carveout 0.2.0 → 0.3.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "carveout",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Hand one part of a closed TypeScript repository to an outside contractor: a slice, stubbed and mocked, that installs, builds and tests on its own, and a checked patch back. Also checks a change made in the repository: what it reaches, the tests to run, and weakened tests or config edits.",
   "keywords": [
     "carveout",
@@ -48,6 +48,14 @@
       "types": "./dist/src/api.d.ts",
       "default": "./dist/src/api.js"
     },
+    "./extract": {
+      "types": "./dist/src/extract.d.ts",
+      "default": "./dist/src/extract.js"
+    },
+    "./pseudonyms": {
+      "types": "./dist/src/pseudonyms.d.ts",
+      "default": "./dist/src/pseudonyms.js"
+    },
     "./package.json": "./package.json"
   },
   "files": [

package/skills/carveout/SKILL.md

@@ -17,14 +17,14 @@ description: >-
 license: MIT
 compatibility: >-
   Node 22.12 or later, git and npm; Docker to run a returned folder's code. Runs
-  the carveout@0.2.0 CLI from npm; online cuts read the npm registry.
+  the carveout@0.3.0 CLI from npm; online cuts read the npm registry.
 ---
 
 # carveout
 
-`carveout <command>` is the CLI, `carveout@0.2.0`. When `carveout --version`
+`carveout <command>` is the CLI, `carveout@0.3.0`. When `carveout --version`
 prints another version or nothing, ask the person before installing it:
-`npm i -g carveout@0.2.0`, or put `npx carveout@0.2.0` in place of `carveout` in
+`npm i -g carveout@0.3.0`, or put `npx carveout@0.3.0` in place of `carveout` in
 each command (in a clone of the repository, `node dist/src/cli.js` after
 `npm install && npm run build`). Node 22.12 or later, and `git` and `npm` on
 PATH.
@@ -69,16 +69,18 @@ kept. The sections below are each step in full.
 
 ## Hosted mode
 
-With the `lunox` MCP tools signed in (the plugin bundles the server; `/mcp`
-signs in), read the workspace with `list_workspaces`, `list_repositories`,
-`get_snapshot`, `list_sandboxes`, `get_sandbox` and `get_run`. For a connected
-repository, and only when asked: `plan_slice` (read it with `get_run`),
-`start_sandbox`, `cut_slice` (a draft version from a slice run and the approved
-proposal) and `get_handout` (public files and the hidden suite's hash, never
-the hidden tests). The platform keeps the receipt; patching stays local.
-Approvals and publishing happen in the web app: point the person there. Never
-ask for a token; the CLI signs in with `carveout login`. Local mode, below, is
-the default.
+With the `lunox` MCP tools signed in (bundled; `/mcp` signs in), read with the
+`list_*`/`get_*` tools. Write only when asked: a bounty (`post_bounty` or
+`import_github_issue`, `size_bounty` is a paid run, `get_decisions` and
+`confirm_link`), a slice (`plan_slice`, `start_sandbox`, `cut_slice`), its
+build (`prepare`, then `get_handout`: public files and the hidden suite's hash
+only), a contractor's patch (`submit_patch`, `get_verdict`, one `retry`).
+Approvals, decisions, publishing and merging back happen in the web app. Model
+runs (`size_bounty`, `prepare`, `retry`) count against a monthly token limit
+(`get_usage`); on `quota_exceeded`, tell the person when it resets and do not
+retry. `insufficient_scope` means signing in again through `/mcp`. Never ask
+for a token; the CLI signs in with `carveout login`. Local mode, below, is the
+default.
 
 ## 1. Plan
 

package/skills/carveout-gate/SKILL.md

@@ -14,7 +14,7 @@ description: >-
   test to make it pass.
 license: MIT
 compatibility: >-
-  Node 22.12 or later, git and npm. Runs the carveout@0.2.0 CLI from npm.
+  Node 22.12 or later, git and npm. Runs the carveout@0.3.0 CLI from npm.
 ---
 
 # carveout-gate
@@ -23,9 +23,9 @@ What a change made in the repository reaches, and whether it weakened the checks
 that would catch it. To hand a part of the repository to someone outside it
 instead, use the `carveout` skill.
 
-`carveout <command>` is the CLI, `carveout@0.2.0`. When `carveout --version`
+`carveout <command>` is the CLI, `carveout@0.3.0`. When `carveout --version`
 prints another version or nothing, ask the person before installing it:
-`npm i -g carveout@0.2.0`, or put `npx carveout@0.2.0` in place of `carveout` in
+`npm i -g carveout@0.3.0`, or put `npx carveout@0.3.0` in place of `carveout` in
 each command (in a clone of the repository, `node dist/src/cli.js` after
 `npm install && npm run build`). Node 22.12 or later, and `git` and `npm` on
 PATH.