toolroll 0.9.74 → 0.9.76

package/dist/server/chat.js

@@ -28,7 +28,7 @@ import { projectName } from "../project.js";
 import { fileTaskProposal } from "../proposal.js";
 import { providerName } from "../provider-auth.js";
 import { validModelId } from "../provider.js";
-import { loadOrCreateVapidKeys, validatePushEndpoint } from "../push.js";
+import { loadOrCreateVapidKeys, loadVapidKeys, validatePushEndpoint } from "../push.js";
 import { parseResultTab, RESULT_REVIEW_SCRIPT } from "../result-review.js";
 import {} from "../store.js";
 import { runActivityOf } from "../task-activity.js";
@@ -44,7 +44,7 @@ import {} from "./render-pages.js";
 import { completionForm, hardBlockerOf, homePhaseWords, owedAcceptanceOf, resultPanelHtml } from "./render-results.js";
 import { browserCaller, oneLineUa } from "./session.js";
 export function createChatHandlers(runtime) {
-    const { firstRunStepsNow, managedRepos, leadWords, store, options, phoneSetup, visible, liveTurns, leadSaid, evidenceRoot, clock, sessions, CHAT_CANDIDATE_TTL_MS, chatFetcher, CHAT_CANDIDATES_PER_APPROVER, chatCeilingDigest, workAccess, familyOf, firstTasks, leadPrincipal, taskChatFocus, chatScopeOf, leadConversationRows, demoLeadHere, sendScreen, chromeFor, teamBrowserReply, team, teamChatProvider, runVisible, runIsLive, resultDetailOf, pullRequestTargetOf, chatEnablement, startLeadConversation, projectFamilyPeek, needsYouBadge, liveRefreshSeconds, chatKeyFor, chatCatalog, providerHome, mintApprovalNonce, checkLocalAgents, agentSignInCommand, bustBadge, authenticateApprover, revisionDestination, armTaskResume, consumeApprovalNonce } = runtime;
+    const { firstRunStepsNow, managedRepos, leadWords, store, options, phoneSetup, visible, liveTurns, leadSaid, evidenceRoot, clock, sessions, CHAT_CANDIDATE_TTL_MS, chatFetcher, CHAT_CANDIDATES_PER_APPROVER, chatCeilingDigest, workAccess, familyOf, firstTasks, leadPrincipal, taskChatFocus, chatScopeOf, leadConversationRows, demoLeadHere, sendScreen, chromeFor, teamBrowserReply, team, teamChatProvider, runVisible, runIsLive, resultDetailOf, pullRequestTargetOf, chatEnablement, startLeadConversation, projectFamilyPeek, needsYouBadge, liveRefreshSeconds, chatKeyFor, chatCatalog, chatCatalogKnown, providerHome, mintApprovalNonce, checkLocalAgents, agentSignInCommand, bustBadge, authenticateApprover, revisionDestination, armTaskResume, consumeApprovalNonce } = runtime;
     // The read-only refresh (package 2): the same JSON status as before —
     // session binding, the send receipt, the live turn — plus a version
     // of the DISPLAYED facts and, only when the caller's version differs,
@@ -65,7 +65,6 @@ export function createChatHandlers(runtime) {
             return respond(response, 200, "application/json", JSON.stringify({ session: null }));
         }
         const sessionId = session?.id ?? NOT_STARTED_SESSION;
-        store.sweepStaleLeadTurns(now);
         const request = url.searchParams.get("request") ?? "";
         // Received: the engine took it, or the lead queue holds it (a queued acknowledgement lost on the way still frees the draft).
         const received = session !== null && /^[a-f0-9]{32}$/.test(request) && store.leadRequestReceived(session.id, request);
@@ -151,9 +150,8 @@ export function createChatHandlers(runtime) {
                 chrome: chromeFor(null, 'chat', undefined, 'all'), workspace: { team: reply.snapshot, notices: [DEPRECATED_PAGE.team, ...(said ? [said] : [])] },
             }));
         }
-        store.sweepStaleChatTurns(now);
-        store.sweepStaleLeadTurns(now);
-        store.sweepCoordinatorProposals(now);
+        // Settling a turn past its deadline (its spend) and expiring old proposals are the background passes' work, never a
+        // page visit's (docs/plans/get-side-effects.md); the lead's follow pass sweeps every few seconds.
         sweepChatDrafts(Date.now());
         const requestedTask = url.searchParams.get("task");
         const focusTask = taskChatFocus(requestedTask, now, who, { mintNonce: !requestContext.getStore()?.workspaceRead });
@@ -341,7 +339,7 @@ export function createChatHandlers(runtime) {
                     tail: found === null || found.source === "environment" ? null : redactToken(found.key),
                 };
             }),
-            openrouterModels: (await chatCatalog())?.map(one => one.id) ?? null,
+            openrouterModels: chatCatalogKnown()?.map(one => one.id) ?? null,
             liveModels: [...modelOptions(store, "claude", now, providerHome), ...modelOptions(store, "codex", now, providerHome)],
             csrf: who.session.csrf,
             problem: url.searchParams.get("said") ??
@@ -425,22 +423,39 @@ export function createChatHandlers(runtime) {
         const { who, response } = ctx;
         if (who.via !== "cookie")
             return respond(response, 403, "application/json", JSON.stringify({ error: "session" }));
-        const keys = loadOrCreateVapidKeys(dirname(options.telegramTokenFile ?? "."));
+        // The pair is made as the console starts (docs/plans/get-side-effects.md); this only reads it.
+        const keys = options.telegramTokenFile === undefined ? null : loadVapidKeys(dirname(options.telegramTokenFile));
         response.setHeader("cache-control", "no-store");
+        if (keys === null)
+            return respond(response, 503, "application/json", JSON.stringify({ error: "push is not set up on this console" }));
         return respond(response, 200, "application/json", JSON.stringify({ key: keys.publicKey }));
     }
-    // While no agent is signed in, Chat asks this computer again on its own (onboarding): a fresh, non-spending sign-in
-    // check at most every few seconds, and the lead turns on as soon as one is found.
+    // What this computer's agent CLIs said last, and whether the lead is on. A read: the answer comes from the background
+    // checks or a Check now (POST /lead/check), never from this request (docs/plans/get-side-effects.md).
+    const leadState = () => JSON.stringify({ lead: store.getChatConfig() === null ? "off" : "on", agent: runtime.localSignIn?.signedIn ?? null,
+        checkedAt: runtime.localSignIn === null ? null : new Date(runtime.localSignIn.at).toISOString(), command: agentSignInCommand() });
     async function leadStatus(ctx) {
         const { who, response } = ctx;
         if (who.via !== "cookie")
             return respond(response, 403, "application/json", JSON.stringify({ error: "sign in" }));
+        response.setHeader("cache-control", "no-store");
+        return respond(response, 200, "application/json", leadState());
+    }
+    // While no agent is signed in, Chat asks this computer again on its own (onboarding), and Settings → Lead has Check
+    // now: a fresh, non-spending sign-in check at most every few seconds, and the lead turns on as soon as one is found
+    // (the lead-by-default rule). A POST with the person's form token, so no prefetch or link preview can set it off.
+    async function leadCheck(ctx) {
+        const { response, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.leadCheck);
         if (Date.now() - runtime.leadRecheckedAt > 4_000) {
             runtime.leadRecheckedAt = Date.now();
             await Promise.race([checkLocalAgents(true), new Promise(done => setTimeout(done, 8_000).unref?.())]);
         }
+        const back = body.get("return");
+        if (back !== null)
+            return redirect(response, safeReturn(back));
         response.setHeader("cache-control", "no-store");
-        return respond(response, 200, "application/json", JSON.stringify({ lead: store.getChatConfig() === null ? "off" : "on", agent: runtime.localSignIn?.signedIn ?? null, command: agentSignInCommand() }));
+        return respond(response, 200, "application/json", leadState());
     }
     async function taskStatus(ctx) {
         const { url, who, response, now } = ctx;
@@ -1157,7 +1172,7 @@ export function createChatHandlers(runtime) {
             intro: HOW_IT_WORKS,
             lead: lead === null ? null : { words: `The lead uses ${lead}`, href: "/settings/lead" },
             // With no lead yet and no agent signed in, the page asks this computer again on its own.
-            recheck: store.getChatConfig() === null && agent !== undefined && !agent.done ? "/lead/status" : null,
+            recheck: store.getChatConfig() === null && agent !== undefined && !agent.done ? "/lead/check" : null,
         };
     }
     /** After the first Ready result, once (onboarding): the phone, by a chat app or the console over Tailscale. */
@@ -1469,18 +1484,10 @@ export function createChatHandlers(runtime) {
             planUse: (windows?.tiles ?? []).map(one => ({ name: one.name, window: one.window, percent: one.percent, detail: one.detail, tone: one.tone })),
         };
     }
+    /** The first tasks last found for a project (docs/plans/get-side-effects.md): the background checks ask gh and
+     * git grep while the first run is open; a page shows what they found, or the generic three. */
     function firstTasksFor(repo) {
-        const at = Date.now();
-        let entry = firstTasks.get(repo);
-        if (entry === undefined || (entry.until <= at && !entry.reading)) {
-            const reading = { until: at + 10 * 60_000, found: entry?.found ?? null, reading: true };
-            firstTasks.set(repo, reading);
-            entry = reading;
-            void findFirstTasks(repo, options.firstTaskRunner ?? execRun)
-                .then(found => { reading.found = found; }, () => { })
-                .finally(() => { reading.reading = false; });
-        }
-        return entry.found ?? firstTaskSuggestions({ issues: [], todos: [] });
+        return firstTasks.get(repo)?.found ?? firstTaskSuggestions({ issues: [], todos: [] });
     }
     function approverCandidateCount(approver) {
         let count = 0;
@@ -1518,6 +1525,7 @@ export function createChatHandlers(runtime) {
         "chat.action": sharedActionReview,
         "push.key": pushKey,
         "lead.status": leadStatus,
+        "lead.check": leadCheck,
         "chat.task-status": taskStatus,
         "chat.demo.ask": demoAsk,
         "chat.demo.approve": demoAct("approve"),

