pomerado 0.1.1 → 0.2.0

package/dist/typescript/src/runtime/failure-detail.js

@@ -3,15 +3,14 @@ import { authorizationCredential, awsAccessKeyIdPattern, bracketedValueSource, c
 import { isSecretKey } from "../privacy/secret-keys.js";
 import { urlSpans } from "../privacy/url-spans.js";
 /**
- * Detailed failure record shared by every host failure class. See
- * typescript/src/runtime/ERROR-LOGGING-STANDARD.md. The finite fields (`subCause`, `operation`,
- * `phase`) may reach operational logs; everything else reaches the screened diagnostic archive,
- * where the privacy broker screens it again under the diagnostics area policy, and, for a relayed
- * HTTP failure only, the sandbox's answer through `agentDetail` in `browser/http-relay.ts`.
+ * Detailed failure record shared by every host failure class. The finite fields (`subCause`,
+ * `operation`, `phase`) may reach operational logs; everything else reaches the screened
+ * diagnostic archive, where the privacy broker screens it again under the diagnostics area policy,
+ * and, for a relayed HTTP failure only, the sandbox's answer through a host's HTTP relay.
  */
 /** Stable, finite sub-causes. Add a new value rather than reusing one for a different check. */
 const failureSubCauses = [
-    // CDP transport (destinations/cdp-transport.ts)
+    // A host's CDP transport to its browser
     "cdp_endpoint_invalid",
     "cdp_connect_failed",
     "cdp_command_rejected",
@@ -24,12 +23,12 @@ const failureSubCauses = [
     "cdp_envelope_invalid",
     "cdp_transport_closed",
     "cdp_command_not_allowed",
-    // Host HTTP relay and direct sign-in (destinations/http-relay.ts, destinations/direct-login.ts)
+    // A host's HTTP relay and direct sign-in
     "http_relay_transport_failed",
     "direct_login_transport_failed",
     // Host autofill sign-in (destinations/autofill-step.ts); a failed fill keeps no error text
     "autofill_step_failed",
-    // Browser recorder (destinations/browser-recorder.ts)
+    // A host's browser recorder
     "recorder_start_incomplete",
     "recorder_context_ambiguous",
     "recorder_primary_missing",
@@ -38,26 +37,28 @@ const failureSubCauses = [
     "recorder_foreign_target_unclosed",
     "recorder_target_undetached",
     "recorder_request_unseen",
-    // Origin policy reads (worker/origin-boundary.ts, worker/browser.ts)
+    // Origin policy reads a hosted service may make before and while it browses
     "origin_route_blocked",
     "origin_policy_read_failed",
     "origin_policy_timeout",
     "origin_policy_snapshot_stale",
     "origin_url_invalid",
-    // Worker browser (worker/browser.ts)
+    // A hosted service's job browser
     "browser_origin_missing",
     "browser_initial_policy_failed",
     "browser_initial_origin_blocked",
-    // The primary origin is on the site blocklist (origin-policy/site-blocklist.ts)
+    // The primary origin is on a site blocklist a hosted service may keep
     "browser_site_not_supported",
     "browser_entry_url_invalid",
     "browser_primary_page_crashed",
     "browser_primary_page_closed",
     "browser_gone",
     "browser_unresponsive",
-    // A mint browser lost a third time with no agent command since the first (mint/host-browser-recovery.ts)
+    // The browser responded with a page-command failure, such as a script error or timeout.
+    "browser_page_call_failed",
+    // A mint browser lost a third time with no agent command since the first
     "browser_loss_repeated",
-    // Startup and job authority (worker/startup-authority.ts, worker/mint.ts, worker/run.ts)
+    // Startup and job authority a hosted service may check before and during a job
     "startup_job_read_failed",
     "startup_attempt_superseded",
     "startup_cancel_requested",
@@ -66,10 +67,10 @@ const failureSubCauses = [
     "startup_maintenance_work_failed",
     "startup_original_read_failed",
     "startup_original_cancel_requested",
-    // An attempt's unreadable authority check and the grace that bounds it (worker/authority-grace.ts)
+    // An attempt's unreadable authority check and the grace that bounds it
     "authority_check_unreadable",
     "authority_unavailable_past_grace",
-    // The attempt lease heartbeat and its thread (jobs/lease-heartbeat.ts, jobs/lease-thread.ts)
+    // The heartbeat, and its thread, that a hosted service may use to hold an attempt's lease
     "lease_attempt_inactive",
     "lease_watchdog_expired",
     "lease_thread_failed",
@@ -79,54 +80,50 @@ const failureSubCauses = [
     // A run's in-place login question went unanswered, was refused, or could not be asked.
     "run_login_request_failed",
     "run_expired_auth_site_mismatch",
-    // A run's lost page or browser and its retry (worker/run.ts, decided 2026-09-27)
+    // A run's lost page or browser and its retry
     "run_browser_loss_retried",
     "run_signed_in_session_cleared",
-    // A session a mode or proxy change wiped again past the attempt's relogin cap (worker/browser.ts)
+    // A session a mode or proxy change wiped again past the attempt's relogin cap
     "browser_relogin_spent",
-    // A wiped session whose latest sign-in was never verified (worker/browser.ts)
+    // A wiped session whose latest sign-in was never verified
     "browser_relogin_unverified",
     // A mint's authenticate after its attempt's sign-ins were spent: sign-in is unavailable in the
-    // build (mint/host-execution.ts)
+    // build
     "mint_sign_in_spent",
     "run_browser_loss_retry_declined",
-    // A write mint's accepted confirm it could not screen for secrets, so never kept (mint/host-evidence.ts)
+    // A write mint's accepted confirm it could not screen for secrets, so never kept
     "mint_expected_confirm_unscreened",
-    // Mint host destination authority (mint/host.ts)
+    // A mint host's destination authority
