toolroll 0.9.72 → 0.9.74

package/dist/server/live.js

@@ -9,9 +9,11 @@ import { handlersOf } from "./handler-registry.js";
 import { respond } from "./http.js";
 import { adapterPolicy } from "./route-policy.js";
 import { requestContext } from "./request-context.js";
+import { createAgentsLiveRooms } from "./agents-live-room.js";
+import { leadTilesFor } from "./agents-live-lead.js";
 /** A page asks for a few rooms at once: its workspace, what it shows, its conversation. */
 export const LIVE_ROOMS_PER_PAGE = 6;
-const ROOM_NAME = /^(workspace|task|flow|chat|team|agent|summary)(?::([^?]{1,400}))?(?:\?([^#]{0,600}))?$/;
+const ROOM_NAME = /^(workspace|task|flow|chat|team|agent|summary|agents-live)(?::([^?]{1,400}))?(?:\?([^#]{0,600}))?$/;
 /** At most one workspace nudge a second: a burst of writes is one re-read, the first heard at once. */
 const WORKSPACE_SETTLE_MS = 1_000;
 /** A running reply's preview: at most one snapshot every 80 ms; the last one always goes out. */
@@ -34,6 +36,7 @@ export function parseLiveRoom(name) {
     switch (kind) {
         case "workspace": return key === null && query === undefined ? { kind } : null;
         case "summary": return key === null && query === undefined ? { kind } : null;
+        case "agents-live": return key === null && query === undefined ? { kind } : null;
         case "task": return key !== null && key !== "" && query === undefined ? { kind, task: key } : null;
         case "flow": {
             const flow = Number(key), card = params.get("card");
@@ -92,6 +95,11 @@ export function createLiveHandlers(runtime, live) {
     const chatViewers = new Set();
     // One agent's open view (Agents board): what it shows, keyed by the exact run.
     const agentRooms = createLiveRooms(run => agentRunFingerprint(store, run), null, { bus: live.bus });
+    // The Live grid: one room per viewer and scope, watching only (no lease, no seen mark).
+    // Each Live page's own lead tiles, read as its viewer's saved session now (a page's room key carries the page).
+    const liveLeads = new Map();
+    const agentsLive = createAgentsLiveRooms({ store, bus: live.bus, evidenceRoot: runtime.evidenceRoot, localRunner: runtime.options.localRunner, clock, visible,
+        leads: key => liveLeads.get(key)?.() ?? null, forget: key => liveLeads.delete(key) });
     const readBrowser = (request, who) => rereadBrowser(runtime, request, who);
     const sameBrowser = (request, who) => () => readBrowser(request, who) !== null;
     function admitted(viewer, thread) {
@@ -196,10 +204,11 @@ export function createLiveHandlers(runtime, live) {
         if ([...url.searchParams.keys()].some(key => key !== "room") || names.length === 0 || names.length > LIVE_ROOMS_PER_PAGE || new Set(names).size !== names.length)
             return json(response, 400, { error: "room" });
         const rooms = names.map(name => ({ name, room: parseLiveRoom(name) }));
-        if (rooms.some(one => one.room === null) || rooms.filter(one => one.room?.kind === "agent").length > 1 || rooms.filter(one => one.room?.kind === "workspace").length > 1 || rooms.filter(one => one.room?.kind === "chat").length > 1 || rooms.filter(one => one.room?.kind === "team").length > 1 || rooms.filter(one => one.room?.kind === "summary").length > 1)
+        if (rooms.some(one => one.room === null) || rooms.filter(one => one.room?.kind === "agent").length > 1 || rooms.filter(one => one.room?.kind === "workspace").length > 1 || rooms.filter(one => one.room?.kind === "chat").length > 1 || rooms.filter(one => one.room?.kind === "team").length > 1 || rooms.filter(one => one.room?.kind === "summary").length > 1 || rooms.filter(one => one.room?.kind === "agents-live").length > 1)
             return json(response, 400, { error: "room" });
         // Admit every room before the stream opens, with the answers each page's own stream gave.
         const joins = [];
+        let refusedJoin = false;
         for (const { name, room } of rooms) {
             if (room.kind !== "team" && who.via !== "cookie")
                 return json(response, 403, { error: "session" });
@@ -216,6 +225,33 @@ export function createLiveHandlers(runtime, live) {
                 joins.push(connection => summaryRooms.join(summaryKey(who.name, scope), { name: who.name, room: name, connection,
                     valid: () => signedIn() && live.projectScopeFor(who.name) === scope }));
             }
+            else if (room.kind === "agents-live") {
+                const browser = who;
+                const scope = live.projectScopeFor(who.name);
+                if (scope === null)
+                    return json(response, 404, { error: "agents-live" });
+                const signedIn = sameBrowser(request, browser);
+                const valid = () => signedIn() && live.projectScopeFor(who.name) === scope;
+                joins.push(connection => {
+                    // Proved before the room is made or read: an invalid viewer never causes a look at a file.
+                    let ok = false;
+                    try {
+                        ok = valid();
+                    }
+                    catch {
+                        ok = false;
+                    }
+                    if (!ok) {
+                        connection.send(name, "gone");
+                        refusedJoin = true;
+                        return;
+                    }
+                    // Each page's own room (its key carries this connection): a newcomer is never handed a digest computed earlier.
+                    const key = agentsLive.keyOf(who.name, scope, randomBytes(9).toString("hex"));
+                    liveLeads.set(key, () => { const again = readBrowser(request, browser); return again === null ? null : leadTilesFor(runtime, again); });
+                    agentsLive.rooms.join(key, { name: who.name, room: name, connection, valid });
+                });
+            }
             else if (room.kind === "task") {
                 const browser = who;
                 const family = familyOf(room.task);
@@ -342,6 +378,9 @@ export function createLiveHandlers(runtime, live) {
         for (const join of joins)
             if (connection.open)
                 join(connection);
+        // A page whose only room was refused at its join ends now (`ended`), its keep-alive stopped, not left open.
