toolroll 0.9.67 → 0.9.68

package/dist/sleep.d.ts

@@ -0,0 +1,2 @@
+/** Wait `ms` milliseconds on the global timer (so fake timers in tests still drive it). */
+export declare const sleep: (ms: number) => Promise<void>;

package/dist/sleep.js

@@ -0,0 +1,2 @@
+/** Wait `ms` milliseconds on the global timer (so fake timers in tests still drive it). */
+export const sleep = (ms) => new Promise(resolve => setTimeout(resolve, ms));

package/dist/store.d.ts

@@ -415,8 +415,6 @@ type CancellationTransition = {
     changed: false;
     reason: CancellationRefusal;
 };
-/** States from which no further work is dispatched. */
-export declare const TERMINAL_STATES: readonly TaskState[];
 export type Task = {
     id: string;
     title: string;
@@ -486,18 +484,6 @@ export type TaskRef = {
     /** Recorded, not asserted: what the grant's selector is checked against. */
     origin: TaskOrigin;
 };
-/** A standing order: a pre-approved template whose instances build unattended. */
-export type ExecutionSlot = {
-    id: number;
-    runner: string;
-    state: "reserved" | "running" | "released";
-    run: number | null;
-    incarnation: string | null;
-    processGroup: number | null;
-    reservedAt: string;
-    runningAt: string | null;
-    releasedAt: string | null;
-};
 /** Chat providers are direct API adapters — a DISJOINT type from the build
  * harness providers, by design (Codex v3 review, change 1). */
 export type DirectChatProviderId = "anthropic-api" | "openrouter-api";
@@ -999,8 +985,6 @@ export type Capability = {
     lastResult: string | null;
     expiresAt: string | null;
 };
-/** `kind:name`, the unambiguous way a requirement names a capability. */
-export declare function capabilityKey(capability: Pick<Capability, "kind" | "name">): string;
 /** Parse `kind:name`; a bare name is refused rather than guessed at. */
 export declare function parseCapabilityKey(key: string): {
     kind: Capability["kind"];
@@ -2297,7 +2281,6 @@ export declare class Store {
     mirrorAllowsCompletion(taskId: string): boolean;
     /** Whether a stored acquire mutation exists — the replay marker's fact. */
     hasMutationRecord(mutation: Mutation): boolean;
-    enqueueExternalIntent(mirror: string, kind: "comment" | "transition" | "close", body: string | null, now: Date): void;
     pendingExternalIntents(limit?: number): {
         id: number;
         mirror: string;
@@ -4053,24 +4036,6 @@ export declare class Store {
     liveClaimByLease(leaseId: string, now: Date): {
         leaseId: string;
     } | null;
-    reserveExecutionSlots(runner: string, count: number, now: Date): number[];
-    /** reserved → running happens in the stamp-before-spawn moment, carrying
-     * the process group so recovery can ask the OS before freeing capacity. */
-    markSlotRunning(id: number, facts: {
-        run: number;
-        incarnation?: string | null;
-        processGroup?: number | null;
-    }, now: Date): boolean;
-    /** A correction process replaces the exited provider in the same open
-     * root attempt. It may refresh only that attempt's exact occupied slot. */
-    refreshSlotProcess(id: number, facts: {
-        run: number;
-        incarnation?: string | null;
-        processGroup: number;
-    }): boolean;
-    releaseExecutionSlot(id: number, now: Date): boolean;
-    liveSlotCount(runner: string): number;
-    getExecutionSlot(id: number): ExecutionSlot | null;
     /** Minted from a POST, never a GET. Bounded per approver; expired rows
      * are swept rather than accumulating. */
     mintCeremonyNonce(spec: {
@@ -4868,22 +4833,6 @@ export declare class Store {
     listTasksScoped(repo: string | null, state: TaskState | undefined, limit: number, selectedId: string | null): (Task & {
         repo: string | null;
     })[];
-    /**
