toolroll 0.9.82 → 0.9.84

package/dist/server/render-pages.js

@@ -9,20 +9,20 @@ import {} from "../dispatch.js";
 import {} from "../first-run.js";
 import {} from "../gaps.js";
 import { limitsHtml } from "../limits-ui.js";
-import { ASK_LABEL, ASKS } from "../needs-you.js";
+import { ASK_LABEL, ASKS, START_BUILDER_COMMAND } from "../needs-you.js";
 import {} from "../onboard.js";
 import {} from "../peek.js";
 import { projectName } from "../project.js";
 import {} from "../proof.js";
 import {} from "../quality.js";
 import { isAlive as runnerAlive } from "../runner.js";
+import { agentModelName, modelName } from "../model-names.js";
 import {} from "../scope.js";
 import {} from "../store.js";
 import { runCostWords, spendLine, tally } from "../summary.js";
 import {} from "../work-index.js";
 import { WORK_VIEWS } from "../workspace-ui.js";
 import { createHash } from "node:crypto";
-import { closeSync, constants as fsConstants, lstatSync, openSync, readSync } from "node:fs";
 import { homedir } from "node:os";
 import { join } from "node:path";
 import { buildsViews, CHEVRON_ICON, consoleSpend, FOLDER_PATHS, GRIP_HANDLE, isOverdue, projectChip, relativeAge, safePrUrl, screen, sentenceCase, strokeIcon, TO_FRONT_ICON, when, whenTime } from "./chrome.js";
@@ -81,9 +81,10 @@ export function inboxPage(chrome, data) {
         : html `<h2>Supply a requirement</h2><p class="hint">approved work is ready except for these — fill one and its tasks start</p>${joinHtml(data.gaps.map(gap => html `<p class="row"><a href="/caps">${gap.key}</a> <span class="meta">frees ${gap.unblocks.length} task${gap.unblocks.length > 1 ? "s" : ""}</span><span class="right meta">how to fix →</span></p>`), "\n")}`;
     // The first-run steps, until the first Ready result: each is done or
     // shows the one action that does it.
-    const wizard = data.wizard === null
+    const steps = data.wizard;
+    const wizard = steps === null
         ? null
-        : html `<div class="card" data-first-run><p><strong>Get to your first result</strong></p>${joinHtml(data.wizard.map(step => html `<p class="row" data-step="${step.key}"><span class="mono" aria-hidden="true">${step.done ? "✓" : "○"}</span> <strong>${step.title}</strong>${step.checking ? html ` <span class="meta">checking…</span>` : step.action === null ? html ` <span class="meta">done</span>`
+        : html `<div class="card" data-first-run><p><strong>Get to your first result</strong></p>${joinHtml(steps.map(step => html `<p class="row" data-step="${step.key}"><span class="mono" aria-hidden="true">${step.done ? "✓" : "○"}</span> <strong>${step.title}</strong>${step.checking ? html ` <span class="meta">checking…</span>` : step.action === null ? html ` <span class="meta">done</span>`
             : step.action.kind === "link" ? html ` <a href="${step.action.href}">${step.action.label}</a>`
                 : html ` <code>${step.action.command}</code>`}</p>`), "\n")}</div>`;
     const noWorker = data.worker.answering > 0
@@ -147,6 +148,20 @@ export function inboxPage(chrome, data) {
     });
 }
 /** System: the machinery — workers, background service, workspaces. */
+/** Start a builder: the one command, as text to select (/start-builder, where every "Connect a builder" leads, and
+ * /system#builder). `project`: the open project's name, when the viewer may see it; `connected`: whether a builder
+ * that may build there is checking in (null: say nothing); `managed`: whether this person can start one themselves
+ * (registering a builder takes an instance operator), else who to ask. */
+export function startBuilderHtml(data) {
+    const where = data.project === null ? null : html ` to <strong>${data.project}</strong>`;
+    const state = data.connected === null ? null
+        : data.connected ? html `<p>A builder is connected${where}. Approved tasks there start on their own.</p>`
+            : html `<p><strong>No builder is connected</strong>${where}. Tasks wait until one is.</p>`;
+    const title = data.heading === "h1" ? html `<h1 id="builder-heading">Start a builder</h1>` : html `<h2 id="builder-heading">Start a builder</h2>`;
+    return html `<section id="builder" aria-labelledby="builder-heading">${title}<div class="card">${state}<p>On the computer where ${data.project ?? "the project"} lives, open the project's folder in a terminal and run:</p><p><code class="start-builder-command" style="user-select:all">${START_BUILDER_COMMAND}</code></p>${data.managed
+        ? html `<p class="meta">Keep it running. Approved tasks start on their own. The console alone (<code>toolroll serve</code>) doesn't build.</p>`
+        : html `<p class="meta">Starting a builder takes someone who manages this Toolroll. Ask them to run it there; your tasks start on their own once it connects.</p>`}</div></section>`;
+}
 export function systemPage(chrome, data) {
