toolroll 0.9.104 → 0.9.105

package/dist/chat-actions.d.ts

@@ -1,460 +0,0 @@
-import { type Authority } from "./local-owner.js";
-import { type CardChannel } from "./chat-terms.js";
-import { type Store } from "./store.js";
-import { type VerifiedApprover } from "./principal.js";
-import { CHAT_ACTION_FIELDS, type SharedAction } from "./contracts/chat-actions.js";
-export { CHAT_ACTION_FIELDS, type SharedAction };
-export declare const CHAT_ACTIONS: {
-    readonly skill_import: {
-        readonly label: "Add skill";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly skill_enable: {
-        readonly label: "Enable skill";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly skill_disable: {
-        readonly label: "Disable skill";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly skill_restore: {
-        readonly label: "Restore skills";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly skill_test: {
-        readonly label: "Test skill";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly knowledge_instructions: {
-        readonly label: "Save project instructions";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly knowledge_save: {
-        readonly label: "Save reference";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly knowledge_remove: {
-        readonly label: "Remove reference";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly knowledge_restore: {
-        readonly label: "Restore knowledge";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly tool_add: {
-        readonly label: "Add tool";
-        readonly protected: true;
-        readonly password: true;
-    };
-    readonly tool_remove: {
-        readonly label: "Remove tool";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_create: {
-        readonly label: "Create flow";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_starter: {
-        readonly label: "Switch on";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly sweep_file: {
-        readonly label: "Start sweep";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly sweep_cancel_rest: {
-        readonly label: "Cancel the rest";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_edit: {
-        readonly label: "Save flow";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_add: {
-        readonly label: "Add card";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_move: {
-        readonly label: "Move card";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_approve: {
-        readonly label: "Approve";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_send_back: {
-        readonly label: "Send back";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_choose: {
-        readonly label: "Choose";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_cancel: {
-        readonly label: "Cancel card";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_comment: {
-        readonly label: "Comment";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_assign: {
-        readonly label: "Set owner";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_card_watch: {
-        readonly label: "Follow card";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_script_save: {
-        readonly label: "Save script";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_trigger_add: {
-        readonly label: "Add trigger";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_trigger_pause: {
-        readonly label: "Pause trigger";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_trigger_resume: {
-        readonly label: "Turn trigger on";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_trigger_remove: {
-        readonly label: "Remove trigger";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_browser: {
-        readonly label: "Allow browser";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly flow_browser_off: {
-        readonly label: "Turn off browser";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_create: {
-        readonly label: "Add subagent";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_soul: {
-        readonly label: "Update soul file";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_state: {
-        readonly label: "Change subagent";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_note: {
-        readonly label: "Tell subagent";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_ask: {
-        readonly label: "Ask subagent";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_answer: {
-        readonly label: "Answer subagent";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_tools: {
-        readonly label: "Change subagent's tools";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_memory: {
-        readonly label: "Change subagent's memory";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_routine: {
-        readonly label: "Change subagent's routines";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly subagent_undo: {
-        readonly label: "Undo subagent's call";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly kit_setup: {
-        readonly label: "Set up kit";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly decision_record: {
