toolroll 0.9.83 → 0.9.85

package/dist/server/render-results.d.ts

@@ -614,6 +614,8 @@ export type ResultDetail = {
     fileAnchors: ReadonlyMap<string, string>;
     comments: DiffComment[];
     pastComments?: DiffComment[];
+    /** Live saved notes whose screenshot would be refused now (result-actions.ts feedbackImageProblem). */
+    unusableImageNotes?: readonly number[];
     reviewerFindings: DiffComment[];
     /** The build's one automatic review, when its project had review on. */
     automaticReview?: BuildReviewView | null;

package/dist/server/render-results.js

@@ -1068,7 +1068,7 @@ export function proofBundleView(store, run, artifacts, root) {
         catch {
             problem = "the file could not be read";
         }
-        return [{ path, caption: captionFor(path), artifactId: artifact.id, problem }];
+        return [{ path, caption: captionFor(path), artifactId: artifact.id, sha256: artifact.sha256, problem }];
     });
     const stored = new Set(screenshots.map(one => one.path));
     const uncapturedScreenshots = (proof?.screenshots ?? []).map(one => one.path).filter(path => !stored.has(path));
@@ -1598,6 +1598,8 @@ export function resultPanelParts(detail, o) {
     const physicalReasons = receipt.reasons.filter(reason => !assessmentReasons.has(reason));
     const runId = run.id;
     const shots = proof?.screenshots ?? [];
+    const picture = (shot) => html `<figure class="result-image"><a class="receipt-shot" href="/r/${runId}/evidence/${shot.artifactId}"><img src="/r/${runId}/evidence/${shot.artifactId}" alt="${shot.caption}"><span>${shot.caption}</span></a>${detail.canAnnotate && o.csrf !== "" && shot.sha256 !== undefined
+        ? html `<button type="button" class="quiet" data-comment-image="${JSON.stringify({ run: runId, artifact: shot.artifactId, sha256: shot.sha256 })}" data-image-caption="${shot.caption}">Comment</button>` : ""}</figure>`;
     const shown = shots.filter(one => one.problem === null);
     const stat = terminal?.stat ?? null;
     const statOk = stat !== null && !("problem" in stat);
@@ -1694,7 +1696,7 @@ export function resultPanelParts(detail, o) {
     }
     else if (lead === "screenshots") {
         summaryParts.push(html `<div class="receipt-visuals result-visuals" aria-label="validated screenshots">${shown
-            .map(shot => html `<a class="receipt-shot" href="/r/${runId}/evidence/${shot.artifactId}"><img src="/r/${runId}/evidence/${shot.artifactId}" alt="${shot.caption}"><span>${shot.caption}</span></a>`)}</div>`);
+            .map(picture)}</div>`);
     }
     const unavailableShots = shots.filter(one => one.problem !== null);
     if (lead === "changes") {
@@ -1848,7 +1850,7 @@ export function resultPanelParts(detail, o) {
             ? directAssessment && !screenshotRequired ? html `` : html `<p class="meta" data-cockpit-source="screenshots">No screenshots${screenshotRequired ? " were captured, although one was required" : " were needed"}.</p>`
             : lead === "screenshots"
                 ? html `<p class="meta" data-cockpit-source="screenshots">${shown.length} validated screenshot${shown.length === 1 ? "" : "s"} shown in Summary${unavailableShots.length > 0 ? `; ${unavailableShots.length} unavailable` : ""}.</p>`
-                : html `<details class="cockpit-proof-group" data-cockpit-source="screenshots"><summary>Screenshots · ${shown.length}${unavailableShots.length > 0 ? ` (${unavailableShots.length} unavailable)` : ""}</summary><div class="receipt-visuals" aria-label="validated screenshots">${shown.map(shot => html `<a class="receipt-shot" href="/r/${runId}/evidence/${shot.artifactId}"><img src="/r/${runId}/evidence/${shot.artifactId}" alt="${shot.caption}"><span>${shot.caption}</span></a>`)}</div></details>`);
