toolroll 0.9.104 → 0.9.105

package/dist/server/chrome.d.ts

@@ -1,328 +0,0 @@
-import { type BrowserSignIn, type BrowserUpdateNotice, type BrowserWorkspace, type PageWork } from "../browser-workspace.js";
-import { type Crumb } from "../settings-kit.js";
-import { type Decision, type Run } from "../store.js";
-import { type tally } from "../summary.js";
-import { type ServerResponse } from "node:http";
-import { type Html } from "../html.js";
-import { type ProjectPeek } from "./render-pages.js";
-import { type Who } from "./session.js";
-/** The spend line for a 7am reader: whole cents, "runs", the gap still named. */
-export declare function consoleSpend(summary: ReturnType<typeof tally<Run & {
-    taskId: string;
-}>>): string;
-/** ISO to the minute — "2026-08-12 17:56" — for anywhere a person reads a time. */
-export declare function when(iso: string | null): string;
-/** The same minute as a `<time>`: the full stamp on a desk, "16:39" / "Yesterday 16:39" / "Sep 28" on a phone. */
-export declare function whenTime(iso: string | null): Html;
-/** Overdue is derived at render — display never writes. */
-export declare function isOverdue(decision: Decision, now: Date): boolean;
-/**
- * A refusal that stays inside the console: same shell, a problem banner, and
- * a way back — the error path is the one place a console must not stop
- * being a console. Bearer callers still get plain text; they parse, not read.
- */
-export declare function refuse(response: ServerResponse, who: Who | null, status: number, message: string, backHref?: string, 
-/** The one action that fixes it, in place of "Go back" (easy-start C2: Reconnect). */
-act?: {
-    label: string;
-    href: string;
-}): void;
-/** The demo's one-line promise, on every page. */
-export declare const DEMO_BANNER = "Demo: a scripted lead and sample projects. Nothing calls a model, reaches outside or spends. For your own project, run npx toolroll up in its folder.";
-/** The demo notice on a phone: one line. */
-export declare const DEMO_BANNER_SHORT = "Demo: sample projects. Nothing calls a model or spends.";
-/**
- * The Operations Ledger: the design system Alex approved in Figma and the
- * design/ shadcn package, carried as pure CSS on server-rendered HTML.
- * Deliberately not the React library: the console ships zero dependencies
- * and zero page JavaScript under a CSP that forbids scripts, and a look is
- * not worth that posture. The same semantic tokens render both system light
- * and dark themes.
- */
-/** The shared palette, light and dark (2026-09-27, "Signal"): neutral grey
- * grounds, ink for every act a person can take, and one chart magenta, the
- * colour nautical charts print lights and cautions in, for what needs a
- * person (the needs-you count, the act that resolves a screen, focus and
- * selection). Status keeps its own four hues; magenta never means "failed".
- * The frame is the ground the sidebar sits on; work sits on paper sheets
- * inset into it. Semantic names only; every surface (server pages, the
- * React workspace, the pre-script fallback) reads these.
- *
- * The palette above, in light, dark and pinned themes, is Signal's generated
- * tokens.css (src/design, generated by youiyoux from the toolroll System, src/design/system); the
- * console's own rules follow in console.css, shipped beside this module.
- * Their bytes are the served sheet's (WORKSPACE_STYLE hashes them). The React
- * workspace's stylesheet loads after this one and never redefines a token, so
- * a person's accent (accentHead) still wins over the generated default. */
-export declare const STYLE: string;
-/** Appearance: a three-way segmented switch, one tap per choice. */
-export declare const THEME_CONTROLS_CSS = ".task-repo select{width:100%;min-height:2.75rem;font-size:1rem}.task-repo-add{margin:.35rem .1rem .5rem}.task-repo-add a{display:inline-flex;align-items:center;min-height:2.25rem}details.result-request-open.result-request-form>summary{border:0;background:transparent;padding:.5rem 0;min-height:2.75rem;font-weight:600;display:list-item;list-style:revert}details.result-request-open.result-request-form>summary::-webkit-details-marker{display:revert}form.js-autosave button[type=submit]{display:none}.provider-row{border-bottom:1px solid var(--so-line);padding:.35rem 0}.provider-row:first-of-type{border-top:1px solid var(--so-line)}.provider-head{display:flex;align-items:center;gap:.75rem;margin:.4rem 0 0}.provider-status{display:inline-flex;align-items:center;gap:.4rem;color:var(--so-muted);font-size:.875rem}.provider-status i{width:.5rem;height:.5rem;border-radius:50%;background:var(--so-muted)}.provider-status--ok i{background:var(--so-success)}.provider-status--warn i{background:var(--so-attention)}.provider-status--off i{background:transparent;border:1.5px solid var(--so-muted)}details.provider-manage>summary{cursor:pointer;color:var(--so-accent-text);font-size:.875rem;min-height:2.5rem;display:list-item;padding-block:.5rem}.card.props .row{display:grid;gap:.1rem;margin:0 0 .75rem}.card.props .row>.meta{display:block;font-size:.75rem}.card.props .row>.meta::first-letter{text-transform:uppercase}.card.props .row>.mono{font-family:var(--font-sans);font-size:.875rem}.card.props .row>.mono .seal{font-family:var(--font-mono);font-size:.8125rem}details.evidence-files{margin:1rem 0}details.evidence-files>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:600}details.evidence-files ul{list-style:none;margin:0;padding:0}details.evidence-files li{display:flex;justify-content:space-between;gap:1rem;padding:.5rem 0;border-bottom:1px solid var(--so-line)}.result-action .result-feedback-link{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;text-decoration:none}@media(hover:hover) and (pointer:fine){.result-action .result-feedback-link:hover{background:var(--so-raised)}}.so-sr-only{position:absolute!important;width:1px!important;height:1px!important;padding:0!important;margin:-1px!important;overflow:hidden!important;clip:rect(0,0,0,0)!important;white-space:nowrap!important;border:0!important}.verdict{margin:.5rem 0 .75rem}.verdict-chips{display:flex;flex-wrap:wrap;gap:.4rem;list-style:none;padding:0;margin:0}.verdict-chip{display:inline-flex;align-items:center;gap:.3rem;min-height:1.75rem;padding:.2rem .65rem;border-radius:999px;font-size:.8125rem;font-weight:600;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}.verdict-chip svg{width:.9rem;height:.9rem}.verdict-chip--success{background:var(--so-success-soft);color:var(--so-success)}.verdict-chip--danger{background:var(--so-danger-soft);color:var(--so-danger)}.verdict-chip--warning{background:var(--so-neutral-soft);color:var(--so-ink)}.verdict-chip--info{background:var(--so-info-soft);color:var(--so-info)}.verdict-by{margin:.4rem 0 0}details.result-request-open{margin:.5rem 0}details.result-request-open>summary{display:inline-flex;align-items:center;min-height:2.5rem;padding:.5rem 1rem;border:1px solid var(--so-input-line);border-radius:.5rem;background:var(--so-paper);color:var(--so-ink);font-weight:600;cursor:pointer;list-style:none}details.result-request-open>summary::-webkit-details-marker{display:none}details.result-request-open[open]>summary{margin-bottom:.75rem}.settings-tiles{display:grid;gap:1.25rem;margin:0 0 2rem}.settings-tiles h2{margin:0 0 .5rem;font-size:.875rem;font-weight:600;color:var(--so-muted)}.settings-tiles section>div{display:grid;grid-template-columns:repeat(auto-fill,minmax(8.5rem,1fr));gap:.5rem}.settings-tiles a>span{display:grid;gap:.1rem;min-width:0}.settings-tiles .provider-status{font-weight:400;font-size:.8125rem}.settings-tiles a{display:flex;align-items:center;gap:.6rem;min-height:3rem;padding:.65rem .8rem;border:1px solid var(--so-line);border-radius:.625rem;background:var(--so-paper);color:var(--so-ink);text-decoration:none;font-weight:550;font-size:.875rem}@media(hover:hover) and (pointer:fine){.settings-tiles a:hover{border-color:var(--so-input-line);background:var(--so-raised)}}.settings-tiles a>svg{width:1.1rem;height:1.1rem;flex-shrink:0;color:var(--so-accent-text)}details.settings-more{margin:.25rem 0 1.25rem}details.settings-more>summary{cursor:pointer;min-height:2.75rem;display:list-item;padding-block:.7rem;font-weight:550}details.settings-more>summary .meta{font-weight:400;margin-left:.35rem}.settings-changed{margin-top:-.25rem}.appearance{margin:0 0 28px}.appearance h2{margin:0 0 10px}.theme-switch{display:inline-flex;flex-wrap:nowrap;max-width:100%;gap:4px;padding:4px;margin:0;border:1px solid var(--so-line);border-radius:10px;background:var(--so-raised)}.theme-switch .theme-choice,.so-native-region .theme-switch .theme-choice{flex:1 1 0;width:auto;white-space:nowrap;min-height:40px;padding:8px 16px;border:0;border-radius:7px;background:transparent;color:var(--so-muted);font:inherit;font-weight:550;box-shadow:none;cursor:pointer}@media(hover:hover) and (pointer:fine){.theme-switch .theme-choice:hover{color:var(--so-ink)}}.theme-switch .theme-choice[aria-pressed=\"true\"]{background:var(--so-paper);color:var(--so-ink);box-shadow:0 1px 2px rgb(0 0 0 / .1)}.appearance .meta{margin:8px 0 0}@media(max-width:600px){.theme-switch .theme-choice{min-height:44px}}.update-notes{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit;max-height:18rem;overflow:auto}";
-/** The page CSS this module writes itself (not the imported modules'), for the stylesheet contract tests. */
-export declare const PAGE_CSS: string;
-/** The Inbox tabs (console v2): a segmented track of real links; the dot marks a tab with something new, on phones only. */
-export declare const INBOX_TABS_CSS: string;
-export declare const WORKSPACE_STYLE: {
-    path: string;
-    serve(request: import("node:http").IncomingMessage, response: ServerResponse): void;
-};
-/** Everything the sidebar needs to draw itself for one request. */
-export type Chrome = {
-    projectScoped?: boolean;
