@abide/abide 0.107.0 → 0.109.0

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @abide/abide
 
+## 0.109.0
+
+### Minor Changes
+
+- f969612: claudeCode.bridgeCommand and claudeCode.bridge take tools, and the command they mint grants them after its -- ([`d20a962`](https://github.com/briancray/abide/commit/d20a962523f91161cb731e766863256fd5d90208))
+
+## 0.108.0
+
+### Minor Changes
+
+- fda92c3: every MCP tool call writes a debug line on abide:mcp, and every assistant conversation one on abide:assistant ([`6c4d8c7`](https://github.com/briancray/abide/commit/6c4d8c745491308c0208eb18e900473fb8ee9e03))
+
+### Patch Changes
+
+- fda92c3: a back or forward that reloads no longer writes the departed page's scroll into the entry being loaded ([`294c0e6`](https://github.com/briancray/abide/commit/294c0e6ed806c38e80a1f872e7be6ac5579c7382))
+- fda92c3: a site holds a dropped bridge pairing for 60 seconds, past when the bridge notices a silent drop ([`ac8e1d3`](https://github.com/briancray/abide/commit/ac8e1d313b7ea54414cd1034b56eb4cfa88ab31b))
+- fda92c3: bind:value on a <select> selects an option added after the value was written ([`cd592b2`](https://github.com/briancray/abide/commit/cd592b2ccdc617c5cfed2a6acf5f5a458bc9986b))
+- fda92c3: markup the client parses for a raw value, an {#if} arm or a {#for} row inside an <svg> or <math> is parsed in that namespace ([`f8ba81e`](https://github.com/briancray/abide/commit/f8ba81e94e0583858811e3c403535c0c0632b87c))
+
 ## 0.107.0
 
 ### Minor Changes

package/docs/REGISTRY.md

@@ -338,10 +338,10 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.28 |
+| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | 44.5, 44.13, 44.17, 44.18, 44.19, 44.24, 44.25, 44.28, 44.31 |
 | `ClaudeCodeConfig` | `{ model?: string; fallbackModel?: string; systemPrompt?: string; appendSystemPrompt?: string; effort?: 'low' \| 'medium' \| 'high' \| 'xhigh' \| 'max'; maxBudgetUsd?: number; betas?: string[]; disallowedTools?: string[]; tools?: string[] }` | The Claude Code options a site may set for a turn, and the built-in tools it asks the visitor for. | 44.16, 44.30 |
-| `claudeCode.bridgeCommand` | `() => { command: string; expires: number }` | The command that pairs a bridge with this browser. | 44.14 |
-| `claudeCode.bridge` | `() => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22 |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; expires: number }` | The command that pairs a bridge with this browser, granting the built-in tools it is given. | 44.14, 44.33 |
+| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | 44.20, 44.22, 44.33 |
 | `BridgeStatus` | `{ paired: boolean; command: string \| undefined }` | Whether a bridge is paired, and the command that pairs one where none is. | 44.20 |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | 36.7, 44.14, 44.15, 44.19, 44.23, 44.26, 44.27, 16.78 |
 
@@ -464,7 +464,8 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | `abide:lifecycle` | `debug` `error` | A lifecycle that ran. | 28.8 |
 | `abide:principal` | `debug` `warning` | A principal set or cleared. | 28.8 |
 | `abide:health` | `warning` | An `onHealth` that threw or answered a non-object. | 25.2, 28.8 |
-| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, or a tool published with no description. | 20.3, 20.9, 28.8 |
+| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, a tool call answered, or a tool published with no description. | 20.3, 20.9, 20.18, 28.8 |
+| `abide:assistant` | `debug` | One line per conversation, once it ends. | 44.32 |
 | `abide:openapi` | `warning` | A handler whose schema had no JSON Schema export. | 20.11, 28.8 |
 | `abide:render` | `warning` | An `error.abide` that itself failed. | 28.8 |
 | `abide:refuse` | `warning` | A message formatter that threw. | 15.13, 28.8 |
@@ -527,7 +528,7 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 | --- | --- | --- |
 | `{expr}` | Reactive text, escaped. | 32.1, 32.23 |
 | formatting whitespace | What a run of whitespace renders as. | 33.17, 33.18 |
-| `{raw(...)}` | Raw HTML. | 32.2, 32.25, 32.26, 32.30, 32.31 |
+| `{raw(...)}` | Raw HTML. | 32.2, 32.25, 32.26, 32.30, 32.31, 32.70 |
 | `name={expr}` | A reactive attribute or property. | 32.3, 32.20, 32.23, 32.37 |
 | `on<event>={fn}` | A native listener on an element, and an ordinary prop on a component. | 32.4 |
 | `name="…{expr}…"` | An interpolated quoted value. | 32.3 |
@@ -547,15 +548,15 @@ type Gated<Gate, Accepted> = [Schema<Accepted>] extends [Gate] ? never : Failed<
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | 32.2, 32.24, 32.26, 32.30, 32.31 |
+| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | 32.2, 32.24, 32.26, 32.30, 32.31, 32.70 |
 | `Raw` | `class Raw { html: string }` | What `raw` hands back. | 32.24 |
 
 ### Control flow
 
 | Spelling | Branches | Meaning | Rules |
 | --- | --- | --- | --- |
-| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | 32.12, 32.21, 32.63, 32.64, 32.65, 41.24 |
-| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | 32.13, 32.14, 32.15, 32.22, 32.29, 32.32, 32.33, 32.63, 32.64, 32.67, 41.8, 41.14, 41.15 |
+| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | 32.12, 32.21, 32.63, 32.64, 32.65, 32.70, 41.24 |
+| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | 32.13, 32.14, 32.15, 32.22, 32.29, 32.32, 32.33, 32.63, 32.64, 32.67, 32.70, 41.8, 41.14, 41.15 |
 | `{#try}` | `{:catch e}`, `{:finally}` | A render-time boundary and a region. | 32.16, 32.56, 32.63, 32.64 |
 
 ### Components

package/docs/RULEBOOK.md

@@ -1312,6 +1312,11 @@ where that schema is an object, and MUST declare none otherwise.
 20.17 A `tools/call` that `/__abide/mcp` answers for a tool declaring an `outputSchema` MUST carry
 the value as `structuredContent` beside its text, and a refused call MUST carry none.
 
