toolroll 0.5.0

package/dist/templates.d.ts

@@ -0,0 +1,65 @@
+/**
+ * The template library (adoption track, step 2) — common standing orders
+ * shipped as STATIC DATA that renders into editable, UNAPPROVED drafts.
+ *
+ * What a template is: a pre-filled form. What it is not: automation with
+ * authority. Applying one produces exactly the rows a manual filing
+ * produces — through the same one door (proposal.ts), with the same
+ * validators, landing unapproved — and the apply output says so in
+ * capitals, because `--file` must never read as a yes.
+ *
+ * The Codex adoption review (finding 10) drew the v1 line: templates may
+ * express ONLY what a task or routine proposal can carry today. The two
+ * use cases that imply separate authenticated authority — GitHub issue
+ * intake (a grant) and CI babysitting (publish + the repair button) —
+ * ship as RECIPES: they display the existing ceremonies, and cannot be
+ * applied, because a template must never create a grant, enable
+ * autonomous repair, or touch provider configuration.
+ *
+ * Deliberately no versioning story: an applied draft is a COPY. Editing
+ * this library later changes nothing anybody filed.
+ */
+import type { AcceptanceCriterion } from "./scope.js";
+export type TaskTemplate = {
+    kind: "task";
+    name: string;
+    purpose: string;
+    title: string;
+    goal: string;
+    outOfScope: string | null;
+    touches: string[];
+    /** v39: baked in, like every other term — a template ships a signed
+     * rubric because it ships a scope, and a scope-producing road never
+     * gets to omit one. */
+    acceptance: AcceptanceCriterion[];
+    /** The fields most installations change — shown in `show` and preview. */
+    edit: string[];
+};
+export type RoutineTemplate = {
+    kind: "routine";
+    name: string;
+    purpose: string;
+    routineName: string;
+    goal: string;
+    outOfScope: string | null;
+    touches: string[];
+    acceptance: AcceptanceCriterion[];
+    requirements: string[];
+    schedule: string;
+    costCeilingUsd: number | null;
+    edit: string[];
+};
+export type RecipeTemplate = {
+    kind: "recipe";
+    name: string;
+    purpose: string;
+    /** Why this cannot be applied — the authority it would need. */
+    why: string;
+    steps: {
+        say: string;
+        run: string;
+    }[];
+};
+export type Template = TaskTemplate | RoutineTemplate | RecipeTemplate;
+export declare const TEMPLATES: readonly Template[];
+export declare function templateByName(name: string): Template | null;

package/dist/templates.js

@@ -0,0 +1,118 @@
+/**
+ * The template library (adoption track, step 2) — common standing orders
+ * shipped as STATIC DATA that renders into editable, UNAPPROVED drafts.
+ *
+ * What a template is: a pre-filled form. What it is not: automation with
+ * authority. Applying one produces exactly the rows a manual filing
+ * produces — through the same one door (proposal.ts), with the same
+ * validators, landing unapproved — and the apply output says so in
+ * capitals, because `--file` must never read as a yes.
+ *
+ * The Codex adoption review (finding 10) drew the v1 line: templates may
+ * express ONLY what a task or routine proposal can carry today. The two
+ * use cases that imply separate authenticated authority — GitHub issue
+ * intake (a grant) and CI babysitting (publish + the repair button) —
+ * ship as RECIPES: they display the existing ceremonies, and cannot be
+ * applied, because a template must never create a grant, enable
+ * autonomous repair, or touch provider configuration.
+ *
+ * Deliberately no versioning story: an applied draft is a COPY. Editing
+ * this library later changes nothing anybody filed.
+ */
+export const TEMPLATES = [
+    {
+        kind: "routine",
+        name: "nightly-deps",
+        purpose: "keep dependencies fresh without surprise majors",
+        routineName: "nightly-deps",
+        goal: "Update dependencies conservatively: refresh the lockfile within existing semver ranges, run the full test suite, and summarize what moved in the handoff — plus anything notable you saw (majors now available, security advisories, packages that look abandoned). If the suite fails after the refresh, park with the failure rather than pinning things until it passes.",
+        outOfScope: "No major version bumps. No edits to application code beyond what the lockfile refresh itself forces. No changes to CI configuration.",
+        touches: [],
+        acceptance: [
+            { id: "c1", statement: "The full test suite passes against the refreshed lockfile.", how: null, evidence: ["check"] },
+        ],
+        requirements: [],
+        schedule: "daily:03:30",
+        costCeilingUsd: null,
+        edit: ["schedule", "goal (name your package manager if it is unusual)", "ceiling (a weekly dollar cap)"],
+    },
+    {
+        kind: "routine",
+        name: "test-coverage",
+        purpose: "grow the test suite one module at a time",
+        routineName: "test-coverage",
+        goal: "Pick ONE module that is under-tested — no tests at all beats thin tests — and write focused tests for its observable behavior: inputs, outputs, and failure paths, not implementation details. One module per firing, then stop. If the module cannot be tested without refactoring it, do not refactor: park with a note naming the obstacle so a human can decide.",
+        outOfScope: "No refactoring of the code under test. No snapshot tests. No changes outside the chosen module's test file(s).",
+        touches: [],
+        acceptance: [
+            { id: "c1", statement: "The chosen module's new tests pass and exercise inputs, outputs, and failure paths.", how: null, evidence: ["check", "changed-path"] },
+        ],
+        requirements: [],
+        schedule: "daily:05:00",
+        costCeilingUsd: null,
+        edit: ["schedule", "touches (pin the test directory layout if yours is unusual)"],
+    },
+    {
+        kind: "routine",
+        name: "docs-drift",
+        purpose: "keep the README and docs telling the truth weekly",
+        routineName: "docs-drift",
+        goal: "Read the README and any docs/ pages against the code as it is today. Fix what has drifted: commands that moved, flags that changed, features that shipped undocumented, claims that stopped being true. Prefer deleting a stale claim over guessing a new one. Summarize every correction in the handoff.",
+        outOfScope: "No restructuring or rewriting for style. No new documentation pages. No changes to code.",
+        touches: ["README.md", "docs/"],
+        acceptance: [
+            { id: "c1", statement: "Every correction made is named in the handoff.", how: null, evidence: ["manual-review"] },
+        ],
+        requirements: [],
+        schedule: "every:10080",
+        costCeilingUsd: null,
+        edit: ["schedule (every:10080 is weekly)", "touches (add wherever else docs live)"],
+    },
+    {
+        kind: "task",
+        name: "lint-sweep",
+        purpose: "one clean sweep of mechanical violations",
+        title: "One lint-clean sweep",
+        goal: "Run the project's linter and typechecker. Fix every mechanical violation — unused imports, obvious type narrowings, formatting the tools can prove — and nothing judgment-shaped: no renames for taste, no restructuring, no behavior changes. If a rule demands a behavioral fix, list it in the handoff instead of fixing it.",
+        outOfScope: "No behavioral changes. No disabling or reconfiguring rules. No dependency changes.",
+        touches: [],
+        acceptance: [
+            { id: "c1", statement: "The linter and typechecker report no mechanical violations left to fix.", how: null, evidence: ["check"] },
+        ],
+        edit: ["goal (name your lint command if it is not the obvious one)", "touches (fence off generated code)"],
+    },
+    {
+        kind: "recipe",
+        name: "issue-intake",
+        purpose: "labeled GitHub issues become local proposals",
+        why: "Intake needs a GRANT — an authenticated act binding a GitHub repo, a label, and who may be listened to. A template cannot and must not create one.",
+        steps: [
+            {
+                say: "Grant intake for one repo + label (authenticated; restates its terms):",
+                run: "toolroll intake grant --repo <path> --github owner/name --label agent-ok --as <you> --token <t>",
+            },
+            { say: "See what would be imported, creating nothing:", run: "toolroll intake preview --repo <path>" },
+            {
+                say: "Create the missing proposals — local, unapproved, deduped; bodies are never imported:",
+                run: "toolroll intake run --repo <path>",
+            },
+        ],
+    },
+    {
+        kind: "recipe",
+        name: "ci-babysitter",
+        purpose: "watch published PRs and draft repairs when CI goes red",
+        why: "CI repair is deliberately a BUTTON on the run page while an observed red episode is open — one unapproved draft per PR, never an autonomous loop. A template cannot arm it.",
+        steps: [
+            { say: "Publication status and observed check states:", run: "toolroll publish status --repo <path>" },
+            { say: "The ranked review queue (console): observed-passing first, silence labeled as silence:", run: "open /review" },
+            {
+                say: "When a PR's checks are observed red, the run page offers 'draft repair task' — one click files ONE unapproved draft bound to the failing head.",
+                run: "open /r/<run-id>",
+            },
+        ],
+    },
+];
+export function templateByName(name) {
+    return TEMPLATES.find(one => one.name === name) ?? null;
+}

