@cotal-ai/connector-jcode 0.48.2 → 0.49.0

package/dist/route-identity.d.ts

@@ -1,12 +1,11 @@
 /**
  * Say which provider is actually carrying a seat's model.
  *
- * The connector already refuses to join under a model label it did not receive, and that guarantee
- * stopped at the model. A seat could be truthfully labelled with the model an operator asked for
- * while its traffic was carried by a component nobody named: one seat was requested as a given
- * model, logged every line under a different provider's name, and died inside a third component's
- * plugin. Nothing in the roster, the spawn confirmation, or the manager's exit line named the route,
- * so establishing it meant reading the seat's private log by hand (#785).
+ * A seat can be pinned to the model an operator asked for while its traffic is carried by a component
+ * nobody named: one seat was requested as a given model, logged every line under a different
+ * provider's name, and died inside a third component's plugin. Nothing in the roster, the spawn
+ * confirmation, or the manager's exit line named the route, so establishing it meant reading the
+ * seat's private log by hand (#785).
  *
  * `RuntimeInfo` carries `provider` and `routes` in the same response the model check already reads,
  * so this is a reporting gap, not a discovery problem.
@@ -25,13 +24,15 @@ export interface RuntimeIdentity {
     providers?: string[];
     routes?: RouteInfo[];
 }
+/** The route serving `model`. RuntimeInfo's active provider disambiguates duplicate model ids. */
+export declare function activeModelRoute(runtime: RuntimeIdentity | undefined, model: string): RouteInfo | undefined;
 /**
  * One line naming the effective route for `model`.
  *
- * The route matching the requested model wins, because `runtime.provider` is the session default and
- * can differ from the provider actually serving this model. When neither is known the line says so
- * explicitly rather than guessing or going quiet: an unknown route is itself worth reporting, since
- * silence is what made this expensive to diagnose.
+ * The requested pin selects the model whose route is described. RuntimeInfo.model can lag behind a
+ * successful setModel, while RuntimeInfo.provider identifies the active route among duplicate model
+ * ids. When no matching route is known, the provider remains useful diagnostic context. When neither
+ * is known the line says so explicitly rather than guessing or going quiet.
  */
 export declare function describeRoute(runtime: RuntimeIdentity | undefined, model: string): string;
 /**

package/dist/route-identity.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"route-identity.d.ts","sourceRoot":"","sources":["../src/route-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,uFAAuF;AACvF,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;CACtB;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAIrG"}
+{"version":3,"file":"route-identity.d.ts","sourceRoot":"","sources":["../src/route-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,uFAAuF;AACvF,MAAM,WAAW,SAAS;IACxB,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAED,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,MAAM,CAAC,EAAE,SAAS,EAAE,CAAC;CACtB;AAED,kGAAkG;AAClG,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,CAG3G;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAOzF;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAIrG"}

