toolroll 0.9.104 → 0.9.105

package/dist/onboard.d.ts

@@ -1,108 +0,0 @@
-/**
- * Repo onboarding (four Codex rounds, findings 1–39): clone a GitHub
- * repository into a configured projects root, as a ceremony.
- *
- * The boundaries, in one place: the clone is the ONLY network write and
- * acts as the serve process's ambient GitHub credential; the target is
- * confined to an explicitly configured --project-root; publication is
- * CLAIM-FIRST (an exclusive mkdir of the final directory — a lost race
- * fails before a byte is written); nothing is ever deleted that this
- * request did not create; submodules and LFS smudge fetches are off; and
- * a fresh clone enters with ZERO authority — no tasks, no scopes, no
- * grants, exactly like an `up`-enrolled repository.
- *
- * POSIX only: tree death is proven by polling the process group to
- * ESRCH. Windows cannot prove descendants died after the leader exited
- * (finding 32), so onboarding refuses there instead of guessing.
- */
-export declare function parseGithubRepo(raw: string): {
-    ok: true;
-    owner: string;
-    name: string;
-} | {
-    ok: false;
-    problem: string;
-};
-export type GhTreeResult = {
-    code: number;
-    stdout: string;
-    stderr: string;
-    timedOut: boolean;
-    notFound: boolean;
-    /** The whole process tree is PROVEN dead (finding 21) — cleanup and
-     * verification both gate on this; on doubt nothing is touched. */
-    treeGone: boolean;
-};
-/**
- * Run gh with its own detached group and prove tree death on EVERY
- * outcome. Deliberately NOT exec.ts's processGroup path: liveProviders is
- * provider-owned (finding 12), and this contract — poll the group to
- * ESRCH before anyone may clean up — is onboarding's own.
- */
-export declare function runGhTree(args: readonly string[], options: {
-    cwd?: string;
-    timeoutMs: number;
-}): Promise<GhTreeResult>;
-/** Capped, control-stripped stderr for refusal text — never unbounded. */
-export declare function ghWords(stderr: string): string;
-export type RepoPreview = {
-    nameWithOwner: string;
-    visibility: string;
-    /** GitHub reports KiB (finding 18); null = unknown = treated LARGE. */
-    diskUsageKib: number | null;
-    description: string;
-};
-export declare const LARGE_REPO_KIB = 1048576;
-export declare function isLargeRepo(preview: RepoPreview): boolean;
-export type PreviewOutcome = {
-    ok: true;
-    preview: RepoPreview;
-} | {
-    ok: false;
-    reason: "gh-missing" | "gh-auth" | "gh-timeout" | "gh-said-no" | "malformed";
-    message: string;
-};
-/** `gh repo view` — nothing is written on ANY preview outcome. */
-export declare function previewGithubRepo(owner: string, name: string): Promise<PreviewOutcome>;
-export type RepoListing = {
-    nameWithOwner: string;
-    isPrivate: boolean;
-    /** ISO stamp of the last push, "" when GitHub omitted it. */
-    updatedAt: string;
-    description: string;
-};
-export type ListOutcome = {
-    ok: true;
-    repos: RepoListing[];
-} | {
-    ok: false;
-    reason: "gh-missing" | "gh-auth" | "gh-timeout" | "gh-said-no" | "malformed";
-    message: string;
-};
-/**
- * `gh repo list` — the signed-in account's repositories, read-only, so the
- * projects screen can OFFER them instead of making the operator type
- * owner/name from memory. Same discipline as the preview: gh's answer is
- * DATA — every identity is re-parsed through the strict parser and rows
- * that fail it are dropped, never rendered. Nothing is written on any
- * outcome.
- */
-export declare function listGithubRepos(limit?: number): Promise<ListOutcome>;
-export type CloneOutcome = {
-    ok: true;
-    target: string;
-} | {
-    ok: false;
-    reason: "exists" | "gh-missing" | "gh-auth" | "gh-timeout" | "clone-failed" | "verify-failed" | "residual";
-    message: string;
-};
-/**
- * The claim-first clone (findings 6/11/23): mkdir the FINAL target
- * exclusively — EEXIST loses the race with NOTHING written — then clone
- * into it. Cleanup removes the target only because THIS call created it,
- * and only after the tree is proven dead; on doubt the residual is named.
- */
-export declare function cloneGithubRepo(nameWithOwner: string, root: string, gitVerify: (cwd: string) => Promise<{
-    code: number;
-    stdout: string;
-}>): Promise<CloneOutcome>;

