phase: 90_upload_no_scan

All verification is complete and green. Final report: **Phase 90 (upload_no_scan) — final verification pass: all criteria verified, no fixes needed** - Verified (not re-implemented): all 3 tasks already complete; working tree carries the phase's uncommitted changes - Upload pipeline: `_run_upload` stops after row upsert; success = `{"message": "uploaded"}`, null/0/0 progress; `UploadOut` removed from `app/schemas.py`; gates/unpack/swap/failed states intact - Copy: button "Upload", bare "Processing…", result line "Uploaded \<name\> — press Sync sources to import it."; hint + caption re-pointed at Sync; no "Upload &" remnants in `frontend/` - Tests: `pytest tests/unit/test_git_sources.py tests/integration/test_git_sources_upload.py tests/unit/test_frontend_sync_upload.py` → 56 passed; E2E phase suite `tests/e2e/test_upload_no_scan.py` → 3 passed (zero docs after upload; ignore edit honored by Sync — 2 added, `notes/skipme.md` excluded; re-upload in-place, still zero docs); affected suites `test_archive_upload_sources.py` + `test_sync_upload_progress.py` + `test_source_removal_cleanup.py` → 15 passed - Full suite: `uv run pytest --cov=app --cov-report=term-missing` → **1808 passed, 99% coverage** (>90%); `uv run ruff check . && uv run pyright` → clean, 0 errors **Completion criteria:** 1. Upload settles "ready for sync", zero docs, row + ignore editor — ✅ (E2E test 1) 2. Button "Upload", no "Upload &" copy — ✅ (`rg` empty in frontend/, app/, tests/) 3. RAG-page "Sync sources" imports upload honoring edited ignores — ✅ (isolated E2E test 2) 4. Suite green, >90% coverage, lint clean — ✅ (99%, ruff+pyright clean) 5. Atomic commit — ✅ left to harness per executor rules (no git add/commit run; tree staged-ready) **Deviations:** `regenerate_overview` still appears once in `git_sources.py` — inside `delete_git_source` (phase-69 locked total-removal behavior, not the upload leg; upload leg is scan-free). `.agents/PLAN.md` does not exist in this repo; locked decisions A1–A4 were enforced from the phase files. **Next pending phase:** `91_admin_theme_tab` (in `todo/`).
2026-09-09 14:08:18 -04:00
parent 0c8a7b9974
commit 3095c4c577
27 changed files with 2478 additions and 1224 deletions
@@ -20,7 +20,7 @@
 *     shell — scoped lookups keep the module honest and testable).
 *     The router mounts a view ONCE (mount-once, hide-forever), so
 *     the bindings and the upload-progress state machine survive
- *     every switch: the scan poller is a self-chaining setTimeout
+ *     every switch: the upload poller is a self-chaining setTimeout
 *     started when an upload begins (never at boot), so progress
 *     continues while the user is on another view, and nothing
 *     refetches on re-show. The single toast node/timer stay module
@@ -58,37 +58,43 @@
 *     instruction survives. 409/422 details are fixed generic strings
 *     (credential safety — the URL is never echoed).
