@skillcdn/console 0.4.4 → 0.4.5

package/src/cli/help.ts

@@ -229,6 +229,30 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
     about:
       "The people of the workspace you see, by login, with their name where the host gives one and what they are in it: admin, who configures the workspace, or member, who works in the projects they are in; a person taken out is marked deactivated. Everyone, unless the workspace shows a member only the people they share a project with (console workspace says which; an administrator sees everyone). Then, where you see everyone, the logins an administrator let in that nobody has signed in with yet. The logins are what --worker, member and person take; a login is found exactly, so an owner lists someone the list does not show.",
   },
+  teams: {
+    usage: "teams",
+    synopsis: "The teams of the workspace, each with who is in it.",
+    about:
+      "The teams of the workspace (a name and its members: a unit to call people by, and to grant a plugin's role to, ADR-0073), by name, each with its key, what it is called by (ADR-0074), how many are in it and their logins. console team makes and keeps them, for an administrator.",
+  },
+  team: {
+    usage:
+      'team new <key> "<name>"  |  team rename <key> "<new name>"  |  team remove <key>  |  team add <key> <login>  |  team drop <key> <login>',
+    synopsis:
+      "Makes, renames or removes a team, or puts a person in one or takes them out; for an administrator.",
+    about:
+      "For an administrator: a team is a key, a name and its members, any number per person. The key is what a grant, a plugin and this command call the team by (ADR-0074): lowercase letters, digits and hyphens, one among the teams' and the projects' keys, and it never changes; the name, one per workspace, is what people read. new makes one; rename gives it another name, the key staying; remove takes it away, with its memberships and the plugin roles granted to it; add and drop put a person in and take them out, by login. The board records each as the workspace's own event, and a plugin with people:read:all hears of them.",
+    refusals: [
+      "auth.forbidden: only an administrator keeps the teams",
+      "request.invalid: the key is not lowercase letters, digits and hyphens, or the name is empty or too long",
+      "team.not_found: no team has that key",
+      "team.key_taken: a team or a project has that key already",
+      "team.name_taken: a team of that name is there already",
+      "team.too_many: the workspace holds as many teams as one may",
+      "team.invalid_member: the person is not an active person of the workspace",
+      "team.not_a_member: the person is not in the team",
+    ],
+  },
   workspace: {
     usage:
       "workspace  |  workspace edit [--people-visibility <everyone|shared-projects>] [--week-start <auto|monday|sunday>] [--time-zone <zone|none>]  |  workspace pack-token --connect  |  workspace pack-token --stdin  |  workspace pack-token --remove",
@@ -248,15 +272,16 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
   },
   person: {
     usage:
-      "person role <login> <admin|member>  |  person manager <login> <manager login|none>  |  person add <login> [--host gh|google]  |  person remove <login>  |  person deactivate <login>  |  person reactivate <login>",
+      "person role <login> <admin|member>  |  person manager <login> <manager login|none>  |  person email <login> <address|none>  |  person add <login> [--host gh|google]  |  person remove <login>  |  person deactivate <login>  |  person reactivate <login>",
     synopsis:
-      "Says what a person is in the workspace and whom they report to, lets a login in or takes one out; for an administrator.",
+      "Says what a person is in the workspace, whom they report to and their work email, lets a login in or takes one out; for an administrator.",
     about:
-      "For an administrator: the person themselves on the People page, or their agent here, named on it. role says what a person is in the workspace; the board keeps at least one administrator in. manager says whom a person reports to, the reporting line of the directory, which the plugins read as a default (the approver of their leave, say) in place of a line of their own: another active person of the workspace who does not report to them, directly or through others, or none; console people shows it. add lets a login in: whoever signs in with that account at that host is a person from then on; the host is read off the login (an address is Google's, anything else GitHub's) unless --host says. remove takes a login away that nobody has signed in with yet. deactivate takes a person out: refused on every request at once, their agents with them, kept with everything they did, and listed nowhere; reactivate takes them back in. A person the organization let in comes and goes with it, and is neither.",
