toolroll 0.9.93 → 0.9.95

package/dist/server/settings.js

@@ -2,11 +2,15 @@ import { PASSWORDLESS_TRADE, passwordlessSetting, setPasswordless } from "../pas
 import { ACP_AGENTS, isKeyedProvider } from "../acp-agents.js";
 import { LIVE_VIEW_CONSENT, liveViewConsentDigest, setLiveCommands } from "../live-detail.js";
 import { CONSOLE_FORMS, readForm } from "../contracts/console-api.js";
+import { clearFallbackChain, parseEntry, setFallbackChain, setPaidGrant } from "../fallback.js";
 import { galleryTemplateOf } from "../flow-gallery.js";
 import { finishGoogleConsent, GOOGLE_CALLBACK } from "../google-mail.js";
 import { kitInstalled, kitOf } from "../kits.js";
 import { CONNECT_CALLBACK, connectionsOf, finishConnect, localConnectOf, oneClickOf } from "../mcp-connect.js";
 import { learningView } from "../project-learning.js";
+import { memoryUseOf } from "../memory-use.js";
+import { afterwardsWords, lessonNoteOf, noteAfterwards } from "../lesson-notes.js";
+import { decideTidy, disabledLessons, listTidy, proposeTidy, restoreDecision, restoreLesson, restoreReference, undoableMerges, unmergeDecisions } from "../memory-tidy.js";
 import { skillTestResult } from "../project-skills.js";
 import { discoverTools, projectToolsOf } from "../project-tools.js";
 import { lookProjectMcp } from "../folder-look.js";
@@ -48,6 +52,7 @@ import { releaseApprovalSetting, setReleaseApproval } from "../release-auto.js";
 import { backupHtml } from "../backup-ui.js";
 import { BACKUP_EVERY_HOURS, backupFolderOf, backupNow, checkBackupFolder, defaultBackupFolder, MAX_KEEP } from "../backup.js";
 import { projectBatchChecks, setProjectBatchChecks } from '../batch-policy.js';
+import { fastStartOn, setFastStart } from '../fast-start.js';
 import { ALL_PROJECTS as CHAT_APPROVAL_ALL, chatApprovalWords, setChatApproval } from "../chat-approval.js";
 import { ChatState } from "../chat-delivery-state.js";
 import { checkSettingsHtml } from '../check-levels-ui.js';
@@ -67,20 +72,20 @@ import { disconnectGoogle, googleConnected, googleConsent, readGoogleMail, saveG
 import { integrationsHtml } from "../integrations-ui.js";
 import { setYouiyouxIntake } from "../youiyoux-intake.js";
 import { clearProviderKey, keyStatus, plausibleKey, PROVIDER_KEY_ENV, readAuthMode, readProviderKey, saveProviderKey, setAuthMode, SUBSCRIPTION_CAPABLE, verdictWords, verifyProviderKey } from "../keys.js";
-import { decisionsHtml, framedSection, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml } from "../knowledge-ui.js";
+import { cleanUpHtml, decisionsHtml, framedSection, knowledgeHtml, MEMORY_INTRO, memorySearchHtml, proposalsHtml, referenceRestoreHtml, restoreHtml } from "../knowledge-ui.js";
 import { aboutYouOf, checkAboutYou, saveAboutYou } from "../lead-about.js";
 import { cancelCommitment, conditionWords, openCommitments } from '../lead-commitments.js';
 import { checkLeadIdentity, leadIdentityOf } from "../lead-identity.js";
 import { mailboxAccess, readThroughImap } from "../mailbox.js";
 import { startConnect } from "../mcp-connect.js";
-import { decideProposal, listProposals, memoryStatus } from "../memory-pass.js";
+import { decideProposal, defaultTidyAnalyzer, listProposals, memoryStatus } from "../memory-pass.js";
 import { checkModels, isNewModel, modelOptions, modelWords, RUNTIME_TOOLS, runtimeStates, seenModels, setWatch, updateRuntime, watchState } from "../model-catalog.js";
 import { modelsHtml, modelsScript } from "../models-ui.js";
 import { acceptSuggestion, dismissSuggestion, grantWords, keepRule, modelName, ruleWords, rulesOf, setSuggestModels, startTrial, stopTrial, suggestionsFor, suggestionWords, suggestModelsOn, trialOffersFor, trialOfferWords, trialsOf, trialWords, turnOffRule } from "../route-rules.js";
 import { ALL_SLOTS, applyModelChoices, browserWords, checkScope, DEFAULT_PRESET, defaultAgentOf, fillDefaultRouting, isPresetName, newerModels, PRESETS, presetChange, presetInUse, previewModelChange, recentRuns, rowAt, slotKey, SLOTS, slotWords, stateDigest, switchChange } from "../model-choices.js";
 import { HEADROOM_FIVE_HOUR_LIMIT, HEADROOM_WEEKLY_LIMIT, exactModelId } from "../phase-routing.js";
 import { RISKY_MEANS, SIZE_MEANS, SIZING_CLAUDE_MODEL } from "../task-sizing.js";
-import { CHAT_APPROVE_ALL, MODE_MAX_DAYS, modeDigestOf, modeTermsJson, modeWords, presetTerms } from "../modes.js";
+import { CHAT_APPROVE_ALL, CHECK_REPAIR_LIMIT, MODE_MAX_DAYS, modeDigestOf, modeTermsJson, modeWords, presetTerms } from "../modes.js";
 import { monitoringChange, readMonitoring, saveMonitoring } from "../monitoring-settings.js";
 import { monitoringHtml, signingSecretHtml } from "../monitoring-ui.js";
 import { openRouterPickerScript } from "../openrouter-models.js";
@@ -93,6 +98,7 @@ import { isCheckAccess, signInsUnavailableWords, widerThan } from "../check-acce
 import { LOCAL_MODE_CONFINES, localModeOn } from "../local-owner.js";
 import { parseMachLookup, parseReadDeny } from "../project-sandbox.js";
 import { projectDeleteConfirmHtml, projectSettingsHtml } from "../project-delete-ui.js";
+import { endHoldout, setCodeMapSwitch } from "../code-map-acts.js";
 import { deleteProject, holdingsWords } from "../project-delete.js";
 import { applySavedKnowledge, changeKnowledge, knowledgeVersion, knowledgeView } from "../project-knowledge.js";
 import { changeLearning } from "../project-learning.js";
@@ -128,8 +134,8 @@ import { lastSweep, saveSweep, storageSweepOff } from "../storage-sweep.js";
 import { sweepSchedule } from "../storage-sweep-schedule.js";
 import { storageHtml } from "../storage-ui.js";
 import { landedSummary } from "../landed-cleanup.js";
-import { bytesWords, parseCleanup } from "../storage.js";
-import { isDigestTime, liveBackupState, localModeOf, RESULT_SCREENSHOTS, setLiveBackupSettings, setLocalModeOff } from "../store.js";
+import { bytesWords, parseCleanup, parseIdle } from "../storage.js";
+import { checkoutIdle, isDigestTime, liveBackupState, setCheckoutIdle, localModeOf, RESULT_SCREENSHOTS, setLiveBackupSettings, setLocalModeOff } from "../store.js";
