toolroll 0.9.52 → 0.9.53

package/dist/provider.d.ts

@@ -45,7 +45,7 @@ export type Invocation = {
     skipPermissions: boolean;
     /** Resume this session (repair). Meaningless across providers. */
     resumeSession: string | null;
-    /** Claude's native dollar cap (tournament stage 3b) — the harness stops
+    /** Claude's native dollar cap — the harness stops
      * itself when spend reaches this. Ignored by providers without one. */
     maxBudgetUsd?: number;
     /** A plane-minted session identity, for providers that can START under a
@@ -134,9 +134,10 @@ export type ParsedEnvelope = {
     diagnostic: string | null;
     /**
      * The structural FAILURE terminal, when the harness emitted a typed one
-     * (codex turn.failed, a gemini error terminal) — retained for the
-     * fallback taxonomy AND to block success ingestion on a failed-but-exit-0
-     * run (fallback chains, C5). null = no structural failure terminal seen.
+     * (codex turn.failed, a gemini error terminal) — retained to classify
+     * how the attempt ended (a sign-in that no longer works) AND to block
+     * success ingestion on a failed-but-exit-0 run (C5). null = no structural
+     * failure terminal seen.
      */
     structuralTerminal: import("./exhaustion.js").StructuralTerminal | null;
 };
@@ -158,15 +159,6 @@ type Adapter = {
     clampTimeout(phase: Phase, requestedMs: number): number;
 };
 export declare const OPENROUTER_ENV_KEY = "OPENROUTER_API_KEY";
-/**
- * The held-session argv (Parity II Phase 2): the same family as
- * claudeArgv MINUS the positional prompt — every turn, the brief
- * included, rides stdin as stream-json — plus the input format flag.
- * maxBudgetUsd is the Probe-6 backstop: the CLI's cap is cumulative
- * across the whole process, so the remaining authorization budget rides
- * the argv and later turns cannot spend past it.
- */
-export declare const claudeHeldArgv: (invocation: Omit<Invocation, "brief">) => string[];
 /** Claude's own tools that only make sense with a person to wake them. */
 export declare const HEADLESS_DISALLOWED_TOOLS: readonly string[];
 /**
@@ -228,12 +220,10 @@ export type ProviderAudit = {
 };
 /** Read-only facts about a provider — safe anywhere, spawns nothing. */
 /**
- * The tournament capability matrix (design v3 finding 14): what each
- * harness can PROVE about money, stated as data. Eligibility is derived,
- * never asserted: a provider races only when its own machinery can hold
- * a dollar cap. Codex and OpenRouter report billable usage only at turn
- * end (cumulative across resumed sessions), so no mid-run cap exists to
- * hold — ineligible until their harnesses grow one.
+ * The money capability matrix (design v3 finding 14): what each harness
+ * can PROVE about money, stated as data. Codex and OpenRouter report
+ * billable usage only at turn end (cumulative across resumed sessions),
+ * so no mid-run cap exists to hold.
  */
 export type ProviderMoneyCapabilities = {
     /** Usage events arrive during the run, not only at the end. */
@@ -241,17 +231,13 @@ export type ProviderMoneyCapabilities = {
     /** The harness's own dollar-cap flag, when one exists. */
     nativeDollarCapFlag: string | null;
     usageSemantics: "per-invocation" | "cumulative-session";
-    /** Whether this harness may race in a dollar-capped tournament. */
-    tournamentEligible: boolean;
-    /** Said in words on refusal screens. */
-    whyIneligible: string | null;
 };
 export declare const MONEY_CAPABILITIES: Record<ProviderId, ProviderMoneyCapabilities>;
 /**
  * The fail-closed budget-flag probe (finding 24's amendment): resolve
  * the EXACT executable that will spawn, read its version, and prove the
  * flag exists in that binary's own help — presence is a feature check
- * and nothing more; pricing and semantics stay pinned in pricing.ts.
+ * and nothing more.
  */
 export declare function probeBudgetCap(provider: ProviderId, runner: (command: string, argv: readonly string[], options: {
     timeoutMs?: number;
@@ -277,7 +263,7 @@ export declare function validateSpec(spec: AgentSpec): {
     problem: string;
 };
 /**
- * Whether this provider reports dollar cost. The routine budget interacts:
+ * Whether this provider reports dollar cost. A schedule's weekly limit interacts:
  * a ceiling against an unmeasured provider fails closed by design, so the
  * approval surfaces refuse the combination outright.
  */

package/dist/provider.js

@@ -56,30 +56,6 @@ function toml(value) {
 const OPENROUTER_PROVIDER_KEY = "standing-orders_openrouter";
 export const OPENROUTER_ENV_KEY = "OPENROUTER_API_KEY";
 const OPENROUTER_BASE_URL = "https://openrouter.ai/api/v1";
-/**
- * The held-session argv (Parity II Phase 2): the same family as
- * claudeArgv MINUS the positional prompt — every turn, the brief
- * included, rides stdin as stream-json — plus the input format flag.
- * maxBudgetUsd is the Probe-6 backstop: the CLI's cap is cumulative
- * across the whole process, so the remaining authorization budget rides
- * the argv and later turns cannot spend past it.
- */
-export const claudeHeldArgv = (invocation) => [
-    "-p",
-    ...(invocation.resumeSession === null ? [] : ["--resume", invocation.resumeSession]),
-    "--input-format",
-    "stream-json",
-    "--output-format",
-    "stream-json",
-    "--verbose",
-    "--max-turns",
-    String(invocation.maxTurns),
-    ...(invocation.skipPermissions
-        ? ["--dangerously-skip-permissions"]
-        : ["--permission-mode", invocation.permissionMode]),
-    ...(invocation.model === null ? [] : ["--model", invocation.model]),
-    ...(invocation.maxBudgetUsd === undefined ? [] : ["--max-budget-usd", String(invocation.maxBudgetUsd)]),
-];
 /**
  * Reviewer isolation (fail-closed for the phase that must never mutate):
  * the SAME flag family `subscription-chat.ts` already uses for its own
@@ -499,8 +475,8 @@ function codexParse(stdout) {
             }
         }
         else if (type === "turn.failed") {
-            // RETAIN the structural failure terminal (Codex fallback verify,
-            // finding 1): a turn.failed carries the usage-limit signal, and
+            // RETAIN the structural failure terminal (Codex verify, finding 1):
+            // a turn.failed carries the usage-limit or sign-in signal, and
             // dropping it here is where the evidence used to die. The error
             // object's message + typed code ride into the taxonomy; its mere
             // presence blocks success ingestion downstream.
@@ -859,22 +835,16 @@ export const MONEY_CAPABILITIES = {
         incrementalUsage: true,
         nativeDollarCapFlag: "--max-budget-usd",
         usageSemantics: "per-invocation",
-        tournamentEligible: true,
-        whyIneligible: null,
     },
     codex: {
         incrementalUsage: false,
         nativeDollarCapFlag: null,
         usageSemantics: "cumulative-session",
-        tournamentEligible: false,
-        whyIneligible: "codex reports billable usage only when a turn completes — no mid-run dollar cap exists to enforce",
     },
     openrouter: {
         incrementalUsage: false,
         nativeDollarCapFlag: null,
         usageSemantics: "cumulative-session",
-        tournamentEligible: false,
-        whyIneligible: "openrouter rides the codex harness here and shares its turn-end-only usage reporting",
     },
     gemini: {
         incrementalUsage: false,
@@ -882,15 +852,13 @@ export const MONEY_CAPABILITIES = {
         // Stats come from a per-process telemetry service: an invocation's
         // numbers cover that invocation only (conformance fixture j).
         usageSemantics: "per-invocation",
-        tournamentEligible: false,
-        whyIneligible: "gemini reports tokens, never dollars — no native cap exists to hold",
     },
 };
 /**
  * The fail-closed budget-flag probe (finding 24's amendment): resolve
  * the EXACT executable that will spawn, read its version, and prove the
  * flag exists in that binary's own help — presence is a feature check
- * and nothing more; pricing and semantics stay pinned in pricing.ts.
+ * and nothing more.
  */
 export async function probeBudgetCap(provider, runner) {
     const flag = MONEY_CAPABILITIES[provider].nativeDollarCapFlag;
@@ -938,7 +906,7 @@ export function validateSpec(spec) {
     return { ok: true };
 }
 /**
- * Whether this provider reports dollar cost. The routine budget interacts:
+ * Whether this provider reports dollar cost. A schedule's weekly limit interacts:
  * a ceiling against an unmeasured provider fails closed by design, so the
  * approval surfaces refuse the combination outright.
  */

