembered' ? new Date(field.since) : null;
             })();
-            // Easy-start C5: a laptop's local owner confirms its own acts without a password (an approval only when it is
-            // eligible: localApprovalEligible, the rule the seal applies again); anything else says how to get a password.
             const reviewTask = typeof action.request['task'] === 'string' ? action.request['task'] : null;
             const localScope = reviewTask === null ? null : store.getScope(reviewTask);
             const localOk = who.authority === 'local-owner' && CHAT_ACTION_LOCAL_ACTS[action.operation] !== null && (action.operation !== 'scope_approve' || (reviewTask !== null && localScope !== null && approvalPasswordField(store, { name: who.name, taskId: reviewTask, scope: localScope, passwordless: false, localOwner: true, freshAt: null, returnTo: '/chat' }).field === 'none'));
@@ -430,20 +376,16 @@ export function createChatHandlers(runtime) {
             return refuse(response, who, 409, error instanceof Error ? error.message : 'This action could not be reviewed.', '/chat');
         }
     }
-    // Session-gated: the key is not secret, but strangers get nothing.
     async function pushKey(ctx) {
         const { who, response } = ctx;
         if (who.via !== "cookie")
             return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
-        // The pair is made as the console starts (docs/plans/get-side-effects.md); this only reads it.
         const keys = options.telegramTokenFile === undefined ? null : loadVapidKeys(dirname(options.telegramTokenFile));
         response.setHeader("cache-control", "no-store");
         if (keys === null)
             return respond(response, 503, "application/json", JSON.stringify({ error: "push is not set up on this console" }));
         return respond(response, 200, "application/json", JSON.stringify({ key: keys.publicKey }));
     }
-    // What this computer's agent CLIs said last, and whether the lead is on. A read: the answer comes from the background
-    // checks or a Check now (POST /lead/check), never from this request (docs/plans/get-side-effects.md).
     const leadState = () => JSON.stringify({ lead: store.getChatConfig() === null ? "off" : "on", agent: runtime.localSignIn?.signedIn ?? null,
         checkedAt: runtime.localSignIn === null ? null : new Date(runtime.localSignIn.at).toISOString(), command: agentSignInCommand() });
     async function leadStatus(ctx) {
@@ -453,9 +395,6 @@ export function createChatHandlers(runtime) {
         response.setHeader("cache-control", "no-store");
         return respond(response, 200, "application/json", leadState());
     }
-    // While no agent is signed in, Chat asks this computer again on its own (onboarding), and Settings → Lead has Check
-    // now: a fresh, non-spending sign-in check at most every few seconds, and the lead turns on as soon as one is found
-    // (the lead-by-default rule). A POST with the person's form token, so no prefetch or link preview can set it off.
     async function leadCheck(ctx) {
         const { response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.leadCheck);
@@ -479,7 +418,6 @@ export function createChatHandlers(runtime) {
         response.setHeader("cache-control", "no-store");
         return respond(response, 200, "text/html; charset=utf-8", taskChatLiveRegion(focus, who.session.csrf, true));
     }
-    // The scripted demo lead's acts: ask, approve, change a plan, complete or send back a result.
     async function demoAsk(ctx) {
         const { who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.demo);
@@ -528,9 +466,6 @@ export function createChatHandlers(runtime) {
     async function pushSubscribe(ctx) {
         const { who, request, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.pushSubscribe);
-        // Enrolling a durable notification sink is a CEREMONY (arc 3 finding
-        // 6): browser session + CSRF + the password typed again; bearer
-        // identities are machines and are refused outright.
         if (who.via !== "cookie")
             return refuse(response, who, 403, "push enrollment is a browser session's act");
         if (store.isDemo())
@@ -587,11 +522,6 @@ export function createChatHandlers(runtime) {
     async function chatConfig(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.chatConfig);
-        // The console's own door into `config set chat` (operator request:
-        // chat lives mainly in the web UI). Same ceremony weight as the CLI
-        // verb: the password typed again authenticates the approver, the
-        // write is audited under their name, and the KEY still never
-        // touches a form or this database — environment only.
         if (who.via !== "cookie")
             return refuse(response, who, 403, "chat setup is a browser surface");
         const back = body.get("return") === "/settings/lead" ? "/settings/lead" : safeChatReturn(body.get("return"));
@@ -621,9 +551,6 @@ export function createChatHandlers(runtime) {
         if (!validModelId(model)) {
             return redirect(response, chatRefusal(back, "the model id must be 1–128 letters, digits, dots, slashes, colons, underscores, or dashes"));
         }
-        // The key, when pasted, is stored FIRST (0600 file, Telegram-token
-        // precedent) so the catalog fetch below can already use it. It never
-        // touches the database and is never echoed back.
         const pastedKey = (body.get("key") ?? "").trim();
         if (pastedKey !== "") {
             if (subscription)
@@ -632,11 +559,6 @@ export function createChatHandlers(runtime) {
             if (!stored.ok)
                 return redirect(response, chatRefusal(back, stored.message));
         }
-        // The pin: anthropic models come from the compiled table; openrouter
-        // models come from OpenRouter's OWN catalog, priced by the authority
-        // that will bill them. No price found anywhere = refused, not guessed.