-     * The Work destination's one bounded page (workspace package 1 query):
-     * the newest tasks the viewer may see, with the viewer's already-proved
-     * admission bound BEFORE the ordering and the limit — never a wider
-     * read post-filtered in the caller. `admitted` is the resolved
-     * permitted repo set: `null` means unrestricted (every placed row),
-     * `[]` means no placed project is permitted (no placed row at all).
-     * `includeUnplaced` says whether NULL-repo rows belong to this viewer;
-     * an account restricted to projects never sees them, so they must not
-     * spend its page. Every predicate is a bound parameter; the limit is
-     * clamped here, not trusted from the caller. Read-only; the legacy
-     * `listTasksScoped` is untouched.
-     */
-    listWorkTasksAdmitted(admitted: readonly string[] | null, includeUnplaced: boolean, limit: number): (Task & {
-        repo: string | null;
-    })[];
     /** Newest first, because the question is almost always "what just happened". */
     runsFor(taskRef: number): Run[];
     /**
@@ -5309,7 +5258,6 @@ export declare class Store {
         run: number;
         kind: Incident["kind"];
     }, now: Date): number;
-    incidentForRun(run: number): Incident | null;
     /** Unresolved, task attached, oldest first. No time window: these do not age out. */
     openIncidents(repo?: string | null): (Incident & {
         taskId: string;
@@ -5516,9 +5464,6 @@ export declare class Store {
     claimMergeIntent(id: number, by: string, leaseMs: number, now: Date): {
         generation: number;
     } | null;
-    /** Renew the lease AND re-prove the generation in one CAS — the last
-     * gate before the external call; a failed re-proof aborts the attempt. */
-    renewMergeClaim(id: number, generation: number, leaseMs: number, now: Date): boolean;
     /** STATE-SPECIFIC and TERMINALLY MONOTONIC (E1): the writer names the
      * state it believes it owns, and a terminal row is never overwritten —
      * a stale claim owner cannot un-merge what the observer already settled,
@@ -5583,12 +5528,6 @@ export declare class Store {
         lastError: string | null;
         firingDeadline: string | null;
     } | null;
-    latestObservation(githubRepo: string, prNumber: number): {
-        headSha: string;
-        state: string;
-        observedAt: string;
-        generation: number;
-    } | null;
     /** Revocation is immediate: intents not yet pushed die with the grant. */
     revokePublicationGrant(repo: string, by: string, now: Date): boolean;
     publicationGrantFor(repo: string): PublicationGrant | null;
@@ -6408,7 +6347,6 @@ export declare class Store {
     recentLeadTurns(approver: string, limit?: number): LeadTurn[];
     getLeadTurn(id: number): LeadTurn | null;
     liveLeadTurnFor(approver: string): LeadTurn | null;
-    leadStepsOf(leadTurn: number): ChatTurn[];
     /** Remember a project was opened. Upsert keeps added_at; recency always moves.
      * A project added for the first time starts on Quick checks. */
     upsertProject(path: string, name: string, now: Date, admission?: {
@@ -6469,17 +6407,6 @@ export declare class Store {
         repo: string | null;
         blockerRepo: string | null;
     }[];
-    /**
-     * Active work only, running first — the Work tab's page. Terminal history
-     * belongs to Done and the build ledger, never to this list.
-     */
-    listActiveWorkScoped(repo: string | null, now: Date, limit?: number): (Task & {
-        repo: string | null;
-        approved: boolean;
-        held: boolean;
-        buildingBy: string | null;
-        strikes: number;
-    })[];
     /**
      * Completed work, one row per done task with its final accepted run and
      * any publication attached — never composed from separate task and PR

