Report queued tasks the scheduling pass never considers

A task in retry backoff was filtered out before the candidate loop, so it
recorded no rejection at all: queued, apparently assignable, and silent. That is
the exact shape that made F5 take a live session to diagnose. It now reports
"retry backoff until <time>".

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

web/src/api/client.ts

@@ -1,4 +1,4 @@
-import type { CreatedEvent, Detail, Overview } from './types'
+import type { Account, CreatedEvent, Detail, Overview } from './types'
 
 function sessionExpired(response: Response) {
   if (response.status === 401) {
@@ -49,6 +49,13 @@ async function upload(body: string) {
   return ((await response.json()) as { ref: string }).ref
 }
 
+async function session(): Promise<Account | undefined> {
+	const response = await fetch('/v1/ui/session', { credentials: 'same-origin' })
+	if (response.status === 401) return undefined
+	if (!response.ok) throw await responseError(response)
+	return response.json() as Promise<Account>
+}
+
 async function login(username: string, password: string) {
   const response = await fetch('/v1/ui/session', {
     method: 'POST',
@@ -57,6 +64,7 @@ async function login(username: string, password: string) {
     body: JSON.stringify({ username, password }),
   })
   if (!response.ok) throw await responseError(response)
+	return response.json() as Promise<Account>
 }
 
 async function logout() {
@@ -68,8 +76,15 @@ async function logout() {
 }
 
 export const api = {
+	session,
   login,
   logout,
+	account: () => request<Account>('/v1/ui/account'),
+	updateAccount: (body: { current_password: string; username: string; new_password?: string }) =>
+		request<Account>('/v1/ui/account', {
+			method: 'PUT',
+			body: JSON.stringify(body),
+		}),
   overview: () => request<Overview>('/v1/ui/overview'),
   detail: (id: string) => request<Detail>(`/v1/ui/tasks/${id}`),
   artifact: (ref: string) => text(`/v1/ui/artifacts/${ref}`),