     const nowMs = data.now.getTime();
     const runnerCards = data.runners
@@ -187,16 +202,15 @@ export function systemPage(chrome, data) {
                 ? html `set for the whole installation${one.setBy === null ? null : html ` by ${one.setBy}`}`
                 : html `the default — nothing configured`;
         const dollars = one.provider === "claude" ? null : html ` · <span title="this provider reports tokens, not dollars — its runs land as unmeasured spend">no dollar costs</span>`;
-        return html `<p class="row"><span class="mono">${one.phase}</span> <strong>${one.provider ?? ""}</strong>${one.model === null || one.model === undefined ? html ` <span class="meta">(its default model)</span>` : html ` · <span class="mono">${one.model}</span>`}<span class="right meta">${who}${dollars}</span></p><p class="meta" style="margin-top:0">${PHASE_SAID[one.phase] ?? ""}</p>`;
+        return html `<p class="row"><span class="mono">${one.phase}</span> <strong>${one.provider === null || one.provider === undefined ? "" : agentModelName(one.provider, one.model ?? null)}</strong>${one.model === null || one.model === undefined ? html ` <span class="meta">(its default model)</span>` : null}<span class="right meta">${who}${dollars}</span></p><p class="meta" style="margin-top:0">${PHASE_SAID[one.phase] ?? ""}</p>`;
     }), "\n");
-    const agentsCard = html `<h2>Agents</h2><p class="meta">Which AI provider runs each phase — changed from the terminal with your credentials (<code>toolroll config</code>), never by a browser click</p><div class="card">${agentLines}<p class="meta">Repair always stays on the provider that built — only its model can differ. A schedule's task filed under an approval moved from a routine is pinned to the agents approved then.</p></div>`;
+    const agentsCard = html `<h2>Agents</h2><p class="meta">Which AI provider runs each phase. An instance operator changes them in <a href="/settings/models">Settings → Models</a> with their password, or with <code>toolroll config</code>.</p><div class="card">${agentLines}<p class="meta">Repair always stays on the provider that built — only its model can differ. A schedule's task filed under an approval moved from a routine is pinned to the agents approved then.</p></div>`;
     return screen("system", joinHtml([
         html `<h1>System</h1>`,
         html `<p class="hint">builders execute tasks in isolated temporary copies of each project</p>`,
         agentsCard,
-        cards.length === 0
-            ? html `<p class="meta">No builder is connected yet. On the machine where the project lives, open that folder and run <code>toolroll up</code>.</p>`
-            : html `<div class="cards">${cards}</div>`,
+        cards.length === 0 ? null : html `<div class="cards">${cards}</div>`,
+        startBuilderHtml({ heading: "h2", project: null, connected: data.runners.some(one => one.retiredAt === null && runnerAlive(one, data.now)) ? null : false, managed: true }),
         data.outboxPending > 0 ? html `<p class="meta">Notifications: ${data.outboxPending} pending delivery</p>` : null,
         (data.externalWork ?? []).length === 0
             ? null
@@ -373,11 +387,11 @@ export function boardBody(data, ciRed) {
             ? null
             : html `<span class="steps" role="img" aria-label="${`step ${step + 1} of ${BUILD_STEPS.length}: ${BUILD_STEPS[step]}`}">${BUILD_STEPS.map((_, index) => html `<i class="${index < step ? "on" : index === step ? "now" : ""}"></i>`)}</span>`;
         // Who, which model and which branch, as one muted line: words in Geist, the model and branch in mono.
-        const model = claim.model === null ? null : `${claim.provider !== null && claim.provider !== "claude" ? `${claim.provider} · ` : ""}${claim.model}`;
+        const model = claim.model === null ? null : claim.provider === null ? modelName(null, claim.model) : agentModelName(claim.provider, claim.model);
         const branch = claim.branch === null ? null : `${claim.branch}${workspace === null ? "" : ` · ${workspace}`}`;
         const who = joinHtml([
             html `<span>${claim.runner}</span>`,
-            model === null ? null : html `<span class="mono">${model}</span>`,
+            model === null ? null : html `<span>${model}</span>`,
             branch === null ? null : html `<span class="mono">${branch}</span>`,
         ].filter((one) => one !== null), html `<span aria-hidden="true"> · </span>`);
         return html `<a class="lane-card building" href="${card.href}" data-vt="${card.taskId}"><span class="t"><span class="dot dot-ok pulse"></span>${card.title}</span>${steps}<span class="live-line"><span class="stage">${live}</span>${tickingClock(claim.claimedAt, data.now)}</span><span class="id">${card.taskId}</span><span class="who">${who}</span>${chips([
@@ -478,7 +492,7 @@ export function homePage(chrome, data) {
