@north-light/api 0.3.591 → 0.3.593

package/dist/api/contract.d.ts

@@ -1,5 +1,5 @@
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export declare const CONTRACT_LEVEL = "1.44";
+export declare const CONTRACT_LEVEL = "1.45";
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export declare const REQUIRED_CONTRACT_HEADER = "Crouter-Required-Contract";
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/contract.js

@@ -12,7 +12,7 @@
 //
 // PURITY (spec §3.1): Node built-ins + `src/api/*` only.
 /** The contract level this build serves and requires. Written by `scripts/contract.mjs release`; never edit by hand. */
-export const CONTRACT_LEVEL = '1.44';
+export const CONTRACT_LEVEL = '1.45';
 /** Request header naming the one contract level the caller needs, e.g. `1.3`. Optional: absent means no check. */
 export const REQUIRED_CONTRACT_HEADER = 'Crouter-Required-Contract';
 /** Response header listing the contract levels the server serves, comma-separated, one per major, e.g. `1.3`. */

package/dist/api/dto/imports.d.ts

@@ -61,6 +61,12 @@ export interface ImportRunDTO {
     verify: ImportVerifyDTO | null;
     failure: ImportFailureDTO | null;
     unresolved_plugins: string[];
+    /** Plugins whose marketplace source the directory would not publish: the install is imported, its documents become the person's own copies. `holder` names the source that holds a `name_taken` name. */
+    refused_plugins?: Array<{
+        plugin: string;
+        reason: 'name_taken' | 'not_public' | 'not_found';
+        holder?: string;
+    }>;
     created: string;
     loaded: string | null;
     finished: string | null;

package/dist/commands/pkg/market-inspect.js

@@ -3,7 +3,7 @@ import { notFound } from '../../core/errors.js';
 import { paginate } from '../../core/pagination.js';
 import { listInstalledPlugins, listInstalledMarketplaces, listAllMarketplaces, findMarketplaceByName, } from '../../core/resolver.js';
 import { resolveScopeArg, projectScopeRoot } from '../../core/scope.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { listAppMarketplaces } from './app-installs.js';
 export const marketList = defineLeaf({
     name: 'list',
@@ -26,7 +26,7 @@ export const marketList = defineLeaf({
         effects: ['None. Read-only.'],
     },
     run: async (input) => {
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return listAppMarketplaces();
         const scopeInput = input['scope'];
         const limitRaw = input['limit'];

package/dist/commands/pkg/market-manage.js

@@ -4,7 +4,7 @@ import { defineLeaf } from '../../core/command.js';
 import { general, notFound } from '../../core/errors.js';
 import { listAllMarketplaces, listAllPlugins, findMarketplaceByName } from '../../core/resolver.js';
 import { resolveScopeArg, requireScopeRoot, marketplacesDir, pluginsDir } from '../../core/scope.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { addAppMarketplace, removeAppMarketplace } from './app-installs.js';
 import { updateConfig, updateState, ensureScopeInitialized, readConfig } from '../../core/config.js';
 import { pathExists, ensureDir, removePath, isSymlink, nowIso, readSymlinkTarget } from '../../core/fs-utils.js';
@@ -41,13 +41,20 @@ export async function addMarketplace(opts) {
         renameSync(tempDest, finalDest);
     }
     const effectiveRef = ref !== undefined ? ref : 'main';
-    await updateConfig(scope, (cfg) => {
-        cfg.marketplaces[finalName] = {
-            url,
-            ref: effectiveRef,
-            installed_at: nowIso(),
-        };
-    });
+    // A refused registration leaves no clone behind: a directory without its config row would list as a marketplace with no url.
+    try {
+        await updateConfig(scope, (cfg) => {
+            cfg.marketplaces[finalName] = {
+                url,
+                ref: effectiveRef,
+                installed_at: nowIso(),
+            };
+        });
+    }
+    catch (error) {
+        removePath(finalDest);
+        throw error;
+    }
     return { name: finalName, scope, path: finalDest };
 }
 export const marketAdd = defineLeaf({
@@ -74,7 +81,7 @@ export const marketAdd = defineLeaf({
         const url = input['url'];
         const ref = input['ref'];
         const scopeInput = input['scope'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await addAppMarketplace(url, ref);
         return addMarketplace({ url, ref, scope: resolveInstallScope(scopeInput) });
     },
@@ -96,7 +103,7 @@ export const marketRemove = defineLeaf({
     },
     run: async (input) => {
         const name = input['name'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await removeAppMarketplace(name);
         const scopeInput = input['scope'];
         let targetScope;

