toolroll 0.9.93 → 0.9.95

package/dist/browser-crew.js

@@ -7,6 +7,8 @@ export function browserWorkActionHref(item) {
     if (action === null)
         return null;
     const { taskId, runId, decisionId } = action.target;
+    if (action.code === 'inspect-findings')
+        return `/t/${encodeURIComponent(taskId)}#findings`;
     if (decisionId !== null)
         return `/d/${decisionId}`;
     if (action.code === 'inspect-decisions')

package/dist/browser-shell.d.ts

@@ -6,4 +6,4 @@ export declare function serveBrowserAsset(request: IncomingMessage, response: Se
 /** Retain the complete native document as the no-JavaScript/unloaded-bundle
  * fallback. React replaces its root only once the local module has loaded.
  * The data script is escaped for HTML parsing, not merely valid JSON. */
-export declare function browserWorkspaceDocument(document: Html, workspace: BrowserWorkspace, nonce: string, functionalScript: string): Html;
+export declare function browserWorkspaceDocument(document: Html, workspace: BrowserWorkspace, nonce: string, functionalScript: string, beside?: Html): Html;

package/dist/browser-shell.js

@@ -51,7 +51,7 @@ export function serveBrowserAsset(request, response, path) {
 /** Retain the complete native document as the no-JavaScript/unloaded-bundle
  * fallback. React replaces its root only once the local module has loaded.
  * The data script is escaped for HTML parsing, not merely valid JSON. */
-export function browserWorkspaceDocument(document, workspace, nonce, functionalScript) {
+export function browserWorkspaceDocument(document, workspace, nonce, functionalScript, beside = html ``) {
     const initialize = `window.addEventListener('standing-orders:workspace-rendered',function initializeWorkspace(){window.removeEventListener('standing-orders:workspace-rendered',initializeWorkspace);${functionalScript}});`;
     // A cross-page fade the browser gives up on rejects its promises; settle them from the head, before the
     // first frame (the app's own listener arrives too late when a page is revealed before the bundle runs).
@@ -61,5 +61,5 @@ export function browserWorkspaceDocument(document, workspace, nonce, functionalS
     // A page showing a password keeps to its one script (the sensitivity contract), so it goes without.
     html `<link rel="stylesheet" href="/assets/workspace.css">${workspace.sensitive ? "" : scriptElement(settleFades, { nonce })}</head>`);
     out = replaceMarkup(out, /<body>/, () => html `<body><div id="standing-orders-workspace">`);
-    return replaceMarkup(out, /<\/body>/, () => html `</div>${jsonScript(workspace, { id: "standing-orders-workspace-data", nonce })}${scriptElement(initialize, { nonce })}<script type="module" src="/assets/workspace.js" nonce="${nonce}"></script></body>`);
+    return replaceMarkup(out, /<\/body>/, () => html `</div>${beside}${jsonScript(workspace, { id: "standing-orders-workspace-data", nonce })}${scriptElement(initialize, { nonce })}<script type="module" src="/assets/workspace.js" nonce="${nonce}"></script></body>`);
 }

