toolroll 0.9.86 → 0.9.88

package/dist/server/render-tasks.d.ts

@@ -17,12 +17,11 @@ import { type CriterionMatrixRow, type ProofVerdict } from "../proof.js";
 import { type Phase } from "../provider.js";
 import { type QualityMode } from "../quality.js";
 import { type AcceptanceCriterion, type Scope, type UnattendedPermissionMode } from "../scope.js";
-import { type Artifact, type CheckProgress, type CoordinatorProposal, type Decision, type ExternalMirror, type Hold, type Incident, type PlanRevisionKind, type PlanRevisionStatus, type Publication, type PublicationGrant, type RepairChainRow, type ReviewRetryState, type RevisionLineage, type Run, type SteerNote, type Store, type Task } from "../store.js";
+import { type CheckProgress, type CoordinatorProposal, type Decision, type ExternalMirror, type Hold, type Incident, type PlanRevisionKind, type PlanRevisionStatus, type Publication, type PublicationGrant, type RepairChainRow, type ReviewRetryState, type RevisionLineage, type Run, type SteerNote, type Store, type Task } from "../store.js";
 import { type TaskControlView } from "../task-control.js";
 import { type DisplayStatus, type PublicationFacts, type ReviewFacts, type WorkStatus } from "../workspace-ui.js";
 import { type Chrome, type Screen } from "./chrome.js";
 import { type CompletionReceiptView, type EvidenceLinkMap, type TaskPullRequest } from "./render-results.js";
-import { type Who } from "./session.js";
 import { type TaskOrigin } from "../task-source.js";
 /** What the task and approval views show about a drafted plan's contract
  * (contract handoff, task 1). A problem is a named problem, never a blank. */
@@ -75,7 +74,7 @@ export declare function revisionSentence(revision: Extract<RevisionView, {
 /** A planner's amendment, said plainly and kept in view: approving binds
  * the amended terms, so this is never folded away. */
 export declare function approvalAmendmentHtml(view: PlanContractView | null | undefined): Html;
-export declare function approvalSheetHtml(input: {
+export type ApprovalSheetInput = {
     surface: "task" | "chat";
     action: string;
     csrf: string;
@@ -120,7 +119,24 @@ export declare function approvalSheetHtml(input: {
     } | null;
     /** Cockpit B2: this person's password is remembered (when, ISO) and these terms may stand on it. */
     freshSince?: string | null;
-}): Html;
+};
+/** The approval sheet: one form that restates every term it signs, the password, and Approve & start. */
+export declare function approvalSheetHtml(input: ApprovalSheetInput): Html;
+/** The approval sheet's parts: what it says first, the signed rows, the in-place editor and its own form, the
+ * details fold, and the words the act and its outcome use. The task page (src/design/KIT.md) shows the rows in its
+ * Plan tab and the act in its approval box; the chat and /next keep the one sheet. */
+export declare function approvalSheetParts(input: ApprovalSheetInput): {
+    lead: Html;
+    rows: Html;
+    editor: Html | null;
+    editorForm: Html | string;
+    details: Html;
+    submit: Html;
+    label: string;
+    after: Html;
+    allowing: string[];
+    passwordNote: string;
+};
 /** Earlier versions of a task still in flight, in plain words: queued
  * while they only wait, running once one has started; null when none. */
 export declare function earlierVersionsWords(active: number, running: number): string | null;
@@ -693,9 +709,23 @@ export declare function qualityModeChoices(name: string, selected: QualityMode):
  * writes the field); kept for callers.
