toolroll 0.9.63 → 0.9.67

package/dist/server/render-results.js

@@ -1,4 +1,3 @@
-/** Results and runs: the review cockpit, evidence, receipts, diffs and the result panel. */
 import { assignmentPresentationOf, historicalAssessmentReason, shortenedMaterialReason } from "../assignment-presentation.js";
 import { assignmentActionHref, assignmentStatusOf, assignmentWithEvidence } from "../assignment-ui.js";
 import { owedAcceptance } from "../assignment.js";
@@ -26,7 +25,7 @@ import { ACCEPT_NEEDS_REASON, acceptWordsOf, cantAcceptYetOf, evidenceProblemOf,
 import { createHash, randomBytes } from "node:crypto";
 import { buildsViews, oneLineOf, projectChip, safePrUrl, screen, sentenceCase, strokeIcon, when, whenTime } from "./chrome.js";
 import { chatResultHref, reviewHref, taskChatHref, taskHref } from "./http.js";
-import { attributes, html, htmlString, joinHtml, postForm } from "../html.js";
+import { attributes, html, htmlString, joinHtml, postForm, reauth } from "../html.js";
 import { publicationFactsOf, statusActionHref, statusLineHtml } from "./render-tasks.js";
 export const RUNS_PAGE = 50;
 /**
@@ -574,23 +573,23 @@ export function reviewCockpitPage(chrome, data) {
 export function reviewCockpitDetail(view, csrf, noted, canRetryReview = false, tab = "summary", user = "") {
     return reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user).html;
 }
-/** The selected result's HTML and, for the rebuilt page, the same result
- * as data: every form and panel body is the one the HTML carries. */
-export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user) {
+export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user, host = { kind: "review" }) {
     const parts = [];
     const run = view.run;
     const proof = view.detail?.proof ?? null;
     const accepted = proof?.accepted !== null && proof?.accepted !== undefined;
     const canAnnotate = canAnnotateDiff(view, csrf);
     const status = cockpitStatusOf(view);
-    // Header: what this is, its verdict word, and why it sits where it does.
-    parts.push(joinHtml([
-        html `<header class="cockpit-head" data-review-task="${view.taskId}">`,
-        html `<h1>${view.title}</h1>`,
-        html `<p class="meta">${run === null ? "No build" : `Build #${run.id}`} · <a href="${taskHref(view.taskId)}">Open task</a>${projectChip(view.repo)}</p>`,
-        html `<p class="cockpit-chips">${statusLineHtml(status)}</p>`,
-        html `</header>`,
-    ]));
+    // Header: what this is, its verdict word, and why it sits where it does. On a task page the task's own header says
+    // all of it, once.
+    if (host.kind === "review")
+        parts.push(joinHtml([
+            html `<header class="cockpit-head" data-review-task="${view.taskId}">`,
+            html `<h1>${view.title}</h1>`,
+            html `<p class="meta">${run === null ? "No build" : `Build #${run.id}`} · <a href="${taskHref(view.taskId)}">Open task</a>${projectChip(view.repo)}</p>`,
+            html `<p class="cockpit-chips">${statusLineHtml(status)}</p>`,
+            html `</header>`,
+        ]));
     if (view.detail === null && view.historyProblem !== null)
         parts.push(html `<p class="problem" data-history-problem>${view.historyProblem} <a href="${taskHref(view.taskId)}">Open task</a></p>`);
     // The primary next act — exactly one road, chosen from the state.
@@ -629,8 +628,10 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         taskHref: taskHref(view.taskId), chatHref: taskChatHref(view.taskId),
         status: { label: status.label, tone: status.tone, token: status.token },
         problem: view.detail === null ? view.historyProblem : null,
-        next: reviewNextActionOf(view, csrf), complete: null, decision: null, checks: null, intent: intentView, noRun: null, panel: null,
+        next: reviewNextActionOf(view, csrf, host.kind === "task" && run !== null ? `${host.base}&run=${run.id}` : undefined), complete: null, decision: null, checks: null, intent: intentView, noRun: null, panel: null,
         notes: view.notes.map(one => ({ author: one.author, at: one.createdAt, note: one.note })),
+        efficiency: view.efficiency ?? null,
+        network: view.network ?? null,
         acts: { primary: null, secondary: null, line: null }, runChecks: null, mismatch: null,
         // The raw run record lives under Details now (2026-10-02): /r/<id> for this result redirects here.
