@jmanuelcorral/openteam 0.2.2 → 0.9.0

package/dist/console/assets.d.ts

@@ -4,7 +4,7 @@
  * composición de paneles. No contienen datos de usuario; el `render.ts` escapa
  * todo el contenido dinámico antes de insertarlo.
  */
-export declare const CONSOLE_STYLE = "\n:root{color-scheme:dark;--bg:#0f1115;--panel:#171a21;--fg:#e6e8eb;--muted:#8b929c;--good:#3fb950;--local:#58a6ff;--frontier:#d29922;--line:#262b34}\n*{box-sizing:border-box}\nbody{margin:0;background:var(--bg);color:var(--fg);font:14px/1.5 ui-sans-serif,system-ui,Segoe UI,Roboto,sans-serif}\nheader{padding:16px 24px;border-bottom:1px solid var(--line);display:flex;justify-content:space-between;align-items:baseline;gap:12px;flex-wrap:wrap}\nheader h1{font-size:18px;margin:0}\nheader .meta{color:var(--muted);font-size:12px}\nmain{display:grid;grid-template-columns:repeat(auto-fit,minmax(320px,1fr));gap:16px;padding:24px}\n.panel{background:var(--panel);border:1px solid var(--line);border-radius:10px;padding:16px}\n.panel h2{font-size:14px;margin:0 0 12px;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}\n.grid{display:grid;grid-template-columns:repeat(2,1fr);gap:10px}\n.stat{display:flex;flex-direction:column;gap:2px}\n.stat .k{color:var(--muted);font-size:12px}\n.stat .v{font-size:18px;font-weight:600}\n.good{color:var(--good)}\n.local{color:var(--local)}\n.frontier{color:var(--frontier)}\n.muted{color:var(--muted)}\ntable{width:100%;border-collapse:collapse;font-size:13px}\nth,td{text-align:left;padding:6px 8px;border-bottom:1px solid var(--line)}\nth{color:var(--muted);font-weight:600}\n.hash{font-family:ui-monospace,Consolas,monospace;color:var(--muted)}\n.progress{height:10px;background:#0b0d11;border-radius:6px;overflow:hidden;border:1px solid var(--line)}\n.progress .bar{height:100%;background:var(--good)}\nul.items,ul.timeline{list-style:none;margin:8px 0 0;padding:0;max-height:320px;overflow:auto}\nul.items li,ul.timeline li{padding:4px 0;border-bottom:1px solid var(--line)}\nul.items li.done{color:var(--muted)}\nul.items .box{font-family:monospace}\n.who{color:var(--local)}\n.tag{color:var(--frontier);font-size:12px}\n.kind{display:inline-block;min-width:66px;color:var(--muted);font-size:12px}\ncode{font-family:ui-monospace,Consolas,monospace;background:#0b0d11;padding:1px 5px;border-radius:4px}\n.mono{font-family:ui-monospace,Consolas,monospace;font-size:12px}\n.tabs{display:flex;gap:6px;padding:12px 24px 0;flex-wrap:wrap;border-bottom:1px solid var(--line)}\n.tabs .tab{background:var(--panel);color:var(--fg);border:1px solid var(--line);border-bottom:none;border-radius:8px 8px 0 0;padding:8px 14px;cursor:pointer;font:inherit;display:flex;align-items:center;gap:6px}\n.tabs .tab.active{background:var(--bg);border-color:var(--local);color:var(--fg)}\n.dot{width:8px;height:8px;border-radius:50%;display:inline-block;background:var(--muted)}\n.badge{font-size:11px;padding:1px 8px;border-radius:10px;border:1px solid var(--line);color:var(--muted);vertical-align:middle}\n.status-running{background:var(--good)}\n.badge.status-running{color:var(--good);border-color:var(--good)}\n.status-idle{background:var(--muted)}\n.badge.status-idle{color:var(--muted)}\n.status-waiting-input{background:var(--frontier)}\n.badge.status-waiting-input{color:var(--frontier);border-color:var(--frontier)}\n.status-ended{background:#6e7681}\n.badge.status-ended{color:#6e7681}\n.term .termlog{background:#0b0d11;border:1px solid var(--line);border-radius:8px;padding:10px;max-height:340px;overflow:auto;font-family:ui-monospace,Consolas,monospace;font-size:12px;white-space:pre-wrap}\n.term .tl{padding:1px 0}\n.term .tl.input{color:var(--local)}\n.term .tl.tool{color:var(--frontier)}\n.term .tl.status{color:var(--muted)}\n.term .tl.error{color:#f85149}\n.term .tl.permission{color:var(--frontier);font-weight:600}\n.term form.terminput{display:flex;gap:8px;margin-top:10px}\n.term form.terminput input{flex:1;background:#0b0d11;color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:8px 10px;font:inherit}\n.term form.terminput button{background:var(--local);color:#04122b;border:none;border-radius:8px;padding:8px 16px;cursor:pointer;font:inherit;font-weight:600}\n.pty .ptylog{background:#05070a;border:1px solid var(--line);border-radius:8px;padding:10px;max-height:340px;overflow:auto;font-family:ui-monospace,Consolas,monospace;font-size:12px;white-space:pre-wrap;color:#c8d1dc}\n.pty form.ptyinput{display:flex;gap:8px;margin-top:10px}\n.pty form.ptyinput input{flex:1;background:#05070a;color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:8px 10px;font:inherit}\n.pty form.ptyinput button,.pty .pty-start{background:var(--frontier);color:#1a1200;border:none;border-radius:8px;padding:8px 16px;cursor:pointer;font:inherit;font-weight:600;margin-top:8px}\n.pty .pty-start:disabled{opacity:.5;cursor:default}\n";
+export declare const CONSOLE_STYLE = "\n:root{color-scheme:dark;--bg:#0f1115;--panel:#171a21;--fg:#e6e8eb;--muted:#8b929c;--good:#3fb950;--local:#58a6ff;--frontier:#d29922;--line:#262b34}\n*{box-sizing:border-box}\nbody{margin:0;background:var(--bg);color:var(--fg);font:14px/1.5 ui-sans-serif,system-ui,Segoe UI,Roboto,sans-serif}\nheader{padding:16px 24px;border-bottom:1px solid var(--line);display:flex;justify-content:space-between;align-items:baseline;gap:12px;flex-wrap:wrap}\nheader h1{font-size:18px;margin:0}\nheader .meta{color:var(--muted);font-size:12px}\nmain{display:grid;grid-template-columns:repeat(auto-fit,minmax(320px,1fr));gap:16px;padding:24px}\n.panel{background:var(--panel);border:1px solid var(--line);border-radius:10px;padding:16px}\n.panel h2{font-size:14px;margin:0 0 12px;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}\n.grid{display:grid;grid-template-columns:repeat(2,1fr);gap:10px}\n.stat{display:flex;flex-direction:column;gap:2px}\n.stat .k{color:var(--muted);font-size:12px}\n.stat .v{font-size:18px;font-weight:600}\n.good{color:var(--good)}\n.local{color:var(--local)}\n.frontier{color:var(--frontier)}\n.muted{color:var(--muted)}\ntable{width:100%;border-collapse:collapse;font-size:13px}\nth,td{text-align:left;padding:6px 8px;border-bottom:1px solid var(--line)}\nth{color:var(--muted);font-weight:600}\n.hash{font-family:ui-monospace,Consolas,monospace;color:var(--muted)}\n.progress{height:10px;background:#0b0d11;border-radius:6px;overflow:hidden;border:1px solid var(--line)}\n.progress .bar{height:100%;background:var(--good)}\nul.items,ul.timeline{list-style:none;margin:8px 0 0;padding:0;max-height:320px;overflow:auto}\nul.items li,ul.timeline li{padding:4px 0;border-bottom:1px solid var(--line)}\nul.items li.done{color:var(--muted)}\nul.items .box{font-family:monospace}\n.who{color:var(--local)}\n.tag{color:var(--frontier);font-size:12px}\n.kind{display:inline-block;min-width:66px;color:var(--muted);font-size:12px}\ncode{font-family:ui-monospace,Consolas,monospace;background:#0b0d11;padding:1px 5px;border-radius:4px}\n.mono{font-family:ui-monospace,Consolas,monospace;font-size:12px}\n.tabs{display:flex;gap:6px;padding:12px 24px 0;flex-wrap:wrap;border-bottom:1px solid var(--line)}\n.tabs .tab{background:var(--panel);color:var(--fg);border:1px solid var(--line);border-bottom:none;border-radius:8px 8px 0 0;padding:8px 14px;cursor:pointer;font:inherit;display:flex;align-items:center;gap:6px}\n.tabs .tab.active{background:var(--bg);border-color:var(--local);color:var(--fg)}\n.dot{width:8px;height:8px;border-radius:50%;display:inline-block;background:var(--muted)}\n.badge{font-size:11px;padding:1px 8px;border-radius:10px;border:1px solid var(--line);color:var(--muted);vertical-align:middle}\n.status-running{background:var(--good)}\n.badge.status-running{color:var(--good);border-color:var(--good)}\n.status-idle{background:var(--muted)}\n.badge.status-idle{color:var(--muted)}\n.status-waiting-input{background:var(--frontier)}\n.badge.status-waiting-input{color:var(--frontier);border-color:var(--frontier)}\n.status-ended{background:#6e7681}\n.badge.status-ended{color:#6e7681}\n.term .termlog{background:#0b0d11;border:1px solid var(--line);border-radius:8px;padding:10px;max-height:340px;overflow:auto;font-family:ui-monospace,Consolas,monospace;font-size:12px;white-space:pre-wrap}\n.term .tl{padding:1px 0}\n.term .tl.input{color:var(--local)}\n.term .tl.tool{color:var(--frontier)}\n.term .tl.status{color:var(--muted)}\n.term .tl.error{color:#f85149}\n.term .tl.permission{color:var(--frontier);font-weight:600}\n.term form.terminput{display:flex;gap:8px;margin-top:10px}\n.term form.terminput input{flex:1;background:#0b0d11;color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:8px 10px;font:inherit}\n.term form.terminput button{background:var(--local);color:#04122b;border:none;border-radius:8px;padding:8px 16px;cursor:pointer;font:inherit;font-weight:600}\n.pty .ptylog{background:#05070a;border:1px solid var(--line);border-radius:8px;padding:10px;max-height:340px;overflow:auto;font-family:ui-monospace,Consolas,monospace;font-size:12px;white-space:pre-wrap;color:#c8d1dc}\n.pty form.ptyinput{display:flex;gap:8px;margin-top:10px}\n.pty form.ptyinput input{flex:1;background:#05070a;color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:8px 10px;font:inherit}\n.pty form.ptyinput button,.pty .pty-start{background:var(--frontier);color:#1a1200;border:none;border-radius:8px;padding:8px 16px;cursor:pointer;font:inherit;font-weight:600;margin-top:8px}\n.pty .pty-start:disabled{opacity:.5;cursor:default}\n.config-panel{grid-column:1/-1}\n.config-form{display:flex;flex-direction:column;gap:12px}\n.config-note{margin:0;font-size:12px;color:var(--muted)}\n.config-note.config-overlay{color:var(--frontier)}\n.reload-legend h3,.config-summary h4{font-size:12px;margin:0 0 6px;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}\n.reload-table{width:100%}\n.reload-table th{white-space:nowrap;vertical-align:top;width:1%}\n.reload-table th.reload-hot{color:var(--good)}\n.reload-table th.reload-restart{color:var(--frontier)}\n.config-label{font-size:12px;color:var(--muted)}\n.config-json{width:100%;min-height:280px;resize:vertical;background:#0b0d11;color:var(--fg);border:1px solid var(--line);border-radius:8px;padding:10px;font-family:ui-monospace,Consolas,monospace;font-size:12px;line-height:1.5}\n.config-actions{display:flex;gap:8px}\n.config-save{background:var(--good);color:#08110a;border:0;border-radius:8px;padding:8px 16px;font-weight:600;cursor:pointer}\n.config-save:disabled{opacity:.5;cursor:default}\n.config-result:empty{display:none}\n.config-summary{border:1px solid var(--line);border-radius:8px;padding:12px;margin-top:4px}\n.config-ok{margin:0 0 8px;color:var(--good);font-weight:600}\n.config-err{margin:0;color:var(--frontier);font-weight:600}\n.config-applied h4{color:var(--good)}\n.config-restart h4{color:var(--frontier)}\n.config-warn{margin:0 0 6px;color:var(--frontier);font-size:13px}\n.config-summary ul{margin:0;padding-left:18px}\n.config-summary li{padding:2px 0;border:0}\n";
 /**
  * Estilos del render del grafo de agentes (GE-083). Se inyectan en el `<style>`
  * **solo** cuando la vista del grafo está habilitada, de modo que con la vista
@@ -13,5 +13,5 @@ export declare const CONSOLE_STYLE = "\n:root{color-scheme:dark;--bg:#0f1115;--p
  * cancelación/veredicto/linaje/artefacto).
  */
 export declare const GRAPH_STYLE = "\n.graph-wrap{overflow:auto;background:#0b0d11;border:1px solid var(--line);border-radius:8px;padding:8px}\nsvg.graph{display:block}\n.gedge{stroke:#3a4250;stroke-width:1.5;marker-end:url(#garrow)}\n.gnode rect{fill:var(--panel);stroke:var(--line);stroke-width:1.5;rx:8}\n.gnode .gname{fill:var(--fg);font:600 12px ui-monospace,Consolas,monospace}\n.gnode .grole{fill:var(--muted);font-size:11px}\n.gnode .gstate{font-size:10px;text-transform:uppercase;letter-spacing:.05em}\n.gnode.state-pending rect{stroke:#6e7681}\n.gnode.state-pending .gstate{fill:#6e7681}\n.gnode.state-ready rect{stroke:var(--local)}\n.gnode.state-ready .gstate{fill:var(--local)}\n.gnode.state-active rect{stroke:var(--frontier)}\n.gnode.state-active .gstate{fill:var(--frontier)}\n.gnode.state-succeeded rect{stroke:var(--good)}\n.gnode.state-succeeded .gstate{fill:var(--good)}\n.gnode.state-failed rect{stroke:#f85149}\n.gnode.state-failed .gstate{fill:#f85149}\n.gnode.state-cancelled rect{stroke:#484f58}\n.gnode.state-cancelled .gstate{fill:#484f58}\n.gbadge{font-size:10px;font-family:ui-monospace,Consolas,monospace}\n.gbadge.badge-retry{fill:var(--frontier)}\n.gbadge.badge-error{fill:#f85149}\n.gbadge.badge-cancelled{fill:#484f58}\n.gbadge.badge-verdict.verdict-approved{fill:var(--good)}\n.gbadge.badge-verdict.verdict-rejected{fill:#f85149}\n.gbadge.badge-verdict.verdict-inconclusive{fill:var(--frontier)}\n.gbadge.badge-lineage{fill:var(--local)}\n.gbadge.badge-artifact{fill:var(--muted)}\n.gnode[data-session]{cursor:pointer}\n.gnode[data-session]:hover rect{stroke-width:2.5}\n.graph-health{display:flex;flex-wrap:wrap;gap:8px;margin:0 0 12px}\n.gchip{font-size:11px;padding:2px 10px;border-radius:10px;border:1px solid var(--line);color:var(--muted)}\n.gchip.on{font-weight:600}\n.gchip.gh-recovery.on,.gchip.gh-unknown.on{color:var(--frontier);border-color:var(--frontier)}\n.gchip.gh-conflict.on,.gchip.gh-kill.on{color:#f85149;border-color:#f85149}\n.graph-drill{margin-top:14px;border-top:1px solid var(--line);padding-top:12px}\n.graph-drill h3{font-size:13px;margin:0 0 8px;color:var(--muted);text-transform:uppercase;letter-spacing:.04em}\n.graph-drill .drilllog{background:#0b0d11;border:1px solid var(--line);border-radius:8px;padding:10px;max-height:280px;overflow:auto;font-family:ui-monospace,Consolas,monospace;font-size:12px;white-space:pre-wrap}\n.graph-drill .drilllog .tl{padding:1px 0}\n.graph-drill .drilllog .tl.tool{color:var(--frontier)}\n.graph-drill .drilllog .tl.status{color:var(--muted)}\n.graph-drill .drilllog .tl.permission{color:var(--frontier);font-weight:600}\n.graph-drill .drilllog .tl.error{color:#f85149}\n";
-export declare const CONSOLE_CLIENT_JS = "\n(function(){\n  var authTok='';\n  try{\n    var qp=new URLSearchParams(window.location.search).get('token');\n    if(qp){authTok='?token='+encodeURIComponent(qp)}\n  }catch(e){/* ignore */}\n  function reloadIfChanged(prev){\n    fetch('/api/state'+authTok).then(function(r){return r.json()}).then(function(s){\n      if(s.generatedAt!==prev){location.reload()}\n    }).catch(function(){});\n  }\n  var current=document.documentElement.getAttribute('data-generated')||'';\n  if('EventSource' in window){\n    try{\n      var es=new EventSource('/events'+authTok);\n      es.addEventListener('state',function(){location.reload()});\n      es.onerror=function(){/* fallback below */};\n    }catch(e){/* ignore */}\n  }\n  var ms=parseInt(document.documentElement.getAttribute('data-refresh')||'2000',10);\n  setInterval(function(){reloadIfChanged(current)},isNaN(ms)?2000:Math.max(250,ms));\n\n  function selectTab(name){\n    var tabs=document.querySelectorAll('#tabbar .tab');\n    for(var i=0;i<tabs.length;i++){tabs[i].classList.toggle('active',tabs[i].getAttribute('data-tab')===name)}\n    var views=document.querySelectorAll('main .view');\n    var matched=false;\n    for(var j=0;j<views.length;j++){\n      var show=views[j].getAttribute('data-view')===name;\n      views[j].hidden=!show;\n      if(show){matched=true;if(name!=='all'){connectTerminal(views[j],name)}}\n    }\n    if(!matched){return false}\n    try{sessionStorage.setItem('openteam.tab',name)}catch(e){}\n    return true;\n  }\n  function connectTerminal(view,id){\n    if(view.__wired){return}\n    var root=document.documentElement;\n    var token=root.getAttribute('data-token');\n    if(root.getAttribute('data-terminal')!