toolroll 0.9.89 → 0.9.91

package/dist/server/session.d.ts

@@ -2,6 +2,7 @@
 import { type ChatDraft } from "../converse.js";
 import { type Principal } from "../operate-remote.js";
 import { type Store } from "../store.js";
+import { type Authority } from "../local-owner.js";
 import { type Server } from "node:http";
 /** A user agent, reduced to safe display words — never echoed raw. */
 export declare function oneLineUa(raw: string | string[] | undefined): string;
@@ -27,6 +28,14 @@ export declare const NO_TOUCH_FRAGMENTS: ReadonlySet<string>;
 export type Session = {
     name: string;
     csrf: string;
+    /** v147 (easy-start C1): full, or the local owner's restricted authority. Set when the session is made; never changed. */
+    authority: Authority;
+    /** v147: a local owner's session stands only while local mode is on at this generation (null for a full session). */
+    localGeneration: number | null;
+    /** v147 (C2, filled in by the browser-key wave): the console start whose mutation key this session holds, and a hash of
+     * that key (never the key). Null: no key yet, or a session saved before v147 — stale, so mutations ask to reconnect. */
+    keyEpoch: string | null;
+    keyHash: string | null;
     /** v29: the account's standing at login — the central gate reads it;
      * the revocation cascade kills the session outright. */
     role: "approver" | "viewer";
@@ -108,7 +117,8 @@ export type Who = {
     name: string;
     via: "cookie";
     session: Session;
-    role: "approver" | "viewer";
+    role: "approver" | "viewer"; /** v147: the session's own authority. */
+    authority: Authority;
 } | {
     name: string;
     via: "bearer";
@@ -117,6 +127,11 @@ export type Who = {
     /** The complete proved API-token authority, retained across body reads. */ principal?: Principal;
     generation: number;
 };
+/** A full session's authority fields when it is made (a password, an identity-provider sign-in, a sign-up or join).
+ * The browser-key wave adds the key epoch and hash here. */
+export declare const FULL_SESSION: Pick<Session, "authority" | "localGeneration" | "keyEpoch" | "keyHash">;
+/** A caller's authority: a browser session's own, or full for a bearer credential (an API token or a password). */
+export declare function authorityOfWho(who: Who): Authority;
 /** The browser session of a caller its route admits only through a browser sign-in (the row's callers or role). */
 export declare function browserCaller(who: Who): Extract<Who, {
     via: "cookie";
@@ -157,6 +172,21 @@ export declare class PersistentSessions extends Map<string, Session> {
  * closeCoding starts the coding shutdown on its own, ahead of the rest of a stop; close() awaits the same promise. */
 export type DecisionServer = Server & {
     mintSignInLink(account: string): string | null;
+    mintLocalLink(): string | null;
+    readonly keyEpoch: string;
     closeCoding(): Promise<void>;
 };
+/** A one-time sign-in link as the console holds it (only a hash of its code is the key): a full one for an account,
+ * or a local owner's (easy-start C4), bound to local mode's generation and the owner's account generation when minted. */
+export type SignInLink = {
+    kind: "full";
+    account: string;
+    expires: number;
+} | {
+    kind: "local-owner";
+    account: string;
+    localGeneration: number;
+    accountGeneration: number;
+    expires: number;
+};
 export type SsoIntent = "sign-in" | "reauth" | "link";

