toolroll 0.9.38 → 0.9.39

package/dist/browser-workspace.d.ts

@@ -100,6 +100,10 @@ export type BrowserConversation = {
     resultRunId: number | null;
     /** A project's own thread (v77); absent or null for the lead conversation or a task. */
     project?: string | null;
+    /** The lead thread a change in reachable projects replaced (mate arc ruling 9): shown above a divider, read only. */
+    previous?: {
+        messages: BrowserMessage[];
+    } | null;
 };
 /** A page rebuilt as React components (shadcn/ui). The server still renders
  * its HTML as the no-JavaScript fallback; forms post to the same routes. */
@@ -176,6 +180,8 @@ export type BrowserLimits = {
 export type BrowserSettingsView = {
     kind: 'settings';
     said: string | null;
+    /** Using it from a phone, under Chat apps (approvers only). */
+    phone?: BrowserPhoneCard;
     /** The settings destinations under short headings; a chat app's tile says whether it is connected and gets alerts. */
     groups: BrowserSettingsGroup[];
     theme: 'system' | 'light' | 'dark';

package/dist/serve.js

@@ -744,6 +744,19 @@ export function createDecisionServer(options) {
         provider: () => { const enabled = chatEnablement(); return enabled.ok ? { config: enabled.config, key: enabled.key } : null; },
         ...(options.subscriptionChatRunner ? { subscriptionRunner: options.subscriptionChatRunner } : {}),
     });
+    // Only browser sessions receive HTML cards. The CLI keeps its summary contract.
+    const teamBrowserReply = (reply, csrf) => {
+        const snapshot = reply.snapshot;
+        if (!snapshot?.selected || !snapshot.proposals)
+            return reply;
+        return { ...reply, snapshot: { ...snapshot, proposals: snapshot.proposals.map(summary => {
+                    const proposal = store.getMateProposal(summary.id);
+                    if (!proposal || proposal.thread !== snapshot.selected.threadId)
+                        return summary;
+                    const decision = proposal.kind === 'answer' && typeof proposal.payload['decision'] === 'number' ? store.getDecision(proposal.payload['decision']) : null;
+                    return { ...summary, card: teamProposalCardParts(proposal, snapshot, csrf, decision).card };
+                }) } };
+    };
     const teamEndpoint = (request, response) => handleTeamHttp(request, response, {
         authenticate: request => {
             const who = identify(request, request.method === 'POST');
@@ -773,7 +786,11 @@ export function createDecisionServer(options) {
                 return false;
             return request.headers['x-csrf-token'] === who.session.csrf;
         },
-        execute: team.execute, cursor: team.cursor, streams: teamStreams,
+        execute: async (actor, input) => {
+            const reply = await team.execute(actor, input);
+            const who = identify(request, false);
+            return who?.via === 'cookie' ? teamBrowserReply(reply, who.session.csrf) : reply;
+        }, cursor: team.cursor, streams: teamStreams,
     });
     const sessionEndpoint = createSessionEndpoint({ store, workspace: coding, projects: codingProjects, projectAllowed: repo => rowVisible(liveCeiling(), repo) });
     /** The enumerable admission list for roll-up SQL: repos-only ceilings
@@ -3585,11 +3602,11 @@ export function createDecisionServer(options) {
             if (who.via !== "cookie")
                 return refuse(response, who, 403, "chat is a browser surface — it keeps your drafts in the session");
             if (url.searchParams.get('private') !== '1' && !url.searchParams.has('task') && !url.searchParams.has('result') && !url.searchParams.has('project')) {
-                const reply = await team.execute({ name: who.name, generation: who.session.generation }, {
+                const reply = teamBrowserReply(await team.execute({ name: who.name, generation: who.session.generation }, {
                     operation: url.searchParams.has('conversation') ? 'show' : 'list',
                     args: { ...(url.searchParams.has('conversation') ? { conversationId: url.searchParams.get('conversation') } : {}),
                         ...(url.searchParams.has('lead') ? { leadId: url.searchParams.get('lead') } : {}) },
-                });
+                }), who.session.csrf);
                 if (!reply.ok || !reply.snapshot)
                     return refuse(response, who, 403, reply.message, '/chat?private=1');
                 if (url.searchParams.has('proposal')) {
