toolroll 0.9.41 → 0.9.42

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Changelog
 
+## 0.9.42 — 2026-10-06
+
+- **Zod revamp, waves 3 and 4.** What comes into Toolroll from outside and
+  what it reads back from disk now goes through one schema each in
+  `src/contracts/`: console forms and JSON, CLI `--json` output, webhook,
+  GitHub, Linear, email and form payloads, OAuth replies and tool specs,
+  settings, every JSON column in the database, update and recovery journals,
+  and evidence files. All of it is read as leniently as before. Replayed
+  against real data with 0 differences: 655 runs and 984 evidence folders,
+  5,158 database rows, 7 tool connections. Console JSON and CLI `--json` bytes
+  are unchanged. Console API and CLI input are partly done; what remains is
+  listed in `docs/plans/zod-revamp.md`.
+- **Changed on purpose.** Recipe refusals start with the field's path. An
+  unknown provider is refused as `provider: unknown provider`, without
+  repeating what was typed. A sign-in that answers with an empty token says
+  it couldn't be reached instead of crashing. An update journal missing its
+  core fields (no release since 0.8.0 writes one) is refused rather than read.
+
 ## 0.9.41 — 2026-10-06
 
 - **A read-only PostHog connection works for research.** PostHog adds

package/dist/cli.js

@@ -17,7 +17,9 @@ import { fileURLToPath, pathToFileURL } from "node:url";
 import { configPath, loadRepos } from "./repos.js";
 import { addedWords, admitProject, commandLineActor, consoleRunning, proveProjectRoot, registryBeside, releaseProject } from "./project-admission.js";
 import { envValue } from "./names.js";
-import { CAPABILITIES, ENVELOPE_VERSION, capturedEnvelope, envelopeJson, onEnvelopeCaptured, resetCapturedEnvelope } from "./envelope.js";
+import { CAPABILITIES, ENVELOPE_VERSION, capturedEnvelope, onEnvelopeCaptured, resetCapturedEnvelope } from "./envelope.js";
+// Every envelope is checked against its command's schema (logged, never refused), then serialized unchanged.
+import { checkedEnvelopeJson as envelopeJson } from "./contracts/cli.js";
 import { applyClaudeCodeInstall, applyInstall, contextBlock, defaultClaudeCodeSkillDir, planClaudeCodeInstall, planInstall, } from "./skills.js";
 import { GUIDES, guideNamed } from "./guides.js";
 import { parseGithubRepo, previewGithubRepo, cloneGithubRepo, isLargeRepo } from "./onboard.js";

package/dist/coding-types.d.ts

@@ -1,29 +1,7 @@
 export type { CodingSession, CodingStatus } from './contracts/coding-workspace.js';
 import type { CodingSession } from './contracts/coding-workspace.js';
-export type CodingItem = {
-    id: string;
-    type: string;
-    text: string;
-    status: string | null;
-    clientId?: string;
-};
-export type CodingQuestion = {
-    id: string;
-    header: string;
-    question: string;
-    options: {
-        label: string;
-        description: string;
-    }[];
-};
-export type CodingRequest = {
-    id: string;
-    kind: 'command' | 'files' | 'questions';
-    method: string;
-    title: string;
-    detail: string;
-    questions: CodingQuestion[];
-};
+export type { CodingItem, CodingQuestion, CodingRequest } from './contracts/coding-activity.js';
+import type { CodingItem, CodingRequest } from './contracts/coding-activity.js';
 export type CodingSnapshot = {
     session: CodingSession;
     items: CodingItem[];