package/dist/server/session.js

@@ -2,6 +2,7 @@
 import {} from "../converse.js";
 import {} from "../operate-remote.js";
 import {} from "../store.js";
+import {} from "../local-owner.js";
 import { createHash } from "node:crypto";
 import {} from "node:http";
 /** A user agent, reduced to safe display words — never echoed raw. */
@@ -33,6 +34,13 @@ export const NONCE_TTL_MS = 15 * 60_000;
 export const NONCE_CAP = 500;
 /** Read-only fragment polls that must never refresh session activity (arc 1). */
 export const NO_TOUCH_FRAGMENTS = new Set(["1", "facts", "peek", "rail", "transcript"]);
+/** A full session's authority fields when it is made (a password, an identity-provider sign-in, a sign-up or join).
+ * The browser-key wave adds the key epoch and hash here. */
+export const FULL_SESSION = Object.freeze({ authority: "full", localGeneration: null, keyEpoch: null, keyHash: null });
+/** A caller's authority: a browser session's own, or full for a bearer credential (an API token or a password). */
+export function authorityOfWho(who) {
+    return who.via === "cookie" ? who.authority : "full";
+}
 /** The browser session of a caller its route admits only through a browser sign-in (the row's callers or role). */
 export function browserCaller(who) {
     if (who.via !== "cookie")
@@ -59,7 +67,8 @@ export class PersistentSessions extends Map {
         this.ids.set(session, id);
         this.savedAt.set(session, Date.now());
         this.db.saveWebSession({ idHash: PersistentSessions.hash(id), account: session.name, csrf: session.csrf, role: session.role, generation: session.generation, createdAt: session.createdAt,
-            lastSeen: session.lastSeen, project: session.project, projectRevision: session.projectRevision, ssoAt: session.sso?.at ?? null, agent: session.agent ?? null, address: session.address ?? null });
+            lastSeen: session.lastSeen, project: session.project, projectRevision: session.projectRevision, ssoAt: session.sso?.at ?? null, agent: session.agent ?? null, address: session.address ?? null,
+            authority: session.authority, localGeneration: session.localGeneration, keyEpoch: session.keyEpoch, keyHash: session.keyHash });
         return this;
     }
     delete(id) {
@@ -89,7 +98,8 @@ export class PersistentSessions extends Map {
         if (row === null)
             return null;
         const session = { name: row.account, csrf: row.csrf, role: row.role, generation: row.generation, createdAt: row.createdAt, lastSeen: row.lastSeen, sawBoardAt: null,
-            project: row.project, projectRevision: row.projectRevision, agent: row.agent, address: row.address, ...(row.ssoAt === null ? {} : { sso: { at: row.ssoAt } }) };
+            project: row.project, projectRevision: row.projectRevision, agent: row.agent, address: row.address, ...(row.ssoAt === null ? {} : { sso: { at: row.ssoAt } }),
+            authority: row.authority, localGeneration: row.localGeneration, keyEpoch: row.keyEpoch, keyHash: row.keyHash };
         super.set(id, session);
         this.ids.set(session, id);
         this.savedAt.set(session, Date.now());