package/dist/server/http.d.ts

@@ -165,6 +165,11 @@ export type ServeOptions = {
      * the exact part of the ceiling, so an addition or removal shows without a restart. */
     admittedRepos?: () => readonly string[];
     connectionProbe?: typeof execRun;
+    /** The console's background checks (docs/plans/get-side-effects.md): sign-in checks, integration checks, model
+     * lists and the tidy-ups pages used to do. On for `up` and `serve`; a test turns them on, and `backgroundChecksMs` sets
+     * how often they run and ask this computer's agents again. */
+    backgroundChecks?: boolean;
+    backgroundChecksMs?: number;
     connectionHome?: string;
     /** Test seam for Chat's first tasks: the `gh` and `git grep` reads. */
     firstTaskRunner?: typeof execRun;

package/dist/server/last-checks.d.ts

@@ -0,0 +1,17 @@
+/**
+ * The last answer of each check a page shows (docs/plans/get-side-effects.md). A page reads `known`; the background
+ * checks and a person's Check now (a POST) call `run`. One per console, held in memory: a restart asks again.
+ */
+export type LastCheck<T> = {
+    at: number;
+    value: T;
+};
+export declare class LastChecks {
+    private readonly answers;
+    private readonly running;
+    known<T>(key: string): LastCheck<T> | null;
+    /** Whether the last answer is older than `everyMs` (or missing). */
+    due(key: string, everyMs: number, now?: number): boolean;
+    /** Run the check (one at a time per key) and keep its answer. */
+    run<T>(key: string, check: () => Promise<T>): Promise<T>;
+}

