toolroll 0.9.73 → 0.9.75

package/dist/server/render-tasks.js

@@ -20,7 +20,7 @@ import { CHAT_TASK_ACTIONS } from "../chat-task-actions.js";
 import {} from "../contracts/console-api.js";
 import {} from "../dispatch.js";
 import {} from "../evidence.js";
-import { firstTaskJourney } from "../first-run.js";
+import { taskRoad } from "../first-run.js";
 import { starterForWork } from "../flow-starters.js";
 import {} from "../gaps.js";
 import { readAuthModeStrict } from "../keys.js";
@@ -1437,6 +1437,11 @@ export function taskBodyParts(data) {
             if (resultStatus.token === "evidence-damaged") {
                 return withReview(box("problem", resultStatus.label, html `<a href="/r/${proof.runId}">Build #${proof.runId}</a> finished. ${resultStatus.detail}${publicationWords}`, "evidence-damaged"), html `<div class="proof-review-actions"><a class="button-link" href="/r/${proof.runId}">Review the evidence problems</a></div>`, proofDetails);
             }
+            // A recorded pass the check read now doesn't stand behind (unreadable, failed since, or not read here) never
+            // reads "passed": the box says what holds now (task-status.ts approvedCheckOf).
+            if (proof.proofVerdict === "verified" && !accepted && !(proof.receipt?.checks !== undefined && ["ready-to-review", "pr-opened", "merge-observed", "pr-closed"].includes(resultStatus.token))) {
+                return withReview(box(resultStatus.tone === "problem" ? "problem" : "ok", resultStatus.label, html `<a href="/r/${proof.runId}">Build #${proof.runId}</a> finished. ${resultStatus.detail}${publicationWords}`, resultStatus.token), proofDetails);
+            }
             if (proof.proofVerdict === "verified" && !accepted) {
                 const recovered = verificationRecovered(proof.proofReasons);
                 return withReview(box("ok", resultStatus.label, recovered
@@ -2359,10 +2364,15 @@ export function taskBodyParts(data) {
             { id: "task-diagnostics", title: "Task options", html: htmlString(optionsHtml), open: optionsOpen, count: null },
         ],
         cancel: cancelForm === "" ? null : { html: htmlString(cancelForm), open: data.cancelDraft !== undefined },
-        journey: data.guide !== true || task.state === "cancelled" || data.status === undefined ? null : (() => {
+        // Every task's road (the first task's guide used to be the only one): facts only, so the checks step says when
+        // checks didn't run, and a research report has none.
+        journey: task.state === "cancelled" || data.status === undefined ? null : (() => {
             const planning = data.plan === "requested" && approveForm === "";
             const read = data.assignment != null ? assignmentStageOf(data.assignment, { token: data.status.token }, planning) : stageOfCode(data.status.token, { planning });
-            return firstTaskJourney(read, scope !== null && approvalOf(scope).approved, task.state === "done");
+            // The one answer the status card's headline and Project checks row read (task-status.ts approvedCheckOf).
+            const checks = statusCard?.status.check ?? null;
+            const report = data.deliverable === "report" || data.report != null;
+            return taskRoad(read, scope !== null && approvalOf(scope).approved, task.state === "done", { checks, report });
         })(),
         // "Do this every time…": the starter flow that does this kind of work on its own, one yes away.
         thread,

package/dist/server/route-table.js

@@ -139,10 +139,14 @@ get("tasks", "done", "/done", { limited: "collection" });
 get("settings", "mode", "/mode");
 get("people", "people.page", "/people", { limited: "unscoped", ...free });
 get("pages", "system", "/system");
-get("tasks", "tasks", "/tasks", { limited: "collection" });
+get("tasks", "tasks", "/tasks", { limited: "collection", ...free }); // a redirect to /work now: never sent to the project opener first
 get("tasks", "queue", "/queue");
 get("pages", "peek", "/peek", free);
 get("pages", "agents", "/agents", { limited: "unscoped", ...free });
+// The Agents view's Live grid (docs/plans/agents-view.md §3): read-only, every request filtered to what the viewer may see.
+// Browser sessions only, like the transcript and the peek: no token (a lead's, a runner's, a remote one) reads live output.