         record: run === null ? null : { build: run.id, href: `/r/${run.id}?record=1`, facts: [
@@ -651,6 +652,10 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     // v50 review-retry panel and the accept-with-exception form.
     const extraChecks = reviewRetryPanel(view.taskId, run.id, view.reviewRetry, { csrf, canAct: false, returnTo: null });
     const here = reviewHref(view.taskId);
+    /** This result's own address on its host, at one of its views (summary when none). */
+    const at = (section = "summary") => host.kind === "task"
+        ? `${host.base}&run=${run.id}${section === "summary" ? "" : `&section=${section}`}`
+        : `${here}&run=${run.id}${section === "summary" ? "" : `&tab=${section}`}`;
     const assignment = view.assignment === null ? null : assignmentWithEvidence(view.assignment, receiptStatusOf(view.detail.receipt), run.id);
     const checks = assignment?.receipt?.checks;
     if (checks !== undefined)
@@ -664,13 +669,16 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         user,
         noted,
         requestToken: randomBytes(16).toString("hex"),
-        hrefFor: one => `${here}&run=${run.id}${one === "summary" ? "" : `&tab=${one}`}`,
-        returnTo: `${here}&run=${run.id}`,
+        hrefFor: one => at(one),
+        returnTo: at(),
         back: null,
         extraChecks,
         headStatus: false,
         action: false,
     });
+    // On a task page the result script keeps the result's own view in `section=` (the page's `tab` is the task's).
+    if (host.kind === "task")
+        panel.panel.attributes = { ...panel.panel.attributes, "data-result-param": "section" };
     parts.push(html `<div id="verification" data-cockpit-section="result">${panel.html}</div>`);
     // What no acceptance resolves (a failed check, a HIGH finding): Complete is refused, so no Accept is offered and
     // the one line says the next step.
@@ -682,7 +690,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     const owed = accepted ? null : youCheck?.accept != null ? { note: null } : panel.panel.need?.accept != null ? { note: panel.panel.need.accept.note }
         : blocked === ACCEPT_NEEDS_REASON ? { note: "Why is this safe to accept?" } : null;
     const complete = hardStop === null && assignment?.state === "ready-to-check" && assignment.receipt !== null && canRetryReview && csrf !== ""
-        ? { action: `${taskHref(view.taskId)}/complete`, receipt: assignment.receipt.digest, run: run.id, accept: owed } : null;
+        ? { action: `${taskHref(view.taskId)}/complete`, receipt: assignment.receipt.digest, run: run.id, accept: owed, ...(host.kind === "task" ? { returnTo: at() } : {}) } : null;
     if (complete !== null)
         parts.push(completionForm(view.taskId, run.id, complete.receipt, view.detail?.pullRequestTo ?? null, owed));
     // The one decision, after the evidence: Accept and finish only when every requirement is met and the checks passed.
@@ -708,13 +716,14 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     const runChecks = canRetryReview && csrf !== "" && followUps !== null && (followUps.full || followUps.quick) && !checksRunning &&
         (checks === undefined || ((checks.status === "not-run" || checks.status === "unavailable") && checks.release == null))
         // Back on this result's Checks tab, where #follow-ups shows the run it started.
