@abide/abide 0.106.0 → 0.108.0

package/CHANGELOG.md

@@ -1,5 +1,28 @@
 # @abide/abide
 
+## 0.108.0
+
+### Minor Changes
+
+- fda92c3: every MCP tool call writes a debug line on abide:mcp, and every assistant conversation one on abide:assistant ([`6c4d8c7`](https://github.com/briancray/abide/commit/6c4d8c745491308c0208eb18e900473fb8ee9e03))
+
+### Patch Changes
+
+- fda92c3: a back or forward that reloads no longer writes the departed page's scroll into the entry being loaded ([`294c0e6`](https://github.com/briancray/abide/commit/294c0e6ed806c38e80a1f872e7be6ac5579c7382))
+- fda92c3: a site holds a dropped bridge pairing for 60 seconds, past when the bridge notices a silent drop ([`ac8e1d3`](https://github.com/briancray/abide/commit/ac8e1d313b7ea54414cd1034b56eb4cfa88ab31b))
+- fda92c3: bind:value on a <select> selects an option added after the value was written ([`cd592b2`](https://github.com/briancray/abide/commit/cd592b2ccdc617c5cfed2a6acf5f5a458bc9986b))
+- fda92c3: markup the client parses for a raw value, an {#if} arm or a {#for} row inside an <svg> or <math> is parsed in that namespace ([`f8ba81e`](https://github.com/briancray/abide/commit/f8ba81e94e0583858811e3c403535c0c0632b87c))
+
+## 0.107.0
+
+### Minor Changes
+
+- bd2a74f: Breaking: an assistant announces a tool call as the model starts writing it, and a site may ask the visitor's Claude Code for built-in tools ([`c959804`](https://github.com/briancray/abide/commit/c959804fd19c3e99fe439f3f1120f1ef13f42ff8))
+
+### Patch Changes
+
+- bd2a74f: a bind:element callback is handed a connected node whose blocks and components have built, and bind:element on a component is a build error ([`e15fbee`](https://github.com/briancray/abide/commit/e15fbee6f7c780dab2105ca245dd79dbb4a2e317))
+
 ## 0.106.0
 
 ### Minor Changes

package/docs/REGISTRY.md

@@ -321,9 +321,9 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | --- | --- | --- | --- |
 | `assistant` | `(messages: AssistantMessage[], provider: Provider, options?: AssistantOptions) => AsyncGenerator<AssistantEvent>` | A conversation with a model, as the events it produces. | 44.1, 44.2, 44.3, 44.4, 44.21 |
 | `AssistantMessage` | `{ role: 'user' \| 'assistant'; content: string }` | One turn of the transcript a caller sends. | 44.3, 44.4 |
-| `AssistantEvent` | `{ type: 'text'; text: string } \| { type: 'tool'; id: string; name: string; input: unknown } \| { type: 'result'; id: string; text: string; failed: boolean } \| { type: 'done'; stop: string; usage: { input: number; output: number } }` | What a conversation produces: text, a tool call, its result, and the end. | 44.2, 44.11 |
+| `AssistantEvent` | `{ type: 'text'; text: string } \| { type: 'tool'; id: string; name: string } \| { type: 'input'; id: string; input: unknown } \| { type: 'result'; id: string; text: string; failed: boolean } \| { type: 'done'; stop: string; usage: { input: number; output: number } }` | What a conversation produces: text, a tool call as it starts, its input once written, its result, and the end. | 44.2, 44.11, 44.29 |
 | `AssistantOptions` | `{ mcp?: boolean; maxTurns?: number }` | What `assistant` takes beside a provider. | 44.6, 44.8, 44.11 |
-| `Provider` | `{ run(messages: AssistantMessage[], tools: Toolbox, limits: { maxTurns: number; signal: AbortSignal }): AsyncGenerator<AssistantEvent> }` | What runs a conversation. | 44.2 |
+| `Provider` | `{ run(messages: AssistantMessage[], tools: Toolbox, limits: { maxTurns: number; signal: AbortSignal }): AsyncGenerator<AssistantEvent> }` | What runs a conversation. | 44.2, 44.29 |
 | `Toolbox` | `{ list: ToolDefinition[]; call(name: string, input: unknown): Promise<{ text: string; failed: boolean }> }` | The app's MCP tools, called as the asker. | 44.6, 44.7 |
 | `ToolDefinition` | `{ name: string; description: string; inputSchema: unknown; annotations: { readOnlyHint: boolean; destructiveHint: boolean; idempotentHint: boolean }; outputSchema: unknown }` | A tool as the app's MCP surface lists it. | 20.14, 20.16, 44.6 |
 
@@ -338,8 +338,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.28 |
-| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max' }` | The Claude Code options a site may set for a turn. | 44.16 |
+| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.28, 44.31 |
+| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | 44.16, 44.30 |
 | `claudeCode.bridgeCommand` | `() => { command: string; expires: number }` | The command that pairs a bridge with this browser. | 44.14 |
 | `claudeCode.bridge` | `() => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22 |
 | `BridgeStatus` | `{ paired: boolean; command: string \| undefined }` | Whether a bridge is paired, and the command that pairs one where none is. | 44.20 |
@@ -464,7 +464,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `abide:lifecycle` | `debug` `error` | A lifecycle that ran. | 28.8 |
 | `abide:principal` | `debug` `warning` | A principal set or cleared. | 28.8 |
 | `abide:health` | `warning` | An `onHealth` that threw or answered a non-object. | 25.2, 28.8 |
-| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, or a tool published with no description. | 20.3, 20.9, 28.8 |
+| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, a tool call answered, or a tool published with no description. | 20.3, 20.9, 20.18, 28.8 |
+| `abide:assistant` | `debug` | One line per conversation, once it ends. | 44.32 |
 | `abide:openapi` | `warning` | A handler whose schema had no JSON Schema export. | 20.11, 28.8 |
 | `abide:render` | `warning` | An `error.abide` that itself failed. | 28.8 |
 | `abide:refuse` | `warning` | A message formatter that threw. | 15.13, 28.8 |
@@ -527,7 +528,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | --- | --- | --- |
 | `{expr}` | Reactive text, escaped. | 32.1, 32.23 |
 | formatting whitespace | What a run of whitespace renders as. | 33.17, 33.18 |
-| `{raw(...)}` | Raw HTML. | 32.2, 32.25, 32.26, 32.30, 32.31 |
+| `{raw(...)}` | Raw HTML. | 32.2, 32.25, 32.26, 32.30, 32.31, 32.70 |
 | `name={expr}` | A reactive attribute or property. | 32.3, 32.20, 32.23, 32.37 |
 | `on<event>={fn}` | A native listener on an element, and an ordinary prop on a component. | 32.4 |
 | `name="…{expr}…"` | An interpolated quoted value. | 32.3 |
@@ -537,7 +538,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `bind:open` | The same, on a `<details>`. | 32.7 |
 | `bind:group` | Radio or checkbox membership. | 32.8 |
 | `bind:value={{get, set}}` | Two-way bind over an explicit accessor pair, on an element or a component. | 32.5, 32.6 |
-| `bind:element={Reactive<Element> \| ((element: Element) => void \| Disposer)}` | A node reference. | 32.9, 32.38, 32.66 |
+| `bind:element={Reactive<Element> \| ((element: Element) => void \| Disposer)}` | A node reference. | 32.9, 32.38, 32.66, 32.68, 32.69 |
 | `class:name={cond}` | Toggles a class. | 32.10 |
 | `style:prop={value}` | Sets one style property. | 32.10, 32.19 |
 | `{...expr}` | Spreads props or attributes. | 32.11, 32.37, 33.12, 33.13 |
@@ -547,15 +548,15 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | 32.2, 32.24, 32.26, 32.30, 32.31 |
+| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | 32.2, 32.24, 32.26, 32.30, 32.31, 32.70 |
 | `Raw` | `class Raw { html: string }` | What `raw` hands back. | 32.24 |
 
