toolroll 0.9.93 → 0.9.95

package/dist/scout.js

@@ -27,6 +27,7 @@ import { scoutHandbackSchema } from "./contracts/scout-report.js";
 import { parseReport, REPORT_IMAGE_FILE, REPORT_LIMITS, REPORT_VERSION, SCOUT_OUTPUT_JSON_SCHEMA } from "./scout-report.js";
 import { TOKEN_ENVS as TELEGRAM_TOKEN_ENVS } from "./telegram.js";
 import { evidenceRoot, mailboxName, quarantineMailboxes, readMailbox, reportFileName, SCREENSHOT_BYTE_CAP, storeEvidence, validateScreenshotBytes, writeEvidenceFile, } from "./evidence.js";
+import { gitFailureWords } from "./builder.js";
 import { MARKER as LEASE_MARKER } from "./worktree.js";
 import { liveLogContext } from "./live-detail.js";
 import { openLiveLog } from "./live.js";
@@ -251,7 +252,7 @@ async function scoutWith(store, request, outputDir) {
     }
     const revision = await git(GIT, ["--no-optional-locks", "rev-parse", "HEAD"], { cwd: worktree });
     if (revision.code !== 0) {
-        return { ok: false, kind: "failure", reason: "git", message: `could not read the base revision in ${worktree}` };
+        return { ok: false, kind: "failure", reason: "git", message: `could not read the base revision in ${worktree} (${gitFailureWords(revision)})` };
     }
     const baseRevision = revision.stdout.trim();
     store.stampRun(request.runId, { baseRevision });

package/dist/serve.d.ts

@@ -4,7 +4,7 @@ export declare function createDecisionServer(options: ServeOptions): DecisionSer
 export { PAGE_CSS, pinnedTheme, SENSITIVE_INPUT } from "./server/chrome.js";
 export { redactedPath, SHUTDOWN_WAIT_MS, type ServeOptions } from "./server/http.js";
 export { TASK_COMPOSER_MODES, type TaskComposerMode } from "./server/render-chat.js";
-export { inboxFingerprints, parseInboxTab, queueScript, type InboxTab } from "./server/render-pages.js";
+export { queueScript } from "./server/render-pages.js";
 export { ssoStepUps, wrongHostPage } from "./server/render-people.js";
 export { diffFileAnchor, editorFileHref, needActionOf, orderChangedFiles, plainConclusionOf, rankReviewQueue, reviewFilePriority, reviewPriorityOf, runFactsFragment, withinSignedTouches, type ReviewFileRow, type ReviewPriority, type ReviewQueueFacts } from "./server/render-results.js";
 export { decisionAnswerScript, earlierVersionsWords, revisionLineageWords, type RouteView } from "./server/render-tasks.js";

