toolroll 0.9.104 → 0.9.105

package/dist/server/console.css

@@ -265,13 +265,13 @@
   .project-card .project-name:focus-visible { outline: 2px solid var(--ring); outline-offset: 2px; border-radius: .375rem; }
 
   label { display: block; font-size: 0.8125rem; font-weight: 500; margin: .75rem 0 0; color: var(--foreground); }
-  /* The kit's field family (src/design/KIT.md "Fields"): one filled surface, no outline, 12px radius; the label above
-     names the field and focus draws the ink ring. A transparent border keeps the edge in forced colours. Textareas
-     grow with their words (no resize grip); selects draw the kit's chevron. */
+  /* The kit's field family (src/design/KIT.md "Fields"): one filled surface with a 3:1 --so-field-line boundary, 12px
+     radius; the label above names the field and focus draws the ink ring. Textareas grow with their words (no resize
+     grip); selects draw the kit's chevron. */
   :where(input[type=text], input[type=password], input[type=number], input[type=url], input[type=email], input[type=search], input[type=time], input:not([type]), textarea, select) {
     width: 100%; margin: .35rem 0 0; padding: .5rem .75rem;
     color: var(--foreground); background-color: var(--so-field); min-height: 2.25rem;
-    border: 1px solid transparent; border-radius: var(--so-radius-sheet); box-shadow: none;
+    border: 1px solid var(--so-field-line); border-radius: var(--so-radius-sheet); box-shadow: none;
     transition: background-color .12s;
   }
   :where(textarea) { resize: none; field-sizing: content; min-height: 4.75rem; max-height: 22rem; overflow-y: auto; line-height: 1.5; }

package/dist/server/edge-refusal.js

@@ -1,13 +1,11 @@
 import { TOKEN_REPLACEMENT } from '../password-bearer.js';
 import { ROUTES } from './route-table.js';
-/** What a request to the retired /api/sessions transport hears (D7). */
 export const SESSIONS_MOVED = `Session operations moved to /api/cli. Update toolroll, ${TOKEN_REPLACEMENT.charAt(0).toLowerCase()}${TOKEN_REPLACEMENT.slice(1)}, connect with it, and run toolroll session <operation>.`;
 export function isEdgeAddress(path) {
     return ROUTES.some(row => row.stage === 'edge' && new RegExp(row.pattern).test(path))
         || /^\/(?:oauth|hooks|api\/(?:sessions|team|cli))(?:\/|$)/.test(path)
         || path.startsWith('/.well-known/oauth-');
 }
-/** Preserve each transport's refusal envelope without invoking an undeclared adapter. */
 export function refuseEdge(request, response, path, declared) {
     request.resume();
     response.statusCode = declared ? 405 : 404;
@@ -18,7 +16,6 @@ export function refuseEdge(request, response, path, declared) {
         body = JSON.stringify({ jsonrpc: '2.0', id: null, error: { code: -32000, message: 'the MCP gateway takes POST only — one JSON-RPC message per request' } });
     }
     else if (path === '/api/sessions' || path.startsWith('/api/sessions/')) {
-        // D7: session operations moved to /api/cli. An older client hears that nothing was sent, and what to use instead.
