@whittlelabs/sifter 0.43.1 → 0.43.3

package/bin.js

@@ -9780,12 +9780,129 @@ var require_canonicalise = __commonJS({
   }
 });
 
+// ../../packages/contracts/dist/client.js
+var require_client = __commonJS({
+  "../../packages/contracts/dist/client.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.createContractClient = createContractClient;
+    function createContractClient({ baseUrl, transport }) {
+      const root = baseUrl.replace(/\/+$/, "");
+      async function request(method, template, options = {}) {
+        const headers = { Accept: "application/json" };
+        if (options.body !== void 0)
+          headers["Content-Type"] = "application/json";
+        Object.assign(headers, options.headers);
+        let response;
+        try {
+          response = await transport(`${root}${filledPath(template, options.path)}${queryString(options.query)}`, {
+            method: method.toUpperCase(),
+            headers,
+            body: options.body === void 0 ? void 0 : JSON.stringify(options.body),
+            signal: options.signal
+          });
+        } catch (err2) {
+          return failure("NETWORK_ERROR", err2 instanceof Error ? err2.message : "Network request failed", null);
+        }
+        return answered(response);
+      }
+      const call = (method) => (path, options) => request(method, path, options);
+      return {
+        get: call("get"),
+        post: call("post"),
+        put: call("put"),
+        patch: call("patch"),
+        delete: call("delete")
+      };
+    }
+    function filledPath(template, params) {
+      const values = params ?? {};
+      return template.replace(/\{([^}]+)\}/g, (_, name2) => {
+        const value = values[name2];
+        if (value === void 0 || value === null)
+          throw new TypeError(`${template} needs the path parameter ${name2}`);
+        return encodeURIComponent(String(value));
+      });
+    }
+    function queryString(query) {
+      const search = new URLSearchParams();
+      for (const [key, value] of Object.entries(query ?? {})) {
+        if (value === void 0 || value === null)
+          continue;
+        for (const item of Array.isArray(value) ? value : [value])
+          search.append(key, String(item));
+      }
+      const text = search.toString();
+      return text ? `?${text}` : "";
+    }
+    async function answered(response) {
+      const { status } = response;
+      let text;
+      try {
+        text = await response.text();
+      } catch (err2) {
+        return failure("NETWORK_ERROR", err2 instanceof Error ? err2.message : "The response could not be read", status);
+      }
+      let payload;
+      let parsed = true;
+      if (text !== "") {
+        try {
+          payload = JSON.parse(text);
+        } catch {
+          parsed = false;
+        }
+      }
+      if (response.ok) {
+        if (text === "")
+          return { success: true, data: void 0, status };
+        if (!parsed)
+          return failure("SERVER_ERROR", `The ${status} response was not JSON`, status);
+        if (isRecord(payload) && payload.success === true)
+          return { success: true, data: payload.data, status };
+        return { success: true, data: payload, status };
+      }
+      if (isRecord(payload) && payload.success === false && isRecord(payload.error)) {
+        const { code, message } = payload.error;
+        if (typeof code === "string" && typeof message === "string") {
+          return failure(code, message, status, saysMore(payload, payload.error) ? payload : void 0);
+        }
+      }
+      return failure("SERVER_ERROR", `Request failed with status ${status}`, status, text !== "" && parsed ? payload : void 0);
+    }
+    function saysMore(envelope, error) {
+      return Object.keys(envelope).some((key) => key !== "success" && key !== "error") || Object.keys(error).some((key) => key !== "code" && key !== "message");
+    }
+    function failure(code, message, status, body2) {
+      return { success: false, error: { code, message, status, ...body2 !== void 0 ? { body: body2 } : {} } };
+    }
+    function isRecord(value) {
+      return typeof value === "object" && value !== null && !Array.isArray(value);
+    }
+  }
+});
+
+// ../../packages/contracts/dist/services/loom.js
+var require_loom = __commonJS({
+  "../../packages/contracts/dist/services/loom.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.service = void 0;
+    exports2.createClient = createClient;
+    var client_1 = require_client();
+    exports2.service = "whittle-loom";
+    function createClient(options) {
+      return (0, client_1.createContractClient)(options);
+    }
+  }
+});
+
 // ../../packages/loom/dist/seed/seed-workflows.js
 var require_seed_workflows = __commonJS({
   "../../packages/loom/dist/seed/seed-workflows.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.seedWorkflows = seedWorkflows;
+    var loom_1 = require_loom();
     var canonicalise_1 = require_canonicalise();
     var errors_1 = require_errors2();
     var NULL_LOGGER = {
@@ -9799,13 +9916,16 @@ var require_seed_workflows = __commonJS({
     async function seedWorkflows(opts) {
       const logger = opts.logger ?? NULL_LOGGER;
       const fetchFn = opts.fetchFn ?? fetch;
-      const baseUrl = opts.loomApiUrl.replace(/\/$/, "");
-      const headers = { "Content-Type": "application/json" };
