toolroll 0.9.74 → 0.9.75

package/dist/server/pages.js

@@ -28,6 +28,7 @@ import { agentLanesOf, agentRowOf, agentsBoardOf, agentFactsFor, laneWindowOf, s
 import { markAgentSeen } from "../agent-board.js";
 import { agentsLiveOf } from "../agents-live.js";
 import { readChildWindow } from "../live-children-read.js";
+import { leadFiledLinks } from "./agents-live-filed.js";
 import { readMainWindow } from "../live-main-read.js";
 import { runLiveCommands } from "../store.js";
 import { prometheusMetrics } from "../metrics.js";
@@ -53,7 +54,7 @@ import { decisionAnswerScript, taskBody } from "./render-tasks.js";
 import {} from "./session.js";
 import { rereadBrowser } from "./live.js";
 export function createPagesHandlers(runtime) {
-    const { clock, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
+    const { clock, lastChecks, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
     // The filesystem browser (operator request): pick a project folder by
     // looking, not typing. CONFINED to exactly what opening allows —
     // explicit --repo mode has an enumerable list and gets no browser at
@@ -123,7 +124,8 @@ export function createPagesHandlers(runtime) {
         const { who, response } = ctx;
         if (store.isDemo())
             return refuse(response, who, 403, "the sandbox never talks to GitHub");
-        const listed = await (options.ghList ?? listGithubRepos)();
+        // The last listing (docs/plans/get-side-effects.md): List repositories posts; opening the page asks GitHub nothing.
+        const listed = lastChecks.known("github-repos")?.value ?? null;
         // What this machine already has, matched by the clone's own recorded
         // origin — registered projects first, then the immediate children of
         // the configured roots. Identities are compared case-insensitively
@@ -142,7 +144,7 @@ export function createPagesHandlers(runtime) {
         // Roots are walked ONLY when there are listed repos to match against
         // (finding 1), through an iterator that stops at 400 entries — a
         // directory with a million children costs 400 stats, not a scan.
-        if (listed.ok && listed.repos.length > 0) {
+        if (listed !== null && listed.ok && listed.repos.length > 0) {
             for (const root of ceiling.roots) {
                 const children = [];
                 try {
@@ -182,6 +184,14 @@ export function createPagesHandlers(runtime) {
             openProject: who.via === "cookie" ? who.session.project ?? null : null,
         }));
     }
+    // List repositories / Refresh list: ask the GitHub CLI signed in on this machine, then show the page.
+    async function projectsGithubList(ctx) {
+        const { who, response } = ctx;
+        if (store.isDemo())
+            return refuse(response, who, 403, "the sandbox never talks to GitHub");
+        await lastChecks.run("github-repos", () => (options.ghList ?? listGithubRepos)());
+        return redirect(response, "/projects/github");
+    }
     async function projectsIndex(ctx) {
         const { url, who, response } = ctx;
         return void projectsScreen(response, who, url.searchParams.get("said"), 200, safeReturn(url.searchParams.get("return")));
@@ -1027,7 +1037,10 @@ export function createPagesHandlers(runtime) {
         if (again === null)
             return respond(response, 401, "application/json", JSON.stringify({ error: "session" }));
         const shown = tiles.filter(tile => { const run = store.getRun(tile.runId); return run !== null && canSee(run); });
-        return respond(response, 200, "application/json", JSON.stringify({ tiles: shown, leads: leadsStillAdmitted(runtime, again, leads) }));
+        // Work the viewer's own lead filed nests under it (docs/plans/lead-dispatched-tiles.md): proved from the store now,
+        // for the tiles already shown, and only ever for their owner.
+        const filed = again.role === "approver" ? leadFiledLinks(store, again.name, shown.map(tile => tile.runId)) : new Map();
+        return respond(response, 200, "application/json", JSON.stringify({ tiles: shown.map(tile => ({ ...tile, filedBy: filed.get(tile.runId) ?? null })), leads: leadsStillAdmitted(runtime, again, leads) }));
     }
     /** This console's key for the Live grid's read cursors: random, in memory only (never where a build can reach), so a
      * restart makes old cursors start over visibly. A cursor is state, never permission. */
@@ -1070,6 +1083,7 @@ export function createPagesHandlers(runtime) {
     const registrations = handlersOf("pages", {
         "projects.browse": projectsBrowse,
         "projects.github": projectsGithub,
+        "projects.github-list": projectsGithubList,
         "projects.page": projectsIndex,
         "home": homeRedirect,
         "morning": morningAlias,