 ### Control flow
 
 | Spelling | Branches | Meaning | Rules |
 | --- | --- | --- | --- |
-| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | 32.12, 32.21, 32.63, 32.64, 32.65, 41.24 |
-| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | 32.13, 32.14, 32.15, 32.22, 32.29, 32.32, 32.33, 32.63, 32.64, 32.67, 41.8, 41.14, 41.15 |
+| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | 32.12, 32.21, 32.63, 32.64, 32.65, 32.70, 41.24 |
+| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | 32.13, 32.14, 32.15, 32.22, 32.29, 32.32, 32.33, 32.63, 32.64, 32.67, 32.70, 41.8, 41.14, 41.15 |
 | `{#try}` | `{:catch e}`, `{:finally}` | A render-time boundary and a region. | 32.16, 32.56, 32.63, 32.64 |
 
 ### Components

package/docs/RULEBOOK.md

@@ -1312,6 +1312,11 @@ where that schema is an object, and MUST declare none otherwise.
 20.17 A `tools/call` that `/__abide/mcp` answers for a tool declaring an `outputSchema` MUST carry
 the value as `structuredContent` beside its text, and a refused call MUST carry none.
 
+20.18 Every tool call the MCP surface answers MUST write one `debug` line on `abide:mcp` naming the
+tool, the status it was answered with and how long it took, whether `/__abide/mcp` or a `Toolbox`
+made the call — a call naming a tool it does not publish answered 404, and one whose answer threw
+500.
+
 # 21. Generated headers
 
 21.1 Every response MUST carry `x-content-type-options: nosniff`.
@@ -1941,6 +1946,7 @@ each one a list holds under 32.62.
 
 32.62 A `bind:value` on a `<select multiple>` MUST hold a list: each option is selected where the list
 holds its value as text, and a change MUST write the values of the selected options, in order.
+On any `<select>`, an option added after the value was written MUST be selected where it holds it.
 
 32.63 A `{#if}`, `{#for}`, `{#try}` or `{#component Name(pattern)}` not closed by its own close tag
 before the end of the file, or before the close tag of the element it was opened in, MUST be a build
@@ -1959,6 +1965,15 @@ markup.
 32.67 A `{#for}` MUST keep the row and the nodes of a key it keeps when that key's item is a
 different value, and MUST update the row's bindings that read the item in place.
 
+32.68 A `bind:element` value MUST be handed its element after a region's build has put that element
+in the region, and after every block and component inside the element has built, so a callback
+reading layout, querying its descendants or calling `focus()` acts on a connected, whole node.
+
+32.69 `bind:element` on a component MUST be a build error.
+
+32.70 Markup the client parses for a slot holding a value branded by `raw`, a `{#if}` arm or a
+`{#for}` row MUST be parsed as the document's parser parses it inside the element it goes into.
+
 # 33. Props
 
 33.1 `props` MUST be callable from a `<script>` block only, and calling it from a `<script module>`
@@ -3060,10 +3075,13 @@ and MUST refuse 409 where none is paired.
 44.14 A code `claudeCode.bridgeCommand` mints MUST pair one bridge with the browser that asked for
 it, once, and MUST NOT pair once it has expired.
 
-44.15 A bridge MUST run Claude Code with its built-in tools off, no setting source read and no MCP
-server but the bridge's own, in an empty directory removed when the run ends.
+44.15 A bridge MUST run Claude Code with no MCP server but the bridge's own, in an empty directory
+removed when the run ends, and with no built-in tool and no setting source the visitor did not pass
+it after `--`.
 
-44.16 A bridge MUST take from the site no Claude Code option `ClaudeCodeConfig` does not name.
+44.16 A bridge MUST lay each option a site sets but `tools` (44.30) on as Claude Code's flag of that
+name, MUST fail a turn whose config sets any option `ClaudeCodeConfig` does not name, and MUST lay
+an option the visitor passed after `--` over the site's.
 
 44.17 An MCP request a bridge's Claude Code makes MUST be answered from the `Toolbox` of the turn it
 was made in.
@@ -3088,9 +3106,9 @@ its lines MUST be relayed.
 carrying it was not taken by `/__abide/bridge`, or where no reply arrived within 120 seconds.
 
 44.25 A bridge whose stream from `/__abide/bridge` ends unasked MUST redial it with its pairing's
-token, each wait twice the last, until it is refused or 30 seconds have passed.
+token, each wait twice the last, until it is refused or 60 seconds have passed.
 
-44.26 `/__abide/bridge` MUST hold a pairing whose stream dropped for 30 seconds, and a `GET` bearing
+44.26 `/__abide/bridge` MUST hold a pairing whose stream dropped for 60 seconds, and a `GET` bearing
 its token within them MUST resume the stream with every frame the dropped one had not sent.
 
 44.27 `/__abide/bridge` MUST send a comment on a pairing's stream every 15 seconds for as long as
@@ -3098,3 +3116,17 @@ the stream is open.
 
 44.28 A bridge whose stream from `/__abide/bridge` carries no line for 45 seconds MUST end it and
 redial it as 44.25 says.
+
+44.29 A `Provider` MUST yield a tool call's `tool` event when the model starts writing the call,
+and its `input` event, with the same `id`, once the call is written.
+
+44.30 A built-in tool MUST be available to a turn only where the site's `tools` names it and the
+visitor's `--tools` does, MUST be approved without asking unless the visitor passed `--allowedTools`,
+and the bridge MUST say once each tool the site asked for that the visitor did not grant.
+
+44.31 A bridge stopped by `SIGTERM`, `SIGINT` or `SIGHUP` MUST end every Claude Code run it started
+before it exits.
+
+44.32 A conversation MUST write one `debug` line on `abide:assistant` when its events end, naming
+its stop reason, the transcript's length, the tool calls it made, its usage and how long it took,
+and naming it `unfinished` where it ended without a `done`.