package/dist/serve.js

@@ -1,4 +1,5 @@
 import { secretFolder } from "./tool-secret-store.js";
+import { fallbackSettingOf } from "./fallback.js";
 import { acceptedIdentities, recoverLearning } from "./project-learning.js";
 import { consoleFolderGate, syncProjectIdentities } from "./project-identity.js";
 import { inFolderScope } from "./folder-gate.js";
@@ -108,6 +109,7 @@ import { keepSlowRequest, Timeline } from "./latency-timeline.js";
 import { readFileSync } from "node:fs";
 import { createServer } from "node:http";
 import { homedir, hostname } from "node:os";
+import { sameMachineHost } from "./machine-identity.js";
 import { dirname, join } from "node:path";
 import { pinnedAccent } from "./accent-colors.js";
 import { CHAT_KEY_ENV, credentialKeyOf, fetchOpenRouterCatalog, isSubscriptionChatProvider, priceForConfig, subscriptionCredentialKey } from "./converse.js";
@@ -506,6 +508,7 @@ export function createDecisionServer(options) {
         builds: projectBuildsOf(repo, who),
         access: projectAccessOf(repo),
         network: { setting: store.projectNetwork(repo), canChange: who.via === "cookie" && who.role === "approver" && !store.isDemo() && store.accountCanAccess(who.name, repo) },
+        fallback: { setting: fallbackSettingOf(store, repo), canChange: who.via === "cookie" && who.role === "approver" && !store.isDemo() && store.accountCanAccess(who.name, repo) },
         writes: { setting: store.projectWrites(repo), canChange: who.via === "cookie" && who.role === "approver" && !store.isDemo() && store.accountCanAccess(who.name, repo) },
         sandbox: { setting: store.projectSandbox(repo), canChange: who.via === "cookie" && who.role === "approver" && !store.isDemo() && store.accountCanAccess(who.name, repo) },
         checkAccess: {
@@ -1109,7 +1112,7 @@ export function createDecisionServer(options) {
         // A project link is a read context, not a session-changing operation.
         // Prove it against both admission and the known project catalog before
         // collection queries; unknown/foreign paths reveal no work.
-        if ((route.id === 'work' || route.id === 'system') && url.searchParams.has('project')) {
+        if ((route.id === 'tasks' || route.id === 'work' || route.id === 'system') && url.searchParams.has('project')) {
             const wanted = url.searchParams.get('project') ?? '';
             if (url.searchParams.getAll('project').length !== 1 || !visible(wanted) ||
                 ![...managedRepos(), ...store.listProjects().map(one => one.path)].includes(wanted)) {
@@ -1128,7 +1131,9 @@ export function createDecisionServer(options) {
             project = wanted;
         }
         // All projects, asked for by name on Tasks (its project filter): the rolled-up list, admission-bound as ever.
-        if (route.id === 'work' && url.searchParams.get('all') === '1' && !url.searchParams.has('project') && url.searchParams.getAll('all').length === 1)
+        // Tasks (P1.4) says every project as scope=all; an old link's all=1 still reads so.
+        if (route.id === 'tasks' && !url.searchParams.has('project') && ((url.searchParams.get('scope') === 'all' && url.searchParams.getAll('scope').length === 1)
+            || (url.searchParams.get('all') === '1' && url.searchParams.getAll('all').length === 1)))
             project = null;
         // Every page's Tasks count covers this one project view, whatever project the page itself shows.
         const facts = requestContext.getStore();
@@ -1145,7 +1150,7 @@ export function createDecisionServer(options) {
             const namedProject = url.searchParams.get("project");
             if (url.searchParams.getAll("result").length !== 1 || url.searchParams.getAll("run").length > 1 || url.searchParams.getAll("project").length > 1 ||
                 (namedProject !== null && (ref === null || !visible(ref.repo) || namedProject !== ref.repo))) {
-                return refuse(response, who, 404, "No such result in your projects.", "/work");
+                return refuse(response, who, 404, "No such result in your projects.", "/tasks");
             }
             if (who.via === "cookie" && ref !== null && visible(ref.repo))
                 project = ref.repo;
@@ -1171,7 +1176,7 @@ export function createDecisionServer(options) {
         const needsProject = who.via === "cookie" && project === null && !unscopedMode &&
             route.needsProject &&
             !(route.id === "review" && url.searchParams.has("result")) &&
-            !(route.id === "board" && url.searchParams.get("scope") === "all");
+            !(route.id === "board" && url.searchParams.get("scope") === "all") && !(route.id === "tasks" && url.searchParams.get("scope") === "all");
         if (needsProject)
             return redirect(response, `/projects?return=${encodeURIComponent(safeReturn(url.pathname + url.search))}`);
         return dispatchConsole(route, { url, who, request, response, route, now, project, chosenProject, posted: new URLSearchParams() });
@@ -1201,9 +1206,10 @@ export function createDecisionServer(options) {
         const here = hostname();
         const registered = store.listRunners().filter(one => one.retiredAt === null);
         const workers = registered.filter(one => runnerAlive(one, now));
-        if (workers.some(one => one.host !== here && store.providerReadiness(one.name).some(seen => seen.state === "ready")))
+        // This machine under any of its own names (machine-identity.ts): a hostname that moved with the network is still here.
+        if (workers.some(one => !sameMachineHost(one.host, here) && store.providerReadiness(one.name).some(seen => seen.state === "ready")))