package/dist/push.js

@@ -197,7 +197,7 @@ export const PUSH_WORDS = {
     attention: { title: "Toolroll", body: "the plane needs attention" },
     progress: { title: "Toolroll", body: "checks in progress" },
 };
-const LINK_SHAPES = [/^\/next$/, /^\/review$/, /^\/system$/, /^\/routines$/, /^\/routines\/[0-9]{1,15}$/, /^\/d\/[0-9]{1,15}$/, /^\/contest\/[0-9]{1,15}$/, /^\/r\/[0-9]{1,15}$/];
+const LINK_SHAPES = [/^\/next$/, /^\/review$/, /^\/system$/, /^\/routines$/, /^\/routines\/[0-9]{1,15}$/, /^\/d\/[0-9]{1,15}$/, /^\/r\/[0-9]{1,15}$/];
 const CLASS_FALLBACK = {
     decision: "/next",
     pick: "/next",

package/dist/recipe-ui.js

@@ -56,7 +56,7 @@ export function recipeFromForm(body) {
 export function recipeLibraryHtml(starters, saved, project, csrf, revision, recent) {
     const cards = (recipes, reusable = false) => `<div class="recipe-grid"${reusable ? ' data-saved-recipes' : ''}>${recipes.map(recipe => `<article class="recipe-card" data-recipe-card data-recipe-search="${e(recipe.document.name + " " + recipe.document.description)}"><p class="recipe-kicker">${recipe.document.deliverable === "report" ? "Report" : recipe.document.schedule === null ? "One-time work" : "Recurring care"}${recipe.document.version === 2 ? ` · ${recipe.document.inputs.length} question${recipe.document.inputs.length === 1 ? "" : "s"}` : ""}</p><h3>${e(recipe.document.name)}</h3><p>${e(recipe.document.description)}</p><a class="recipe-card-link" href="/recipes/${reusable ? "run" : "start"}?recipe=${e(recipe.id)}&revision=${recipe.revision}">${reusable ? "Use recipe" : "Customize recipe"} <span aria-hidden="true">→</span></a>${reusable ? `<a class="meta" href="/recipes/start?recipe=${e(recipe.id)}&revision=${recipe.revision}">Edit a copy</a>` : ""}</article>`).join("")}</div>`;
     const savedSection = `<h2>Your project’s recipes</h2>${saved.length >= 100 ? `<p class="meta">Showing 100 recipes, with recently used recipes first.</p>` : ""}${saved.length ? `<p class="hint">Your usual work, ready to go. Recently used recipes come first.</p><label class="recipe-search">Find a recipe<input type="search" data-recipe-search-input placeholder="Search your recipes…"></label>${cards(saved, true)}<p data-recipe-empty hidden>No recipes match. Try another search.</p>` : `<p class="hint">Save work you do often. Teammates with project access can use the same recipe.</p>`}`;
-    return `<div class="recipe-heading"><p class="recipe-kicker">Workflows</p><h1>Good work, on repeat.</h1><p class="hint">Save the work you do often. Answer what changes this time. Kick it off.</p><p><a href="/recipes/new" class="new-task">Create a recipe</a> <a href="/routines">Manage scheduled work →</a></p></div>` +
+    return `<div class="recipe-heading"><p class="recipe-kicker">Workflows</p><h1>Good work, on repeat.</h1><p class="hint">Save the work you do often. Answer what changes this time. Kick it off.</p><p><a href="/recipes/new" class="new-task">Create a recipe</a> <a href="/flows">Manage scheduled work →</a></p></div>` +
         (project === null ? `<div class="card"><strong>Choose a project to get started.</strong><p>Browse recipes now; <a href="/projects">open a project</a> to customize, save, or run one.</p></div>` : "") +
         (saved.length ? savedSection : "") + `<h2>Start here</h2>${cards(starters)}` + (saved.length ? "" : savedSection) +
         (recent.length ? `<h2>Recent workflows</h2><div class="card recipe-history">${recent.map(one => `<a href="${e(one.href)}"><strong>${e(one.name)}</strong><span>${e(one.state)} →</span></a>`).join("")}</div>` : "") +
@@ -80,17 +80,17 @@ export function recipeEditorHtml(recipe, repo, csrf, revision, problem = null, v
         `<section class="card"><h2>The outcome</h2><label>${creator ? "Recipe name" : "Workflow name"}<input type="text" name="name" value="${e(value("name", d.name))}" maxlength="200" required></label><label>Short description<input type="text" name="description" value="${e(value("description", d.description))}" maxlength="400"></label><label>What should the agent do?<textarea name="goal" rows="5" maxlength="${TASK_TEXT_LIMITS.text}" required>${e(value("goal", d.goal))}</textarea></label><label>What should it leave alone?<textarea name="not" rows="3" maxlength="${TASK_TEXT_LIMITS.text}">${e(value("not", d.outOfScope ?? ""))}</textarea></label><label>Allowed files or folders <span class="meta">optional; one per line</span><textarea name="touches" rows="2" placeholder="src/&#10;tests/">${e(value("touches", d.touches.join("\n")))}</textarea></label><p class="meta">Blank allows work across this project. Add paths to keep the workflow focused.</p></section>` +
         recipeQuestionsHtml(d, values) +
         `<section class="card"><h2>What does success look like?</h2><p class="hint">Give each outcome the evidence you want to see. The workflow checks these before calling the work done.</p><div data-recipe-criteria>${Array.from({ length: count }, (_, i) => criterionHtml(i, d.acceptance[i], values)).join("")}</div><button type="button" data-add-criterion hidden>Add another success check</button><template data-criterion-template>${criterionHtml(11).replaceAll("criterion-11-", "criterion-INDEX-").replaceAll('value="c12"', 'value="cNEXT"')}</template></section>` +
-        `<section class="card"><h2>How it should run</h2><div class="recipe-options"><label>Result<select name="deliverable"><option value="branch"${deliverable === "branch" ? " selected" : ""}>Code change with evidence</option><option value="report"${deliverable === "report" ? " selected" : ""}>Report without code changes</option></select></label><label>Planning<select name="planning">${[["auto", "Plan when helpful"], ["required", "Always plan first"], ["skip", "Use this scope directly"]].map(([id, label]) => `<option value="${id}"${planning === id ? " selected" : ""}>${label}</option>`).join("")}</select></label></div><p class="meta">Report work investigates directly. Repeating work reuses its approved scope; plan-first workflows run once.</p><label>Frequency<select name="cadence" data-recipe-cadence><option value="once"${cadence === "once" ? " selected" : ""}>Run once</option><option value="repeat"${cadence === "repeat" ? " selected" : ""}>Repeat on a schedule</option></select></label><div data-recipe-recurring>${scheduleEditorHtml(d.schedule, values)}<label>Weekly spending limit <span class="meta">optional, USD</span><input type="number" name="ceiling" min="0.01" step="0.01" value="${e(value("ceiling", d.costCeilingUsd === null ? "" : String(d.costCeilingUsd)))}"></label><p class="meta">One instance at a time. A spending limit requires an agent that reports dollar costs; approval checks this.</p></div></section>` +
+        `<section class="card"><h2>How it should run</h2><div class="recipe-options"><label>Result<select name="deliverable"><option value="branch"${deliverable === "branch" ? " selected" : ""}>Code change with evidence</option><option value="report"${deliverable === "report" ? " selected" : ""}>Report without code changes</option></select></label><label>Planning<select name="planning">${[["auto", "Plan when helpful"], ["required", "Always plan first"], ["skip", "Use this scope directly"]].map(([id, label]) => `<option value="${id}"${planning === id ? " selected" : ""}>${label}</option>`).join("")}</select></label></div><p class="meta">Report work investigates directly. Repeating work files the same scope each time; plan-first workflows run once.</p><label>Frequency<select name="cadence" data-recipe-cadence><option value="once"${cadence === "once" ? " selected" : ""}>Run once</option><option value="repeat"${cadence === "repeat" ? " selected" : ""}>Repeat on a schedule</option></select></label><div data-recipe-recurring>${scheduleEditorHtml(d.schedule, values)}<label>Weekly spending limit <span class="meta">optional, USD</span><input type="number" name="ceiling" min="0.01" step="0.01" value="${e(value("ceiling", d.costCeilingUsd === null ? "" : String(d.costCeilingUsd)))}"></label><p class="meta">One at a time. A spending limit needs an agent that reports dollar costs.</p></div></section>` +
         `<div class="sticky-actions"><button type="submit" name="purpose" value="${creator ? "recipe" : "workflow"}">${creator ? "Preview recipe →" : "Preview workflow →"}</button>${creator ? "" : `<button type="submit" name="purpose" value="recipe" class="quiet">Preview recipe to save</button>`}<p class="meta">${creator ? "Save the instructions once. You can use the recipe whenever this work comes up." : "Previewing runs no agents. You’ll see the approval and scheduling steps next."}</p></div></form>`;
 }
 export function workflowPreviewHtml(preview, csrf, revision, now, readiness, auto) {
     const d = preview.document;
     const common = hidden("csrf", csrf) + hidden("repo", preview.repo) + hidden("projectRevision", String(revision)) + hidden("preview", preview.token);
-    const target = preview.taskId === null ? preview.routineId === null ? null : `/routines/${preview.routineId}` : `/t/${encodeURIComponent(preview.taskId)}`;