 import { defaultLiveFolder, liveFolderOf, liveFolderProblem } from "../live-backup.js";
 import { LIVE_EVERY } from "../backup-ui.js";
 import { checkTeamsCredentials, clearTeamsCredentials, loadTeamsCredentials, saveTeamsCredentials, TeamsError } from "../teams-api.js";
@@ -353,9 +359,34 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
             return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
         const selector = projectPicker("/settings/project", projects.map(repo => ({ repo, name: projectName(repo) })), chosen);
         const notice = { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") };
-        const content = chosen === "" ? html `${notice.said ? infoLine(notice.said) : ""}${empty({ title: "No projects yet.", action: btn("Add a project", { sm: true, href: "/projects" }) })}` : (projectSettingsHtml({ ...projectViewOf(chosen, who), remoteUrl: store.projectRemote(chosen) }, notice));
+        const content = chosen === "" ? html `${notice.said ? infoLine(notice.said) : ""}${empty({ title: "No projects yet.", action: btn("Add a project", { sm: true, href: "/projects" }) })}` : (projectSettingsHtml({ ...projectViewOf(chosen, who), remoteUrl: store.projectRemote(chosen), codeMap: codeMapView(chosen, who, ctx.now) }, notice));
         return sendScreen(response, 200, screen("Project", settingsSubPage("projects", "Project", html `${selector}${content}`), { chrome: chromeFor(chosen || null, "settings") }));
     }
+    /** The project's code map section: the switch, and the holdout while new builds are still being enrolled. */
+    function codeMapView(repo, who, now) {
+        const row = store.handle.prepare("SELECT code_map, code_map_enroll_until FROM project WHERE path = ?").get(repo);
+        const until = typeof row?.["code_map_enroll_until"] === "string" ? row["code_map_enroll_until"] : null;
+        return { on: row === undefined || Number(row["code_map"]) === 1, enrollUntil: until !== null && Date.parse(until) > now.getTime() ? until : null,
+            canEndHoldout: who.via === "cookie" && who.authority !== "local-owner", href: `/projects/${encodeURIComponent(projectName(repo))}/map` };
+    }
+    function codeMapAct(kind) {
+        return async (ctx) => {
+            const { response, now, posted } = ctx;
+            const who = browserCaller(ctx.who);
+            const repo = posted.get("repo") ?? "";
+            const back = (key, words) => redirect(response, `/settings/project?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}#code-map`);
+            if (posted.getAll("repo").length !== 1 || posted.getAll("on").length > 1)
+                return back("problem", "That form was sent twice over. Nothing changed.");
+            if (!consoleProjects().includes(repo) || !store.accountCanAccess(who.name, repo))
+                return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
+            const door = who.authority === "local-owner" ? { kind: "local-owner", actor: who.name } : { kind: "person", person: modelsAuthority(who, "session") };
+            const on = posted.get("on") === "1";
+            const done = kind === "switch" ? setCodeMapSwitch(store, door, repo, on, now) : endHoldout(store, door, repo, now);
+            if (!done.ok)
+                return back("problem", done.problem);
+            return back("said", kind === "holdout" ? "The holdout has ended. Builds already enrolled keep their arm." : on ? "The code map is on." : "The code map is off.");
+        };
+    }
     // v102: Settings → Approvals and safety: the defaults for new tasks, a project's separation of duties and release
     // approval, and the way to its operating mode. Anyone who sees the project reads them; each form's own route decides
     // who may change it (an approver for the defaults and releases, an instance operator for the rules).
@@ -467,9 +498,9 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const measured = lastChecks.known("storage");
         const check = postForm("/settings/storage/check", btn("Check now", { sm: true, type: "submit" }));
         if (measured === null) {
-            return sendScreen(response, 200, screen("Storage", settingsSubPage("system", "Storage", settingsSection({ id: "storage", title: "Checkouts not measured yet", lead: "Toolroll measures the checkouts in the background. Check now measures them at once.", body: check })), { chrome: chromeFor(project, "settings") }));
+            return sendScreen(response, 200, screen("Storage", settingsSubPage("system", "Storage", settingsSection({ id: "storage", title: "Task folders not measured yet", lead: "Toolroll measures the task folders in the background. Check now measures them at once.", body: check })), { chrome: chromeFor(project, "settings") }));
         }
-        const plan = { ...measured.value, cleanup: store.checkoutCleanup() };
+        const plan = { ...measured.value, cleanup: store.checkoutCleanup(), idle: checkoutIdle(store) };
         const sweep = { last: lastSweep(store), off: storageSweepOff(), schedule: sweepSchedule(store, now) };
         return sendScreen(response, 200, screen("Storage", settingsSubPage("system", "Storage", html `${(storageHtml({ plan, csrf: who.session.csrf, sweep, landed: landedSummary(store), measured: html `<div class="k-acts"><span class="k-note">Measured ${new Date(measured.at).toLocaleTimeString("en-US", { hour: "numeric", minute: "2-digit" })}</span>${check}</div>` }, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }))}`), { chrome: chromeFor(project, "settings") }));
     }
@@ -499,7 +530,7 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
         const quick = liveQuickCommand(store, repo);
         const body = (checkSettingsHtml({ repo, name: projectName(repo), csrf: who.session.csrf, canChange: who.role === "approver" && !store.isDemo(),
             level: projectCheckLevel(store, repo).level, full: store.liveVerifyCommand(repo), quick, suggestion: quick === null ? suggestQuickCommand(repo) : null,
-            review: (({ on, source }) => ({ on, source }))(store.reviewSwitch(repo, clock())), batch: { on: projectBatchChecks(store, repo).on },
