toolroll 0.9.51 → 0.9.53

package/dist/mate-doors.js

@@ -23,7 +23,7 @@ import { readProjectAccess } from "./project-access.js";
 import { TeamLeads } from './team-leads.js';
 import { fileTaskProposal } from "./proposal.js";
 import { proposeGuarded } from "./scope.js";
-import { isRiskLevel, isTaskSize, PHASES, riskTitle, specWords } from "./phase-routing.js";
+import { isTaskSize, PHASES, specWords } from "./phase-routing.js";
 import { isProviderId } from "./provider.js";
 import { applyChatReview } from "./chat-review.js";
 import { applyChatTaskAction } from "./chat-task-actions.js";
@@ -340,9 +340,9 @@ function executeProposal(store, actor, kind, payload, now, options) {
     if (ref === null || !admitted(ref.repo))
         return refuse("unknown-task", "no such task in your projects");
     if (kind === "task_action") {
-        // An attended surface (the console, the paired phone) honours the
+        // A person's own surface (the console, the paired phone) honours the
         // operator's own automatic-approval mode; the CLI keeps its ceremony.
-        const result = applyChatTaskAction(store, actor, payload, now, options.via !== "cli", { held: options.held, deferSignal: options.deferSignal, via: options.via, ...(options.evidenceRoot === undefined ? {} : { evidenceRoot: options.evidenceRoot }) });
+        const result = applyChatTaskAction(store, actor, payload, now, options.via !== "cli", { deferSignal: options.deferSignal, via: options.via, ...(options.evidenceRoot === undefined ? {} : { evidenceRoot: options.evidenceRoot }) });
         return result.ok ? { ok: true, kind, taskId: result.taskId, said: result.said } : refuse("stale", result.message);
     }
     if (kind === "review") {
@@ -410,14 +410,12 @@ function executeProposal(store, actor, kind, payload, now, options) {
             return refuse("refused", "this proposal carries no guidance");
         const filed = store.fileSteerNote(taskId, verifiedAuthor(actor.name), note, now);
         if (!filed.ok) {
-            const said = filed.reason === "contest-open"
-                ? "agents are racing on this task — guidance can be added after the comparison finishes"
-                : filed.reason === "task-finished"
-                    ? "this task is finished — guidance has no next attempt to reach"
-                    : filed.reason === "invalid-note"
-                        ? (filed.problem ?? "that guidance could not be saved")
-                        : "no such task";
-            return refuse(filed.reason === "contest-open" ? "contest-open" : "refused", said);
+            const said = filed.reason === "task-finished"
+                ? "this task is finished — guidance has no next attempt to reach"
+                : filed.reason === "invalid-note"
+                    ? (filed.problem ?? "that guidance could not be saved")
+                    : "no such task";
+            return refuse("refused", said);
         }
         const taskName = payloadString(payload, "taskTitle") ?? taskId;
         return { ok: true, kind, said: `Guidance saved for ${taskName}'s next attempt`, taskId };
@@ -437,9 +435,6 @@ function executeProposal(store, actor, kind, payload, now, options) {
             (blockerTask.state !== "failed" && blockerTask.state !== "cancelled")) {
             return refuse("stale", "the task it was waiting for changed since this was proposed — look again");
         }
-        if (store.openContestFor(ref.id) !== null) {
-            return refuse("contest-open", "a tournament is running on the dependent task — let it finish first");
-        }
         if (operation === "retry") {
             const blockerRef = store.lookupRef(blocker);
             if (blockerTask.state !== "failed" || blockerRef === null || !admitted(blockerRef.repo)) {
@@ -480,25 +475,22 @@ function executeProposal(store, actor, kind, payload, now, options) {
         // authenticated route-edit transaction — the same door the task page
         // uses. Re-proved here, inside it: the actor's standing (the edit's
         // own authenticate hook), the digest the card was drafted against
-        // (CAS — a scope rewritten meanwhile refuses), a live claim or open
-        // contest (refused inside the store), and — for an agent — that the
+        // (CAS — a scope rewritten meanwhile refuses), a live claim (refused
+        // inside the store), and — for an agent — that the
         // pair is STILL one of the configured, role-valid choices right now.
         // Nothing the mate wrote becomes authority: only a configured pair,
         // recorded under the operator's name, ever reaches the route.
-        const risk = payload["risk"];
         const phase = payload["phase"];
         const clear = payload["clear"] === true;
         const provider = payloadString(payload, "provider");
         const model = payloadString(payload, "model");
         const size = payload["size"];
         const risky = payload["risky"];
-        if (risk !== undefined && !isRiskLevel(risk))
-            return refuse("refused", "this proposal carries an unknown risk level");
         if (size !== undefined && (!isTaskSize(size) || typeof risky !== "boolean"))
             return refuse("refused", "this proposal carries an unknown size");
         if (phase !== undefined && (typeof phase !== "string" || !PHASES.includes(phase)))
             return refuse("refused", "this proposal names an unknown role");
-        if (risk === undefined && phase === undefined && size === undefined)
+        if (phase === undefined && size === undefined)
             return refuse("refused", "this proposal changes nothing about the agents");
         let override;
         if (typeof phase === "string") {
@@ -517,7 +509,6 @@ function executeProposal(store, actor, kind, payload, now, options) {
                 const standing = reproveApprover(store, actor);
                 return standing.ok ? { ok: true } : { ok: false, reason: `your approver standing changed (${standing.reason}) — sign in again` };
             },
-            ...(isRiskLevel(risk) ? { risk } : {}),
             ...(isTaskSize(size) && typeof risky === "boolean" ? { size: { size, risky } } : {}),
             ...(override === undefined ? {} : { override }),
             expectDigest: payloadString(payload, "sawDigest"),
@@ -533,8 +524,6 @@ function executeProposal(store, actor, kind, payload, now, options) {
                 return refuse("stale", "the scope was rewritten since this was proposed — look again");
             if (edited.reason === "live-claim")
                 return refuse("claimed", "this task is being built right now");
-            if (edited.reason === "contest-open")
-                return refuse("contest-open", "a tournament is running on this task — let it finish first");
             if (edited.reason === "unauthenticated")
                 return refuse("standing", edited.detail);
             if (edited.reason === "no-task")
@@ -548,7 +537,6 @@ function executeProposal(store, actor, kind, payload, now, options) {
         const taskName = payloadString(payload, "taskTitle") ?? taskId;
         const roleWord = typeof phase === "string" ? { plan: "planner", build: "builder", repair: "repair", review: "reviewer" }[phase] ?? phase : null;
         const changed = [
-            ...(isRiskLevel(risk) ? [`risk is now ${riskTitle(risk).toLowerCase()}`] : []),
             ...(isTaskSize(size) ? [`it is now a ${size}${risky === true ? ", risky" : ""} change`] : []),
             ...(roleWord === null ? [] : clear ? [`the ${roleWord} choice was cleared — the recommendation stands again`] : [`the ${roleWord} is now ${specWords({ provider: provider, model: model })}`]),
         ];
@@ -586,7 +574,6 @@ function refuseFromReason(kind, reason) {
         changed: { reason: "stale", said: "the scope was rewritten since this was proposed — look again" },
         claimed: { reason: "claimed", said: "this task is being built right now" },
         "not-queued": { reason: "not-queued", said: "only queued work can move — this task is not waiting in the queue" },
-        "contest-open": { reason: "contest-open", said: "a tournament is running on this task — let it finish first" },
         "unknown-task": { reason: "unknown-task", said: "no such task" },
     };
     const typed = known[reason];

