@owlmeans/viable-sdk 0.1.18-rc.8 → 0.1.18

package/build/tools/mcp.js

@@ -1,6 +1,9 @@
 import { TOOL_DEADLINE_MS } from '../consts.js';
-import { visibleTools } from './catalogue.js';
-import { delegatedLlm, performsModelTasks, sessionCapable } from './types.js';
+import { catalogueHelper } from './catalogue.js';
+import { HANDOVER_EXEMPT } from './consts.local.js';
+import { makeHandoverHelper } from './handover.js';
+import { createInflightCalls } from './inflight.js';
+import { toolHostHelper } from './host.js';
 const withDeadline = async (label, ms, fn) => {
     let timer;
     try {
@@ -24,27 +27,23 @@ const withDeadline = async (label, ms, fn) => {
  * rather than as a slow platform. And containment: a thrown error becomes an `isError` result the
  * model can read and act on, because an exception crossing the transport tells it only that
  * something went wrong somewhere.
+ *
+ * In the delegated mode a platform call may itself stop for a model call this session's parent
+ * performs — the parent that is blocked on this very tool. There a tool is the HANDOVER instead of
+ * a deadline: its call races a model task arriving, the task is answered first, and the call's own
+ * result is delivered by `submit_task_result` / `next_task` once it settles. The task loop and the
+ * tools that never reach the platform keep the deadline.
  */
 export const registerCatalogue = (server, deps) => {
     const registered = [];
-    for (const tool of visibleTools(deps.host)) {
-        server.registerTool(tool.name, { title: tool.title, description: tool.description, inputSchema: tool.input }, async (args) => {
-            try {
-                const result = await withDeadline(tool.name, TOOL_DEADLINE_MS, async () => await tool.run(args ?? {}, deps));
-                return {
-                    content: [{ type: 'text', text: result.text }],
-                    ...(result.structured != null ? { structuredContent: result.structured } : {}),
-                    ...(result.isError === true ? { isError: true } : {}),
-                };
-            }
-            catch (e) {
-                deps.log(`${tool.name} failed: ${e.message}`);
-                return {
-                    content: [{ type: 'text', text: e.message }],
-                    isError: true,
-                };
-            }
-        });
+    // One registry for the life of the server, shared by every tool through the deps it is handed.
+    const toolDeps = deps.inflight != null ? deps : { ...deps, inflight: createInflightCalls() };
+    const handover = makeHandoverHelper(toolDeps);
+    const delegated = toolHostHelper.performsModelTasks(toolDeps.host);
+    for (const tool of catalogueHelper.visibleTools(toolDeps.host)) {
+        server.registerTool(tool.name, { title: tool.title, description: tool.description, inputSchema: tool.input, annotations: tool.annotations }, async (args) => delegated && !HANDOVER_EXEMPT.has(tool.name)
+            ? await handover.run(tool, args ?? {})
+            : await handover.contain(tool.name, async () => await withDeadline(tool.name, TOOL_DEADLINE_MS, async () => await tool.run(args ?? {}, toolDeps))));
         registered.push(tool.name);
     }
     return registered;
@@ -52,12 +51,38 @@ export const registerCatalogue = (server, deps) => {
 /**
  * What the server tells a parent agent about itself, before any tool is called.
  *
- * It states the workflow and the two rules that are not discoverable from a tool list: that long
- * operations are jobs, and — in the delegated mode — that this session's model calls are the
- * parent's to perform. A parent that read only this could still drive the platform correctly.
+ * It states the workflow, a one-line map of every capability group (one tool named per family, the
+ * full list being `describe_platform`'s), and the rules that are not discoverable from a tool list:
+ * that long operations continue server-side and expose domain statuses, that an irreversible tool
+ * needs the user's agreement as `confirm: true`, what stays in the browser, and — in the delegated
+ * mode — that this session's model calls are the parent's to perform. A family whose tools this
+ * host does not offer is never named by tool.
  */
 export const serverInstructions = (deps) => {
     const { host } = deps;
+    const cloud = toolHostHelper.cloudTarget(host);
+    const families = [
+        'supported stacks and application categories (describe_blueprints)',
+        'projects (list_projects, rename_project, delete_project, unlock_project_agent, list_slots)',
+        'stories (list_stories, create_story, develop_story, start_story_batch, story_batch_status)',
+        'open-ended changes (modify_project, steer_agent), stopping the agent (stop_agent) and planning kits'
+            + ' (describe_planning_kits)',
+        ...(cloud
+            ? [
+                'the generated files and the preview (list_files, read_file, write_file, delete_file, preview_control)',
+                'git and GitHub (git_status, git_commit, connect_github, publish_to_github, github_sync)',
+                'the production site (production_status, publish_production, custom_domain, production_auth)',
+            ]
+            : []),
+        'configuration variables (project_configuration)',
+        'project and organization branding (project_settings, set_platform_credit, organization_branding)',
+        'the account (inference_settings, list_access_tokens, privacy_choices, pickup_intent)',
+        'the generated application\'s own users and permissions (app_users, app_permissions, app_groups)',
+        `activity feeds (project_activity, notifications${cloud ? ', file_changes' : ''})`,
+        ...(catalogueHelper.visibleTools(host).some(tool => tool.name === 'describe_harness')
+            ? ['this agent\'s own setup (describe_harness)']
+            : []),
+    ];
     const lines = [
         'This server connects you to the OwlMeans Viable platform, which builds full-stack web'
             + ' applications from a description: it writes the specification, generates the code, and'
@@ -66,33 +91,87 @@ export const serverInstructions = (deps) => {
         '',
         `Mode: target=${host.target}, llm=${host.llm}.`,
         '',
-        'Workflow: describe_capabilities → create_project → wait_for → confirm_project → wait_for →'
-            + ' list_stories → develop_story → wait_for.',
+        'Workflow: describe_capabilities → create_project → project_status → confirm_project →'
+            + ' project_status → list_stories → develop_story → story_status. develop_story implements one'
+            + ' story; start_story_batch implements several (every planned one by default) one after another, in'
+            + ' the order the platform chooses for building them — follow it with story_batch_status. An application that already'
+            + ' exists is brought onto the same rails instead: convert_project → conversion_status → check_convertible →'
+            + ' proceed_conversion at each stage. The check reads what the intake found, so it comes'
+            + ' after the first stage rather than before it. A conversion step that would use the plan\'s'
+            + ' conversion limit or spend credits answers with what it costs instead of starting: tell the'