-        ? { action: `/r/${run.id}/checks`, level: followUps.full ? "full" : "quick", returnTo: `${here}&run=${run.id}&tab=checks` } : null;
+        ? { action: `/r/${run.id}/checks`, level: followUps.full ? "full" : "quick", returnTo: at("checks") } : null;
     const need = panel.panel.need;
     const nextKind = selected.next?.kind;
     // A failed build: what went wrong is the card, Retry the act; a link to this same page goes nowhere, so it isn't one.
     const failure = view.failure == null ? null : { line: view.failure.line, evidence: view.failure.evidence, suggestion: view.failure.suggestion, retry: view.failure.retry,
-        link: view.failure.link === null || (view.failure.link.href.startsWith(`${here}&run=${run.id}`) && !view.failure.link.href.includes("#")) ? null : view.failure.link,
-        ...(view.failure.acceptAnyway == null ? {} : { acceptAnyway: { ...view.failure.acceptAnyway, returnTo: `${here}&run=${run.id}` } }) };
+        link: view.failure.link === null || (view.failure.link.href.startsWith(`${here}&run=${run.id}`) && !view.failure.link.href.includes("#")) ? null
+            : host.kind === "task" && view.failure.link.href.startsWith(`${here}&run=${run.id}&tab=`) ? { ...view.failure.link, href: view.failure.link.href.replace(`${here}&run=${run.id}&tab=`, `${host.base}&run=${run.id}&section=`) } : view.failure.link,
+        ...(view.failure.acceptAnyway == null ? {} : { acceptAnyway: { ...view.failure.acceptAnyway, returnTo: at() } }) };
     const actFacts = failure !== null
         ? { accept: null, runChecks: runChecks !== null, checksRunning, blocked: null, canRequest: false, need: null, next: null, failed: { retry: failure.retry !== null, acceptAnyway: failure.acceptAnyway !== undefined } }
         : {
@@ -744,7 +753,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
             const lines = (added.length > 0 ? added : shown).map(line => line.newLine);
             return [file.path, lines.length === 0 ? null : { from: Math.min(...lines), to: Math.max(...lines) }];
         }));
-        const changesHref = `${here}&run=${run.id}&tab=changes`;
+        const changesHref = at("changes");
         const found = reportMismatchesOf(proof.reasons, proof.proofProblem === null ? proof.matrix : [], changes);
         // The saved report itself can't be read: that is the evidence problem, said once.
         if (proof.proofProblem !== null)
@@ -757,7 +766,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
                 text: one.text, path: one.path, absent: one.inChanges === false,
                 lines: one.lines === null ? null : one.lines.from === one.lines.to ? `line ${one.lines.from}` : `lines ${one.lines.from}–${one.lines.to}`,
                 href: one.path !== null && one.inChanges === true ? `${changesHref}#${diffFileAnchor(one.path)}${hunkStart.has(one.path) ? `-L${hunkStart.get(one.path)}` : ""}`
-                    : one.note !== null && (proof.proof?.caveats.length ?? 0) >= one.note ? `${here}&run=${run.id}#report-note-${one.note}` : null,
+                    : one.note !== null && (proof.proof?.caveats.length ?? 0) >= one.note ? `${at()}#report-note-${one.note}` : null,
                 noteLabel: one.path === null && one.note !== null ? `The report, note ${one.note}` : null,
             })),
             said: [...new Set([...proof.reasons, ...found.map(one => one.reason)].flatMap(reason => [reason, plainReasonWords(reason)]))],
@@ -825,7 +834,7 @@ export function pullRequestCardHtml(pr, csrf) {
     const merged = view.mergeCommit === null ? "" : html `<p class="meta">Merge commit <span class="mono">${view.mergeCommit.slice(0, 12)}</span></p>`;
     const target = pr.target === null ? "the base branch" : pr.target;
     const act = !view.canMerge || csrf === "" || view.prNumber === null ? "" :
-        postForm(`${taskHref(pr.taskId)}/merge`, html `<p class="meta">${view.mergeMethod === "squash" ? "Squash-merges" : view.mergeMethod === "rebase" ? "Rebase-merges" : "Merges"} PR #${view.prNumber} into ${target} and deletes its branch.</p><label>Password<input type="password" name="token" autocomplete="current-password" required></label>${view.fullCheck === null ? html `<button type="submit">Merge</button>` : html `<input type="hidden" name="anyway" value="1"><button type="submit" class="secondary">Merge anyway</button>`}`, { attrs: { class: "pull-request-act", "data-merge-form": true }, hidden: { run: view.runId } });
