toolroll 0.9.30 → 0.9.32

package/dist/flow-gallery.js

@@ -9,8 +9,11 @@
  * shared flow file later. Every one is built only from existing zone and trigger kinds, and none merges:
  * a pull request it opens waits for a person.
  *
- * Every template can end with "Send me the result" (a "Send to me" zone before its end), off unless asked for
- * (`send-result: yes`): what the flow did reaches the person in their chat apps.
+ * A template that puts a connected tool to work names it (`tools`): a one-click service (ONE_CLICK) or the Figma
+ * desktop app. Its research steps read that tool and only read; a build gets the project's tools as any build does.
+ *
+ * Every template without its own send zone can end with "Send me the result" (a "Send to me" zone before its end),
+ * off unless asked for (`send-result: yes`): what the flow did reaches the person in their chat apps.
  */
 import { createHash } from "node:crypto";
 import { scanForSecrets } from "./evidence.js";
@@ -19,6 +22,7 @@ import { saveScript, validateScript } from "./flow-scripts.js";
 import { isToolrollRepo, planeReviewSteps } from "./flow-starters.js";
 import { addFlowTriggerTo, describeTrigger, githubRepoOf, scheduleFromWords, validateTriggerConfig } from "./flow-triggers.js";
 import { choiceTargets, clockTime, flowFromSteps, flowTerms, FLOW_TEMPLATES, ISSUE_LABEL } from "./flows.js";
+import { connectionsOf, localConnectOf, oneClickOf } from "./mcp-connect.js";
 import { publishingOf } from "./pull-request-flow.js";
 export const GALLERY_GROUPS = [
     { id: "ship", label: "Ship code" },
@@ -32,6 +36,9 @@ export const OUTDATED_COMMANDS = {
     pip: { label: "pip (pip list --outdated)", command: "out=\"$(python3 -m pip list --outdated 2>/dev/null | tail -n +3)\"\nif [ -n \"$out\" ]; then echo \"$out\"; exit 1; fi" },
     cargo: { label: "cargo (cargo outdated)", command: "cargo outdated --root-deps-only --exit-code 1" },
 };
+/** The card's Linear issue key, read from its source as the Linear trigger stored it ("Linear ENG-123"); "none" skips the comment. */
+export const LINEAR_KEY = `key="$(sed -n 's/.*"source":{"kind":"linear","label":"Linear \\([A-Z][A-Z0-9]*-[0-9][0-9]*\\)".*/\\1/p' | head -n 1)"
+if [ -n "$key" ]; then echo "$key"; echo "goto: Found"; else echo none; echo "goto: None"; fi`;
 const NEVER_MERGES = "Never merges. Each pull request waits for you.";
 const work = (text) => `${text}\n\nChanges asked for (if any): {{note}}`;
 const research = (text) => `${text}\n\nFeedback to address (if any): {{note}}`;
@@ -40,6 +47,11 @@ const pr = { id: "pull-request", title: "Pull request", kind: "pull-request" };
 const drawn = (id) => structuredClone(FLOW_TEMPLATES.find(one => one.id === id).definition);
 const about = (id) => FLOW_TEMPLATES.find(one => one.id === id).about;
 const SORTS = "OpenRouter (Jev sorts)";
+const WEEKLY = { key: "schedule", default: "monday 09:00", label: "When", hint: "Like “monday 09:00”." };
+const weekly = (title) => ({ kind: "schedule", schedule: "{{ask.schedule}}", title });
+const send = (title) => ({ id: "send", title, kind: "send" });
+/** A person's choice: build it, or end there. A reply goes to the build as its note. */
+const choose = (title, yes, build) => ({ id: "choose", title, kind: "choose", options: [{ label: yes, goesTo: build }, { label: "Ignore", goesTo: "end" }], ifReplied: build });
 export const GALLERY = [
     // ---------------------------------------------------------------- Ship code
     {
@@ -137,6 +149,50 @@ export const GALLERY = [
         id: "effort-routing", name: "Effort routing", group: "ship", promise: "Small changes go straight to a build; big ones get a plan and a person first.", needs: [SORTS], asks: [], definition: drawn("effort-routing"), triggers: [],
         does: [about("effort-routing")], never: "Never builds a big change before you approve its plan.",
     },
+    {
+        id: "ui-inspiration", name: "UI inspiration", group: "ship", tools: ["mobbin"],
+        promise: "Each week, three real app examples for one part of your UI, ready to build.",
+        needs: ["GitHub"], asks: [WEEKLY],
+        steps: [
+            { id: "find", title: "Find examples", kind: "report", instructions: research("Pick one surface of this project (a screen or a flow) that no recent commit or earlier inspiration covered.\n\nWith Mobbin, read only: find 3 real app examples for it. For each: the pattern, why it fits here, how it plugs into this code (files and components), and a Mobbin screenshot.") },
+            choose("Implement, remix or ignore?", "Implement", "build"),
+            { id: "build", title: "Build it", kind: "task", instructions: work("Build the chosen example from the report into this project with its own components. A note below is a remix: follow it.\n\nThe report:\n{{stage.find}}") },
+            pr,
+            send("Send the result"),
+        ],
+        triggers: [weekly("UI inspiration")],
+        does: ["Picks one part of your UI {{ask.schedule-words}} and finds 3 Mobbin examples for it, each with a screenshot.", "You choose Implement or Ignore, or reply with a remix note.", "What you choose is built as a task, under your usual approvals, and opens a pull request.", "The result is sent to you."],
+        never: NEVER_MERGES,
+    },
+    {
+        id: "figma-to-pr", name: "Figma frame to pull request", group: "ship", tools: ["figma-desktop"],
+        promise: "Paste a Figma frame link; get it built in your own components.",
+        needs: ["GitHub"], asks: [],
+        steps: [
+            { id: "build", title: "Build the frame", kind: "task", instructions: work("Build this Figma frame in the project's own components and styles: {{card.title}}\n\n{{card.description}}\n\nRead the frame with the Figma desktop app's tools (its code, screenshot and variables). Reuse existing components; add one only where none fits. Take screenshots before and after, on desktop and phone.") },
+            pr,
+            send("Send before and after"),
+        ],
+        triggers: [{ kind: "button", label: "Build a Figma frame", questions: ["Figma frame link", "Notes (optional)"] }],
+        does: ["Adds a “Build a Figma frame” button that asks for the frame link.", "Builds the frame in your components as a task, under your usual approvals, with desktop and phone screenshots.", "Opens a pull request and sends you before and after."],
+        never: NEVER_MERGES,
+    },
+    {
+        id: "linear-to-prs", name: "Linear issues to PRs", group: "ship", tools: ["linear"],
+        promise: "Labelled Linear issues are built, and the issue gets the pull request link.",
+        needs: ["GitHub", "A Linear API key"], asks: [{ key: "team", default: "ENG", label: "Linear team", hint: "Its short key, like ENG." }, { key: "label", default: ISSUE_LABEL, label: "Issue label" }],
+        // The issue's key comes from the card's source ("Linear ENG-123"), as the trigger stored it, never from a model.
