toolroll 0.9.103 → 0.9.105

package/dist/code-map-report.d.ts

@@ -1,37 +0,0 @@
-import { type Store } from "./store.js";
-export declare const ENOUGH_FAMILIES = 10;
-export type Arm = "map" | "holdout";
-export type ArmReport = {
-    families: number;
-    notEligible: number;
-    complete: number;
-    stillRunning: number;
-    inWindow: number;
-    deliveredDifferently: number;
-    /** Per complete family; null with no known value. */
-    personRevisions: number | null;
-    firstCheckPassed: {
-        passed: number;
-        known: number;
-    };
-    apiUsd: number | null;
-    subscriptionTokens: number | null;
-    turns: number | null;
-    records: Record<string, number>;
-};
-export type CodeMapReport = {
-    v: 1;
-    repo: string;
-    asOf: string;
-    enrollUntil: string | null;
-    enough: boolean;
-    arms: Record<Arm, ArmReport>;
-};
-export declare function codeMapReport(store: Store, repo: string, now: Date): CodeMapReport;
-/** The rows every surface shows: a label and each arm's value. Below 10 complete families in an arm there is no comparison. */
-export declare function reportRows(report: CodeMapReport): {
-    label: string;
-    map: string;
-    holdout: string;
-}[];
-export declare const NOT_ENOUGH = "Not enough results yet.";

package/dist/code-map-shape.d.ts

@@ -1,172 +0,0 @@
-/**
- * The generated code map's shape and the pure work of making it from a tree and parsed facts (docs/plans/code-map.md §1).
- * No file text is stored: only names, lines, sizes and edges. Every name here came from the repository and is untrusted.
- */
-export declare const CODE_MAP_VERSION = 1;
-export declare const EXTRACTOR_TAG = "map-v1";
-/** On every excerpt, answer and file. `<commit>` is the full commit the map was made from. */
-export declare const codeMapLabel: (commit: string) => string;
-export declare const LIMITS: {
-    readonly treeEntries: 50000;
-    readonly pathBytes: 1024;
-    readonly pathDepth: 32;
-    readonly fileBytes: number;
-    readonly filesRead: 20000;
-    readonly bytesRead: number;
-    readonly symbolsPerFile: 200;
-    readonly symbols: 200000;
-    readonly symbolChars: 200;
-    readonly edges: 300000;
-    readonly storedBytes: number;
-    readonly areas: 400;
-    readonly groupAbove: 40;
-    readonly groupAtLeast: 3;
-    readonly manifestBytes: number;
-    readonly parserOutput: number;
-    readonly parserHeapMb: 768;
-    readonly parserMs: 120000;
-};
-export type Lang = "ts" | "js" | "python" | "go" | "rust" | "java" | "kotlin" | "swift" | "ruby" | "php" | "c" | "cpp" | "csharp" | "shell" | "sql" | "docs" | "config" | "binary" | "other";
-export type FileState = "read" | "path-only" | "too-large" | "parse-error" | "withheld";
-export type MapSymbol = {
-    name: string;
-    kind: string;
-    line: number;
-};
-export type MapFile = {
-    path: string;
-    area: string;
-    kind: "file" | "exec" | "link" | "submodule";
-    bytes: number;
-    lang: Lang;
-    state: FileState;
-    test: string | null;
-    symbols: MapSymbol[];
-};
-export type MapEdge = {
-    from: string;
-    to: string;
-    kind: "imports" | "re-exports" | "dynamic-import";
-    line: number;
-};
-export type MapArea = {
-    id: string;
-    name: string;
-    root: string;
-    package: string;
-    files: number;
-    bytes: number;
-    languages: Partial<Record<Lang, number>>;
-    tests: number;
-    entryPoints: string[];
-};
-export type MapPackage = {
-    root: string;
-    name: string | null;
-    manifest: string | null;
-    entryPoints: string[];
-};
-export type MapCounts = {
-    entries: number;
-    files: number;
-    read: number;
-    pathOnly: number;
-    tooLarge: number;
-    parseErrors: number;
-    withheld: number;
-    links: number;
-    submodules: number;
-    vendored: number;
-};
-export type MapWarning = "symbols-truncated" | "edges-truncated" | "read-limit" | "areas-folded" | "tsconfig-extends" | "tsconfig-unreadable";
-export type CodeMapManifest = {
-    v: 1;
-    label: string;
-    repo: string;
-    commit: string;
-    remote: {
-        urlDigest: string;
-        record: number;
-    };
-    builtAt: string;
-    extractor: string;
-    counts: MapCounts;
-    packages: MapPackage[];
-    areas: MapArea[];
-    files: MapFile[];
-    areaEdges: {
-        from: string;
-        to: string;
-        count: number;
-    }[];
-    external: {
-        area: string;
-        packages: string[];
-    }[];
-    vendored: {
-        path: string;
-        files: number;
-        bytes: number;
-    }[];
-    warnings: MapWarning[];
-};
-export type CodeMapGraph = {
-    edges: MapEdge[];
-};
-export type CodeMap = CodeMapManifest & CodeMapGraph;
-export declare const CODE_FILE: RegExp;
-export declare const isParsedLanguage: (path: string) => boolean;
-/** The vendored or built folder a path sits under, as a path; null when it doesn't. */
-export declare function vendoredRoot(path: string): string | null;
-export declare function languageOf(path: string): Lang;
-/** A name with control characters, bidirectional controls or invalid UTF-8 (read as U+FFFD) is withheld. Secrets are
- * scanned over the whole list at once (`secretLines`). */
-export declare const unsafeName: (name: string) => boolean;
-export type TreeEntry = {
-    path: string;
-    mode: string;
-    bytes: number;
-};
-export type FileFacts = {
-    exports: MapSymbol[];
-    imports: {
-        to: string;
-        kind: MapEdge["kind"];
-        line: number;
-    }[];
-    external: string[];
-    parseFailed: boolean;
-};
-export type BuildInput = {
-    repo: string;
-    commit: string;
-    remote: {
-        urlDigest: string;
-        record: number;
-    };
-    builtAt: string;
-    extractor: string;
-    /** Every tree entry whose name passed, vendored ones included. */
-    entries: readonly TreeEntry[];
-    /** Tree entries in all, withheld ones included. */
-    entryCount: number;
-    withheld: number;
-    /** path → what was parsed; a path missing here wasn't read. */
-    facts: ReadonlyMap<string, FileFacts>;
-    /** path → why a TS/JS file wasn't read. */
-    unread: ReadonlyMap<string, "too-large" | "path-only">;
-    /** package.json files' read values, by path. */
-    manifests: ReadonlyMap<string, {
-        name: string | null;
-        entries: string[];
-    }>;
-    warnings: readonly MapWarning[];
-};
-export declare function buildCodeMap(input: BuildInput): CodeMap;
-/** The bare package a specifier names (`@scope/x/y` → `@scope/x`); null for a relative, absolute, built-in or `#` one. */
-export declare function externalPackage(specifier: string): string | null;
-/** package.json's string `main`, `module`, `bin` and `exports` values; everything else is ignored. */
-export declare function manifestEntries(text: string): {
-    name: string | null;
-    entries: string[];
-} | null;

