codehere 1.0.1 → 1.0.2

package/dist/infrastructure/protocols/ui/app-script-observer.js

@@ -1,104 +0,0 @@
-/**
- * The observer rail — the calm one-line strip above TODAY showing terminal sessions codehere is
- * watching, expandable to the full rail, plus its duration formatting and toggle.
- *
- * Split out of app-script.ts (strangler fig, split 14). Verbatim slice, interpolated back where
- * it was cut so it keeps sharing the surrounding IIFE scope: fetchAll feeds it via
- * renderHostSessions, and the strip's own markup calls obsToggle through an inline handler.
- * Verified by hashing the composed APP_SCRIPT before and after: same bytes.
- *
- * Its empty state is deliberately conditional — the first-run teach only renders when there is
- * no real delegated activity, because "nothing to watch yet" sitting directly above a list of
- * the user's actual tasks is a visible contradiction.
- */
-export const OBSERVER_RAIL = `function renderHostSessions(data){
-  // Thariq loop-2 (design B) -> S13: when sessions exist the observer is a
-  // calm ONE-LINE row above TODAY ("● watching N terminal sessions · M live")
-  // that expands to the full rail; first-run keeps the teach state.
-  const strip=document.getElementById('observer-rail');
-  if(!strip)return;
-  _cached.host=data;
-  // The observer belongs to the goals home, not inside a room.
-  if(_room){ strip.style.display='none'; strip.innerHTML=''; return; }
-  const sessions=(data&&data.sessions)||[];
-  if(!sessions.length){
-    // The empty-observer teach is FIRST-RUN orientation. Once the user has real
-    // delegated activity, "nothing to watch yet" + the teach sits directly above
-    // their actual task rows — a visible contradiction. Show the teach ONLY on a
-    // genuine first run (no real tasks); otherwise the observer stays out of the
-    // way (the hero already teaches the terminal-watch path).
-    const _hasReal=allS(_cached.tasks||{}).some(t=>!/^demo-/.test(t.sessionId||'') && !t.mockRun);
-    if(_hasReal){ strip.style.display='none'; strip.innerHTML=''; return; }
-    // Rule 2 · empty observer TEACHES the 60-second path, never a blank box —
-    // and never seeds fake rows (rule 3). data-verify-observer="empty" lets the
-    // probe assert the teach-path renders.
-    strip.innerHTML='<div class="observer-rail empty" data-verify-unit="observer" data-verify-observer="empty">'
-      +'<div class="obs-head"><span class="obs-glyph idle">\\u25CB</span><span>nothing to watch yet</span></div>'
-      +'<div class="obs-teach">Run <code>claude</code> (or codex / gemini / aider) in any terminal. The moment it makes a tool call, codehere records a verified, hash-chained log of what it did. Zero setup.</div>'
-      +'</div>';
-    strip.style.display='block';
-    return;
-  }
-  function he(s){ return String(s).replace(/[&<>"]/g, c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c])); }
-  function obsDur(ms){ if(!ms||ms<1000)return'just now'; const s=Math.floor(ms/1000); if(s<60)return s+'s'; const m=Math.floor(s/60); if(m<60)return m+'m'; const h=Math.floor(m/60); return h+'h '+(m%60)+'m'; }
-  function mix(tm){ return Object.entries(tm||{}).sort((a,b)=>b[1]-a[1]).slice(0,4).map(([k,v])=>he(k)+' '+v).join(' · '); }
-  // live/recent/idle from last-event age · so a session that ended hours ago
-  // stops claiming "observing" (honest · OPEN-HOST-SESSION-WEB-LIVE).
-  function liveState(ls){ const age=Date.now()-new Date(ls).getTime(); if(!(age>=0))return'idle'; if(age<120000)return'live'; if(age<3600000)return'recent'; return'idle'; }
-  function liveLabel(st){ return st==='live'?'live now':st==='recent'?'recent':'idle'; }
-  // Explain the badge in plain English from the actual data · a bare "MEDIUM"
-  // tells the user nothing about why. (per plain-English + no-screen-lies)
-  function riskWhy(s){
-    if(s.criticalCalls>0) return s.criticalCalls+' critical finding'+(s.criticalCalls===1?'':'s')+' · review';
-    if(s.blockedCalls>0) return s.blockedCalls+' call'+(s.blockedCalls===1?'':'s')+' blocked before running · review';
-    if(s.risk==='medium') return 'high-density session ('+s.totalCalls+' calls) · worth a glance if it ran unattended';
-    return 'clean · '+s.totalCalls+' calls, nothing blocked';
-  }
-  const states=sessions.map(s=>liveState(s.lastSeen));
-  const liveN=states.filter(s=>s==='live').length;
-  const n=sessions.length;
-  // S13 · at rest: one calm line. The per-session mini-dots carry the SAME
-  // data-verify-obs-state contract as the expanded rows, so H8 keeps pinning
-  // "claimed live === rendered live" in both states.