+        postForm(`${taskHref(pr.taskId)}/merge`, html `<p class="meta">${view.mergeMethod === "squash" ? "Squash-merges" : view.mergeMethod === "rebase" ? "Rebase-merges" : "Merges"} PR #${view.prNumber} into ${target} and deletes its branch.</p>${reauth(html `<label>Password<input type="password" name="token" autocomplete="current-password" required></label>`)}${view.fullCheck === null ? html `<button type="submit">Merge</button>` : html `<input type="hidden" name="anyway" value="1"><button type="submit" class="secondary">Merge anyway</button>`}`, { attrs: { class: "pull-request-act", "data-merge-form": true }, hidden: { run: view.runId } });
     return html `<section class="card pull-request pull-request--${tone}" id="merge" data-pull-request="${view.state}"><div class="pull-request-head"><strong>${view.label}</strong>${link}</div><p class="meta">${view.detail}${revision}</p>${merged}${act}</section>`;
 }
 /** Exactly one primary road per result, chosen from its state; the
@@ -837,11 +846,11 @@ export function reviewNextAction(view, csrf, _accepted, _canAnnotate) {
     return next === null ? html `` : html `<div class="card cockpit-next" data-next-action="${next.kind}"><div><strong>${next.title}</strong><span class="meta">${next.detail}</span></div>${next.control}</div>`;
 }
 /** The next action for the browser workspace's JSON: its control as markup text. */
-export function reviewNextActionOf(view, csrf) {
-    const next = reviewNextActionParts(view, csrf);
+export function reviewNextActionOf(view, csrf, back) {
+    const next = reviewNextActionParts(view, csrf, back);
     return next === null ? null : { ...next, control: htmlString(next.control) };
 }
-function reviewNextActionParts(view, csrf) {
+function reviewNextActionParts(view, csrf, back) {
     const run = view.run;
     const detail = view.detail;
     const card = (kind, title, detailWords, control) => ({ kind, title, detail: detailWords, control });
@@ -852,7 +861,7 @@ function reviewNextActionParts(view, csrf) {
         return card("draft-repair", "CI is failing on its pull request", "Toolroll confirmed the failure. Draft one repair task, then approve it before it runs.", postForm(`/r/${run.id}/draft-repair`, html `<button type="submit">Draft a repair task</button>`));
     }
     if (detail.comments.length > 0 && csrf !== "") {
-        return card("revise", `${detail.comments.length} note${detail.comments.length === 1 ? "" : "s"} ready`, "Create one revision from these notes. You approve it before it runs.", postForm(`/r/${run.id}/revise`, html `${revisionSealFields(detail.comments, detail.sourceDigest)}<button type="submit">Revise</button>`, { returnTo: reviewHref(view.taskId) }));
+        return card("revise", `${detail.comments.length} note${detail.comments.length === 1 ? "" : "s"} ready`, "Create one revision from these notes. You approve it before it runs.", postForm(`/r/${run.id}/revise`, html `${revisionSealFields(detail.comments, detail.sourceDigest)}<button type="submit">Revise</button>`, { returnTo: back ?? reviewHref(view.taskId) }));
     }
     return null;
 }
@@ -1982,7 +1991,7 @@ export function resultNeedAction(need, o, canRequest) {
         : need.rebuild != null
             ? postForm(need.rebuild.action, html `<button type="submit" data-primary-action data-rebuild style="min-height:44px">${need.label}</button>`, { attrs: { class: "rebuild" } })
             : need.confirm !== null
-                ? postForm(need.confirm.action, html `${need.confirm.checked === true ? html `<label><input type="checkbox" name="checked" value="yes" required> Nothing from build #${need.confirm.run} is running</label>` : ""}<label>Your password<input type="password" name="token" autocomplete="current-password" required></label><button type="submit" style="min-height:44px">${need.label}</button>`, { attrs: { id: "confirm-stopped", class: "confirm-stopped" }, returnTo: need.confirm.returnTo, hidden: { run: need.confirm.run } })
