toolroll 0.9.54 → 0.9.56

package/dist/demo-chat.js

@@ -4,48 +4,26 @@
  * running build's progress live; without it the page still works by reload.
  */
 import { START_COMMAND } from "./first-run.js";
+import { html, postForm } from "./html.js";
 import { headlineOf } from "./task-status.js";
 const SUGGESTIONS = ["Fix the flaky refund test", "Rewrite the empty Payouts page", "Put the new invoice view behind a flag"];
-const esc = (text) => text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
-const hidden = (csrf) => `<input type="hidden" name="csrf" value="${esc(csrf)}">`;
-function hint(csrf) {
-    return `<section class="demo-hint" aria-label="Get started">` +
-        `<p class="demo-hint-title">Ask for something, like “fix the flaky refund test”</p>` +
-        `<form method="post" action="/chat/demo/ask" class="demo-suggestions">${hidden(csrf)}` +
-        SUGGESTIONS.map(one => `<button type="submit" name="message" value="${esc(one)}">${esc(one)}</button>`).join("") +
-        `</form></section>`;
+function hint() {
+    return html `<section class="demo-hint" aria-label="Get started"><p class="demo-hint-title">Ask for something, like “fix the flaky refund test”</p>${postForm("/chat/demo/ask", SUGGESTIONS.map(one => html `<button type="submit" name="message" value="${one}">${one}</button>`), { attrs: { class: "demo-suggestions" } })}</section>`;
 }
-function planCard(exchange, csrf) {
+function planCard(exchange) {
     const plan = exchange.plan;
     const goal = exchange.note === null ? plan.goal : `${plan.goal} Also: ${exchange.note}`;
     const actions = exchange.state === "proposed"
-        ? `<div class="demo-actions">` +
-            `<form method="post" action="/chat/demo/${exchange.id}/approve" class="approve-form">${hidden(csrf)}<button type="submit">Approve</button></form>` +
-            `<details class="demo-more"><summary>Change it</summary>` +
-            `<form method="post" action="/chat/demo/${exchange.id}/change">${hidden(csrf)}` +
-            `<label for="demo-change-${exchange.id}">What should change?</label>` +
-            `<textarea id="demo-change-${exchange.id}" name="note" rows="2" maxlength="500" required></textarea>` +
-            `<button type="submit">Update plan</button></form></details></div>`
+        ? html `<div class="demo-actions">${postForm(`/chat/demo/${exchange.id}/approve`, html `<button type="submit">Approve</button>`, { attrs: { class: "approve-form" } })}<details class="demo-more"><summary>Change it</summary>${postForm(`/chat/demo/${exchange.id}/change`, html `<label for="demo-change-${exchange.id}">What should change?</label><textarea id="demo-change-${exchange.id}" name="note" rows="2" maxlength="500" required></textarea><button type="submit">Update plan</button>`)}</details></div>`
         : exchange.state === "replaced"
-            ? `<p class="meta">Replaced by the updated plan below.</p>`
-            : `<p class="meta">Approved.</p>`;
-    return `<section class="card demo-plan" aria-label="Plan">` +
-        `<p class="demo-kicker">Plan · ${esc(plan.project)}</p>` +
-        `<h2>${esc(plan.title)}</h2>` +
-        `<p>${esc(goal)}</p>` +
-        `<h3>Boundaries</h3><ul>${plan.boundaries.map(one => `<li>${esc(one)}</li>`).join("")}</ul>` +
-        `<h3>Checks</h3><ul>${plan.checks.map(one => `<li>${esc(one)}</li>`).join("")}</ul>` +
-        actions + `</section>`;
+            ? html `<p class="meta">Replaced by the updated plan below.</p>`
+            : html `<p class="meta">Approved.</p>`;
+    return html `<section class="card demo-plan" aria-label="Plan"><p class="demo-kicker">Plan · ${plan.project}</p><h2>${plan.title}</h2><p>${goal}</p><h3>Boundaries</h3><ul>${plan.boundaries.map(one => html `<li>${one}</li>`)}</ul><h3>Checks</h3><ul>${plan.checks.map(one => html `<li>${one}</li>`)}</ul>${actions}</section>`;
 }
 function buildCard(exchange) {
     const stages = [["planning", "Planning"], ["building", "Building"], ["checking", "Running checks"]];
     const at = stages.findIndex(([key]) => key === exchange.stage);
-    return `<section class="card demo-build" id="demo-${exchange.id}-work" aria-label="Build" aria-busy="true">` +
-        `<p class="demo-kicker">${esc(exchange.plan.project)}</p>` +
-        `<h2>${esc(stages[Math.max(0, at)][1])}…</h2>` +
-        `<ol class="demo-steps">${stages.map(([, label], index) => `<li class="${index < at ? "done" : index === at ? "now" : ""}"${index === at ? ` aria-current="step"` : ""}>${esc(label)}</li>`).join("")}</ol>` +
-        (exchange.progress === null ? "" : `<p class="meta demo-progress">${esc(exchange.progress)}</p>`) +
-        `</section>`;
+    return html `<section class="card demo-build" id="demo-${exchange.id}-work" aria-label="Build" aria-busy="true"><p class="demo-kicker">${exchange.plan.project}</p><h2>${stages[Math.max(0, at)][1]}…</h2><ol class="demo-steps">${stages.map(([, label], index) => html `<li class="${index < at ? "done" : index === at ? "now" : ""}"${index === at ? html ` aria-current="step"` : ""}>${label}</li>`)}</ol>${exchange.progress === null ? "" : html `<p class="meta demo-progress">${exchange.progress}</p>`}</section>`;