+get("pages", "agents.live", "/agents/live", { limited: "unscoped", callers: ["cookie"], ...free });
+get("pages", "agents.live.read", `^\\/agents\\/live\\/${ID}$`, { limited: "unscoped", callers: ["cookie"], ...free, sample: "/agents/live/1" });
 get("pages", "fleet", "/fleet", free);
 get("tasks", "tasks.new", "/tasks/new", { limited: "collection", ...free });
 get("tasks", "task.page", `^\\/t\\/${TASK}$`, { project: "task", limited: "resource", ...free, sample: "/t/one" });
@@ -233,6 +237,10 @@ for (const one of ["close", "remove"])
     post("tasks", `term.${one}`, `^\\/term\\/${TERMINAL}\\/${one}$`, { ...TERM, sample: `/term/${"a".repeat(32)}/${one}` });
 for (const one of ["send", "stop", "resume", "recover", "continue", "ship", "answer"])
     post("tasks", `code.${one}-send`, `^\\/code\\/${SESSION}\\/${one}$`, { ...CODING_ACT, sample: `/code/${"a".repeat(32)}/${one}` });
+// Reading a coding checkout runs git in a folder an agent writes, so it is a POST with the form token, never a page
+// visit (docs/plans/get-side-effects.md): the session's changes, and the review-for-shipping preview.
+post("tasks", "code.changes-read", `^\\/code\\/${SESSION}\\/changes$`, { project: "coding", limited: "self", callers: ["cookie"], sample: `/code/${"a".repeat(32)}/changes` });
+post("tasks", "code.ship-preview", `^\\/code\\/${SESSION}\\/ship\\/preview$`, { project: "coding", limited: "self", callers: ["cookie"], sample: `/code/${"a".repeat(32)}/ship/preview` });
 // Any other coding action answers "not found" after the same access check.
 post("tasks", "code.act-other", "^\\/code(\\/.*)?$", { ...CODING_ACT, sample: "/code/unknown" });
 post("settings", "settings.skills-revise", "/settings/skills/revise", { project: "form", limited: "unscoped", ...approver("Sign in to revise a test.", "/settings/skills") });
@@ -304,10 +312,12 @@ const SETTINGS_ACT_ROLES = {
     updates: operator("An instance operator updates Toolroll.", "/settings"),
     "updates/seen": operator("An instance operator updates Toolroll.", "/settings"),
     "updates/cancel": operator("An instance operator updates Toolroll.", "/settings"),
+    "updates/check": operator("An instance operator updates Toolroll.", "/settings"),
     retention: operator("An instance operator sets retention.", "/settings"),
     storage: operator("An instance operator looks after storage.", "/settings"),
     "storage/clean": operator("An instance operator looks after storage.", "/settings"),
     "storage/discard": operator("An instance operator looks after storage.", "/settings"),
+    "storage/check": operator("An instance operator looks after storage.", "/settings"),
     "backups/now": operator("An instance operator looks after backups.", "/settings"),
     backups: operator("An instance operator looks after backups.", "/settings"),
     data: operator("An instance operator exports data.", "/settings"),
@@ -316,7 +326,7 @@ const SETTINGS_ACT_ROLES = {
     "tools/connect": approver("Sign in as an approver to connect tools.", "/settings/tools"),
     "tools/change": approver("Sign in as an approver to manage tools.", "/settings/tools"),
 };
-for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "retention", "storage", "storage/clean", "storage/discard", "pull-requests", "checks", "backups/now", "backups", "data", "integrations/test", "monitoring", "tools/connect", "tools/change", "appearance"]) {
+for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "updates/check", "retention", "storage", "storage/clean", "storage/discard", "storage/check", "pull-requests", "pull-requests/check", "checks", "backups/now", "backups", "data", "integrations/test", "monitoring", "tools/connect", "tools/change", "appearance"]) {
     post(one === "sessions" ? "people" : "settings", `settings.${one.replaceAll("/", "-")}-send`, `/settings/${one}`, { ...(["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "retention", "storage", "storage/clean", "storage/discard", "pull-requests", "checks", "backups", "data", "monitoring", "tools/connect", "tools/change"].includes(one) ? { scope: "step-up" } : {}), ...SETTINGS_ACT_ROLES[one] });
 }
 post("settings", "settings.flows-on", "/settings/flows/on", { limited: "collection", ...approver("An approver switches starter flows on.", "/settings/flows") });
@@ -330,6 +340,9 @@ post("settings", "settings.knowledge-proposal", "/settings/knowledge/proposal",
 post("settings", "settings.knowledge-decision", "/settings/knowledge/decision", { project: "form", ...approver("Sign in as an approver to change project decisions.", "/settings/knowledge") });
 post("settings", "settings.knowledge-change", "/settings/knowledge/change", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to change project knowledge.", "/settings/knowledge") });
 post("settings", "settings.learning-change", "/settings/learning/change", { project: "form", limited: "unscoped" });
+// A page shows the last check; these ask again (docs/plans/get-side-effects.md).