package/dist/server/people-tokens.js

@@ -39,7 +39,7 @@ export function sameVisitCheck(authTime, startedAt, now) {
     return Math.min(Math.max(at, startedAt), now);
 }
 export function createPeopleHandlers(runtime) {
-    const { joinBySource, ssoOffer, ssoVisits, ssoSettings, options, clock, ssoHandoffs, managedRepos, store, visible, admissionList, sendScreen, chromeFor, restricted, sessions, consoleProjects, authenticateApprover, authenticateCredential, bustBadge, projectOf, signInLinks, linkKey, fromThisComputer, recordSignIn, passwordAllowed, arrival, defaultProject, cookieSecure, consoleOrigin, providerFor, joinSourceOf, signInBudget, signInActor, minutesWords } = runtime;
+    const { joinBySource, ssoOffer, ssoVisits, ssoSettings, options, clock, ssoHandoffs, managedRepos, store, visible, admissionList, sendScreen, chromeFor, restricted, sessions, consoleProjects, authenticateApprover, authenticateCredential, bustBadge, projectOf, signInLinks, linkKey, fromThisComputer, recordSignIn, passwordAllowed, arrival, defaultProject, cookieSecure, consoleOrigin, providerFor, providerKnown, joinSourceOf, signInBudget, signInActor, minutesWords } = runtime;
     // v101: Settings → Sessions & tokens: where you're signed in, and your API tokens. An instance operator can see everyone's.
     async function sessionsPage(ctx) {
         const { url, who, response, project } = ctx;
@@ -353,9 +353,12 @@ ${reauth(html `<label>Password <input type="password" name="token" autocomplete=
         const origin = consoleOrigin(request.headers.host);
         if (origin === null)
             return page(response, 400, loginPage("Sign in from this computer (localhost) or from your https address.", returnTo, ssoOffer()));
-        const found = await providerFor(settings.issuer);
-        if (!found.ok)
-            return page(response, 502, loginPage(`${settings.label} isn't answering: ${found.said}`, returnTo, ssoOffer()));
+        // Discovered as the console starts and in the background (docs/plans/get-side-effects.md): following this link
+        // fetches nothing.
+        const known = providerKnown(settings.issuer);
+        if (known === null)
+            return page(response, 503, loginPage(`${settings.label} isn't answering yet. Try again in a moment.`, returnTo, ssoOffer()));
+        const found = { provider: known };
         const visit = newOidcVisit(), redirectUri = `${origin}${SSO_CALLBACK}`;
         for (const [key, one] of ssoVisits)
             if (one.expires < Date.now())

package/dist/server/render-pages.d.ts

@@ -442,7 +442,8 @@ export declare function originUrlOf(repoPath: string): string | null;
  * action each. Names, descriptions, and paths are gh/filesystem DATA —
  * escaped at the sink like everything else. */
 export declare function githubReposPage(chrome: Chrome, data: {
-    listed: ListOutcome;
+    /** The last listing; null until someone lists (a POST: listing asks GitHub, so a page visit never does). */
+    listed: ListOutcome | null;
     local: Map<string, string>;
     registered: Set<string>;
     /** Unused: postForm adds the request's CSRF field. Kept for callers. */

package/dist/server/render-pages.js

@@ -925,34 +925,38 @@ export function originUrlOf(repoPath) {
 export function githubReposPage(chrome, data) {
     const openForm = (path, label) => postForm("/projects/open", html `<button type="submit">${label}</button>`, { attrs: { class: "inline" }, hidden: { path } });
     const cloneForm = (nameWithOwner) => postForm("/projects/onboard-preview", html `<button type="submit">Clone here →</button>`, { attrs: { class: "inline" }, hidden: { repo: nameWithOwner, root: "0" } });
-    const rows = !data.listed.ok
-        ? html `<p class="meta">${data.listed.message}</p>`
-        : data.listed.repos.length === 0
-            ? html `<p class="meta">The signed-in GitHub account has no repositories to list</p>`
-            : joinHtml(data.listed.repos.map(repo => {
-                const localPath = data.local.get(repo.nameWithOwner.toLowerCase()) ?? null;
-                const action = localPath !== null && data.openProject === localPath
-                    ? html `<span class="badge badge-done">Open now</span>`
-                    : localPath !== null
-                        ? openForm(localPath, data.registered.has(localPath) ? "open →" : "add + open →")
-                        : data.cloneReady
-                            ? cloneForm(repo.nameWithOwner)
-                            : html `<span class="meta">choose a projects folder first</span>`;
-                return joinHtml([
-                    html `<div class="card project-card">`,
-                    html `<div class="row"><strong>${repo.nameWithOwner}</strong>${repo.isPrivate ? html ` <span class="badge">Private</span>` : null}`,
-                    html `<span class="right">${action}</span></div>`,
-                    localPath === null
-                        ? html `<p class="meta">Not on this machine yet${/^\d{4}-\d{2}-\d{2}T/.test(repo.updatedAt) ? html ` · pushed ${whenTime(repo.updatedAt)}` : null}</p>`
-                        : html `<p class="meta mono" style="overflow-wrap:anywhere;margin:.2rem 0">${localPath}</p>`,
-                    repo.description === "" ? null : html `<p class="meta">${repo.description}</p>`,
-                    html `</div>`,
-                ], "\n");
-            }), "\n");
+    const list = (label) => postForm("/projects/github", html `<button type="submit"${label === "Refresh list" ? html ` class="secondary"` : ""}>${label}</button>`, { attrs: { class: "inline" } });
+    const rows = data.listed === null
+        ? list("List repositories")
+        : !data.listed.ok
+            ? html `<p class="meta">${data.listed.message}</p>`
+            : data.listed.repos.length === 0
+                ? html `<p class="meta">The signed-in GitHub account has no repositories to list</p>`
+                : joinHtml(data.listed.repos.map(repo => {
+                    const localPath = data.local.get(repo.nameWithOwner.toLowerCase()) ?? null;
+                    const action = localPath !== null && data.openProject === localPath
+                        ? html `<span class="badge badge-done">Open now</span>`
+                        : localPath !== null
+                            ? openForm(localPath, data.registered.has(localPath) ? "open →" : "add + open →")
+                            : data.cloneReady
+                                ? cloneForm(repo.nameWithOwner)
+                                : html `<span class="meta">choose a projects folder first</span>`;
+                    return joinHtml([
+                        html `<div class="card project-card">`,
+                        html `<div class="row"><strong>${repo.nameWithOwner}</strong>${repo.isPrivate ? html ` <span class="badge">Private</span>` : null}`,
+                        html `<span class="right">${action}</span></div>`,
+                        localPath === null
+                            ? html `<p class="meta">Not on this machine yet${/^\d{4}-\d{2}-\d{2}T/.test(repo.updatedAt) ? html ` · pushed ${whenTime(repo.updatedAt)}` : null}</p>`
+                            : html `<p class="meta mono" style="overflow-wrap:anywhere;margin:.2rem 0">${localPath}</p>`,
+                        repo.description === "" ? null : html `<p class="meta">${repo.description}</p>`,
+                        html `</div>`,
+                    ], "\n");
+                }), "\n");
     return screen("projects", joinHtml([
         html `<h1>Your GitHub repositories</h1>`,
         html `<p class="meta">Repositories available to the GitHub account signed in on this machine — open one you already have, or clone a new one after a quick preview.</p>`,
         rows,
+        data.listed === null ? null : list("Refresh list"),
         html `<p class="row" style="margin-top:.6rem"><a class="badge" href="/projects">← back to projects</a></p>`,
     ], "\n"), { chrome });
 }