-        // Live list prices (Settings → Models) come first; the compiled table
-        // is the fallback when the catalog has never been fetched.
         let pin = subscription ? { inMicrousd: 0, outMicrousd: 0 } : livePin(store, provider, model) ?? priceOf(model);
         if (provider === "openrouter-api") {
             const catalog = await chatCatalog();
@@ -663,7 +585,6 @@ export function createChatHandlers(runtime) {
         }, who.name, now);
         return redirect(response, back);
     }
-    // ---- the mate (mate arc §5) ------------------------------------------
     async function leadMint(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.leadMint);
@@ -673,16 +594,11 @@ export function createChatHandlers(runtime) {
         const enabled = chatEnablement();
         if (!enabled.ok)
             return redirect(response, chatReturnWithSaid(back, enabled.why));
-        // The one password ceremony of a conversation (§1): it restates the
-        // terms — this spend ceiling, over these projects — and mints the
-        // session every later turn debits without asking again.
         const ceilingText = (body.get("ceiling-usd") ?? "").trim();
         const ceilingUsd = enabled.billing === "subscription" ? 0 : Number(ceilingText);
         if (enabled.billing === "metered" && (!Number.isFinite(ceilingUsd) || ceilingUsd <= 0 || ceilingUsd > 1_000)) {
             return redirect(response, chatReturnWithSaid(back, "the session ceiling is a dollar amount between 0 and 1000"));
         }
-        // The signed-in session is the authority (an approver in good
-        // standing); a typed password, when sent, is still checked.
         const token = body.get("token") ?? "";
         const verified = token === "" ? verifyApproverStanding(store, who.name, who.session.generation, managedRepos()) : verifyApproverByPassword(store, who.name, token, managedRepos());
         if (!verified.ok)
@@ -696,7 +612,6 @@ export function createChatHandlers(runtime) {
         if (who.via !== "cookie")
             return refuse(response, who, 403, "Open the conversation to change automatic updates.");
         const principal = leadPrincipal(who), session = store.activeLeadSession(who.name);
-        // A conversation its first message started from a task or project page has no main thread yet: this act opens it.
         const thread = principal && session && session.ceilingDigest === principal.ceilingDigest ? store.openLeadThread(who.name, principal.ceilingDigest, now).thread : null;
         if (!principal || !session || !thread || !configureLeadFollow(store, principal, session, thread, body.get("enabled") === "yes", now))
             return refuse(response, who, 409, "Conversation access changed. Start chat again.", "/chat");
@@ -708,15 +623,12 @@ export function createChatHandlers(runtime) {
         if (who.via !== "cookie")
             return refuse(response, who, 403, "the lead is a browser surface");
         const back = safeChatReturn(body.get("return"));
-        // Ending spend and forgetting the thread takes no password: any
-        // approver may revoke (§1), and the thread is theirs to drop (ruling 11).
         store.failLiveLeadTurnsFor(who.name, "ended", now);
         store.endLeadSessionsFor(who.name, who.name, now);
         store.closeLeadThreadsFor(who.name, now);
         leadSaid.delete(who.session.csrf);
         return redirect(response, back);
     }
-    /** Remove a message still waiting in the person's lead queue: theirs only, only while it waits; its words are forgotten. */
     async function leadQueuedRemove(ctx) {
         const { url, who, request, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.leadQueuedRemove);
@@ -744,9 +656,6 @@ export function createChatHandlers(runtime) {
             noteLead(who.session.csrf, null, "that turn has already finished");
             return redirect(response, chatReturnWithLatest(back));
         }
-        // A stopped direct-API turn is conservatively charged its reserved
-        // worst case: dispatch may already have happened. Membership turns
-        // reserve zero. The conversation itself stays live.
         store.failLiveLeadTurnsFor(who.name, "stopped", now);
         noteLead(who.session.csrf, live.id, "stopped — the conversation is still open");
         return redirect(response, chatReturnWithLatest(back));
@@ -774,9 +683,6 @@ export function createChatHandlers(runtime) {
         }
         else
             principal = leadPrincipal(who);
-        // Confirm in place (chat cards): the same door and checks, answered in
-        // JSON so the conversation stays where it is; the card's refreshed
-        // state carries the result. The secure review screen stays a form.