package/dist/one-step-chat-schema.d.ts

@@ -1,22 +0,0 @@
-/**
- * v159: one-step start from chat (docs/plans/one-step-chat.md). Adds only: a saved row reads as it did. Kept beside
- * nothing else so the update road can read the lists without the store, and so the version is easy to renumber.
- *
- * - `fast_preview.turn`: the lead turn a chat start's preview was prepared in (fast-start.ts prepareChatStart). Saved
- *   rows read NULL; a chat preview without a turn is unusable, and the form's previews never have one.
- * - `chat_typed_start` (C5): a typed yes to a Start card, recorded with the inbound message in the transaction that saves
- *   it (typed-start.ts): which card it answered (the proposal and the chat message that carried it), the card's action
- *   stamp then, how it was tied to the card (`reply` to it, or the `next` message after it), and once settled, the
- *   outcome and the task it started. A new table: nothing saved changes. `proposal` is a plain number, not a reference:
- *   the record has to outlive its card. Ending the chat deletes the card's proposal, and a yes already recorded for it
- *   must still be answered by Toolroll ("didn't start anything") and never handed to the lead as a new message. Proposal
- *   ids are never reused (AUTOINCREMENT), so a kept number can't come to name another card.
- */
-export declare const V159_SCHEMA = "\nCREATE TABLE IF NOT EXISTS chat_typed_start (\n  provider     TEXT NOT NULL CHECK (provider IN ('telegram')),\n  event        TEXT NOT NULL,\n  proposal     INTEGER NOT NULL,\n  card_message TEXT NOT NULL,\n  stamp        TEXT NOT NULL,\n  how          TEXT NOT NULL CHECK (how IN ('reply', 'next')),\n  created      TEXT NOT NULL,\n  outcome      TEXT CHECK (outcome IS NULL OR outcome IN ('started', 'refused', 'not-counted')),\n  task_id      TEXT,\n  finished     TEXT,\n  PRIMARY KEY (provider, event),\n  FOREIGN KEY (provider, event) REFERENCES chat_event(provider, id)\n);\nCREATE INDEX IF NOT EXISTS chat_typed_start_proposal ON chat_typed_start (proposal);\n";
-export declare const V159_ADDED_COLUMNS: Readonly<Record<string, Readonly<Record<string, {
-    definition: string;
-    saved: string;
-}>>>>;
-export declare const V159_TABLES: readonly ["chat_typed_start"];
-/** The v159 migration's steps, in order (a test seam may stop after each). */
-export declare const V159_STEPS: readonly ["one-step-chat-tables", "one-step-chat-columns"];