  */
 export declare function decisionOptionForms(decision: Decision, returnTo: string | null): Html;
-export declare function decisionPage(chrome: Chrome, decision: Decision, taskId: string, artifacts: Artifact[], who: Who, now: Date, returnTo?: string | null): Screen;
 export declare function taskOf(store: Store, decision: Decision): string;
 /** A release task's own card (release-once.md, "What people see"): the release it's approved for, the later commits
  * carried under it (on demand), what a later check must run again, the last nightly check of main, and one action to
  * stop carrying. A carried task says whose approval it was carried from. */
 export declare function releaseCardHtml(taskId: string, release: ReleaseView | null, canStop: boolean): Html;
+/** The task page's approval box (src/design/KIT.md): what it asks, the act's own form fields, and the facts the
+ * approve control reads to show a password, one click, or nothing. The rows it signs go to the Plan tab (`planHtml`).
+ * These decide only what the page shows: the approve route proves the person, the freshness and the digest again. */
+export declare function approveKitOf(input: ApprovalSheetInput, freshSince: string | null): NonNullable<BrowserTaskView["approve"]>;
+/** How an approved plan was approved, for the status box's terms line: by whom and how, or the rule that approved it. */
+export declare function approvedKitOf(scope: Scope, approval: {
+    approved: true;
+    at: string;
+    by: string;
+} | {
+    approved: false;
+}, proof: {
+    method: string;
+    at: string;
+} | null): NonNullable<BrowserTaskView["approved"]> | null;

package/dist/server/render-tasks.js

@@ -8,7 +8,7 @@ import { writesWords } from "../writes-mode.js";
 import { checkAccessWords } from "../check-access.js";
 import { sandboxTermsWords } from "../project-sandbox.js";
 import { ACP_AGENTS, isAcpProfile } from "../acp-agents.js";
-import { html, htmlString, joinHtml, postForm, replaceMarkup, reauth } from "../html.js";
+import { html, htmlString, joinHtml, passwordlessRendering, postForm, replaceMarkup, reauth } from "../html.js";
 import { closedQuestionReason, closedQuestionWords } from "../decision.js";
 import {} from "../activity-line.js";
 import {} from "../agentconfig.js";
@@ -38,7 +38,7 @@ import { agentModelName } from "../model-names.js";
 import {} from "../provider.js";
 import { qualityModeTitle } from "../quality.js";
 import { evidenceShortenedWords } from "../result-review.js";
-import { acceptanceToLines, approvalOf, scopeAuthorityOf } from "../scope.js";
+import { acceptanceToLines, approvalOf, freshUntil, scopeAuthorityOf } from "../scope.js";
 import {} from "../store.js";
 import { runCostWords } from "../summary.js";
 import {} from "../task-control.js";
@@ -230,7 +230,34 @@ function originParts(origin) {
     }
     return parts;
 }
+/** The approval sheet: one form that restates every term it signs, the password, and Approve & start. */
 export function approvalSheetHtml(input) {
+    const parts = approvalSheetParts(input);
+    return joinHtml([
+        postForm(input.action, joinHtml([
+            html `<input type="text" name="username" autocomplete="username" class="visually-hidden" tabindex="-1" aria-hidden="true">`,
+            parts.lead,
+            parts.rows,
+            html `<div class="approval-act" id="${input.surface === "task" ? "approval-confirm" : "chat-approval-confirm"}">`,
+            html `${reauth(html `<label class="approval-password"><span class="visually-hidden">Your password</span><input type="password" name="token" autocomplete="current-password" placeholder="Your password" aria-describedby="${parts.passwordNote}"></label>`)}`,
+            input.freshSince == null ? html `<p class="approval-password-note" id="${parts.passwordNote}">Your password signs this approval.</p>`
+                : html `<p class="approval-password-note" id="${parts.passwordNote}" data-approval-fresh>Your password from ${whenTime(input.freshSince)} is remembered on this computer — leave this blank to approve with it, or type it again.</p>`,