+                : html `<details class="cockpit-proof-group" data-cockpit-source="screenshots"><summary>Screenshots · ${shown.length}${unavailableShots.length > 0 ? ` (${unavailableShots.length} unavailable)` : ""}</summary><div class="receipt-visuals" aria-label="validated screenshots">${shown.map(picture)}</div></details>`);
         checkParts.push(receipt.caveats.length === 0
             ? directAssessment ? html `` : html `<p class="meta" data-cockpit-source="caveats">No caveats were reported.</p>`
             : html `<details class="cockpit-proof-group" data-cockpit-source="caveats"><summary>Agent caveats · ${receipt.caveats.length}</summary><ul>${receipt.caveats.map(one => html `<li>${one}</li>`)}</ul></details>`);
@@ -1863,19 +1865,29 @@ export function resultPanelParts(detail, o) {
         checkParts.push(o.extraChecks);
     // ---- request changes: both feedback styles, one sealed road ------------
     const requestParts = [html `<h3 class="so-sr-only">What should change?</h3>`];
+    const imageNote = (one) => {
+        if (one.image == null)
+            return html ``;
+        const shot = shots.find(shot => shot.artifactId === one.image.artifact && shot.sha256 === one.image.sha256 && one.image.run === runId && shot.problem === null);
+        // A live saved note whose screenshot no longer verifies can be kept without it, so it never blocks a revision.
+        const drop = o.csrf === "" || !(detail.unusableImageNotes ?? []).includes(one.id) ? html ``
+            : postForm(`/r/${runId}/comment`, html `<input type="hidden" name="intent" value="drop-image"><input type="hidden" name="comment" value="${String(one.id)}"><button type="submit" class="quiet">Keep note without screenshot</button>`, { attrs: { class: "feedback-image-drop" }, returnTo: o.returnTo, hidden: { tab: o.tab } });
+        return html `<figure class="feedback-image">${shot === undefined ? html `<figcaption>Screenshot ${one.image.artifact} is unavailable.</figcaption>`
+            : html `<a href="/r/${runId}/evidence/${shot.artifactId}"><img src="/r/${runId}/evidence/${shot.artifactId}" alt="${shot.caption}"></a><figcaption>${shot.caption} · Screenshot ${shot.artifactId}</figcaption>`}${drop}</figure>`;
+    };
     const pathWords = (path, line) => {
         const shownPath = `${path}${line === null ? "" : `:${line}`}`;
         const href = detail.editor === null ? null : editorFileHref(detail.editor.worktree, path, line);
         return href === null ? html `<span class="mono">${shownPath}</span> ` : html `<a class="mono" href="${href}">${shownPath}</a> `;
     };
     if (detail.comments.length > 0) {
-        requestParts.push(html `<p class="meta">Saved for later · ${detail.comments.length}</p><div class="diff-comments" data-result-notes="${detail.comments.length}">${detail.comments.map(one => html `<div class="diff-comment"><span class="diff-comment-pin" aria-hidden="true"></span><p>${one.path === null ? "" : pathWords(one.path, one.line)}${one.note}</p><span class="meta">${one.author} · ${whenTime(one.createdAt)}</span></div>`)}</div>`);
+        requestParts.push(html `<p class="meta">Saved for later · ${detail.comments.length}</p><div class="diff-comments" data-result-notes="${detail.comments.length}">${detail.comments.map(one => html `<div class="diff-comment">${imageNote(one)}<span class="diff-comment-pin" aria-hidden="true"></span><p>${one.path === null ? "" : pathWords(one.path, one.line)}${one.note}</p><span class="meta">${one.author} · ${whenTime(one.createdAt)}</span></div>`)}</div>`);
         if (o.csrf !== "" && !detail.canAnnotate) {
