toolroll 0.9.72 → 0.9.74

package/dist/flow-triggers.js

@@ -368,6 +368,18 @@ export function rawTakesDeliveries(raw) {
     const one = raw;
     return one["kind"] === "webhook" || ((one["kind"] === "github" || one["kind"] === "linear") && one["delivery"] === "webhook");
 }
+/** Whether a trigger brings in items from anyone (chat-management.md §0a.3): GitHub issues or pull requests from anyone,
+ * or mail from any sender. A widening: it takes a person's password, on every road that adds one. */
+export function admitsAnyone(config) {
+    return (config.kind === "github" && config.from === "anyone") || (config.kind === "email" && config.sender === null);
+}
+/** The same, read leniently from a raw trigger before validation (so the form can ask for the password first). */
+export function rawAdmitsAnyone(raw) {
+    if (raw === null || typeof raw !== "object")
+        return false;
+    const one = raw;
+    return (one["kind"] === "github" && one["from"] === "anyone") || (one["kind"] === "email" && (typeof one["sender"] !== "string" || one["sender"].trim() === ""));
+}
 export function takesDeliveries(config) {
     return config.kind === "webhook" || ((config.kind === "github" || config.kind === "linear") && config.delivery === "webhook");
 }
@@ -495,6 +507,9 @@ export function addFlowTriggerTo(store, flow, raw, actor, now, dir, options = {}
         return { ok: false, message: "Webhook addresses are set up on the console." };
     if (takesDeliveries(config) && config.kind !== "webhook" && options.ingress !== "proved")
         return { ok: false, message: "Webhook delivery is set up on the flow's trigger panel, with your password." };
+    // Items from anyone come in only on a person's proof (chat-management.md §0a.3): never from a card, an import or a template alone.
+    if (admitsAnyone(config) && options.ingress !== "proved" && options.widening !== "proved")
+        return { ok: false, message: "A trigger that brings in items from anyone takes your password. Add it on the flow's Triggers panel." };
     // v126: a webhook made where no one is shown its address (the gallery, an import) is made with none: its first
     // set-up or New address makes one and shows it. A webhook made on its panel is shown its address now.
     const token = takesDeliveries(config) && options.ingress === "proved" && (options.shown !== false || config.kind !== "webhook") ? randomBytes(24).toString("base64url") : null;

package/dist/flows-cli.js

@@ -21,7 +21,8 @@ import { deciderOf, FLOW_KIND_WORDS, FLOW_TEMPLATES, flowDigest, flowFromSteps,
 import { prepareUnattendedCandidates, activeUnattendedGrant, parseUnattendedAsk, revokeUnattended, signUnattended, unattendedViewOf, unattendedWords, untilWords, UNATTENDED_MAX_RUNS } from './flow-unattended.js';
 import { MODE_MAX_DAYS } from './modes.js';
 import { verifyApproverByPassword } from './principal.js';
-import { proveCredential } from './scope.js';
+import { authenticateApprover, proveCredential } from './scope.js';
+import { personProof } from './person-proof.js';
 import { projectName } from './project.js';
 const EXIT = { ok: 0, failed: 1, usage: 2, refused: 3 };
 const json = { name: 'json', takesValue: false, meaning: 'answer with one machine envelope on stdout' };
@@ -157,6 +158,12 @@ export async function runFlowsCommand(positional, flags, context) {
         store.recordAction({ at: context.clock().toISOString(), actor: who, repo: project, taskId: null, runId: null, action: command, outcome, source: 'request', detail: `command line${detail === null ? '' : ` · ${detail}`}` });
     };
     const refuse = (project, reason, message, code = EXIT.refused) => { record(project, 'refused', reason); return fail(reason, message, code); };
+    // A trigger from anyone widens what comes in (chat-management.md §0a.3): only the person's own proof counts, never a
+    // machine credential standing in for them (a remote run's API token, a lead's token), though both pass the check above.
+    const widening = (project) => {
+        const proved = authenticateApprover(store, acting.name, acting.token, project);
+        return proved.ok && personProof(proved.method) ? { widening: 'proved' } : {};
+    };
     const settle = (project) => { try {
         advanceFlows(store, project, context.clock(), { evidenceRoot: context.evidenceRoot });
     }
@@ -243,11 +250,13 @@ export async function runFlowsCommand(positional, flags, context) {
         if (!flags.has('yes'))
             return preview(project, `Create the ${flowName} flow in ${projectName(project)}`, terms, { definition });
         let id;
+        const proof = template?.trigger === undefined ? {} : widening(project);
         try {
             id = store.transact(() => {
                 const made = store.createFlow({ repo: project, name: flowName, definitionJson: JSON.stringify(definition), by: who }, now);
                 if (template?.trigger !== undefined) {
-                    const trigger = addFlowTriggerTo(store, store.getFlow(made), template.trigger, who, now, context.configDir);
+                    // A trigger from anyone only on the person's own proof (widening above); a machine credential's is refused.
+                    const trigger = addFlowTriggerTo(store, store.getFlow(made), template.trigger, who, now, context.configDir, proof);
                     if (!trigger.ok)
                         throw new Error(trigger.message);
                 }
@@ -508,7 +517,8 @@ export async function runFlowsCommand(positional, flags, context) {
         const ingress = rawTakesDeliveries(input.value);
         if (ingress && !proveCredential(store, acting.name, acting.token).ok)
             return refuse(flow.repo, 'unauthenticated', 'Making a webhook address takes your password, typed: pass --token.');
-        const made = addFlowTriggerTo(store, flow, input.value, who, now, context.configDir, ingress ? { ingress: 'proved' } : {});
+        // A trigger from anyone only on the person's own proof (widening above): a machine credential's is refused.
+        const made = addFlowTriggerTo(store, flow, input.value, who, now, context.configDir, ingress ? { ingress: 'proved' } : widening(flow.repo));
         if (!made.ok)
             return refuse(flow.repo, 'invalid-trigger', made.message);
         await prepareUnattendedCandidates(store, flow.id);

