toolroll 0.9.63 → 0.9.65

package/dist/assignment.js

@@ -300,6 +300,17 @@ export function assignmentOf(store, taskId, now, access, root, memo) {
                 access: access.principal === "operator" ? "operator-control" : "operator-handoff", retry: "refresh-before-acting" };
             need = { key: "rebuild", build: result.id };
         }
+        // Rewritten after the build and not approved yet: Build again can't start an unapproved plan, so the yes is the
+        // one action (approve-scope opens the approval on the task page); Build again follows it.
+        // Builds only (a scout's report is not built again), and never ahead of an open question: approving answers neither.
+        else if (current.state === "done" && result !== null && result.role === "builder" && questions.length === 0 &&
+            scope !== null && scope.termsProblem == null && !approvalOf(scope).approved && !!result.scopeDigest && scope.digest !== result.scopeDigest &&
+            store.activeHolds(current.refId, now).length === 0 && unfinished === null && store.currentLiveLease(current.refId, now) === null && store.finalResultReason(result.id) === null) {
+            detail = NEEDS.replan.sentence({ build: result.id });
+            primaryAction = { code: "approve-scope", label: NEEDS.replan.action.label, target: { taskId: current.id, runId: null, decisionId: null },
+                access: access.principal === "operator" ? "operator-control" : "operator-handoff", retry: "refresh-before-acting" };
+            need = { key: "replan", build: result.id };
+        }
     }
     if (earlierActive.length > 0) {
         attention.push(`${earlierActive.length} earlier task version${earlierActive.length === 1 ? " is" : "s are"} still active.`);
@@ -307,6 +318,8 @@ export function assignmentOf(store, taskId, now, access, root, memo) {
             state = "needs-decision";
             detail = "Earlier work is still active. Resolve it before completing this assignment.";
             const earlier = earlierActive[0];
+            // The earlier version's act replaces this one's, and with it this version's need (its rebuild or replan).
+            need = null;
             primaryAction = taskWorkSummaryOf(store, earlier.id, now, access)?.primaryAction ?? {
                 code: "inspect-task", label: "Review active work", target: { taskId: earlier.id, runId: null, decisionId: null }, access: "read", retry: "read-again",
             };

package/dist/attest.js

@@ -16,6 +16,7 @@
  * 13's N, fixed): three consecutive minor releases failing conformance
  * without a fixable adapter change retire the adapter, typed.
  */
+import { ACP_AGENTS, isAcpProvider } from "./acp-agents.js";
 import { execFile } from "node:child_process";
 import { realpathSync, statSync, accessSync, constants } from "node:fs";
 import { delimiter, isAbsolute, join } from "node:path";
@@ -99,6 +100,12 @@ const defaultProbe = (file, args, timeoutMs) => new Promise(resolve => {
  * throw, never a silent pass. Returns null for tier-1 providers.
  */
 export async function attestProvider(provider, binary, probe = defaultProbe) {
+    // An ACP agent runs only on a passed conformance check of the exact binary here (docs/plans/acp-adapter.md
+    // § Admission). Absence is denial: there is no "tier 1, allow" for it. The check itself arrives with layer E;
+    // until then no ACP agent runs.
+    if (isAcpProvider(provider)) {
+        return { ok: false, problem: `${ACP_AGENTS[provider].name} isn't checked on this computer — run \`toolroll agents check ${provider}\``, version: null };
+    }
     const range = attestationOf(provider);
     if (range === null)
         return null;

