toolroll 0.9.104 → 0.9.105

package/dist/oauth-run-token.js

@@ -1,32 +1,13 @@
-/**
- * A run's own sign-in for a service connected by signing in (mcp-connect.ts).
- *
- * The service's secrets are an access token and the refresh token that renews
- * it. A run never gets the refresh token. When it launches, Toolroll — outside
- * the fence — trades the refresh token for a fresh access token of the run's
- * own, no broader than the saved grant (a research step asks for only its read
- * scopes, where the service takes a narrower one), and only that access token
- * enters the run's broker. When the run ends the token is revoked, where the
- * service said how at sign-in, and otherwise runs out at its own expiry. A
- * service that gave no refresh token has only its one access token: the broker
- * holds it, as it holds an API key.
- */
 import { SCOPE_TOKEN, readTokenResponse } from "./contracts/integration-metadata.js";
-/** The secrets a connected tool keeps: the bearer the MCP server takes, and what renewing it needs. */
 export const ACCESS = "OAUTH_ACCESS_TOKEN", REFRESH = "OAUTH_REFRESH_TOKEN", CLIENT = "OAUTH_CLIENT_ID", CLIENT_SECRET = "OAUTH_CLIENT_SECRET", TOKEN_URL = "OAUTH_TOKEN_URL", EXPIRES = "OAUTH_EXPIRES_AT", RESOURCE = "OAUTH_RESOURCE";
-/** The scope the sign-in granted, kept beside its token. Not one of the spec's secrets, so it never reaches a launch. */
 export const GRANTED = "OAUTH_GRANTED_SCOPE";
-/** Where the service revokes a token (RFC 7009), when its sign-in said. Not one of the spec's secrets either. */
 export const REVOKE_URL = "OAUTH_REVOKE_URL";
-/** A tool connected by signing in: a web tool whose sign-in is the access token. */
 export const signedIn = (spec) => spec.transport === "http" && spec.bearer === ACCESS;
-/** Whether runs of a signed-in tool get their own token: only when there is a refresh token to make one with. */
 export const mintsRunTokens = (values) => {
     const has = (name) => Array.isArray(values) ? values.includes(name) : (values[name] ?? "") !== "";
     return has(REFRESH) && has(TOKEN_URL) && has(CLIENT);
 };
 const loopback = (url) => url.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(url.hostname);
-/** A sign-in address Toolroll will send a token to: https, or a stand-in on this computer. */
 export const signInAddress = (value) => {
     if (typeof value !== "string")
         return false;
@@ -38,11 +19,9 @@ export const signInAddress = (value) => {
         return false;
     }
 };
-/** Identity scopes a read-only grant may carry beside `<resource>:read` ones. */
 const IDENTITY_SCOPES = new Set(["openid", "profile", "email"]);
 const READ_SCOPE = /^[a-z][a-z0-9_]{0,63}:read$/;
 export const readScope = (scope) => IDENTITY_SCOPES.has(scope) || READ_SCOPE.test(scope);
-/** An OAuth `scope` value as scope tokens (RFC 6749), sorted and deduplicated; null when absent, empty or malformed. */
 export function scopeList(value) {
     if (typeof value !== "string")
         return null;
@@ -51,10 +30,6 @@ export function scopeList(value) {
         return null;
     return [...new Set(tokens)].sort();
 }
-/**
- * The scope a run asks for: none (the saved grant, never more) for a build; for a research step, only the grant's
- * read scopes when it has some and others besides. A grant never said is left as it is.
- */
 export function runScope(granted, readOnly) {
     if (!readOnly || granted === null)
         return null;
@@ -62,11 +37,6 @@ export function runScope(granted, readOnly) {
     return reads.length > 0 && reads.length < granted.length ? reads : null;
 }
 const busy = new Map();
-/**
- * One renewal of a sign-in at a time (per project and tool, in this process): a service that rotates its refresh
- * token on every use would otherwise see the same one twice, and whichever answer was saved last would be the
- * newest only by luck.
- */
 export function oneAtATime(key, work) {
     const ran = (busy.get(key) ?? Promise.resolve()).then(work, work);
     const settled = ran.then(() => undefined, () => undefined);
@@ -75,10 +45,6 @@ export function oneAtATime(key, work) {
         busy.delete(key); });
     return ran;
 }
-/**
- * Trade the saved refresh token for an access token of this run's own. Plain reasons only: a service's answer is
- * never repeated, so no token can ride an error into a log or the run's record.
