toolroll 0.9.103 → 0.9.105

package/dist/shared-deps.d.ts

@@ -1,115 +0,0 @@
-export declare const DEPS_FOLDER = "deps";
-/** A copy linked or made this recently is never removed by a clean-up: a lease may be about to link it. */
-export declare const SHARED_GRACE_MS: number;
-/** The daily storage sweep removes a copy no checkout uses and none has linked for this long. */
-export declare const SHARED_UNUSED_MS: number;
-export type SharedCopy = {
-    key: string;
-    /** The copy's folder, holding node_modules and ready.json. */
-    dir: string;
-    repo: string;
-    /** sha256 of the lockfile and package.json, excluding the project's own version (raw bytes in old copies). */
-    lock: string;
-    node: string;
-    createdAt: string;
-    /** Last linked (ready.json's modification time). */
-    usedAt: string;
-    /** Its installed tree changed after it was made: never linked again. */
-    retired: boolean;
-};
-export declare function sharedDepsRoot(databaseFile: string): string;
-/** A setup whose whole effect is node_modules: `npm ci` or `npm install`, with plain flags only. */
-export declare function installsOnly(command: string): boolean;
-/**
- * The checkout's dependency identity: its npm lockfile and package.json, hashed together without the root
- * package's own version, as in release-check.mjs versionOnly(). null when either JSON file is invalid, there is no
- * lockfile, or the lockfile links local folders (workspaces, `file:`), whose links would point into the shared
- * folder instead of the checkout.
- */
-export declare function lockDigest(checkout: string): string | null;
-/** The node a setup on this PATH would install with: version, platform and architecture (native modules differ). */
-export declare function nodeIdentity(path?: string): string | null;
-export declare function depsKey(repo: string, setupDigest: string, lock: string, node: string): string;
-/** What a checkout would share: its key and the facts behind it, or null when it can't share. */
-export declare function sharingFor(args: {
-    repo: string;
-    worktree: string;
-    setup: {
-        command: string;
-        digest: string;
-    };
-    root?: string;
-}): {
-    key: string;
-    lock: string;
-    node: string;
-} | null;
-/** The shared node_modules for a key, when one is ready and unchanged since it was made. A changed one is retired. */
-export declare function readyCopy(root: string, key: string): string | null;
-/**
- * The shared copy a checkout's node_modules links, or null (none, or its own install). A linked node_modules is a
- * small real folder: one link per top-level entry of the shared copy and a note naming it. Tools that write a cache
- * there (`node_modules/.vite`, `.cache`) write into the checkout's own folder, never the shared copy.
- */
-export declare function linkedKey(worktree: string, root: string): string | null;
-/** Remove a checkout's linked node_modules (its links and caches, never what they point to). True when there was one. */
-export declare function detachShared(worktree: string, root: string): boolean;
-/**
- * Put a shared copy into a checkout that has no node_modules: links (a junction per folder on Windows), else a
- * copy-on-write clone the build owns. null: neither worked, and the caller runs the plain setup.
- */
-export declare function linkInto(worktree: string, shared: string): "link" | "clone" | null;
-/**
- * After the approved setup succeeded in a checkout with no copy for its key: move its node_modules into
- * `deps/<key>` (one rename), make it read-only and link it back. Returns how the checkout now has it, or null when it
- * kept its own install (a different volume, a setup that rewrote the lockfile, a race lost cleanly).
- */
-export declare function promoteInstall(args: {
-    root: string;
-    repo: string;
-    worktree: string;
-    key: string;
-    lock: string;
-    node: string;
-    setupDigest: string;
-    now: Date;
-}): "link" | "clone" | null;
-/** Every shared copy on disk, newest first. */
-export declare function sharedCopies(root: string): SharedCopy[];
-export type SharedUse = SharedCopy & {
-    checkouts: string[];
-};
-/** Which checkouts use each copy: those linking it, and those whose lockfile it was installed from. */
-export declare function sharedUse(root: string, checkouts: readonly {
-    path: string;
-    repo: string;
-}[]): SharedUse[];
-/** Half-made copies under deps/ (a crash mid-promotion), old enough that nothing is still making them. */
-export declare function sharedDebris(root: string, now: Date): string[];
-/** What `storage clean` removes: copies no checkout uses and none linked within the grace period, plus debris. */
-export declare function unusedShared(root: string, checkouts: readonly {
-    path: string;
-    repo: string;
-}[], now: Date): {
-    copies: SharedUse[];
-    debris: string[];
-};
-/** Remove one copy or debris folder (read-only on disk, so made writable first). */
-export declare function removeShared(path: string): boolean;
-/**
- * The daily sweep: remove each copy no checkout uses and none has linked for `unusedMs` (a week), and old debris.
- * Right before a copy goes, who uses it, when it was last linked and whether live work uses it (`spare`,
- * storage-sweep.ts) are read again; a copy a checkout picked up in between stays. Removal never holds the event loop.
- */
-export declare function pruneUnusedShared(root: string, checkouts: () => readonly {
-    path: string;
-    repo: string;
-}[], now: Date, unusedMs?: number, options?: {
-    spare?: (path: string) => boolean;
-    /** Deterministic race/failure seams; never supplied by the worker. */
-    quarantined?: (original: string, trash: string) => void | Promise<void>;
-    remove?: (path: string) => Promise<void>;
-}): Promise<{
-    removed: SharedUse[];
-    failed: string[];
-}>;