package/dist/tool-launcher.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/tool-launcher.js

@@ -0,0 +1,101 @@
+/**
+ * The launcher a Codex build starts each project tool through (v80):
+ * `node tool-launcher.js <config.json>`. Codex hands its own environment
+ * to the agent's shell whatever `shell_environment_policy` says (checked
+ * against codex-cli 0.156), so a tool's secrets never ride Codex's
+ * environment: they sit in the run's private 0600 file, and this process
+ * gives them to exactly one server — as its environment for a local
+ * program, or as sign-in headers for a web server it relays to over stdio.
+ */
+import { spawn } from "node:child_process";
+import { readFileSync } from "node:fs";
+import { createInterface } from "node:readline";
+function runLocal(spec, values) {
+    const child = spawn(spec.command, spec.args, { env: { ...process.env, ...values }, stdio: "inherit" });
+    const forward = (signal) => { try {
+        child.kill(signal);
+    }
+    catch { /* gone */ } };
+    for (const signal of ["SIGINT", "SIGTERM", "SIGHUP"])
+        process.on(signal, () => forward(signal));
+    child.on("error", error => { process.stderr.write(`the tool could not start: ${error.message}\n`); process.exit(127); });
+    child.on("exit", (code, signal) => process.exit(code ?? (signal === null ? 1 : 128)));
+}
+/** stdio ↔ streamable HTTP: each line from Codex is POSTed; JSON or event-stream answers go back as lines. */
+function relayWeb(spec, values) {
+    const headers = { "content-type": "application/json", accept: "application/json, text/event-stream" };
+    if (spec.bearer !== null && values[spec.bearer])
+        headers["authorization"] = `Bearer ${values[spec.bearer]}`;
+    for (const [header, secret] of Object.entries(spec.headerSecrets))
+        if (values[secret])
+            headers[header] = values[secret];
+    let session = null;
+    let chain = Promise.resolve();
+    const out = (line) => { if (line.trim() !== "")
+        process.stdout.write(`${line.trim()}\n`); };
+    const post = async (line) => {
+        let id = null;
+        try {
+            id = JSON.parse(line).id ?? null;
+        }
+        catch {
+            return;
+        }
+        try {
+            const response = await fetch(spec.url, { method: "POST", headers: { ...headers, ...(session === null ? {} : { "mcp-session-id": session }) }, body: line });
+            session = response.headers.get("mcp-session-id") ?? session;
+            if (response.status === 202 || response.body === null)
+                return;
+            if ((response.headers.get("content-type") ?? "").includes("text/event-stream")) {
+                const reader = response.body.getReader();
+                const decoder = new TextDecoder();
+                let buffer = "";
+                for (;;) {
+                    const { value, done } = await reader.read();
+                    if (done)
+                        break;
+                    buffer += decoder.decode(value, { stream: true });
+                    for (let end = buffer.indexOf("\n"); end >= 0; end = buffer.indexOf("\n")) {
+                        const event = buffer.slice(0, end).replace(/\r$/, "");
+                        buffer = buffer.slice(end + 1);
+                        if (event.startsWith("data:"))
+                            out(event.slice(5));
+                    }
+                }
+                if (buffer.startsWith("data:"))
+                    out(buffer.slice(5));
+            }
+            else {
+                const text = await response.text();
+                if (response.ok)
+                    out(text);
+                else if (id !== null)
+                    out(JSON.stringify({ jsonrpc: "2.0", id, error: { code: -32000, message: `The tool's server answered HTTP ${response.status}.` } }));
+            }
+        }
+        catch {
+            if (id !== null)
+                out(JSON.stringify({ jsonrpc: "2.0", id, error: { code: -32000, message: "The tool's server could not be reached." } }));
+        }
+    };
+    const lines = createInterface({ input: process.stdin });
+    lines.on("line", line => { chain = chain.then(() => post(line)); });
+    lines.on("close", () => { void chain.then(() => process.exit(0)); });
+}
+const file = process.argv[2];
+if (file === undefined) {
+    process.stderr.write("usage: tool-launcher <config.json>\n");
+    process.exit(2);
+}
+let launch;
+try {
+    launch = JSON.parse(readFileSync(file, "utf8"));
+}
+catch {
+    process.stderr.write("the tool's launch settings could not be read\n");
+    process.exit(2);
+}
+if (launch.spec.transport === "http")
+    relayWeb(launch.spec, launch.values);
+else
+    runLocal(launch.spec, launch.values);