         response.statusCode = 404;
         type = 'application/json';
         response.setHeader('X-Toolroll-Delivery', 'not-sent');

package/dist/server/flows.js

@@ -1,5 +1,4 @@
 import { handlersOf } from './handler-registry.js';
-/** flows handlers, moved without changing their route bodies. */
 import { createHash } from "node:crypto";
 import {} from "node:http";
 import { tmpdir } from "node:os";
@@ -47,8 +46,6 @@ import { html } from "../html.js";
 import {} from "./session.js";
 export function createFlowsHandlers(runtime) {
     const { identities, store, clock, sendScreen, chromeFor, consoleProjects, options, visible, liveCeiling, providerHome, toolHome, restricted, evidenceRoot, authenticateApprover, authenticateCredential, projectOf, unscopedMode, ceiling, authorizeMutation } = runtime;
-    // ---- reads ---------------------------------------------------------------
-    /** A gallery template's page (Flows → New → Use this): its questions, the preview of these answers, and Create. */
     function sendGalleryUse(response, who, template, projects, repo, given, name, notice, said = null) {
         const answers = given ?? galleryDefaults(store, template, repo);
         let preview = null, problem = notice;
@@ -63,31 +60,23 @@ export function createFlowsHandlers(runtime) {
             csrf: who.via === "cookie" ? who.session.csrf : "", diagram, tools: preview?.tools ?? galleryToolsOf(template, diagram, connectionsOf(store, repo)), said });
         return sendScreen(response, problem !== null && preview === null && notice !== null ? 400 : 200, screen(template.name, page, { chrome: chromeFor(repo, "flows") }));
     }
-    // ---- path parameters and shared lookups ------------------------------------
-    /** One segment of the path the route's pattern admitted ("/flows/1/cards/2/move" → 2 is "1", 4 is "2"). */
     const pathPart = (url, index) => url.pathname.split("/")[index] ?? "";
-    /** A flow the caller may see: active, in a visible project. */
     const visibleFlow = (id) => {
         const flow = store.getFlow(id);
         return flow === null || flow.state !== "active" || !visible(flow.repo) ? null : flow;
     };
-    /** A subagent the caller may see: not removed, in a visible project the account can access. */
     const visibleSubagent = (who, id) => {
         const mate = store.getSubagent(id);
         return mate === null || mate.state === "removed" || !visible(mate.repo) || !store.accountCanAccess(who.name, mate.repo) ? null : mate;
     };
     const sendJson = (response, status, payload) => respond(response, status, "application/json; charset=utf-8", JSON.stringify(payload));
-    // ---- flows: reads ----------------------------------------------------------
-    // Flows → New: describe it to the lead, or start from a template (with the kits, recipes and starter flows as groups).
     async function newFlowGallery(ctx) {
         const { url, response, who, project } = ctx;
         const projects = consoleProjects();
         const approver = who.via === "cookie" && who.role === "approver";
         const canUse = approver && projects.length > 0;
-        // The chosen project, else the one being looked at, else the first: its tools are what each row says is connected.
         const asked = url.searchParams.get("repo");
         const repo = asked !== null && projects.includes(asked) ? asked : project !== null && projects.includes(project) ? project : projects[0] ?? null;
-        // Describe what you want: the words go to the lead as a chat draft, which drafts the flow for the person to confirm.
         const described = url.searchParams.get("describe");
         let askError = null;
         if (described !== null && canUse) {
@@ -97,7 +86,6 @@ export function createFlowsHandlers(runtime) {
                 return redirect(response, `/chat?draft=${encodeURIComponent(`Make a flow${named === null ? "" : ` in ${projectName(named)}`}: ${words}`.slice(0, 4000))}`);
             askError = "Describe what should happen first.";
         }
-        // One-time work: the open project's recipes (recipe screens work in the open project).
         let recipes;
         try {
             const revision = who.via === "cookie" ? who.session.projectRevision : 0;
@@ -129,14 +117,12 @@ export function createFlowsHandlers(runtime) {
         const projects = consoleProjects();
         if (template === null)
             return refuse(response, who, 404, "There's no template by that name.", "/flows/new");
-        // Not in the route table: an unknown template is a 404 for anyone first.
         if (who.via !== "cookie" || who.role !== "approver")
             return refuse(response, who, 403, "Sign in as an approver to create flows.", "/flows/new");
         if (projects.length === 0)
             return refuse(response, who, 409, "Add a project first.", "/projects");
         const asked = url.searchParams.get("repo");
         const repo = asked !== null && projects.includes(asked) ? asked : project !== null && projects.includes(project) ? project : projects[0];
-        // Back from a Connect started on this page: how it went.
         const problem = url.searchParams.get("problem"), said = url.searchParams.get("said");
         return sendGalleryUse(response, who, template, projects, repo, null, template.name, problem === null ? null : problem.slice(0, 400), said === null ? null : said.slice(0, 400));
     }
@@ -164,7 +150,6 @@ export function createFlowsHandlers(runtime) {
             return sendJson(response, 404, { said: "No such run." });
         return sendJson(response, 200, { card: run.card, entry: run.entry, script: run.script, version: run.scriptVersion, state: run.state, result: run.result, exitCode: run.exitCode, durationMs: run.durationMs, at: run.finishedAt ?? run.startedAt, log: run.log ?? "" });
     }
-    // A flow as a file (flow-share.ts): zones, paths, trigger settings and scripts; never secrets, addresses, names or cards.
