toolroll 0.9.103 → 0.9.105

package/dist/settings-groups-ui.d.ts

@@ -1,286 +0,0 @@
-import { type BrowserPhoneCard, type BrowserUpdates } from "./browser-workspace.js";
-import { type Html, type HtmlValue } from "./html.js";
-import { type UnattendedPermissionMode } from "./scope.js";
-import { type QualityMode } from "./quality.js";
-import { type ResultScreenshots } from "./store.js";
-export type SettingsGroup = "hub" | "general" | "agents" | "alerts" | "approval" | "projects" | "access" | "system";
-/** The group pages this module draws (Spend is /spend; Approvals and safety is /settings/approval, its own handler). */
-export declare const GROUP_PATHS: Readonly<Record<string, SettingsGroup>>;
-type Tone = "ok" | "warn" | "off" | "neutral";
-export type ProviderFacts = {
-    provider: string;
-    name: string;
-    tone: Tone;
-    words: string;
-    connection: {
-        words: string;
-        facts: string;
-    } | null;
-    usage: string;
-    envName: string;
-    subscriptionCapable: boolean;
-    mode: "subscription" | "api-key";
-    set: boolean;
-};
-export type WorkerFacts = {
-    name: string;
-    tone: "ok" | "warn" | "off";
-    state: string;
-    capacity: number;
-    busy: number;
-    running: {
-        taskId: string;
-        title: string;
-        href: string;
-        project: string | null;
-    }[];
-};
-export type EmailFacts = {
-    set: boolean;
-    host: string;
-    port: number;
-    secure: boolean;
-    user: string;
-    from: string;
-    imapHost: string;
-    imapPort: number;
-    google: {
-        connected: string | null;
-        clientId: string;
-        redirect: string | null;
-    };
-};
-/** What the overview and the group pages show, as the settings handler read it for this person. */
-export type SettingsFacts = {
-    /** The person: an approver (can manage and approve), an instance operator, signed in in a browser. */
-    name: string;
-    approver: boolean;
-    operator: boolean;
-    browser: boolean;
-    /** Installation-wide settings are this person's to see: not a project-limited account (the bot token, defaults…). */
-    installation: boolean;
-    said: string | null;
-    problem: string | null;
-    theme: "system" | "light" | "dark";
-    accent: string;
-    version: string | null;
-    permission: {
-        mode: UnattendedPermissionMode;
-        canManage: boolean;
-        changed: string | null;
-    } | null;
-    quality: {
-        mode: QualityMode;
-        canManage: boolean;
-        changed: string | null;
-    } | null;
-    providers: ProviderFacts[] | null;
-    workers: WorkerFacts[] | null;
-    updates: BrowserUpdates | null;
-    firstResult: string | null;
-    chat: {
-        mode: "quiet" | "all";
-        digestAt: string | null;
-        screenshots?: ResultScreenshots;
-        projects?: {
-            repo: string;
-            name: string;
-            muted: boolean;
-        }[];
-    } | null;
-    messaging: {
-        channel: string | null;
-        implicit: boolean;
-        configured: string[];
-        legacyWarning?: string;
-    } | null;
-    push: {
-        available: boolean;
-        devices: {
-            id: number;
-            words: string;
-            state: "ok" | "failing" | "expired";
-            removable: boolean;
-        }[];
-    } | null;
-    digest: {
-        every: string;
-        held: string | null;
-    } | null;
-    telegram: {
-        state: string;
-        current: string;
-        delivery: string | null;
-        failing: boolean;
-    };
-    email: EmailFacts | null;
-    phone: BrowserPhoneCard | null;
-    projects: {
-        repo: string;
-        name: string;
-    }[];
-    people: {
-        approvers: string[];
-        viewers: string[];
-        invites: number;
-    } | null;
-    passwordless: boolean | null;
-    sso: string | null;
-    access: {
-        sessions: number;
-        tokens: number;
-    };
-    backup: {
-        failed: boolean;
-        words: string;
-    } | null;
-    /** Easy-start: local mode is on for this laptop install. `owner`: this is the local owner's own session (no password);
-     * `passwordSet`: the owner has set one; `canTurnOff`: a full session of an instance operator. Absent when it is off. */
-    local?: {
-        owner: boolean;
-        passwordSet: boolean;
-        canTurnOff: boolean;
-    } | null;
-};
-declare const groupHref: (slug: string) => string;
-export type NeedsItem = {
-    group: string;
-    title: string;
-    text: string;
-    action: readonly [label: string, href: string];
-};
-/** What waits on this person in Settings (never a task): no builder, a chat app failing, a failed backup. Read-only. */
-export declare function settingsNeeds(facts: SettingsFacts): NeedsItem[];
-/** Which groups have something waiting, for the section nav's dot and the overview's rows. */
-export declare function needsByGroup(items: readonly NeedsItem[]): Record<string, number>;
