toolroll 0.9.67 → 0.9.69

package/dist/server/tasks.js

@@ -11,7 +11,7 @@ import { handlersOf } from './handler-registry.js';
 import { closedQuestionWords } from "../decision.js";
 import { DEPRECATED_PAGE } from "../deprecations.js";
 /** tasks handlers, moved without changing their route bodies. */
-import { html, htmlString, joinHtml, postForm, textHtml } from "../html.js";
+import { html, htmlString, joinHtml, textHtml } from "../html.js";
 import { createHash, randomBytes, randomUUID } from "node:crypto";
 import { lstatSync, realpathSync } from "node:fs";
 import {} from "node:http";
@@ -40,7 +40,7 @@ import { isTaskSize, PHASES as ROUTE_PHASES } from "../phase-routing.js";
 import { applyModeToNewFiling, authorizePlanUnderMode } from "../plan-auto.js";
 import { milestonesOf, parseExecutionPlanDocument } from "../plan.js";
 import { levelOfProfile } from "../policy.js";
-import { authorizedProject, canonicalProject, projectName, rowVisible } from "../project.js";
+import { authorizedProject, canonicalProject, projectName, } from "../project.js";
 import { fileTaskProposal } from "../proposal.js";
 import { isProviderId, PROVIDER_IDS, validateSpec } from "../provider.js";
 import { completeAndOpenPullRequest, mergeAsPerson } from '../pull-request-flow.js';
@@ -69,7 +69,7 @@ import { ACCEPT_ANYWAY_NEEDS_REASON, editorFileHref, proofBundleView, rankReview
 import { approvalFormDigest, approveRefusalWords, checkProgressHtml, consentDoorOf, decisionPage, nonceHashOf, PermissionsWouldChange, requirementsFromEditor, resumeDigestOf, taskOf } from "./render-tasks.js";
 import {} from "./session.js";
 export function createTasksHandlers(runtime) {
-    const { store, peekSay, peekCache, PEEK_CACHE_TTL_MS, peekInFlight, PEEK_GLOBAL_INFLIGHT, peekBySession, PEEK_SESSION_INFLIGHT, clock, peekName, PEEK_FRAGMENT_BYTES, peekEvict, evidenceRoot, sendScreen, chromeFor, visible, consumeApprovalNonce, authenticateApprover, options, mintApprovalNonce, taskScreen, unscopedMode, admissionList, planViewOf, revisionViewOf, runIsTaskResult, leadPrincipal, familyOf, armTaskResume, runIsLive, revisionLedgerOf, resultDetailOf, reviewFactsFor, taskRepoOf, runVisible, restricted, codingActorAllowed, codingProjectAllowed, managedRepos, routeViewOf, workAccess, firstRunStepsNow, revisionDocOf, failureOf, dockedConversation, planContractViewOf, familiesInView, explainAttempt, taskChatFocus, familyTasksInView, taskRooms, identify, liveCeiling, projectOf, ceiling, bustBadge, revisionDestination } = runtime;
+    const { store, peekSay, peekCache, PEEK_CACHE_TTL_MS, peekInFlight, PEEK_GLOBAL_INFLIGHT, peekBySession, PEEK_SESSION_INFLIGHT, clock, peekName, PEEK_FRAGMENT_BYTES, peekEvict, evidenceRoot, sendScreen, chromeFor, visible, consumeApprovalNonce, authenticateApprover, options, mintApprovalNonce, taskScreen, unscopedMode, admissionList, planViewOf, revisionViewOf, runIsTaskResult, leadPrincipal, familyOf, armTaskResume, runIsLive, revisionLedgerOf, resultDetailOf, reviewFactsFor, taskRepoOf, runVisible, restricted, codingActorAllowed, codingProjectAllowed, managedRepos, routeViewOf, workAccess, firstRunStepsNow, revisionDocOf, failureOf, dockedConversation, planContractViewOf, familiesInView, explainAttempt, taskChatFocus, familyTasksInView, liveCeiling, projectOf, ceiling, bustBadge, revisionDestination } = runtime;
     /** A row admitted the address but its path parameter does not parse: the console's unknown page. */
     function noPage(who, response) {
         return refuse(response, who, 404, "There's no page at this address.", "/chat");
@@ -2846,6 +2846,8 @@ export function createTasksHandlers(runtime) {
             } })(),
             // What its network was and what its proxy saw (egress.ts), display only.
             network: store.runNetwork(run.id),
+            // How far its checks reached (check-access.ts), display only.
+            checkAccess: store.runCheckAccess(run.id),
             reviewRetry: store.reviewRetryStateOf(run.id),
             review: reviewFactsFor(run.id),
             notes: store.notesForRun(run.id),

