@vostride/agent-qa-dashboard 0.2.2 → 0.2.4

package/dist/index.d.cts

@@ -1,5 +1,5 @@
-import { D as DashboardDatabase, E as ExecutionBackend, a as ExecuteOptions, P as PreflightOptions, A as AgentHost, b as PostProcessingRelay, L as LiveEditorAttachment } from './index-Ds4Lv4mT.cjs';
-export { c as AgentRegistryHandle, d as AppiumManager, C as ConfigFileInvalidError, e as ConfigManager, f as LIVE_EDITOR_SUPERSEDED_CLOSE_CODE, g as LIVE_EDITOR_UNKNOWN_SESSION_CLOSE_CODE, h as LiveEditorSubjects, M as MintLiveUrlInput, i as PostProcessingListener, R as RUN_SERVICE_ANALYSIS_TEMPLATE, j as RUN_SERVICE_ARTIFACT_TEMPLATE, k as RUN_SERVICE_DETAIL_TEMPLATE, l as RUN_SERVICE_EVENTS_TEMPLATE, m as RUN_SERVICE_EVIDENCE_TEMPLATE, n as RUN_SERVICE_LIVE_URL_TEMPLATE, o as RUN_SERVICE_MARKS_TEMPLATE, p as RUN_SERVICE_MARK_PREVIEW_TEMPLATE, q as RUN_SERVICE_OK_ROUTE, r as RUN_SERVICE_ROUTE_TABLE, s as RUN_SERVICE_START_ROUTE, t as ReplaceDocumentOutcome, u as ResumePoint, v as RunOwner, w as RunOwnerProbe, x as RunOwnerState, y as RunOwnership, z as RunOwnershipInput, B as RunRow, F as RunServicePorts, G as RunServiceRouteHandlerName, H as RunServiceRouteMatch, I as RunServiceRouteRow, J as RunServiceRouter, K as RunServiceStartInput, N as RunSettledDetails, O as RunSettledStatus, Q as RunsDatabaseVersionRefusedError, T as TestFileInfo, S as TestFileManager, U as TestValidationError, V as TestValidationResult, W as backstopServerError, X as classifyRunOwner, Y as completeRunOwnership, Z as createLiveEditorSubjects, _ as createPostProcessingRelay, $ as createRouter, a0 as createRunServiceRoutes, a1 as defaultRunOwnership, a2 as matchRunServiceRoute, a3 as orphanSummary, a4 as ownedElsewhere, a5 as ownsRunServicePath, a6 as readConfigValues, a7 as readJsonBody, a8 as refuseUnparseableRequest, a9 as runDenialOf, aa as serializeConfigWrite, ab as startServer, ac as tryParseRequestUrl } from './index-Ds4Lv4mT.cjs';
+import { D as DashboardDatabase, E as ExecutionBackend, a as ExecuteOptions, A as AgentHost, P as PostProcessingRelay, L as LiveEditorAttachment } from './index-Cxygerok.cjs';
+export { b as AgentRegistryHandle, c as AppiumManager, C as ConfigFileInvalidError, d as ConfigManager, e as LIVE_EDITOR_SUPERSEDED_CLOSE_CODE, f as LIVE_EDITOR_UNKNOWN_SESSION_CLOSE_CODE, g as LiveEditorSubjects, M as MintLiveUrlInput, h as PostProcessingListener, R as RUN_SERVICE_ANALYSIS_TEMPLATE, i as RUN_SERVICE_ARTIFACT_TEMPLATE, j as RUN_SERVICE_DETAIL_TEMPLATE, k as RUN_SERVICE_EVENTS_TEMPLATE, l as RUN_SERVICE_EVIDENCE_TEMPLATE, m as RUN_SERVICE_LIVE_URL_TEMPLATE, n as RUN_SERVICE_MARKS_TEMPLATE, o as RUN_SERVICE_MARK_PREVIEW_TEMPLATE, p as RUN_SERVICE_OK_ROUTE, q as RUN_SERVICE_ROUTE_TABLE, r as RUN_SERVICE_START_ROUTE, s as ReplaceDocumentOutcome, t as ResumePoint, u as RunOwner, v as RunOwnerProbe, w as RunOwnerState, x as RunOwnership, y as RunOwnershipInput, z as RunRow, B as RunServicePorts, F as RunServiceRouteHandlerName, G as RunServiceRouteMatch, H as RunServiceRouteRow, I as RunServiceRouter, J as RunServiceStartInput, K as RunSettledDetails, N as RunSettledStatus, O as RunsDatabaseVersionRefusedError, T as TestFileInfo, Q as TestFileManager, S as TestValidationError, U as TestValidationResult, V as backstopServerError, W as classifyRunOwner, X as completeRunOwnership, Y as createLiveEditorSubjects, Z as createPostProcessingRelay, _ as createRouter, $ as createRunServiceRoutes, a0 as defaultRunOwnership, a1 as matchRunServiceRoute, a2 as orphanSummary, a3 as ownedElsewhere, a4 as ownsRunServicePath, a5 as readConfigValues, a6 as readJsonBody, a7 as refuseUnparseableRequest, a8 as serializeConfigWrite, a9 as startServer, aa as tryParseRequestUrl } from './index-Cxygerok.cjs';
