toolroll 0.9.93 → 0.9.95

package/dist/server/home.js

@@ -22,7 +22,7 @@ export function homeSentence(needs, perProject, scope, any) {
     const waiting = perProject.filter(one => one.needs > 0);
     return waiting.length === 1 ? `${needs} ${verb} you in ${waiting[0].name}.` : `${needs} ${verb} you across ${waiting.length} projects.`;
 }
-function rowOf(store, item, now, multi, canAnswer) {
+function rowOf(store, item, now, multi, canAnswer, closedDoor) {
     const action = item.primaryAction;
     const href = action?.code === "open-result" && action.target.runId != null
         ? `/review?result=${encodeURIComponent(action.target.taskId)}&run=${action.target.runId}` : browserWorkActionHref(item);
@@ -41,11 +41,14 @@ function rowOf(store, item, now, multi, canAnswer) {
     const line = waits
         ? (open ? decision.question : item.status.detail !== item.status.label ? item.status.detail : null)
         : item.progress ?? (item.status.detail !== item.status.label ? item.status.detail : null);
+    // A plan that can't take a yes never offers one: the reason, and the one act that opens it, as the task page says.
+    const door = action?.code === "approve-scope" ? closedDoor(action.target.taskId) : null;
     return {
         id: item.rootId, title: item.title, href: taskHref(item.rootId),
         project: multi || item.repo === null ? (item.repo === null ? "Unplaced" : projectName(item.repo)) : null,
-        age: relativeAge(item.updatedAt, now), chip: { word, tone }, line,
-        action: href === null || action === null ? null : { label: action.label, href }, question,
+        age: relativeAge(item.updatedAt, now), chip: { word, tone }, line: door === null ? line : door.title,
+        action: door !== null ? { label: door.road === "agents" ? "Change the agents" : "Edit the plan", href: `${taskHref(action.target.taskId)}#${door.road === "agents" ? "agents" : "scope"}` }
+            : href === null || action === null ? null : { label: action.label, href }, question,
     };
 }
 /** Home's view for one person and scope, from two reads of the work index (what waits, what runs). */
@@ -54,26 +57,28 @@ export function homeView(facts) {
     const read = (view, limit) => workIndexPage(store, now, access, { view, limit, project, ...(facts.evidenceRoot === undefined ? {} : { root: facts.evidenceRoot }) });
     const needs = read("needs-you", HOME_NEEDS_SHOWN);
     const running = read("running", HOME_RUNNING_SHOWN);
+    // Waiting (docs/plans/plain-toolroll.md P1.4): what Toolroll or another task moves on, with no person asked.
+    const waiting = workIndexPage(store, now, access, { view: "queued", limit: HOME_RUNNING_SHOWN, project, ...(facts.evidenceRoot === undefined ? {} : { root: facts.evidenceRoot }) });
     const totals = needs.totals;
     // Queued: the Tasks list's own Queued count (the same predicate its view=queued filter lists).
     const queued = totals.queued;
-    // Every project is said by name (all=1): /work alone would narrow to the session's open project.
-    const scopeQuery = project === null ? "all=1&" : `project=${encodeURIComponent(project)}&`;
+    // Every project is said by name (scope=all): /tasks alone would narrow to the session's open project.
+    const scopeQuery = project === null ? "scope=all&" : `project=${encodeURIComponent(project)}&`;
     const counts = [
-        { key: "needs", label: "Needs you", value: totals["needs-you"], href: `/work?${scopeQuery}view=needs-you` },
-        { key: "running", label: "Running", value: totals.running, href: `/work?${scopeQuery}view=running` },
-        { key: "queued", label: "Queued", value: queued, href: `/work?${scopeQuery}view=queued` },
-        { key: "finished", label: "Finished", value: totals.completed, href: `/work?${scopeQuery}view=completed` },
+        { key: "needs", label: "Needs you", value: totals["needs-you"], href: `/tasks?${scopeQuery}view=needs-you` },
+        { key: "running", label: "Running", value: totals.running, href: `/tasks?${scopeQuery}view=running` },
+        { key: "queued", label: "Queued", value: queued, href: `/tasks?${scopeQuery}view=queued` },
+        { key: "finished", label: "Finished", value: totals.completed, href: `/tasks?${scopeQuery}view=completed` },
     ];
     const multi = project === null && new Set([...needs.items, ...running.items].map(one => one.repo ?? "")).size > 1;
     const groups = [];
     for (const ask of ASKS) {
-        const rows = needs.items.filter(one => one.ask === ask).map(one => rowOf(store, one, now, multi, facts.canAnswer));
+        const rows = needs.items.filter(one => one.ask === ask).map(one => rowOf(store, one, now, multi, facts.canAnswer, facts.closedDoor));
         if (rows.length > 0)
             groups.push({ key: ask, label: ASK_LABEL[ask], rows });
     }
     // A waiting row whose ask the index couldn't name still waits on this person: it goes under Decide, never lost.
-    const unnamed = needs.items.filter(one => one.ask === null).map(one => rowOf(store, one, now, multi, facts.canAnswer));
+    const unnamed = needs.items.filter(one => one.ask === null).map(one => rowOf(store, one, now, multi, facts.canAnswer, facts.closedDoor));
     if (unnamed.length > 0) {
         const decide = groups.find(one => one.key === "decide");
         if (decide)
@@ -81,12 +86,15 @@ export function homeView(facts) {
         else
             groups.unshift({ key: "decide", label: ASK_LABEL.decide, rows: unnamed });
     }
-    const live = running.items.filter(one => !one.status.views.includes("needs-you")).map(one => rowOf(store, one, now, multi, facts.canAnswer));
+    const live = running.items.filter(one => !one.status.views.includes("needs-you")).map(one => rowOf(store, one, now, multi, facts.canAnswer, facts.closedDoor));
     if (live.length > 0)
         groups.push({ key: "running", label: "Running", rows: live });
+    const waits = waiting.items.filter(one => one.status.label === "Waiting" && !one.status.views.includes("needs-you")).map(one => rowOf(store, one, now, multi, facts.canAnswer, facts.closedDoor));
+    if (waits.length > 0)
+        groups.push({ key: "waiting", label: "Waiting", rows: waits });
     const perProject = needs.projects.map(one => ({ name: one.repo === null ? "Unplaced" : projectName(one.repo), needs: one.totals["needs-you"] }));
     const any = totals.all > 0 || totals.completed > 0 || (totals.archived ?? 0) > 0;
-    const shown = groups.filter(one => one.key !== "running").reduce((sum, one) => sum + one.rows.length, 0);
+    const shown = groups.filter(one => one.key !== "running" && one.key !== "waiting").reduce((sum, one) => sum + one.rows.length, 0);
     return {
         kind: "home",
         say: homeSentence(totals["needs-you"], perProject, project === null ? null : projectName(project), any),