 }
 function diffHtml(diff) {
     return diff.replace(/\n$/, "").split("\n").map(line => {
@@ -53,71 +31,46 @@ function diffHtml(diff) {
             : line.startsWith("+++") || line.startsWith("---") ? "meta"
                 : line.startsWith("@@") ? "hunk"
                     : line.startsWith("+") ? "add" : line.startsWith("-") ? "del" : "ctx";
-        return `<span class="demo-diff-${kind}">${esc(line) || " "}</span>`;
-    }).join("");
+        return html `<span class="demo-diff-${kind}">${line || " "}</span>`;
+    });
 }
-function resultCard(exchange, csrf, result) {
+function resultCard(exchange, result) {
     if (result === null)
-        return `<section class="card demo-result"><p class="meta">This result's saved evidence is unavailable.</p></section>`;
+        return html `<section class="card demo-result"><p class="meta">This result's saved evidence is unavailable.</p></section>`;
     const passed = result.checks.status === "passed";
     // The shared headline (task-status.ts): the same words as every real task.
     const headline = headlineOf({ stage: exchange.state === "complete" ? "complete" : exchange.state === "sent-back" ? "building" : "finished",
         checks: { status: passed ? "passed" : "failed", exitCode: null, head: null } });
-    const status = `<span class="badge${headline === "Complete" ? " demo-complete" : headline === "Ready for review" ? " demo-ready" : ""}" data-headline="${headline}">${headline}</span>`;
-    const summary = `${result.files} file${result.files === 1 ? "" : "s"} changed · +${result.additions} −${result.deletions} · ` +
-        `<span class="${passed ? "demo-pass" : "demo-fail"}">${esc(result.checks.detail)}</span>`;
+    const status = html `<span class="badge${headline === "Complete" ? " demo-complete" : headline === "Ready for review" ? " demo-ready" : ""}" data-headline="${headline}">${headline}</span>`;
+    const summary = html `${result.files} file${result.files === 1 ? "" : "s"} changed · +${result.additions} −${result.deletions} · <span class="${passed ? "demo-pass" : "demo-fail"}">${result.checks.detail}</span>`;
     const actions = exchange.state === "ready"
-        ? `<div class="demo-actions">` +
-            `<form method="post" action="/chat/demo/${exchange.id}/complete">${hidden(csrf)}<button type="submit" class="demo-primary">Complete</button></form>` +
-            `<details class="demo-more"><summary>Request changes</summary>` +
-            `<form method="post" action="/chat/demo/${exchange.id}/revise">${hidden(csrf)}` +
-            `<label for="demo-revise-${exchange.id}">What should change?</label>` +
-            `<textarea id="demo-revise-${exchange.id}" name="note" rows="2" maxlength="500" required></textarea>` +
-            `<button type="submit">Send back</button></form></details></div>`
-        : `<p class="meta"><a href="${esc(result.taskHref)}">Open in Tasks</a></p>`;
-    return `<section class="card demo-result" id="demo-${exchange.id}-work" aria-label="Result">` +
-        `<p class="demo-state">${status}<span class="meta">${esc(exchange.plan.project)}</span></p>` +
-        `<h2>${esc(exchange.plan.title)}</h2>` +
-        `<p>${esc(exchange.plan.conclusion)}</p>` +
-        `<p class="meta">${summary}</p>` +
-        actions +
-        (result.diff === null ? "" : `<details class="demo-evidence"${exchange.state === "ready" ? " open" : ""}><summary>Changes</summary><pre class="demo-diff">${diffHtml(result.diff)}</pre></details>`) +
-        (result.checkLog === null ? "" : `<details class="demo-evidence"><summary>Check log</summary><pre class="demo-log">${esc(result.checkLog)}</pre></details>`) +
-        (result.screenshot === null ? "" : `<details class="demo-evidence"><summary>Screenshot</summary><figure><img src="${esc(result.screenshot.href)}" alt="${esc(result.screenshot.caption)}" width="960" height="600"><figcaption class="meta">${esc(result.screenshot.caption)}</figcaption></figure></details>`) +
-        `</section>`;
+        ? html `<div class="demo-actions">${postForm(`/chat/demo/${exchange.id}/complete`, html `<button type="submit" class="demo-primary">Complete</button>`)}<details class="demo-more"><summary>Request changes</summary>${postForm(`/chat/demo/${exchange.id}/revise`, html `<label for="demo-revise-${exchange.id}">What should change?</label><textarea id="demo-revise-${exchange.id}" name="note" rows="2" maxlength="500" required></textarea><button type="submit">Send back</button>`)}</details></div>`
+        : html `<p class="meta"><a href="${result.taskHref}">Open in Tasks</a></p>`;