 import { RunAttributes } from '@vostride/agent-qa-core';
 import { RunEventEnvelope, RunArtifactConfigSnapshot, ArtifactRecord, RunArtifactTestSourceSnapshot, RunArtifactSuiteSourceSnapshot, RunArtifactTestsSourceSnapshot, RunSession, PostProcessingStatus, PostProcessingDisposition, RunId, RunDetailRows, RunsArtifactResult, RunDetailProjection, RunsArtifactInput, LiveViewSubjectRef, LiveUrlVerdict, LiveUrlRefusalReason, LiveStreamDeclaration, LiveStreamKind, RunsMarkOutcome } from '@vostride/agent-qa-schema';
 import { EventEmitter } from 'node:events';
@@ -45,53 +45,8 @@ interface RunRowIdentity {
 declare function formatRunTitle(names: readonly string[]): string;
 declare function runRowIdentity(members: readonly RunIdentityMember[]): RunRowIdentity;
 
-/**
- * `createDashboardRunIngest` — the dashboard's DB ingestion (RESEARCH Pitfall 1's
- * "unnamed fifth consumer") rewired from the deleted `DashboardReporter` into a bus
- * subscriber (Open Q-1 resolved as option (a): one envelope vocabulary, D-16 precedent).
- *
- * The bus deliberately does not carry the resolved config/source snapshots or the run's
- * own id; those ride construction. Envelopes drive lifecycle/status.
- * The `runs` + `run_artifacts` rows this writes stay shape-compatible with what
- * `GET /api/runs/:id/artifact` and the queue read today — the spawn must survive
- * until M5 (Pitfall 1's hard requirement). This module implements no Reporter
- * interface — pure envelope consumption.
- *
- * NOTE: Plan 06 (363-06) relocated the `RunArtifact*` payload family from core to
- * @vostride/agent-qa-schema (D-08); these imports now point at their canonical home.
- *
- * 2026-08-27 (Phase 405 plan 01, D-01/D-17/D-18): THE PROJECTION IS REBUILT ON THE BUS'S OWN
- * SHAPE. Until this date every step landed in the v1 wide `steps` row through `insertStep`, which
- * kept five of `StepFinalizedPayload`'s fields and dropped the rest — because the local `*Like`
- * interfaces this module declared only named five. There was no `subActionRecorded` arm at all, so
- * the sub-action timeline, the screenshots and the screen-state hashes reached no reader.
- *
- * What replaced them: the real schema payload types (so a field added to a payload is a compile
- * error here rather than a silent drop), `run_members` per handle from `testStarted`/`testFinished`
- * (D-18: a thin member whose stream begins with a terminal event still gets a row), `run_steps`
- * carrying the WHOLE `stepFinalized` payload with `status` stored as the payload's own word, and
- * `run_sub_actions` carrying the whole `subActionRecorded` payload with its nested objects
- * stringified verbatim (no field is re-interpreted on the way in). The run row stores the verdict's
- * own word too.
