toolroll 0.9.65 → 0.9.68

package/dist/store.d.ts

@@ -1,3 +1,4 @@
+import { type WritesMode } from "./writes-mode.js";
 import { type ProjectNetwork, type RunNetworkRecord } from "./egress.js";
 import { type AcpLaunch } from "./acp-attest.js";
 import { type ChatBinding } from "./chat-core.js";
@@ -178,7 +179,7 @@ export type SealedLedgerEntry = LedgerEntry & {
         hash: string;
     } | null;
 };
-export declare const SCHEMA_VERSION = 130;
+export declare const SCHEMA_VERSION = 131;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export declare const V118_MERGED_TABLES: Readonly<Record<string, CredentialKind>>;
 /**
@@ -315,6 +316,8 @@ export declare const V129_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
 /** v130: a project's network (an approver's setting, egress.ts ProjectNetwork as JSON) and the installation's choice
  * whether an agent may run where no OS confinement exists (one row; 0 until an instance operator turns it on). */
 export declare const CONFINEMENT_SCHEMA = "\nCREATE TABLE IF NOT EXISTS project_network (\n  repo          TEXT PRIMARY KEY,\n  network_json  TEXT NOT NULL CHECK (length(network_json) <= 16384),\n  updated_at    TEXT NOT NULL,\n  updated_by    TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS confinement_setting (\n  id               INTEGER PRIMARY KEY CHECK (id = 1),\n  unfenced_allowed INTEGER NOT NULL DEFAULT 0 CHECK (unfenced_allowed IN (0, 1)),\n  updated_at       TEXT,\n  updated_by       TEXT\n);\nINSERT OR IGNORE INTO confinement_setting (id, unfenced_allowed) VALUES (1, 0);\n";
+/** v131: where a project's builds may write (an approver's setting, agent-fence.ts WritesMode). */
+export declare const PROJECT_WRITES_SCHEMA = "\nCREATE TABLE IF NOT EXISTS project_writes (\n  repo        TEXT PRIMARY KEY,\n  mode        TEXT NOT NULL CHECK (mode IN ('workspace', 'anywhere')),\n  updated_at  TEXT NOT NULL,\n  updated_by  TEXT NOT NULL\n);\n";
 /** v129: a finished run's How it ran, derived from its own records on first view (display only: never a verdict). Its
  * parser version says when to derive again; `steps` says how complete the step detail was, and why not. */
 export declare const RUN_EFFICIENCY_SCHEMA = "\nCREATE TABLE IF NOT EXISTS run_efficiency (\n  run             INTEGER PRIMARY KEY REFERENCES run(id) ON DELETE CASCADE,\n  parser_version  INTEGER NOT NULL,\n  steps           TEXT NOT NULL CHECK (steps IN ('complete','truncated','expired','absent')),\n  steps_reason    TEXT,\n  payload_json    TEXT NOT NULL CHECK (length(payload_json) <= 16384),\n  derived_at      TEXT NOT NULL\n);\n";
@@ -412,8 +415,6 @@ type CancellationTransition = {
     changed: false;
     reason: CancellationRefusal;
 };
-/** States from which no further work is dispatched. */
-export declare const TERMINAL_STATES: readonly TaskState[];
 export type Task = {
     id: string;
     title: string;
@@ -483,18 +484,6 @@ export type TaskRef = {
     /** Recorded, not asserted: what the grant's selector is checked against. */
     origin: TaskOrigin;
 };
-/** A standing order: a pre-approved template whose instances build unattended. */
-export type ExecutionSlot = {
-    id: number;
-    runner: string;
-    state: "reserved" | "running" | "released";
-    run: number | null;
-    incarnation: string | null;
-    processGroup: number | null;
-    reservedAt: string;
-    runningAt: string | null;
-    releasedAt: string | null;
-};
 /** Chat providers are direct API adapters — a DISJOINT type from the build
  * harness providers, by design (Codex v3 review, change 1). */
 export type DirectChatProviderId = "anthropic-api" | "openrouter-api";
@@ -996,8 +985,6 @@ export type Capability = {
     lastResult: string | null;
     expiresAt: string | null;
 };
-/** `kind:name`, the unambiguous way a requirement names a capability. */
-export declare function capabilityKey(capability: Pick<Capability, "kind" | "name">): string;
 /** Parse `kind:name`; a bare name is refused rather than guessed at. */
 export declare function parseCapabilityKey(key: string): {
     kind: Capability["kind"];
@@ -2294,7 +2281,6 @@ export declare class Store {
     mirrorAllowsCompletion(taskId: string): boolean;
     /** Whether a stored acquire mutation exists — the replay marker's fact. */
     hasMutationRecord(mutation: Mutation): boolean;
-    enqueueExternalIntent(mirror: string, kind: "comment" | "transition" | "close", body: string | null, now: Date): void;
