toolroll 0.9.103 → 0.9.105

package/dist/server/session.d.ts

@@ -1,192 +0,0 @@
-/** Browser sessions and the signed-in caller of a request. */
-import { type ChatDraft } from "../converse.js";
-import { type Principal } from "../operate-remote.js";
-import { type Store } from "../store.js";
-import { type Authority } from "../local-owner.js";
-import { type Server } from "node:http";
-/** A user agent, reduced to safe display words — never echoed raw. */
-export declare function oneLineUa(raw: string | string[] | undefined): string;
-export declare const SESSION_COOKIE = "standing-orders_session";
-/** Stands in for "no project" in a ceiling: no folder resolves to it, so it admits nothing. */
-export declare const NO_PROJECT = "/\0no-project";
-/** Where `up`'s one-time sign-in link points, and how long it works. */
-export declare const SIGN_IN_LINK_PATH = "/login/once/";
-export declare const SIGN_IN_LINK_MS: number;
-/** A cookie idles out after half a day and dies outright after a week. */
-export declare const SESSION_IDLE_MS: number;
-export declare const SESSION_ABSOLUTE_MS: number;
-/** A session's lifetime, the one reading: within its idle and absolute limits (sign-in lookup and every act use it). */
-export declare const sessionWithinLifetime: (session: {
-    lastSeen: number;
-    createdAt: number;
-}, now: number) => boolean;
-/** An approval nonce is a rendered form, not a standing right — it ages out fast. */
-export declare const NONCE_TTL_MS: number;
-export declare const NONCE_CAP = 500;
-/** Read-only fragment polls that must never refresh session activity (arc 1). */
-export declare const NO_TOUCH_FRAGMENTS: ReadonlySet<string>;
-export type Session = {
-    name: string;
-    csrf: string;
-    /** v147 (easy-start C1): full, or the local owner's restricted authority. Set when the session is made; never changed. */
-    authority: Authority;
-    /** v147: a local owner's session stands only while local mode is on at this generation (null for a full session). */
-    localGeneration: number | null;
-    /** v147 (C2, filled in by the browser-key wave): the console start whose mutation key this session holds, and a hash of
-     * that key (never the key). Null: no key yet, or a session saved before v147 — stale, so mutations ask to reconnect. */
-    keyEpoch: string | null;
-    keyHash: string | null;
-    /** v29: the account's standing at login — the central gate reads it;
-     * the revocation cascade kills the session outright. */
-    role: "approver" | "viewer";
-    /** The approver generation at login: credential rotation kills the cookie. */
-    generation: number;
-    createdAt: number;
-    lastSeen: number;
-    /** The open project — a VIEW FILTER chosen inside the ceiling, never authorization. */
-    project: string | null;
-    /** Bumped on every open: stale tabs carry the revision they were rendered under. */
-    projectRevision: number;
-    /** v100: signed in with the identity provider, and when it last checked them (a step-up within 10 minutes needs no password). */
-    sso?: {
-        at: number;
-    };
-    /** Cockpit B2: when a password was last verified on this session (in memory only: a restart forgets it). */
-    passwordAt?: number;
-    /** Cockpit B2: when the identity provider last re-checked this person on request (a step-up's re-authentication).
-     * Only this, or a password, starts a freshness window; an ordinary sign-in never does. In memory only. */
-    ssoReauthAt?: number;
-    /** Cockpit B2: an explicit provider re-check not yet spent: stands in for ONE step-up (consumed by it). In memory only. */
-    ssoNowAt?: number;
-    /** Forget: nothing verified before this counts as fresh. */
-    freshFloor?: number;
-    /** v101: the browser and address it signed in from, for the person to recognise it. */
-    agent?: string | null;
-    address?: string | null;
-    /** Onboarding preview records (arc: repo onboarding, finding 14) —
-     * session-held, swept at mint, at most 3, consumed exactly once. */
-    onboard?: Map<string, {
-        nameWithOwner: string;
-        rootIndex: number;
-        target: string;
-        diskUsageKib: number | null;
-        large: boolean;
-        mintedAt: number;
-    }>;
-    /** When this session last READ the board — the anchor for "since you
-     * last looked". Full page loads move it; fragment polls never do. */
-    sawBoardAt: number | null;
-    /** Fleet chat (v13): drafts and the last reply live HERE and nowhere
-     * durable — restart or logout loses them by design (v2 finding 12). */
-    chat?: SessionChat;
-    /** Editor links (arc 6): the SESSION's half of the activation — "this
-     * browser runs on the machine that holds the worktrees" is a statement