-      if ("accessToken" in opts.auth) {
-        headers["Authorization"] = `Bearer ${opts.auth.accessToken}`;
-      } else {
-        headers["X-API-Key"] = opts.auth.apiKey;
-      }
+      const credential = "accessToken" in opts.auth ? { Authorization: `Bearer ${opts.auth.accessToken}` } : { "X-API-Key": opts.auth.apiKey };
+      const loom = (0, loom_1.createClient)({
+        baseUrl: opts.loomApiUrl,
+        transport: (url, init2) => {
+          const headers = new Headers(init2.headers);
+          for (const [name2, value] of Object.entries(credential))
+            headers.set(name2, value);
+          return fetchFn(url, { ...init2, headers });
+        }
+      });
       const results = [];
       for (const workflow of opts.workflows) {
         let ownerClass;
@@ -9841,17 +9961,12 @@ var require_seed_workflows = __commonJS({
           nodes: body2.nodes.length,
           transitions: body2.transitions.length
         });
-        const response = await fetchFn(`${baseUrl}/api/admin/seed-workflow`, {
-          method: "POST",
-          headers,
-          body: JSON.stringify(body2)
-        });
-        const json = await response.json();
-        if (!response.ok || !json.success || !json.data) {
-          const message = json.error?.message ?? `seedWorkflows: ${workflow.name} failed with HTTP ${response.status}`;
+        const result = await loom.post("/api/admin/seed-workflow", { body: body2 });
+        if (!result.success) {
+          const message = result.error.code === "SERVER_ERROR" ? `seedWorkflows: ${workflow.name} failed with HTTP ${result.error.status}` : result.error.message;
           throw new errors_1.SeedWorkflowsError(workflow.name, message);
         }
-        results.push(json.data);
+        results.push(result.data);
       }
       return { workflows: results };
     }
@@ -15171,7 +15286,6 @@ var require_code_index = __commonJS({
     };
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.CodeIndex = exports2.PathOutsideRootError = void 0;
-    exports2.declarationsInSource = declarationsInSource;
     var node_child_process_1 = require("node:child_process");
     var node_fs_1 = require("node:fs");
     var node_path_1 = __importDefault(require("node:path"));
@@ -15252,18 +15366,6 @@ var require_code_index = __commonJS({
         }
         return cap(found, options.limit ?? 100);
       }
-      /**
-       * How many files mention the name as a whole word: a cheap read of how
-       * common it is, from the text alone, before any file is parsed for it.
-       */
-      async mentions(name2) {
-        return (await this.candidates(name2)).length;
-      }
-      /** The declarations in a file that overlap any of the given line ranges (1-based, inclusive). */
-      async symbolsOverlapping(file, ranges) {
-        const symbols = await this.outline(file);
-        return symbols.filter((s) => ranges.some(([start2, end]) => s.startLine <= end && s.endLine >= start2));
-      }
       // ── Listing and confinement ────────────────────────────────────────────
       async list() {
         const files = [];
@@ -15345,9 +15447,6 @@ var require_code_index = __commonJS({
       }
     };
     exports2.CodeIndex = CodeIndex;
-    async function declarationsInSource(file, source, wasmDir) {
-      return (await analyze(file, source, (0, runtime_1.resolveWasmDir)(wasmDir)))?.symbols ?? [];
-    }
     async function analyze(file, source, wasmDir) {
       const spec = (0, languages_1.languageFor)(file);
       if (!spec)
@@ -15508,14 +15607,11 @@ var require_dist2 = __commonJS({
   "../../packages/code-intel/dist/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.wasmFiles = exports2.resolveWasmDir = exports2.languageFor = exports2.LANGUAGES = exports2.PathOutsideRootError = exports2.declarationsInSource = exports2.CodeIndex = void 0;
+    exports2.wasmFiles = exports2.resolveWasmDir = exports2.languageFor = exports2.LANGUAGES = exports2.PathOutsideRootError = exports2.CodeIndex = void 0;
     var code_index_1 = require_code_index();
     Object.defineProperty(exports2, "CodeIndex", { enumerable: true, get: function() {
       return code_index_1.CodeIndex;
     } });
-    Object.defineProperty(exports2, "declarationsInSource", { enumerable: true, get: function() {
-      return code_index_1.declarationsInSource;
-    } });
     Object.defineProperty(exports2, "PathOutsideRootError", { enumerable: true, get: function() {
       return code_index_1.PathOutsideRootError;
     } });
@@ -56719,7 +56815,6 @@ var require_overlay = __commonJS({
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.overlayModifier = void 0;
     exports2.applyOverlay = applyOverlay;
-    exports2.safeDestination = safeDestination;
     exports2.normalizeOrigin = normalizeOrigin;
     exports2.fetchCapped = fetchCapped;
     var fs_1 = require("fs");
@@ -59001,7 +59096,7 @@ var require_http_api = __commonJS({
 });
 
 // ../../packages/keep/dist/client.js
-var require_client = __commonJS({
+var require_client2 = __commonJS({
   "../../packages/keep/dist/client.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
@@ -59720,7 +59815,7 @@ var require_dist4 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.waitForKeepToken = exports2.KeepCredentialsRefusedError = exports2.KeepRateLimitedError = exports2.KeepUnavailableError = exports2.AgentCredentialRevokedError = exports2.AgentTokenManager = exports2.ServiceTokenManager = exports2.KeepClient = void 0;
