toolroll 0.9.53 → 0.9.55

package/dist/contracts/chat-tables.js

@@ -1,129 +1,197 @@
 /**
- * The Slack, Discord and Teams receipt tables (chat-delivery-state.ts keeps their rows). A leaf: it imports nothing, so
- * the store can create these tables without loading the chat state modules that themselves import the store.
+ * The one set of chat tables every chat app shares (v116): Telegram, Slack, Discord and Teams keep their pairings,
+ * received events, planned message parts, buttons, rooms and delivery receipts here, each row keyed by `provider`.
+ * A row's identity is (provider, id): ids carried over from the per-app tables keep their numbers, and nothing infers
+ * the app from an id. A leaf: it imports nothing, so the store creates these tables without loading the chat modules.
  */
-const CHAT_SCHEMA = `
+export const CHAT_PROVIDERS = ["telegram", "slack", "discord", "teams"];
+export const isChatProvider = (value) => CHAT_PROVIDERS.includes(value);
+const PROVIDER = `provider TEXT NOT NULL CHECK (provider IN (${CHAT_PROVIDERS.map(one => `'${one}'`).join(",")}))`;
+export const CHAT_SCHEMA = `
+-- One person's chat in one app, speaking as one approver generation. Revoked, never deleted.
+-- installation: the bot (Telegram) or workspace app; member: the app's user id; channel: their private chat.
 CREATE TABLE IF NOT EXISTS chat_binding (
- id INTEGER PRIMARY KEY AUTOINCREMENT, installation TEXT NOT NULL,
- team TEXT NOT NULL, app TEXT NOT NULL, member TEXT NOT NULL, channel TEXT NOT NULL,
- approver TEXT NOT NULL, generation INTEGER NOT NULL, created TEXT NOT NULL, revoked TEXT
-);
-CREATE UNIQUE INDEX IF NOT EXISTS chat_one_binding_member ON chat_binding(installation, member) WHERE revoked IS NULL;
+ ${PROVIDER}, id INTEGER NOT NULL, installation TEXT NOT NULL, team TEXT NOT NULL, app TEXT NOT NULL,
+ member TEXT NOT NULL, channel TEXT NOT NULL, approver TEXT NOT NULL, generation INTEGER NOT NULL,
+ created TEXT NOT NULL, created_by TEXT, pair_event TEXT, revoked TEXT, revoked_by TEXT,
+ PRIMARY KEY (provider, id)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS chat_binding_live ON chat_binding(provider, installation, member) WHERE revoked IS NULL;
+CREATE INDEX IF NOT EXISTS chat_binding_approver ON chat_binding(provider, approver) WHERE revoked IS NULL;
+-- One-time pairing codes, by hash. installation NULL: any installation of the app (a Telegram code works on its bot).
 CREATE TABLE IF NOT EXISTS chat_pair (
- hash TEXT PRIMARY KEY, installation TEXT NOT NULL, approver TEXT NOT NULL,
- generation INTEGER NOT NULL, expires TEXT NOT NULL, consumed TEXT
+ ${PROVIDER}, hash TEXT NOT NULL, installation TEXT, approver TEXT NOT NULL, generation INTEGER NOT NULL,
+ created TEXT, created_by TEXT, expires TEXT NOT NULL, consumed TEXT, consumed_channel TEXT, consumed_member TEXT, consumed_event TEXT,
+ PRIMARY KEY (provider, hash)
 );
+-- Everything an app sent us, once each (the key is the idempotency). kind 'update' is an applied (or pushed and
+-- waiting) Telegram update; 'message' is a message the lead answers, queued to running to done or failed.
+-- session: the lead session its turn was dispatched under, a pointer to its receipt (never an authority).
 CREATE TABLE IF NOT EXISTS chat_event (
- id TEXT PRIMARY KEY, installation TEXT NOT NULL, binding INTEGER REFERENCES chat_binding(id),
- kind TEXT NOT NULL CHECK(kind IN ('message','action','pair','notice')),
+ ${PROVIDER}, id TEXT NOT NULL, installation TEXT NOT NULL, binding INTEGER,
+ kind TEXT NOT NULL CHECK (kind IN ('message','action','pair','notice','update')),
  channel TEXT NOT NULL, member TEXT NOT NULL, ts TEXT NOT NULL, thread TEXT NOT NULL,
- payload TEXT NOT NULL, created TEXT NOT NULL,
- session INTEGER REFERENCES mate_session(id), state TEXT NOT NULL DEFAULT 'queued' CHECK(state IN ('queued','done','dropped')),
- next_at TEXT, problem TEXT
-);
-CREATE INDEX IF NOT EXISTS chat_pending_event ON chat_event(installation,state,next_at);
+ payload TEXT NOT NULL, created TEXT NOT NULL, session INTEGER,
+ state TEXT NOT NULL DEFAULT 'queued' CHECK (state IN ('queued','running','done','failed','dropped')),
+ next_at TEXT, problem TEXT, claim_owner TEXT, claim_until TEXT, attempts INTEGER NOT NULL DEFAULT 0,
+ turn INTEGER, started TEXT, finished TEXT, result TEXT, reply TEXT,
+ PRIMARY KEY (provider, id),
+ FOREIGN KEY (provider, binding) REFERENCES chat_binding(provider, id)
+);
+CREATE INDEX IF NOT EXISTS chat_event_pending ON chat_event(provider, installation, state, next_at);
+CREATE INDEX IF NOT EXISTS chat_event_binding ON chat_event(provider, binding, state);
+-- What we send, planned before any send and marked sent only on the app's own message id.
 CREATE TABLE IF NOT EXISTS chat_part (
- id INTEGER PRIMARY KEY AUTOINCREMENT, event TEXT NOT NULL REFERENCES chat_event(id), ordinal INTEGER NOT NULL,
- payload TEXT NOT NULL, state TEXT NOT NULL DEFAULT 'pending' CHECK(state IN ('pending','sent','dropped')),
+ ${PROVIDER}, id INTEGER NOT NULL, event TEXT NOT NULL, ordinal INTEGER NOT NULL, payload TEXT NOT NULL,
+ state TEXT NOT NULL DEFAULT 'pending' CHECK (state IN ('pending','sent','dropped')),
  message TEXT, file TEXT, uploaded INTEGER NOT NULL DEFAULT 0, attempts INTEGER NOT NULL DEFAULT 0,
