toolroll 0.9.54 → 0.9.56

package/dist/flows-ui.js

@@ -12,58 +12,47 @@ import { itemCaption, whyLines } from "./flow-items.js";
 import { FLOW_FILE_MAX_BYTES } from "./flow-share.js";
 import { googleConnected } from "./google-mail.js";
 import { mailboxReady } from "./mailbox.js";
-import { labelOf, nameOf } from "./teammate-admin.js";
-import { callWords, receiptWords } from "./teammate-tools.js";
-import { undoFor } from "./teammate-week.js";
+import { labelOf, nameOf } from "./subagent-admin.js";
+import { callWords, receiptWords } from "./subagent-tools.js";
+import { undoFor } from "./subagent-week.js";
 import { flowCardTaskLine } from "./flow-card-task.js";
 import { readFlowSecrets } from "./flow-secrets.js";
-const e = (value) => String(value ?? "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+import { html, joinHtml, postForm } from "./html.js";
 const projectName = (repo) => repo.split(/[\\/]/).filter(Boolean).pop() ?? repo;
 export const FLOWS_CSS = `.flows{max-width:880px;min-width:0}.flows .card{padding:16px 18px;margin:12px 0}.flows .flow-row{display:flex;justify-content:space-between;align-items:baseline;gap:12px;flex-wrap:wrap}.flows .flow-row h2{font-size:1.05rem;margin:0}.flows .flow-counts{font-size:.85rem;color:var(--so-muted)}.flows form{display:grid;gap:10px;margin:0}.flows label{display:grid;gap:6px}.flows input,.flows select{box-sizing:border-box;width:100%;max-width:100%}.flows button{justify-self:start;min-height:44px}.flows .flow-fallback ol{padding-left:20px}.flows summary{cursor:pointer;min-height:44px;display:flex;align-items:center;font-weight:600}.flows .flow-buttons{display:flex;flex-wrap:wrap;align-items:center;gap:8px;margin:10px 0 0}.flows .flow-import{margin-top:18px;padding-top:14px;border-top:1px solid var(--so-line)}.flows .flow-import h3{font-size:.95rem;margin:0}.flows .flow-terms{list-style:none;padding:0;margin:8px 0 16px;display:grid;gap:10px}.flows .flow-terms li{white-space:pre-line;overflow-wrap:anywhere}.flows .flow-terms pre{white-space:pre-wrap;overflow-wrap:anywhere;font-size:.8rem;margin:6px 0 0}.flows .flow-import-preview h2{font-size:1rem;margin:20px 0 4px}.flows .flow-untrusted{font-weight:600}.flows button.primary{background:var(--primary);color:var(--primary-foreground);border-color:var(--primary)}.flows fieldset{border:0;padding:0;margin:0;display:grid;gap:10px;min-width:0}.flows legend{font-weight:600;padding:0;margin-bottom:6px}.flows textarea[hidden]{display:none}.flows button.secondary{background:transparent;color:var(--foreground);border:1px solid var(--border)}@media(max-width:600px){.flows input,.flows select{font-size:16px}}@media(max-width:760px){.flows .card{padding:10px 12px;margin:8px 0;position:relative}.flows .flow-row{row-gap:2px}.flows .flow-row h2 a::after{content:"";position:absolute;inset:0;border-radius:inherit}.flows .flow-counts{line-height:1.35}}`;
 /** The flows a person can open, with how many cards wait in each, and the new-flow form. */
-export function flowsListHtml(store, flows, projects, csrf, canCreate, problem) {
+export function flowsListHtml(store, flows, projects, canCreate, problem) {
     const rows = flows.map(flow => {
         const cards = store.flowCards(flow.id, false);
         const definition = flowDefinitionOf(flow);
         const waiting = cards.filter(card => ["approval", "choose"].includes(definition?.stages.find(one => one.id === card.stage)?.kind ?? "")).length;
         const buttons = store.flowTriggers(flow.id).filter(one => one.state === "active").flatMap(one => { const config = triggerConfigOf(one); return config?.kind === "button" ? [{ id: one.id, label: config.label }] : []; });
         const trouble = troubleWords(flowInsights(store, flow, new Date(), 7));
-        return `<article class="card"><div class="flow-row"><h2><a href="/flows/${flow.id}">${e(flow.name)}</a></h2><span class="flow-counts">${e(projectName(flow.repo))} · ${cards.length} card${cards.length === 1 ? "" : "s"} in progress${waiting > 0 ? ` · ${waiting} waiting for a decision` : ""}${trouble === null ? "" : ` · ${e(trouble)}`}</span></div>` +
-            (buttons.length === 0 ? "" : `<p class="flow-buttons">${buttons.map(one => `<a class="button-link" href="/flows/${flow.id}?start=${one.id}">${e(one.label)}</a>`).join(" ")}</p>`) + `</article>`;
-    }).join("");
-    const projectField = projects.length === 1 ? `<input type="hidden" name="repo" value="${e(projects[0])}">` : `<label>Project<select name="repo">${projects.map(repo => `<option value="${e(repo)}">${e(projectName(repo))}</option>`).join("")}</select></label>`;
+        return html `<article class="card"><div class="flow-row"><h2><a href="/flows/${flow.id}">${flow.name}</a></h2><span class="flow-counts">${projectName(flow.repo)} · ${cards.length} card${cards.length === 1 ? "" : "s"} in progress${waiting > 0 ? ` · ${waiting} waiting for a decision` : ""}${trouble === null ? "" : ` · ${trouble}`}</span></div>${buttons.length > 0 && html `<p class="flow-buttons">${joinHtml(buttons.map(one => html `<a class="button-link" href="/flows/${flow.id}?start=${one.id}">${one.label}</a>`), " ")}</p>`}</article>`;
+    });
+    const projectField = projects.length === 1 ? html `<input type="hidden" name="repo" value="${projects[0]}">` : html `<label>Project<select name="repo">${projects.map(repo => html `<option value="${repo}">${projectName(repo)}</option>`)}</select></label>`;
     // A flow file (flow-share.ts): chosen here or fetched from a gist, previewed in plain words before anything is made.