+            html `<button type="submit" data-primary-action>${parts.submit}</button></div>`,
+            html `<p class="approval-after">${parts.after}</p>`,
+            html `<div class="approval-secondary">${parts.editor ?? html `<a class="approval-link" href="${input.editHref}">Edit plan</a>`}<a class="approval-link" href="${input.notNowHref}">Not now</a></div>`,
+            parts.details,
+        ]), {
+            attrs: { class: "approve-form approval-sheet", id: input.surface === "task" ? "approve" : null, "data-sticky": input.sticky },
+            hidden: { nonce: input.nonce, digest: input.digest, ...(input.rebuild == null ? {} : { rebuild: String(input.rebuild) }) },
+            returnTo: input.returnTo,
+        }),
+        parts.editorForm,
+    ]);
+}
+/** The approval sheet's parts: what it says first, the signed rows, the in-place editor and its own form, the
+ * details fold, and the words the act and its outcome use. The task page (src/design/KIT.md) shows the rows in its
+ * Plan tab and the act in its approval box; the chat and /next keep the one sheet. */
+export function approvalSheetParts(input) {
     const { scope, route } = input;
     // A machine-drafted repair appends its brief to the signed goal; the row
     // shows the goal and one sentence says what the repair fixes. The whole
@@ -392,40 +419,27 @@ export function approvalSheetHtml(input) {
             "budget-microusd": scope.budgetMicrousd === null ? "none" : String(scope.budgetMicrousd),
         },
     });
-    return joinHtml([
-        postForm(input.action, joinHtml([
-            html `<input type="text" name="username" autocomplete="username" class="visually-hidden" tabindex="-1" aria-hidden="true">`,
-            html `<h2 class="approval-sheet-title">${input.deliverable === "report" ? "The investigation" : "The plan"}</h2>`,
-            sentence === null ? "" : html `<p class="approval-revision">${sentence}</p>`,
-            input.coordinator === null ? "" : html `<p class="approval-note">An agent filed this: <span class="mono">${input.coordinator.label}</span>${input.coordinator.filedAgo === null ? "" : html `, ${input.coordinator.filedAgo}`}. Nothing runs until you approve, and approving runs its request.</p>`,
-            input.deliverable === "report" ? html `<p class="approval-note">Read-only: it reports back and changes nothing in the repository.</p>` : "",
-            originNote(input.origin) === null ? "" : html `<p class="approval-note" data-approval-origin>${originNote(input.origin)}</p>`,
-            html `<dl class="approval-rows">`,
-            row("Goal", html `<p class="approval-goal">${goalShown}</p>`),
-            row("Changes", changes),
-            row("Won’t touch", html `<p>${scope.outOfScope === null ? "Nothing is ruled out." : scope.outOfScope}</p>`),
-            row("Done when", doneWhen),
-            html `</dl>`,
-            amendment,
-            // The size, said once and plainly beside who builds: "Small change: fast model, no plan".
-            projection === null ? "" : sizeLineHtml(projection),
-            who.length === 0 ? "" : html `<p class="approval-who">${who.join(" · ")}</p>`,
-            consent,
-            html `<div class="approval-act" id="${input.surface === "task" ? "approval-confirm" : "chat-approval-confirm"}">`,
-            html `${reauth(html `<label class="approval-password"><span class="visually-hidden">Your password</span><input type="password" name="token" autocomplete="current-password" placeholder="Your password" aria-describedby="${passwordNote}"></label>`)}`,
-            input.freshSince == null ? html `<p class="approval-password-note" id="${passwordNote}">Your password signs this approval.</p>`
-                : html `<p class="approval-password-note" id="${passwordNote}" data-approval-fresh>Your password from ${whenTime(input.freshSince)} is remembered on this computer — leave this blank to approve with it, or type it again.</p>`,
-            html `<button type="submit" data-primary-action>${submit}</button></div>`,
-            html `<p class="approval-after">${after}</p>`,