-     * only the person at the browser can make. Dies with the session. */
-    editorLinks?: boolean;
-};
-export type ChatCandidate = {
-    key: string;
-    draft: ChatDraft;
-    /** Resolved server-side at parse time from the opaque repoId. */
-    repoPath: string;
-    provider: string;
-    approver: string;
-    /** Digest of the frozen explicit repo list at turn time — filing
-     * re-proves it (v2 new finding 5). */
-    ceilingDigest: string;
-    createdAt: number;
-    state: "pending" | "filing";
-};
-export type SessionChat = {
-    candidates: Map<string, ChatCandidate>;
-    lastTurn: {
-        id: number;
-        reply: string | null;
-        staticError: string | null;
-        proposalsDiscarded: boolean;
-    } | null;
-};
-/** One rendered approval form: who saw which digest of which task, once. */
-export type ApprovalNonce = {
-    name: string;
-    taskId: string;
-    digest: string;
-    expiresAt: number;
-};
-export type Who = {
-    name: string;
-    via: "cookie";
-    session: Session;
-    role: "approver" | "viewer"; /** v147: the session's own authority. */
-    authority: Authority;
-} | {
-    name: string;
-    via: "bearer";
-    role: "approver" | "viewer"; /** v101: the API token it came with. */
-    token?: string;
-    /** The complete proved API-token authority, retained across body reads. */ principal?: Principal;
-    generation: number;
-};
-/** A full session's authority fields when it is made (a password, an identity-provider sign-in, a sign-up or join).
- * The browser-key wave adds the key epoch and hash here. */
-export declare const FULL_SESSION: Pick<Session, "authority" | "localGeneration" | "keyEpoch" | "keyHash">;
-/** A caller's authority: a browser session's own, or full for a bearer credential (an API token or a password). */
-export declare function authorityOfWho(who: Who): Authority;
-/** The browser session of a caller its route admits only through a browser sign-in (the row's callers or role). */
-export declare function browserCaller(who: Who): Extract<Who, {
-    via: "cookie";
-}>;
-/**
- * v101: browser sessions in memory and in the database (by a hash of the
- * cookie, never the cookie), so a restart signs no one out and a person can
- * see and end their sessions. The in-memory map is the working set; a cookie
- * it hasn't seen is looked up by its hash.
- */
-export declare class PersistentSessions extends Map<string, Session> {
-    private readonly db;
-    private readonly ids;
-    private readonly savedAt;
-    constructor(db: Store);
-    static hash(id: string): string;
-    set(id: string, session: Session): this;
-    delete(id: string): boolean;
-    /**
-     * Keep a changed session (its project, its provider check); `seen` only once a minute. Only ever an update: a session
-     * ended elsewhere (another process, Sessions) is dropped here, never written back by its cached copy (live terminals
-     * review, rounds 2–3, finding 1).
-     */
-    persist(session: Session, seen?: boolean): void;
-    /** Whether this exact session is still saved in the database (ended from another process, it isn't): read at the act. */
-    savedNow(session: Session): boolean;
-    /** Whether this cookie's session is still saved (one ended in another process is not). */
-    stillSaved(id: string): boolean;
-    /** A cookie from before a restart, if its session is still kept. */
-    load(id: string): Session | null;
-    /** End one session by its kept hash (from the Sessions page). */
-    endByHash(idHash: string): void;
-    /** Whether this exact session is still signed in here (not signed out, ended from Sessions, expired or replaced). */
-    holds(session: Session): boolean;
-    hashOf(session: Session): string | null;
-}
-/** The console's server, and the one-time sign-in link `up` opens: a path on this server, or null for no such approver.
- * closeCoding starts the coding shutdown on its own, ahead of the rest of a stop; close() awaits the same promise. */
-export type DecisionServer = Server & {
-    mintSignInLink(account: string): string | null;
-    mintLocalLink(): string | null;
-    readonly keyEpoch: string;
-    closeCoding(): Promise<void>;
-};
-/** A one-time sign-in link as the console holds it (only a hash of its code is the key): a full one for an account,
- * or a local owner's (easy-start C4), bound to local mode's generation and the owner's account generation when minted. */
-export type SignInLink = {
-    kind: "full";
-    account: string;
-    expires: number;
-} | {
-    kind: "local-owner";
-    account: string;
-    localGeneration: number;
-    accountGeneration: number;
-    expires: number;
-};
-export type SsoIntent = "sign-in" | "reauth" | "link";