package/dist/server/render-results.d.ts

@@ -16,7 +16,7 @@ import { type BuildReviewView } from "../review-switch.js";
 import { type AcceptanceCriterion, type approvalOf } from "../scope.js";
 import { type ReportItem } from "../scout-report.js";
 import { type Artifact, type DiffComment, type Publication, type RepairChainRow, type ReviewRetryState, type Run, type Store, type TaskState } from "../store.js";
-import { type ReleaseState, type PullRequestFact, type TaskStatus } from "../task-status.js";
+import { type ChecksFact, type ReleaseState, type PullRequestFact, type TaskStatus } from "../task-status.js";
 import { type DisplayStatus, type PublicationFacts, type ReviewFacts } from "../workspace-ui.js";
 import { type Chrome, type Screen } from "./chrome.js";
 import { type Html } from "../html.js";
@@ -423,6 +423,9 @@ export type ProofBundleView = {
     repairChain: RepairChainRow | null;
     /** v51: the policy semantic coverage is read under. */
     qualityMode: "default" | "strict";
+    /** The saved approved check read now (task-status.ts approvedCheckOf), for a finished build; absent otherwise, and
+     * then no words here claim the check passed. */
+    checks?: ChecksFact | null;
 };
 /** The smallest complete answer to "what did this task deliver?". It is a
  * projection of the same sealed handoff, proof, screenshot, and diff records
@@ -471,6 +474,9 @@ export type CompletionReceiptView = {
     report: RunReportView | null;
     /** The facts every result surface prints identically (package 3). */
     facts: SharedResultFacts;
+    /** The saved approved check as read now (the receipt and any follow-up on the same commit), so the status words
+     * read the same answer as the Project checks row (task-status.ts approvedCheckOf). Absent on a scout's report. */
+    checks?: ChecksFact | null;
 };
 /** A scout run's report as this run stored it: verified and parsed, or
  * the reason it cannot be shown. The download link serves the exact
@@ -501,7 +507,10 @@ export declare function runReportView(artifacts: Artifact[], root: string): RunR
  * evidence problem in words, and the observed publication state. */
 export declare function sharedResultFactsOf(run: Run, proof: ProofBundleView | null, terminal: TerminalDiffView | null, handoff: StructuredHandoffView | null, report: RunReportView | null, publication: PublicationFacts): SharedResultFacts;
 export declare function proofBundleView(store: Store, run: Run, artifacts: Artifact[], root: string): ProofBundleView | null;
-export declare function completionReceiptView(store: Store, run: Run, artifacts: Artifact[], root: string, review?: ReviewFacts | null): CompletionReceiptView;
+/** What the verdict recorded when the build finished, said beside what holds now: a recorded pass is restated only
+ * when the check read now passed; unread, it points to the result; unreadable or failed since, it says so. */
+export declare function completionWords(verdict: ProofVerdict | null, reasons: readonly string[], checks: ChecksFact | null | undefined): string;
+export declare function completionReceiptView(store: Store, run: Run, artifacts: Artifact[], root: string, review?: ReviewFacts | null, now?: Date): CompletionReceiptView;
 export type ReviewDiffLine = {
     kind: "context" | "addition" | "deletion" | "meta";
     text: string;

