toolroll 0.9.93 → 0.9.94

package/dist/server/retired-routes.d.ts

@@ -0,0 +1,17 @@
+/** Retired addresses (docs/plans/plain-toolroll.md P1.4): Home (`/`) and Tasks (`/tasks`) are the pages; every old page
+ * answers with a permanent redirect to its place there, for good, so a bookmark, an old push or an installed phone's old
+ * service worker still lands right. A redirect keeps only the query keys its target knows, and decides nothing: the
+ * target admits the person and filters what they may see, exactly as if they had opened it. */
+import type { ServerResponse } from "node:http";
+/** The Tasks page's own address for a view, a project and the other keys it knows. */
+export declare function tasksHref(over?: {
+    view?: string | null;
+    project?: string | null;
+    scope?: "all" | null;
+    state?: string | null;
+    cursor?: string | null;
+}): string;
+/** Each retired GET row (route-table.ts `retired`), and where it now lives. */
+export declare const RETIRED_ROUTES: Readonly<Record<string, (url: URL) => string>>;
+/** A retired GET's answer: 301 to where it lives now. Permanent: the old address never comes back. */
+export declare function retiredRedirect(id: string, url: URL, response: ServerResponse): void;

package/dist/server/retired-routes.js

@@ -0,0 +1,53 @@
+import { SAFETY } from "./http.js";
+/** The Tasks page's own address for a view, a project and the other keys it knows. */
+export function tasksHref(over = {}) {
+    const q = new URLSearchParams();
+    if (over.scope === "all")
+        q.set("scope", "all");
+    else if (over.project != null)
+        q.set("project", over.project);
+    if (over.view != null && over.view !== "all")
+        q.set("view", over.view);
+    if (over.state != null)
+        q.set("state", over.state);
+    if (over.cursor != null)
+        q.set("cursor", over.cursor);
+    return `/tasks${q.size === 0 ? "" : `?${q}`}`;
+}
+/** The one project a link names (one `project` key, never two), or null. */
+const projectOf = (url) => url.searchParams.getAll("project").length === 1 ? url.searchParams.get("project") : null;
+/** The Tasks list views an old link may name, as /tasks names them. */
+const LIST_VIEWS = { all: "all", "needs-you": "needs-you", running: "running", queued: "queued", completed: "completed", done: "completed", archived: "archived", ready: "ready" };
+/** Each retired GET row (route-table.ts `retired`), and where it now lives. */
+export const RETIRED_ROUTES = {
+    // The old Tasks list: its view, project, stored-state filter and page; layout=board is the Board view; all=1 every project.
+    work: url => {
+        const board = url.searchParams.get("layout") === "board";
+        const view = board ? "board" : LIST_VIEWS[url.searchParams.get("view") ?? ""] ?? null;
+        const all = url.searchParams.get("all") === "1";
+        return tasksHref({ view, scope: all ? "all" : null, project: all ? null : projectOf(url), state: board ? null : url.searchParams.get("state"), cursor: board ? null : url.searchParams.get("cursor") });
+    },
+    // The old inbox and its triage flow: Home holds what needs you.
+    inbox: url => { const project = projectOf(url); return project === null ? "/" : `/?project=${encodeURIComponent(project)}`; },
+    next: url => { const project = projectOf(url); return project === null ? "/" : `/?project=${encodeURIComponent(project)}`; },
+    // The portfolio: Tasks across every project.
+    workbench: () => tasksHref({ scope: "all" }),
+    // The old board: the Board view, or its order view.
+    board: url => url.searchParams.get("view") === "order" ? tasksHref({ view: "order", project: projectOf(url) })
+        : url.searchParams.get("scope") === "all" ? tasksHref({ view: "board", scope: "all" }) : tasksHref({ view: "board", project: projectOf(url) }),
+    queue: url => tasksHref({ view: "order", project: projectOf(url) }),
+    done: url => tasksHref({ view: "done", project: projectOf(url) }),
+    // The old review list (a result keeps its own page: /review?result=…).
+    review: url => tasksHref({ view: "ready", project: projectOf(url) }),
+    // Archive old tasks' preview moved beside Tasks; its POST keeps /work/put-away exactly.
+    "work.put-away": url => { const days = url.searchParams.get("days"); return days !== null && /^[0-9]{1,3}$/.test(days) ? `/tasks/archive?days=${days}` : "/tasks/archive"; },
+};
+/** A retired GET's answer: 301 to where it lives now. Permanent: the old address never comes back. */
+export function retiredRedirect(id, url, response) {
+    const to = RETIRED_ROUTES[id];
+    if (to === undefined)
+        throw new Error(`no retired route ${id}`);
+    response.setHeader("Location", to(url));
+    response.writeHead(301, { ...SAFETY });
+    response.end();
+}

package/dist/server/route-table.d.ts

@@ -94,6 +94,9 @@ export interface RouteDeclaration {
      */
     readonly local: "allow" | "deny";
     readonly localAct: LocalOwnerAct | null;
+    /** A retired page (docs/plans/plain-toolroll.md P1.4): a permanent GET redirect to where it lives now
+     * (retired-routes.ts), admitted exactly as that target is, and no page handler of its own. */
+    readonly retired?: true;
 }
 /** Every edge row, decided: allow where a local owner's cookie may reach it, deny where its adapter refuses one (or no
  * cookie is ever read there). A new edge row fails the table's load until it is listed here. */

package/dist/server/route-table.js

@@ -45,6 +45,7 @@ function row(stage, domain, id, method, pattern, options = {}) {
         ...(options.roleRefusal === undefined ? {} : { roleRefusal: options.roleRefusal }),
         ...(options.bodyCap === undefined ? {} : { bodyCap: options.bodyCap }),
         freshness: options.freshness ?? "never",
+        ...(options.retired === true ? { retired: true } : {}),
         ...localMarkOf(stage, method, id),
     });
 }
@@ -54,6 +55,7 @@ function row(stage, domain, id, method, pattern, options = {}) {
 /** The console POST rows a local owner may use, and the act each is. Everything else is refused. */
 const LOCAL_POSTS = Object.freeze({
     "tasks.add": "file-task",
+    "tasks.fast": "build-now",
     "chat.file": "file-task",
     "chat.send": "lead-send",
     "chat.queued-remove": "lead-send",
@@ -66,6 +68,7 @@ const LOCAL_POSTS = Object.freeze({
     "chat.proposal.dismiss": "lead-send",
     "task.act.steer": "lead-send",
     "task.act.approve": "approve-plan",
+    "task.act.keep-grown": "approve-plan",
     "decision.answer": "answer-question",
     "task.act.reply": "answer-question",
     "task.act.stop": "stop-run",
@@ -91,11 +94,16 @@ const LOCAL_POSTS = Object.freeze({
     "settings.lead-on": "choose-default-agent",
     // Choosing which open project the pages show: a view filter, never authorization.