+    const target = preview.taskId === null ? preview.flowId === null ? null : `/flows/${preview.flowId}` : `/t/${encodeURIComponent(preview.taskId)}`;
     return `<a href="/recipes/edit?preview=${preview.token}" class="meta">← Edit this workflow</a><div class="recipe-heading"><p class="recipe-kicker">3 · Preview</p><h1>${e(d.name)}</h1><p class="hint">${e(d.description)}</p></div>` +
         `<div class="recipe-preview-grid"><div><section class="card"><h2>What will happen</h2><ol class="recipe-steps">${workflowSteps(d).map(step => `<li><strong>${e(step.title)}</strong><p>${e(step.detail)}</p></li>`).join("")}</ol></section><section class="card"><h2>The agreed work</h2><p class="recap">${e(d.goal)}</p><h3>Leave alone</h3><p class="recap">${e(d.outOfScope ?? "No additional exclusions.")}</p><h3>Allowed paths</h3><p>${d.touches.length ? d.touches.map(e).join(", ") : "This project"}</p><h3>Success checks</h3><ul>${d.acceptance.map(c => `<li><strong>${e(c.statement)}</strong><p class="meta">${c.evidence.map(kind => e(evidence.find(([id]) => id === kind)?.[1] ?? kind)).join(" · ")}${c.how ? ` · ${e(c.how)}` : ""}</p></li>`).join("")}</ul></section></div>` +
-        `<aside><section class="card"><h2>Before it starts</h2>${readiness.map(one => `<p><strong>${e(one.title)}</strong><br><span class="meta">${e(one.detail)}${one.href ? ` <a href="${e(one.href)}">Open settings →</a>` : ""}</span></p>`).join("")}<p class="meta">These checks describe current setup. Agent availability and approval are checked again when work starts.</p></section><section class="card"><h2>Schedule & control</h2><p>${e(recipeScheduleWords(d, now))}</p><p>${d.costCeilingUsd === null ? "Uses existing project and agent budget controls." : `Up to $${d.costCeilingUsd.toFixed(2)} per rolling seven days.`}</p><p>${d.schedule !== null ? "Approve the routine once on the next screen. Pause it any time from scheduled work." : auto ? "Your signed project policy will be evaluated when you create this workflow." : "Review and approve on the task page. You can stop or resume there."}</p></section></aside></div>` +
-        `<div class="card recipe-launch"><div>${target ? `<a class="new-task" href="${target}">Open created workflow →</a>` : `<form method="post" action="/recipes/launch">${common}<button type="submit">${d.schedule !== null ? "Create scheduled workflow" : auto ? "Create workflow" : "Create task for approval"}</button></form>`}<p class="meta">${d.schedule !== null ? "Nothing repeats until the routine is approved." : "A matching signed policy may start work automatically."} Creating this workflow twice returns the same work.</p></div><div>${preview.savedId ? `<a href="/recipes/start?recipe=${preview.savedId}&revision=${preview.savedRevision}">Recipe saved · reuse it →</a>` : `<form method="post" action="/recipes/save">${common}<button type="submit" class="quiet">Save as a project recipe</button></form>`}<a href="/recipes/export?preview=${preview.token}">Export recipe JSON</a><p class="meta">Save or export without running anything. Sharing includes the work definition, never project access or approvals.</p></div></div>`;
+        `<aside><section class="card"><h2>Before it starts</h2>${readiness.map(one => `<p><strong>${e(one.title)}</strong><br><span class="meta">${e(one.detail)}${one.href ? ` <a href="${e(one.href)}">Open settings →</a>` : ""}</span></p>`).join("")}<p class="meta">These checks describe current setup. Agent availability and approval are checked again when work starts.</p></section><section class="card"><h2>Schedule & control</h2><p>${e(recipeScheduleWords(d, now))}</p><p>${d.costCeilingUsd === null ? "Uses existing project and agent budget controls." : `Up to $${d.costCeilingUsd.toFixed(2)} per rolling seven days.`}</p><p>${d.schedule !== null ? "It becomes a flow you can pause or resume any time." : auto ? "Your signed project policy will be evaluated when you create this workflow." : "Review and approve on the task page. You can stop or resume there."}</p></section></aside></div>` +
+        `<div class="card recipe-launch"><div>${target ? `<a class="new-task" href="${target}">Open created workflow →</a>` : `<form method="post" action="/recipes/launch">${common}<button type="submit">${d.schedule !== null ? "Create scheduled workflow" : auto ? "Create workflow" : "Create task for approval"}</button></form>`}<p class="meta">${d.schedule !== null ? "Nothing repeats until you turn the schedule on." : "A matching signed policy may start work automatically."} Creating this workflow twice returns the same work.</p></div><div>${preview.savedId ? `<a href="/recipes/start?recipe=${preview.savedId}&revision=${preview.savedRevision}">Recipe saved · reuse it →</a>` : `<form method="post" action="/recipes/save">${common}<button type="submit" class="quiet">Save as a project recipe</button></form>`}<a href="/recipes/export?preview=${preview.token}">Export recipe JSON</a><p class="meta">Save or export without running anything. Sharing includes the work definition, never project access or approvals.</p></div></div>`;
 }
 function inputHtml(index, input, values) {
     const value = (field, fallback) => values?.get(`input-${index}-${field}`) ?? fallback;
@@ -109,7 +109,7 @@ export function recipeDefinitionPreviewHtml(preview, csrf, revision) {
 }
 export function recipeRunHtml(recipe, repo, csrf, revision, problem = null, values, saved = false) {
     const d = recipe.document, inputs = d.version === 2 ? d.inputs : [];
-    return `<a class="meta" href="/recipes">← Your recipes</a><div class="recipe-heading"><p class="recipe-kicker">${saved ? "Recipe saved · ready when you are" : "Use a recipe"}</p><h1>${e(d.name)}</h1><p class="hint">${e(d.description || "Your saved instructions, ready to use again.")}</p></div>${problem ? `<p role="alert" class="card recipe-error">${e(problem)}</p>` : ""}<form class="recipe-run card" method="post" action="/recipes/prepare">${hidden("csrf", csrf)}${hidden("repo", repo)}${hidden("projectRevision", String(revision))}${hidden("recipe", recipe.id)}${hidden("recipeRevision", String(recipe.revision))}<h2>${inputs.length ? "What changes this time?" : "Ready to go"}</h2>${inputs.map(input => `<label>${e(input.label)}<textarea name="answer-${e(input.key)}" rows="2" maxlength="500" required>${e(values?.get(`answer-${input.key}`) ?? input.defaultValue ?? "")}</textarea></label>`).join("")}${inputs.length ? "" : `<p>No setup to repeat. Preview the saved scope and create the work.</p>`}<p class="meta">${d.schedule === null ? "Creates one task each time you use this recipe." : "Creates a new schedule with these answers fixed for every firing. Manage an existing schedule from Routines."}</p><button type="submit">Preview this run →</button><p class="meta">Previewing starts no agents. Existing project approvals apply when you create work.</p></form><details class="card"><summary>Saved instructions and boundaries</summary><p class="recap">${e(d.goal)}</p><p class="recap">Leave alone: ${e(d.outOfScope ?? "No additional exclusions.")}</p><p>Allowed paths: ${d.touches.map(e).join(", ") || "This project"}</p><ul>${d.acceptance.map(one => `<li>${e(one.statement)}</li>`).join("")}</ul><a href="/recipes/start?recipe=${e(recipe.id)}&revision=${recipe.revision}">Edit a copy of this recipe →</a></details>`;
+    return `<a class="meta" href="/recipes">← Your recipes</a><div class="recipe-heading"><p class="recipe-kicker">${saved ? "Recipe saved · ready when you are" : "Use a recipe"}</p><h1>${e(d.name)}</h1><p class="hint">${e(d.description || "Your saved instructions, ready to use again.")}</p></div>${problem ? `<p role="alert" class="card recipe-error">${e(problem)}</p>` : ""}<form class="recipe-run card" method="post" action="/recipes/prepare">${hidden("csrf", csrf)}${hidden("repo", repo)}${hidden("projectRevision", String(revision))}${hidden("recipe", recipe.id)}${hidden("recipeRevision", String(recipe.revision))}<h2>${inputs.length ? "What changes this time?" : "Ready to go"}</h2>${inputs.map(input => `<label>${e(input.label)}<textarea name="answer-${e(input.key)}" rows="2" maxlength="500" required>${e(values?.get(`answer-${input.key}`) ?? input.defaultValue ?? "")}</textarea></label>`).join("")}${inputs.length ? "" : `<p>No setup to repeat. Preview the saved scope and create the work.</p>`}<p class="meta">${d.schedule === null ? "Creates one task each time you use this recipe." : "Creates a new scheduled flow with these answers fixed for every run. Manage existing schedules from Flows."}</p><button type="submit">Preview this run →</button><p class="meta">Previewing starts no agents. Existing project approvals apply when you create work.</p></form><details class="card"><summary>Saved instructions and boundaries</summary><p class="recap">${e(d.goal)}</p><p class="recap">Leave alone: ${e(d.outOfScope ?? "No additional exclusions.")}</p><p>Allowed paths: ${d.touches.map(e).join(", ") || "This project"}</p><ul>${d.acceptance.map(one => `<li>${e(one.statement)}</li>`).join("")}</ul><a href="/recipes/start?recipe=${e(recipe.id)}&revision=${recipe.revision}">Edit a copy of this recipe →</a></details>`;
 }
 export function recipeAnswersFromForm(body) {
     const answers = new Map();

