@sigrun/sigrun 0.1.6 → 0.2.1

package/node_modules/@sigrun/shared/dist/access.js

@@ -1,6 +1,6 @@
 /**
  * Per-resource sharing and content access (core hardening W1 Task 5, spec
- * §5.9 ruling 6/10: per-resource sharing; groups cut).
+ * §5.9 ruling 6/10: per-resource sharing; multi-user M3b adds groups).
  *
  * Part of the shared leaf package (`@sigrun/shared`): the server computes
  * access through `accessOf`, the clients render the `sharing` state — one
@@ -13,7 +13,7 @@
  * 2. ownerless resource → household write (everyone);
  * 3. user === owner → write;
  * 4. household sharing with a defined user → the shared level;
- * 5. people sharing including the user → the shared level;
+ * 5. people sharing including the user or one of their groups → the shared level;
  * 6. otherwise none (hidden: 404 on every :id route, absent from lists).
  *
  * Anonymous callers (a principal with no user) get nothing from a shared
@@ -40,8 +40,12 @@ export function accessOf(p, r) {
     if (p.user !== undefined && r.sharing !== undefined) {
         if (r.sharing.scope === "household")
             return r.sharing.level;
-        if (r.sharing.scope === "people" && r.sharing.users.includes(p.user)) {
-            return r.sharing.level;
+        if (r.sharing.scope === "people") {
+            const sharing = r.sharing;
+            if (sharing.users.includes(p.user) ||
+                p.groups?.some((group) => sharing.groups?.includes(group)) === true) {
+                return sharing.level;
+            }
         }
     }
     // 6. Hidden.
@@ -65,6 +69,9 @@ export function isSharing(value) {
         case "people":
             return (Array.isArray(record.users) &&
                 record.users.every((user) => typeof user === "string") &&
+                (record.groups === undefined ||
+                    (Array.isArray(record.groups) &&
+                        record.groups.every((group) => typeof group === "string"))) &&
                 (record.level === "read" || record.level === "write"));
         default:
             return false;

