@gotcos/glasses-server 7.0.29 → 7.0.31

package/server/web-control/panes/meetings.js

@@ -525,10 +525,12 @@
     for (var w = 0; w < 7; w++) heads += '<span class="mt-wd" aria-hidden="true">' + esc(new Date(2023, 0, 1 + (ws + w) % 7).toLocaleDateString(undefined, { weekday: 'narrow' })) + '</span>';
     var cells = '', n = 0;
     for (var i = 0; i < lead; i++) { cells += '<span class="mt-blank"></span>'; n++; }
+    // 7.0.30 item 4: today is marked (a ring, aria-current) and can be picked even with no meetings.
+    var todayKey = dayKey(new Date());
     for (var day = 1; day <= dim; day++) {
-      var key = S.month + '-' + pad2(day), c = counts[key] || 0, on = S.day === key;
-      cells += '<button type="button" class="mt-day" data-mt="day" data-day="' + key + '" aria-pressed="' + on + '"' + (c === 0 ? ' disabled' : '') +
-        ' aria-label="' + esc(key + (c === 0 ? ', no meetings' : ', ' + c + ' meetings')) + '"><span class="mt-dnum">' + day + '</span><span class="mt-dot' + (c > 0 ? ' on' : '') + '"></span></button>';
+      var key = S.month + '-' + pad2(day), c = counts[key] || 0, on = S.day === key, isToday = key === todayKey;
+      cells += '<button type="button" class="mt-day' + (isToday ? ' mt-today' : '') + '" data-mt="day" data-day="' + key + '" aria-pressed="' + on + '"' + (isToday ? ' aria-current="date"' : '') + (c === 0 && !isToday ? ' disabled' : '') +
+        ' aria-label="' + esc(key + (isToday ? ', today' : '') + (c === 0 ? ', no meetings' : ', ' + c + ' meetings')) + '"><span class="mt-dnum">' + day + '</span><span class="mt-dot' + (c > 0 ? ' on' : '') + '"></span></button>';
       n++;
     }
     while (n % 7 !== 0) { cells += '<span class="mt-blank"></span>'; n++; }
@@ -594,6 +596,20 @@
       (m.sessionId ? pillsHtml(m, isNew(m.sessionId)) : '') + '</span><span class="chev"></span></button>';
   }
   function emptyBox(text) { return '<div class="cx-list"><p class="cx-empty mt-empty">' + esc(text) + '</p></div>'; }
+  // 7.0.30 item 4: today with no meetings says so in plain words, with one tap to the latest earlier day that has some
+  // (this month), or to last month when this month has none. The calendar stays as it is.
+  function latestDayBefore(key) {
+    var best = '';
+    (S.days || []).forEach(function (d) { if (num(d.count) > 0 && d.date < key && d.date > best) best = d.date; });
+    return best;
+  }
+  function emptyToday() {
+    var last = latestDayBefore(dayKey(new Date()));
+    var jump = last
+      ? '<button type="button" class="cx-btn quiet mt-jump" data-mt="jump-day" data-day="' + esc(last) + '">Go to ' + esc(W.plainDay ? W.plainDay(last) : last) + '</button>'
+      : '<button type="button" class="cx-btn quiet mt-jump" data-mt="month" data-delta="-1">Go to last month</button>';
+    return '<div class="cx-list"><p class="cx-empty mt-empty">No meetings today.</p><p class="mt-jump-row">' + jump + '</p></div>';
+  }
   function paintList() {
     var el = $('mt-list'); if (!el) return;
     var html;
@@ -611,6 +627,7 @@
       var rows = visibleRows();
       html = rows.length ? '<div class="cx-list">' + rows.map(function (m) { return rowHtml(m, false); }).join('') + '</div>' +
           (monthCapped() ? '<p class="mt-capnote">Showing the newest ' + S.rows.length + ' of ' + monthTotal() + ' in ' + esc(monthTitle(S.month)) + '. Pick a day in the calendar to see all of its meetings.</p>' : '')
+        : S.day && S.day === dayKey(new Date()) ? emptyToday()
         : emptyBox(S.day ? 'No meetings stored on ' + S.day + '. Pick another day, or show the whole month.' : 'No meetings stored in ' + monthTitle(S.month) + '.');
     }
     if (S.listHtml === html) return;
@@ -643,9 +660,10 @@
       S.days = days;
       var kept = S.dayRows; S.dayRows = {};
       if (S.day && kept[S.day]) S.dayRows[S.day] = kept[S.day];
+      // 7.0.30 item 4 (Miles 10:15: "Meetings should SHOW the current day"): the current month opens on today, with
+      // meetings or without (the list then says so and offers the latest day that has some).
       if (!S.autoDay && S.month === monthKey(new Date())) {
-        var today = dayKey(new Date());
-        if (days.some(function (x) { return x.date === today && num(x.count) > 0; })) S.day = today;
+        S.day = dayKey(new Date());
         S.autoDay = true;
       }
       S.error = ''; S.loading = false;
@@ -2089,7 +2107,7 @@
       var hit = lists.reduce(function (all, l) { return all.concat(l); }, []).filter(function (m) { return m.sessionId === f.sid || (m.g2SessionIds || []).indexOf(f.sid) >= 0; })[0];
       if (hit && S.view === 'live' && S.liveSid === f.sid) {
         S.rowsStale = true;
-        location.replace('#/meetings/' + [hit.domain, hit.month, hit.filename].map(encodeURIComponent).join('/'));
+        W.replace('#/meetings/' + [hit.domain, hit.month, hit.filename].map(encodeURIComponent).join('/'));
       } else if (!hit && f.endedAt && now - (f.retryAt || f.endedAt) >= FINAL_DEADLINE_MS + (f.start ? Math.max(0, f.endedAt - f.start) / 12 : 0)) {
         f.notFound = true; paintLiveHead();
       }
@@ -2667,6 +2685,7 @@
       case 'month': shiftMonth(Number(t.getAttribute('data-delta')) || 0); return;
       case 'day': { var d = t.getAttribute('data-day'); S.day = S.day === d ? null : d; S.autoDay = true; paintBrowse(); ensureDay(); return; }
       case 'all-month': S.day = null; S.autoDay = true; paintBrowse(); return;
+      case 'jump-day': { S.day = t.getAttribute('data-day'); S.autoDay = true; paintBrowse(); ensureDay(); return; }
       case 'clear': {
         S.q = ''; S.hits = null; S.ranFor = ''; S.searching = false; S.searchError = ''; clearTimeout(S.qTimer);
         var q = $('mt-q'); if (q) { q.value = ''; q.focus(); }