package/dist/guides.js

@@ -445,7 +445,13 @@ with a time limit.
 
 ## What it does, in order
 
-1. **gate**: files task \`release-<version>-<sha7>\` pinned to the
+1. **gate**: before filing, looks at the pull request's checks on the
+   branch's exact commit: a required check that failed stops here, before
+   anything is filed or sent for approval. Checks not started or still
+   running are named and waited for (GitHub not answering is waited out
+   too); if they don't finish within the gate's limit (60 min, \`--limit
+   gate=<min>\`), it stops here as well. A task already filed for the commit is kept and
+   not looked at again. Then it files task \`release-<version>-<sha7>\` pinned to the
    branch's exact commit with \`--checks full\`, regardless of the project's default.
 2. **approval**: waits for the owner to approve that exact scope
    (\`toolroll task approve <id> --digest <d>\`, or the console). A
@@ -499,6 +505,9 @@ instead of making them twice.
   checks and obtain a passing result; Quick and Off cannot authorize a release.
 - \`check-failed\`: fix the branch and release the new commit with \`--new\`.
 - \`ci-failed\`: fix the failed GitHub check, then rerun. Nothing was merged.
+  A stop at the gate comes before the task is filed, so nothing was filed
+  either: a fix pushed as a new commit is released with \`--new\`; after
+  rerunning the failed job on GitHub, run the same command again.
 - \`publish-failed\` / \`homebrew-failed\`: fix the failed workflow before
   resuming. A failed tag check cannot finish publication or update Homebrew.
 - \`base-moved\`: main gained a commit the branch doesn't have, so the

package/dist/invoke.d.ts

@@ -190,3 +190,16 @@ export declare function checkoutRunner(store: Store, repo: string, checkout: str
 export declare function checkoutSandboxOf(store: Store, repo: string, runIds: readonly number[]): LaunchSandbox;
 /** The digest of a launch's whole fence (its denied paths and grants, canonical), as stamped on its run (C11). */
 export declare function fenceDigest(fence: readonly string[], grants: FenceGrants): string;
+/** What a Claude turn's own stream says about how it billed (v105). */
+export type ClaudeBillingSeen = {
+    keySource: string | null;
+    model: string | null;
+    planWindows: boolean;
+    answered: boolean;
+};
+/**
+ * One stream event's billing observation: the key source and model from the session's own init, plan windows from a
+ * rate-limit event, and whether the main query answered. The session's own events only (stream-scope.ts): a
+ * subagent's init, rate-limit event or result says nothing about this turn's billing.
+ */
+export declare function observeClaudeBilling(seen: ClaudeBillingSeen, event: Record<string, unknown>): void;

package/dist/invoke.js

@@ -44,6 +44,7 @@ import { buildCacheEnv, buildCacheFolder, grantFolder, writeAllowlist, WRITES_DE
 import { proxyEnv, providerOnlyNetwork, repositoryEcosystems, resolveNetwork, startEgressProxy } from "./egress.js";
 import { claudeConfigDir, claudeDefaults, codexDefaults, codexHomeDir, isolatedCodexHome } from "./provider-home.js";
 import { billingOf, claudeBillingFrom, seenBilling } from "./spend.js";
+import { primaryResultEvent, topLevelEvent } from "./stream-scope.js";
 /** "Within seconds": how soon a silent failed run must end for its stderr to
  * be read for the sign-in signal. */
 const AUTH_EARLY_EXIT_MS = 30_000;
@@ -507,18 +508,7 @@ export async function invokeAgent(store, runId, spec, invocation, options) {
         ...(workspace === null ? {} : { cwd: workspace }),
         // v105: how the CLI really billed this turn (its key source, its plan's windows), read off its own stream.
         onStreamEvent: event => {
-            if (event["type"] === "system" && event["subtype"] === "init") {
-                if (typeof event["apiKeySource"] === "string")
-                    billingSeen.keySource = event["apiKeySource"].slice(0, 80);
-                if (typeof event["model"] === "string")
-                    billingSeen.model = event["model"].slice(0, 200);
-            }
-            else if (event["type"] === "rate_limit_event") {
-                billingSeen.planWindows = true;
-            }
-            else if (event["type"] === "result" && event["is_error"] !== true && event["subtype"] === "success") {
-                billingSeen.answered = true;
-            }
+            observeClaudeBilling(billingSeen, event);
             runOptions.onStreamEvent?.(event);
         },
         owner: runOwnerTag(store, runId),
@@ -1303,3 +1293,22 @@ export function checkoutSandboxOf(store, repo, runIds) {
 export function fenceDigest(fence, grants) {
     return createHash("sha256").update(`toolroll:fence:${canonicalJson({ fence: [...fence], grants: grants })}`).digest("hex").slice(0, 32);
 }
+/**
+ * One stream event's billing observation: the key source and model from the session's own init, plan windows from a
+ * rate-limit event, and whether the main query answered. The session's own events only (stream-scope.ts): a
+ * subagent's init, rate-limit event or result says nothing about this turn's billing.
+ */
+export function observeClaudeBilling(seen, event) {
+    if (event["type"] === "system" && event["subtype"] === "init" && topLevelEvent(event)) {
+        if (typeof event["apiKeySource"] === "string")
+            seen.keySource = event["apiKeySource"].slice(0, 80);
+        if (typeof event["model"] === "string")
+            seen.model = event["model"].slice(0, 200);
+    }
+    else if (event["type"] === "rate_limit_event" && topLevelEvent(event)) {
+        seen.planWindows = true;
+    }
+    else if (primaryResultEvent(event) && event["is_error"] !== true && event["subtype"] === "success") {
+        seen.answered = true;
+    }
+}