@@ -3599,11 +3616,7 @@ export function createDecisionServer(options) {
                         return refuse(response, who, 404, 'This proposal is unavailable.', '/chat');
                     const back = '/chat?conversation=' + encodeURIComponent(selected.id);
                     const decision = proposal.kind === 'answer' && typeof proposal.payload['decision'] === 'number' ? store.getDecision(proposal.payload['decision']) : null;
-                    const active = reply.snapshot.messages.some(message => message.status === 'running');
-                    const canAct = reply.snapshot.canSend && reply.snapshot.chatAuthorization?.enabled === true;
-                    let card = mateProposalCard(proposal, who.session.csrf, !canAct || active, decision, back);
-                    if (!canAct)
-                        card = card.replace('Available when the current turn finishes.', reply.snapshot.canSend ? 'Enable chat in this conversation before acting on a proposal.' : 'An authorized contributor can act on this proposal.');
+                    const card = teamProposalCardParts(proposal, reply.snapshot, who.session.csrf, decision).html;
                     return sendScreen(response, 200, screen('Review action', `<p><a href="${escape(back)}">Back to conversation</a></p>` + card, { chrome: chromeFor(null, 'chat', undefined, 'all') }));
                 }
                 if (reply.snapshot.leads.length > 0 || url.searchParams.has('conversation') || url.searchParams.get('team') === '1') {
@@ -4290,7 +4303,7 @@ export function createDecisionServer(options) {
             })(), (() => {
                 const chosen = store.notificationPreference(who.name);
                 return { mode: chosen.mode, digestAt: chosen.digestAt, screenshots: chosen.screenshots, projects: notificationProjects(store, who.name) };
-            })(), telegramTrouble(store, loadBotToken(process.env, options.telegramTokenFile))));
+            })(), telegramTrouble(store, loadBotToken(process.env, options.telegramTokenFile)), who.via === "cookie" ? phoneSetup(who) ?? null : null));
         }
         if (url.pathname === "/push/key") {
             // Session-gated: the key is not secret, but strangers get nothing.
@@ -4464,12 +4477,19 @@ export function createDecisionServer(options) {
         return first !== undefined && String(first["id"]) === rootId;
     }
     /** After the first Ready result, once (onboarding): the phone, by a chat app or the console over Tailscale. */
+    /** Chat's one-line pointer to the phone setup: after the first Ready result, until put away or Telegram is paired. */
     function phoneCard(who, now) {
         if (who.role !== "approver" || store.isDemo() || store.firstSuccessAt(now) === null || store.installationFact(PHONE_CARD_FACT) !== null)
             return undefined;
         const botId = options.telegramTokenFile === undefined ? null : loadBotToken(process.env, options.telegramTokenFile)?.botId ?? null;
         if (botId !== null && store.liveTelegramBindings(botId).length > 0)
             return undefined;
+        return phoneSetup(who);
+    }
+    /** The phone setup itself (Settings → Chat apps): a chat app, or this console over Tailscale. */
+    function phoneSetup(who) {
+        if (who.role !== "approver" || store.isDemo())
+            return undefined;
         const port = servedPort() ?? 4180;
         const address = server.address();
         const bound = typeof address === "object" && address !== null ? address.address : "127.0.0.1";
@@ -4509,7 +4529,11 @@ export function createDecisionServer(options) {
         const ask = last?.role === "assistant" && last.turn !== null && store.getMateTurn(last.turn)?.approver === who.name ? store.mateAskOpen(last.turn, now) : null;
         // Answered questions stay readable above the answer; only their buttons go.
         const asks = new Map(messages.flatMap(one => { const asked = one.role === "assistant" && one.turn !== null ? store.mateAsk(one.turn) : null; return asked === null ? [] : [[asked.turn, asked]]; }));
+        // The thread a ceiling change replaced (ruling 9): read after the open, display only.
+        const replaced = store.replacedLeadThread(opened.thread);
+        const previousProposals = replaced === null ? [] : store.listMateProposals(replaced.id);
         return {
+            previous: replaced === null ? null : { messages: store.listMateMessages(replaced.id, 40), proposals: previousProposals, decisions: decisionsFor(store, previousProposals) },