             requestParts.push(postForm(`/r/${runId}/revise`, html `${revisionSealFields(detail.comments, detail.sourceDigest)}<div><strong>${detail.comments.length} note${detail.comments.length === 1 ? "" : "s"} ready</strong></div><button type="submit">Request changes</button>`, { attrs: { class: "card revision-from-comments" }, returnTo: o.returnTo }));
         }
     }
     if ((detail.pastComments?.length ?? 0) > 0) {
-        requestParts.push(html `<details class="result-feedback-history"><summary>Earlier feedback</summary><div class="diff-comments" data-past-feedback>${detail.pastComments.map(one => html `<div class="diff-comment"><p>${one.path === null ? "" : pathWords(one.path, one.line)}${one.note}</p><span class="meta">${one.author} · ${whenTime(one.createdAt)}</span></div>`)}</div></details>`);
+        requestParts.push(html `<details class="result-feedback-history"><summary>Earlier feedback</summary><div class="diff-comments" data-past-feedback>${detail.pastComments.map(one => html `<div class="diff-comment">${imageNote(one)}<p>${one.path === null ? "" : pathWords(one.path, one.line)}${one.note}</p><span class="meta">${one.author} · ${whenTime(one.createdAt)}</span></div>`)}</div></details>`);
     }
     for (const revision of detail.revisions) {
         // The child's standing is the shared status projection's own words
@@ -1892,6 +1904,7 @@ export function resultPanelParts(detail, o) {
         requestParts.push(html `<details class="result-request-open result-request-form"${detail.comments.length > 0 ? " open" : ""}><summary>What should change?</summary>${postForm(`/r/${runId}/comment`, joinHtml([
             revisionSealFields(detail.comments, detail.sourceDigest),
             html `<input type="hidden" data-recorded-requests value="${[...detail.comments, ...(detail.pastComments ?? [])].filter(one => one.sourceKey?.startsWith(`review:${o.user}:`)).map(one => one.sourceKey.slice(`review:${o.user}:`.length)).join(",")}">`,
+            html `<input type="hidden" name="image" value=""><figure class="feedback-image" data-feedback-image hidden><img alt="Selected screenshot" hidden><figcaption></figcaption><button type="button" class="quiet" data-remove-image>Remove image</button></figure>`,
             html `<textarea name="note" rows="2" maxlength="${LIMITS.note}" placeholder="Describe the change…" aria-label="review comment" aria-describedby="comment-note-limit"${o.noted ? " autofocus" : ""}></textarea>`,
             html `<span class="meta diff-comment-limit" id="comment-note-limit">up to ${LIMITS.note} characters</span>`,
             html `<details class="result-pin"><summary>Attach to a file or line</summary>`,
@@ -1980,7 +1993,7 @@ export function personCheckItems(proof, patchText, shots, runId) {
         return {
             id: row.id, statement: row.statement, words: personCheckWords(row.statement), note: notes.length === 0 ? null : notes.join(" "),
             excerpts: files.filter(one => one.lines.length > 0).slice(0, 3),
-            shots: pictures.slice(0, 4).map(shot => ({ src: `/r/${runId}/evidence/${shot.artifactId}`, href: `/r/${runId}/evidence/${shot.artifactId}`, caption: shot.caption })),
+            shots: pictures.slice(0, 4).map(shot => ({ src: `/r/${runId}/evidence/${shot.artifactId}`, href: `/r/${runId}/evidence/${shot.artifactId}`, caption: shot.caption, ...(shot.sha256 === undefined ? {} : { image: { run: runId, artifact: shot.artifactId, sha256: shot.sha256 } }) })),
         };
     });
 }
@@ -2215,7 +2228,7 @@ export function runPage(chrome, run, taskId, artifacts, terminal = null, notes =
             noted,
             requestToken: result.requestToken,
             hrefFor: one => (one === "summary" ? `/r/${run.id}` : `/r/${run.id}?tab=${one}`),
-            returnTo: `/r/${run.id}`,
+            returnTo: `/r/${run.id}?record=1`,
             back: null,
         });
     return screen(`build #${run.id}`, joinHtml([