- uncertain INTEGER NOT NULL DEFAULT 0, next_at TEXT, problem TEXT, created TEXT NOT NULL,
- UNIQUE(event,ordinal)
-);
+ uncertain INTEGER NOT NULL DEFAULT 0, next_at TEXT, problem TEXT, created TEXT NOT NULL, sent TEXT,
+ PRIMARY KEY (provider, id), UNIQUE (provider, event, ordinal),
+ FOREIGN KEY (provider, event) REFERENCES chat_event(provider, id)
+);
+CREATE INDEX IF NOT EXISTS chat_part_pending ON chat_part(provider, state, next_at);
+CREATE INDEX IF NOT EXISTS chat_part_message ON chat_part(provider, message);
+-- A lead proposal's buttons (proposal), or a builder decision's (decision, option_id), one opaque token each.
+-- A button rides its planned part, or (Telegram) the binding, chat and message it was placed on.
 CREATE TABLE IF NOT EXISTS chat_action (
- token TEXT PRIMARY KEY, part INTEGER NOT NULL REFERENCES chat_part(id),
- proposal INTEGER NOT NULL REFERENCES mate_proposal(id), phase TEXT NOT NULL CHECK(phase IN ('confirm','dismiss','yes','cancel')),
- expires TEXT NOT NULL, consumed TEXT
-);
+ ${PROVIDER}, token TEXT NOT NULL, part INTEGER, binding INTEGER, chat TEXT, message TEXT,
+ proposal INTEGER REFERENCES mate_proposal(id) ON DELETE CASCADE,
+ decision INTEGER REFERENCES decision(id) ON DELETE CASCADE, option_id TEXT, note_digest TEXT,
+ phase TEXT NOT NULL CHECK (phase IN ('confirm','dismiss','yes','cancel','choose')),
+ created TEXT, expires TEXT, consumed TEXT,
+ PRIMARY KEY (provider, token),
+ CHECK ((proposal IS NULL) <> (decision IS NULL)),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id)
+);
+CREATE INDEX IF NOT EXISTS chat_action_part ON chat_action(provider, part);
+CREATE INDEX IF NOT EXISTS chat_action_proposal ON chat_action(proposal);
+CREATE INDEX IF NOT EXISTS chat_action_decision ON chat_action(decision);
 CREATE TABLE IF NOT EXISTS chat_progress (
- binding INTEGER NOT NULL REFERENCES chat_binding(id), run INTEGER NOT NULL REFERENCES run(id),
- part INTEGER NOT NULL REFERENCES chat_part(id), digest TEXT NOT NULL,
- PRIMARY KEY(binding,run)
+ ${PROVIDER}, binding INTEGER NOT NULL, run INTEGER NOT NULL REFERENCES run(id), part INTEGER NOT NULL, digest TEXT NOT NULL,
+ PRIMARY KEY (provider, binding, run),
+ FOREIGN KEY (provider, binding) REFERENCES chat_binding(provider, id),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id)
 );
+-- One live worker per installation (lease, its generation and the poll cursor), its connection and retry state,
+-- the newest notification its notices started from, and where (Telegram) pushes updates.
 CREATE TABLE IF NOT EXISTS chat_runtime (
- installation TEXT PRIMARY KEY, owner TEXT, lease_until TEXT, connected TEXT,
- problem TEXT, retry_at TEXT, notification INTEGER NOT NULL DEFAULT 0
+ ${PROVIDER}, installation TEXT NOT NULL, owner TEXT, lease_until TEXT, generation INTEGER NOT NULL DEFAULT 0,
+ cursor INTEGER NOT NULL DEFAULT 0, heartbeat TEXT, connected TEXT, problem TEXT, retry_at TEXT,
+ notification INTEGER NOT NULL DEFAULT 0, push_url TEXT, push_at TEXT, push_problem TEXT,
+ PRIMARY KEY (provider, installation)
 );
-`;
-/** v73: a chat's place in the shared team conversations — a channel follows one
- * conversation, a DM may select one. Rows are revoked, never deleted. */
-const CHAT_ROOM_SCHEMA = `
+-- A chat's place in the shared team conversations: a group follows one conversation, a private chat may select one.
 CREATE TABLE IF NOT EXISTS chat_room (
- id INTEGER PRIMARY KEY AUTOINCREMENT, installation TEXT NOT NULL, chat TEXT NOT NULL,
- kind TEXT NOT NULL CHECK(kind IN ('group','private')), conversation TEXT NOT NULL,
- binding INTEGER NOT NULL REFERENCES chat_binding(id),
- bound_by TEXT NOT NULL, bound TEXT NOT NULL, cursor INTEGER NOT NULL DEFAULT 0,
- revoked TEXT, revoked_by TEXT
-);
-CREATE UNIQUE INDEX IF NOT EXISTS chat_room_live ON chat_room(installation, chat) WHERE revoked IS NULL;
-CREATE UNIQUE INDEX IF NOT EXISTS chat_room_group ON chat_room(conversation) WHERE revoked IS NULL AND kind='group';
+ ${PROVIDER}, id INTEGER NOT NULL, installation TEXT NOT NULL, chat TEXT NOT NULL,
+ kind TEXT NOT NULL CHECK (kind IN ('group','private')), conversation TEXT NOT NULL REFERENCES team_conversation(id),
+ binding INTEGER NOT NULL, bound_by TEXT NOT NULL, bound TEXT NOT NULL, cursor INTEGER NOT NULL DEFAULT 0,
+ revoked TEXT, revoked_by TEXT,
+ PRIMARY KEY (provider, id),
+ FOREIGN KEY (provider, binding) REFERENCES chat_binding(provider, id)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS chat_room_live ON chat_room(provider, installation, chat) WHERE revoked IS NULL;
+CREATE UNIQUE INDEX IF NOT EXISTS chat_room_group ON chat_room(provider, conversation) WHERE revoked IS NULL AND kind = 'group';
+-- Small transport facts an app must remember per chat (a Teams service URL). Never credentials.
 CREATE TABLE IF NOT EXISTS chat_meta (
- installation TEXT NOT NULL, key TEXT NOT NULL, value TEXT NOT NULL, updated TEXT NOT NULL,
- PRIMARY KEY(installation, key)
+ ${PROVIDER}, installation TEXT NOT NULL, key TEXT NOT NULL, value TEXT NOT NULL, updated TEXT NOT NULL,
+ PRIMARY KEY (provider, installation, key)
 );
-`;
-/** v88: flow decisions in the chat app, as on Telegram (telegram-flow.ts).
