toolroll 0.9.54 → 0.9.56

package/dist/telegram-team.js

@@ -1,8 +1,8 @@
 import { renderReply, shapeReplyParts } from "./reply-shape.js";
 import { TeamLeads } from "./team-leads.js";
 import { proposalPreview, tooLongText } from "./chat-channel.js";
-import { PART_CAP, mintCardTokens, phoneLinkButton, splitParts } from "./telegram-mate.js";
-import { MATE_MESSAGE_MAX_CHARS } from "./mate.js";
+import { PART_CAP, mintCardTokens, phoneLinkButton, splitParts } from "./telegram-lead.js";
+import { LEAD_MESSAGE_MAX_CHARS } from "./lead.js";
 import { phoneText } from "./telegram-status.js";
 /** `/team` lists, `/team <n>` chooses, `/team off` (or `private`) leaves. Any other slash text is not ours. */
 export function teamCommand(text) {
@@ -172,7 +172,7 @@ export function applyTeamInbound(input) {
         report.ignored++;
         return true;
     }
-    if (trimmed.length > MATE_MESSAGE_MAX_CHARS) {
+    if (trimmed.length > LEAD_MESSAGE_MAX_CHARS) {
         say(chatId, tooLongText(trimmed.length));
         report.chatRefused = (report.chatRefused ?? 0) + 1;
         return true;
@@ -255,7 +255,7 @@ export async function deliverTeamChats(store, botId, transport, clock, report, p
         const row = conversationRow(store, chat.conversation);
         if (row === null)
             continue;
-        const pending = store.handle.prepare(`SELECT m.id, m.role, m.text, m.turn, q.author, q.request_id, q.status FROM mate_message m
+        const pending = store.handle.prepare(`SELECT m.id, m.role, m.text, m.turn, q.author, q.request_id, q.status FROM lead_message m
       LEFT JOIN team_message q ON q.message = m.id WHERE m.thread = ? AND m.id > ? ORDER BY m.id LIMIT 20`).all(row.thread, chat.cursor);
         for (const message of pending) {
             const id = Number(message["id"]);
@@ -279,7 +279,7 @@ export async function deliverTeamChats(store, botId, transport, clock, report, p
             if (role === "assistant" && message["turn"] !== null) {
                 const turn = Number(message["turn"]);
                 const cardBinding = cardBindingFor(store, botId, chat, turn);
-                for (const proposal of store.listMateProposals(row.thread, ["pending"]).filter(one => one.turn === turn)) {
+                for (const proposal of store.listLeadProposals(row.thread, ["pending"]).filter(one => one.turn === turn)) {
                     const enrolled = await access();
                     if (enrolled === null) {
                         complete = false;

package/dist/telegram.d.ts

@@ -19,7 +19,7 @@
  * are one command.
  */
 import { type Store, type Notification } from "./store.js";
-import { type TelegramConversationOptions } from "./telegram-mate.js";
+import { type TelegramConversationOptions } from "./telegram-lead.js";
 /** Read the enrolled project list on demand. No callback means no task data,
  * never an implicit all-database ceiling. Shared by pass and embedded follower. */
 export type TelegramReadProjects = () => Promise<readonly string[]>;