- */
 export async function mintRunToken(values, options) {
     const fetcher = options.fetcher ?? fetch;
     const refresh = values[REFRESH], tokenUrl = values[TOKEN_URL], client = values[CLIENT];
@@ -100,8 +66,6 @@ export async function mintRunToken(values, options) {
     };
     try {
         let answered = await ask(options.scope);
-        // A service that won't narrow a grant on renewal gets asked for the grant as saved; the broker still offers the
-        // step only its read-only actions.
         if (!answered.ok && options.scope !== null && answered.body?.error === "invalid_scope")
             answered = await ask(null);
         const access = answered.body?.access_token;
@@ -117,7 +81,7 @@ export async function mintRunToken(values, options) {
                     body: new URLSearchParams({ token: access, token_type_hint: "access_token", client_id: client, ...(values[CLIENT_SECRET] ? { client_secret: values[CLIENT_SECRET] } : {}) }) });
                 await answer.body?.cancel();
             }
-            catch { /* it runs out at its own expiry */ }
+            catch { }
         } : null;
         return { ok: true, token: { access, expires, rotated, revoke } };
     }

package/dist/observations.js

@@ -1,5 +1,3 @@
-/** Focused observations are new evidence about an unchanged candidate. They
- * never replace the original gate or give an agent a new shell authority. */
 import { createHash } from "node:crypto";
 import { lstatSync, mkdirSync, mkdtempSync, readFileSync, realpathSync, rmSync, symlinkSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
@@ -16,9 +14,6 @@ const pathOkay = (value) => typeof value === "string" && value.length > 0 && val
     !value.startsWith("-") && !/[\\\u0000-\u0020\u007f:*?\[\]]/.test(value) && value.split("/").every(p => p !== "" && p !== "." && p !== "..");
 export function focusedTestCommandSupported(command) {
     const parts = command.trim().split(/\s*&&\s*/);
-    // Only simple argv joined by && can establish this narrower authority.
-    // Quotes, expansion, substitutions, redirects and other shell syntax need
-    // explicit support; text inside an echo/printf argument is not a command.
     if (parts.some(c => !/^[A-Za-z0-9_./=:-]+(?: +[A-Za-z0-9_./=:-]+)*$/.test(c)))
         return false;
     return parts.some(c => /^npm (?:test|run test)(?: -- (?:--run|--reporter=\w+|--no-file-parallelism)(?: (?:--run|--reporter=\w+|--no-file-parallelism))*)?$/.test(c));
@@ -31,8 +26,6 @@ export function originalTaskBase(store, taskId) {
     const first = ref && store.runsFor(ref.id).filter(r => r.role === "builder" && r.branch && r.baseRevision).sort((a, b) => a.id - b.id)[0];
     return first?.branch ? store.firstBuilderBase(first.taskRef, first.branch) ?? first.baseRevision : null;
 }
-/** The existing sealed revision brief identifies this narrower kind of work.
- * A title, agent-authored mailbox, or handoff can never elect gate reuse. */
 export function observationBrief(store, root, taskRef) {
     const ref = store.refById(taskRef);
     const source = store.revisionSourceOf(taskRef);
@@ -64,7 +57,6 @@ export function parseObservationCases(raw, ids) {
         throw Error("The observation request is too large.");
     const parsed = JSON.parse(raw);
     const read = readObservationRequest(parsed);
-    // A problem inside one observation is that observation's; anything else is the request's shape.
     if (!read.ok && read.issues.some(issue => !/^observations\[\d+\]/.test(issue.path)))
         throw Error("Use one to four focused test observations.");
     const bad = () => Error("An observation must name a requested criterion, base/head, one test file and one test name. Shell commands are not accepted.");
@@ -75,7 +67,6 @@ export function parseObservationCases(raw, ids) {
             item.testName.trim() === "" || item.testName.length > 500 || /[\u0000-\u001f\u007f]/.test(item.testName))
             throw bad();
     }
-    // The cases as written: their key order is the receipt's, and two written in different orders are distinct, as before.
     const cases = parsed.observations;
     if (new Set(cases.map(c => JSON.stringify(c))).size !== cases.length || ids.some(id => !cases.some(c => c.criterion === id)))
         throw Error("Every requested criterion needs a distinct observation.");
@@ -109,13 +100,9 @@ export function readObservationEvidence(store, root, runId) {
         throw Error("The observations no longer match this exact candidate and scope.");
     return { artifact: artifact.id, sha256: artifact.sha256, content: read.content.toString("utf8") };
 }
-/** The supplied runner applies the build's existing stop, custody, environment
- * and approved command timeout. Only fixed argv is constructed here. */
 export async function collectObservations(store, root, runId, worktree, brief, cases, execute, now) {
     const source = store.getRun(runId), ref = source && store.refById(source.taskRef);
     const command = ref?.repo ? store.liveVerifyCommand(ref.repo) : null;
-    // This is deliberately a narrow first collector. Approval for npm test
-    // does not authorize arbitrary shell text supplied by an agent or review.
