toolroll 0.9.53 → 0.9.55

package/dist/surface.js

@@ -114,6 +114,17 @@ const GUIDE_ROWS = [
     operator("link", "put toolroll on PATH"),
     operator("unlink", "take it off PATH"),
     operator("update", "update to the latest release: verified provenance, drained work, backup, rehearsal, health check, automatic restore; --rollback undoes it"),
+    { invocation: "release", synopsis: "release Toolroll itself from a branch: gate the exact commit, wait for the owner's approval, check, complete, deploy, merge, tag, publish, Homebrew; rerun to resume",
+        audience: "operator", agentMayInvoke: false, mutation: "unkeyed",
+        positionals: [{ name: "branch", required: true, meaning: "the pushed branch with an open pull request" }],
+        flags: [jsonFlag,
+            { name: "repo", takesValue: true, meaning: "the gate checkout the release check runs in (default: this checkout)" },
+            { name: "new", takesValue: false, meaning: "release a new commit on the branch, setting the earlier unfinished release aside" },
+            { name: "limit", takesValue: true, meaning: "<step>=<minutes>: one waiting step's time limit" },
+            { name: "tap", takesValue: true, meaning: "the Homebrew tap, owner/name" },
+            { name: "release-gate", takesValue: true, meaning: "<id>: show why an update pause left before a deployment's swap is safe to lift" },
+            { name: "yes", takesValue: false, meaning: "with --release-gate: lift that one pause once it is proved" }],
+        notableReasons: ["usage", "ambiguous", "drift", "timeout", "check-failed", "ci-failed", "tree-mismatch", "conflict", "mixed-runtime", "gate-held", "after-swap"] },
     operator("demo", "a seeded throwaway sandbox"),
     { invocation: 'session capabilities', synopsis: 'Show executable session schemas and operator authority requirements; no credentials needed', audience: 'agent', agentMayInvoke: true, mutation: 'none', flags: [jsonFlag] },
     ...SESSION_DESCRIPTORS.map(spec => ({
@@ -315,7 +326,7 @@ const GUIDE_ROWS = [
     { invocation: "heartbeat", synopsis: "still working; extends the lease", audience: "agent", agentMayInvoke: true, mutation: "identity-idempotent",
         positionals: [{ name: "lease", required: true, meaning: "the lease id" }],
         flags: [jsonFlag, dbFlag], notableReasons: ["not-leased", "fenced"] },
-    { invocation: "release", synopsis: "done with it; fenced if superseded", audience: "agent", agentMayInvoke: true, mutation: "identity-idempotent",
+    { invocation: "worker release", synopsis: "done with it; fenced if superseded", audience: "agent", agentMayInvoke: true, mutation: "identity-idempotent",
         positionals: [{ name: "lease", required: true, meaning: "the lease id" }],
         flags: [jsonFlag, dbFlag], notableReasons: ["not-leased", "fenced"] },
     { invocation: "reap", synopsis: "release every lease that ran out", audience: "agent", agentMayInvoke: true, mutation: "identity-idempotent", flags: [jsonFlag, dbFlag] },
@@ -428,7 +439,7 @@ const GUIDE_ROWS = [
 const REMOTE_NO = [
     // Answered by the local CLI, or a client of a central server itself.
     "", "pulls", "graph", "repos", "repos add", "repos remove", "repos add-from-github", "contract", "skills list", "skills get", "skills install",
-    "link", "unlink", "update", "demo", "chat", "connect", "lead list", "lead create", "lead update", "lead member", "lead transfer",
+    "link", "unlink", "update", "release", "demo", "chat", "connect", "lead list", "lead create", "lead update", "lead member", "lead transfer",
     "conversation list", "conversation create", "conversation show", "conversation member", "conversation edit", "conversation withdraw",
     "conversation read", "conversation follow", "conversation stop",
     "session capabilities", "session list", "session show", "session changes", "session start", "session send", "session stop", "session resume", "session recover",
@@ -436,7 +447,7 @@ const REMOTE_NO = [
     "project show", "project use", "brief", "lead token", "lead say", "health",
     "assignment show", "assignment updates", "assignment claim", "assignment check", "assignment brief", "assignment inbox", "assignment ack",
     // Workers, the loop and the services that run here.
-    "claim", "heartbeat", "release", "reap", "tick", "build", "reconcile",
+    "claim", "heartbeat", "worker release", "reap", "tick", "build", "reconcile",
     "runner register", "runner retire", "runner bind", "runner capacity", "coordinator mint", "coordinator revoke", "mcp", "outbox deliver", "peek",
     "serve", "serve check-public", "watch", "up", "onboard", "daemon", "bridge", "setup show", "setup clear",
     // Provider keys and model tools on this machine.

package/dist/task-composer.d.ts

@@ -1,5 +1,6 @@
 /** UI choices translate into the same digest-bound schedules as the CLI. */
 import { type Schedule } from "./flow-schedule.js";
+import { type Html } from "./html.js";
 export declare function composerSchedule(fields: URLSearchParams): {
     ok: true;
     schedule: string | null;
@@ -9,5 +10,5 @@ export declare function composerSchedule(fields: URLSearchParams): {
 };
 export declare function scheduleFields(schedule: Schedule): Record<string, string>;
 /** A normal form works without JavaScript; enhancement only folds unused fields. */
-export declare function scheduleEditorHtml(raw: string | null, submitted?: URLSearchParams): string;
+export declare function scheduleEditorHtml(raw: string | null, submitted?: URLSearchParams): Html;
 export declare function scheduleEditorScript(): string;

