toolroll 0.9.103 → 0.9.105

package/dist/settings-groups-ui.js

@@ -1,13 +1,3 @@
-/**
- * Settings: the overview and its group pages, in the revamp kit (src/design/KIT.md; the owner-approved prototype's
- * Settings area, docs/plans/settings-revamp.md §3). Server HTML only: every form posts to the route and fields it
- * posted to before, under its proof inventory row (settings-proofs.ts), and the kit's section forms
- * (settings-kit.ts kitSectionForm) save one section at a time. Nothing here reads a request or decides an act; the
- * page that calls it has already dropped what this person can't use, and every handler proves the act again.
- *
- * Groups (design/kit.ts SETTINGS_GROUPS): General, Agents and models, Chat apps and alerts, Approvals and safety,
- * Projects, People and sign-in, Spend (its own page, /spend), System.
- */
 import { ACCENT_PRESETS, accentNote } from "./accent-colors.js";
 import {} from "./browser-workspace.js";
 import { SETTINGS_GROUP_ICONS, SETTINGS_GROUPS, plural } from "./design/kit.js";
@@ -18,25 +8,23 @@ import {} from "./scope.js";
 import { qualityModeTitle } from "./quality.js";
 import {} from "./store.js";
 import { kitSectionForm, SECRET_OPT_OUTS } from "./settings-kit.js";
+import { ADVANCED_PAGES } from "./advanced-view.js";
 import { btn, chip, codeLine, disclose, formRow, infoLine, input, needsPanel, note, notice, radios, select, settingsLink, settingsLinks, settingsRecord, settingsSection, settingsShell, switchInput, } from "./server/kit.js";
-/** The group pages this module draws (Spend is /spend; Approvals and safety is /settings/approval, its own handler). */
 export const GROUP_PATHS = {
     "/settings": "hub", "/settings/general": "general", "/settings/agents": "agents", "/settings/alerts": "alerts",
-    "/settings/projects": "projects", "/settings/access": "access", "/settings/system": "system",
+    "/settings/projects": "projects", "/settings/access": "access", "/settings/system": "system", "/settings/advanced": "advanced",
 };
 const CHAT_APPS = [["telegram", "Telegram"], ["slack", "Slack"], ["discord", "Discord"], ["teams", "Teams"]];
 const and = (names) => names.length > 1 ? `${names.slice(0, -1).join(", ")} and ${names.at(-1)}` : names[0] ?? "";
 const groupHref = (slug) => SETTINGS_GROUPS.find(([, one]) => one === slug)?.[2] ?? "/settings";
 const groupLabel = (slug) => SETTINGS_GROUPS.find(([, one]) => one === slug)?.[0] ?? "Settings";
 const sentence = (text) => text === "" ? text : `${text.charAt(0).toUpperCase()}${text.slice(1)}`;
-/** A notice the handler sent back with the page (?said= or ?problem=), in place under the page's lead. */
 const answered = (facts) => facts.problem ? notice(sentence(facts.problem)) : facts.said ? infoLine(sentence(facts.said)) : html ``;
-/** What waits on this person in Settings (never a task): no builder, a chat app failing, a failed backup. Read-only. */
 export function settingsNeeds(facts) {
     const out = [];
     if (facts.workers !== null && facts.approver && !facts.workers.some(one => one.tone === "ok")) {
-        out.push({ group: "agents", title: facts.workers.length === 0 ? "No builder is connected" : "No builder is connected right now",
-            text: "Approved work waits until a computer builds it. Run toolroll up on the computer with your projects.", action: ["Open builders", "/settings/agents#workers"] });
+        out.push({ group: "agents", title: facts.workers.length === 0 ? "Nothing is taking work" : "Nothing is taking work right now",
+            text: "Approved work waits until a computer builds it. Run toolroll up on the computer with your projects.", action: ["Start taking work", "/settings/agents#workers"] });
     }
     if (facts.telegram.failing)
         out.push({ group: "alerts", title: "Telegram isn’t delivering", text: facts.telegram.delivery ?? "Alerts to your phone are failing.", action: ["Open Telegram", "/settings/telegram"] });
@@ -44,7 +32,6 @@ export function settingsNeeds(facts) {
         out.push({ group: "system", title: "The last backup failed", text: facts.backup.words, action: ["Open backups", "/settings/backups"] });
     return out;
 }
-/** Which groups have something waiting, for the section nav's dot and the overview's rows. */
 export function needsByGroup(items) {
     const out = {};
     for (const item of items)
@@ -52,13 +39,12 @@ export function needsByGroup(items) {
     return out;
 }
 const flagsOf = (counts) => Object.fromEntries(Object.keys(counts).map(key => [key, true]));
-// ---- the overview -----------------------------------------------------------------------------------------------
 const themeWords = (theme) => theme === "light" ? "Light" : theme === "dark" ? "Dark" : "Match this device";
 function agentsWords(facts) {
     const signed = facts.providers?.find(one => one.connection !== null && one.tone === "ok") ?? facts.providers?.find(one => one.tone === "ok");
     const builders = facts.workers === null ? null : facts.workers.filter(one => one.tone === "ok").length;
-    return [signed ? `${signed.name}: ${signed.words}` : facts.providers === null ? "Models, the lead, tools and knowledge" : "No agent signed in yet",
-        builders === null ? null : builders === 0 ? "no builder connected" : `${plural(builders, "builder", "builders")} connected`].filter(Boolean).join(" · ");
+    return [signed ? `${signed.name}: ${signed.words}` : facts.providers === null ? "Models, chat and tools" : "No agent signed in yet",
+        builders === null ? null : builders === 0 ? "not taking work yet" : "taking work"].filter(Boolean).join(" · ");
 }
 function alertsWords(facts) {
     const configured = facts.messaging?.configured ?? [];
@@ -70,12 +56,12 @@ function alertsWords(facts) {
 }
 function approvalWords(facts) {
     return [facts.permission ? `New tasks: ${facts.permission.mode === "bypassPermissions" ? "Full access" : "Auto"}` : null,
-        facts.quality ? `${qualityModeTitle(facts.quality.mode)} quality` : null, "operating modes, policy and approval rules"].filter(Boolean).join(" · ");
+        facts.quality ? `${qualityModeTitle(facts.quality.mode)} quality` : null, "Who approves, and what runs without asking"].filter(Boolean).join(" · ");
 }
 function accessWords(facts) {
     const people = facts.people === null ? null : [facts.people.approvers.length ? `${and(facts.people.approvers)} can manage and approve` : "",
         facts.people.viewers.length ? `${and(facts.people.viewers)} can view` : ""].filter(Boolean).join(" · ");
-    return [people || "Your sessions and API tokens", facts.passwordless === null ? null : facts.passwordless ? "Passwordless on" : "Passwordless off"].filter(Boolean).join(" · ");
+    return [people || "Who can get in", facts.passwordless === null || passwordFree(facts) ? null : facts.passwordless ? "Passwordless on" : "Passwordless off"].filter(Boolean).join(" · ");
 }
 function systemWords(facts) {
     const latest = facts.updates?.latest;
@@ -83,11 +69,6 @@ function systemWords(facts) {
         : latest !== null && latest?.newer ? `Toolroll ${facts.updates.current} · ${latest.version} is available` : `Toolroll ${facts.updates.current}`;
     return [facts.backup?.failed ? "The last backup failed" : null, version, "backups, storage, retention, monitoring"].filter(Boolean).join(" · ");
 }
-/** The overview: what waits on this person, then one row per group with its state. Viewers see the groups they can open. */
-/**
- * Easy-start C5: local mode, said once. The local owner without a password is offered the one way to more ("Let agents
- * work on their own" → /password/set); a full session of an operator sees it on, and can turn it off (a step-up, confirmed).