     if (!source || !command || !focusedTestCommandSupported(command.command)) {
         throw Error("Focused collection requires an already approved npm test command.");
     }
@@ -173,9 +160,6 @@ export async function collectObservations(store, root, runId, worktree, brief, c
             };
             verifySnapshot();
             symlinkSync(dependencyPath, join(snapshot, "node_modules"), "junction");
-            // Vitest treats its name filter as a regular expression. The manifest
-            // supplies a literal name; also verify the actual selected identity so
-            // a suffix, duplicate name or another matching file cannot stand in.
             const pattern = `(?:^| )${item.testName.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}$`;
             const reportPath = join(scratch, `${index}.json`);
             const argv = [join(dependencyPath, "vitest", "vitest.mjs"), "run", item.testPath, "--testNamePattern", pattern,

package/dist/oidc.js

@@ -1,15 +1,3 @@
-/**
- * Sign-in with an identity provider (v100): OpenID Connect, the protocol
- * Okta, Microsoft Entra, Google Workspace, Auth0, Keycloak and JumpCloud all
- * speak. Discovery finds the provider's endpoints and keys; sign-in is the
- * authorization-code flow with PKCE, a state and a nonce; the ID token's
- * signature is checked against the provider's published keys (RS256, PS256,
- * ES256) along with its issuer, audience, expiry and nonce. Groups from the
- * token decide a person's role and projects, first matching rule wins.
- *
- * Addresses are https, except a provider on this computer (tests and local
- * development), the same loopback exception OAuth makes.
- */
 import { createHash, createPublicKey, randomBytes, verify, constants } from "node:crypto";
 const loopback = (value) => { try {
     const url = new URL(value);
@@ -29,7 +17,6 @@ const secure = (value, issuer) => {
     }
 };
 const trim = (url) => url.replace(/\/+$/, "");
-/** The provider's endpoints, from its discovery document; its issuer must be the one configured. */
 export async function discoverOidc(issuer, fetcher = fetch) {
     if (!secure(issuer, issuer))
         return { ok: false, said: "The issuer must be an https address." };
@@ -53,7 +40,6 @@ export async function discoverOidc(issuer, fetcher = fetch) {
 export function newOidcVisit() {
     return { state: randomBytes(24).toString("base64url"), nonce: randomBytes(24).toString("base64url"), verifier: randomBytes(32).toString("base64url") };
 }
-/** Where to send the person to sign in. `reauth` asks the provider to check them again now (a step-up). */
 export function oidcAuthorizeUrl(provider, settings, visit, redirectUri, reauth = false) {
     const url = new URL(provider.authorize);
     url.searchParams.set("response_type", "code");
@@ -70,7 +56,6 @@ export function oidcAuthorizeUrl(provider, settings, visit, redirectUri, reauth
     }
     return url.toString();
 }
-/** The code, traded for the ID token. */
 export async function exchangeOidcCode(provider, settings, code, visit, redirectUri, fetcher = fetch) {
     try {
         const answer = await fetcher(provider.token, { method: "POST", headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/json" }, signal: AbortSignal.timeout(15_000),
@@ -109,7 +94,6 @@ const decode = (part) => {
         return null;
     }
 };
-/** Check the ID token: its signature by one of the provider's keys, then who issued it, for whom, until when, and for which sign-in. */
 export async function verifyIdToken(idToken, provider, settings, nonce, now, fetcher = fetch) {
     const parts = idToken.split(".");
     if (parts.length !== 3)
@@ -126,7 +110,7 @@ export async function verifyIdToken(idToken, provider, settings, nonce, now, fet
     try {
         candidates = pick(await providerKeys(provider.jwks, fetcher, false));
         if (candidates.length === 0)
-            candidates = pick(await providerKeys(provider.jwks, fetcher, true)); // the provider may have rotated its keys
+            candidates = pick(await providerKeys(provider.jwks, fetcher, true));
     }
     catch {
         return { ok: false, said: "The provider's keys couldn't be read." };
@@ -160,15 +144,12 @@ export async function verifyIdToken(idToken, provider, settings, nonce, now, fet
     const text = (key) => typeof claims[key] === "string" && claims[key] !== "" ? claims[key] : null;
     const rawGroups = claims[settings.groupsClaim];
     const groups = Array.isArray(rawGroups) ? rawGroups.filter((one) => typeof one === "string") : typeof rawGroups === "string" ? [rawGroups] : [];
-    // An address the provider hasn't checked names no one.
