toolroll 0.9.85 → 0.9.87

package/dist/server/chat.js

@@ -38,7 +38,7 @@ import { WORK_INDEX_MAX_LIMIT, workIndexPage } from "../work-index.js";
 import { html, htmlString, postForm, reauth } from "../html.js";
 import { requestContext } from "./request-context.js";
 import { refuse, screen, whenTime } from "./chrome.js";
-import { chatResultHref, chatReturnWithLatest, chatReturnWithSaid, projectChatHref, redirect, respond, safeChatReturn, safeReturn, taskChatHref, taskHref } from "./http.js";
+import { chatResultHref, chatReturnWithLatest, chatRefusal, chatReturnWithSaid, projectChatHref, redirect, respond, safeChatReturn, safeReturn, taskChatHref, taskHref } from "./http.js";
 import { chatAckPage, chatPage, NOT_STARTED_SESSION, coordinatorProposalsSection, decisionsFor, leadAfterComposerHtml, leadChatVersion, leadMintCard, leadPage, leadThreadHtml, PHONE_CARD_FACT, TASK_COMPOSER_MODES, taskChatLiveRegion, teamProposalCardParts } from "./render-chat.js";
 import {} from "./render-pages.js";
 import { completionForm, hardBlockerOf, homePhaseWords, owedAcceptanceOf, resultPanelHtml } from "./render-results.js";
@@ -389,9 +389,11 @@ export function createChatHandlers(runtime) {
             const id = proposalId, saved = store.getLeadProposal(id), savedAction = saved?.kind === 'action' ? sharedActionPayload(saved.payload) : null;
             if (saved && savedAction && saved.state !== 'pending' && (sharedConversation !== null || store.getLeadThread(saved.thread)?.approver === principal.name) && principal.repos.includes(savedAction.repo) && store.accountCanAccess(principal.name, savedAction.repo)) {
                 const task = typeof saved.outcome?.['taskId'] === 'string' ? saved.outcome['taskId'] : typeof savedAction.request['task'] === 'string' ? savedAction.request['task'] : null;
-                const destination = task ? taskHref(task) : `/settings/${savedAction.operation.startsWith('skill_') ? 'skills' : 'knowledge'}?repo=${encodeURIComponent(savedAction.repo)}`;
+                // A flow action leads back to its flow (a page path of our own making, never the proposal's words).
+                const flowId = savedAction.operation.startsWith('flow_') && Number.isSafeInteger(savedAction.request['flow']) ? Number(savedAction.request['flow']) : null;
+                const destination = task ? taskHref(task) : flowId !== null ? `/flows/${flowId}` : `/settings/${savedAction.operation.startsWith('skill_') ? 'skills' : 'knowledge'}?repo=${encodeURIComponent(savedAction.repo)}`;
                 const said = typeof saved.outcome?.['said'] === 'string' ? saved.outcome['said'] : saved.state === 'dismissed' ? 'Action dismissed.' : saved.state === 'expired' ? 'This proposal expired. Ask for a fresh proposal.' : 'This action has no completed outcome yet.';
-                return sendScreen(response, 200, screen('Action outcome', html `<h1>${savedAction.title}</h1><p>${said}</p><a class="button-link" href="${destination}">${task ? 'Open task' : 'Open project settings'}</a>`, { chrome: chromeFor(savedAction.repo, 'chat') }));
+                return sendScreen(response, 200, screen('Action outcome', html `<h1>${savedAction.title}</h1><p>${said}</p><a class="button-link" href="${destination}">${task ? 'Open task' : flowId !== null ? 'Open flow' : 'Open project settings'}</a>`, { chrome: chromeFor(savedAction.repo, 'chat') }));
             }
             const review = mintSharedActionReview(store, principal, id, evidenceRoot, clock()), action = review.payload;
             const terms = action.terms.map(term => html `<p style="white-space:pre-wrap;overflow-wrap:anywhere">${term}</p>`);
@@ -525,18 +527,18 @@ export function createChatHandlers(runtime) {
             return refuse(response, who, 403, "the sandbox never pushes");
         const password = body.get("token") ?? "";
         if (password === "" || !authenticateApprover(who, password).ok) {
-            return redirect(response, `/settings?said=${encodeURIComponent("enrolling this device takes your password, typed again")}`);
+            return redirect(response, `/settings/alerts?said=${encodeURIComponent("enrolling this device takes your password, typed again")}#this-device`);
         }
         const endpoint = body.get("endpoint") ?? "";
         const p256dh = body.get("p256dh") ?? "";
         const auth = body.get("auth") ?? "";
         const checked = validatePushEndpoint(endpoint);
         if (!checked.ok)
-            return redirect(response, `/settings?said=${encodeURIComponent(checked.problem)}`);
+            return redirect(response, `/settings/alerts?said=${encodeURIComponent(checked.problem)}#this-device`);
         const p256dhBytes = Buffer.from(p256dh, "base64url");
         const authBytes = Buffer.from(auth, "base64url");
         if (p256dhBytes.length !== 65 || p256dhBytes[0] !== 4 || authBytes.length !== 16) {
-            return redirect(response, `/settings?said=${encodeURIComponent("that subscription's keys are not the shape a browser mints")}`);
+            return redirect(response, `/settings/alerts?said=${encodeURIComponent("that subscription's keys are not the shape a browser mints")}#this-device`);
         }
         const keys = loadOrCreateVapidKeys(dirname(options.telegramTokenFile ?? "."));
         const generation = store.approverGeneration(who.name) ?? 1;
@@ -550,9 +552,9 @@ export function createChatHandlers(runtime) {
             vapidFingerprint: keys.fingerprint,
         }, clock());
         if (!enrolled.ok) {
-            return redirect(response, `/settings?said=${encodeURIComponent(enrolled.reason === "approver-cap" ? "five devices per person — remove one first" : "twenty devices per installation — remove one first")}`);
+            return redirect(response, `/settings/alerts?said=${encodeURIComponent(enrolled.reason === "approver-cap" ? "five devices per person — remove one first" : "twenty devices per installation — remove one first")}#this-device`);
         }
-        return redirect(response, `/settings?said=${encodeURIComponent("this device now gets a buzz when the plane needs a person")}`);
+        return redirect(response, `/settings/alerts?said=${encodeURIComponent("this device now gets a buzz when the plane needs a person")}#this-device`);
     }
     async function pushRemove(ctx) {
         const { who, response, posted } = ctx;
@@ -562,9 +564,9 @@ export function createChatHandlers(runtime) {
         const id = Number(body.get("id") ?? "");
         const mine = store.listPushSubscriptions(who.name).find(one => one.id === id && one.retiredAt === null);
         if (mine === undefined)
-            return redirect(response, `/settings?said=${encodeURIComponent("that device is not yours to remove, or it is already gone")}`);
+            return redirect(response, `/settings/alerts?said=${encodeURIComponent("that device is not yours to remove, or it is already gone")}#this-device`);
         store.retirePushSubscription(mine.id, `removed by ${who.name}`, clock());
-        return redirect(response, `/settings?said=${encodeURIComponent("removed — that device stops receiving pushes")}`);
+        return redirect(response, `/settings/alerts?said=${encodeURIComponent("removed — that device stops receiving pushes")}#this-device`);
     }
     async function phoneDismiss(ctx) {
         const { who, response, now, posted } = ctx;
@@ -585,7 +587,7 @@ export function createChatHandlers(runtime) {
         const back = body.get("return") === "/settings/lead" ? "/settings/lead" : safeChatReturn(body.get("return"));
         const password = body.get("token") ?? "";
         if (password === "" || !authenticateApprover(who, password).ok) {
-            return redirect(response, chatReturnWithSaid(back, "configuring chat spend takes your password, typed again"));
+            return redirect(response, chatRefusal(back, "configuring chat spend takes your password, typed again"));
         }
         if (body.get("off") === "1") {
             store.clearChatConfig();
@@ -602,12 +604,12 @@ export function createChatHandlers(runtime) {
         const weekly = Number(weeklyText);
         const daily = (body.get("daily-turns") ?? "").trim() === "" ? 50 : Number(body.get("daily-turns"));
         if (provider !== "anthropic-api" && provider !== "openrouter-api" && provider !== "claude-subscription" && provider !== "codex-subscription") {
-            return redirect(response, chatReturnWithSaid(back, "pick a chat provider"));
+            return redirect(response, chatRefusal(back, "pick a chat provider"));
         }
         const subscription = isSubscriptionChatProvider(provider);
         const model = requestedModel === "" && subscription ? "default" : requestedModel;
         if (!validModelId(model)) {
-            return redirect(response, chatReturnWithSaid(back, "the model id must be 1–128 letters, digits, dots, slashes, colons, underscores, or dashes"));
+            return redirect(response, chatRefusal(back, "the model id must be 1–128 letters, digits, dots, slashes, colons, underscores, or dashes"));
         }
         // The key, when pasted, is stored FIRST (0600 file, Telegram-token
         // precedent) so the catalog fetch below can already use it. It never
@@ -615,10 +617,10 @@ export function createChatHandlers(runtime) {
         const pastedKey = (body.get("key") ?? "").trim();
         if (pastedKey !== "") {
             if (subscription)
-                return redirect(response, chatReturnWithSaid(back, "subscription chat uses the CLI's cached login — do not paste an API key"));
+                return redirect(response, chatRefusal(back, "subscription chat uses the CLI's cached login — do not paste an API key"));
             const stored = storeChatKey(provider, pastedKey);
             if (!stored.ok)
-                return redirect(response, chatReturnWithSaid(back, stored.message));
+                return redirect(response, chatRefusal(back, stored.message));
         }
         // The pin: anthropic models come from the compiled table; openrouter
         // models come from OpenRouter's OWN catalog, priced by the authority
@@ -633,13 +635,13 @@ export function createChatHandlers(runtime) {
                 pin = hit.price;
         }
         if (!subscription && pin === null) {
-            return redirect(response, chatReturnWithSaid(back, provider === "openrouter-api" ? "that model is not in OpenRouter's catalog (or the catalog is unreachable) — chat cannot reserve spend it cannot bound" : "that model has no pinned price — chat cannot reserve spend it cannot bound"));
+            return redirect(response, chatRefusal(back, provider === "openrouter-api" ? "that model is not in OpenRouter's catalog (or the catalog is unreachable) — chat cannot reserve spend it cannot bound" : "that model has no pinned price — chat cannot reserve spend it cannot bound"));
         }
         if (!subscription && (!Number.isFinite(weekly) || weekly <= 0)) {
-            return redirect(response, chatReturnWithSaid(back, "the weekly ceiling is a positive dollar amount — chat without one is unbounded, not configured"));
+            return redirect(response, chatRefusal(back, "the weekly ceiling is a positive dollar amount — chat without one is unbounded, not configured"));
         }
         if (!Number.isInteger(daily) || daily <= 0 || daily > 1_000) {
-            return redirect(response, chatReturnWithSaid(back, "daily turns is a whole number between 1 and 1000"));
+            return redirect(response, chatRefusal(back, "daily turns is a whole number between 1 and 1000"));
         }
         store.setChatConfig({
             provider,