package/node_modules/@sigrun/shared/dist/ambient.d.ts

@@ -1,9 +1,9 @@
 /**
  * The ambient seam TYPES (spec: docs/approval-ux-seams.md, "Ambient
- * surfaces"): the channel-neutral record shapes for persistent
- * read-mostly state — statusline slots and panel widgets — written by
- * extensions through the host context and rendered by channels
- * generically.
+ * surfaces"; the block mapping: UI-blocks design §9.2): the channel-neutral record
+ * shapes for persistent read-mostly state — statusline slots and panel
+ * widgets — written by extensions through the host context and rendered
+ * by channels generically.
  *
  * The CANONICAL type declarations live here (the shared leaf package);
  * `src/harness/ambient.ts` imports them (type-only) for the doc
@@ -17,79 +17,16 @@
  * not silent composition — the pi-zentui chrome-skin lesson).
  *
  * Layering mirrors the interaction seam: strict envelope (key, place,
- * budget, refresh, expires) around a body composed only from the closed
- * ambient primitives (line, rows, gauge, ledger), with opaque `details`.
+ * budget, refresh, expires) around a block-tree body (placement
+ * `ambient`; `status`/`footer` allow one line), with opaque `details`.
+ * The legacy `line`/`rows`/`gauge`/`ledger` primitives are REJECTED
+ * (ruling 16: no compatibility layer).
  */
+import type { Tree } from "./blocks/index.js";
 import type { JsonObject } from "./json.js";
 /** Where a channel places the surface. */
 export type AmbientPlace = "status" | "footer" | "panel";
-/** One widget row (primitive B). */
-export type AmbientRow = {
-    readonly id: string;
-    readonly label: string;
-    /** Channel-schemed glyph state (todo statuses, agent run states). */
-    readonly status?: string;
-    /** Severity ordering/color: 0 = severe .. 2 = quiet. */
-    readonly severity?: 0 | 1 | 2;
-    /** Folded away by default (warden's quiet verdicts). */
-    readonly quiet?: boolean;
-    readonly detail?: string;
-    /** Nesting depth for tree rendering (pi-goal-x task tree). */
-    readonly depth?: number;
-    /** Dependency ids for marker rendering (rpiv-todo blockedBy). */
-    readonly deps?: string[];
-    /** Present-continuous spinner label while the row is active. */
-    readonly spinnerLabel?: string;
-    readonly metrics?: AmbientMetrics;
-};
-/** Numeric metrics with an optional derived-format hint. */
-export type AmbientMetrics = {
-    readonly tokens?: number;
-    readonly cost?: number;
-    readonly current?: number;
-    readonly total?: number;
-    readonly completed?: number;
-    /** Derived display hint for numeric fields ("2.5k", currency) — the
-     * host-reuse lesson from every footer extension. */
-    readonly format?: "compact" | "usd" | "percent";
-};
-/** The `line` primitive: one keyed statusline/footer line, optionally segmented. */
-export type AmbientLine = {
-    readonly text: string;
-    /** Segmented composition for powerline-style slots (pi-powerline,
-     * pi-zentui): sub-segments with placement zones. */
-    readonly segments?: {
-        readonly id: string;
-        readonly text: string;
-        readonly place?: "left" | "middle" | "right";
-    }[];
-};
-/** The `gauge` primitive: live progress with optional check rows. */
-export type AmbientGauge = {
-    readonly label: string;
-    readonly percent?: number;
-    readonly phase?: string;
-    readonly elapsedMs?: number;
-    readonly recentOutput?: string[];
-    /** Check rows (pi-goal-x auditor): row-shaped, same schema as rows[]. */
-    readonly checks?: AmbientRow[];
-};
-/** One ledger entry (primitive D): append-style feed with per-entry amend. */
-export type AmbientLedgerEntry = {
-    readonly id: string;
-    readonly at: number;
-    readonly kind: string;
-    readonly summary: string;
-    readonly detail?: string[];
-};
-/** The ambient body: ONLY these keys, each from the closed primitives. */
-export type AmbientBody = {
-    readonly line?: AmbientLine;
-    readonly rows?: AmbientRow[];
-    readonly gauge?: AmbientGauge;
-    readonly ledger?: AmbientLedgerEntry[];
-};
-/** The strict envelope + closed-primitive body of one ambient surface. */
+/** The strict envelope + block-tree body of one ambient surface. */
 export type AmbientRecord = {
     /** The keyed slot id ("goal", "rpiv-todos", "fabric"). */
     readonly key: string;
@@ -105,7 +42,13 @@ export type AmbientRecord = {
     /** Auto-clear rule: "never" stays until replaced with an empty body. */
     readonly expires: "never" | "idle";
     readonly updatedAt: number;
-    readonly body?: AmbientBody;
+    /**
+     * The ambient body: a block tree (placement `ambient`). `status` and
+     * `footer` allow one line — a single line-level block or one
+     * `columns` of one-line blocks. Undefined = the surface is cleared.
+     * Legacy-shaped bodies fail validation (ruling 16).
+     */
+    readonly body?: Tree;
     /** Opaque extension-owned payload; rendered collapsed, never interpreted. */
     readonly details?: JsonObject;
 };

package/node_modules/@sigrun/shared/dist/ambient.js

@@ -1,9 +1,9 @@
 /**
  * The ambient seam TYPES (spec: docs/approval-ux-seams.md, "Ambient
- * surfaces"): the channel-neutral record shapes for persistent
- * read-mostly state — statusline slots and panel widgets — written by
- * extensions through the host context and rendered by channels
- * generically.
+ * surfaces"; the block mapping: UI-blocks design §9.2): the channel-neutral record
+ * shapes for persistent read-mostly state — statusline slots and panel
+ * widgets — written by extensions through the host context and rendered
+ * by channels generically.
  *
  * The CANONICAL type declarations live here (the shared leaf package);
  * `src/harness/ambient.ts` imports them (type-only) for the doc
@@ -17,7 +17,9 @@
  * not silent composition — the pi-zentui chrome-skin lesson).
  *
  * Layering mirrors the interaction seam: strict envelope (key, place,
- * budget, refresh, expires) around a body composed only from the closed
- * ambient primitives (line, rows, gauge, ledger), with opaque `details`.
+ * budget, refresh, expires) around a block-tree body (placement
+ * `ambient`; `status`/`footer` allow one line), with opaque `details`.
+ * The legacy `line`/`rows`/`gauge`/`ledger` primitives are REJECTED
+ * (ruling 16: no compatibility layer).
  */
 export {};