-    var client_1 = require_client();
+    var client_1 = require_client2();
     Object.defineProperty(exports2, "KeepClient", { enumerable: true, get: function() {
       return client_1.KeepClient;
     } });
@@ -68578,13 +68673,28 @@ var require_typed_exit = __commonJS({
   }
 });
 
+// ../../packages/contracts/dist/services/jobs.js
+var require_jobs = __commonJS({
+  "../../packages/contracts/dist/services/jobs.js"(exports2) {
+    "use strict";
+    Object.defineProperty(exports2, "__esModule", { value: true });
+    exports2.service = void 0;
+    exports2.createClient = createClient;
+    var client_1 = require_client();
+    exports2.service = "whittle-jobs";
+    function createClient(options) {
+      return (0, client_1.createContractClient)(options);
+    }
+  }
+});
+
 // ../../packages/jobs/dist/response.js
 var require_response = __commonJS({
   "../../packages/jobs/dist/response.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.NonJsonResponseError = exports2.ServiceUnavailableError = void 0;
-    exports2.readJsonResponse = readJsonResponse;
+    exports2.refuseUnreadable = refuseUnreadable;
     var EXCERPT_LIMIT = 120;
     var UNAVAILABLE_STATUSES = /* @__PURE__ */ new Set([502, 503, 504]);
     var UnreadableResponseError = class extends Error {
@@ -68638,31 +68748,31 @@ var require_response = __commonJS({
         return url;
       }
     }
-    async function readJsonResponse(response, url) {
+    async function refuseUnreadable(response, url) {
       const contentType = response.headers.get("content-type");
       const unavailable = UNAVAILABLE_STATUSES.has(response.status);
-      if (unavailable || !isJson(contentType)) {
-        const body2 = await response.text().catch(() => "");
-        const detail = {
-          host: hostOf(url),
-          statusCode: response.status,
-          statusText: response.statusText ?? "",
-          contentType,
-          bodyExcerpt: excerpt(body2)
-        };
-        throw unavailable ? new ServiceUnavailableError(detail) : new NonJsonResponseError(detail);
-      }
-      return await response.json();
+      if (!unavailable && isJson(contentType))
+        return;
+      const body2 = await response.text().catch(() => "");
+      const detail = {
+        host: hostOf(url),
+        statusCode: response.status,
+        statusText: response.statusText ?? "",
+        contentType,
+        bodyExcerpt: excerpt(body2)
+      };
+      throw unavailable ? new ServiceUnavailableError(detail) : new NonJsonResponseError(detail);
     }
   }
 });
 
 // ../../packages/jobs/dist/client.js
-var require_client2 = __commonJS({
+var require_client3 = __commonJS({
   "../../packages/jobs/dist/client.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.JobsClient = void 0;
+    var jobs_1 = require_jobs();
     var response_1 = require_response();
     var JobsClient = class {
       baseUrl;
@@ -68702,19 +68812,26 @@ var require_client2 = __commonJS({
        * revoke-then-repair, clock skew) while the local expiry timer still thinks
        * it's valid. Force a re-mint and retry once before surfacing the failure.
        * `onResponse` (min-version contract) fires on the response we actually act
-       * on. `body` is a string, so it is safe to resend.
+       * on. The contract client hands over its body as a string, so it is safe to resend.
        */
-      async fetchWithAuthRetry(method, url, body2) {
-        let response = await fetch(url, { method, headers: await this.buildHeaders(), body: body2 });
+      async fetchWithAuthRetry(url, init2) {
+        const send = async (forceRefresh) => {
+          const headers = new Headers(init2.headers);
+          for (const [name2, value] of Object.entries(await this.buildHeaders(forceRefresh)))
+            headers.set(name2, value);
+          return fetch(url, { ...init2, headers });
+        };
+        let response = await send(false);
         if (response.status === 401 && this.getAccessToken) {
-          response = await fetch(url, { method, headers: await this.buildHeaders(true), body: body2 });
+          await response.body?.cancel().catch(() => void 0);
+          response = await send(true);
         }
         this.onResponse?.(response);
         return response;
       }
       // ── Job Pools ──────────────────────────────────────────────
       async createJobPool(options) {
-        return this.request("POST", "/api/job-pools", options);
+        return this.call((api) => api.post("/api/job-pools", { body: options }));
       }
       /**
        * Idempotent upsert by owner and name. When the
@@ -68722,7 +68839,7 @@ var require_client2 = __commonJS({
        * constraints. The Sift provisioning hook relies on this semantics.
        */
       async findOrCreateJobPool(options) {
-        return this.request("POST", "/api/job-pools?idempotent=true", options);
+        return this.call((api) => api.post("/api/job-pools", { query: { idempotent: "true" }, body: options }));
       }
       /**
        * Every tenant's pools, which needs jobs:job-pools:read at operator context
@@ -68730,17 +68847,12 @@ var require_client2 = __commonJS({
        * one exact name; neither confers standing (BE-035).