package/dist/tools-ui.d.ts

@@ -0,0 +1,30 @@
+/** Settings → Tools: one project's MCP servers, in plain words. Secrets are
+ * entered here and nowhere else, and never shown again. */
+import { type FoundTool, type ProjectTool, type ToolSpec } from "./project-tools.js";
+export declare const TOOLS_CSS = ".tools{max-width:780px;min-width:0;overflow-wrap:anywhere}.tools .card{padding:16px 18px;margin:12px 0;min-width:0}.tools .card h2{font-size:1.05rem;margin:0;color:var(--so-ink);font-weight:600}.tools .tool-heading{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.tools .tool-state{font-size:.85rem;flex-shrink:0;color:var(--so-muted)}.tools .tool-state[data-ready=\"false\"]{color:var(--so-warning)}.tools .card>p{margin:6px 0 0}.tools code{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word;font-size:.85rem}.tools form{display:grid;gap:10px;margin:0}.tools label{display:grid;gap:6px}.tools input,.tools select{box-sizing:border-box;width:100%;max-width:100%;min-width:0}.tools button{justify-self:start;white-space:nowrap;min-height:44px}.tools details:not(.card){margin:6px 0 0;padding:0;border:0;border-radius:0;background:none;box-shadow:none}.tools details:not(.card)>summary{min-height:36px;display:flex;align-items:center;font-size:.9rem;color:var(--so-muted);cursor:pointer}.tools details:not(.card)[open]>summary{color:var(--so-ink)}.tools details.card>summary{cursor:pointer;min-height:44px;display:flex;align-items:center;font-weight:600}.tools summary{list-style:none;gap:10px}.tools summary::-webkit-details-marker{display:none}.tools summary::before{content:\"\";flex-shrink:0;width:6px;height:6px;margin:0 2px;border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;transform:rotate(-45deg);transition:transform .15s}.tools details[open]>summary::before{transform:rotate(45deg)}.tools details:not(.card) form{padding:4px 0 10px}.tools .tool-facts{margin:0 0 8px;display:grid;gap:4px;font-size:.9rem}.tools .tool-facts p{margin:0}.tools .tool-controls{display:flex;gap:12px;flex-wrap:wrap;margin-top:12px}.tools .tool-found{display:flex;gap:10px;align-items:flex-start}.tools .tool-found input{flex:0 0 auto;width:18px;height:18px;margin-top:3px}.tools .tool-found span{min-width:0}.tools .problem{padding:10px 12px;margin:8px 0 0}.tools .tool-connect{scroll-margin-top:72px}.tools .connect-wanted{background:var(--so-accent);color:var(--so-on-accent);border-color:var(--so-accent)}.tools .connect-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(210px,1fr));gap:8px}.tools .connect-tile{display:grid;grid-template-columns:32px 1fr;column-gap:10px;align-items:center;justify-self:stretch;text-align:left;white-space:normal;padding:10px 12px;border:1px solid var(--so-line);border-radius:10px;background:var(--so-paper);color:var(--so-ink);min-height:60px;font:inherit;cursor:pointer;scroll-margin-top:96px}.tools .connect-tile:hover{border-color:var(--so-input-line);background:var(--so-raised)}.tools .connect-tile:target,.tools .connect-tile:focus-visible{outline:2px solid var(--so-accent);outline-offset:2px}.tools .connect-tile i{grid-row:span 2;width:32px;height:32px;border-radius:8px;display:grid;place-items:center;font-style:normal;font-weight:600;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}.tools .connect-tile strong{font-weight:600;line-height:1.3}.tools .connect-tile span{font-size:.8rem;color:var(--so-muted);line-height:1.35;overflow:hidden;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.tools .connect-tile[data-state=\"connected\"] span{color:var(--so-success)}.tools .connect-tile:disabled{cursor:default;opacity:.6}@media(max-width:600px){.tools .connect-grid{grid-template-columns:1fr 1fr}.tools .connect-tile span{display:none}.tools .connect-tile{grid-template-columns:28px 1fr;min-height:52px;padding:8px 10px}.tools .connect-tile i{grid-row:auto;width:28px;height:28px}.tools input,.tools select{font-size:16px}.tools .card{padding:14px}.tools .tool-heading{align-items:flex-start}}";
+export type ToolsView = {
+    repo: string;
+    project: string;
+    /** Services connected by signing in, and the kit a Connect came from, if any. */
+    connections: {
+        id: string;
+        label: string;
+        about: string;
+        state: "connected" | "open" | "taken";
+    }[];
+    kit: string | null;
+    /** The service a link asked for (a kit's checklist, the lead): its own button under the password. */
+    wanted: string | null;
+    tools: {
+        tool: ProjectTool;
+        secretsSet: string[];
+    }[];
+    catalog: (ToolSpec & {
+        label: string;
+    })[];
+    found: FoundTool[];
+};
+export declare function toolsHtml(view: ToolsView, csrf: string, canManage: boolean, message?: {
+    said?: string | null;
+    problem?: string | null;
+}): string;