+20.18 Every tool call the MCP surface answers MUST write one `debug` line on `abide:mcp` naming the
+tool, the status it was answered with and how long it took, whether `/__abide/mcp` or a `Toolbox`
+made the call — a call naming a tool it does not publish answered 404, and one whose answer threw
+500.
+
 # 21. Generated headers
 
 21.1 Every response MUST carry `x-content-type-options: nosniff`.
@@ -1941,6 +1946,7 @@ each one a list holds under 32.62.
 
 32.62 A `bind:value` on a `<select multiple>` MUST hold a list: each option is selected where the list
 holds its value as text, and a change MUST write the values of the selected options, in order.
+On any `<select>`, an option added after the value was written MUST be selected where it holds it.
 
 32.63 A `{#if}`, `{#for}`, `{#try}` or `{#component Name(pattern)}` not closed by its own close tag
 before the end of the file, or before the close tag of the element it was opened in, MUST be a build
@@ -1965,6 +1971,9 @@ reading layout, querying its descendants or calling `focus()` acts on a connecte
 
 32.69 `bind:element` on a component MUST be a build error.
 
+32.70 Markup the client parses for a slot holding a value branded by `raw`, a `{#if}` arm or a
+`{#for}` row MUST be parsed as the document's parser parses it inside the element it goes into.
+
 # 33. Props
 
 33.1 `props` MUST be callable from a `<script>` block only, and calling it from a `<script module>`
@@ -3097,9 +3106,9 @@ its lines MUST be relayed.
 carrying it was not taken by `/__abide/bridge`, or where no reply arrived within 120 seconds.
 
 44.25 A bridge whose stream from `/__abide/bridge` ends unasked MUST redial it with its pairing's
-token, each wait twice the last, until it is refused or 30 seconds have passed.
+token, each wait twice the last, until it is refused or 60 seconds have passed.
 
-44.26 `/__abide/bridge` MUST hold a pairing whose stream dropped for 30 seconds, and a `GET` bearing
+44.26 `/__abide/bridge` MUST hold a pairing whose stream dropped for 60 seconds, and a `GET` bearing
 its token within them MUST resume the stream with every frame the dropped one had not sent.
 
 44.27 `/__abide/bridge` MUST send a comment on a pairing's stream every 15 seconds for as long as
@@ -3114,3 +3123,13 @@ and its `input` event, with the same `id`, once the call is written.
 44.30 A built-in tool MUST be available to a turn only where the site's `tools` names it and the
 visitor's `--tools` does, MUST be approved without asking unless the visitor passed `--allowedTools`,
 and the bridge MUST say once each tool the site asked for that the visitor did not grant.
+
+44.31 A bridge stopped by `SIGTERM`, `SIGINT` or `SIGHUP` MUST end every Claude Code run it started
+before it exits.
+
+44.32 A conversation MUST write one `debug` line on `abide:assistant` when its events end, naming
+its stop reason, the transcript's length, the tool calls it made, its usage and how long it took,
+and naming it `unfinished` where it ended without a `done`.
+
+44.33 A command `claudeCode.bridgeCommand` or `claudeCode.bridge` mints with `tools` MUST grant
+those built-in tools after its `--` as `--tools`, and one minted without `tools` MUST carry no `--`.

package/docs/abide.md

@@ -5130,7 +5130,7 @@ test('a model lists the handler as a tool, and calls it', async () => {
 })
 ```
 
-Every handler the app publishes is a tool, a read as much as a write. The model picks a tool by its `description`, the same sentence the OpenAPI operation carries, so write one on every handler. A tool with none warns on `abide:mcp`.
+Every handler the app publishes is a tool, a read as much as a write. The model picks a tool by its `description`, the same sentence the OpenAPI operation carries, so write one on every handler. A tool with none warns on `abide:mcp`, and with `DEBUG=abide:mcp` every call writes a line naming the tool, its status and how long it took.
 
 The endpoint runs inside the app's own middleware. The rung that decides what a browser may call decides what a model may call, and a declared refusal reaches the model by its name, so it can tell the person why it stopped. Read on: [Who sees what](/guide/decide-who-sees-what.md)
 
@@ -5351,6 +5351,7 @@ test('the model calls the CRM search, through the app', async () => {
 | `Provider` | What runs the conversation: one method, `run`. Write one for another model, or a recording for a test. |
 | `Toolbox` | What a provider is handed: `list` of the tools, and `call` to run one as the asker. |
 | `ToolDefinition` | One tool in `list`: its name, description and input schema. |
+| `abide:assistant` | The log namespace that writes one `debug` line per conversation once it ends: the stop reason, the transcript's length, the tool calls, the tokens and the time. |
 
 ## `claudeApi` sends the request body you wrote
 
@@ -5632,6 +5633,8 @@ test('unpaired: asking is refused, the bridge shows a command', async () => {
 bunx @abide/bridge <site> <code> -- --tools WebSearch,WebFetch
 ```
 
+Pass the same `tools` to `claudeCode.bridge` or `claudeCode.bridgeCommand` and the command it mints carries that grant, so a visitor who runs it as shown gives the tools. One minted without them grants none.
+
 The visitor pairs once per visit by running a command, which dials out to the site. Asking with nothing paired is refused 409.
 