package/dist/setup-guide.d.ts

@@ -15,10 +15,10 @@ export declare function detectPreparation(repo: string): {
 } | null;
 /** Browser installation may write only this known file inside its project. */
 export declare function previewProjectInstructions(repo: string): {
-    content?: never;
     ok: false;
     message: string;
     plan?: never;
+    content?: never;
     fingerprint?: never;
     installed?: never;
 } | {
@@ -30,10 +30,10 @@ export declare function previewProjectInstructions(repo: string): {
     installed: boolean;
 };
 export declare function addProjectInstructions(repo: string, fingerprint: string): {
-    content?: never;
     ok: false;
     message: string;
     plan?: never;
+    content?: never;
     fingerprint?: never;
     installed?: never;
 } | import("./skills.js").InstallResult;

package/dist/skills.d.ts

@@ -33,12 +33,6 @@ export declare const CONTEXT_END = "<!-- standing-orders:end -->";
 export declare function skillContent(): string;
 /** The AGENTS.md block, marker-fenced so reinstalls replace only themselves. */
 export declare function contextBlock(): string;
-/**
- * Whether a repository has the Toolroll skill: a SKILL.md in the current
- * folder, or in the one installs before the rename used. The setup guide
- * and the console's first-run checklist both ask this, so they agree.
- */
-export declare function projectSkillInstalled(repo: string): boolean;
 export type InstallPlan = {
     skillPath: string;
     skillAction: "create" | "replace" | "refuse-foreign";

package/dist/skills.js

@@ -72,14 +72,6 @@ in the plane: read \`skills get knowledge\`, search it with
 merge anything yourself.
 ${CONTEXT_END}`;
 }
-/**
- * Whether a repository has the Toolroll skill: a SKILL.md in the current
- * folder, or in the one installs before the rename used. The setup guide
- * and the console's first-run checklist both ask this, so they agree.
- */
-export function projectSkillInstalled(repo) {
-    return [SKILL_DIR, LEGACY_SKILL_DIR].some(dir => existsSync(join(repo, dir, SKILL_FILE)));
-}
 /** What install would do, computed without writing anything. */
 export function planInstall(repo, writeContext) {
     const skillPath = join(repo, SKILL_DIR, SKILL_FILE);

package/dist/slack-chat.d.ts

@@ -1,4 +1,4 @@
-import { ChatState, type ChatBinding, type ChatContent, type ChatEvent } from "./chat-delivery-state.js";
+import { ChatState } from "./chat-delivery-state.js";
 import { uploadSlackBytes, type SlackApi, type SlackIdentity } from "./slack-api.js";
 import { type Store } from "./store.js";
 import type { SubscriptionLeadRunner } from "./subscription-chat.js";
@@ -19,12 +19,6 @@ export type SlackChatOptions = {
 /** Synchronous receipt before ACK. Never stores response_url, raw tokens, or a pairing code. */
 export declare function receiveSlack(state: ChatState, identity: SlackIdentity, type: string, raw: unknown, now: Date): boolean;
 export declare const processSlackEvent: (options: SlackChatOptions) => Promise<boolean>;
-export declare const applySlackAction: (options: SlackChatOptions, event: ChatEvent, binding: ChatBinding, repos: readonly string[]) => {
-    merge: import("./chat-decide.js").ChatMerge;
-    part: number;
-    shown: string;
-    content: ChatContent;
-} | null;
 export declare const planSlackNotifications: (options: SlackChatOptions) => Promise<void>;
 export declare const planSlackRooms: (options: SlackChatOptions) => Promise<void>;
 export declare function slackBlocks(text: string, buttons?: Record<string, unknown>[]): Record<string, unknown>[];