     "projects.select": "read",
+    // On or off for one project: it moves no money, permission or approval (code-map-acts.ts re-checks this exact act).
+    "settings.code-map": "code-map-switch",
     // Results routing: lowering only.
     "settings.models-turn-off": "routing-turn-off",
     "settings.models-not-now": "dismiss-suggestion",
     "settings.models-suggest-off": "dismiss-suggestion",
     "settings.models-stop": "trial-stop",
+    // Learning loops (D3): a person at the laptop decides lesson notes and clean-ups of project memory.
+    "settings.knowledge-note": "memory-review",
+    "settings.knowledge-tidy": "memory-review",
     "agents.seen": "mark-seen",
     "agents.watch": "watch-agent",
 });
@@ -245,30 +253,43 @@ get("pages", "projects.page", "/projects", { limited: "unscoped", ...free });
 // project this account can see and never switches the session's project; its Open project button posts to
 // /projects/select. The handler resolves the name among the account's visible projects; anything else is not found.
 get("pages", "projects.project", "^\\/projects\\/[^/]+$", { limited: "unscoped", ...free, sample: "/projects/payments-api" });
+// One project's code map (docs/plans/code-map.md §6): reads only. The handler resolves the name among the account's
+// visible projects, and looks areas and files up exactly in the stored version.
+get("pages", "projects.map", "^\\/projects\\/[^/]+\\/map$", { limited: "unscoped", ...free, sample: "/projects/payments-api/map" });
+// A project's flaky tests list (docs/plans/learning-loops.md): reads only, found as the project's page finds its project.
+// Its one action, "Make a task to fix it", posts the ordinary /tasks/add form.
+get("pages", "projects.flaky", "^\\/projects\\/[^/]+\\/flaky$", { limited: "unscoped", ...free, sample: "/projects/payments-api/flaky" });
 get("pages", "home", "/", { limited: "collection", ...free });
 get("pages", "search", "/search", { limited: "collection", ...free });
-get("tasks", "inbox", "/inbox", { limited: "collection", ...free });
-get("tasks", "work", "/work", { limited: "collection", ...free });
-// Put away old tasks (task-tidy.md): the preview reads only; putting away is an approver's step-up in a browser session.
-get("tasks", "work.put-away", "/work/put-away", { limited: "collection", ...free, callers: ["cookie"], ...approver("Only an approver can put tasks away.", "/work") });
-post("tasks", "work.put-away.apply", "/work/put-away", { scope: "step-up", limited: "collection", ...approver("Only an approver can put tasks away.", "/work") });
-get("tasks", "next", "/next", { limited: "collection" });
+// Retired pages (docs/plans/plain-toolroll.md P1.4): permanent redirects to Home and Tasks, admitted as their target is.
+const RETIRED = { limited: "collection", ...free, retired: true };
+get("tasks", "inbox", "/inbox", RETIRED);
+get("tasks", "work", "/work", RETIRED);
+// Archive old tasks (task-tidy.md): the preview reads only, at /tasks/archive; archiving is an approver's step-up in a
+// browser session, and keeps its POST /work/put-away exactly.
+get("tasks", "work.put-away", "/work/put-away", { ...RETIRED, callers: ["cookie"], ...approver("Only an approver can archive tasks.", "/tasks") });
+get("tasks", "tasks.archive", "/tasks/archive", { limited: "collection", ...free, callers: ["cookie"], ...approver("Only an approver can archive tasks.", "/tasks") });
+post("tasks", "work.put-away.apply", "/work/put-away", { scope: "step-up", limited: "collection", ...approver("Only an approver can archive tasks.", "/tasks") });
+get("tasks", "next", "/next", RETIRED);
 get("pages", "morning", "/morning", { limited: "collection", ...free }); // a redirect to / now
-get("pages", "workbench", "/workbench", free);
-get("tasks", "board", "/board", { limited: "collection" });
-get("tasks", "review", "/review", { limited: "collection" });
+get("pages", "workbench", "/workbench", RETIRED);
+get("tasks", "board", "/board", RETIRED);
+// A result keeps its own page here (/review?result=…); the bare list is retired to Tasks' Ready view.
+get("tasks", "review", "/review", { limited: "collection", ...free });
+// A push's task link (P1.4): /n/<the task's stored number>, resolved to its page under the viewer's own access.
