privateboard 0.1.22 → 0.1.23

package/dist/server.js

@@ -700,6 +700,22 @@ CREATE INDEX IF NOT EXISTS idx_qd_archive_room_cell
   }
 });
 
+// src/storage/migrations/039_remap_removed_models.sql
+var remap_removed_models_default;
+var init_remap_removed_models = __esm({
+  "src/storage/migrations/039_remap_removed_models.sql"() {
+    remap_removed_models_default = "-- 039_remap_removed_models.sql\n--\n-- Remap stored modelV strings for the six modelVs deleted from the\n-- registry on 2026-05-17 (B.AI catalog reconcile + xAI removal):\n--\n--   opus-4-6        \u2192 opus-4-7    (Anthropic flagship peer)\n--   gpt-5-5-pro     \u2192 gpt-5-5     (drop the -pro suffix; same family)\n--   kimi-2-6        \u2192 kimi-k2-6   (current Kimi model \xB7 OR slug `moonshotai/kimi-k2.6`)\n--   grok-4-3        \u2192 sonnet-4-6  (no Grok in registry; safe default)\n--   grok-4-1-fast   \u2192 haiku-4-5   (fast-tier peer)\n--   grok-4-20       \u2192 opus-4-7    (long-context peer; was 2M ctx)\n--\n-- Two live tables hold modelV: agents.model_v (every agent record) and\n-- prefs.default_model_v (the user's default-model choice). Historical\n-- snapshot tables (room_summaries.model_v, retired_token_usage.model_v,\n-- usage_daily.model_v) are NOT touched \u2014 they record what actually ran\n-- at the time and rewriting them would lie about history.\n--\n-- Idempotent \xB7 `WHERE model_v = '<old>'` is a no-op on second run.\n\nUPDATE agents SET model_v = 'opus-4-7'   WHERE model_v = 'opus-4-6';\nUPDATE agents SET model_v = 'gpt-5-5'    WHERE model_v = 'gpt-5-5-pro';\nUPDATE agents SET model_v = 'kimi-k2-6'  WHERE model_v = 'kimi-2-6';\nUPDATE agents SET model_v = 'sonnet-4-6' WHERE model_v = 'grok-4-3';\nUPDATE agents SET model_v = 'haiku-4-5'  WHERE model_v = 'grok-4-1-fast';\nUPDATE agents SET model_v = 'opus-4-7'   WHERE model_v = 'grok-4-20';\n\nUPDATE prefs SET default_model_v = 'opus-4-7'   WHERE default_model_v = 'opus-4-6';\nUPDATE prefs SET default_model_v = 'gpt-5-5'    WHERE default_model_v = 'gpt-5-5-pro';\nUPDATE prefs SET default_model_v = 'kimi-k2-6'  WHERE default_model_v = 'kimi-2-6';\nUPDATE prefs SET default_model_v = 'sonnet-4-6' WHERE default_model_v = 'grok-4-3';\nUPDATE prefs SET default_model_v = 'haiku-4-5'  WHERE default_model_v = 'grok-4-1-fast';\nUPDATE prefs SET default_model_v = 'opus-4-7'   WHERE default_model_v = 'grok-4-20';\n";
+  }
+});
+
+// src/storage/migrations/040_remap_kimi_k2_5_to_k2_6.sql
+var remap_kimi_k2_5_to_k2_6_default;
+var init_remap_kimi_k2_5_to_k2_6 = __esm({
+  "src/storage/migrations/040_remap_kimi_k2_5_to_k2_6.sql"() {
+    remap_kimi_k2_5_to_k2_6_default = "-- 040_remap_kimi_k2_5_to_k2_6.sql\n--\n-- Bump stored `kimi-k2-5` rows to `kimi-k2-6` after the Kimi registry\n-- entry was renamed (OpenRouter exposes the slug as\n-- `moonshotai/kimi-k2.6`; the prior `moonshotai/kimi-k2.5` slug 404s).\n--\n-- This complements 039_remap_removed_models.sql: 039 was edited to\n-- land users directly on `kimi-k2-6` for first-time runs, but any DB\n-- that already ran the previous 039 (which mapped to `kimi-k2-5`) is\n-- left holding the now-unknown `kimi-k2-5` string. This migration\n-- fixes those. Idempotent \xB7 WHERE clause is a no-op on second run.\n--\n-- Live tables only (`agents.model_v`, `prefs.default_model_v`).\n-- Historical snapshot tables are not touched \u2014 they record what\n-- actually ran at the time.\n\nUPDATE agents SET model_v = 'kimi-k2-6'  WHERE model_v = 'kimi-k2-5';\nUPDATE prefs  SET default_model_v = 'kimi-k2-6'  WHERE default_model_v = 'kimi-k2-5';\n";
