chamba 0.7.0 → 0.9.0

package/templates/webterm/tools/specs.js

@@ -0,0 +1,154 @@
+// =========================================================================================================================================
+// tools/specs.js - What the Specs tool is, as one table.
+//
+// The mount beside this file holds every rule that is about a request: the credentials, the preflight, the jail on raw bytes and
+// the helper's door. What is here is the tool itself - where its module comes from and what it is pointed at, which routes the pane
+// may call, which verbs its helper carries, which files a browser loads by their own address, what its framed sentences say, and
+// what it is limited to.
+//
+// The two tables are the boundary of this tool. What the user does is in `routes`, and what the agent does is in `verbs`: neither
+// one holds the other's half, so an agent cannot approve its own gate and the pane cannot post progress.
+// =========================================================================================================================================
+
+import { BadRequest, createSpecsModule, statusFor } from "../../pane-apps/server/specs.mjs";
+import {
+    MAX_SPECS_BYTES,
+    MAX_SPECS_LINE_LENGTH,
+    MAX_SPECS_LINES_PER_SESSION,
+    SPECS_KEY,
+    SPECS_LINE_MIN_INTERVAL_MS,
+    SPECS_NEW_SESSION_DELAY_MS,
+    SPECS_RAW_TOKEN,
+    SPECS_ROOT,
+} from "../config.js";
+import { field } from "./mount.js";
+
+// The module maker, re-exported so the path to the built dist is written once. webterm resolves the pane apps as a sibling
+// directory, which is where the image bakes them and where a checkout stages them.
+export { createSpecsModule };
+
+// The media types the data routes hand back as text, which is what this client reads rather than renders. Everything else - a page,
+// a diagram, a stylesheet, an image - is something a browser renders for itself, and is loaded from the workspace-file path, where a
+// frame and an image reach it without sending a header. An allowlist rather than a family, because `text/html` is in the family and
+// is exactly the wrong side of this line.
+const TEXTUAL = new Set(["text/markdown", "text/plain", "application/json"]);
+
+/** One workspace file as text. Anything a page renders rather than reads is refused to this route. */
+function textOf(module, path) {
+    const read = module.file(path);
+    const type = read.mediaType.split(";")[0].trim();
+    if (!TEXTUAL.has(type)) throw new BadRequest(`${path} is not read as text - load it as a workspace file`);
+    return { path, mediaType: read.mediaType, size: read.size, modified: read.modified, text: read.bytes.toString("utf8") };
+}
+
+export const SPECS_TABLE = {
+    id: "specs",
+    /** What a refusal calls the tool. The word on the tab is the client's own, in `tool-host.js`. */
+    label: "Specs",
+    key: SPECS_KEY,
+    rawToken: SPECS_RAW_TOKEN,
+    statusFor,
+
+    /** What the module is pointed at, and who to tell when the disk moves. */
+    create: ({ onChange }) => createSpecsModule({ root: SPECS_ROOT, onChange }),
+
+    /**
+     * What a delivery may say it is, in the server's own words.
+     *
+     * A sentence carries information to an agent already inside the flow, and every event here is one an agent only hears mid-flow;
+     * anything that starts a flow is a command in `commands.js` instead, so no framed sentence ever reaches an agent that is not
+     * allowed to act on it.
+     */
+    events: {
+        annotations: "Annotations sent",
+        answers: "A round of answers was submitted",
+        amendment: "The steps for this work were changed",
+        gate: "A gate was answered",
+        question: "A question about something waiting - nothing was answered",
+    },
+
+    /**
+     * What a delivery may be, and how much of this channel one session gets.
+     *
+     * The length is of the source text, checked before the line is reduced, so an over-limit message is refused with a reason
+     * rather than cut into half a sentence. The gap is what a person delivering things looks like. The total is what the gap alone
+     * cannot stop. And the wait is for a session this delivery had to start, because an agent CLI takes a moment to draw its
+     * prompt.
+     */
+    limits: {
+        bytes: MAX_SPECS_BYTES,
+        line: MAX_SPECS_LINE_LENGTH,
+        interval: SPECS_LINE_MIN_INTERVAL_MS,
+        perSession: MAX_SPECS_LINES_PER_SESSION,
+        newSession: SPECS_NEW_SESSION_DELAY_MS,
+    },
+
+    /** A workspace file, which this tool serves by its own path. */
+    raw: (module, path) => module.file(path),
+
+    // The data set, as one table. The gate, the preflight answer and the router all read it, so they cannot disagree about which
+    // routes exist or which methods each one takes.
+    routes: (module) => ({
+        dashboard: { GET: () => module.dashboard() },
+        entry: { GET: ({ query }) => module.entry(field(query.path)) },
+        state: {
+            GET: ({ query }) => module.state(field(query.entry)),
+            PUT: ({ query, body }) => {
+                module.writeState(field(query.entry), body);
+                return { ok: true };
+            },
+        },
+        // The annotations queued and not sent for one spec. The spec's own, not the window's, so every window and every session
+        // open on it draws the same list and a restart loses nothing.