package/dist/sign-in-guard.d.ts

@@ -1,70 +0,0 @@
-import { AsyncLocalStorage } from "node:async_hooks";
-/**
- * Five failures lock a source/account pair, with exponential backoff. Across sources, failures slow an account and
- * admit only a few unproven checks per minute before password derivation. A validated same-account browser session
- * bypasses that shared admission budget, never a source's own lock. Fabricated names follow the same admission path.
- * Source and name records expire by time. Both use bounded, non-evicting keyed storage, regardless of whether the
- * account exists. Saturation shares overflow buckets without displacing or changing individually tracked state.
- */
-export type GuardPolicy = {
-    failuresBeforeLock: number;
-    firstLockMs: number;
-    maxLockMs: number;
-    firstSlowMs: number;
-};
-export declare const DEFAULT_GUARD_POLICY: GuardPolicy;
-/** Default/loopback source for callers without an explicit native CLI context. */
-export declare const LOCAL_SOURCE = "local";
-/** Native CLI only: no HTTP peer or forwarded header can select this source. */
-export declare const CLI_PASSWORD_SOURCE = "local-cli";
-export declare const ACCOUNT_PASSWORD_TRIES = 3;
-export declare const ACCOUNT_PASSWORD_WINDOW_MS = 60000;
-/** Run `work` with every password check inside it counted against `source`. */
-export declare const withPasswordSource: <T>(source: string, work: () => T) => T;
-/** Where the password being checked now came from (LOCAL_SOURCE outside a request). */
-export declare const currentPasswordSource: () => string;
-/** Set only after the server validates a browser session, never from submitted form fields. */
-export declare const provenPasswordAccount: AsyncLocalStorage<{
-    name: string;
-    generation: number;
-} | null>;
-export declare class PasswordGuard {
-    readonly policy: GuardPolicy;
-    private readonly secret;
-    private readonly sources;
-    private readonly slowdowns;
-    private nextPruneAt;
-    /** Told once per lock: the account (as typed), and for how long. */
-    onLock: ((account: string, lockMs: number) => void) | null;
-    constructor(policy?: GuardPolicy);
-    private static key;
-    private static pair;
-    /** Prune by the supplied time, even below capacity; retain a lock's escalation history for a day. */
-    private prune;
-    /** Source-local snapshot for existing callers. Authentication must use preflight to spend the shared budget. */
-    lockedFor(account: string, now: number, source?: string): number;
-    /** Reserve one password check, or return its wait. No password derivation may precede this call. */
-    preflight(account: string, now: number, source?: string, proven?: boolean): number;
-    /** A wrong password; only a database lookup may establish `exists`. */
-    failed(account: string, now: number, source?: string, exists?: boolean): void;
-    /** The right password clears individually tracked state; shared overflow buckets must expire by time. */
-    succeeded(account: string, source?: string): void;
-    /** Individually tracked source-and-name entries (at most TRACKED), excluding fixed shared overflow buckets. */
-    get size(): number;
-}
-/** The guard for one database (a store): every password check against it counts. */
-export declare function passwordGuardOf(owner: object): PasswordGuard;
-/**
- * Wrong passwords from one address, across every account: at most `tries`
- * in `windowMs`. What a lockout per account can't see (one address trying
- * many names) this does.
- */
-export declare class SourceBudget {
-    readonly tries: number;
-    readonly windowMs: number;
-    private readonly sources;
-    constructor(tries?: number, windowMs?: number);
-    /** Milliseconds until this address may try again (0: it may). */
-    waitFor(address: string, now: number): number;
-    failed(address: string, now: number): void;
-}