package/dist/store.js

@@ -68,13 +68,13 @@ import { containerEmptiness } from "./container-state.js";
 import { hasDisguisedText, hasForbiddenControls, validateNote } from "./decision.js";
 import { parseReviewContext, reviewContextCustodyProblem } from "./review-context.js";
 import { foldReview, manualReviewOnly } from "./proof.js";
-import { approvalOf, digestOf, canonicalProfileJson, chainFromJson, profileDigestOf, profileFromJson, scopeAuthorityOf, routeParityProblem, parseAcceptanceCriteria, exactAcceptance, exactStringList, exactSafeIntegerOrNull, exactKeys, GEMINI_LIMITS } from "./scope.js";
+import { approvalOf, digestOf, canonicalProfileJson, chainFromJson, profileDigestOf, profileFromJson, scopeAuthorityOf, routeParityProblem, parseAcceptanceCriteria, exactAcceptance, exactStringList, exactSafeIntegerOrNull } from "./scope.js";
 import { resolveScopeProfile, resolveRouteCandidates, exactPinOf, routeOfTask, agentChoicesFor } from "./agentconfig.js";
-import { canonicalOverridesJson, canonicalRouteJson, exactModelId, isRiskLevel, isTaskSize, headroomFrom, makesNoPlan, legOf, overridesFromJson, phaseOfRole, recommendRoute, routeDigestOf, routeFromJson, routeProblems, routeStampProblem, ROUTE_ERA, PROVIDER_ID_LIST, } from "./phase-routing.js";
+import { canonicalOverridesJson, canonicalRouteJson, isRiskLevel, isTaskSize, headroomFrom, makesNoPlan, legOf, overridesFromJson, phaseOfRole, recommendRoute, routeDigestOf, routeFromJson, routeProblems, routeStampProblem, ROUTE_ERA, PROVIDER_ID_LIST, } from "./phase-routing.js";
 import { readAuthModeStrict } from "./keys.js";
 import { modeDigestOf, modeTermsFromJson } from "./modes.js";
 import { readVerifiedArtifact } from "./evidence.js";
-import { isProviderId } from "./provider.js";
+import {} from "./provider.js";
 import { authenticate as runnerAuthenticate } from "./runner.js";
 import { stampNewProjectLevel } from "./check-levels.js";
 import { parseCheckProgressSnapshot } from "./check-progress.js";
@@ -1177,8 +1177,6 @@ CREATE INDEX IF NOT EXISTS sso_identity_account ON sso_identity (account);
  */
 /** The backend name the built-in store registers itself under. */
 export const BUILT_IN = "built-in";
-/** States from which no further work is dispatched. */
-export const TERMINAL_STATES = ["done", "failed", "cancelled"];
 export const LEAD_THREAD = { kind: "lead" };
 /** A lead_message row as a LeadMessage. */
 function readLeadMessageRow(row) {
@@ -1298,10 +1296,6 @@ function readFlowReceipt(row) {
     const optional = (key) => row[key] === null || row[key] === undefined ? null : String(row[key]);
     return { state, card, note: optional("note"), at: String(row["at"]), acceptedAt: optional("accepted_at"), itemJson: optional("item_json") };
 }
-/** `kind:name`, the unambiguous way a requirement names a capability. */
-export function capabilityKey(capability) {
-    return `${capability.kind}:${capability.name}`;
-}
 /** Parse `kind:name`; a bare name is refused rather than guessed at. */
 export function parseCapabilityKey(key) {
     const split = key.indexOf(":");
@@ -6413,11 +6407,6 @@ export class Store {
             .get(mutation.idempotencyKey);
         return row !== undefined;
     }
-    enqueueExternalIntent(mirror, kind, body, now) {
-        this.db
-            .prepare("INSERT INTO external_intent (mirror, kind, body, created_at) VALUES (?, ?, ?, ?)")
-            .run(mirror, kind, body, now.toISOString());
-    }
     pendingExternalIntents(limit = 50) {
         return this.db
             .prepare("SELECT id, mirror, kind, body, attempts FROM external_intent WHERE state = 'pending' ORDER BY id LIMIT ?")
@@ -11423,54 +11412,6 @@ export class Store {
         return row === undefined ? null : { leaseId: String(row["lease_id"]) };
     }
     // ---- worker-process slots (v14, finding 26) ----------------------------
-    reserveExecutionSlots(runner, count, now) {
-        return this.transact(() => {
-            const ids = [];
-            for (let index = 0; index < count; index++) {
-                const inserted = this.db
-                    .prepare("INSERT INTO execution_slot (runner, reserved_at) VALUES (?, ?)")
-                    .run(runner, now.toISOString());
-                ids.push(Number(inserted.lastInsertRowid));
-            }
-            return ids;
-        });
-    }
-    /** reserved → running happens in the stamp-before-spawn moment, carrying
-     * the process group so recovery can ask the OS before freeing capacity. */
-    markSlotRunning(id, facts, now) {
-        const changed = this.db
-            .prepare(`UPDATE execution_slot SET state = 'running', run = ?, incarnation = ?, process_group = ?, running_at = ?
-          WHERE id = ? AND state = 'reserved'`)
-            .run(facts.run, facts.incarnation ?? null, facts.processGroup ?? null, now.toISOString(), id);
-        return Number(changed.changes) === 1;
-    }
-    /** A correction process replaces the exited provider in the same open
-     * root attempt. It may refresh only that attempt's exact occupied slot. */
-    refreshSlotProcess(id, facts) {