package/dist/openrouter-models.d.ts

@@ -1,34 +0,0 @@
-import { type Html } from "./html.js";
-export type OpenRouterModel = {
-    id: string;
-    name: string;
-    context: number | null;
-    tools: boolean;
-    input: number | null;
-    output: number | null;
-    cachedInput: number | null;
-    extraCharges: boolean;
-    conditionalPricing: boolean;
-    /** Unix seconds when OpenRouter listed it — the closest thing to a release date. */
-    created: number | null;
-};
-export type OpenRouterModels = {
-    ok: true;
-    models: OpenRouterModel[];
-    source: "public" | "account";
-    checkedAt: string;
-} | {
-    ok: false;
-    problem: string;
-};
-export declare function parseOpenRouterModels(data: unknown): OpenRouterModel[] | null;
-export declare function fetchOpenRouterModels(key: string | null, fetcher?: typeof fetch): Promise<OpenRouterModels>;
-/** One bounded cache per console. A changed/removed key cannot reuse another account's list. */
-export declare function openRouterModelsCache(fetcher?: typeof fetch): ((key: string | null, refresh?: boolean) => Promise<OpenRouterModels>) & {
-    known: (key: string | null) => OpenRouterModels | null;
-};
-export declare function modelDollars(amount: number | null): string;
-/** `refreshAction`: where the Refresh models button posts (the picker sits inside a form); a page never fetches. */
-export declare function openRouterPicker(catalog: OpenRouterModels, selected: string | null, refreshAction: string): Html;
-/** Only filters already-rendered options; credentials never enter this script. */
-export declare function openRouterPickerScript(): string;

package/dist/operate-remote-arguments.d.ts

@@ -1,36 +0,0 @@
-/** The audited remote argument vocabulary. Unlisted flags and extra positionals never dispatch.
- * Keep scalar inputs explicit: adding a resource argument requires classifying it here first.
- * Indices below are relative to the command row (after `task review`, `flows trigger add`, etc.). */
-import type { Store } from './store.js';
-type Kind = 'value' | 'task' | 'run' | 'review' | 'flow' | 'trigger' | 'trigger-json' | 'steps' | 'refused' | 'step-up';
-type Argument = {
-    name: string;
-    kind: Kind;
-    optional: boolean;
-    rest: boolean;
-};
-export type RemoteArguments = {
-    positionals: readonly Argument[];
-    flags: ReadonlyMap<string, Kind>;
-};
-/** All remotely allowed rows, including those with no resource references. Credentials and file-output
- * flags are refused by the outer boundary. `source` on memory is provenance text; on revise it is a scope
- * digest. Neither dereferences a conversation, task or proposal. Creation IDs are never looked up. */
-export declare const REMOTE_ARGUMENTS: ReadonlyMap<string, RemoteArguments>;
-export declare const REMOTE_NOT_FOUND: {
-    readonly ok: false;
-    readonly reason: 'not-found';
-    readonly message: 'Not found.';
-};
-type Result = {
-    ok: true;
-    repo: string | null;
-    taskId: string | null;
-} | {
-    ok: false;
-    reason: string;
-    message: string;
-};
-/** Read-only authorization of every supplied reference, before the handler can disclose or mutate it. */
-export declare function remoteArgumentsOf(store: Store, allows: (repo: string | null) => boolean, invocation: string, positional: readonly string[], flags: ReadonlyMap<string, string | true>, named: string | null, files: Readonly<Record<string, string>>): Result;
-export {};