package/dist/startup-diagnostics.d.ts

@@ -1,9 +1,16 @@
-export type JcodeConnectorFailureCode = "model_prefix_rejected" | "model_refused" | "model_mismatch" | "private_state" | "readiness_timeout";
+export type JcodeConnectorFailureCode = "model_prefix_rejected" | "model_refused" | "model_mismatch" | "private_state" | "readiness_timeout" | "sessions_enumeration_failed";
 /** A bounded connector-owned startup refusal. Only its allow-listed code is rendered publicly. */
 export declare class JcodeConnectorError extends Error {
     readonly code: JcodeConnectorFailureCode;
     constructor(code: JcodeConnectorFailureCode, message: string, options?: ErrorOptions);
 }
+/** Listing stored sessions killed the harness. Cause and path are connector-owned, not child stderr. */
+export declare class JcodeSessionsEnumerationFailure extends Error {
+    readonly sessionsPath: string;
+    readonly causeText: string;
+    readonly code: "sessions_enumeration_failed";
+    constructor(sessionsPath: string, causeText: string);
+}
 /** Start the per-seat connector diagnostic log before any private Jcode process is launched. */
 export declare function installJcodeDiagnosticLog(home: string): string;
 /** Write one connector-owned diagnostic to the terminal and the seat's private connector log. */
@@ -23,21 +30,31 @@ export declare class JcodeReadinessProviderRefusal extends Error {
 export declare class JcodeEffortRefusal extends Error {
     readonly requestedTier: string;
     readonly effectiveModel: string;
+    readonly provider: string;
+    readonly apiMethod: string | undefined;
     readonly acceptedLadder: readonly string[];
     readonly providerCode = "invalid_request";
-    constructor(requestedTier: string, effectiveModel: string, acceptedLadder: readonly string[]);
+    constructor(requestedTier: string, effectiveModel: string, provider: string, apiMethod: string | undefined, acceptedLadder: readonly string[]);
+}
+/** A verified model route whose provider/profile has no reasoning-effort surface. */
+export declare class JcodeEffortUnsupported extends Error {
+    readonly requestedTier: string;
+    readonly effectiveModel: string;
+    readonly provider: string;
+    readonly apiMethod: string | undefined;
+    constructor(requestedTier: string, effectiveModel: string, provider: string, apiMethod: string | undefined);
 }
 /** Compose a bounded effort-refusal diagnostic. `invalid_request` is intentionally fixed: Jcode
  * rejected this API operation, while provider-supplied codes and text are untrusted. */
-export declare function jcodeEffortRefusal(error: unknown, requestedTier: string, effectiveModel: string): JcodeEffortRefusal;
-/**
- * The model an effort-refusal diagnostic may name.
- *
- * Prefer the operator pin. RuntimeInfo can still report the session default after `setModel`
- * (measured: a CLI spawn that died on a variant-tier refusal recorded deepseek-v4-pro despite
- * `--model grok-4.6`). Fall back to RuntimeInfo only when no pin was requested.
- */
-export declare function effortRefusalModel(requested: string | undefined, runtime: string | undefined): string;
+export interface JcodeEffortIdentity {
+    model: string;
+    provider: string;
+    apiMethod?: string;
+}
+/** Classify the two stable invalid-request outcomes without rendering downstream text. HarnessError
+ * prefixes its message with the stable code, so the anchored `invalid_request:` predicate below is
+ * also the code gate; a second `error.code` check would be redundant. */
+export declare function jcodeEffortRefusal(error: unknown, requestedTier: string, identity: JcodeEffortIdentity): JcodeEffortRefusal | JcodeEffortUnsupported;
 /**
  * Classify only the Jcode SDK's invalid-request response and only when both fields are safely
  * extractable. Everything else retains the existing scrubbed startup diagnostic.

package/dist/startup-diagnostics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"startup-diagnostics.d.ts","sourceRoot":"","sources":["../src/startup-diagnostics.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GACjC,uBAAuB,GACvB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,mBAAmB,CAAC;AAExB,kGAAkG;AAClG,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,yBAAyB;gBAA/B,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAG9F;AAID,gGAAgG;AAChG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB9D;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG1D;AAED;;mGAEmG;AACnG,qBAAa,6BAA8B,SAAQ,KAAK;IAEpD,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,kBAAkB;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,OAAO,GAAG,kBAAkB,EACvC,KAAK,EAAE,MAAM;CAIzB;AAED;;4CAE4C;AAC5C,qBAAa,kBAAmB,SAAQ,KAAK;IAIzC,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE;IAL5C,QAAQ,CAAC,YAAY,qBAAqB;gBAG/B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,cAAc,EAAE,SAAS,MAAM,EAAE;CAI7C;AAsDD;wFACwF;AACxF,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,GAAG,kBAAkB,CAEpH;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAErG;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,GAAG,SAAS,CAM1G"}
+{"version":3,"file":"startup-diagnostics.d.ts","sourceRoot":"","sources":["../src/startup-diagnostics.ts"],"names":[],"mappings":"AAKA,MAAM,MAAM,yBAAyB,GACjC,uBAAuB,GACvB,eAAe,GACf,gBAAgB,GAChB,eAAe,GACf,mBAAmB,GACnB,6BAA6B,CAAC;AAElC,kGAAkG;AAClG,qBAAa,mBAAoB,SAAQ,KAAK;IAChC,QAAQ,CAAC,IAAI,EAAE,yBAAyB;gBAA/B,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAG9F;AAED,wGAAwG;AACxG,qBAAa,+BAAgC,SAAQ,KAAK;IAItD,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM;IAJ5B,QAAQ,CAAC,IAAI,EAAG,6BAA6B,CAAU;gBAG5C,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,MAAM;CAI7B;AAID,gGAAgG;AAChG,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAoB9D;AAED,iGAAiG;AACjG,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAG1D;AAED;;mGAEmG;AACnG,qBAAa,6BAA8B,SAAQ,KAAK;IAEpD,QAAQ,CAAC,YAAY,EAAE,MAAM;IAC7B,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,kBAAkB;IAChD,QAAQ,CAAC,KAAK,EAAE,MAAM;gBAFb,YAAY,EAAE,MAAM,EACpB,SAAS,EAAE,OAAO,GAAG,kBAAkB,EACvC,KAAK,EAAE,MAAM;CAIzB;AAED;;4CAE4C;AAC5C,qBAAa,kBAAmB,SAAQ,KAAK;IAIzC,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE;IAP5C,QAAQ,CAAC,YAAY,qBAAqB;gBAG/B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,cAAc,EAAE,SAAS,MAAM,EAAE;CAI7C;AAED,qFAAqF;AACrF,qBAAa,sBAAuB,SAAQ,KAAK;IAE7C,QAAQ,CAAC,aAAa,EAAE,MAAM;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS;gBAH7B,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAAG,SAAS;CAIzC;AAsDD;wFACwF;AACxF,MAAM,WAAW,mBAAmB;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;yEAEyE;AACzE,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,OAAO,EACd,aAAa,EAAE,MAAM,EACrB,QAAQ,EAAE,mBAAmB,GAC5B,kBAAkB,GAAG,sBAAsB,CAc7C;AAED;;;GAGG;AACH,wBAAgB,gCAAgC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,GAAG,SAAS,CAM1G"}