-    const importForm = `<form method="post" action="/flows/import" class="flow-import" data-flow-import><input type="hidden" name="csrf" value="${e(csrf)}"><h3>Or import a flow file</h3>${projectField}<label>File<input type="file" accept=".json,application/json" data-flow-file></label><textarea name="document" hidden data-flow-document></textarea><label>Or its address<input name="url" type="url" inputmode="url" placeholder="https://gist.github.com/…"></label><p class="problem" role="alert" data-flow-file-note hidden></p><button>Preview import</button></form>`;
+    const importForm = postForm("/flows/import", html `<h3>Or import a flow file</h3>${projectField}<label>File<input type="file" accept=".json,application/json" data-flow-file></label><textarea name="document" hidden data-flow-document></textarea><label>Or its address<input name="url" type="url" inputmode="url" placeholder="https://gist.github.com/…"></label><p class="problem" role="alert" data-flow-file-note hidden></p><button>Preview import</button>`, { attrs: { class: "flow-import", "data-flow-import": true } });
     // A new flow starts from the gallery (Flows → New): templates grouped by what they're for.
-    const create = canCreate && projects.length > 0 ? `<p class="flow-buttons"><a class="button-link" href="/flows/new">New flow</a></p>${importForm}` : "";
+    const create = canCreate && projects.length > 0 && html `<p class="flow-buttons"><a class="button-link" href="/flows/new">New flow</a></p>${importForm}`;
     // No flows yet: one click makes a working example with a sample question in it.
     const example = flows.length === 0 && canCreate && projects.length > 0
-        ? `<form method="post" action="/flows/example" class="card flow-example"><input type="hidden" name="csrf" value="${e(csrf)}"><h2>See a flow work</h2><p class="meta">Claude drafts a reply to a sample customer question; you approve it here or in your chat app.</p>${projects.length === 1 ? `<input type="hidden" name="repo" value="${e(projects[0])}">` : `<label>Project<select name="repo">${projects.map(repo => `<option value="${e(repo)}">${e(projectName(repo))}</option>`).join("")}</select></label>`}<button>Try an example</button></form>`
-        : "";
-    const intro = `<p class="meta">A flow is your process drawn as zones. Cards move through them: agents do the work, people approve, and the team hears about it.</p>` +
-        (canCreate && projects.length > 0 ? `<p class="flow-chat">Describe how work should move and your lead drafts the flow for you to confirm, or start from a template. <a href="/chat?draft=${encodeURIComponent("Make a flow for ")}">Describe it in chat</a></p>` : "") +
-        `<p class="flow-chat">AI teammates can decide and handle cards for you, within rules you write. <a href="/teammates">Teammates</a> · or set one up with its flow in one click: <a href="/kits">Starter kits</a></p>`;
-    return `<section class="flows">${problem === null ? "" : `<p class="problem" role="alert">${e(problem)}</p>`}${intro}${create}${rows || example || '<p class="meta">No flows yet.</p>'}</section>`;
+        ? postForm("/flows/example", html `<h2>See a flow work</h2><p class="meta">Claude drafts a reply to a sample customer question; you approve it here or in your chat app.</p>${projectField}<button>Try an example</button>`, { attrs: { class: "card flow-example" } })
+        : null;
+    const intro = html `<p class="meta">A flow is your process drawn as zones. Cards move through them: agents do the work, people approve, and the team hears about it.</p>${canCreate && projects.length > 0 && html `<p class="flow-chat">Describe how work should move and your lead drafts the flow for you to confirm, or start from a template. <a href="/chat?draft=${encodeURIComponent("Make a flow for ")}">Describe it in chat</a></p>`}<p class="flow-chat">subagents can decide and handle cards for you, within rules you write. <a href="/settings/lead/subagents">Subagents</a> · or set one up with its flow in one click: <a href="/kits">Starter kits</a></p>`;
+    return html `<section class="flows">${problem !== null && html `<p class="problem" role="alert">${problem}</p>`}${intro}${create}${rows.length > 0 ? rows : example ?? html `<p class="meta">No flows yet.</p>`}</section>`;
 }
 /** Reads the chosen flow file into the form (the server reads it again, whole, before anything is made). */
 export const FLOW_IMPORT_SCRIPT = `(function(){var form=document.querySelector('[data-flow-import]');if(!form)return;var input=form.querySelector('[data-flow-file]'),text=form.querySelector('[data-flow-document]'),note=form.querySelector('[data-flow-file-note]'),address=form.querySelector('[name=url]');function say(words){note.textContent=words;note.hidden=words==='';}var reading=null;input.addEventListener('change',function(){text.value='';say('');var file=input.files&&input.files[0];if(!file){reading=null;return;}if(file.size>${FLOW_FILE_MAX_BYTES}){say('That file is too big: a flow file is at most ${FLOW_FILE_MAX_BYTES / 1024} KB.');input.value='';reading=null;return;}reading=file.text().then(function(value){text.value=value;});});form.addEventListener('submit',function(event){if(reading!==null&&text.value===''){event.preventDefault();reading.then(function(){form.requestSubmit();});return;}if(text.value===''&&address.value.trim()===''){event.preventDefault();say('Choose a flow file or give its address.');}});})();`;
 /** An import's preview: the plan in plain words, what it asks for, and one Import button after the terms. */
 export function flowImportHtml(input) {
     const { plan, file } = input;
-    const fields = file.parameters.map(one => `<label><span>${e(one.about)}${one.optional === true ? ' <span class="meta">(optional)</span>' : ""}</span><input name="param.${e(one.id)}" value="${e(input.values[one.id] ?? plan?.values[one.id] ?? one.default ?? "")}" maxlength="200" autocomplete="off"></label>`).join("");
-    const list = (items) => items.length === 0 ? "" : `<ul class="flow-terms">${items.map(term => `<li>${e(term)}</li>`).join("")}</ul>`;
+    const fields = file.parameters.map(one => html `<label><span>${one.about}${one.optional === true && html ` <span class="meta">(optional)</span>`}</span><input name="param.${one.id}" value="${input.values[one.id] ?? plan?.values[one.id] ?? one.default ?? ""}" maxlength="200" autocomplete="off"></label>`);
+    const list = (items) => items.length === 0 ? "" : html `<ul class="flow-terms">${items.map(term => html `<li>${term}</li>`)}</ul>`;
     // The steps, what they mean, the triggers and the scripts; each script's code one tap away, as on the Scripts panel.