-export declare function settingsHub(facts: SettingsFacts): Html;
-/** The hub's old anchors, forwarded to their group (fragments never reach the server). */
-export declare const HUB_ANCHORS: Readonly<Record<string, string>>;
-export declare const HUB_ANCHOR_SCRIPT: string;
-export declare function generalGroup(facts: SettingsFacts, flags: Record<string, boolean>): Html;
-export declare function agentsGroup(facts: SettingsFacts, flags: Record<string, boolean>): Html;
-/** Enrolling this device fills the subscription the form posts; it never reads the password beside it. With the kit's
- * section forms (section-forms.ts) it answers their `k-prepare` hook after the password is confirmed, so the post
- * goes exactly once under the pending guard; without them it holds the plain submit, then posts. */
-export declare function pushScriptOf(facts: SettingsFacts): string | null;
-export declare function alertsGroup(facts: SettingsFacts, flags: Record<string, boolean>): Html;
-export type ApprovalGroupFacts = {
-    facts: Pick<SettingsFacts, "permission" | "quality" | "said" | "problem">;
-    flags: Record<string, boolean>;
-    projects: {
-        repo: string;
-        name: string;
-    }[];
-    chosen: string;
-    /** The project's approval rules and release approval, drawn by approval-rules-ui.ts (kit markup). */
-    rules: Html;
-    mode: string;
-};
-export declare function approvalGroup(view: ApprovalGroupFacts): Html;
-export declare function projectsGroup(facts: SettingsFacts, flags: Record<string, boolean>): Html;
-export declare function accessGroup(facts: SettingsFacts, flags: Record<string, boolean>): Html;
-export declare function systemGroup(facts: SettingsFacts, flags: Record<string, boolean>): Html;
-/** One group page by its slug. */
-export declare function settingsGroupPage(group: SettingsGroup, facts: SettingsFacts): Html;
-export declare const groupTitle: (group: SettingsGroup) => string;
-export { groupHref };
-/** A settings sub-page in the frame: the group's breadcrumb, the page's title, its old body inside. */
-export declare function settingsSubPage(group: string, title: string, body: HtmlValue, options?: {
-    lead?: string;
-    flags?: Record<string, boolean>;
-}): Html;
-export type ModePageView = {
-    project: string;
-    name: string;
-    maxDays: number;
-    approver: boolean;
-    hasMergeGrant: boolean;
-    said: string | null;
-    problem: string | null;
-    live: {
-        name: string;
-        signedBy: string;
-        until: string;
-        words: string[];
-    } | null;
-};
-/** /mode: the mode a project runs under now, and (for an approver) the choices to sign a new one. Reading the terms is
- * the next page (/mode/confirm), where the password signs exactly what it shows. */
-export declare function modePageHtml(view: ModePageView): Html;
-/** /mode/confirm: every resolved term in words; the password signs exactly this digest (a changed form is refused). */
-export declare function modeCeremonyHtml(view: {
-    name: string;
-    project: string;
-    words: string[];
-    chatApprove: boolean;
-    repairAuto: boolean;
-    hidden: Readonly<Record<string, string>>;
-}): Html;
-export type PersonView = {
-    name: string;
-    you: boolean;
-    approver: boolean;
-    projects: readonly string[] | null;
-    projectNames: string;
-    revoked: string | null;
-    seen: string;
-    joined: string;
-    activity: string;
-    acts: string[];
-};
-export type PeopleView = {
-    operator: boolean;
-    you: string;
-    said: string | null;
-    problem: string | null;
-    people: PersonView[];
-    invites: {
-        id: number;
-        role: "approver" | "viewer";
-        projects: string;
-        from: string;
-        expires: string;
-        attempts: number;
-    }[];
-    projects: {
-        repo: string;
-        name: string;
-    }[];
-    /** The project the invite form starts with (the open one). */
-    openProject: string | null;
-    filers: {
-        name: string;
-        words: string;
-    }[];
-};
-/** People: who can get in, what each can do and where, open invites, and inviting someone. Inviting and widening
- * access always ask for the password typed now; removing someone or cancelling an invite is a step-up. */
-export declare function peopleHtml(view: PeopleView): Html;
-/** People for someone limited to some projects: their own access, in words. */
-export declare function ownAccessHtml(view: {
-    name: string;
-    approver: boolean;
-    projects: string[];
-    activity: string;
-}): Html;
-/** The invite link, once, on a page with no script: selectable text, what it lets them do, and where to cancel it. */
-export declare function inviteLinkHtml(view: {
-    link: string;
-    approver: boolean;
-    projects: string;
-    expires: string;
-}): Html;
-/** The switch and the trade in plain words. Turning it on is a way in: it always asks for the password typed now.