+        scripts: [{ name: "linear-issue-key", about: "Prints the Linear issue the card came from, or none.", body: LINEAR_KEY, timeoutMinutes: 1 }],
+        steps: [
+            { id: "build", title: "Build it", kind: "task", instructions: work("Build this issue: {{card.title}}\n\n{{card.description}}") },
+            pr,
+            { id: "issue-key", title: "Find the issue key", kind: "check", script: "{{script.linear-issue-key}}", runIn: "folder", routes: [{ answer: "Found", goesTo: "comment" }, { answer: "None", goesTo: "Done" }] },
+            { id: "comment", title: "Comment on the issue", kind: "tool", server: "linear", tool: "create_comment", args: { issueId: "{{stage.issue-key}}", body: "A pull request is ready: {{stage.pull-request}}" } },
+        ],
+        triggers: [{ kind: "linear", team: "{{ask.team}}", label: "{{ask.label}}" }],
+        does: ["Watches {{ask.team}} issues labelled “{{ask.label}}” in Linear.", "Builds each one as a task, under your usual approvals, and opens a pull request.", "Comments the pull request link on the issue, through Linear."],
+        never: NEVER_MERGES,
+    },
     // ---------------------------------------------------------- Keep it healthy
     {
         id: "fix-ci", name: "Fix failing CI", group: "health",
@@ -211,7 +267,7 @@ export const GALLERY = [
         never: NEVER_MERGES,
     },
     {
-        id: "error-to-fix", name: "Error to fix", group: "health",
+        id: "error-to-fix", name: "Error to fix", group: "health", tools: ["sentry"],
         promise: "New errors from Sentry or any error tracker are sorted, researched and fixed.",
         needs: ["A webhook from Sentry or another tracker", SORTS], asks: [],
         steps: [
@@ -220,7 +276,7 @@ export const GALLERY = [
                     { answer: "Fix it", means: "It comes from our code and is new, frequent, or hurts people", goesTo: "find-cause" },
                     { answer: "Ignore", means: "Noise: bots, browser extensions, a third party's outage, or something known and expected", goesTo: "ignored" },
                 ], ifNotSure: "by-hand" },
-            { id: "find-cause", title: "Find the cause", kind: "report", instructions: research("An error came in: {{card.title}}\n\n{{card.description}}\n\nFind the cause in this code: cite the files and lines, say why it happens and what change fixes it.") },
+            { id: "find-cause", title: "Find the cause", kind: "report", instructions: research("An error came in: {{card.title}}\n\n{{card.description}}\n\nWith Sentry, read the issue's stack trace and latest events. Read only. Find the cause in this code: cite the files and lines, say why it happens and what change fixes it.") },
             { id: "fix", title: "Fix it", kind: "task", instructions: work("Fix this error, with a regression check where one fits: {{card.title}}\n\nThe report:\n{{stage.find-cause}}") },
             owner("review", "Review the fix"),
             { ...pr, next: "Done" },
@@ -233,6 +289,56 @@ export const GALLERY = [
             "Each kept error is researched, then fixed as a task, under your usual approvals.", "What you approve opens a pull request."],
         never: NEVER_MERGES,
     },
+    {
+        id: "outage-to-cause", name: "Outage to cause", group: "health", tools: ["betterstack"],
+        promise: "A Better Stack incident gets its likely cause, and a fix if you want one.",
+        needs: ["A webhook from Better Stack", "GitHub"], asks: [],
+        steps: [
+            { id: "find-cause", title: "Find the cause", kind: "report", instructions: research("A Better Stack incident: {{card.title}}\n\n{{card.description}}\n\nWith Better Stack, read the incident and its monitor's recent history. Read this project's commits and deploys from before it started. Read only. Say the likely cause, with times, and what change fixes it.") },
+            choose("Fix or ignore?", "Fix", "fix"),
+            { id: "fix", title: "Fix it", kind: "task", instructions: work("Fix the cause of this outage, with a regression check where one fits.\n\nThe report:\n{{stage.find-cause}}") },
+            pr,
+        ],
+        triggers: [{ kind: "webhook", title: "Incident", titleField: "data.attributes.name" }],
+        does: ["Adds a webhook. Once the flow is made, open its Triggers and choose New address, then paste that into Better Stack.", "Reads the incident, its monitor's history and your recent commits and deploys, and sends you the likely cause.", "You choose Fix or Ignore; a fix is built as a task, under your usual approvals, and opens a pull request."],
+        never: NEVER_MERGES,
+    },
+    {
+        id: "worker-errors", name: "Worker errors to fix", group: "health", tools: ["cloudflare"],
+        promise: "Each week, Cloudflare Workers and Pages errors worth fixing get a fix.",
+        needs: ["GitHub", SORTS], asks: [WEEKLY],
+        steps: [
+            { id: "read", title: "Read the errors", kind: "report", instructions: research("With Cloudflare, read this week's Workers and Pages errors and analytics. Read only. List each error with its count, its Worker or Pages project, and when it started. Say “No errors” if there are none.") },
+            { id: "worth-fixing", title: "Worth fixing?", kind: "sort", question: "Do these errors come from this project's code, often enough to fix now?",
+                answers: [
+                    { answer: "Fix it", means: "Errors from our own code that are new, frequent or hurt people", goesTo: "find-cause" },
+                    { answer: "Ignore", means: "No errors, or only noise: bots, a provider's outage, something known", goesTo: "ignored" },