- */
 function localModeSection(facts) {
     const local = facts.local;
     if (local === undefined || local === null)
@@ -117,10 +98,12 @@ export function settingsHub(facts) {
         spend: "Monthly limits and the spend report",
         system: systemWords(facts),
     };
-    const shown = SETTINGS_GROUPS.filter(([, slug]) => slug !== "spend" || facts.operator).filter(([, slug]) => slug !== "system" || facts.operator || facts.approver);
+    const shown = SETTINGS_GROUPS.filter(([, slug]) => slug !== "spend" || facts.operator).filter(([, slug]) => slug !== "system" || facts.operator || facts.approver)
+        .filter(([, slug]) => slug !== "spend" || advancedOn(facts));
+    words["advanced"] = advancedWords(facts);
     const panel = needsPanel(items.map((item, index) => ({ title: item.title, text: item.text, action: btn(item.action[0], { variant: index === 0 ? "primary" : "outline", href: item.action[1] }) })));
     return settingsShell({
-        group: "hub", title: "Settings", lead: "For the whole Toolroll.", flags: flagsOf(counts),
+        group: "hub", title: "Settings", flags: flagsOf(counts),
         body: joinHtml([
             answered(facts),
             panel,
@@ -129,14 +112,12 @@ export function settingsHub(facts) {
         ]),
     });
 }
-/** The hub's old anchors, forwarded to their group (fragments never reach the server). */
 export const HUB_ANCHORS = {
     providers: "/settings/agents#providers", workers: "/settings/agents#workers", email: "/settings/alerts#email", "settings-chat-apps": "/settings/alerts#chat-apps",
     "telegram-token": "/settings/alerts#telegram-token", phone: "/settings/alerts#phone", notifications: "/settings/alerts#notifications",
     updates: "/settings/system#updates", accent: "/settings/general#appearance", appearance: "/settings/general#appearance",
 };
 export const HUB_ANCHOR_SCRIPT = `(function(){var m=${JSON.stringify(HUB_ANCHORS)};var h=decodeURIComponent(location.hash.slice(1));if(Object.prototype.hasOwnProperty.call(m,h))location.replace(m[h]);})();`;
-// ---- General ----------------------------------------------------------------------------------------------------
 const ACCENT_CHOICES = ACCENT_PRESETS.slice(0, 6);
 export function generalGroup(facts, flags) {
     const themeButton = (value, label) => html `<button type="submit" name="theme" value="${value}" aria-pressed="${String(facts.theme === value)}">${label}</button>`;
@@ -176,9 +157,9 @@ export function generalGroup(facts, flags) {
             facts.operator ? formRow("Updates", null, btn("Open updates", { sm: true, variant: "ghost", href: "/settings/updates" }), "inline") : "",
         ]),
     });
-    return settingsShell({ group: "general", title: "General", lead: "How Toolroll looks and behaves in this browser.", flags, body: joinHtml([answered(facts), appearance, browser, password, version]) });
+    const withPassword = passwordFree(facts) ? [] : [browser, password];
+    return settingsShell({ group: "general", title: "General", lead: "How Toolroll looks and behaves in this browser.", flags, body: joinHtml([answered(facts), appearance, ...withPassword, version]) });
 }
-// ---- Agents and models ------------------------------------------------------------------------------------------
 const toneChip = (tone, words) => chip(words, tone === "ok" ? "done" : tone === "warn" ? "failed" : "");
 function providerRecord(one) {
     const form = kitSectionForm({ proof: "provider-key", action: "/settings/provider-key", id: `provider-${one.provider}`, gate: true, hidden: { provider: one.provider }, save: { label: `Save ${one.name}` },
@@ -214,19 +195,18 @@ export function agentsGroup(facts, flags) {
     });
     const links = settingsLinks("In this group", [
         settingsLink({ href: "/settings/models", title: "Models", status: "Which model plans, builds and reviews" }),
-        settingsLink({ href: "/settings/lead", title: "Lead", status: "The assistant you chat with" }),
-        settingsLink({ href: "/settings/lead/subagents", title: "Subagents", status: "Helpers the lead looks after" }),
+        settingsLink({ href: "/settings/lead", title: "Chat", status: "The assistant you chat with" }),
+        ...(advancedOn(facts) ? [settingsLink({ href: "/settings/lead/subagents", title: "Subagents", status: "Helpers the lead looks after" })] : []),
         settingsLink({ href: "/settings/tools", title: "Tools", status: "What builds can use, per project" }),
-        settingsLink({ href: "/settings/skills", title: "Skills", status: "Reusable instructions for agents" }),
+        ...(advancedOn(facts) ? [settingsLink({ href: "/settings/skills", title: "Skills", status: "Reusable instructions for agents" })] : []),
         settingsLink({ href: "/settings/knowledge", title: "Knowledge", status: "What agents know about each project" }),
-        settingsLink({ href: "/settings/learning", title: "Learning", status: "Lessons kept from finished work" }),
+        ...(advancedOn(facts) ? [settingsLink({ href: "/settings/learning", title: "Learning", status: "Lessons kept from finished work" })] : []),
     ]);
     return settingsShell({
         group: "agents", title: "Agents and models", lead: "Which agent does the work, how it’s paid for, and which model plans, builds and reviews.", flags,
         body: joinHtml([answered(facts), providers, facts.workers === null ? "" : workersSection(facts.workers), links]),
     });
 }
-// ---- Chat apps and alerts ---------------------------------------------------------------------------------------
 function chatAppsSection(facts) {
     const configured = facts.messaging?.configured ?? [];
     const receiving = facts.messaging?.channel ?? (configured.length === 1 ? configured[0] : null);
@@ -290,9 +270,6 @@ function pushSection(facts) {
             enrol,
         ]) });
 }
-/** Enrolling this device fills the subscription the form posts; it never reads the password beside it. With the kit's
- * section forms (section-forms.ts) it answers their `k-prepare` hook after the password is confirmed, so the post
- * goes exactly once under the pending guard; without them it holds the plain submit, then posts. */
 export function pushScriptOf(facts) {
     if (facts.push === null || !facts.push.available)
         return null;
@@ -403,8 +380,9 @@ export function approvalGroup(view) {
     const rules = view.chosen === "" ? settingsSection({ id: "rules", title: "Approval rules", body: note("Add a project to set its approval rules.") })