package/dist/server/chrome.d.ts

@@ -44,7 +44,7 @@ export declare const DEMO_BANNER_SHORT = "Demo: sample projects. Nothing calls a
  * React workspace, the pre-script fallback) reads these.
  *
  * The palette above, in light, dark and pinned themes, is Signal's generated
- * tokens.css (src/design, built by youi from the design-language repo); the
+ * tokens.css (src/design, generated by youiyoux from the toolroll System, src/design/system); the
  * console's own rules follow in console.css, shipped beside this module.
  * Their bytes are the served sheet's (WORKSPACE_STYLE hashes them). The React
  * workspace's stylesheet loads after this one and never redefines a token, so

package/dist/server/chrome.js

@@ -34,6 +34,7 @@ import { RECIPE_CSS } from "../recipe-ui.js";
 import { REQUEST_LIMITS_CSS } from "../request-budget-ui.js";
 import { RETENTION_CSS } from "../retention-ui.js";
 import { crumbsHtml, SETTINGS_KIT_CSS } from "../settings-kit.js";
+import { acts as kitActs, btn as kitBtn, doc as kitDoc, docHeader as kitDocHeader, notFound as kitNotFound, notice as kitNotice, outPage } from "./kit.js";
 import { SKILLS_CSS } from "../skills-ui.js";
 import { SPEND_CSS } from "../spend-ui.js";
 import { SSO_CSS } from "../sso-ui.js";
@@ -95,17 +96,23 @@ export function refuse(response, who, status, message, backHref = "/") {
     if (who === null || who.via === "bearer") {
         return respond(response, status, "text/plain; charset=utf-8", message);
     }
-    const body = joinHtml([
-        html `<h1>${status === 404 ? "Not found" : "Request refused"}</h1>`,
-        // A missing page is plain news, not an error.
-        status === 404 ? html `<p>${message}</p>` : html `<div class="problem">${message}</div>`,
-        html `<p class="meta refusal-back"><a href="${backHref}">\u2190 Back</a></p>`,
-    ], "\n");
+    // Kit pages (Wave E): a missing page is plain news, not an error, with two ways on; a refusal says what was refused
+    // where it happened and leads back.
+    const path = new URL(requestContext.getStore()?.returnTo ?? "/", "http://standing-orders.local").pathname;
+    const generic = /^there'?s no page at this address\.?$/i.test(message.replace("\u2019", "'"));
+    // The words are the caller's exactly (older callers wrote lower-case fragments; k-refusal capitalises the first letter).
+    const body = html `<div class="k-refusal">${status === 404
+        ? kitNotFound(path, generic ? {} : { title: message, text: "Home has what needs you; Tasks has every task." })
+        : kitDoc(kitDocHeader({ title: "Request refused", back: [backHref, "Back"] }), kitNotice(message), kitActs(kitBtn("Go back", { href: backHref })))}</div>`;
     // A signed-in browser keeps the workspace around it: the same navigation as every page.
     const framed = requestContext.getStore()?.refusal;
     if (framed !== undefined && who.via === "cookie")
         return framed(response, status, body);
-    return page(response, status, shell("refused", body));
+    return page(response, status, shell(status === 404 ? "Not found" : "Request refused", outPage({
+        brand: BRAND_HTML, title: status === 404 ? "Not found" : "Request refused",
+        body: html `<div class="k-refusal">${kitNotice(status === 404 && generic ? `There\u2019s no page at ${path}.` : message)}</div>`,
+        foot: html `<a class="k-link" href="${status === 404 ? "/" : backHref}">${status === 404 ? "Go to Home" : "Go back"}</a>`,
+    })));
 }
 /** The demo's one-line promise, on every page. */
 export const DEMO_BANNER = `Demo: a scripted lead and sample projects. Nothing calls a model, reaches outside or spends. For your own project, run ${START_COMMAND} in its folder.`;
@@ -129,13 +136,16 @@ export const DEMO_BANNER_SHORT = "Demo: sample projects. Nothing calls a model o
  * React workspace, the pre-script fallback) reads these.
  *
  * The palette above, in light, dark and pinned themes, is Signal's generated
- * tokens.css (src/design, built by youi from the design-language repo); the
+ * tokens.css (src/design, generated by youiyoux from the toolroll System, src/design/system); the
  * console's own rules follow in console.css, shipped beside this module.
  * Their bytes are the served sheet's (WORKSPACE_STYLE hashes them). The React
  * workspace's stylesheet loads after this one and never redefines a token, so
  * a person's accent (accentHead) still wins over the generated default. */
 export const STYLE = readFileSync(join(import.meta.dirname, "..", "design", "tokens.css"), "utf8") +
-    readFileSync(join(import.meta.dirname, "console.css"), "utf8");
+    readFileSync(join(import.meta.dirname, "console.css"), "utf8") +
+    // The revamp kit (src/design/KIT.md): k- classes only, after the console's rules, so the kit's markup from
+    // server pages (server/kit.ts) and React views (browser/kit/) looks the same everywhere.
+    readFileSync(join(import.meta.dirname, "..", "design", "kit.css"), "utf8");
 /** Appearance: a three-way segmented switch, one tap per choice. */
 export const THEME_CONTROLS_CSS = `.task-repo select{width:100%;min-height:2.75rem;font-size:1rem}.task-repo-add{margin:.35rem .1rem .5rem}.task-repo-add a{display:inline-flex;align-items:center;min-height:2.25rem}details.result-request-open.result-request-form>summary{border:0;background:transparent;padding:.5rem 0;min-height:2.75rem;font-weight:600;display:list-item;list-style:revert}details.result-request-open.result-request-form>summary::-webkit-details-marker{display:revert}form.js-autosave button[type=submit]{display:none}.provider-row{border-bottom:1px solid var(--so-line);padding:.35rem 0}.provider-row:first-of-type{border-top:1px solid var(--so-line)}.provider-head{display:flex;align-items:center;gap:.75rem;margin:.4rem 0 0}.provider-status{display:inline-flex;align-items:center;gap:.4rem;color:var(--so-muted);font-size:.875rem}.provider-status i{width:.5rem;height:.5rem;border-radius:50%;background:var(--so-muted)}.provider-status--ok i{background:var(--so-success)}.provider-status--warn i{background:var(--so-attention)}.provider-status--off i{background:transparent;border:1.5px solid var(--so-muted)}details.provider-manage>summary{cursor:pointer;color:var(--so-accent-text);font-size:.875rem;min-height:2.5rem;display:list-item;padding-block:.5rem}.card.props .row{display:grid;gap:.1rem;margin:0 0 .75rem}.card.props .row>.meta{display:block;font-size:.75rem}.card.props .row>.meta::first-letter{text-transform:uppercase}.card.props .row>.mono{font-family:var(--font-sans);font-size:.875rem}.card.props .row>.mono .seal{font-family:var(--font-mono);font-size:.8125rem}details.evidence-files{margin:1rem 0}details.evidence-files>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:600}details.evidence-files ul{list-style:none;margin:0;padding:0}details.evidence-files li{display:flex;justify-content:space-between;gap:1rem;padding:.5rem 0;border-bottom:1px solid var(--so-line)}.result-action .result-feedback-link{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;text-decoration:none}@media(hover:hover) and (pointer:fine){.result-action .result-feedback-link:hover{background:var(--so-raised)}}.so-sr-only{position:absolute!important;width:1px!important;height:1px!important;padding:0!important;margin:-1px!important;overflow:hidden!important;clip:rect(0,0,0,0)!important;white-space:nowrap!important;border:0!important}.verdict{margin:.5rem 0 .75rem}.verdict-chips{display:flex;flex-wrap:wrap;gap:.4rem;list-style:none;padding:0;margin:0}.verdict-chip{display:inline-flex;align-items:center;gap:.3rem;min-height:1.75rem;padding:.2rem .65rem;border-radius:999px;font-size:.8125rem;font-weight:600;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}.verdict-chip svg{width:.9rem;height:.9rem}.verdict-chip--success{background:var(--so-success-soft);color:var(--so-success)}.verdict-chip--danger{background:var(--so-danger-soft);color:var(--so-danger)}.verdict-chip--warning{background:var(--so-warning-soft);color:var(--so-warning)}.verdict-chip--info{background:var(--so-info-soft);color:var(--so-info)}.verdict-by{margin:.4rem 0 0}details.result-request-open{margin:.5rem 0}details.result-request-open>summary{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;cursor:pointer;list-style:none}details.result-request-open>summary::-webkit-details-marker{display:none}details.result-request-open[open]>summary{margin-bottom:.75rem}.settings-tiles{display:grid;gap:1.25rem;margin:0 0 2rem}.settings-tiles h2{margin:0 0 .5rem;font-size:.875rem;font-weight:600;color:var(--so-muted)}.settings-tiles section>div{display:grid;grid-template-columns:repeat(auto-fill,minmax(8.5rem,1fr));gap:.5rem}.settings-tiles a>span{display:grid;gap:.1rem;min-width:0}.settings-tiles .provider-status{font-weight:400;font-size:.8125rem}.settings-tiles a{display:flex;align-items:center;gap:.6rem;min-height:3rem;padding:.65rem .8rem;border:1px solid var(--so-line);border-radius:.625rem;background:var(--so-paper);color:var(--so-ink);text-decoration:none;font-weight:550;font-size:.875rem}@media(hover:hover) and (pointer:fine){.settings-tiles a:hover{border-color:var(--so-input-line);background:var(--so-raised)}}.settings-tiles a>svg{width:1.1rem;height:1.1rem;flex-shrink:0;color:var(--so-accent-text)}details.settings-more{margin:.25rem 0 1.25rem}details.settings-more>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:550}details.settings-more>summary .meta{font-weight:400;margin-left:.35rem}.settings-changed{margin-top:-.25rem}.appearance{margin:0 0 28px}.appearance h2{margin:0 0 10px}.theme-switch{display:inline-flex;flex-wrap:nowrap;max-width:100%;gap:4px;padding:4px;margin:0;border:1px solid var(--so-line);border-radius:10px;background:var(--so-raised)}.theme-switch .theme-choice,.so-native-region .theme-switch .theme-choice{flex:1 1 0;width:auto;white-space:nowrap;min-height:40px;padding:8px 16px;border:0;border-radius:7px;background:transparent;color:var(--so-muted);font:inherit;font-weight:550;box-shadow:none;cursor:pointer}@media(hover:hover) and (pointer:fine){.theme-switch .theme-choice:hover{color:var(--so-ink)}}.theme-switch .theme-choice[aria-pressed="true"]{background:var(--so-paper);color:var(--so-ink);box-shadow:0 1px 2px rgb(0 0 0 / .1)}.appearance .meta{margin:8px 0 0}@media(max-width:600px){.theme-switch .theme-choice{min-height:44px}}.update-notes{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit;max-height:18rem;overflow:auto}`;
 /** The page CSS this module writes itself (not the imported modules'), for the stylesheet contract tests. */