package/dist/server/render-settings.js

@@ -511,6 +511,7 @@ export const SETTINGS_GROUPS = [
     ["Agents", [
             ["/settings/lead", "Lead", html `<path d="M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z"/><path d="M8 9h8M8 13h5"/>`],
             ["/settings/models", "Models", html `<rect x="4" y="4" width="16" height="16" rx="2"/><rect x="9" y="9" width="6" height="6"/><path d="M9 2v2M15 2v2M9 20v2M15 20v2M2 9h2M2 15h2M20 9h2M20 15h2"/>`],
+            ["/settings/spend", "Spend", html `<circle cx="12" cy="12" r="9"/><path d="M15 9.5c-.6-.9-1.7-1.5-3-1.5-1.7 0-3 .9-3 2s1.3 1.7 3 2 3 .9 3 2-1.3 2-3 2c-1.3 0-2.4-.6-3-1.5M12 6v2M12 16v2"/>`],
             ["/settings/skills", "Skills", html `<path d="m12 3 1.9 5.8L20 10l-5 3.6L16.8 20 12 16.4 7.2 20 9 13.6 4 10l6.1-1.2z"/>`],
             ["/settings/tools", "Tools", html `<path d="M14.7 6.3a1 1 0 0 0 0 1.4l1.6 1.6a1 1 0 0 0 1.4 0l3.77-3.77a6 6 0 0 1-7.94 7.94l-6.91 6.91a2.12 2.12 0 0 1-3-3l6.91-6.91a6 6 0 0 1 7.94-7.94l-3.76 3.76z"/>`],
             ["/settings/knowledge", "Knowledge", html `<path d="M4 19.5A2.5 2.5 0 0 1 6.5 17H20V3H6.5A2.5 2.5 0 0 0 4 5.5z"/><path d="M4 19.5A2.5 2.5 0 0 0 6.5 22H20v-5"/>`],

package/dist/server/render-tasks.d.ts

@@ -398,6 +398,7 @@ export type RevisionView = {
         line: number | null;
         note: string;
         author: string;
+        image?: import("../result-review.js").FeedbackImage | null;
     }[];
     /** The lineage and ACTUAL terms (contract handoff task 2), read from
      * the child's own rows — the same projection chat and the approval