+    return html `<section class="card demo-result" id="demo-${exchange.id}-work" aria-label="Result"><p class="demo-state">${status}<span class="meta">${exchange.plan.project}</span></p><h2>${exchange.plan.title}</h2><p>${exchange.plan.conclusion}</p><p class="meta">${summary}</p>${actions}${result.diff === null ? "" : html `<details class="demo-evidence"${exchange.state === "ready" ? html ` open` : ""}><summary>Changes</summary><pre class="demo-diff">${diffHtml(result.diff)}</pre></details>`}${result.checkLog === null ? "" : html `<details class="demo-evidence"><summary>Check log</summary><pre class="demo-log">${result.checkLog}</pre></details>`}${result.screenshot === null ? "" : html `<details class="demo-evidence"><summary>Screenshot</summary><figure><img src="${result.screenshot.href}" alt="${result.screenshot.caption}" width="960" height="600"><figcaption class="meta">${result.screenshot.caption}</figcaption></figure></details>`}</section>`;
 }
 /** The conversation itself; the live script swaps this region in place. */
-export function demoThreadHtml(exchanges, csrf, resultOf) {
+export function demoThreadHtml(exchanges, resultOf) {
     if (exchanges.length === 0)
-        return hint(csrf);
-    return exchanges.map(exchange => {
+        return hint();
+    return html `${exchanges.map(exchange => {
         const parts = [
-            `<div class="demo-said demo-you"><p>${esc(exchange.asked)}</p></div>`,
-            `<div class="demo-said demo-lead"><p class="demo-who">Lead</p><p>${esc(exchange.reply)}</p></div>`,
-            planCard(exchange, csrf),
+            html `<div class="demo-said demo-you"><p>${exchange.asked}</p></div>`,
+            html `<div class="demo-said demo-lead"><p class="demo-who">Lead</p><p>${exchange.reply}</p></div>`,
+            planCard(exchange),
         ];
         if (exchange.state === "working")
             parts.push(buildCard(exchange));
         if (exchange.state === "ready" || exchange.state === "complete" || exchange.state === "sent-back")
-            parts.push(resultCard(exchange, csrf, resultOf(exchange)));
+            parts.push(resultCard(exchange, resultOf(exchange)));
         if (exchange.state === "complete") {
-            parts.push(`<div class="demo-said demo-lead"><p class="demo-who">Lead</p><p>Done. That's the whole loop: ask, approve, Ready, Complete. Ask for something else whenever you like.</p></div>`, `<section class="card demo-handoff" data-demo-handoff aria-label="Your own project"><h2>Now try it on your own project</h2>` +
-                `<p>In your repository's folder, run:</p><pre class="demo-command"><code>${esc(START_COMMAND)}</code></pre>` +
-                `<p class="meta">It opens in your browser, already signed in.</p></section>`);
+            parts.push(html `<div class="demo-said demo-lead"><p class="demo-who">Lead</p><p>Done. That's the whole loop: ask, approve, Ready, Complete. Ask for something else whenever you like.</p></div>`, html `<section class="card demo-handoff" data-demo-handoff aria-label="Your own project"><h2>Now try it on your own project</h2><p>In your repository's folder, run:</p><pre class="demo-command"><code>${START_COMMAND}</code></pre><p class="meta">It opens in your browser, already signed in.</p></section>`);
         }
-        return `<article class="demo-turn" id="demo-${exchange.id}">${parts.join("")}</article>`;
-    }).join("");
+        return html `<article class="demo-turn" id="demo-${exchange.id}">${parts}</article>`;
+    })}`;
 }
 export function demoChatHtml(input) {
     const working = input.exchanges.some(one => one.state === "working");
-    return `<div class="demo-chat">` +
-        (input.problem === null ? "" : `<p class="problem" role="alert">${esc(input.problem)}</p>`) +
-        `<div id="demo-thread" class="demo-thread" aria-live="polite" data-version="${input.version}" data-working="${working ? "1" : "0"}">` +
-        demoThreadHtml(input.exchanges, input.csrf, input.resultOf) + `</div>` +
-        `<form method="post" action="/chat/demo/ask" class="demo-composer">${hidden(input.csrf)}` +
-        `<label for="demo-message" class="so-sr-only">Message the lead</label>` +
-        `<textarea id="demo-message" name="message" rows="2" maxlength="500" placeholder="Ask the lead for a change" required></textarea>` +
-        `<button type="submit" class="demo-primary">Send</button></form></div>`;
+    return html `<div class="demo-chat">${input.problem === null ? "" : html `<p class="problem" role="alert">${input.problem}</p>`}<div id="demo-thread" class="demo-thread" aria-live="polite" data-version="${input.version}" data-working="${working ? "1" : "0"}">${demoThreadHtml(input.exchanges, input.resultOf)}</div>${postForm("/chat/demo/ask", html `<label for="demo-message" class="so-sr-only">Message the lead</label><textarea id="demo-message" name="message" rows="2" maxlength="500" placeholder="Ask the lead for a change" required></textarea><button type="submit" class="demo-primary">Send</button>`, { attrs: { class: "demo-composer" } })}</div>`;
 }
 /**
  * Keeps a running build live: polls while one is working and swaps the

