toolroll 0.9.104 → 0.9.105

package/dist/server/kit.d.ts

@@ -1,452 +0,0 @@
-/**
- * The revamp kit for server pages: the same markup the React kit (src/browser/kit/) renders, as `Html`, so a
- * server page and a React view built from the kit look and behave alike. Rules: src/design/KIT.md. Look:
- * src/design/kit.css (served with console.css). Words and approval rules: src/design/kit.ts.
- *
- * Everything here escapes by construction (html.ts): strings are text, only `Html` is markup. Behaviour (the
- * composer growing, Stop, the keyboard, overlays, switches) comes from the workspace bundle's kit behaviour
- * (src/browser/kit/behavior.ts), which wires any kit markup the workspace places; every control here still works
- * as plain HTML without it.
- */
-import { type AttributeValue, type Html, type HtmlValue, type PostFormOptions } from "../html.js";
-import { type ApprovalFacts, type ApprovalKind, type ChipTone, type KitIcon, type StatusKey, type StepItem, type StepRowMark, type TimingRow } from "../design/kit.js";
-import type { Headline } from "../task-status.js";
-type Attrs = Readonly<Record<string, AttributeValue>>;
-export declare function icon(name: KitIcon, small?: boolean): Html;
-export type BtnVariant = "primary" | "outline" | "ghost" | "danger";
-export type BtnOptions = {
-    variant?: BtnVariant;
-    sm?: boolean;
-    /** Icon-only: give it `label` (read aloud and shown as the tooltip). */
-    iconOnly?: KitIcon;
-    lead?: KitIcon;
-    /** A link styled as a button (navigation is never the primary act). */
-    href?: string;
-    type?: "button" | "submit";
-    /** The screen's one primary, which the phone dock also carries: hidden in the card on a phone. */
-    docked?: boolean;
-    attrs?: Attrs;
-    className?: string;
-};
-export declare function btn(label: string, options?: BtnOptions): Html;
-export declare function chip(word: string, tone?: ChipTone, options?: {
-    dot?: boolean;
-}): Html;
-/** One of the five status words in its tone. */
-export declare const status: (key: StatusKey) => Html;
-/** A task's headline (task-status.ts) as its chip. */
-export declare function headlineChip(headline: Headline): Html;
-/** A count pill: ink only for a Needs-you count; zero is muted. */
-export declare function count(n: number, options?: {
-    ink?: boolean;
-}): Html;
-export type TabItem = {
-    key: string;
-    label: string;
-    href: string;
-    count?: Html;
-};
-/** Sections of one object as addresses: a <nav> of links, the current one aria-current="page". */
-export declare function linkTabs(label: string, current: string, items: readonly TabItem[]): Html;
-/** Filters or views of a list as addresses: the segmented track. */
-export declare function segLinks(label: string, current: string, items: readonly TabItem[]): Html;
-/** Filters or views as addresses with icons (List / Board): each item an icon, its label read aloud. */
-export declare function iconSegLinks(label: string, current: string, items: ReadonlyArray<{
-    key: string;
-    label: string;
-    href: string;
-    icon: KitIcon;
-}>): Html;
-/** A list's text filter (the workspace narrows the rows on the page as it is typed; without it, a GET form). */
-export declare function filterInput(options: {
-    label: string;
-    name?: string;
-    value?: string;
-    placeholder?: string;
-}): Html;
-/** A field: label, control, one hint line, and the error slot tied to the control (aria-describedby). */
-export declare function field(options: {
-    id: string;
-    label: string;
-    control: Html;
-    hint?: string;
-    error?: string | null;
-}): Html;
-/** A text input; `error` marks it invalid and points it at its error line. */
-export declare function input(options: {
-    id: string;
-    name: string;
-    value?: string;