        */
       async listJobPools(filters) {
-        const params = new URLSearchParams();
-        if (filters?.owner)
-          params.set("owner", `${filters.owner.principalClass}:${filters.owner.principalId}`);
-        if (filters?.name)
-          params.set("name", filters.name);
-        const qs = params.toString();
-        const { pools } = await this.request("GET", `/api/job-pools${qs ? `?${qs}` : ""}`);
+        const owner = filters?.owner ? `${filters.owner.principalClass}:${filters.owner.principalId}` : void 0;
+        const { pools } = await this.call((api) => api.get("/api/job-pools", { query: { owner, name: filters?.name } }));
         return pools;
       }
       async getJobPool(poolId) {
-        return this.request("GET", `/api/job-pools/${poolId}`);
+        return this.call((api) => api.get("/api/job-pools/{id}", { path: { id: poolId } }));
       }
       /**
        * Resolve a pool by exact name. Names are unique per OWNER, not globally
@@ -68776,46 +68888,51 @@ var require_client2 = __commonJS({
       // A subscriber joins a pool by registering as a member of it. These
       // map to the server's `/api/job-pools/:poolId/members` routes.
       async listMembers(poolId) {
-        const { members } = await this.request("GET", `/api/job-pools/${poolId}/members`);
+        const { members } = await this.call((api) => api.get("/api/job-pools/{poolId}/members", { path: { poolId } }));
         return members;
       }
       async registerMember(poolId, options) {
-        return this.request("POST", `/api/job-pools/${poolId}/members`, options);
+        return this.call((api) => api.post("/api/job-pools/{poolId}/members", { path: { poolId }, body: options }));
       }
       async updateMember(poolId, memberId, options) {
-        return this.request("PUT", `/api/job-pools/${poolId}/members/${memberId}`, options);
+        return this.call((api) => api.put("/api/job-pools/{poolId}/members/{mid}", { path: { poolId, mid: memberId }, body: options }));
       }
       // ── Jobs (producer) ──────────────────────────────────────────────
       /**
        * Enqueue a job into a job pool. The `inputs` are opaque to Jobs; a Shuttle
        * reads the strategy header inside them to decide how to run it (ADR 0005).
+       * The body names its fields one by one, so nothing a caller spreads into
+       * the options reaches the wire.
        */
       async enqueueJob(options) {
         const jobPoolId = await this.resolvePoolRef(options.pool);
-        const body2 = {
-          jobPoolId,
-          title: options.title,
-          progressChannel: options.progressChannel,
-          instructions: options.instructions,
-          maxAttempts: options.maxAttempts,
-          deadlineDuration: options.deadlineDuration,
-          claimDeadlineDuration: options.claimDeadlineDuration,
-          priority: options.priority,
-          tags: options.tags,
-          clientRef: options.clientRef,
-          clientContext: options.clientContext,
-          inputs: options.inputs
-        };
-        return this.request("POST", "/api/jobs", body2);
+        return this.call((api) => api.post("/api/jobs", {
+          body: {
+            jobPoolId,
+            title: options.title,
+            progressChannel: options.progressChannel,
+            instructions: options.instructions,
+            maxAttempts: options.maxAttempts,
+            deadlineDuration: options.deadlineDuration,
+            claimDeadlineDuration: options.claimDeadlineDuration,
+            priority: options.priority,
+            tags: options.tags,
+            clientRef: options.clientRef,
+            clientContext: options.clientContext,
+            inputs: options.inputs
+          }
+        }));
       }
       async getJob(jobId) {
-        return this.request("GET", `/api/jobs/${jobId}`);
+        return this.call((api) => api.get("/api/jobs/{id}", { path: { id: jobId } }));
       }
+      /** Answers the job without its inputs, as the route does. */
       async updateJob(jobId, options) {
-        return this.request("PATCH", `/api/jobs/${jobId}`, options);
+        return this.call((api) => api.patch("/api/jobs/{id}", { path: { id: jobId }, body: options }));
       }
+      /** Answers the job without its inputs, as the route does. */
       async cancelJob(jobId) {
-        return this.request("PUT", `/api/jobs/${jobId}`);
+        return this.call((api) => api.put("/api/jobs/{id}", { path: { id: jobId } }));
       }
       /**
        * Permanently delete every job filed under `clientRefPrefix` (which must end
@@ -68823,14 +68940,14 @@ var require_client2 = __commonJS({
        * the caller needs `jobs:job-purges:write` at '*'. Idempotent.
        */
       async purgeJobs(clientRefPrefix) {
-        return this.request("POST", "/api/job-purges", { clientRefPrefix });
+        return this.call((api) => api.post("/api/job-purges", { body: { clientRefPrefix } }));
       }
       // ── Outputs ──────────────────────────────────────────────────────
       async listOutputs(jobId) {
         const all = [];
-        const pageSize = 100;
-        for (let offset = 0; ; offset += pageSize) {
-          const { outputs, total } = await this.request("GET", `/api/jobs/${jobId}/output?limit=${pageSize}&offset=${offset}`);
+        const limit = 100;
+        for (let offset = 0; ; offset += limit) {
+          const { outputs, total } = await this.call((api) => api.get("/api/jobs/{jobId}/output", { path: { jobId }, query: { limit, offset } }));
           all.push(...outputs);
           if (outputs.length === 0 || all.length >= total)
             break;
@@ -68838,7 +68955,7 @@ var require_client2 = __commonJS({
         return all;
       }
       async createOutput(jobId, options) {
-        return this.request("POST", `/api/jobs/${jobId}/output`, options);
+        return this.call((api) => api.post("/api/jobs/{jobId}/output", { path: { jobId }, body: options }));
       }
       /**
        * Post a batch of live progress frames for a running job. Best-effort
@@ -68847,7 +68964,7 @@ var require_client2 = __commonJS({
        * let a dropped frame affect the job.