+                ? postForm(need.confirm.action, html `${need.confirm.checked === true ? html `<label><input type="checkbox" name="checked" value="yes" required> Nothing from build #${need.confirm.run} is running</label>` : ""}${reauth(html `<label>Your password<input type="password" name="token" autocomplete="current-password" required></label>`)}<button type="submit" style="min-height:44px">${need.label}</button>`, { attrs: { id: "confirm-stopped", class: "confirm-stopped" }, returnTo: need.confirm.returnTo, hidden: { run: need.confirm.run } })
                 : html `<a class="button-link" href="${need.href ?? "#"}" data-primary-action>${need.label}</a>`;
     return html `<div class="result-action" data-result-action="need">${control}${canRequest && o.csrf !== "" ? html `<a class="result-feedback-link" href="#request-changes">Request changes</a>` : ""}</div>`;
 }

package/dist/server/render-settings.js

@@ -23,7 +23,7 @@ import { redactToken, TOKEN_ENV } from "../telegram.js";
 import { requestContext } from "./request-context.js";
 import { chatMoney, screen, strokeIcon, when, whenTime } from "./chrome.js";
 import { taskHref } from "./http.js";
-import { html, joinHtml, postForm } from "../html.js";
+import { html, joinHtml, postForm, reauth } from "../html.js";
 import { permissionModeChoices, qualityModeChoices } from "./render-tasks.js";
 /** Settings → Lead: one line for what runs the lead and one action; the full form, turning it off and stored keys under Advanced. */
 export function leadSettingsHtml(data) {
@@ -36,7 +36,7 @@ export function leadSettingsHtml(data) {
         : data.words !== null
             ? html `<p>The lead uses ${data.words}.</p><p class="meta">${config.model === "default" ? "Its default model" : `Model ${config.model}`} · up to ${config.dailyTurns} turns a day · no dollar spend. Every action it proposes waits for you to confirm it.</p>`
             : html `<p>The lead uses the ${config.provider === "anthropic-api" ? "Anthropic" : "OpenRouter"} API with ${config.model}.</p><p class="meta">Up to ${chatMoney(config.weeklyCeilingMicrousd)} a week · up to ${config.dailyTurns} turns a day.</p>`;
-    const forget = facts.keyFacts.filter(one => one.state === "stored").map(one => postForm("/chat/config", html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password"><button type="submit" class="secondary">Forget the stored ${one.provider} key</button>`, { attrs: { class: "inline" }, returnTo, hidden: { "forget-key": one.provider } }));
+    const forget = facts.keyFacts.filter(one => one.state === "stored").map(one => postForm("/chat/config", html `${reauth(html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password">`)}<button type="submit" class="secondary">Forget the stored ${one.provider} key</button>`, { attrs: { class: "inline" }, returnTo, hidden: { "forget-key": one.provider } }));
     return joinHtml([
         html `<p><a href="/settings">Settings</a></p><h1>Lead</h1>`,
         data.said === null ? "" : html `<p class="problem" role="status">${data.said}</p>`,
@@ -58,7 +58,7 @@ ${postForm("/settings/lead/promise/cancel", html `<button type="submit" class="s
             : html `<ul class="lead-subagent-list">${data.subagents.map(one => html `<li data-subagent="${one.id}"><a href="/settings/lead/subagents/${one.id}">${one.label}</a><span class="meta">${one.project}${one.paused ? " · Paused" : ""}</span></li>`)}</ul>`}<p><a class="button-link" href="/settings/lead/subagents?add=1#add" data-add-subagent>Add subagent</a></p></section>`,
         html `<details class="lead-advanced" data-lead-advanced><summary>Advanced</summary>`,
         leadConfigForm(config, facts),
-        config === null ? "" : postForm("/chat/config", html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password"><button type="submit" class="secondary">Turn the lead off</button>`, { attrs: { class: "inline" }, returnTo, hidden: { off: "1" } }),
+        config === null ? "" : postForm("/chat/config", html `${reauth(html `<input type="password" name="token" placeholder="your password" autocomplete="current-password" aria-label="Your password">`)}<button type="submit" class="secondary">Turn the lead off</button>`, { attrs: { class: "inline" }, returnTo, hidden: { off: "1" } }),
         forget,
         html `</details>`,