+                ], ifNotSure: "find-cause" },
+            { id: "find-cause", title: "Find the cause", kind: "report", instructions: research("Errors worth fixing:\n{{stage.read}}\n\nWith Cloudflare, read the worst one's logs. Read only. Find the cause in this code, citing files and lines, and say what change fixes it.") },
+            choose("Fix or ignore?", "Fix", "fix"),
+            { id: "fix", title: "Fix it", kind: "task", instructions: work("Fix this error, with a regression check where one fits.\n\nThe report:\n{{stage.find-cause}}") },
+            { ...pr, next: "Done" },
+            { id: "done", title: "Done", kind: "done" },
+            { id: "ignored", title: "Ignored", kind: "done" },
+        ],
+        triggers: [weekly("Worker errors")],
+        does: ["Reads your Cloudflare Workers and Pages errors and analytics {{ask.schedule-words}}.", "Jev decides whether they're worth fixing; if so, finds the cause and sends you a report.", "You choose Fix or Ignore; a fix is built as a task, under your usual approvals, and opens a pull request."],
+        never: NEVER_MERGES,
+    },
+    {
+        id: "failed-deploy", name: "Failed deploy to fix", group: "health", tools: ["vercel"],
+        promise: "A failed Vercel deployment gets its cause found and a fix opened.",
+        needs: ["A webhook from Vercel", "GitHub"], asks: [],
+        steps: [
+            { id: "find-cause", title: "Find the cause", kind: "report", instructions: research("A Vercel deployment failed: {{card.title}}\n\n{{card.description}}\n\nWith Vercel, read the deployment's build log. Read only. Find the cause in this code, citing files and lines, and say what change fixes it.") },
+            { id: "fix", title: "Fix it", kind: "task", instructions: work("Fix this failed deployment without weakening any check.\n\nThe report:\n{{stage.find-cause}}") },
+            pr,
+            send("Send the fix"),
+        ],
+        triggers: [{ kind: "webhook", title: "Failed deployment", titleField: "payload.deployment.name" }],
+        does: ["Adds a webhook. Once the flow is made, open its Triggers and choose New address, then paste that into Vercel for failed deployments.", "Reads the build log and finds the cause.", "Builds a fix as a task, under your usual approvals, opens a pull request and sends it to you."],
+        never: NEVER_MERGES,
+    },
     // ---------------------------------------------------------- Hear from users
     {
         id: "feedback-to-feature", name: "Feedback to feature", group: "users",
@@ -265,6 +371,48 @@ export const GALLERY = [
         id: "triage", name: "Issue triage", group: "users", promise: "Jev sorts new issues into bugs, ideas and questions, and says how urgent each is.", needs: [SORTS], asks: [], definition: drawn("triage"), triggers: [],
         does: [about("triage")], never: "Never closes an issue or replies without your approval.",
     },
+    {
+        id: "metrics-digest", name: "Metrics digest", group: "users", tools: ["posthog"],
+        promise: "Each week, this week against last: signups, activation, retention and top events.",
+        needs: [], asks: [WEEKLY],
+        steps: [
+            { id: "read", title: "Read the numbers", kind: "report", instructions: research("With PostHog, compare this week with last week. Read only. Give signups, activation, retention and the top 10 events, each with its change. Name the biggest change and its likely cause (a release, a campaign, a broken step), citing this week's commits where they fit.") },
+            send("Send the digest"),
+        ],
+        triggers: [weekly("Metrics digest")],
+        does: ["Compares this week's PostHog numbers with last week's, {{ask.schedule-words}}.", "Names the biggest change and its likely cause.", "Sends you the digest."],
+        never: "Never changes PostHog or your code.",
+    },
+    {
+        id: "fix-drop-off", name: "Fix the biggest drop-off", group: "users", tools: ["posthog"],
+        promise: "Each week, the funnel step losing the most people gets a proposed fix.",
+        needs: ["GitHub"], asks: [WEEKLY],
+        steps: [
+            { id: "find", title: "Find the drop-off", kind: "report", instructions: research("With PostHog, find the funnel step that lost the most people this week. Read only. Give the funnel, the step, how many reached it and how many left. Propose one fix in this code, citing files.") },
+            choose("Implement or ignore?", "Implement", "build"),
+            { id: "build", title: "Build the fix", kind: "task", instructions: work("Build the proposed fix for this drop-off.\n\nThe report:\n{{stage.find}}") },
+            pr,
+            send("Send the result"),
+        ],
+        triggers: [weekly("Biggest drop-off")],
+        does: ["Finds the PostHog funnel step losing the most people {{ask.schedule-words}}, with the numbers and one proposed fix.", "You choose Implement or Ignore.", "A fix is built as a task, under your usual approvals, opens a pull request and is sent to you."],
+        never: NEVER_MERGES,
+    },
+    {
+        id: "support-to-fix", name: "Support to bug fix", group: "users", tools: ["intercom"],
+        promise: "Each week, the bugs your customers hit most, ranked, with a fix for the one you pick.",
+        needs: ["GitHub"], asks: [WEEKLY],
+        steps: [
+            { id: "group", title: "Rank the bugs", kind: "report", instructions: research("With Intercom, read this week's conversations. Read only. Group the bug reports by problem, rank them by how many people hit each, and number them, with a count and one example conversation each.") },