     pendingExternalIntents(limit?: number): {
         id: number;
         mirror: string;
@@ -4050,24 +4036,6 @@ export declare class Store {
     liveClaimByLease(leaseId: string, now: Date): {
         leaseId: string;
     } | null;
-    reserveExecutionSlots(runner: string, count: number, now: Date): number[];
-    /** reserved → running happens in the stamp-before-spawn moment, carrying
-     * the process group so recovery can ask the OS before freeing capacity. */
-    markSlotRunning(id: number, facts: {
-        run: number;
-        incarnation?: string | null;
-        processGroup?: number | null;
-    }, now: Date): boolean;
-    /** A correction process replaces the exited provider in the same open
-     * root attempt. It may refresh only that attempt's exact occupied slot. */
-    refreshSlotProcess(id: number, facts: {
-        run: number;
-        incarnation?: string | null;
-        processGroup: number;
-    }): boolean;
-    releaseExecutionSlot(id: number, now: Date): boolean;
-    liveSlotCount(runner: string): number;
-    getExecutionSlot(id: number): ExecutionSlot | null;
     /** Minted from a POST, never a GET. Bounded per approver; expired rows
      * are swept rather than accumulating. */
     mintCeremonyNonce(spec: {
@@ -4865,22 +4833,6 @@ export declare class Store {
     listTasksScoped(repo: string | null, state: TaskState | undefined, limit: number, selectedId: string | null): (Task & {
         repo: string | null;
     })[];
-    /**
-     * The Work destination's one bounded page (workspace package 1 query):
-     * the newest tasks the viewer may see, with the viewer's already-proved
-     * admission bound BEFORE the ordering and the limit — never a wider
-     * read post-filtered in the caller. `admitted` is the resolved
-     * permitted repo set: `null` means unrestricted (every placed row),
-     * `[]` means no placed project is permitted (no placed row at all).
-     * `includeUnplaced` says whether NULL-repo rows belong to this viewer;
-     * an account restricted to projects never sees them, so they must not
-     * spend its page. Every predicate is a bound parameter; the limit is
-     * clamped here, not trusted from the caller. Read-only; the legacy
-     * `listTasksScoped` is untouched.
-     */
-    listWorkTasksAdmitted(admitted: readonly string[] | null, includeUnplaced: boolean, limit: number): (Task & {
-        repo: string | null;
-    })[];
     /** Newest first, because the question is almost always "what just happened". */
     runsFor(taskRef: number): Run[];
     /**
@@ -5306,7 +5258,6 @@ export declare class Store {
         run: number;
         kind: Incident["kind"];
     }, now: Date): number;
-    incidentForRun(run: number): Incident | null;
     /** Unresolved, task attached, oldest first. No time window: these do not age out. */
     openIncidents(repo?: string | null): (Incident & {
         taskId: string;
@@ -5513,9 +5464,6 @@ export declare class Store {
     claimMergeIntent(id: number, by: string, leaseMs: number, now: Date): {
         generation: number;
     } | null;
-    /** Renew the lease AND re-prove the generation in one CAS — the last
-     * gate before the external call; a failed re-proof aborts the attempt. */
-    renewMergeClaim(id: number, generation: number, leaseMs: number, now: Date): boolean;
     /** STATE-SPECIFIC and TERMINALLY MONOTONIC (E1): the writer names the
      * state it believes it owns, and a terminal row is never overwritten —
      * a stale claim owner cannot un-merge what the observer already settled,
@@ -5580,12 +5528,6 @@ export declare class Store {
         lastError: string | null;
         firingDeadline: string | null;
     } | null;
-    latestObservation(githubRepo: string, prNumber: number): {
-        headSha: string;
-        state: string;
-        observedAt: string;
-        generation: number;
-    } | null;
     /** Revocation is immediate: intents not yet pushed die with the grant. */
     revokePublicationGrant(repo: string, by: string, now: Date): boolean;
     publicationGrantFor(repo: string): PublicationGrant | null;
@@ -6405,7 +6347,6 @@ export declare class Store {
     recentLeadTurns(approver: string, limit?: number): LeadTurn[];
     getLeadTurn(id: number): LeadTurn | null;
     liveLeadTurnFor(approver: string): LeadTurn | null;
-    leadStepsOf(leadTurn: number): ChatTurn[];
     /** Remember a project was opened. Upsert keeps added_at; recency always moves.