package/dist/slack-chat.js

@@ -2,9 +2,8 @@ import { chatFlowButtons } from "./chat-flow.js";
 import { refuseResultShots, resultShotsPruned, shotWaitsUntil } from "./result-shots.js";
 import { chatQuestionButtons } from "./subagent-question.js";
 import { chatAskButtons } from "./chat-ask.js";
-import { channelInbox } from "./chat-inbox.js";
-import { roomCommand } from "./chat-rooms.js";
-import { processChatEvent, applyChatAction, planChatNotifications, channelAccess, planRoomMessages, heldForWatch, } from "./chat-delivery.js";
+import { admitChatEvent } from "./chat-admission.js";
+import { processChatEvent, planChatNotifications, channelAccess, planRoomMessages, heldForWatch, } from "./chat-delivery.js";
 /** Slack is a transport for the same saved assistant and confirmation doors. */
 import { proposalPreview, proposalLink, proposalOutcomeText, armedCardText, armedYesLabel, } from "./chat-channel.js";
 import { LEAD_MESSAGE_MAX_CHARS } from "./lead.js";
@@ -100,21 +99,10 @@ export function receiveSlack(state, identity, type, raw, now) {
     // A channel or private group is a room: accepted only while it follows a
     // conversation, or for the `/team` words that make it follow one.
     const isRoom = !slackId(channel, "D");
-    const words = "text" in payload ? payload.text ?? "" : "";
-    // v89: a channel that feeds a flow takes anyone's message (as a card, with no say over anything); "flow 12" connects one.
-    const inbox = isRoom && kind === "message" ? channelInbox(state.store, "slack", identity.installation, String(channel), words) : { watched: false, command: false };
-    const roomish = isRoom && (state.room(identity.installation, String(channel)) !== null || (kind === "message" && roomCommand(words) !== null) || inbox.watched || inbox.command);
-    if (isRoom && !roomish)
-        return false;
-    const binding = state.bindingFor(identity.installation, member);
-    const open = inbox.watched && !inbox.command;
-    if (kind !== "pair" && !open &&
-        (!binding ||
-            !state.live(binding) ||
-            (binding.channel !== channel && !roomish)))
-        return false;
-    if (kind === "pair" && (binding || isRoom))
+    const admitted = admitChatEvent(state, "slack", identity.installation, { kind, member, channel, isRoom, payload });
+    if (admitted === null)
         return false;
+    const { binding } = admitted;
     return state.enqueue({
         id,
         installation: identity.installation,
@@ -139,7 +127,6 @@ const delivery = (options) => ({
     }),
 });
 export const processSlackEvent = (options) => processChatEvent(delivery(options));
-export const applySlackAction = (options, event, binding, repos) => applyChatAction(delivery(options), event, binding, repos);
 export const planSlackNotifications = (options) => planChatNotifications(delivery(options));
 export const planSlackRooms = (options) => planRoomMessages(delivery(options));
 const access = (options, binding, ceiling) => channelAccess(delivery(options), binding, ceiling);

package/dist/slack-settings.d.ts

@@ -1,8 +1,4 @@
 import type { Store } from "./store.js";
 import { type Html } from "./html.js";
-export declare function slackSettingsHtml(store: Store, dir: string, options?: {
-    code?: string;
-    problem?: string;
-    now?: Date;
-    who?: string;
-}): Html;
+import { type ChatSettingsOptions } from "./chat-settings-page.js";
+export declare function slackSettingsHtml(store: Store, dir: string, options?: ChatSettingsOptions): Html;