package/dist/recipes.d.ts

@@ -1,6 +1,6 @@
 import type { Store } from "./store.js";
 import { type RecipeDocument } from "./contracts/recipes.js";
-export declare const RECIPE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS workflow_recipe (\n  id TEXT NOT NULL, revision INTEGER NOT NULL CHECK(revision > 0),\n  repo TEXT NOT NULL, document TEXT NOT NULL, digest TEXT NOT NULL,\n  author TEXT NOT NULL, created_at TEXT NOT NULL,\n  PRIMARY KEY(id, revision)\n);\nCREATE INDEX IF NOT EXISTS workflow_recipe_project ON workflow_recipe(repo, id, revision DESC);\nCREATE TRIGGER IF NOT EXISTS workflow_recipe_no_update BEFORE UPDATE ON workflow_recipe\nBEGIN SELECT RAISE(ABORT, 'recipe revisions are immutable'); END;\nCREATE TRIGGER IF NOT EXISTS workflow_recipe_no_delete BEFORE DELETE ON workflow_recipe\nBEGIN SELECT RAISE(ABORT, 'recipe revisions are immutable'); END;\nCREATE TABLE IF NOT EXISTS workflow_preview (\n  token TEXT PRIMARY KEY, actor TEXT NOT NULL, repo TEXT NOT NULL,\n  document TEXT NOT NULL, digest TEXT NOT NULL, source TEXT NOT NULL,\n  created_at TEXT NOT NULL, expires_at TEXT NOT NULL,\n  task_id TEXT REFERENCES task(id), routine_id INTEGER REFERENCES routine(id),\n  saved_id TEXT, saved_revision INTEGER,\n  CHECK(task_id IS NULL OR routine_id IS NULL),\n  FOREIGN KEY(saved_id, saved_revision) REFERENCES workflow_recipe(id, revision)\n);\nCREATE INDEX IF NOT EXISTS workflow_preview_project ON workflow_preview(repo, created_at DESC);\nCREATE INDEX IF NOT EXISTS workflow_preview_source ON workflow_preview(repo, source, created_at DESC)\nWHERE task_id IS NOT NULL OR routine_id IS NOT NULL;\n";
+export declare const RECIPE_SCHEMA = "\nCREATE TABLE IF NOT EXISTS workflow_recipe (\n  id TEXT NOT NULL, revision INTEGER NOT NULL CHECK(revision > 0),\n  repo TEXT NOT NULL, document TEXT NOT NULL, digest TEXT NOT NULL,\n  author TEXT NOT NULL, created_at TEXT NOT NULL,\n  PRIMARY KEY(id, revision)\n);\nCREATE INDEX IF NOT EXISTS workflow_recipe_project ON workflow_recipe(repo, id, revision DESC);\nCREATE TRIGGER IF NOT EXISTS workflow_recipe_no_update BEFORE UPDATE ON workflow_recipe\nBEGIN SELECT RAISE(ABORT, 'recipe revisions are immutable'); END;\nCREATE TRIGGER IF NOT EXISTS workflow_recipe_no_delete BEFORE DELETE ON workflow_recipe\nBEGIN SELECT RAISE(ABORT, 'recipe revisions are immutable'); END;\nCREATE TABLE IF NOT EXISTS workflow_preview (\n  token TEXT PRIMARY KEY, actor TEXT NOT NULL, repo TEXT NOT NULL,\n  document TEXT NOT NULL, digest TEXT NOT NULL, source TEXT NOT NULL,\n  created_at TEXT NOT NULL, expires_at TEXT NOT NULL,\n  -- routine_id: history (routines became scheduled flows in v115; the flow_id column is added after this runs).\n  task_id TEXT REFERENCES task(id), routine_id INTEGER,\n  saved_id TEXT, saved_revision INTEGER,\n  CHECK(task_id IS NULL OR routine_id IS NULL),\n  FOREIGN KEY(saved_id, saved_revision) REFERENCES workflow_recipe(id, revision)\n);\nCREATE INDEX IF NOT EXISTS workflow_preview_project ON workflow_preview(repo, created_at DESC);\nCREATE INDEX IF NOT EXISTS workflow_preview_source ON workflow_preview(repo, source, created_at DESC)\nWHERE task_id IS NOT NULL OR routine_id IS NOT NULL;\n";
 export type { RecipeDocument, RecipeInput } from "./contracts/recipes.js";
 export declare const RECIPE_INPUT_LIMIT: 8;
 export type RecipeAnswers = ReadonlyMap<string, string>;
@@ -21,7 +21,7 @@ export type WorkflowPreview = {
     source: string;
     expiresAt: string;
     taskId: string | null;
-    routineId: number | null;
+    flowId: number | null;
     savedId: string | null;
     savedRevision: number | null;
 };
@@ -46,7 +46,7 @@ export declare function createWorkflowPreview(store: Store, actor: string, repo:
 export declare function workflowPreview(store: Store, actor: string, repo: string, token: string): WorkflowPreview | null;
 export declare function launchWorkflow(store: Store, actor: string, repo: string, token: string, now: Date, operatorFiling: boolean): {
     taskId: string | null;
-    routineId: number | null;
+    flowId: number | null;
 };
 export declare function saveWorkflowRecipe(store: Store, actor: string, repo: string, token: string, now: Date): Recipe;
 export declare function workflowSteps(document: RecipeDocument): {