package/dist/telegram.js

@@ -18,8 +18,7 @@
  * BotFather token plus `bridge telegram unpair` is the recovery, and both
  * are one command.
  */
-import { applyTelegramQuestionReply, applyTelegramQuestionTap, openQuestionOf, telegramQuestionButtons } from "./teammate-question.js";
-import { messageTeammate } from "./teammate-desk.js";
+import { applyTelegramQuestionReply, applyTelegramQuestionTap, openQuestionOf, telegramQuestionButtons } from "./subagent-question.js";
 import { acceptanceEvidenceText } from "./chat-acceptance.js";
 import { verifyApproverStanding } from "./principal.js";
 import { resultImageFileName, resultTaskLabel, verifyResultImage } from "./chat-evidence.js";
@@ -43,9 +42,9 @@ import { focusContextFor, taskInCeiling } from "./chat-channel.js";
 import { answersPrompt, applyDecideFeedback, applyDecideTap, decideFallbackLink, dropDecideTokens, hasLiveDecideTokens, linksFor, placeDecidePrompt, decideOffer, decideTargetOf, isDecideToken, mergedText, mintDecideButtons, offerFingerprint, openPromptFor, placeDecideTokens, recordChatMerge, retireDecideTokens } from "./chat-decide.js";
 import { mergePullRequest } from "./pull-request-flow.js";
 import { phoneCommand, phoneStatus, phoneTaskView, PHONE_CONSOLE_FOOTER, PHONE_HELP, notificationIdentity, phoneTaskChoices, resolvePhoneTask, phoneFocusText, phoneTaskListText, phoneText, PHONE_NO_MATCH, PHONE_BACK_TO_LEAD } from "./telegram-status.js";
-import { MATE_MESSAGE_MAX_CHARS } from "./mate.js";
+import { LEAD_MESSAGE_MAX_CHARS } from "./lead.js";
 import { envValue } from "./names.js";
-import { applyProposalTap, processTelegramConversations, phoneLinkButton, replyContextFor, telegramConversationRepos, telegramRequestId, tooLongText, whichTaskText, } from "./telegram-mate.js";
+import { applyProposalTap, processTelegramConversations, phoneLinkButton, replyContextFor, telegramConversationRepos, telegramRequestId, tooLongText, whichTaskText, } from "./telegram-lead.js";
 import { askOf, parseTelegramUpdate, pickOf, readTelegramButtonData, readTelegramUpdate, telegramButton } from "./contracts/telegram-callback.js";
 /** The environment name — and therefore the name the builder strips from agents (both names; see names.ts). */
 export { TELEGRAM_TOKEN_ENV as TOKEN_ENV, TELEGRAM_TOKEN_ENVS as TOKEN_ENVS } from "./names.js";
@@ -1246,7 +1245,7 @@ async function deliverOne(store, botId, binding, sender, notification, clock, ph
             parts = voiced.map(one => one.text);
             entities = voiced.map(one => one.entities);
         }
-        // A teammate's question (v93): its options and "Answer in words", for the person it asks.
+        // A subagent's question (v93): its options and "Answer in words", for the person it asks.
         const asked = flowKeys === null && choiceKeys === null ? openQuestionOf(store, notification.dedupeKey) : null;
         const questionKeys = asked === null ? null : telegramQuestionButtons(store, binding, asked, clock());
         const keys = flowKeys ?? choiceKeys ?? questionKeys;
@@ -1649,7 +1648,7 @@ function applyMessage(context, update, effects) {
         // assistant when a conversation is configured; otherwise silence.
         const binding = store.liveTelegramBindingFor(botId, String(from.id));
         // A reply to an Edit or Send back prompt (v86): the new draft, or the note it goes back with.
-        // A reply to a teammate's "Answer in words" prompt (v93): the answer.
+        // A reply to a subagent's "Answer in words" prompt (v93): the answer.
         const questionPrompt = binding !== null && message.reply_to_message !== undefined && String(chat.id) === binding.chatId
             ? store.telegramQuestionPrompt(binding.chatId, String(message.reply_to_message.message_id), clock()) : null;
         if (binding !== null && questionPrompt !== null) {
@@ -1694,27 +1693,7 @@ function applyMessage(context, update, effects) {
             });
             return;
         }
-        // A message to a teammate by name (v96), in the person's own chat: a card on its desk, and the answer comes back here.
-        if (binding !== null && message.reply_to_message === undefined && message.chat?.type === "private" && String(chat.id) === binding.chatId && store.accountOf(binding.approver)?.role === "approver") {
-            const repos = context.projects === null ? store.knownRepos().filter(repo => store.accountCanAccess(binding.approver, repo)) : telegramConversationRepos(store, binding.approver, context.projects);
-            const handed = messageTeammate(store, { who: binding.approver, repos, via: "Telegram" }, message.text ?? "", clock());
-            if (handed !== null) {
-                effects.push(async () => {
-                    let button = null;
-                    if (handed.link !== undefined) {
-                        try {
-                            button = phoneLinkButton(context.conversation?.phoneOrigin?.() ?? null, handed.link);
-                        }
-                        catch {
-                            button = null;
-                        }
-                    }
-                    await transport("sendMessage", { chat_id: binding.chatId, text: handed.said, link_preview_options: { is_disabled: true }, reply_parameters: { message_id: message.message_id },
-                        ...(button === null ? {} : { reply_markup: { inline_keyboard: [button] } }) });
-                });
-                return;
-            }
-        }
+        // D5: a message naming a subagent ("@rosa …") goes to the lead like any other, which asks the subagent with a card.
         const repliedDecision = binding !== null && message.reply_to_message !== undefined
             ? store.decisionForTelegramMessage(binding.id, binding.chatId, String(message.reply_to_message.message_id))
             : null;
@@ -1799,7 +1778,7 @@ function applyConversation(context, update, effects) {
         report.ignored++;
         return;
     }
-    if (text.length > MATE_MESSAGE_MAX_CHARS) {
+    if (text.length > LEAD_MESSAGE_MAX_CHARS) {
         say(tooLongText(text.length));
         report.chatRefused = (report.chatRefused ?? 0) + 1;
         return;
@@ -2150,7 +2129,7 @@ function applyCallback(context, update, effects) {
         editText(phoneFocusText(view.text), [[telegramButton("Back to the lead", "pick:lead")]]);
         return;
     }
-    // A teammate's question (v93): an option answers it; "Answer in words" asks for a reply.
+    // A subagent's question (v93): an option answers it; "Answer in words" asks for a reply.
     const questionAction = store.getTelegramQuestionAction(token);
     if (questionAction !== null) {
         if (questionAction.binding !== binding.id || questionAction.chatId !== tapChat || (questionAction.messageId !== null && questionAction.messageId !== String(message.message_id))) {
@@ -2247,7 +2226,7 @@ function applyCallback(context, update, effects) {
             return;
         }
         const turn = askTap.turn;
-        const found = store.getMateTurn(turn)?.approver === binding.approver ? store.mateAskState(turn, clock()) : { state: "expired" };
+        const found = store.getLeadTurn(turn)?.approver === binding.approver ? store.leadAskState(turn, clock()) : { state: "expired" };
         if (found.state !== "open") {
             const line = found.state === "answered" ? "That question was already answered." : "That question expired. Send your answer as a message.";
             ack(line);