-  if(!window._obsOpen){
-    const minis=states.map((st,i)=>'<span class="obs-mini '+st+'" data-verify-obs-state="'+st+'" title="'+he(sessions[i].shortId)+' \\u00b7 '+liveLabel(st)+'"></span>').join('');
-    strip.innerHTML='<div class="observer-rail collapsed" data-verify-unit="observer" data-verify-observer="active" data-verify-observer-live="'+liveN+'">'
-      +'<div class="obs-line" role="button" tabindex="0" onclick="obsToggle()" onkeydown="if(event.key===\\'Enter\\')obsToggle()" title="expand \\u00b7 every observed session, hook-scanned + hash-chained">'
-      +minis
-      +'<span>following '+n+' terminal'+(n===1?'':'s')+(liveN>0?' \\u00b7 '+liveN+' live':' \\u00b7 none active right now')+'</span>'
-      +'<span style="margin-left:auto">expand \\u203A</span>'
-      +'</div></div>';
-    strip.style.display='block';
-    return;
-  }
-  let rows='';
-  for(let i=0;i<sessions.length;i++){
-    const s=sessions[i];
-    const st=states[i];
-    const blocked = s.blockedCalls>0 ? '<span class="obs-blocked" title="tool calls codehere blocked before they ran">'+s.blockedCalls+' blocked</span>' : '';
-    // data-verify-obs-state lets the probe assert the live badge matches a
-    // recent session — a stale session must never render "live".
-    // S20 · Status lens: outcomes only — the per-tool mix is mechanics and
-    // stays out of the row; blocked counts + risk are outcomes and stay.
-    rows+='<div class="obs-row" data-verify-obs-state="'+st+'" onclick="showHostSession(\\''+he(s.shortId)+'\\')" title="open this session as a thread · see every tool call codehere observed">'
-      +'<span class="obs-live '+st+'" title="'+liveLabel(st)+'"></span>'
-      +'<span class="obs-id" title="'+he(s.sessionId)+'">'+he(s.shortId)+'</span>'
-      +(curLens()==='status'?'':'<span class="obs-mix">'+mix(s.toolMix)+'</span>')
-      +blocked
-      +'<span class="obs-dur">'+obsDur(s.durationMs)+'</span>'
-      +'<span class="obs-badge '+he(s.risk)+'" title="'+he(riskWhy(s))+'">'+he(s.risk)+'</span>'
-      +'</div>';
-  }
-  const liveTxt = liveN>0 ? ' \\u00b7 <span class="obs-live-n">'+liveN+' live now</span>' : ' \\u00b7 none active right now';
-  strip.innerHTML='<div class="observer-rail" data-verify-unit="observer" data-verify-observer="active" data-verify-observer-live="'+liveN+'">'
-    +'<div class="obs-head"><span class="obs-glyph'+(liveN>0?' live':'')+'">\\u25CF</span><span>codehere is following <b>'+n+' coding-agent terminal'+(n===1?'':'s')+'</b>'+liveTxt+'</span><span class="obs-collapse" role="button" tabindex="0" onclick="obsToggle()" style="margin-left:auto;cursor:pointer;font-family:var(--mono);font-size:10.5px;color:var(--fg-40)">collapse</span></div>'
-    +'<div class="obs-sub">You installed nothing extra \\u00b7 this is the agent already open in your shell. Every tool call is scanned by the hook, then hash-chained. Click one for a verified record of exactly what it did.</div>'
-    +rows
-    +'</div>';
-  strip.style.display='block';
-}
-function obsToggle(){
-  window._obsOpen=!window._obsOpen;
-  renderHostSessions(_cached.host||{sessions:[]});
-}`;
-//# sourceMappingURL=app-script-observer.js.map

package/dist/infrastructure/protocols/ui/app-script-onboarding.js

@@ -1,80 +0,0 @@
-/**
- * First-run onboarding — the non-blocking, dismissible welcome card on the home, its styles,
- * and the three actions it offers.
- *
- * Split out of app-script.ts (strangler fig, split 12). Verbatim slice, interpolated back where
- * it was cut so it keeps sharing the surrounding IIFE scope: render() calls
- * maybeStartOnboarding, the card's own markup calls welcomeRunTask/welcomeOpenSpend/
- * welcomeConnectTool through inline handlers, and dismissWelcome is reachable from the close
- * button. Verified by hashing the composed APP_SCRIPT before and after: same bytes.
- *
- * The card deliberately replaced a full-screen splash + forced tour — the workspace stays
- * usable underneath and the tour is replayable from the palette rather than ambushing anyone.
- */
-export const ONBOARDING = `// (Removed 2026-06-27: the dead full-screen welcome splash chain
-// startWelcome/welcomeSplash/welcomeSetup/finishWelcome — never called once the
-// non-blocking card below replaced it. The replayable tooltips tour
-// startTour/tourStep stays; obAgentsHtml stays — both still used by the teach card.)