package/dist/task-composer.js

@@ -1,5 +1,6 @@
 /** UI choices translate into the same digest-bound schedules as the CLI. */
 import { parseSchedule, scheduleText, validTimezone } from "./flow-schedule.js";
+import { html, joinHtml } from "./html.js";
 export function composerSchedule(fields) {
     const repeat = fields.get("repeat") ?? "once";
     if (repeat === "once")
@@ -29,18 +30,17 @@ export function scheduleFields(schedule) {
     }
     return { repeat: schedule.kind, time: schedule.hhmm, timezone: schedule.timezone ?? "UTC", ...(schedule.kind === "weekly" ? { weekday: String(schedule.day) } : {}) };
 }
-const escape = (text) => text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
 /** A normal form works without JavaScript; enhancement only folds unused fields. */
 export function scheduleEditorHtml(raw, submitted) {
     const parsed = raw === null ? null : parseSchedule(raw);
     const fields = submitted?.has("repeat") ? Object.fromEntries(submitted) : parsed === null ? {} : scheduleFields(parsed);
     const repeat = fields.repeat ?? "daily";
-    const value = (name, fallback) => escape(fields[name] ?? fallback);
-    return `<fieldset data-schedule-editor${raw === null && submitted === undefined ? ' data-detect-timezone="true"' : ""}><legend>When to run</legend>` +
-        `<label>Repeat<select name="repeat">${[["daily", "Daily"], ["weekly", "Weekly"], ["custom", "Custom interval"]].map(([id, label]) => `<option value="${id}"${repeat === id ? " selected" : ""}>${label}</option>`).join("")}</select></label>` +
-        `<div data-schedule-kind="weekly"><label>Day<select name="weekday">${["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"].map((day, index) => `<option value="${index}"${String(index) === (fields.weekday ?? "1") ? " selected" : ""}>${day}</option>`).join("")}</select></label></div>` +
-        `<div data-schedule-kind="calendar"><label>Time<input type="time" name="time" value="${value("time", "09:00")}"></label><label>Timezone<input type="text" name="timezone" value="${value("timezone", "UTC")}" autocomplete="off" placeholder="America/Los_Angeles"></label><p class="meta">Daily and weekly times follow this timezone. A skipped clock time skips that occurrence; a repeated time runs once.</p></div>` +
-        `<div data-schedule-kind="custom"><label>Every<input type="number" name="interval" min="1" value="${value("interval", "60")}"></label><label>Unit<select name="interval-unit">${["minutes", "hours", "days"].map(unit => `<option${unit === (fields["interval-unit"] ?? "minutes") ? " selected" : ""}>${unit}</option>`).join("")}</select></label><p class="meta">Intervals range from 5 minutes to 7 days.</p></div></fieldset>`;
+    const value = (name, fallback) => fields[name] ?? fallback;
+    return joinHtml([html `<fieldset data-schedule-editor${raw === null && submitted === undefined ? html ` data-detect-timezone="true"` : ""}><legend>When to run</legend>`,
+        html `<label>Repeat<select name="repeat">${[["daily", "Daily"], ["weekly", "Weekly"], ["custom", "Custom interval"]].map(([id, label]) => html `<option value="${id}"${repeat === id ? html ` selected` : ""}>${label}</option>`)}</select></label>`,
+        html `<div data-schedule-kind="weekly"><label>Day<select name="weekday">${["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"].map((day, index) => html `<option value="${index}"${String(index) === (fields.weekday ?? "1") ? html ` selected` : ""}>${day}</option>`)}</select></label></div>`,
+        html `<div data-schedule-kind="calendar"><label>Time<input type="time" name="time" value="${value("time", "09:00")}"></label><label>Timezone<input type="text" name="timezone" value="${value("timezone", "UTC")}" autocomplete="off" placeholder="America/Los_Angeles"></label><p class="meta">Daily and weekly times follow this timezone. A skipped clock time skips that occurrence; a repeated time runs once.</p></div>`,
+        html `<div data-schedule-kind="custom"><label>Every<input type="number" name="interval" min="1" value="${value("interval", "60")}"></label><label>Unit<select name="interval-unit">${["minutes", "hours", "days"].map(unit => html `<option${unit === (fields["interval-unit"] ?? "minutes") ? html ` selected` : ""}>${unit}</option>`)}</select></label><p class="meta">Intervals range from 5 minutes to 7 days.</p></div></fieldset>`]);
 }
 export function scheduleEditorScript() {
     return `(function(){document.querySelectorAll('[data-schedule-editor]').forEach(function(root){