             return true;
-        return options.localRunner !== undefined || registered.length === 0 || workers.some(one => one.host === here) ? localAgentSignedIn() : false;
+        return options.localRunner !== undefined || registered.length === 0 || workers.some(one => sameMachineHost(one.host, here)) ? localAgentSignedIn() : false;
     }
     let localSignIn = null;
     let localSignInChecking = null;
@@ -1495,15 +1501,15 @@ export function createDecisionServer(options) {
     function paletteIndexTag(project) {
         const admitted = project === null ? admissionList() : null;
         const entries = [
-            { label: "tasks", href: "/work" },
-            { label: "needs you", href: "/work?view=needs-you" },
-            { label: "inbox", href: "/" },
-            { label: "board", href: "/board?scope=all" },
+            { label: "tasks", href: "/tasks" },
+            { label: "needs you", href: "/tasks?view=needs-you" },
+            { label: "home", href: "/" },
+            { label: "board", href: "/tasks?view=board&scope=all" },
             { label: "queue", href: QUEUE_VIEW },
-            { label: "workbench", href: "/workbench" },
+            { label: "every project", href: "/tasks?scope=all" },
             { label: "flows", href: "/flows" },
-            { label: "done", href: "/done" },
-            { label: "review cockpit", href: "/review" },
+            { label: "finished", href: "/tasks?view=done" },
+            { label: "ready for review", href: "/tasks?view=ready" },
             { label: "fleet", href: "/fleet" },
             { label: "activity", href: "/activity" },
             { label: "action ledger", href: "/ledger" },
@@ -1518,8 +1524,8 @@ export function createDecisionServer(options) {
             entries.push({ label: `${one.id} — ${one.title}`, href: `/t/${encodeURIComponent(one.id)}` });
         }
         const saturated = open.length > 200;
-        const safeEntries = restricted() ? entries.filter(one => ["/work", "/work?view=needs-you", "/", "/board", "/flows", "/done", "/review", "/runs", "/projects", "/ledger"].includes(one.href) || one.href.startsWith("/t/")) : entries;
-        return jsonScript(saturated ? [...safeEntries, { label: "… more in Tasks", href: "/work" }] : safeEntries, { id: "palette-index" });
+        const safeEntries = restricted() ? entries.filter(one => ["/tasks", "/tasks?view=needs-you", "/", "/tasks?view=board", "/flows", "/tasks?view=done", "/tasks?view=ready", "/runs", "/projects", "/ledger"].includes(one.href) || one.href.startsWith("/t/")) : entries;
+        return jsonScript(saturated ? [...safeEntries, { label: "… more in Tasks", href: "/tasks" }] : safeEntries, { id: "palette-index" });
     }
     /**
      * The palette cache (arc 4, finding 6), and its honest contract: a
@@ -1710,7 +1716,7 @@ export function createDecisionServer(options) {
                 needsYou: { count: needsYou, saturated: s.chrome.inboxSaturated === true, scope: tasksProject ?? null,
                     label: s.chrome.inboxLabel ?? `${needsYou} ${needsYou === 1 ? 'needs' : 'need'} you`,
                     // Every project, said by name (all=1), so a session's own open project never narrows the list the count opens.
-                    href: tasksProject === null ? '/work?all=1&view=needs-you' : `/work?project=${encodeURIComponent(tasksProject)}&view=needs-you` },
+                    href: tasksProject === null ? '/tasks?scope=all&view=needs-you' : `/tasks?project=${encodeURIComponent(tasksProject)}&view=needs-you` },
                 chats,
                 // The same count per project (the rail's project rows), read from the same work index totals.
                 ...(() => { if (sensitive)
@@ -1753,7 +1759,9 @@ export function createDecisionServer(options) {
             // A page with its own view keeps its script; the chat page runs the result script.
             const functional = conversation === null || extras.view ? (s.functional?.script ?? '') : RESULT_REVIEW_SCRIPT;
             const document = shell(s.title, s.body, { chrome: s.chrome, sensitive });
-            return page(response, status, browserWorkspaceDocument(document, workspace, nonce, functional + MOBILE_VIEWPORT_SCRIPT + keyFill), nonce, true);
+            // The keys and their list (keymap.ts) work here as on every chromed page; the list sits beside the app React owns.
+            // A sensitive page keeps to its own script.
+            return page(response, status, browserWorkspaceDocument(document, workspace, nonce, functional + MOBILE_VIEWPORT_SCRIPT + keyFill + (sensitive ? '' : chromeScript()), sensitive ? html `` : KBD_HELP), nonce, true);
         }
         // A one-time secret on screen (a token, an invite link, a pairing code): the
         // page carries no script of any kind, so it leaves the workspace for a
@@ -2485,7 +2493,7 @@ export function createDecisionServer(options) {
 export { PAGE_CSS, pinnedTheme, SENSITIVE_INPUT } from "./server/chrome.js";
 export { redactedPath, SHUTDOWN_WAIT_MS } from "./server/http.js";
 export { TASK_COMPOSER_MODES } from "./server/render-chat.js";
-export { inboxFingerprints, parseInboxTab, queueScript } from "./server/render-pages.js";
+export { queueScript } from "./server/render-pages.js";
 export { ssoStepUps, wrongHostPage } from "./server/render-people.js";
 export { diffFileAnchor, editorFileHref, needActionOf, orderChangedFiles, plainConclusionOf, rankReviewQueue, reviewFilePriority, reviewPriorityOf, runFactsFragment, withinSignedTouches } from "./server/render-results.js";
 export { decisionAnswerScript, earlierVersionsWords, revisionLineageWords } from "./server/render-tasks.js";

