toolroll 0.9.63 → 0.9.65

package/dist/server/render-chat.js

@@ -1,4 +1,3 @@
-/** The conversation: chat and lead pages, proposal cards and the task chat. */
 import { assignmentSummaryHtml } from "../assignment-ui.js";
 import {} from "../assignment.js";
 import {} from "../browser-workspace.js";
@@ -27,7 +26,7 @@ import { assignmentStageOf, stageOfCode } from "../task-status.js";
 import {} from "../team-chat-authorization.js";
 import {} from "../team-contract.js";
 import { buildProgressOf } from "../workspace-ui.js";
-import { html, htmlString, isHtml, joinHtml, postForm, replaceMarkup } from "../html.js";
+import { html, htmlString, isHtml, joinHtml, postForm, replaceMarkup, reauth } from "../html.js";
 import { requestContext, withFormToken } from "./request-context.js";
 import { createHash, randomBytes } from "node:crypto";
 import { chatMoney, oneLineOf, relativeAge, safePrUrl, screen, sentenceCase, strokeIcon } from "./chrome.js";
@@ -90,7 +89,9 @@ export function taskChatApproval(focus, csrf) {
         repairChain: approval.repairChain,
         route: focus.route,
         coordinator: approval.coordinator,
+        origin: approval.origin ?? null,
         deliverable: approval.deliverable,
+        rebuild: focus.assignment?.need != null && "key" in focus.assignment.need && focus.assignment.need.key === "replan" ? focus.assignment.need.build : null,
         // Edit plan opens the task page's sheet with its fields open for editing.
         editHref: `${taskHref(focus.id)}?edit=plan#plan-editor`,
         notNowHref: "/chat",
@@ -116,12 +117,15 @@ export function taskChatLiveRegion(focus, csrf, fragment = false, inert = false,
         : fragment && focus.approval !== null && focus.plan !== "requested"
             ? html `<section class="card chat-action-card chat-refresh-action"><a class="button-link" href="${approvalHref}" data-primary-action>Approve plan</a></section>`
             : taskChatApproval(focus, csrf));
-    const approvalCard = focus.approval !== null && focus.dispatch?.action !== "approve-scope"
+    // The approval leads when dispatch waits on it or the plan was rewritten after a build (the assignment's one action).
+    const approvalLeads = focus.dispatch?.action === "approve-scope" ||
+        (focus.assignment?.primaryAction?.code === "approve-scope" && focus.assignment.primaryAction.target.taskId === focus.executionId);
+    const approvalCard = focus.approval !== null && !approvalLeads
         ? html `<details class="task-secondary-approval"><summary>Updated approval terms</summary>${approvalContent}</details>` : approvalContent;
     const polling = !inert && ((focus.approval === null || focus.plan === "requested") && focus.state !== "done" && focus.state !== "cancelled" || focus.control.kind === "stopping" || focus.control.kind === "stop");
     const status = focus.assignment !== null
-        ? html `${assignmentSummaryHtml(focus.assignment, { workStatus: focus.status, hideAction: focus.approval !== null && focus.dispatch?.action === "approve-scope", sentence: chatStatusSentence(focus), ...(receiptLeads ? { resultHref: chatResultHref(focus.id, focus.result.runId) } : {}) })}${receiptLeads ? completionReceiptCard(focus.result, focus.id, "chat", focus.status, focus.assignment, false) : ""}`
-        : receiptLeads ? completionReceiptCard(focus.result, focus.id, "chat", focus.status) : taskStatusCard(focus.status, focus.id, focus.dispatch, focus.liveRun?.id ?? null, focus.approval !== null && focus.dispatch?.action === "approve-scope");
+        ? html `${assignmentSummaryHtml(focus.assignment, { workStatus: focus.status, hideAction: focus.approval !== null && approvalLeads, sentence: chatStatusSentence(focus), ...(receiptLeads ? { resultHref: chatResultHref(focus.id, focus.result.runId) } : {}) })}${receiptLeads ? completionReceiptCard(focus.result, focus.id, "chat", focus.status, focus.assignment, false) : ""}`
+        : receiptLeads ? completionReceiptCard(focus.result, focus.id, "chat", focus.status) : taskStatusCard(focus.status, focus.id, focus.dispatch, focus.liveRun?.id ?? null, focus.approval !== null && approvalLeads);
     const publication = focus.publication;
     const prUrl = publication === null ? null : safePrUrl(publication.prUrl);
     return html `<section id="task-chat-live" aria-live="polite" data-task="${focus.id}" data-execution="${focus.executionId}" data-source="/chat/task-status?task=${encodeURIComponent(focus.id)}" data-poll="${polling ? "1" : "0"}" data-approval="${focus.approval?.digest ?? ""}" data-plan="${focus.plan ?? ""}">${focus.guide === true && focus.state !== "cancelled" ? firstTaskJourneyHtml(focus) : ""}<div class="task-live-summary">${status}${checkProgressHtml(focus.checkProgress)}${
@@ -406,12 +410,12 @@ export function chatPage(chrome, data) {
     const candidates = data.chat === null ? [] : [...data.chat.candidates.values()];
     for (const one of candidates) {
         const draft = one.draft;
-        parts.push(html `<div class="card"><p><strong>${draft.title}</strong> <span class="badge">Draft ${draft.kind}</span></p><p class="meta">Drafted by the model from fleet context — nothing is filed; drafts do not survive a restart</p><p style="white-space:pre-wrap">${draft.goal}</p>${draft.outOfScope === null ? "" : html `<p class="meta">Not: ${draft.outOfScope}</p>`}${draft.touches.length > 0 ? html `<p class="meta">Touches: ${draft.touches.join(", ")}</p>` : ""}<p class="meta">Repo: <span class="mono">${projectName(one.repoPath)}</span></p>${postForm(`/chat/file/${one.key}`, html `<input type="password" name="token" placeholder="your password" autocomplete="current-password"><button type="submit">File unapproved</button>`, { attrs: { class: "inline" } })}</div>`);
+        parts.push(html `<div class="card"><p><strong>${draft.title}</strong> <span class="badge">Draft ${draft.kind}</span></p><p class="meta">Drafted by the model from fleet context — nothing is filed; drafts do not survive a restart</p><p style="white-space:pre-wrap">${draft.goal}</p>${draft.outOfScope === null ? "" : html `<p class="meta">Not: ${draft.outOfScope}</p>`}${draft.touches.length > 0 ? html `<p class="meta">Touches: ${draft.touches.join(", ")}</p>` : ""}<p class="meta">Repo: <span class="mono">${projectName(one.repoPath)}</span></p>${postForm(`/chat/file/${one.key}`, html `${reauth(html `<input type="password" name="token" placeholder="your password" autocomplete="current-password">`)}<button type="submit">File unapproved</button>`, { attrs: { class: "inline" } })}</div>`);
