toolroll 0.9.67 → 0.9.69

package/dist/server/remote.js

@@ -7,9 +7,7 @@ import { CodingWorkspace } from '../coding-workspace.js';
 import { createMcpHttp } from "../mcp-http.js";
 import { createOAuthHttp, resourceMetadataUrl } from "../mcp-oauth.js";
 import { reproveRemote } from "../operate-remote.js";
-import { rowVisible } from "../project.js";
 import { RequestBudget, SourceAdmission } from "../request-budget.js";
-import { createSessionRunner } from '../session-remote.js';
 import {} from "../store.js";
 import { handleTeamHttp, TEAM_PASSWORD_REVERIFY_MS } from '../team-http.js';
 import { handleTeamsHttp } from "../teams.js";
@@ -17,7 +15,7 @@ import { flowHook, telegramHook } from "./remote-hooks.js";
 import { respond } from "./http.js";
 import {} from "./session.js";
 export function createRemoteHandlers(runtime) {
-    const { identify, store, admitPasswordSource, admitBearer, allowedHost, team, teamBrowserReply, requestBudget, options, coding, codingProjects, liveCeiling, clock, evidenceRoot, consoleOrigin, managedRepos, joinSourceOf, ssoSettings, oauthTokenBudget, hookContext, teamsSourceBudget, teamsTenantBudget } = runtime;
+    const { identify, store, admitPasswordSource, admitBearer, allowedHost, team, teamBrowserReply, requestBudget, options, clock, evidenceRoot, consoleOrigin, managedRepos, joinSourceOf, ssoSettings, oauthTokenBudget, hookContext, teamsSourceBudget, teamsTenantBudget } = runtime;
     /**
      * The full principal a live `so_` API token stands for: its person and their generation, the token's own read/act
      * scope, its project limit narrowed by the person's current access, and its id. Every route that accepts an API token
@@ -97,15 +95,12 @@ export function createRemoteHandlers(runtime) {
             return who?.via === 'cookie' ? teamBrowserReply(reply, actor, who.session.csrf) : reply;
         },
     });
-    // D7: native session operations are remote commands too (`session …` over /api/cli), run by the session owner.
-    const sessionRunner = createSessionRunner({ store, workspace: coding, projects: codingProjects, projectAllowed: repo => rowVisible(liveCeiling(), repo), clock });
     // Remote CLI: one live API token names the person; the shared command boundary decides everything else.
     const cliEndpoint = (request, response) => handleCliHttp(request, response, {
         admit: principal => requestBudget.admit(principal.tokenId, "api"),
         authenticate: tokenPrincipalOf,
         run: async () => options.cliRunner ?? (await import("../operate.js")).runOperateAs ?? null,
         modeOf: options.cliModeOf,
-        session: sessionRunner,
         store,
     });
     const mcpHttp = createMcpHttp({ store, clock, evidenceRoot, ...(options.requestBudgetClock === undefined ? {} : { requestBudgetClock: options.requestBudgetClock }), signedIn: request => identify(request, true, true) !== null, admit: person => requestBudget.admit(person.principal.tokenId, "mcp"),

package/dist/server/render-chat.d.ts

@@ -142,9 +142,16 @@ export declare function leadPromptStarters(focus?: TaskChatFocus | null): Html;
 export declare function chatHeading(copy: string, projectCount: number, showProjectToggle?: boolean): Html;
 /** A deliberately small rich-text grammar for model copy. The reply is shaped first (the lead's voice, enforced:
  * no headers, at most three bold anchors, labelled links, no internal ids unless `asked` wanted them); input is
- * escaped before tags are introduced: bullets, numbered steps, bold, inline code and labelled http(s) links are
- * presentation only—never executable HTML. */
+ * escaped before tags are introduced: bullets, numbered steps, bold, inline code, fenced code blocks and labelled
+ * http(s) links are presentation only—never executable HTML. */
 export declare function renderChatText(raw: string, asked?: string): Html;
+/** A line comment from the chat Workbench (src/browser/line-steer.tsx steerMessage): On "<file, as a JSON string>":<line>
+ * [ (removed line)] (run #<n>): <comment>, then a blank line and "> <the line>" (just ">" for a blank line, once the
+ * chat POST has trimmed the message), always last.
+ * The words the lead reads stay exactly as sent; the thread shows them in three parts: a small reference line, the quoted
+ * code as written, and the comment. Null for any other message, which keeps its own plain rendering. Everything is
+ * escaped by the html template. */
+export declare function steerCommentHtml(text: string): Html | null;
 export declare function chatActivity(activity: string | null): Html;
 export declare const CHAT_UI_SCRIPT: string;
 /** Provider, model, and limits under ONE disclosure (UI polish