package/dist/server/chat.js

@@ -1,6 +1,6 @@
-import { freshFacts, freshlyApprovable, freshnessFor, spendingOnlyOnSuccess, withFreshness } from "../scope.js";
+import { freshFacts, freshnessFor, spendingOnlyOnSuccess, withFreshness } from "../scope.js";
+import { approvalPasswordField } from "../approval-password.js";
 import { CHAT_ACTION_LOCAL_ACTS, localOwnerRefusal } from "../local-owner.js";
-import { localApprovalEligible } from "../scope.js";
 import { handlersOf } from './handler-registry.js';
 import { DEPRECATED_PAGE } from "../deprecations.js";
 /** chat handlers, moved without changing their route bodies. */
@@ -170,7 +170,7 @@ export function createChatHandlers(runtime) {
         const requestedRevision = url.searchParams.get("revision");
         if (requestedRevision !== null) {
             if (focusTask === null || !focusTask.family.versions.some(one => one.id === requestedRevision) || url.searchParams.has("result")) {
-                return refuse(response, who, 404, "That revision is not available for this task.", "/work");
+                return refuse(response, who, 404, "That revision is not available for this task.", "/tasks");
             }
             if (requestedRevision !== focusTask.executionId)
                 return redirect(response, `${taskHref(focusTask.id)}?version=${encodeURIComponent(requestedRevision)}`);
@@ -402,20 +402,22 @@ export function createChatHandlers(runtime) {
             const evidenceLink = action.operation === 'result_accept' ? html `<a href="/r/${Number(action.request['run'])}">Inspect this result</a>` : '';
             // Cockpit B2: approving standard work may stand on a password remembered on this session, exactly as on the task
             // page (the same rule approve() applies when the form comes back); the field then may be left empty.
+            // The one password rule every approve form reads (approval-password.ts).
             const freshSince = (() => {
                 const task = typeof action.request['task'] === 'string' ? action.request['task'] : null;
                 if (action.operation !== 'scope_approve' || task === null)
                     return null;
                 const scope = store.getScope(task), fresh = withFreshness('approve-standard', () => freshnessFor(who.name, Date.now(), true));
-                if (scope === null || fresh === null)
+                if (scope === null)
                     return null;
-                const gate = store.approvalGate(task, who.name, 'person');
-                return freshlyApprovable(store, task, scope, gate.verdict === 'seal' && !gate.protectedWork) ? new Date(fresh.at) : null;
+                const field = approvalPasswordField(store, { name: who.name, taskId: task, scope, passwordless: false, localOwner: false, freshAt: fresh?.at ?? null, returnTo: '/chat' });
+                return field.field === 'remembered' ? new Date(field.since) : null;
             })();
             // Easy-start C5: a laptop's local owner confirms its own acts without a password (an approval only when it is
             // eligible: localApprovalEligible, the rule the seal applies again); anything else says how to get a password.
             const reviewTask = typeof action.request['task'] === 'string' ? action.request['task'] : null;
-            const localOk = who.authority === 'local-owner' && CHAT_ACTION_LOCAL_ACTS[action.operation] !== null && (action.operation !== 'scope_approve' || (reviewTask !== null && localApprovalEligible(store, who.name, reviewTask).ok));
+            const localScope = reviewTask === null ? null : store.getScope(reviewTask);
+            const localOk = who.authority === 'local-owner' && CHAT_ACTION_LOCAL_ACTS[action.operation] !== null && (action.operation !== 'scope_approve' || (reviewTask !== null && localScope !== null && approvalPasswordField(store, { name: who.name, taskId: reviewTask, scope: localScope, passwordless: false, localOwner: true, freshAt: null, returnTo: '/chat' }).field === 'none'));
             const localWords = who.authority === 'local-owner' && !localOk ? localOwnerRefusal(store.accountOf(who.name)?.passwordSet === true, '/chat') : null;
             const passwordField = !CHAT_ACTIONS[action.operation].password || localOk ? '' : localWords !== null ? html `<p class="approval-password-note">${localWords.message} <a href="${localWords.href}">${localWords.action}</a></p>` : reauth(freshSince === null
                 ? html `<label>Your password<input type="password" name="token" autocomplete="current-password" required></label>`
@@ -788,7 +790,7 @@ export function createChatHandlers(runtime) {
         }
         // A scope approval's re-check is spent only if the whole confirmation commits (one transaction: the proposal's
         // settlement included). Any other action spends it whatever comes of it (its effects aren't all in the database).