+  }
+});
+
 // src/storage/db.ts
 var db_exports = {};
 __export(db_exports, {
@@ -795,6 +811,8 @@ var init_db = __esm({
     init_negative_space();
     init_topic_branches();
     init_qd_archive();
+    init_remap_removed_models();
+    init_remap_kimi_k2_5_to_k2_6();
     MIGRATIONS = [
       { name: "001_init.sql", sql: init_default },
       { name: "002_default_opus.sql", sql: default_opus_default },
@@ -833,7 +851,9 @@ var init_db = __esm({
       { name: "035_topic_rec_tag.sql", sql: topic_rec_tag_default },
       { name: "036_negative_space.sql", sql: negative_space_default },
       { name: "037_topic_branches.sql", sql: topic_branches_default },
-      { name: "038_qd_archive.sql", sql: qd_archive_default }
+      { name: "038_qd_archive.sql", sql: qd_archive_default },
+      { name: "039_remap_removed_models.sql", sql: remap_removed_models_default },
+      { name: "040_remap_kimi_k2_5_to_k2_6.sql", sql: remap_kimi_k2_5_to_k2_6_default }
     ];
     _db = null;
   }
@@ -973,16 +993,6 @@ var MODELS = {
     contextBudget: 2e5,
     deck: "balanced \xB7 default"
   },
-  "opus-4-6": {
-    v: "opus-4-6",
-    provider: "anthropic",
-    directApiId: "claude-opus-4-6",
-    openrouterId: "anthropic/claude-opus-4.6",
-    baiId: "claude-opus-4.6",
-    displayName: "Opus 4.6",
-    contextBudget: 1e6,
-    deck: "deep reasoning \xB7 1M ctx"
-  },
   "opus-4-7": {
     v: "opus-4-7",
     provider: "anthropic",
@@ -1047,26 +1057,12 @@ var MODELS = {
     provider: "openai",
     directApiId: "gpt-5.4-mini",
     openrouterId: "openai/gpt-5.4-mini",
-    // No baiId · B.AI's catalog reports "No available channel for
-    // model gpt-5-4-mini" on the OneAPI distributor — the mini
-    // variant isn't routed there. The full `gpt-5-4` IS available on
-    // B.AI; pick that or use direct / OR for the mini tier.
+    baiId: "gpt-5.4-mini",
     displayName: "GPT-5.4 Mini",
     contextBudget: 4e5,
     deck: "fast \xB7 400k ctx"
   },
-  // ── OpenAI · OR-only previews (Pro / Codex) ──
-  "gpt-5-5-pro": {
-    v: "gpt-5-5-pro",
-    provider: "openai",
-    directApiId: "gpt-5.5-pro",
-    openrouterId: "openai/gpt-5.5-pro",
-    baiId: "gpt-5.5-pro",
-    displayName: "GPT-5.5 Pro",
-    contextBudget: 1e6,
-    deck: "deep reasoning \xB7 1M ctx",
-    viaUniversalOnly: true
-  },
+  // ── OpenAI · OR-only previews (Codex) ──
   "codex-5-4": {
     v: "codex-5-4",
     provider: "openai",
@@ -1118,42 +1114,13 @@ var MODELS = {
     contextBudget: 1e6,
     deck: "fast \xB7 1M ctx"
   },
-  // ── xAI · current frontier (4.3 / 4.1 Fast direct + 4.20 big-ctx OR) ──
-  // Replaced the legacy grok-4 / grok-4-mini entries — 4.3 is xAI's
-  // current "most intelligent and fastest" model per their docs; 4.1
-  // Fast is the new cheap tier. 4.20 stays OR-only since it's a 2M-ctx
-  // preview that the direct SDK hasn't acknowledged yet.