package/node_modules/@sigrun/shared/dist/blocks/text.js

@@ -287,7 +287,14 @@ function renderPage(page, ctx) {
     let main;
     const collection = firstCollection(page.main);
     if (page.empty !== undefined && collection !== undefined) {
-        const items = collection.items ? resolvePointer(ctx.data, collection.items.$) : undefined;
+        // Literal rows (ambient's ruling shape) count as present for the
+        // `empty` gate; a binding resolves against the data model.
+        const bound = collection.items;
+        const items = Array.isArray(collection.items)
+            ? collection.items
+            : bound === undefined
+                ? undefined
+                : resolvePointer(ctx.data, bound.$);
         if (!Array.isArray(items) || items.length === 0) {
             main = [page.empty.title];
             if (page.empty.hint !== undefined && page.empty.hint !== "")
@@ -475,7 +482,14 @@ function renderDiff(block) {
 // ─── Collection ───────────────────────────────────────────────────────────
 /** Render a `collection` in its display's text shape. */
 function renderCollection(block, ctx) {
-    const raw = block.items ? resolvePointer(ctx.data, block.items.$) : undefined;
+    // Literal rows (ambient) render as-is; a binding resolves against
+    // the data model.
+    const bound = block.items;
+    const raw = Array.isArray(block.items)
+        ? block.items
+        : bound === undefined
+            ? undefined
+            : resolvePointer(ctx.data, bound.$);
     const items = (Array.isArray(raw) ? raw : []).filter(isRecord);
     const ordered = sortedItems(items, block.sort);
     if (block.display === "table" && block.columns !== undefined && block.columns.length > 0) {

package/node_modules/@sigrun/shared/dist/blocks/transport.d.ts

@@ -65,6 +65,10 @@ export interface SurfaceTransport {
     fetchData(since?: number): Promise<SurfaceFetch>;
     act(body: {
         action: string;
+        /** The action's wire type (submit/edit/move/…), carried alongside
+         *  the resolved name so a transport can gate on KIND (an edit
+         *  named like the submit action must never read as a submit). */
+        type: string;
         payload: JsonValue;
         actionId: string;
     }): Promise<SurfaceActResult>;

package/node_modules/@sigrun/shared/dist/blocks/types.d.ts

@@ -250,7 +250,10 @@ export interface LogLine {
 }
 export interface LogBlock extends BlockBase {
     readonly type: "log";
-    readonly lines: Binding;
+    /** Literal lines are legal (ambient placement requires them — the
+     *  ambient envelope carries no data document); placements that
+     *  resolve bindings keep the binding form. */
+    readonly lines: Bindable<readonly JsonValue[]>;
     readonly follow?: boolean;
     readonly wrap?: boolean;
     /** Per-level tones; default `error`→bad, `warn`→warn, `info`→neutral, `debug`→subtle. */
@@ -373,8 +376,10 @@ export interface CollectionTime {
 }
 export interface CollectionBlock extends BlockBase {
     readonly type: "collection";
-    /** Binding to an array; each item has a unique `id`. */
-    readonly items: Binding;
+    /** Binding to an array (each item has a unique `id`) — or the array
+     *  itself as literal rows, the only legal shape in ambient placement
+     *  (the ambient envelope carries no data document). */
+    readonly items: Binding | readonly JsonValue[];
     /** The card template. */
     readonly item: Card;
     readonly display: "list" | "table" | "lanes" | "grid" | "calendar";
@@ -425,6 +430,18 @@ export interface FieldBase {
     readonly maxLength?: number;
     readonly pattern?: string;
 }
+export interface ToggleFieldProps {
+    /**
+     * The value an ABSENT bound value stands for (default false). Set it
+     * on toggles whose settings key defaults ON (absent = on): the
+     * channel initializes an untouched toggle to the default, and the
+     * settings surface's save skips a submitted value EQUAL to the
+     * default, so a full-form save never writes the key while the value
+     * sits at its default (explicitly flipping OFF the default still
+     * writes the key — the write is how the non-default state persists).
+     */
+    readonly default?: boolean;
+}
 export interface TextField extends FieldBase {
     readonly type: "text";
     readonly kind?: "plain" | "search" | "email" | "url";
@@ -442,7 +459,7 @@ export interface NumberField extends FieldBase {
     readonly step?: number;
     readonly format?: Format;
 }
-export interface ToggleField extends FieldBase {
+export interface ToggleField extends FieldBase, ToggleFieldProps {
     readonly type: "toggle";
 }
 export interface ChoiceOption {