+get("tasks", "n.task", "^\\/n\\/[1-9][0-9]{0,14}$", { limited: "unscoped", ...free, project: "none", sample: "/n/1" });
 get("settings", "spend", "/spend", { ...free, ...anyOperator("An instance operator sees spend.", "/") });
 get("settings", "settings.spend", "/settings/spend", { ...free, ...anyOperator("An instance operator sets spending limits.", "/settings") });
 get("pages", "ledger", "/ledger", { limited: "unscoped", ...free });
 get("pages", "activity", "/activity", { limited: "collection", ...free }); // a redirect to / now (Home has the summary)
-get("tasks", "done", "/done", { limited: "collection", ...free }); // a redirect to the Tasks list's Finished view now
+get("tasks", "done", "/done", RETIRED);
 get("settings", "mode", "/mode");
 get("people", "people.page", "/people", { limited: "unscoped", ...free });
 get("pages", "system", "/system", free);
 // Where every "Connect a builder" leads: read-only, open to a project-limited person (the handler shows only a visible project).
 get("pages", "start-builder", "/start-builder", { limited: "unscoped", ...free });
-get("tasks", "tasks", "/tasks", { limited: "collection", ...free }); // a redirect to /work now: never sent to the project opener first
-get("tasks", "queue", "/queue");
+get("tasks", "tasks", "/tasks", { limited: "collection", ...free });
+get("tasks", "queue", "/queue", RETIRED);
 get("pages", "peek", "/peek", free);
 get("pages", "agents", "/agents", { limited: "unscoped", ...free });
 // The Agents view's Live grid (docs/plans/agents-view.md §3): read-only, every request filtered to what the viewer may see.
@@ -500,9 +521,13 @@ for (const one of ["accept", "keep", "suggest-on", "try"])
 for (const one of ["turn-off", "not-now", "suggest-off", "stop"])
     post("settings", `settings.models-${one}`, `/settings/models/${one}`, operator("An instance operator changes which models run.", "/settings/models"));
 // Any other models action answers the models area's own refusal.
+post("settings", "settings.code-map", "/settings/project/code-map", { project: "form", ...approver("An approver turns the code map on or off.", "/settings/project") });
+post("settings", "settings.code-map-holdout", "/settings/project/code-map/holdout", { project: "form", ...approver("A person ends the holdout.", "/settings/project") });
 post("settings", "settings.models-act", "^\\/settings\\/models\\/.*$", { sample: "/settings/models/unknown", ...MODELS });
 post("settings", "settings.knowledge-refresh", "/settings/knowledge/refresh", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to refresh project context.", "/settings/knowledge") });
 post("settings", "settings.knowledge-proposal", "/settings/knowledge/proposal", { project: "form", ...approver("Sign in as an approver to decide memory proposals.", "/settings/knowledge") });
+post("settings", "settings.knowledge-note", "/settings/knowledge/note", { project: "form", ...approver("Sign in as an approver to decide lesson notes.", "/settings/knowledge") });
+post("settings", "settings.knowledge-tidy", "/settings/knowledge/tidy", { project: "form", ...approver("Sign in as an approver to clean up project memory.", "/settings/knowledge") });
 post("settings", "settings.knowledge-decision", "/settings/knowledge/decision", { project: "form", ...approver("Sign in as an approver to change project decisions.", "/settings/knowledge") });
 post("settings", "settings.knowledge-change", "/settings/knowledge/change", { project: "form", limited: "unscoped", ...approver("Sign in as an approver to change project knowledge.", "/settings/knowledge") });
 post("settings", "settings.learning-change", "/settings/learning/change", { project: "form", limited: "unscoped" });
@@ -525,9 +550,12 @@ for (const one of ["messaging", "permission-default", "quality-default", "notifi
 }
 post("pages", "projects.github-list", "/projects/github", { callers: ["cookie"], ...anyApprover("your login can watch — adding projects is an approver's act") });
 post("pages", "projects.select", "/projects/select", { project: "form-path", limited: "unscoped", viewer: true });
+post("pages", "projects.map-refresh", "^\\/projects\\/[^/]+\\/map\\/refresh$", { project: "form", sample: "/projects/payments-api/map/refresh", ...approver("An approver asks for a check of main.", "/projects") });
 post("pages", "projects.remove", "/projects/remove", { project: "form", ...operator("An instance operator removes projects.", "/settings/project") });
 post("pages", "projects.open", "/projects/open", { project: "form-path" });
 post("tasks", "tasks.add", "/tasks/add", { project: "form", limited: "collection", bodyCap: LARGE_FORM });
+// Build (fast-start.ts): a person's own browser session only. No token, chat, agent or webhook reaches it.
+post("tasks", "tasks.fast", "/tasks/fast", { callers: ["cookie"], project: "none", limited: "collection", ...approver("An approver starts builds.", "/tasks/new") });
 post("tasks", "queue.move", "/queue/move");
 post("tasks", "queue.note", "/queue/note");
 post("pages", "fleet.register", "/fleet/runner/register", { scope: "step-up" });
@@ -541,6 +569,9 @@ post("people", "people.revoke", "/people/revoke", { scope: "step-up" });
 post("pages", "fleet.retire", "/fleet/runner/retire", { scope: "step-up" });
 // Answering a parked decision needs act access and irreversible-choice confirmation, not password step-up.
 post("tasks", "decision.answer", `^\\/d\\/${ID}\\/answer$`, { project: "decision", limited: "resource", scope: "act", sample: "/d/1/answer" });
+// A held automatic release goes on: a person, with their password typed now (release-auto.ts allowAutoPublish).