package/dist/server/last-checks.js

@@ -0,0 +1,22 @@
+export class LastChecks {
+    answers = new Map();
+    running = new Map();
+    known(key) {
+        return this.answers.get(key) ?? null;
+    }
+    /** Whether the last answer is older than `everyMs` (or missing). */
+    due(key, everyMs, now = Date.now()) {
+        const last = this.answers.get(key);
+        return last === undefined || now - last.at >= everyMs;
+    }
+    /** Run the check (one at a time per key) and keep its answer. */
+    run(key, check) {
+        const pending = this.running.get(key);
+        if (pending !== undefined)
+            return pending;
+        const started = check().then(value => { this.answers.set(key, { at: Date.now(), value }); return value; })
+            .finally(() => { this.running.delete(key); });
+        this.running.set(key, started);
+        return started;
+    }
+}

package/dist/server/pages.js

@@ -28,6 +28,7 @@ import { agentLanesOf, agentRowOf, agentsBoardOf, agentFactsFor, laneWindowOf, s
 import { markAgentSeen } from "../agent-board.js";
 import { agentsLiveOf } from "../agents-live.js";
 import { readChildWindow } from "../live-children-read.js";
+import { leadFiledLinks } from "./agents-live-filed.js";
 import { readMainWindow } from "../live-main-read.js";
 import { runLiveCommands } from "../store.js";
 import { prometheusMetrics } from "../metrics.js";
@@ -53,7 +54,7 @@ import { decisionAnswerScript, taskBody } from "./render-tasks.js";
 import {} from "./session.js";
 import { rereadBrowser } from "./live.js";
 export function createPagesHandlers(runtime) {
-    const { clock, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
+    const { clock, lastChecks, store, visible, consoleProjects, restricted, ceiling, options, projectFamilyPeek, sendScreen, chromeFor, unscopedMode, admissionList, taskRepoOf, taskViewData, runVisible, evidenceRoot, workAccess, identify, liveCeiling, sessions, deletedRepos, authenticateApprover, authenticateCredential, projectOf, lookupSession } = runtime;
     // The filesystem browser (operator request): pick a project folder by
     // looking, not typing. CONFINED to exactly what opening allows —
     // explicit --repo mode has an enumerable list and gets no browser at
@@ -123,7 +124,8 @@ export function createPagesHandlers(runtime) {
         const { who, response } = ctx;
         if (store.isDemo())
             return refuse(response, who, 403, "the sandbox never talks to GitHub");
-        const listed = await (options.ghList ?? listGithubRepos)();
+        // The last listing (docs/plans/get-side-effects.md): List repositories posts; opening the page asks GitHub nothing.
+        const listed = lastChecks.known("github-repos")?.value ?? null;
         // What this machine already has, matched by the clone's own recorded
         // origin — registered projects first, then the immediate children of
         // the configured roots. Identities are compared case-insensitively
@@ -142,7 +144,7 @@ export function createPagesHandlers(runtime) {
         // Roots are walked ONLY when there are listed repos to match against
         // (finding 1), through an iterator that stops at 400 entries — a
         // directory with a million children costs 400 stats, not a scan.
-        if (listed.ok && listed.repos.length > 0) {
+        if (listed !== null && listed.ok && listed.repos.length > 0) {
             for (const root of ceiling.roots) {
                 const children = [];
                 try {
@@ -182,6 +184,14 @@ export function createPagesHandlers(runtime) {
             openProject: who.via === "cookie" ? who.session.project ?? null : null,
         }));
     }
+    // List repositories / Refresh list: ask the GitHub CLI signed in on this machine, then show the page.
+    async function projectsGithubList(ctx) {
+        const { who, response } = ctx;
+        if (store.isDemo())
+            return refuse(response, who, 403, "the sandbox never talks to GitHub");
+        await lastChecks.run("github-repos", () => (options.ghList ?? listGithubRepos)());
+        return redirect(response, "/projects/github");
+    }
     async function projectsIndex(ctx) {
         const { url, who, response } = ctx;
         return void projectsScreen(response, who, url.searchParams.get("said"), 200, safeReturn(url.searchParams.get("return")));
@@ -1027,7 +1037,10 @@ export function createPagesHandlers(runtime) {
         if (again === null)
             return respond(response, 401, "application/json", JSON.stringify({ error: "session" }));
         const shown = tiles.filter(tile => { const run = store.getRun(tile.runId); return run !== null && canSee(run); });
-        return respond(response, 200, "application/json", JSON.stringify({ tiles: shown, leads: leadsStillAdmitted(runtime, again, leads) }));
+        // Work the viewer's own lead filed nests under it (docs/plans/lead-dispatched-tiles.md): proved from the store now,
+        // for the tiles already shown, and only ever for their owner.
+        const filed = again.role === "approver" ? leadFiledLinks(store, again.name, shown.map(tile => tile.runId)) : new Map();
+        return respond(response, 200, "application/json", JSON.stringify({ tiles: shown.map(tile => ({ ...tile, filedBy: filed.get(tile.runId) ?? null })), leads: leadsStillAdmitted(runtime, again, leads) }));
     }
     /** This console's key for the Live grid's read cursors: random, in memory only (never where a build can reach), so a
      * restart makes old cursors start over visibly. A cursor is state, never permission. */
@@ -1070,6 +1083,7 @@ export function createPagesHandlers(runtime) {
     const registrations = handlersOf("pages", {
         "projects.browse": projectsBrowse,
         "projects.github": projectsGithub,
+        "projects.github-list": projectsGithubList,
         "projects.page": projectsIndex,
         "home": homeRedirect,
         "morning": morningAlias,