- * A button is one opaque token for one visit (card, entry) of one card, on
- * the part it rides; Edit and Send back open a prompt the person's next
- * message in their DM answers. */
-const CHAT_FLOW_SCHEMA = `
+-- A flow decision's buttons (Approve, Edit, Send back, and the Yes or Cancel Approve arms) for one visit of one card.
 CREATE TABLE IF NOT EXISTS chat_flow_action (
- token TEXT PRIMARY KEY, part INTEGER NOT NULL REFERENCES chat_part(id),
+ ${PROVIDER}, token TEXT NOT NULL, part INTEGER, binding INTEGER, chat TEXT, message TEXT,
  card INTEGER NOT NULL REFERENCES flow_card(id), entry INTEGER NOT NULL,
- action TEXT NOT NULL CHECK(action IN ('approve','edit','send-back')), expires TEXT NOT NULL, consumed TEXT
+ action TEXT NOT NULL CHECK (action IN ('approve','edit','send-back','yes','cancel')),
+ created TEXT, expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, token),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id)
 );
 CREATE INDEX IF NOT EXISTS chat_flow_action_visit ON chat_flow_action(card, entry);
+CREATE INDEX IF NOT EXISTS chat_flow_action_part ON chat_flow_action(provider, part);
+-- Edit and Send back wait for the person's next message (or, on Telegram, a reply to the prompt message).
 CREATE TABLE IF NOT EXISTS chat_flow_prompt (
- id INTEGER PRIMARY KEY AUTOINCREMENT, binding INTEGER NOT NULL REFERENCES chat_binding(id),
+ ${PROVIDER}, id INTEGER NOT NULL, binding INTEGER NOT NULL, chat TEXT, message TEXT,
  card INTEGER NOT NULL REFERENCES flow_card(id), entry INTEGER NOT NULL,
- mode TEXT NOT NULL CHECK(mode IN ('edit','send-back')), created TEXT NOT NULL, expires TEXT NOT NULL, consumed TEXT
+ mode TEXT NOT NULL CHECK (mode IN ('edit','send-back')), created TEXT NOT NULL, expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, id)
 );
-CREATE INDEX IF NOT EXISTS chat_flow_prompt_open ON chat_flow_prompt(binding, consumed);
-`;
-/** A flow's "Person chooses" zone in the chat app (flow-send.ts): one button per option (choice is its index, label its words
- * when sent) for one visit of one card, on the part it rides. A reply in that notice's thread is the note; chat_flow_note
- * is "Use this as your note?" Yes / No about one other message (held: its event; words: what it said, kept only until
- * answered, as an event's own payload is cleared once it is handled), asked once per visit.
- * Never in CHAT_TABLES: an older database has no such table until this schema creates it. */
-const CHAT_FLOW_CHOICE_SCHEMA = `
+CREATE INDEX IF NOT EXISTS chat_flow_prompt_open ON chat_flow_prompt(provider, binding, consumed);
+CREATE UNIQUE INDEX IF NOT EXISTS chat_flow_prompt_message ON chat_flow_prompt(provider, chat, message) WHERE message IS NOT NULL;
+-- A flow's "Person chooses" buttons: one per option (choice is its index, label its words when sent).
 CREATE TABLE IF NOT EXISTS chat_flow_choice (
- token TEXT PRIMARY KEY, part INTEGER NOT NULL REFERENCES chat_part(id),
+ ${PROVIDER}, token TEXT NOT NULL, part INTEGER, binding INTEGER, chat TEXT, message TEXT,
  card INTEGER NOT NULL REFERENCES flow_card(id), entry INTEGER NOT NULL,
- choice INTEGER NOT NULL, label TEXT NOT NULL, expires TEXT NOT NULL, consumed TEXT
+ choice INTEGER NOT NULL, label TEXT NOT NULL, created TEXT, expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, token),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id)
 );
 CREATE INDEX IF NOT EXISTS chat_flow_choice_visit ON chat_flow_choice(card, entry);
+CREATE INDEX IF NOT EXISTS chat_flow_choice_part ON chat_flow_choice(provider, part);
+-- "Use this as your note?" Yes / No about the person's message held (its event; words kept only until answered).
 CREATE TABLE IF NOT EXISTS chat_flow_note (
- token TEXT PRIMARY KEY, part INTEGER NOT NULL REFERENCES chat_part(id),
+ ${PROVIDER}, token TEXT NOT NULL, part INTEGER NOT NULL,
  card INTEGER NOT NULL REFERENCES flow_card(id), entry INTEGER NOT NULL,
- held TEXT NOT NULL, words TEXT, answer TEXT NOT NULL CHECK(answer IN ('yes','no')), expires TEXT NOT NULL, consumed TEXT
+ held TEXT NOT NULL, words TEXT, answer TEXT NOT NULL CHECK (answer IN ('yes','no')), expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, token),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id)
 );
 CREATE INDEX IF NOT EXISTS chat_flow_note_visit ON chat_flow_note(card, entry);
-`;
-/** v93: a teammate's question in the chat app. One button per option (choice)
- * and one to answer in words (choice NULL); that one opens a prompt the
- * person's next message in their DM answers. Never in CHAT_TABLES: an older
- * database has no such tables until this schema creates them. */
-const CHAT_QUESTION_SCHEMA = `
+-- A teammate's question: one button per option and one to answer in words (choice NULL).
 CREATE TABLE IF NOT EXISTS chat_question_action (
- token TEXT PRIMARY KEY, part INTEGER NOT NULL REFERENCES chat_part(id),
- question INTEGER NOT NULL REFERENCES teammate_question(id), choice TEXT, expires TEXT NOT NULL, consumed TEXT
+ ${PROVIDER}, token TEXT NOT NULL, part INTEGER, binding INTEGER, chat TEXT, message TEXT,
+ question INTEGER NOT NULL REFERENCES teammate_question(id), choice TEXT, created TEXT, expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, token),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id)