-        if (!Number.isInteger(facts.processGroup) || facts.processGroup <= 0)
-            return false;
-        const changed = this.db.prepare(`UPDATE execution_slot SET process_group = ?
-      WHERE id = ? AND state = 'running' AND run = ? AND incarnation IS ?
-        AND EXISTS (SELECT 1 FROM run WHERE id = ? AND outcome IS NULL)`)
-            .run(facts.processGroup, id, facts.run, facts.incarnation ?? null, facts.run);
-        return Number(changed.changes) === 1;
-    }
-    releaseExecutionSlot(id, now) {
-        const changed = this.db
-            .prepare("UPDATE execution_slot SET state = 'released', released_at = ? WHERE id = ? AND state IN ('reserved','running')")
-            .run(now.toISOString(), id);
-        return Number(changed.changes) === 1;
-    }
-    liveSlotCount(runner) {
-        const row = this.db
-            .prepare("SELECT COUNT(*) AS n FROM execution_slot WHERE runner = ? AND state IN ('reserved','running')")
-            .get(runner);
-        return Number(row?.["n"] ?? 0);
-    }
-    getExecutionSlot(id) {
-        const row = this.db.prepare("SELECT * FROM execution_slot WHERE id = ?").get(id);
-        return row === undefined ? null : readExecutionSlot(row);
-    }
     // ---- durable ceremony nonces (v14, findings 21/30) ---------------------
     /** Minted from a POST, never a GET. Bounded per approver; expired rows
      * are swept rather than accumulating. */
@@ -13528,40 +13469,6 @@ export class Store {
             repo: row["task_repo"] === null ? null : String(row["task_repo"]),
         }));
     }
-    /**
-     * The Work destination's one bounded page (workspace package 1 query):
-     * the newest tasks the viewer may see, with the viewer's already-proved
-     * admission bound BEFORE the ordering and the limit — never a wider
-     * read post-filtered in the caller. `admitted` is the resolved
-     * permitted repo set: `null` means unrestricted (every placed row),
-     * `[]` means no placed project is permitted (no placed row at all).
-     * `includeUnplaced` says whether NULL-repo rows belong to this viewer;
-     * an account restricted to projects never sees them, so they must not
-     * spend its page. Every predicate is a bound parameter; the limit is
-     * clamped here, not trusted from the caller. Read-only; the legacy
-     * `listTasksScoped` is untouched.
-     */
-    listWorkTasksAdmitted(admitted, includeUnplaced, limit) {
-        const page = Math.max(1, Math.min(Math.floor(limit), 500));
-        // SQLite accepts an empty IN list, so an empty admission binds as
-        // "no placed row" without any special SQL shape.
-        const rows = this.db
-            .prepare(`SELECT task.*, task_ref.repo AS task_repo FROM task
-         JOIN task_ref ON task_ref.backend = ? AND task_ref.external_id = task.id
-         WHERE ((task_ref.repo IS NULL AND ? = 1)
-             OR (task_ref.repo IS NOT NULL AND (? = 1 OR task_ref.repo IN (${(admitted ?? []).map(() => "?").join(",")}))))
-         ORDER BY task.created_at DESC, task.id DESC LIMIT ?`)
-            .all(BUILT_IN, includeUnplaced ? 1 : 0, admitted === null ? 1 : 0, ...(admitted ?? []), page);
-        return rows.map(row => ({
-            id: String(row["id"]),
-            title: String(row["title"]),
-            state: String(row["state"]),
-            createdAt: String(row["created_at"]),
-            updatedAt: String(row["updated_at"]),
-            priority: row["priority"] === null || row["priority"] === undefined ? 0 : Number(row["priority"]),
-            repo: row["task_repo"] === null ? null : String(row["task_repo"]),
-        }));
-    }
     /** Newest first, because the question is almost always "what just happened". */
     runsFor(taskRef) {
         return this.db
@@ -14507,10 +14414,6 @@ export class Store {
             .run(incident.run, incident.kind, now.toISOString());
         return Number(inserted.lastInsertRowid);
     }
-    incidentForRun(run) {
-        const row = this.db.prepare("SELECT * FROM incident WHERE run = ?").get(run);
-        return row === undefined ? null : readIncident(row);
-    }
     /** Unresolved, task attached, oldest first. No time window: these do not age out. */
     openIncidents(repo = null) {
         return this.db
@@ -14872,14 +14775,6 @@ export class Store {
             return Number(changes) === 1 ? { generation } : null;
         });
     }
-    /** Renew the lease AND re-prove the generation in one CAS — the last
-     * gate before the external call; a failed re-proof aborts the attempt. */
-    renewMergeClaim(id, generation, leaseMs, now) {
-        const { changes } = this.db
-            .prepare("UPDATE merge_intent SET claimed_until = ? WHERE id = ? AND state = 'claimed' AND generation = ?")
-            .run(new Date(now.getTime() + leaseMs).toISOString(), id, generation);
-        return Number(changes) === 1;
-    }
     /** STATE-SPECIFIC and TERMINALLY MONOTONIC (E1): the writer names the
      * state it believes it owns, and a terminal row is never overwritten —
      * a stale claim owner cannot un-merge what the observer already settled,
