toolroll 0.9.103 → 0.9.105

package/dist/converse.d.ts

@@ -1,316 +0,0 @@
-/**
- * The converse engine (fleet chat v3) — a DIRECT no-tool API call.
- *
- * Chat never spawns a provider CLI: the boundary that matters (no tools,
- * no filesystem, no inherited instructions, no hooks) is established by
- * constructing the HTTP request ourselves and sending no tool surface at
- * all. Zero dependencies — Node's fetch.
- *
- * Two-layer parsing, per the Codex v3 review (change 2): the PROVIDER
- * WRAPPER (Anthropic / OpenRouter response JSON) is stream-capped,
- * fatally UTF-8 decoded, and strictly parsed first — status, content
- * type, exactly one textual assistant block, usage present, tool calls
- * rejected. Only then is the extracted assistant text parsed AGAIN,
- * independently, as the versioned chat envelope with model-only DTOs.
- * Any violation at either layer yields a typed refusal and NO model text
- * reaches a page (transport failures render a static line only).
- *
- * Money, per change 4: prices are PINNED here, versioned, in integer
- * micro-dollars per token, rounded up. A model without a pinned price
- * cannot be spoken to — the reservation math would be fiction.
- */
-import { type AcceptanceCriterion } from "./scope.js";
-import type { ChatProviderId, DirectChatProviderId, SubscriptionChatProviderId } from "./store.js";
-export declare const WRAPPER_CAP_BYTES = 262144;
-export declare const ENVELOPE_CAP_BYTES = 65536;
-export declare const REPLY_CAP_BYTES = 32768;
-export declare const MAX_PROPOSALS = 3;
-export declare const MAX_DEPTH = 6;
-export declare const MAX_OUTPUT_TOKENS = 2048;
-export declare const TURN_WALL_CLOCK_MS = 120000;
-export declare const PRICE_VERSION = 1;
-export declare function priceOf(model: string): {
-    inMicrousd: number;
-    outMicrousd: number;
-} | null;
-/** For the config error message: what CAN be configured today. */
-export declare const PRICED_MODELS: readonly string[];
-export type ModelPrice = {
-    inMicrousd: number;
-    outMicrousd: number;
-};
-export type CatalogModel = {
-    id: string;
-    price: ModelPrice;
-};
-/**
- * OpenRouter's own model catalog — the authority on what OpenRouter
- * bills, read live so every selectable model arrives WITH the price the
- * config will pin. Models with dynamic or unparseable pricing (the auto
- * router advertises -1) are excluded rather than guessed: spend that
- * cannot be bounded up front cannot be reserved, so it cannot run.
- */
-export declare function fetchOpenRouterCatalog(key: string, fetcher?: typeof fetch, signal?: AbortSignal): Promise<{
-    ok: true;
-    models: CatalogModel[];
-} | {
-    ok: false;
-    problem: string;
-}>;
-/** The price a configured chat actually runs on: the pin when present,
- * the compiled table for pre-v13b rows, nothing otherwise. */
-export declare function priceForConfig(config: {
-    model: string;
-    priceInMicrousd: number | null;
-    priceOutMicrousd: number | null;
-}): ModelPrice | null;
-export declare function worstCaseForPrice(price: ModelPrice, promptBytes: number): number;
-export declare function settleForPrice(price: ModelPrice, tokensIn: number, tokensOut: number): number;
-export declare const DIRECT_CHAT_PROVIDERS: readonly DirectChatProviderId[];
-export declare const SUBSCRIPTION_CHAT_PROVIDERS: readonly SubscriptionChatProviderId[];
-export declare function isDirectChatProvider(provider: ChatProviderId): provider is DirectChatProviderId;
-export declare function isSubscriptionChatProvider(provider: ChatProviderId): provider is SubscriptionChatProviderId;
-export declare const CHAT_KEY_ENV: Record<DirectChatProviderId, string>;
-/** Domain-separated, full-width, non-secret accounting identity for a
- * credential (v3 open question 1: eight hex chars was refused). */
-export declare function credentialKeyOf(provider: ChatProviderId, key: string): string;
-/** Subscription usage has no API credential to fingerprint. The provider
- * identity is sufficient because dollar latches do not apply to zero-cost
- * ledger rows, while switching harnesses still invalidates a live session. */
-export declare function subscriptionCredentialKey(provider: SubscriptionChatProviderId): string;
-export declare function plausibleChatKey(provider: DirectChatProviderId, key: string): boolean;
-export type StrictParse = {
-    ok: true;
-    value: unknown;
-} | {
-    ok: false;
-    problem: string;
-};
-/**
- * JSON.parse with the two properties it lacks: duplicate keys REJECTED at
- * every nesting level, and depth bounded. The scanner walks the text
- * once; JSON.parse then supplies the value only if the scan held.