 );
 CREATE INDEX IF NOT EXISTS chat_question_action_question ON chat_question_action(question);
 CREATE TABLE IF NOT EXISTS chat_question_prompt (
- id INTEGER PRIMARY KEY AUTOINCREMENT, binding INTEGER NOT NULL REFERENCES chat_binding(id),
- question INTEGER NOT NULL REFERENCES teammate_question(id), created TEXT NOT NULL, expires TEXT NOT NULL, consumed TEXT
+ ${PROVIDER}, id INTEGER NOT NULL, binding INTEGER NOT NULL, chat TEXT, message TEXT,
+ question INTEGER NOT NULL REFERENCES teammate_question(id), created TEXT NOT NULL, expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, id)
 );
-CREATE INDEX IF NOT EXISTS chat_question_prompt_open ON chat_question_prompt(binding, consumed);
-`;
-/** The lead's question to its owner (ask_owner) in the chat app: one button per option (choice is its index) and one for
- * "Something else" (choice NULL). A tap sends the option as the owner's next message. Never in CHAT_TABLES. */
-const CHAT_ASK_SCHEMA = `
+CREATE INDEX IF NOT EXISTS chat_question_prompt_open ON chat_question_prompt(provider, binding, consumed);
+CREATE UNIQUE INDEX IF NOT EXISTS chat_question_prompt_message ON chat_question_prompt(provider, chat, message) WHERE message IS NOT NULL;
+-- The lead's question to its owner (ask_owner): one button per option and one for "Something else" (choice NULL).
 CREATE TABLE IF NOT EXISTS chat_ask_action (
- token TEXT PRIMARY KEY, part INTEGER NOT NULL REFERENCES chat_part(id) ON DELETE CASCADE,
- turn INTEGER NOT NULL, choice INTEGER, expires TEXT NOT NULL, consumed TEXT
+ ${PROVIDER}, token TEXT NOT NULL, part INTEGER NOT NULL, turn INTEGER NOT NULL, choice INTEGER, expires TEXT NOT NULL, consumed TEXT,
+ PRIMARY KEY (provider, token),
+ FOREIGN KEY (provider, part) REFERENCES chat_part(provider, id) ON DELETE CASCADE
 );
 CREATE INDEX IF NOT EXISTS chat_ask_action_turn ON chat_ask_action(turn);
+-- What one sent message carried, so a reply to it is about exactly that: a notification (kind 'notification', one row
+-- per notification it showed), a builder decision ('decision') or the task a status showed ('task').
+CREATE TABLE IF NOT EXISTS chat_message_ref (
+ ${PROVIDER}, binding INTEGER NOT NULL, chat TEXT NOT NULL, message TEXT NOT NULL,
+ kind TEXT NOT NULL CHECK (kind IN ('notification','decision','task')),
+ notification INTEGER REFERENCES notification(id), destination TEXT, project TEXT,
+ task_ref INTEGER REFERENCES task_ref(id), task_id TEXT, run INTEGER,
+ decision INTEGER REFERENCES decision(id) ON DELETE CASCADE, created TEXT NOT NULL,
+ CHECK ((kind = 'notification') = (notification IS NOT NULL AND destination IS NOT NULL)),
+ CHECK ((kind = 'decision') = (decision IS NOT NULL)),
+ CHECK (kind <> 'task' OR task_id IS NOT NULL)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS chat_message_ref_notification ON chat_message_ref(provider, binding, chat, message, notification) WHERE kind = 'notification';
+CREATE UNIQUE INDEX IF NOT EXISTS chat_message_ref_one ON chat_message_ref(provider, binding, chat, message, kind) WHERE kind <> 'notification';
+CREATE INDEX IF NOT EXISTS chat_message_ref_destination ON chat_message_ref(destination, notification);
+CREATE INDEX IF NOT EXISTS chat_message_ref_task ON chat_message_ref(destination, task_ref) WHERE kind = 'notification';
+-- A note typed as a reply to a builder decision, held until a tap answers with it. Only a later event replaces it.
+CREATE TABLE IF NOT EXISTS chat_note_draft (
+ ${PROVIDER}, id INTEGER NOT NULL, binding INTEGER NOT NULL,
+ decision INTEGER NOT NULL REFERENCES decision(id) ON DELETE CASCADE, event INTEGER NOT NULL,
+ message TEXT NOT NULL, reply_to TEXT NOT NULL, note TEXT NOT NULL,
+ state TEXT NOT NULL DEFAULT 'pending' CHECK (state IN ('pending','armed','superseded','consumed','discarded')),
+ created TEXT NOT NULL, expires TEXT NOT NULL,
+ PRIMARY KEY (provider, id),
+ FOREIGN KEY (provider, binding) REFERENCES chat_binding(provider, id)
+);
+CREATE UNIQUE INDEX IF NOT EXISTS chat_note_draft_live ON chat_note_draft(provider, binding, decision) WHERE state IN ('pending','armed');
+-- Away mode: routine facts wait and go as one digest every every_ms (null: each fact as it lands).
+CREATE TABLE IF NOT EXISTS chat_digest (
+ ${PROVIDER}, every_ms INTEGER, set_by TEXT, set_at TEXT, last_sent_at TEXT,
+ PRIMARY KEY (provider)
+);
 `;
-const CHAT_TABLES = [
+/** Every shared chat table, parents before children. */
+export const CHAT_TABLES = [
     "chat_binding",
     "chat_pair",
     "chat_event",
@@ -131,6 +199,16 @@ const CHAT_TABLES = [
     "chat_action",
     "chat_progress",
     "chat_runtime",
+    "chat_room",
+    "chat_meta",
+    "chat_flow_action",
+    "chat_flow_prompt",
+    "chat_flow_choice",
+    "chat_flow_note",
+    "chat_question_action",
+    "chat_question_prompt",
+    "chat_ask_action",
+    "chat_message_ref",
+    "chat_note_draft",
+    "chat_digest",
 ];
-export const chatSchema = (channel) => (CHAT_SCHEMA + CHAT_ROOM_SCHEMA + CHAT_FLOW_SCHEMA + CHAT_FLOW_CHOICE_SCHEMA + CHAT_QUESTION_SCHEMA + CHAT_ASK_SCHEMA).replaceAll("chat_", `${channel}_`);
-export const chatTables = (channel) => CHAT_TABLES.map((name) => name.replace("chat_", `${channel}_`));