package/dist/commands/pkg/plugin-inspect.js

@@ -1,6 +1,6 @@
 import { defineLeaf } from '../../core/command.js';
 import { notFound } from '../../core/errors.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { listAppPlugins } from './app-installs.js';
 import { paginate } from '../../core/pagination.js';
 import { listInstalledPlugins, findPluginByName, } from '../../core/resolver.js';
@@ -46,7 +46,7 @@ export const pluginList = defineLeaf({
     run: async (input) => {
         const scopeInput = input['scope'];
         const includeDisabled = input['includeDisabled'] ?? false;
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await listAppPlugins(includeDisabled);
         const limitRaw = input['limit'];
         const limit = limitRaw !== undefined ? Math.min(Math.max(1, limitRaw), 200) : 50;

package/dist/commands/pkg/plugin-manage.js

@@ -5,7 +5,7 @@ import { dirname, join, resolve, isAbsolute, relative } from 'node:path';
 import { renameSync } from 'node:fs';
 import { defineLeaf } from '../../core/command.js';
 import { cliClient, rethrowAsCliError } from '../api-client.js';
-import { isSandboxedNode } from '../../shared/env.js';
+import { installsLiveInAppBlock } from '../../shared/env.js';
 import { installAppPlugin, removeAppPlugin, setAppPluginEnabled, updateAppPlugins } from './app-installs.js';
 import { notFound, usage, general, network, CrtrError } from '../../core/errors.js';
 import { findMarketplaceByName, findPluginByName, listAllPlugins } from '../../core/resolver.js';
@@ -812,7 +812,7 @@ export const pluginInstall = defineLeaf({
         const authEnv = input['authEnv'];
         const scopeInput = input['scope'];
         const gitRef = input['ref'];
-        if (isSandboxedNode()) {
+        if (installsLiveInAppBlock()) {
             if (rawRef === undefined || endpoint !== undefined || name !== undefined || authEnv !== undefined || gitRef !== undefined || scopeInput !== undefined)
                 throw usage('a sandboxed node installs only INSTALL-REF as marketplace/plugin');
             return await installAppPlugin(rawRef);
@@ -874,7 +874,7 @@ export const pluginRemove = defineLeaf({
         if (name === 'crtr') {
             throw usage('cannot remove builtin plugin "crtr" — it ships with the binary');
         }
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await removeAppPlugin(name);
         let scopes;
         if (scopeInput !== undefined) {
@@ -939,7 +939,7 @@ export const pluginEnable = defineLeaf({
     },
     run: async (input) => {
         const name = input['name'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await setAppPluginEnabled(name, true);
         const target = resolvePluginConfigTarget(name, input['scope']);
         if (target === null)
@@ -972,7 +972,7 @@ export const pluginDisable = defineLeaf({
         effects: ['Sets plugin enabled=false in config.json.'],
     },
     run: async (input) => {
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await setAppPluginEnabled(input['name'], false);
         const result = await setPluginEnabled(input, false);
         await reconcilePluginDocuments();
@@ -1002,7 +1002,7 @@ export const pluginUpdate = defineLeaf({
     },
     run: async (input) => {
         const name = input['name'];
-        if (isSandboxedNode())
+        if (installsLiveInAppBlock())
             return await updateAppPlugins(name);
         const scopeInput = input['scope'];
         const scope = scopeInput === undefined ? undefined : resolveScopeArg(scopeInput);