+post("settings", "control.models-refresh", "/control/models-refresh", anyApprover("Project setup requires an approver."));
+post("settings", "settings.connection-check", "/settings/connection/check", anyApprover("An approver checks a sign-in.", "/settings"));
 for (const one of ["setup-preview", "setup-approve", "instructions-preview", "instructions-approve"])
     post("settings", `control.${one}`, `/control/${one}`, { ...(one.endsWith("approve") ? { scope: "step-up" } : {}) });
 for (const [service, name] of [["slack", "Slack"], ["teams", "Teams"], ["discord", "Discord"]]) {
@@ -344,6 +357,7 @@ post("settings", "settings.telegram-unpair", "/settings/telegram/unpair", { limi
 for (const one of ["messaging", "permission-default", "quality-default", "notifications", "notifications/mute", "telegram-digest", "provider-key", "provider-key-clear", "telegram-token", "email", "email-test", "email-read-test", "google", "google/disconnect"]) {
     post("settings", `settings.${one.replaceAll("/", "-")}-send`, `/settings/${one}`);
 }
+post("pages", "projects.github-list", "/projects/github", { callers: ["cookie"], ...anyApprover("your login can watch — adding projects is an approver's act") });
 post("pages", "projects.select", "/projects/select", { project: "form-path", limited: "unscoped", viewer: true });
 post("pages", "projects.remove", "/projects/remove", { project: "form", ...operator("An instance operator removes projects.", "/settings/project") });
 post("pages", "projects.open", "/projects/open", { project: "form-path" });
@@ -393,6 +407,9 @@ post("pages", "projects.onboard-preview", "/projects/onboard-preview", { project
 post("pages", "projects.onboard-confirm", "/projects/onboard-confirm", { scope: "step-up", project: "none" });
 post("chat", "push.subscribe", "/push/subscribe", { scope: "step-up" });
 post("chat", "push.remove", "/push/remove");
+// Ask this computer's agent CLIs again (docs/plans/get-side-effects.md): Chat's first run and Settings → Lead's Check
+// now. GET /lead/status only reads the last answer.
+post("chat", "lead.check", "/lead/check", { callers: ["cookie"] });
 post("chat", "onboarding.phone-dismiss", "/onboarding/phone/dismiss", approver("An approver puts this away.", "/chat"));
 const LEAD_WORDS = { identity: "An approver names their lead.", about: "An approver edits what their lead knows about them.", "promise/cancel": "An approver manages the lead's promises.", on: "An approver turns the lead on." };
 for (const one of ["identity", "about", "promise/cancel", "on"])

package/dist/server/runtime.d.ts

@@ -146,7 +146,7 @@ export interface ServerRuntime {
         via: "cookie";
     }, principal: VerifiedApprover, enabled: Extract<ChatEnablement, {
         ok: true;
-    }>, ceilingUsd: number, follow: boolean, now: Date) => number;
+    }>, ceilingUsd: number, follow: boolean, now: Date, scope?: LeadThreadScope, request?: string) => number;
     projectFamilyPeek: (repo: string, now: Date) => ProjectPeek;
     needsYouBadge: (project: string | null) => {
         count: number;
@@ -158,6 +158,8 @@ export interface ServerRuntime {
         source: "environment" | "stored";
     } | null;
     chatCatalog: () => Promise<import("../converse.js").CatalogModel[] | null>;
+    /** The catalog as last fetched: what a page shows. A page never fetches. */
+    chatCatalogKnown: () => import("../converse.js").CatalogModel[] | null;
     leadRecheckedAt: number;
     checkLocalAgents: (fresh?: boolean) => Promise<void>;
     localSignIn: {
@@ -167,7 +169,18 @@ export interface ServerRuntime {
     } | null;
     agentSignInCommand: () => string;
     connectionCheck: (provider: ProviderId, fresh?: boolean) => Promise<ProviderConnection>;
-    modelCatalog: (key: string | null, refresh?: boolean) => Promise<OpenRouterModels>;
+    /** What the last sign-in check said: what a page shows. A page never checks (docs/plans/get-side-effects.md). */
+    connectionKnown: (provider: ProviderId) => ProviderConnection | null;
+    /** The last answer of each other check a page shows; a page only reads it. */
+    lastChecks: import("./last-checks.js").LastChecks;
+    checkRelease: () => Promise<{
+        version: string;
+    } | {
+        problem: string;
+    }>;
+    modelCatalog: ((key: string | null, refresh?: boolean) => Promise<OpenRouterModels>) & {
+        known: (key: string | null) => OpenRouterModels | null;
+    };
     modelSeams: CatalogSeams;
     toolsViewOf: (repo: string, codex: unknown[] | null, kit?: string | null, wanted?: string | null) => ToolsView;
     codexServers: (repo: string) => Promise<unknown[] | null>;
@@ -209,6 +222,8 @@ export interface ServerRuntime {
         provider: OidcProvider;
         at: number;
     } | null;