package/dist/server/render-chat.js

@@ -33,7 +33,6 @@ import { chatMoney, oneLineOf, relativeAge, safePrUrl, screen, sentenceCase, str
 import { chatResultHref, projectChatHref, taskChatHref, taskHref } from "./http.js";
 import {} from "./render-pages.js";
 import { completionReceiptCard } from "./render-results.js";
-import {} from "./render-settings.js";
 import { agentsAvailabilityHtml, agentsBadgesHtml, agentsStripHtml, agentsSummaryWords, agentsWhyHtml, approvalSheetHtml, checkProgressHtml, consentClosedHtml, consentDoorOf, decisionAnswerCard, dispatchHeadline, milestoneProgressHtml, planRevisionLedgerHtml, profileWords, sizeConsequence, taskControlDetailsHtml, taskStatusCard, taskViewSwitch } from "./render-tasks.js";
 /** The installation fact that the lead was turned on by default, once (its value: the provider). */
 export const LEAD_BY_DEFAULT_FACT = "lead-on-by-default";
@@ -260,8 +259,8 @@ export function chatHeading(copy, projectCount, showProjectToggle = true) {
 }
 /** A deliberately small rich-text grammar for model copy. The reply is shaped first (the lead's voice, enforced:
  * no headers, at most three bold anchors, labelled links, no internal ids unless `asked` wanted them); input is
- * escaped before tags are introduced: bullets, numbered steps, bold, inline code and labelled http(s) links are
- * presentation only—never executable HTML. */
+ * escaped before tags are introduced: bullets, numbered steps, bold, inline code, fenced code blocks and labelled
+ * http(s) links are presentation only—never executable HTML. */
 export function renderChatText(raw, asked) {
     const inline = replyHtmlInline;
     const text = shapeReply(raw, { appOrigin: requestContext.getStore()?.appOrigins ?? null, ...(asked === undefined ? {} : { asked }) });
@@ -281,7 +280,31 @@ export function renderChatText(raw, asked) {
         out.push(list.tag === "ul" ? html `<ul>${list.items}</ul>` : html `<ol>${list.items}</ol>`);
         list = null;
     };
+    // A fenced block (shaping leaves it exactly as written) is shown as written: escaped, never parsed.
+    let fence = null;
+    const closeFence = () => {
+        const open = fence;
+        if (open === null)
+            return;
+        out.push(html `<pre class="chat-code"${open.lang === "" ? "" : html ` data-lang="${open.lang}"`}><code>${open.lines.join("\n")}</code></pre>`);
+        fence = null;
+    };
     for (const line of lines) {
+        const open = fence;
+        if (open !== null) {
+            if (/^\s{0,3}```\s*$/.test(line))
+                closeFence();
+            else
+                open.lines.push(line);
+            continue;
+        }
+        const fenceMark = /^\s{0,3}```\s*([A-Za-z0-9_+.#-]{0,24})\s*$/.exec(line);
+        if (fenceMark !== null) {
+            flushParagraph();
+            closeList();
+            fence = { lang: fenceMark[1], lines: [] };
+            continue;
+        }
         const bullet = /^\s*[-*]\s+(.+)$/.exec(line);
         const numbered = /^\s*(\d{1,9})[.)]\s+(.+)$/.exec(line);
         if (bullet !== null || numbered !== null) {
@@ -304,10 +327,35 @@ export function renderChatText(raw, asked) {
             paragraph.push(line);
         }
     }
+    // An unclosed fence still shows its lines as code: the reply may have been cut.
     flushParagraph();
     closeList();
+    closeFence();
     return html `<div class="chat-copy">${out}</div>`;
 }
+/** A line comment from the chat Workbench (src/browser/line-steer.tsx steerMessage): On "<file, as a JSON string>":<line>
+ * [ (removed line)] (run #<n>): <comment>, then a blank line and "> <the line>" (just ">" for a blank line, once the
+ * chat POST has trimmed the message), always last.
+ * The words the lead reads stay exactly as sent; the thread shows them in three parts: a small reference line, the quoted
+ * code as written, and the comment. Null for any other message, which keeps its own plain rendering. Everything is
+ * escaped by the html template. */
+export function steerCommentHtml(text) {
+    const steer = /^On ("(?:[^"\\\n]|\\.){1,1200}"):(\d{1,9})( \(removed line\))? \(run #(\d{1,12})\): ([\s\S]+)\n\n>(?: ([^\n]*))?$/.exec(text);
+    if (steer === null)
+        return null;
+    // A blank line's quote ("> ") reaches the store as ">": the chat POST trims the message (src/server/chat.ts).
+    const [, quoted, line, removed, run, comment, code = ""] = steer;
+    let path;
+    try {
+        path = JSON.parse(quoted);
+    }
+    catch {
+        return null;
+    }
+    if (typeof path !== "string" || path === "" || /[\u0000-\u001f]/.test(path) || comment.trim() === "")
+        return null;
+    return html `<div class="chat-steer" data-steer-comment><p class="chat-steer-ref">${path}:${line}${removed === undefined ? "" : " · removed line"} · run #${run}</p>${code === "" ? "" : html `<pre class="chat-steer-code"><code>${code}</code></pre>`}<p class="chat-steer-note" style="white-space:pre-wrap">${comment}</p></div>`;
+}
 export function chatActivity(activity) {
     return chatActivityDetailsHtml(activity);
 }
@@ -351,8 +399,6 @@ export function chatLimitsHtml(facts) {
     return html `<details class="chat-limits"><summary>Model &amp; limits<span class="meta">${facts.subscription ? "membership" : facts.provider}</span></summary><div class="chat-budget">${rows}</div></details>`;
 }
 export function chatPage(chrome, data) {
-    const formFacts = { keyFacts: data.keyFacts, openrouterModels: data.openrouterModels, ...(data.liveModels === undefined ? {} : { liveModels: data.liveModels }), csrf: data.csrf,
-        returnTo: data.focusTask === null ? "/chat" : taskChatHref(data.focusTask.id) };
     const parts = [
         data.focusTask === null
             ? chatHeading("", data.projects.length, data.enabled.ok)
@@ -803,7 +849,7 @@ export function leadBrowserMessages(rows, back, target = { task: null, project:
     return rows.messages.map(message => ({
         id: message.id, role: message.role, text: message.text,
         html: htmlString(message.role === 'operator'
-            ? (() => { const queued = rows.queue?.get(message.id); return html `${message.text === "" ? "" : html `<p>${message.text}</p>`}${queued === undefined ? "" : queuedStateHtml(queued, back)}`; })()
+            ? (() => { const queued = rows.queue?.get(message.id); return html `${message.text === "" ? "" : steerCommentHtml(message.text) ?? html `<p>${message.text}</p>`}${queued === undefined ? "" : queuedStateHtml(queued, back)}`; })()
             : html `${renderChatText(message.text, askedBy.get(message.id))}${asked(message.turn)}`),
         activity: message.activity, createdAt: message.createdAt,
         ...(() => {
@@ -882,7 +928,7 @@ export function leadThreadHtml(data) {
             asked = message.text;
             // A message that waits its turn (the lead queue) says so, with Remove while it still waits — as in the React thread.
             const queued = data.queue?.get(message.id);
-            thread.push(html `<div class="msg op" data-message-role="operator" data-key="m${message.id}">${message.text === "" ? "" : html `<p style="white-space:pre-wrap">${message.text}</p>`}${queued === undefined ? "" : queuedStateHtml(queued, returnTo)}</div>`);
+            thread.push(html `<div class="msg op" data-message-role="operator" data-key="m${message.id}">${message.text === "" ? "" : steerCommentHtml(message.text) ?? html `<p style="white-space:pre-wrap">${message.text}</p>`}${queued === undefined ? "" : queuedStateHtml(queued, returnTo)}</div>`);
             continue;
         }
         const cards = message.turn === null ? [] : (byTurn.get(message.turn) ?? []);