=='1'||!token){return}\n    var log=view.querySelector('.termlog');\n    if(!log){return}\n    view.__wired=true;\n    function append(cls,text){\n      var line=document.createElement('div');\n      line.className='tl '+cls;line.textContent=text;\n      log.appendChild(line);log.scrollTop=log.scrollHeight;\n    }\n    var q='/console/session/'+encodeURIComponent(id);\n    var tk='token='+encodeURIComponent(token);\n    if('EventSource' in window){\n      try{\n        var es=new EventSource(q+'/stream?'+tk);\n        es.addEventListener('frame',function(e){try{var f=JSON.parse(e.data);append(f.kind,f.text)}catch(_){}}); \n        es.onerror=function(){/* reconecta solo */};\n      }catch(_){/* ignore */}\n    }\n    var form=view.querySelector('form.terminput');\n    if(form){\n      form.addEventListener('submit',function(e){\n        e.preventDefault();\n        var inp=form.querySelector('input[name=text]');\n        var text=inp.value;\n        if(!text){return}\n        inp.value='';append('input','\u203A '+text);\n        fetch(q+'/input?'+tk,{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({text:text})})\n          .then(function(r){if(!r.ok){append('error','\u2716 env\u00EDo rechazado ('+r.status+')')}})\n          .catch(function(){append('error','\u2716 no se pudo enviar')});\n      });\n    }\n    connectPty(view,id,q,tk);\n  }\n  function connectPty(view,id,q,tk){\n    var root=document.documentElement;\n    if(root.getAttribute('data-pty')!=='1'){return}\n    var pane=view.querySelector('.pty');\n    if(!pane){return}\n    var log=pane.querySelector('.ptylog');\n    var startBtn=pane.querySelector('.pty-start');\n    var input=pane.querySelector('form.ptyinput');\n    function plog(text){\n      var d=document.createElement('span');d.textContent=text;\n      log.appendChild(d);log.scrollTop=log.scrollHeight;\n    }\n    if(!startBtn){return}\n    startBtn.addEventListener('click',function(){\n      startBtn.disabled=true;plog('Abriendo shell\u2026\n');\n      fetch(q+'/pty?'+tk,{method:'POST',headers:{'content-type':'application/json'},body:'{}'})\n        .then(function(r){return r.ok?r.json():Promise.reject(r.status)})\n        .then(function(info){openPtyWs(info.wsUrl)})\n        .catch(function(s){plog('\u2716 no se pudo abrir PTY ('+s+')\n');startBtn.disabled=false});\n    });\n    function openPtyWs(url){\n      try{\n        var ws=new WebSocket(url);\n        ws.binaryType='arraybuffer';\n        ws.onmessage=function(e){\n          var data=e.data;\n          if(data instanceof ArrayBuffer){data=new TextDecoder().decode(new Uint8Array(data))}\n          plog(data);\n        };\n        ws.onclose=function(){plog('\n[shell cerrada]\n');startBtn.disabled=false};\n        ws.onerror=function(){plog('\n\u2716 error de WebSocket\n')};\n        if(input){\n          input.hidden=false;\n          input.addEventListener('submit',function(e){\n            e.preventDefault();\n            var c=input.querySelector('input[name=cmd]');\n            if(!c.value){return}\n            ws.send(c.value+'\r');c.value='';\n          });\n        }\n      }catch(_){plog('\n\u2716 WebSocket no disponible\n');startBtn.disabled=false}\n    }\n  }\n  function wireGraphDrill(){\n    var root=document.documentElement;\n    if(root.getAttribute('data-drilldown')!=='1'){return}\n    var token=root.getAttribute('data-token');\n    if(!token){return}\n    var drill=document.querySelector('.graph-drill');\n    if(!drill){return}\n    var gview=drill.closest('.view');\n    if(!gview){return}\n    var log=drill.querySelector('.drilllog');\n    var title=drill.querySelector('.drill-title');\n    if(!log){return}\n    var es=null;\n    function append(cls,text){\n      var line=document.createElement('div');\n      line.className='tl '+cls;line.textContent=text;\n      log.appendChild(line);log.scrollTop=log.scrollHeight;\n    }\n    function open(id){\n      if(es){try{es.close()}catch(_){}}\n      log.textContent='';drill.hidden=false;\n      if(title){title.textContent='Conversaci\u00F3n \u00B7 '+id}\n      var tk='token='+encodeURIComponent(token);\n      var base='/console/session/'+encodeURIComponent(id);\n      fetch(base+'/messages?'+tk).then(function(r){return r.ok?r.json():Promise.reject(r.status)})\n        .then(function(d){(d&&d.frames||[]).forEach(function(f){append(f.kind,f.text)})})\n        .catch(function(s){append('error','\u2716 no se pudo cargar la conversaci\u00F3n ('+s+')')});\n      if('EventSource' in window){\n        try{\n          es=new EventSource(base+'/stream?'+tk);\n          es.addEventListener('frame',function(e){try{var f=JSON.parse(e.data);append(f.kind,f.text)}catch(_){}}); \n          es.onerror=function(){/* reconecta solo */};\n        }catch(_){/* ignore */}\n      }\n    }\n    gview.addEventListener('click',function(e){\n      var t=e.target;\n      while(t&&t!==gview&&!(t.getAttribute&&t.getAttribute('data-session'))){t=t.parentNode}\n      if(t&&t.getAttribute&&t.getAttribute('data-session')){open(t.getAttribute('data-session'))}\n    });\n  }\n  var bar=document.getElementById('tabbar');\n  if(bar){\n    bar.addEventListener('click',function(e){\n      var t=e.target;\n      while(t&&t!==bar&&!t.getAttribute('data-tab')){t=t.parentNode}\n      if(t&&t.getAttribute('data-tab')){selectTab(t.getAttribute('data-tab'))}\n    });\n  }\n  var saved='all';\n  try{saved=sessionStorage.getItem('openteam.tab')||'all'}catch(e){}\n  if(!selectTab(saved)){selectTab('all')}\n  wireGraphDrill();\n})();\n";
+export declare const CONSOLE_CLIENT_JS = "\n(function(){\n  var authTok='';\n  try{\n    var qp=new URLSearchParams(window.location.search).get('token');\n    if(qp){authTok='?token='+encodeURIComponent(qp)}\n  }catch(e){/* ignore */}\n  function reloadIfChanged(prev){\n    fetch('/api/state'+authTok).then(function(r){return r.json()}).then(function(s){\n      if(s.generatedAt!==prev&&!configActive()){location.reload()}\n    }).catch(function(){});\n  }\n  var current=document.documentElement.getAttribute('data-generated')||'';\n  if('EventSource' in window){\n    try{\n      var es=new EventSource('/events'+authTok);\n      es.addEventListener('state',function(){if(!configActive()){location.reload()}});\n      es.onerror=function(){/* fallback below */};\n    }catch(e){/* ignore */}\n  }\n  var ms=parseInt(document.documentElement.getAttribute('data-refresh')||'2000',10);\n  setInterval(function(){reloadIfChanged(current)},isNaN(ms)?2000:Math.max(250,ms));\n\n  function selectTab(name){\n    var tabs=document.querySelectorAll('#tabbar .tab');\n    for(var i=0;i<tabs.length;i++){tabs[i].classList.toggle('active',tabs[i].getAttribute('data-tab')===name)}\n    var views=document.querySelectorAll('main .view');\n    var matched=false;\n    for(var j=0;j<views.length;j++){\n      var show=views[j].getAttribute('data-view')===name;\n      views[j].hidden=!show;\n      if(show){matched=true;if(name==='config'){loadConfig(views[j])}else if(name!=='all'){connectTerminal(views[j],name)}}\n    }\n    if(!matched){return false}\n    try{sessionStorage.setItem('openteam.tab',name)}catch(e){}\n    return true;\n  }\n  function configActive(){\n    var v=document.querySelector('main .view[data-view=\"config\"]');\n    return !!(v&&!v.hidden);\n  }\n  function esc(s){return String(s).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;')}\n  // Config editor (W7-S09 / #193). The config values travel only over the\n  // token-gated /api/config, never in this open page, so the browser fetches\n  // the server-rendered form with the bearer token and injects it. The\n  // applied/pending-restart summary is likewise server-rendered and injected\n  // verbatim, so the P14 honesty is enforced server-side, not here.\n  function loadConfig(view){\n    var root=document.documentElement;\n    if(root.getAttribute('data-config')!