@openmarket/rooms-client 0.10.0 → 0.11.0

package/README.md

@@ -6,6 +6,12 @@ The OM Rooms protocol client: wire types and frame schemas, the WebSocket client
 
 Everything in this package runs unmodified in a browser: no `node:` or `bun:` imports, no filesystem or OS access, static imports only. Environment reads go through `envString()` in `endpoints.ts`, which returns `undefined` where `process` does not exist. The repo's boundary gate enforces this on every CI run; if you need daemon-side facilities (SQLite, vault, HTTP server), they live in the `om` CLI, not here.
 
+Provider adapters and agent runtime contracts are also CLI-owned. In particular,
+LLM messages, streamed turn events, and usage accounting live under
+`packages/cli/src/agent/`; this package must not import a provider SDK or expose
+those contracts as public subpaths. Only browser-safe rooms protocol and view-model
+types belong here, and the CLI may depend on them in that direction.
+
 ## Usage
 
 There is no root export; import the surface you need by subpath:
@@ -16,7 +22,7 @@ import { RoomClientMessageType, SUPPORTED_ROOM_PROTOCOL_VERSION } from "@openmar
 import type { RoomSpaceSummary } from "@openmarket/rooms-client/social-types";
 ```
 
-Subpaths: `client`, `ws-client`, `social-client`, `social-types`, `library-publisher`, `doc-reconcile`, `topic-uri`, `doc-uri`, `endpoints`, `jwt`, `names`, `suggestion-attribution`, `merge3`, `types`, `version`, `agent/{armed-mode, lane-draft, lane-prompts, library-context, library-model, room-context, sidebar-model, topic-inbox, topic-view-batcher}`, `agent/clients/common`, `shared/{rooms-protocol, mentions, emoji-data}`.
+Subpaths: `client`, `ws-client`, `social-client`, `social-types`, `library-publisher`, `doc-reconcile`, `topic-uri`, `doc-uri`, `endpoints`, `jwt`, `names`, `suggestion-attribution`, `merge3`, `types`, `version`, `agent/{armed-mode, lane-draft, lane-prompts, library-context, library-model, room-context, sidebar-model, topic-inbox, topic-view-batcher}`, `shared/{rooms-protocol, mentions, emoji-data}`.
 
 Bun consumers resolve raw TypeScript via the `bun` export condition; Node and bundlers get compiled JS plus `.d.ts` from `dist/`.
 

package/dist/agent/armed-mode.d.ts

@@ -181,10 +181,11 @@ export declare function canPostAutonomously(input: {
  * successful `post()`. Mutates `state`.
  */
 export declare function recordAutonomousPost(state: ArmedRoomState, now?: number): void;
-/** Record token spend from an armed turn against the session cost guard. Reads
- *  `totalTokens` from a turn's `usage` (pi-ai shape) when present; a no-op when
- *  the provider reported nothing (the post counter is the fallback guard). */
-export declare function recordArmedTurnUsage(state: ArmedRoomState, usage: Record<string, unknown> | undefined): void;
+/** Record token spend from an armed turn against the session cost guard. The
+ *  caller owns provider usage shapes; armed mode needs only the canonical
+ *  total. A missing or invalid value is a no-op because the post counter is
+ *  the fallback guard. */
+export declare function recordArmedTurnUsage(state: ArmedRoomState, totalTokens: number | undefined): void;
 /** A human (non-agent) POST that is NOT our own resets the consecutive-chain
  *  counter, freeing a chain-limit pause. Pure. */
 export declare function isHumanResetEntry(entry: RoomLedgerEntry, ownHandle: string, ownUserId: string): boolean;

package/dist/agent/armed-mode.js

@@ -299,25 +299,14 @@ export function recordAutonomousPost(state, now = Date.now()) {
     state.consecutiveAutoPosts += 1;
     state.postsThisSession += 1;
 }
-/** Record token spend from an armed turn against the session cost guard. Reads
- *  `totalTokens` from a turn's `usage` (pi-ai shape) when present; a no-op when
- *  the provider reported nothing (the post counter is the fallback guard). */
-export function recordArmedTurnUsage(state, usage) {
-    const total = readTotalTokens(usage);
-    if (total > 0)
-        state.tokensThisSession += total;
-}
-function readTotalTokens(usage) {
-    if (!usage)
-        return 0;
-    const direct = usage.totalTokens;
-    if (typeof direct === "number" && Number.isFinite(direct) && direct > 0)
-        return direct;
-    // Fall back to summing input + output if a client reports those instead.
-    const input = typeof usage.input === "number" ? usage.input : 0;
-    const output = typeof usage.output === "number" ? usage.output : 0;
-    const sum = input + output;
-    return Number.isFinite(sum) && sum > 0 ? sum : 0;
+/** Record token spend from an armed turn against the session cost guard. The
+ *  caller owns provider usage shapes; armed mode needs only the canonical
+ *  total. A missing or invalid value is a no-op because the post counter is
+ *  the fallback guard. */
+export function recordArmedTurnUsage(state, totalTokens) {
+    if (typeof totalTokens !== "number" || !Number.isFinite(totalTokens) || totalTokens <= 0)
+        return;
+    state.tokensThisSession += totalTokens;
 }
 /** A human (non-agent) POST that is NOT our own resets the consecutive-chain
  *  counter, freeing a chain-limit pause. Pure. */

package/dist/shared/om-permissions.d.ts

@@ -0,0 +1,17 @@
+import type { RoomRole } from "./rooms-protocol.js";
+/** Channel-scope actions, byte-stable in store order. */
+export declare const OM_ROOM_PERMISSION_ACTIONS: readonly ["post", "edit-own", "delete-any", "pin", "invite", "remove-member", "set-read-only", "manage-roles", "mute", "kick", "ban", "unban", "view-audit", "manage-room", "mass-mention"];
+export type OmRoomPermissionAction = (typeof OM_ROOM_PERMISSION_ACTIONS)[number];
+/** Space-scope actions, byte-stable in store order. */
+export declare const OM_SPACE_PERMISSION_ACTIONS: readonly ["create-channel", "manage-server", "manage-server-roles", "create-invite", "manage-invites", "manage-members", "manage-nicknames", "change-nickname", "administrator"];
+export type OmSpacePermissionAction = (typeof OM_SPACE_PERMISSION_ACTIONS)[number];
+/** Any grantable action. The two vocabularies are disjoint; a role's
+ *  grants[] may hold values from both. */
+export type OmPermissionAction = OmRoomPermissionAction | OmSpacePermissionAction;
+/** The space ladder (RoomSpaceMember.role). Channel tiers are RoomRole. */
+export type OmSpaceLadderRole = "owner" | "admin" | "librarian" | "member";
+/** Channel ladder base: what each channel tier natively holds. */
+export declare const OM_ROOM_PERMISSION_MATRIX: Record<RoomRole, ReadonlySet<OmRoomPermissionAction>>;
+/** Space ladder base: preserves the pre-grants behavior exactly (managers
+ *  hold everything, everyone may change their own nickname). */
+export declare const OM_SPACE_PERMISSION_MATRIX: Record<OmSpaceLadderRole, ReadonlySet<OmSpacePermissionAction>>;

package/dist/shared/om-permissions.js

@@ -0,0 +1,73 @@
+// The permission vocabulary shared by the store, relay, and clients: the
+// channel-scope actions (per-room moderation) and the space-scope actions
+// (server management), plus the fixed ladder base matrices. Parity-pinned to
+// the store's permission services; the store stays the authority (every verb
+// re-checks server-side), this mirror only decides what clients offer.
