toolroll 0.9.103 → 0.9.105

package/dist/server/http.d.ts

@@ -1,337 +0,0 @@
-/** HTTP answers every console route shares: server options, body limits, safe responses, redirects and return paths. */
-import type { TerminalHost } from "../live-terminal.js";
-import { type Html } from "../html.js";
-import { type CliHttpOptions, type RunOperateAs } from "../cli-http.js";
-import { type CodingWorkspace } from "../coding-workspace.js";
-import { type run as execRun } from "../exec.js";
-import { type MailSender } from "../flow-actions.js";
-import { type FetchLike } from "../flow-share.js";
-import { type TriggerIo } from "../flow-triggers.js";
-import { type InstallMethod } from "../install-method.js";
-import { type IntegrationIo } from "../integrations.js";
-import { type VersionRunner } from "../model-catalog.js";
-import { type cloneGithubRepo, type listGithubRepos, type previewGithubRepo } from "../onboard.js";
-import { type PublishExec } from "../publish.js";
-import { type ResultTab } from "../result-review.js";
-import { type Store } from "../store.js";
-import { type SubscriptionLeadRunner } from "../subscription-chat.js";
-import { type launchRuntimeUpdate } from "../toolroll-update.js";
-import { type IncomingMessage, type ServerResponse } from "node:http";
-import { type FolderLookRunner } from "../folder-look.js";
-import { type ProjectIdentities } from "../project-identity.js";
-import { type LearningRunner } from "../learning-look.js";
-export type ServeOptions = {
-    /** Tests: runs a person's command for the HTTP MCP gateway instead of operate.ts's. */
-    runOperateAs?: import("../mcp-person.js").RunOperateAs;
-    /** `toolroll demo`: the scripted lead that answers Chat instead of a model. */
-    demoLead?: import("../demo.js").DemoLead;
-    /** Tests: the bin whose real path says how Toolroll was installed (Settings → Updates' command). */
-    installBin?: string;
-    /** Native coding workspace injection for isolated integration tests. */
-    codingWorkspace?: CodingWorkspace;
-    /** Live terminals (tests stand their own in; null turns them off). Default: one on a machine that runs agents. */
-    terminalHost?: TerminalHost | null;
-    /** Read-only worker connections for heavy reads (read-executor.ts); 0 reads in-process. Default: off under tests. */
-    readWorkers?: number;
-    store: Store;
-    evidenceRoot: string;
-    clock?: () => Date;
-    /**
-     * The console's canonical https origin, when TLS terminates in front
-     * (arc 3 finding 2/16): EXACTLY an origin — no path, query, credentials.
-     * The one trust anchor for secure-context features: it joins the allowed
-     * hosts, its origin authorizes POSTs, cookies turn Secure, and the
-     * install/push cards light up. X-Forwarded-* is consulted only from a
-     * loopback peer, the same-host proxy (public-access.ts).
-     */
-    publicUrl?: string;
-    /** Tests: the shared command boundary `POST /api/cli` runs (default: operate.ts's runOperateAs). */
-    cliRunner?: RunOperateAs;
-    /** Tests: remote command metadata until the shared contract declares it. */
-    cliModeOf?: CliHttpOptions['modeOf'];
-    /** Tests: whether a password on a request is still accepted (default: this release's version, password-bearer.ts). */
-    passwordBearerAccepted?: boolean;
-    /** Tests: the clock request budgets for API tokens count by (request-budget.ts). */
-    requestBudgetClock?: () => number;
-    /** Where repos.json lives — every enrollment locks exactly this file. */
-    registryPath?: string;
-    /** This console fronts an `up` process: onboarding copy says how to watch. */
-    upConsole?: boolean;
-    /**
-     * The lead on by default (onboarding): with no lead set up, the agent CLI
-     * signed in on this computer runs it, once. `up` and `serve` turn this on;
-     * tests opt in.