-    const terms = plan === null ? "" : (plan.parts.about === null ? "" : `<p>${e(plan.parts.about)}</p>`) +
-        `<p class="flow-untrusted">Its instructions come from the file, not from you: read what each step is asked before you import.</p>` +
-        list(plan.parts.steps) +
-        (plan.parts.triggers.length === 0 ? "" : `<h2>Triggers</h2>${list(plan.parts.triggers)}`) +
-        (plan.parts.scripts.length + plan.parts.kept.length === 0 ? "" : `<h2>Scripts</h2><ul class="flow-terms">${plan.scripts.add.map((one, index) => `<li>${e(plan.parts.scripts[index])}${one.body === undefined ? "" : `<details><summary>Show the script</summary><pre>${e(one.body)}</pre></details>`}</li>`).join("")}${plan.parts.kept.map(one => `<li>${e(one)}</li>`).join("")}</ul>`) +
-        `<h2>Good to know</h2>${list([...plan.parts.notes, ...(plan.parts.needs === null ? [] : [plan.parts.needs])])}`;
-    return `<section class="flows flow-import-preview">${input.problem === null ? "" : `<p class="problem" role="alert">${e(input.problem)}</p>`}` +
-        `<p class="meta">Into ${e(projectName(input.repo))}. Nothing is made until you import it.</p>${terms}` +
-        `<form method="post" action="/flows/import" class="card"><input type="hidden" name="csrf" value="${e(input.csrf)}"><input type="hidden" name="repo" value="${e(input.repo)}"><input type="hidden" name="previewed" value="${e(input.previewed)}"><textarea name="document" hidden>${e(input.document)}</textarea>` +
-        (fields === "" ? "" : `<fieldset class="flow-import-fields"><legend>Fill in</legend>${fields}</fieldset>`) +
-        `<p class="flow-buttons">${plan === null ? "" : '<button name="confirm" value="yes" class="primary">Import flow</button>'}${fields === "" ? "" : `<button name="confirm" value="" class="${plan === null ? "" : "secondary"}">Update preview</button>`}<a href="/flows">Cancel</a></p></form></section>`;
+    const terms = plan === null ? "" : html `${plan.parts.about !== null && html `<p>${plan.parts.about}</p>`}<p class="flow-untrusted">Its instructions come from the file, not from you: read what each step is asked before you import.</p>${list(plan.parts.steps)}${plan.parts.triggers.length > 0 && html `<h2>Triggers</h2>${list(plan.parts.triggers)}`}${plan.parts.scripts.length + plan.parts.kept.length > 0 && html `<h2>Scripts</h2><ul class="flow-terms">${plan.scripts.add.map((one, index) => html `<li>${plan.parts.scripts[index]}${one.body !== undefined && html `<details><summary>Show the script</summary><pre>${one.body}</pre></details>`}</li>`)}${plan.parts.kept.map(one => html `<li>${one}</li>`)}</ul>`}<h2>Good to know</h2>${list([...plan.parts.notes, ...(plan.parts.needs === null ? [] : [plan.parts.needs])])}`;
+    const form = postForm("/flows/import", html `<textarea name="document" hidden>${input.document}</textarea>${fields.length > 0 && html `<fieldset class="flow-import-fields"><legend>Fill in</legend>${fields}</fieldset>`}<p class="flow-buttons">${plan !== null && html `<button name="confirm" value="yes" class="primary">Import flow</button>`}${fields.length > 0 && html `<button name="confirm" value="" class="${plan === null ? "" : "secondary"}">Update preview</button>`}<a href="/flows">Cancel</a></p>`, { attrs: { class: "card" }, hidden: { repo: input.repo, previewed: input.previewed } });
+    return html `<section class="flows flow-import-preview">${input.problem !== null && html `<p class="problem" role="alert">${input.problem}</p>`}<p class="meta">Into ${projectName(input.repo)}. Nothing is made until you import it.</p>${terms}${form}</section>`;
 }
 const historyText = (event, title, sorts = new Set()) => {
     const who = event.actor === "flow" ? "" : ` by ${event.actor}`;
@@ -86,7 +75,7 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
     const title = (id) => stages.find(one => one.id === id)?.title ?? id;
     const sortZones = new Set(stages.filter(one => one.kind === "sort").map(one => one.id));
     const decisions = sortZones.size === 0 ? new Map() : store.flowSortDecisions(flow.id);
-    const mates = new Map(store.teammates([flow.repo]).map(one => [one.id, one]));
+    const mates = new Map(store.subagents([flow.repo]).map(one => [one.id, one]));
     const taskSecrets = new Map();
     const secretsFor = (repo) => {
         if (!taskSecrets.has(repo))
@@ -103,9 +92,9 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
         const discussion = store.flowComments(card.id);
         const watchers = store.flowCardWatchers(card.id);
         const decider = stage?.kind === "approval" ? deciderOf(stage, flow) : null;
-        // While its teammate is deciding (v92), the card isn't anyone else's to decide yet.
-        const teammateDeciding = stage?.teammate !== undefined && card.waiting !== null && card.waiting.endsWith(" is deciding");
-        const canDecide = viewer.approver && card.state === "active" && stage?.kind === "approval" && (decider === null || decider === viewer.name) && !teammateDeciding;
+        // While its subagent is deciding (v92), the card isn't anyone else's to decide yet.
+        const subagentDeciding = stage?.subagent !== undefined && card.waiting !== null && card.waiting.endsWith(" is deciding");
+        const canDecide = viewer.approver && card.state === "active" && stage?.kind === "approval" && (decider === null || decider === viewer.name) && !subagentDeciding;
         // History reads moves and ownership together, newest first.
         const owned = discussion.filter(one => one.kind === "owner").map(one => ({ text: one.body === "" ? `${one.author} left it without an owner` : one.body === one.author ? `${one.author} took it on` : `${one.author} made ${one.body} the owner`, at: one.at }));
         const moves = store.flowEvents(card.id).map(event => ({ text: historyText(event, title, sortZones), at: event.at }));
@@ -120,15 +109,15 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
             label: stage.wait !== undefined && stage.wait.for !== "hours" ? (stage.wait.for === "reply" ? "No reply by" : "Moves on at") : stage.limit.to !== null ? `Moves to ${title(stage.limit.to)} at` : "Reminder at",
         };
         // Its open question: one of its own, or (v94) a tool call waiting for approval.
-        const asked = card.state === "active" ? store.openTeammateQuestionOn(card.id, card.entry) : null;
-        const pending = asked?.toolCall == null ? null : store.teammateCall(asked.toolCall);
-        // A decision its teammate handed over carries what the teammate said (v92).
-        const turn = card.state === "active" && stage?.kind === "approval" && stage.teammate !== undefined ? store.flowStepRun(card.id, card.entry) : null;
+        const asked = card.state === "active" ? store.openSubagentQuestionOn(card.id, card.entry) : null;
+        const pending = asked?.toolCall == null ? null : store.subagentCall(asked.toolCall);
+        // A decision its subagent handed over carries what the subagent said (v92).