-    active: "code" | "inbox" | "board" | "queue" | "fleet" | "workbench" | "work" | "done" | "activity" | "review" | "system" | "tasks" | "runs" | "caps" | "recipes" | "projects" | "flows" | "settings" | "chat" | "people" | "ledger" | "spend" | "mode" | "menu" | "none";
-    project: string | null;
-    /** The surface's scope for the scope bar — which rows this screen can
-     * show. Derived from the ROUTE, not the session: portfolio and fleet are
-     * all-project even while a project is open; the board says which of its
-     * two modes it is in. Absent = the session default (open project, else
-     * all projects). Display only — switching stays POST + CSRF. */
-    scope?: "all" | "project" | "board-all";
-    /** The saturated inbox count — never a sum of unbounded list reads. */
-    inboxCount: number;
-    /** The project the Tasks count covers: the request's own project view
-     * (the open project, or /work's ?project=), null for every admitted project. */
-    inboxProject?: string | null;
-    /** The Tasks badge's words, naming what it covers: "3 need you in shop". */
-    inboxLabel?: string;
-    inboxSaturated: boolean;
-    settings: boolean;
-    /** This database is a demo sandbox: banner every page, spend fenced. */
-    demo?: boolean;
-    /** The active operating mode's banner (M1): rides every page scoped to
-     * a repo with a live mode — a signed posture is never invisible. */
-    modeBanner?: {
-        words: string;
-        name: string;
-    };
-    /** Providers whose sign-in stopped working: every page says so, once. */
-    signIn?: BrowserSignIn[];
-    /** A newer Toolroll: a quiet notice for an operator until they dismiss this version. */
-    update?: BrowserUpdateNotice;
-    /** An update waiting on something, what, and the action that clears it: every page, for an operator. */
-    updateWaiting?: {
-        words: string;
-    };
-    /** The chat tab renders only where chat could ever be allowed. */
-    chat?: boolean;
-    code?: boolean;
-    /** A rendered list pane makes the page master-detail. */
-    listPane?: Html;
-    /** A compact pulse for the currently open workspace. Null in the
-     * cross-workspace view; absent only when the store could not answer. */
-    projectPeek?: ProjectPeek | null;
-    /** The switcher (board pass): every enrolled project inside the ceiling,
-     * most recently opened first — the one-tap switch on any screen. */
-    projects?: {
-        path: string;
-        name: string;
-    }[];
-    /** The session's csrf token, for the switcher's forms; "" when the
-     * request has no cookie session (bearer), which renders the switcher
-     * inert. */
-    csrf?: string;
-    /** Where a switch made on this screen returns to. */
-    returnTo?: string;
-    /** The settings frame's breadcrumb ("Settings / <page>", settings-kit.ts), set by sendScreen; absent elsewhere. */
-    crumbs?: Crumb[];
-};
-/**
- * A server-rendered region that stays current: when the page's live stream
- * says something changed (GET /live, live-bus.ts), fetch this page's own
- * fragment and swap it in place — no flicker, no scroll reset. Inside the
- * workspace the page's one stream is already open (browser/live.ts) and
- * announces each event on `window`; a page without it opens its own stream
- * to the workspace room. A redirect or auth failure navigates to /login
- * instead of ever inserting the login page into the region (finding 4). The
- * swapped markup is this server's own rendering of the same route — escaped
- * at the sink like every page, fetched same-origin — and the nonce'd CSP
- * refuses to execute anything the region could smuggle. Nothing reads on a timer.
- */
-export declare function regionScript(regionId: string, fragmentName: string, path?: string, options?: {
-    animate?: boolean;
-}): string;
-/**
- * The live transcript's DEDICATED poller (arc 1 §4): a JSON byte-offset
- * protocol, not an HTML fragment — the response is raw sanitized text and
- * the ONLY sink is textContent, so nothing here can become markup. One
- * request in flight, visibility-paused, stops on `final`, and a `replaced`
- * answer — or another file's generation — restarts from zero with a visible
- * line, never a silent re-read.
- */
-export declare function transcriptScript(path?: string, elementId?: string): string;
-/**
- * The chrome layer: the jump palette and elapsed tickers. Pure
- * navigation — no key ever posts, so the palette cannot approve anything;
- * ceremonies stay POST + password + CSRF, untouched. Reads its index from
- * a non-executable JSON script tag rendered by the same authorized page.
- */
-/** The rail's presentation-only state is safe beside a password ceremony:
- * it never reads a field or sends a request, and keeps the chat collapsible
- * from its very first screen while the palette and global keys remain absent. */
-export declare function sidebarScript(): string;
-export declare function chromeScript(): string;
-/**