+    /** The identity provider as last discovered; a page never discovers it. */
+    providerKnown: (issuer: string) => import("../oidc.js").OidcProvider | null;
     providerFor: (issuer: string) => Promise<{
         ok: true;
         provider: OidcProvider;

package/dist/server/settings.js

@@ -63,7 +63,7 @@ import { starterOf, startersFor, switchOnStarter } from "../flow-starters.js";
 import { disconnectGoogle, googleConnected, googleConsent, readGoogleMail, saveGoogleClient } from "../google-mail.js";
 import { integrationsHtml } from "../integrations-ui.js";
 import { clearProviderKey, keyStatus, plausibleKey, PROVIDER_KEY_ENV, readAuthMode, readProviderKey, saveProviderKey, setAuthMode, SUBSCRIPTION_CAPABLE, verdictWords, verifyProviderKey } from "../keys.js";
-import { decisionsHtml, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml } from "../knowledge-ui.js";
+import { decisionsHtml, framedSection, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml } from "../knowledge-ui.js";
 import { aboutYouOf, checkAboutYou, saveAboutYou } from "../lead-about.js";
 import { cancelCommitment, conditionWords, openCommitments } from '../lead-commitments.js';
 import { checkLeadIdentity, leadIdentityOf } from "../lead-identity.js";
@@ -122,14 +122,14 @@ import { teamsSettingsHtml } from "../teams-settings.js";
 import { telegramSettingsHtml } from "../telegram-settings.js";
 import { hashPairingCode, loadBotToken, mintPairingCode, PAIRING_TTL_MS, redactToken, saveBotToken } from "../telegram.js";
 import { newerThan, updatesHtml, updatesScript, updateStepsHtml } from "../toolroll-update-ui.js";
-import { abandonRuntimeUpdate, currentRuntime, launchRuntimeUpdate, markWhatsNewSeen, prepareRuntimeUpdate, releaseStalledUpdate, requestRuntimeUpdateCancel, runningWorkWords, runtimeUpdateStatus, runtimeUpdateTerminal } from "../toolroll-update.js";
+import { abandonRuntimeUpdate, currentRuntime, launchRuntimeUpdate, markWhatsNewSeen, prepareRuntimeUpdate, requestRuntimeUpdateCancel, runningWorkWords, runtimeUpdateStatus, runtimeUpdateTerminal } from "../toolroll-update.js";
 import { TOOLS_PROJECT_SCRIPT, toolsHtml, toolsProjectPicker } from "../tools-ui.js";
 import { effectivePrimary, isMessagingChannel, savePrimary } from "../webhooks.js";
 import { personChip, ROLE_TITLES } from "./chrome.js";
 import { chatReturnWithSaid, goOutside } from "./http.js";
-import { latestReleaseFor, leadSettingsHtml, notificationProjects, SETTINGS_AUTOSAVE_SCRIPT, settingsPage, settingsWorkers, telegramDeliveryWords, telegramTrouble } from "./render-settings.js";
+import { leadSettingsHtml, notificationProjects, SETTINGS_AUTOSAVE_SCRIPT, settingsPage, settingsWorkers, telegramDeliveryWords, telegramTrouble } from "./render-settings.js";
 export function createSettingsHandlers(runtime) {
-    const { store, providerHome, managedRepos, consoleProjects, sendScreen, chromeFor, connectionCheck, clock, modelCatalog, modelSeams, toolsViewOf, codexServers, projectViewOf, sessions, restricted, options, integrations, consoleOrigin, evidenceRoot, storagePool, visible, ssoSettings, checkLocalAgents, chatKeyFor, chatCatalog, leadWords, agentSignInCommand, settingsUpdates, phoneSetup, authenticateApprover, authenticateCredential, deletedRepos, projectOf, providerFor, admissionList, toolHome, connectVisits, mintApprovalNonce, consumeApprovalNonce, defaultProject, googleVisits } = runtime;
+    const { store, providerHome, managedRepos, consoleProjects, sendScreen, chromeFor, connectionCheck, connectionKnown, lastChecks, checkRelease, clock, modelCatalog, modelSeams, toolsViewOf, codexServers, projectViewOf, sessions, restricted, options, integrations, consoleOrigin, evidenceRoot, storagePool, visible, ssoSettings, checkLocalAgents, chatKeyFor, chatCatalog, chatCatalogKnown, leadWords, agentSignInCommand, settingsUpdates, phoneSetup, authenticateApprover, authenticateCredential, deletedRepos, projectOf, providerFor, admissionList, toolHome, connectVisits, mintApprovalNonce, consumeApprovalNonce, defaultProject, googleVisits } = runtime;
     // v105: what agent work cost, by month, and the monthly budgets. An instance operator's page.
     async function spendPage(ctx) {
         const { url, who, response, now } = ctx;
@@ -225,10 +225,11 @@ ${hasGrant ? "" : html `<span class="meta">self-merging needs a merge-capable pu
         if (!isProviderId(asked))
             return refuse(response, who, 400, "Choose a known provider.", "/control");
         const task = url.searchParams.get("task") ?? "";
-        const connection = await connectionCheck(asked, url.searchParams.get("check-connection") === "1");
+        // The last sign-in check: Check again posts (docs/plans/get-side-effects.md).