+        const turn = card.state === "active" && stage?.kind === "approval" && stage.subagent !== undefined ? store.flowStepRun(card.id, card.entry) : null;
         let handoff = null;
-        if (turn !== null && turn.kind === "teammate" && turn.state === "passed") {
+        if (turn !== null && turn.kind === "subagent" && turn.state === "passed") {
             try {
                 const said = JSON.parse(turn.decisionJson ?? "{}");
-                const mate = store.teammateByHandle(flow.repo, stage.teammate);
+                const mate = store.subagentByHandle(flow.repo, stage.subagent);
                 if (said.action === "hand_off" && typeof said.note === "string" && said.note !== "" && mate !== null)
                     handoff = { from: labelOf(mate), note: said.note };
             }
@@ -136,7 +125,7 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
                 handoff = null;
             }
         }
-        const asker = asked === null || asked.state !== "open" ? null : store.getTeammate(asked.teammate);
+        const asker = asked === null || asked.state !== "open" ? null : store.getSubagent(asked.subagent);
         // "Person chooses" (flow-send.ts): what was sent, and the options, for the person it waits on; the latest send otherwise.
         const choosing = card.state === "active" && stage?.kind === "choose" ? flowChoiceAt(store, card.id, card.entry) : null;
         const latest = store.flowSends(card.id)[0] ?? null;
@@ -173,11 +162,11 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
             question: asked === null || asked.state !== "open" || asker === null ? null
                 : { id: asked.id, from: labelOf(asker), question: asked.question, options: asked.options, askedOf: asked.askedOf, mine: asked.askedOf === viewer.name,
                     call: pending === null ? null : { why: pending.why, rule: pending.result ?? "" } },
-            calls: store.teammateCallsOn(card.id).slice(-30).map(call => {
-                const mate = mates.get(call.teammate) ?? null;
+            calls: store.subagentCallsOn(card.id).slice(-30).map(call => {
+                const mate = mates.get(call.subagent) ?? null;
                 // A person's undo (v97) reads as theirs, and its outcome says what it undid.
-                return { id: call.id, who: call.undoOf !== null ? call.decidedBy ?? "A person" : mate === null ? "A teammate" : nameOf(mate), words: callWords(call.tool, call.action, call.input, 400), state: call.state, outcome: receiptWords(store, call),
-                    why: call.undoOf !== null ? "" : call.why, result: call.state === "asked" ? null : call.result, at: call.createdAt, teammate: call.teammate, undo: viewer.approver ? undoFor(store, call) : null };
+                return { id: call.id, who: call.undoOf !== null ? call.decidedBy ?? "A person" : mate === null ? "A subagent" : nameOf(mate), words: callWords(call.tool, call.action, call.input, 400), state: call.state, outcome: receiptWords(store, call),
+                    why: call.undoOf !== null ? "" : call.why, result: call.state === "asked" ? null : call.result, at: call.createdAt, subagent: call.subagent, undo: viewer.approver ? undoFor(store, call) : null };
             }),
         };
     });
@@ -208,7 +197,7 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
         startTrigger: setup.startTrigger ?? null,
         me: viewer.name,
         sortReady: setup.sortReady ?? false,
-        teammates: store.teammates([flow.repo]).map(mate => ({ handle: mate.handle, label: labelOf(mate), name: nameOf(mate), working: mate.state === "active", href: `/teammates/${mate.id}` })),
+        subagents: store.subagents([flow.repo]).map(mate => ({ handle: mate.handle, label: labelOf(mate), name: nameOf(mate), working: mate.state === "active", href: `/settings/lead/subagents/${mate.id}` })),
         emailReady: sendingReady(setup.dir),
         requestSecrets: flowSecretNames(setup.dir, flow.repo),
         tools: projectToolsOf(store, flow.repo).map(tool => ({ name: tool.name, about: tool.spec.about, functions: tool.lastTest?.ok === true ? tool.lastTest.tools : [],
@@ -230,8 +219,8 @@ export function flowView(store, flow, viewer, selectedCard, setup = { dir: null,
 }
 /** The page the canvas replaces when scripts can't run: each zone and its cards, in order. */
 export function flowFallbackHtml(view) {
-    return `<section class="flows flow-fallback"><p class="meta">${e(view.flow.project)}</p><ol>${view.stages.map(stage => {
+    return html `<section class="flows flow-fallback"><p class="meta">${view.flow.project}</p><ol>${view.stages.map(stage => {
         const cards = view.cards.filter(card => card.stage === stage.id && card.state === "active");
-        return `<li><strong>${e(stage.title)}</strong> · ${e(FLOW_KIND_WORDS[stage.kind].label)}${cards.length === 0 ? "" : `<ul>${cards.map(card => `<li>${e(card.title)}${card.waiting === null ? "" : ` — ${e(card.waiting)}`}</li>`).join("")}</ul>`}</li>`;
-    }).join("")}</ol></section>`;
+        return html `<li><strong>${stage.title}</strong> · ${FLOW_KIND_WORDS[stage.kind].label}${cards.length > 0 && html `<ul>${cards.map(card => html `<li>${card.title}${card.waiting !== null && ` — ${card.waiting}`}</li>`)}</ul>`}</li>`;
+    })}</ol></section>`;
 }

package/dist/flows.js

@@ -49,9 +49,10 @@
  */
 import { TEXT_LIMITS } from "./text-limits.js";
 import { createHash } from "node:crypto";
+import { projectName } from "./project.js";
 import { parseContract, readVersioned } from "./contracts/contract.js";
 import { stageReferenceProblems } from "./contracts/stage-output.js";
-import { CHOICES_MAX, CHOICES_MIN, FLOW_ALIASES, FLOW_COLORS, FLOW_DEFINITION_VERSION, FLOW_END, FLOW_MERGE_METHODS, FLOW_STAGE_KINDS, flowDefinitionSchema, flowStepsSchema, HEADERS_MAX, LONGEST_WAIT_MINUTES, savedFlowDefinitionSchema, SCRIPT_LANGUAGES, SCRIPT_NAME, sortKeyOf, SURE_AT_MAX, SURE_AT_MIN, ZONE_ID, } from "./contracts/flow.js";
+import { CHOICES_MAX, CHOICES_MIN, FLOW_ALIASES, FLOW_COLORS, FLOW_DEFINITION_VERSION, FLOW_END, FLOW_MERGE_METHODS, FLOW_STAGE_KINDS, flowDefinitionSchema, flowStepsSchema, HEADERS_MAX, legacySubagentStep, LONGEST_WAIT_MINUTES, savedFlowDefinitionSchema, SCRIPT_LANGUAGES, SCRIPT_NAME, sortKeyOf, SURE_AT_MAX, SURE_AT_MIN, ZONE_ID, } from "./contracts/flow.js";