        */
       async postProgress(jobId, options) {
-        await this.request("POST", `/api/jobs/${jobId}/progress`, options);
+        await this.call((api) => api.post("/api/jobs/{jobId}/progress", { path: { jobId }, body: options }));
       }
       // ── Attendance (subscriber dispatch lifecycle) ───────────────────
       /**
@@ -68856,7 +68973,10 @@ var require_client2 = __commonJS({
        * subscriber needs to execute and submit.
        */
       async acceptDispatch(jobId, options) {
-        return this.request("POST", `/api/jobs/${jobId}/attendance`, options?.shiftId ? { shiftId: options.shiftId } : void 0);
+        return this.call((api) => api.post("/api/jobs/{jobId}/attendance", {
+          path: { jobId },
+          body: options?.shiftId ? { shiftId: options.shiftId } : void 0
+        }));
       }
       // ── Shifts (whittlelabs ADR 0129) ────────────────────────────────
       /**
@@ -68864,39 +68984,33 @@ var require_client2 = __commonJS({
        * answers 404; the subscribe loop then claims without one.
        */
       async startShift() {
-        return this.request("POST", "/api/my/shifts");
+        return this.call((api) => api.post("/api/my/shifts"));
       }
       /** End a shift, releasing every claim still taken on it back to the queue. */
       async endShift(shiftId) {
-        await this.request("DELETE", `/api/my/shifts/${shiftId}`);
+        await this.call((api) => api.delete("/api/my/shifts/{shiftId}", { path: { shiftId } }));
       }
       async submit(jobId, options) {
-        return this.request("PUT", `/api/jobs/${jobId}/attendance`, options);
+        return this.call((api) => api.put("/api/jobs/{jobId}/attendance", { path: { jobId }, body: options }));
       }
       // ── Discovery (rare) ─────────────────────────────────────────────
       async listDispatchableJobs(options) {
-        const params = new URLSearchParams();
-        if (options?.pools?.length)
-          params.set("pools", options.pools.join(","));
-        if (options?.tags?.length)
-          params.set("tags", options.tags.join(","));
-        if (options?.maxAttempts !== void 0)
-          params.set("maxAttempts", String(options.maxAttempts));
-        if (options?.minPriority !== void 0)
-          params.set("minPriority", String(options.minPriority));
-        if (options?.limit !== void 0)
-          params.set("limit", String(options.limit));
-        if (options?.offset !== void 0)
-          params.set("offset", String(options.offset));
-        if (options?.sort)
-          params.set("sort", options.sort);
-        if (options?.shift)
-          params.set("shift", options.shift);
-        const qs = params.toString();
-        const { jobs, total, directives, shift } = await this.request("GET", `/api/my/jobs${qs ? `?${qs}` : ""}`);
+        const { jobs, total, directives, shift } = await this.call((api) => api.get("/api/my/jobs", {
+          query: {
+            pools: options?.pools?.length ? options.pools.join(",") : void 0,
+            tags: options?.tags?.length ? options.tags.join(",") : void 0,
+            maxAttempts: options?.maxAttempts === void 0 ? void 0 : String(options.maxAttempts),
+            minPriority: options?.minPriority === void 0 ? void 0 : String(options.minPriority),
+            limit: options?.limit,
+            offset: options?.offset,
+            sort: options?.sort || void 0,
+            shift: options?.shift || void 0
+          }
+        }));
         return {
           data: jobs,
           pagination: { total, limit: options?.limit ?? 25, offset: options?.offset ?? 0 },
+          // Absent from a Jobs that predates directives or shifts.
           directives: directives ?? null,
           shift: shift ?? null
         };
@@ -68910,38 +69024,47 @@ var require_client2 = __commonJS({
       async openHintStream(options = {}) {
         const qs = options.shift ? `?shift=${encodeURIComponent(options.shift)}` : "";
         const url = `${this.baseUrl}/api/my/jobs/stream${qs}`;
-        const headers = async (forceRefresh) => ({
-          ...await this.buildHeaders(forceRefresh),
-          Accept: "text/event-stream",
-          ...options.lastEventId ? { "Last-Event-ID": options.lastEventId } : {}
+        return this.fetchWithAuthRetry(url, {
+          headers: { Accept: "text/event-stream", ...options.lastEventId ? { "Last-Event-ID": options.lastEventId } : {} },
+          signal: options.signal
         });
-        let response = await fetch(url, { headers: await headers(false), signal: options.signal });
-        if (response.status === 401 && this.getAccessToken) {
-          await response.body?.cancel().catch(() => void 0);
-          response = await fetch(url, { headers: await headers(true), signal: options.signal });
-        }
-        this.onResponse?.(response);
-        return response;
       }
       // ── HTTP plumbing ────────────────────────────────────────────────
       /**
-       * Every call's one reader. `readJsonResponse` refuses to parse a reply that
-       * is not the API's JSON — an ingress 502/503/504 while a pod rolls, or any
-       * non-JSON body — and throws a named failure instead of a parse error. What
-       * comes back here is the API's own envelope, success or not.