package/dist/code-map-store.d.ts

@@ -1,136 +0,0 @@
-import { type Store } from "./store.js";
-import type { CodeMap } from "./code-map-shape.js";
-import type { SpawnRecord } from "./bounded-spawn.js";
-export declare const V152_SCHEMA = "\nCREATE TABLE IF NOT EXISTS code_map_version (\n  id INTEGER PRIMARY KEY, repo TEXT NOT NULL, remote_digest TEXT NOT NULL, remote_record INTEGER NOT NULL, commit_sha TEXT NOT NULL,\n  extractor TEXT NOT NULL, built_at TEXT NOT NULL, manifest BLOB NOT NULL, manifest_sha TEXT NOT NULL, graph BLOB NOT NULL, graph_sha TEXT NOT NULL, report TEXT NOT NULL\n);\nCREATE INDEX IF NOT EXISTS code_map_version_repo ON code_map_version (repo, id);\nCREATE TABLE IF NOT EXISTS code_map_current (repo TEXT PRIMARY KEY, version INTEGER NOT NULL REFERENCES code_map_version(id));\nCREATE TABLE IF NOT EXISTS code_map_refresh (\n  repo TEXT PRIMARY KEY, lease_token INTEGER NOT NULL DEFAULT 0, lease_owner TEXT, lease_until TEXT,\n  request_id INTEGER NOT NULL DEFAULT 0, requested_at TEXT, requested_by TEXT,\n  failures INTEGER NOT NULL DEFAULT 0, retry_after TEXT, last_error TEXT, last_checked_at TEXT,\n  seen_digest TEXT, seen_record INTEGER, seen_commit TEXT, seen_extractor TEXT, seen_state TEXT,\n  spawn_pid INTEGER, spawn_pgid INTEGER, spawn_started TEXT, spawn_folder TEXT, enforced TEXT, proxy TEXT\n);\nCREATE TABLE IF NOT EXISTS code_map_family (\n  root_task TEXT PRIMARY KEY, repo TEXT NOT NULL, arm TEXT NOT NULL CHECK (arm IN ('map','holdout')), enrolled_at TEXT NOT NULL, observe_until TEXT NOT NULL\n);\nCREATE INDEX IF NOT EXISTS code_map_family_repo ON code_map_family (repo);\nCREATE TABLE IF NOT EXISTS code_map_snapshot (\n  run INTEGER PRIMARY KEY, state TEXT NOT NULL CHECK (state IN ('map','off','none','remote-changed','holdout','unavailable')),\n  version INTEGER, excerpt TEXT NOT NULL, excerpt_sha TEXT NOT NULL, file_selected INTEGER NOT NULL CHECK (file_selected IN (0,1))\n);\nCREATE INDEX IF NOT EXISTS code_map_snapshot_version ON code_map_snapshot (version);\nCREATE TABLE IF NOT EXISTS code_map_delivery (\n  id INTEGER PRIMARY KEY, run INTEGER NOT NULL, attempt INTEGER NOT NULL, at TEXT NOT NULL,\n  outcome TEXT NOT NULL CHECK (outcome IN ('delivered','not-delivered')),\n  reason TEXT CHECK (reason IS NULL OR reason IN ('no-confinement','write-failed','sha-mismatch','version-pruned','not-selected')), path_sha TEXT,\n  UNIQUE (run, attempt)\n);\nCREATE TABLE IF NOT EXISTS code_map_meta (id INTEGER PRIMARY KEY CHECK (id = 1), run_watermark INTEGER NOT NULL);\nCREATE TRIGGER IF NOT EXISTS code_map_version_no_update BEFORE UPDATE ON code_map_version BEGIN SELECT RAISE(ABORT,'a code map version is immutable'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_version_guarded_delete BEFORE DELETE ON code_map_version\nWHEN EXISTS (SELECT 1 FROM code_map_current WHERE version = OLD.id)\n  OR EXISTS (SELECT 1 FROM code_map_snapshot s JOIN run r ON r.id = s.run WHERE s.version = OLD.id AND r.outcome IS NULL)\nBEGIN SELECT RAISE(ABORT,'a code map version in use stays'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_family_no_update BEFORE UPDATE ON code_map_family BEGIN SELECT RAISE(ABORT,'a family arm is frozen'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_family_no_delete BEFORE DELETE ON code_map_family BEGIN SELECT RAISE(ABORT,'a family arm is frozen'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_snapshot_no_update BEFORE UPDATE ON code_map_snapshot BEGIN SELECT RAISE(ABORT,'a code map snapshot is immutable'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_snapshot_no_delete BEFORE DELETE ON code_map_snapshot BEGIN SELECT RAISE(ABORT,'a code map snapshot is immutable'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_delivery_no_update BEFORE UPDATE ON code_map_delivery BEGIN SELECT RAISE(ABORT,'a code map delivery is immutable'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_delivery_no_delete BEFORE DELETE ON code_map_delivery BEGIN SELECT RAISE(ABORT,'a code map delivery is immutable'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_meta_no_update BEFORE UPDATE ON code_map_meta BEGIN SELECT RAISE(ABORT,'the watermark is set once'); END;\nCREATE TRIGGER IF NOT EXISTS code_map_meta_no_delete BEFORE DELETE ON code_map_meta BEGIN SELECT RAISE(ABORT,'the watermark is set once'); END;\n";
-/** The tables and triggers V152_SCHEMA makes, for the startup check and the tests. */
-export declare const V152_TABLES: readonly ["code_map_version", "code_map_current", "code_map_refresh", "code_map_family", "code_map_snapshot", "code_map_delivery", "code_map_meta"];
-export declare const V152_TRIGGERS: readonly ["code_map_version_no_update", "code_map_version_guarded_delete", "code_map_family_no_update", "code_map_family_no_delete", "code_map_snapshot_no_update", "code_map_snapshot_no_delete", "code_map_delivery_no_update", "code_map_delivery_no_delete", "code_map_meta_no_update", "code_map_meta_no_delete"];
-/** v152: a saved project reads the map on, with no enrollment yet. */
-export declare const V152_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record<string, {
-    definition: string;
-    saved: string;
-}>>>>;
-export declare const digestOfUrl: (url: string) => string;
-export declare const CODE_MAP_ACT = "code map check";
-export type Identity = {
-    url: string;
-    record: number;
-};