package/dist/text-limits.d.ts

@@ -22,12 +22,12 @@ export declare const TEXT_LIMITS: {
     readonly flowRef: 60;
     /** A Message zone's message, or the comment an Update zone leaves. */
     readonly flowMessage: 1000;
-    /** Who decides a "Person decides" zone (a sign-in name), and the AI teammate who works a zone, as written. */
+    /** Who decides a "Person decides" zone (a sign-in name), and the subagent who works a zone, as written. */
     readonly flowDecider: 64;
-    readonly flowTeammate: 40;
+    readonly flowSubagent: 40;
     /** A Build zone's other project: its path. */
     readonly flowRepo: 1000;
-    /** A script's or teammate's answer, a choice's button, a Sort zone's answer and what it means, its question, and a score's level. */
+    /** A script's or subagent's answer, a choice's button, a Sort zone's answer and what it means, its question, and a score's level. */
     readonly flowAnswer: 40;
     readonly flowChoice: 40;
     readonly flowSortMeans: 200;
@@ -136,11 +136,11 @@ export declare const TEXT_LIMITS: {
     readonly decisionLabel: 120;
     readonly decisionConsequence: 500;
     readonly decisionAssignee: 120;
-    /** A teammate's turn (src/contracts/teammate-turn.ts): the answer it picks (and each option it offers), its question, its reason and what it remembers. */
-    readonly teammateAnswer: 60;
-    readonly teammateQuestion: 600;
-    readonly teammateReason: 400;
-    readonly teammateRemember: 300;
+    /** A subagent's turn (src/contracts/subagent-turn.ts): the answer it picks (and each option it offers), its question, its reason and what it remembers. */
+    readonly subagentAnswer: 60;
+    readonly subagentQuestion: 600;
+    readonly subagentReason: 400;
+    readonly subagentRemember: 300;
     /** The lead's tools and the MCP gateway (src/contracts/lead-tools.ts, gateway-tools.ts): a task's id as a tool names
      * it, a task's title and one path it touches, and a project's path as the gateway names it (an assignment brief or
      * project context, and the rest of the gateway). */
@@ -175,17 +175,17 @@ export declare const TEXT_LIMITS: {
     readonly actionUrl: 500;
     readonly actionSecret: 64;
     readonly actionAbout: 240;
-    /** A teammate change (propose_teammate): a soul section's title, a routine's schedule, a tool, an action, a limit's
+    /** A subagent change (propose_subagent): a soul section's title, a routine's schedule, a tool, an action, a limit's
      * field, a name, a soul file, a note, a choice and text. */
-    readonly teammateSection: 60;
-    readonly teammateSchedule: 80;
-    readonly teammateTool: 40;
-    readonly teammateAction: 64;
-    readonly teammateName: 40;
-    readonly teammateSoul: 12000;
-    readonly teammateNote: 300;
-    readonly teammateChoice: 60;
-    readonly teammateText: 2000;
+    readonly subagentSection: 60;
+    readonly subagentSchedule: 80;
+    readonly subagentTool: 40;
+    readonly subagentAction: 64;
+    readonly subagentName: 40;
+    readonly subagentSoul: 12000;
+    readonly subagentNote: 300;
+    readonly subagentChoice: 60;
+    readonly subagentText: 2000;
     /** A project knowledge reference id, a promise and why it is released, what the lead remembers (its text, a
      * decision's reason and source), a person's name, and a question to the owner with its options. */
     readonly knowledgeReference: 20;

package/dist/text-limits.js

@@ -22,12 +22,12 @@ export const TEXT_LIMITS = {
     flowRef: 60,
     /** A Message zone's message, or the comment an Update zone leaves. */
     flowMessage: 1_000,
-    /** Who decides a "Person decides" zone (a sign-in name), and the AI teammate who works a zone, as written. */
+    /** Who decides a "Person decides" zone (a sign-in name), and the subagent who works a zone, as written. */
     flowDecider: 64,
-    flowTeammate: 40,
+    flowSubagent: 40,
     /** A Build zone's other project: its path. */
     flowRepo: 1_000,
-    /** A script's or teammate's answer, a choice's button, a Sort zone's answer and what it means, its question, and a score's level. */
+    /** A script's or subagent's answer, a choice's button, a Sort zone's answer and what it means, its question, and a score's level. */
     flowAnswer: 40,
     flowChoice: 40,
     flowSortMeans: 200,
@@ -136,11 +136,11 @@ export const TEXT_LIMITS = {
     decisionLabel: 120,
     decisionConsequence: 500,
     decisionAssignee: 120,
-    /** A teammate's turn (src/contracts/teammate-turn.ts): the answer it picks (and each option it offers), its question, its reason and what it remembers. */
-    teammateAnswer: 60,
-    teammateQuestion: 600,
-    teammateReason: 400,
-    teammateRemember: 300,
+    /** A subagent's turn (src/contracts/subagent-turn.ts): the answer it picks (and each option it offers), its question, its reason and what it remembers. */
+    subagentAnswer: 60,
+    subagentQuestion: 600,
+    subagentReason: 400,
+    subagentRemember: 300,
     /** The lead's tools and the MCP gateway (src/contracts/lead-tools.ts, gateway-tools.ts): a task's id as a tool names
      * it, a task's title and one path it touches, and a project's path as the gateway names it (an assignment brief or
      * project context, and the rest of the gateway). */
@@ -175,17 +175,17 @@ export const TEXT_LIMITS = {
     actionUrl: 500,
     actionSecret: 64,
     actionAbout: 240,
-    /** A teammate change (propose_teammate): a soul section's title, a routine's schedule, a tool, an action, a limit's
+    /** A subagent change (propose_subagent): a soul section's title, a routine's schedule, a tool, an action, a limit's
      * field, a name, a soul file, a note, a choice and text. */
-    teammateSection: 60,
-    teammateSchedule: 80,
-    teammateTool: 40,
-    teammateAction: 64,
-    teammateName: 40,
-    teammateSoul: 12_000,
-    teammateNote: 300,
-    teammateChoice: 60,
-    teammateText: 2_000,
+    subagentSection: 60,
+    subagentSchedule: 80,
+    subagentTool: 40,
+    subagentAction: 64,
+    subagentName: 40,
+    subagentSoul: 12_000,
+    subagentNote: 300,
+    subagentChoice: 60,
+    subagentText: 2_000,
     /** A project knowledge reference id, a promise and why it is released, what the lead remembers (its text, a
      * decision's reason and source), a person's name, and a question to the owner with its options. */
     knowledgeReference: 20,

package/dist/toolroll-update-ui.d.ts

@@ -4,6 +4,7 @@
  * and a one-time "What's new" card afterwards. The work itself is the
  * `toolroll update` command (toolroll-update.ts), started as its own job.
  */
+import { type Html } from "./html.js";
 import type { InstallMethod } from "./install-method.js";
 import { type RuntimeUpdateJournal } from "./toolroll-update.js";
 export declare const UPDATES_CSS: string;
@@ -29,11 +30,11 @@ export type UpdatesView = {
     csrf: string;
 };
 /** The steps, each done, current, failed or waiting. Also the live region's fragment. */
-export declare function updateStepsHtml(j: RuntimeUpdateJournal, running: boolean): string;
+export declare function updateStepsHtml(j: RuntimeUpdateJournal, running: boolean): Html;
 export declare function updatesHtml(view: UpdatesView, notice: {
     said?: string | null;
     problem?: string | null;
-}): string;
+}): Html;
 export declare function newerThan(a: string, b: string): boolean;
 /** Polls the steps every two seconds, keeps trying while the console
  * restarts, and reloads once the update has finished. */