package/dist/contracts/cli.d.ts

@@ -323,13 +323,12 @@ export declare const COMMAND_OUTPUTS: {
                 assets: "assets";
                 auth: "auth";
                 chat: "chat";
-                "chat-stream": "chat-stream";
                 cli: "cli";
                 console: "console";
                 decisions: "decisions";
-                "flow-stream": "flow-stream";
                 flows: "flows";
                 health: "health";
+                live: "live";
                 mcp: "mcp";
                 metrics: "metrics";
                 other: "other";
@@ -339,7 +338,6 @@ export declare const COMMAND_OUTPUTS: {
                 settings: "settings";
                 tasks: "tasks";
                 team: "team";
-                "team-stream": "team-stream";
             }> & z.core.$partial, z.ZodObject<{
                 count: z.ZodNumber;
                 p50Ms: z.ZodNullable<z.ZodNumber>;

package/dist/contracts/console-api.d.ts

@@ -177,7 +177,7 @@ export declare const CONSOLE_FORMS: {
 };
 export type ConsoleFormName = keyof typeof CONSOLE_FORMS;
 /** The console POSTs whose handlers read no field (sign-out not even the shared guard): their contract is the empty form. */
-export declare const BODILESS_POSTS: readonly ["POST /settings/lead/on", "POST /r/<run>/draft-repair", "POST /ledger/checkpoint", "POST /settings/backups/now", "POST /mode/revoke", "POST /settings/telegram/retry", "POST /providers/<provider>/resume", "POST /logout", "POST /t/<task>/unhold", "POST /t/<task>/plan", "POST /t/<task>/retry-review"];
+export declare const BODILESS_POSTS: readonly ["POST /settings/models/<unknown action>", "POST /settings/lead/on", "POST /r/<run>/draft-repair", "POST /ledger/checkpoint", "POST /settings/backups/now", "POST /mode/revoke", "POST /settings/telegram/retry", "POST /providers/<provider>/resume", "POST /logout", "POST /t/<task>/unhold", "POST /t/<task>/plan", "POST /t/<task>/retry-review"];
 /** The field names a console form's handler may read. */
 export type FormFieldOf<N extends ConsoleFormName> = (typeof CONSOLE_FORMS)[N] extends FormContract<infer K> ? K : never;
 /** `GET /ledger?format=json`: the chain's state, a page of entries (newest first) and the cursor for the next. */