+            review: (({ on, source }) => ({ on, source }))(store.reviewSwitch(repo, clock())), batch: { on: projectBatchChecks(store, repo).on }, fast: { on: fastStartOn(store, repo) },
             said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }));
         return sendScreen(response, 200, screen("Checks", settingsSubPage("projects", "Checks", html `${body}`), { chrome: chromeFor(project, "projects") }));
     }
@@ -577,21 +608,25 @@ ${connectionHtml(asked, connection, task)}${command === null ? "" : html `<p>On
                     const revision = Number(url.searchParams.get('version'));
                     const previous = knowledgeVersion(store, chosen, who.name, revision);
                     const restore = csrf && who.role === 'approver' && revision !== view.revision ? postForm('/settings/knowledge/change', html `<p>Replaces knowledge for future tasks. Existing runs keep their saved context.</p><button>Restore version ${revision}</button>`, { attrs: { class: 'knowledge' }, hidden: { repo: chosen, identity: view.identity, revision: String(view.revision), action: 'restore', restore: String(revision) } }) : '';
-                    return sendScreen(response, 200, screen('Knowledge history', settingsSubPage('agents', `Knowledge · version ${revision}`, html `<p class="k-note"><a class="k-link" href="/settings/knowledge?repo=${encodeURIComponent(chosen)}">Current knowledge</a></p>${knowledgeHtml({ ...view, knowledge: previous, history: [], stale: null }, '', false)}${restore}`), { chrome: chromeFor(chosen, 'settings') }));
+                    return sendScreen(response, 200, screen('Knowledge history', settingsSubPage('agents', `Knowledge · version ${revision}`, html `<p class="k-note"><a class="k-link" href="/settings/knowledge?repo=${encodeURIComponent(chosen)}">Current knowledge</a></p>${knowledgeHtml({ ...view, knowledge: previous, history: [], stale: null }, '', false)}${restore}${referenceRestoreHtml(chosen, revision, previous.references.filter(ref => !view.knowledge.references.some(now => now.id === ref.id)), !!csrf && who.role === 'approver')}`), { chrome: chromeFor(chosen, 'settings') }));
                 }
                 const query = (url.searchParams.get('q') ?? '').slice(0, 1000);
-                const result = query.trim() ? repositoryContextRead({ repo: chosen, query, mode: url.searchParams.get('mode') === 'impact' ? 'impact' : 'search', cacheRoot: join(dirname(evidenceRoot), 'repository-context') }) : null;
+                const result = query.trim() ? repositoryContextRead({ repo: chosen, project: chosen, query, mode: url.searchParams.get('mode') === 'impact' ? 'impact' : 'search', cacheRoot: join(dirname(evidenceRoot), 'repository-context') }) : null;
                 const memoryQuery = (url.searchParams.get('memory') ?? '').slice(0, 300);
                 const hits = memoryQuery.trim() ? searchMemory(store, { actor: who.name, repos: [chosen], query: memoryQuery, limit: 20 }) : null;
                 let proposals = html ``;
                 try {
-                    proposals = (proposalsHtml(chosen, listProposals(store, chosen), memoryStatus(store, chosen, who.name), csrf, who.role === 'approver'));
+                    proposals = (proposalsHtml(chosen, listProposals(store, chosen), memoryStatus(store, chosen, who.name), csrf, who.role === 'approver', who.name));
                 }
                 catch {
                     proposals = html ``;
                 }
-                content = html `<p class="meta">${MEMORY_INTRO}</p>${memorySearchHtml(chosen, memoryQuery, hits)}${proposals}${(decisionsHtml(chosen, listDecisions(store, chosen, who.name, { limit: 50 }), csrf, who.role === 'approver'))}\
-${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf : '')}${knowledgeHtml(view, csrf, who.role === 'approver')}\
+                const use = memoryUseOf(store, chosen);
+                const manageMemory = who.role === 'approver' && csrf !== '';
+                const retired = listDecisions(store, chosen, who.name, { status: 'all', limit: 100 }).filter(d => d.status !== 'active');
+                content = html `<p class="meta">${MEMORY_INTRO}</p>${memorySearchHtml(chosen, memoryQuery, hits)}${proposals}${cleanUpHtml(chosen, listTidy(store, chosen), manageMemory)}${(decisionsHtml(chosen, listDecisions(store, chosen, who.name, { limit: 50 }), csrf, who.role === 'approver', undefined, undefined, use, d => { const after = noteAfterwards(store, d); return after === null ? null : afterwardsWords(after); }))}\
+${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf : '')}${knowledgeHtml(view, csrf, who.role === 'approver', undefined, undefined, use)}\
+${restoreHtml(chosen, retired, undoableMerges(store, chosen), disabledLessons(store, chosen), manageMemory)}\
 <details class="knowledge frame"><summary class="frame-head">Learned lessons</summary><div class="frame-panel">${(learningHtml(learningView(store, evidenceRoot, chosen, who.name), csrf, who.role === 'approver'))}</div></details>`;
             }
             catch {
@@ -803,11 +838,11 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const { url, who, response } = ctx;
         const provider = url.pathname.split("/")[2];
         if (!isProviderId(provider))
-            return refuse(response, who, 400, "unknown provider", "/work");
+            return refuse(response, who, 400, "unknown provider", "/tasks");
         if (who.role !== "approver")
-            return refuse(response, who, 403, "Only an operator can resume an agent's work.", "/work");
+            return refuse(response, who, 403, "Only an operator can resume an agent's work.", "/tasks");
         liftAuthPause(store, provider, "person", who.name, clock());
-        return redirect(response, "/work");
+        return redirect(response, "/tasks");
     }
     // The update notice is dismissed per browser and per version: a newer release shows it again.
     // Cockpit B2: Forget — nothing verified on this session before now counts as fresh (a CSRF-checked post, like every act).