package/dist/mate-tools.d.ts

@@ -96,8 +96,8 @@ export declare function decisionOver(store: Store, repos: readonly string[], dec
 export declare function queueOver(store: Store, repo: string, now: Date): Record<string, unknown>;
 export declare const ISO_STAMP_RULE: RegExp;
 /**
- * THE AGENTS A TASK RUNS UNDER, as chat reads them (v48): the declared
- * risk and what it means, the same one-line summary the task page and CLI
+ * THE AGENTS A TASK RUNS UNDER, as chat reads them (v48): the task's size,
+ * the same one-line summary the task page and CLI
  * print, each role's exact agent with its reasons, the standing of those
  * agents (approved / awaiting approval / recommended), and — for a
  * proposal — only the configured, role-valid choices an operator could

package/dist/mate-tools.js

@@ -43,7 +43,7 @@ import { parseAcceptanceCriteria } from "./scope.js";
 import { diagnoseTaskDispatch, withDispatchDiagnoses } from "./dispatch.js";
 import { agentChoicesFor, routeOfTask, INSTALLATION_SCOPE } from "./agentconfig.js";
 import { isNewModel, modelWords, priceWords, runtimeStates, seenModels } from "./model-catalog.js";
-import { agentsSummary, chosenWords, PHASES, postureWords, RISK_CHOICES, riskConsequence, riskTitle, routeProblems, sameSpec, sizeSourceWords, sizeWords, specWords } from "./phase-routing.js";
+import { agentsSummary, chosenWords, PHASES, postureWords, routeProblems, sameSpec, sizeSourceWords, sizeWords, specWords } from "./phase-routing.js";
 import { TOOL_CATALOG, discoverTools, projectToolsOf, secretsSetFor, toolCommandLine, toolStanding } from "./project-tools.js";
 import { deciderOf, durationWords, FLOW_KIND_WORDS, FLOW_TEMPLATES, flowFromSteps, stepsFor, withKeptSteps } from "./flows.js";
 import { parseContract, toModelSchema } from "./contracts/contract.js";
@@ -320,8 +320,8 @@ function scopeStandingOf(store, taskId) {
 const ROLE_WORD = { plan: "planner", build: "builder", repair: "repair", review: "reviewer" };
 const ROLE_OF_WORD = { planner: "plan", plan: "plan", builder: "build", build: "build", repair: "repair", reviewer: "review", review: "review" };
 /**
- * THE AGENTS A TASK RUNS UNDER, as chat reads them (v48): the declared
- * risk and what it means, the same one-line summary the task page and CLI
+ * THE AGENTS A TASK RUNS UNDER, as chat reads them (v48): the task's size,
+ * the same one-line summary the task page and CLI
  * print, each role's exact agent with its reasons, the standing of those
  * agents (approved / awaiting approval / recommended), and — for a
  * proposal — only the configured, role-valid choices an operator could
@@ -334,14 +334,11 @@ export function agentsOver(store, taskId, now) {
         return null;
     const routed = routeOfTask(store, taskId, ref, now);
     const scope = store.getScope(taskId);
-    const risk = ref.riskLevel ?? scope?.riskLevel ?? "routine";
-    const editable = !store.hasLiveClaim(ref.id, now) && store.activeTournamentTerms(ref.id) === null;
-    const editableWhy = store.hasLiveClaim(ref.id, now) ? "this task is running — its agents cannot change under a live claim" : store.activeTournamentTerms(ref.id) !== null ? "tournament terms decide the agents while the contest is open" : null;
+    const editable = !store.hasLiveClaim(ref.id, now);
+    const editableWhy = store.hasLiveClaim(ref.id, now) ? "this task is running — its agents cannot change under a live claim" : null;
     const base = {
         task: taskId,
-        risk: { level: risk, title: riskTitle(risk), consequence: riskConsequence(risk) },
         size: ref.sizing == null ? null : { size: ref.sizing.size, risky: ref.sizing.risky, reason: ref.sizing.reason, source: sizeSourceWords(ref.sizing.source) },
-        riskChoices: RISK_CHOICES.map(one => ({ risk: one.risk, title: one.title, consequence: one.consequence })),
         editable,
         editableWhy,
         approval: scope === null ? "none" : scopeStandingOf(store, taskId),
@@ -1536,7 +1533,7 @@ const MATE_TOOL_HANDLERS = {
         },
     },
     get_agents: {
-        description: "Read current roles, risk, approval, configured alternatives and the organisation policy (allowed providers, models, tools, permission ceiling; changed only on Settings → Policy) before propose_agents.",
+        description: "Read current roles, size, approval, configured alternatives and the organisation policy (allowed providers, models, tools, permission ceiling; changed only on Settings → Policy) before propose_agents.",
         handle: (ctx, args) => {
             const taskId = taskIdOf(args);
             if (taskId === null)
@@ -1697,8 +1694,6 @@ const MATE_TOOL_HANDLERS = {
                 return { ok: false, message: `guidance is plain text up to ${LIMITS.note} characters` };
             if (task.state === "done" || task.state === "cancelled")
                 return { ok: false, message: "that task is finished, so guidance has no next attempt to reach" };
-            if (ctx.store.openContestFor(ref.id) !== null)
-                return { ok: false, message: "agents are racing on that task — wait until the comparison finishes" };