+      "For an administrator: the person themselves on the People page, or their agent here, named on it. role says what a person is in the workspace; the board keeps at least one administrator in. manager says whom a person reports to, the reporting line of the directory, which the plugins read as a default (the approver of their leave, say) in place of a line of their own: another active person of the workspace who does not report to them, directly or through others, or none; console people shows it. email writes the person's work email, or none, by which a plugin allowed to read it matches them to an account elsewhere: a person who signs in at Google has their address from the sign-in, and an administrator writes everyone else's; it is read by an administrator, the person and such a plugin, and by nobody from the feed, which says only that it changed. add lets a login in: whoever signs in with that account at that host is a person from then on; the host is read off the login (an address is Google's, anything else GitHub's) unless --host says. remove takes a login away that nobody has signed in with yet. deactivate takes a person out: refused on every request at once, their agents with them, kept with everything they did, and listed nowhere; reactivate takes them back in. A person the organization let in comes and goes with it, and is neither.",
     refusals: [
       "auth.forbidden: only an administrator says who is in and what they are",
       "person.last_admin: the board keeps at least one administrator in; make another one first",
       "person.invalid_manager: the manager is not another active person of the workspace, or reports to this person already",
+      "person.email_taken: the address is another person's in this workspace",
       "person.of_organization: the organization says whether that person is in",
       "listing.exists: the login is let in already, or is a person's who is in",
       "listing.unknown_host: nobody signs in through that provider here",
@@ -380,13 +405,13 @@ export const COMMAND_HELP: Readonly<Record<string, CommandHelp>> = {
   },
   plugin: {
     usage:
-      "plugin <key>  |  plugin <key> help [<command>]  |  plugin <key> <command> [<args>] [--<name> <value>]... [--file <path> | -] [--run <id>]  |  plugin <key> records <collection> [<id>] [--where <field>=<value>]... [--search <words>] [--project <key>] [--order <field>[:desc]] [--limit <n>] [--after <cursor>] [--archived] [--versions]  |  plugin <key> skills [<folder>|<file>] [--search <words> [--limit <n>] [--cursor <cursor>]]  |  plugin <key> skill <path>  |  plugin <key> skill --file <path> [--offset <n>] [--limit <n>]  |  plugin <key> enable --consent <capability>,... [--board new|<key>] [--projects all|<key>,...] [--set <key>=<value>]...  |  plugin <key> disable  |  plugin <key> capabilities [--consent <capability>,...|none]  |  plugin <key> settings [--set <key>=<value>]...  |  plugin <key> secret <name> [--remove]  |  plugin <key> grant <role> --person <login>|--project <key>|--everyone  |  plugin <key> revoke <grant id>",
+      "plugin <key>  |  plugin <key> help [<command>]  |  plugin <key> <command> [<args>] [--<name> <value>]... [--file <path> | -] [--run <id>]  |  plugin <key> records <collection> [<id>] [--where <field>=<value>]... [--search <words>] [--project <key>] [--order <field>[:desc]] [--limit <n>] [--after <cursor>] [--archived] [--versions]  |  plugin <key> skills [<folder>|<file>] [--search <words> [--limit <n>] [--cursor <cursor>]]  |  plugin <key> skill <path>  |  plugin <key> skill --file <path> [--offset <n>] [--limit <n>]  |  plugin <key> enable --consent <capability>,... [--board new|<key>] [--projects all|<key>,...] [--set <key>=<value>]...  |  plugin <key> disable  |  plugin <key> capabilities [--consent <capability>,...|none]  |  plugin <key> settings [--set <key>=<value>]...  |  plugin <key> secret <name> [--remove]  |  plugin <key> grant <role> --person <login>|--project <key>|--plugin <key>|--team <key>|--everyone  |  plugin <key> revoke <grant id>",
     overview:
       "plugin <key> [help [<command>] | <command> [<args>] | records <collection> | skills | skill <path> | enable | disable | capabilities | settings | secret | grant | revoke]",
     synopsis:
       "One plugin: what it is for and its commands; a command run as you; its records, its skills; its settings, for an administrator.",
     about:
-      "One plugin of this console, by its key. Alone: what it is, the sentence for agents, its state, the roles you hold in it, its board project, then one line per command and query you may run, with its usage, where its skills are, and its settings. help [<command>]: one command or query in full, as console help prints one: its arguments, their types and bounds, and the refusals; every argument is given by its place when positional, else as --<name> <value> or --<name>=<value>; a boolean as --<name> alone; a list as the flag given again, or with commas between; a day as YYYY-MM-DD; a person by login, or me; a project by key; a file by --file <path>, or - for standard input, which the command uploads first, with the plugin's files capability. <command> [<args>]: runs the command or the query as the person whose token you hold; the console parses the words against the definition and refuses the first that does not fit; prints