package/dist/task-status.d.ts

@@ -1,3 +1,4 @@
+import { type Html } from "./html.js";
 import type { AssignmentSnapshot } from "./assignment.js";
 import { type NeedAction, type NeedContext, type NeedKey, type WaitKey } from "./needs-you.js";
 export type { NeedKey, WaitKey } from "./needs-you.js";
@@ -200,9 +201,9 @@ export declare function workToneOf(headline: Headline): "attention" | "problem"
 export declare function statusDetailLines(status: TaskStatus): string[];
 /** The headline's emoji for chat cards (colour is never the only signal: the words follow). */
 export declare function headlineEmoji(headline: Headline): string;
-export declare const statusIconSvg: (mark: DetailMark) => string;
+export declare const statusIconSvg: (mark: DetailMark) => Html;
 /** The detail rows as server HTML: quiet rows, colour only on the icon. */
-export declare function statusDetailsHtml(status: TaskStatus): string;
+export declare function statusDetailsHtml(status: TaskStatus): Html;
 /** The status card's fold of exact reasons: "More", never a third thing called Details. */
 export declare const STATUS_MORE = "More";
 /** The technical reasons, one tap away. */
@@ -210,7 +211,7 @@ export declare function statusWhyHtml(status: TaskStatus, extra?: readonly strin
     token: string;
     label: string;
     detail: string;
-}[]): string;
+}[]): Html;
 /** Shared CSS for the server-rendered status: neutral rows, coloured icons. */
 export declare const TASK_STATUS_CSS = ".status-headline{display:flex;align-items:center;gap:.6rem;margin:0;font-size:1.125rem;font-weight:600;color:var(--foreground)}.status-headline i{width:.625rem;height:.625rem;border-radius:999px;flex-shrink:0;background:var(--muted-foreground)}[data-headline-tone=live] .status-headline i{background:var(--so-info,#0d74ce)}[data-headline-tone=attention] .status-headline i{background:var(--so-attention,var(--attention))}[data-headline-tone=ready] .status-headline i{background:transparent;box-shadow:inset 0 0 0 2px var(--so-success,#218358)}[data-headline-tone=success] .status-headline i{background:var(--so-success,#218358)}[data-headline-tone=danger] .status-headline i{background:var(--so-danger,#c4320a)}.status-sentence{margin:.35rem 0 0;color:var(--muted-foreground)}.status-details{list-style:none;margin:.75rem 0 0;padding:.25rem 0 0;border-top:1px solid var(--so-line,var(--border))}.status-detail{display:grid;grid-template-columns:14px 7.5rem minmax(0,1fr);align-items:center;gap:.6rem;padding:.4rem 0;font-size:.8125rem;color:var(--foreground)}.status-detail .status-icon{align-self:center;color:var(--muted-foreground)}.status-detail--ok .status-icon{color:var(--so-success,#218358)}.status-detail--running .status-icon{color:var(--so-info,#0d74ce)}.status-detail--note .status-icon{color:var(--so-warning,#ab6400)}.status-detail--failed .status-icon{color:var(--so-danger,#c4320a)}.status-detail-label{color:var(--muted-foreground)}.status-detail-text{display:flex;flex-wrap:wrap;align-items:baseline;gap:0 .6rem;min-width:0;overflow-wrap:anywhere}.status-detail-text a{color:inherit}.status-detail-act{font-weight:600;white-space:nowrap}.status-detail--note .status-detail-act{color:var(--so-warning,#ab6400)}@media(max-width:480px){.status-detail{grid-template-columns:14px 6.5rem minmax(0,1fr);min-height:2.75rem;padding:.25rem 0}.status-detail-text a{display:inline-block;padding:.75rem 0;margin:-.75rem 0}}.status-why{border:0;padding:0;margin:.25rem 0 0;background:transparent;box-shadow:none}.status-why>summary{cursor:pointer;min-height:2.75rem;display:list-item;align-content:center;font-size:.8125rem;color:var(--muted-foreground)}.status-why p{margin:.25rem 0 .5rem}.receipt-note{display:flex;align-items:center;gap:.45rem;font-size:.8125rem;color:var(--foreground)}.receipt-note .status-icon{color:var(--so-warning,#ab6400)}";
 /** A dispatch diagnosis as its stage, for the phone and CLI reads that hold