             messages,
             ask,
             asks,
@@ -15406,6 +15430,8 @@ ${THEME_DARK}
     min-height: min(32rem, 48vh); padding: .25rem;
   }
   .thread .msg { max-width: 48rem; line-height: 1.65; overflow-wrap: anywhere; }
+  .chat-previous-divider { display: flex; align-items: center; gap: .6rem; margin: 1rem 0; color: var(--so-muted); font-size: .8rem; }
+  .chat-previous-divider::before, .chat-previous-divider::after { content: ""; flex: 1; border-top: 1px solid var(--so-line); }
   .thread .msg p { margin: .3rem 0; }
   .thread .msg.op {
     align-self: flex-end; max-width: min(82%, 40rem); padding: .75rem 1rem;
@@ -18311,6 +18337,19 @@ function mateProposalCard(proposal, csrf, inert, decision, returnTo = null) {
 function mateProposalCardParts(proposal, csrf, inert, decision, returnTo = null) {
     return proposalCardParts({ id: proposal.id, kind: proposal.kind, payload: proposal.payload, state: proposal.state, outcome: proposal.outcome, by: { mate: true }, actionBase: "/chat/proposal" }, csrf, inert, decision, returnTo);
 }
+/** Review and inline team cards share the same server-decided controls and reasons. */
+function teamProposalCardParts(proposal, snapshot, csrf, decision) {
+    const canAct = snapshot.canSend && snapshot.chatAuthorization?.enabled === true;
+    const active = snapshot.messages.some(message => message.status === 'running');
+    const back = '/chat?conversation=' + encodeURIComponent(snapshot.selected.id);
+    const parts = mateProposalCardParts(proposal, csrf, !canAct || active, decision, back);
+    if (!canAct && proposal.state === 'pending') {
+        const reason = snapshot.canSend ? 'Enable chat in this conversation before acting on a proposal.' : 'An authorized contributor can act on this proposal.';
+        parts.html = parts.html.replace('Available when the current turn finishes.', reason);
+        parts.card = { ...parts.card, note: reason };
+    }
+    return parts;
+}
 function coordinatorProposalCard(proposal, csrf, now, decision, returnTo = null) {
     return proposalCard({ id: proposal.id, kind: proposal.kind, payload: proposal.payload, state: proposal.state, outcome: proposal.outcome, by: { mate: false, name: proposal.name, ago: relativeAge(proposal.createdAt, now) }, actionBase: "/proposals" }, csrf, false, decision, returnTo);
 }
@@ -18330,6 +18369,24 @@ function coordinatorProposalsSection(proposals, decisions, csrf, now, heading =
         proposals.map(one => coordinatorProposalCard(one, csrf, now, decisions.get(typeof one.payload["decision"] === "number" ? one.payload["decision"] : -1) ?? null, returnTo)).join("") +
         `</div>`);
 }
+const REPLACED_THREAD_DIVIDER = "New conversation — the projects I can reach changed";
+/** The replaced thread as the React conversation renders it: words and card outcomes, no buttons. */
+function replacedBrowserMessages(previous, csrf) {
+    return mateBrowserMessages({ ...previous, pending: null, ask: null, asks: new Map() }, csrf, null).map(message => ({
+        ...message, cardsHtml: "",
+        cards: (message.cards ?? []).map(card => ({ ...card, primary: null, dismissable: false })),
+    }));
+}
+/** The replaced thread for the server-rendered page: read only, then the divider. */
+function replacedThreadHtml(previous) {
+    if (previous == null)
+        return "";
+    return `<section class="thread chat-previous" aria-label="Earlier conversation" data-previous-thread>` +
+        previous.messages.map(one => one.role === "operator"
+            ? `<div class="msg op" data-previous-message="${one.id}"><p style="white-space:pre-wrap">${escape(one.text)}</p></div>`
+            : `<div class="msg mate" data-previous-message="${one.id}">${renderChatText(one.text)}</div>`).join("") +
+        `<p class="chat-previous-divider" role="separator" data-thread-divider>${escape(REPLACED_THREAD_DIVIDER)}</p></section>`;
+}
 /** The lead's question as buttons: each option sends itself as the next message (the same POST as a typed one);
  * "Something else" moves to the composer. Nothing shows while a reply is running. */
 function mateAskHtml(ask, csrf, target, composer, open = true) {
@@ -18378,6 +18435,7 @@ function mateChatVersion(rows) {
     const focus = rows.focusTask;
     const facts = [
         rows.messages.map(one => [one.id, one.role, one.turn]),
+        rows.previous == null ? null : rows.previous.messages.map(one => one.id),
         rows.proposals.map(one => [one.id, one.state, one.outcome === null ? null : JSON.stringify(one.outcome)]),