what the command says, or a query's answer as JSON, a file a query answers saved under its name; --json prints the whole answer. A command that raised a decision prints its id and exits with 3: console decision <id> --wait 100 waits for the answer. The event the command leaves names your open run in the plugin's board project, --run <id> saying which when several are open; an argument marked secret is hidden in it. records <collection>: the records you may read, one a line, newest first; --where <field>=<value>, given again for several, narrows by a field the collection indexes (id, owner and project always; a number, true, false and null are read as such); --search <words> by words; --project <key> to those linked to a project; --order <field>, with :desc for the newest first; a page of --limit with --after <cursor> as the last page printed; --archived the ones put away; <id> reads one record whole, --versions its versions. skills and skill: the plugin's own skills, a pack read from its package, exactly as console skills and console skill read a project's pack. enable, disable, settings, secret, grant and revoke are an administrator's. enable prints what each capability the plugin asks opens and what a malicious plugin would reach through it, and refuses unless --consent names every capability again; --board new makes the board project the manifest proposes, --board <key> chooses one, left out where the plugin needs none; --projects all, or the keys of the projects the plugin is on; --set a setting's value, which settings changes afterwards too, an empty value clearing one, a number or true and false read as such. secret <name> reads the value from standard input, seals it and shows it never; --remove takes it away. grant gives a role to a person by login, to the members of a project by key, or to everyone, and revoke takes a grant back by its id, which console plugin <key> lists to an administrator.",
+      "One plugin of this console, by its key. Alone: what it is, the sentence for agents, its state, the roles you hold in it, its board project, then one line per command and query you may run, with its usage, where its skills are, and its settings. help [<command>]: one command or query in full, as console help prints one: its arguments, their types and bounds, and the refusals; every argument is given by its place when positional, else as --<name> <value> or --<name>=<value>; a boolean as --<name> alone; a list as the flag given again, or with commas between; a day as YYYY-MM-DD; a person by login, or me; a project by key; a file by --file <path>, or - for standard input, which the command uploads first, with the plugin's files capability. <command> [<args>]: runs the command or the query as the person whose token you hold; the console parses the words against the definition and refuses the first that does not fit; prints what the command says, or a query's answer as JSON, a file a query answers saved under its name; --json prints the whole answer. A command that raised a decision prints its id and exits with 3: console decision <id> --wait 100 waits for the answer. The event the command leaves names your open run in the plugin's board project, --run <id> saying which when several are open; an argument marked secret is hidden in it. records <collection>: the records you may read, one a line, newest first; --where <field>=<value>, given again for several, narrows by a field the collection indexes (id, owner and project always; a number, true, false and null are read as such); --search <words> by words; --project <key> to those linked to a project; --order <field>, with :desc for the newest first; a page of --limit with --after <cursor> as the last page printed; --archived the ones put away; <id> reads one record whole, --versions its versions. skills and skill: the plugin's own skills, a pack read from its package, exactly as console skills and console skill read a project's pack. enable, disable, settings, secret, grant and revoke are an administrator's. enable prints what each capability the plugin asks opens and what a malicious plugin would reach through it, and refuses unless --consent names every capability again; --board new makes the board project the manifest proposes, --board <key> chooses one, left out where the plugin needs none; --projects all, or the keys of the projects the plugin is on; --set a setting's value, which settings changes afterwards too, an empty value clearing one, a number or true and false read as such. secret <name> reads the value from standard input, seals it and shows it never; --remove takes it away. grant gives a role to a person by login, to the members of a project by key, to another plugin by key, to the members of a team by key, or to everyone, and revoke takes a grant back by its id, which console plugin <key> lists to an administrator.",
     limits: [
       "a command line: up to 200 words of up to 50,000 characters each; one file, up to the file bound (console help hand-in), with the plugin's files capability",
       "records: a page of up to 200; where: a field the collection indexes",