package/dist/task-status.js

@@ -11,6 +11,7 @@
  * output) is an amber note on its own row with one action; the exact
  * technical reason stays one tap away in `why`. */
 import { DEFAULT_LEAD_NAME } from "./lead-identity.js";
+import { html } from "./html.js";
 import { CODE_NEED, NEEDS, needSentence, waitSentence } from "./needs-you.js";
 /** A cancelled task with a successor reads "Replaced by <id>" everywhere, never "Cancelled". */
 export const replacedWords = (successor) => `Replaced by ${successor}`;
@@ -398,24 +399,23 @@ export function statusDetailLines(status) {
 export function headlineEmoji(headline) {
     return { Queued: "🕓", Planning: "📝", "Needs you": "👋", Waiting: "⏸", Building: "⏳", "Ready for review": "✅", Complete: "✅", Failed: "❌", Stopped: "⏹" }[headline];
 }
-const escapeHtml = (value) => value.replace(/[&<>"']/g, char => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[char]);
 const ICON_PATHS = {
-    ok: `<path d="M20 6 9 17l-5-5"/>`,
-    running: `<circle cx="12" cy="12" r="4"/>`,
-    none: `<circle cx="12" cy="12" r="3"/>`,
-    note: `<path d="M12 8v5"/><path d="M12 16.5h.01"/><path d="M10.3 3.9 2.4 18a2 2 0 0 0 1.7 3h15.8a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0z"/>`,
-    failed: `<path d="M18 6 6 18M6 6l12 12"/>`,
+    ok: html `<path d="M20 6 9 17l-5-5"/>`,
+    running: html `<circle cx="12" cy="12" r="4"/>`,
+    none: html `<circle cx="12" cy="12" r="3"/>`,
+    note: html `<path d="M12 8v5"/><path d="M12 16.5h.01"/><path d="M10.3 3.9 2.4 18a2 2 0 0 0 1.7 3h15.8a2 2 0 0 0 1.7-3L13.7 3.9a2 2 0 0 0-3.4 0z"/>`,
+    failed: html `<path d="M18 6 6 18M6 6l12 12"/>`,
 };
-export const statusIconSvg = (mark) => `<svg class="status-icon status-icon--${mark}" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.25" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${ICON_PATHS[mark]}</svg>`;
+export const statusIconSvg = (mark) => html `<svg class="status-icon status-icon--${mark}" viewBox="0 0 24 24" width="14" height="14" fill="none" stroke="currentColor" stroke-width="2.25" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true">${ICON_PATHS[mark]}</svg>`;
 /** The detail rows as server HTML: quiet rows, colour only on the icon. */
 export function statusDetailsHtml(status) {
     if (status.details.length === 0)
-        return "";
-    return `<ul class="status-details" aria-label="Status">` + status.details.map(one => {
-        const text = one.href === null ? escapeHtml(one.text) : `<a href="${escapeHtml(one.href)}">${escapeHtml(one.text)}</a>`;
-        const action = one.action === null ? "" : one.action.href === null ? `<span class="status-detail-act">${escapeHtml(one.action.label)}</span>` : `<a class="status-detail-act" href="${escapeHtml(one.action.href)}">${escapeHtml(one.action.label)}</a>`;
-        return `<li class="status-detail status-detail--${one.mark}" data-status-detail="${one.key}" data-mark="${one.mark}">${statusIconSvg(one.mark)}<span class="status-detail-label">${escapeHtml(one.label)}</span><span class="status-detail-text"><span>${text}</span>${action}</span></li>`;
-    }).join("") + `</ul>`;
+        return html ``;
+    return html `<ul class="status-details" aria-label="Status">${status.details.map(one => {
+        const text = one.href === null ? one.text : html `<a href="${one.href}">${one.text}</a>`;
+        const action = one.action === null ? "" : one.action.href === null ? html `<span class="status-detail-act">${one.action.label}</span>` : html `<a class="status-detail-act" href="${one.action.href}">${one.action.label}</a>`;
+        return html `<li class="status-detail status-detail--${one.mark}" data-status-detail="${one.key}" data-mark="${one.mark}">${statusIconSvg(one.mark)}<span class="status-detail-label">${one.label}</span><span class="status-detail-text"><span>${text}</span>${action}</span></li>`;
+    })}</ul>`;
 }
 /** The status card's fold of exact reasons: "More", never a third thing called Details. */
 export const STATUS_MORE = "More";
@@ -423,9 +423,8 @@ export const STATUS_MORE = "More";
 export function statusWhyHtml(status, extra = [], diagnostics = []) {
     const lines = [...new Set([...status.details.flatMap(one => one.why === null ? [] : [`${one.label}: ${one.why}`]), ...status.why, ...extra])];
     if (lines.length === 0 && diagnostics.length === 0)
-        return "";
-    return `<details class="status-why"><summary>${STATUS_MORE}</summary>${lines.map(one => `<p class="meta">${escapeHtml(one)}</p>`).join("")}` +
-        diagnostics.map(one => `<p class="meta" data-work-diagnostic="${escapeHtml(one.token)}">${escapeHtml(one.label)} · ${escapeHtml(one.detail)}</p>`).join("") + `</details>`;
+        return html ``;
+    return html `<details class="status-why"><summary>${STATUS_MORE}</summary>${lines.map(one => html `<p class="meta">${one}</p>`)}${diagnostics.map(one => html `<p class="meta" data-work-diagnostic="${one.token}">${one.label} · ${one.detail}</p>`)}</details>`;
 }
 /** Shared CSS for the server-rendered status: neutral rows, coloured icons. */
 export const TASK_STATUS_CSS = `.status-headline{display:flex;align-items:center;gap:.6rem;margin:0;font-size:1.125rem;font-weight:600;color:var(--foreground)}.status-headline i{width:.625rem;height:.625rem;border-radius:999px;flex-shrink:0;background:var(--muted-foreground)}[data-headline-tone=live] .status-headline i{background:var(--so-info,#0d74ce)}[data-headline-tone=attention] .status-headline i{background:var(--so-attention,var(--attention))}[data-headline-tone=ready] .status-headline i{background:transparent;box-shadow:inset 0 0 0 2px var(--so-success,#218358)}[data-headline-tone=success] .status-headline i{background:var(--so-success,#218358)}[data-headline-tone=danger] .status-headline i{background:var(--so-danger,#c4320a)}.status-sentence{margin:.35rem 0 0;color:var(--muted-foreground)}.status-details{list-style:none;margin:.75rem 0 0;padding:.25rem 0 0;border-top:1px solid var(--so-line,var(--border))}.status-detail{display:grid;grid-template-columns:14px 7.5rem minmax(0,1fr);align-items:center;gap:.6rem;padding:.4rem 0;font-size:.8125rem;color:var(--foreground)}.status-detail .status-icon{align-self:center;color:var(--muted-foreground)}.status-detail--ok .status-icon{color:var(--so-success,#218358)}.status-detail--running .status-icon{color:var(--so-info,#0d74ce)}.status-detail--note .status-icon{color:var(--so-warning,#ab6400)}.status-detail--failed .status-icon{color:var(--so-danger,#c4320a)}.status-detail-label{color:var(--muted-foreground)}.status-detail-text{display:flex;flex-wrap:wrap;align-items:baseline;gap:0 .6rem;min-width:0;overflow-wrap:anywhere}.status-detail-text a{color:inherit}.status-detail-act{font-weight:600;white-space:nowrap}.status-detail--note .status-detail-act{color:var(--so-warning,#ab6400)}@media(max-width:480px){.status-detail{grid-template-columns:14px 6.5rem minmax(0,1fr);min-height:2.75rem;padding:.25rem 0}.status-detail-text a{display:inline-block;padding:.75rem 0;margin:-.75rem 0}}.status-why{border:0;padding:0;margin:.25rem 0 0;background:transparent;box-shadow:none}.status-why>summary{cursor:pointer;min-height:2.75rem;display:list-item;align-content:center;font-size:.8125rem;color:var(--muted-foreground)}.status-why p{margin:.25rem 0 .5rem}.receipt-note{display:flex;align-items:center;gap:.45rem;font-size:.8125rem;color:var(--foreground)}.receipt-note .status-icon{color:var(--so-warning,#ab6400)}`;

