@trydreamstate/cli 1.3.3 → 1.3.4

package/dist/commands/workflows.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/commands/workflows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAoC,cAAc,EAAe,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAC5G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAO3C,eAAO,MAAM,cAAc,EAAE,YAAY,EA4BxC,CAAC;AAEF,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,qBAAqB,gCAA4E,CAAC;AAC/G,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,UAAU,CAAC,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAG1J"}
+{"version":3,"file":"workflows.d.ts","sourceRoot":"","sources":["../../src/commands/workflows.ts"],"names":[],"mappings":"AAAA,OAAO,EAAiE,KAAK,YAAY,EAAE,MAAM,UAAU,CAAC;AAC5G,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAC3C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAInD,eAAO,MAAM,cAAc,EAAE,YAAY,EAMpC,CAAC;AAEN,eAAO,MAAM,eAAe,QAA+C,CAAC;AAC5E,eAAO,MAAM,qBAAqB,gCAA4E,CAAC;AAC/G,wBAAsB,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,CAAC,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAQjJ"}

package/dist/commands/workflows.js

@@ -1,45 +1,29 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.parseWorkflowsCommand = exports.WORKFLOWS_USAGE = exports.WORKFLOW_VERBS = void 0;
 exports.runWorkflowsCommand = runWorkflowsCommand;
 const shared_1 = require("./shared");
-const automation = [{ name: 'id', into: 'automation_id' }];
-const workflow = [{ name: 'id', into: 'workflow_id' }];
-// Route map only. `tools get` owns every remote parameter, type, requirement and
-// description. Positionals are documented CLI aliases for canonical input fields.
-exports.WORKFLOW_VERBS = [
-    { verb: 'list', capabilityId: 'workflow.automations.list' },
-    { verb: 'init', capabilityId: 'workflow.automations.lint', local: 'init' },
-    { verb: 'get', capabilityId: 'workflow.automations.get', positional: automation },
-    { verb: 'create', capabilityId: 'workflow.automations.compose' },
-    { verb: 'update', capabilityId: 'workflow.automations.update', positional: automation },
-    { verb: 'lint', capabilityId: 'workflow.automations.lint', positional: automation },
-    { verb: 'preview', capabilityId: 'workflow.automations.preview', positional: automation },
-    { verb: 'variables', capabilityId: 'workflow.automations.variables_list', positional: automation },
-    { verb: 'node-catalog', capabilityId: 'workflow.automations.node_catalog' },
-    { verb: 'node-inspect', capabilityId: 'workflow.automations.node_inspect' },
-    { verb: 'node-add', capabilityId: 'workflow.automations.node_add', positional: automation },
-    { verb: 'node-patch', capabilityId: 'workflow.automations.node_patch', positional: automation },
-    { verb: 'node-remove', capabilityId: 'workflow.automations.node_remove', positional: automation },
-    { verb: 'node-move', capabilityId: 'workflow.automations.node_move', positional: automation },
-    { verb: 'field-options', capabilityId: 'workflow.automations.field_options' },
-    { verb: 'draft-save', capabilityId: 'workflow.workflows.draft_save', positional: workflow },
-    { verb: 'publish', capabilityId: 'workflow.workflows.draft_publish', positional: workflow },
-    { verb: 'activate', capabilityId: 'workflow.workflows.activate', positional: workflow },
-    { verb: 'deactivate', capabilityId: 'workflow.workflows.deactivate', positional: workflow },
-    { verb: 'enroll', capabilityId: 'workflow.workflows.enroll_selection', positional: workflow },
-    { verb: 'runs', capabilityId: 'workflow.workflows.runs_list', positional: workflow },
-    { verb: 'run', capabilityId: 'workflow.workflows.run_trace_get', positional: workflow },
-    { verb: 'retry', capabilityId: 'workflow.workflows.run_retry', positional: workflow },
-    { verb: 'duplicate', capabilityId: 'workflow.automations.duplicate', positional: automation },
-    { verb: 'archive', capabilityId: 'workflow.automations.archive', positional: automation },
-    { verb: 'export', capabilityId: 'workflow.automations.export', positional: automation },
-    { verb: 'import', capabilityId: 'workflow.automations.import' },
-];
+const errors_1 = require("../errors");
+const packVerbs_generated_json_1 = __importDefault(require("../generated/packVerbs.generated.json"));
+exports.WORKFLOW_VERBS = packVerbs_generated_json_1.default.verbs
+    .filter(({ command }) => command.startsWith('workflows '))
+    .map(({ command, capabilityId, positional, local }) => ({
+    verb: command.slice('workflows '.length), capabilityId,
+    ...(positional ? { positional } : {}),
+    ...(local === 'init' ? { local: 'init' } : {}),
+}));
 exports.WORKFLOWS_USAGE = (0, shared_1.renderPackUsage)('workflows', exports.WORKFLOW_VERBS);
 exports.parseWorkflowsCommand = (0, shared_1.buildPackParser)('workflows', 'workflow', exports.WORKFLOW_VERBS, exports.WORKFLOWS_USAGE);
 async function runWorkflowsCommand(context, command, stdout) {
-    if (command.command === 'pack' && command.verb === 'init')
-        return (0, shared_1.runPackInit)('workflow', command, stdout);
+    // init writes a local file and calls no API, so it has no gated context.
+    if (command.command === 'pack' && command.verb === 'init') {
+        (0, shared_1.runPackInit)('workflow', command, stdout);
+        return;
+    }
+    if (!context)
+        throw new errors_1.CliUsageError('workflows commands other than init require an authenticated session.');
     await (0, shared_1.runPackCommand)(context, command, stdout);
 }

