toolroll 0.9.15 → 0.9.16

package/dist/result-acts.js

@@ -23,6 +23,25 @@
  * which act is ink; the page recomputes it as the person answers each check. */
 /** The words over the reason field an Accept of a refuted result requires. */
 export const ACCEPT_NEEDS_REASON = "Accepting needs a reason";
+export const FAILED_CHECK = /^the repository's approved verification command exited (-?[0-9]+)/;
+export function evidenceProblemOf(verdict, reasons) {
+    if (verdict === "verified" || verdict === "attested")
+        return "none";
+    if (verdict === "refuted")
+        return reasons.some(reason => FAILED_CHECK.test(reason)) ? "checks-failed" : "mismatched";
+    return "missing";
+}
+/** Why a result can't be accepted as it stands, in one plain line, or null
+ * when nothing refutes it (a person's acceptance settles it). The result page
+ * shows it before Request changes, its one ink act. */
+export function cantAcceptYetOf(verdict, reasons, accepted) {
+    if (accepted || verdict !== "refuted")
+        return null;
+    // A mismatch is the status card's own headline; here only what accepting takes.
+    return evidenceProblemOf(verdict, reasons) === "checks-failed"
+        ? "Can't accept yet: the project's check failed on these changes."
+        : ACCEPT_NEEDS_REASON;
+}
 export function resultActsOf(facts) {
     const request = facts.canRequest ? "request-changes" : null;
     const accept = facts.accept === null ? null : "accept";

package/dist/retention.js

@@ -263,11 +263,17 @@ export function sweepRetention(store, evidenceRoot, now, actor = "worker") {
         if (periods.chat !== null) {
             const team = db.prepare("DELETE FROM team_message WHERE message = ? AND status NOT IN ('queued', 'running', 'uncertain')");
             const message = db.prepare("DELETE FROM mate_message WHERE id = ? AND NOT EXISTS (SELECT 1 FROM team_message WHERE message = ?)");
+            const asked = db.prepare("SELECT turn FROM mate_message WHERE id = ? AND role = 'assistant' AND turn IS NOT NULL");
+            // The lead's question goes with the reply that asked it; its buttons then say it expired.
+            const ask = db.prepare("DELETE FROM mate_ask WHERE turn = ? AND NOT EXISTS (SELECT 1 FROM mate_message WHERE turn = ? AND role = 'assistant')");
             for (const one of plan.items.chat) {
                 team.run(one.id);
+                const turn = asked.get(one.id)?.["turn"];
                 if (Number(message.run(one.id, one.id).changes) === 1) {
                     done.chat.count++;
                     done.chat.bytes += one.bytes;
+                    if (turn !== undefined && turn !== null)
+                        ask.run(Number(turn), Number(turn));
                 }
             }
         }

package/dist/serve.js

@@ -1,3 +1,4 @@
+import { checkLeadIdentity, leadIdentityOf, leadNameOf, LEAD_NAME_MAX, LEAD_PERSONA_MAX } from "./lead-identity.js";
 import { withActor } from "./actor.js";
 import { repositoryContext, repositoryContextRead } from './repository-context.js';
 import { ADD_TESTS_ACTION, followUpChecksOf, requestFollowUpChecks, fileAddTestsTask, resultCheckLevel } from './result-follow-ups.js';
@@ -6,6 +7,7 @@ import { repositoryContextHtml } from './repository-context-ui.js';
 import { browserAssetsAvailable, browserWorkspaceDocument, serveBrowserAsset } from './browser-shell.js';
 import { browserCrewOf, browserCrewFromIndex, browserWorkActionHref, browserProjectsOf, browserNavigationOf } from './browser-workspace.js';
 import { configureLeadFollow, leadFollowStatus, runLeadFollowPass } from './lead-follow.js';
+import { cancelCommitment, conditionWords, openCommitments } from './lead-commitments.js';
 import { startMaintenance } from './maintenance.js';
 import { codingHandoffPreview, createCodingHandoff } from './coding-handoff.js';
 import { codingShippingHtml, CODING_SHIPPING_CSS } from './coding-shipping-ui.js';
@@ -65,7 +67,7 @@ import { prepareWorkspaceRevision, WorkspaceValidatorCache } from "./workspace-r
 import { workIndexPage, workCountsByProject, WorkIndexCursorError, WORK_INDEX_MAX_LIMIT } from "./work-index.js";
 import { leadActivity } from "./lead-voice.js";
 import { openWorkDecisionOf } from "./work-summary.js";
-import { acceptAndCompleteAsOperator, assignmentOf, checkAssignmentAsOperator, personCheckPending } from './assignment.js';
+import { acceptAndCompleteAsOperator, assignmentOf, checkAssignmentAsOperator, owedAcceptance } from './assignment.js';
 import { demoChatHtml, demoThreadHtml, DEMO_CHAT_SCRIPT } from "./demo-chat.js";
 import { pullRequestSettingsHtml, PULL_REQUEST_SETTINGS_CSS } from './pull-request-ui.js';
 import { checkSettingsHtml, CHECK_SETTINGS_CSS } from './check-levels-ui.js';
@@ -185,7 +187,7 @@ import { dirname } from "node:path";
 import { AsyncLocalStorage } from "node:async_hooks";
 import { loadOrCreateVapidKeys, validatePushEndpoint } from "./push.js";
 import { parseGithubRepo, previewGithubRepo, cloneGithubRepo, listGithubRepos, isLargeRepo } from "./onboard.js";
-import { verifiedAuthor, LEAD_THREAD, isDigestTime } from "./store.js";
+import { verifiedAuthor, LEAD_THREAD, isDigestTime, MATE_ASK_OTHER } from "./store.js";
 import { digestTimes } from "./digest-times.js";
 import { updateRepos, addRepos, removeRepos } from "./repos.js";
 import { run as execRun } from "./exec.js";
@@ -2465,6 +2467,7 @@ export function createDecisionServer(options) {
                 csrf,
                 canRetryReview: who.via === "cookie" && who.role === "approver",
                 noted: url.searchParams.get("noted") !== null,
+                refusal: Object.hasOwn(RESULT_REFUSALS, url.searchParams.get("refused") ?? "") ? RESULT_REFUSALS[url.searchParams.get("refused")] : null,
                 tab: parseResultTab(url.searchParams.get("tab")),
                 user: who.name,
                 now,
@@ -2914,8 +2917,9 @@ export function createDecisionServer(options) {
             const version = url.searchParams.get("version");
             if (version !== null && !family.versions.some(one => one.id === version))
                 return refuse(response, who, 404, "That version is not available for this task.", taskHref(family.root.id));
+            // A version's own address lands on its family's page, still asking for the plan editor when it did (Chat's Edit plan).