package/dist/server/settings.d.ts

@@ -1,76 +0,0 @@
-import type { ServerRuntime } from './runtime.js';
-import { type RoleView, type SuggestedView } from "../models-ui.js";
-export declare function createSettingsHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-    modelsView: (canManage: boolean, csrf: string, now: Date, said: string | null, problem: string | null, query?: URLSearchParams) => {
-        runtimes: import("../model-catalog.js").RuntimeState[];
-        watch: import("../model-catalog.js").WatchState;
-        roles: RoleView[];
-        csrf: string;
-        canManage: boolean;
-        said: string | null;
-        problem: string | null;
-        chat: {
-            words: string;
-        } | null;
-        fresh: import("../model-catalog.js").SeenModel[];
-        scope: {
-            value: string;
-            label: string;
-            digest: string;
-            options: {
-                value: string;
-                label: string;
-            }[];
-        };
-        inUse: string | null;
-        presets: {
-            name: "opus" | "sized";
-            label: string;
-            words: string;
-            inUse: boolean;
-            recommended: boolean;
-        }[];
-        newer: {
-            from: string;
-            to: string;
-            name: string;
-            roles: string;
-        }[];
-        preview: {
-            title: string;
-            rows: {
-                role: string;
-                before: string;
-                after: string;
-                notes: string[];
-            }[];
-            hidden: {
-                scope: string;
-                digest: string;
-                change: string;
-            };
-        } | null;
-        unresolved: string | null;
-        sizing: {
-            small: string;
-            routine: string;
-            large: string;
-            risky: string;
-            classifier: string;
-        };
-        routing: string;
-        recent: {
-            taskId: string;
-            runId: number;
-            role: string;
-            chosen: string;
-            ranOn: string;
-        }[];
-        waiting: {
-            taskId: string;
-            title: string;
-        }[];
-        suggested: SuggestedView;
-    };
-};

package/dist/server/signup-gate.d.ts

@@ -1,9 +0,0 @@
-import type { IncomingMessage } from "node:http";
-export declare const SIGNUP_COOKIE = "so-signup";
-/** A fresh Set-Cookie value for the page that shows the form. */
-export declare function signupCookie(secure: string): string;
-/** Whether this post came from the console's own first-account page. */
-export declare function signupFromHere(request: IncomingMessage, allowedHost: (host: string | undefined) => boolean): boolean;
-/** The typed code against the printed one, in constant time over fixed-length digests: any input (empty, too long,
- * non-ASCII) is an ordinary wrong code, never a throw. */
-export declare function setupCodeMatches(typed: string, printed: string): boolean;

package/dist/server/sweeps.d.ts

@@ -1,4 +0,0 @@
-import type { ServerRuntime } from "./runtime.js";
-export declare function createSweepHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-};

