toolroll 0.9.54 → 0.9.56

package/dist/request-budget-ui.js

@@ -1,5 +1,5 @@
+import { html, postForm } from "./html.js";
 import { effectiveLimits, limitOverrides, PER_DAY_MAX, PER_MINUTE_MAX, REQUEST_BUDGET_DEFAULTS } from "./request-budget.js";
-const e = (value) => String(value ?? "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 const n = (value) => value.toLocaleString("en-US");
 export const REQUEST_LIMITS_CSS = `.credentials .limits{display:grid;gap:14px}.credentials .limits form{display:grid;gap:10px}.credentials .limits label{display:grid;gap:6px}` +
     `.credentials .limits input,.credentials .limits select{box-sizing:border-box;width:100%;min-width:0}.credentials .limits .pair{display:grid;grid-template-columns:1fr 1fr;gap:10px}.credentials .limits .actions{display:flex;flex-wrap:wrap;gap:8px}` +
@@ -10,22 +10,22 @@ export function tokenLimitWords(db, token) {
     return `${n(limits.perMinute)} requests a minute · ${n(limits.perDay)} a day`;
 }
 /** The operator's disclosure: everyone's tokens, or one token. Blank fields use the default shown. */
-export function requestLimitsHtml(db, tokens, csrf, now) {
+export function requestLimitsHtml(db, tokens, now) {
     const overrides = limitOverrides(db);
     const everyone = overrides.get("*") ?? { readPerMinute: null, actPerMinute: null, perDay: null };
-    const field = (name, label, value, placeholder, max) => `<label>${label}<input type="number" name="${name}" min="1" max="${max}" step="1" inputmode="numeric" value="${value === null ? "" : value}" placeholder="${placeholder}"></label>`;
-    const password = `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label>`;
-    const buttons = `<div class="actions"><button name="action" value="save">Save limits</button><button class="secondary" name="action" value="clear">Use defaults</button></div>`;
+    const field = (name, label, value, placeholder, max) => html `<label>${label}<input type="number" name="${name}" min="1" max="${max}" step="1" inputmode="numeric" value="${value === null ? "" : value}" placeholder="${placeholder}"></label>`;
+    const password = html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label>`;
+    const buttons = html `<div class="actions"><button name="action" value="save">Save limits</button><button class="secondary" name="action" value="clear">Use defaults</button></div>`;
     const live = tokens.filter(one => one.revokedAt === null && Date.parse(one.expiresAt) > now);
-    const installation = `<form method="post" action="/settings/request-limits"><input type="hidden" name="csrf" value="${e(csrf)}"><input type="hidden" name="target" value="*">` +
-        `<h3>Everyone's tokens</h3><div class="pair">${field("read-per-minute", "Read tokens, a minute", everyone.readPerMinute, String(REQUEST_BUDGET_DEFAULTS.read), PER_MINUTE_MAX)}` +
-        `${field("act-per-minute", "Act tokens, a minute", everyone.actPerMinute, String(REQUEST_BUDGET_DEFAULTS.act), PER_MINUTE_MAX)}</div>` +
-        `${field("per-day", "Each token, a day", everyone.perDay, String(REQUEST_BUDGET_DEFAULTS.day), PER_DAY_MAX)}${password}${buttons}</form>`;
-    const one = live.length === 0 ? "" : `<form method="post" action="/settings/request-limits"><input type="hidden" name="csrf" value="${e(csrf)}">` +
-        `<h3>One token</h3><label>Token<select name="target">${live.map(row => {
-            const set = overrides.get(row.id);
-            return `<option value="${e(row.id)}">${e(row.name)} (${e(row.account)}, ${row.access === "act" ? "act" : "read"})${set === undefined ? "" : " · own limits"}</option>`;
-        }).join("")}</select></label>` +
-        `<div class="pair">${field("per-minute", "A minute", null, "Everyone's", PER_MINUTE_MAX)}${field("per-day", "A day", null, "Everyone's", PER_DAY_MAX)}</div>${password}${buttons}</form>`;
-    return `<details class="card"><summary>Request limits</summary><div class="limits">${installation}${one}</div></details>`;
+    const installation = postForm("/settings/request-limits", html `\
+<h3>Everyone's tokens</h3><div class="pair">${field("read-per-minute", "Read tokens, a minute", everyone.readPerMinute, String(REQUEST_BUDGET_DEFAULTS.read), PER_MINUTE_MAX)}\
+${field("act-per-minute", "Act tokens, a minute", everyone.actPerMinute, String(REQUEST_BUDGET_DEFAULTS.act), PER_MINUTE_MAX)}</div>\
+${field("per-day", "Each token, a day", everyone.perDay, String(REQUEST_BUDGET_DEFAULTS.day), PER_DAY_MAX)}${password}${buttons}`, { hidden: { target: "*" } });
+    const one = live.length === 0 ? "" : postForm("/settings/request-limits", html `\
+<h3>One token</h3><label>Token<select name="target">${live.map(row => {
+        const set = overrides.get(row.id);
+        return html `<option value="${row.id}">${row.name} (${row.account}, ${row.access === "act" ? "act" : "read"})${set === undefined ? "" : " · own limits"}</option>`;
+    })}</select></label>\
+<div class="pair">${field("per-minute", "A minute", null, "Everyone's", PER_MINUTE_MAX)}${field("per-day", "A day", null, "Everyone's", PER_DAY_MAX)}</div>${password}${buttons}`);
+    return html `<details class="card"><summary>Request limits</summary><div class="limits">${installation}${one}</div></details>`;
 }