package/node_modules/@sigrun/shared/dist/interactions.d.ts

@@ -1,8 +1,8 @@
 /**
- * The interaction seam TYPES (spec: docs/approval-ux-seams.md): the
- * channel-neutral record shapes for "this conversation is waiting on a
- * human decision", written by extensions through the host context and
- * answered by channels through one generic route.
+ * The interaction seam TYPES (spec: docs/approval-ux-seams.md; the block
+ * mapping: UI-blocks design §9.1): the channel-neutral record shapes for "this conversation is
+ * waiting on a human decision", written by extensions through the host
+ * context and answered by channels through one generic route.
  *
  * The CANONICAL type declarations live here (the shared leaf package);
  * `src/harness/interactions.ts` imports them (type-only) for the doc
@@ -10,60 +10,29 @@
  * AS-IS (envelope + body + details — never projected), so these shapes
  * are the channel contract too (see `@sigrun/shared/views`).
  *
- * Layering (strict envelope / closed primitives / opaque details):
+ * Layering (strict envelope / block-tree body / opaque details):
  *
  * - envelope: kind, callId, status, timestamps, answer — load-bearing for
  *   joining tool slots and lifecycle arbitration. Strictly validated.
- * - body: composed ONLY from the closed primitives (text, options,
- *   fields, diff). Structurally validated; unknown body keys quarantine.
+ * - body: a block tree (placement `interaction` — a root `form` whose
+ *   submit is the answer). Validated by `validateTree`; the legacy
+ *   `text`/`options`/`fields`/`diff` primitives are REJECTED (ruling 16:
+ *   no compatibility layer).
  * - details: opaque extension-owned JSON. Never interpreted.
  */
-import type { JsonObject } from "./json.js";
+import type { Tree } from "./blocks/index.js";
+import type { JsonObject, JsonValue } from "./json.js";
 /** Lifecycle of one interaction record (spec statuses). */
 export type InteractionStatus = "pending" | "answered" | "skipped" | "expired" | "cancelled";
-/** One choice in the `options` primitive. */
-export type InteractionOption = {
-    readonly id: string;
-    readonly label: string;
-    /** Second line under the label (pi-advisor presets, rpiv options). */
-    readonly description?: string;
-    /** Channel-schemed color/severity hint: "danger" | "warn" | "ok" | "neutral". */
-    readonly tone?: "danger" | "warn" | "ok" | "neutral";
-    /** Pre-selected by the extension's recommendation (pi-interview conviction). */
-    readonly recommended?: boolean;
-};
-/** One light-form field in the `fields` primitive. */
-export type InteractionField = {
-    readonly name: string;
-    readonly type: "string" | "number" | "boolean" | "secret";
-    readonly label?: string;
-    readonly required?: boolean;
-};
-/** The `diff` primitive: before/after content, optionally path-scoped. */
-export type InteractionDiff = {
-    readonly before: string;
-    readonly after: string;
-    readonly path?: string;
-    readonly lang?: string;
-};
 /**
- * The interaction body: ONLY these four keys, each built only from the
- * closed primitives. Everything else belongs in `details`.
+ * What an answer carries (ruling 20): every field's value under its
+ * name — a `choice` value is its option id (or ids when `multi`), a
+ * `choice` with `allowOther` carries `{other: "…"}`.
  */
-export type InteractionBody = {
-    /** Prose prompt body (markdown). */
-    readonly text?: string;
-    readonly options?: InteractionOption[];
-    readonly fields?: InteractionField[];
-    readonly diff?: InteractionDiff;
-};
-/** What an answer may carry: chosen ids, form values, and/or free text. */
 export type InteractionAnswer = {
-    readonly ids?: string[];
-    readonly values?: Readonly<Record<string, string | number | boolean>>;
-    readonly text?: string;
+    readonly values: Readonly<Record<string, JsonValue>>;
 };
-/** The strict envelope + closed-primitive body of one interaction. */
+/** The strict envelope + block-tree body of one interaction. */
 export type InteractionRecord = {
     /** Extension-declared kind id (e.g. "gating.confirm", "questions.form"). */
     readonly kind: string;
@@ -85,7 +54,12 @@ export type InteractionRecord = {
      * model-asserted. Absent on the naive single-operator path (no user).
      */
     readonly answeredByUser?: string;
-    readonly body?: InteractionBody;
+    /**
+     * The interaction body: a block tree (placement `interaction` — a
+     * root `form` whose `submit` is the answer). Legacy-shaped bodies
+     * fail validation (ruling 16).
+     */
+    readonly body?: Tree;
     /** Opaque extension-owned payload; rendered collapsed, never interpreted. */
     readonly details?: JsonObject;
 };