+            { id: "choose", title: "Which to fix?", kind: "choose", options: [{ label: "Fix the top one", goesTo: "fix" }, { label: "Ignore", goesTo: "end" }], ifReplied: "fix" },
+            { id: "fix", title: "Fix it", kind: "task", instructions: work("Fix the bug chosen from this ranking: the top one, unless the note names another by number. Add a regression check where one fits.\n\nThe ranking:\n{{stage.group}}") },
+            pr,
+            send("Send the result"),
+        ],
+        triggers: [weekly("Support bugs")],
+        does: ["Reads your Intercom conversations {{ask.schedule-words}} and ranks the bug reports by how many people hit each.", "You fix the top one, reply with the number of another, or ignore them.", "The fix is built as a task, under your usual approvals, opens a pull request and is sent to you."],
+        never: NEVER_MERGES,
+    },
     // ------------------------------------------------------------------ Operations
     ...[
         ["research", "Research a question, have a person check it, then share it.", [], "Never shares an answer you haven't checked."],
@@ -281,6 +429,20 @@ export const GALLERY = [
 /** The blank flow, for starting from nothing. */
 export const BLANK = { id: "blank", name: "Blank flow", group: "ops", promise: about("blank"), needs: [], asks: [], definition: drawn("blank"), triggers: [], does: [about("blank")], never: "Does nothing until you add zones." };
 export const galleryTemplateOf = (id) => id === BLANK.id ? BLANK : GALLERY.find(one => one.id === id) ?? null;
+/** A tool's name ("Mobbin", "Figma (desktop app)"); null for an id that's neither a one-click service nor an app on this computer. */
+export const galleryToolLabel = (id) => oneClickOf(id)?.label ?? localConnectOf(id)?.label ?? null;
+/** The zones that use a tool: a tool step on it, or a research or build step that names it ("With Mobbin, …"). */
+export function zonesUsing(definition, id) {
+    const label = galleryToolLabel(id);
+    if (label === null)
+        return [];
+    const word = new RegExp(`\\b${label.replace(/\s*\(.*\)$/, "").replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\b`);
+    return definition.stages.filter(one => one.tool?.server === id || ((one.kind === "report" || one.kind === "task") && word.test(one.instructions ?? ""))).map(one => one.title);
+}
+/** A template's tools, each with its state in a project's connections (connectionsOf), or none without a project. */
+export function galleryToolsOf(template, definition, connections) {
+    return (template.tools ?? []).map(id => ({ id, label: galleryToolLabel(id) ?? id, state: connections === null ? null : connections.find(one => one.id === id)?.state ?? "open", zones: zonesUsing(definition, id) }));
+}
 /** Each question's default for a project: the branch pull requests go to, when that's set up. */
 export function galleryDefaults(store, template, repo) {
     const publishing = repo === null ? { on: false } : publishingOf(store, repo);
@@ -296,12 +458,17 @@ const oneLine = (value, cap, what) => {
 };
 /** The optional last step every template offers, and the answer that turns it on. */
 export const SEND_RESULT = { key: "send-result", title: "Send me the result", does: "When a card finishes, sends you what was done (its summary, links and screenshots) in your chat apps." };
-/** A flow with "Send me the result" before its end: every path into its main Done zone passes through it first. */
+/** A template that already sends its result to the person: it isn't offered "Send me the result" again. */
+export const sendsAlready = (template) => galleryDiagram(template).stages.some(one => one.kind === "send");
+/** A flow with "Send me the result" before its end: every path into its main Done zone passes through it first.
+ * A flow that already has a send zone is left as it is, so nobody gets the result twice. */
 export function withSendResult(definition) {
+    if (definition.stages.some(one => one.kind === "send"))
+        return definition;
     // Its main end: Done, else an end that isn't a filtered-out one (drawn in rose), else any end.
     const ends = definition.stages.filter(one => one.kind === "done");
     const end = ends.find(one => one.id === "done") ?? ends.find(one => one.zone.color !== "rose") ?? ends[0];
-    if (end === undefined || definition.stages.some(one => one.kind === "send" && one.next === end.id))
+    if (end === undefined)
         return definition;
     let id = "send-result";
     for (let n = 2; definition.stages.some(one => one.id === id); n++)
@@ -352,6 +519,11 @@ export function checkAnswers(template, given) {
         }
         else if (ask.key === "command")
             answers["command"] = oneLine(value, 500, "test command");
+        else if (ask.key === "team") {
+            if (!/^[A-Za-z0-9]{1,12}$/.test(value))
+                throw new Error("Say the Linear team as its short key, like ENG.");
+            answers["team"] = value.toUpperCase();
+        }
         else if (ask.key === "outdated") {
             const manager = OUTDATED_COMMANDS[value];
             if (manager === undefined)
@@ -420,6 +592,9 @@ export function buildFromGallery(store, template, repo, given) {
     const github = githubRepoOf(repo);
     const drawn = template.definition !== undefined ? structuredClone(template.definition)
         : flowFromSteps(fill(template.ownSteps !== undefined && isToolrollRepo(repo) ? template.ownSteps : template.steps, answers, names, github), null);
+    // One that already sends doesn't take the answer, so it reads as it was asked.