     "mint_admission_generation_changed",
     // A publication whose attempt no longer holds its job, or whose job was told to stop
-    // (registry/postgres.ts)
     "publication_attempt_stopped",
-    // Mint host managed-login identity check (mint/host.ts)
+    // A mint host's managed-login identity check
     "identity_receipt_invalid",
     "identity_check_failed",
     // The site rejected the supplied credentials during managed login; not a dependency failure.
     "managed_login_credentials_rejected",
     // A run's autofill replay: the site showed the password screen again after it took the
-    // password, or the replay did not sign in for another reason, which maintenance repairs
-    // (worker/run.ts).
+    // password, or the replay did not sign in for another reason, which maintenance repairs.
     "autofill_credentials_rejected",
     "operation_credentials_rejected",
     "run_autofill_sign_in_failed",
     // A run's sign-in found an execution VM that could still reach its browser, so nothing was
-    // filled (worker/run.ts).
+    // filled.
     "run_sign_in_executor_attached",
-    // A host resource that did not settle within its bound: the attempt's host close
-    // (mint/host-settle.ts) and a cancel or lost lease's browser stop (worker/mint.ts)
+    // A host resource that did not settle within its bound: the attempt's host close, and the
+    // browser stop after a cancel or a lost lease
     "mint_host_settle_timeout",
     "mint_outside_stop_timeout",
     // A takeover's resource that stayed unavailable for the whole recovery wait
-    // (mint/host-restore-sandbox.ts)
     "mint_recovery_wait_timeout",
-    // A takeover's step whose outcome no later try can confirm (mint/host-restore-execution.ts,
-    // mint/host-restore-browser.ts)
+    // A takeover's step whose outcome no later try can confirm
     "mint_recovery_unconfirmed",
     // The model provider refused a mint's call because the account's quota is spent (mint/openai.ts)
     "model_quota_exhausted",
-    // Input request answers and views (application/input-requests.ts): the request's protected
-    // handoff was deleted or had expired, so the request closed while it was read.
+    // Input request answers and views: the request's protected handoff was deleted or had
+    // expired, so the request closed while it was read.
     "input_request_handoff_closed",
-    // Application host (application/host.ts)
+    // A host's authority reference and its recheck
     "host_authority_reference_invalid",
     "host_authority_recheck_failed",
     // A queued attempt's server renewal and a job whose
@@ -136,9 +133,9 @@ const failureSubCauses = [
     "authority_server_renewal_stopped",
     "authority_server_renewal_unavailable",
     "authority_session_signed_out",
-    // A worker takeover that never settled ended its job as a lost lease (application/recovery-claim.ts)
+    // A takeover that never settled ended its job as a lost lease
     "recovery_unsettled",
-    // A browser create Kernel kept answering with 429 past its wait budget (providers/kernel/controller.ts)
+    // A browser create the provider kept answering with 429 past its wait budget
     "kernel_rate_limited",
     // Dependency failures wrapped by a host failure, by area. `site` names the mapping.
     "mint_execution_failed",
@@ -150,14 +147,14 @@ const failureSubCauses = [
     "executor_boundary_failed",
     "sandbox_workspace_failed",
     "credential_connector_failed",
-    // A credential launcher's refused worker start (credentials/workload/launcher.ts): the
-    // Kubernetes API refused the worker Job, by admission policy or webhook, the namespace quota,
-    // a webhook that can't judge a dry run, or otherwise (authorization, an invalid template)
+    // A hosted service may refuse to start a credential worker: the Kubernetes API refused the
+    // worker, by admission policy or webhook, a quota, a webhook that can't judge a dry run, or
+    // otherwise (authorization, an invalid template)
     "admission_rejected",
     "quota_exceeded",
     "dry_run_unsupported",
     "kubernetes_create_rejected",
-    // ...or the launcher refused before creating one
+    // ...or the service refused before creating one
     "launcher_draining",
     "launcher_at_capacity",
     "launcher_tenant_at_capacity",
@@ -165,11 +162,10 @@ const failureSubCauses = [
     "controller_operation_forbidden",
     "workload_identity_mismatch",
     "launch_superseded",
-    // ...or the start's gateway-signed capability did not cover it (credentials/capability.ts)
+    // ...or the start's signed capability did not cover it
     "capability_refused",
-    // A credential worker's launcher call that never reached the launcher: DNS, connection or TLS
-    // failed, as when the namespace's default deny ships without the worker egress allow
-    // (credentials/workload/worker.ts)
+    // A credential worker's call to start work that never arrived: DNS, connection or TLS failed,
+    // as when network policy blocks the worker's egress
     "worker_launcher_unreachable",
     "job_storage_failed",
     "private_input_storage_failed",
@@ -852,7 +848,7 @@ export const withCauseEntry = (detail, error) => {
  * A detail nested in a failure object is invisible to JSON serialization: RPC encoders,
  * public responses and `JSON.stringify(failure)` omit it. Only `failureDetailMetadata` and
  * `failureDetailOf` project it, into the archive and the maintenance evidence files, and
- * `agentDetail` in `browser/http-relay.ts`, into a relayed HTTP failure's answer to the sandbox,
+ * a host's HTTP relay, into a relayed HTTP failure's answer to the sandbox,
  * which the agent's execution result carries. The detail itself, serialized at the top level,
  * keeps every field.
  */