package/dist/server/http.js

@@ -167,7 +167,7 @@ export function safeReturn(raw) {
  * button can name. Nothing here is a second redirect framework: one
  * same-site path, or "/".
  */
-export const LOGIN_RETURN_PAGES = /^\/(oauth\/authorize|t\/[^/]+|r\/[1-9]\d*|code(?:\/[a-f0-9]{32}(?:\/ship)?)?|review|chat|work|board|projects|routines|recipes|fleet|settings(\/[a-z-]+)?|mode)$/;
+export const LOGIN_RETURN_PAGES = /^\/(oauth\/authorize|t\/[^/]+|r\/[1-9]\d*|code(?:\/[a-f0-9]{32}(?:\/ship)?)?|review|chat|tasks|work|board|projects|routines|recipes|fleet|settings(\/[a-z-]+)?|mode)$/;
 export function loginReturn(raw) {
     const safe = safeReturn(raw);
     if (safe === "/")

package/dist/server/kit.js

@@ -223,7 +223,7 @@ export const card = (options) => html `<a class="k-card" href="${options.href}">
 export function notFound(path, options = {}) {
     return html `${pageHeader("Not found")}<div class="k-nf">${empty({
         title: options.title ?? NOT_FOUND.title(path), text: options.text ?? NOT_FOUND.text,
-        action: acts(btn("Go to Home", { sm: true, href: "/" }), btn("Open Tasks", { sm: true, variant: "ghost", href: "/work" })),
+        action: acts(btn("Go to Home", { sm: true, href: "/" }), btn("Open Tasks", { sm: true, variant: "ghost", href: "/tasks" })),
     })}</div>`;
 }
 /** The Settings frame: Overview and the eight groups, a desk breadcrumb, a phone back header, one column. */

package/dist/server/merge-ready-view.d.ts

@@ -0,0 +1,10 @@
+import type { AssignmentSnapshot } from "../assignment.js";
+import type { MergeReadyView } from "../browser-workspace.js";
+import type { Store } from "../store.js";
+import type { Who } from "./session.js";
+/** The panel for a task page, or null when there is no result to merge yet. */
+export declare function mergeReadyViewOf(store: Store, taskId: string, assignment: AssignmentSnapshot | null | undefined, who: Who, runChecks: {
+    action: string;
+    level: "quick" | "full";
+    returnTo: string;
+} | null, returnTo: string): MergeReadyView | null;

package/dist/server/merge-ready-view.js

@@ -0,0 +1,30 @@
+/** The task page's "Can I merge?" panel (docs/plans/plain-toolroll.md P1.6): the checklist (merge-checklist.ts) with
+ * each blocker's act as the form this page already posts for it. Run checks is the Checks row's own post; Retry is the
+ * failed box's own requeue (the page shows it only where that box would); Ask the agent to fix is Send back: the same
+ * post to /r/<build>/comment with intent=revise that the result's Send back makes, its note prefilled with the blocker
+ * and editable, sealing the same saved notes. Only a signed-in approver gets the forms; anyone else reads the rows. */
+import { randomBytes } from "node:crypto";
+import { checklistFromAssignment } from "../merge-checklist.js";
+import { isRevisionFeedback, revisionBatchOf, revisionSourceOf } from "../result-review.js";
+/** The panel for a task page, or null when there is no result to merge yet. */
+export function mergeReadyViewOf(store, taskId, assignment, who, runChecks, returnTo) {
+    if (assignment == null || assignment.receipt === null)
+        return null;
+    const list = checklistFromAssignment(store, taskId, assignment);
+    const person = who.via === "cookie" && who.role === "approver" && !store.isDemo();
+    const receipt = assignment.receipt;
+    const notes = store.liveDiffComments(receipt.runId).filter(one => isRevisionFeedback(one));
+    return {
+        answer: list.answer, sentence: list.sentence,
+        rows: list.rows.filter(one => one.mark !== "skip").map(one => {
+            const act = one.act;
+            const form = !person || act === null ? null
+                : act.kind === "run-checks" ? runChecks === null || runChecks.action !== `/r/${act.run}/checks` ? null : { kind: "run-checks", ...runChecks }
+                    : act.kind === "retry" ? { kind: "retry" }
+                        : act.run !== receipt.runId ? null
+                            : { kind: "fix", action: `/r/${act.run}/comment`, note: act.note, batch: revisionBatchOf(notes), source: revisionSourceOf(store.getScope(receipt.taskId)?.digest ?? null),
+                                request: randomBytes(16).toString("hex"), returnTo };
+            return { key: one.key, label: one.label, mark: one.mark, say: one.say, act: form };
+        }),
+    };
+}

