toolroll 0.9.103 → 0.9.105

package/dist/canonical-json.js

@@ -1,14 +1,3 @@
-/**
- * Deterministic JSON for digests and equality. These bytes are sealed into approvals and stored digests, so neither
- * function may change its output for any input. The two differ on purpose and must stay distinct:
- *
- * - `canonicalJson` drops object keys whose value is undefined and returns JSON.stringify's own answer for a bare
- *   value (an undefined array element therefore renders as nothing: `[,1]`).
- * - `canonicalJsonUndefinedAsNull` keeps every key and renders an undefined (or otherwise unserializable) value as
- *   `null` — the planner contract's bytes.
- *
- * Both sort object keys by UTF-16 code units and keep arrays in order.
- */
 export function canonicalJson(value) {
     if (Array.isArray(value))
         return `[${value.map(canonicalJson).join(",")}]`;
@@ -21,7 +10,6 @@ export function canonicalJson(value) {
     }
     return JSON.stringify(value);
 }
-/** Stable JSON for hashing and equality only — no filling, no trimming; undefined reads as null. */
 export function canonicalJsonUndefinedAsNull(value) {
     if (Array.isArray(value))
         return `[${value.map(canonicalJsonUndefinedAsNull).join(",")}]`;

package/dist/capscan.js

@@ -1,28 +1,7 @@
-/**
- * Reading what a repository says it needs.
- *
- * Detection walks files the repo itself controls — .env.example, .mcp.json,
- * supabase/config.toml, workflow files — which makes every byte here
- * untrusted input. The rule that keeps that safe: **scanned content never
- * becomes shell code.** A probe is either a fixed template over an
- * identifier that passed a strict validator, or it is absent. A name that
- * fails validation is dropped with a note, not quoted, not escaped, not
- * given the benefit of the doubt — escaping is how injection bugs are
- * born promising to behave.
- *
- * Detection is not authorization, and it is not verification either: every
- * capability found here lands `unprobed`. CI secret references are recorded
- * as `ci` capabilities with no probe — a secret living in GitHub's vault is
- * a fact about CI, not about this machine's environment, and synthesizing
- * a local env probe for it would manufacture a gap that is not real.
- */
 import { readFileSync, readdirSync, existsSync } from "node:fs";
 import { join } from "node:path";
-/** Environment variable names, and nothing that only resembles one. */
 const IDENTIFIER = /^[A-Za-z_][A-Za-z0-9_]*$/;
-/** MCP server labels: package-ish names, no shell metacharacters possible. */
 const LABEL = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
-/** Reading a whole minified bundle to find nothing is not detection. */
 const MAX_BYTES = 256 * 1024;
 export function scanRepo(repo) {
     const found = [];
@@ -35,8 +14,6 @@ export function scanRepo(repo) {
         seen.add(key);
         found.push(one);
     };
-    // .env.example — each key is an env capability, probe from a fixed
-    // template. The identifier validator is what makes the template safe.
     const envExample = readSmall(join(repo, ".env.example"));
     if (envExample !== null) {
         for (const line of envExample.split("\n")) {
@@ -51,9 +28,6 @@ export function scanRepo(repo) {
             keep({ kind: "env", name, probe: `test -n "$${name}"`, source: ".env.example" });
         }
     }
-    // .mcp.json — server names, probe-less: whether a server answers is a
-    // question `mcp initialize` will earn a probe for later; inventing one
-    // now would verify nothing.
     const mcp = readSmall(join(repo, ".mcp.json"));
     if (mcp !== null) {
         try {
@@ -67,11 +41,8 @@ export function scanRepo(repo) {
             }
         }
         catch {
-            // A file that does not parse describes nothing.
         }
     }
-    // supabase/config.toml — its presence means the supabase CLI is part of
-    // this repo's workflow. The probe is a constant; nothing scanned enters it.
     if (existsSync(join(repo, "supabase", "config.toml"))) {
         keep({
             kind: "cli",
@@ -80,8 +51,6 @@ export function scanRepo(repo) {
             source: "supabase/config.toml",
         });
     }
-    // Workflow files — `secrets.NAME` references are ci capabilities, no
-    // probe: they live in GitHub's vault, not this machine's environment.
     const workflows = join(repo, ".github", "workflows");
     if (existsSync(workflows)) {
         for (const file of readdirSync(workflows).filter(name => /\.ya?ml$/.test(name))) {
@@ -91,7 +60,7 @@ export function scanRepo(repo) {
             for (const match of text.matchAll(/secrets\.([A-Za-z0-9_]+)/g)) {
                 const name = match[1];
                 if (name === "GITHUB_TOKEN")
-                    continue; // furnished by the platform, never a gap
+                    continue;
                 if (!IDENTIFIER.test(name)) {
                     rejected.push({ name, source: `.github/workflows/${file}` });
                     continue;