package/dist/browser-workspace.d.ts

@@ -139,6 +139,8 @@ export type BrowserActionCard = {
     } | null;
     dismissable: boolean;
     note: string | null;
+    /** A Toolroll card: `body` is its data, and it confirms nothing. */
+    data?: true;
 };
 export type BrowserConversation = {
     sessionId: number;
@@ -259,7 +261,7 @@ export type BrowserTaskRow = {
     /** Put away, or Restore in Archived (task-tidy.md): a POST to the task's own route; null for a viewer or live work. */
     tidy?: {
         action: string;
-        label: 'Put away' | 'Restore';
+        label: 'Archive' | 'Restore';
         returnTo: string;
     } | null;
 };
@@ -528,6 +530,8 @@ export type BrowserTaskView = {
         summary: string;
         observedAt: string;
     } | null;
+    /** "Can I merge?" (merge-checklist.ts; `toolroll task ready` is its twin): each row and its blocker's form. Null: no result yet. */
+    mergeReady?: MergeReadyView | null;
     /** A release's own steps (release status's twin). Null: this task is no release, or nothing recorded. */
     release?: {
         tag: string;
@@ -542,6 +546,13 @@ export type BrowserTaskView = {
             at: string;
         } | null;
         startedAt: string;
+        /** The step it is on now, and where that is in its steps. */
+        at?: {
+            step: string;
+            name: string;
+            index: number;
+            of: number;
+        } | null;
     } | null;
     /** How the plan was approved: by whom and how, or the rule that approved it automatically. */
     approved?: {
@@ -554,6 +565,11 @@ export type BrowserTaskView = {
     } | null;
     /** ⋯ More actions: the task's secondary acts, the same order on the task and agent pages, destructive last. */
     more?: BrowserTaskMore[];
+    /** The task's full audit record (its link in the header); it moved out of More (docs/plans/plain-toolroll.md P1.3). */
+    audit?: {
+        label: string;
+        href: string;
+    } | null;
 };
 export type BrowserTaskTab = "activity" | "result" | "plan" | "attempts";
 /** One ⋯ item: a plain link, a copy of this page's address, a one-click POST (never a ceremony), or a go-to that switches
@@ -1088,7 +1104,10 @@ export type BrowserFlowCard = {
         items?: BrowserFlowSentItem[];
         person: string;
         at: string;
+        cardHtml?: string;
     } | null;
+    /** A finished card's steps as a Toolroll card (flow-result-card.ts), when no "Send to me" already showed them. */
+    resultHtml?: string;
     /** v94: every tool call subagents made or asked to make on this card, oldest first: the receipts. */
     calls?: {
         id: number;
@@ -1659,7 +1678,7 @@ export type BrowserHomeView = {
         href: string;
     }[];
     groups: {
-        key: 'decide' | 'review' | 'unblock' | 'running';
+        key: 'decide' | 'review' | 'unblock' | 'running' | 'waiting';
         label: string;
         rows: BrowserHomeRow[];
     }[];
@@ -1853,3 +1872,32 @@ export declare function browserProjectsOf(projects: readonly {
     path: string;
 }[]): BrowserProject[];
 export declare function browserNavigationOf(path: string, project?: string | null, needsYou?: number, tasksProject?: string | null, needsYouLabel?: string): BrowserNavigationItem[];
+/** One "Can I merge?" act, as the task page's form for it (server/merge-ready-view.ts builds it). */
+export type MergeReadyAct = {
+    kind: "run-checks";
+    action: string;
+    level: "quick" | "full";
+    returnTo: string;
+} | {
+    kind: "retry";
+} | {
+    kind: "fix";
+    action: string;
+    note: string;
+    batch: string;
+    source: string;
+    request: string;
+    returnTo: string;
+};
+/** The task page's "Can I merge?" panel. */
+export type MergeReadyView = {
+    answer: "yes" | "no" | "not-yet" | "merged";
+    sentence: string;
+    rows: {
+        key: string;
+        label: string;
+        mark: "yes" | "no" | "waiting" | "unknown" | "skip";
+        say: string;
+        act: MergeReadyAct | null;
+    }[];
+};

package/dist/browser-workspace.js

@@ -90,7 +90,7 @@ export function browserProjectsOf(projects) {
         if (seen.has(project.path))
             return [];
         seen.add(project.path);
-        return [{ name: project.name, path: project.path, href: `/work?project=${encodeURIComponent(project.path)}`,
+        return [{ name: project.name, path: project.path, href: `/tasks?project=${encodeURIComponent(project.path)}`,
                 knowledgeHref: `/settings/knowledge?repo=${encodeURIComponent(project.path)}` }];
     });
 }
@@ -102,8 +102,8 @@ export function browserNavigationOf(path, project = null, needsYou = 0, tasksPro
     return [
         { label: 'Home', href: '/', active: pathname === '/' || pathname === '/chat' || under('/d', '/activity', '/morning'),
             ...(needsYou > 0 ? { count: needsYou, ...(needsYouLabel === undefined ? {} : { countLabel: needsYouLabel }) } : {}) },
-        { label: 'Tasks', href: `/work${tasksProject === null ? '' : `?project=${encodeURIComponent(tasksProject)}`}`,
-            active: under('/work', '/tasks', '/t', '/r', '/done', '/board', '/queue', '/inbox', '/review') },
+        { label: 'Tasks', href: `/tasks${tasksProject === null ? '' : `?project=${encodeURIComponent(tasksProject)}`}`,
+            active: under('/tasks', '/t', '/r', '/review') },
         { label: 'Flows', href: '/flows', active: under('/flows', '/recipes', '/kits', '/routines') },
         { label: 'Agents', href: '/agents', active: under('/agents', '/peek', '/term', '/fleet', '/system', '/runs') },
         { label: 'Projects', href: '/projects', active: under('/projects') },