package/dist/team-http.d.ts

@@ -2,8 +2,8 @@ import type { IncomingMessage, ServerResponse } from 'node:http';
 import { type TeamActor, type TeamExecute } from './team-contract.js';
 import { type Admission } from './request-budget.js';
 export declare const TEAM_REQUEST_BYTES: number;
-/** How long a password bearer's proof stands on a long /api/team/events stream before its password is checked again.
- * The account, its revocation and its credential generation are still rechecked on every tick. */
+/** How long a password bearer's proof stands on a long live team stream (GET /live?room=team) before its password is
+ * checked again. The account, its revocation and its credential generation are still rechecked on every signal. */
 export declare const TEAM_PASSWORD_REVERIFY_MS: number;
 /** Account role belongs to HTTP authentication; API tokens carry their own scope. */
 export type TeamHttpActor = TeamActor & {
@@ -15,15 +15,11 @@ export type TeamHttpOptions = {
     revalidate: (request: IncomingMessage, actor: TeamActor) => boolean;
     authorizeMutation: (request: IncomingMessage, actor: TeamActor) => boolean;
     execute: TeamExecute;
-    /** Current, authorized event cursor. null means the audience is no longer available. */
-    cursor?: (actor: TeamActor, conversationId?: string) => number | null;
-    /** Source admission before credential verification. Streams are charged once when opened. */
+    /** Source admission before credential verification. */
     admit?: (request: IncomingMessage) => Admission;
     /** Proved account/token admission, before reading the body or executing any operation. */
     admitAuthenticated?: (request: IncomingMessage, actor: TeamActor) => Admission;
-    streamIntervalMs?: number;
-    streams?: Set<ServerResponse>;
 };
-/** Authenticated browser and remote CLI share one operation boundary. Streams
- * are refresh hints only: no model calls, admissions, or completion writes. */
+/** Authenticated browser and remote CLI share one operation boundary. Live
+ * updates come from GET /live?room=team (server/live.ts). */
 export declare function handleTeamHttp(request: IncomingMessage, response: ServerResponse, options: TeamHttpOptions): Promise<boolean>;

package/dist/team-http.js

@@ -2,8 +2,8 @@ import { adapterPolicy } from "./server/route-policy.js";
 import { TEAM_OPERATIONS, TEAM_MUTATIONS, teamScopeAllows } from './team-contract.js';
 import { limitWords } from './request-budget.js';
 export const TEAM_REQUEST_BYTES = 64 * 1024;
-/** How long a password bearer's proof stands on a long /api/team/events stream before its password is checked again.
- * The account, its revocation and its credential generation are still rechecked on every tick. */
+/** How long a password bearer's proof stands on a long live team stream (GET /live?room=team) before its password is
+ * checked again. The account, its revocation and its credential generation are still rechecked on every signal. */
 export const TEAM_PASSWORD_REVERIFY_MS = 5 * 60_000;
 const failure = (code, message) => ({ version: 1, ok: false, code, message });
 function send(response, status, value, headers = {}) {
@@ -33,11 +33,11 @@ function valid(value) {
         !!row.args && typeof row.args === 'object' && !Array.isArray(row.args) &&
         !['actor', 'generation', 'authenticatedActor'].some(key => key in row.args);
 }
-/** Authenticated browser and remote CLI share one operation boundary. Streams
- * are refresh hints only: no model calls, admissions, or completion writes. */
+/** Authenticated browser and remote CLI share one operation boundary. Live
+ * updates come from GET /live?room=team (server/live.ts). */
 export async function handleTeamHttp(request, response, options) {
     const url = new URL(request.url ?? '/', 'http://standing-orders.local');
-    if (url.pathname !== '/api/team' && url.pathname !== '/api/team/events')
+    if (url.pathname !== '/api/team')
         return false;
     const reject = (status, code, message) => { send(response, status, failure(code, message)); request.resume(); return true; };
     if ([...url.searchParams.keys()].some(key => /token|password|credential|authorization/i.test(key)))
@@ -71,64 +71,6 @@ export async function handleTeamHttp(request, response, options) {
     if (!adapterPolicy(policyPrincipal()).ok)
         return reject(403, 'read-only', 'Your token reads only. Use an act token for this.');
     const conversationId = url.searchParams.get('conversation') ?? undefined;
-    if (url.pathname === '/api/team/events') {
-        if (request.method !== 'GET')
-            return reject(405, 'method-not-allowed', 'Use GET for conversation updates.');
-        let initial;
-        try {
-            initial = await options.execute(actor, { operation: conversationId ? 'show' : 'list', args: conversationId ? { conversationId } : {} });
-        }
-        catch {
-            return reject(503, 'unavailable', 'Conversation updates are unavailable.');
-        }
-        if (!initial.ok || !initial.snapshot) {
-            send(response, 403, initial);
-            return true;
-        }
-        response.writeHead(200, { 'content-type': 'text/event-stream', 'cache-control': 'no-store', 'x-content-type-options': 'nosniff', 'x-accel-buffering': 'no' });
-        options.streams?.add(response);
-        let cursor = initial.snapshot.cursor;
-        response.write(`id: ${cursor}\nevent: change\ndata: {"cursor":${cursor}}\n\n`);
-        let active = false;
-        const close = () => { clearInterval(timer); options.streams?.delete(response); response.end(); };
-        const revoked = () => { response.write('event: revoked\ndata: {}\n\n'); close(); };
-        const tick = async () => {
-            if (active || response.destroyed || response.writableEnded)
-                return;
-            active = true;
-            try {
-                if (!options.revalidate(request, actor))
-                    return revoked();
-                let next;
-                if (options.cursor)
-                    next = options.cursor(actor, conversationId);
-                else {
-                    const reply = await options.execute(actor, { operation: conversationId ? 'show' : 'list', args: conversationId ? { conversationId } : {} });
-                    next = reply.ok ? reply.snapshot?.cursor ?? null : null;
-                }
-                if (next === null)
-                    return revoked();
-                if (next !== cursor) {
-                    cursor = next;
-                    // A slow client receives a fresh scoped snapshot on reconnect, never an unbounded replay buffer.
-                    if (!response.write(`id: ${cursor}\nevent: change\ndata: {"cursor":${cursor}}\n\n`))
-                        close();
-                }
-            }
-            catch {
-                response.write('event: unavailable\ndata: {}\n\n');
-                close();
-            }
-            finally {
-                active = false;
-            }
-        };
-        const timer = setInterval(() => { void tick(); }, options.streamIntervalMs ?? 1_000);
-        timer.unref();
-        request.once('close', close);
-        response.once('close', close);
-        return true;
-    }
     let input;
     if (request.method === 'GET')
         input = { operation: conversationId ? 'show' : 'list', args: conversationId ? { conversationId } : {} };