+        if (refusedJoin && connection.rooms === 0)
+            connection.refuse(() => connection.close());
         request.once("close", () => connection.close());
     }
     const detachChat = live.bus.subscribe(() => {
@@ -357,6 +396,7 @@ export function createLiveHandlers(runtime, live) {
             summaryRooms.close();
             teamRooms.close();
             agentRooms.close();
+            agentsLive.rooms.close();
             for (const viewer of [...chatViewers])
                 viewer.connection.close();
         },

package/dist/server/pages.js

@@ -26,6 +26,10 @@ import { LEDGER_CSV_HEADER, ledgerCsvRows } from "../ledger-csv.js";
 import { ledgerBody } from "../ledger-view.js";
 import { agentLanesOf, agentRowOf, agentsBoardOf, agentFactsFor, laneWindowOf, sealedDiffOf } from "../agents-board.js";
 import { markAgentSeen } from "../agent-board.js";
+import { agentsLiveOf } from "../agents-live.js";
+import { readChildWindow } from "../live-children-read.js";
+import { readMainWindow } from "../live-main-read.js";
+import { runLiveCommands } from "../store.js";
 import { prometheusMetrics } from "../metrics.js";
 import { readMonitoring } from "../monitoring-settings.js";
 import { targetOf } from "../monitoring.js";
@@ -38,6 +42,7 @@ import { healthWords } from "../server-telemetry.js";
 import { tally } from "../summary.js";
 import { serveInstallAsset } from "./pages-assets.js";
 import { healthz } from "./remote-hooks.js";
+import { leadsStillAdmitted, leadTilesFor } from './agents-live-lead.js';
 import { refuse, regionScript, screen, settingsRows, WORKSPACE_STYLE, workToolRows } from "./chrome.js";
 import { redirect, respond, safeReturn, SAFETY, taskHref } from "./http.js";
 import { assignmentOf } from "../assignment.js";
@@ -46,6 +51,7 @@ import { browsePage, fleetBody, fleetScript, githubIdentityOf, githubReposPage,
 import { capsPage } from "./render-settings.js";
 import { decisionAnswerScript, taskBody } from "./render-tasks.js";
 import {} from "./session.js";
+import { rereadBrowser } from "./live.js";
 export function createPagesHandlers(runtime) {
     const { clock, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
     // The filesystem browser (operator request): pick a project folder by
@@ -444,8 +450,14 @@ export function createPagesHandlers(runtime) {
         const now = clock();
         const access = workAccess();
         const asked = url.searchParams.get("run");
+        // The Live grid only watches (docs/plans/agents-view.md §3): it branches off before an opened agent is built, so
+        // viewing it never marks a run seen, takes a watch or offers a composer — a reload of ?view=live&run=… included.
+        const watching = url.searchParams.get("view") === "live";
+        // Live is a browser session's only, like its reads (no token sees the grid).
+        if (watching && who.via !== "cookie")
+            return respond(response, 403, "text/plain; charset=utf-8", "The Live view is for a signed-in browser.");
         let selected = null;
-        if (asked !== null && /^[1-9][0-9]{0,9}$/.test(asked)) {
+        if (!watching && asked !== null && /^[1-9][0-9]{0,9}$/.test(asked)) {
             const run = store.getRun(Number(asked));
             const facts = run === null || !runVisible(run) ? null : agentFactsFor(store, run.id, access, who.name);
             if (facts !== null) {
@@ -485,6 +497,11 @@ export function createPagesHandlers(runtime) {
                 };
             }
         }
+        // The Live grid is drawn in the browser from its own read-only reads (agents-live-view.tsx): no board facts here.
+        if (watching) {
+            const view = { kind: "agents", groups: [], selected: null, lanes: null, empty: null, live: true };
+            return sendScreen(response, 200, screen("Agents", html `<h1>Agents</h1><p class="meta">Live needs JavaScript.</p>`, { chrome: chromeFor(project, "runs"), workspace: { view } }));
+        }
         const groups = agentsBoardOf(store, now, access, who.name, evidenceRoot);
         const lanes = selected === null ? agentLanesOf(store, now, access, who.name, laneWindowOf(url.searchParams.get("window"))) : null;
         const view = { kind: "agents", groups, selected, lanes,
@@ -989,6 +1006,67 @@ export function createPagesHandlers(runtime) {
         response.setHeader("cache-control", "no-store");
         return respond(response, 200, "application/json", JSON.stringify({ proof: createHmac("sha256", Buffer.from(identity, "hex")).update(challenge).digest("hex") }));
     }
+    // The Live grid (docs/plans/agents-view.md §3), kept after every other handler.
+    /** The Live grid's tiles (JSON, read-only): every role's running agents and those that just ended, that this viewer
+     * may see — the console's ceiling and the account's own access, proved per run, on every request. */
+    async function agentsLive(ctx) {
+        const { who, request, response } = ctx;
+        response.setHeader("cache-control", "no-store");
+        // A browser session only (the route says so too): live output is never a token's to read.
+        if (who.via !== "cookie")
+            return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
+        const browser = who;
+        const canSee = (run) => { const repo = taskRepoOf(run.taskRef); return repo !== null && visible(repo) && store.accountCanAccess(who.name, repo); };
+        const tiles = agentsLiveOf(store, clock(), { canSee, localRunner: options.localRunner });
+        // The viewer's own lead turns, admitted as their chat is, from the session as it is saved now.
+        const current = rereadBrowser(runtime, request, browser);
+        const leads = current === null ? [] : leadTilesFor(runtime, current);
+        // Re-proved right before delivery: the session still held, each tile's run still in view from its current row, and
+        // each lead turn still admitted, from the session as it is saved now.
+        const again = current === null ? null : rereadBrowser(runtime, request, browser);
+        if (again === null)
+            return respond(response, 401, "application/json", JSON.stringify({ error: "session" }));
+        const shown = tiles.filter(tile => { const run = store.getRun(tile.runId); return run !== null && canSee(run); });
+        return respond(response, 200, "application/json", JSON.stringify({ tiles: shown, leads: leadsStillAdmitted(runtime, again, leads) }));
+    }
+    /** This console's key for the Live grid's read cursors: random, in memory only (never where a build can reach), so a
+     * restart makes old cursors start over visibly. A cursor is state, never permission. */
+    const liveCursorKey = randomBytes(32);
+    /** One window of a run's live output for the Live grid (JSON, read-only): its own records or its subagents'. Access
+     * is proved before the read (ceiling, account, this computer's run) and again after it, before a byte is sent. */
+    async function agentsLiveRead(ctx) {
+        const { url, who, response } = ctx;
+        response.setHeader("cache-control", "no-store");
+        // A browser session only (the route says so too): live output is never a token's to read.
