toolroll 0.9.103 → 0.9.105

package/dist/chat-channel.d.ts

@@ -1,126 +0,0 @@
-import { type FeedbackImage } from "./result-review.js";
-import type { DoorOutcome } from "./lead-doors.js";
-import { type VerifiedApprover } from "./principal.js";
-import type { ChatConfig, LeadProposal, LeadSession, LeadThread, Store, SubscriptionChatProviderId } from "./store.js";
-export declare function channelRepos(store: Store, approver: string, registry: readonly string[]): string[];
-export type ResolvedLead = {
-    ok: true;
-    who: VerifiedApprover;
-    session: LeadSession;
-    thread: LeadThread;
-    config: ChatConfig & {
-        provider: SubscriptionChatProviderId;
-    };
-} | {
-    ok: false;
-    reason: "unpaired" | "unconfigured" | "direct-api" | "no-projects" | "busy" | "no-session";
-    said: string | null;
-};
-/**
- * The session and thread a paired phone speaks in: the approver's live
- * session when it is compatible (same generation, same membership
- * credential, same ceiling), else a fresh one minted under the very terms
- * the console and CLI state for membership chat (no dollar ceiling, this
- * ceiling digest). An incompatible session or thread left open on the
- * computer is replaced rather than refused, so a message from the phone
- * always gets an answer — except while a turn is still running there,
- * which is "busy": the message waits its turn instead of ending it.
- */
-export declare function resolveChannelLead(store: Store, binding: {
-    approver: string;
-    approverGeneration: number;
-}, repos: readonly string[], now: Date): ResolvedLead;
-/** A phone exchange about one task (a reply to that task's or result's
- * message) stays in the lead conversation, and is kept in the task's own
- * chat as well, so the task shows everything asked of it wherever it was
- * asked. Best effort: the phone conversation never depends on it. */
-export declare function mirrorToTaskChat(store: Store, who: VerifiedApprover, taskId: string, surface: string, message: string, reply: string, now: Date): void;
-/** The one short message a person gets when their question could not be answered. */
-export declare function couldNotAnswerText(reason: string): string;
-export declare function tooLongText(length: number): string;
-/** A reply to a message about several tasks is never guessed: it names them and says how to choose. */
-export declare function whichTaskText(titles: readonly string[]): string;
-/** The server-authored context a reply to a result message carries into the turn — the exact execution and run, never a guess. */
-export declare function replyContextFor(taskId: string, run: number | null, image?: FeedbackImage): string;
-/** The context a chosen task (/tasks, /task <name>) carries into each turn from that chat. */
-export declare function focusContextFor(taskId: string): string;
-/** No trusted https origin is configured: one honest line, no localhost, no promise. */
-export declare const NO_PHONE_LINK = "Phone access isn't configured. Open Toolroll on your computer.";
-/** An origin exists but the card's task is not one this phone may reach now: said as that, never as missing setup. */
-export declare const NO_TASK_LINK = "No phone link: this task is outside your connected projects now, so open Toolroll on the computer.";
-/** A fixed console destination beside its button label. The path is one of chat-controls' own; the origin joins it only at send time. */
-export type PhoneLink = {
-    label: string;
-    path: string;
-};
-/** Is this task one the phone's ceiling admits right now? A link names a stored identity, never a model's word alone. */
-export declare function taskInCeiling(store: Store, taskId: string, repos: readonly string[]): boolean;
-/**
- * The link a PENDING card carries: only the handoff kinds (cancel, a console
- * control), whose whole point is where to go. Confirmable cards keep their
- * Confirm/Dismiss buttons alone — a second button on a card that acts is a
- * choice the operator did not need.
