toolroll 0.9.67 → 0.9.68

package/dist/exec.js

@@ -9,12 +9,12 @@
 import { ACP_LINE_CAP, createAcpConversation } from "./acp-client.js";
 import { linuxFenceAvailable, linuxFenced, macosFenceAvailable, macosFenced } from "./agent-fence.js";
 import { execFile, execFileSync, spawn } from "node:child_process";
-import { readFileSync, realpathSync } from "node:fs";
-import { join } from "node:path";
+import { realpathSync } from "node:fs";
 import { observeProcessTree, stopProcessTree } from "./process-tree.js";
 import { jsonlDiscriminants } from "./jsonl-discriminants.js";
 import { createContainer, currentContainment } from "./containment.js";
 import { claudeLimitsOf, noteLimits } from "./provider-limits.js";
+import { sleep as defaultSleep } from "./sleep.js";
 /** Shell convention for "could not be executed": the refusal before any target ran. */
 export const CONTAINMENT_REFUSED_CODE = 126;
 /** Live provider children, for the deterministic stop. Registered only when `processGroup` was set. */
@@ -508,7 +508,7 @@ export function isTransientSpawnFailure(error) {
  * A non-transient answer — success, a real exit code, not found, timeout —
  * is returned at once: only the never-started case is retried.
  */
-export async function retryTransientSpawn(attempt, delays = SPAWN_RETRY_DELAYS_MS, sleep = ms => new Promise(resolve => setTimeout(resolve, ms))) {
+export async function retryTransientSpawn(attempt, delays = SPAWN_RETRY_DELAYS_MS, sleep = defaultSleep) {
     let last = await attempt();
     for (const delay of delays) {
         if (!last.transient)
@@ -942,81 +942,6 @@ function leadingClaudeSystemSubtype(prefix) {
 }
 /** How much of an oversized Claude result's end is kept to read its cost and usage (they follow the words). */
 const CLAUDE_RESULT_TAIL_CAP = 64 * 1024;
-/**
- * Where a key's value starts in a fragment of JSON text, once and only once. `"key":` never occurs inside a JSON
- * string (every quote there is escaped, so `y":` cannot appear), so each match is a real key, though possibly of a
- * nested object. A key seen more than once is ambiguous and reads as absent.
- */
-function soleKeyValueAt(texts, key) {
-    const pattern = new RegExp(`"${key}"\\s*:\\s*`, "g");
-    let found = null;
-    for (const text of texts) {
-        for (const match of text.matchAll(pattern)) {
-            if (found !== null)
-                return null;
-            found = { text, at: match.index + match[0].length };
-        }
-    }
-    return found;
-}
-/** The JSON object starting at `at`, read to its matching brace (strings and escapes respected), or null. */
-function jsonObjectAt(text, at) {
-    if (text[at] !== "{")
-        return null;
-    let depth = 0, inString = false;
-    for (let i = at; i < text.length && i - at < CLAUDE_RESULT_TAIL_CAP; i += 1) {
-        const c = text[i];
-        if (inString) {
-            if (c === "\\")
-                i += 1;
-            else if (c === '"')
-                inString = false;
-        }
-        else if (c === '"')
-            inString = true;
-        else if (c === "{")
-            depth += 1;
-        else if (c === "}" && --depth === 0) {
-            try {
-                const value = JSON.parse(text.slice(at, i + 1));
-                return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
-            }
-            catch {
-                return null;
-            }
-        }
-    }
-    return null;
-}
-/**
- * The accounting an oversized Claude result still carries, read by a bounded scan of its kept prefix and tail: the
- * session's running `total_cost_usd`, its `usage` and `num_turns`, and whether it is a main result at all (an
- * `origin` naming anything but a person makes it a background task's). Anything unreadable or seen twice is absent.
- */
-export function scanOversizedClaudeResult(prefix, tail) {
-    const texts = [prefix.toString("utf8"), ...(tail === undefined ? [] : [tail.toString("utf8")])];
-    const origin = soleKeyValueAt(texts, "origin");
-    const originObject = origin === null ? null : jsonObjectAt(origin.text, origin.at);
-    const primary = originObject === null || String(originObject["kind"] ?? "") === "human";
-    const account = {};
-    const number = (key) => {
-        const at = soleKeyValueAt(texts, key);
-        const match = at === null ? null : /^-?\d+(?:\.\d+)?(?:[eE][+-]?\d+)?/.exec(at.text.slice(at.at, at.at + 64));
-        const value = match === null ? NaN : Number(match[0]);
-        return Number.isFinite(value) && value >= 0 ? value : null;
-    };
-    const cost = number("total_cost_usd");
-    if (cost !== null)
-        account["total_cost_usd"] = cost;
-    const turns = number("num_turns");
-    if (turns !== null)
-        account["num_turns"] = turns;
-    const usageAt = soleKeyValueAt(texts, "usage");
-    const usage = usageAt === null ? null : jsonObjectAt(usageAt.text, usageAt.at);
-    if (usage !== null)
-        account["usage"] = usage;
-    return { primary, account };
-}
 /** Marks a Claude result whose session cost could not be read: the gateway charges the run's dollar cap instead. */
 export const CLAUDE_COST_UNKNOWN = "standing_orders_cost_unknown";
 function malformedCodexEventIsLoadBearing(prefix) {
@@ -1036,7 +961,6 @@ function malformedGeminiEventIsLoadBearing(prefix) {
     return type === "init" || type === "result";
 }
 export function runStreamJsonl(file, args, options = {}) {
-    const { cwd } = options;
     const childEnv = resolveChildEnv(options);
     return new Promise(resolve => {
         let child;
@@ -1249,7 +1173,6 @@ export function runStreamJsonl(file, args, options = {}) {
  * semantics match `runStreamJsonl`.
  */
 export function runGeminiStreamJsonl(file, args, options = {}) {
-    const { cwd } = options;
     const childEnv = resolveChildEnv(options);
     return new Promise(resolve => {
         let child;
@@ -1843,7 +1766,6 @@ export const STREAM_INPUT = Symbol.for("toolroll.streamInput");
 /** Whether a runner declares it keeps stdin open for a live session; an injected runner opts in by carrying the mark. */
 export const streamsInput = (runner) => typeof runner === "function" && runner[STREAM_INPUT] === true;
 export function runClaudeStreamJsonl(file, args, options = {}) {
-    const { cwd } = options;
     const childEnv = resolveChildEnv(options);
     const live = options.liveInput ?? null;
     return new Promise(resolve => {