-    type?: "text" | "number" | "url" | "email" | "search" | "password" | "time";
-    error?: boolean;
-    hint?: boolean;
-    attrs?: Attrs;
-}): Html;
-export declare function textarea(options: {
-    id: string;
-    name: string;
-    value?: string;
-    rows?: number;
-    error?: boolean;
-    attrs?: Attrs;
-}): Html;
-/** A native select in the field family, with the chevron: 36px, `sm` 28px in a toolbar, 44px and 16px text on a phone.
- * `chip` draws it as a composer's filled pill (a project inside the message box): still a native select, so it works
- * without script. */
-export declare function select(options: {
-    id?: string;
-    name?: string;
-    label?: string;
-    items: ReadonlyArray<readonly [value: string, label: string] | string>;
-    current?: string;
-    sm?: boolean;
-    wide?: boolean;
-    chip?: boolean;
-    attrs?: Attrs;
-}): Html;
-/** An on/off setting in a form: a checkbox with role=switch and a visible label (posts `name=on` when on). */
-export declare function switchInput(options: {
-    id: string;
-    name: string;
-    label: string;
-    on: boolean;
-    attrs?: Attrs;
-}): Html;
-/** An on/off choice inside a composer, drawn as a filled pill chip whose mark fills when on: a checkbox with
- * role=switch (posts `name=value` when on), so it works without script. Its longer words go under the box (`note`). */
-export declare function toggleChip(options: {
-    id: string;
-    name: string;
-    label: string;
-    on: boolean;
-    attrs?: Attrs;
-}): Html;
-/** Two columns: label and one muted line | the control. `inline` keeps the control beside the label on a phone. */
-export declare function formRow(label: string, hint: string | null, control: Html, variant?: "" | "inline" | "top" | "wide"): Html;
-/** Radio cards: one choice from a few, each with a bold label and one muted line. */
-export declare function radios(options: {
-    name: string;
-    legend: string;
-    current: string;
-    items: ReadonlyArray<{
-        value: string;
-        label: string;
-        text?: string;
-        tag?: Html;
-    }>;
-}): Html;
-export declare const acts: (...buttons: HtmlValue[]) => Html;
-export declare function facts(rows: ReadonlyArray<readonly [key: string, value: HtmlValue]>): Html;
-export declare const note: (text: HtmlValue) => Html;
-/** A refusal or problem, where it happened (role=alert): what went wrong and what didn't change. */
-export declare const notice: (text: HtmlValue) => Html;
-/** One neutral system line (a builder offline, an update): not a failure, never the needs-you mark. */
-export declare const infoLine: (text: HtmlValue) => Html;
-export declare function empty(options: {
-    title: string;
-    text?: string;
-    action?: Html;
-}): Html;
-/** A disclosure for secondary detail. */
-export declare const disclose: (summary: string, body: HtmlValue, open?: boolean) => Html;
-/** A group heading with its count; `right` puts one quiet tool at its end. */
-export declare const group: (label: string, n?: Html, right?: Html) => Html;
-/** A list row: chip · title (the whole row is the link) · one muted line · meta · one action, always in one column. */
-export declare function row(options: {
-    href?: string;
-    chip: Html;
-    title: string;
-    desc?: HtmlValue;
-    meta?: HtmlValue;
-    action?: Html;
-    wait?: boolean;
-    message?: Html;
-    attrs?: Attrs;
-}): Html;
-/** The phone header: back (or nothing), the title, one trailing action. Hidden at a desk. */
-export declare function phoneHeader(title: string, options?: {
-    back?: string;
-    trailing?: Html;
-}): Html;
-/** A list page's header: the phone header and the desk top bar (title · muted context · spacer · tools). */
-export declare function pageHeader(title: string, options?: {
-    ctx?: HtmlValue;
-    right?: Html;