=='1'||view.__configWired){return}\n    var mount=view.querySelector('[data-config-mount]');\n    if(!mount){return}\n    var token=root.getAttribute('data-token');\n    if(!token){mount.innerHTML='<p class=\"muted\">Read-only: no console token present.</p>';return}\n    view.__configWired=true;\n    fetch('/api/config',{headers:{Authorization:'Bearer '+token}})\n      .then(function(r){return r.json()})\n      .then(function(d){\n        mount.innerHTML=d.render||'<p class=\"config-err\">Could not load configuration.</p>';\n        wireConfigForm(mount,token);\n      })\n      .catch(function(){view.__configWired=false;mount.innerHTML='<p class=\"config-err\">Could not load configuration.</p>'});\n  }\n  function wireConfigForm(mount,token){\n    var form=mount.querySelector('[data-config-form]');\n    if(!form){return}\n    var out=form.querySelector('[data-config-result]');\n    form.addEventListener('submit',function(e){\n      e.preventDefault();\n      var ta=form.querySelector('textarea[name=\"config\"]');\n      var parsed;\n      try{parsed=JSON.parse(ta.value)}catch(err){out.innerHTML='<div class=\"config-summary\"><p class=\"config-err\">Invalid JSON: '+esc(err.message||err)+'</p></div>';return}\n      var btn=form.querySelector('.config-save');\n      if(btn){btn.disabled=true}\n      fetch('/api/config',{method:'POST',headers:{Authorization:'Bearer '+token,'content-type':'application/json'},body:JSON.stringify(parsed)})\n        .then(function(r){return r.json().then(function(b){return{status:r.status,body:b}})})\n        .then(function(res){\n          if(btn){btn.disabled=false}\n          if(res.status===200){out.innerHTML=res.body.render||''}\n          else{out.innerHTML='<div class=\"config-summary\"><p class=\"config-err\">'+esc(res.body&&res.body.error?res.body.error:'Save failed.')+'</p></div>'}\n        })\n        .catch(function(){if(btn){btn.disabled=false}out.innerHTML='<div class=\"config-summary\"><p class=\"config-err\">Save failed.</p></div>'});\n    });\n  }\n  function connectTerminal(view,id){\n    if(view.__wired){return}\n    var root=document.documentElement;\n    var token=root.getAttribute('data-token');\n    if(root.getAttribute('data-terminal')!=='1'||!token){return}\n    var log=view.querySelector('.termlog');\n    if(!log){return}\n    view.__wired=true;\n    function append(cls,text){\n      var line=document.createElement('div');\n      line.className='tl '+cls;line.textContent=text;\n      log.appendChild(line);log.scrollTop=log.scrollHeight;\n    }\n    var q='/console/session/'+encodeURIComponent(id);\n    var tk='token='+encodeURIComponent(token);\n    if('EventSource' in window){\n      try{\n        var es=new EventSource(q+'/stream?'+tk);\n        es.addEventListener('frame',function(e){try{var f=JSON.parse(e.data);append(f.kind,f.text)}catch(_){}}); \n        es.onerror=function(){/* reconnects on its own */};\n      }catch(_){/* ignore */}\n    }\n    var form=view.querySelector('form.terminput');\n    if(form){\n      form.addEventListener('submit',function(e){\n        e.preventDefault();\n        var inp=form.querySelector('input[name=text]');\n        var text=inp.value;\n        if(!text){return}\n        inp.value='';append('input','\u203A '+text);\n        fetch(q+'/input?'+tk,{method:'POST',headers:{'content-type':'application/json'},body:JSON.stringify({text:text})})\n          .then(function(r){if(!r.ok){append('error','\u2716 send rejected ('+r.status+')')}})\n          .catch(function(){append('error','\u2716 could not send')});\n      });\n    }\n    connectPty(view,id,q,tk);\n  }\n  function connectPty(view,id,q,tk){\n    var root=document.documentElement;\n    if(root.getAttribute('data-pty')!=='1'){return}\n    var pane=view.querySelector('.pty');\n    if(!pane){return}\n    var log=pane.querySelector('.ptylog');\n    var startBtn=pane.querySelector('.pty-start');\n    var input=pane.querySelector('form.ptyinput');\n    function plog(text){\n      var d=document.createElement('span');d.textContent=text;\n      log.appendChild(d);log.scrollTop=log.scrollHeight;\n    }\n    if(!startBtn){return}\n    startBtn.addEventListener('click',function(){\n      startBtn.disabled=true;plog('Opening shell\u2026\n');\n      fetch(q+'/pty?'+tk,{method:'POST',headers:{'content-type':'application/json'},body:'{}'})\n        .then(function(r){return r.ok?r.json():Promise.reject(r.status)})\n        .then(function(info){openPtyWs(info.wsUrl)})\n        .catch(function(s){plog('\u2716 could not open PTY ('+s+')\n');startBtn.disabled=false});\n    });\n    function openPtyWs(url){\n      try{\n        var ws=new WebSocket(url);\n        ws.binaryType='arraybuffer';\n        ws.onmessage=function(e){\n          var data=e.data;\n          if(data instanceof ArrayBuffer){data=new TextDecoder().decode(new Uint8Array(data))}\n          plog(data);\n        };\n        ws.onclose=function(){plog('\n[shell closed]\n');startBtn.disabled=false};\n        ws.onerror=function(){plog('\n\u2716 WebSocket error\n')};\n        if(input){\n          input.hidden=false;\n          input.addEventListener('submit',function(e){\n            e.preventDefault();\n            var c=input.querySelector('input[name=cmd]');\n            if(!c.value){return}\n            ws.send(c.value+'\r');c.value='';\n          });\n        }\n      }catch(_){plog('\n\u2716 WebSocket unavailable\n');startBtn.disabled=false}\n    }\n  }\n  function wireGraphDrill(){\n    var root=document.documentElement;\n    if(root.getAttribute('data-drilldown')!=='1'){return}\n    var token=root.getAttribute('data-token');\n    if(!token){return}\n    var drill=document.querySelector('.graph-drill');\n    if(!drill){return}\n    var gview=drill.closest('.view');\n    if(!gview){return}\n    var log=drill.querySelector('.drilllog');\n    var title=drill.querySelector('.drill-title');\n    if(!log){return}\n    var es=null;\n    function append(cls,text){\n      var line=document.createElement('div');\n      line.className='tl '+cls;line.textContent=text;\n      log.appendChild(line);log.scrollTop=log.scrollHeight;\n    }\n    function open(id){\n      if(es){try{es.close()}catch(_){}}\n      log.textContent='';drill.hidden=false;\n      if(title){title.textContent='Conversation \u00B7 '+id}\n      var tk='token='+encodeURIComponent(token);\n      var base='/console/session/'+encodeURIComponent(id);\n      fetch(base+'/messages?'+tk).then(function(r){return r.ok?r.json():Promise.reject(r.status)})\n        .then(function(d){(d&&d.frames||[]).forEach(function(f){append(f.kind,f.text)})})\n        .catch(function(s){append('error','\u2716 could not load conversation ('+s+')')});\n      if('EventSource' in window){\n        try{\n          es=new EventSource(base+'/stream?'+tk);\n          es.addEventListener('frame',function(e){try{var f=JSON.parse(e.data);append(f.kind,f.text)}catch(_){}}); \n          es.onerror=function(){/* reconnects on its own */};\n        }catch(_){/* ignore */}\n      }\n    }\n    gview.addEventListener('click',function(e){\n      var t=e.target;\n      while(t&&t!==gview&&!(t.getAttribute&&t.getAttribute('data-session'))){t=t.parentNode}\n      if(t&&t.getAttribute&&t.getAttribute('data-session')){open(t.getAttribute('data-session'))}\n    });\n  }\n  var bar=document.getElementById('tabbar');\n  if(bar){\n    bar.addEventListener('click',function(e){\n      var t=e.target;\n      while(t&&t!==bar&&!t.getAttribute('data-tab')){t=t.parentNode}\n      if(t&&t.getAttribute('data-tab')){selectTab(t.getAttribute('data-tab'))}\n    });\n  }\n  var saved='all';\n  try{saved=sessionStorage.getItem('openteam.tab')||'all'}catch(e){}\n  if(!selectTab(saved)){selectTab('all')}\n  wireGraphDrill();\n})();\n";
 //# sourceMappingURL=assets.d.ts.map