+        const connection = connectionKnown(asked);
         if (view === "connection") {
             const command = asked === "claude" ? "claude auth login" : asked === "codex" ? "codex login" : asked === "gemini" ? "gemini" : null;
-            return sendScreen(response, 200, screen(`${ASSISTANTS[asked].name} connection`, html `<h1>${ASSISTANTS[asked].name} ${connection.state === "connected" ? "is connected" : "connection"}</h1>\
+            return sendScreen(response, 200, screen(`${ASSISTANTS[asked].name} connection`, html `<h1>${ASSISTANTS[asked].name} ${connection?.state === "connected" ? "is connected" : "connection"}</h1>\
 ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On the computer running Toolroll, sign in with:</p><pre class="recap">${command}</pre>`}\
 <p><a href="/settings#providers">Manage API keys and authentication mode</a></p><input type="hidden" name="resume-task" value="${task}">`, { chrome: chromeFor(project, "settings") }));
         }
@@ -241,20 +242,61 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const models = live.length === 0 ? modelChoices(asked, configured, providerHome)
             : configured && !live.some(one => one.value === configured) ? [{ value: configured, label: `${configured} — current choice` }, ...live] : live;
         const instructions = previewProjectInstructions(project);
-        const catalog = asked === "openrouter" ? await modelCatalog(readProviderKey("openrouter", providerHome), url.searchParams.get("refresh-models") === "1") : null;
+        // The model list as last loaded; Refresh models posts, and the background checks keep it current.
+        const catalog = asked === "openrouter" ? modelCatalog.known(readProviderKey("openrouter", providerHome)) ?? { ok: false, problem: "The model list has not loaded yet." } : null;
         const inputs = { provider: asked, model: saved?.provider === asked ? saved.model ?? "" : models[0]?.value ?? "", command: setup?.command ?? (saved === null ? preparation?.command ?? "" : ""), seconds: String((setup?.timeoutMs ?? 300_000) / 1000) };
         return sendScreen(response, 200, screen("Project setup", controlSetupHtml({ repo: project, csrf: who.via === "cookie" ? who.session.csrf : "", provider: asked, inputs, models, connection, catalog, task, preparation,
             instructions: instructions.ok ? { installed: instructions.installed } : { installed: false, message: instructions.message } }), { chrome: chromeFor(project, "settings"), ...(catalog === null ? {} : { functional: { script: openRouterPickerScript() } }) }));
     };
+    // Settings → Projects → Pull requests → Check setup: git and GitHub, for one project, by an approver who may turn it on.
+    async function pullRequestsCheck(ctx) {
+        const { who, response, posted } = ctx;
+        const repo = readForm(posted, CONSOLE_FORMS.pullRequestsCheck).get("repo") ?? "";
+        const known = [...new Set([...managedRepos(), ...store.knownRepos(), ...store.listProjects().map(one => one.path)])];
+        if (who.via !== "cookie" || !known.includes(repo) || !visible(repo))
+            return refuse(response, who, 404, "No such project.", "/projects");
+        if (who.role !== "approver" || store.isDemo())
+            return refuse(response, who, 403, "An approver can turn on pull requests.", "/projects");
+        await lastChecks.run(`publishing:${repo}`, () => checkPublishing(repo, options.publishExec === undefined ? {} : { exec: options.publishExec }));
+        return redirect(response, `/settings/pull-requests?repo=${encodeURIComponent(repo)}`);
+    }
+    // Settings → Storage → Check now: measure the checkouts again.
+    async function storageCheck(ctx) {
+        const databaseFile = store.databaseFile();
+        if (databaseFile !== null)
+            await measureStorage(databaseFile);
+        return redirect(ctx.response, "/settings/storage");
+    }
+    const measureStorage = (databaseFile) => lastChecks.run("storage", () => checkoutPlan(store, storagePool(databaseFile), clock(), { manual: true }));
+    // Settings → Updates → Check now: ask npm once, whether or not automatic checks are on.
+    async function updatesCheck(ctx) {
+        await checkRelease();
+        return redirect(ctx.response, "/settings/updates");
+    }
+    // Check again (Settings → providers, Project setup): ask this computer's CLI, or test the saved key, now.