 export { CHOICES_MAX, CHOICES_MIN, FLOW_COLORS, FLOW_END, FLOW_MERGE_METHODS, FLOW_STAGE_KINDS, LONGEST_WAIT_MINUTES, SCRIPT_LANGUAGES, SCRIPT_NAME, sortKeyOf };
 /** What each kind is called and does, in the words the canvas uses. */
 export const FLOW_KIND_WORDS = {
@@ -69,7 +70,7 @@ export const FLOW_KIND_WORDS = {
     draft: { label: "Draft", about: "Claude writes a reply, summary or note from the card in seconds. Nothing is sent until a later step sends it." },
     sort: { label: "Sort", about: "Jev reads the card in under a second and sends it where its answer leads. Cards it isn't sure about take the not-sure path." },
     wait: { label: "Wait", about: "Waits for a reply to the card's email, or for a set time. A reply moves the card on; if none comes in time, it takes the no-reply path." },
-    teammate: { label: "Teammate handles it", about: "An AI teammate reads the card, decides where it goes within its rules, and writes what the next zones send. When its rules say to ask, it asks you first." },
+    subagent: { label: "Subagent handles it", about: "A subagent reads the card, decides where it goes within its rules, and writes what the next zones send. When its rules say to ask, it asks you first." },
     send: { label: "Send to me", about: "Sends the card's owner what the step before produced: its summary, links and any screenshots, in each chat app they use and on the card. Then moves on." },
     choose: { label: "Person chooses", about: "Sends the card's owner what was done with 2 to 4 buttons you name, in their chat apps and here. Each leads to a zone or ignores the card; a reply instead goes where replies go, as the note." },
     done: { label: "Done", about: "The end of the flow." },
@@ -169,7 +170,7 @@ function canonicalSort(input) {
         sureAt, notes,
     };
 }
-/** A script's or teammate's answers as every release has kept them: trimmed, none left out. */
+/** A script's or subagent's answers as every release has kept them: trimmed, none left out. */
 function canonicalRoutes(input) {
     if (!given(input))
         return undefined;
@@ -199,7 +200,7 @@ function canonicalWait(input) {
 function canonicalStage(input, index) {
     if (!isRecord(input))
         return input;
-    const stage = input;
+    const stage = legacySubagentStep(input);
     const kind = stage["kind"];
     const zone = isRecord(stage["zone"]) ? stage["zone"] : {};
     const planning = stage["planning"] === "required" || stage["planning"] === "skip" || stage["planning"] === "auto" ? stage["planning"] : null;
@@ -230,9 +231,9 @@ function canonicalStage(input, index) {
         ...(kind === "wait" ? { wait: canonicalWait(stage["wait"]) } : {}),
         // true is a squash, the default; false or none is no merge.
         ...(kind === "pull-request" && given(stage["merge"]) && stage["merge"] !== false ? { merge: stage["merge"] === true ? "squash" : stage["merge"] } : {}),
-        ...((kind === "approval" || kind === "teammate") && given(stage["teammate"]) && stage["teammate"] !== "" ? { teammate: stage["teammate"] } : {}),
-        ...(kind === "teammate" && routes !== undefined ? { routes } : {}),
-        ...(kind === "teammate" && stage["reply"] === true ? { reply: true } : {}),
+        ...((kind === "approval" || kind === "subagent") && given(stage["subagent"]) && stage["subagent"] !== "" ? { subagent: stage["subagent"] } : {}),
+        ...(kind === "subagent" && routes !== undefined ? { routes } : {}),
+        ...(kind === "subagent" && stage["reply"] === true ? { reply: true } : {}),
         ...(kind === "choose" ? { options: Array.isArray(stage["options"]) ? stage["options"].map(one => { const row = isRecord(one) ? one : {}; return { label: said(row["label"]), to: said(row["to"]) }; }) : given(stage["options"]) ? stage["options"] : [] } : {}),
         ...(kind === "task" && given(stage["repo"]) && stage["repo"] !== "" ? { repo: said(stage["repo"]) } : {}),
         ...(limit === undefined ? {} : { limit }),
@@ -564,7 +565,7 @@ function fillOne(key, stage, card) {
         return stage === undefined ? "" : card.outputs[stage] ?? "";
     }
 }
-const KIND_COLORS = { inbox: "slate", task: "blue", report: "violet", approval: "amber", check: "blue", "pull-request": "blue", update: "green", notify: "green", sort: "violet", draft: "violet", request: "blue", email: "green", tool: "blue", wait: "slate", teammate: "violet", send: "green", choose: "amber", done: "green" };
+const KIND_COLORS = { inbox: "slate", task: "blue", report: "violet", approval: "amber", check: "blue", "pull-request": "blue", update: "green", notify: "green", sort: "violet", draft: "violet", request: "blue", email: "green", tool: "blue", wait: "slate", subagent: "violet", send: "green", choose: "amber", done: "green" };
 /** A step id as the lead may write it (sort_by_hand, Sort-By-Hand) in the one form zones use. */
 const idOf = (value) => value.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 32);
 const slugOf = (title) => title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 28) || "zone";
@@ -631,7 +632,7 @@ export function withKeptSteps(steps, previous) {
 }
 /** A flow's steps, read by their one schema: `steps[0].routes[0]: unknown key 'to' (did you mean goesTo?)`. */
 export function readFlowSteps(input, previous = null) {
-    const read = parseContract(flowStepsSchema, { steps: withKeptSteps(input, previous) }, FLOW_ALIASES);
+    const read = parseContract(flowStepsSchema, { steps: withKeptSteps(Array.isArray(input) ? input.map(legacySubagentStep) : input, previous) }, FLOW_ALIASES);
     return read.ok ? { ok: true, value: read.value.steps } : read;
 }
 /**
@@ -706,7 +707,7 @@ export function flowFromSteps(input, previous = null) {
             id, title, kind,
             zone: old?.zone ?? { x: 0, y: 0, w: 260, h: kind === "done" || kind === "notify" || kind === "send" ? 220 : 300, color: KIND_COLORS[kind] },
             // A kept step on our default instructions gets the default again, so it reads any research step added before it.
-            instructions: kind === "teammate" ? step.instructions?.trim() || old?.instructions || "Read the card and decide what happens next."
+            instructions: kind === "subagent" ? step.instructions?.trim() || old?.instructions || "Read the card and decide what happens next."