package/dist/console/assets.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/console/assets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,aAAa,igJA6DzB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,klFA4CvB,CAAC;AAEF,eAAO,MAAM,iBAAiB,kmOA2K7B,CAAC"}
+{"version":3,"file":"assets.d.ts","sourceRoot":"","sources":["../../src/console/assets.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,aAAa,k/LAoFzB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,klFA4CvB,CAAC;AAEF,eAAO,MAAM,iBAAiB,61TA0N7B,CAAC"}

package/dist/console/configView.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Pure, deterministic renderers for the console config editor UI (W7-S09 / #193,
+ * Gap 2). No I/O, clock, or randomness: every function maps data to an HTML
+ * string so the P14 "applied vs pending-restart" surfacing is unit-testable and
+ * mutation-provable under Node without a DOM.
+ *
+ * Layering: the source of truth for the reload classification lives server-side
+ * in `web/configApi.ts` (`HOT_RELOADABLE_KEYS` / `RESTART_REQUIRED_KEYS` and the
+ * `applied` / `pendingRestart` split of a write). These renderers are dumb
+ * presenters of that server-provided data — they never re-derive the
+ * classification, so the client can never invent a distinction the server did
+ * not compute.
+ *
+ * The types below mirror `ConfigReadResult` and the success body of
+ * `ConfigWriteResult` structurally (kept local to avoid a `console -> web`
+ * import cycle); TypeScript structural typing keeps them compatible.
+ */
+export type ConfigReadView = {
+    readonly config: unknown;
+    readonly reload: {
+        readonly hotReloadable: readonly string[];
+        readonly restartRequired: readonly string[];
+    };
+    readonly overlay: {
+        readonly active: boolean;
+        readonly machineSpecificKeys: readonly string[];
+    };
+    readonly secrets: readonly {
+        readonly key: string;
+        readonly source: string;
+        readonly set: boolean;
+    }[];
+};
+export type ConfigWriteView = {
+    readonly changed: readonly string[];
+    readonly applied: readonly string[];
+    readonly pendingRestart: readonly string[];
+    readonly wroteBase: boolean;
+    readonly wroteOverlay: boolean;
+};
+/**
+ * The pre-save reload legend, built from the read result's `reload` arrays. It
+ * tells the operator, before they save, which keys apply live and which need a
+ * restart — the same classification the post-save summary uses.
+ */
+export declare function renderConfigReloadTable(read: ConfigReadView): string;
+/**
+ * The editable form fragment served (token-gated) by `GET /api/config`. Renders
+ * only the `openteam-config` surface (#200): the whole scrubbed config object in
+ * a JSON textarea, with reload/overlay/secret guidance. No systemPrompt/harness/
+ * skills sub-tab — those have no openteam representation. The config is already
+ * secret-scrubbed by the read side, so no secret value reaches this markup.
+ */
+export declare function renderConfigEditorForm(read: ConfigReadView): string;
+/**
+ * The post-save summary served by `POST /api/config` (the P14 core). Renders
+ * `applied` and `pendingRestart` in two visibly distinct sections with distinct
+ * wording, so a key that requires a restart says so plainly at the moment of
+ * saving and the UI can never report a silent no-op. Breaking the server's
+ * applied/pending-restart split (or this rendering) turns the surfacing test
+ * red.
+ */
+export declare function renderConfigSaveSummary(write: ConfigWriteView): string;
+/**
+ * The config view shell embedded in the open `/` page. It carries NO config
+ * values (those travel only over the token-gated `/api/config`, preserving the
+ * auth posture): when a token is present the client fetches and mounts the form
+ * here; without a token the view is honestly read-only rather than a form that
+ * would 401.
+ */
+export declare function renderConfigView(opts: {
+    hasToken: boolean;
+}): string;
+//# sourceMappingURL=configView.d.ts.map

package/dist/console/configView.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"configView.d.ts","sourceRoot":"","sources":["../../src/console/configView.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,MAAM,cAAc,GAAG;IAC3B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE;QACf,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;QAC1C,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;KAC7C,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;QACzB,QAAQ,CAAC,mBAAmB,EAAE,SAAS,MAAM,EAAE,CAAC;KACjD,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,SAAS;QACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;KACvB,EAAE,CAAC;CACL,CAAC;AAEF,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC;CAChC,CAAC;AAQF;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CAkBpE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,cAAc,GAAG,MAAM,CA0BnE;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAkCtE;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE;IAAE,QAAQ,EAAE,OAAO,CAAA;CAAE,GAAG,MAAM,CAepE"}

package/dist/console/opencodeClient.d.ts

@@ -1,4 +1,4 @@
-import { type SessionFrame } from "./protocol";
+import { type FrameRenderOptions, type SessionFrame } from "./protocol";
 import { type SseMessage } from "./sse";
 /**
  * Adaptador **impuro** al servidor opencode para la vista "Sesión" de la Console.
@@ -21,16 +21,18 @@ export type ConsoleClient = {
     /**
      * Lee el histórico de la conversación de una sesión vía `session.messages`
      * (GET **de solo lectura**) para el drill-down del grafo (GE-084). Devuelve
-     * frames reference-only; nunca persiste ni registra el contenido.
+     * frames reference-only; nunca persiste ni registra el contenido. El texto va
+     * redactado salvo que el operador active el modo diagnóstico local (`options`).
      */
-    listMessages: (sessionID: string) => Promise<SessionFrame[]>;
+    listMessages: (sessionID: string, options?: FrameRenderOptions) => Promise<SessionFrame[]>;
     /**
      * Suscribe a los eventos de la sesión y llama `onFrame` por cada frame legible.
-     * Se detiene cuando `signal` aborta o el stream termina.
+     * Se detiene cuando `signal` aborta o el stream termina. El texto va redactado
+     * salvo que el operador active el modo diagnóstico local (`options`).
      */
-    streamFrames: (sessionID: string, onFrame: (frame: SessionFrame) => void, signal: AbortSignal) => Promise<void>;
+    streamFrames: (sessionID: string, onFrame: (frame: SessionFrame) => void, signal: AbortSignal, options?: FrameRenderOptions) => Promise<void>;
 };
 /** Traduce un mensaje SSE de opencode a un frame de sesión, si aplica. Pure-ish. */
-export declare function messageToFrame(message: SseMessage, sessionID: string): SessionFrame | undefined;
+export declare function messageToFrame(message: SseMessage, sessionID: string, options?: FrameRenderOptions): SessionFrame | undefined;
 export declare function createConsoleClient(deps: ConsoleClientDeps): ConsoleClient;
 //# sourceMappingURL=opencodeClient.d.ts.map

package/dist/console/opencodeClient.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencodeClient.d.ts","sourceRoot":"","sources":["../../src/console/opencodeClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAEjE;;;;GAIG;AAEH,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,iFAAiF;IACjF,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,2CAA2C;IAC3C,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;OAIG;IACH,YAAY,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7D;;;OAGG;IACH,YAAY,EAAE,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACtC,MAAM,EAAE,WAAW,KAChB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAgBF,oFAAoF;AACpF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,GAChB,YAAY,GAAG,SAAS,CAK1B;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CA+E1E"}
+{"version":3,"file":"opencodeClient.d.ts","sourceRoot":"","sources":["../../src/console/opencodeClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EAGvB,KAAK,YAAY,EAClB,MAAM,YAAY,CAAC;AACpB,OAAO,EAA2B,KAAK,UAAU,EAAE,MAAM,OAAO,CAAC;AAEjE;;;;GAIG;AAEH,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAErC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,oEAAoE;IACpE,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,iFAAiF;IACjF,UAAU,EAAE,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IAC/D,2CAA2C;IAC3C,iBAAiB,EAAE,CACjB,SAAS,EAAE,MAAM,EACjB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,KACnC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB;;;;;OAKG;IACH,YAAY,EAAE,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IAC7B;;;;OAIG;IACH,YAAY,EAAE,CACZ,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,CAAC,KAAK,EAAE,YAAY,KAAK,IAAI,EACtC,MAAM,EAAE,WAAW,EACnB,OAAO,CAAC,EAAE,kBAAkB,KACzB,OAAO,CAAC,IAAI,CAAC,CAAC;CACpB,CAAC;AAgBF,oFAAoF;AACpF,wBAAgB,cAAc,CAC5B,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,kBAAuB,GAC/B,YAAY,GAAG,SAAS,CAK1B;AAED,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,aAAa,CA+E1E"}

