toolroll 0.9.84 → 0.9.86

package/dist/server/route-table.js

@@ -127,6 +127,9 @@ get("pages", "projects.page", "/projects", { limited: "unscoped", ...free });
 get("pages", "home", "/", { limited: "collection", ...free });
 get("tasks", "inbox", "/inbox", { limited: "collection", ...free });
 get("tasks", "work", "/work", { limited: "collection", ...free });
+// Put away old tasks (task-tidy.md): the preview reads only; putting away is an approver's step-up in a browser session.
+get("tasks", "work.put-away", "/work/put-away", { limited: "collection", ...free, callers: ["cookie"], ...approver("Only an approver can put tasks away.", "/work") });
+post("tasks", "work.put-away.apply", "/work/put-away", { scope: "step-up", limited: "collection", ...approver("Only an approver can put tasks away.", "/work") });
 get("tasks", "next", "/next", { limited: "collection" });
 get("pages", "morning", "/morning");
 get("pages", "workbench", "/workbench", free);
@@ -270,6 +273,11 @@ for (const one of ["linear-key", "hooks-address", "secrets"])
 // "Runs on its own": signing raises authority (the owner's password, a step-up); revoking is one click for any approver.
 post("flows", "flow.unattended", `^\\/flows\\/${FLOW}\\/unattended$`, { scope: "step-up", project: "flow", sample: "/flows/1/unattended", ...EDIT_FLOWS });
 post("flows", "flow.unattended-off", `^\\/flows\\/${FLOW}\\/unattended-off$`, { project: "flow", sample: "/flows/1/unattended-off", ...EDIT_FLOWS });
+// Browser use in a flow's script zones (flow-browser.ts): allowing it widens the sandbox, so a person's own step-up from
+// their browser, carrying the approval digest they read; turning it off lowers authority, one click. Browser only: a
+// lead's or remote run's token never reaches either (the CLI says the same).
+post("flows", "flow.browser", `^\\/flows\\/${FLOW}\\/browser$`, { scope: "step-up", project: "flow", sample: "/flows/1/browser", ...EDIT_FLOWS });
+post("flows", "flow.browser-off", `^\\/flows\\/${FLOW}\\/browser-off$`, { callers: ["cookie"], project: "flow", limited: "resource", sample: "/flows/1/browser-off", ...EDIT_FLOWS });
 post("flows", "flow.triggers", `^\\/flows\\/${FLOW}\\/triggers$`, { project: "flow", limited: "resource", sample: "/flows/1/triggers", ...EDIT_FLOWS });
 for (const one of ["move", "decide", "cancel", "comment", "assign", "watch"])
     post("flows", `flow.card.${one}`, `^\\/flows\\/${FLOW}\\/cards\\/${FLOW}\\/${one}$`, { project: "flow", limited: "resource", sample: `/flows/1/cards/2/${one}`, ...EDIT_FLOWS });
@@ -336,6 +344,7 @@ for (const one of ["policy", "approval", "request-limits", "sessions", "sign-in"
     post(one === "sessions" ? "people" : "settings", `settings.${one.replaceAll("/", "-")}-send`, `/settings/${one}`, { ...(["policy", "approval", "request-limits", "sessions", "sign-in", "updates", "updates/seen", "updates/cancel", "retention", "storage", "storage/clean", "storage/discard", "pull-requests", "checks", "backups", "data", "monitoring", "tools/connect", "tools/change"].includes(one) ? { scope: "step-up" } : {}), ...SETTINGS_ACT_ROLES[one] });
 }
 post("settings", "settings.flows-on", "/settings/flows/on", { limited: "collection", ...approver("An approver switches starter flows on.", "/settings/flows") });
+post("settings", "settings.integrations-youiyoux", "/settings/integrations/youiyoux", { limited: "collection", ...approver("An approver turns youiyoux requests on or off.", "/settings/integrations") });
 const MODELS = approver("Sign in as an approver to change models.", "/settings/models");
 for (const one of ["check", "watch", "update"])
     post("settings", `settings.models-${one}`, `/settings/models/${one}`, MODELS);
@@ -407,6 +416,9 @@ post("tasks", "task.act.merge", `^\\/t\\/${TASK}\\/merge$`, { project: "task", l
 post("tasks", "task.act.confirm-stopped", `^\\/t\\/${TASK}\\/confirm-stopped$`, { scope: "step-up", project: "task", limited: "resource", sample: "/t/one/confirm-stopped", ...approver("Only an approver can confirm a build stopped.") });
 post("tasks", "task.act.stop-carrying", `^\\/t\\/${TASK}\\/stop-carrying$`, { project: "task", limited: "resource", sample: "/t/one/stop-carrying", ...approver("Only an approver can stop carrying a release.") });
 post("tasks", "task.act.stop", `^\\/t\\/${TASK}\\/stop$`, { project: "task", limited: "resource", sample: "/t/one/stop" });
+// Putting one task away and bringing it back (task-tidy.md): a person's act, so only a browser session.