      * A project added for the first time starts on Quick checks. */
     upsertProject(path: string, name: string, now: Date, admission?: {
@@ -6466,17 +6407,6 @@ export declare class Store {
         repo: string | null;
         blockerRepo: string | null;
     }[];
-    /**
-     * Active work only, running first — the Work tab's page. Terminal history
-     * belongs to Done and the build ledger, never to this list.
-     */
-    listActiveWorkScoped(repo: string | null, now: Date, limit?: number): (Task & {
-        repo: string | null;
-        approved: boolean;
-        held: boolean;
-        buildingBy: string | null;
-        strikes: number;
-    })[];
     /**
      * Completed work, one row per done task with its final accepted run and
      * any publication attached — never composed from separate task and PR
@@ -6884,6 +6814,13 @@ export declare class Store {
         before: ProjectNetwork;
         after: ProjectNetwork;
     };
+    /** Where a project's builds may write (agent-fence.ts): its saved setting, or only their workspace. */
+    projectWrites(repo: string): WritesMode;
+    /** An approver changed where a project's builds may write: saved, and in the ledger as before → after. */
+    setProjectWrites(repo: string, mode: WritesMode, by: string, now: Date): {
+        before: WritesMode;
+        after: WritesMode;
+    };
     /** Whether this installation lets an agent run where no OS confinement exists (off unless an operator said so). */
     unfencedAgentsAllowed(): boolean;
     setUnfencedAgentsAllowed(allowed: boolean, by: string, now: Date): void;

package/dist/store.js

@@ -1,3 +1,4 @@
+import { WRITES_DEFAULT } from "./writes-mode.js";
 import { PROJECT_NETWORK_DEFAULT, projectNetworkFromValue, runNetworkFromValue } from "./egress.js";
 import { isAcpProfile, isAcpProvider } from "./acp-agents.js";
 import { ACP_CONFORMANCE_VERSION, launchFromJson } from "./acp-attest.js";
@@ -67,13 +68,13 @@ import { containerEmptiness } from "./container-state.js";
 import { hasDisguisedText, hasForbiddenControls, validateNote } from "./decision.js";
 import { parseReviewContext, reviewContextCustodyProblem } from "./review-context.js";
 import { foldReview, manualReviewOnly } from "./proof.js";
-import { approvalOf, digestOf, canonicalProfileJson, chainFromJson, profileDigestOf, profileFromJson, scopeAuthorityOf, routeParityProblem, parseAcceptanceCriteria, exactAcceptance, exactStringList, exactSafeIntegerOrNull, exactKeys, GEMINI_LIMITS } from "./scope.js";
+import { approvalOf, digestOf, canonicalProfileJson, chainFromJson, profileDigestOf, profileFromJson, scopeAuthorityOf, routeParityProblem, parseAcceptanceCriteria, exactAcceptance, exactStringList, exactSafeIntegerOrNull } from "./scope.js";
 import { resolveScopeProfile, resolveRouteCandidates, exactPinOf, routeOfTask, agentChoicesFor } from "./agentconfig.js";
-import { canonicalOverridesJson, canonicalRouteJson, exactModelId, isRiskLevel, isTaskSize, headroomFrom, makesNoPlan, legOf, overridesFromJson, phaseOfRole, recommendRoute, routeDigestOf, routeFromJson, routeProblems, routeStampProblem, ROUTE_ERA, PROVIDER_ID_LIST, } from "./phase-routing.js";
+import { canonicalOverridesJson, canonicalRouteJson, isRiskLevel, isTaskSize, headroomFrom, makesNoPlan, legOf, overridesFromJson, phaseOfRole, recommendRoute, routeDigestOf, routeFromJson, routeProblems, routeStampProblem, ROUTE_ERA, PROVIDER_ID_LIST, } from "./phase-routing.js";
 import { readAuthModeStrict } from "./keys.js";
 import { modeDigestOf, modeTermsFromJson } from "./modes.js";
 import { readVerifiedArtifact } from "./evidence.js";
-import { isProviderId } from "./provider.js";
+import {} from "./provider.js";
 import { authenticate as runnerAuthenticate } from "./runner.js";
 import { stampNewProjectLevel } from "./check-levels.js";
 import { parseCheckProgressSnapshot } from "./check-progress.js";
@@ -715,7 +716,9 @@ const REGISTERED_AT_FILING = "again, as it was filed";
 // v130 adds, and changes no saved row: what a project's builds may reach on the network (project_network; egress.ts,
 // docs/plans/agent-baseline-hardening.md arc 1) and whether this installation lets an agent run with no OS confinement
 // (confinement_setting, one row; off unless an instance operator turns it on).