-export declare function codeMapOn(store: Store, repo: string): boolean;
-export type Refresh = {
-    repo: string;
-    leaseToken: number;
-    leaseOwner: string | null;
-    leaseUntil: string | null;
-    requestId: number;
-    requestedAt: string | null;
-    requestedBy: string | null;
-    failures: number;
-    retryAfter: string | null;
-    lastError: string | null;
-    lastCheckedAt: string | null;
-    seen: {
-        digest: string | null;
-        record: number | null;
-        commit: string | null;
-        extractor: string | null;
-        state: string | null;
-    };
-    spawn: SpawnRecord;
-    enforced: string | null;
-    proxy: string | null;
-};
-export declare function readRefresh(store: Store, repo: string): Refresh | null;
-export declare const LEASE_MS: number;
-export type Lease = {
-    repo: string;
-    token: number;
-    owner: string;
-    requestId: number;
-    previous: SpawnRecord;
-};
-/** Take the lease in one statement. A takeover always gets a higher token; null when it is held. */
-export declare function takeLease(store: Store, repo: string, owner: string, now: Date): Lease | null;
-export declare const extendLease: (store: Store, lease: Lease, now: Date) => boolean;
-export declare const releaseLease: (store: Store, lease: Lease) => boolean;
-export declare const clearOldSpawn: (store: Store, lease: Lease) => boolean;
-export declare const recordFolder: (store: Store, lease: Lease, folder: string) => boolean;
-export declare const recordSpawn: (store: Store, lease: Lease, spawn: {
-    pid: number;
-    pgid: number;
-    startedAt: string | null;
-}) => boolean;
-/** Clear the request this lease saw, and only that one: a request made during the build stays queued. */
-export declare const clearRequest: (store: Store, lease: Lease) => boolean;
-export type CheckFacts = {
-    digest: string | null;
-    record: number | null;
-    commit: string | null;
-    extractor: string | null;
-    state: string;
-    enforced?: string | null;
-    proxy?: string | null;
-};
-/** A finished check that found nothing wrong: failures reset. */
-export declare const recordCheck: (store: Store, lease: Lease, facts: CheckFacts, now: Date) => boolean;
-/** What the peek saw, kept even if the build then fails: the page's "Main has moved to …". */
-export declare const recordPeek: (store: Store, lease: Lease, commit: string) => boolean;
-export declare const BACKOFF_MS: readonly [number, number, number];
-/** A failed check: 30 minutes, then 2 hours, then 6 hours. */
-export declare function recordFailure(store: Store, lease: Lease, why: string, state: string, now: Date): boolean;
-export declare const REQUEST_GAP_MS: number;
-/** Queue a manual check: at most one per project per 10 minutes. It never bypasses back-off. */
-export declare function requestRefresh(store: Store, repo: string, by: string, now: Date): "queued" | "already-queued";
-/** The remote-change transaction's part: the pointer clears and a build still running for the old remote is fenced out.
- * Called from store.recordProjectRemote, inside the transaction that records the new remote. */
-export declare function codeMapRemoteChanged(store: Store, repo: string): void;
-export type VersionRow = {
-    id: number;
-    repo: string;
-    remoteDigest: string;
-    remoteRecord: number;
-    commit: string;
-    extractor: string;
-    builtAt: string;
-    report: string;
-};
-export declare function currentVersion(store: Store, repo: string): VersionRow | null;
-export declare function versionRow(store: Store, id: number): VersionRow | null;
-/** The stored bytes, checked against their digests before they are parsed; null when they don't verify. */
-export declare function readVersionMap(store: Store, id: number): CodeMap | null;
-export type Encoded = {
-    manifest: Buffer;
-    manifestSha: string;
-    graph: Buffer;
-    graphSha: string;
-    bytes: number;
-};
-export declare function encodeMap(map: CodeMap): Encoded;
-export type PublishOutcome = {
-    version: number;
-    current: boolean;
-    why: "published" | "remote-changed" | "off" | "lease-lost" | "pointer-moved";
-};
-/**
- * Store a built version and, in the same transaction, make it current only if the identity captured before the fetch
- * still stands, the map is still on, the build still holds its lease, and the pointer is where it found it. A build that
- * lost its lease stores nothing at all.
- */
-export declare function publishVersion(store: Store, lease: Lease, input: {
-    map: CodeMap;
-    encoded: Encoded;
-    identity: Identity;
-    startedFrom: number | null;
-    report: string;
-}, now: Date): PublishOutcome | null;
-/** Keep the current version, the 10 before it and any named by an unfinished run. */
-export declare function tidyVersions(store: Store, repo: string): number;
-/** A project removed from the lists: its map rows go with it, except what stays with its runs (snapshots, deliveries,
- * family arms) and any version an unfinished run still names. */
-export declare function forgetCodeMap(store: Store, repo: string): void;
-/** The startup check: a store at this version holds every table and trigger, or its map can't be trusted. */
-export declare function codeMapShapeProblem(db: {
-    prepare(sql: string): {
-        get(...args: string[]): unknown;
-    };
-}): string | null;