package/dist/tools-ui.js

@@ -0,0 +1,40 @@
+/** Settings → Tools: one project's MCP servers, in plain words. Secrets are
+ * entered here and nowhere else, and never shown again. */
+import { toolCommandLine, toolStanding } from "./project-tools.js";
+const e = (value) => String(value ?? "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+const hidden = (data) => Object.entries(data).map(([k, v]) => `<input type="hidden" name="${e(k)}" value="${e(v)}">`).join("");
+export const TOOLS_CSS = `.tools{max-width:780px;min-width:0;overflow-wrap:anywhere}.tools .card{padding:16px 18px;margin:12px 0;min-width:0}.tools .card h2{font-size:1.05rem;margin:0;color:var(--so-ink);font-weight:600}.tools .tool-heading{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.tools .tool-state{font-size:.85rem;flex-shrink:0;color:var(--so-muted)}.tools .tool-state[data-ready="false"]{color:var(--so-warning)}.tools .card>p{margin:6px 0 0}.tools code{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word;font-size:.85rem}.tools form{display:grid;gap:10px;margin:0}.tools label{display:grid;gap:6px}.tools input,.tools select{box-sizing:border-box;width:100%;max-width:100%;min-width:0}.tools button{justify-self:start;white-space:nowrap;min-height:44px}.tools details:not(.card){margin:6px 0 0;padding:0;border:0;border-radius:0;background:none;box-shadow:none}.tools details:not(.card)>summary{min-height:36px;display:flex;align-items:center;font-size:.9rem;color:var(--so-muted);cursor:pointer}.tools details:not(.card)[open]>summary{color:var(--so-ink)}.tools details.card>summary{cursor:pointer;min-height:44px;display:flex;align-items:center;font-weight:600}.tools summary{list-style:none;gap:10px}.tools summary::-webkit-details-marker{display:none}.tools summary::before{content:"";flex-shrink:0;width:6px;height:6px;margin:0 2px;border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;transform:rotate(-45deg);transition:transform .15s}.tools details[open]>summary::before{transform:rotate(45deg)}.tools details:not(.card) form{padding:4px 0 10px}.tools .tool-facts{margin:0 0 8px;display:grid;gap:4px;font-size:.9rem}.tools .tool-facts p{margin:0}.tools .tool-controls{display:flex;gap:12px;flex-wrap:wrap;margin-top:12px}.tools .tool-found{display:flex;gap:10px;align-items:flex-start}.tools .tool-found input{flex:0 0 auto;width:18px;height:18px;margin-top:3px}.tools .tool-found span{min-width:0}.tools .problem{padding:10px 12px;margin:8px 0 0}.tools .tool-connect{scroll-margin-top:72px}.tools .connect-wanted{background:var(--so-accent);color:var(--so-on-accent);border-color:var(--so-accent)}.tools .connect-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(210px,1fr));gap:8px}.tools .connect-tile{display:grid;grid-template-columns:32px 1fr;column-gap:10px;align-items:center;justify-self:stretch;text-align:left;white-space:normal;padding:10px 12px;border:1px solid var(--so-line);border-radius:10px;background:var(--so-paper);color:var(--so-ink);min-height:60px;font:inherit;cursor:pointer;scroll-margin-top:96px}.tools .connect-tile:hover{border-color:var(--so-input-line);background:var(--so-raised)}.tools .connect-tile:target,.tools .connect-tile:focus-visible{outline:2px solid var(--so-accent);outline-offset:2px}.tools .connect-tile i{grid-row:span 2;width:32px;height:32px;border-radius:8px;display:grid;place-items:center;font-style:normal;font-weight:600;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}.tools .connect-tile strong{font-weight:600;line-height:1.3}.tools .connect-tile span{font-size:.8rem;color:var(--so-muted);line-height:1.35;overflow:hidden;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.tools .connect-tile[data-state="connected"] span{color:var(--so-success)}.tools .connect-tile:disabled{cursor:default;opacity:.6}@media(max-width:600px){.tools .connect-grid{grid-template-columns:1fr 1fr}.tools .connect-tile span{display:none}.tools .connect-tile{grid-template-columns:28px 1fr;min-height:52px;padding:8px 10px}.tools .connect-tile i{grid-row:auto;width:28px;height:28px}.tools input,.tools select{font-size:16px}.tools .card{padding:14px}.tools .tool-heading{align-items:flex-start}}`;
+const password = '<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label>';
+function toolCard(one, base, manage) {
+    const { tool, secretsSet } = one;
+    const standing = toolStanding(tool, secretsSet);
+    // One line per secret: the disclosure is both where it stands and where it is set.
+    const secrets = manage ? tool.spec.secrets.map(secret => {
+        const set = secretsSet.includes(secret.name);
+        return `<details><summary>${set ? `Replace ${e(secret.name)}` : `Set ${e(secret.name)}${secret.optional ? " (optional)" : ""}`}</summary><form method="post" action="/settings/tools/change">${hidden({ ...base, action: "secret", name: tool.name, secret: secret.name })}<label>${e(secret.name)}<input type="password" name="value" autocomplete="off" required></label>${password}<button>Save</button></form></details>`;
+    }).join("") : "";
+    const tested = tool.lastTest?.ok ? `<p>Tested ${e(tool.lastTest.at.slice(0, 16).replace("T", " "))} UTC: ${e(tool.lastTest.tools.join(", ") || "it lists no tools")}</p>` : "";
+    const details = `<details><summary>Details</summary><div class="tool-facts"><p>Starts: <code>${e(toolCommandLine(tool.spec))}</code></p><p>From ${e(tool.source)} · added by ${e(tool.createdBy)}</p>${tested}</div></details>`;
+    const failed = tool.lastTest !== null && !tool.lastTest.ok ? `<p class="problem" role="status">${e(tool.lastTest.problem ?? "The last test failed.")}</p>` : "";