package/dist/kits-ui.js

@@ -1,6 +1,6 @@
 import { kitChecklist, kitInstalled, KITS } from "./kits.js";
 import { SUBAGENT_TEMPLATES } from "./subagents.js";
-import { html, postForm } from "./html.js";
+import { html, postForm, reauth } from "./html.js";
 const CHECK = html `<svg viewBox="0 0 24 24" aria-hidden="true"><path d="M20 6 9 17l-5-5"/></svg>`;
 const RING = html `<svg viewBox="0 0 24 24" aria-hidden="true"><circle cx="12" cy="12" r="8"/></svg>`;
 export const KITS_CSS = `.kits{max-width:960px;min-width:0}.kits-lede{color:var(--so-muted);margin:.25rem 0 1.5rem;max-width:40rem}.kit-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:16px}` +
@@ -35,7 +35,9 @@ export function kitPageHtml(store, kit, repo, dir, canSetUp, notice) {
     const rows = steps.map(step => {
         const go = step.done ? (step.href === null ? "" : html `<a class="kit-step-go" href="${step.href}">Open</a>`)
             : step.action === "sample" || step.action === "github"
-                ? (canSetUp ? postForm(`/kits/${kit.id}/${step.action}`, html `<button${step.action === "sample" ? "" : html ` class="secondary"`}>${step.action === "sample" ? "Try it" : "Bring them in"}</button>`, { hidden: { repo } }) : "")
+                ? (canSetUp ? postForm(`/kits/${kit.id}/${step.action}`, step.action === "sample" ? html `<button>Try it</button>`
+                    // Issues from anyone come in: it takes your password (an ordinary step-up; a session does under Passwordless).
+                    : html `${reauth(html `<input type="password" name="password" autocomplete="current-password" aria-label="Your password" placeholder="Your password">`)}<button class="secondary">Bring them in</button>`, { hidden: { repo } }) : "")
                 : step.href === null ? "" : html `<a class="kit-step-go" href="${step.href}">${step.action === "connect" ? "Connect" : "Set up"}</a>`;
         return html `<li data-step="${step.id}" data-done="${String(step.done)}">${step.done ? CHECK : RING}<span class="kit-step-said">${step.said}</span>${go}</li>`;
     });

package/dist/kits.d.ts

@@ -53,9 +53,11 @@ export declare function kitInstalled(store: Store, kit: Kit, repo: string): {
  * flow, and its button triggers; then its subagent may use whichever of the
  * kit's tools the project already has (reading free, writing asking first).
  */
-export declare function setUpKit(store: Store, kit: Kit, repo: string, by: string, now: Date, dir: string | null, io?: ToolIo): Promise<Done>;
-/** The same, all at once (a chat confirmation can't wait on a tool): its subagent is given the kit's connected tools by the names their last test found, and each is listed properly on its first turn. */
-export declare function setUpKitNow(store: Store, kit: Kit, repo: string, by: string, now: Date, dir: string | null, grantByName?: boolean): Done;
+export declare function setUpKit(store: Store, kit: Kit, repo: string, by: string, now: Date, dir: string | null, io?: ToolIo, options?: {
+    widening?: "proved";
+}): Promise<Done>;
+/** The same, all at once and without its tools (a chat confirmation is never a grant's proof): its subagent, its flow and its buttons. */
+export declare function setUpKitNow(store: Store, kit: Kit, repo: string, by: string, now: Date, dir: string | null): Done;
 /** One line of a kit's checklist: done, or the next step with where to take it. */
 export type KitStep = {
     id: string;
@@ -76,7 +78,7 @@ export declare function addKitSample(store: Store, kit: Kit, repo: string, by: s
     said: string;
 };
 /** Bring new issues from the project's GitHub repository into the kit's flow (issues from anyone, polled). */
-export declare function addKitGithubTrigger(store: Store, kit: Kit, repo: string, by: string, now: Date, dir: string | null): {
+export declare function addKitGithubTrigger(store: Store, kit: Kit, repo: string, by: string, now: Date, dir: string | null, proved?: "proved" | null): {
     ok: true;
     said: string;
 } | {