package/dist/slack-settings.js

@@ -1,41 +1,13 @@
-import { loadPrimary } from "./webhooks.js";
-import { html, postForm } from "./html.js";
+import { html } from "./html.js";
 import { loadSlackCredentials } from "./slack-api.js";
-import { ChatState } from "./chat-delivery-state.js";
+import { chatSettingsHtml } from "./chat-settings-page.js";
 export function slackSettingsHtml(store, dir, options = {}) {
-    const credentials = loadSlackCredentials(dir), state = new ChatState(store, "slack"), bindings = credentials ? state.bindings(credentials.installation).filter(one => state.live(one)) : [], binding = options.who === undefined ? null : bindings.find(one => one.approver === options.who) ?? null, others = bindings.length - (binding === null ? 0 : 1);
-    const runtime = credentials ? state.runtime(credentials.installation) : null;
-    const now = options.now ?? new Date(), live = runtime &&
-        runtime.leaseUntil !== null &&
-        runtime.leaseUntil > now.toISOString() &&
-        runtime.connected;
-    const password = html `<label>Your Toolroll password<input style="min-height:44px" type="password" name="password" autocomplete="current-password" required></label>`;
-    const post = (action, content) => postForm(`/settings/slack/${action}`, content, { attrs: { class: "card" } });
-    const parts = [];
-    if (!credentials) {
-        parts.push(html `<p>Manage projects and review results in a private Slack conversation.</p>`, html `<details open><summary>Create your Slack app</summary><ol><li>Download the <a href="/settings/slack/manifest">app manifest</a>, then <a href="https://api.slack.com/apps" target="_blank" rel="noopener noreferrer">create an app</a> in your workspace using that manifest.</li><li>Under Basic Information, create an app-level token with <code>connections:write</code>.</li><li>Under OAuth &amp; Permissions, install the app and copy its bot token.</li></ol></details>`, post("connect", html `<label>App token<input style="min-height:44px" type="password" name="app-token" autocomplete="off" placeholder="xapp-…" required></label><label>Bot token<input style="min-height:44px" type="password" name="bot-token" autocomplete="off" placeholder="xoxb-…" required></label>${password}<p class="meta">Tokens stay on this installation. Next, pair your own Slack account.</p><button type="submit">Connect Slack</button>`));
-    }
-    else {
-        parts.push(html `<p><strong>${credentials.workspace}</strong> · ${live ? "Connected" : "Waiting for connection"}</p>`);
-        if (runtime?.problem)
-            parts.push(html `<p role="status">${String(runtime.problem)}</p>`);
-        if (!live && !runtime?.problem)
-            parts.push(html `<p>Keep the Toolroll worker running to receive Slack messages.</p>`);
-        if (options.code) {
-            parts.push(html `<h2>Pair your account</h2><p>Send this in a direct message to your Toolroll Slack app. It expires in 10 minutes.</p>`, html `<label>Pairing message<input type="text" readonly value="pair ${options.code}" autocomplete="off" style="width:100%;max-width:100%;font-size:14px;min-height:44px"></label>`, html `<a class="button-link" style="min-height:44px;white-space:nowrap" href="/settings/slack">Check connection</a>`);
-        }
-        else if (binding && state.live(binding)) {
-            const { pending, dropped: failed } = state.partCounts(binding.id);
-            parts.push(html `<p>Your Slack account is paired.${others ? ` ${others} teammate${others === 1 ? " is" : "s are"} paired too.` : ""}${pending ? ` ${pending} replies waiting to send.` : ""}${failed ? ` ${failed} replies could not be delivered. Open the saved chat to recover them.` : ""}</p>`, html `<p>Try “What needs my attention?” or “Show the evidence for the latest result.”</p>`, html `<p><a href="/chat">Open saved chat</a></p>`, loadPrimary(process.env, dir) === "slack"
-                ? html `<p>Task updates are sent here.</p>`
-                : post("alerts", html `<button type="submit">Send task updates here</button>`));
-        }
-        else {
-            parts.push(post("pair", html `<h2>Pair your account</h2><p>Your paired Slack account can read your connected projects and confirm proposed changes. Password approvals still open in Toolroll.${others ? ` ${others} teammate${others === 1 ? " is" : "s are"} already paired.` : ""}</p>${password}<button type="submit">Create pairing code</button>`));
-        }
-        if (binding && state.live(binding) && !options.code)
-            parts.push(post("unpair", html `${password}<p class="meta">Unpairing ends every open button in your chat. Teammates are unaffected.</p><button type="submit">Unpair my account</button>`));
-        parts.push(html `<details><summary>Connection settings</summary>${post("disconnect", html `${password}<button type="submit">Disconnect Slack</button>`)}</details>`);
-    }
-    return html `<section style="max-width:42rem;overflow-wrap:anywhere"><p><a href="/settings">Settings</a></p><h1>Slack</h1>${options.problem ? html `<p class="problem" role="alert">${options.problem}</p>` : ""}${parts}<details><summary>Access and setup</summary><p>Private messages and threads use your Toolroll permissions. Shared channels are not supported. Secure review links use this installation’s configured HTTPS console address.</p><p>Socket Mode connects out to Slack. It does not need a public webhook or a Tailscale account.</p></details></section>`;
+    return chatSettingsHtml(store, dir, options, {
+        provider: "slack",
+        label: "Slack",
+        credentials: loadSlackCredentials(dir),
+        setup: html `<details open><summary>Create your Slack app</summary><ol><li>Download the <a href="/settings/slack/manifest">app manifest</a>, then <a href="https://api.slack.com/apps" target="_blank" rel="noopener noreferrer">create an app</a> in your workspace using that manifest.</li><li>Under Basic Information, create an app-level token with <code>connections:write</code>.</li><li>Under OAuth &amp; Permissions, install the app and copy its bot token.</li></ol></details>`,
+        connect: password => html `<label>App token<input style="min-height:44px" type="password" name="app-token" autocomplete="off" placeholder="xapp-…" required></label><label>Bot token<input style="min-height:44px" type="password" name="bot-token" autocomplete="off" placeholder="xoxb-…" required></label>${password}<p class="meta">Tokens stay on this installation. Next, pair your own Slack account.</p><button type="submit">Connect Slack</button>`,
+        access: html `<p>Private messages and threads use your Toolroll permissions. Shared channels are not supported. Secure review links use this installation’s configured HTTPS console address.</p><p>Socket Mode connects out to Slack. It does not need a public webhook or a Tailscale account.</p>`,
+    });
 }