package/dist/server/task-views.d.ts

@@ -1,98 +0,0 @@
-import { releaseProgressFor, type ShipChecks } from "../store.js";
-import { type Html } from "../html.js";
-import { type AssignmentSnapshot } from '../assignment.js';
-import { type FailureExplanation } from '../needs-you.js';
-import type { TaskFamily } from "../store.js";
-import { type ServerResponse } from "node:http";
-import { type Scope } from "../scope.js";
-import { type Chrome, type Screen } from "./chrome.js";
-import { type ServeOptions } from "./http.js";
-import { type TaskChatFocus } from "./render-chat.js";
-import { type ProjectPeek, type WorkRow } from "./render-pages.js";
-import { type CompletionReceiptView, type ResultDetail, type TaskPullRequest } from "./render-results.js";
-import { taskBody, type MilestoneProgressView, type PlanContractView, type PlanRevisionLedgerView, type RevisionDocView, type RevisionView, type RouteView } from "./render-tasks.js";
-import { type Who } from "./session.js";
-import type { TaskPageExtras } from "./runtime.js";
-import type { BrowserTaskView } from "../browser-workspace.js";
-import type { PlanRevision, TaskRef } from "../store.js";
-import { type Run, type Store, type Task, type TaskState } from "../store.js";
-import { type ReviewFacts } from "../workspace-ui.js";
-/** Shared task/result views, moved with their captured state. Lazy access preserves initialization order. */
-export interface TaskViewsRuntime {
-    store: Store;
-    projectCounts: (now: Date) => import("../work-index.js").WorkProjectCounts[];
-    admissionList: () => string[] | null;
-    visible: (repo: string | null) => boolean;
-    familyOf: (taskId: string) => TaskFamily | null;
-    clock: () => Date;
-    reviewFactsFor: (runId: number) => ReviewFacts | null;
-    evidenceRoot: string;
-    workAccess: () => {
-        principal: "operator";
-        repos: string[] | null;
-        includeUnplaced: boolean;
-        viewer: string | null;
-    };
-    mintApprovalNonce: (name: string, taskId: string, digest: string) => string;
-    restricted: () => boolean;
-    options: ServeOptions;
-    sendScreen: (response: ServerResponse, status: number, s: Screen) => void;
-    chromeFor: (project: string | null, active: Chrome["active"], listPane?: Html, scope?: Chrome["scope"]) => Chrome;
-    unscopedMode: boolean;
-    dockedConversation: (who: Who, focusTask: TaskChatFocus | null, chatProject: string | null, now: Date, back: string, resultRunId?: number | null) => import("../browser-workspace.js").BrowserConversation | null;
-    liveRefreshSeconds: () => number;
-}
-export declare function createTaskViews(runtime: TaskViewsRuntime): {
-    guided: (rootId: string, now: Date) => boolean;
-    projectFamilyPeek: (repo: string, now: Date) => ProjectPeek;
-    familiesInView: (project: string | null, options?: Parameters<Store["taskFamiliesAdmitted"]>[2]) => TaskFamily[];
-    familyTasksInView: (project: string | null, state?: TaskState, limit?: number) => (Task & {
-        repo: string | null;
-    })[];
-    revisionDestination: (child: string, back: string) => string;
-    earlierLiveVersions: (family: TaskFamily, now: Date) => string[];