- * A page described, not yet rendered (arc 4): every chromed HTML route
- * returns one of these and ONE helper (sendScreen, inside the server)
- * owns the nonce, the palette index, the shortcuts overlay, script
- * composition, and the CSP. Renderers stopped calling shell() themselves
- * so those five things cannot drift apart per route.
- */
-export type Screen = {
-    title: string;
-    body: Html;
-    chrome?: Chrome;
-    /** The page's own executable behavior (a region poller, the push
-     * enrollment script). fetches: true when it calls fetch — connect-src
-     * is granted only then. */
-    functional?: {
-        script: string;
-        fetches?: boolean;
-        /** The app's own version of this WHOLE script (task-page-in-app.md §1): where the app can run it, the document
-         * ships no script string and the page may change in place. Added to only through withScript. */
-        app?: readonly PageWork[];
-    };
-    refreshSeconds?: number;
-    /** Render sensitive even when no password field is visible — one-time
-     * secrets and judgment calls the classifier cannot see. */
-    forceSensitive?: boolean;
-    /** The page's sensitivity, said explicitly (cockpit §2, R14): true for a page that asks for a password or shows a
-     * secret even when no password field renders (an SSO step-up, a fresh-password grant); false only where a page is
-     * known safe. Unset: judged from the page as authored. A sensitive page has no sidebar states and no summary room. */
-    sensitive?: boolean;
-    /** Structured conversation; complex guarded forms stay native islands. */
-    workspace?: Partial<Pick<BrowserWorkspace, 'conversation' | 'team' | 'focus' | 'result' | 'notices' | 'view' | 'firstRun' | 'phone' | 'home'>> & {
-        /** Markup the workspace shows in place; it becomes bytes where the page's JSON is written (sendScreen). */
-        catchUpHtml?: Html;
-        controlsHtml?: Html;
-        pageHtml?: Html | null;
-    };
-};
-export declare const ROLE_TITLES: Record<"plan" | "build" | "review" | "repair", string>;
-export declare function screen(title: string, body: Html, options?: Omit<Screen, "title" | "body">): Screen;
-/**
- * The sensitivity classifier (arc 4, findings 3/17): a body showing a
- * password input renders WITHOUT the chrome additions (palette, overlay,
- * global keys) — the page's own functional script still ships. Tolerant
- * of quoting, casing, and whitespace; `data-type="password"` and prose
- * mentioning passwords do not match. This is defense-in-depth over a
- * file whose only HTML producer is its own double-quoted template
- * convention — forceSensitive is the escape hatch for what a regex
- * cannot judge.
- */
-export declare const SENSITIVE_INPUT: RegExp;
-/** The design contract every page carries (impeccable direction, 2026-09-27). */
-export declare const DESIGN_CONTRACT: Html;
-/** The shortcuts overlay: display-only, toggled by the chrome layer,
- * absent from sensitive pages. Navigation help in plain words — no key
- * ever posts. */
-export declare const KBD_HELP: Html;
-export declare function shell(title: string, body: Html, options?: {
-    nav?: boolean;
-    chrome?: Chrome;
-    /** A password ceremony is on this page: the chrome gains no forms, so
-     * the switcher renders inert — the name, and the one /projects link. */
-    sensitive?: boolean;
-    /** Whether the presentation-only desktop rail control has a nonce'd
-     * handler. Sensitive pages may opt in; one-time-secret pages do not. */
-    sidebarToggle?: boolean;
-    refreshSeconds?: number;
-    /** The page's one nonce'd script: region pollers + the chrome layer,
-     * composed by sendScreen. Read-only regions only; one nonce per
-     * response. fallbackRefresh marks a page whose script POLLS — only
-     * those earn the noscript meta-refresh (a chrome-layer-only page with
-     * forms must never re-render what someone was typing). */
-    live?: {
-        nonce: string;
-        script: string;
-        fallbackRefresh?: boolean;
-    };
-}): Html;
-/** ONE way a person is named on any surface (U3): the same chip everywhere. */
-export declare function personChip(name: string): Html;
-/** The brand, as the workspace sidebar shows it. */
-export declare const BRAND_HTML: Html;
-/** A page on its own, in the workspace's look but with no script: the brand, then the page. */
-export declare function focusDocument(title: string, body: Html, live?: {
-    nonce: string;
-    script: string;
-}): Html;
-export declare function chatMoney(microusd: number | null): string;
-export declare function relativeAge(iso: string, now: Date): string;
-/** The project chip every all-scope row wears: null is UNPLACED, said so. */
-export declare function projectChip(repo: string | null | undefined): Html;
-/**
- * Creating work is the product's first verb, so it gets a whole calm page:
- * a title, the goal that becomes the scope draft, and the project it lands