package/dist/coding-workspace.js

@@ -10,6 +10,7 @@ import { processMayBeAlive } from './process-liveness.js';
 import { createCodexCodingProvider } from './coding-provider.js';
 import { verifyCodingContext } from './coding-context.js';
 import { codingSessionDocument, parseCodingSessionDocument } from './contracts/coding-workspace.js';
+import { readCodingCustodyWitness, readCodingItem, readCodingRequest, readCodingRpcId } from './contracts/coding-activity.js';
 export class CodingActionError extends Error {
     delivery;
     sessionId;
@@ -163,8 +164,8 @@ export class CodingWorkspace {
     }
     snapshot(id, actor) {
         const session = this.get(id, actor);
-        const items = this.db.prepare('SELECT payload FROM coding_item WHERE session=? ORDER BY position').all(id).map(row => JSON.parse(String(row['payload'])));
-        const requests = this.db.prepare("SELECT payload FROM coding_request WHERE session=? AND status='pending' ORDER BY rowid").all(id).map(row => JSON.parse(String(row['payload'])));
+        const items = this.db.prepare('SELECT payload FROM coding_item WHERE session=? ORDER BY position').all(id).map(row => readCodingItem(String(row['payload'])));
+        const requests = this.db.prepare("SELECT payload FROM coding_request WHERE session=? AND status='pending' ORDER BY rowid").all(id).map(row => readCodingRequest(String(row['payload'])));
         const revision = Number(this.db.prepare('SELECT revision FROM coding_session WHERE id=?').get(id)?.['revision']);
         return { session, items, requests, revision };
     }
@@ -174,8 +175,8 @@ export class CodingWorkspace {
         const session = this.get(id, actor);
         const itemRows = this.db.prepare('SELECT payload FROM coding_item WHERE session=? ORDER BY position DESC LIMIT 101').all(id);
         const requestRows = this.db.prepare("SELECT payload FROM coding_request WHERE session=? AND status='pending' ORDER BY rowid LIMIT 51").all(id);
-        const items = itemRows.slice(0, 100).reverse().map(row => JSON.parse(String(row['payload'])));
-        const requests = requestRows.slice(0, 50).map(row => JSON.parse(String(row['payload'])));
+        const items = itemRows.slice(0, 100).reverse().map(row => readCodingItem(String(row['payload'])));
+        const requests = requestRows.slice(0, 50).map(row => readCodingRequest(String(row['payload'])));
         const revision = Number(this.db.prepare('SELECT revision FROM coding_session WHERE id=?').get(id)?.['revision']);
         return { session, items, requests, revision, truncated: itemRows.length > items.length || requestRows.length > requests.length };
     }
@@ -373,7 +374,7 @@ export class CodingWorkspace {
         }
         else if (event.method === 'item/agentMessage/delta') {
             const id = string(p['itemId']), key = `${session.id}:${id}`;
-            const prior = this.pendingItems.get(key)?.item ?? (() => { const row = this.db.prepare('SELECT payload FROM coding_item WHERE session=? AND id=?').get(session.id, id); return row ? JSON.parse(String(row['payload'])) : { id, type: 'agentMessage', text: '', status: 'inProgress' }; })();
+            const prior = this.pendingItems.get(key)?.item ?? (() => { const row = this.db.prepare('SELECT payload FROM coding_item WHERE session=? AND id=?').get(session.id, id); return row ? readCodingItem(String(row['payload'])) : { id, type: 'agentMessage', text: '', status: 'inProgress' }; })();
             prior.text += string(p['delta']);
             if (prior.text.length > 100_000)
                 prior.text = prior.text.slice(0, 100_000);
@@ -524,8 +525,8 @@ export class CodingWorkspace {
         if (!row)
             return false;
         try {
-            const c = JSON.parse(String(row['payload']));
-            if (c.host !== hostname() || !Array.isArray(c.descendants) || typeof c.observationUnknown !== 'boolean')
+            const c = readCodingCustodyWitness(String(row['payload']));
+            if (c === null || c.host !== hostname())
                 return false;
             if (provenDeadByBootChange(c))
                 return true;
@@ -688,8 +689,8 @@ export class CodingWorkspace {
         if (!session.nativeThreadId || !session.turnId || !busy.has(session.status))
             throw new CodingActionError('There is no running turn to stop.', 'rejected', id);
         for (const row of this.db.prepare("SELECT token,rpc_id,payload FROM coding_request WHERE session=? AND status='pending'").all(id)) {
-            const request = JSON.parse(String(row['payload']));
-            this.native().respond(JSON.parse(String(row['rpc_id'])), request.kind === 'questions' ? { answers: {} } : { decision: 'cancel' });
+            const request = readCodingRequest(String(row['payload']));
+            this.native().respond(readCodingRpcId(String(row['rpc_id'])), request.kind === 'questions' ? { answers: {} } : { decision: 'cancel' });
             this.db.prepare("UPDATE coding_request SET status='withdrawn' WHERE token=?").run(String(row['token']));
         }
         this.save({ ...session, status: 'stopping' });
@@ -700,11 +701,11 @@ export class CodingWorkspace {
         const row = this.db.prepare("SELECT * FROM coding_request WHERE session=? AND token=? AND status='pending'").get(id, token);
         if (!row || session.status !== 'needs-input' || !this.loaded.has(id))
             throw Error('This request is no longer waiting for an answer.');
-        const request = JSON.parse(String(row['payload']));
+        const request = readCodingRequest(String(row['payload']));
         if (!['accept', 'decline', 'cancel'].includes(decision))
             throw Error('Choose an available decision.');
         const result = request.kind === 'questions' ? { answers: decision === 'accept' ? this.validateAnswers(request, answers) : {} } : { decision };
-        this.native().respond(JSON.parse(String(row['rpc_id'])), result);
+        this.native().respond(readCodingRpcId(String(row['rpc_id'])), result);
         this.db.prepare("UPDATE coding_request SET status='answered' WHERE token=?").run(token);
         const remaining = this.db.prepare("SELECT 1 FROM coding_request WHERE session=? AND status='pending'").get(id);
         this.save({ ...session, status: remaining ? 'needs-input' : 'working' });