     // an operator actually watches this page, so it re-renders itself.
     const building = data.building.length === 0
         ? null
-        : html `<h2>Building now</h2><p class="hint">live builds — this page refreshes itself every 10 seconds while anything runs</p><div class="cards">${data.building.map(claim => html `<a class="stat-card" href="${taskHref(claim.taskId)}" style="text-decoration:none"><span class="k"><span class="dot dot-ok pulse"></span>${claim.taskId}</span><span class="v">${claim.runner} · ${Math.max(1, Math.round((data.now.getTime() - new Date(claim.claimedAt).getTime()) / 60_000))}m elapsed${claim.model === null ? null : html ` · ${claim.model}`}</span></a>`)}</div>`;
+        : html `<h2>Building now</h2><p class="hint">live builds — this page refreshes itself every 10 seconds while anything runs</p><div class="cards">${data.building.map(claim => html `<a class="stat-card" href="${taskHref(claim.taskId)}" style="text-decoration:none"><span class="k"><span class="dot dot-ok pulse"></span>${claim.taskId}</span><span class="v">${claim.runner} · ${Math.max(1, Math.round((data.now.getTime() - new Date(claim.claimedAt).getTime()) / 60_000))}m elapsed${claim.model === null ? null : html ` · ${modelName(null, claim.model)}`}</span></a>`)}</div>`;
     // THE FLEET: runners by heartbeat age, worktrees by lease state, the watch.
     const nowMs = data.now.getTime();
     const runnerCards = data.runners
@@ -798,7 +812,7 @@ export function portfolioOverview(data) {
     const outcomeWords = groups.filter(([, count]) => count > 0).map(([word, count]) => `${count} ${word}`).join(" · ");
     const summary = tally(data.runs24);
     // ---- running: current live claims, project chips on ----
-    const liveRows = joinHtml(data.live.map(one => html `<p class="row"><a href="${taskHref(one.taskId)}">${one.taskId}</a>${projectChip(one.repo)} <span class="badge badge-running">Running</span> <span class="mono meta">${one.runner}${one.model === null ? null : html ` · ${one.model}`} · <time data-elapsed-since="${one.claimedAt}"></time></span></p>`), "\n");
+    const liveRows = joinHtml(data.live.map(one => html `<p class="row"><a href="${taskHref(one.taskId)}">${one.taskId}</a>${projectChip(one.repo)} <span class="badge badge-running">Running</span> <span class="meta"><span class="mono">${one.runner}</span>${one.model === null ? null : html ` · ${modelName(null, one.model)}`} · <time data-elapsed-since="${one.claimedAt}"></time></span></p>`), "\n");
     // ---- the ledger: terminal runs started in the window, one chip each ----
     const chipClass = (outcome) => outcome === "built" || outcome === "no-change" ? "badge-done" : outcome === "failed" ? "badge-failed" : "";
     const prLink = (one) => {
@@ -809,7 +823,7 @@ export function portfolioOverview(data) {
         const safe = safePrUrl(one.prUrl);
         return safe === null ? html ` · PR #${one.prNumber}` : html ` · <a href="${safe}">PR #${one.prNumber}</a>`;
     };
-    const ledgerRows = joinHtml(data.ledger.map(one => html `<p class="row"><a href="/r/${one.runId}">${one.title}</a>${projectChip(one.repo)} <span class="badge ${chipClass(one.outcome)}">${sentenceCase(one.outcome)}</span> ${one.role === "scout" ? html `<a class="badge" href="${taskHref(one.taskId)}#report">Report</a> ` : null}<span class="mono meta">${one.provider === null ? "" : one.provider}${one.model === null ? null : html ` · ${one.model}`}${one.ranMinutes === null ? null : html ` · ${one.ranMinutes}m`} · ${runCostWords({ authMode: one.authMode, costUsd: one.costUsd, tokensIn: null, tokensOut: null })}${prLink(one)}</span></p>`), "\n");
+    const ledgerRows = joinHtml(data.ledger.map(one => html `<p class="row"><a href="/r/${one.runId}">${one.title}</a>${projectChip(one.repo)} <span class="badge ${chipClass(one.outcome)}">${sentenceCase(one.outcome)}</span> ${one.role === "scout" ? html `<a class="badge" href="${taskHref(one.taskId)}#report">Report</a> ` : null}<span class="meta">${one.provider === null ? (one.model === null ? "" : modelName(null, one.model)) : agentModelName(one.provider, one.model)}${one.ranMinutes === null ? null : html ` · ${one.ranMinutes}m`} · ${runCostWords({ authMode: one.authMode, costUsd: one.costUsd, tokensIn: null, tokensOut: null })}${prLink(one)}</span></p>`), "\n");
     return joinHtml([
         html `<div class="control-room-head"><div><h1>Portfolio</h1><p class="meta">Every project and live build in one place</p></div><div class="actions"><a class="badge" href="/tasks/new">+ New task</a><a class="badge" href="/board?scope=all">Full board →</a></div></div>`,
         data.saturated ? html `<div class="problem">This overview reached its 200-task display cap; the task list holds the rest.</div>` : null,
@@ -865,60 +879,6 @@ export function githubIdentityOf(remoteUrl) {
         return `${ssh[1]}/${ssh[2]}`;