         const cardJson = String(request.headers["accept"] ?? "").includes("application/json") && !body.has("nonce");
         const cardAnswer = (status, ok, said, taskId = null) => respond(response, status, "application/json", JSON.stringify({ ok, said, taskId }));
         if (principal === null)
@@ -789,8 +695,6 @@ export function createChatHandlers(runtime) {
                 noteLead(who.session.csrf, null, "that proposal was already acted on");
             return redirect(response, chatReturnWithLatest(back));
         }
-        // A scope approval's re-check is spent only if the whole confirmation commits (one transaction: the proposal's
-        // settlement included). Any other action spends it whatever comes of it (its effects aren't all in the database).
         const confirmIt = () => confirmLeadProposal(store, principal, id, now, { authority: who.authority, chatProvider: teamChatProvider, confirm: body.get("confirm") === "yes", via: "web", person: who.via === "cookie", evidenceRoot, ...(body.has("nonce") ? { actionReview: { nonce: body.get("nonce") ?? "", password: body.get("token") ?? "" } } : {}) });
         const proposed = store.getLeadProposal(id);
         const approving = proposed?.kind === "action" && sharedActionPayload(proposed.payload)?.operation === "scope_approve";
@@ -812,21 +716,11 @@ export function createChatHandlers(runtime) {
             return redirect(response, chatReturnWithSaid(back, outcome.said));
         if (!outcome.ok && outcome.reason === "needs-confirm")
             noteLead(who.session.csrf, null, outcome.said);
-        // A confirmed task proposal leads to the task it actually created
-        // (package 2): the lens over this same conversation, whose journey
-        // and plan are the next step. The id is the door's recorded
-        // outcome, never a title or the assistant's prose; a refused,
-        // replayed, or unavailable confirmation returns as before, with
-        // the card carrying the door's words.
         if (outcome.ok && outcome.kind === "task" && outcome.taskId !== null && taskChatFocus(outcome.taskId, now, who, { mintNonce: false }) !== null) {
             return redirect(response, `${proposalTaskHref(outcome.taskId)}#task-chat-live`);
         }
         if (outcome.ok && outcome.kind === "review" && outcome.taskId !== null) {
             const proposal = store.getLeadProposal(id);
-            // A revision confirmed here returns to its receipt: the newest
-            // reply, whose confirmed card names the revision and links to the
-            // plan. Landing at the top left that message under the phone's
-            // fixed composer (build #1604 feedback).
             return redirect(response, proposal.payload["operation"] === "revise"
                 ? chatReturnWithLatest(revisionDestination(outcome.taskId, proposalTaskHref(outcome.taskId)))
                 : `${proposalTaskHref(outcome.taskId)}&result=${Number(proposal.payload["run"])}#request-changes`);
@@ -840,8 +734,6 @@ export function createChatHandlers(runtime) {
         }
         return redirect(response, chatReturnWithLatest(back));
     };
-    // Coordinator proposals (mate arc v3): confirmed by any approver whose
-    // ceiling admits the repo; the card lives on /chat and on the task.
     const coordinatorProposalAct = (op) => async (ctx) => {
         const { url, who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.coordinatorProposal);
@@ -871,11 +763,6 @@ export function createChatHandlers(runtime) {
         const requestedTask = body.get("task");
         const focusTask = taskChatFocus(requestedTask, now, who);
         const chatProject = focusTask !== null ? null : chatProjectOf(body.getAll("project"));
-        // The enhanced send (package 2): the SAME endpoint, fields, request
-        // receipt key, and session binding as the native form — only the
-        // answer differs. A fetch that asks for JSON gets the refusal's
-        // words or an acceptance instead of a redirect; nothing is retried,
-        // cleared, or authorized here that the native POST would not.
         const wantsJson = String(request.headers["accept"] ?? "").includes("application/json");
         if (requestedTask !== null && focusTask === null) {
             return wantsJson
@@ -895,9 +782,6 @@ export function createChatHandlers(runtime) {
             return said(409, "That result is no longer available for this task. Review the task before sending.");
         }
         const resultContext = viewedRun === null ? "" : ` The operator is viewing result #${viewedRun.id} from execution ${store.externalIdFor(viewedRun.taskRef)}. Use get_result for that exact execution and run when responding to feedback; do not substitute another result.`;
-        // The task composer's mode (console v2): fixed words for this turn only.