package/dist/slack.js

@@ -1,19 +1,12 @@
 /** One leased Socket Mode connection, hosted by the ordinary worker. */
 import { randomBytes } from "node:crypto";
-import { setTimeout as sleep } from "node:timers/promises";
+import { abortablePause, workChatQueue } from "./chat-follow.js";
 import { loadSlackCredentials, slackApi } from "./slack-api.js";
 import { ChatState } from "./chat-delivery-state.js";
 import { receiveSlack, processSlackEvent, deliverSlackPart, planSlackNotifications, planSlackRooms, } from "./slack-chat.js";
 export async function followSlack(options) {
     const owner = randomBytes(16).toString("hex"), state = new ChatState(options.store, "slack");
-    const pause = async (ms) => {
-        try {
-            await sleep(ms, undefined, { signal: options.signal });
-        }
-        catch {
-            /* shutdown */
-        }
-    };
+    const pause = abortablePause(options.signal);
     while (!options.signal.aborted) {
         const credentials = loadSlackCredentials(options.dir);
         if (!credentials ||
@@ -104,20 +97,16 @@ export async function followSlack(options) {
         };
         try {
             await client.start();
-            while (same()) {
-                if (!connected || state.retryAt(credentials.installation) > new Date().toISOString()) {
-                    await pause(1000);
-                    continue;
-                }
-                await processSlackEvent(chat);
-                if (same())
-                    await planSlackRooms(chat);
-                if (same())
-                    await deliverSlackPart(chat);
-                if (same() && options.notifications())
-                    await planSlackNotifications(chat);
-                await pause(1000);
-            }
+            await workChatQueue({
+                same,
+                ready: () => connected && !(state.retryAt(credentials.installation) > new Date().toISOString()),
+                pause,
+                notifications: () => options.notifications(),
+                process: () => processSlackEvent(chat),
+                rooms: () => planSlackRooms(chat),
+                deliver: () => deliverSlackPart(chat),
+                notify: () => planSlackNotifications(chat),
+            });
         }
         catch {
             if (alive)

package/dist/sleep.d.ts

@@ -0,0 +1,2 @@
+/** Wait `ms` milliseconds on the global timer (so fake timers in tests still drive it). */
+export declare const sleep: (ms: number) => Promise<void>;

package/dist/sleep.js

@@ -0,0 +1,2 @@
+/** Wait `ms` milliseconds on the global timer (so fake timers in tests still drive it). */
+export const sleep = (ms) => new Promise(resolve => setTimeout(resolve, ms));