package/dist/server/settings.js

@@ -76,7 +76,7 @@ import { startConnect } from "../mcp-connect.js";
 import { decideProposal, listProposals, memoryStatus } from "../memory-pass.js";
 import { checkModels, isNewModel, modelOptions, modelWords, RUNTIME_TOOLS, runtimeStates, seenModels, setWatch, updateRuntime, watchState } from "../model-catalog.js";
 import { modelsHtml, modelsScript } from "../models-ui.js";
-import { ALL_SLOTS, applyModelChoices, browserWords, checkScope, DEFAULT_PRESET, isPresetName, newerModels, PRESETS, presetChange, presetInUse, previewModelChange, recentRuns, rowAt, slotKey, SLOTS, slotWords, stateDigest, switchChange } from "../model-choices.js";
+import { ALL_SLOTS, applyModelChoices, browserWords, checkScope, DEFAULT_PRESET, defaultAgentOf, fillDefaultRouting, isPresetName, newerModels, PRESETS, presetChange, presetInUse, previewModelChange, recentRuns, rowAt, slotKey, SLOTS, slotWords, stateDigest, switchChange } from "../model-choices.js";
 import { HEADROOM_FIVE_HOUR_LIMIT, HEADROOM_WEEKLY_LIMIT, exactModelId } from "../phase-routing.js";
 import { RISKY_MEANS, SIZE_MEANS, SIZING_CLAUDE_MODEL } from "../task-sizing.js";
 import { CHAT_APPROVE_ALL, MODE_MAX_DAYS, modeDigestOf, modeTermsJson, modeWords, presetTerms } from "../modes.js";
@@ -89,6 +89,7 @@ import { parseProjectConcurrency, saveProjectConcurrency } from "../project-conc
 import { MAX_NETWORK_HOSTS, normalizeHost } from "../egress.js";
 import { isWritesMode } from "../writes-mode.js";
 import { isCheckAccess, signInsUnavailableWords, widerThan } from "../check-access.js";
+import { LOCAL_MODE_CONFINES, localModeOn } from "../local-owner.js";
 import { parseMachLookup, parseReadDeny } from "../project-sandbox.js";
 import { projectDeleteConfirmHtml, projectSettingsHtml } from "../project-delete-ui.js";
 import { deleteProject, holdingsWords } from "../project-delete.js";
@@ -126,7 +127,7 @@ import { sweepSchedule } from "../storage-sweep-schedule.js";
 import { storageHtml } from "../storage-ui.js";
 import { landedSummary } from "../landed-cleanup.js";
 import { bytesWords, parseCleanup } from "../storage.js";
-import { isDigestTime, liveBackupState, RESULT_SCREENSHOTS, setLiveBackupSettings } from "../store.js";
+import { isDigestTime, liveBackupState, localModeOf, RESULT_SCREENSHOTS, setLiveBackupSettings, setLocalModeOff } from "../store.js";
 import { defaultLiveFolder, liveFolderOf, liveFolderProblem } from "../live-backup.js";
 import { LIVE_EVERY } from "../backup-ui.js";
 import { checkTeamsCredentials, clearTeamsCredentials, loadTeamsCredentials, saveTeamsCredentials, TeamsError } from "../teams-api.js";
@@ -775,6 +776,12 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
                 return null;
             } })() : null,
             access: { sessions: store.webSessions(who.name).length, tokens: store.apiTokens(who.name).filter(one => one.revokedAt === null && Date.parse(one.expiresAt) > now.getTime()).length },
+            local: (() => {
+                const mode = localModeOf(store);
+                if (mode === null || !mode.enabled || who.via !== "cookie")
+                    return null;
+                return { owner: who.authority !== "full", passwordSet: store.accountOf(who.name)?.passwordSet === true, canTurnOff: who.authority === "full" && operator };
+            })(),
             backup: lastBackup === null ? null : lastBackup.ok === false
                 ? { failed: true, words: `Failed ${when(lastBackup.startedAt)}${lastBackup.error === null ? "" : `: ${lastBackup.error}`}` }
                 : { failed: false, words: lastBackup.finishedAt === null ? "Backing up now" : `Backed up ${when(lastBackup.finishedAt)}` },
@@ -2448,14 +2455,35 @@ ${postForm("/settings/chat-approval/save", html `\
     }
     // Turn the lead on with the agent signed in on this computer: its membership spends no dollars, so like starting a
     // conversation it needs no second password; the full form (Advanced) still asks for one.
+    // The welcome's "Use this one" names the agent (`agent`, claude or codex: only one signed in with its account here)
+    // and comes back to the welcome (`return`, that one address only).
     async function leadOn(ctx) {
-        const { who, response, now } = ctx;
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.leadOn);
+        const asked = body.get("agent");
+        if (body.sent.getAll("agent").length > 1 || (asked !== null && asked !== "claude" && asked !== "codex"))
+            return refuse(response, who, 400, "Choose Claude Code or Codex.", "/settings/lead");
+        const back = body.get("return") === "/welcome" ? "/welcome" : null;
         await checkLocalAgents(true);
-        const provider = runtime.localSignIn?.states.claude === "connected" ? "claude-subscription" : runtime.localSignIn?.states.codex === "connected" ? "codex-subscription" : null;
-        if (provider === null)
-            return redirect(response, chatReturnWithSaid("/settings/lead", `No agent is signed in on this computer yet. Run ${agentSignInCommand()}, then try again.`));