package/dist/typescript/src/runtime/input-request.d.ts

@@ -6,6 +6,7 @@ import { Either, Schema, type Effect } from "effect";
  * surface (Dashboard, MCP, REST) answers through `validateAnswer`.
  */
 /** A question's key in the request and in the answer. */
+export declare const questionIdPattern: RegExp;
 export declare const QuestionId: Schema.filter<typeof Schema.String>;
 /** The longest free-text or secret answer any question accepts. */
 export declare const maximumAnswerLength = 16384;

package/dist/typescript/src/runtime/input-request.js

@@ -6,7 +6,8 @@ import { Data, Either, Schema } from "effect";
  * surface (Dashboard, MCP, REST) answers through `validateAnswer`.
  */
 /** A question's key in the request and in the answer. */
-export const QuestionId = Schema.String.pipe(Schema.pattern(/^[a-z][a-z0-9_]{0,63}$/));
+export const questionIdPattern = /^[a-z][a-z0-9_]{0,63}$/;
+export const QuestionId = Schema.String.pipe(Schema.pattern(questionIdPattern));
 /** The host's opaque name for an offered option; a script's or provider's own value stays private. */
 const OptionId = Schema.String.pipe(Schema.pattern(/^[a-z0-9_]{1,64}$/));
 const Label = Schema.String.pipe(Schema.minLength(1), Schema.maxLength(256));