package/src/client.ts

@@ -3,6 +3,8 @@ import {
   CLAIM_PATH,
   categoryPath,
   connectPath,
+  decisionFilePath,
+  decisionPath,
   personTokensPath,
   personWorkPath,
   pluginPath,
@@ -73,6 +75,7 @@ import {
   type RestProjectPatch,
   type RestProjectRules,
   type RestProjects,
+  type RestReachedDecision,
   type RestReportInput,
   type RestRules,
   type RestRulesInput,
@@ -89,6 +92,10 @@ import {
   type RestTaskInput,
   type RestTaskPatch,
   type RestTasks,
+  type RestTeam,
+  type RestTeamInput,
+  type RestTeamPatch,
+  type RestTeams,
   type RestTokenCreated,
   type RestTokenInput,
   type RestTokens,
@@ -137,6 +144,7 @@ import {
   restProjectRulesSchema,
   restProjectSchema,
   restProjectsSchema,
+  restReachedDecisionSchema,
   restRulesSchema,
   restRunSchema,
   restRunsSchema,
@@ -147,6 +155,8 @@ import {
   restSkillsSchema,
   restTaskSchema,
   restTasksSchema,
+  restTeamSchema,
+  restTeamsSchema,
   restTokenCreatedSchema,
   restTokensSchema,
   restVersionSchema,
@@ -588,6 +598,17 @@ export interface ConsoleClient {
   createListing(input: RestListingInput): Promise<RestListing>;
   /** Takes a listing away before anyone signed in with it; for an administrator. */
   removeListing(id: string): Promise<void>;
+  /** The teams of the workspace (ADR-0073), each with the members the asker may see. */
+  teams(signal?: AbortSignal): Promise<RestTeams>;
+  /**
+   * Makes, renames and removes a team, and puts a person in one or takes them out; for an
+   * administrator. A team is called by its key (ADR-0074), which never changes.
+   */
+  createTeam(input: RestTeamInput): Promise<RestTeam>;
+  renameTeam(key: string, patch: RestTeamPatch): Promise<RestTeam>;
+  removeTeam(key: string): Promise<void>;
+  addTeamMember(key: string, personId: string): Promise<RestTeam>;
+  removeTeamMember(key: string, personId: string): Promise<RestTeam>;
   /** The projects the asker may see, with what they are in each. */
   projects(signal?: AbortSignal): Promise<RestProjects>;
   /** Makes a project, whose owner the asker becomes. */
@@ -624,6 +645,26 @@ export interface ConsoleClient {
     filter?: { readonly open?: boolean; readonly raised?: boolean } & Page,
     signal?: AbortSignal,
   ): Promise<RestMyDecisions>;
+  /**
+   * One decision by its id, wherever it is (ADR-0068): in a project the asker may see, or one
+   * that reaches them from elsewhere, addressed to them, raised by them, or a plugin's addressed
+   * to someone they manage; with its project and whether they may answer it.
+   */
+  decision(id: string, signal?: AbortSignal): Promise<RestReachedDecision>;
+  /** The same, after waiting up to `waitSeconds` for its answer, as a project's `awaitDecision` waits. */
+  awaitDecision(
+    id: string,
+    waitSeconds: number,
+    signal?: AbortSignal,
+  ): Promise<RestReachedDecision>;
+  /** Answers a decision wherever it is, as whoever it reaches with the right to answer (ADR-0068). */
+  answerDecision(id: string, input: RestAnswerInput): Promise<RestDecision>;
+  /**
+   * Where the bytes of a file put on a decision (ADR-0055) are read at the decision's own address,
+   * by the decision's id and the file's: for whoever the decision reaches, in a project they may
+   * see or not (ADR-0068), as the project's `fileUrl` is for whoever may see the project.
+   */
+  decisionFileUrl(decisionId: string, fileId: string): string;
   /** Another person's plate, within what the asker may see: for an administrator, or an owner of a project they are in. */
   personWork(personId: string, signal?: AbortSignal): Promise<RestPersonWork>;
   /** The tokens of whoever asks. */
@@ -1285,6 +1326,22 @@ export function createClient(options: ClientOptions = {}): ConsoleClient {
       request("POST", `${base}${REST_ROUTES.listings}`, input, restListingSchema),
     removeListing: (id) =>
       request("DELETE", `${base}${restPath("listings", id)}`, undefined, undefined),
+    teams: (signal) =>
+      request("GET", `${base}${REST_ROUTES.teams}`, undefined, restTeamsSchema, signal),
+    createTeam: (input) => request("POST", `${base}${REST_ROUTES.teams}`, input, restTeamSchema),
+    renameTeam: (key, patch) =>
+      request("PATCH", `${base}${restPath("teams", key)}`, patch, restTeamSchema),
+    removeTeam: (key) =>
+      request("DELETE", `${base}${restPath("teams", key)}`, undefined, undefined),
+    addTeamMember: (key, personId) =>
+      request("POST", `${base}${restPath("teams", key)}/members`, { personId }, restTeamSchema),
+    removeTeamMember: (key, personId) =>
+      request(
+        "DELETE",
+        `${base}${restPath("teams", key)}/members/${encodeURIComponent(personId)}`,
+        undefined,
+        restTeamSchema,
+      ),
     projects: (signal) =>
       request("GET", `${base}${REST_ROUTES.projects}`, undefined, restProjectsSchema, signal),
     createProject: (input) =>
@@ -1331,6 +1388,19 @@ export function createClient(options: ClientOptions = {}): ConsoleClient {
         restMyDecisionsSchema,
         signal,
       ),
+    decision: (id, signal) =>
+      request("GET", `${base}${decisionPath(id)}`, undefined, restReachedDecisionSchema, signal),
+    awaitDecision: (id, waitSeconds, signal) =>
+      request(
+        "GET",
+        withQuery(decisionPath(id), { wait: String(waitSeconds) }),
+        undefined,
+        restReachedDecisionSchema,
+        signal,
+      ),
+    answerDecision: (id, input) =>
+      request("POST", `${base}${decisionPath(id)}/answer`, input, restDecisionSchema),
+    decisionFileUrl: (decisionId, fileId) => `${base}${decisionFilePath(decisionId, fileId)}`,
     personWork: (personId, signal) =>
       request("GET", `${base}${personWorkPath(personId)}`, undefined, restPersonWorkSchema, signal),
     tokens: (signal) =>