-        // It steers what the lead proposes and grants nothing: every action
-        // still arrives as a card the person confirms under its own rules.
         const modeValue = body.get("mode");
         if (modeValue !== null && (focusTask === null || body.getAll("mode").length !== 1 || !Object.hasOwn(TASK_COMPOSER_MODES, modeValue))) {
             return said(400, "Choose Build, Plan only or Just answer, then send again. Your draft is saved.");
@@ -906,13 +790,7 @@ export function createChatHandlers(runtime) {
         const enabled = chatEnablement();
         if (!enabled.ok)
             return said(409, enabled.why);
-        // A live mate session: the message is a mate turn — no password, the
-        // session's ceremony already covered it (§1); the engine refuses on
-        // its own terms and the thread shows why.
         let leadSession = who.role === "approver" ? store.activeLeadSession(who.name) : null;
-        // Quiet page visits: a membership conversation starts with its first message, never with a page view. A page
-        // shown before one existed binds its sends to session 0; that send starts it (the same approver standing a visit
-        // used to need), and a retry or double submit of the same request lands in the conversation it started.
         let startedHere = false;
         const binding = body.getAll("request-session");
         const unbound = binding.length === 0 || (binding.length === 1 && binding[0] === String(NOT_STARTED_SESSION));
@@ -924,7 +802,6 @@ export function createChatHandlers(runtime) {
             if (sentRequest !== null && (body.getAll("request").length !== 1 || !/^[a-f0-9]{32}$/.test(sentRequest)))
                 return said(409, "This conversation changed. Reload it before sending your message.");
             const usable = leadSession !== null && leadSession.ceilingDigest === principal.ceilingDigest && leadSession.approverGeneration === principal.generation;
-            // The conversation this very request started, if it started one: a retry or double submit lands only there.
             const startedBy = sentRequest === null ? null : store.leadStartReceipt(who.name, sentRequest);
             if (startedBy !== null) {
                 if (!usable || leadSession === null || leadSession.id !== startedBy.session)
@@ -932,19 +809,16 @@ export function createChatHandlers(runtime) {
                 startedHere = true;
             }
             else if (usable && leadSession !== null) {
-                // A page that showed no conversation never sends into one it did not start.
                 if (binding.length === 1)
                     return said(409, "This conversation changed. Reload it before sending your message.", leadSession.id);
             }
             else {
-                // Nothing starts for a message that would be refused anyway.
                 const message = (body.get("message") ?? "").trim();
                 if (message === "" || message.length > LEAD_MESSAGE_MAX_CHARS)
                     return said(400, `a message is 1 to ${LEAD_MESSAGE_MAX_CHARS} characters`);
                 if (scanForSecrets(message).length > 0)
                     return said(400, "that looks like a credential — chat never forwards or stores those");
                 const scope = chatScopeOf(focusTask, chatProject);
-                // The start and its record are one write: a retry finds it, and never starts a second conversation.
                 const started = startLeadConversation(who, principal, enabled, 0, false, now, scope, sentRequest ?? undefined);
                 leadSession = store.activeLeadSession(who.name);
                 if (leadSession === null || leadSession.id !== started)
@@ -957,7 +831,6 @@ export function createChatHandlers(runtime) {
             if (sentRequest !== null && !startedHere && (body.getAll("request").length !== 1 || body.getAll("request-session").length !== 1 || body.get("request-session") !== String(leadSession.id))) {
                 return said(409, "This conversation changed. Reload it before sending your message.");
             }
-            // Every send has one identity (a form without one gets it here): a message that waits is known by it.
             const requestId = sentRequest ?? randomBytes(16).toString("hex");
             const principal = leadPrincipal(who);
             if (principal === null)
@@ -967,15 +840,11 @@ export function createChatHandlers(runtime) {
                 return said(400, `a message is 1 to ${LEAD_MESSAGE_MAX_CHARS} characters`, leadSession.id);
             }
             const opened = store.openLeadThread(who.name, principal.ceilingDigest, now, chatScopeOf(focusTask, chatProject));
-            // The personal queue (docs/plans/lead-message-queue.md): while this person's lead is busy, or something of theirs
-            // waits, the message waits its turn instead of being refused. A request the engine already took replays as before.
             const queueContext = focusTask !== null
                 ? { task: focusTask.id, ...(viewedRun === null ? {} : { result: viewedRun.id }), ...(modeValue === null ? {} : { mode: modeValue }) }
                 : chatProject !== null ? { project: chatProject } : null;
             const queueIt = () => runtime.personalQueue.queue.sendOrQueue({ approver: who.name, approverGeneration: principal.generation, session: leadSession.id,
                 ceilingDigest: principal.ceilingDigest, thread: opened.thread.id, text: message, requestId, context: queueContext }, clock());
-            // A message the engine would refuse for a secret never waits (nothing stored): it goes straight to the engine,
-            // which refuses it before any row exists, exactly as when the lead is free.
