toolroll 0.9.84 → 0.9.86

package/dist/agent-fence.d.ts

@@ -98,8 +98,9 @@ export type FenceGrants = {
      * SEATBELT_NO_KEYCHAIN). Only fenceFor gives it, to a build's agent. Never a check's (one with sign-ins gets those in
      * its environment, invoke.ts keychainSignIns), never a tool server's (serverGrantsOf). */
     keychain?: true;
-    /** macOS: a project check's launch, whose Chromium may start (sandbox-runtime.ts SEATBELT_CHROMIUM). Only fenceFor
-     * sets it, only for kind "check". */
+    /** macOS: a project check's launch, or a flow script zone's with approved browser use, whose Chromium may start
+     * (sandbox-runtime.ts SEATBELT_CHROMIUM). Only fenceFor sets it: always for kind "check", for kind "flow" only when
+     * its caller proved the approval (flow-browser.ts). */
     browser?: true;
     /** A `sign-ins` check's exact sign-in files, read again inside the home denies (check-access.ts, signInGrants). */
     signIns?: SignInGrants;
@@ -309,15 +310,15 @@ export declare function sandboxedSpawn(file: string, args: readonly string[], fe
     env: Record<string, string>;
 };
 /**
- * What each agent's fence gives it, by permission mode: the one table README's "What an agent can reach" shows
- * (fenceSummaryMarkdown; a test holds them equal).
+ * What each agent's fence gives it, by permission mode: the one table "What an agent can reach" in
+ * docs/guide/security.md shows (fenceSummaryMarkdown; a test holds them equal).
  */
 export declare const FENCE_SUMMARY: readonly {
     agent: string;
     auto: string;
     full: string;
 }[];
-/** FENCE_SUMMARY as README's markdown table. */
+/** FENCE_SUMMARY as the security guide's markdown table. */
 export declare function fenceSummaryMarkdown(): string;
 /** What a `sign-ins` check reads and writes beyond its fence (check-access.ts): its exact sign-in files, its own Claude
  * transcript folder (macOS) and Codex's session and log folders. */
@@ -391,6 +392,9 @@ export type FenceContext = {
     provider?: string;
     /** Scratch folders (a flow's) that stay denied whole inside the pool, whatever the policy. */
     scratchRoots?: readonly string[];
+    /** A flow's script zone whose browser use a person approved, proved at launch (flow-browser.ts browserStanding):
+     * Chromium's one service, as a check gets it. Read for kind "flow" only; every other kind ignores it. */
+    browser?: true;
 };
 /** A launch's sealed sandbox terms (builder.ts launchSandboxOf): its policy version, read denies and mach services. A
  * launch with none sealed is v1 with none of them. */

package/dist/agent-fence.js

@@ -1075,8 +1075,8 @@ export function sandboxedSpawn(file, args, fence, grants = NO_GRANTS, cwd, temp)
     return srtSpawn(file, args, srtTermsOf(fence, grants), cwd ?? process.cwd(), temp);
 }
 /**
- * What each agent's fence gives it, by permission mode: the one table README's "What an agent can reach" shows
- * (fenceSummaryMarkdown; a test holds them equal).
+ * What each agent's fence gives it, by permission mode: the one table "What an agent can reach" in
+ * docs/guide/security.md shows (fenceSummaryMarkdown; a test holds them equal).
  */
 export const FENCE_SUMMARY = [
     {
@@ -1090,7 +1090,7 @@ export const FENCE_SUMMARY = [
         full: "the same reads and writes, with the fence; its commands reach the network only when the project's network is open",
     },
 ];
-/** FENCE_SUMMARY as README's markdown table. */
+/** FENCE_SUMMARY as the security guide's markdown table. */
 export function fenceSummaryMarkdown() {
     return ["| | Auto | Full access |", "|---|---|---|", ...FENCE_SUMMARY.map(row => `| ${row.agent} | ${row.auto} | ${row.full} |`)].join("\n");
 }
@@ -1167,8 +1167,9 @@ export function fenceFor(kind, ctx) {
         ...(written === null ? {} : { writes: written.writes, readOnly: [...new Set([...made.readOnly, ...written.readOnly])].sort() }),
         ...(ctx.network === undefined ? {} : { network: ctx.network }),
         ...(ctx.machLookup === undefined || ctx.machLookup.length === 0 ? {} : { machLookup: [...ctx.machLookup] }),
-        // A project's checks may drive a browser (Playwright's Chromium); builds, flows and tool servers don't get it.
-        ...(kind === "check" ? { browser: true } : {}),
+        // A project's checks may drive a browser (Playwright's Chromium), and so may a flow's script zone whose browser use
+        // a person approved (the caller proves it at launch); builds, tool servers and every other flow launch don't get it.
+        ...(kind === "check" || (kind === "flow" && ctx.browser === true) ? { browser: true } : {}),
         // A build's agent signs in from the keychain (Claude Code does); nothing else it launches reaches it.
         ...(kind === "build" ? { keychain: true } : {}),
         // Under a write allowlist these are out of reach already; where the launch writes anywhere, they are denied by name.