package/dist/kits.js

@@ -17,7 +17,7 @@ import { readEmailSettings } from "./email-settings.js";
 import { mailboxReady } from "./mailbox.js";
 import { projectToolsOf } from "./project-tools.js";
 import { createSubagentFrom, nameOf } from "./subagent-admin.js";
-import { grantListed, grantTool } from "./subagent-tools.js";
+import { grantTool } from "./subagent-tools.js";
 import { SUBAGENT_TEMPLATES } from "./subagents.js";
 export const KITS = [
     {
@@ -115,22 +115,23 @@ export function kitInstalled(store, kit, repo) {
  * flow, and its button triggers; then its subagent may use whichever of the
  * kit's tools the project already has (reading free, writing asking first).
  */
-export async function setUpKit(store, kit, repo, by, now, dir, io = {}) {
+export async function setUpKit(store, kit, repo, by, now, dir, io = {}, options = {}) {
     const made = setUpKitNow(store, kit, repo, by, now, dir);
-    if (!made.ok || made.said.endsWith("already set up here."))
+    // Its tools only with the person's proof (chat-management.md §0a.3); without it, the checklist says to let it use each.
+    if (!made.ok || made.said.endsWith("already set up here.") || options.widening !== "proved")
         return made;
     const mate = store.getSubagent(made.subagent);
     const present = new Set(projectToolsOf(store, repo).map(one => one.name));
     for (const tool of kit.tools.filter(one => present.has(one.tool))) {
         try {
-            await grantTool(store, mate, tool.tool, by, now, io);
+            await grantTool(store, mate, tool.tool, by, now, io, options);
         }
         catch { /* it can be given the tool on its page */ }
     }
     return made;
 }
-/** The same, all at once (a chat confirmation can't wait on a tool): its subagent is given the kit's connected tools by the names their last test found, and each is listed properly on its first turn. */
-export function setUpKitNow(store, kit, repo, by, now, dir, grantByName = false) {
+/** The same, all at once and without its tools (a chat confirmation is never a grant's proof): its subagent, its flow and its buttons. */
+export function setUpKitNow(store, kit, repo, by, now, dir) {
     const had = kitInstalled(store, kit, repo);
     if (had !== null)
         return { ok: true, said: `${kit.name} is already set up here.`, flow: had.flow.id, subagent: had.mate.id };
@@ -155,9 +156,6 @@ export function setUpKitNow(store, kit, repo, by, now, dir, grantByName = false)
     const flow = store.getFlow(flowId);
     for (const button of kit.buttons)
         addFlowTriggerTo(store, flow, { kind: "button", label: button.label, questions: button.questions, zone: definition.start }, by, now, dir);
-    if (grantByName)
-        for (const tool of projectToolsOf(store, repo).filter(one => kit.tools.some(each => each.tool === one.name)))
-            grantListed(store, mate, tool, null, by, now);
     return { ok: true, said: `${kit.name} is ready: ${nameOf(mate)} works its ${kit.flowName} flow.`, flow: flowId, subagent: mate.id };
 }
 /** What's set up and what's left, read fresh each time. */
@@ -205,11 +203,11 @@ export function addKitSample(store, kit, repo, by, now) {
     return added.ok ? { ok: true, href: flowCardHref(set.flow.id, added.card) } : { ok: false, said: added.message };
 }
 /** Bring new issues from the project's GitHub repository into the kit's flow (issues from anyone, polled). */
-export function addKitGithubTrigger(store, kit, repo, by, now, dir) {
+export function addKitGithubTrigger(store, kit, repo, by, now, dir, proved = null) {
     const set = kitInstalled(store, kit, repo);
     const github = githubRepoOf(repo);
     if (set === null || github === null)
         return { ok: false, said: "This project isn't on GitHub." };
-    const made = addFlowTriggerTo(store, set.flow, { kind: "github", repo: github, watch: "issues", from: "anyone", delivery: "poll", zone: flowDefinitionOf(set.flow)?.start }, by, now, dir);
+    const made = addFlowTriggerTo(store, set.flow, { kind: "github", repo: github, watch: "issues", from: "anyone", delivery: "poll", zone: flowDefinitionOf(set.flow)?.start }, by, now, dir, proved === null ? {} : { widening: proved });
     return made.ok ? { ok: true, said: `New issues on ${github} now come into ${kit.flowName}.` } : { ok: false, said: made.message };
 }