     async function flowExportFile(ctx) {
         const { url, who, response } = ctx;
         const flow = visibleFlow(Number(pathPart(url, 2)));
@@ -192,10 +177,8 @@ export function createFlowsHandlers(runtime) {
             return respond(response, 200, "application/json; charset=utf-8", JSON.stringify(checkResponse("flowView", view)));
         return sendScreen(response, 200, screen(flow.name, html `<p><a href="/flows">Flows</a></p><h1>${flow.name}</h1>${flowFallbackHtml(view)}`, { chrome: chromeFor(flow.repo, "flows"), workspace: { view } }));
     }
-    // ---- starter kits: the gallery, and each kit's checklist in a project ------
     async function kitsGallery(ctx) {
         const { url, response } = ctx;
-        // Starter kits live under New flow → With an agent now; a refusal sent here still shows there.
         const problem = url.searchParams.get("problem");
         return redirect(response, `/flows/new?group=kits${problem === null ? "" : `&problem=${encodeURIComponent(problem.slice(0, 400))}`}`);
     }
@@ -209,13 +192,11 @@ export function createFlowsHandlers(runtime) {
             return redirect(response, "/flows/new?group=kits");
         return sendScreen(response, 200, screen(kit.name, kitPageHtml(store, kit, repo, options.configDir ?? null, canSetUp, { said: url.searchParams.get("said"), problem: url.searchParams.get("problem") }, projectName), { chrome: chromeFor(repo, "flows") }));
     }
-    // ---- v92 / D5: the lead's subagents — the list, and one page per subagent ----
     async function subagentsPage(ctx) {
         const { url, who, response, project } = ctx;
         const projects = consoleProjects();
         return sendScreen(response, 200, screen("Subagents", html `<p><a href="/settings/lead">Lead</a></p><h1>Subagents</h1>${(subagentsListHtml(store, store.subagents(projects), projects, projectName, who.via === "cookie" && who.role === "approver", { said: url.searchParams.get("said"), problem: url.searchParams.get("problem"), adding: url.searchParams.get("add") === "1" }))}`, { chrome: chromeFor(project, "settings") }));
     }
-    /** D5: subagents were teammates; an old link lands on the same page under Settings → Lead. */
     async function legacySubagentLink(ctx) {
         const { url, response } = ctx;
         const legacy = /^\/teammates(?:\/([1-9][0-9]{0,9})(\/soul\.md)?)?$/.exec(url.pathname);
@@ -237,11 +218,9 @@ export function createFlowsHandlers(runtime) {
         response.writeHead(200, { ...SAFETY, "Content-Type": "text/markdown; charset=utf-8", "Content-Disposition": `attachment; filename="${mate.handle}.md"` });
         return void response.end(mate.soul);
     }
-    /** Recipes are New flow → One-time work now: the old address lands there. */
     async function recipeLibrary(ctx) {
         return redirect(ctx.response, "/flows/new?group=recipes");
     }
-    /** One recipe screen in the open project: the editor (start, new, edit, from a task), use, preview, export; any other address is no screen. */
     const recipeScreen = (shown) => async (ctx) => {
         const { url, who, response, now, project } = ctx;
         try {
@@ -263,8 +242,6 @@ export function createFlowsHandlers(runtime) {
                 recipe = { ...starter, id: "custom", document: { ...starter.document, name: "", description: "", goal: "", outOfScope: null, acceptance: [] } };
             }
             if (shown === "start" && recipe?.id === "small-feature") {
-                // This starter supplies the process, but the person supplies the
-                // feature. Do not let instructional placeholder text become work.
                 recipe = { ...recipe, document: { ...recipe.document, goal: "" } };
             }
             if (shown === "from-task") {
@@ -299,7 +276,7 @@ export function createFlowsHandlers(runtime) {
             if (recipe === null)
                 return refuse(response, who, 404, "No recipe in this project.", "/recipes");
             if (shown === "export") {
-                response.setHeader("Content-Disposition", 'attachment; filename="standing-orders-recipe.json"');
+                response.setHeader("Content-Disposition", 'attachment; filename="toolroll-recipe.json"');
                 return respond(response, 200, "application/json; charset=utf-8", exportRecipe(recipe.document));
             }
             if (shown === "start" || shown === "new" || shown === "edit" || shown === "from-task")
@@ -312,7 +289,6 @@ export function createFlowsHandlers(runtime) {
             throw error;
         }
     };
-    // setting a starter kit up, trying its sample card, and bringing GitHub issues in.
     const kitAct = (step) => async (ctx) => {
         const { url, who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.kit);
@@ -324,13 +300,11 @@ export function createFlowsHandlers(runtime) {
             return redirect(response, `/kits?problem=${encodeURIComponent("Choose one of your projects.")}`);
         const page = (key, words) => redirect(response, `/kits/${kit.id}?repo=${encodeURIComponent(repo)}&${key}=${encodeURIComponent(words)}`);
         if (step === "setup") {
-            // Its tools come with it only on the person's proof (a password, or the session under Passwordless): a grant widens.