-  "grok-4-3": {
-    v: "grok-4-3",
-    provider: "xai",
-    directApiId: "grok-4.3",
-    openrouterId: "x-ai/grok-4.3",
-    baiId: "grok-4.3",
-    displayName: "Grok 4.3",
-    contextBudget: 1e6,
-    deck: "flagship \xB7 1M ctx"
-  },
-  "grok-4-1-fast": {
-    v: "grok-4-1-fast",
-    provider: "xai",
-    directApiId: "grok-4.1-fast",
-    openrouterId: "x-ai/grok-4.1-fast",
-    baiId: "grok-4.1-fast",
-    displayName: "Grok 4.1 Fast",
-    contextBudget: 256e3,
-    deck: "fast \xB7 256k ctx"
-  },
-  "grok-4-20": {
-    v: "grok-4-20",
-    provider: "xai",
-    directApiId: "grok-4.20",
-    openrouterId: "x-ai/grok-4.20",
-    baiId: "grok-4.20",
-    displayName: "Grok 4.20",
-    contextBudget: 2e6,
-    deck: "2M ctx \xB7 big context",
-    viaUniversalOnly: true
-  },
+  // ── xAI · all Grok entries removed (2026-05-17) ──
+  // B.AI's catalog lists no Grok models, the user base on B.AI saw
+  // every grok-* call 503 with "no available channel". Direct xAI key
+  // route and OpenRouter route still exist in the adapter (the `xai`
+  // Provider type is retained), but no modelV currently maps to them.
+  // Re-add a `grok-*` entry here if/when B.AI begins routing xAI again
+  // or if the product re-introduces direct xAI as a first-class path.
   // ── DeepSeek (OR-only · no @ai-sdk/deepseek shipped) ──
   "deepseek-v4-pro": {
     v: "deepseek-v4-pro",
@@ -1193,20 +1160,49 @@ var MODELS = {
     deck: "Zhipu flagship \xB7 200k ctx",
     viaUniversalOnly: true
   },
-  // ── Moonshot · Kimi family · OR + B.AI only ──
-  // OpenRouter catalog convention: `moonshotai/kimi-…`. B.AI uses
-  // hyphenated lowercase: `kimi-2-6`. No direct @ai-sdk client ·
+  // ── Moonshot · Kimi family · OR + B.AI ──
+  // OpenRouter catalog convention: `moonshotai/kimi-k2.6` (the leading
+  // `k` is part of the slug — `moonshotai/kimi-2.6` 404s). B.AI's
+  // siliconflow distributor still ships the older `kimi-k2.5` channel
+  // (per 2026-05-17 catalog snapshot), so the B.AI route serves K2.5
+  // until B.AI picks up the newer build. No direct @ai-sdk client ·
   // viaUniversalOnly skips the direct path.
-  "kimi-2-6": {
-    v: "kimi-2-6",
+  "kimi-k2-6": {
+    v: "kimi-k2-6",
     provider: "moonshot",
-    directApiId: "kimi-2.6",
-    openrouterId: "moonshotai/kimi-2.6",
-    baiId: "kimi-2.6",
-    displayName: "Kimi 2.6",
+    directApiId: "kimi-k2.6",
+    openrouterId: "moonshotai/kimi-k2.6",
+    baiId: "kimi-k2.5",
+    displayName: "Kimi K2.6",
     contextBudget: 256e3,
     deck: "Moonshot \xB7 long-context",
     viaUniversalOnly: true
+  },
+  // ── MiniMax · M-series · OR + B.AI ──
+  // No direct @ai-sdk client · viaUniversalOnly skips the direct path.
+  // OpenRouter catalog slug: `minimax/minimax-mX.Y`. B.AI uses bare
+  // model id: `minimax-mX.Y` (siliconflow / paratera distributors).