package/src/compat.ts

@@ -113,7 +113,7 @@ export interface ClientPolicy {
  * last changed what the command reads or sends (ADR-0038), whose changelog entry begins with
  * `Breaking:`; `pnpm check` holds it to a version the package has, or is about to have.
  */
-export const CLIENT_POLICY: ClientPolicy = { atLeast: "0.4.4" };
+export const CLIENT_POLICY: ClientPolicy = { atLeast: "0.4.5" };
 
 /**
  * The oldest console this command works with (ADR-0038): raised by the release that last

package/src/components/board.tsx

@@ -18,6 +18,8 @@ import {
 } from "../api.js";
 import { useWords } from "../i18n/index.js";
 import type { BoardFilter } from "../router.js";
+import { Picker } from "./picker.js";
+import { listSearch } from "./searches.js";
 import { isPlainClick } from "./shell.js";
 import {
   Badge,
@@ -25,6 +27,7 @@ import {
   CategoryBadge,
   cx,
   DueBadge,
+  PersonChip,
   PriorityBadge,
   personName,
   Workers,
@@ -727,6 +730,13 @@ export function filterTasks(
   });
 }
 
+/** A goal to narrow the board to, or no goal at all. */
+type GoalChoice = { readonly kind: "none" } | { readonly kind: "goal"; readonly goal: RestGoal };
+/** A person to narrow the board to, or whoever is looking. */
+type PersonChoice =
+  | { readonly kind: "mine" }
+  | { readonly kind: "person"; readonly person: RestPerson };
+
 export interface BoardFiltersProps {
   readonly filter: BoardFilter;
   readonly categories: readonly RestCategory[];
@@ -754,6 +764,44 @@ export function BoardFilters(props: BoardFiltersProps) {
     }
     props.onChange(next as BoardFilter);
   };
+  // The goal and the person are searched for (ADR-0037), among the page's own; what the address
+  // names and the page does not hold is held as it is, so that the filter still shows.
+  const goalChoices: readonly GoalChoice[] = [
+    { kind: "none" },
+    ...goals.map((goal) => ({ kind: "goal" as const, goal })),
+  ];
+  const chosenGoal = goals.find((goal) => goal.id === filter.goal);
+  const goalChoice: GoalChoice | undefined =
+    filter.goal === undefined
+      ? undefined
+      : filter.goal === ""
+        ? { kind: "none" }
+        : chosenGoal === undefined
+          ? undefined
+          : { kind: "goal", goal: chosenGoal };
+  const goalWords = (choice: GoalChoice) =>
+    choice.kind === "none" ? words.noGoal : choice.goal.title;
+  const findGoal = listSearch(goalChoices, (choice, typed) =>
+    goalWords(choice).toLowerCase().includes(typed),
+  );
+  const personChoices: readonly PersonChoice[] = [
+    ...(props.me === undefined ? [] : [{ kind: "mine" as const }]),
+    ...props.people
+      .filter((person) => person.id !== props.me?.id)
+      .map((person) => ({ kind: "person" as const, person })),
+  ];
+  const chosenPerson = props.people.find((person) => person.id === filter.person);
+  const personChoice: PersonChoice | undefined =
+    filter.mine === true
+      ? { kind: "mine" }
+      : filter.person === undefined || chosenPerson === undefined
+        ? undefined
+        : { kind: "person", person: chosenPerson };
+  const personWords = (choice: PersonChoice) =>
+    choice.kind === "mine" ? words.mine : `${personName(choice.person)} ${choice.person.login}`;
+  const findPerson = listSearch(personChoices, (choice, typed) =>
+    personWords(choice).toLowerCase().includes(typed),
+  );
   return (
     <form
       className="sc-filters"
@@ -795,54 +843,47 @@ export function BoardFilters(props: BoardFiltersProps) {
         </select>
       </label>
       {goals.length > 0 && (
-        <label className="sc-field sc-field-inline">
-          <span className="sc-visually-hidden">{words.anyGoal}</span>
-          <select
-            className="sc-input"
-            value={filter.goal ?? "*"}
-            onChange={(event) =>
-              event.target.value === "*" ? change({}, "goal") : change({ goal: event.target.value })
+        <div className="sc-field sc-field-inline">