package/dist/server/render-results.d.ts

@@ -1,4 +1,5 @@
 /** Results and runs: the review cockpit, evidence, receipts, diffs and the result panel. */
+import type { CheckAccess } from "../check-access.js";
 import type { RunNetworkRecord } from "../egress.js";
 import { type AssignmentSnapshot } from "../assignment.js";
 import { type BrowserCheckItem, type BrowserNeedAction, type BrowserResultPanel, type BrowserResultView } from "../browser-workspace.js";
@@ -95,9 +96,6 @@ export declare function withRefusal(href: string, code: keyof typeof RESULT_REFU
 /** The queue reads at most this many completed tasks — the store's own
  * page ceiling, admission bound before it. */
 export declare const REVIEW_QUEUE_CAP = 100;
-/** The one return road the comment endpoint honors besides its own run
- * page: the cockpit's selected-result link, exactly. */
-export declare const REVIEW_RETURN: RegExp;
 /** Review priority: a deterministic, LABELED presentation aid over facts
  * the done list already carries. Band 0 goes first; the words name why.
  * It is never a verdict — the stored proof verdict stays the authority,
@@ -187,6 +185,8 @@ export type ReviewCockpitView = {
     efficiency?: RunEfficiency | null;
     /** What the run's network was and what its proxy saw (egress.ts): display only. */
     network?: RunNetworkRecord | null;
+    /** How far its checks reached (check-access.ts): shown only when wider than sandboxed. */
+    checkAccess?: CheckAccess;
     taskId: string;
     title: string;
     repo: string | null;
@@ -287,9 +287,6 @@ export declare function reviewCockpitPage(chrome: Chrome, data: {
     user: string;
     now: Date;
 }): Screen;
-/** The selected result: intent → proof → changes → publication → acts,
- * one scan path, every fact labeled by its source. */
-export declare function reviewCockpitDetail(view: ReviewCockpitView, csrf: string, noted: boolean, canRetryReview?: boolean, tab?: ResultTab, user?: string): Html;
 /** The selected result's HTML and, for the rebuilt page, the same result
  * as data: every form and panel body is the one the HTML carries. */
 /** Where a result is shown: its own page (/review), or the Result tab of its task's page (docs/plans/one-page-task-and-agent.md),