             if (scanForSecrets(message).length === 0 && store.leadRequestReceipt(leadSession.id, requestId) === null) {
                 const decided = queueIt();
                 if (decided.kind === "conflict")
@@ -989,35 +858,23 @@ export function createChatHandlers(runtime) {
                         : redirect(response, chatReturnWithLatest(back));
                 }
             }
-            // The live display starts once this message holds a turn: a refusal (a secret, a turn still running) never blanks
-            // the display of a reply that is still running in the same conversation.
             let onProgress;
-            // Partials are shaped as the final reply is: for this message, with this console's own addresses.
             const liveShape = { asked: message, appOrigin: requestContext.getStore()?.appOrigins ?? null };
             const ended = (ok) => { if (onProgress !== undefined)
                 endLiveTurn(opened.thread.id, ok, onProgress); };
-            // Detached work never carries this request's browser session (Passwordless reads it): it runs with no session facts.
             void freshFacts.run(null, () => runLeadTurn({ store, who: principal, session: leadSession, thread: opened.thread, config: enabled.config, key: enabled.key, message,
                 onAdmitted: () => { onProgress = beginLiveTurn(opened.thread.id, liveShape); }, onProgress: event => onProgress?.(event), channel: "console", requestId, ...(focusTask === null && chatProject !== null ? { context: `Current project: ${projectName(chatProject)} (${chatProject}). Keep this conversation about that project unless the operator explicitly asks to broaden it; use it as the repo for project tools.` } : {}), ...(focusTask === null ? {} : { context: `Current task: ${focusTask.id}. Read it with get_task before answering or proposing changes. Read its currentExecution next and bind new actions to that exact execution. Never replace the target of a prior proposal with a newer revision. Keep this turn about that task unless the operator explicitly asks to broaden it.${resultContext}${modeContext}` }), fetcher: chatFetcher, ...(options.subscriptionChatRunner === undefined ? {} : { subscriptionRunner: options.subscriptionChatRunner }), clock, evidenceRoot }))
                 .then(outcome => {
-                // Lost a race to another turn of this person's between deciding and admission: it waits instead of being refused.
                 if (!outcome.ok && "refused" in outcome && (outcome.refused === "concurrent" || outcome.refused === "backlog") && queueIt().kind === "queued") {
                     ended(false);
                     return;
                 }
-                // A turn that saved its outcome in the thread (one stopped at its deadline) is said there, once. Any other turn
-                // that ended failed is said from its saved row (leadConversationRows `failure`), which a restart keeps; only a
-                // refusal before any turn existed is said from memory.
                 if (!outcome.ok && !("saved" in outcome && outcome.saved === true) && !("turn" in outcome))
                     noteLead(who.session.csrf, null, outcome.message);
                 ended(outcome.ok);
             })
                 .catch(() => { noteLead(who.session.csrf, null, "the turn failed unexpectedly"); ended(false); })
-                // A personal turn ended: the next waiting message (this person's or anyone's) may start now.
                 .finally(() => runtime.personalQueue.kick());
-            // Accepted for the engine, not received: the receipt is written by
-            // the turn's own admission, and the status poll is where the page
-            // learns of it — the same road as after a native send.
             if (wantsJson)
                 return respond(response, 202, "application/json", JSON.stringify({ ok: true, session: leadSession.id, task: focusTask?.id ?? "", ...(chatProject === null ? {} : { project: chatProject }), request: requestId }));
             return redirect(response, chatReturnWithLatest(back));
@@ -1030,15 +887,10 @@ export function createChatHandlers(runtime) {
         if (enabled.billing === "subscription") {
             return redirect(response, `/chat?said=${encodeURIComponent("start the conversation first — the one password ceremony opens the subscription-backed session")}`);
         }
-        // The password, typed again, on EVERY message (v2 ruling 2): chat is
-        // spend, and a seven-day cookie is not a spend credential.
         const message = (body.get("message") ?? "").trim();
         if (message === "" || message.length > 2_000) {
             return redirect(response, `/chat?said=${encodeURIComponent("a message is 1 to 2000 characters")}`);
         }
-        // Secrets refuse BEFORE any row or request exists — nothing stored,
-        // nothing sent (v3 brief; scanForSecrets is the same high-confidence
-        // set the evidence path trusts).