package/dist/daemon/manage.d.ts

@@ -122,6 +122,11 @@ export declare class DaemonExitedBeforeReadyError extends Error {
     readonly stderrTail: string;
     constructor(message: string, stderrTail: string);
 }
+/** The daemon's launch command could not be resolved, so no child was ever
+ *  started — a standing failure that waiting longer cannot fix. */
+export declare class DaemonLaunchError extends Error {
+    constructor(cause: unknown);
+}
 /** A live daemon has bound its repair socket but cannot serve normal work
  *  until its corpus migration succeeds. */
 export declare class DaemonStartupBlockedError extends Error {
@@ -200,7 +205,8 @@ export interface EnsureDaemonDeps {
     spawnDaemon?: () => Promise<SpawnDaemonResult>;
     now?: () => number;
 }
-/** Why the daemon this process autostarted died before becoming ready, or
+/** Why the daemon this process autostarted died before becoming ready, or why
+ *  its launch command could not be resolved (no daemon was started), or
  *  undefined while it is starting, running, or exited cleanly (a clean exit may
  *  be a lost singleton race, so only a non-zero/signal exit counts). A client
  *  waiting for that daemon polls this so a startup failure ends the wait now
@@ -210,6 +216,7 @@ export declare function daemonAutostartStartupFailure(): string | undefined;
  *  autostart is suppressed for this invocation, while `crtr sys join` holds
  *  the join lock (see core/directory/join-lock.ts), while an attempt is in flight,
  *  or while backing off from a recent failure.
- *  Silently swallows spawn errors (the canvas still works without the daemon;
- *  nodes just won't be auto-revived). */
+ *  Does not throw: a spawn error is recorded, and a launch or early-exit failure
+ *  is reported through `daemonAutostartStartupFailure()` so a waiting client
+ *  fails with it. */
 export declare function ensureDaemon(deps?: EnsureDaemonDeps): void;

package/dist/daemon/manage.js

@@ -290,6 +290,14 @@ export class DaemonExitedBeforeReadyError extends Error {
         this.stderrTail = stderrTail;
     }
 }
+/** The daemon's launch command could not be resolved, so no child was ever
+ *  started — a standing failure that waiting longer cannot fix. */
+export class DaemonLaunchError extends Error {
+    constructor(cause) {
+        super(cause instanceof Error ? cause.message : String(cause), { cause });
+        this.name = 'DaemonLaunchError';
+    }
+}
 /** A live daemon has bound its repair socket but cannot serve normal work
  *  until its corpus migration succeeds. */
 export class DaemonStartupBlockedError extends Error {
@@ -544,7 +552,9 @@ export async function spawnDaemon(opts = {}) {
     // in macOS Full Disk Access, not "node" (see branded-host). NOTE: when crtrd
     // is launchd-owned, the plist's ProgramArguments must point at the branded
     // binary too — this path only covers a manual `crtr sys daemon start`.
-    const launchArgs = await resolveDaemonLaunch();
+    const launchArgs = await resolveDaemonLaunch().catch((error) => {
+        throw new DaemonLaunchError(error);
+    });
     // The one spawn point every start reaches (autostart, `sys daemon start`, a handover successor): an
     // autostart begun before a join took its lock lands here after it, and must not start a daemon.
     if (opts.waitForJoinLock === true)
@@ -671,7 +681,8 @@ export function resetDaemonAutostart() {
     autostartFailures = 0;
     autostartNextAttemptAt = 0;
 }
-/** Why the daemon this process autostarted died before becoming ready, or
+/** Why the daemon this process autostarted died before becoming ready, or why
+ *  its launch command could not be resolved (no daemon was started), or
  *  undefined while it is starting, running, or exited cleanly (a clean exit may
  *  be a lost singleton race, so only a non-zero/signal exit counts). A client
  *  waiting for that daemon polls this so a startup failure ends the wait now
@@ -683,8 +694,9 @@ export function daemonAutostartStartupFailure() {
  *  autostart is suppressed for this invocation, while `crtr sys join` holds
  *  the join lock (see core/directory/join-lock.ts), while an attempt is in flight,
  *  or while backing off from a recent failure.
- *  Silently swallows spawn errors (the canvas still works without the daemon;
- *  nodes just won't be auto-revived). */
+ *  Does not throw: a spawn error is recorded, and a launch or early-exit failure
+ *  is reported through `daemonAutostartStartupFailure()` so a waiting client
+ *  fails with it. */
 export function ensureDaemon(deps = {}) {
     const running = deps.isDaemonRunning ?? isDaemonRunning;
     const spawn = deps.spawnDaemon ?? spawnDaemon;
@@ -711,11 +723,9 @@ export function ensureDaemon(deps = {}) {
         autostartFailures = 0;
         autostartNextAttemptAt = 0;
     }, (error) => {
-        if (error instanceof DaemonExitedBeforeReadyError) {
+        if (error instanceof DaemonExitedBeforeReadyError || error instanceof DaemonLaunchError) {
             autostartStartupFailure = error.message;
         }
-        // Intentionally silent — a missing dist/daemon/crtrd-cli.js (dev mode,
-        // pre-build) must not break the calling command.
         autostartFailures += 1;
         autostartNextAttemptAt = now() + autostartBackoffMs(autostartFailures);
     }).finally(() => {