package/server/web-control/panes/memories.js

@@ -105,7 +105,7 @@
   function readerArgs(r) { return r.pane === 'memories' && !tabRoute(r.args) ? r.args : []; }
   function showTab(v) {
     var h = '#/memories/t/' + encodeURIComponent(v);
-    if (location.hash === h) paint(); else location.replace(h);
+    if (location.hash === h) paint(); else W.replace(h);
   }
   function isWide() { return !!(window.matchMedia && window.matchMedia('(min-width: 760px)').matches); }
   function el(id) { return document.getElementById(id); }
@@ -2262,7 +2262,7 @@
       // #/memories/view/<view> (older links) and a bare #/memories become the tab's own address; an unknown tab, the stored one.
       if (args[0] === 'view' || !args.length || (args[0] === 't' && !knownView(args[1]))) {
         if (args[0] === 'view' && knownView(args[1])) { S.view = args[1]; persist(); }
-        location.replace('#/memories/t/' + encodeURIComponent(S.view)); return;
+        W.replace('#/memories/t/' + encodeURIComponent(S.view)); return;
       }
       if (tabRoute(args) && S.view !== args[1]) { S.view = args[1]; persist(); }
       if (args[0] === 'k') { S.view = 'knowledge'; if (KTABS.indexOf(args[1]) >= 0) { S.ktab = args[1]; S.ktabChosen = true; } persist(); }