 | Name | What it does for the CRM |
@@ -7835,9 +7838,9 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.28](/rulebook#44.28) |
-| `claudeCode.bridgeCommand` | `() => { command: string; expires: number }` | The command that pairs a bridge with this browser. | [44.14](/rulebook#44.14) |
-| `claudeCode.bridge` | `() => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22) |
+| `claudeCode` | `(config?: ClaudeCodeConfig) => Provider` | The visitor's own Claude Code, reached through the bridge paired with their browser, as a provider. | [44.5](/rulebook#44.5), [44.13](/rulebook#44.13), [44.17](/rulebook#44.17), [44.18](/rulebook#44.18), [44.19](/rulebook#44.19), [44.24](/rulebook#44.24), [44.25](/rulebook#44.25), [44.28](/rulebook#44.28), [44.31](/rulebook#44.31) |
+| `claudeCode.bridgeCommand` | `(options?: { tools?: string[] }) => { command: string; expires: number }` | The command that pairs a bridge with this browser, granting the built-in tools it is given. | [44.14](/rulebook#44.14), [44.33](/rulebook#44.33) |
+| `claudeCode.bridge` | `(options?: { tools?: string[] }) => AsyncGenerator<BridgeStatus>` | This browser's pairing, as it changes. | [44.20](/rulebook#44.20), [44.22](/rulebook#44.22), [44.33](/rulebook#44.33) |
 | `/__abide/bridge` | `GET`, `POST` | Where a bridge pairs, and is relayed its turns. | [36.7](/rulebook#36.7), [44.14](/rulebook#44.14), [44.15](/rulebook#44.15), [44.19](/rulebook#44.19), [44.23](/rulebook#44.23), [44.26](/rulebook#44.26), [44.27](/rulebook#44.27), [16.78](/rulebook#16.78) |
 
 ## Taught in
@@ -8293,7 +8296,8 @@ Generated surfaces: what is written in place rather than imported.
 | `abide:lifecycle` | `debug` `error` | A lifecycle that ran. | [28.8](/rulebook#28.8) |
 | `abide:principal` | `debug` `warning` | A principal set or cleared. | [28.8](/rulebook#28.8) |
 | `abide:health` | `warning` | An `onHealth` that threw or answered a non-object. | [25.2](/rulebook#25.2), [28.8](/rulebook#28.8) |
-| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, or a tool published with no description. | [20.3](/rulebook#20.3), [20.9](/rulebook#20.9), [28.8](/rulebook#28.8) |
+| `abide:mcp` | `debug` `warning` | A handler withheld from MCP, a tool call answered, or a tool published with no description. | [20.3](/rulebook#20.3), [20.9](/rulebook#20.9), [20.18](/rulebook#20.18), [28.8](/rulebook#28.8) |
+| `abide:assistant` | `debug` | One line per conversation, once it ends. | [44.32](/rulebook#44.32) |
 | `abide:openapi` | `warning` | A handler whose schema had no JSON Schema export. | [20.11](/rulebook#20.11), [28.8](/rulebook#28.8) |
 | `abide:render` | `warning` | An `error.abide` that itself failed. | [28.8](/rulebook#28.8) |
 | `abide:refuse` | `warning` | A message formatter that threw. | [15.13](/rulebook#15.13), [28.8](/rulebook#28.8) |
@@ -8607,7 +8611,7 @@ Generated surfaces: what is written in place rather than imported.
 | --- | --- | --- |
 | `{expr}` | Reactive text, escaped. | [32.1](/rulebook#32.1), [32.23](/rulebook#32.23) |
 | formatting whitespace | What a run of whitespace renders as. | [33.17](/rulebook#33.17), [33.18](/rulebook#33.18) |
-| `{raw(...)}` | Raw HTML. | [32.2](/rulebook#32.2), [32.25](/rulebook#32.25), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31) |
+| `{raw(...)}` | Raw HTML. | [32.2](/rulebook#32.2), [32.25](/rulebook#32.25), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31), [32.70](/rulebook#32.70) |
 | `name={expr}` | A reactive attribute or property. | [32.3](/rulebook#32.3), [32.20](/rulebook#32.20), [32.23](/rulebook#32.23), [32.37](/rulebook#32.37) |
 | `on<event>={fn}` | A native listener on an element, and an ordinary prop on a component. | [32.4](/rulebook#32.4) |
 | `name="…{expr}…"` | An interpolated quoted value. | [32.3](/rulebook#32.3) |
@@ -8627,8 +8631,8 @@ Generated surfaces: what is written in place rather than imported.
 
 | Spelling | Branches | Meaning | Rules |
 | --- | --- | --- | --- |
-| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | [32.12](/rulebook#32.12), [32.21](/rulebook#32.21), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.65](/rulebook#32.65), [41.24](/rulebook#41.24) |
-| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | [32.13](/rulebook#32.13), [32.14](/rulebook#32.14), [32.15](/rulebook#32.15), [32.22](/rulebook#32.22), [32.29](/rulebook#32.29), [32.32](/rulebook#32.32), [32.33](/rulebook#32.33), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.67](/rulebook#32.67), [41.8](/rulebook#41.8), [41.14](/rulebook#41.14), [41.15](/rulebook#41.15) |
+| `{#if cond}` | `{:else if cond}`, `{:else}` | Conditional markup. | [32.12](/rulebook#32.12), [32.21](/rulebook#32.21), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.65](/rulebook#32.65), [32.70](/rulebook#32.70), [41.24](/rulebook#41.24) |
+| `{#for item, index of list by key}` | — | Repeats markup over a list, or over a cursor as it produces. | [32.13](/rulebook#32.13), [32.14](/rulebook#32.14), [32.15](/rulebook#32.15), [32.22](/rulebook#32.22), [32.29](/rulebook#32.29), [32.32](/rulebook#32.32), [32.33](/rulebook#32.33), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64), [32.67](/rulebook#32.67), [32.70](/rulebook#32.70), [41.8](/rulebook#41.8), [41.14](/rulebook#41.14), [41.15](/rulebook#41.15) |
 | `{#try}` | `{:catch e}`, `{:finally}` | A render-time boundary and a region. | [32.16](/rulebook#32.16), [32.56](/rulebook#32.56), [32.63](/rulebook#32.63), [32.64](/rulebook#32.64) |
 