package/dist/backup-ui.js

@@ -3,7 +3,7 @@
  * back up now, then the schedule. Past backups and how to restore sit in
  * disclosures.
  */
-import { html, postForm } from "./html.js";
+import { html, postForm, reauth } from "./html.js";
 import { bytesWords } from "./storage.js";
 import { whenUtc } from "./when-html.js";
 /** The schedules on offer and the most copies kept. Here rather than in backup.ts so the page never loads `node:sqlite`. */
@@ -46,5 +46,5 @@ export function backupHtml(view, notice) {
         ...BACKUP_EVERY_HOURS.map(hours => html `<option value="${hours}"${s.enabled && s.everyHours === hours ? html ` selected` : ""}>${everyWords(hours)}</option>`)];
     const runs = view.runs.map(run => html `<li data-backup-run="${run.id}"><span>${when(run.startedAt)}</span>${run.ok === true ? html `<span>Succeeded${run.bytes === null ? "" : ` · ${bytesWords(run.bytes)}`}</span>${run.file === null ? "" : html `<span class="mono meta">${fileName(run.file)}</span>`}`
         : run.ok === false ? html `<span class="failed">Failed: ${run.error ?? "no reason recorded"}</span>` : html `<span>Running</span>`}<span class="meta">${run.trigger === "manual" ? "by hand" : "scheduled"}</span></li>`);
-    return html `<section class="backups">${note}<div class="card backup-state"><div>${state(view)}</div>${postForm("/settings/backups/now", html `<button type="submit">Back up now</button>`)}</div><h2>Schedule</h2>${postForm("/settings/backups", html `<fieldset><div class="pair"><label>Back up<select name="every">${choices}</select></label><label>Keep the newest<input type="number" name="keep" min="1" max="${MAX_KEEP}" step="1" value="${s.keep}" required></label></div><label>Folder<input type="text" name="folder" value="${s.folder ?? ""}" placeholder="${view.defaultFolder}" spellcheck="false"></label><label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label></fieldset><button type="submit">Save</button>`)}<details><summary>Recent backups${view.runs.length === 0 ? "" : ` (${view.runs.length})`}</summary>${runs.length === 0 ? html `<p class="meta">None yet.</p>` : html `<ol>${runs}</ol>`}<p class="meta">In <span class="mono">${view.folder}</span>. Only the database is copied: provider keys and sign-in files stay out.</p></details><details><summary>Restore a backup</summary><p>Stop Toolroll, then run:</p><pre><code>toolroll restore &lt;file&gt; --dry-run</code></pre><p class="meta">The dry run checks the backup (its version and ledger chain) and changes nothing. Run it again without <code>--dry-run</code> to restore; the current database is kept as a copy first.</p></details></section>`;
+    return html `<section class="backups">${note}<div class="card backup-state"><div>${state(view)}</div>${postForm("/settings/backups/now", html `<button type="submit">Back up now</button>`)}</div><h2>Schedule</h2>${postForm("/settings/backups", html `<fieldset><div class="pair"><label>Back up<select name="every">${choices}</select></label><label>Keep the newest<input type="number" name="keep" min="1" max="${MAX_KEEP}" step="1" value="${s.keep}" required></label></div><label>Folder<input type="text" name="folder" value="${s.folder ?? ""}" placeholder="${view.defaultFolder}" spellcheck="false"></label>${reauth(html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password"></label>`)}</fieldset><button type="submit">Save</button>`)}<details><summary>Recent backups${view.runs.length === 0 ? "" : ` (${view.runs.length})`}</summary>${runs.length === 0 ? html `<p class="meta">None yet.</p>` : html `<ol>${runs}</ol>`}<p class="meta">In <span class="mono">${view.folder}</span>. Only the database is copied: provider keys and sign-in files stay out.</p></details><details><summary>Restore a backup</summary><p>Stop Toolroll, then run:</p><pre><code>toolroll restore &lt;file&gt; --dry-run</code></pre><p class="meta">The dry run checks the backup (its version and ledger chain) and changes nothing. Run it again without <code>--dry-run</code> to restore; the current database is kept as a copy first.</p></details></section>`;
 }

package/dist/browser/THIRD_PARTY_NOTICES.txt

@@ -1460,6 +1460,54 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
+## Bundled dependency: @xterm/addon-fit 0.11.0
+
+Copyright (c) 2019, The xterm.js authors (https://github.com/xtermjs/xterm.js)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
+## Bundled dependency: @xterm/xterm 6.0.0
+
+Copyright (c) 2017-2019, The xterm.js authors (https://github.com/xtermjs/xterm.js)
+Copyright (c) 2014-2016, SourceLair Private Company (https://www.sourcelair.com)
+Copyright (c) 2012-2013, Christopher Jeffrey (https://github.com/chjj/)
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in
+all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+THE SOFTWARE.
+
+
 ## Bundled dependency: @xyflow/react 12.12.0
 