@@ -15029,14 +14924,6 @@ export class Store {
                 firingDeadline: row["firing_deadline"] === null ? null : String(row["firing_deadline"]),
             };
     }
-    latestObservation(githubRepo, prNumber) {
-        const row = this.db
-            .prepare("SELECT head_sha, state, observed_at, generation FROM ci_observation WHERE github_repo = ? AND pr_number = ?")
-            .get(githubRepo, prNumber);
-        return row === undefined || String(row["observed_at"]) === ""
-            ? null
-            : { headSha: String(row["head_sha"]), state: String(row["state"]), observedAt: String(row["observed_at"]), generation: Number(row["generation"]) };
-    }
     /** Revocation is immediate: intents not yet pushed die with the grant. */
     revokePublicationGrant(repo, by, now) {
         const { changes } = this.db
@@ -16635,9 +16522,6 @@ export class Store {
         const row = this.db.prepare("SELECT * FROM mate_turn WHERE approver = ? AND state IN ('queued','running') ORDER BY id DESC LIMIT 1").get(approver);
         return row === undefined ? null : readLeadTurn(row);
     }
-    leadStepsOf(leadTurn) {
-        return this.db.prepare("SELECT * FROM chat_turn WHERE mate_turn = ? ORDER BY id ASC").all(leadTurn).map(readChatTurn);
-    }
     // ---- projects ------------------------------------------------------------
     /** Remember a project was opened. Upsert keeps added_at; recency always moves.
      * A project added for the first time starts on Quick checks. */
@@ -16808,50 +16692,6 @@ export class Store {
             blockerRepo: row["blocker_repo"] === null || row["blocker_repo"] === undefined ? null : String(row["blocker_repo"]),
         }));
     }
-    /**
-     * Active work only, running first — the Work tab's page. Terminal history
-     * belongs to Done and the build ledger, never to this list.
-     */
-    listActiveWorkScoped(repo, now, limit = 50) {
-        const page = Math.max(1, Math.min(Math.floor(limit), 100));
-        return this.db
-            .prepare(`SELECT task.*, task_ref.repo AS task_repo, task_ref.strikes AS ref_strikes,
-           EXISTS (
-             SELECT 1 FROM task_scope
-             WHERE task_scope.task_id = task.id AND task_scope.approved_digest = task_scope.digest
-               AND task_scope.approved_at IS NOT NULL
-           ) AS approved,
-           EXISTS (
-             SELECT 1 FROM hold
-             WHERE hold.task_ref = task_ref.id AND (hold.until IS NULL OR hold.until > ?)
-           ) AS held,
-           (SELECT claim.runner FROM claim
-             WHERE claim.task_ref = task_ref.id AND claim.released_at IS NULL AND claim.expires_at > ?
-               AND claim.lease_generation = (
-                 SELECT MAX(newest.lease_generation) FROM claim AS newest
-                 WHERE newest.task_ref = claim.task_ref)
-             LIMIT 1) AS building_by
-         FROM task
-         JOIN task_ref ON task_ref.backend = ? AND task_ref.external_id = task.id
-         WHERE task.state IN ('running','queued')
-           AND (? IS NULL OR task_ref.repo IS NULL OR task_ref.repo = ?)
-         ORDER BY CASE task.state WHEN 'running' THEN 0 ELSE 1 END, task.updated_at DESC, task.id DESC
-         LIMIT ?`)
-            .all(now.toISOString(), now.toISOString(), BUILT_IN, repo, repo, page)
-            .map(row => ({
-            id: String(row["id"]),
-            title: String(row["title"]),
-            state: String(row["state"]),
-            createdAt: String(row["created_at"]),
-            updatedAt: String(row["updated_at"]),
-            priority: row["priority"] === null || row["priority"] === undefined ? 0 : Number(row["priority"]),
-            repo: row["task_repo"] === null ? null : String(row["task_repo"]),
-            approved: Number(row["approved"]) === 1,
-            held: Number(row["held"]) === 1,
-            buildingBy: row["building_by"] === null ? null : String(row["building_by"]),
-            strikes: Number(row["ref_strikes"]),
-        }));
-    }
     /**
      * Completed work, one row per done task with its final accepted run and
      * any publication attached — never composed from separate task and PR
@@ -19544,20 +19384,6 @@ function readTaskRef(row) {
         origin: String(row["origin"]) === "ours" ? "ours" : "theirs",
     };
 }
-function readExecutionSlot(row) {
-    const maybe = (key) => (row[key] === null || row[key] === undefined ? null : String(row[key]));
-    return {
-        id: Number(row["id"]),
-        runner: String(row["runner"]),
-        state: String(row["state"]),
-        run: row["run"] === null ? null : Number(row["run"]),
-        incarnation: maybe("incarnation"),
-        processGroup: row["process_group"] === null ? null : Number(row["process_group"]),
-        reservedAt: String(row["reserved_at"]),
-        runningAt: maybe("running_at"),
-        releasedAt: maybe("released_at"),
-    };
-}
 function readChatTurn(row) {
     const maybe = (key) => (row[key] === null || row[key] === undefined ? null : String(row[key]));
     const maybeN = (key) => (row[key] === null || row[key] === undefined ? null : Number(row[key]));