-// First-run controller: a NON-BLOCKING, dismissible value-first welcome card on
-// the home (renderWelcomeCard) instead of the old full-screen splash + forced
-// tour. The workspace stays usable underneath. The tour is still replayable from
-// the command palette (Go -> Take the tour), just never forced.
-function maybeStartOnboarding(){
-  if(_room||_detail) return; // home only, never ambush mid-work
-  var onboarded=false;
-  try{ onboarded=!!localStorage.getItem('ch_onboarded'); }catch(e){}
-  if(onboarded) return;
-  // Not a first run if there's already real work — a returning user with projects
-  // or sessions shouldn't get a "Run your first task" card owning the top of the
-  // home. Only a genuine first run (no projects, no real tasks) sees it.
-  var hasWork=((_cached.projects||[]).length>0) || allS(_cached.tasks||{}).some(function(t){return !/^demo-/.test(t.sessionId||'');});
-  if(hasWork){ try{ localStorage.setItem('ch_onboarded','1'); }catch(e){} return; }
-  renderWelcomeCard();
-}
-var _HW_CSS=[
-  '#home-welcome{margin:0 0 18px}',
-  '#home-welcome .hw-card{position:relative;background:linear-gradient(135deg,rgba(255,154,118,.06),rgba(74,144,226,.05));border:1px solid var(--border,rgba(255,255,255,.1));border-radius:12px;padding:20px 22px;max-width:760px}',
-  '#home-welcome .hw-x{position:absolute;top:12px;right:15px;color:var(--fg-40,rgba(255,255,255,.4));font-size:14.5px;cursor:pointer;line-height:1}',
-  '#home-welcome .hw-h2{font-size:14.5px;font-weight:700;color:var(--fg)}',
-  '#home-welcome .hw-lede{font-size:13px;color:var(--fg-70,rgba(255,255,255,.72));margin:6px 0 16px;line-height:1.5;max-width:560px}',
-  '#home-welcome .hw-steps{display:flex;gap:10px;margin-bottom:16px;flex-wrap:wrap}',
-  '#home-welcome .hw-step{flex:1;min-width:168px;background:var(--bg-1,hsl(0 0% 6%));border:1px solid var(--border,rgba(255,255,255,.1));border-radius:9px;padding:11px 12px}',
-  '#home-welcome .hw-n{font-size:10.5px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:var(--accent)}',
-  '#home-welcome .hw-t{font-size:12px;font-weight:600;color:var(--fg);margin:3px 0 2px}',
-  '#home-welcome .hw-d{font-size:12px;color:var(--fg-50,rgba(255,255,255,.5));line-height:1.4}',
-  '#home-welcome .hw-cta{display:flex;align-items:center;gap:10px;flex-wrap:wrap}',
-  '#home-welcome .hw-btn{font-size:12px;font-weight:600;border-radius:8px;padding:8px 14px;cursor:pointer;border:1px solid var(--border,rgba(255,255,255,.1));font-family:inherit}',
-  '#home-welcome .hw-primary{background:var(--accent);color:#0a0a0a;border-color:var(--accent)}',
-  '#home-welcome .hw-ghost{background:none;color:var(--fg-70,rgba(255,255,255,.72))}',
-  '#home-welcome .hw-ptr{margin-left:auto;font-size:12px;color:var(--fg-50,rgba(255,255,255,.5))}',
-  '#home-welcome .hw-ptr b{color:var(--fg-70,rgba(255,255,255,.72))}',
-  '#home-welcome .hw-note{font-size:12px;color:var(--fg-70,rgba(255,255,255,.72));margin-top:12px;padding-top:10px;border-top:1px solid var(--border-soft,rgba(255,255,255,.06))}'
-].join('');
-function renderWelcomeCard(){
-  var el=document.getElementById('home-welcome'); if(!el) return;
-  if(el.getAttribute('data-rendered')==='1') return; // idempotent across re-renders
-  el.setAttribute('data-rendered','1');
-  el.innerHTML='<style id="hw-css">'+_HW_CSS+'</style>'
-    +'<div class="hw-card">'
-    +'<span class="hw-x" onclick="dismissWelcome()" title="Dismiss">\\u2715</span>'
-    +'<h2 class="hw-h2">Welcome to codehere</h2>'
-    +'<div class="hw-lede">Run your coding agents in one place, on a bill that won\\u2019t surprise you, with a record of what each did. All on your machine, no account.</div>'
-    +'<div class="hw-steps">'
-      +'<div class="hw-step"><div class="hw-n">1</div><div class="hw-t">Run a task</div><div class="hw-d">Type a goal below, pick an agent, watch it work.</div></div>'
-      +'<div class="hw-step"><div class="hw-n">2</div><div class="hw-t">Connect a tool</div><div class="hw-d">Turn Linear or GitHub issues into tasks.</div></div>'
-      +'<div class="hw-step"><div class="hw-n">3</div><div class="hw-t">See the bill + record</div><div class="hw-d">Spend and the audit live under Spend &amp; Audit.</div></div>'
-    +'</div>'
-    +'<div class="hw-cta"><button class="hw-btn hw-primary" onclick="welcomeRunTask()">Run your first task</button>'
-      +'<button class="hw-btn hw-ghost" onclick="welcomeConnectTool()">Connect a tool</button>'