package/dist/console/protocol.d.ts

@@ -5,11 +5,27 @@ import { z } from "zod";
  * Sin I/O, red, reloj ni random: el driver (`web/console.ts`) aporta el
  * transporte. Determinista.
  */
+/**
+ * Opt-in **local-only diagnostic mode** (P11b). Off by default: text parts are
+ * redacted to a reference (hash + char count) so the pure-loopback console never
+ * streams verbatim prompt/model text to the browser (fixes the live half of
+ * #156). The operator can flip `diagnostic` on to inspect raw content locally.
+ */
+export type FrameRenderOptions = {
+    diagnostic?: boolean;
+};
+/**
+ * Redacts a text part to a **reference-only** marker: a stable correlation hash
+ * plus the character count, never the content. Mirrors the "hash + char count,
+ * never raw prompt text" promise the rest of the product keeps in telemetry.
+ * Pure and deterministic.
+ */
+export declare function redactFrameText(text: string): string;
 /** Límite defensivo del prompt enviado por la Console (evita payloads enormes). */
 export declare const MAX_INPUT_CHARS = 100000;
 export declare const SessionInputSchema: z.ZodObject<{
     text: z.ZodString;
-}, z.core.$strip>;
+}, z.core.$strict>;
 export type SessionInput = z.infer<typeof SessionInputSchema>;
 /** Parsea/valida el cuerpo de `POST .../input`. Devuelve `undefined` si inválido. */
 export declare function parseSessionInput(raw: unknown): SessionInput | undefined;
@@ -20,6 +36,12 @@ export type SessionFrame = {
     text: string;
     /** Presente solo en frames `permission`, para poder responder. */
     permissionID?: string;
+    /**
+     * `true` cuando `text` es una **referencia redactada** (hash + nº de chars) en
+     * lugar del contenido crudo. Permite al cliente marcarlo en la UI. Solo se
+     * omite cuando el modo diagnóstico local está activo.
+     */
+    redacted?: boolean;
 };
 /** Forma laxa de un evento del servidor opencode (`{type, properties}`). */
 export type OpencodeEventLike = {
@@ -35,16 +57,18 @@ export declare function eventSessionID(event: OpencodeEventLike): string | undef
  * Traduce la respuesta de `session.messages` (histórico de la conversación) a
  * frames legibles para el drill-down **de solo lectura** (GE-084). Acepta la
  * forma laxa `{ info?, parts? }[]`, descarta entradas de otra sesión y traduce
- * cada `part` con `partToFrame`. Nunca incluye argumentos de tool ni secretos.
- * Determinista y sin I/O: el driver (`console/opencodeClient.ts`) aporta la red.
+ * cada `part` con `partToFrame`. El texto va redactado salvo modo diagnóstico
+ * local. Nunca incluye argumentos de tool ni secretos. Determinista y sin I/O:
+ * el driver (`console/opencodeClient.ts`) aporta la red.
  */
-export declare function messagesToFrames(raw: unknown, sessionID: string): SessionFrame[];
+export declare function messagesToFrames(raw: unknown, sessionID: string, options?: FrameRenderOptions): SessionFrame[];
 /**
  * Traduce un evento opencode a un frame de sesión legible, **solo** si pertenece
  * a `sessionID`. Devuelve `undefined` para eventos irrelevantes o de otra sesión.
- * Nunca incluye argumentos de tool ni secretos. Determinista. Pure.
+ * El texto va redactado salvo modo diagnóstico local. Nunca incluye argumentos de
+ * tool ni secretos. Determinista. Pure.
  */
-export declare function eventToSessionFrame(event: OpencodeEventLike, sessionID: string): SessionFrame | undefined;
+export declare function eventToSessionFrame(event: OpencodeEventLike, sessionID: string, options?: FrameRenderOptions): SessionFrame | undefined;
 /** Serializa un frame como línea SSE (`event: frame`). Pure. */
 export declare function frameToSse(frame: SessionFrame): string;
 //# sourceMappingURL=protocol.d.ts.map

package/dist/console/protocol.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/console/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;GAKG;AAEH,mFAAmF;AACnF,eAAO,MAAM,eAAe,SAAU,CAAC;AAEvC,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AAEH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,GAAG,SAAS,CAGxE;AAED,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,OAAO,CAAC;AAEZ,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAYF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAU3E;AAoBD;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,GAChB,YAAY,EAAE,CA+BhB;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,EACxB,SAAS,EAAE,MAAM,GAChB,YAAY,GAAG,SAAS,CA6B1B;AAED,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAEtD"}
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/console/protocol.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAKxB;;;;;GAKG;AAEH;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAAG;IAC/B,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEpD;AAED,mFAAmF;AACnF,eAAO,MAAM,eAAe,SAAU,CAAC;AAEvC,eAAO,MAAM,kBAAkB;;kBAIpB,CAAC;AAEZ,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,qFAAqF;AACrF,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,YAAY,GAAG,SAAS,CAGxE;AAED,MAAM,MAAM,gBAAgB,GACxB,MAAM,GACN,MAAM,GACN,QAAQ,GACR,YAAY,GACZ,OAAO,CAAC;AAEZ,wEAAwE;AACxE,MAAM,MAAM,YAAY,GAAG;IACzB,IAAI,EAAE,gBAAgB,CAAC;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;OAIG;IACH,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF,4EAA4E;AAC5E,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB,CAAC;AAYF;;;GAGG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,iBAAiB,GAAG,MAAM,GAAG,SAAS,CAU3E;AA8BD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,kBAAuB,GAC/B,YAAY,EAAE,CA+BhB;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,KAAK,EAAE,iBAAiB,EACxB,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,kBAAuB,GAC/B,YAAY,GAAG,SAAS,CAsC1B;AAED,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,KAAK,EAAE,YAAY,GAAG,MAAM,CAEtD"}

package/dist/console/render.d.ts

@@ -8,8 +8,14 @@ export declare function escapeHtml(value: string): string;
  * badges de intento/error/timeout/cancelación/veredicto/linaje. Escapa todo
  * identificador; **nunca** incluye contenido crudo. Puro: mismas entradas ->
  * misma salida.
+ *
+ * Con `options.disabled` (la vista del grafo está apagada por `graph.mode`), no
+ * pinta el DAG: devuelve una **guía de remediación** que nombra la clave de
+ * config a cambiar. Determinista.
  */
-export declare function renderGraphView(projection: GraphViewProjectionV1 | null): string;
+export declare function renderGraphView(projection: GraphViewProjectionV1 | null, options?: {
+    disabled?: boolean;
+}): string;
 export type RenderOptions = {
     /** Fallback de polling en ms (default 2000). */
     refreshMs?: number;
@@ -27,6 +33,12 @@ export type RenderOptions = {
      */
     graphView?: {
         readonly projection: GraphViewProjectionV1 | null;
+        /**
+         * `true` cuando la vista del grafo está apagada por config (`graph.mode` en
+         * `off`): en vez del DAG se pinta una guía de remediación. Opt-in; sin él la
+         * vista se comporta como GE-083.
+         */
+        readonly disabled?: boolean;
     };
     /**
      * Habilita el drill-down nodo->conversación de solo lectura (GE-084). Solo
@@ -35,6 +47,23 @@ export type RenderOptions = {
      * es idéntica a GE-083.
      */
     drilldownEnabled?: boolean;
+    /**
+     * `true` cuando el operador habilitó el **modo diagnóstico local** (P11b): la
+     * Console puede servir texto verbatim en el drill-down. Pinta una banda de
+     * aviso visible. Off por defecto: sin él la salida es byte-idéntica a hoy.
+     */
+    diagnosticActive?: boolean;
+    /**
+     * Config editor surface (W7-S09 / #193, Gap 2). Opt-in: when present, the
+     * "Configuration" tab and view are mounted and the client is handed the
+     * console token via `data-config`/`data-token` so it can fetch and save
+     * against the token-gated `/api/config`. `hasToken` is `false` only in the
+     * degenerate case where the editor is mounted without a token, which renders
+     * an honest read-only view instead of a form that would 401.
+     */
+    configEditor?: {
+        readonly hasToken: boolean;
+    };
 };
 /**
  * Renderiza el console como un único HTML autocontenido (CSS + JS inline, sin