-    back?: string;
-    phoneTitle?: string;
-    trailing?: Html;
-}): Html;
-/** A reading page's header: a back link, the one h1, a meta line. `same` when the phone header already shows the
- * title: the h1 stays for assistive tech and is drawn once. */
-export declare function docHeader(options: {
-    title: string;
-    back?: readonly [href: string, label: string];
-    meta?: HtmlValue;
-    right?: Html;
-    same?: boolean;
-}): Html;
-export declare const doc: (...parts: HtmlValue[]) => Html;
-/** The four fixed slots: status (chip + heading) · supporting text · actions · terms, plus the error slot. The same
- * slots in every state (waiting, approved, automatic, refused), so nothing moves. `body`: the choice the act takes
- * (radio cards, a note), between the text and the actions. */
-export declare function slots(options: {
-    wait?: boolean;
-    status: Html;
-    text: HtmlValue;
-    body?: HtmlValue;
-    acts: HtmlValue;
-    terms: HtmlValue;
-    err?: HtmlValue;
-    attrs?: Attrs;
-}): Html;
-/** This request's approval facts: Passwordless as the request sees it, plus what the page read for this act. */
-export declare function approvalFactsNow(read?: Omit<ApprovalFacts, "passwordless">): ApprovalFacts;
-/**
- * The control that approves one act, inside its slots: a POST form with the act's button and, only when the rules
- * say so, the password field (name `token`, as every ceremony reads it). Automatic approval renders nothing to
- * press. The page decides only what it shows: the server proves the person, the freshness and the scope again
- * when the form arrives.
- */
-export declare function approveForm(options: {
-    action: string;
-    kind: ApprovalKind;
-    facts: ApprovalFacts;
-    label: string;
-    /** The screen's one primary (ink); otherwise outline. */
-    primary?: boolean;
-    docked?: boolean;
-    /** Hidden fields, return path, project revision, extra attributes. Never `signedOut`: an approval always carries the
-     * request's CSRF field. Extra classes are added to `k-approve`, never instead of it. */
-    form?: Omit<PostFormOptions, "signedOut">;
-    /** Extra controls before the button (a note field, a confirm checkbox). */
-    before?: Html;
-}): Html;
-/** The terms line for an act, from the same rules. */
-export declare const approvalTerms: (kind: ApprovalKind, facts: ApprovalFacts) => string;
-/** Waits that aren't tasks, on their own page (a spend limit, a failed backup): one ink outline, a count, items
- * split by hairlines, each with its one action. They never join the global Needs-you count. */
-export declare function needsPanel(items: ReadonlyArray<{
-    title: string;
-    text?: string;
-    action?: Html;
-}>, label?: string): Html;
-/** A run's steps on one elapsed-time axis (Release, a flow's run, a pull request's checks). */
-export declare function timing(options: {
-    label?: string;
-    chip?: Html;
-    rows: readonly TimingRow[];
-    scale?: number;
-    foot?: HtmlValue;
-    head?: string;
-}): Html;
-/** A few named steps on one line, filled up to where the work is. */
-export declare function steps(items: readonly StepItem[], label?: string): Html;
-/** The board's columns; on a phone one at a time (`on`). */
-export declare const board: (label: string, ...columns: HtmlValue[]) => Html;
-export declare function boardCol(options: {
-    label: string;
-    count?: Html;
-    needs?: boolean;
-    on?: boolean;
-    empty: string;
-    cards: readonly Html[];
-}): Html;
-export declare const card: (options: {
-    href: string;
-    title: string;
-    meta: HtmlValue;
-}) => Html;
-/** The not-found page, inside the shell: what was asked for and two ways on. */
-export declare function notFound(path: string, options?: {
-    title?: string;
-    text?: string;
-}): Html;