+post("tasks", "task.act.archive", `^\\/t\\/${TASK}\\/archive$`, { project: "task", limited: "resource", sample: "/t/one/archive", callers: ["cookie"], ...approver("Only an approver can put a task away.") });
+post("tasks", "task.act.restore", `^\\/t\\/${TASK}\\/restore$`, { project: "task", limited: "resource", sample: "/t/one/restore", callers: ["cookie"], ...approver("Only an approver can restore a task.") });
 post("tasks", "task.act.pause", `^\\/t\\/${TASK}\\/pause$`, { project: "task", limited: "resource", sample: "/t/one/pause" });
 post("tasks", "task.act.resume-arm", `^\\/t\\/${TASK}\\/resume-arm$`, { project: "task", limited: "resource", sample: "/t/one/resume-arm" });
 post("tasks", "task.act.resume", `^\\/t\\/${TASK}\\/resume$`, { scope: "step-up", project: "task", limited: "resource", sample: "/t/one/resume" });

package/dist/server/settings.js

@@ -17,7 +17,7 @@ import { grantTool } from "../subagent-tools.js";
 import { learningHtml } from "../workspace-ui.js";
 import { adapterPolicy } from "./route-policy.js";
 import { createHash } from "node:crypto";
-import { dirname, join } from "node:path";
+import { basename, dirname, join } from "node:path";
 import { INSTALLATION_SCOPE } from "../agentconfig.js";
 import { rulesSummary } from "../approval-rules-ui.js";
 import { installMethod } from "../install-method.js";
@@ -64,6 +64,7 @@ import { startersHtml } from "../flow-starters-ui.js";
 import { starterOf, startersFor, switchOnStarter } from "../flow-starters.js";
 import { disconnectGoogle, googleConnected, googleConsent, readGoogleMail, saveGoogleClient } from "../google-mail.js";
 import { integrationsHtml } from "../integrations-ui.js";
+import { setYouiyouxIntake } from "../youiyoux-intake.js";
 import { clearProviderKey, keyStatus, plausibleKey, PROVIDER_KEY_ENV, readAuthMode, readProviderKey, saveProviderKey, setAuthMode, SUBSCRIPTION_CAPABLE, verdictWords, verifyProviderKey } from "../keys.js";
 import { decisionsHtml, framedSection, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml } from "../knowledge-ui.js";
 import { aboutYouOf, checkAboutYou, saveAboutYou } from "../lead-about.js";
@@ -1386,6 +1387,21 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const switched = switchOnStarter(store, starter, repo, who.name, clock(), options.configDir ?? null);
         return switched.ok ? back("said", switched.said) : back("problem", switched.said);
     }
+    // Settings → Integrations → youiyoux → Turn off / Turn on: whether a project's change requests become tasks.
+    async function integrationsYouiyoux(ctx) {
+        const { who, response, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.integrationsYouiyoux);
+        const repo = body.get("repo") ?? "";
+        const back = sayTo(response, "/settings/integrations");
+        const known = [...new Set([...(admissionList() ?? []), ...managedRepos(), ...store.knownRepos()])];
+        if (store.isDemo())
+            return refuse(response, who, 403, "An approver turns youiyoux requests on or off.", "/settings/integrations");
+        if (!known.includes(repo) || !visible(repo))
+            return refuse(response, who, 404, "No such project.", "/settings/integrations");
+        const on = body.get("on") === "1";
+        setYouiyouxIntake(store, repo, on, who.name, clock());
+        return back("said", on ? `youiyoux requests in ${basename(repo)} become tasks again.` : `youiyoux requests in ${basename(repo)} are off.`);
+    }
     // Settings → Integrations → Send test: one harmless read-only check of one integration, now.
     async function integrationsTest(ctx) {
         const { who, response, posted } = ctx;
@@ -2642,6 +2658,7 @@ ${modeWords(terms)
         "settings.backups-send": backupsSave,
         "settings.data-send": dataExport,
         "settings.integrations-test-send": integrationsTest,
+        "settings.integrations-youiyoux": integrationsYouiyoux,
         "settings.monitoring-send": monitoringSave,
         "settings.tools-connect-send": toolsConnect,
         "settings.tools-change-send": toolsChange,

package/dist/server/task-views.js

@@ -1,3 +1,5 @@
+import { feedbackImageProblem } from "../result-actions.js";
+import { parseFeedbackImage } from "../result-review.js";
 import { releaseViewOf } from "../release-view.js";
 import { releaseCiRunningOf } from "../release-ci-hold.js";
 import { releaseObligationsOf } from "../release-recheck.js";
@@ -19,6 +21,7 @@ import { newestPullRequestOf, publishingOf, pullRequestBlocker } from '../pull-r
 import { structuredHandoffView, terminalDiffView } from "../result-evidence-readers.js";
 import { resultCheckLevel } from '../result-follow-ups.js';
 import { skillsSnapshotHtml, skillTestFeedbackHtml } from "../skills-ui.js";
+import { archiveOf } from "../store.js";
 import { runActivityOf } from "../task-activity.js";
 import { taskFingerprint } from "../task-live.js";
 import { pullRequestFactOf } from '../task-status.js';
@@ -229,6 +232,7 @@ export function createTaskViews(runtime) {
                     line: one.line === null || one.line === undefined ? null : Number(one.line),
                     note: String(one.note ?? ""),
                     author: String(one.author ?? "?"),
+                    image: parseFeedbackImage(one.image) || null,
                 })),
             };
         }
@@ -789,6 +793,10 @@ export function createTaskViews(runtime) {
         const presentedData = { ...data, rootId: family?.root.id ?? taskId, rootTitle: family?.root.title ?? data.task.title,
             ...(family === null || data.assignment != null ? {} : { history: familyHistory(family) }),
             versionLabel: family !== null && family.current.id !== taskId ? `Viewing ${family.versions.findIndex(one => one.id === taskId) === 0 ? "Original" : `Revision ${family.versions.findIndex(one => one.id === taskId)}`} · ${family.current.state === "running" ? "A newer revision is running" : "A newer revision is current"}` : null };
+        // Put away (v145, task-tidy.md): who or what put it away and why, and whether this person can put it away or restore it.
+        const archived = archiveOf(runtime.store, taskId);
+        presentedData.archived = archived;
+        presentedData.canPutAway = who.via === "cookie" && who.role === "approver";
         if (scopeDraft !== undefined)
             presentedData.scopeDraft = scopeDraft;
         if (cancelDraft !== undefined)
@@ -1119,6 +1127,9 @@ export function createTaskViews(runtime) {
             outsideTouches: files.filter(one => one.outsideTouches).map(one => one.path),
             fileAnchors,
             comments: runtime.store.liveDiffComments(run.id).filter(isRevisionFeedback),
+            // The same check that refuses a saved note's screenshot at revision time decides when it can be removed.