     const email = claims["email_verified"] === false ? null : text("email");
     return { ok: true, claims: { sub: claims["sub"], email, name: text("name"), username: text("preferred_username"), groups: groups.slice(0, 200), authTime: typeof claims["auth_time"] === "number" ? claims["auth_time"] : null } };
 }
-/** A person's role and projects from their groups: the first rule that matches ("*" matches everyone), or none. */
 export function accessFromGroups(groups, rules) {
     return rules.find(rule => rule.group === "*" || groups.includes(rule.group)) ?? null;
 }
-/** An account name for someone new: from their username or email, in the characters names allow, made unique. */
 export function accountNameFor(claims, taken) {
     const source = claims.username ?? claims.email ?? claims.name ?? "person";
     const local = source.includes("@") ? source.slice(0, source.indexOf("@")) : source;

package/dist/onboard.js

@@ -1,27 +1,6 @@
-/**
- * Repo onboarding (four Codex rounds, findings 1–39): clone a GitHub
- * repository into a configured projects root, as a ceremony.
- *
- * The boundaries, in one place: the clone is the ONLY network write and
- * acts as the serve process's ambient GitHub credential; the target is
- * confined to an explicitly configured --project-root; publication is
- * CLAIM-FIRST (an exclusive mkdir of the final directory — a lost race
- * fails before a byte is written); nothing is ever deleted that this
- * request did not create; submodules and LFS smudge fetches are off; and
- * a fresh clone enters with ZERO authority — no tasks, no scopes, no
- * grants, exactly like an `up`-enrolled repository.
- *
- * POSIX only: tree death is proven by polling the process group to
- * ESRCH. Windows cannot prove descendants died after the leader exited
- * (finding 32), so onboarding refuses there instead of guessing.
- */
 import { mkdirSync, openSync, closeSync, writeSync, rmSync, constants as fsConstants } from "node:fs";
 import { basename, dirname, join } from "node:path";
 import { spawn } from "node:child_process";
-/** Strict, onboarding-only (finding 5/18): exactly owner/name, bounded
- * ASCII, alnum-leading, no leading dash or dot, `.`/`..` refused. The two
- * looser GITHUB_REPO_SHAPE call sites gate other, already-reviewed
- * authority and are deliberately untouched. */
 const COMPONENT = /^[A-Za-z0-9][A-Za-z0-9._-]{0,99}$/;
 export function parseGithubRepo(raw) {
     let text = raw.trim();
@@ -60,12 +39,6 @@ const GH_ENV = {
     GIT_LFS_SKIP_SMUDGE: "1",
     GIT_TERMINAL_PROMPT: "0",
 };
-/**
- * Run gh with its own detached group and prove tree death on EVERY
- * outcome. Deliberately NOT exec.ts's processGroup path: liveProviders is
- * provider-owned (finding 12), and this contract — poll the group to
- * ESRCH before anyone may clean up — is onboarding's own.
- */
 export function runGhTree(args, options) {
     return new Promise(resolve => {
         if (process.platform === "win32") {
@@ -99,7 +72,6 @@ export function runGhTree(args, options) {
                     process.kill(-pid, "SIGKILL");
                 }
                 catch {
-                    // group already gone
                 }
             }
         }, options.timeoutMs);
@@ -120,7 +92,6 @@ export function runGhTree(args, options) {
         });
         child.on("close", code => {
             clearTimeout(timer);
-            // Tree death, proven by the group answering ESRCH — on every path.