+          <Picker
+            value={goalChoice}
+            held={goalChoice === undefined && filter.goal !== undefined ? filter.goal : undefined}
+            search={findGoal}
+            keyOf={(choice) => (choice.kind === "none" ? "" : choice.goal.id)}
+            render={goalWords}
+            label={words.anyGoal}
+            placeholder={words.anyGoal}
+            onChange={(choice) =>
+              choice === undefined
+                ? change({}, "goal")
+                : change({ goal: choice.kind === "none" ? "" : choice.goal.id })
             }
-          >
-            <option value="*">{words.anyGoal}</option>
-            <option value="">{words.noGoal}</option>
-            {goals.map((goal) => (
-              <option key={goal.id} value={goal.id}>
-                {goal.title}
-              </option>
-            ))}
-          </select>
-        </label>
+          />
+        </div>
       )}
-      <label className="sc-field sc-field-inline">
-        <span className="sc-visually-hidden">{words.everyone}</span>
-        <select
-          className="sc-input"
-          value={filter.mine === true ? "mine" : (filter.person ?? "*")}
-          onChange={(event) => {
-            const value = event.target.value;
-            if (value === "*") {
+      <div className="sc-field sc-field-inline">
+        <Picker
+          value={personChoice}
+          held={
+            personChoice === undefined && filter.person !== undefined ? filter.person : undefined
+          }
+          search={findPerson}
+          keyOf={(choice) => (choice.kind === "mine" ? "mine" : choice.person.id)}
+          render={(choice) =>
+            choice.kind === "mine" ? words.mine : <PersonChip person={choice.person} size="sm" />
+          }
+          label={words.everyone}
+          placeholder={words.everyone}
+          onChange={(choice) => {
+            if (choice === undefined) {
               change({ mine: undefined, person: undefined });
-              return;
-            }
-            if (value === "mine") {
+            } else if (choice.kind === "mine") {
               change({ mine: true, person: undefined });
-              return;
+            } else {
+              change({ person: choice.person.id, mine: undefined });
             }
-            change({ person: value, mine: undefined });
           }}
-        >
-          <option value="*">{words.everyone}</option>
-          {props.me !== undefined && <option value="mine">{words.mine}</option>}
-          {props.people
-            .filter((person) => person.id !== props.me?.id)
-            .map((person) => (
-              <option key={person.id} value={person.id}>
-                {personName(person)}
-              </option>
-            ))}
-        </select>
-      </label>
+        />
+      </div>
       <span className="sc-filters-count sc-muted">{words.showing(props.shown, props.total)}</span>
       {narrowed && (
         <Button variant="ghost" size="sm" onClick={() => props.onChange({})}>

package/src/components/decision-form.tsx

@@ -13,9 +13,10 @@ import {
 } from "../api.js";
 import { useWords } from "../i18n/index.js";
 import { isPicture, placing, unusedName } from "./files.js";
-import { Picker, type PickerSearch } from "./picker.js";
+import { Picker } from "./picker.js";
+import { peopleSearch } from "./searches.js";
 import { type TaskSearch, taskLabel } from "./task-form.js";
-import { Button, formatBytes, PersonChip, personName } from "./ui.js";
+import { Button, Chip, formatBytes, PersonChip, personName } from "./ui.js";
 
 // Raising a decision: the question, what a person needs to know, the options to choose from,
 // and who is to answer (ADR-0042): the person raising it, unless they name another of the
@@ -57,23 +58,6 @@ export function decidersInput(
   return ids.length === 1 ? { deciderId: first } : { deciderId: first, deciderIds: ids };
 }
 