             const id = ctx.draft("steer", { task: taskId, taskTitle: task.title, repoId: ref.repoId, note: args["note"] });
             if (id === null)
                 return tooMany();
@@ -1790,14 +1785,13 @@ const MATE_TOOL_HANDLERS = {
         },
     },
     propose_agents: {
-        description: "Read get_agents. Change risk, size (small: fast model, no plan; large or risky: strongest agents), configured role model, or clear override; stales approval, refuses running work.",
+        description: "Read get_agents. Change size (small: fast model, no plan; large or risky: strongest agents), configured role model, or clear override; stales approval, refuses running work.",
         handle: (ctx, args) => {
             const taskId = taskIdOf(args);
             const ref = taskId === null ? null : admittedRef(ctx, taskId);
             const task = taskId === null ? null : ctx.store.getTask(taskId);
             if (taskId === null || ref === null || task === null)
                 return notFound();
-            const risk = args["risk"];
             const roleWord = args["role"];
             const phase = roleWord === undefined ? null : typeof roleWord === "string" ? ROLE_OF_WORD[roleWord] ?? null : null;
             if (roleWord !== undefined && (phase === null || phase === "review"))
@@ -1808,8 +1802,8 @@ const MATE_TOOL_HANDLERS = {
             const risky = args["risky"];
             const sized = ctx.store.refForId(ref.id)?.sizing ?? null;
             const sizeChange = size === undefined && risky === undefined ? null : { size: size ?? sized?.size ?? "medium", risky: risky ?? sized?.risky ?? false };
-            if (risk === undefined && phase === null && sizeChange === null)
-                return { ok: false, message: "say what changes: a risk, a size, or a role with an agent (or clear: true)" };
+            if (phase === null && sizeChange === null)
+                return { ok: false, message: "say what changes: a size, or a role with an agent (or clear: true)" };
             if (phase !== null && !clear && (agent === null || typeof agent !== "object"))
                 return { ok: false, message: "a role change names an agent from get_agents, or clear: true" };
             if (phase === null && (clear || agent !== undefined))
@@ -1818,8 +1812,6 @@ const MATE_TOOL_HANDLERS = {
                 return { ok: false, message: "why is plain text ≤400" };
             if (ctx.store.hasLiveClaim(ref.id, ctx.now))
                 return { ok: false, message: "a worker is building that task right now — its agents cannot change under it" };
-            if (ctx.store.activeTournamentTerms(ref.id) !== null)
-                return { ok: false, message: "tournament terms decide this task's agents while the contest is open" };
             const view = agentsOver(ctx.store, taskId, ctx.now);
             if (view === null)
                 return notFound();
@@ -1840,19 +1832,16 @@ const MATE_TOOL_HANDLERS = {
                 }
                 chosen = { provider: match.provider, model: match.model };
                 const currentLeg = view["agents"].find(one => one.role === ROLE_WORD[phase]);
-                if (currentLeg !== undefined && sameSpec(currentLeg, chosen) && risk === undefined)
+                if (currentLeg !== undefined && sameSpec(currentLeg, chosen))
                     return { ok: false, message: `${specWords(chosen)} already runs the ${ROLE_WORD[phase]} role` };
             }
             if (phase !== null && clear && !(current?.routeOverrides ?? []).some(one => one.phase === phase)) {
                 return { ok: false, message: `nobody chose a ${ROLE_WORD[phase]} for this task by hand — there is nothing to clear` };
             }
-            if (risk !== undefined && phase === null && risk === view["risk"].level)
-                return { ok: false, message: `this task is already declared ${riskTitle(risk).toLowerCase()}` };
             const id = ctx.draft("agents", {
                 task: taskId,
                 taskTitle: task.title,
                 repoId: ref.repoId,
-                ...(risk === undefined ? {} : { risk, riskConsequence: riskConsequence(risk) }),
                 ...(sizeChange === null ? {} : { size: sizeChange.size, risky: sizeChange.risky }),
                 ...(phase === null ? {} : { phase, role: ROLE_WORD[phase] }),
                 ...(chosen === null ? {} : { provider: chosen.provider, model: chosen.model }),
@@ -1870,7 +1859,6 @@ const MATE_TOOL_HANDLERS = {
                     proposal: id,
                     kind: "agents",
                     task: taskId,
-                    ...(risk === undefined ? {} : { risk }),
                     ...(sizeChange === null ? {} : { size: sizeChange.size, risky: sizeChange.risky }),
                     ...(phase === null ? {} : { role: ROLE_WORD[phase], ...(chosen === null ? { clear: true } : { agent: chosen }) }),
                     awaiting: view["approval"] === "approved" ? "the operator's confirmation — the current approval will then need renewing" : "the operator's confirmation",