package/docs/abide.md

@@ -5130,7 +5130,7 @@ test('a model lists the handler as a tool, and calls it', async () => {
 })
 ```
 
-Every handler the app publishes is a tool, a read as much as a write. The model picks a tool by its `description`, the same sentence the OpenAPI operation carries, so write one on every handler. A tool with none warns on `abide:mcp`.
+Every handler the app publishes is a tool, a read as much as a write. The model picks a tool by its `description`, the same sentence the OpenAPI operation carries, so write one on every handler. A tool with none warns on `abide:mcp`, and with `DEBUG=abide:mcp` every call writes a line naming the tool, its status and how long it took.
 
 The endpoint runs inside the app's own middleware. The rung that decides what a browser may call decides what a model may call, and a declared refusal reaches the model by its name, so it can tell the person why it stopped. Read on: [Who sees what](/guide/decide-who-sees-what.md)
 
@@ -5253,8 +5253,11 @@ const events = reactive(() =>
 {#for event of events}
     {#if event.type === 'tool'}
         <li><span>tool call</span>
+            <p class="font-mono text-chrome">{event.name}</p></li>
+    {:else if event.type === 'input'}
+        <li><span>with input</span>
             <p class="font-mono text-chrome">
-                {event.name} {JSON.stringify(event.input)}
+                {JSON.stringify(event.input)}
             </p></li>
     {:else if event.type === 'result'}
         <li><span>your handler answered</span>
@@ -5286,7 +5289,8 @@ const recorded: Provider = {
         )
         const name = tool?.name ?? ''
         const input = { name: 'Ada' }
-        yield { type: 'tool', id: 'toolu_1', name, input }
+        yield { type: 'tool', id: 'toolu_1', name }
+        yield { type: 'input', id: 'toolu_1', input }
         const answered = await tools.call(name, input)
         yield { type: 'result', id: 'toolu_1', ...answered }
         yield { type: 'text', text: 'Ada Lovelace is at Analytical Engines.' }
@@ -5343,10 +5347,11 @@ test('the model calls the CRM search, through the app', async () => {
 | --- | --- |
 | `AssistantMessage` | One turn of the transcript, `{ role, content }`. The last is the user's. |
 | `AssistantOptions` | `mcp` to offer the tools, and `maxTurns`, 10 by default, to cap the model's turns in one call. |
-| `AssistantEvent` | What the page reads: `text`, `tool`, `result`, then `done` with the stop reason and token usage. The same events from every provider. |
+| `AssistantEvent` | What the page reads: `text`, `tool` as a call starts, `input` once it is written, `result`, then `done` with the stop reason and token usage. The same events from every provider. |
 | `Provider` | What runs the conversation: one method, `run`. Write one for another model, or a recording for a test. |
 | `Toolbox` | What a provider is handed: `list` of the tools, and `call` to run one as the asker. |
 | `ToolDefinition` | One tool in `list`: its name, description and input schema. |
+| `abide:assistant` | The log namespace that writes one `debug` line per conversation once it ends: the stop reason, the transcript's length, the tool calls, the tokens and the time. |
 
 ## `claudeApi` sends the request body you wrote
 
@@ -5620,7 +5625,13 @@ test('unpaired: asking is refused, the bridge shows a command', async () => {
 })
 ```
 
-`claudeCode` sends the conversation to Claude Code on the asker's machine, on their own sign-in and plan. Its config, `ClaudeCodeConfig`, is Claude Code's own option names: `model`, `fallbackModel`, `systemPrompt`, `appendSystemPrompt` and `effort`. Its tools, permissions and directory are not the site's to set.
+`claudeCode` sends the conversation to Claude Code on the asker's machine, on their own sign-in and plan. Its config, `ClaudeCodeConfig`, is Claude Code's own option names, each passed as its flag: `model`, `fallbackModel`, `systemPrompt`, `appendSystemPrompt`, `effort`, `maxBudgetUsd`, `betas` and `disallowedTools`. Permissions, directories and settings are not the site's to set.
+
+`tools` asks for Claude Code's built-in tools, and the visitor decides. A tool runs only where they granted it after the command's `--`, and the bridge tells them about any it was asked for and not given. Anything else after `--` goes to Claude Code as written, and overrides what the site set.
+
+```
+bunx @abide/bridge <site> <code> -- --tools WebSearch,WebFetch
+```
 
 The visitor pairs once per visit by running a command, which dials out to the site. Asking with nothing paired is refused 409.
 
@@ -7699,7 +7710,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `AssistantEvent` | `{ type: 'text'; text: string } \| { type: 'tool'; id: string; name: string; input: unknown } \| { type: 'result'; id: string; text: string; failed: boolean } \| { type: 'done'; stop: string; usage: { input: number; output: number } }` | What a conversation produces: text, a tool call, its result, and the end. | [44.2](/rulebook#44.2), [44.11](/rulebook#44.11) |
+| `AssistantEvent` | `{ type: 'text'; text: string } \| { type: 'tool'; id: string; name: string } \| { type: 'input'; id: string; input: unknown } \| { type: 'result'; id: string; text: string; failed: boolean } \| { type: 'done'; stop: string; usage: { input: number; output: number } }` | What a conversation produces: text, a tool call as it starts, its input once written, its result, and the end. | [44.2](/rulebook#44.2), [44.11](/rulebook#44.11), [44.29](/rulebook#44.29) |
 
 ## Taught in
 
@@ -7735,7 +7746,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `Provider` | `{ run(messages: AssistantMessage[], tools: Toolbox, limits: { maxTurns: number; signal: AbortSignal }): AsyncGenerator<AssistantEvent> }` | What runs a conversation. | [44.2](/rulebook#44.2) |
+| `Provider` | `{ run(messages: AssistantMessage[], tools: Toolbox, limits: { maxTurns: number; signal: AbortSignal }): AsyncGenerator<AssistantEvent> }` | What runs a conversation. | [44.2](/rulebook#44.2), [44.29](/rulebook#44.29) |
 
 ## Taught in
 
@@ -7825,7 +7836,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.28](/rulebook#44.28) |
+| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.28](/rulebook#44.28), [44.31](/rulebook#44.31) |
 | `claudeCode.bridgeCommand` | `() => { command: string; expires: number }` | The command that pairs a bridge with this browser. | [44.14](/rulebook#44.14) |
 | `claudeCode.bridge` | `() => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22) |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | [36.7](/rulebook#36.7), [44.14](/rulebook#44.14), [44.15](/rulebook#44.15), [44.19](/rulebook#44.19), [44.23](/rulebook#44.23), [44.26](/rulebook#44.26), [44.27](/rulebook#44.27), [16.78](/rulebook#16.78) |
@@ -7846,7 +7857,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max' }` | The Claude Code options a site may set for a turn. | [44.16](/rulebook#44.16) |
+| `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | [44.16](/rulebook#44.16), [44.30](/rulebook#44.30) |
 