     }
     if (!subscription && data.canManage && data.focusTask === null) {
         parts.push(html `<h2>Ask</h2>`, postForm("/chat", joinHtml([
             html `<label>Message<textarea name="message" rows="3" maxlength="2000"></textarea></label>`,
-            html `<label>Your password <span class="meta">(every message — chat spends)</span><input type="password" name="token" autocomplete="current-password"></label>`,
+            html `${reauth(html `<label>Your password <span class="meta">(every message — chat spends)</span><input type="password" name="token" autocomplete="current-password"></label>`)}`,
             html `<button type="submit">Ask</button>`,
         ], "\n"), { attrs: { class: "card" } }));
     }
@@ -423,15 +427,20 @@ export function chatPage(chrome, data) {
     }
     return screen("chat", chatWorkspace(joinHtml(parts, "\n"), data.projects, true, data.focusTask, data.resultPanel ?? null), { chrome, functional: { script: CHAT_UI_SCRIPT + (data.focusTask === null ? "" : RESULT_REVIEW_SCRIPT), fetches: data.focusTask !== null } });
 }
-export function chatAckPage(chrome, turn, nonce) {
+export function chatAckPage(chrome, turn, nonce, reply = null) {
+    // A lead reply's step reserves nothing itself: the reply set the money aside, and a reply whose cost is unknown has
+    // already counted that whole amount against its conversation. Say that amount, never the step's zero.
+    const replyCharge = reply === null ? null : reply.settledMicrousd ?? reply.reservedMicrousd;
     return screen("chat", joinHtml([
         html `<h1>Unknown spend</h1>`,
         html `<div class="card">`,
         html `<p>Turn <span class="mono">#${turn.id}</span> on <span class="mono">${turn.provider} · ${turn.model}</span> may have started before it failed (${turn.failureReason ?? "crashed"}), and its cost could not be measured.</p>`,
-        html `<p><strong>Acknowledging charges the reserved worst case, ${chatMoney(turn.reservedMicrousd)}, to the ledger and re-enables chat on this credential.</strong></p>`,
+        replyCharge === null
+            ? html `<p><strong>Acknowledging charges the reserved worst case, ${chatMoney(turn.reservedMicrousd)}, to the ledger and re-enables chat on this credential.</strong></p>`
+            : html `<p><strong>This lead reply's worst case, ${chatMoney(replyCharge)}, has already been counted against its conversation. Acknowledging adds nothing more and re-enables chat on this credential.</strong></p>`,
         html `<p class="meta">Check the provider's own usage dashboard if you want the exact figure first; the ledger keeps whichever is known.</p>`,
         postForm(`/chat/ack/${turn.id}`, joinHtml([
-            html `<label>Your password<input type="password" name="token" autocomplete="current-password"></label>`,
+            html `${reauth(html `<label>Your password<input type="password" name="token" autocomplete="current-password"></label>`)}`,
             html `<button type="submit">Accept the charge — re-enable chat</button>`,
         ], "\n"), { hidden: { nonce } }),
         html `</div>`,
@@ -752,9 +761,26 @@ export function replacedThreadHtml(previous) {
         ? html `<div class="msg op" data-previous-message="${one.id}"><p style="white-space:pre-wrap">${one.text}</p></div>`
         : html `<div class="msg mate" data-previous-message="${one.id}">${renderChatText(one.text)}</div>`)}<p class="chat-previous-divider" role="separator" data-thread-divider>${REPLACED_THREAD_DIVIDER}</p></section>`;
 }
+/** A queued message's state under its words: waiting (with Remove), or why it was not sent. Nothing for one that ran.
+ * A div, not a p: the Remove form can't sit inside a paragraph (the parser would close it first). */
+function queuedStateHtml(row, back) {
+    if (row.status === "queued") {
+        const waiting = row.error?.startsWith("Waiting: ") === true ? row.error.slice("Waiting: ".length) : "It goes to the lead when it finishes.";
+        return html `<div class="so-queued" data-queued="${row.message}" data-queue-state="queued"><span class="so-queued-state">Queued</span> · ${waiting}${postForm(`/chat/queued/${row.message}/remove`, html `<button type="submit" class="so-queued-remove quiet">Remove</button>`, { attrs: { class: "inline" }, ...(back === null ? {} : { returnTo: back }) })}</div>`;
+    }
+    if (row.status === "running" && row.turnId === null)
+        return html `<div class="so-queued" data-queued="${row.message}" data-queue-state="starting"><span class="so-queued-state">Starting</span></div>`;
+    if (row.status === "cancelled" || row.status === "failed")
+        return html `<div class="so-queued" data-queued="${row.message}" data-queue-state="${row.status}"><span class="so-queued-state">Not sent</span> · ${row.error ?? "It was not sent."}</div>`;
+    if (row.status === "uncertain")
+        return html `<div class="so-queued" data-queued="${row.message}" data-queue-state="uncertain"><span class="so-queued-state">Not confirmed</span> · ${row.error ?? "Delivery could not be confirmed. Nothing was sent again."}</div>`;
+    return html ``;
+}
 /** The lead's question as buttons: each option sends itself as the next message (the same POST as a typed one);
  * "Something else" moves to the composer. Nothing shows while a reply is running. */
-export function leadAskHtml(ask, target, composer, open = true) {
+export function leadAskHtml(ask, target, composer, open = true, stale = false) {
+    if (stale)
+        return html `<div class="so-owner-ask" data-ask="${ask.turn}" data-ask-stale><p class="so-owner-ask-question"><strong>${ask.question}</strong></p><p class="so-owner-ask-stale">Out of date: the task changed after this was asked. Its status above says what it needs now.</p></div>`;
     if (!open)