         : joinHtml([picker, view.rules]);
     const links = settingsLinks("In this group", [
-        settingsLink({ href: "/mode", title: "Operating mode", status: view.mode }),
-        settingsLink({ href: "/settings/policy", title: "Policy", status: "Limits no task can go past, whatever its mode or approver" }),
+        ...(view.advanced === undefined || view.advanced.on || view.advanced.modeActive ? [settingsLink({ href: "/mode", title: "Operating mode", status: view.mode })] : []),
+        ...(view.advanced === undefined || view.advanced.on || (view.advanced.policy ?? null) !== null
+            ? [settingsLink({ href: "/settings/policy", title: "Policy", status: view.advanced?.policy ?? "Limits no task can go past, whatever its mode or approver" })] : []),
         settingsLink({ href: "/caps", title: "Requirements", status: "What builders are missing for waiting work" }),
         settingsLink({ href: "/settings/projects", title: "Network, writes and sandbox", status: "Set for each project" }),
     ]);
@@ -414,7 +392,6 @@ export function approvalGroup(view) {
             note(html `<b>Which setting wins:</b> protected work and policy limits always apply; then a project’s operating mode; then these defaults.`), links]),
     });
 }
-// ---- Projects, People and sign-in, System -----------------------------------------------------------------------
 export function projectsGroup(facts, flags) {
     const rows = facts.projects.map(one => settingsLink({ href: `/settings/project?repo=${encodeURIComponent(one.repo)}`, title: one.name, status: html `<span class="k-mono">${one.repo}</span>` }));
     const per = facts.projects.length === 0 ? "" : settingsLinks("For each project", [
@@ -437,9 +414,11 @@ export function accessGroup(facts, flags) {
     const links = [
         settingsLink({ href: "/people", title: "People", status: people === null ? "Your own access" : [accessWords({ ...facts, passwordless: null }), people.invites === 0 ? "no open invites" : plural(people.invites, "open invite", "open invites")].join(" · ") }),
         settingsLink({ href: "/settings/sessions", title: "Sessions and tokens", status: `Signed in on ${plural(facts.access.sessions, "device", "devices")} · ${plural(facts.access.tokens, "API token", "API tokens")}` }),
-        ...(facts.operator ? [
-            settingsLink({ href: "/settings/sign-in", title: "Sign-in with a provider", status: facts.sso === null ? "Not set up: everyone uses a password" : `People sign in with ${facts.sso}` }),
-            settingsLink({ href: "/settings/passwordless", title: "Passwordless", status: facts.passwordless ? "On: signing in is the only password" : "Off: approvals ask for your password" }),
+        ...(facts.operator && (advancedOn(facts) || facts.sso !== null) ? [
+            settingsLink({ href: "/settings/sign-in", title: "Sign-in with a provider", status: facts.sso === null ? "Not set up: everyone uses a password" : `People sign in with ${facts.sso}` })
+        ] : []),
+        ...(facts.operator && (advancedOn(facts) || facts.passwordless === true) ? [
+            settingsLink({ href: "/settings/passwordless", title: "Passwordless", status: facts.passwordless ? "On: signing in is the only password" : "Off: approvals ask for your password" })
         ] : []),
     ];
     return settingsShell({ group: "access", title: "People and sign-in", lead: "Who can get in, how they sign in, and the ways in they hold.", flags,
@@ -467,18 +446,17 @@ export function systemGroup(facts, flags) {
         settingsLink({ href: "/settings/backups", title: "Backups", status: facts.backup?.words ?? "When and where the database is copied", needs: facts.backup?.failed ? 1 : 0 }),
         settingsLink({ href: "/settings/storage", title: "Storage", status: "Task folders on this computer, and cleaning them up" }),
         settingsLink({ href: "/settings/retention", title: "Retention", status: "How long run logs and chats are kept" }),
-        settingsLink({ href: "/settings/monitoring", title: "Monitoring", status: "Send the audit stream and traces to your own systems" }),
+        ...(advancedOn(facts) ? [settingsLink({ href: "/settings/monitoring", title: "Monitoring", status: "Send the audit stream and traces to your own systems" })] : []),
         settingsLink({ href: "/settings/data", title: "Data export", status: "Everything except secrets, as one download" }),
         settingsLink({ href: "/settings/integrations", title: "Integrations", status: "Which connected services work" }),
-        settingsLink({ href: "/fleet", title: "Builders", status: "Every computer that builds, on Agents" }),
+        ...(advancedOn(facts) ? [settingsLink({ href: "/fleet", title: "Builders", status: "Every computer that builds, on Agents" })] : []),
     ]) : settingsLinks("In this group", [
         settingsLink({ href: "/settings/integrations", title: "Integrations", status: "Which connected services work" }),
-        settingsLink({ href: "/fleet", title: "Builders", status: "Every computer that builds" }),
+        ...(advancedOn(facts) ? [settingsLink({ href: "/fleet", title: "Builders", status: "Every computer that builds" })] : []),
     ]);
     return settingsShell({ group: "system", title: "System", lead: "This Toolroll’s version, backups, storage and what leaves this computer.", flags,
         body: joinHtml([answered(facts), facts.updates === null ? "" : updatesSection(facts.updates), links]) });
 }
-/** One group page by its slug. */
 export function settingsGroupPage(group, facts) {
     const flags = flagsOf(needsByGroup(settingsNeeds(facts)));
     switch (group) {
@@ -489,17 +467,15 @@ export function settingsGroupPage(group, facts) {
         case "projects": return projectsGroup(facts, flags);
         case "access": return accessGroup(facts, flags);
         case "system": return systemGroup(facts, flags);
+        case "advanced": return advancedGroup(facts, flags);
         case "approval": return settingsHub(facts);
     }
 }
 export const groupTitle = (group) => group === "hub" ? "Settings" : groupLabel(group);
 export { groupHref };
-/** A settings sub-page in the frame: the group's breadcrumb, the page's title, its old body inside. */
 export function settingsSubPage(group, title, body, options = {}) {