+       * Every call's one path. The contract client builds the request and reads
+       * the API's envelope; the transport under it authenticates (one retry on a
+       * 401 for a token provider), fires `onResponse`, and refuses a reply that is
+       * not the API's JSON with a named failure (`refuseUnreadable`: an ingress
+       * 502/503/504 while a pod rolls, or any non-JSON body). A failure the
+       * transport raises is rethrown as raised, so `ServiceUnavailableError` and
+       * fetch's own `TypeError` reach the subscribe loop's outage handling rather
+       * than arriving as a NETWORK_ERROR result. The API's own refusal throws an
+       * `Error` carrying `code` and `statusCode`, as it always has.
        */
-      async request(method, path, body2) {
-        const url = `${this.baseUrl}${path}`;
-        const response = await this.fetchWithAuthRetry(method, url, body2 ? JSON.stringify(body2) : void 0);
-        const json = await (0, response_1.readJsonResponse)(response, url);
-        if (!response.ok || !json.success) {
-          const errorMessage = json.error?.message ?? `Request failed with status ${response.status}`;
-          const error = new Error(errorMessage);
-          error.code = json.error?.code;
-          error.statusCode = response.status;
-          throw error;
-        }
-        return json.data;
+      async call(send) {
+        let raised;
+        const api = (0, jobs_1.createClient)({
+          baseUrl: this.baseUrl,
+          transport: async (url, init2) => {
+            try {
+              const response = await this.fetchWithAuthRetry(url, init2);
+              await (0, response_1.refuseUnreadable)(response, url);
+              return response;
+            } catch (error2) {
+              raised = { error: error2 };
+              throw error2;
+            }
+          }
+        });
+        const result = await send(api);
+        if (raised)
+          throw raised.error;
+        if (result.success)
+          return result.data;
+        const error = new Error(result.error.message);
+        error.code = result.error.code;
+        error.statusCode = result.error.status ?? void 0;
+        throw error;
       }
     };
     exports2.JobsClient = JobsClient;
@@ -69824,7 +69947,7 @@ var require_dist7 = __commonJS({
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
     exports2.subscribe = exports2.ServiceUnavailableError = exports2.NonJsonResponseError = exports2.JobsClient = void 0;
-    var client_1 = require_client2();
+    var client_1 = require_client3();
     Object.defineProperty(exports2, "JobsClient", { enumerable: true, get: function() {
       return client_1.JobsClient;
     } });
@@ -73731,219 +73854,6 @@ var require_git = __commonJS({
   }
 });
 
-// ../../packages/shuttle/dist/workspace/impact.js
-var require_impact = __commonJS({
-  "../../packages/shuttle/dist/workspace/impact.js"(exports2) {
-    "use strict";
-    var __importDefault = exports2 && exports2.__importDefault || function(mod) {
-      return mod && mod.__esModule ? mod : { "default": mod };
-    };
-    Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.impactModifier = void 0;
-    exports2.applyImpact = applyImpact;
-    exports2.buildReport = buildReport;
-    var fs_1 = require("fs");
-    var path_1 = __importDefault(require("path"));
-    var code_intel_1 = require_dist2();
-    var overlay_1 = require_overlay();
-    var LIMITS = {
-      changedSymbols: 30,
-      usesShown: 8,
-      /** A name more files mention than this is too common for a list of its uses to help. */
-      commonInFiles: 80,
-      /** The report is read into the agent's context: past this it stops adding sections. */
-      reportBytes: 16 * 1024,
-      /** Work stops here and the report says it is partial; materialization must not eat the job. */
-      budgetMs: 6e4
-    };
-    var REMOVED_KINDS = /* @__PURE__ */ new Set([
-      "function",
-      "class",
-      "interface",
-      "type",
-      "enum",
-      "module",
-      "constant",
-      "macro"
-    ]);
-    exports2.impactModifier = { namespace: "impact", apply: applyImpact };
-    async function applyImpact(request, runRoot, _options) {
-      const result = { written: 0, writtenPaths: [], skipped: [] };
-      const parsed = readImpactRequest(request);
-      if ("error" in parsed) {
-        result.skipped.push({ path: String(request?.output ?? "?"), reason: parsed.error });
-        return result;
-      }
-      const { output, files } = parsed.request;
-      const rootReal = await fs_1.promises.realpath(runRoot);
-      const dest = (0, overlay_1.safeDestination)(rootReal, output);
-      if (!dest) {
-        result.skipped.push({ path: output, reason: "path escapes the workspace root" });
-        return result;
-      }
-      const primary = path_1.default.join(runRoot, "primary");
-      if ((await fs_1.promises.readdir(primary).catch(() => [])).length === 0) {
-        result.skipped.push({ path: output, reason: "no checkout to read: the primary repository did not materialize" });
-        return result;
-      }
-      try {
-        const report = await buildReport(runRoot, files);
-        await fs_1.promises.mkdir(path_1.default.dirname(dest), { recursive: true });
-        const handle2 = await fs_1.promises.open(dest, fs_1.constants.O_WRONLY | fs_1.constants.O_CREAT | fs_1.constants.O_TRUNC | fs_1.constants.O_NOFOLLOW, 420);
-        try {
-          await handle2.writeFile(report);
-        } finally {
-          await handle2.close();