package/dist/modes.d.ts

@@ -27,7 +27,8 @@ export type ModeTerms = {
     /** Explicit opt-in: a verified planner may approve a plan that preserves
      * the signer's pre-authorized filed contract and execution terms exactly. */
     planAuto: boolean;
-    /** Attended mint without the per-mint password — signer only (D8). */
+    /** Historical signed field (watched sessions without a per-session
+     * password, removed in v115); new modes leave it false and nothing reads it. */
     quickMint: boolean;
     /** Historical signed field; new modes leave it false and no worker consumes
      * it. Automatic review is the project's review switch (review-switch.ts),
@@ -47,15 +48,13 @@ export type ModeTerms = {
      * "automerge" = the mode's signature substitutes for the per-merge
      * human authorization, through the grant machinery only (D1/E1). */
     publication: "notify" | "automerge";
-    /** Whether this mode AUTHORIZES automatic PAID fallback (a
-     * subscription->api-key or api-key->api-key switch that spends). v30,
-     * fallback chains R8: legacy modes default FALSE — a paid substitution
-     * must be an explicit, freshly-signed grant. A subscription->subscription
-     * fallback is not "paid" and needs no grant. */
+    /** Historical signed term (v30-v114: a grant for automatic paid
+     * fallback; fallback chains were removed in v115). Always false on new
+     * modes; retained for digest and audit compatibility. */
     allowPaidFallback: boolean;
     /** Whether this mode AUTHORIZES the bounded repair loop to draft AND
      * auto-approve its own repair attempts (v40, evidence-review-v1) — the
-     * allowPaidFallback precedent, verbatim: legacy modes default FALSE, a
+     * same precedent as the old paid-fallback grant: legacy modes default FALSE, a
      * new authority is never inherited, only freshly signed. Without it, a
      * short/refuted run with named unresolved criteria still gets exactly
      * one drafted repair — it simply waits unapproved. */