-            html `<div class="approval-secondary">${editor ?? html `<a class="approval-link" href="${input.editHref}">Edit plan</a>`}<a class="approval-link" href="${input.notNowHref}">Not now</a></div>`,
-            details,
-        ]), {
-            attrs: { class: "approve-form approval-sheet", id: input.surface === "task" ? "approve" : null, "data-sticky": input.sticky },
-            hidden: { nonce: input.nonce, digest: input.digest, ...(rebuild === null ? {} : { rebuild: String(rebuild) }) },
-            returnTo: input.returnTo,
-        }),
-        editorForm,
+    const lead = joinHtml([
+        html `<h2 class="approval-sheet-title">${input.deliverable === "report" ? "The investigation" : "The plan"}</h2>`,
+        sentence === null ? "" : html `<p class="approval-revision">${sentence}</p>`,
+        input.coordinator === null ? "" : html `<p class="approval-note">An agent filed this: <span class="mono">${input.coordinator.label}</span>${input.coordinator.filedAgo === null ? "" : html `, ${input.coordinator.filedAgo}`}. Nothing runs until you approve, and approving runs its request.</p>`,
+        input.deliverable === "report" ? html `<p class="approval-note">Read-only: it reports back and changes nothing in the repository.</p>` : "",
+        originNote(input.origin) === null ? "" : html `<p class="approval-note" data-approval-origin>${originNote(input.origin)}</p>`,
     ]);
+    const rows = joinHtml([
+        html `<dl class="approval-rows">`,
+        row("Goal", html `<p class="approval-goal">${goalShown}</p>`),
+        row("Changes", changes),
+        row("Won’t touch", html `<p>${scope.outOfScope === null ? "Nothing is ruled out." : scope.outOfScope}</p>`),
+        row("Done when", doneWhen),
+        html `</dl>`,
+        amendment,
+        // The size, said once and plainly beside who builds: "Small change: fast model, no plan".
+        projection === null ? "" : sizeLineHtml(projection),
+        who.length === 0 ? "" : html `<p class="approval-who">${who.join(" · ")}</p>`,
+        consent,
+    ]);
+    return { lead, rows, editor, editorForm, details, submit, label: rebuild !== null ? "Approve and build again" : "Approve and start", after, allowing, passwordNote };
 }
 /** Earlier versions of a task still in flight, in plain words: queued
  * while they only wait, running once one has started; null when none. */
@@ -1627,6 +1641,36 @@ export function taskBodyParts(data) {
     // assignment's one action): then it is shown open under the status, never folded.
     const approvalLeads = data.dispatch?.action === "approve-scope" ||
         (data.assignment?.primaryAction?.code === "approve-scope" && data.assignment.primaryAction.target.taskId === task.id);
+    // The sheet's terms, when this person can approve them here: the task page's kit approval box (its Plan tab shows
+    // the rows) and the legacy sheet both read these.
+    const sheetInput = scope === null || approval.approved || data.plan === "requested" || (data.revision != null && "problem" in data.revision) ||
+        scope.profileState === "unresolved" || !consentDoor.open ? null : {
+        surface: "task",
+        action: `${taskHref(task.id)}/approve`,
+        csrf: data.csrf,
+        nonce: data.nonce,
+        digest: data.approvalDigest ?? scope.digest,
+        freshSince: data.approvalFresh ?? null,
+        returnTo: null,
+        scope,
+        planDocument: data.plan === "drafted" ? data.planDocument : null,
+        planContract: data.plan === "drafted" ? data.planContract ?? null : null,
+        revision: data.revision == null || "problem" in data.revision ? null : data.revision,
+        revisionSourceHref: data.revision == null || "problem" in data.revision ? "" : `/r/${data.revision.sourceRun}`,
+        repairChain: data.repairChain ?? null,
+        route: data.route,
+        coordinator: data.coordinator ?? null,
+        origin: data.origin ?? null,
+        deliverable: data.deliverable ?? "branch",
+        rebuild: data.assignment?.need != null && "key" in data.assignment.need && data.assignment.need.key === "replan" ? data.assignment.need.build : null,