+// Effective permissions = ladder base UNION the grants of every held named
+// role (one role's grants[] may mix both vocabularies). Pure and browser-safe.
+/** Channel-scope actions, byte-stable in store order. */
+export const OM_ROOM_PERMISSION_ACTIONS = [
+    "post",
+    "edit-own",
+    "delete-any",
+    "pin",
+    "invite",
+    "remove-member",
+    "set-read-only",
+    "manage-roles",
+    "mute",
+    "kick",
+    "ban",
+    "unban",
+    "view-audit",
+    "manage-room",
+    "mass-mention",
+];
+/** Space-scope actions, byte-stable in store order. */
+export const OM_SPACE_PERMISSION_ACTIONS = [
+    // create channels in this server
+    "create-channel",
+    // rename server, icon
+    "manage-server",
+    // create/edit/delete/assign named roles within reach
+    "manage-server-roles",
+    // mint a server invite
+    "create-invite",
+    // list/revoke invites, set/rotate/clear join code
+    "manage-invites",
+    // add and remove server members
+    "manage-members",
+    // change other members' nicknames
+    "manage-nicknames",
+    // change own nickname
+    "change-nickname",
+    // every action in both scopes, admin rank envelope; never the owner-only
+    // verbs (archive/purge space, ownership transfers)
+    "administrator",
+];
+/** Channel ladder base: what each channel tier natively holds. */
+export const OM_ROOM_PERMISSION_MATRIX = {
+    owner: new Set(OM_ROOM_PERMISSION_ACTIONS),
+    admin: new Set(OM_ROOM_PERMISSION_ACTIONS),
+    mod: new Set([
+        "post",
+        "edit-own",
+        "delete-any",
+        "pin",
+        "invite",
+        "remove-member",
+        "mute",
+        "kick",
+        "view-audit",
+        "mass-mention",
+    ]),
+    member: new Set(["post", "edit-own"]),
+};
+/** Space ladder base: preserves the pre-grants behavior exactly (managers
+ *  hold everything, everyone may change their own nickname). */
+export const OM_SPACE_PERMISSION_MATRIX = {
+    owner: new Set(OM_SPACE_PERMISSION_ACTIONS),
+    admin: new Set(OM_SPACE_PERMISSION_ACTIONS),
+    librarian: new Set(["change-nickname"]),
+    member: new Set(["change-nickname"]),
+};

package/dist/shared/rooms-protocol.d.ts

@@ -106,6 +106,7 @@ export declare const RoomServerMessageType: {
     readonly TOPIC_UPDATED: "TOPIC_UPDATED";
     readonly DOC_CHANGED: "DOC_CHANGED";
     readonly FRIEND_UPDATED: "FRIEND_UPDATED";
+    readonly SPACE_ROLES_UPDATED: "SPACE_ROLES_UPDATED";
 };
 export declare function addBounded<T>(set: Set<T>, value: T, max: number): void;
 export type RoomServerMessageType = (typeof RoomServerMessageType)[keyof typeof RoomServerMessageType];
@@ -175,6 +176,9 @@ export interface RoomMeta {
     viewerRole?: RoomRole | null | undefined;
     /** Head event sequence; diff against the read cursor for unread badges. */
     headSeq?: number | undefined;
+    /** Epoch milliseconds of the newest visible message or sealed message.
+     *  Unlike room metadata timestamps, this changes only with chat content. */
+    lastMessageAt?: number | undefined;
     /** Topics dial for this channel. Absent reads as "allowed" since the
      *  2026-07-12 dial-default flip (post-flip relays always advertise the
      *  stored value, "off" included); explicit "off" means topics are inert. */
@@ -842,6 +846,9 @@ export interface RoomSpace {
     /** Archived docs twin: keeps the Archive row reachable when only docs
      *  are archived. */
     archivedDocCount?: number | undefined;
+    /** Space permission model revision; delegate-facing UI gates on >= 3.