-     */
-    leadByDefault?: boolean;
-    /** Test seam: the operating system the sign-in command is written for. */
-    platform?: NodeJS.Platform;
-    /** Test seam: whether this machine has an OS fence (macOS sandbox or bubblewrap) for checks. */
-    fenceAvailable?: () => boolean;
-    /** Extra Host values this server answers as (a Tailscale name, a LAN ip:port). */
-    allowedHosts?: readonly string[];
-    /**
-     * This computer's names on its tailnet (onboarding): read at start and every
-     * few minutes; the console answers to each on its own port without an
-     * --allow-host, and the phone card names the address. Absent = none.
-     */
-    tailnetNames?: () => Promise<readonly string[]>;
-    /**
-     * The first-account road (setup review): while NO approver exists, the
-     * login page offers "create the first account", gated by this code —
-     * printed once by the process that started the server, never stored.
-     * Five wrong codes close the road until the server restarts. The moment
-     * an approver exists, the page is the ordinary sign-in.
-     */
-    setupCode?: string;
-    /**
-     * Where the Telegram bot token lives when set from here. Present = the
-     * settings card renders; absent = no settings surface at all.
-     */
-    telegramTokenFile?: string;
-    /** Where messaging config files live (beside the database) — enables the
-     * primary-messenger selector on the settings screen. */
-    configDir?: string;
-    /** Test seam for the Slack setup handshake. */
-    slackFetcher?: typeof fetch;
-    /** Settings → Updates seams: the latest release, how this Toolroll was
-     * installed, its version, and how the updater job starts. Tests and
-     * screenshots inject these; production reads the registry and launchd. */
-    updates?: {
-        latest?: () => Promise<{
-            version: string;
-        }>;
-        method?: InstallMethod;
-        current?: string;
-        dist?: string;
-        launch?: typeof launchRuntimeUpdate;
-    };
-    discordFetcher?: typeof fetch;
-    /** Injected by tests: Microsoft sign-in, key metadata and Teams conversation calls. */
-    teamsFetcher?: typeof fetch;
-    /** Injected by tests: how "Check now" reaches GitHub (gh) and Linear (fetch). */
-    flowTriggerIo?: Partial<TriggerIo>;
-    /**
-     * The repo this console serves. Scopes run evidence to that repo's tasks
-     * (and unplaced ones) and turns on the gaps and capabilities views —
-     * without it those pages say so instead of guessing.
-     */
-    repo?: string;
-    /**
-     * The full authorization ceiling (v2 review, finding 1): `repos` this
-     * server may show and operate on, plus `projectRoots` under which any git
-     * repository qualifies. `repo` above is sugar for one entry in `repos`.
-     * No configuration at all is the legacy unscoped mode — everything
-     * visible, and stated as such where the code decides.
-     */
-    repos?: readonly string[];
-    projectRoots?: readonly string[];
-    /** Repositories the co-located `up` process has proved and is watching.
-     * Kept as a callback so projects added after startup appear immediately
-     * without turning the durable registry itself into an authorization source. */
-    currentRepos?: () => readonly string[];
-    /** Injected by tests: the fetch direct-API chat turns use, and where chat
-     * keys are read from (defaults to process.env). */
-    chatFetcher?: typeof fetch;
-    /** Subscription-backed mate transport; injected in tests so no real
-     * Codex or Claude membership turn is consumed. */
-    subscriptionChatRunner?: SubscriptionLeadRunner;
-    /** Tests: stands in for `codex mcp list --json` in the project (the Tools page's "Found on this computer"). */
-    codexToolList?: (cwd: string) => Promise<string | null>;
-    /** Tests: the home whose ~/.toolroll (or older ~/.standing-orders) tool-secrets and ~/.claude.json the Tools page uses. */
-    toolHome?: string;
-    /** v87: sends Send email steps' mail and the settings test (tests inject one). */
-    mailSender?: MailSender;
-    /** Injected by tests: how Flows → Import fetches a flow file's address. */
-    flowFetch?: FetchLike;
-    /** v89: Google's token endpoint (tests inject a scripted one). */
-    googleFetch?: typeof fetch;
-    /** Tests: every request a one-click connection makes (discovery, registration, tokens). */
-    connectFetch?: typeof fetch;
-    /** Tests: every request sign-in with the identity provider makes (discovery, keys, tokens). */
-    ssoFetch?: typeof fetch;
-    /** Cockpit B1: this `up` console's instance secret (null: none — the instance route answers 404). */
-    instanceSecret?: () => string | null;
-    /** v147 (easy-start C2): this console start's key epoch, minted once per start (absent: the server mints its own).