+            + ' user, and repeat the call with confirm: true only after they agree.',
+        '',
+        'The stock blueprint is owlmeans-fullstack-ts. Cases: web (business web apps, portals and dashboards); scalable (queued services); ai-pipeline (staged AI workflows); ai-agent (tool-using assistants); game (casual, online-turn and online-live games); work-management and work-management-tenanted (project tracking, CRM, service desk, inventory, recruiting, field service and process workflows). The tenanted case supports multiple organization entities. Call describe_blueprints for the deployed registry, category ids and current capabilities before choosing.',
+        '',
+        'Call describe_platform for what this platform can build and which of it this session can'
+            + ' drive, every tool listed by group.',
+        '',
+        `Everything the web application does except billing is here too: ${families.join('; ')}.`,
+        '',
+        'Long operations do not block. Read progress with project_status, story_status,'
+            + ' conversion_status, or pipeline_status for the domain you are working in; to follow work as it'
+            + ' happens, pass each feed\'s cursor back as after (wait up to 20 s) instead of re-reading a status'
+            + ' in a loop.',
+        '',
+        'A story\'s status moves through the platform\'s story flow; develop_story (or a batch) is what starts'
+            + ' that move, reset_story and complete_story are the two manual moves, and update_story never changes'
+            + ' it. While the agent works, stop_agent stops it — a story run at its next step, rolled back to where'
+            + ' that run started; an open-ended change once the model\'s current answer arrives, its edits kept and'
+            + ' summarised — and steer_agent sends a running open-ended change a message it reads before its next'
+            + ' model call.',
+        '',
+        'A tool that changes what cannot be undone — deleting a project'
+            + (cloud ? ', a file' : '') + ', a converted origin, an application user or group, releasing an agent'
+            + ' lock, stopping a story run or cancelling a story batch (the story in progress is rolled back), '
+            + (cloud ? 'discarding or reverting git changes, disconnecting GitHub, publishing the'
+                + ' production site, ' : '')
+            + 'revoking an access token — refuses without confirm: true: ask the user first, and only then call'
+            + ' it again with confirm: true.',
+        '',
+        'Some acts stay the user\'s own, in the browser, and no tool here does them: payments, credits and'
+            + ' the plan; creating an access token; giving a marketing consent or accepting terms; approving'
+            + ' a connector'
+            + (cloud ? '; finishing a GitHub authorization (connect_github answers the address they open)' : '')
+            + '. Send the user to the web application for these.',
         '',
-        'Long operations return a JOB and do not block. Poll with wait_for; call it again while the'
-            + ' job is still running.',
+        'The copyright line, the organization name, the Terms and Privacy links and the Google tag are'
+            + ' project settings: project_settings reads them and update_project_settings changes them. The'
+            + ' Terms and Privacy pages at /terms and /privacy are generated with the application — do not'
+            + ' write your own.',
     ];
-    if (performsModelTasks(host)) {
-        lines.push('', 'MODEL TASKS: this session runs the platform\'s model calls on YOUR side. Whenever a job'
-            + ' reports "blocked on: model-task", call next_task, run the returned task in a CLEAN'
-            + ' subagent at LOW reasoning effort — never in this conversation — and pass its answer to'
-            + ' submit_task_result verbatim. Repeat until next_task says there is nothing. Do not'
-            + ' summarise, improve or reinterpret an answer.');
+    if (toolHostHelper.sessionCapable(host)) {
+        lines.push('', 'MODEL TASKS: '
+            + (toolHostHelper.performsModelTasks(host)
+                ? 'this session runs in the delegated mode, so EVERY model call the platform makes for it is'
+                    + ' yours to perform — project drafting, content checks and story formatting included; a'
+                    + ' delegated conversion spends no credits. A tool whose call waits on one answers with the'
+                    + ' task and says it is NOT finished: do not call that tool again — perform the task, and'
+                    + ' submit_task_result replies with the tool\'s result or the next model call it waits on.'
+                    + ' Whenever a domain status reports waiting for a model task, call next_task. Run every task'
+                    + ' in a CLEAN subagent at LOW reasoning effort — never in this conversation — and pass its'
+                    + ' answer to submit_task_result verbatim. Repeat until next_task says there is nothing. Do'
+                    + ' not summarise, improve or reinterpret an answer.'
+                : 'this session runs in the cloud mode: the platform performs every model call itself —'
+                    + ' a conversion\'s included — so there is no task for you to collect.'));
+        lines.push('', 'QUESTIONS: when a domain status reports waiting for a person, use its pending inquiry or call next_question, put the question'
+            + ' to the person you are working for, and send their answer back with answer_question. Do not'
+            + ' answer it yourself; if they are unavailable, submit declined: true so the platform records'
+            + ' an assumption.');
     }
-    else if (delegatedLlm(host) && !sessionCapable(host)) {
+    else if (toolHostHelper.delegatedLlm(host)) {
         // The account asks for the delegated mode and this host cannot serve it: it answers one
         // request and forgets, so there is nothing here to hold a task until an answer comes back.
         // Said plainly, because the alternative is a parent waiting for a next_task tool that is not
         // in its list.
         lines.push('', 'Your account asks for the delegated model mode, which this URL-configured server cannot'
             + ' run: it holds no session between calls. The platform performs the model calls of a run'
-            + ' started here, unless the stdio connector (`npx -y @owlmeans/viable-mcp@^0.1.18-rc.1`) is attached to'
-            + ' the project.');
+            + ' started here, unless the package-based stdio connector is attached to the project.');
     }
     if (host.target === 'local') {
         lines.push('', 'The project lives on this machine. The platform writes its files through this server, so do'
-            + ' not edit them yourself while a job is running. Use local_setup_guide for what the'
-            + ' application needs in order to run here.');
+            + ' not edit them yourself while a platform run is active. Use local_setup_guide for what the'
+            + ' application needs in order to run here. Its files, git repository and deployment are this'
+            + ' machine\'s, so the platform\'s file, preview, git and production tools are not offered.');
     }
     return lines.join('\n');
 };