-export const SCHEMA_VERSION = 130;
+// v131 adds, and changes no saved row: where a project's builds may write (project_writes; agent-fence.ts, docs/plans/
+// agent-baseline-hardening.md arc 2) — only their workspace unless an approver chose anywhere.
+export const SCHEMA_VERSION = 131;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export const V118_MERGED_TABLES = Object.freeze({ api_token: "person", coordinator_credential: "coordinator", lead_credential: "lead" });
 /** The foreign keys that named a merged table, exactly as their DDL wrote them; each names `credential(id)` instead. */
@@ -848,7 +851,7 @@ const V115_DROPPED_REFERENCES = /\s+REFERENCES (?:contestant|contest|tournament_
  * unchanged), and adds the nullable column in V125_ADDED_COLUMNS, checked the same way. v126 only adds a new table
  * (task_source) and the columns in V126_ADDED_COLUMNS (null or 0), checked the same way.
  */
-export const UPDATE_SAFE_MIGRATIONS = Object.freeze([108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130]);
+export const UPDATE_SAFE_MIGRATIONS = Object.freeze([108, 109, 110, 111, 112, 113, 114, 115, 116, 117, 118, 119, 120, 121, 122, 123, 124, 125, 126, 127, 128, 129, 130, 131]);
 /** v119: the columns it adds, by table, with the value every row saved before it reads (toolroll-update's HISTORY_RULES). */
 export const V119_ADDED_COLUMNS = Object.freeze({
     task_ref: { planning_generation: { definition: "INTEGER NOT NULL DEFAULT 0", saved: "0" } },
@@ -976,6 +979,15 @@ CREATE TABLE IF NOT EXISTS confinement_setting (
 );
 INSERT OR IGNORE INTO confinement_setting (id, unfenced_allowed) VALUES (1, 0);
 `;
+/** v131: where a project's builds may write (an approver's setting, agent-fence.ts WritesMode). */
+export const PROJECT_WRITES_SCHEMA = `
+CREATE TABLE IF NOT EXISTS project_writes (
+  repo        TEXT PRIMARY KEY,
+  mode        TEXT NOT NULL CHECK (mode IN ('workspace', 'anywhere')),
+  updated_at  TEXT NOT NULL,
+  updated_by  TEXT NOT NULL
+);
+`;
 /** v129: a finished run's How it ran, derived from its own records on first view (display only: never a verdict). Its
  * parser version says when to derive again; `steps` says how complete the step detail was, and why not. */
 export const RUN_EFFICIENCY_SCHEMA = `
@@ -1165,8 +1177,6 @@ CREATE INDEX IF NOT EXISTS sso_identity_account ON sso_identity (account);
  */
 /** The backend name the built-in store registers itself under. */
 export const BUILT_IN = "built-in";
-/** States from which no further work is dispatched. */
-export const TERMINAL_STATES = ["done", "failed", "cancelled"];
 export const LEAD_THREAD = { kind: "lead" };
 /** A lead_message row as a LeadMessage. */
 function readLeadMessageRow(row) {
@@ -1286,10 +1296,6 @@ function readFlowReceipt(row) {
     const optional = (key) => row[key] === null || row[key] === undefined ? null : String(row[key]);
     return { state, card, note: optional("note"), at: String(row["at"]), acceptedAt: optional("accepted_at"), itemJson: optional("item_json") };
 }
-/** `kind:name`, the unambiguous way a requirement names a capability. */
-export function capabilityKey(capability) {
-    return `${capability.kind}:${capability.name}`;
-}
 /** Parse `kind:name`; a bare name is refused rather than guessed at. */
 export function parseCapabilityKey(key) {
     const split = key.indexOf(":");
@@ -3915,6 +3921,8 @@ function initializeStore(db, file) {
     db.exec(RUN_EFFICIENCY_SCHEMA);
     // v130: a project's network and whether an agent may run unconfined (new tables only).
     db.exec(CONFINEMENT_SCHEMA);
+    // v131: where a project's builds may write (a new table only).