+        editHref: data.csrf !== "" && data.planSha != null && data.planDocument !== null ? "#plan-edit" : "#scope",
+        notNowHref: "/work",
+        sticky: approvalLeads,
+        earlier: { active: data.assignment?.earlierActive ?? 0, running: data.assignment?.earlierRunning ?? 0 },
+        edit: data.csrf === "" ? null
+            : { action: `${taskHref(task.id)}/scope`, draft: inlineScopeDraft ? data.scopeDraft ?? null : null, problem: inlineScopeDraft ? data.problem : null,
+                open: data.editPlan === true, stepsHref: data.planSha != null && data.planDocument !== null ? "#plan-edit" : null },
+    };
     const approveForm = scope === null || approval.approved || data.plan === "requested"
         ? ""
         : data.revision !== null && data.revision !== undefined && "problem" in data.revision
@@ -1635,33 +1679,7 @@ export function taskBodyParts(data) {
                 ? html `<div class="card approve-form" id="approve"><p><strong>This task is waiting on you: its scope cannot be approved yet.</strong></p>${profileWords(scope)}<p class="ceremony-road"><a class="button-link" href="#scope">Edit the scope to fix it →</a></p></div>`
                 : !consentDoor.open
                     ? consentClosedHtml(task.id, consentDoor, "task")
-                    : approvalSheetHtml({
-                        surface: "task",
-                        action: `${taskHref(task.id)}/approve`,
-                        csrf: data.csrf,
-                        nonce: data.nonce,
-                        digest: data.approvalDigest ?? scope.digest,
-                        freshSince: data.approvalFresh ?? null,
-                        returnTo: null,
-                        scope,
-                        planDocument: data.plan === "drafted" ? data.planDocument : null,
-                        planContract: data.plan === "drafted" ? data.planContract ?? null : null,
-                        revision: data.revision == null || "problem" in data.revision ? null : data.revision,
-                        revisionSourceHref: data.revision == null || "problem" in data.revision ? "" : `/r/${data.revision.sourceRun}`,
-                        repairChain: data.repairChain ?? null,
-                        route: data.route,
-                        coordinator: data.coordinator ?? null,
-                        origin: data.origin ?? null,
-                        deliverable: data.deliverable ?? "branch",
-                        rebuild: data.assignment?.need != null && "key" in data.assignment.need && data.assignment.need.key === "replan" ? data.assignment.need.build : null,
-                        editHref: data.csrf !== "" && data.planSha != null && data.planDocument !== null ? "#plan-edit" : "#scope",
-                        notNowHref: "/work",
-                        sticky: approvalLeads,
-                        earlier: { active: data.assignment?.earlierActive ?? 0, running: data.assignment?.earlierRunning ?? 0 },
-                        edit: data.csrf === "" ? null
-                            : { action: `${taskHref(task.id)}/scope`, draft: inlineScopeDraft ? data.scopeDraft ?? null : null, problem: inlineScopeDraft ? data.problem : null,
-                                open: data.editPlan === true, stepsHref: data.planSha != null && data.planDocument !== null ? "#plan-edit" : null },
-                    });
+                    : approvalSheetHtml(sheetInput);
     const scopeForm = joinHtml([
         html `<details${scope === null || scopeDraft !== undefined ? html ` open` : ""}><summary>${scope === null ? "Write the scope" : "Edit the scope"}${approval.approved ? " (editing voids the approval)" : ""}</summary>`,
         postForm(`${taskHref(task.id)}/scope`, joinHtml([
@@ -2365,6 +2383,9 @@ export function taskBodyParts(data) {
         earlier,
         approval: data.archived != null ? "" : fragmentString(approvalHtml),
         approvalPlacement: approvalLeads ? "lead" : "plan",
+        // The kit's approval box (src/design/KIT.md): the act, by the real rules, with the rows in the Plan tab.