     return settingsShell({ group, title, sub: true, body, ...(options.lead === undefined ? {} : { lead: options.lead }), ...(options.flags === undefined ? {} : { flags: options.flags }) });
 }
-/** /mode: the mode a project runs under now, and (for an approver) the choices to sign a new one. Reading the terms is
- * the next page (/mode/confirm), where the password signs exactly what it shows. */
 export function modePageHtml(view) {
     const now = settingsSection({ id: "mode-now", title: "Now",
         body: view.live === null
@@ -535,7 +511,6 @@ export function modePageHtml(view) {
     const answer = view.problem ? notice(sentence(view.problem)) : view.said ? infoLine(sentence(view.said)) : "";
     return settingsSubPage("approval", "Operating mode", joinHtml([answer, now, sign]), { lead: "A signed, time-limited mode that lets more run without asking. It ends on its own. Scope changes, agent questions and requested revisions still wait for you." });
 }
-/** /mode/confirm: every resolved term in words; the password signs exactly this digest (a changed form is refused). */
 export function modeCeremonyHtml(view) {
     return settingsSubPage("approval", `Sign the ${view.name} mode`, joinHtml([
         settingsSection({ id: "mode-terms", title: `What you sign for ${view.project}`,
@@ -554,8 +529,6 @@ function accessFields(id, projects, selected) {
             : html `<fieldset class="k-sopts"><legend class="k-sr">Projects</legend>${projects.map((one, at) => html `<label class="k-sopt" for="${id}-p${at}"><input type="checkbox" id="${id}-p${at}" name="projects" value="${one.repo}"${selected?.includes(one.repo) ? html ` checked` : ""}><span><b>${one.name}</b></span></label>`)}</fieldset>`,
     ]);
 }
-/** People: who can get in, what each can do and where, open invites, and inviting someone. Inviting and widening
- * access always ask for the password typed now; removing someone or cancelling an invite is a step-up. */
 export function peopleHtml(view) {
     const answer = view.problem ? notice(sentence(view.problem)) : view.said ? infoLine(sentence(view.said)) : "";
     const people = settingsSection({ id: "people", title: "People", state: html ` <span class="k-count">${view.people.filter(one => one.revoked === null).length}</span>`,
@@ -597,7 +570,6 @@ export function peopleHtml(view) {
             note(html `To revoke one, run <code class="k-mono">toolroll coordinator revoke &lt;cid&gt; --as you</code> on this computer.`)]) });
     return settingsSubPage("access", "People", joinHtml([answer, people, invites, filers]), { lead: "Who can see and approve work in this Toolroll." });
 }
-/** People for someone limited to some projects: their own access, in words. */
 export function ownAccessHtml(view) {
     return settingsSubPage("access", "Your access", joinHtml([
         settingsSection({ id: "your-access", title: `${view.name} · ${roleWords(view.approver)}`, lead: view.approver ? "You can create, manage and approve work in these projects." : "You can read work in these projects.",
@@ -605,7 +577,6 @@ export function ownAccessHtml(view) {
                 html `<div class="k-acts">${btn("Your activity", { sm: true, href: view.activity })}</div>`]) }),
     ]));
 }
-/** The invite link, once, on a page with no script: selectable text, what it lets them do, and where to cancel it. */
 export function inviteLinkHtml(view) {
     return settingsSubPage("access", "Invite link", joinHtml([
         settingsSection({ id: "invite-link", title: "Shown once, so copy it now",
@@ -614,9 +585,6 @@ export function inviteLinkHtml(view) {
                 html `<div class="k-acts">${btn("Back to People", { sm: true, href: "/people" })}</div>`]) }),
     ]));
 }
-// ---- Passwordless (/settings/passwordless) ----------------------------------------------------------------------
-/** The switch and the trade in plain words. Turning it on is a way in: it always asks for the password typed now.
- * Turning it off is one click. */
 export function passwordlessHtml(view) {
     const answer = view.problem ? notice(sentence(view.problem)) : view.said ? infoLine(sentence(view.said)) : "";
     const control = view.on
@@ -630,9 +598,28 @@ export function passwordlessHtml(view) {
             body: joinHtml([note(view.trade), control]) }),
     ]), { lead: "Sign in once; most approvals then need no password." });
 }
-/** Which project a per-project settings page shows: a GET form (an address, not a save). */
 export function projectPicker(action, projects, chosen) {
     if (projects.length < 2)
         return html ``;
     return html `<form method="get" action="${action}" class="k-acts k-picker">${select({ name: "repo", label: "Project", current: chosen, items: projects.map(one => [one.repo, one.name]) })}${btn("Show", { sm: true, type: "submit" })}</form>`;
 }
+function passwordFree(facts) {
+    return facts.local?.owner === true && !facts.local.passwordSet;
+}
+function advancedOn(facts) { return facts.advanced === undefined || facts.advanced.on; }
+function advancedWords(facts) {
+    return advancedOn(facts) ? "On: every page shows in the menus" : "Off: menus show only the main steps";
+}
+export function advancedGroup(facts, flags) {
+    const on = advancedOn(facts);
+    const change = facts.advanced?.canChange === true
+        ? postForm("/settings/advanced", btn(on ? "Turn off" : "Turn on", { sm: true, type: "submit" }), { hidden: { advanced: on ? "off" : "on" } })
+        : html ``;
+    const toggle = settingsSection({ id: "show-advanced", title: "Show advanced features", state: on ? " · on" : " · off", right: change,
+        lead: "Flows, other computers, spend limits, operating modes and the rest, in your menus. They keep working either way, and each opens from below.",
+        body: html `` });
+    const pages = ADVANCED_PAGES.filter(one => one.operator !== true || facts.operator)
+        .map(one => settingsLink({ href: one.href, title: one.title, status: one.words }));
+    return settingsShell({ group: "advanced", title: "Advanced", lead: "Everything beyond filing, approving and accepting work.", flags,
+        body: joinHtml([answered(facts), toggle, settingsLinks("Advanced pages", pages)]) });
+}

package/dist/settings-kit-script.js

@@ -1,20 +1,3 @@
-/**
- * The settings kit's one script (docs/plans/settings-revamp.md §4), shipped as a page's functional script beside kit
- * forms (settings-kit.ts). Without it every kit form works as today: the proof field shows inline and Save posts.