             const settle = (treeGone) => resolve({ code: notFound ? 127 : timedOut ? 124 : (code ?? 1), stdout, stderr, timedOut, notFound, treeGone });
             if (pid === undefined) {
                 settle(true);
@@ -132,7 +103,7 @@ export function runGhTree(args, options) {
                     process.kill(-pid, 0);
                 }
                 catch {
-                    settle(true); // ESRCH: nobody left in the group
+                    settle(true);
                     return;
                 }
                 if (Date.now() > deadline) {
@@ -145,16 +116,14 @@ export function runGhTree(args, options) {
         });
     });
 }
-/** Capped, control-stripped stderr for refusal text — never unbounded. */
 export function ghWords(stderr) {
     const line = stderr.split("\n").find(one => one.trim() !== "") ?? "";
     return line.replace(/[\x00-\x1f\x7f]/g, " ").slice(0, 200).trim();
 }
-export const LARGE_REPO_KIB = 1_048_576; // 1 GiB in KiB
+export const LARGE_REPO_KIB = 1_048_576;
 export function isLargeRepo(preview) {
     return preview.diskUsageKib === null || preview.diskUsageKib >= LARGE_REPO_KIB;
 }
-/** `gh repo view` — nothing is written on ANY preview outcome. */
 export async function previewGithubRepo(owner, name) {
     const answer = await runGhTree(["repo", "view", `github.com/${owner}/${name}`, "--json", "nameWithOwner,visibility,diskUsage,description"], { timeoutMs: 30_000 });
     if (answer.notFound)
@@ -173,8 +142,6 @@ export async function previewGithubRepo(owner, name) {
         return { ok: false, reason: "malformed", message: "GitHub's answer was not the JSON gh promises — nothing was written" };
     }
     const nameWithOwner = parsed["nameWithOwner"];
-    // The returned identity is RE-PARSED through the strict parser before
-    // anything derives from it (finding 18) — gh's answer is data too.
     if (typeof nameWithOwner !== "string" || !parseGithubRepo(nameWithOwner).ok) {
         return { ok: false, reason: "malformed", message: "GitHub named a repository shape this console refuses — nothing was written" };
     }
@@ -190,14 +157,6 @@ export async function previewGithubRepo(owner, name) {
         },
     };
 }
-/**
- * `gh repo list` — the signed-in account's repositories, read-only, so the
- * projects screen can OFFER them instead of making the operator type
- * owner/name from memory. Same discipline as the preview: gh's answer is
- * DATA — every identity is re-parsed through the strict parser and rows
- * that fail it are dropped, never rendered. Nothing is written on any
- * outcome.
- */
 export async function listGithubRepos(limit = 100) {
     const answer = await runGhTree(["repo", "list", "--json", "nameWithOwner,isPrivate,updatedAt,description", "--limit", String(Math.max(1, Math.min(200, limit)))], { timeoutMs: 30_000 });
     if (answer.notFound)
@@ -229,8 +188,6 @@ export async function listGithubRepos(limit = 100) {
         repos.push({
             nameWithOwner,
             isPrivate: row["isPrivate"] === true,
-            // The stamp is DATA too (ghlist review, finding 3): only an
-            // ISO-shaped value survives; anything else renders as nothing.
             updatedAt: typeof row["updatedAt"] === "string" && /^\d{4}-\d{2}-\d{2}T[0-9:.]+Z?$/.test(row["updatedAt"])
                 ? row["updatedAt"]
                 : "",
@@ -239,12 +196,6 @@ export async function listGithubRepos(limit = 100) {
     }
     return { ok: true, repos };
 }
-/**
- * The claim-first clone (findings 6/11/23): mkdir the FINAL target
- * exclusively — EEXIST loses the race with NOTHING written — then clone
- * into it. Cleanup removes the target only because THIS call created it,
- * and only after the tree is proven dead; on doubt the residual is named.
- */
 export async function cloneGithubRepo(nameWithOwner, root, gitVerify) {
     const shape = parseGithubRepo(nameWithOwner);
     if (!shape.ok)
@@ -254,7 +205,7 @@ export async function cloneGithubRepo(nameWithOwner, root, gitVerify) {
         return { ok: false, reason: "clone-failed", message: "the target escaped its root — refused" };
     }
     try {
-        mkdirSync(target); // the CLAIM — exclusive by mkdir semantics
+        mkdirSync(target);
     }
     catch {
         return {
@@ -263,8 +214,6 @@ export async function cloneGithubRepo(nameWithOwner, root, gitVerify) {
             message: `nothing was written by this request — a directory already exists at ${target}; if it is empty and nobody is cloning, it is an abandoned claim: inspect and remove it by hand`,
         };
     }
-    // The ownership marker (finding 11): written and removed before gh runs;
-    // its lifecycle is within this invocation only.
     const marker = join(target, ".so-claim");
     try {
         const fd = openSync(marker, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL, 0o600);
@@ -273,12 +222,11 @@ export async function cloneGithubRepo(nameWithOwner, root, gitVerify) {
         rmSync(marker);
     }
     catch {
-        // The claim stands; a marker hiccup is not worth a wedged directory.