package/dist/server/console.css

@@ -32,8 +32,8 @@
   }
   /* Signal's colour, shadow, radius, type and spacing tokens (--so-*) are
    * generated by youi into src/design/tokens.css, light and dark, and the
-   * server prepends that sheet to this one (chrome.ts STYLE). Edit them in the
-   * design-language repo, never here. The device decides the scheme unless the
+   * server prepends that sheet to this one (chrome.ts STYLE). Edit them in
+   * src/design/system/tokens and run youiyoux sync, never here. The device decides the scheme unless the
    * person pins one (html[data-theme], set from their cookie). What follows are
    * the console's older names: views onto those tokens, never a second ramp. */
   :root {
@@ -2742,3 +2742,32 @@ html.so-swap::view-transition-old(*):only-child { animation: so-card-out 160ms e
 
 .result-feedback-actions { display: flex; flex-wrap: wrap; gap: .5rem; }
 .result-feedback-actions button { min-height: 44px; white-space: nowrap; }
+
+/* Put away old tasks (docs/plans/task-tidy.md): grouped checklist on the kit's column. */
+.put-away { max-width: var(--so-settings-width, 760px); }
+.put-away h1 { margin: 0 0 4px; }
+.put-away-days { display: flex; flex-wrap: wrap; align-items: center; gap: 8px; margin: 0 0 16px; }
+.put-away-days label { display: flex; align-items: center; gap: 8px; margin: 0; font-size: 14px; }
+.put-away-days input[type=number] { width: 5rem; margin: 0; }
+.put-away-days button { width: auto; }
+.put-away-group { margin: 0 0 20px; padding: 0; border: 0; }
+.put-away-group legend { display: flex; align-items: center; gap: 8px; padding: 0; margin: 0 0 6px; font-weight: 600; font-size: 15px; }
+.put-away-group legend .count { font-family: var(--so-mono, ui-monospace, monospace); font-size: 11px; font-weight: 500; color: var(--so-muted); }
+.put-away-group ul { list-style: none; margin: 0; padding: 0; border-top: 1px solid var(--so-line); }
+.put-away-group li { border-bottom: 1px solid var(--so-line); }
+.put-away-item { display: grid; grid-template-columns: auto minmax(0, 1fr); column-gap: 10px; align-items: start; margin: 0; padding: 10px 2px; cursor: pointer; }
+.put-away-item input { margin: 3px 0 0; width: auto; min-height: 0; align-self: start; }
+.put-away-title { font-size: 13.5px; font-weight: 500; overflow-wrap: anywhere; }
+.put-away-why { grid-column: 2; font-size: 12.5px; color: var(--so-muted); }
+.put-away-id { grid-column: 2; font-family: var(--so-mono, ui-monospace, monospace); font-size: 11.5px; color: var(--so-muted); overflow-wrap: anywhere; }
+.put-away-cli { margin: 12px 0 0; font-size: 13px; color: var(--so-muted); overflow-wrap: anywhere; }
+.put-away-cli code { font-size: 12px; }
+.task-archived { display: flex; flex-wrap: wrap; align-items: center; justify-content: space-between; gap: 8px 12px; margin: 0 0 12px; padding: 10px 12px; border-radius: 8px; background: var(--so-raised); }
+.task-archived p { margin: 0; font-size: 13.5px; }
+.task-archived form { margin: 0; }
+.task-archived button { width: auto; }
+.work-row-status form.inline { margin: 0; }
+@media (max-width: 900px) {
+  .put-away-item { min-height: 44px; }
+  .put-away-days button, .task-archived button, .work-row-status form.inline button { min-height: 44px; }
+}