 ## Taught in
 
@@ -8283,7 +8294,8 @@ Generated surfaces: what is written in place rather than imported.
 | `abide:lifecycle` | `debug` `error` | A lifecycle that ran. | [28.8](/rulebook#28.8) |
 | `abide:principal` | `debug` `warning` | A principal set or cleared. | [28.8](/rulebook#28.8) |
 | `abide:health` | `warning` | An `onHealth` that threw or answered a non-object. | [25.2](/rulebook#25.2), [28.8](/rulebook#28.8) |
-| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, or a tool published with no description. | [20.3](/rulebook#20.3), [20.9](/rulebook#20.9), [28.8](/rulebook#28.8) |
+| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, a tool call answered, or a tool published with no description. | [20.3](/rulebook#20.3), [20.9](/rulebook#20.9), [20.18](/rulebook#20.18), [28.8](/rulebook#28.8) |
+| `abide:assistant` | `debug` | One line per conversation, once it ends. | [44.32](/rulebook#44.32) |
 | `abide:openapi` | `warning` | A handler whose schema had no JSON Schema export. | [20.11](/rulebook#20.11), [28.8](/rulebook#28.8) |
 | `abide:render` | `warning` | An `error.abide` that itself failed. | [28.8](/rulebook#28.8) |
 | `abide:refuse` | `warning` | A message formatter that threw. | [15.13](/rulebook#15.13), [28.8](/rulebook#28.8) |
@@ -8597,7 +8609,7 @@ Generated surfaces: what is written in place rather than imported.
 | --- | --- | --- |
 | `{expr}` | Reactive text, escaped. | [32.1](/rulebook#32.1), [32.23](/rulebook#32.23) |
 | formatting whitespace | What a run of whitespace renders as. | [33.17](/rulebook#33.17), [33.18](/rulebook#33.18) |
-| `{raw(...)}` | Raw HTML. | [32.2](/rulebook#32.2), [32.25](/rulebook#32.25), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31) |
+| `{raw(...)}` | Raw HTML. | [32.2](/rulebook#32.2), [32.25](/rulebook#32.25), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31), [32.70](/rulebook#32.70) |
 | `name={expr}` | A reactive attribute or property. | [32.3](/rulebook#32.3), [32.20](/rulebook#32.20), [32.23](/rulebook#32.23), [32.37](/rulebook#32.37) |
 | `on<event>={fn}` | A native listener on an element, and an ordinary prop on a component. | [32.4](/rulebook#32.4) |
 | `name="…{expr}…"` | An interpolated quoted value. | [32.3](/rulebook#32.3) |
@@ -8607,7 +8619,7 @@ Generated surfaces: what is written in place rather than imported.
 | `bind:open` | The same, on a `<details>`. | [32.7](/rulebook#32.7) |
 | `bind:group` | Radio or checkbox membership. | [32.8](/rulebook#32.8) |
 | `bind:value={{get, set}}` | Two-way bind over an explicit accessor pair, on an element or a component. | [32.5](/rulebook#32.5), [32.6](/rulebook#32.6) |
-| `bind:element={Reactive<Element> \| ((element: Element) => void \| Disposer)}` | A node reference. | [32.9](/rulebook#32.9), [32.38](/rulebook#32.38), [32.66](/rulebook#32.66) |
+| `bind:element={Reactive<Element> \| ((element: Element) => void \| Disposer)}` | A node reference. | [32.9](/rulebook#32.9), [32.38](/rulebook#32.38), [32.66](/rulebook#32.66), [32.68](/rulebook#32.68), [32.69](/rulebook#32.69) |
 | `class:name={cond}` | Toggles a class. | [32.10](/rulebook#32.10) |
 | `style:prop={value}` | Sets one style property. | [32.10](/rulebook#32.10), [32.19](/rulebook#32.19) |
 | `{...expr}` | Spreads props or attributes. | [32.11](/rulebook#32.11), [32.37](/rulebook#32.37), [33.12](/rulebook#33.12), [33.13](/rulebook#33.13) |
@@ -8617,8 +8629,8 @@ Generated surfaces: what is written in place rather than imported.
 
 | Spelling | Branches | Meaning | Rules |
 | --- | --- | --- | --- |
-| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | [32.12](/rulebook#32.12), [32.21](/rulebook#32.21), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.65](/rulebook#32.65), [41.24](/rulebook#41.24) |
-| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | [32.13](/rulebook#32.13), [32.14](/rulebook#32.14), [32.15](/rulebook#32.15), [32.22](/rulebook#32.22), [32.29](/rulebook#32.29), [32.32](/rulebook#32.32), [32.33](/rulebook#32.33), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.67](/rulebook#32.67), [41.8](/rulebook#41.8), [41.14](/rulebook#41.14), [41.15](/rulebook#41.15) |
+| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | [32.12](/rulebook#32.12), [32.21](/rulebook#32.21), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.65](/rulebook#32.65), [32.70](/rulebook#32.70), [41.24](/rulebook#41.24) |
+| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | [32.13](/rulebook#32.13), [32.14](/rulebook#32.14), [32.15](/rulebook#32.15), [32.22](/rulebook#32.22), [32.29](/rulebook#32.29), [32.32](/rulebook#32.32), [32.33](/rulebook#32.33), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.67](/rulebook#32.67), [32.70](/rulebook#32.70), [41.8](/rulebook#41.8), [41.14](/rulebook#41.14), [41.15](/rulebook#41.15) |
 | `{#try}` | `{:catch e}`, `{:finally}` | A render-time boundary and a region. | [32.16](/rulebook#32.16), [32.56](/rulebook#32.56), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64) |
 
 ## Components
@@ -8660,7 +8672,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | [32.2](/rulebook#32.2), [32.24](/rulebook#32.24), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31) |
+| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | [32.2](/rulebook#32.2), [32.24](/rulebook#32.24), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31), [32.70](/rulebook#32.70) |
 
 ## Taught in
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.106.0",
+    "version": "0.108.0",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/compiler/classifyTemplate.ts

@@ -464,13 +464,15 @@ export function isParserOwned(lowerTag: string): boolean {
 /**
  * The key a component's attribute passes a prop under, or `undefined` where it is no prop.
  *
- * 32.6, 32.10 — a `bind:` handing over a `Reactive` keys the name after it, and any other `:` name
- * — `class:`, `style:`, a `bind:` with nothing bound — is an element's own. The build writes the
+ * 32.6, 32.10, 32.69 — a `bind:` handing over a `Reactive` keys the name after it, and any other
+ * `:` name — `class:`, `style:`, `bind:element`, a `bind:` with nothing bound — is an element's own.
+ * Read as a prop, `bind:element` was one named `element` the child never declared, and the
+ * callback never ran. The build writes the
  * props record by this and the checker projects it by this, so a tag is held to what it sends.
  */
 export function propKeyOf(attribute: Attribute): string | undefined {
     if (attribute.lowerName.startsWith('bind:'))
-        return attribute.expression
+        return attribute.expression && !isElementBind(attribute.lowerName)
             ? attribute.name.slice('bind:'.length)
             : undefined
     return attribute.name.includes(':') ? undefined : attribute.name

package/src/compiler/emitClient.ts

@@ -244,7 +244,7 @@ export function emitClient(
     let fills = contributed
     if (applied !== '' || builds) {
         const build = builds
-            ? `function __build(__document) {\n    ${emitMaker(page, lowering)}\n}\n`
+            ? `function __build(__parent) {\n    ${emitMaker(page, lowering)}\n}\n`
             : ''
         // THE HEAD GOES BEFORE THE FILL, so the guard is written out where there is one to apply.
         fills +=
@@ -453,7 +453,7 @@ function clientComponent(
     const fill =
         sink.positions.length === 0
             ? ''
-            : `function __build(__document) {\n    ${emitMaker(sink, lowering)}\n}
+            : `function __build(__parent) {\n    ${emitMaker(sink, lowering)}\n}
 ${lowering.use('fillEmpty')}(${REGION_ROOT}, __build)\n`
     const captured = sink.defersSetup
         ? `const ${SHARE_AT} = ${lowering.use('currentShare')}()\n`
@@ -558,9 +558,11 @@ function emitRegion(sink: Cursor, region: RegionEmission): RegionEmission {
 
     for (const line of walkTo(positions, live, lowering)) chain.push(line)
 
-    // THE UNITS, in the order a page always installed them — text, listeners, attributes, the node
-    // handed over, then the regions. The walk does not depend on it; a `bind:element` callback has
-    // always run with every other binding already in place, and that is kept.
+    // THE UNITS — text, listeners, attributes, the regions, then the node handed over. The walk
+    // does not depend on the order.
+    // 32.68 — A `bind:element` CALLBACK RUNS LAST, so the node it is handed is whole: a child
+    // component, an arm or a list inside it has built, and `form.querySelector('input')` finds an
+    // `<input>` an `<Input>` makes.
     // 32.67 — A ROW'S ITEM WATCHES FIRST, one after another, which is how its scope finds them
     // (`Scope.itemWatch`).
     const items: string[] = []
@@ -597,7 +599,6 @@ function emitRegion(sink: Cursor, region: RegionEmission): RegionEmission {
     for (const unit of texts) lines.push(unit)
     for (const unit of handlers) lines.push(unit)
     for (const unit of attributes) lines.push(unit)
-    for (const unit of elements) lines.push(unit)
 