package/dist/server/render-tasks.js

@@ -25,13 +25,14 @@ import { taskRoad } from "../first-run.js";
 import { starterForWork } from "../flow-starters.js";
 import {} from "../gaps.js";
 import { readAuthModeStrict } from "../keys.js";
-import { failedAttemptSentence, retryNoteOf } from "../needs-you.js";
+import { failedAttemptSentence, retryNoteOf, START_BUILDER_COMMAND, startBuilderHref } from "../needs-you.js";
 import { chosenWords, makesNoPlan, PHASES as ROUTE_PHASES, TASK_SIZES } from "../phase-routing.js";
 import { parseExecutionPlanDocument } from "../plan.js";
 import {} from "../planner-source.js";
 import { projectName } from "../project.js";
 import { dispatchStatusToken, manualReviewOnly, plainReasonWords, reviewConflict } from "../proof.js";
 import { providerName } from "../provider-auth.js";
+import { agentModelName } from "../model-names.js";
 import {} from "../provider.js";
 import { qualityModeTitle } from "../quality.js";
 import { evidenceShortenedWords } from "../result-review.js";
@@ -49,7 +50,7 @@ import { reviewHref, taskChatHref, taskHref } from "./http.js";
 import { coordinatorProposalsSection } from "./render-chat.js";
 import { completionReceiptCard, criterionMatrixHtml, evidenceWords, homePhaseWords, incidentWords, needsCheck, pullRequestCardHtml, reasonWords, receiptStatusOf, repairChainHtml, reportItemsHtml, reviewRetryPanel, runNoun, runOutcomeBadge, semanticCoverageHtml, verificationExplanation, verificationRecovered } from "./render-results.js";
 import {} from "./session.js";
-import { linkWords, originNote } from "../task-source.js";
+import { linkWords, originNote, requestName, requestWords } from "../task-source.js";
 export function contractChangeHtml(change) {
     const tag = html `<span class="contract-change-kind contract-change-${change.kind}">${change.kind}</span>`;
     switch (change.field) {
@@ -134,17 +135,7 @@ export function acceptanceCeremonyHtml(criteria) {
 }
 /** "claude" + "opus" → "Claude Opus"; "claude-opus-5-5" → "Claude Opus 5.5"; anything else keeps its exact id. */
 export function agentNameWords(provider, model) {
-    const name = providerName(provider);
-    if (model === null || model === "" || model === "default")
-        return name;
-    const bare = model.startsWith(`${provider}-`) ? model.slice(provider.length + 1) : model;
-    const title = (word) => `${word[0].toUpperCase()}${word.slice(1)}`;
-    if (/^[a-z]+$/.test(bare))
-        return `${name} ${title(bare)}`;
-    const versioned = /^([a-z]+)-(\d+(?:-\d+)*)$/.exec(bare);
-    if (versioned !== null)
-        return `${name} ${title(versioned[1])} ${versioned[2].replace(/-/g, ".")}`;
-    return `${name} ${model}`;
+    return agentModelName(provider, model);
 }
 /** The permission a sealed profile grants, in two or three words. */
 export function permissionWordsOf(profile) {
@@ -212,7 +203,8 @@ const fragmentString = (fragment) => fragment === "" ? "" : htmlString(fragment)
 function originWords(origin) {
     const flow = origin.flow === null ? null : origin.flow === "hidden" ? "from a flow" : origin.flow === "removed" ? "from a flow (removed)" : `from flow “${origin.flow.name}”`;
     const source = origin.source === null ? null : `${origin.source.label} (${origin.source.proved})`;
-    return [flow, source].filter(one => one !== null).join(" · ");
+    const request = origin.request == null ? null : `from ${requestName(origin.request)}`;
+    return [flow, source, request].filter(one => one !== null).join(" · ");
 }
 /** v126: a task's origin as a fact: the flow, linked for those who may open it, and the outside event, linked to where
  * it lives, with that link's host always shown. */
@@ -228,6 +220,12 @@ function originParts(origin) {
         if (origin.source.url !== null)
             parts.push(" · ", { label: linkWords(origin.source.url), href: origin.source.url });
     }
+    if (origin.request != null) {
+        if (parts.length > 0)
+            parts.push(" · ");
+        const where = requestWords(origin.request);
+        parts.push(`${requestName(origin.request)}${where === "" ? "" : `: ${where}`}`);
+    }
     return parts;
 }
 export function approvalSheetHtml(input) {
@@ -303,7 +301,7 @@ export function approvalSheetHtml(input) {
     const revisionDetail = input.revision === null ? "" : detail("Earlier build", joinHtml([
         html `<div class="revision-card" data-revision-feedback>`,
         html `<p><a href="${input.revisionSourceHref}"${input.surface === "chat" ? html ` data-revision-source` : ""}>${input.surface === "chat" ? html `Original result: build #${input.revision.sourceRun} →` : html `build #${input.revision.sourceRun}`}</a></p>`,
-        input.revision.comments.length === 0 ? "" : html `<ul>${input.revision.comments.map(one => html `<li>${one.path === null ? "" : html `<span class="mono">${one.path}${one.line === null ? "" : `:${one.line}`}</span> · `}${one.note} <span class="meta">— ${one.author}</span></li>`)}</ul>`,