- * in — then straight to the approve card, which is the aha the flow serves.
- */
-/** One queue card. Taken work renders pinned — visible, never draggable. */
-/** The person's pinned theme from their own cookie; null follows the device. */
-export declare function pinnedTheme(cookieHeader: string | undefined): "light" | "dark" | null;
-export declare function themeAttribute(): Html;
-/** A chosen accent (Settings → Appearance) re-pigments the signal tokens only, after the shared stylesheet. */
-export declare function accentHead(): Html;
-/** Drawn, one stroke weight, like the tab bar's icons — never a glyph. */
-export declare const GRIP_ICON: Html;
-export declare const TO_FRONT_ICON: Html;
-/** One stroke weight, from the tab bar's set: the sidebar's primary rows
- * wear an icon each; the foot's list stays text, the way Linear's does. */
-export declare const strokeIcon: (paths: Html | string) => Html;
-/** Where the queue lives now: the board, flipped to dispatch order. */
-export declare const QUEUE_VIEW = "/tasks?view=order";
-export declare const FOLDER_PATHS: Html;
-export declare const CHAT_PATHS: Html;
-export declare const WORK_PATHS: Html;
-export declare const NAV_ICONS: Partial<Record<Chrome["active"], Html>>;
-/** One grouped destination inside an accordion group or the /menu overflow. */
-export type NavRow = {
-    key: Chrome["active"];
-    href: string;
-    label: string;
-    hint: string;
-};
-/**
- * The workspace shell (package 1): three primary rows (chat, work,
- * projects) above two accordion groups. Work tools is where work is
- * arranged, planned, and scheduled — the board, its order view, the
- * flat task list, recipes, the portfolio, and the action
- * ledger. Settings is who and what the fleet runs on — fleet,
- * requirements, people, operating mode, system — plus the agent-defaults
- * page where the console offers it. Both draw from the same two lists on
- * a desk (accordion groups) and on a phone (/menu sections), so the two
- * never disagree, and a project-scoped login sees exactly the rows it
- * saw before: moving a link never widens role or project visibility.
- */
-export declare function workToolRows(scoped?: boolean, _offersChat?: boolean, offersCode?: boolean): NavRow[];
-export declare function settingsRows(scoped?: boolean, offersSettings?: boolean): NavRow[];
-/** Which accordion group opens by default for a given active page. */
-export declare const TOOL_KEYS: Set<"activity" | "board" | "caps" | "chat" | "code" | "done" | "fleet" | "flows" | "inbox" | "ledger" | "menu" | "mode" | "none" | "people" | "projects" | "queue" | "recipes" | "review" | "runs" | "settings" | "spend" | "system" | "tasks" | "work" | "workbench">;
-export declare const SETTINGS_KEYS: Set<"activity" | "board" | "caps" | "chat" | "code" | "done" | "fleet" | "flows" | "inbox" | "ledger" | "menu" | "mode" | "none" | "people" | "projects" | "queue" | "recipes" | "review" | "runs" | "settings" | "spend" | "system" | "tasks" | "work" | "workbench">;
-/** The builds screen's views (reduction pass §1): done, the review queue,
- * and activity are ways of looking at builds, not destinations. */
-export declare function buildsViews(current: "builds" | "done" | "review" | "activity"): Html;
-export declare const CHEVRON_ICON: Html;
-/** The drag grip: a 2rem touch-sized handle that owns its touches
- * (touch-action: none), so a finger on it drags instead of scrolling. */
-export declare const GRIP_HANDLE: Html;
-/** Badges, labels and buttons read in sentence case, whatever word a record stores. */
-export declare const sentenceCase: (word: string) => string;
-/** Only an https github.com pull URL earns an anchor (audit IV-11) — a
- * corrupted row renders as text, never as navigation. */
-export declare function safePrUrl(url: string | null): string | null;
-/** A shortened fingerprint for display — enough to compare by eye; the
- * full value rides in the title attribute and in every form field. */
-export declare function shortDigest(digest: string): Html;
-/** One display line, bounded — turn text is data, never layout. */
-export declare function oneLineOf(text: string, cap: number): string;
-/**
- * The board's clocks tick in the page: each <time data-tick> counts up from
- * its datetime, measured against the server's own now (the board's data-now)
- * so a skewed device clock cannot run them backwards. The server-rendered
- * minutes are the answer without script.
- */
-export declare function boardTickScript(regionId?: string): string;
-/**
- * A page's script with one more added (docs/plans/task-page-in-app.md §1). All or nothing: `app` survives only when
- * every part has it, so a script the app does not cover keeps the whole page a document, and a page never gets half
- * its behaviour from the string and half from the app.
- */
-export declare function withScript(base: Screen["functional"], add: NonNullable<Screen["functional"]>): NonNullable<Screen["functional"]>;