- */
-export declare function strictJsonParse(bytes: Buffer, maxBytes: number, maxDepth?: number): StrictParse;
-/** What the MODEL may say and nothing more (v3 change 3): opaque repoId,
- * no provenance, no ceiling, no approval-shaped anything. */
-export type ChatTaskDraft = {
-    kind: "task";
-    repoId: string;
-    title: string;
-    goal: string;
-    outOfScope: string | null;
-    touches: string[];
-    /** v39: the signed rubric — mandatory, like every other scope-producing
-     * road. The model drafts it; the operator still confirms with a
-     * password before it becomes a real, unapproved scope. */
-    acceptance: AcceptanceCriterion[];
-};
-export type ChatDraft = ChatTaskDraft;
-export type ParsedEnvelope = {
-    reply: string;
-    proposals: ChatDraft[];
-};
-/**
- * The assistant envelope: exactly {chatEnvelope: 1, reply, proposals}.
- * ANY violation — including one bad proposal — discards the whole batch;
- * a bad proposal additionally keeps the (valid, escaped-elsewhere) reply,
- * per the ruled atomicity: reply may render, proposals are all-or-nothing.
- */
-export declare function parseAssistantEnvelope(text: string): {
-    ok: true;
-    envelope: ParsedEnvelope;
-    proposalsDiscarded: boolean;
-} | {
-    ok: false;
-    problem: string;
-};
-export type ProviderAnswer = {
-    text: string;
-    tokensIn: number;
-    tokensOut: number;
-    /** OpenRouter reports the actual charge; settlement takes the HIGHER of
-     * this and the pinned math — the ledger never undercounts. */
-    reportedCostMicrousd: number | null;
-    /** v140: the exact model the response body names, and the cost it reported in dollars (absent or null: unreported). */
-    modelReported?: string | null;
-    reportedCostUsd?: number | null;
-};
-/** Strict parse of the PROVIDER response body (layer one). */
-/** A token count is a non-negative safe integer under a billion (mate arc,
- * ruling 14): a negative, fractional, or absurd usage is a malformed reply,
- * never a discount on the pinned settlement. */
-export declare function tokenCount(value: number): boolean;
-export declare const LEAD_MAX_STEPS = 8;
-export declare const LEAD_MAX_CALLS_PER_STEP = 4;
-/** A tool result, measured AS EMBEDDED — the JSON-encoded string, escapes included. */
-export declare const LEAD_TOOL_RESULT_CAP_BYTES = 16384;
-/** A tool call, measured as the serialized `{id, name, args}` — the id counts. */
-export declare const LEAD_TOOL_CALL_CAP_BYTES = 2048;
-export declare const LEAD_TOOL_CALL_ID_CAP_BYTES = 64;
-/** One step's assistant text; over it the reply is malformed (review finding 7). */
-export declare const LEAD_STEP_TEXT_CAP_BYTES = 8192;
-/**
- * The triangular worst case (mate arc, ruling 6; slice-1 review finding 7):
- * request s carries the base prompt plus every earlier step's calls,
- * results, and assistant text. Calls and results are measured as
- * embedded and may be JSON-escaped ONCE more on the wire (OpenRouter
- * serializes arguments twice; a result string re-escapes inside the
- * body), so each is budgeted at twice its cap — escaping at most doubles
- * a string. Each step may answer with the full output allowance.