package/dist/codex-limits.d.ts

@@ -1,15 +0,0 @@
-import { type LimitReading } from "./provider-limits.js";
-import type { Store } from "./store.js";
-/** Ask Codex for its limits: its app server over stdio, in its own process group and a scratch folder, one read,
- * then gone (killed if it lingers). Resolves once the process has ended; null when Codex isn't installed or doesn't
- * answer in time. A key account has no windows but says so (`billing`). */
-export declare function readCodexLimits(options?: {
-    command?: string;
-    timeoutMs?: number;
-    graceMs?: number;
-}): Promise<LimitReading | null>;
-/** The loop beside the console: Codex's limits and account every five minutes while Toolroll runs Codex on its
- * plan. Never in tests, the demo, or the end-to-end harness (which runs with the person's own sign-in), and never while
- * a Codex build is running (both would refresh the same sign-in). One read at a time: the next waits for the last
- * process to end. */
-export declare function startCodexLimits(store: Store, everyMs?: number): () => void;

package/dist/coding-context.d.ts

@@ -1,18 +0,0 @@
-import type { Store } from './store.js';
-import { type CodingContext } from './contracts/coding-context.js';
-export type { CodingContext, CodingContextMetadata } from './contracts/coding-context.js';
-/**
- * Call before thread/start with the canonical project and the exact worktree
- * base. Persist the returned object with the coding session and reuse it on
- * resume; calling this again intentionally selects a new context version.
- * root is a coordinator-owned directory outside repository worktrees.
- */
-export declare function prepareCodingContext(store: Store, args: {
-    repo: string;
-    actor: string;
-    baseRevision: string;
-    prompt: string;
-    root: string;
-}): CodingContext;
-/** Integrity check for a persisted capture. The caller must separately recheck current account access. */
-export declare function verifyCodingContext(context: CodingContext, repo: string, baseRevision: string): void;

package/dist/coding-handoff.d.ts

@@ -1,39 +0,0 @@
-import { type CodingHandoffReceipt } from './contracts/coding-handoff.js';
-import type { Store } from './store.js';
-export type { CodingHandoffReceipt } from './contracts/coding-handoff.js';
-export type CodingHandoffPreview = Pick<CodingHandoffReceipt, 'sessionId' | 'repo' | 'base' | 'candidate' | 'title' | 'originalPrompt' | 'changedPaths'>;
-export type CodingHandoffInput = {
-    sessionId: string;
-    repo: string;
-    base: string;
-    candidate: string;
-    title: string;
-    goal: string;
-    acceptance: unknown;
-    actor: string;
-};
-type Handoff = {
-    taskId: string;
-    scopeDigest: string;
-    receipt: CodingHandoffReceipt;
-};
-export declare function branchHead(repo: string, branch: string): string | null;
-export declare function codingHandoffPreview(store: Store, input: {
-    sessionId: string;
-    actor: string;
-}): CodingHandoffPreview;
-/** The saved bytes are verified before they are parsed; identity and branch are checked on the parsed terms. */
-export declare function parseReceipt(row: Record<string, unknown>): CodingHandoffReceipt;
-export declare function sealPayload(receipt: CodingHandoffReceipt, scopeDigest: string): string;
-/** Returns null only for ordinary tasks. A coding marker always requires its receipt. */
-export declare function readCodingHandoff(store: Store, taskId: string): Handoff | null;
-/** No agent dispatch, approval, push, or modification of an existing Git ref. */
-export declare function createCodingHandoff(store: Store, input: CodingHandoffInput): Handoff;
-/** Called before setup and immediately before recording the attempt's base. */
-export declare function verifyCodingHandoffBase(store: Store, input: {
-    taskId: string;
-    taskRef: number;
-    repo: string;
-    branch: string;
-    head: string;
-}): void;

package/dist/coding-provider.d.ts

@@ -1,88 +0,0 @@
-import type { CodingPermissions } from "./coding-workspace.js";
-import type { Store } from "./store.js";
-import { type ProcessObservationFailure } from "./process-tree.js";
-/** Read-only recovery witnesses, never authority to signal historical PIDs.
- * macOS ancestry is observational; a missed/failed observation stays fenced.
- */
-export type CodingCustody = {
-    pid: number | null;
-    group: boolean;
-    descendants: {
-        pid: number;
-        group: boolean;
-    }[];
-    observationUnknown: boolean;
-    observationFailures?: ProcessObservationFailure[];
-    host: string;
-    bootId: string | null;
-    /** v150: this machine's stable id (machine-identity.ts); absent in custody saved before it. */
-    machineId?: string | null;
-    container?: {
-        backend: string;
-        id: string;
-        identity?: string;
-    };
-};
-export type CodingProviderEvent = {
-    kind: "notification";
-    method: string;
-    params: Record<string, unknown>;
-} | {
-    kind: "request";
-    id: string | number;
-    method: string;
-    params: Record<string, unknown>;
-} | {
-    kind: "custody";
-    custody: CodingCustody;
-} | {
-    kind: "exit";
-    message: string;
-};
-export interface CodingProvider {
-    request(method: string, params: Record<string, unknown>): Promise<unknown>;
-    respond(id: string | number, result: unknown): void;
-    reject(id: string | number, code: number, message: string): void;
-    subscribe(listener: (event: CodingProviderEvent) => void): () => void;
-    /** Retain this witness after disconnect. It is not permission to signal a saved PID. */
-    processId(): number | null;
-    custody(): CodingCustody;
-    /** Resolves only after exit is verified; a rejection must keep session custody fenced. */
-    close(): Promise<void>;
-}
-/** A response from the server, distinct from an ambiguous transport failure. */
-export declare class CodingProviderRequestError extends Error {
-    readonly code: number;
-    readonly data?: unknown;
-    readonly outcomeUnknown = false;
-    constructor(code: number, message: string, data?: unknown);
-}
-export declare class CodingProviderDisconnectedError extends Error {
-    readonly outcomeUnknown = true;
-    constructor(message?: string);
-}
-export declare class CodingProviderShutdownError extends Error {
-    constructor();
-}
-export declare function codingEnvironment(): NodeJS.ProcessEnv;
-/** Native app-server JSONL transport. It keeps Codex's normal config, tools and
- * approval rules. There are no request/turn deadlines or automatic retries.
- * Protocol: https://learn.chatgpt.com/docs/app-server (installed CLI schema).
- */
-export declare function createCodexCodingProvider(options?: {
-    cwd?: string;
-    command?: string;
-    args?: string[];
-}): CodingProvider;
-/**
- * An interactive Codex session's confinement (docs/plans/sandbox-parity.md C3): the permission profile a Codex build
- * gets (agent-fence.ts codexFenceConfig), as the thread's config overrides: Toolroll's state, every other launch's
- * folder and every other checkout in the plane's pools and the coding sessions' own pool denied, the session's own
- * worktree given back; Codex's workspace writes; no network (Codex's command sandbox can't route through a proxy, and
- * sessions have never had one). The worktree is bound to its project by the plane's own records first; anything that
- * doesn't prove refuses the session.
- */
-export declare function codingSessionPermissions(store: Pick<Store, "databaseFile" | "listWorktrees" | "projectSandbox">, worktreeRoot: string): (input: {
-    repo: string;
-    worktree: string;
-}) => Promise<CodingPermissions>;