@@ -1235,16 +1270,20 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         // What the page shows next is measured again after the change.
         const said = sayTo(response, "/settings/storage");
         const back = async (kind, words) => { await measureStorage(databaseFile).catch(() => undefined); return said(kind, words); };
-        const what = op === "clean" ? "clean up" : op === "discard" ? "discard a checkout" : "change checkout cleanup";
+        const what = op === "clean" ? "clean up" : op === "discard" ? "discard a task folder" : "change automatic cleanup";
         if (!authenticateApprover(who, body.get("password") ?? "").ok)
             return back("problem", `Enter your Toolroll password to ${what}.`);
         if (op === "cleanup") {
             const cleanup = parseCleanup(body.get("cleanup") ?? "");
             if (cleanup === undefined)
-                return back("problem", "Choose when a finished task's checkout is removed.");
-            const before = store.checkoutCleanup();
+                return back("problem", "Choose when a finished task's folder is removed.");
+            const idle = body.get("idle") === null ? checkoutIdle(store) : parseIdle(body.get("idle") ?? "");
+            if (idle === undefined)
+                return back("problem", "Choose when an idle task's folder is removed.");
+            const same = cleanup === store.checkoutCleanup() && idle === checkoutIdle(store);
             store.setCheckoutCleanup(cleanup, who.name, now);
-            return back("said", cleanup === before ? "Nothing changed." : "Saved.");
+            setCheckoutIdle(store, idle, who.name, now);
+            return back("said", same ? "Nothing changed." : "Saved.");
         }
         const pool = storagePool(databaseFile);
         if (op === "clean") {
@@ -1256,7 +1295,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
                 return back("problem", "What a clean-up would remove changed since you looked. Check the list again.");
             const done = await cleanCheckouts(store, pool, clock, { manual: true, actor: who.name, only: new Set(plan.go.map(one => one.path)) });
             saveSweep(store, { at: clock().toISOString(), source: "manual", actor: who.name, parts: [{ kind: "checkouts", count: done.removed.length, bytes: done.freed, failed: done.kept.filter(one => one.why === "git refused").length, items: done.removed.slice(0, 20).map(one => one.path) }] });
-            return back("said", done.removed.length === 0 ? "Nothing was removed: those checkouts are no longer ready to go." : `Removed ${done.removed.length} checkout${done.removed.length === 1 ? "" : "s"}, about ${bytesWords(done.freed)}. Their branches stay.`);
+            return back("said", done.removed.length === 0 ? "Nothing was removed: those task folders are no longer ready to go." : `Removed ${done.removed.length} task folder${done.removed.length === 1 ? "" : "s"}, about ${bytesWords(done.freed)}. Their branches stay.`);
         }
         const done = await discardCheckout(store, pool, body.get("path") ?? "", now, who.name);
         return done.ok ? back("said", `Discarded, about ${bytesWords(done.bytes)}. Its branch stays.`) : back("problem", done.message);
@@ -1331,6 +1370,13 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
             const changed = setProjectBatchChecks(store, repo, on, who.name, now);
             return back("said", !changed.changed ? "Saved." : on ? "Batch checks are on." : "Batch checks are off.");
         }
+        // Small tasks start right away: a person's own logged settings act, behind this form's password.
+        if (act === "small-tasks") {
+            const on = body.get("on") === "1";
+            store.upsertProject(repo, projectName(repo), now);
+            setFastStart(store, repo, on, who.name, now);
+            return back("said", on ? "Small tasks start right away." : "Small tasks wait for a plan.");
+        }
         if (act === "level") {
             const level = body.get("level");
             if (!isCheckLevel(level))
@@ -1736,7 +1782,7 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         const repo = body.get('repo') ?? '';
         if (!visible(repo) || !store.accountCanAccess(who.name, repo) || !consoleProjects().includes(repo))
             return refuse(response, who, 403, 'That project is outside your access.', '/settings/knowledge');
-        const refreshed = await repositoryContext({ repo, query: '', refresh: true, cacheRoot: join(dirname(evidenceRoot), 'repository-context') });
+        const refreshed = await repositoryContext({ repo, project: repo, query: '', refresh: true, cacheRoot: join(dirname(evidenceRoot), 'repository-context') });
         return sendScreen(response, refreshed.index.status === 'ready' ? 200 : 503, screen('Project context', settingsSubPage("agents", "Project context", html `<p>${refreshed.index.status === 'ready' ? 'Code index refreshed.' : 'The index is unavailable. Source search still works.'}</p><a class="button-link" href="/settings/knowledge?repo=${encodeURIComponent(repo)}">Open knowledge</a>`), { chrome: chromeFor(repo, 'settings') }));
     }
     async function knowledgeProposal(ctx) {
@@ -1755,6 +1801,64 @@ ${repositoryContextHtml(chosen, query, result, who.role === 'approver' ? csrf :
         }
         return redirect(response, `/settings/knowledge?repo=${encodeURIComponent(repo)}&saved=1`);
     }
+    /** A lesson note: a person's own words, accepted as a decision through the one proposal writer, or rejected. */
+    async function knowledgeNote(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.knowledgeNote);
+        const repo = body.get('repo') ?? '', decision = body.get('decision') ?? '';
+        if (!visible(repo) || !consoleProjects().includes(repo))
+            return refuse(response, who, 403, 'That project is outside your access.', '/settings/knowledge');
+        if (!['accept', 'reject'].includes(decision) || !/^[0-9]{1,12}$/.test(body.get('proposal') ?? ''))
+            return refuse(response, who, 400, 'Choose accept or reject for one note.', '/settings/knowledge');
+        const id = Number(body.get('proposal'));
+        try {
+            if (lessonNoteOf(store, id) === null)
+                throw Error('That note is unavailable.');
+            decideProposal(store, { repo, actor: who.name, id, decision: decision, claim: body.get('claim') ?? '' }, now);
+        }
+        catch (error) {
+            return sendScreen(response, 409, screen('Knowledge', settingsSubPage("agents", "Knowledge", html `<p role="alert">${error instanceof Error ? error.message : 'That note could not be decided.'}</p><p><a class="k-link" href="/settings/knowledge?repo=${encodeURIComponent(repo)}">Back to Knowledge</a></p>`), { chrome: chromeFor(repo, 'settings') }));
+        }
+        return redirect(response, `/settings/knowledge?repo=${encodeURIComponent(repo)}&saved=1`);
+    }
+    /** Project memory's clean-up: a person's request, accepting or rejecting one proposal, and restores. Every writer
+     * proves the person inside its own transaction. */
+    async function knowledgeTidy(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.knowledgeTidy);
+        const repo = body.get('repo') ?? '', action = body.get('action') ?? '', target = body.get('target') ?? '';
+        if (!visible(repo) || !consoleProjects().includes(repo))
+            return refuse(response, who, 403, 'That project is outside your access.', '/settings/knowledge');
+        const back = `/settings/knowledge?repo=${encodeURIComponent(repo)}`;
+        const said = (id) => /^[0-9]{1,12}$/.test(id) ? Number(id) : null;
+        // Only a browser session is a person's proof here; the writers refuse anything else.