     ], "\n");
@@ -102,7 +102,7 @@ ${models.map(model => html `<option value="${model}">${labels.get(model) ?? ""}<
                     .join(" · ")})</span>\
 <input type="password" name="key" placeholder="direct API only — leave empty to keep" autocomplete="off"></label>`,
             html `<label>Your password <span class="meta">(typed again to change the provider)</span>\
-<input type="password" name="token" autocomplete="current-password"></label>`,
+${reauth(html `<input type="password" name="token" autocomplete="current-password">`)}</label>`,
             html `<button type="submit">${current === null ? "turn chat on" : "save"}</button>`,
             "",
         ], "\n"), { attrs: { class: "card" }, returnTo: data.returnTo }),
@@ -290,7 +290,7 @@ ${[
                     postForm("/push/subscribe", joinHtml([
                         "",
                         html `<input type="hidden" name="endpoint" value=""><input type="hidden" name="p256dh" value=""><input type="hidden" name="auth" value="">`,
-                        html `<label>Your password <input type="password" name="token" autocomplete="current-password"></label>`,
+                        html `${reauth(html `<label>Your password <input type="password" name="token" autocomplete="current-password"></label>`)}`,
                         html `<button type="submit" id="push-enable">Get alerts on this device</button>`,
                         html `<p class="meta" id="push-state"></p>`,
                         "",
@@ -528,6 +528,7 @@ export const SETTINGS_GROUPS = [
         ]],
     ["Access and rules", [
             ["/settings/sign-in", "Sign-in", html `<rect x="3" y="11" width="18" height="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 10 0v4"/>`],
+            ["/settings/passwordless", "Passwordless", html `<rect x="3" y="11" width="18" height="11" rx="2"/><path d="M7 11V7a5 5 0 0 1 9.9-1"/>`],
             ["/settings/sessions", "Sessions & tokens", html `<circle cx="7.5" cy="15.5" r="5.5"/><path d="m21 2-9.6 9.6M15.5 7.5l3 3L22 7l-3-3"/>`],
             ["/settings/project", "Project", html `<path d="M3 7a2 2 0 0 1 2-2h4l2 2h8a2 2 0 0 1 2 2v8a2 2 0 0 1-2 2H5a2 2 0 0 1-2-2z"/>`],
             ["/settings/policy", "Policy", html `<path d="M9 12l2 2 4-4"/><rect x="4" y="3" width="16" height="18" rx="2"/>`],

package/dist/server/render-tasks.d.ts

@@ -1,10 +1,9 @@
-/** Task pages: approval, agents, plans, controls, decisions and the task body. */
 import { type Html } from "../html.js";
 import { type RunActivity } from "../activity-line.js";
 import { type AgentChoice } from "../agentconfig.js";
 import { type AssignmentSnapshot } from "../assignment.js";
 import { type TaskBaseView } from "../task-base.js";
-import { type BrowserTaskView } from "../browser-workspace.js";
+import { type BrowserAgentControls, type BrowserTaskView } from "../browser-workspace.js";
 import { type FormView } from "../contracts/console-api.js";
 import { type DispatchDiagnosis } from "../dispatch.js";
 import { type ReportView } from "../evidence.js";
@@ -23,6 +22,7 @@ import { type DisplayStatus, type PublicationFacts, type ReviewFacts, type WorkS
 import { type Chrome, type Screen } from "./chrome.js";
 import { type CompletionReceiptView, type EvidenceLinkMap, type TaskPullRequest } from "./render-results.js";
 import { type Who } from "./session.js";
+import { type TaskOrigin } from "../task-source.js";
 /** What the task and approval views show about a drafted plan's contract
  * (contract handoff, task 1). A problem is a named problem, never a blank. */
 export type PlanContractView = {
@@ -74,14 +74,6 @@ export declare function revisionSentence(revision: Extract<RevisionView, {
 /** A planner's amendment, said plainly and kept in view: approving binds
  * the amended terms, so this is never folded away. */
 export declare function approvalAmendmentHtml(view: PlanContractView | null | undefined): Html;
-/**
- * The approval sheet (approval critique, Oct 2): the plan open, in plain
- * rows — Goal, Changes, Won't touch, Done when — one line of who builds,
- * one Approve & start beside the password, and every remaining signed
- * term (lineage, routing, runtime limits, the seal) in one Details fold.
