pantograph.git/src/luarocks_runtime.zig, branch mainUnnamed repository; edit this file 'description' to name the repository.
https://code.tjp.lol/pantograph.git/atom?h=main2026-07-05T22:23:49Zbig cli/tui gaps project2026-07-05T22:23:49Ztt@tjp.lol2026-07-04T15:50:12Zurn:sha1:f759f149377942c4e04802c45162cda1c9bfb2b3Load extensions via unified policy, entry/activate, rocks and paths2026-07-01T21:37:04Ztt@tjp.lol2026-07-01T21:36:20Zurn:sha1:800b2c4b6115845f6bf15d90484b3e80e81a606f
Replace the split [tools]/[extensions] config sections and the two-stage
load gate with a single model:
- [extensions] is now one policy resolved across all layers. Rules from
every layer are kept (not clobbered) and resolved by last-match-wins
after sorting by (layer, glob specificity, deny-last), so a base layer
can carve one name out of an otherwise-denied group and a higher layer's
broad rule still wins. Default is allow; whitelist via deny=["**"].
- Registration is deferred: a source returns an entry {name, activate}
(or a list, or the sugar tool table), is always eval'd side-effect-free,
and only permitted names get activate()d. Identity is the declared name,
not the filename. Collapses the old pre/post-load two-stage gate.
- The loader runs two passes (eval -> shadow -> filter -> activate) with
precedence project>user>base and, within a layer, rocks<paths<dir.
- extensions.paths adds extra scan dirs; extensions.rocks loads luarocks
packages as extension sources (require-as-entries). Startup installs
only missing rocks (no per-launch network hit); panto update force-
(re)installs every configured rock.
deny is a feature toggle, not a security boundary: rocks is where registry
code enters, so the pin list is the trust boundary. Rock integrity
(first-party GPG signing + --verify) is designed but not yet wired; until
then rocks pins which version, not which bytes.
Breaking: [tools] is removed; extensions must return entries. Built-in
tools and the wc example keep working via the sugar tool form.
ponytail simplifications to panto cli and lua extensiosn2026-06-23T16:53:26Ztt@tjp.lol2026-06-23T15:38:23Zurn:sha1:69a1ee138bb78ad4663fe2d9e58678f7b0d07b74model registry sync via models.dev2026-06-15T22:15:10Ztt@tjp.lol2026-06-15T22:14:55Zurn:sha1:d9d4131cb321a9ce29b000cd7aed8ced9a18efc1Add Codex Responses support and session debugging2026-06-15T21:08:32Ztt@tjp.lol2026-06-14T05:45:59Zurn:sha1:02b4c7a35ac0b714bc045d54fb4bb45d1ce4e490
Teach provider config and auth resolution about the Codex Responses
dialect, including user-facing `style = "openai_responses"` with
`dialect = "codex"`. Serialize and parse Responses traffic with
provider-specific reasoning replay, assistant phase metadata, and robust
function-call assembly keyed by `output_index` so streamed tool inputs
survive proxy quirks and empty terminal payloads.
Also persist thinking origins and message metadata across sessions, add
the Anthropic interleaved-thinking header switch, write per-session
debug logs, and improve the TUI and scripts for inspecting tool output
and session costs.
fix a pointer-casting bug2026-06-15T21:08:32Ztt@tjp.lol2026-06-14T05:22:46Zurn:sha1:71643a5d69ffc40882c9fcde3cc8a3bcf02d7396auth: flatten [auth.<name>] config + ${...} substitution2026-06-15T21:08:32Ztt@tjp.lol2026-06-13T20:24:31Zurn:sha1:20e6e08a42240aef0b36ecf627cbcde921912071
Collapse the auth schema: infer `type` from keys, replace key/key_env_var with
a single `key` (resolved via substitution), flatten the exchange to flat
`exchange_*` keys, and drop the auth-level headers tables in favor of reusing
the provider's `extra_headers` on the auth HTTP calls. Add `${sibling}` and
`${env:VAR}` substitution over auth values (GitHub Enterprise = set `domain`).
Restore api_key-empty → provider-drop. Update default config, docs, and tests.
auth: openai_responses provider for Codex subscription (Tier 2)2026-06-15T21:08:32Ztt@tjp.lol2026-06-13T18:22:18Zurn:sha1:eb19fd812e15de5a6930daf2fcd0b2b0757687c7
Add the OpenAI Responses API wire dialect (openai_responses APIStyle +
OpenAIResponsesConfig), a request serializer (instructions/input items,
flat function tools, reasoning, store:false, include encrypted reasoning),
and a streaming state machine over the typed response.* SSE events mapping
to the shared block model. Wire dispatch, buildProviderConfig, the C-ABI
free switch, and the reasoning selectors. Ship a commented Codex example in
the default config.
Implemented from the Responses API docs + the open-source Codex client and
covered by fixture tests; live verification against a ChatGPT plan is still
required (documented).
auth: clean-break named [auth.<name>] sessions + extra_headers2026-06-15T21:08:32Ztt@tjp.lol2026-06-13T17:50:00Zurn:sha1:deb4ce4a1a76869771bfcdd758455c49815f0d13
Replace provider-level api_key/api_key_env_var with named auth sessions:
providers now reference `auth = "<name>"` and credentials live under
`[auth.<name>]`. Adds the libpanto auth type surface (AuthConfig, TokenSet,
ResolvedCredential), a Header type and provider `extra_headers`, and rewires
the CLI config loader (parse [auth.<name>], require auth=, providers always
survive, eager api_key resolution). Updates the shipped default config.
Add addUserText helper; update all call sites2026-06-10T18:17:27Ztt@tjp.lol2026-06-10T16:06:07Zurn:sha1:bb85e867bc938138f29fb45230169af1ba60761c
Conversation.addUserMessage now takes a []ContentBlock (symmetric with
addAssistantMessage). Introduce a thin addUserText wrapper in agent.zig
for the plain-text case and update every call site in agent.zig and
anthropic_messages_json.zig accordingly.