package/dist/toolroll-update-ui.js

@@ -1,5 +1,11 @@
+/**
+ * Settings → Updates: the installed version, one of three ways to update
+ * (behind the operator's password), the update's steps live while it runs,
+ * and a one-time "What's new" card afterwards. The work itself is the
+ * `toolroll update` command (toolroll-update.ts), started as its own job.
+ */
+import { html, postForm, replaceMarkup } from "./html.js";
 import { STEP_WORDS, UPDATE_STEPS, runtimeUpdateTerminal } from "./toolroll-update.js";
-const e = (value) => String(value ?? "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 const clock = (iso) => { const d = new Date(iso); return `${String(d.getHours()).padStart(2, "0")}:${String(d.getMinutes()).padStart(2, "0")}`; };
 export const UPDATES_CSS = `.updates{max-width:640px;min-width:0;overflow-wrap:anywhere}.updates .card{margin:0 0 16px}.updates h2{margin:0;font-size:1.0625rem}.updates .card>p{margin:4px 0 0}` +
     `.updates .update-actions{display:flex;flex-wrap:wrap;gap:8px;margin:16px 0 0}.updates .update-actions button{white-space:nowrap}` +
@@ -23,60 +29,50 @@ export function updateStepsHtml(j, running) {
     const items = UPDATE_STEPS.map((step, i) => {
         const state = j.phase === "complete" || i < last ? "done" : i > last ? "waiting" : failed ? "failed" : finished ? "waiting" : "now";
         // Only where it adds something: which work it waits for, or what went wrong.
-        const detail = state === "now" && step === "draining" && j.waiting ? `<span class="step-detail">${e(j.waiting.on)}.${j.waiting.action ? ` If nothing of it is running, run <code>${e(j.waiting.action)}</code>.` : ""}</span>`
-            : (state === "now" && step === "draining") || (state === "failed" && j.phase === "rolling-back") ? `<span class="step-detail">${e(j.detail)}</span>` : "";
-        return `<li data-step="${step}" data-state="${state}">${e(STEP_WORDS[step])}${detail}</li>`;
-    }).join("");
-    const title = j.phase === "scheduled" ? `Update to ${e(j.to.version)} scheduled for ${e(clock(j.at ?? j.startedAt))}`
-        : j.phase === "rolling-back" ? `Restoring ${e(j.from.version)}`
-            : j.kind === "rollback" ? `Rolling back to ${e(j.to.version)}` : `Updating to ${e(j.to.version)}`;
-    const stalled = !running && !finished ? `<p class="update-problem" role="alert">The updater stopped. Run <code>toolroll update --resume</code> to continue it.</p>` : "";
-    return `<div id="update-live" data-phase="${e(j.phase)}" data-done="${finished ? 1 : 0}"><h2>${title}</h2>` +
-        (j.phase === "scheduled" ? `<p class="meta">Running work finishes first. You can close this page.</p>` : `<ol class="update-steps" aria-label="Update steps">${items}</ol>`) + stalled + `</div>`;
+        const detail = state === "now" && step === "draining" && j.waiting ? html `<span class="step-detail">${j.waiting.on}.${j.waiting.action ? html ` If nothing of it is running, run <code>${j.waiting.action}</code>.` : ""}</span>`
+            : (state === "now" && step === "draining") || (state === "failed" && j.phase === "rolling-back") ? html `<span class="step-detail">${j.detail}</span>` : "";
+        return html `<li data-step="${step}" data-state="${state}">${STEP_WORDS[step]}${detail}</li>`;
+    });
+    const title = j.phase === "scheduled" ? `Update to ${j.to.version} scheduled for ${clock(j.at ?? j.startedAt)}`
+        : j.phase === "rolling-back" ? `Restoring ${j.from.version}`
+            : j.kind === "rollback" ? `Rolling back to ${j.to.version}` : `Updating to ${j.to.version}`;
+    const stalled = !running && !finished ? html `<p class="update-problem" role="alert">The updater stopped. Run <code>toolroll update --resume</code> to continue it.</p>` : "";
+    return html `<div id="update-live" data-phase="${j.phase}" data-done="${finished ? 1 : 0}"><h2>${title}</h2>${j.phase === "scheduled" ? html `<p class="meta">Running work finishes first. You can close this page.</p>` : html `<ol class="update-steps" aria-label="Update steps">${items}</ol>`}${stalled}</div>`;
 }
 function outcomeHtml(j) {
     if (j.phase === "complete")
-        return j.kind === "rollback" ? `<div class="card" data-update-outcome="rolled-back"><h2>Back on ${e(j.to.version)}</h2><p class="meta">${e(j.detail)}</p></div>` : "";
+        return j.kind === "rollback" ? html `<div class="card" data-update-outcome="rolled-back"><h2>Back on ${j.to.version}</h2><p class="meta">${j.detail}</p></div>` : "";
     if (j.phase === "cancelled")
-        return `<div class="card" data-update-outcome="cancelled"><h2>Update cancelled</h2><p class="meta">Nothing changed.</p></div>`;
+        return html `<div class="card" data-update-outcome="cancelled"><h2>Update cancelled</h2><p class="meta">Nothing changed.</p></div>`;
     // Stopped on a finished run it can't show has ended: what is in the way and the one command, nothing more.
     if (j.phase === "refused" && j.waiting)
-        return `<div class="card" data-update-outcome="stopped"><h2>Update to ${e(j.to.version)} stopped: run #${e(j.waiting.run)} is in the way</h2>` +
-            `<p>${e(j.waiting.on)}. New work resumed.</p>` + (j.waiting.action ? `<p class="meta">If nothing of it is running, run <code>${e(j.waiting.action)}</code>, then update again.</p>` : `<p class="meta">Update again once it has stopped.</p>`) + `</div>`;
-    const title = j.phase === "refused" ? `Didn't update to ${e(j.to.version)}` : j.phase === "restored" ? `Update to ${e(j.to.version)} didn't finish` : "The update needs attention";
-    return `<div class="card" data-update-outcome="${e(j.phase)}"><h2>${title}</h2><p class="${j.phase === "needs-attention" ? "update-problem" : ""}" role="alert">${e(j.detail)}</p>` +
-        `<details><summary>Steps</summary>${updateStepsHtml(j, false).replace(/<h2>.*?<\/h2>/, "")}</details></div>`;
+        return html `<div class="card" data-update-outcome="stopped"><h2>Update to ${j.to.version} stopped: run #${j.waiting.run} is in the way</h2><p>${j.waiting.on}. New work resumed.</p>${j.waiting.action ? html `<p class="meta">If nothing of it is running, run <code>${j.waiting.action}</code>, then update again.</p>` : html `<p class="meta">Update again once it has stopped.</p>`}</div>`;
+    const title = j.phase === "refused" ? html `Didn't update to ${j.to.version}` : j.phase === "restored" ? html `Update to ${j.to.version} didn't finish` : "The update needs attention";
+    return html `<div class="card" data-update-outcome="${j.phase}"><h2>${title}</h2><p class="${j.phase === "needs-attention" ? "update-problem" : ""}" role="alert">${j.detail}</p><details><summary>Steps</summary>${replaceMarkup(updateStepsHtml(j, false), /<h2>.*?<\/h2>/, () => html ``)}</details></div>`;
 }
 export function updatesHtml(view, notice) {
-    const note = notice.problem ? `<p class="update-problem" role="alert">${e(notice.problem)}</p>` : notice.said ? `<p role="status">${e(notice.said)}</p>` : "";