package/dist/flow-actions.js

@@ -18,9 +18,6 @@
  * answer: the card takes its failure path. Trouble reaching a service is
  * tried again, like every step.
  */
-import { createHash } from "node:crypto";
-import { chmodSync, existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
 import { redactSecretAssignments } from "./builder.js";
 import { redactSecretLines, scanForSecrets } from "./evidence.js";
 import { fillFlowText } from "./flows.js";

package/dist/flow-draft.d.ts

@@ -1,4 +1,4 @@
-import { run, type ExecResult } from "./exec.js";
+import { type CommandRunner } from "./claude-print.js";
 import { type FlowDefinition, type FlowStage } from "./flows.js";
 export declare const DRAFT_CHARS: 12000;
 export type DraftCard = {
@@ -37,8 +37,6 @@ export declare function draftPrompt(stage: FlowStage, card: DraftCard, definitio
 export declare function wholeDraft(text: string): string;
 /** A draft a person edited, as kept: trimmed, whole (one over DRAFT_CHARS is refused where it is written, never cut), and never holding a key-shaped line. */
 export declare function keptDraft(text: string): string;
-type CommandRunner = (file: string, args: readonly string[], options: Parameters<typeof run>[2]) => Promise<ExecResult>;
 /** The production runner: Claude through the sign-in on this computer, with no tools, no MCP servers and no repository. */
 export declare function claudeDraftRunner(runner?: CommandRunner): DraftRunner;
 export declare const DRAFT_TIMEOUT = 180000;
-export {};