         rows.coordinatorProposals.map(one => [one.id, one.state, one.outcome === null ? null : JSON.stringify(one.outcome)]),
         [...rows.decisions.values()].map(one => [one.id, one.state, one.choice ?? null]),
@@ -18504,6 +18562,7 @@ function matePage(chrome, data) {
     }
     const lastMessage = data.messages.at(-1);
     const latestReply = data.pending === null && lastMessage?.role === "assistant" ? lastMessage.id : null;
+    conversation.push(replacedThreadHtml(data.previous));
     conversation.push(mateThreadHtml({ ...data, problem: null, chatProject }));
     conversation.push(
     // The New update action (package 2): hidden until a live update lands
@@ -18524,6 +18583,7 @@ function matePage(chrome, data) {
                 messages: mateBrowserMessages(data, data.csrf, data.focusTask === null && chatProject === null ? null : returnTo, { task: data.focusTask?.id ?? null, project: chatProject }),
                 pendingTurnId: data.pending?.id ?? null, requestId: randomBytes(16).toString('hex'), maxChars: MATE_MESSAGE_MAX_CHARS,
                 taskId: data.focusTask?.id ?? null, resultRunId: data.resultRunId ?? null, project: chatProject,
+                ...(data.previous == null ? {} : { previous: { messages: replacedBrowserMessages(data.previous, data.csrf) } }),
             },
             focus: data.focusTask === null ? null : { id: data.focusTask.id, title: data.focusTask.title,
                 html: taskChatLiveRegion(data.focusTask, data.csrf, requestContext.getStore()?.workspaceRead === true, data.pending !== null) },
@@ -24057,7 +24117,7 @@ function notificationProjects(store, account) {
         .map(one => ({ repo: one.path, name: one.name, muted: muted.has(one.path) }))
         .sort((a, b) => a.name.localeCompare(b.name));
 }
-function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null, push = null, providerKeys = null, digest = null, permissionDefault = null, qualityDefault = null, email = null, telegramDelivery = null, workers = null, updates = null, firstResult = null, chatNotices = null, telegramFailing = false) {
+function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null, push = null, providerKeys = null, digest = null, permissionDefault = null, qualityDefault = null, email = null, telegramDelivery = null, workers = null, updates = null, firstResult = null, chatNotices = null, telegramFailing = false, phone = null) {
     const permissionCard = permissionDefault === null
         ? ""
         : [
@@ -24283,10 +24343,12 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
         workers,
         updates,
         firstResult,
+        ...(phone === null ? {} : { phone }),
     };
     return screen("Settings", [
         "<h1>Settings</h1>",
         settingsTiles(view.groups),
+        phone === null ? "" : phoneSetupHtml(phone),
         appearanceCard(csrf),
         permissionCard,
         qualityCard,
@@ -24312,6 +24374,15 @@ function settingsPage(chrome, existing, hasEnv, csrf, problem, messaging = null,
         `</details>`,
     ].join("\n"), { chrome, workspace: { view }, functional: { script: SETTINGS_AUTOSAVE_SCRIPT + (pushScript ?? ""), ...(pushScript === null ? {} : { fetches: true }) } });
 }
+/** The phone setup for the server-rendered Settings page: the same choices as the React card. */
+function phoneSetupHtml(phone) {
+    const [first, ...others] = phone.chatApps;
+    return `<section class="card" id="phone" aria-labelledby="phone-card-title" data-phone-card><h2 id="phone-card-title">Use it from your phone</h2>` +
+        `<p>${first === undefined ? "" : `<a href="${escape(first.href)}">Pair ${escape(first.label)}</a>`}${others.length === 0 ? "" : ` · or ${others.map(one => `<a href="${escape(one.href)}">${escape(one.label)}</a>`).join(", ")}`}</p>` +
+        `<p class="meta" data-phone-tailnet>${phone.tailnet === null ? `Or install <a href="https://tailscale.com/download">Tailscale</a> on this computer and your phone, then reload this page for the address.`
+            : phone.tailnet.restart === null ? `Or on your phone open <code>${escape(phone.tailnet.address)}</code> and sign in.`
+                : `Or start Toolroll with <code>${escape(phone.tailnet.restart)}</code>, then on your phone open <code>${escape(phone.tailnet.address)}</code> and sign in.`}</p></section>`;
+}
 /** Every worker that is not retired: its capacity, and the tasks it holds now. */
 function settingsWorkers(store, now) {
     const claims = store.liveClaims(null, now);