package/dist/skills-ui.d.ts

@@ -1,12 +0,0 @@
-import { type Html } from "./html.js";
-import type { SkillsSnapshot, SkillsView, skillTestResult } from "./project-skills.js";
-export declare const SKILLS_CSS = ".skills{max-width:780px;min-width:0;overflow-wrap:anywhere}.skills h2{font-size:1.1rem}.skills .card{padding:18px;margin:14px 0;min-width:0}.skills form,.skills label{display:grid;gap:10px}.skills input,.skills textarea,.skills select{box-sizing:border-box;width:100%;max-width:100%;min-width:0}.skills textarea{resize:vertical;min-height:130px}.skills button{justify-self:start;white-space:nowrap;min-height:44px}.skills summary{cursor:pointer;min-height:44px;display:flex;align-items:center;gap:10px;flex-wrap:wrap}.skills pre{white-space:pre-wrap;overflow-wrap:anywhere;max-height:360px;overflow:auto;font-size:.9rem}.skills .skill-heading{display:flex;align-items:baseline;justify-content:space-between;gap:12px}.skills .skill-heading h2{margin:0}.skills .skill-state{font-size:.85rem;flex-shrink:0}.skills .skill-source{font-size:.85rem}.skills .skill-controls{display:flex;gap:12px;flex-wrap:wrap}.skills .skill-controls form{margin:0}.skills details details{margin-top:10px}.skills [hidden]{display:none!important}.skills .skill-files{max-height:200px;overflow:auto}.skills .problem{padding:12px}@media(max-width:600px){.skills input,.skills textarea,.skills select{font-size:16px}.skills .card{padding:14px}.skills .skill-heading{align-items:flex-start}}";
-export declare function skillsHtml(view: SkillsView, csrf: string, canManage: boolean, options?: {
-    focus?: string;
-    error?: string;
-    draft?: Record<string, string>;
-    agent?: string;
-}): Html;
-export declare function skillsSnapshotHtml(snapshot: SkillsSnapshot | null): Html | "";
-export declare function skillsScript(): string;
-export declare function skillTestFeedbackHtml(test: NonNullable<ReturnType<typeof skillTestResult>>, csrf: string, canManage: boolean, error?: string, draft?: string): Html;