- *
- * With it, a kit form that asks for a proof:
- * - moves its server-written proof field into the `<dialog>` inside the same form (the field never leaves the form);
- * - opens the dialog on submit instead of posting, remembering the pressed button;
- * - Confirm (its button, or Enter in the field) posts the form with that button (`requestSubmit(submitter)`, after the
- *   submit event that asked has finished), so its name=value and every hidden term go along unchanged; Cancel (or
- *   Escape) closes it and posts nothing, and focus returns to the button;
- * - once a kit form posts, it is pending: further submits are dropped and its Save and Confirm are disabled (after the
- *   post has taken their values), until the page is shown again or the post was cancelled — never on a timer;
- * - asks for nothing when the proof was left out (Passwordless) — there is no dialog then — and shows the
- *   identity-provider link when the sign-in swapped the field.
- * Each section's Save bar names what changed. The script never reads or sets a field's value except to check that a
- * required proof isn't empty; the server still proves everything.
- */
 export const SETTINGS_KIT_SCRIPT = `(function(){
 if(window.__soKit)return;window.__soKit=1;
 var d=document;d.documentElement.classList.add("kit-js");
@@ -59,8 +42,6 @@ f.__kitChanged=f.__kitChanged||[];var name=label(t);if(name&&f.__kitChanged.inde
 bar.setAttribute("data-changed","");state.textContent="Changed: "+f.__kitChanged.join(", ");}
 d.addEventListener("input",changed);d.addEventListener("change",changed);
 })();`;
-/** The pages that wear the settings frame: one column, no Crew sheet, a breadcrumb under Settings. Here (not in
- * settings-kit.ts) so the browser bundle reads it without the server's form contracts. */
 export function isSettingsFrame(pathname) {
     return pathname === "/settings" || pathname.startsWith("/settings/") || pathname === "/setup" || pathname.startsWith("/setup/")
         || pathname === "/people" || pathname === "/mode" || pathname === "/control" || pathname === "/spend";

package/dist/settings-kit.js

@@ -1,25 +1,9 @@
-/**
- * The settings kit (docs/plans/settings-revamp.md §4): the frame's breadcrumb, and the pieces every settings page is
- * rebuilt from — a section, its own sticky Save, the step-up dialog drawn from the action's own proof contract
- * (settings-proofs.ts), field errors, secret inputs and choice groups. Server-rendered HTML that works without
- * JavaScript; settings-kit-script.ts only turns the inline proof field into a dialog.
- *
- * Rules the helpers keep (and settings-kit.test.ts pins):
- * - the proof field is written into the form's own server HTML, named as its handler reads it, labelled, and
- *   `current-password`; so sensitivity (serve.ts sendScreen) and the identity-provider swap (ssoStepUps) still see it;
- * - a step-up field renders through `reauth`, so Passwordless leaves it out exactly as today; a credential or typed
- *   password field always renders;
- * - a CSRF-only action renders no proof field and no dialog;
- * - nothing here ever sets `value` on a proof or secret field;
- * - handlers never read any of this: it only draws.
- */
 import { attributes, html, htmlString, joinHtml, postForm, reauth, replaceMarkup } from "./html.js";
 import { isSettingsFrame } from "./settings-kit-script.js";
 import { requestContext } from "./server/request-context.js";
 import { contractReads, PROOF_INVENTORY, proofRow } from "./settings-proofs.js";
 export { isSettingsFrame };
 const ENTITIES = { amp: "&", lt: "<", gt: ">", quot: '"', "#39": "'", "#x27": "'", nbsp: " " };
-/** The text of a page's first h1 (tags dropped, the common entities read), or null. */
 export function headingText(page) {
     const found = /<h1\b[^>]*>([\s\S]*?)<\/h1>/i.exec(page);
     if (found === null)
@@ -27,11 +11,9 @@ export function headingText(page) {
     const text = found[1].replace(/<[^>]*>/g, "").replace(/&(amp|lt|gt|quot|#39|#x27|nbsp);/g, (_whole, name) => ENTITIES[name] ?? "").replace(/\s+/g, " ").trim();
     return text === "" ? null : text.slice(0, 80);
 }
-/** The breadcrumb for a settings-frame page: "Settings / <this page>", or nothing on the hub and outside the frame. */
 export function settingsCrumbs(pathname, title, page) {
     if (!isSettingsFrame(pathname) || pathname === "/settings")
         return undefined;
-    // A page in the revamp kit's Settings frame (server/kit.ts settingsShell) names its own trail: Settings, its group, itself.