package/dist/build-review.js

@@ -26,6 +26,7 @@ import { invokeAgent } from "./invoke.js";
 import { readVerifiedArtifact } from "./evidence.js";
 import { verificationEvidence } from "./verification-evidence.js";
 import { runCheckLevel } from "./check-levels.js";
+import { recordReviewFindings } from "./findings.js";
 import { requestResultChanges } from "./result-actions.js";
 import { revisionSourceOf } from "./result-review.js";
 import { parseBuildFindings, REVIEW_PATCH_NAME } from "./reviewer.js";
@@ -310,6 +311,7 @@ export async function buildReviewPass(store, options) {
             const sent = high.length > 0 && mayResend(store, request.taskId) ? sendBack(store, options.root, request.run, request.taskId, repo, high, clock()) : null;
             const problem = sent !== null && !sent.ok ? `it could not be sent back (${sent.problem})` : null;
             settle(store, request.run, "reviewed", { findings, sentBackAs: sent?.ok ? sent.id : null, ...(problem === null ? {} : { reason: problem }) }, clock());
+            recordReviewFindings(store, { run: request.run, taskId: request.taskId, sentBackAs: sent?.ok ? sent.id : null, high }, clock());
             return { sentBackAs: sent?.ok ? sent.id : null, problem };
         });
         const counted = `${findings.length} finding${findings.length === 1 ? "" : "s"}, ${high.length} high`;

package/dist/builder-restart.d.ts

@@ -0,0 +1,21 @@
+import { type Store } from "./store.js";
+/** At most this many automatic restarts in this window (tried, whatever came of them). */
+export declare const RESTART_LIMIT = 3;
+export declare const RESTART_WINDOW_MS: number;
+export type BuilderWish = {
+    desired: "running" | "stopped";
+    build: string;
+    schema: number;
+    setBy: string;
+    setAt: string;
+};
+export declare function builderWish(store: Store): BuilderWish | null;
+export declare function databaseFormat(store: Store): number | null;
+/** Record what a person asked for. A `stopped` keeps the last known build. */
+export declare function recordBuilderWish(store: Store, desired: "running" | "stopped", by: string, build: string, now: Date): void;
+/** An update, a deploy's drain or a stop in progress: this is someone else's restart to make. */
+export declare function restartPaused(store: Store, now: Date): boolean;
+export type RestartAdmission = "admitted" | "not-wanted" | "paused" | "attempts";
+/** The wish, the pause and the count, read again and the attempt written in one transaction: two callers can't both
+ * take the last attempt, and a crash after this still counted. */
+export declare function admitBuilderRestart(store: Store, now: Date): RestartAdmission;

package/dist/builder-restart.js

@@ -0,0 +1,50 @@
+/**
+ * Restarting this computer's own builder (docs/plans/plain-toolroll.md P2.3): the record of what a person wants, and the
+ * one transaction that admits an automatic restart. The supervisor work is laptop-background.ts restartOwnBuilder.
+ *
+ * `background on` and `up` record that the builder should run, with the build and database format they ran; `background
+ * off` and `stop` record that it should not, before they stop it. Nothing else writes that wish, and only a recorded
+ * wish to run is ever acted on.
+ */
+import { updateAdmissionPaused } from "./desktop-update-gate.js";
+import { drainOf } from "./runner.js";
+import { readSchemaVersion } from "./store.js";
+/** At most this many automatic restarts in this window (tried, whatever came of them). */
+export const RESTART_LIMIT = 3;
+export const RESTART_WINDOW_MS = 30 * 60_000;
+export function builderWish(store) {
+    const row = store.handle.prepare("SELECT desired, build, schema_version, set_by, set_at FROM builder_service WHERE id = 1").get();
+    return row === undefined ? null : { desired: row["desired"] === "running" ? "running" : "stopped", build: String(row["build"]), schema: Number(row["schema_version"]), setBy: String(row["set_by"]), setAt: String(row["set_at"]) };
+}
+export function databaseFormat(store) {
+    const read = readSchemaVersion(store.handle);
+    return read.ok ? read.version : null;
+}
+/** Record what a person asked for. A `stopped` keeps the last known build. */
+export function recordBuilderWish(store, desired, by, build, now) {
+    store.handle.prepare(`INSERT INTO builder_service (id, desired, build, schema_version, set_by, set_at) VALUES (1, ?, ?, ?, ?, ?)
+    ON CONFLICT (id) DO UPDATE SET desired = excluded.desired, build = excluded.build, schema_version = excluded.schema_version, set_by = excluded.set_by, set_at = excluded.set_at`)
+        .run(desired, build, databaseFormat(store) ?? 0, by, now.toISOString());
+}
+/** An update, a deploy's drain or a stop in progress: this is someone else's restart to make. */
+export function restartPaused(store, now) {
+    if (updateAdmissionPaused(store.raw()))
+        return true;
+    return store.listRunners().some(runner => drainOf(store, runner, now) !== null);
+}
+/** The wish, the pause and the count, read again and the attempt written in one transaction: two callers can't both
+ * take the last attempt, and a crash after this still counted. */
+export function admitBuilderRestart(store, now) {
+    return store.transact(() => {
+        if (builderWish(store)?.desired !== "running")
+            return "not-wanted";
+        if (restartPaused(store, now))
+            return "paused";
+        const since = new Date(now.getTime() - RESTART_WINDOW_MS).toISOString();
+        const tried = Number(store.handle.prepare("SELECT COUNT(*) AS n FROM builder_restart WHERE at > ?").get(since)?.["n"] ?? 0);
+        if (tried >= RESTART_LIMIT)
+            return "attempts";
+        store.handle.prepare("INSERT INTO builder_restart (at) VALUES (?)").run(now.toISOString());
+        return "admitted";
+    });
+}