-        readonly label: "Record decision";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly decision_retire: {
-        readonly label: "Retire decision";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly suggestion_not_now: {
-        readonly label: "Not now";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly trial_stop: {
-        readonly label: "Stop trial";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly code_map_switch: {
-        readonly label: "Change code map";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly code_map_holdout_end: {
-        readonly label: "End holdout";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly mode_revoke: {
-        readonly label: "End automatic approvals";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_unattended_off: {
-        readonly label: "Stop running on its own";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly flow_archive: {
-        readonly label: "Archive flow";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly provider_resume: {
-        readonly label: "Resume agent";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly worker_note: {
-        readonly label: "Note on worker";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly lead_identity: {
-        readonly label: "Name your lead";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly task_archive: {
-        readonly label: "Put away task";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly task_restore: {
-        readonly label: "Restore task";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly incident_resolve: {
-        readonly label: "Resolve incident";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly memory_decide: {
-        readonly label: "Decide memory proposal";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly finding_send: {
-        readonly label: "Send finding";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly finding_resend: {
-        readonly label: "Send finding back";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly task_reopen: {
-        readonly label: "Reopen task";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly revision_accept: {
-        readonly label: "Accept plan revision";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly revision_reject: {
-        readonly label: "Reject plan revision";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly flow_unattended: {
-        readonly label: "Let flow run on its own";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly lead_about_you: {
-        readonly label: "Remember";
-        readonly protected: false;
-        readonly password: false;
-    };
-    readonly scope_approve: {
-        readonly label: "Approve work";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly result_accept: {
-        readonly label: "Accept";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly task_cancel: {
-        readonly label: "Cancel task";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly task_resume: {
-        readonly label: "Resume task";
-        readonly protected: true;
-        readonly password: false;
-    };
-    readonly task_start: {
-        readonly label: "Start work";
-        readonly protected: true;
-        readonly password: false;
-    };
-};
-export type ChatAction = keyof typeof CHAT_ACTIONS;
-/** Approvals (owner's decision, docs/plans/toolroll-cards.md): a person's own yes from their chat stands without a password.
- * Only a person's tap in a linked chat, or their click in a signed-in browser, ever runs one. */
-export declare const APPROVAL_ACTIONS: ReadonlySet<ChatAction>;
-/** Protected actions a linked chat may confirm behind its own explicit yes/cancel challenge instead of the review screen.
- * Password actions and long or redacted terms never qualify: the card must show the exact terms. */
-export declare const APPROVAL_TERM_CHARS = 3000;
-export declare const CHALLENGE_ACTIONS: ReadonlySet<ChatAction>;
-/** Actions about the person themselves, in no project: their card carries no project (repo ""). */
-export declare const OWNER_ACTIONS: ReadonlySet<ChatAction>;
-export declare function isChatAction(value: unknown): value is ChatAction;
-/** No writes, including at preview. Store-derived snapshots are never accepted
- * from a model. Rebuilding the same request before execution catches changes. */
-export declare function prepareSharedAction(store: Store, who: VerifiedApprover, operation: ChatAction, input: Record<string, unknown>, root?: string, now?: Date, 
-/** The lead turn the card is (or is being) drafted in: a Start card's preview must have been prepared in it. Read
- * from the proposal row (or the running turn), never from the request. */
-turn?: number): SharedAction;
-/** A saved proposal's action, read by its schema (contracts/chat-actions.ts); null when it can't be read. */
-export declare function sharedActionPayload(value: unknown): SharedAction | null;
-export declare function sharedActionNeedsReview(action: SharedAction): boolean;
-/** Whether a linked chat may confirm this protected action behind its own
- * explicit challenge: the action is on the challenge list, needs no
- * password, and every term fits the card unshortened. An approval's yes is