-    familyHistory: (family: TaskFamily) => Html;
-    freshAssignment: (assignment: AssignmentSnapshot | null, receipt: CompletionReceiptView | null) => AssignmentSnapshot | null;
-    workRowOf: (task: Task & {
-        repo: string | null;
-        family?: TaskFamily;
-    }, now: Date, receipt?: CompletionReceiptView | null) => WorkRow;
-    taskListPane: (project: string | null, currentId: string | null) => Html;
-    runIsLive: (run: Pick<Run, "outcome" | "leaseId" | "taskRef">) => boolean;
-    runIsTaskResult: (run: Pick<Run, "role" | "finishedAt">) => boolean;
-    revisionViewOf: (ref: ReturnType<Store["lookupRef"]>) => RevisionView | null;
-    taskViewData: (taskId: string, who: Who, problem: string | null, render?: {
-        mintNonce?: boolean;
-    }) => Parameters<typeof taskBody>[0] | null;
-    routeViewOf: (taskId: string, ref: TaskRef | null, scope: Scope | null, now: Date, who: Who) => RouteView | null;
-    taskChatFocus: (taskId: string | null, now: Date, who?: Who, options?: {
-        mintNonce?: boolean;
-    }) => TaskChatFocus | null;
-    pullRequestTargetOf: (runId: number) => string | null;
-    taskPullRequestOf: (taskId: string, who: Who) => TaskPullRequest | null;
-    failureOf: (runs: readonly Run[], assignment: AssignmentSnapshot | null, readLog?: boolean) => FailureExplanation;
-    explainAttempt: (run: Run, receipt: AssignmentSnapshot["receipt"] | null, readLog?: boolean) => FailureExplanation;
-    runChecksHere: (runId: number | null, who: Who, returnTo: string) => {
-        action: string;
-        level: "quick" | "full";
-        returnTo: string;
-    } | null;
-    taskScreen: (response: ServerResponse, who: Who, taskId: string, problem: string | null, status: number, scopeDraft?: URLSearchParams, cancelDraft?: string, editPlan?: boolean, extras?: TaskPageExtras) => void;
-    armTaskResume: (response: ServerResponse, who: Who, taskId: string, named: string, returnTo: "chat" | "task", now: Date) => void;
-    planViewOf: (taskRef: number) => {
-        document: string;
-        sha256: string;
-        run: number;
-    } | null;
-    planContractViewOf: (taskRef: number, scope: Scope | null) => PlanContractView | null;
-    revisionDocOf: (row: PlanRevision) => RevisionDocView | null;
-    revisionLedgerOf: (taskRef: number) => PlanRevisionLedgerView;
-    progressOf: (taskRef: number, currentDocument: string | null) => MilestoneProgressView[] | null;
-    resultDetailOf: (run: Run, who: Who, now: Date) => ResultDetail;
-};
-/** A pull request's checks as Ship shows them (src/design/KIT.md timing rows): each check on one elapsed-time axis
- * from the first one's start, its state in the five words' tones, and one line for the whole. Null: no checks read. */
-export declare function shipViewOf(ship: ShipChecks | null, now: Date): NonNullable<BrowserTaskView["ship"]> | null;
-/** A release's steps as its progress view shows them: every step in order on one time axis, the ones not reached
- * queued, and where it stands in one line. Null: this task is no release. */
-export declare function releaseStepsViewOf(progress: ReturnType<typeof releaseProgressFor>, now: Date): NonNullable<BrowserTaskView["release"]> | null;