package/dist/contracts/console-api.js

@@ -73,10 +73,10 @@ export const CONSOLE_FORMS = {
     mutationGuard: formContract("POST (every signed-in form)", ["csrf", "token", "digest", "nonce", "confirm"]),
     ledgerTarget: formContract("POST (the action ledger's project)", ["repo"]),
     projectCeiling: formContract("POST (project ceiling)", ["repo"]),
-    demo: formContract("POST /chat/demo/<act>", ["message", "note"]),
+    demo: formContract("POST /chat/demo/ask, /chat/demo/<id>/approve|change|revise|complete", ["message", "note"]),
     updatesDismiss: formContract("POST /settings/updates/dismiss", ["version", "quiet", "return"]),
     updatesChecks: formContract("POST /settings/updates/checks", ["check"]),
-    code: formContract("POST /code, /code/start, /code/<session>/<act>", ["repo", "password", "title", "model", "prompt", "requestId", "base", "candidate", "goal", "acceptance", "visual", "decision", "answers"], { prefixes: ["question:"] }),
+    code: formContract("POST /code, /code/start, /code/<session>/<act>, /code/<anything else>", ["repo", "password", "title", "model", "prompt", "requestId", "base", "candidate", "goal", "acceptance", "visual", "decision", "answers"], { prefixes: ["question:"] }),
     skillsRevise: formContract("POST /settings/skills/revise", ["run", "repo", "feedback", "nonce"]),
     skillsChange: formContract("POST /settings/skills/import, /settings/skills/change", ["repo", "identity", "revision", "method", "content", "files", "url", "action", "sha", "sample", "nonce", "restore"]),
     kit: formContract("POST /kits/<kit>/<act>", ["repo"]),
@@ -111,11 +111,11 @@ export const CONSOLE_FORMS = {
     knowledgeChange: formContract("POST /settings/knowledge/change", ["repo", "action", "identity", "revision", "instructions", "title", "content", "path", "id", "restore"]),
     learningChange: formContract("POST /settings/learning/change", ["repo", "action", "identity", "revision", "lesson", "version", "sha"]),
     projectSetup: formContract("POST /control/setup-preview, /control/setup-approve, /control/instructions-preview, /control/instructions-approve", ["repo", "nonce", "fingerprint", "token", "provider", "model", "command", "seconds"]),
-    slack: formContract("POST /settings/slack/<connect|pair|unpair|disconnect|alerts>", ["password", "app-token", "bot-token"]),
+    slack: formContract("POST /settings/slack/connect|pair|unpair|disconnect|alerts", ["password", "app-token", "bot-token"]),
     chatApproval: formContract("POST /settings/chat-approval/confirm, /settings/chat-approval/save, /settings/chat-approval/off", ["scope", "full-access", "cap-usd", "nonce", "digest", "token"]),
     telegramPair: formContract("POST /settings/telegram/pair, /settings/telegram/unpair", ["password"]),
-    teams: formContract("POST /settings/teams/<connect|pair|unpair|disconnect|alerts>", ["password", "app-id", "tenant", "secret"]),
-    discord: formContract("POST /settings/discord/<connect|pair|unpair|disconnect|alerts>", ["password", "bot-token"]),
+    teams: formContract("POST /settings/teams/connect|pair|unpair|disconnect|alerts", ["password", "app-id", "tenant", "secret"]),
+    discord: formContract("POST /settings/discord/connect|pair|unpair|disconnect|alerts", ["password", "bot-token"]),
     messaging: formContract("POST /settings/messaging", ["primary"]),
     permissionDefault: formContract("POST /settings/permission-default", ["permission-mode"]),
     qualityDefault: formContract("POST /settings/quality-default", ["quality-mode"]),
@@ -188,6 +188,7 @@ export const CONSOLE_FORMS = {
 };
 /** The console POSTs whose handlers read no field (sign-out not even the shared guard): their contract is the empty form. */
 export const BODILESS_POSTS = [
+    "POST /settings/models/<unknown action>",
     "POST /settings/lead/on",
     "POST /r/<run>/draft-repair",
     "POST /ledger/checkpoint",

package/dist/contracts/discord-callback.js

@@ -5,6 +5,7 @@
  * message whose button can't be read is answered with why (`data.custom_id: not a Toolroll button`), and nothing is done.
  */
 import { z } from "zod";
+import { CHAT_BUTTON_TOKEN } from "./chat-content.js";
 import { parseContract } from "./contract.js";
 const user = z.object({ id: z.string() });
 /** The interaction around a tap (type 3: a message component): the app, the person, the channel, the message. */
@@ -22,7 +23,7 @@ export const discordComponentInteractionSchema = z.object({
 });
 /** Toolroll's button data: `so_` and a one-time token. */
 export const discordButtonSchema = z.object({
-    custom_id: z.string().regex(/^so_[a-f0-9]{32}$/, { error: "not a Toolroll button" }),
+    custom_id: z.string().regex(new RegExp(`^so_${CHAT_BUTTON_TOKEN.source.slice(1)}`), { error: "not a Toolroll button" }),
 });
 export function readDiscordComponentInteraction(body) {
     return parseContract(discordComponentInteractionSchema, body);