package/dist/server/people-tokens.js

@@ -39,7 +39,7 @@ export function sameVisitCheck(authTime, startedAt, now) {
     return Math.min(Math.max(at, startedAt), now);
 }
 export function createPeopleHandlers(runtime) {
-    const { joinBySource, ssoOffer, ssoVisits, ssoSettings, options, clock, ssoHandoffs, managedRepos, store, visible, admissionList, sendScreen, chromeFor, restricted, sessions, consoleProjects, authenticateApprover, authenticateCredential, bustBadge, projectOf, signInLinks, linkKey, fromThisComputer, recordSignIn, passwordAllowed, arrival, defaultProject, cookieSecure, consoleOrigin, providerFor, joinSourceOf, signInBudget, signInActor, minutesWords } = runtime;
+    const { joinBySource, ssoOffer, ssoVisits, ssoSettings, options, clock, ssoHandoffs, managedRepos, store, visible, admissionList, sendScreen, chromeFor, restricted, sessions, consoleProjects, authenticateApprover, authenticateCredential, bustBadge, projectOf, signInLinks, linkKey, fromThisComputer, recordSignIn, passwordAllowed, arrival, defaultProject, cookieSecure, consoleOrigin, providerFor, providerKnown, joinSourceOf, signInBudget, signInActor, minutesWords } = runtime;
     // v101: Settings → Sessions & tokens: where you're signed in, and your API tokens. An instance operator can see everyone's.
     async function sessionsPage(ctx) {
         const { url, who, response, project } = ctx;
@@ -353,9 +353,12 @@ ${reauth(html `<label>Password <input type="password" name="token" autocomplete=
         const origin = consoleOrigin(request.headers.host);
         if (origin === null)
             return page(response, 400, loginPage("Sign in from this computer (localhost) or from your https address.", returnTo, ssoOffer()));
-        const found = await providerFor(settings.issuer);
-        if (!found.ok)
-            return page(response, 502, loginPage(`${settings.label} isn't answering: ${found.said}`, returnTo, ssoOffer()));
+        // Discovered as the console starts and in the background (docs/plans/get-side-effects.md): following this link
+        // fetches nothing.
+        const known = providerKnown(settings.issuer);
+        if (known === null)
+            return page(response, 503, loginPage(`${settings.label} isn't answering yet. Try again in a moment.`, returnTo, ssoOffer()));
+        const found = { provider: known };
         const visit = newOidcVisit(), redirectUri = `${origin}${SSO_CALLBACK}`;
         for (const [key, one] of ssoVisits)
             if (one.expires < Date.now())

package/dist/server/render-pages.d.ts

@@ -442,7 +442,8 @@ export declare function originUrlOf(repoPath: string): string | null;
  * action each. Names, descriptions, and paths are gh/filesystem DATA —
  * escaped at the sink like everything else. */
 export declare function githubReposPage(chrome: Chrome, data: {
-    listed: ListOutcome;
+    /** The last listing; null until someone lists (a POST: listing asks GitHub, so a page visit never does). */
+    listed: ListOutcome | null;
     local: Map<string, string>;
     registered: Set<string>;
     /** Unused: postForm adds the request's CSRF field. Kept for callers. */

package/dist/server/render-pages.js

@@ -925,34 +925,38 @@ export function originUrlOf(repoPath) {
 export function githubReposPage(chrome, data) {
     const openForm = (path, label) => postForm("/projects/open", html `<button type="submit">${label}</button>`, { attrs: { class: "inline" }, hidden: { path } });
     const cloneForm = (nameWithOwner) => postForm("/projects/onboard-preview", html `<button type="submit">Clone here →</button>`, { attrs: { class: "inline" }, hidden: { repo: nameWithOwner, root: "0" } });
-    const rows = !data.listed.ok
-        ? html `<p class="meta">${data.listed.message}</p>`
-        : data.listed.repos.length === 0
-            ? html `<p class="meta">The signed-in GitHub account has no repositories to list</p>`
-            : joinHtml(data.listed.repos.map(repo => {
-                const localPath = data.local.get(repo.nameWithOwner.toLowerCase()) ?? null;
-                const action = localPath !== null && data.openProject === localPath
-                    ? html `<span class="badge badge-done">Open now</span>`
-                    : localPath !== null
-                        ? openForm(localPath, data.registered.has(localPath) ? "open →" : "add + open →")
-                        : data.cloneReady
-                            ? cloneForm(repo.nameWithOwner)
-                            : html `<span class="meta">choose a projects folder first</span>`;
-                return joinHtml([
-                    html `<div class="card project-card">`,
-                    html `<div class="row"><strong>${repo.nameWithOwner}</strong>${repo.isPrivate ? html ` <span class="badge">Private</span>` : null}`,
-                    html `<span class="right">${action}</span></div>`,
-                    localPath === null
-                        ? html `<p class="meta">Not on this machine yet${/^\d{4}-\d{2}-\d{2}T/.test(repo.updatedAt) ? html ` · pushed ${whenTime(repo.updatedAt)}` : null}</p>`
-                        : html `<p class="meta mono" style="overflow-wrap:anywhere;margin:.2rem 0">${localPath}</p>`,
-                    repo.description === "" ? null : html `<p class="meta">${repo.description}</p>`,
-                    html `</div>`,
-                ], "\n");
-            }), "\n");
+    const list = (label) => postForm("/projects/github", html `<button type="submit"${label === "Refresh list" ? html ` class="secondary"` : ""}>${label}</button>`, { attrs: { class: "inline" } });
+    const rows = data.listed === null
+        ? list("List repositories")
+        : !data.listed.ok
+            ? html `<p class="meta">${data.listed.message}</p>`
+            : data.listed.repos.length === 0
+                ? html `<p class="meta">The signed-in GitHub account has no repositories to list</p>`
+                : joinHtml(data.listed.repos.map(repo => {
+                    const localPath = data.local.get(repo.nameWithOwner.toLowerCase()) ?? null;
+                    const action = localPath !== null && data.openProject === localPath
+                        ? html `<span class="badge badge-done">Open now</span>`
+                        : localPath !== null
+                            ? openForm(localPath, data.registered.has(localPath) ? "open →" : "add + open →")
+                            : data.cloneReady
+                                ? cloneForm(repo.nameWithOwner)
+                                : html `<span class="meta">choose a projects folder first</span>`;
+                    return joinHtml([
+                        html `<div class="card project-card">`,
+                        html `<div class="row"><strong>${repo.nameWithOwner}</strong>${repo.isPrivate ? html ` <span class="badge">Private</span>` : null}`,
+                        html `<span class="right">${action}</span></div>`,
+                        localPath === null
+                            ? html `<p class="meta">Not on this machine yet${/^\d{4}-\d{2}-\d{2}T/.test(repo.updatedAt) ? html ` · pushed ${whenTime(repo.updatedAt)}` : null}</p>`
+                            : html `<p class="meta mono" style="overflow-wrap:anywhere;margin:.2rem 0">${localPath}</p>`,
+                        repo.description === "" ? null : html `<p class="meta">${repo.description}</p>`,
+                        html `</div>`,
+                    ], "\n");
+                }), "\n");
     return screen("projects", joinHtml([
         html `<h1>Your GitHub repositories</h1>`,
         html `<p class="meta">Repositories available to the GitHub account signed in on this machine — open one you already have, or clone a new one after a quick preview.</p>`,
         rows,
+        data.listed === null ? null : list("Refresh list"),
         html `<p class="row" style="margin-top:.6rem"><a class="badge" href="/projects">← back to projects</a></p>`,
     ], "\n"), { chrome });
 }