package/dist/server/tasks.d.ts

@@ -1,83 +0,0 @@
-/** tasks handlers, moved without changing their route bodies. */
-import { type Html } from "../html.js";
-import { type IncomingMessage, type ServerResponse } from "node:http";
-import { type Artifact, type Run, type Store } from "../store.js";
-import type { HandlerContext } from './handler-context.js';
-import type { ServerRuntime } from './runtime.js';
-import { type PeekAdmission } from "./render-pages.js";
-import { type CompletedWorkRow, type RankedReviewRow, type ReviewCockpitView } from "./render-results.js";
-import { type Who } from "./session.js";
-export declare function createTasksHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-    runListPane: (project: string | null, currentId: number | null) => Html;
-    peekFragment: (runId: number, sessionKey: string, editorMode?: boolean) => Promise<{
-        status: number;
-        body: Html;
-        retryAfter?: number;
-    }>;
-    taskMutation: (response: ServerResponse, who: Who, taskId: string, verb: string, posted: URLSearchParams, now: Date, request?: IncomingMessage | null) => void;
-    queueRegionFor: (project: string | null, csrf: string, revision: number, now: Date) => Html;
-    ciFailingFor: (runId: number | null, prNumber: number | null) => boolean;
-    completedRowFor: (taskId: string, project: string | null) => CompletedWorkRow | null;
-    attemptRowFor: (taskId: string, runId: number | null, project: string | null) => CompletedWorkRow | null;
-    resultRowOf: (task: NonNullable<ReturnType<Store["getTask"]>>, repo: string | null, historyProblem: string | null, run: Run | null) => CompletedWorkRow;
-    reviewCockpitViewOf: (row: RankedReviewRow, who: Who, now: Date) => ReviewCockpitView;
-    decisionEvidence: (response: ServerResponse, decisionId: number, artifactId: number) => void;
-    runEvidence: (response: ServerResponse, runId: number, artifactId: number) => void;
-    sendArtifact: (response: ServerResponse, linked: Artifact) => void;
-    peekGuards: (runId: number) => {
-        ok: true;
-        admit: PeekAdmission & {
-            entries: NonNullable<PeekAdmission["entries"]>;
-        };
-    } | {
-        ok: false;
-        message: string;
-        final?: boolean;
-    };
-    liveRunIds: (rows: readonly (Pick<Run, "id" | "outcome" | "leaseId" | "taskRef">)[]) => Set<number>;
-};
-/** Put away and Restore one task, and Put away old tasks (docs/plans/task-tidy.md): the preview reads only (GET-quiet);
- * putting away many is an approver's step-up bound to the digest of exactly what the preview showed. Each write
- * re-proves the person's standing inside its own transaction. */
-export declare function createTidyHandlers(runtime: ServerRuntime): {
-    "tasks.archive": (ctx: HandlerContext) => Promise<void>;
-    "work.put-away": (ctx: HandlerContext) => Promise<void>;
-    "work.put-away.apply": (ctx: HandlerContext) => Promise<void>;
-    "task.act.archive": (ctx: HandlerContext) => Promise<void>;
-    "task.act.restore": (ctx: HandlerContext) => Promise<void>;
-};
-/** How many cards a Board column shows; the column's count covers them all and its "View all" opens the list. */
-export declare const BOARD_COLUMN_LIMIT = 40;
-/**
- * Easy-start C1 (N1): the two writes a page load used to make, as keyed POSTs the shell sends (wave 1c wires the
- * browser). `agents.seen`: a finished result this person opened leaves their unread Done. `agents.watch`: hold (on each
- * keep-alive) or release (on unload) the short lease that quiets chat pings while this person's page shows the agent.
- * Each re-proves the run is in the person's projects; a reply carries nothing else.
- */
-export declare function createAgentSignalHandlers(runtime: ServerRuntime): {
-    "agents.seen": (ctx: HandlerContext) => Promise<void>;
-    "agents.watch": (ctx: HandlerContext) => Promise<void>;
-};
-/**
- * One-tap release approval (docs/plans/trusted-release-reports.md, slice A): the sheet (`/t/<id>/release`), the push's
- * opaque locator (`/approve/<task ref>`, a GET that only redirects to the sheet) and the sheet's approval, which the
- * task approval POST hands here once its shared checks (cookie session, CSRF and the browser key at admission, the
- * single-use nonce, a password or a standing proof) passed. The approval itself is the shared card wrapper around the
- * unchanged approve() (release-approval.ts approveReleaseCard).
- */
-export declare function createReleaseSheetHandlers(runtime: ServerRuntime): {
-    routes: {
-        "task.release": (ctx: HandlerContext) => Promise<void>;
-        "task.release.go-on": (ctx: HandlerContext) => Promise<void>;
-        "release.locate": (ctx: HandlerContext) => Promise<void>;
-    };
-    sheetScreen: (ctx: Pick<HandlerContext, "who" | "response" | "project">, taskId: string, problem: string | null, status: number) => void;
-    approveFromSheet: (ctx: Pick<HandlerContext, "who" | "response" | "project">, taskId: string, cardDigest: string, token: string) => void;
-};
-/** What a plan approval asked in place came to (live-pages-and-home.md B2.3): approved; a first yes on protected work
- * recorded; approved but building again did not start; or refused, with nothing changed. */
-export type ApprovalOutcome = "approved" | "vote" | "approved-not-rebuilt" | "refused";
-/** The answer to an approval asked in place: its named outcome and the same words the page would show, as JSON. Written
- * only after the approve route's proofs, by the caller that knows the outcome. */
-export declare function answerApprovalInPlace(response: ServerResponse, outcome: ApprovalOutcome, words: string, status: number): void;

