@crouton-kit/crouter 0.3.48 → 0.3.50

package/dist/daemon/manage.js

@@ -6,11 +6,61 @@
 import { spawn } from 'node:child_process';
 import { dirname, join } from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { mkdirSync } from 'node:fs';
+import { mkdirSync, openSync, closeSync } from 'node:fs';
 import { crtrHome } from '../core/canvas/paths.js';
 import { hostExecPath } from '../core/runtime/branded-host.js';
 import { isDaemonRunning, readPidfile, isPidAlive } from './crtrd.js';
 // ---------------------------------------------------------------------------
+// Daemon env sanitization
+// ---------------------------------------------------------------------------
+/** Env keys that must NEVER reach the daemon process. Restarting crtrd is
+ *  overwhelmingly done from inside an agent node's own bash tool (`crtr sys
+ *  daemon stop && start`), which inherits that node's FULL env — its identity
+ *  (`CRTR_NODE_ID`/`CRTR_KIND`/…, the `nodeEnv()` shape in `core/runtime/
+ *  nodes.ts`), its front-door recursion-guard flag, and any pi-engine
+ *  resolution seam a prior test/dev session left exported. The daemon is a
+ *  singleton supervisor, never "a node" itself, so none of this belongs in its
+ *  env regardless of whether today's code happens to read it — and at least one
+ *  of these IS actively read: `host.ts`'s broker-engine resolution falls back to
+ *  `process.env['CRTR_BROKER_ENGINE']` verbatim (nodeEnv() never sets that key,
+ *  so nothing overrides it per child launch), so a daemon that inherits a
+ *  stale/dev override throws inside `headlessBrokerHost.launch()` on EVERY
+ *  relaunch it ever attempts, for its whole lifetime — the 2026-07-06 diagnosis
+ *  root cause behind 19 nodes killed with "failed to relaunch and is now dead". */
+export const DAEMON_ENV_STRIP_KEYS = [
+    // Node identity (nodeEnv() shape) — meaningless for a process supervising
+    // many nodes rather than being one.
+    'CRTR_NODE_ID',
+    'CRTR_KIND',
+    'CRTR_MODE',
+    'CRTR_LIFECYCLE',
+    'CRTR_NODE_CWD',
+    'CRTR_CONTEXT_DIR',
+    'CRTR_CYCLES',
+    'CRTR_PROFILE_ID',
+    'CRTR_PARENT_NODE_ID',
+    // Recursion-guard flag — only meaningful inside a pi engine process.
+    'CRTR_FRONT_DOOR',
+    // Engine-resolution seams NOT overridden per child launch — the proven and
+    // suspected poison vectors.
+    'CRTR_BROKER_ENGINE',
+    'CRTR_PI_BINARY',
+    'CRTR_FAULT_RETRY_PROBE',
+    // Generic Node.js env poisoning (a stray dev/debug flag from the restarting
+    // shell).
+    'NODE_OPTIONS',
+];
+/** A copy of `process.env` with every `DAEMON_ENV_STRIP_KEYS` entry removed.
+ *  Deliberate global config the user actually wants the daemon to see —
+ *  `CRTR_HOME`, `CRTR_SUBTREE`, `CRTR_LOG`, `CRTR_DEBUG`, etc. — passes through
+ *  untouched; only the node-identity/engine-poisoning surface is stripped. */
+export function sanitizedDaemonEnv() {
+    const env = { ...process.env };
+    for (const key of DAEMON_ENV_STRIP_KEYS)
+        delete env[key];
+    return env;
+}
+// ---------------------------------------------------------------------------
 // Entry point resolution
 // ---------------------------------------------------------------------------
 /** Resolve the absolute path to the crtrd-cli entry point.
@@ -70,10 +120,22 @@ export async function spawnDaemon() {
     // is launchd-owned, the plist's ProgramArguments must point at the branded
     // binary too — this path only covers a manual `crtr sys daemon start`.
     const entry = resolveCrtrdEntry();
+    // Route stdout+stderr to an append-mode file instead of discarding them
+    // (stdio:'ignore'). Every `[crtrd] …` diagnostic — including the one line
+    // that names WHY a relaunch failed (crtrd.ts's per-node supervise catch) —
+    // used to go to /dev/null for any manually-started daemon, the common case
+    // (only a launchd-owned daemon had a logging plist). Mirrors host.ts's
+    // broker.log pattern: one fd, both streams, append so a restart keeps history.
+    const errLogPath = join(crtrHome(), 'crtrd.err');
+    const errFd = openSync(errLogPath, 'a');
     const child = spawn(hostExecPath(), [entry], {
         detached: true,
-        stdio: 'ignore',
+        stdio: ['ignore', errFd, errFd],
+        env: sanitizedDaemonEnv(),
     });
+    // The child holds its own dup of the fd; release the parent's copy so the
+    // launching process never leaks it.
+    closeSync(errFd);
     const pid = child.pid;
     if (pid === undefined) {
         throw new Error('daemon spawn did not return a pid');