+            unusableImageNotes: runtime.store.liveDiffComments(run.id).filter(one => isRevisionFeedback(one) && one.image != null
+                && feedbackImageProblem(runtime.store, runtime.evidenceRoot, run.id, one.image) !== null).map(one => one.id),
             pastComments: runtime.store.allDiffComments(run.id).filter(one => one.reviewerRun === null && (one.consumedBy !== null || one.supersededBy !== null)),
             reviewerFindings: runtime.store.allDiffComments(run.id).filter(one => one.reviewerRun !== null),
             automaticReview: buildReviewOf(runtime.store, run.id),

package/dist/server/tasks.d.ts

@@ -2,6 +2,7 @@
 import { type Html } from "../html.js";
 import { type ServerResponse } from "node:http";
 import { type Artifact, type Run, type Store } from "../store.js";
+import type { HandlerContext } from './handler-context.js';
 import type { ServerRuntime } from './runtime.js';
 import { type PeekAdmission } from "./render-pages.js";
 import { type CompletedWorkRow, type RankedReviewRow, type ReviewCockpitView } from "./render-results.js";
@@ -36,3 +37,12 @@ export declare function createTasksHandlers(runtime: ServerRuntime): {
     };
     liveRunIds: (rows: readonly (Pick<Run, "id" | "outcome" | "leaseId" | "taskRef">)[]) => Set<number>;
 };
+/** Put away and Restore one task, and Put away old tasks (docs/plans/task-tidy.md): the preview reads only (GET-quiet);
+ * putting away many is an approver's step-up bound to the digest of exactly what the preview showed. Each write
+ * re-proves the person's standing inside its own transaction. */
+export declare function createTidyHandlers(runtime: ServerRuntime): {
+    "work.put-away": (ctx: HandlerContext) => Promise<void>;
+    "work.put-away.apply": (ctx: HandlerContext) => Promise<void>;
+    "task.act.archive": (ctx: HandlerContext) => Promise<void>;
+    "task.act.restore": (ctx: HandlerContext) => Promise<void>;
+};

package/dist/server/tasks.js

@@ -1,4 +1,6 @@
-import { releaseAuthorityOfTask, revokeRelease, runLiveCommands } from "../store.js";
+import { parseFeedbackImage, sameFeedbackImage } from "../result-review.js";
+import { archiveTaskFamily, dropFeedbackImage, releaseAuthorityOfTask, restoreTaskFamily, revokeRelease, runLiveCommands } from "../store.js";
+import { applyTidy, approverStandsNow, familyRepoOf, releaseFactsOf, tidyDays, tidyDigest, tidyPreview, TIDY_DEFAULT_DAYS } from "../tidy.js";
 import { steerCapabilityOf } from "../steer-capabilities.js";
 import { canReveal, localCheckoutOf, revealInFinder } from "../checkout-proof.js";
 /** A form's way back to a flow card ("flow:<flow>:<card>"), read strictly: numbers only, never a path. */
@@ -48,7 +50,7 @@ import { fileTaskProposal } from "../proposal.js";
 import { isProviderId, PROVIDER_IDS, validateSpec } from "../provider.js";
 import { completeAndOpenPullRequest, mergeAsPerson } from '../pull-request-flow.js';
 import { isQualityMode } from "../quality.js";
-import { createResultRevision, requestResultChanges } from "../result-actions.js";
+import { createResultRevision, requestResultChanges, feedbackImageProblem } from "../result-actions.js";
 import { structuredHandoffView, terminalDiffView } from "../result-evidence-readers.js";
 import { fileAddTestsTask, requestFollowUpChecks } from '../result-follow-ups.js';
 import { commentSourceKey, isRevisionFeedback, parseResultTab, resultReturnTarget } from "../result-review.js";
@@ -66,7 +68,7 @@ import { buildProgressOf, parseWorkView } from "../workspace-ui.js";
 import { requestContext } from "./request-context.js";
 import { boardTickScript, oneLineOf, QUEUE_VIEW, refuse, regionScript, screen, transcriptScript, whenTime } from "./chrome.js";
 import { chatReturnWithSaid, matchTaskPath, redirect, respond, reviewHref, safeChatReturn, safeReturn, SAFETY, taskChatHref, taskHref } from "./http.js";
-import { boardBody, boardWorkers, donePage, inboxFingerprints, inboxPage, newTaskPage, nextPage, parseInboxTab, QUEUE_FRONT, queueBody, queueScript, TASK_STATES, workPage } from "./render-pages.js";
+import { putAwayPage, boardBody, boardWorkers, donePage, inboxFingerprints, inboxPage, newTaskPage, nextPage, parseInboxTab, QUEUE_FRONT, queueBody, queueScript, TASK_STATES, workPage } from "./render-pages.js";
 import { runEfficiencyOf } from "../run-efficiency.js";
 import { timingFor } from "../latency-timeline.js";
 import { ACCEPT_ANYWAY_NEEDS_REASON, editorFileHref, proofBundleView, rankReviewQueue, RESULT_REFUSALS, REVIEW_QUEUE_CAP, reviewCockpitDetailParts, reviewCockpitPage, reviewPriorityOf, runFactsFragment, runOutcomeBadge, runPage, RUNS_PAGE, runsPage, withRefusal } from "./render-results.js";
@@ -277,6 +279,7 @@ export function createTasksHandlers(runtime) {
             multiProject: new Set(work.items.map(task => task.repo ?? "")).size > 1,
             now,
             state,
+            canPutAway: who.via === "cookie" && who.role === "approver",
             // v105: subscription windows and monthly budgets, for whoever runs the installation.