+    if (drawn.stages.some(one => one.kind === "send"))
+        delete answers[SEND_RESULT.key];
     const sends = answers[SEND_RESULT.key] === "yes";
     const definition = sends ? withSendResult(drawn) : drawn;
     return { template, repo, answers, definition, triggers: fill(template.triggers, answers, names, github), scripts,
@@ -440,7 +615,7 @@ export function previewGallery(store, template, repo, given, actor, now) {
     const steps = flowTerms(built.definition, null);
     if (built.scripts.some(one => !one.existing))
         steps.push(...built.scripts.filter(one => !one.existing).map(one => `Adds the ${one.name} script to this project: ${one.body.split("\n")[0]}${one.body.includes("\n") ? " …" : ""}`));
-    return { built, startsFrom, steps, digest: galleryDigest(template.id, repo, built.answers) };
+    return { built, startsFrom, steps, tools: galleryToolsOf(template, built.definition, connectionsOf(store, repo)), digest: galleryDigest(template.id, repo, built.answers) };
 }
 /** What a preview showed: the template, the project and the answers. Creating checks the person saw these. */
 export function galleryDigest(id, repo, answers) {

package/dist/lead-capabilities.d.ts

@@ -1,10 +1,3 @@
-/**
- * What the lead can rely on right now, in one read (get_capabilities): the agents a project's route would run, the
- * workers that would run them, the project's tools and skills, the integrations, and the project's checks. Every entry
- * says what it lets the lead do and, when it can't, the one next step and the settings control (show_control) that
- * takes the owner there. Everything here reads what is already recorded — runner readiness reports, sign-in pauses,
- * plan-limit readings, tool tests, skill tests, integration checks — and never probes anything that spends.
- */
 import type { Store } from "./store.js";
 import type { ChatControl } from "./chat-controls.js";
 import type { ProviderId } from "./provider.js";

package/dist/lead-capabilities.js

@@ -1,3 +1,11 @@
+/**
+ * What the lead can rely on right now, in one read (get_capabilities): the agents a project's route would run, the
+ * workers that would run them, the project's tools and skills, the integrations, and the project's checks. Every entry
+ * says what it lets the lead do and, when it can't, the one next step and the settings control (show_control) that
+ * takes the owner there. Everything here reads what is already recorded — runner readiness reports, sign-in pauses,
+ * plan-limit readings, tool tests, skill tests, integration checks — and never probes anything that spends.
+ */
+import { projectBatchChecks } from "./batch-policy.js";
 import { resolveRouteCandidates } from "./agentconfig.js";
 import { authPauseOf, messageCommand, providerName } from "./provider-auth.js";
 import { readAuthMode, SUBSCRIPTION_CAPABLE } from "./keys.js";
@@ -136,7 +144,9 @@ function checksOf(store, repo) {
         return { ...base, state: "Off", ok: false, next: "Builds are not checked. Turn checks on for the project if results need them.", link: "projects" };
     if (!releaseCheck)
         return { ...base, state: `${CHECK_LEVEL_WORDS[level]} · no release check`, ok: false, next: "No release check is set up, so no result can show a passing check. Set one for the project.", link: "projects" };
-    return { ...base, state: level === "quick" && !quickCheck ? "Quick · runs the release check" : `${CHECK_LEVEL_WORDS[level]} · release check set`, ok: true, next: null, link: null };
+    // Batch checks are changed in Settings → Projects → Checks (or `project checks --batch on|off`), never from chat.
+    const batched = level === "full" && projectBatchChecks(store, repo).on ? " · batched with results that finish together" : "";
+    return { ...base, state: level === "quick" && !quickCheck ? "Quick · runs the release check" : `${CHECK_LEVEL_WORDS[level]} · release check set${batched}`, ok: true, next: null, link: null };
 }
 function workersOf(store, repos, now) {
     const live = store.handle.prepare(`SELECT ref.external_id AS task, ref.repo AS repo FROM claim JOIN task_ref AS ref ON ref.id = claim.task_ref

package/dist/mate-doors.js

@@ -15,7 +15,7 @@ import { executeSharedAction, sharedActionPayload, sharedActionAllowsChallenge,
  * silent re-read.