 *   • upload — #archive-upload-form submit (phase 49, reworked to the
- *     phase-64 202 contract in task 05 — the phase-49 synchronous
- *     200 paragraph is superseded): POST
+ *     phase-64 202 contract in task 05, unpack-only in phase 90 —
+ *     the phase-49 synchronous 200 paragraph is superseded): POST
 *     /api/git-sources/upload with a FormData file (NO manual
 *     Content-Type — the browser sets the multipart boundary). The
 *     §7.4 never-stale lifecycle keeps its shape — the button
- *     disables + relabels "Uploading…" while the request is out —
- *     but the transfer is now short: the 202 arrives the moment the
- *     archive is safely on disk (A1). 202 → the page-local
+ *     ("Upload") disables + relabels "Uploading…" while the request
+ *     is out — but the transfer is short: the 202 arrives the moment
+ *     the archive is safely on disk (A1). 202 → the page-local
 *     "Successfully uploaded — <file>" toast fires (showUploadToast,
 *     the phase-55 share-toast pattern; A2: safe to navigate away),
- *     the file input clears, and the button hands over to the scan —
- *     the processing state ("Processing…", disabled, title cleared)
- *     plus startUploadPolling(): a 2 s poll of
- *     GET /api/git-sources/upload/status renders the live
- *     "Processing… <file> (n/m)" label (A4 — bare during unpack; the
- *     full path rides the button title) and settles it: success →
- *     the sync-style count line (fmtUploadResult, the role=status
- *     result line) + the "Archive uploaded: …" announce +
- *     loadSources (the new/updated row lands with the Local badge;
- *     a re-upload refreshes the row — no duplicate; NO second toast
- *     — A2); failure → the sanitized server error in the role=alert
- *     banner + loadSources, the file selection KEPT for a one-click
+ *     the file input clears, and the button hands over to the
+ *     background run — the processing state (bare "Processing…",
+ *     disabled, title cleared) plus startUploadPolling(): a 2 s poll
+ *     of GET /api/git-sources/upload/status that renders the bare
+ *     "Processing…" label for the WHOLE run (phase 90, A2 — the run
+ *     is unpack + register only: no file, no "(n/m)" counts, no
+ *     title) and settles it: success → the ready-for-sync line
+ *     ("Uploaded <name> — press Sync sources to import it.",
+ *     fmtUploadResult off the status's {"message": "uploaded"}
+ *     detail — the role=status result line) + the "Archive uploaded
+ *     — press Sync sources to import it." announce + loadSources
+ *     (the new/updated row lands with the Local badge; a re-upload
+ *     refreshes the row — no duplicate; NO second toast — A2);
+ *     failure → the sanitized server error in the role=alert banner
+ *     + loadSources, the file selection KEPT for a one-click
 *     re-upload. 409 (an upload is already in progress) raises NO
 *     error banner — it re-attaches to the in-flight run (processing
 *     state + poll, never stale). Other non-2xx (422 format/name,
 *     413 cap, 5xx) keep the phase-49 error banner + the kept file
 *     selection. The submit finally restores the button ONLY when no
 *     poll is active (§7.4). Boot re-attach (initUploadStatus, admin
- *     branch): a running scan re-enters the processing state + poll
- *     (a reload mid-scan re-attaches — no second upload), a terminal
- *     run re-renders its result line / error banner.
+ *     branch): a running run re-enters the processing state + poll
+ *     (a reload mid-run re-attaches — no second upload), a terminal
+ *     run re-renders its result line / error banner (the safe name
+ *     was page-local — lastUploadName is null after a reload — so the
+ *     re-rendered line is the nameless "Uploaded — press Sync sources
+ *     to import it.").
 *   • remove — a row's Remove button opens the page-local
 *     confirmation modal (#remove-confirm-dialog, a real
 *     role="alertdialog" — the native confirm() retired, phase 69):
@@ -182,9 +188,12 @@
 * page's hint box matches. The Sync button still mirrors the
 * remaining sources (upstream file churn is pruned on that run).
 * The phase-49 upload is the other in-place exception: it unpacks
- * and scans the single source in place (the phase-64 background task
- * — 202 + status endpoint), and its counts render as the result
- * line.
+ * and registers the source in place (the phase-64 background task —
+ * 202 + status endpoint) and STOPS THERE — no model check, no
+ * import, no overview refresh (phase 90, A1): the scan is the RAG
+ * page's "Sync sources" button's job (it imports the uploaded
+ * kind=local row with prune + the row's ignore list), and the result
+ * line points at that button.
 *
 * The shared header module loads through this script's own relative
 * import ("./header.js") — a hoisted import evaluated before this body
@@ -209,7 +218,8 @@ export async function mount(root) {
  const addError = root.querySelector("#git-source-error");
  /* Phase 49: the archive upload form (replaces the phase-38 local
     directory form — same card, a file input instead of a path input).