package/dist/errors.d.ts

@@ -6,7 +6,7 @@ export declare class CliUsageError extends Error {
  * with a major version. `dreamstate --help` renders their stable meanings.
  *
  * Contract C5 (cross-surface): 0 ok, 1 generic, 2 usage, 3 auth, 4 not found,
- * 5 conflict/validation, 6 rate limited, 7 approval/consent/spend gate required,
+ * 5 conflict/validation, 6 rate limited, 7 repair.kind ask_user (a person must decide),
  * 8 cli_update_required, 9 other refusal. Where this CLI had already published a
  * different meaning it kept the published one and the mapping is documented:
  *
@@ -52,10 +52,6 @@ export declare const CLI_LOCAL_ERROR_REPAIRS: {
         readonly kind: "server_defect";
         readonly hint: "The API response was not a Dreamstate envelope; report the trace id if one was returned.";
     };
-    readonly invalid_tool_turn_token: {
-        readonly kind: "server_defect";
-        readonly hint: "The API did not provide a runnable tool turn; retry after reporting the response trace id.";
-    };
     readonly invalid_web_url: {
         readonly kind: "server_defect";
         readonly hint: "The API returned an invalid web URL; report the response trace id.";
@@ -73,6 +69,6 @@ export declare const CLI_LOCAL_ERROR_REPAIRS: {
         readonly hint: "Sign in with dreamstate login, then retry.";
     };
 };
-export declare function isApprovalGateCode(code: string | undefined): boolean;
+export declare function isApprovalRepair(error: unknown): boolean;
 export declare function isLocalRefusalCode(code: string | undefined): boolean;
 //# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;CAaX,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CASlE,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAS1B,CAAC;AAyCX,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEpE;AAQD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEpE"}
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA,qBAAa,aAAc,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;;;;GAcG;AACH,eAAO,MAAM,QAAQ;;;;;;;;;;;;;CAaX,CAAC;AAEX;;;;;;GAMG;AACH,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAQlE,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQ1B,CAAC;AAEX,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAMxD;AAQD,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAEpE"}

