@cotal-ai/connector-jcode 0.35.0 → 0.37.0

package/dist/private-state.d.ts

@@ -1,8 +1,33 @@
+/** Ensure one directory through a pinned parent fd. `beforeEnsure` runs after the parent is
+ * pinned and the leaf is classified, before unlink/mkdir, so the smoke can swap that parent. */
+export declare function ensurePinnedPrivateDirectory(path: string, { replaceSymlink, requireOwner, beforeEnsure }?: {
+    replaceSymlink?: boolean;
+    requireOwner?: boolean;
+    beforeEnsure?: () => void;
+}): void;
+/** Remove only one exact connector-owned mirror destination. Each parent is opened with
+ * O_NOFOLLOW|O_DIRECTORY through the previous fd, then the leaf is unlinked through that pinned
+ * parent. A parent swapped for a symlink after it was walked cannot redirect the unlink. Optional
+ * `beforeUnlink` exists so the smoke can swap a parent between pin and unlink; production callers
+ * omit it. */
+export declare function removeCredentialMirror(home: string, destinationRelative: string, beforeUnlink?: () => void): boolean;
+/** Copy one allowlisted credential through the same pinned-parent walk as removal. Optional
+ * `beforeCopy` exists so the smoke can swap a parent between pin and copy; production callers omit it. */
+export declare function copyCredentialFile(home: string, source: string, destinationRelative: string, beforeCopy?: () => void): boolean;
 export interface CredentialSources {
     jcodeHome: string;
     appConfigDir: string;
     externalHome: string;
 }
+export interface CredentialMirrorEntry {
+    family: "jcode-home" | "app-config" | "external-static" | "external-agent";
+    source: string;
+    destinationRelative: string;
+}
+/** The complete allowlisted credential mirror inventory for one reconciliation pass. Dynamic
+ * families include both current source names and prior managed destinations, so removed names remain
+ * addressable for exact cleanup. */
+export declare function jcodeCredentialMirrorInventory(home: string, sources: CredentialSources): CredentialMirrorEntry[];
 /** Copy the SDK-recognized provider material for this launch. The SDK's default inheritance links
  * rotating auth files; current jcode rejects those links in its external mirror, so the connector
  * owns a fresh, owner-only copy instead. */

package/dist/private-state.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"private-state.d.ts","sourceRoot":"","sources":["../src/private-state.ts"],"names":[],"mappings":"AAiIA,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAMD;;4CAE4C;AAC5C,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,oBAAsB,GAAG,IAAI,CAoBxF;AAED,MAAM,WAAW,eAAe;IAC9B,gHAAgH;IAChH,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAqC7D"}
+{"version":3,"file":"private-state.d.ts","sourceRoot":"","sources":["../src/private-state.ts"],"names":[],"mappings":"AAgFA;gGACgG;AAChG,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,EACZ,EAAE,cAAsB,EAAE,YAAoB,EAAE,YAAY,EAAE,GAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,IAAI,CAAA;CAAO,GACnJ,IAAI,CA6BN;AAsID;;;;cAIc;AACd,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAyCpH;AAED;0GAC0G;AAC1G,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,mBAAmB,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,IAAI,GAAG,OAAO,CAiD9H;AAWD,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,YAAY,GAAG,YAAY,GAAG,iBAAiB,GAAG,gBAAgB,CAAC;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;CAC7B;AAMD;;oCAEoC;AACpC,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,qBAAqB,EAAE,CA6BhH;AAED;;4CAE4C;AAC5C,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,oBAAsB,GAAG,IAAI,CAIxF;AAED,MAAM,WAAW,eAAe;IAC9B,gHAAgH;IAChH,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,IAAI,IAAI,CAAC;CACjB;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,CAqC7D"}