package/dist/typescript/src/runtime/provider-metadata.d.ts

@@ -1,14 +1,15 @@
 export type BrowserMode = "headless" | "headful" | "headful-gpu";
 export type RetainedProviderStage = "profile_decode" | "connection_decode" | "connection_duplicate_fields" | "timeline_decode" | "browser_session_mismatch" | "login_browser_decode" | "login_already_running" | "login_response_decode" | "submit_state"
-/** Kernel answered the submission `accepted: false`. */
+/** The provider answered the submission `accepted: false`. */
  | "submit_rejected" | "submit_response_decode" | "cleanup_identity_decode";
 export type RetainedProviderSchemaField = "profile" | "profile.id" | "profile_save_changes" | "stealth" | "browser.stealth" | "other";
 export type RetainedProviderCode = "Unavailable" | "InvalidConfiguration" | "ProxyUnavailable" | "AllocationUncertain"
-/** Kernel answered the create with a definite refusal, so no browser exists. */
+/** The provider answered the create with a definite refusal, so no browser exists. */
  | "AllocationRejected" | "StopUnconfirmed" | "UnexpectedBrowserState" | "StorageUnavailable" | "BindingNotFound";
-/** Proxy failure codes retained in sign-in diagnostics. */
-export type RetainedProxyError = "upstream_timeout" | "provider_unreachable" | "upstream_connect_failed" | "upstream_dns_failure" | "origin_tls_timeout" | "restricted_route_unavailable" | "destination_route_unavailable" | "proxy_unavailable" | "origin_response_incomplete" | "provider_rejected" | "provider_blacklisted" | "destination_blocked" | "mitm_certificate" | "mitm_tls" | "mitm_tls_rejected" | "mitm_connect" | "mitm_stream" | "mitm_io" | "mitm_timeout" | "mitm_canceled" | "mitm_upstream_proxy" | "mitm_h1" | "mitm_request_invalid" | "mitm_other" | "proxy_forbidden" | "proxy_auth_required" | "proxy_rate_limited" | "other";
-export type ProxySwitchSummary = {
+/** Network failure codes a host retains in sign-in diagnostics, as its provider reported them. */
+export type RetainedNetworkError = "upstream_timeout" | "provider_unreachable" | "upstream_connect_failed" | "upstream_dns_failure" | "origin_tls_timeout" | "restricted_route_unavailable" | "destination_route_unavailable" | "proxy_unavailable" | "origin_response_incomplete" | "provider_rejected" | "provider_blacklisted" | "destination_blocked" | "mitm_certificate" | "mitm_tls" | "mitm_tls_rejected" | "mitm_connect" | "mitm_stream" | "mitm_io" | "mitm_timeout" | "mitm_canceled" | "mitm_upstream_proxy" | "mitm_h1" | "mitm_request_invalid" | "mitm_other" | "proxy_forbidden" | "proxy_auth_required" | "proxy_rate_limited" | "other";
+/** How the host replaced a browser after a failure, as the agent sees it. */
+export type BrowserRecoverySummary = {
     readonly kind: "switched";
     readonly egress: "proxy" | "direct";
     readonly cause: string;
@@ -16,7 +17,7 @@ export type ProxySwitchSummary = {
     readonly possiblySent: boolean;
     readonly inFlightPossiblySent: true;
     readonly repeated: false;
-    /** The browser's cookies, cache and site storage were cleared for the new proxy. */
+    /** The browser's cookies, cache and site storage were cleared for the replacement. */
     readonly stateCleared: true;
     /** Set when the clear ended the site's signed-in session. */
     readonly signIn?: "again_once" | "unavailable";