             limits: store.isInstanceOperator(who.name)
                 ? limitsView(store.providerLimits(), store.budgets().length === 0 ? [] : store.monthSpendCached(now).budgets, { project: projectName, subagent: id => subagentNamesOf(store.handle).get(id) ?? `Subagent ${id}` }, now)
@@ -1402,15 +1405,40 @@ export function createTasksHandlers(runtime) {
         const viewParam = returnTo.startsWith("/t/") ? "section" : "tab";
         const back = selectedTab === "summary" ? returnTo
             : `${returnTo.replace(/&section=(?:summary|changes|checks)$/, "")}${returnTo.includes("?") ? "&" : "?"}${viewParam}=${selectedTab}`;
+        if (body.get("intent") === "drop-image") {
+            // A saved note whose screenshot is gone or changed would block every revision that seals it. Its words stay:
+            // the note is superseded by an exact imageless copy, and the original remains in history.
+            // Who: a signed-in browser approver admitted to this run's project (checked above) — the same authority that
+            // seals any saved note into a revision. What: only a screenshot that is unusable right now, re-proved inside
+            // dropFeedbackImage's transaction, and recorded in the ledger under this person.
+            if (who.via !== "cookie" || who.role !== "approver")
+                return refuse(response, who, 403, "Only a signed-in approver can change saved feedback.", back);
+            const comment = Number(body.get("comment") ?? "");
+            if (!Number.isSafeInteger(comment) || comment < 1)
+                return refuse(response, who, 400, "Choose a saved note.", back);
+            const dropped = dropFeedbackImage(store, id, comment, who.name, one => feedbackImageProblem(store, evidenceRoot, id, one), now);
+            if (!dropped.ok && dropped.reason === "not-authorized")
+                return refuse(response, who, 403, "Only a signed-in approver on this project can change saved feedback.", back);
+            if (!dropped.ok)
+                return refuse(response, who, 409, dropped.reason === "image-usable"
+                    ? "That screenshot still verifies, so the note keeps it. Reload the result." : "That saved note changed or was already used. Reload the result.", back);
+            return redirect(response, `${back}#request-changes`);
+        }
+        const image = parseFeedbackImage(body.get("image"));
+        if (image === false)
+            return refuse(response, who, 400, "Choose a screenshot from this result again. Your draft is unchanged.", back);
         if (body.get("intent") === "revise") {
             const result = requestResultChanges(store, evidenceRoot, {
                 run: id, batch: body.get("batch"), source: body.get("source"), actor: who.name,
                 repos: admissionList(), includeUnplaced: visible(null), allowMode: who.via === "cookie",
-                note: body.get("note") ?? "", path: body.get("path") ?? "", line: body.get("line") ?? "", request: body.get("request"),
+                note: body.get("note") ?? "", path: body.get("path") ?? "", line: body.get("line") ?? "", request: body.get("request"), image,
             }, now);
             if (!result.ok) {
                 const request = body.get("request") ?? "";
-                const retryBack = /^[a-f0-9]{32}$/.test(request) ? `${back}${back.includes("?") ? "&" : "?"}conflict=${request}#request-changes` : back;
+                // The queue's link can stop resolving when a newer attempt finishes. The exact
+                // run record still hosts this account/run's recoverable feedback draft.
+                const retryBase = image === null ? back : `/r/${id}?record=1`;
+                const retryBack = /^[a-f0-9]{32}$/.test(request) ? `${retryBase}${retryBase.includes("?") ? "&" : "?"}conflict=${request}#request-changes` : retryBase;
                 return refuse(response, who, result.status, result.message, retryBack);
             }
             return redirect(response, revisionDestination(result.id, returnTo));
@@ -1445,7 +1473,17 @@ export function createTasksHandlers(runtime) {
         const request = body.get("request");
         const sourceKey = commentSourceKey(who.name, request);
         const path = rawPath === "" ? null : rawPath;
-        const inserted = store.addDiffComment({ artifactId: terminal.id, runId: id, path, line, note: note.note, author: who.name, ...(sourceKey === undefined ? {} : { sourceKey }) }, now);
+        // Freshness, custody and the insert in one write transaction: a newer attempt finishing in between can't leave a
+        // stale screenshot attached (check and write together).