package/dist/server/pages-assets.d.ts

@@ -3,6 +3,7 @@
  * typefaces, declared in the route table's edge stage and answered before authentication.
  */
 import type { ServerResponse } from "node:http";
+export declare const PWA_WORKER = "// Toolroll \u2014 push only; deliberately NO fetch handler (no offline cache of an authenticated console).\n// Every shape an older worker took, kept for good, then Home, Tasks' Ready and Board views and a task by its number.\nconst SHAPES = [/^\\/next$/, /^\\/review$/, /^\\/system$/, /^\\/routines$/, /^\\/routines\\/[0-9]+$/, /^\\/d\\/[0-9]+$/, /^\\/r\\/[0-9]+$/, /^\\/approve\\/[0-9]+$/,\n  /^\\/$/, /^\\/tasks\\?view=ready$/, /^\\/tasks\\?view=board$/, /^\\/n\\/[1-9][0-9]{0,14}$/];\nself.addEventListener(\"push\", function (event) {\n  var data = {};\n  try { data = event.data ? event.data.json() : {}; } catch (e) {}\n  var body = typeof data.body === \"string\" ? data.body : \"the console needs you\";\n  var tag = typeof data.tag === \"string\" ? data.tag : \"toolroll\";\n  var url = typeof data.url === \"string\" && SHAPES.some(function (s) { return s.test(data.url); }) ? data.url : \"/\";\n  if (typeof data.waiting === \"number\" && data.waiting >= 0 && self.registration.setAppBadge) {\n    // A count, never content. Honest no-op where unsupported.\n    event.waitUntil(self.registration.setAppBadge(Math.floor(data.waiting)).catch(function () {}));\n  }\n  event.waitUntil(self.registration.showNotification(\"Toolroll\", { body: body, tag: tag, data: { url: url }, actions: [{ action: \"open\", title: \"Open\" }] }));\n});\nself.addEventListener(\"message\", function (event) {\n  // The page recomputes on load/focus and is authoritative over any stale\n  // push: {badge: N} sets, {badge: 0} clears.\n  var badge = event.data && typeof event.data.badge === \"number\" ? event.data.badge : null;\n  if (badge === null || !self.registration.setAppBadge) return;\n  if (badge <= 0 && self.registration.clearAppBadge) { self.registration.clearAppBadge().catch(function () {}); return; }\n  self.registration.setAppBadge(Math.floor(badge)).catch(function () {});\n});\n// A tap on the ping and its one \"Open\" action land in the same place.\nself.addEventListener(\"notificationclick\", function (event) {\n  event.notification.close();\n  if (self.registration.clearAppBadge) self.registration.clearAppBadge().catch(function () {});\n  var url = event.notification.data && event.notification.data.url;\n  var target = new URL(SHAPES.some(function (s) { return s.test(url); }) ? url : \"/\", self.location.origin).href;\n  event.waitUntil(clients.matchAll({ type: \"window\" }).then(function (open) {\n    for (var i = 0; i < open.length; i++) { if (open[i].url === target && open[i].focus) return open[i].focus(); }\n    return clients.openWindow(target);\n  }));\n});\n";
 /**
  * Answers one install asset or typeface (GET only; the caller checks the method), with nosniff and its own
  * conservative caching/CSP. False for any other path: unknown names fall through to the router's refusal.

package/dist/server/pages-assets.js

@@ -38,19 +38,21 @@ const PWA_MANIFEST = JSON.stringify({
 // and the tap, only. notificationclick resolves ONLY allow-listed relative
 // paths — the payload URL is data, revalidated, never handed raw to the
 // browser (arc 3 finding 5).
-const PWA_WORKER = `// Toolroll — push only; deliberately NO fetch handler (no offline cache of an authenticated console).
-const SHAPES = [/^\\/next$/, /^\\/review$/, /^\\/system$/, /^\\/routines$/, /^\\/routines\\/[0-9]+$/, /^\\/d\\/[0-9]+$/, /^\\/r\\/[0-9]+$/, /^\\/approve\\/[0-9]+$/];
+export const PWA_WORKER = `// Toolroll — push only; deliberately NO fetch handler (no offline cache of an authenticated console).
+// Every shape an older worker took, kept for good, then Home, Tasks' Ready and Board views and a task by its number.
+const SHAPES = [/^\\/next$/, /^\\/review$/, /^\\/system$/, /^\\/routines$/, /^\\/routines\\/[0-9]+$/, /^\\/d\\/[0-9]+$/, /^\\/r\\/[0-9]+$/, /^\\/approve\\/[0-9]+$/,
+  /^\\/$/, /^\\/tasks\\?view=ready$/, /^\\/tasks\\?view=board$/, /^\\/n\\/[1-9][0-9]{0,14}$/];
 self.addEventListener("push", function (event) {
   var data = {};
   try { data = event.data ? event.data.json() : {}; } catch (e) {}
   var body = typeof data.body === "string" ? data.body : "the console needs you";
   var tag = typeof data.tag === "string" ? data.tag : "toolroll";
-  var url = typeof data.url === "string" && SHAPES.some(function (s) { return s.test(data.url); }) ? data.url : "/next";
+  var url = typeof data.url === "string" && SHAPES.some(function (s) { return s.test(data.url); }) ? data.url : "/";
   if (typeof data.waiting === "number" && data.waiting >= 0 && self.registration.setAppBadge) {
     // A count, never content. Honest no-op where unsupported.
     event.waitUntil(self.registration.setAppBadge(Math.floor(data.waiting)).catch(function () {}));
   }
-  event.waitUntil(self.registration.showNotification("Toolroll", { body: body, tag: tag, data: { url: url } }));
+  event.waitUntil(self.registration.showNotification("Toolroll", { body: body, tag: tag, data: { url: url }, actions: [{ action: "open", title: "Open" }] }));
 });
 self.addEventListener("message", function (event) {
   // The page recomputes on load/focus and is authoritative over any stale
@@ -60,11 +62,12 @@ self.addEventListener("message", function (event) {
   if (badge <= 0 && self.registration.clearAppBadge) { self.registration.clearAppBadge().catch(function () {}); return; }
   self.registration.setAppBadge(Math.floor(badge)).catch(function () {});
 });
+// A tap on the ping and its one "Open" action land in the same place.
 self.addEventListener("notificationclick", function (event) {
   event.notification.close();
   if (self.registration.clearAppBadge) self.registration.clearAppBadge().catch(function () {});
   var url = event.notification.data && event.notification.data.url;
-  var target = new URL(SHAPES.some(function (s) { return s.test(url); }) ? url : "/next", self.location.origin).href;
+  var target = new URL(SHAPES.some(function (s) { return s.test(url); }) ? url : "/", self.location.origin).href;
   event.waitUntil(clients.matchAll({ type: "window" }).then(function (open) {
     for (var i = 0; i < open.length; i++) { if (open[i].url === target && open[i].focus) return open[i].focus(); }
     return clients.openWindow(target);