package/node_modules/@sigrun/shared/dist/interactions.js

@@ -1,8 +1,8 @@
 /**
- * The interaction seam TYPES (spec: docs/approval-ux-seams.md): the
- * channel-neutral record shapes for "this conversation is waiting on a
- * human decision", written by extensions through the host context and
- * answered by channels through one generic route.
+ * The interaction seam TYPES (spec: docs/approval-ux-seams.md; the block
+ * mapping: UI-blocks design §9.1): the channel-neutral record shapes for "this conversation is
+ * waiting on a human decision", written by extensions through the host
+ * context and answered by channels through one generic route.
  *
  * The CANONICAL type declarations live here (the shared leaf package);
  * `src/harness/interactions.ts` imports them (type-only) for the doc
@@ -10,12 +10,14 @@
  * AS-IS (envelope + body + details — never projected), so these shapes
  * are the channel contract too (see `@sigrun/shared/views`).
  *
- * Layering (strict envelope / closed primitives / opaque details):
+ * Layering (strict envelope / block-tree body / opaque details):
  *
  * - envelope: kind, callId, status, timestamps, answer — load-bearing for
  *   joining tool slots and lifecycle arbitration. Strictly validated.
- * - body: composed ONLY from the closed primitives (text, options,
- *   fields, diff). Structurally validated; unknown body keys quarantine.
+ * - body: a block tree (placement `interaction` — a root `form` whose
+ *   submit is the answer). Validated by `validateTree`; the legacy
+ *   `text`/`options`/`fields`/`diff` primitives are REJECTED (ruling 16:
+ *   no compatibility layer).
  * - details: opaque extension-owned JSON. Never interpreted.
  */
 export {};