package/dist/flow-draft.js

@@ -7,13 +7,9 @@
  * nothing is sent: a later zone shows it to a person, and a later step posts
  * it ({{stage.<id>}}).
  */
-import { Buffer } from "node:buffer";
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { strictJsonParse } from "./converse.js";
 import { redactSecretLines, scanForSecrets } from "./evidence.js";
 import { run } from "./exec.js";
+import { CLAUDE_NO_TOOLS_ARGS, CLAUDE_SIGNED_OUT, claudeJsonBody, claudeModelArgs, inScratchDir } from "./claude-print.js";
 import { fillFlowText } from "./flows.js";
 import { ALL_CREDENTIAL_ENV } from "./provider.js";
 import { LIMITS } from "./decision.js";
@@ -62,30 +58,21 @@ export function keptDraft(text) {
 }
 /** The production runner: Claude through the sign-in on this computer, with no tools, no MCP servers and no repository. */
 export function claudeDraftRunner(runner = run) {
-    return async (request) => {
-        const dir = mkdtempSync(join(tmpdir(), "standing-orders-draft-"));
+    return request => inScratchDir("standing-orders-draft-", async (dir) => {
         const started = Date.now();
-        try {
-            const result = await runner("claude", [
-                "-p", "--output-format", "json", "--safe-mode", "--no-session-persistence", "--tools", "", "--permission-mode", "dontAsk",
-                "--permission-prompts", "none", "--strict-mcp-config", "--mcp-config", '{"mcpServers":{}}',
-                ...(request.model === "default" ? [] : ["--model", request.model]),
-            ], { cwd: dir, stdin: request.prompt, timeoutMs: request.timeoutMs, maxBuffer: 256 * 1024, omitEnv: ALL_CREDENTIAL_ENV, processGroup: true });
-            if (result.notFound)
-                return { ok: false, said: "Claude isn't installed on this computer." };
-            if (result.timedOut)
-                return { ok: false, said: "Claude took too long to write the draft." };
-            const parsed = strictJsonParse(Buffer.from(result.stdout, "utf8"), 256 * 1024, 12);
-            const body = parsed.ok && typeof parsed.value === "object" && parsed.value !== null && !Array.isArray(parsed.value) ? parsed.value : null;
-            if (result.code !== 0 || body === null || body["is_error"] === true || body["subtype"] !== "success" || typeof body["result"] !== "string") {
-                return { ok: false, said: /not logged in|login|authenticat/i.test(`${result.stdout}${result.stderr}`) ? "Claude isn't signed in on this computer." : "Claude couldn't write the draft." };
-            }
-            const cost = body["total_cost_usd"];
-            return { ok: true, text: body["result"], ms: Date.now() - started, ...(typeof cost === "number" && Number.isFinite(cost) && cost >= 0 ? { costUsd: cost } : {}) };
+        const result = await runner("claude", [
+            "-p", "--output-format", "json", ...CLAUDE_NO_TOOLS_ARGS, ...claudeModelArgs(request.model),
+        ], { cwd: dir, stdin: request.prompt, timeoutMs: request.timeoutMs, maxBuffer: 256 * 1024, omitEnv: ALL_CREDENTIAL_ENV, processGroup: true });
+        if (result.notFound)
+            return { ok: false, said: "Claude isn't installed on this computer." };
+        if (result.timedOut)
+            return { ok: false, said: "Claude took too long to write the draft." };
+        const body = claudeJsonBody(result.stdout, 256 * 1024);
+        if (result.code !== 0 || body === null || body["is_error"] === true || body["subtype"] !== "success" || typeof body["result"] !== "string") {
+            return { ok: false, said: CLAUDE_SIGNED_OUT.test(`${result.stdout}${result.stderr}`) ? "Claude isn't signed in on this computer." : "Claude couldn't write the draft." };
         }
-        finally {
-            rmSync(dir, { recursive: true, force: true });
-        }
-    };
+        const cost = body["total_cost_usd"];
+        return { ok: true, text: body["result"], ms: Date.now() - started, ...(typeof cost === "number" && Number.isFinite(cost) && cost >= 0 ? { costUsd: cost } : {}) };
+    });
 }
 export const DRAFT_TIMEOUT = DRAFT_TIMEOUT_MS;

package/dist/flow-scripts.d.ts

@@ -1,5 +1,5 @@
 import { type ScriptLanguage } from "./flows.js";
-import type { FlowScriptRow, Store } from "./store.js";
+import type { Store } from "./store.js";
 export type ScriptDraft = {
     name: string;
     about: string;
@@ -29,10 +29,3 @@ export type ScriptSaved = {
 };
 /** Save a script (a new version when it exists). */
 export declare function saveScript(store: Store, repo: string, input: Parameters<typeof validateScript>[0], actor: string, now: Date): ScriptSaved;
-/** The flows and zones in a project that run each script. */
-export declare function scriptUses(store: Store, repo: string): Map<string, {
-    flow: number;
-    flowName: string;
-    zone: string;
-}[]>;
-export declare function scriptWords(script: FlowScriptRow): string;

package/dist/flow-scripts.js

@@ -10,7 +10,6 @@
  */
 import { createHash } from "node:crypto";
 import { scanForSecrets } from "./evidence.js";
-import { flowDefinitionOf } from "./flow-engine.js";
 import { SCRIPT_LANGUAGES, SCRIPT_NAME } from "./flows.js";
 /** A script as it would be saved, checked in plain words. Throws. */
 export function validateScript(input) {
@@ -59,15 +58,3 @@ export function saveScript(store, repo, input, actor, now) {
     const version = store.saveFlowScript({ repo, ...draft, digest: scriptDigest(draft), by: actor }, now);
     return { ok: true, said: current === null ? `Saved the ${draft.name} script. Any flow in this project can run it.` : `Saved version ${version} of ${draft.name}. Every flow that runs it uses this version from now on.`, version };
 }
-/** The flows and zones in a project that run each script. */
-export function scriptUses(store, repo) {
-    const uses = new Map();
-    for (const flow of store.listFlows([repo]))
-        for (const stage of flowDefinitionOf(flow)?.stages ?? [])
-            if (stage.kind === "check" && stage.script !== null)
-                uses.set(stage.script, [...uses.get(stage.script) ?? [], { flow: flow.id, flowName: flow.name, zone: stage.title }]);
-    return uses;
-}
-export function scriptWords(script) {
-    return `${script.name} (version ${script.version}, up to ${script.timeoutMinutes} min): ${script.about}`;
-}