             if (task.taskId !== family.root.id)
-                return redirect(response, `${taskHref(family.root.id)}?version=${encodeURIComponent(task.taskId)}`);
+                return redirect(response, `${taskHref(family.root.id)}?version=${encodeURIComponent(task.taskId)}${url.searchParams.get("edit") === "plan" ? "&edit=plan" : ""}`);
             return taskScreen(response, who, version ?? family.current.id, null, 200, undefined, undefined, url.searchParams.get("edit") === "plan");
         }
         // v103: a task's evidence pack, as a printable page or JSON (the whole family, sealed ledger entries included).
@@ -3482,7 +3486,7 @@ export function createDecisionServer(options) {
             const fragments = known === version
                 ? null
                 : {
-                    thread: mateThreadHtml({ ...rows, focusTask, csrf, now, problem: takeMateNote(csrf, session.id) }),
+                    thread: mateThreadHtml({ ...rows, focusTask, csrf, now, problem: takeMateNote(csrf, session.id), chatProject }),
                     after: mateAfterComposerHtml({ messages: rows.messages, pending: rows.pending, focusTask, csrf }),
                     live: focusTask === null ? null : taskChatLiveRegion(focusTask, csrf, true, rows.pending !== null),
                 };
@@ -4132,8 +4136,9 @@ export function createDecisionServer(options) {
                 returnTo: "/settings/lead",
             };
             const signedIn = localSignIn?.states.claude === "connected" ? "Claude Code" : localSignIn?.states.codex === "connected" ? "Codex" : null;
+            const promises = openCommitments(store, who.name, 50).map(one => ({ id: one.id, what: one.what, when: conditionWords(store, one.condition), until: one.expiresAt }));
             return sendScreen(response, 200, screen("Lead", leadSettingsHtml({ config, facts, words: leadWords(), signedIn, command: agentSignInCommand(),
-                said: url.searchParams.get("said") }), { chrome: chromeFor(project, "settings") }));
+                said: url.searchParams.get("said"), saved: url.searchParams.get("saved") === "1", identity: leadIdentityOf(store, who.name), promises }), { chrome: chromeFor(project, "settings") }));
         }
         if (url.pathname === "/settings/telegram") {
             // Any approver pairs their OWN phone here; the bot token stays on /settings.
@@ -4432,8 +4437,16 @@ export function createDecisionServer(options) {
         // One reply runs at a time per person; this thread shows it only when
         // the reply is its own.
         const live = store.liveMateTurnFor(who.name);
+        const messages = store.listMateMessages(opened.thread.id, 40);
+        // The lead's question with buttons, while its reply is the last word in the thread.
+        const last = messages.at(-1);
+        const ask = last?.role === "assistant" && last.turn !== null && store.getMateTurn(last.turn)?.approver === who.name ? store.mateAskOpen(last.turn, now) : null;
+        // Answered questions stay readable above the answer; only their buttons go.
+        const asks = new Map(messages.flatMap(one => { const asked = one.role === "assistant" && one.turn !== null ? store.mateAsk(one.turn) : null; return asked === null ? [] : [[asked.turn, asked]]; }));
         return {
-            messages: store.listMateMessages(opened.thread.id, 40),
+            messages,
+            ask,
+            asks,
             proposals,
             decisions: decisionsFor(store, [...proposals, ...coordinatorProposals]),
             coordinatorProposals,
@@ -4508,7 +4521,7 @@ export function createDecisionServer(options) {
         const rows = mateConversationRows(who, principal, focusTask, now, chatProject);
         return {
             sessionId: session.id, user: session.approver, version: mateChatVersion({ ...rows, focusTask }),
-            messages: mateBrowserMessages(rows, who.session.csrf, back),
+            messages: mateBrowserMessages(rows, who.session.csrf, back, { task: focusTask?.id ?? null, project: chatProject }),
             pendingTurnId: rows.pending?.id ?? null, requestId: randomBytes(16).toString("hex"), maxChars: MATE_MESSAGE_MAX_CHARS,
             taskId: focusTask?.id ?? null, resultRunId, project: focusTask === null ? chatProject : null,
         };
@@ -4976,7 +4989,8 @@ export function createDecisionServer(options) {
             try {
                 const project = s.chrome.active === 'chat' ? null : s.chrome.project;
                 crew = extras.team?.tasks ? browserCrewFromIndex(extras.team.tasks, extras.team.selected?.id) : requestFacts.workCrew?.project === project ? browserCrewFromIndex(requestFacts.workCrew.page)
-                    : browserCrewOf(store, clock(), { principal: 'operator', repos: managedRepos(), includeUnplaced: false }, { evidenceRoot, project });
+                    // The reader's own lead's claims read "<name> is on it" here too.