package/dist/server/render-results.js

@@ -238,9 +238,6 @@ export function withRefusal(href, code) {
 /** The queue reads at most this many completed tasks — the store's own
  * page ceiling, admission bound before it. */
 export const REVIEW_QUEUE_CAP = 100;
-/** The one return road the comment endpoint honors besides its own run
- * page: the cockpit's selected-result link, exactly. */
-export const REVIEW_RETURN = /^\/review\?result=[A-Za-z0-9._~%-]{1,200}$/;
 export const PRIORITY_LABELS = { 0: "needs action", 1: "review", 2: "no flags" };
 export function reviewPriorityOf(row) {
     if (row.assignment != null && (row.assignment.receipt?.runId ?? null) === row.runId) {
@@ -568,11 +565,6 @@ export function reviewCockpitPage(chrome, data) {
         functional: { script: reviewEvidenceScript() + (selected !== null && selected.detail !== null ? RESULT_REVIEW_SCRIPT : ""), fetches: false },
     });
 }
-/** The selected result: intent → proof → changes → publication → acts,
- * one scan path, every fact labeled by its source. */
-export function reviewCockpitDetail(view, csrf, noted, canRetryReview = false, tab = "summary", user = "") {
-    return reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user).html;
-}
 export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab, user, host = { kind: "review" }) {
     const parts = [];
     const run = view.run;
@@ -637,6 +629,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         record: run === null ? null : { build: run.id, href: `/r/${run.id}?record=1`, facts: [
                 { label: "Agent", value: [run.provider, run.model].filter(Boolean).join(" · ") },
                 { label: "Worker", value: run.runner },
+                ...(view.checkAccess === undefined || view.checkAccess === "sandboxed" ? [] : [{ label: "Checks", value: view.checkAccess === "unsandboxed" ? "Checks ran without a sandbox" : "Checks ran with model and GitHub sign-ins" }]),
                 ...(run.branch === null ? [] : [{ label: "Branch", value: run.branch }]),
                 ...(run.finishedAt === null ? [] : [{ label: "Finished", value: when(run.finishedAt) }]),
                 ...(run.ranMinutes === null ? [] : [{ label: "Ran", value: `${run.ranMinutes} min` }]),
@@ -1268,7 +1261,9 @@ export function reviewDiffHtml(patch, stat, runId, commentable, anchors = new Ma
                     ? html `<span class="diff-annotate-space"></span>`
                     : html `<button type="button" class="diff-annotate pick-line" data-path="${one.path}" data-line="${lineNumber}" data-side="${side}" aria-label="Annotate ${one.path}, ${side} line ${lineNumber}" title="Annotate this line">${annotateIcon}</button>`;
                 const marker = line.kind === "addition" ? "+" : line.kind === "deletion" ? "−" : line.kind === "context" ? " " : "·";
-                return html `<div class="diff-line diff-${line.kind}">${annotate}<span class="diff-gutter">${line.oldLine ?? ""}</span><span class="diff-gutter">${line.newLine ?? ""}</span><code><b aria-hidden="true">${marker}</b>${line.text}</code></div>`;
+                // Each real line names its file and line, so a comment (or a test) can find the exact row.
+                const named = lineNumber === null || line.kind === "meta" ? "" : html ` data-diff-file="${one.path}" data-diff-line="${lineNumber}"`;
+                return html `<div class="diff-line diff-${line.kind}"${named}>${annotate}<span class="diff-gutter">${line.oldLine ?? ""}</span><span class="diff-gutter">${line.newLine ?? ""}</span><code><b aria-hidden="true">${marker}</b>${line.text}</code></div>`;
             })}</div></section>`;
         });
         const anchor = anchors.get(one.path);

package/dist/server/render-tasks.js

@@ -1,6 +1,7 @@
 /** Task pages: approval, agents, plans, controls, decisions and the task body. */
 import { networkWords } from "../egress.js";
 import { writesWords } from "../writes-mode.js";
+import { checkAccessWords } from "../check-access.js";
 import { ACP_AGENTS, isAcpProfile } from "../acp-agents.js";
 import { html, htmlString, joinHtml, postForm, replaceMarkup, reauth } from "../html.js";
 import { closedQuestionReason, closedQuestionWords } from "../decision.js";
@@ -22,17 +23,16 @@ import { starterForWork } from "../flow-starters.js";
 import {} from "../gaps.js";
 import { readAuthModeStrict } from "../keys.js";
 import { failedAttemptSentence, retryNoteOf } from "../needs-you.js";
-import { agentsSummary, chosenWords, makesNoPlan, postureWords, projectRoute, PHASES as ROUTE_PHASES, TASK_SIZES } from "../phase-routing.js";
+import { chosenWords, makesNoPlan, PHASES as ROUTE_PHASES, TASK_SIZES } from "../phase-routing.js";
 import { parseExecutionPlanDocument } from "../plan.js";
 import {} from "../planner-source.js";
 import { projectName } from "../project.js";
 import { dispatchStatusToken, manualReviewOnly, plainReasonWords, reviewConflict } from "../proof.js";
 import { providerName } from "../provider-auth.js";
-import { PROVIDER_IDS } from "../provider.js";
+import {} from "../provider.js";
 import { qualityModeTitle } from "../quality.js";
-import {} from "../result-evidence-readers.js";
 import { evidenceShortenedWords } from "../result-review.js";
-import { acceptanceToLines, approvalOf, chainFromJson, scopeAuthorityOf } from "../scope.js";
+import { acceptanceToLines, approvalOf, scopeAuthorityOf } from "../scope.js";
 import {} from "../store.js";
 import { runCostWords } from "../summary.js";
 import {} from "../task-control.js";
@@ -44,7 +44,7 @@ import { isOverdue, oneLineOf, projectChip, regionScript, safePrUrl, screen, SEN
 import { steerDestinationWords, steerStandingParts } from "../steer-status.js";
 import { reviewHref, taskChatHref, taskHref } from "./http.js";
 import { coordinatorProposalsSection } from "./render-chat.js";
-import { completionReceiptCard, criterionMatrixHtml, evidenceWords, homePhaseWords, incidentWords, needsCheck, pullRequestCardHtml, reasonWords, receiptStatusOf, repairChainHtml, reportItemsHtml, reviewRetryPanel, runNoun, runOutcomeBadge, semanticCoverageHtml, terminalDiffCard, verificationExplanation, verificationRecovered } from "./render-results.js";
+import { completionReceiptCard, criterionMatrixHtml, evidenceWords, homePhaseWords, incidentWords, needsCheck, pullRequestCardHtml, reasonWords, receiptStatusOf, repairChainHtml, reportItemsHtml, reviewRetryPanel, runNoun, runOutcomeBadge, semanticCoverageHtml, verificationExplanation, verificationRecovered } from "./render-results.js";
 import {} from "./session.js";
 import { linkWords, originNote } from "../task-source.js";
 export function contractChangeHtml(change) {
@@ -542,7 +542,7 @@ export function profileWords(scope) {
                 ? html `<p class="meta">Runs on <span class="mono">${ACP_AGENTS[profile.provider].name} (via ACP) · ${profile.model}</span> — full access inside the OS fence; the agent runs any tool it chooses and nothing asks. No turn limit: stops after ${Math.round(profile.timeoutSeconds / 60)} min, or ${Math.round(profile.idleTimeoutSeconds / 60)} min silent; repairs on ${repair}, ${Math.round(profile.repairTimeoutSeconds / 60)} min, or ${Math.round(profile.repairIdleTimeoutSeconds / 60)} min silent.</p>`
                 : html `<p class="meta">Runs on <span class="mono">${profile.provider} · ${profile.model}</span> — ${profile.sandboxMode === "danger-full-access" ? "FULL permissions via --dangerously-bypass-approvals-and-sandbox; nothing asks" : "workspace-write sandbox"}, no turn limit (${Math.round(profile.timeoutSeconds / 60)} min ${profile.timeoutKind === "idle" ? "without progress" : "per attempt"}); repairs on ${repair}, ${Math.round(profile.repairTimeoutSeconds / 60)} min</p>`;
     // What the build may reach is part of what is approved (egress.ts): said on every approval form.
-    return html `${base}<p class="meta" data-scope-network>${networkWords(profile.network ?? null)}</p><p class="meta" data-scope-writes>Writes: ${writesWords(profile.writes)}.</p>`;
+    return html `${base}<p class="meta" data-scope-network>${networkWords(profile.network ?? null)}</p><p class="meta" data-scope-writes>Writes: ${writesWords(profile.writes)}.</p>${profile.checkAccess === undefined ? "" : html `<p class="meta" data-scope-checks>Checks: ${checkAccessWords(profile.checkAccess)}.</p>`}`;
 }
 export const ROLE_NOUN = { plan: "Planner", build: "Builder", repair: "Repair", review: "Reviewer" };
 export function agentsStandingWords(view) {