package/dist/card-catalog.js

@@ -1,12 +1,3 @@
-/**
- * What a lead may put on a card (docs/plans/toolroll-cards.md): a json-render spec limited to this catalog.
- *
- * json-render defines the catalog and checks a spec's structure. Its own check lets any props through when a catalog has
- * several components, so each element's props are read here, strictly, against its component. json-render's dynamic
- * features ($state, repeat, visible, on) are refused: a card is data Toolroll fills, not a program.
- *
- * Nothing here can carry a figure or an address. Fields, Table and Chart name a source; Text is the one free field.
- */
 import { defineCatalog, defineSchema, validateSpec } from "@json-render/core";
 import { z } from "zod";
 import { CHAT_CONTROLS } from "./chat-controls.js";
@@ -16,7 +7,6 @@ export const CARD_TASK_STATES = ["queued", "running", "done", "failed", "cancell
 const source = z.enum(CARD_SOURCES);
 const repo = z.string().regex(/^r[0-9]{1,3}$/);
 const pick = z.array(z.string().max(40)).min(1).max(CARD_LIMITS.columns);
-/** What narrows a source: read by the sources, which check each against who is asking. */
 const narrowing = { repo: repo.optional(), task: z.string().max(200).optional(), state: z.enum(CARD_TASK_STATES).optional(), limit: z.int().min(1).max(CARD_LIMITS.rows).optional(), flow: z.int().min(1).optional(), days: z.int().min(1).max(90).optional() };
 const schema = defineSchema(s => ({
     spec: s.object({
@@ -42,7 +32,6 @@ export const CARD_CATALOG = defineCatalog(schema, {
     },
 });
 const issues = (lines) => ({ ok: false, issues: lines });
-/** A spec as a card plan, or every reason it isn't one, in words the lead can fix on its next step. */
 export function readCardSpec(raw) {
     const shape = CARD_CATALOG.validate(raw);
     if (!shape.success)
@@ -127,7 +116,6 @@ export function readCardSpec(raw) {
         refused.push("a card shows data: give it Fields, a Table, Notes or a Chart. For words alone, just reply");
     return refused.length > 0 ? issues(refused) : { ok: true, plan };
 }
-/** The catalog in words, for the lead's tool description: json-render's full prompt describes features a card refuses. */
 export function cardCatalogWords() {
     return Object.entries(CARD_CATALOG.data.components).map(([name, one]) => `${name}: ${one.description}`).join(" ");
 }

package/dist/card-cli.js

@@ -1,4 +1,3 @@
-/** `toolroll card <source>` (docs/plans/toolroll-cards.md): the card chat shows, from the same records, on the command line. */
 import { CARD_SOURCES } from "./card-catalog.js";
 import { cardPlainText } from "./card-render.js";
 import { readCardSource } from "./card-sources.js";