+                    : browserCrewOf(store, clock(), { principal: 'operator', repos: managedRepos(), includeUnplaced: false, viewer: requestFacts.actor ?? null }, { evidenceRoot, project });
             }
             catch {
                 notices.push('Crew updates are unavailable. Open Tasks to inspect saved work.');
@@ -5018,6 +5032,7 @@ export function createDecisionServer(options) {
             const request = requestFacts.workspaceRequest;
             const workspace = {
                 version: 1, path: currentPath, title: s.title, user: requestFacts.actor ?? '', csrf: requestFacts.csrf, sensitive,
+                ...(requestFacts.actor ? { leadName: leadNameOf(store, requestFacts.actor) } : {}),
                 refreshUrl: path.pathname + path.search,
                 receipt: conversation !== null && request && REQUEST_TOKEN.test(request)
                     ? { request, received: store.mateRequestReceipt(conversation.sessionId, request) !== null } : null,
@@ -5123,7 +5138,7 @@ export function createDecisionServer(options) {
         // One line: what this person's lead is doing now and when it last acted.
         const activity = leadActivity(store, who.name);
         const leadTask = activity?.taskId == null ? null : store.lookupRef(activity.taskId);
-        const lead = activity === null ? null : { doing: activity.doing, at: activity.at,
+        const lead = activity === null ? null : { name: activity.name, doing: activity.doing, at: activity.at,
             href: leadTask == null || !admitted(leadTask.repo) ? null : taskHref(familyOf(activity.taskId)?.root.id ?? activity.taskId) };
         return {
             agents, counts, catchUp, allHref: "/work", ...(lead === null ? {} : { lead }),
@@ -5224,7 +5239,7 @@ export function createDecisionServer(options) {
         };
     }
     function workAccess() {
-        // The reader's own lead's claims read "Your lead is on it" (lead-voice.ts); nobody else's.
+        // The reader's own lead's claims read "<name> is on it" (lead-voice.ts); nobody else's.
         return { principal: 'operator', repos: admissionList(), includeUnplaced: visible(null), viewer: requestContext.getStore()?.actor ?? null };
     }
     // All project counts are read together. No task artifacts or processes are
@@ -9206,6 +9221,25 @@ export function createDecisionServer(options) {
         }
         // Turn the lead on with the agent signed in on this computer: its membership spends no dollars, so like starting a
         // conversation it needs no second password; the full form (Advanced) still asks for one.
+        // Settings → Lead: the name and persona this person's lead speaks with.
+        if (url.pathname === "/settings/lead/identity") {
+            if (who.via !== "cookie" || who.role !== "approver")
+                return refuse(response, who, 403, "An approver names their lead.", "/settings/lead");
+            const checked = checkLeadIdentity(body.get("name") ?? "", body.get("persona") ?? "");
+            if (!checked.ok)
+                return redirect(response, chatReturnWithSaid("/settings/lead", checked.message));
+            store.setLeadConfig(who.name, checked.identity.name, checked.identity.persona, now);
+            return redirect(response, "/settings/lead?saved=1");
+        }
+        // Settings → Lead: stop the lead following up on one of your promises.
+        if (url.pathname === "/settings/lead/promise/cancel") {
+            if (who.via !== "cookie" || who.role !== "approver")
+                return refuse(response, who, 403, "An approver manages the lead's promises.", "/settings/lead");
+            const id = Number(body.get("promise"));
+            const done = Number.isSafeInteger(id) && cancelCommitment(store, who.name, id, who.name, "Cancelled in Settings.", now);
+            // The promise leaving the list says it was cancelled; only a refusal needs words.