-        }
-        result.written = 1;
-        result.writtenPaths.push(output);
-      } catch (err2) {
-        result.skipped.push({ path: output, reason: err2 instanceof Error ? err2.message : String(err2) });
-      }
-      return result;
-    }
-    function readImpactRequest(request) {
-      const r = request;
-      if (!r || typeof r.output !== "string" || !Array.isArray(r.files)) {
-        return { error: "malformed impact request (want { output, files })" };
-      }
-      const files = [];
-      for (const f of r.files) {
-        if (!f || typeof f.path !== "string" || !Array.isArray(f.changed))
-          continue;
-        files.push({
-          path: f.path,
-          status: typeof f.status === "string" ? f.status : "modified",
-          changed: f.changed.filter((c) => Array.isArray(c) && Number.isInteger(c[0]) && Number.isInteger(c[1])),
-          removed: Array.isArray(f.removed) ? f.removed.filter((t) => typeof t === "string") : []
-        });
-      }
-      return { request: { output: r.output, files } };
-    }
-    async function repositoriesOf(runRoot) {
-      const repos = ["primary"];
-      const context = await fs_1.promises.readdir(path_1.default.join(runRoot, "context"), { withFileTypes: true }).catch(() => []);
-      for (const entry of context)
-        if (entry.isDirectory())
-          repos.push(`context/${entry.name}`);
-      return repos;
-    }
-    function innermostOnly(symbols) {
-      return symbols.filter((s) => !symbols.some((o) => o !== s && o.startLine >= s.startLine && o.endLine <= s.endLine && (o.startLine !== s.startLine || o.endLine !== s.endLine)));
-    }
-    var useLine = (r) => `  - ${r.file}:${r.line} ${r.enclosing ? `in ${r.enclosing.kind} ${r.enclosing.name}` : "at top level"} | ${r.text}`;
-    async function buildReport(runRoot, files) {
-      const startedAt = Date.now();
-      const overBudget = () => Date.now() - startedAt > LIMITS.budgetMs;
-      const index = new code_intel_1.CodeIndex({ root: runRoot, repositories: await repositoriesOf(runRoot) });
-      let partial = false;
-      const removedSections = [];
-      for (const file of files) {
-        for (const block of file.removed ?? []) {
-          const lines = block.split("\n");
-          for (const symbol of await (0, code_intel_1.declarationsInSource)(file.path, block)) {
-            if (overBudget()) {
-              partial = true;
-              break;
-            }
-            const indented = /^\s/.test(lines[symbol.startLine - 1] ?? "");
-            if (indented || !REMOVED_KINDS.has(symbol.kind))
-              continue;
-            if ((await index.definitions(symbol.name, 1)).total > 0)
-              continue;
-            if (await index.mentions(symbol.name) > LIMITS.commonInFiles)
-              continue;
-            const uses = await index.references(symbol.name, { limit: LIMITS.usesShown, access: "bare" });
-            if (uses.total === 0)
-              continue;
-            removedSections.push([
-              `- ${symbol.kind} \`${symbol.name}\`, removed from primary/${file.path}, is still used ${times(uses.total)}:`,
-              ...uses.items.map(useLine),
-              ...uses.truncated ? [`  - and ${uses.total - uses.items.length} more`] : []
-            ].join("\n"));
-          }
-        }
-      }
-      const changed = [];
-      const seen = /* @__PURE__ */ new Set();
-      for (const file of files) {
-        if (file.status === "removed" || file.changed.length === 0)
-          continue;
-        const touched = innermostOnly(await index.symbolsOverlapping(`primary/${file.path}`, file.changed).catch(() => []));
-        for (const s of touched) {
-          const key = `${s.file}:${s.startLine}:${s.name}`;
-          if (!seen.has(key)) {
-            seen.add(key);
-            changed.push(s);
-          }
-        }
-      }
-      if (changed.length > LIMITS.changedSymbols)
-        partial = true;
-      const changedSections = [];
-      const unused = [];
-      const common = [];
-      for (const symbol of changed.slice(0, LIMITS.changedSymbols)) {
-        if (overBudget()) {
-          partial = true;
-          break;
-        }
-        const label = `${symbol.kind} \`${symbol.container ? `${symbol.container}.` : ""}${symbol.name}\``;
-        if (await index.mentions(symbol.name) > LIMITS.commonInFiles) {
-          common.push(label);
-          continue;
-        }
-        const access = symbol.kind === "method" || symbol.kind === "field" ? "member" : "bare";
-        const uses = (await index.references(symbol.name, { limit: 500, access })).items.filter((r) => !(r.file === symbol.file && r.line >= symbol.startLine && r.line <= symbol.endLine));
-        if (uses.length === 0) {
-          unused.push(label);
-          continue;
-        }
-        const shown = uses.slice(0, LIMITS.usesShown);
-        changedSections.push([
-          `### ${label} (${symbol.file}:${symbol.startLine}-${symbol.endLine})`,
-          `Used ${times(uses.length)} outside its own body:`,
-          ...shown.map(useLine),
-          ...uses.length > shown.length ? [`  - and ${uses.length - shown.length} more`] : []
-        ].join("\n"));
-      }
-      const head = [
-        "# Change impact",
-        "",
-        "Computed from the syntax tree of the checkout at the head of this change, before the review began.",
-        "A use is an identifier with the same name: two declarations that share a name are not told apart, so read a use before relying on it."