                 : kind === "draft" ? step.instructions?.trim() || old?.instructions || DRAFT_DEFAULT
                     : kind === "task" || kind === "report"
                         ? step.instructions?.trim() || (old?.instructions && old.instructions !== defaultInstructions(kind, previous.stages.slice(0, previous.stages.indexOf(old))) ? old.instructions : defaultInstructions(kind, earlier))
@@ -730,10 +731,10 @@ export function flowFromSteps(input, previous = null) {
             ...(kind === "tool" ? { tool: { server: step.server ?? old?.tool?.server ?? "", name: step.tool ?? old?.tool?.name ?? "", args: typeof step.args === "string" ? step.args : step.args !== undefined ? JSON.stringify(step.args) : old?.tool?.args ?? "{}" } } : {}),
             ...(kind === "wait" ? { wait: waitFromStep(step, old?.wait ?? null, at) } : {}),
             ...(kind === "pull-request" && (step.merge === undefined ? old?.merge !== undefined : step.merge !== false) ? { merge: step.merge === undefined || step.merge === true || step.merge === false ? old?.merge ?? "squash" : step.merge } : {}),
-            // v92: "nobody" (or "none") takes a teammate off an approval step.
-            ...((kind === "approval" || kind === "teammate") && (step.teammate === undefined ? old?.teammate !== undefined : !/^(nobody|none|no one)$/i.test(step.teammate.trim())) ? { teammate: idOf(step.teammate ?? old.teammate) } : {}),
-            ...(kind === "teammate" ? step.routes !== undefined ? routesOf(step.routes) : old?.routes === undefined ? {} : { routes: old.routes } : {}),
-            ...(kind === "teammate" && (step.reply ?? old?.reply) === true ? { reply: true } : {}),
+            // v92: "nobody" (or "none") takes a subagent off an approval step.
+            ...((kind === "approval" || kind === "subagent") && (step.subagent === undefined ? old?.subagent !== undefined : !/^(nobody|none|no one)$/i.test(step.subagent.trim())) ? { subagent: idOf(step.subagent ?? old.subagent) } : {}),
+            ...(kind === "subagent" ? step.routes !== undefined ? routesOf(step.routes) : old?.routes === undefined ? {} : { routes: old.routes } : {}),
+            ...(kind === "subagent" && (step.reply ?? old?.reply) === true ? { reply: true } : {}),
             ...(kind === "choose" ? { options: choicesFromStep(step, old?.options ?? null, at, find) } : {}),
             ...(kind === "task" && (step.repo ?? old?.repo) !== undefined && (step.repo ?? old?.repo).trim() !== "" ? { repo: (step.repo ?? old?.repo).trim() } : {}),
             ...(() => {
@@ -869,7 +870,7 @@ export function flowTerms(definition, previous) {
         if (stage.kind === "task" && stage.planning !== "auto")
             lines.push(stage.planning === "required" ? "Plans first." : "Builds without a plan.");
         if (stage.kind === "task" && stage.repo !== undefined)
-            lines.push(`Builds in another project: ${stage.repo}`);
+            lines.push(`Builds in project: ${projectName(stage.repo)}`);
         if (stage.kind === "draft")
             lines.push(`Claude writes: ${plain(stage.instructions ?? "")}`, `Then → ${to(stage.next)}`);
         else if (stage.kind === "request" && stage.request !== undefined) {
@@ -881,9 +882,9 @@ export function flowTerms(definition, previous) {
         else if (stage.kind === "tool" && stage.tool !== undefined)
             lines.push(`Uses ${stage.tool.server} → ${stage.tool.name} with ${plain(stage.tool.args).slice(0, 400)}`, `Then → ${to(stage.next)}${stage.onFail === null ? " If it fails → waits there." : ` If it fails → ${to(stage.onFail)}`}`);
         else if (stage.kind === "approval")
-            lines.push(`Decides: ${stage.teammate !== undefined ? `the AI teammate ${stage.teammate}, within its rules, handing hard ones to ${stage.toOwner === true ? "the flow's owner" : stage.approver ?? "anyone who approves"}` : stage.toOwner === true ? "the flow's owner, in their chat app" : stage.approver ?? "anyone who approves on this project"}. Approve → ${to(stage.next)} Send back → ${stage.onFail === null ? "not possible." : to(stage.onFail)}`);
-        else if (stage.kind === "teammate")
-            lines.push(`The AI teammate ${stage.teammate ?? "(none)"} handles it${stage.instructions === null ? "" : `: ${plain(stage.instructions)}`}`, ...(stage.routes === undefined || stage.routes.length === 0 ? [`Then → ${to(stage.next)}`] : stage.routes.map(one => `${one.answer} → ${to(one.to)}`)), `It asks the flow's owner when its rules say to.${stage.reply === true ? " It sends what it writes back to whoever asked." : ""}${stage.onFail === null ? "" : ` If it can't → ${to(stage.onFail)}`}`);
+            lines.push(`Decides: ${stage.subagent !== undefined ? `the subagent ${stage.subagent}, within its rules, handing hard ones to ${stage.toOwner === true ? "the flow's owner" : stage.approver ?? "anyone who approves"}` : stage.toOwner === true ? "the flow's owner, in their chat app" : stage.approver ?? "anyone who approves on this project"}. Approve → ${to(stage.next)} Send back → ${stage.onFail === null ? "not possible." : to(stage.onFail)}`);
+        else if (stage.kind === "subagent")
+            lines.push(`The subagent ${stage.subagent ?? "(none)"} handles it${stage.instructions === null ? "" : `: ${plain(stage.instructions)}`}`, ...(stage.routes === undefined || stage.routes.length === 0 ? [`Then → ${to(stage.next)}`] : stage.routes.map(one => `${one.answer} → ${to(one.to)}`)), `It asks the flow's owner when its rules say to.${stage.reply === true ? " It sends what it writes back to whoever asked." : ""}${stage.onFail === null ? "" : ` If it can't → ${to(stage.onFail)}`}`);
         else if (stage.kind === "notify")
             lines.push(`Posts: ${plain(stage.message ?? "")}`, `Then → ${to(stage.next)}`);
         else if (stage.kind === "send")
@@ -944,8 +945,8 @@ export function flowTerms(definition, previous) {
         terms.push("Draft steps send each card's text to Claude through the lead chat's sign-in. Nothing a draft writes is sent until a later step sends it.");
     if (definition.stages.some(one => one.kind === "task" && one.repo !== undefined))
         terms.push("A build step in another project files its task there, only when the flow's owner may file work in that project.");
-    if (definition.stages.some(one => one.teammate !== undefined))
-        terms.push("AI teammates decide and act within their soul files' rules, reading each card through Claude on this computer's sign-in; they never approve code tasks or merges.");
+    if (definition.stages.some(one => one.subagent !== undefined))
+        terms.push("subagents decide and act within their soul files' rules, reading each card through Claude on this computer's sign-in; they never approve code tasks or merges.");
     return terms;
 }
 const zone = (x, y, color, h = 300) => ({ x, y, w: 260, h, color });

package/dist/guides.js

@@ -65,7 +65,7 @@ ${AUTHORITY_LINE}
   terminal, answer from the \`console\` guide (\`skills get console\`):
   exact screens, exact verbs, and which acts are theirs alone.