+     *  Absent on stores that predate space permissions. */
+    permissionsVersion?: number | undefined;
 }
 export interface RoomSpacesPayload {
     requestId?: string;
@@ -895,6 +902,12 @@ export interface SpaceUpdatedPayload {
     /** Rides WITH archived on hard deletion (see RoomUpdatedPayload). */
     deleted?: boolean | undefined;
 }
+/** Space roles changed (role CRUD, member role assignment, @everyone
+ *  grants): a poke, not a diff. Clients invalidate their space-roles cache
+ *  and refetch lazily. */
+export interface SpaceRolesUpdatedPayload {
+    spaceId: string;
+}
 export interface RoomSpaceJoinedPayload {
     requestId?: string;
     space: RoomSpace;
@@ -1428,6 +1441,10 @@ export type RoomServerMessage = {
     type: typeof RoomServerMessageType.SPACE_UPDATED;
     payload: SpaceUpdatedPayload;
     timestamp?: number;
+} | {
+    type: typeof RoomServerMessageType.SPACE_ROLES_UPDATED;
+    payload: SpaceRolesUpdatedPayload;
+    timestamp?: number;
 } | {
     type: typeof RoomServerMessageType.SPACE_INVITE;
     payload: SpaceInvitePayload;

package/dist/shared/rooms-protocol.js

@@ -105,6 +105,7 @@ export const RoomServerMessageType = {
     TOPIC_UPDATED: "TOPIC_UPDATED",
     DOC_CHANGED: "DOC_CHANGED",
     FRIEND_UPDATED: "FRIEND_UPDATED",
+    SPACE_ROLES_UPDATED: "SPACE_ROLES_UPDATED",
 };
 export function addBounded(set, value, max) {
     set.add(value);

package/dist/social-client.d.ts

@@ -1,4 +1,4 @@
-import type { RoomTopicAttention } from "./shared/rooms-protocol.js";
+import type { RoomRole, RoomTopicAttention } from "./shared/rooms-protocol.js";
 import type { RoomBookmarkSaved, RoomBookmarksResult, RoomDmConversation, RoomDmHistory, RoomDmSendResult, RoomDmUnreadConversation, RoomDoc, RoomDocAttribution, RoomDocChanges, RoomDocConflictHead, RoomDocEditingLease, RoomDocProvenance, RoomDocRevision, RoomDocRunRevertResult, RoomDocWriteResult, RoomFollow, RoomFollowResult, RoomFriend, RoomFriendRequests, RoomNotificationInboxResult, RoomPollVotersResult, RoomPublicProfile, RoomRepliesReadResult, RoomRepliesResult, RoomRestEvent, RoomSocialConfig, RoomSpaceRestorePlan, RoomSpaceRestoreReceipt, RoomSuggestion, RoomSuggestionRequest, RoomUserBlock, RoomUserBlocksResult } from "./social-types.js";
 export type { RoomAttachment, RoomBookmark, RoomBookmarkSaved, RoomBookmarksResult, RoomDmConversation, RoomDmHistory, RoomDmMessage, RoomDmParticipant, RoomDmSendResult, RoomDmUnreadConversation, RoomDocAttribution, RoomDocEditingLease, RoomDocMergeRegion, RoomDocRevisionSource, RoomDocRunRevertResult, RoomFollow, RoomFollowResult, RoomFriend, RoomFriendRequest, RoomFriendRequests, RoomNotificationInboxItem, RoomNotificationInboxResult, RoomNotificationKind, RoomNotificationMessageData, RoomNotifyQuietHours, RoomPollOptionVoters, RoomPollVotersResult, RoomPublicProfile, RoomRepliesReadResult, RoomRepliesResult, RoomReplyInboxItem, RoomRestEvent, RoomSocialConfig, RoomSpaceNotificationOverride, RoomSpaceRestoreAction, RoomSpaceRestoreActionKind, RoomSpaceRestorePlan, RoomSpaceRestoreReceipt, RoomSpaceRestoreSummary, RoomSuggestion, RoomSuggestionIntent, RoomSuggestionRequest, RoomSuggestionSource, RoomsNotificationSettings, RoomUserBlock, RoomUserBlocksResult, } from "./social-types.js";
 /** Largest per-file size any tier accepts (plus tier). The server enforces
@@ -178,6 +178,9 @@ export interface RoomSpaceSummary {
     /** Archived docs in this server: the row must stay reachable when only
      *  docs are archived, since they have no other retrieval surface. */
     archivedDocCount?: number | undefined;
+    /** Space permission model revision; delegate-facing UI gates on >= 3.
+     *  Absent on stores that predate space permissions. */
+    permissionsVersion?: number | undefined;
 }
 export declare function listRoomSpacesViaChat(config: RoomSocialConfig): Promise<RoomSpaceSummary[]>;
 export interface RoomSpaceMember {
@@ -204,6 +207,13 @@ export interface RoomSpaceRole {
     color: string | null;
     hoist: boolean;
     position: number;
+    /** Permission actions this role grants, mixing the channel and space
+     *  vocabularies (see shared/om-permissions). Absent on stores that
+     *  predate roles-v2 grants. */
+    grants?: string[];
+    /** Discord's "Allow anyone to @mention this role". Absent on stores
+     *  that predate it. */
+    mentionable?: boolean;
 }
 export declare function listSpaceRoles(config: RoomSocialConfig, spaceId: string): Promise<RoomSpaceRole[]>;
 export declare function createSpaceRole(config: RoomSocialConfig, spaceId: string, input: {
@@ -215,7 +225,12 @@ export declare function updateSpaceRole(config: RoomSocialConfig, spaceId: strin
     name?: string;
     color?: string | null;
     hoist?: boolean;
+    /** Discord's "Allow anyone to @mention this role". Only send it to
+     *  stores that emit the field (strict schemas 400 on unknown keys). */
+    mentionable?: boolean;
     position?: number;
+    /** Full replace of the role's grants. */
+    grants?: string[];
 }): Promise<RoomSpaceRole>;
 export declare function deleteSpaceRole(config: RoomSocialConfig, spaceId: string, roleId: string): Promise<void>;
 /** A channel webhook: the Discord-compatible ingest capability. The
@@ -347,6 +362,35 @@ export declare function updateRoomChannel(config: RoomSocialConfig, room: string
 export declare function resolveRoomChannel(config: RoomSocialConfig, room: string): Promise<Record<string, unknown> & {
     topicsPolicy?: "off" | "allowed" | "required";
 }>;
+/** Set or clear a space channel's role guest list. Null (or empty) clears:
+ *  the channel opens back up to every space member. */
+export declare function setRoomAllowedRoles(config: RoomSocialConfig, room: string, allowedRoleIds: string[] | null, 
+/** Per-member access rules (union with roles). ABSENT = leave the stored
+ *  list untouched (and let a legacy conversion seed from current members);
+ *  null or [] = clear; array = set. */
+allowedUserIds?: string[] | null, reason?: string): Promise<Record<string, unknown>>;
+export interface RoomAccessMeta {
+    /** Active role guest list; null = open to every space member. */
+    allowedRoleIds: string[] | null;
+    /** Per-member access rules (union with the roles); null = none. */
+    allowedUserIds: string[] | null;
+    /** Tiers allowed to post; the store default is all four. */
+    postingRoles: RoomRole[];
+    access: string | null;
+    spaceId: string | null;
+    kind: string | null;
+    /** The caller's resolved channel role (owner fallback = creator). */
+    viewerRole: RoomRole | null;
+}
+/** Authoritative access meta for the settings surface: the room's guest
+ *  list, posting tiers and the caller's resolved role. Rides
+ *  resolveRoomChannel (the relay's route ordering), which is also where the
+ *  store places viewerRole (existence-hiding 404 preserved as a throw). */
+export declare function resolveRoomAccess(config: RoomSocialConfig, room: string): Promise<RoomAccessMeta>;
+/** Owner-only. The old owner becomes a channel admin; audited server-side. */
+export declare function transferRoomOwnership(config: RoomSocialConfig, room: string, targetUserId: string, reason?: string): Promise<void>;
+/** Lift a channel ban (no WS frame exists for unban; REST is the path). */
+export declare function unbanRoomMember(config: RoomSocialConfig, room: string, targetUserId: string, reason?: string): Promise<void>;
 /** Archive a channel (owner/admin): drops from listings, refuses posts. */
 export declare function archiveRoomChannel(config: RoomSocialConfig, room: string): Promise<{
     roomId?: string;