-/** The Settings frame: Overview and the eight groups, a desk breadcrumb, a phone back header, one column. */
-export declare function settingsShell(options: {
-    group: string;
-    title: string;
-    lead?: string;
-    body: HtmlValue;
-    sub?: boolean;
-    back?: string;
-    flags?: Readonly<Record<string, boolean>>;
-}): Html;
-/** The round send, an arrow up; with `stop` it carries its Stop twin (the composer's .working class swaps them).
- * `gate` (a message box) marks it aria-disabled while the box is empty. */
-export declare function sendButton(options?: {
-    label?: string;
-    name?: string;
-    gate?: boolean;
-    empty?: boolean;
-    stop?: {
-        label?: string;
-        attrs?: Attrs;
-    };
-    attrs?: Attrs;
-}): Html;
-/**
- * The message box: one filled rounded object, the textarea grows from `rows` to `maxRows` lines then scrolls,
- * one bottom row inside (+ menu, the project as a filled pill chip, toggle chips, the round send); its note and its
- * refusal sit under the box (all inside `.k-composer-field`). Textarea
- * `<id>-text` (named `name`), refusal slot `<id>-err`, chosen project a hidden input `<id>-project` (named
- * `projectName`). A refused send keeps the words in the box with the reason in the error slot.
- */
-export declare function composer(options: {
-    id: string;
-    name: string;
-    label: string;
-    placeholder?: string;
-    value?: string;
-    rows?: number;
-    maxRows?: number;
-    plus?: boolean;
-    project?: {
-        current: string;
-        items: readonly string[];
-        name?: string;
-        sub?: string;
-    };
-    before?: Html;
-    send: Html;
-    note?: HtmlValue;
-    error?: string | null;
-    disabled?: boolean;
-    line?: boolean;
-    working?: boolean;
-    /** Extra attributes for the textarea (maxlength, required, autofocus). */
-    textAttrs?: Attrs;
-}): Html;
-export type OverlayKind = "popover" | "drawer" | "sheet" | "menu";
-/** A floating panel, hidden until its trigger (`overlayTrigger`) opens it: role=dialog, a labelled Close, Escape
- * and the scrim close it, Tab stays inside, focus returns to the trigger. A popover and a menu become a bottom
- * sheet on a phone. */
-export declare function overlay(options: {
-    id: string;
-    kind: OverlayKind;
-    title: string;
-    sub?: string;
-    body: HtmlValue;
-}): Html;
-/** The button that opens an overlay. */
-export declare function overlayTrigger(label: string, overlayId: string, options?: Omit<BtnOptions, "href" | "type">): Html;
-/** The phone dock: this screen's one primary (the same act the card hides on a phone). */
-export declare function dock(primary: Html | null): Html;
-/** Several kit parts joined. */
-export declare const parts: (...values: HtmlValue[]) => Html;
-/**
- * A page outside the shell (sign in, the first account, an invite, signed out, an error): the brand, one narrow
- * column with the one h1, then an optional foot line under a hairline. `brand` is the product mark (chrome.ts
- * BRAND_HTML). These pages carry no script: everything on them works as plain HTML.
- */
-export declare function outPage(options: {
-    brand: Html;
-    brandHref?: string;
-    title: string;
-    sub?: HtmlValue;
-    note?: HtmlValue;
-    body?: HtmlValue;
-    foot?: HtmlValue;
-}): Html;
-/** A form field outside the shell: label, input, one hint line, and its error line (the field is aria-invalid, described
- * by both and focused when the error is about it). The error is a server's refusal; nothing here validates. */
-export declare function outField(options: {
-    id: string;
-    label: string;
-    name: string;
-    type?: "text" | "password";
-    value?: string;
-    hint?: string;
-    error?: string | null;
-    attrs?: Attrs;
-}): Html;