 - Take work as a registered runner: \`claim <id> --runner <name> --token
-  <t>\` → \`heartbeat <lease>\` while working → \`release <lease>\`. A
+  <t>\` → \`heartbeat <lease>\` while working → \`worker release <lease>\`. A
   replayed claim (same \`--key\`) answers with \`replayed: true\` — do not
   repeat first-time side effects on it.
 - Respect refusals — each is an ANSWER, never an error to retry blindly:
@@ -189,7 +189,7 @@ registers it; the token is shown once). Work moves through leases:
   not repeat first-time side effects.
 - \`heartbeat <lease>\` while working — it extends the lease. A lease
   that runs out is reaped and the task returns to the queue.
-- \`release <lease>\` when done. If the answer is \`fenced\`, STOP: a newer
+- \`worker release <lease>\` when done. If the answer is \`fenced\`, STOP: a newer
   lease superseded yours and the work is no longer yours — do not write,
   commit, or report anything further for it.
 - \`reap\` releases every expired lease (safe to run any time).
@@ -318,7 +318,7 @@ ${AUTHORITY_LINE}
   transcripts following.
 - **projects** (\`/projects\`): enrol, open, or switch repositories; the
   project name in the header is the one-tap switcher on every screen.
-- **chat** (\`/chat\`): the mate — a conversation across every project
+- **chat** (\`/chat\`): the lead — a conversation across every project
   that only PROPOSES (file, reorder, reserve, hold, rewrite a scope,
   cancel, answer a decision); each proposal is a card the person
   confirms. Coordinators over the MCP gateway propose the same way, and
@@ -340,7 +340,7 @@ ${AUTHORITY_LINE}
 - \`toolroll peek\`: one pane per live agent (digits focus, \`q\`
   leaves); \`peek <run>\` follows one; \`peek --tmux\` opens a tmux window
   per run.
-- \`toolroll chat\`: the mate in the terminal (\`--say "…"\` for one
+- \`toolroll chat\`: the lead in the terminal (\`--say "…"\` for one
   turn); \`toolroll proposals\` lists and confirms coordinator
   proposals.
 - \`toolroll task add "<title>" --report\`: a SCOUT task — a
@@ -359,7 +359,8 @@ needs you · queued · waiting · building · done · failed; a *scope* is the
 contract a person approves; a *decision* is a typed question an agent
 parked; a *hold* pauses the next attempt; a *stale approval* means the
 approval no longer matches how builds are routed — approving again fixes
-it; a *scout* delivers a report; the *mate* proposes and never acts.
+it; a *scout* delivers a report; the *lead* proposes and never acts, and
+its *subagents* work within the rules you write for them.
 `,
 };
 const knowledge = {
@@ -416,7 +417,112 @@ and crew agent reads from it before working:
   and its date, and prefer the newest active decision.
 `,
 };
-export const GUIDES = [operating, runner, steering, externalWork, console_, knowledge];
+const release = {
+    name: "release",
+    title: "Releasing Toolroll itself",
+    oneLiner: "toolroll release <branch>: one command from a gated commit to npm and Homebrew; the owner's approval is the only human step",
+    content: `# Releasing Toolroll itself
+
+${AUTHORITY_LINE}
+
+\`toolroll release <branch> --repo <gate checkout>\` runs the whole release
+of a pushed branch. The owner approving the release scope is the only
+step that needs a person; the rest runs on its own, each waiting step
+with a time limit.
+
+## Before you start
+
+- The branch is pushed, with an open pull request into main.
+- package.json has the new version, and the lead wrote its CHANGELOG.md
+  entry (\`## <version>\`). No tag or npm package has that version yet.
+- \`gh\` is signed in, the console, worker and both CLI names
+  (\`toolroll\`, \`standing-orders\`) run one build, and the gate checkout
+  is a clone whose origin is the GitHub repository. Credentials are never
+  asked for in chat or written to the release journal.
+
+## What it does, in order
+
+1. **gate**: files task \`release-<version>-<sha7>\` pinned to the
+   branch's exact commit with \`--checks full\`, regardless of the project's default.
+2. **approval**: waits for the owner to approve that exact scope
+   (\`toolroll task approve <id> --digest <d>\`, or the console). A
+   mode, an AI teammate or the lead approving it stops the release: the
+   yes must come from an active account with the approver role. Its standing
+   is checked again before completion and deployment.
+3. **check**: requires a sealed, passing **Full** check on that commit.
+   Quick passes and Off checks are refused. Failures stay visible; nothing reruns them.
+4. **complete**: marks that exact result Complete.
+5. **quiet**: waits until nothing is building.
+6. **deploy**: the candidate's own deployment
+   (\`scripts/deploy-browser.mjs\` from the builder's checkout): drain,
+   backup, rehearsal, swap, health. The staging path is saved before it
+   starts, and the runtime its final JSON names is kept. It goes on only
+   when the console and worker run that runtime and it records the gated
+   commit; matching versions alone do not count.
+7. **link**: points \`toolroll\` and \`standing-orders\` at
+   \`<runtime>/bin.js\`, each link replaced whole. Where they pointed is
+   saved first; if either name doesn't answer as the new build, both go
+   back. It goes on only when the console, worker and both names run the
+   gated commit. A rerun relinks without deploying again.
+8. **ci**: waits for every pull-request check on the gated commit:
+   Ubuntu on Node 22 and 24, Linux and Windows containment. Pending,
+   missing, skipped, cancelled or failed never merges.
+9. **merge**: squash-merges with the head pinned to the gated commit,
+   once main has nothing the branch lacks, then deletes the remote branch
+   only if its head still matches. A resumed merge also finishes this cleanup.
+10. **tree**: main's merge commit must have exactly the gated tree, or
+   nothing is tagged.
+11. **tag**: pushes \`v<version>\` on that merge commit. In publish.yml,
+    macOS Node 22 and 24 must both pass before npm and GitHub publication.
+    macos.yml keeps the nightly matrix.
+12. **publish**: waits for npm, the GitHub release and the tag's macOS
+    and publish checks.
+13. **homebrew**: updates the tap's formula, waits for checks to register
+    and every registered check to pass, then merges. No checks means waiting,
+    within the Homebrew time limit; a failed or skipped check stops the release.
+
+## When it stops
+
+A time limit, a failure or Ctrl-C ends with the step and the reason,
+and the command to continue: the same \`toolroll release <branch> --repo
+<checkout>\`. Its journal (\`releases/<branch>.json\` in the state folder,
+private) records what each step was about to do before it does it, so a
+rerun finds the task, completion, merge, tag and tap change already made
+instead of making them twice.