         if (scanForSecrets(message).length > 0) {
             return redirect(response, `/chat?said=${encodeURIComponent("that looks like a credential — chat never forwards or stores those")}`);
         }
@@ -1046,8 +898,6 @@ export function createChatHandlers(runtime) {
         const turnRepos = managedRepos();
         const snapshot = withDispatchDiagnoses(store, store.chatSnapshot(turnRepos, now), now);
         const { document } = buildDataDocument(snapshot);
-        // The WHOLE outbound body is scanned — a token in a task title
-        // refuses the turn exactly like one typed in the box (v2 ruling 4).
         const composed = composeRequest({
             provider: enabled.config.provider,
             model: enabled.config.model,
@@ -1058,17 +908,12 @@ export function createChatHandlers(runtime) {
         if (scanForSecrets(composed.body).length > 0) {
             return redirect(response, `/chat?said=${encodeURIComponent("fleet context contains something credential-shaped — chat refuses to send it; find and remove it first")}`);
         }
-        // Sprint 8: the organisation policy allows this chat's provider and model, or the turn doesn't start.
         const disallowed = store.agentPolicyRefusal(enabled.config.provider, enabled.config.model);
         if (disallowed !== null)
             return redirect(response, `/chat?said=${encodeURIComponent(disallowed)}`);
         const reserved = worstCaseForPrice(enabled.price, Buffer.byteLength(composed.body, "utf8"));
-        // The password comes last, right where the turn opens: every refusal above leaves an explicit re-check unspent,
-        // and a turn that doesn't open (a cap, a budget) puts it back.
         const password = body.get("token") ?? "";
         const opened = spendingOnlyOnSuccess(() => {
-            // Typed now, or (cockpit B2) a password or explicit provider re-check given on this session, on a direct local
-            // request, within its window. An ordinary provider sign-in never starts that window.
             if (!withFreshness("chat-send", () => authenticateApprover(who, password)).ok)
                 return null;
             return store.openChatTurn({
@@ -1108,7 +953,6 @@ export function createChatHandlers(runtime) {
         const key = url.pathname.split("/")[3];
         const chat = who.session.chat;
         const candidate = chat?.candidates.get(key);
-        // The filing act creates durable rows from model text: password again.
         const password = body.get("token") ?? "";
         if (password === "" || !authenticateApprover(who, password).ok) {
             return redirect(response, `/chat?said=${encodeURIComponent("filing a draft takes your password, typed again")}`);
@@ -1116,7 +960,6 @@ export function createChatHandlers(runtime) {
         if (chat === undefined || candidate === undefined) {
             return refuse(response, who, 404, "that draft is gone — drafts live in the session and do not survive restarts", "/chat");
         }
-        // Single-use CAS with no await between check and claim (v2 new 3).
         if (candidate.state !== "pending")
             return refuse(response, who, 409, "that draft is already being filed", "/chat");
         candidate.state = "filing";
@@ -1125,8 +968,6 @@ export function createChatHandlers(runtime) {
             candidate.state = "pending";
             return refuse(response, who, 409, "the world changed since this draft was made — it cannot be filed", "/chat");
         }
-        // Re-validated at the act: the door runs every field check again, and
-        // the fields are scanned for secrets before they become durable.
         const acceptanceFields = candidate.draft.acceptance.flatMap(c => [c.statement, ...(c.how === null ? [] : [c.how])]);
         const fields = [candidate.draft.title, candidate.draft.goal, candidate.draft.outOfScope ?? "", ...candidate.draft.touches, ...acceptanceFields];
         if (scanForSecrets(fields.join("\n")).length > 0) {
@@ -1172,10 +1013,8 @@ export function createChatHandlers(runtime) {
         }
         return redirect(response, "/chat");
     }
-    /** Chat's first run: the steps, first tasks until the first task exists, and the sandbox while no agent is signed in. */
     function chatFirstRun(now, project) {
         const repo = project ?? managedRepos()[0] ?? null;
-        // Done only when a task in this project could start: a live builder bound to it, as dispatch decides.
         const steps = withBuilderStep(firstRunStepsNow(now), builderReadyFor(store, firstRunBuilderRepo(store, project, visible, managedRepos()), now));
         if (steps === null)
             return undefined;
@@ -1187,13 +1026,10 @@ export function createChatHandlers(runtime) {
             suggestions: taskFiled || repo === null ? [] : firstTasksFor(repo),
             sandbox: agent !== undefined && !agent.done && !agent.checking ? SANDBOX_COMMAND : null,
             intro: HOW_IT_WORKS,
-            lead: lead === null ? null : { words: `The lead uses ${lead}`, href: "/settings/lead" },
-            // With no lead yet and no agent signed in, the page asks this computer again on its own.