package/dist/server/render-results.js

@@ -1,6 +1,7 @@
 import { assignmentPresentationOf, historicalAssessmentReason, shortenedMaterialReason } from "../assignment-presentation.js";
 import { assignmentActionHref, assignmentStatusOf, assignmentWithEvidence } from "../assignment-ui.js";
-import { owedAcceptance } from "../assignment.js";
+import { assignmentChecksForRun, owedAcceptance } from "../assignment.js";
+import { releaseCoverageOf } from "../release-coverage.js";
 import {} from "../browser-workspace.js";
 import { CHECK_LEVEL_WORDS, liveQuickCommand } from "../check-levels.js";
 import { LIMITS } from "../decision.js";
@@ -20,7 +21,7 @@ import {} from "../scope.js";
 import { parseReport } from "../scout-report.js";
 import {} from "../store.js";
 import { runCostWords } from "../summary.js";
-import { checkBackingOf, CHECKED_AT_RELEASE, demoChecksOf, pullRequestFactOf, requirementsOf, requirementWordOf, STATUS_MORE, statusDetailsHtml, statusIconSvg, statusWhyHtml } from "../task-status.js";
+import { approvedCheckOf, approvedCheckStateOf, CHECK_COMMAND_CHANGED, CHECK_UNREADABLE, checkBackingOf, CHECKED_AT_RELEASE, checksFactOf, receiptChecksOf, demoChecksOf, pullRequestFactOf, requirementsOf, requirementWordOf, STATUS_MORE, statusDetailsHtml, statusIconSvg, statusWhyHtml } from "../task-status.js";
 import { ACCEPT_NEEDS_REASON, acceptWordsOf, cantAcceptYetOf, evidenceProblemOf, MISMATCH_HEADLINE, receiptHeadingOf, receiptPublicationWords, reportMismatchesOf, RESULT_DECISION_SENTENCE, resultHeadlineOf, resultStatusOf, REVIEW_TOKENS } from "../workspace-ui.js";
 import { createHash, randomBytes } from "node:crypto";
 import { buildsViews, oneLineOf, projectChip, safePrUrl, screen, sentenceCase, strokeIcon, when, whenTime } from "./chrome.js";
@@ -650,9 +651,12 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         ? `${host.base}&run=${run.id}${section === "summary" ? "" : `&section=${section}`}`
         : `${here}&run=${run.id}${section === "summary" ? "" : `&tab=${section}`}`;
     const assignment = view.assignment === null ? null : assignmentWithEvidence(view.assignment, receiptStatusOf(view.detail.receipt), run.id);
-    const checks = assignment?.receipt?.checks;
+    const saved = assignment?.receipt?.checks;
+    // The approved check as the task page reads it (task-status.ts approvedCheckOf): one answer for this whole page.
+    const checks = saved === undefined || assignment?.receipt == null ? undefined
+        : { ...saved, ...(receiptChecksOf(assignment.receipt) ?? {}), detail: saved.detail };
     if (checks !== undefined)
-        parts.push(html `<p class="${checks.status === "failed" || checks.status === "unavailable" ? "problem" : "meta"}" data-actual-checks="${checks.status}">${checks.detail}${checks.logArtifactId === null ? "" : html ` <a href="/r/${run.id}/evidence/${checks.logArtifactId}">Open check output</a>`}</p>`);
+        parts.push(html `<p class="${checks.status === "failed" || checks.status === "unavailable" ? "problem" : "meta"}" data-actual-checks="${checks.status}">${checks.status === "unavailable" && saved.cause === "command-changed" ? CHECK_COMMAND_CHANGED : html `${checks.status === "unavailable" && saved.status !== "unavailable" ? `${CHECK_UNREADABLE} ` : ""}${checks.detail}`}${checks.logArtifactId === null ? "" : html ` <a href="/r/${run.id}/evidence/${checks.logArtifactId}">Open check output</a>`}</p>`);
     if (assignment?.completion != null)
         parts.push(html `<p class="meta" data-result-completed>Marked complete by ${assignment.completion.actor.replace(/^operator:/, "")}.</p>`);
     const panel = resultPanelParts(view.detail, {
@@ -692,7 +696,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     const unanswered = accepted || youCheck == null ? [] : youCheck.items.length > 0 ? youCheck.items.map(one => one.statement === "" ? one.words : one.statement) : youCheck.lines;
     const base = !acceptsHere ? null : acceptWordsOf({
         // Checks Off that a release check already covers read as passed (release-coverage.ts).
-        checks: checks === undefined ? null : checks.running != null ? "running" : checks.level === "off" && checks.status !== "passed" ? checks.release != null ? "passed" : "off" : checks.status,
+        checks: checks === undefined ? null : { passed: "passed", failed: "failed", running: "running", "not-run": "not-run", off: "off", unreadable: "unavailable" }[approvedCheckStateOf(checks)],
         // Release-aware words (task-status.ts): a requirement waiting only on a release check, or covered by one, isn't unmet.
         unmet: matrix.filter(row => !["Met", "You check", CHECKED_AT_RELEASE].includes(requirementWordOf(row, null, checks === undefined ? undefined : checkBackingOf(checks)))).length,
         action: complete !== null ? "complete" : "accept",
@@ -1084,6 +1088,7 @@ export function proofBundleView(store, run, artifacts, root) {
             : { text: "", artifactId: checkLogArtifact.id, truncated: checkLogArtifact.truncated, problem: read.problem, ...sizes };
     }
     return {
+        ...(run.finishedAt !== null && run.role !== "scout" && run.role !== "reviewer" && run.role !== "planner" ? { checks: savedChecksOf(store, root, run, new Date()) } : {}),
         verdict: verdictRow?.verdict ?? null,
         reasons: verdictRow?.reasons ?? [],
         accepted: acceptanceRow === null ? null : { by: acceptanceRow.approver, note: acceptanceRow.note, at: acceptanceRow.acceptedAt },
@@ -1114,7 +1119,32 @@ export function proofBundleView(store, run, artifacts, root) {
         })(),
     };
 }
-export function completionReceiptView(store, run, artifacts, root, review = null) {
+/** What the verdict recorded when the build finished, said beside what holds now: a recorded pass is restated only
+ * when the check read now passed; unread, it points to the result; unreadable or failed since, it says so. */
+export function completionWords(verdict, reasons, checks) {
+    const recorded = verificationExplanation(verdict, reasons);
+    if (verdict !== "verified")
+        return recorded;
+    const now = approvedCheckStateOf(approvedCheckOf(verdict, reasons, checks));
+    if (checks !== undefined && (now === "passed" || (now === "running" && checks?.status === "passed")))
+        return recorded;
+    if (checks === undefined)
+        return "Open the result to see its checks.";
+    const said = now === "failed" ? `the approved check failed against it${checks?.exitCode == null ? "" : ` (exit ${checks.exitCode})`}.`
+        : checks?.cause === "command-changed" ? "the check command changed since this check." : `${CHECK_UNREADABLE.charAt(0).toLowerCase()}${CHECK_UNREADABLE.slice(1)}`;
+    return `At completion: ${recorded} Now: ${said} It doesn't count as passed.`;
+}
+/** A result's saved approved check as the assignment reads it (assignment.ts): the receipt, follow-ups on its commit,
+ * and with checks Off the passing release check that contains it. */
+function savedChecksOf(store, root, run, now) {
+    const own = checksFactOf(assignmentChecksForRun(store, root, run.id, now), run.headRevision);