+post("tasks", "task.release.go-on", `^\\/t\\/${TASK}\\/release\\/go-on$`, { project: "task", limited: "resource", scope: "step-up", sample: "/t/one/release/go-on", ...approver("An approver lets a release go on.", "/tasks") });
+post("tasks", "task.act.keep-grown", `^\\/t\\/${TASK}\\/keep-grown$`, { project: "task", limited: "resource", sample: "/t/one/keep-grown", callers: ["cookie"], ...approver("An approver keeps a change.", "/tasks") });
 post("tasks", "task.act.hold", `^\\/t\\/${TASK}\\/hold$`, { project: "task", limited: "resource", sample: "/t/one/hold" });
 post("tasks", "task.act.unhold", `^\\/t\\/${TASK}\\/unhold$`, { project: "task", limited: "resource", sample: "/t/one/unhold" });
 post("tasks", "task.act.requeue", `^\\/t\\/${TASK}\\/requeue$`, { project: "task", limited: "resource", sample: "/t/one/requeue" });
@@ -648,6 +679,8 @@ export function assertRouteTable(routes = ROUTES) {
             throw new Error(`route table: ${route.id} role and its refusal go together`);
         if (route.role !== "any" && route.stage !== "console")
             throw new Error(`route table: ${route.id} edge routes prove roles in their protocol`);
+        if (route.retired === true && (route.method !== "GET" || route.stage !== "console"))
+            throw new Error(`route table: ${route.id} a retired page is a console GET`);
         const test = new RegExp(route.pattern);
         if (!test.test(route.sample))
             throw new Error(`route table: ${route.id} does not match its sample ${route.sample}`);

package/dist/server/settings.js

@@ -7,6 +7,9 @@ import { finishGoogleConsent, GOOGLE_CALLBACK } from "../google-mail.js";
 import { kitInstalled, kitOf } from "../kits.js";
 import { CONNECT_CALLBACK, connectionsOf, finishConnect, localConnectOf, oneClickOf } from "../mcp-connect.js";
 import { learningView } from "../project-learning.js";
+import { memoryUseOf } from "../memory-use.js";
+import { afterwardsWords, lessonNoteOf, noteAfterwards } from "../lesson-notes.js";
+import { decideTidy, disabledLessons, listTidy, proposeTidy, restoreDecision, restoreLesson, restoreReference, undoableMerges, unmergeDecisions } from "../memory-tidy.js";
 import { skillTestResult } from "../project-skills.js";
 import { discoverTools, projectToolsOf } from "../project-tools.js";
 import { lookProjectMcp } from "../folder-look.js";
@@ -48,6 +51,7 @@ import { releaseApprovalSetting, setReleaseApproval } from "../release-auto.js";
 import { backupHtml } from "../backup-ui.js";
 import { BACKUP_EVERY_HOURS, backupFolderOf, backupNow, checkBackupFolder, defaultBackupFolder, MAX_KEEP } from "../backup.js";
 import { projectBatchChecks, setProjectBatchChecks } from '../batch-policy.js';
+import { fastStartOn, setFastStart } from '../fast-start.js';
 import { ALL_PROJECTS as CHAT_APPROVAL_ALL, chatApprovalWords, setChatApproval } from "../chat-approval.js";
 import { ChatState } from "../chat-delivery-state.js";
 import { checkSettingsHtml } from '../check-levels-ui.js';
@@ -67,13 +71,13 @@ import { disconnectGoogle, googleConnected, googleConsent, readGoogleMail, saveG
 import { integrationsHtml } from "../integrations-ui.js";
 import { setYouiyouxIntake } from "../youiyoux-intake.js";
 import { clearProviderKey, keyStatus, plausibleKey, PROVIDER_KEY_ENV, readAuthMode, readProviderKey, saveProviderKey, setAuthMode, SUBSCRIPTION_CAPABLE, verdictWords, verifyProviderKey } from "../keys.js";
-import { decisionsHtml, framedSection, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml } from "../knowledge-ui.js";
+import { cleanUpHtml, decisionsHtml, framedSection, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml, referenceRestoreHtml, restoreHtml } from "../knowledge-ui.js";
 import { aboutYouOf, checkAboutYou, saveAboutYou } from "../lead-about.js";
 import { cancelCommitment, conditionWords, openCommitments } from '../lead-commitments.js';
 import { checkLeadIdentity, leadIdentityOf } from "../lead-identity.js";
 import { mailboxAccess, readThroughImap } from "../mailbox.js";
 import { startConnect } from "../mcp-connect.js";
-import { decideProposal, listProposals, memoryStatus } from "../memory-pass.js";
+import { decideProposal, defaultTidyAnalyzer, listProposals, memoryStatus } from "../memory-pass.js";
 import { checkModels, isNewModel, modelOptions, modelWords, RUNTIME_TOOLS, runtimeStates, seenModels, setWatch, updateRuntime, watchState } from "../model-catalog.js";
 import { modelsHtml, modelsScript } from "../models-ui.js";
 import { acceptSuggestion, dismissSuggestion, grantWords, keepRule, modelName, ruleWords, rulesOf, setSuggestModels, startTrial, stopTrial, suggestionsFor, suggestionWords, suggestModelsOn, trialOffersFor, trialOfferWords, trialsOf, trialWords, turnOffRule } from "../route-rules.js";
@@ -93,6 +97,7 @@ import { isCheckAccess, signInsUnavailableWords, widerThan } from "../check-acce
 import { LOCAL_MODE_CONFINES, localModeOn } from "../local-owner.js";