package/dist/team-ui.d.ts

@@ -1,3 +1,4 @@
+import { type Html } from './html.js';
 import type { TeamSnapshot } from './team-contract.js';
 /** Readable fallback uses the same admitted projection as the interactive UI. */
-export declare function teamWorkspaceHtml(snapshot: TeamSnapshot): string;
+export declare function teamWorkspaceHtml(snapshot: TeamSnapshot): Html;

package/dist/team-ui.js

@@ -1,9 +1,6 @@
-const escape = (value) => value.replace(/[&<>"']/g, char => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[char]);
+import { html } from './html.js';
 /** Readable fallback uses the same admitted projection as the interactive UI. */
 export function teamWorkspaceHtml(snapshot) {
     const selected = snapshot.selected;
-    return `<section class="team-workspace"><h1>${escape(selected?.title ?? 'Team chat')}</h1>` +
-        (selected ? `<p>${selected.visibility === 'team' ? 'Team' : 'Private'} · ${escape(snapshot.leads.find(lead => lead.id === selected.leadId)?.name ?? 'Lead')}</p>` : '') +
-        (snapshot.messages.length ? snapshot.messages.map(message => `<article><strong>${escape(message.author)}</strong><p style="white-space:pre-wrap;overflow-wrap:anywhere">${escape(message.text)}</p>${message.status === 'queued' || message.status === 'running' ? `<p>${message.status === 'queued' ? 'Queued' : 'Working'}</p>` : ''}${message.error ? `<p role="alert">${escape(message.error)}</p>` : ''}</article>`).join('') : '<p>Start a conversation with your team lead.</p>') +
-        '<noscript>Enable JavaScript to send messages and manage team conversations.</noscript><p><a href="/chat?private=1">Previous private chat</a></p></section>';
+    return html `<section class="team-workspace"><h1>${selected?.title ?? 'Team chat'}</h1>${selected ? html `<p>${selected.visibility === 'team' ? 'Team' : 'Private'} · ${snapshot.leads.find(lead => lead.id === selected.leadId)?.name ?? 'Lead'}</p>` : ''}${snapshot.messages.length ? snapshot.messages.map(message => html `<article><strong>${message.author}</strong><p style="white-space:pre-wrap;overflow-wrap:anywhere">${message.text}</p>${message.status === 'queued' || message.status === 'running' ? html `<p>${message.status === 'queued' ? 'Queued' : 'Working'}</p>` : ''}${message.error ? html `<p role="alert">${message.error}</p>` : ''}</article>`) : html `<p>Start a conversation with your team lead.</p>`}<noscript>Enable JavaScript to send messages and manage team conversations.</noscript><p><a href="/chat?private=1">Previous private chat</a></p></section>`;
 }