+        const proof = who.via === 'cookie' ? 'session' : 'remote-token';
+        try {
+            if (action === 'propose')
+                await proposeTidy(store, { repo, actor: who.name, analyzer: defaultTidyAnalyzer(store, store.databaseFile() === null ? {} : { configDir: dirname(store.databaseFile()) }) }, now);
+            else if (action === 'accept' || action === 'reject') {
+                const id = said(body.get('proposal') ?? '');
+                if (id === null)
+                    throw Error('Choose one proposal.');
+                const choice = body.get('choice'), claim = body.get('claim'), why = body.get('why');
+                decideTidy(store, evidenceRoot, { repo, actor: who.name, id, decision: action, proof, ...(choice === null ? {} : { choice }), ...(claim === null ? {} : { claim }), ...(why === null ? {} : { why }) }, now);
+            }
+            else if (action === 'restore' && said(target) !== null)
+                restoreDecision(store, { repo, actor: who.name, id: said(target), proof }, now);
+            else if (action === 'unmerge' && said(target) !== null)
+                unmergeDecisions(store, { repo, actor: who.name, merge: said(target), proof }, now);
+            else if (action === 'readopt' && said(target) !== null)
+                restoreLesson(store, evidenceRoot, { repo, actor: who.name, id: said(target), proof }, now);
+            else if (action === 'reference' && /^[a-f0-9]{20}$/.test(target) && said(body.get('revision') ?? '') !== null)
+                restoreReference(store, { repo, actor: who.name, id: target, fromRevision: said(body.get('revision') ?? ''), proof }, now);
+            else
+                return refuse(response, who, 400, 'Choose one clean-up action.', back);
+        }
+        catch (error) {
+            return sendScreen(response, 409, screen('Knowledge', settingsSubPage("agents", "Knowledge", html `<p role="alert">${error instanceof Error ? error.message : 'That could not be done.'}</p><p><a class="k-link" href="${back}">Back to Knowledge</a></p>`), { chrome: chromeFor(repo, 'settings') }));
+        }
+        return redirect(response, `${back}&saved=1`);
+    }
     async function knowledgeDecision(ctx) {
         const { response, now, posted } = ctx;
         const who = browserCaller(ctx.who);
@@ -2358,19 +2462,17 @@ ${postForm("/settings/chat-approval/save", html `\
             planAuto: body.get("plan-auto") === "1",
             reviewAuto: false,
             reviewRetryAuto: false,
-            // The repair-auto grant is the SAME rule (v40): unchecked stays
-            // false on every preset — only the explicit box grants it, and the
-            // attempt cap it carries is meaningless without it.
-            repairAuto: false,
-            repairMaxAttempts: 0,
+            // Repairing failed checks: only the explicit choice grants it, with the limit it signs (check-repair.ts).
+            repairAuto: body.get("repair-auto") === "1",
+            repairMaxAttempts: body.get("repair-auto") === "1" ? CHECK_REPAIR_LIMIT : 0,
             // Approving from the paired chat: only the explicit choice grants it, naming every chat app it covers (a grant
             // signed before it named them stays Telegram only).
             chatApprove: body.get("chat-approve") === "1",
             ...(body.get("chat-approve") === "1" ? { chatApproveChats: CHAT_APPROVE_ALL } : {}),
             publication: body.get("publication") === "automerge" ? "automerge" : "notify",
         };
-        if (["review-auto", "review-retry-auto", "repair-auto"].some(field => body.get(field) === "1")) {
-            return refuse(response, who, 400, "Review scheduling and automatic revisions are no longer available. Reload the mode form.", "/mode");
+        if (["review-auto", "review-retry-auto"].some(field => body.get(field) === "1")) {
+            return refuse(response, who, 400, "Review scheduling is no longer available. Reload the mode form.", "/mode");
         }
         if (terms.planAuto && !terms.autoApproveFiling) {
             return refuse(response, who, 400, "Automatic planner approval requires automatic filing approval.", "/mode");
@@ -2383,9 +2485,9 @@ ${postForm("/settings/chat-approval/save", html `\
             // THE CEREMONY (M1): every resolved term in words, and the password
             // signs exactly this digest — a drifted form refuses at /mode/sign.
             const nonce = mintApprovalNonce(who.name, "mode-sign", `${project}:${digest}`);
-            const signed = Object.fromEntries(["name", "days", "publication", "auto-approve", "plan-auto", "chat-approve"]
+            const signed = Object.fromEntries(["name", "days", "publication", "auto-approve", "plan-auto", "chat-approve", "repair-auto"]
                 .map(field => [field, body.get(field) ?? ""]));
-            const bodyHtml = modeCeremonyHtml({ name, project: projectName(project), words: modeWords(terms), chatApprove: signed["chat-approve"] === "1", hidden: { nonce, digest, ...signed, expiry } });
+            const bodyHtml = modeCeremonyHtml({ name, project: projectName(project), words: modeWords(terms), chatApprove: signed["chat-approve"] === "1", repairAuto: signed["repair-auto"] === "1", hidden: { nonce, digest, ...signed, expiry } });
             return sendScreen(response, 200, screen("Sign the mode", bodyHtml, { chrome: chromeFor(project, "mode") }));
         }
         // /mode/sign: the fixed expiry rides the form; the digest is
@@ -2401,8 +2503,8 @@ ${postForm("/settings/chat-approval/save", html `\
             return refuse(response, who, 409, "the terms moved while you were reading — read them again", "/mode");
         }
         const token = body.get("token") ?? "";
-        // A mode that lets a chat app approve opens a way to act: a credential act. Any other mode is an ordinary one.
-        if (!(body.get("chat-approve") === "1" ? authenticateCredential(who, token) : authenticateApprover(who, token)).ok) {
+        // A mode that lets a chat app approve, or repairs start by themselves, opens a way to act: a credential act. Any other mode is an ordinary one.