     const kit = /<nav class="k-tb-ctx k-crumbs" aria-label="Breadcrumb">([\s\S]*?)<\/nav>/.exec(page);
     if (kit !== null) {
         const trail = [{ label: "Settings", href: "/settings" }];
@@ -45,27 +27,19 @@ export function settingsCrumbs(pathname, title, page) {
     const name = headingText(page) ?? (title.charAt(0).toUpperCase() + title.slice(1));
     return [{ label: "Settings", href: "/settings" }, { label: name, href: null }];
 }
-/** The project the sidebar's picker names: the session's saved selection while this person may still see it, else
- * the page's own effective project, else none — checked against the visible project list, so a selection that
- * outlived the ceiling is never sent to the page. */
 export function openProjectFor(saved, effective, visible) {
     return [saved, effective ?? null].find((path) => path !== null && visible.some(one => one.path === path)) ?? null;
 }
-/** The breadcrumb as server HTML (the page before scripts, and without them). */
 export function crumbsHtml(crumbs) {
     return html `<nav class="kit-crumbs" aria-label="Breadcrumb"><ol>${crumbs.map(one => one.href === null
         ? html `<li aria-current="page">${one.label}</li>`
         : html `<li><a href="${one.href}">${one.label}</a></li>`)}</ol></nav>`;
 }
-// ---- fields --------------------------------------------------------------------------------------------------------
-/** The password-manager opt-outs every secret input carries (a service's key is not the person's sign-in). */
 export const SECRET_OPT_OUTS = { "data-1p-ignore": true, "data-lpignore": "true", "data-bwignore": true, "data-form-type": "other" };
 const errorId = (id) => `${id}-error`;
-/** A field's message under it: tied to the field with aria-describedby, announced, and the field focused. */
 export function fieldError(id, message) {
     return html `<p class="kit-field-error" id="${errorId(id)}" role="alert">${message}</p>`;
 }
-/** A labelled text field; with an error it is aria-invalid, names its message and takes focus. */
 export function textField(field) {
     const hint = field.hint === undefined ? null : `${field.id}-hint`;
     const described = [hint, field.error ? errorId(field.id) : null].filter(Boolean).join(" ");
@@ -75,8 +49,6 @@ ${field.hint === undefined ? "" : html `<p class="kit-hint" id="${hint}">${field
         "aria-invalid": field.error ? "true" : null, "aria-describedby": described === "" ? null : described, autofocus: field.error ? true : null })}>\
 ${field.error ? fieldError(field.id, field.error) : ""}</div>`;
 }
-/** A secret that is not the person's own password (an API key, a bot token, a client secret): masked, never given a
- * value, kept out of password managers. The field name is the handler's own wire name. */
 export function secretInput(field) {
     const described = [field.hint === undefined ? null : `${field.id}-hint`, field.error ? errorId(field.id) : null].filter(Boolean).join(" ");
     return html `<div class="kit-field"><label for="${field.id}">${field.label}</label>\
@@ -85,7 +57,6 @@ ${field.hint === undefined ? "" : html `<p class="kit-hint" id="${field.id}-hint
         required: field.required === true, "aria-invalid": field.error ? "true" : null, "aria-describedby": described === "" ? null : described, autofocus: field.error ? true : null })}>\
 ${field.error ? fieldError(field.id, field.error) : ""}</div>`;
 }
-/** A choice group: a fieldset with its legend, each option's detail tied to it. Nothing saves until Save. */
 export function choiceGroup(group) {
     return html `<fieldset class="kit-choices"${group.error ? html ` aria-describedby="${errorId(group.id)}"` : ""}><legend>${group.legend}</legend>\
 ${group.options.map((one, at) => {
@@ -94,12 +65,7 @@ ${group.options.map((one, at) => {
 <span>${one.label}</span>${one.detail === undefined ? "" : html `<span class="kit-choice-detail" id="${id}-detail">${one.detail}</span>`}</label>`;
     })}${group.error ? fieldError(group.id, group.error) : ""}</fieldset>`;
 }
-// ---- proof ---------------------------------------------------------------------------------------------------------
-/** Proofs that only a password typed now satisfies: no Passwordless session and no identity-provider re-check. */
 export const typedOnly = (row) => row.proof === "typed-password" || row.proof === "typed-now-operator";
-/** The proof field a row's handler reads, as today's forms write it; empty for a CSRF-only row. A step-up field goes
- * through `reauth` (Passwordless leaves it out); a credential or typed field always shows. A typed-only field carries
- * `data-so-typed`, so the identity-provider swap leaves it a real password field (keepTypedFields). Never a value. */
 export function proofField(row, options = {}) {
     if (row.field === null || row.proof === "none")
         return html ``;
@@ -108,7 +74,6 @@ export function proofField(row, options = {}) {
     const label = options.label ?? "Your Toolroll password";
     if (typedOnly(row))
         return html `<label>${label}<input type="password" name="${row.field}" data-so-typed autocomplete="current-password" required></label>`;
-    // A row that needs its proof only for some posts (its `when`) leaves the field optional: the handler decides.
     const field = options.optional === true && row.when !== undefined
         ? html `<label>${label}<input type="password" name="${row.field}" autocomplete="current-password"></label>`
         : html `<label>${label}<input type="password" name="${row.field}" autocomplete="current-password" required></label>`;
@@ -116,18 +81,11 @@ export function proofField(row, options = {}) {
 }
 const TYPED_FIELD = /<input type="password" name="([a-z-]+)" data-so-typed autocomplete="current-password" required>/g;
 const HELD_FIELD = /<input type="password" name="([a-z-]+)" data-so-typed data-so-typed-held required>/g;
-/**
- * The identity-provider swap (render-people.ts ssoStepUps) with typed-only proof fields kept: those handlers take only
- * a password typed now, so the field must stay a real password input. The field is held out of the swap by its
- * marker and put back as it was. Every other step-up field is swapped exactly as before.
- */
 export function keepTypedFields(page, swap, ...rest) {
     const held = replaceMarkup(page, TYPED_FIELD, (_whole, name) => html `<input type="password" name="${name}" data-so-typed data-so-typed-held required>`);
     return replaceMarkup(swap(held, ...rest), HELD_FIELD, (_whole, name) => html `<input type="password" name="${name}" data-so-typed autocomplete="current-password" required>`);
 }
-/** The rows that share this row's route: one handler's variants. */
 const variantsOf = (row) => PROOF_INVENTORY.filter(one => one !== row && one.routes.some(route => row.routes.includes(route)));
-/** How the dialog explains a proof that Passwordless doesn't cover, in words; null where nothing needs saying. */
 export function proofNote(row) {
     if (row.proof === "credential")
         return "This changes a way in, so it always takes your password.";
@@ -137,13 +95,6 @@ export function proofNote(row) {
         return "Widening this takes an instance operator's password, typed now.";
     return null;
 }
-/**
- * A section's form, posted to its existing route with its existing fields, and its sticky Save. When the row needs a
- * proof, the proof field sits in the form's own HTML — inline (as today, which is how it works without JavaScript) and
- * moved into a `<dialog>` inside the same form by settings-kit-script.ts, which opens it on submit, keeps the pressed
- * button, and posts nothing on Cancel. The server still proves everything.
