carveout 0.1.2 → 0.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "carveout",
-  "version": "0.1.2",
+  "version": "0.3.0",
   "description": "Hand one part of a closed TypeScript repository to an outside contractor: a slice, stubbed and mocked, that installs, builds and tests on its own, and a checked patch back. Also checks a change made in the repository: what it reaches, the tests to run, and weakened tests or config edits.",
   "keywords": [
     "carveout",
@@ -48,6 +48,14 @@
       "types": "./dist/src/api.d.ts",
       "default": "./dist/src/api.js"
     },
+    "./extract": {
+      "types": "./dist/src/extract.d.ts",
+      "default": "./dist/src/extract.js"
+    },
+    "./pseudonyms": {
+      "types": "./dist/src/pseudonyms.d.ts",
+      "default": "./dist/src/pseudonyms.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [

package/skills/carveout/SKILL.md

@@ -17,14 +17,14 @@ description: >-
 license: MIT
 compatibility: >-
   Node 22.12 or later, git and npm; Docker to run a returned folder's code. Runs
-  the carveout@0.1.2 CLI from npm; online cuts read the npm registry.
+  the carveout@0.3.0 CLI from npm; online cuts read the npm registry.
 ---
 
 # carveout
 
-`carveout <command>` is the CLI, `carveout@0.1.2`. When `carveout --version`
+`carveout <command>` is the CLI, `carveout@0.3.0`. When `carveout --version`
 prints another version or nothing, ask the person before installing it:
-`npm i -g carveout@0.1.2`, or put `npx carveout@0.1.2` in place of `carveout` in
+`npm i -g carveout@0.3.0`, or put `npx carveout@0.3.0` in place of `carveout` in
 each command (in a clone of the repository, `node dist/src/cli.js` after
 `npm install && npm run build`). Node 22.12 or later, and `git` and `npm` on
 PATH.
@@ -69,15 +69,18 @@ kept. The sections below are each step in full.
 
 ## Hosted mode
 
-When the `lunox` MCP tools are available and signed in (the plugin bundles the
-server; `/mcp` signs in), they read the person's Lunox workspace:
-`list_workspaces`, `list_repositories`, `get_snapshot` (the commit a snapshot
-was taken at and what was read from its file tree), `list_sandboxes`,
-`get_sandbox` and `get_run`. They are read-only: slices are not planned, cut or
-patched through them yet, so do that in local mode. Starting a sandbox, approving a slice and other confirmations happen in
-the platform's web app: point the person there and never act for them. Never
-ask for a token in the chat; the CLI signs in with `carveout login` in their
-own terminal. Local mode, the steps below, is unchanged and the default.
+With the `lunox` MCP tools signed in (bundled; `/mcp` signs in), read with the
+`list_*`/`get_*` tools. Write only when asked: a bounty (`post_bounty` or
+`import_github_issue`, `size_bounty` is a paid run, `get_decisions` and
+`confirm_link`), a slice (`plan_slice`, `start_sandbox`, `cut_slice`), its
+build (`prepare`, then `get_handout`: public files and the hidden suite's hash
+only), a contractor's patch (`submit_patch`, `get_verdict`, one `retry`).
+Approvals, decisions, publishing and merging back happen in the web app. Model
+runs (`size_bounty`, `prepare`, `retry`) count against a monthly token limit
+(`get_usage`); on `quota_exceeded`, tell the person when it resets and do not
+retry. `insufficient_scope` means signing in again through `/mcp`. Never ask
+for a token; the CLI signs in with `carveout login`. Local mode, below, is the
+default.
 
 ## 1. Plan
 

package/skills/carveout-gate/SKILL.md

@@ -14,7 +14,7 @@ description: >-
   test to make it pass.
 license: MIT
 compatibility: >-
-  Node 22.12 or later, git and npm. Runs the carveout@0.1.2 CLI from npm.
+  Node 22.12 or later, git and npm. Runs the carveout@0.3.0 CLI from npm.
 ---
 
 # carveout-gate
@@ -23,9 +23,9 @@ What a change made in the repository reaches, and whether it weakened the checks
 that would catch it. To hand a part of the repository to someone outside it
 instead, use the `carveout` skill.
 
-`carveout <command>` is the CLI, `carveout@0.1.2`. When `carveout --version`
+`carveout <command>` is the CLI, `carveout@0.3.0`. When `carveout --version`
 prints another version or nothing, ask the person before installing it:
-`npm i -g carveout@0.1.2`, or put `npx carveout@0.1.2` in place of `carveout` in
+`npm i -g carveout@0.3.0`, or put `npx carveout@0.3.0` in place of `carveout` in
 each command (in a clone of the repository, `node dist/src/cli.js` after
 `npm install && npm run build`). Node 22.12 or later, and `git` and `npm` on
 PATH.