package/dist/knowledge-ui.d.ts

@@ -1,6 +1,9 @@
 import { type KnowledgeDraft, type KnowledgeSelection, type KnowledgeView } from './project-knowledge.js';
 import { type Html } from './html.js';
-export declare const KNOWLEDGE_CSS = ".knowledge{max-width:780px;min-width:0;overflow-wrap:anywhere}.knowledge .card{padding:20px;min-width:0;margin:16px 0}.knowledge h2{margin:0 0 12px}.knowledge form{display:grid;gap:12px;margin:0}.knowledge label{display:grid;gap:6px}.knowledge textarea,.knowledge input,.knowledge select{box-sizing:border-box;width:100%;min-width:0;max-width:100%}.knowledge textarea{resize:vertical;min-height:110px}.knowledge button,.knowledge summary,.knowledge .button-link{min-height:44px}.knowledge button{justify-self:start;white-space:nowrap}.knowledge summary{padding:12px 0;cursor:pointer}.knowledge pre{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit}.knowledge .knowledge-actions{display:flex;gap:12px;flex-wrap:wrap}.knowledge .meta{font-size:.86rem}.knowledge .knowledge-source{display:block}.knowledge details+details{border-top:1px solid var(--so-line)}.memory-stats{display:flex;flex-wrap:wrap;gap:.4rem}.memory-stats span{padding:.15rem .55rem;border-radius:.375rem;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}@media(max-width:600px){.knowledge .card{padding:16px}.knowledge h2{font-size:1.1rem}}";
+/** A section as a frame (after ReUI's Frame, MIT): its heading on the raised well, its body one paper panel. The
+ * cards inside become hairline-divided rows of that panel, never cards in a card. */
+export declare function framedSection(heading: string, body: Html | string, extra?: string): Html;
+export declare const KNOWLEDGE_CSS = ".knowledge{max-width:780px;min-width:0;overflow-wrap:anywhere}.knowledge .card{padding:20px;min-width:0;margin:16px 0}.knowledge h2{margin:0 0 12px}.knowledge form{display:grid;gap:12px;margin:0}.knowledge label{display:grid;gap:6px}.knowledge textarea,.knowledge input,.knowledge select{box-sizing:border-box;width:100%;min-width:0;max-width:100%}.knowledge textarea{resize:vertical;min-height:110px}.knowledge button,.knowledge summary,.knowledge .button-link{min-height:44px}.knowledge button{justify-self:start;white-space:nowrap}.knowledge summary{padding:12px 0;cursor:pointer}.knowledge pre{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit}.knowledge .knowledge-actions{display:flex;gap:12px;flex-wrap:wrap}.knowledge .meta{font-size:.86rem}.knowledge .knowledge-source{display:block}.knowledge details+details{border-top:1px solid var(--so-line)}.memory-stats{display:flex;flex-wrap:wrap;gap:.4rem}.memory-stats span+span::before{content:\"\u00B7\";margin-right:.4rem}.knowledge.frame{margin:0 0 16px}.knowledge.frame>.frame-head h2,.knowledge.frame>summary.frame-head{margin:0;font-size:13px;font-weight:600;line-height:1.4}.knowledge.frame>summary.frame-head{min-height:44px;padding:4px 10px}.knowledge.frame>.frame-panel{min-width:0}.knowledge.frame>.frame-panel>:first-child{margin-top:0}.knowledge.frame>.frame-panel>:last-child{margin-bottom:0}.knowledge .frame-panel>details.card,.knowledge .frame-panel .learning .card{margin:0;padding:0;border:0;border-radius:0;background:none;box-shadow:none}.knowledge .frame-panel>details.card+details.card,.knowledge .frame-panel .learning .card+.card{border-top:1px solid var(--so-line);padding-top:4px}.knowledge.frame>summary.frame-head{justify-content:flex-start}.knowledge form.field-row{grid-template-columns:minmax(0,1fr) auto;align-items:end}.knowledge form.field-row>label,.knowledge form.field-row :is(input,select,button){margin:0}@media(max-width:600px){.knowledge .card{padding:16px}.knowledge h2{font-size:1.1rem}}";
 export declare function knowledgeHtml(view: KnowledgeView, csrf: string, canManage: boolean, draft?: KnowledgeDraft, error?: string): Html;
 export declare function knowledgeContextHtml(snapshot: KnowledgeSelection | null): Html | '';
 import type { Decision, MemoryHit } from './project-memory.js';

