toolroll 0.9.55 → 0.9.57

package/dist/contracts/{teammate-turn.js → subagent-turn.js}

@@ -1,21 +1,21 @@
 /**
- * A teammate's turn (teammates.ts): one schema for the JSON Schema Claude answers in (`--json-schema`) and the reader
+ * A subagent's turn (subagents.ts): one schema for the JSON Schema Claude answers in (`--json-schema`) and the reader
  * that takes the answer back. One flat object with every field (a root union is refused by the API); fields a turn
  * does not use are "" (or [] for options).
  *
  * The text limits (TURN_LIMITS, from TEXT_LIMITS) are deliberately not in the schema: the CLI refuses an answer a few
  * characters over one whole, so they are checked after parsing and an answer over one is asked once to shorten
- * (teammate-work.ts), then kept whole. What the zone allows — which actions, which answers, a note for a send-back, a
+ * (subagent-work.ts), then kept whole. What the zone allows — which actions, which answers, a note for a send-back, a
  * question for an ask, a tool for a tool call — is checked after parsing too (`readTurn`), by path.
  *
  * A turn is kept as the step's decision (`flow_step_run.decision_json`) as it was read, so a saved one is this shape.
  */
 import { z } from "zod";
 import { parseContract, toModelSchema } from "./contract.js";
-/** What a teammate may do on one turn. A decision zone: approve, send back, or hand it to a person. A work zone: pick
+/** What a subagent may do on one turn. A decision zone: approve, send back, or hand it to a person. A work zone: pick
  * where it goes, ask its person, or say it can't. v94: "use_tool" asks for one tool call. */
 export const TURN_ACTIONS = ["approve", "send_back", "hand_off", "route", "ask", "cant", "use_tool"];
-export const teammateTurnSchema = z.object({
+export const subagentTurnSchema = z.object({
     action: z.enum(TURN_ACTIONS),
     /** route: one of the zone's answers, exactly as written. */
     answer: z.string(),
@@ -35,17 +35,17 @@ export const teammateTurnSchema = z.object({
     remember: z.string(),
 });
 /** What Claude's `--json-schema` is for a turn: the turn schema, exactly. */
-export const TURN_MODEL_SCHEMA = toModelSchema(teammateTurnSchema);
+export const TURN_MODEL_SCHEMA = toModelSchema(subagentTurnSchema);
 /** Older and plain-text turns default absent or non-text fields to "", and keep only string options. */
 export function readTurnAnswer(value) {
     if (typeof value === "object" && value !== null && !Array.isArray(value)) {
         const body = { ...value };
-        for (const key of Object.keys(teammateTurnSchema.shape)) {
+        for (const key of Object.keys(subagentTurnSchema.shape)) {
             if (key !== "action" && key !== "options" && typeof body[key] !== "string")
                 body[key] = "";
         }
         body["options"] = Array.isArray(body["options"]) ? body["options"].filter(one => typeof one === "string") : [];
         value = body;
     }
-    return parseContract(teammateTurnSchema, value);
+    return parseContract(subagentTurnSchema, value);
 }