package/dist/coding-shipping-ui.d.ts

@@ -1,5 +0,0 @@
-import type { CodingHandoffPreview } from './coding-handoff.js';
-import { type Html } from './html.js';
-/** A reviewable handoff. The next screen retains the existing approval terms. */
-export declare function codingShippingHtml(preview: CodingHandoffPreview, values?: URLSearchParams, error?: string): Html;
-export declare const CODING_SHIPPING_CSS = ".coding-workspace.coding-handoff{display:block;max-width:780px}.coding-handoff h1{margin-bottom:12px}.coding-handoff>p{margin-top:12px}.coding-workspace .coding-check{display:flex;align-items:center;gap:10px;min-height:44px}.coding-workspace .coding-check input{width:20px;height:20px;flex:0 0 20px}";

package/dist/coding-types.d.ts

@@ -1,16 +0,0 @@
-export type { CodingSession, CodingStatus } from './contracts/coding-workspace.js';
-import type { CodingSession } from './contracts/coding-workspace.js';
-export type { CodingItem, CodingQuestion, CodingRequest } from './contracts/coding-activity.js';
-import type { CodingItem, CodingRequest } from './contracts/coding-activity.js';
-export type CodingSnapshot = {
-    session: CodingSession;
-    items: CodingItem[];
-    requests: CodingRequest[];
-    revision: number;
-};
-export type CodingChanges = {
-    head: string;
-    status: string;
-    diff: string;
-    truncated: boolean;
-};