package/dist/knowledge-ui.js

@@ -2,7 +2,12 @@ import { STALE_KNOWLEDGE } from './project-knowledge.js';
 import { html, postForm } from './html.js';
 // Hidden fields as they always were: a missing value is an empty field.
 const fields = (data) => Object.fromEntries(Object.entries(data).map(([k, v]) => [k, String(v ?? '')]));
-export const KNOWLEDGE_CSS = `.knowledge{max-width:780px;min-width:0;overflow-wrap:anywhere}.knowledge .card{padding:20px;min-width:0;margin:16px 0}.knowledge h2{margin:0 0 12px}.knowledge form{display:grid;gap:12px;margin:0}.knowledge label{display:grid;gap:6px}.knowledge textarea,.knowledge input,.knowledge select{box-sizing:border-box;width:100%;min-width:0;max-width:100%}.knowledge textarea{resize:vertical;min-height:110px}.knowledge button,.knowledge summary,.knowledge .button-link{min-height:44px}.knowledge button{justify-self:start;white-space:nowrap}.knowledge summary{padding:12px 0;cursor:pointer}.knowledge pre{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit}.knowledge .knowledge-actions{display:flex;gap:12px;flex-wrap:wrap}.knowledge .meta{font-size:.86rem}.knowledge .knowledge-source{display:block}.knowledge details+details{border-top:1px solid var(--so-line)}.memory-stats{display:flex;flex-wrap:wrap;gap:.4rem}.memory-stats span{padding:.15rem .55rem;border-radius:.375rem;background:var(--so-neutral-soft);color:var(--so-neutral-ink)}@media(max-width:600px){.knowledge .card{padding:16px}.knowledge h2{font-size:1.1rem}}`;
+/** A section as a frame (after ReUI's Frame, MIT): its heading on the raised well, its body one paper panel. The
+ * cards inside become hairline-divided rows of that panel, never cards in a card. */
+export function framedSection(heading, body, extra = '') {
+    return html `<section class="${`knowledge frame${extra ? ` ${extra}` : ''}`}"><div class="frame-head"><h2>${heading}</h2></div><div class="frame-panel">${body}</div></section>`;
+}
+export const KNOWLEDGE_CSS = `.knowledge{max-width:780px;min-width:0;overflow-wrap:anywhere}.knowledge .card{padding:20px;min-width:0;margin:16px 0}.knowledge h2{margin:0 0 12px}.knowledge form{display:grid;gap:12px;margin:0}.knowledge label{display:grid;gap:6px}.knowledge textarea,.knowledge input,.knowledge select{box-sizing:border-box;width:100%;min-width:0;max-width:100%}.knowledge textarea{resize:vertical;min-height:110px}.knowledge button,.knowledge summary,.knowledge .button-link{min-height:44px}.knowledge button{justify-self:start;white-space:nowrap}.knowledge summary{padding:12px 0;cursor:pointer}.knowledge pre{white-space:pre-wrap;overflow-wrap:anywhere;font:inherit}.knowledge .knowledge-actions{display:flex;gap:12px;flex-wrap:wrap}.knowledge .meta{font-size:.86rem}.knowledge .knowledge-source{display:block}.knowledge details+details{border-top:1px solid var(--so-line)}.memory-stats{display:flex;flex-wrap:wrap;gap:.4rem}.memory-stats span+span::before{content:"·";margin-right:.4rem}.knowledge.frame{margin:0 0 16px}.knowledge.frame>.frame-head h2,.knowledge.frame>summary.frame-head{margin:0;font-size:13px;font-weight:600;line-height:1.4}.knowledge.frame>summary.frame-head{min-height:44px;padding:4px 10px}.knowledge.frame>.frame-panel{min-width:0}.knowledge.frame>.frame-panel>:first-child{margin-top:0}.knowledge.frame>.frame-panel>:last-child{margin-bottom:0}.knowledge .frame-panel>details.card,.knowledge .frame-panel .learning .card{margin:0;padding:0;border:0;border-radius:0;background:none;box-shadow:none}.knowledge .frame-panel>details.card+details.card,.knowledge .frame-panel .learning .card+.card{border-top:1px solid var(--so-line);padding-top:4px}.knowledge.frame>summary.frame-head{justify-content:flex-start}.knowledge form.field-row{grid-template-columns:minmax(0,1fr) auto;align-items:end}.knowledge form.field-row>label,.knowledge form.field-row :is(input,select,button){margin:0}@media(max-width:600px){.knowledge .card{padding:16px}.knowledge h2{font-size:1.1rem}}`;
 export function knowledgeHtml(view, csrf, canManage, draft, error) {
     const manage = canManage && !!csrf;
     const base = { repo: view.repo, identity: view.identity, revision: view.revision };
@@ -18,7 +23,7 @@ export function knowledgeHtml(view, csrf, canManage, draft, error) {
     }
     const instructions = html `<pre class="knowledge-instructions">${view.knowledge.instructions || 'No project instructions yet.'}</pre>`;
     const editor = manage ? html `<details class="knowledge-editor"${draft?.instructions !== undefined ? html ` open` : ''}><summary>${view.knowledge.instructions ? 'Edit instructions' : 'Add instructions'}</summary>${form('instructions', html `<textarea aria-label="Project instructions" name="instructions" rows="5" maxlength="4000" placeholder="Goals, preferences, and what good work looks like…">${draft?.instructions ?? view.knowledge.instructions}</textarea><button>Save instructions</button>`)}</details>` : '';
-    return html `<section class="knowledge knowledge-library">${error ? html `<p class="problem" role="alert">${error}</p>` : ''}<section class="knowledge-intro"><h2>Instructions</h2>${instructions}${editor}</section><section><h2>References</h2>${refs.length ? refs : html `<p class="meta">Add a spec, design guide, or useful project document.</p>`}${manage ? html `<details class="card"${draft?.title && !draft.id ? html ` open` : ''}><summary>Add reference</summary>${form('save', referenceFields(draft?.id ? {} : draft ?? {}))}</details>` : ''}</section>${history.length ? html `<details><summary>Change history</summary><ol>${history}</ol></details>` : ''}</section>`;