+        if (who.via !== "cookie")
+            return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
+        const runId = Number(url.pathname.slice("/agents/live/".length));
+        const file = url.searchParams.get("file");
+        const cursor = url.searchParams.get("cursor");
+        if ((file !== "main" && file !== "sub") || [...url.searchParams.keys()].some(key => key !== "file" && key !== "cursor")) {
+            return respond(response, 400, "application/json", JSON.stringify({ error: "request" }));
+        }
+        const browser = who;
+        // The saved session still held (not just the cookie), and the run still in view from its current row.
+        const allowed = () => {
+            if (rereadBrowser(runtime, ctx.request, browser) === null)
+                return false;
+            const run = store.getRun(runId);
+            const repo = run === null ? null : taskRepoOf(run.taskRef);
+            return run !== null && repo !== null && runVisible(run) && store.accountCanAccess(who.name, repo);
+        };
+        if (!allowed())
+            return respond(response, 404, "application/json", JSON.stringify({ error: "run" }));
+        if (options.localRunner === undefined || store.getRun(runId)?.runner !== options.localRunner) {
+            return allowed() ? respond(response, 200, "application/json", JSON.stringify({ error: "off" })) : respond(response, 404, "application/json", JSON.stringify({ error: "run" }));
+        }
+        const read = { key: liveCursorKey, commands: runLiveCommands(store, runId) };
+        const window = file === "sub" ? readChildWindow(evidenceRoot, runId, cursor, read) : readMainWindow(evidenceRoot, runId, cursor, read);
+        // Re-proved after the read: a narrowed account or a run gone from view gets nothing it read.
+        if (!allowed() || store.getRun(runId)?.runner !== options.localRunner)
+            return respond(response, 404, "application/json", JSON.stringify({ error: "run" }));
+        return respond(response, 200, "application/json", JSON.stringify(window.ok ? window : { error: window.reason }));
+    }
     const registrations = handlersOf("pages", {
         "projects.browse": projectsBrowse,
         "projects.github": projectsGithub,
@@ -1001,6 +1079,8 @@ export function createPagesHandlers(runtime) {
         "system": systemScreen,
         "peek": peekPage,
         "agents": agentsPage,
+        "agents.live": agentsLive,
+        "agents.live.read": agentsLiveRead,
         "fleet": fleetPage,
         "ledger.export": ledgerExport,
         "menu": menuPage,

package/dist/server/render-chat.d.ts

@@ -359,8 +359,14 @@ export declare function leadAfterComposerHtml(data: {
     pending: LeadTurn | null;
     focusTask: TaskChatFocus | null;
 }): Html;
+/** A conversation shown before it exists (quiet page visits): its page binds sends to this session id, and the first
+ * send starts the conversation (chatSend). A visit never starts one. */
+export declare const NOT_STARTED_SESSION = 0;
 export declare function leadPage(chrome: Chrome, data: LeadThreadRows & {
-    session: LeadSession;
+    /** Null: no conversation yet; the first message starts one. */
+    session: LeadSession | null;
+    /** Whose conversation this is (the session's approver once it exists). */
+    approver: string;
     /** A project's own thread (v77); null for the lead conversation or a task. */
     chatProject?: string | null;
     follow?: {
@@ -390,6 +396,14 @@ export type LiveTurn = {
     ok: boolean;
     listeners: Set<() => void>;
     expiry?: NodeJS.Timeout;
+    /** For the Live grid's lead tile (agents-live-lead.ts): the turn's id once it says it, when it started and ended, and
+     * when each step began (epoch ms). Never sent to the chat room. */
+    turn?: number;
+    startedAt?: number;
+    endedAt?: number;
+    stepAt?: number[];
+    /** Per step: its text is the provider's finished answer, secret-checked whole (lead.ts `final`). */
+    confirmed?: boolean[];
 };
 export type ChatEnablement = {
     ok: true;

package/dist/server/render-chat.js

@@ -952,18 +952,25 @@ export function leadThreadHtml(data) {
 export function leadAfterComposerHtml(data) {
     return html `<div id="chat-after-composer" data-chat-region="after">${data.messages.length === 0 && data.pending === null ? leadPromptStarters(data.focusTask) : ""}</div>`;
 }
+/** A conversation shown before it exists (quiet page visits): its page binds sends to this session id, and the first
+ * send starts the conversation (chatSend). A visit never starts one. */
+export const NOT_STARTED_SESSION = 0;
 export function leadPage(chrome, data) {
     const subscription = isSubscriptionChatProvider(data.config.provider);
     const chatProject = data.focusTask === null ? data.chatProject ?? null : null;
     const returnTo = data.focusTask !== null ? taskChatHref(data.focusTask.id) : chatProject !== null ? projectChatHref(chatProject) : "/chat";
+    const sessionId = data.session?.id ?? NOT_STARTED_SESSION;
+    const approver = data.session?.approver ?? data.approver;
     const controlsHtml = joinHtml([
-        html `<details class="lead-follow"><summary>Automatic crew updates${data.follow?.enabled ? ' · On' : ''}</summary><p class="meta">${data.follow?.detail ?? 'Automatic crew updates are off.'}</p>${postForm("/chat/mate/follow", html `${data.follow?.enabled ? '' : html `<p>The lead responds when results or decisions arrive. Uses this conversation’s ${subscription ? 'membership usage, with no dollar maximum' : 'remaining spend allowance'} and daily turn limit. Existing task approvals still apply.</p>`}<button type="submit" class="quiet">${data.follow?.enabled ? 'Pause updates' : 'Enable updates'}</button>`, { returnTo, hidden: { enabled: data.follow?.enabled ? 'no' : 'yes' } })}</details>`,
+        data.session === null ? "" : html `<details class="lead-follow"><summary>Automatic crew updates${data.follow?.enabled ? ' · On' : ''}</summary><p class="meta">${data.follow?.detail ?? 'Automatic crew updates are off.'}</p>${postForm("/chat/mate/follow", html `${data.follow?.enabled ? '' : html `<p>The lead responds when results or decisions arrive. Uses this conversation’s ${subscription ? 'membership usage, with no dollar maximum' : 'remaining spend allowance'} and daily turn limit. Existing task approvals still apply.</p>`}<button type="submit" class="quiet">${data.follow?.enabled ? 'Pause updates' : 'Enable updates'}</button>`, { returnTo, hidden: { enabled: data.follow?.enabled ? 'no' : 'yes' } })}</details>`,