-      +'<span class="hw-ptr">cost &amp; record: <b onclick="welcomeOpenSpend()" style="cursor:pointer">Spend &amp; Audit \\u203A</b></span></div>'
-    +'<div class="hw-note" id="hw-note" style="display:none"></div>'
-  +'</div>';
-  el.style.display='block';
-}
-function dismissWelcome(){
-  try{ localStorage.setItem('ch_onboarded','1'); }catch(e){}
-  var el=document.getElementById('home-welcome'); if(el){ el.innerHTML=''; el.style.display='none'; el.removeAttribute('data-rendered'); }
-}
-function welcomeRunTask(){ dismissWelcome(); var ta=document.getElementById('main-ta'); if(ta){ try{ ta.scrollIntoView({behavior:'smooth',block:'center'}); }catch(e){} ta.focus(); } }
-function welcomeOpenSpend(){ if(typeof showSpend==='function') showSpend(); }`;
-//# sourceMappingURL=app-script-onboarding.js.map

package/dist/infrastructure/protocols/ui/app-script-overlay.js

@@ -1,203 +0,0 @@
-/**
- * Overlay renderer — the inspect-and-act panel behind every .ctx-url-chip: fetch what a URL
- * actually resolves to, render it per source, and let the user act on it.
- *
- * Split out of app-script.ts (strangler fig, split 6). Verbatim slice, interpolated back at
- * the position it was cut from so it keeps sharing the surrounding IIFE scope — the Escape
- * handler left behind still calls orClose. Verified by hashing the composed APP_SCRIPT
- * before and after: same bytes.
- */
-export const OVERLAY_RENDERER = `  /* v0.9 S7 · overlay-renderer · inspect-and-act */
-  const orOverlay = document.getElementById('or-overlay');
-  const orBody = document.getElementById('or-body');
-  function orClose(){ orOverlay.classList.remove('open'); }
-  function orSchemeOf(url){ const m = String(url||'').match(/^([a-z][a-z0-9+.-]*):/); return m ? m[1] : '?'; }
-  function orEscape(s){
-    return String(s||'').replace(/[&<>"]/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;'}[c]));
-  }
-  function orRenderLoading(scheme, url){
-    document.getElementById('or-src').textContent = scheme;
-    document.getElementById('or-meta').textContent = '· fetching ' + url;
-    document.getElementById('or-hint').textContent = orComposerHintFor(scheme);
-    document.getElementById('or-input').placeholder = orPlaceholderFor(scheme);
-    orBody.innerHTML = '<div class="preview-loading">fetching from ' + orEscape(scheme) + '…</div>';
-  }
-  function orComposerHintFor(scheme){
-    if(scheme==='linear') return 'Ask the agent about this Linear ticket · all interaction captured in audit chain';
-    if(scheme==='github') return 'Ask the agent about this GitHub issue or PR · all interaction captured';
-    if(scheme==='figma') return 'Ask the agent about this Figma frame · all interaction captured';
-    if(scheme==='drawio') return 'Ask the agent about this diagram · all interaction captured';
-    return 'Ask the agent about this · all interaction captured';
-  }
-  function orPlaceholderFor(scheme){
-    if(scheme==='linear') return "e.g. summarize the blocker · or what's the priority?";
-    if(scheme==='github') return "e.g. what's the discussion about · what changed last comment?";
-    if(scheme==='figma') return "e.g. extract the design tokens · what fields are in the modal?";
-    if(scheme==='drawio') return "e.g. what's the request flow · where does the queue sit?";
-    return 'Ask about this resource…';
-  }
-  function orRenderError(scheme, url, kind, message){
-    let hint = '';
-    if(kind==='auth') hint = 'Open Settings \\u203A Integrations to connect '+scheme+'.';
-    else if(kind==='not_found') hint = 'The resource at '+url+' was not reachable.';
-    else if(kind==='rate_limit') hint = 'The '+scheme+' API is rate-limited · try again in a minute.';
-    else if(kind==='invalid_url') hint = 'codehere has no adapter for that URL scheme.';
-    orBody.innerHTML =
-      '<div class="preview-error">' +
-        '<div>' + orEscape(message) + '</div>' +
-        (hint ? '<div class="hint">' + orEscape(hint) + '</div>' : '') +
-      '</div>';
-  }
-  function orRenderPayload(payload){
-    const meta = payload.metadata || {};
-    document.getElementById('or-meta').textContent =
-      '· ' + (meta.bytes ? meta.bytes + ' bytes' : (payload.estimatedTokens ? '~' + payload.estimatedTokens + ' tokens' : '')) +
-      '  · fetched ' + (payload.fetchedAt || '').slice(11,19);
-    // Per-source structured render · Linear gets the demo v12 authentic
-    // ticket card · everything else falls back to title + meta-pills + plain text.