- *
- * `testRetryScheduled` now drops only THAT HANDLE's rows (D-17). It used to call the v1
- * whole-run step delete, which wiped every step of the RUN — so in a suite, one member's
- * abandoned attempt deleted the completed history of every member before it.
- *
- * THE NON-DARKENING `try {} catch {}` AROUND EVERY PROJECTION INSERT IS UNCHANGED and is
- * load-bearing: a projection row that fails to write must never darken the `runs` row. A dropped
- * step is visible as an absent step; a darkened run is a wrong verdict.
- *
- * 2026-08-28 (Phase 405 plan 13, D-21): phase 405 removed tables, columns, routes and fields from
- * around this module and deliberately kept others. Check the repository history before restoring
- * anything that looks missing here.
- */
 type SourceSnapshot = RunArtifactTestSourceSnapshot | RunArtifactSuiteSourceSnapshot | RunArtifactTestsSourceSnapshot | ArtifactRecord;
 type ConfigSnapshot = RunArtifactConfigSnapshot | ArtifactRecord;
-/**
- * A run's loaded test/suite and config snapshot, handed over by the producer that resolved them
- * (433-29, G-433-5). It arrives out-of-band, like `finalize()`'s runtime: the bus carries no snapshots.
- */
 interface DashboardRunIngestSnapshots {
     config?: ConfigSnapshot;
     source?: SourceSnapshot;
@@ -114,26 +69,12 @@ interface DashboardRunIngestDeps {
 /**
  * The post-run section the CLI closure supplies to `finalize()` — data the bus never carries,
  * so it arrives out-of-band at flush.
- *
- * The v1 `memory` member is DELETED (407-05 · D-02). It was the last writer feeding the dead
- * artifact-drawer memory tab, no producer in `packages/cli` or `packages/runner-local` has passed
- * it since v1, and a field only a test could supply is a contract claiming a producer that does
- * not exist. `runs.memory_log` has NO remaining production writer either (407-16 corrects 407-05's
- * claim of a second writer): its insights reader is historical-only, reporting zeroes on every
- * install created since, and its retirement belongs to the insights v1 sweep.
  */
 interface DashboardRunIngestFinalizeExtra {
     runtime?: ArtifactRecord;
 }
 interface DashboardRunIngest {
     handler(envelope: RunEventEnvelope): void;
-    /**
-     * Stage a loaded snapshot onto this run's own artifact (433-29, F-433-15). A section is written
-     * only where it is absent or still the queue's `loadStatus: 'queued'` placeholder, so the first
-     * snapshot wins and a finalized artifact is never touched. A call before `runStarted` is held.
-     * A run of several members outside one suite instead files each snapshot under its member
-     * (444-03, D-07).
-     */
     stageSnapshots(input: DashboardRunIngestSnapshots): void;
     finalize(extra?: DashboardRunIngestFinalizeExtra): Promise<void>;
 }
@@ -149,58 +90,25 @@ interface InProcessRunStartInput {
      * A run that is DENIED never calls this, and that asymmetry is load-bearing: it is the only way
      * the backend can tell a policy refusal apart from a run that started and then failed.
      *
-     * (Phrased without a quoted clause after the word `from`: `validate:arch`'s dependency scanner
+     * (Phrased without a quoted clause after the word `from`: the arch lint's dependency scanner
      * reads that shape as an import specifier and reported this comment as an undeclared external
      * dependency of `packages/dashboard-server`.)
      */
     readonly onSession: (session: RunSession) => void;
 }
-/**
- * Start one run and resolve when it is over.
- *
- * REJECTION IS NOT "the run failed" — a failing run resolves. A rejection is a denial, a refused
- * request field, an input error or a crash, and its message is what the dashboard shows as the
- * failure summary. That is the whole user-visible win of the retirement: on the retiring wire a
- * policy denial and a run that never started were the same nothing.
- */
 type InProcessRunStarter = (input: InProcessRunStartInput) => Promise<void>;
 interface InProcessExecutionBackendOptions {
-    /**
-     * How this backend actually starts a run.