package/build/tools/mcp.js.map

@@ -1 +1 @@
-{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/tools/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAA;AAC7C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAgB7E,MAAM,YAAY,GAAG,KAAK,EAAK,KAAa,EAAE,EAAU,EAAE,EAAoB,EAAc,EAAE;IAC5F,IAAI,KAAgD,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,EAAE,EAAE;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACtF,CAAC,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,IAAI,IAAI;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IACxC,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAqB,EAAE,IAAc,EAAY,EAAE;IACnF,MAAM,UAAU,GAAa,EAAE,CAAA;IAE/B,KAAK,MAAM,IAAI,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,EAC7E,KAAK,EAAE,IAA6B,EAAE,EAAE;YACtC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CACxE,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,CAAC,CAAC,CAAA;gBAEnC,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;oBACvD,GAAG,CAAC,MAAM,CAAC,UAAU,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC9E,GAAG,CAAC,MAAM,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtD,CAAA;YACH,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,YAAa,CAAW,CAAC,OAAO,EAAE,CAAC,CAAA;gBAExD,OAAO;oBACL,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAG,CAAW,CAAC,OAAO,EAAE,CAAC;oBAChE,OAAO,EAAE,IAAI;iBACd,CAAA;YACH,CAAC;QACH,CAAC,CACF,CAAA;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,OAAO,UAAU,CAAA;AACnB,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAA4B,EAAU,EAAE;IACzE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IACrB,MAAM,KAAK,GAAG;QACZ,uFAAuF;cACrF,wFAAwF;cACxF,2FAA2F;cAC3F,qDAAqD;QACvD,EAAE;QACF,gBAAgB,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,GAAG,GAAG;QAC/C,EAAE;QACF,4FAA4F;cAC1F,2CAA2C;QAC7C,EAAE;QACF,4FAA4F;cAC1F,wBAAwB;KAC3B,CAAA;IAED,IAAI,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yFAAyF;cACvF,qFAAqF;cACrF,yFAAyF;cACzF,oFAAoF;cACpF,+CAA+C,CAClD,CAAA;IACH,CAAC;SAAM,IAAI,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,wFAAwF;QACxF,2FAA2F;QAC3F,6FAA6F;QAC7F,eAAe;QACf,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yFAAyF;cACvF,yFAAyF;cACzF,uGAAuG;cACvG,eAAe,CAClB,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,EAAE,EACF,6FAA6F;cAC3F,oFAAoF;cACpF,0CAA0C,CAC7C,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC,CAAA"}
+{"version":3,"file":"mcp.js","sourceRoot":"","sources":["../../src/tools/mcp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAChD,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAA;AACnD,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAG1C,MAAM,YAAY,GAAG,KAAK,EAAK,KAAa,EAAE,EAAU,EAAE,EAAoB,EAAc,EAAE;IAC5F,IAAI,KAAgD,CAAA;IACpD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,EAAE,EAAE;YACJ,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,GAAG,KAAK,qBAAqB,EAAE,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;YACtF,CAAC,CAAC;SACH,CAAC,CAAA;IACJ,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,IAAI,IAAI;YAAE,YAAY,CAAC,KAAK,CAAC,CAAA;IACxC,CAAC;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,MAAqB,EAAE,IAAc,EAAY,EAAE;IACnF,MAAM,UAAU,GAAa,EAAE,CAAA;IAC/B,+FAA+F;IAC/F,MAAM,QAAQ,GAAa,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,mBAAmB,EAAE,EAAE,CAAA;IACtG,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAA;IAC7C,MAAM,SAAS,GAAG,cAAc,CAAC,kBAAkB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;IAElE,KAAK,MAAM,IAAI,IAAI,eAAe,CAAC,YAAY,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,MAAM,CAAC,YAAY,CACjB,IAAI,CAAC,IAAI,EACT,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,IAAI,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,EAC5G,KAAK,EAAE,IAA6B,EAAE,EAAE,CAAC,SAAS,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC;YACnF,CAAC,CAAC,MAAM,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;YACtC,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,IAAI,EAAE,CAC7C,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC,CACvG,CAAA;QACD,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC5B,CAAC;IAED,OAAO,UAAU,CAAA;AACnB,CAAC,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,IAA4B,EAAU,EAAE;IACzE,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAA;IACrB,MAAM,KAAK,GAAG,cAAc,CAAC,WAAW,CAAC,IAAI,CAAC,CAAA;IAC9C,MAAM,QAAQ,GAAG;QACf,mEAAmE;QACnE,4FAA4F;QAC5F,4FAA4F;QAC5F,qGAAqG;cACnG,2BAA2B;QAC7B,GAAG,CAAC,KAAK;YACP,CAAC,CAAC;gBACA,uGAAuG;gBACvG,yFAAyF;gBACzF,6FAA6F;aAC9F;YACD,CAAC,CAAC,EAAE,CAAC;QACP,iDAAiD;QACjD,kGAAkG;QAClG,sFAAsF;QACtF,iGAAiG;QACjG,kDAAkD,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,GAAG;QAClF,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,kBAAkB,CAAC;YACnF,CAAC,CAAC,CAAC,4CAA4C,CAAC;YAChD,CAAC,CAAC,EAAE,CAAC;KACR,CAAA;IACD,MAAM,KAAK,GAAG;QACZ,uFAAuF;cACrF,wFAAwF;cACxF,2FAA2F;cAC3F,qDAAqD;QACvD,EAAE;QACF,gBAAgB,IAAI,CAAC,MAAM,SAAS,IAAI,CAAC,GAAG,GAAG;QAC/C,EAAE;QACF,uFAAuF;cACrF,6FAA6F;cAC7F,mGAAmG;cACnG,oHAAoH;cACpH,2GAA2G;cAC3G,uFAAuF;cACvF,4FAA4F;cAC5F,6FAA6F;cAC7F,sEAAsE;QACxE,EAAE;QACF,gjBAAgjB;QAChjB,EAAE;QACF,0FAA0F;cACxF,qCAAqC;QACvC,EAAE;QACF,mEAAmE,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;QACzF,EAAE;QACF,gFAAgF;cAC9E,gGAAgG;cAChG,mGAAmG;cACnG,aAAa;QACf,EAAE;QACF,uGAAuG;cACrG,qGAAqG;cACrG,sGAAsG;cACtG,sGAAsG;cACtG,oGAAoG;cACpG,cAAc;QAChB,EAAE;QACF,gEAAgE;cAC9D,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,wEAAwE;cACpG,kGAAkG;cAClG,CAAC,KAAK,CAAC,CAAC,CAAC,2EAA2E;kBAClF,oBAAoB,CAAC,CAAC,CAAC,EAAE,CAAC;cAC5B,kGAAkG;cAClG,+BAA+B;QACjC,EAAE;QACF,mGAAmG;cACjG,+FAA+F;cAC/F,cAAc;cACd,CAAC,KAAK,CAAC,CAAC,CAAC,mFAAmF,CAAC,CAAC,CAAC,EAAE,CAAC;cAClG,mDAAmD;QACrD,EAAE;QACF,+FAA+F;cAC7F,8FAA8F;cAC9F,6FAA6F;cAC7F,kBAAkB;KACrB,CAAA;IAED,IAAI,cAAc,CAAC,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,KAAK,CAAC,IAAI,CACR,EAAE,EACF,eAAe;cACb,CAAC,cAAc,CAAC,kBAAkB,CAAC,IAAI,CAAC;gBACxC,CAAC,CAAC,2FAA2F;sBACzF,uFAAuF;sBACvF,0FAA0F;sBAC1F,wFAAwF;sBACxF,yFAAyF;sBACzF,4FAA4F;sBAC5F,0FAA0F;sBAC1F,0FAA0F;sBAC1F,mDAAmD;gBACvD,CAAC,CAAC,sFAAsF;sBACpF,qEAAqE,CAAC,CAC7E,CAAA;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,+HAA+H;cAC7H,6FAA6F;cAC7F,6FAA6F;cAC7F,iBAAiB,CACpB,CAAA;IACH,CAAC;SAAM,IAAI,cAAc,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,CAAC;QAC7C,wFAAwF;QACxF,2FAA2F;QAC3F,6FAA6F;QAC7F,eAAe;QACf,KAAK,CAAC,IAAI,CACR,EAAE,EACF,yFAAyF;cACvF,yFAAyF;cACzF,qFAAqF,CACxF,CAAA;IACH,CAAC;IAED,IAAI,IAAI,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;QAC5B,KAAK,CAAC,IAAI,CACR,EAAE,EACF,6FAA6F;cAC3F,4FAA4F;cAC5F,4FAA4F;cAC5F,0FAA0F,CAC7F,CAAA;IACH,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC,CAAA"}