     return null;
 }
-/**
- * The `origin` remote's url from a repository's OWN .git/config. BOUNDED
- * I/O by construction (ghlist review, finding 1): the final component may
- * not be a symlink (O_NOFOLLOW + lstat), must be a REGULAR file under a
- * size cap, and at most 64 KiB are ever read — a sparse monster or a fifo
- * planted as a "config" reads as null, never as a hang. Parsed LINE BY
- * LINE with real section tracking (finding 2): a `[remote "origin"]`
- * embedded inside some other value never opens the section. null when
- * unreadable or origin-less; a worktree-style `.git` FILE (gitdir pointer)
- * reads null too, which is honest — its identity lives elsewhere. The
- * answer is ADVISORY metadata for offering a button: the /projects/open
- * road re-proves path, ceiling, and git-ness before anything mutates, and
- * a config that lies about its origin can only mislabel a repository the
- * operator was already allowed to open.
- */
-export function originUrlOf(repoPath) {
-    const file = join(repoPath, ".git", "config");
-    let fd = null;
-    try {
-        const stat = lstatSync(file);
-        if (!stat.isFile() || stat.size > 1024 * 1024)
-            return null;
-        fd = openSync(file, fsConstants.O_RDONLY | fsConstants.O_NOFOLLOW);
-        const buffer = Buffer.alloc(64 * 1024);
-        const read = readSync(fd, buffer, 0, buffer.length, 0);
-        const config = buffer.toString("utf8", 0, read);
-        let inOrigin = false;
-        for (const line of config.split("\n")) {
-            if (/^\s*\[/.test(line)) {
-                inOrigin = /^\s*\[remote "origin"\]\s*$/.test(line);
-                continue;
-            }
-            if (!inOrigin)
-                continue;
-            const url = /^\s*url\s*=\s*(.+)$/.exec(line)?.[1];
-            if (url !== undefined)
-                return url.trim();
-        }
-        return null;
-    }
-    catch {
-        return null;
-    }
-    finally {
-        if (fd !== null) {
-            try {
-                closeSync(fd);
-            }
-            catch {
-                // already closed
-            }
-        }
-    }
-}
 /** The GitHub listing page: the account's repositories with ONE honest
  * action each. Names, descriptions, and paths are gh/filesystem DATA —
  * escaped at the sink like everything else. */
@@ -955,6 +915,7 @@ export function githubReposPage(chrome, data) {
     return screen("projects", joinHtml([
         html `<h1>Your GitHub repositories</h1>`,
         html `<p class="meta">Repositories available to the GitHub account signed in on this machine — open one you already have, or clone a new one after a quick preview.</p>`,
+        data.localUnanswered === true ? html `<p class="meta">Your projects folder didn't answer, so copies already on this machine aren't matched yet. Try again in a moment.</p>` : null,
         rows,
         data.listed === null ? null : list("Refresh list"),
         html `<p class="row" style="margin-top:.6rem"><a class="badge" href="/projects">← back to projects</a></p>`,
@@ -1153,7 +1114,7 @@ export function fleetBody(queued, building, runners, queueRevision, visibleRepo)
         const head = retired
             ? html `<p class="meta">This worker is retired — drag these elsewhere, or register the name again</p>`
             : html `${postForm("/queue/note", html `<input type="text" name="note" class="runner-note" value="${runner.queueNote ?? ""}" data-initial="${runner.queueNote ?? ""}" placeholder="what this worker is working through" aria-label="column note" maxlength="200">`, { attrs: { class: "row" }, hidden: { from: "fleet", runner: runner.name } })}<p class="meta">${runnerAlive(runner, new Date()) ? "alive" : "quiet"} · ${live.length}/${runner.capacity} building</p>`;
-        const buildingCards = joinHtml(live.map(claim => html `<div class="lane-card" data-taken="1"><p class="row"><span class="dot dot-ok pulse"></span> ${claim.taskId}</p><p class="row meta">building${chip(claim.repo ?? null)}${claim.model === null ? null : html ` · ${claim.model}`} · ${Math.max(1, Math.round((Date.now() - new Date(claim.claimedAt).getTime()) / 60_000))}m</p></div>`), "\n");
+        const buildingCards = joinHtml(live.map(claim => html `<div class="lane-card" data-taken="1"><p class="row"><span class="dot dot-ok pulse"></span> ${claim.taskId}</p><p class="row meta">building${chip(claim.repo ?? null)}${claim.model === null ? null : html ` · ${modelName(null, claim.model)}`} · ${Math.max(1, Math.round((Date.now() - new Date(claim.claimedAt).getTime()) / 60_000))}m</p></div>`), "\n");
         const queuedCards = joinHtml(own.map(queuedCardOf), "\n");
         const empty = live.length === 0 && own.length === 0
             ? html `<p class="meta lane-empty">${retired ? "nothing left" : "idle — will take from the shared queue"}</p>`