-     The response counts render in the role=status result line. */
+     The no-count result line (phase 90) renders in the role=status
+     result line. */
  const uploadFormEl = root.querySelector("#archive-upload-form");
  const uploadFileInput = root.querySelector("#archive-upload-file");
  const uploadBtn = root.querySelector("#archive-upload-btn");
@@ -821,53 +831,57 @@ export async function mount(root) {
    idleLabel: "Add source",
  });

-  /* ---------- upload (POST /api/git-sources/upload) — phase 64 (task 05) -------
+  /* ---------- upload (POST /api/git-sources/upload) — phase 64 (task 05), unpack-only (phase 90) -------
   * The archive upload form follows the phase-64 202 contract (A1):
   * the file input's selection is posted as FormData (the browser sets
   * the multipart boundary — no manual Content-Type), and the 202
   * answers the moment the archive is safely on disk — the "Uploading…"
   * label covers only that short receive. Then the button HANDS OVER to
-   * the scan: 202 → the page-local "Successfully uploaded — <file>"
-   * toast (showUploadToast — A2, safe to navigate away), the file input
-   * clears, and the processing state ("Processing…", disabled, title
-   * cleared) + startUploadPolling() own it — a 2 s poll of
-   * GET /api/git-sources/upload/status renders the live "Processing…
-   * <file> (n/m)" label (A4 — bare during unpack; the full path rides
-   * the button title) and settles it: success → the sync-style count
-   * line (fmtUploadResult) in the role=status result line + the
-   * "Archive uploaded: …" announce + loadSources (NO second toast — it
-   * already fired at the 202, A2); failure → the sanitized server
-   * error in the role=alert banner + loadSources, the file selection
-   * KEPT for a one-click re-upload. 409 (an upload is already in
-   * progress) raises NO error banner — it re-attaches to the in-flight
-   * run (processing state + poll, never stale); the phase-49 "server
+   * the background run (phase 90: UNPACK + REGISTER only — no scan):
+   * 202 → the page-local "Successfully uploaded — <file>" toast
+   * (showUploadToast — A2, safe to navigate away), the file input
+   * clears, and the processing state (bare "Processing…", disabled,
+   * title cleared) + startUploadPolling() own it — a 2 s poll of
+   * GET /api/git-sources/upload/status that renders the bare
+   * "Processing…" label for the WHOLE run (phase 90, A2 — the unpack
+   * has no file-level progress: no file, no "(n/m)" counts, no title)
+   * and settles it: success → the ready-for-sync line ("Uploaded
+   * <name> — press Sync sources to import it.", fmtUploadResult off
+   * the status's {"message": "uploaded"} detail) in the role=status
+   * result line + the "Archive uploaded — press Sync sources to
+   * import it." announce + loadSources (NO second toast — it already
+   * fired at the 202, A2); failure → the sanitized server error in
+   * the role=alert banner + loadSources, the file selection KEPT for
+   * a one-click re-upload. 409 (an upload is already in progress)
+   * raises NO error banner — it re-attaches to the in-flight run
+   * (processing state + poll, never stale); the phase-49 "server
   * detail inline for 409" branch is superseded. Other non-2xx (422
   * format/name, 413 cap, 5xx) keep the phase-49 error banner + the
   * kept file selection; a network failure keeps the fixed line. The
   * submit finally restores the button ONLY when no poll is active
   * (PLAN §7.4 — while startUploadPolling owns the button it stays
   * disabled / "Processing…"). Boot re-attach (initUploadStatus, the
-   * admin branch): a running scan re-enters the processing state + poll
+   * admin branch): a running run re-enters the processing state + poll
   * (no second upload, no error); a terminal run re-renders its result
   * line (success) or error banner (failed); idle does nothing.