package/dist/converse.d.ts

@@ -142,15 +142,15 @@ export type ProviderAnswer = {
  * ruling 14): a negative, fractional, or absurd usage is a malformed reply,
  * never a discount on the pinned settlement. */
 export declare function tokenCount(value: number): boolean;
-export declare const MATE_MAX_STEPS = 8;
-export declare const MATE_MAX_CALLS_PER_STEP = 4;
+export declare const LEAD_MAX_STEPS = 8;
+export declare const LEAD_MAX_CALLS_PER_STEP = 4;
 /** A tool result, measured AS EMBEDDED — the JSON-encoded string, escapes included. */
-export declare const MATE_TOOL_RESULT_CAP_BYTES = 16384;
+export declare const LEAD_TOOL_RESULT_CAP_BYTES = 16384;
 /** A tool call, measured as the serialized `{id, name, args}` — the id counts. */
-export declare const MATE_TOOL_CALL_CAP_BYTES = 2048;
-export declare const MATE_TOOL_CALL_ID_CAP_BYTES = 64;
+export declare const LEAD_TOOL_CALL_CAP_BYTES = 2048;
+export declare const LEAD_TOOL_CALL_ID_CAP_BYTES = 64;
 /** One step's assistant text; over it the reply is malformed (review finding 7). */
-export declare const MATE_STEP_TEXT_CAP_BYTES = 8192;
+export declare const LEAD_STEP_TEXT_CAP_BYTES = 8192;
 /**
  * The triangular worst case (mate arc, ruling 6; slice-1 review finding 7):
  * request s carries the base prompt plus every earlier step's calls,
@@ -160,7 +160,7 @@ export declare const MATE_STEP_TEXT_CAP_BYTES = 8192;
  * body), so each is budgeted at twice its cap — escaping at most doubles
  * a string. Each step may answer with the full output allowance.
  */
-export declare function mateWorstCaseForPrice(price: ModelPrice, baseBytes: number, caps?: {
+export declare function leadWorstCaseForPrice(price: ModelPrice, baseBytes: number, caps?: {
     steps?: number;
     callsPerStep?: number;
     resultCap?: number;
@@ -169,32 +169,32 @@ export declare function mateWorstCaseForPrice(price: ModelPrice, baseBytes: numb
 }): number;
 /** The bytes a tool result costs on the wire: its JSON string form. */
 export declare function embeddedBytes(text: string): number;
-export type MateToolSchema = {
+export type LeadToolSchema = {
     name: string;
     description: string;
     inputSchema: Record<string, unknown>;
 };
-export type MateToolCall = {
+export type LeadToolCall = {
     id: string;
     name: string;
     args: Record<string, unknown>;
 };
 /** A provider answer with tool calls allowed: text, calls, usage. */
-export type MateProviderAnswer = {
+export type LeadProviderAnswer = {
     text: string;
-    calls: MateToolCall[];
+    calls: LeadToolCall[];
     tokensIn: number;
     tokensOut: number;
     reportedCostMicrousd: number | null;
 };
-/** One message of the mate's own history, provider-neutral. */
-export type MateHistoryMessage = {
+/** One message of the lead's own history, provider-neutral. */
+export type LeadHistoryMessage = {
     role: "operator";
     text: string;
 } | {
     role: "assistant";
     text: string;
-    calls: MateToolCall[];
+    calls: LeadToolCall[];
 } | {
     role: "tool";
     callId: string;
@@ -207,36 +207,36 @@ export type MateHistoryMessage = {
  * most M per answer, each argument object under the call cap), and
  * anything else about the shape is malformed.
  */
-export declare function parseMateProviderWrapper(provider: DirectChatProviderId, bytes: Buffer): {
+export declare function parseLeadProviderWrapper(provider: DirectChatProviderId, bytes: Buffer): {
     ok: true;
-    answer: MateProviderAnswer;
+    answer: LeadProviderAnswer;
 } | {
     ok: false;
     problem: string;
 };
-/** The mate's request: system contract, the data document as the first
+/** The lead's request: system contract, the data document as the first
  * operator message, the history in provider-native shape, the tools. */
-export declare function composeMateRequest(args: {
+export declare function composeLeadRequest(args: {
     provider: DirectChatProviderId;
     model: string;
     key: string;
     system: string;
     dataDocument: string;
-    history: readonly MateHistoryMessage[];
-    tools: readonly MateToolSchema[];
+    history: readonly LeadHistoryMessage[];
+    tools: readonly LeadToolSchema[];
 }): {
     url: string;
     headers: Record<string, string>;
     body: string;
 };
-/** The mate's network call: the same transport posture as fleet chat's, the tool-capable parser at the end. */
-export declare function performMateRequest(request: {
+/** The lead's network call: the same transport posture as fleet chat's, the tool-capable parser at the end. */
+export declare function performLeadRequest(request: {
     url: string;
     headers: Record<string, string>;
     body: string;
 }, provider: DirectChatProviderId, signal: AbortSignal, fetcher?: typeof fetch): Promise<{
     ok: true;
-    answer: MateProviderAnswer;
+    answer: LeadProviderAnswer;
 } | {
     ok: false;
     problem: string;