+            return redirect(response, done ? "/settings/lead" : chatReturnWithSaid("/settings/lead", "That promise was already closed."));
+        }
         if (url.pathname === "/settings/lead/on") {
             if (who.via !== "cookie" || who.role !== "approver")
                 return refuse(response, who, 403, "An approver turns the lead on.", "/settings/lead");
@@ -9519,7 +9553,7 @@ export function createDecisionServer(options) {
                 }
                 const opened = store.openMateThread(who.name, principal.ceilingDigest, now, chatScopeOf(focusTask, chatProject));
                 const onProgress = beginLiveTurn(opened.thread.id);
-                void runMateTurn({ store, who: principal, session: mateSession, thread: opened.thread, config: enabled.config, key: enabled.key, message, onProgress, ...(requestId === null ? {} : { requestId }), ...(focusTask === null && chatProject !== null ? { context: `Current project: ${projectName(chatProject)} (${chatProject}). Keep this conversation about that project unless the operator explicitly asks to broaden it; use it as the repo for project tools.` } : {}), ...(focusTask === null ? {} : { context: `Current task: ${focusTask.id}. Read it with get_task before answering or proposing changes. Read its currentExecution next and bind new actions to that exact execution. Never replace the target of a prior proposal with a newer revision. Keep this turn about that task unless the operator explicitly asks to broaden it.${resultContext}${modeContext}` }), fetcher: chatFetcher, ...(options.subscriptionChatRunner === undefined ? {} : { subscriptionRunner: options.subscriptionChatRunner }), clock, evidenceRoot })
+                void runMateTurn({ store, who: principal, session: mateSession, thread: opened.thread, config: enabled.config, key: enabled.key, message, onProgress, channel: "console", ...(requestId === null ? {} : { requestId }), ...(focusTask === null && chatProject !== null ? { context: `Current project: ${projectName(chatProject)} (${chatProject}). Keep this conversation about that project unless the operator explicitly asks to broaden it; use it as the repo for project tools.` } : {}), ...(focusTask === null ? {} : { context: `Current task: ${focusTask.id}. Read it with get_task before answering or proposing changes. Read its currentExecution next and bind new actions to that exact execution. Never replace the target of a prior proposal with a newer revision. Keep this turn about that task unless the operator explicitly asks to broaden it.${resultContext}${modeContext}` }), fetcher: chatFetcher, ...(options.subscriptionChatRunner === undefined ? {} : { subscriptionRunner: options.subscriptionChatRunner }), clock, evidenceRoot })
                     .then(outcome => {
                     if (!outcome.ok)
                         noteMate(who.session.csrf, "turn" in outcome ? outcome.turn : null, outcome.message);
@@ -11019,8 +11053,14 @@ export function createDecisionServer(options) {
                         throw error;
                     saved = { ok: false, status: 409, message: "Not saved: this would change what the agent may do. Change permissions in Details, under edit the scope." };
                 }
-                if (!saved.ok)
-                    return taskScreen(response, who, taskId, saved.message, saved.status, body);
+                if (!saved.ok) {
+                    // Refused because the plan moved on: the draft comes back with the version now on file, so saving it
+                    // again (having read the reason) can succeed instead of being refused the same way.
+                    const draft = new URLSearchParams(body);
+                    if (saved.status === 409)
+                        draft.set("sawDigest", store.getScope(taskId)?.digest ?? "");
+                    return taskScreen(response, who, taskId, saved.message, saved.status, draft);
+                }
                 return redirect(response, taskHref(taskId));
             }
             case "approve": {
@@ -11135,8 +11175,13 @@ export function createDecisionServer(options) {
                     note = validated.note;
                 }
                 // A failed task's result is accepted only anyway, on purpose: with a reason.
-                if (note === null && store.getTask(taskId)?.state === "failed")
-                    return taskScreen(response, who, taskId, "Accepting anyway needs a reason.", 400);
+                if (note === null && store.getTask(taskId)?.state === "failed") {
+                    // Posted from the result page: back there, where the reason field is, with the refusal said on it.
+                    const back = body.get("return") === null ? null : safeReturn(body.get("return"));
+                    if (back !== null && back.startsWith("/review?"))
+                        return redirect(response, withRefusal(back, "reason"));
+                    return taskScreen(response, who, taskId, ACCEPT_ANYWAY_NEEDS_REASON, 400);
+                }
                 store.acceptProof(latest.id, verifiedAuthor(who.name), note, now);
                 return redirect(response, body.get("return") === null ? taskHref(taskId) : safeReturn(body.get("return")));
             }
@@ -11166,7 +11211,7 @@ export function createDecisionServer(options) {
                     const publish = body.get("publish") === "1";
                     const finished = acceptAndCompleteAsOperator(store, taskId, { runId: Number(namedRun), receiptDigest: digest, note }, principal, now, evidenceRoot, publish ? accepted => completeAndOpenPullRequest(store, { taskId, digest: accepted, runId: Number(namedRun), who: principal, root: evidenceRoot }, now) : undefined);
                     if (!finished.ok)
-                        return taskScreen(response, who, taskId, finished.message, 409);
+                        return taskScreen(response, who, taskId, finished.message, finished.reason === "needs-reason" ? 400 : 409);
                     return redirect(response, publish ? `${taskHref(familyOf(taskId)?.root.id ?? taskId)}#merge` : body.get("return") === null ? reviewHref(taskId, Number(namedRun)) : safeReturn(body.get("return")));
                 }
                 if (body.get("publish") === "1") {
@@ -17548,6 +17593,14 @@ function leadSettingsHtml(data) {
         `<p><a href="/settings">Settings</a></p><h1>Lead</h1>`,
         data.said === null ? "" : `<p class="problem" role="status">${escape(data.said)}</p>`,
         `<section class="card lead-settings" data-lead-settings>${summary}</section>`,
+        data.identity === undefined ? "" : `<form method="post" action="/settings/lead/identity" class="card lead-identity" data-lead-identity>` +
+            `<input type="hidden" name="csrf" value="${escape(facts.csrf)}">` +
+            `<label>Name your lead<input name="name" value="${escape(data.identity.name)}" maxlength="${LEAD_NAME_MAX}" autocomplete="off" required></label>` +
+            `<label>Persona<textarea name="persona" rows="4" maxlength="${LEAD_PERSONA_MAX}">${escape(data.identity.persona)}</textarea></label>` +
+            `<button type="submit">Save</button>${data.saved === true ? ` <span class="meta" role="status">Saved.</span>` : ""}</form>`,
+        // What the lead promised to follow up on; it reports each once, here in chat, and drops it after 7 days.