 MIT License

package/dist/browser/terminal.css

@@ -0,0 +1,37 @@
+.xterm{cursor:text;position:relative;user-select:none;-ms-user-select:none;-webkit-user-select:none}.xterm.focus,.xterm:focus{outline:none}.xterm .xterm-helpers{position:absolute;top:0;z-index:5}.xterm .xterm-helper-textarea{padding:0;border:0;margin:0;position:absolute;opacity:0;left:-9999em;top:0;width:0;height:0;z-index:-5;white-space:nowrap;overflow:hidden;resize:none}.xterm .composition-view{background:#000;color:#fff;display:none;position:absolute;white-space:nowrap;z-index:1}.xterm .composition-view.active{display:block}.xterm .xterm-viewport{background-color:#000;overflow-y:scroll;cursor:default;position:absolute;inset:0}.xterm .xterm-screen{position:relative}.xterm .xterm-screen canvas{position:absolute;left:0;top:0}.xterm-char-measure-element{display:inline-block;visibility:hidden;position:absolute;top:0;left:-9999em;line-height:normal}.xterm.enable-mouse-events{cursor:default}.xterm.xterm-cursor-pointer,.xterm .xterm-cursor-pointer{cursor:pointer}.xterm.column-select.focus{cursor:crosshair}.xterm .xterm-accessibility:not(.debug),.xterm .xterm-message{position:absolute;inset:0;z-index:10;color:transparent;pointer-events:none}.xterm .xterm-accessibility-tree:not(.debug) *::selection{color:transparent}.xterm .xterm-accessibility-tree{font-family:monospace;user-select:text;white-space:pre}.xterm .xterm-accessibility-tree>div{transform-origin:left;width:fit-content}.xterm .live-region{position:absolute;left:-9999px;width:1px;height:1px;overflow:hidden}.xterm-dim{opacity:1!important}.xterm-underline-1{text-decoration:underline}.xterm-underline-2{text-decoration:double underline}.xterm-underline-3{text-decoration:wavy underline}.xterm-underline-4{text-decoration:dotted underline}.xterm-underline-5{text-decoration:dashed underline}.xterm-overline{text-decoration:overline}.xterm-overline.xterm-underline-1{text-decoration:overline underline}.xterm-overline.xterm-underline-2{text-decoration:overline double underline}.xterm-overline.xterm-underline-3{text-decoration:overline wavy underline}.xterm-overline.xterm-underline-4{text-decoration:overline dotted underline}.xterm-overline.xterm-underline-5{text-decoration:overline dashed underline}.xterm-strikethrough{text-decoration:line-through}.xterm-screen .xterm-decoration-container .xterm-decoration{z-index:6;position:absolute}.xterm-screen .xterm-decoration-container .xterm-decoration.xterm-decoration-top-layer{z-index:7}.xterm-decoration-overview-ruler{z-index:8;position:absolute;top:0;right:0;pointer-events:none}.xterm-decoration-top{z-index:2;position:relative}.xterm .xterm-scrollable-element>.scrollbar{cursor:default}.xterm .xterm-scrollable-element>.scrollbar>.scra{cursor:pointer;font-size:11px!important}.xterm .xterm-scrollable-element>.visible{opacity:1;background:#0000;transition:opacity .1s linear;z-index:11}.xterm .xterm-scrollable-element>.invisible{opacity:0;pointer-events:none}.xterm .xterm-scrollable-element>.invisible.fade{transition:opacity .8s linear}.xterm .xterm-scrollable-element>.shadow{position:absolute;display:none}.xterm .xterm-scrollable-element>.shadow.top{display:block;top:0;left:3px;height:3px;width:100%;box-shadow:var(--vscode-scrollbar-shadow, #000) 0 6px 6px -6px inset}.xterm .xterm-scrollable-element>.shadow.left{display:block;top:3px;left:0;height:100%;width:3px;box-shadow:var(--vscode-scrollbar-shadow, #000) 6px 0 6px -6px inset}.xterm .xterm-scrollable-element>.shadow.top-left-corner{display:block;top:0;left:0;height:3px;width:3px}.xterm .xterm-scrollable-element>.shadow.top.left{box-shadow:var(--vscode-scrollbar-shadow, #000) 6px 0 6px -6px inset}:root{--t-ground: #0C0E12;--t-surface: #14171D;--t-inset: #1B1F27;--t-line: #262B35;--t-text: #E6E8EC;--t-muted: #8A93A3;--t-blue: #5B9DFF;--t-green: #3FB97F;--t-red: #F06464;--t-amber: #F5A524;--t-sans: "Geist", "Geist Sans", ui-sans-serif, system-ui, -apple-system, sans-serif;--t-mono: "Geist Mono", ui-monospace, SFMono-Regular, Menlo, monospace;color-scheme:dark}@font-face{font-family:Geist;src:url(/fonts/geist-sans-400.woff2) format("woff2");font-weight:400;font-display:swap}@font-face{font-family:Geist;src:url(/fonts/geist-sans-500.woff2) format("woff2");font-weight:500;font-display:swap}@font-face{font-family:Geist;src:url(/fonts/geist-sans-600.woff2) format("woff2");font-weight:600;font-display:swap}@font-face{font-family:Geist Mono;src:url(/fonts/geist-mono-400.woff2) format("woff2");font-weight:400;font-display:swap}*{box-sizing:border-box}html,body{margin:0;height:100%;background:var(--t-ground);color:var(--t-text);font:14px/1.45 var(--t-sans);-webkit-font-smoothing:antialiased}body{overscroll-behavior:none}#so-term{height:100dvh}button,select,input{font:inherit;color:inherit}.term-app{display:grid;grid-template-columns:264px 1fr;height:100dvh}.term-app--loading{display:grid;place-items:center;color:var(--t-muted)}.term-side{background:var(--t-surface);border-right:1px solid var(--t-line);overflow-y:auto}.term-scrim{display:none}.term-main{display:flex;flex-direction:column;min-width:0;min-height:0}.term-list{display:flex;flex-direction:column;padding:8px;gap:2px}.term-list-head{display:flex;align-items:center;gap:8px;padding:6px 6px 10px}.term-list-head h1{font-size:15px;font-weight:600;margin:0;flex:1}.term-back{color:var(--t-muted);text-decoration:none;padding:2px 6px;border-radius:6px}.term-back:hover{color:var(--t-text);background:var(--t-inset)}.term-list-empty{padding:4px 8px}.term-item{display:flex;align-items:center;gap:10px;width:100%;text-align:left;padding:8px;border:0;border-radius:8px;background:none;cursor:pointer}.term-item:hover{background:var(--t-inset)}.term-item--on{background:var(--t-inset);box-shadow:inset 0 0 0 1px var(--t-line)}.term-item-text{display:flex;flex-direction:column;min-width:0;flex:1}.term-item-title{font-weight:500;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.term-item-meta{color:var(--t-muted);font:11.5px/1.4 var(--t-mono);white-space:nowrap;overflow:hidden;text-overflow:ellipsis}.term-dot{width:7px;height:7px;border-radius:50%;background:var(--t-line);flex:none}.term-dot--live{background:var(--t-blue);box-shadow:0 0 0 3px color-mix(in srgb,var(--t-blue) 20%,transparent)}.term-glyph{display:inline-grid;place-items:center;width:22px;height:22px;border-radius:6px;font:600 11px/1 var(--t-mono);flex:none;background:color-mix(in srgb,currentColor 12%,transparent);box-shadow:inset 0 0 0 1px color-mix(in srgb,currentColor 30%,transparent)}.term-glyph--claude{color:#e8956b}.term-glyph--codex{color:var(--t-blue)}.term-glyph--shell{color:var(--t-muted)}.term-bar{display:flex;align-items:center;gap:10px;height:44px;padding:0 12px;border-bottom:1px solid var(--t-line);background:var(--t-ground);flex:none}.term-menu{display:none;background:none;border:0;font-size:18px;padding:4px 6px;cursor:pointer}.term-bar-title{display:flex;align-items:center;gap:8px;font-weight:500;flex:1;min-width:0;white-space:nowrap;overflow:hidden}.term-bar-branch{color:var(--t-muted);font:12px var(--t-mono);overflow:hidden;text-overflow:ellipsis}.term-link{font-size:12px;color:var(--t-muted);white-space:nowrap}.term-link--live{color:var(--t-blue)}.term-link--signed-out,.term-link--gone{color:var(--t-red)}.term-link--busy{color:var(--t-text)}.term-screen{flex:1;min-height:0;padding:6px 4px 4px 8px;background:var(--t-ground)}.term-screen .xterm{height:100%}.term-screen .xterm-viewport{background:var(--t-ground)!important}.term-keys{display:none;gap:6px;padding:6px 8px calc(6px + env(safe-area-inset-bottom));background:var(--t-surface);border-top:1px solid var(--t-line);overflow-x:auto;flex:none}.term-key{min-width:40px;height:34px;padding:0 10px;border-radius:8px;border:1px solid var(--t-line);background:var(--t-inset);font:13px