package/dist/server/flows.js

@@ -11,7 +11,9 @@ import { LIMITS } from "../decision.js";
 import { run as execRun } from "../exec.js";
 import { setFlowSecret } from "../flow-actions.js";
 import { addCardToFlow, advanceFlows, cancelFlowCard, crossProjectProblem, decideFlowCard, flowDefinitionOf, moveCardInFlow } from "../flow-engine.js";
-import { galleryHtml, galleryUseHtml } from "../flow-gallery-ui.js";
+import { galleryUseHtml, newFlowHtml } from "../flow-gallery-ui.js";
+import { startersHtml } from "../flow-starters-ui.js";
+import { starterOf, startersFor } from "../flow-starters.js";
 import { galleryAdmitsAnyone, galleryDefaults, galleryDiagram, galleryTemplateOf, galleryToolsOf, previewGallery, useGalleryTemplate } from "../flow-gallery.js";
 import { flowInsights } from "../flow-insights.js";
 import { assignFlowCard, commentOnFlowCard, watchFlowCard } from "../flow-people.js";
@@ -21,13 +23,14 @@ import { exportFlow, fetchFlowFile, FlowFileError, importFlow, parseFlowFile, pl
 import { addFlowTriggerTo, checkFlowTriggerNow, pressFlowButton, removeFlowTrigger, removeLinearKey, setFlowTriggerOn, renewFlowHook, saveHooksBase, saveLinearKey, saveSigningSecret, setUpFlowHook, changeFlowHookSender, setFlowHookScope, shareFlowButton, stopSharingFlowButton, rawTakesDeliveries, rawAdmitsAnyone } from "../flow-triggers.js";
 import { FLOW_IMPORT_SCRIPT, flowFallbackHtml, flowImportHtml, flowsListHtml, flowView } from "../flows-ui.js";
 import { FLOW_TEMPLATES, FlowContractError, validateFlowDefinition, withZoneNames } from "../flows.js";
+import { revokeFlowBrowser, signFlowBrowser } from "../flow-browser.js";
 import { prepareUnattendedCandidates, parseUnattendedAsk, revokeUnattended, signUnattended, untilWords } from "../flow-unattended.js";
 import { keyStatus } from "../keys.js";
-import { kitPageHtml, kitsGalleryHtml } from "../kits-ui.js";
+import { kitPageHtml, kitRowsHtml } from "../kits-ui.js";
 import { addKitGithubTrigger, addKitSample, kitOf, setUpKit } from "../kits.js";
 import { connectionsOf } from "../mcp-connect.js";
 import { authorizedProject, projectName, } from "../project.js";
-import { recipeAnswersFromForm, recipeDefinitionPreviewHtml, recipeEditorHtml, recipeFromForm, recipeLibraryHtml, recipeRunHtml, recipeScript, workflowPreviewHtml } from "../recipe-ui.js";
+import { recipeAnswersFromForm, recipeDefinitionPreviewHtml, recipeEditorHtml, recipeFromForm, recipeRowsHtml, recipeRunHtml, recipeScript, workflowPreviewHtml } from "../recipe-ui.js";
 import { createWorkflowPreview, exportRecipe, findRecipe, importRecipe, launchWorkflow, prepareRecipeRun, RecipeError, savedRecipes, saveWorkflowRecipe, starterRecipes, workflowPreview } from "../recipes.js";
 import { isAlive as runnerAlive } from "../runner.js";
 import { createSubagentFrom, labelOf, nameOf, saveSoul, sendSubagentSummaries, setSubagentState, subagentSettings } from "../subagent-admin.js";
@@ -58,7 +61,7 @@ export function createFlowsHandlers(runtime) {
         const diagram = preview?.built.definition ?? galleryDiagram(template);
         const page = galleryUseHtml({ template, projects: projects.map(path => ({ path, name: projectName(path) })), repo, answers, name, preview, problem,
             csrf: who.via === "cookie" ? who.session.csrf : "", diagram, tools: preview?.tools ?? galleryToolsOf(template, diagram, connectionsOf(store, repo)), said });
-        return sendScreen(response, problem !== null && preview === null && notice !== null ? 400 : 200, screen(template.name, html `<p><a href="/flows/new">New flow</a></p><h1>${template.name}</h1>${page}`, { chrome: chromeFor(repo, "flows") }));
+        return sendScreen(response, problem !== null && preview === null && notice !== null ? 400 : 200, screen(template.name, page, { chrome: chromeFor(repo, "flows") }));
     }
     // ---- path parameters and shared lookups ------------------------------------
     /** One segment of the path the route's pattern admitted ("/flows/1/cards/2/move" → 2 is "1", 4 is "2"). */
@@ -75,15 +78,50 @@ export function createFlowsHandlers(runtime) {
     };
     const sendJson = (response, status, payload) => respond(response, status, "application/json; charset=utf-8", JSON.stringify(payload));
     // ---- flows: reads ----------------------------------------------------------
-    // Flows → New: the gallery, and each template's page.
+    // Flows → New: describe it to the lead, or start from a template (with the kits, recipes and starter flows as groups).
     async function newFlowGallery(ctx) {
         const { url, response, who, project } = ctx;
         const projects = consoleProjects();
-        const canUse = who.via === "cookie" && who.role === "approver" && projects.length > 0;
-        // The chosen project, else the one being looked at: its tools are what each card says is connected.
+        const approver = who.via === "cookie" && who.role === "approver";
+        const canUse = approver && projects.length > 0;
+        // The chosen project, else the one being looked at, else the first: its tools are what each row says is connected.
         const asked = url.searchParams.get("repo");
-        const repo = asked !== null && projects.includes(asked) ? asked : project !== null && projects.includes(project) ? project : null;
-        return sendScreen(response, 200, screen("New flow", html `<p><a href="/flows">Flows</a></p><h1>New flow</h1>${(galleryHtml({ repo, canUse, connections: repo === null ? null : connectionsOf(store, repo) }))}`, { chrome: chromeFor(repo ?? project, "flows") }));
+        const repo = asked !== null && projects.includes(asked) ? asked : project !== null && projects.includes(project) ? project : projects[0] ?? null;
+        // Describe what you want: the words go to the lead as a chat draft, which drafts the flow for the person to confirm.
+        const described = url.searchParams.get("describe");
+        let askError = null;
+        if (described !== null && canUse) {
+            const words = described.replace(/[\u0000-\u0008\u000b-\u001f\u007f]/g, "").trim();
+            const named = projects.find(one => projectName(one) === url.searchParams.get("project")) ?? repo;
+            if (words !== "")
+                return redirect(response, `/chat?draft=${encodeURIComponent(`Make a flow${named === null ? "" : ` in ${projectName(named)}`}: ${words}`.slice(0, 4000))}`);
+            askError = "Describe what should happen first.";