+        (data.promises ?? []).length === 0 ? "" : `<section class="card lead-promises" data-lead-promises><h2>Promises</h2><ul class="lead-promise-list">${data.promises.map(one => `<li data-promise="${one.id}"><p>${escape(one.what)}</p><p class="meta">${escape(one.when.charAt(0).toUpperCase() + one.when.slice(1))} · <span class="nowrap">until ${escape(new Date(one.until).toLocaleDateString("en-US", { month: "short", day: "numeric", timeZone: "UTC" }))}</span></p>` +
+            `<form method="post" action="/settings/lead/promise/cancel" class="inline">${hidden}<input type="hidden" name="promise" value="${one.id}"><button type="submit" class="secondary">Cancel</button></form></li>`).join("")}</ul></section>`,
         `<details class="lead-advanced" data-lead-advanced><summary>Advanced</summary>`,
         leadConfigForm(config, facts),
         config === null ? "" : `<form method="post" action="/chat/config" class="inline">${hidden}<input type="hidden" name="off" value="1">` +
@@ -18041,13 +18094,30 @@ function coordinatorProposalsSection(proposals, decisions, csrf, now, heading =
         proposals.map(one => coordinatorProposalCard(one, csrf, now, decisions.get(typeof one.payload["decision"] === "number" ? one.payload["decision"] : -1) ?? null, returnTo)).join("") +
         `</div>`);
 }
+/** The lead's question as buttons: each option sends itself as the next message (the same POST as a typed one);
+ * "Something else" moves to the composer. Nothing shows while a reply is running. */
+function mateAskHtml(ask, csrf, target, composer, open = true) {
+    if (!open)
+        return `<div class="so-owner-ask" data-ask="${ask.turn}"><p class="so-owner-ask-question"><strong>${escape(ask.question)}</strong></p></div>`;
+    const hidden = `<input type="hidden" name="csrf" value="${escape(csrf)}">` +
+        (target.task !== null ? `<input type="hidden" name="task" value="${escape(target.task)}">` : target.project !== null ? `<input type="hidden" name="project" value="${escape(target.project)}">` : "");
+    return `<div class="so-owner-ask" data-ask="${ask.turn}"><p class="so-owner-ask-question"><strong>${escape(ask.question)}</strong></p>` +
+        `<div class="so-owner-ask-options" role="group" aria-label="Answer options">` +
+        ask.options.map(option => `<form method="post" action="/chat" class="inline">${hidden}<button type="submit" name="message" value="${escape(option)}" class="so-suggestion quiet">${escape(option)}</button></form>`).join("") +
+        `<label for="${escape(composer)}" class="so-suggestion so-owner-ask-other">${escape(MATE_ASK_OTHER)}</label></div></div>`;
+}
 /** The thread's messages as the React conversation renders them, each
  * with the proposal cards its turn produced; `back` is where a card's
  * confirm or dismiss returns. */
-function mateBrowserMessages(rows, csrf, back) {
+function mateBrowserMessages(rows, csrf, back, target = { task: null, project: null }) {
+    const open = rows.pending === null ? rows.ask?.turn ?? null : null;
+    const asked = (turn) => {
+        const ask = turn === null ? undefined : rows.asks?.get(turn);
+        return ask === undefined ? "" : mateAskHtml(ask, csrf, target, target.task === null ? "lead-message" : "task-message", ask.turn === open);
+    };
     return rows.messages.map(message => ({
         id: message.id, role: message.role, text: message.text,
-        html: message.role === 'operator' ? `<p>${escape(message.text)}</p>` : renderChatText(message.text),
+        html: message.role === 'operator' ? `<p>${escape(message.text)}</p>` : renderChatText(message.text) + asked(message.turn),
         activity: message.activity, createdAt: message.createdAt,
         ...(() => {
             const parts = message.turn === null ? [] : rows.proposals.filter(one => one.turn === message.turn)
@@ -18070,6 +18140,7 @@ function mateChatVersion(rows) {
         rows.coordinatorProposals.map(one => [one.id, one.state, one.outcome === null ? null : JSON.stringify(one.outcome)]),
         [...rows.decisions.values()].map(one => [one.id, one.state, one.choice ?? null]),
         rows.pending === null ? null : [rows.pending.id, rows.pending.steps],
+        rows.ask?.turn ?? null,
         rows.recent[0] === undefined ? null : [rows.recent[0].id, rows.recent[0].state, rows.recent[0].failureReason],
         focus === null
             ? null
@@ -18125,6 +18196,10 @@ function mateThreadHtml(data) {
         const cards = message.turn === null ? [] : (byTurn.get(message.turn) ?? []);
         parts.push(`<div class="msg mate" data-message-role="assistant" data-key="m${message.id}"${message.id === latestReply ? ' id="latest"' : ""}>` +
             renderChatText(message.text) +
+            (() => {
+                const ask = message.turn === null ? undefined : data.asks?.get(message.turn);
+                return ask === undefined ? "" : mateAskHtml(ask, data.csrf, { task: data.focusTask?.id ?? null, project: data.chatProject ?? null }, "chat-message", data.pending === null && data.ask?.turn === ask.turn);
+            })() +
             cards.map(one => mateProposalCard(one, data.csrf, inert, data.decisions.get(typeof one.payload["decision"] === "number" ? one.payload["decision"] : -1) ?? null, data.focusTask === null ? null : returnTo)).join("") +
             `<div class="chat-message-foot">${chatActivity(message.activity)}<time datetime="${escape(message.createdAt)}">${escape(relativeAge(message.createdAt, data.now))}</time></div>` +
             `</div>`);
@@ -18185,12 +18260,12 @@ function matePage(chrome, data) {
     }
     const lastMessage = data.messages.at(-1);
     const latestReply = data.pending === null && lastMessage?.role === "assistant" ? lastMessage.id : null;
-    conversation.push(mateThreadHtml({ ...data, problem: null }));
+    conversation.push(mateThreadHtml({ ...data, problem: null, chatProject }));
     conversation.push(
     // The New update action (package 2): hidden until a live update lands
     // while the reader is above the latest message; a real button, so the
     // keyboard reaches it. Only this act moves the reader.