package/dist/deprecations.d.ts

@@ -0,0 +1,12 @@
+/**
+ * D5 (schema v117): one AI concept, the lead. The central team service (`connect`, the central `lead list|create|update|
+ * member|transfer`, `conversation …`, and `chat`/`brief` with --lead, --conversation or a saved profile) and native
+ * coding sessions (`session …`) are deprecated. For this release they still work exactly as before, but they are
+ * hidden from help, the command contract and the console, and each run says so once on stderr — never on stdout, so a
+ * `--json` answer stays one envelope. Their code goes in the next minor release.
+ */
+export type Deprecated = "team" | "session";
+/** The one line a deprecated command prints on stderr: what it is, when it goes, and what to use instead. */
+export declare function deprecationWarning(command: string, kind: Deprecated): string;
+/** What a deprecated console page or API says about itself. */
+export declare const DEPRECATED_PAGE: Record<Deprecated, string>;

package/dist/deprecations.js

@@ -0,0 +1,20 @@
+/**
+ * D5 (schema v117): one AI concept, the lead. The central team service (`connect`, the central `lead list|create|update|
+ * member|transfer`, `conversation …`, and `chat`/`brief` with --lead, --conversation or a saved profile) and native
+ * coding sessions (`session …`) are deprecated. For this release they still work exactly as before, but they are
+ * hidden from help, the command contract and the console, and each run says so once on stderr — never on stdout, so a
+ * `--json` answer stays one envelope. Their code goes in the next minor release.
+ */
+const NEXT_STEP = {
+    team: "Talk to your lead with `toolroll chat`.",
+    session: "Queue work with `toolroll task add`.",
+};
+/** The one line a deprecated command prints on stderr: what it is, when it goes, and what to use instead. */
+export function deprecationWarning(command, kind) {
+    return `Warning: \`toolroll ${command}\` is deprecated and will be removed in the next minor release. ${NEXT_STEP[kind]}`;
+}
+/** What a deprecated console page or API says about itself. */
+export const DEPRECATED_PAGE = {
+    team: "Team chat is deprecated and will be removed in the next minor release. Your lead in Chat does the same work.",
+    session: "Coding sessions are deprecated and will be removed in the next minor release. Queue work as a task instead.",
+};

package/dist/desktop-update-gate.js

@@ -9,10 +9,14 @@ const statements = (id, frozen = false) => {
         `CREATE TRIGGER ${prefix}claim BEFORE INSERT ON claim BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
         `CREATE TRIGGER ${prefix}mate BEFORE INSERT ON mate_turn BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
         `CREATE TRIGGER ${prefix}run BEFORE INSERT ON run ${frozen ? "" : "WHEN NEW.parent_run IS NULL AND NOT EXISTS (SELECT 1 FROM claim WHERE lease_id=NEW.lease_id AND released_at IS NULL) "}BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
-        // An already-owned mate turn may finish its remaining provider steps.
+        // An already-owned lead turn may finish its remaining provider steps.
         `CREATE TRIGGER ${prefix}chat BEFORE INSERT ON chat_turn ${frozen ? "" : "WHEN NEW.mate_turn IS NULL "}BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
     ];
 };
+/** A gate statement as SQLite may keep it: a table RENAME re-quotes names, and a later build may name the lead's turns
+ * lead_turn (D5). This build's updater lifts a gate it made under either name. */
+const same = (sql) => sql.replace(/"([A-Za-z_][A-Za-z0-9_]*)"/g, "$1").replace(/\b(?:mate|lead)_turn\b/g, "mate_turn");
+const owns = (wanted, sql) => wanted.map(same).includes(same(String(sql)));
 /** SQLite enforces the gate even for a CLI racing an old in-memory snapshot.
  * Existing leases, replies, heartbeats and task data remain writable. */
 export function installUpdateGate(db, id) {
@@ -20,7 +24,7 @@ export function installUpdateGate(db, id) {
     db.exec("BEGIN IMMEDIATE");
     try {
         const existing = rows(db);
-        if (existing.length > 0 && (existing.length !== wanted.length || existing.some(row => ![...wanted, ...statements(id, true)].includes(String(row.sql)))))
+        if (existing.length > 0 && (existing.length !== wanted.length || existing.some(row => !owns([...wanted, ...statements(id, true)], row.sql))))
             throw Error("Another or unrecognized update owns admission. Recover that update first.");
         if (existing.length === 0)
             for (const statement of wanted)
@@ -38,7 +42,7 @@ export function removeUpdateGate(db, id) {
     db.exec("BEGIN IMMEDIATE");
     try {
         const existing = rows(db);
-        if (existing.some(row => !wanted.includes(String(row.sql))))
+        if (existing.some(row => !owns(wanted, row.sql)))
             throw Error("This update does not own the admission pause. Nothing was cleared.");
         removeCodingUpdateGate(db, id);
         for (const row of existing)
@@ -53,7 +57,7 @@ export function removeUpdateGate(db, id) {
 export function updateAdmissionPaused(db) { return rows(db).length > 0; }
 export function updateGateOwned(db, id) {
     const wanted = [...statements(id), ...statements(id, true)], existing = rows(db);
-    return existing.length === statements(id).length && existing.every(row => wanted.includes(String(row.sql)));
+    return existing.length === statements(id).length && existing.every(row => owns(wanted, row.sql));
 }
 export function activeUpdateWork(db) {
     const count = (sql) => Number(db.prepare(sql).get()?.n ?? 0);

