[mingchuno]

Phase 2 of 3 (stacked on #39). Approving work no longer needs the CLI or a 100-character string.

Summary

Provider approval (D1).

- agent-workflows approve 9b2e…-uuid scope 3c1f…64-hex-revision
+ /approve scope 3f9a2c1d4e5f

The code is the first 12 hex characters of the gate's contract digest, computed without sourceRevision. That is what lets the published section print it; the full revision covers the issue body, so the body can't contain it (ADR 0011). syncWorkApprovals accepts the short form only when all of these hold (ADR 0013):

short comment counts when
  author is an allowed human
  issue revision == observed source revision    (unchanged rule)
  issue body shows render(current contract)
  comment.createdAt > workItem.updatedAt        (a source edit + reassessment voids older comments)

The long form is still accepted. The published section ends with an Approval block giving the exact comment per gate, or "Approve in the agent-workflows monitor" for local-operator. WorkInspection.approvalComment carries it to work inspect, the TUI and the web monitor.

Getting back to the web monitor.

 run
-  Web monitor: http://127.0.0.1:8787/?token=…   # printed once, lost with scrollback
+  Port 8787 is in use; using 51234.              # only when the default is taken
+  Web monitor: …  → kept in the mode-600 runner control record
+monitor --web [WORK_ID]   # prints and opens the current link, optionally #work=WORK_ID
+doctor --json / work …    # monitorUrl without the token, deep-linked for Work Items

The web app opens #work=ID directly in the Work Items view. An explicit --web-port still fails rather than moving to another port.

Skill. delegated.md now tells the human in one line where to approve: the issue comment, the monitor link, or monitor --web WORK_ID.

Evidence

• tests/work-publication.test.ts:
  • the code ignores sourceRevision and changes when the content changes
  • a comment posted before the last change, a comment from an outsider, and a comment with the wrong code all import nothing; the correct comment imports exactly one approval and the item becomes ready
• tests/web.test.ts: with 8787 taken, run moves to a free port. monitor --web prints the same link, monitor --web work-1 appends #work=work-1, and doctor --json reports monitorUrl without token=.
• tests/work-console.test.ts: in Playwright, ${url}#work=<second> opens on the second Work Item.
• pnpm verify: 401 tests, 398 passed, 0 failed (3 live-provider tests skipped).

Merge Danger

Door: two-way

Blast Radius: approvals

• This adds a second accepted approval syntax. If the timestamp rule is wrong, an old comment could approve reassessed work whose contract text is identical. The rule plus the published-body check limit that.
• Clock skew can make the runner ignore a valid comment. Reposting fixes it.

🤖 Generated with Claude Code