-    `<div class="chat-new-update-holder"><button type="button" class="chat-new-update" id="chat-new-update" hidden>New update ↓</button></div>`, `<form method="post" action="/chat" class="card composer" id="${latestReply === null && data.pending === null ? "latest" : "chat-composer"}" aria-label="message the mate" data-chat-session="${data.session.id}" data-chat-task="${escape(data.focusTask?.id ?? "")}" data-chat-user="${escape(data.session.approver)}" data-chat-busy="${data.pending === null ? "0" : "1"}" data-chat-version="${mateChatVersion(data)}" data-chat-approval="${escape(data.focusTask?.approval?.digest ?? "")}">`, `<input type="hidden" name="csrf" value="${escape(data.csrf)}">`, `<input type="hidden" name="request" value="${randomBytes(16).toString("hex")}"><input type="hidden" name="request-session" value="${data.session.id}">`, data.focusTask === null ? "" : `<input type="hidden" name="task" value="${escape(data.focusTask.id)}">`, chatProject === null ? "" : `<input type="hidden" name="project" value="${escape(chatProject)}">`, data.resultRunId == null ? "" : `<input type="hidden" name="result" value="${data.resultRunId}">`, `<label>Message<textarea name="message" rows="1" maxlength="${MATE_MESSAGE_MAX_CHARS}" placeholder="${data.focusTask !== null ? "Ask about this task…" : chatProject !== null ? `Ask about ${escape(projectName(chatProject))}…` : "Describe what you want done…"}"></textarea></label>`, `<button type="submit" aria-label="${data.pending === null ? "send message" : "wait for the current reply before sending"}"${data.pending === null ? "" : " disabled"}>Send</button>`, `</form>`, 
+    `<div class="chat-new-update-holder"><button type="button" class="chat-new-update" id="chat-new-update" hidden>New update ↓</button></div>`, `<form method="post" action="/chat" class="card composer" id="${latestReply === null && data.pending === null ? "latest" : "chat-composer"}" aria-label="message the mate" data-chat-session="${data.session.id}" data-chat-task="${escape(data.focusTask?.id ?? "")}" data-chat-user="${escape(data.session.approver)}" data-chat-busy="${data.pending === null ? "0" : "1"}" data-chat-version="${mateChatVersion(data)}" data-chat-approval="${escape(data.focusTask?.approval?.digest ?? "")}">`, `<input type="hidden" name="csrf" value="${escape(data.csrf)}">`, `<input type="hidden" name="request" value="${randomBytes(16).toString("hex")}"><input type="hidden" name="request-session" value="${data.session.id}">`, data.focusTask === null ? "" : `<input type="hidden" name="task" value="${escape(data.focusTask.id)}">`, chatProject === null ? "" : `<input type="hidden" name="project" value="${escape(chatProject)}">`, data.resultRunId == null ? "" : `<input type="hidden" name="result" value="${data.resultRunId}">`, `<label>Message<textarea id="chat-message" name="message" rows="1" maxlength="${MATE_MESSAGE_MAX_CHARS}" placeholder="${data.focusTask !== null ? "Ask about this task…" : chatProject !== null ? `Ask about ${escape(projectName(chatProject))}…` : "Describe what you want done…"}"></textarea></label>`, `<button type="submit" aria-label="${data.pending === null ? "send message" : "wait for the current reply before sending"}"${data.pending === null ? "" : " disabled"}>Send</button>`, `</form>`, 
     // Concise pass (2026-09-13): the status line speaks only when there is
     // a state to report — a reply in progress here, the connection from
     // the continuity script — and the composer carries no second intro.