-      ];
-      const body2 = [
-        "## Removed, but still used",
-        "",
-        removedSections.length ? removedSections.join("\n") : "Nothing the change removed is still used.",
-        "",
-        "## Changed declarations and where they are used",
-        "",
-        ...changedSections.length ? [changedSections.join("\n\n"), ""] : [],
-        ...unused.length ? [`Changed, with no uses elsewhere: ${unused.join(", ")}.`, ""] : [],
-        ...common.length ? [`Changed, with names too common to list uses for (read their callers directly): ${common.join(", ")}.`, ""] : [],
-        ...changedSections.length + unused.length + common.length === 0 ? ["The change touches no declaration this could read.", ""] : []
-      ].join("\n");
-      let text = body2;
-      if (Buffer.byteLength(text) > LIMITS.reportBytes) {
-        text = `${Buffer.from(text).subarray(0, LIMITS.reportBytes).toString("utf-8").replace(/\n[^\n]*$/, "")}
-`;
-        partial = true;
-      }
-      return [
-        ...head,
-        ...partial ? ["", "This report is partial: the change touches more than it could cover."] : [],
-        "",
-        text
-      ].join("\n");
-    }
-    function times(n) {
-      return `${n} time${n === 1 ? "" : "s"}`;
-    }
-  }
-});
-
 // ../../packages/shuttle/dist/workspace/materialize.js
 var require_materialize = __commonJS({
   "../../packages/shuttle/dist/workspace/materialize.js"(exports2) {
@@ -73959,7 +73869,6 @@ var require_materialize = __commonJS({
     var os_1 = __importDefault(require("os"));
     var path_1 = __importDefault(require("path"));
     var git_1 = require_git();
-    var impact_1 = require_impact();
     var overlay_1 = require_overlay();
     var materializers = /* @__PURE__ */ new Map();
     var modifiers = /* @__PURE__ */ new Map();
@@ -73971,7 +73880,6 @@ var require_materialize = __commonJS({
     }
     registerMaterializer(git_1.gitMaterializer);
     registerModifier(overlay_1.overlayModifier);
-    registerModifier(impact_1.impactModifier);
     async function materializeWorkspace(bag, options = {}) {
       const tmpBase = options.tmpDir ?? os_1.default.tmpdir();
       const runRoot = await fs_1.promises.mkdtemp(path_1.default.join(tmpBase, "shuttle-ws-"));
@@ -74024,7 +73932,7 @@ var require_workspace = __commonJS({
   "../../packages/shuttle/dist/workspace/index.js"(exports2) {
     "use strict";
     Object.defineProperty(exports2, "__esModule", { value: true });
-    exports2.applyImpact = exports2.impactModifier = exports2.applyOverlay = exports2.overlayModifier = exports2.buildGitAuthEnv = exports2.gitMaterializer = exports2.registerModifier = exports2.registerMaterializer = exports2.materializeWorkspace = void 0;
+    exports2.applyOverlay = exports2.overlayModifier = exports2.buildGitAuthEnv = exports2.gitMaterializer = exports2.registerModifier = exports2.registerMaterializer = exports2.materializeWorkspace = void 0;
     var materialize_1 = require_materialize();
     Object.defineProperty(exports2, "materializeWorkspace", { enumerable: true, get: function() {
       return materialize_1.materializeWorkspace;
@@ -74049,13 +73957,6 @@ var require_workspace = __commonJS({
     Object.defineProperty(exports2, "applyOverlay", { enumerable: true, get: function() {
       return overlay_1.applyOverlay;
     } });
-    var impact_1 = require_impact();
-    Object.defineProperty(exports2, "impactModifier", { enumerable: true, get: function() {
-      return impact_1.impactModifier;
-    } });
-    Object.defineProperty(exports2, "applyImpact", { enumerable: true, get: function() {
-      return impact_1.applyImpact;
-    } });
   }
 });
 
@@ -76487,7 +76388,7 @@ var import_shuttle2 = __toESM(require_dist8());
 
 // src/brand.ts
 var import_shuttle = __toESM(require_dist8());
-var buildVersion = true ? "0.43.1" : pkg.version;
+var buildVersion = true ? "0.43.3" : pkg.version;
 var AGENT_EXECUTORS = ["claude-code", "codex", "copilot"];
 var sifterBrand = {
   product: {