 ## Components
@@ -8670,7 +8674,7 @@ Generated surfaces: what is written in place rather than imported.
 
 | Name | Signature | Meaning | Rules |
 | --- | --- | --- | --- |
-| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | [32.2](/rulebook#32.2), [32.24](/rulebook#32.24), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31) |
+| `raw` | `(value: unknown) => Raw` | The branding a value takes to render as markup rather than as text. | [32.2](/rulebook#32.2), [32.24](/rulebook#32.24), [32.26](/rulebook#32.26), [32.30](/rulebook#32.30), [32.31](/rulebook#32.31), [32.70](/rulebook#32.70) |
 
 ## Taught in
 

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@abide/abide",
-    "version": "0.107.0",
+    "version": "0.109.0",
     "type": "module",
     "description": "Isomorphic type-safe framework for reactive async interfaces for humans and machines",
     "license": "MIT",

package/src/compiler/emitClient.ts

@@ -244,7 +244,7 @@ export function emitClient(
     let fills = contributed
     if (applied !== '' || builds) {
         const build = builds
-            ? `function __build(__document) {\n    ${emitMaker(page, lowering)}\n}\n`
+            ? `function __build(__parent) {\n    ${emitMaker(page, lowering)}\n}\n`
             : ''
         // THE HEAD GOES BEFORE THE FILL, so the guard is written out where there is one to apply.
         fills +=
@@ -453,7 +453,7 @@ function clientComponent(
     const fill =
         sink.positions.length === 0
             ? ''
-            : `function __build(__document) {\n    ${emitMaker(sink, lowering)}\n}
+            : `function __build(__parent) {\n    ${emitMaker(sink, lowering)}\n}
 ${lowering.use('fillEmpty')}(${REGION_ROOT}, __build)\n`
     const captured = sink.defersSetup
         ? `const ${SHARE_AT} = ${lowering.use('currentShare')}()\n`
@@ -837,7 +837,9 @@ const WRITES = {
 // instance OPENS (`shareScope`): a page that shares nothing still carries this for a child that does.
 const SHARE_AT = '__shareAt'
 
-// The document a region's maker is handed and builds its nodes from.
+// The parent a region's maker is handed, which its nodes are made for and go into (`parseMarkup`).
+const PARENT = '__parent'
+// The document a built region makes its nodes with, read off `PARENT` once a build.
 const DOCUMENT = '__document'
 
 // A run's anchors while it holds markup (32.30), as the JS string literals a built run parses with.
@@ -845,9 +847,9 @@ const RAW_OPEN_MARKUP = JSON.stringify(anchorMarkup(RAW_OPEN))
 const RAW_CLOSE_MARKUP = JSON.stringify(anchorMarkup(RAW_CLOSE))
 
 /**
- * The body of the function that makes a region's nodes from a `__document`.
+ * The body of the function that makes a region's nodes for a `__parent`.
  *
- * WHAT MAKES A REGION'S NODES, as the body of a function taking the region's `__document`: the
+ * WHAT MAKES A REGION'S NODES, as the body of a function taking the region's `__parent`: the
  * row, the arm, the slot's fallback, the caller's children and the page that fills itself are all
  * made the same way. BUILT from the positions the markup walk placed (`emitBuild`) — or, where the
  * region holds content only the parser makes right (`isParserOwned`), PARSED from the very markup
@@ -868,7 +870,7 @@ function emitMaker(
     let parsed = !sink.repeated
     for (const at of sink.positions) parsed ||= at.parserOwned
     if (parsed)
-        return `return ${lowering.use('markupNodes')}(${DOCUMENT}, ${markup()})`
+        return `return ${lowering.use('markupNodes')}(${PARENT}, ${markup()})`
     return emitBuild(sink, anchored, lowering)
 }
 