package/dist/flow-send.js

@@ -19,7 +19,7 @@ import { withActor } from "./actor.js";
 import { flowCardHref, flowDefinitionOf, revisionWithNote } from "./flow-engine.js";
 import { itemPlug, itemSource } from "./flow-items.js";
 import { withStageHandoff } from "./contracts/stage-output.js";
-import { flowSendForStore, readFlowChoiceAnswer, readFlowItems, readFlowSendPayload } from "./contracts/flow-send.js";
+import { flowSendForStore, readFlowChoiceAnswer, readFlowSendPayload } from "./contracts/flow-send.js";
 import { notifyPeople } from "./flow-people.js";
 import { readVerifiedReport } from "./evidence.js";
 import { FLOW_END, replyTarget } from "./flows.js";

package/dist/flow-share.d.ts

@@ -59,8 +59,6 @@ export declare function importFlow(store: Store, plan: FlowImportPlan, actor: st
     id: number;
     said: string;
 };
-/** What a flow's zones and paths are, without where they sit on the canvas: what a round trip keeps. */
-export declare function flowShape(definition: FlowDefinition): string;
 /** A gist or GitHub file page as the address of its raw text; null when it isn't one Toolroll fetches. */
 export declare function rawFlowUrl(address: string): string | null;
 export type FetchLike = (url: string, init: {

package/dist/flow-share.js

@@ -15,7 +15,6 @@
  * a person approves them, and its instructions are shown as the untrusted
  * text they are.
  */
-import { createHash } from "node:crypto";
 import { scanForSecrets } from "./evidence.js";
 import { flowDefinitionOf } from "./flow-engine.js";
 import { readFlowSecrets } from "./flow-secrets.js";
@@ -24,7 +23,7 @@ import { addFlowTriggerTo, describeTrigger, HOOK_PATH, readHooksBase, triggerCon
 import { durationMinutes, durationWords, FlowContractError, flowTerms, inStepWords, LANGUAGE_WORDS, validateFlowDefinition } from "./flows.js";
 import { stageReferenceProblems } from "./contracts/stage-output.js";
 import { readVersioned } from "./contracts/contract.js";
-import { FLOW_ALIASES, WEBHOOK_SENDERS, FLOW_FILE_FORMAT, legacyFlowNeed, legacySubagentStep, FLOW_FILE_VERSION, flowFileSchema, PARAMETER_ID } from "./contracts/flow.js";
+import { FLOW_ALIASES, WEBHOOK_SENDERS, FLOW_FILE_FORMAT, legacyFlowNeed, legacySubagentStep, FLOW_FILE_VERSION, flowFileSchema } from "./contracts/flow.js";
 import { parseSchedule } from "./flow-schedule.js";
 export { FLOW_FILE_FORMAT, FLOW_FILE_VERSION };
 /** The largest flow file Toolroll reads or fetches. */
@@ -550,10 +549,6 @@ export function importFlow(store, plan, actor, now, dir) {
         return { id, said: `Imported ${plan.name}.${off === 0 ? "" : ` Its ${off === 1 ? "trigger is" : `${off} triggers are`} off until you turn ${off === 1 ? "it" : "them"} on.`}${held === 0 ? "" : ` Approve its ${held === 1 ? "script" : `${held} scripts`} on the Scripts panel before ${held === 1 ? "it runs" : "they run"}.`}` };
     });
 }
-/** What a flow's zones and paths are, without where they sit on the canvas: what a round trip keeps. */
-export function flowShape(definition) {
-    return createHash("sha256").update(JSON.stringify({ start: definition.start, stages: definition.stages.map(one => ({ ...one, zone: null })) })).digest("hex");
-}
 // ------------------------------------------------------------------ fetching
 const FETCH_HOSTS = new Set(["github.com", "gist.github.com", "raw.githubusercontent.com", "gist.githubusercontent.com"]);
 /** A gist or GitHub file page as the address of its raw text; null when it isn't one Toolroll fetches. */

package/dist/flow-steps.js

@@ -22,7 +22,7 @@
  * twice. Trouble reaching a service is retried three times, 5 then 15
  * minutes apart; a check that fails is an answer, not trouble.
  */
-import { chmodSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { mkdirSync, rmSync } from "node:fs";
 import { join } from "node:path";
 import { approvedCommandShell, redactSecretAssignments, SETUP_ENV_ALLOWLIST, SETUP_ENV_DENYLIST } from "./builder.js";
 import { assignmentOf } from "./assignment.js";

package/dist/flow-triggers.d.ts

@@ -62,7 +62,6 @@ export declare function takesDeliveries(config: TriggerConfig): boolean;
 export declare function saveHookSecret(dir: string, trigger: number, secret: string, credential?: string): void;
 /** Exactly this credential's secret, or null: never another's. */
 export declare function readHookSecret(dir: string, trigger: number, credential?: string): string | null;
-export declare const LINEAR_ENV = "TOOLROLL_LINEAR_KEY";
 /** The Linear API key the worker checks Linear with: the environment, or kept by Toolroll (the keychain, or an owner-only file beside the database). */
 export declare function readLinearKey(dir: string | null): string | null;
 export declare function saveLinearKey(dir: string, key: string): {