package/dist/card-render.js

@@ -1,20 +1,14 @@
 import { html, joinHtml } from "./html.js";
 const noteLines = (block) => [...block.items.map(one => `• ${one}`), ...(block.more > 0 ? [moreWords(block.more)] : [])];
 const fit = (text, width) => text.length <= width ? text : `${text.slice(0, Math.max(1, width - 1))}…`;
-/** Only parts filled from a named source are Toolroll's records; the line says so only when a card has one, and says
- * which parts, so the lead's own words beside them never borrow that standing. */
 const sourced = (card) => card.blocks.some(one => one.kind !== "text" && one.kind !== "divider");
-/** A part marked as not Toolroll's records: the lead's note, or words an agent reported. */
 const marked = (card) => card.blocks.some(one => one.kind === "text" || ((one.kind === "table" || one.kind === "notes") && one.origin === "report"));
 const asOfWords = (card) => `${marked(card) ? "Parts not marked otherwise are from Toolroll's records" : "From Toolroll's records"} · ${card.asOf.slice(0, 16).replace("T", " ")} UTC`;
 const footWords = (card) => sourced(card) ? [asOfWords(card)] : [];
 const reportWords = "Reported by the agent, not Toolroll's records";
-/** A Text part is the lead's (a model's) words: always labelled as such, on every app, never as a record. */
 export const LEAD_NOTE_WORDS = "The lead's note, not Toolroll's records";
 const moreWords = (more) => `and ${more} more`;
-/** A part's heading, unless it only repeats the card's title. */
 const headOf = (card, heading) => heading === card.title ? [] : [heading];
-/** A table as aligned lines, narrow enough for a phone. */
 function tableLines(block, maxWidth = 58) {
     const widths = block.columns.map((column, at) => Math.max(column.label.length, ...block.rows.map(row => row[at].length)));
     const budget = maxWidth - 2 * (widths.length - 1);
@@ -26,13 +20,11 @@ function tableLines(block, maxWidth = 58) {
     }).join("  ").trimEnd();
     return [line(block.columns.map(one => one.label)), ...block.rows.map(line), ...(block.more > 0 ? [moreWords(block.more)] : [])];
 }
-/** A chart as bars of text: every number stays readable. */
 function chartLines(block) {
     const top = Math.max(...block.points.map(one => one.value), 0);
     const name = Math.min(18, Math.max(...block.points.map(one => one.label.length)));
     return block.points.map(one => `${fit(one.label, name).padEnd(name)} ${"█".repeat(top === 0 ? 0 : Math.round(one.value / top * 14)).padEnd(14)} ${one.shown}`);
 }
-/** The whole card as plain text: the version every app can show. */
 export function cardPlainText(card) {
     const parts = card.blocks.flatMap((block) => {
         switch (block.kind) {
@@ -47,8 +39,6 @@ export function cardPlainText(card) {
     const under = card.actions.length === 0 ? [] : [`Confirm below: ${card.actions.map(one => one.label).join(", ")}`];
     return [card.title, ...parts, ...footWords(card), ...under].join("\n\n");
 }
-// ---- Slack ---------------------------------------------------------------------------------------------------------
-/** In a Slack code block only these need care: nothing inside can become a mention or a link, and it can't close early. */
 const slackCode = (text) => text.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll("`", "'");
 const SLACK_CHART_LABEL = 20;
 const SLACK_CHART_TITLE = 50;
@@ -63,7 +53,6 @@ function slackChart(block) {
     }
     return { type: "data_visualization", title: block.heading, chart: { type: block.chart, series: [{ name: block.heading.slice(0, SLACK_CHART_LABEL), data: block.points.map(({ label, value }) => ({ label, value })) }], axis_config: { categories: block.points.map(one => one.label) } } };
 }
-/** The card as Block Kit, native where Slack has it: one data table and two charts a message, the rest as code blocks. */
 export function slackCardBlocks(card, buttons) {