+        const saved = store.transact(() => {
+            const imageProblem = feedbackImageProblem(store, evidenceRoot, id, image);
+            if (imageProblem !== null)
+                return { problem: imageProblem };
+            return { inserted: store.addDiffComment({ artifactId: terminal.id, runId: id, path, line, note: note.note, author: who.name, image, ...(sourceKey === undefined ? {} : { sourceKey }) }, now) };
+        });
+        if ("problem" in saved)
+            return refuse(response, who, 409, saved.problem, `/r/${id}?record=1#request-changes`);
+        const inserted = saved.inserted;
         if (inserted === null && sourceKey !== undefined) {
             // The token was used before (repair 2026-09-14, finding 1). A
             // request identity is IMMUTABLE: it names exactly one note on
@@ -1459,7 +1497,7 @@ export function createTasksHandlers(runtime) {
             if (earlier === null || earlier.run !== id) {
                 return refuse(response, who, 409, `this note's request identity was already used on another result (build #${earlier === null ? "?" : earlier.run}) — go back; your words are kept, and the form will carry a new identity`, conflictBack);
             }
-            if (earlier.path !== path || earlier.line !== line || earlier.note !== note.note) {
+            if (earlier.path !== path || earlier.line !== line || earlier.note !== note.note || !sameFeedbackImage(earlier.image, image)) {
                 return refuse(response, who, 409, `this request identity already recorded a different note on this result (${earlier.path === null ? "no file" : `${earlier.path}${earlier.line === null ? "" : `:${earlier.line}`}`}: "${oneLineOf(earlier.note, 80)}") — go back; your edited words are kept as a new note, and the form will carry a new identity`, conflictBack);
             }
         }
@@ -3021,7 +3059,9 @@ export function createTasksHandlers(runtime) {
                 live.add(run.id);
         return live;
     }
+    const tidyHandlers = createTidyHandlers(runtime);
     const registrations = handlersOf("tasks", {
+        ...tidyHandlers,
         "code.page": showCode("workspace"),
         "code.session": showCode("session"),
         "code.state": showCode("state"),
@@ -3118,3 +3158,51 @@ export function createTasksHandlers(runtime) {
     }
     return { registrations, runListPane, peekFragment, taskMutation, queueRegionFor, ciFailingFor, completedRowFor, attemptRowFor, resultRowOf, reviewCockpitViewOf, decisionEvidence, runEvidence, sendArtifact, peekGuards, liveRunIds };
 }
+/** Put away and Restore one task, and Put away old tasks (docs/plans/task-tidy.md): the preview reads only (GET-quiet);
+ * putting away many is an approver's step-up bound to the digest of exactly what the preview showed. Each write
+ * re-proves the person's standing inside its own transaction. */
+export function createTidyHandlers(runtime) {
+    const { store, sendScreen, chromeFor, authenticateApprover, workAccess, bustBadge } = runtime;
+    async function showPutAway(ctx) {
+        const { url, who, response, now, project } = ctx;
+        const days = tidyDays(url.searchParams.get("days"));
+        if (days === null)
+            return refuse(response, who, 400, "Choose a number of days from 1 to 365.", "/work/put-away");
+        const releases = releaseFactsOf(store);
+        const items = tidyPreview(store, now, { releases, days, access: workAccess() });
+        return sendScreen(response, 200, putAwayPage(chromeFor(project, "work"), { items, days, digest: tidyDigest(items, days), now,
+            problem: url.searchParams.get("problem"), releasesSkipped: releases.problem }));
+    }
+    async function applyPutAway(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.tasksPutAway);
+        const days = tidyDays(body.get("days"));
+        const back = (problem) => redirect(response, `/work/put-away?${new URLSearchParams({ ...(days === null || days === TIDY_DEFAULT_DAYS ? {} : { days: String(days) }), problem })}`);
+        if (days === null)
+            return back("Choose a number of days from 1 to 365.");
+        if (!authenticateApprover(who, body.get("password") ?? "").ok)
+            return back("Enter your Toolroll password to put these away.");
+        const done = applyTidy(store, now, { by: who.name, days, digest: body.get("digest") ?? "", only: body.getAll("task"), releases: releaseFactsOf(store), access: workAccess() });
+        if (!done.ok)
+            return back(done.message);
+        bustBadge();
+        return redirect(response, "/work?view=archived");
+    }
+    const oneTask = (kind) => async (ctx) => {
+        const { url, who, response, now, posted } = ctx;
+        const act = matchTaskPath(url.pathname, `/${kind}$`);
+        if (act === null)
+            return refuse(response, who, 404, "There's no page at this address.", "/work");
+        const body = readForm(posted, kind === "archive" ? CONSOLE_FORMS.taskArchive : CONSOLE_FORMS.taskRestore);
+        const standing = (refs) => approverStandsNow(store, who.name, familyRepoOf(store, refs));
+        const done = kind === "archive"
+            ? archiveTaskFamily(store, act.taskId, { by: who.name, byKind: "person", rule: null, reason: (body.get("reason") ?? "").trim() || "Put away by hand" }, now, { guard: standing })
+            : restoreTaskFamily(store, act.taskId, who.name, now, standing);
+        if (!done.ok)
+            return refuse(response, who, done.reason === "unknown-task" ? 404 : 409, done.message, taskHref(act.taskId));
+        bustBadge();
+        const to = safeReturn(body.get("return"));
+        return redirect(response, to === "/" ? taskHref(act.taskId) : to);
+    };
+    return { "work.put-away": showPutAway, "work.put-away.apply": applyPutAway, "task.act.archive": oneTask("archive"), "task.act.restore": oneTask("restore") };
+}

package/dist/settings-proofs.js

@@ -56,6 +56,7 @@ export const PROOF_INVENTORY = [
     { id: "updates", action: "Update Toolroll", routes: ["/settings/updates", "/settings/updates/seen", "/settings/updates/cancel"], form: "updates", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: [] },
     { id: "storage-cleanup", action: "Choose when checkouts are removed", routes: ["/settings/storage"], form: "storage", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: [] },
     { id: "storage-clean", action: "Clean up checkouts", routes: ["/settings/storage/clean"], form: "storage", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["preview"], note: "`preview` is the digest of what the page showed; a changed list is refused" },
+    { id: "tasks-put-away", action: "Put away old tasks", routes: ["/work/put-away"], form: "tasksPutAway", field: "password", proof: "step-up", ...ACCEPT, role: "approver", secrets: [], terms: ["digest", "days", "task"], note: "`digest` is the preview the page showed; a changed list, or a ticked task outside it, is refused" },
     { id: "storage-discard", action: "Discard a checkout", routes: ["/settings/storage/discard"], form: "storage", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["path"] },
     { id: "project-live-view", action: "Show a project's commands in the live view", routes: ["/settings/project/live-view"], form: "projectLiveView", field: "password", proof: "step-up", ...ACCEPT, role: "any", handlerRole: "an approver of the project", secrets: [], terms: ["repo", "nonce"] },
     { id: "project-delete", action: "Delete a project", routes: ["/settings/project/delete"], form: "projectDelete", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["repo", "step"], note: "the project's name typed too" },

package/dist/store.d.ts

@@ -1,9 +1,11 @@
+import { type FeedbackImage } from "./result-review.js";
 import { type WritesMode } from "./writes-mode.js";
 import { type CheckAccess } from "./check-access.js";
 import { type ProjectSandbox } from "./project-sandbox.js";
 import type { FencePolicy } from "./agent-fence.js";
 import { type NetworkProfile, type ProjectNetwork, type RunNetworkRecord } from "./egress.js";
 import { type AcpLaunch } from "./acp-attest.js";
+export { refArchived, taskArchived } from "./task-archive.js";
 import { type ChatBinding } from "./chat-core.js";
 import { ChatMessages, TELEGRAM_HOLD_REASONS, TELEGRAM_SKIPPED_ELSEWHERE, TELEGRAM_SKIPPED_OTHER_CHAT, TELEGRAM_SKIPPED_QUIET } from "./chat-messages.js";
 import { isLifecycleNotification, isTelegramProgressNotification, LIFECYCLE_KEY_PREFIX, LIFECYCLE_KINDS, proposalTaskOf, type LifecycleKind } from "./notification-rows.js";
@@ -139,6 +141,18 @@ export declare const V141_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
     definition: string;
     saved: string;
 }>>>>;
+/** v142 (youiyoux-intake.ts): youiyoux change requests as tasks. `youiyoux_intake` is one row per project the intake
+ * has looked at: a person's on/off choice (`enabled` NULL: automatic, on while the project uses youiyoux) and the last
+ * pass's answer (whether the project uses youiyoux, how many request files couldn't be read, and the problem, if any).