-     *
-     * NAMED `invokeRun` AND NOT `startRun`, which is not a stylistic choice. `startRun` is the RUN
-     * SHELL's entry point in `@vostride/agent-qa-runner`, and `run-door-invocation-census.test.ts`
-     * makes a complete-set claim over the whole CLI package that no file acquires it — the one legal
-     * call site is inside the invocation core, one line below the one `evaluate()`. A second thing
-     * called `startRun`, in the CLI file that composes this option, REDS that census; and the census
-     * is right to red, because a second spelling of somebody else's symbol is exactly what it exists
-     * to refuse. `invokeRun` also says what this one does: it invokes the `runs.start` OP (D-10).
-     */
     readonly invokeRun: InProcessRunStarter;
-    /**
-     * The host's pre-enqueue check, forwarded as `preflight` (433-34, G-433-10). It runs the run
-     * core's production rule over the request; a rejection carrying `neutralReason` is a denial.
-     */
-    readonly preflightRun?: (opts: PreflightOptions) => Promise<void>;
     /** Applied when an `ExecuteOptions` carries no `timeout` of its own. */
     readonly defaultTimeout?: number;
     /** How long a settled run's handle survives before it is dropped. */
     readonly retentionMs?: number;
 }
-/**
- * The dashboard's in-process `ExecutionBackend`.
- *
- * A CLASS, matching the shape the interface already declared (`extends EventEmitter`), with a
- * factory beside it so a composing host names a function rather than a constructor — nothing here
- * is meant to be subclassed, and nothing needs the `resolveCliBin`-style static the retiring class
- * carried for its binary.
- */
 declare class InProcessExecutionBackend extends EventEmitter implements ExecutionBackend {
     private readonly options;
     private readonly handles;
     private readonly retentionMs;
     constructor(options: InProcessExecutionBackendOptions);
-    preflight(opts: PreflightOptions): Promise<void>;
     execute(opts: ExecuteOptions): void;
     kill(runId: string): boolean;
     killAll(): void;
@@ -215,12 +123,6 @@ declare class InProcessExecutionBackend extends EventEmitter implements Executio
 }
 declare function createInProcessExecutionBackend(options: InProcessExecutionBackendOptions): InProcessExecutionBackend;
 
-/**
- * The comment-frame keepalive interval, matching every other SSE this package serves.
- *
- * EXPORTED so a cell can name the number rather than sleep past it, and so the client (404-07)
- * can size its own liveness expectation off the server's constant instead of a second guess.
- */
 declare const POST_PROCESSING_STREAM_HEARTBEAT_MS = 15000;
 /** The last failure the record holds for one stage — the emitter's masked, bounded text, forwarded. */
 interface PostProcessingStageFailure {
@@ -279,7 +181,7 @@ interface PostProcessingReadDeps {
     /** The injected host. Its absence is the ROUTER'S 503, not this function's. */
     readonly host: AgentHost;
 }
-/** `GET /api/runs/:id/post-processing` — what the page polls (D-18). */
+/** `GET /api/runs/:id/post-processing` — what the page polls. */
 declare function servePostProcessingRead(_req: IncomingMessage, res: ServerResponse, deps: PostProcessingReadDeps): void;
 interface PostProcessingStreamDeps extends PostProcessingReadDeps {
     /** The in-process chip sink this browser's frames come from. */
@@ -290,30 +192,6 @@ interface PostProcessingStreamDeps extends PostProcessingReadDeps {
         delete(teardown: () => void): void;
     };
 }
-/**
- * `GET /api/runs/:id/post-processing/stream` — the DEDICATED live channel (D-16).
- *
- * THE ORDER IS THE CONTRACT, on `serveRunEventStream`'s own law: every refusal happens before
- * `writeHead`, because a response that has already written `200 text/event-stream` cannot be told
- * it failed. So the joined read runs FIRST — it is the snapshot's content and the open-time
- * decision both — and only then does a head go out.
- *
- * THE 204 IS THE SSE SPEC'S NO-RECONNECT CLOSE, and it is the whole answer to Pitfall 6. An
- * `EventSource` reconnects after ANY close except a 204, so a door that answered `200` with an
- * immediate end to a run whose chain is over would be answering the same request every few seconds
- * for as long as the tab is open. Three states get it:
- *
- *   - the chain is already terminal — there is nothing left to relay, ever;
- *   - the run says `handedOff` — a lease-holder in ANOTHER process is draining it, and this
- *     process's emitter will therefore never publish a single envelope for it;
- *   - the run says `detached` — nothing is draining it in-process either.