+        pending: {
+            GET: ({ query }) => module.pending(field(query.entry)),
+            PUT: ({ query, body }) => {
+                module.writePending(field(query.entry), body);
+                return { ok: true };
+            },
+        },
+        feedback: {
+            GET: ({ query }) => ({ rounds: module.filed(field(query.entry)) }),
+            POST: ({ query, body }) => module.feedback(field(query.entry), body),
+        },
+        file: { GET: ({ query }) => textOf(module, field(query.path)) },
+        // The protocol, as the reader sees and answers it. What an agent posts is not here: it arrives at the helper's door below,
+        // which is gated by being inside a session rather than by holding this key.
+        stages: { GET: () => ({ stages: module.stages() }) },
+        protocol: { GET: ({ query }) => module.specState(field(query.entry)) },
+        // A declared round or gate as it was written. Read through the tool rather than as a workspace file: it lives in the
+        // dot-directory, which the file route refuses on purpose.
+        round: { GET: ({ query }) => module.round(field(query.entry), field(query.id)) },
+        intake: { POST: ({ body }) => module.intake(body) },
+        // The user signing a piece of work off. POST because it moves a directory, and the user's alone: being finished is a claim
+        // about the world, and no agent verb below files anything away.
+        archive: { POST: ({ query }) => module.archive(field(query.entry)) },
+        confirm: { POST: ({ query, body }) => module.confirm(field(query.entry), body) },
+        // The user shaping the run before it starts. A route rather than an agent verb, for the same reason confirming is one: the
+        // decisions bind the agent that reads them, so the agent is not their author.
+        decide: { POST: ({ query, body }) => module.decide(field(query.entry), body) },
+        // The user answering a gate, a round or a decision card. The agent's side of the same file is a verb at the helper's door,
+        // so neither caller can do the other's half.
+        answer: { POST: ({ query, body }) => module.answer(field(query.entry), field(query.id), body) },
+    }),
+
+    // The helper's verbs, which an agent reaches from inside a session. A verb that is not here is not one.
+    verbs: (module) => ({
+        // The first call any agent makes: it answers whether there is a pane at all, and where the specs this pane serves live. An
+        // agent writing into a spec needs a path, and the root is a mount parameter, so nothing it could work out for itself.
+        stages: () => ({ root: module.root, stages: module.stages() }),
+        state: (entry) => module.specState(entry),
+        intake: (_entry, payload) => module.intake(payload),
+        propose: (entry, payload) => module.propose(entry, payload),
+        // What the agent proposes for the run itself, which the execute form opens on. The user decides it through the route above,
+        // so this writes a recommendation and never a decision.
+        recommend: (entry, payload) => module.recommend(entry, payload),
+        await: (entry, payload) => module.declare(entry, payload),
+        // The other half of declaring: an ask that has been superseded leaves the list without an answer, so what the user is shown
+        // as open is only what is genuinely open.
+        withdraw: (entry, payload) => module.withdraw(entry, payload),
+        post: (entry, payload) => module.post(entry, payload),
+        review: (entry, payload) => module.review(entry, payload),
+        answers: (entry, payload) => ({ answer: module.answers(entry, field(payload?.id)) }),
+    }),
+};

package/templates/webterm/typed-line.js

@@ -47,6 +47,43 @@ const BLANK = /[\p{Default_Ignorable_Code_Point}\u2800]/u;
 const DOUBLE_QUOTES =
     /["\u00ab\u00bb\u02ba\u02dd\u02ee\u02f6\u05f4\u201c\u201d\u201e\u201f\u2033\u2036\u275d\u275e\u2e42\u3003\u301d\u301e\u301f\uff02]|[\u{1f676}-\u{1f678}]/gu;
 
+// All three CLIs read "@path" in a submitted line as a file to pull into the context, so no detail may carry
+// one. The frame names a file in the one place it is allowed to - the path, which the server built and which
+// is dropped unless the reduction leaves it whole - and a detail is not that place. So the at sign goes the
+// way the quote lookalikes go, for every agent.
+const FILE_MENTION = /@/g;
+
+// The rules that are one CLI's own syntax, and nobody else's. The frame promises that a framed line instructs
+// nobody, and the command line promises that its argument is a name and not a second instruction. Both
+// promises rest on a character meaning something only where this server put it, and each CLI breaks that in
+// its own way - so each cell below is one CLI's syntax, mapped to a code point that reads the same and means
+// nothing to it. Every other agent is untouched.
+//
+//   claude    nothing of its own. The two rules above cover it.
+//   codex     "$name" is a skill mention wherever it sits in the line.
+//   opencode  a prompt expands a backticked shell command by running it. The expansion happens after the
+//             argument is placed in the command file, so a name typed by a button is scanned for one.
+//             Neutralizing the backtick is what ends it: the command form cannot be written without one.
+//             The dollar goes too: the argument is placed with String.replaceAll, where "$&" and the two
+//             quote forms beside it are replacement patterns that rebuild text out of the template.