+    return html `<section class="knowledge knowledge-library">${error ? html `<p class="problem" role="alert">${error}</p>` : ''}${framedSection('Instructions', html `${instructions}${editor}`, 'knowledge-intro')}${framedSection('References', html `${refs.length ? refs : html `<p class="meta">Add a spec, design guide, or useful project document.</p>`}${manage ? html `<details class="card"${draft?.title && !draft.id ? html ` open` : ''}><summary>Add reference</summary>${form('save', referenceFields(draft?.id ? {} : draft ?? {}))}</details>` : ''}`)}${history.length ? html `<details class="knowledge frame"><summary class="frame-head">Change history</summary><div class="frame-panel"><ol>${history}</ol></div></details>` : ''}</section>`;
 }
 export function knowledgeContextHtml(snapshot) {
     if (!snapshot)
@@ -32,17 +37,17 @@ export function decisionsHtml(repo, decisions, csrf, canManage, draft, error) {
     const form = (action, body, extra = {}) => postForm('/settings/knowledge/decision', body, { hidden: fields({ ...base, action, ...extra }) });
     const rows = decisions.map(d => html `<details class="card decision" id="decision-${d.id}"><summary><strong>${d.claim}</strong> <span class="meta">#${d.id} · ${d.decidedBy} · ${d.decidedAt.slice(0, 10)}</span></summary><p>${d.why}</p><p class="meta">${d.sourceKind}${d.sourceRef ? ` · ${d.sourceRef}` : ''}${d.supersedes === null ? '' : ` · replaces #${d.supersedes}`}</p>${manage ? form('retire', html `<label>Why it no longer holds<input name="reason" maxlength="500" required></label><button type="submit">Retire</button>`, { decision: d.id }) : ''}</details>`);
     const add = manage ? html `<details class="knowledge-editor"${draft?.claim !== undefined ? html ` open` : ''}><summary>Record a decision</summary>${form('record', html `<label>The choice, in one sentence<input name="claim" maxlength="240" value="${draft?.claim}" required></label><label>Why<textarea name="why" rows="3" maxlength="2000" required>${draft?.why}</textarea></label><button type="submit">Record</button>`)}</details>` : '';
-    return html `<section class="knowledge"><h2>Decisions</h2>${error ? html `<p class="problem" role="alert">${error}</p>` : ''}${rows.length ? rows : html `<p class="meta">No decisions yet. The lead suggests one when a conversation settles a choice.</p>`}${add}</section>`;
+    return framedSection('Decisions', html `${error ? html `<p class="problem" role="alert">${error}</p>` : ''}${rows.length ? rows : html `<p class="meta">No decisions yet. The lead suggests one when a conversation settles a choice.</p>`}${add}`);
 }
 export function memorySearchHtml(repo, query, hits) {
     const kind = (h) => h.kind === 'decision' ? html `<a href="#decision-${h.ref}">decision #${h.ref}</a>` : h.kind === 'conversation' ? 'conversation' : h.kind;
     const results = hits === null ? '' : hits.length === 0 ? html `<p class="meta">Nothing in project memory matches.</p>` : html `<ul class="memory-hits">${hits.map(h => html `<li><strong>${kind(h)}</strong> · ${h.title}<br><span class="meta">${h.snippet}</span></li>`)}</ul>`;
-    return html `<section class="knowledge memory-search"><form method="get" action="/settings/knowledge"><input type="hidden" name="repo" value="${repo}"><label>Search project memory<input name="memory" value="${query}" maxlength="300" placeholder="Search decisions, references, lessons…" type="search" autocomplete="off"></label><button type="submit">Search</button></form>${results}</section>`;
+    return framedSection('Search project memory', html `<form class="field-row" method="get" action="/settings/knowledge"><input type="hidden" name="repo" value="${repo}"><label><span class="visually-hidden">Search project memory</span><input name="memory" value="${query}" maxlength="300" placeholder="Search decisions, references, lessons…" type="search" autocomplete="off"></label><button type="submit">Search</button></form>${results}`, 'memory-search');
 }
 export function proposalsHtml(repo, proposals, status, csrf, canManage) {
     const manage = canManage && !!csrf;
     const line = status === null ? '' : html `<p class="meta memory-stats"><span>${status.sessions.analyzed}/${status.sessions.total} sessions read${status.sessions.failed ? ` · ${status.sessions.failed} failed` : ''}</span><span>${status.openGaps} open gap${status.openGaps === 1 ? '' : 's'}</span><span>Instructions ${status.instructionBytes}/${status.budgetBytes} bytes</span></p><details class="settings-more"><summary>Read new sessions</summary><p class="meta">Run <code>toolroll memory propose --repo ${repo}</code> on this computer.</p></details>`;
     const decide = (p, decision, label) => postForm('/settings/knowledge/proposal', html `<button type="submit">${label}</button>`, { attrs: { class: 'inline' }, hidden: fields({ repo, proposal: p.id, decision }) });
     const cards = proposals.map(p => html `<details class="card proposal" open><summary><strong>${p.title}</strong> <span class="meta">#${p.id} · ${p.kind} · ${p.sessions} sessions</span></summary><p>${p.rationale}</p>${p.beforeText ? html `<pre class="knowledge-instructions">- ${p.beforeText}</pre>` : ''}${p.afterText ? html `<pre class="knowledge-instructions">+ ${p.afterText}</pre>` : ''}<ul class="memory-evidence">${p.evidence.map(ev => html `<li>“${ev.quote.slice(0, 200)}” <span class="meta">${ev.session.split(':')[0] ?? ''}</span></li>`)}</ul>${manage ? html `${decide(p, 'accept', 'Accept')} ${decide(p, 'reject', 'Reject')}` : ''}</details>`);
-    return html `<section class="knowledge"><h2>Proposed from sessions</h2>${line}${cards.length ? cards : html `<p class="meta">Nothing to review. Suggestions appear when the same mistake shows up in two sessions.</p>`}</section>`;
+    return framedSection('Proposed from sessions', html `${line}${cards.length ? cards : html `<p class="meta">Nothing to review. Suggestions appear when the same mistake shows up in two sessions.</p>`}`);
 }