package/dist/server/render-results.d.ts

@@ -16,7 +16,7 @@ import { type BuildReviewView } from "../review-switch.js";
 import { type AcceptanceCriterion, type approvalOf } from "../scope.js";
 import { type ReportItem } from "../scout-report.js";
 import { type Artifact, type DiffComment, type Publication, type RepairChainRow, type ReviewRetryState, type Run, type Store, type TaskState } from "../store.js";
-import { type ReleaseState, type PullRequestFact, type TaskStatus } from "../task-status.js";
+import { type ChecksFact, type ReleaseState, type PullRequestFact, type TaskStatus } from "../task-status.js";
 import { type DisplayStatus, type PublicationFacts, type ReviewFacts } from "../workspace-ui.js";
 import { type Chrome, type Screen } from "./chrome.js";
 import { type Html } from "../html.js";
@@ -423,6 +423,9 @@ export type ProofBundleView = {
     repairChain: RepairChainRow | null;
     /** v51: the policy semantic coverage is read under. */
     qualityMode: "default" | "strict";
+    /** The saved approved check read now (task-status.ts approvedCheckOf), for a finished build; absent otherwise, and
+     * then no words here claim the check passed. */
+    checks?: ChecksFact | null;
 };
 /** The smallest complete answer to "what did this task deliver?". It is a
  * projection of the same sealed handoff, proof, screenshot, and diff records
@@ -471,6 +474,9 @@ export type CompletionReceiptView = {
     report: RunReportView | null;
     /** The facts every result surface prints identically (package 3). */
     facts: SharedResultFacts;
+    /** The saved approved check as read now (the receipt and any follow-up on the same commit), so the status words
+     * read the same answer as the Project checks row (task-status.ts approvedCheckOf). Absent on a scout's report. */
+    checks?: ChecksFact | null;
 };
 /** A scout run's report as this run stored it: verified and parsed, or
  * the reason it cannot be shown. The download link serves the exact
@@ -501,7 +507,10 @@ export declare function runReportView(artifacts: Artifact[], root: string): RunR
  * evidence problem in words, and the observed publication state. */
 export declare function sharedResultFactsOf(run: Run, proof: ProofBundleView | null, terminal: TerminalDiffView | null, handoff: StructuredHandoffView | null, report: RunReportView | null, publication: PublicationFacts): SharedResultFacts;
 export declare function proofBundleView(store: Store, run: Run, artifacts: Artifact[], root: string): ProofBundleView | null;
-export declare function completionReceiptView(store: Store, run: Run, artifacts: Artifact[], root: string, review?: ReviewFacts | null): CompletionReceiptView;
+/** What the verdict recorded when the build finished, said beside what holds now: a recorded pass is restated only
+ * when the check read now passed; unread, it points to the result; unreadable or failed since, it says so. */
+export declare function completionWords(verdict: ProofVerdict | null, reasons: readonly string[], checks: ChecksFact | null | undefined): string;
+export declare function completionReceiptView(store: Store, run: Run, artifacts: Artifact[], root: string, review?: ReviewFacts | null, now?: Date): CompletionReceiptView;
 export type ReviewDiffLine = {
     kind: "context" | "addition" | "deletion" | "meta";
     text: string;