-/** One step row: its marker, label, one sentence, a time (`at` ISO, `when` the words for it), and its body. `toggle`: a
- * finished row's head is a disclosure button (aria-expanded) for its body; `open` shows the body. */
-export type StepRowItem = {
-    key: string;
-    label: string;
-    mark: StepRowMark;
-    sentence: HtmlValue;
-    needsYou?: boolean;
-    current?: boolean;
-    at?: string | null;
-    when?: string;
-    body?: HtmlValue;
-    toggle?: boolean;
-    open?: boolean;
-};
-/** The steps of one object as the page itself (a task: Plan · Approval · Build · Checks · Ready): an ordered list, a
- * marker on a rail, the label, one sentence and a time per row, and the row's body under it. The current row is
- * `aria-current="step"`. Same markup as `KStepRows`. */
-export declare function stepRows(items: readonly StepRowItem[], label?: string): Html;
-/** The work's frame (KIT.md "The work"): a header (the title, who is working with a blue dot while it runs, Close), the
- * body that scrolls, and the message box at the foot. The records themselves are followed live by the workspace
- * (`KWork` and `useConversation`); a page without script shows what `body` holds. Same markup as `KWork`. */
-export declare function work(options: {
-    id: string;
-    title: string;
-    who?: HtmlValue;
-    live?: boolean;
-    close?: string | null;
-    hidden?: boolean;
-    body?: HtmlValue;
-    foot?: HtmlValue;
-    attrs?: Attrs;
-}): Html;
-export type CheckStep = {
-    key: string;
-    title: string;
-    text: HtmlValue;
-    state: "done" | "open" | "checking";
-    action?: Html | null;
-};
-/** A short list of steps: a mark, the step and one line, its one action. Done steps read muted with a check; a step
- * being checked shows a static ring (running state never animates). The state is also said in words. */
-export declare function checklist(steps: readonly CheckStep[], label?: string): Html;
-/** Ideas that draft words into a composer: each is a link that opens the page with the words in the box (no script),
- * and with the kit behaviour it adds them to the box in place (`data-k-draft`, `data-k-into` = the composer id). */
-export declare function ideas(options: {
-    label: HtmlValue;
-    into: string;
-    items: ReadonlyArray<{
-        label: string;
-        draft: string;
-        href: string;
-    }>;
-}): Html;
-/** A settings section: its heading (with an optional muted state after it), one muted lead line, then its rows.
- * No nested wells. `id` is also the anchor other pages link to. */
-export declare function settingsSection(options: {
-    id: string;
-    title: string;
-    state?: HtmlValue;
-    lead?: HtmlValue;
-    right?: Html;
-    body: HtmlValue;
-}): Html;
-/** One row that opens a settings page: icon, title (with "1 item needs you" when something waits), one status line,
- * anything on the right, a chevron. The whole row is the link. */
-export declare function settingsLink(options: {
-    href: string;
-    title: string;
-    status?: HtmlValue;
-    icon?: KitIcon;
-    needs?: number;
-    right?: Html;
-}): Html;
-/** A list of settings links under a section heading ("In this group"), or the overview's unlabelled list. */
-export declare function settingsLinks(title: string | null, links: readonly Html[], options?: {
-    label?: string;
-}): Html;
-/** A record row (a session, a token, a person, a device, a provider): title and one muted line · when · one action,
- * and anything opened under it (a form, a refusal). */
-export declare function settingsRecord(options: {
-    title: HtmlValue;
-    sub?: HtmlValue;
-    when?: HtmlValue;
-    action?: HtmlValue;
-    more?: HtmlValue;
-    attrs?: Attrs;
-}): Html;
-/** A command or path to copy by hand: monospace, selectable. */
-export declare const codeLine: (text: string) => Html;
-export {};