@@ -358,6 +402,8 @@ export declare function updateRoomSpace(config: RoomSocialConfig, spaceId: strin
     access?: "open" | "invite";
     iconUrl?: string | null;
 }): Promise<RoomSpaceSummary>;
+/** Owner-only. The old owner becomes a space admin; audited server-side. */
+export declare function transferSpaceOwnership(config: RoomSocialConfig, spaceId: string, targetUserId: string, reason?: string): Promise<void>;
 /** Archive a server (owner only). */
 export declare function archiveRoomSpace(config: RoomSocialConfig, spaceId: string): Promise<{
     archived?: boolean;

package/dist/social-client.js

@@ -552,6 +552,62 @@ export async function resolveRoomChannel(config, room) {
     const result = await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/resolve`, { method: "GET" });
     return result.room;
 }
+/** Set or clear a space channel's role guest list. Null (or empty) clears:
+ *  the channel opens back up to every space member. */
+export async function setRoomAllowedRoles(config, room, allowedRoleIds, 
+/** Per-member access rules (union with roles). ABSENT = leave the stored
+ *  list untouched (and let a legacy conversion seed from current members);
+ *  null or [] = clear; array = set. */
+allowedUserIds, reason) {
+    const result = await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/allowed-roles`, {
+        method: "PATCH",
+        body: {
+            allowedRoleIds,
+            ...(allowedUserIds !== undefined ? { allowedUserIds } : {}),
+            ...(reason ? { reason } : {}),
+        },
+    });
+    return result.room ?? {};
+}
+/** Authoritative access meta for the settings surface: the room's guest
+ *  list, posting tiers and the caller's resolved role. Rides
+ *  resolveRoomChannel (the relay's route ordering), which is also where the
+ *  store places viewerRole (existence-hiding 404 preserved as a throw). */
+export async function resolveRoomAccess(config, room) {
+    const meta = (await resolveRoomChannel(config, room)) ?? {};
+    const allowed = Array.isArray(meta.allowedRoleIds)
+        ? meta.allowedRoleIds.filter((value) => typeof value === "string")
+        : null;
+    const allowedUsers = Array.isArray(meta.allowedUserIds)
+        ? meta.allowedUserIds.filter((value) => typeof value === "string")
+        : null;
+    const posting = Array.isArray(meta.postingRoles)
+        ? meta.postingRoles.filter((value) => value === "owner" || value === "admin" || value === "mod" || value === "member")
+        : [];
+    const viewer = typeof meta.viewerRole === "string" ? meta.viewerRole : null;
+    return {
+        allowedRoleIds: allowed && allowed.length > 0 ? allowed : null,
+        allowedUserIds: allowedUsers && allowedUsers.length > 0 ? allowedUsers : null,
+        postingRoles: posting.length > 0 ? posting : ["owner", "admin", "mod", "member"],
+        access: typeof meta.access === "string" ? meta.access : null,
+        spaceId: typeof meta.spaceId === "string" ? meta.spaceId : null,
+        kind: typeof meta.kind === "string" ? meta.kind : null,
+        viewerRole: viewer === "owner" || viewer === "admin" || viewer === "mod" || viewer === "member"
+            ? viewer
+            : null,
+    };
+}
+/** Owner-only. The old owner becomes a channel admin; audited server-side. */
+export async function transferRoomOwnership(config, room, targetUserId, reason) {
+    await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/ownership/transfer`, { method: "POST", body: { targetUserId, ...(reason ? { reason } : {}) } });
+}
+/** Lift a channel ban (no WS frame exists for unban; REST is the path). */
+export async function unbanRoomMember(config, room, targetUserId, reason) {
+    await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/mod/unban`, {
+        method: "POST",
+        body: { targetUserId, ...(reason ? { reason } : {}) },
+    });
+}
 /** Archive a channel (owner/admin): drops from listings, refuses posts. */
 export async function archiveRoomChannel(config, room) {
     return socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}`, {
@@ -563,6 +619,13 @@ export async function updateRoomSpace(config, spaceId, input) {
     const result = await socialRequest(config, `/spaces/${encodeURIComponent(spaceId)}`, { method: "PATCH", body: input });
     return result.space;
 }
+/** Owner-only. The old owner becomes a space admin; audited server-side. */
+export async function transferSpaceOwnership(config, spaceId, targetUserId, reason) {
+    await socialRequest(config, `/spaces/${encodeURIComponent(spaceId)}/ownership/transfer`, {
+        method: "POST",
+        body: { targetUserId, ...(reason ? { reason } : {}) },
+    });
+}
 /** Archive a server (owner only). */
 export async function archiveRoomSpace(config, spaceId) {
     return socialRequest(config, `/spaces/${encodeURIComponent(spaceId)}`, { method: "DELETE" });

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const VERSION = "0.9.1";
-export declare const RUNNER_VERSION = "0.9.1";
+export declare const VERSION = "0.11.0";
+export declare const RUNNER_VERSION = "0.11.0";

package/dist/version.js

@@ -1,2 +1,2 @@
-export const VERSION = "0.9.1";
-export const RUNNER_VERSION = "0.9.1";
+export const VERSION = "0.11.0";
+export const RUNNER_VERSION = "0.11.0";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openmarket/rooms-client",
-  "version": "0.10.0",
+  "version": "0.11.0",
   "description": "OM Rooms protocol client: wire types, WebSocket + REST clients, and chat view-models. Browser-safe (no node:/bun: imports).",
   "type": "module",
   "license": "Apache-2.0",
@@ -137,11 +137,6 @@
       "types": "./dist/agent/topic-view-batcher.d.ts",
       "default": "./dist/agent/topic-view-batcher.js"
     },
-    "./agent/clients/common": {
-      "bun": "./src/agent/clients/common.ts",
-      "types": "./dist/agent/clients/common.d.ts",
-      "default": "./dist/agent/clients/common.js"
-    },
     "./shared/rooms-protocol": {
       "bun": "./src/shared/rooms-protocol.ts",
       "types": "./dist/shared/rooms-protocol.d.ts",
@@ -157,6 +152,11 @@
       "types": "./dist/shared/emoji-data.d.ts",
       "default": "./dist/shared/emoji-data.js"
     },
+    "./shared/om-permissions": {
+      "bun": "./src/shared/om-permissions.ts",
+      "types": "./dist/shared/om-permissions.d.ts",
+      "default": "./dist/shared/om-permissions.js"
+    },
     "./version": {
       "bun": "./src/version.ts",
       "types": "./dist/version.d.ts",
@@ -171,7 +171,6 @@
     "typecheck": "tsc --noEmit -p tsconfig.json"
   },
   "dependencies": {
-    "@earendil-works/pi-ai": "0.78.1",
     "picocolors": "1.1.1"
   },
   "devDependencies": {

package/src/agent/armed-mode.ts

@@ -362,26 +362,13 @@ export function recordAutonomousPost(state: ArmedRoomState, now = Date.now()): v
   state.postsThisSession += 1;
 }
 
-/** Record token spend from an armed turn against the session cost guard. Reads
- *  `totalTokens` from a turn's `usage` (pi-ai shape) when present; a no-op when
- *  the provider reported nothing (the post counter is the fallback guard). */
-export function recordArmedTurnUsage(
-  state: ArmedRoomState,
-  usage: Record<string, unknown> | undefined,
-): void {
-  const total = readTotalTokens(usage);
-  if (total > 0) state.tokensThisSession += total;
-}
-
-function readTotalTokens(usage: Record<string, unknown> | undefined): number {
-  if (!usage) return 0;
-  const direct = usage.totalTokens;
-  if (typeof direct === "number" && Number.isFinite(direct) && direct > 0) return direct;
-  // Fall back to summing input + output if a client reports those instead.