- * Turning it off is one click. */
-export declare function passwordlessHtml(view: {
-    on: boolean;
-    since: string | null;
-    trade: string;
-    said: string | null;
-    problem: string | null;
-}): Html;
-/** Which project a per-project settings page shows: a GET form (an address, not a save). */
-export declare function projectPicker(action: string, projects: readonly {
-    repo: string;
-    name: string;
-}[], chosen: string): Html;

package/dist/settings-kit-script.d.ts

@@ -1,21 +0,0 @@
-/**
- * The settings kit's one script (docs/plans/settings-revamp.md §4), shipped as a page's functional script beside kit
- * forms (settings-kit.ts). Without it every kit form works as today: the proof field shows inline and Save posts.
- *
- * With it, a kit form that asks for a proof:
- * - moves its server-written proof field into the `<dialog>` inside the same form (the field never leaves the form);
- * - opens the dialog on submit instead of posting, remembering the pressed button;
- * - Confirm (its button, or Enter in the field) posts the form with that button (`requestSubmit(submitter)`, after the
- *   submit event that asked has finished), so its name=value and every hidden term go along unchanged; Cancel (or
- *   Escape) closes it and posts nothing, and focus returns to the button;
- * - once a kit form posts, it is pending: further submits are dropped and its Save and Confirm are disabled (after the
- *   post has taken their values), until the page is shown again or the post was cancelled — never on a timer;
- * - asks for nothing when the proof was left out (Passwordless) — there is no dialog then — and shows the
- *   identity-provider link when the sign-in swapped the field.
- * Each section's Save bar names what changed. The script never reads or sets a field's value except to check that a
- * required proof isn't empty; the server still proves everything.
- */
-export declare const SETTINGS_KIT_SCRIPT = "(function(){\nif(window.__soKit)return;window.__soKit=1;\nvar d=document;d.documentElement.classList.add(\"kit-js\");\nfunction label(el){var l=el.labels&&el.labels[0];if(!l&&el.closest)l=el.closest(\"fieldset\")&&el.closest(\"fieldset\").querySelector(\"legend\");return l?(l.textContent||\"\").replace(/\\s+/g,\" \").trim():(el.name||\"\");}\nfunction prep(f){if(f.__kit)return;f.__kit=1;\nvar bar=f.querySelector(\"[data-kit-state]\");if(bar&&bar.textContent===\"\")bar.textContent=bar.getAttribute(\"data-idle\")||\"\";\nif(!f.hasAttribute(\"data-kit-step-up\"))return;\nvar dl=f.querySelector(\"[data-kit-dialog]\"),p=f.querySelector(\":scope>[data-kit-proof]\");\nif(!dl||!p||typeof dl.showModal!==\"function\"){f.removeAttribute(\"data-kit-step-up\");return;}\ndl.querySelector(\"[data-kit-slot]\").appendChild(p);\np.querySelectorAll(\"[required]\").forEach(function(i){i.removeAttribute(\"required\");i.setAttribute(\"data-kit-required\",\"\");});\ndl.addEventListener(\"close\",function(){if(f.__kitSent)return;var back=f.__kitBy||f.querySelector(\".kit-save\");if(back&&back.focus)back.focus();});}\nfunction scan(root){if(root.querySelectorAll)root.querySelectorAll(\"form.kit-form\").forEach(prep);}\nscan(d);\nif(typeof MutationObserver!