package/dist/server/render-people.d.ts

@@ -29,5 +29,17 @@ export declare function wrongHostPage(facts: {
     served: string;
     command: string | null;
 }): Html;
-/** The first-account page (setup review): shown only while no approver exists. */
-export declare function signupPage(problem: string | null, attemptsLeft: number): Html;
+/** Which field a first-account refusal is about (null: the page itself, as when the tries are spent). */
+export type SignupProblem = {
+    field: "code" | "name" | "password" | null;
+    text: string;
+};
+/** The username rule, said once for the server's check, the input's `pattern` (anchored by the browser; `\-` so the
+ * v-flag parse accepts it) and the hint. */
+export declare const SIGNUP_NAME: RegExp;
+export declare const SIGNUP_PASSWORD_MIN = 8;
+/** The first-account page (setup review): shown only while no approver exists. Rules are stated up front and match
+ * the inputs' own constraints. On a refusal the typed username comes back; the setup code and the password never do.
+ * The message sits under the field it is about, announced (role="alert"), with that field aria-invalid, described by
+ * it and focused, so it works without script (this page has none). */
+export declare function signupPage(problem: SignupProblem | string | null, attemptsLeft: number, typedName?: string): Html;

package/dist/server/render-people.js

@@ -99,21 +99,44 @@ ${facts.command === null ? "" : html `<p>To use this address, stop Toolroll (Ctr
 <p class="meta">On that computer, ${code(`http://${facts.served}/`)} always works. Other addresses need your say-so, so no other website can reach it.</p>
 </main></body></html>`;
 }
-/** The first-account page (setup review): shown only while no approver exists. */
-export function signupPage(problem, attemptsLeft) {
-    return shell("Toolroll", joinHtml([
-        html `<div class="login-viewport"><div class="login-shell">`,
-        html `<h1 class="so-wordmark login-brand">${BRAND_HTML}</h1>`,
+/** The username rule, said once for the server's check, the input's `pattern` (anchored by the browser; `\-` so the
+ * v-flag parse accepts it) and the hint. */
+export const SIGNUP_NAME = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
+const SIGNUP_NAME_PATTERN = "[A-Za-z0-9][A-Za-z0-9._\\-]{0,63}";
+export const SIGNUP_PASSWORD_MIN = 8;
+/** The first-account page (setup review): shown only while no approver exists. Rules are stated up front and match
+ * the inputs' own constraints. On a refusal the typed username comes back; the setup code and the password never do.
+ * The message sits under the field it is about, announced (role="alert"), with that field aria-invalid, described by
+ * it and focused, so it works without script (this page has none). */
+export function signupPage(problem, attemptsLeft, typedName = "") {
+    const open = attemptsLeft > 0;
+    // Out of tries, the page always says why and what to do, also when it is simply opened again.
+    const said = typeof problem === "string" ? { field: null, text: problem }
+        : problem ?? (open ? null : { field: null, text: "Too many wrong setup codes. Restart Toolroll to get a new code." });
+    const field = open ? said?.field ?? null : null;
+    const error = (which) => field === which && said !== null ? html `<p class="problem signup-problem" id="signup-problem" role="alert">${said.text}</p>` : "";
+    const describe = (which, hint) => field === which ? html ` aria-invalid="true" aria-describedby="${hint} signup-problem" autofocus` : html ` aria-describedby="${hint}"`;
+    const tries = attemptsLeft === 1 ? "1 try left" : `${attemptsLeft} tries left`;
+    return shell("Create the first account · Toolroll", joinHtml([
+        // Inputs on this page reach a 44px target; the console's shared input rule stops at 36px.