package/dist/server/edge-refusal.d.ts

@@ -1,7 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import { type RouteDeclaration } from './route-table.js';
-/** What a request to the retired /api/sessions transport hears (D7). */
-export declare const SESSIONS_MOVED: string;
-export declare function isEdgeAddress(path: string): boolean;
-/** Preserve each transport's refusal envelope without invoking an undeclared adapter. */
-export declare function refuseEdge(request: IncomingMessage, response: ServerResponse, path: string, declared: RouteDeclaration | null): void;

package/dist/server/flows.d.ts

@@ -1,8 +0,0 @@
-import { type ServerResponse } from "node:http";
-import { galleryTemplateOf, type GalleryAnswers } from "../flow-gallery.js";
-import type { ServerRuntime } from './runtime.js';
-import { type Who } from "./session.js";
-export declare function createFlowsHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-    sendGalleryUse: (response: ServerResponse, who: Who, template: NonNullable<ReturnType<typeof galleryTemplateOf>>, projects: readonly string[], repo: string, given: GalleryAnswers | null, name: string, notice: string | null, said?: string | null) => void;
-};

package/dist/server/guards.d.ts

@@ -1,81 +0,0 @@
-import { type ProjectIdentities } from "../project-identity.js";
-import { type FormFieldOf, type FormView } from "../contracts/console-api.js";
-import type { TaskFamily } from "../store.js";
-import { type IncomingMessage, type ServerResponse } from "node:http";
-import { type Principal } from "../operate-remote.js";
-import { authenticateApprover as checkApproverPassword } from "../scope.js";
-import { SourceBudget } from "../sign-in-guard.js";
-import { type Run, type Store } from "../store.js";
-import type { RouteDeclaration } from './route-table.js';
-import { PersistentSessions, type Session, type Who } from "./session.js";
-/** Shared browser, credential and project guards. Runtime access is lazy to preserve server initialization order. */
-export interface GuardsRuntime {
-    store: Store;
-    liveCeiling: () => {
-        repos: string[];
-        roots: readonly string[];
-        canon?: (path: string) => string | null;
-    };
-    codingProjects: () => string[];
-    /** Project identities read without touching folders (project-identity.ts); absent: the synchronous reads. */
-    identities?: ProjectIdentities;
-    unscopedMode: boolean;
-    managedRepos: () => string[];
-    ceiling: import("../project.js").ProjectCeiling;
-    allowedHost: (host: string | undefined) => boolean;
-    defaultProject: string | null;
-    actionTarget: (url: URL, who: Who, request: IncomingMessage, body?: FormView<FormFieldOf<"ledgerTarget">> | null) => {
-        repo: string | null;
-        taskId: string | null;
-        runId: number | null;
-        action: string;
-    };
-    team: {
-        execute: import("../team-contract.js").TeamExecute;
-        start: () => void;
-        close: () => Promise<void>;
-        pass: () => Promise<void>;
-        cursor: (actor: import("../team-contract.js").TeamActor, conversationId?: string) => number | null;
-        domain: import("../team-leads.js").TeamLeads;
-    };
-    joinSourceOf: (request: IncomingMessage) => string;
-    signInBudget: SourceBudget;
-    passwordAllowed: (name: string) => boolean;
-    sessions: PersistentSessions;
-    /** Easy-start C2: the browser mutation key's one check (server/mutation-key.ts). */
-    browserKeys: Pick<import("./mutation-key.js").BrowserKeys, "check">;
-}
-export declare function createSharedGuards(runtime: GuardsRuntime): {
-    authenticateApprover: (who: Who, token: string, repo?: string | null) => ReturnType<typeof checkApproverPassword>;
-    authenticateCredential: (who: Who, token: string, repo?: string | null) => ReturnType<typeof checkApproverPassword>;
-    authorizeMutation: (request: IncomingMessage, who: Who, body: FormView<FormFieldOf<"mutationGuard">>) => {
-        status: number;
-        message: string;
-        reconnect?: import("./mutation-key.js").Reconnect;
-    } | null;
-    projectOf: (who: Who, request: IncomingMessage) => string | null | undefined;
-    resolveRouteProject: (source: RouteDeclaration['project'], url: URL, who: Who, request: IncomingMessage, body: URLSearchParams | null) => string | null;
-    projectRequestAllowed: (route: RouteDeclaration, source: RouteDeclaration['project'], url: URL, who: Who, request: IncomingMessage, response: ServerResponse, body: URLSearchParams | null) => boolean;
-    identify: (request: IncomingMessage, touch?: boolean, limited?: boolean, refusedToken?: {
-        principal?: Principal;
-        elsewhere?: boolean;
-    }) => Who | null;
-    lookupSession: (candidate: string, touch?: boolean) => Session | null;
-    restricted: () => boolean;
-    visible: (repo: string | null) => boolean;
-    admissionList: () => string[] | null;
-    codingActorAllowed: (actor: {
-        name: string;
-        generation: number;
-    }) => boolean;
-    codingProjectAllowed: (repo: string) => boolean;
-    workAccess: () => {
-        principal: 'operator';
-        repos: string[] | null;
-        includeUnplaced: boolean;
-        viewer: string | null;
-    };
-    familyOf: (taskId: string) => TaskFamily | null;
-    taskRepoOf: (taskRef: number) => string | null;
-    runVisible: (run: Run) => boolean;
-};