package/dist/agent-onboard.d.ts

@@ -125,6 +125,8 @@ export type OnboardIo = {
     /** Whether the project can open pull requests at Complete, in one line: on, the one command that turns it on, or
      * what to fix first. Turning it on stays a person's password step. */
     pullRequests?: (repo: string) => Promise<string>;
+    /** For a project that uses youiyoux, the one line that says its change requests become tasks; null otherwise. */
+    youiyoux?: (repo: string) => Promise<string | null>;
     /** --starter, as typed: a comma list of starter flow ids to switch on. */
     starterFlag?: string | undefined;
     /** The project's starter flows, and switching one on — its trigger and zones. */

package/dist/agent-onboard.js

@@ -381,6 +381,7 @@ export async function runOnboard(io) {
     const mcp = agents.map(agent => ({ agent, command: mcpLine(agent) }));
     const projectData = project.state === "added" || project.state === "already" ? { path: project.path, added: project.state === "added" } : null;
     const pullRequests = projectData === null || io.pullRequests === undefined ? null : await io.pullRequests(projectData.path);
+    const youiyoux = projectData === null || io.youiyoux === undefined ? null : await io.youiyoux(projectData.path);
     const offered = projectData === null ? [] : await offerStarters(io, projectData.path);
     if (!Array.isArray(offered))
         return refuse("usage", offered.usage, 2);
@@ -401,6 +402,7 @@ export async function runOnboard(io) {
             project: projectData,
             ...(projectProblem === null ? {} : { projectProblem }),
             ...(pullRequests === null ? {} : { pullRequests }),
+            ...(youiyoux === null ? {} : { youiyoux }),
             ...(offered.length === 0 ? {} : { starters: offered.map(one => ({ ...one, ...(one.state === "off" ? { command: `toolroll onboard --starter ${one.id}` } : {}) })) }),
             agents: reports,
             skill: skillData,
@@ -415,6 +417,7 @@ export async function runOnboard(io) {
     io.write([
         projectLine,
         ...(pullRequests === null ? [] : [`pull requests ${pullRequests}`]),
+        ...(youiyoux === null ? [] : [`youiyoux  ${youiyoux}`]),
         ...starterLines(offered),
         `agents    ${reports.map(one => `${one.name}: ${[one.words, one.plan].filter(Boolean).join(" · ")}`).join("; ")}`,
         skillLine(),

package/dist/assignment.js

@@ -6,7 +6,7 @@ import { currentActor, withActor } from "./actor.js";
 import { replacedWords } from "./task-status.js";
 import { COMPLETER_ACTOR, COMPLETION_ACTION, COMPLETION_BY_MACHINE, COMPLETION_BY_PERSON, familyChangedFiles, landedReasonOf, personCompletionOwed } from "./result-completion.js";
 import { homedir } from "node:os";
-import { readSchemaVersion, stopFactOf } from "./store.js";
+import { readSchemaVersion, refArchived, stopFactOf } from "./store.js";
 import { approvalOf, liveReleaseOf, machineActing } from "./scope.js";
 import { openWorkDecisionOf, taskWorkSummaryOf, workDecisionAction } from "./work-summary.js";
 import { evidenceRoot, readVerifiedArtifact, readVerifiedReport, verifyArtifact } from "./evidence.js";
@@ -170,14 +170,15 @@ export function assignmentOf(store, taskId, now, access, root, memo) {
     const attention = family.problem === null ? [] : [family.problem];
     // Family admission above precedes question bodies. The newest result
     // does not settle an unanswered question on any earlier version.
-    const questions = [current, ...family.versions.filter(version => version.id !== current.id)].flatMap(version => {
+    // A put-away earlier version (v145) is history: its question and its queue place never hold the current one up.
+    const questions = [current, ...family.versions.filter(version => version.id !== current.id && !refArchived(store, version.refId))].flatMap(version => {
         const decision = openWorkDecisionOf(store, version.refId, now);
         return decision === null ? [] : [{ taskId: version.id, decision }];
     });
     // A finished task label cannot hide a lease or an unfinished process record.
     const busy = (version) => version.state === "running" || store.currentLiveLease(version.refId, now) !== null ||
         store.runsFor(version.refId).some(run => run.outcome === null || store.stopQuiescenceProblem(run.id) !== null);
-    const earlierActive = family.versions.filter(version => version.id !== current.id && (version.state === "queued" || busy(version)));
+    const earlierActive = family.versions.filter(version => version.id !== current.id && ((version.state === "queued" && !refArchived(store, version.refId)) || busy(version)));
     // Of those, how many have work under way (the rest only wait in the queue).
     const earlierRunning = earlierActive.filter(busy).length;
     const unfinished = store.runsFor(current.refId).find(run => run.outcome === null) ?? null;