+    async function connectionCheckNow(ctx) {
+        const { response, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.connectionCheck);
+        const provider = body.get("provider") ?? "";
+        const back = safeReturn(body.get("return") ?? "/settings#providers");
+        if (!isProviderId(provider))
+            return redirect(response, back);
+        await connectionCheck(provider, true).catch(() => undefined);
+        return redirect(response, back);
+    }
+    // Refresh models (Project setup, OpenRouter): load the list again, then show the setup page with it.
+    async function modelsRefresh(ctx) {
+        const { response, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.modelsRefresh);
+        await modelCatalog(readProviderKey("openrouter", providerHome), true);
+        const query = new URLSearchParams({ provider: "openrouter", ...(body.get("task") ? { task: body.get("task") } : {}) });
+        return redirect(response, `/control?${query.toString()}`);
+    }
     async function modelsPage(ctx) {
         const { url, who, response, project } = ctx;
         const now = clock();
-        const watch = watchState(store);
-        // Opening the page refreshes a stale snapshot; the lists are public and
-        // the check sends nothing about the person or their projects.
-        if (who.role === "approver" && (watch.checkedAt === null || now.getTime() - Date.parse(watch.checkedAt) > 3_600_000)) {
-            await checkModels(store, now, modelSeams).catch(() => undefined);
-        }
+        // The page shows the last check and when it ran (docs/plans/get-side-effects.md): Check now, or the watch loop's
+        // automatic checks, fetch the lists and may queue a notice; opening the page never does.
         const view = modelsView(who.role === "approver", who.via === "cookie" ? who.session.csrf : "", now, url.searchParams.get("said"), url.searchParams.get("problem"));
         return sendScreen(response, 200, screen("Models", html `<p><a href="/settings">Settings</a></p><h1>Models</h1>${modelsHtml(view)}`, { chrome: chromeFor(project, "settings"), functional: { script: modelsScript() } }));
     }
@@ -290,7 +332,8 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         if (chosen) {
             try {
                 const approver = who.role === "approver" && who.via === "cookie";
-                const view = toolsViewOf(chosen, approver ? await codexServers(chosen) : null, kit, wanted);
+                // What Codex had configured at the last background check (docs/plans/get-side-effects.md): the page starts no codex.
+                const view = toolsViewOf(chosen, approver ? lastChecks.known(`codex-tools:${chosen}`)?.value ?? null : null, kit, wanted);
                 if (approver)
                     view.others = projects.filter(one => one !== chosen).map(one => ({ repo: one, project: projectName(one), open: connectionsOf(store, one).filter(c => c.state === "open").map(c => c.id) }));
                 content = (toolsHtml(view, who.via === "cookie" ? who.session.csrf : "", approver, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }));
@@ -376,19 +419,16 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const databaseFile = store.databaseFile();
         if (databaseFile === null)
             return refuse(response, who, 403, "An instance operator updates Toolroll.", "/settings");
-        // A record it cannot release is shown as it is; the page never fails over it.
-        try {
-            releaseStalledUpdate(dirname(databaseFile), clock());
-        }
-        catch { /* shown as last saved */ }
+        // A stalled update is released by the background pass, never by opening this page (docs/plans/get-side-effects.md).
         const status = runtimeUpdateStatus(dirname(databaseFile));
         if (url.searchParams.get("fragment") === "steps")
             return respond(response, 200, "text/html; charset=utf-8", status.journal ? updateStepsHtml(status.journal, status.running) : html `<div id="update-live" data-done="1"></div>`);
         const active = status.journal !== null && !runtimeUpdateTerminal(status.journal.phase);
         const current = options.updates?.current ?? PACKAGE_VERSION;
-        // While update checks are off the page asks npm nothing until Check now.
-        const checksOff = updateChecksOff(process.env, options.configDir ?? dirname(databaseFile)).off && url.searchParams.get("check") !== "now";
-        const view = { current, latest: active ? { version: current } : checksOff ? { off: true } : await latestReleaseFor(options.updates?.latest), method: options.updates?.method ?? installMethod(), journal: status.journal, running: status.running, whatsNew: status.whatsNew, rollbackTo: status.lastUpdate?.to === current ? status.lastUpdate.from : null, csrf: who.session.csrf };
+        // The last answer npm gave (the background checks ask while update checks are on; Check now asks once).
+        const checksOff = updateChecksOff(process.env, options.configDir ?? dirname(databaseFile)).off;
+        const known = lastChecks.known("release")?.value ?? null;
+        const view = { current, latest: active ? { version: current } : known ?? (checksOff ? { off: true } : { pending: true }), method: options.updates?.method ?? installMethod(), journal: status.journal, running: status.running, whatsNew: status.whatsNew, rollbackTo: status.lastUpdate?.to === current ? status.lastUpdate.from : null, csrf: who.session.csrf };
         return sendScreen(response, 200, screen("Updates", html `<p><a href="/settings">Settings</a></p><h1>Updates</h1>${(updatesHtml(view, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }))}`, { chrome: chromeFor(project, "settings"), ...(active ? { functional: { script: updatesScript(), fetches: true } } : {}) }));
     }
     // v105: Settings → Retention, how long each kind of data is kept. An instance operator's page.