-/** The people of the project found by the words typed, a page at a time, as a picker searches. */
-export function peopleSearch(people: readonly RestPerson[]): PickerSearch<RestPerson> {
-  return async (query, page) => {
-    const words = query.trim().toLowerCase();
-    const found = people.filter(
-      (person) =>
-        words.length === 0 ||
-        personName(person).toLowerCase().includes(words) ||
-        person.login.toLowerCase().includes(words),
-    );
-    return {
-      items: found.slice(page.offset, page.offset + page.limit),
-      more: found.length > page.offset + page.limit,
-    };
-  };
-}
-
 export function DecisionForm(props: DecisionFormProps) {
   const words = useWords();
   const form = words.decisions.form;
@@ -228,25 +212,22 @@ export function DecisionForm(props: DecisionFormProps) {
           <legend className="sc-field-label">{form.decider}</legend>
           <div className="sc-chips">
             {deciders.map((person) => (
-              <span key={person.id} className="sc-chip">
+              <Chip
+                key={person.id}
+                onRemove={() =>
+                  setDeciders((current) => current.filter((chosen) => chosen.id !== person.id))
+                }
+                removeLabel={`${words.common.remove}: ${personName(person)}`}
+                disabled={props.busy}
+              >
                 <PersonChip person={person} />
                 {person.id === props.me?.id && <span className="sc-muted"> {form.me}</span>}
-                <button
-                  type="button"
-                  className="sc-chip-remove"
-                  aria-label={`${words.common.remove}: ${personName(person)}`}
-                  disabled={props.busy}
-                  onClick={() =>
-                    setDeciders((current) => current.filter((chosen) => chosen.id !== person.id))
-                  }
-                >
-                  <span aria-hidden="true">&times;</span>
-                </button>
-              </span>
+              </Chip>
             ))}
             {deciders.length === 0 && <span className="sc-muted">{form.deciderPlaceholder}</span>}
             {deciders.length < MAX_DECIDERS && (
               <Picker
+                className="sc-picker-add"
                 value={undefined}
                 search={findDeciders}
                 keyOf={(person) => person.id}

package/src/components/event-feed.tsx

@@ -45,11 +45,15 @@ function sentenceOf(event: RestEvent, words: Messages): string {
   const grantee =
     data.everyone === true
       ? feed.everyone
-      : data.login !== undefined
-        ? data.login
-        : data.key !== undefined
-          ? feed.membersOf(data.name ?? data.key)
-          : feed.someone;
+      : data.grantee !== undefined
+        ? feed.thePlugin(data.grantee)
+        : data.team !== undefined
+          ? feed.theTeam(data.team)
+          : data.login !== undefined
+            ? data.login
+            : data.key !== undefined
+              ? feed.membersOf(data.name ?? data.key)
+              : feed.someone;
   switch (event.kind) {
     case "person.joined":
       return feed.event.personJoined();
@@ -67,6 +71,18 @@ function sentenceOf(event: RestEvent, words: Messages): string {
       return data.manager === null || data.manager === undefined
         ? feed.event.managerCleared(login)
         : feed.event.managerChanged(login, data.manager);
+    case "person.email_changed":
+      return data.set === true ? feed.event.emailChanged(login) : feed.event.emailCleared(login);
+    case "team.created":
+      return feed.event.teamCreated(data.team ?? feed.aTeam);
+    case "team.renamed":
+      return feed.event.teamRenamed(data.name ?? feed.aTeam, data.team ?? feed.aTeam);
+    case "team.removed":
+      return feed.event.teamRemoved(data.team ?? feed.aTeam);
+    case "team.member_added":
+      return feed.event.teamMemberAdded(login, data.team ?? feed.aTeam);
+    case "team.member_removed":
+      return feed.event.teamMemberRemoved(login, data.team ?? feed.aTeam);
     case "workspace.updated":
       return feed.event.workspaceUpdated(fields);
     case "project.created":
@@ -140,9 +156,11 @@ function sentenceOf(event: RestEvent, words: Messages): string {
     case "plugin.disabled":
       return feed.event.pluginDisabled(plugin);
     case "plugin.configured":
-      return data.capabilities === undefined
-        ? feed.event.pluginConfigured(fields, plugin)
-        : feed.event.pluginConsented(plugin);
+      return data.capabilities !== undefined
+        ? feed.event.pluginConsented(plugin)
+        : data.source !== undefined && data.source !== "administrator"
+          ? feed.event.pluginSealed(fields, plugin, data.source)
+          : feed.event.pluginConfigured(fields, plugin);
     case "plugin.granted":
       return feed.event.pluginGranted(data.role ?? feed.role.other, grantee, plugin);
     case "plugin.revoked":
@@ -195,7 +213,11 @@ function formatFeedDay(day: string, language: string, now: Date = new Date()): s
 
 /** Whether two events were done by the same person as the same agent, so the name is said once. */
 function sameHands(a: RestEvent, b: RestEvent): boolean {
-  return (a.actor?.id ?? null) === (b.actor?.id ?? null) && a.agent === b.agent;
+  return (
+    (a.actor?.id ?? null) === (b.actor?.id ?? null) &&
+    a.agent === b.agent &&
+    (a.via ?? null) === (b.via ?? null)
+  );
 }
 