package/dist/server/last-checks.d.ts

@@ -1,17 +0,0 @@
-/**
- * The last answer of each check a page shows (docs/plans/get-side-effects.md). A page reads `known`; the background
- * checks and a person's Check now (a POST) call `run`. One per console, held in memory: a restart asks again.
- */
-export type LastCheck<T> = {
-    at: number;
-    value: T;
-};
-export declare class LastChecks {
-    private readonly answers;
-    private readonly running;
-    known<T>(key: string): LastCheck<T> | null;
-    /** Whether the last answer is older than `everyMs` (or missing). */
-    due(key: string, everyMs: number, now?: number): boolean;
-    /** Run the check (one at a time per key) and keep its answer. */
-    run<T>(key: string, check: () => Promise<T>): Promise<T>;
-}

package/dist/server/live.d.ts

@@ -1,74 +0,0 @@
-/**
- * GET /live: one stream per page, joined to every room the page shows.
- *
- *   room=workspace              the reader's workspace may have changed (any meaningful write, or a lapse)
- *   room=task:<id>              the task family changed; who else has it open
- *   room=flow:<id>?card=&editing=  the flow changed; who else is on it, and on which card
- *   room=chat[?task=|?project=] the reader's own lead reply, as it runs (the only room that carries content)
- *   room=team[?conversation=]   the team conversation's cursor moved
- *   room=agent:<run>            one agent on the Agents board changed; while open, this person watches it (no pings)
- *   room=summary                the reader's project states (the sidebar): each change carries the snapshot; never watching or seeing
- *
- * Every room is validated before anything is looked up, and admitted with
- * the same checks and answers as the page it belongs to, before the stream
- * opens; each is re-proved on every signal and its safety-net check, and a
- * viewer who no longer passes hears `gone`. Events name their room. A page
- * that falls behind gets one `reload` and the stream ends, so its
- * EventSource reconnects (live-bus.ts).
- */
-import type { IncomingMessage } from "node:http";
-import { type LiveBus } from "../live-bus.js";
-import type { WorkspaceRevision } from "../workspace-revision.js";
-import type { ServerRuntime } from "./runtime.js";
-import type { Who } from "./session.js";
-/** A page asks for a few rooms at once: its workspace, what it shows, its conversation. */
-export declare const LIVE_ROOMS_PER_PAGE = 6;
-export type LiveRoom = {
-    kind: "workspace";
-} | {
-    kind: "summary";
-} | {
-    kind: "task";
-    task: string;
-} | {
-    kind: "flow";
-    flow: number;
-    card: number | null;
-    editing: boolean;
-} | {
-    kind: "chat";
-    task: string | null;
-    project: string | null;
-} | {
-    kind: "team";
-    conversation: string | null;
-} | {
-    kind: "agent";
-    run: number;
-}
-/** The Agents view's Live grid (agents-live-room.ts): per viewer, watching only. */
- | {
-    kind: "agents-live";
-};
-/** A room's name, read strictly: anything else is not a room. */
-export declare function parseLiveRoom(name: string): LiveRoom | null;
-/** The same session, still signed in, from the cookie and the account (never this request's context): a live room's and
- * a live terminal's re-proof. Null when it was signed out, ended elsewhere, revoked, rotated or re-roled. */
-export declare function rereadBrowser(runtime: Pick<ServerRuntime, "identify" | "sessions" | "store">, request: IncomingMessage, who: Who & {
-    via: "cookie";
-}): (Who & {
-    via: "cookie";
-}) | null;
-export declare function createLiveHandlers(runtime: ServerRuntime, live: {
-    bus: LiveBus;
-    workspaceRevision: WorkspaceRevision;
-    chatProjectOf: (projects: string[]) => string | null | undefined;
-    /** One account's sidebar snapshot for one scope (serve.ts projectSummaryFor); null: gone, or the scope moved. */
-    projectSummaryFor: (account: string, scope: string) => string | null;
-    /** What one account may see now (serve.ts projectScopeFor); null: no such account. */
-    projectScopeFor: (account: string) => string | null;
-}): {
-    registrations: import("./handler-registry.js").Registration[];
-    turnStarted: (thread: number) => void;
-    close(): void;
-};

package/dist/server/merge-ready-view.d.ts

@@ -1,10 +0,0 @@
-import type { AssignmentSnapshot } from "../assignment.js";
-import type { MergeReadyView } from "../browser-workspace.js";
-import type { Store } from "../store.js";
-import type { Who } from "./session.js";
-/** The panel for a task page, or null when there is no result to merge yet. */
-export declare function mergeReadyViewOf(store: Store, taskId: string, assignment: AssignmentSnapshot | null | undefined, who: Who, runChecks: {
-    action: string;
-    level: "quick" | "full";
-    returnTo: string;
-} | null, returnTo: string): MergeReadyView | null;