package/dist/stored-sessions.d.ts

@@ -0,0 +1,41 @@
+export declare function storedSessionsPath(jcodeHome: string): string;
+export type StoredSessionsInspection = {
+    kind: "absent";
+    path: string;
+} | {
+    kind: "empty-directory";
+    path: string;
+} | {
+    kind: "populated";
+    path: string;
+    entries: number;
+} | {
+    kind: "not-a-directory";
+    path: string;
+} | {
+    kind: "unreadable";
+    path: string;
+    code: string;
+};
+/**
+ * A local read of the seat's own `sessions/` directory. This runs on the startup path of every
+ * managed seat, so it must never throw: a home the connector cannot read is a question for the
+ * harness, not a reason to kill a seat that would otherwise start. Both reads here can fail on a
+ * home whose permissions were perturbed from outside (operator chmod, restored backup, container
+ * UID remap): `lstat` when the home itself is unreadable, `readdir` when only `sessions/` is.
+ * Anything but a real empty directory falls through to the ordinary listing attempt.
+ */
+export declare function inspectStoredSessions(jcodeHome: string): StoredSessionsInspection;
+/** True only for a real empty directory. A missing directory is a first launch, not this defect. */
+export declare function isEmptyStoredSessionsDirectory(inspection: StoredSessionsInspection): boolean;
+export declare function classifyStoredSessionPanic(stderr: string): string | undefined;
+/**
+ * Operator-facing cause: allow-listed phrases only, never arbitrary child bytes.
+ *
+ * The fallback is deliberately non-committal. Naming a specific cause for text we do not
+ * recognise sends the operator to the wrong place: an out-of-memory spawn failure rendered as
+ * "harness connection closed" points at sockets. An unrecognised cause is reported as such.
+ */
+export declare const UNRECOGNISED_STORED_SESSION_CAUSE = "unrecognised harness failure";
+export declare function boundStoredSessionCause(text: string): string;
+//# sourceMappingURL=stored-sessions.d.ts.map

package/dist/stored-sessions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stored-sessions.d.ts","sourceRoot":"","sources":["../src/stored-sessions.ts"],"names":[],"mappings":"AAYA,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED,MAAM,MAAM,wBAAwB,GAChC;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,wBAAwB,CAajF;AAED,oGAAoG;AACpG,wBAAgB,8BAA8B,CAAC,UAAU,EAAE,wBAAwB,GAAG,OAAO,CAE5F;AAaD,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG7E;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,iCAAiC,CAAC;AAEhF,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK5D"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cotal-ai/connector-jcode",
   "description": "Cotal connector for Jcode: a host-mode mesh peer driven through Jcode's Harness API bridge.",
-  "version": "0.48.2",
+  "version": "0.49.0",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
@@ -29,9 +29,9 @@
     "esbuild": "^0.28.0",
     "tsx": "^4.22.4",
     "zod": "^4.4.3",
-    "@cotal-ai/core": "0.48.2",
-    "@cotal-ai/smoke-kit": "0.0.0",
-    "@cotal-ai/connector-core": "0.48.2"
+    "@cotal-ai/connector-core": "0.49.0",
+    "@cotal-ai/core": "0.49.0",
+    "@cotal-ai/smoke-kit": "0.0.0"
   },
   "files": [
     "dist"