+    const note = notice.problem ? html `<p class="update-problem" role="alert">${notice.problem}</p>` : notice.said ? html `<p role="status">${notice.said}</p>` : "";
     const j = view.journal;
     const active = j !== null && !runtimeUpdateTerminal(j.phase);
-    const csrf = `<input type="hidden" name="csrf" value="${e(view.csrf)}">`;
-    const whatsNew = view.whatsNew === null ? "" : `<div class="card whats-new" data-whats-new="${e(view.whatsNew.version)}"><h2>What’s new in ${e(view.whatsNew.version)}</h2>` +
-        (view.whatsNew.notes.length > 0 ? `<ul>${view.whatsNew.notes.map(line => `<li>${e(line)}</li>`).join("")}</ul>` : "") +
-        `<p class="meta"><a href="https://github.com/ap9000/toolroll/releases/tag/v${e(view.whatsNew.version)}" rel="noreferrer">Full release notes</a></p>` +
-        `<form method="post" action="/settings/updates/seen">${csrf}<button type="submit">Got it</button></form></div>`;
+    const whatsNew = view.whatsNew === null ? "" : html `<div class="card whats-new" data-whats-new="${view.whatsNew.version}"><h2>What’s new in ${view.whatsNew.version}</h2>${view.whatsNew.notes.length > 0 ? html `<ul>${view.whatsNew.notes.map(line => html `<li>${line}</li>`)}</ul>` : ""}<p class="meta"><a href="https://github.com/ap9000/toolroll/releases/tag/v${view.whatsNew.version}" rel="noreferrer">Full release notes</a></p>${postForm("/settings/updates/seen", html `<button type="submit">Got it</button>`)}</div>`;
     if (active) {
-        const cancel = ["scheduled", "draining"].includes(j.phase) ? `<form method="post" action="/settings/updates/cancel" class="update-actions">${csrf}<button type="submit">Cancel update</button></form>` : "";
-        return `<section class="updates">${note}<div class="card" id="update-region">${updateStepsHtml(j, view.running)}${cancel}</div><p class="meta stamp" id="update-region-stamp"></p></section>`;
+        const cancel = ["scheduled", "draining"].includes(j.phase) ? postForm("/settings/updates/cancel", html `<button type="submit">Cancel update</button>`, { attrs: { class: "update-actions" } }) : "";
+        return html `<section class="updates">${note}<div class="card" id="update-region">${updateStepsHtml(j, view.running)}${cancel}</div><p class="meta stamp" id="update-region-stamp"></p></section>`;
     }
     const latest = "version" in view.latest ? view.latest.version : null;
     const newer = latest !== null && newerThan(latest, view.current);
-    const state = view.method.kind === "npx" ? `<h2>Toolroll ${e(view.current)}</h2><p class="meta">npx runs the latest release each time, so this is current.</p>`
-        : view.method.kind === "source" ? `<h2>Toolroll ${e(view.current)}</h2><p class="meta">This runs from a source checkout. Update it with git.</p>`
-            : newer && view.method.kind === "desktop" ? `<h2>Toolroll ${e(latest)} is available</h2><p class="meta">You have ${e(view.current)}. Update it from the Toolroll app.</p>`
-                : newer ? `<h2>Toolroll ${e(latest)} is available</h2><p class="meta">You have ${e(view.current)}. Running work finishes first, and your current version is kept so you can go back.</p>`
-                    : "off" in view.latest ? `<h2>Toolroll ${e(view.current)}</h2><p class="meta">Update checks are off.</p><form method="get" action="/settings/updates" class="update-actions"><input type="hidden" name="check" value="now"><button type="submit">Check now</button></form>`
-                        : latest === null ? `<h2>Toolroll ${e(view.current)}</h2><p class="meta">Couldn’t check for a newer release: ${e("problem" in view.latest ? view.latest.problem : "")}</p>`
-                            : `<h2>Toolroll ${e(view.current)} is up to date</h2>`;
+    const state = view.method.kind === "npx" ? html `<h2>Toolroll ${view.current}</h2><p class="meta">npx runs the latest release each time, so this is current.</p>`
+        : view.method.kind === "source" ? html `<h2>Toolroll ${view.current}</h2><p class="meta">This runs from a source checkout. Update it with git.</p>`
+            : newer && view.method.kind === "desktop" ? html `<h2>Toolroll ${latest} is available</h2><p class="meta">You have ${view.current}. Update it from the Toolroll app.</p>`
+                : newer ? html `<h2>Toolroll ${latest} is available</h2><p class="meta">You have ${view.current}. Running work finishes first, and your current version is kept so you can go back.</p>`
+                    : "off" in view.latest ? html `<h2>Toolroll ${view.current}</h2><p class="meta">Update checks are off.</p><form method="get" action="/settings/updates" class="update-actions"><input type="hidden" name="check" value="now"><button type="submit">Check now</button></form>`
+                        : latest === null ? html `<h2>Toolroll ${view.current}</h2><p class="meta">Couldn’t check for a newer release: ${"problem" in view.latest ? view.latest.problem : ""}</p>`
+                            : html `<h2>Toolroll ${view.current} is up to date</h2>`;
     const form = newer && !["npx", "source", "desktop"].includes(view.method.kind)
-        ? `<form method="post" action="/settings/updates">${csrf}<input type="hidden" name="version" value="${e(latest)}">` +
-            `<label class="step-up">Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label>` +
-            `<div class="update-actions"><button type="submit" name="when" value="now" class="primary">Update now</button>` +
-            `<button type="submit" name="when" value="when-idle">When idle</button><button type="submit" name="when" value="tonight">Tonight (03:00)</button></div></form>`
+        ? postForm("/settings/updates", html `<label class="step-up">Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label><div class="update-actions"><button type="submit" name="when" value="now" class="primary">Update now</button><button type="submit" name="when" value="when-idle">When idle</button><button type="submit" name="when" value="tonight">Tonight (03:00)</button></div>`, { hidden: { version: latest } })
         : "";
-    const rollback = view.rollbackTo !== null ? `<p class="meta">To go back to ${e(view.rollbackTo)}: <code>toolroll update --rollback</code></p>` : "";
-    return `<section class="updates">${note}${whatsNew}${j ? outcomeHtml(j) : ""}<div class="card" data-update-state="${newer ? "available" : "current"}">${state}${form}${rollback}</div></section>`;
+    const rollback = view.rollbackTo !== null ? html `<p class="meta">To go back to ${view.rollbackTo}: <code>toolroll update --rollback</code></p>` : "";
+    return html `<section class="updates">${note}${whatsNew}${j ? outcomeHtml(j) : ""}<div class="card" data-update-state="${newer ? "available" : "current"}">${state}${form}${rollback}</div></section>`;
 }
 export function newerThan(a, b) {
     const [x, y] = [a, b].map(v => v.split(".").map(Number));

