@eir-labs/coltrane 0.24.35 → 0.24.36

package/dist/src/cli.d.ts

@@ -34,7 +34,7 @@ export interface CliIO {
      *  every other command reads process.env directly, and moving them is not this change's scope. */
     env?: Record<string, string | undefined>;
 }
-export declare const USAGE = "coltrane 0.24.35\n\n  coltrane validate                     load the genome; exit non-zero on load errors OR on an\n                                        orphan \u2014 a standards/|domain_types/|agents/ file with no\n                                        genome_mutation seal in the tracked genome ledger\n  coltrane seal-genome [<genome_dir>]   bulk-seal a pre-sealing genome: append a genome_mutation\n                                        seal for every standards/|domain_types/|agents/ file not yet\n                                        sealed, via the blessed sealDefinition path. Content is\n                                        byte-unchanged; a second run seals nothing already sealed.\n                                        (default genome_dir: cwd)\n  coltrane dispatch <standard>          run a standard\n  coltrane monitor <gig-id>             report a gig's progress\n  coltrane logs <gig-id>                per-chair logs for a gig\n  coltrane abort <gig-id>               stop a running gig\n  coltrane trace <output-id>            walk an output's provenance\n  coltrane simulate <standard>          cost/shape a standard without running it\n  coltrane health                       engine + store health\n  coltrane serve                        run the MCP server on stdio\n  coltrane enqueue <standard>           queue a gig on the LOCAL file queue (no store, no key)\n                                        (env: COLTRANE_QUEUE_DIR \u2014 its absence is the whole\n                                         difference between local and hosted)\n  coltrane work                         claim one queued gig from the org store and run it\n  coltrane work --check                  report whether this box's drain environment is configured\n                                        and exit without claiming (0 ready, 1 not ready)\n                                        (env: COLTRANE_STORE_URL, COLTRANE_STORE_ANON,\n                                         COLTRANE_AGENT_TOKEN; results drain via\n                                         COLTRANE_DRAIN_URL + COLTRANE_DRAIN_KEY;\n                                         checkpoints under COLTRANE_WORKER_CHECKPOINTS,\n                                         default ~/.coltrane/worker-checkpoints;\n                                         exit 0 complete or parked, 1 failed, 3 queue empty)\n  coltrane reside [--any|--residency <id>]  hold a residency: claim a seat, ack its channel in\n                                         reflex, answer every wake, and drain the org's due work\n                                         orders through its institution's governed verbs\n                                        (env: the same contract work uses \u2014 COLTRANE_STORE_URL,\n                                         COLTRANE_STORE_ANON, COLTRANE_SERVICE_URL, plus\n                                         COLTRANE_DRAIN_KEY + COLTRANE_INSTANCE for venue mode;\n                                         no new credential class\n                                         exit 0 released, 1 cortex failed, 2 misconfigured or a\n                                         seam no deployment wired, 3 nothing claimable)\n\nOptions\n  --input <json|@file|->                dispatch payload; @file reads a file, - reads stdin\n  --depth <skim|standard|deep>          tighten the per-chair turn cap\n  --effort <low|medium|high|xhigh|max>  the reasoning effort the seat runs at\n  --max-context-tokens <n>              per-round context ceiling for a chat-completions seat\n  --budget <dollars>                    per-gig ceiling; the run stops when it is gone\n  --reuse                               allow chair-level reuse of prior sealed outputs\n  --resume <gig-id>                     continue a gig that died mid-pipeline\n  --approve <role>=<json|@file>         a human chair's verdict; repeat once