package/dist/typescript/src/runtime/script-input.d.ts

@@ -32,7 +32,7 @@ export declare const ScriptQuestionDeclaration: Schema.Union<[Schema.Struct<{
     prompt: Schema.filter<Schema.filter<typeof Schema.String>>;
 }>]>;
 export type ScriptQuestionDeclaration = typeof ScriptQuestionDeclaration.Type;
-export declare const ScriptQuestionDeclarations: Schema.Record$<Schema.filter<typeof Schema.String>, Schema.Union<[Schema.Struct<{
+export declare const ScriptQuestionDeclarations: Schema.transform<Schema.filter<typeof Schema.Unknown>, Schema.Record$<Schema.filter<typeof Schema.String>, Schema.Union<[Schema.Struct<{
     type: Schema.Literal<["choice"]>;
     prompt: Schema.filter<Schema.filter<typeof Schema.String>>;
     allowOther: Schema.optional<typeof Schema.Boolean>;
@@ -61,7 +61,7 @@ export declare const ScriptQuestionDeclarations: Schema.Record$<Schema.filter<ty
     maxLength: Schema.optional<Schema.filter<typeof Schema.Int>>;
 }>, Schema.Struct<{
     prompt: Schema.filter<Schema.filter<typeof Schema.String>>;
-}>]>>;
+}>]>>>;
 export type ScriptQuestionDeclarations = Readonly<Record<string, ScriptQuestionDeclaration>>;
 /** One option the page offers now. */
 export declare const ScriptOption: Schema.Struct<{

package/dist/typescript/src/runtime/script-input.js

@@ -1,6 +1,6 @@
 import { randomUUID } from "node:crypto";
-import { Context, Data, Effect, Either, Schema } from "effect";
-import { ConfirmQuestion, InputRequest, QuestionId, SecretQuestion, TextQuestion, validateAnswer, } from "./input-request.js";
+import { Context, Data, Effect, Either, Schema, SchemaAST } from "effect";
+import { ConfirmQuestion, InputRequest, QuestionId, questionIdPattern, SecretQuestion, TextQuestion, validateAnswer, } from "./input-request.js";
 /**
  * A script asks its caller through the one input request (source `script`). It declares each
  * question once in its contract, so the publication review reads every prompt, and passes the
@@ -35,10 +35,20 @@ export const ScriptQuestionDeclaration = Schema.Union(Schema.Struct({
 }), 
 // The pre-unification shape, `{ prompt }`, kept for published revisions: a single choice.
 Schema.Struct({ prompt: Schema.String.pipe(Schema.minLength(1), Schema.maxLength(500)) }));
-export const ScriptQuestionDeclarations = Schema.Record({
+const QuestionDeclarations = Schema.Record({
     key: QuestionId,
     value: ScriptQuestionDeclaration,
 });
+export const ScriptQuestionDeclarations = Schema.Unknown.pipe(
+// Check original keys before record construction can discard __proto__ or another invalid id.
+Schema.filter((questions) => typeof questions !== "object" ||
+    questions === null ||
+    Object.keys(questions).every((id) => questionIdPattern.test(id)), {
+    message: () => "question ids must start with a lowercase letter and contain only lowercase letters, digits, or underscores (up to 64 characters)",
+}), Schema.compose(QuestionDeclarations)).annotations({
+    // Schema generation still describes the declarations rather than the unvalidated input.
+    [SchemaAST.SurrogateAnnotationId]: QuestionDeclarations.ast,
+});
 /** One option the page offers now. */
 export const ScriptOption = Schema.Struct({
     /** What `ask` returns when the caller picks it. It never leaves the sandbox. */

package/dist/typescript/src/standalone/mcp-cli.js

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+import { realpathSync } from "node:fs";
 import { parseArgs } from "node:util";
 import { pathToFileURL } from "node:url";
 import { resolve } from "node:path";
@@ -98,6 +99,16 @@ export const startMcpCli = (args = process.argv.slice(2), options = {}) => {
         },
     });
 };
-if (process.argv[1] !== undefined &&
-    pathToFileURL(resolve(process.argv[1])).href === import.meta.url)
+/** npm links a bin to this file, so the entry path counts once its links are resolved. */
+const isEntrypoint = (path) => {
+    if (path === undefined)
+        return false;
+    try {
+        return pathToFileURL(realpathSync(path)).href === import.meta.url;
+    }
+    catch {
+        return false;
+    }
+};
+if (isEntrypoint(process.argv[1]))
     startMcpCli();