+        }
+        // One-time work: the open project's recipes (recipe screens work in the open project).
+        let recipes;
+        try {
+            const revision = who.via === "cookie" ? who.session.projectRevision : 0;
+            const recent = project === null ? [] : store.handle.prepare("SELECT document,task_id,flow_id FROM workflow_preview WHERE repo=? AND (task_id IS NOT NULL OR flow_id IS NOT NULL) ORDER BY created_at DESC LIMIT 12").all(project).map(row => {
+                const d = importRecipe(String(row["document"]));
+                const task = row["task_id"] === null ? null : store.getTask(String(row["task_id"]));
+                const flow = row["flow_id"] === null ? null : store.getFlow(Number(row["flow_id"]));
+                const on = flow !== null && flow.state === "active" && store.flowTriggers(flow.id).some(one => one.kind === "schedule" && one.state === "active");
+                return { name: d.name, href: task !== null ? taskHref(task.id) : `/flows/${Number(row["flow_id"])}`, state: task?.state ?? (flow === null || flow.state !== "active" ? "Archived" : on ? "Scheduled" : "Paused") };
+            });
+            recipes = recipeRowsHtml(starterRecipes(), project === null ? [] : savedRecipes(store, who.name, project), project, project === null ? null : projectName(project), revision, recent);
+        }
+        catch (error) {
+            if (!(error instanceof RecipeError))
+                throw error;
+            recipes = html `<p class="k-notice" role="alert">${error.message}</p>`;
+        }
+        const starters = repo === null ? html `` : startersHtml({ repo, projectName: projectName(repo), starters: startersFor(store, repo), canSwitch: approver && !store.isDemo(),
+            suggested: starterOf(url.searchParams.get("starter") ?? "")?.id ?? null });
+        const said = url.searchParams.get("said"), problem = url.searchParams.get("problem");
+        const page = newFlowHtml({ repo, projects: projects.map(path => ({ path, name: projectName(path) })), canUse, group: url.searchParams.get("group") ?? "all",
+            connections: repo === null ? null : connectionsOf(store, repo), ask: { value: described ?? "", error: askError }, kits: kitRowsHtml(store, repo), recipes, starters,
+            said: said === null ? null : said.slice(0, 400), problem: problem === null ? null : problem.slice(0, 400) });
+        return sendScreen(response, 200, screen("New flow", page, { chrome: chromeFor(repo ?? project, "flows"), functional: { script: FLOW_IMPORT_SCRIPT } }));
     }
     async function galleryTemplatePage(ctx) {
         const { url, who, response, project } = ctx;
@@ -106,7 +144,7 @@ export function createFlowsHandlers(runtime) {
         const { url, who, response, project } = ctx;
         const projects = consoleProjects();
         const flows = store.listFlows(projects);
-        return sendScreen(response, 200, screen("Flows", html `<h1>Flows</h1>${(flowsListHtml(store, flows, projects, who.via === "cookie" && who.role === "approver", url.searchParams.get("problem")))}`, { chrome: chromeFor(project, "flows"), functional: { script: FLOW_IMPORT_SCRIPT } }));
+        return sendScreen(response, 200, screen("Flows", flowsListHtml(store, flows, projects, who.via === "cookie" && who.role === "approver", url.searchParams.get("problem"), url.searchParams.get("project"), clock()), { chrome: chromeFor(project, "flows"), functional: { script: FLOW_IMPORT_SCRIPT } }));
     }
     async function flowInsightsRead(ctx) {
         const { url, response } = ctx;
@@ -156,10 +194,10 @@ export function createFlowsHandlers(runtime) {
     }
     // ---- starter kits: the gallery, and each kit's checklist in a project ------
     async function kitsGallery(ctx) {
-        const { url, who, response, project } = ctx;
-        const projects = consoleProjects();
-        const canSetUp = who.via === "cookie" && who.role === "approver";
-        return sendScreen(response, 200, screen("Starter kits", html `<h1>Starter kits</h1>${(kitsGalleryHtml(store, projects, projectName, canSetUp, { problem: url.searchParams.get("problem") }))}`, { chrome: chromeFor(project, "flows") }));
+        const { url, response } = ctx;
+        // Starter kits live under New flow → With an agent now; a refusal sent here still shows there.
+        const problem = url.searchParams.get("problem");
+        return redirect(response, `/flows/new?group=kits${problem === null ? "" : `&problem=${encodeURIComponent(problem.slice(0, 400))}`}`);
     }
     async function kitPage(ctx) {
         const { url, who, response } = ctx;
@@ -168,8 +206,8 @@ export function createFlowsHandlers(runtime) {
         const kit = kitOf(pathPart(url, 2));
         const repo = url.searchParams.get("repo") ?? (projects.length === 1 ? projects[0] : "");
         if (kit === null || !projects.includes(repo))
-            return redirect(response, "/kits");
-        return sendScreen(response, 200, screen(kit.name, html `<h1>${kit.name}</h1>${(kitPageHtml(store, kit, repo, options.configDir ?? null, canSetUp, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }))}`, { chrome: chromeFor(repo, "flows") }));
+            return redirect(response, "/flows/new?group=kits");
+        return sendScreen(response, 200, screen(kit.name, kitPageHtml(store, kit, repo, options.configDir ?? null, canSetUp, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }, projectName), { chrome: chromeFor(repo, "flows") }));
     }
     // ---- v92 / D5: the lead's subagents — the list, and one page per subagent ----
     async function subagentsPage(ctx) {
@@ -199,24 +237,9 @@ export function createFlowsHandlers(runtime) {
         response.writeHead(200, { ...SAFETY, "Content-Type": "text/markdown; charset=utf-8", "Content-Disposition": `attachment; filename="${mate.handle}.md"` });
         return void response.end(mate.soul);
     }
+    /** Recipes are New flow → One-time work now: the old address lands there. */
     async function recipeLibrary(ctx) {
-        const { who, response, project } = ctx;
-        try {
-            const revision = who.via === "cookie" ? who.session.projectRevision : 0;
-            const recent = project === null ? [] : store.handle.prepare("SELECT document,task_id,flow_id FROM workflow_preview WHERE repo=? AND (task_id IS NOT NULL OR flow_id IS NOT NULL) ORDER BY created_at DESC LIMIT 12").all(project).map(row => {
-                const d = importRecipe(String(row["document"]));