package/build/tools/platform.d.ts

@@ -0,0 +1,14 @@
+import type { ToolHost, PlatformCatalogue } from './types.js';
+/**
+ * The catalogue as text, narrowed to what THIS session can drive.
+ *
+ * Two rules, and the second is the point. Nothing is listed that the host does not offer, so a
+ * parent never proposes a path it cannot take. And every group that IS hidden says so in one line,
+ * because a parent reading a shorter list without an explanation concludes the platform cannot do
+ * the thing at all — and then writes the application by hand.
+ *
+ * Deterministic: no clock, no host name, no ordering that depends on a map. Two calls with the
+ * same host produce the same bytes, which is what makes it safe to cache in a system prompt.
+ */
+export declare const renderPlatform: (catalogue: PlatformCatalogue, host: ToolHost) => string;
+//# sourceMappingURL=platform.d.ts.map

package/build/tools/platform.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.d.ts","sourceRoot":"","sources":["../../src/tools/platform.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,QAAQ,EAAsB,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAEjF;;;;;;;;;;GAUG;AACH,eAAO,MAAM,cAAc,cAAe,iBAAiB,QAAQ,QAAQ,KAAG,MAuG7E,CAAA"}

package/build/tools/platform.js

@@ -0,0 +1,90 @@
+import { ConnectLlm, ConnectTarget } from '@owlmeans/viable-common';
+import { catalogueHelper } from './catalogue.js';
+/**
+ * The catalogue as text, narrowed to what THIS session can drive.
+ *
+ * Two rules, and the second is the point. Nothing is listed that the host does not offer, so a
+ * parent never proposes a path it cannot take. And every group that IS hidden says so in one line,
+ * because a parent reading a shorter list without an explanation concludes the platform cannot do
+ * the thing at all — and then writes the application by hand.
+ *
+ * Deterministic: no clock, no host name, no ordering that depends on a map. Two calls with the
+ * same host produce the same bytes, which is what makes it safe to cache in a system prompt.
+ */
+export const renderPlatform = (catalogue, host) => {
+    const offered = new Set(catalogueHelper.visibleTools(host).map(tool => tool.name));
+    const has = (tool) => offered.has(tool);
+    const lines = [
+        'THE OWLMEANS VIABLE PLATFORM',
+        '',
+        'It builds full-stack web applications from a description, and converts applications that'
+            + ' already exist onto the same rails. Everything below is what the platform does; the'
+            + ' "in this session" notes say which of it you can drive from here.',
+        '',
+        `This session: target=${host.target} (${host.target === ConnectTarget.Local
+            ? 'the sources live on this machine'
+            : 'the sources live in a platform slot'}), llm=${host.llm} (${
+        // Read off the offered set, never off the mode alone. A host that cannot hold a session
+        // cannot collect a task whatever the account setting says — and the setting is `local` there
+        // often enough (an entitled account gets it on the URL host too) that branching on the mode
+        // told such a parent to poll a `next_task` it was never offered, which it reports as a
+        // broken server. Where the loop IS offered, every model call is the parent's.
+        has('next_task')
+            ? 'every model call the platform makes for this session is yours to perform — project'
+                + ' drafting, content checks and formatting included'
+            : host.llm === ConnectLlm.Local
+                ? 'the platform performs its own model calls — this session cannot collect one'
+                : 'the platform performs every model call itself, a conversion\'s included'}).`,
+        '',
+        'WHAT IT RUNS',
+    ];
+    for (const pipeline of catalogue.pipelines) {
+        const startable = pipeline.startedBy.filter(has);
+        lines.push('', `  ${pipeline.title} · ${pipeline.id}`, `    ${pipeline.what}`, startable.length > 0
+            ? `    start: ${startable.join(' or ')}`
+            : `    not startable in this session (${pipeline.startedBy.join(', ')} is not offered here)`);
+        if (pipeline.stages != null)
+            lines.push(`    steps: ${pipeline.stages.join(' → ')}`);
+        lines.push(`    ${pipeline.resumable ? 'resumable — resume_pipeline continues it' : 'not resumable'}`);
+        if (pipeline.waitsFor != null && pipeline.waitsFor.length > 0) {
+            lines.push(`    may wait for: ${pipeline.waitsFor.join(', ')}`);
+        }
+    }
+    // Rendered whole on every host: what the platform GENERATES does not depend on which connector
+    // is reading. Only the tool names are narrowed, like everywhere else.
+    lines.push('', 'WHAT A GENERATED APPLICATION CARRIES');
+    for (const feature of catalogue.features) {
+        lines.push('', `  ${feature.title}`, `    ${feature.what}`);
+        const tools = (feature.tools ?? []).filter(has);
+        if (tools.length > 0)
+            lines.push(`    see: ${tools.join(', ')}`);
+    }
+    lines.push('', 'WHAT YOU CAN CALL');
+    const hidden = [];
+    for (const capability of catalogue.capabilities) {
+        const available = capability.tools.filter(has);
+        if (available.length < 1) {
+            hidden.push(capability);
+            continue;
+        }
+        lines.push('', `  ${capability.title}`, `    ${capability.what}`, `    ${available.join(', ')}`);
+    }
+    if (hidden.length > 0) {
+        lines.push('', 'NOT IN THIS SESSION (the platform does it; this connector cannot)');
+        for (const capability of hidden) {
+            lines.push(`  ${capability.title} — ${capability.absent}`);
+        }
+    }
+    lines.push('', 'LIMITS', `  every tool answers within ${Math.round(catalogue.limits.toolDeadlineMs / 1000)}s — long work`
+        + ' continues server-side and is read through its domain status tool', 
+    // Named only where the tool is offered: a limit for a call that is not in the list is an
+    // invitation to make it.
+    ...(has('next_task')
+        ? [`  next_task waits up to ${Math.round(catalogue.limits.nextTaskWaitMs / 1000)}s`]
+        : []), ...(has('next_question')
+        ? [`  next_question waits up to ${Math.round(catalogue.limits.nextQuestionWaitMs / 1000)}s`]
+        : []), '', 'Publishing to production, custom domains and billing are done by the user in the web'
+        + ' application, and are deliberately not offered through a connector.');
+    return lines.join('\n');
+};
+//# sourceMappingURL=platform.js.map