- */
-export declare function leadWorstCaseForPrice(price: ModelPrice, baseBytes: number, caps?: {
-    steps?: number;
-    callsPerStep?: number;
-    resultCap?: number;
-    callCap?: number;
-    textCap?: number;
-}): number;
-export type LeadToolSchema = {
-    name: string;
-    description: string;
-    inputSchema: Record<string, unknown>;
-};
-export type LeadToolCall = {
-    id: string;
-    name: string;
-    args: Record<string, unknown>;
-};
-/** A provider answer with tool calls allowed: text, calls, usage. */
-/** `tokensIn` is ALL input tokens of the request; of them, `cacheWriteTokens` were written to the provider's prompt cache
- * and `cacheReadTokens` read from it (absent: the provider reported none — never assumed zero for a cached request). */
-export type LeadProviderAnswer = {
-    text: string;
-    calls: LeadToolCall[];
-    tokensIn: number;
-    tokensOut: number;
-    reportedCostMicrousd: number | null;
-    cacheWriteTokens?: number;
-    cacheReadTokens?: number;
-    /** v140 (docs/plans/evals-nightly.md B1), each from the provider's own report and absent or null when it gave none
-     * (never 0): the exact model it says answered, its own turn count (`num_turns`), and the cost it reported in dollars.
-     * `reportedCostMicrousd` stays API money only; a subscription harness's reported cost is `reportedCostUsd` alone. */
-    modelReported?: string | null;
-    providerTurns?: number | null;
-    reportedCostUsd?: number | null;
-    /** v141: how a subscription harness's own events said this request was billed (its init's key source); null or
-     * absent when they didn't say (unknown money, never assumed to be the plan). */
-    billingReported?: "subscription" | "api-key" | null;
-};
-/** Anthropic prices a cache write at 1.25x and a cache read at 0.1x the input price (5-minute cache). */
-export declare const CACHE_WRITE_RATIO = 1.25;
-export declare const CACHE_READ_RATIO = 0.1;
-/** The price a worst case reserves at while prompt caching is on: every input token as a cache write (the dearest). */
-export declare function cacheWorstPrice(price: ModelPrice): ModelPrice;
-/** A step's settlement with its cache categories: plain input, cache writes and cache reads each at their own rate. */
-export declare function settleWithCache(price: ModelPrice, answer: Pick<LeadProviderAnswer, "tokensIn" | "tokensOut" | "cacheWriteTokens" | "cacheReadTokens">): number;
-/** One message of the lead's own history, provider-neutral. */
-export type LeadHistoryMessage = {
-    role: "operator";
-    text: string;
-} | {
-    role: "assistant";
-    text: string;
-    calls: LeadToolCall[];
-} | {
-    role: "tool";
-    callId: string;
-    name: string;
-    result: string;
-};
-/**
- * The tool-capable wrapper parser (mate arc). Same caps and the same
- * duplicate-key lexer as fleet chat's; tool calls are read, bounded (at
- * most M per answer, each argument object under the call cap), and
- * anything else about the shape is malformed.