package/dist/errors.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLI_LOCAL_ERROR_REPAIRS = exports.CLI_LOCAL_ERROR_CODES = exports.CLI_EXIT = exports.CliUsageError = void 0;
-exports.isApprovalGateCode = isApprovalGateCode;
+exports.isApprovalRepair = isApprovalRepair;
 exports.isLocalRefusalCode = isLocalRefusalCode;
 class CliUsageError extends Error {
     constructor(message) {
@@ -15,7 +15,7 @@ exports.CliUsageError = CliUsageError;
  * with a major version. `dreamstate --help` renders their stable meanings.
  *
  * Contract C5 (cross-surface): 0 ok, 1 generic, 2 usage, 3 auth, 4 not found,
- * 5 conflict/validation, 6 rate limited, 7 approval/consent/spend gate required,
+ * 5 conflict/validation, 6 rate limited, 7 repair.kind ask_user (a person must decide),
  * 8 cli_update_required, 9 other refusal. Where this CLI had already published a
  * different meaning it kept the published one and the mapping is documented:
  *
@@ -50,7 +50,6 @@ exports.CLI_LOCAL_ERROR_CODES = {
     network_error: 'The request never reached the server (DNS, connection refused, TLS). Nothing executed.',
     request_timeout: 'The server did not answer in time. The effect may have happened. Read the target back first. If the effect is there, report it done. If not, repeat the identical call once with the first attempt\'s idempotency key, never a new one. If the read-back is inconclusive, or the repeat is refused pending acknowledgement, ask the person.',
     invalid_response: 'The server answered with something that is not a Dreamstate envelope.',
-    invalid_tool_turn_token: 'tools get returned no tool_turn_token to run with.',
     invalid_web_url: 'The API returned a web_url that is not a safe http(s) URL.',
     web_url_unavailable: '--open was given but the response carries no web_url.',
     plugin_install_failed: 'dreamstate install could not install the plugin for any agent.',
@@ -61,51 +60,19 @@ exports.CLI_LOCAL_ERROR_REPAIRS = {
     network_error: { kind: 'wait', hint: 'Retry the unchanged request when network connectivity is available.' },
     request_timeout: { kind: 'ask_user', hint: 'Read the target back first. If absent, repeat once with the same idempotency key; otherwise ask the person.' },
     invalid_response: { kind: 'server_defect', hint: 'The API response was not a Dreamstate envelope; report the trace id if one was returned.' },
-    invalid_tool_turn_token: { kind: 'server_defect', hint: 'The API did not provide a runnable tool turn; retry after reporting the response trace id.' },
     invalid_web_url: { kind: 'server_defect', hint: 'The API returned an invalid web URL; report the response trace id.' },
     web_url_unavailable: { kind: 'not_possible', hint: 'This result has no web URL to open.' },
     plugin_install_failed: { kind: 'ask_user', hint: 'Install a supported agent, then retry plugin installation.' },
     skills_authentication_required: { kind: 'ask_user', hint: 'Sign in with dreamstate login, then retry.' },
 };
-/**
- * Refusals that mean a person (or the caller's own spend decision) must supply
- * something before the run can proceed: an approval, a consent, a quote or a
- * spend ceiling. They exit 7, whatever HTTP status carried them, so a script
- * can stop and ask instead of retrying.
- */
-const GATE_CODES = new Set([
-    'approval_required',
-    'standing_approval_required',
-    'destructive_approval_required',
-    'owner_approval_required',
-    'knowledge_approval_required',
-    'content_approval_required',
-    'effect_unknown_approval_required',
-    'approval_cap_exceeded',
-    'approval_stale',
-    'agent_tool_policy_ask_before_changes',
-    'publish_confirmation_required',
-    'launch_authorization_required',
-    'publish_permission_required',
-    'delegation_grant_required',
-    'creator_consent_required',
-    'csv_replace_confirmation_required',
-    'quote_required',
-    'quote_mismatch',
-    'quote_stale',
-    'quote_already_used',
-    'spend_cap',
-    'spend_cap_required',
-    'spend_cap_too_low',
-    'cost_cap_exceeded',
-    'agent_paid_capability_requires_max_credits',
-    'max_rows_required',
-    'mode_required',
-    'sequence_send_cap_required',
-]);
-const GATE_CODE_PATTERN = /(?:approval|consent|confirmation|authorization)_required$|requires_approval$/;
-function isApprovalGateCode(code) {
-    return Boolean(code) && (GATE_CODES.has(code) || GATE_CODE_PATTERN.test(code));
+function isApprovalRepair(error) {
+    if (!error || typeof error !== 'object')
+        return false;
+    const repair = error.repair;
+    if (!repair || typeof repair !== 'object')
+        return false;
+    const kind = repair.kind;
+    return kind === 'ask_user';
 }
 /**
  * Refusals the CLI decides locally, before running anything, that are not usage