package/dist/operate-remote.d.ts

@@ -1,98 +0,0 @@
-import type { Store } from "./store.js";
-import type { LedgerSource } from "./action-ledger.js";
-import { type CommandRow } from "./surface.js";
-/** Who a remote call is, as the transport proved it from an `so_` token. */
-export type Principal = {
-    kind: "person";
-    account: string;
-    /** The account's credential generation when the token was checked. */
-    generation: number;
-    scope: "read" | "act";
-    tokenId: string;
-    /** The projects the person may use through this token (null: all of them): their access, narrowed by the token's limit (tokenProjects). */
-    projects: string[] | null;
-};
-export type RemoteSource = Extract<LedgerSource, "api" | "mcp">;
-export { activeRemote, withRemote, type RemoteRun } from "./remote-run.js";
-/** Thrown where a remote run reaches something only this machine's owner may use; the command ends refused. */
-export declare class RemoteRefusal extends Error {
-    readonly reason: string;
-    constructor(reason: string, message: string);
-}
-export declare const REMOTE_MESSAGES: {
-    readonly "step-up": "Approvals, people and policy changes aren't taken from a token: approve in the console or chat.";
-    readonly no: "That command only runs on the server's own machine, not for a remote caller.";
-    readonly unknown: "That isn't a command a remote caller can run.";
-    readonly read: "Your token reads only. Use an act token for this command.";
-    readonly stale: "Your sign-in changed since this token was checked. Sign in again.";
-    readonly credential: "Remote commands run as your token's person: leave out --as, --token, --db and other credential or file flags.";
-    readonly project: "Name a project you have access to with --repo (its path on the server).";
-    readonly installation: "This command covers every project; it needs access to all projects.";
-    readonly files: "Send that file with the request; the server reads no paths of its own for you.";
-};
-/**
- * How a "yes" command finds the project it touches, before it runs. Any --repo given is checked too.
- *  installation — reads or acts across every project: only for someone with access to all of them.
- *  listing — lists across projects: someone with access to all of them sees everything, as locally; anyone else
- *    sees only their own projects (the run's `lens`), with every count taken over those projects alone.
- *  repo — needs --repo, naming a project the server knows and the person may use.
- *  references — the audited arguments resolve every resource to its stored project before dispatch.
- *  self — the command already narrows to the person's own projects (their access is passed in).
- *  global — touches no project's data.
- */
-export type RemoteScope = {
-    kind: "installation";
-} | {
-    kind: "listing";
-} | {
-    kind: "repo";
-} | {
-    kind: "references";
-} | {
-    kind: "self";
-} | {
-    kind: "global";
-};
-/** Every "yes" row's scope. The remote test holds this to the guide's "yes" rows exactly. */
-export declare const REMOTE_SCOPES: ReadonlyMap<string, RemoteScope>;
-/**
- * Why each "installation" row still needs access to every project rather than listing a person's own. The remote
- * test holds this to the table's "installation" rows exactly, so a newly allowed cross-project command has to be
- * scoped as a listing or stated here; it cannot skip project scoping by omission.
- */
-export declare const REMOTE_ALL_PROJECTS_ONLY: ReadonlyMap<string, "installation-wide" | "not yet scoped">;
-/** The projects a listing or task reference may disclose: null for someone with access to all of them. */
-export declare function remoteLensOf(store: Store, scope: RemoteScope, allows: (repo: string | null) => boolean): readonly string[] | null;
-/** Flags a remote caller never passes: who they are comes from the token, and the server reads and writes no paths for them. */
-export declare const REMOTE_REFUSED_FLAGS: ReadonlySet<string>;
-/**
- * The guide row an argv is: the longest invocation its command and leading positionals spell. A command with no
- * row of its own runs nowhere remotely (backup, restore, storage, ledger, policy and the rest).
- */
-export declare function remoteRowOf(command: string, positional: readonly string[]): CommandRow | null;
-/**
- * Re-prove the principal now, against the store: the account still stands at the same generation, the token is
- * the person's, unrevoked and unexpired, and the scope is no wider than the token's or the person's role.
- */
-export declare function reproveRemote(store: Store, principal: Principal, now: Date): {
-    ok: true;
-    scope: "read" | "act";
-    tokenName: string;
-} | {
-    ok: false;
-};
-/** Whether the person may use `repo`: inside their token's projects and their account's current access. Null is "every project". */
-export declare function remoteAllows(store: Store, principal: Principal, repo: string | null): boolean;
-/** The project a command touches, or why it may not run: --repo must be a project the server knows, by its exact path. */
-export declare function remoteProjectOf(store: Store, run: {
-    allows: (repo: string | null) => boolean;
-}, scope: RemoteScope, positional: readonly string[], repos: readonly string[], invocation: string, flags: ReadonlyMap<string, string | true>, files: Readonly<Record<string, string>>): {
-    ok: true;
-    repo: string | null;
-    taskId: string | null;
-} | {
-    ok: false;
-    reason: string;
-    message: string;
-};
-export declare function remoteSecret(): string;