- *
- * The last two are D-16's "closes immediately on hand-off / detach" and they are one decision with
- * two words, because the fact that matters is identical: this relay cannot ever fire for that run,
- * so the honest channel is the page's poll and holding a socket open would be a promise this
- * process cannot keep. A snapshot with NO disposition at all is the opposite case — the run has not
- * reached `runFinished` yet, which is exactly when a live channel is worth having — and it opens.
- */
 declare function servePostProcessingStream(req: IncomingMessage, res: ServerResponse, deps: PostProcessingStreamDeps): void;
 
 /**
@@ -329,17 +207,6 @@ interface DashboardRunDetailReader {
         status: string;
     } | undefined>;
 }
-/**
- * Bind a reader to THIS server's one database handle.
- *
- * The read is synchronous underneath (better-sqlite3) and the method is `async` anyway, because
- * the port's contract is a promise and a composition root that had to know which implementations
- * were synchronous would be a composition root that knows too much.
- *
- * THE ID IS NEVER JOINED ONTO A PATH. It is a bound parameter of a prepared statement, resolved
- * against rows the database already holds — the T-405-01 mitigation, and the same law
- * `RunsReaderPort.get` states for the handoff store.
- */
 declare function createDashboardRunDetailReader(db: DashboardDatabase): DashboardRunDetailReader;
 
 /** A refusal, already carrying its status and its single-key body. */
@@ -352,28 +219,14 @@ type RunDetailReadOutcome = {
     readonly kind: 'ok';
     readonly body: RunDetailProjection;
 } | RunDetailRefusal;
-/**
- * THE READ. Exported so a cell can measure the outcome without a socket, and so any second door
- * (405-05's authed remote row) answers with byte-identical bytes by CALLING this rather than by a
- * second spelling that agrees today.
- */
 declare function readRunDetail(host: AgentHost, runId: string): Promise<RunDetailReadOutcome>;
 interface RunDetailReadDeps {
     /** The DECODED run id. Decoding can throw, and that throw is the caller's refusal to answer. */
     readonly runId: string;
     /** The injected host. Its absence is the ROUTER'S 503, not this function's. */
     readonly host: AgentHost;
-    /**
-     * WHO IS ON THE OTHER END OF THIS SOCKET (405-10, D-09). Both doors serve the same body, masked
-     * at write, and nothing restores it (441 D-07); `'human'` only turns on the same-site guard.
-     *
-     * `'human'` IS PASSED BY THE LOCAL door's arms in `routes.ts`. The authed REMOTE door's
-     * `GET /run/:runId/detail` (`run-service-routes.ts`, 405-05) passes nothing, because it is
-     * legitimately reached at a non-loopback Host.
-     */
-    readonly boundary?: 'human' | 'machine';
 }
-/** `GET /api/runs/:id/detail` — what the rebuilt run-detail page reads (D-03). */
+/** `GET /api/runs/:id/detail` — what the rebuilt run-detail page reads. */
 declare function serveRunDetailRead(req: IncomingMessage, res: ServerResponse, deps: RunDetailReadDeps): void;
 type RunArtifactReadOutcome = {
     readonly kind: 'ok';
@@ -400,28 +253,12 @@ interface RunArtifactReadDeps {
     /** The injected host. Its absence is the ROUTER'S 503, not this function's. */
     readonly host: AgentHost;
 }
-/**
- * `GET /api/runs/:runId/artifacts/:sha` — a ref, resolved (D-12).
- *
- * THE HEADERS ARE THE FEATURE AS MUCH AS THE BYTES.
- * - `ETag: "<sha>"` — the content address IS the validator; there is nothing else it could be, and
- *   nothing that could make it stale, because bytes cannot change under a hash of themselves.
- * - `Cache-Control: public, max-age=31536000, immutable` — for the same reason. A revalidation of
- *   an immutable resource is a round trip that can only ever answer "yes, still".