-        const confirmIt = () => confirmLeadProposal(store, principal, id, now, { authority: who.authority, chatProvider: teamChatProvider, confirm: body.get("confirm") === "yes", via: "web", evidenceRoot, ...(body.has("nonce") ? { actionReview: { nonce: body.get("nonce") ?? "", password: body.get("token") ?? "" } } : {}) });
+        const confirmIt = () => confirmLeadProposal(store, principal, id, now, { authority: who.authority, chatProvider: teamChatProvider, confirm: body.get("confirm") === "yes", via: "web", person: who.via === "cookie", evidenceRoot, ...(body.has("nonce") ? { actionReview: { nonce: body.get("nonce") ?? "", password: body.get("token") ?? "" } } : {}) });
         const proposed = store.getLeadProposal(id);
         const approving = proposed?.kind === "action" && sharedActionPayload(proposed.payload)?.operation === "scope_approve";
         const outcome = approving ? spendingOnlyOnSuccess(confirmIt, result => !result.ok || ("already" in result && result.already === true)) : confirmIt();
@@ -830,7 +832,7 @@ export function createChatHandlers(runtime) {
         }
         if (outcome.ok && outcome.kind === "task_action" && outcome.taskId !== null) {
             const proposal = store.getLeadProposal(id);
-            if (proposal.payload["operation"] === "resume") {
+            if (proposal.payload["operation"] === "resume" && who.via !== "cookie") {
                 return armTaskResume(response, who, outcome.taskId, String(proposal.payload["run"]), "chat", now);
             }
             return redirect(response, `${proposalTaskHref(outcome.taskId)}#task-chat-live`);
@@ -1471,11 +1473,11 @@ export function createChatHandlers(runtime) {
         const all = view("all"), needs = view("needs-you"), done = view("completed");
         const weekAgo = new Date(now.getTime() - 7 * 86_400_000).toISOString();
         const counts = [
-            { key: "working", label: "Working now", value: agents.length, href: "/work?view=running" },
+            { key: "working", label: "Working now", value: agents.length, href: "/tasks?view=running" },
             // Each by its shared headline, as the Tasks list words it: a result whose checks failed waits on you, it isn't ready.
-            { key: "waiting", label: "Waiting on you", value: needs.items.filter(one => one.status.label !== "Ready for review").length, href: "/work?view=needs-you" },
-            { key: "ready", label: "Ready to review", value: needs.items.filter(one => one.status.label === "Ready for review").length, href: "/work?view=needs-you" },
-            { key: "done", label: "Done this week", value: done.items.filter(one => (one.completion?.at ?? one.updatedAt) >= weekAgo).length, href: "/work?view=completed" },
+            { key: "waiting", label: "Waiting on you", value: needs.items.filter(one => one.status.label !== "Ready for review").length, href: "/tasks?view=needs-you" },
+            { key: "ready", label: "Ready to review", value: needs.items.filter(one => one.status.label === "Ready for review").length, href: "/tasks?view=needs-you" },
+            { key: "done", label: "Done this week", value: done.items.filter(one => (one.completion?.at ?? one.updatedAt) >= weekAgo).length, href: "/tasks?view=completed" },
         ];
         const tabOf = (one) => one.assignmentState === "ready-to-check" ? one.status.label === "Ready for review" ? "ready" : "needs-you"
             : one.assignmentState === "needs-decision" ? "needs-you" : one.assignmentState === "working" || one.assignmentState === "checking" ? "running" : "finished";
@@ -1494,7 +1496,7 @@ export function createChatHandlers(runtime) {
         const lead = activity === null ? null : { name: activity.name, doing: activity.doing, at: activity.at,
             href: leadTask == null || !admitted(leadTask.repo) ? null : taskHref(familyOf(activity.taskId)?.root.id ?? activity.taskId) };
         return {
-            agents, counts, catchUp, allHref: "/work", ...(lead === null ? {} : { lead }),
+            agents, counts, catchUp, allHref: "/tasks", ...(lead === null ? {} : { lead }),
             planUse: (windows?.tiles ?? []).map(one => ({ name: one.name, window: one.window, percent: one.percent, detail: one.detail, tone: one.tone })),
         };
     }

package/dist/server/chrome.d.ts

@@ -264,7 +264,7 @@ export declare const TO_FRONT_ICON: Html;
  * wear an icon each; the foot's list stays text, the way Linear's does. */
 export declare const strokeIcon: (paths: Html | string) => Html;
 /** Where the queue lives now: the board, flipped to dispatch order. */
-export declare const QUEUE_VIEW = "/board?view=order";
+export declare const QUEUE_VIEW = "/tasks?view=order";
 export declare const FOLDER_PATHS: Html;
 export declare const CHAT_PATHS: Html;
 export declare const WORK_PATHS: Html;