             const proved = authenticateApprover(who, body.get("password") ?? "", repo).ok;
             const made = await setUpKit(store, kit, repo, who.name, now, options.configDir ?? null, { toolHome }, proved ? { widening: "proved" } : {});
             return page(made.ok ? "said" : "problem", made.said);
         }
         if (step === "github") {
-            // Issues from anyone on GitHub come into a flow: a widening, so it takes a password (chat-management.md §0a.3).
             if (!authenticateApprover(who, body.get("password") ?? "", repo).ok)
                 return page("problem", "Enter your Toolroll password to bring in GitHub issues. Nothing changed.");
             const made = addKitGithubTrigger(store, kit, repo, who.name, now, options.configDir ?? null, "proved");
@@ -339,14 +313,12 @@ export function createFlowsHandlers(runtime) {
         const tried = addKitSample(store, kit, repo, who.name, now);
         if (!tried.ok)
             return page("problem", tried.said);
-        // The subagent picks it up on the worker's next pass (a few seconds); its flow opens on the card.
         try {
             advanceFlows(store, repo, now, { evidenceRoot });
         }
-        catch { /* the worker's next pass moves it */ }
+        catch { }
         return redirect(response, tried.href);
     };
-    // ---- v92: looking after subagents, and answering their questions -----------
     async function answerSubagentQuestionSend(ctx) {
         const { url, who, request, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.subagents);
@@ -358,7 +330,6 @@ export function createFlowsHandlers(runtime) {
         const card = question === null ? null : store.getFlowCard(question.card);
         const flow = card === null ? null : store.getFlow(card.flow);
         const done = question === null || flow === null || !visible(flow.repo) ? { ok: false, said: "No such question." }
-            // Accepting a looser rule it suggested takes the password (chat-management.md §0a.3); every other answer doesn't.
             : question.suggestion !== null && body.get("choice") === ACCEPT_SUGGESTION && !authenticateApprover(who, body.get("password") ?? "").ok
                 ? { ok: false, said: "Enter your Toolroll password to change the rule." }
                 : answerSubagentQuestion(store, question.id, { choice: body.get("choice"), text: body.get("text"), by: who.name, via: "web", ...(question.suggestion !== null ? { widening: "proved" } : {}) }, now);
@@ -402,7 +373,6 @@ export function createFlowsHandlers(runtime) {
             return redirect(response, `${back}?said=${encodeURIComponent(saved.said)}`);
         }
         if (part === "week") {
-            // v97: undo one of its tool calls, or send the week's report now.
             const done = body.get("op") === "undo" ? await undoCall(store, mate, Number(body.get("id")), who.name, { toolHome }, now)
                 : sendSubagentWeeklies(store, mate.repo, now, mate.id) > 0 ? { ok: true, said: `Sent the week's report to ${mate.manager}.` } : { ok: false, said: "The report couldn't be sent." };
             if (wantsJson)
@@ -410,7 +380,6 @@ export function createFlowsHandlers(runtime) {
             return redirect(response, `${back}?${done.ok ? "said" : "problem"}=${encodeURIComponent(done.said)}#week`);
         }
         if (part === "routines") {
-            // v96: its routines: add one, try one now, or remove one.
             const op = body.get("op"), routine = Number(body.get("id"));
             const hooks = options.configDir ?? null;
             const changed = op === "add" ? addRoutine(store, mate, body.get("schedule") ?? "", body.get("text") ?? "", who.name, now, hooks)
@@ -420,29 +389,24 @@ export function createFlowsHandlers(runtime) {
                 try {
                     advanceFlows(store, mate.repo, now, { evidenceRoot });
                 }
-                catch { /* the worker's next pass moves it */ }
+                catch { }
             }
             return redirect(response, `${back}?${changed.ok ? "said" : "problem"}=${encodeURIComponent(changed.said)}#desk`);
         }
         if (part === "memory") {
-            // v95: edit or forget one thing it remembers.
             const memory = Number(body.get("id"));
             const changed = body.get("op") === "forget" ? forgetMemory(store, mate, memory, who.name, now) : editMemory(store, mate, memory, body.get("text") ?? "", who.name, now);
             return redirect(response, `${back}?${changed.ok ? "said" : "problem"}=${encodeURIComponent(changed.said)}#memory`);
         }
         if (part === "tools") {
-            // v94: which project tools it may use, and its rule for each action.