package/dist/gatedRun.d.ts

@@ -1,8 +1,6 @@
 import { CliError, type DreamstateClient } from './client';
 import { type IdempotencyIdentity } from './idempotency';
 export declare function code(error: unknown): string | undefined;
-export declare function toolTurnToken(value: unknown): string;
-export declare function omitsToolTurnForInlineTableRead(capabilityId: string): boolean;
 /** The capability record inside a tools get response, or null when the shape is unknown. */
 export declare function capabilityRecord(fetched: unknown): Record<string, unknown> | null;
 /**

package/dist/gatedRun.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gatedRun.d.ts","sourceRoot":"","sources":["../src/gatedRun.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAA0B,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEnF,OAAO,EAA4F,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAiBnJ,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIvD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKpD;AA+BD,wBAAgB,+BAA+B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE7E;AAED,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKjF;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAKrI;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAazF;AAID;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAMrE;AAoCD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qGAAqG;IACrG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AASD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAgKvG;AAED,mGAAmG;AACnG,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAGlB"}
+{"version":3,"file":"gatedRun.d.ts","sourceRoot":"","sources":["../src/gatedRun.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAA0B,KAAK,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAEnF,OAAO,EAA4F,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AAoBnJ,wBAAgB,IAAI,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAIvD;AAUD,4FAA4F;AAC5F,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAKjF;AAgBD;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,QAAQ,EAAE,mBAAmB,GAAG,MAAM,GAAG,IAAI,CAKrI;AAED,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,QAAQ,GAAG,IAAI,CAazF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAMrE;AAoCD,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,gBAAgB,CAAC;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,mGAAmG;IACnG,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC,cAAc,CAAC;IAC9B,KAAK,EAAE,CAAC,YAAY,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,sFAAsF;IACtF,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC9B,qEAAqE;IACrE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qFAAqF;IACrF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzH;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,OAAO,CAAC;IAClB,4EAA4E;IAC5E,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,qGAAqG;IACrG,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AASD,wBAAsB,QAAQ,CAAC,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,CAsKvG;AAED,mGAAmG;AACnG,wBAAsB,cAAc,CAClC,OAAO,EAAE,eAAe,EACxB,YAAY,EAAE,MAAM,EACpB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC/B,WAAW,EAAE,MAAM,GAClB,OAAO,CAAC,OAAO,CAAC,CAGlB"}