package/dist/server/chrome.js

@@ -14,6 +14,7 @@ import { DISCLOSURE_CSS } from "../disclosure.js";
 import { EVIDENCE_PACK_CSS } from "../evidence-pack.js";
 import { EXPORT_CSS } from "../export-ui.js";
 import { START_COMMAND } from "../first-run.js";
+import { SHORTCUTS, webKeymapScript } from "../keymap.js";
 import { GALLERY_CSS } from "../flow-gallery-ui.js";
 import { STARTERS_CSS } from "../flow-starters-ui.js";
 import { FLOWS_CSS } from "../flows-ui.js";
@@ -347,8 +348,9 @@ export function chromeScript() {
         `navGroups.forEach(function(g){g.addEventListener("toggle",function(){` +
         `if(g.open){navGroups.forEach(function(o){if(o!==g)o.removeAttribute("open");});}});});` +
         // the palette
-        `var raw=document.getElementById("palette-index");if(!raw)return;` +
-        `var index;try{index=JSON.parse(raw.textContent||"[]");}catch(e){return;}` +
+        // No index on a workspace page: search is the workspace's own there (keymap.ts search), and the keys still work.
+        `var raw=document.getElementById("palette-index");var index=[];` +
+        `if(raw){try{index=JSON.parse(raw.textContent||"[]");}catch(e){return;}}` +
         `var open=false,box=null,list=null,input=null,items=[],paletteBack=null;` +
         `function close(){if(!open)return;open=false;box.remove();box=null;if(paletteBack&&paletteBack.isConnected)paletteBack.focus();paletteBack=null;}` +
         `function go(href){location.href=href;}` +
@@ -395,23 +397,22 @@ export function chromeScript() {
         `var next=at===-1?(delta>0?0:set.length-1):Math.max(0,Math.min(set.length-1,at+delta));` +
         `if(next===at)return;` +
         `set[next].focus();ev.preventDefault();}` +
-        // key routing: never inside editable targets, no modifiers, no IME
-        // composition (finding 4); repeats allowed only for j/k
+        // key routing (keymap.ts, one table with the terminal UI): never inside editable targets, no modifiers, no IME
+        // composition (finding 4); repeats allowed only for j/k. A press key presses only a control the page rendered.
+        webKeymapScript() +
         `var pending=null;` +
         `document.addEventListener("keydown",function(ev){` +
         `if(ev.isComposing||ev.metaKey||ev.ctrlKey||ev.altKey)return;` +
         `var t=ev.target;var tag=t&&t.tagName?t.tagName.toLowerCase():"";` +
-        `if(tag==="input"||tag==="textarea"||tag==="select"||tag==="button"||(t&&t.isContentEditable))return;` +
+        `if(tag==="input"||tag==="textarea"||tag==="select"||(t&&t.isContentEditable)||(t&&t.closest&&t.closest("[role=textbox],[role=dialog]:not(.kbd-help)")))return;` +
         `if(ev.key==="Escape"){if(helpOpen()){toggleHelp();ev.preventDefault();return;}close();return;}` +
         `if(helpOpen())return;` +
         `if(ev.repeat&&ev.key!=="j"&&ev.key!=="k")return;` +
-        `if(ev.key==="/"){show();ev.preventDefault();return;}` +
-        `if(ev.key==="?"){toggleHelp();ev.preventDefault();return;}` +
         `if(ev.key==="j"||ev.key==="k"){rove(ev.key==="j"?1:-1,ev);return;}` +
-        `if(pending==="g"){pending=null;` +
-        `var map={b:"/board",i:"/",w:"/workbench",d:"/done",q:"/board?view=order",f:"/fleet",t:"/work",a:"/activity",p:"/projects"};` +
-        `if(map[ev.key]){go(map[ev.key]);ev.preventDefault();}return;}` +
-        `if(ev.key==="g"){pending="g";setTimeout(function(){pending=null;},800);}});` +
+        `if(pending==="g"){pending=null;var after=GKEYS[ev.key];if(after&&run(after))ev.preventDefault();return;}` +
+        `if(ev.key==="g"){pending="g";setTimeout(function(){pending=null;},800);return;}` +
+        `var act=Object.prototype.hasOwnProperty.call(KEYS,ev.key)?KEYS[ev.key]:null;` +
+        `if(act&&run(act))ev.preventDefault();});` +
         `})();`);
 }
 export const ROLE_TITLES = { plan: "Planner", build: "Builder", review: "Reviewer", repair: "Repair" };
@@ -440,17 +441,7 @@ FINISH: unreviewed and undocumented is unfinished; this build ends with the fini
  * absent from sensitive pages. Navigation help in plain words — no key
  * ever posts. */
 export const KBD_HELP = html `<div class="kbd-help" hidden role="dialog" aria-label="keyboard shortcuts" tabindex="-1">\
-<h2>Keyboard shortcuts</h2><table>\
-<tr><td><kbd>/</kbd></td><td>jump to a page or an open task</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>i</kbd></td><td>go to the inbox</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>b</kbd></td><td>go to the board</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>q</kbd></td><td>go to the queue</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>f</kbd></td><td>go to the fleet</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>w</kbd></td><td>go to the workbench</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>t</kbd></td><td>go to the task list</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>a</kbd></td><td>go to the activity view</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>p</kbd></td><td>go to the projects</td></tr>\
-<tr><td><kbd>g</kbd> then <kbd>d</kbd></td><td>go to what is done</td></tr>\
+<h2>Keyboard shortcuts</h2><table>${SHORTCUTS.map(one => html `<tr><td>${joinHtml(one.keys.split(" ").map(key => html `<kbd>${key}</kbd>`), " then ")}</td><td>${one.says}</td></tr>`)}\
 <tr><td><kbd>j</kbd> / <kbd>k</kbd></td><td>move through the rows on this page</td></tr>\
 <tr><td><kbd>Escape</kbd></td><td>close this</td></tr>\
 </table></div>`;
@@ -513,8 +504,8 @@ ${count !== undefined && count > 0 ? html ` <span class="count badge badge-open"
     const scopeStatus = peekCounts === null
         ? null
         : html `<span class="scope-status">\
-${peekCounts.waiting > 0 ? html `<a class="hot" href="/work?view=needs-you">${peekCounts.waiting} needs you</a>` : html `<a href="/work?view=needs-you">0 needs you</a>`}\
-<a href="/runs">${peekCounts.running} live</a><a href="/board?view=order">${peekCounts.queued} queued</a></span>`;
+${peekCounts.waiting > 0 ? html `<a class="hot" href="/tasks?view=needs-you">${peekCounts.waiting} needs you</a>` : html `<a href="/tasks?view=needs-you">0 needs you</a>`}\
+<a href="/runs">${peekCounts.running} live</a><a href="/tasks?view=order">${peekCounts.queued} queued</a></span>`;