- */
-/** A chat transport that renders cards and confirms them in place. The
- * console ("web") and the terminal are not chat channels. */
-export type ChatChannelName = "telegram" | "slack" | "discord" | "teams";
-/** The card text once its challenge is armed: an irreversible answer or a
- * challenge action, in the same words on every channel. */
-export declare function armedCardText(proposal: LeadProposal, previewText: string): string;
-/** The second question on an action's card, in words true of what it does. */
-export declare function armedQuestion(proposal: LeadProposal): string;
-/** The "yes" button's label for an armed card. */
-export declare function armedYesLabel(proposal: LeadProposal): string;
-export declare function proposalLink(store: Store, proposal: LeadProposal, repos: readonly string[], channel?: ChatChannelName | null): PhoneLink | null;
-/** The personal Telegram card: the shared preview, or a handoff to the lead conversation when it cannot be shown in full. */
-export declare function phoneProposalPreview(store: Store, proposal: LeadProposal, repos: readonly string[]): {
-    text: string;
-    buttons: boolean;
-    closed?: true;
-};
-/** The personal Telegram card's link: the lead conversation holding a card too long to show, else the shared link. */
-export declare function phoneProposalLink(store: Store, proposal: LeadProposal, repos: readonly string[], channel?: ChatChannelName | null): PhoneLink | null;
-/**
- * The link a CONFIRMED card carries: the exact recorded task the outcome
- * names, where its remaining step lives — the approval control while the
- * scope waits for one (a manual approval), the task otherwise (an
- * automatic approval, a staged resume). Kinds whose outcome is complete
- * carry none.
- */
-export declare function confirmedLink(store: Store, outcome: DoorOutcome, proposal: LeadProposal, repos: readonly string[]): PhoneLink | null;
-/** The card: plain words for what confirming does, the exact terms it binds to, and whether a button belongs on it. */
-export declare function proposalPreview(store: Store, proposal: LeadProposal, repos: readonly string[], channel?: ChatChannelName | null): {
-    text: string;
-    buttons: boolean;
-    closed?: true;
-};
-/** The card after it resolves, from the recorded outcome — the same words every surface shows. */
-export declare function proposalOutcomeText(proposal: LeadProposal): string;
-export type ParitySupport = "direct" | "handoff" | "missing";
-/**
- * One row per lead tool: how the paired phone reaches it. `direct` means
- * the same engine tool or the same confirm door runs from Telegram;
- * `handoff` means the phone shows where the existing authenticated
- * control lives and does nothing itself; `missing` means no phone path
- * yet. The test suite refuses a tool this table does not name, and the
- * committed matrix document must agree with it line for line.
- */
-export declare const CHAT_ACTION_PARITY: Record<string, {
-    support: ParitySupport;
-    how: string;
-    gap: string | null;
-}>;
-/** Every tool the model can call, mapped; a new tool must name its phone road. */
-export declare function parityGaps(): string[];
-export declare function handoffCardText(text: string, note: string | null): string;
-/**
- * The resolved card, from what is RECORDED about the task the outcome
- * names — never from a word search over the door's sentence. A scope that
- * still waits for approval has one next action: approve it (the button, or
- * the console on the computer when no link exists). A scope approved under
- * a signed mode asks for nothing more. A staged resume says what remains.
- */
-export declare function confirmedCardText(store: Store, outcome: DoorOutcome, proposal: LeadProposal, note: string | null): string;
-/** The link to a task a Start card just started (a tapped card, and Toolroll's reply to a typed yes): the task's own
- * page, only while the task is one of the person's projects. Navigation only. */
-export declare function startedTaskLink(store: Store, taskId: string, repos: readonly string[]): PhoneLink | null;

package/dist/chat-continuity.d.ts

@@ -1,32 +0,0 @@
-/** Progressive enhancement for the existing chat, not a second transport.
- * Native POSTs and server-rendered approval forms remain the authority.
- * Only the message draft is kept in this tab, for at most 24 hours.
- *
- * Package 2 (2026-09-13) extends the SAME read-only status poll: the
- * server answers with a version of the displayed facts and, when it
- * differs from the page's, server-rendered fragments for the three safe
- * regions — the thread, what follows the composer, and the task's live
- * region. The page reconciles them by stable keys, so an unchanged card
- * keeps its node, its open disclosures, and its focus; the composer is
- * never touched, so the draft, caret, and focus survive every update.
- * A reader above the latest message keeps their place and gets a
- * keyboard-usable New update button; only that act moves them.