 /** The hour of an event, for a row whose day is in the heading above it. */
@@ -266,6 +288,11 @@ export function EventFeed(props: EventFeedProps) {
                         {words.feed.as(agentLabel(run.actor.agent))}
                       </span>
                     )}
+                    {run.actor.via !== null && run.actor.via !== undefined && (
+                      <span className="sc-feed-agent" title={words.feed.viaTitle}>
+                        {words.feed.via(run.actor.via)}
+                      </span>
+                    )}
                   </span>
                   <ol className="sc-feed-run-list">
                     {run.events.map((event) => {

package/src/components/my-decisions.tsx

@@ -1,5 +1,11 @@
 import type { ReactNode } from "react";
-import type { RestAnswerInput, RestDecision, RestMyDecisions } from "../api.js";
+import {
+  decisionFilePath,
+  type RestAnswerInput,
+  type RestDecision,
+  type RestMyDecisions,
+  type RestReachedDecision,
+} from "../api.js";
 import { useWords } from "../i18n/index.js";
 import { DecisionCard, DecisionLog } from "./decision-list.js";
 import { ProjectMark } from "./projects.js";
@@ -11,7 +17,9 @@ import { Button } from "./ui.js";
 // whom they wait for; in the second the record, the answered ones of both kinds, newest first.
 // Every card and row names the project, and who asked and who answers, as the cards do
 // everywhere. Takes its data as props and nothing from the network; the page reads more when
-// asked.
+// asked. A decision here may be in a project the person may not see (ADR-0068), so the files
+// put on it are read at the decision's own address, which serves them to whoever the decision
+// reaches, and not at the project's.
 
 /** One kind of a person's decisions, a page at a time. */
 export interface DecisionsPage {
@@ -27,8 +35,14 @@ export interface MyDecisionsProps {
   /** The decisions the person asked of someone else: waiting and answered. */
   readonly raised: DecisionsPage;
   readonly decisionHref: (projectKey: string, decisionId: string) => string;
-  /** Where a file put on a decision is read, by its project's key and its id (ADR-0055). */
-  readonly fileHref?: ((projectKey: string, fileId: string) => string) | undefined;
+  /**
+   * Where a file put on a decision is read (ADR-0055), by the project's key, the file's id and
+   * the decision's; left out, at the decision's own address, `decisionFilePath`, which serves it
+   * to whoever the decision reaches, in a project they may see or not (ADR-0068).
+   */
+  readonly fileHref?:
+    | ((projectKey: string, fileId: string, decisionId: string) => string)
+    | undefined;
   /** Called with the person's answer on a decision of theirs, in its project. Left out, a waiting decision is answered on its own page. */
   readonly onAnswer?:
     | ((projectKey: string, decision: RestDecision, input: RestAnswerInput) => void)
@@ -82,7 +96,11 @@ export function MyDecisions(props: MyDecisionsProps) {
       decision={item.decision}
       href={props.decisionHref(item.project.key, item.decision.id)}
       project={<InProject project={item.project} />}
-      fileHref={fileHref === undefined ? undefined : (fileId) => fileHref(item.project.key, fileId)}
+      fileHref={(fileId) =>
+        fileHref === undefined
+          ? decisionFilePath(item.decision.id, fileId)
+          : fileHref(item.project.key, fileId, item.decision.id)
+      }
       onAnswer={
         answerable && onAnswer !== undefined
           ? (decision, input) => onAnswer(item.project.key, decision, input)
@@ -139,3 +157,30 @@ export function MyDecisions(props: MyDecisionsProps) {
     </div>
   );
 }
+
+export interface ReachedDecisionProps {
+  /** The decision as the person reaches it (ADR-0068): its project, the decision, and whether they may answer it. */
+  readonly reached: RestReachedDecision;
+  /** Called with the person's answer; the decision is answered here only where `mayAnswer` says they may. */
+  readonly onAnswer?: ((decision: RestDecision, input: RestAnswerInput) => void) | undefined;
+  readonly busy?: boolean | undefined;
+}
+
+/**
+ * One decision wherever it is (ADR-0068), on its own page: the card with its project named, the
+ * files put on it read at the decision's own address, since the project may be one the person
+ * may not see, and the way to answer it where they may.
+ */
+export function ReachedDecision(props: ReachedDecisionProps) {
+  const { reached } = props;
+  const { decision } = reached;
+  return (
+    <DecisionCard
+      decision={decision}
+      project={<InProject project={reached.project} />}
+      fileHref={(fileId) => decisionFilePath(decision.id, fileId)}
+      onAnswer={reached.mayAnswer === true ? props.onAnswer : undefined}
+      busy={props.busy}
+    />
+  );
+}