@@ -406,9 +446,16 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const databaseFile = store.databaseFile();
         if (databaseFile === null)
             return refuse(response, who, 403, "An instance operator looks after storage.", "/settings");
-        const plan = await checkoutPlan(store, storagePool(databaseFile), now, { manual: true });
+        // The last measurement (docs/plans/get-side-effects.md): the background checks measure the checkouts, and so do
+        // Check now and every clean-up; opening the page runs no du or git.
+        const measured = lastChecks.known("storage");
+        const check = postForm("/settings/storage/check", html `<button type="submit" class="secondary">Check now</button>`, { attrs: { class: "inline" } });
+        if (measured === null) {
+            return sendScreen(response, 200, screen("Storage", html `<p><a href="/settings">Settings</a></p><h1>Storage</h1><section class="storage"><div class="card storage-state"><h2>Checkouts not measured yet</h2>${check}</div></section>`, { chrome: chromeFor(project, "settings") }));
+        }
+        const plan = { ...measured.value, cleanup: store.checkoutCleanup() };
         const sweep = { last: lastSweep(store), off: storageSweepOff(), schedule: sweepSchedule(store, now) };
-        return sendScreen(response, 200, screen("Storage", html `<p><a href="/settings">Settings</a></p><h1>Storage</h1>${(storageHtml({ plan, csrf: who.session.csrf, sweep, landed: landedSummary(store) }, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }))}`, { chrome: chromeFor(project, "settings") }));
+        return sendScreen(response, 200, screen("Storage", html `<p><a href="/settings">Settings</a></p><h1>Storage</h1>${(storageHtml({ plan, csrf: who.session.csrf, sweep, landed: landedSummary(store), measured: html `<p class="meta">Measured ${new Date(measured.at).toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit" })} ${check}</p>` }, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }))}`, { chrome: chromeFor(project, "settings") }));
     }
     // Settings → Projects → Pull requests: one project's setup. Off, the checks run on open, so the page says
     // exactly what turning on would do, or what to fix first.
@@ -420,7 +467,8 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
             return refuse(response, who, 404, "No such project.", "/projects");
         const publishing = publishingOf(store, repo);
         const canChange = who.role === "approver" && !store.isDemo();
-        const check = publishing.on || !canChange ? null : await checkPublishing(repo, options.publishExec === undefined ? {} : { exec: options.publishExec });
+        // The last setup check for this project (Check setup posts); opening the page asks git and GitHub nothing.
+        const check = publishing.on || !canChange ? null : lastChecks.known(`publishing:${repo}`)?.value ?? "unchecked";
         const body = (pullRequestSettingsHtml({ repo, name: projectName(repo), csrf: who.session.csrf, canChange, publishing, check,
             said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }));
         return sendScreen(response, 200, screen("Pull requests", html `<p><a href="/projects">Projects</a></p><h1>Pull requests</h1>${body}`, { chrome: chromeFor(project, "projects") }));
@@ -508,7 +556,7 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const chosen = url.searchParams.get("repo") ?? project ?? projects[0] ?? "";
         if (chosen && (!projects.includes(chosen) || !visible(chosen)))
             return refuse(response, who, 403, "That project is outside your access.", "/settings/knowledge");
-        const selector = projects.length > 1 ? html `<form class="knowledge" method="get" action="/settings/knowledge"><label>Project<select name="repo">${projects.map(p => html `<option value="${p}"${p === chosen ? ' selected' : ''}>${p.split('/').at(-1) ?? p}</option>`)}</select></label><button>Show project</button></form>` : '';
+        const selector = projects.length > 1 ? framedSection('Project', html `<form class="field-row" method="get" action="/settings/knowledge"><label><span class="visually-hidden">Project</span><select name="repo">${projects.map(p => html `<option value="${p}"${p === chosen ? ' selected' : ''}>${p.split('/').at(-1) ?? p}</option>`)}</select></label><button>Show project</button></form>`) : '';
         let content = html `<p>Add a project to keep its knowledge here.</p>`;
         if (chosen) {
             try {
@@ -533,7 +581,7 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
                 }
                 content = html `<p class="meta">${MEMORY_INTRO}</p>${memorySearchHtml(chosen, memoryQuery, hits)}${proposals}${(decisionsHtml(chosen, listDecisions(store, chosen, who.name, { limit: 50 }), csrf, who.role === 'approver'))}\
 ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf : '')}${knowledgeHtml(view, csrf, who.role === 'approver')}\
-<details class="knowledge"><summary>Learned lessons</summary>${(learningHtml(learningView(store, evidenceRoot, chosen, who.name), csrf, who.role === 'approver'))}</details>`;