-    if(payload.source === 'linear'){
-      orBody.innerHTML = orRenderLinear(payload);
-      return;
-    }
-    if(payload.source === 'figma'){
-      orBody.innerHTML = orRenderFigma(payload);
-      return;
-    }
-    if(payload.source === 'drawio'){
-      orBody.innerHTML = orRenderDrawio(payload);
-      return;
-    }
-    const titleCandidate =
-      meta.title || meta.label ||
-      (meta.identifier ? meta.identifier + ' · ' + (meta.title||'') : null) ||
-      payload.url;
-    let pillsHtml = '';
-    if(meta.state){
-      const cls = meta.state === 'open' ? 'state-open' : meta.state === 'closed' ? 'state-closed' : '';
-      pillsHtml += '<span class="pill ' + cls + '">' + orEscape(meta.state) + '</span>';
-    }
-    if(meta.author) pillsHtml += '<span class="pill">@' + orEscape(meta.author) + '</span>';
-    if(meta.assignee) pillsHtml += '<span class="pill">\\u203A ' + orEscape(meta.assignee) + '</span>';
-    if(meta.priorityLabel) pillsHtml += '<span class="pill">' + orEscape(meta.priorityLabel) + '</span>';
-    if(typeof meta.commentCount === 'number') pillsHtml += '<span class="pill">' + meta.commentCount + ' comments</span>';
-    if(typeof meta.cellCount === 'number') pillsHtml += '<span class="pill">' + meta.cellCount + ' cells</span>';
-    if(typeof meta.edgeCount === 'number') pillsHtml += '<span class="pill">' + meta.edgeCount + ' edges</span>';
-    orBody.innerHTML =
-      '<h3>' + orEscape(titleCandidate) + '</h3>' +
-      '<div class="url-row">' + orEscape(payload.url) + '</div>' +
-      (pillsHtml ? '<div class="meta-row">' + pillsHtml + '</div>' : '') +
-      '<div class="preview-text">' + orEscape(payload.text) + '</div>';
-  }
-  function orRenderLinear(payload){
-    const m = payload.metadata || {};
-    const initials = (m.assignee||'').split(/\\s+/).map(w=>w[0]||'').join('').slice(0,2).toUpperCase() || '??';
-    const priCls = (m.priorityLabel||'').toLowerCase().includes('urgent') ? 'linear-pri-urgent' : '';
-    const stateCls = String(m.stateType||m.state||'').toLowerCase().includes('progress') ? 'linear-status-progress' : '';
-    const props = [];
-    if(m.priorityLabel) {
-      props.push('<span class="linear-pill '+priCls+'"><span class="lin-icn linear-pri-bars"><div></div><div></div><div></div></span>'+orEscape(m.priorityLabel)+'</span>');
-    }
-    if(m.state) {
-      props.push('<span class="linear-pill '+stateCls+'"><span class="lin-icn linear-status-circle"></span>'+orEscape(m.state)+'</span>');
-    }
-    if(m.assignee) {
-      props.push('<span class="linear-pill linear-assignee"><span class="av" style="background:#76b7ff">'+orEscape(initials)+'</span>'+orEscape(m.assignee)+'</span>');
-    }
-    const commentsHtml = (m.comments||[]).map(c=>{
-      const ini = (c.author||'').split(/\\s+/).map(w=>w[0]||'').join('').slice(0,2).toUpperCase() || '??';
-      return '<div class="linear-comment">'+
-        '<div class="av">'+orEscape(ini)+'</div>'+
-        '<div class="col">'+
-        '<div class="who">'+orEscape(c.author)+' <span class="ts">'+orEscape((c.createdAt||'').slice(0,10))+'</span></div>'+
-        '<div class="body">'+orEscape(c.body||'')+'</div>'+
-        '</div></div>';
-    }).join('');
-    return '<div class="linear-render">'+
-      '<div class="linear-id">'+orEscape(m.identifier||payload.url)+'</div>'+
-      '<div class="linear-title">'+orEscape(m.title||'(no title)')+'</div>'+
-      (props.length ? '<div class="linear-props">'+props.join('')+'</div>' : '')+
-      (m.description ? '<div class="linear-desc">'+orEscape(m.description.slice(0,800))+'</div>' : '')+
-      (commentsHtml ? '<div class="linear-sep"><span class="lbl">Activity</span><div class="line"></div></div>'+commentsHtml : '')+
-      '</div>';
-  }
-  function orRenderFigma(payload){
-    // Figma is text-only by design · agents read structure, not pixels. The
-    // card surfaces the frame tree (name · dims · first text), never a thumbnail.