package/dist/toolroll-update.d.ts

@@ -137,6 +137,14 @@ export type TableDigest = {
         rows: number;
         found: number;
     };
+    compactedRuns?: {
+        run: number;
+        count: number;
+    }[];
+    summaries?: {
+        run: number;
+        hash: string;
+    }[];
 };
 /** Each saved table's columns, row count and last rowid; the append-only ones hashed (deploy-browser's rehearsal check).
  * Bounded: only the ledger and small tables are read row by row. */

package/dist/toolroll-update.js

@@ -35,7 +35,7 @@ import { processMayBeAlive } from "./process-liveness.js";
 import { assertCodingUpdateStopped, backupCodingCatalog, codingCatalogExists, releaseStaleCodingOwner, removeCodingUpdateGate } from "./coding-update.js";
 import { installLaunchdService, launchdPlist, stopLaunchdService, writeFileDurably } from "./daemon.js";
 import { NAME } from "./names.js";
-import { updateSafeSchema } from "./store.js";
+import { orphanKey, updateSafeSchema, V117_RENAMED_COLUMNS, V117_RENAMED_TABLES } from "./store.js";
 import { isNewer, REGISTRY } from "./releases.js";
 import { markNeverIndex } from "./never-index.js";
 import { readRuntimeUpdateJournal, RUNTIME_PHASES, RUNTIME_UPDATE_STEPS, stagedStartedAt, updaterStartingOf } from "./contracts/update-journal.js";
@@ -322,7 +322,8 @@ export function durableRename(temp, target) {
  * only when every saved value is null, or, with `carried`, when the receiving table gained exactly one receipt under
  * that destination per row holding a value, and as many non-null values per column as the dropped columns held.
  * `receives`: the only rows the table may gain are those receipts. `compacted`: rows may go only into summary rows,
- * whose `sum` grows by exactly as many. `retired`: a removed feature's table, which may go whole. `fromRoutines`: rows
+ * whose `sum` grows by exactly as many. `summarizes`: old summaries stay identical by run key; new ones account for
+ * that run's compacted witnesses, even below the previous maximum key. `retired`: a removed feature's table, which may go whole. `fromRoutines`: rows
  * kept as they were, and the only rows the table may gain are one per saved routine, moved into a scheduled flow (its
  * flow, or its schedule trigger naming that routine) — on only when the routine was approved and running. `moved`:
  * the table may go only when every row it had (or the ones `rows` counts) arrived in `into`: the rows there that
@@ -366,7 +367,7 @@ const HISTORY_RULES = {
     ...Object.fromEntries(Object.entries(CHAT_MOVES).map(([table, moved]) => [table, { moved }])),
     action_ledger: { appendOnly: true }, ledger_seal: { appendOnly: true }, ledger_checkpoint: { appendOnly: true },
     // v114: a finished run whose process witnesses have all exited keeps one summary row in place of them.
-    run_process: { compacted: { into: "run_process_summary", sum: "witnesses" } }, run_process_summary: { appendOnly: true },
+    run_process: { compacted: { into: "run_process_summary", sum: "witnesses" } }, run_process_summary: { summarizes: "run_process" },
     // v114: single-destination delivery columns may be dropped only once their values are legacy receipts.
     notification: { dropped: ["attempts", "last_attempt_at", "last_error", "delivered_at", "receipt", "claim_owner", "claim_expires_at"], carried: { into: "notification_delivery", destination: LEGACY_DESTINATION } },
     notification_delivery: { receives: LEGACY_DESTINATION },
@@ -377,11 +378,36 @@ const HISTORY_RULES = {
     fallback_config: { retired: true }, fallback_cycle: { retired: true }, fallback_transition: { retired: true },
     // v115: each routine becomes one scheduled flow and its schedule trigger.
     flow: { fromRoutines: "flow" }, flow_trigger: { fromRoutines: "trigger" },
+    // v117 (D5): the lead's and the subagents' tables keep every row under their new names (mate_* → lead_*, teammate* →
+    // subagent*); a column renamed in a table that keeps its name keeps its values under the new one.
+    ...Object.fromEntries(Object.entries(V117_RENAMED_TABLES).map(([old, now]) => [old, { moved: { into: now, where: "1" } }])),
+    ...Object.fromEntries(V117_RENAMED_COLUMNS.filter(([table]) => !Object.values(V117_RENAMED_TABLES).includes(table)).map(([table, from, to]) => [table, { renamed: { [from]: to } }])),
 };
 /** The tables a migration may remove whole (v115's removed features). */
 export const RETIRED_TABLES = Object.freeze(Object.keys(HISTORY_RULES).filter(name => HISTORY_RULES[name].retired));
 const tableColumns = (db, name) => db.prepare("PRAGMA table_info(" + quote(name) + ")").all().map(r => String(r["name"]));
 const plainValue = (_, v) => v instanceof Uint8Array ? Buffer.from(v).toString("hex") : typeof v === "bigint" ? String(v) : v;
+const rowHash = (row) => createHash("sha256").update(JSON.stringify(Object.values(row), plainValue)).digest("hex");
+const summaryRows = (db, name, columns) => db.prepare("SELECT " + columns.map(quote).join(",") + " FROM " + quote(name) + " ORDER BY run").iterate();
+/** Keep every saved summary byte-identical. A new key must replace all witnesses saved for that same run. */