-        store.setChatConfig({ provider, model: "default", dailyTurns: 50, weeklyCeilingMicrousd: 0, priceInMicrousd: 0, priceOutMicrousd: 0 }, who.name, now);
-        return redirect(response, "/chat");
+        const states = runtime.localSignIn?.states;
+        const provider = asked !== null ? (states?.[asked] === "connected" ? `${asked}-subscription` : null)
+            : states?.claude === "connected" ? "claude-subscription" : states?.codex === "connected" ? "codex-subscription" : null;
+        if (provider === null) {
+            const words = asked === null ? `No agent is signed in on this computer yet. Run ${agentSignInCommand()}, then try again.` : `${asked === "claude" ? "Claude Code" : "Codex"} isn't signed in on this computer yet.`;
+            return redirect(response, back ?? chatReturnWithSaid("/settings/lead", words));
+        }
+        // Choosing the one already in use changes nothing (its daily turns and the rest stay as set). The local owner's
+        // choice also starts the installation's models on that agent's default preset, in the same write, while nothing
+        // is chosen yet (model-choices.ts fillDefaultRouting): its first task can then be planned and approved without a
+        // password. A full session's choice is as before: its models are Settings → Models'.
+        store.transact(() => {
+            if (store.getChatConfig()?.provider !== provider)
+                store.setChatConfig({ provider, model: "default", dailyTurns: 50, weeklyCeilingMicrousd: 0, priceInMicrousd: 0, priceOutMicrousd: 0 }, who.name, now);
+            const agent = defaultAgentOf(provider);
+            if (who.via === "cookie" && who.authority === "local-owner" && agent !== null)
+                fillDefaultRouting(store, agent, who.name, { kind: "local-owner" }, now);
+        });
+        return redirect(response, back ?? "/chat");
     }
     /** Settings → Models, read from the saved catalog and the role rows at the scope being edited (the installation,
      * or one project and what it inherits). */
@@ -2648,6 +2676,7 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.sign-in": signInPage,
         "settings.passwordless": passwordlessPage,
         "settings.passwordless-send": passwordlessSave,
+        "settings.local-mode-off": localModeOff,
         "settings.release-approval-send": releaseApprovalSave,
         "settings.lead": leadPage,
         "settings.teams": teamsPage,
@@ -2804,6 +2833,9 @@ ${postForm("/settings/chat-approval/save", html `\
         if (unavailable !== null)
             return back("problem", `${unavailable} Nothing changed.`);
         const widening = widerThan(wanted, store.projectCheckAccess(repo));
+        // Easy-start C5: while local mode is on, this installation always confines; said before the password.
+        if (wanted === "unsandboxed" && localModeOn(store))
+            return back("problem", `${LOCAL_MODE_CONFINES} Nothing changed.`);
         // Sign-ins with an open network: a second, explicit yes, said before the password.
         if (wanted === "sign-ins" && widening && store.projectNetwork(repo).mode === "open" && body.get("confirm-open") !== "yes") {
             return back("problem", "This project's network is open: confirm that its checks could send your sign-ins to any host. Nothing changed.");
@@ -2950,5 +2982,28 @@ ${postForm("/settings/chat-approval/save", html `\
         const said = modelsSaid(result, isPresetName(preset) ? PRESETS[preset].label : `Switched to ${to}`);
         return back(said.key, said.words);
     }
+    // Easy-start C5: turning local mode off (Settings → People and sign-in), from a full session only: an instance
+    // operator's step-up, proved and written in one transaction. It bumps local mode's generation, so every local-owner
+    // session, link and approval bound to the old one stops standing. It is never turned back on here.
+    async function localModeOff(ctx) {
+        const { response, now, posted } = ctx;
+        const who = browserCaller(ctx.who);
+        const body = readForm(posted, CONSOLE_FORMS.localModeOff);
+        const back = sayTo(response, "/settings/access", "#local-mode");
+        if (body.sent.getAll("password").length > 1)
+            return back("problem", "That form was sent twice over. Nothing changed.");
+        if (who.authority !== "full")
+            return back("problem", "Sign in with your password to turn off local mode.");
+        const turned = store.transact(() => {
+            if (!authenticateApprover(who, body.get("password") ?? "").ok)
+                return null;
+            return setLocalModeOff(store, { name: who.name, authority: who.authority }, now);
+        });
+        if (turned === null)
+            return back("problem", "Enter your Toolroll password to turn off local mode.");
+        if (!turned.ok)
+            return back("problem", turned.reason === "not-on" ? "Local mode is already off." : "Only an instance operator can turn off local mode.");
+        return back("said", "Local mode is off. This computer's browser signs in with your password now.");
+    }
     return { registrations, modelsView };
 }