@@ -903,7 +905,10 @@ function emitMaker(
  * (`fillEmpty`), and a component or a slot is the same pair filled by the child.
  */
 function emitBuild(row: Cursor, anchored: boolean, lowering: Lowering): string {
-    const lines: string[] = ['const __built = []']
+    const lines: string[] = [
+        `const ${DOCUMENT} = ${PARENT}.ownerDocument`,
+        'const __built = []',
+    ]
     if (anchored)
         lines.push(
             `__built.push(${DOCUMENT}.createComment(${JSON.stringify(ROW_OPEN)}))`,
@@ -1000,7 +1005,7 @@ function builtRun(
         return lines
     }
     lines.push(
-        `if (${raw.join(' || ')}) for (const __made of ${lowering.use('markupNodes')}(${DOCUMENT}, ${RAW_OPEN_MARKUP} + ${markup.join(' + ')} + ${RAW_CLOSE_MARKUP})) ${into(at, '__made')}`,
+        `if (${raw.join(' || ')}) for (const __made of ${lowering.use('markupNodes')}(${at.within === null ? PARENT : at.within.name}, ${RAW_OPEN_MARKUP} + ${markup.join(' + ')} + ${RAW_CLOSE_MARKUP})) ${into(at, '__made')}`,
     )
     if (!at.blank) {
         lines.push(`else ${make(whole)}`)
@@ -1075,7 +1080,7 @@ function emitFillable(
     const lowering = region.lowering
     const filled = emitRegion(sink, region.nested())
     region.helpers.push(
-        `function ${name}_build(__document) {\n    ${emitMaker(sink, lowering)}\n}`,
+        `function ${name}_build(__parent) {\n    ${emitMaker(sink, lowering)}\n}`,
     )
     region.helpers.push(
         mountFunction(
@@ -1339,7 +1344,7 @@ function emitArms(
                 : arm === 1 && caught !== undefined
                   ? caught
                   : ''
-        const builders = `const ${own}_build = function (__document) {\n${emitMaker(sink, lowering)}\n}\n${mountFunction(own, REGION_ROOT, body, `${fillRegion}(${REGION_ROOT}, ${own}_build)`, lowering, sink.defersSetup, setup !== null)}`
+        const builders = `const ${own}_build = function (__parent) {\n${emitMaker(sink, lowering)}\n}\n${mountFunction(own, REGION_ROOT, body, `${fillRegion}(${REGION_ROOT}, ${own}_build)`, lowering, sink.defersSetup, setup !== null)}`
         if (local === '') {
             helpers.push(
                 `${builders}\nconst ${own}_arm = { build: ${own}_build, mount: ${own}_mount }`,
@@ -1425,7 +1430,7 @@ function emitList(
     // MADE FROM THE ITEM'S VALUE: every slot reading the item alone is written before the row is
     // inserted, so making a row writes the document once per node (32.67).
     const valued = `const ${item} = ${ROW_ROOT}.data`
-    const make = `const ${name}_make = (__document, ${ROW_ROOT}, ${at}) => {\n    ${valued}\n    ${emitMaker(row, lowering, () => rowMarkup(row, !single, lowering, CLIENT_LANE), !single)}\n}`
+    const make = `const ${name}_make = (__parent, ${ROW_ROOT}, ${at}) => {\n    ${valued}\n    ${emitMaker(row, lowering, () => rowMarkup(row, !single, lowering, CLIENT_LANE), !single)}\n}`
     const walk = rowRegion.body()
     // A PATTERN READ OFF THE RECORD is read through one picker a name, the list's rather than the
     // row's, so a row allocates nothing for it.
@@ -1450,7 +1455,7 @@ function emitList(
             // rebuilds whole: a node that refused is the row disagreeing, and re-making it is the
             // answer the page does not have.
             opened,
-            `${lowering.use('replaceRow')}(${ROW_ROOT}, ${name}_make(${ROW_ROOT}.node.ownerDocument, ${ROW_ROOT}, ${at}))`,
+            `${lowering.use('replaceRow')}(${ROW_ROOT}, ${name}_make, ${at})`,
             lowering,
             row.defersSetup,
             block.setup !== null,

package/src/server/BRIDGE_VERSION.ts

@@ -1,3 +1,3 @@
 // The `abide-bridge` release a pairing command names, so a visitor's `bunx` runs the relay this
 // server speaks. `packages/abide/tests/claudeCode.test.ts` holds it to the bridge package's own.
-export const BRIDGE_VERSION = '0.3.0'
+export const BRIDGE_VERSION = '0.3.2'

package/src/server/assistant.ts

@@ -10,6 +10,7 @@
 // another request's scope — `claudeCode` answers one from the bridge's — and the call is still this
 // asker's.
 
+import { namedLogger } from '#shared/log.ts'
 import { refuse } from '#shared/refuse.ts'
 import { type McpReply, McpSurface } from './generatedSurfaces.ts'
 import { request, within } from './requestScope.ts'
@@ -64,6 +65,7 @@ export type Provider = {
 export type AssistantOptions = { mcp?: boolean; maxTurns?: number }
 
 const MAX_TURNS = 10
+const ASSISTANT_LOG = namedLogger('abide:assistant')
 // 44.7 — the caller's credentials, and nothing else of their request.
 const CARRIED_HEADERS = ['cookie', 'authorization']
 
@@ -83,10 +85,39 @@ export async function* assistant(
         options.mcp === true ? appSurface() : NO_SURFACE,
         askerOf(request()),
     )
-    yield* provider.run(messages, tools, {
+    const events = provider.run(messages, tools, {
         maxTurns: options.maxTurns ?? MAX_TURNS,
         signal: request().signal,
     })
+    // 28.7 — a closed namespace runs the provider's stream untouched.
+    yield* ASSISTANT_LOG.enabled() ? traced(events, messages.length) : events
+}
+
+/** `events`, and one line on `abide:assistant` once they end, however they end. 44.32. */
+async function* traced(
+    events: AsyncGenerator<AssistantEvent>,
+    messageCount: number,
+): AsyncGenerator<AssistantEvent> {
+    const started = performance.now()
+    let calls = 0
+    let done: Extract<AssistantEvent, { type: 'done' }> | undefined
+    try {
+        for await (const event of events) {
+            if (event.type === 'tool') calls += 1
+            else if (event.type === 'done') done = event
+            yield event
+        }
+    } finally {
+        ASSISTANT_LOG.debug(
+            done === undefined ? 'unfinished' : done.stop,
+            `${messageCount} messages`,
+            `${calls} tool calls`,
+            done === undefined
+                ? 'no usage'
+                : `${done.usage.input}/${done.usage.output} tokens`,
+            `${(performance.now() - started).toFixed(1)}ms`,
+        )
+    }
 }
 