package/dist/server/render-results.js

@@ -1,6 +1,7 @@
 import { assignmentPresentationOf, historicalAssessmentReason, shortenedMaterialReason } from "../assignment-presentation.js";
 import { assignmentActionHref, assignmentStatusOf, assignmentWithEvidence } from "../assignment-ui.js";
-import { owedAcceptance } from "../assignment.js";
+import { assignmentChecksForRun, owedAcceptance } from "../assignment.js";
+import { releaseCoverageOf } from "../release-coverage.js";
 import {} from "../browser-workspace.js";
 import { CHECK_LEVEL_WORDS, liveQuickCommand } from "../check-levels.js";
 import { LIMITS } from "../decision.js";
@@ -20,7 +21,7 @@ import {} from "../scope.js";
 import { parseReport } from "../scout-report.js";
 import {} from "../store.js";
 import { runCostWords } from "../summary.js";
-import { checkBackingOf, CHECKED_AT_RELEASE, demoChecksOf, pullRequestFactOf, requirementsOf, requirementWordOf, STATUS_MORE, statusDetailsHtml, statusIconSvg, statusWhyHtml } from "../task-status.js";
+import { approvedCheckOf, approvedCheckStateOf, CHECK_COMMAND_CHANGED, CHECK_UNREADABLE, checkBackingOf, CHECKED_AT_RELEASE, checksFactOf, receiptChecksOf, demoChecksOf, pullRequestFactOf, requirementsOf, requirementWordOf, STATUS_MORE, statusDetailsHtml, statusIconSvg, statusWhyHtml } from "../task-status.js";
 import { ACCEPT_NEEDS_REASON, acceptWordsOf, cantAcceptYetOf, evidenceProblemOf, MISMATCH_HEADLINE, receiptHeadingOf, receiptPublicationWords, reportMismatchesOf, RESULT_DECISION_SENTENCE, resultHeadlineOf, resultStatusOf, REVIEW_TOKENS } from "../workspace-ui.js";
 import { createHash, randomBytes } from "node:crypto";
 import { buildsViews, oneLineOf, projectChip, safePrUrl, screen, sentenceCase, strokeIcon, when, whenTime } from "./chrome.js";
@@ -650,9 +651,12 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
         ? `${host.base}&run=${run.id}${section === "summary" ? "" : `&section=${section}`}`
         : `${here}&run=${run.id}${section === "summary" ? "" : `&tab=${section}`}`;
     const assignment = view.assignment === null ? null : assignmentWithEvidence(view.assignment, receiptStatusOf(view.detail.receipt), run.id);
-    const checks = assignment?.receipt?.checks;
+    const saved = assignment?.receipt?.checks;
+    // The approved check as the task page reads it (task-status.ts approvedCheckOf): one answer for this whole page.
+    const checks = saved === undefined || assignment?.receipt == null ? undefined
+        : { ...saved, ...(receiptChecksOf(assignment.receipt) ?? {}), detail: saved.detail };
     if (checks !== undefined)
-        parts.push(html `<p class="${checks.status === "failed" || checks.status === "unavailable" ? "problem" : "meta"}" data-actual-checks="${checks.status}">${checks.detail}${checks.logArtifactId === null ? "" : html ` <a href="/r/${run.id}/evidence/${checks.logArtifactId}">Open check output</a>`}</p>`);
+        parts.push(html `<p class="${checks.status === "failed" || checks.status === "unavailable" ? "problem" : "meta"}" data-actual-checks="${checks.status}">${checks.status === "unavailable" && saved.cause === "command-changed" ? CHECK_COMMAND_CHANGED : html `${checks.status === "unavailable" && saved.status !== "unavailable" ? `${CHECK_UNREADABLE} ` : ""}${checks.detail}`}${checks.logArtifactId === null ? "" : html ` <a href="/r/${run.id}/evidence/${checks.logArtifactId}">Open check output</a>`}</p>`);
     if (assignment?.completion != null)
         parts.push(html `<p class="meta" data-result-completed>Marked complete by ${assignment.completion.actor.replace(/^operator:/, "")}.</p>`);
     const panel = resultPanelParts(view.detail, {
@@ -692,7 +696,7 @@ export function reviewCockpitDetailParts(view, csrf, noted, canRetryReview, tab,
     const unanswered = accepted || youCheck == null ? [] : youCheck.items.length > 0 ? youCheck.items.map(one => one.statement === "" ? one.words : one.statement) : youCheck.lines;
     const base = !acceptsHere ? null : acceptWordsOf({
         // Checks Off that a release check already covers read as passed (release-coverage.ts).
-        checks: checks === undefined ? null : checks.running != null ? "running" : checks.level === "off" && checks.status !== "passed" ? checks.release != null ? "passed" : "off" : checks.status,
+        checks: checks === undefined ? null : { passed: "passed", failed: "failed", running: "running", "not-run": "not-run", off: "off", unreadable: "unavailable" }[approvedCheckStateOf(checks)],
         // Release-aware words (task-status.ts): a requirement waiting only on a release check, or covered by one, isn't unmet.
         unmet: matrix.filter(row => !["Met", "You check", CHECKED_AT_RELEASE].includes(requirementWordOf(row, null, checks === undefined ? undefined : checkBackingOf(checks)))).length,
         action: complete !== null ? "complete" : "accept",
@@ -1084,6 +1088,7 @@ export function proofBundleView(store, run, artifacts, root) {
             : { text: "", artifactId: checkLogArtifact.id, truncated: checkLogArtifact.truncated, problem: read.problem, ...sizes };
     }
     return {
+        ...(run.finishedAt !== null && run.role !== "scout" && run.role !== "reviewer" && run.role !== "planner" ? { checks: savedChecksOf(store, root, run, new Date()) } : {}),
         verdict: verdictRow?.verdict ?? null,
         reasons: verdictRow?.reasons ?? [],
         accepted: acceptanceRow === null ? null : { by: acceptanceRow.approver, note: acceptanceRow.note, at: acceptanceRow.acceptedAt },
@@ -1114,7 +1119,32 @@ export function proofBundleView(store, run, artifacts, root) {
         })(),
     };
 }
-export function completionReceiptView(store, run, artifacts, root, review = null) {
+/** What the verdict recorded when the build finished, said beside what holds now: a recorded pass is restated only
+ * when the check read now passed; unread, it points to the result; unreadable or failed since, it says so. */
+export function completionWords(verdict, reasons, checks) {
+    const recorded = verificationExplanation(verdict, reasons);
+    if (verdict !== "verified")
+        return recorded;
+    const now = approvedCheckStateOf(approvedCheckOf(verdict, reasons, checks));
+    if (checks !== undefined && (now === "passed" || (now === "running" && checks?.status === "passed")))
+        return recorded;
+    if (checks === undefined)
+        return "Open the result to see its checks.";
+    const said = now === "failed" ? `the approved check failed against it${checks?.exitCode == null ? "" : ` (exit ${checks.exitCode})`}.`
+        : checks?.cause === "command-changed" ? "the check command changed since this check." : `${CHECK_UNREADABLE.charAt(0).toLowerCase()}${CHECK_UNREADABLE.slice(1)}`;
+    return `At completion: ${recorded} Now: ${said} It doesn't count as passed.`;
+}
+/** A result's saved approved check as the assignment reads it (assignment.ts): the receipt, follow-ups on its commit,
+ * and with checks Off the passing release check that contains it. */
+function savedChecksOf(store, root, run, now) {
+    const own = checksFactOf(assignmentChecksForRun(store, root, run.id, now), run.headRevision);