-   * (The phase-49 synchronous 200 paragraph is superseded by phase 64.) */
+   * (The phase-49 synchronous 200 paragraph is superseded by phase 64;
+   * the phase-64 scan counts are superseded by phase 90.) */

-  /* The success line's text — the sync-result shape (sources.js's
-     fmtSyncResult convention): "N added" always leads, then updated /
-     unchanged / pruned — zero parts omitted (unchanged is shown
-     when nothing was added or updated). Reads exactly the keys the
-     upload status's detail carries (task 03's UploadOut-shaped dict). */
-  function fmtUploadResult(detail) {
-    const d = detail || {};
-    const added = d.added || 0;
-    const updated = d.updated || 0;
-    const parts = [`${added} added`];
-    if (updated > 0) parts.push(`${updated} updated`);
-    if ((d.unchanged || 0) > 0 || (added === 0 && updated === 0)) {
-      parts.push(`${d.unchanged || 0} unchanged`);
+  /* The result line's text (phase 90, A2 — the no-count contract): the
+     status success detail is exactly {"message": "uploaded"} — the
+     sync-style counts the phase-64 line rendered are gone (the scan —
+     and its counts — belong to the Sync button, which renders them on
+     the RAG page). `name` is the accepted 202's safe source name
+     (lastUploadName) when the run started on this page; it is null
+     after a reload or on the 409 re-attach (the line still points at
+     the next step, only without the name). */
+  function fmtUploadResult(detail, name) {
+    if (detail && detail.message === "uploaded") {
+      return name
+        ? `Uploaded ${name} — press Sync sources to import it.`
+        : "Uploaded — press Sync sources to import it.";
    }
-    if ((d.pruned || 0) > 0) parts.push(`${d.pruned} pruned`);
-    return parts.join(" · ");
+    return "The upload finished.";
  }

  /* Upload-success toast (phase 64 task 05, A2 — owner-locked): the
@@ -903,14 +917,15 @@ export async function mount(root) {
    }, UPLOAD_TOAST_MS);
  }

-  /* The scan poll (phase 64 task 05): a 2 s cadence — the SYNC_POLL_MS
-   * house value. Single timer, one loop at a time (the guard makes a
-   * double-start a no-op, and the submit finally reads this same
-   * variable to know whether the poll OWNS the button). Each tick
-   * fetches GET /api/git-sources/upload/status: running → the live
-   * "Processing… <file> (n/m)" label (A4 — bare "Processing…" during
-   * the unpack phase, before any file is indexed; the full untruncated
-   * path rides the button title) + reschedule; success → stop + the
+  /* The background-run poll (phase 64 task 05, unpack-only in phase
+   * 90): a 2 s cadence — the SYNC_POLL_MS house value. Single timer,
+   * one loop at a time (the guard makes a double-start a no-op, and
+   * the submit finally reads this same variable to know whether the
+   * poll OWNS the button). Each tick fetches
+   * GET /api/git-sources/upload/status: running → the bare
+   * "Processing…" label for the whole run (phase 90, A2 — the unpack
+   * has no file-level progress: no file, no "(n/m)" counts, the title
+   * stays clear) + reschedule; success → stop + the ready-for-sync
   * result line + the announcement + the row reload (NO toast — it
   * fired at the 202, A2); failed → stop + the sanitized server error
   * banner + the row reload (a post-swap failure keeps the row — the
@@ -920,6 +935,7 @@ export async function mount(root) {
   * retries next tick. */
  const UPLOAD_POLL_MS = 2000; // the SYNC_POLL_MS house value
  let uploadPollTimer = null; // null = no poll active (the finally's guard)
+  let lastUploadName = null; // phase 90: the accepted 202's safe source name — the result line's <name> (null after a reload / on the 409 re-attach)

  function stopUploadPolling() {
    if (uploadPollTimer !== null) {
@@ -929,8 +945,9 @@ export async function mount(root) {
  }

  /* The button's processing entry (the 202 + the 409 re-attach): from
-   * here the poll OWNS it — disabled, "Processing…", title cleared (a
-   * live file lands on it at the first tick). */
+   * here the poll OWNS it — disabled, bare "Processing…", title
+   * cleared (a live file never lands on it — phase 90: the run is
+   * unpack + register only, so the label stays bare). */
  function enterUploadProcessingState() {
    uploadBtn.disabled = true;
    uploadBtn.textContent = "Processing…";
@@ -941,7 +958,7 @@ export async function mount(root) {
   * finally, which calls this ONLY when no poll is active — PLAN §7.4). */
  function restoreUploadButton() {
    uploadBtn.disabled = false; // never stale — success OR failure
-    uploadBtn.textContent = "Upload & scan";
+    uploadBtn.textContent = "Upload";
    uploadBtn.removeAttribute("title");
  }

@@ -957,28 +974,27 @@ export async function mount(root) {
        uploadPollTimer = setTimeout(tick, UPLOAD_POLL_MS);
        return;
      }
-      // running: the live file label (A4 — bare "Processing…" during
-      // the unpack phase, before any file is indexed).
+      // running: the bare label for the whole background run (phase
+      // 90, A2 — the unpack has no file-level progress, so no file,
+      // no counts, and the title stays clear).
      if (status.state === "running") {
-        uploadBtn.textContent =
-          "Processing…" +
-          (status.current_file ? ` ${status.current_file}` : "") +
-          (status.files_total > 0 ? ` (${status.files_done}/${status.files_total})` : "");
-        uploadBtn.title = status.current_file || ""; // full path on hover
+        uploadBtn.textContent = "Processing…";
+        uploadBtn.title = "";
        uploadPollTimer = setTimeout(tick, UPLOAD_POLL_MS);
        return;
      }
      stopUploadPolling();
      if (status.state === "success") {
-        // The scan finished: the result line (the existing helper reads
-        // exactly these keys), the announcement, the row lands. NO toast
-        // here — it already fired at the 202 (A2).