package/dist/converse.js

@@ -357,16 +357,16 @@ export function parseAssistantEnvelope(text) {
 export function tokenCount(value) {
     return Number.isSafeInteger(value) && value >= 0 && value <= 1_000_000_000;
 }
-// ---------------------------------------------------------------- the mate
-export const MATE_MAX_STEPS = 8;
-export const MATE_MAX_CALLS_PER_STEP = 4;
+// ---------------------------------------------------------------- the lead
+export const LEAD_MAX_STEPS = 8;
+export const LEAD_MAX_CALLS_PER_STEP = 4;
 /** A tool result, measured AS EMBEDDED — the JSON-encoded string, escapes included. */
-export const MATE_TOOL_RESULT_CAP_BYTES = 16_384;
+export const LEAD_TOOL_RESULT_CAP_BYTES = 16_384;
 /** A tool call, measured as the serialized `{id, name, args}` — the id counts. */
-export const MATE_TOOL_CALL_CAP_BYTES = 2_048;
-export const MATE_TOOL_CALL_ID_CAP_BYTES = 64;
+export const LEAD_TOOL_CALL_CAP_BYTES = 2_048;
+export const LEAD_TOOL_CALL_ID_CAP_BYTES = 64;
 /** One step's assistant text; over it the reply is malformed (review finding 7). */
-export const MATE_STEP_TEXT_CAP_BYTES = 8_192;
+export const LEAD_STEP_TEXT_CAP_BYTES = 8_192;
 /**
  * The triangular worst case (mate arc, ruling 6; slice-1 review finding 7):
  * request s carries the base prompt plus every earlier step's calls,
@@ -376,12 +376,12 @@ export const MATE_STEP_TEXT_CAP_BYTES = 8_192;
  * body), so each is budgeted at twice its cap — escaping at most doubles
  * a string. Each step may answer with the full output allowance.
  */
-export function mateWorstCaseForPrice(price, baseBytes, caps = {}) {
-    const S = caps.steps ?? MATE_MAX_STEPS;
-    const M = caps.callsPerStep ?? MATE_MAX_CALLS_PER_STEP;
-    const R = caps.resultCap ?? MATE_TOOL_RESULT_CAP_BYTES;
-    const C = caps.callCap ?? MATE_TOOL_CALL_CAP_BYTES;
-    const T = caps.textCap ?? MATE_STEP_TEXT_CAP_BYTES;
+export function leadWorstCaseForPrice(price, baseBytes, caps = {}) {
+    const S = caps.steps ?? LEAD_MAX_STEPS;
+    const M = caps.callsPerStep ?? LEAD_MAX_CALLS_PER_STEP;
+    const R = caps.resultCap ?? LEAD_TOOL_RESULT_CAP_BYTES;
+    const C = caps.callCap ?? LEAD_TOOL_CALL_CAP_BYTES;
+    const T = caps.textCap ?? LEAD_STEP_TEXT_CAP_BYTES;
     const tokens = (bytes) => Math.ceil(bytes / 3);
     let input = 0;
     for (let s = 1; s <= S; s++) {
@@ -399,7 +399,7 @@ export function embeddedBytes(text) {
  * most M per answer, each argument object under the call cap), and
  * anything else about the shape is malformed.
  */
-export function parseMateProviderWrapper(provider, bytes) {
+export function parseLeadProviderWrapper(provider, bytes) {
     const parsed = strictJsonParse(bytes, WRAPPER_CAP_BYTES, 14);
     if (!parsed.ok)
         return { ok: false, problem: parsed.problem };
@@ -408,9 +408,9 @@ export function parseMateProviderWrapper(provider, bytes) {
         return { ok: false, problem: "not-an-object" };
     const readArgs = (raw) => {
         const text = typeof raw === "string" ? raw : JSON.stringify(raw ?? null);
-        if (Buffer.byteLength(text, "utf8") > MATE_TOOL_CALL_CAP_BYTES)
+        if (Buffer.byteLength(text, "utf8") > LEAD_TOOL_CALL_CAP_BYTES)
             return null;
-        const inner = strictJsonParse(Buffer.from(text, "utf8"), MATE_TOOL_CALL_CAP_BYTES, 6);
+        const inner = strictJsonParse(Buffer.from(text, "utf8"), LEAD_TOOL_CALL_CAP_BYTES, 6);
         if (!inner.ok || typeof inner.value !== "object" || inner.value === null || Array.isArray(inner.value))
             return null;
         return inner.value;
@@ -418,7 +418,7 @@ export function parseMateProviderWrapper(provider, bytes) {
     // A call is bounded WHOLE (finding 7): the id is repeated in the assistant
     // block and the result, so it is capped and counted inside the call cap.
     const readCall = (id, name, rawArgs) => {
-        if (typeof id !== "string" || id === "" || Buffer.byteLength(id, "utf8") > MATE_TOOL_CALL_ID_CAP_BYTES)
+        if (typeof id !== "string" || id === "" || Buffer.byteLength(id, "utf8") > LEAD_TOOL_CALL_ID_CAP_BYTES)
             return null;
         if (typeof name !== "string" || name === "" || name.length > 64)
             return null;
@@ -426,7 +426,7 @@ export function parseMateProviderWrapper(provider, bytes) {
         if (args === null)
             return null;
         const call = { id, name, args };
-        if (Buffer.byteLength(JSON.stringify(call), "utf8") > MATE_TOOL_CALL_CAP_BYTES)
+        if (Buffer.byteLength(JSON.stringify(call), "utf8") > LEAD_TOOL_CALL_CAP_BYTES)
             return null;
         return call;
     };
@@ -447,7 +447,7 @@ export function parseMateProviderWrapper(provider, bytes) {
         if (body["type"] !== "message")
             return { ok: false, problem: "wrong-type" };
         const content = body["content"];
-        if (!Array.isArray(content) || content.length === 0 || content.length > MATE_MAX_CALLS_PER_STEP + 1)
+        if (!Array.isArray(content) || content.length === 0 || content.length > LEAD_MAX_CALLS_PER_STEP + 1)
             return { ok: false, problem: "bad-content" };
         let text = "";
         const calls = [];
@@ -468,9 +468,9 @@ export function parseMateProviderWrapper(provider, bytes) {
                 return { ok: false, problem: "bad-block" };
             }
         }
-        if (calls.length > MATE_MAX_CALLS_PER_STEP)
+        if (calls.length > LEAD_MAX_CALLS_PER_STEP)
             return { ok: false, problem: "too-many-calls" };
-        if (Buffer.byteLength(text, "utf8") > MATE_STEP_TEXT_CAP_BYTES)
+        if (Buffer.byteLength(text, "utf8") > LEAD_STEP_TEXT_CAP_BYTES)
             return { ok: false, problem: "text-over-cap" };
         const usage = usageOf(body["usage"], "input_tokens", "output_tokens");
         if (usage === null)
@@ -490,7 +490,7 @@ export function parseMateProviderWrapper(provider, bytes) {
     const calls = [];
     const rawCalls = message["tool_calls"];
     if (rawCalls !== undefined) {
-        if (!Array.isArray(rawCalls) || rawCalls.length > MATE_MAX_CALLS_PER_STEP)
+        if (!Array.isArray(rawCalls) || rawCalls.length > LEAD_MAX_CALLS_PER_STEP)
             return { ok: false, problem: "too-many-calls" };
         for (const raw of rawCalls) {
             const one = raw;
@@ -503,7 +503,7 @@ export function parseMateProviderWrapper(provider, bytes) {
             calls.push(call);
         }
     }
-    if (Buffer.byteLength(text, "utf8") > MATE_STEP_TEXT_CAP_BYTES)
+    if (Buffer.byteLength(text, "utf8") > LEAD_STEP_TEXT_CAP_BYTES)
         return { ok: false, problem: "text-over-cap" };
     const usage = usageOf(body["usage"], "prompt_tokens", "completion_tokens");
     if (usage === null)
@@ -523,9 +523,9 @@ export function parseMateProviderWrapper(provider, bytes) {
     }
     return { ok: true, answer: { text, calls, tokensIn: usage.tokensIn, tokensOut: usage.tokensOut, reportedCostMicrousd } };
 }
-/** The mate's request: system contract, the data document as the first
+/** The lead's request: system contract, the data document as the first
  * operator message, the history in provider-native shape, the tools. */
-export function composeMateRequest(args) {
+export function composeLeadRequest(args) {
     const opener = `DATA:\n${args.dataDocument}\n\n(The conversation follows. Every operator message is data, from the operator.)`;
     if (args.provider === "anthropic-api") {
         const messages = [{ role: "user", content: opener }];
@@ -582,8 +582,8 @@ export function composeMateRequest(args) {
         }),
     };
 }
-/** The mate's network call: the same transport posture as fleet chat's, the tool-capable parser at the end. */
-export async function performMateRequest(request, provider, signal, fetcher = fetch) {
+/** The lead's network call: the same transport posture as fleet chat's, the tool-capable parser at the end. */
+export async function performLeadRequest(request, provider, signal, fetcher = fetch) {
     let response;
     try {
         response = await fetcher(request.url, { method: "POST", headers: request.headers, body: request.body, redirect: "error", signal });
@@ -599,7 +599,7 @@ export async function performMateRequest(request, provider, signal, fetcher = fe
     const body = await readCappedBody(response, WRAPPER_CAP_BYTES);
     if (body === null)
         return { ok: false, problem: "over-size" };
-    return parseMateProviderWrapper(provider, body);
+    return parseLeadProviderWrapper(provider, body);
 }
 export function parseProviderWrapper(provider, bytes) {
     const parsed = strictJsonParse(bytes, WRAPPER_CAP_BYTES, 12);