package/dist/server/pages.js

@@ -52,14 +52,21 @@ import { refuse, regionScript, relativeAge as relativeAgeOf, screen, settingsRow
 import { redirect, respond, safeReturn, SAFETY, taskHref } from "./http.js";
 import { assignmentOf } from "../assignment.js";
 import { assignmentTaskStatusOf } from "../assignment-presentation.js";
-import { githubIdentityOf, homePage, portfolioOverview, startBuilderHtml, workbenchRail } from "./render-pages.js";
+import { githubIdentityOf, homePage, startBuilderHtml } from "./render-pages.js";
+import { retiredRedirect } from "./retired-routes.js";
+import { codeMapStatus, openMap } from "../code-map-read.js";
+import { requestRefresh } from "../code-map-store.js";
+import { codeMapReport } from "../code-map-report.js";
+import { codeMapPage, codeMapReportBlock } from "./render-code-map.js";
+import { FLAKY_WINDOW_DAYS, flakyList, flakyShow } from "../flaky.js";
+import { flakyPage, flakyRowPage } from "./render-flaky.js";
 import { browsePage, githubReposPage, projectHref, projectPage, projectsPage, unknownProject } from "./render-projects.js";
 import { notFound as kitNotFound } from "./kit.js";
 import {} from "./render-pages.js";
 import {} from "../project-outcomes.js";
 import { CHECK_LEVEL_WORDS } from "../check-levels.js";
 import { capsPage } from "./render-settings.js";
-import { decisionAnswerScript, taskBody } from "./render-tasks.js";
+import { consentDoorOf, decisionAnswerScript, taskBody } from "./render-tasks.js";
 import {} from "./session.js";
 import { rereadBrowser } from "./live.js";
 import { homeView } from "./home.js";
@@ -185,16 +192,21 @@ export function createPagesHandlers(runtime) {
     async function homeRedirect(ctx) {
         const { who, response, now, project } = ctx;
         if (who.via !== "cookie" || restricted())
-            return redirect(response, "/work");
+            return redirect(response, "/tasks");
         if (firstRunStepsNow(now) !== null && !store.hasAnyWork())
             return redirect(response, "/chat");
         // One scope for the page and the chrome around it: the project its address names (proved by the router), else all.
         const chrome = chromeFor(project, "none");
         const projects = chrome.projects ?? [];
-        const view = { ...homeView({ store, now, access: workAccess(), evidenceRoot, project, projects, chat: chrome.chat === true, canAnswer: who.role === "approver" }),
+        const closedDoor = (taskId) => {
+            const scope = store.getScope(taskId);
+            const door = consentDoorOf(scope, runtime.routeViewOf(taskId, store.lookupRef(taskId), scope, now, who));
+            return door.open ? null : door;
+        };
+        const view = { ...homeView({ store, now, access: workAccess(), evidenceRoot, project, projects, chat: chrome.chat === true, canAnswer: who.role === "approver", closedDoor }),
             // Until the first result: the welcome's three steps stay one link away.
             setup: firstRunStepsNow(now) !== null ? "/welcome" : null };
-        return sendScreen(response, 200, screen("Home", html `<div data-kit-page><h1>Home</h1><p>${view.say}</p><p><a href="/work">Tasks</a></p></div>`, { chrome, workspace: { view } }));
+        return sendScreen(response, 200, screen("Home", html `<div data-kit-page><h1>Home</h1><p>${view.say}</p><p><a href="/tasks">Tasks</a></p></div>`, { chrome, workspace: { view } }));
     }
     // Search (UI revamp wave B): the ⌘K menu's "See all results". The places come from the page; the tasks here are the
     // most recent ones in view (live and archived), matched on their title and id. Reads only.
@@ -227,76 +239,6 @@ export function createPagesHandlers(runtime) {
         response.end();
         return;
     }
-    async function workbench(ctx) {
-        const { url, who, response, now, project } = ctx;
-        // The fleet under one gaze (attended A1): the rail rolls up the whole
-        // ceiling regardless of the open project — watching is cross-project
-        // by nature; acting happens on task screens that re-prove everything.
-        const admission = admissionList();
-        const snapshot = store.boardScoped(null, now, 200, admission);
-        const rows = snapshot.tasks.filter(facts => facts.repo === null || visible(facts.repo));
-        const cards = rows.map(facts => classify(facts.blockerRepo !== null && !visible(facts.blockerRepo) ? { ...facts, blockerState: null } : facts, now));
-        const attention = cards.filter(card => card.lane === "attention").slice(0, 100);
-        const building = cards.filter(card => card.lane === "building");
-        const waiting = cards.filter(card => card.lane === "waiting");
-        const queued = cards.filter(card => card.lane === "queued");
-        const done = snapshot.done
-            .filter(one => one.repo === null || visible(one.repo))
-            .slice(0, 5)
-            .map(one => ({ taskId: one.taskId, title: one.title, outcome: one.outcome, repo: one.repo }));
-        const selected = url.searchParams.get("t");
-        const rail = workbenchRail({ attention, building, waiting, queued, done, selected, saturated: snapshot.saturated });
-        if (url.searchParams.get("fragment") === "rail") {
-            // The rail alone: same auth, same ceiling, no shell, no scripts.
-            return respond(response, 200, "text/html; charset=utf-8", rail);
-        }
-        // The portfolio overview (arc slice 1a). All-scope hygiene throughout:
-        // admission binds inside every bounded SQL read, and every unlimited
-        // feed's rows pass visible() BEFORE they render or tally — a hidden
-        // project must not leak into a row, a count, or a dollar.
-        const sinceIso = new Date(now.getTime() - 24 * 3_600_000).toISOString();
-        const decisions = store
-            .listDecisionsScoped(null)
-            .filter(one => visible(one.repo ?? null))
-            .slice(0, 10);
-        const approvals = store.scopesAwaitingApproval(null, 10, admission).filter(one => visible(one.repo ?? null));
-        const requeueables = store.listRequeueablesScoped(null, now, 10, admission).filter(one => visible(one.repo ?? null));
-        const cancelledBlockers = store