package/dist/modes.js

@@ -24,7 +24,7 @@ export function presetTerms(name, absoluteExpiry) {
             permissionDefault: "safe",
             autoApproveFiling: false,
             planAuto: false,
-            quickMint: true,
+            quickMint: false,
             reviewAuto: false,
             reviewRetryAuto: false,
             perAttemptBudgetMicrousd: null,
@@ -42,7 +42,7 @@ export function presetTerms(name, absoluteExpiry) {
             permissionDefault: "escalated",
             autoApproveFiling: true,
             planAuto: false,
-            quickMint: true,
+            quickMint: false,
             reviewAuto: false,
             reviewRetryAuto: false,
             perAttemptBudgetMicrousd: null,
@@ -108,10 +108,8 @@ export function modeTermsFromJson(json) {
         measured !== undefined &&
         runs !== undefined &&
         (t["publication"] === "notify" || t["publication"] === "automerge") &&
-        // allowPaidFallback: a legacy mode has NO such field — that MUST read
-        // as false (R8: a paid substitution is only ever an explicit,
-        // freshly-signed grant). A present value must be a strict boolean;
-        // anything else is a bad envelope, null.
+        // allowPaidFallback (historical): absent reads as false; a present
+        // value must be a strict boolean, anything else is a bad envelope.
         (t["allowPaidFallback"] === undefined || typeof t["allowPaidFallback"] === "boolean") &&
         // repairAuto/repairMaxAttempts: the SAME precedent, verbatim (v40). A
         // legacy mode has NO such fields — that MUST read as false/0, never
@@ -155,11 +153,8 @@ export function modeWords(terms) {
         terms.autoApproveFiling
             ? "every scope YOU file — signed-in console or credentialed CLI — is approved the moment you file it; while this mode is active, your signed-in browser session becomes a spend credential for this repository"
             : "filings still wait for their own approval ceremony",
-        terms.quickMint
-            ? "you start watched sessions without re-typing your password — the confirm screen still shows every term"
-            : "watched sessions keep the per-session password",
         terms.planAuto
-            ? "plans for your pre-authorized filings auto-approve only when the goal, exclusions, paths, acceptance criteria, risk, budget, and agent route remain exactly unchanged; provide a goal, paths and acceptance criteria upfront; amendments and unresolved questions still wait for you"
+            ? "plans for your pre-authorized filings auto-approve only when the goal, exclusions, paths, acceptance criteria, budget, and agent route remain exactly unchanged; provide a goal, paths and acceptance criteria upfront; amendments and unresolved questions still wait for you"
             : "planner-generated plans wait for your approval",
         terms.name === "hands-off"
             ? "automatic review is on for this project unless you turn it off (`toolroll review off --repo <path>`): each finished build whose check passes (or that finishes, with checks Off) gets one read-only review by the project's review agent; a HIGH finding sends it back once as a revision filed under this mode, a HIGH on that revision comes to you, MEDIUM and LOW findings come to you as suggested follow-ups, and a review that fails or times out never holds the work — it reaches you marked not reviewed"
@@ -178,9 +173,8 @@ export function modeWords(terms) {
         terms.publication === "automerge"
             ? "pull requests merge THEMSELVES when CI is seen green on the exact commit — you are told afterwards (requires a merge-capable publication grant)"
             : "merges wait for you — even where a grant could merge on its own, while this mode is active",
-        terms.allowPaidFallback
-            ? "when a subscription is exhausted mid-build, an approved fallback that spends (an API key) may run automatically — spend moves to that account"
-            : "automatic fallback never switches to a paid API key on its own; a subscription that runs out stops and waits for you",
+        ...(terms.allowPaidFallback
+            ? ["a historical paid-fallback grant is retained on record but no longer used"] : []),
         ...(terms.repairAuto
             ? ["historical automatic repair grants are retained on record but no longer schedule work"] : []),
         ...(terms.chatApprove