     // 32.67 — WHAT A ROW'S REGIONS AND COMPONENTS BIND reads the row's item through its cell: the
     // row's `update` reaches its own top level and no further.
@@ -613,6 +614,7 @@ function emitRegion(sink: Cursor, region: RegionEmission): RegionEmission {
                 else emitInvocation(at, holder, region)
             }
         }
+        for (const unit of elements) lines.push(unit)
         // 32.43 — A REGION THAT MOUNTS NOTHING INVOKES NOTHING, so what it declares is reached
         // from nowhere and is not declared: a row declaring a component it never invokes stays a
         // row whose mount is the shared empty one.
@@ -835,7 +837,9 @@ const WRITES = {
 // instance OPENS (`shareScope`): a page that shares nothing still carries this for a child that does.
 const SHARE_AT = '__shareAt'
 
-// The document a region's maker is handed and builds its nodes from.
+// The parent a region's maker is handed, which its nodes are made for and go into (`parseMarkup`).
+const PARENT = '__parent'
+// The document a built region makes its nodes with, read off `PARENT` once a build.
 const DOCUMENT = '__document'
 
 // A run's anchors while it holds markup (32.30), as the JS string literals a built run parses with.
@@ -843,9 +847,9 @@ const RAW_OPEN_MARKUP = JSON.stringify(anchorMarkup(RAW_OPEN))
 const RAW_CLOSE_MARKUP = JSON.stringify(anchorMarkup(RAW_CLOSE))
 
 /**
- * The body of the function that makes a region's nodes from a `__document`.
+ * The body of the function that makes a region's nodes for a `__parent`.
  *
- * WHAT MAKES A REGION'S NODES, as the body of a function taking the region's `__document`: the
+ * WHAT MAKES A REGION'S NODES, as the body of a function taking the region's `__parent`: the
  * row, the arm, the slot's fallback, the caller's children and the page that fills itself are all
  * made the same way. BUILT from the positions the markup walk placed (`emitBuild`) — or, where the
  * region holds content only the parser makes right (`isParserOwned`), PARSED from the very markup
@@ -866,7 +870,7 @@ function emitMaker(
     let parsed = !sink.repeated
     for (const at of sink.positions) parsed ||= at.parserOwned
     if (parsed)
-        return `return ${lowering.use('markupNodes')}(${DOCUMENT}, ${markup()})`
+        return `return ${lowering.use('markupNodes')}(${PARENT}, ${markup()})`
     return emitBuild(sink, anchored, lowering)
 }
 
@@ -901,7 +905,10 @@ function emitMaker(
  * (`fillEmpty`), and a component or a slot is the same pair filled by the child.
  */
 function emitBuild(row: Cursor, anchored: boolean, lowering: Lowering): string {
-    const lines: string[] = ['const __built = []']
+    const lines: string[] = [
+        `const ${DOCUMENT} = ${PARENT}.ownerDocument`,
+        'const __built = []',
+    ]
     if (anchored)
         lines.push(
             `__built.push(${DOCUMENT}.createComment(${JSON.stringify(ROW_OPEN)}))`,
@@ -998,7 +1005,7 @@ function builtRun(
         return lines
     }
     lines.push(
-        `if (${raw.join(' || ')}) for (const __made of ${lowering.use('markupNodes')}(${DOCUMENT}, ${RAW_OPEN_MARKUP} + ${markup.join(' + ')} + ${RAW_CLOSE_MARKUP})) ${into(at, '__made')}`,
+        `if (${raw.join(' || ')}) for (const __made of ${lowering.use('markupNodes')}(${at.within === null ? PARENT : at.within.name}, ${RAW_OPEN_MARKUP} + ${markup.join(' + ')} + ${RAW_CLOSE_MARKUP})) ${into(at, '__made')}`,
     )
     if (!at.blank) {
         lines.push(`else ${make(whole)}`)
@@ -1073,7 +1080,7 @@ function emitFillable(
     const lowering = region.lowering
     const filled = emitRegion(sink, region.nested())
     region.helpers.push(
-        `function ${name}_build(__document) {\n    ${emitMaker(sink, lowering)}\n}`,
+        `function ${name}_build(__parent) {\n    ${emitMaker(sink, lowering)}\n}`,
     )
     region.helpers.push(
         mountFunction(
@@ -1337,7 +1344,7 @@ function emitArms(
                 : arm === 1 && caught !== undefined
                   ? caught
                   : ''
-        const builders = `const ${own}_build = function (__document) {\n${emitMaker(sink, lowering)}\n}\n${mountFunction(own, REGION_ROOT, body, `${fillRegion}(${REGION_ROOT}, ${own}_build)`, lowering, sink.defersSetup, setup !== null)}`
+        const builders = `const ${own}_build = function (__parent) {\n${emitMaker(sink, lowering)}\n}\n${mountFunction(own, REGION_ROOT, body, `${fillRegion}(${REGION_ROOT}, ${own}_build)`, lowering, sink.defersSetup, setup !== null)}`
         if (local === '') {
             helpers.push(
                 `${builders}\nconst ${own}_arm = { build: ${own}_build, mount: ${own}_mount }`,
@@ -1423,7 +1430,7 @@ function emitList(
     // MADE FROM THE ITEM'S VALUE: every slot reading the item alone is written before the row is
     // inserted, so making a row writes the document once per node (32.67).
     const valued = `const ${item} = ${ROW_ROOT}.data`
-    const make = `const ${name}_make = (__document, ${ROW_ROOT}, ${at}) => {\n    ${valued}\n    ${emitMaker(row, lowering, () => rowMarkup(row, !single, lowering, CLIENT_LANE), !single)}\n}`
+    const make = `const ${name}_make = (__parent, ${ROW_ROOT}, ${at}) => {\n    ${valued}\n    ${emitMaker(row, lowering, () => rowMarkup(row, !single, lowering, CLIENT_LANE), !single)}\n}`
     const walk = rowRegion.body()
     // A PATTERN READ OFF THE RECORD is read through one picker a name, the list's rather than the
     // row's, so a row allocates nothing for it.
@@ -1448,7 +1455,7 @@ function emitList(
             // rebuilds whole: a node that refused is the row disagreeing, and re-making it is the
             // answer the page does not have.
             opened,
-            `${lowering.use('replaceRow')}(${ROW_ROOT}, ${name}_make(${ROW_ROOT}.node.ownerDocument, ${ROW_ROOT}, ${at}))`,
+            `${lowering.use('replaceRow')}(${ROW_ROOT}, ${name}_make, ${at})`,
             lowering,
             row.defersSetup,
             block.setup !== null,

package/src/compiler/invocationProps.ts

@@ -31,7 +31,7 @@ export function invocationProps(
         const key = propKeyOf(attribute)
         if (key === undefined)
             throw new Error(
-                `abide: ${attribute.name} on <${node.tag}> is not a prop a component takes — \`bind:\` hands over the \`Reactive\` in its braces (RULEBOOK 32.6), and \`class:\` and \`style:\` set an element's own class and style. RULEBOOK 32.10.`,
+                `abide: ${attribute.name} on <${node.tag}> is not a prop a component takes — \`bind:\` hands over the \`Reactive\` in its braces (RULEBOOK 32.6), \`class:\` and \`style:\` set an element's own class and style (RULEBOOK 32.10), and \`bind:element\` hands over an element — put it on one inside <${node.tag}>, or pass the callback as a prop (RULEBOOK 32.69).`,
             )
         // A STATIC PROP IS STILL AN ACCESSOR. One shape per prop whatever the call site spelled
         // (33.10), so the child reads every key the same way and a literal is not a second case.

package/src/server/BRIDGE_VERSION.ts

@@ -1,3 +1,3 @@
 // The `abide-bridge` release a pairing command names, so a visitor's `bunx` runs the relay this
 // server speaks. `packages/abide/tests/claudeCode.test.ts` holds it to the bridge package's own.
-export const BRIDGE_VERSION = '0.2.0'
+export const BRIDGE_VERSION = '0.3.2'

package/src/server/assistant.ts

@@ -10,6 +10,7 @@
 // another request's scope — `claudeCode` answers one from the bridge's — and the call is still this
 // asker's.
 