+//
+// The replacements read the same and mean nothing to the CLI they are for. Two of the three are the
+// compatibility forms, so a consumer that normalized the line to NFKC would fold them back - nothing in this
+// chain normalizes, and this is the property to re-check if anything downstream ever does.
+//
+// Every agent has a row, empty where it needs nothing, and an agent with no row gets every rule in the table.
+// A caller that omits the agent, or a fourth CLI added to the session side and not to this one, then loses a
+// character rather than a guarantee.
+const NO_RULES = [];
+const CODEX_RULES = [[/\$/g, "\uff04"]]; // Fullwidth dollar sign
+const OPENCODE_RULES = [[/`/g, "\u02cb"], ...CODEX_RULES]; // Modifier letter grave accent, then the dollar
+const AGENT_RULES = {
+    claude: NO_RULES,
+    codex: CODEX_RULES,
+    opencode: OPENCODE_RULES,
+};
+const EVERY_RULE = [...OPENCODE_RULES];
+
 /**
  * One line of somebody else's text, safe to put inside the frame.
  *
@@ -54,15 +91,24 @@ const DOUBLE_QUOTES =
  * control, a separator or a format character, and a space is what it was standing in for. One that renders
  * as nothing inside an allowed category is removed rather than spaced, because it was padding rather than a
  * gap - which is what keeps a padded tail inside the quotes instead of pushed off the row.
+ *
+ * `agent` is the agent this text is being reduced for. It is what decides the per-agent rules above; the two
+ * rules before them hold for every agent, and an agent the table does not name gets all of them. The detail
+ * is not always the user's own words either: a directory name read off the workspace comes through here too.
  */
-export function reduceLine(raw, max) {
+export function reduceLine(raw, max, agent) {
     if (typeof raw !== "string") return "";
     let kept = "";
     for (const ch of raw) {
         if (BLANK.test(ch)) continue;
         kept += VISIBLE.test(ch) ? ch : " ";
     }
-    return cleanLine(kept.replace(DOUBLE_QUOTES, "'"), max);
+    let text = kept.replace(DOUBLE_QUOTES, "'").replace(FILE_MENTION, "\uff20"); // Fullwidth commercial at
+    // Read as the table's own entries: the agent is validated at session creation, and this keeps a name
+    // off Object.prototype from reaching the loop as something that is not a list of rules.
+    const rules = Object.hasOwn(AGENT_RULES, agent) ? AGENT_RULES[agent] : EVERY_RULE;
+    for (const [pattern, readsAs] of rules) text = text.replace(pattern, readsAs);
+    return cleanLine(text, max);
 }
 
 /**
@@ -74,12 +120,29 @@ export function reduceLine(raw, max) {
  *
  * `path` is a path this server built, but it is not made of this server's words: every segment of it is a
  * name off the filesystem, and a name may hold any byte but the separator. So it goes through the same
- * reduction, and it is named only when the reduction changed nothing. A path that changed is not a path any
- * more - naming the reduced spelling would send the agent to a file that does not exist - and a path holding
- * anything the reduction removes is the one case where naming no file is the honest line.
+ * reduction, for the same agent, and it is named only when the reduction changed nothing. A path that changed
+ * is not a path any more - naming the reduced spelling would send the agent to a file that does not exist -
+ * and a path holding anything the reduction removes is the one case where naming no file is the honest line.
+ * A directory whose name holds one of the per-agent characters above is one of those, in that agent's session
+ * and in no other.
  */
-export function framedLine({ tag, event, detail, path }) {
+export function framedLine({ tag, event, detail, path, agent }) {
     const said = detail ? `: "${detail}"` : "";
-    const named = path && reduceLine(path, path.length) === path ? path : "";
+    const named = path && reduceLine(path, path.length, agent) === path ? path : "";
     return `[${tag}] ${event}${said}${named ? ` - read ${named}` : ""}`;
 }
+
+/**
+ * The line for a button that starts a skill: the command itself, as the user would type it.
+ *
+ * A skill the user alone may start does not start from a framed sentence, because the sentence reaches an
+ * agent that is not allowed to act on it. The button click is the user's own act, so the line it types is
+ * the command, and the frame would only get in the way of it.
+ *
+ * `command` is this server's own word, like every event word above. `argument` is the one part that came
+ * from somewhere else, and it arrives reduced: every code point that renders as a double quote is a single
+ * one by then, so it stays one quoted word and can neither close the quote nor open a second line.
+ */
+export function commandLine(command, argument) {
+    return argument ? `${command} "${argument}"` : command;
+}

package/templates/context/context-usage.md

@@ -1 +0,0 @@
-- You can check your own context-window and rate-limit usage at any time: run `context-usage`.

package/templates/context-usage.sh

@@ -1,266 +0,0 @@
-#!/bin/sh
-# =============================================================================
-# context-usage -- prints the freshest Claude Code context/quota snapshot.
-# Baked into the container image at /usr/local/share/chamba/context-usage.sh
-# and symlinked to /usr/local/bin/context-usage.