package/dist/skills.d.ts

@@ -1,99 +0,0 @@
-/**
- * `toolroll skills install` (M7.13) — how a repository tells its
- * agents this queue exists.
- *
- * Two artifacts, both operator-invoked, previewed by default, and marked
- * as managed so nothing here ever overwrites a file it does not own:
- *
- *   - `.claude/skills/toolroll/SKILL.md` — the Agent Skills entry
- *     (the cross-vendor layout Claude Code, Codex, Gemini CLI, and
- *     opencode all read). Router-style: the description says when to
- *     reach for the CLI; the body carries the operating contract and
- *     defers to live `--help` for everything else, because a skill that
- *     duplicates the manual drifts from it.
- *   - a managed AGENTS.md block (CLAUDE.md-compatible), written only
- *     with --write-context, replaced only between its own markers.
- *
- * DESIGN's "nothing is ever installed for you" holds: this command runs
- * when the operator runs it, shows exactly what it would write, and
- * touches nothing without --yes.
- */
-export declare const SKILL_DIR: string;
-/** Where installs before the rename to Toolroll put the skill: still found, and replaced by the new one. */
-export declare const LEGACY_SKILL_DIR: string;
-export declare const SKILL_FILE = "SKILL.md";
-export declare const MANAGED_MARK = "managed by toolroll \u2014 edits outside the markers survive reinstalls";
-export declare const CONTEXT_BEGIN = "<!-- standing-orders:begin -->";
-export declare const CONTEXT_END = "<!-- standing-orders:end -->";
-/** The skill, complete. The description is the routing contract. The body
- * is the binary-served `operating` guide (guides.ts) — ONE source, so the
- * installed snapshot and `skills get operating` cannot drift apart within
- * a version. The frontmatter prefix and the managed mark are the ownership
- * signature planInstall checks — do not reword them. */
-export declare function skillContent(): string;
-/** The AGENTS.md block, marker-fenced so reinstalls replace only themselves. */
-export declare function contextBlock(): string;
-export type InstallPlan = {
-    skillPath: string;
-    skillAction: "create" | "replace" | "refuse-foreign";
-    /** A skill of ours under the old folder name, removed once the new one is written. */
-    legacySkillPath: string | null;
-    contextPath: string | null;
-    contextAction: "create" | "insert" | "replace" | "skip";
-};
-export type InstallResult = {
-    ok: true;
-    plan: InstallPlan;
-    wrote: string[];
-} | {
-    ok: false;
-    reason: "foreign-skill" | "broken-markers";
-    message: string;
-};
-/** What install would do, computed without writing anything. */
-export declare function planInstall(repo: string, writeContext: boolean): InstallPlan;
-/** Apply the plan. Refuses a foreign skill file rather than eating it. */
-export declare function applyInstall(repo: string, writeContext: boolean): InstallResult;
-/**
- * The user-level Claude Code skill is separate from the repository-local
- * skill above. The former teaches one Claude Code installation how to use
- * this exact Toolroll binary; the latter remains part of the shared
- * project setup flow.
- */
-export declare const CLAUDE_CODE_MANAGED_MARK = "<!-- standing-orders:claude-code-skill:v1 -->";
-export declare const CLAUDE_CODE_GUIDES: readonly ["console", "operating", "runner", "release"];
-/** The thin user-level skill `toolroll onboard` writes (agent-onboard.ts). */
-export declare const OPERATOR_SKILL_MARK = "<!-- toolroll:operator-skill:v1";
-export type ClaudeCodeSkillFile = {
-    name: string;
-    path: string;
-    action: "create" | "replace" | "refuse-foreign";
-};
-export type ClaudeCodeInstallPlan = {
-    directory: string;
-    directoryAction: "create" | "use" | "refuse-foreign";
-    files: ClaudeCodeSkillFile[];
-    /** Managed files left under the old folder name, removed once the new ones are written. */
-    legacyFiles: string[];
-};
-export type ClaudeCodeInstallResult = {
-    ok: true;
-    plan: ClaudeCodeInstallPlan;
-    wrote: string[];
-} | {
-    ok: false;
-    reason: "foreign-file";
-    message: string;
-    plan: ClaudeCodeInstallPlan;
-};
-export declare function defaultClaudeCodeSkillDir(home?: string): string;
-/** Where installs before the rename put the Claude Code skill. */
-export declare function legacyClaudeCodeSkillDir(home?: string): string;
-/** SKILL.md links to the full guides instead of copying their detail. */
-export declare function claudeCodeSkillContent(): string;
-/** One linked file, generated from the guide embedded in this binary. */
-export declare function claudeCodeGuideContent(name: typeof CLAUDE_CODE_GUIDES[number]): string;
-/** Compute the complete write set without changing the filesystem. */
-export declare function planClaudeCodeInstall(directory?: string, legacyDirectory?: string | null): ClaudeCodeInstallPlan;
-/** Refresh every managed file, after validating the whole set first. */
-export declare function applyClaudeCodeInstall(directory?: string, legacyDirectory?: string | null): ClaudeCodeInstallResult;