 import { parseMachLookup, parseReadDeny } from "../project-sandbox.js";
 import { projectDeleteConfirmHtml, projectSettingsHtml } from "../project-delete-ui.js";
+import { endHoldout, setCodeMapSwitch } from "../code-map-acts.js";
 import { deleteProject, holdingsWords } from "../project-delete.js";
 import { applySavedKnowledge, changeKnowledge, knowledgeVersion, knowledgeView } from "../project-knowledge.js";
 import { changeLearning } from "../project-learning.js";
@@ -128,8 +133,8 @@ import { lastSweep, saveSweep, storageSweepOff } from "../storage-sweep.js";
 import { sweepSchedule } from "../storage-sweep-schedule.js";
 import { storageHtml } from "../storage-ui.js";
 import { landedSummary } from "../landed-cleanup.js";
-import { bytesWords, parseCleanup } from "../storage.js";
-import { isDigestTime, liveBackupState, localModeOf, RESULT_SCREENSHOTS, setLiveBackupSettings, setLocalModeOff } from "../store.js";
+import { bytesWords, parseCleanup, parseIdle } from "../storage.js";
+import { checkoutIdle, isDigestTime, liveBackupState, setCheckoutIdle, localModeOf, RESULT_SCREENSHOTS, setLiveBackupSettings, setLocalModeOff } from "../store.js";
 import { defaultLiveFolder, liveFolderOf, liveFolderProblem } from "../live-backup.js";
 import { LIVE_EVERY } from "../backup-ui.js";
 import { checkTeamsCredentials, clearTeamsCredentials, loadTeamsCredentials, saveTeamsCredentials, TeamsError } from "../teams-api.js";
@@ -353,9 +358,34 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
             return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
         const selector = projectPicker("/settings/project", projects.map(repo => ({ repo, name: projectName(repo) })), chosen);
         const notice = { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") };
-        const content = chosen === "" ? html `${notice.said ? infoLine(notice.said) : ""}${empty({ title: "No projects yet.", action: btn("Add a project", { sm: true, href: "/projects" }) })}` : (projectSettingsHtml({ ...projectViewOf(chosen, who), remoteUrl: store.projectRemote(chosen) }, notice));
+        const content = chosen === "" ? html `${notice.said ? infoLine(notice.said) : ""}${empty({ title: "No projects yet.", action: btn("Add a project", { sm: true, href: "/projects" }) })}` : (projectSettingsHtml({ ...projectViewOf(chosen, who), remoteUrl: store.projectRemote(chosen), codeMap: codeMapView(chosen, who, ctx.now) }, notice));
         return sendScreen(response, 200, screen("Project", settingsSubPage("projects", "Project", html `${selector}${content}`), { chrome: chromeFor(chosen || null, "settings") }));
     }
+    /** The project's code map section: the switch, and the holdout while new builds are still being enrolled. */
+    function codeMapView(repo, who, now) {
+        const row = store.handle.prepare("SELECT code_map, code_map_enroll_until FROM project WHERE path = ?").get(repo);
+        const until = typeof row?.["code_map_enroll_until"] === "string" ? row["code_map_enroll_until"] : null;
+        return { on: row === undefined || Number(row["code_map"]) === 1, enrollUntil: until !== null && Date.parse(until) > now.getTime() ? until : null,
+            canEndHoldout: who.via === "cookie" && who.authority !== "local-owner", href: `/projects/${encodeURIComponent(projectName(repo))}/map` };
+    }
+    function codeMapAct(kind) {
+        return async (ctx) => {
+            const { response, now, posted } = ctx;
+            const who = browserCaller(ctx.who);
+            const repo = posted.get("repo") ?? "";
+            const back = (key, words) => redirect(response, `/settings/project?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}#code-map`);
+            if (posted.getAll("repo").length !== 1 || posted.getAll("on").length > 1)
+                return back("problem", "That form was sent twice over. Nothing changed.");
+            if (!consoleProjects().includes(repo) || !store.accountCanAccess(who.name, repo))
+                return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
+            const door = who.authority === "local-owner" ? { kind: "local-owner", actor: who.name } : { kind: "person", person: modelsAuthority(who, "session") };
+            const on = posted.get("on") === "1";
+            const done = kind === "switch" ? setCodeMapSwitch(store, door, repo, on, now) : endHoldout(store, door, repo, now);
+            if (!done.ok)
+                return back("problem", done.problem);
+            return back("said", kind === "holdout" ? "The holdout has ended. Builds already enrolled keep their arm." : on ? "The code map is on." : "The code map is off.");
+        };
+    }
     // v102: Settings → Approvals and safety: the defaults for new tasks, a project's separation of duties and release
     // approval, and the way to its operating mode. Anyone who sees the project reads them; each form's own route decides
     // who may change it (an approver for the defaults and releases, an instance operator for the rules).