package/dist/flow-triggers.js

@@ -50,6 +50,7 @@ import { prepareUnattendedCandidates, grantSignsScriptOf, scriptProvenanceOf, sc
 import { tmpdir } from "node:os";
 import { envValue } from "./names.js";
 import { linearLabelNames, readFormSubmission, readGithubEvent, readGithubIssue, readGithubIssueEventList, readGithubIssueList, readGithubRun, readGithubRunList, readInboundMail, readLinearAnswer, readLinearEvent, readLinearIssue, readWebhookPayload } from "./contracts/trigger-payloads.js";
+import { isRecord } from "./is-record.js";
 export { FLOW_TRIGGER_KINDS };
 export const CHAT_APP_NAMES = { slack: "Slack", discord: "Discord", teams: "Teams", telegram: "Telegram" };
 /** What each kind is called on the canvas. */
@@ -66,7 +67,6 @@ const HOOK_BYTES = 1_000_000;
 const TEAM = new Set(["OWNER", "MEMBER", "COLLABORATOR"]);
 // ------------------------------------------------------------ the terms
 const HIDDEN = /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f\u200b-\u200f\u202a-\u202e\u2066-\u2069]/;
-const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /**
  * A trigger's settings read by their one schema (`label: required`, `unknown key 'flows'`). A setting given as null is
  * left out, and a button's blank question lines are dropped, as every release has read them. Then what the schema can't
@@ -414,7 +414,6 @@ function dropHookSecret(dir, trigger, credential) {
     catch { /* never read: nothing points at it */ }
 }
 const LINEAR = { name: "linear-key", file: ["linear-key"] };
-export const LINEAR_ENV = "TOOLROLL_LINEAR_KEY";
 /** The Linear API key the worker checks Linear with: the environment, or kept by Toolroll (the keychain, or an owner-only file beside the database). */
 export function readLinearKey(dir) {
     const env = envValue(process.env, "LINEAR_KEY")?.trim();

package/dist/flow-unattended.js

@@ -33,6 +33,7 @@ import { isProtectedWork } from "./approval-policy.js";
 import { dollarWords as dollars, scheduleWords, UNATTENDED_RULE_WORDS, unattendedCoverWords, unattendedEndWords, unattendedHeadWords, unattendedLimitWords, untilWords } from "./flow-unattended-words.js";
 import { MODE_MAX_DAYS } from "./modes.js";
 import { accountReachesSql } from "./project-access.js";
+import { canonicalJson } from "./canonical-json.js";
 /** Grant history, run reservations and the last prepared script snapshots shared by UI/worker processes. Additive only. */
 export const FLOW_UNATTENDED_SCHEMA = `
 CREATE TABLE IF NOT EXISTS flow_script_provenance (
@@ -72,18 +73,6 @@ export const FLOW_ACCEPTANCE = {
 export const UNATTENDED_MAX_RUNS = 50;
 /** The largest per-attempt budget a grant may name: $100. */
 export const UNATTENDED_MAX_BUDGET_MICROUSD = 100_000_000;
-function canonicalJson(value) {
-    if (Array.isArray(value))
-        return `[${value.map(canonicalJson).join(",")}]`;
-    if (value !== null && typeof value === "object") {
-        const entries = Object.entries(value)
-            .filter(([, v]) => v !== undefined)
-            .sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0))
-            .map(([k, v]) => `${JSON.stringify(k)}:${canonicalJson(v)}`);
-        return `{${entries.join(",")}}`;
-    }
-    return JSON.stringify(value);
-}
 export const unattendedTermsJson = (terms) => canonicalJson(terms);
 /** sha256 over a domain-separated canonical encoding, 32 hex like the mode digest. */
 export function unattendedDigestOf(terms) {

package/dist/flows.js

@@ -54,6 +54,7 @@ import { cardReference } from "./task-source.js";
 import { parseContract, readVersioned } from "./contracts/contract.js";
 import { stageReferenceProblems } from "./contracts/stage-output.js";
 import { CHOICES_MAX, CHOICES_MIN, FLOW_ALIASES, FLOW_COLORS, FLOW_DEFINITION_VERSION, FLOW_END, FLOW_MERGE_METHODS, FLOW_STAGE_KINDS, flowDefinitionSchema, flowStepsSchema, HEADERS_MAX, legacySubagentStep, LONGEST_WAIT_MINUTES, savedFlowDefinitionSchema, SCRIPT_LANGUAGES, SCRIPT_NAME, sortKeyOf, SURE_AT_MAX, SURE_AT_MIN, ZONE_ID, } from "./contracts/flow.js";
+import { isRecord } from "./is-record.js";
 export { CHOICES_MAX, CHOICES_MIN, FLOW_COLORS, FLOW_END, FLOW_MERGE_METHODS, FLOW_STAGE_KINDS, LONGEST_WAIT_MINUTES, SCRIPT_LANGUAGES, SCRIPT_NAME, sortKeyOf };
 /** What each kind is called and does, in the words the canvas uses. */
 export const FLOW_KIND_WORDS = {
@@ -137,7 +138,6 @@ export class FlowContractError extends Error {
     }
 }
 // ------------------------------------------------------------------ reading a drawing
-const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 /** Text as every release has kept it: trimmed, and blank as none. Anything else is left for the schema to name. */
 const said = (value) => value === undefined || value === null ? null : typeof value === "string" ? value.trim() === "" ? null : value.trim() : value;
 const coordinate = (value, min, max, fallback) => typeof value === "number" && Number.isFinite(value) ? Math.round(Math.min(max, Math.max(min, value))) : fallback;