     const out = [{ type: "header", text: { type: "plain_text", text: fit(card.title, 150), emoji: false } }];
     const code = (lines) => ({ type: "section", text: { type: "mrkdwn", text: `\`\`\`${slackCode(lines.join("\n")).slice(0, 2900)}\`\`\``, verbatim: true } });
@@ -113,9 +102,7 @@ export function slackCardBlocks(card, buttons) {
         out.push({ type: "actions", elements: buttons });
     return out;
 }
-// ---- Discord -------------------------------------------------------------------------------------------------------
 const discordCode = (text) => text.replaceAll("`", "'");
-/** The card as one embed: facts as fields, tables and charts as code blocks. `plain` escapes Discord's own syntax. */
 export function discordCardEmbed(card, plain) {
     const fields = [];
     const text = [];
@@ -136,11 +123,7 @@ export function discordCardEmbed(card, plain) {
     const foot = `${footWords(card).join("")}${under}`.replace(/^ · /, "");
     return { title: plain(card.title).slice(0, 256), ...(text.length === 0 ? {} : { description: text.join("\n\n").slice(0, 4096) }), fields: fields.slice(0, 25), ...(foot === "" ? {} : { footer: { text: foot.slice(0, 2048) } }), color: 0x297b70 };
 }
-// ---- Telegram ------------------------------------------------------------------------------------------------------
-/** The card as one Telegram message: plain words, tables and charts as `pre` entities, so nothing in a value is parsed. */
 export function telegramCardMessage(card) {
-    // A phone can't fit a table's columns side by side, so each row is a short list item. Past Telegram's limit, rows are
-    // cut from the end (counted in "and N more") before falling back to the plain version.
     for (let keep = TELEGRAM_ROWS; keep >= 1; keep = Math.floor(keep / 2)) {
         const message = telegramCardWith(card, block => Math.min(block.rows.length, keep));
         if (message.text.length <= 4000)
@@ -201,7 +184,6 @@ function telegramCardWith(card, rowsFor) {
         add(`Confirm below: ${card.actions.map(one => one.label).join(", ")}`);
     return { text, entities };
 }
-// ---- web chat ------------------------------------------------------------------------------------------------------
 const CHART_COLORS = 6;
 function webChart(block) {
     const top = Math.max(...block.points.map(one => one.value), 0) || 1;
@@ -225,7 +207,6 @@ function webChart(block) {
     return html `<figure class="tc-line"><svg viewBox="0 0 ${width} ${height}" preserveAspectRatio="none" role="img" aria-label="${`${block.heading}. ${summary}`}">${block.chart === "area" ? html `<polygon class="tc-area" points="0,${height} ${line} ${width},${height}"></polygon>` : ""}<polyline class="tc-stroke" points="${line}" fill="none" vector-effect="non-scaling-stroke"></polyline></svg><figcaption>${summary}</figcaption></figure>`;
 }
 const partHead = (card, heading) => joinHtml(headOf(card, heading).map(one => html `<h4>${one}</h4>`));
-/** The card as the web chat's own markup; every value is escaped by `html`. */
 export function webCardHtml(card) {
     const blocks = card.blocks.map(block => {
         switch (block.kind) {
@@ -239,13 +220,7 @@ export function webCardHtml(card) {
     });
     return html `<div class="tc-card">${joinHtml(blocks)}${joinHtml(footWords(card).map(one => html `<p class="tc-note">${one}</p>`))}</div>`;
 }
-/** How many rows of a table a Telegram card shows before "and N more". */
 const TELEGRAM_ROWS = 20;
-/**
- * A table's rows for a phone: each row's first value in full as its name, then its other values on one line ("queued ·
- * standing-orders · 3h ago"; a number keeps its column's label: "Failed attempts 2"). A column with the same value in
- * every shown row is said once above the rows instead ("All: queued · Failed attempts 0").
- */
 export function telegramTableRows(block, keep) {
     const shown = block.rows.slice(0, Math.max(0, keep));
     const more = block.more + block.rows.length - shown.length;