package/node_modules/@sigrun/shared/dist/settings.d.ts

@@ -149,6 +149,15 @@ export interface ServerSettings {
         readonly workerDeadlineMs?: number;
         readonly queueMax?: number;
     };
+    /** The multi-user execution jail (M1). `mode` and `osUsers` are restart-required. */
+    readonly isolation?: {
+        /** `SIGRUN_ISOLATION` — auto, always, or off; default auto. */
+        readonly mode?: "auto" | "always" | "off";
+        /** Per-user uid/gid isolation; default false. */
+        readonly osUsers?: boolean;
+        /** Idle worker lifetime in minutes; default 10. */
+        readonly workerIdleMinutes?: number;
+    };
     /**
      * The provider plugins' runtime knobs (provider plugins Task 5):
      * `SIGRUN_PROVIDER_REFRESH_MINUTES` — the interval refresh cadence
@@ -174,6 +183,8 @@ export interface ServerSettings {
     readonly auth?: {
         /** `SIGRUN_AUTH` — csv of `token`/`proxy`; absent = derive from the listen host. */
         readonly methods?: readonly ("token" | "proxy")[];
+        /** Browser-session lifetime in days. Positive integer; default 30; LIVE. */
+        readonly sessionDays?: number;
         readonly proxy?: {
             readonly trustedProxies?: readonly string[];
             readonly secretHeader?: string;
@@ -202,6 +213,16 @@ export interface ServerSettings {
      * U1 blocks gallery, U3's development error bodies, and U4.
      */
     readonly dev?: boolean;
+    /**
+     * The supervised flag (UI-blocks U4 Task 2, spec §13.3):
+     * `SIGRUN_SUPERVISED` (strict true/false, `1`/`0` accepted) over this
+     * key, default `false`. `true` promises a supervisor restarts the
+     * process after an intentional `exit 0` — the Helm chart and docker
+     * compose set the env (both restart the container); the Dockerfile
+     * deliberately does NOT. Gates `POST /v1/admin/restart`; `/v1/meta`
+     * reports it (`supervised`).
+     */
+    readonly supervised?: boolean;
     /**
      * The backup target — exactly one of the two shapes (mirroring the
      * env rule: `SIGRUN_BACKUP_PATH` XOR `SIGRUN_BACKUP_S3_BUCKET`), plus
@@ -268,8 +289,8 @@ export interface NotificationsSettings {
     readonly runSettled?: "unwatched" | "cron" | "always" | "never";
 }
 /**
- * The built-in extensions toggles (Task 2, pi parity): codemode, MCP and
- * tool search ship WITH core. Each key defaults to `true`; `false`
+ * The built-in extensions toggles: codemode, MCP, tool search and OAuth
+ * ship WITH core. Each key defaults to `true`; `false`
  * removes the built-in entirely (absent from `/v1/extensions`, its config
  * ignored with one log line). RESTART-REQUIRED: the built-in set resolves
  * at boot, like `extensions`.
@@ -278,6 +299,10 @@ export interface BuiltinExtensionsSettings {
     readonly codemode?: boolean;
     readonly mcp?: boolean;
     readonly toolSearch?: boolean;
+    /** Gateway (gateway C3): the built-in engine, default true. */
+    readonly gateway?: boolean;
+    /** OAuth login providers (multi-user M3b), default true. */
+    readonly oauth?: boolean;
 }
 /**
  * The persisted shape: HarnessSettings pass-throughs + sigrun fields.

package/node_modules/@sigrun/shared/dist/themes.d.ts

@@ -7,9 +7,8 @@
  * consume this file from a single source; any import would drag a
  * dependency only one client can load or resolve.
  *
- * Colour values are copied verbatim from the palette mockup
- * (docs/superpowers/specs/assets/2026-10-17-ui-refresh/palettes.html),
- * with the mockup ids renamed to the plan ids: palette `iron` →
+ * Colour values are copied verbatim from the UI-refresh palette mockup
+ * (palettes.html), with the mockup ids renamed to the plan ids: palette `iron` →
  * `iron-ember`, `aurora` → `polar-night`, `birch` → `birch-moss`;
  * accent `amber` → `baltic-amber`; token key `surface-2` → `surface2`.
  */

package/node_modules/@sigrun/shared/dist/themes.js

@@ -7,9 +7,8 @@
  * consume this file from a single source; any import would drag a
  * dependency only one client can load or resolve.
  *
- * Colour values are copied verbatim from the palette mockup
- * (docs/superpowers/specs/assets/2026-10-17-ui-refresh/palettes.html),
- * with the mockup ids renamed to the plan ids: palette `iron` →
+ * Colour values are copied verbatim from the UI-refresh palette mockup
+ * (palettes.html), with the mockup ids renamed to the plan ids: palette `iron` →
  * `iron-ember`, `aurora` → `polar-night`, `birch` → `birch-moss`;
  * accent `amber` → `baltic-amber`; token key `surface-2` → `surface2`.
  */

package/node_modules/@sigrun/shared/dist/turns.d.ts

@@ -24,6 +24,14 @@
 /** The user-entry kind an expanded `/skill:` or template input is placed
  *  as (see the module doc); grouping treats it exactly like `pi.user`. */
 export declare const EXPANDED_USER_KIND = "sigrun.user.expanded";
+/** The chat-blocks entry kinds (UI-blocks U5, spec §8.2/§8.3/§8.4) the
+ *  grouping recognises. The server-side twins live in
+ *  `src/harness/blocks/entries.ts` (this module imports nothing, so the
+ *  tokens duplicate by design — one spelling per kind, pinned by the
+ *  grouping tests). */
+export declare const BLOCKS_KIND = "sigrun.blocks";
+export declare const BLOCKS_NOTE_KIND = "sigrun.blocks.note";
+export declare const BLOCKS_ANSWER_KIND = "sigrun.blocks.answer";
 export interface TurnBlock {
     readonly type: string;
     readonly text?: string;
@@ -98,6 +106,12 @@ export type TimelineEvent = {
 } | {
     readonly kind: "text";
     readonly text: string;
+} | {
+    readonly kind: "blocks";
+    readonly entryId: number;
+} | {
+    readonly kind: "note";
+    readonly entryId: number;
 };
 export declare function groupTurns<E extends TurnEntry>(entries: readonly E[]): Turn<E>[];
 export declare function toolPreview(name: string, args: unknown): string;