-                const task = row["task_id"] === null ? null : store.getTask(String(row["task_id"]));
-                const flow = row["flow_id"] === null ? null : store.getFlow(Number(row["flow_id"]));
-                const on = flow !== null && flow.state === "active" && store.flowTriggers(flow.id).some(one => one.kind === "schedule" && one.state === "active");
-                return { name: d.name, href: task !== null ? taskHref(task.id) : `/flows/${Number(row["flow_id"])}`, state: task?.state ?? (flow === null || flow.state !== "active" ? "Archived" : on ? "Scheduled" : "Paused") };
-            });
-            return sendScreen(response, 200, screen("Workflow recipes", recipeLibraryHtml(starterRecipes(), project === null ? [] : savedRecipes(store, who.name, project), project, revision, recent), { chrome: chromeFor(project, "recipes"), functional: { script: recipeScript() } }));
-        }
-        catch (error) {
-            if (error instanceof RecipeError)
-                return refuse(response, who, error.status, error.message, "/recipes");
-            throw error;
-        }
+        return redirect(ctx.response, "/flows/new?group=recipes");
     }
     /** One recipe screen in the open project: the editor (start, new, edit, from a task), use, preview, export; any other address is no screen. */
     const recipeScreen = (shown) => async (ctx) => {
@@ -536,7 +559,7 @@ export function createFlowsHandlers(runtime) {
         // What was previewed: the file and every value it resolved to (a default the first preview filled in included).
         const previewedOf = (plan) => createHash("sha256").update(`${document}\0${JSON.stringify(plan?.values ?? given)}`).digest("hex").slice(0, 32);
         const csrf = who.via === "cookie" ? who.session.csrf : "";
-        const page = (plan, problem, status) => sendScreen(response, status, screen(`Import ${file.name}`, html `<p><a href="/flows">Flows</a></p><h1>Import ${file.name}</h1>${(flowImportHtml({ plan, file, document, repo, csrf, values: given, previewed: previewedOf(plan), problem }))}`, { chrome: chromeFor(repo, "flows") }));
+        const page = (plan, problem, status) => sendScreen(response, status, screen(`Import ${file.name}`, flowImportHtml({ plan, file, document, repo, csrf, values: given, previewed: previewedOf(plan), problem }), { chrome: chromeFor(repo, "flows") }));
         let plan;
         try {
             plan = planFlowImport(store, repo, file, given, who.name);
@@ -613,8 +636,14 @@ export function createFlowsHandlers(runtime) {
         }
         if (action === "scripts") {
             // The project's script library, reached from any of its flows.
-            if (body.get("approve") === "yes")
-                return store.approveFlowScript(flow.repo, body.get("name") ?? "") ? settle("Approved. Zones that run it go on.") : answer(404, { ok: false, said: "That script isn't waiting for approval." });
+            if (body.get("approve") === "yes") {
+                // The approval covers the version and content the panel showed (its version and digest ride back).
+                const version = Number(body.get("version")), digest = body.get("digest") ?? "";
+                const approved = Number.isSafeInteger(version) && version > 0 && digest !== "" ? store.approveFlowScript(flow.repo, body.get("name") ?? "", { version, digest }) : "changed";
+                return approved === "approved" ? settle("Approved. Zones that run it go on.")
+                    : approved === "changed" ? answer(409, { ok: false, said: "This script changed since you read it. Read the new script, then approve it. Nothing was approved." })
+                        : answer(404, { ok: false, said: "That script isn't waiting for approval." });
+            }
             if (body.get("remove") === "yes")
                 return store.removeFlowScript(flow.repo, body.get("name") ?? "", who.name, now) ? settle("Script removed. Zones that ran it wait until it's back.") : answer(404, { ok: false, said: "There's no script by that name." });
             const saved = saveScript(store, flow.repo, { name: body.get("name"), about: body.get("about"), body: body.get("body"), timeoutMinutes: body.get("timeoutMinutes"), language: body.get("language"), file: body.get("file") }, who.name, now);
@@ -656,6 +685,18 @@ export function createFlowsHandlers(runtime) {
         if (action === "unattended-off") {
             return revokeUnattended(store, flow.id, who.name, now) ? settle("It no longer runs on its own. New cards wait for you.") : answer(409, { ok: false, said: "It wasn't running on its own." });
         }
+        if (action === "browser") {
+            // A person's own step-up (a lead's or remote run's token never gets here: route table), then signFlowBrowser
+            // re-reads the flow, its zones and scripts in its one write and refuses unless they are the digest the panel showed.
+            const proved = authenticateApprover(who, body.get("password") ?? "", flow.repo);
+            if (!proved.ok)
+                return answer(403, { ok: false, said: "That password isn't right. Nothing was approved." });
+            const signed = signFlowBrowser(store, { flow: flow.id, signer: who.name, proof: proved.method, sawDigest: body.get("digest") ?? "", console: { generation: who.via === "cookie" ? who.session.generation : -1 } }, now);
+            return signed.ok ? settle(`Browser allowed. ${signed.grant.zones.length === 1 ? "Its script" : "Its scripts"} can start Chromium now.`) : answer(409, { ok: false, said: signed.message });
+        }
+        if (action === "browser-off") {
+            return revokeFlowBrowser(store, flow.id, who.name, now) ? settle("Browser turned off. Its browser zones wait until someone allows it again.") : answer(409, { ok: false, said: "Browser use wasn't allowed for this flow." });
+        }
         if (action === "save") {
             let saved, drawn;
             try {
@@ -975,6 +1016,8 @@ export function createFlowsHandlers(runtime) {
         "flow.secrets": flowAct("secrets"),
         "flow.unattended": flowAct("unattended"),
         "flow.unattended-off": flowAct("unattended-off"),
+        "flow.browser": flowAct("browser"),
+        "flow.browser-off": flowAct("browser-off"),
         "flow.triggers": flowAct("triggers"),
         "flow.card.move": cardAct("move"),
         "flow.card.decide": cardAct("decide"),