var(--t-mono);touch-action:manipulation;flex:none}.term-key:active,.term-key--on{background:var(--t-line);border-color:var(--t-muted)}.term-new{max-width:440px;margin:40px auto;padding:0 16px;display:flex;flex-direction:column;gap:14px}.term-new h2{margin:0;font-size:18px;font-weight:600}.term-new p{margin:0}.term-muted{color:var(--t-muted)}.term-field{display:flex;flex-direction:column;gap:6px}.term-field span{font-size:12px;color:var(--t-muted)}.term-field select,.term-field input{height:38px;padding:0 10px;border-radius:8px;border:1px solid var(--t-line);background:var(--t-inset)}.term-programs{border:0;padding:0;margin:0;display:grid;grid-template-columns:repeat(3,1fr);gap:8px}.term-programs legend{font-size:12px;color:var(--t-muted);margin-bottom:6px}.term-program{display:flex;align-items:center;gap:8px;padding:10px;border-radius:10px;border:1px solid var(--t-line);background:var(--t-surface);cursor:pointer;font-size:13px}.term-program input{position:absolute;opacity:0;pointer-events:none}.term-program--on{border-color:var(--t-blue);box-shadow:inset 0 0 0 1px var(--t-blue)}.term-ceremony{display:flex;flex-direction:column;gap:10px;padding:12px;border-radius:10px;border:1px solid color-mix(in srgb,var(--t-amber) 45%,transparent);background:color-mix(in srgb,var(--t-amber) 6%,transparent)}.term-ceremony p{font-size:13px}.term-error{color:var(--t-red)}.term-actions{display:flex;justify-content:flex-end;gap:8px}.term-button{display:inline-flex;align-items:center;height:36px;padding:0 14px;border-radius:8px;border:1px solid transparent;background:var(--t-text);color:var(--t-ground);font-weight:500;cursor:pointer;text-decoration:none}.term-button:disabled{opacity:.5;cursor:default}.term-button--quiet{background:none;color:var(--t-text);border-color:var(--t-line)}.term-button--small{height:28px;padding:0 10px;font-size:12.5px}@media(max-width:720px){.term-app{grid-template-columns:1fr}.term-side{position:fixed;inset:0 auto 0 0;width:min(86vw,320px);z-index:20;transform:translate(-100%);transition:transform .2s ease;padding-top:env(safe-area-inset-top)}.term-app--drawer .term-side{transform:none}.term-app--drawer .term-scrim{display:block;position:fixed;inset:0;z-index:10;border:0;background:#00000080}.term-menu{display:block}.term-bar{padding-top:env(safe-area-inset-top);height:calc(44px + env(safe-area-inset-top))}.term-keys{display:flex}.term-screen{padding:4px 2px 2px 4px}}
+/*! Bundled license information:
+
+@xterm/xterm/css/xterm.css:
+  (**
+   * Copyright (c) 2014 The xterm.js authors. All rights reserved.
+   * Copyright (c) 2012-2013, Christopher Jeffrey (MIT License)
+   * https://github.com/chjj/term.js
+   * @license MIT
+   *
+   * Permission is hereby granted, free of charge, to any person obtaining a copy
+   * of this software and associated documentation files (the "Software"), to deal
+   * in the Software without restriction, including without limitation the rights
+   * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+   * copies of the Software, and to permit persons to whom the Software is
+   * furnished to do so, subject to the following conditions:
+   *
+   * The above copyright notice and this permission notice shall be included in
+   * all copies or substantial portions of the Software.
+   *
+   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+   * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+   * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+   * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+   * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+   * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+   * THE SOFTWARE.
+   *
+   * Originally forked from (with the author's permission):
+   *   Fabrice Bellard's javascript vt100 for jslinux:
+   *   http://bellard.org/jslinux/
+   *   Copyright (c) 2011 Fabrice Bellard
+   *   The original design remains. The terminal itself
+   *   has been extended to include xterm CSI codes, among
+   *   other features.
+   *)
+*/