package/dist/desktop-update.js

@@ -8,6 +8,7 @@ import { readDesktopConfig, desktopServiceCommand, desktopServiceDefinition, ver
 import { daemonStatus } from "./daemon.js";
 import { run } from "./exec.js";
 import { readSchemaVersion, SCHEMA_VERSION, Store } from "./store.js";
+import { BASELINE_SCHEMA_VERSION } from "./store-baseline.js";
 import { activeUpdateWork, freezeUpdateGate, installUpdateGate, removeUpdateGate, updateAdmissionPaused } from "./desktop-update-gate.js";
 import { currentDesktopAccess } from "./desktop-access.js";
 import { assertCodingUpdateStopped, backupCodingCatalog, codingCatalogExists, releaseStaleCodingOwner } from "./coding-update.js";
@@ -125,6 +126,8 @@ function connect(file, readOnly = false, accepts = currentSchemaOnly) {
     const schema = readSchemaVersion(db);
     if (!schema.ok || !accepts(schema.version)) {
         db.close();
+        if (schema.ok && schema.version !== null && Math.abs(schema.version) < BASELINE_SCHEMA_VERSION)
+            throw Error(`This database is schema v${Math.abs(schema.version)}, older than v${BASELINE_SCHEMA_VERSION}: update through 0.9.x first (Toolroll 0.9.54 brings it up to date). The installed app is unchanged.`);
         throw Error("This update needs the current database schema. Use the separate verified migration procedure; the installed app is unchanged.");
     }
     return db;
@@ -474,7 +477,9 @@ function assertConfig(j) {
 }
 function snapshot(db) {
     const result = {};
-    for (const table of ["task", "task_scope", "approver", "run", "artifact", "mate_message", "project"]) {
+    // The lead's messages were mate_message before v117 (D5); a desktop update never migrates, so read whichever is here.
+    const messages = db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'lead_message'").get() === undefined ? "mate_message" : "lead_message";
+    for (const table of ["task", "task_scope", "approver", "run", "artifact", messages, "project"]) {
         const rows = db.prepare(`SELECT * FROM "${table}" ORDER BY rowid`).all();
         result[table] = rows;
     }

package/dist/discord-chat.js

@@ -1,5 +1,5 @@
 /** Discord messages and buttons transport the shared assistant's saved actions. */
-import { chatQuestionButtons } from "./teammate-question.js";
+import { chatQuestionButtons } from "./subagent-question.js";
 import { chatAskButtons } from "./chat-ask.js";
 import { chatFlowButtons } from "./chat-flow.js";
 import { refuseResultShots, resultShotsPruned, shotWaitsUntil } from "./result-shots.js";
@@ -10,7 +10,7 @@ import { readChatPart } from "./contracts/chat-content.js";
 import { readDiscordButtonToken, readDiscordComponentInteraction } from "./contracts/discord-callback.js";
 import { processChatEvent, planChatNotifications, channelAccess, chatObject as object, planRoomMessages, } from "./chat-delivery.js";
 import { chatResultHref } from "./chat-controls.js";
-import { MATE_MESSAGE_MAX_CHARS } from "./mate.js";
+import { LEAD_MESSAGE_MAX_CHARS } from "./lead.js";
 import { discordPlain, renderReply } from "./reply-shape.js";
 import { WARM_EMOJI } from "./chat-warmth.js";
 import { proposalPreview, proposalLink, proposalOutcomeText, armedCardText, armedYesLabel, } from "./chat-channel.js";
@@ -61,7 +61,7 @@ export function receiveDiscord(state, identity, type, raw, now) {
         payload = pair
             ? { hash: chatHash(pair[1]) }
             : {
-                text: body.content.slice(0, MATE_MESSAGE_MAX_CHARS + 1),
+                text: body.content.slice(0, LEAD_MESSAGE_MAX_CHARS + 1),
                 originalLength: body.content.length,
                 ...(Array.isArray(body.attachments) && body.attachments.length
                     ? {
@@ -200,7 +200,7 @@ export async function deliverDiscordPart(options) {
         return true;
     }
     try {
-        const session = event.session === null ? null : store.getMateSession(event.session), repos = await channelAccess(shared, binding, session?.ceilingDigest);
+        const session = event.session === null ? null : store.getLeadSession(event.session), repos = await channelAccess(shared, binding, session?.ceilingDigest);
         if (event.kind === "notice" && options.canNotify?.() === false)
             return false;
         const content = partContent(row.payload);
@@ -241,7 +241,7 @@ export async function deliverDiscordPart(options) {
             });
         }
         if (content.proposal) {
-            const proposal = store.getMateProposal(content.proposal);
+            const proposal = store.getLeadProposal(content.proposal);
             if (!proposal)
                 text = "This proposal is unavailable.";
             else if (proposal.state !== "pending")
@@ -294,7 +294,7 @@ export async function deliverDiscordPart(options) {
                         custom_id: `so_${one.token}`,
                     }))
                     : []),
-                // A teammate's question (v93): its options, then "Answer in words".
+                // A subagent's question (v93): its options, then "Answer in words".
                 ...(content.question
                     ? chatQuestionButtons(state, row.id, now).map((one) => ({
                         type: 2,