         return html `<div class="so-owner-ask" data-ask="${ask.turn}"><p class="so-owner-ask-question"><strong>${ask.question}</strong></p></div>`;
     const hidden = target.task !== null ? { task: target.task } : target.project !== null ? { project: target.project } : {};
@@ -767,7 +793,7 @@ export function leadBrowserMessages(rows, back, target = { task: null, project:
     const open = rows.pending === null ? rows.ask?.turn ?? null : null;
     const asked = (turn) => {
         const ask = turn === null ? undefined : rows.asks?.get(turn);
-        return ask === undefined ? "" : leadAskHtml(ask, target, target.task === null ? "lead-message" : "task-message", ask.turn === open);
+        return ask === undefined ? "" : leadAskHtml(ask, target, target.task === null ? "lead-message" : "task-message", ask.turn === open, ask.turn === rows.staleAsk);
     };
     // The owner's message each reply answers: when it asked for ids, the reply keeps them.
     const askedBy = new Map();
@@ -776,7 +802,9 @@ export function leadBrowserMessages(rows, back, target = { task: null, project:
         askedBy.set(message.id, last); return last; }, undefined);
     return rows.messages.map(message => ({
         id: message.id, role: message.role, text: message.text,
-        html: htmlString(message.role === 'operator' ? html `<p>${message.text}</p>` : html `${renderChatText(message.text, askedBy.get(message.id))}${asked(message.turn)}`),
+        html: htmlString(message.role === 'operator'
+            ? (() => { const queued = rows.queue?.get(message.id); return html `${message.text === "" ? "" : html `<p>${message.text}</p>`}${queued === undefined ? "" : queuedStateHtml(queued, back)}`; })()
+            : html `${renderChatText(message.text, askedBy.get(message.id))}${asked(message.turn)}`),
         activity: message.activity, createdAt: message.createdAt,
         ...(() => {
             // Under the lead's message only, as the server-rendered thread does: the person's message shares the turn.
@@ -796,6 +824,7 @@ export function leadChatVersion(rows) {
     const focus = rows.focusTask;
     const facts = [
         rows.messages.map(one => [one.id, one.role, one.turn]),
+        rows.queue === undefined ? null : [...rows.queue.values()].map(one => [one.message, one.status, one.revision, one.error]),
         rows.previous == null ? null : rows.previous.messages.map(one => one.id),
         rows.proposals.map(one => [one.id, one.state, one.outcome === null ? null : JSON.stringify(one.outcome)]),
         rows.coordinatorProposals.map(one => [one.id, one.state, one.outcome === null ? null : JSON.stringify(one.outcome)]),
@@ -851,7 +880,9 @@ export function leadThreadHtml(data) {
     for (const message of data.messages) {
         if (message.role === "operator") {
             asked = message.text;
-            thread.push(html `<div class="msg op" data-message-role="operator" data-key="m${message.id}"><p style="white-space:pre-wrap">${message.text}</p></div>`);
+            // A message that waits its turn (the lead queue) says so, with Remove while it still waits — as in the React thread.
+            const queued = data.queue?.get(message.id);
+            thread.push(html `<div class="msg op" data-message-role="operator" data-key="m${message.id}">${message.text === "" ? "" : html `<p style="white-space:pre-wrap">${message.text}</p>`}${queued === undefined ? "" : queuedStateHtml(queued, returnTo)}</div>`);
             continue;
         }
         const cards = message.turn === null ? [] : (byTurn.get(message.turn) ?? []);
@@ -917,7 +948,7 @@ export function leadPage(chrome, data) {
     // keyboard reaches it. Only this act moves the reader.
     html `<div class="chat-new-update-holder"><button type="button" class="chat-new-update" id="chat-new-update" hidden>New update ↓</button></div>`, postForm("/chat", joinHtml([
         html `<label>Message<textarea id="chat-message" name="message" rows="1" maxlength="${LEAD_MESSAGE_MAX_CHARS}" placeholder="${data.focusTask !== null ? "Ask about this task…" : chatProject !== null ? `Ask about ${projectName(chatProject)}…` : "Describe what you want done…"}"></textarea></label>`,
-        html `<button type="submit" aria-label="${data.pending === null ? "send message" : "wait for the current reply before sending"}"${data.pending === null ? "" : html ` disabled`}>Send</button>`,
+        html `<button type="submit" aria-label="${data.pending === null ? "send message" : "send message — it waits for the current reply"}">Send</button>`,
     ], "\n"), {
         attrs: { class: "card composer", id: latestReply === null && data.pending === null ? "latest" : "chat-composer", "aria-label": "message the lead", "data-chat-session": data.session.id, "data-chat-task": data.focusTask?.id ?? "", "data-chat-user": data.session.approver, "data-chat-busy": data.pending === null ? "0" : "1", "data-chat-version": leadChatVersion(data), "data-chat-approval": data.focusTask?.approval?.digest ?? "" },
         hidden: { request: randomBytes(16).toString("hex"), "request-session": data.session.id, task: data.focusTask?.id, project: chatProject, result: data.resultRunId },
@@ -925,7 +956,7 @@ export function leadPage(chrome, data) {
     // Concise pass (2026-09-13): the status line speaks only when there is
     // a state to report — a reply in progress here, the connection from
     // the continuity script — and the composer carries no second intro.
-    html `<p class="meta composer-hint" id="chat-connection" role="status" aria-live="polite">${data.pending === null ? "" : "Reply in progress. You can draft your next message or come back later."}</p>`, 
+    html `<p class="meta composer-hint" id="chat-connection" role="status" aria-live="polite">${data.pending === null ? "" : "Reply in progress. A message you send now waits its turn."}</p>`, 
     // The explicit reconnection (package 2): shown only once the session
     // or sign-in changed under this page; it reloads on the reader's act.
     html `<p class="meta composer-hint" id="chat-reconnect" hidden><button type="button" class="quiet">Reconnect</button></p>`, leadAfterComposerHtml(data), controlsHtml);