+        // The run finished (unpack + register only — phase 90): the
+        // ready-for-sync line (fmtUploadResult reads the no-count
+        // detail), the announcement, the row lands. NO toast here — it
+        // already fired at the 202 (A2).
        const detail = status.detail || {};
        if (uploadResult) {
-          uploadResult.textContent = fmtUploadResult(detail);
+          uploadResult.textContent = fmtUploadResult(detail, lastUploadName);
          uploadResult.hidden = false;
        }
-        announce(`Archive uploaded: ${detail.source}.`);
+        announce("Archive uploaded — press Sync sources to import it.");
        uploadFileInput.value = "";
        restoreUploadButton();
        loadSources(); // the row lands / refreshes
@@ -990,7 +1006,7 @@ export async function mount(root) {
        // one-click re-upload, and the list reloads (a post-swap failure
        // keeps the row — the list state may have changed).
        if (uploadError) {
-          uploadError.textContent = status.error || "The upload scan failed.";
+          uploadError.textContent = status.error || "The upload failed.";
          uploadError.hidden = false;
        }
        restoreUploadButton();
@@ -1005,12 +1021,15 @@ export async function mount(root) {
  }

  /* Boot re-attach (phase 64 task 05, the admin branch only): fetch the
-   * upload status ONCE — a running scan re-enters the processing state
-   * + the poll (a reload mid-scan re-attaches instead of dead-ending —
+   * upload status ONCE — a running run re-enters the processing state
+   * + the poll (a reload mid-run re-attaches instead of dead-ending —
   * no second upload, no error); a finished run re-renders its result
-   * line ONLY (no announce, no toast — the toast fired at the 202, A2);
-   * a failed run re-renders its error banner; idle does nothing (and a
-   * blip is a no-op — the page boots honest either way). */
+   * line ONLY (no announce, no toast — the toast fired at the 202, A2;
+   * the name is unknown after a reload — lastUploadName is null — so
+   * the line is the nameless "Uploaded — press Sync sources to import
+   * it.", phase 90); a failed run re-renders its error banner; idle
+   * does nothing (and a blip is a no-op — the page boots honest
+   * either way). */
  async function initUploadStatus() {
    if (!uploadBtn) return;
    let status;
@@ -1029,15 +1048,17 @@ export async function mount(root) {
    }
    if (status.state === "success") {
      // The last run's result line only — no announce, no toast (A2).
+      // The safe name was page-local (lastUploadName is null after a
+      // reload) — the line still points at the next step (phase 90).
      if (uploadResult) {
-        uploadResult.textContent = fmtUploadResult(status.detail);
+        uploadResult.textContent = fmtUploadResult(status.detail, lastUploadName);
        uploadResult.hidden = false;
      }
      return;
    }
    if (status.state === "failed") {
      if (uploadError) {
-        uploadError.textContent = status.error || "The upload scan failed.";
+        uploadError.textContent = status.error || "The upload failed.";
        uploadError.hidden = false;
      }
    }
@@ -1070,11 +1091,13 @@ export async function mount(root) {
          body: new FormData(uploadFormEl),
        });
        if (r.status === 202) {
-          // The archive is safely on disk (A1) — the "successfully
-          // uploaded" moment: the toast fires NOW (A2), the file input
-          // clears, and the scan's poll takes over the button. The 202
-          // body (UploadAccepted) carries the safe source name; a body
-          // parse failure degrades to the picked file's name.