package/dist/recipes.js

@@ -1,12 +1,13 @@
 /** Reusable work definitions. Recipes carry scope, never credentials or grants.
  * A preview freezes the exact copy to file; its durable receipt makes a retry
- * after a lost response return the same task/routine, even after a restart. */
+ * after a lost response return the same task or flow, even after a restart.
+ * A repeating recipe (v115) makes a scheduled flow whose schedule starts paused. */
 import { createHash, randomBytes } from "node:crypto";
 import { TEMPLATES } from "./templates.js";
 import { hasDisguisedText, hasForbiddenControls } from "./decision.js";
 import { parseAcceptanceCriteria } from "./scope.js";
-import { validateTaskText, fileTaskProposal, fileRoutineProposal } from "./proposal.js";
-import { parseSchedule, firstFireAt, describeSchedule, validateRoutineTerms } from "./routine.js";
+import { validateTaskText, fileTaskProposal } from "./proposal.js";
+import { createScheduledFlow, describeSchedule, firstFireAt, parseSchedule, standingTermsProblems } from "./flow-schedule.js";
 import { applyModeToNewFiling } from "./plan-auto.js";
 import { canonicalProject } from "./project.js";
 import { RECIPE_FORMAT, RECIPE_LIMITS, readRecipeDocument } from "./contracts/recipes.js";
@@ -27,7 +28,8 @@ CREATE TABLE IF NOT EXISTS workflow_preview (
   token TEXT PRIMARY KEY, actor TEXT NOT NULL, repo TEXT NOT NULL,
   document TEXT NOT NULL, digest TEXT NOT NULL, source TEXT NOT NULL,
   created_at TEXT NOT NULL, expires_at TEXT NOT NULL,
-  task_id TEXT REFERENCES task(id), routine_id INTEGER REFERENCES routine(id),
+  -- routine_id: history (routines became scheduled flows in v115; the flow_id column is added after this runs).
+  task_id TEXT REFERENCES task(id), routine_id INTEGER,
   saved_id TEXT, saved_revision INTEGER,
   CHECK(task_id IS NULL OR routine_id IS NULL),
   FOREIGN KEY(saved_id, saved_revision) REFERENCES workflow_recipe(id, revision)
@@ -123,9 +125,9 @@ export function parseRecipe(input) {
     if (ordered.version === 2)
         validateInputReferences(ordered);
     if (ordered.schedule !== null) {
-        const problems = validateRoutineTerms({ repo: "/recipe-preview", ...ordered, requirements: [], schedule: ordered.schedule, singleFlight: true });
+        const problems = standingTermsProblems({ ...ordered, requirements: [], budgetPerRunMicrousd: null }, ordered.schedule);
         if (problems.length)
-            throw new RecipeError(problems.map(one => `${one.field}: ${one.problem}`).join("; "));
+            throw new RecipeError(problems.join("; "));
     }
     return ordered;
 }
@@ -214,11 +216,11 @@ export function prepareRecipeRun(store, actor, repo, id, revision, answers, now)
         return createWorkflowPreview(store, actor, repo, resolveRecipe(recipe.document, answers), recipe.id, now);
     });
 }
-const titles = { "nightly-deps": "Keep dependencies current", "test-coverage": "Test one overlooked module", "docs-drift": "Keep documentation accurate", "lint-sweep": "Clean up lint and types" };
+const titles = { "lint-sweep": "Clean up lint and types" };
 export function starterRecipes() {
     const recipes = TEMPLATES.filter(one => one.kind !== "recipe").map(one => {
-        const document = parseRecipe({ format: "standing-orders-recipe", version: 1, name: titles[one.name] ?? one.name, description: one.purpose, goal: one.goal, outOfScope: one.outOfScope, touches: one.touches, acceptance: one.acceptance,
-            planning: "skip", deliverable: "branch", schedule: one.kind === "routine" ? one.schedule : null, costCeilingUsd: null });
+        const document = parseRecipe({ format: "standing-orders-recipe", version: 1, name: one.kind === "scheduled" ? one.title : titles[one.name] ?? one.name, description: one.purpose, goal: one.goal, outOfScope: one.outOfScope, touches: one.touches, acceptance: one.acceptance,
+            planning: "skip", deliverable: "branch", schedule: one.kind === "scheduled" ? one.schedule : null, costCeilingUsd: null });
         return { id: one.name, revision: 1, repo: null, document, digest: recipeDigest(document), author: "Toolroll" };
     });
     for (const [id, document] of [
@@ -243,7 +245,7 @@ function readRecipe(row) {
 export function savedRecipes(store, actor, repo) {
     repo = recipeProject(repo);
     access(store, actor, repo);
-    return store.handle.prepare(`SELECT r.* FROM workflow_recipe r WHERE repo=? AND revision=(SELECT MAX(revision) FROM workflow_recipe WHERE id=r.id) ORDER BY (SELECT MAX(p.created_at) FROM workflow_preview p WHERE p.repo=r.repo AND p.source=r.id AND (p.task_id IS NOT NULL OR p.routine_id IS NOT NULL)) DESC, created_at DESC, id LIMIT 100`).all(repo).map(readRecipe);
+    return store.handle.prepare(`SELECT r.* FROM workflow_recipe r WHERE repo=? AND revision=(SELECT MAX(revision) FROM workflow_recipe WHERE id=r.id) ORDER BY (SELECT MAX(p.created_at) FROM workflow_preview p WHERE p.repo=r.repo AND p.source=r.id AND (p.task_id IS NOT NULL OR p.routine_id IS NOT NULL OR p.flow_id IS NOT NULL)) DESC, created_at DESC, id LIMIT 100`).all(repo).map(readRecipe);
 }
 export function findRecipe(store, actor, repo, id, revision) {
     const starter = starterRecipes().find(one => one.id === id);
@@ -264,8 +266,8 @@ export function createWorkflowPreview(store, actor, repo, document, source, now)
         throw new RecipeError("Unknown recipe source.");
     return store.transact(() => {
         access(store, actor, repo, true);
-        store.handle.prepare("DELETE FROM workflow_preview WHERE actor=? AND expires_at<? AND task_id IS NULL AND routine_id IS NULL AND saved_id IS NULL").run(actor, now.toISOString());
-        const count = store.handle.prepare("SELECT COUNT(*) n FROM workflow_preview WHERE actor=? AND expires_at>? AND task_id IS NULL AND routine_id IS NULL AND saved_id IS NULL").get(actor, now.toISOString());
+        store.handle.prepare("DELETE FROM workflow_preview WHERE actor=? AND expires_at<? AND task_id IS NULL AND routine_id IS NULL AND flow_id IS NULL AND saved_id IS NULL").run(actor, now.toISOString());
+        const count = store.handle.prepare("SELECT COUNT(*) n FROM workflow_preview WHERE actor=? AND expires_at>? AND task_id IS NULL AND routine_id IS NULL AND flow_id IS NULL AND saved_id IS NULL").get(actor, now.toISOString());