package/node_modules/@sigrun/shared/dist/turns.js

@@ -24,6 +24,22 @@
 /** The user-entry kind an expanded `/skill:` or template input is placed
  *  as (see the module doc); grouping treats it exactly like `pi.user`. */
 export const EXPANDED_USER_KIND = "sigrun.user.expanded";
+/** The chat-blocks entry kinds (UI-blocks U5, spec §8.2/§8.3/§8.4) the
+ *  grouping recognises. The server-side twins live in
+ *  `src/harness/blocks/entries.ts` (this module imports nothing, so the
+ *  tokens duplicate by design — one spelling per kind, pinned by the
+ *  grouping tests). */
+export const BLOCKS_KIND = "sigrun.blocks";
+export const BLOCKS_NOTE_KIND = "sigrun.blocks.note";
+export const BLOCKS_ANSWER_KIND = "sigrun.blocks.answer";
+/** The `show_blocks`/`update_blocks` tool names: a call to one of these
+ *  never joins the turn's `tools` or the timeline — the block surface it
+ *  created IS the visible artifact (the activity line would otherwise
+ *  count its own rendering machinery as activity). */
+const BLOCKS_TOOLS = new Set([
+    "show_blocks",
+    "update_blocks",
+]);
 /** Narrow one entry to its expanded-user `data` — defined exactly when
  *  the kind is {@link EXPANDED_USER_KIND} and `typed` is a non-empty
  *  string; undefined for every other shape (a plain `pi.user`, missing
@@ -105,10 +121,17 @@ export function groupTurns(entries) {
                             });
                         }
                         else if (block.type === "toolCall") {
+                            const name = block.name ?? "";
+                            // A blocks tool's call is invisible in the transcript: the
+                            // `sigrun.blocks` entry it appends is the artifact. The
+                            // RESULT entry still joins by callId below (matching only
+                            // pending tools, so its join is a harmless no-op).
+                            if (BLOCKS_TOOLS.has(name))
+                                continue;
                             const call = {
                                 callId: block.id ?? "",
-                                name: block.name ?? "",
-                                preview: toolPreview(block.name ?? "", block.arguments),
+                                name,
+                                preview: toolPreview(name, block.arguments),
                                 isError: false,
                             };
                             pending.tools.push(call);
@@ -131,8 +154,35 @@ export function groupTurns(entries) {
             }
             continue;
         }
+        // U5 Task 4: the chat-blocks kinds are RUN ARTIFACTS, never
+        // standalone records (spec §8.2/§8.3). With a pending assistant
+        // turn they ride it — a boundary note mid-run appends its event
+        // and does NOT flush. With NONE (auto-compaction's pi.compaction
+        // flushed the run; the trailing note/blocks entry lands after the
+        // flush) they START one: an assistant turn with no text whose
+        // timeline still renders the block/note rows — falling through to
+        // `other` would print "unsupported entry kind".
+        // `sigrun.blocks.answer` is a user turn (§8.4: the answer submits
+        // through the normal path).
+        if (entry.kind === BLOCKS_KIND || entry.kind === BLOCKS_NOTE_KIND) {
+            pending ??= {
+                entries: [],
+                thinking: [],
+                tools: [],
+                texts: [],
+                timeline: [],
+            };
+            pending.entries.push(entry);
+            pending.timeline.push({
+                kind: entry.kind === BLOCKS_KIND ? "blocks" : "note",
+                entryId: entry.id,
+            });
+            continue;
+        }
         flush();
-        if (entry.kind === "pi.user" || entry.kind === EXPANDED_USER_KIND) {
+        if (entry.kind === "pi.user" ||
+            entry.kind === EXPANDED_USER_KIND ||
+            entry.kind === BLOCKS_ANSWER_KIND) {
             turns.push({ kind: "user", entry });
         }
         else {