-     * A session's mutation key is bound to it; a key from another start is stale. */
-    keyEpoch?: string;
-    /** Easy-start C2: the browser mutation key. On (a real console start, operate.ts startConsole), a protected loopback
-     * install's browser sessions carry a key every mutation must present (server/mutation-key.ts). Off: unchanged. */
-    browserKey?: boolean;
-    /** v137: whether this console is draining (its `up` is stopping): /healthz says so at once, and pages say Toolroll is restarting. */
-    draining?: () => boolean;
-    /** Cockpit E: how Finder is asked to reveal a proved checkout (tests pass their own; never a launch). True: shown. */
-    revealPath?: (path: string) => Promise<boolean> | boolean;
-    chatEnv?: Record<string, string | undefined>;
-    /**
-     * The live peek's locality ASSERTION (live-peek v3 §3): the administrator
-     * who starts serve names the runner this machine owns. This is documented
-     * as an assertion, not machine-bound credential enforcement — the product
-     * has none anywhere. Absent = the peek is off, and says so.
-     */
-    desktopIdentity?: string;
-    /** Trusted native admission callback; enrollment rows alone never supply this authority. */
-    additionalProjectRepos?: () => readonly string[];
-    /** The co-located `up`'s exact admitted repositories, read on every request: its startup projects plus those
-     * added since (`repos add`, the lead, the console) and minus those removed. When given it replaces `repos` as
-     * the exact part of the ceiling, so an addition or removal shows without a restart. */
-    admittedRepos?: () => readonly string[];
-    connectionProbe?: typeof execRun;
-    /** The console's background checks (docs/plans/get-side-effects.md): sign-in checks, integration checks, model
-     * lists and the tidy-ups pages used to do. On for `up` and `serve`; a test turns them on, and `backgroundChecksMs` sets
-     * how often they run and ask this computer's agents again. */
-    backgroundChecks?: boolean;
-    backgroundChecksMs?: number;
-    /** Tests: how a person's folders are read off the console's thread (folder-look.ts), and how long a read may take. */
-    folderLook?: FolderLookRunner;
-    folderLookMs?: number;
-    /** Project identities resolved off the console's thread (project-identity.ts); `up` and `serve` pass them. Absent:
-     * the old synchronous reads (embedders and tests). */
-    identities?: ProjectIdentities;
-    /** Tests: how the background pass runs one project's learning recovery in a process of its own. */
-    learningRunner?: LearningRunner;
-    connectionHome?: string;
-    /** Test seam for Chat's first tasks: the `gh` and `git grep` reads. */
-    firstTaskRunner?: typeof execRun;
-    /** Test seam for Settings → Integrations: how its checks reach services (fetch, gh, mail servers). */
-    integrationIo?: Partial<IntegrationIo>;
-    modelCatalogFetcher?: typeof fetch;
-    /** Test seams for Settings → Models: CLI version probes and the PATH they search. */
-    modelRunner?: VersionRunner;
-    modelPath?: string;
-    localRunner?: string;
-    /** The checkout pool root the peek confines itself to (realpath-proved). */
-    poolRoot?: string;
-    /**
-     * Editor deep links (arc 6): a DEPLOYMENT capability, not an activation.
-     * vscode:// links open on the BROWSER's machine, so links render only
-     * when three statements align: the operator started serve with
-     * --editor vscode AND --runner (this machine owns the worktrees), the
-     * run belongs to that runner, and THIS session turned links on for
-     * this device. "vscode" is the only value; the scheme is never data.