+        if (!(body.get("chat-approve") === "1" || body.get("repair-auto") === "1" ? authenticateCredential(who, token) : authenticateApprover(who, token)).ok) {
             return refuse(response, who, 403, "signing a mode takes your password, typed again", "/mode");
         }
         store.signMode({
@@ -2711,6 +2813,7 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.project-concurrency": projectConcurrency,
         "settings.project-live-view": projectLiveView,
         "settings.project-network": projectNetwork,
+        "settings.project-fallback": projectFallback,
         "settings.project-writes": projectWrites,
         "settings.project-check-access": projectCheckAccess,
         "settings.project-sandbox": projectSandbox,
@@ -2754,6 +2857,8 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.models-stop": modelsRuleAct("stop"),
         "settings.knowledge-refresh": knowledgeRefresh,
         "settings.knowledge-proposal": knowledgeProposal,
+        "settings.knowledge-note": knowledgeNote,
+        "settings.knowledge-tidy": knowledgeTidy,
         "settings.knowledge-decision": knowledgeDecision,
         "settings.knowledge-change": knowledgeChange,
         "settings.learning-change": learningChange,
@@ -2803,6 +2908,8 @@ ${postForm("/settings/chat-approval/save", html `\
         "settings.lead-about": leadAbout,
         "settings.lead-promise-cancel": leadPromiseCancel,
         "settings.lead-on": leadOn,
+        "settings.code-map": codeMapAct("switch"),
+        "settings.code-map-holdout": codeMapAct("holdout"),
     }, {
         "edge.google-callback": googleCallback,
         "edge.connect-callback": connectCallback,
@@ -3091,5 +3198,30 @@ ${postForm("/settings/chat-approval/save", html `\
                                     : kind === "suggest-on" ? "Suggestions are on for this project." : "Suggestions are off for this project.");
         };
     }
+    // Settings → Project → Fallback agents (fallback.ts): who takes over when an agent runs out of its plan. An approver for
+    // the project, with their password typed now; the ledger keeps every change. New tasks seal it; approved ones keep theirs.
+    async function projectFallback(ctx) {
+        const { who, response, now, posted } = ctx;
+        const body = readForm(posted, CONSOLE_FORMS.projectFallback);
+        const repo = body.get("repo") ?? "";
+        if (!consoleProjects().includes(repo) || !visible(repo))
+            return refuse(response, who, 403, "That project is outside your access.", "/settings/project");
+        if (who.via !== "cookie" || who.role !== "approver" || store.isDemo() || !store.accountCanAccess(who.name, repo))
+            return refuse(response, who, 403, "An approver for this project changes its fallback agents.", "/settings/project");
+        const back = sayTo(response, `/settings/project?repo=${encodeURIComponent(repo)}`, "#fallback");
+        const parsed = (body.get("agents") ?? "").split(/[\n,]+/).map(one => one.trim()).filter(Boolean).map(parseEntry);
+        const bad = parsed.find((one) => typeof one === "string");
+        if (bad !== undefined)
+            return back("problem", `Nothing changed: ${bad}.`);
+        if (!authenticateCredential(who, body.get("password") ?? "").ok)
+            return back("problem", "Enter your Toolroll password to change fallback agents.");
+        const done = store.transact(() => {
+            const set = parsed.length === 0 ? clearFallbackChain(store, repo, who.name, now) : setFallbackChain(store, repo, parsed, who.name, now);
+            if (!set.ok || parsed.length === 0)
+                return set;
+            return setPaidGrant(store, repo, body.get("paid") === "on", who.name, now);
+        });
+        return done.ok ? back("said", "Saved. Tasks scoped from now on use it; tasks already approved keep the chain they were approved with.") : back("problem", `Nothing changed: ${done.problem}`);
+    }
     return { registrations, modelsView };
 }

package/dist/server/task-views.js

@@ -1,3 +1,6 @@
+import { heldFindingCount } from "../findings.js";
+import { familyInWebReach } from "../findings.js";
+import { existsSync } from "node:fs";
 import { resultRecordWordsOf } from "../route-results.js";
 import { selectionEvidenceWords } from "../route-rules.js";
 import { feedbackImageProblem } from "../result-actions.js";
@@ -7,8 +10,10 @@ import { RELEASE_STEPS } from "../release.js";
 import { releaseProgressFor, shipChecksForTask } from "../store.js";
 import { releaseCiRunningOf } from "../release-ci-hold.js";
 import { releaseObligationsOf } from "../release-recheck.js";
-import { approvalProofOf, freshlyApprovable, freshnessFor, localApprovalEligible, withFreshness } from "../scope.js";
-import { localOwnerRefusal } from "../local-owner.js";
+import { approvalProofOf, freshnessFor, withFreshness } from "../scope.js";
+import { approvalPasswordField } from "../approval-password.js";
+import { fastChangeProblem, fastStarted } from "../fast-start.js";
+import { routeChangeOf } from "../route-change.js";
 import { liveAttemptOf, steerControlsFor } from "../steer-controls.js";
 import { originOf } from "../task-source.js";
 import { recentGitReads, taskBaseOf } from "../task-base.js";
@@ -25,6 +30,7 @@ import { readSkillsSnapshot, skillTestResult } from "../project-skills.js";
 import { newestPullRequestOf, publishingOf, pullRequestBlocker } from '../pull-request-flow.js';
 import { structuredHandoffView, terminalDiffView } from "../result-evidence-readers.js";
 import { resultCheckLevel } from '../result-follow-ups.js';
+import { followThroughView } from "./render-follow-through.js";
 import { skillsSnapshotHtml, skillTestFeedbackHtml } from "../skills-ui.js";
 import { archiveOf } from "../store.js";
 import { runActivityOf } from "../task-activity.js";
@@ -55,6 +61,8 @@ import {} from "./render-pages.js";
 import { completionReceiptView, diffFileAnchor, evidenceLinksFor, followUpsFor, orderChangedFiles, parseReviewDiff, proofBundleView, receiptStatusOf, withinSignedTouches } from "./render-results.js";
 import { approvalFormDigest, consentDoorOf, nonceHashOf, publicationFactsOf, resumeCeremonyPage, resumeDigestOf, taskBody, taskPage } from "./render-tasks.js";
 import {} from "./session.js";
+import { mergeReadyViewOf } from "./merge-ready-view.js";
+import { machineChecked, machineCheckWords } from "../machine-check.js";
 import { RESULT_REVIEW_SCRIPT } from "../result-review.js";
 import { reviewEvidenceScript } from "./render-results.js";
 import { budgetHoldWords, budgetLabel, monthOf } from "../spend.js";
@@ -138,6 +146,7 @@ export function createTaskViews(runtime) {
         const live = runs.find(one => runIsLive(one)) ?? null;
         const facts = {
             id: task.id,
+            heldFindings: heldFindingCount(runtime.store, task.id),
             title: task.title,
             repo: task.repo,
             state: task.state,
@@ -162,6 +171,7 @@ export function createTaskViews(runtime) {
                     },
             publication: latest === null ? null : publicationFactsOf(runtime.store.publicationForRun(latest.id)),
             liveRunId: live === null ? null : live.id,
+            ...(machineChecked(runtime.store, task.id) ? { machine: true } : {}),
             openDecision: ref === null ? null : openWorkDecisionOf(runtime.store, ref.id, now),
             unfinishedRunId: runs.find(one => one.outcome === null && one.role !== "reviewer")?.id ?? null,
             control: ref === null ? { kind: "none" } : taskControlOf(runtime.store, ref.id, now),
@@ -521,23 +531,26 @@ export function createTaskViews(runtime) {
             })(),
             // Cockpit B2: whether this person's remembered password may approve these exact terms (the same rule approve()
             // applies), and since when.