==\"undefined\")new MutationObserver(function(list){list.forEach(function(m){m.addedNodes.forEach(function(n){if(n.nodeType===1){if(n.matches&&n.matches(\"form.kit-form\"))prep(n);scan(n);}});});}).observe(d.documentElement,{childList:true,subtree:true});\nfunction asks(dl){var slot=dl.querySelector(\"[data-kit-slot]\");return !!slot.querySelector(\"input:not([type=hidden]),a,.sso-step-up\");}\nfunction confirm(f){var dl=f.querySelector(\"[data-kit-dialog]\"),miss=null;\ndl.querySelectorAll(\"[data-kit-required]\").forEach(function(i){if(!miss&&i.value===\"\")miss=i;});\nif(miss){miss.setCustomValidity(\"Enter your password.\");miss.reportValidity();miss.focus();return;}\nvar by=f.__kitBy&&f.__kitBy.form===f?f.__kitBy:null;f.__kitSent=1;dl.close();\nsetTimeout(function(){f.__kitGo=1;try{by?f.requestSubmit(by):f.requestSubmit();}finally{f.__kitGo=0;}},0);}\nfunction buttons(f){return f.querySelectorAll(\".kit-save,[data-kit-confirm]\");}\nfunction release(f){f.__kitPending=0;f.__kitSent=0;buttons(f).forEach(function(b){b.disabled=false;});}\nfunction latch(f,e){f.__kitPending=1;setTimeout(function(){if(e.defaultPrevented){release(f);return;}\nbuttons(f).forEach(function(b){b.disabled=true;});},0);}\naddEventListener(\"pageshow\",function(){d.querySelectorAll(\"form.kit-form\").forEach(release);});\nd.addEventListener(\"submit\",function(e){var f=e.target;if(!f||!f.classList||!f.classList.contains(\"kit-form\"))return;prep(f);\nif(f.__kitPending){e.preventDefault();e.stopImmediatePropagation();return;}\nvar dl=f.hasAttribute(\"data-kit-step-up\")?f.querySelector(\"[data-kit-dialog]\"):null;\nif(f.__kitGo||!dl||!asks(dl)){latch(f,e);return;}\ne.preventDefault();e.stopImmediatePropagation();\nif(dl.open){confirm(f);return;}\nf.__kitBy=e.submitter||null;f.__kitSent=0;dl.showModal();\nvar first=dl.querySelector(\"[data-kit-slot] input:not([type=hidden]),[data-kit-slot] a\")||dl.querySelector(\"[data-kit-confirm]\");if(first)first.focus();},true);\nd.addEventListener(\"click\",function(e){var b=e.target&&e.target.closest?e.target.closest(\"[data-kit-confirm],[data-kit-cancel]\"):null;if(!b)return;\nvar dl=b.closest(\"[data-kit-dialog]\"),f=dl&&dl.closest(\"form\");if(!f)return;e.preventDefault();\nif(b.hasAttribute(\"data-kit-cancel\")){dl.close();return;}confirm(f);});\nd.addEventListener(\"input\",function(e){var t=e.target;if(t&&t.setCustomValidity&&t.hasAttribute&&t.hasAttribute(\"data-kit-required\"))t.setCustomValidity(\"\");},true);\nfunction changed(e){var t=e.target,f=t&&t.form;if(!f||!f.classList.contains(\"kit-form\")||t.closest(\"[data-kit-dialog]\")||t.type===\"hidden\")return;prep(f);\nvar bar=f.querySelector(\"[data-kit-save-bar]\"),state=f.querySelector(\"[data-kit-state]\");if(!bar||!state)return;\nf.__kitChanged=f.__kitChanged||[];var name=label(t);if(name&&f.__kitChanged.indexOf(name)<0)f.__kitChanged.push(name);\nbar.setAttribute(\"data-changed\",\"\");state.textContent=\"Changed: \"+f.__kitChanged.join(\", \");}\nd.addEventListener(\"input\",changed);d.addEventListener(\"change\",changed);\n})();";
-/** The pages that wear the settings frame: one column, no Crew sheet, a breadcrumb under Settings. Here (not in
- * settings-kit.ts) so the browser bundle reads it without the server's form contracts. */
-export declare function isSettingsFrame(pathname: string): boolean;

package/dist/settings-kit.d.ts

@@ -1,173 +0,0 @@
-/**
- * The settings kit (docs/plans/settings-revamp.md §4): the frame's breadcrumb, and the pieces every settings page is
- * rebuilt from — a section, its own sticky Save, the step-up dialog drawn from the action's own proof contract
- * (settings-proofs.ts), field errors, secret inputs and choice groups. Server-rendered HTML that works without
- * JavaScript; settings-kit-script.ts only turns the inline proof field into a dialog.