package/build/tools/platform.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"platform.js","sourceRoot":"","sources":["../../src/tools/platform.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAEnE,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAGhD;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,SAA4B,EAAE,IAAc,EAAU,EAAE;IACrF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAA;IAClF,MAAM,GAAG,GAAG,CAAC,IAAY,EAAW,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAExD,MAAM,KAAK,GAAa;QACtB,8BAA8B;QAC9B,EAAE;QACF,0FAA0F;cACxF,qFAAqF;cACrF,mEAAmE;QACrE,EAAE;QACF,wBAAwB,IAAI,CAAC,MAAM,KACjC,IAAI,CAAC,MAAM,KAAK,aAAa,CAAC,KAAK;YACjC,CAAC,CAAC,kCAAkC;YACpC,CAAC,CAAC,qCACN,UAAU,IAAI,CAAC,GAAG,KAAK;QACrB,wFAAwF;QACxF,6FAA6F;QAC7F,4FAA4F;QAC5F,uFAAuF;QACvF,8EAA8E;QAC9E,GAAG,CAAC,WAAW,CAAC;YACd,CAAC,CAAC,oFAAoF;kBAClF,mDAAmD;YACvD,CAAC,CAAC,IAAI,CAAC,GAAG,KAAK,UAAU,CAAC,KAAK;gBAC7B,CAAC,CAAC,6EAA6E;gBAC/E,CAAC,CAAC,yEACR,IAAI;QACJ,EAAE;QACF,cAAc;KACf,CAAA;IAED,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,SAAS,EAAE,CAAC;QAC3C,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAChD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,KAAK,QAAQ,CAAC,KAAK,MAAM,QAAQ,CAAC,EAAE,EAAE,EACtC,OAAO,QAAQ,CAAC,IAAI,EAAE,EACtB,SAAS,CAAC,MAAM,GAAG,CAAC;YAClB,CAAC,CAAC,cAAc,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;YACxC,CAAC,CAAC,sCAAsC,QAAQ,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,uBAAuB,CAC/F,CAAA;QACD,IAAI,QAAQ,CAAC,MAAM,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,cAAc,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;QACpF,KAAK,CAAC,IAAI,CACR,OAAO,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC,0CAA0C,CAAC,CAAC,CAAC,eAAe,EAAE,CAC3F,CAAA;QACD,IAAI,QAAQ,CAAC,QAAQ,IAAI,IAAI,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,IAAI,CAAC,qBAAqB,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACjE,CAAC;IACH,CAAC;IAED,+FAA+F;IAC/F,sEAAsE;IACtE,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,sCAAsC,CAAC,CAAA;IACtD,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,QAAQ,EAAE,CAAC;QACzC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,KAAK,OAAO,CAAC,KAAK,EAAE,EAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;QAC3D,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC/C,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,YAAY,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAClE,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mBAAmB,CAAC,CAAA;IACnC,MAAM,MAAM,GAAyB,EAAE,CAAA;IACvC,KAAK,MAAM,UAAU,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;QAChD,MAAM,SAAS,GAAG,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QAC9C,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACzB,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;YAEvB,SAAQ;QACV,CAAC;QACD,KAAK,CAAC,IAAI,CACR,EAAE,EACF,KAAK,UAAU,CAAC,KAAK,EAAE,EACvB,OAAO,UAAU,CAAC,IAAI,EAAE,EACxB,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9B,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtB,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAA;QACnF,KAAK,MAAM,UAAU,IAAI,MAAM,EAAE,CAAC;YAChC,KAAK,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,KAAK,MAAM,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI,CACR,EAAE,EACF,QAAQ,EACR,+BAA+B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,eAAe;UAC9F,mEAAmE;IACrE,yFAAyF;IACzF,yBAAyB;IACzB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC;QAClB,CAAC,CAAC,CAAC,2BAA2B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,CAAC;QACpF,CAAC,CAAC,EAAE,CAAC,EACP,GAAG,CAAC,GAAG,CAAC,eAAe,CAAC;QACtB,CAAC,CAAC,CAAC,+BAA+B,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,kBAAkB,GAAG,IAAI,CAAC,GAAG,CAAC;QAC5F,CAAC,CAAC,EAAE,CAAC,EACP,EAAE,EACF,sFAAsF;UACpF,qEAAqE,CACxE,CAAA;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC,CAAA"}

package/build/tools/production/types.d.ts

@@ -0,0 +1,22 @@
+import type { ConnectProductionAuth, ConnectProductionDomain, ConnectProductionStatus } from '@owlmeans/viable-common';
+/** How the production tools put the platform's answers into words. */
+export interface ProductionToolHelper {
+    /**
+     * The production workload — its status and address, or that it was never published — then its
+     * custom domain in one line, and what to do next.
+     */
+    renderStatus: (status: ConnectProductionStatus) => string;
+    /**
+     * A custom domain: its status, and — until it is active — the two DNS records the owner creates at
+     * their DNS provider, each with the provider's own state of it, and what to do next.
+     */
+    renderDomain: (domain: ConnectProductionDomain | null) => string;
+    /**
+     * The standalone sign-in configuration a self-hosted copy uses. The client secret is never part of
+     * it: only whether one is set, and where the owner reads it.
+     */
+    renderAuth: (auth: ConnectProductionAuth) => string;
+    /** The stored redirect addresses after a replace, and when they apply. */
+    renderRedirects: (redirectUris: string[]) => string;
+}
+//# sourceMappingURL=types.d.ts.map