package/dist/gatedRun.js

@@ -1,8 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.code = code;
-exports.toolTurnToken = toolTurnToken;
-exports.omitsToolTurnForInlineTableRead = omitsToolTurnForInlineTableRead;
 exports.capabilityRecord = capabilityRecord;
 exports.capabilityIdempotencyKey = capabilityIdempotencyKey;
 exports.parameterIdempotencyKey = parameterIdempotencyKey;
@@ -17,6 +15,9 @@ const idempotency_1 = require("./idempotency");
 const schemaCoercion_1 = require("./schemaCoercion");
 const runWait_1 = require("./runWait");
 const turnCache_1 = require("./turnCache");
+const capabilityPosture_1 = require("./capabilityPosture");
+const registryManifest_1 = require("./registryManifest");
+const runContract_1 = require("./runContract");
 /**
  * The one path every capability run takes: `tools run` and every pack verb
  * (`sequences ...`, `workflows ...`) call runGated. Gating lives here and only
@@ -32,43 +33,12 @@ function code(error) {
         ? error.code
         : undefined;
 }
-function toolTurnToken(value) {
+function optionalToolTurnToken(value) {
     const root = value && typeof value === 'object' ? value : {};
     const data = root.data && typeof root.data === 'object' ? root.data : {};
-    if (typeof data.tool_turn_token === 'string' && data.tool_turn_token.trim())
-        return data.tool_turn_token;
-    throw new client_1.CliError('tools get did not return a tool_turn_token.', 'invalid_tool_turn_token', 0);
-}
-/**
- * Free sync reads. The server runs these on the inline read path when
- * the body has no tool_turn_token and the request has no Idempotency-Key
- * (isInlineReadEligible). A tools get before the run is a second HTTP the
- * read does not need. Measured 2026-10-04: tables.workbooks.get full live CLI
- * 0.726s against whoami 0.455s, about 0.27s of tools get per harness read-back.
- * knowledge.brain.context.get is the same class (catalog: credit_class free,
- * async_policy.mode sync, mutates not set). Live 2026-10-05 a standalone
- * tools get of that id was 0.400s including node startup, next to whoami
- * 0.422s, so the same-process skip is one HTTP, not a second process.
- * The set name is historical. Writes are not in this set: they stay fetch-first.
- */
-const INLINE_READ_CAPABILITIES = new Set([
-    'tables.workbooks.get',
-    'tables.workbooks.overview',
-    'tables.workbooks.list',
-    'tables.columns.list',
-    'tables.columns.stats',
-    'tables.rows.query',
-    'tables.rows.get',
-    'tables.rows.count',
-    'knowledge.brain.context.get',
-    // Both are stored, free, synchronous inbox reads. Keeping either behind a
-    // tools_get turns one list or thread open into two HTTP requests, while the
-    // canonical inline-read gate already validates their read-only contract.
-    'unibox.inbox.unified_list',
-    'unibox.inbox.conversation_get',
-]);
-function omitsToolTurnForInlineTableRead(capabilityId) {
-    return INLINE_READ_CAPABILITIES.has(capabilityId);
+    return typeof data.tool_turn_token === 'string' && data.tool_turn_token.trim()
+        ? data.tool_turn_token
+        : undefined;
 }
 /** The capability record inside a tools get response, or null when the shape is unknown. */
 function capabilityRecord(fetched) {
@@ -138,7 +108,6 @@ function cliSurfaceRefusal(capabilityId, fetched) {
         return null;
     return new client_1.CliError(`${capabilityId} is not available on the CLI surface. Use the web app, MCP or the Architect for it.`, 'unsupported_capability', 0, { details: { capability_id: capabilityId, surface: 'cli' }, retryable: false });
 }
-const QUOTE_HASH_PATTERN = /^sha256:[a-f0-9]{64}$/;
 /**
  * What a quote prices: the params plus the ceiling. Keys that say how a call is
  * made, not what it does, are left out, like the server's own plan digest.
@@ -164,7 +133,7 @@ function quoteFromResult(value, depth = 0) {
         return null;
     }
     const entry = value;
-    if (typeof entry.quote_hash === 'string' && QUOTE_HASH_PATTERN.test(entry.quote_hash)) {
+    if (typeof entry.quote_hash === 'string' && runContract_1.QUOTE_HASH_PATTERN.test(entry.quote_hash)) {
         const estimate = entry.estimate && typeof entry.estimate === 'object' ? entry.estimate : null;
         return {
             quote_hash: entry.quote_hash,
@@ -230,26 +199,32 @@ async function runGated(context, input) {