package/dist/server/route-table.d.ts

@@ -91,9 +91,5 @@ export interface RouteDeclaration {
 export declare const ROUTES: readonly RouteDeclaration[];
 /** The first row that declares this method and path, or null: an undeclared request never reaches a handler. */
 export declare function matchRoute(method: string, pathname: string, stage?: Stage): RouteDeclaration | null;
-/** True when some row declares this path for another method (a wrong-method request). */
-export declare function declaredForAnotherMethod(method: string, pathname: string, stage?: Stage): boolean;
 /** Refuses a malformed table at startup: duplicate ids, duplicate method+pattern rows, or a row shadowed by an earlier one for its own sample. */
 export declare function assertRouteTable(routes?: readonly RouteDeclaration[]): void;
-/** The effective policy of every row, as plain data — what the snapshot test compares. */
-export declare const routePolicySnapshot: () => Array<Omit<RouteDeclaration, "sample">>;

package/dist/server/route-table.js

@@ -284,6 +284,7 @@ post("settings", "settings.project-concurrency", "/settings/project/concurrency"
 post("settings", "settings.project-live-view", "/settings/project/live-view", { scope: "step-up", callers: ["cookie"] });
 post("settings", "settings.project-network", "/settings/project/network", { scope: "step-up", callers: ["cookie"] });
 post("settings", "settings.project-writes", "/settings/project/writes", { scope: "step-up", callers: ["cookie"] });
+post("settings", "settings.project-check-access", "/settings/project/check-access", { scope: "step-up", callers: ["cookie"] });
 post("settings", "settings.project-delete", "/settings/project/delete", { scope: "step-up", ...operator("An instance operator deletes projects.", "/settings/project") });
 // Lead sweeps (docs/plans/lead-fan-out.md): the table, and cancelling what isn't ready. The handler shows a sweep only in
 // a project the reader can see, and acts only for an approver.
@@ -431,10 +432,6 @@ export function matchRoute(method, pathname, stage) {
     }
     return null;
 }
-/** True when some row declares this path for another method (a wrong-method request). */
-export function declaredForAnotherMethod(method, pathname, stage) {
-    return compiled.some(({ route, test }) => (stage === undefined || route.stage === stage) && !methodMatches(route.method, method) && test.test(pathname));
-}
 /** Refuses a malformed table at startup: duplicate ids, duplicate method+pattern rows, or a row shadowed by an earlier one for its own sample. */
 export function assertRouteTable(routes = ROUTES) {
     const ids = new Set(), keys = new Set();
@@ -466,5 +463,3 @@ export function assertRouteTable(routes = ROUTES) {
     }
 }
 assertRouteTable();
-/** The effective policy of every row, as plain data — what the snapshot test compares. */
-export const routePolicySnapshot = () => ROUTES.map(({ sample: _sample, ...rest }) => ({ ...rest }));