+  "minimax-m2-7": {
+    v: "minimax-m2-7",
+    provider: "minimax",
+    directApiId: "minimax-m2.7",
+    openrouterId: "minimax/minimax-m2.7",
+    baiId: "minimax-m2.7",
+    displayName: "MiniMax M2.7",
+    contextBudget: 245e3,
+    deck: "MiniMax flagship \xB7 long-context",
+    viaUniversalOnly: true
+  },
+  "minimax-m2-5": {
+    v: "minimax-m2-5",
+    provider: "minimax",
+    directApiId: "minimax-m2.5",
+    openrouterId: "minimax/minimax-m2.5",
+    baiId: "minimax-m2.5",
+    displayName: "MiniMax M2.5",
+    contextBudget: 245e3,
+    deck: "MiniMax prior \xB7 long-context",
+    viaUniversalOnly: true
   }
 };
 function getModel(v) {
@@ -2044,7 +2040,6 @@ function parseAbility2(raw) {
 }
 var ALLOWED_MODELS = /* @__PURE__ */ new Set([
   "sonnet-4-6",
-  "opus-4-6",
   "opus-4-7",
   "haiku-4-5",
   "gpt-5-5",
@@ -2053,10 +2048,12 @@ var ALLOWED_MODELS = /* @__PURE__ */ new Set([
   "gemini-3-1",
   "gemini-3-flash",
   "gemini-3-1-flash",
-  "grok-4-3",
-  "grok-4-1-fast",
   "deepseek-v4-pro",
-  "deepseek-v4-flash"
+  "deepseek-v4-flash",
+  "glm-5-1",
+  "kimi-k2-6",
+  "minimax-m2-7",
+  "minimax-m2-5"
 ]);
 function clamp(s, max) {
   if (s.length <= max) return s;
@@ -3316,8 +3313,9 @@ var PRIMARY_BY_CARRIER = {
   bai: "haiku-4-5",
   anthropic: "haiku-4-5",
   openai: "gpt-5-4-mini",
-  google: "gemini-3-1-flash",
-  xai: "grok-4-1-fast"
+  google: "gemini-3-1-flash"
+  // xai · no primary (no LLM modelV in registry as of 2026-05-17). The
+  // adapter / availability layer skip xai when this key is absent.
 };
 var CARRIER_PRIORITY = ["openrouter", "bai", "anthropic", "openai", "google", "xai"];
 function reachableModelVs() {
@@ -3459,14 +3457,22 @@ var PROVIDER_FLAGSHIP = {
   anthropic: "opus-4-7",
   openai: "gpt-5-5",
   google: "gemini-3-flash",
-  xai: "grok-4-3",
+  // xai · no LLM modelV currently in the registry (all grok-* entries
+  // removed 2026-05-17 when B.AI dropped xAI). Keep the key so the
+  // Record type stays exhaustive; the resolver naturally skips it.
+  xai: null,
   deepseek: "deepseek-v4-pro",
   zhipu: "glm-5-1",
-  moonshot: "kimi-2-6",
+  moonshot: "kimi-k2-6",
   openrouter: "opus-4-7",
   bai: "opus-4-7",
   brave: null,
   tavily: null,
+  // minimax has LLM models now (minimax-m2-7 / m2-5) but no direct
+  // @ai-sdk path · only the B.AI route works. The Provider Record here
+  // refers to *direct* providers, so `null` is correct: a user with
+  // only a minimax voice key shouldn't try to use it as their LLM
+  // flagship. B.AI carrier still picks up the MiniMax LLMs naturally.
   minimax: null,
   elevenlabs: null
 };
@@ -3474,13 +3480,14 @@ var PROVIDER_FAST = {
   anthropic: "haiku-4-5",
   openai: "gpt-5-4-mini",
   google: "gemini-3-1-flash",
-  xai: "grok-4-1-fast",
+  // xai · no LLM modelV in the registry (see PROVIDER_FLAGSHIP note).
+  xai: null,
   deepseek: "deepseek-v4-flash",
   // GLM / Kimi · no separate fast/flash tier in our registry yet, so
   // both providers' "fast pick" falls back to the same flagship that
   // PROVIDER_FLAGSHIP names. Reachability-via-OR/B.AI carries it.
   zhipu: "glm-5-1",
-  moonshot: "kimi-2-6",
+  moonshot: "kimi-k2-6",
   openrouter: "opus-4-6-fast",
   bai: "haiku-4-5",
   brave: null,
@@ -3495,28 +3502,26 @@ var FAST_POOL_BY_CARRIER = {
     "gpt-5-4-mini",
     "gemini-3-flash",
     "gemini-3-1-flash",
-    "grok-4-1-fast",
     "deepseek-v4-flash"
   ],
-  // B.AI carries the same brand-spanning fast catalog as OpenRouter ·
-  // identical pool gives a B.AI-only user the same visibly-mixed
-  // director cast (different brand badges per seat) that the OpenRouter
-  // path produces. Members are filtered against reachability inside
-  // `pickRandomFastModel`, so models without a baiId fall out naturally
-  // if B.AI ends up not carrying one of them in practice.
