@north-light/cli 0.0.0-stage → 0.3.413

package/dist/core/runtime/broker-protocol.js

@@ -0,0 +1,3 @@
+var f=Object.defineProperty;var o=(t,e)=>f(t,"name",{value:e,configurable:!0});import{StringDecoder as y}from"node:string_decoder";const m=500;function x(t){if(!(typeof t!="number"||!Number.isSafeInteger(t)||t<1))return Math.min(t,m)}o(x,"normalizeSnapshotTail");function u(t){return JSON.stringify(t)+`
+`}o(u,"encodeFrame");class h extends Error{static{o(this,"FrameOverflowError")}kind;bytes;cap;constructor(e,s,i){super(`frame decoder overflow (${e}): ${s} bytes exceeds cap ${i}`),this.kind=e,this.bytes=s,this.cap=i,this.name="FrameOverflowError"}}const d={maxLineBytes:256*1024*1024,maxTotalBytes:256*1024*1024},w={maxLineBytes:24*1024*1024,maxTotalBytes:48*1024*1024};class g{static{o(this,"FrameDecoder")}caps;parts=[];partBytes=0;utf8=new y("utf8");constructor(e){this.caps=e}push(e){const s=typeof e=="string"?e:this.utf8.write(e),i=Buffer.byteLength(s);if(this.partBytes+i>this.caps.maxTotalBytes)throw new h("total",this.partBytes+i,this.caps.maxTotalBytes);const p=[];let r=0,a;for(;(a=s.indexOf(`
+`,r))>=0;){const n=s.slice(r,a),c=(this.parts.length>0?this.parts.join("")+n:n).trim();if(this.parts.length=0,this.partBytes=0,r=a+1,c!=="")try{p.push(JSON.parse(c))}catch{}}if(r<s.length){const n=r===0?s:s.slice(r);this.parts.push(n),this.partBytes+=r===0?i:Buffer.byteLength(n)}if(this.partBytes>this.caps.maxLineBytes)throw new h("line",this.partBytes,this.caps.maxLineBytes);return p}}export{w as BROKER_READ_CAPS,d as CLIENT_READ_CAPS,g as FrameDecoder,h as FrameOverflowError,m as SNAPSHOT_TAIL_MAX,u as encodeFrame,x as normalizeSnapshotTail};

package/dist/core/runtime/broker-request.d.ts

@@ -0,0 +1,37 @@
+import type { BrokerToClient, ClientToBroker } from './broker-protocol.js';
+/** The request never ESTABLISHED the broker connection — the liveness
+ *  heuristic said live (pid alive + socket file present) but the broker was
+ *  mid-revive and refused/closed before any protocol frame. This is a transport
+ *  race, NOT a broker-side rejection (which surfaces as a plain `Error` carrying
+ *  the broker's own message). Callers distinguish it to fall back to a durable
+ *  path rather than failing the operation. */
+export declare class BrokerUnreachableError extends Error {
+    constructor(message: string);
+}
+export interface OneShotRequestOptions<T> {
+    nodeId: string;
+    /** Prose naming the operation, used verbatim in timeout/close errors —
+     *  e.g. `'the model switch'`, `'the interrupt'`. */
+    what: string;
+    /** The `ack.for` value that settles this request. */
+    ackFor: string;
+    /** Build the payload frame. `frameId` is a fresh uuid; use it for frames that
+     *  carry an `id` and set `correlated` so the ack is matched on it. */
+    frame: (frameId: string) => ClientToBroker;
+    /** Match the ack on `frame.id === frameId` as well as `ack.for`. Only for
+     *  frames that actually carry an id — an uncorrelated frame's ack has none,
+     *  so requiring it would hang until the timeout. */
+    correlated?: boolean;
+    /** Observe non-ack frames arriving before the ack (e.g. `model_changed`).
+     *  Never settles the request. */
+    observe?: (frame: BrokerToClient) => void;
+    /** Compute the resolved value from the ack's `detail`. */
+    result: (detail: string | undefined) => T;
+}
+/** Run one controller round-trip and resolve with `result(ack.detail)`.
+ *
+ *  Rejects with: the broker's message on an `error` frame or a `ok:false` ack;
+ *  `BrokerUnreachableError` when the socket fails BEFORE `connect` fires (a
+ *  mid-revive race the caller can fall back from); a plain `Error` when it fails
+ *  after (a genuine broker fault) or on timeout. */
+export declare function oneShotControllerRequest<T>(opts: OneShotRequestOptions<T>): Promise<T>;