package/dist/teammate-question.js

@@ -30,8 +30,8 @@ const who = (store, question) => { const mate = store.getTeammate(question.teamm
 /** Everyone else's buttons retire once a question is answered anywhere. */
 function retireEverywhere(store, question, now, state) {
     store.retireTelegramQuestion(question, now);
-    state?.prepare("UPDATE chat_question_action SET consumed=? WHERE question=? AND consumed IS NULL").run(now.toISOString(), question);
-    state?.prepare("UPDATE chat_question_prompt SET consumed=? WHERE question=? AND consumed IS NULL").run(now.toISOString(), question);
+    state?.prepare("UPDATE chat_question_action SET consumed=? WHERE provider=:provider AND question=? AND consumed IS NULL").run(now.toISOString(), question);
+    state?.prepare("UPDATE chat_question_prompt SET consumed=? WHERE provider=:provider AND question=? AND consumed IS NULL").run(now.toISOString(), question);
 }
 // ---- Telegram ----------------------------------------------------------------------
 /** Buttons for the question, minted before the send (for the person it asks only); `place` stamps the message they land on. */
@@ -91,23 +91,23 @@ export function questionParts(store, notification, binding) {
 }
 /** The live buttons on one part, in the order they were minted. */
 export function chatQuestionButtons(state, part, now) {
-    const row = state.prepare("SELECT payload FROM chat_part WHERE id=?").get(part);
+    const row = state.prepare("SELECT payload FROM chat_part WHERE provider=:provider AND id=?").get(part);
     const content = row === undefined ? null : partContent(String(row["payload"]));
     const labels = new Map((content?.question?.choices ?? []).map(one => [one.choice ?? "", one.label]));
-    return state.prepare("SELECT token,choice FROM chat_question_action WHERE part=? AND consumed IS NULL AND expires>? ORDER BY rowid").all(part, now.toISOString())
+    return state.prepare("SELECT token,choice FROM chat_question_action WHERE provider=:provider AND part=? AND consumed IS NULL AND expires>? ORDER BY rowid").all(part, now.toISOString())
         .map(one => ({ token: String(one.token), label: (labels.get(one.choice ?? "") ?? IN_WORDS).slice(0, 75), words: one.choice === null }));
 }
 /** Show the tapped notice again with the answer, and without its buttons. */
 function repaint(state, part, event, line) {
-    const row = state.prepare("SELECT payload FROM chat_part WHERE id=?").get(part);
+    const row = state.prepare("SELECT payload FROM chat_part WHERE provider=:provider AND id=?").get(part);
     const before = row === undefined ? { text: "" } : partContent(String(row["payload"]));
     const content = { text: `${before.text}\n\n${line}`.slice(0, 3400), edit: event.ts, ...(before.link === undefined ? {} : { link: before.link }), ...(before.channel === undefined ? {} : { channel: before.channel }) };
-    state.prepare("UPDATE chat_part SET payload=?,state='pending',next_at=NULL WHERE id=?").run(savedChatPart(content), part);
+    state.prepare("UPDATE chat_part SET payload=?,state='pending',next_at=NULL WHERE provider=:provider AND id=?").run(savedChatPart(content), part);
 }
 /** A tapped question button, inside the action's transaction; false when the token isn't one. */
 export function applyChatQuestionTap(options, event, binding, token, now) {
     const { store, state } = options;
-    const action = state.prepare("SELECT a.*,p.message,e.binding AS owner,e.channel FROM chat_question_action a JOIN chat_part p ON p.id=a.part JOIN chat_event e ON e.id=p.event WHERE a.token=?").get(token);
+    const action = state.prepare("SELECT a.token,a.part,a.question,a.choice,a.expires,a.consumed,p.message,e.binding AS owner,e.channel FROM chat_question_action a JOIN chat_part p ON p.provider=a.provider AND p.id=a.part JOIN chat_event e ON e.provider=p.provider AND e.id=p.event WHERE a.provider=:provider AND a.token=?").get(token);
     if (action === undefined)
         return false;
     const say = (text) => state.plan(event.id, [{ text }], now);
@@ -126,9 +126,9 @@ export function applyChatQuestionTap(options, event, binding, token, now) {
     }
     if (action["choice"] === null) {
         // One open prompt per person, across flow decisions and questions: the newest is the one the next message answers.
-        state.prepare("UPDATE chat_question_prompt SET consumed=? WHERE binding=? AND consumed IS NULL").run(now.toISOString(), binding.id);
-        state.prepare("UPDATE chat_flow_prompt SET consumed=? WHERE binding=? AND consumed IS NULL").run(now.toISOString(), binding.id);
-        state.prepare("INSERT INTO chat_question_prompt(binding,question,created,expires) VALUES(?,?,?,?)").run(binding.id, questionId, now.toISOString(), new Date(now.getTime() + PROMPT_MS).toISOString());
+        state.prepare("UPDATE chat_question_prompt SET consumed=? WHERE provider=:provider AND binding=? AND consumed IS NULL").run(now.toISOString(), binding.id);
+        state.prepare("UPDATE chat_flow_prompt SET consumed=? WHERE provider=:provider AND binding=? AND consumed IS NULL").run(now.toISOString(), binding.id);
+        state.prepare("INSERT INTO chat_question_prompt(provider,id,binding,question,created,expires) VALUES(:provider,(SELECT COALESCE(MAX(id),0)+1 FROM chat_question_prompt WHERE provider=:provider),?,?,?,?)").run(binding.id, questionId, now.toISOString(), new Date(now.getTime() + PROMPT_MS).toISOString());
         say(`Your next message here is your answer to ${who(store, question)}: “${question.question}” Send “cancel” to leave it.`);
         return true;
     }
@@ -149,14 +149,14 @@ export function answerChatQuestionPrompt(options, event, binding, input, now) {
     if (event.channel !== binding.channel)
         return false;
     return store.transact(() => {
-        const prompt = state.prepare("SELECT * FROM chat_question_prompt WHERE binding=? AND consumed IS NULL AND expires>? ORDER BY id DESC LIMIT 1").get(binding.id, now.toISOString());
+        const prompt = state.prepare("SELECT * FROM chat_question_prompt WHERE provider=:provider AND binding=? AND consumed IS NULL AND expires>? ORDER BY id DESC LIMIT 1").get(binding.id, now.toISOString());
         if (prompt === undefined)
             return false;
         const id = Number(prompt["id"]), questionId = Number(prompt["question"]);
         const say = (text) => state.plan(event.id, [{ text }], now);
         const said = input.text.trim();
         if (/^cancel\.?$/i.test(said)) {
-            state.prepare("UPDATE chat_question_prompt SET consumed=? WHERE id=?").run(now.toISOString(), id);
+            state.prepare("UPDATE chat_question_prompt SET consumed=? WHERE provider=:provider AND id=?").run(now.toISOString(), id);
             say("Left it unanswered. The buttons on the message still work.");
             return true;
         }