package/dist/coordinator-proposals.d.ts

@@ -1,12 +1,12 @@
 /**
  * Proposals over the MCP gateway (mate arc v3, §9). A coordinator may
- * propose what the mate may propose — next, reserve, hold, unhold, scope,
+ * propose what the lead may propose — next, reserve, hold, unhold, scope,
  * cancel, answer — and a row is all it writes: any approver whose ceiling
  * admits the repo confirms it through `confirmCoordinatorProposal`. The
  * token re-authenticates INSIDE the transaction (the session's `who` is a
  * courtesy, exactly as for filing); the proposal counts against the
  * credential's hourly filing rate and a per-credential pending cap; the
- * payload carries the same CAS material the mate's does, so a stale row
+ * payload carries the same CAS material the lead's does, so a stale row
  * refuses at the door in the same words.
  */
 import type { CoordinatorProposalKind, Store } from "./store.js";

package/dist/coordinator-proposals.js

@@ -1,6 +1,6 @@
 import { TASK_TEXT_LIMITS, validateScopeText } from "./task-text.js";
 import { authenticateCoordinator } from "./coordinator.js";
-import { decisionOver, honestText, readTouches, readAcceptanceArg } from "./mate-tools.js";
+import { decisionOver, honestText, readTouches, readAcceptanceArg } from "./lead-tools.js";
 export const PER_CID_PENDING_PROPOSALS = 20;
 const TASK_ID = /^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$/;
 /** The coordinator's proposal as a row; the shape of `args` is the MCP tool's. */

package/dist/coordinator.js

@@ -18,7 +18,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { canonicalRepos } from "./runner.js";
 import { fileTaskProposal } from "./proposal.js";
 import { describeScope } from "./scope.js";
-import { reportSummaryFor } from "./mate-tools.js";
+import { reportSummaryFor } from "./lead-tools.js";
 import { taskWorkSummaryOf } from "./work-summary.js";
 import { assignmentOf, assignmentBrief } from "./assignment.js";
 /** Module-private: the ONLY maker, reachable only through the token