         if (Number(count?.n) >= 30)
             throw new RecipeError("You have 30 open previews. Use one or let it expire before making another.", 429);
         const token = randomBytes(16).toString("hex");
@@ -283,7 +285,7 @@ export function workflowPreview(store, actor, repo, token) {
     const document = importRecipe(String(row.document));
     if (recipeDigest(document) !== row.digest)
         throw new RecipeError("This preview has changed. Make a fresh preview.", 409);
-    return { token, actor, repo, document, digest: String(row.digest), source: String(row.source), expiresAt: String(row.expires_at), taskId: row.task_id, routineId: row.routine_id, savedId: row.saved_id, savedRevision: row.saved_revision };
+    return { token, actor, repo, document, digest: String(row.digest), source: String(row.source), expiresAt: String(row.expires_at), taskId: row.task_id, flowId: row.flow_id == null ? null : Number(row.flow_id), savedId: row.saved_id, savedRevision: row.saved_revision };
 }
 function currentPreview(store, actor, repo, token) {
     access(store, actor, repo, true);
@@ -296,15 +298,15 @@ export function launchWorkflow(store, actor, repo, token, now, operatorFiling) {
     repo = recipeProject(repo);
     return store.transact(() => {
         const preview = currentPreview(store, actor, repo, token);
-        if (preview.taskId !== null || preview.routineId !== null)
-            return { taskId: preview.taskId, routineId: preview.routineId };
+        if (preview.taskId !== null || preview.flowId !== null)
+            return { taskId: preview.taskId, flowId: preview.flowId };
         if (preview.expiresAt <= now.toISOString())
             throw new RecipeError("This preview expired. Preview it again before creating work.", 409);
         const d = preview.document;
         if (d.version === 2)
             throw new RecipeError("Answer the recipe questions and preview the filled-in work before creating it.", 409);
         const provenance = `recipe:${preview.savedId ?? preview.source}`;
-        let taskId = null, routineId = null;
+        let taskId = null, flowId = null;
         if (d.schedule === null) {
             const made = fileTaskProposal(store, { id: `workflow-${token}`, title: d.name, repo, goal: d.goal, outOfScope: d.outOfScope, touches: d.touches, acceptance: d.acceptance, planning: d.planning, deliverable: d.deliverable, filedVia: provenance, filedBy: { name: actor, kind: "person" }, admittedRepos: [repo] }, now);
             if (!made.ok)
@@ -315,14 +317,16 @@ export function launchWorkflow(store, actor, repo, token, now, operatorFiling) {
         }
         else {
             const slug = d.name.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-|-$/g, "").slice(0, 32) || "workflow";
-            const made = fileRoutineProposal(store, { name: `${slug}-${token.slice(0, 8)}`, repo, goal: d.goal, outOfScope: d.outOfScope, touches: d.touches, acceptance: d.acceptance, requirements: [], schedule: d.schedule, costCeilingUsd: d.costCeilingUsd, filedVia: provenance, createdBy: actor, admittedRepos: [repo] }, now);
+            // A scheduled flow whose schedule starts paused: nothing repeats until a person turns it on.
+            const made = createScheduledFlow(store, { repo, name: d.name, stem: `${slug}-${token.slice(0, 8)}`, schedule: d.schedule, by: actor,
+                terms: { goal: d.goal, outOfScope: d.outOfScope, touches: d.touches, requirements: [], acceptance: d.acceptance, budgetPerRunMicrousd: null, costCeilingUsd: d.costCeilingUsd } }, now);
             if (!made.ok)
                 throw new RecipeError(made.message);
-            routineId = made.id;
+            flowId = made.flow;
         }
-        store.handle.prepare("UPDATE workflow_preview SET task_id=?,routine_id=? WHERE token=?").run(taskId, routineId, token);
-        store.recordAction({ at: now.toISOString(), actor, repo, taskId, runId: null, action: "workflow created", outcome: routineId === null ? "task" : "routine", source: "work" });
-        return { taskId, routineId };
+        store.handle.prepare("UPDATE workflow_preview SET task_id=?,flow_id=? WHERE token=?").run(taskId, flowId, token);
+        store.recordAction({ at: now.toISOString(), actor, repo, taskId, runId: null, action: "workflow created", outcome: flowId === null ? "task" : "scheduled flow", source: "work" });
+        return { taskId, flowId };
     });
 }
 export function saveWorkflowRecipe(store, actor, repo, token, now) {
@@ -342,7 +346,7 @@ export function saveWorkflowRecipe(store, actor, repo, token, now) {
 }
 export function workflowSteps(document) {
     return [
-        { title: "Authorize", detail: document.schedule === null ? "Your project policy applies. Without a matching policy, review and approve the scope first." : "Approve the repeating scope and exact agents once. New recipes start inactive." },
+        { title: "Authorize", detail: document.schedule === null ? "Your project policy applies. Without a matching policy, review and approve the scope first." : "Turn the schedule on when you're ready. Each run waits for approval under your project's rules." },
         ...(document.deliverable === "report" ? [{ title: "Investigate", detail: "Inspect the project and return a source-backed report." }] : [
             ...(document.schedule === null && document.planning !== "skip" ? [{ title: "Plan", detail: document.planning === "required" ? "Inspect the repository and plan before building." : "Plan first when the scope calls for repository discovery." }] : []),
             { title: "Build", detail: "Work in an isolated branch within the agreed scope." },
@@ -355,5 +359,5 @@ export function recipeScheduleWords(document, now) {
     if (document.schedule === null)
         return "Once, after its approval and readiness gates pass";
     const schedule = parseSchedule(document.schedule);
-    return `${describeSchedule(schedule)}. If approved now, first due ${firstFireAt(schedule, now)}. Missed slots run once; unfinished work prevents overlap.`;
+    return `${describeSchedule(schedule)}, one at a time (first ${firstFireAt(schedule, now)} if turned on now). Nothing repeats until you turn the schedule on.`;
 }