- * a yes to the words the card showed (they are sealed as shown), so it also
- * needs a chat app that shows them exactly as stored (shownAsWritten: never
- * Teams, whose card reads Markdown; not Slack when a word would become an
- * emoji). There the card links to the review page and no tap approves. The
- * chat app is the one the card is drawn for or the tap came through, never
- * something the action or a caller's input names. */
-export declare function sharedActionAllowsChallenge(action: SharedAction, channel: CardChannel): boolean;
-export declare function sharedActionReviewPath(id: number): string;
-export declare function mintSharedActionReview(store: Store, who: VerifiedApprover, id: number, root: string, now: Date): {
-    payload: {
-        version: 1;
-        operation: "code_map_holdout_end" | "code_map_switch" | "decision_record" | "decision_retire" | "finding_resend" | "finding_send" | "flow_archive" | "flow_browser" | "flow_browser_off" | "flow_card_add" | "flow_card_approve" | "flow_card_assign" | "flow_card_cancel" | "flow_card_choose" | "flow_card_comment" | "flow_card_move" | "flow_card_send_back" | "flow_card_watch" | "flow_create" | "flow_edit" | "flow_script_save" | "flow_starter" | "flow_trigger_add" | "flow_trigger_pause" | "flow_trigger_remove" | "flow_trigger_resume" | "flow_unattended" | "flow_unattended_off" | "incident_resolve" | "kit_setup" | "knowledge_instructions" | "knowledge_remove" | "knowledge_restore" | "knowledge_save" | "lead_about_you" | "lead_identity" | "memory_decide" | "mode_revoke" | "provider_resume" | "result_accept" | "revision_accept" | "revision_reject" | "scope_approve" | "skill_disable" | "skill_enable" | "skill_import" | "skill_restore" | "skill_test" | "subagent_answer" | "subagent_ask" | "subagent_create" | "subagent_memory" | "subagent_note" | "subagent_routine" | "subagent_soul" | "subagent_state" | "subagent_tools" | "subagent_undo" | "suggestion_not_now" | "sweep_cancel_rest" | "sweep_file" | "task_archive" | "task_cancel" | "task_reopen" | "task_restore" | "task_resume" | "task_start" | "tool_add" | "tool_remove" | "trial_stop" | "worker_note";
-        request: {
-            [x: string]: unknown;
-        };
-        repo: string;
-        title: string;
-        terms: string[];
-        stamp: string;
-        state: {
-            [x: string]: unknown;
-        };
-    };
-    nonce: string;
-};
-export type SharedActionOptions = {
-    via: "web" | "cli" | "telegram" | "slack" | "discord" | "teams";
-    /** Easy-start C5: a laptop's local owner confirms (the door decided the operation is one of its acts). */
-    authority?: Authority;
-    root?: string;
-    review?: {
-        nonce: string;
-        password: string;
-    };
-    confirm?: boolean;
-    /** The web door only: a person's signed-in browser session, never a token. */
-    person?: boolean;
-    /** A linked chat's own binding: which chat the yes came from, for the ledger. */
-    binding?: number;
-    /** A typed yes to a Start card on Telegram (one-step-chat.md C5): the inbound message that was the yes. The only other
-     * way past the "confirm this" gate, for `task_start` alone, on Telegram alone, and only while that message's unsettled
-     * typed-yes record names this proposal (typedStartOpens). It is never `confirm`, mints no review and changes no `via`. */
-    typedStart?: {
-        provider: string;
-        event: string;
-    };
-};
-/** Whether a typed yes may stand in for the challenge's tap on this action: a Start card, on Telegram, a person (never a
- * machine), terms whole on the card, and an unsettled typed-yes record naming exactly this proposal. */
-export declare function typedStartOpens(store: Store, proposal: number, action: SharedAction, options: Pick<SharedActionOptions, "via" | "typedStart" | "authority">): boolean;
-/** Called inside the proposal door's transaction, after ownership and session
- * checks. No password or review receipt is ever part of a saved proposal. */
-export declare function executeSharedAction(store: Store, who: VerifiedApprover, id: number, payload: SharedAction, now: Date, options: SharedActionOptions): {
-    ok: true;
-    said: string;
-    taskId: string | null;
-    href?: string;
-    awaiting?: true;
-    already?: true;
-} | {
-    ok: false;
-    reason: "needs-confirm" | "stale" | "refused";
-    said: string;
-};
-/**
- * A value safe to paste into a shell as ONE word, single-quoted, or null. The value is model- or person-written (the
- * lead's title, a project path), so only a strict allowlist passes: letters, digits, spaces and `. , : _ / - ( ) + # @`,
- * 1 to 120 characters, no leading `-`. Anything else (quotes, backticks, `$`, `\`, newlines, globs, redirections…) is
- * null, and the caller shows a placeholder instead.
- */
-export declare function shellWordOrNull(text: string): string | null;
-/** Where `toolroll chat` sends a Start card: the terminal's own fast start, with the words the lead drafted when they are
- * safe to paste as one shell word, else the placeholders. Never a value unquoted or in double quotes. */
-export declare function startFromTerminalWords(store: Store, action: Pick<SharedAction, "repo" | "state">): string;