package/dist/server/render-pages.d.ts

@@ -1,4 +1,5 @@
 /** Everyday console pages: home, inbox, board, work, projects, fleet and the queue. */
+import { type TaskOrigin } from "../task-source.js";
 import { type Html } from "../html.js";
 import { type AssignmentSnapshot } from "../assignment.js";
 import { type BoardCard } from "../board.js";
@@ -360,7 +361,7 @@ export declare function portfolioOverview(data: {
         startedAt: string;
         ranMinutes: number | null;
         costUsd: number | null;
-        authMode: "subscription" | "api-key" | null;
+        authMode: "subscription" | "api-key" | "agent-login" | null;
         prNumber: number | null;
         prUrl: string | null;
     }[];
@@ -519,6 +520,8 @@ export declare function nextPage(chrome: Chrome, data: {
     deliverable?: "branch" | "report";
     /** v48: the agents the yes freezes — the one block every ceremony shows. */
     route: RouteView | null;
+    /** v126: where the work came from (an outside event's line of context, never a term agreed to). */
+    origin?: TaskOrigin | null;
     csrf: string;
     nonce: string;
     remaining: number;

package/dist/server/render-pages.js

@@ -1,5 +1,6 @@
 /** Everyday console pages: home, inbox, board, work, projects, fleet and the queue. */
-import { html, htmlString, joinHtml, postForm, replaceMarkup } from "../html.js";
+import { originNote } from "../task-source.js";
+import { html, htmlString, joinHtml, postForm, replaceMarkup, reauth } from "../html.js";
 import {} from "../assignment.js";
 import {} from "../board.js";
 import { browserWorkActionHref } from "../browser-workspace.js";
@@ -912,7 +913,7 @@ export function projectsPage(chrome, recent, candidates, open, problem, _unscope
                             onboard.record[1].large
                                 ? html `<label class="row"><input type="checkbox" name="big-ok" value="1"> this is a large repository (or its size is unknown) — clone it anyway</label>`
                                 : null,
-                            html `<label>Your password, typed again <input type="password" name="token" autocomplete="current-password"></label>`,
+                            html `${reauth(html `<label>Your password, typed again <input type="password" name="token" autocomplete="current-password"></label>`)}`,
                             html `<div class="sticky-actions"><button type="submit">Clone and open</button></div>`,
                         ], "\n"), { hidden: { nonce: onboard.record[0] } }),
                         html `</div>`,
@@ -1258,11 +1259,11 @@ export function nextPage(chrome, data) {
         card =
             html `<h1>${item.approval.taskId}</h1><p>${item.approval.title}</p>${data.planDocument === null
                 ? null
-                : html `<div class="card"><p><strong>The plan</strong> <span class="meta">drafted by a planning session</span></p>${executionPlanHtml(data.planDocument, true)}${planContractHtml(data.planContract ?? null, "ceremony")}</div>`}${postForm(`${taskHref(item.approval.taskId)}/approve`, html `<p><strong>Approve exactly this:</strong></p>${data.deliverable === "report" ? html `<p class="meta"><span class="badge">Scout</span> a read-only session investigates this goal and delivers a report — no branch, nothing changes in the repository</p>` : null}${scope === null || scope.profileState !== "unresolved" ? null : profileWords(scope)}<p class="meta">Goal</p><p class="recap" style="margin-top:0">${scope?.goal ?? item.approval.goal}</p><p class="meta">Not this</p><p class="recap" style="margin-top:0">${scope?.outOfScope == null ? html `<em>no exclusions</em>` : scope.outOfScope}</p><p class="meta">Touches · ${scope === null || scope.touches.length === 0 ? "anything" : joinHtml(scope.touches, ", ")}</p>${scope === null ? null : acceptanceCeremonyHtml(scope.acceptance)}${
+                : html `<div class="card"><p><strong>The plan</strong> <span class="meta">drafted by a planning session</span></p>${executionPlanHtml(data.planDocument, true)}${planContractHtml(data.planContract ?? null, "ceremony")}</div>`}${postForm(`${taskHref(item.approval.taskId)}/approve`, html `<p><strong>Approve exactly this:</strong></p>${data.deliverable === "report" ? html `<p class="meta"><span class="badge">Scout</span> a read-only session investigates this goal and delivers a report — no branch, nothing changes in the repository</p>` : null}${scope === null || scope.profileState !== "unresolved" ? null : profileWords(scope)}${originNote(data.origin) === null ? null : html `<p class="meta" data-approval-origin>${originNote(data.origin)}</p>`}<p class="meta">Goal</p><p class="recap" style="margin-top:0">${scope?.goal ?? item.approval.goal}</p><p class="meta">Not this</p><p class="recap" style="margin-top:0">${scope?.outOfScope == null ? html `<em>no exclusions</em>` : scope.outOfScope}</p><p class="meta">Touches · ${scope === null || scope.touches.length === 0 ? "anything" : joinHtml(scope.touches, ", ")}</p>${scope === null ? null : acceptanceCeremonyHtml(scope.acceptance)}${
             // The AGENTS the yes freezes (v48): the same concise block the task
             // page and chat sign under, before the password — runtime limits one
             // tap away, never in the way.
-            agentsCeremonyHtml(data.route)}${scope === null ? null : runtimeDetailsHtml(scope)}<label>Your password, typed again — a signed-in session alone cannot agree to work<input type="password" name="token" autocomplete="current-password"></label><div class="sticky-actions"><button type="submit">Approve this scope</button></div>`, { attrs: { class: "card approve-form" }, returnTo: "next", hidden: { nonce: data.nonce, digest: data.approvalDigest ?? item.approval.digest } })}<p class="meta"><a href="${taskHref(item.approval.taskId)}">open the full task</a> to edit the scope first</p>`;
+            agentsCeremonyHtml(data.route)}${scope === null ? null : runtimeDetailsHtml(scope)}${reauth(html `<label>Your password, typed again — a signed-in session alone cannot agree to work<input type="password" name="token" autocomplete="current-password"></label>`)}<div class="sticky-actions"><button type="submit">Approve this scope</button></div>`, { attrs: { class: "card approve-form" }, returnTo: "next", hidden: { nonce: data.nonce, digest: data.approvalDigest ?? item.approval.digest } })}<p class="meta"><a href="${taskHref(item.approval.taskId)}">open the full task</a> to edit the scope first</p>`;
     }
     else if (item.kind === "requeue") {
         card =

package/dist/server/render-people.d.ts

@@ -7,8 +7,9 @@ export declare function joinDeadPage(): Html;
 /**
  * v100: for someone signed in with the identity provider, every step-up
  * password field (autocomplete="current-password"; a secret like a bot token
- * is never one) becomes that sign-in: confirmed, when the provider checked
- * them in the last ten minutes, or a link to be checked again, then back here.
+ * is never one) becomes that sign-in: confirmed, when an explicit re-check
+ * made on request awaits its one step-up (cockpit B2), or a link to be
+ * checked again, then back here. An ordinary sign-in never confirms.
  */
 export declare function ssoStepUps(page: Html, sso: {
     label: string;

package/dist/server/render-people.js

@@ -33,8 +33,9 @@ export function joinDeadPage() {
 /**
  * v100: for someone signed in with the identity provider, every step-up
  * password field (autocomplete="current-password"; a secret like a bot token
- * is never one) becomes that sign-in: confirmed, when the provider checked
- * them in the last ten minutes, or a link to be checked again, then back here.
+ * is never one) becomes that sign-in: confirmed, when an explicit re-check
+ * made on request awaits its one step-up (cockpit B2), or a link to be
+ * checked again, then back here. An ordinary sign-in never confirms.
  */
 export function ssoStepUps(page, sso, returnTo) {
     const stepUp = (attributes) => /\btype="password"/.test(attributes) && /\bautocomplete="current-password"/.test(attributes);