package/dist/discord-settings.d.ts

@@ -1,7 +1,8 @@
 import type { Store } from "./store.js";
-export declare function discordSettingsHtml(store: Store, dir: string, csrf: string, options?: {
+import { type Html } from "./html.js";
+export declare function discordSettingsHtml(store: Store, dir: string, options?: {
     code?: string;
     problem?: string;
     now?: Date;
     who?: string;
-}): string;
+}): Html;

package/dist/discord-settings.js

@@ -1,66 +1,41 @@
 import { loadPrimary } from "./webhooks.js";
+import { html, postForm } from "./html.js";
 import { loadDiscordCredentials } from "./discord-api.js";
 import { ChatState } from "./chat-delivery-state.js";
-const escape = (text) => text
-    .replaceAll("&", "&")
-    .replaceAll("<", "&lt;")
-    .replaceAll(">", "&gt;")
-    .replaceAll('"', "&quot;")
-    .replaceAll("'", "&#39;");
-export function discordSettingsHtml(store, dir, csrf, options = {}) {
+export function discordSettingsHtml(store, dir, options = {}) {
     const credentials = loadDiscordCredentials(dir), state = new ChatState(store, "discord"), bindings = credentials ? state.bindings(credentials.installation).filter(one => state.live(one)) : [], binding = options.who === undefined ? null : bindings.find(one => one.approver === options.who) ?? null, others = bindings.length - (binding === null ? 0 : 1);
     const runtime = credentials ? state.runtime(credentials.installation) : null;
     const now = options.now ?? new Date(), live = runtime &&
         runtime.leaseUntil !== null &&
         runtime.leaseUntil > now.toISOString() &&
         runtime.connected;
-    const hidden = `<input type="hidden" name="csrf" value="${escape(csrf)}">`;
-    const password = '<label>Your Toolroll password<input style="min-height:44px" type="password" name="password" autocomplete="current-password" required></label>';
-    const post = (action, content) => `<form method="post" action="/settings/discord/${action}" class="card">${hidden}${content}</form>`;
-    let content = "";
+    const password = html `<label>Your Toolroll password<input style="min-height:44px" type="password" name="password" autocomplete="current-password" required></label>`;
+    const post = (action, content) => postForm(`/settings/discord/${action}`, content, { attrs: { class: "card" } });
+    const parts = [];
     if (!credentials) {
-        content =
-            "<p>Manage projects and review results in a private Discord conversation.</p>" +
-                '<details open><summary>Create your Discord app</summary><ol><li><a href="https://discord.com/developers/applications" target="_blank" rel="noopener noreferrer">Create an application</a>, then copy its token from the Bot page.</li><li>Keep the Interactions Endpoint URL empty and privileged intents off.</li><li>Under Installation, enable Guild Install with the bot scope and no server permissions. Use its install link to add it to your server, then open a direct message to the bot.</li></ol></details>' +
-                post("connect", '<label>Bot token<input style="min-height:44px" type="password" name="bot-token" autocomplete="off" required></label>' +
-                    password +
-                    '<p class="meta">The token stays on this installation. Next, pair your own Discord account.</p><button type="submit">Connect Discord</button>');
+        parts.push(html `<p>Manage projects and review results in a private Discord conversation.</p>`, html `<details open><summary>Create your Discord app</summary><ol><li><a href="https://discord.com/developers/applications" target="_blank" rel="noopener noreferrer">Create an application</a>, then copy its token from the Bot page.</li><li>Keep the Interactions Endpoint URL empty and privileged intents off.</li><li>Under Installation, enable Guild Install with the bot scope and no server permissions. Use its install link to add it to your server, then open a direct message to the bot.</li></ol></details>`, post("connect", html `<label>Bot token<input style="min-height:44px" type="password" name="bot-token" autocomplete="off" required></label>${password}<p class="meta">The token stays on this installation. Next, pair your own Discord account.</p><button type="submit">Connect Discord</button>`));
     }
     else {
-        content = `<p><strong>${escape(credentials.workspace)}</strong> · ${live ? "Connected" : "Waiting for connection"}</p>`;
+        parts.push(html `<p><strong>${credentials.workspace}</strong> · ${live ? "Connected" : "Waiting for connection"}</p>`);
         if (runtime?.problem)
-            content += `<p role="status">${escape(String(runtime.problem))}</p>`;
+            parts.push(html `<p role="status">${String(runtime.problem)}</p>`);
         if (!live && !runtime?.problem)
-            content +=
-                "<p>Keep the Toolroll worker running to receive Discord messages.</p>";
+            parts.push(html `<p>Keep the Toolroll worker running to receive Discord messages.</p>`);
         if (options.code) {
-            content +=
-                "<h2>Pair your account</h2><p>Send this in a direct message to your Toolroll Discord app. It expires in 10 minutes.</p>" +