         html `<details class="chat-limits chat-session-details"><summary>Conversation details<span class="meta">${subscription ? "membership" : data.config.provider}</span></summary>\n${joinHtml([
             html `<div class="chat-budget"><span class="mono">${data.config.provider} · ${data.config.model}</span><span>${data.turnsToday} / ${data.config.dailyTurns} turns today</span>${subscription
                 ? html `<span>membership login · no dollar ceiling</span>`
-                : html `<span>this conversation: ${chatMoney(data.session.spentMicrousd)} of ${chatMoney(data.session.ceilingMicrousd)}</span><span>this week ${chatMoney(data.weeklySpent)} of ${chatMoney(data.config.weeklyCeilingMicrousd)}</span>`}</div>`,
-            html `<p class="meta">Started ${data.session.mintedAt.slice(0, 16).replace("T", " ")}Z. It stays open until you end it; only bounded recent context is sent to the model.</p>`,
-            postForm("/chat/mate/end", html `<button type="submit" class="quiet">End the conversation and forget the thread</button>`, { attrs: { class: "inline" }, returnTo }),
+                : html `<span>this conversation: ${chatMoney(data.session?.spentMicrousd ?? 0)} of ${chatMoney(data.session?.ceilingMicrousd ?? 0)}</span><span>this week ${chatMoney(data.weeklySpent)} of ${chatMoney(data.config.weeklyCeilingMicrousd)}</span>`}</div>`,
+            data.session === null
+                ? html `<p class="meta">No conversation yet. Send a message to start one.</p>`
+                : html `<p class="meta">Started ${data.session.mintedAt.slice(0, 16).replace("T", " ")}Z. It stays open until you end it; only bounded recent context is sent to the model.</p>`,
+            data.session === null ? "" : postForm("/chat/mate/end", html `<button type="submit" class="quiet">End the conversation and forget the thread</button>`, { attrs: { class: "inline" }, returnTo }),
             data.recent.length === 0
                 ? ""
                 : html `<p class="meta">Recent turns: ${joinHtml(data.recent
@@ -996,8 +1003,8 @@ export function leadPage(chrome, data) {
         html `<label>Message<textarea id="chat-message" name="message" rows="1" maxlength="${LEAD_MESSAGE_MAX_CHARS}" placeholder="${data.focusTask !== null ? "Ask about this task…" : chatProject !== null ? `Ask about ${projectName(chatProject)}…` : "Describe what you want done…"}"></textarea></label>`,
         html `<button type="submit" aria-label="${data.pending === null ? "send message" : "send message — it waits for the current reply"}">Send</button>`,
     ], "\n"), {
-        attrs: { class: "card composer", id: latestReply === null && data.pending === null ? "latest" : "chat-composer", "aria-label": "message the lead", "data-chat-session": data.session.id, "data-chat-task": data.focusTask?.id ?? "", "data-chat-user": data.session.approver, "data-chat-busy": data.pending === null ? "0" : "1", "data-chat-version": leadChatVersion(data), "data-chat-approval": data.focusTask?.approval?.digest ?? "" },
-        hidden: { request: randomBytes(16).toString("hex"), "request-session": data.session.id, task: data.focusTask?.id, project: chatProject, result: data.resultRunId },
+        attrs: { class: "card composer", id: latestReply === null && data.pending === null ? "latest" : "chat-composer", "aria-label": "message the lead", "data-chat-session": sessionId, "data-chat-task": data.focusTask?.id ?? "", "data-chat-user": approver, "data-chat-busy": data.pending === null ? "0" : "1", "data-chat-version": leadChatVersion(data), "data-chat-approval": data.focusTask?.approval?.digest ?? "" },
+        hidden: { request: randomBytes(16).toString("hex"), "request-session": sessionId, task: data.focusTask?.id, project: chatProject, result: data.resultRunId },
     }), 
     // Concise pass (2026-09-13): the status line speaks only when there is
     // a state to report — a reply in progress here, the connection from
@@ -1009,7 +1016,7 @@ export function leadPage(chrome, data) {
     return screen("chat", chatWorkspace(joinHtml(conversation, "\n"), data.projects, false, data.focusTask, data.resultPanel ?? null), { chrome, functional: { script: CHAT_CONTINUITY_SCRIPT + CHAT_UI_SCRIPT + (data.focusTask === null ? "" : RESULT_REVIEW_SCRIPT), fetches: true },
         workspace: {
             conversation: {
-                sessionId: data.session.id, user: data.session.approver, version: leadChatVersion(data),
+                sessionId, user: approver, version: leadChatVersion(data),
                 messages: leadBrowserMessages(data, data.focusTask === null && chatProject === null ? null : returnTo, { task: data.focusTask?.id ?? null, project: chatProject }),
                 pendingTurnId: data.pending?.id ?? null, requestId: randomBytes(16).toString('hex'), maxChars: LEAD_MESSAGE_MAX_CHARS,
                 taskId: data.focusTask?.id ?? null, resultRunId: data.resultRunId ?? null, project: chatProject,

package/dist/server/render-pages.d.ts

@@ -14,7 +14,7 @@ import { type CriterionMatrixRow } from "../proof.js";
 import { type QualityMode } from "../quality.js";
 import { type Runner } from "../runner.js";
 import { type Scope, type UnattendedPermissionMode } from "../scope.js";
-import { type Decision, type Incident, type RepairChainRow, type Run, type Store, type Task, type TaskState, type WorktreeRow } from "../store.js";
+import { type Decision, type Incident, type RepairChainRow, type Run, type Store, type TaskState, type WorktreeRow } from "../store.js";
 import { tally } from "../summary.js";
 import { type WorkIndexGroup, type WorkIndexPage } from "../work-index.js";
 import { type WorkFacts, type WorkStatus, type WorkView } from "../workspace-ui.js";
@@ -284,8 +284,8 @@ export declare function workPage(chrome: Chrome, data: {
     multiProject: boolean;
     now: Date;
     limits?: BrowserLimits | null;
+    state?: TaskState | null;
 }): Screen;
-export declare function tasksPage(chrome: Chrome, tasks: Task[], state: TaskState | null, problem: string | null, repo?: string | null, prefill?: TaskComposerPrefill | null, permissionDefault?: UnattendedPermissionMode, qualityDefault?: QualityMode, replaced?: ReadonlyMap<string, string>): Screen;
 export declare function browsePage(chrome: Chrome, data: {
     at: string;
     root: string;
@@ -492,13 +492,17 @@ export declare function fleetScript(): string;
  * (finding 18); missing that, a select counts clean.