@@ -467,9 +497,9 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const measured = lastChecks.known("storage");
         const check = postForm("/settings/storage/check", btn("Check now", { sm: true, type: "submit" }));
         if (measured === null) {
-            return sendScreen(response, 200, screen("Storage", settingsSubPage("system", "Storage", settingsSection({ id: "storage", title: "Checkouts not measured yet", lead: "Toolroll measures the checkouts in the background. Check now measures them at once.", body: check })), { chrome: chromeFor(project, "settings") }));
+            return sendScreen(response, 200, screen("Storage", settingsSubPage("system", "Storage", settingsSection({ id: "storage", title: "Task folders not measured yet", lead: "Toolroll measures the task folders in the background. Check now measures them at once.", body: check })), { chrome: chromeFor(project, "settings") }));
         }
-        const plan = { ...measured.value, cleanup: store.checkoutCleanup() };
+        const plan = { ...measured.value, cleanup: store.checkoutCleanup(), idle: checkoutIdle(store) };
         const sweep = { last: lastSweep(store), off: storageSweepOff(), schedule: sweepSchedule(store, now) };
         return sendScreen(response, 200, screen("Storage", settingsSubPage("system", "Storage", html `${(storageHtml({ plan, csrf: who.session.csrf, sweep, landed: landedSummary(store), measured: html `<div class="k-acts"><span class="k-note">Measured ${new Date(measured.at).toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit" })}</span>${check}</div>` }, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }))}`), { chrome: chromeFor(project, "settings") }));
     }
@@ -499,7 +529,7 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const quick = liveQuickCommand(store, repo);
         const body = (checkSettingsHtml({ repo, name: projectName(repo), csrf: who.session.csrf, canChange: who.role === "approver" && !store.isDemo(),
             level: projectCheckLevel(store, repo).level, full: store.liveVerifyCommand(repo), quick, suggestion: quick === null ? suggestQuickCommand(repo) : null,
-            review: (({ on, source }) => ({ on, source }))(store.reviewSwitch(repo, clock())), batch: { on: projectBatchChecks(store, repo).on },
+            review: (({ on, source }) => ({ on, source }))(store.reviewSwitch(repo, clock())), batch: { on: projectBatchChecks(store, repo).on }, fast: { on: fastStartOn(store, repo) },
             said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }));
         return sendScreen(response, 200, screen("Checks", settingsSubPage("projects", "Checks", html `${body}`), { chrome: chromeFor(project, "projects") }));
     }
@@ -577,21 +607,25 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
                     const revision = Number(url.searchParams.get('version'));
                     const previous = knowledgeVersion(store, chosen, who.name, revision);
                     const restore = csrf && who.role === 'approver' && revision !== view.revision ? postForm('/settings/knowledge/change', html `<p>Replaces knowledge for future tasks. Existing runs keep their saved context.</p><button>Restore version ${revision}</button>`, { attrs: { class: 'knowledge' }, hidden: { repo: chosen, identity: view.identity, revision: String(view.revision), action: 'restore', restore: String(revision) } }) : '';
-                    return sendScreen(response, 200, screen('Knowledge history', settingsSubPage('agents', `Knowledge · version ${revision}`, html `<p class="k-note"><a class="k-link" href="/settings/knowledge?repo=${encodeURIComponent(chosen)}">Current knowledge</a></p>${knowledgeHtml({ ...view, knowledge: previous, history: [], stale: null }, '', false)}${restore}`), { chrome: chromeFor(chosen, 'settings') }));
+                    return sendScreen(response, 200, screen('Knowledge history', settingsSubPage('agents', `Knowledge · version ${revision}`, html `<p class="k-note"><a class="k-link" href="/settings/knowledge?repo=${encodeURIComponent(chosen)}">Current knowledge</a></p>${knowledgeHtml({ ...view, knowledge: previous, history: [], stale: null }, '', false)}${restore}${referenceRestoreHtml(chosen, revision, previous.references.filter(ref => !view.knowledge.references.some(now => now.id === ref.id)), !!csrf && who.role === 'approver')}`), { chrome: chromeFor(chosen, 'settings') }));
                 }
                 const query = (url.searchParams.get('q') ?? '').slice(0, 1000);
-                const result = query.trim() ? repositoryContextRead({ repo: chosen, query, mode: url.searchParams.get('mode') === 'impact' ? 'impact' : 'search', cacheRoot: join(dirname(evidenceRoot), 'repository-context') }) : null;
+                const result = query.trim() ? repositoryContextRead({ repo: chosen, project: chosen, query, mode: url.searchParams.get('mode') === 'impact' ? 'impact' : 'search', cacheRoot: join(dirname(evidenceRoot), 'repository-context') }) : null;
                 const memoryQuery = (url.searchParams.get('memory') ?? '').slice(0, 300);
                 const hits = memoryQuery.trim() ? searchMemory(store, { actor: who.name, repos: [chosen], query: memoryQuery, limit: 20 }) : null;
                 let proposals = html ``;
                 try {
-                    proposals = (proposalsHtml(chosen, listProposals(store, chosen), memoryStatus(store, chosen, who.name), csrf, who.role === 'approver'));
+                    proposals = (proposalsHtml(chosen, listProposals(store, chosen), memoryStatus(store, chosen, who.name), csrf, who.role === 'approver', who.name));
                 }
                 catch {
                     proposals = html ``;
                 }
-                content = html `<p class="meta">${MEMORY_INTRO}</p>${memorySearchHtml(chosen, memoryQuery, hits)}${proposals}${(decisionsHtml(chosen, listDecisions(store, chosen, who.name, { limit: 50 }), csrf, who.role === 'approver'))}\
-${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf : '')}${knowledgeHtml(view, csrf, who.role === 'approver')}\
+                const use = memoryUseOf(store, chosen);
+                const manageMemory = who.role === 'approver' && csrf !== '';
+                const retired = listDecisions(store, chosen, who.name, { status: 'all', limit: 100 }).filter(d => d.status !== 'active');
+                content = html `<p class="meta">${MEMORY_INTRO}</p>${memorySearchHtml(chosen, memoryQuery, hits)}${proposals}${cleanUpHtml(chosen, listTidy(store, chosen), manageMemory)}${(decisionsHtml(chosen, listDecisions(store, chosen, who.name, { limit: 50 }), csrf, who.role === 'approver', undefined, undefined, use, d => { const after = noteAfterwards(store, d); return after === null ? null : afterwardsWords(after); }))}\
+${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf : '')}${knowledgeHtml(view, csrf, who.role === 'approver', undefined, undefined, use)}\
+${restoreHtml(chosen, retired, undoableMerges(store, chosen), disabledLessons(store, chosen), manageMemory)}\
 <details class="knowledge frame"><summary class="frame-head">Learned lessons</summary><div class="frame-panel">${(learningHtml(learningView(store, evidenceRoot, chosen, who.name), csrf, who.role === 'approver'))}</div></details>`;
             }
             catch {
@@ -803,11 +837,11 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const { url, who, response } = ctx;
         const provider = url.pathname.split("/")[2];
         if (!isProviderId(provider))
-            return refuse(response, who, 400, "unknown provider", "/work");
+            return refuse(response, who, 400, "unknown provider", "/tasks");
         if (who.role !== "approver")
-            return refuse(response, who, 403, "Only an operator can resume an agent's work.", "/work");
+            return refuse(response, who, 403, "Only an operator can resume an agent's work.", "/tasks");
         liftAuthPause(store, provider, "person", who.name, clock());
-        return redirect(response, "/work");
+        return redirect(response, "/tasks");
     }
     // The update notice is dismissed per browser and per version: a newer release shows it again.