-                    `<label>Pairing message<input type="text" readonly value="pair ${escape(options.code)}" autocomplete="off" style="width:100%;max-width:100%;font-size:14px;min-height:44px"></label>` +
-                    '<a class="button-link" style="min-height:44px;white-space:nowrap" href="/settings/discord">Check connection</a>';
+            parts.push(html `<h2>Pair your account</h2><p>Send this in a direct message to your Toolroll Discord app. It expires in 10 minutes.</p>`, html `<label>Pairing message<input type="text" readonly value="pair ${options.code}" autocomplete="off" style="width:100%;max-width:100%;font-size:14px;min-height:44px"></label>`, html `<a class="button-link" style="min-height:44px;white-space:nowrap" href="/settings/discord">Check connection</a>`);
         }
         else if (binding && state.live(binding)) {
             const { pending, dropped: failed } = state.partCounts(binding.id);
-            content +=
-                `<p>Your Discord account is paired.${others ? ` ${others} teammate${others === 1 ? " is" : "s are"} paired too.` : ""}${pending ? ` ${pending} replies waiting to send.` : ""}${failed ? ` ${failed} replies could not be delivered. Open the saved chat to recover them.` : ""}</p>` +
-                    "<p>Try “What needs my attention?” or “Show the evidence for the latest result.”</p>" +
-                    '<p><a href="/chat">Open saved chat</a></p>' +
-                    (loadPrimary(process.env, dir) === "discord"
-                        ? "<p>Task updates are sent here.</p>"
-                        : post("alerts", '<button type="submit">Send task updates here</button>'));
+            parts.push(html `<p>Your Discord account is paired.${others ? ` ${others} teammate${others === 1 ? " is" : "s are"} paired too.` : ""}${pending ? ` ${pending} replies waiting to send.` : ""}${failed ? ` ${failed} replies could not be delivered. Open the saved chat to recover them.` : ""}</p>`, html `<p>Try “What needs my attention?” or “Show the evidence for the latest result.”</p>`, html `<p><a href="/chat">Open saved chat</a></p>`, loadPrimary(process.env, dir) === "discord"
+                ? html `<p>Task updates are sent here.</p>`
+                : post("alerts", html `<button type="submit">Send task updates here</button>`));
         }
         else {
-            content += post("pair", "<h2>Pair your account</h2><p>Your paired Discord account can read your connected projects and confirm proposed changes. Password approvals still open in Toolroll." +
-                (others ? ` ${others} teammate${others === 1 ? " is" : "s are"} already paired.` : "") + "</p>" +
-                password +
-                '<button type="submit">Create pairing code</button>');
+            parts.push(post("pair", html `<h2>Pair your account</h2><p>Your paired Discord account can read your connected projects and confirm proposed changes. Password approvals still open in Toolroll.${others ? ` ${others} teammate${others === 1 ? " is" : "s are"} already paired.` : ""}</p>${password}<button type="submit">Create pairing code</button>`));
         }
         if (binding && state.live(binding) && !options.code)
-            content += post("unpair", password + '<p class="meta">Unpairing ends every open button in your chat. Teammates are unaffected.</p><button type="submit">Unpair my account</button>');
-        content +=
-            "<details><summary>Connection settings</summary>" +
-                post("disconnect", password + '<button type="submit">Disconnect Discord</button>') +
-                "</details>";
+            parts.push(post("unpair", html `${password}<p class="meta">Unpairing ends every open button in your chat. Teammates are unaffected.</p><button type="submit">Unpair my account</button>`));
+        parts.push(html `<details><summary>Connection settings</summary>${post("disconnect", html `${password}<button type="submit">Disconnect Discord</button>`)}</details>`);
     }
-    return `<section style="max-width:42rem;overflow-wrap:anywhere"><p><a href="/settings">Settings</a></p><h1>Discord</h1>${options.problem ? `<p class="problem" role="alert">${escape(options.problem)}</p>` : ""}${content}<details><summary>Access and setup</summary><p>Private messages and replies use your Toolroll permissions. Shared channels are not supported. Secure review links use this installation’s configured HTTPS console address.</p><p>The worker connects out to Discord. It does not need a public webhook or a Tailscale account.</p></details></section>`;
+    return html `<section style="max-width:42rem;overflow-wrap:anywhere"><p><a href="/settings">Settings</a></p><h1>Discord</h1>${options.problem ? html `<p class="problem" role="alert">${options.problem}</p>` : ""}${parts}<details><summary>Access and setup</summary><p>Private messages and replies use your Toolroll permissions. Shared channels are not supported. Secure review links use this installation’s configured HTTPS console address.</p><p>The worker connects out to Discord. It does not need a public webhook or a Tailscale account.</p></details></section>`;
 }