package/dist/server/task-views.js

@@ -5,7 +5,8 @@ import { RELEASE_STEPS } from "../release.js";
 import { releaseProgressFor, shipChecksForTask } from "../store.js";
 import { releaseCiRunningOf } from "../release-ci-hold.js";
 import { releaseObligationsOf } from "../release-recheck.js";
-import { approvalProofOf, freshlyApprovable, freshnessFor, withFreshness } from "../scope.js";
+import { approvalProofOf, freshlyApprovable, freshnessFor, localApprovalEligible, withFreshness } from "../scope.js";
+import { localOwnerRefusal } from "../local-owner.js";
 import { liveAttemptOf, steerControlsFor } from "../steer-controls.js";
 import { originOf } from "../task-source.js";
 import { recentGitReads, taskBaseOf } from "../task-base.js";
@@ -526,6 +527,14 @@ export function createTaskViews(runtime) {
                 const gate = runtime.store.approvalGate(ref.externalId, who.name, "person");
                 return freshlyApprovable(runtime.store, ref.externalId, scope, gate.verdict === "seal" && !gate.protectedWork) ? new Date(fresh.at).toISOString() : null;
             })(),
+            // Easy-start C5: a laptop's local owner approves eligible work with no password (the seal applies the same rule).
+            approvalLocal: (() => {
+                if (ref === null || who?.via !== "cookie" || who.authority !== "local-owner")
+                    return null;
+                if (localApprovalEligible(runtime.store, who.name, ref.externalId).ok)
+                    return { eligible: true };
+                return { eligible: false, ...localOwnerRefusal(runtime.store.accountOf(who.name)?.passwordSet === true, taskHref(ref.externalId)) };
+            })(),
             steerRecent: ref === null ? [] : runtime.store.runsFor(ref.id).filter(one => one.outcome !== null).map(one => one.id).sort((a, b) => b - a).slice(0, 5),
             // The running attempt's composer, for an approver on a browser session (steer-controls.ts).
             steerComposer: (() => {

package/dist/server/tasks.d.ts

@@ -54,3 +54,13 @@ export declare function createTidyHandlers(runtime: ServerRuntime): {
 export declare function retiredTasksAddress(route: "board" | "done", url: URL): string | null;
 /** How many cards a Board column shows; the column's count covers them all and its "View all" opens the list. */
 export declare const BOARD_COLUMN_LIMIT = 40;
+/**
+ * Easy-start C1 (N1): the two writes a page load used to make, as keyed POSTs the shell sends (wave 1c wires the
+ * browser). `agents.seen`: a finished result this person opened leaves their unread Done. `agents.watch`: hold (on each
+ * keep-alive) or release (on unload) the short lease that quiets chat pings while this person's page shows the agent.
+ * Each re-proves the run is in the person's projects; a reply carries nothing else.
+ */
+export declare function createAgentSignalHandlers(runtime: ServerRuntime): {
+    "agents.seen": (ctx: HandlerContext) => Promise<void>;
+    "agents.watch": (ctx: HandlerContext) => Promise<void>;
+};