package/dist/core/runtime/broker-request.js

@@ -0,0 +1 @@
+var b=Object.defineProperty;var c=(r,t)=>b(r,"name",{value:t,configurable:!0});import{randomUUID as f}from"node:crypto";import{BrokerClient as h}from"../broker-client/index.js";const u=15e3;class k extends Error{static{c(this,"BrokerUnreachableError")}constructor(t){super(t),this.name="BrokerUnreachableError"}}function y(r){return new Promise((t,i)=>{const o=new h(r.nodeId),w=f(),d=f();let a=!1,l=!1;const s=setTimeout(()=>n(()=>i(new Error(`timed out after ${u}ms waiting for the broker to ack ${r.what}`))),u);typeof s.unref=="function"&&s.unref();function n(e){if(!a){a=!0,clearTimeout(s);try{o.close()}catch{}e()}}c(n,"finish"),o.on("error",e=>n(()=>i(l?e:new k(`broker connection refused mid-revive: ${e.message}`)))),o.on("close",()=>n(()=>i(l?new Error(`broker connection closed before it acked ${r.what}`):new k("broker connection closed before it was established (mid-revive)")))),o.on("connect",()=>{l=!0,o.send({type:"hello",role:"controller",client_id:w}),o.send(r.frame(d))}),o.on("frame",e=>{e.type==="ack"&&e.for===r.ackFor&&(r.correlated!==!0||e.id===d)?e.ok?n(()=>t(r.result(e.detail))):n(()=>i(new Error(e.detail??`broker rejected ${r.what}`))):e.type==="error"?n(()=>i(new Error(e.message))):r.observe!==void 0&&r.observe(e)}),o.connect()})}c(y,"oneShotControllerRequest");export{k as BrokerUnreachableError,y as oneShotControllerRequest};

package/dist/core/runtime/broker-sdk.d.ts

@@ -0,0 +1,36 @@
+import { createAgentSessionServices, createAgentSessionFromServices, createAgentSessionRuntime, SessionManager, VERSION } from '@earendil-works/pi-coding-agent';
+export { createAgentSessionServices, createAgentSessionFromServices, createAgentSessionRuntime, SessionManager, VERSION, };
+/**
+ * The minimal slice of the pi SDK the broker needs. Both the real package and the
+ * T11 `fake-engine` fixture satisfy this shape, so the broker can be driven by
+ * either via the `CRTR_BROKER_ENGINE` seam below.
+ *
+ * C3 (viewer-reuse scout `mq5thyli`): the broker drives the SERVICES path
+ * (`createAgentSessionServices` → `createAgentSessionFromServices`), NOT plain
+ * `createAgentSession`. Only the services path runs `registerProvider` (extension
+ * model-providers) + `applyExtensionFlagValues`, so a node whose model comes from
+ * a custom-provider extension actually gets a model. Mirrors pi `main.js`.
+ */
+export interface BrokerEngine {
+    createAgentSessionServices: typeof createAgentSessionServices;
+    createAgentSessionFromServices: typeof createAgentSessionFromServices;
+    /**
+     * The session-replacement runtime factory (new_session/switch_session/fork).
+     * OPTIONAL: the real SDK (0.78.1) exposes it, so production gets full session
+     * replacement; the `fake-engine` test fixture does NOT provide it, so the
+     * broker degrades those three ops to an `error{engine_error}` reply rather than
+     * failing engine validation. Everything else works on both.
+     */
+    createAgentSessionRuntime?: typeof createAgentSessionRuntime;
+    SessionManager: typeof SessionManager;
+    VERSION: string;
+}
+/**
+ * Resolve the broker's engine module. Defaults to the real SDK; honors the
+ * `CRTR_BROKER_ENGINE` env var (T11 test seam) so a lifecycle test can point the
+ * broker at `fixtures/fake-engine.ts` without touching production code. This is the
+ * sole dynamic-import indirection point — keep all engine resolution flowing
+ * through here so the seam stays a single, auditable swap.
+ */
+export declare function loadBrokerEngine(): Promise<BrokerEngine>;
+export declare function assertEngineVersion(engineVersion?: string): void;