package/dist/structured-output.d.ts

@@ -20,7 +20,6 @@ export declare const REVIEW_OUTPUT_LIMITS: {
     readonly path: 300;
 };
 export declare const REVIEW_NOTE_CODE_POINTS: number;
-export declare const REVIEW_NOTE_GUIDANCE: string;
 export type StructuredNormalization = {
     text: string;
     changed: boolean;

package/dist/structured-output.js

@@ -16,7 +16,6 @@ export const STRUCTURED_REPAIR_TIMEOUT_MS = 5 * 60_000;
  * notes concise without imposing a second, stricter transport contract. */
 export const REVIEW_OUTPUT_LIMITS = { comments: 40, criteria: 12, note: TEXT_LIMITS.reviewNote, path: TEXT_LIMITS.reviewPath };
 export const REVIEW_NOTE_CODE_POINTS = Math.floor(REVIEW_OUTPUT_LIMITS.note / 2);
-export const REVIEW_NOTE_GUIDANCE = `Keep each comment and criterion note to one concise finding and its evidence. Aim for ${REVIEW_NOTE_CODE_POINTS} characters or fewer; the hard limit is ${REVIEW_OUTPUT_LIMITS.note} UTF-16 units. Preserve the conclusion and any needed provenance; omit repeated rubric text.`;
 /** Strip only unambiguous, whole-payload wrappers. */
 export function normalizeStructuredJson(raw) {
     let text = raw;

package/dist/subagent-work.d.ts

@@ -72,5 +72,3 @@ export declare function answerSubagentQuestion(store: Store, id: number, answer:
     ok: false;
     said: string;
 };
-/** A card's link, for messages about it. */
-export declare const subagentCardHref: (flow: number, card: number) => string;

package/dist/subagent-work.js

@@ -304,5 +304,3 @@ export function answerSubagentQuestion(store, id, answer, now) {
         return { ok: true, said: question.toolCall === null ? "Answered. It picks the card up again now." : choice?.id === APPROVE ? "Approved. The call is made now, exactly as shown." : "It won't make that call. It picks the card up again now." };
     });
 }
-/** A card's link, for messages about it. */
-export const subagentCardHref = (flow, card) => flowCardHref(flow, card);

package/dist/subagents.d.ts

@@ -1,4 +1,4 @@
-import { run, type ExecResult } from "./exec.js";
+import { type CommandRunner } from "./claude-print.js";
 import type { ContractResult } from "./contracts/contract.js";
 import { type TurnAnswer } from "./contracts/subagent-turn.js";
 import { type Overrun } from "./text-limits.js";
@@ -13,7 +13,6 @@ export type Soul = {
 };
 /** A handle from a name: "Maya" → "maya". */
 export declare const handleOf: (name: string) => string;
-export declare const isHandle: (value: unknown) => value is string;
 /** A soul file read: its name and role (front matter) and its sections. */
 export declare function parseSoul(text: string): {
     ok: true;
@@ -139,7 +138,6 @@ export type TurnReply = ({
 /** Runs one turn; injectable so tests never spend a subscription turn. */
 export type TurnRunner = (request: TurnRequest) => Promise<TurnReply>;
 export declare const TURN_TIMEOUT_MS = 180000;
-type CommandRunner = (file: string, args: readonly string[], options: Parameters<typeof run>[2]) => Promise<ExecResult>;
 /** The production runner: Claude through this computer's sign-in, answering in the turn schema (TURN_MODEL_SCHEMA), with no tools, no MCP servers and no repository. */
 export declare function claudeTurnRunner(runner?: CommandRunner): TurnRunner;
 /** How a subagent is named to people: "Maya · Support". */