+    const controls = manage ? `<div class="tool-controls"><form method="post" action="/settings/tools/change">${hidden({ ...base, action: "test", name: tool.name })}<button>Test</button></form><form method="post" action="/settings/tools/change">${hidden({ ...base, action: "remove", name: tool.name })}<button class="secondary">Remove</button></form></div>` : "";
+    return `<article class="card" id="tool-${e(tool.name)}"><div class="tool-heading"><h2>${e(tool.name)}</h2><span class="tool-state" data-ready="${standing.ready}">${e(standing.words)}</span></div><p>${e(tool.spec.about)}</p>${failed}${secrets}${details}${controls}</article>`;
+}
+export function toolsHtml(view, csrf, canManage, message = {}) {
+    const manage = canManage && csrf !== "";
+    const base = { csrf, repo: view.repo };
+    const intro = `<p>Builds in ${e(view.project)} use exactly these tools. MCP servers set up elsewhere on this computer aren't used.</p><details><summary>How tools work</summary><ul><li>A tool you add reaches work you approve from now on. Approve a task again to give it a new tool.</li><li>Removing a tool takes it away from every build right away.</li><li>Secrets stay on this computer, are never shown again, and go only to the tool that needs them.</li><li>Reviewers and the lead chat never get tools. Gemini builds don't use tools yet.</li></ul></details>`;
+    const cards = view.tools.length === 0 ? '<p class="meta">No tools yet. Builds in this project get none.</p>' : view.tools.map(one => toolCard(one, base, manage)).join("");
+    const fromList = view.catalog.length === 0 ? "" : `<form method="post" action="/settings/tools/change">${hidden({ ...base, action: "add-catalog" })}<label>Common tools<select name="catalog">${view.catalog.map(one => `<option value="${e(one.name)}">${e(one.label)}: ${e(one.about)}</option>`).join("")}</select></label>${password}<button>Add</button></form>`;
+    const custom = `<details><summary>Add your own</summary><form method="post" action="/settings/tools/change">${hidden({ ...base, action: "add-custom" })}<label>Name<input name="name" pattern="[a-z0-9][a-z0-9_\\-]{0,39}" maxlength="40" required placeholder="for example: postgres"></label><label>It runs as<select name="transport"><option value="stdio">A program on this computer</option><option value="http">A web address</option></select></label><label>Command or address<input name="target" required placeholder="npx -y some-mcp-server@1.2.3, or https://…"></label><label>Secrets it needs (names, comma separated)<input name="secrets" placeholder="for example: DATABASE_URL"></label><p class="meta">For a web address, the first secret is sent as its sign-in token. Set each secret's value after adding.</p>${password}<button>Add</button></form></details>`;
+    // One click: sign in on the service's own page. The password is the same as for adding any tool.
+    const tiles = view.connections.map(one => one.state === "taken"
+        ? `<button type="button" class="connect-tile" id="connect-${e(one.id)}" data-state="taken" disabled><i aria-hidden="true">${e(one.label.charAt(0))}</i><strong>${e(one.label)}</strong><span>Added another way</span></button>`
+        : `<button name="service" value="${e(one.id)}" class="connect-tile" id="connect-${e(one.id)}" data-state="${one.state}"${one.state === "connected" ? ` aria-label="${e(one.label)}, connected. Sign in again"` : ""}><i aria-hidden="true">${e(one.label.charAt(0))}</i><strong>${e(one.label)}</strong><span>${one.state === "connected" ? "Connected" : e(one.about)}</span></button>`).join("");
+    const wanted = view.connections.find(one => one.id === view.wanted && one.state !== "taken");
+    const first = wanted === undefined ? "" : `<button name="service" value="${e(wanted.id)}" class="connect-wanted">${wanted.state === "connected" ? `Sign in to ${e(wanted.label)} again` : `Connect ${e(wanted.label)}`}</button>`;
+    const connect = manage && view.connections.length > 0 ? `<section class="card tool-connect" id="connect" aria-labelledby="connect-heading"><h2 id="connect-heading">Connect with one click</h2><form method="post" action="/settings/tools/connect">${hidden({ ...base, ...(view.kit === null ? {} : { kit: view.kit }) })}${password}${first}<div class="connect-grid">${tiles}</div></form></section>` : "";
+    const add = manage ? `<details class="card"${view.tools.length === 0 ? " open" : ""}><summary>Add a tool</summary>${fromList}${custom}</details>` : "";
+    const found = manage && view.found.length > 0 ? `<details class="card"><summary>Found on this computer (${view.found.length})</summary><p class="meta">MCP servers your other apps use. Adding one copies its settings, and any secrets it has, into this project.</p><form method="post" action="/settings/tools/change">${hidden({ ...base, action: "import" })}${view.found.map(one => `<label class="tool-found"><input type="checkbox" name="import" value="${e(one.spec.name)}"><span><strong>${e(one.spec.name)}</strong> · ${e(one.source)}<br><code>${e(toolCommandLine(one.spec))}</code>${one.spec.secrets.length === 0 ? "" : `<br><span class="meta">Brings ${e(one.spec.secrets.map(s => s.name).join(", "))}</span>`}</span></label>`).join("")}${password}<button>Add selected</button></form></details>` : "";
+    const note = message.problem ? `<p class="problem" role="alert">${e(message.problem)}</p>` : message.said ? `<p role="status">${e(message.said)}</p>` : "";
+    return `<section class="tools">${note}${intro}${cards}${connect}${add}${found}</section>`;
+}