+    db.exec(PROJECT_WRITES_SCHEMA);
     // v123: a flow that runs on its own (flow-unattended.ts): its grants and daily runs (new tables), and which authority
     // armed a plan's unchanged-plan approval (plan_authorization.basis, V123_ADDED_COLUMNS: saved rows read the mode).
     db.exec(FLOW_UNATTENDED_SCHEMA);
@@ -6399,11 +6407,6 @@ export class Store {
             .get(mutation.idempotencyKey);
         return row !== undefined;
     }
-    enqueueExternalIntent(mirror, kind, body, now) {
-        this.db
-            .prepare("INSERT INTO external_intent (mirror, kind, body, created_at) VALUES (?, ?, ?, ?)")
-            .run(mirror, kind, body, now.toISOString());
-    }
     pendingExternalIntents(limit = 50) {
         return this.db
             .prepare("SELECT id, mirror, kind, body, attempts FROM external_intent WHERE state = 'pending' ORDER BY id LIMIT ?")
@@ -11409,54 +11412,6 @@ export class Store {
         return row === undefined ? null : { leaseId: String(row["lease_id"]) };
     }
     // ---- worker-process slots (v14, finding 26) ----------------------------
-    reserveExecutionSlots(runner, count, now) {
-        return this.transact(() => {
-            const ids = [];
-            for (let index = 0; index < count; index++) {
-                const inserted = this.db
-                    .prepare("INSERT INTO execution_slot (runner, reserved_at) VALUES (?, ?)")
-                    .run(runner, now.toISOString());
-                ids.push(Number(inserted.lastInsertRowid));
-            }
-            return ids;
-        });
-    }
-    /** reserved → running happens in the stamp-before-spawn moment, carrying
-     * the process group so recovery can ask the OS before freeing capacity. */
-    markSlotRunning(id, facts, now) {
-        const changed = this.db
-            .prepare(`UPDATE execution_slot SET state = 'running', run = ?, incarnation = ?, process_group = ?, running_at = ?
-          WHERE id = ? AND state = 'reserved'`)
-            .run(facts.run, facts.incarnation ?? null, facts.processGroup ?? null, now.toISOString(), id);
-        return Number(changed.changes) === 1;
-    }
-    /** A correction process replaces the exited provider in the same open
-     * root attempt. It may refresh only that attempt's exact occupied slot. */
-    refreshSlotProcess(id, facts) {
-        if (!Number.isInteger(facts.processGroup) || facts.processGroup <= 0)
-            return false;
-        const changed = this.db.prepare(`UPDATE execution_slot SET process_group = ?
-      WHERE id = ? AND state = 'running' AND run = ? AND incarnation IS ?
-        AND EXISTS (SELECT 1 FROM run WHERE id = ? AND outcome IS NULL)`)
-            .run(facts.processGroup, id, facts.run, facts.incarnation ?? null, facts.run);
-        return Number(changed.changes) === 1;
-    }
-    releaseExecutionSlot(id, now) {
-        const changed = this.db
-            .prepare("UPDATE execution_slot SET state = 'released', released_at = ? WHERE id = ? AND state IN ('reserved','running')")
-            .run(now.toISOString(), id);
-        return Number(changed.changes) === 1;
-    }
-    liveSlotCount(runner) {
-        const row = this.db
-            .prepare("SELECT COUNT(*) AS n FROM execution_slot WHERE runner = ? AND state IN ('reserved','running')")
-            .get(runner);
-        return Number(row?.["n"] ?? 0);
-    }
-    getExecutionSlot(id) {
-        const row = this.db.prepare("SELECT * FROM execution_slot WHERE id = ?").get(id);
-        return row === undefined ? null : readExecutionSlot(row);
-    }
     // ---- durable ceremony nonces (v14, findings 21/30) ---------------------
     /** Minted from a POST, never a GET. Bounded per approver; expired rows
      * are swept rather than accumulating. */
@@ -13514,40 +13469,6 @@ export class Store {
             repo: row["task_repo"] === null ? null : String(row["task_repo"]),
         }));
     }
-    /**
-     * The Work destination's one bounded page (workspace package 1 query):
-     * the newest tasks the viewer may see, with the viewer's already-proved
-     * admission bound BEFORE the ordering and the limit — never a wider
-     * read post-filtered in the caller. `admitted` is the resolved
-     * permitted repo set: `null` means unrestricted (every placed row),
-     * `[]` means no placed project is permitted (no placed row at all).