     }
     const answer = await runGhTree(["repo", "clone", `github.com/${nameWithOwner}`, target, "--", "--no-tags", "--no-recurse-submodules"], { timeoutMs: 10 * 60_000 });
     const cleanOwn = () => {
         if (!answer.treeGone)
-            return false; // doubt: touch nothing (finding 21)
+            return false;
         try {
             rmSync(target, { recursive: true, force: true });
             return true;
@@ -307,7 +255,6 @@ export async function cloneGithubRepo(nameWithOwner, root, gitVerify) {
     if (!answer.treeGone) {
         return { ok: false, reason: "residual", message: `the clone finished but its helpers could not be proven gone — inspect ${target} before using it` };
     }
-    // Verify what landed IS the repository we asked for, where we asked.
     const top = await gitVerify(target);
     if (top.code !== 0 || top.stdout.trim() !== target) {
         const removed = (() => {

package/dist/one-step-chat-schema.js

@@ -1,17 +1,3 @@
-/**
- * v159: one-step start from chat (docs/plans/one-step-chat.md). Adds only: a saved row reads as it did. Kept beside
- * nothing else so the update road can read the lists without the store, and so the version is easy to renumber.
- *
- * - `fast_preview.turn`: the lead turn a chat start's preview was prepared in (fast-start.ts prepareChatStart). Saved
- *   rows read NULL; a chat preview without a turn is unusable, and the form's previews never have one.
- * - `chat_typed_start` (C5): a typed yes to a Start card, recorded with the inbound message in the transaction that saves
- *   it (typed-start.ts): which card it answered (the proposal and the chat message that carried it), the card's action
- *   stamp then, how it was tied to the card (`reply` to it, or the `next` message after it), and once settled, the
- *   outcome and the task it started. A new table: nothing saved changes. `proposal` is a plain number, not a reference:
- *   the record has to outlive its card. Ending the chat deletes the card's proposal, and a yes already recorded for it
- *   must still be answered by Toolroll ("didn't start anything") and never handed to the lead as a new message. Proposal
- *   ids are never reused (AUTOINCREMENT), so a kept number can't come to name another card.
- */
 export const V159_SCHEMA = `
 CREATE TABLE IF NOT EXISTS chat_typed_start (
   provider     TEXT NOT NULL CHECK (provider IN ('telegram')),
@@ -33,5 +19,4 @@ export const V159_ADDED_COLUMNS = Object.freeze({
     fast_preview: { turn: { definition: "INTEGER", saved: "NULL" } },
 });
 export const V159_TABLES = Object.freeze(["chat_typed_start"]);
-/** The v159 migration's steps, in order (a test seam may stop after each). */
 export const V159_STEPS = Object.freeze(["one-step-chat-tables", "one-step-chat-columns"]);

package/dist/openrouter-models.js

@@ -1,4 +1,3 @@
-/** Live discovery for the UI. Prices are USD, separate from rounded budget pins. */
 import { createHash } from "node:crypto";
 import { html } from "./html.js";
 import { readCappedBody } from "./converse.js";
@@ -56,11 +55,9 @@ export async function fetchOpenRouterModels(key, fetcher = fetch) {
         return { ok: false, problem: "Couldn’t load models from OpenRouter. Check your connection and try again." };
     }
 }
-/** One bounded cache per console. A changed/removed key cannot reuse another account's list. */
 export function openRouterModelsCache(fetcher = fetch) {
     let cache = null;
     let pending = null;
-    /** The list last loaded for this key, without fetching: what a page shows (docs/plans/get-side-effects.md). */
     const known = (key) => cache?.fingerprint === createHash("sha256").update(key ?? "public").digest("hex") ? cache.result : null;
     return Object.assign(async (key, refresh = false) => {
         const fingerprint = createHash("sha256").update(key ?? "public").digest("hex");
@@ -71,7 +68,6 @@ export function openRouterModelsCache(fetcher = fetch) {
         const result = fetchOpenRouterModels(key, fetcher);
         pending = { fingerprint, result };
         const value = await result;
-        // An older request finishing late must not overwrite a newer key's cache.