package/dist/transitions-recipes.d.ts

@@ -0,0 +1 @@
+export declare const TRANSITIONS_CSS = "\n/* Transitions.dev \u2014 05-menu-dropdown.md */\n:root {\n  --dropdown-open-dur: 250ms;\n  --dropdown-close-dur: 150ms;\n  --dropdown-pre-scale: 0.97;\n  --dropdown-closing-scale: 0.99;\n  --dropdown-ease: cubic-bezier(0.22, 1, 0.36, 1);\n}\n\n.t-dropdown {\n  transform-origin: top left;\n  transform: scale(var(--dropdown-pre-scale));\n  opacity: 0;\n  pointer-events: none;\n  transition:\n    transform var(--dropdown-open-dur) var(--dropdown-ease),\n    opacity   var(--dropdown-open-dur) var(--dropdown-ease);\n  will-change: transform, opacity;\n}\n.t-dropdown[data-origin=\"top-right\"]     { transform-origin: top right; }\n.t-dropdown[data-origin=\"top-center\"]    { transform-origin: top center; }\n.t-dropdown[data-origin=\"bottom-left\"]   { transform-origin: bottom left; }\n.t-dropdown[data-origin=\"bottom-center\"] { transform-origin: bottom center; }\n.t-dropdown[data-origin=\"bottom-right\"]  { transform-origin: bottom right; }\n\n.t-dropdown.is-open {\n  transform: scale(1);\n  opacity: 1;\n  pointer-events: auto;\n}\n.t-dropdown.is-closing {\n  transform: scale(var(--dropdown-closing-scale));\n  opacity: 0;\n  pointer-events: none;\n  transition:\n    transform var(--dropdown-close-dur) var(--dropdown-ease),\n    opacity   var(--dropdown-close-dur) var(--dropdown-ease);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .t-dropdown { transition: none !important; }\n}\n\n/* Transitions.dev \u2014 07-panel-reveal.md */\n:root {\n  --panel-open-dur: 400ms;\n  --panel-close-dur: 350ms;\n  --panel-translate-y: 100px;\n  --panel-blur: 2px;\n  --panel-ease: cubic-bezier(0.22, 1, 0.36, 1);\n}\n\n.t-panel-slide {\n  transform: translateY(var(--panel-translate-y));\n  opacity: 0;\n  filter: blur(var(--panel-blur));\n  pointer-events: none;\n  transition:\n    transform var(--panel-close-dur) var(--panel-ease),\n    opacity   var(--panel-close-dur) var(--panel-ease),\n    filter    var(--panel-close-dur) var(--panel-ease);\n  will-change: transform, opacity, filter;\n}\n.t-panel-slide[data-open=\"true\"] {\n  transform: translateY(0);\n  opacity: 1;\n  filter: blur(0);\n  pointer-events: auto;\n  transition:\n    transform var(--panel-open-dur) var(--panel-ease),\n    opacity   var(--panel-open-dur) var(--panel-ease),\n    filter    var(--panel-open-dur) var(--panel-ease);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .t-panel-slide { transition: none !important; }\n}\n\n/* Transitions.dev \u2014 16-tabs-sliding.md */\n:root {\n  --tabs-dur: 250ms;\n  --tabs-ease: cubic-bezier(0.22, 1, 0.36, 1);\n  --tabs-text-muted: rgba(15, 15, 15, 0.8);\n  --tabs-text-active: #0f0f0f;\n  --tabs-bar-bg: #f1f1f1;\n  --tabs-pill-bg: #ffffff;\n}\n\n/* The bar is just a flex container with padding for the pill\n   to sit inside. Tabs sit on z-index: 1, the pill on z-index: 0,\n   so labels read above the pill background. */\n.t-tabs {\n  position: relative;\n  display: inline-flex;\n  align-items: center;\n  gap: 3px;\n  padding: 3px;\n  border-radius: 48px;\n  background: var(--tabs-bar-bg);\n}\n.t-tab {\n  position: relative;\n  appearance: none;\n  border: 0;\n  background: transparent;\n  height: 30px;\n  padding: 4px 12px;\n  color: var(--tabs-text-muted);\n  cursor: pointer;\n  border-radius: 48px;\n  z-index: 1;\n  transition: color var(--tabs-dur) var(--tabs-ease);\n}\n.t-tab:not([aria-selected=\"true\"]):hover,\n.t-tab[aria-selected=\"true\"] {\n  color: var(--tabs-text-active);\n}\n\n/* The pill: width + transform are written inline by JS so\n   the transition tweens between the previous and next\n   measured positions. */\n.t-tabs-pill {\n  position: absolute;\n  top: 3px;\n  left: 0;\n  height: 30px;\n  width: 0;\n  background: var(--tabs-pill-bg);\n  border-radius: 48px;\n  transform: translateX(0);\n  transition:\n    transform var(--tabs-dur) var(--tabs-ease),\n    width     var(--tabs-dur) var(--tabs-ease);\n  will-change: transform, width;\n  z-index: 0;\n  pointer-events: none;\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .t-tabs-pill, .t-tab { transition: none !important; }\n}\n\n/* Transitions.dev \u2014 21-accordion.md */\n:root {\n  --acc-expand: 250ms;\n  --acc-collapse: 250ms;\n  --acc-chevron: 250ms;\n  --acc-ease: cubic-bezier(0.22, 1, 0.36, 1);\n}\n\n/* grid-template-rows 0fr \u2192 1fr gives a clean height animation\n   with no JS measurement; the inner element clips overflow. */\n.t-acc-panel {\n  display: grid;\n  grid-template-rows: 0fr;\n  transition: grid-template-rows var(--acc-collapse) var(--acc-ease);\n}\n.t-acc[data-open=\"true\"] .t-acc-panel {\n  grid-template-rows: 1fr;\n  transition: grid-template-rows var(--acc-expand) var(--acc-ease);\n}\n.t-acc-panel-inner {\n  overflow: hidden;\n  opacity: 0;\n  filter: blur(2px);\n  transition:\n    opacity var(--acc-collapse) var(--acc-ease),\n    filter var(--acc-collapse) var(--acc-ease);\n}\n.t-acc[data-open=\"true\"] .t-acc-panel-inner {\n  opacity: 1;\n  filter: blur(0);\n  transition:\n    opacity var(--acc-expand) var(--acc-ease),\n    filter var(--acc-expand) var(--acc-ease);\n}\n/* Flip the chevron vertically to turn the \"v\" into a \"^\".\n   scaleY(-1) about the centre passes through a flat line at\n   the midpoint (same look as a `d:` path morph) but animates\n   in every browser, unlike CSS `d:` morphing (Chromium only).\n   The chevron path is symmetric about the 16x16 viewBox\n   centre, so the flip lands exactly on the \"^\"; non-scaling\n   -stroke keeps the stroke width constant through the flip. */\n.t-acc-chevron {\n  display: inline-flex;\n  transform: scaleY(1);\n  transform-origin: center;\n  transition: transform var(--acc-chevron) var(--acc-ease);\n}\n.t-acc-chevron path { vector-effect: non-scaling-stroke; }\n.t-acc[data-open=\"true\"] .t-acc-chevron {\n  transform: scaleY(-1);\n}\n\n@media (prefers-reduced-motion: reduce) {\n  .t-acc-panel, .t-acc-panel-inner, .t-acc-chevron {\n    transition: none !important;\n  }\n}\n";