+        html `<style>.signup h1{margin-bottom:1rem}.signup input{min-height:2.75rem}.signup .field-note{margin:.375rem 0 0;font-size:.75rem;line-height:1.45;color:var(--muted-foreground)}.signup .signup-problem{margin:.5rem 0 0}</style>`,
+        html `<div class="login-viewport"><div class="login-shell signup">`,
+        html `<p class="so-wordmark login-brand">${BRAND_HTML}</p>`,
+        html `<h1>Create the first account</h1>`,
         html `<div class="login-card">`,
-        html `<p><strong>Create the first account</strong></p>`,
-        html `<p class="meta">There are no accounts yet. The terminal that started Toolroll printed a setup code; enter it here with the username and password you want.</p>`,
-        problem === null ? "" : html `<div class="problem">${problem}</div>`,
-        attemptsLeft <= 0
+        !open || field === null ? (said === null ? "" : html `<div class="problem" role="alert">${said.text}</div>`) : "",
+        !open
             ? ""
             : postForm("/signup", joinHtml([
-                html `<label>Setup code<input type="text" name="code" inputmode="numeric" autocomplete="one-time-code" autofocus></label>`,
-                html `<label>Username<input type="text" name="name" autocomplete="username" autocapitalize="none" spellcheck="false" required></label>`,
-                html `<label>Password<input type="password" name="password" autocomplete="new-password"></label>`,
+                html `<label>Setup code<input type="text" name="code" inputmode="numeric" autocomplete="one-time-code" autocapitalize="none" spellcheck="false" required${describe("code", "signup-code-note")}${field === null ? " autofocus" : ""}></label>`,
+                html `<p class="field-note" id="signup-code-note">Printed in the terminal that started Toolroll. ${tries}.</p>`,
+                error("code"),
+                html `<label>Username<input type="text" name="name" value="${typedName}" autocomplete="username" autocapitalize="none" spellcheck="false" required maxlength="64" pattern="${SIGNUP_NAME_PATTERN}"${describe("name", "signup-name-note")}></label>`,
+                html `<p class="field-note" id="signup-name-note">Letters, digits, dots, dashes or underscores, starting with a letter or digit. Up to 64.</p>`,
+                error("name"),
+                html `<label>Password<input type="password" name="password" autocomplete="new-password" required minlength="${SIGNUP_PASSWORD_MIN}"${describe("password", "signup-password-note")}></label>`,
+                html `<p class="field-note" id="signup-password-note">At least ${SIGNUP_PASSWORD_MIN} characters.</p>`,
+                error("password"),
                 html `<button type="submit">Create account and sign in</button>`,
             ], "\n"), { signedOut: true }),
         html `</div>`,

package/dist/server/render-settings.js

@@ -511,6 +511,7 @@ export const SETTINGS_GROUPS = [
     ["Agents", [
             ["/settings/lead", "Lead", html `<path d="M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z"/><path d="M8 9h8M8 13h5"/>`],
             ["/settings/models", "Models", html `<rect x="4" y="4" width="16" height="16" rx="2"/><rect x="9" y="9" width="6" height="6"/><path d="M9 2v2M15 2v2M9 20v2M15 20v2M2 9h2M2 15h2M20 9h2M20 15h2"/>`],
+            ["/settings/spend", "Spend", html `<circle cx="12" cy="12" r="9"/><path d="M15 9.5c-.6-.9-1.7-1.5-3-1.5-1.7 0-3 .9-3 2s1.3 1.7 3 2 3 .9 3 2-1.3 2-3 2c-1.3 0-2.4-.6-3-1.5M12 6v2M12 16v2"/>`],
             ["/settings/skills", "Skills", html `<path d="m12 3 1.9 5.8L20 10l-5 3.6L16.8 20 12 16.4 7.2 20 9 13.6 4 10l6.1-1.2z"/>`],
             ["/settings/tools", "Tools", html `<path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"/>`],
             ["/settings/knowledge", "Knowledge", html `<path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20V3H6.5A2.5 2.5 0 0 0 4 5.5z"/><path d="M4 19.5A2.5 2.5 0 0 0 6.5 22H20v-5"/>`],