+ * `youiyoux_request` is one row per request taken, keyed by project and request id: the task it became (NULL: left
+ * out, `note` says why), never filed again, the status last written beside it, with the console address its links
+ * named ('' for none), and where the person pointed (route, component, file:line), cleaned, for the task page. An
+ * options request (`kind`) also keeps the options file its agent writes (`proposal`, p-<its hex>), set when filed and
+ * never read from the request again: whether it went to the project's main checkout from which result (`proposal_state`,
+ * `proposal_run`, and why not in `proposal_note`; `taken`: a file was already there, so it was left and is never read
+ * for a decision), the digest of what was copied apart from what a decision changes (`proposal_digest`), and what a
+ * person decided on it in youiyoux's hub (`decided`, `decided_note`: what Toolroll did about it). New tables only. */
+export declare const V142_SCHEMA = "\nCREATE TABLE IF NOT EXISTS youiyoux_intake (\n  repo        TEXT PRIMARY KEY,\n  enabled     INTEGER CHECK (enabled IS NULL OR enabled IN (0, 1)),\n  uses        INTEGER NOT NULL DEFAULT 0 CHECK (uses IN (0, 1)),\n  changed_by  TEXT,\n  changed_at  TEXT,\n  checked_at  TEXT,\n  invalid     INTEGER NOT NULL DEFAULT 0 CHECK (invalid >= 0),\n  problem     TEXT\n);\nCREATE TABLE IF NOT EXISTS youiyoux_request (\n  repo          TEXT NOT NULL,\n  request       TEXT NOT NULL CHECK (length(request) = 12 AND request GLOB 'r-[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f]'),\n  task_id       TEXT,\n  note          TEXT,\n  filed_at      TEXT NOT NULL,\n  status        TEXT CHECK (status IS NULL OR status IN ('queued','needs-you','building','ready','done','failed','stopped')),\n  detail        TEXT,\n  status_at     TEXT,\n  written_at    TEXT,\n  written_base  TEXT,\n  write_problem TEXT,\n  route         TEXT,\n  component     TEXT,\n  source_at     TEXT,\n  kind          TEXT NOT NULL DEFAULT 'change' CHECK (kind IN ('change','options')),\n  proposal      TEXT CHECK (proposal IS NULL OR (length(proposal) = 12 AND proposal GLOB 'p-[0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f][0-9a-f]')),\n  proposal_state TEXT CHECK (proposal_state IS NULL OR proposal_state IN ('copied','taken','missing','unsafe','retry')),\n  proposal_digest TEXT CHECK (proposal_digest IS NULL OR (length(proposal_digest) = 64 AND proposal_digest NOT GLOB '*[^0-9a-f]*')),\n  proposal_run  INTEGER,\n  proposal_note TEXT,\n  proposal_at   TEXT,\n  decided       TEXT CHECK (decided IS NULL OR decided IN ('chosen','dismissed')),\n  decided_at    TEXT,\n  decided_note  TEXT,\n  PRIMARY KEY (repo, request),\n  UNIQUE (task_id),\n  CHECK ((kind = 'options') = (proposal IS NOT NULL)),\n  CHECK (proposal_state IS NULL OR kind = 'options'),\n  CHECK (decided IS NULL OR coalesce(proposal_state = 'copied' AND proposal_digest IS NOT NULL, 0))\n);\n";
 /** A project's "Show commands in the live view" (live-detail.ts): absent means off. */
 export declare const LIVE_DETAIL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS live_detail_setting (\n  repo       TEXT PRIMARY KEY,\n  commands   INTEGER NOT NULL CHECK (commands IN (0,1)),\n  updated_by TEXT NOT NULL,\n  updated_at TEXT NOT NULL\n);\n-- Every run a steering note reached, kept as it happens (live-notes.ts): a\n-- note's own attached/mailed fields move to the next attempt, this does not.\nCREATE TABLE IF NOT EXISTS steer_note_run (\n  note INTEGER NOT NULL REFERENCES task_steer(id) ON DELETE CASCADE,\n  run  INTEGER NOT NULL REFERENCES run(id) ON DELETE CASCADE,\n  how  TEXT NOT NULL CHECK (how IN ('attached','mailed','read')),\n  at   TEXT NOT NULL,\n  PRIMARY KEY (note, run, how)\n);\nCREATE INDEX IF NOT EXISTS steer_note_run_by_run ON steer_note_run (run, note);\n";
 export declare const CHAT_APPROVAL_SCHEMA = "\nCREATE TABLE IF NOT EXISTS chat_approval_setting (\n  approver             TEXT NOT NULL,\n  scope                TEXT NOT NULL,\n  enabled              INTEGER NOT NULL CHECK (enabled IN (0,1)),\n  full_access          INTEGER NOT NULL DEFAULT 0 CHECK (full_access IN (0,1)),\n  attempt_cap_microusd INTEGER CHECK (attempt_cap_microusd IS NULL OR attempt_cap_microusd >= 0),\n  generation           INTEGER NOT NULL,\n  digest               TEXT NOT NULL,\n  updated_by           TEXT NOT NULL,\n  updated_at           TEXT NOT NULL,\n  PRIMARY KEY (approver, scope)\n);\n";
@@ -219,7 +233,7 @@ export type SealedLedgerEntry = LedgerEntry & {
         hash: string;
     } | null;
 };
-export declare const SCHEMA_VERSION = 141;
+export declare const SCHEMA_VERSION = 145;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export declare const V118_MERGED_TABLES: Readonly<Record<string, CredentialKind>>;
 /**
@@ -376,6 +390,21 @@ export declare const V140_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
     definition: string;
     saved: string;
 }>>>>;
+/** v143: optional screenshot context on result feedback; existing feedback stays unchanged (saved rows read NULL). */