  */
 export declare function queueScript(): string;
-export declare function newTaskPage(chrome: Chrome, project: string | null, projectRevision: number, problem: string | null, candidates?: {
+export declare function newTaskPage(chrome: Chrome, project: string | null, 
+/** undefined: keep the revision the refused form posted (its draft), so a project switch since still refuses. */
+projectRevision: number | undefined, problem: string | null, candidates?: {
     id: string;
     title: string;
 }[], permissionDefault?: UnattendedPermissionMode, qualityDefault?: QualityMode, projects?: {
     path: string;
     name: string;
-}[]): Screen;
+}[], 
+/** A shipped template's fields, or a refused filing's own words, back in the form. */
+prefill?: TaskComposerPrefill | null): Screen;
 /**
  * The triage flow: everything waiting on a person, one card at a time.
  * Full context ON the card, the act inline, and every act lands back here

package/dist/server/render-pages.js

@@ -287,6 +287,10 @@ export function boardBody(data, ciRed) {
             return `${Math.round(minutes / 60)}h`;
         return `${Math.round(minutes / (24 * 60))}d`;
     };
+    // A lane's head is a status chip in its own tone (after ReUI's badge with a dot): amber only for the lane that
+    // waits on a person, blue for building, green for done, neutral otherwise. The word carries the state.
+    const LANE_CHIP = { attention: "chip-needs", building: "chip-live", done: "chip-done", queued: "", waiting: "" };
+    const laneChip = (key, title) => html `<span class="chip ${LANE_CHIP[key]}"><span class="chip-dot" aria-hidden="true"></span>${title}</span>`;
     const lane = (key, title, hint, renderOne) => {
         const cards = data.cards.filter(card => card.lane === key);
         // The longest-stalled card leads the board: attention sorts by how
@@ -312,20 +316,21 @@ export function boardBody(data, ciRed) {
         // A lane is a section that can fold (board pass): open when it holds
         // cards, folded when empty, so a phone reads the counts first and a
         // desktop column never spends its height on "nothing here".
-        return html `<details class="lane lane-${key}"${shown.length === 0 ? null : html ` open`}><summary><h2>${title} <span class="lane-count">${cards.length}${data.saturated ? "+" : ""}</span></h2></summary><p class="hint">${hint}</p>${shown.length === 0 ? html `<p class="meta lane-empty">nothing here</p>` : shown.map((card, index) => renderOne(card, index))}${more > 0 ? html `<a class="lane-more" href="/tasks">+${more} more in the task list</a>` : null}</details>`;
+        return html `<details class="lane lane-${key}"${shown.length === 0 ? null : html ` open`}><summary><h2>${laneChip(key === "attention" && cards.length === 0 ? "queued" : key, title)} <span class="lane-count">${cards.length}${data.saturated ? "+" : ""}</span></h2></summary><p class="hint">${hint}</p>${shown.length === 0 ? html `<p class="meta lane-empty">nothing here</p>` : shown.map((card, index) => renderOne(card, index))}${more > 0 ? html `<a class="lane-more" href="/work">+${more} more in Tasks</a>` : null}</details>`;
     };
     // The card's facts: mono key–value pairs under the title (board pass) —
     // task, worker, runtime — the same grammar on every lane, so the eye
     // learns one card. Chips carry the words (project, reservation).
+    // A value is mono only when a machine said it (a worker, model or branch name, a clock); words stay Geist.
     const facts = (rows) => rows.length === 0
         ? null
-        : html `<span class="facts">${rows.map(([k, v]) => html `<span class="fact"><span class="k">${k}</span><span class="v">${v}</span></span>`)}</span>`;
+        : html `<span class="facts">${rows.map(([k, v, mono]) => html `<span class="fact"><span class="k">${k}</span><span class="${mono === undefined ? "v" : "v mono"}">${v}</span></span>`)}</span>`;
     const chips = (parts) => {
         const kept = parts.filter((one) => one !== null);
         return kept.length === 0 ? null : html `<span class="chips">${joinHtml(kept, " ")}</span>`;
     };
-    const plain = (card) => html `<a class="lane-card" href="${card.href}" data-vt="${card.taskId}"><span class="id">${card.taskId}</span><span class="t">${card.title}</span><span class="why">${card.reason}</span>${facts([
-        ...(card.stalledSince === null ? [] : [["waiting", age(card.stalledSince)]]),
+    const plain = (card) => html `<a class="lane-card" href="${card.href}" data-vt="${card.taskId}"><span class="t">${card.title}</span><span class="why">${card.reason}</span><span class="id">${card.taskId}</span>${facts([
+        ...(card.stalledSince === null ? [] : [["waiting", age(card.stalledSince), "mono"]]),
     ])}${chips([
         chip(card.repo),
     ])}</a>`;
@@ -342,8 +347,8 @@ export function boardBody(data, ciRed) {
         }
         return heads;
     })();
-    const queuedCard = (card) => html `<a class="lane-card" href="${card.href}" data-vt="${card.taskId}"><span class="id">${card.taskId}</span><span class="t">${card.title}</span><span class="why">${card.reason}</span>${facts([
-        ["worker", card.assignedRunner === null ? "any free worker" : card.assignedRunner],
+    const queuedCard = (card) => html `<a class="lane-card" href="${card.href}" data-vt="${card.taskId}"><span class="t">${card.title}</span><span class="why">${card.reason}</span><span class="id">${card.taskId}</span>${facts([
+        card.assignedRunner === null ? ["worker", "any free worker"] : ["worker", card.assignedRunner, "mono"],
     ])}${chips([
         queuedHeads.get(`${card.assignedRunner ?? ""}|${card.repo ?? ""}`) === card.taskId
             ? html `<span class="badge">${card.assignedRunner === null ? "next up" : `next for ${card.assignedRunner}`}</span>`
@@ -367,13 +372,15 @@ export function boardBody(data, ciRed) {
         const steps = step === null
             ? null
             : html `<span class="steps" role="img" aria-label="${`step ${step + 1} of ${BUILD_STEPS.length}: ${BUILD_STEPS[step]}`}">${BUILD_STEPS.map((_, index) => html `<i class="${index < step ? "on" : index === step ? "now" : ""}"></i>`)}</span>`;
-        return html `<a class="lane-card building" href="${card.href}" data-vt="${card.taskId}"><span class="id">${card.taskId}</span><span class="t"><span class="dot dot-ok pulse"></span>${card.title}</span>${steps}<span class="live-line"><span class="stage">${live}</span>${tickingClock(claim.claimedAt, data.now)}</span>${facts([
-            ["worker", claim.runner],
-            ...(claim.model === null
-                ? []
-                : [["model", `${claim.provider !== null && claim.provider !== "claude" ? `${claim.provider} · ` : ""}${claim.model}`]]),
-            ...(claim.branch === null ? [] : [["branch", `${claim.branch}${workspace === null ? "" : ` · ${workspace}`}`]]),
-        ])}${chips([
+        // Who, which model and which branch, as one muted line: words in Geist, the model and branch in mono.