package/dist/server/render-tasks.js

@@ -25,13 +25,14 @@ import { taskRoad } from "../first-run.js";
 import { starterForWork } from "../flow-starters.js";
 import {} from "../gaps.js";
 import { readAuthModeStrict } from "../keys.js";
-import { failedAttemptSentence, retryNoteOf } from "../needs-you.js";
+import { failedAttemptSentence, retryNoteOf, START_BUILDER_COMMAND, startBuilderHref } from "../needs-you.js";
 import { chosenWords, makesNoPlan, PHASES as ROUTE_PHASES, TASK_SIZES } from "../phase-routing.js";
 import { parseExecutionPlanDocument } from "../plan.js";
 import {} from "../planner-source.js";
 import { projectName } from "../project.js";
 import { dispatchStatusToken, manualReviewOnly, plainReasonWords, reviewConflict } from "../proof.js";
 import { providerName } from "../provider-auth.js";
+import { agentModelName } from "../model-names.js";
 import {} from "../provider.js";
 import { qualityModeTitle } from "../quality.js";
 import { evidenceShortenedWords } from "../result-review.js";
@@ -134,17 +135,7 @@ export function acceptanceCeremonyHtml(criteria) {
 }
 /** "claude" + "opus" → "Claude Opus"; "claude-opus-5-5" → "Claude Opus 5.5"; anything else keeps its exact id. */
 export function agentNameWords(provider, model) {
-    const name = providerName(provider);
-    if (model === null || model === "" || model === "default")
-        return name;
-    const bare = model.startsWith(`${provider}-`) ? model.slice(provider.length + 1) : model;
-    const title = (word) => `${word[0].toUpperCase()}${word.slice(1)}`;
-    if (/^[a-z]+$/.test(bare))
-        return `${name} ${title(bare)}`;
-    const versioned = /^([a-z]+)-(\d+(?:-\d+)*)$/.exec(bare);
-    if (versioned !== null)
-        return `${name} ${title(versioned[1])} ${versioned[2].replace(/-/g, ".")}`;
-    return `${name} ${model}`;
+    return agentModelName(provider, model);
 }
 /** The permission a sealed profile grants, in two or three words. */
 export function permissionWordsOf(profile) {
@@ -815,7 +806,9 @@ export function taskRecoveryHref(taskId, diagnosis) {
         return null;
     const task = taskHref(taskId);
     switch (diagnosis.action) {
+        // The task page only repeats that no builder is connected: lead to the command that connects one.
         case "start-worker":
+            return startBuilderHref(taskId);
         case "repair-dependency":
             return `${task}#run-status`;
         case "retry-task":
@@ -1350,11 +1343,11 @@ export function taskBodyParts(data) {
                         firstConnection
                             ? html `<p>Toolroll is open, but this project has not been connected to a builder yet.</p><p>On the machine where the project lives, open that folder and run:</p>`
                             : html `<p>Toolroll is open, but this project's builder stopped checking in. Reopen Toolroll on the machine where the project lives.</p><p>If you normally start it from a terminal, open the project folder and run:</p>`,
-                        html `<code class="dispatch-recovery-command">toolroll up</code>`,
+                        html `<code class="dispatch-recovery-command">${START_BUILDER_COMMAND}</code>`,
                         firstConnection
                             ? html `<p class="meta">This is the normal start command: it opens the app, connects the project, and starts its builder. Keep Toolroll running; approved tasks begin automatically.</p>`
                             : html `<p class="meta">This task resumes automatically when the builder reconnects. You do not need to file or approve it again.</p>`,
-                        html `<p><a href="/system">See connection status →</a></p></div></details>`,
+                        html `<p><a href="${startBuilderHref(task.id)}">See connection status →</a></p></div></details>`,
                     ]);
                 }
                 // Never a link to this page's own acts: Retry sits on the status card and below.

package/dist/server/request-context.d.ts

@@ -43,6 +43,8 @@ export type RequestFacts = {
     };
     /** Passwordless is on and this is a signed-in browser: ceremony password fields render as nothing (html.ts reauth). */
     passwordless?: boolean;
+    /** The browser session's open project (display only: the sidebar's picker names it). */
+    openProject?: string | null;
 };
 /**
  * The request's own session facts, readable from anywhere below the