+import { namedLogger } from '#shared/log.ts'
 import { refuse } from '#shared/refuse.ts'
 import { type McpReply, McpSurface } from './generatedSurfaces.ts'
 import { request, within } from './requestScope.ts'
@@ -20,7 +21,8 @@ export type AssistantMessage = { role: 'user' | 'assistant'; content: string }
 /** What a conversation yields, the same from every provider. */
 export type AssistantEvent =
     | { type: 'text'; text: string }
-    | { type: 'tool'; id: string; name: string; input: unknown }
+    | { type: 'tool'; id: string; name: string }
+    | { type: 'input'; id: string; input: unknown }
     | { type: 'result'; id: string; text: string; failed: boolean }
     | {
           type: 'done'
@@ -63,6 +65,7 @@ export type Provider = {
 export type AssistantOptions = { mcp?: boolean; maxTurns?: number }
 
 const MAX_TURNS = 10
+const ASSISTANT_LOG = namedLogger('abide:assistant')
 // 44.7 — the caller's credentials, and nothing else of their request.
 const CARRIED_HEADERS = ['cookie', 'authorization']
 
@@ -82,10 +85,39 @@ export async function* assistant(
         options.mcp === true ? appSurface() : NO_SURFACE,
         askerOf(request()),
     )
-    yield* provider.run(messages, tools, {
+    const events = provider.run(messages, tools, {
         maxTurns: options.maxTurns ?? MAX_TURNS,
         signal: request().signal,
     })
+    // 28.7 — a closed namespace runs the provider's stream untouched.
+    yield* ASSISTANT_LOG.enabled() ? traced(events, messages.length) : events
+}
+
+/** `events`, and one line on `abide:assistant` once they end, however they end. 44.32. */
+async function* traced(
+    events: AsyncGenerator<AssistantEvent>,
+    messageCount: number,
+): AsyncGenerator<AssistantEvent> {
+    const started = performance.now()
+    let calls = 0
+    let done: Extract<AssistantEvent, { type: 'done' }> | undefined
+    try {
+        for await (const event of events) {
+            if (event.type === 'tool') calls += 1
+            else if (event.type === 'done') done = event
+            yield event
+        }
+    } finally {
+        ASSISTANT_LOG.debug(
+            done === undefined ? 'unfinished' : done.stop,
+            `${messageCount} messages`,
+            `${calls} tool calls`,
+            done === undefined
+                ? 'no usage'
+                : `${done.usage.input}/${done.usage.output} tokens`,
+            `${(performance.now() - started).toFixed(1)}ms`,
+        )
+    }
 }
 
 /** Where an MCP request is answered, as JSON-RPC's `result` or `error`. */

package/src/server/bridgeRelay.ts

@@ -52,7 +52,7 @@ const CODE_LIFETIME = 10 * 60_000
 // How long a bridge outlives the last page watching it, so a reload does not end it.
 const IDLE_GRACE = 30_000
 /** How long a pairing whose stream dropped waits to be resumed. 44.26. */
-export const RESUME_MILLISECONDS = 30_000
+export const RESUME_MILLISECONDS = 60_000
 /** How often a pairing's stream carries a comment while it has nothing else to send. 44.27. */
 export const HEARTBEAT_MILLISECONDS = 15_000
 const HEARTBEAT = new TextEncoder().encode(EVENT_STREAM_OPENER)

package/src/server/claudeApi.ts

@@ -118,10 +118,19 @@ export function claudeApi(config: ClaudeApiConfig): Provider {
                         case 'message_start':
                             usage.input += inputOf(event.message.usage)
                             break
-                        case 'content_block_start':
-                            blocks[event.index] = event.content_block
+                        case 'content_block_start': {
+                            const block = event.content_block
+                            blocks[event.index] = block
                             partials[event.index] = ''
+                            // 44.29 — announced as the model starts writing it.
+                            if (block.type === 'tool_use')
+                                yield {
+                                    type: 'tool',
+                                    id: block.id as string,
+                                    name: block.name as string,
+                                }
                             break
+                        }
                         case 'content_block_delta': {
                             const block = blocks[event.index] as Block
                             const delta = event.delta
@@ -152,9 +161,8 @@ export function claudeApi(config: ClaudeApiConfig): Provider {
                             }
                             called.push(block)
                             yield {
-                                type: 'tool',
+                                type: 'input',
                                 id: block.id as string,
-                                name: block.name as string,
                                 input: block.input,
                             }
                             break

package/src/server/claudeCode.ts

@@ -3,9 +3,10 @@
 // turn and answer the MCP requests it makes from the `Toolbox` — in this request's scope, as this
 // asker (44.7) — so its tools are the site's and nothing of the visitor's machine is one.
 //
-// CONFIGURED BY CLAUDE CODE'S OWN OPTION NAMES, and only the ones that shape the answer. What would give
-// a site power over the visitor's machine — its own tools, permissions, directory, settings — is not an
-// option here at all: the bridge decides it (44.15, 44.16).
+// CONFIGURED BY CLAUDE CODE'S OWN OPTION NAMES, which the bridge lays on as their flags, and only the ones
+// that shape the answer. What would give a site power over the visitor's machine — permissions,
+// directory, settings — is not an option here at all, and its built-in `tools` are a request the visitor
+// grants or does not: the bridge decides (44.15, 44.16, 44.30).
 
 import { mounted } from '#shared/mount.ts'
 import { refuse } from '#shared/refuse.ts'
@@ -28,13 +29,17 @@ import { mcpFailure } from './generatedSurfaces.ts'
 import { Inbox } from './Inbox.ts'
 import { request } from './requestScope.ts'
 
-/** The Claude Code options a site may set for a turn. */
+/** The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. */
 export type ClaudeCodeConfig = {
     model?: string
     fallbackModel?: string
     systemPrompt?: string
     appendSystemPrompt?: string
     effort?: 'low' | 'medium' | 'high' | 'xhigh' | 'max'
+    maxBudgetUsd?: number
+    betas?: string[]
+    disallowedTools?: string[]
+    tools?: string[]
 }
 
 /** Whether this browser's bridge is connected, and the command that pairs one where it is not. */

package/src/server/generatedSurfaces.ts

@@ -304,11 +304,13 @@ export class McpSurface {
         asker: Request,
     ): Promise<{ text: string; failed: boolean }> {
         const tool = this.#tool(name)
-        if (tool === undefined)
+        if (tool === undefined) {
+            logCall(String(name), 404, undefined)
             return Promise.resolve({
                 text: `No tool named ${name}.`,
                 failed: true,
             })
+        }
         return this.#called(tool, args as Record<string, unknown>, asker)
     }
 