     // and a quote is bound to the turn that asked for it. So a turn is reused
     // only while a quote is pending, together with the quote its dry run
     // returned, and forgotten once the paid run is admitted.
+    const explicitKey = parameterIdempotencyKey(body) ?? input.idempotencyKey;
     const fingerprint = planFingerprint(body);
     const cached = input.turnToken
         ? null
         : await (0, turnCache_1.reusableTurn)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, fingerprint, Date.now(), warnTurnCache);
     const pending = cached?.token ?? null;
     const live = body.mode === 'live';
-    const inlineRead = !input.turnToken && !pending && !input.idempotencyKey && omitsToolTurnForInlineTableRead(capabilityId);
-    if (!input.turnToken && !pending && !inlineRead)
+    // --turn-token is the contract. Do not fetch tools get to invent one.
+    // A cached inline read also skips the fetch until registry_hash changes.
+    const cachedPosture = input.turnToken ? null : (0, registryManifest_1.lookupPosture)(capabilityId);
+    const inlineFromCache = !input.turnToken && !pending && !explicitKey && cachedPosture?.inlineRead === true;
+    if (!input.turnToken && !pending && !inlineFromCache)
         await contract();
+    const posture = fetched ? (0, capabilityPosture_1.postureFromContract)(fetched) : cachedPosture;
+    if (fetched && posture)
+        (0, registryManifest_1.rememberPosture)(capabilityId, posture);
     const refusal = fetched ? cliSurfaceRefusal(capabilityId, fetched) : null;
     if (refusal)
         throw refusal;
-    let turnToken = input.turnToken ?? pending ?? (inlineRead ? undefined : toolTurnToken(fetched));
+    const inlineRead = !input.turnToken && !pending && !explicitKey && posture?.inlineRead === true;
+    let turnToken = input.turnToken ?? pending ?? (inlineRead ? undefined : optionalToolTurnToken(fetched));
     // Only a quote the caller named or a dry run of this exact input returned.
     // The server's refusal also shows a price, but that one is information, not consent.
     let quoteHash = typeof body.quote_hash === 'string'
         ? body.quote_hash
         : live ? cached?.quote_hash ?? undefined : undefined;
-    const explicitKey = parameterIdempotencyKey(body) ?? input.idempotencyKey;
-    let recoveredInlineRead = false;
     let ranDryRun = false;
     let sentKey = null;
     const requestBody = () => ({
@@ -287,13 +262,14 @@ async function runGated(context, input) {
             result = await run();
         }
         catch (error) {
-            // The inline skip is only valid while the server still treats this
-            // capability as a free sync read. capability_not_fetched means the
-            // fetch-first fence is on, so retry once on the old get-then-run path.
-            if (inlineRead && !recoveredInlineRead && code(error) === 'capability_not_fetched') {
-                recoveredInlineRead = true;
+            if (!input.turnToken && code(error) === 'capability_not_fetched') {
+                // Capability posture can change between tools get and run. Refresh it
+                // once rather than maintaining a client-side list of token-free reads.
                 fetched = await client.getTool(capabilityId);
-                turnToken = toolTurnToken(fetched);
+                const refreshed = (0, capabilityPosture_1.postureFromContract)(fetched);
+                // The server just required a turn token, so this id is not an inline read.
+                (0, registryManifest_1.rememberPosture)(capabilityId, { ...refreshed, inlineRead: false });
+                turnToken = optionalToolTurnToken(fetched);
                 result = await run();
             }
             else if (live && code(error) === 'quote_required' && !quoteHash && turnToken) {
@@ -352,7 +328,7 @@ async function runGated(context, input) {
             await (0, turnCache_1.forgetTurnToken)(context.turnsPath, context.baseUrl, context.turnKey, capabilityId, warnTurnCache);
     }
     let timedOut = false;
-    if (!input.noWait && !(0, runWait_1.columnRunReturnsRunId)(capabilityId)) {
+    if (!input.noWait && !posture?.returnsRunId) {
         const waited = await (0, runWait_1.waitForRun)(client, result, input.waitTimeout, context.sleep);
         result = waited.value;
         timedOut = waited.timedOut;