package/dist/startup-diagnostics.d.ts

@@ -1,3 +1,13 @@
+export type JcodeConnectorFailureCode = "model_prefix_rejected" | "model_refused" | "model_mismatch";
+/** A bounded connector-owned startup refusal. Only its allow-listed code is rendered publicly. */
+export declare class JcodeConnectorError extends Error {
+    readonly code: JcodeConnectorFailureCode;
+    constructor(code: JcodeConnectorFailureCode, message: string, options?: ErrorOptions);
+}
+/** Start the per-seat connector diagnostic log before any private Jcode process is launched. */
+export declare function installJcodeDiagnosticLog(home: string): string;
+/** Write one connector-owned diagnostic to the terminal and the seat's private connector log. */
+export declare function writeJcodeDiagnostic(message: string): void;
 /** A bounded, connector-owned account of a provider refusal during the mandatory readiness turn.
  * It deliberately contains only a provider error code and a model/effort value the connector could
  * classify; the original Harness API message may include private configuration or child output. */
@@ -20,6 +30,14 @@ export declare class JcodeEffortRefusal extends Error {
 /** Compose a bounded effort-refusal diagnostic. `invalid_request` is intentionally fixed: Jcode
  * rejected this API operation, while provider-supplied codes and text are untrusted. */
 export declare function jcodeEffortRefusal(error: unknown, requestedTier: string, effectiveModel: string): JcodeEffortRefusal;
+/**
+ * The model an effort-refusal diagnostic may name.
+ *
+ * Prefer the operator pin. RuntimeInfo can still report the session default after `setModel`
+ * (measured: a CLI spawn that died on a variant-tier refusal recorded deepseek-v4-pro despite
+ * `--model grok-4.6`). Fall back to RuntimeInfo only when no pin was requested.
+ */
+export declare function effortRefusalModel(requested: string | undefined, runtime: string | undefined): string;
 /**
  * Classify only the Jcode SDK's invalid-request response and only when both fields are safely
  * extractable. Everything else retains the existing scrubbed startup diagnostic.

package/dist/startup-diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-diagnostics.d.ts","sourceRoot":"","sources":["../src/startup-diagnostics.ts"],"names":[],"mappings":"AAEA;;mGAEmG;AACnG,qBAAa,6BAA8B,SAAQ,KAAK;IAEpD,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,kBAAkB;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,OAAO,GAAG,kBAAkB,EACvC,KAAK,EAAE,MAAM;CAIzB;AAED;;4CAE4C;AAC5C,qBAAa,kBAAmB,SAAQ,KAAK;IAIzC,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE;IAL5C,QAAQ,CAAC,YAAY,qBAAqB;gBAG/B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,SAAS,MAAM,EAAE;CAI7C;AAsDD;wFACwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,kBAAkB,CAEpH;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,GAAG,SAAS,CAM1G"}
+{"version":3,"file":"startup-diagnostics.d.ts","sourceRoot":"","sources":["../src/startup-diagnostics.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GAAG,uBAAuB,GAAG,eAAe,GAAG,gBAAgB,CAAC;AAErG,kGAAkG;AAClG,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,yBAAyB;gBAA/B,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAG9F;AAID,gGAAgG;AAChG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB9D;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG1D;AAED;;mGAEmG;AACnG,qBAAa,6BAA8B,SAAQ,KAAK;IAEpD,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,kBAAkB;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,OAAO,GAAG,kBAAkB,EACvC,KAAK,EAAE,MAAM;CAIzB;AAED;;4CAE4C;AAC5C,qBAAa,kBAAmB,SAAQ,KAAK;IAIzC,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE;IAL5C,QAAQ,CAAC,YAAY,qBAAqB;gBAG/B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,SAAS,MAAM,EAAE;CAI7C;AAsDD;wFACwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,kBAAkB,CAEpH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAErG;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,GAAG,SAAS,CAM1G"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/connector-jcode",
   "description": "Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.",
-  "version": "0.35.0",
+  "version": "0.37.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -29,9 +29,9 @@
     "esbuild": "^0.28.0",
     "tsx": "^4.22.4",
     "zod": "^4.4.3",
-    "@cotal-ai/connector-core": "0.35.0",
+    "@cotal-ai/connector-core": "0.37.0",
     "@cotal-ai/smoke-kit": "0.0.0",
-    "@cotal-ai/core": "0.35.0"
+    "@cotal-ai/core": "0.37.0"
   },
   "files": [
     "dist"