-            .listCancelledBlockersScoped(null, 10, admission)
-            .filter(one => visible(one.repo ?? null) && visible(one.blockerRepo ?? null));
-        const runs24 = store.runsSinceScoped(sinceIso, null).filter(run => visible(taskRepoOf(run.taskRef)));
-        const live = store.liveClaims(null, now).filter(one => visible(one.repo));
-        const ledger = store
-            .portfolioLedgerScoped(null, sinceIso, 30, admission)
-            .filter(row => visible(row.repo));
-        // Gaps stay project-relative (the roll-up inbox's rule): computed for
-        // the OPEN project only — there is no scope-safe road to another
-        // project's /caps.
-        const gaps = project === null ? [] : computeGaps(store, project, now).filter(gap => gap.unblocks.length > 0).slice(0, 10);
-        const csrf = who.via === "cookie" ? who.session.csrf : "";
-        let detail = html `${portfolioOverview({
-            attention, building, waiting, queued, done, saturated: snapshot.saturated,
-            decisions, approvals, requeueables, cancelledBlockers, gaps,
-            gapsProject: project, runs24, live, ledger, csrf, now,
-        })}<div class="workbench-mobile-rail">${rail}</div>`;
-        if (selected !== null) {
-            const view = taskViewData(selected, who, null);
-            detail = view === null
-                ? html `<p class="workbench-mobile-back"><a href="/workbench">← all work</a></p><div class="card"><p class="meta">No such task — it may have been outside this console's view</p></div>`
-                : html `<p class="workbench-mobile-back"><a href="/workbench">← all work</a></p>${taskBody({ ...view, degraded: "pane" })}`;
-        }
-        return sendScreen(response, 200, screen("portfolio", detail, {
-            chrome: chromeFor(project, "workbench", html `<div id="wb-rail">${rail}</div><p class="meta" id="wb-rail-stamp"></p>`, "all"),
-            functional: {
-                // The decision enhancement rides ONLY the overview: a selected
-                // task's pane may carry a password ceremony, and sensitive
-                // pages gain no new scripts (commit-1 review, finding 1).
-                script: regionScript("wb-rail", "rail") +
-                    (selected === null && decisions.length > 0 ? decisionAnswerScript() : ""),
-                fetches: true,
-            },
-        }));
-    }
     async function ledgerPage(ctx) {
         const { url, who, response, now } = ctx;
         const admitted = admissionList();
@@ -971,11 +913,12 @@ export function createPagesHandlers(runtime) {
      * switches the session's project; its Open project button posts to /projects/select, which proves it again. The
      * name is found among the projects this person may open (projectsSelect's rule: visible here and inside the
      * ceiling); a name it can't see answers exactly like one that doesn't exist. */
-    async function projectPageHandler(ctx) {
-        const { url, who, response, now } = ctx;
+    async function projectFound(ctx, page) {
+        const { url, who, response } = ctx;
         let name = "";
+        const tail = page === "" ? "" : `/${page}`;
         try {
-            name = decodeURIComponent(url.pathname.slice("/projects/".length));
+            name = decodeURIComponent(url.pathname.slice("/projects/".length, url.pathname.length - tail.length));
         }
         catch {
             name = "";
@@ -988,8 +931,37 @@ export function createPagesHandlers(runtime) {
         const open = who.via === "cookie" ? who.session.project : null;
         if (found === null || !(await authorizedProject(liveCeiling(), found.path))) {
             const words = unknownProject(name === "" ? "by that name" : name);
-            return sendScreen(response, 404, screen("Not found", kitNotFound(url.pathname, words), { chrome: chromeFor(open, "projects") }));
+            await sendScreen(response, 404, screen("Not found", kitNotFound(url.pathname, words), { chrome: chromeFor(open, "projects") }));
+            return null;
         }
+        return { ...found, ambiguous: named.length > 1 };
+    }
+    /** A project's flaky tests list and one row's history. Reads only; found exactly as the project's page is. */
+    async function projectFlakyHandler(ctx) {
+        const { url, who, response, now } = ctx;
+        const found = await projectFound(ctx, "flaky");
+        if (found === null)
+            return;
+        const open = who.via === "cookie" ? who.session.project : null;
+        const chrome = chromeFor(open, "projects");
+        const back = projectHref(found.name, found.path, found.ambiguous);
+        const selfHref = projectHref(found.name, found.path, found.ambiguous, "flaky");
+        const key = url.searchParams.get("row");
+        if (key !== null) {
+            const shown = flakyShow(store, found.path, key, now);
+            if (shown === null)
+                return sendScreen(response, 404, screen("Not found", kitNotFound(url.pathname, { title: "Nothing is recorded for that test in this project." }), { chrome }));
+            return sendScreen(response, 200, flakyRowPage(chrome, { name: found.name, repo: found.path, back: selfHref, row: shown.row, history: shown.history, now }));
+        }
+        const days = Number(url.searchParams.get("days") ?? FLAKY_WINDOW_DAYS);
+        return sendScreen(response, 200, flakyPage(chrome, { name: found.name, repo: found.path, back, selfHref, list: flakyList(store, found.path, now, days), now }));
+    }
+    async function projectPageHandler(ctx) {
+        const { who, response, now } = ctx;
+        const found = await projectFound(ctx, "");
+        if (found === null)
+            return;
+        const open = who.via === "cookie" ? who.session.project : null;
         const path = found.path;
         // The tasks that wait on this person or run, from the board's own classification, scoped to this one project.
         const snapshot = store.boardScoped(path, now, 200, null);
@@ -1009,15 +981,61 @@ export function createPagesHandlers(runtime) {
             }
         }
         return sendScreen(response, 200, projectPage(chromeFor(open, "projects"), {