- * - `X-Content-Type-Options: nosniff` — the second half of the T-405-15 mitigation. The op refuses
- *   to NAME a type a browser executes; this refuses to let the browser guess one anyway.
- * - `Content-Length` — from the op's own declared `byteLength` by way of the decoded buffer.
- *
- * `If-None-Match` IS HONOURED because it is three lines against a header set that promises a year
- * of caching, and a client that revalidates anyway should not be made to re-download a screenshot.
- */
 declare function serveRunArtifact(req: IncomingMessage, res: ServerResponse, deps: RunArtifactReadDeps): void;
 
 /** Every value `[data-embed-state]` can take. */
 type LiveEmbedState = 'connecting' | 'live' | 'no-stream' | 'expired' | 'refused' | 'stream-ended' | 'session-ended' | 'ended' | 'lost';
-/** Every value `[data-embed-state]` can take. The 403-02 DOM cells range this list. */
 declare const LIVE_EMBED_STATES: readonly ["connecting", "live", "no-stream", "expired", "refused", "stream-ended", "session-ended", "ended", "lost"];
-/** Every fact the page reports to its host (428 D-15). */
+/** Every fact the page reports to its host. */
 type LiveEmbedReportEvent = 'ready' | 'frame' | 'ended' | 'refused' | 'lost';
 declare const LIVE_EMBED_REPORT_EVENTS: readonly ["ready", "frame", "ended", "refused", "lost"];
 /**
@@ -431,23 +268,8 @@ declare const LIVE_EMBED_REPORT_EVENTS: readonly ["ready", "frame", "ended", "re
 declare const LIVE_EMBED_HOST_PARAM = "host";
 /** At most one `frame` report per this many milliseconds; the report carries the newest frame. */
 declare const LIVE_EMBED_REPORT_INTERVAL_MS = 500;
-/**
- * What an EXPIRED link says, exactly (D-02).
- *
- * Exported so the tracer cell and 403-02's DOM cells assert the SAME string the page renders — a
- * literal spelled twice is a literal that can drift, and this one is the difference between a
- * person seeing "your link timed out" and a person seeing nothing at all.
- */
 declare const LIVE_EMBED_EXPIRED_MESSAGE = "link expired";
-/**
- * What a target that declared NO live stream says, exactly (D-08).
- *
- * This document owns no step list, and its host — the dashboard iframe today, the 408 MCP App
- * later — is invisible to it, so the sentence claims nothing about where or whether steps are
- * shown. Exported so the served bytes are pinned against the constant (frame-proxy cell 25).
- */
 declare const LIVE_EMBED_NO_STREAM_MESSAGE = "no live preview for this target";
-/** What an ended editor session says, exactly (428 D-07/D-09; frame-proxy cell 34). */
 declare const LIVE_EMBED_SESSION_ENDED_MESSAGE = "session ended";
 /**
  * Render the page for one run.
@@ -466,13 +288,11 @@ interface FrameProxyDeps {
         now: number;
     }): LiveUrlVerdict;
     attach(runId: string): RunSession | undefined;
-    /** 428 D-07: the editor-subject lookup. Absent means no editor subject is served on this socket. */
     attachEditor?(sessionId: string): LiveEditorAttachment | undefined;
     now?: () => number;
 }
 declare function createFrameProxy(deps: FrameProxyDeps): (ws: WebSocket, runId: string) => void;
 
-/** The frame socket. A query carries the run id ONLY — never the token (D-04). */
 declare const LIVE_VIEW_WS_PATH = "/api/live-view/ws";
 /** The served embed page's prefix. Bare, so a host's `/api/` allowlist is not involved. */
 declare const LIVE_EMBED_PATH_PREFIX = "/live/";
@@ -484,21 +304,8 @@ declare const LIVE_VIEW_SLOW_VIEWER_BYTES: number;
 declare const LIVE_VIEW_PING_MS = 15000;
 /** The close code every refusal uses. In the 4000-4999 application range. */
 declare const LIVE_VIEW_REFUSAL_CLOSE_CODE = 4400;
-/**
- * Every reason this socket can refuse a viewer, BY NAME.