package/dist/server/home.d.ts

@@ -0,0 +1,35 @@
+/**
+ * Home ("/", UI revamp wave B): one sentence that answers "what needs me?", four counts read from the same work index
+ * the Tasks list filters (so a count and the list it opens always agree), what waits on this person grouped by what it
+ * asks, what is running, and the lead's message box. Reads only: every act keeps its own route and rules (an agent's
+ * question is answered through POST /d/<id>/answer, the same one-click act as its own page).
+ */
+import type { BrowserHomeView } from "../browser-workspace.js";
+import type { Store } from "../store.js";
+import type { WorkSummaryAccess } from "../work-summary.js";
+/** How many waiting rows Home lists; the rest open in Tasks. */
+export declare const HOME_NEEDS_SHOWN = 30;
+export type HomeFacts = {
+    store: Store;
+    now: Date;
+    access: WorkSummaryAccess;
+    evidenceRoot?: string;
+    /** The project in view (already admitted), or null for every project. */
+    project: string | null;
+    /** Every admitted project, for the scope links. */
+    projects: readonly {
+        name: string;
+        path: string;
+    }[];
+    /** Chat is allowed for this person here (the lead's message box). */
+    chat: boolean;
+    /** This person can answer an agent's question (an approver in a browser session). */
+    canAnswer: boolean;
+};
+/** "7 need you across 2 projects." — the sentence and the figures read the same totals. */
+export declare function homeSentence(needs: number, perProject: readonly {
+    name: string;
+    needs: number;
+}[], scope: string | null, any: boolean): string;
+/** Home's view for one person and scope, from two reads of the work index (what waits, what runs). */
+export declare function homeView(facts: HomeFacts): BrowserHomeView;