package/dist/console/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/console/render.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAGV,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,OAAO,KAAK,EAGV,YAAY,EAIb,MAAM,SAAS,CAAC;AASjB,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AAyhBD;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,qBAAqB,GAAG,IAAI,GACvC,MAAM,CAwBR;AAwED,MAAM,MAAM,aAAa,GAAG;IAC1B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;KACnD,CAAC;IACF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,aAAkB,GAC1B,MAAM,CAyDR"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../../src/console/render.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAGV,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAIhC,OAAO,KAAK,EAGV,YAAY,EAIb,MAAM,SAAS,CAAC;AASjB,mFAAmF;AACnF,wBAAgB,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAOhD;AA6hBD;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,UAAU,EAAE,qBAAqB,GAAG,IAAI,EACxC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;CAAO,GACnC,MAAM,CA2BR;AAyFD,MAAM,MAAM,aAAa,GAAG;IAC1B,gDAAgD;IAChD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB;;;;;OAKG;IACH,SAAS,CAAC,EAAE;QACV,QAAQ,CAAC,UAAU,EAAE,qBAAqB,GAAG,IAAI,CAAC;QAClD;;;;WAIG;QACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;KAC7B,CAAC;IACF;;;;;OAKG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;OAIG;IACH,gBAAgB,CAAC,EAAE,OAAO,CAAC;IAC3B;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CAC/C,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,YAAY,EACnB,OAAO,GAAE,aAAkB,GAC1B,MAAM,CAqER"}

package/dist/console/types.d.ts

@@ -45,7 +45,7 @@ export type ConsoleState = {
 export type RouteView = {
     ts: number;
     tier: ComplexityTier;
-    routeKind: "local" | "frontier";
+    routeKind: "local" | "frontier" | "blocked";
     /** "providerID/modelID". */
     model: string;
     /** NUNCA el prompt. */

package/dist/console/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/console/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,qEAAqE;IACrE,IAAI,EAAE,UAAU,CAAC;IACjB,mFAAmF;IACnF,MAAM,EAAE,WAAW,CAAC;IACpB,iEAAiE;IACjE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B;;;;OAIG;IACH,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7B,qEAAqE;IACrE,YAAY,EAAE,SAAS,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,wDAAwD;IACxD,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,wDAAwD;IACxD,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,yFAAyF;IACzF,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,OAAO,GAAG,UAAU,CAAC;IAChC,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,EAAE,SAAS,EAAE,CAAC;IAC1B,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;IAChD,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/console/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EACV,YAAY,EACZ,WAAW,EACX,WAAW,EACX,mBAAmB,EACnB,cAAc,EACf,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAE/C;;;;;;GAMG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,gEAAgE;IAChE,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE;QACP,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;IACF,qEAAqE;IACrE,IAAI,EAAE,UAAU,CAAC;IACjB,mFAAmF;IACnF,MAAM,EAAE,WAAW,CAAC;IACpB,iEAAiE;IACjE,QAAQ,EAAE,cAAc,EAAE,CAAC;IAC3B;;;;OAIG;IACH,cAAc,EAAE,UAAU,EAAE,CAAC;IAC7B,qEAAqE;IACrE,YAAY,EAAE,SAAS,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,4EAA4E;IAC5E,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,wDAAwD;IACxD,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB,wDAAwD;IACxD,IAAI,EAAE,SAAS,EAAE,CAAC;IAClB,yFAAyF;IACzF,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,SAAS,GAAG;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,SAAS,EAAE,OAAO,GAAG,UAAU,GAAG,SAAS,CAAC;IAC5C,4BAA4B;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,uBAAuB;IACvB,UAAU,EAAE,MAAM,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,CAAC;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IAC/B,YAAY,EAAE,SAAS,EAAE,CAAC;IAC1B,SAAS,EAAE,YAAY,EAAE,CAAC;IAC1B,QAAQ,EAAE,WAAW,EAAE,CAAC;IACxB,QAAQ,EAAE,aAAa,EAAE,CAAC;CAC3B,CAAC;AAEF,MAAM,MAAM,YAAY,GAAG;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,8CAA8C;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,WAAW,EAAE,CAAC;IACrB,2CAA2C;IAC3C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,CAAC;IACd,2CAA2C;IAC3C,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,UAAU,GAAG;IACvB,iBAAiB;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB;IAChB,EAAE,EAAE,MAAM,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,OAAO,GAAG,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC;IAChD,mCAAmC;IACnC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,OAAO,EAAE,MAAM,CAAC;CACjB,CAAC"}

package/dist/context/redaction.d.ts

@@ -1,32 +1,32 @@
 import type { ContextRef, ManifestEntry } from "./schema";
 /**
- * Utilidades de **redacción** del seam de contexto.
+ * **Redaction** utilities for the context seam.
  *
- * Calcula digests SHA-256 estables y construye entradas de manifiesto a partir
- * de contenido en memoria **sin persistirlo**. También ofrece un guard que
- * rechaza estructuras con campos de contenido crudo, para mantener journal,
- * snapshots y telemetría solo con referencias.
+ * Computes stable SHA-256 digests and builds manifest entries from in-memory
+ * content **without persisting it**. It also provides a guard that rejects
+ * structures with raw content fields, to keep journals, snapshots, and
+ * telemetry reference-only.
  *
- * Cómputo determinista: `node:crypto` y `Buffer` no son I/O, reloj ni random.
+ * Deterministic computation: `node:crypto` and `Buffer` are not I/O, clock, or random.
  */
-/** Error tipado de una violación de la política reference-only. */
+/** Typed error for a reference-only policy violation. */
 export declare class RedactionError extends Error {
     readonly code: "raw-content";
     readonly key: string;
     constructor(key: string);
 }
-/** Digest SHA-256 en hex minúscula de una cadena UTF-8. */
+/** Lowercase hexadecimal SHA-256 digest of a UTF-8 string. */
 export declare function sha256Hex(input: string): string;
-/** Par digest + tamaño en bytes UTF-8 de un contenido en memoria. */
+/** Digest + UTF-8 byte-size pair for in-memory content. */
 export type Digest = {
     sha256: string;
     bytes: number;
 };
-/** Deriva el digest y el tamaño UTF-8 de un contenido, sin almacenarlo. */
+/** Derives the digest and UTF-8 size of content without storing it. */
 export declare function digestUtf8(text: string): Digest;
 /**
- * Construye una entrada de manifiesto redactada a partir de contenido en
- * memoria. Incluye la `ContextRef` solo si se aporta una referencia estable.
+ * Builds a redacted manifest entry from in-memory content. Includes the
+ * `ContextRef` only if a stable reference is provided.
  *
  * Currently has no production callers — its sole consumer,
  * `migrateLegacyBriefs`, was removed in issue #70. Retained deliberately:
@@ -38,21 +38,21 @@ export declare function digestUtf8(text: string): Digest;
  */
 export declare function buildManifestEntry(label: string, text: string, ref?: ContextRef): ManifestEntry;
 /**
- * Proyección **reference-only** de una `ContextRef`: solo localización lógica,
- * digest y tamaño. Descarta `mediaType` para mantener la telemetría acotada;
- * nunca transporta contenido.
+ * **Reference-only** projection of a `ContextRef`: only logical location,
+ * digest, and size. Discards `mediaType` to keep telemetry bounded; it never
+ * transports content.
  */
 export declare function redactedRef(ref: ContextRef): {
     uri: string;
     sha256: string;
     bytes: number;
 };
-/** Claves prohibidas por transportar potencialmente contenido crudo. */
+/** Keys forbidden because they may potentially transport raw content. */
 export declare const FORBIDDEN_RAW_KEYS: ReadonlySet<string>;
 /**
- * Recorre una estructura y lanza `RedactionError` si encuentra alguna clave de
- * contenido crudo. Guard barato para journal/snapshots/telemetría; no valida
- * esquema, solo ausencia de campos crudos.
+ * Walks a structure and throws `RedactionError` if it finds any raw content
+ * key. Cheap guard for journal/snapshots/telemetry; does not validate the
+ * schema, only absence of raw fields.
  */
 export declare function assertReferenceOnly(value: unknown): void;
 /** Result of a counting privacy scan. */