-    const m = payload.metadata || {};
-    const frames = Array.isArray(m.frames) ? m.frames : [];
-    const framesHtml = frames.map(function(f){
-      const dim = (typeof f.width === 'number' && typeof f.height === 'number') ? (f.width + '×' + f.height) : '';
-      return '<div class="figma-frame">'+
-        '<span class="figma-frame-name">'+orEscape(f.name||'(frame)')+'</span>'+
-        (dim ? '<span class="figma-frame-dim">'+orEscape(dim)+'</span>' : '')+
-        (f.text ? '<div class="figma-frame-text">'+orEscape(f.text)+'</div>' : '')+
-        '</div>';
-    }).join('');
-    return '<div class="overlay-figma figma-render">'+
-      '<div class="figma-head"><span class="figma-badge">Figma</span>'+
-        '<span class="figma-name">'+orEscape(m.name||m.fileKey||payload.url)+'</span></div>'+
-      '<div class="url-row">'+orEscape(payload.url)+'</div>'+
-      (m.lastModified ? '<div class="figma-meta">updated '+orEscape(String(m.lastModified).slice(0,10))+'</div>' : '')+
-      (frames.length
-        ? '<div class="figma-sep"><span class="lbl">Frames ('+frames.length+')</span><div class="line"></div></div>'+framesHtml
-        : '<div class="figma-note">text-only · no top-level frames in this node</div>')+
-      '<div class="figma-sep"><span class="lbl">Tree</span><div class="line"></div></div>'+
-      '<pre class="figma-tree">'+orEscape(payload.text)+'</pre>'+
-      '</div>';
-  }
-  function orRenderDrawio(payload){
-    // draw.io ships structure + raw XML, never a rendered diagram image. The
-    // card shows the cell/edge/page stats + an XML excerpt · no pixel render.
-    const m = payload.metadata || {};
-    const stat = function(n,label){ return '<div class="drawio-stat"><span class="n">'+(typeof n==='number'?n:'-')+'</span><span class="l">'+label+'</span></div>'; };
-    return '<div class="overlay-drawio drawio-render">'+
-      '<div class="drawio-head"><span class="drawio-badge">draw.io</span>'+
-        '<span class="drawio-name">'+orEscape(m.label||payload.url)+'</span></div>'+
-      '<div class="url-row">'+orEscape(payload.url)+'</div>'+
-      '<div class="drawio-stats">'+
-        stat(m.cellCount,'cells')+stat(m.edgeCount,'edges')+stat(m.pageCount,'pages')+
-        (typeof m.bytes==='number'?stat(m.bytes,'bytes'):'')+
-      '</div>'+
-      '<div class="drawio-sep"><span class="lbl">XML</span><div class="line"></div></div>'+
-      '<pre class="drawio-xml">'+orEscape(payload.text)+'</pre>'+
-      '</div>';
-  }
-  async function openOverlayFor(url){
-    const scheme = orSchemeOf(url);
-    orRenderLoading(scheme, url);
-    orOverlay.classList.add('open');
-    document.getElementById('or-input').value = '';
-    try{
-      const r = await fetch('/api/context-source/preview?url=' + encodeURIComponent(url));
-      const j = await r.json();
-      if(!r.ok || !j.ok){
-        orRenderError(scheme, url, (j && j.kind) || 'unknown', (j && j.error) || ('HTTP ' + r.status));
-        return;
-      }
-      orRenderPayload(j.payload);
-    }catch(err){
-      orRenderError(scheme, url, 'network', (err && err.message) || String(err));
-    }
-  }
-  // Click delegation · any element with .ctx-url-chip + data-url opens the overlay.
-  document.addEventListener('click', (e)=>{
-    const el = (e.target instanceof Element) ? e.target.closest('.ctx-url-chip') : null;
-    if(!el) return;
-    const url = el.getAttribute('data-url') || el.textContent.trim();
-    if(url) openOverlayFor(url);
-  });
-  document.getElementById('or-close')?.addEventListener('click', orClose);
-  orOverlay?.addEventListener('click', e=>{ if(e.target === orOverlay) orClose(); });
-  // Make openOverlayFor reachable by other scripts that want to attach explicit
-  // open buttons (e.g. settings drawer · history rows · adapter examples).
-  window.codehereOpenOverlay = openOverlayFor;
-  // Render a fetched payload into the overlay without a live fetch · used by the
-  // verify-page harness to drive the per-source render branches over a fixture
-  // payload (the same shape the adapter unit fixtures produce).