-     */
-    editorLinks?: "vscode";
-    /** Injected by tests: the onboarding ceremony's gh-facing halves — the
-     * ceremony's gating, nonce, and enrollment logic is what the HTTP tests
-     * prove; gh itself is proved by onboard.test.ts. */
-    ghPreview?: typeof previewGithubRepo;
-    ghClone?: typeof cloneGithubRepo;
-    ghList?: typeof listGithubRepos;
-    /** Injected by tests: the git and gh calls pull-request setup and Merge make. */
-    publishExec?: PublishExec;
-};
-export declare const BODY_CAP: number;
-/** How long a stop waits for subagents and the lead's follow pass before closing anyway. */
-export declare const SHUTDOWN_WAIT_MS = 5000;
-/**
- * Match `/t/<id>` (suffix "") or `/t/<id>/<verb>` — the id percent-decoded
- * exactly once, refused when it does not decode, is oversized, or carries
- * control characters. Legacy CLI-created ids are free-form; the URL is not.
- */
-export declare function matchTaskPath(pathname: string, suffixPattern: string): {
-    taskId: string;
-    verb: string;
-} | null;
-export declare function taskHref(taskId: string): string;
-export declare function runHref(runId: number): string;
-export declare const SAFETY: {
-    readonly "Content-Security-Policy": "default-src 'none'; style-src 'self' 'unsafe-inline'; font-src 'self'; manifest-src 'self'; worker-src 'self'; img-src 'self'; form-action 'self'; base-uri 'none'; frame-ancestors 'none'";
-    readonly "X-Content-Type-Options": "nosniff";
-    readonly "Referrer-Policy": "no-referrer";
-    readonly "Cache-Control": "no-store";
-};
-/** A text/html answer carries markup (Html); every other type, its own text. */
-export type ResponseBody<T extends string> = T extends `text/html${string}` ? Html : string;
-export declare function respond<T extends string>(response: ServerResponse, status: number, type: T, body: ResponseBody<T>): void;
-/**
- * A page response. With a nonce, this response's CSP admits exactly the one
- * inline script the shell stamped with the same value — generated per
- * response, never shared, never 'unsafe-inline' (Codex board review,
- * finding 9). Everything else keeps the constant script-free policy.
- */
-export declare function page(response: ServerResponse, status: number, document: Html, nonce?: string, fetches?: boolean): void;
-/**
- * An outside sign-in comes back only to the browser that started it: the
- * start leaves the visit's state in this cookie (Lax, so it rides the
- * service's redirect back; the session cookie is Strict and doesn't), and a
- * return whose state isn't the one this browser holds is refused. So nobody
- * can start a sign-in and have someone else finish it into their project.
- */
-/** A moment's page on the way to or back from another site's sign-in: no stylesheet may load there, so the palette rides inline. */
-export declare const HANDOFF_STYLE: Html;
-export declare const SIGN_IN_COOKIE = "so-sign-in";
-export declare function startedHere(request: IncomingMessage, state: string): boolean;
-export declare const signInSpent: (path: string) => string;
-/**
- * Off to another site's sign-in (Google, a service's one-click connection):
- * a page that moves on by itself. Not a redirect: every page's form-action
- * 'self' also covers where a form's answer redirects, so a browser stops a
- * form that is answered with another site's address.
- */
-export declare function goOutside(response: ServerResponse, to: string, words: string, bind: {
-    state: string;
-    path: string;
-    secure: boolean;
-}): void;
-/** A form's answer: back to `page` (which may carry its own query) saying `said` or `problem` words, then an anchor. */
-export declare function sayTo(response: ServerResponse, page: string, anchor?: string): (key: "said" | "problem", words: string, at?: string) => void;
-export declare function redirect(response: ServerResponse, to: string): void;
-export declare const taskChatHref: (taskId: string) => string;
-/** A project's own lead thread (v77). */
-export declare const projectChatHref: (repo: string) => string;
-export declare function safeReturn(raw: string | null | undefined): string;
-/**
- * The destination a sign-in returns to (a phone's deep link to an exact
- * task or result): `safeReturn`, then narrower still — never the sign-in,
- * sign-up, join or sign-out roads themselves (a loop, or a token in a
- * path), never an encoded second scheme or host once the browser decodes
- * it, never a query key that could carry a secret, and never a region
- * fetch (`?fragment=`), which is a piece of a page and not a place to
- * land. Only the app's own pages qualify: the task lens, the chat, the
- * work and board views, and the fixed control destinations a phone
- * button can name. Nothing here is a second redirect framework: one
- * same-site path, or "/".