+          // The archive is safely on disk (phase 64 A1) — the
+          // "successfully uploaded" moment: the toast fires NOW (A2),
+          // the file input clears, and the background run's poll takes
+          // over the button. The 202 body (UploadAccepted) carries the
+          // safe source name (the settled result line's <name>, phase
+          // 90 — recorded page-locally); a body parse failure degrades
+          // to the picked file's name.
          let name = file.name;
          try {
            const data = await r.json();
@@ -1082,6 +1105,7 @@ export async function mount(root) {
          } catch {
            /* body parse failure — the picked file's name degrades fine */
          }
+          lastUploadName = name;
          showUploadToast(`Successfully uploaded — ${name}`);
          uploadFileInput.value = ""; // 202: the archive is on the server
          enterUploadProcessingState();
@@ -1111,7 +1135,7 @@ export async function mount(root) {
        }
      } finally {
        // Never stale (PLAN §7.4) — but ONLY when no poll owns the
-        // button: while startUploadPolling tracks the scan (202 / 409)
+        // button: while startUploadPolling tracks the run (202 / 409)
        // it stays disabled / "Processing…", so a finally restore here
        // would race the poll. No poll → the button is ours to restore.
        if (uploadPollTimer === null) restoreUploadButton();
@@ -1159,8 +1183,9 @@ export async function mount(root) {
       fetch /api/git-sources (the Sources-page gate pattern). */
    root.addEventListener("bor:view-refresh", () => loadSources());
    await loadSources();
-    // Phase 64 (task 05): re-attach a running scan (a reload mid-scan
-    // resumes the Processing state) or re-render a terminal run's
-    // result line / error banner.
+    // Phase 64 (task 05): re-attach a running run (a reload mid-run
+    // resumes the bare Processing state) or re-render a terminal
+    // run's result line / error banner (phase 90: the unpack-only,
+    // ready-for-sync line).
    await initUploadStatus();
  }
@@ -79,15 +79,18 @@ export async function mount(root) {
   * tree, in order (startSyncPolling):
   *   1. sync running   → "Syncing… <file> (n/m)" — bare "Syncing…" until
   *                       the import's first file (clone/pull, A4);
-   *   2. upload running → "Importing <file> (n/m)" — the background
-   *                       archive scan (the "clicked upload, then opened
+   *   2. upload running → BARE "Importing…" — the background upload
+   *                       RUN (phase 90: unpack + register only, no
+   *                       scan — its status never carries a file or
+   *                       counts; the "clicked upload, then opened
   *                       sources" contract, A3);
   *   3. sync success   → the phase-32 settle (counts + catalog refresh);
   *   4. sync failed    → the phase-32 failure (banner + modal);
   *   5. upload success → settle "Sync sources" + catalog refresh
-   *                       (loadDocs — the new documents must appear); the
-   *                       upload's counts live on the Sources page, never
-   *                       in #sync-result (A3);
+   *                       (loadDocs — phase 90: an upload no longer
+   *                       changes the KB, the re-read is a no-op safety
+   *                       net); the upload's result line lives on the
+   *                       Sources page, never in #sync-result (A3);
   *   6. upload failed  → settle "Sync sources" — the failure is the
   *                       Sources page's error banner, never this page's (A3);
   *   7. both idle      → retry-ready idle.
@@ -134,14 +137,16 @@ export async function mount(root) {
  }

  /* Phase 64 (task 04): the live-file label. `kind` picks the prefix —
-   * "sync" → "Syncing…", "upload" → "Importing" (the background scan's
+   * "sync" → "Syncing…", "upload" → "Importing" (the background run's
   * word, A3). The current file — the status endpoint's full
   * source/relative/path (A4) — is appended while one is being processed;
-   * the BARE prefix shows during the clone/pull (sync) or unpack (upload)
-   * phase, before any file is indexed. The counts appear only once the
-   * import has started (total > 0). CSS ellipsizes the button label; the
-   * same untruncated text goes to the button title + #sync-result (the
-   * aria-live announcer). */
+   * the BARE prefix shows during the clone/pull (sync), before any file
+   * is indexed. Phase 90: the upload run is unpack + register only (no
+   * scan), so its status never carries a file or counts — the
+   * "Importing" label is always the bare one. The counts appear only
+   * once the import has started (total > 0). CSS ellipsizes the button
+   * label; the same untruncated text goes to the button title +
+   * #sync-result (the aria-live announcer). */
  function fmtSyncLabel(kind, currentFile, done, total) {
    const prefix = kind === "upload" ? "Importing" : "Syncing…";
    let label = currentFile ? `${prefix} ${currentFile}` : prefix;
@@ -283,11 +288,12 @@ export async function mount(root) {
  }

  /* The 2 s poll (phase 64 task 04): each tick fetches BOTH jobs — the
-   * sync AND the background upload scan — and applies the two-job
-   * decision tree in order (see the section header). The 403 on the SYNC
-   * fetch hides the button (the whoami backstop); a 403 on the UPLOAD
-   * fetch is simply "no upload" (never a hide), and a network blip on
-   * either fetch retries next tick. */
+   * sync AND the background upload run (phase 90: unpack + register,
+   * no scan) — and applies the two-job decision tree in order (see the
+   * section header). The 403 on the SYNC fetch hides the button (the
+   * whoami backstop); a 403 on the UPLOAD fetch is simply "no upload"
+   * (never a hide), and a network blip on either fetch retries next
+   * tick. */
  function startSyncPolling() {
    if (syncPollTimer !== null) return;
    const tick = async () => {
@@ -305,7 +311,8 @@ export async function mount(root) {
        applySyncIdle();
        return;
      }
-      // The SECOND job: the background upload scan (admin-only surface).