+        input.revision.comments.length === 0 ? "" : html `<ul>${input.revision.comments.map(one => html `<li>${revisionImageLink(one.image)}${one.path === null ? "" : html `<span class="mono">${one.path}${one.line === null ? "" : `:${one.line}`}</span> · `}${one.note} <span class="meta">— ${one.author}</span></li>`)}</ul>`,
         revisionLineageHtml(input.revision.lineage),
         html `</div>`,
     ]));
@@ -815,7 +813,9 @@ export function taskRecoveryHref(taskId, diagnosis) {
         return null;
     const task = taskHref(taskId);
     switch (diagnosis.action) {
+        // The task page only repeats that no builder is connected: lead to the command that connects one.
         case "start-worker":
+            return startBuilderHref(taskId);
         case "repair-dependency":
             return `${task}#run-status`;
         case "retry-task":
@@ -1179,6 +1179,9 @@ export function executionPlanHtml(document, compact = false) {
         html `</div>`,
     ]);
 }
+function revisionImageLink(image) {
+    return image == null ? html `` : html `<a href="/r/${image.run}/evidence/${image.artifact}">Screenshot ${image.artifact} · result #${image.run}</a> · `;
+}
 /**
  * A revision's lineage and ACTUAL terms, in the same words on the task
  * page, the approval card, and chat (contract handoff task 2): which
@@ -1350,11 +1353,11 @@ export function taskBodyParts(data) {
                         firstConnection
                             ? html `<p>Toolroll is open, but this project has not been connected to a builder yet.</p><p>On the machine where the project lives, open that folder and run:</p>`
                             : html `<p>Toolroll is open, but this project's builder stopped checking in. Reopen Toolroll on the machine where the project lives.</p><p>If you normally start it from a terminal, open the project folder and run:</p>`,
-                        html `<code class="dispatch-recovery-command">toolroll up</code>`,
+                        html `<code class="dispatch-recovery-command">${START_BUILDER_COMMAND}</code>`,
                         firstConnection
                             ? html `<p class="meta">This is the normal start command: it opens the app, connects the project, and starts its builder. Keep Toolroll running; approved tasks begin automatically.</p>`
                             : html `<p class="meta">This task resumes automatically when the builder reconnects. You do not need to file or approve it again.</p>`,
-                        html `<p><a href="/system">See connection status →</a></p></div></details>`,
+                        html `<p><a href="${startBuilderHref(task.id)}">See connection status →</a></p></div></details>`,
                     ]);
                 }
                 // Never a link to this page's own acts: Retry sits on the status card and below.
@@ -1601,7 +1604,7 @@ export function taskBodyParts(data) {
             : joinHtml([
                 html `<div class="revision-card" data-revision-feedback>`,
                 html `<p><strong>${data.revision.kind === "ci-repair" ? "CI repair" : data.revision.kind === "criterion-repair" ? "Criterion repair" : "Revision feedback"}</strong> <span class="meta">from <a href="/r/${data.revision.sourceRun}">build #${data.revision.sourceRun}</a></span></p>`,
-                ...data.revision.comments.map(one => html `<p class="row"><span class="meta">${one.author}</span> ${one.path === null ? "" : html `<span class="mono">${one.path}${one.line === null ? "" : `:${one.line}`}</span> `}${one.note}</p>`),
+                ...data.revision.comments.map(one => html `<p class="row"><span class="meta">${one.author}</span> ${revisionImageLink(one.image)}${one.path === null ? "" : html `<span class="mono">${one.path}${one.line === null ? "" : `:${one.line}`}</span> `}${one.note}</p>`),
                 revisionLineageHtml(data.revision.lineage),
                 html `</div>`,
             ], "\n");
@@ -2177,7 +2180,7 @@ export function taskBodyParts(data) {
         const feedback = data.revision;
         thread.push({ key: "revision", at: task.createdAt, kind: "reply", who: "person", author: feedback.comments[0]?.author ?? "You",
             title: feedback.kind === "ci-repair" ? "Asked for a CI repair" : feedback.kind === "criterion-repair" ? "Asked for a repair" : "Asked for changes",
-            text: feedback.comments.map(one => `${one.path === null ? "" : `${one.path}${one.line === null ? "" : `:${one.line}`} — `}${one.note.trim()}`).filter(one => one !== "").join("\n") || null,
+            text: feedback.comments.map(one => `${one.image ? `Screenshot ${one.image.artifact} · result #${one.image.run} — ` : ""}${one.path === null ? "" : `${one.path}${one.line === null ? "" : `:${one.line}`} — `}${one.note.trim()}`).filter(one => one !== "").join("\n") || null,
             link: { label: `From build #${feedback.sourceRun}`, href: `/r/${feedback.sourceRun}` }, html: "", more: null });
     }
     for (const decision of data.decisions) {