package/dist/result-review.d.ts

@@ -5,7 +5,7 @@
  * Nothing here reads a database or renders a full page. The server
  * assembles the same verified records it already reads (handoff, proof,
  * diff, matrix, publication, report) into `SharedResultFacts`; every
- * surface prints those facts through `resultFactsAttributes`, so a test —
+ * surface prints those facts through `resultFactsAttributeMap` (as html attributes), so a test —
  * or a person — can check that chat, run detail, and review agree on the
  * run, its head, its checks, its caveats, and its publication.
  *
@@ -141,8 +141,7 @@ export type SharedResultFacts = {
 /** The shared facts as the panel's data attributes, unescaped (the rebuilt
  * result page sets them through React). */
 export declare function resultFactsAttributeMap(facts: SharedResultFacts): Record<string, string>;
-export declare function resultFactsAttributes(facts: SharedResultFacts): string;
-/** The shared fact names, in the order `resultFactsAttributes` writes them. */
+/** The shared fact names, in the order `resultFactsAttributeMap` lists them. */
 export declare const RESULT_FACT_KEYS: readonly ["run", "head", "base", "head-source", "checks", "caveats", "evidence", "publication"];
 /** Parse the shared facts back — the test-side and proof-side reader.
  * Only the shared keys are read; a panel's own presentation attributes

package/dist/result-review.js

@@ -5,7 +5,7 @@
  * Nothing here reads a database or renders a full page. The server
  * assembles the same verified records it already reads (handoff, proof,
  * diff, matrix, publication, report) into `SharedResultFacts`; every
- * surface prints those facts through `resultFactsAttributes`, so a test —
+ * surface prints those facts through `resultFactsAttributeMap` (as html attributes), so a test —
  * or a person — can check that chat, run detail, and review agree on the
  * run, its head, its checks, its caveats, and its publication.
  *
@@ -126,10 +126,7 @@ export function resultFactsAttributeMap(facts) {
         "data-result-publication": facts.publicationState,
     };
 }
-export function resultFactsAttributes(facts) {
-    return Object.entries(resultFactsAttributeMap(facts)).map(([name, value]) => ` ${name}="${escapeAttribute(value)}"`).join("");
-}
-/** The shared fact names, in the order `resultFactsAttributes` writes them. */
+/** The shared fact names, in the order `resultFactsAttributeMap` lists them. */
 export const RESULT_FACT_KEYS = ["run", "head", "base", "head-source", "checks", "caveats", "evidence", "publication"];
 /** Parse the shared facts back — the test-side and proof-side reader.
  * Only the shared keys are read; a panel's own presentation attributes
@@ -426,9 +423,6 @@ export const RESULT_REVIEW_SCRIPT = String.raw `
     }
   }
 })();`;
-function escapeAttribute(text) {
-    return text.replace(/&/g, "&amp;").replace(/"/g, "&quot;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
-}
 function unescapeAttribute(text) {
-    return text.replace(/&quot;/g, '"').replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
+    return text.replace(/&quot;/g, '"').replace(/&#39;/g, "'").replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&amp;/g, "&");
 }