-  const input = typeof usage.input === "number" ? usage.input : 0;
-  const output = typeof usage.output === "number" ? usage.output : 0;
-  const sum = input + output;
-  return Number.isFinite(sum) && sum > 0 ? sum : 0;
+/** Record token spend from an armed turn against the session cost guard. The
+ *  caller owns provider usage shapes; armed mode needs only the canonical
+ *  total. A missing or invalid value is a no-op because the post counter is
+ *  the fallback guard. */
+export function recordArmedTurnUsage(state: ArmedRoomState, totalTokens: number | undefined): void {
+  if (typeof totalTokens !== "number" || !Number.isFinite(totalTokens) || totalTokens <= 0) return;
+  state.tokensThisSession += totalTokens;
 }
 
 /** A human (non-agent) POST that is NOT our own resets the consecutive-chain

package/src/shared/om-permissions.ts

@@ -0,0 +1,93 @@
+// The permission vocabulary shared by the store, relay, and clients: the
+// channel-scope actions (per-room moderation) and the space-scope actions
+// (server management), plus the fixed ladder base matrices. Parity-pinned to
+// the store's permission services; the store stays the authority (every verb
+// re-checks server-side), this mirror only decides what clients offer.
+// Effective permissions = ladder base UNION the grants of every held named
+// role (one role's grants[] may mix both vocabularies). Pure and browser-safe.
+
+import type { RoomRole } from "./rooms-protocol.js";
+
+/** Channel-scope actions, byte-stable in store order. */
+export const OM_ROOM_PERMISSION_ACTIONS = [
+  "post",
+  "edit-own",
+  "delete-any",
+  "pin",
+  "invite",
+  "remove-member",
+  "set-read-only",
+  "manage-roles",
+  "mute",
+  "kick",
+  "ban",
+  "unban",
+  "view-audit",
+  "manage-room",
+  "mass-mention",
+] as const;
+
+export type OmRoomPermissionAction = (typeof OM_ROOM_PERMISSION_ACTIONS)[number];
+
+/** Space-scope actions, byte-stable in store order. */
+export const OM_SPACE_PERMISSION_ACTIONS = [
+  // create channels in this server
+  "create-channel",
+  // rename server, icon
+  "manage-server",
+  // create/edit/delete/assign named roles within reach
+  "manage-server-roles",
+  // mint a server invite
+  "create-invite",
+  // list/revoke invites, set/rotate/clear join code
+  "manage-invites",
+  // add and remove server members
+  "manage-members",
+  // change other members' nicknames
+  "manage-nicknames",
+  // change own nickname
+  "change-nickname",
+  // every action in both scopes, admin rank envelope; never the owner-only
+  // verbs (archive/purge space, ownership transfers)
+  "administrator",
+] as const;
+
+export type OmSpacePermissionAction = (typeof OM_SPACE_PERMISSION_ACTIONS)[number];
+
+/** Any grantable action. The two vocabularies are disjoint; a role's
+ *  grants[] may hold values from both. */
+export type OmPermissionAction = OmRoomPermissionAction | OmSpacePermissionAction;
+
+/** The space ladder (RoomSpaceMember.role). Channel tiers are RoomRole. */
+export type OmSpaceLadderRole = "owner" | "admin" | "librarian" | "member";
+
+/** Channel ladder base: what each channel tier natively holds. */
+export const OM_ROOM_PERMISSION_MATRIX: Record<RoomRole, ReadonlySet<OmRoomPermissionAction>> = {
+  owner: new Set<OmRoomPermissionAction>(OM_ROOM_PERMISSION_ACTIONS),
+  admin: new Set<OmRoomPermissionAction>(OM_ROOM_PERMISSION_ACTIONS),
+  mod: new Set<OmRoomPermissionAction>([
+    "post",
+    "edit-own",
+    "delete-any",
+    "pin",
+    "invite",
+    "remove-member",
+    "mute",
+    "kick",
+    "view-audit",
+    "mass-mention",
+  ]),
+  member: new Set<OmRoomPermissionAction>(["post", "edit-own"]),
+};
+
+/** Space ladder base: preserves the pre-grants behavior exactly (managers
+ *  hold everything, everyone may change their own nickname). */
+export const OM_SPACE_PERMISSION_MATRIX: Record<
+  OmSpaceLadderRole,
+  ReadonlySet<OmSpacePermissionAction>
+> = {
+  owner: new Set<OmSpacePermissionAction>(OM_SPACE_PERMISSION_ACTIONS),
+  admin: new Set<OmSpacePermissionAction>(OM_SPACE_PERMISSION_ACTIONS),
+  librarian: new Set<OmSpacePermissionAction>(["change-nickname"]),
+  member: new Set<OmSpacePermissionAction>(["change-nickname"]),
+};

package/src/shared/rooms-protocol.ts

@@ -109,6 +109,7 @@ export const RoomServerMessageType = {
   TOPIC_UPDATED: "TOPIC_UPDATED",
   DOC_CHANGED: "DOC_CHANGED",
   FRIEND_UPDATED: "FRIEND_UPDATED",
+  SPACE_ROLES_UPDATED: "SPACE_ROLES_UPDATED",
 } as const;
 
 export function addBounded<T>(set: Set<T>, value: T, max: number): void {
@@ -202,6 +203,9 @@ export interface RoomMeta {
   viewerRole?: RoomRole | null | undefined;
   /** Head event sequence; diff against the read cursor for unread badges. */
   headSeq?: number | undefined;
+  /** Epoch milliseconds of the newest visible message or sealed message.