package/dist/typescript/src/standalone/mcp-package.js

@@ -6,12 +6,29 @@ import { localFilePath, localPromise, localError, localRelativePath, } from "../
 import { Deployment, writeArtifact } from "./artifact-files.js";
 const launcher = `import { fileURLToPath } from 'node:url';
 const runtime = process.argv[2];
-if (!runtime) throw new Error('Start this integration using its generated Codex configuration.');
+if (!runtime) throw new Error('Start this integration with the command and arguments in its mcp.json.');
 const { startMcpCli } = await import(runtime);
 startMcpCli(['serve', '--artifact', fileURLToPath(new URL('.', import.meta.url))]);
 `;
 const shellQuote = (value) => `'${value.replaceAll("'", "'\\''")}'`;
-const reserved = new Set(["deployment.json", "mcp.mjs", "codex-mcp.toml", "readme.md"]);
+/**
+ * Top-level names authored source may not use, compared in lower case. They cover the packaging
+ * files, the TOML that 0.1.2 wrote and its docs told users to copy into Codex, and the project
+ * config an MCP client might load from this folder.
+ */
+const reserved = new Set([
+    "deployment.json",
+    "mcp.mjs",
+    "mcp.json",
+    "readme.md",
+    "codex-mcp.toml",
+    ".mcp.json",
+    ".vscode",
+    ".cursor",
+    ".codex",
+    ".gemini",
+    ".claude",
+]);
 /** Only the local operator's configuration chooses the root; tool arguments choose one slug. */
 export const prepareIntegration = (options) => Effect.gen(function* () {
     const deployment = yield* Schema.decodeUnknown(Deployment)({
@@ -46,37 +63,70 @@ export const prepareIntegration = (options) => Effect.gen(function* () {
         yield* writeArtifact(directory, artifact);
         const workspace = yield* createLocalWorkspace({ root: directory });
         const launcherPath = join(directory, "mcp.mjs");
-        const configPath = join(directory, "codex-mcp.toml");
+        const configPath = join(directory, "mcp.json");
         const runtime = new URL("./mcp-cli.js", import.meta.url).href;
-        const configuration = `[mcp_servers.${deployment.name}]
-command = ${JSON.stringify(process.execPath)}
-args = ${JSON.stringify([launcherPath, runtime])}
-env_vars = ["OPENAI_API_KEY"]
-`;
+        const args = [launcherPath, runtime];
+        const configuration = {
+            mcpServers: { [deployment.name]: { command: process.execPath, args } },
+        };
+        const command = [process.execPath, ...args].map(shellQuote).join(" ");
         yield* workspace.write("deployment.json", `${JSON.stringify(deployment, null, 2)}\n`);
         yield* workspace.write("mcp.mjs", launcher);
-        yield* workspace.write("codex-mcp.toml", configuration);
+        yield* workspace.write("mcp.json", `${JSON.stringify(configuration, null, 2)}\n`);
         yield* workspace.write("README.md", `# ${deployment.name}
 
-This integration is hosted locally over MCP stdio. Add the command and arguments from
-codex-mcp.toml to your Codex configuration (~/.codex/config.toml). Alternatively, register it with:
+This integration runs on your computer as a local MCP stdio server. mcp.json holds its server
+entry in the standard mcpServers format. The entry starts your Node with this directory's
+launcher and your installed Pomerado runtime.
+
+## Add it to your MCP client
+
+- Claude Code passes its own environment to the server.
+
+  \`\`\`sh
+  claude mcp add ${deployment.name} -- ${command}
+  \`\`\`
+
+- Codex passes servers only a short list of environment variables. After adding the server, put
+  \`env_vars = ["OPENAI_API_KEY"]\` under \`[mcp_servers.${deployment.name}]\` in
+  ~/.codex/config.toml, or $CODEX_HOME/config.toml when CODEX_HOME is set.
+
+  \`\`\`sh
+  codex mcp add ${deployment.name} -- ${command}
+  \`\`\`
 