 /** Where an MCP request is answered, as JSON-RPC's `result` or `error`. */

package/src/server/bridgeRelay.ts

@@ -52,7 +52,7 @@ const CODE_LIFETIME = 10 * 60_000
 // How long a bridge outlives the last page watching it, so a reload does not end it.
 const IDLE_GRACE = 30_000
 /** How long a pairing whose stream dropped waits to be resumed. 44.26. */
-export const RESUME_MILLISECONDS = 30_000
+export const RESUME_MILLISECONDS = 60_000
 /** How often a pairing's stream carries a comment while it has nothing else to send. 44.27. */
 export const HEARTBEAT_MILLISECONDS = 15_000
 const HEARTBEAT = new TextEncoder().encode(EVENT_STREAM_OPENER)

package/src/server/claudeCode.ts

@@ -42,6 +42,9 @@ export type ClaudeCodeConfig = {
     tools?: string[]
 }
 
+/** The built-in tools a pairing command grants, as the visitor would after its `--`. 44.33. */
+type PairingOptions = Pick<ClaudeCodeConfig, 'tools'>
+
 /** Whether this browser's bridge is connected, and the command that pairs one where it is not. */
 export type BridgeStatus = { paired: boolean; command: string | undefined }
 
@@ -123,12 +126,19 @@ function askingCaller(): string {
     return caller
 }
 
-/** The command that pairs a bridge with this browser, and when its code stops standing. 44.14. */
-function bridgeCommand(): { command: string; expires: number } {
+/**
+ * The command that pairs a bridge with this browser, and when its code stops standing. 44.14. The
+ * `tools` it is given are written after its `--`, so the visitor running it grants them (44.30, 44.33).
+ */
+function bridgeCommand({ tools }: PairingOptions = {}): {
+    command: string
+    expires: number
+} {
     const { code, expires } = mintCode(askingCaller())
     const site = `${appOrigin() ?? new URL(request().url).origin}${mounted('')}`
+    const grant = tools?.length ? ` -- --tools ${tools.join(',')}` : ''
     return {
-        command: `bunx @abide/bridge@${BRIDGE_VERSION} ${site} ${code}`,
+        command: `bunx @abide/bridge@${BRIDGE_VERSION} ${site} ${code}${grant}`,
         expires,
     }
 }
@@ -137,7 +147,9 @@ function bridgeCommand(): { command: string; expires: number } {
  * This browser's pairing as it changes: unpaired with the command to run, then paired the moment a
  * bridge connects, and unpaired again if it goes. 44.20.
  */
-async function* bridge(): AsyncGenerator<BridgeStatus> {
+async function* bridge(
+    options: PairingOptions = {},
+): AsyncGenerator<BridgeStatus> {
     const caller = askingCaller()
     const signal = request().signal
     // A change landing while the loop was not waiting — paused at its `yield` — stays queued, so it
@@ -156,7 +168,7 @@ async function* bridge(): AsyncGenerator<BridgeStatus> {
                 !paired &&
                 (pairing === undefined || pairing.expires <= Date.now())
             )
-                pairing = bridgeCommand()
+                pairing = bridgeCommand(options)
             const status: BridgeStatus = {
                 paired,
                 command: paired ? undefined : pairing?.command,

package/src/server/generatedSurfaces.ts

@@ -304,11 +304,13 @@ export class McpSurface {
         asker: Request,
     ): Promise<{ text: string; failed: boolean }> {
         const tool = this.#tool(name)
-        if (tool === undefined)
+        if (tool === undefined) {
+            logCall(String(name), 404, undefined)
             return Promise.resolve({
                 text: `No tool named ${name}.`,
                 failed: true,
             })
+        }
         return this.#called(tool, args as Record<string, unknown>, asker)
     }
 
@@ -321,15 +323,23 @@ export class McpSurface {
         args: Record<string, unknown> | undefined,
         asker: Request,
     ): Promise<{ text: string; failed: boolean }> {
+        // 28.7 — a closed namespace does not pay for the line it would have written.
+        const started = MCP_LOG.enabled() ? performance.now() : undefined
         let answer: Response
         try {
             answer = await this.#answer(callOf(asker, one, args))
         } catch (thrown) {
             // 15.8 — a path parameter no address carries, refused as the wire's 422 is (`rpcRequest`).
-            if (!isFailed(thrown)) throw thrown
+            if (!isFailed(thrown)) {
+                logCall(one.name, 500, started)
+                throw thrown
+            }
             answer = answered(thrown)
         }
-        return { text: await answer.text(), failed: answer.status >= 400 }
+        // The body is the call's too: a handler that streams has only begun when its head arrives.
+        const text = await answer.text()
+        logCall(one.name, answer.status, started)
+        return { text, failed: answer.status >= 400 }
     }
 
     /** One MCP request, made as `asker`, as JSON-RPC's `result` or `error`. */
@@ -353,11 +363,13 @@ export class McpSurface {
                 return { result: { tools: this.list() } }
             case 'tools/call': {
                 const tool = this.#tool(params?.name)
-                if (tool === undefined)
+                if (tool === undefined) {
+                    logCall(String(params?.name), 404, undefined)
                     return mcpFailure(
                         -32602,
                         `No tool named ${String(params?.name)}.`,
                     )
+                }
                 const { text, failed } = await this.#called(
                     tool,
                     params?.arguments as Record<string, unknown> | undefined,
@@ -382,6 +394,23 @@ export class McpSurface {
     }
 }
 
+// 20.18 — ONE LINE PER CALL, whoever framed it: this endpoint or a provider's `Toolbox`, and a call
+// to a tool that is not published (404) or whose answer threw (500) included. `started` is unset
+// where nothing ran, or where the namespace is closed (28.7).
+function logCall(
+    name: string,
+    status: number,
+    started: number | undefined,
+): void {
+    if (!MCP_LOG.enabled()) return
+    MCP_LOG.debug(
+        'call',
+        name,
+        status,
+        `${started === undefined ? '0.0' : (performance.now() - started).toFixed(1)}ms`,
+    )
+}
+
 /**
  * Whether a tool declares an `outputSchema`: MCP's structured content is an object, so only a
  * result schema that is one. 20.16.

package/src/ui/ArmRegion.ts

@@ -17,7 +17,7 @@ import { Scope, type Stoppable } from './Scope.ts'
 