+   *  Unlike room metadata timestamps, this changes only with chat content. */
+  lastMessageAt?: number | undefined;
   /** Topics dial for this channel. Absent reads as "allowed" since the
    *  2026-07-12 dial-default flip (post-flip relays always advertise the
    *  stored value, "off" included); explicit "off" means topics are inert. */
@@ -967,6 +971,9 @@ export interface RoomSpace {
   /** Archived docs twin: keeps the Archive row reachable when only docs
    *  are archived. */
   archivedDocCount?: number | undefined;
+  /** Space permission model revision; delegate-facing UI gates on >= 3.
+   *  Absent on stores that predate space permissions. */
+  permissionsVersion?: number | undefined;
 }
 
 export interface RoomSpacesPayload {
@@ -1025,6 +1032,13 @@ export interface SpaceUpdatedPayload {
   deleted?: boolean | undefined;
 }
 
+/** Space roles changed (role CRUD, member role assignment, @everyone
+ *  grants): a poke, not a diff. Clients invalidate their space-roles cache
+ *  and refetch lazily. */
+export interface SpaceRolesUpdatedPayload {
+  spaceId: string;
+}
+
 export interface RoomSpaceJoinedPayload {
   requestId?: string;
   space: RoomSpace;
@@ -1600,6 +1614,11 @@ export type RoomServerMessage =
       payload: SpaceUpdatedPayload;
       timestamp?: number;
     }
+  | {
+      type: typeof RoomServerMessageType.SPACE_ROLES_UPDATED;
+      payload: SpaceRolesUpdatedPayload;
+      timestamp?: number;
+    }
   | {
       type: typeof RoomServerMessageType.SPACE_INVITE;
       payload: SpaceInvitePayload;

package/src/social-client.ts

@@ -1,6 +1,6 @@
 import { resolveRoomsWsUrl } from "./client.js";
 import { envString, ROOM_CHAT_API_URL } from "./endpoints.js";
-import type { RoomTopicAttention } from "./shared/rooms-protocol.js";
+import type { RoomRole, RoomTopicAttention } from "./shared/rooms-protocol.js";
 import type {
   RoomBookmarkSaved,
   RoomBookmarksResult,
@@ -678,6 +678,9 @@ export interface RoomSpaceSummary {
   /** Archived docs in this server: the row must stay reachable when only
    *  docs are archived, since they have no other retrieval surface. */
   archivedDocCount?: number | undefined;
+  /** Space permission model revision; delegate-facing UI gates on >= 3.
+   *  Absent on stores that predate space permissions. */
+  permissionsVersion?: number | undefined;
 }
 
 export async function listRoomSpacesViaChat(config: RoomSocialConfig): Promise<RoomSpaceSummary[]> {
@@ -720,6 +723,13 @@ export interface RoomSpaceRole {
   color: string | null;
   hoist: boolean;
   position: number;
+  /** Permission actions this role grants, mixing the channel and space
+   *  vocabularies (see shared/om-permissions). Absent on stores that
+   *  predate roles-v2 grants. */
+  grants?: string[];
+  /** Discord's "Allow anyone to @mention this role". Absent on stores
+   *  that predate it. */
+  mentionable?: boolean;
 }
 
 export async function listSpaceRoles(
@@ -751,7 +761,17 @@ export async function updateSpaceRole(
   config: RoomSocialConfig,
   spaceId: string,
   roleId: string,
-  patch: { name?: string; color?: string | null; hoist?: boolean; position?: number },
+  patch: {
+    name?: string;
+    color?: string | null;
+    hoist?: boolean;
+    /** Discord's "Allow anyone to @mention this role". Only send it to
+     *  stores that emit the field (strict schemas 400 on unknown keys). */
+    mentionable?: boolean;
+    position?: number;
+    /** Full replace of the role's grants. */
+    grants?: string[];
+  },
 ): Promise<RoomSpaceRole> {
   const result = await socialRequest<{ role?: RoomSpaceRole }>(
     config,
@@ -1154,6 +1174,114 @@ export async function resolveRoomChannel(
   };
 }
 
+/** Set or clear a space channel's role guest list. Null (or empty) clears:
+ *  the channel opens back up to every space member. */
+export async function setRoomAllowedRoles(
+  config: RoomSocialConfig,
+  room: string,
+  allowedRoleIds: string[] | null,
+  /** Per-member access rules (union with roles). ABSENT = leave the stored
+   *  list untouched (and let a legacy conversion seed from current members);
+   *  null or [] = clear; array = set. */
+  allowedUserIds?: string[] | null,
+  reason?: string,
+): Promise<Record<string, unknown>> {
+  const result = await socialRequest<{ room?: Record<string, unknown> }>(
+    config,
+    `/rooms/${encodeURIComponent(cleanRoomId(room))}/allowed-roles`,
+    {
+      method: "PATCH",
+      body: {
+        allowedRoleIds,
+        ...(allowedUserIds !== undefined ? { allowedUserIds } : {}),
+        ...(reason ? { reason } : {}),
+      },
+    },
+  );
+  return result.room ?? {};
+}
+
+export interface RoomAccessMeta {
+  /** Active role guest list; null = open to every space member. */
+  allowedRoleIds: string[] | null;
+  /** Per-member access rules (union with the roles); null = none. */
+  allowedUserIds: string[] | null;
+  /** Tiers allowed to post; the store default is all four. */
+  postingRoles: RoomRole[];
+  access: string | null;
+  spaceId: string | null;
+  kind: string | null;
+  /** The caller's resolved channel role (owner fallback = creator). */
+  viewerRole: RoomRole | null;
+}
+
+/** Authoritative access meta for the settings surface: the room's guest
+ *  list, posting tiers and the caller's resolved role. Rides
+ *  resolveRoomChannel (the relay's route ordering), which is also where the
+ *  store places viewerRole (existence-hiding 404 preserved as a throw). */
+export async function resolveRoomAccess(
+  config: RoomSocialConfig,
+  room: string,
+): Promise<RoomAccessMeta> {
+  const meta: Record<string, unknown> = (await resolveRoomChannel(config, room)) ?? {};
+  const allowed = Array.isArray(meta.allowedRoleIds)
+    ? (meta.allowedRoleIds as unknown[]).filter(
+        (value): value is string => typeof value === "string",
+      )
+    : null;
+  const allowedUsers = Array.isArray(meta.allowedUserIds)
+    ? (meta.allowedUserIds as unknown[]).filter(
+        (value): value is string => typeof value === "string",
+      )
+    : null;
+  const posting = Array.isArray(meta.postingRoles)
+    ? (meta.postingRoles as unknown[]).filter(
+        (value): value is RoomRole =>
+          value === "owner" || value === "admin" || value === "mod" || value === "member",
+      )
+    : [];
+  const viewer = typeof meta.viewerRole === "string" ? meta.viewerRole : null;
+  return {
+    allowedRoleIds: allowed && allowed.length > 0 ? allowed : null,
+    allowedUserIds: allowedUsers && allowedUsers.length > 0 ? allowedUsers : null,
+    postingRoles: posting.length > 0 ? posting : ["owner", "admin", "mod", "member"],