-            approvalFresh: (() => {
+            // The one password rule every approve form reads (approval-password.ts): remembered since when, or a local
+            // owner's no-password approval (eligible, or why not and where to go).
+            ...(() => {
                 const scope = ref === null ? null : runtime.store.getScope(ref.externalId);
-                if (scope === null || who?.via !== "cookie")
-                    return null;
+                if (scope === null || ref === null || who?.via !== "cookie")
+                    return { approvalFresh: null, approvalLocal: null };
                 const fresh = withFreshness("approve-standard", () => freshnessFor(who.name, Date.now(), true));
-                if (fresh === null)
-                    return null;
-                const gate = runtime.store.approvalGate(ref.externalId, who.name, "person");
-                return freshlyApprovable(runtime.store, ref.externalId, scope, gate.verdict === "seal" && !gate.protectedWork) ? new Date(fresh.at).toISOString() : null;
+                const field = approvalPasswordField(runtime.store, { name: who.name, taskId: ref.externalId, scope, passwordless: false,
+                    localOwner: who.authority === "local-owner", freshAt: fresh?.at ?? null, returnTo: taskHref(ref.externalId) });
+                return { approvalFresh: field.field === "remembered" ? field.since : null,
+                    approvalLocal: field.field === "none" && field.why === "local-owner" ? { eligible: true }
+                        : field.field === "local-refused" ? { eligible: false, message: field.message, href: field.href, action: field.action } : null };
             })(),
-            // Easy-start C5: a laptop's local owner approves eligible work with no password (the seal applies the same rule).
-            approvalLocal: (() => {
-                if (ref === null || who?.via !== "cookie" || who.authority !== "local-owner")
+            routeChange: ref === null ? null : routeChangeOf(runtime.store, ref.externalId),
+            followThrough: who === undefined || familyInWebReach(runtime.store, who, taskId, runtime.visible) === null ? null : followThroughView(runtime.store, runtime.evidenceRoot, taskId, taskHref(taskId), who.role === "approver" && who.via === "cookie" && !runtime.store.isDemo(), runtime.clock()),
+            fastGrown: (() => {
+                if (ref === null || runtime.store.getTask(ref.externalId)?.state !== "done" || !fastStarted(runtime.store, ref.externalId))
                     return null;
-                if (localApprovalEligible(runtime.store, who.name, ref.externalId).ok)
-                    return { eligible: true };
-                return { eligible: false, ...localOwnerRefusal(runtime.store.accountOf(who.name)?.passwordSet === true, taskHref(ref.externalId)) };
+                const last = runtime.store.lastBuilderRun(ref.id);
+                return last === null ? null : fastChangeProblem(runtime.store, ref.externalId, last.id);
             })(),
             steerRecent: ref === null ? [] : runtime.store.runsFor(ref.id).filter(one => one.outcome !== null).map(one => one.id).sort((a, b) => b - a).slice(0, 5),
             // The running attempt's composer, for an approver on a browser session (steer-controls.ts).
@@ -805,7 +818,7 @@ export function createTaskViews(runtime) {
             return runtime.sendScreen(response, status, screen(admittedFamily.root.title, html `<h1>${admittedFamily.root.title}</h1><p>${admittedFamily.current.state}</p><p class="problem" data-history-problem>${admittedFamily.problem}</p>`, { chrome: runtime.chromeFor(admittedFamily.root.repo, "tasks") }));
         const data = taskViewData(taskId, who, problem);
         if (data === null)
-            return refuse(response, who, 404, "no such task", "/work");
+            return refuse(response, who, 404, "no such task", "/tasks");
         const family = runtime.familyOf(taskId);
         const presentedData = { ...data, rootId: family?.root.id ?? taskId, rootTitle: family?.root.title ?? data.task.title,
             ...(family === null || data.assignment != null ? {} : { history: familyHistory(family) }),
@@ -858,7 +871,21 @@ export function createTaskViews(runtime) {
         // Ship (its pull request's checks, each on one time axis) and a release's own steps, read from the store now.
         const rootId = family?.root.id ?? taskId;
         const oneTaskView = onePage?.kind === "task" ? { ...onePage, ship: shipViewOf(shipChecksForTask(runtime.store, rootId), runtime.clock()),
-            release: releaseStepsViewOf(releaseProgressFor(runtime.store, rootId), runtime.clock()) } : onePage;
+            release: releaseStepsViewOf(releaseProgressFor(runtime.store, rootId), runtime.clock()),
+            // "Can I merge?" (P1.6): the checklist from the same assignment this page read, each blocker with its own form.
+            mergeReady: mergeReadyViewOf(runtime.store, taskId, data.assignment, who, presentedData.runChecks ?? null, taskHref(taskId)) } : onePage;
+        // A check the machine runs (a prepared candidate: a release's check) is said as the check it is, with no agent's
+        // activity, no notes to read, and for a release its own steps instead of the generic Plan → Build stepper.
+        if (oneTaskView?.kind === "task" && machineChecked(runtime.store, taskId)) {
+            const words = machineCheckWords(runtime.store, taskId, data.liveRunId ?? null, oneTaskView.release ?? null, runtime.clock());
+            const card = oneTaskView.status;
+            if (words !== null && card !== null && card.status.headline === "Building")
+                oneTaskView.status = { ...card, status: { ...card.status, sentence: words } };
+            oneTaskView.activity = null;
+            oneTaskView.steering = null;
+            if (oneTaskView.release != null)
+                oneTaskView.journey = null;
+        }
         // The Result tab's no-script page, under the task's own (the same HTML its result page serves), and its script.