package/dist/monitoring.js

@@ -24,6 +24,7 @@ export const SIGNATURE_HEADER = "x-standing-orders-signature";
 const BATCH = 200;
 const LEASE_MS = 60_000;
 const TIMEOUT_MS = 10_000;
+const CHECKPOINT_EVERY_MS = 60 * 60_000;
 /** An audit event: the ledger entry and its seal, as the stream sends it. */
 export function auditEvent(entry, instance) {
     return {
@@ -41,15 +42,34 @@ const nanos = (at) => `${BigInt(Date.parse(at)) * 1000000n}`;
 /** One pass over every destination that's set up. Returns what it sent, per destination. */
 export async function monitoringPass(store, settings, deps) {
     const sent = {};
+    const heads = [];
+    const audit = (delivered) => { if (delivered.head !== null)
+        heads.push(delivered.head); return delivered.count; };
     // A new destination gets the whole audit history; traces start from now.
     if (settings.webhook !== null)
-        sent.webhook = await deliver(store, "webhook", targetOf(settings.webhook.url), () => 0, deps, entries => postSigned(settings.webhook, entries, store, deps));
+        sent.webhook = audit(await deliver(store, "webhook", targetOf(settings.webhook.url), () => 0, deps, entries => postSigned(settings.webhook, entries, store, deps)));
     if (settings.folder !== null)
-        sent.folder = await deliver(store, "folder", targetOf(settings.folder.path), () => 0, deps, async (entries) => { appendFolder(settings.folder.path, entries, deps.instance); return entries.length; });
+        sent.folder = audit(await deliver(store, "folder", targetOf(settings.folder.path), () => 0, deps, async (entries) => { appendFolder(settings.folder.path, entries, deps.instance); return entries.length; }));
     if (settings.traces !== null)
-        sent.traces = await deliver(store, "traces", targetOf(settings.traces.endpoint), () => store.ledgerHeadId(), deps, entries => postTraces(settings.traces, entries, store, deps));
+        sent.traces = (await deliver(store, "traces", targetOf(settings.traces.endpoint), () => store.ledgerHeadId(), deps, entries => postTraces(settings.traces, entries, store, deps))).count;
+    checkpointSent(store, heads, (deps.now ?? (() => new Date()))());
     return sent;
 }
+/** The furthest head the audit stream delivered, kept as an automatic checkpoint once the whole chain verifies.
+ * Automatic checkpoints write no ledger entry, so recording one gives the stream nothing new to send (and checkpoint)
+ * next pass. At most one an hour, so a busy stream neither floods the table nor walks the whole chain every pass. */
+function checkpointSent(store, heads, now) {
+    const head = heads.reduce((best, one) => best === null || (one !== null && one.through > best.through) ? one : best, null);
+    if (head === null)
+        return;
+    const newest = store.ledgerCheckpoints(1)[0];
+    if (newest !== undefined && (newest.through >= head.through || now.getTime() - Date.parse(newest.at) < CHECKPOINT_EVERY_MS))
+        return;
+    try {
+        store.ledgerCheckpoint("system", now, { head });
+    }
+    catch { /* a busy database: the next delivery tries again */ }
+}
 /** A destination's name in its status row: a digest of its address (the address itself may carry a key). */
 export const targetOf = (address) => hex(`standing-orders/monitoring/${address}`, 16);
 /** Send what's due to one destination: hold it, start it over if it now points elsewhere, read after its cursor,
@@ -57,26 +77,30 @@ export const targetOf = (address) => hex(`standing-orders/monitoring/${address}`
 async function deliver(store, sink, target, start, deps, send) {
     const now = deps.now ?? (() => new Date());
     const at = now();
+    const none = { count: 0, head: null };
     if (!store.holdMonitoring(sink, deps.holder, at, new Date(at.getTime() + LEASE_MS)))
-        return 0;
+        return none;
     let status = store.monitoringStatus(sink)[0];
     if (status === undefined || status.target !== target) {
         store.resetMonitoring(sink, target, start());
         status = store.monitoringStatus(sink)[0];
     }
     if (status.nextTryAt != null && Date.parse(status.nextTryAt) > at.getTime())
-        return 0;
+        return none;
     const from = status.through;
     const entries = store.sealedAfter(from, BATCH);
     if (entries.length === 0)
-        return 0;
+        return none;
+    const last = entries[entries.length - 1];
     try {
         const count = await send(entries);
-        return store.monitoringDelivered(sink, deps.holder, target, from, entries[entries.length - 1].id, count, now()) ? count : 0;
+        if (!store.monitoringDelivered(sink, deps.holder, target, from, last.id, count, now()))
+            return none;
+        return { count, head: last.seal === null ? null : { through: last.id, hash: last.seal.hash } };
     }
     catch (error) {
         store.monitoringFailed(sink, deps.holder, target, error instanceof Error ? error.message : String(error), now(), new Date(now().getTime() + backoff(status.failures + 1)));
-        return 0;
+        return none;
     }
 }
 async function post(url, body, headers, deps) {

package/dist/notification-delivery.d.ts

@@ -0,0 +1,19 @@
+import type { Notification, Store } from "./store.js";
+type Claim = Notification & {
+    destination: string;
+    generation: number;
+};
+/** URLs and shell commands can contain secrets. Only a destination hash enters saved receipts. */
+export declare function notificationDestination(kind: string, target: string): string;
+/** One-release compatibility for operator-configured, installation-wide senders. Personal notifications never leave here. */
+export declare function claimNotifications(store: Store, destination: string, owner: string, now: Date): Claim[];
+export declare function finalizeNotification(store: Store, row: Claim, owner: string, outcome: {
+    ok: true;
+    receipt: string | null;
+} | {
+    ok: false;
+    error: string;
+}, now: Date): boolean;
+/** Recheck after earlier network sends: expiry or resolution must stop this send, not just its receipt. */
+export declare function notificationClaimHeld(store: Store, row: Claim, owner: string, now: Date): boolean;
+export {};