package/dist/dispatch.d.ts

@@ -98,5 +98,5 @@ export declare function missingCapability(store: Store, taskRef: number, dispatc
 export declare function diagnoseTaskDispatch(store: Store, taskId: string, now: Date, readableRepos?: readonly string[] | null): DispatchDiagnosis | null;
 export declare function diagnosisIsDispatchable(diagnosis: DispatchDiagnosis | null): boolean;
 /** Attach the same lifecycle answer to the bounded fleet snapshot used by
- * both direct chat and the long-running mate. */
+ * both direct chat and the long-running lead. */
 export declare function withDispatchDiagnoses(store: Store, snapshot: ChatSnapshot, now: Date): ChatSnapshot;

package/dist/dispatch.js

@@ -330,7 +330,7 @@ export function diagnosisIsDispatchable(diagnosis) {
     return diagnosis?.code === "ready" || diagnosis?.code === "planning-ready" || diagnosis?.code === "scouting-ready";
 }
 /** Attach the same lifecycle answer to the bounded fleet snapshot used by
- * both direct chat and the long-running mate. */
+ * both direct chat and the long-running lead. */
 export function withDispatchDiagnoses(store, snapshot, now) {
     return {
         ...snapshot,

package/dist/envelope.js

@@ -28,7 +28,6 @@ export const CAPABILITIES = [
     "output-file", //         -o <file> writes the same envelope to a file
     "command-schema/1", //    contract --commands dumps the declared command guide
     "skill-guides/1", //      skills list / skills get serve version-matched guides
-    "session-client/1", //    typed operator transport; query the service for actual availability
 ];
 /**
  * DOCUMENTED reasons — the curated vocabulary the command guide's
@@ -71,6 +70,16 @@ export const DOCUMENTED_REASONS = [
     "repair-attempts-spent", // the chain's signed attempt cap is spent
     "repair-no-progress", // two consecutive repair attempts failed to shrink the unresolved set
     "repair-refused-integrity", // a refutation named an altered term, not a gap — no automatic repair
+    "ambiguous", //         a value could mean two things (a lease id or a branch) — refused, never guessed
+    "drift", //             the branch, pull request or result moved from the gated commit
+    "check-failed", //      the release check failed; it stays visible and nothing reruns it
+    "ci-failed", //         a required pull-request check failed or is missing — nothing merged
+    "base-moved", //        main gained a commit the release branch lacks — nothing merged
+    "tree-mismatch", //     main's merge commit has a different tree than the gated commit — nothing tagged
+    "conflict", //          a task or tag exists for a different commit
+    "mixed-runtime", //     the console, worker and CLI names don't run one build
+    "gate-held", //         a deployment stopped before its swap and left new work paused — `release --release-gate <id>`
+    "after-swap", //        the deployment got past stopping the service, so its pause is its own recovery's to lift
 ];
 let captured = null;
 let captureHook = null;

package/dist/evidence-pack.d.ts

@@ -2,6 +2,7 @@ import { type Filer } from "./approval-policy.js";
 import { type AssignmentAccess, type AssignmentSnapshot } from "./assignment.js";
 import type { SealedLedgerEntry, Store } from "./store.js";
 import type { LedgerChainReport } from "./ledger-chain.js";
+import { type Html } from "./html.js";
 export declare const EVIDENCE_PACK_FORMAT = "standing-orders/evidence-pack/v1";
 /** How to recheck one entry's seal, for whoever reads the JSON. */
 export declare const SEAL_RECIPE = "hash = sha256(prev + \"\\n\" + JSON.stringify([id, at, actor, repo, taskId, runId, action, outcome, source, detail]))";
@@ -179,7 +180,7 @@ export declare function ledgerExportChunks(store: Store, range: {
 }, access: AssignmentAccess, who: string, now: Date, evidenceRoot: string): Generator<string, void, undefined>;
 export declare const EVIDENCE_PACK_CSS: string;
 /** The pack as a page: the same facts, in the order an auditor reads them. No script. */
-export declare function evidencePackHtml(pack: EvidencePack): string;
+export declare function evidencePackHtml(pack: EvidencePack): Html;
 /** The page as a file on its own (the CLI's --html): the same facts with just enough style to print. */
 export declare function standaloneEvidenceHtml(pack: EvidencePack): string;
 export {};