- */
-export declare const LOGIN_RETURN_PAGES: RegExp;
-export declare function loginReturn(raw: string | null | undefined): string;
-/** A request path fit for a log: the one-time sign-in link's code is left out. */
-export declare function redactedPath(path: string): string;
-/** The sign-in page that comes back to `path` afterwards, or plain /login when the path is not one to come back to. */
-export declare function loginHref(path: string): string;
-/** Chat actions may return only to the unified chat or one task-focused
- * lens. Other same-site paths are valid elsewhere, but not for chat forms. */
-export declare function safeChatReturn(raw: string | null | undefined): string;
-export declare function chatReturnWithSaid(back: string, said: string): string;
-export declare const chatReturnWithLatest: (back: string) => string;
-/** The one result page's address: the task and its run, never a project path
- * (the page finds the result's project itself and keeps the person's own). */
-export declare const reviewHref: (taskId: string, runId?: number | null) => string;
-/** The chat's result detail (package 3): the same panel the run page
- * and the cockpit render, opened beside the conversation when the screen
- * has room and as a dedicated view with Back to chat when it does not. */
-export declare const chatResultHref: (taskId: string, runId: number, tab?: ResultTab) => string;
-export declare function form(request: IncomingMessage, cap?: number): Promise<URLSearchParams>;
-/** A refused chat setting (POST /chat/config): back on the lead's settings it is a ?problem=, which the page's section
- * shows in place with the edits kept; elsewhere it stays the chat's said line. */
-export declare function chatRefusal(back: string, words: string): string;
-/** The longest page a refusal's "Set a password" link carries on to. */
-export declare const PASSWORD_SET_NEXT_MAX = 512;
-/**
- * Where /password/set continues once the first password is set (easy-start C4): a page of this console a browser can
- * open, as path and query only — one leading slash, never two, no backslash, no scheme or host (also once decoded),
- * no control characters, at most PASSWORD_SET_NEXT_MAX characters, never the sign-in, sign-out, sign-up, join or
- * password roads, never a region fetch, query keys that could carry a secret dropped. Anything else is home ("/").
- */
-export declare function passwordSetNext(raw: string | null | undefined): string;
-/**
- * The page a refused request was on, for its "Set a password" link: a page read is itself; a refused form is its own
- * address when a browser can open it (a settings page posting to itself), else the nearest page above it
- * (`/t/x/complete` → `/t/x`, `/flows/example` → `/flows`), since
- * the console sends no Referer to name the page the form was on. Checked by passwordSetNext; else home.
- */
-export declare function refusalNext(method: string, url: URL): string;
-/**
- * Whether an act asked for its answer in place (live-pages-and-home.md B2.3): `x-toolroll-act: in-place` turns the
- * answer into a small JSON outcome (`{ outcome, words }`) instead of a page or a redirect. It chooses only the answer's
- * shape: a handler reads it after every proof and authorisation decision is made, and no decision ever reads it.
- */
-export declare function answersInPlace(request: IncomingMessage | null | undefined): boolean;

package/dist/server/in-place.d.ts

@@ -1,15 +0,0 @@
-/**
- * Which pages may change in place, and which may be read ahead (docs/plans/live-pages-and-home.md A1.1, A1.4).
- *
- * Both are explicit allowlists of route-table ids (route-table.ts): nothing is eligible by default, so a new route
- * loads as its own document until it is added here on purpose. The welcome and first-run pages, the terminal, sign-in,
- * the release sheet and every page not named below are never eligible. A page on the in-place list is still a document
- * load when it is sensitive (a password field) or carries a page script (serve.ts sendScreen decides `inPlace`).