+    access: typeof meta.access === "string" ? meta.access : null,
+    spaceId: typeof meta.spaceId === "string" ? meta.spaceId : null,
+    kind: typeof meta.kind === "string" ? meta.kind : null,
+    viewerRole:
+      viewer === "owner" || viewer === "admin" || viewer === "mod" || viewer === "member"
+        ? viewer
+        : null,
+  };
+}
+
+/** Owner-only. The old owner becomes a channel admin; audited server-side. */
+export async function transferRoomOwnership(
+  config: RoomSocialConfig,
+  room: string,
+  targetUserId: string,
+  reason?: string,
+): Promise<void> {
+  await socialRequest(
+    config,
+    `/rooms/${encodeURIComponent(cleanRoomId(room))}/ownership/transfer`,
+    { method: "POST", body: { targetUserId, ...(reason ? { reason } : {}) } },
+  );
+}
+
+/** Lift a channel ban (no WS frame exists for unban; REST is the path). */
+export async function unbanRoomMember(
+  config: RoomSocialConfig,
+  room: string,
+  targetUserId: string,
+  reason?: string,
+): Promise<void> {
+  await socialRequest(config, `/rooms/${encodeURIComponent(cleanRoomId(room))}/mod/unban`, {
+    method: "POST",
+    body: { targetUserId, ...(reason ? { reason } : {}) },
+  });
+}
+
 /** Archive a channel (owner/admin): drops from listings, refuses posts. */
 export async function archiveRoomChannel(
   config: RoomSocialConfig,
@@ -1178,6 +1306,19 @@ export async function updateRoomSpace(
   return result.space;
 }
 
+/** Owner-only. The old owner becomes a space admin; audited server-side. */
+export async function transferSpaceOwnership(
+  config: RoomSocialConfig,
+  spaceId: string,
+  targetUserId: string,
+  reason?: string,
+): Promise<void> {
+  await socialRequest(config, `/spaces/${encodeURIComponent(spaceId)}/ownership/transfer`, {
+    method: "POST",
+    body: { targetUserId, ...(reason ? { reason } : {}) },
+  });
+}
+
 /** Archive a server (owner only). */
 export async function archiveRoomSpace(
   config: RoomSocialConfig,

package/src/version.ts

@@ -1,2 +1,2 @@
-export const VERSION = "0.9.1";
-export const RUNNER_VERSION = "0.9.1";
+export const VERSION = "0.11.0";
+export const RUNNER_VERSION = "0.11.0";

package/dist/agent/clients/common.d.ts

@@ -1,82 +0,0 @@
-import { type KnownProvider } from "@earendil-works/pi-ai";
-/** Every chat surface, as a runtime list. The `SurfaceId` union derives from
- *  this literal so per-surface policy checklists (packages/cli/test/
- *  harness-budgets.test.ts) can iterate the surfaces at runtime while a new
- *  entry still breaks type-exhaustive tables at compile time. Adding a
- *  surface here requires classifying it in EVERY policy set (see AGENTS.md,
- *  "Harness invariants"). */
-export declare const SURFACE_IDS: readonly ["cli", "telegram", "discord", "slack", "webui"];
-export type SurfaceId = (typeof SURFACE_IDS)[number];
-export interface AgentToolCall {
-    id: string;
-    name: string;
-    args: unknown;
-}
-export type AgentMessage = {
-    role: "user";
-    content: string;
-} | {
-    role: "assistant";
-    content: string;
-    toolCalls?: AgentToolCall[];
-} | {
-    role: "tool";
-    content: string;
-    toolCallId: string;
-    name: string;
-};
-export interface ToolDispatchResult {
-    isError?: true;
-    content: string;
-    /** Full-fidelity render payload for in-process SURFACES (e.g. the TUI's
-     *  backtest card). Present only on the streamed copy channels consume —
-     *  the agent runtime strips it before the result reaches the model's
-     *  messages or the conversation store, so it never costs context. */
-    artifact?: unknown;
-}
-export interface LlmTool {
-    name: string;
-    description: string;
-    inputSchema: Record<string, unknown>;
-    handler: (args: unknown) => Promise<ToolDispatchResult>;
-}
-/** OM-level provider for any OpenAI-compatible /v1/chat/completions endpoint
- *  (Ollama, vLLM, LM Studio, llama.cpp, custom proxies). Not a pi-ai
- *  KnownProvider: the model object is constructed at turn time from the
- *  credential's stored base URL instead of pi-ai's catalog. */
-export declare const OPENAI_COMPATIBLE_PROVIDER: "openai-compatible";
-export type LlmProvider = KnownProvider | typeof OPENAI_COMPATIBLE_PROVIDER;
-export declare const PRIMARY_LLM_PROVIDERS: readonly LlmProvider[];
-export declare function isLlmProvider(value: string): value is LlmProvider;
-export type TurnEvent = {
-    kind: "assistant.text";
-    delta: string;
-} | {
-    kind: "tool.call";
-    id: string;
-    name: string;
-    args: unknown;
-} | {
-    kind: "tool.result";
-    id: string;
-    name: string;
-    result: ToolDispatchResult;
-} | {
-    kind: "turn.done";
-    usage?: Record<string, unknown>;
-} | {
-    kind: "turn.error";
-    code?: string;
-    message: string;
-};
-export interface RunLlmTurnInput {
-    apiKey: string;
-    system: string;
-    messages: AgentMessage[];
-    tools: LlmTool[];
-    model: string;
-    signal?: AbortSignal | undefined;
-}
-export type RunLlmTurn = (input: RunLlmTurnInput) => AsyncIterable<TurnEvent>;
-export declare function stringifyToolContent(value: unknown): string;
-export declare function parseToolArguments(raw: unknown): unknown;

package/dist/agent/clients/common.js

@@ -1,56 +0,0 @@
-import { getProviders } from "@earendil-works/pi-ai";
-/** Every chat surface, as a runtime list. The `SurfaceId` union derives from
- *  this literal so per-surface policy checklists (packages/cli/test/
- *  harness-budgets.test.ts) can iterate the surfaces at runtime while a new
- *  entry still breaks type-exhaustive tables at compile time. Adding a
- *  surface here requires classifying it in EVERY policy set (see AGENTS.md,
- *  "Harness invariants"). */
-export const SURFACE_IDS = ["cli", "telegram", "discord", "slack", "webui"];
-/** OM-level provider for any OpenAI-compatible /v1/chat/completions endpoint
- *  (Ollama, vLLM, LM Studio, llama.cpp, custom proxies). Not a pi-ai
- *  KnownProvider: the model object is constructed at turn time from the
- *  credential's stored base URL instead of pi-ai's catalog. */
-export const OPENAI_COMPATIBLE_PROVIDER = "openai-compatible";
-// Provider-resolution precedence (authProviderCandidates): these are tried
-// before any store.order / generic provider. Invariant: an active profile for
-// an earlier provider here shadows a later-configured non-primary one (groq,
-// openai-compatible, …). The headless/env path short-circuits this, but an
-// interactive switch via `om init` to a non-primary provider only takes effect
-// once the shadowing primary profile is removed. Changing that is a product
-// decision (explicit active-provider selection), not a per-provider concern.