- */
-/** The row for a form posting to `action` with these hidden terms; throws on a form the row doesn't describe. */
 function rowForForm(proof, action, hidden) {
     const row = proofRow(proof);
     if (!row.routes.includes(action))
@@ -151,8 +102,6 @@ function rowForForm(proof, action, hidden) {
     for (const name of Object.keys(hidden))
         if (row.field === name || row.secrets.includes(name))
             throw new Error(`${row.id}: ${name} is never a hidden value`);
-    // The exact variant: its own selector must be in the hidden terms, and no other variant's may be, unless both are
-    // credential acts: two of those on one form ask the strongest proof there is, so nothing gets weaker.
     if (row.select !== undefined && String(hidden[row.select.field] ?? "") !== row.select.value)
         throw new Error(`${row.id} posts ${row.select.field}=${row.select.value}`);
     for (const other of variantsOf(row))
@@ -179,15 +128,12 @@ ${note === null ? "" : html `<p class="kit-hint">${note}</p>`}<div class="kit-di
         dialog,
     ]), { hidden, attrs: { id: form.id, class: "kit-form", "data-kit-form": row.id, "data-kit-step-up": asks ? "" : null } });
 }
-/** A section: a heading, a one-line state, a problem the handler sent back (role=alert), then its form. */
 export function kitSection(section) {
     return html `<section class="kit-section" id="${section.id}" aria-labelledby="${section.id}-title"><h2 id="${section.id}-title">${section.title}</h2>\
 ${section.state === undefined ? "" : html `<p class="kit-state">${section.state}</p>`}\
 ${section.problem ? html `<p class="kit-problem" role="alert">${section.problem}</p>` : ""}\
 ${section.said ? html `<p class="kit-said" role="status">${section.said}</p>` : ""}${section.body}</section>`;
 }
-/** The kit's look: one 760px column, sections with no nested wells, the sticky Save, the dialog. The needs-you colour
- * falls back to the warning token until S5 lands `--so-needs-you`. */
 export const SETTINGS_KIT_CSS = ":root{--so-settings-width:760px}" +
     ".kit-crumbs ol{display:flex;flex-wrap:wrap;align-items:center;gap:6px;margin:0;padding:0;list-style:none;font-size:14px;color:var(--so-muted)}" +
     ".kit-crumbs li+li::before{content:'/';margin-right:6px;color:var(--so-muted)}.kit-crumbs a{color:var(--so-muted);text-decoration:none}.kit-crumbs a:hover{color:var(--so-ink);text-decoration:underline}" +
@@ -205,13 +151,6 @@ export const SETTINGS_KIT_CSS = ":root{--so-settings-width:760px}" +
     ".kit-dialog::backdrop{background:rgb(0 0 0 / .35)}.kit-dialog h2{margin:0 0 6px;font-size:17px}.kit-dialog-slot .kit-proof{display:block}" +
     ".kit-dialog-actions{display:flex;justify-content:flex-end;gap:8px;margin:16px 0 0}" +
     "@media (max-width:900px){.kit-save-bar button,.kit-dialog-actions button,.kit-crumbs a{min-height:44px}.kit-crumbs a{display:inline-flex;align-items:center}}";
-/**
- * A settings section's form in the revamp kit's look, posted to its existing route with its existing fields and
- * proof. Without the kit's script it is a plain form: the proof field (when the row asks for one) shows in place and
- * Save posts. With it (src/browser/kit/behavior.ts, section forms): Save appears once something changed, the proof is
- * asked in a password popover only when the rules need it, one validated snapshot is posted, a second press does
- * nothing while one is pending, and a refusal shows next to Save with the edits kept. The server proves everything.
- */
 export function kitSectionForm(form) {
     const hidden = form.hidden ?? {};
     const row = rowForForm(form.proof, form.action, hidden);
@@ -234,8 +173,6 @@ export function kitSectionForm(form) {
             "data-k-confirm": form.confirm ?? row.action, "data-k-note": note,
         } });
 }
-/** Whether this request is the page again after a save of form `id` couldn't be confirmed (section-forms.ts asks for it
- * with ?unconfirmed=<id>). It only picks which of this page's own forms shows the fixed note; the value is never drawn. */
 function unconfirmedHere(id) {
     const at = requestContext.getStore()?.returnTo;
     if (at === undefined)

package/dist/settings-proofs.js

@@ -1,29 +1,11 @@
-/**
- * The settings proof inventory (docs/plans/settings-revamp.md §4): for every settings action, the proof its handler
- * already asks for, as data. Only rendering code reads it (settings-kit.ts draws the step-up dialog from it); no
- * handler does, and nothing here changes what a handler proves. `src/settings-kit.test.ts` pins every row against the
- * form contracts (console-api.ts), the route table, and — for one row of each kind — the handler itself over HTTP.
- *
- * Proof kinds, as the handlers implement them (scope.ts, server/guards.ts):
- * - `none`: the session and the form token (CSRF) only.
- * - `step-up`: `authenticateApprover` — a password typed now; an empty field stands in under Passwordless (the
- *   person's own live browser session) and for a one-use identity-provider re-check.
- * - `credential`: `authenticateCredential` — a password typed now, or a one-use identity-provider re-check. Passwordless
- *   never covers it.
- * - `typed-password`: the handler checks the typed password itself (`authenticateAccount`, or an empty field refused
- *   before the check). Neither Passwordless nor an identity-provider re-check stands in.
- * - `typed-now-operator`: a password typed now by an instance operator (widening check access); not even a re-check.
- */
 import { CONSOLE_FORMS } from "./contracts/console-api.js";
 const ACCEPT = { passwordless: "accepted", sso: "accepted" };
 const CREDENTIAL = { passwordless: "refused", sso: "accepted" };
 const TYPED = { passwordless: "refused", sso: "refused" };
 const NONE = { passwordless: "n/a", sso: "n/a" };
-/** /mode/sign re-derives the digest from the posted terms, so every one rides back. */
 const MODE_TERMS = ["nonce", "digest", "expiry", "name", "days", "publication", "auto-approve", "plan-auto", "chat-approve", "repair-auto"];
 const CHAT_APPS = [["slack", "Slack", "slack", ["app-token", "bot-token"]], ["teams", "Teams", "teams", ["secret"]], ["discord", "Discord", "discord", ["bot-token"]]];
 export const PROOF_INVENTORY = [
-    // CSRF only.