package/server/web-control/panes/messages.js

@@ -469,9 +469,14 @@
   }
   function turnCards(t, msgKey) {
     var a = atts(t);
-    return '<div class="cx-card you"><div class="cx-card-label">YOU</div><div class="cx-card-body" data-hl>' + esc(String(t.query || '').trim() || '(empty query)').replace(/\n/g, '<br>') + '</div></div>' +
+    // 7.0.30, Miles's pick A: who said what by side, in the COS chat's own shapes. His words on the right in the chat's
+    // gold bubble with "You" under it; COS on the left beside its mark, on the page. A screen reader hears "You said"
+    // and "COS said" first, since the side and the mark are visual only.
+    return '<div class="cx-said you"><span class="sr-only">You said</span><div class="cx-said-bubble cx-card-body" data-hl>' + esc(String(t.query || '').trim() || '(empty query)').replace(/\n/g, '<br>') + '</div>' +
+      '<span class="cx-said-who" aria-hidden="true">You</span></div>' +
       stripHtml(a.filter(isUserAtt), true, msgKey) +
-      '<div class="cx-card"><div class="cx-card-label">COS</div><div class="cx-card-body md" data-hl>' + W.md(W.structureLensAnswer(String(t.text || ''))) + '</div></div>' +
+      '<div class="cx-said cos"><span class="cc-avatar" aria-hidden="true"><svg class="icon"><use href="#i-mark"/></svg></span><div class="cx-said-text"><span class="sr-only">COS said</span>' +
+      '<div class="cx-card-body md" data-hl>' + W.md(W.structureLensAnswer(String(t.text || ''))) + '</div></div></div>' +
       stripHtml(a.filter(function (x) { return !isUserAtt(x); }), false, msgKey);
   }
   function copyTurnText(t) {

package/server/web-control/panes/settings.js

@@ -123,7 +123,7 @@
     return '<section class="cx-set-cat"><h2 class="cx-col-title">This browser</h2>' +
       group('Appearance', '', themeBtn('system', 'Match this device') + themeBtn('light', 'Light') + themeBtn('dark', 'Dark')) +
       group('Sign-in', '',
-        '<button type="button" class="cx-set-row" id="device-code-btn"><span class="cx-set-text"><span class="cx-set-name">Use COS on another phone or browser</span><span class="cx-set-desc">A QR for your iPhone Camera, and a code to type. This is not glasses pairing; pair glasses from COS Control on your Mac.</span></span><span class="chev"></span></button>' +
+        '<button type="button" class="cx-set-row" id="device-code-btn"><span class="cx-set-text"><span class="cx-set-name">Use COS on another phone or browser</span><span class="cx-set-desc">A QR for your phone’s camera, and a code to type. This is not glasses pairing; pair glasses from COS Control on your Mac.</span></span><span class="chev"></span></button>' +
         '<div id="device-code-panel" class="device-code hidden" aria-live="polite"></div>' +
         '<button type="button" class="cx-set-row" id="copy-link"><span class="cx-set-text"><span class="cx-set-name">Copy link for your phone</span><span class="cx-set-desc" id="tailnet-url">' + esc(W.state.tailnetUrl || 'Checking Tailscale') + '</span></span></button>' +
         '<button type="button" class="cx-set-row" id="sign-out"><span class="cx-set-text"><span class="cx-set-name">Sign out of this browser</span></span></button>' +

package/server/web-control/panes/speakers.js

@@ -2363,8 +2363,11 @@
     var acts = '';
     if (rv && rv.recordId) acts += '<button type="button" class="cx-btn quiet" data-sp="open-meeting" title="Open this meeting’s transcript, summary and files">' + icon('meetings') + 'Open meeting</button>';
     if (R.content && R.content.clipboardSummary) {
-      acts += '<button type="button" class="cx-btn quiet" data-sp="copy-summary" title="Copy the meeting without the transcript">Summary</button>' +
-        '<button type="button" class="cx-btn quiet" data-sp="copy-full" title="Copy the meeting including the full transcript">Full (' + Math.max(1, Math.floor(R.content.fullChars / 1024)) + ' KB)</button>';
+      // 7.0.30 item 3 (Anand: Summary and Full did not say they copy): the buttons say Copy, and the one tapped says
+      // Copied for COPIED_MS (spCopied), while a status line the screen reader hears says what was copied.
+      var cp = R.copied && Date.now() - R.copied.at < COPIED_MS ? R.copied.which : '';
+      acts += '<button type="button" class="cx-btn quiet" id="sp-copy-summary" data-sp="copy-summary" title="Copy the meeting without the transcript">' + (cp === 'summary' ? 'Copied' : 'Copy summary') + '</button>' +
+        '<button type="button" class="cx-btn quiet" id="sp-copy-full" data-sp="copy-full" title="Copy the meeting including the full transcript">' + (cp === 'full' ? 'Copied' : 'Copy full (' + Math.max(1, Math.floor(R.content.fullChars / 1024)) + ' KB)') + '</button>';
     }
     var next = S.meetings ? nextUnnamed(R.sid) : null;
     acts += '<button type="button" class="cx-btn quiet" data-sp="next-unnamed"' + (next ? '' : ' disabled') + ' title="' +
@@ -2424,6 +2427,27 @@
 