- */
-export declare function parseLeadProviderWrapper(provider: DirectChatProviderId, bytes: Buffer): {
-    ok: true;
-    answer: LeadProviderAnswer;
-} | {
-    ok: false;
-    problem: string;
-};
-/** The lead's request: system contract, the data document as the first
- * operator message, the history in provider-native shape, the tools. */
-export declare function composeLeadRequest(args: {
-    provider: DirectChatProviderId;
-    model: string;
-    key: string;
-    system: string;
-    dataDocument: string;
-    history: readonly LeadHistoryMessage[];
-    tools: readonly LeadToolSchema[];
-    /** Anthropic prompt caching: breakpoints after the first `coreTools` tools (stable across replies), on the system
-     * block, and on the DATA message (stable across the steps of one reply). Absent: no cache annotations. */
-    cache?: {
-        coreTools: number;
-    };
-}): {
-    url: string;
-    headers: Record<string, string>;
-    body: string;
-};
-/** The lead's network call: the same transport posture as fleet chat's, the tool-capable parser at the end. */
-export declare function performLeadRequest(request: {
-    url: string;
-    headers: Record<string, string>;
-    body: string;
-}, provider: DirectChatProviderId, signal: AbortSignal, fetcher?: typeof fetch): Promise<{
-    ok: true;
-    answer: LeadProviderAnswer;
-} | {
-    ok: false;
-    problem: string;
-}>;
-export declare function parseProviderWrapper(provider: DirectChatProviderId, bytes: Buffer): {
-    ok: true;
-    answer: ProviderAnswer;
-} | {
-    ok: false;
-    problem: string;
-};
-export declare const DATA_DOCUMENT_BUDGET_BYTES = 24576;
-/**
- * The snapshot, serialized for the model: repos as opaque ids only (no
- * paths, no basenames — change 9), items shed WHOLE (never fields) until
- * the byte budget holds, and every shed declared in-band so a trimmed
- * list can never read as a complete one.
- */
-export declare function buildDataDocument(snapshot: import("./store.js").ChatSnapshot, budgetBytes?: number): {
-    document: string;
-    shed: number;
-};
-export declare function composeRequest(args: {
-    provider: DirectChatProviderId;
-    model: string;
-    key: string;
-    dataDocument: string;
-    userMessage: string;
-}): {
-    url: string;
-    headers: Record<string, string>;
-    body: string;
-};
-/** Read a response body with the cap enforced WHILE streaming (v2 new
- * finding 8): one byte over the cap aborts the read, not the memory. */
-export declare function readCappedBody(response: Response, cap: number): Promise<Buffer | null>;
-/**
- * The one network call a turn may make. The caller owns the CAS that
- * makes it at-most-once; this owns the transport posture: no redirects,
- * wall clock, streamed cap, wrapper strictness.
- */
-export declare function performChatRequest(args: {
-    provider: DirectChatProviderId;
-    model: string;
-    key: string;
-    dataDocument: string;
-    userMessage: string;
-    signal: AbortSignal;
-}, fetcher?: typeof fetch): Promise<{
-    ok: true;
-    answer: ProviderAnswer;
-} | {
-    ok: false;
-    problem: string;
-}>;

package/dist/coordinator-proposals.d.ts

@@ -1,29 +0,0 @@
-/**
- * Proposals over the MCP gateway (mate arc v3, §9). A coordinator may
- * propose what the lead may propose — next, reserve, hold, unhold, scope,
- * cancel, answer — and a row is all it writes: any approver whose ceiling
- * admits the repo confirms it through `confirmCoordinatorProposal`. The
- * token re-authenticates INSIDE the transaction (the session's `who` is a
- * courtesy, exactly as for filing); the proposal counts against the
- * credential's hourly filing rate and a per-credential pending cap; the
- * payload carries the same CAS material the lead's does, so a stale row
- * refuses at the door in the same words.
- */
-import type { CoordinatorProposalKind, Store } from "./store.js";
-export declare const PER_CID_PENDING_PROPOSALS = 20;
-export type ProposeOutcome = {
-    ok: true;
-    id: number;
-    kind: CoordinatorProposalKind;
-    awaiting: string;
-} | {
-    ok: false;
-    reason: "unauthenticated" | "revoked" | "rate-limited" | "pending-cap" | "not-found" | "bad-args" | "not-proposable";
-    message: string;
-};
-/** The coordinator's proposal as a row; the shape of `args` is the MCP tool's. */
-export declare function proposeAsCoordinator(store: Store, token: string, kind: CoordinatorProposalKind, args: Record<string, unknown>, now: Date, 
-/** The decisions this connection has read with get_decision — an answer needs one (v3 review, finding 6). */
-seen?: {
-    readDecisions: ReadonlySet<number>;
-}): ProposeOutcome;

package/dist/coordinator.d.ts

@@ -1,186 +0,0 @@
-/**
- * The coordinator principal (MCP gateway spec v6; DESIGN.md §9b).