per chair\n  --as <name>                           who is approving; sealed as the verdict's author\n  --wait                                block until the run finishes\n  --follow                              poll until the gig reaches a terminal state\n  --direction <upstream|downstream|both>  for trace\n  --json                                print the raw result to stdout\n  --genome <path>                       genome root (default: $COLTRANE_GENOME or cwd)\n  --help, --version\n\nA dispatch that reaches a chair a HUMAN holds parks: it names the waiting chair and exits 0,\nbecause a gig waiting on a person is not a failed gig. Approve it on the resume \u2014\n\n  coltrane dispatch <standard> --resume <gig> \\\n      --approve approve=@verdict.json --as eugene\n\n--input is NOT required on an approve-only resume: when every remaining chair is human the\ncheckpoint's recorded payload stands and the omission inherits it. If you DO pass --input it is\nchecked against the checkpoint, and a disagreement still refuses the resume.\n";
+export declare const USAGE = "coltrane 0.24.36\n\n  coltrane validate                     load the genome; exit non-zero on load errors OR on an\n                                        orphan \u2014 a standards/|domain_types/|agents/ file with no\n                                        genome_mutation seal in the tracked genome ledger\n  coltrane seal-genome [<genome_dir>]   bulk-seal a pre-sealing genome: append a genome_mutation\n                                        seal for every standards/|domain_types/|agents/ file not yet\n                                        sealed, via the blessed sealDefinition path. Content is\n                                        byte-unchanged; a second run seals nothing already sealed.\n                                        (default genome_dir: cwd)\n  coltrane dispatch <standard>          run a standard\n  coltrane monitor <gig-id>             report a gig's progress\n  coltrane logs <gig-id>                per-chair logs for a gig\n  coltrane abort <gig-id>               stop a running gig\n  coltrane trace <output-id>            walk an output's provenance\n  coltrane simulate <standard>          cost/shape a standard without running it\n  coltrane health                       engine + store health\n  coltrane serve                        run the MCP server on stdio\n  coltrane enqueue <standard>           queue a gig on the LOCAL file queue (no store, no key)\n                                        (env: COLTRANE_QUEUE_DIR \u2014 its absence is the whole\n                                         difference between local and hosted)\n  coltrane work                         claim one queued gig from the org store and run it\n  coltrane work --check                  report whether this box's drain environment is configured\n                                        and exit without claiming (0 ready, 1 not ready)\n                                        (env: COLTRANE_STORE_URL, COLTRANE_STORE_ANON,\n                                         COLTRANE_AGENT_TOKEN; results drain via\n                                         COLTRANE_DRAIN_URL + COLTRANE_DRAIN_KEY;\n                                         checkpoints under COLTRANE_WORKER_CHECKPOINTS,\n                                         default ~/.coltrane/worker-checkpoints;\n                                         exit 0 complete or parked, 1 failed, 3 queue empty)\n  coltrane reside [--any|--residency <id>]  hold a residency: claim a seat, ack its channel in\n                                         reflex, answer every wake, and drain the org's due work\n                                         orders through its institution's governed verbs\n                                        (env: the same contract work uses \u2014 COLTRANE_STORE_URL,\n                                         COLTRANE_STORE_ANON, COLTRANE_SERVICE_URL, plus\n                                         COLTRANE_DRAIN_KEY + COLTRANE_INSTANCE for venue mode;\n                                         no new credential class\n                                         exit 0 released, 1 cortex failed, 2 misconfigured