   // ── render dispatch ────────────────────────────────────
   var expiryTimer = null;
+  // 7.0.30 item 3: a copy confirms on its own button, then the button goes back to Copy; the words go to a status region
+  // that lives outside the rebuilt pane, so a screen reader hears them (a region made in the same rebuild may not be).
+  var COPIED_MS = 2500;
+  function spAnnounce(text) {
+    var live = document.getElementById('sp-copy-live');
+    if (!live) {
+      live = document.createElement('div');
+      live.id = 'sp-copy-live'; live.className = 'sr-only';
+      live.setAttribute('role', 'status'); live.setAttribute('aria-live', 'polite');
+      document.body.appendChild(live);
+    }
+    live.textContent = '';
+    setTimeout(function () { live.textContent = text; }, 30);
+  }
+  function spCopied(R, which, words) {
+    var at = Date.now();
+    R.copied = { which: which, at: at };
+    render();
+    spAnnounce(words);
+    setTimeout(function () { if (R.copied && R.copied.at === at) { R.copied = null; render(); } }, COPIED_MS);
+  }
   function render() {
     if (W.parseRoute().pane !== 'speakers') return;
     var rt = route();
@@ -2641,7 +2665,8 @@
         if (!text) { R.copyNote = 'Nothing to copy'; render(); return; }
         W.copyText(text).then(function () {
           var kb = Math.max(1, Math.floor((full ? c.fullChars : c.summaryChars) / 1024));
-          R.copyNote = full ? 'Copied full meeting (' + kb + ' KB)' : 'Copied summary (' + kb + ' KB)'; render();
+          R.copyNote = full ? 'Copied full meeting (' + kb + ' KB)' : 'Copied summary (' + kb + ' KB)';
+          spCopied(R, full ? 'full' : 'summary', R.copyNote);
         }, function (err) { W.toast(err.message); });
         return;
       }

package/server/web-control/panes/today-actions.js

@@ -471,8 +471,8 @@
     close('leave');
     O.depth = 1;
     if (!replace) { W.go(pane, args || []); return; }
-    if (extra) { quietBack(extra, function () { location.replace(hash); }); return; }
-    location.replace(hash);
+    if (extra) { quietBack(extra, function () { W.replace(hash); }); return; }
+    W.replace(hash);
   }
   // A Back step the overlay takes itself (X, Back to sessions, leaving for a tab): its popstate is ours, not the phone's
   // Back, and `then` runs once it lands. If it never arrives (history.go with nothing to go back to, or a browser that

package/server/web-control/panes/work.js

@@ -2813,7 +2813,7 @@
       if (args[0] === 'sort') {
         S.tab = 'sort'; S.sortGroupId = ''; S.sortIndex = 0; S.moreOpen = false;
         if (!S.intake && !S.intakeLoading) loadIntake(true);
-        location.replace('#/work');
+        W.replace('#/work');
         return;
       }
       startPoll(); resumeHandoffPolls();

package/server/web-control/shell.js

@@ -263,7 +263,8 @@
     }
     crumbs.innerHTML = parts.join('');
     $('nav-back').disabled = onToday;
-    // The phone top bar (below 600 px, the same width test) names the detail too, so a reader says where it is.
+    // Below 600 px the section name gets the detail too. On a reader that label is hidden (the section button gives way
+    // to Back, which names where it goes), so this shows only on a list that has a detail.
     var label = $('section-name');
     if (label && detail && railHidden()) label.textContent = detail;
   }

package/server/web-signer/.manifest.json

@@ -3,9 +3,9 @@
   "algorithm": "sha256",
   "files": {
     "/index.html": "3bea8ab14118e48c8bbf5f09de2e8b65ca1225b7e7b564982a84477bafc8341e",
-    "/signer-proof.js": "a8f8f10608fa1ec0e8da0280fdb27c16c78c011e6ff935477593e25a8e6a26e0",
+    "/signer-proof.js": "13b2d3f2709501b3bacff63b5a041282cacdf5bce6be168779c59ba89cf2e0c3",
     "/signer-store.js": "ae123328f922a509eea4d8f9e8440c9ef6972eeb14bf90b9e8bde3c84f7132bc",
     "/signer.css": "e19f5ec70c9dae28347ad40cd08742842e964b3d0b973a5c39f48f9cafdd319b",
-    "/signer.js": "c92dae47694a42aec0995a8cb0e70ba54979183711d840b2935528a197b11735"
+    "/signer.js": "098f484b452c0c2b8ff33c9ca7764fb179e3e5f52c77bebf47eb540e73e7a566"
   }
 }