+  // B.AI carries the same brand-spanning fast catalog as OpenRouter
+  // (minus Grok · B.AI dropped xAI 2026-05) · identical pool gives a
+  // B.AI-only user the same visibly-mixed director cast (different
+  // brand badges per seat) that the OpenRouter path produces. Members
+  // are filtered against reachability inside `pickRandomFastModel`, so
+  // models without a baiId fall out naturally if B.AI ends up not
+  // carrying one of them in practice.
   bai: [
-    "opus-4-6-fast",
     "haiku-4-5",
     "gpt-5-4-mini",
     "gemini-3-flash",
     "gemini-3-1-flash",
-    "grok-4-1-fast",
     "deepseek-v4-flash"
   ],
   anthropic: ["opus-4-6-fast", "haiku-4-5"],
   openai: ["gpt-5-4-mini"],
-  google: ["gemini-3-flash", "gemini-3-1-flash"],
-  xai: ["grok-4-1-fast"]
+  google: ["gemini-3-flash", "gemini-3-1-flash"]
+  // xai · no fast pool (no LLM modelV in registry).
 };
 function pickRandomFastModel(carrier) {
   if (!carrier) return null;
@@ -3537,13 +3542,13 @@ var FLAGSHIP_TIER = /* @__PURE__ */ new Set([
   // Google
   "gemini-3-1",
   "gemini-3-flash",
-  // xAI
-  "grok-4-3",
+  // xAI · no flagship in registry currently.
   // DeepSeek
   "deepseek-v4-pro",
-  // Zhipu · Moonshot · single flagship each (both OR + B.AI routed).
+  // Zhipu · Moonshot · MiniMax · single flagship each (B.AI routed).
   "glm-5-1",
-  "kimi-2-6"
+  "kimi-k2-6",
+  "minimax-m2-7"
 ]);
 function effectiveDefaultModel() {
   const prefs = getPrefs();
@@ -3596,17 +3601,15 @@ var CHEAP_BY_CARRIER = {
   anthropic: "sonnet-4-6",
   // only direct-routable Claude
   openai: "gpt-5-4-mini",
-  google: "gemini-3-1-flash",
+  google: "gemini-3-1-flash"
   // 3.1 Flash Lite · cheapest direct-routable Gemini
-  xai: "grok-4-1-fast"
-  // 4.1 Fast · cheapest direct-routable Grok
+  // xai · no cheap tier (no LLM modelV in registry).
 };
 var UTILITY_PREFERENCE = [
   "haiku-4-5",
   "gpt-5-4-mini",
   "gemini-3-1-flash",
-  "gemini-3-flash",
-  "grok-4-1-fast"
+  "gemini-3-flash"
 ];
 function utilityModelFor(fallback = null) {
   const reachable = new Set(reachableModels().map((m) => m.modelV));
@@ -15818,6 +15821,19 @@ function setKeyPointVote(id, vote) {
 function pickRouterModel() {
   return utilityModelFor();
 }
+function authorLabel(m, cast) {
+  if (m.authorKind === "user") return "USER";
+  if (m.authorKind === "system") return "system";
+  if (!m.authorId) return m.authorKind === "agent" ? "director" : m.authorKind;
+  const fromCast = cast?.find((a2) => a2.id === m.authorId);
+  if (fromCast) return `${fromCast.name} (${fromCast.handle})`;
+  const a = getAgent(m.authorId);
+  if (a) {
+    const kindTag = a.roleKind === "moderator" ? "chair" : "director";
+    return `${a.name} (${a.handle}, ${kindTag})`;
+  }
+  return m.authorKind === "agent" ? "director" : m.authorKind;
+}
 var MAX_PICKS = 2;
 async function pickChairClarifyDecision(opts) {
   const prompt = latestUserPrompt(opts.history);
@@ -15895,10 +15911,7 @@ async function pickRoundWrap(opts) {
     if (meta?.kind === "tool-use" || meta?.kind === "tool-preamble") return false;
     if (meta?.kind === "round-open" || meta?.kind === "round-prompt") return false;
     return true;
-  }).map((m) => {
-    const who = m.authorKind === "user" ? "USER" : m.authorId || "agent";