package/dist/server/route-table.js

@@ -133,12 +133,15 @@ get("pages", "workbench", "/workbench", free);
 get("tasks", "board", "/board", { limited: "collection" });
 get("tasks", "review", "/review", { limited: "collection" });
 get("settings", "spend", "/spend", { ...free, ...anyOperator("An instance operator sees spend.", "/") });
+get("settings", "settings.spend", "/settings/spend", { ...free, ...anyOperator("An instance operator sets spending limits.", "/settings") });
 get("pages", "ledger", "/ledger", { limited: "unscoped", ...free });
 get("pages", "activity", "/activity");
 get("tasks", "done", "/done", { limited: "collection" });
 get("settings", "mode", "/mode");
 get("people", "people.page", "/people", { limited: "unscoped", ...free });
 get("pages", "system", "/system");
+// Where every "Connect a builder" leads: read-only, open to a project-limited person (the handler shows only a visible project).
+get("pages", "start-builder", "/start-builder", { limited: "unscoped", ...free });
 get("tasks", "tasks", "/tasks", { limited: "collection", ...free }); // a redirect to /work now: never sent to the project opener first
 get("tasks", "queue", "/queue");
 get("pages", "peek", "/peek", free);
@@ -334,8 +337,12 @@ for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in"
 }
 post("settings", "settings.flows-on", "/settings/flows/on", { limited: "collection", ...approver("An approver switches starter flows on.", "/settings/flows") });
 const MODELS = approver("Sign in as an approver to change models.", "/settings/models");
-for (const one of ["check", "watch", "update", "agent"])
+for (const one of ["check", "watch", "update"])
     post("settings", `settings.models-${one}`, `/settings/models/${one}`, MODELS);
+// Changing which model a role uses: an instance operator's browser step-up (the handler proves the password, or the
+// Passwordless session; model-choices.ts re-proves the session and standing inside its one transaction).
+for (const one of ["agent", "apply"])
+    post("settings", `settings.models-${one}`, `/settings/models/${one}`, { scope: "step-up", ...operator("An instance operator changes models.", "/settings/models") });
 // Any other models action answers the models area's own refusal.
 post("settings", "settings.models-act", "^\\/settings\\/models\\/.*$", { sample: "/settings/models/unknown", ...MODELS });
 post("settings", "settings.knowledge-refresh", "/settings/knowledge/refresh", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to refresh project context.", "/settings/knowledge") });

package/dist/server/runtime.d.ts

@@ -1,3 +1,4 @@
+import { type ProjectIdentities } from "../project-identity.js";
 import type { FreshFacts } from '../scope.js';
 import type { createPersonalQueueRuntime } from '../lead-queue-runtime.js';
 import type { FlowRooms } from '../flow-live.js';
@@ -95,7 +96,10 @@ export interface ServerRuntime {
     liveCeiling: () => {
         repos: string[];
         roots: readonly string[];
+        canon?: (path: string) => string | null;
     };
+    /** Project identities without reading folders on the console's thread (project-identity.ts). */
+    identities: ProjectIdentities;
     taskScreen: (response: ServerResponse, who: Who, taskId: string, problem: string | null, status: number, scopeDraft?: URLSearchParams, cancelDraft?: string, editPlan?: boolean, page?: TaskPageExtras) => void;
     runVisible: (run: Run) => boolean;
     runIsLive: (run: Pick<Run, "outcome" | "leaseId" | "taskRef">) => boolean;

package/dist/server/runtime.js

@@ -1,3 +1,4 @@
+import {} from "../project-identity.js";
 /** Captured server state and shared guards. Getters preserve live state across requests. */
 import {} from "node:http";
 import {} from '../assignment.js';

package/dist/server/settings.d.ts

@@ -2,7 +2,7 @@ import type { ServerRuntime } from './runtime.js';
 import { type RoleView } from "../models-ui.js";
 export declare function createSettingsHandlers(runtime: ServerRuntime): {
     registrations: import("./handler-registry.js").Registration[];
-    modelsView: (canManage: boolean, csrf: string, now: Date, said: string | null, problem: string | null) => {
+    modelsView: (canManage: boolean, csrf: string, now: Date, said: string | null, problem: string | null, query?: URLSearchParams) => {
         runtimes: import("../model-catalog.js").RuntimeState[];
         watch: import("../model-catalog.js").WatchState;
         roles: RoleView[];
@@ -14,5 +14,62 @@ export declare function createSettingsHandlers(runtime: ServerRuntime): {
             words: string;
         } | null;
         fresh: import("../model-catalog.js").SeenModel[];
+        scope: {
+            value: string;
+            label: string;
+            digest: string;
+            options: {
+                value: string;
+                label: string;
+            }[];
+        };
+        inUse: string | null;
+        presets: {
+            name: "opus" | "sized";
+            label: string;
+            words: string;
+            inUse: boolean;
+            recommended: boolean;
+        }[];
+        newer: {
+            from: string;
+            to: string;
+            name: string;
+            roles: string;
+        }[];
+        preview: {
+            title: string;
+            rows: {
+                role: string;
+                before: string;
+                after: string;
+                notes: string[];
+            }[];
+            hidden: {
+                scope: string;
+                digest: string;
+                change: string;
+            };
+        } | null;
+        unresolved: string | null;
+        sizing: {
+            small: string;
+            routine: string;
+            large: string;
+            risky: string;
+            classifier: string;
+        };
+        routing: string;
+        recent: {
+            taskId: string;
+            runId: number;
+            role: string;
+            chosen: string;
+            ranOn: string;
+        }[];
+        waiting: {
+            taskId: string;
+            title: string;
+        }[];
     };
 };