+    if (own.level !== "off" || own.status === "passed" || own.status === "failed")
+        return own;
+    const repo = store.refById(run.taskRef)?.repo ?? null;
+    const release = releaseCoverageOf(store, root, repo, run.headRevision);
+    return release == null ? own : { ...own, release };
+}
+export function completionReceiptView(store, run, artifacts, root, review = null, now = new Date()) {
     const handoff = structuredHandoffView(artifacts, root);
     const proof = proofBundleView(store, run, artifacts, root);
     const terminal = terminalDiffView(artifacts, root);
@@ -1149,6 +1179,8 @@ export function completionReceiptView(store, run, artifacts, root, review = null
         coverageSecondary: coverage.contextGaps.length === 0 && (coverage.satisfied === true || (coverage.satisfied === null && !coverage.required)),
         report,
         facts: sharedResultFactsOf(run, proof, terminal, handoff, report, publication),
+        // The same reading the task page's Project checks row shows (assignment.ts), never the verdict alone.
+        ...(run.role === "scout" ? {} : { checks: savedChecksOf(store, root, run, now) }),
     };
 }
 export const REVIEW_DIFF_LINE_CAP = 4_000;
@@ -1357,8 +1389,9 @@ export function evidenceBundleCard(view, run, publication = null, review = null)
     if (view.verdict !== null) {
         // The same status line every other surface renders for this run
         // (workspace package 1), beside the verdict's own explanation.
-        const status = resultStatusOf({ runId, role: run.role, outcome: run.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted !== null, review }, publication);
-        parts.push(html `<p class="row" data-proof-verdict="${dispatchStatusToken(view.verdict)}">${statusLineHtml(status)} <span class="meta">${verificationExplanation(view.verdict, view.reasons)}</span></p>`);
+        const status = resultStatusOf({ runId, role: run.role, outcome: run.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted !== null, review,
+            ...(view.checks === undefined ? {} : { checks: view.checks }) }, publication);
+        parts.push(html `<p class="row" data-proof-verdict="${dispatchStatusToken(view.verdict)}">${statusLineHtml(status)} <span class="meta">${completionWords(view.verdict, view.reasons, view.checks)}</span></p>`);
     }
     if (view.accepted !== null) {
         parts.push(html `<p class="meta">Accepted with an exception by <span class="mono">${view.accepted.by}</span> · ${whenTime(view.accepted.at)}${view.accepted.note === null ? "" : ` — ${view.accepted.note}`}</p>`);
@@ -1429,7 +1462,8 @@ export function receiptStatusOf(view, review = view.review) {
     // The evidence health rides the status (repair 2026-09-14): a result
     // whose stored records are damaged is never called ready on the strength
     // of a verdict recorded before the damage.
-    return evidenceResultStatusOf({ runId: view.runId, role: view.role, outcome: view.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted, recordComplete: view.recordComplete, review }, view.publication, view.facts.evidenceHealth);
+    return evidenceResultStatusOf({ runId: view.runId, role: view.role, outcome: view.outcome, verdict: view.verdict, reasons: view.reasons, accepted: view.accepted, recordComplete: view.recordComplete, review,
+        ...(view.checks === undefined ? {} : { checks: view.checks }) }, view.publication, view.facts.evidenceHealth);
 }
 export function completionReceiptCard(view, taskId, place, standing = receiptStatusOf(view), assignment = null, headline = true) {
     const current = assignment?.receipt?.runId === view.runId ? assignment : null;
@@ -1577,8 +1611,11 @@ export function resultPanelParts(detail, o) {
     // The visible status already says verification is needed. Only omit the
     // generic repeat; failed checks, specific reasons and damaged evidence stay.
     const missingVerdictNamed = o.headStatus !== false && status.token === "verification-needed" && receipt.verdict === null && receipt.reasons.length === 0;
-    if (current == null && !humanReview && !awaitingGoalReview && (!directAssessment || physicalReasons.length > 0) && !missingVerdictNamed && stored.token !== "evidence-damaged" && (stored.tone === "problem" || stored.tone === "attention"))
-        attention.push(verificationExplanation(receipt.verdict, physicalReasons));
+    if (current == null && !humanReview && !awaitingGoalReview && (!directAssessment || physicalReasons.length > 0) && !missingVerdictNamed && stored.token !== "evidence-damaged" && (stored.tone === "problem" || stored.tone === "attention")) {
+        // A recorded pass whose check can't be read now is said as what holds now, never as the verdict's pass.
+        // A recorded pass the check read now can't stand behind (unreadable, or failed since) is said as what holds now.
+        attention.push(stored.token === "check-unreadable" || (receipt.verdict === "verified" && stored.token === "checks-failed") ? stored.detail : verificationExplanation(receipt.verdict, physicalReasons));
+    }
     // Exact criterion assessment notes are already shown in Requirements;
     // do not repeat them as a second current attention message.
     if (presentation !== null)
@@ -1773,7 +1810,12 @@ export function resultPanelParts(detail, o) {
         if (proof.verdict !== null && !directAssessment) {
             // The same status line the panel leads with (one status per surface,
             // workspace package 1), beside the machine verdict's own explanation.
-            checkParts.push(html `<p class="row result-verdict" data-proof-verdict="${dispatchStatusToken(proof.verdict)}"><span class="meta">At completion: ${humanReview ? "Human review required for the requirements below." : verificationExplanation(proof.verdict, proof.reasons)}</span></p>`);
+            // A recorded pass the saved check can't show now is said so here too (task-status.ts approvedCheckOf).
+            const shown = current?.receipt != null ? receiptChecksOf(current.receipt) : receipt.checks === undefined ? undefined : approvedCheckOf(proof.verdict, proof.reasons, receipt.checks);
+            const unreadNow = proof.verdict === "verified" && shown !== undefined && shown?.status !== "passed" && !humanReview;
+            // completionWords: the verdict at completion, and what holds now when they differ.
+            const words = humanReview ? "At completion: Human review required for the requirements below." : unreadNow ? completionWords(proof.verdict, proof.reasons, shown) : `At completion: ${verificationExplanation(proof.verdict, proof.reasons)}`;
+            checkParts.push(html `<p class="row result-verdict" data-proof-verdict="${dispatchStatusToken(proof.verdict)}"${unreadNow ? html ` data-check-now="${approvedCheckStateOf(shown) ?? "unreadable"}"` : ""}><span class="meta">${words}</span></p>`);
         }
         else if (proof.verdict === null && run.outcome !== "no-change") {
             checkParts.push(html `<p class="meta" data-proof-verdict="none">No verification result is available for this build.</p>`);