+        const model = claim.model === null ? null : `${claim.provider !== null && claim.provider !== "claude" ? `${claim.provider} · ` : ""}${claim.model}`;
+        const branch = claim.branch === null ? null : `${claim.branch}${workspace === null ? "" : ` · ${workspace}`}`;
+        const who = joinHtml([
+            html `<span>${claim.runner}</span>`,
+            model === null ? null : html `<span class="mono">${model}</span>`,
+            branch === null ? null : html `<span class="mono">${branch}</span>`,
+        ].filter((one) => one !== null), html `<span aria-hidden="true"> · </span>`);
+        return html `<a class="lane-card building" href="${card.href}" data-vt="${card.taskId}"><span class="t"><span class="dot dot-ok pulse"></span>${card.title}</span>${steps}<span class="live-line"><span class="stage">${live}</span>${tickingClock(claim.claimedAt, data.now)}</span><span class="id">${card.taskId}</span><span class="who">${who}</span>${chips([
             card.attempt === null ? null : html `<span class="badge">Attempt ${card.attempt}</span>`,
             chip(card.repo),
         ])}</a>`;
@@ -384,8 +391,8 @@ export function boardBody(data, ciRed) {
             const pr = row.prNumber === null
                 ? null
                 : html `<span class="badge badge-open">PR #${row.prNumber}</span>${ciRed(row.prNumber) ? html ` <span class="badge badge-failed">CI failing</span>` : null}`;
-            return html `<a class="lane-card" href="${taskHref(row.taskId)}" data-vt="${row.taskId}"><span class="id">${row.taskId}</span><span class="t">${row.title}</span>${row.handoff === null ? null : html `<span class="why">${row.handoff.length > 120 ? row.handoff.slice(0, 120) + "…" : row.handoff}</span>`}${facts([
-                ...(row.ranMinutes === null ? [] : [["ran", `${row.ranMinutes}m`]]),
+            return html `<a class="lane-card" href="${taskHref(row.taskId)}" data-vt="${row.taskId}"><span class="t">${row.title}</span>${row.handoff === null ? null : html `<span class="why">${row.handoff.length > 120 ? row.handoff.slice(0, 120) + "…" : row.handoff}</span>`}<span class="id">${row.taskId}</span>${facts([
+                ...(row.ranMinutes === null ? [] : [["ran", `${row.ranMinutes}m`, "mono"]]),
                 ["usage", runCostWords({ authMode: row.authMode, costUsd: row.costUsd, tokensIn: null, tokensOut: null })],
             ])}${chips([
                 html `<span class="badge badge-done">${row.outcome === "no-change" ? "No change" : "Built"}</span>`,
@@ -417,11 +424,11 @@ export function boardBody(data, ciRed) {
         toggle,
         workerStrip(data.workers, data.cards, data.now),
         html `<div class="board" data-now="${String(data.now.getTime())}">`,
-        lane("attention", "needs you", "these wait for a person", plain),
-        lane("queued", "queued", "starts when a worker is free", queuedCard),
-        lane("waiting", "waiting", "paused until a time, another task, or a requirement is ready", plain),
-        lane("building", "building", "one agent per card, in its own workspace", building),
-        html `<details class="lane lane-done"${data.done.length === 0 ? null : html ` open`}><summary><h2><a href="/done">done recently</a></h2></summary><p class="hint">the most recent — the full list is under done</p>${doneCards}</details>`,
+        lane("attention", "Needs you", "These wait for a person.", plain),
+        lane("queued", "Queued", "Starts when a worker is free.", queuedCard),
+        lane("waiting", "Waiting", "Paused until a time, another task, or a requirement is ready.", plain),
+        lane("building", "Building", "One agent per card, in its own workspace.", building),
+        html `<details class="lane lane-done"${data.done.length === 0 ? null : html ` open`}><summary><h2>${laneChip("done", html `<a href="/done">Done recently</a>`)}</h2></summary><p class="hint">The most recent. The full list is under Done.</p>${doneCards}</details>`,
         html `</div>`,
     ], "\n");
 }
@@ -503,7 +510,7 @@ export function homePage(chrome, data) {
         ? joinHtml([
             html `<div class="card">`,
             html `<p><strong>Nothing is queued yet — here is the whole loop:</strong></p>`,
-            html `<p>1. <a href="/tasks">Add a task</a> — plain words for work you want done${data.repo === null ? null : html ` in <span class="mono">${data.repo}</span>`}.</p>`,
+            html `<p>1. <a href="/tasks/new">Add a task</a> — plain words for work you want done${data.repo === null ? null : html ` in <span class="mono">${data.repo}</span>`}.</p>`,
             html `<p>2. Open it and write its scope — the goal, and what it must not become. Approve exactly that.</p>`,
             html `<p>3. Keep Toolroll running on the builder machine. Approved tasks build unattended, each on its own branch.</p>`,
             html `<p class="meta">When an agent is unsure it stops and asks — those questions land here, under “waiting on you”.</p>`,
@@ -596,12 +603,15 @@ export function taskComposerHtml(data) {
 }
 export const TASK_GROUP_LABEL = { ...ASK_LABEL, building: 'Building', rest: 'Recent' };
 export function workPage(chrome, data) {
-    const href = (view, cursor) => {
+    // The stored-state filter (the old task list's) rides every link but a change of state, which starts on page one.