-\`\`\`sh
-codex mcp add ${deployment.name} -- ${shellQuote(process.execPath)} ${shellQuote(launcherPath)} ${shellQuote(runtime)}
-\`\`\`
+- Gemini CLI hides variables named like keys from servers. The -e flag below passes
+  OPENAI_API_KEY by reference, so the settings file holds no key.
+
+  \`\`\`sh
+  gemini mcp add -e 'OPENAI_API_KEY=$OPENAI_API_KEY' ${deployment.name} ${command}
+  \`\`\`
+
+- Cursor, VS Code, Claude Desktop and other clients that read an mcpServers JSON file take the
+  entry from mcp.json. In Cursor, add \`"env": { "OPENAI_API_KEY": "\${env:OPENAI_API_KEY}" }\`
+  to it.
+
+## Model key
+
+The server needs OPENAI_API_KEY in its environment, because Guardian reviews every run. Model
+requests go to the configured provider. This directory and mcp.json hold no key. Give the key to
+the server through your client's environment settings, never through chat.
+
+## Call it
 
 Call ${deployment.name} with its discovered input schema. Its URL, intent, authority and
-authentication origins are pinned in deployment.json. Jobs and questions continue through
-get_job, provide_input and cancel_job; polling never resubmits an operation.
+authentication origins are pinned in deployment.json. A call that needs an answer or more time
+returns a job ID. Continue that job with get_job, provide_input and cancel_job. Polling never
+resubmits an operation.
+
+Answers sent through provide_input are visible to your MCP client and its model provider.
+Restarting the server loses live jobs.
 
-The launcher uses the shared installed Pomerado runtime, minter/Guardian dependencies and
-local Chromium. Configured model providers receive model requests. The TOML forwards
-OPENAI_API_KEY from Codex's environment. Supply provider keys in
-the server's environment; this directory and its configuration contain no keys. Answers sent
-through provide_input are visible to the MCP client and its model. Restarting loses live jobs.
+## Paths
 
-The launcher source is portable. The local configuration references your current Node and
-runtime installation; update those paths if you move either installation or this directory.
+The launcher uses your installed Pomerado runtime, its minter and Guardian dependencies, and
+local Chromium. The launcher source is portable. mcp.json names your current Node and Pomerado
+installation. Update those paths if you move either installation or this directory.
 `);
         completed = true;
         return { directory, configPath, launcherPath };

package/dist/typescript/tests/support/credential-masking-corpus.js

@@ -56,7 +56,7 @@ export const credentials = [
         "MIIfakeKeyMaterial",
         both,
     ],
-    // Review round 1: cookie shapes, Azure account keys, Digest params and bracketed values.
+    // Cookie shapes, Azure account keys, Digest params and bracketed values.
     ['Cookie: sid="FAKEq0t3dCookie123"; theme=dark', "FAKEq0t3dCookie123", both],
     [
         "upstream set-cookie: theme=dark; Path=/, session=FAKEsess0123abc; HttpOnly",
@@ -69,7 +69,7 @@ export const credentials = [
         both,
     ],
     ["Cookie: FAKEopaquecookie0123456789", "FAKEopaquecookie0123456789", both],
-    // Review round 2: a comma inside a cookie value continues it (consent-manager cookies).
+    // A comma inside a cookie value continues it (consent-manager cookies).
     ["Cookie: consent=analytics,ads; sid=SEKRETcomma02; theme=dark", "SEKRETcomma02", both],
     [
         "Cookie: cookieyes-consent=consentid:abc,consent:yes,action:yes; __Host-sid=SEKRETcy01",

package/package.json

@@ -1,9 +1,9 @@
 {
   "name": "pomerado",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "Pomerado's integration minter and Guardian with local compute and native Playwright",
   "type": "module",
-  "license": "AGPL-3.0-only",
+  "license": "MIT",
   "homepage": "https://pomerado.ai",
   "repository": {
     "type": "git",
@@ -595,8 +595,11 @@
   },
   "files": [
     "dist",
+    "CHANGELOG.md",
     "LICENSE",
-    "README.md"
+    "README.md",
+    "third-party/codex/LICENSE",
+    "third-party/codex/NOTICE"
   ],
   "scripts": {
     "build": "rm -rf dist && tsc -p tsconfig.json && node tools/copy-assets.ts",