package/build/tools/production/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/production/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,MAAM,yBAAyB,CAAA;AAEtH,sEAAsE;AACtE,MAAM,WAAW,oBAAoB;IACnC;;;OAGG;IACH,YAAY,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,MAAM,CAAA;IACzD;;;OAGG;IACH,YAAY,EAAE,CAAC,MAAM,EAAE,uBAAuB,GAAG,IAAI,KAAK,MAAM,CAAA;IAChE;;;OAGG;IACH,UAAU,EAAE,CAAC,IAAI,EAAE,qBAAqB,KAAK,MAAM,CAAA;IACnD,0EAA0E;IAC1E,eAAe,EAAE,CAAC,YAAY,EAAE,MAAM,EAAE,KAAK,MAAM,CAAA;CACpD"}

package/build/tools/production/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/tools/production/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/production/types.ts"],"names":[],"mappings":""}

package/build/tools/production.d.ts

@@ -0,0 +1,4 @@
+import type { ProductionToolHelper } from './production/types.js';
+export declare const createProductionToolHelper: () => ProductionToolHelper;
+export declare const productionToolHelper: ProductionToolHelper;
+//# sourceMappingURL=production.d.ts.map

package/build/tools/production.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.d.ts","sourceRoot":"","sources":["../../src/tools/production.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAA;AAEjE,eAAO,MAAM,0BAA0B,QAAO,oBAmF7C,CAAA;AAED,eAAO,MAAM,oBAAoB,sBAA+B,CAAA"}

package/build/tools/production.js

@@ -0,0 +1,80 @@
+import { DOMAIN_STATUS_WORDS, PRODUCTION_STATUS_WORDS } from './consts.local.js';
+import { refusalHelper } from './refusal.js';
+export const createProductionToolHelper = () => {
+    const addressOf = (domain) => domain?.customDomain != null && domain.status === 'linked'
+        ? domain.customDomain
+        : domain?.generatedHost != null && domain.generatedHost !== '' ? domain.generatedHost : null;
+    /** The provider's own word for one record, when it said one. */
+    const said = (state) => state != null && state !== '' ? ` — provider: ${state}` : '';
+    const renderDomain = domain => {
+        if (domain?.customDomain == null || domain.customDomain === '') {
+            return 'custom domain: none — custom_domain { action: attach, domain } attaches one'
+                + (domain?.generatedHost != null && domain.generatedHost !== '' ? `; the site answers on ${domain.generatedHost}` : '')
+                + '.';
+        }
+        const lines = [`custom domain ${domain.customDomain}: ${DOMAIN_STATUS_WORDS[domain.status] ?? domain.status}`];
+        if (domain.status === 'linked') {
+            lines.push(`The site answers on https://${domain.customDomain}; ${domain.generatedHost} keeps serving too.`);
+            return lines.join('\n');
+        }
+        const records = [
+            ...(domain.cnameTarget != null && domain.cnameTarget !== ''
+                ? [`  CNAME ${domain.customDomain} → ${domain.cnameTarget} (the traffic${said(domain.hostnameStatus)})`] : []),
+            ...(domain.dcvName != null && domain.dcvName !== '' && domain.dcvValue != null && domain.dcvValue !== ''
+                ? [`  CNAME ${domain.dcvName} → ${domain.dcvValue} (the certificate${said(domain.sslStatus)})`] : []),
+        ];
+        if (records.length > 0) {
+            lines.push('The user creates these DNS records at the domain\'s DNS provider:', ...records);
+        }
+        if (domain.message != null && domain.message !== '') {
+            lines.push(`the provider said: ${refusalHelper.refusalPhrase(domain.message)}`);
+        }
+        lines.push('next: once the records are in place, custom_domain { action: verify } asks the provider again;'
+            + ' DNS can take minutes to hours to reach it.');
+        return lines.join('\n');
+    };
+    const renderStatus = ({ workload, domain }) => {
+        if (workload == null) {
+            return 'Not published yet — publish_production builds the current sources and deploys them as the'
+                + ' production site (with the user\'s agreement, confirm: true).';
+        }
+        const address = addressOf(domain);
+        const lines = [
+            `production: ${PRODUCTION_STATUS_WORDS[workload.status] ?? workload.status}`
+                + (address != null && workload.status === 'live' ? ` · https://${address}` : ''),
+        ];
+        for (const warning of [workload.lastError, workload.buildWarning, workload.backendWarning]) {
+            if (warning != null && warning !== '')
+                lines.push(`warning: ${refusalHelper.refusalPhrase(warning)}`);
+        }
+        lines.push(renderDomain(domain));
+        if (workload.status === 'building' || workload.status === 'deploying') {
+            lines.push('next: production_status again in a minute — a build takes several.');
+        }
+        else if (workload.status === 'not-deployed' || workload.status === 'error') {
+            lines.push('next: production_control { action: restart } brings the last published build back;'
+                + ' publish_production publishes the current sources.');
+        }
+        return lines.join('\n');
+    };
+    const renderAuth = auth => [
+        'The production sign-in (OIDC) a self-hosted copy of this project is configured with:',
+        `issuer: ${auth.issuerUrl !== '' ? auth.issuerUrl : 'not provisioned yet — the first publish provisions it'}`,
+        `client id: ${auth.clientId !== '' ? auth.clientId : 'not provisioned yet — the first publish provisions it'}`,
+        `client secret: ${auth.secretSet
+            ? 'set — never shown here; the user reads it in the OwlMeans web application (Publish → Auth)'
+            : 'not set yet — the first publish provisions it'}`,
+        ...(auth.customDomain != null || auth.generatedHost !== '' ? [`site: https://${auth.customDomain ?? auth.generatedHost}`] : []),
+        auth.redirectUris.length > 0
+            ? `the owner's own redirect addresses:\n${auth.redirectUris.map(uri => `  ${uri}`).join('\n')}`
+            : 'the owner\'s own redirect addresses: none — the site\'s own address is always allowed',
+        'next: set_production_redirects { redirects } replaces that list; it applies on the next publish_production.',
+    ].join('\n');
+    const renderRedirects = redirectUris => (redirectUris.length > 0
+        ? `Stored ${redirectUris.length} redirect address(es):\n${redirectUris.map(uri => `  ${uri}`).join('\n')}`
+        : 'The owner\'s redirect addresses were cleared.')
+        + '\nThey reach the sign-in on the next publish_production.';
+    return { renderStatus, renderDomain, renderAuth, renderRedirects };
+};
+export const productionToolHelper = createProductionToolHelper();
+//# sourceMappingURL=production.js.map