- *
- * Sending goes to the existing endpoint once, with the existing request
- * receipt key and session binding, and is never retried by itself; the
- * draft clears only on the server's receipt for THE REQUEST THAT POLL
- * ASKED ABOUT, never for a newer send or edit that replaced it. A changed
- * or ended session, a lost sign-in, an unavailable task, denied storage,
- * and a lost connection each say so in their own words; sending waits
- * for an explicit reconnection under stale authority, and drafting stays
- * available.
- *
- * Revision (build 1550 annotations): a poll acknowledges only the request
- * it captured when it started; an answer is validated whole before any
- * state changes, so a malformed one retries instead of latching a changed
- * session or advancing a version nothing rendered; a task fragment held
- * back while the reader was inside the region lands after they leave it,
- * even when the server has nothing new; and the words carried across an
- * explicit reconnection are bound to the server-named account, the task,
- * and an expiry, so another account's tab never inherits them. */
-export declare const CHAT_CONTINUITY_SCRIPT: string;

package/dist/chat-controls.d.ts

@@ -1,117 +0,0 @@
-/** Fixed destinations only. A model cannot supply a URL or an executable action.
- * These open the existing authenticated controls, never grant their authority.
- */
-export declare const CHAT_CONTROLS: {
-    readonly task: {
-        readonly label: "Open task";
-        readonly target: "task";
-    };
-    readonly approval: {
-        readonly label: "Review & start";
-        readonly target: "task";
-    };
-    readonly planning: {
-        readonly label: "Approve plan";
-        readonly target: "task";
-    };
-    readonly recovery: {
-        readonly label: "Review recovery options";
-        readonly target: "task";
-    };
-    readonly cancel: {
-        readonly label: "Cancel task";
-        readonly target: "task";
-    };
-    readonly result: {
-        readonly label: "Open result";
-        readonly target: "task";
-    };
-    readonly findings: {
-        readonly label: "Open findings";
-        readonly target: "task";
-    };
-    readonly acceptance: {
-        readonly label: "Inspect result";
-        readonly target: "task";
-    };
-    readonly publish: {
-        readonly label: "Review publication";
-        readonly target: "task";
-    };
-    readonly projects: {
-        readonly label: "Manage projects";
-        readonly href: "/projects";
-    };
-    readonly flows: {
-        readonly label: "Open flows";
-        readonly href: "/flows";
-    };
-    readonly recipes: {
-        readonly label: "Browse workflows";
-        readonly href: "/recipes";
-    };
-    readonly workers: {
-        readonly label: "Manage workers";
-        readonly href: "/fleet";
-    };
-    readonly slack: {
-        readonly label: "Manage Slack";
-        readonly href: "/settings/slack";
-    };
-    readonly discord: {
-        readonly label: "Manage Discord";
-        readonly href: "/settings/discord";
-    };
-    readonly lead: {
-        readonly label: "Name your lead";
-        readonly href: "/settings/lead";
-    };
-    readonly integrations: {
-        readonly label: "Set up integrations";
-        readonly href: "/settings/integrations";
-    };
-    readonly settings: {
-        readonly label: "Open settings";
-        readonly href: "/settings";
-    };
-    readonly permissions: {
-        readonly label: "Review permissions";
-        readonly href: "/settings";
-    };
-    readonly providers: {
-        readonly label: "Connect an agent";
-        readonly href: "/settings/agents#providers";
-    };
-    readonly skills: {
-        readonly label: "Manage skills";
-        readonly href: "/settings/skills";
-    };
-    readonly tools: {
-        readonly label: "Manage tools";
-        readonly href: "/settings/tools";
-    };
-    readonly knowledge: {
-        readonly label: "Edit project knowledge";
-        readonly href: "/settings/knowledge";
-    };
-    readonly learning: {
-        readonly label: "Review learning history";
-        readonly href: "/settings/learning";
-    };
-    readonly mode: {
-        readonly label: "Review automatic approvals";
-        readonly href: "/mode";
-    };
-    readonly policy: {
-        readonly label: "Review organisation policy";
-        readonly href: "/settings/policy";
-    };
-};
-export type ChatControl = keyof typeof CHAT_CONTROLS;
-export declare function isChatControl(value: unknown): value is ChatControl;