package/dist/store.d.ts

@@ -1,5 +1,6 @@
 import { type WritesMode } from "./writes-mode.js";
-import { type ProjectNetwork, type RunNetworkRecord } from "./egress.js";
+import { type CheckAccess } from "./check-access.js";
+import { type NetworkProfile, type ProjectNetwork, type RunNetworkRecord } from "./egress.js";
 import { type AcpLaunch } from "./acp-attest.js";
 import { type ChatBinding } from "./chat-core.js";
 import { ChatMessages, TELEGRAM_HOLD_REASONS, TELEGRAM_SKIPPED_ELSEWHERE, TELEGRAM_SKIPPED_OTHER_CHAT, TELEGRAM_SKIPPED_QUIET } from "./chat-messages.js";
@@ -179,7 +180,7 @@ export type SealedLedgerEntry = LedgerEntry & {
         hash: string;
     } | null;
 };
-export declare const SCHEMA_VERSION = 131;
+export declare const SCHEMA_VERSION = 132;
 /** v118: the tables merged into `credential`, in the order they move (a person's API tokens keep their ids first). */
 export declare const V118_MERGED_TABLES: Readonly<Record<string, CredentialKind>>;
 /**
@@ -318,6 +319,8 @@ export declare const V129_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record
 export declare const CONFINEMENT_SCHEMA = "\nCREATE TABLE IF NOT EXISTS project_network (\n  repo          TEXT PRIMARY KEY,\n  network_json  TEXT NOT NULL CHECK (length(network_json) <= 16384),\n  updated_at    TEXT NOT NULL,\n  updated_by    TEXT NOT NULL\n);\nCREATE TABLE IF NOT EXISTS confinement_setting (\n  id               INTEGER PRIMARY KEY CHECK (id = 1),\n  unfenced_allowed INTEGER NOT NULL DEFAULT 0 CHECK (unfenced_allowed IN (0, 1)),\n  updated_at       TEXT,\n  updated_by       TEXT\n);\nINSERT OR IGNORE INTO confinement_setting (id, unfenced_allowed) VALUES (1, 0);\n";
 /** v131: where a project's builds may write (an approver's setting, agent-fence.ts WritesMode). */
 export declare const PROJECT_WRITES_SCHEMA = "\nCREATE TABLE IF NOT EXISTS project_writes (\n  repo        TEXT PRIMARY KEY,\n  mode        TEXT NOT NULL CHECK (mode IN ('workspace', 'anywhere')),\n  updated_at  TEXT NOT NULL,\n  updated_by  TEXT NOT NULL\n);\n";
+/** v132: how far a project's checks reach beyond the check fence (check-access.ts CheckAccess). */
+export declare const PROJECT_CHECK_ACCESS_SCHEMA = "\nCREATE TABLE IF NOT EXISTS project_check_access (\n  repo        TEXT PRIMARY KEY,\n  level       TEXT NOT NULL CHECK (level IN ('sandboxed', 'sign-ins', 'unsandboxed')),\n  updated_at  TEXT NOT NULL,\n  updated_by  TEXT NOT NULL\n);\n";
 /** v129: a finished run's How it ran, derived from its own records on first view (display only: never a verdict). Its
  * parser version says when to derive again; `steps` says how complete the step detail was, and why not. */
 export declare const RUN_EFFICIENCY_SCHEMA = "\nCREATE TABLE IF NOT EXISTS run_efficiency (\n  run             INTEGER PRIMARY KEY REFERENCES run(id) ON DELETE CASCADE,\n  parser_version  INTEGER NOT NULL,\n  steps           TEXT NOT NULL CHECK (steps IN ('complete','truncated','expired','absent')),\n  steps_reason    TEXT,\n  payload_json    TEXT NOT NULL CHECK (length(payload_json) <= 16384),\n  derived_at      TEXT NOT NULL\n);\n";
@@ -415,8 +418,6 @@ type CancellationTransition = {
     changed: false;
     reason: CancellationRefusal;
 };
-/** States from which no further work is dispatched. */
-export declare const TERMINAL_STATES: readonly TaskState[];
 export type Task = {
     id: string;
     title: string;
@@ -486,18 +487,6 @@ export type TaskRef = {
     /** Recorded, not asserted: what the grant's selector is checked against. */
     origin: TaskOrigin;
 };
-/** A standing order: a pre-approved template whose instances build unattended. */
-export type ExecutionSlot = {
-    id: number;
-    runner: string;
-    state: "reserved" | "running" | "released";
-    run: number | null;
-    incarnation: string | null;
-    processGroup: number | null;
-    reservedAt: string;
-    runningAt: string | null;
-    releasedAt: string | null;
-};
 /** Chat providers are direct API adapters — a DISJOINT type from the build
  * harness providers, by design (Codex v3 review, change 1). */