- *
- * Rules the helpers keep (and settings-kit.test.ts pins):
- * - the proof field is written into the form's own server HTML, named as its handler reads it, labelled, and
- *   `current-password`; so sensitivity (serve.ts sendScreen) and the identity-provider swap (ssoStepUps) still see it;
- * - a step-up field renders through `reauth`, so Passwordless leaves it out exactly as today; a credential or typed
- *   password field always renders;
- * - a CSRF-only action renders no proof field and no dialog;
- * - nothing here ever sets `value` on a proof or secret field;
- * - handlers never read any of this: it only draws.
- */
-import { type Html, type HtmlValue } from "./html.js";
-import { isSettingsFrame } from "./settings-kit-script.js";
-import { type ProofRow } from "./settings-proofs.js";
-export { isSettingsFrame };
-/** One breadcrumb: a link, or (the last) the page itself. */
-export type Crumb = {
-    label: string;
-    href: string | null;
-};
-/** The text of a page's first h1 (tags dropped, the common entities read), or null. */
-export declare function headingText(page: string): string | null;
-/** The breadcrumb for a settings-frame page: "Settings / <this page>", or nothing on the hub and outside the frame. */
-export declare function settingsCrumbs(pathname: string, title: string, page: string): Crumb[] | undefined;
-/** The project the sidebar's picker names: the session's saved selection while this person may still see it, else
- * the page's own effective project, else none — checked against the visible project list, so a selection that
- * outlived the ceiling is never sent to the page. */
-export declare function openProjectFor(saved: string | null, effective: string | null | undefined, visible: readonly {
-    path: string;
-}[]): string | null;
-/** The breadcrumb as server HTML (the page before scripts, and without them). */
-export declare function crumbsHtml(crumbs: readonly Crumb[]): Html;
-/** The password-manager opt-outs every secret input carries (a service's key is not the person's sign-in). */
-export declare const SECRET_OPT_OUTS: {
-    readonly "data-1p-ignore": true;
-    readonly "data-lpignore": "true";
-    readonly "data-bwignore": true;
-    readonly "data-form-type": "other";
-};
-/** A field's message under it: tied to the field with aria-describedby, announced, and the field focused. */
-export declare function fieldError(id: string, message: string): Html;
-export type TextField = {
-    id: string;
-    name: string;
-    label: string;
-    type?: "text" | "number" | "url" | "email";
-    /** What the person typed (kept after a validation error). Never a secret: secrets use secretInput. */
-    value?: string | null;
-    hint?: string;
-    error?: string | null;
-    attrs?: Readonly<Record<string, string | number | boolean | null | undefined>>;
-};
-/** A labelled text field; with an error it is aria-invalid, names its message and takes focus. */
-export declare function textField(field: TextField): Html;
-/** A secret that is not the person's own password (an API key, a bot token, a client secret): masked, never given a
- * value, kept out of password managers. The field name is the handler's own wire name. */
-export declare function secretInput(field: {
-    id: string;
-    name: string;
-    label: string;
-    hint?: string;
-    required?: boolean;
-    error?: string | null;
-}): Html;
-/** A choice group: a fieldset with its legend, each option's detail tied to it. Nothing saves until Save. */
-export declare function choiceGroup(group: {
-    id: string;
-    name: string;
-    legend: string;
-    checked: string | null;
-    options: readonly {
-        value: string;
-        label: string;
-        detail?: string;
-    }[];
-    error?: string | null;
-}): Html;
-/** Proofs that only a password typed now satisfies: no Passwordless session and no identity-provider re-check. */
-export declare const typedOnly: (row: ProofRow) => boolean;
-/** The proof field a row's handler reads, as today's forms write it; empty for a CSRF-only row. A step-up field goes
- * through `reauth` (Passwordless leaves it out); a credential or typed field always shows. A typed-only field carries
- * `data-so-typed`, so the identity-provider swap leaves it a real password field (keepTypedFields). Never a value. */
-export declare function proofField(row: ProofRow, options?: {
-    label?: string;
-    optional?: boolean;
-}): Html;
-/**
- * The identity-provider swap (render-people.ts ssoStepUps) with typed-only proof fields kept: those handlers take only
- * a password typed now, so the field must stay a real password input. The field is held out of the swap by its
- * marker and put back as it was. Every other step-up field is swapped exactly as before.