         if (pending?.result === result) {
             cache = { fingerprint, expires: Date.now() + (value.ok ? 600_000 : 30_000), result: value };
             pending = null;
@@ -95,7 +91,6 @@ function details(model) {
         (model.conditionalPricing ? "Rates change with context length or other conditions. " : "") +
         (model.extraCharges ? "Additional usage charges may apply. " : "") + "Actual charges depend on routing and usage.";
 }
-/** `refreshAction`: where the Refresh models button posts (the picker sits inside a form); a page never fetches. */
 export function openRouterPicker(catalog, selected, refreshAction) {
     const rows = catalog.ok ? catalog.models : [];
     const current = rows.find(row => row.id === selected);
@@ -104,7 +99,6 @@ export function openRouterPicker(catalog, selected, refreshAction) {
         ? `${rows.length} text models · ${catalog.source === "account" ? "Filtered for your OpenRouter account" : "Public catalog · Connect a key to check your account"} · Updated ${catalog.checkedAt.slice(11, 16)} UTC`
         : catalog.problem} <button type="submit" class="secondary" formaction="${refreshAction}" formnovalidate>Refresh models</button></p><label data-model-search hidden>Search models<input type="search" placeholder="Search by name or provider" autocomplete="off"></label><label>Model<select name="model" aria-describedby="openrouter-price"><option value="__custom__"${selected === null ? html ` selected` : ""}>Choose a model</option>${manual}${rows.map(row => html `<option value="${row.id}" data-detail="${details(row)}"${row.id === selected ? html ` selected` : ""}>${row.name} · ${modelDollars(row.input)} in / ${modelDollars(row.output)} out per 1M</option>`)}</select></label><p id="openrouter-price" class="meta" aria-live="polite">${current ? details(current) : selected ? "This saved model is not in the loaded catalog. Availability and pricing are unverified." : "Choose a model to see its token prices and context size."}</p><p data-model-count class="meta" aria-live="polite"></p><p class="meta"><a href="https://openrouter.ai/models" target="_blank" rel="noreferrer">Compare models on OpenRouter ↗</a> · Prices in USD; catalog browsing uses no model tokens.</p></div>`;
 }
-/** Only filters already-rendered options; credentials never enter this script. */
 export function openRouterPickerScript() {
     return `(function(){document.querySelectorAll('[data-openrouter-picker]').forEach(function(root){
     var search=root.querySelector('input[type=search]'),select=root.querySelector('select'),price=root.querySelector('#openrouter-price'),count=root.querySelector('[data-model-count]');

package/dist/operate-remote-arguments.js

@@ -5,15 +5,11 @@ const args = (positionals = '', values = '', references = {}) => ({
     }),
     flags: new Map([...['json', 'help', 'repo', ...values.split(' ').filter(Boolean)].map(name => [name, 'value']), ...Object.entries(references)]),
 });
-/** All remotely allowed rows, including those with no resource references. Credentials and file-output
- * flags are refused by the outer boundary. `source` on memory is provenance text; on revise it is a scope
- * digest. Neither dereferences a conversation, task or proposal. Creation IDs are never looked up. */
 export const REMOTE_ARGUMENTS = new Map([
     ...['status', 'ready', 'grants', 'gaps', 'sync', 'runner list', 'coordinator list', 'incident list',
         'intake show', 'intake run', 'template list', 'webhook status', 'review show',
         'chat-approval show', 'chat-approval off'].map(row => [row, args()]),
     ['integrations', args('', 'saved')],
-    // --person and --token-name are names compared inside the reader's own view; --token stays a refused credential.
     ['audit', args('', 'person token-name source since limit cursor')],
     ['outbox list', args('', 'all')],
     ['task add', args('title*', 'key report checks', { id: 'refused', replaces: 'task' })],
@@ -25,21 +21,17 @@ export const REMOTE_ARGUMENTS = new Map([
     ['task list', args('', 'state view limit cursor')],
     ['task show', args('id:task')],
     ['task wait', args('id:task', 'timeout')],
-    // --checked and --reason are the terminal's local owner's own (a person's check is never an API token's): refused.
     ['task complete', args('task:task', 'digest', { run: 'run', 'pull-request': 'refused', checked: 'refused', reason: 'refused' })],
     ['task revise', args('task:task', 'feedback source key', { run: 'run' })],
     ['task state', args('id:task state', 'key reason', { 'replaced-by': 'task' })],
     ['task block', args('id:task', 'key', { on: 'task' })],
     ['task unblock', args('id:task', 'key', { on: 'task' })],
     ['task next', args('id:task', 'key undo')],
-    // Live steering: --now pauses the running Claude build first; pause and continue name the exact attempt like stop and
-    // resume, and a repeated --request (or --key) id is the same request.
     ['task steer', args('id:task', 'note now request key', { run: 'run' })],
     ['task pause', args('id:task', 'request key', { run: 'run' })],
     ['task continue', args('id:task', 'request key', { run: 'run' })],
     ['task assign', args('id:task', 'key runner anyone')],
     ['task scope', args('id:task', 'key goal not touches budget-usd risk acceptance candidate model provider repair-model')],
-    // --digest is the terminal's local owner's own (its plan request binds to the source it read): refused remotely.