-  window.codehereRenderOverlayPayload = function(payload){
-    const src = document.getElementById('or-src');
-    if(src) src.textContent = (payload && payload.source) || '?';
-    orOverlay.classList.add('open');
-    orRenderPayload(payload);
-  };`;
-//# sourceMappingURL=app-script-overlay.js.map

package/dist/infrastructure/protocols/ui/app-script-recovery.js

@@ -1,136 +0,0 @@
-/**
- * Recovery actions — stop a running agent, retry, diagnose, resolve, and override a blocked
- * tool call. The buttons on the highest-stakes screen, where a control that narrates an action
- * it did not perform is the worst lie the dashboard can tell.
- *
- * Split out of app-script.ts (strangler fig). Verbatim slice, interpolated back at the
- * position it was cut from so it keeps sharing the surrounding IIFE scope. Verified by
- * hashing the composed APP_SCRIPT before and after: same bytes.
- */
-export const RECOVERY_ACTIONS = `// Thariq loop-1 · the three REAL recovery handlers. Each does what its button
-// says or nothing renders the button as enabled (the recovery-buttons-must-
-// not-lie probe enforces it). Replaces the al() toasts that narrated actions
-// that never happened — a §3 honesty violation on the highest-stakes screen.
-/* S2 · stop a running agent. Success refreshes from the server (the status
-   change is the proof); failure leaves a PERSISTENT plain reason where the
-   button was — never a vanishing toast, never a silent flash of success. */
-async function stopTask(ev, sessionId){
-  if(ev){ ev.stopPropagation(); if(ev.preventDefault) ev.preventDefault(); }
-  const btn=ev && (ev.currentTarget||ev.target);
-  // local escape — the he() helpers are nested in other render scopes and
-  // unreachable here; the acceptance walk caught the failure branch itself
-  // crashing on it ('he is not defined' -> button stuck on 'stopping…').
-  const esc=function(x){ return String(x).replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'); };
-  if(btn){ btn.disabled=true; btn.textContent='stopping\\u2026'; }
-  try{
-    const r=await fetch('/api/task/'+encodeURIComponent(sessionId)+'/kill',{method:'POST'});
-    if(!r.ok){
-      const e=await r.json().catch(function(){return {};});
-      // S13 · the palette calls stopTask with no button — the failure must
-      // still land on screen (toast), never a silent no-op.
-      if(btn) btn.outerHTML='<span class="stop-fail">couldn\\u2019t stop \\u00B7 '+esc(String(e.error||('HTTP '+r.status)))+'</span>';
-      else al('Couldn\\u2019t stop \\u00b7 '+String(e.error||('HTTP '+r.status)));
-      return;
-    }
-    if(btn) btn.textContent='stopped'; else al('\\u25A0 stopped \\u00b7 the run ends as stopped');
-    fetchAll();
-  }catch(e){
-    if(btn) btn.outerHTML='<span class="stop-fail">couldn\\u2019t stop \\u00B7 '+esc(String((e&&e.message)||e))+'</span>';
-    else al('Couldn\\u2019t stop \\u00b7 '+String((e&&e.message)||e));
-  }
-}
-async function recoverRetry(sessionId){
-  const t=findS(sessionId); if(!t||!t.prompt){al('Cannot retry · the original prompt was not recorded');return;}
-  const payload={prompt:t.prompt};
-  if(t.cwd) payload.cwd=t.cwd;
-  if(t.agent && t.agent!=='conductor') payload.agent=t.agent;
-  try{
-    const r=await fetch('/api/task',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(payload)});
-    if(r.ok){ hideD(); fetchAll(); al('Retrying \\u00b7 a fresh agent is respawning on the same prompt'); }
-    else { const e=await r.json().catch(()=>({})); al('Retry failed: '+(e.error||'unknown')); }
-  }catch(e){ al('Retry failed \\u00b7 network error: '+e.message); }
-}
-// S14 · retry a CAUGHT task with the verifier's finding attached. Honest
-// construction only: the respawn prompt is the task's own recorded prompt
-// plus the real finding (claim + reality verbatim) or, when no structured
-// finding exists, the verdict summary. The button that calls this renders
-// only when t.prompt exists — otherwise it is disabled-with-reason (H7).