- *
- * The four token verdicts plus the three this layer alone can answer: a run this process never
- * started, a handle that run does not have, and an editor session this process does not hold
- * (428 D-07). Extending the token's list rather than restating it is what stops the two
- * vocabularies from drifting.
- */
 type LiveViewRefusalReason = LiveUrlRefusalReason | 'unknown_run' | 'unknown_handle' | 'unknown_session';
 declare const LIVE_VIEW_REFUSAL_REASONS: readonly ["malformed", "bad_signature", "expired", "scope_mismatch", "unknown_run", "unknown_handle", "unknown_session"];
-/**
- * Every reason an `ended` message can carry, each naming a different fact (403 CR-03, 428 D-07/D-09).
- * `runFinished`: the run is over. `handleFinished`: this member's stream is over while its run
- * continues. `sessionEnded`: an editor session is over.
- */
 type LiveViewEndReason = 'runFinished' | 'handleFinished' | 'sessionEnded';
 declare const LIVE_VIEW_END_REASONS: readonly ["runFinished", "handleFinished", "sessionEnded"];
 /** What the PAGE sends. `hello` must be first; `ack` and `renew` are valid only after `ready`. */
@@ -553,11 +360,10 @@ type RunMarkOutcome = {
  * before anything is dispatched.
  */
 declare function markRun(host: AgentHost, runId: string, body: unknown): Promise<RunMarkOutcome>;
-/** POST /api/runs/:id/mark. Both doors answer the op's outcome as it is; `'human'` adds the same-site guard. */
+/** POST /api/runs/:id/mark. Both doors answer the op's outcome as it is. */
 declare function registerRunMarkRoute(req: IncomingMessage, res: ServerResponse, deps: {
     readonly host: AgentHost;
     readonly runId: string;
-    readonly boundary?: 'human' | 'machine';
 }): void;
 
 export { AgentHost, DashboardDatabase, type DashboardRunDetailReader, type DashboardRunIngest, type DashboardRunIngestDeps, type DashboardRunIngestFinalizeExtra, ExecuteOptions, ExecutionBackend, InProcessExecutionBackend, type InProcessExecutionBackendOptions, type InProcessRunStartInput, type InProcessRunStarter, type InProcessRunStatus, LIVE_EMBED_EXPIRED_MESSAGE, LIVE_EMBED_HOST_PARAM, LIVE_EMBED_NO_STREAM_MESSAGE, LIVE_EMBED_PATH_PREFIX, LIVE_EMBED_REPORT_EVENTS, LIVE_EMBED_REPORT_INTERVAL_MS, LIVE_EMBED_SESSION_ENDED_MESSAGE, LIVE_EMBED_STATES, LIVE_VIEW_END_REASONS, LIVE_VIEW_HELLO_MAX_BYTES, LIVE_VIEW_PING_MS, LIVE_VIEW_REFUSAL_CLOSE_CODE, LIVE_VIEW_REFUSAL_REASONS, LIVE_VIEW_SLOW_VIEWER_BYTES, LIVE_VIEW_WS_PATH, LiveEditorAttachment, type LiveEmbedReportEvent, type LiveEmbedState, type LiveViewClientMessage, type LiveViewRefusalReason, type LiveViewServerMessage, MIGRATIONS, POST_PROCESSING_STREAM_HEARTBEAT_MS, type PostProcessingReadBody, PostProcessingRelay, type PostProcessingStageFailure, type ResolveDashboardDbPathOptions, type RunArtifactReadOutcome, type RunDetailReadOutcome, type RunIdentityMember, type RunMarkOutcome, type RunRowIdentity, SCHEMA_VERSION, createDashboardRunDetailReader, createDashboardRunIngest, createFrameProxy, createInProcessExecutionBackend, createRunOwnerHostResolver, formatRunTitle, isPostProcessingTerminal, markRun, readPostProcessing, readRunArtifact, readRunDetail, registerRunMarkRoute, renderLiveEmbedPage, resolveDashboardDbPath, resolveRunOwnerHost, runRowIdentity, servePostProcessingRead, servePostProcessingStream, serveRunArtifact, serveRunDetailRead };