package/dist/server/render-results.d.ts

@@ -1,3 +1,5 @@
+/** Results and runs: the review cockpit, evidence, receipts, diffs and the result panel. */
+import type { RunNetworkRecord } from "../egress.js";
 import { type AssignmentSnapshot } from "../assignment.js";
 import { type BrowserCheckItem, type BrowserNeedAction, type BrowserResultPanel, type BrowserResultView } from "../browser-workspace.js";
 import { type ReportShot } from "../evidence.js";
@@ -7,6 +9,7 @@ import { type CriterionMatrixRow, type ProofVerdict } from "../proof.js";
 import { type PullRequestView } from "../pull-request-flow.js";
 import { type StructuredHandoffView, type TerminalDiffView } from "../result-evidence-readers.js";
 import { type FollowUpCheck } from "../result-follow-ups.js";
+import type { RunEfficiency } from "../run-efficiency.js";
 import { type ResultScreenshot, type ResultTab, type SharedResultFacts } from "../result-review.js";
 import { type BuildReviewView } from "../review-switch.js";
 import { type AcceptanceCriterion, type approvalOf } from "../scope.js";
@@ -180,6 +183,10 @@ export type RankedReviewRow = CompletedWorkRow & {
  * scope, plan, run, artifact, verdict, and publication records,
  * each read through the verifier the run page already uses. */
 export type ReviewCockpitView = {
+    /** How the result's run went (docs/plans/run-efficiency.md): display only, its sources and their gaps said. */
+    efficiency?: RunEfficiency | null;
+    /** What the run's network was and what its proxy saw (egress.ts): display only. */
+    network?: RunNetworkRecord | null;
     taskId: string;
     title: string;
     repo: string | null;
@@ -285,7 +292,16 @@ export declare function reviewCockpitPage(chrome: Chrome, data: {
 export declare function reviewCockpitDetail(view: ReviewCockpitView, csrf: string, noted: boolean, canRetryReview?: boolean, tab?: ResultTab, user?: string): Html;
 /** The selected result's HTML and, for the rebuilt page, the same result
  * as data: every form and panel body is the one the HTML carries. */
-export declare function reviewCockpitDetailParts(view: ReviewCockpitView, csrf: string, noted: boolean, canRetryReview: boolean, tab: ResultTab, user: string): {
+/** Where a result is shown: its own page (/review), or the Result tab of its task's page (docs/plans/one-page-task-and-agent.md),
+ * whose address is `base` (the task page with tab=result, and its version when not the current one). The result's own
+ * view (Summary / Changes / Checks) rides `section=` there, so it never fights the task page's `tab`. */
+export type ResultHost = {
+    kind: "review";
+} | {
+    kind: "task";
+    base: string;
+};
+export declare function reviewCockpitDetailParts(view: ReviewCockpitView, csrf: string, noted: boolean, canRetryReview: boolean, tab: ResultTab, user: string, host?: ResultHost): {
     html: Html;
     selected: NonNullable<BrowserResultView["selected"]>;
 };
@@ -319,7 +335,7 @@ export declare function pullRequestCardHtml(pr: TaskPullRequest, csrf: string):
  * bearer session (no token) sees the road named, never a form. */
 export declare function reviewNextAction(view: ReviewCockpitView, csrf: string, _accepted: boolean, _canAnnotate: boolean): Html;
 /** The next action for the browser workspace's JSON: its control as markup text. */
-export declare function reviewNextActionOf(view: ReviewCockpitView, csrf: string): {
+export declare function reviewNextActionOf(view: ReviewCockpitView, csrf: string, back?: string): {
     kind: string;
     title: string;
     detail: string;