package/dist/chat-admission.d.ts

@@ -1,19 +0,0 @@
-import type { ChatBinding, ChatState } from "./chat-delivery-state.js";
-import type { ChatEventBody } from "./contracts/chat-content.js";
-import type { ChatApp } from "./contracts/flow.js";
-/**
- * Whether a received message or tap, already proved to come from this app, may be queued — and under which binding.
- * A room (any conversation that isn't a direct message) is taken only while it follows a conversation, for the words
- * that make it follow one, or when it feeds a flow (v89: anyone's message then, as a card with no say over anything).
- * A pairing message comes only from someone unpaired, in a direct message; everything else only from a live paired
- * member in their own conversation or a followed room. Null when it is not taken.
- */
-export declare function admitChatEvent(state: ChatState, app: ChatApp, installation: string, event: {
-    kind: "message" | "pair" | "action";
-    member: string;
-    channel: string;
-    isRoom: boolean;
-    payload: ChatEventBody;
-}): {
-    binding: ChatBinding | null;
-} | null;

package/dist/chat-approval.d.ts

@@ -1,58 +0,0 @@
-import type { Store } from "./store.js";
-/** The all-projects row's scope. */
-export declare const ALL_PROJECTS = "*";
-export type ChatApprovalLimits = {
-    fullAccess: boolean;
-    capMicrousd: number | null;
-};
-export type ChatApprovalSetting = ChatApprovalLimits & {
-    approver: string;
-    scope: string;
-    enabled: boolean;
-    generation: number;
-    digest: string;
-    updatedBy: string;
-    updatedAt: string;
-};
-/** This person's rows: all projects first, then each project's. */
-export declare function chatApprovalSettings(store: Store, approver: string): ChatApprovalSetting[];
-/** The limits in plain words, said once: what a yes in chat may start. */
-export declare function chatApprovalWords(limits: ChatApprovalLimits): string;
-/** Whether this person's chat may approve on this project now, under their lasting setting: which row, and its limits. */
-export declare function effectiveChatApproval(store: Store, repo: string, approver: string): {
-    ok: true;
-    setting: ChatApprovalSetting;
-    limits: ChatApprovalLimits;
-} | {
-    ok: false;
-    why: string;
-};
-/** What this person's chat on `channel` may approve on this repository now, and under whose limits: their saved setting,
- * else (only with nothing saved) their own live signed mode that names this chat app, else their standing as an
- * approver. A saved setting that refuses refuses here. `digest` names that for
- * the ledger; the yes itself is the person's tap and is sealed as theirs, so it doesn't lapse when the authority does. */
-export declare function chatApproveMode(store: Store, repo: string | null, approver: string, now: Date, channel: "telegram" | "slack" | "discord" | "teams"): {
-    ok: true;
-    digest: string;
-    limits: ChatApprovalLimits;
-    source: "setting" | "mode";
-} | {
-    ok: false;
-    why: string;
-};
-export type ChatApprovalChange = {
-    approver: string;
-    scope: string;
-    enabled: boolean;
-    limits?: ChatApprovalLimits;
-    via: string;
-};
-/** Save and ledger the setting; all-projects off also disables every saved project row for this owner.
- * The caller has proved who is asking, and for "on" the password. */
-export declare function setChatApproval(store: Store, change: ChatApprovalChange, now: Date): {
-    ok: true;
-    said: string;
-} | {
-    ok: false;
-    message: string;
-};

