toolroll 0.9.94 → 0.9.95

package/dist/chat-actions.d.ts

@@ -72,7 +72,7 @@ export declare const CHAT_ACTIONS: {
     readonly sweep_file: {
         readonly label: "Start sweep";
         readonly protected: true;
-        readonly password: true;
+        readonly password: false;
     };
     readonly sweep_cancel_rest: {
         readonly label: "Cancel the rest";
@@ -157,7 +157,7 @@ export declare const CHAT_ACTIONS: {
     readonly flow_browser: {
         readonly label: "Allow browser";
         readonly protected: true;
-        readonly password: true;
+        readonly password: false;
     };
     readonly flow_browser_off: {
         readonly label: "Turn off browser";
@@ -249,6 +249,86 @@ export declare const CHAT_ACTIONS: {
         readonly protected: false;
         readonly password: false;
     };
+    readonly mode_revoke: {
+        readonly label: "End automatic approvals";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly flow_unattended_off: {
+        readonly label: "Stop running on its own";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly flow_archive: {
+        readonly label: "Archive flow";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly provider_resume: {
+        readonly label: "Resume agent";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly worker_note: {
+        readonly label: "Note on worker";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly lead_identity: {
+        readonly label: "Name your lead";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly task_archive: {
+        readonly label: "Put away task";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly task_restore: {
+        readonly label: "Restore task";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly incident_resolve: {
+        readonly label: "Resolve incident";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly memory_decide: {
+        readonly label: "Decide memory proposal";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly finding_send: {
+        readonly label: "Send finding";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly finding_resend: {
+        readonly label: "Send finding back";
+        readonly protected: false;
+        readonly password: false;
+    };
+    readonly task_reopen: {
+        readonly label: "Reopen task";
+        readonly protected: true;
+        readonly password: false;
+    };
+    readonly revision_accept: {
+        readonly label: "Accept plan revision";
+        readonly protected: true;
+        readonly password: false;
+    };
+    readonly revision_reject: {
+        readonly label: "Reject plan revision";
+        readonly protected: true;
+        readonly password: false;
+    };
+    readonly flow_unattended: {
+        readonly label: "Let flow run on its own";
+        readonly protected: true;
+        readonly password: false;
+    };
     readonly lead_about_you: {
         readonly label: "Remember";
         readonly protected: false;
@@ -257,7 +337,7 @@ export declare const CHAT_ACTIONS: {
     readonly scope_approve: {
         readonly label: "Approve work";
         readonly protected: true;
-        readonly password: true;
+        readonly password: false;
     };
     readonly result_accept: {
         readonly label: "Accept";
@@ -272,13 +352,16 @@ export declare const CHAT_ACTIONS: {
     readonly task_resume: {
         readonly label: "Resume task";
         readonly protected: true;
-        readonly password: true;
+        readonly password: false;
     };
 };
 export type ChatAction = keyof typeof CHAT_ACTIONS;
-/** Protected actions a paired phone may confirm behind its own explicit
- * yes/cancel challenge instead of the console's secure screen. Password
- * actions and long or redacted terms never qualify. */
+/** Approvals (owner's decision, docs/plans/toolroll-cards.md): a person's own yes from their chat stands without a password.
+ * Only a person's tap in a linked chat, or their click in a signed-in browser, ever runs one. */
+export declare const APPROVAL_ACTIONS: ReadonlySet<ChatAction>;
+/** Protected actions a linked chat may confirm behind its own explicit yes/cancel challenge instead of the review screen.
+ * Password actions and long or redacted terms never qualify: the card must show the exact terms. */
+export declare const APPROVAL_TERM_CHARS = 3000;
 export declare const CHALLENGE_ACTIONS: ReadonlySet<ChatAction>;
 /** Actions about the person themselves, in no project: their card carries no project (repo ""). */
 export declare const OWNER_ACTIONS: ReadonlySet<ChatAction>;
@@ -297,7 +380,7 @@ export declare function sharedActionReviewPath(id: number): string;
 export declare function mintSharedActionReview(store: Store, who: VerifiedApprover, id: number, root: string, now: Date): {
     payload: {
         version: 1;
-        operation: "code_map_holdout_end" | "code_map_switch" | "decision_record" | "decision_retire" | "flow_browser" | "flow_browser_off" | "flow_card_add" | "flow_card_approve" | "flow_card_assign" | "flow_card_cancel" | "flow_card_choose" | "flow_card_comment" | "flow_card_move" | "flow_card_send_back" | "flow_card_watch" | "flow_create" | "flow_edit" | "flow_script_save" | "flow_starter" | "flow_trigger_add" | "flow_trigger_pause" | "flow_trigger_remove" | "flow_trigger_resume" | "kit_setup" | "knowledge_instructions" | "knowledge_remove" | "knowledge_restore" | "knowledge_save" | "lead_about_you" | "result_accept" | "scope_approve" | "skill_disable" | "skill_enable" | "skill_import" | "skill_restore" | "skill_test" | "subagent_answer" | "subagent_ask" | "subagent_create" | "subagent_memory" | "subagent_note" | "subagent_routine" | "subagent_soul" | "subagent_state" | "subagent_tools" | "subagent_undo" | "suggestion_not_now" | "sweep_cancel_rest" | "sweep_file" | "task_cancel" | "task_resume" | "tool_add" | "tool_remove" | "trial_stop";
+        operation: "code_map_holdout_end" | "code_map_switch" | "decision_record" | "decision_retire" | "finding_resend" | "finding_send" | "flow_archive" | "flow_browser" | "flow_browser_off" | "flow_card_add" | "flow_card_approve" | "flow_card_assign" | "flow_card_cancel" | "flow_card_choose" | "flow_card_comment" | "flow_card_move" | "flow_card_send_back" | "flow_card_watch" | "flow_create" | "flow_edit" | "flow_script_save" | "flow_starter" | "flow_trigger_add" | "flow_trigger_pause" | "flow_trigger_remove" | "flow_trigger_resume" | "flow_unattended" | "flow_unattended_off" | "incident_resolve" | "kit_setup" | "knowledge_instructions" | "knowledge_remove" | "knowledge_restore" | "knowledge_save" | "lead_about_you" | "lead_identity" | "memory_decide" | "mode_revoke" | "provider_resume" | "result_accept" | "revision_accept" | "revision_reject" | "scope_approve" | "skill_disable" | "skill_enable" | "skill_import" | "skill_restore" | "skill_test" | "subagent_answer" | "subagent_ask" | "subagent_create" | "subagent_memory" | "subagent_note" | "subagent_routine" | "subagent_soul" | "subagent_state" | "subagent_tools" | "subagent_undo" | "suggestion_not_now" | "sweep_cancel_rest" | "sweep_file" | "task_archive" | "task_cancel" | "task_reopen" | "task_restore" | "task_resume" | "tool_add" | "tool_remove" | "trial_stop" | "worker_note";
         request: {
             [x: string]: unknown;
         };
@@ -321,6 +404,10 @@ export type SharedActionOptions = {
         password: string;
     };
     confirm?: boolean;
+    /** The web door only: a person's signed-in browser session, never a token. */
+    person?: boolean;
+    /** A linked chat's own binding: which chat the yes came from, for the ledger. */
+    binding?: number;
 };
 /** Called inside the proposal door's transaction, after ownership and session
  * checks. No password or review receipt is ever part of a saved proposal. */