package/dist/slack-api.d.ts

@@ -1,59 +0,0 @@
-import { ChatDeliveryError } from "./chat-delivery-state.js";
-import { type ChatIdentity } from "./chat-delivery-state.js";
-/** A Slack app installation: the chat identity, with the workspace (team) it belongs to. */
-export type SlackIdentity = ChatIdentity & {
-    team: string;
-};
-export type SlackCredentials = SlackIdentity & {
-    appToken: string;
-    botToken: string;
-};
-export type SlackApi = (method: string, args?: Record<string, unknown>) => Promise<Record<string, unknown>>;
-export declare class SlackError extends ChatDeliveryError {
-    constructor(code: string, retryMs?: number, uncertain?: boolean);
-}
-export declare function slackApi(token: string, fetcher?: typeof fetch): SlackApi;
-export declare const slackCredentialFile: (dir: string) => string;
-export declare function loadSlackCredentials(dir: string): SlackCredentials | null;
-export declare function saveSlackCredentials(dir: string, value: SlackCredentials): void;
-export declare function clearSlackCredentials(dir: string): void;
-export declare function checkSlackCredentials(appToken: string, botToken: string, fetcher?: typeof fetch): Promise<SlackCredentials>;
-export declare function object(value: unknown): Record<string, unknown>;
-export declare function slackId(value: unknown, prefix: string): value is string;
-export declare function slackTs(value: unknown): value is string;
-export declare function slackMember(api: SlackApi, identity: SlackIdentity, member: string, channel: string): Promise<boolean>;
-export declare function uploadSlackBytes(url: string, bytes: Uint8Array, fetcher?: typeof fetch): Promise<void>;
-/** DM scopes plus channel history for rooms that follow a team conversation. */
-export declare const SLACK_MANIFEST: {
-    display_information: {
-        name: string;
-        description: string;
-        background_color: string;
-    };
-    features: {
-        bot_user: {
-            display_name: string;
-            always_online: boolean;
-        };
-        app_home: {
-            home_tab_enabled: boolean;
-            messages_tab_enabled: boolean;
-            messages_tab_read_only_enabled: boolean;
-        };
-    };
-    oauth_config: {
-        scopes: {
-            bot: string[];
-        };
-    };
-    settings: {
-        event_subscriptions: {
-            bot_events: string[];
-        };
-        interactivity: {
-            is_enabled: boolean;
-        };
-        socket_mode_enabled: boolean;
-        token_rotation_enabled: boolean;
-    };
-};