             const tool = body.get("tool") ?? "", op = body.get("op");
             const grant = store.subagentGrant(mate.id, tool);
-            // Giving a subagent a tool widens what it does unasked: a password (chat-management.md §0a.3). Revoking and
-            // tightening a rule don't need one.
             if (op === "grant" && !authenticateApprover(who, body.get("password") ?? "", mate.repo).ok) {
                 return redirect(response, `${back}?problem=${encodeURIComponent(`Enter your Toolroll password to let ${nameOf(mate)} use ${tool}. Nothing changed.`)}#tools`);
             }
             const changed = op === "grant" ? await grantTool(store, mate, tool, who.name, now, { toolHome }, { widening: "proved" })
                 : op === "revoke" ? revokeTool(store, mate, tool, who.name, now)
                     : grant === null ? { ok: false, said: `${nameOf(mate)} doesn't use ${tool}.` } : (() => {
-                        // Loosening a rule widens what it does unasked: a password (chat-management.md §0a.3); tightening needs none.
                         const changes = rulesFromForm(grant, key => body.sent.get(key));
                         const tried = setToolRules(store, mate, tool, changes, who.name, now);
                         if (tried.ok || !/takes your password/.test(tried.said))
@@ -461,8 +425,6 @@ export function createFlowsHandlers(runtime) {
             return redirect(response, `/settings/lead/subagents?said=${encodeURIComponent(done.said)}`);
         return redirect(response, `${back}?${done.ok ? "said" : "problem"}=${encodeURIComponent(done.said)}${part === "note" ? "#memory" : ""}`);
     };
-    // ---- flows: making one -----------------------------------------------------
-    // Flows → New → a template: preview these answers, or create exactly what was previewed.
     async function createFromGallery(ctx) {
         const { url, who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.galleryUse);
@@ -470,7 +432,6 @@ export function createFlowsHandlers(runtime) {
         const projects = consoleProjects();
         if (template === null)
             return refuse(response, who, 404, "There's no template by that name.", "/flows/new");
-        // Not in the route table: an unknown template is a 404 for anyone first, and a demo creates nothing.
         if (who.via !== "cookie" || who.role !== "approver" || store.isDemo())
             return refuse(response, who, 403, "Sign in as an approver to create flows.", "/flows/new");
         const repo = body.get("repo") ?? "";
@@ -480,7 +441,6 @@ export function createFlowsHandlers(runtime) {
         const name = (body.get("name") ?? "").replace(/[\u0000-\u001f\u007f]/g, "").trim().slice(0, 80) || template.name;
         if (body.get("intent") !== "create")
             return sendGalleryUse(response, who, template, projects, repo, answers, name, null);
-        // What's made is what was previewed: changed answers are previewed again first.
         let digest = null;
         try {
             digest = previewGallery(store, template, repo, answers, who.name, clock()).digest;
@@ -490,7 +450,6 @@ export function createFlowsHandlers(runtime) {
         }
         if (digest === null || digest !== body.get("previewed"))
             return sendGalleryUse(response, who, template, projects, repo, answers, name, digest === null ? null : "Your answers changed. Check the preview, then create the flow.");
-        // A template whose trigger brings in items from anyone takes the password (chat-management.md §0a.3).
         const anyone = galleryAdmitsAnyone(template);
         if (anyone && !authenticateApprover(who, body.get("password") ?? "", repo).ok)
             return sendGalleryUse(response, who, template, projects, repo, answers, name, "Enter your Toolroll password: this flow brings in items from anyone.");
@@ -510,13 +469,11 @@ export function createFlowsHandlers(runtime) {
         const template = FLOW_TEMPLATES.find(one => one.id === body.get("template")) ?? FLOW_TEMPLATES[0];
         const name = (body.get("name") ?? "").replace(/[\u0000-\u001f\u007f]/g, "").trim().slice(0, 80) || template.label;
         const made = store.createFlow({ repo, name, definitionJson: JSON.stringify(template.definition), by: who.name }, now);
-        // A template that starts from something (Issues to PRs: labelled issues) comes with its trigger.
         const trigger = template.trigger === undefined ? null : addFlowTriggerTo(store, store.getFlow(made), template.trigger, who.name, now, options.configDir ?? null);
         if (trigger !== null && !trigger.ok)
             return redirect(response, `/flows?problem=${encodeURIComponent(`${name} was made, but its trigger wasn't: ${trigger.message} Add one on its Triggers panel.`)}`);
         return redirect(response, `/flows/${made}`);
     }
-    // A first look (v88): the Email replies template with one sample question, which Claude drafts a reply to straight away.