package/dist/server/render-results.js

@@ -1,4 +1,3 @@
-/** Results and runs: the review cockpit, evidence, receipts, diffs and the result panel. */
 import { assignmentPresentationOf, historicalAssessmentReason, shortenedMaterialReason } from "../assignment-presentation.js";
 import { assignmentActionHref, assignmentStatusOf, assignmentWithEvidence } from "../assignment-ui.js";
 import { owedAcceptance } from "../assignment.js";
@@ -26,7 +25,7 @@ import { ACCEPT_NEEDS_REASON, acceptWordsOf, cantAcceptYetOf, evidenceProblemOf,
 import { createHash, randomBytes } from "node:crypto";
 import { buildsViews, oneLineOf, projectChip, safePrUrl, screen, sentenceCase, strokeIcon, when, whenTime } from "./chrome.js";
 import { chatResultHref, reviewHref, taskChatHref, taskHref } from "./http.js";
-import { attributes, html, htmlString, joinHtml, postForm } from "../html.js";
+import { attributes, html, htmlString, joinHtml, postForm, reauth } from "../html.js";
 import { publicationFactsOf, statusActionHref, statusLineHtml } from "./render-tasks.js";
 export const RUNS_PAGE = 50;
 /**
@@ -574,23 +573,23 @@ export function reviewCockpitPage(chrome, data) {
 export function reviewCockpitDetail(view, csrf, noted, canRetryReview = false, tab = "summary", user = "") {
     return reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user).html;
 }
-/** The selected result's HTML and, for the rebuilt page, the same result
- * as data: every form and panel body is the one the HTML carries. */
-export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user) {
+export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user, host = { kind: "review" }) {
     const parts = [];
     const run = view.run;
     const proof = view.detail?.proof ?? null;
     const accepted = proof?.accepted !== null && proof?.accepted !== undefined;
     const canAnnotate = canAnnotateDiff(view, csrf);
     const status = cockpitStatusOf(view);
-    // Header: what this is, its verdict word, and why it sits where it does.
-    parts.push(joinHtml([
-        html `<header class="cockpit-head" data-review-task="${view.taskId}">`,
-        html `<h1>${view.title}</h1>`,
-        html `<p class="meta">${run === null ? "No build" : `Build #${run.id}`} · <a href="${taskHref(view.taskId)}">Open task</a>${projectChip(view.repo)}</p>`,
-        html `<p class="cockpit-chips">${statusLineHtml(status)}</p>`,
-        html `</header>`,
-    ]));
+    // Header: what this is, its verdict word, and why it sits where it does. On a task page the task's own header says
+    // all of it, once.
+    if (host.kind === "review")
+        parts.push(joinHtml([
+            html `<header class="cockpit-head" data-review-task="${view.taskId}">`,
+            html `<h1>${view.title}</h1>`,
+            html `<p class="meta">${run === null ? "No build" : `Build #${run.id}`} · <a href="${taskHref(view.taskId)}">Open task</a>${projectChip(view.repo)}</p>`,
+            html `<p class="cockpit-chips">${statusLineHtml(status)}</p>`,
+            html `</header>`,
+        ]));
     if (view.detail === null && view.historyProblem !== null)
         parts.push(html `<p class="problem" data-history-problem>${view.historyProblem} <a href="${taskHref(view.taskId)}">Open task</a></p>`);
     // The primary next act — exactly one road, chosen from the state.
@@ -629,8 +628,10 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         taskHref: taskHref(view.taskId), chatHref: taskChatHref(view.taskId),
         status: { label: status.label, tone: status.tone, token: status.token },
         problem: view.detail === null ? view.historyProblem : null,
-        next: reviewNextActionOf(view, csrf), complete: null, decision: null, checks: null, intent: intentView, noRun: null, panel: null,
+        next: reviewNextActionOf(view, csrf, host.kind === "task" && run !== null ? `${host.base}&run=${run.id}` : undefined), complete: null, decision: null, checks: null, intent: intentView, noRun: null, panel: null,
         notes: view.notes.map(one => ({ author: one.author, at: one.createdAt, note: one.note })),
+        efficiency: view.efficiency ?? null,
+        network: view.network ?? null,
         acts: { primary: null, secondary: null, line: null }, runChecks: null, mismatch: null,
         // The raw run record lives under Details now (2026-10-02): /r/<id> for this result redirects here.
         record: run === null ? null : { build: run.id, href: `/r/${run.id}?record=1`, facts: [
@@ -651,6 +652,10 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     // v50 review-retry panel and the accept-with-exception form.
     const extraChecks = reviewRetryPanel(view.taskId, run.id, view.reviewRetry, { csrf, canAct: false, returnTo: null });
     const here = reviewHref(view.taskId);
+    /** This result's own address on its host, at one of its views (summary when none). */
+    const at = (section = "summary") => host.kind === "task"
+        ? `${host.base}&run=${run.id}${section === "summary" ? "" : `&section=${section}`}`
+        : `${here}&run=${run.id}${section === "summary" ? "" : `&tab=${section}`}`;
     const assignment = view.assignment === null ? null : assignmentWithEvidence(view.assignment, receiptStatusOf(view.detail.receipt), run.id);
     const checks = assignment?.receipt?.checks;
     if (checks !== undefined)
@@ -664,13 +669,16 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         user,
         noted,
         requestToken: randomBytes(16).toString("hex"),
-        hrefFor: one => `${here}&run=${run.id}${one === "summary" ? "" : `&tab=${one}`}`,
-        returnTo: `${here}&run=${run.id}`,
+        hrefFor: one => at(one),
+        returnTo: at(),
         back: null,
         extraChecks,
         headStatus: false,
         action: false,
     });
+    // On a task page the result script keeps the result's own view in `section=` (the page's `tab` is the task's).
+    if (host.kind === "task")
+        panel.panel.attributes = { ...panel.panel.attributes, "data-result-param": "section" };
     parts.push(html `<div id="verification" data-cockpit-section="result">${panel.html}</div>`);
     // What no acceptance resolves (a failed check, a HIGH finding): Complete is refused, so no Accept is offered and
     // the one line says the next step.
@@ -682,7 +690,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     const owed = accepted ? null : youCheck?.accept != null ? { note: null } : panel.panel.need?.accept != null ? { note: panel.panel.need.accept.note }
         : blocked === ACCEPT_NEEDS_REASON ? { note: "Why is this safe to accept?" } : null;
     const complete = hardStop === null && assignment?.state === "ready-to-check" && assignment.receipt !== null && canRetryReview && csrf !== ""
-        ? { action: `${taskHref(view.taskId)}/complete`, receipt: assignment.receipt.digest, run: run.id, accept: owed } : null;
+        ? { action: `${taskHref(view.taskId)}/complete`, receipt: assignment.receipt.digest, run: run.id, accept: owed, ...(host.kind === "task" ? { returnTo: at() } : {}) } : null;
     if (complete !== null)
         parts.push(completionForm(view.taskId, run.id, complete.receipt, view.detail?.pullRequestTo ?? null, owed));
     // The one decision, after the evidence: Accept and finish only when every requirement is met and the checks passed.
@@ -708,13 +716,14 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     const runChecks = canRetryReview && csrf !== "" && followUps !== null && (followUps.full || followUps.quick) && !checksRunning &&
         (checks === undefined || ((checks.status === "not-run" || checks.status === "unavailable") && checks.release == null))
         // Back on this result's Checks tab, where #follow-ups shows the run it started.
-        ? { action: `/r/${run.id}/checks`, level: followUps.full ? "full" : "quick", returnTo: `${here}&run=${run.id}&tab=checks` } : null;
+        ? { action: `/r/${run.id}/checks`, level: followUps.full ? "full" : "quick", returnTo: at("checks") } : null;
     const need = panel.panel.need;
     const nextKind = selected.next?.kind;
     // A failed build: what went wrong is the card, Retry the act; a link to this same page goes nowhere, so it isn't one.
     const failure = view.failure == null ? null : { line: view.failure.line, evidence: view.failure.evidence, suggestion: view.failure.suggestion, retry: view.failure.retry,
-        link: view.failure.link === null || (view.failure.link.href.startsWith(`${here}&run=${run.id}`) && !view.failure.link.href.includes("#")) ? null : view.failure.link,