package/dist/health-cli.d.ts

@@ -1,3 +1,3 @@
-import { type TeamCliOptions } from './team-cli.js';
+import { type ConnectOptions } from './connect-cli.js';
 /** Read the running server, never a fresh CLI process's empty counters or the local database. */
-export declare function runHealthCommand(argv: readonly string[], write: (line: string) => void, options?: TeamCliOptions): Promise<number>;
+export declare function runHealthCommand(argv: readonly string[], write: (line: string) => void, options?: ConnectOptions): Promise<number>;

package/dist/health-cli.js

@@ -1,4 +1,4 @@
-import { bearerOf, centralProfile } from './team-cli.js';
+import { bearerOf, centralProfile } from './connect-cli.js';
 import { envelopeJson } from './envelope.js';
 import { healthSnapshotSchema } from './contracts/health.js';
 /** Read the running server, never a fresh CLI process's empty counters or the local database. */

package/dist/invoke.d.ts

@@ -24,9 +24,6 @@ import type { Runner } from "./worktree.js";
 import { type WritesMode } from "./agent-fence.js";
 import { type NetworkProfile } from "./egress.js";
 export type { ProviderRunner } from "./provider.js";
-/** The claude binary name — kept for the legacy quota rows and tests that
- * describe history; new code carries a resolved AgentSpec instead. */
-export declare const PROVIDER_BINARY = "claude";
 export type ProviderUsage = {
     tokensIn: number | null;
     tokensOut: number | null;

package/dist/invoke.js

@@ -39,9 +39,6 @@ import { proxyEnv, providerOnlyNetwork, startEgressProxy } from "./egress.js";
 import { bridgeFits, startEgressBridge } from "./egress-bridge.js";
 import { claudeConfigDir, claudeDefaults, codexDefaults, codexHomeDir, isolatedCodexHome } from "./provider-home.js";
 import { billingOf, claudeBillingFrom, seenBilling } from "./spend.js";
-/** The claude binary name — kept for the legacy quota rows and tests that
- * describe history; new code carries a resolved AgentSpec instead. */
-export const PROVIDER_BINARY = "claude";
 /** "Within seconds": how soon a silent failed run must end for its stderr to
  * be read for the sign-in signal. */
 const AUTH_EARLY_EXIT_MS = 30_000;
@@ -64,6 +61,11 @@ function claudeSettingsAuthProblem(configDir) {
     catch (error) {
         if (error.code === "ENOENT")
             return null;
+        // A sandbox around the plane (a project check's fence, say) may hide the file while the CLI still signs in from its
+        // keychain. Isolated builds never load it, and a login that needed it fails within seconds and is reported as one.
+        const code = error.code;
+        if (code === "EPERM" || code === "EACCES")
+            return null;
         return "Can't read your Claude settings.json to check sign-in. Restore access to that file and try again. Isolated builds do not load it.";
     }
     let settings;

package/dist/is-record.d.ts

@@ -0,0 +1,2 @@
+/** A plain object: not null, not an array. */
+export declare const isRecord: (value: unknown) => value is Record<string, unknown>;

package/dist/is-record.js

@@ -0,0 +1,2 @@
+/** A plain object: not null, not an array. */
+export const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);

package/dist/lead-doors.d.ts

@@ -1,5 +1,5 @@
 import { type SharedActionOptions } from './chat-actions.js';
-import { type CoordinatorProposal, type LeadProposal, type Store } from "./store.js";
+import { type LeadProposal, type Store } from "./store.js";
 import type { VerifiedApprover } from "./principal.js";
 import { type TeamChatProviderResolver } from './team-chat-authorization.js';
 export type ProposalKind = LeadProposal["kind"];
@@ -78,7 +78,3 @@ export declare function dismissLeadProposal(store: Store, who: VerifiedApprover,
  */
 export declare function confirmCoordinatorProposal(store: Store, who: VerifiedApprover, proposalId: number, now: Date, options: DoorOptions): DoorOutcome;
 export declare function dismissCoordinatorProposal(store: Store, who: VerifiedApprover, proposalId: number, now: Date): boolean;
-/** Which door renders a coordinator proposal for this reader: the repo must be admitted. */
-export declare function coordinatorProposalVisible(who: {
-    repos: readonly string[];
-}, proposal: CoordinatorProposal): boolean;