- */
-/** Home, the Tasks list, a task page, Projects, Agents (the list), Search and the Settings pages. */
-export declare const IN_PLACE_ROUTES: ReadonlySet<string>;
-/** What may be read ahead with `x-toolroll-read: prefetch`: Home, the Tasks list, Projects, Agents (the list, never an
- * opened agent), Search, a task page. Everything else answers 204. */
-export declare const PREFETCH_ROUTES: ReadonlySet<string>;
-export declare function inPlaceRoute(id: string | undefined, url: URL): boolean;
-export declare function prefetchRoute(id: string | undefined, url: URL): boolean;

package/dist/server/kit-standalone.d.ts

@@ -1,22 +0,0 @@
-/**
- * The kit's behaviour for a server page the workspace bundle doesn't place (src/design/KIT.md): a chromed page
- * answered without the React workspace (a bearer or link session, or a build without browser assets). It is the
- * same behaviour src/browser/kit/behavior.ts gives kit markup inside the workspace, kept small and dependency-free so
- * it can ride the page's one nonce'd script (serve.ts sendScreen):
- *
- * - the composer grows from its rows to its max rows and then scrolls, and keeps "has text" and a gated send in step;
- * - a gated send does nothing while the box is empty;
- * - an idea (`data-k-draft`) adds its words to its composer in place;
- * - the composer's project chip and + open a small menu;
- * - overlays (`data-k-open`, `data-k-close`): the page behind inert, Tab kept inside, Escape, Close and the scrim close
- *   it, focus returns to the trigger; a popover or menu becomes a bottom sheet on a phone;
- * - a button switch (`button.k-switch[role=switch][data-k-switch]`) flips and says its new state;
- * - the phone keyboard: html.kb-open and --kb from the visual viewport.
- *
- * It reads no field but a composer's own text, posts nothing and fetches nothing: every control still works as plain
- * HTML without it. It never rides a sensitive page (one that asks for a password or shows a secret), where the page
- * carries no chrome additions.
- */
-export declare const KIT_STANDALONE_SCRIPT = "(function(){\nif(window.__kitStandalone)return;window.__kitStandalone=1;var d=document;\nvar PHONE=\"(max-width: 760px)\";var FOCUSABLE='a[href], button:not([disabled]), input:not([disabled]):not([type=\"hidden\"]), select:not([disabled]), textarea:not([disabled]), [tabindex]:not([tabindex=\"-1\"])';\nfunction phone(){return window.matchMedia(PHONE).matches;}\nfunction sync(t){var box=t.closest(\".k-composer\");if(!box)return;var st=getComputedStyle(t);var line=parseFloat(st.lineHeight)||21;\nvar pad=(parseFloat(st.paddingTop)||0)+(parseFloat(st.paddingBottom)||0);var max=line*(Number(t.getAttribute(\"data-max\"))||8)+pad;var min=line*(Number(t.getAttribute(\"data-min\"))||1)+pad;\nt.style.height=\"auto\";t.style.height=Math.max(min,Math.min(t.scrollHeight,max))+\"px\";t.style.overflowY=t.scrollHeight>max+1?\"auto\":\"hidden\";\nvar on=t.value.trim()!==\"\";box.classList.toggle(\"has-text\",on);var sends=box.querySelectorAll(\".k-send[data-gate]:not(:disabled)\");for(var i=0;i<sends.length;i++)sends[i].setAttribute(\"aria-disabled\",String(!on));}\nfunction syncAll(){var all=d.querySelectorAll(\".k-composer-ta\");for(var i=0;i<all.length;i++)sync(all[i]);}\nvar stack=[];\nfunction visible(el){return !!el&&el.isConnected&&el.getClientRects().length>0;}\nfunction openPanel(panel,trigger,onClose){if(stack.length)closeTop(\"close\");var floating=panel.classList.contains(\"k-pop\");var ph=phone();\nif(!panel.isConnected)d.body.appendChild(panel);var scrim=d.createElement(\"div\");scrim.className=\"k-scrim\"+(!floating||ph?