package/dist/server/request-context.d.ts

@@ -43,6 +43,8 @@ export type RequestFacts = {
     };
     /** Passwordless is on and this is a signed-in browser: ceremony password fields render as nothing (html.ts reauth). */
     passwordless?: boolean;
+    /** The browser session's open project (display only: the sidebar's picker names it). */
+    openProject?: string | null;
 };
 /**
  * The request's own session facts, readable from anywhere below the

package/dist/server/route-table.js

@@ -133,12 +133,15 @@ get("pages", "workbench", "/workbench", free);
 get("tasks", "board", "/board", { limited: "collection" });
 get("tasks", "review", "/review", { limited: "collection" });
 get("settings", "spend", "/spend", { ...free, ...anyOperator("An instance operator sees spend.", "/") });
+get("settings", "settings.spend", "/settings/spend", { ...free, ...anyOperator("An instance operator sets spending limits.", "/settings") });
 get("pages", "ledger", "/ledger", { limited: "unscoped", ...free });
 get("pages", "activity", "/activity");
 get("tasks", "done", "/done", { limited: "collection" });
 get("settings", "mode", "/mode");
 get("people", "people.page", "/people", { limited: "unscoped", ...free });
 get("pages", "system", "/system");
+// Where every "Connect a builder" leads: read-only, open to a project-limited person (the handler shows only a visible project).
+get("pages", "start-builder", "/start-builder", { limited: "unscoped", ...free });
 get("tasks", "tasks", "/tasks", { limited: "collection", ...free }); // a redirect to /work now: never sent to the project opener first
 get("tasks", "queue", "/queue");
 get("pages", "peek", "/peek", free);
@@ -333,9 +336,14 @@ for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in"
     post(one === "sessions" ? "people" : "settings", `settings.${one.replaceAll("/", "-")}-send`, `/settings/${one}`, { ...(["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "retention", "storage", "storage/clean", "storage/discard", "pull-requests", "checks", "backups", "data", "monitoring", "tools/connect", "tools/change"].includes(one) ? { scope: "step-up" } : {}), ...SETTINGS_ACT_ROLES[one] });
 }
 post("settings", "settings.flows-on", "/settings/flows/on", { limited: "collection", ...approver("An approver switches starter flows on.", "/settings/flows") });
+post("settings", "settings.integrations-youiyoux", "/settings/integrations/youiyoux", { limited: "collection", ...approver("An approver turns youiyoux requests on or off.", "/settings/integrations") });
 const MODELS = approver("Sign in as an approver to change models.", "/settings/models");
-for (const one of ["check", "watch", "update", "agent"])
+for (const one of ["check", "watch", "update"])
     post("settings", `settings.models-${one}`, `/settings/models/${one}`, MODELS);
+// Changing which model a role uses: an instance operator's browser step-up (the handler proves the password, or the
+// Passwordless session; model-choices.ts re-proves the session and standing inside its one transaction).
+for (const one of ["agent", "apply"])
+    post("settings", `settings.models-${one}`, `/settings/models/${one}`, { scope: "step-up", ...operator("An instance operator changes models.", "/settings/models") });
 // Any other models action answers the models area's own refusal.
 post("settings", "settings.models-act", "^\\/settings\\/models\\/.*$", { sample: "/settings/models/unknown", ...MODELS });
 post("settings", "settings.knowledge-refresh", "/settings/knowledge/refresh", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to refresh project context.", "/settings/knowledge") });

package/dist/server/settings.d.ts

@@ -2,7 +2,7 @@ import type { ServerRuntime } from './runtime.js';
 import { type RoleView } from "../models-ui.js";
 export declare function createSettingsHandlers(runtime: ServerRuntime): {
     registrations: import("./handler-registry.js").Registration[];
-    modelsView: (canManage: boolean, csrf: string, now: Date, said: string | null, problem: string | null) => {
+    modelsView: (canManage: boolean, csrf: string, now: Date, said: string | null, problem: string | null, query?: URLSearchParams) => {
         runtimes: import("../model-catalog.js").RuntimeState[];
         watch: import("../model-catalog.js").WatchState;
         roles: RoleView[];
@@ -14,5 +14,62 @@ export declare function createSettingsHandlers(runtime: ServerRuntime): {
             words: string;
         } | null;
         fresh: import("../model-catalog.js").SeenModel[];
+        scope: {
+            value: string;
+            label: string;
+            digest: string;
+            options: {
+                value: string;
+                label: string;
+            }[];
+        };
+        inUse: string | null;
+        presets: {
+            name: "opus" | "sized";
+            label: string;
+            words: string;
+            inUse: boolean;
+            recommended: boolean;
+        }[];
+        newer: {
+            from: string;
+            to: string;
+            name: string;
+            roles: string;
+        }[];
+        preview: {
+            title: string;
+            rows: {
+                role: string;
+                before: string;
+                after: string;
+                notes: string[];
+            }[];
+            hidden: {
+                scope: string;
+                digest: string;
+                change: string;
+            };
+        } | null;
+        unresolved: string | null;
+        sizing: {
+            small: string;
+            routine: string;
+            large: string;
+            risky: string;
+            classifier: string;
+        };
+        routing: string;
+        recent: {
+            taskId: string;
+            runId: number;
+            role: string;
+            chosen: string;
+            ranOn: string;
+        }[];
+        waiting: {
+            taskId: string;
+            title: string;
+        }[];
     };
 };