+    if (own.level !== "off" || own.status === "passed" || own.status === "failed")
+        return own;
+    const repo = store.refById(run.taskRef)?.repo ?? null;
+    const release = releaseCoverageOf(store, root, repo, run.headRevision);
+    return release == null ? own : { ...own, release };
+}
+export function completionReceiptView(store, run, artifacts, root, review = null, now = new Date()) {
     const handoff = structuredHandoffView(artifacts, root);
     const proof = proofBundleView(store, run, artifacts, root);
     const terminal = terminalDiffView(artifacts, root);
@@ -1149,6 +1179,8 @@ export function completionReceiptView(store, run, artifacts, root, review = null
         coverageSecondary: coverage.contextGaps.length === 0 && (coverage.satisfied === true || (coverage.satisfied === null && !coverage.required)),
         report,
         facts: sharedResultFactsOf(run, proof, terminal, handoff, report, publication),
+        // The same reading the task page's Project checks row shows (assignment.ts), never the verdict alone.
+        ...(run.role === "scout" ? {} : { checks: savedChecksOf(store, root, run, now) }),
     };
 }
 export const REVIEW_DIFF_LINE_CAP = 4_000;
@@ -1357,8 +1389,9 @@ export function evidenceBundleCard(view, run, publication = null, review = null)
     if (view.verdict !== null) {
         // The same status line every other surface renders for this run
         // (workspace package 1), beside the verdict's own explanation.
-        const status = resultStatusOf({ runId, role: run.role, outcome: run.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted !== null, review }, publication);
-        parts.push(html `<p class="row" data-proof-verdict="${dispatchStatusToken(view.verdict)}">${statusLineHtml(status)} <span class="meta">${verificationExplanation(view.verdict, view.reasons)}</span></p>`);
+        const status = resultStatusOf({ runId, role: run.role, outcome: run.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted !== null, review,
+            ...(view.checks === undefined ? {} : { checks: view.checks }) }, publication);
+        parts.push(html `<p class="row" data-proof-verdict="${dispatchStatusToken(view.verdict)}">${statusLineHtml(status)} <span class="meta">${completionWords(view.verdict, view.reasons, view.checks)}</span></p>`);
     }
     if (view.accepted !== null) {
         parts.push(html `<p class="meta">Accepted with an exception by <span class="mono">${view.accepted.by}</span> · ${whenTime(view.accepted.at)}${view.accepted.note === null ? "" : ` — ${view.accepted.note}`}</p>`);
@@ -1429,7 +1462,8 @@ export function receiptStatusOf(view, review = view.review) {
     // The evidence health rides the status (repair 2026-09-14): a result
     // whose stored records are damaged is never called ready on the strength
     // of a verdict recorded before the damage.
-    return evidenceResultStatusOf({ runId: view.runId, role: view.role, outcome: view.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted, recordComplete: view.recordComplete, review }, view.publication, view.facts.evidenceHealth);
+    return evidenceResultStatusOf({ runId: view.runId, role: view.role, outcome: view.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted, recordComplete: view.recordComplete, review,
+        ...(view.checks === undefined ? {} : { checks: view.checks }) }, view.publication, view.facts.evidenceHealth);
 }
 export function completionReceiptCard(view, taskId, place, standing = receiptStatusOf(view), assignment = null, headline = true) {
     const current = assignment?.receipt?.runId === view.runId ? assignment : null;
@@ -1577,8 +1611,11 @@ export function resultPanelParts(detail, o) {
     // The visible status already says verification is needed. Only omit the
     // generic repeat; failed checks, specific reasons and damaged evidence stay.
     const missingVerdictNamed = o.headStatus !== false && status.token === "verification-needed" && receipt.verdict === null && receipt.reasons.length === 0;
-    if (current == null && !humanReview && !awaitingGoalReview && (!directAssessment || physicalReasons.length > 0) && !missingVerdictNamed && stored.token !== "evidence-damaged" && (stored.tone === "problem" || stored.tone === "attention"))
-        attention.push(verificationExplanation(receipt.verdict, physicalReasons));
+    if (current == null && !humanReview && !awaitingGoalReview && (!directAssessment || physicalReasons.length > 0) && !missingVerdictNamed && stored.token !== "evidence-damaged" && (stored.tone === "problem" || stored.tone === "attention")) {
+        // A recorded pass whose check can't be read now is said as what holds now, never as the verdict's pass.
+        // A recorded pass the check read now can't stand behind (unreadable, or failed since) is said as what holds now.
+        attention.push(stored.token === "check-unreadable" || (receipt.verdict === "verified" && stored.token === "checks-failed") ? stored.detail : verificationExplanation(receipt.verdict, physicalReasons));
+    }
     // Exact criterion assessment notes are already shown in Requirements;
     // do not repeat them as a second current attention message.
     if (presentation !== null)
@@ -1773,7 +1810,12 @@ export function resultPanelParts(detail, o) {
         if (proof.verdict !== null && !directAssessment) {
             // The same status line the panel leads with (one status per surface,
             // workspace package 1), beside the machine verdict's own explanation.
-            checkParts.push(html `<p class="row result-verdict" data-proof-verdict="${dispatchStatusToken(proof.verdict)}"><span class="meta">At completion: ${humanReview ? "Human review required for the requirements below." : verificationExplanation(proof.verdict, proof.reasons)}</span></p>`);
+            // A recorded pass the saved check can't show now is said so here too (task-status.ts approvedCheckOf).
+            const shown = current?.receipt != null ? receiptChecksOf(current.receipt) : receipt.checks === undefined ? undefined : approvedCheckOf(proof.verdict, proof.reasons, receipt.checks);
+            const unreadNow = proof.verdict === "verified" && shown !== undefined && shown?.status !== "passed" && !humanReview;
+            // completionWords: the verdict at completion, and what holds now when they differ.
+            const words = humanReview ? "At completion: Human review required for the requirements below." : unreadNow ? completionWords(proof.verdict, proof.reasons, shown) : `At completion: ${verificationExplanation(proof.verdict, proof.reasons)}`;
+            checkParts.push(html `<p class="row result-verdict" data-proof-verdict="${dispatchStatusToken(proof.verdict)}"${unreadNow ? html ` data-check-now="${approvedCheckStateOf(shown) ?? "unreadable"}"` : ""}><span class="meta">${words}</span></p>`);
         }
         else if (proof.verdict === null && run.outcome !== "no-change") {
             checkParts.push(html `<p class="meta" data-proof-verdict="none">No verification result is available for this build.</p>`);