package/dist/server/mutation-key.d.ts

@@ -1,70 +0,0 @@
-import type { IncomingMessage, ServerResponse } from "node:http";
-import type { Session, Who } from "./session.js";
-/** The request header a fetch carries the key in. */
-export declare const KEY_HEADER = "x-toolroll-key";
-/** The form field a server-rendered form carries it in (not `key`: forms already use that for idempotency and API keys). */
-export declare const KEY_FIELD = "toolroll-key";
-/** A terminal socket offers `toolroll` (the protocol the server selects) and `toolroll.key.<key>` (never echoed back). */
-export declare const KEY_PROTOCOL = "toolroll";
-export declare const KEY_PROTOCOL_PREFIX = "toolroll.key.";
-/** Where the browser keeps it: `{ epoch, key }` in the console origin's localStorage. */
-export declare const KEY_STORAGE = "toolroll.key";
-/** How a person gets a fresh key: their password again (a full session), or the terminal (a local owner). */
-export type Reconnect = {
-    kind: "password";
-    href: string;
-} | {
-    kind: "command";
-    command: string;
-};
-export type KeyRefusal = {
-    status: 403 | 409;
-    message: string;
-    reconnect: Reconnect;
-};
-export declare const RESTARTED = "Toolroll restarted \u2014 reconnect to make changes.";
-export declare const RESTARTED_LOCAL = "Toolroll restarted \u2014 run `toolroll open` to reconnect.";
-export declare const NOT_CONNECTED = "This tab isn't connected to Toolroll \u2014 reconnect to make changes.";
-export declare const NOT_CONNECTED_LOCAL = "This tab isn't connected to Toolroll \u2014 run `toolroll open` to reconnect.";
-/** The page a request reads, without the workspace read's own parameters: where a reconnect comes back to. */
-export declare function pagePathOf(url: URL): string;
-export declare const keyHashOf: (key: string) => string;
-/** The one key a request presents (header, form field or socket protocol), or null for none, a malformed one, or two
- * different ones: two keys in one request is a smuggling attempt, never a preference. */
-export declare function presentedKey(request: IncomingMessage, body: {
-    getAll(name: string): string[];
-} | null): string | null;
-/** Constant-time: the presented key's hash against the session's. */
-export declare function keyMatches(presented: string, hash: string | null): boolean;
-export type BrowserKeys = {
-    /** Whether mutations need the key now (a protected loopback install, with the key turned on for this console). */
-    required(): boolean;
-    /** The console's one browser origin (http://127.0.0.1:<port>) while required, else null. */
-    canonicalHost(): string | null;
-    /** The one mutation check: null to proceed, else the refusal (with how to reconnect). Bearer callers pass. */
-    check(who: Who, request: IncomingMessage, body: {
-        getAll(name: string): string[];
-    } | null): KeyRefusal | null;
-    /** A browser session whose key is from an earlier console start (or none at all) while the key is required. */
-    stale(who: Who, back?: string): Reconnect | null;
-    /** Gives a session being made (or reconnected) a fresh key: its hash and this start's epoch go on the session, the key
-     * comes back to deliver once. Null while not required, or off the canonical origin (that origin's storage would hold it). */
-    issue(session: Pick<Session, "keyEpoch" | "keyHash">, request: IncomingMessage): string | null;
-    /** The no-store page that puts the key in this origin's storage and moves on to `to` (a same-site path). */
-    deliver(response: ServerResponse, key: string, to: string, cookies?: readonly string[]): void;
-};
-export declare function createBrowserKeys(deps: {
-    /** The console turned the key on (a real console start; tests and the demo leave it off unless they ask). */
-    enabled: boolean;
-    epoch: string;
-    /** On a protected loopback install (bound to loopback only, no --allow-host, no public URL, no tailnet names), read
-     * per request: the console's one browser host (`127.0.0.1:<port>`, or `[::1]:<port>` for an IPv6-only bind). Else null. */
-    protectedHost: () => string | null;
-}): BrowserKeys;
-/**
- * Every page that can post, while the key is required: fills the key into each same-origin POST form's data (the
- * `formdata` event fires for a native submit, requestSubmit(), submit() and `new FormData(form)` alike) and offers
- * `window.soKeyHeaders(headers)` to the page's own fetches. It reads nothing on the page and sends the key nowhere but
- * this origin. Without a stored key it does nothing, and the server answers "reconnect".
- */
-export declare const KEY_FILL_SCRIPT: string;