package/dist/slack-chat.d.ts

@@ -1,37 +0,0 @@
-import { ChatState, type ChatEvent } from "./chat-delivery-state.js";
-import { uploadSlackBytes, type SlackApi, type SlackIdentity } from "./slack-api.js";
-import { type Store } from "./store.js";
-import { type ChatAckHooks, type ChatLiveTransport, type LiveReplies } from "./chat-live.js";
-import type { SubscriptionLeadRunner } from "./subscription-chat.js";
-export type SlackChatOptions = {
-    store: Store;
-    identity: SlackIdentity;
-    api: SlackApi;
-    owner: string;
-    readProjects: () => Promise<readonly string[]>;
-    evidenceRoot: string;
-    current: () => boolean;
-    origin: () => string | null;
-    subscriptionRunner?: SubscriptionLeadRunner;
-    canNotify?: () => boolean;
-    clock?: () => Date;
-    upload?: typeof uploadSlackBytes;
-    /** The live "Working on it…" message (chat-live.ts): on in the worker, off unless asked for. */
-    liveReplies?: LiveReplies;
-};
-/** Synchronous receipt before ACK. Never stores response_url, raw tokens, or a pairing code. */
-export declare function receiveSlack(state: ChatState, identity: SlackIdentity, type: string, raw: unknown, now: Date): boolean;
-export declare const processSlackEvent: (options: SlackChatOptions) => Promise<boolean>;
-export declare const planSlackNotifications: (options: SlackChatOptions) => Promise<void>;
-export declare const planSlackRooms: (options: SlackChatOptions) => Promise<void>;
-export declare function slackBlocks(text: string, buttons?: Record<string, unknown>[]): Record<string, unknown>[];
-/** The lead's reply as mrkdwn sections: no header block, so its first line stays an ordinary line. */
-export declare function slackVoiceBlocks(mrkdwn: string, buttons?: Record<string, unknown>[]): Record<string, unknown>[];
-export declare function deliverSlackPart(options: SlackChatOptions): Promise<boolean>;
-/** A live message's exact payload (§3.2): the rendered mrkdwn as the top-level text and as verbatim sections, every
- * field sent on every edit, nothing parsed, linked or unfurled, no buttons. */
-export declare function slackLivePayload(channel: string, mrkdwn: string): Record<string, unknown>;
-/** The live message for one owner message, in its thread (where the reply goes). */
-export declare function slackLive(options: Pick<SlackChatOptions, "api">, event: ChatEvent, spacingMs?: number): ChatLiveTransport;
-/** The 👀 on the owner's message (reactions:write). An install without that scope is asked at most once a minute, quietly. */
-export declare function slackAckHooks(options: Pick<SlackChatOptions, "api">): ChatAckHooks;

package/dist/slack-settings.d.ts

@@ -1,4 +0,0 @@
-import type { Store } from "./store.js";
-import { type Html } from "./html.js";
-import { type ChatSettingsOptions } from "./chat-settings-page.js";
-export declare function slackSettingsHtml(store: Store, dir: string, options?: ChatSettingsOptions): Html;

package/dist/slack-socket.d.ts

@@ -1,12 +0,0 @@
-/**
- * The Socket Mode client, apart from the follower so the Slack SDK loads only
- * once Slack is set up (slack.ts imports this when it finds credentials).
- */
-import { SocketModeClient } from "@slack/socket-mode";
-export { LogLevel } from "@slack/socket-mode";
-/** The bot and socket tokens must belong to the same app, including after reconnect. */
-export declare class ToolrollSlackSocket extends SocketModeClient {
-    expectedApp: string;
-    wrongApp: () => void;
-    protected onWebSocketMessage(data: string | ArrayBuffer, isBinary: boolean): Promise<void>;
-}

package/dist/slack.d.ts

@@ -1,6 +0,0 @@
-import { type SlackChatOptions } from "./slack-chat.js";
-export declare function followSlack(options: Omit<SlackChatOptions, "identity" | "api" | "owner" | "current"> & {
-    dir: string;
-    signal: AbortSignal;
-    notifications: () => boolean;
-}): Promise<void>;

package/dist/sleep.d.ts

@@ -1,2 +0,0 @@
-/** Wait `ms` milliseconds on the global timer (so fake timers in tests still drive it). */
-export declare const sleep: (ms: number) => Promise<void>;

package/dist/source-key.d.ts

@@ -1,2 +0,0 @@
-/** The budget key for one address, as described above. */
-export declare function sourceKey(source: string): string;