-            name: found.name, path, selfHref: projectHref(found.name, path, named.length > 1), open: open === path, openedAt: found.openedAt,
+            name: found.name, path, selfHref: projectHref(found.name, path, found.ambiguous), open: open === path, openedAt: found.openedAt,
             peek: peekOf(path, now), tasks, moreTasks: Math.max(0, cards.length - tasks.length),
             checks: cookie ? { href: `/settings/checks?repo=${encodeURIComponent(path)}`, level: CHECK_LEVEL_WORDS[projectCheckLevel(store, path).level] } : null,
             pullRequests: cookie ? { href: `/settings/pull-requests?repo=${encodeURIComponent(path)}`, on: publishingOf(store, path).on } : null,
             knowledgeHref: `/settings/knowledge?repo=${encodeURIComponent(path)}`,
+            flakyHref: projectHref(found.name, path, found.ambiguous, "flaky"),
             settingsHref: restricted() ? null : `/settings/project?repo=${encodeURIComponent(path)}`,
             activity, now,
         }));
     }
+    /** The named project's code map address, for this account; null when it isn't one they can see. */
+    async function mapProject(ctx, suffix) {
+        let name = "";
+        try {
+            name = decodeURIComponent(ctx.url.pathname.slice("/projects/".length, -suffix.length));
+        }
+        catch {
+            return null;
+        }
+        const { recent, candidates } = visibleProjects();
+        const named = [...recent.map(one => ({ path: one.path, name: one.name })), ...candidates.map(path => ({ path, name: projectName(path) }))].filter(one => one.name === name);
+        const asked = ctx.url.searchParams.get("path") ?? ctx.posted.get("repo");
+        const found = asked !== null ? named.find(one => one.path === asked) ?? null : named.length === 1 ? named[0] : null;
+        if (found === null || !(await authorizedProject(liveCeiling(), found.path)))
+            return null;
+        return { name: found.name, path: found.path, base: `/projects/${encodeURIComponent(found.name)}/map`, selfHref: projectHref(found.name, found.path, named.length > 1) };
+    }
+    async function codeMapHandler(ctx) {
+        const { url, who, response, now } = ctx;
+        const open = who.via === "cookie" ? who.session.project : null;
+        const found = await mapProject(ctx, "/map");
+        if (found === null)
+            return sendScreen(response, 404, screen("Not found", kitNotFound(url.pathname, unknownProject("by that name")), { chrome: chromeFor(open, "projects") }));
+        const asked = url.searchParams.get("v");
+        const pinned = asked !== null && /^[1-9][0-9]{0,14}$/.test(asked) ? Number(asked) : undefined;
+        const status = codeMapStatus(store, found.path, now, iso => new Date(iso).toISOString().slice(11, 16));
+        const opened = status.state === "off" || status.state === "not-available" ? null : openMap(store, found.path, pinned);
+        const held = opened !== null && opened.ok ? opened : null;
+        const repoed = opened !== null && !opened.ok && pinned !== undefined ? openMap(store, found.path) : null;
+        const map = held ?? (repoed !== null && repoed.ok ? repoed : null);
+        const canRefresh = who.via === "cookie" && who.authority !== "local-owner" && store.accountOf(who.name)?.role === "approver" && store.accountCanAccess(who.name, found.path);
+        return sendScreen(response, 200, codeMapPage(chromeFor(open, "projects"), {
+            name: found.name, repo: found.path, base: found.base, selfHref: found.selfHref, status, map: map?.map ?? null, versionId: map?.version.id ?? null, remoteUrl: store.projectRemote(found.path),
+            q: url.searchParams.get("q"), area: url.searchParams.get("area"), file: url.searchParams.get("file"), canRefresh, now, report: codeMapReportBlock(codeMapReport(store, found.path, now)),
+            said: url.searchParams.get("said"), problem: repoed !== null ? "The map changed. Showing the current one." : url.searchParams.get("problem"),
+        }));
+    }
+    async function codeMapRefreshHandler(ctx) {
+        const { response, who, now } = ctx;
+        const found = await mapProject(ctx, "/map/refresh");
+        if (found === null || !store.accountCanAccess(who.name, found.path))
+            return refuse(response, who, 403, "That project is outside your access.", "/projects");
+        const said = requestRefresh(store, found.path, who.name, now);
+        return redirect(response, `${found.base}?said=${encodeURIComponent(said === "queued" ? "Queued. Main is checked on the next pass." : "Already queued.")}`);
+    }
     async function instanceEdge(ctx) {
         const { request, response, url } = ctx;
         const secret = options.instanceSecret?.() ?? null;
@@ -1135,7 +1153,7 @@ export function createPagesHandlers(runtime) {
         const taskId = url.searchParams.get("task");
         const ref = taskId === null ? null : store.lookupRef(taskId.slice(0, 200));
         if (taskId !== null && (ref === null || ref.repo === null || !visible(ref.repo)))
-            return refuse(response, who, 404, "That task is not available.", "/work");
+            return refuse(response, who, 404, "That task is not available.", "/tasks");
         const shown = ref !== null ? ref.repo : project !== null && visible(project) ? project : null;
         const connected = shown === null ? null : buildersFor(store, shown, now, ref?.assignedRunner ?? null).alive.length > 0;
         return sendScreen(response, 200, screen("Start a builder", startBuilderHtml({
@@ -1148,10 +1166,13 @@ export function createPagesHandlers(runtime) {
         "projects.github-list": projectsGithubList,
         "projects.page": projectsIndex,
         "projects.project": projectPageHandler,
+        "projects.map": codeMapHandler,
+        "projects.map-refresh": codeMapRefreshHandler,
+        "projects.flaky": projectFlakyHandler,
         "home": homeRedirect,
         "search": searchPage,
         "morning": morningAlias,
-        "workbench": workbench,
+        "workbench": async (ctx) => retiredRedirect("workbench", ctx.url, ctx.response),
         "ledger": ledgerPage,
         "activity": activityPage,
         "system": systemScreen,