package/dist/server/terminals.d.ts

@@ -1,31 +0,0 @@
-import { type IncomingMessage, type Server } from "node:http";
-import type { Duplex } from "node:stream";
-import { TerminalHost } from "../live-terminal.js";
-import type { LiveBus } from "../live-bus.js";
-import type { Store } from "../store.js";
-import type { ServeOptions } from "./http.js";
-import type { ServerRuntime } from "./runtime.js";
-export type TerminalDeps = {
-    host: TerminalHost | null;
-    /** Why there is no host (no pty library on this install), in words. */
-    problem: string | null;
-    bus: LiveBus;
-    allowedHost: (host: string | undefined) => boolean;
-    /** serve.ts's: the source a loopback proxy forwarded for (`fwd:<hop>`), else the peer. */
-    forwardedSourceOf: (request: IncomingMessage) => string;
-    publicOrigin: URL | null;
-    /** The console's server: its upgrade event is answered here. */
-    server: Server;
-};
-/** The console's terminal host: on a machine that runs agents, when this install has a pty library; else why not. */
-export declare function terminalHostFor(store: Store, options: Pick<ServeOptions, "terminalHost" | "localRunner">): {
-    host: TerminalHost | null;
-    problem: string | null;
-};
-export declare function createTerminalHandlers(runtime: ServerRuntime, deps: TerminalDeps): {
-    registrations: import("./handler-registry.js").Registration[];
-    upgrade: (request: IncomingMessage, socket: Duplex, head: Buffer) => boolean;
-    /** Shutdown: no more attaches, every socket dropped, every program ended (bounded by the host's grace). The problem,
-     * when a terminal's processes couldn't be proved stopped. */
-    close(): Promise<Error | null>;
-};

package/dist/server/welcome.d.ts

@@ -1,28 +0,0 @@
-import { type WelcomeModel } from "../first-run.js";
-import { type Html } from "../html.js";
-import { type Chrome, type Screen } from "./chrome.js";
-import type { ServerRuntime } from "./runtime.js";
-/** Why the sample project wasn't added, as a fixed key in the address (never words from it). */
-export declare const SAMPLE_PROBLEMS: {
-    readonly "no-root": "There's no project folder to put the sample in. Add a folder instead.";
-    readonly exists: "A folder named toolroll-sample is already there and wasn't made here, so nothing was changed.";
-    readonly failed: "The sample project couldn't be made. Nothing was added. Try again, or add a folder instead.";
-    readonly "not-added": "The sample project was made but couldn't be added. Try again, or add it from Projects.";
-};
-export type SampleProblem = keyof typeof SAMPLE_PROBLEMS;
-/** The page body for one model, and the screen's one primary (for the phone dock). `problem`: why the sample project
- * wasn't added, from the address. `canAdd`: this person may add projects here. */
-export declare function welcomeBody(model: WelcomeModel, options: {
-    problem?: SampleProblem | null;
-    canAdd: boolean;
-}): {
-    body: Html;
-    primary: Html | null;
-};
-export declare function welcomePage(chrome: Chrome, model: WelcomeModel, options: {
-    problem?: SampleProblem | null;
-    canAdd: boolean;
-}): Screen;
-export declare function createWelcomeHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-};