     // Cockpit B2: Forget — nothing verified on this session before now counts as fresh (a CSRF-checked post, like every act).
@@ -1235,16 +1269,20 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         // What the page shows next is measured again after the change.
         const said = sayTo(response, "/settings/storage");
         const back = async (kind, words) => { await measureStorage(databaseFile).catch(() => undefined); return said(kind, words); };
-        const what = op === "clean" ? "clean up" : op === "discard" ? "discard a checkout" : "change checkout cleanup";
+        const what = op === "clean" ? "clean up" : op === "discard" ? "discard a task folder" : "change automatic cleanup";
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", `Enter your Toolroll password to ${what}.`);
         if (op === "cleanup") {
             const cleanup = parseCleanup(body.get("cleanup") ?? "");
             if (cleanup === undefined)
-                return back("problem", "Choose when a finished task's checkout is removed.");
-            const before = store.checkoutCleanup();
+                return back("problem", "Choose when a finished task's folder is removed.");
+            const idle = body.get("idle") === null ? checkoutIdle(store) : parseIdle(body.get("idle") ?? "");
+            if (idle === undefined)
+                return back("problem", "Choose when an idle task's folder is removed.");
+            const same = cleanup === store.checkoutCleanup() && idle === checkoutIdle(store);
             store.setCheckoutCleanup(cleanup, who.name, now);
-            return back("said", cleanup === before ? "Nothing changed." : "Saved.");
+            setCheckoutIdle(store, idle, who.name, now);
+            return back("said", same ? "Nothing changed." : "Saved.");
         }
         const pool = storagePool(databaseFile);
         if (op === "clean") {
@@ -1256,7 +1294,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
                 return back("problem", "What a clean-up would remove changed since you looked. Check the list again.");
             const done = await cleanCheckouts(store, pool, clock, { manual: true, actor: who.name, only: new Set(plan.go.map(one => one.path)) });
             saveSweep(store, { at: clock().toISOString(), source: "manual", actor: who.name, parts: [{ kind: "checkouts", count: done.removed.length, bytes: done.freed, failed: done.kept.filter(one => one.why === "git refused").length, items: done.removed.slice(0, 20).map(one => one.path) }] });
-            return back("said", done.removed.length === 0 ? "Nothing was removed: those checkouts are no longer ready to go." : `Removed ${done.removed.length} checkout${done.removed.length === 1 ? "" : "s"}, about ${bytesWords(done.freed)}. Their branches stay.`);
+            return back("said", done.removed.length === 0 ? "Nothing was removed: those task folders are no longer ready to go." : `Removed ${done.removed.length} task folder${done.removed.length === 1 ? "" : "s"}, about ${bytesWords(done.freed)}. Their branches stay.`);
         }
         const done = await discardCheckout(store, pool, body.get("path") ?? "", now, who.name);
         return done.ok ? back("said", `Discarded, about ${bytesWords(done.bytes)}. Its branch stays.`) : back("problem", done.message);
@@ -1331,6 +1369,13 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             const changed = setProjectBatchChecks(store, repo, on, who.name, now);
             return back("said", !changed.changed ? "Saved." : on ? "Batch checks are on." : "Batch checks are off.");
         }
+        // Small tasks start right away: a person's own logged settings act, behind this form's password.