package/dist/card-sources.js

@@ -1,9 +1,3 @@
-/**
- * The named data a card can show (docs/plans/toolroll-cards.md): Toolroll fills these from its own records, with the same
- * reach as the page or lead tool each one mirrors, so a model chooses what to show and never what it says.
- *
- * Every value goes through publicChatText here, once, before it can reach any platform.
- */
 import { basename } from "node:path";
 import { publicChatText } from "./chat-display.js";
 import { CARD_LIMITS } from "./contracts/chat-card.js";
@@ -21,7 +15,6 @@ const ago = (from, now) => {
     return hours < 48 ? `${hours}h` : `${Math.round(hours / 24)}d`;
 };
 const projectName = (repo) => repo === null ? "Toolroll" : clean(basename(repo), 40);
-/** An account limited to some projects sees the instance-wide pages' data no more than the console shows it. */
 const instanceWide = (reader) => reader.store.accountOf(reader.who.name)?.projects === null;
 const INSTANCE_ONLY = { problem: "That needs an account with access to every project, as the page does." };
 const count = (points) => points.filter(([, value]) => value > 0).slice(0, CARD_LIMITS.points).map(([label, value]) => ({ label: clean(label, CARD_LIMITS.label), value, shown: String(value) }));
@@ -93,7 +86,6 @@ function flowZones(reader, query) {
 }
 function spend(reader, query) {
     const { store, now } = reader;
-    // As /spend: an instance operator's page.
     if (!store.isInstanceOperator(reader.who.name))
         return { problem: "Only an instance operator sees spend." };
     const month = monthOf(now), report = spendReport(spendRows(store.handle, month.from, month.to)), limit = query.limit ?? 10;
@@ -184,7 +176,6 @@ function providers(reader, query) {
         points: [],
     };
 }
-/** A finding's state as a person reads it in a card (never the stored token). */
 const FINDING_STATE_WORDS = { open: "With the agent", accepted: "Accepted", rejected: "Rejected", "with-person": "Needs you", closed: "Closed" };
 function findings(reader, query) {
     const limit = query.limit ?? 10;
@@ -226,7 +217,6 @@ function handover(reader, query) {
     };
 }
 const READERS = { tasks, results, flows, flow_zones: flowZones, spend, projects, builders, mode, integrations, providers, findings, handover };
-/** One source, read now as this person. */
 export function readCardSource(reader, name, query) {
     if (query.repo !== null && !reader.who.repos.includes(query.repo))
         return { problem: "That project is outside your access." };

package/dist/chat-acceptance.js

@@ -4,8 +4,6 @@ import { manualReviewOnly } from "./proof.js";
 import { assignmentChecksForRun } from "./assignment.js";
 import { approvedCheckOf, approvedCheckStateOf, checksFactOf } from "./task-status.js";
 export const ACCEPTANCE_PAGE_SIZE = 3;
-/** `check`: the approved check read now (task-status.ts approvedCheckOf); undefined when this read had no saved files,
- * and then a verified result claims nothing about its check. */
 export function acceptanceStatus(proof, accepted, check) {
     if (accepted)
         return manualReviewOnly(proof) ? "Accepted by a person" : "Accepted with an exception";
@@ -55,7 +53,6 @@ export function readAcceptanceEvidence(store, who, root, task, runId, offset = 0
     else if (!proof.ok)
         problems.push("The saved proof is unavailable or cannot be read.");
     const verification = root === undefined ? null : verificationEvidence(store, root, run.id);
-    // The one answer to "did the approved check pass" (task-status.ts), with follow-ups on the same commit.
     const checkNow = root === undefined || run.role === "scout" ? undefined
         : approvedCheckStateOf(approvedCheckOf(recorded?.verdict ?? null, recorded?.reasons ?? [], checksFactOf(assignmentChecksForRun(store, root, run.id, new Date()), run.headRevision)));
     let gate = { status: "No machine verification receipt available" };
@@ -67,8 +64,6 @@ export function readAcceptanceEvidence(store, who, root, task, runId, offset = 0
         const receipt = JSON.parse(verification.bytes);
         gate = { status: receipt.result.ran ? (receipt.result.exitCode === 0 ? checkNow === undefined || checkNow === "passed" ? "Passed" : "Passed when it ran; not counted now" : "Failed") : "Did not run", exitCode: receipt.result.exitCode ?? null, command: "The approved project verification command", logShortened: receipt.log.truncated };
     }
-    // These are summaries for conversation, not substitute approval terms.
-    // Full statements, caveats and references remain on the authenticated screen.
     const brief = (text, cap = 600) => {
         if (text == null)
             return null;
@@ -97,8 +92,6 @@ export function readAcceptanceEvidence(store, who, root, task, runId, offset = 0
             disclosure: "Conversation summary only. Inspect the complete result, its checks and its terms on the result screen before marking it complete.",
         } };
 }
-/** Deterministic outbox text uses the same verified reader as conversational
- * requests. Every criterion is included; long values disclose shortening. */
 export function acceptanceEvidenceText(store, who, root, task, run) {
     const first = readAcceptanceEvidence(store, who, root, task, run);
     if (!first.ok)