package/dist/server/tasks.js

@@ -1,3 +1,4 @@
+import { titleWithin } from "../task-text.js";
 import { parseFeedbackImage, sameFeedbackImage } from "../result-review.js";
 import { archiveTaskFamily, dropFeedbackImage, releaseAuthorityOfTask, restoreTaskFamily, revokeRelease, runLiveCommands } from "../store.js";
 import { applyTidy, approverStandsNow, familyRepoOf, releaseFactsOf, tidyDays, tidyDigest, tidyPreview, TIDY_DEFAULT_DAYS } from "../tidy.js";
@@ -58,14 +59,14 @@ import { structuredHandoffView, terminalDiffView } from "../result-evidence-read
 import { fileAddTestsTask, requestFollowUpChecks } from '../result-follow-ups.js';
 import { commentSourceKey, isRevisionFeedback, parseResultTab, resultReturnTarget } from "../result-review.js";
 import { isAlive as runnerAlive } from "../runner.js";
-import { passwordlessSessionFor, acceptanceLinesToInput, acceptanceToLines, approvalOf, approve as approveScope, freshnessFor, spendingOnlyOnSuccess, ssoNowAvailable, withFreshness, modeFilingCoverage, PLACEHOLDER_RUBRIC, proposeGuarded } from "../scope.js";
+import { passwordlessSessionFor, acceptanceLinesToInput, acceptanceToLines, approvalOf, approve as approveScope, freshnessFor, localApprovalEligible, spendingOnlyOnSuccess, ssoNowAvailable, withFreshness, modeFilingCoverage, PLACEHOLDER_RUBRIC, proposeGuarded } from "../scope.js";
 import { subagentNames as subagentNamesOf } from "../spend.js";
 import { verifiedAuthor } from "../store.js";
 import { runCostWords } from "../summary.js";
 import { requestTaskStop, resumeTaskStop } from "../task-control.js";
 import { templateByName } from "../templates.js";
 import { TEXT_LIMITS } from "../text-limits.js";
-import { agentQuestion, answerAgentQuestion, markAgentSeen } from "../agent-board.js";
+import { AGENT_VIEW_ID, agentQuestion, answerAgentQuestion, holdOwnAgentView, markAgentSeen, releaseOwnAgentView } from "../agent-board.js";
 import { WorkIndexCursorError, workIndexPage } from "../work-index.js";
 import { buildProgressOf, parseWorkView } from "../workspace-ui.js";
 import { requestContext } from "./request-context.js";
@@ -573,10 +574,8 @@ export function createTasksHandlers(runtime) {
             return sendScreen(response, 409, screen("Result changed", html `<h1>Result changed</h1><p>This acceptance link no longer matches the current result. Review the current task before accepting.</p><p class="refusal-back"><a class="button-link" href="/review">Review results</a></p>`, { chrome: chromeFor(project, "runs") }));
         }
         const selected = picked !== null ? picked.selected : selectedRow === null ? null : reviewCockpitViewOf(selectedRow, who, now);
-        // Opening a run's own result page is viewing it: it leaves this person's unread Done on the Agents board — but only
-        // once the run has finished (cockpit §3): a page shown while it was still running saw no finished version.
-        if (wantedId !== null && selected?.run != null && store.getRun(selected.run.id)?.finishedAt != null)
-            markAgentSeen(store, who.name, selected.run.id, now);
+        // Opening a run's own result page is viewing it: the shell says so with a keyed POST /agents/seen (easy-start N1:
+        // a page load never writes), which leaves this person's unread Done once the run has finished.
         const reviewPage = reviewCockpitPage(chromeFor(wantedId === null ? project : chosenProject, "runs"), {
             queue: ranked,
             queueCap: REVIEW_QUEUE_CAP,
@@ -1004,7 +1003,11 @@ export function createTasksHandlers(runtime) {
             }
         }
         const id = (body.get("id") ?? "").trim();
-        const title = body.get("title") ?? "";
+        // The New task box stops at a title's length (render-new-task.ts): the title is all the planner reads of a no-goal
+        // filing. A direct POST longer than that is cut at a whole word, with an ellipsis (task-text.ts titleWithin), as a
+        // belt; a refusal keeps the person's own words (the draft below).
+        const typed = body.get("title") ?? "";
+        const title = titleWithin(typed);
         // The EFFECTIVE placement (repo onboarding, findings 15/35): the
         // trimmed, nonempty posted repo, else the open project — an empty
         // input falls through correctly. In root mode the effective path is
@@ -1021,7 +1024,7 @@ export function createTasksHandlers(runtime) {
         // direct POST with no project open must not mint an unplaced task
         // under a ceiling. Unscoped mode keeps its historic unplaced filings.
         // A refusal from here on is the add page again with the person's own words (the old task list kept them too).