-        ...(view.failure.acceptAnyway == null ? {} : { acceptAnyway: { ...view.failure.acceptAnyway, returnTo: `${here}&run=${run.id}` } }) };
+        link: view.failure.link === null || (view.failure.link.href.startsWith(`${here}&run=${run.id}`) && !view.failure.link.href.includes("#")) ? null
+            : host.kind === "task" && view.failure.link.href.startsWith(`${here}&run=${run.id}&tab=`) ? { ...view.failure.link, href: view.failure.link.href.replace(`${here}&run=${run.id}&tab=`, `${host.base}&run=${run.id}&section=`) } : view.failure.link,
+        ...(view.failure.acceptAnyway == null ? {} : { acceptAnyway: { ...view.failure.acceptAnyway, returnTo: at() } }) };
     const actFacts = failure !== null
         ? { accept: null, runChecks: runChecks !== null, checksRunning, blocked: null, canRequest: false, need: null, next: null, failed: { retry: failure.retry !== null, acceptAnyway: failure.acceptAnyway !== undefined } }
         : {
@@ -744,7 +753,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
             const lines = (added.length > 0 ? added : shown).map(line => line.newLine);
             return [file.path, lines.length === 0 ? null : { from: Math.min(...lines), to: Math.max(...lines) }];
         }));
-        const changesHref = `${here}&run=${run.id}&tab=changes`;
+        const changesHref = at("changes");
         const found = reportMismatchesOf(proof.reasons, proof.proofProblem === null ? proof.matrix : [], changes);
         // The saved report itself can't be read: that is the evidence problem, said once.
         if (proof.proofProblem !== null)
@@ -757,7 +766,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
                 text: one.text, path: one.path, absent: one.inChanges === false,
                 lines: one.lines === null ? null : one.lines.from === one.lines.to ? `line ${one.lines.from}` : `lines ${one.lines.from}–${one.lines.to}`,
                 href: one.path !== null && one.inChanges === true ? `${changesHref}#${diffFileAnchor(one.path)}${hunkStart.has(one.path) ? `-L${hunkStart.get(one.path)}` : ""}`
-                    : one.note !== null && (proof.proof?.caveats.length ?? 0) >= one.note ? `${here}&run=${run.id}#report-note-${one.note}` : null,
+                    : one.note !== null && (proof.proof?.caveats.length ?? 0) >= one.note ? `${at()}#report-note-${one.note}` : null,
                 noteLabel: one.path === null && one.note !== null ? `The report, note ${one.note}` : null,
             })),
             said: [...new Set([...proof.reasons, ...found.map(one => one.reason)].flatMap(reason => [reason, plainReasonWords(reason)]))],
@@ -825,7 +834,7 @@ export function pullRequestCardHtml(pr, csrf) {
     const merged = view.mergeCommit === null ? "" : html `<p class="meta">Merge commit <span class="mono">${view.mergeCommit.slice(0, 12)}</span></p>`;
     const target = pr.target === null ? "the base branch" : pr.target;
     const act = !view.canMerge || csrf === "" || view.prNumber === null ? "" :
-        postForm(`${taskHref(pr.taskId)}/merge`, html `<p class="meta">${view.mergeMethod === "squash" ? "Squash-merges" : view.mergeMethod === "rebase" ? "Rebase-merges" : "Merges"} PR #${view.prNumber} into ${target} and deletes its branch.</p><label>Password<input type="password" name="token" autocomplete="current-password" required></label>${view.fullCheck === null ? html `<button type="submit">Merge</button>` : html `<input type="hidden" name="anyway" value="1"><button type="submit" class="secondary">Merge anyway</button>`}`, { attrs: { class: "pull-request-act", "data-merge-form": true }, hidden: { run: view.runId } });
+        postForm(`${taskHref(pr.taskId)}/merge`, html `<p class="meta">${view.mergeMethod === "squash" ? "Squash-merges" : view.mergeMethod === "rebase" ? "Rebase-merges" : "Merges"} PR #${view.prNumber} into ${target} and deletes its branch.</p>${reauth(html `<label>Password<input type="password" name="token" autocomplete="current-password" required></label>`)}${view.fullCheck === null ? html `<button type="submit">Merge</button>` : html `<input type="hidden" name="anyway" value="1"><button type="submit" class="secondary">Merge anyway</button>`}`, { attrs: { class: "pull-request-act", "data-merge-form": true }, hidden: { run: view.runId } });
     return html `<section class="card pull-request pull-request--${tone}" id="merge" data-pull-request="${view.state}"><div class="pull-request-head"><strong>${view.label}</strong>${link}</div><p class="meta">${view.detail}${revision}</p>${merged}${act}</section>`;
 }
 /** Exactly one primary road per result, chosen from its state; the
@@ -837,11 +846,11 @@ export function reviewNextAction(view, csrf, _accepted, _canAnnotate) {
     return next === null ? html `` : html `<div class="card cockpit-next" data-next-action="${next.kind}"><div><strong>${next.title}</strong><span class="meta">${next.detail}</span></div>${next.control}</div>`;
 }
 /** The next action for the browser workspace's JSON: its control as markup text. */
-export function reviewNextActionOf(view, csrf) {
-    const next = reviewNextActionParts(view, csrf);
+export function reviewNextActionOf(view, csrf, back) {
+    const next = reviewNextActionParts(view, csrf, back);
     return next === null ? null : { ...next, control: htmlString(next.control) };
 }
-function reviewNextActionParts(view, csrf) {
+function reviewNextActionParts(view, csrf, back) {
     const run = view.run;
     const detail = view.detail;
     const card = (kind, title, detailWords, control) => ({ kind, title, detail: detailWords, control });
@@ -852,7 +861,7 @@ function reviewNextActionParts(view, csrf) {
         return card("draft-repair", "CI is failing on its pull request", "Toolroll confirmed the failure. Draft one repair task, then approve it before it runs.", postForm(`/r/${run.id}/draft-repair`, html `<button type="submit">Draft a repair task</button>`));
     }
     if (detail.comments.length > 0 && csrf !== "") {
-        return card("revise", `${detail.comments.length} note${detail.comments.length === 1 ? "" : "s"} ready`, "Create one revision from these notes. You approve it before it runs.", postForm(`/r/${run.id}/revise`, html `${revisionSealFields(detail.comments, detail.sourceDigest)}<button type="submit">Revise</button>`, { returnTo: reviewHref(view.taskId) }));
+        return card("revise", `${detail.comments.length} note${detail.comments.length === 1 ? "" : "s"} ready`, "Create one revision from these notes. You approve it before it runs.", postForm(`/r/${run.id}/revise`, html `${revisionSealFields(detail.comments, detail.sourceDigest)}<button type="submit">Revise</button>`, { returnTo: back ?? reviewHref(view.taskId) }));
     }
     return null;
 }
@@ -1982,7 +1991,7 @@ export function resultNeedAction(need, o, canRequest) {
         : need.rebuild != null
             ? postForm(need.rebuild.action, html `<button type="submit" data-primary-action data-rebuild style="min-height:44px">${need.label}</button>`, { attrs: { class: "rebuild" } })
             : need.confirm !== null
-                ? postForm(need.confirm.action, html `${need.confirm.checked === true ? html `<label><input type="checkbox" name="checked" value="yes" required> Nothing from build #${need.confirm.run} is running</label>` : ""}<label>Your password<input type="password" name="token" autocomplete="current-password" required></label><button type="submit" style="min-height:44px">${need.label}</button>`, { attrs: { id: "confirm-stopped", class: "confirm-stopped" }, returnTo: need.confirm.returnTo, hidden: { run: need.confirm.run } })
+                ? postForm(need.confirm.action, html `${need.confirm.checked === true ? html `<label><input type="checkbox" name="checked" value="yes" required> Nothing from build #${need.confirm.run} is running</label>` : ""}${reauth(html `<label>Your password<input type="password" name="token" autocomplete="current-password" required></label>`)}<button type="submit" style="min-height:44px">${need.label}</button>`, { attrs: { id: "confirm-stopped", class: "confirm-stopped" }, returnTo: need.confirm.returnTo, hidden: { run: need.confirm.run } })
                 : html `<a class="button-link" href="${need.href ?? "#"}" data-primary-action>${need.label}</a>`;
     return html `<div class="result-action" data-result-action="need">${control}${canRequest && o.csrf !== "" ? html `<a class="result-feedback-link" href="#request-changes">Request changes</a>` : ""}</div>`;
 }