package/dist/server/handler-context.d.ts

@@ -1,22 +0,0 @@
-import type { IncomingMessage, ServerResponse } from 'node:http';
-import type { RouteDeclaration } from './route-table.js';
-import { type Who } from "./session.js";
-export interface HandlerContext {
-    url: URL;
-    who: Who;
-    request: IncomingMessage;
-    response: ServerResponse;
-    route: RouteDeclaration;
-    now: Date;
-    project: string | null;
-    chosenProject: string | null;
-    posted: URLSearchParams;
-}
-export interface EdgeContext {
-    route: RouteDeclaration;
-    url: URL;
-    who: Who | null;
-    request: IncomingMessage;
-    response: ServerResponse;
-    method: string;
-}

package/dist/server/handler-registry.d.ts

@@ -1,23 +0,0 @@
-import type { EdgeContext, HandlerContext } from './handler-context.js';
-import { type Domain, type RouteDeclaration } from './route-table.js';
-export type ConsoleHandler = (ctx: HandlerContext) => Promise<void>;
-export type EdgeHandler = (ctx: EdgeContext) => Promise<void>;
-export type Registration = {
-    id: string;
-    domain: Domain;
-    stage: 'console';
-    handle: ConsoleHandler;
-} | {
-    id: string;
-    domain: Domain;
-    stage: 'edge';
-    handle: EdgeHandler;
-};
-/** One domain's handlers by route id: one function per row. */
-export declare function handlersOf(domain: Domain, console: Readonly<Record<string, ConsoleHandler>>, edge?: Readonly<Record<string, EdgeHandler>>): Registration[];
-/** Registrations are independent of policy. Missing, extra, incompatible or shared handlers fail at startup. */
-export declare function assertHandlerRegistry(registrations: readonly Registration[], routes?: readonly RouteDeclaration[]): void;
-export declare function createHandlerRegistry(registrations: readonly Registration[]): {
-    console(route: RouteDeclaration, ctx: HandlerContext): Promise<void>;
-    edge(route: RouteDeclaration, ctx: EdgeContext): Promise<void>;
-};

package/dist/server/home-asks.d.ts

@@ -1,45 +0,0 @@
-import type { FirstRunStep } from "../first-run.js";
-import type { Store } from "../store.js";
-import type { WorkSummaryAccess } from "../work-summary.js";
-/** One row Home lists that isn't a task's own row. `id` is namespaced so it never meets a task's id; `at` (when it
- * started waiting) gives its age, or null for a setup step; `repo` its project. */
-export type HomeAskRow = {
-    id: string;
-    title: string;
-    href: string;
-    repo: string | null;
-    at: string | null;
-    line: string | null;
-    action: {
-        label: string;
-        href: string;
-    };
-};
-export type HomeAsks = {
-    /** A release's line for an approver (its version, or why the sheet can't take a yes now); null when it isn't one. */
-    release: (taskId: string) => string | null;
-    /** Releases whose publication waits for a person, one per family, only where that family isn't already a row. */
-    held: HomeAskRow[];
-    /** Flow cards waiting on this person. */
-    flows: HomeAskRow[];
-    /** First-run steps still to do, keyed by step. */
-    setup: (HomeAskRow & {
-        key: FirstRunStep["key"];
-    })[];
-};
-export declare const NO_HOME_ASKS: HomeAsks;
-/** The release sheet: where a release is read and approved, never Home. */
-export declare const releaseSheetHref: (taskId: string) => string;
-/** A release's line (its version, or the sheet's refusal) and every held publication in view. Approvers only: the sheet
- * mints its approval only for them; anyone else reads a release as an ordinary task row. */
-export declare function releaseAsks(store: Store, now: Date, access: WorkSummaryAccess, project: string | null, approver: boolean): Pick<HomeAsks, "release" | "held">;
-/** Every active card, in a flow of a project this person may see, that waits on them (flows-ui.ts flowCardWaitsOn, the
- * flow page's own rule). Newest wait first. */
-export declare function flowAsks(store: Store, repos: readonly string[], viewer: {
-    name: string;
-    approver: boolean;
-}, project: string | null): HomeAskRow[];
-/** The first-run steps (first-run.ts, with the builder step) still to do, for an approver. A step that is done, or only
- * being checked (no answer yet, so no action), is not a row. Null steps (a restricted console, the demo, after the first
- * success) are none. */
-export declare function setupAsks(steps: readonly FirstRunStep[] | null, approver: boolean): HomeAsks["setup"];