- *
- * A coordinator is the ONE credential the MCP surface accepts: minted by
- * an operator password ceremony, hashed at rest (a `credential` row of kind
- * 'coordinator', v118: the shared codec and table), repo-scoped at the mint,
- * rate-limited, revocable — and able to do exactly one thing: file a
- * proposal through the canonical door. What it files is an ordinary
- * UNAPPROVED task; admission is the operator's existing scope ceremony,
- * and the quarantine (sealScopeApproval's mode-kind refusal + the claim
- * primitive's exclusion) keeps every pre-seal road shut.
- *
- * The brand: `VerifiedCoordinator` is disjoint from the operator's
- * `VerifiedAuthor` by construction, and its maker is module-private —
- * the exported-cast mistake is named in the spec and not repeated here.
- * Steering and every operator-speech surface cannot accept this type.
- */
-import type { Store } from "./store.js";
-import { type WorkSummary } from "./work-summary.js";
-import { assignmentBrief } from "./assignment.js";
-declare const verifiedCoordinatorBrand: unique symbol;
-export type VerifiedCoordinator = {
-    readonly [verifiedCoordinatorBrand]: true;
-    readonly cid: string;
-    readonly name: string;
-    readonly repos: readonly string[];
-    readonly perHour: number;
-};
-export type MintResult = {
-    ok: true;
-    cid: string;
-    token: string;
-    repos: string[];
-} | {
-    ok: false;
-    reason: "bad-name" | "name-taken" | "bad-rate" | "no-repos";
-};
-export declare function mintCoordinator(store: Store, input: {
-    name: string;
-    repos: readonly string[];
-    perHour?: number;
-    by: string;
-    now: Date;
-    /** v101: how long it lives (90 days unless said; at most a year). */
-    days?: number;
-    /** Injected in tests. */
-    newToken?: () => string;
-    newCid?: () => string;
-}): MintResult;
-export type CoordinatorAuth = {
-    ok: true;
-    who: VerifiedCoordinator;
-} | {
-    ok: false;
-    reason: "unknown" | "revoked" | "expired";
-};
-/** The token IS the identity — no name travels with it. Verified against
- * the stored hash; the caller re-runs this INSIDE any mutating
- * transaction (the startup check is a courtesy; the txn check is law). */
-export declare function authenticateCoordinator(store: Store, token: string): CoordinatorAuth;
-export declare function revokeCoordinator(store: Store, cid: string, by: string, now: Date): {
-    ok: true;
-} | {
-    ok: false;
-    reason: "unknown" | "already-revoked";
-};
-export type CoordinatorRow = {
-    cid: string;
-    name: string;
-    repos: string[];
-    perHour: number;
-    createdBy: string;
-    createdAt: string;
-    revokedAt: string | null;
-    lastFiledAt: string | null;
-    /** v101: when it stops (null: made before expiry existed, until renewed). */
-    expiresAt: string | null;
-};
-export declare function listCoordinators(store: Store): CoordinatorRow[];
-export declare const PER_CID_OUTSTANDING = 10;
-export declare const GLOBAL_OUTSTANDING = 50;
-export type FileOutcome = {
-    ok: true;
-    id: string;
-    replayed: boolean;
-} | {
-    ok: false;
-    reason: "unauthenticated" | "revoked" | "bad-key" | "idempotency-conflict" | "rate-limited" | "outstanding-cap" | "global-cap" | string;
-    message: string;
-};
-/**
- * The one write the MCP surface owns, as ONE transaction: authenticate →
- * revocation re-check → replay lookup → rate window → caps → the
- * canonical door → the cid stamp → idempotency + event rows. The rate
- * window reads the event ledger (filings are events, so the window and
- * the audit cannot disagree), and a replay charges no slot.