package/dist/contracts/health.d.ts

@@ -21,13 +21,12 @@ export declare const healthSnapshotSchema: z.ZodObject<{
         assets: "assets";
         auth: "auth";
         chat: "chat";
-        "chat-stream": "chat-stream";
         cli: "cli";
         console: "console";
         decisions: "decisions";
-        "flow-stream": "flow-stream";
         flows: "flows";
         health: "health";
+        live: "live";
         mcp: "mcp";
         metrics: "metrics";
         other: "other";
@@ -37,7 +36,6 @@ export declare const healthSnapshotSchema: z.ZodObject<{
         settings: "settings";
         tasks: "tasks";
         team: "team";
-        "team-stream": "team-stream";
     }> & z.core.$partial, z.ZodObject<{
         count: z.ZodNumber;
         p50Ms: z.ZodNullable<z.ZodNumber>;

package/dist/contracts/slack-callback.js

@@ -6,11 +6,12 @@
  */
 import { z } from "zod";
 import { parseContract } from "./contract.js";
+import { CHAT_BUTTON_TOKEN } from "./chat-content.js";
 /** Toolroll's buttons: toolroll_* since the rename; standing_orders_* buttons on older messages still work. */
-export const SLACK_BUTTON_ACTION = /^(?:toolroll|standing_orders)_(?:confirm|dismiss|yes|cancel|flow_approve|flow_edit|flow_send_back|flow_choose_[0-3]|flow_note_(?:yes|no)|question_choice|question_words)$/;
+export const SLACK_BUTTON_ACTION = /^(?:toolroll|standing_orders)_(?:confirm|dismiss|yes|cancel|flow_approve|flow_edit|flow_send_back|flow_choose_[0-3]|flow_note_(?:yes|no)|question_choice|question_words|decide_[0-9]{1,2})$/;
 /** A link button opens its page in Slack's own client; Slack still reports the tap, and there is nothing to do. */
 export const SLACK_LINK_ACTION = /^(?:toolroll|standing_orders)_link(?:_[0-9]+)?$/;
-const token = z.string().regex(/^[a-f0-9]{32}$/, { error: "must be a Toolroll button token" });
+const token = z.string().regex(CHAT_BUTTON_TOKEN, { error: "must be a Toolroll button token" });
 /** The interaction around a tap: who, and the message the button is on. */
 export const slackBlockActionsSchema = z.object({
     type: z.literal("block_actions"),

package/dist/contracts/store-json.d.ts

@@ -155,10 +155,6 @@ declare const STORE_COLUMN_VALUES: {
             note: z.ZodOptional<z.ZodNullable<z.ZodString>>;
         }, z.core.$loose>>;
     }, z.core.$loose>;
-    readonly "telegram_conversation_part.keyboard_json": z.ZodArray<z.ZodArray<z.ZodObject<{
-        text: z.ZodString;
-        callback_data: z.ZodString;
-    }, z.core.$loose>>>;
     readonly "publication_grant.capabilities": z.ZodArray<z.ZodEnum<{
         "open-pr": "open-pr";
         "push-branch": "push-branch";
@@ -254,7 +250,7 @@ declare const STORE_COLUMN_VALUES: {
 export type StoreColumn = keyof typeof STORE_COLUMN_VALUES;
 export type StoreColumnValue<C extends StoreColumn> = z.infer<(typeof STORE_COLUMN_VALUES)[C]>;
 /** Every JSON column the store reads itself, by `table.column`. */
-export declare const STORE_COLUMNS: ("approval_policy.protected_paths" | "backend_grant.mutations" | "backend_grant.paths" | "coordinator_proposal.outcome_json" | "coordinator_proposal.payload_json" | "criterion_review.screenshots_json" | "decision.options" | "flow_card.source_json" | "flow_comment.mentions_json" | "lead_config.about_json" | "mate_ask.options_json" | "mate_proposal.outcome_json" | "mate_proposal.payload_json" | "mutation.result" | "operating_mode.terms_json" | "plan_revision.changed_fields" | "proof_verdict.matrix_json" | "proof_verdict.reasons_json" | "publication_grant.capabilities" | "repair_chain.unresolved_json" | "run_check.suites_json" | "run_checkpoint.snapshot_json" | "run_tool.tools_json" | "runner.agents" | "runner.repos" | "task_ref.capability_requirements" | "task_ref.zones" | "task_scope.acceptance_json" | "task_scope.touches" | "teammate_call.input_json" | "teammate_event.detail_json" | "teammate_question.options_json" | "teammate_suggestion.evidence_json" | "teammate_suggestion.rule_json" | "teammate_suggestion.was_json" | "teammate_tool.actions_json" | "teammate_tool.rules_json" | "telegram_conversation_part.keyboard_json" | "tool_seal.tools_json")[];
+export declare const STORE_COLUMNS: ("approval_policy.protected_paths" | "backend_grant.mutations" | "backend_grant.paths" | "coordinator_proposal.outcome_json" | "coordinator_proposal.payload_json" | "criterion_review.screenshots_json" | "decision.options" | "flow_card.source_json" | "flow_comment.mentions_json" | "lead_config.about_json" | "mate_ask.options_json" | "mate_proposal.outcome_json" | "mate_proposal.payload_json" | "mutation.result" | "operating_mode.terms_json" | "plan_revision.changed_fields" | "proof_verdict.matrix_json" | "proof_verdict.reasons_json" | "publication_grant.capabilities" | "repair_chain.unresolved_json" | "run_check.suites_json" | "run_checkpoint.snapshot_json" | "run_tool.tools_json" | "runner.agents" | "runner.repos" | "task_ref.capability_requirements" | "task_ref.zones" | "task_scope.acceptance_json" | "task_scope.touches" | "teammate_call.input_json" | "teammate_event.detail_json" | "teammate_question.options_json" | "teammate_suggestion.evidence_json" | "teammate_suggestion.rule_json" | "teammate_suggestion.was_json" | "teammate_tool.actions_json" | "teammate_tool.rules_json" | "tool_seal.tools_json")[];
 /** A SQL projection, not a physical column; replay it separately after its owning column. */
 export declare const STORE_PROJECTIONS: readonly ["run_tool.tools_json.fence"];
 /** These readers historically only parsed JSON. Shape errors must not change their values or catch boundaries. */