package/dist/spend-report.d.ts

@@ -1,87 +0,0 @@
-/**
- * The Spend page's reader (docs/plans/spend-dashboard.md, slice 1): one row per piece of agent work in a month, with
- * three things kept apart that today's budget sum folds together:
- *
- * - `billing`: what the work's own records prove about how it was billed. A machine default, a login mode or a
- *   setting is never proof: an unproved login is `unproved`, never a confirmed subscription.
- * - `amount`: API dollars, subscription usage or unknown, exactly as the eval collector reads it (reported-usage.ts
- *   `runAmountOf` / `chatTurnAmountOf`, the same inputs `runAccounting` / `chatTurnAccounting` read).
- * - `charge`: the saved amount a limit could count, with its basis (reported, settled or estimated). It is what was
- *   saved when the work settled, never re-priced at today's catalogue, and a guessed-subscription zero is never one.
- *
- * Attribution follows spend.ts `spendItems`: runs at their start, a lead turn's requests at the turn's creation,
- * everything else at its own time. Evals are read from their own tables, per invocation, and never count toward a
- * limit. This module reads only; it changes nothing the budget gate counts.
- */
-import type { Database } from "./store.js";
-import { type ReportedAmount } from "./reported-usage.js";
-import { type Billing } from "./spend.js";
-export type SpendSource = "run" | "chat" | "lead" | "subagent" | "draft" | "sort" | "eval";
-export type SpendRole = "builder" | "repair" | "planner" | "reviewer" | "scout" | "lead" | "chat" | "subagent" | "flow" | "evals";
-/** What the work's own records prove about its billing. */
-export type BillingEvidence = Billing | "unproved";
-export type ChargeBasis = "reported" | "settled" | "estimated";
-export type SpendCharge = {
-    microusd: number;
-    basis: ChargeBasis;
-};
-export type SpendRow = {
-    /** The record behind the row, as `table:id` (run:12, chat_turn:5, mate_turn:3, eval_invocation:9, ...). */
-    ref: string;
-    at: string;
-    source: SpendSource;
-    role: SpendRole;
-    project: string | null;
-    person: string | null;
-    subagent: number | null;
-    taskId: string | null;
-    runId: number | null;
-    provider: string;
-    modelChosen: string | null;
-    modelReported: string | null;
-    billing: BillingEvidence;
-    /** Null only for a lead turn's held reservation beyond its requests' own charges (a saved charge, no request). */
-    amount: ReportedAmount | null;
-    charge: SpendCharge | null;
-};
-/** Every piece of work in [from, to), one row each. */
-export declare function spendRows(db: Database, from: string, to: string): SpendRow[];
-/** One line of a breakdown: the three amounts kept apart. */
-export type SpendLine = {
-    key: string;
-    count: number;
-    apiMicrousd: number;
-    /** Subscription usage the providers reported (at API prices), and how many subscription pieces reported none. */
-    usageMicrousd: number;
-    usageUnreported: number;
-    usageCount: number;
-    unknown: number;
-    /** By model: how each piece chose the model it ran on ("opus", the exact id), sorted; empty elsewhere. */
-    chosen: string[];
-    /** Saved charges on work that isn't measured API dollars (estimates). */
-    estimatedMicrousd: number;
-};
-export type SpendReport = {
-    totals: SpendLine;
-    byProject: SpendLine[];
-    byModel: SpendLine[];
-    byRole: SpendLine[];
-    byPerson: SpendLine[];
-    /** The runs with the most API dollars, biggest first. */
-    topRuns: {
-        runId: number;
-        taskId: string;
-        role: SpendRole;
-        project: string | null;
-        provider: string;
-        model: string;
-        microusd: number;
-    }[];
-};
-/** The model a row ran on, in words: the reported model; a floating choice beside what it ran as (no verdict); the
- * chosen model "not reported" when the provider said nothing. */
-export declare function modelLabel(row: Pick<SpendRow, "modelChosen" | "modelReported">): string;
-/** The month's totals, breakdowns and most expensive runs, from `spendRows`. Pure. */
-export declare function spendReport(rows: readonly SpendRow[], top?: number): SpendReport;
-/** One CSV row per piece of work, the same rows the page adds up. */
-export declare function spendReportCsv(rows: readonly SpendRow[], subagentNames: Map<number, string>): string;