package/dist/notification-delivery.js

@@ -0,0 +1,37 @@
+import { createHash } from "node:crypto";
+/** URLs and shell commands can contain secrets. Only a destination hash enters saved receipts. */
+export function notificationDestination(kind, target) {
+    return `${kind}:${createHash("sha256").update(target).digest("hex")}`;
+}
+/** One-release compatibility for operator-configured, installation-wide senders. Personal notifications never leave here. */
+export function claimNotifications(store, destination, owner, now) {
+    return store.transact(() => {
+        const db = store.handle, stamp = now.toISOString();
+        db.prepare(`INSERT OR IGNORE INTO notification_delivery(notification, destination)
+      SELECT id, ? FROM notification WHERE resolved_at IS NULL AND recipient IS NULL`).run(destination);
+        const claims = db.prepare(`SELECT d.notification, d.claim_generation FROM notification_delivery d
+      JOIN notification n ON n.id = d.notification WHERE d.destination = ? AND n.resolved_at IS NULL AND n.recipient IS NULL
+      AND d.delivered_at IS NULL AND (d.receipt IS NULL OR d.receipt NOT LIKE 'skipped:%')
+      AND (d.claim_owner IS NULL OR d.claim_expires_at <= ?) ORDER BY n.id`).all(destination, stamp);
+        return claims.map(raw => {
+            const id = Number(raw["notification"]), generation = Number(raw["claim_generation"]) + 1;
+            db.prepare(`UPDATE notification_delivery SET claim_owner = ?, claim_expires_at = ?, claim_generation = ?
+        WHERE notification = ? AND destination = ?`).run(owner, new Date(now.getTime() + 60_000).toISOString(), generation, id, destination);
+            return { ...store.notificationById(id), destination, generation };
+        });
+    });
+}
+export function finalizeNotification(store, row, owner, outcome, now) {
+    const skipped = outcome.ok && outcome.receipt?.startsWith("skipped:");
+    return Number(store.handle.prepare(`UPDATE notification_delivery SET attempts = attempts + 1, last_attempt_at = ?,
+    delivered_at = ?, receipt = ?, last_error = ?, claim_owner = NULL, claim_expires_at = NULL
+    WHERE notification = ? AND destination = ? AND claim_owner = ? AND claim_generation = ?
+      AND claim_expires_at > ? AND delivered_at IS NULL`).run(now.toISOString(), outcome.ok && !skipped ? now.toISOString() : null, outcome.ok ? outcome.receipt : null, outcome.ok ? null : outcome.error, row.id, row.destination, owner, row.generation, now.toISOString()).changes) === 1;
+}
+/** Recheck after earlier network sends: expiry or resolution must stop this send, not just its receipt. */
+export function notificationClaimHeld(store, row, owner, now) {
+    return store.handle.prepare(`SELECT 1 FROM notification_delivery d JOIN notification n ON n.id = d.notification
+    WHERE d.notification = ? AND d.destination = ? AND d.claim_owner = ? AND d.claim_generation = ?
+    AND d.claim_expires_at > ? AND d.delivered_at IS NULL AND n.resolved_at IS NULL AND n.recipient IS NULL`)
+        .get(row.id, row.destination, owner, row.generation, now.toISOString()) !== undefined;
+}

package/dist/operate-remote-arguments.js

@@ -10,7 +10,7 @@ const args = (positionals = '', values = '', references = {}) => ({
  * digest. Neither dereferences a conversation, task or proposal. Creation IDs are never looked up. */
 export const REMOTE_ARGUMENTS = new Map([
     ...['status', 'ready', 'grants', 'gaps', 'sync', 'runner list', 'coordinator list', 'incident list',
-        'routine list', 'intake show', 'intake run', 'template list', 'webhook status', 'webhook test', 'review show',
+        'intake show', 'intake run', 'template list', 'webhook status', 'review show',
         'chat-approval show', 'chat-approval off'].map(row => [row, args()]),
     ['integrations', args('', 'saved')],
     // --person and --token-name are names compared inside the reader's own view; --token stays a refused credential.
@@ -31,7 +31,7 @@ export const REMOTE_ARGUMENTS = new Map([
     ['task next', args('id:task', 'key undo')],
     ['task steer', args('id:task', 'note')],
     ['task assign', args('id:task', 'key runner anyone')],
-    ['task scope', args('id:task', 'key goal not touches budget-usd risk acceptance candidate compare model provider race race-count race-per-usd race-total-usd repair-model')],
+    ['task scope', args('id:task', 'key goal not touches budget-usd risk acceptance candidate model provider repair-model')],
     ['task plan', args('id:task', 'key provider model')],
     ['task hold', args('id:task', 'key reason until')],
     ['task unhold', args('id:task', 'key')],
@@ -47,13 +47,9 @@ export const REMOTE_ARGUMENTS = new Map([
     ['cap list', args()], ['cap add', args('name', 'kind probe expires')],
     // These objects are installation-scoped at the outer boundary; only an all-project principal reaches them.
     ['incident resolve', args('incident')],
-    ['routine show', args('id')],
-    ['routine add', args('name', 'goal schedule acceptance ceiling budget-usd not touches require')],
-    ...['refresh', 'pause', 'resume', 'run-now'].map(action => [`routine ${action}`, args('name')]),
     ['config show', args('phase?')], ['verify show', args()],
     ['intake preview', args()], ['intake pr-comments', args('', 'limit')],
     ['template show', args('name')],
-    ['contest show', args('id')], ['contest exclude', args('contest ordinal')],
     ...['search', 'impact'].map(action => [`knowledge ${action}`, args('query', 'base')]),
     ['knowledge refresh', args('', 'base')],
     // Decision reads and supersession are already project-bound in project-memory.ts. Proposal IDs are