     const scopeName = effectiveScope === "project" && chrome.project !== null ? projectName(chrome.project) : "All projects";
     // The switcher (board pass): the scope's name opens a menu of every
     // enrolled project — one tap to open one, or to widen to all — as plain
@@ -556,7 +547,7 @@ ${scopeStatus}</div>`;
 ${count !== undefined && count > 0 ? html ` <span${chrome.inboxLabel === undefined ? "" : html ` aria-label="${chrome.inboxLabel}" title="${chrome.inboxLabel}"`} class="count badge badge-open">${count}${chrome.inboxSaturated ? "+" : ""}</span>` : ""}</a>`;
     const side = joinHtml([
         html `<aside class="side">`,
-        html `<div class="side-head"><a class="brand" href="${chrome.chat === true ? "/chat" : "/work"}"><span class="brand-long">Toolroll</span><span class="brand-short">T</span></a>`,
+        html `<div class="side-head"><a class="brand" href="${chrome.chat === true ? "/chat" : "/tasks"}"><span class="brand-long">Toolroll</span><span class="brand-short">T</span></a>`,
         ...(options.sidebarToggle === true
             ? [html `<button type="button" class="side-toggle" aria-label="collapse sidebar" aria-expanded="true" title="collapse sidebar">${strokeIcon(html `<path d="m15 18-6-6 6-6"/>`)}</button>`]
             : []),
@@ -566,7 +557,7 @@ ${count !== undefined && count > 0 ? html ` <span${chrome.inboxLabel === undefin
         // gating); Work and Projects always. Every specialist tool is a dim
         // text row inside one of the two accordion groups below.
         ...(chrome.chat ? [primaryItem("chat", "/chat", "Chat")] : []),
-        primaryItem("work", "/work", "Tasks", chrome.inboxCount),
+        primaryItem("work", "/tasks", "Tasks", chrome.inboxCount),
         primaryItem("flows", "/flows", "Flows"),
         primaryItem("projects", "/projects", "Projects"),
         html `</nav>`,
@@ -607,7 +598,7 @@ ${postForm(update.dismissHref, html `<button type="submit">Dismiss</button>`, {
     // these only below 760px; desktop keeps the sidebar untouched.
     const mobileTop = joinHtml([
         html `<header class="mobile-top">`,
-        html `<a class="brand-mini" href="${chrome.chat === true ? "/chat" : "/work"}">T</a>`,
+        html `<a class="brand-mini" href="${chrome.chat === true ? "/chat" : "/tasks"}">T</a>`,
         // On a phone the pill IS the scope row (mobile pass): the project's
         // name, its three counts, and the one /projects link at that
         // breakpoint — the scope bar hides below 760px so the header is one
@@ -640,7 +631,7 @@ ${count !== undefined && count > 0 ? html `<span class="dot-badge" role="img" ar
     const tabbar = joinHtml([
         html `<nav class="tabbar">`,
         ...(chrome.chat ? [tab("chat", "/chat", "Chat")] : []),
-        tab("work", "/work", "Tasks", chrome.inboxCount),
+        tab("work", "/tasks", "Tasks", chrome.inboxCount),
         tab("flows", "/flows", "Flows"),
         tab("projects", "/projects", "Projects"),
         html `</nav>`,
@@ -702,7 +693,7 @@ export const TO_FRONT_ICON = html `<svg viewBox="0 0 24 24" fill="none" stroke="
  * wear an icon each; the foot's list stays text, the way Linear's does. */
 export const strokeIcon = (paths) => html `<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.75" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true" focusable="false">${paths}</svg>`;
 /** Where the queue lives now: the board, flipped to dispatch order. */
-export const QUEUE_VIEW = "/board?view=order";
+export const QUEUE_VIEW = "/tasks?view=order";
 export const FOLDER_PATHS = html `<path d="M4 20h16a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2h-7.9a2 2 0 0 1-1.69-.9L9.6 3.9A2 2 0 0 0 7.93 3H4a2 2 0 0 0-2 2v13c0 1.1.9 2 2 2Z"/>`;
 export const CHAT_PATHS = html `<path d="M21 15a2 2 0 0 1-2 2H7l-4 4V5a2 2 0 0 1 2-2h14a2 2 0 0 1 2 2z"/>`;
 export const WORK_PATHS = html `<path d="M9 6h11"/><path d="M9 12h11"/><path d="M9 18h11"/><path d="m4 6 1 1 2-2"/><path d="m4 12 1 1 2-2"/><path d="m4 18 1 1 2-2"/>`;
@@ -730,11 +721,11 @@ export function workToolRows(scoped = false, _offersChat = false, offersCode = f
         // D5: coding sessions are deprecated; /code still opens this release, but nothing links to it.
         // Live terminals: an operator's own Claude Code, Codex or shell, in a real terminal (docs/plans/live-terminal.md).
         ...(offersCode ? [{ key: "code", href: "/term", label: "Live", hint: "your own terminals: Claude Code, Codex or a shell" }] : []),
-        { key: "inbox", href: "/inbox", label: "Inbox", hint: "questions, approvals, and repairs to act on" },
-        { key: "board", href: "/board", label: "Board", hint: "lanes by state, with the order view" },
-        { key: "tasks", href: "/work", label: "Task list", hint: "everything, filterable by state" },
+        { key: "inbox", href: "/", label: "Home", hint: "what needs you, what runs, and what waits" },
+        { key: "board", href: "/tasks?view=board", label: "Board", hint: "lanes by state, with the order view" },
+        { key: "tasks", href: "/tasks", label: "Task list", hint: "everything, filterable by state" },
         { key: "recipes", href: "/recipes", label: "Recipes", hint: "choose, customize, and reuse a workflow" },
-        { key: "workbench", href: "/workbench", label: "Portfolio", hint: "every project and live build in one place" },
+        { key: "workbench", href: "/tasks?scope=all", label: "Every project", hint: "every project's tasks in one list" },
         { key: "ledger", href: "/ledger", label: "Action ledger", hint: "who acted, what happened, and the result" },
         { key: "spend", href: "/spend", label: "Spend", hint: "what agent work cost, and monthly budgets" },
     ];
@@ -759,8 +750,8 @@ export const SETTINGS_KEYS = new Set(["settings", "fleet", "caps", "people", "mo
 export function buildsViews(current) {
     const views = [
         ["builds", "/runs", "builds"],
-        ["done", "/done", "done"],
-        ["review", "/review", "review"],
+        ["done", "/tasks?view=done", "done"],
+        ["review", "/tasks?view=ready", "review"],
         ["activity", "/activity", "activity"],
     ];
     return html `<p class="meta board-view">${joinHtml(views.map(([key, href, label]) => (key === current ? html `<strong>${label}</strong>` : html `<a href="${href}">${label}</a>`)), " \u00b7 ")}</p>`;