package/dist/core/runtime/broker-sdk.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var o=(r,e)=>m(r,"name",{value:e,configurable:!0});import{execFileSync as S}from"node:child_process";import{readFileSync as l,statSync as f,writeFileSync as g}from"node:fs";import{join as p}from"node:path";import{envBrokerEngine as u}from"../../shared/env.js";import{createAgentSessionServices as v,createAgentSessionFromServices as d,createAgentSessionRuntime as h,SessionManager as y,VERSION as c}from"@earendil-works/pi-coding-agent";import{crtrHome as _}from"../canvas/paths.js";import{emitEvent as s}from"../events/emit.js";import{resolveBundledPiCliPath as A}from"./pi-cli.js";import{childNodeExecPath as w}from"./branded-host.js";async function V(){const r=u(),e=await import(r);if(typeof e.createAgentSessionServices!="function"||typeof e.createAgentSessionFromServices!="function"||typeof e.SessionManager!="function")throw new Error(`[broker] engine '${r}' does not export createAgentSessionServices/createAgentSessionFromServices/SessionManager \u2014 not a valid pi-SDK-compatible engine`);return{createAgentSessionServices:e.createAgentSessionServices,createAgentSessionFromServices:e.createAgentSessionFromServices,createAgentSessionRuntime:typeof e.createAgentSessionRuntime=="function"?e.createAgentSessionRuntime:void 0,SessionManager:e.SessionManager,VERSION:typeof e.VERSION=="string"?e.VERSION:"unknown"}}o(V,"loadBrokerEngine");const a=o(()=>p(_(),"pi-version.json"),"PI_VERSION_CACHE");function E(r,e,t){try{const n=JSON.parse(l(a(),"utf8"));if(n.path===r&&n.mtimeMs===e&&n.size===t&&typeof n.version=="string")return n.version}catch{}}o(E,"readPiVersionCache");function M(r){try{g(a(),JSON.stringify(r),"utf8")}catch{}}o(M,"writePiVersionCache");function C(r=c){let e,t;try{e=A();const i=f(e);t={mtimeMs:i.mtimeMs,size:i.size}}catch(i){try{s({level:"warn",event:"broker.startup.warning",error:i,fields:{stage:"resolve_bundled_cli",engine_version:r,cli_version:null,cli_path:null}})}catch{}return}let n=E(e,t.mtimeMs,t.size);if(n===void 0){try{n=S(w(),[e,"--version"],{encoding:"utf8"}).trim()}catch(i){try{s({level:"warn",event:"broker.startup.warning",error:i,fields:{stage:"probe_bundled_cli",engine_version:r,cli_version:null,cli_path:e}})}catch{}return}M({path:e,mtimeMs:t.mtimeMs,size:t.size,version:n})}if(n!==r)try{s({level:"warn",event:"broker.startup.warning",fields:{stage:"version_mismatch",engine_version:r,cli_version:n,cli_path:e}})}catch{}}o(C,"assertEngineVersion");export{y as SessionManager,c as VERSION,C as assertEngineVersion,d as createAgentSessionFromServices,h as createAgentSessionRuntime,v as createAgentSessionServices,V as loadBrokerEngine};