     ['task plan', args('id:task', 'key provider model', { digest: 'refused' })],
     ['task hold', args('id:task', 'key reason until')],
     ['task unhold', args('id:task', 'key')],
@@ -53,7 +45,6 @@ export const REMOTE_ARGUMENTS = new Map([
     ['task resume', args('id:task', '', { run: 'run' })],
     ['check-progress', args('run:run')],
     ['cap list', args()], ['cap add', args('name', 'kind probe expires')],
-    // These objects are installation-scoped at the outer boundary; only an all-project principal reaches them.
     ['incident resolve', args('incident')],
     ['config show', args('phase?')], ['verify show', args()],
     ['intake preview', args()], ['intake pr-comments', args('', 'limit')],
@@ -61,9 +52,6 @@ export const REMOTE_ARGUMENTS = new Map([
     ...['search', 'impact'].map(action => [`knowledge ${action}`, args('query', 'base')]),
     ['knowledge refresh', args('', 'base')],
     ['map', args('', 'cursor')], ...['area', 'file'].map(action => [`map ${action}`, args('target', 'cursor')]), ['map search', args('target*', 'cursor')], ['map refresh', args('')],
-    // Decision reads are already project-bound in project-memory.ts. Memory writes (decide, retire, apply) are a person's
-    // step-up, never a token's act, so none is listed here.
-    // Project-bound by flaky-cli.ts like memory reads; a row's key is compared inside the reader's own project.
     ['card', args('source', 'task state limit flow days')],
     ['flaky list', args('', 'days')],
     ['flaky show', args('identity*', 'days')],
@@ -82,7 +70,6 @@ export const REMOTE_ARGUMENTS = new Map([
 export const REMOTE_NOT_FOUND = { ok: false, reason: 'not-found', message: 'Not found.' };
 const positiveId = (value) => /^[1-9][0-9]*$/.test(value) && Number.isSafeInteger(Number(value));
 const object = (value) => value !== null && typeof value === 'object' && !Array.isArray(value);
-/** Read-only authorization of every supplied reference, before the handler can disclose or mutate it. */
 export function remoteArgumentsOf(store, allows, invocation, positional, flags, named, files) {
     const audit = REMOTE_ARGUMENTS.get(invocation);
     if (audit === undefined)
@@ -131,7 +118,6 @@ export function remoteArgumentsOf(store, allows, invocation, positional, flags,
         }
         if (kind === 'trigger-json') {
             const config = input(value);
-            // Invalid/unavailable input cannot reach a resource lookup; the handler reports its existing file/JSON error.
             if (!object(config))
                 return true;
             return config['kind'] !== 'flow' || (typeof config['flow'] === 'number' && check('flow', String(config['flow'])));
@@ -140,7 +126,6 @@ export function remoteArgumentsOf(store, allows, invocation, positional, flags,
             const config = input(value), steps = object(config) ? config['steps'] : config;
             if (!Array.isArray(steps))
                 return true;
-            // Build steps can name another project. Check the token ceiling as well as the owner's account grants.
             return steps.every(step => !object(step) || step['repo'] === undefined ||
                 typeof step['repo'] === 'string' && store.knownRepos().includes(step['repo']) && allows(step['repo']));
         }
@@ -154,7 +139,6 @@ export function remoteArgumentsOf(store, allows, invocation, positional, flags,
             return { ok: false, reason: 'not-remote', message: 'That option is not available remotely.' };
         if (kind === undefined)
             return { ok: false, reason: 'usage', message: 'That option is not available for this remote command.' };
-        // Resolve positionals first below so the primary ledger target is stable regardless of flag order.
         if (kind !== 'value' && typeof value !== 'string')
             return REMOTE_NOT_FOUND;
     }
@@ -177,7 +161,6 @@ export function remoteArgumentsOf(store, allows, invocation, positional, flags,
     const task = resolved.find(ref => ref.kind === 'task');
     for (const ref of resolved) {
         if (ref.kind === 'run' && task !== undefined && ref.taskRef !== task.taskRef) {
-            // Review/revise accept a saved result from the same revision family. Stop/resume name an exact attempt.
             const runFamily = store.taskFamilyOf(ref.taskId, [ref.repo], false);
             const taskFamily = store.taskFamilyOf(task.taskId, [task.repo], false);
             if (!['task review', 'task revise'].includes(invocation) || ref.repo !== task.repo || runFamily === null || taskFamily === null ||