package/dist/deprecations.d.ts

@@ -0,0 +1,12 @@
+/**
+ * D5 (schema v117): one AI concept, the lead. The central team service (`connect`, the central `lead list|create|update|
+ * member|transfer`, `conversation …`, and `chat`/`brief` with --lead, --conversation or a saved profile) and native
+ * coding sessions (`session …`) are deprecated. For this release they still work exactly as before, but they are
+ * hidden from help, the command contract and the console, and each run says so once on stderr — never on stdout, so a
+ * `--json` answer stays one envelope. Their code goes in the next minor release.
+ */
+export type Deprecated = "team" | "session";
+/** The one line a deprecated command prints on stderr: what it is, when it goes, and what to use instead. */
+export declare function deprecationWarning(command: string, kind: Deprecated): string;
+/** What a deprecated console page or API says about itself. */
+export declare const DEPRECATED_PAGE: Record<Deprecated, string>;

package/dist/deprecations.js

@@ -0,0 +1,20 @@
+/**
+ * D5 (schema v117): one AI concept, the lead. The central team service (`connect`, the central `lead list|create|update|
+ * member|transfer`, `conversation …`, and `chat`/`brief` with --lead, --conversation or a saved profile) and native
+ * coding sessions (`session …`) are deprecated. For this release they still work exactly as before, but they are
+ * hidden from help, the command contract and the console, and each run says so once on stderr — never on stdout, so a
+ * `--json` answer stays one envelope. Their code goes in the next minor release.
+ */
+const NEXT_STEP = {
+    team: "Talk to your lead with `toolroll chat`.",
+    session: "Queue work with `toolroll task add`.",
+};
+/** The one line a deprecated command prints on stderr: what it is, when it goes, and what to use instead. */
+export function deprecationWarning(command, kind) {
+    return `Warning: \`toolroll ${command}\` is deprecated and will be removed in the next minor release. ${NEXT_STEP[kind]}`;
+}
+/** What a deprecated console page or API says about itself. */
+export const DEPRECATED_PAGE = {
+    team: "Team chat is deprecated and will be removed in the next minor release. Your lead in Chat does the same work.",
+    session: "Coding sessions are deprecated and will be removed in the next minor release. Queue work as a task instead.",
+};

package/dist/desktop-update-gate.js

@@ -9,10 +9,14 @@ const statements = (id, frozen = false) => {
         `CREATE TRIGGER ${prefix}claim BEFORE INSERT ON claim BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
         `CREATE TRIGGER ${prefix}mate BEFORE INSERT ON mate_turn BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
         `CREATE TRIGGER ${prefix}run BEFORE INSERT ON run ${frozen ? "" : "WHEN NEW.parent_run IS NULL AND NOT EXISTS (SELECT 1 FROM claim WHERE lease_id=NEW.lease_id AND released_at IS NULL) "}BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
-        // An already-owned mate turn may finish its remaining provider steps.
+        // An already-owned lead turn may finish its remaining provider steps.
         `CREATE TRIGGER ${prefix}chat BEFORE INSERT ON chat_turn ${frozen ? "" : "WHEN NEW.mate_turn IS NULL "}BEGIN SELECT RAISE(ABORT, '${UPDATE_PAUSED} [${id}]'); END`,
     ];
 };
+/** A gate statement as SQLite may keep it: a table RENAME re-quotes names, and a later build may name the lead's turns
+ * lead_turn (D5). This build's updater lifts a gate it made under either name. */
+const same = (sql) => sql.replace(/"([A-Za-z_][A-Za-z0-9_]*)"/g, "$1").replace(/\b(?:mate|lead)_turn\b/g, "mate_turn");
+const owns = (wanted, sql) => wanted.map(same).includes(same(String(sql)));
 /** SQLite enforces the gate even for a CLI racing an old in-memory snapshot.
  * Existing leases, replies, heartbeats and task data remain writable. */
 export function installUpdateGate(db, id) {
@@ -20,7 +24,7 @@ export function installUpdateGate(db, id) {
     db.exec("BEGIN IMMEDIATE");
     try {
         const existing = rows(db);
-        if (existing.length > 0 && (existing.length !== wanted.length || existing.some(row => ![...wanted, ...statements(id, true)].includes(String(row.sql)))))
+        if (existing.length > 0 && (existing.length !== wanted.length || existing.some(row => !owns([...wanted, ...statements(id, true)], row.sql))))
             throw Error("Another or unrecognized update owns admission. Recover that update first.");
         if (existing.length === 0)
             for (const statement of wanted)
@@ -38,7 +42,7 @@ export function removeUpdateGate(db, id) {
     db.exec("BEGIN IMMEDIATE");
     try {
         const existing = rows(db);
-        if (existing.some(row => !wanted.includes(String(row.sql))))
+        if (existing.some(row => !owns(wanted, row.sql)))
             throw Error("This update does not own the admission pause. Nothing was cleared.");
         removeCodingUpdateGate(db, id);
         for (const row of existing)
@@ -53,7 +57,7 @@ export function removeUpdateGate(db, id) {
 export function updateAdmissionPaused(db) { return rows(db).length > 0; }
 export function updateGateOwned(db, id) {
     const wanted = [...statements(id), ...statements(id, true)], existing = rows(db);
-    return existing.length === statements(id).length && existing.every(row => wanted.includes(String(row.sql)));
+    return existing.length === statements(id).length && existing.every(row => owns(wanted, row.sql));
 }
 export function activeUpdateWork(db) {
     const count = (sql) => Number(db.prepare(sql).get()?.n ?? 0);