package/dist/server/render-chat.js

@@ -2,6 +2,8 @@ import { parseFeedbackImage } from "../result-review.js";
 import { assignmentSummaryHtml } from "../assignment-ui.js";
 import {} from "../assignment.js";
 import {} from "../browser-workspace.js";
+import { webCardHtml } from "../card-render.js";
+import { cardOfProposal, cardPlainOf, cardsFirst, isCardProposal } from "../chat-card.js";
 import { closedQuestionReason } from "../decision.js";
 import { CHAT_ACTIONS, sharedActionNeedsReview, sharedActionPayload, sharedActionReviewPath } from "../chat-actions.js";
 import { CHAT_CONTINUITY_SCRIPT } from "../chat-continuity.js";
@@ -209,7 +211,7 @@ export function chatFleetOverview(snapshot, projects, interactive) {
     const briefing = "Brief me on what needs my attention, what is building, and the highest-leverage next action across every project.";
     return html `<section class="card chat-overview" aria-label="live portfolio overview" data-card-kind="fleet-overview"><div class="chat-overview-head"><h2>${projects.length} project${projects.length === 1 ? "" : "s"}</h2>${interactive
         ? postForm("/chat", html `<button type="submit" name="message" value="${briefing}" class="quiet">Brief me</button>`, { attrs: { class: "inline" } })
-        : html `<a href="/board?scope=all" class="chat-overview-link">open board</a>`}</div><div class="chat-overview-stats"><a href="/work?view=needs-you" class="chat-overview-stat attention"><b>${needsYou}${snapshot.attentionCount?.saturated ? "+" : ""}</b><span>need you</span></a><a href="/board?scope=all" class="chat-overview-stat live"><b>${running}</b><span>building</span></a><a href="/board?scope=all&amp;view=order" class="chat-overview-stat"><b>${queued}</b><span>queued</span></a><a href="/work" class="chat-overview-stat"><b>${done}</b><span>finished today</span></a></div>${rows.length === 0 ? html `<p class="chat-overview-clear">${needsYou === 0 && running === 0 ? html `<span class="dot dot-ok"></span>No tasks are waiting and no builds are running.` : html `<a href="/work">Open Tasks to inspect current work.</a>`}</p>` : html `<div class="chat-overview-items">${rows}</div>`}${completedWorkHtml(snapshot, projects.map(project => project.label), snapshot.assignmentStates)}${saturated ? html `<p class="meta chat-overview-note">Some items aren’t shown. Open Work to see more.</p>` : ""}</section>`;
+        : html `<a href="/tasks?view=board&scope=all" class="chat-overview-link">open board</a>`}</div><div class="chat-overview-stats"><a href="/tasks?view=needs-you" class="chat-overview-stat attention"><b>${needsYou}${snapshot.attentionCount?.saturated ? "+" : ""}</b><span>need you</span></a><a href="/board?scope=all" class="chat-overview-stat live"><b>${running}</b><span>building</span></a><a href="/board?scope=all&amp;view=order" class="chat-overview-stat"><b>${queued}</b><span>queued</span></a><a href="/tasks" class="chat-overview-stat"><b>${done}</b><span>finished today</span></a></div>${rows.length === 0 ? html `<p class="chat-overview-clear">${needsYou === 0 && running === 0 ? html `<span class="dot dot-ok"></span>No tasks are waiting and no builds are running.` : html `<a href="/tasks">Open Tasks to inspect current work.</a>`}</p>` : html `<div class="chat-overview-items">${rows}</div>`}${completedWorkHtml(snapshot, projects.map(project => project.label), snapshot.assignmentStates)}${saturated ? html `<p class="meta chat-overview-note">Some items aren’t shown. Open Work to see more.</p>` : ""}</section>`;
 }
 /**
  * The lead's project rail: one bounded pulse per admitted project, plus
@@ -544,6 +546,17 @@ export function proposalCardParts(view, inert, decision, returnTo = null) {
             card: { id: view.id, kind: view.kind, label: "Question closed", state: view.state, body: htmlString(body), said: null, links: [], primary: null, dismissable: false, note: null },
         };
     }
+    // A Toolroll card: data to read, with its fixed links. It confirms nothing, so it waits on nobody.
+    if (isCardProposal(view)) {
+        const shown = cardOfProposal(view);
+        const body = shown === null ? html `<p>${cardPlainOf(view)}</p>` : webCardHtml(shown);
+        const links = shown?.buttons.map(one => ({ label: one.label, href: one.path })) ?? [];
+        const label = shown?.title ?? "Card";
+        return {