package/dist/lead-doors.js

@@ -260,10 +260,6 @@ export function dismissCoordinatorProposal(store, who, proposalId, now) {
         return store.casCoordinatorProposal(proposalId, "pending", "dismissed", who.name, null, now);
     });
 }
-/** Which door renders a coordinator proposal for this reader: the repo must be admitted. */
-export function coordinatorProposalVisible(who, proposal) {
-    return who.repos.includes(proposal.repo);
-}
 /**
  * The shared executor: one kind, one payload, the operator's own act
  * through the primitive that owns it. Module-private (v3 review, finding

package/dist/lead-tools.js

@@ -1,5 +1,4 @@
 import { sweepLine, sweepTable } from "./lead-sweep.js";
-import { TEXT_LIMITS } from "./text-limits.js";
 import { connectionsOf, oneClickOf } from "./mcp-connect.js";
 import { checkLevelFromWords, isCheckLevel } from "./check-levels.js";
 import { policyParts } from "./policy.js";
@@ -39,9 +38,9 @@ import { CHAT_TASK_ACTIONS, chatTaskRun, chatTaskStamp, isChatTaskAction } from
 import { Buffer } from "node:buffer";
 import { LEAD_ASK_OTHER } from "./store.js";
 import { hasDisguisedText, hasForbiddenControls } from "./decision.js";
-import { readVerifiedArtifact, readVerifiedReport, scanForSecrets } from "./evidence.js";
+import { readVerifiedArtifact, scanForSecrets } from "./evidence.js";
 import { parseAcceptanceCriteria } from "./scope.js";
-import { diagnoseTaskDispatch, withDispatchDiagnoses } from "./dispatch.js";
+import { diagnoseTaskDispatch } from "./dispatch.js";
 import { agentChoicesFor, routeOfTask, INSTALLATION_SCOPE } from "./agentconfig.js";
 import { isNewModel, modelWords, priceWords, runtimeStates, seenModels } from "./model-catalog.js";
 import { agentsSummary, chosenWords, PHASES, postureWords, routeProblems, sameSpec, sizeSourceWords, sizeWords, specWords } from "./phase-routing.js";
@@ -55,7 +54,7 @@ import { planInChat } from "./chat-decide.js";
 import { flowDecisionAt } from "./telegram-flow.js";
 import { flowPersonOf } from "./flow-send.js";
 import { flowInsights } from "./flow-insights.js";
-import { describeTrigger, FLOW_TRIGGER_KINDS, triggerConfigOf } from "./flow-triggers.js";
+import { describeTrigger, triggerConfigOf } from "./flow-triggers.js";
 export const LEAD_MAX_PROPOSALS_PER_TURN = 5;
 export { reportSummaryFor } from "./report-summary.js";
 import { reportSummaryFor } from "./report-summary.js";
@@ -63,8 +62,6 @@ import { labelOf, nameOf, summaryOf, zonesOf } from "./subagent-admin.js";
 import { SUBAGENT_TEMPLATES, withSection } from "./subagents.js";
 import { callOutcome, callWords, defaultRule, ruleWords } from "./subagent-tools.js";
 import { deskOf, routinesOf } from "./subagent-desk.js";
-import { KITS } from "./kits.js";
-import { STARTER_IDS } from "./flow-starters.js";
 import { undoFor, weekOf, weekWords } from "./subagent-week.js";
 import { PERSON_ID, personEntry, teamRoomOf } from "./lead-people.js";
 import { aboutYouOf, checkAboutYouLine } from "./lead-about.js";

package/dist/live-detail.d.ts

@@ -10,7 +10,6 @@ export type LiveDetailSetting = {
 };
 /** Whether this project's live conversations show commands. Unknown or absent is off. */
 export declare function liveCommandsShown(store: Store, repo: string | null): boolean;
-export declare function liveDetailSetting(store: Store, repo: string): LiveDetailSetting | null;
 /** Save the setting and its ledger line in one transaction. The caller has proved who is asking (and, to turn it on, their password). */
 export declare function setLiveCommands(store: Store, change: {
     repo: string;

package/dist/live-detail.js

@@ -26,12 +26,6 @@ export function liveCommandsShown(store, repo) {
         return false;
     }
 }
-export function liveDetailSetting(store, repo) {
-    const row = store.handle.prepare("SELECT repo, commands, updated_by, updated_at FROM live_detail_setting WHERE repo = ?").get(repo);
-    if (row === undefined)
-        return null;
-    return { repo: String(row["repo"]), commands: Number(row["commands"]) === 1, updatedBy: String(row["updated_by"]), updatedAt: String(row["updated_at"]) };
-}
 /** Save the setting and its ledger line in one transaction. The caller has proved who is asking (and, to turn it on, their password). */
 export function setLiveCommands(store, change, now) {
     store.transact(() => {