package/dist/desktop-update.js

@@ -8,6 +8,7 @@ import { readDesktopConfig, desktopServiceCommand, desktopServiceDefinition, ver
 import { daemonStatus } from "./daemon.js";
 import { run } from "./exec.js";
 import { readSchemaVersion, SCHEMA_VERSION, Store } from "./store.js";
+import { BASELINE_SCHEMA_VERSION } from "./store-baseline.js";
 import { activeUpdateWork, freezeUpdateGate, installUpdateGate, removeUpdateGate, updateAdmissionPaused } from "./desktop-update-gate.js";
 import { currentDesktopAccess } from "./desktop-access.js";
 import { assertCodingUpdateStopped, backupCodingCatalog, codingCatalogExists, releaseStaleCodingOwner } from "./coding-update.js";
@@ -125,6 +126,8 @@ function connect(file, readOnly = false, accepts = currentSchemaOnly) {
     const schema = readSchemaVersion(db);
     if (!schema.ok || !accepts(schema.version)) {
         db.close();
+        if (schema.ok && schema.version !== null && Math.abs(schema.version) < BASELINE_SCHEMA_VERSION)
+            throw Error(`This database is schema v${Math.abs(schema.version)}, older than v${BASELINE_SCHEMA_VERSION}: update through 0.9.x first (Toolroll 0.9.54 brings it up to date). The installed app is unchanged.`);
         throw Error("This update needs the current database schema. Use the separate verified migration procedure; the installed app is unchanged.");
     }
     return db;
@@ -474,7 +477,9 @@ function assertConfig(j) {
 }
 function snapshot(db) {
     const result = {};
-    for (const table of ["task", "task_scope", "approver", "run", "artifact", "mate_message", "project"]) {
+    // The lead's messages were mate_message before v117 (D5); a desktop update never migrates, so read whichever is here.
+    const messages = db.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'lead_message'").get() === undefined ? "mate_message" : "lead_message";
+    for (const table of ["task", "task_scope", "approver", "run", "artifact", messages, "project"]) {
         const rows = db.prepare(`SELECT * FROM "${table}" ORDER BY rowid`).all();
         result[table] = rows;
     }

package/dist/discord-chat.js

@@ -1,5 +1,5 @@
 /** Discord messages and buttons transport the shared assistant's saved actions. */
-import { chatQuestionButtons } from "./teammate-question.js";
+import { chatQuestionButtons } from "./subagent-question.js";
 import { chatAskButtons } from "./chat-ask.js";
 import { chatFlowButtons } from "./chat-flow.js";
 import { refuseResultShots, resultShotsPruned, shotWaitsUntil } from "./result-shots.js";
@@ -10,7 +10,7 @@ import { readChatPart } from "./contracts/chat-content.js";
 import { readDiscordButtonToken, readDiscordComponentInteraction } from "./contracts/discord-callback.js";
 import { processChatEvent, planChatNotifications, channelAccess, chatObject as object, planRoomMessages, } from "./chat-delivery.js";
 import { chatResultHref } from "./chat-controls.js";
-import { MATE_MESSAGE_MAX_CHARS } from "./mate.js";
+import { LEAD_MESSAGE_MAX_CHARS } from "./lead.js";
 import { discordPlain, renderReply } from "./reply-shape.js";
 import { WARM_EMOJI } from "./chat-warmth.js";
 import { proposalPreview, proposalLink, proposalOutcomeText, armedCardText, armedYesLabel, } from "./chat-channel.js";
@@ -61,7 +61,7 @@ export function receiveDiscord(state, identity, type, raw, now) {
         payload = pair
             ? { hash: chatHash(pair[1]) }
             : {
-                text: body.content.slice(0, MATE_MESSAGE_MAX_CHARS + 1),
+                text: body.content.slice(0, LEAD_MESSAGE_MAX_CHARS + 1),
                 originalLength: body.content.length,
                 ...(Array.isArray(body.attachments) && body.attachments.length
                     ? {
@@ -200,7 +200,7 @@ export async function deliverDiscordPart(options) {
         return true;
     }
     try {
-        const session = event.session === null ? null : store.getMateSession(event.session), repos = await channelAccess(shared, binding, session?.ceilingDigest);
+        const session = event.session === null ? null : store.getLeadSession(event.session), repos = await channelAccess(shared, binding, session?.ceilingDigest);
         if (event.kind === "notice" && options.canNotify?.() === false)
             return false;
         const content = partContent(row.payload);
@@ -241,7 +241,7 @@ export async function deliverDiscordPart(options) {
             });
         }
         if (content.proposal) {
-            const proposal = store.getMateProposal(content.proposal);
+            const proposal = store.getLeadProposal(content.proposal);
             if (!proposal)
                 text = "This proposal is unavailable.";
             else if (proposal.state !== "pending")
@@ -294,7 +294,7 @@ export async function deliverDiscordPart(options) {
                         custom_id: `so_${one.token}`,
                     }))
                     : []),
-                // A teammate's question (v93): its options, then "Answer in words".
+                // A subagent's question (v93): its options, then "Answer in words".
                 ...(content.question
                     ? chatQuestionButtons(state, row.id, now).map((one) => ({
                         type: 2,