-#
-# Snapshots are written by claude-statusline.sh to ~/.claude/context-usage/
-# on every prompt render, one file per session - that script prints nothing, so
-# the snapshot is the whole of what it does. Each snapshot records the pid
-# (and start time) of the Claude CLI process that spawned the status line; this
-# helper runs as a descendant of that SAME process, so matching them identifies
-# the asking session's own snapshot deterministically. When pid resolution fails, the
-# newest file by mtime is used instead (it is almost always the asking
-# session's own: its status line re-rendered the moment the current prompt
-# was submitted), and warnings cover the two ways that heuristic can mislead
-# (stale snapshot, another session writing at the same time).
-# =============================================================================
-
-snap_dir="${HOME:-/home/devuser}/.claude/context-usage"
-
-# All snapshots, newest first. Filenames are sanitized to [A-Za-z0-9-].json at
-# write time, so ls output is line-safe and word-splitting the list below is
-# safe too. An unmatched glob yields no stdout lines (error suppressed).
-files=$(ls -t -- "$snap_dir"/*.json 2>/dev/null)
-
-if [ -z "$files" ]; then
-  echo "No context snapshots found in $snap_dir." >&2
-  echo "Snapshots appear once Claude Code has rendered its first prompt in this session." >&2
-  exit 1
-fi
-
-# Resolve the pid of this session's Claude CLI process; mirrors find_claude_pid in
-# claude-statusline.sh (see the comments there). Prints nothing when resolution fails.
-find_claude_pid() {
-  fcp_pid=$$
-  while [ "$fcp_pid" -gt 1 ] 2>/dev/null; do
-    fcp_comm=""
-    read -r fcp_comm 2>/dev/null < "/proc/$fcp_pid/comm" || return
-    case "$fcp_comm" in
-      claude) printf '%s' "$fcp_pid"; return ;;
-      node*) grep -aq "claude-code" "/proc/$fcp_pid/cmdline" 2>/dev/null && { printf '%s' "$fcp_pid"; return; } ;;
-    esac
-    read -r fcp_stat 2>/dev/null < "/proc/$fcp_pid/stat" || return
-    fcp_rest="${fcp_stat##*) }"
-    set -- $fcp_rest
-    fcp_pid=$2
-  done
-}
-
-# Start time of a process (jiffies since host boot, /proc/<pid>/stat field 22); mirrors
-# proc_start_time in claude-statusline.sh. Prints nothing when unavailable.
-proc_start_time() {
-  read -r pst_stat 2>/dev/null < "/proc/$1/stat" || return
-  pst_rest="${pst_stat##*) }"
-  set -- $pst_rest
-  printf '%s' "${20}"
-}
-
-# CHAMBA_CLAUDE_PID and CHAMBA_CLAUDE_PID_START are test/debug overrides.
-my_claude_pid="${CHAMBA_CLAUDE_PID:-$(find_claude_pid)}"
-case "$my_claude_pid" in *[!0-9]*) my_claude_pid="" ;; esac
-my_pid_start=""
-[ -n "$my_claude_pid" ] && my_pid_start="${CHAMBA_CLAUDE_PID_START:-$(proc_start_time "$my_claude_pid")}"
-case "$my_pid_start" in *[!0-9]*) my_pid_start="" ;; esac
-
-# Deterministic selection first: the snapshot recorded by this session's own Claude
-# process. The list is newest-first, so the first match also wins when one process
-# wrote several session files over time (e.g. after /clear). Pids get recycled across
-# container restarts while snapshots persist in the bind-mounted home, so when both
-# sides carry a start time it must agree too; a missing start time on either side
-# falls back to the pid alone. The while-read loop (heredoc, not a pipe, so $matched
-# survives) keeps paths intact even if the directory prefix contains spaces.
-newest=""
-second=""
-matched=""
-if [ -n "$my_claude_pid" ]; then
-  while IFS= read -r f; do
-    pid_fields=$(jq -r '(.claude_pid // ""), (.claude_pid_start // "")' "$f" 2>/dev/null)
-    {
-      IFS= read -r fpid
-      IFS= read -r fstart
-    } <<INNER
-$pid_fields
-INNER
-    [ "$fpid" = "$my_claude_pid" ] || continue
-    if [ -n "$fstart" ] && [ -n "$my_pid_start" ] && [ "$fstart" != "$my_pid_start" ]; then
-      continue
-    fi
-    matched="$f"
-    break
-  done <<EOF
-$files
-EOF
-fi
-
-if [ -n "$matched" ]; then
-  newest="$matched"
-else
-  # Heuristic fallback: newest by mtime, plus the runner-up for the ambiguity warning.
-  {
-    IFS= read -r newest
-    IFS= read -r second
-  } <<EOF
-$files
-EOF
-fi
-
-# Single jq pass over the snapshot, one field per line. Every path has a fallback so a
-# missing field becomes an empty string (or 0) instead of failing the script.