@@ -18202,7 +18277,7 @@ function matePage(chrome, data) {
         workspace: {
             conversation: {
                 sessionId: data.session.id, user: data.session.approver, version: mateChatVersion(data),
-                messages: mateBrowserMessages(data, data.csrf, data.focusTask === null && chatProject === null ? null : returnTo),
+                messages: mateBrowserMessages(data, data.csrf, data.focusTask === null && chatProject === null ? null : returnTo, { task: data.focusTask?.id ?? null, project: chatProject }),
                 pendingTurnId: data.pending?.id ?? null, requestId: randomBytes(16).toString('hex'), maxChars: MATE_MESSAGE_MAX_CHARS,
                 taskId: data.focusTask?.id ?? null, resultRunId: data.resultRunId ?? null, project: chatProject,
             },
@@ -19529,6 +19604,15 @@ function accentHead() {
 }
 const requestContext = new AsyncLocalStorage();
 /** A same-site path or "/": never a scheme, a host, or a protocol-relative road. */
+/** The words a result page shows for a refusal its own form led to, by the fixed code a redirect carries. */
+const ACCEPT_ANYWAY_NEEDS_REASON = "Accepting anyway needs a reason.";
+const RESULT_REFUSALS = { reason: ACCEPT_ANYWAY_NEEDS_REASON };
+/** A same-site page address with a refusal code added, before any fragment. */
+function withRefusal(href, code) {
+    const at = href.indexOf("#");
+    const [path, hash] = at === -1 ? [href, ""] : [href.slice(0, at), href.slice(at)];
+    return `${path}${path.includes("?") ? "&" : "?"}refused=${code}${hash}`;
+}
 function safeReturn(raw) {
     if (raw === null || raw === undefined)
         return "/";
@@ -21779,12 +21863,13 @@ function reviewCockpitPage(chrome, data) {
         capped: queue.length >= data.queueCap ? data.queueCap : null,
         missing: data.missing === null ? null : `No completed task ${data.missing} is in view here — it may not be finished, or it is outside this console's projects.`,
         beyond: data.beyondQueue && selected !== null,
-        selected: detailParts === null ? null : detailParts.selected,
+        selected: detailParts === null ? null : data.refusal == null ? detailParts.selected : { ...detailParts.selected, problem: data.refusal },
     };
     return screen("review", [
         selected === null ? `<h1>Results</h1>` : "",
         missingNote,
         beyondNote,
+        data.refusal == null || selected === null ? "" : `<p class="problem" data-result-refusal>${escape(data.refusal)}</p>`,
         `<div class="cockpit">${queuePane}${detail}</div>`,
     ].join("\n"), {
         chrome,
@@ -22011,14 +22096,11 @@ function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user)
         },
     };
 }
-/** What Accept and finish owes before it completes, as the form asks for it: the person's own check (no
- * reason), an exception a report that doesn't match its changes needs a reason for, or nothing. */
+/** What Accept and finish owes before it completes, as the form asks for it: the server's own rule
+ * (owedAcceptance), so the form asks for exactly what the completion requires. */
 function owedAcceptanceOf(receipt) {
-    if (receipt === null || receipt.proofAcceptance !== null)
-        return null;
-    if (personCheckPending(receipt))
-        return { note: null };
-    return cantAcceptYetOf(receipt.proof?.verdict ?? null, receipt.proof?.reasons ?? [], false) === ACCEPT_NEEDS_REASON ? { note: "Why is this safe to accept?" } : null;
+    const owed = owedAcceptance(receipt);
+    return owed === null ? null : owed === "person-check" ? { note: null } : { note: "Why is this safe to accept?" };
 }
 function completionForm(taskId, runId, digest, csrf, pullRequestTo = null, accept = null) {
     // Accept and finish, in one request: with an acceptance owed (the person's own checks, or an exception and

package/dist/slack-chat.js

@@ -1,5 +1,6 @@
 import { chatFlowButtons } from "./chat-flow.js";
 import { chatQuestionButtons } from "./teammate-question.js";
+import { chatAskButtons } from "./chat-ask.js";
 import { channelInbox } from "./chat-inbox.js";
 import { roomCommand } from "./chat-rooms.js";
 import { processChatEvent, applyChatAction, planChatNotifications, channelAccess, planRoomMessages, } from "./chat-delivery.js";
@@ -359,6 +360,15 @@ export async function deliverSlackPart(options) {
                         value: one.token,
                     }))
                     : []),
+                // The lead's question to its owner: its options, then "Something else".
+                ...(content.ask
+                    ? chatAskButtons(state, row.id, now).map((one) => ({
+                        type: "button",
+                        text: { type: "plain_text", text: one.label },
+                        action_id: one.words ? "toolroll_question_words" : "toolroll_question_choice",
+                        value: one.token,
+                    }))
+                    : []),
                 ...linkButton(options.origin(), content.link),
                 // [Look first] beside [Merge] or [Accept and finish]: each button's own action id.
                 ...(content.also ?? []).flatMap((one, index) => linkButton(options.origin(), one).map(button => ({ ...button, action_id: `toolroll_link_${index + 2}` }))),

package/dist/store.d.ts

@@ -21,6 +21,10 @@ import { type RetentionKind, type RetentionPeriods } from "./retention.js";
 import { type CheckoutCleanup } from "./storage.js";
 import { type LedgerChainReport } from "./ledger-chain.js";
 import { type ApprovalGate, type ApprovalRules, type ApproverKind, type Filer } from "./approval-policy.js";
+/** What the lead promised to follow up on (lead-commitments.ts; no version bump: additive only, so a build that
+ * predates it still opens the store). `condition_json` is a task, attempt, check or time; `check_at` is when to look
+ * next; `channel` is where it reports (`chat`: the conversation it was promised in); a promise lapses at `expires_at`. */