package/dist/server/render-settings.js

@@ -23,7 +23,7 @@ import { redactToken, TOKEN_ENV } from "../telegram.js";
 import { requestContext } from "./request-context.js";
 import { chatMoney, screen, strokeIcon, when, whenTime } from "./chrome.js";
 import { taskHref } from "./http.js";
-import { html, joinHtml, postForm } from "../html.js";
+import { html, joinHtml, postForm, reauth } from "../html.js";
 import { permissionModeChoices, qualityModeChoices } from "./render-tasks.js";
 /** Settings → Lead: one line for what runs the lead and one action; the full form, turning it off and stored keys under Advanced. */
 export function leadSettingsHtml(data) {
@@ -36,7 +36,7 @@ export function leadSettingsHtml(data) {
         : data.words !== null
             ? html `<p>The lead uses ${data.words}.</p><p class="meta">${config.model === "default" ? "Its default model" : `Model ${config.model}`} · up to ${config.dailyTurns} turns a day · no dollar spend. Every action it proposes waits for you to confirm it.</p>`
             : html `<p>The lead uses the ${config.provider === "anthropic-api" ? "Anthropic" : "OpenRouter"} API with ${config.model}.</p><p class="meta">Up to ${chatMoney(config.weeklyCeilingMicrousd)} a week · up to ${config.dailyTurns} turns a day.</p>`;
-    const forget = facts.keyFacts.filter(one => one.state === "stored").map(one => postForm("/chat/config", html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password"><button type="submit" class="secondary">Forget the stored ${one.provider} key</button>`, { attrs: { class: "inline" }, returnTo, hidden: { "forget-key": one.provider } }));
+    const forget = facts.keyFacts.filter(one => one.state === "stored").map(one => postForm("/chat/config", html `${reauth(html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password">`)}<button type="submit" class="secondary">Forget the stored ${one.provider} key</button>`, { attrs: { class: "inline" }, returnTo, hidden: { "forget-key": one.provider } }));
     return joinHtml([
         html `<p><a href="/settings">Settings</a></p><h1>Lead</h1>`,
         data.said === null ? "" : html `<p class="problem" role="status">${data.said}</p>`,
@@ -58,7 +58,7 @@ ${postForm("/settings/lead/promise/cancel", html `<button type="submit" class="s
             : html `<ul class="lead-subagent-list">${data.subagents.map(one => html `<li data-subagent="${one.id}"><a href="/settings/lead/subagents/${one.id}">${one.label}</a><span class="meta">${one.project}${one.paused ? " · Paused" : ""}</span></li>`)}</ul>`}<p><a class="button-link" href="/settings/lead/subagents?add=1#add" data-add-subagent>Add subagent</a></p></section>`,
         html `<details class="lead-advanced" data-lead-advanced><summary>Advanced</summary>`,
         leadConfigForm(config, facts),
-        config === null ? "" : postForm("/chat/config", html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password"><button type="submit" class="secondary">Turn the lead off</button>`, { attrs: { class: "inline" }, returnTo, hidden: { off: "1" } }),
+        config === null ? "" : postForm("/chat/config", html `${reauth(html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password">`)}<button type="submit" class="secondary">Turn the lead off</button>`, { attrs: { class: "inline" }, returnTo, hidden: { off: "1" } }),
         forget,
         html `</details>`,
     ], "\n");
@@ -102,7 +102,7 @@ ${models.map(model => html `<option value="${model}">${labels.get(model) ?? ""}<
                     .join(" · ")})</span>\
 <input type="password" name="key" placeholder="direct API only — leave empty to keep" autocomplete="off"></label>`,
             html `<label>Your password <span class="meta">(typed again to change the provider)</span>\
-<input type="password" name="token" autocomplete="current-password"></label>`,
+${reauth(html `<input type="password" name="token" autocomplete="current-password">`)}</label>`,
             html `<button type="submit">${current === null ? "turn chat on" : "save"}</button>`,
             "",
         ], "\n"), { attrs: { class: "card" }, returnTo: data.returnTo }),
@@ -290,7 +290,7 @@ ${[
                     postForm("/push/subscribe", joinHtml([
                         "",
                         html `<input type="hidden" name="endpoint" value=""><input type="hidden" name="p256dh" value=""><input type="hidden" name="auth" value="">`,
-                        html `<label>Your password <input type="password" name="token" autocomplete="current-password"></label>`,
+                        html `${reauth(html `<label>Your password <input type="password" name="token" autocomplete="current-password"></label>`)}`,
                         html `<button type="submit" id="push-enable">Get alerts on this device</button>`,
                         html `<p class="meta" id="push-state"></p>`,
                         "",
@@ -528,6 +528,7 @@ export const SETTINGS_GROUPS = [
         ]],
     ["Access and rules", [
             ["/settings/sign-in", "Sign-in", html `<rect x="3" y="11" width="18" height="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/>`],
+            ["/settings/passwordless", "Passwordless", html `<rect x="3" y="11" width="18" height="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 9.9-1"/>`],
             ["/settings/sessions", "Sessions & tokens", html `<circle cx="7.5" cy="15.5" r="5.5"/><path d="m21 2-9.6 9.6M15.5 7.5l3 3L22 7l-3-3"/>`],
             ["/settings/project", "Project", html `<path d="M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/>`],
             ["/settings/policy", "Policy", html `<path d="M9 12l2 2 4-4"/><rect x="4" y="3" width="16" height="18" rx="2"/>`],