-parsed=$(jq -r '
-    .session_id // "",
-    .updated_at // "",
-    .context_tokens // 0,
-    .context_used_pct // 0,
-    .context_window_size // 0,
-    .model // "",
-    .effort // "",
-    .quota_left_pct // "",
-    .quota_resets_at // "",
-    .quota_week_left_pct // "",
-    .quota_week_resets_at // ""
-' "$newest" 2>/dev/null)
-
-if [ -z "$parsed" ]; then
-  echo "Snapshot $newest is unreadable." >&2
-  exit 1
-fi
-
-{
-  IFS= read -r session_id
-  IFS= read -r updated_at
-  IFS= read -r tokens
-  IFS= read -r used_pct
-  IFS= read -r window_size
-  IFS= read -r model
-  IFS= read -r effort
-  IFS= read -r quota_left
-  IFS= read -r quota_resets_at
-  IFS= read -r quota_week_left
-  IFS= read -r quota_week_resets_at
-} <<EOF
-$parsed
-EOF
-
-now=$(date +%s)
-
-# Format a seconds delta as "Xd Yh", "Xh Ym", "Xm", or "Xs". The day unit is here for the seven-day
-# rate-limit window, which is days away for most of its life; the hours are truncated rather than
-# rounded so a delta of 4 days and 23h50m never reads "4d 24h".
-fmt_delta() {
-  d=$1
-  if [ "$d" -ge 86400 ]; then
-    echo "$(( d / 86400 ))d $(( (d % 86400) / 3600 ))h"
-  elif [ "$d" -ge 3600 ]; then
-    echo "$(( d / 3600 ))h $(( (d % 3600) / 60 ))m"
-  elif [ "$d" -ge 60 ]; then
-    echo "$(( d / 60 ))m"
-  else
-    echo "${d}s"
-  fi
-}
-
-# Age of the snapshot from its own updated_at field (portable, and equal to file mtime).
-# age stays empty when updated_at is missing or non-numeric.
-age=""
-age_label="unknown"
-case "$updated_at" in
-  '' | *[!0-9]*) ;;
-  *)
-    age=$(( now - updated_at ))
-    [ "$age" -lt 0 ] && age=0
-    age_label="$(fmt_delta "$age") ago"
-    ;;
-esac
-
-# Token counts read the way the strip in the web interface says them: 45.0k below
-# 100k, 245k above, 1M above a million.
-fmt_tokens() {
-  case "$1" in
-    '' | *[!0-9]*) printf '?' ;;
-    *) awk -v t="$1" 'BEGIN {
-         if (t == 0) printf "0k";
-         else if (t >= 1000000) { m = t/1000000; if (m == int(m)) printf "%dM", m; else printf "%.1fM", m; }
-         else if (t >= 100000) printf "%dk", int(t/1000 + 0.5);
-         else printf "%.1fk", t/1000;
-       }' ;;
-  esac
-}
-
-tokens_label=$(fmt_tokens "$tokens")
-
-# The window the tokens sit in, when the snapshot knows how big it is. Unknown (an
-# older snapshot, or a release that stopped reporting it) leaves the whole clause out,
-# rather than naming a window with no size.
-window_label=""
-case "$window_size" in
-  '' | 0 | *[!0-9]*) ;;
-  *) window_label=" of $(fmt_tokens "$window_size") window" ;;
-esac
-
-# The "this session" marker means the snapshot was matched by pid and is guaranteed to
-# describe the asking session; without it the newest-file heuristic picked the snapshot.
-if [ -n "$matched" ]; then
-  printf 'session: %s (this session, updated %s)\n' "${session_id:-unknown}" "$age_label"
-else
-  printf 'session: %s (updated %s)\n' "${session_id:-unknown}" "$age_label"
-fi
-printf 'context: %s tokens (%s%%%s)\n' "$tokens_label" "${used_pct:-?}" "$window_label"
-
-# One rate-limit window as a line, printed only when the snapshot carried that window. Claude Code
-# reports two - the five-hour one, which "quota" has always meant here, and the seven-day one - and an
-# account may have both, one, or neither. The label is padded to the width the other lines use.
-quota_line() {
-  ql_label=$1
-  ql_left=$2
-  ql_resets=$3
-  [ -n "$ql_left" ] || return 0
-  ql_reset_label=""
-  case "$ql_resets" in
-    '' | *[!0-9]*) ;;
-    *)
-      ql_delta=$(( ql_resets - now ))
-      if [ "$ql_delta" -gt 0 ]; then
-        ql_reset_label=", resets in $(fmt_delta "$ql_delta")"
-      else
-        ql_reset_label=", resets now"
-      fi
-      ;;
-  esac
-  printf '%-8s %s%% remaining%s\n' "$ql_label" "$ql_left" "$ql_reset_label"
-}
-
-quota_line 'quota:' "$quota_left" "$quota_resets_at"
-quota_line 'weekly:' "$quota_week_left" "$quota_week_resets_at"
-
-if [ -n "$model" ]; then
-  effort_label=""
-  [ -n "$effort" ] && effort_label=" (effort $effort)"
-  printf 'model:   %s%s\n' "$model" "$effort_label"
-fi
-
-# Warnings apply only to the heuristic path: a pid-matched snapshot is this session's own
-# by construction, however old it is (it reflects the last render, i.e. the turn start).