-        const draft = { title, goal: body.get("goal") ?? "", not: body.get("not") ?? "", touches: body.get("touches") ?? "", acceptance: body.get("acceptance") ?? "", values: body.sent };
+        const draft = { title: typed, goal: body.get("goal") ?? "", not: body.get("not") ?? "", touches: body.get("touches") ?? "", acceptance: body.get("acceptance") ?? "", values: body.sent };
         if (!unscopedMode && effective === "") {
             return newTaskScreen(ctx, 400, "name a repository — no project is open, so the task must say where it belongs", draft);
         }
@@ -2473,7 +2476,9 @@ export function createTasksHandlers(runtime) {
                 }
                 // An empty password stands for an explicit identity-provider re-check not yet spent, or (cockpit B2) a password
                 // remembered on this session; approve() decides whether these terms may stand on a remembered one.
-                if (token === "" && !passwordlessSessionFor(store, who.name) && !ssoNowAvailable(who.name) && withFreshness("approve-standard", () => freshnessFor(who.name)) === null) {
+                // Easy-start C5: a laptop's local owner approves eligible work with no password (approve() proves it again).
+                if (token === "" && !passwordlessSessionFor(store, who.name) && !ssoNowAvailable(who.name) && withFreshness("approve-standard", () => freshnessFor(who.name)) === null
+                    && !(who.authority === "local-owner" && localApprovalEligible(store, who.name, taskId).ok)) {
                     return approvalProblem("approval requires your password, typed again", 400);
                 }
                 const scopeRow = store.getScope(taskId);
@@ -3087,6 +3092,7 @@ export function createTasksHandlers(runtime) {
     }
     const registrations = handlersOf("tasks", {
         ...tidyHandlers,
+        ...createAgentSignalHandlers(runtime),
         "code.page": showCode("workspace"),
         "code.session": showCode("session"),
         "code.state": showCode("state"),
@@ -3261,3 +3267,47 @@ export function retiredTasksAddress(route, url) {
 }
 /** How many cards a Board column shows; the column's count covers them all and its "View all" opens the list. */
 export const BOARD_COLUMN_LIMIT = 40;
+/**
+ * Easy-start C1 (N1): the two writes a page load used to make, as keyed POSTs the shell sends (wave 1c wires the
+ * browser). `agents.seen`: a finished result this person opened leaves their unread Done. `agents.watch`: hold (on each
+ * keep-alive) or release (on unload) the short lease that quiets chat pings while this person's page shows the agent.
+ * Each re-proves the run is in the person's projects; a reply carries nothing else.
+ */
+export function createAgentSignalHandlers(runtime) {
+    const { store, runVisible } = runtime;
+    const answer = (response, status, ok) => respond(response, status, "application/json", JSON.stringify({ ok }));
+    const visibleRun = (who, raw) => {
+        const id = raw !== null && /^[1-9][0-9]{0,14}$/.test(raw) ? Number(raw) : null;
+        const run = id === null ? null : store.getRun(id);
+        const repo = run === null ? null : store.refForId(run.taskRef)?.repo ?? null;
+        return run === null || !runVisible(run) || !store.accountCanAccess(who.name, repo) ? null : run;
+    };
+    async function agentSeen(ctx) {
+        const { who, response, now, posted } = ctx;
+        const run = visibleRun(who, readForm(posted, CONSOLE_FORMS.agentSeen).get("run"));
+        if (run === null)
+            return answer(response, 404, false);
+        // Only once it finished: a page shown while it ran saw no finished version (cockpit §3).
+        if (run.finishedAt === null)
+            return answer(response, 409, false);
+        markAgentSeen(store, who.name, run.id, now);
+        return answer(response, 200, true);
+    }
+    async function agentWatch(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.agentWatch);
+        const view = body.get("view") ?? "", op = body.get("op");
+        if (!AGENT_VIEW_ID.test(view) || (op !== "hold" && op !== "release"))
+            return answer(response, 400, false);
+        if (op === "release") {
+            releaseOwnAgentView(store, view, who.name, now);
+            return answer(response, 200, true);
+        }
+        const run = visibleRun(who, body.get("run"));
+        if (run === null)
+            return answer(response, 404, false);
+        const held = holdOwnAgentView(store, view, who.name, run.id, now);
+        return answer(response, held ? 200 : 409, held);
+    }
+    return { "agents.seen": agentSeen, "agents.watch": agentWatch };
+}