+            html: html `<article class="card proposal proposal-data" data-card-kind="data"><div class="proposal-body"><h3>${label}</h3>${body}</div>${links.length === 0 ? "" : html `<footer class="proposal-actions">${joinHtml(links.map(one => html `<a class="button-link" href="${one.href}">${one.label}</a>`))}</footer>`}</article>`,
+            card: { id: view.id, kind: view.kind, label, state: "pending", body: htmlString(body), said: null, links, primary: null, dismissable: false, note: null, data: true },
+        };
+    }
     const presentations = {
         task: { label: payload["report"] === true ? "Scout investigation" : "New task", action: "file task", icon: html `<path d="M12 5v14"/><path d="M5 12h14"/>` },
         next: { label: "Queue priority", action: "move to front", icon: html `<path d="M12 19V5"/><path d="m5 12 7-7 7 7"/>` },
@@ -560,7 +573,7 @@ export function proposalCardParts(view, inert, decision, returnTo = null) {
             icon: html `<path d="M14.7 6.3a4 4 0 0 0-5 5L4 17l3 3 5.7-5.7a4 4 0 0 0 5-5l-2.4 2.4-3-3z"/>`,
         },
         agents: { label: "Agents change", action: "change agents", icon: html `<circle cx="12" cy="12" r="3"/><path d="M12 2v3"/><path d="M12 19v3"/><path d="m4.9 4.9 2.2 2.2"/><path d="m16.9 16.9 2.2 2.2"/><path d="M2 12h3"/><path d="M19 12h3"/><path d="m4.9 19.1 2.2-2.2"/><path d="m16.9 7.1 2.2-2.2"/>` },
-        review: { label: text("operation") === "revise" ? "Changes to make" : "Note for later", action: text("operation") === "revise" ? "Request changes" : "Save for later", icon: html `<path d="M4 5h16v12H8l-4 3z"/>` },
+        review: { label: text("operation") === "revise" ? "Changes to make" : "Note for later", action: text("operation") === "revise" ? "Send back" : "Save for later", icon: html `<path d="M4 5h16v12H8l-4 3z"/>` },
         control: { label: "Open control", action: "Open", icon: html `<path d="M5 12h14m-6-6 6 6-6 6"/>` },
         action: { label: text("title") || "Review action", action: sharedActionPayload(payload) ? CHAT_ACTIONS[sharedActionPayload(payload).operation].label : "Unavailable", icon: html `<path d="M5 12h14m-6-6 6 6-6 6"/>` },
         task_action: { label: payload["operation"] === "stop" ? "Stop task?" : payload["operation"] === "resume" ? "Resume task?" : "Task update", action: isChatTaskAction(payload["operation"]) ? CHAT_TASK_ACTIONS[payload["operation"]].label : "Unavailable", icon: html `<path d="M5 12h14m-6-6 6 6-6 6"/>` },
@@ -855,7 +868,7 @@ export function leadBrowserMessages(rows, back, target = { task: null, project:
         activity: message.activity, createdAt: message.createdAt,
         ...(() => {
             // Under the lead's message only, as the server-rendered thread does: the person's message shares the turn.
-            const parts = message.turn === null || message.role === 'operator' ? [] : rows.proposals.filter(one => one.turn === message.turn)
+            const parts = message.turn === null || message.role === 'operator' ? [] : cardsFirst(rows.proposals.filter(one => one.turn === message.turn))
                 .map(one => leadProposalCardParts(one, rows.pending !== null, rows.decisions.get(typeof one.payload['decision'] === 'number' ? one.payload['decision'] : -1) ?? null, back));
             return { cardsHtml: htmlString(joinHtml(parts.map(one => one.html))), cards: parts.map(one => one.card) };
         })(),

package/dist/server/render-code-map.d.ts

@@ -0,0 +1,30 @@
+import { type MapStatus } from "../code-map-read.js";
+import { type CodeMapReport } from "../code-map-report.js";
+import type { CodeMap } from "../code-map-shape.js";
+import { type Html } from "../html.js";
+import { type Chrome, type Screen } from "./chrome.js";
+export declare const LIMITS_WORDS: {
+    readonly system: "Limits enforced by the system.";
+    readonly checked: "Limits checked by Toolroll every 250 ms.";
+};
+export type CodeMapPage = {
+    name: string;
+    repo: string;
+    base: string;
+    selfHref: string;
+    status: MapStatus;
+    map: CodeMap | null;
+    versionId: number | null;
+    remoteUrl: string | null;
+    q: string | null;
+    area: string | null;
+    file: string | null;
+    canRefresh: boolean;
+    said: string | null;
+    problem: string | null;
+    now: Date;
+    report: Html | null;
+};
+/** "Builds with and without the map": read by people; nothing switches on it. */
+export declare function codeMapReportBlock(report: CodeMapReport): Html | null;
+export declare function codeMapPage(chrome: Chrome, data: CodeMapPage): Screen;