package/dist/operate-remote.js

@@ -43,10 +43,9 @@ export const REMOTE_SCOPES = new Map([
     ["task list", listing],
     ["runner list", installation], ["coordinator list", installation], ["outbox list", installation], ["incident list", installation], ["incident resolve", installation],
     ["cap list", repo], ["cap add", repo],
-    ...["list", "show", "add", "refresh", "pause", "resume", "run-now"].map(action => [`routine ${action}`, installation]),
     ["config show", installation], ["verify show", repo], ["intake show", installation], ["intake run", installation], ["intake preview", installation],
-    ["intake pr-comments", installation], ["template list", installation], ["template show", installation], ["contest show", installation],
-    ["contest exclude", installation], ["webhook status", installation], ["webhook test", installation], ["review show", installation],
+    ["intake pr-comments", installation], ["template list", installation], ["template show", installation],
+    ["webhook status", installation], ["review show", installation],
     ["chat-approval show", self], ["chat-approval off", self],
     // The person's own remote actions, or everyone's within their projects for an approver (remote-audit.ts).
     ["audit", self],
@@ -63,11 +62,11 @@ export const REMOTE_SCOPES = new Map([
  */
 export const REMOTE_ALL_PROJECTS_ONLY = new Map([
     // Settings, connections and acts that belong to the installation as a whole, not to any one project.
-    ...["integrations", "grants", "sync", "incident resolve", "routine add", "routine refresh", "routine pause", "routine resume", "routine run-now",
-        "config show", "intake run", "contest exclude", "webhook status", "webhook test"].map(row => [row, "installation-wide"]),
+    ...["integrations", "grants", "sync", "incident resolve",
+        "config show", "intake run", "webhook status"].map(row => [row, "installation-wide"]),
     // Cross-project lists and reads a limited person is still refused; scoping them is later work.
-    ...["runner list", "coordinator list", "outbox list", "incident list", "routine list", "routine show", "intake show", "intake preview",
-        "intake pr-comments", "template list", "template show", "contest show", "review show"].map(row => [row, "not yet scoped"]),
+    ...["runner list", "coordinator list", "outbox list", "incident list", "intake show", "intake preview",
+        "intake pr-comments", "template list", "template show", "review show"].map(row => [row, "not yet scoped"]),
 ]);
 /** The projects a listing or task reference may disclose: null for someone with access to all of them. */
 export function remoteLensOf(store, scope, allows) {

package/dist/operate.d.ts

@@ -73,10 +73,6 @@ export type OperateOptions = {
     integrationIo?: Partial<IntegrationIo>;
     /** Injected by tests: the mate's provider fetch, key environment, and stdin lines. */
     mateSeams?: MateCliSeams;
-    /** Injected by tests: a held-session coordinator, so a `tick` exercises
-     * the attended road exactly as a co-located `up` would (production wires
-     * one only inside `up`). */
-    heldCoordinator?: import("./held.js").HeldSessionCoordinator;
     /** Test seam for the short indexed wait loop. */
     waitSleep?: (milliseconds: number) => Promise<void>;
     /** Injected by tests: `onboard`'s home folder, terminal and probes. */
@@ -110,8 +106,6 @@ export declare const TASK_ACTIONS: readonly ["add", "list", "show", "wait", "sta
 export declare const PUBLISH_ACTIONS: readonly ["setup", "grant", "revoke", "status", "unblock", "rearm", "merge", "refire"];
 export declare const CONFIG_ACTIONS: readonly ["show", "set", "clear"];
 export declare const APPROVER_ACTIONS: readonly ["list", "add"];
-export declare const ROUTINE_ACTIONS: readonly ["list", "add", "show", "approve", "refresh", "pause", "resume", "run-now"];
-export declare const CONTEST_ACTIONS: readonly ["show", "exclude"];
 export declare const PEOPLE_ACTIONS: readonly ["list", "invite", "projects", "revoke"];
 export declare const KEYS_ACTIONS: readonly ["status", "set", "clear", "verify", "auth"];
 /**