-     * `includeUnplaced` says whether NULL-repo rows belong to this viewer;
-     * an account restricted to projects never sees them, so they must not
-     * spend its page. Every predicate is a bound parameter; the limit is
-     * clamped here, not trusted from the caller. Read-only; the legacy
-     * `listTasksScoped` is untouched.
-     */
-    listWorkTasksAdmitted(admitted, includeUnplaced, limit) {
-        const page = Math.max(1, Math.min(Math.floor(limit), 500));
-        // SQLite accepts an empty IN list, so an empty admission binds as
-        // "no placed row" without any special SQL shape.
-        const rows = this.db
-            .prepare(`SELECT task.*, task_ref.repo AS task_repo FROM task
-         JOIN task_ref ON task_ref.backend = ? AND task_ref.external_id = task.id
-         WHERE ((task_ref.repo IS NULL AND ? = 1)
-             OR (task_ref.repo IS NOT NULL AND (? = 1 OR task_ref.repo IN (${(admitted ?? []).map(() => "?").join(",")}))))
-         ORDER BY task.created_at DESC, task.id DESC LIMIT ?`)
-            .all(BUILT_IN, includeUnplaced ? 1 : 0, admitted === null ? 1 : 0, ...(admitted ?? []), page);
-        return rows.map(row => ({
-            id: String(row["id"]),
-            title: String(row["title"]),
-            state: String(row["state"]),
-            createdAt: String(row["created_at"]),
-            updatedAt: String(row["updated_at"]),
-            priority: row["priority"] === null || row["priority"] === undefined ? 0 : Number(row["priority"]),
-            repo: row["task_repo"] === null ? null : String(row["task_repo"]),
-        }));
-    }
     /** Newest first, because the question is almost always "what just happened". */
     runsFor(taskRef) {
         return this.db
@@ -14493,10 +14414,6 @@ export class Store {
             .run(incident.run, incident.kind, now.toISOString());
         return Number(inserted.lastInsertRowid);
     }
-    incidentForRun(run) {
-        const row = this.db.prepare("SELECT * FROM incident WHERE run = ?").get(run);
-        return row === undefined ? null : readIncident(row);
-    }
     /** Unresolved, task attached, oldest first. No time window: these do not age out. */
     openIncidents(repo = null) {
         return this.db
@@ -14858,14 +14775,6 @@ export class Store {
             return Number(changes) === 1 ? { generation } : null;
         });
     }
-    /** Renew the lease AND re-prove the generation in one CAS — the last
-     * gate before the external call; a failed re-proof aborts the attempt. */
-    renewMergeClaim(id, generation, leaseMs, now) {
-        const { changes } = this.db
-            .prepare("UPDATE merge_intent SET claimed_until = ? WHERE id = ? AND state = 'claimed' AND generation = ?")
-            .run(new Date(now.getTime() + leaseMs).toISOString(), id, generation);
-        return Number(changes) === 1;
-    }
     /** STATE-SPECIFIC and TERMINALLY MONOTONIC (E1): the writer names the
      * state it believes it owns, and a terminal row is never overwritten —
      * a stale claim owner cannot un-merge what the observer already settled,
@@ -15015,14 +14924,6 @@ export class Store {
                 firingDeadline: row["firing_deadline"] === null ? null : String(row["firing_deadline"]),
             };
     }
-    latestObservation(githubRepo, prNumber) {
-        const row = this.db
-            .prepare("SELECT head_sha, state, observed_at, generation FROM ci_observation WHERE github_repo = ? AND pr_number = ?")
-            .get(githubRepo, prNumber);
-        return row === undefined || String(row["observed_at"]) === ""
-            ? null
-            : { headSha: String(row["head_sha"]), state: String(row["state"]), observedAt: String(row["observed_at"]), generation: Number(row["generation"]) };
-    }
     /** Revocation is immediate: intents not yet pushed die with the grant. */
     revokePublicationGrant(repo, by, now) {
         const { changes } = this.db
@@ -16621,9 +16522,6 @@ export class Store {
         const row = this.db.prepare("SELECT * FROM mate_turn WHERE approver = ? AND state IN ('queued','running') ORDER BY id DESC LIMIT 1").get(approver);
         return row === undefined ? null : readLeadTurn(row);
     }
-    leadStepsOf(leadTurn) {
-        return this.db.prepare("SELECT * FROM chat_turn WHERE mate_turn = ? ORDER BY id ASC").all(leadTurn).map(readChatTurn);
-    }
     // ---- projects ------------------------------------------------------------
     /** Remember a project was opened. Upsert keeps added_at; recency always moves.