package/dist/server/console.css

@@ -1229,6 +1229,9 @@
   .approval-field-hint { color: var(--muted-foreground); font-size: 12px; line-height: 1.5; }
   .approval-field textarea, .approval-field input[type=text] { width: 100%; max-width: 75ch; margin: 0; font-family: var(--font-sans); font-size: 14px; line-height: 1.55; }
   .approval-requirements { display: grid; gap: 6px; margin: 2px 0 0; padding: 0; list-style: none; }
+  .approval-requirements li { display: flex; flex-wrap: wrap; gap: 6px; align-items: center; }
+  .approval-requirements li input[type=text] { flex: 1 1 22rem; }
+  .approval-how { flex: 0 1 auto; max-width: 100%; min-height: 2.125rem; margin: 0; font-size: 13px; }
   .approval-edit-act { display: flex; flex-wrap: wrap; align-items: center; gap: var(--so-space-sm); }
   .approval-edit-act button { margin: 0; min-height: 2.125rem; white-space: nowrap; }
   .approval-link { display: inline-flex; align-items: center; min-height: 32px; padding: 0 var(--so-space-md); border: 1px solid var(--border); border-radius: var(--so-radius-md); background: var(--card); color: var(--foreground); font-size: 13px; font-weight: 500; text-decoration: none; }
@@ -2793,3 +2796,73 @@ html.so-swap::view-transition-old(*):only-child { animation: so-card-out 160ms e
 @media (max-width: 40rem) { .welcome form > .k-btn[type=submit] { width: auto; } }
 /* On a phone the step's primary lives in the dock: its copy in the step is hidden. */
 @media (max-width: 760px) { .welcome .k-btn.k-docked { display: none; } }
+
+/* Code map: every name is repository data, however long; nothing may push the page wider. */
+.cm-list { list-style: none; margin: 0; padding: 0; }
+.cm-item { display: grid; gap: 2px; min-width: 0; padding: 10px 0; border-bottom: 1px solid var(--so-line); overflow-wrap: anywhere; }
+.cm-title { font-size: 13px; font-weight: 500; color: var(--so-ink); }
+.cm-meta { font-size: 12.5px; color: var(--so-muted); }
+.cm-path { overflow-wrap: anywhere; user-select: all; }
+.cm-search { display: flex; gap: var(--so-space-sm); align-items: center; margin: 0 0 var(--so-space-md); }
+.cm-search .k-input, .cm-search input[type="search"] { flex: 1 1 auto; min-width: 0; }
+.cm-search .k-btn { flex: 0 0 auto; white-space: nowrap; }
+/* A test's name is the row: it wraps whole, its facts sit under it, and the one action stays on one line. */
+.flaky-rows .k-row-a .k-btn { white-space: nowrap; }
+@media (min-width: 761px) {
+  .flaky-rows .k-row { grid-template-columns: 96px minmax(0, 1fr) auto auto; padding-block: 10px; }
+  .flaky-rows .k-row-t { grid-column: 2; grid-row: 1; white-space: normal; overflow-wrap: anywhere; }
+  .flaky-rows .k-row-d { grid-column: 2; grid-row: 2; white-space: normal; }
+  .flaky-rows .k-row-m { grid-column: 3; grid-row: 1 / span 2; }
+  .flaky-rows .k-row-a { grid-column: 4; grid-row: 1 / span 2; }
+  .flaky-rows .k-row-c { grid-row: 1 / span 2; }
+}
+
+/* A Toolroll card (card-render.ts): tables, charts and key facts in chat, on the console's own tokens. */
+.tc-card { display: grid; gap: var(--so-space-sm); min-width: 0; font-size: 13px; line-height: 1.45; color: var(--so-ink); }
+.tc-part { display: grid; gap: 6px; min-width: 0; }
+.tc-part h4 { margin: 0; font-size: 12.5px; font-weight: 600; }
+.tc-text { margin: 0; }
+/* The lead's own words in a card: set apart from the records, never styled as one. */
+.tc-lead { display: grid; gap: 2px; padding-left: var(--so-space-sm); border-left: 2px solid var(--so-line); font-style: italic; }
+.tc-lead .tc-note { font-style: normal; }
+.tc-note { margin: 0; font-size: 11.5px; color: var(--so-muted); }
+.tc-rule { width: 100%; margin: 0; border: 0; border-top: 1px solid var(--so-line); }
+.tc-facts { display: grid; grid-template-columns: repeat(auto-fit, minmax(96px, 1fr)); gap: var(--so-space-sm); margin: 0; }
+.tc-facts > div { display: grid; gap: 1px; min-width: 0; }
+.tc-facts dt { font-size: 11.5px; color: var(--so-muted); }
+.tc-facts dd { margin: 0; font-weight: 600; font-variant-numeric: tabular-nums; overflow-wrap: anywhere; }
+.tc-scroll { max-width: 100%; overflow-x: auto; }
+.tc-table { width: 100%; border-collapse: collapse; }
+.tc-table th { font-size: 11.5px; font-weight: 500; color: var(--so-muted); text-align: left; white-space: nowrap; }
+.tc-table th, .tc-table td { padding: 5px var(--so-space-md) 5px 0; border-bottom: 1px solid var(--so-line); vertical-align: top; }
+/* Cells break between words, never inside one: a narrow screen scrolls the table (.tc-scroll) instead. */
+.tc-table td { overflow-wrap: break-word; }
+.tc-table tr:last-child td { border-bottom: 0; }
+.tc-table .tc-num { text-align: right; font-variant-numeric: tabular-nums; white-space: nowrap; }
+.tc-bars { display: grid; gap: 6px; margin: 0; padding: 0; list-style: none; }
+.tc-bars li { display: grid; grid-template-columns: minmax(0, 8rem) minmax(0, 1fr) auto; gap: var(--so-space-sm); align-items: center; }
+.tc-bar-label { overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
+.tc-bar-track { height: 8px; border-radius: 4px; background: var(--so-raised); }
+.tc-bar-fill { display: block; height: 100%; border-radius: 4px; background: var(--so-ink); }
+.tc-bar-value { font-variant-numeric: tabular-nums; }
+.tc-pie { display: flex; flex-wrap: wrap; align-items: center; gap: var(--so-space-md); }
+.tc-pie svg { flex: none; width: 88px; height: 88px; }
+.tc-legend { display: grid; flex: 1 1 140px; gap: 3px; margin: 0; padding: 0; list-style: none; }
+.tc-legend li { display: flex; align-items: center; gap: 6px; min-width: 0; }
+.tc-legend strong { margin-left: auto; font-weight: 600; font-variant-numeric: tabular-nums; }
+.tc-key { flex: none; width: 9px; height: 9px; border-radius: 2px; background: currentColor; }
+.tc-c0 { color: var(--so-ink); stroke: var(--so-ink); }
+.tc-c1 { color: var(--so-info); stroke: var(--so-info); }
+.tc-c2 { color: var(--so-success); stroke: var(--so-success); }
+.tc-c3 { color: var(--so-warning); stroke: var(--so-warning); }
+.tc-c4 { color: var(--so-danger); stroke: var(--so-danger); }
+.tc-c5 { color: var(--so-muted); stroke: var(--so-muted); }
+.tc-line { margin: 0; display: grid; gap: var(--so-space-xs); }
+.tc-line svg { width: 100%; height: 90px; }
+.tc-line figcaption { font-size: 11.5px; color: var(--so-muted); }
+.tc-stroke { stroke: var(--so-ink); stroke-width: 1.5; }
+.tc-area { fill: var(--so-raised); }
+.tc-notes { display: grid; gap: var(--so-space-xs); margin: 0; padding-left: var(--so-space-md); overflow-wrap: anywhere; }
+
+/* The handover note wraps on a narrow screen rather than scrolling sideways. */
+.handover-note { white-space: pre-wrap; }

package/dist/server/guards.js

@@ -272,6 +272,9 @@ export function createSharedGuards(runtime) {
             if (url.searchParams.get("view") === "order")
                 url.searchParams.delete("view");
         }
+        // Tasks (P1.4) keeps the board's rule: the queue's order view stays an instance view, never a limited person's.
+        if (route.id === "tasks" && url.searchParams.get("view") === "order")
+            url.searchParams.set("view", "board");
         return true;
     }
     function workAccess() {

package/dist/server/home.d.ts

@@ -25,6 +25,12 @@ export type HomeFacts = {
     chat: boolean;
     /** This person can answer an agent's question (an approver in a browser session). */
     canAnswer: boolean;
+    /** Why this task's plan can't take a yes right now (render-tasks.ts consentDoorOf), or null when it can. */
+    closedDoor: (taskId: string) => {
+        title: string;
+        why: string;
+        road: "scope" | "agents";
+    } | null;
 };
 /** "7 need you across 2 projects." — the sentence and the figures read the same totals. */
 export declare function homeSentence(needs: number, perProject: readonly {