-
-# Freshness warning: a snapshot older than 5 minutes likely belongs to an idle session.
-if [ -z "$matched" ] && [ -n "$age" ] && [ "$age" -gt 300 ]; then
-  printf 'warning: snapshot is %s old - it may not reflect the current session\n' "$(fmt_delta "$age")"
-fi
-
-# Ambiguity warning: another session wrote its snapshot around the same moment, so mtime
-# ordering may not identify the asking session. Compare updated_at of the two newest files.
-# Guarded on age being set, which implies updated_at is numeric. The explicit matched check
-# keeps this off the pid path even if a future edit populates $second unconditionally.
-if [ -z "$matched" ] && [ -n "$second" ] && [ -n "$age" ]; then
-  second_updated=$(jq -r '.updated_at // ""' "$second" 2>/dev/null)
-  case "$second_updated" in
-    '' | *[!0-9]*) ;;
-    *)
-      gap=$(( updated_at - second_updated ))
-      [ "$gap" -lt 0 ] && gap=$(( -gap ))
-      if [ "$gap" -lt 60 ]; then
-        printf 'warning: another session updated its snapshot within the last minute - this may not be your session (%s)\n' "$second"
-      fi
-      ;;
-  esac
-fi

package/templates/pane-apps/client/assets/specs-B1970L17.css

@@ -1 +0,0 @@
-:root{--bg:#0d1117;--panel:#161b22;--fg:#e6edf3;--muted:#8b949e;--border:#30363d;--accent:#58a6ff;--ok:#3fb950;--warn:#d29922;--sunken:#0b0e13;--sel:#1f6feb33}:root[data-theme=light]{--bg:#fff;--panel:#f6f8fa;--fg:#1f2328;--muted:#656d76;--border:#d0d7de;--accent:#0969da;--ok:#1a7f37;--warn:#9a6700;--sunken:#f6f8fa;--sel:#ddf4ff}*{box-sizing:border-box}html,body,#root{height:100%}body{background:var(--bg);color:var(--fg);margin:0;font-family:system-ui,-apple-system,Segoe UI,Roboto,sans-serif;font-size:14px;line-height:1.6}@media (prefers-reduced-motion:no-preference){html{scroll-behavior:smooth}}.workspace{grid-template-columns:minmax(180px,220px) minmax(0,1fr) minmax(220px,280px);height:100%;display:grid}.nav,.rail{background:var(--panel);font-size:12.5px;overflow:auto}.nav{border-right:1px solid var(--border);padding:10px 0 24px}.rail{border-left:1px solid var(--border);flex-direction:column;gap:18px;padding:12px 14px 24px;display:flex}.nav-head,.rail-head{letter-spacing:.06em;text-transform:uppercase;color:var(--muted);margin:12px 0 5px;padding:0 14px;font-size:10.5px;font-weight:700}.rail-head{padding:0}.nav-list{margin:0;padding:0;list-style:none}.nav-list button{text-align:left;width:100%;color:inherit;font:inherit;cursor:pointer;background:0 0;border:none;border-left:2px solid #0000;padding:3px 14px;display:block}.nav-list button:hover{color:var(--accent)}.nav-list button[aria-current]{background:var(--sel);border-left-color:var(--accent)}.nav-list button.nav-artifact{padding-left:22px}.nav-list button.nav-spec{align-items:baseline;gap:6px;display:flex}.nav-spec-name{text-overflow:ellipsis;white-space:nowrap;flex:1;overflow:hidden}.nav-spec-status{color:var(--muted);letter-spacing:.04em;text-transform:uppercase;flex:none;font-size:10px}.nav-spec-awaiting{background:var(--accent);min-width:15px;color:var(--bg);text-align:center;border-radius:7px;flex:none;padding:0 4px;font-size:10px;font-weight:700}.nav-dir{color:var(--muted);letter-spacing:.04em;margin:8px 0 2px;padding:0 14px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:10.5px}.nav-sections{margin:0 0 4px;padding:0;font-size:12px;list-style:none}.nav-sections button{color:var(--muted);padding-left:32px}.nav-sections button[aria-current]{color:var(--fg);font-weight:600}.nav-sections button.is-read{opacity:.55}.nav-changed{color:var(--warn);vertical-align:middle;margin-left:6px;font-size:9px}.doc{padding:20px 40px 96px;overflow:auto}.doc-facts{color:var(--muted);align-items:center;gap:10px;margin-bottom:14px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:11px;display:flex}.doc-section{scroll-margin-top:12px;position:relative}.doc-section.is-read{opacity:.62}.doc-section h2{margin:22px 0 8px;font-size:1.15em}.sec-mark{position:absolute;top:24px;left:-26px}.mark{border:1px solid var(--border);background:var(--bg);color:#0000;cursor:pointer;border-radius:5px;width:20px;height:20px;padding:0;font-size:11px;line-height:1}.doc-section:hover .mark,.mark:focus-visible{color:var(--muted)}.mark[aria-pressed=true]{color:var(--ok);border-color:var(--ok)}.sec-changed{color:var(--warn);margin-left:10px;font-size:11px;font-weight:400}.art-frame{border:1px solid var(--border);background:var(--bg);border-radius:8px;width:100%;height:calc(100vh - 90px)}.art-image img{max-width:100%}.rail-top{justify-content:flex-end;display:flex}.rail-fact{margin:0 0 2px}.rail-changed{color:var(--warn)}.theme-toggle{border:1px solid var(--border);color:var(--muted);font:inherit;cursor:pointer;background:0 0;border-radius:999px;padding:2px 12px;font-size:11px}.notice{color:var(--muted);padding:20px 24px}.notice-failure{border-left:3px solid var(--warn);color:var(--fg)}.muted{color:var(--muted)}.visually-hidden{clip-path:inset(50%);white-space:nowrap;width:1px;height:1px;position:absolute;overflow:hidden}.plain{white-space:pre-wrap;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:12.5px;overflow-x:auto}.prose{overflow-wrap:anywhere;font-size:13.5px}.prose h1{margin:18px 0 8px;font-size:1.4em}.prose h2{margin:18px 0 8px;font-size:1.2em}.prose h3{margin:16px 0 6px;font-size:1.08em}.prose h4,.prose h5,.prose h6{color:var(--muted);margin:14px 0 6px;font-size:1em}.prose p{margin:0 0 10px}.prose ul,.prose ol{margin:0 0 10px;padding-left:22px}.prose li{margin:2px 0}.prose li.task{margin-left:-20px;list-style:none}.task-box{border:1px solid var(--muted);vertical-align:baseline;border-radius:3px;width:11px;height:11px;margin-right:8px;display:inline-block}.task-box.is-done{border-color:var(--ok);background:var(--ok)}.prose a{color:var(--accent)}.prose code{background:var(--sunken);border:1px solid var(--border);border-radius:5px;padding:1px 5px;font-family:ui-monospace,SFMono-Regular,Menlo,monospace;font-size:.88em}.prose blockquote{border-left:3px solid var(--border);color:var(--muted);margin:0 0 12px;padding:2px 14px}.prose blockquote>:last-child{margin-bottom:0}.prose hr{border:0;border-top:1px solid var(--border);margin:16px 0}.prose img{max-width:100%}.prose table{border-collapse:collapse;margin:0 0 12px;font-size:.95em;display:block;overflow-x:auto}.prose th,.prose td{border:1px solid var(--border);text-align:left;padding:4px 10px}.prose th{background:var(--sunken)}.prose .cell-left{text-align:left}.prose .cell-center{text-align:center}.prose .cell-right{text-align:right}.prose pre{background:var(--sunken);border:1px solid var(--border);border-radius:8px;margin:0 0 12px;padding:12px;overflow-x:auto}.prose pre code{background:0 0;border:0;padding:0}.annotate{z-index:2;border:1px solid var(--border);background:var(--panel);border-radius:7px;gap:4px;padding:3px 6px;display:flex;position:absolute;box-shadow:0 4px 14px #00000059}.annotate button{color:var(--accent);font:inherit;cursor:pointer;background:0 0;border:none;border-radius:5px;padding:2px 5px;font-size:13px;line-height:1}.annotate button:hover{background:var(--sel)}.annotate-whole{border:1px solid var(--border);color:var(--accent);font:inherit;cursor:pointer;background:0 0;border-radius:999px;padding:0 9px;font-size:10.5px}.queue{margin:0 0 8px;padding:0;list-style:none}.filed{margin:0;padding:0;list-style:none}.filed li{border-bottom:1px solid var(--border);align-items:baseline;gap:6px;padding:3px 0;font-size:11.5px;display:flex}.filed li:last-child{border-bottom:none}.filed-round{flex:none;font-weight:600}.filed-count{color:var(--muted);flex:1}.filed-when{color:var(--muted);flex:none;font-size:10.5px}.queued{border:1px solid var(--border);border-left:3px solid var(--accent);background:var(--bg);border-radius:7px;margin-bottom:7px;padding:7px 9px}.queued.is-remove{border-left-color:var(--warn)}.queued-target{color:var(--muted);margin:0;font-size:11px;font-style:italic}.queued-kind{color:var(--warn);margin:3px 0 0;font-size:11.5px}.queued textarea{background:var(--panel);width:100%;min-height:42px;color:inherit;border:1px solid var(--border);font:inherit;resize:vertical;border-radius:6px;margin-top:4px;padding:5px 7px;font-size:12px}.queued-acts{gap:10px;margin-top:4px;display:flex}.queued-acts button{color:var(--accent);font:inherit;cursor:pointer;background:0 0;border:none;padding:0;font-size:11px}.queued-acts button:disabled{color:var(--muted);cursor:default}.send{background:var(--accent);width:100%;color:var(--bg);font:inherit;cursor:pointer;border:none;border-radius:7px;padding:6px 