package/dist/transitions-recipes.js

@@ -0,0 +1,203 @@
+// Selected portable recipes from https://github.com/Jakubantalik/transitions.dev
+// Keep recipe CSS intact; Toolroll overrides and wiring live separately.
+export const TRANSITIONS_CSS = `
+/* Transitions.dev — 05-menu-dropdown.md */
+:root {
+  --dropdown-open-dur: 250ms;
+  --dropdown-close-dur: 150ms;
+  --dropdown-pre-scale: 0.97;
+  --dropdown-closing-scale: 0.99;
+  --dropdown-ease: cubic-bezier(0.22, 1, 0.36, 1);
+}
+
+.t-dropdown {
+  transform-origin: top left;
+  transform: scale(var(--dropdown-pre-scale));
+  opacity: 0;
+  pointer-events: none;
+  transition:
+    transform var(--dropdown-open-dur) var(--dropdown-ease),
+    opacity   var(--dropdown-open-dur) var(--dropdown-ease);
+  will-change: transform, opacity;
+}
+.t-dropdown[data-origin="top-right"]     { transform-origin: top right; }
+.t-dropdown[data-origin="top-center"]    { transform-origin: top center; }
+.t-dropdown[data-origin="bottom-left"]   { transform-origin: bottom left; }
+.t-dropdown[data-origin="bottom-center"] { transform-origin: bottom center; }
+.t-dropdown[data-origin="bottom-right"]  { transform-origin: bottom right; }
+
+.t-dropdown.is-open {
+  transform: scale(1);
+  opacity: 1;
+  pointer-events: auto;
+}
+.t-dropdown.is-closing {
+  transform: scale(var(--dropdown-closing-scale));
+  opacity: 0;
+  pointer-events: none;
+  transition:
+    transform var(--dropdown-close-dur) var(--dropdown-ease),
+    opacity   var(--dropdown-close-dur) var(--dropdown-ease);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .t-dropdown { transition: none !important; }
+}
+
+/* Transitions.dev — 07-panel-reveal.md */
+:root {
+  --panel-open-dur: 400ms;
+  --panel-close-dur: 350ms;
+  --panel-translate-y: 100px;
+  --panel-blur: 2px;
+  --panel-ease: cubic-bezier(0.22, 1, 0.36, 1);
+}
+
+.t-panel-slide {
+  transform: translateY(var(--panel-translate-y));
+  opacity: 0;
+  filter: blur(var(--panel-blur));
+  pointer-events: none;
+  transition:
+    transform var(--panel-close-dur) var(--panel-ease),
+    opacity   var(--panel-close-dur) var(--panel-ease),
+    filter    var(--panel-close-dur) var(--panel-ease);
+  will-change: transform, opacity, filter;
+}
+.t-panel-slide[data-open="true"] {
+  transform: translateY(0);
+  opacity: 1;
+  filter: blur(0);
+  pointer-events: auto;
+  transition:
+    transform var(--panel-open-dur) var(--panel-ease),
+    opacity   var(--panel-open-dur) var(--panel-ease),
+    filter    var(--panel-open-dur) var(--panel-ease);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .t-panel-slide { transition: none !important; }
+}
+
+/* Transitions.dev — 16-tabs-sliding.md */
+:root {
+  --tabs-dur: 250ms;
+  --tabs-ease: cubic-bezier(0.22, 1, 0.36, 1);
+  --tabs-text-muted: rgba(15, 15, 15, 0.8);
+  --tabs-text-active: #0f0f0f;
+  --tabs-bar-bg: #f1f1f1;
+  --tabs-pill-bg: #ffffff;
+}
+
+/* The bar is just a flex container with padding for the pill
+   to sit inside. Tabs sit on z-index: 1, the pill on z-index: 0,
+   so labels read above the pill background. */
+.t-tabs {
+  position: relative;
+  display: inline-flex;
+  align-items: center;
+  gap: 3px;
+  padding: 3px;
+  border-radius: 48px;
+  background: var(--tabs-bar-bg);
+}
+.t-tab {
+  position: relative;
+  appearance: none;
+  border: 0;
+  background: transparent;
+  height: 30px;
+  padding: 4px 12px;
+  color: var(--tabs-text-muted);
+  cursor: pointer;
+  border-radius: 48px;
+  z-index: 1;
+  transition: color var(--tabs-dur) var(--tabs-ease);
+}
+.t-tab:not([aria-selected="true"]):hover,
+.t-tab[aria-selected="true"] {
+  color: var(--tabs-text-active);
+}
+
+/* The pill: width + transform are written inline by JS so
+   the transition tweens between the previous and next
+   measured positions. */
+.t-tabs-pill {
+  position: absolute;
+  top: 3px;
+  left: 0;
+  height: 30px;
+  width: 0;