package/dist/server/render-settings.js

@@ -32,7 +32,7 @@ export function leadSettingsHtml(data) {
     const summary = config === null
         ? data.signedIn !== null
             ? html `<p>The lead is off.</p>${postForm("/settings/lead/on", html `<button type="submit">Use your ${data.signedIn} sign-in</button>`, { returnTo })}`
-            : html `<p>The lead is off. Sign in an agent on this computer to turn it on:</p><p><code>${data.command}</code></p>`
+            : html `<p>The lead is off. Sign in an agent on this computer to turn it on:</p><p><code>${data.command}</code></p>${postForm("/lead/check", html `<button type="submit" class="secondary">Check again</button>`, { returnTo })}`
         : data.words !== null
             ? html `<p>The lead uses ${data.words}.</p><p class="meta">${config.model === "default" ? "Its default model" : `Model ${config.model}`} · up to ${config.dailyTurns} turns a day · no dollar spend. Every action it proposes waits for you to confirm it.</p>`
             : html `<p>The lead uses the ${config.provider === "anthropic-api" ? "Anthropic" : "OpenRouter"} API with ${config.model}.</p><p class="meta">Up to ${chatMoney(config.weeklyCeilingMicrousd)} a week · up to ${config.dailyTurns} turns a day.</p>`;
@@ -261,7 +261,7 @@ ${[
                     html `<details class="provider-manage"><summary>Manage</summary>`,
                     postForm("/settings/provider-key", joinHtml([
                         "",
-                        one.connection === undefined ? "" : html `<p class="provider-connection"><strong>${connectionWords(one.connection)}</strong> ${[one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · ")} · <a href="/settings?check-connection=${encodeURIComponent(one.provider)}#providers">Check again</a></p>`,
+                        one.connection === undefined ? "" : html `<p class="provider-connection"><strong>${connectionWords(one.connection)}</strong> ${[one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · ")} · <button type="submit" class="secondary" formaction="/settings/connection/check" formnovalidate>Check again</button></p>`,
                         html `<p class="meta">${one.mode === "subscription" ? "Uses its own sign-in, so no API-key spend" : "Uses the API key"} · <span class="mono">${one.envName}</span> · ${one.set ? `key stored${one.updatedAt === null ? "" : ` ${one.updatedAt.slice(0, 10)}`}` : one.ambient ? "key in this server's environment" : "no key stored"}</p>`,
                         one.subscriptionCapable
                             ? html `<label>Sign-in<select name="auth-mode">\
@@ -372,7 +372,7 @@ ${one.retiredAt === null
                         : one.set ? { tone: "ok", words: "API key saved" } : one.ambient ? { tone: "ok", words: "Key from this computer’s environment" } : { tone: "off", words: "Not set up" };
             return {
                 provider: one.provider, name, tone: status.tone, words: status.words,
-                connection: one.connection === undefined ? null : { words: connectionWords(one.connection), facts: [one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · "), checkHref: `/settings?check-connection=${encodeURIComponent(one.provider)}#providers` },
+                connection: one.connection === undefined ? null : { words: connectionWords(one.connection), facts: [one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · "), checkAction: "/settings/connection/check" },
                 usage: `${one.mode === "subscription" ? "Uses its own sign-in, so no API-key spend" : "Uses the API key"} · ${one.set ? `key stored${one.updatedAt === null ? "" : ` ${one.updatedAt.slice(0, 10)}`}` : one.ambient ? "key in this server's environment" : "no key stored"}`,
                 envName: one.envName, subscriptionCapable: one.subscriptionCapable, mode: one.mode, set: one.set,
             };