package/dist/run-closeout.d.ts

@@ -53,7 +53,7 @@ export type CloseoutOptions = StopOptions & {
 };
 /**
  * The worker's pass: every finished run of this host that still has a process witness open is closed out. A run
- * whose transport here still holds a live child, or whose held supervisor hasn't shut down, is left to that road.
+ * whose transport here still holds a live child is left to that road.
  * Returns what each run had stopped.
  */
 export declare function closeOutRuns(store: Store, clock: () => Date, options?: CloseoutOptions): Promise<{

package/dist/run-closeout.js

@@ -130,7 +130,7 @@ export function stoppedWords(done, graceMs = STOP_GRACE_MS) {
 }
 /**
  * The worker's pass: every finished run of this host that still has a process witness open is closed out. A run
- * whose transport here still holds a live child, or whose held supervisor hasn't shut down, is left to that road.
+ * whose transport here still holds a live child is left to that road.
  * Returns what each run had stopped.
  */
 export async function closeOutRuns(store, clock, options = {}) {
@@ -149,9 +149,6 @@ export async function closeOutRuns(store, clock, options = {}) {
         store.recordRunProcessExits(runId, clock());
         if (ownedProcessCount(runOwnerTag(store, runId)) > 0)
             continue;
-        const held = store.heldSessionOf(runId);
-        if (held !== null && held.endedAt === null)
-            continue;
         const witnesses = db.prepare(`SELECT pid, process_group, observed_at FROM run_process
       WHERE run = ? AND exited_at IS NULL AND pid IS NOT NULL AND containment IS NULL AND container IS NULL AND host = ?`).all(runId, hostname())
             .map(row => ({ pid: Number(row["pid"]), group: Number(row["process_group"]) === 1, observedAt: Date.parse(String(row["observed_at"])) }))