package/dist/teammates-ui.d.ts

@@ -4,17 +4,18 @@
  * and its settings. Server-rendered forms, like the other settings pages.
  */
 import type { Store, TeammateRow } from "./store.js";
+import { type Html } from "./html.js";
 /** v94: the Tools section's rule rows; a limit's fields show only while "Up to a limit" is chosen. */
 export declare const TEAMMATE_CSS = ".teammate-tools .tool-grant{border-top:1px solid var(--so-line);padding-top:12px;margin-top:12px}.teammate-tools .tool-grant:first-of-type{border-top:0;margin-top:0;padding-top:0}.teammate-tools h3{font-size:1rem;margin:0 0 4px}.teammate-tools .tool-rule{display:grid;gap:6px;padding:10px 0;border-bottom:1px solid var(--so-line)}.teammate-tools .tool-rule:last-of-type{border-bottom:0}.teammate-tools .tool-rule .meta{display:block}.teammate-tools select,.teammate-tools input{max-width:100%;box-sizing:border-box}.teammate-tools .tool-limit{display:none;flex-wrap:wrap;align-items:center;gap:6px}.teammate-tools .tool-rule:has(option[value=\"limit\"]:checked) .tool-limit{display:flex}.teammate-tools .tool-rule>select{width:auto;min-width:16em}.teammate-tools .tool-limit select{width:auto}.teammate-tools .tool-limit input{width:7em}.teammate-tools .tool-buttons{display:flex;flex-wrap:wrap;gap:8px;margin-top:8px}.teammate-tools button{min-height:44px}.teammate-activity li{overflow-wrap:anywhere}.teammate-memory .memory-tell,.teammate-memory .memory-search{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin:0 0 12px}.teammate-memory .memory-tell textarea{flex:1 1 280px}.teammate-memory .memory-search input{flex:1 1 220px}.teammate-memory button{min-height:44px}.teammate-memories{list-style:none;padding:0;margin:0}.teammate-memories li{padding:10px 0;border-top:1px solid var(--so-line);overflow-wrap:anywhere}.teammate-memories li:first-child{border-top:0}.teammate-memories .meta{display:block;font-size:.85rem}.teammate-memories details.memory-edit{border:0;padding:0;margin:2px 0 0;background:transparent;box-shadow:none}.memory-edit summary{cursor:pointer;min-height:32px;display:inline-flex;align-items:center;font-size:.85rem;font-weight:400;color:var(--so-muted)}.tool-undo{border:0;padding:0;margin:8px 0;background:transparent;box-shadow:none}.tool-undo summary{cursor:pointer;min-height:36px;display:inline-flex;align-items:center;font-size:.9rem}.tool-undo-row{display:flex;flex-wrap:wrap;gap:6px;align-items:center;margin:6px 0}.tool-undo-row select{width:auto}.teammate-overrides,.teammate-undo{padding-left:18px}.teammate-undo li{margin:6px 0}.teammate-undo form{display:inline}.teammate-week h3{font-size:1rem;margin:14px 0 4px}.teammate-week button{min-height:44px}.teammate-routines{list-style:none;padding:0;margin:8px 0}.teammate-routines li{display:grid;gap:4px;padding:10px 0;border-top:1px solid var(--so-line)}.teammate-routines li:first-child{border-top:0}.routine-buttons{display:flex;flex-wrap:wrap;gap:8px}.routine-buttons button,.routine-add button{min-height:44px}.routine-add{display:flex;flex-wrap:wrap;gap:8px;align-items:flex-end;margin:8px 0}.routine-add label{display:grid;gap:4px;flex:1 1 200px}.routine-add label:first-of-type{flex:0 1 180px}.teammate-actions,.question-options{display:flex;flex-wrap:wrap;gap:8px;margin:8px 0}.teammate-actions form,.question-options form{margin:0}.memory-edit form{display:grid;gap:8px;margin-top:6px}.memory-buttons{display:flex;flex-wrap:wrap;gap:8px}@media(max-width:600px){.teammate-tools select,.teammate-tools input{font-size:16px}}";
 /** A blank soul file: the sections a teammate reads, to fill in. */
 export declare const BLANK_SOUL = "---\nname: \nrole: \n---\n\n## Who you are\n\n\n## How you write\n\n\n## What you know\n\n\n## Decide on your own\n- \n\n## Ask first\n- \n\n## Never\n- \n";
-export declare function teammatesListHtml(store: Store, mates: readonly TeammateRow[], projects: readonly string[], projectName: (repo: string) => string, csrf: string, canCreate: boolean, notice: {
+export declare function teammatesListHtml(store: Store, mates: readonly TeammateRow[], projects: readonly string[], projectName: (repo: string) => string, canCreate: boolean, notice: {
     said?: string | null;
     problem?: string | null;
-}): string;
-export declare function teammatePageHtml(store: Store, mate: TeammateRow, viewer: string, projectName: (repo: string) => string, csrf: string, canManage: boolean, approvers: readonly string[], notice: {
+}): Html;
+export declare function teammatePageHtml(store: Store, mate: TeammateRow, viewer: string, projectName: (repo: string) => string, canManage: boolean, approvers: readonly string[], notice: {
     said?: string | null;
     problem?: string | null;
     soulDraft?: string | null;
     query?: string | null;
-}): string;
+}): Html;