package/dist/server/home.d.ts

@@ -1,65 +0,0 @@
-/**
- * Home ("/", docs/plans/live-pages-and-home.md B1, home-other-asks.md): what needs this person, grouped by what is asked
- * (Approve a release, Approve a plan, Answer a question, Flow decisions, Something went wrong, Review results, Finish
- * setting up, and Needs you for the rest), each group with its exact count; one quiet line for what runs and waits; with nothing waiting, what runs and what finished today. The figures
- * are read from the same work index the Tasks list filters, so a count and the list it opens always agree. Reads
- * only: every act keeps its own route and rules (an agent's question is answered through POST /d/<id>/answer, the
- * same one-click act as its own page).
- */
-import type { BrowserHomeAsk, BrowserHomeView } from "../browser-workspace.js";
-import type { Store } from "../store.js";
-import type { WorkSummaryAccess } from "../work-summary.js";
-import { type HomeAsks } from "./home-asks.js";
-/** How many waiting rows Home lists; each group says how many more open in Tasks. */
-export declare const HOME_NEEDS_SHOWN = 30;
-/** How many rows finished today Home lists; its figure counts them all. */
-export declare const HOME_DONE_SHOWN = 8;
-/** Each group's heading, in the order Home shows them. */
-export declare const HOME_ASK_LABEL: Readonly<Record<BrowserHomeAsk, string>>;
-/** The groups in Home's one order. */
-export declare const HOME_ASK_ORDER: readonly BrowserHomeAsk[];
-export type HomeFacts = {
-    store: Store;
-    now: Date;
-    access: WorkSummaryAccess;
-    evidenceRoot?: string;
-    /** The project in view (already admitted), or null for every project. */
-    project: string | null;
-    /** Every admitted project, for the project filter. */
-    projects: readonly {
-        name: string;
-        path: string;
-    }[];
-    /** Chat is allowed for this person here (the lead's message box). */
-    chat: boolean;
-    /** This person can answer an agent's question (an approver in a browser session). */
-    canAnswer: boolean;
-    /** An approver in a browser session (default: `canAnswer`): a release is then read in Approve a release, never
-     * approved here; for anyone else it stays an ordinary task row. */
-    approver?: boolean;
-    /** What else waits on this person (home-asks.ts), already read through each page's own admission. */
-    asks?: HomeAsks;
-    /** Why this task's plan can't take a yes right now (render-tasks.ts consentDoorOf), or null when it can. */
-    closedDoor: (taskId: string) => {
-        title: string;
-        why: string;
-        road: "scope" | "agents";
-    } | null;
-    /** The lead's last message in this person's main thread, already read through the chat's own access check
-     * (pages.ts leadLastMessage); null when there is none or this person may not read that thread. */
-    leadMessage?: {
-        text: string;
-        at: string;
-    } | null;
-};
-/** "19 tasks need you", "3 tasks and 2 other things need you", "2 things need you": the heading, said once. Tasks
- * are the same total as the rail's count; `others` are the rows that aren't tasks (a held publication, a flow card, a
- * setup step). */
-export declare function homeSentence(needs: number, any: boolean, others?: number): string;
-/** The lead's words as one plain line: no markdown marks, no line breaks, cut to about one line. */
-export declare function leadLineOf(text: string): string;
-/** Midnight today on this computer's clock: "finished today" starts here. */
-export declare function startOfToday(now: Date): Date;
-/** Home's view for one person and scope, from four reads of the work index: what waits on you (with exact per-ask
- * totals), what runs, what waits its turn, and what was completed today (filtered before its limit). */
-export declare function homeView(facts: HomeFacts): BrowserHomeView;