package/dist/server/settings.js

@@ -32,7 +32,7 @@ import { budgetLabel, monthOf } from "../spend.js";
 import { PACKAGE_VERSION } from "../version.js";
 import { handlersOf } from './handler-registry.js';
 import { refuse, screen } from "./chrome.js";
-import { HANDOFF_STYLE, redirect, respond, safeReturn, signInSpent, startedHere } from "./http.js";
+import { HANDOFF_STYLE, redirect, respond, safeReturn, sayTo, signInSpent, startedHere } from "./http.js";
 import { html, htmlString, joinHtml, postForm, reauth } from "../html.js";
 import { browserCaller } from "./session.js";
 /** settings handlers, moved without changing their route bodies. */
@@ -81,6 +81,7 @@ import { checkPolicy, parseList, policyParts } from "../policy.js";
 import { parseProjectConcurrency, saveProjectConcurrency } from "../project-concurrency.js";
 import { MAX_NETWORK_HOSTS, normalizeHost } from "../egress.js";
 import { isWritesMode } from "../writes-mode.js";
+import { isCheckAccess, signInsUnavailableWords, widerThan } from "../check-access.js";
 import { projectDeleteConfirmHtml, projectSettingsHtml } from "../project-delete-ui.js";
 import { deleteProject, holdingsWords } from "../project-delete.js";
 import { applySavedKnowledge, changeKnowledge, knowledgeVersion, knowledgeView } from "../project-knowledge.js";
@@ -127,7 +128,7 @@ import { personChip, ROLE_TITLES } from "./chrome.js";
 import { chatReturnWithSaid, goOutside } from "./http.js";
 import { latestReleaseFor, leadSettingsHtml, notificationProjects, SETTINGS_AUTOSAVE_SCRIPT, settingsPage, settingsWorkers, telegramDeliveryWords, telegramTrouble } from "./render-settings.js";
 export function createSettingsHandlers(runtime) {
-    const { store, providerHome, managedRepos, consoleProjects, sendScreen, chromeFor, connectionCheck, clock, modelCatalog, modelSeams, toolsViewOf, codexServers, projectViewOf, sessions, restricted, options, integrations, consoleOrigin, evidenceRoot, storagePool, visible, ssoSettings, checkLocalAgents, chatKeyFor, chatCatalog, leadWords, agentSignInCommand, settingsUpdates, phoneSetup, authenticateApprover, authenticateCredential, deletedRepos, recordSignIn, projectOf, providerFor, admissionList, toolHome, connectVisits, mintApprovalNonce, consumeApprovalNonce, defaultProject, googleVisits } = runtime;
+    const { store, providerHome, managedRepos, consoleProjects, sendScreen, chromeFor, connectionCheck, clock, modelCatalog, modelSeams, toolsViewOf, codexServers, projectViewOf, sessions, restricted, options, integrations, consoleOrigin, evidenceRoot, storagePool, visible, ssoSettings, checkLocalAgents, chatKeyFor, chatCatalog, leadWords, agentSignInCommand, settingsUpdates, phoneSetup, authenticateApprover, authenticateCredential, deletedRepos, projectOf, providerFor, admissionList, toolHome, connectVisits, mintApprovalNonce, consumeApprovalNonce, defaultProject, googleVisits } = runtime;
     // v105: what agent work cost, by month, and the monthly budgets. An instance operator's page.
     async function spendPage(ctx) {
         const { url, who, response, now } = ctx;
@@ -451,7 +452,7 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
     // v105: Settings → Data, where an instance operator downloads everything. The download is a POST with the password.
     async function dataPage(ctx) {
         const { url, response, project } = ctx;
-        const who = browserCaller(ctx.who);
+        browserCaller(ctx.who);
         return sendScreen(response, 200, screen("Data", html `<p><a href="/settings">Settings</a></p><h1>Data</h1>${(dataExportHtml({ problem: url.searchParams.get("problem") }))}`, { chrome: chromeFor(project, "settings") }));
     }
     // v100: Settings → Sign-in, the identity provider people sign in with. An instance operator's page.
@@ -486,7 +487,7 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const { response, now, posted } = ctx;
         const who = browserCaller(ctx.who);
         const body = readForm(posted, CONSOLE_FORMS.passwordless);
-        const back = (key, words) => redirect(response, `/settings/passwordless?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/passwordless");
         const action = body.get("action");
         if (action === "off") {
             setPasswordless(store, false, who.name, now);
@@ -812,7 +813,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
     async function spendBudget(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.spendBudget);
-        const back = (key, words) => redirect(response, `/spend?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/spend");
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", "Enter your Toolroll password to change a budget.");
         const target = /^(installation|project|person|subagent):(.+)$/.exec(body.get("target") ?? "");
@@ -848,7 +849,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
         if (who.via !== "cookie" || who.role !== "approver" || !store.accountCanAccess(who.name, repo))
             return refuse(response, who, 403, "An approver for this project sets how many tasks build at once.", "/settings/project");
-        const back = (key, words) => redirect(response, `/settings/project?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, `/settings/project?repo=${encodeURIComponent(repo)}`);
         const n = parseProjectConcurrency(body.get("concurrency") ?? "");
         if (n === null)
             return back("problem", "Builds at once is a whole number from 1 to 64. Nothing changed.");
@@ -870,7 +871,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
         if (who.via !== "cookie" || who.role !== "approver" || store.isDemo() || !store.accountCanAccess(who.name, repo))
             return refuse(response, who, 403, "An approver for this project changes the live view.", "/settings/project");
-        const back = (key, words) => redirect(response, `/settings/project?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, `/settings/project?repo=${encodeURIComponent(repo)}`);
         const act = body.get("act");
         if (act === "off")
             return back("said", setLiveCommands(store, { repo, commands: false, by: who.name, via: "the console" }, now).said);
@@ -893,7 +894,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
         if (who.via !== "cookie" || who.role !== "approver" || store.isDemo() || !store.accountCanAccess(who.name, repo))
             return refuse(response, who, 403, "An approver for this project changes what its builds may reach.", "/settings/project");
-        const back = (key, words) => redirect(response, `/settings/project?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}#network`);
+        const back = sayTo(response, `/settings/project?repo=${encodeURIComponent(repo)}`, "#network");
         const hosts = (body.get("hosts") ?? "").split(/[\s,]+/).filter(Boolean).map(normalizeHost);