package/dist/server/terminals.js

@@ -17,6 +17,7 @@
 import { randomBytes } from "node:crypto";
 import { STATUS_CODES } from "node:http";
 import { dirname, join } from "node:path";
+import { KEY_PROTOCOL } from "./mutation-key.js";
 import { WebSocketServer } from "ws";
 import { readForm, CONSOLE_FORMS } from "../contracts/console-api.js";
 import { html, htmlString } from "../html.js";
@@ -55,9 +56,14 @@ export function createTerminalHandlers(runtime, deps) {
     const transportOfRequest = (request) => transportOf({ peer: request.socket.remoteAddress, joinSource: deps.forwardedSourceOf(request),
         forwardedProto: request.headers["x-forwarded-proto"], forwarded: request.headers["forwarded"] });
     const sockets = new Set();
-    const wss = new WebSocketServer({ noServer: true, maxPayload: MAX_FRAME_BYTES, perMessageDeflate: false });
+    // Easy-start C2: a page offers `toolroll` and, on a protected loopback install, `toolroll.key.<key>`; only `toolroll` is
+    // ever selected, so the key is never echoed.
+    const wss = new WebSocketServer({ noServer: true, maxPayload: MAX_FRAME_BYTES, perMessageDeflate: false,
+        handleProtocols: protocols => protocols.has(KEY_PROTOCOL) ? KEY_PROTOCOL : false });
     /** An operator signed in with a browser, of the generation they signed in with; else null. */
-    const operatorOf = (who) => who?.via === "cookie" && who.role === "approver" && !store.isDemo() && codingActorAllowed({ name: who.name, generation: who.session.generation }) ? who : null;
+    const operatorOf = (who) => 
+    // Easy-start C1: never a local owner's session (a laptop's passwordless owner), for a new terminal or an existing one.
+    who?.via === "cookie" && who.authority === "full" && who.role === "approver" && !store.isDemo() && codingActorAllowed({ name: who.name, generation: who.session.generation }) ? who : null;
     /** The project a terminal works in is one the coding workspace admits for this person, now. */
     const projectAllowed = (name, repo) => rowVisible(liveCeiling(), repo) && store.accountCanAccess(name, repo) && codingProjectAllowed(repo);
     const owned = (who, terminal) => terminal !== null && terminal.owner === who.name && terminal.generation === who.session.generation;
@@ -232,6 +238,13 @@ export function createTerminalHandlers(runtime, deps) {
             refuseUpgrade(socket, 401, "Sign in as an installation-wide operator.");
             return true;
         }
+        // Easy-start C2: typing into a terminal is a mutation: on a protected loopback install the socket offers the session's
+        // key (its protocol list), which a cookie holder on another port can't read.
+        const keyed = runtime.browserKeys.check(who, request, null);
+        if (keyed !== null) {
+            refuseUpgrade(socket, keyed.status, keyed.message);
+            return true;
+        }
         const terminal = deps.host?.get(id) ?? null;
         if (!owned(who, terminal) || !projectAllowed(who.name, terminal.repo)) {
             refuseUpgrade(socket, 404, "No such terminal.");

package/dist/server/welcome.d.ts

@@ -1,22 +1,28 @@
-import { type FirstRunStep } from "../first-run.js";
-import { type CheckStep } from "./kit.js";
-import type { ServerRuntime } from "./runtime.js";
+import { type WelcomeModel } from "../first-run.js";
+import { type Html } from "../html.js";
 import { type Chrome, type Screen } from "./chrome.js";
-export type WelcomeFacts = {
-    steps: readonly FirstRunStep[];
-    projects: number;
-    /** This person has a live push enrollment on some device. */
-    alerts: boolean;
+import type { ServerRuntime } from "./runtime.js";
+/** Why the sample project wasn't added, as a fixed key in the address (never words from it). */
+export declare const SAMPLE_PROBLEMS: {
+    readonly "no-root": "There's no project folder to put the sample in. Add a folder instead.";
+    readonly exists: "A folder named toolroll-sample is already there and wasn't made here, so nothing was changed.";
+    readonly failed: "The sample project couldn't be made. Nothing was added. Try again, or add a folder instead.";
+    readonly "not-added": "The sample project was made but couldn't be added. Try again, or add it from Projects.";
 };
-/** The five steps as the page shows them, and which one leads. */
-export declare function welcomeSteps(facts: WelcomeFacts): {
-    steps: CheckStep[];
-    primary: {
-        label: string;
-        href: string;
-    } | null;
+export type SampleProblem = keyof typeof SAMPLE_PROBLEMS;
+/** The page body for one model, and the screen's one primary (for the phone dock). `problem`: why the sample project
+ * wasn't added, from the address. `canAdd`: this person may add projects here. */
+export declare function welcomeBody(model: WelcomeModel, options: {
+    problem?: SampleProblem | null;
+    canAdd: boolean;
+}): {
+    body: Html;
+    primary: Html | null;
 };
-export declare function welcomePage(chrome: Chrome, facts: WelcomeFacts): Screen;
+export declare function welcomePage(chrome: Chrome, model: WelcomeModel, options: {
+    problem?: SampleProblem | null;
+    canAdd: boolean;
+}): Screen;
 export declare function createWelcomeHandlers(runtime: ServerRuntime): {
     registrations: import("./handler-registry.js").Registration[];
 };