package/dist/spend-ui.d.ts

@@ -1,80 +0,0 @@
-/**
- * The Spend page (docs/plans/spend-dashboard.md, slice 1), in the kit's Settings frame (group "spend"): the monthly
- * limits first (the one that needs you on top), then what agent work cost in a month, with API dollars, plan usage
- * and unknown cost kept apart and never added together, broken down by project and model (and, on demand, role,
- * person and the costliest runs), the plan windows, and what isn't recorded here. An instance operator's page.
- * A limit changes in place: Edit limit opens its form under the row (`?edit=<target>`), saved with a step-up.
- */
-import { type Html } from "./html.js";
-import { type ApprovalFacts } from "./design/kit.js";
-import { type BudgetState, type SpendItem } from "./spend.js";
-import type { SpendReport } from "./spend-report.js";
-import type { BrowserLimits } from "./browser-workspace.js";
-import { type SavingsReport } from "./route-savings.js";
-/** The page's own layout: the limit rows and meters, the summary figures and the quiet bars. Colour from tokens only. */
-export declare const SPEND_CSS: string;
-/** What this page doesn't record, in plain words (docs/plans/spend-dashboard.md §2.2). */
-export declare const NOT_COUNTED: readonly string[];
-/** A limit's row: a saved limit, or a target with none yet (Everything, a project) and what it spent so far. */
-export type LimitRowView = {
-    target: string;
-    label: string;
-    budget: BudgetState | null;
-    spentMicrousd: number;
-};
-/** The open limit form: whose, the draft the person typed, and a refusal next to the field or under the form. */
-export type LimitEdit = {
-    target: string;
-    usd?: string | null;
-    stop?: boolean | null;
-    fieldError?: string | null;
-    problem?: string | null;
-};
-export type SpendView = {
-    month: string;
-    previous: string;
-    next: string | null;
-    report: SpendReport;
-    /** This month's saved limits (what the budget gate counts today), whichever month is shown. */
-    budgets: BudgetState[] | null;
-    /** Everything and each project with no limit yet, with what it spent this month. */
-    unlimited?: LimitRowView[];
-    /** People and subagents a limit can be added for (Add a limit). */
-    targets?: {
-        value: string;
-        label: string;
-        group: "People" | "Subagents";
-    }[];
-    /** The plan windows as their providers last reported them (limits-ui.ts limitsView), or nothing. */
-    windows: BrowserLimits | null;
-    subagentNames: Map<number, string>;
-    /** The limit form that is open, if any. */
-    edit?: LimitEdit | null;
-    /** What this request's approval shows (approvalFactsNow): a step-up asks for the password unless Passwordless is on. */
-    facts?: ApprovalFacts;
-    /** This month's name (YYYY-MM): the limits are this month's. */
-    current?: string;
-    /** Suggestions and rules (route-savings.ts): what each rule, trial and suggestion observed, or that it can't be read. */
-    savings?: SavingsReport | {
-        error: string;
-    } | null;
-};
-/** Dollars for the page: a positive amount under a cent reads "<$0.01", never a false $0. */
-export declare const money: (microusd: number) => string;
-/** A limit Settings flags as Needs you: one that pauses work and is at or near its limit. */
-export declare const limitNeedsYou: (budget: BudgetState) => boolean;
-export declare function spendHtml(view: SpendView, said: {
-    said?: string | null;
-    problem?: string | null;
-}): Html;
-/** Suggestions and rules (docs/plans/results-routing.md, slice 4): per project and size, each live or recently ended
- * rule or trial, and each standing suggestion, with what it observed over matched 90-day windows. Labelled "observed,
- * not a promise"; a median shows only from 5 API-priced results a side; unknown is "—", never $0. Read-only. */
-export declare function savingsSection(savings: SavingsReport | {
-    error: string;
-} | null): Html | "";
-/** Checks the amount next to its field before any password is asked or the form leaves the page; the server checks
- * it again. Remove skips it. */
-export declare function spendScript(): string;
-/** One row per piece of spend, for a spreadsheet (the command line's `spend --csv`). */
-export declare function spendCsv(items: readonly SpendItem[], subagentNames: Map<number, string>): string;