+        approve: data.archived != null || sheetInput === null || dependencyChoiceNeeded || data.csrf === "" ? null : approveKitOf(sheetInput, data.approvalFresh ?? null),
+        approved: scope !== null && approval.approved ? approvedKitOf(scope, approval, data.approvalProof ?? null) : null,
         more,
         confirmStopped: data.csrf !== "" && data.assignment?.primaryAction?.code === "confirm-stopped" && data.assignment.primaryAction.target.runId !== null
             ? { action: `${taskHref(data.assignment.rootId)}/confirm-stopped`, run: data.assignment.primaryAction.target.runId, checked: needsCheck(data.assignment) } : null,
@@ -2488,29 +2509,6 @@ export function decisionOptionForms(decision, returnTo) {
             : html `<details class="arm-danger"><summary>${option.label} — irreversible, tap to arm</summary>${inner}</details>`;
     }), "\n");
 }
-export function decisionPage(chrome, decision, taskId, artifacts, who, now, returnTo = null) {
-    const options = decisionOptionForms(decision, returnTo);
-    const answered = decision.supersededReason !== null
-        ? html `<p class="meta">${closedQuestionReason(decision.supersededReason)}</p>`
-        : decision.state === "answered"
-            ? html `<div class="answered">Answered: <strong>${decision.choice ?? ""}</strong> by ${decision.answeredBy ?? ""}${decision.note === null ? "" : ` — ${decision.note}`}</div>`
-            : "";
-    const evidence = artifacts.length === 0
-        ? ""
-        : joinHtml([
-            html `<div class="evidence"><strong>Evidence</strong>`,
-            joinHtml(artifacts.map(artifact => html `<a href="/d/${decision.id}/evidence/${artifact.id}">${evidenceWords(artifact.kind)}${artifact.truncated ? " (truncated)" : ""} · ${artifact.bytesStored} bytes</a>`), "\n"),
-            html `</div>`,
-        ]);
-    return screen(`decide · ${taskId}`, joinHtml([
-        html `<h1>${taskId} <span class="badge badge-${decision.state}">${decision.supersededReason !== null ? "closed" : decision.state}</span>${isOverdue(decision, now) ? html ` <span class="badge badge-overdue">Overdue</span>` : ""}${decision.deadline === null ? "" : html ` <span class="meta">deadline ${decision.deadline}</span>`}</h1>`,
-        html `<div class="recap">${decision.recap}</div>`,
-        html `<div class="question">${decision.question}</div>`,
-        decision.state === "answered" ? answered : options,
-        evidence,
-        html `<p class="meta"><a href="${returnTo === null ? "/" : returnTo}">← ${returnTo === null ? "everything waiting" : "back to the task chat"}</a></p>`,
-    ], "\n"), { chrome });
-}
 export function taskOf(store, decision) {
     const run = store.getRun(decision.run);
     return run === null ? "?" : store.externalIdFor(run.taskRef) ?? "?";
@@ -2538,3 +2536,34 @@ export function releaseCardHtml(taskId, release, canStop) {
         html `</div>`,
     ], "\n");
 }
+/** The task page's approval box (src/design/KIT.md): what it asks, the act's own form fields, and the facts the
+ * approve control reads to show a password, one click, or nothing. The rows it signs go to the Plan tab (`planHtml`).