+
+- \`drift\`: the branch or pull request moved after gating. Release the
+  new commit with \`--new\` (refused once merging began).
+- \`check-level\`: the result has no Full check. File the gate with Full
+  checks and obtain a passing result; Quick and Off cannot authorize a release.
+- \`check-failed\`: fix the branch and release the new commit with \`--new\`.
+- \`ci-failed\`: fix the failed GitHub check, then rerun. Nothing was merged.
+- \`publish-failed\` / \`homebrew-failed\`: fix the failed workflow before
+  resuming. A failed tag check cannot finish publication or update Homebrew.
+- \`base-moved\`: main gained a commit the branch doesn't have, so the
+  merge wouldn't be the checked tree. Nothing was merged: update the
+  branch and release it with \`--new\`.
+- \`tree-mismatch\`: main changed what was checked. Nothing was tagged;
+  the deployed build stays.
+- \`timeout\`: rerun to keep waiting; \`--limit <step>=<minutes>\`
+  changes one step's limit.
+- An interrupted deployment resumes with \`deploy-browser.mjs --stage <saved
+  path> --phase recover\` before any new attempt, including \`--new\`.
+  Failed recovery stops there; the original deployment journal remains available.
+- \`link\`: a CLI name didn't answer as the new build, so both were put
+  back. The service already runs the new build; fix the name and rerun.
+- \`gate-held\`: the deployment stopped before its swap but left new work
+  paused, and its journal can't say so by itself (typically killed while
+  preparing). \`toolroll release --release-gate <id>\` shows the proof that
+  the swap never began: the pause is that deployment's, its journal is
+  before the swap, the database schema, service definition and running
+  service are still the previous build's, and no deployment is running.
+  Add \`--yes\` to lift that one pause, then rerun the release. Missing or
+  contradicting evidence refuses and leaves the pause in place.
+
+A runner's lease is returned with \`toolroll worker release <lease>\`.
+`,
+};
+export const GUIDES = [operating, runner, steering, externalWork, console_, knowledge, release];
 export function guideNamed(name) {
     return GUIDES.find(one => one.name === name) ?? null;
 }

package/dist/html.d.ts

@@ -0,0 +1,76 @@
+/**
+ * Server HTML, escaped by construction.
+ *
+ * - `Html` is markup this module made. Nothing else can make one: the class
+ *   is private and branded, so a string never passes for markup.
+ * - `html` is the only way to write markup. Its literal text is the
+ *   author's; every interpolated value is text and is escaped, unless it is
+ *   already `Html`. Arrays render in order; null, undefined and booleans
+ *   render nothing, so `${cond && html`…`}` reads naturally.
+ * - `postForm` is the only way to write a POST form. It adds the request's
+ *   CSRF field itself, so a form cannot forget it.
+ * - Page sinks (the shell, `respond` for text/html, the workspace's page
+ *   snapshot) take `Html` and turn it into bytes with `htmlString`.
+ *
+ * The script, style and JSON constructors exist for the page shell: their
+ * sources are code, and each refuses content that could close its element.
+ *
+ * This module has no server dependencies (the browser bundle shares time
+ * helpers that use it); the server's request context supplies the CSRF token.
+ */
+declare const MADE_HERE: unique symbol;
+/** Markup this module made. Only this module holds the token its constructor asks for. */
+export declare class Html {
+    #private;
+    constructor(token: typeof MADE_HERE, markup: string);
+    /** The bytes, for a sink. */
+    static markupOf(fragment: Html): string;
+    toString(): string;
+    toJSON(): string;
+}
+export type HtmlValue = Html | string | number | bigint | boolean | null | undefined | readonly HtmlValue[];
+export declare const isHtml: (value: unknown) => value is Html;
+/** The markup of an `Html` value, for a sink that writes bytes. */
+export declare function htmlString(fragment: Html): string;
+/** Markup with every interpolation escaped as text, except values that are already `Html`. */
+export declare function html(strings: TemplateStringsArray, ...values: readonly HtmlValue[]): Html;
+/** Parts in order, with an optional separator between them. */
+export declare function joinHtml(parts: Iterable<HtmlValue>, separator?: HtmlValue): Html;
+/** Plain text, escaped (for a sink that takes Html when the content is only words). */
+export declare const textHtml: (text: string) => Html;
+export type AttributeValue = string | number | boolean | null | undefined;
+/** Attributes as `name="value"` pairs: true is a bare attribute; false, null and undefined are left out. */
+export declare function attributes(values: Readonly<Record<string, AttributeValue>>): Html;
+export type PostFormOptions = {
+    /** Attributes on the form element (class, id, aria-label, data-…). */
+    attrs?: Readonly<Record<string, AttributeValue>>;
+    /** Hidden fields, after the CSRF field (null and undefined are left out). */
+    hidden?: Readonly<Record<string, string | number | null | undefined>>;
+    /** The open project's revision this page was rendered under: a stale tab's post is refused. */
+    projectRevision?: number | string | null;
+    /** Where the action returns afterwards (a same-site path). */
+    returnTo?: string | null;
+    /** Forms before a session exists (sign-in, sign-up, a join link) have no CSRF field. */
+    signedOut?: true;
+};
+/** The server's request context supplies the request's CSRF token (server/request-context.ts). */
+export declare function provideFormToken(source: () => string | undefined): void;
+/**
+ * A POST form: the action, the request's one CSRF field, the optional
+ * project revision and return fields, other hidden fields, then the body.
+ * Outside a console request there is no CSRF to give, so it refuses.
+ */
+export declare function postForm(action: string, body: HtmlValue, options?: PostFormOptions): Html;
+/**
+ * Markup edited after rendering: each match of `pattern` in the page is replaced by markup the replacer builds
+ * (with html`…`), or kept as it was (null), so nothing unescaped can enter. For whole-page passes (a sign-in that
+ * stands in for passwords, the browser shell's insertions).
+ */
+export declare function replaceMarkup(page: Html, pattern: RegExp, replace: (match: string, ...groups: string[]) => Html | null): Html;
+/** An inline script whose source is code. Its text may not close the element or open a comment. */
+export declare function scriptElement(source: string, attrs?: Readonly<Record<string, AttributeValue>>): Html;
+/** A style element whose rules are code. */
+export declare function styleElement(css: string, attrs?: Readonly<Record<string, AttributeValue>>): Html;
+/** Inert JSON for a page script to read: no character of it can end the element. */
+export declare function jsonScript(value: unknown, attrs?: Readonly<Record<string, AttributeValue>>): Html;
+export {};