+export declare const V143_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record<string, {
+    definition: string;
+    saved: string;
+}>>>>;
+/** v145 (docs/plans/task-tidy.md): `task_archive` is a put-away task version. A row hides it from every list and count
+ * and refuses every door that would dispatch, claim or approve it; restore deletes the row. Its history, results,
+ * approvals and ledger stay exactly as they were. `merge_in_flight` is a direct merge between its last check and GitHub's
+ * answer, owned by its token: a task can't be put away under it (a row older than 15 minutes is a crash, and no
+ * longer counts). `deploy_in_flight` is a deployment whose candidate passed its gate (30 minutes, refreshed by every
+ * phase that proves it again). `flow_step_task` is the tasks a flow step was admitted for, kept whatever the card does
+ * next, so a step still running holds them. `branch_check_run` keeps each completed GitHub workflow run (pushed to
+ * the watched branch of the watched repository) the "checks failed" trigger saw, green or red, so tidy can tell a
+ * failure notice was fixed by a later commit. */
+export declare const V145_SCHEMA = "\nCREATE TABLE IF NOT EXISTS task_archive (\n  task_ref INTEGER PRIMARY KEY REFERENCES task_ref(id),\n  by       TEXT NOT NULL,\n  by_kind  TEXT NOT NULL CHECK (by_kind IN ('person','tidy')),\n  rule     TEXT,\n  reason   TEXT NOT NULL,\n  at       TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS branch_check_run (\n  repo           TEXT NOT NULL,\n  run_id         INTEGER NOT NULL,\n  branch         TEXT NOT NULL,\n  workflow       TEXT NOT NULL,\n  head_sha       TEXT NOT NULL,\n  conclusion     TEXT NOT NULL CHECK (conclusion IN ('success','failure')),\n  run_created_at TEXT NOT NULL,\n  observed_at    TEXT NOT NULL,\n  PRIMARY KEY (repo, run_id)\n);\nCREATE INDEX IF NOT EXISTS branch_check_run_by_workflow ON branch_check_run (repo, branch, workflow, run_created_at);\nCREATE TABLE IF NOT EXISTS merge_in_flight (\n  publication INTEGER PRIMARY KEY REFERENCES publication(id),\n  task_ref    INTEGER NOT NULL REFERENCES task_ref(id),\n  token       TEXT NOT NULL,\n  by          TEXT NOT NULL,\n  at          TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS deploy_in_flight (\n  task_ref INTEGER PRIMARY KEY REFERENCES task_ref(id),\n  run      INTEGER NOT NULL,\n  at       TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS flow_step_task (\n  card    INTEGER NOT NULL,\n  entry   INTEGER NOT NULL,\n  task_id TEXT NOT NULL,\n  PRIMARY KEY (card, entry, task_id)\n);\n";
 /**
  * v135: one approval per release (docs/plans/release-once.md). `release_authority` is the single source of truth for a
  * release a person approved: one row per generation, changed only by compare-and-swap on `rev`, with a lease whose
@@ -2406,8 +2435,9 @@ export declare class Store {
     sealScopeApproval(taskId: string, by: string, now: Date, mutation?: Mutation, basis?: {
         kind: "mode" | "chat" | "grant" | "schedule" | "auto-check" | "auto-green";
         modeDigest: string;
-        /** A chat seal of a deploy gate: the release card it came from (chat-management.md §0a.5). */
-        card?: "release";
+        /** A chat seal of a deploy gate: the release card it came from (chat-management.md §0a.5). A chat seal of a task
+         * filed from outside text: `terms`, and the digest of every word the card showed (chat-terms.ts). */
+        card?: "release" | "terms";
         cardDigest?: string;
     }, approverKind?: ApproverKind): boolean;
     /** Whether this task's scope carries a LIVE seal: approved, and the
@@ -3207,6 +3237,7 @@ export declare class Store {
         author: string;
         /** Ingested comments carry their origin id — the idempotency key (M8.17). */
         sourceKey?: string;
+        image?: FeedbackImage | null;
     }, now: Date): number | null;
     /** Live (unsuperseded, unconsumed) comments on a run's terminal diff. */
     liveDiffComments(runId: number): DiffComment[];
@@ -3405,6 +3436,15 @@ export declare class Store {
         entry: number;
         sourceJson: string;
     } | null;
+    /** v142: where a task filed from a youiyoux change or options request came from, as kept when it was filed
+     * (youiyoux-intake.ts; a revision reads its first version's): the request, its kind, and where the person pointed. Null for every other task. */
+    youiyouxOriginOf(taskId: string): {
+        request: string;
+        kind: "change" | "options";
+        route: string | null;
+        component: string | null;
+        at: string | null;
+    } | null;
     /**
      * Seal a revision in ONE transaction (Codex M5-M8 audit, C-3; contract
      * handoff task 2): the SOURCE BINDING is proven here, against live rows,
@@ -3716,7 +3756,7 @@ export declare class Store {
         rejectedRun: number | null;
     } | {
         ok: false;
-        reason: "unknown-task" | "not-stalled" | "claimed" | "accepted-result" | "published" | "moved";
+        reason: "unknown-task" | "not-stalled" | "claimed" | "accepted-result" | "published" | "moved" | "archived";