  */
 import { isCheckLevel, setTaskCheckLevel } from "./check-levels.js";
-import { verifiedAuthor } from "./store.js";
+import { mateTurnKeepsProposals, verifiedAuthor } from "./store.js";
 import { isVerifiedApprover, reproveApprover } from "./principal.js";
 import { TeamLeads } from './team-leads.js';
 import { fileTaskProposal } from "./proposal.js";
@@ -97,7 +97,7 @@ export function confirmMateProposal(store, who, proposalId, now, options) {
             return { ok: false, kind: proposal.kind, reason: "ceiling-changed", said: "the admitted projects changed since this was proposed — it cannot be confirmed" };
         }
         const turn = store.getMateTurn(proposal.turn);
-        if (turn === null || turn.state !== "answered") {
+        if (!mateTurnKeepsProposals(turn) || proposal.state === "drafting") {
             return { ok: false, kind: proposal.kind, reason: "turn-not-answered", said: "this proposal's turn did not finish — it cannot be confirmed" };
         }
         if (proposal.kind === "cancel") {

package/dist/mate.d.ts

@@ -93,6 +93,7 @@ export type MateTurnOutcome = {
     failed: MateFailure;
     message: string;
     unknownSpend: boolean;
+    saved?: boolean;
 };
 /** What happened, what it means, and one next step: plain words a person can act on, never internal terms. */
 export declare const MATE_REFUSAL_COPY: Record<MateRefusal, string>;
@@ -102,7 +103,7 @@ export declare const MATE_CHANNEL_COPY: Record<MateChannelProblem, string>;
 export declare const MATE_FAILURE_COPY: {
     readonly stopped: "This reply was stopped before it finished, from another window or by a newer message. Nothing it proposed was kept. Send your message again if you still need an answer.";
     readonly ended: "Your sign-in or this conversation ended while the lead was answering. Nothing it proposed was kept. Sign in again or start a new chat, then send your message again.";
-    readonly tooLong: "The reply took too long and was stopped. Nothing it proposed was kept. Send your message again, or ask for less at once.";
+    readonly tooLong: string;
     readonly secretRead: "Something the lead read looked like a password or key, so it stopped before sending it anywhere. Nothing was kept. Remove the password or key from that task or note, then ask again.";
     readonly secretReply: "The lead's reply contained something that looked like a password or key, so it was thrown away. Nothing was kept. Ask again, without asking for a password or key.";
     readonly paused: "An earlier reply stopped before its cost was known, so chat is paused. This message wasn't answered. Confirm that earlier reply on the Chat page, then send again.";
@@ -111,7 +112,7 @@ export declare const MATE_FAILURE_COPY: {
     readonly unreadable: "The chat provider sent back an answer that couldn't be read, so it was thrown away. Nothing was kept. Send your message again.";
     readonly signIn: "The chat provider couldn't answer; its sign-in may have expired. Nothing was kept. Sign in to it again on this computer, then send your message again.";
     readonly refused: "The chat provider turned the request down. Nothing was kept or charged. Try again in a minute; if it keeps happening, check the provider in Settings → Lead.";
-    readonly tooLongUnknownCost: "The reply took too long and was stopped, and its cost isn't known yet, so chat is paused. Nothing it proposed was kept. Confirm the cost on the Chat page to turn chat back on.";
+    readonly tooLongUnknownCost: string;
     readonly lostUnknownCost: "The chat provider stopped responding partway through, and the cost isn't known, so chat is paused. Nothing it proposed was kept. Confirm the cost on the Chat page to turn chat back on.";
     readonly unreadableUnknownCost: "The chat provider sent back an answer that couldn't be read, and its cost isn't known, so chat is paused. Nothing it proposed was kept. Confirm the cost on the Chat page to turn chat back on.";
     readonly empty: "The lead sent back an empty answer. Nothing was kept. Send your message again.";
@@ -119,6 +120,9 @@ export declare const MATE_FAILURE_COPY: {
 };
 /** A failed turn's saved reason as plain words, for a surface that reads the turn back later (a restart, a delivery retry). */
 export declare function mateFailureText(reason: string | null): string;
+/** How long a provider that ignored its abort at the turn's deadline is waited for before the turn ends without it.
+ * Its process group was already killed at the deadline; this only bounds the wait for the transport to say so. */
+export declare const MATE_ABORT_GRACE_MS = 5000;
 /** The last messages of the thread as provider-neutral history, newest kept first until the byte cap. */
 export declare function historyFor(store: Store, thread: number, queuedMessageId?: number): MateHistoryMessage[];
 /** "read 3 · proposed 1 · 2 steps" — counts only, never results (ruling 11). */

package/dist/mate.js

@@ -1,6 +1,7 @@
 import { Buffer } from "node:buffer";
 import { mateToolLabel } from "./mate-progress.js";
 import { createHash } from "node:crypto";
+import { mateTimeoutNotice } from "./store.js";
 import { RESULT_IMAGES_PER_TURN_CAP } from "./chat-evidence.js";
 import { isVerifiedApprover, reproveApprover } from "./principal.js";
 import { MATE_MAX_CALLS_PER_STEP, MATE_MAX_STEPS, MATE_TOOL_RESULT_CAP_BYTES, TURN_WALL_CLOCK_MS, composeMateRequest, credentialKeyOf, isDirectChatProvider, mateWorstCaseForPrice, performMateRequest, priceForConfig, settleForPrice, subscriptionCredentialKey, } from "./converse.js";
@@ -56,7 +57,7 @@ export const MATE_CHANNEL_COPY = {
 export const MATE_FAILURE_COPY = {
     stopped: "This reply was stopped before it finished, from another window or by a newer message. Nothing it proposed was kept. Send your message again if you still need an answer.",
     ended: "Your sign-in or this conversation ended while the lead was answering. Nothing it proposed was kept. Sign in again or start a new chat, then send your message again.",
-    tooLong: "The reply took too long and was stopped. Nothing it proposed was kept. Send your message again, or ask for less at once.",
+    tooLong: mateTimeoutNotice(false),
     secretRead: "Something the lead read looked like a password or key, so it stopped before sending it anywhere. Nothing was kept. Remove the password or key from that task or note, then ask again.",
     secretReply: "The lead's reply contained something that looked like a password or key, so it was thrown away. Nothing was kept. Ask again, without asking for a password or key.",
     paused: "An earlier reply stopped before its cost was known, so chat is paused. This message wasn't answered. Confirm that earlier reply on the Chat page, then send again.",
@@ -65,7 +66,7 @@ export const MATE_FAILURE_COPY = {
     unreadable: "The chat provider sent back an answer that couldn't be read, so it was thrown away. Nothing was kept. Send your message again.",
     signIn: "The chat provider couldn't answer; its sign-in may have expired. Nothing was kept. Sign in to it again on this computer, then send your message again.",
     refused: "The chat provider turned the request down. Nothing was kept or charged. Try again in a minute; if it keeps happening, check the provider in Settings → Lead.",
-    tooLongUnknownCost: "The reply took too long and was stopped, and its cost isn't known yet, so chat is paused. Nothing it proposed was kept. Confirm the cost on the Chat page to turn chat back on.",
+    tooLongUnknownCost: mateTimeoutNotice(false, true),
     lostUnknownCost: "The chat provider stopped responding partway through, and the cost isn't known, so chat is paused. Nothing it proposed was kept. Confirm the cost on the Chat page to turn chat back on.",
     unreadableUnknownCost: "The chat provider sent back an answer that couldn't be read, and its cost isn't known, so chat is paused. Nothing it proposed was kept. Confirm the cost on the Chat page to turn chat back on.",
     empty: "The lead sent back an empty answer. Nothing was kept. Send your message again.",
@@ -74,7 +75,8 @@ export const MATE_FAILURE_COPY = {
 /** A failed turn's saved reason as plain words, for a surface that reads the turn back later (a restart, a delivery retry). */
 export function mateFailureText(reason) {
     switch (reason) {
-        case "timeout": return MATE_FAILURE_COPY.tooLong;
+        case "timeout":
+        case "crashed": return MATE_FAILURE_COPY.tooLong;
         case "malformed-reply": return MATE_FAILURE_COPY.unreadable;
         case "secret-refused": return MATE_FAILURE_COPY.secretReply;
         case "latched": return MATE_FAILURE_COPY.paused;
@@ -84,6 +86,16 @@ export function mateFailureText(reason) {
         default: return "The lead's reply didn't finish. Nothing it proposed was kept. Send your message again.";
     }
 }
+/** How long a provider that ignored its abort at the turn's deadline is waited for before the turn ends without it.