package/dist/server/render-settings.js

@@ -32,7 +32,7 @@ export function leadSettingsHtml(data) {
     const summary = config === null
         ? data.signedIn !== null
             ? html `<p>The lead is off.</p>${postForm("/settings/lead/on", html `<button type="submit">Use your ${data.signedIn} sign-in</button>`, { returnTo })}`
-            : html `<p>The lead is off. Sign in an agent on this computer to turn it on:</p><p><code>${data.command}</code></p>`
+            : html `<p>The lead is off. Sign in an agent on this computer to turn it on:</p><p><code>${data.command}</code></p>${postForm("/lead/check", html `<button type="submit" class="secondary">Check again</button>`, { returnTo })}`
         : data.words !== null
             ? html `<p>The lead uses ${data.words}.</p><p class="meta">${config.model === "default" ? "Its default model" : `Model ${config.model}`} · up to ${config.dailyTurns} turns a day · no dollar spend. Every action it proposes waits for you to confirm it.</p>`
             : html `<p>The lead uses the ${config.provider === "anthropic-api" ? "Anthropic" : "OpenRouter"} API with ${config.model}.</p><p class="meta">Up to ${chatMoney(config.weeklyCeilingMicrousd)} a week · up to ${config.dailyTurns} turns a day.</p>`;
@@ -261,7 +261,7 @@ ${[
                     html `<details class="provider-manage"><summary>Manage</summary>`,
                     postForm("/settings/provider-key", joinHtml([
                         "",
-                        one.connection === undefined ? "" : html `<p class="provider-connection"><strong>${connectionWords(one.connection)}</strong> ${[one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · ")} · <a href="/settings?check-connection=${encodeURIComponent(one.provider)}#providers">Check again</a></p>`,
+                        one.connection === undefined ? "" : html `<p class="provider-connection"><strong>${connectionWords(one.connection)}</strong> ${[one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · ")} · <button type="submit" class="secondary" formaction="/settings/connection/check" formnovalidate>Check again</button></p>`,
                         html `<p class="meta">${one.mode === "subscription" ? "Uses its own sign-in, so no API-key spend" : "Uses the API key"} · <span class="mono">${one.envName}</span> · ${one.set ? `key stored${one.updatedAt === null ? "" : ` ${one.updatedAt.slice(0, 10)}`}` : one.ambient ? "key in this server's environment" : "no key stored"}</p>`,
                         one.subscriptionCapable
                             ? html `<label>Sign-in<select name="auth-mode">\
@@ -372,7 +372,7 @@ ${one.retiredAt === null
                         : one.set ? { tone: "ok", words: "API key saved" } : one.ambient ? { tone: "ok", words: "Key from this computer’s environment" } : { tone: "off", words: "Not set up" };
             return {
                 provider: one.provider, name, tone: status.tone, words: status.words,
-                connection: one.connection === undefined ? null : { words: connectionWords(one.connection), facts: [one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · "), checkHref: `/settings?check-connection=${encodeURIComponent(one.provider)}#providers` },
+                connection: one.connection === undefined ? null : { words: connectionWords(one.connection), facts: [one.connection.email, one.connection.plan, one.connection.method].filter(Boolean).join(" · "), checkAction: "/settings/connection/check" },
                 usage: `${one.mode === "subscription" ? "Uses its own sign-in, so no API-key spend" : "Uses the API key"} · ${one.set ? `key stored${one.updatedAt === null ? "" : ` ${one.updatedAt.slice(0, 10)}`}` : one.ambient ? "key in this server's environment" : "no key stored"}`,
                 envName: one.envName, subscriptionCapable: one.subscriptionCapable, mode: one.mode, set: one.set,
             };