      * A project added for the first time starts on Quick checks. */
@@ -16794,50 +16692,6 @@ export class Store {
             blockerRepo: row["blocker_repo"] === null || row["blocker_repo"] === undefined ? null : String(row["blocker_repo"]),
         }));
     }
-    /**
-     * Active work only, running first — the Work tab's page. Terminal history
-     * belongs to Done and the build ledger, never to this list.
-     */
-    listActiveWorkScoped(repo, now, limit = 50) {
-        const page = Math.max(1, Math.min(Math.floor(limit), 100));
-        return this.db
-            .prepare(`SELECT task.*, task_ref.repo AS task_repo, task_ref.strikes AS ref_strikes,
-           EXISTS (
-             SELECT 1 FROM task_scope
-             WHERE task_scope.task_id = task.id AND task_scope.approved_digest = task_scope.digest
-               AND task_scope.approved_at IS NOT NULL
-           ) AS approved,
-           EXISTS (
-             SELECT 1 FROM hold
-             WHERE hold.task_ref = task_ref.id AND (hold.until IS NULL OR hold.until > ?)
-           ) AS held,
-           (SELECT claim.runner FROM claim
-             WHERE claim.task_ref = task_ref.id AND claim.released_at IS NULL AND claim.expires_at > ?
-               AND claim.lease_generation = (
-                 SELECT MAX(newest.lease_generation) FROM claim AS newest
-                 WHERE newest.task_ref = claim.task_ref)
-             LIMIT 1) AS building_by
-         FROM task
-         JOIN task_ref ON task_ref.backend = ? AND task_ref.external_id = task.id
-         WHERE task.state IN ('running','queued')
-           AND (? IS NULL OR task_ref.repo IS NULL OR task_ref.repo = ?)
-         ORDER BY CASE task.state WHEN 'running' THEN 0 ELSE 1 END, task.updated_at DESC, task.id DESC
-         LIMIT ?`)
-            .all(now.toISOString(), now.toISOString(), BUILT_IN, repo, repo, page)
-            .map(row => ({
-            id: String(row["id"]),
-            title: String(row["title"]),
-            state: String(row["state"]),
-            createdAt: String(row["created_at"]),
-            updatedAt: String(row["updated_at"]),
-            priority: row["priority"] === null || row["priority"] === undefined ? 0 : Number(row["priority"]),
-            repo: row["task_repo"] === null ? null : String(row["task_repo"]),
-            approved: Number(row["approved"]) === 1,
-            held: Number(row["held"]) === 1,
-            buildingBy: row["building_by"] === null ? null : String(row["building_by"]),
-            strikes: Number(row["ref_strikes"]),
-        }));
-    }
     /**
      * Completed work, one row per done task with its final accepted run and
      * any publication attached — never composed from separate task and PR
@@ -18246,6 +18100,23 @@ export class Store {
             return { before, after };
         });
     }
+    /** Where a project's builds may write (agent-fence.ts): its saved setting, or only their workspace. */
+    projectWrites(repo) {
+        const mode = this.db.prepare("SELECT mode FROM project_writes WHERE repo = ?").get(repo)?.["mode"];
+        // A damaged row reads as the narrower setting, never the wider one.
+        return mode === "anywhere" ? "anywhere" : WRITES_DEFAULT;
+    }
+    /** An approver changed where a project's builds may write: saved, and in the ledger as before → after. */
+    setProjectWrites(repo, mode, by, now) {
+        return this.transact(() => {
+            const before = this.projectWrites(repo);
+            this.db.prepare(`INSERT INTO project_writes (repo, mode, updated_at, updated_by) VALUES (?, ?, ?, ?)