package/dist/context/redaction.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/context/redaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE1D;;;;;;;;;GASG;AAEH,mEAAmE;AACnE,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,YAAY,GAAG,EAAE,MAAM,EAKtB;CACF;AAED,2DAA2D;AAC3D,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,qEAAqE;AACrE,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,2EAA2E;AAC3E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,UAAU,GACf,aAAa,CAKf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAEA;AAED,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAWjD,CAAC;AA+BH;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAIxD;AAED,yCAAyC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,iBAAiB,CASnB"}
+{"version":3,"file":"redaction.d.ts","sourceRoot":"","sources":["../../src/context/redaction.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAE1D;;;;;;;;;GASG;AAEH,yDAAyD;AACzD,qBAAa,cAAe,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IAErB,YAAY,GAAG,EAAE,MAAM,EAKtB;CACF;AAED,8DAA8D;AAC9D,wBAAgB,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE/C;AAED,2DAA2D;AAC3D,MAAM,MAAM,MAAM,GAAG;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,uEAAuE;AACvE,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK/C;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,GAAG,CAAC,EAAE,UAAU,GACf,aAAa,CAKf;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,UAAU,GAAG;IAC5C,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf,CAEA;AAED,yEAAyE;AACzE,eAAO,MAAM,kBAAkB,EAAE,WAAW,CAAC,MAAM,CAWjD,CAAC;AA+BH;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,IAAI,CAIxD;AAED,yCAAyC;AACzC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;OAGG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAC/B,QAAQ,EAAE,SAAS,OAAO,EAAE,GAC3B,iBAAiB,CASnB"}

package/dist/context/schema.d.ts

@@ -1,36 +1,36 @@
 import { z } from "zod";
 /**
- * Esquemas Zod del **seam de contexto** de Graph V1.
+ * Zod schemas for the Graph V1 **context seam**.
  *
- * Este módulo es la capa base pura: define referencias, digests y clases de
- * privacidad que el resto de Graph consume. Solo transporta **referencias y
- * digests**; nunca contenido crudo (brief, prompt, findings o salida del
- * modelo). Todos los objetos usan `.strict()`, de modo que cualquier campo
- * desconocido —incluidos campos de contenido crudo— falla con un error tipado.
+ * This module is the pure base layer: it defines references, digests, and
+ * privacy classes that the rest of Graph consumes. It transports only
+ * **references and digests**; never raw content (brief, prompt, findings, or
+ * model output). All objects use `.strict()`, so any unknown field — including
+ * raw content fields — fails with a typed error.
  *
- * Prohibido en `src/context/**`: Prefill, llamadas al modelo, cache warming,
- * filesystem y telemetría. `sha256Hex`/`digestUtf8` viven en `redaction.ts` y
- * solo hacen cómputo determinista.
+ * Forbidden in `src/context/**`: Prefill, model calls, cache warming,
+ * filesystem, and telemetry. `sha256Hex`/`digestUtf8` live in `redaction.ts`
+ * and only perform deterministic computation.
  */
-/** Clase de privacidad de un artefacto o contrato de contexto. */
+/** Privacy class of an artifact or context contract. */
 export declare const PrivacyClassSchema: z.ZodEnum<{
     internal: "internal";
     public: "public";
     sensitive: "sensitive";
 }>;
 export type PrivacyClass = z.infer<typeof PrivacyClassSchema>;
-/** Digest SHA-256 en hex minúscula (exactamente 64 caracteres). */
+/** Lowercase hexadecimal SHA-256 digest (exactly 64 characters). */
 export declare const Sha256Schema: z.ZodString;
 export type Sha256 = z.infer<typeof Sha256Schema>;
 /**
- * Identificador estable (taskID, etiquetas de manifiesto). No es contenido:
- * charset acotado y longitud limitada para mantener el seam determinista.
+ * Stable identifier (taskID, manifest labels). It is not content:
+ * bounded charset and limited length to keep the seam deterministic.
  */
 export declare const IdentifierSchema: z.ZodString;
 export type Identifier = z.infer<typeof IdentifierSchema>;
 /**
- * `TaskAnchor` — referencia estable a la tarea/spec que ancla un nodo. Solo
- * identificador y digest; nunca contenido.
+ * `TaskAnchor` — stable reference to the task/spec anchoring a node. Only
+ * identifier and digest; never content.
  */
 export declare const TaskAnchorSchema: z.ZodObject<{
     taskID: z.ZodString;
@@ -38,8 +38,8 @@ export declare const TaskAnchorSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type TaskAnchor = z.infer<typeof TaskAnchorSchema>;
 /**
- * `ContextRef` — referencia acotada a contenido por digest. No transporta el
- * contenido: solo su localización lógica, digest SHA-256 y tamaño en bytes.
+ * `ContextRef` — bounded reference to content by digest. It does not transport
+ * the content: only its logical location, SHA-256 digest, and size in bytes.
  */
 export declare const ContextRefSchema: z.ZodObject<{
     uri: z.ZodString;
@@ -49,9 +49,9 @@ export declare const ContextRefSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ContextRef = z.infer<typeof ContextRefSchema>;
 /**
- * Entrada de un manifiesto de artefactos: etiqueta estable, digest y tamaño;
- * opcionalmente una `ContextRef` estable cuando el input persiste como
- * referencia revalidable. Nunca lleva título, extracto ni contenido.
+ * Artifact manifest entry: stable label, digest, and size; optionally a stable
+ * `ContextRef` when the input persists as a revalidatable reference. It never
+ * carries title, excerpt, or content.
  */
 export declare const ManifestEntrySchema: z.ZodObject<{
     label: z.ZodString;
@@ -66,9 +66,9 @@ export declare const ManifestEntrySchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ManifestEntry = z.infer<typeof ManifestEntrySchema>;
 /**
- * Manifiesto redactado de inputs seleccionados: versión, taskID, clase de
- * privacidad y entradas ordenadas. El orden más los digests bastan para probar
- * exactamente qué inputs se seleccionaron, sin exponer su contenido.
+ * Redacted manifest of selected inputs: version, taskID, privacy class, and
+ * ordered entries. The order plus the digests are enough to prove exactly
+ * which inputs were selected, without exposing their content.
  */
 export declare const ArtifactManifestSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;
@@ -92,9 +92,9 @@ export declare const ArtifactManifestSchema: z.ZodObject<{
 }, z.core.$strict>;
 export type ArtifactManifest = z.infer<typeof ArtifactManifestSchema>;
 /**
- * `NodeContextContract` — único seam de contexto de V1. Identifica referencias
- * acotadas y digests; no hace fetch, prefill, warm, cache, summarize ni reserva
- * de tokens.
+ * `NodeContextContract` — the sole V1 context seam. Identifies bounded
+ * references and digests; does not fetch, prefill, warm, cache, summarize, or
+ * reserve tokens.
  */
 export declare const NodeContextContractSchema: z.ZodObject<{
     version: z.ZodLiteral<1>;

package/dist/context/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/context/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AAEH,kEAAkE;AAClE,eAAO,MAAM,kBAAkB;;;;EAA8C,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,mEAAmE;AACnE,eAAO,MAAM,YAAY,aAEmC,CAAC;AAC7D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,aAIkC,CAAC;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;kBAKlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;kBAOlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;kBAOrB,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;kBAOxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;kBAO3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/context/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;;;;;;;;;;GAYG;AAEH,wDAAwD;AACxD,eAAO,MAAM,kBAAkB;;;;EAA8C,CAAC;AAC9E,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,oEAAoE;AACpE,eAAO,MAAM,YAAY,aAEmC,CAAC;AAC7D,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAElD;;;GAGG;AACH,eAAO,MAAM,gBAAgB,aAIkC,CAAC;AAChE,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;kBAKlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;kBAOlB,CAAC;AACZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;kBAOrB,CAAC;AACZ,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE;;;;GAIG;AACH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;kBAOxB,CAAC;AACZ,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;;GAIG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;kBAO3B,CAAC;AACZ,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC"}

package/dist/context/types.d.ts

@@ -1,7 +1,7 @@
 /**
- * Superficie de tipos del seam de contexto. Reexporta los tipos inferidos de
- * los esquemas Zod para que el resto de Graph importe tipos sin acoplarse al
- * detalle de validación, y expone el tipo `Digest` de `redaction.ts`.
+ * Type surface of the context seam. Reexports the types inferred from the Zod
+ * schemas so the rest of Graph can import types without coupling to the
+ * validation details, and exposes the `Digest` type from `redaction.ts`.
  */
 export type { Digest } from "./redaction";
 export type { ArtifactManifest, ContextRef, Identifier, ManifestEntry, NodeContextContract, PrivacyClass, Sha256, TaskAnchor, } from "./schema";