-/** The exact recorded result of one execution, opened where the console's
- * own result panel lives: the task lens names the execution, the run names
- * the result, and the tab names what to read first. Never the latest run. */
-export type ChatResultTab = "summary" | "checks" | "changes";
-export declare function chatResultHref(task: string, run: number, tab?: ChatResultTab): string;
-export declare function chatControlHref(control: ChatControl, task: string, run?: unknown, project?: unknown): string;

package/dist/chat-core.d.ts

@@ -1,177 +0,0 @@
-import type { ChatProvider } from "./contracts/chat-tables.js";
-import type { Database, Statement, Store } from "./store.js";
-export type { ChatProvider };
-/** One person's chat in one app (chat_binding). */
-export type ChatBinding = {
-    provider: ChatProvider;
-    id: number;
-    installation: string;
-    team: string;
-    app: string;
-    member: string;
-    channel: string;
-    approver: string;
-    generation: number;
-    created: string;
-    created_by: string | null;
-    pair_event: string | null;
-    revoked: string | null;
-    revoked_by: string | null;
-};
-export type ChatRoom = {
-    id: number;
-    installation: string;
-    chat: string;
-    kind: "group" | "private";
-    conversation: string;
-    boundBy: string;
-    boundAt: string;
-    binding: number;
-    cursor: number;
-};
-export type PairingResult = {
-    ok: true;
-    binding: ChatBinding;
-    replay: boolean;
-    first: boolean;
-} | {
-    ok: false;
-    reason: "unknown-code" | "already-bound";
-};
-export type LeaseResult = {
-    ok: true;
-    generation: number;
-    cursor: number;
-} | {
-    ok: false;
-    reason: "busy";
-    holder: string;
-    until: string;
-};
-export declare const chatHash: (text: string) => string;
-export declare const PAIRING_CODE_TTL_MS: number;
-/** Tables whose rows carry a per-provider number the core assigns. */
-type Numbered = "chat_binding" | "chat_part" | "chat_room" | "chat_flow_prompt" | "chat_question_prompt" | "chat_note_draft";
-export declare function readChatBinding(row: Record<string, unknown>): ChatBinding;
-export declare class ChatCore {
-    readonly store: Store;
-    readonly provider: ChatProvider;
-    constructor(store: Store, provider: ChatProvider);
-    get db(): Database;
-    /** A statement bound to this provider. Its SQL must name `:provider`; one that doesn't is refused before it runs. */
-    prepare(sql: string): Statement;
-    /** The next number in this provider's run of a table (rows keep the numbers they were given). */
-    nextId(table: Numbered): number;
-    /** Every unrevoked binding of an installation, oldest first (liveness is checked per binding with `live`). */
-    bindings(installation: string): ChatBinding[];
-    /** The unrevoked binding one member holds, if any. */
-    bindingFor(installation: string, member: string): ChatBinding | null;
-    /** The exact binding, while unrevoked. */
-    bindingById(id: number): ChatBinding | null;
-    /** The oldest unrevoked binding: the single-person reading kept for status lines and fixtures. */
-    binding(installation: string): ChatBinding | null;
-    /** Unrevoked, and its person still an approver, unrevoked, at the generation it was paired under. */
-    live(binding: Pick<ChatBinding, "id" | "approver" | "generation">): boolean;
-    /** Every live binding of an installation, oldest first. */
-    liveBindings(installation: string): ChatBinding[];
-    /** Mint-time half of pairing: a fresh code replaces this person's outstanding ones (a teammate's stay theirs). */
-    savePairing(code: {
-        hash: string;
-        installation: string | null;
-        approver: string;
-        generation: number;
-        by: string;
-    }, now: Date, ttlMs?: number): void;
-    /**
-     * Consume a code and create the binding, in one transaction, by the same rules in every app: the code is unexpired,
-     * unconsumed and for this installation; its person is still an approver at the generation it was minted under; the
-     * member holds no other live pairing here, and the person no other live pairing on this installation. The
-     * conditional UPDATE is the consumption: exactly one caller wins however many race. The same event replayed (an app
-     * redelivering) finds its finished binding. Success retires the person's other outstanding codes. `first`: the
-     * member never paired with this installation before (a first pairing starts its notifications from now).