     async function createExampleFlow(ctx) {
         const { who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.flows);
@@ -530,7 +487,6 @@ export function createFlowsHandlers(runtime) {
         addCardToFlow(store, store.getFlow(id), { title: "Do you ship to Canada?", description: "Hi! I'm thinking of ordering but I live in Toronto. Do you ship there, and how long does it take? — sam@example.com", stage: null }, who.name, now);
         return redirect(response, `/flows/${id}`);
     }
-    // A flow file, chosen or fetched from a gist: previewed in plain words, then made with its triggers off and its scripts held.
     async function importFlowFile(ctx) {
         const { who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.flows);
@@ -556,7 +512,6 @@ export function createFlowsHandlers(runtime) {
             throw error;
         }
         const given = Object.fromEntries(file.parameters.flatMap(one => body.has(`param.${one.id}`) ? [[one.id, body.get(`param.${one.id}`) ?? ""]] : []));
-        // What was previewed: the file and every value it resolved to (a default the first preview filled in included).
         const previewedOf = (plan) => createHash("sha256").update(`${document}\0${JSON.stringify(plan?.values ?? given)}`).digest("hex").slice(0, 32);
         const csrf = who.via === "cookie" ? who.session.csrf : "";
         const page = (plan, problem, status) => sendScreen(response, status, screen(`Import ${file.name}`, flowImportHtml({ plan, file, document, repo, csrf, values: given, previewed: previewedOf(plan), problem }), { chrome: chromeFor(repo, "flows") }));
@@ -581,8 +536,6 @@ export function createFlowsHandlers(runtime) {
         }
         return page(plan, null, 200);
     }
-    // ---- flows: changing one (answers the editor's JSON) -----------------------
-    /** What every change to one flow starts from: its form, the flow (else the editor hears 404), and how a change settles. Null once answered. */
     function openFlowChange(ctx) {
         const { url, who, response, posted } = ctx;
         const body = readForm(posted, CONSOLE_FORMS.flows);
@@ -598,11 +551,10 @@ export function createFlowsHandlers(runtime) {
         const dir = options.configDir ?? null;
         const viewNow = () => flowView(store, store.getFlow(flow.id) ?? flow, { name: who.name, approver: true }, null, { dir, repos: projects, sortReady: keyStatus("openrouter", providerHome).set, toolHome, now });
         const settle = (said, extra = {}) => {
-            // Move what can move right away (a message, a decision's next zone); workers file and run the tasks.
             try {
                 advanceFlows(store, flow.repo, now, { evidenceRoot });
             }
-            catch { /* the next worker pass retries */ }
+            catch { }
             return answer(200, { ok: true, said, view: viewNow(), ...extra });
         };
         return { body, now, answer, projects, flow, definition, dir, viewNow, settle };
@@ -621,11 +573,9 @@ export function createFlowsHandlers(runtime) {
             catch {
                 return answer(400, { ok: false, said: "That trigger couldn't be read." });
             }
-            // A trigger that takes deliveries mints an address: a credential act (docs/plans/passwordless.md).
             const ingress = rawTakesDeliveries(raw);
             if (ingress && !authenticateCredential(who, body.get("password") ?? "").ok)
                 return answer(403, { ok: false, said: "Enter your Toolroll password to make a webhook address." });
-            // Items from anyone: a widening, an ordinary step-up (chat-management.md §0a.3).
             const anyone = !ingress && rawAdmitsAnyone(raw);
             if (anyone && !authenticateApprover(who, body.get("password") ?? "", flow.repo).ok)
                 return answer(403, { ok: false, said: "Enter your Toolroll password to bring in items from anyone." });
@@ -635,9 +585,7 @@ export function createFlowsHandlers(runtime) {
             return made.ok ? settle(made.said, made.reveal === null ? {} : { reveal: made.reveal }) : answer(400, { ok: false, said: made.message });
         }
         if (action === "scripts") {
-            // The project's script library, reached from any of its flows.
             if (body.get("approve") === "yes") {
-                // The approval covers the version and content the panel showed (its version and digest ride back).
                 const version = Number(body.get("version")), digest = body.get("digest") ?? "";
                 const approved = Number.isSafeInteger(version) && version > 0 && digest !== "" ? store.approveFlowScript(flow.repo, body.get("name") ?? "", { version, digest }) : "changed";
                 return approved === "approved" ? settle("Approved. Zones that run it go on.")