package/build/tools/production.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"production.js","sourceRoot":"","sources":["../../src/tools/production.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAA;AAChF,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAG5C,MAAM,CAAC,MAAM,0BAA0B,GAAG,GAAyB,EAAE;IACnE,MAAM,SAAS,GAAG,CAAC,MAAsC,EAAiB,EAAE,CAC1E,MAAM,EAAE,YAAY,IAAI,IAAI,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ;QACxD,CAAC,CAAC,MAAM,CAAC,YAAY;QACrB,CAAC,CAAC,MAAM,EAAE,aAAa,IAAI,IAAI,IAAI,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAA;IAEhG,gEAAgE;IAChE,MAAM,IAAI,GAAG,CAAC,KAAyB,EAAU,EAAE,CAAC,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,gBAAgB,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAA;IAEhH,MAAM,YAAY,GAAyC,MAAM,CAAC,EAAE;QAClE,IAAI,MAAM,EAAE,YAAY,IAAI,IAAI,IAAI,MAAM,CAAC,YAAY,KAAK,EAAE,EAAE,CAAC;YAC/D,OAAO,6EAA6E;kBAChF,CAAC,MAAM,EAAE,aAAa,IAAI,IAAI,IAAI,MAAM,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,yBAAyB,MAAM,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;kBACrH,GAAG,CAAA;QACT,CAAC;QACD,MAAM,KAAK,GAAG,CAAC,iBAAiB,MAAM,CAAC,YAAY,KAAK,mBAAmB,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QAC9G,IAAI,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC/B,KAAK,CAAC,IAAI,CAAC,+BAA+B,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,aAAa,qBAAqB,CAAC,CAAA;YAE5G,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACzB,CAAC;QACD,MAAM,OAAO,GAAG;YACd,GAAG,CAAC,MAAM,CAAC,WAAW,IAAI,IAAI,IAAI,MAAM,CAAC,WAAW,KAAK,EAAE;gBACzD,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,YAAY,MAAM,MAAM,CAAC,WAAW,gBAAgB,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChH,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,IAAI,MAAM,CAAC,QAAQ,IAAI,IAAI,IAAI,MAAM,CAAC,QAAQ,KAAK,EAAE;gBACtG,CAAC,CAAC,CAAC,WAAW,MAAM,CAAC,OAAO,MAAM,MAAM,CAAC,QAAQ,oBAAoB,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;SACxG,CAAA;QACD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,KAAK,CAAC,IAAI,CAAC,mEAAmE,EAAE,GAAG,OAAO,CAAC,CAAA;QAC7F,CAAC;QACD,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,IAAI,MAAM,CAAC,OAAO,KAAK,EAAE,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,sBAAsB,aAAa,CAAC,aAAa,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACjF,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,gGAAgG;cACvG,6CAA6C,CAAC,CAAA;QAElD,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC,CAAA;IAED,MAAM,YAAY,GAAyC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE;QAClF,IAAI,QAAQ,IAAI,IAAI,EAAE,CAAC;YACrB,OAAO,2FAA2F;kBAC9F,+DAA+D,CAAA;QACrE,CAAC;QACD,MAAM,OAAO,GAAG,SAAS,CAAC,MAAM,CAAC,CAAA;QACjC,MAAM,KAAK,GAAG;YACZ,eAAe,uBAAuB,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE;kBAC1E,CAAC,OAAO,IAAI,IAAI,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,cAAc,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACjF,CAAA;QACD,KAAK,MAAM,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YAC3F,IAAI,OAAO,IAAI,IAAI,IAAI,OAAO,KAAK,EAAE;gBAAE,KAAK,CAAC,IAAI,CAAC,YAAY,aAAa,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;QACvG,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,CAAA;QAChC,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACtE,KAAK,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAA;QAClF,CAAC;aAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,cAAc,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;YAC7E,KAAK,CAAC,IAAI,CAAC,oFAAoF;kBAC3F,oDAAoD,CAAC,CAAA;QAC3D,CAAC;QAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzB,CAAC,CAAA;IAED,MAAM,UAAU,GAAuC,IAAI,CAAC,EAAE,CAAC;QAC7D,sFAAsF;QACtF,WAAW,IAAI,CAAC,SAAS,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,uDAAuD,EAAE;QAC7G,cAAc,IAAI,CAAC,QAAQ,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,uDAAuD,EAAE;QAC9G,kBAAkB,IAAI,CAAC,SAAS;YAC9B,CAAC,CAAC,4FAA4F;YAC9F,CAAC,CAAC,+CAA+C,EAAE;QACrD,GAAG,CAAC,IAAI,CAAC,YAAY,IAAI,IAAI,IAAI,IAAI,CAAC,aAAa,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,IAAI,CAAC,YAAY,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/H,IAAI,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;YAC1B,CAAC,CAAC,wCAAwC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;YAC/F,CAAC,CAAC,uFAAuF;QAC3F,6GAA6G;KAC9G,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAEZ,MAAM,eAAe,GAA4C,YAAY,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC;QACvG,CAAC,CAAC,UAAU,YAAY,CAAC,MAAM,2BAA2B,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QAC1G,CAAC,CAAC,+CAA+C,CAAC;UAChD,0DAA0D,CAAA;IAE9D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,UAAU,EAAE,eAAe,EAAE,CAAA;AACpE,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,oBAAoB,GAAG,0BAA0B,EAAE,CAAA"}