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crouton-kit/crouter",
-  "version": "0.3.48",
+  "version": "0.3.50",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",
@@ -33,7 +33,7 @@
     "prebuild": "rm -rf node_modules/@earendil-works/pi-coding-agent/node_modules/@earendil-works/pi-tui node_modules/@earendil-works/pi-coding-agent/node_modules/@earendil-works/pi-ai node_modules/@earendil-works/pi-coding-agent/node_modules/@earendil-works/pi-agent-core",
     "build": "rm -rf dist && tsc && cp -R src/builtin-views dist/builtin-views && cp -R src/builtin-memory dist/builtin-memory && cp -R src/builtin-pi-packages dist/builtin-pi-packages && npm run build:attach && vite build --config src/clients/web/web-client/vite.config.ts",
     "lint:web-px": "node scripts/lint-web-px.mjs",
-    "build:attach": "esbuild src/clients/attach/attach-cmd.ts --bundle --minify --format=esm --platform=node --target=node22 --alias:@earendil-works/pi-tui=$PWD/node_modules/@earendil-works/pi-tui --outfile=dist/clients/attach/attach-cmd.js --log-level=warning --banner:js=\"import{createRequire as __cr}from'node:module';const require=__cr(import.meta.url);\"",
+    "build:attach": "esbuild src/clients/attach/attach-cmd.ts --bundle --minify --format=esm --platform=node --target=node22 --alias:@earendil-works/pi-tui=$PWD/node_modules/@earendil-works/pi-tui --external:@crouton-kit/humanloop --outfile=dist/clients/attach/attach-cmd.js --log-level=warning --banner:js=\"import{createRequire as __cr}from'node:module';const require=__cr(import.meta.url);\"",
     "postinstall": "node scripts/postinstall.mjs",
     "dev": "tsx src/cli.ts",
     "link": "npm link",
@@ -47,7 +47,7 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@crouton-kit/humanloop": "^0.3.25",
+    "@crouton-kit/humanloop": "^0.3.29",
     "@earendil-works/pi-agent-core": "0.80.2",
     "@earendil-works/pi-ai": "0.80.3",
     "@earendil-works/pi-coding-agent": "0.80.2",

package/dist/commands/profile/add-project.d.ts

@@ -1 +0,0 @@
-export declare const addProjectLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/add-project.js

@@ -1,42 +0,0 @@
-import { defineLeaf } from '../../core/command.js';
-import { addProfileProject, loadProfileManifest } from '../../core/profiles/manifest.js';
-export const addProjectLeaf = defineLeaf({
-    name: 'add-project',
-    description: "add a project directory to a profile's purview",
-    whenToUse: "a profile needs to see (memory + config from) another project directory — extend its purview after creation, including mid-session from a node already running under that profile.",
-    help: {
-        name: 'profile add-project',
-        summary: "append a project directory to a profile's manifest, deduped by real path",
-        params: [
-            {
-                kind: 'positional',
-                name: 'profile',
-                required: true,
-                constraint: 'Exact profile id, or a unique manifest name.',
-            },
-            {
-                kind: 'flag',
-                name: 'dir',
-                type: 'path',
-                required: true,
-                constraint: 'Directory to add. Must exist and be a directory; resolved to its absolute real path before storing. A path already on the manifest is a no-op, not an error.',
-            },
-        ],
-        output: [
-            { name: 'profile_id', type: 'string', required: true, constraint: 'Stable directory id.' },
-            { name: 'projects', type: 'string[]', required: true, constraint: 'The updated, deduped project list in manifest order.' },
-            { name: 'follow_up', type: 'string', required: true, constraint: 'Concrete next commands.' },
-        ],
-        outputKind: 'object',
-        effects: ["Appends to the profile manifest's `projects` array. Invalidates the process scope cache."],
-    },
-    run: async (input) => {
-        const { profileId } = loadProfileManifest(input['profile']);
-        const { manifest } = addProfileProject(profileId, input['dir']);
-        return {
-            profile_id: profileId,
-            projects: manifest.projects,
-            follow_up: `Show the full manifest with \`crtr profile show ${profileId}\`.`,
-        };
-    },
-});

package/dist/commands/profile/remove-project.d.ts

@@ -1 +0,0 @@
-export declare const removeProjectLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/remove-project.js

@@ -1,42 +0,0 @@
-import { defineLeaf } from '../../core/command.js';
-import { loadProfileManifest, removeProfileProject } from '../../core/profiles/manifest.js';
-export const removeProjectLeaf = defineLeaf({
-    name: 'remove-project',
-    description: "remove a project directory from a profile's purview",
-    whenToUse: "a profile no longer needs purview over one of its listed project directories — narrow it back. Works even if the directory itself was since deleted.",
-    help: {
-        name: 'profile remove-project',
-        summary: "remove a project directory from a profile's manifest",
-        params: [
-            {
-                kind: 'positional',
-                name: 'profile',
-                required: true,
-                constraint: 'Exact profile id, or a unique manifest name.',
-            },
-            {
-                kind: 'flag',
-                name: 'dir',
-                type: 'path',
-                required: true,
-                constraint: 'Directory to remove, matched by its resolved real path against the manifest. Does not require the directory to still exist on disk.',
-            },
-        ],
-        output: [
-            { name: 'profile_id', type: 'string', required: true, constraint: 'Stable directory id.' },
-            { name: 'projects', type: 'string[]', required: true, constraint: 'The updated project list in manifest order.' },
-            { name: 'follow_up', type: 'string', required: true, constraint: 'Concrete next commands.' },
-        ],
-        outputKind: 'object',
-        effects: ["Removes an entry from the profile manifest's `projects` array. Invalidates the process scope cache."],
-    },
-    run: async (input) => {
-        const { profileId } = loadProfileManifest(input['profile']);
-        const { manifest } = removeProfileProject(profileId, input['dir']);
-        return {
-            profile_id: profileId,
-            projects: manifest.projects,
-            follow_up: `Show the full manifest with \`crtr profile show ${profileId}\`.`,
-        };
-    },
-});