package/dist/subagents.js

@@ -17,21 +17,17 @@
  * spending — those stay with people (or a signed hands-off mode).
  */
 import { Buffer } from "node:buffer";
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
 import { strictJsonParse } from "./converse.js";
 import { scanForSecrets } from "./evidence.js";
 import { run } from "./exec.js";
+import { CLAUDE_NO_TOOLS_ARGS, CLAUDE_SIGNED_OUT, claudeJsonBody, claudeModelArgs, inScratchDir } from "./claude-print.js";
 import { ALL_CREDENTIAL_ENV } from "./provider.js";
 import { readTurnAnswer, TURN_MODEL_SCHEMA } from "./contracts/subagent-turn.js";
 import { LIMITS } from "./decision.js";
 import { overruns, TEXT_LIMITS } from "./text-limits.js";
 export const SOUL_CHARS = 12_000;
-const HANDLE = /^[a-z0-9][a-z0-9-]{0,31}$/;
 /** A handle from a name: "Maya" → "maya". */
 export const handleOf = (name) => name.toLowerCase().normalize("NFKD").replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 32) || "subagent";
-export const isHandle = (value) => typeof value === "string" && HANDLE.test(value);
 /** A soul file read: its name and role (front matter) and its sections. */
 export function parseSoul(text) {
     const normal = text.replace(/\r\n?/g, "\n").trim();
@@ -220,36 +216,27 @@ export function readTurn(value, context) {
 export const TURN_TIMEOUT_MS = 180_000;
 /** The production runner: Claude through this computer's sign-in, answering in the turn schema (TURN_MODEL_SCHEMA), with no tools, no MCP servers and no repository. */
 export function claudeTurnRunner(runner = run) {
-    return async (request) => {
-        const dir = mkdtempSync(join(tmpdir(), "standing-orders-subagent-"));
+    return request => inScratchDir("standing-orders-subagent-", async (dir) => {
         const started = Date.now();
-        try {
-            const result = await runner("claude", [
-                "-p", "--output-format", "json", "--json-schema", JSON.stringify(TURN_MODEL_SCHEMA), "--safe-mode", "--no-session-persistence", "--tools", "", "--permission-mode", "dontAsk",
-                "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}',
-                ...(request.model === "default" ? [] : ["--model", request.model]),
-            ], { cwd: dir, stdin: request.prompt, timeoutMs: request.timeoutMs, maxBuffer: 512 * 1024, omitEnv: ALL_CREDENTIAL_ENV, processGroup: true });
-            if (result.notFound)
-                return { ok: false, said: "Claude isn't installed on this computer." };
-            if (result.timedOut)
-                return { ok: false, said: "Claude took too long to decide." };
-            const parsed = strictJsonParse(Buffer.from(result.stdout, "utf8"), 512 * 1024, 12);
-            const body = parsed.ok && typeof parsed.value === "object" && parsed.value !== null && !Array.isArray(parsed.value) ? parsed.value : null;
-            if (result.code !== 0 || body === null || body["is_error"] === true || body["subtype"] !== "success") {
-                const why = typeof body?.["subtype"] === "string" && body["subtype"] !== "success" ? ` (${String(body["subtype"]).replace(/_/g, " ").slice(0, 60)})` : result.code !== 0 ? ` (exit ${result.code})` : "";
-                return { ok: false, said: /not logged in|login|authenticat/i.test(`${result.stdout}${result.stderr}`) ? "Claude isn't signed in on this computer." : `Claude couldn't decide${why}.` };
-            }
-            const cost = costOf(body);
-            if (body["structured_output"] !== undefined && body["structured_output"] !== null)
-                return { ok: true, value: body["structured_output"], ms: Date.now() - started, ...cost };
-            const text = typeof body["result"] === "string" ? body["result"].trim().replace(/^```(?:json)?\n?|\n?```$/g, "") : "";
-            const inner = strictJsonParse(Buffer.from(text, "utf8"), 64 * 1024, 8);
-            return inner.ok ? { ok: true, value: inner.value, ms: Date.now() - started, ...cost } : { ok: false, said: "Claude's answer wasn't a decision.", ...cost };
+        const result = await runner("claude", [
+            "-p", "--output-format", "json", "--json-schema", JSON.stringify(TURN_MODEL_SCHEMA), ...CLAUDE_NO_TOOLS_ARGS, ...claudeModelArgs(request.model),
+        ], { cwd: dir, stdin: request.prompt, timeoutMs: request.timeoutMs, maxBuffer: 512 * 1024, omitEnv: ALL_CREDENTIAL_ENV, processGroup: true });
+        if (result.notFound)
+            return { ok: false, said: "Claude isn't installed on this computer." };
+        if (result.timedOut)
+            return { ok: false, said: "Claude took too long to decide." };
+        const body = claudeJsonBody(result.stdout, 512 * 1024);
+        if (result.code !== 0 || body === null || body["is_error"] === true || body["subtype"] !== "success") {
+            const why = typeof body?.["subtype"] === "string" && body["subtype"] !== "success" ? ` (${String(body["subtype"]).replace(/_/g, " ").slice(0, 60)})` : result.code !== 0 ? ` (exit ${result.code})` : "";
+            return { ok: false, said: CLAUDE_SIGNED_OUT.test(`${result.stdout}${result.stderr}`) ? "Claude isn't signed in on this computer." : `Claude couldn't decide${why}.` };
         }
-        finally {
-            rmSync(dir, { recursive: true, force: true });
-        }
-    };
+        const cost = costOf(body);
+        if (body["structured_output"] !== undefined && body["structured_output"] !== null)
+            return { ok: true, value: body["structured_output"], ms: Date.now() - started, ...cost };
+        const text = typeof body["result"] === "string" ? body["result"].trim().replace(/^```(?:json)?\n?|\n?```$/g, "") : "";
+        const inner = strictJsonParse(Buffer.from(text, "utf8"), 64 * 1024, 8);
+        return inner.ok ? { ok: true, value: inner.value, ms: Date.now() - started, ...cost } : { ok: false, said: "Claude's answer wasn't a decision.", ...cost };
+    });
 }
 /** What the CLI says a turn cost, and its tokens (cache reads and writes count as input). */
 function costOf(body) {