@@ -321,15 +323,23 @@ export class McpSurface {
         args: Record<string, unknown> | undefined,
         asker: Request,
     ): Promise<{ text: string; failed: boolean }> {
+        // 28.7 — a closed namespace does not pay for the line it would have written.
+        const started = MCP_LOG.enabled() ? performance.now() : undefined
         let answer: Response
         try {
             answer = await this.#answer(callOf(asker, one, args))
         } catch (thrown) {
             // 15.8 — a path parameter no address carries, refused as the wire's 422 is (`rpcRequest`).
-            if (!isFailed(thrown)) throw thrown
+            if (!isFailed(thrown)) {
+                logCall(one.name, 500, started)
+                throw thrown
+            }
             answer = answered(thrown)
         }
-        return { text: await answer.text(), failed: answer.status >= 400 }
+        // The body is the call's too: a handler that streams has only begun when its head arrives.
+        const text = await answer.text()
+        logCall(one.name, answer.status, started)
+        return { text, failed: answer.status >= 400 }
     }
 
     /** One MCP request, made as `asker`, as JSON-RPC's `result` or `error`. */
@@ -353,11 +363,13 @@ export class McpSurface {
                 return { result: { tools: this.list() } }
             case 'tools/call': {
                 const tool = this.#tool(params?.name)
-                if (tool === undefined)
+                if (tool === undefined) {
+                    logCall(String(params?.name), 404, undefined)
                     return mcpFailure(
                         -32602,
                         `No tool named ${String(params?.name)}.`,
                     )
+                }
                 const { text, failed } = await this.#called(
                     tool,
                     params?.arguments as Record<string, unknown> | undefined,
@@ -382,6 +394,23 @@ export class McpSurface {
     }
 }
 
+// 20.18 — ONE LINE PER CALL, whoever framed it: this endpoint or a provider's `Toolbox`, and a call
+// to a tool that is not published (404) or whose answer threw (500) included. `started` is unset
+// where nothing ran, or where the namespace is closed (28.7).
+function logCall(
+    name: string,
+    status: number,
+    started: number | undefined,
+): void {
+    if (!MCP_LOG.enabled()) return
+    MCP_LOG.debug(
+        'call',
+        name,
+        status,
+        `${started === undefined ? '0.0' : (performance.now() - started).toFixed(1)}ms`,
+    )
+}
+
 /**
  * Whether a tool declares an `outputSchema`: MCP's structured content is an object, so only a
  * result schema that is one. 20.16.

package/src/ui/ArmRegion.ts

@@ -17,7 +17,7 @@ import { Scope, type Stoppable } from './Scope.ts'
 
 /** One arm: what makes its nodes, and what binds them. A `build` of `undefined` makes none. */
 export type Arm = {
-    build: ((document: Document) => Node[]) | undefined
+    build: ((parent: Node) => Node[]) | undefined
     mount: (root: Region) => Stoppable | undefined
 }
 

package/src/ui/RawRun.ts

@@ -60,7 +60,7 @@ export function textToMarkup(text: Text, markup: string): RawRun {
     const open = document.createComment(RAW_OPEN)
     const close = document.createComment(RAW_CLOSE)
     parent.insertBefore(open, text)
-    parent.insertBefore(parseMarkup(text, markup), text)
+    parent.insertBefore(parseMarkup(parent, markup), text)
     parent.replaceChild(close, text)
     return new RawRun(open, close, markup)
 }
@@ -70,7 +70,7 @@ export function refillRun(run: RawRun, markup: string): void {
     const parent = run.close.parentNode
     if (parent === null) throw detached()
     clearRun(run)
-    parent.insertBefore(parseMarkup(run.close, markup), run.close)
+    parent.insertBefore(parseMarkup(parent, markup), run.close)
     run.html = markup
 }
 

package/src/ui/bindElement.ts

@@ -21,6 +21,10 @@ import { holdWhileLeaving } from './leave.ts'
  * form is where teardown is decided, and its `Disposer` is the whole of it.
  *
  * 32.38 — A `Disposer` HANDING BACK A THENABLE IS AN EXIT: the element's nodes stay until it settles.
+ *
+ * 32.68 — THE NODE IS CONNECTED AND WHOLE, and nothing here makes it so: this runs from a region's
+ * MOUNT, which every caller (`ArmRegion`, `TryRegion`, `makeRow`) calls after `build`'s nodes are
+ * inserted, and last in it, after the blocks and components inside the node (`emitRegion`).
  */
 export function bindElement(
     element: Element,

package/src/ui/bindProperty.ts

@@ -68,11 +68,12 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
     ) {
         // 32.62 — the list of what is selected, read and written per option.
         const select = bound as unknown as HTMLSelectElement
-        scope.watch(() => {
-            const value = boundValue(operand)
+        const choose = (value: unknown) => {
             for (const option of select.options)
                 option.selected = selectHolds(value, option.value)
-        })
+        }
+        scope.watch(() => choose(boundValue(operand)))
+        chooseOnNewOptions(select, () => choose(heldValue(operand)), scope)
         select.addEventListener('change', () => {
             const chosen: string[] = []
             for (const option of select.selectedOptions)
@@ -84,8 +85,7 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
     // 32.58 — NUMERIC ONCE, NUMERIC FROM THEN ON: a blank field writes `undefined`, and the
     // keystroke after it still has to know the value was a number.
     let numeric = bound.type === 'number' || bound.type === 'range'
-    scope.watch(() => {
-        const value = boundValue(operand)
+    const show = (value: unknown) => {
         if (typeof value === 'number') numeric = true
         // 32.59 — text that already reads as the value is the reader's spelling of it: a trailing
         // decimal point or zero is mid-typing, and rewriting it to the number's own text takes the
@@ -94,7 +94,8 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
             return
         const text = value === undefined || value === null ? '' : String(value)
         if (bound.value !== text) bound.value = text
-    })
+    }
+    scope.watch(() => show(boundValue(operand)))
     const write = () => {
         const typed = bound.value
         if (!numeric) {
@@ -108,6 +109,7 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
     }
     // A `<select>` settles on `change`; everything else that takes text reports each keystroke.
     if (bound.tagName === 'SELECT') {
+        chooseOnNewOptions(bound, () => show(heldValue(operand)), scope)
         bound.addEventListener('change', write)
         return
     }
@@ -125,3 +127,16 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
         if (!composing) write()
     })
 }
+
+// 32.62 — AN OPTION THAT ARRIVES AFTER THE VALUE IS SELECTED WHEN IT IS THE VALUE. The value's
+// watch does not read the options, so a `{#for}` that grows them later wakes nothing of its own, and
+// the select would stay on whatever the browser picked when it changed.
+function chooseOnNewOptions(
+    select: Element,
+    choose: () => void,
+    scope: Scope,
+): void {
+    const observer = new MutationObserver(choose)
+    observer.observe(select, { childList: true, subtree: true })
+    scope.stops.push(() => observer.disconnect())
+}

package/src/ui/listenForRoutes.ts

@@ -36,6 +36,9 @@ export function listenForRoutes(router: Router): () => void {
     // mounted: the browser's own restoration runs before that page exists.
     const onPop = (): void => {
         if (router.match(location.pathname) === undefined) {
+            // The bar already stands at the entry being loaded, so the `pagehide` this reload
+            // fires would write the departed page's scroll into it: the listeners go first.
+            listening.abort()
             location.reload()
             return
         }

package/src/ui/parseMarkup.ts

@@ -1,4 +1,4 @@
-// MARKUP PARSED IN THE DOCUMENT `near` BELONGS TO, not the global one. A page mounted into a second
+// MARKUP PARSED IN THE DOCUMENT `parent` BELONGS TO, not the global one. A page mounted into a second
 // document (an example `<iframe>`) parsed its `{#if}` arms in the right one and its `{#for}` rows in
 // the page's while the two were separate copies of this; one copy is one answer.
 //
@@ -6,16 +6,67 @@
 // every caller moves those nodes out before it parses again.
 const TEMPLATES = new WeakMap<Document, HTMLTemplateElement>()
 