package/dist/server-telemetry.d.ts

@@ -1,87 +0,0 @@
-import type { BudgetLimit } from './request-budget.js';
-import type { IncomingMessage, ServerResponse } from 'node:http';
-export declare const TELEMETRY_WINDOW_MS = 300000;
-export declare const LATENCY_BUCKETS: number[];
-export declare const ROUTE_FAMILIES: readonly ['cli', 'mcp', 'team', 'live', 'chat', 'flows', 'tasks', 'results', 'decisions', 'sessions', 'settings', 'projects', 'assets', 'auth', 'metrics', 'health', 'console', 'other'];
-export type RouteFamily = typeof ROUTE_FAMILIES[number];
-/** Every page's live updates are one stream (GET /live). */
-export type StreamFamily = 'live' | 'other';
-export declare const STREAM_FAMILIES: readonly StreamFamily[];
-export declare const QUEUE_BUCKETS: number[];
-/** Only literals from the allowlist can become labels, including for unknown or malformed paths. */
-export declare function routeFamily(raw: string): RouteFamily;
-type Counts = {
-    bins: number[];
-    count: number;
-    sum: number;
-    max: number;
-};
-export type LatencySummary = {
-    count: number;
-    p50Ms: number | null;
-    p99Ms: number | null;
-    maxMs: number | null;
-    totalMs: number;
-};
-/** Lifetime histogram plus a ring of ten-second slices. Cost and memory do not grow with traffic. */
-export declare class TimingHistogram {
-    private readonly clock;
-    readonly total: Counts;
-    private readonly slices;
-    constructor(clock: () => number);
-    observe(seconds: number, weight?: number): void;
-    private prune;
-    recent(): LatencySummary;
-}
-export type HealthSnapshot = {
-    version: 1;
-    windowSeconds: number;
-    uptimeSeconds: number;
-    requests: LatencySummary;
-    routes: Partial<Record<RouteFamily, LatencySummary>>;
-    eventLoop: LatencySummary;
-    writes: {
-        wait: LatencySummary;
-        hold: LatencySummary;
-        statement: LatencySummary;
-    };
-    streams: {
-        open: number;
-        queuedBytes: number;
-        maxQueuedBytes: number;
-    };
-    budgetRefusals: number;
-};
-export declare class ServerTelemetry {
-    readonly clock: () => number;
-    readonly requests: TimingHistogram;
-    readonly routes: Map<"assets" | "auth" | "chat" | "cli" | "console" | "decisions" | "flows" | "health" | "live" | "mcp" | "metrics" | "other" | "projects" | "results" | "sessions" | "settings" | "tasks" | "team", TimingHistogram>;
-    readonly eventLoop: TimingHistogram;
-    readonly writeWait: TimingHistogram;
-    readonly writeHold: TimingHistogram;
-    readonly writeStatement: TimingHistogram;
-    readonly refusals: Map<string, number>;
-    private readonly recentRefusals;
-    private readonly streams;
-    private monitor;
-    private timer;
-    private readonly started;
-    constructor(clock?: () => number);
-    start(): void;
-    stop(): void;
-    /**
-     * Native nanosecond samples, folded into bounded buckets once a second, never one retained object per tick.
-     * Each raw sample includes the sampling timer's own interval, so it is subtracted: an idle loop reads near zero.
-     */
-    sampleEventLoop(): void;
-    budgetRefused(route: 'api' | 'mcp', reason: BudgetLimit | 'unavailable'): void;
-    private pruneRefusals;
-    observeRequest(family: RouteFamily, milliseconds: number): void;
-    openStream(response: ServerResponse, family: StreamFamily): void;
-    streamQueues(family?: StreamFamily): number[];
-    snapshot(): HealthSnapshot;
-}
-/** SSE latency is time to opening headers; a live view's lifetime is not request work. */
-export declare function instrumentRequest(telemetry: ServerTelemetry, request: IncomingMessage, response: ServerResponse): void;
-export declare function healthWords(health: HealthSnapshot): string;
-export {};