package/dist/server/render-tasks.js

@@ -1437,6 +1437,11 @@ export function taskBodyParts(data) {
             if (resultStatus.token === "evidence-damaged") {
                 return withReview(box("problem", resultStatus.label, html `<a href="/r/${proof.runId}">Build #${proof.runId}</a> finished. ${resultStatus.detail}${publicationWords}`, "evidence-damaged"), html `<div class="proof-review-actions"><a class="button-link" href="/r/${proof.runId}">Review the evidence problems</a></div>`, proofDetails);
             }
+            // A recorded pass the check read now doesn't stand behind (unreadable, failed since, or not read here) never
+            // reads "passed": the box says what holds now (task-status.ts approvedCheckOf).
+            if (proof.proofVerdict === "verified" && !accepted && !(proof.receipt?.checks !== undefined && ["ready-to-review", "pr-opened", "merge-observed", "pr-closed"].includes(resultStatus.token))) {
+                return withReview(box(resultStatus.tone === "problem" ? "problem" : "ok", resultStatus.label, html `<a href="/r/${proof.runId}">Build #${proof.runId}</a> finished. ${resultStatus.detail}${publicationWords}`, resultStatus.token), proofDetails);
+            }
             if (proof.proofVerdict === "verified" && !accepted) {
                 const recovered = verificationRecovered(proof.proofReasons);
                 return withReview(box("ok", resultStatus.label, recovered
@@ -2364,10 +2369,8 @@ export function taskBodyParts(data) {
         journey: task.state === "cancelled" || data.status === undefined ? null : (() => {
             const planning = data.plan === "requested" && approveForm === "";
             const read = data.assignment != null ? assignmentStageOf(data.assignment, { token: data.status.token }, planning) : stageOfCode(data.status.token, { planning });
-            // The checks fact the status card shows, read as what happened: a "note" is a failure when its words say so.
-            const shown = statusCard?.status.details.find(one => one.key === "checks") ?? null;
-            const checks = shown === null ? null : shown.mark === "ok" ? "passed" : shown.mark === "running" ? "running"
-                : shown.mark === "failed" || /\bfailed\b/i.test(shown.text) ? "failed" : shown.mark === "none" ? "not-run" : "unread";
+            // The one answer the status card's headline and Project checks row read (task-status.ts approvedCheckOf).
+            const checks = statusCard?.status.check ?? null;
             const report = data.deliverable === "report" || data.report != null;
             return taskRoad(read, scope !== null && approvalOf(scope).approved, task.state === "done", { checks, report });
         })(),