package/dist/store.d.ts

@@ -6323,6 +6323,11 @@ export declare class Store {
     };
     /** The approver's live thread for one scope, read only — null when none is open. */
     liveMateThreadFor(approver: string, scope?: MateThreadScope): MateThread | null;
+    /** The lead thread a ceiling change closed just before `current` (ruling 9),
+     * read only and for display only: it never continues and never reaches the
+     * model. Null when there is none, when it was ended or revoked (its text is
+     * gone), or when it closed under the same ceiling. */
+    replacedLeadThread(current: MateThread): MateThread | null;
     /** The task a paired chat is talking about (v78), or null for the lead conversation. */
     chatFocus(surface: string, binding: number): string | null;
     setChatFocus(surface: string, binding: number, task: string | null, now: Date): void;

package/dist/store.js

@@ -19275,6 +19275,20 @@ export class Store {
         const row = this.db.prepare("SELECT * FROM mate_thread WHERE approver = ? AND scope_kind = ? AND scope_key IS ? AND closed_at IS NULL AND NOT EXISTS (SELECT 1 FROM team_conversation tc WHERE tc.thread=mate_thread.id) ORDER BY id DESC LIMIT 1").get(approver, scope.kind, scope.kind === "lead" ? null : scope.key);
         return row === undefined ? null : readMateThread(row);
     }
+    /** The lead thread a ceiling change closed just before `current` (ruling 9),
+     * read only and for display only: it never continues and never reaches the
+     * model. Null when there is none, when it was ended or revoked (its text is
+     * gone), or when it closed under the same ceiling. */
+    replacedLeadThread(current) {
+        if (current.scope.kind !== "lead")
+            return null;
+        const row = this.db.prepare(`SELECT * FROM mate_thread WHERE approver = ? AND scope_kind = 'lead' AND scope_key IS NULL AND id < ? AND closed_at IS NOT NULL
+      AND NOT EXISTS (SELECT 1 FROM team_conversation tc WHERE tc.thread=mate_thread.id) ORDER BY id DESC LIMIT 1`).get(current.approver, current.id);
+        if (row === undefined || String(row["ceiling_digest"]) === current.ceilingDigest)
+            return null;
+        const previous = readMateThread(row);
+        return this.db.prepare("SELECT 1 FROM mate_message WHERE thread = ? LIMIT 1").get(previous.id) === undefined ? null : previous;
+    }
     /** The task a paired chat is talking about (v78), or null for the lead conversation. */
     chatFocus(surface, binding) {
         const row = this.db.prepare("SELECT task FROM chat_focus WHERE surface = ? AND binding = ?").get(surface, binding);

package/dist/team-contract.d.ts

@@ -1,4 +1,5 @@
 import type { WorkIndexPage } from './work-index.js';
+import type { BrowserActionCard } from './browser-workspace.js';
 /** Shared central-team transport contract. Requests never establish actor identity. */
 export type TeamActor = {
     name: string;
@@ -52,6 +53,15 @@ export type TeamChatAuthorization = {
     termsDigest: string;
     waitingReason?: string;
 };
+/** Browser cards extend the existing CLI summary; both refer to the same saved proposal. */
+export type TeamProposal = {
+    id: number;
+    turnId: number;
+    title: string;
+    state: string;
+    href: string;
+    card?: BrowserActionCard;
+};
 export type TeamSnapshot = {
     leads: TeamLead[];
     conversations: TeamConversation[];
@@ -67,13 +77,7 @@ export type TeamSnapshot = {
     accounts: string[];
     chatAuthorization?: TeamChatAuthorization;
     tasks?: WorkIndexPage;
-    proposals?: {
-        id: number;
-        turnId: number;
-        title: string;
-        state: string;
-        href: string;
-    }[];
+    proposals?: TeamProposal[];
 };
 export declare const TEAM_OPERATIONS: readonly ['list', 'show', 'create-lead', 'update-lead', 'create-conversation', 'member', 'send', 'edit', 'withdraw', 'read', 'authorize', 'follow', 'stop', 'transfer'];
 export type TeamOperation = typeof TEAM_OPERATIONS[number];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolroll",
-  "version": "0.9.38",
+  "version": "0.9.39",
   "description": "A control plane for unattended coding agents — queue tasks, walk away, come back to pull requests. Agents build in leased worktrees, never touch your default branch, and interrupt you only for decisions that need a human.",
   "directories": {
     "doc": "docs"