package/dist/scope.d.ts

@@ -123,14 +123,6 @@ export declare function canonicalChainJson(entries: readonly ChainEntry[]): stri
  * ":profile:"), so a chain digest can never collide with a profile
  * digest, truncated to the same 128 bits. */
 export declare function chainDigestOf(entries: readonly ChainEntry[]): string;
-/**
- * One chain entry's BINDING digest (E3d): the profile digest + auth mode
- * under their own domain. A run row pins this at admission (or base-cycle
- * open), and the dispatch proof re-derives it from the approved chain at
- * the run's index — so nothing downstream can swap WHICH entry a run
- * spends as, in model or in credential.
- */
-export declare function entryDigestOf(entry: ChainEntry): string;
 /** Strict re-hydration of a stored chain — every entry proved through the
  * single-profile rehydrator; anything unexpected is null. */
 export declare function chainFromJson(json: string | null): ChainEntry[] | null;
@@ -182,7 +174,7 @@ export declare function profileFromJson(json: string | null): ExecutionProfile |
 export type { AcceptanceCriterion, AcceptanceProblem };
 /**
  * Parse a rubric from already-JSON-parsed input (the planner's handoff, a
- * console form, a routine or template definition): fail closed, every
+ * console form, a template or a schedule's terms): fail closed, every
  * problem reported at once, each naming its path — the acceptance contract
  * (contracts/scope.ts) reads it. An absent or empty `value` parses to `[]`
  * with no problems: whether that is ALLOWED is a question for the caller
@@ -281,13 +273,10 @@ export type Scope = SavedScopeTerms & {
     profileJson?: string | null;
     approvedProfileJson?: string | null;
     digestVersion?: number;
-    /** v30 fallback chains. `proposedChainJson` is the WORKING chain snapshot
-     * the digest bound (present only when the repo has configured fallbacks);
-     * `approvedChainJson` is the immutable snapshot the seal COPIED from it;
-     * `approvalKind` names which the approval sealed. All undefined/null on a
-     * legacy single-profile scope — every scope until an operator configures a
-     * fallback chain. The runtime re-derives the active entry from
-     * `approvedChainJson`, never from mutable config. */
+    /** v30-v114 fallback chains (history): the working and sealed chain
+     * snapshots and which kind the approval sealed. Never written since v115
+     * (a re-approval writes `profile` and clears the sealed chain); an old
+     * chain approval still decodes and verifies. */
     proposedChainJson?: string | null;
     approvedChainJson?: string | null;
     approvalKind?: "profile" | "chain";
@@ -336,8 +325,8 @@ export type ScopeInput = {
     goal: string;
     outOfScope?: string | null;
     touches?: readonly string[];
-    /** v24: an EXPLICIT profile skips resolution in the store (routine
-     * firings and the demo's illustrative scopes use this road). */
+    /** v24: an EXPLICIT profile skips resolution in the store (a schedule's
+     * approved firings and the demo's illustrative scopes use this road). */
     profile?: ExecutionProfile;
     /** A task-level permission choice. When absent, the task's stored choice
      * (if any), then the installation default, decides the concrete profile. */
@@ -347,9 +336,6 @@ export type ScopeInput = {
     qualityMode?: QualityMode;
     /** v69: a prepared commit to install as this attempt — no agent runs. */
     candidate?: string | null;
-    /** v47: the task's declared risk. When absent, the task's stored choice
-     * (if any), else routine. A durable TASK choice, like qualityMode. */
-    riskLevel?: RiskLevel;
     /** Integer micro-dollars per build attempt; digest-bound when present. */
     budgetMicrousd?: number | null;
     /** The mode road's escalated filing default (C7): the resolved profile
@@ -504,7 +490,7 @@ export declare function authenticateAccount(store: Store, by: string, secret: st
  * v100: someone who signed in with the identity provider moments ago has no
  * password to type again. The console marks such a request with this, for
  * that person only, and an EMPTY password then stands for the fresh sign-in
- * at every step-up that reaches `authenticateApprover` (scope and routine
+ * at every step-up that reaches `authenticateApprover` (scope
  * approval, chat-action review, the console's own ceremonies). A typed
  * password is always checked, and nothing else stands in.
  */
@@ -574,12 +560,10 @@ export declare function approvalOf(scope: Scope | null): Approval;
 /**
  * THE STRICT STORED-SCOPE PROJECTION (v48 integrity): the ONE reading of
  * a filed scope that a seal and every consent surface believe. Nothing
- * lenient stands in for it — the working profile, chain, and route are
+ * lenient stands in for it — the working profile and route are
  * re-parsed from their raw bytes with exact keys, safe integers, and
- * timer-safe clocks; the chain's entries carry a well-formed auth mode;
- * the route's build and repair legs ARE the profile's exact pairs; on a
- * chain filing the profile IS the chain's entry zero; and the row's
- * digest re-derives, complete, from these very values. A legacy row (no
+ * timer-safe clocks; the route's build and repair legs ARE the profile's
+ * exact pairs; and the row's digest re-derives, complete, from these very values. A legacy row (no
  * route era) has no authority a person can newly agree to. One
  * disagreement is the words, and nothing — no nonce, no password field,
  * no approve action, no seal — is exposed on it.
@@ -587,7 +571,6 @@ export declare function approvalOf(scope: Scope | null): Approval;
 export type ScopeAuthority = {
     ok: true;
     profile: ExecutionProfile;
-    chain: ChainEntry[] | null;
     route: PhaseRoute;
     digest: string;
     authMode: AuthMode | null;
@@ -637,40 +620,3 @@ export declare function acceptanceWords(criteria: readonly AcceptanceCriterion[]
 export declare function scopeRouteWords(scope: Pick<Scope, "proposedRouteJson">, readiness?: ReadinessLookup): string[];
 /** The scope, in the words an operator has to be able to agree or disagree with. */
 export declare function describeScope(scope: Scope, readiness?: ReadinessLookup): string[];
-/** The chain's approval-card lines; empty for a single-profile scope. */
-export declare function chainWords(chain: ChainEntry[] | null): string[];
-/**
- * EVERY rendered term of one watched attempt — what the form shows is what
- * the password signs, byte for byte. The subset the dispatch proof
- * re-derives (scopeDigest, profileDigest, profileJson, repo, head) is read
- * back by the builder and the coordinator; the rest are the product terms
- * the ceremony renders in words: the budget as a STOP THRESHOLD, the turn
- * cap, the per-turn clock whose expiry is SESSION-FATAL, and the absolute
- * expiry. Continuation carries the parent attempt and the follow-up text
- * INSIDE the signed terms (v3 R7).
- */
-export type AttendedTerms = {
-    taskId: string;
-    /** v28: HOW liveness is renewed — a SIGNED term, because liveness is an
-     * admission predicate, not decoration. "console-visible" = any open
-     * console page of this server renews use. Legacy terms lack the field
-     * and beat-all refuses them (they were signed as page-bound). */
-    attentionMode: "console-visible";
-    scopeDigest: string;
-    profileDigest: string;
-    profileJson: string;
-    repo: string;
-    runner: string;
-    runnerGeneration: number;
-    head: string;
-    maxSessionTurns: number;
-    budgetMicrousd: number;
-    turnTimeoutSeconds: number;
-    absoluteExpiry: string;
-    parentRun?: number | null;
-    followup?: string | null;
-};
-/** Deterministic bytes: sorted keys, undefined dropped — the signed text. */
-export declare function attendedTermsJson(terms: AttendedTerms): string;
-/** The composite digest one password signs (ruling 12), domain-separated. */
-export declare function attendedDigestOf(terms: AttendedTerms): string;