package/dist/server/pages-assets.d.ts

@@ -1,11 +0,0 @@
-/**
- * The pages domain's install assets (moved from serve.ts unchanged): the web app manifest, icons, service worker and
- * typefaces, declared in the route table's edge stage and answered before authentication.
- */
-import type { ServerResponse } from "node:http";
-export declare const PWA_WORKER = "// Toolroll \u2014 push only; deliberately NO fetch handler (no offline cache of an authenticated console).\n// Every shape an older worker took, kept for good, then Home, Tasks' Ready and Board views and a task by its number.\nconst SHAPES = [/^\\/next$/, /^\\/review$/, /^\\/system$/, /^\\/routines$/, /^\\/routines\\/[0-9]+$/, /^\\/d\\/[0-9]+$/, /^\\/r\\/[0-9]+$/, /^\\/approve\\/[0-9]+$/,\n  /^\\/$/, /^\\/tasks\\?view=ready$/, /^\\/tasks\\?view=board$/, /^\\/n\\/[1-9][0-9]{0,14}$/];\nself.addEventListener(\"push\", function (event) {\n  var data = {};\n  try { data = event.data ? event.data.json() : {}; } catch (e) {}\n  var body = typeof data.body === \"string\" ? data.body : \"the console needs you\";\n  var tag = typeof data.tag === \"string\" ? data.tag : \"toolroll\";\n  var url = typeof data.url === \"string\" && SHAPES.some(function (s) { return s.test(data.url); }) ? data.url : \"/\";\n  if (typeof data.waiting === \"number\" && data.waiting >= 0 && self.registration.setAppBadge) {\n    // A count, never content. Honest no-op where unsupported.\n    event.waitUntil(self.registration.setAppBadge(Math.floor(data.waiting)).catch(function () {}));\n  }\n  event.waitUntil(self.registration.showNotification(\"Toolroll\", { body: body, tag: tag, data: { url: url }, actions: [{ action: \"open\", title: \"Open\" }] }));\n});\nself.addEventListener(\"message\", function (event) {\n  // The page recomputes on load/focus and is authoritative over any stale\n  // push: {badge: N} sets, {badge: 0} clears.\n  var badge = event.data && typeof event.data.badge === \"number\" ? event.data.badge : null;\n  if (badge === null || !self.registration.setAppBadge) return;\n  if (badge <= 0 && self.registration.clearAppBadge) { self.registration.clearAppBadge().catch(function () {}); return; }\n  self.registration.setAppBadge(Math.floor(badge)).catch(function () {});\n});\n// A tap on the ping and its one \"Open\" action land in the same place.\nself.addEventListener(\"notificationclick\", function (event) {\n  event.notification.close();\n  if (self.registration.clearAppBadge) self.registration.clearAppBadge().catch(function () {});\n  var url = event.notification.data && event.notification.data.url;\n  var target = new URL(SHAPES.some(function (s) { return s.test(url); }) ? url : \"/\", self.location.origin).href;\n  event.waitUntil(clients.matchAll({ type: \"window\" }).then(function (open) {\n    for (var i = 0; i < open.length; i++) { if (open[i].url === target && open[i].focus) return open[i].focus(); }\n    return clients.openWindow(target);\n  }));\n});\n";
-/**
- * Answers one install asset or typeface (GET only; the caller checks the method), with nosniff and its own
- * conservative caching/CSP. False for any other path: unknown names fall through to the router's refusal.
- */
-export declare function serveInstallAsset(response: ServerResponse, pathname: string, respond: (response: ServerResponse, status: number, type: string, body: string) => void): boolean;

package/dist/server/pages.d.ts

@@ -1,8 +0,0 @@
-import { type ServerResponse } from "node:http";
-import type { ServerRuntime } from './runtime.js';
-import { type ProblemAt } from "./render-projects.js";
-import { type Who } from "./session.js";
-export declare function createPagesHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-    projectsScreen: (response: ServerResponse, who: Who, problem: string | null, status: number, returnTo?: string, problemAt?: ProblemAt) => Promise<void>;
-};

package/dist/server/people-tokens.d.ts

@@ -1,18 +0,0 @@
-import type { ServerRuntime } from './runtime.js';
-import { type IncomingMessage, type ServerResponse } from "node:http";
-import { type FormView } from "../contracts/console-api.js";
-/** When the provider checked the person, in ms, if its auth_time is a check made for this visit: present, no earlier
- * than the second the visit began, and not in the future beyond the skew. Null otherwise. */
-export declare function sameVisitCheck(authTime: number | null, startedAt: number, now: number): number | null;
-export declare function createPeopleHandlers(runtime: ServerRuntime): {
-    registrations: import("./handler-registry.js").Registration[];
-    takeJoinAttempt: (source: string) => boolean;
-    ssoCallback: (request: IncomingMessage, response: ServerResponse, url: URL) => Promise<void>;
-    readAccessForm: (body: FormView<"access" | "projects">) => {
-        ok: true;
-        projects: string[] | null;
-    } | {
-        ok: false;
-        message: string;
-    };
-};