+        ON CONFLICT (repo) DO UPDATE SET mode = excluded.mode, updated_at = excluded.updated_at, updated_by = excluded.updated_by`).run(repo, mode, now.toISOString(), by);
+            const after = this.projectWrites(repo);
+            this.recordPolicy(by, repo, "build writes", before, after, now);
+            return { before, after };
+        });
+    }
     /** Whether this installation lets an agent run where no OS confinement exists (off unless an operator said so). */
     unfencedAgentsAllowed() {
         return Number(this.db.prepare("SELECT unfenced_allowed FROM confinement_setting WHERE id = 1").get()?.["unfenced_allowed"] ?? 0) === 1;
@@ -19513,20 +19384,6 @@ function readTaskRef(row) {
         origin: String(row["origin"]) === "ours" ? "ours" : "theirs",
     };
 }
-function readExecutionSlot(row) {
-    const maybe = (key) => (row[key] === null || row[key] === undefined ? null : String(row[key]));
-    return {
-        id: Number(row["id"]),
-        runner: String(row["runner"]),
-        state: String(row["state"]),
-        run: row["run"] === null ? null : Number(row["run"]),
-        incarnation: maybe("incarnation"),
-        processGroup: row["process_group"] === null ? null : Number(row["process_group"]),
-        reservedAt: String(row["reserved_at"]),
-        runningAt: maybe("running_at"),
-        releasedAt: maybe("released_at"),
-    };
-}
 function readChatTurn(row) {
     const maybe = (key) => (row[key] === null || row[key] === undefined ? null : String(row[key]));
     const maybeN = (key) => (row[key] === null || row[key] === undefined ? null : Number(row[key]));

package/dist/structured-output.d.ts

@@ -20,7 +20,6 @@ export declare const REVIEW_OUTPUT_LIMITS: {
     readonly path: 300;
 };
 export declare const REVIEW_NOTE_CODE_POINTS: number;
-export declare const REVIEW_NOTE_GUIDANCE: string;
 export type StructuredNormalization = {
     text: string;
     changed: boolean;

package/dist/structured-output.js

@@ -16,7 +16,6 @@ export const STRUCTURED_REPAIR_TIMEOUT_MS = 5 * 60_000;
  * notes concise without imposing a second, stricter transport contract. */
 export const REVIEW_OUTPUT_LIMITS = { comments: 40, criteria: 12, note: TEXT_LIMITS.reviewNote, path: TEXT_LIMITS.reviewPath };
 export const REVIEW_NOTE_CODE_POINTS = Math.floor(REVIEW_OUTPUT_LIMITS.note / 2);
-export const REVIEW_NOTE_GUIDANCE = `Keep each comment and criterion note to one concise finding and its evidence. Aim for ${REVIEW_NOTE_CODE_POINTS} characters or fewer; the hard limit is ${REVIEW_OUTPUT_LIMITS.note} UTF-16 units. Preserve the conclusion and any needed provenance; omit repeated rubric text.`;
 /** Strip only unambiguous, whole-payload wrappers. */
 export function normalizeStructuredJson(raw) {
     let text = raw;

package/dist/subagent-work.d.ts

@@ -72,5 +72,3 @@ export declare function answerSubagentQuestion(store: Store, id: number, answer:
     ok: false;
     said: string;
 };
-/** A card's link, for messages about it. */
-export declare const subagentCardHref: (flow: number, card: number) => string;

package/dist/subagent-work.js

@@ -304,5 +304,3 @@ export function answerSubagentQuestion(store, id, answer, now) {
         return { ok: true, said: question.toolCall === null ? "Answered. It picks the card up again now." : choice?.id === APPROVE ? "Approved. The call is made now, exactly as shown." : "It won't make that call. It picks the card up again now." };
     });
 }
-/** A card's link, for messages about it. */
-export const subagentCardHref = (flow, card) => flowCardHref(flow, card);

package/dist/subagents.d.ts

@@ -1,4 +1,4 @@
-import { run, type ExecResult } from "./exec.js";
+import { type CommandRunner } from "./claude-print.js";
 import type { ContractResult } from "./contracts/contract.js";
 import { type TurnAnswer } from "./contracts/subagent-turn.js";
 import { type Overrun } from "./text-limits.js";
@@ -13,7 +13,6 @@ export type Soul = {
 };
 /** A handle from a name: "Maya" → "maya". */
 export declare const handleOf: (name: string) => string;
-export declare const isHandle: (value: unknown) => value is string;
 /** A soul file read: its name and role (front matter) and its sections. */
 export declare function parseSoul(text: string): {
     ok: true;
@@ -139,7 +138,6 @@ export type TurnReply = ({
 /** Runs one turn; injectable so tests never spend a subscription turn. */
 export type TurnRunner = (request: TurnRequest) => Promise<TurnReply>;
 export declare const TURN_TIMEOUT_MS = 180000;
-type CommandRunner = (file: string, args: readonly string[], options: Parameters<typeof run>[2]) => Promise<ExecResult>;
 /** The production runner: Claude through this computer's sign-in, answering in the turn schema (TURN_MODEL_SCHEMA), with no tools, no MCP servers and no repository. */
 export declare function claudeTurnRunner(runner?: CommandRunner): TurnRunner;
 /** How a subagent is named to people: "Maya · Support". */