 export type DirectChatProviderId = "anthropic-api" | "openrouter-api";
@@ -999,8 +988,6 @@ export type Capability = {
     lastResult: string | null;
     expiresAt: string | null;
 };
-/** `kind:name`, the unambiguous way a requirement names a capability. */
-export declare function capabilityKey(capability: Pick<Capability, "kind" | "name">): string;
 /** Parse `kind:name`; a bare name is refused rather than guessed at. */
 export declare function parseCapabilityKey(key: string): {
     kind: Capability["kind"];
@@ -2297,7 +2284,6 @@ export declare class Store {
     mirrorAllowsCompletion(taskId: string): boolean;
     /** Whether a stored acquire mutation exists — the replay marker's fact. */
     hasMutationRecord(mutation: Mutation): boolean;
-    enqueueExternalIntent(mirror: string, kind: "comment" | "transition" | "close", body: string | null, now: Date): void;
     pendingExternalIntents(limit?: number): {
         id: number;
         mirror: string;
@@ -4053,24 +4039,6 @@ export declare class Store {
     liveClaimByLease(leaseId: string, now: Date): {
         leaseId: string;
     } | null;
-    reserveExecutionSlots(runner: string, count: number, now: Date): number[];
-    /** reserved → running happens in the stamp-before-spawn moment, carrying
-     * the process group so recovery can ask the OS before freeing capacity. */
-    markSlotRunning(id: number, facts: {
-        run: number;
-        incarnation?: string | null;
-        processGroup?: number | null;
-    }, now: Date): boolean;
-    /** A correction process replaces the exited provider in the same open
-     * root attempt. It may refresh only that attempt's exact occupied slot. */
-    refreshSlotProcess(id: number, facts: {
-        run: number;
-        incarnation?: string | null;
-        processGroup: number;
-    }): boolean;
-    releaseExecutionSlot(id: number, now: Date): boolean;
-    liveSlotCount(runner: string): number;
-    getExecutionSlot(id: number): ExecutionSlot | null;
     /** Minted from a POST, never a GET. Bounded per approver; expired rows
      * are swept rather than accumulating. */
     mintCeremonyNonce(spec: {
@@ -4868,22 +4836,6 @@ export declare class Store {
     listTasksScoped(repo: string | null, state: TaskState | undefined, limit: number, selectedId: string | null): (Task & {
         repo: string | null;
     })[];
-    /**
-     * The Work destination's one bounded page (workspace package 1 query):
-     * the newest tasks the viewer may see, with the viewer's already-proved
-     * admission bound BEFORE the ordering and the limit — never a wider
-     * read post-filtered in the caller. `admitted` is the resolved
-     * permitted repo set: `null` means unrestricted (every placed row),
-     * `[]` means no placed project is permitted (no placed row at all).
-     * `includeUnplaced` says whether NULL-repo rows belong to this viewer;
-     * an account restricted to projects never sees them, so they must not
-     * spend its page. Every predicate is a bound parameter; the limit is
-     * clamped here, not trusted from the caller. Read-only; the legacy
-     * `listTasksScoped` is untouched.
-     */
-    listWorkTasksAdmitted(admitted: readonly string[] | null, includeUnplaced: boolean, limit: number): (Task & {
-        repo: string | null;
-    })[];
     /** Newest first, because the question is almost always "what just happened". */
     runsFor(taskRef: number): Run[];
     /**
@@ -5309,7 +5261,6 @@ export declare class Store {
         run: number;
         kind: Incident["kind"];
     }, now: Date): number;
-    incidentForRun(run: number): Incident | null;
     /** Unresolved, task attached, oldest first. No time window: these do not age out. */
     openIncidents(repo?: string | null): (Incident & {
         taskId: string;
@@ -5516,9 +5467,6 @@ export declare class Store {
     claimMergeIntent(id: number, by: string, leaseMs: number, now: Date): {
         generation: number;
     } | null;
-    /** Renew the lease AND re-prove the generation in one CAS — the last
-     * gate before the external call; a failed re-proof aborts the attempt. */