+            lead: lead === null ? null : { words: `Chat uses ${lead}`, href: "/settings/lead" },
             recheck: store.getChatConfig() === null && agent !== undefined && !agent.done ? "/lead/check" : null,
         };
     }
-    /** After the first Ready result, once (onboarding): the phone, by a chat app or the console over Tailscale. */
-    /** Chat's one-line pointer to the phone setup: after the first Ready result, until put away or Telegram is paired. */
     function phoneCard(who, now) {
         if (who.role !== "approver" || store.isDemo() || store.firstSuccessAt(now) === null || store.installationFact(PHONE_CARD_FACT) !== null)
             return undefined;
@@ -1202,16 +1038,12 @@ export function createChatHandlers(runtime) {
             return undefined;
         return phoneSetup(who);
     }
-    /** The project a chat request names: exactly one, visible to this person
-     * and one of this console's projects; undefined when refused. */
     function chatProjectOf(values) {
         if (values.length === 0)
             return null;
         const wanted = values[0] ?? "";
         return values.length === 1 && visible(wanted) && managedRepos().includes(wanted) ? wanted : undefined;
     }
-    /** Which live display each progress handle started: ending a turn ends only its own display (a turn stopped from
-     * another window that settles late can never end the next turn's). */
     const progressOf = new WeakMap();
     function beginLiveTurn(thread, shape = {}) {
         const previous = liveTurns.get(thread);
@@ -1219,7 +1051,6 @@ export function createChatHandlers(runtime) {
             clearTimeout(previous.expiry);
         const live = { steps: [], done: false, ok: false, listeners: previous?.listeners ?? new Set(), startedAt: clock().getTime(), stepAt: [], reply: createLiveReply(shape) };
         liveTurns.set(thread, live);
-        // A page that has this conversation open follows the reply (GET /live, its chat room).
         runtime.liveTurnStarted(thread);
         const newStep = () => { live.steps.push({ tools: [], toolCalls: [], text: "" }); live.stepAt.push(clock().getTime()); };
         const current = () => live.steps.at(-1) ?? (newStep(), live.steps.at(-1));
@@ -1248,7 +1079,6 @@ export function createChatHandlers(runtime) {
                 (live.confirmed ??= [])[live.steps.length - 1] = event.final === true;
             }
             else if (event.kind === "blocked") {
-                // Held back as a possible password or key: no step keeps its words (the Live grid's tile reads these too).
                 for (const step of live.steps)
                     step.text = "";
             }
@@ -1292,7 +1122,6 @@ export function createChatHandlers(runtime) {
         const turn = store.getLeadTurn(noted.turn);
         return turn !== null && turn.session === liveSession ? noted.message : null;
     }
-    /** A finished demo exchange's result, read back from the evidence its run actually stored. */
     function demoResultView(exchange) {
         if (exchange.runId === null || exchange.taskId === null)
             return null;
@@ -1333,9 +1162,8 @@ export function createChatHandlers(runtime) {
         }
         const file = join(options.configDir, `chat-key-${provider}`);
         writeFsFileSync(file, `${key.trim()}\n`, { mode: 0o600 });
-        // writeFileSync applies the mode only on creation; assert it regardless.
         chmodSync(file, 0o600);
-        runtime.catalogCache = null; // a new key may see a different catalog
+        runtime.catalogCache = null;
         return { ok: true };
     }
     function forgetChatKey(provider) {
@@ -1345,12 +1173,9 @@ export function createChatHandlers(runtime) {
             rmFileSync(join(options.configDir, `chat-key-${provider}`));
         }
         catch {
-            // never stored — nothing to forget
         }
         runtime.catalogCache = null;
     }
-    /** Session-memory hygiene: drafts age out; a filed or dead session frees
-     * its bytes; the per-approver cap spans ALL that approver's sessions. */
     function sweepChatDrafts(nowMs) {
         for (const session of sessions.values()) {
             if (session.chat === undefined)
@@ -1361,10 +1186,6 @@ export function createChatHandlers(runtime) {
             }
         }
     }
-    /** The one network call a turn makes, run detached from the request that
-     * opened it. Every failure maps to the closed enum BEFORE anything can
-     * log it; a turn that may have started but has no usable usage LATCHES
-     * (unknown spend blocks the credential until acknowledged).  */
     async function runChatTurn(turnId, session, enabled, userMessage, dataDocument, turnRepos) {
         const started = store.startChatTurn(turnId, new Date());
         if (!started.ok)
@@ -1396,7 +1217,6 @@ export function createChatHandlers(runtime) {
         };
         if (!result.ok) {
             if (result.problem.startsWith("status-")) {
-                // The provider ANSWERED with an error: nothing billed.