-export const PRIMARY_LLM_PROVIDERS = [
-    "anthropic",
-    "openai-codex",
-    "openai",
-    "google",
-    "openrouter",
-];
-let knownProviderSet = null;
-export function isLlmProvider(value) {
-    if (value === OPENAI_COMPATIBLE_PROVIDER)
-        return true;
-    if (knownProviderSet === null) {
-        knownProviderSet = new Set(getProviders());
-    }
-    return knownProviderSet.has(value);
-}
-export function stringifyToolContent(value) {
-    if (value === undefined)
-        return "";
-    if (typeof value === "string")
-        return value;
-    // Compact on purpose: this string is LLM input, and 2-space pretty-printing
-    // inflated every structured tool result by roughly a fifth in tokens for
-    // zero model benefit.
-    return JSON.stringify(value);
-}
-export function parseToolArguments(raw) {
-    if (raw === undefined || raw === null)
-        return {};
-    if (typeof raw !== "string")
-        return raw;
-    const trimmed = raw.trim();
-    if (!trimmed)
-        return {};
-    return JSON.parse(trimmed);
-}

package/src/agent/clients/common.ts

@@ -1,107 +0,0 @@
-import { getProviders, type KnownProvider } from "@earendil-works/pi-ai";
-
-/** Every chat surface, as a runtime list. The `SurfaceId` union derives from
- *  this literal so per-surface policy checklists (packages/cli/test/
- *  harness-budgets.test.ts) can iterate the surfaces at runtime while a new
- *  entry still breaks type-exhaustive tables at compile time. Adding a
- *  surface here requires classifying it in EVERY policy set (see AGENTS.md,
- *  "Harness invariants"). */
-export const SURFACE_IDS = ["cli", "telegram", "discord", "slack", "webui"] as const;
-
-export type SurfaceId = (typeof SURFACE_IDS)[number];
-
-export interface AgentToolCall {
-  id: string;
-  name: string;
-  args: unknown;
-}
-
-export type AgentMessage =
-  | { role: "user"; content: string }
-  | { role: "assistant"; content: string; toolCalls?: AgentToolCall[] }
-  | { role: "tool"; content: string; toolCallId: string; name: string };
-
-export interface ToolDispatchResult {
-  isError?: true;
-  content: string;
-  /** Full-fidelity render payload for in-process SURFACES (e.g. the TUI's
-   *  backtest card). Present only on the streamed copy channels consume —
-   *  the agent runtime strips it before the result reaches the model's
-   *  messages or the conversation store, so it never costs context. */
-  artifact?: unknown;
-}
-
-export interface LlmTool {
-  name: string;
-  description: string;
-  inputSchema: Record<string, unknown>;
-  handler: (args: unknown) => Promise<ToolDispatchResult>;
-}
-
-/** OM-level provider for any OpenAI-compatible /v1/chat/completions endpoint
- *  (Ollama, vLLM, LM Studio, llama.cpp, custom proxies). Not a pi-ai
- *  KnownProvider: the model object is constructed at turn time from the
- *  credential's stored base URL instead of pi-ai's catalog. */
-export const OPENAI_COMPATIBLE_PROVIDER = "openai-compatible" as const;
-
-export type LlmProvider = KnownProvider | typeof OPENAI_COMPATIBLE_PROVIDER;
-
-// Provider-resolution precedence (authProviderCandidates): these are tried
-// before any store.order / generic provider. Invariant: an active profile for
-// an earlier provider here shadows a later-configured non-primary one (groq,
-// openai-compatible, …). The headless/env path short-circuits this, but an
-// interactive switch via `om init` to a non-primary provider only takes effect
-// once the shadowing primary profile is removed. Changing that is a product
-// decision (explicit active-provider selection), not a per-provider concern.
-export const PRIMARY_LLM_PROVIDERS: readonly LlmProvider[] = [
-  "anthropic",
-  "openai-codex",
-  "openai",
-  "google",
-  "openrouter",
-];
-
-let knownProviderSet: Set<string> | null = null;
-
-export function isLlmProvider(value: string): value is LlmProvider {
-  if (value === OPENAI_COMPATIBLE_PROVIDER) return true;
-  if (knownProviderSet === null) {
-    knownProviderSet = new Set(getProviders());
-  }
-  return knownProviderSet.has(value);
-}
-
-export type TurnEvent =
-  | { kind: "assistant.text"; delta: string }
-  | { kind: "tool.call"; id: string; name: string; args: unknown }
-  | { kind: "tool.result"; id: string; name: string; result: ToolDispatchResult }
-  | { kind: "turn.done"; usage?: Record<string, unknown> }
-  | { kind: "turn.error"; code?: string; message: string };
-
-export interface RunLlmTurnInput {
-  apiKey: string;
-  system: string;
-  messages: AgentMessage[];
-  tools: LlmTool[];
-  model: string;
-  signal?: AbortSignal | undefined;
-}
-
-export type RunLlmTurn = (input: RunLlmTurnInput) => AsyncIterable<TurnEvent>;
-
-export function stringifyToolContent(value: unknown): string {
-  if (value === undefined) return "";
-  if (typeof value === "string") return value;
-  // Compact on purpose: this string is LLM input, and 2-space pretty-printing
-  // inflated every structured tool result by roughly a fifth in tokens for
-  // zero model benefit.
-  return JSON.stringify(value);
-}
-
-export function parseToolArguments(raw: unknown): unknown {
-  if (raw === undefined || raw === null) return {};
-  if (typeof raw !== "string") return raw;
-  const trimmed = raw.trim();
-  if (!trimmed) return {};
-  return JSON.parse(trimmed) as unknown;
-}