+    const href = (view, cursor, state = data.state ?? null) => {
         const query = new URLSearchParams();
         if (data.projectFilter !== undefined)
             query.set('project', data.projectFilter);
         if (view !== 'all')
             query.set('view', view);
+        if (state !== null)
+            query.set('state', state);
         if (cursor !== undefined)
             query.set('cursor', cursor);
         return `/work${query.size ? `?${query}` : ''}`;
@@ -614,16 +624,22 @@ export function workPage(chrome, data) {
             : browserWorkActionHref(row);
         const action = actionHref === null || row.primaryAction === null ? null : html `<a class="work-action" data-primary-action href="${actionHref}">${row.primaryAction.label} →</a>`;
         const project = data.multiProject || row.repo === null ? html `<span class="project-label">${row.repo === null ? 'Unplaced' : projectName(row.repo)}</span>` : null;
-        return html `<article class="work-row" data-task="${row.rootId}" data-work-status="${row.status.token}" data-work-views="${row.status.views.join(' ')}"><div class="work-row-main"><a class="work-title" href="${taskHref(row.rootId)}">${row.title}</a><p class="work-meta">${project}<span>${relativeAge(row.updatedAt, data.now)}</span></p></div><div class="work-row-status">${statusLineHtml(row.status)}${action}${row.familyProblem === null ? null : html `<p class="problem">${row.familyProblem}</p>`}${row.status.views.includes('needs-you') && !['write-scope', 'approve-scope'].includes(row.primaryAction?.code ?? '') && row.status.detail !== row.status.label && row.status.detail !== row.familyProblem ? html `<p class="work-detail">${row.status.detail}</p>` : null}${workDiagnosticsHtml(row.status.diagnostics)}</div></article>`;
+        return html `<article class="work-row" data-task="${row.rootId}" data-work-status="${row.status.token}" data-work-views="${row.status.views.join(' ')}"><div class="work-row-main"><a class="work-title" href="${taskHref(row.rootId)}">${row.title}</a><p class="work-meta">${project}<span>${relativeAge(row.updatedAt, data.now)}</span><span class="mono">${row.rootId}</span></p></div><div class="work-row-status">${statusLineHtml(row.status)}${action}${row.familyProblem === null ? null : html `<p class="problem">${row.familyProblem}</p>`}${row.status.views.includes('needs-you') && !['write-scope', 'approve-scope'].includes(row.primaryAction?.code ?? '') && row.status.detail !== row.status.label && row.status.detail !== row.familyProblem ? html `<p class="work-detail">${row.status.detail}</p>` : null}${workDiagnosticsHtml(row.status.diagnostics)}</div></article>`;
     };
     const current = WORK_VIEWS.find(one => one.key === data.view);
-    const list = data.work.items.length === 0
-        ? html `<div class="work-empty" data-work-empty="${data.view}"><p>${data.previous ? 'There are no more tasks on this page.' : current.empty}</p>${data.view === 'all' && !data.previous ? html `<p><a class="button-link" href="${chrome.chat === true ? '/chat' : '/tasks/new'}">${chrome.chat === true ? 'Start in chat' : 'Add a task'}</a></p>` : html `<a href="${href('all')}">See all tasks →</a>`}</div>`
-        : html `<div class="work-list">${data.work.items.map(rowHtml)}</div>`;
+    const filtered = (data.state ?? null) !== null;
+    // The state filter, as real links (the old task list's), so a page without the React view can still change it.
+    const stateLinks = html `<nav class="work-states" aria-label="Task state"><span class="meta">State:</span> ${joinHtml([html `<a href="${href(data.view, undefined, null)}"${filtered ? null : html ` aria-current="page"`}>Any</a>`,
+        ...TASK_STATES.map(one => html `<a href="${href(data.view, undefined, one)}"${data.state === one ? html ` aria-current="page"` : null}>${one}</a>`)], html ` · `)}</nav>`;
+    const list = data.work.items.length === 0 && filtered && !data.previous
+        ? html `<div class="work-empty" data-work-empty="${data.view}"><p>No tasks are ${data.state} in this view.</p><a href="${href(data.view, undefined, null)}">Show every state →</a></div>`
+        : data.work.items.length === 0
+            ? html `<div class="work-empty" data-work-empty="${data.view}"><p>${data.previous ? 'There are no more tasks on this page.' : current.empty}</p>${data.view === 'all' && !data.previous ? html `<p><a class="button-link" href="${chrome.chat === true ? '/chat' : '/tasks/new'}">${chrome.chat === true ? 'Start in chat' : 'Add a task'}</a></p>` : html `<a href="${href('all')}">See all tasks →</a>`}</div>`
+            : html `<div class="work-list">${data.work.items.map(rowHtml)}</div>`;
     const pages = !data.previous && data.work.nextCursor === null ? null : html `<nav class="row work-pagination" aria-label="Task pages">${data.previous ? html `<a class="button-link" href="${href(data.view)}">First page</a>` : null}${data.work.nextCursor === null ? null : html `<a class="button-link" rel="next" href="${href(data.view, data.work.nextCursor)}">Next page</a>`}</nav>`;
-    const tools = html `<details class="work-tools"><summary>Work tools${CHEVRON_ICON}</summary><nav class="work-tools-menu">${[['/inbox', 'Inbox'], ['/board', 'Board'], ['/board?view=order', 'Order'], ['/tasks', 'Task list'], ['/recipes', 'Recipes'], ...(chrome.projectScoped ? [] : [['/workbench', 'Portfolio']]), ['/ledger', 'Action ledger']]
+    const tools = html `<details class="work-tools"><summary>Work tools${CHEVRON_ICON}</summary><nav class="work-tools-menu">${[['/inbox', 'Inbox'], ['/board', 'Board'], ['/board?view=order', 'Order'], ['/recipes', 'Recipes'], ...(chrome.projectScoped ? [] : [['/workbench', 'Portfolio']]), ['/ledger', 'Action ledger']]
         .map(([path, label]) => html `<a href="${path}">${label}</a>`)}</nav></details>`;
-    const toolLinks = [['/inbox', 'Inbox'], ['/board', 'Board'], ['/board?view=order', 'Order'], ['/tasks', 'Task list'], ['/recipes', 'Recipes'], ...(chrome.projectScoped ? [] : [['/workbench', 'Portfolio']])];
+    const toolLinks = [['/inbox', 'Inbox'], ['/board', 'Board'], ['/board?view=order', 'Order'], ['/recipes', 'Recipes'], ...(chrome.projectScoped ? [] : [['/workbench', 'Portfolio']])];