package/dist/lead-progress.d.ts

@@ -20,11 +20,14 @@ export type LeadProgress = {
     step: number;
     id: string;
     outcome: LeadToolOutcome;
-} | {
+}
+/** `final`: the provider's finished answer for this step, sent once and secret-checked whole. */
+ | {
     kind: "text";
     turn: number;
     step: number;
     text: string;
+    final?: true;
 };
 export type LeadToolOutcome = {
     state: "succeeded";

package/dist/lead-progress.js

@@ -1,6 +1,7 @@
 /** Live progress of one lead turn (chat streaming): what the lead is doing
  * and the reply as it is written. Nothing here is durable or authoritative —
  * the finished turn's saved message and cards remain the record. */
+import { topLevelEvent } from "./stream-scope.js";
 /** Plain words for each tool the lead uses, as the person watching reads them. */
 const TOOL_LABELS = {
     get_brief: "Catching up on your work",
@@ -127,7 +128,8 @@ export function claudeStreamReader(onText, capBytes = 1_048_576) {
             catch {
                 continue;
             }
-            if (!record(event) || event["type"] !== "stream_event" || !record(event["event"]))
+            // A subagent's frames (parent_tool_use_id set) are not the lead's reply: they never start, feed or end it.
+            if (!record(event) || !topLevelEvent(event) || event["type"] !== "stream_event" || !record(event["event"]))
                 continue;
             const inner = event["event"];
             if (inner["type"] === "content_block_start") {

package/dist/lead.js

@@ -486,6 +486,10 @@ export async function runLeadTurn(input) {
             return fail("malformed-reply", LEAD_FAILURE_COPY.unreadableUnknownCost, true);
         }
         const answer = result.answer;
+        // The streamed reply's finished text, once, secret-checked whole: only now may its last word show live.
+        if (!direct && input.onProgress !== undefined && !controller.signal.aborted && answer.text !== "" && scanForSecrets(answer.text).length === 0) {
+            progress({ kind: "text", turn: turnId, step: steps, text: answer.text, final: true });
+        }
         // Usage that cannot be true — more input tokens than bytes sent — is a
         // malformed reply with unknown cost, never a number to settle by.
         if (direct && answer.tokensIn > requestBytes) {

package/dist/live-bus.d.ts

@@ -128,6 +128,8 @@ export type LiveRoomOptions = {
     /** A room whose read is costly reads at most once per this window after a signal; every viewer is still re-proved
      * the moment a signal arrives (and again at the read). */
     readSettleMs?: number;
+    /** Told when a room's last viewer has left and the room is gone (state kept per room can go with it). */
+    onEmpty?: (key: unknown) => void;
 };
 /**
  * Rooms of open pages that hear the bus. `presence` says who else is here, as

package/dist/live-bus.js

@@ -309,6 +309,7 @@ export function createLiveRooms(fingerprint, presence, options = {}) {
         if (room.reading !== null)
             clearTimeout(room.reading);
         rooms.delete(key);
+        options.onEmpty?.(key);
         if (rooms.size === 0 && unsubscribe !== null) {
             unsubscribe();
             unsubscribe = null;

package/dist/live-children-read.d.ts

@@ -0,0 +1,52 @@
+import { type LiveRecord } from "./live-records.js";
+export declare const CURSOR_CAP: number;
+/** Longer than any real key block: past this much of a stream's text with no END marker, its key state is known again. */
+export declare const UNKNOWN_KEY_BYTES: number;
+export type ChildView = {
+    k: "child";
+    s: number;
+    at?: string;
+    parent: string | null;
+    via?: number;
+    desc?: string;
+} | {
+    k: "end";
+    s: number;
+    at?: string;
+    ok: boolean | null;
+} | {
+    k: "over";
+}
+/** The file stopped at its size cap: nothing more will be written. */
+ | {
+    k: "cap";
+} | (LiveRecord & {
+    s: number;
+});
+export type ChildWindow = {
+    ok: true;
+    records: ChildView[];
+    cursor: string;
+    /** A cursor was given but didn't hold (forged, stale, another run's or file's): this read started over. */
+    restarted: boolean;
+    /** Output before this read's start isn't shown (the read began at a checkpoint, or waits for one). */
+    earlier: boolean;
+    /** Records that failed a check: counted, never shown. */
+    quarantined: number;
+    /** Lines too long to show that were skipped. */
+    skipped: number;
+    /** More is already written: read again. */
+    more: boolean;
+} | {
+    ok: false;
+    reason: "missing" | "unavailable";
+};
+/** Seal a reader's state under the caller's key (the same form for the run's own file and its subagents'). */
+export declare function sealCursor(state: object, key: Buffer): string;
+/** A sealed state's object when the seal holds and it is within the cap; null otherwise (the caller re-checks it). */
+export declare function openCursor(cursor: string, key: Buffer): Record<string, unknown> | null;
+/** One window of a run's subagents' file. `commands` is the run's own captured answer (store.ts runLiveCommands). */
+export declare function readChildWindow(root: string, runId: number, cursor: string | null, options: {
+    key: Buffer;
+    commands: boolean;
+}): ChildWindow;