 /** One arm: what makes its nodes, and what binds them. A `build` of `undefined` makes none. */
 export type Arm = {
-    build: ((document: Document) => Node[]) | undefined
+    build: ((parent: Node) => Node[]) | undefined
     mount: (root: Region) => Stoppable | undefined
 }
 

package/src/ui/RawRun.ts

@@ -60,7 +60,7 @@ export function textToMarkup(text: Text, markup: string): RawRun {
     const open = document.createComment(RAW_OPEN)
     const close = document.createComment(RAW_CLOSE)
     parent.insertBefore(open, text)
-    parent.insertBefore(parseMarkup(text, markup), text)
+    parent.insertBefore(parseMarkup(parent, markup), text)
     parent.replaceChild(close, text)
     return new RawRun(open, close, markup)
 }
@@ -70,7 +70,7 @@ export function refillRun(run: RawRun, markup: string): void {
     const parent = run.close.parentNode
     if (parent === null) throw detached()
     clearRun(run)
-    parent.insertBefore(parseMarkup(run.close, markup), run.close)
+    parent.insertBefore(parseMarkup(parent, markup), run.close)
     run.html = markup
 }
 

package/src/ui/bindProperty.ts

@@ -68,11 +68,12 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
     ) {
         // 32.62 — the list of what is selected, read and written per option.
         const select = bound as unknown as HTMLSelectElement
-        scope.watch(() => {
-            const value = boundValue(operand)
+        const choose = (value: unknown) => {
             for (const option of select.options)
                 option.selected = selectHolds(value, option.value)
-        })
+        }
+        scope.watch(() => choose(boundValue(operand)))
+        chooseOnNewOptions(select, () => choose(heldValue(operand)), scope)
         select.addEventListener('change', () => {
             const chosen: string[] = []
             for (const option of select.selectedOptions)
@@ -84,8 +85,7 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
     // 32.58 — NUMERIC ONCE, NUMERIC FROM THEN ON: a blank field writes `undefined`, and the
     // keystroke after it still has to know the value was a number.
     let numeric = bound.type === 'number' || bound.type === 'range'
-    scope.watch(() => {
-        const value = boundValue(operand)
+    const show = (value: unknown) => {
         if (typeof value === 'number') numeric = true
         // 32.59 — text that already reads as the value is the reader's spelling of it: a trailing
         // decimal point or zero is mid-typing, and rewriting it to the number's own text takes the
@@ -94,7 +94,8 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
             return
         const text = value === undefined || value === null ? '' : String(value)
         if (bound.value !== text) bound.value = text
-    })
+    }
+    scope.watch(() => show(boundValue(operand)))
     const write = () => {
         const typed = bound.value
         if (!numeric) {
@@ -108,6 +109,7 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
     }
     // A `<select>` settles on `change`; everything else that takes text reports each keystroke.
     if (bound.tagName === 'SELECT') {
+        chooseOnNewOptions(bound, () => show(heldValue(operand)), scope)
         bound.addEventListener('change', write)
         return
     }
@@ -125,3 +127,16 @@ function bindValue(bound: Bound, operand: unknown, scope: Scope): void {
         if (!composing) write()
     })
 }
+
+// 32.62 — AN OPTION THAT ARRIVES AFTER THE VALUE IS SELECTED WHEN IT IS THE VALUE. The value's
+// watch does not read the options, so a `{#for}` that grows them later wakes nothing of its own, and
+// the select would stay on whatever the browser picked when it changed.
+function chooseOnNewOptions(
+    select: Element,
+    choose: () => void,
+    scope: Scope,
+): void {
+    const observer = new MutationObserver(choose)
+    observer.observe(select, { childList: true, subtree: true })
+    scope.stops.push(() => observer.disconnect())
+}

package/src/ui/listenForRoutes.ts

@@ -36,6 +36,9 @@ export function listenForRoutes(router: Router): () => void {
     // mounted: the browser's own restoration runs before that page exists.
     const onPop = (): void => {
         if (router.match(location.pathname) === undefined) {
+            // The bar already stands at the entry being loaded, so the `pagehide` this reload
+            // fires would write the departed page's scroll into it: the listeners go first.
+            listening.abort()
             location.reload()
             return
         }

package/src/ui/parseMarkup.ts

@@ -1,4 +1,4 @@
-// MARKUP PARSED IN THE DOCUMENT `near` BELONGS TO, not the global one. A page mounted into a second
+// MARKUP PARSED IN THE DOCUMENT `parent` BELONGS TO, not the global one. A page mounted into a second
 // document (an example `<iframe>`) parsed its `{#if}` arms in the right one and its `{#for}` rows in
 // the page's while the two were separate copies of this; one copy is one answer.
 //
@@ -6,16 +6,67 @@
 // every caller moves those nodes out before it parses again.
 const TEMPLATES = new WeakMap<Document, HTMLTemplateElement>()
 