package/dist/shared/env.d.ts

@@ -16,6 +16,10 @@ export declare function isSandboxedNode(): boolean;
  *  descriptions (`GET /v1/providers/tools` through that relay); the relay's node token stays the authority. It is not `isSandboxedNode()`,
  *  which gates owner-only commands and launch-snapshot reads on a Linux launcher mount. */
 export declare function providerProjectionOverBrokerRelay(): boolean;
+/** True when this CLI's plugin and marketplace installs are its app's install block on the control plane (`app-plugins.replace` over `/v1`), not
+ *  directories in a scope: a Linux launcher sandbox (`isSandboxedNode()`) or a fleet node reaching `/v1` through its broker relay
+ *  (`providerProjectionOverBrokerRelay()`, which has no launcher mount). The `pkg plugin` and `pkg market` leaves choose their path with it. */
+export declare function installsLiveInAppBlock(): boolean;
 /** The app that owns the current node, supplied in its broker launch identity. */
 export declare function envGrantee(): string | undefined;
 /** Set to '1' by `nodeEnv` for an app-started run's brokers, which admit inbox

package/dist/shared/env.js

@@ -71,6 +71,12 @@ export function isSandboxedNode() {
 export function providerProjectionOverBrokerRelay() {
     return /^https?:\/\//.test(process.env['CRTR_API_URL'] ?? '') && (process.env['CRTR_API_SOCKET'] ?? '') !== '';
 }
+/** True when this CLI's plugin and marketplace installs are its app's install block on the control plane (`app-plugins.replace` over `/v1`), not
+ *  directories in a scope: a Linux launcher sandbox (`isSandboxedNode()`) or a fleet node reaching `/v1` through its broker relay
+ *  (`providerProjectionOverBrokerRelay()`, which has no launcher mount). The `pkg plugin` and `pkg market` leaves choose their path with it. */
+export function installsLiveInAppBlock() {
+    return isSandboxedNode() || providerProjectionOverBrokerRelay();
+}
 /** The app that owns the current node, supplied in its broker launch identity. */
 export function envGrantee() {
     return process.env['CRTR_GRANTEE'];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/api",
-  "version": "0.3.591",
+  "version": "0.3.593",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, the CrtrClient, and the command-plugin manifest format. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",