+ * These decide only what the page shows: the approve route proves the person, the freshness and the digest again. */
+export function approveKitOf(input, freshSince) {
+    const parts = approvalSheetParts(input);
+    const rebuild = input.rebuild ?? null;
+    const after = rebuild !== null ? "builds it again to this plan" : input.deliverable === "report" ? "starts the investigation" : "starts the build";
+    const allowing = parts.allowing.length === 0 ? "" : ` You’re allowing ${parts.allowing.join(", ")}.`;
+    const until = freshSince === null ? null : freshUntil(freshSince);
+    return {
+        action: input.action,
+        fields: { nonce: input.nonce, digest: input.digest, ...(rebuild === null ? {} : { rebuild: String(rebuild) }) },
+        label: parts.label,
+        heading: rebuild !== null ? "The plan changed" : input.deliverable === "report" ? "Investigation ready" : "Plan ready",
+        text: `Approving signs plan version ${input.scope.digest.slice(0, 12)} and ${after}.${allowing}`,
+        kind: "standard",
+        facts: { passwordless: passwordlessRendering(), remembered: until !== null },
+        rememberedUntil: until,
+        planHtml: htmlString(joinHtml([parts.lead, parts.rows, parts.editor ?? "", parts.details, parts.editorForm])),
+    };
+}
+/** How an approved plan was approved, for the status box's terms line: by whom and how, or the rule that approved it. */
+export function approvedKitOf(scope, approval, proof) {
+    if (!approval.approved)
+        return null;
+    const basis = scope.approvalBasis ?? null;
+    const rule = basis === "mode" ? "your operating mode for this project" : basis === "grant" ? "its flow, which runs on its own" : basis === "schedule" ? "the schedule you approved"
+        : basis === "auto-green" || basis === "auto-check" ? "this project’s release approval (CI and the release check passed)" : basis === "carried" ? "the release approval it was carried under" : null;
+    const how = approvalProofWords(proof).replace(/^ \(|\)$/g, "");
+    return { by: approval.by, at: approval.at, automatic: rule !== null, rule, how: how === "" ? (rule === null ? "password typed" : "") : how, version: scope.digest.slice(0, 12) };
+}

package/dist/server/route-table.js

@@ -124,25 +124,30 @@ get("pages", "projects.browse", "/projects/browse", free);
 get("pages", "projects.github", "/projects/github", { ...free, callers: ["cookie"], callerRefusal: { status: 403, type: "text/plain; charset=utf-8", body: "listing repositories feeds a browser session's act" },
     ...anyApprover("your login can watch — adding projects is an approver's act") });
 get("pages", "projects.page", "/projects", { limited: "unscoped", ...free });
+// One project's reading page (/projects/<name>): reads only, like every GET (docs/plans/get-side-effects.md). It shows a
+// project this account can see and never switches the session's project; its Open project button posts to
+// /projects/select. The handler resolves the name among the account's visible projects; anything else is not found.
+get("pages", "projects.project", "^\\/projects\\/[^/]+$", { limited: "unscoped", ...free, sample: "/projects/payments-api" });
 get("pages", "home", "/", { limited: "collection", ...free });
+get("pages", "search", "/search", { limited: "collection", ...free });
 get("tasks", "inbox", "/inbox", { limited: "collection", ...free });
 get("tasks", "work", "/work", { limited: "collection", ...free });
 // Put away old tasks (task-tidy.md): the preview reads only; putting away is an approver's step-up in a browser session.
 get("tasks", "work.put-away", "/work/put-away", { limited: "collection", ...free, callers: ["cookie"], ...approver("Only an approver can put tasks away.", "/work") });
 post("tasks", "work.put-away.apply", "/work/put-away", { scope: "step-up", limited: "collection", ...approver("Only an approver can put tasks away.", "/work") });
 get("tasks", "next", "/next", { limited: "collection" });
-get("pages", "morning", "/morning");
+get("pages", "morning", "/morning", { limited: "collection", ...free }); // a redirect to / now
 get("pages", "workbench", "/workbench", free);
 get("tasks", "board", "/board", { limited: "collection" });
 get("tasks", "review", "/review", { limited: "collection" });
 get("settings", "spend", "/spend", { ...free, ...anyOperator("An instance operator sees spend.", "/") });
 get("settings", "settings.spend", "/settings/spend", { ...free, ...anyOperator("An instance operator sets spending limits.", "/settings") });
 get("pages", "ledger", "/ledger", { limited: "unscoped", ...free });
-get("pages", "activity", "/activity");
-get("tasks", "done", "/done", { limited: "collection" });
+get("pages", "activity", "/activity", { limited: "collection", ...free }); // a redirect to / now (Home has the summary)
+get("tasks", "done", "/done", { limited: "collection", ...free }); // a redirect to the Tasks list's Finished view now
 get("settings", "mode", "/mode");
 get("people", "people.page", "/people", { limited: "unscoped", ...free });
-get("pages", "system", "/system");
+get("pages", "system", "/system", free);
 // Where every "Connect a builder" leads: read-only, open to a project-limited person (the handler shows only a visible project).