package/dist/retention-ui.d.ts

@@ -1,3 +1,9 @@
+/**
+ * Settings → Retention (v105): how long each kind of data is kept, and what
+ * the next daily sweep would remove. An instance operator's page; changes
+ * take a step-up.
+ */
+import { type Html } from "./html.js";
 import { type RetentionCount, type RetentionKind, type RetentionPeriods } from "./retention.js";
 export declare const RETENTION_CSS: string;
 /** `chosen`: the kinds someone chose a period for; the rest keep their default. */
@@ -11,4 +17,4 @@ export type RetentionView = {
 export declare function retentionHtml(view: RetentionView, notice: {
     said?: string | null;
     problem?: string | null;
-}): string;
+}): Html;

package/dist/retention-ui.js

@@ -3,9 +3,9 @@
  * the next daily sweep would remove. An instance operator's page; changes
  * take a step-up.
  */
+import { html, postForm } from "./html.js";
 import { bytesWords } from "./storage.js";
 import { RETENTION_KINDS, countWords, periodChoices, periodLabel } from "./retention.js";
-const e = (value) => String(value ?? "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 export const RETENTION_CSS = `.retention{max-width:720px;min-width:0}.retention-next{margin:0 0 16px}` +
     `.retention form{display:grid;gap:0}.retention .kind{display:grid;grid-template-columns:minmax(0,1fr) 11rem;gap:4px 16px;align-items:center;padding:12px 0;border-bottom:1px solid var(--border)}` +
     `.retention .kind .name{font-weight:500;font-size:.875rem}.retention .kind .meta{grid-column:1;margin:0}.retention .kind select{grid-column:2;grid-row:1/span 2;width:100%;min-height:44px}` +
@@ -23,17 +23,13 @@ function nextWords(view) {
     return `The next daily sweep removes ${listWords(due.map(countWords))} (about ${bytesWords(bytes)}).`;
 }
 export function retentionHtml(view, notice) {
-    const note = notice.problem ? `<p class="problem" role="alert">${e(notice.problem)}</p>` : notice.said ? `<p role="status">${e(notice.said)}</p>` : "";
+    const note = notice.problem ? html `<p class="problem" role="alert">${notice.problem}</p>` : notice.said ? html `<p role="status">${notice.said}</p>` : "";
     const rows = RETENTION_KINDS.map(({ kind, label, detail }) => {
         const current = view.periods[kind];
         const chosen = view.chosen.includes(kind);
-        const options = periodChoices(kind, current).map(days => `<option value="${days === null ? "forever" : days}"${days === current ? " selected" : ""}>${e(periodLabel(kind, days, chosen || days !== current))}</option>`).join("");
-        return `<div class="kind" data-kind="${kind}"><label class="name" for="keep-${kind}">${e(label)}</label><p class="meta">${e(detail)}</p><select id="keep-${kind}" name="${kind}">${options}</select></div>`;
-    }).join("");
-    const last = view.lastSweep === null ? "" : ` Last sweep ${e(view.lastSweep.slice(0, 10))}.`;
-    return `<article class="retention">${note}<p class="retention-next" data-retention-next>${e(nextWords(view))}${last}</p>` +
-        `<form method="post" action="/settings/retention"><input type="hidden" name="csrf" value="${e(view.csrf)}">${rows}` +
-        `<label class="step-up">Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label>` +
-        `<button type="submit">Save</button></form>` +
-        `<p class="meta">Never removed: the action ledger, and anything a task still needs (unfinished tasks, results Ready for review, anything on hold).</p></article>`;
+        const options = periodChoices(kind, current).map(days => html `<option value="${days === null ? "forever" : days}"${days === current ? html ` selected` : ""}>${periodLabel(kind, days, chosen || days !== current)}</option>`);
+        return html `<div class="kind" data-kind="${kind}"><label class="name" for="keep-${kind}">${label}</label><p class="meta">${detail}</p><select id="keep-${kind}" name="${kind}">${options}</select></div>`;
+    });
+    const last = view.lastSweep === null ? "" : ` Last sweep ${view.lastSweep.slice(0, 10)}.`;
+    return html `<article class="retention">${note}<p class="retention-next" data-retention-next>${nextWords(view)}${last}</p>${postForm("/settings/retention", html `${rows}<label class="step-up">Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label><button type="submit">Save</button>`)}<p class="meta">Never removed: the action ledger, and anything a task still needs (unfinished tasks, results Ready for review, anything on hold).</p></article>`;
 }