         if (hosts.some(one => one === null))
             return back("problem", "A host is a name like api.stripe.com or *.stripe.com: no address, port or path. Nothing changed.");
@@ -942,7 +943,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
     async function policySave(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.policy);
-        const back = (key, words) => redirect(response, `/settings/policy?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/policy");
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", "That password didn't match. Nothing changed.");
         const chosen = body.getAll("provider");
@@ -962,7 +963,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const known = consoleProjects();
         if (!known.includes(repo))
             return refuse(response, who, 403, "That project is outside your access.", "/settings/approval");
-        const back = (key, words) => redirect(response, `/settings/approval?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, `/settings/approval?repo=${encodeURIComponent(repo)}`);
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", "That password didn't match. Nothing changed.");
         const protect = body.get("protect") ?? "none";
@@ -980,7 +981,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
     async function requestLimitsSave(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.requestLimits);
-        const back = (key, words) => redirect(response, `/settings/sessions?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/sessions");
         const target = body.get("target") ?? "";
         const token = target === "*" ? null : store.apiTokens(null).find(one => one.id === target && one.revokedAt === null) ?? null;
         if (target !== "*" && token === null)
@@ -1004,7 +1005,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const body = readForm(posted, CONSOLE_FORMS.signIn);
         if (!options.configDir)
             return refuse(response, who, 403, "An instance operator sets up sign-in.", "/settings");
-        const back = (key, words) => redirect(response, `/settings/sign-in?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/sign-in");
         const action = body.get("action") ?? "";
         const before = ssoSettings();
         if (action === "test") {
@@ -1046,7 +1047,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         if (databaseFile === null)
             return refuse(response, who, 403, "An instance operator updates Toolroll.", "/settings");
         const stateDir = dirname(databaseFile);
-        const back = (key, words) => redirect(response, `/settings/updates?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/updates");
         if (op === "seen") {
             markWhatsNewSeen(stateDir);
             return redirect(response, "/settings/updates");
@@ -1090,7 +1091,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
     async function retentionSave(ctx) {
         const { who, response, now, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.retention);
-        const back = (key, words) => redirect(response, `/settings/retention?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/retention");
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", "Enter your Toolroll password to change retention.");
         const before = store.retentionPeriods();
@@ -1112,7 +1113,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const databaseFile = store.databaseFile();
         if (databaseFile === null)
             return refuse(response, who, 403, "An instance operator looks after storage.", "/settings");
-        const back = (key, words) => redirect(response, `/settings/storage?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/storage");
         const what = op === "clean" ? "clean up" : op === "discard" ? "discard a checkout" : "change checkout cleanup";
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", `Enter your Toolroll password to ${what}.`);
@@ -1152,7 +1153,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             return refuse(response, who, 404, "No such project.", "/projects");
         if (who.role !== "approver" || store.isDemo())
             return refuse(response, who, 403, "An approver sets up pull requests.", "/projects");
-        const back = (key, words) => redirect(response, `/settings/pull-requests?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, `/settings/pull-requests?repo=${encodeURIComponent(repo)}`);
         const act = body.get("act");
         if (!authenticateApprover(who, body.get("password") ?? "", repo).ok)
             return back("problem", "Enter your Toolroll password to change pull requests.");
@@ -1193,7 +1194,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             return refuse(response, who, 404, "No such project.", "/projects");
         if (who.role !== "approver" || store.isDemo())
             return refuse(response, who, 403, "An approver sets a project's checks.", "/projects");
-        const back = (key, words) => redirect(response, `/settings/checks?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, `/settings/checks?repo=${encodeURIComponent(repo)}`);
         if (!authenticateApprover(who, body.get("password") ?? "", repo).ok)
             return back("problem", "Enter your Toolroll password to change checks.");
         const act = body.get("act");
@@ -1256,7 +1257,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const databaseFile = store.databaseFile();
         if (databaseFile === null)
             return refuse(response, who, 403, "An instance operator looks after backups.", "/settings");
-        const back = (key, words) => redirect(response, `/settings/backups?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/backups");
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", "Enter your Toolroll password to change backups.");
         const every = body.get("every") ?? "";
@@ -1296,7 +1297,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const { who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.flowsOn);
         const repo = body.get("repo") ?? "";
-        const back = (key, words) => redirect(response, `/settings/flows?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, `/settings/flows?repo=${encodeURIComponent(repo)}`);
         const known = [...new Set([...(admissionList() ?? []), ...managedRepos(), ...store.knownRepos()])];
         if (store.isDemo())
             return refuse(response, who, 403, "An approver switches starter flows on.", "/settings/flows");
@@ -1315,7 +1316,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         if (!options.configDir)
             return refuse(response, who, 403, "An installation approver tests integrations.", "/settings");