package/dist/live-terminal.js

@@ -13,6 +13,7 @@ import { existsSync, mkdirSync, readlinkSync, realpathSync, statSync } from "nod
 import { delimiter, isAbsolute, join } from "node:path";
 import { codingEnvironment } from "./coding-provider.js";
 import { teardownGit, refusal } from "./teardown-git.js";
+import { sleep } from "./sleep.js";
 export const TERMINAL_PROGRAMS = ["claude", "codex", "shell"];
 /** At most this many running sessions per console, and this many kept at all (ended ones count until removed). */
 export const MAX_LIVE_TERMINALS = 8;
@@ -404,7 +405,7 @@ export class TerminalHost {
     }
     async sweep(session) {
         const grace = this.options.closeGraceMs ?? CLOSE_GRACE_MS;
-        const pause = (ms) => new Promise(resolve => setTimeout(resolve, ms));
+        const pause = sleep;
         const leaderGone = () => session.pty === null;
         let readable = true;
         const members = () => {

package/dist/live.d.ts

@@ -16,7 +16,6 @@
 import { type KeyState, type LiveActivityKind, type LiveRecord, type LiveRecorderOptions } from "./live-records.js";
 export declare const LIVE_LINE_CAP: number;
 export declare const LIVE_FILE_CAP: number;
-export declare const LIVE_CAP_MARKER = "[the live view stopped at its size cap \u2014 the run record continues]";
 export declare const LIVE_REDACTED_LINE = "[a credential-shaped line was redacted]";
 /** Finalized runs keep their live file this long for the final drain. */
 export declare const LIVE_RETAIN_MS: number;

package/dist/live.js

@@ -16,10 +16,9 @@
 import { closeSync, constants, fstatSync, lstatSync, mkdirSync, openSync, readSync, readdirSync, statSync, unlinkSync, writeSync } from "node:fs";
 import { join } from "node:path";
 import { scanForSecrets } from "./evidence.js";
-import { createLiveRecorder, LIVE_CAP_WORDS, parseLiveRecords, redactLiveLines, projectLiveText, serializeLiveRecord } from "./live-records.js";
+import { createLiveRecorder, parseLiveRecords, redactLiveLines, projectLiveText, serializeLiveRecord } from "./live-records.js";
 export const LIVE_LINE_CAP = 2 * 1024;
 export const LIVE_FILE_CAP = 4 * 1024 * 1024;
-export const LIVE_CAP_MARKER = LIVE_CAP_WORDS;
 export const LIVE_REDACTED_LINE = "[a credential-shaped line was redacted]";
 /** Finalized runs keep their live file this long for the final drain. */
 export const LIVE_RETAIN_MS = 24 * 60 * 60 * 1000;

package/dist/mcp-core.js

@@ -9,13 +9,11 @@
  * `tools/call` results with `isError: true`.
  */
 import { dirname, join } from 'node:path';
-import { statSync } from 'node:fs';
 import { repositoryContextRead } from './repository-context.js';
 import { ASSIGNMENT_TOOLS, assignmentForCoordinator } from "./assignment-adapters.js";
 import { parseContract, toModelSchema } from "./contracts/contract.js";
 import { GATEWAY_TOOL_INPUTS, GATEWAY_TOOL_OUTPUTS } from "./contracts/gateway-tools.js";
 import { reportToolOutput } from "./contracts/lead-tools.js";
-import { PACKAGE_VERSION } from "./version.js";
 import { authenticateCoordinator, fileCoordinatorProposal, statusFor, listTasksFor, taskDetailFor, } from "./coordinator.js";
 import { ISO_STAMP_RULE, decisionOver, decisionsOver, labelRepos, queueOver, recapOver } from "./lead-tools.js";
 import { proposeAsCoordinator } from "./coordinator-proposals.js";

package/dist/memory-pass.js

@@ -13,7 +13,7 @@
 import { createHash } from 'node:crypto';
 import { existsSync, readdirSync, readFileSync, statSync } from 'node:fs';
 import { homedir } from 'node:os';
-import { basename, join } from 'node:path';
+import { join } from 'node:path';
 import { scanForSecrets, readVerifiedArtifact } from './evidence.js';
 import { changeKnowledge, knowledgeView } from './project-knowledge.js';
 import { listDecisions, recordDecision } from './project-memory.js';

package/dist/model-catalog.js

@@ -14,7 +14,7 @@ import { delimiter, join } from "node:path";
 import { fetchOpenRouterModels } from "./openrouter-models.js";
 import { codexModelSchema, codexModelsCacheSchema, npmLatestSchema } from "./contracts/model-catalog.js";
 import { readCappedBody } from "./converse.js";
-import { validModelId } from "./provider.js";
+import {} from "./provider.js";
 import { activeUpdateWork } from "./desktop-update-gate.js";
 export const MODELS_SCHEMA = `
 CREATE TABLE IF NOT EXISTS model_seen (