-/** Parses markup in `near`'s document; the fragment is reused by the next parse. */
-export function parseMarkup(near: Node, markup: string): DocumentFragment {
-    const document = near.ownerDocument ?? (near as Document)
+const SVG = 'http://www.w3.org/2000/svg'
+const MATHML = 'http://www.w3.org/1998/Math/MathML'
+
+// The foreign elements whose children the parser reads as HTML again — the integration points —
+// so markup going into one parses the way it would at the template's own top level.
+const INTEGRATION_POINTS = new Set([
+    'foreignObject',
+    'desc',
+    'title',
+    'mi',
+    'mo',
+    'mn',
+    'ms',
+    'mtext',
+])
+
+/** Whether the parser reads `element`'s children as HTML again, though it is SVG or MathML. */
+function isIntegrationPoint(element: Element): boolean {
+    if (INTEGRATION_POINTS.has(element.localName)) return true
+    // The HTML standard makes an `<annotation-xml>` one only by the encoding it declares.
+    if (element.localName !== 'annotation-xml') return false
+    const encoding = element.getAttribute('encoding')?.toLowerCase()
+    return encoding === 'text/html' || encoding === 'application/xhtml+xml'
+}
+
+/**
+ * Parses markup for `parent` — in its document, and in its NAMESPACE; the fragment is reused by the
+ * next parse.
+ *
+ * IN THE PARENT'S NAMESPACE because the server's parser read the same bytes inside it: a template's
+ * own children are HTML, so a `<circle>` parsed there alone is an `HTMLUnknownElement` that draws
+ * nothing in the `<svg>` it lands in. Markup bound for an SVG or MathML parent is parsed inside an
+ * `<svg>` or a `<math>` and the wrapper unwrapped — what the parser closes the wrapper on (a `<p>`
+ * breaks out of foreign content) stays, beside what was inside it, in order.
+ */
+export function parseMarkup(parent: Node, markup: string): DocumentFragment {
+    const document = parent.ownerDocument ?? (parent as Document)
     let template = TEMPLATES.get(document)
     if (template === undefined) {
         template = document.createElement('template')
         TEMPLATES.set(document, template)
     }
-    template.innerHTML = markup
-    return template.content
+    const space = (parent as Element).namespaceURI
+    const wrapper =
+        (space !== SVG && space !== MATHML) ||
+        isIntegrationPoint(parent as Element)
+            ? undefined
+            : space === SVG
+              ? 'svg'
+              : 'math'
+    if (wrapper === undefined) {
+        template.innerHTML = markup
+        return template.content
+    }
+    template.innerHTML = `<${wrapper}>${markup}</${wrapper}>`
+    const content = template.content
+    const wrapped = content.firstChild as Element
+    while (wrapped.firstChild !== null)
+        content.insertBefore(wrapped.firstChild, wrapped)
+    wrapped.remove()
+    return content
 }
 
 /**
@@ -23,10 +74,10 @@ export function parseMarkup(near: Node, markup: string): DocumentFragment {
  *
  * Indexed rather than spread, so no iterator runs per row.
  */
-export function markupNodes(near: Node, markup: string): Node[] {
+export function markupNodes(parent: Node, markup: string): Node[] {
     const nodes: Node[] = []
     for (
-        let node = parseMarkup(near, markup).firstChild;
+        let node = parseMarkup(parent, markup).firstChild;
         node !== null;
         node = node.nextSibling
     )

package/src/ui/regions.ts

@@ -86,7 +86,7 @@ export function isEmptyRegion(region: Region): boolean {
  */
 export function fillRegion(
     region: Region,
-    build?: (document: Document) => Node[],
+    build?: (parent: Node) => Node[],
 ): void {
     // THE PARENT IS READ BEFORE ANYTHING IS REMOVED, and the removal only happens if there is
     // one. Written as an unguarded removal followed by a `?.`-guarded insert, a region whose
@@ -101,7 +101,7 @@ export function fillRegion(
     if (build === undefined) return
     beginLayer(LAYER_FILL)
     try {
-        const made = build(region.close.ownerDocument as Document)
+        const made = build(parent)
         for (const one of made) parent.insertBefore(one, region.close)
     } finally {
         endLayer(LAYER_FILL)
@@ -119,7 +119,7 @@ export function fillRegion(
  */
 export function fillEmpty(
     region: Region,
-    build?: (document: Document) => Node[],
+    build?: (parent: Node) => Node[],
 ): boolean {
     if (!isEmptyRegion(region)) return false
     fillRegion(region, build)

package/src/ui/rows.ts

@@ -69,11 +69,11 @@ export type Row = {
  */
 export type RowBuilders = {
     /**
-     * A row's nodes, BUILT in the document the list stands in — handed over by the reconcile
-     * rather than found by the row, which is the one place a row's document is decided. Every slot
+     * A row's nodes, BUILT for the parent the list stands in — handed over by the reconcile rather
+     * than found by the row, which is the one place a row's document and namespace are decided. Every slot
      * reading the item alone is written here, before the nodes are inserted.
      */
-    make: (document: Document, row: Row, at: number) => Node[]
+    make: (parent: Node, row: Row, at: number) => Node[]
     mount: (row: Row, at: number) => Scope
     /** 32.67 — rewrites, from `row.data`, the slots `make` wrote from the item alone. */
     update: (row: Row, at: number) => void
@@ -172,15 +172,20 @@ export function rowsIn(region: Region, anchored: boolean): ChildNode[] {
 }
 
 /**
- * Rebuilds a row in place from `next`, keeping its record.
+ * Rebuilds a row in place with `make`, keeping its record.
  *
  * 41.10 — a row that cannot be hydrated is rebuilt: the fresh nodes go where the row stood and the
  * row's record takes the new first node, so the reconcile still reaches all of it.
  */
-export function replaceRow(row: Row, next: Node[]): void {
+export function replaceRow(
+    row: Row,
+    make: RowBuilders['make'],
+    at: number,
+): void {
     const first = row.node
     const parent = first.parentNode
     if (parent === null) return
+    const next = make(parent, row, at)
     for (const node of next) parent.insertBefore(node, first)
     removeRow(first)
     row.node = next[0] as ChildNode
@@ -201,7 +206,7 @@ export function makeRow(
     // 14.8 — set up ONCE for the row, and the same builders make it and mount it.
     const builders = setUp(row, at)
     row.update = builders.update
-    const nodes = builders.make(parent.ownerDocument as Document, row, at)
+    const nodes = builders.make(parent, row, at)
     for (const node of nodes) parent.insertBefore(node, before)
     row.node = nodes[0] as ChildNode
     row.scope = builders.mount(row, at)