 get("pages", "start-builder", "/start-builder", { limited: "unscoped", ...free });
 get("tasks", "tasks", "/tasks", { limited: "collection", ...free }); // a redirect to /work now: never sent to the project opener first
@@ -153,12 +158,17 @@ get("pages", "agents", "/agents", { limited: "unscoped", ...free });
 // Browser sessions only, like the transcript and the peek: no token (a lead's, a runner's, a remote one) reads live output.
 get("pages", "agents.live", "/agents/live", { limited: "unscoped", callers: ["cookie"], ...free });
 get("pages", "agents.live.read", `^\\/agents\\/live\\/${ID}$`, { limited: "unscoped", callers: ["cookie"], ...free, sample: "/agents/live/1" });
+// Terminals' address in the Agents area: a 302 to /term, admitted exactly as /term is (an operator's browser session).
+get("pages", "agents.terminals", "/agents/terminals", TERM);
+// Fleet and System are parts of Agents now: GET aliases to /agents#computers and /agents#models.
 get("pages", "fleet", "/fleet", free);
 get("tasks", "tasks.new", "/tasks/new", { limited: "collection", ...free });
+// The first run's own page (Wave E): five guided steps, reads only; it leads Home once the first run is over.
+get("tasks", "welcome", "/welcome", { limited: "collection", ...free });
 get("tasks", "task.page", `^\\/t\\/${TASK}$`, { project: "task", limited: "resource", ...free, sample: "/t/one" });
 get("tasks", "task.evidence", `^\\/t\\/${TASK}\\/evidence$`, { project: "task", limited: "resource", ...free, sample: "/t/one/evidence" });
 get("pages", "ledger.export", "/ledger/export", { limited: "unscoped", ...free });
-get("tasks", "runs", "/runs", { limited: "collection" });
+get("tasks", "runs", "/runs", { limited: "collection", ...free }); // a redirect to /agents now
 get("pages", "menu", "/menu", { limited: "collection", ...free });
 get("tasks", "run.page", `^\\/r\\/${ID}$`, { project: "run", limited: "resource", ...free, sample: "/r/1" });
 get("tasks", "run.evidence", `^\\/r\\/${ID}\\/evidence\\/${ID}$`, { project: "run", limited: "resource", ...free, sample: "/r/1/evidence/2" });
@@ -218,6 +228,11 @@ get("settings", "settings.knowledge", "/settings/knowledge", { limited: "unscope
 get("settings", "settings.learning", "/settings/learning", { limited: "unscoped", ...free });
 get("settings", "settings.telegram", "/settings/telegram", { limited: "self", ...free, ...approver("An approver can pair their own phone.", "/settings") });
 get("settings", "settings.page", "/settings", { limited: "unscoped", ...free });
+// The Settings groups (docs/plans/settings-revamp.md §3): one read-only page each, drawn by the overview's handler.
+// Anyone signed in may open one; the page shows only the sections this person can use, and every form's own route
+// keeps its own role and proof.
+for (const one of ["general", "agents", "alerts", "projects", "access", "system"])
+    get("settings", `settings.group-${one}`, `/settings/${one}`, { limited: "unscoped", ...free });
 get("pages", "health", "/health", { ...free, ...anyOperator("An instance operator reads server health.", "/") });
 get("pages", "metrics", "/metrics", { ...free, ...anyOperator("An instance operator reads metrics.", "/") });
 get("chat", "push.key", "/push/key");