package/server/web-signer/signer-proof.js

@@ -129,13 +129,28 @@
       if (!Object.prototype.hasOwnProperty.call(channels, s.action) || channels[s.action].indexOf(s.channel) < 0
         || !/^[a-z0-9@][a-z0-9@._/-]{0,127}$/.test(s.artifact) || !/^[0-9]{1,5}\.[0-9]{1,5}\.[0-9]{1,6}(-[0-9A-Za-z.-]{1,32})?$/.test(s.version)
         || !/^(sha256:[0-9a-f]{64}|sha512:[0-9a-f]{128}|sha512-[A-Za-z0-9+/]{86}==)$/.test(s.digest) || !HEX64.test(s.packetSha256)) throw fail('scope_not_allowed')
-      var manifests = { 'gotcos-site': 'gotcos-site-manifest', 'control-downloads': 'cos-control-downloads-manifest', 'release-docs': 'cos-release-docs-manifest' }
-      if (Object.prototype.hasOwnProperty.call(manifests, s.channel) && (s.artifact !== manifests[s.channel] || !/^sha256:[0-9a-f]{64}$/.test(s.digest))) throw fail('scope_not_allowed')
+      var manifest = manifestArtifact(s.channel)
+      if (manifest && (s.artifact !== manifest || !/^sha256:[0-9a-f]{64}$/.test(s.digest))) throw fail('scope_not_allowed')
       return { kind: 'approve', action: s.action, artifact: s.artifact, version: s.version, digest: s.digest, channel: s.channel, packetSha256: s.packetSha256 }
     }
     throw fail('scope_not_allowed')
   }
 
+  // What an approval on each channel does, one fixed line per channel (Miles, 2026-11-12: a publish approval covers
+  // its own push). A copy of APPROVE_CHANNEL_EFFECT in shared/web-turn-envelope.ts; signer-proof.test.ts pins the two.
+  var CHANNEL_EFFECT = { 'mac-local': 'Installs on this Mac. No git push.', 'npm-next': 'Publishes to npm under the next tag, from the tested package. No git push.', 'npm-latest': 'Publishes to npm under the latest tag, from the tested package. No git push.', 'control-appcast': 'Pushes ukaoma/cos-starter main (control/appcast.json): the COS Control update feed on gotcos.com.', 'hub-alias': 'Pushes ukaoma/evenhub-g2-cos main: moves the Even Hub alias to this package.', 'gotcos-site': 'Pushes ukaoma/cos-starter main: republishes www.gotcos.com.', 'control-downloads': 'Creates a GitHub Release on ukaoma/cos-starter (a tag, no branch push) with the ZIP and its SHA-256 file.', 'release-docs': 'Pushes ukaoma/cos-starter main (docs/): republishes the public COS docs.' }
+  // Channels that approve one canonical deployment manifest, and the artifact each must name. A copy of
+  // PUBLISH_MANIFEST_ARTIFACTS in shared/web-turn-envelope.ts; signer-proof.test.ts pins the two (Q1, 2026-11-12).
+  var MANIFEST_ARTIFACTS = { 'gotcos-site': 'gotcos-site-manifest', 'control-downloads': 'cos-control-downloads-manifest', 'release-docs': 'cos-release-docs-manifest' }
+  /** The manifest artifact a channel requires, or '' when the channel is not a manifest channel. */
+  function manifestArtifact(channel) {
+    return typeof channel === 'string' && Object.prototype.hasOwnProperty.call(MANIFEST_ARTIFACTS, channel) ? MANIFEST_ARTIFACTS[channel] : ''
+  }
+  /** The fixed line for a channel this page can sign, or '' for anything else. Never built from packet text. */
+  function channelEffect(channel) {
+    return typeof channel === 'string' && Object.prototype.hasOwnProperty.call(CHANNEL_EFFECT, channel) ? CHANNEL_EFFECT[channel] : ''
+  }
+
   /** Verify the full packet before display AND again before signing. A packet is still only a request. */
   function validateHandoffPacket(h, nowMs) {
     return Promise.resolve().then(function () {
@@ -340,7 +355,7 @@
     canonicalJson: canonicalJson, jcsBytes: jcsBytes,
     signedWords: signedWords, wordsDigest: wordsDigest,
     buildEnvelope: buildEnvelope, passkeyChallenge: passkeyChallenge, passkeyHeader: passkeyHeader,
-    assembleTurnProof: assembleTurnProof, validateHandoffPacket: validateHandoffPacket,
+    assembleTurnProof: assembleTurnProof, validateHandoffPacket: validateHandoffPacket, channelEffect: channelEffect, manifestArtifact: manifestArtifact,
     sasCommit: sasCommit, sasCode: sasCode, kidOf: kidOf, fingerprintOf: fingerprintOf, enrollProofMessage: enrollProofMessage,
     spkiFromXY: spkiFromXY, xyFromSpki: xyFromSpki, coseFromXY: coseFromXY, xyFromCose: xyFromCose,
     xyFromAttestation: xyFromAttestation, passkeyXY: passkeyXY,