\" dim\":\"\");panel.parentNode.insertBefore(scrim,panel);\npanel.hidden=false;panel.setAttribute(\"aria-modal\",\"true\");if(!panel.hasAttribute(\"tabindex\"))panel.tabIndex=-1;panel.classList.toggle(\"as-sheet\",floating&&ph);\nif(floating&&!ph&&trigger){var at=trigger.getBoundingClientRect();var w=panel.offsetWidth||336,h=panel.offsetHeight||200;var left=Math.min(Math.max(8,at.right-w),window.innerWidth-w-8);var below=at.bottom+6;var top=below+h>window.innerHeight-8?Math.max(8,at.top-h-6):below;panel.style.left=Math.round(left)+\"px\";panel.style.top=Math.round(top)+\"px\";}\nvar inerted=[];for(var node=panel;node!==d.body&&node.parentElement;node=node.parentElement){var kids=node.parentElement.children;for(var i=0;i<kids.length;i++){var s=kids[i];if(s===node||s===scrim||s.inert)continue;s.inert=true;inerted.push(s);}}\nvar entry={panel:panel,scrim:scrim,trigger:trigger,inerted:inerted,onClose:onClose};stack.push(entry);scrim.addEventListener(\"click\",function(){closeEntry(entry);});\nvar first=panel.querySelector(\"[autofocus]\")||panel.querySelector('input:not([type=\"hidden\"]), textarea, select')||panel;first.focus();}\nfunction closeEntry(entry){var at=stack.indexOf(entry);if(at<0)return;stack.splice(at,1);for(var i=0;i<entry.inerted.length;i++)entry.inerted[i].inert=false;\nentry.scrim.remove();entry.panel.hidden=true;entry.panel.classList.remove(\"as-sheet\");if(visible(entry.trigger))entry.trigger.focus();if(entry.onClose)entry.onClose();}\nfunction closeTop(){var top=stack[stack.length-1];if(top)closeEntry(top);}\nfunction menu(trigger,title,items){var ph=phone();var panel=d.createElement(\"div\");panel.className=ph?\"k-sheet\":\"k-pop k-pop-menu\";panel.setAttribute(\"role\",\"dialog\");\nvar id=\"k-menu-\"+Math.random().toString(36).slice(2,8);panel.setAttribute(\"aria-labelledby\",id);var head=d.createElement(\"div\");head.className=ph?\"k-sheet-h\":\"k-pop-h\";\nvar h=d.createElement(ph?\"h2\":\"h3\");h.id=id;h.textContent=title;var x=d.createElement(\"button\");x.type=\"button\";x.className=\"k-btn k-btn-ghost k-btn-sm k-btn-icon\";x.setAttribute(\"aria-label\",\"Close\");x.setAttribute(\"data-k-close\",\"\");x.textContent=\"\\u00d7\";\nhead.appendChild(h);head.appendChild(x);var list=d.createElement(\"div\");list.className=\"k-menu\";var entry;\nitems.forEach(function(item){var b=d.createElement(\"button\");b.type=\"button\";b.textContent=item.current?item.label+\" \\u00b7 current\":item.label;if(item.current)b.setAttribute(\"aria-current\",\"true\");b.addEventListener(\"click\",function(){closeTop();item.act();});list.appendChild(b);});\npanel.appendChild(head);panel.appendChild(list);openPanel(panel,trigger,function(){panel.remove();});}\nfunction composerMenu(target){var chip=target.closest(\"[data-k-composer-project]\");var plus=target.closest(\"[data-k-composer-plus]\");var id=chip?chip.getAttribute(\"data-k-composer-project\"):plus?plus.getAttribute(\"data-k-composer-plus\"):null;if(id===null)return false;\nvar hidden=d.getElementById(id+\"-project\");function choose(trigger){if(!hidden)return;var items=[];try{var parsed=JSON.parse(hidden.getAttribute(\"data-items\")||\"[]\");if(Array.isArray(parsed))items=parsed.filter(function(one){return typeof one===\"string\";});}catch(e){items=[];}\nmenu(trigger,\"Project\",items.map(function(name){return{label:name,current:name===hidden.value,act:function(){hidden.value=name;var c=d.querySelector('[data-k-composer-project=\"'+CSS.escape(id)+'\"]');if(c){var l=c.querySelector(\"[data-k-project-name]\");if(l)l.textContent=name;c.setAttribute(\"aria-label\",\"Project: \"+name+\". Change\");}hidden.dispatchEvent(new Event(\"change\",{bubbles:true}));}};}));}\nif(chip){choose(chip);return true;}var attach=d.querySelector('input[type=\"file\"][data-k-attach=\"'+CSS.escape(id)+'\"]');var items=[];if(attach)items.push({label:\"Attach a file\",act:function(){attach.click();}});\nif(hidden)items.push({label:\"Choose project\",act:function(){choose(d.querySelector('[data-k-composer-project=\"'+CSS.escape(id)+'\"]')||plus);}});if(items.length)menu(plus,\"Add to your message\",items);return true;}\nd.addEventListener(\"input\",function(e){var t=e.target;if(t&&t.classList&&t.classList.contains(\"k-composer-ta\"))sync(t);});\nd.addEventListener(\"click\",function(e){var t=e.target;if(!t||!t.closest)return;\nif(t.closest('.k-send[data-gate][aria-disabled=\"true\"]')){e.preventDefault();return;}\nvar draft=t.closest(\"[data-k-draft]\");if(draft){var box=d.getElementById((draft.getAttribute(\"data-k-into\")||\"\")+\"-text\");if(box&&!box.disabled){e.preventDefault();var words=draft.getAttribute(\"data-k-draft\")||\"\";var typed=box.value;\nbox.value=typed.trim()===\"\"?words:typed.indexOf(words)>=0?typed:typed.replace(/\\s+$/,\"\")+\"\\n\"+words;sync(box);box.focus();}return;}\nif((t.closest(\"[data-k-composer-project]\")||t.closest(\"[data-k-composer-plus]\"))&&composerMenu(t)){e.preventDefault();return;}\nvar opener=t.closest(\"[data-k-open]\");if(opener){var panel=d.getElementById(opener.getAttribute(\"data-k-open\")||\"\");if(panel){e.preventDefault();openPanel(panel,opener);}return;}\nif(t.closest(\"[data-k-close]\")){var top=stack[stack.length-1];if(top&&top.panel.contains(t)){e.preventDefault();closeEntry(top);}return;}\nvar sw=t.closest(\"button.k-switch[role=switch][data-k-switch]\");if(sw){var on=sw.getAttribute(\"aria-checked\")!==\"true\";sw.setAttribute(\"aria-checked\",String(on));var w=(sw.getAttribute(\"data-k-switch\")||\"On|Off\").split(\"|\");var s=sw.querySelector(\"[data-k-words]\");if(s)s.textContent=(on?w[0]:w[1])||\"\";sw.dispatchEvent(new CustomEvent(\"k-switch\",{bubbles:true,detail:{on:on}}));}});\nd.addEventListener(\"keydown\",function(e){var top=stack[stack.length-1];if(!top)return;if(e.key===\"Escape\"){e.preventDefault();closeEntry(top);return;}if(e.key!==\"Tab\")return;\nvar items=Array.prototype.filter.call(top.panel.querySelectorAll(FOCUSABLE),visible);if(!items.length){e.preventDefault();top.panel.focus();return;}var first=items[0],last=items[items.length-1];\nif(e.shiftKey&&(d.activeElement===first||d.activeElement===top.panel)){e.preventDefault();last.focus();}else if(!e.shiftKey&&d.activeElement===last){e.preventDefault();first.focus();}},true);\nfunction kb(){var v=window.visualViewport;if(!v)return;var covered=Math.max(0,Math.round(window.innerHeight-v.height-v.offsetTop));d.documentElement.style.setProperty(\"--kb\",covered+\"px\");d.documentElement.classList.toggle(\"kb-open\",covered>80);}\nif(window.visualViewport){window.visualViewport.addEventListener(\"resize\",kb);window.visualViewport.addEventListener(\"scroll\",kb);}\nvar root=d.documentElement;root.classList.add(\"k-js\");d.addEventListener(\"keydown\",function(e){if(e.key===\"Tab\"||e.key===\"F6\")root.classList.add(\"k-kbd\");},true);d.addEventListener(\"pointerdown\",function(){root.classList.remove(\"k-kbd\");},true);\nif(d.readyState===\"loading\")d.addEventListener(\"DOMContentLoaded\",syncAll);else syncAll();\n})();";
-/** Whether a page's markup has kit pieces the standalone behaviour wires (a composer, an overlay, a button switch, an idea). */
-export declare const KIT_BEHAVIOR_MARKUP: RegExp;