                 finish({ state: "failed", failureReason: "provider-error", settledMicrousd: 0 });
                 tell(null, "The chat provider turned the request down. Nothing was kept or charged. Try again in a minute.");
             }
@@ -1409,18 +1229,14 @@ export function createChatHandlers(runtime) {
                 tell(null, "The chat provider stopped responding partway through, and the cost isn't known, so chat is paused. Confirm the cost on this page to turn chat back on.");
             }
             else {
-                // 200 with an unusable wrapper: billed, amount unproven.
                 finish({ state: "failed", failureReason: "malformed-reply", settledMicrousd: null, unknownSpend: true });
                 tell(null, "The chat provider sent back an answer that couldn't be read, and its cost isn't known, so chat is paused. Confirm the cost on this page to turn chat back on.");
             }
             return;
         }
-        // The pinned math, or the provider's own reported charge when that is
-        // HIGHER — the ledger never undercounts what actually left the wallet.
         const pinnedSettle = settleForPrice(enabled.price, result.answer.tokensIn, result.answer.tokensOut);
         const settled = Math.max(pinnedSettle, result.answer.reportedCostMicrousd ?? 0);
         const envelope = parseAssistantEnvelope(result.answer.text);
-        // v140: what the provider's response body itself reported (absent: unreported, kept NULL).
         const reported = { modelReported: result.answer.modelReported ?? null, reportedCostUsd: result.answer.reportedCostUsd ?? null };
         if (!envelope.ok) {
             finish({
@@ -1468,9 +1284,6 @@ export function createChatHandlers(runtime) {
         });
         tell(envelope.envelope.reply, null, envelope.proposalsDiscarded);
     }
-    /** The Chat landing's live view: each agent at work now with its task and
-     * phase, four counts, plan-window use (never dollars: subscriptions don't
-     * bill per run) and Catch up's items, each tagged with its tab. Reads only. */
     function chatHomeOf(who, repos, now) {
         const access = workAccess();
         const admitted = (repo) => repo === null ? visible(null) : repos.includes(repo);
@@ -1480,13 +1293,11 @@ export function createChatHandlers(runtime) {
                 agent: `${providerName(run.provider)} on ${run.runner}`, phase: homePhaseWords(run), project: run.repo === null ? null : projectName(run.repo), since: run.startedAt,
                 activity: runActivityOf(store, run, now) };
         });
-        // The three whole views, read at most once per workspace revision (and on a read worker first when one is attached).
         const view = (name) => sharedIndexPage(access, { view: name, limit: WORK_INDEX_MAX_LIMIT, ...(evidenceRoot === undefined ? {} : { root: evidenceRoot }) });
         const all = view("all"), needs = view("needs-you"), done = view("completed");
         const weekAgo = new Date(now.getTime() - 7 * 86_400_000).toISOString();
         const counts = [
             { key: "working", label: "Working now", value: agents.length, href: "/tasks?view=running" },
-            // Each by its shared headline, as the Tasks list words it: a result whose checks failed waits on you, it isn't ready.
             { key: "waiting", label: "Waiting on you", value: needs.items.filter(one => one.status.label !== "Ready for review").length, href: "/tasks?view=needs-you" },
             { key: "ready", label: "Ready to review", value: needs.items.filter(one => one.status.label === "Ready for review").length, href: "/tasks?view=needs-you" },
             { key: "done", label: "Done this week", value: done.items.filter(one => (one.completion?.at ?? one.updatedAt) >= weekAgo).length, href: "/tasks?view=completed" },
@@ -1502,7 +1313,6 @@ export function createChatHandlers(runtime) {
             })(),
         }));
         const windows = who.via === "cookie" && store.isInstanceOperator(who.name) ? limitsView(store.providerLimits(), [], { project: projectName, subagent: id => `Subagent ${id}` }, now) : null;
-        // One line: what this person's lead is doing now and when it last acted.
         const activity = leadActivity(store, who.name);
         const leadTask = activity?.taskId == null ? null : store.lookupRef(activity.taskId);
         const lead = activity === null ? null : { name: activity.name, doing: activity.doing, at: activity.at,
@@ -1512,8 +1322,6 @@ export function createChatHandlers(runtime) {
             planUse: (windows?.tiles ?? []).map(one => ({ name: one.name, window: one.window, percent: one.percent, detail: one.detail, tone: one.tone })),
         };
     }
-    /** The first tasks last found for a project (docs/plans/get-side-effects.md): the background checks ask gh and
-     * git grep while the first run is open; a page shows what they found, or the generic three. */
     function firstTasksFor(repo) {
         return firstTasks.get(repo)?.found ?? firstTaskSuggestions({ issues: [], todos: [] });
     }