package/build/tools/refusal/types.d.ts

@@ -0,0 +1,95 @@
+import type { ConnectConfirmation } from '@owlmeans/viable-common';
+import type { RefusalPhrase } from '../types.js';
+/** What a parent agent is told when the platform refuses it — one actionable sentence per refusal. */
+export interface RefusalHelper {
+    /**
+     * What the model tells a PERSON when a paid action waits for the EU spend consent. Only a person
+     * can give that express request, in the browser, so the sentence names the page and says outright
+     * that retrying first is pointless: a model that retries on its own gets the same refusal.
+     */
+    consentRequiredPhrase: (url: string, deadline?: Date) => string;
+    /**
+     * What the model tells a PERSON when a conversion verb waits for their agreement — what the plan's
+     * conversion limit covers and has left, what the stage is estimated at and where that comes from
+     * (credit limits as credits, topped-up credits as money) — and the exact call that gives it.
+     * Unlike the consent, this is agreed to in the conversation; the sentence still forbids the model
+     * from sending `confirm: true` on its own, because the call it unlocks spends the user's money.
+     *
+     * `retry` is the call to repeat (the caller knows the project and the arguments); without it, the
+     * same tool with the same arguments and `confirm: true`.
+     */
+    confirmationRequiredPhrase: (fields: ConnectConfirmation, retry?: string) => string;
+    /**
+     * A bare 428 answered to a conversion verb sent WITHOUT `confirm` — what a production body leaves
+     * of a refusal (an incident id and the status). It is the confirmation unless the organization's
+     * spend consent is also missing, and the two cannot be told apart here, so both are said, in the
+     * order they are met: the confirmation, then — only if the confirmed call is refused again — the
+     * consent in the browser.
+     */
+    unconfirmedConversionPhrase: (retry: string) => string;
+    /**
+     * What the model tells a PERSON when the organization's plan lacks the capability an action
+     * needs (`capability-required:<param|param>`): which feature, and that the plan is changed in the
+     * browser. Nothing a parent does unlocks it.
+     */
+    capabilityRequiredPhrase: (params: string) => string;
+    /**
+     * What the model tells a PERSON when one of the plan's limits has no room left
+     * (`limit-exhausted:<key>:<used>/<limit>[:<resets at>]`): which limit, how full, when it renews.
+     */
+    limitExhaustedPhrase: (packed: string) => string;
+    /**
+     * The refusals only a PERSON can resolve — the balance, the EU spend consent, a conversion's
+     * confirmation, a capability the plan lacks and a limit with no room — in the words the model
+     * relays to them, or `null` for anything else. The first three are matched by class (their fields
+     * travel packed in the message and are rebuilt by `finalizeUnmarshal()`); the plan's two by their
+     * marker, because their classes are declared in a package this one does not depend on. `retry` is
+     * the confirmation's call to repeat, where the caller knows it.
+     */
+    personRefusalPhrase: (e: unknown, retry?: string) => string | null;
+    /**
+     * What a refusal SAYS, with the marshalling and the stack taken off it.
+     *
+     * A marshalled error is `type|||message|||stack`, so the middle segment is the marker and the last
+     * one is a stack trace from a machine the reader has no access to. What is left is the marker
+     * alone — which is the fallback whenever nothing in {@link RefusalHelper.refusals} recognises it, because a
+     * marker names the refusal even when no sentence has been written for it yet.
+     *
+     * Text that was never marshalled is returned exactly as it is. A stack only ever arrives inside
+     * the marshalling, and the same field carries things that are not refusals at all — a run's
+     * `error` doubles as the build warning a slot recorded, and cutting that at the first line that
+     * looks like a stack frame would throw away the diagnostics somebody asked for.
+     */
+    refusalMessage: (e: unknown) => string;
+    /**
+     * The one sentence a parent agent is given for anything that refused it.
+     *
+     * The reader is a language model holding a tool result, and it acts on what it reads: a marshalled
+     * type name followed by a stack trace tells it only that something went wrong somewhere, so it
+     * retries a call that can never succeed, or reports the server as broken. A refusal is an ANSWER —
+     * this origin is the project, that decision is not available here, the balance will not cover it —
+     * and every one of them has something the parent should do next.
+     *
+     * An unknown marker keeps that property rather than dropping it: the marker stays, because it is
+     * the honest answer as the platform grows refusals faster than phrasings, and {@link
+     * UNPHRASED_REFUSAL} names the tool to call — a parent left holding wire text alone has neither.
+     */
+    refusalPhrase: (e: unknown) => string;
+    /**
+     * Every refusal a connector can be handed, and the one sentence it is handed instead.
+     *
+     * Ordered by SPECIFICITY, because the first marker the message contains wins: every reason of a
+     * family sits above the family's own marker, or the family would answer for all of them. A marker
+     * that is a substring of a later one is a marker that shadows it, which `catalogue.spec.ts` pins
+     * rather than leaves to review.
+     *
+     * The markers are literals here on purpose. They are wire text owned by packages this one does not
+     * depend on, and copying the constant would need a dependency edge from a tooling package onto the
+     * platform's own — so they are spelled once, in the order the platform spells them, and are
+     * exactly the substrings the manager's own phrasing matches on. Anything unmatched falls back to
+     * its marker, which is the one outcome that stays honest as the platform grows a refusal this
+     * table has never heard of.
+     */
+    refusals: RefusalPhrase[];
+}
+//# sourceMappingURL=types.d.ts.map

package/build/tools/refusal/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/tools/refusal/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,yBAAyB,CAAA;AAClE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAEhD,sGAAsG;AACtG,MAAM,WAAW,aAAa;IAC5B;;;;OAIG;IACH,qBAAqB,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,IAAI,KAAK,MAAM,CAAA;IAC/D;;;;;;;;;OASG;IACH,0BAA0B,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,CAAA;IACnF;;;;;;OAMG;IACH,2BAA2B,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAA;IACtD;;;;OAIG;IACH,wBAAwB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IACpD;;;OAGG;IACH,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,MAAM,CAAA;IAChD;;;;;;;OAOG;IACH,mBAAmB,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;IAClE;;;;;;;;;;;;OAYG;IACH,cAAc,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAA;IACtC;;;;;;;;;;;;OAYG;IACH,aAAa,EAAE,CAAC,CAAC,EAAE,OAAO,KAAK,MAAM,CAAA;IACrC;;;;;;;;;;;;;;OAcG;IACH,QAAQ,EAAE,aAAa,EAAE,CAAA;CAC1B"}

package/build/tools/refusal/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/build/tools/refusal/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/tools/refusal/types.ts"],"names":[],"mappings":""}

package/build/tools/refusal.d.ts

@@ -0,0 +1,4 @@
+import type { RefusalHelper } from './refusal/types.js';
+export declare const createRefusalHelper: () => RefusalHelper;
+export declare const refusalHelper: RefusalHelper;
+//# sourceMappingURL=refusal.d.ts.map

package/build/tools/refusal.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"refusal.d.ts","sourceRoot":"","sources":["../../src/tools/refusal.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAEvD,eAAO,MAAM,mBAAmB,QAAO,aAurBtC,CAAA;AAED,eAAO,MAAM,aAAa,eAAwB,CAAA"}