@@ -652,7 +600,6 @@ export function createFlowsHandlers(runtime) {
             return saved.ok ? settle(saved.said) : answer(400, { ok: false, said: saved.message });
         }
         if (action === "linear-key" || action === "hooks-address") {
-            // Installation settings, set from the flow they are needed on.
             if (dir === null)
                 return answer(409, { ok: false, said: "These settings are kept on the console's computer." });
             if (action === "hooks-address") {
@@ -673,7 +620,6 @@ export function createFlowsHandlers(runtime) {
             return redirect(response, "/flows");
         }
         if (action === "unattended") {
-            // The owner's password signs exactly the terms the panel showed; a flow saved meanwhile is refused (sawRevision).
             if (!authenticateApprover(who, body.get("password") ?? "").ok)
                 return answer(403, { ok: false, said: "That password isn't right. Nothing was signed." });
             const asked = parseUnattendedAsk({ days: body.get("days"), budget: body.get("budget"), runs: body.get("runs"), include: body.get("include") });
@@ -686,8 +632,6 @@ export function createFlowsHandlers(runtime) {
             return revokeUnattended(store, flow.id, who.name, now) ? settle("It no longer runs on its own. New cards wait for you.") : answer(409, { ok: false, said: "It wasn't running on its own." });
         }
         if (action === "browser") {
-            // A person's own step-up (a lead's or remote run's token never gets here: route table), then signFlowBrowser
-            // re-reads the flow, its zones and scripts in its one write and refuses unless they are the digest the panel showed.
             const proved = authenticateApprover(who, body.get("password") ?? "", flow.repo);
             if (!proved.ok)
                 return answer(403, { ok: false, said: "That password isn't right. Nothing was approved." });
@@ -702,7 +646,6 @@ export function createFlowsHandlers(runtime) {
             try {
                 drawn = JSON.parse(body.get("definition") ?? "null");
                 saved = validateFlowDefinition(drawn);
-                // A {{stage.…}} this save adds must be one its zone hands on; ones the saved flow had stay.
                 const references = stageReferenceProblems(saved, flowDefinitionOf(flow));
                 if (references.length > 0)
                     throw new FlowContractError(references.map(one => one.line));
@@ -711,11 +654,9 @@ export function createFlowsHandlers(runtime) {
                 return answer(400, { ok: false, said: error instanceof SyntaxError ? "That flow couldn't be read." : error instanceof FlowContractError ? withZoneNames(error.lines, drawn) : error instanceof Error ? error.message : "That flow isn't valid." });
             }
             const name = (body.get("name") ?? flow.name).replace(/[\u0000-\u001f\u007f]/g, "").trim().slice(0, 80) || flow.name;
-            // The owner (v86) is whom "the owner decides" zones ask: someone who can approve on this project.
             const owner = (body.get("owner") ?? "").trim();
             if (owner !== "" && owner !== flow.owner && !(store.listApprovers().some(one => one.name === owner) && store.accountCanAccess(owner, flow.repo)))
                 return answer(400, { ok: false, said: `${owner} can't approve on this project, so they can't own this flow.` });
-            // A build zone in another project files work there as the flow's owner: only in one they may file in.
             const elsewhere = crossProjectProblem(store, saved, { repo: flow.repo, owner: owner || flow.owner }, who.name);
             if (elsewhere !== null)
                 return answer(400, { ok: false, said: elsewhere });
@@ -726,7 +667,6 @@ export function createFlowsHandlers(runtime) {
             return settle("Saved.");
         }
         if (action === "secrets") {
-            // A web request's secret: written here, used only in its headers, never shown back.
             if (dir === null)
                 return answer(409, { ok: false, said: "Secrets are kept on the console's computer." });
             const saved = setFlowSecret(dir, flow.repo, (body.get("name") ?? "").trim(), body.get("value") ?? "");
@@ -734,7 +674,6 @@ export function createFlowsHandlers(runtime) {
                 await prepareUnattendedCandidates(store, flow.id);
             return saved.ok ? settle(saved.said) : answer(400, { ok: false, said: saved.message });
         }
-        // Adding a card.
         if (definition === null)
             return answer(409, { ok: false, said: "This flow's drawing can't be read. Save it again from the editor." });
         const added = addCardToFlow(store, flow, { title: body.get("title"), description: body.get("description"), stage: body.get("stage") }, who.name, now);
@@ -768,7 +707,6 @@ export function createFlowsHandlers(runtime) {
             return decided.ok ? settle(decided.said) : answer(409, { ok: false, said: decided.message });
         }
         if (verb === "choose") {
-            // "Person chooses": one of the zone's options (by its place and words), or a reply that becomes the note.