     const view = {
         kind: 'tasks',
         tabs: WORK_VIEWS.map(one => ({ label: one.label, href: href(one.key), count: data.work.totals[one.key], active: one.key === data.view })),
@@ -649,7 +665,7 @@ export function workPage(chrome, data) {
                 notes: (row.status.diagnostics ?? []).map(one => `${one.label} · ${one.detail}`),
             };
         }),
-        empty: data.work.items.length > 0 ? null : {
+        empty: data.work.items.length > 0 ? null : filtered && !data.previous ? { text: `No tasks are ${data.state} in this view.`, action: { label: "Show every state", href: href(data.view, undefined, null) } } : {
             text: data.previous ? 'There are no more tasks on this page.' : current.empty,
             action: data.view === 'all' && !data.previous ? { label: chrome.chat === true ? 'Start in chat' : 'Add a task', href: chrome.chat === true ? '/chat' : '/tasks/new' } : { label: 'See all tasks', href: href('all') },
         },
@@ -657,26 +673,10 @@ export function workPage(chrome, data) {
         tools: toolLinks.map(([path, label]) => ({ label: label, href: path })),
         newTask: { label: 'New task', href: '/tasks/new' },
         limits: data.limits ?? null,
+        states: [{ label: 'Any state', href: href(data.view, undefined, null), active: (data.state ?? null) === null },
+            ...TASK_STATES.map(one => ({ label: one.charAt(0).toUpperCase() + one.slice(1), href: href(data.view, undefined, one), active: data.state === one }))],
     };
-    return screen('work', html `<div class="work-head"><h1>Tasks</h1>${tools}</div>${limitsHtml(data.limits ?? null)}${tabs}${list}${pages}`, { chrome, workspace: { view } });
-}
-export function tasksPage(chrome, tasks, state, problem, repo = null, prefill = null, permissionDefault = "auto", qualityDefault = "default", replaced = new Map()) {
-    const filters = joinHtml(TASK_STATES.map(one => (one === state ? html `<strong>${one}</strong>` : html `<a href="/tasks?state=${one}">${one}</a>`)), " · ");
-    const rows = tasks.length === 0
-        ? html `<p class="meta">${state === null
-            ? "The queue is empty — add the first task below. It builds once you approve its scope."
-            : `Nothing is ${state}.`}</p>`
-        : joinHtml(tasks.map(task => html `<a class="row" href="${taskHref(task.id)}"><span class="mono">${task.id}</span> ${task.title} <span class="right badge badge-${task.state}">${task.state === "cancelled" && replaced.has(task.id) ? `replaced by ${replaced.get(task.id)}` : task.state}</span></a>`), "\n");
-    return screen("tasks", joinHtml([
-        html `<h1>Tasks</h1>`,
-        html `<p class="meta">Work you want done${repo === null ? null : html ` in <strong>${projectName(repo)}</strong>`} — a task builds unattended only after its scope is approved; open one to write or approve its scope</p>`,
-        repo === null ? null : html `<p class="meta path-words"><span class="mono">${repo}</span></p>`,
-        problem === null ? null : html `<div class="problem">${problem}</div>`,
-        html `<p class="meta">Filter: <a href="/tasks">all</a> · ${filters}</p>`,
-        rows,
-        html `<h2>Add a task</h2>`,
-        taskComposerHtml({ project: repo, prefill, permissionDefault, qualityDefault }),
-    ], "\n"), { chrome });
+    return screen('work', html `<div class="work-head"><h1>Tasks</h1>${tools}</div>${limitsHtml(data.limits ?? null)}${tabs}${stateLinks}${list}${pages}`, { chrome, workspace: { view } });
 }
 export function browsePage(chrome, data) {
     const crumb = data.at === data.root ? projectName(data.root) : `${projectName(data.root)}${data.at.slice(data.root.length)}`;
@@ -1273,7 +1273,11 @@ export function queueScript() {
         `.then(function(){tell();});});` +
         `})();`);
 }
-export function newTaskPage(chrome, project, projectRevision, problem, candidates = [], permissionDefault = "auto", qualityDefault = "default", projects = []) {
+export function newTaskPage(chrome, project, 
+/** undefined: keep the revision the refused form posted (its draft), so a project switch since still refuses. */
+projectRevision, problem, candidates = [], permissionDefault = "auto", qualityDefault = "default", projects = [], 
+/** A shipped template's fields, or a refused filing's own words, back in the form. */
+prefill = null) {
     return screen("New task", joinHtml([
         html `<section class="task-intake">`,
         html `<div class="task-intake-hero"><h1>What should get done?</h1></div>`,
@@ -1281,7 +1285,8 @@ export function newTaskPage(chrome, project, projectRevision, problem, candidate
         problem === null ? null : html `<div class="problem">${problem}</div>`,
         taskComposerHtml({
             project,
-            projectRevision,
+            ...(projectRevision === undefined ? {} : { projectRevision }),
+            prefill,
             candidates,
             permissionDefault,
             qualityDefault,

package/dist/server/render-settings.js

@@ -170,7 +170,7 @@ export function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging
         : joinHtml([
             html `<h2>Unattended permissions</h2>`,
             permissionDefault.canManage && csrf !== ""
-                ? postForm("/settings/permission-default", html `${permissionModeChoices("permission-mode", permissionDefault.mode)}<button type="submit">Save default</button>`, { attrs: { class: "card permission-policy", "data-autosave": true } })
+                ? postForm("/settings/permission-default", html `${permissionModeChoices("permission-mode", permissionDefault.mode)}${permissionDefault.mode === "bypassPermissions" ? "" : reauth(html `<label>Your password <span class="meta">(needed for Full access)</span><input type="password" name="password" autocomplete="current-password"></label>`)}<button type="submit">Save default</button>`, { attrs: { class: "card permission-policy" } })
                 : html `<div class="card"><p><strong>${permissionDefault.mode === "bypassPermissions" ? "Full access" : "Auto"}</strong></p><p class="meta">An approver can change this default</p></div>`,
             permissionDefault.updatedAt === null
                 ? ""