-    return `[${who}] ${m.body.trim().slice(0, 600)}`;
-  }).join("\n\n");
+  }).map((m) => `[${authorLabel(m)}] ${m.body.trim().slice(0, 600)}`).join("\n\n");
   const sys = {
     role: "system",
     content: [
@@ -16002,10 +16015,7 @@ ${extras.join("\n")}` : baseRow;
     if (meta?.kind === "tool-use" || meta?.kind === "tool-preamble") return false;
     if (meta?.kind === "round-open" || meta?.kind === "round-prompt") return false;
     return true;
-  }).map((m) => {
-    const who = m.authorKind === "user" ? "USER" : m.authorId || "agent";
-    return `[${who}] ${m.body.trim().slice(0, 600)}`;
-  }).join("\n\n");
+  }).map((m) => `[${authorLabel(m, candidates)}] ${m.body.trim().slice(0, 600)}`).join("\n\n");
   const decision1Block = mode === "dissent-gap" ? [
     "DECISION 1 \xB7 Next speaker (DISSENT-GAP MODE).",
     "The room is converging on a single frame \u2014 for THIS pick, the chair",
@@ -16067,6 +16077,13 @@ ${extras.join("\n")}` : baseRow;
       "the SPECIFIC pattern + the load-bearing piece worth pinning down.",
       "No greeting, no signature.",
       "",
+      "NAMING \xB7 When `intervention` or `rationale` references a director,",
+      "use their DISPLAY NAME (the part before the parenthesis in the",
+      'roster \u2014 e.g. "Maya", not "fk7wvt1bep62"). The opaque id is for',
+      "the `agent_id` JSON field ONLY; it must NEVER appear inside any",
+      "user-facing prose text. The transcript above labels speakers by",
+      "name already; mirror that format.",
+      "",
       "LANGUAGE \xB7 the chair note must follow the room's DOMINANT",
       "language detected from the recent transcript (most recent",
       "messages weight highest). If most directors and the user are",
@@ -16140,16 +16157,26 @@ ${extras.join("\n")}` : baseRow;
   const obj = parsed;
   const validIds = new Set(candidates.map((c) => c.id));
   const id = typeof obj.agent_id === "string" && validIds.has(obj.agent_id) ? obj.agent_id : null;
-  const rationale = typeof obj.rationale === "string" ? obj.rationale.trim().slice(0, 200) : "";
+  const rationale = typeof obj.rationale === "string" ? replaceLeakedIds(obj.rationale.trim(), candidates).slice(0, 200) : "";
   let intervention = null;
   if (typeof obj.intervention === "string") {
-    const t = obj.intervention.trim();
+    const t = replaceLeakedIds(obj.intervention.trim(), candidates);
     if (t.length > 0 && t.toLowerCase() !== "null" && t.toLowerCase() !== "none") {
       intervention = t.slice(0, 280);
     }
   }
   return { agentId: id, rationale, intervention };
 }
+function replaceLeakedIds(text, candidates) {
+  if (!text) return text;
+  return text.replace(/(?<![A-Za-z0-9])[0-9a-hjkmnpqrstvwxyz]{12}(?![A-Za-z0-9])/g, (id) => {
+    const fromCast = candidates.find((c) => c.id === id);
+    if (fromCast) return fromCast.name;
+    const a = getAgent(id);
+    if (a) return a.name;
+    return id;
+  });
+}
 async function pickChairWebSearch(opts) {
   const prompt = latestUserPrompt(opts.history);
   if (!prompt) return null;
@@ -22775,7 +22802,7 @@ function voicesRouter() {
 init_paths();
 
 // src/version.ts
-var VERSION = "0.1.22";
+var VERSION = "0.1.23";
 
 // src/server.ts
 function createApp() {