+        if (act === "small-tasks") {
+            const on = body.get("on") === "1";
+            store.upsertProject(repo, projectName(repo), now);
+            setFastStart(store, repo, on, who.name, now);
+            return back("said", on ? "Small tasks start right away." : "Small tasks wait for a plan.");
+        }
         if (act === "level") {
             const level = body.get("level");
             if (!isCheckLevel(level))
@@ -1736,7 +1781,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const repo = body.get('repo') ?? '';
         if (!visible(repo) || !store.accountCanAccess(who.name, repo) || !consoleProjects().includes(repo))
             return refuse(response, who, 403, 'That project is outside your access.', '/settings/knowledge');
-        const refreshed = await repositoryContext({ repo, query: '', refresh: true, cacheRoot: join(dirname(evidenceRoot), 'repository-context') });
+        const refreshed = await repositoryContext({ repo, project: repo, query: '', refresh: true, cacheRoot: join(dirname(evidenceRoot), 'repository-context') });
         return sendScreen(response, refreshed.index.status === 'ready' ? 200 : 503, screen('Project context', settingsSubPage("agents", "Project context", html `<p>${refreshed.index.status === 'ready' ? 'Code index refreshed.' : 'The index is unavailable. Source search still works.'}</p><a class="button-link" href="/settings/knowledge?repo=${encodeURIComponent(repo)}">Open knowledge</a>`), { chrome: chromeFor(repo, 'settings') }));
     }
     async function knowledgeProposal(ctx) {
@@ -1755,6 +1800,64 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         }
         return redirect(response, `/settings/knowledge?repo=${encodeURIComponent(repo)}&saved=1`);
     }
+    /** A lesson note: a person's own words, accepted as a decision through the one proposal writer, or rejected. */
+    async function knowledgeNote(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.knowledgeNote);
+        const repo = body.get('repo') ?? '', decision = body.get('decision') ?? '';
+        if (!visible(repo) || !consoleProjects().includes(repo))
+            return refuse(response, who, 403, 'That project is outside your access.', '/settings/knowledge');
+        if (!['accept', 'reject'].includes(decision) || !/^[0-9]{1,12}$/.test(body.get('proposal') ?? ''))
+            return refuse(response, who, 400, 'Choose accept or reject for one note.', '/settings/knowledge');
+        const id = Number(body.get('proposal'));
+        try {
+            if (lessonNoteOf(store, id) === null)
+                throw Error('That note is unavailable.');
+            decideProposal(store, { repo, actor: who.name, id, decision: decision, claim: body.get('claim') ?? '' }, now);
+        }
+        catch (error) {
+            return sendScreen(response, 409, screen('Knowledge', settingsSubPage("agents", "Knowledge", html `<p role="alert">${error instanceof Error ? error.message : 'That note could not be decided.'}</p><p><a class="k-link" href="/settings/knowledge?repo=${encodeURIComponent(repo)}">Back to Knowledge</a></p>`), { chrome: chromeFor(repo, 'settings') }));
+        }
+        return redirect(response, `/settings/knowledge?repo=${encodeURIComponent(repo)}&saved=1`);
+    }
+    /** Project memory's clean-up: a person's request, accepting or rejecting one proposal, and restores. Every writer
+     * proves the person inside its own transaction. */
+    async function knowledgeTidy(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.knowledgeTidy);
+        const repo = body.get('repo') ?? '', action = body.get('action') ?? '', target = body.get('target') ?? '';
+        if (!visible(repo) || !consoleProjects().includes(repo))
+            return refuse(response, who, 403, 'That project is outside your access.', '/settings/knowledge');
+        const back = `/settings/knowledge?repo=${encodeURIComponent(repo)}`;
+        const said = (id) => /^[0-9]{1,12}$/.test(id) ? Number(id) : null;
+        // Only a browser session is a person's proof here; the writers refuse anything else.
+        const proof = who.via === 'cookie' ? 'session' : 'remote-token';
+        try {
+            if (action === 'propose')
+                await proposeTidy(store, { repo, actor: who.name, analyzer: defaultTidyAnalyzer(store, store.databaseFile() === null ? {} : { configDir: dirname(store.databaseFile()) }) }, now);
+            else if (action === 'accept' || action === 'reject') {
+                const id = said(body.get('proposal') ?? '');
+                if (id === null)
+                    throw Error('Choose one proposal.');
+                const choice = body.get('choice'), claim = body.get('claim'), why = body.get('why');
+                decideTidy(store, evidenceRoot, { repo, actor: who.name, id, decision: action, proof, ...(choice === null ? {} : { choice }), ...(claim === null ? {} : { claim }), ...(why === null ? {} : { why }) }, now);
+            }
+            else if (action === 'restore' && said(target) !== null)
+                restoreDecision(store, { repo, actor: who.name, id: said(target), proof }, now);
+            else if (action === 'unmerge' && said(target) !== null)
+                unmergeDecisions(store, { repo, actor: who.name, merge: said(target), proof }, now);
+            else if (action === 'readopt' && said(target) !== null)
+                restoreLesson(store, evidenceRoot, { repo, actor: who.name, id: said(target), proof }, now);
+            else if (action === 'reference' && /^[a-f0-9]{20}$/.test(target) && said(body.get('revision') ?? '') !== null)
+                restoreReference(store, { repo, actor: who.name, id: target, fromRevision: said(body.get('revision') ?? ''), proof }, now);
+            else
+                return refuse(response, who, 400, 'Choose one clean-up action.', back);
+        }
+        catch (error) {
+            return sendScreen(response, 409, screen('Knowledge', settingsSubPage("agents", "Knowledge", html `<p role="alert">${error instanceof Error ? error.message : 'That could not be done.'}</p><p><a class="k-link" href="${back}">Back to Knowledge</a></p>`), { chrome: chromeFor(repo, 'settings') }));
+        }
+        return redirect(response, `${back}&saved=1`);
+    }
     async function knowledgeDecision(ctx) {
         const { response, now, posted } = ctx;
         const who = browserCaller(ctx.who);
@@ -2754,6 +2857,8 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.models-stop": modelsRuleAct("stop"),
         "settings.knowledge-refresh": knowledgeRefresh,
         "settings.knowledge-proposal": knowledgeProposal,
+        "settings.knowledge-note": knowledgeNote,
+        "settings.knowledge-tidy": knowledgeTidy,
         "settings.knowledge-decision": knowledgeDecision,
         "settings.knowledge-change": knowledgeChange,
         "settings.learning-change": learningChange,
@@ -2803,6 +2908,8 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.lead-about": leadAbout,
         "settings.lead-promise-cancel": leadPromiseCancel,
         "settings.lead-on": leadOn,
+        "settings.code-map": codeMapAct("switch"),
+        "settings.code-map-holdout": codeMapAct("holdout"),
     }, {
         "edge.google-callback": googleCallback,
         "edge.connect-callback": connectCallback,