-     */
-    consumePairing(attempt: {
-        hash: string;
-        installation: string;
-        team: string;
-        app: string;
-        member: string;
-        channel: string;
-        event: string | null;
-    }, now: Date): PairingResult;
-    /** End one person's pairing and everything their chat could still do: its buttons, prompts, queued messages and unsent parts. */
-    revokeBinding(binding: Pick<ChatBinding, "id">, now?: Date, by?: string | null): boolean;
-    /** End every pairing of an installation (its app was disconnected), and every code still waiting for one. */
-    revoke(installation: string, now?: Date, by?: string | null): void;
-    room(installation: string, chat: string): ChatRoom | null;
-    rooms(installation: string): ChatRoom[];
-    /**
-     * Point a chat at a team conversation: an earlier choice for the same chat is revoked in the same transaction, and
-     * delivery starts from now (the conversation's history is read in the console, never replayed into a chat that
-     * just arrived). A conversation another group of this app already follows refuses.
-     */
-    bindRoom(args: {
-        installation: string;
-        chat: string;
-        kind: "group" | "private";
-        conversation: string;
-        by: string;
-        binding: number;
-    }, now: Date): {
-        ok: true;
-        room: ChatRoom;
-    } | {
-        ok: false;
-        reason: "group-taken";
-    };
-    unbindRoom(installation: string, chat: string, by: string, now: Date): boolean;
-    /** Forward only: a cursor never moves back, and a revoked room keeps its last position. */
-    advanceRoomCursor(id: number, messageId: number): boolean;
-    /** The shared rooms engine's view of this installation's rooms (chat-rooms.ts). */
-    roomBackend(installation: string, now: Date): import("./chat-rooms.js").RoomBackend;
-    /**
-     * Take or renew the installation's one worker lease. A holder renews at its generation; an expired holder is taken
-     * over at the next generation, and the poll cursor rides the lease, so a stale generation can neither poll nor move it.
-     */
-    acquire(installation: string, owner: string, ttlMs: number, now: Date): LeaseResult;
-    /** Hand the lease back (it ends now), so the next worker is not told busy for the rest of its time. */
-    release(installation: string, owner: string, now: Date): void;
-    owns(installation: string, owner: string, now?: Date): boolean;
-    /** The poll cursor moves forward only, and only under the generation that read it. */
-    advanceCursor(installation: string, owner: string, generation: number, cursor: number, now: Date): boolean;
-    /** When the app said to wait (a rate limit): "" when it hasn't. */
-    retryAt(installation: string): string;
-    /** Wait at least until then before the next send; a later wait already asked for stands. */
-    deferUntil(installation: string, until: string): void;
-    /** What is wrong with the connection right now (null: nothing), as the lease holder last saw it. */
-    setProblem(installation: string, owner: string, problem: string | null): void;
-    /** The worker reached the app. */
-    setConnected(installation: string, owner: string, now: Date): void;
-    /** The worker stopped: no holder, no connection. */
-    stop(installation: string, owner: string): void;
-    /** The connection as settings show it. */
-    runtime(installation: string): {
-        connected: string | null;
-        problem: string | null;
-        leaseUntil: string | null;
-    } | null;
-    /** Where the app pushes this installation's updates (null: the worker asks for them), and what's wrong, if anything. */
-    setPush(installation: string, push: {
-        url: string | null;
-        problem: string | null;
-    }, now: Date): void;
-    push(installation: string): {
-        url: string | null;
-        problem: string | null;
-        at: string | null;
-    } | null;
-    /** Small transport facts an app must remember per chat (a Teams service URL). Never credentials. */
-    meta(installation: string, key: string): string | null;
-    /** Every small fact whose key starts with this prefix (a fixed, LIKE-safe word). */
-    metaStartingWith(installation: string, prefix: string): {
-        key: string;
-        value: string;
-    }[];
-    deleteMeta(installation: string, key: string): void;
-    setMeta(installation: string, key: string, value: string, now: Date): void;
-}