- */
-export declare function fileCoordinatorProposal(store: Store, token: string, input: {
-    repo: string;
-    title: string;
-    intent?: string;
-    idempotencyKey: string;
-    deliverable?: "branch" | "report";
-}, now: Date): FileOutcome;
-export declare function statusFor(store: Store, who: VerifiedCoordinator, now: Date): {
-    waitsOnYou: number;
-    waits: {
-        approvals: number;
-        questions: number;
-        incidents: number;
-    };
-    running: number;
-    builtToday: number;
-    failedToday: number;
-    repos: {
-        repo: string;
-        queued: number;
-        running: number;
-    }[];
-};
-export declare function listTasksFor(store: Store, who: VerifiedCoordinator, filter: {
-    state?: string;
-    repo?: string;
-    cursor?: number;
-    limit?: number;
-}, now: Date): {
-    tasks: {
-        ref: string;
-        title: string;
-        state: string;
-        chip: string;
-        repo: string;
-        filedVia: string | null;
-    }[];
-    nextCursor: number | null;
-};
-export declare function taskDetailFor(store: Store, who: VerifiedCoordinator, taskId: string, evidenceRoot?: string, now?: Date): {
-    ref: string;
-    title: string;
-    state: string;
-    repo: string;
-    work: WorkSummary | null;
-    assignment: ReturnType<typeof assignmentBrief>;
-    deliverable: "branch" | "report";
-    /** A finished scout's report (mate arc §10); null when there is none. */
-    report: {
-        title: string;
-        summary: string;
-        followUps: {
-            title: string;
-            goal: string;
-        }[];
-    } | {
-        problem: string;
-    } | null;
-    filedBy: string | null;
-    scope: {
-        sealed: boolean;
-        goal: string | null;
-        words: string[];
-    };
-    waits: string[];
-    attempts: {
-        outcome: string | null;
-        provider: string;
-        model: string | null;
-        startedAt: string;
-        finishedAt: string | null;
-        durationMs: number | null;
-        costMicrousd: number | null;
-    }[];
-    cost: {
-        totalMicrousd: number;
-        measuredRuns: number;
-        totalRuns: number;
-    };
-    evidence: {
-        id: number;
-        kind: string;
-        bytes: number;
-        sha256: string;
-        captureStatus: string | null;
-        mediaType: string;
-    }[];
-} | null;
-export {};

package/dist/credentials-ui.d.ts

@@ -1,33 +0,0 @@
-/**
- * Settings → Sessions & tokens (v101): where you're signed in (sign any of
- * them out), and your API tokens (make one, revoke one). An instance operator
- * can see and end everyone's.
- */
-import type { ApiTokenRow, WebSessionRow } from "./store.js";
-import { type Html } from "./html.js";
-/** The old card look; the page is built from the kit now (src/server/kit.ts), so nothing is left to style. Kept for
- * chrome.ts, which still concatenates it. */
-export declare const CREDENTIALS_CSS = "";
-/** "Chrome on macOS", from a user agent, for a person to recognise a session. */
-export declare function deviceWords(agent: string | null): string;
-export type CredentialsView = {
-    who: string;
-    everyone: boolean;
-    canSeeEveryone: boolean;
-    sessions: (WebSessionRow & {
-        here: boolean;
-    })[];
-    tokens: ApiTokenRow[];
-    now: number;
-    /** Request limits (request-budget-ui.ts): words for each token's line, and the operator's disclosure. */
-    limits?: {
-        note: (token: ApiTokenRow) => string;
-        section: Html;
-    };
-};
-export declare function credentialsHtml(view: CredentialsView, outcome: {
-    said?: string | null;
-    problem?: string | null;
-}): Html;
-/** The token, once, on a page with no script: selectable text, what it may do, and where to revoke it. */
-export declare function tokenShownHtml(name: string, token: string, access: "read" | "act", expiresAt: string): Html;