+  background: var(--tabs-pill-bg);
+  border-radius: 48px;
+  transform: translateX(0);
+  transition:
+    transform var(--tabs-dur) var(--tabs-ease),
+    width     var(--tabs-dur) var(--tabs-ease);
+  will-change: transform, width;
+  z-index: 0;
+  pointer-events: none;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .t-tabs-pill, .t-tab { transition: none !important; }
+}
+
+/* Transitions.dev — 21-accordion.md */
+:root {
+  --acc-expand: 250ms;
+  --acc-collapse: 250ms;
+  --acc-chevron: 250ms;
+  --acc-ease: cubic-bezier(0.22, 1, 0.36, 1);
+}
+
+/* grid-template-rows 0fr → 1fr gives a clean height animation
+   with no JS measurement; the inner element clips overflow. */
+.t-acc-panel {
+  display: grid;
+  grid-template-rows: 0fr;
+  transition: grid-template-rows var(--acc-collapse) var(--acc-ease);
+}
+.t-acc[data-open="true"] .t-acc-panel {
+  grid-template-rows: 1fr;
+  transition: grid-template-rows var(--acc-expand) var(--acc-ease);
+}
+.t-acc-panel-inner {
+  overflow: hidden;
+  opacity: 0;
+  filter: blur(2px);
+  transition:
+    opacity var(--acc-collapse) var(--acc-ease),
+    filter var(--acc-collapse) var(--acc-ease);
+}
+.t-acc[data-open="true"] .t-acc-panel-inner {
+  opacity: 1;
+  filter: blur(0);
+  transition:
+    opacity var(--acc-expand) var(--acc-ease),
+    filter var(--acc-expand) var(--acc-ease);
+}
+/* Flip the chevron vertically to turn the "v" into a "^".
+   scaleY(-1) about the centre passes through a flat line at
+   the midpoint (same look as a \`d:\` path morph) but animates
+   in every browser, unlike CSS \`d:\` morphing (Chromium only).
+   The chevron path is symmetric about the 16x16 viewBox
+   centre, so the flip lands exactly on the "^"; non-scaling
+   -stroke keeps the stroke width constant through the flip. */
+.t-acc-chevron {
+  display: inline-flex;
+  transform: scaleY(1);
+  transform-origin: center;
+  transition: transform var(--acc-chevron) var(--acc-ease);
+}
+.t-acc-chevron path { vector-effect: non-scaling-stroke; }
+.t-acc[data-open="true"] .t-acc-chevron {
+  transform: scaleY(-1);
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .t-acc-panel, .t-acc-panel-inner, .t-acc-chevron {
+    transition: none !important;
+  }
+}
+`;

package/dist/tree-proof.d.ts

@@ -0,0 +1,34 @@
+/**
+ * The read-only roles' clean-tree proof (planner, scout — mate arc §10,
+ * v4 review finding 4). `git status --porcelain` alone is not a proof: it
+ * omits IGNORED paths, so an agent could leave a generated file behind
+ * and pass; and a pathname filter that exempts the protocol files
+ * regardless of index status would let an agent `git add` its own
+ * handoff and pass with a dirty index. So: ignored paths are snapshotted
+ * BEFORE the agent runs and any new one afterwards is foreign; and a
+ * protocol file is admitted only as plain untracked (`??`) — staged is
+ * foreign. Ignored directories are collapsed by git (`!! build/`), so a
+ * write INTO a directory that was already ignored before the agent ran
+ * (a dependency tree the setup command produced) is not detected — that
+ * residual is stated here rather than wished away.
+ */
+import type { Runner } from "./builder.js";
+/** The ignored paths git reports right now — the "before" of a proof. */
+export declare function snapshotIgnored(git: Runner, cwd: string): Promise<Set<string> | null>;
+export type TreeProof = {
+    ok: true;
+} | {
+    ok: false;
+    reason: "git" | "dirty-tree";
+    foreign: string[];
+};
+/**
+ * Everything in the tree that is not (a) an ignored path that was already
+ * ignored before, (b) one of this attempt's own protocol files as PLAIN
+ * untracked, or (c) the pool's untracked lease marker.
+ */
+export declare function proveTreeUntouched(git: Runner, cwd: string, args: {
+    ignoredBefore: ReadonlySet<string>;
+    protocolFiles: readonly string[];
+    marker: string;
+}): Promise<TreeProof>;