+<details class="knowledge frame"><summary class="frame-head">Learned lessons</summary><div class="frame-panel">${(learningHtml(learningView(store, evidenceRoot, chosen, who.name), csrf, who.role === 'approver'))}</div></details>`;
             }
             catch {
                 content = html `<p class="problem" role="alert">Project knowledge is unavailable. Reload to retry.</p>`;
@@ -563,15 +611,13 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
     async function leadPage(ctx) {
         const { url, response, now, project } = ctx;
         const who = browserCaller(ctx.who);
-        if (runtime.localSignIn === null)
-            await Promise.race([checkLocalAgents(), new Promise(done => setTimeout(done, 6_000).unref?.())]);
         const config = store.getChatConfig();
         const facts = {
             keyFacts: ["anthropic-api", "openrouter-api"].map(one => {
                 const found = chatKeyFor(one);
                 return { provider: one, state: found === null ? "none" : found.source, tail: found === null || found.source === "environment" ? null : redactToken(found.key) };
             }),
-            openrouterModels: (await chatCatalog())?.map(one => one.id) ?? null,
+            openrouterModels: chatCatalogKnown()?.map(one => one.id) ?? null,
             liveModels: [...modelOptions(store, "claude", now, providerHome), ...modelOptions(store, "codex", now, providerHome)],
             csrf: who.session.csrf,
             returnTo: "/settings/lead",
@@ -646,7 +692,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
                 provider,
                 envName: PROVIDER_KEY_ENV[provider],
                 ...keyStatus(provider, providerHome),
-                connection: await connectionCheck(provider, url.searchParams.get("check-connection") === provider),
+                ...(connectionKnown(provider) === null ? {} : { connection: connectionKnown(provider) }),
                 ambient: (process.env[PROVIDER_KEY_ENV[provider]] ?? "") !== "",
                 mode: readAuthMode(provider, providerHome) === "api-key" ? "api-key" : "subscription",
                 subscriptionCapable: SUBSCRIPTION_CAPABLE[provider],
@@ -1114,7 +1160,9 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const databaseFile = store.databaseFile();
         if (databaseFile === null)
             return refuse(response, who, 403, "An instance operator looks after storage.", "/settings");
-        const back = sayTo(response, "/settings/storage");
+        // What the page shows next is measured again after the change.
+        const said = sayTo(response, "/settings/storage");
+        const back = async (kind, words) => { await measureStorage(databaseFile).catch(() => undefined); return said(kind, words); };
         const what = op === "clean" ? "clean up" : op === "discard" ? "discard a checkout" : "change checkout cleanup";
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", `Enter your Toolroll password to ${what}.`);
@@ -2468,6 +2516,11 @@ ${modeWords(terms)
         "mode": modePage,
         "control": controlPage("setup"),
         "control.connection": controlPage("connection"),
+        "settings.updates-check-send": updatesCheck,
+        "settings.storage-check-send": storageCheck,
+        "settings.pull-requests-check-send": pullRequestsCheck,
+        "settings.connection-check": connectionCheckNow,
+        "control.models-refresh": modelsRefresh,
         "settings.models": modelsPage,
         "settings.tools": toolsPage,
         "settings.project": projectPage,

package/dist/server/task-views.js

@@ -487,7 +487,6 @@ export function createTaskViews(runtime) {
             coordinatorProposals: (() => {
                 if (ref === null || ref.repo === null || who.role !== "approver")
                     return null;
-                runtime.store.sweepCoordinatorProposals(now);
                 const rows = runtime.store.listCoordinatorProposals({ repos: [ref.repo], taskId });
                 return { rows, decisions: decisionsFor(runtime.store, rows), now };
             })(),
@@ -779,7 +778,7 @@ export function createTaskViews(runtime) {
             return runtime.sendScreen(response, status, screen(admittedFamily.root.title, html `<h1>${admittedFamily.root.title}</h1><p>${admittedFamily.current.state}</p><p class="problem" data-history-problem>${admittedFamily.problem}</p>`, { chrome: runtime.chromeFor(admittedFamily.root.repo, "tasks") }));
         const data = taskViewData(taskId, who, problem);
         if (data === null)
-            return refuse(response, who, 404, "no such task", "/tasks");
+            return refuse(response, who, 404, "no such task", "/work");
         const family = runtime.familyOf(taskId);
         const presentedData = { ...data, rootId: family?.root.id ?? taskId, rootTitle: family?.root.title ?? data.task.title,
             ...(family === null || data.assignment != null ? {} : { history: familyHistory(family) }),