+ * Its process group was already killed at the deadline; this only bounds the wait for the transport to say so. */
+export const MATE_ABORT_GRACE_MS = 5_000;
+const LATE = Symbol("late");
+/** The work's own result, or LATE once `ms` passes: the turn's clock, not the work, decides when the person hears back. */
+function settleBy(work, ms) {
+    let timer;
+    const late = new Promise(resolve => { timer = setTimeout(() => resolve(LATE), Math.max(0, ms)); });
+    return Promise.race([work, late]).finally(() => clearTimeout(timer));
+}
 const READ_TOOLS = new Set(["get_brief", "get_project_context", "get_actions", "get_action_status", "get_skills", "get_acceptance_evidence", "recap", "list_repos", "list_tasks", "get_task", "get_result", "get_result_images", "get_controls", "get_agents", "get_project_knowledge", "get_task_conversation", "get_diff", "get_check_log", "get_project_tools", "get_flows", "get_flow_insights", "list_decisions", "get_decision", "queue"]);
 /** The last messages of the thread as provider-neutral history, newest kept first until the byte cap. */
 export function historyFor(store, thread, queuedMessageId) {
@@ -291,6 +303,20 @@ export async function runMateTurn(input) {
         store.dropMateAsk(turnId);
         return { ok: false, turn: turnId, failed, message, unknownSpend };
     };
+    /** The turn stopped at its deadline: the notice is saved in the thread with whatever its completed tool calls proposed, in
+     * the same write that ends the turn, so a refresh, another device or a restart shows the same outcome. */
+    const timedOut = (unknownSpend) => {
+        now = clock();
+        const message = mateTimeoutNotice(proposals > 0, unknownSpend);
+        const saved = store.finalizeMateTurn(turnId, started.generation, { state: "failed", settledMicrousd: settled, unknownSpend, tokensIn, tokensOut, failureReason: "timeout", keepProposals: true, message: { text: message, activity: activitySummary(reads, proposals, steps) } }, now);
+        store.dropMateAsk(turnId);
+        if (!saved)
+            return { ok: false, turn: turnId, failed: "superseded", message: MATE_FAILURE_COPY.stopped, unknownSpend: false };
+        return { ok: false, turn: turnId, failed: "timeout", message, unknownSpend, saved: true };
+    };
+    const deadlineLeft = () => TURN_WALL_CLOCK_MS - (clock().getTime() - turnStartedAt);
+    /** The channel's standing, bounded by the turn's deadline: a lookup that never answers cannot hold the turn open. */
+    const revalidated = async () => input.revalidate === undefined ? { ok: true } : settleBy(input.revalidate(), deadlineLeft() + MATE_ABORT_GRACE_MS);
     /** The turn's own row, re-read: still running under our generation, or someone ended it under us. */
     const stillOurs = () => {
         const row = store.getMateTurn(turnId);
@@ -301,6 +327,8 @@ export async function runMateTurn(input) {
     const guard = (channel) => {
         if (!stillOurs())
             return { ok: false, turn: turnId, failed: "superseded", message: MATE_FAILURE_COPY.stopped, unknownSpend: false };
+        if (channel === LATE)
+            return timedOut(false);
         if (!channel.ok)
             return fail("revoked", MATE_CHANNEL_COPY[channel.reason] ?? MATE_CHANNEL_COPY["access-changed"], false);
         const standing = reproveApprover(store, who);
@@ -328,13 +356,13 @@ export async function runMateTurn(input) {
         return claim;
     };
     while (steps < maxSteps) {
-        const blocked = guard(input.revalidate === undefined ? { ok: true } : await input.revalidate());
+        const blocked = guard(await revalidated());
         if (blocked !== null)
             return blocked;
         now = clock();
         const remainingMs = TURN_WALL_CLOCK_MS - (now.getTime() - turnStartedAt);
         if (remainingMs <= 0)
-            return fail("timeout", MATE_FAILURE_COPY.tooLong, false);
+            return timedOut(false);
         const request = direct ? composeDirect(input.key) : composeSubscription();
         // Tool results join the outbound body: scanned again before every dispatch.
         const outbound = typeof request === "string" ? request : request.body;
@@ -354,39 +382,34 @@ export async function runMateTurn(input) {
         progress({ kind: "step", turn: turnId, step: steps });
         const requestBytes = Buffer.byteLength(outbound, "utf8");
         let result;
+        // The turn owns its deadline (lead-stall, release check 2438): at the deadline the request is aborted, which ends a
+        // harness's whole process group, and a provider that still has not settled MATE_ABORT_GRACE_MS later is left behind.