+      // The SECOND job: the background upload run (phase 90: unpack +
+      // register only — no scan; admin-only surface).
      try {
        const ur = await fetch("/api/git-sources/upload/status");
        if (ur.ok) uploadStatus = await ur.json();
@@ -406,9 +413,10 @@ export async function mount(root) {

  /* Load-time re-attach (ADMIN ONLY): a running run re-enters running
   * state, a terminal run renders its last result. Phase 64 (A3): with
-   * the sync IDLE, an in-flight background upload scan adopts the button
-   * the same way — the "user clicked upload, then opened sources" case;
-   * a terminal upload is a no-op (the boot-time loadDocs() already shows
+   * the sync IDLE, an in-flight background upload RUN (phase 90: unpack
+   * + register — the bare "Importing…" label) adopts the button the
+   * same way — the "user clicked upload, then opened sources" case; a
+   * terminal upload is a no-op (the boot-time loadDocs() already shows
   * the current catalog). */
  async function initSyncButton() {
    if (!syncBtn) return;
@@ -436,7 +444,9 @@ export async function mount(root) {
      applySyncFailure(status);
      return;
    }
-    // Sync idle: check the SECOND job — an in-flight upload scan re-attaches.
+    // Sync idle: check the SECOND job — an in-flight upload run
+    // re-attaches (the bare "Importing…" label — phase 90: unpack +
+    // register only).
    let upload;
    try {
      const ur = await fetch("/api/git-sources/upload/status");
@@ -372,12 +372,15 @@
        </div>
        <!-- #sync-result is the aria-live announcer: the last sync
             result ("N added · …") when a sync settles, and — phase 64 —
-             the LIVE file label while either job runs ("Syncing… <file>
-             (n/m)" / "Importing <file> (n/m)"), UNTRUNCATED (the button's
-             label span ellipsizes; screen readers hear the full
-             source/relative path, which also rides the button title).
-             After an upload settles it stays empty — the upload's counts
-             live on the Sources page (A3). -->
+             the LIVE file label while a sync runs ("Syncing… <file>
+             (n/m)"), UNTRUNCATED (the button's label span ellipsizes;
+             screen readers hear the full source/relative path, which
+             also rides the button title). Phase 90: an in-flight upload
+             run adopts the button with the BARE "Importing…" label (the
+             run is unpack + register only — no scan, so its status
+             never carries a file or counts). After an upload settles it
+             stays empty — the upload's result line lives on the Sources
+             page (A3). -->
        <span class="sync-result" id="sync-result" role="status" aria-live="polite"></span>
        <!-- Sync failure banner — role="alert" so a failed sync is announced. -->
        <div class="kb-banner is-error" id="sync-error-banner" role="alert" hidden>
@@ -539,29 +542,35 @@
          <!-- Phase 49 (owner permission 2026-08-28): the archive upload
               form replaces the phase-38 local-directory form — an
               uploaded .tar/.tar.gz/.tgz/.zip is unpacked under
-               BOR_UPLOAD_DIR and scanned; the same filename replaces the
-               source in place (no new folder, no duplicate row). The file
-               control is labeled (visible <label for=…> — WCAG
-               input-label rule); the button runs the §7.4 never-stale
+               BOR_UPLOAD_DIR; the same filename replaces the source in
+               place (no new folder, no duplicate row). The file control
+               is labeled (visible <label for=…> — WCAG input-label
+               rule); the button ("Upload") runs the §7.4 never-stale
               lifecycle ("Uploading…" while the POST is out). Phase 64
-               (task 05) reworks the rest to the 202 contract (the
-               phase-49 synchronous 200 paragraph is superseded): the 202
-               arrives the moment the archive is safely on disk (A1) — a
-               JS-created "Successfully uploaded — <file>" toast fires
-               then (A2 — the phase-55 .toast node, no markup here; safe
-               to navigate away) and the button settles into the live
-               "Processing… <file> (n/m)" label (A4 — the full path rides
-               the button title) driven by the 2 s poll of
+               (task 05) reworked the rest to the 202 contract (the