     };
     /**
      * Cancel, aware of who might be building right now. A live claim wins:
@@ -6863,7 +6903,7 @@ export declare class Store {
         stop: RunStop;
     } | {
         ok: false;
-        reason: "no-stop" | "wrong-task" | "stopping" | "already-resumed" | "superseded" | "busy" | "review";
+        reason: "no-stop" | "wrong-task" | "stopping" | "already-resumed" | "superseded" | "busy" | "review" | "archived";
         detail: string;
     };
     /** Every stop recorded on a task, newest request first. */
@@ -7376,6 +7416,7 @@ export type DiffComment = {
     id: number;
     artifact: number;
     artifactSha: string;
+    image?: FeedbackImage | null;
     run: number;
     path: string | null;
     line: number | null;
@@ -8021,3 +8062,73 @@ export declare function sealStoreMoneyMethods(prototype: object): void;
  * when the prototype's value is the very reference recorded at the seal. `prototype` is Store's own unless a test
  * says otherwise; either way nothing but the recorded references is ever installed. */
 export declare function lockStoreMoneyMethods(store: object, prototype?: object): void;
+/** Takes a saved note's screenshot off without losing the note or its history (v143). Fail closed, in one write
+ * transaction: the note must be live and unconsumed on this run, its screenshot must be genuinely unusable right now
+ * (`unusable` is result-actions.ts feedbackImageProblem, re-read inside the transaction, never the page's say-so), and
+ * the change is recorded in the action ledger under the person who made it. The note is superseded by an exact
+ * imageless copy; the original stays in history. The caller has already proved the person may request changes on
+ * this run (the same authority that seals any saved note into a revision); that standing is re-proved here too. */
+export declare function dropFeedbackImage(store: Store, runId: number, commentId: number, actor: string, unusable: (image: FeedbackImage) => string | null, now: Date): {
+    ok: true;
+    id: number;
+} | {
+    ok: false;
+    reason: "not-found" | "image-usable" | "not-authorized";
+};
+/** A put-away task version (v145, docs/plans/task-tidy.md). */
+export type TaskArchive = {
+    taskRef: number;
+    taskId: string;
+    by: string;
+    byKind: "person" | "tidy";
+    rule: string | null;
+    reason: string;
+    at: string;
+};
+/** Who put a task away, and why: a person by name, or tidy by its rule. */
+export type ArchiveBy = {
+    by: string;
+    byKind: "person" | "tidy";
+    rule: string | null;
+    reason: string;
+};
+export type ArchiveRefusal = "unknown-task" | "live" | "archived" | "not-archived" | "blocked";
+/** The put-away record of this task, or null when it is not put away. */
+export declare function archiveOf(store: Store, taskId: string): TaskArchive | null;
+/** Every version of a task's family, by the same proven lineage the task page reads (`taskFamilyOf`: same project, each
+ * revision bound to its parent's own run by its brief). A family whose lineage doesn't prove is just this task. */
+export declare function taskFamilyRefs(store: Store, taskId: string): {
+    id: number;
+    taskId: string;
+}[];
+/** The first family version with something still going on, or null: running, a live newest claim, an unfinished run,
+ * a process Toolroll hasn't seen exit, a build whose processes were never recorded, a stop still settling, a follow-up
+ * check asked for and not finished, a flow step running for its card, a release in flight (a live release approval
+ * that names it, or a deploy or merge reserved, running or unknown), or a pull request merging (an intent claimed or
+ * firing, or a person's merge between its last check and GitHub's answer). */
+export declare function liveFamilyAttempt(store: Store, refs: readonly number[], now: Date): string | null;
+/** Puts a task away (v145): every version of its family, in one write transaction that re-checks it has no live
+ * attempt, that its versions are exactly `expect` when the caller showed a person a family (a preview), and that
+ * `guard` (the caller's own rule, re-read under the lock) still allows it. Its state, history, results, approvals and
+ * ledger are untouched; its open notifications are resolved; one ledger row records who and why. */
+export declare function archiveTaskFamily(store: Store, taskId: string, by: ArchiveBy, now: Date, options?: {
+    expect?: readonly number[];
+    guard?: (refs: readonly number[]) => string | null;
+}): {
+    ok: true;
+    refs: number[];
+} | {
+    ok: false;
+    reason: ArchiveRefusal;
+    message: string;
+};
+/** Brings a put-away task back (v145): every version of its family, with a ledger row. Tidy never puts a restored
+ * task away again (tidy.ts reads the `task restored` row). */
+export declare function restoreTaskFamily(store: Store, taskId: string, by: string, now: Date, guard?: (refs: readonly number[]) => string | null): {
+    ok: true;
+    refs: number[];
+} | {
+    ok: false;
+    reason: ArchiveRefusal;
+    message: string;
+};