- */
-export declare function keepTypedFields<A extends unknown[]>(page: Html, swap: (page: Html, ...rest: A) => Html, ...rest: A): Html;
-/** How the dialog explains a proof that Passwordless doesn't cover, in words; null where nothing needs saying. */
-export declare function proofNote(row: ProofRow): string | null;
-export type StepUpForm = {
-    /** The proof inventory row this form posts under. */
-    proof: string;
-    /** The exact route (one of the row's). */
-    action: string;
-    /** Unique on the page: the form, its dialog and its section hang from it. */
-    id: string;
-    /** The section's own fields. */
-    body: HtmlValue;
-    /** Hidden terms posted back unchanged (nonce, digest, fingerprint, the shown project…). */
-    hidden?: Readonly<Record<string, string | number | null | undefined>>;
-    /** The Save bar's words before anything changes, and its button. */
-    save?: {
-        label?: string;
-        idle?: string;
-        name?: string;
-        value?: string;
-    };
-    /** What the dialog says the person is agreeing to (the action's own words by default). */
-    confirm?: string;
-};
-export declare function stepUpForm(form: StepUpForm): Html;
-/** A section: a heading, a one-line state, a problem the handler sent back (role=alert), then its form. */
-export declare function kitSection(section: {
-    id: string;
-    title: string;
-    state?: HtmlValue;
-    problem?: string | null;
-    said?: string | null;
-    body: HtmlValue;
-}): Html;
-/** The kit's look: one 760px column, sections with no nested wells, the sticky Save, the dialog. The needs-you colour
- * falls back to the warning token until S5 lands `--so-needs-you`. */
-export declare const SETTINGS_KIT_CSS: string;
-export type SectionForm = {
-    /** The proof inventory row this form posts under. */
-    proof: string;
-    /** The exact route (one of the row's). */
-    action: string;
-    /** Unique on the page; the refusal slot is `<id>-err`. */
-    id: string;
-    /** The section's own fields. */
-    body: HtmlValue;
-    /** Hidden terms posted back unchanged (the shown project, a nonce, a digest…). */
-    hidden?: Readonly<Record<string, string | number | null | undefined>>;
-    /** The button: "Save" by default; a name=value it posts. */
-    save?: {
-        label?: string;
-        name?: string;
-        value?: string;
-        variant?: "primary" | "outline" | "danger";
-    };
-    /** A settings section: Save shows only once something in it changed, and saves only what changed with the rest. An
-     * act (Invite, Remove) leaves this off: its button always shows. */
-    gate?: boolean;
-    /** The proof is needed only when the form posts this value (the row's `when`): [field, value]. */
-    proofWhen?: readonly [field: string, value: string];
-    /** Post as a page navigation: the answer is a page of its own (a one-time secret, a review). */
-    native?: boolean;
-    /** The answer is a file the browser saves (implies native): the page stays, so the button never stays busy. */
-    download?: boolean;
-    /** What saying yes does, for the password popover (the row's own words by default). */
-    confirm?: string;
-    /** What the handler sent back for this section, in place: done, or refused (role=alert). */
-    said?: string | null;
-    problem?: string | null;
-};
-/**
- * A settings section's form in the revamp kit's look, posted to its existing route with its existing fields and
- * proof. Without the kit's script it is a plain form: the proof field (when the row asks for one) shows in place and
- * Save posts. With it (src/browser/kit/behavior.ts, section forms): Save appears once something changed, the proof is
- * asked in a password popover only when the rules need it, one validated snapshot is posted, a second press does
- * nothing while one is pending, and a refusal shows next to Save with the edits kept. The server proves everything.
- */
-export declare function kitSectionForm(form: SectionForm): Html;

package/dist/settings-proofs.d.ts

@@ -1,64 +0,0 @@
-/**
- * The settings proof inventory (docs/plans/settings-revamp.md §4): for every settings action, the proof its handler
- * already asks for, as data. Only rendering code reads it (settings-kit.ts draws the step-up dialog from it); no
- * handler does, and nothing here changes what a handler proves. `src/settings-kit.test.ts` pins every row against the
- * form contracts (console-api.ts), the route table, and — for one row of each kind — the handler itself over HTTP.
- *
- * Proof kinds, as the handlers implement them (scope.ts, server/guards.ts):
- * - `none`: the session and the form token (CSRF) only.