package/dist/coding-ui.d.ts

@@ -1,19 +0,0 @@
-import type { CodingSession, CodingSnapshot } from './coding-types.js';
-import { type Html } from './html.js';
-export declare function codingWorkspaceHtml(input: {
-    projects: {
-        path: string;
-        name: string;
-    }[];
-    sessions: CodingSession[];
-    selected: CodingSnapshot | null;
-    /** The page script posts with it (data-coding-csrf); the forms get theirs from postForm. */
-    csrf: string;
-    project: string | null;
-    error?: string;
-    draft?: string;
-    available: boolean;
-    owner?: string;
-}): Html;
-export declare const CODING_CSS = "\n.coding-workspace{display:grid;grid-template-columns:224px minmax(0,1fr);gap:24px;max-width:1220px;min-width:0;margin:0 auto;overflow-wrap:anywhere}\n.coding-workspace *{box-sizing:border-box}.coding-workspace [hidden]{display:none!important}.coding-workspace h1{font-size:1.45rem;line-height:1.25;margin:0}.coding-workspace h2{font-size:1rem;margin:0}.coding-workspace h3{font-size:1rem;margin:0 0 12px}.coding-workspace p{margin:0 0 12px}.coding-main,.coding-sidebar{min-width:0}.coding-meta,.coding-workspace small{font-size:.83rem;color:var(--muted-foreground,#747981)}\n.coding-sidebar-top,.coding-header,.coding-state-row,.coding-actions{display:flex;align-items:center;gap:12px;justify-content:space-between}.coding-sidebar-top{margin-bottom:12px}.coding-header{align-items:flex-start;margin-bottom:16px}.coding-header .coding-meta{margin:6px 0 0}.coding-session-detail{max-width:220px}.coding-session-detail summary{font-size:.82rem}.coding-session-detail dl{font-size:.82rem}.coding-session-detail dt{font-weight:600;margin-top:8px}.coding-session-detail dd{margin:2px 0 0}.coding-state-row{flex-wrap:wrap;padding:10px 0;border-bottom:1px solid var(--border,#353940);margin-bottom:12px}.coding-state-row p{margin:0;font-weight:600}.coding-state-row form{margin:0}\n.coding-session-list{max-height:74vh;overflow:auto}.coding-sidebar ul{list-style:none;margin:0;padding:0;display:grid;gap:4px}.coding-sidebar nav a{display:block;padding:12px;border-radius:10px;text-decoration:none;color:inherit}.coding-sidebar nav a:hover,.coding-sidebar nav a[aria-current]{background:var(--muted,#22252a)}.coding-sidebar nav a[aria-current]{box-shadow:inset 3px 0 var(--primary,#90bfa7)}.coding-sidebar nav span,.coding-sidebar nav small{display:block}.coding-sidebar nav [data-coding-status-for]{display:inline}.coding-sidebar nav small{margin-top:5px}.coding-mobile-sessions{display:none}\n.coding-workspace form:not(.coding-state-row form){display:grid;gap:12px;margin:0}.coding-workspace label{display:grid;gap:6px;font-size:.9rem;font-weight:500}.coding-workspace input,.coding-workspace textarea,.coding-workspace select{width:100%;min-width:0;max-width:100%;font-size:16px;border:1px solid var(--border,#353940);border-radius:8px;padding:11px 12px;background:var(--background,#14161a);color:var(--foreground,#f0f1f3)}.coding-workspace textarea{resize:vertical;line-height:1.5}.coding-workspace input:focus-visible,.coding-workspace textarea:focus-visible,.coding-workspace select:focus-visible,.coding-workspace button:focus-visible,.coding-workspace summary:focus-visible,.coding-workspace a:focus-visible{outline:2px solid var(--ring,#79acff);outline-offset:3px}.coding-workspace button,.coding-link-button{min-height:44px;padding:10px 15px;white-space:nowrap;border-radius:8px;max-width:100%;font-size:.9rem}.coding-workspace button{justify-self:start;cursor:pointer}.coding-workspace button:disabled{cursor:default;opacity:.55}.coding-workspace .coding-secondary{background:transparent;color:inherit;border:1px solid var(--border,#353940)}.coding-link-button{display:inline-flex;align-items:center;justify-content:center;text-decoration:none;color:inherit;border:1px solid var(--border,#353940)}.coding-workspace summary{cursor:pointer;min-height:44px;padding:12px 0}.coding-actions{justify-content:flex-start;flex-wrap:wrap}.coding-start{max-width:680px}.coding-options label+label{margin-top:12px}.coding-terms{font-size:.9rem;line-height:1.6;margin:0!important}.coding-empty{padding:28px 0}\n.coding-notice{border:1px solid var(--destructive,#bd7674);border-radius:10px;padding:12px;line-height:1.5;margin-bottom:16px}.coding-conversation{max-height:min(58vh,640px);min-height:140px;overflow:auto;overscroll-behavior:contain;scrollbar-gutter:stable;padding:4px 