toolroll 0.9.85 → 0.9.86

package/CHANGELOG.md

@@ -1,5 +1,29 @@
 # Changelog
 
+## 0.9.86 — 2026-11-02
+
+- **Old tasks tidy themselves.** A routine's newer run puts away its older
+  ones, a release task goes once its version ships or a newer attempt
+  replaces it, and a "Checks failed on main" notice goes once main passes
+  again. Running work, tasks you filed, and tasks handed to a person are
+  never touched. Each one says why it was put away.
+- **Put away old tasks, in one step.** Needs you → **Put away old tasks**
+  shows exactly what would go and why, grouped, with a box to untick each
+  one; your password puts away exactly that list. **Put away** works on a
+  single task too. Nothing is deleted: the **Archived** view keeps every
+  task's history and has **Restore**. The same from the terminal:
+  `toolroll task tidy --preview`, then the `--apply --digest` command it
+  prints; `task archive`, `task restore`, `task list --view archived`.
+- **Flows can drive a browser, once you allow it.** A flow step that starts a
+  browser (like the nightly journeys) now runs in its sandbox when a person
+  has allowed it: **Allow browser** on the flow page shows the exact script
+  and asks for your password, or `toolroll flows browser <flow> on`. Changing
+  the script ends the approval. Without it, the step waits with one line
+  saying what to allow, instead of crashing.
+- **Deploys no longer stop halfway.** A deploy now proves the release
+  read-only and writes its "deploying" marker separately, so it finishes
+  instead of stopping with "attempt to write a readonly database".
+
 ## 0.9.85 — 2026-11-01
 
 - **Point at the exact screenshot.** Choose **Comment** beside a result's

package/dist/agent-fence.d.ts

@@ -98,8 +98,9 @@ export type FenceGrants = {
      * SEATBELT_NO_KEYCHAIN). Only fenceFor gives it, to a build's agent. Never a check's (one with sign-ins gets those in
      * its environment, invoke.ts keychainSignIns), never a tool server's (serverGrantsOf). */
     keychain?: true;
-    /** macOS: a project check's launch, whose Chromium may start (sandbox-runtime.ts SEATBELT_CHROMIUM). Only fenceFor
-     * sets it, only for kind "check". */
+    /** macOS: a project check's launch, or a flow script zone's with approved browser use, whose Chromium may start
+     * (sandbox-runtime.ts SEATBELT_CHROMIUM). Only fenceFor sets it: always for kind "check", for kind "flow" only when
+     * its caller proved the approval (flow-browser.ts). */
     browser?: true;
     /** A `sign-ins` check's exact sign-in files, read again inside the home denies (check-access.ts, signInGrants). */
     signIns?: SignInGrants;
@@ -391,6 +392,9 @@ export type FenceContext = {
     provider?: string;
     /** Scratch folders (a flow's) that stay denied whole inside the pool, whatever the policy. */
     scratchRoots?: readonly string[];
+    /** A flow's script zone whose browser use a person approved, proved at launch (flow-browser.ts browserStanding):
+     * Chromium's one service, as a check gets it. Read for kind "flow" only; every other kind ignores it. */
+    browser?: true;
 };
 /** A launch's sealed sandbox terms (builder.ts launchSandboxOf): its policy version, read denies and mach services. A
  * launch with none sealed is v1 with none of them. */

package/dist/agent-fence.js

@@ -1167,8 +1167,9 @@ export function fenceFor(kind, ctx) {
         ...(written === null ? {} : { writes: written.writes, readOnly: [...new Set([...made.readOnly, ...written.readOnly])].sort() }),
         ...(ctx.network === undefined ? {} : { network: ctx.network }),
         ...(ctx.machLookup === undefined || ctx.machLookup.length === 0 ? {} : { machLookup: [...ctx.machLookup] }),
-        // A project's checks may drive a browser (Playwright's Chromium); builds, flows and tool servers don't get it.
-        ...(kind === "check" ? { browser: true } : {}),
+        // A project's checks may drive a browser (Playwright's Chromium), and so may a flow's script zone whose browser use
+        // a person approved (the caller proves it at launch); builds, tool servers and every other flow launch don't get it.
+        ...(kind === "check" || (kind === "flow" && ctx.browser === true) ? { browser: true } : {}),
         // A build's agent signs in from the keychain (Claude Code does); nothing else it launches reaches it.
         ...(kind === "build" ? { keychain: true } : {}),
         // Under a write allowlist these are out of reach already; where the launch writes anywhere, they are denied by name.

package/dist/assignment.js

@@ -6,7 +6,7 @@ import { currentActor, withActor } from "./actor.js";
 import { replacedWords } from "./task-status.js";
 import { COMPLETER_ACTOR, COMPLETION_ACTION, COMPLETION_BY_MACHINE, COMPLETION_BY_PERSON, familyChangedFiles, landedReasonOf, personCompletionOwed } from "./result-completion.js";
 import { homedir } from "node:os";
-import { readSchemaVersion, stopFactOf } from "./store.js";
+import { readSchemaVersion, refArchived, stopFactOf } from "./store.js";
 import { approvalOf, liveReleaseOf, machineActing } from "./scope.js";
 import { openWorkDecisionOf, taskWorkSummaryOf, workDecisionAction } from "./work-summary.js";
 import { evidenceRoot, readVerifiedArtifact, readVerifiedReport, verifyArtifact } from "./evidence.js";
@@ -170,14 +170,15 @@ export function assignmentOf(store, taskId, now, access, root, memo) {
     const attention = family.problem === null ? [] : [family.problem];
     // Family admission above precedes question bodies. The newest result
     // does not settle an unanswered question on any earlier version.
-    const questions = [current, ...family.versions.filter(version => version.id !== current.id)].flatMap(version => {
+    // A put-away earlier version (v145) is history: its question and its queue place never hold the current one up.
+    const questions = [current, ...family.versions.filter(version => version.id !== current.id && !refArchived(store, version.refId))].flatMap(version => {
         const decision = openWorkDecisionOf(store, version.refId, now);
         return decision === null ? [] : [{ taskId: version.id, decision }];
     });
     // A finished task label cannot hide a lease or an unfinished process record.
     const busy = (version) => version.state === "running" || store.currentLiveLease(version.refId, now) !== null ||
         store.runsFor(version.refId).some(run => run.outcome === null || store.stopQuiescenceProblem(run.id) !== null);
-    const earlierActive = family.versions.filter(version => version.id !== current.id && (version.state === "queued" || busy(version)));
+    const earlierActive = family.versions.filter(version => version.id !== current.id && ((version.state === "queued" && !refArchived(store, version.refId)) || busy(version)));
     // Of those, how many have work under way (the rest only wait in the queue).
     const earlierRunning = earlierActive.filter(busy).length;
     const unfinished = store.runsFor(current.refId).find(run => run.outcome === null) ?? null;