- * - `step-up`: `authenticateApprover` — a password typed now; an empty field stands in under Passwordless (the
- *   person's own live browser session) and for a one-use identity-provider re-check.
- * - `credential`: `authenticateCredential` — a password typed now, or a one-use identity-provider re-check. Passwordless
- *   never covers it.
- * - `typed-password`: the handler checks the typed password itself (`authenticateAccount`, or an empty field refused
- *   before the check). Neither Passwordless nor an identity-provider re-check stands in.
- * - `typed-now-operator`: a password typed now by an instance operator (widening check access); not even a re-check.
- */
-import { type ConsoleFormName } from "./contracts/console-api.js";
-export type ProofKind = "none" | "step-up" | "credential" | "typed-password" | "typed-now-operator";
-/** Who the route table admits (route-table.ts `role`); `handler` notes a narrower check the handler makes itself. */
-export type ProofRole = "any" | "approver" | "operator";
-export type ProofRow = {
-    /** Stable id the kit is called with. */
-    readonly id: string;
-    /** What the person is doing, in words. */
-    readonly action: string;
-    /** The exact POST paths. */
-    readonly routes: readonly string[];
-    /** The form contract its handler reads through. */
-    readonly form: ConsoleFormName;
-    /** The proof field's name, or null when none is read. */
-    readonly field: "password" | "token" | null;
-    readonly proof: ProofKind;
-    /** Only some submissions need the proof (the rest are `none`), in words. */
-    readonly when?: string;
-    /** Rows that share a route are variants of one handler, each with its own exact proof. A variant with `select`
-     * applies exactly when the form carries that hidden value (the kit refuses a form whose hidden terms pick another
-     * variant); a variant with `explicit` is named by the caller (a choice the server decides, like widening). */
-    readonly select?: {
-        readonly field: string;
-        readonly value: string;
-    };
-    readonly explicit?: true;
-    /** Under Passwordless, does an empty proof field pass? (`accepted` only for step-up.) */
-    readonly passwordless: "accepted" | "refused" | "n/a";
-    /** Does a one-use identity-provider re-check (empty field after "Confirm with …") pass? */
-    readonly sso: "accepted" | "refused" | "n/a";
-    readonly role: ProofRole;
-    /** A narrower standing the handler checks itself, in words. */
-    readonly handlerRole?: string;
-    /** Fields that hold a secret that is not the person's proof (never echoed, password managers kept out). */
-    readonly secrets: readonly string[];
-    /** Fields whose name reads like a credential but hold something else (an id, a bot token…). */
-    readonly notProof?: readonly string[];
-    /** Every term the handler requires besides the proof: hidden fields carried back unchanged (nonce, digest,
-     * fingerprint, the shown project, what a preview showed) and the fields that pick the target (repo, act). */
-    readonly terms: readonly string[];
-    /** Anything else the handler requires, in words. */
-    readonly note?: string;
-};
-export declare const PROOF_INVENTORY: readonly ProofRow[];
-/** One row by id; throws on an unknown id (a rendering bug, never a request's input). */
-export declare function proofRow(id: string): ProofRow;
-/** Whether the field a row names is one its form contract reads (used by the kit's own guard and the tests). */
-export declare function contractReads(row: ProofRow, field: string): boolean;

package/dist/setup-guide.d.ts

@@ -1,39 +0,0 @@
-import { type ProviderId } from "./provider.js";
-export declare const ASSISTANTS: Record<ProviderId, {
-    name: string;
-    description: string;
-}>;
-export type ModelChoice = {
-    value: string;
-    label: string;
-};
-export declare function modelChoices(provider: ProviderId, configured: string | null, home?: string): ModelChoice[];
-export declare function detectPreparation(repo: string): {
-    command: string;
-    label: string;
-    evidence: string;
-} | null;
-/** Browser installation may write only this known file inside its project. */
-export declare function previewProjectInstructions(repo: string): {
-    ok: false;
-    message: string;
-    plan?: never;
-    fingerprint?: never;
-    installed?: never;
-    content?: never;
-} | {
-    message?: never;
-    ok: true;
-    plan: import("./skills.js").InstallPlan;
-    content: string;
-    fingerprint: string;
-    installed: boolean;
-};
-export declare function addProjectInstructions(repo: string, fingerprint: string): {
-    ok: false;
-    message: string;
-    plan?: never;
-    fingerprint?: never;
-    installed?: never;
-    content?: never;
-} | import("./skills.js").InstallResult;