package/dist/chat-ask.d.ts

@@ -1,32 +0,0 @@
-/**
- * The lead's question to its owner (ask_owner) in Slack, Discord and Teams.
- *
- * The reply's last part carries the question with one button per option and
- * one for "Something else", minted when the part is planned (chat_ask_action).
- * A tapped option is sent as the owner's next message in their own chat with
- * Toolroll, so the lead reads it like anything they typed; "Something else"
- * asks them to type it. Buttons are drawn only in that own chat (any thread of
- * it): in a room the question goes out as text, since a tap there is not the
- * owner's own message. A button works once, only for the person the lead
- * asked, and only while nobody has written in that thread since.
- */
-import type { ChatBinding, ChatEvent, ChatState } from "./chat-delivery-state.js";
-import { type LeadAsk, type Store } from "./store.js";
-/** Whether a task (the execution shown, never only its family's root) moved past a lead's question asked at `since`:
- * its plan was rewritten or approved, or a new attempt of it started. The options answered a state that is gone. A run
- * that merely finishes, or a review beside it, answers nothing, so it never takes the question's buttons. */
-export declare function taskMovedSince(store: Store, taskId: string, since: string): boolean;
-/** The question as text with its options, where no buttons are drawn. */
-export declare function chatAskText(ask: Pick<LeadAsk, "question" | "options">): string;
-/** The live buttons on one part, in the order they were minted: the options, then "Something else". None when the part
- * is not in its owner's own chat with Toolroll (a room), where a tap could not be their message. */
-export declare function chatAskButtons(state: ChatState, part: number, now: Date): Array<{
-    token: string;
-    label: string;
-    words: boolean;
-}>;
-/** A tapped ask button, inside the action's transaction; false when the token isn't one. */
-export declare function applyChatAskTap(options: {
-    store: Store;
-    state: ChatState;
-}, event: ChatEvent, binding: ChatBinding, token: string, now: Date): boolean;

package/dist/chat-card-part.d.ts

@@ -1,11 +0,0 @@
-import type { ChatContent } from "./contracts/chat-content.js";
-import type { ChatCard } from "./contracts/chat-card.js";
-/** The buttons of a card, as a part's links. */
-export declare const cardLinks: (card: ChatCard) => Pick<ChatContent, "link" | "also">;
-export declare const cardContent: (card: ChatCard) => ChatContent;
-/** A card that can't be read goes out as the plain words kept with it. */
-export declare function cardPart(proposal: {
-    kind: string;
-    payload: Record<string, unknown>;
-}): ChatContent;
-export declare function withoutCard(content: ChatContent): ChatContent;

package/dist/chat-card.d.ts

@@ -1,46 +0,0 @@
-/**
- * From a checked spec to a card (docs/plans/toolroll-cards.md): Toolroll fills every data part from its records and every
- * button from its own tables. Nothing the model wrote reaches a card except a Text part, and every app labels that as
- * the lead's note, never as one of Toolroll's records (card-render.ts).
- */
-import type { CardPlan } from "./card-catalog.js";
-import { type CardReader } from "./card-sources.js";
-import { type ChatCard } from "./contracts/chat-card.js";
-/** How a Button becomes a page or a proposal: the lead's own checks, so a card can't reach what show_control can't. */
-export type CardButtons = (props: Record<string, unknown>) => {
-    ok: true;
-    button?: ChatCard["buttons"][number];
-    action?: ChatCard["actions"][number];
-} | {
-    ok: false;
-    message: string;
-};
-/** A plan as a card, read now, or why it can't be one. */
-export declare function buildChatCard(reader: CardReader, plan: CardPlan, repoOf: (id: unknown) => string | null, buttons: CardButtons): {
-    ok: true;
-    card: ChatCard;
-} | {
-    ok: false;
-    message: string;
-};
-/** A card kept on a `control` proposal, as its marker says. */
-export declare const CARD_CONTROL = "card";
-export declare function cardOfProposal(proposal: {
-    kind: string;
-    payload: Record<string, unknown>;
-}): ChatCard | null;
-export declare function isCardProposal(proposal: {
-    kind: string;
-    payload: Record<string, unknown>;
-}): boolean;
-/** The plain version kept beside a card, for when the card itself can't be read. */
-export declare const cardPlainOf: (proposal: {
-    payload: Record<string, unknown>;
-}) => string;
-/** Cards before the proposals they lead to, so each Confirm sits under its card. */
-export declare function cardsFirst<T extends {
-    kind: string;
-    payload: Record<string, unknown>;
-}>(proposals: readonly T[]): T[];
-/** A card goes only where every project behind it is still reachable. */
-export declare const cardWithin: (card: Pick<ChatCard, "repos">, repos: readonly string[]) => boolean;