-    renewMergeClaim(id: number, generation: number, leaseMs: number, now: Date): boolean;
     /** STATE-SPECIFIC and TERMINALLY MONOTONIC (E1): the writer names the
      * state it believes it owns, and a terminal row is never overwritten —
      * a stale claim owner cannot un-merge what the observer already settled,
@@ -5583,12 +5531,6 @@ export declare class Store {
         lastError: string | null;
         firingDeadline: string | null;
     } | null;
-    latestObservation(githubRepo: string, prNumber: number): {
-        headSha: string;
-        state: string;
-        observedAt: string;
-        generation: number;
-    } | null;
     /** Revocation is immediate: intents not yet pushed die with the grant. */
     revokePublicationGrant(repo: string, by: string, now: Date): boolean;
     publicationGrantFor(repo: string): PublicationGrant | null;
@@ -6408,7 +6350,6 @@ export declare class Store {
     recentLeadTurns(approver: string, limit?: number): LeadTurn[];
     getLeadTurn(id: number): LeadTurn | null;
     liveLeadTurnFor(approver: string): LeadTurn | null;
-    leadStepsOf(leadTurn: number): ChatTurn[];
     /** Remember a project was opened. Upsert keeps added_at; recency always moves.
      * A project added for the first time starts on Quick checks. */
     upsertProject(path: string, name: string, now: Date, admission?: {
@@ -6469,17 +6410,6 @@ export declare class Store {
         repo: string | null;
         blockerRepo: string | null;
     }[];
-    /**
-     * Active work only, running first — the Work tab's page. Terminal history
-     * belongs to Done and the build ledger, never to this list.
-     */
-    listActiveWorkScoped(repo: string | null, now: Date, limit?: number): (Task & {
-        repo: string | null;
-        approved: boolean;
-        held: boolean;
-        buildingBy: string | null;
-        strikes: number;
-    })[];
     /**
      * Completed work, one row per done task with its final accepted run and
      * any publication attached — never composed from separate task and PR
@@ -7247,6 +7177,30 @@ export declare class Store {
      * removed or expired — any of those means the composer's draft was accepted and must not be sent again). */
     leadRequestReceived(session: number, request: string): boolean;
     forgetQueuedLeadMessage(message: number): void;
+    /** How far a project's checks reach beyond the check fence: its saved level, or sandboxed. */
+    projectCheckAccess(repo: string): CheckAccess;
+    /** Who last changed a project's check access, and when (null: never changed). */
+    projectCheckAccessChange(repo: string): {
+        by: string;
+        at: string;
+    } | null;
+    /** The level a run's setup and checks ran at (its sealed approval's, or unsandboxed where no OS fence exists). Its
+     * follow-up and batch checks never run wider than this. */
+    stampRunCheckAccess(runId: number, level: CheckAccess, network?: NetworkProfile | null): void;
+    /** The network a run's sign-ins checks ran under (null: none sealed; such a run's later checks run sandboxed). */
+    runCheckNetwork(runId: number): NetworkProfile | null;
+    /** The level a run's checks ran at: missing or unreadable reads as sandboxed. */
+    runCheckAccess(runId: number): CheckAccess;
+    /** A project's check access changed: saved, and in the ledger as before → after. `may` is what the caller proved:
+     * "widen" only after an instance operator's password typed now; anything else may only narrow. The level is read again
+     * and compared in the same transaction as the write, so a change made while the caller was proving itself can't turn
+     * a narrowing into a widening. Refused: null, nothing written. */
+    setProjectCheckAccess(repo: string, level: CheckAccess, by: string, now: Date, authority: {
+        may: "narrow" | "widen";
+    }): {
+        before: CheckAccess;
+        after: CheckAccess;
+    } | null;
 }
 /** The receipt a bot's first pairing writes over pre-pairing history: an
  * explicit skip, with no delivered timestamp and no attempt, so suppressed