0;font-size:12px}.send:disabled{background:var(--border);color:var(--muted);cursor:default}.rail-continue{border:1px solid var(--border);color:var(--accent);font:inherit;cursor:pointer;background:0 0;border-radius:7px;margin-top:6px;padding:3px 10px;font-size:11.5px}.dialog-shade{z-index:10;background:#00000080;justify-content:center;align-items:center;display:flex;position:fixed;inset:0}.dialog{border:1px solid var(--border);background:var(--panel);border-radius:10px;max-width:340px;padding:16px 18px}.dialog p{margin:0 0 12px}.dialog-acts{justify-content:flex-end;gap:10px;display:flex}.dialog-acts button{border:1px solid var(--border);color:inherit;font:inherit;cursor:pointer;background:0 0;border-radius:7px;padding:4px 12px;font-size:12px}.dialog-acts .send{border-color:var(--accent);width:auto}.nav-top{justify-content:space-between;align-items:baseline;gap:8px;display:flex}.nav-new{border:1px solid var(--border);color:var(--accent);font:inherit;cursor:pointer;background:0 0;border-radius:7px;padding:2px 9px;font-size:11px}.board-list{margin:0;padding:0;list-style:none}.board-stage{padding:2px 0;font-size:12px}.board-stage-name{color:var(--muted);margin:0}.board-stage.is-running .board-stage-name,.board-stage.is-done .board-stage-name{color:var(--text)}.board-mark{width:14px;color:var(--muted);display:inline-block}.board-stage.is-running .board-mark{color:var(--accent)}.board-artifacts{margin:0 0 4px 14px;padding:0;list-style:none}.board-artifacts button{color:var(--accent);font:inherit;cursor:pointer;text-align:left;background:0 0;border:none;padding:1px 0;font-size:11.5px}.board-activity{color:var(--accent);margin:6px 0 0;font-size:11.5px}.board-awaiting{gap:6px;margin:10px 0 0;padding:0;list-style:none;display:grid}.form{padding-bottom:40px}.form .lede{color:var(--muted)}.choices{gap:12px;margin:0;padding:0;list-style:none;display:grid}.choices li{border:1px solid var(--border);border-radius:8px;padding:10px 12px}.choices li.is-recommended{border-color:var(--accent)}.choices label{cursor:pointer;align-items:center;gap:8px;display:flex}.choice-title{font-weight:600}.choice-flag{color:var(--accent);text-transform:uppercase;letter-spacing:.06em;margin-left:8px;font-size:10.5px;font-weight:400}.choice-about{color:var(--muted);margin:4px 0 0 22px;font-size:12.5px}.choice-why{margin:4px 0 0 22px;font-size:12.5px}.choice-mode{cursor:pointer;align-items:flex-start;gap:8px;display:flex}.field{margin-bottom:12px;display:block}.field>span{color:var(--muted);margin-bottom:4px;font-size:11.5px;display:block}.field input,.field-dump{box-sizing:border-box;background:var(--bg);border:1px solid var(--border);width:100%;color:inherit;font:inherit;resize:vertical;border-radius:7px;padding:7px 9px;font-size:13px}.field-dump{min-height:140px}.attached{gap:4px;margin:0 0 12px;padding:0;font-size:12px;list-style:none;display:grid}.attached li{justify-content:space-between;gap:8px;display:flex}.attached button{color:var(--muted);font:inherit;cursor:pointer;background:0 0;border:none;font-size:11px}.form-acts{justify-content:flex-end;gap:10px;margin-top:20px;display:flex}.form-acts button{border:1px solid var(--border);color:inherit;font:inherit;cursor:pointer;background:0 0;border-radius:7px;padding:5px 14px;font-size:12.5px}.form-acts .send{border-color:var(--accent);width:auto;color:var(--accent)}.dialog-wide{width:90%;max-width:560px}.doc-and-ask{flex-direction:column;min-width:0;display:flex;overflow-y:auto}.doc-and-ask .doc{flex:1 0 auto;overflow-y:visible}.ask{border:1px solid var(--accent);background:var(--panel);border-radius:10px;width:calc(100% - 80px);max-width:780px;margin:0 auto 40px;padding:16px 20px}.ask-head h2{margin:0;font-size:15px}.ask-about{color:var(--muted);margin:2px 0 10px;font-size:11.5px}.ask-evidence{margin:0 0 8px}.ask-tradeoff{color:var(--muted);margin:0 0 12px}.questions{gap:18px;margin:0 0 14px;padding-left:18px;display:grid}.question-ask{margin:0 0 8px;font-weight:600}.question-said{box-sizing:border-box;background:var(--bg);border:1px solid var(--border);width:100%;min-height:48px;color:inherit;font:inherit;resize:vertical;border-radius:7px;margin-top:8px;padding:6px 8px;font-size:12.5px}.board-review{padding:3px 0;font-size:12px}