+               phase-49 synchronous 200 paragraph is superseded): the
+               202 arrives the moment the archive is safely on disk (A1)
+               — a JS-created "Successfully uploaded — <file>" toast
+               fires then (A2 — the phase-55 .toast node, no markup
+               here; safe to navigate away) and the button settles into
+               the bare "Processing…" label driven by the 2 s poll of
               GET /api/git-sources/upload/status, until the success line
               (role=status) or the sanitized error banner (role=alert)
               lands; 409 re-attaches to the in-flight run — no error
               banner; the other non-2xx still show the server detail
-               inline. -->
+               inline. Phase 90 (owner-locked A1/A2/A3): the background
+               run is UNPACK + REGISTER ONLY — no model check, no import,
+               no overview refresh — so the processing state covers
+               unpack only (no file, no "(n/m)" counts, no title) and
+               the success line points at the next step: "Uploaded
+               <name> — press Sync sources to import it." The scan is
+               the RAG page's Sync button's job (edit the source's
+               ignore paths first, if you want files excluded). -->
          <form id="archive-upload-form">
            <label for="archive-upload-file">Upload a source archive (.tar, .tar.gz, .tgz, .zip)</label>
            <input id="archive-upload-file" name="file" type="file"
                   accept=".tar,.tar.gz,.tgz,.zip" required>
-            <button type="submit" id="archive-upload-btn">Upload &amp; scan</button>
+            <button type="submit" id="archive-upload-btn">Upload</button>
            <p class="git-source-error" id="archive-upload-error" role="alert" hidden></p>
            <p class="git-source-result" id="archive-upload-result" role="status"
               aria-live="polite" hidden></p>
@@ -569,7 +578,7 @@

          <div class="table-wrap" id="git-sources-table-wrap" role="region" aria-label="Sources" tabindex="0">
            <table class="git-sources-table" id="git-sources-table">
-              <caption class="visually-hidden">Sources the Sync button imports — git repositories it clones, local directories it walks, and uploaded archives (unpacked under the upload directory)</caption>
+              <caption class="visually-hidden">Sources the Sync button imports — git repositories it clones, local directories it walks, and uploaded archives (uploads unpack and register in place here; the Sync button scans them)</caption>
              <thead>
                <tr>
                  <th scope="col">Source</th>
@@ -594,18 +603,22 @@
               touched). Adding still does not clone — the Sync button
               mirrors the remaining sources (upstream file churn is
               pruned on that run); the phase-49 upload is the
-               in-place exception (it unpacks and scans, and a
-               same-name re-upload replaces the source in place). -->
+               in-place exception (it unpacks and registers — the scan
+               is the Sync button's job, phase 90 — and a same-name
+               re-upload replaces the source in place). -->
          <p class="git-source-hint" id="git-sources-hint" role="note">
            Removing a source is a total removal, done immediately: its
            entry, its indexed documents, and — for git clones and
            uploaded archives — its files on the server's disk (the
            confirmation modal spells out exactly what will be deleted;
            files in your own local directories are never touched).
-            Uploads unpack and scan immediately — re-uploading the same
-            filename replaces that source in place (no new folder, no
-            duplicate row). The Sync button still mirrors the remaining
-            sources (files removed upstream are pruned on that run).
+            Uploads unpack and register the source only — re-uploading
+            the same filename replaces that source in place (no new
+            folder, no duplicate row). Press <strong>Sync sources</strong>
+            on the RAG page to scan it; edit the source's ignore paths
+            first if you want files excluded. The Sync button still
+            mirrors the remaining sources (files removed upstream are
+            pruned on that run).
          </p>

          <!-- Phase 69 (owner request 2026-09-02): the remove