-/** Parses markup in `near`'s document; the fragment is reused by the next parse. */
-export function parseMarkup(near: Node, markup: string): DocumentFragment {
-    const document = near.ownerDocument ?? (near as Document)
+const SVG = 'http://www.w3.org/2000/svg'
+const MATHML = 'http://www.w3.org/1998/Math/MathML'
+
+// The foreign elements whose children the parser reads as HTML again — the integration points —
+// so markup going into one parses the way it would at the template's own top level.
+const INTEGRATION_POINTS = new Set([
+    'foreignObject',
+    'desc',
+    'title',
+    'mi',
+    'mo',
+    'mn',
+    'ms',
+    'mtext',
+])
+
+/** Whether the parser reads `element`'s children as HTML again, though it is SVG or MathML. */
+function isIntegrationPoint(element: Element): boolean {
+    if (INTEGRATION_POINTS.has(element.localName)) return true
+    // The HTML standard makes an `<annotation-xml>` one only by the encoding it declares.
+    if (element.localName !== 'annotation-xml') return false
+    const encoding = element.getAttribute('encoding')?.toLowerCase()
+    return encoding === 'text/html' || encoding === 'application/xhtml+xml'
+}
+
+/**
+ * Parses markup for `parent` — in its document, and in its NAMESPACE; the fragment is reused by the
+ * next parse.
+ *
+ * IN THE PARENT'S NAMESPACE because the server's parser read the same bytes inside it: a template's
+ * own children are HTML, so a `<circle>` parsed there alone is an `HTMLUnknownElement` that draws
+ * nothing in the `<svg>` it lands in. Markup bound for an SVG or MathML parent is parsed inside an
+ * `<svg>` or a `<math>` and the wrapper unwrapped — what the parser closes the wrapper on (a `<p>`
+ * breaks out of foreign content) stays, beside what was inside it, in order.
+ */
+export function parseMarkup(parent: Node, markup: string): DocumentFragment {
+    const document = parent.ownerDocument ?? (parent as Document)
     let template = TEMPLATES.get(document)
     if (template === undefined) {
         template = document.createElement('template')
         TEMPLATES.set(document, template)
     }
-    template.innerHTML = markup
-    return template.content
+    const space = (parent as Element).namespaceURI
+    const wrapper =
+        (space !== SVG && space !== MATHML) ||
+        isIntegrationPoint(parent as Element)
+            ? undefined
+            : space === SVG
+              ? 'svg'
+              : 'math'
+    if (wrapper === undefined) {
+        template.innerHTML = markup
+        return template.content
+    }
+    template.innerHTML = `<${wrapper}>${markup}</${wrapper}>`
+    const content = template.content
+    const wrapped = content.firstChild as Element
+    while (wrapped.firstChild !== null)
+        content.insertBefore(wrapped.firstChild, wrapped)
+    wrapped.remove()
+    return content
 }
 
 /**
@@ -23,10 +74,10 @@ export function parseMarkup(near: Node, markup: string): DocumentFragment {
  *
  * Indexed rather than spread, so no iterator runs per row.
  */
-export function markupNodes(near: Node, markup: string): Node[] {
+export function markupNodes(parent: Node, markup: string): Node[] {
     const nodes: Node[] = []
     for (
-        let node = parseMarkup(near, markup).firstChild;
+        let node = parseMarkup(parent, markup).firstChild;
         node !== null;
         node = node.nextSibling
     )

package/src/ui/regions.ts

@@ -86,7 +86,7 @@ export function isEmptyRegion(region: Region): boolean {
  */
 export function fillRegion(
     region: Region,
-    build?: (document: Document) => Node[],
+    build?: (parent: Node) => Node[],
 ): void {
     // THE PARENT IS READ BEFORE ANYTHING IS REMOVED, and the removal only happens if there is
     // one. Written as an unguarded removal followed by a `?.`-guarded insert, a region whose
@@ -101,7 +101,7 @@ export function fillRegion(
     if (build === undefined) return
     beginLayer(LAYER_FILL)
     try {
-        const made = build(region.close.ownerDocument as Document)
+        const made = build(parent)
         for (const one of made) parent.insertBefore(one, region.close)
     } finally {
         endLayer(LAYER_FILL)
@@ -119,7 +119,7 @@ export function fillRegion(
  */
 export function fillEmpty(
     region: Region,
-    build?: (document: Document) => Node[],
+    build?: (parent: Node) => Node[],
 ): boolean {
     if (!isEmptyRegion(region)) return false
     fillRegion(region, build)

package/src/ui/rows.ts

@@ -69,11 +69,11 @@ export type Row = {
  */
 export type RowBuilders = {
     /**
-     * A row's nodes, BUILT in the document the list stands in — handed over by the reconcile
-     * rather than found by the row, which is the one place a row's document is decided. Every slot
+     * A row's nodes, BUILT for the parent the list stands in — handed over by the reconcile rather
+     * than found by the row, which is the one place a row's document and namespace are decided. Every slot
      * reading the item alone is written here, before the nodes are inserted.
      */
-    make: (document: Document, row: Row, at: number) => Node[]
+    make: (parent: Node, row: Row, at: number) => Node[]
     mount: (row: Row, at: number) => Scope
     /** 32.67 — rewrites, from `row.data`, the slots `make` wrote from the item alone. */
     update: (row: Row, at: number) => void
@@ -172,15 +172,20 @@ export function rowsIn(region: Region, anchored: boolean): ChildNode[] {
 }
 
 /**
- * Rebuilds a row in place from `next`, keeping its record.
+ * Rebuilds a row in place with `make`, keeping its record.
  *
  * 41.10 — a row that cannot be hydrated is rebuilt: the fresh nodes go where the row stood and the
  * row's record takes the new first node, so the reconcile still reaches all of it.
  */
-export function replaceRow(row: Row, next: Node[]): void {
+export function replaceRow(
+    row: Row,
+    make: RowBuilders['make'],
+    at: number,
+): void {
     const first = row.node
     const parent = first.parentNode
     if (parent === null) return
+    const next = make(parent, row, at)
     for (const node of next) parent.insertBefore(node, first)
     removeRow(first)
     row.node = next[0] as ChildNode
@@ -201,7 +206,7 @@ export function makeRow(
     // 14.8 — set up ONCE for the row, and the same builders make it and mount it.
     const builders = setUp(row, at)
     row.update = builders.update
-    const nodes = builders.make(parent.ownerDocument as Document, row, at)
+    const nodes = builders.make(parent, row, at)
     for (const node of nodes) parent.insertBefore(node, before)
     row.node = nodes[0] as ChildNode
     row.scope = builders.mount(row, at)