package/dist/dispatch.d.ts

@@ -98,5 +98,5 @@ export declare function missingCapability(store: Store, taskRef: number, dispatc
 export declare function diagnoseTaskDispatch(store: Store, taskId: string, now: Date, readableRepos?: readonly string[] | null): DispatchDiagnosis | null;
 export declare function diagnosisIsDispatchable(diagnosis: DispatchDiagnosis | null): boolean;
 /** Attach the same lifecycle answer to the bounded fleet snapshot used by
- * both direct chat and the long-running mate. */
+ * both direct chat and the long-running lead. */
 export declare function withDispatchDiagnoses(store: Store, snapshot: ChatSnapshot, now: Date): ChatSnapshot;

package/dist/dispatch.js

@@ -330,7 +330,7 @@ export function diagnosisIsDispatchable(diagnosis) {
     return diagnosis?.code === "ready" || diagnosis?.code === "planning-ready" || diagnosis?.code === "scouting-ready";
 }
 /** Attach the same lifecycle answer to the bounded fleet snapshot used by
- * both direct chat and the long-running mate. */
+ * both direct chat and the long-running lead. */
 export function withDispatchDiagnoses(store, snapshot, now) {
     return {
         ...snapshot,

package/dist/dispose.js

@@ -707,10 +707,6 @@ export function maybeTriggerRepair(store, repo, evidenceRoot, sourceRunId, verdi
     };
     const briefBytes = Buffer.from(JSON.stringify(draftBrief, null, 2), "utf8");
     const key = writeEvidenceFile(evidenceRoot, sourceRunId, `repair-brief-${sourceRunId}-${attempt}.json`, briefBytes);
-    // Suffixes survive truncation (the CI-repair rule, verbatim): the prefix
-    // gives way, the identity-bearing tail never does.
-    const suffix = observation ? `-evidence-${attempt}` : `-fix-${attempt}`;
-    const draftId = `${rootTask.slice(0, 64 - suffix.length)}${suffix}`;
     // The draft files through the ONE revision boundary: the source's goal,
     // exclusions, touches, rubric, risk, quality, posture, budget, overrides
     // and pins are read from the SOURCE ROWS inside the seal — the scope
@@ -719,7 +715,6 @@ export function maybeTriggerRepair(store, repo, evidenceRoot, sourceRunId, verdi
         source: { task: ref.externalId, run: sourceRunId, scopeDigest: scope.digest },
         brief: { evidenceRoot, key, sha256: createHash("sha256").update(briefBytes).digest("hex"), bytes: briefBytes.length, capture: "machine-authored repair brief (exit 0)" },
         child: {
-            id: draftId,
             title: observation ? `Collect missing evidence for ${ref.externalId}` : verification === undefined ? `repair ${ref.externalId}: ${unresolved.length} criteri${unresolved.length === 1 ? "on" : "a"} unmet` : `Fix failed checks for ${ref.externalId}`,
             repair: observation ? `Collect only the missing observations for ${unresolved.join(", ")}. Keep the saved candidate unchanged. The machine runs supported focused test observations and reuses its intact passing gate; a fresh review assesses the added evidence.` : verification === undefined ? `repair exactly the unmet criteria named below; a comment cannot widen the scope. Unmet: ${unresolved.join(", ")}.` : "Diagnose the saved failed project check and repair within the original scope. Preserve the acceptance criteria and verification command; the revision brief binds the exact failure evidence.",
         },

package/dist/envelope.js

@@ -28,7 +28,6 @@ export const CAPABILITIES = [
     "output-file", //         -o <file> writes the same envelope to a file
     "command-schema/1", //    contract --commands dumps the declared command guide
     "skill-guides/1", //      skills list / skills get serve version-matched guides
-    "session-client/1", //    typed operator transport; query the service for actual availability
 ];
 /**
  * DOCUMENTED reasons — the curated vocabulary the command guide's

package/dist/export-ui.js

@@ -7,5 +7,5 @@ export const EXPORT_CSS = `.data-export{max-width:720px;min-width:0}.data-export
     `.data-export input[type=password]{width:100%;max-width:360px;box-sizing:border-box}.data-export button[type=submit]{margin-top:14px;min-height:44px;white-space:nowrap}`;
 export function dataExportHtml(notice) {
     const note = notice.problem ? html `<p class="problem" role="alert">${notice.problem}</p>` : "";
-    return html `<section class="data-export">${note}<p>Everything Toolroll knows, as one .zip: projects, tasks, runs and cost, the action ledger, evidence packs, chats, flows, teammates and settings. Passwords, keys and tokens are never included.</p>${postForm("/settings/data", html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label><button type="submit">Download export</button>`)}<p class="meta">The same export from the command line: <code>toolroll export --out &lt;path&gt; [--zip]</code></p></section>`;
+    return html `<section class="data-export">${note}<p>Everything Toolroll knows, as one .zip: projects, tasks, runs and cost, the action ledger, evidence packs, chats, flows, subagents and settings. Passwords, keys and tokens are never included.</p>${postForm("/settings/data", html `<label>Your Toolroll password<input type="password" name="password" autocomplete="current-password" required></label><button type="submit">Download export</button>`)}<p class="meta">The same export from the command line: <code>toolroll export --out &lt;path&gt; [--zip]</code></p></section>`;
 }