     { id: "quality-default", action: "Set the default quality for new tasks", routes: ["/settings/quality-default"], form: "qualityDefault", field: null, proof: "none", ...NONE, role: "any", secrets: [], terms: [] },
     { id: "notifications", action: "Choose what reaches you", routes: ["/settings/notifications"], form: "notifications", field: null, proof: "none", ...NONE, role: "any", secrets: [], terms: [] },
     { id: "notifications-mute", action: "Mute a project", routes: ["/settings/notifications/mute"], form: "notificationsMute", field: null, proof: "none", ...NONE, role: "any", secrets: [], terms: [] },
@@ -37,7 +19,6 @@ export const PROOF_INVENTORY = [
     { id: "chat-approval-confirm", action: "Review approving from chat", routes: ["/settings/chat-approval/confirm", "/settings/chat-approval/off"], form: "chatApproval", field: null, proof: "none", ...NONE, role: "approver", secrets: [], terms: [] },
     { id: "models-rules-off", action: "Turn an earned rule off, stop a trial, say Not now, or turn suggestions off", routes: ["/settings/models/turn-off", "/settings/models/not-now", "/settings/models/suggest-off", "/settings/models/stop"], form: "modelsRules", field: null, proof: "none", ...NONE, role: "operator", secrets: [], terms: [] },
     ...CHAT_APPS.map(([app, name, form]) => ({ id: `${app}-alerts`, action: `Send alerts to ${name}`, routes: [`/settings/${app}/alerts`], form, field: null, proof: "none", ...NONE, role: "approver", secrets: [], terms: [] })),
-    // Step-up: a password typed now, the Passwordless session, or a one-use re-check.
     { id: "permission-default", action: "Start new tasks with Full access", routes: ["/settings/permission-default"], form: "permissionDefault", field: "password", proof: "step-up", when: "only when widening to Full access", ...ACCEPT, role: "any", secrets: [], terms: [] },
     { id: "spend-budget", action: "Set a monthly limit", routes: ["/spend/budget"], form: "spendBudget", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: [] },
     { id: "models-agent", action: "Change which model does each job", routes: ["/settings/models/agent"], form: "modelsChange", field: "password", proof: "step-up", ...ACCEPT, role: "operator", secrets: [], terms: ["scope", "digest"] },
@@ -73,7 +54,6 @@ export const PROOF_INVENTORY = [
     { id: "mode-sign", action: "Sign an operating mode", routes: ["/mode/sign"], form: "mode", field: "token", proof: "step-up", ...ACCEPT, role: "any", handlerRole: "an approver of the project", secrets: [], terms: MODE_TERMS },
     { id: "mode-sign-chat-approve", action: "Sign an operating mode that lets your chat app approve", routes: ["/mode/sign"], select: { field: "chat-approve", value: "1" }, form: "mode", field: "token", proof: "credential", ...CREDENTIAL, role: "any", handlerRole: "an approver of the project", secrets: [], terms: MODE_TERMS },
     { id: "mode-sign-repair", action: "Sign an operating mode that repairs failed checks by itself", routes: ["/mode/sign"], select: { field: "repair-auto", value: "1" }, form: "mode", field: "token", proof: "credential", ...CREDENTIAL, role: "any", handlerRole: "an approver of the project", secrets: [], terms: MODE_TERMS },
-    // Credential acts: a password typed now or a one-use re-check; never Passwordless.
     { id: "passwordless-on", action: "Turn Passwordless on", routes: ["/settings/passwordless"], form: "passwordless", field: "password", proof: "credential", when: "only to turn it on (off needs nothing)", ...CREDENTIAL, role: "operator", secrets: [], terms: [] },
     { id: "sign-in", action: "Change sign-in (SSO)", routes: ["/settings/sign-in"], form: "signIn", field: "password", proof: "credential", when: "every action except Test", ...CREDENTIAL, role: "operator", secrets: ["client-secret"], terms: [] },
     { id: "release-approval", action: "Approve releases automatically", routes: ["/settings/release-approval"], form: "releaseApproval", field: "password", proof: "credential", when: "only to approve automatically (Ask me needs nothing)", ...CREDENTIAL, role: "approver", handlerRole: "an approver of the project", secrets: [], terms: ["repo"] },
@@ -87,21 +67,18 @@ export const PROOF_INVENTORY = [
     { id: "sessions-token", action: "Make an API token", routes: ["/settings/sessions"], form: "sessions", field: "password", proof: "credential", when: "only to make a token (ending sessions and revoking tokens need nothing)", ...CREDENTIAL, role: "any", secrets: [], notProof: ["token"], terms: [], note: "`token` here names an API token to revoke" },
     { id: "people-invite", action: "Invite someone", routes: ["/people/invite"], form: "peopleInvite", field: "token", proof: "credential", ...CREDENTIAL, role: "any", handlerRole: "an approver", secrets: [], terms: [] },
     { id: "people-projects", action: "Change a person's projects", routes: ["/people/projects"], form: "peopleProjects", field: "token", proof: "credential", ...CREDENTIAL, role: "operator", secrets: [], terms: ["name"] },
-    // A typed password, checked by the handler itself.
     { id: "telegram-pair", action: "Pair your phone with Telegram", routes: ["/settings/telegram/pair"], form: "telegramPair", field: "password", proof: "typed-password", ...TYPED, role: "approver", secrets: [], terms: [] },
     { id: "chat-approval-save", action: "Turn on approving from chat", routes: ["/settings/chat-approval/save"], form: "chatApproval", field: "token", proof: "typed-password", ...TYPED, role: "approver", secrets: [], terms: ["nonce", "digest", "scope", "full-access", "cap-usd"] },
     { id: "push-subscribe", action: "Get alerts on this device", routes: ["/push/subscribe"], form: "pushSubscribe", field: "token", proof: "typed-password", ...TYPED, role: "any", handlerRole: "an approver", secrets: [], terms: ["endpoint", "p256dh", "auth"] },
     { id: "lead-config", action: "Set up the lead's model and its own key", routes: ["/chat/config"], form: "chatConfig", field: "token", proof: "typed-password", ...TYPED, role: "any", handlerRole: "an approver", secrets: ["key"], terms: [] },
 ];
 const BY_ID = new Map(PROOF_INVENTORY.map(row => [row.id, row]));
-/** One row by id; throws on an unknown id (a rendering bug, never a request's input). */
 export function proofRow(id) {
     const row = BY_ID.get(id);
     if (row === undefined)
         throw new Error(`no proof inventory row ${id}`);
     return row;
 }
-/** Whether the field a row names is one its form contract reads (used by the kit's own guard and the tests). */
 export function contractReads(row, field) {
     return CONSOLE_FORMS[row.form].fields.includes(field);
 }