10px 12px 0}.coding-message{padding:14px 0}.coding-message strong{display:block;font-size:.78rem;margin-bottom:7px;color:var(--muted-foreground,#747981)}.coding-user{margin:8px 0 8px 32px;padding:14px 16px;border-radius:12px;background:var(--muted,#22252a)}.coding-text{white-space:pre-wrap;line-height:1.6;overflow-wrap:anywhere}.coding-tool{border-bottom:1px solid var(--border,#353940);font-size:.88rem}.coding-workspace pre{white-space:pre-wrap;overflow-wrap:anywhere;max-width:100%;font-size:.8rem;line-height:1.5;margin:0 0 12px}.coding-tool summary{display:list-item}.coding-tool summary span{margin-left:6px}.coding-composer{border-top:1px solid var(--border,#353940);padding-top:14px;margin-top:8px!important}.coding-composer label{font-size:.83rem}.coding-request{border:1px solid var(--border,#353940);border-radius:12px;padding:16px;margin:12px 0}.coding-permission-detail{max-height:240px;overflow:auto}.coding-changes{margin-top:20px;border-top:1px solid var(--border,#353940)}.coding-changes pre{max-height:min(50dvh,480px);overflow:auto}.coding-change-meta{font-size:.8rem}.coding-workspace #coding-latest{margin:8px 0}.coding-workspace #coding-connection{line-height:1.4}\n.coding-workspace .coding-start>button[type=\"submit\"],.coding-workspace .coding-composer button[type=\"submit\"]{background:var(--primary,#171717);color:var(--primary-foreground,#fff);border:1px solid var(--primary,#171717);font-weight:600;box-shadow:none}.coding-workspace .coding-start>button[type=\"submit\"]:not(:disabled):hover,.coding-workspace .coding-composer button[type=\"submit\"]:not(:disabled):hover{filter:brightness(.9)}\n.coding-workspace:not([data-coding-session=\"\"]) .coding-main{display:flex;flex-direction:column;min-height:calc(100dvh - 180px)}.coding-main>.coding-header,.coding-main>.coding-state-row,.coding-main>#coding-requests,.coding-main>.coding-composer,.coding-main>.coding-changes,.coding-main>.coding-notice,.coding-main>#coding-connection{flex-shrink:0}.coding-workspace:not([data-coding-session=\"\"]) .coding-conversation{flex:1 1 120px;min-height:100px;max-height:min(58dvh,640px)}.coding-workspace .coding-tool{margin:4px 0;padding:0 10px;border-radius:8px}.coding-workspace .coding-session-detail{margin:0;padding:0 10px;flex-shrink:0}.coding-workspace .coding-changes{padding:0 12px;margin-top:12px}.coding-text strong{display:inline;font-size:inherit;color:inherit;margin:0;font-weight:600}.coding-composer textarea{min-height:72px;max-height:180px}\n@media(max-width:760px){.coding-workspace{grid-template-columns:minmax(0,1fr);gap:16px}.coding-sidebar{border-bottom:1px solid var(--border,#353940);padding-bottom:12px}.coding-sidebar-top h2,.coding-session-list{display:none}.coding-sidebar-top{float:right;margin:0 0 8px 12px}.coding-mobile-sessions{display:block;max-width:100%;margin:0}.coding-mobile-sessions>nav{max-height:260px;overflow:auto;clear:both}.coding-mobile-sessions>summary{min-height:44px}.coding-header{display:block}.coding-session-detail{max-width:none;margin-top:4px}.coding-session-detail summary{padding:10px 0}.coding-conversation{max-height:52vh;min-height:100px;padding-right:4px}.coding-user{margin-left:16px}.coding-workspace h1{font-size:1.25rem}.coding-workspace button,.coding-link-button{padding:10px 12px}.coding-start{max-width:none}}\n@media(max-width:760px){.coding-workspace:not([data-coding-session=\"\"]) .coding-main{min-height:calc(100dvh - 245px - env(safe-area-inset-bottom,0px))}.coding-workspace:not([data-coding-session=\"\"]) .coding-conversation{min-height:80px}.coding-header{display:flex;gap:12px}.coding-header>div{min-width:0;flex:1}.coding-header:has(.coding-session-detail[open]){flex-wrap:wrap}.coding-workspace .coding-session-detail{max-width:100px}.coding-workspace .coding-session-detail[open]{max-width:100%;flex-basis:100%}.coding-session-detail summary{white-space:nowrap}.coding-workspace .coding-mobile-sessions{padding:0 12px}.coding-composer{gap:8px!important}.coding-composer textarea{height:72px}.coding-state-row{padding:8px 0;margin-bottom:8px}}\n@media(prefers-reduced-motion:reduce){.coding-workspace *{scroll-behavior:auto!important}}\n";
-export declare function codingWorkspaceScript(): string;