package/dist/export.js

@@ -2,7 +2,7 @@
  * Full export (v105): everything Toolroll knows, for an instance
  * operator to take away — every table of the database as JSON Lines, grouped
  * by what it's about (projects, tasks, runs, the ledger, chats, flows,
- * teammates, people, settings), an evidence pack per task, the settings kept
+ * subagents, people, settings), an evidence pack per task, the settings kept
  * in files beside the database, a README explaining the layout, and a
  * manifest with each file's SHA-256. One folder, or the same files in a .zip.
  *
@@ -35,14 +35,14 @@ const DERIVED_TABLE = /^(sqlite_|memory_search)/;
 const SECRET_COLUMNS = new Set([
     "api_token.secret_hash", "lead_credential.secret_hash", "approver.credential_hash", "coordinator_credential.credential_hash", "runner.credential_hash", "invite.token_hash",
     "flow_trigger.hook_hash", "push_subscription.endpoint", "push_subscription.p256dh", "push_subscription.auth",
-    "chat_turn.credential_key", "mate_session.credential_key", "mate_turn.credential_key", "chat_runtime.push_url", "workflow_preview.token",
+    "chat_turn.credential_key", "lead_session.credential_key", "mate_turn.credential_key", "chat_runtime.push_url", "workflow_preview.token",
     "quota.credential_fp", "oauth_grant.renew_hash", "oauth_client.source_hash",
 ]);
 /** A column named like this holds a secret unless it is reviewed below; an unreviewed one is dropped. */
 const SECRET_NAME = /hash|secret|token|passw|cookie|csrf|credential|p256dh|^auth$|key|nonce|endpoint|url/i;
 /** Reviewed: named like a secret, but it isn't one (a seal, a digest, a lookup name, an address with no key). */
 const REVIEWED_COLUMNS = new Set([
-    "artifact.key", "budget.scope_key", "mate_thread.scope_key", "diff_comment.source_key", "chat_meta.key",
+    "artifact.key", "budget.scope_key", "lead_thread.scope_key", "diff_comment.source_key", "chat_meta.key",
     "flow_trigger_event.key", "installation_fact.key", "mcp_idempotency.key", "memory_gap.key", "mutation.idempotency_key", "notification.dedupe_key",
     "service_cursor.key", "ledger_checkpoint.hash", "ledger_seal.hash", "merge_intent.grant_terms_hash", "plan_revision.parent_hash",
     "publication.body_hash", "publication.pr_url", "team_message.payload_hash", "team_request.payload_hash", "backend_grant.credential_scope",
@@ -53,9 +53,9 @@ const USAGE_COLUMN = /(^|_)tokens(_|$)|output_tokens/;
 export function categoryOf(table) {
     const rules = [
         [/^(action_ledger|ledger_seal|ledger_checkpoint|sync_ledger)$/, "ledger"],
-        [/^teammate/, "teammates"],
+        [/^subagent/, "subagents"],
         [/^(flow|workflow_)/, "flows"],
-        [/^(chat_|mate_|team_|notification|push_)/, "chats"],
+        [/^(chat_|lead_|team_|notification|push_)/, "chats"],
         [/^(approver|api_token|lead_credential|invite|sso_identity|coordinator_|oauth_)/, "people"],
         [/^(run|artifact|claim|worktree$|execution_slot|criterion_review|diff_comment|proof_|review_request|repair_chain|incident|publication$|merge_|side_spend|knowledge_snapshot|learning_snapshot|skill_snapshot)/, "runs"],
         [/^(task|hold$|plan_|scope_|tool_seal|decision|external_|skill_test)/, "tasks"],
@@ -214,9 +214,9 @@ Everything this installation knew on ${now.toISOString().slice(0, 16).replace("T
 - \`runs/\`: agent runs with usage and cost (\`run\`, \`run_spend\`), their records of artifacts, proofs, reviews and publications.
 - \`ledger/\`: the action ledger (\`action_ledger\`), each entry's seal (\`ledger_seal\`) and the checkpoints (\`ledger_checkpoint\`).
 - \`evidence-packs/\`: one JSON file per task: who asked, the exact terms and who approved them, runs and cost, checks, completion and its ledger entries.
-- \`chats/\`: conversations with the lead and teammates, and Telegram, Slack, Discord and Teams messages and notifications.
+- \`chats/\`: conversations with the lead and subagents, and Telegram, Slack, Discord and Teams messages and notifications.
 - \`flows/\`: flows, their cards, scripts and triggers (schedules included) and saved recipes.
-- \`teammates/\`: teammates, their versions, memory, tools and turns.
+- \`subagents/\`: subagents, their versions, memory, tools and turns.
 - \`people/\`: accounts, API token names and invitations (no passwords or tokens).
 - \`settings/\`: models, budgets, spend and permission defaults, provider readings; \`files.json\` holds the settings kept in files.
 - \`other/\`: everything else the database keeps (workers, leases, queues).