package/server/web-signer/signer.js

@@ -124,8 +124,10 @@
     return 'Unknown'
   }
   function deploymentMeaning(scope) {
-    var targets = { 'gotcos-site': 'gotcos.com website (cos-starter Pages)', 'control-downloads': 'COS Control GitHub release downloads and approved latest aliases', 'release-docs': 'Public COS release documentation' }
-    return scope && Object.prototype.hasOwnProperty.call(targets, scope.channel) ? '\nDeployment target: ' + targets[scope.channel] + '\nApproval is limited to this exact manifest SHA-256. The receiving release tool checks its files and destination.' : ''
+    // The fixed line for the channel (P.channelEffect), never text from the packet's requester (2026-11-12).
+    var effect = scope && scope.kind === 'approve' ? P.channelEffect(scope.channel) : ''
+    if (!effect) return ''
+    return '\nWhat this approves: ' + effect + (P.manifestArtifact(scope.channel) ? '\nApproval is limited to this exact manifest SHA-256. The receiving release tool checks its files and destination.' : '')
   }
   function claim(id) {
     show('loading')

package/shared/web-turn-envelope.ts

@@ -37,8 +37,15 @@ export const WEB_TURN_MAX_LIFETIME_S = 15 * 60
 /** How far in the future `iat` may sit (clock skew between the phone and this Mac), in seconds. */
 export const WEB_TURN_IAT_SKEW_S = 60
 
-/** The only actions an `approve` scope can name. Anything else, including every never-list item, is unexpressible. */
-export const APPROVE_ACTIONS: ReadonlySet<string> = new Set(['install', 'publish', 'push-main'])
+/**
+ * The only actions an `approve` scope can name. Anything else, including every never-list item, is unexpressible.
+ * Miles, 2026-11-12 11:11: a phone approval may sign everything the build allows except pushing main, which stays
+ * typed at the desk ("Keep allow for all action but the push to main. That way we can resolve when at the desk").
+ */
+export const APPROVE_ACTIONS: ReadonlySet<string> = new Set(['install', 'publish'])
+
+/** Actions a phone can never sign. Not expressible, and still named in every `notAuthorized` list. */
+export const APPROVE_ACTIONS_REMOVED: readonly string[] = Object.freeze(['push-main'])
 
 /** What a `message` scope means: conversation only (review B4). */
 export const MESSAGE_SCOPE_MEANING = 'conversation'
@@ -55,10 +62,28 @@ export const MESSAGE_SCOPE_NOT_AUTHORIZED: readonly string[] = Object.freeze([
 ])
 