package/dist/server/home.js

@@ -0,0 +1,104 @@
+import { browserWorkActionHref } from "../browser-crew.js";
+import { ASK_LABEL } from "../needs-you.js";
+import { projectName } from "../project.js";
+import { workIndexPage } from "../work-index.js";
+import { relativeAge } from "./chrome.js";
+import { taskHref } from "./http.js";
+const TONE = { attention: "needs", ready: "needs", live: "live", done: "done", problem: "failed", muted: "", neutral: "" };
+const ASKS = ["decide", "review", "unblock"];
+const ASK_WORD = { decide: "Decision", review: "Result", unblock: "Blocked" };
+/** How many waiting rows Home lists; the rest open in Tasks. */
+export const HOME_NEEDS_SHOWN = 30;
+const HOME_RUNNING_SHOWN = 8;
+/** "7 need you across 2 projects." — the sentence and the figures read the same totals. */
+export function homeSentence(needs, perProject, scope, any) {
+    if (!any)
+        return "No tasks yet.";
+    if (needs === 0)
+        return scope === null ? "Nothing needs you." : `Nothing needs you in ${scope}.`;
+    const verb = needs === 1 ? "needs" : "need";
+    if (scope !== null)
+        return `${needs} ${verb} you in ${scope}.`;
+    const waiting = perProject.filter(one => one.needs > 0);
+    return waiting.length === 1 ? `${needs} ${verb} you in ${waiting[0].name}.` : `${needs} ${verb} you across ${waiting.length} projects.`;
+}
+function rowOf(store, item, now, multi, canAnswer) {
+    const action = item.primaryAction;
+    const href = action?.code === "open-result" && action.target.runId != null
+        ? `/review?result=${encodeURIComponent(action.target.taskId)}&run=${action.target.runId}` : browserWorkActionHref(item);
+    const decisionId = action?.target.decisionId ?? null;
+    const decision = decisionId === null ? null : store.getDecision(decisionId);
+    const open = decision !== null && decision.state === "open" && decision.supersededReason === null;
+    // An irreversible option is armed behind a confirmation on its own page; Home answers only what one click may.
+    const question = open && canAnswer && decision.options.every(option => option.reversible) ? {
+        id: decision.id, text: decision.question, recap: decision.recap,
+        options: decision.options.map(option => ({ id: option.id, label: option.label, consequence: option.consequence, recommended: option.id === decision.recommendation })),
+    } : null;
+    const waits = item.status.views.includes("needs-you");
+    // The specific ask, never the group's own words again: "Needs you" under Unblock reads "Blocked".
+    const word = waits ? (open ? "Question" : item.chip ?? (item.status.label === "Needs you" && item.ask !== null ? ASK_WORD[item.ask] : item.status.label)) : item.status.label;
+    const tone = waits ? "ask" : TONE[item.status.tone];
+    const line = waits
+        ? (open ? decision.question : item.status.detail !== item.status.label ? item.status.detail : null)
+        : item.progress ?? (item.status.detail !== item.status.label ? item.status.detail : null);
+    return {
+        id: item.rootId, title: item.title, href: taskHref(item.rootId),
+        project: multi || item.repo === null ? (item.repo === null ? "Unplaced" : projectName(item.repo)) : null,
+        age: relativeAge(item.updatedAt, now), chip: { word, tone }, line,
+        action: href === null || action === null ? null : { label: action.label, href }, question,
+    };
+}
+/** Home's view for one person and scope, from two reads of the work index (what waits, what runs). */
+export function homeView(facts) {
+    const { store, now, access, project } = facts;
+    const read = (view, limit) => workIndexPage(store, now, access, { view, limit, project, ...(facts.evidenceRoot === undefined ? {} : { root: facts.evidenceRoot }) });
+    const needs = read("needs-you", HOME_NEEDS_SHOWN);
+    const running = read("running", HOME_RUNNING_SHOWN);
+    const totals = needs.totals;
+    // Queued: the Tasks list's own Queued count (the same predicate its view=queued filter lists).
+    const queued = totals.queued;
+    // Every project is said by name (all=1): /work alone would narrow to the session's open project.
+    const scopeQuery = project === null ? "all=1&" : `project=${encodeURIComponent(project)}&`;
+    const counts = [
+        { key: "needs", label: "Needs you", value: totals["needs-you"], href: `/work?${scopeQuery}view=needs-you` },
+        { key: "running", label: "Running", value: totals.running, href: `/work?${scopeQuery}view=running` },
+        { key: "queued", label: "Queued", value: queued, href: `/work?${scopeQuery}view=queued` },
+        { key: "finished", label: "Finished", value: totals.completed, href: `/work?${scopeQuery}view=completed` },
+    ];
+    const multi = project === null && new Set([...needs.items, ...running.items].map(one => one.repo ?? "")).size > 1;
+    const groups = [];
+    for (const ask of ASKS) {
+        const rows = needs.items.filter(one => one.ask === ask).map(one => rowOf(store, one, now, multi, facts.canAnswer));
+        if (rows.length > 0)
+            groups.push({ key: ask, label: ASK_LABEL[ask], rows });
+    }
+    // A waiting row whose ask the index couldn't name still waits on this person: it goes under Decide, never lost.
+    const unnamed = needs.items.filter(one => one.ask === null).map(one => rowOf(store, one, now, multi, facts.canAnswer));
+    if (unnamed.length > 0) {
+        const decide = groups.find(one => one.key === "decide");
+        if (decide)
+            decide.rows.push(...unnamed);
+        else
+            groups.unshift({ key: "decide", label: ASK_LABEL.decide, rows: unnamed });
+    }
+    const live = running.items.filter(one => !one.status.views.includes("needs-you")).map(one => rowOf(store, one, now, multi, facts.canAnswer));
+    if (live.length > 0)
+        groups.push({ key: "running", label: "Running", rows: live });
+    const perProject = needs.projects.map(one => ({ name: one.repo === null ? "Unplaced" : projectName(one.repo), needs: one.totals["needs-you"] }));
+    const any = totals.all > 0 || totals.completed > 0 || (totals.archived ?? 0) > 0;
+    const shown = groups.filter(one => one.key !== "running").reduce((sum, one) => sum + one.rows.length, 0);
+    return {
+        kind: "home",
+        say: homeSentence(totals["needs-you"], perProject, project === null ? null : projectName(project), any),
+        project,
+        scopes: facts.projects.length < 2 ? null : [
+            { key: "", label: "All projects", href: "/", active: project === null },
+            ...facts.projects.map(one => ({ key: one.path, label: one.name, href: `/?project=${encodeURIComponent(one.path)}`, active: one.path === project })),
+        ],
+        counts, groups,
+        more: totals["needs-you"] > shown ? { count: totals["needs-you"] - shown, href: counts[0].href } : null,
+        newTask: "/tasks/new",
+        ask: facts.chat ? { project, placeholder: project === null ? "Ask the lead about your projects…" : `Ask the lead about ${projectName(project)}…` } : null,
+        empty: any ? null : { title: "No tasks yet.", text: "Describe a change in a sentence; an agent writes a plan for you to approve." },
+    };
+}