+        // Whatever it says after that is never read; the turn has already ended with its notice.
+        const controller = new AbortController();
+        const abortAt = setTimeout(() => controller.abort(), remainingMs);
+        const settle = (work) => settleBy(work, remainingMs + MATE_ABORT_GRACE_MS)
+            .then(value => value === LATE || controller.signal.aborted ? { ok: false, problem: "timeout" } : value)
+            .finally(() => clearTimeout(abortAt));
         if (direct) {
-            const controller = new AbortController();
-            const timer = setTimeout(() => controller.abort(), remainingMs);
-            try {
-                result = await performMateRequest(request, directProvider, controller.signal, fetcher);
-            }
-            catch {
-                result = { ok: false, problem: "network" };
-            }
-            finally {
-                clearTimeout(timer);
-            }
+            result = await settle(performMateRequest(request, directProvider, controller.signal, fetcher)
+                .catch(() => ({ ok: false, problem: "network" })));
         }
         else {
             const runner = input.subscriptionRunner ?? performSubscriptionMateRequest;
-            try {
-                result = await runner({
-                    provider: subscriptionProvider,
-                    model: config.model,
-                    system: MATE_CONTRACT,
-                    dataDocument: document,
-                    history,
-                    tools: MATE_TOOL_SCHEMAS,
-                    timeoutMs: remainingMs,
-                    // The reply as it is written; text that looks like a secret is
-                    // never shown (the finished reply is scanned again before saving).
-                    ...(input.onProgress === undefined ? {} : { onText: (text) => { if (scanForSecrets(text).length === 0)
-                            progress({ kind: "text", turn: turnId, step: steps, text }); } }),
-                });
-            }
-            catch {
-                result = { ok: false, problem: "provider-error" };
-            }
+            result = await settle((async () => runner({
+                provider: subscriptionProvider,
+                model: config.model,
+                system: MATE_CONTRACT,
+                dataDocument: document,
+                history,
+                tools: MATE_TOOL_SCHEMAS,
+                timeoutMs: remainingMs,
+                signal: controller.signal,
+                // The reply as it is written; text that looks like a secret is
+                // never shown (the finished reply is scanned again before saving).
+                ...(input.onProgress === undefined ? {} : { onText: (text) => { if (!controller.signal.aborted && scanForSecrets(text).length === 0)
+                        progress({ kind: "text", turn: turnId, step: steps, text }); } }),
+            }))().catch(() => ({ ok: false, problem: "provider-error" })));
         }
         now = clock();
         const finishStep = (outcome) => store.finalizeChatTurn(step.id, stepStarted.generation, outcome, now);
@@ -400,7 +423,9 @@ export async function runMateTurn(input) {
                         : result.problem === "malformed-reply"
                             ? MATE_FAILURE_COPY.unreadable
                             : MATE_FAILURE_COPY.signIn;
-                return fail(result.problem === "timeout" ? "timeout" : result.problem === "malformed-reply" ? "malformed-reply" : "provider-error", message, false);
+                if (result.problem === "timeout")
+                    return timedOut(false);
+                return fail(result.problem === "malformed-reply" ? "malformed-reply" : "provider-error", message, false);
             }
             if (result.problem.startsWith("status-")) {
                 // The provider ANSWERED with an error: nothing billed for this step.
@@ -409,7 +434,7 @@ export async function runMateTurn(input) {
             }
             if (result.problem === "timeout") {
                 finishStep({ state: "failed", failureReason: "timeout", settledMicrousd: null, unknownSpend: true });
-                return fail("timeout", MATE_FAILURE_COPY.tooLongUnknownCost, true);
+                return timedOut(true);
             }
             if (result.problem === "network") {
                 finishStep({ state: "failed", failureReason: "provider-error", settledMicrousd: null, unknownSpend: true });
@@ -437,7 +462,7 @@ export async function runMateTurn(input) {
         // After the wait (finding 5): the row may have been failed under us by
         // a revocation or the sweep — then nothing the model said runs; and the
         // approver must still stand before any tool runs as them.
-        const changed = guard(input.revalidate === undefined ? { ok: true } : await input.revalidate());
+        const changed = guard(await revalidated());
         if (changed !== null)
             return changed;
         if (answer.calls.length === 0) {
@@ -470,7 +495,7 @@ export async function runMateTurn(input) {
         history.push({ role: "assistant", text: answer.text, calls: answer.calls });
         for (const [index, call] of answer.calls.entries()) {
             if (index > 0) {
-                const changed = guard(input.revalidate === undefined ? { ok: true } : await input.revalidate());
+                const changed = guard(await revalidated());
                 if (changed !== null)
                     return changed;
             }

package/dist/mcp-connect.d.ts

@@ -80,12 +80,13 @@ type Server = {
     scopes: string[];
     resource: string | null;
 };
-/** A sign-in on its way: what the callback needs to finish it (kept in the console's memory, 15 minutes). */
+/** A sign-in on its way: what the callback needs to finish it (kept in the console's memory, 15 minutes). `kit` or `template` is the page it returns to. */
 export type ConnectVisit = {
     service: string;
     repo: string;
     by: string;
     kit: string | null;
+    template: string | null;
     verifier: string;
     clientId: string;
     clientSecret: string | null;
@@ -107,6 +108,7 @@ export declare function startConnect(input: {
     by: string;
     origin: string;
     kit?: string | null;
+    template?: string | null;
 }, fetcher?: Fetch, now?: number): Promise<{
     ok: true;
     go: string;