package/dist/contracts/store-json.js

@@ -16,7 +16,6 @@ import { decisionOptionSchema } from "./decision.js";
 import { scopeTermsSchema, storedRubricSchema } from "./scope.js";
 import { criterionEvidenceSchema, proofCriterionSchema } from "./proof.js";
 import { sharedActionSchema } from "./chat-actions.js";
-import { telegramCallbackButtonSchema } from "./telegram-callback.js";
 import { readVersioned, versioned } from "./contract.js";
 /** Dynamic tool arguments, event details and operation results have no common field contract. */
 const savedObject = z.looseObject({});
@@ -53,7 +52,6 @@ const savedProgressSchema = z.looseObject({
         id: z.string(), state: z.enum(["pending", "current", "completed", "blocked"]), note: z.string().nullable().optional(),
     })),
 });
-const savedKeyboardSchema = z.array(z.array(telegramCallbackButtonSchema.extend({ callback_data: z.string() }).loose()));
 const savedMatrixRowSchema = proofCriterionSchema.pick({ id: true, statement: true }).extend({
     id: z.string(), statement: z.string(), requiredEvidence: savedList, state: z.string(), detail: savedList,
     answered: z.array(criterionEvidenceSchema.extend({ ref: z.string() }).loose()).optional(),
@@ -88,7 +86,6 @@ const STORE_COLUMN_VALUES = {
     "mutation.result": z.unknown(),
     "plan_revision.changed_fields": z.array(z.string()),
     "run_checkpoint.snapshot_json": savedProgressSchema,
-    "telegram_conversation_part.keyboard_json": savedKeyboardSchema,
     "publication_grant.capabilities": z.array(z.enum(["push-branch", "open-pr"])),
     "task_ref.zones": savedList,
     "task_ref.capability_requirements": savedList,
@@ -115,7 +112,7 @@ export const LEGACY_JSON_COLUMNS = [
     "teammate_event.detail_json", "task_scope.touches", "task_scope.acceptance_json",
     "operating_mode.terms_json", "decision.options", "run_tool.tools_json",
     "run_tool.tools_json.fence", "mate_ask.options_json", "mutation.result", "plan_revision.changed_fields",
-    "run_checkpoint.snapshot_json", "telegram_conversation_part.keyboard_json", "publication_grant.capabilities",
+    "run_checkpoint.snapshot_json", "publication_grant.capabilities",
     "coordinator_proposal.payload_json", "coordinator_proposal.outcome_json",
     "mate_proposal.payload_json", "mate_proposal.outcome_json",
 ];

package/dist/contracts/teams-callback.js

@@ -5,8 +5,9 @@
  * is answered with why (`value.so: must be a Toolroll button token`), and nothing is done.
  */
 import { z } from "zod";
+import { CHAT_BUTTON_TOKEN } from "./chat-content.js";
 import { parseContract } from "./contract.js";
-export const teamsSubmitSchema = z.object({ so: z.string().regex(/^[a-f0-9]{32}$/, { error: "must be a Toolroll button token" }) });
+export const teamsSubmitSchema = z.object({ so: z.string().regex(CHAT_BUTTON_TOKEN, { error: "must be a Toolroll button token" }) });
 /** A submit's one-time token. */
 export function readTeamsSubmit(value) {
     const read = parseContract(z.object({ value: teamsSubmitSchema }), { value });

package/dist/control-ui.d.ts

@@ -1,12 +1,12 @@
 /** Shared setup views over the existing project configuration and approval doors. */
+import { type Html } from "./html.js";
 import type { ProviderId } from "./provider.js";
 import type { ProviderConnection } from "./provider-connection.js";
 import { type ModelChoice } from "./setup-guide.js";
 import type { SetupInputs } from "./control-setup.js";
 import { type OpenRouterModels } from "./openrouter-models.js";
-export declare function hiddenFields(values: Record<string, string>): string;
 export declare function connectionWords(connection: ProviderConnection): string;
-export declare function connectionHtml(provider: ProviderId, connection: ProviderConnection, task?: string): string;
+export declare function connectionHtml(provider: ProviderId, connection: ProviderConnection, task?: string): Html;
 export declare function controlSetupHtml(data: {
     repo: string;
     csrf: string;
@@ -25,5 +25,6 @@ export declare function controlSetupHtml(data: {
         installed: boolean;
         message?: string;
     };
-}): string;
-export declare function setupPreviewHtml(inputs: SetupInputs, fields: Record<string, string>): string;
+}): Html;
+/** `fields` may still carry the session's csrf (a caller's habit): postForm writes the one CSRF field. */
+export declare function setupPreviewHtml(inputs: SetupInputs, fields: Record<string, string>): Html;