package/dist/server/route-table.js

@@ -237,6 +237,10 @@ for (const one of ["close", "remove"])
     post("tasks", `term.${one}`, `^\\/term\\/${TERMINAL}\\/${one}$`, { ...TERM, sample: `/term/${"a".repeat(32)}/${one}` });
 for (const one of ["send", "stop", "resume", "recover", "continue", "ship", "answer"])
     post("tasks", `code.${one}-send`, `^\\/code\\/${SESSION}\\/${one}$`, { ...CODING_ACT, sample: `/code/${"a".repeat(32)}/${one}` });
+// Reading a coding checkout runs git in a folder an agent writes, so it is a POST with the form token, never a page
+// visit (docs/plans/get-side-effects.md): the session's changes, and the review-for-shipping preview.
+post("tasks", "code.changes-read", `^\\/code\\/${SESSION}\\/changes$`, { project: "coding", limited: "self", callers: ["cookie"], sample: `/code/${"a".repeat(32)}/changes` });
+post("tasks", "code.ship-preview", `^\\/code\\/${SESSION}\\/ship\\/preview$`, { project: "coding", limited: "self", callers: ["cookie"], sample: `/code/${"a".repeat(32)}/ship/preview` });
 // Any other coding action answers "not found" after the same access check.
 post("tasks", "code.act-other", "^\\/code(\\/.*)?$", { ...CODING_ACT, sample: "/code/unknown" });
 post("settings", "settings.skills-revise", "/settings/skills/revise", { project: "form", limited: "unscoped", ...approver("Sign in to revise a test.", "/settings/skills") });
@@ -308,10 +312,12 @@ const SETTINGS_ACT_ROLES = {
     updates: operator("An instance operator updates Toolroll.", "/settings"),
     "updates/seen": operator("An instance operator updates Toolroll.", "/settings"),
     "updates/cancel": operator("An instance operator updates Toolroll.", "/settings"),
+    "updates/check": operator("An instance operator updates Toolroll.", "/settings"),
     retention: operator("An instance operator sets retention.", "/settings"),
     storage: operator("An instance operator looks after storage.", "/settings"),
     "storage/clean": operator("An instance operator looks after storage.", "/settings"),
     "storage/discard": operator("An instance operator looks after storage.", "/settings"),
+    "storage/check": operator("An instance operator looks after storage.", "/settings"),
     "backups/now": operator("An instance operator looks after backups.", "/settings"),
     backups: operator("An instance operator looks after backups.", "/settings"),
     data: operator("An instance operator exports data.", "/settings"),
@@ -320,7 +326,7 @@ const SETTINGS_ACT_ROLES = {
     "tools/connect": approver("Sign in as an approver to connect tools.", "/settings/tools"),
     "tools/change": approver("Sign in as an approver to manage tools.", "/settings/tools"),
 };
-for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "retention", "storage", "storage/clean", "storage/discard", "pull-requests", "checks", "backups/now", "backups", "data", "integrations/test", "monitoring", "tools/connect", "tools/change", "appearance"]) {
+for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "updates/check", "retention", "storage", "storage/clean", "storage/discard", "storage/check", "pull-requests", "pull-requests/check", "checks", "backups/now", "backups", "data", "integrations/test", "monitoring", "tools/connect", "tools/change", "appearance"]) {
     post(one === "sessions" ? "people" : "settings", `settings.${one.replaceAll("/", "-")}-send`, `/settings/${one}`, { ...(["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "retention", "storage", "storage/clean", "storage/discard", "pull-requests", "checks", "backups", "data", "monitoring", "tools/connect", "tools/change"].includes(one) ? { scope: "step-up" } : {}), ...SETTINGS_ACT_ROLES[one] });
 }
 post("settings", "settings.flows-on", "/settings/flows/on", { limited: "collection", ...approver("An approver switches starter flows on.", "/settings/flows") });
@@ -334,6 +340,9 @@ post("settings", "settings.knowledge-proposal", "/settings/knowledge/proposal",
 post("settings", "settings.knowledge-decision", "/settings/knowledge/decision", { project: "form", ...approver("Sign in as an approver to change project decisions.", "/settings/knowledge") });
 post("settings", "settings.knowledge-change", "/settings/knowledge/change", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to change project knowledge.", "/settings/knowledge") });
 post("settings", "settings.learning-change", "/settings/learning/change", { project: "form", limited: "unscoped" });
+// A page shows the last check; these ask again (docs/plans/get-side-effects.md).
+post("settings", "control.models-refresh", "/control/models-refresh", anyApprover("Project setup requires an approver."));
+post("settings", "settings.connection-check", "/settings/connection/check", anyApprover("An approver checks a sign-in.", "/settings"));
 for (const one of ["setup-preview", "setup-approve", "instructions-preview", "instructions-approve"])
     post("settings", `control.${one}`, `/control/${one}`, { ...(one.endsWith("approve") ? { scope: "step-up" } : {}) });
 for (const [service, name] of [["slack", "Slack"], ["teams", "Teams"], ["discord", "Discord"]]) {
@@ -348,6 +357,7 @@ post("settings", "settings.telegram-unpair", "/settings/telegram/unpair", { limi
 for (const one of ["messaging", "permission-default", "quality-default", "notifications", "notifications/mute", "telegram-digest", "provider-key", "provider-key-clear", "telegram-token", "email", "email-test", "email-read-test", "google", "google/disconnect"]) {
     post("settings", `settings.${one.replaceAll("/", "-")}-send`, `/settings/${one}`);
 }
+post("pages", "projects.github-list", "/projects/github", { callers: ["cookie"], ...anyApprover("your login can watch — adding projects is an approver's act") });
 post("pages", "projects.select", "/projects/select", { project: "form-path", limited: "unscoped", viewer: true });
 post("pages", "projects.remove", "/projects/remove", { project: "form", ...operator("An instance operator removes projects.", "/settings/project") });
 post("pages", "projects.open", "/projects/open", { project: "form-path" });
@@ -397,6 +407,9 @@ post("pages", "projects.onboard-preview", "/projects/onboard-preview", { project
 post("pages", "projects.onboard-confirm", "/projects/onboard-confirm", { scope: "step-up", project: "none" });
 post("chat", "push.subscribe", "/push/subscribe", { scope: "step-up" });
 post("chat", "push.remove", "/push/remove");
+// Ask this computer's agent CLIs again (docs/plans/get-side-effects.md): Chat's first run and Settings → Lead's Check
+// now. GET /lead/status only reads the last answer.
+post("chat", "lead.check", "/lead/check", { callers: ["cookie"] });
 post("chat", "onboarding.phone-dismiss", "/onboarding/phone/dismiss", approver("An approver puts this away.", "/chat"));
 const LEAD_WORDS = { identity: "An approver names their lead.", about: "An approver edits what their lead knows about them.", "promise/cancel": "An approver manages the lead's promises.", on: "An approver turns the lead on." };
 for (const one of ["identity", "about", "promise/cancel", "on"])

package/dist/server/runtime.d.ts

@@ -158,6 +158,8 @@ export interface ServerRuntime {
         source: "environment" | "stored";
     } | null;
     chatCatalog: () => Promise<import("../converse.js").CatalogModel[] | null>;
+    /** The catalog as last fetched: what a page shows. A page never fetches. */
+    chatCatalogKnown: () => import("../converse.js").CatalogModel[] | null;
     leadRecheckedAt: number;
     checkLocalAgents: (fresh?: boolean) => Promise<void>;
     localSignIn: {
@@ -167,7 +169,18 @@ export interface ServerRuntime {
     } | null;
     agentSignInCommand: () => string;
     connectionCheck: (provider: ProviderId, fresh?: boolean) => Promise<ProviderConnection>;
-    modelCatalog: (key: string | null, refresh?: boolean) => Promise<OpenRouterModels>;
+    /** What the last sign-in check said: what a page shows. A page never checks (docs/plans/get-side-effects.md). */
+    connectionKnown: (provider: ProviderId) => ProviderConnection | null;
+    /** The last answer of each other check a page shows; a page only reads it. */
+    lastChecks: import("./last-checks.js").LastChecks;
+    checkRelease: () => Promise<{
+        version: string;
+    } | {
+        problem: string;
+    }>;
+    modelCatalog: ((key: string | null, refresh?: boolean) => Promise<OpenRouterModels>) & {
+        known: (key: string | null) => OpenRouterModels | null;
+    };
     modelSeams: CatalogSeams;
     toolsViewOf: (repo: string, codex: unknown[] | null, kit?: string | null, wanted?: string | null) => ToolsView;
     codexServers: (repo: string) => Promise<unknown[] | null>;
@@ -209,6 +222,8 @@ export interface ServerRuntime {
         provider: OidcProvider;
         at: number;
     } | null;
+    /** The identity provider as last discovered; a page never discovers it. */
+    providerKnown: (issuer: string) => import("../oidc.js").OidcProvider | null;
     providerFor: (issuer: string) => Promise<{
         ok: true;
         provider: OidcProvider;