or a\n                                         seam no deployment wired, 3 nothing claimable)\n\nOptions\n  --input <json|@file|->                dispatch payload; @file reads a file, - reads stdin\n  --depth <skim|standard|deep>          tighten the per-chair turn cap\n  --effort <low|medium|high|xhigh|max>  the reasoning effort the seat runs at\n  --max-context-tokens <n>              per-round context ceiling for a chat-completions seat\n  --budget <dollars>                    per-gig ceiling; the run stops when it is gone\n  --reuse                               allow chair-level reuse of prior sealed outputs\n  --resume <gig-id>                     continue a gig that died mid-pipeline\n  --approve <role>=<json|@file>         a human chair's verdict; repeat once per chair\n  --as <name>                           who is approving; sealed as the verdict's author\n  --wait                                block until the run finishes\n  --follow                              poll until the gig reaches a terminal state\n  --direction <upstream|downstream|both>  for trace\n  --json                                print the raw result to stdout\n  --genome <path>                       genome root (default: $COLTRANE_GENOME or cwd)\n  --help, --version\n\nA dispatch that reaches a chair a HUMAN holds parks: it names the waiting chair and exits 0,\nbecause a gig waiting on a person is not a failed gig. Approve it on the resume \u2014\n\n  coltrane dispatch <standard> --resume <gig> \\\n      --approve approve=@verdict.json --as eugene\n\n--input is NOT required on an approve-only resume: when every remaining chair is human the\ncheckpoint's recorded payload stands and the omission inherits it. If you DO pass --input it is\nchecked against the checkpoint, and a disagreement still refuses the resume.\n";
 interface Parsed {
     cmd: string | undefined;
     positional: string[];

package/dist/src/runtime.d.ts

@@ -870,5 +870,21 @@ export declare function genomeHash(standard: Standard): string;
  *  source movement's sealed records does an edge of type T carry — and two layers answering "does
  *  this record satisfy this declared type" differently is the #263 defect wearing a new hat. */
 export declare function outputSatisfiesType(output: OutputRecord, declared: string): boolean;
+/** The near-miss refusal message. BOTH doors call this so the refusal reads identically down to the
+ *  character, whichever door caught it — the preflight throws it inside a RuntimeError, the hosted door
+ *  returns it as a typed JSON refusal. */
+export declare function unknownGigInputMessage(offendingKey: string, declaredKey: string, standardSlug: string): string;
+/** Partition a dispatch payload's keys against a standard's declared inputs, exactly as the preflight
+ *  does. A key that is not declared but NORMALIZES to a declared key which is ALSO present is a NEAR
+ *  MISS (the first one found is returned; the caller refuses on it). Every OTHER undeclared key is an
+ *  EXTRA, returned sorted. A refused near-miss is never also an extra. `isPresent` answers whether a
+ *  declared key carries a value in the payload — the collision only bites when both spellings are present. */
+export declare function partitionGigInputKeys(payloadKeys: readonly string[], declaredInputs: readonly string[], isPresent: (declaredKey: string) => boolean): {
+    nearMiss?: {
+        key: string;
+        declaredKey: string;
+    };
+    extras: string[];
+};
 export declare function runGig(standard: Standard, gigInput: Record<string, unknown>, deps: RunDeps): Promise<GigResult>;
 export {};

package/dist/src/runtime.js

@@ -388,6 +388,39 @@ export function outputSatisfiesType(output, declared) {
         return true;
     return false;
 }
+// contract-unknown-gig-input-v1 / contract-post-time-gig-input-v1 — the near-miss vocabulary, shared.
+// The LOCAL preflight (below, in runGig) and the HOSTED dispatch door (src/server.ts) partition the
+// same payload against the same declared inputs; extracting the partition and its message here is what
+// makes the two doors identical BY CONSTRUCTION rather than by two copies drifting apart (O2).