         const key = body.get("key") ?? "";
-        const back = (name, words) => redirect(response, `/settings/integrations?${name}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/integrations");
         const checked = (await integrations.check([key])).find(one => one.key === key);
         if (checked === undefined)
             return back("problem", "That integration isn't here any more.");
@@ -1328,7 +1329,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const body = readForm(posted, CONSOLE_FORMS.monitoring);
         if (!options.configDir)
             return refuse(response, who, 403, "An instance operator sets up monitoring.", "/settings");
-        const back = (key, words) => redirect(response, `/settings/monitoring?${key}=${encodeURIComponent(words)}`);
+        const back = sayTo(response, "/settings/monitoring");
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", "Enter your Toolroll password to change monitoring.");
         const before = readMonitoring(options.configDir);
@@ -1429,7 +1430,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const repo = body.get("repo") ?? "";
         if (!visible(repo) || !consoleProjects().includes(repo))
             return refuse(response, who, 403, "That project is outside your access.", "/projects");
-        const back = (key, words, anchor = "") => redirect(response, `/settings/tools?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}${anchor}`);
+        const back = sayTo(response, `/settings/tools?repo=${encodeURIComponent(repo)}`);
         // As for Connect: a post from a page that showed another project is refused, never applied here.
         const shown = body.get("shown") ?? "";
         if (shown !== repo) {
@@ -2485,6 +2486,7 @@ ${modeWords(terms)
         "settings.project-live-view": projectLiveView,
         "settings.project-network": projectNetwork,
         "settings.project-writes": projectWrites,
+        "settings.project-check-access": projectCheckAccess,
         "settings.project-delete": projectDelete,
         "settings.policy-send": policySave,
         "settings.approval-send": approvalSave,
@@ -2578,7 +2580,7 @@ ${modeWords(terms)
             return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
         if (who.via !== "cookie" || who.role !== "approver" || store.isDemo() || !store.accountCanAccess(who.name, repo))
             return refuse(response, who, 403, "An approver for this project changes where its builds may write.", "/settings/project");
-        const back = (key, words) => redirect(response, `/settings/project?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}#writes`);
+        const back = sayTo(response, `/settings/project?repo=${encodeURIComponent(repo)}`, "#writes");
         const wanted = body.get("writes");
         if (!isWritesMode(wanted))
             return back("problem", "Choose where builds may write. Nothing changed.");
@@ -2587,5 +2589,40 @@ ${modeWords(terms)
         const changed = store.setProjectWrites(repo, wanted, who.name, now);
         return back("said", changed.before === changed.after ? "Nothing changed." : "Saved. Tasks scoped from now on use it; tasks already approved keep what they were approved with.");
     }
+    // Settings → Project → Check access (check-access.ts). Widening is an instance operator's act with a password typed now
+    // (an identity-provider re-check doesn't count); any approver for the project narrows it. The level is compared again
+    // inside the write, so a change made meanwhile can't turn a narrowing into a widening. The ledger keeps before → after.
+    async function projectCheckAccess(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.projectCheckAccess);
+        const repo = body.get("repo") ?? "";
+        if (!consoleProjects().includes(repo) || !visible(repo))
+            return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
+        if (who.via !== "cookie" || who.role !== "approver" || store.isDemo() || !store.accountCanAccess(who.name, repo))
+            return refuse(response, who, 403, "An approver for this project changes how far its checks reach.", "/settings/project");
+        const back = sayTo(response, `/settings/project?repo=${encodeURIComponent(repo)}`, "#check-access");
+        const wanted = body.get("level");
+        if (!isCheckAccess(wanted))
+            return back("problem", "Choose how far checks reach. Nothing changed.");
+        // Not available yet (check-access.ts signInsAvailable): refused before the password, whatever the form sent.
+        const unavailable = wanted === "sign-ins" ? signInsUnavailableWords(options.platform ?? process.platform) : null;
+        if (unavailable !== null)
+            return back("problem", `${unavailable} Nothing changed.`);
+        const widening = widerThan(wanted, store.projectCheckAccess(repo));
+        // Sign-ins with an open network: a second, explicit yes, said before the password.
+        if (wanted === "sign-ins" && widening && store.projectNetwork(repo).mode === "open" && body.get("confirm-open") !== "yes") {
+            return back("problem", "This project's network is open: confirm that its checks could send your sign-ins to any host. Nothing changed.");
+        }
+        const proved = authenticateCredential(who, body.get("password") ?? "");
+        if (!proved.ok)
+            return back("problem", "Enter your Toolroll password to change how far checks reach.");
+        if (widening && (proved.method !== "password-now" || !store.isInstanceOperator(who.name))) {
+            return back("problem", "Only an instance operator widens how far checks reach, with their password typed now. Nothing changed.");
+        }
+        const changed = store.setProjectCheckAccess(repo, wanted, who.name, now, { may: widening ? "widen" : "narrow" });
+        if (changed === null)
+            return back("problem", "Check access changed meanwhile, and this would now widen it. Nothing changed.");
+        return back("said", changed.before === changed.after ? "Nothing changed." : "Saved. Tasks scoped from now on use it; tasks already approved keep what they were approved with.");
+    }
     return { registrations, modelsView };
 }

package/dist/server/task-views.js

@@ -3,7 +3,7 @@ import { liveAttemptOf, steerControlsFor } from "../steer-controls.js";
 import { originOf } from "../task-source.js";
 import { taskBaseOf } from "../task-base.js";
 import { assignmentPresentationOf, historicalAssessmentReason } from '../assignment-presentation.js';
-import { html, htmlString, joinHtml } from "../html.js";
+import { html, joinHtml } from "../html.js";
 import { assignmentStatusOf, assignmentWithEvidence } from '../assignment-ui.js';
 import { assignmentOf } from '../assignment.js';
 import { knowledgeContextHtml } from "../knowledge-ui.js";