package/dist/builder.d.ts

@@ -3,6 +3,7 @@ import { type CheckAccess } from "./check-access.js";
 import type { WritesMode } from "./writes-mode.js";
 import type { LaunchNetwork } from "./invoke.js";
 import type { ProviderId } from "./contracts/provider.js";
+import { type MachineSample } from "./check-load.js";
 import { type PreparedEvidence } from "./prepared-evidence.js";
 import { type ExecResult, type RunOptions } from "./exec.js";
 import type { Decision, Store } from "./store.js";
@@ -121,6 +122,9 @@ export type BuildRequest = {
     /** Runs the repository's approved verification command (Priority 2), after
      * commit. Tests inject; production uses exec. */
     verify?: Runner;
+    /** Reads the machine's cores and load for a release check's limit and load record (check-load.ts). Tests inject;
+     * production reads the operating system. */
+    machine?: () => MachineSample;
     /**
      * The stop fence (audit IV-1, completed): re-proved AFTER the agent and
      * BEFORE the commit. A stop that lands while the agent runs preserves
@@ -159,7 +163,7 @@ export type BuildRefusal = "skills-unavailable"
 /** Sprint 8: the organisation policy stops this provider, model or permission level. */
  | "policy" | "unapproved" | "scope-changed" | "stale-approval" | "mode-ended" | "capability" | "no-claim" | "not-yours" | "not-leased" | "protected-branch" | "wrong-branch" | "moved-branch" | "fenced" | "agent" | "agent-reported" | "no-op"
 /** Run 2085: the agent stopped before its handoff; its work was kept for the retry. */
- | "no-handoff" | "moved-head" | "timeout" | "git" | "commit-failure" | "malformed-decision" | "provider-init" | "setup" | "revision-brief" | "external" | "stopped" | "plan-revised" | "plan-revision-blocked" | "provider-unattested" | "provider-protocol" | "runner-custody" | "auth-mode" | "route-authority" | "containment";
+ | "no-handoff" | "moved-head" | "timeout" | "git" | "commit-failure" | "malformed-decision" | "provider-init" | "setup" | "revision-brief" | "external" | "stopped" | "plan-revised" | "plan-revision-blocked" | "provider-unattested" | "provider-protocol" | "runner-custody" | "auth-mode" | "route-authority" | "containment" | "protected-storage";
 /** Long enough for real work; short enough that a stuck build ends the same night. */
 export declare const DEFAULT_BUILD_TIMEOUT_MS: number;
 export declare const DEFAULT_MAX_TURNS = 40;
@@ -198,6 +202,9 @@ export declare const SETUP_ENV_DENYLIST: readonly string[];
  * over-redacting a diagnostic costs a glance at the real log; under-
  * redacting costs a secret.
  */
+/** Why a git command failed, in words, for a refusal: the hardened runner's own reason, or git's first line. Keeping it
+ * is the point: runs 3316–3324 and run 3332 lost theirs, and only a person guessing was left. */
+export declare function gitFailureWords(result: ExecResult): string;
 export declare function redactSecretText(text: string): string;
 /** The same blanking with no length cap, for a log that keeps its length (a flow script's output). */
 export declare function redactSecretAssignments(text: string): string;
@@ -220,7 +227,9 @@ export declare function proveApprovedProfile(scope: Scope | null, given: {
     maxTurns: number | undefined;
     timeoutMs: number | undefined;
     skipPermissions: boolean;
-}): {
+}, 
+/** The fallback entry a chain run is bound to, proved by its walk: what must run instead of the base. */
+pinned?: ExecutionProfile | null): {
     ok: true;
     effective: {
         model: string;