package/dist/retention.js

@@ -174,7 +174,7 @@ export function retentionPlan(store, evidenceRoot, now, periods = store.retentio
         }
     }
     if (periods.chat !== null) {
-        const rows = db.prepare(`SELECT m.id AS id, length(m.text) + COALESCE(length(m.activity), 0) + 64 AS bytes FROM mate_message m JOIN mate_thread th ON th.id = m.thread
+        const rows = db.prepare(`SELECT m.id AS id, length(m.text) + COALESCE(length(m.activity), 0) + 64 AS bytes FROM lead_message m JOIN lead_thread th ON th.id = m.thread
       WHERE m.created_at < ?
         AND NOT EXISTS (SELECT 1 FROM team_message tm WHERE tm.message = m.id AND tm.status IN ('queued', 'running', 'uncertain'))
         AND NOT EXISTS (SELECT 1 FROM mate_turn turn WHERE turn.id = m.turn AND turn.state IN ('queued', 'running'))
@@ -263,10 +263,10 @@ export function sweepRetention(store, evidenceRoot, now, actor = "worker") {
         }
         if (periods.chat !== null) {
             const team = db.prepare("DELETE FROM team_message WHERE message = ? AND status NOT IN ('queued', 'running', 'uncertain')");
-            const message = db.prepare("DELETE FROM mate_message WHERE id = ? AND NOT EXISTS (SELECT 1 FROM team_message WHERE message = ?)");
-            const asked = db.prepare("SELECT turn FROM mate_message WHERE id = ? AND role = 'assistant' AND turn IS NOT NULL");
+            const message = db.prepare("DELETE FROM lead_message WHERE id = ? AND NOT EXISTS (SELECT 1 FROM team_message WHERE message = ?)");
+            const asked = db.prepare("SELECT turn FROM lead_message WHERE id = ? AND role = 'assistant' AND turn IS NOT NULL");
             // The lead's question goes with the reply that asked it; its buttons then say it expired.
-            const ask = db.prepare("DELETE FROM mate_ask WHERE turn = ? AND NOT EXISTS (SELECT 1 FROM mate_message WHERE turn = ? AND role = 'assistant')");
+            const ask = db.prepare("DELETE FROM lead_ask WHERE turn = ? AND NOT EXISTS (SELECT 1 FROM lead_message WHERE turn = ? AND role = 'assistant')");
             for (const one of plan.items.chat) {
                 team.run(one.id);
                 const turn = asked.get(one.id)?.["turn"];

package/dist/scope.d.ts

@@ -304,10 +304,10 @@ export type Scope = SavedScopeTerms & {
      * non-null verdict, so filtering, defaulting, or coercion can never
      * turn a corrupt row into authority. Undefined on a hand-built scope. */
     termsProblem?: string | null;
-    /** Who wrote the text (mate arc, ruling 2): a confirmed mate proposal,
+    /** Who wrote the text (mate arc, ruling 2): a confirmed lead proposal,
      * the coordinator, a scout, or a person (null). Read raw and proved by
      * `termsProblem` — a word outside these is a stated problem, never a
-     * value that slips past the mate quarantine at a mode seal. */
+     * value that slips past the lead quarantine at a mode seal. */
     proposedVia?: "mate" | "coordinator" | "scout" | null;
 };
 export type Approval = {