         if (extras.result != null) {
             page.body = html `${page.body}<section class="task-result-tab" id="task-result" aria-label="Result">${extras.result.html}</section>`;
@@ -895,14 +922,14 @@ export function createTaskViews(runtime) {
         const stop = runtime.store.stopOf(runId);
         const run = runtime.store.getRun(runId);
         if (stop === null || run === null || stop.taskRef !== ref.id)
-            return taskScreen(response, who, taskId, `run #${runId} is not a stopped attempt of this task`, 409);
+            return taskScreen(response, who, taskId, `build #${runId} is not a stopped attempt of this task`, 409);
         if (run.role === "reviewer")
-            return taskScreen(response, who, taskId, `run #${runId} is a historical review run — nothing reruns it; open the saved result instead`, 409);
+            return taskScreen(response, who, taskId, `build #${runId} was an old review. Nothing reruns it; open the saved result instead`, 409);
         if (stop.resumedAt !== null)
-            return taskScreen(response, who, taskId, `run #${runId} was already resumed by ${stop.resumedBy ?? "?"}`, 409);
+            return taskScreen(response, who, taskId, `build #${runId} was already resumed by ${stop.resumedBy ?? "?"}`, 409);
         const control = taskControlOf(runtime.store, ref.id, now);
         if (control.kind !== "paused" || control.run !== runId) {
-            return taskScreen(response, who, taskId, control.kind === "stopping" ? `run #${runId} is still stopping — its processes are not yet established gone` : `run #${runId} is no longer the attempt a resume can name — reload and decide against the current state`, 409);
+            return taskScreen(response, who, taskId, control.kind === "stopping" ? `build #${runId} is still stopping. Toolroll is making sure it has ended` : `build #${runId} is no longer the one to resume. Reload and decide again`, 409);
         }
         const digest = resumeDigestOf(taskId, runId, stop.settledAt ?? "", runtime.store.getScope(taskId));
         const nonceValue = randomBytes(18).toString("base64url");
@@ -1168,7 +1195,7 @@ export function createTaskViews(runtime) {
             // Editor links (arc 6): the deployment capability, THIS machine's
             // runner owning the run, the session's own device-side yes, and a
             // checkout to open — or nothing renders.
-            editor: runtime.options.editorLinks !== undefined && runtime.options.localRunner !== undefined && run.runner === runtime.options.localRunner && who.via === "cookie" && who.session.editorLinks === true && run.worktree !== null
+            editor: runtime.options.editorLinks !== undefined && runtime.options.localRunner !== undefined && run.runner === runtime.options.localRunner && who.via === "cookie" && who.session.editorLinks === true && run.worktree !== null && existsSync(run.worktree)
                 ? { worktree: run.worktree }
                 : null,
             signedCriteria: scope?.acceptance.length ?? 0,
@@ -1231,18 +1258,28 @@ export function releaseStepsViewOf(progress, now) {
     const all = RELEASE_STEPS.filter(step => step !== "done");
     // A release that started part way (one carried under an earlier approval, or resumed from an older journal) shows
     // the steps from where its own record starts; a step missing between two recorded ones is a write that was lost.
-    const firstAt = all.findIndex(step => recorded.has(step));
+    // A build running since the stop is the release's check, wherever the release last stopped; what follows it is to come.
+    const building = progress.building, checkAt = all.indexOf("check");
+    const firstAt = building === null ? all.findIndex(step => recorded.has(step)) : Math.min(all.findIndex(step => recorded.has(step)), checkAt);
     const lastAt = all.reduce((at, step, index) => recorded.has(step) ? index : at, -1);
     const steps = firstAt <= 0 ? all : all.slice(firstAt);
     const rows = steps.map(step => {
         const one = recorded.get(step);
+        if (building !== null && step === "check") {
+            const start = Date.parse(building.startedAt);
+            return { name: RELEASE_STEP_WORDS[step] ?? step, st: "run", start: Number.isFinite(start) && Number.isFinite(origin) ? Math.max(0, (start - origin) / 1000) : 0, dur: Number.isFinite(start) ? Math.max(0, (now.getTime() - start) / 1000) : 0 };
+        }
+        if (building !== null && all.indexOf(step) > checkAt)
+            return { name: RELEASE_STEP_WORDS[step] ?? step, st: "q", start: 0, dur: 0 };
         // A step with no record is never painted as done: between recorded ones it says so, after them it is queued.
         if (one === undefined)
             return all.indexOf(step) < lastAt ? { name: RELEASE_STEP_WORDS[step] ?? step, sub: "not recorded", st: "q", start: 0, dur: 0 }
                 : { name: RELEASE_STEP_WORDS[step] ?? step, st: "q", start: 0, dur: 0 };
         const start = Date.parse(one.startedAt), end = one.endedAt === null ? now.getTime() : Date.parse(one.endedAt);
-        const st = one.state === "done" ? "ok" : one.state === "failed" ? "bad" : one.state === "waiting" ? "wait" : "run";
-        return { name: RELEASE_STEP_WORDS[step] ?? step, ...(one.detail === null || one.state === "done" ? {} : { sub: one.detail.slice(0, 160) }), st,
+        // A failure the release has gone on from (resumed past it, or a build since) is history, not where it stands.
+        const passed = one.state === "failed" && progress.stopped === null;
+        const st = one.state === "done" || passed ? "ok" : one.state === "failed" ? "bad" : one.state === "waiting" ? "wait" : "run";
+        return { name: RELEASE_STEP_WORDS[step] ?? step, ...(passed ? { sub: "Stopped here, then went on" } : one.detail === null || one.state === "done" ? {} : { sub: one.detail.slice(0, 160) }), st,
             start: Number.isFinite(start) && Number.isFinite(origin) ? Math.max(0, (start - origin) / 1000) : 0, dur: Number.isFinite(start) && Number.isFinite(end) ? Math.max(0, (end - start) / 1000) : 0 };
     });
     const current = rows.findIndex(row => row.st === "run" || row.st === "wait" || row.st === "bad");
@@ -1254,7 +1291,10 @@ export function releaseStepsViewOf(progress, now) {
     return {
         tag: progress.tag, version: progress.version, pr: progress.pr,
         rows,
-        state: progress.stopped !== null ? "failed" : done ? "done" : at?.st === "wait" ? "waiting" : "running",
+        // Waiting is a person's act only at Approval; a step waiting on a machine (its check, GitHub's checks, quiet) is the
+        // release running, never "Needs you".
+        state: progress.stopped !== null ? "failed" : done ? "done" : at?.st === "wait" && steps[current] === "approval" ? "waiting" : "running",
+        at: current === -1 ? null : { step: steps[current], name: at.name, index: current + 1, of: rows.length },
         headline: done ? `Released ${progress.version}` : progress.stopped !== null ? `Stopped at ${RELEASE_STEP_WORDS[progress.stopped.step] ?? progress.stopped.step}`
             : at !== null ? `${at.name} · Step ${current + 1} of ${rows.length}` : last === null ? "Starting" : `${last} done · the next step starts on its own`,
         stopped: progress.stopped === null ? null : { step: RELEASE_STEP_WORDS[progress.stopped.step] ?? progress.stopped.step, message: progress.stopped.message, at: progress.stopped.at },