+function keptSummaries(db, name, before, source) {
+    const saved = new Map(before?.summaries?.map(row => [row.run, row.hash]));
+    const witnesses = new Map(source?.compactedRuns?.map(row => [row.run, row.count]));
+    const from = HISTORY_RULES[name].summarizes, sum = HISTORY_RULES[from].compacted.sum;
+    const remaining = db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name=?").get(from)
+        ? db.prepare("SELECT 1 FROM " + quote(from) + " WHERE run = ? LIMIT 1") : undefined;
+    for (const row of summaryRows(db, name, before?.columns ?? tableColumns(db, name))) {
+        const run = Number(row["run"]), hash = saved.get(run);
+        if (hash !== undefined) {
+            if (rowHash(row) !== hash)
+                return false;
+            saved.delete(run);
+        }
+        else if (!witnesses.has(run) || Number(row[sum]) !== witnesses.get(run) || !remaining || remaining.get(run))
+            return false;
+    }
+    return saved.size === 0;
+}
 /** Rows streamed into a sha256, never held together: through a rowid in rowid order, or a WITHOUT ROWID table whole. */
 function rowsHash(db, name, columns, through) {
     const select = "SELECT " + (through === undefined ? "" : 'rowid AS "rowid:", ') + columns.map(quote).join(",") + " FROM " + quote(name);
@@ -423,8 +449,13 @@ export function historySnapshot(db) {
             t.received = receipts(db, name, rule.receives, columns.filter(column => column !== "notification" && column !== "destination"));
         if (rule?.appendOnly || rule?.fromRoutines)
             t.hash = rowsHash(db, name, columns, t.last).hash;
-        if (rule?.compacted)
+        if (rule?.compacted) {
             t.summed = summed(db, rule.compacted);
+            t.compactedRuns = db.prepare("SELECT run, count(*) AS n FROM " + quote(name) + " GROUP BY run ORDER BY run").all()
+                .map(r => ({ run: Number(r["run"]), count: Number(r["n"]) }));
+        }
+        if (rule?.summarizes)
+            t.summaries = [...summaryRows(db, name, columns)].map(row => ({ run: Number(row["run"]), hash: rowHash(row) }));
         if (rule?.fromRoutines)
             t.routines = savedRoutines(db);
         if (rule?.moved)
@@ -500,7 +531,8 @@ export function changedHistory(db, before) {
             return move === undefined || t.moved === undefined || arrived(db, move) - t.moved.found !== t.moved.rows;
         }
         const rule = HISTORY_RULES[t.name], present = new Set(tableColumns(db, t.name));
-        if (t.columns.some(c => !present.has(c) && (!rule?.dropped?.includes(c) || (t.nonNull?.[c] !== 0 && !accounted(rule, t)))))
+        const kept = (c) => present.has(c) || (rule?.renamed?.[c] !== undefined && present.has(rule.renamed[c]));
+        if (t.columns.some(c => !kept(c) && (!rule?.dropped?.includes(c) || (t.nonNull?.[c] !== 0 && !accounted(rule, t)))))
             return true;
         const columns = t.columns.filter(c => present.has(c));
         if (!t.rowid) {
@@ -515,9 +547,13 @@ export function changedHistory(db, before) {
             const after = rowsHash(db, t.name, columns, t.last);
             return after.count !== t.count || after.hash !== t.hash;
         }
+        if (rule?.summarizes)
+            return !keptSummaries(db, t.name, t, before.find(one => one.name === rule.summarizes));
         const r = db.prepare("SELECT count(*) AS n, coalesce(max(rowid),0) AS last FROM " + quote(t.name)).get(), count = Number(r["n"]), last = Number(r["last"]);
         if (rule?.compacted)
-            return count > t.count || last > t.last || t.count - count !== summed(db, rule.compacted) - (t.summed ?? 0);
+            return count > t.count || last > t.last || t.count - count !== summed(db, rule.compacted) - (t.summed ?? 0)
+                // A newly created summary table has no digest of its own; check its keys here too.
+                || (!before.some(one => one.name === rule.compacted.into) && tables.has(rule.compacted.into) && !keptSummaries(db, rule.compacted.into, undefined, t));
         if (rule?.receives) {
             const added = gained.get(t.name)?.count ?? 0;
             return count - t.count !== added || (added > 0 && added !== owed.get(t.name)?.count) || last < t.last;
@@ -531,8 +567,9 @@ async function rehearse(j, system, source) {
     chmodSync(copy, 0o600);
     try {
         let db = new (sqlite().DatabaseSync)(copy, { readOnly: true });
-        // Rows already pointing nowhere before the update are the install's own; only ones the migration makes refuse.
-        const orphans = () => new Set([...db.prepare("PRAGMA foreign_key_check").iterate()].map(row => JSON.stringify(row)));
+        // Rows already pointing nowhere before the update are the install's own; only ones the migration makes refuse. (By
+        // today's table names: a renamed table's old orphan is the same row under its new name, orphanKey.)
+        const orphans = () => new Set([...db.prepare("PRAGMA foreign_key_check").iterate()].map(row => orphanKey(row)));
         const before = historySnapshot(db), orphaned = orphans();
         db.close();
         await system.rehearse(j.to.dist, copy);