             const choice = /^[0-9]$/.test(body.get("choice") ?? "") ? Number(body.get("choice")) : null;
             const chosen = chooseFlowCard(store, { card: target.id, ...(/^[1-9][0-9]{0,9}$/.test(body.get("entry") ?? "") ? { entry: Number(body.get("entry")) } : {}), choice,
                 ...(choice !== null && body.get("label") !== null ? { label: body.get("label") } : {}), note: choice === null ? body.get("note") : null, actor: who.name, where: "Toolroll", repos: projects, evidenceRoot }, now);
@@ -804,7 +742,6 @@ export function createFlowsHandlers(runtime) {
             removeFlowTrigger(store, trigger, now, dir, who.name);
             return settle("Trigger removed.");
         }
-        // A public form link and a new webhook address each open a way in: credential acts, a password typed now.
         if ((verb === "share" || verb === "renew") && !authenticateCredential(who, body.get("password") ?? "").ok) {
             return answer(403, { ok: false, said: verb === "share" ? "Enter your Toolroll password to share a form link." : "Enter your Toolroll password to make a new address." });
         }
@@ -816,7 +753,6 @@ export function createFlowsHandlers(runtime) {
             stopSharingFlowButton(store, trigger, now);
             return settle("The form link no longer works.");
         }
-        // v126: a person has seen that deliveries were turned away (the banner stays until then).
         if (verb === "dropped") {
             store.clearFlowDeliveriesDropped(trigger.id);
             return settle("Cleared.");
@@ -834,12 +770,11 @@ export function createFlowsHandlers(runtime) {
         }
         if (verb === "check") {
             const checked = await checkFlowTriggerNow(store, trigger, now, { gh: options.flowTriggerIo?.gh ?? execRun, fetch: options.flowTriggerIo?.fetch ?? fetch, dir, ...(options.flowTriggerIo?.mail === undefined ? {} : { mail: options.flowTriggerIo.mail }),
-                // A schedule's script, run now (v90): in a clean folder beside the database, inside the agents' fence.
                 shell: options.flowTriggerIo?.shell ?? execRun, scratch: options.flowTriggerIo?.scratch ?? join(dir ?? tmpdir(), "flow-scratch") });
             try {
                 advanceFlows(store, flow.repo, now, { evidenceRoot });
             }
-            catch { /* the next worker pass retries */ }
+            catch { }
             return answer(checked.ok ? 200 : 409, { ok: checked.ok, said: checked.said, view: viewNow() });
         }
         if (dir === null)
@@ -848,8 +783,6 @@ export function createFlowsHandlers(runtime) {
             const renewed = renewFlowHook(store, trigger, now, dir);
             return renewed.ok ? settle(renewed.said, { reveal: renewed.reveal }) : answer(409, { ok: false, said: renewed.message });
         }
-        // A webhook's credentials change only on this secure panel, behind the password — never in chat (v126): a secret
-        // pasted (Linear's, Sentry's, Vercel's), one made and shown once with a new address, or who signs its deliveries.
         if (!authenticateCredential(who, body.get("password") ?? "").ok)
             return answer(403, { ok: false, said: verb === "secret" ? "Enter your Toolroll password to save a secret." : "Enter your Toolroll password to change how this webhook is proved." });
         if (verb === "setup") {
@@ -882,7 +815,6 @@ export function createFlowsHandlers(runtime) {
             const rootMode = !unscopedMode && ceiling.roots.length > 0;
             const decidedOn = identities.generation();
             if (rootMode) {
-                // A mutation's target is resolved now, off the console's thread, and must still be the project it names.
                 const resolved = await identities.resolveNow(project);
                 if (resolved === "no-answer")
                     throw new RecipeError("The project's folder didn't answer. It may be on a drive that's disconnected, or waiting on macOS. Try again in a moment.", 503);
@@ -894,7 +826,6 @@ export function createFlowsHandlers(runtime) {
                 throw new RecipeError(rechecked.message, rechecked.status);
             if (projectOf(who, request) !== project)
                 throw new RecipeError("The open project changed. Preview the intended project again.", 409);
-            // An identity that changed during the awaits above undoes what they proved.
             if (identities.generation() !== decidedOn)
                 throw new RecipeError("A project folder changed while this was being checked. Try again.", 409);
             const revision = who.via === "cookie" ? who.session.projectRevision : 0;