package/dist/subscription-chat.d.ts

@@ -1,5 +1,5 @@
 import { type LeadHistoryMessage, type LeadProviderAnswer, type LeadToolSchema } from "./converse.js";
-import { run, type ExecResult } from "./exec.js";
+import { type CommandRunner } from "./claude-print.js";
 import type { SubscriptionChatProviderId } from "./store.js";
 export type SubscriptionLeadRequest = {
     provider: SubscriptionChatProviderId;
@@ -27,7 +27,6 @@ export type SubscriptionLeadRunner = (request: SubscriptionLeadRequest) => Promi
     ok: false;
     problem: string;
 }>;
-type CommandRunner = (file: string, args: readonly string[], options: Parameters<typeof run>[2]) => Promise<ExecResult>;
 /** The model-visible request. Tool results are already redacted by leadView. */
 export declare function composeSubscriptionLeadPrompt(request: Omit<SubscriptionLeadRequest, "provider" | "model" | "timeoutMs" | "signal">): string;
 /** Strictly turn the harness's structured output into the provider-neutral answer. */
@@ -49,4 +48,3 @@ export declare function performSubscriptionLeadRequest(request: SubscriptionLead
     ok: false;
     problem: string;
 }>;
-export {};

package/dist/subscription-chat.js

@@ -16,6 +16,7 @@ import { tmpdir } from "node:os";
 import { join } from "node:path";
 import { LEAD_MAX_CALLS_PER_STEP, LEAD_STEP_TEXT_CAP_BYTES, LEAD_TOOL_CALL_CAP_BYTES, LEAD_TOOL_CALL_ID_CAP_BYTES, strictJsonParse, tokenCount, } from "./converse.js";
 import { run } from "./exec.js";
+import { CLAUDE_NO_TOOLS_ARGS, claudeModelArgs } from "./claude-print.js";
 import { claudeStreamReader } from "./lead-progress.js";
 import { ALL_CREDENTIAL_ENV } from "./provider.js";
 import { claudeLimitsOf, noteLimits } from "./provider-limits.js";
@@ -215,9 +216,7 @@ export async function performSubscriptionLeadRequest(request, runner = run) {
                 // Streaming (someone is watching): the same answer, delivered as
                 // events whose final `result` line is the whole structured reply.
                 "-p", ...(streaming ? ["--output-format", "stream-json", "--verbose", "--include-partial-messages"] : ["--output-format", "json"]), "--json-schema", JSON.stringify(schema),
-                "--safe-mode", "--no-session-persistence", "--tools", "", "--permission-mode", "dontAsk",
-                "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}',
-                ...(request.model === "default" ? [] : ["--model", request.model]),
+                ...CLAUDE_NO_TOOLS_ARGS, ...claudeModelArgs(request.model),
             ];
         }
         const result = await runner(command, args, {

package/dist/task-sizing.d.ts

@@ -1,5 +1,5 @@
 import { type SizeAnswer } from "./contracts/task-sizing.js";
-import { run, type ExecResult } from "./exec.js";
+import { type CommandRunner } from "./claude-print.js";
 import { type TaskSizing } from "./phase-routing.js";
 import type { Store } from "./store.js";
 /** The classifier's whole budget, from asking to answer. */
@@ -24,7 +24,6 @@ export declare function planningSignals(input: SizingInput): boolean;
 export declare function heuristicSizing(input: SizingInput, why?: string | null): TaskSizing;
 /** What the classifier reads: the task as data, bounded, keys blanked. */
 export declare function sizingText(input: SizingInput): string;
-type CommandRunner = (file: string, args: readonly string[], options: Parameters<typeof run>[2]) => Promise<ExecResult>;
 /** A small Claude model on this computer's sign-in: no tools, no MCP servers, no repository, credential keys stripped.
  * The abort ends it: a late answer never keeps a command (or its process) waiting. */
 export declare function claudeSizer(runner?: CommandRunner, model?: string, budgetMs?: number): Sizer;
@@ -41,8 +40,6 @@ export declare function classifyTask(input: SizingInput, sizer: Sizer | null, bu
 /** Install the process's classifier for filings (the CLI, the console, the worker); returns how to remove it. Unset,
  * filings keep the description's size — tests never spend a turn. */
 export declare function installFilingSizer(sizer: Sizer, budgetMs?: number): () => void;
-/** Whether filings in this process are classified. */
-export declare function filingSizerInstalled(): boolean;
 /**
  * After a filing: ask the classifier (within the budget) and apply its size
  * to the still-unapproved task. Runs in the background; the filing already