package/dist/tools-ui.d.ts

@@ -1,3 +1,6 @@
+/** Settings → Tools: one project's MCP servers, in plain words. Secrets are
+ * entered here and nowhere else, and never shown again. */
+import { type Html } from "./html.js";
 import { type FoundTool, type ProjectTool, type ToolSpec } from "./project-tools.js";
 export declare const TOOLS_CSS = ".tools{max-width:780px;min-width:0;overflow-wrap:anywhere}.tools .card{padding:16px 18px;margin:12px 0;min-width:0}.tools .card h2{font-size:1.05rem;margin:0;color:var(--so-ink);font-weight:600}.tools .tool-heading{display:flex;align-items:center;gap:10px}.tools .tool-heading h2{flex:1;min-width:0}.tools .tool-state{font-size:.85rem;flex-shrink:0;color:var(--so-muted)}.tools .tool-state[data-ready=\"false\"]{color:var(--so-warning)}.tools .card>p{margin:6px 0 0}.tools .tool-note{color:var(--so-warning)}.tools code{white-space:pre-wrap;overflow-wrap:anywhere;word-break:break-word;font-size:.85rem}.tools form{display:grid;gap:10px;margin:0}.tools label{display:grid;gap:6px}.tools input,.tools select{box-sizing:border-box;width:100%;max-width:100%;min-width:0}.tools button{justify-self:start;white-space:nowrap;min-height:44px;max-width:100%;overflow:hidden;text-overflow:ellipsis}.tools details:not(.card){margin:6px 0 0;padding:0;border:0;border-radius:0;background:none;box-shadow:none}.tools details:not(.card)>summary{min-height:36px;display:flex;align-items:center;font-size:.9rem;color:var(--so-muted);cursor:pointer}.tools details:not(.card)[open]>summary{color:var(--so-ink)}.tools details.card>summary{cursor:pointer;min-height:44px;display:flex;align-items:center;font-weight:600}.tools summary{list-style:none;gap:10px}.tools summary::-webkit-details-marker{display:none}.tools summary::before{content:\"\";flex-shrink:0;width:6px;height:6px;margin:0 2px;border-right:1.5px solid currentColor;border-bottom:1.5px solid currentColor;transform:rotate(-45deg);transition:transform .15s}.tools details[open]>summary::before{transform:rotate(45deg)}.tools details:not(.card) form{padding:4px 0 10px}.tools .tool-facts{margin:0 0 8px;display:grid;gap:4px;font-size:.9rem}.tools .tool-facts p{margin:0}.tools .tool-controls{display:flex;gap:12px;flex-wrap:wrap;margin-top:12px}.tools .tool-found{display:flex;gap:10px;align-items:flex-start}.tools .tool-found input{flex:0 0 auto;width:18px;height:18px;margin-top:3px}.tools .tool-found span{min-width:0}.tools .problem{padding:10px 12px;margin:8px 0 0}.tools .tool-connect{scroll-margin-top:72px}.tools .connect-wanted{background:var(--so-accent);color:var(--so-on-accent);border-color:var(--so-accent)}.tools .connect-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(210px,1fr));gap:8px}.tools .connect-tile{display:grid;grid-template-columns:auto 1fr;column-gap:10px;align-items:center;justify-self:stretch;text-align:left;white-space:normal;padding:10px 12px;border:1px solid var(--so-line);border-radius:10px;background:var(--so-paper);color:var(--so-ink);min-height:60px;font:inherit;cursor:pointer;scroll-margin-top:96px}.tools .connect-tile:hover{border-color:var(--so-input-line);background:var(--so-raised)}.tools .connect-tile:target,.tools .connect-tile:focus-visible{outline:2px solid var(--so-accent);outline-offset:2px}.tools .connect-tile .brand-mark{grid-row:span 2}.tools .connect-tile strong{font-weight:600;line-height:1.3}.tools .connect-tile>span:not(.brand-mark){font-size:.8rem;color:var(--so-muted);line-height:1.35;overflow:hidden;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical}.tools .connect-tile[data-state=\"connected\"]>span:not(.brand-mark){color:var(--so-success)}.tools .connect-local{grid-column:1/-1}.tools .connect-local>span:not(.brand-mark){-webkit-line-clamp:unset}.tools .connect-problem{margin:0}.tools .connect-problem:focus{outline:2px solid var(--so-accent);outline-offset:2px}.tools .connect-tile:disabled{cursor:default;opacity:.6}@media(max-width:600px){.tools .connect-grid{grid-template-columns:1fr 1fr}.tools .connect-tile:not(.connect-local)>span:not(.brand-mark){display:none}.tools .connect-local>span:not(.brand-mark){grid-column:2}.tools .connect-tile{min-height:52px;padding:8px 10px}.tools .connect-tile .brand-mark{grid-row:auto}.tools input,.tools select{font-size:16px}.tools .card{padding:14px}}";
 export type ToolsView = {
@@ -31,10 +34,10 @@ export type ToolsView = {
     }[];
 };
 /** The project chooser: it opens the chosen project at once; without scripts, its button does. */
-export declare function toolsProjectPicker(projects: readonly string[], chosen: string, keep?: Record<string, string>): string;
+export declare function toolsProjectPicker(projects: readonly string[], chosen: string, keep?: Record<string, string>): Html | "";
 /** Choosing another project marks every form on the page as stale before it reloads, so a tap racing the reload is refused. */
 export declare const TOOLS_PROJECT_SCRIPT = "(function(){var s=document.querySelector('select[data-tools-project]');if(!s)return;s.addEventListener('change',function(){document.querySelectorAll('input[name=shown]').forEach(function(i){i.value=s.value;});});})();";
 export declare function toolsHtml(view: ToolsView, csrf: string, canManage: boolean, message?: {
     said?: string | null;
     problem?: string | null;
-}): string;
+}): Html;