package/dist/scout-report.d.ts

@@ -2,7 +2,7 @@
  * The scout's terminal handoff (mate arc §10), read against the report contract (src/contracts/scout-report.ts) with
  * the 422 rule: fail closed, every problem reported at once, each naming its path (`items[0].url: must be an http or
  * https address`), stable reasons, caps and control-character rejection on every string. A report reaches the task
- * page, the ledger, the terminal, and — through mateView — the mate; and each follow-up becomes a filing's title and
+ * page, the ledger, the terminal, and — through leadView — the lead; and each follow-up becomes a filing's title and
  * goal at one tap, so it gets the park discipline exactly as the plan does.
  */
 import { type ContractProblem } from "./contracts/contract.js";

package/dist/scout-report.js

@@ -2,7 +2,7 @@
  * The scout's terminal handoff (mate arc §10), read against the report contract (src/contracts/scout-report.ts) with
  * the 422 rule: fail closed, every problem reported at once, each naming its path (`items[0].url: must be an http or
  * https address`), stable reasons, caps and control-character rejection on every string. A report reaches the task
- * page, the ledger, the terminal, and — through mateView — the mate; and each follow-up becomes a filing's title and
+ * page, the ledger, the terminal, and — through leadView — the lead; and each follow-up becomes a filing's title and
  * goal at one tap, so it gets the park discipline exactly as the plan does.
  */
 import { contractProblemOf } from "./contracts/contract.js";

package/dist/serve.d.ts

@@ -1,3 +1,12 @@
-import { type DecisionServer, type ServeOptions } from "./server/shared.js";
+import { type ServeOptions } from "./server/http.js";
+import { type DecisionServer } from "./server/session.js";
 export declare function createDecisionServer(options: ServeOptions): DecisionServer;
-export { decisionAnswerScript, diffFileAnchor, earlierVersionsWords, editorFileHref, inboxFingerprints, needActionOf, orderChangedFiles, PAGE_CSS, parseInboxTab, pinnedTheme, plainConclusionOf, queueScript, rankReviewQueue, redactedPath, reviewFilePriority, reviewPriorityOf, revisionLineageWords, runFactsFragment, SENSITIVE_INPUT, settingsGroups, settingsTiles, SHUTDOWN_WAIT_MS, SIGN_IN_LINK_MS, SIGN_IN_LINK_PATH, ssoStepUps, TASK_COMPOSER_MODES, withinSignedTouches, wrongHostPage, type DecisionServer, type InboxTab, type ReviewFileRow, type ReviewPriority, type ReviewQueueFacts, type RouteView, type ServeOptions, type TaskComposerMode } from "./server/shared.js";
+export { PAGE_CSS, pinnedTheme, SENSITIVE_INPUT } from "./server/chrome.js";
+export { redactedPath, SHUTDOWN_WAIT_MS, type ServeOptions } from "./server/http.js";
+export { TASK_COMPOSER_MODES, type TaskComposerMode } from "./server/render-chat.js";
+export { inboxFingerprints, parseInboxTab, queueScript, type InboxTab } from "./server/render-pages.js";
+export { ssoStepUps, wrongHostPage } from "./server/render-people.js";
+export { diffFileAnchor, editorFileHref, needActionOf, orderChangedFiles, plainConclusionOf, rankReviewQueue, reviewFilePriority, reviewPriorityOf, runFactsFragment, withinSignedTouches, type ReviewFileRow, type ReviewPriority, type ReviewQueueFacts } from "./server/render-results.js";
+export { settingsGroups, settingsTiles } from "./server/render-settings.js";
+export { decisionAnswerScript, earlierVersionsWords, revisionLineageWords, type RouteView } from "./server/render-tasks.js";
+export { SIGN_IN_LINK_MS, SIGN_IN_LINK_PATH, type DecisionServer } from "./server/session.js";