+export declare const LEAD_COMMITMENT_SCHEMA = "\nCREATE TABLE IF NOT EXISTS lead_commitment (\n  id             INTEGER PRIMARY KEY AUTOINCREMENT,\n  owner          TEXT NOT NULL,\n  repo           TEXT,\n  thread         INTEGER NOT NULL,\n  turn           INTEGER,\n  channel        TEXT NOT NULL DEFAULT 'chat',\n  what           TEXT NOT NULL,\n  condition_json TEXT NOT NULL,\n  check_at       TEXT NOT NULL,\n  expires_at     TEXT NOT NULL,\n  state          TEXT NOT NULL DEFAULT 'open' CHECK (state IN ('open', 'done', 'cancelled', 'expired')),\n  created_at     TEXT NOT NULL,\n  checked_at     TEXT,\n  closed_at      TEXT,\n  closed_by      TEXT,\n  outcome        TEXT\n);\nCREATE INDEX IF NOT EXISTS lead_commitment_due ON lead_commitment (state, check_at);\nCREATE INDEX IF NOT EXISTS lead_commitment_owner ON lead_commitment (owner, state, id);\n";
 /** What stops a finished run reading stopped (Store.stopQuiescenceFact). */
 export type StopFactKind = "open" | "alive" | "elsewhere" | "unprovable" | "unknown";
 export type TaskAct = "filed" | "approved" | "cancelled" | "completed" | "asked";
@@ -39,6 +43,20 @@ export type TaskActRow = {
     why: string | null;
     at: string;
 };
+/** The lead's one question to its owner (no version bump): at most one per answered turn, two to four short options;
+ * "Something else" is implied. The tapped option comes back as the owner's next message, so nothing here is an answer:
+ * a question is open while no later message from the owner sits in its thread. */
+export declare const MATE_ASK_SCHEMA = "\nCREATE TABLE IF NOT EXISTS mate_ask (\n  turn         INTEGER PRIMARY KEY REFERENCES mate_turn(id) ON DELETE CASCADE,\n  thread       INTEGER NOT NULL REFERENCES mate_thread(id) ON DELETE CASCADE,\n  question     TEXT NOT NULL,\n  options_json TEXT NOT NULL,\n  created_at   TEXT NOT NULL\n);\nCREATE INDEX IF NOT EXISTS mate_ask_thread ON mate_ask (thread, turn);\n";
+export type MateAsk = {
+    turn: number;
+    thread: number;
+    question: string;
+    options: string[];
+    createdAt: string;
+};
+export declare const MATE_ASK_OTHER = "Something else";
+/** How long the question's buttons work, on every channel. */
+export declare const MATE_ASK_TTL_MS: number;
 /** Settings → Integrations (no version bump): each integration's last check. `outcome` is ok, failed, or absent (the check found
  * nothing set up, such as no `gh` sign-in). `ok_at` and `error`/`error_at` keep the last success and the last
  * failure across checks, so a row can say both. `account` is a display name only, never a credential. */
@@ -1532,6 +1550,7 @@ export type TelegramConversationPartPlan = {
     kind: "reply";
     text: string;
     replyTo?: string | null;
+    keyboard?: TelegramConversationPart["keyboard"];
 } | {
     kind: "card";
     text: string;
@@ -6672,6 +6691,27 @@ export declare class Store {
         payload: Record<string, unknown>;
         ceilingDigest: string;
     }, now: Date): number;
+    /** Record this turn's one question; false when the turn already asked one. */
+    recordMateAsk(ask: {
+        turn: number;
+        thread: number;
+        question: string;
+        options: readonly string[];
+    }, now: Date): boolean;
+    /** A failed turn keeps no question, as it keeps no drafts. */
+    dropMateAsk(turn: number): void;
+    /** The question an ANSWERED turn asked; null when it asked none or did not answer. */
+    mateAsk(turn: number): MateAsk | null;
+    /** What a tap on the question finds: open; answered (the owner has written in its thread since the reply that asked it);
+     * or expired (older than MATE_ASK_TTL_MS, or the question or the reply that asked it is gone, as after a retention purge). */
+    mateAskState(turn: number, now: Date): {
+        state: "open";
+        ask: MateAsk;
+    } | {
+        state: "answered" | "expired";
+    };
+    /** The question while it is open (see mateAskState); null otherwise. */
+    mateAskOpen(turn: number, now: Date): MateAsk | null;
     /**
      * Record the screenshots one turn selected for an exact result, under the
      * turn, so a channel that delivers files can plan them from the completed
@@ -7287,6 +7327,8 @@ export declare class Store {
         taskId: string | null;
         sourceRun: number | null;
     }, now: Date): number;
+    /** Whether a message from this chat is already waiting on, or being answered from, this bot message (a tapped question). */
+    telegramConversationWaitingOn(binding: number, messageId: string): boolean;
     getTelegramConversation(id: number): TelegramConversation | null;
     listTelegramConversations(botId: string): TelegramConversation[];
     /**
@@ -7459,6 +7501,13 @@ export declare class Store {
     }[];
     /** Claim one local day's digest for one person: true once, false if it was already considered. */
     claimEveningDigestDay(account: string, day: string): boolean;
+    /** What this person named their lead and its persona, or null when they never saved one. */
+    leadConfig(account: string): {
+        name: string;
+        persona: string;
+    } | null;
+    /** Save this person's lead name and persona (checked by the caller: lead-identity.ts). */
+    setLeadConfig(account: string, name: string, persona: string, now: Date): void;
     /** A lead token for one person, shown once. A new one ends their earlier ones; the ledger names it "lead for <owner>". */
     mintLeadCredential(owner: string, by: string, now: Date): {
         id: string;
@@ -7667,6 +7716,8 @@ export declare class Store {
 export declare const TELEGRAM_SKIPPED_RECEIPT = "skipped:before-pairing";
 /** v83: a notification for another person, settled for this destination without sending. */
 export declare const TELEGRAM_SKIPPED_ELSEWHERE = "skipped:for-another-person";
+/** A met promise the lead made on another chat: reported there, settled here without sending. */
+export declare const TELEGRAM_SKIPPED_OTHER_CHAT = "skipped:for-another-chat";
 /** A fact this person is not messaged about: the lead's work, their own act, or a project they muted. */
 export declare const TELEGRAM_SKIPPED_QUIET = "skipped:quiet";
 /**