 /** The channels each approve action may name. Nothing else is signable (review B4). */
-export const APPROVE_ACTION_CHANNELS: Readonly<Record<'install' | 'publish' | 'push-main', readonly string[]>> = Object.freeze({
+export const APPROVE_ACTION_CHANNELS: Readonly<Record<'install' | 'publish', readonly string[]>> = Object.freeze({
   install: Object.freeze(['mac-local']),
   publish: Object.freeze(['npm-next', 'npm-latest', 'control-appcast', 'hub-alias', 'gotcos-site', 'control-downloads', 'release-docs']),
-  'push-main': Object.freeze(['git-main']),
+})
+
+/**
+ * What an approval on each channel does, in one fixed line the phone shows (Miles, 2026-11-12: "Publish includes its
+ * own push"). A publish approval covers the push that publish consists of, and only that: cos-starter main for the
+ * site, the appcast and the docs; evenhub-g2-cos main for the Hub alias; npm goes out from the tested package with no
+ * push. Pushing the code main of any repo stays typed at the desk. The line is derived from the CHANNEL alone, never
+ * from text the requester sent. The phone's page keeps a copy (server/web-signer/signer-proof.js, CHANNEL_EFFECT),
+ * pinned to this one by signer-proof.test.ts.
+ */
+export const APPROVE_CHANNEL_EFFECT: Readonly<Record<string, string>> = Object.freeze({
+  'mac-local': 'Installs on this Mac. No git push.',
+  'npm-next': 'Publishes to npm under the next tag, from the tested package. No git push.',
+  'npm-latest': 'Publishes to npm under the latest tag, from the tested package. No git push.',
+  'control-appcast': 'Pushes ukaoma/cos-starter main (control/appcast.json): the COS Control update feed on gotcos.com.',
+  'hub-alias': 'Pushes ukaoma/evenhub-g2-cos main: moves the Even Hub alias to this package.',
+  'gotcos-site': 'Pushes ukaoma/cos-starter main: republishes www.gotcos.com.',
+  'control-downloads': 'Creates a GitHub Release on ukaoma/cos-starter (a tag, no branch push) with the ZIP and its SHA-256 file.',
+  'release-docs': 'Pushes ukaoma/cos-starter main (docs/): republishes the public COS docs.',
 })
 
 export const APPROVE_ARTIFACT_RE = /^[a-z0-9@][a-z0-9@._/-]{0,127}$/
@@ -88,13 +113,13 @@ export function approveFieldsValid(action: unknown, artifact: unknown, version:
 /** The verifier's `notAuthorized` list for a scope: the never-list plus what this scope does not cover. */
 export function notAuthorizedFor(scope: WebTurnScope): string[] {
   if (scope.kind === 'message') return [...WEB_KEY_NEVER_AUTHORIZED, ...MESSAGE_SCOPE_NOT_AUTHORIZED]
-  const others = [...APPROVE_ACTIONS].filter(a => a !== scope.action)
+  const others = [...APPROVE_ACTIONS, ...APPROVE_ACTIONS_REMOVED].filter(a => a !== scope.action)
   return [...WEB_KEY_NEVER_AUTHORIZED, ...others, 'push-branch', 'hub-file', 'other-artifact-version-digest-or-channel']
 }
 
 export type WebTurnScope =
   | { kind: 'message' }
-  | { kind: 'approve'; action: 'install' | 'publish' | 'push-main'; artifact: string; version: string; digest: string; channel: string; packetSha256: string }
+  | { kind: 'approve'; action: 'install' | 'publish'; artifact: string; version: string; digest: string; channel: string; packetSha256: string }
 
 export interface WebTurnAttachment { id: string; sha256: string; bytes: number; name: string }
 
@@ -194,7 +219,7 @@ export function parseWebTurnScope(v: unknown): WebTurnScope | null {
     // The closed action list, the strict field patterns and the channel table (approveFieldsValid).
     if (!approveFieldsValid(v.action, v.artifact, v.version, v.digest, v.channel)) return null
     if (typeof v.packetSha256 !== 'string' || !HEX64.test(v.packetSha256)) return null
-    return { kind: 'approve', action: v.action as 'install' | 'publish' | 'push-main', artifact: v.artifact as string, version: v.version as string, digest: v.digest as string, channel: v.channel as string, packetSha256: v.packetSha256 }
+    return { kind: 'approve', action: v.action as 'install' | 'publish', artifact: v.artifact as string, version: v.version as string, digest: v.digest as string, channel: v.channel as string, packetSha256: v.packetSha256 }
   }
   return null
 }
@@ -249,7 +274,7 @@ export function parseWebTurnEnvelope(v: unknown): { ok: true; envelope: WebTurnE
 export interface WebApprovalPacket {
   v: typeof WEB_APPROVAL_PACKET_VERSION
   packetId: string
-  action: 'install' | 'publish' | 'push-main'
+  action: 'install' | 'publish'
   artifact: string
   version: string
   digest: string