- * Presentation only: the same hidden fields, nonce, digest and password
- * post to the same route, and the task page and chat card share it.
- */
 export declare function approvalSheetHtml(input: {
     surface: "task" | "chat";
     action: string;
@@ -103,7 +95,11 @@ export declare function approvalSheetHtml(input: {
         label: string;
         filedAgo: string | null;
     } | null;
+    /** v126: where the work came from: an outside event's one line of context (never a term the approval agrees to). */
+    origin?: TaskOrigin | null;
     deliverable: "branch" | "report";
+    /** The plan was rewritten after this build: the yes builds again to it (the approve POST requeues). */
+    rebuild?: number | null;
     editHref: string;
     notNowHref: string;
     sticky: boolean;
@@ -121,6 +117,8 @@ export declare function approvalSheetHtml(input: {
         open: boolean;
         stepsHref: string | null;
     } | null;
+    /** Cockpit B2: this person's password is remembered (when, ISO) and these terms may stand on it. */
+    freshSince?: string | null;
 }): Html;
 /** Earlier versions of a task still in flight, in plain words: queued
  * while they only wait, running once one has started; null when none. */
@@ -233,6 +231,11 @@ export declare function agentsStripHtml(view: RouteView | null, taskId: string):
 /** A ceremony nonce as stored: the sha256 hex of the value the form carried. */
 export declare function nonceHashOf(value: string): string;
 /** The approve POST's refusal, in words a person can act on. */
+/** " (password remembered from 10:42)" when the approval stood on a remembered password or sign-in; nothing otherwise. */
+export declare function approvalProofWords(proof: {
+    method: string;
+    at: string;
+} | null | undefined): string;
 export declare function approveRefusalWords(reason: string): string;
 /** The browser's one-click approval binds not only the signed scope but the
  * exact advisory plan revision shown beside it. The scope digest remains the
@@ -473,6 +476,8 @@ export declare function taskBodyParts(data: {
     /** Immutable filing provenance (v12) — the approver sees which door
      * filed this (console, cli, intake, template:<name>) at the yes. */
     filedVia?: string | null;
+    /** v126: where the work came from — the flow and the outside event — in words; null for everything else. */
+    origin?: TaskOrigin | null;
     /** Coordinator provenance when an agent filed this; null otherwise. */
     coordinator?: {
         label: string;
@@ -500,6 +505,23 @@ export declare function taskBodyParts(data: {
     activity?: RunActivity | null;
     /** Live steering: the Claude build that takes Pause right now, and its latest pause (null: none, or it continued). */
     livePause?: LivePauseFact | null;
+    /** The running attempt's composer facts (steer-controls.ts), for this reader. */
+    steerComposer?: {
+        controls: BrowserAgentControls;
+        steer: {
+            action: string;
+            run: number;
+        } | null;
+    } | null;
+    /** This task's latest attempts, newest first (a tab's unsent draft for one that ended is offered on). */
+    steerRecent?: number[];
+    /** Cockpit B2: when this person's remembered password was given, when it may approve these terms. */
+    approvalFresh?: string | null;
+    /** Cockpit B2: how the current approval's person was proved (approval proved ledger), when it was a remembered one. */
+    approvalProof?: {
+        method: string;
+        at: string;
+    } | null;
     /** Workers that are both alive and authorized for this task's project. */
     worker?: {
         answering: number;
@@ -583,6 +605,9 @@ export declare function taskBodyParts(data: {
     steering?: SteerNote[];
     /** A build's agent is running now and reads new notes when it next checks for them (v120). */
     steeringLive?: boolean;
+    /** The running build a note from this page is bound to (cockpit §4): the exact attempt, so a stale page's note is
+     * refused rather than filed for whatever runs later. Null: no build reads notes now (the note waits for the next). */
+    steeringRun?: number | null;
     /** The publication grant the publisher would act under — from
      * publicationGrantFor(repo) only; null when none, or no project. */
     grant?: PublicationGrant | null;