-async function recoverRetryAttach(sessionId){
-  const t=findS(sessionId); if(!t||!t.prompt){al('Cannot retry \\u00b7 the original prompt was not recorded');return;}
-  const _vr=t.verdict&&t.verdict.claim;
-  const _f=(_vr&&_vr.findings&&_vr.findings[0])||null;
-  let prompt=String(t.prompt);
-  if(_f&&(_f.claim||_f.reality)){
-    prompt+='\\n\\n[verifier finding from the previous run] claim: '+String(_f.claim||'(none recorded)')+' \\u00b7 reality: '+String(_f.reality||'(none recorded)')+' \\u00b7 close this gap and make the claim true before reporting done.';
-  } else if(_vr&&_vr.summary){
-    prompt+='\\n\\n[verifier verdict from the previous run] '+String(_vr.summary)+' \\u00b7 close this gap and make the claim true before reporting done.';
-  }
-  const payload={prompt:prompt};
-  if(t.cwd) payload.cwd=t.cwd;
-  if(t.agent && t.agent!=='conductor') payload.agent=t.agent;
-  try{
-    const r=await fetch('/api/task',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify(payload)});
-    if(r.ok){ hideD(); fetchAll(); al('Retrying with the contradiction attached \\u00b7 a fresh agent is respawning'); }
-    else { const e=await r.json().catch(()=>({})); al('Retry failed: '+(e.error||'unknown')); }
-  }catch(e){ al('Retry failed \\u00b7 network error: '+e.message); }
-}
-function recoverDiagnose(sessionId){
-  // Focus the captured failing step in this detail's timeline — a real move,
-  // not a new view. EVERY per-step card branch (tool-card + write-pass) emits
-  // data-step-failed on a failed step, so an enabled Diagnose always has a
-  // target; the recovery card itself is the guaranteed fallback. The button
-  // NEVER toasts (the refuter caught a write-pass-step path where it did) —
-  // it always scrolls+highlights a real element. (v2: a standalone diagnose.)
-  const el=document.querySelector('[data-step-failed="1"]') || document.querySelector('.recovery-card');
-  if(el){ el.scrollIntoView({behavior:'smooth',block:'center'}); el.style.outline='2px solid var(--accent)'; el.style.outlineOffset='2px'; setTimeout(()=>{el.style.outline='';},2400); }
-}
-async function recoverResolve(sessionId, btn){
-  // A human acknowledgement belongs in the audit chain — write it there
-  // (reusing the override-audit endpoint, the existing human-ack-into-chain
-  // path). On success, badge the card; on failure, say so honestly.
-  try{
-    const r=await fetch('/api/audit/override',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({sessionId,toolName:'recovery',reasonType:'recovery_ack',reason:'recovery: marked resolved by the human'})}).then(x=>x.json()).catch(()=>null);
-    const card=btn&&btn.closest('.recovery-card');
-    if(r&&!r.error&&card){
-      const ack=document.createElement('div'); ack.className='recovery-ack';
-      ack.textContent='\\u2713 acknowledged by you \\u00b7 recorded in the audit chain'+(r.seq!=null?' \\u00b7 #'+r.seq:'');
-      card.appendChild(ack); btn.disabled=true;
-      card.setAttribute('data-verify-recovery','resolved');
-      fetchAll(); // S3 · pull the persisted resolvedAt so the badge is state-backed from now on
-    } else { al('Could not record the acknowledgement'+(r&&r.error?': '+r.error:'')); }
-  }catch(e){ al('Could not record the acknowledgement \\u00b7 network error'); }
-}
-
-// E-03 · user override · reveal a reason input, then POST a real audit entry.
-// Replaces the old al('Override flow goes to v0.8') lie with a real hash-chain
-// append. The returned shortHash is the REAL chain tip, not a mockup.
-function overrideBlock(sessionId, toolName){
-  const actions=document.getElementById('hook-block-actions');
-  if(!actions||actions.dataset.open==='1')return;
-  actions.dataset.open='1';
-  actions.innerHTML='<input id="override-reason" placeholder="Why are you overriding this block?" style="flex:1;background:var(--bg-2,#1a1a1f);border:1px solid var(--border);border-radius:5px;color:var(--fg);padding:6px 8px;font-size:12px"/>'
-    +'<button id="override-submit">Log + proceed</button>'
-    +'<button id="override-cancel">Cancel</button>';
-  const inp=document.getElementById('override-reason'); if(inp)inp.focus();
-  document.getElementById('override-cancel').onclick=()=>{ if(_detail)showD(_detail); };
-  document.getElementById('override-submit').onclick=async()=>{
-    const reason=(document.getElementById('override-reason')||{}).value||'';
-    if(!reason.trim()){ al('A reason is required to log an override'); return; }
-    try{
-      const r=await fetch('/api/audit/override',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({sessionId,toolName,reason})}).then(x=>x.json());
-      const res=document.getElementById('override-result');
-      if(r&&r.ok){
-        actions.innerHTML='';
-        if(res)res.innerHTML='<span class="ok">\\u2713</span> override logged · chain continues <code>'+(r.shortHash||('#'+r.seq))+'</code>';
-      } else { al('Override failed: '+((r&&r.error)||'unknown')); }
-    }catch(e){ al('Network error: '+e.message); }
-  };
-}
-
-async function a(action, id) {
-  // Only 'kill' is a real, wired action today. Pause/resume/restart were
-  // unwired stubs with no callers — removed (production-grade · no dead
-  // "not yet wired" affordances). Re-add when real agent-process control lands.
-  if(action==='kill'){ try{await fetch('/api/task/'+id+'/kill',{method:'POST'});fetchAll();}catch(e){al('Failed: '+e.message);} return; }
-}`;
-//# sourceMappingURL=app-script-recovery.js.map