package/dist/coding-update.d.ts

@@ -1,28 +0,0 @@
-import type { Database } from './store.js';
-export declare function codingCatalogPath(orders: Database): string | null;
-export declare function codingCatalogExists(file: string): boolean;
-export declare function installCodingUpdateGate(orders: Database, id: string): void;
-export declare function removeCodingUpdateGate(orders: Database, id: string): void;
-export declare function activeCodingUpdateWork(orders: Database): {
-    coding: number;
-    codingDeliveries: number;
-};
-/** An idle provider may remain loaded during drain. The normal server stop
- * must close it and establish native/tool exit before either app swap. */
-export declare function assertCodingUpdateStopped(orders: Database): void;
-/** What a stale owner record named when an updater released it, for its ledger. */
-export type ReleasedCodingOwner = {
-    pid: number;
-    nativePid: number | null;
-};
-/** A runtime killed before its close (deploys over 0.9.11, Oct 2) leaves the
- * owner record naming a dead process, and every later swap refuses. Only an
- * updater that has itself proved each process of the stopped service gone may
- * release it here, and only while nothing the catalog records still lives:
- * the agent, its tools, a session or an unconfirmed message. Returns what it
- * released, or null when the record was already released by an ordinary stop;
- * anything unproven keeps the ordinary refusal. */
-export declare function releaseStaleCodingOwner(orders: Database, stoppedPids: readonly number[], alive?: (pid: number, group: boolean) => boolean): ReleasedCodingOwner | null;
-/** Back up through SQLite so committed WAL records are included. This is a
- * retained recovery artifact; updates never restore the live catalog. */
-export declare function backupCodingCatalog(sourceFile: string, target: string, updateId: string): Promise<void>;