+/** Normalize a gig-input key for near-miss detection: case, hyphens, underscores and spaces removed,
+ *  so `grant_requirements` and `grant-requirements` collapse to one string. Byte-for-byte the regex the
+ *  preflight's `missingGigInput` hint uses, so the two never disagree about what "resembles" means. */
+const normalizeGigInputKey = (k) => k.toLowerCase().replace(/[_\-\s]/g, "");
+/** The near-miss refusal message. BOTH doors call this so the refusal reads identically down to the
+ *  character, whichever door caught it — the preflight throws it inside a RuntimeError, the hosted door
+ *  returns it as a typed JSON refusal. */
+export function unknownGigInputMessage(offendingKey, declaredKey, standardSlug) {
+    return `dispatch payload key "${offendingKey}" is not declared by standard "${standardSlug}", but normalizes to declared gig input "${declaredKey}", which is ALSO present — one of the two spellings is being dropped and the caller cannot see which. Gig input keys are the hyphenated type slug, so rename "${offendingKey}" to "${declaredKey}" or drop it.`;
+}
+/** Partition a dispatch payload's keys against a standard's declared inputs, exactly as the preflight
+ *  does. A key that is not declared but NORMALIZES to a declared key which is ALSO present is a NEAR
+ *  MISS (the first one found is returned; the caller refuses on it). Every OTHER undeclared key is an
+ *  EXTRA, returned sorted. A refused near-miss is never also an extra. `isPresent` answers whether a
+ *  declared key carries a value in the payload — the collision only bites when both spellings are present. */
+export function partitionGigInputKeys(payloadKeys, declaredInputs, isPresent) {
+    const declaredSet = new Set(declaredInputs);
+    const declaredPresent = declaredInputs.filter((d) => isPresent(d));
+    const extras = [];
+    for (const key of payloadKeys) {
+        if (declaredSet.has(key))
+            continue; // a declared key is read, never undeclared
+        const declaredKey = declaredPresent.find((d) => normalizeGigInputKey(d) === normalizeGigInputKey(key));
+        if (declaredKey !== undefined)
+            return { nearMiss: { key, declaredKey }, extras: [] };
+        extras.push(key);
+    }
+    return { extras: extras.sort() };
+}
 export async function runGig(standard, gigInput, deps) {
     // A resumed run CONTINUES the gig it resumes: same id, so the restored outputs stay in-gig
     // and `OutputStore.trace` (which scopes its walk to one gig_id) still reaches them. Two ids
@@ -715,24 +748,22 @@ export async function runGig(standard, gigInput, deps) {
     //     them sorted, never refused (harmless metadata keeps the gig running). A refused near-miss is
     //     never in `extras`, so it is never also reported as an extra (F1 — never twice for one key).
     {
-        const declaredPresent = [...standardInputs].filter((d) => gigInput[d] !== undefined);
-        const extras = [];
-        for (const key of Object.keys(gigInput)) {
-            if (standardInputs.has(key))
-                continue; // a declared key is read, never undeclared
-            const collidesWith = declaredPresent.find((d) => normalizeKey(d) === normalizeKey(key));
-            if (collidesWith !== undefined) {
-                throw new RuntimeError(`dispatch payload key "${key}" is not declared by standard "${standard.slug}", but normalizes to declared gig input "${collidesWith}", which is ALSO present — one of the two spellings is being dropped and the caller cannot see which. Gig input keys are the hyphenated type slug, so rename "${key}" to "${collidesWith}" or drop it.`);
-            }
-            extras.push(key);
+        // contract-post-time-gig-input-v1 (O2) — the partition and its refusal message now live in the
+        // shared `partitionGigInputKeys` / `unknownGigInputMessage` builders, which the hosted dispatch
+        // door (src/server.ts) also calls, so the two doors cannot drift into two vocabularies. The
+        // behaviour here is unchanged: a near miss throws the same RuntimeError, the extras emit the same
+        // event. `isPresent` is `gigInput[d] !== undefined`, exactly the collision predicate as before.
+        const part = partitionGigInputKeys([...Object.keys(gigInput)], [...standardInputs], (d) => gigInput[d] !== undefined);
+        if (part.nearMiss !== undefined) {
+            throw new RuntimeError(unknownGigInputMessage(part.nearMiss.key, part.nearMiss.declaredKey, standard.slug));
         }
         // The `undeclared_gig_input` variant is intentionally NOT in the GigProgressEvent union: adding it
         // there would force a matching case in every exhaustive switch over the union (gig_tracker.ts),
         // which this change's grant (src/runtime.ts, src/cli.ts) may not touch. It is emitted through a
         // widening cast — exactly the shape the laws read via `evType`/`keysOf` — so a sink that recognises
         // it sees `{ type, standard, keys }` and one that does not simply no-ops on an unknown `type`.
-        if (extras.length > 0) {
-            const ev = { type: "undeclared_gig_input", standard: standard.slug, keys: extras.sort() };
+        if (part.extras.length > 0) {
+            const ev = { type: "undeclared_gig_input", standard: standard.slug, keys: part.extras };
             emit(ev);
         }
     }