package/dist/core/runtime/broker.d.ts

@@ -0,0 +1,73 @@
+import { type AgentSessionRuntime, type AgentSessionServices, type CreateAgentSessionResult, type ExtensionUIContext } from '@earendil-works/pi-coding-agent';
+import { type BrokerSdkConfig } from './launch.js';
+import { type BrokerEngine } from './broker-sdk.js';
+import { type KnownStreamWaitControl } from './stream-watchdog.js';
+import { type BrokerClient } from './broker/client-registry.js';
+import { type BrokerToClient, type RpcExtensionUIRequest, type RpcExtensionUIResponse } from './broker-protocol.js';
+/** A review companion may only navigate or fork within a branch whose ancestry
+ * has crossed its durable transcript boundary. The broker sends this typed local
+ * failure as a dedicated error frame without invoking pi's tree mutation. */
+export { ReviewBoundaryNavigationError, REVIEW_BOUNDARY_NAVIGATION_CODE } from './broker/frame-replies.js';
+export type { SubscriptionGeneration } from './broker/rebind.js';
+/** A blocking dialog awaiting a response from ANY writable client, the
+ *  broker-side default timeout, or the engine's abort. The dialog is fanned out
+ *  to every writable client at raise time; this entry is the single settlement
+ *  point they race for. */
+interface PendingDialog {
+    /** The original request — retained so `welcome.pending_dialog` and the
+     *  attach-mid-dialog replay can hand a still-pending dialog to a writable
+     *  client that attaches after the fan-out. */
+    request: RpcExtensionUIRequest;
+    /** Some writable client answered — resolve with its parsed response. Settling
+     *  clears the broker-side timeout, removes the entry from the registry (so a
+     *  later answer for the same id finds nothing and is a no-op), and broadcasts
+     *  `extension_ui_dismiss` so every peer closes its copy. */
+    resolve: (response: RpcExtensionUIResponse) => void;
+}
+/** Dispose the live engine session if one exists (idempotent). Called by
+ *  broker-cli's fatal handlers before exit so a crash never orphans detached
+ *  bash children. No-op before the session is built or after a clean dispose. */
+export declare function disposeActiveSession(): void;
+/** The session's tool options, honest to the run's scopes. `bash` runs through
+ *  daemon job routes that require `crtr:act`, so a run without it is never
+ *  offered bash — not declared to the model, not named in the system prompt.
+ *  A kind's explicit allow-list keeps `submit_result` callable, because the
+ *  structured-output extension activates it only while a request is pending. */
+export declare function brokerToolOptions(tools: readonly string[] | undefined, scopes: readonly string[] | null): {
+    tools?: string[];
+    excludeTools?: string[];
+};
+export declare function runBroker(nodeId: string, startupAt?: bigint, startupTs?: string): Promise<void>;
+export declare function snapshotMessages(session: CreateAgentSessionResult['session'], boundaryReviewId?: string): import("./session-visibility.js").ProjectedMessage[] | undefined;
+export declare function buildBrokerSession(engine: BrokerEngine, cfg: BrokerSdkConfig): Promise<{
+    session: CreateAgentSessionResult['session'];
+    services: AgentSessionServices;
+    resuming: boolean;
+    /** The session-replacement runtime, present iff the engine exposes
+     *  createAgentSessionRuntime (real SDK yes, fake-engine no). The broker wires
+     *  its new_session/switch_session/fork ops + rebind through it. */
+    runtime?: AgentSessionRuntime;
+}>;
+/** Broker-side hooks the UI context needs to route (or noOp) extension dialogs. */
+export interface BrokerDialogDeps {
+    /** Every client that may answer a dialog right now — empty when no writable
+     *  viewer is attached, which is the noOp fallback path. */
+    writable: () => BrokerClient[];
+    /** Forward a dialog request to one writable client (called once per client in
+     *  the fan-out). */
+    forward: (client: BrokerClient, request: RpcExtensionUIRequest) => void;
+    /** Pending-dialog registry, keyed by request id. ONE entry per dialog no matter
+     *  how many clients were fanned it; the first `extension_ui_response` settles
+     *  and removes it, so later answers for the same id are no-ops. */
+    pending: Map<string, PendingDialog>;
+    /** Broadcast a non-blocking display frame (setStatus/setWidget/setTitle) to ALL
+     *  viewers — the relay path for pi's fire-and-forget extension-UI surface. */
+    broadcast: (frame: BrokerToClient) => void;
+    /** Optional broker-owned control for a deliberate, deadline-bounded provider
+     *  wait: pause the dead-stream watchdog while the provider extension sleeps to
+     *  a known finite future deadline, returning a release fn that resumes it. Put
+     *  on the UI context under `KNOWN_STREAM_WAIT_UI` so the (jiti-loaded) provider
+     *  extension reaches it. Absent for non-broker/test UI contexts (plain no-op). */
+    onKnownStreamWait?: KnownStreamWaitControl;
+}
+export declare function makeBrokerUiContext(deps: BrokerDialogDeps): ExtensionUIContext;

package/dist/core/runtime/broker.js

@@ -0,0 +1 @@
+var Me=Object.defineProperty;var e=(n,o)=>Me(n,"name",{value:o,configurable:!0});import{envInboxBetweenTurns as Ae,envModelIntent as Pe,envNodeCwd as Ie,envNodeId as Oe,envProfileId as De,envScopes as Ne,isSandboxedNode as Fe,scopeAllowed as Le}from"../../shared/env.js";import{createServer as Be}from"node:net";import{existsSync as we,readFileSync as $e,unlinkSync as Se}from"node:fs";import{join as ye}from"node:path";import{randomUUID as x}from"node:crypto";import{mark as Ue}from"../timing.js";import{SUBMIT_RESULT_TOOL as Ge}from"./structured-output.js";import{installSessionManagerStorePatch as Ke}from"../conversation-store/index.js";import{getAgentDir as H,ModelRegistry as je,ModelRuntime as We}from"@earendil-works/pi-coding-agent";import{nodeRunDir as qe,viewSocketPath as Ve}from"../canvas/paths.js";import{bindBrokerEventSource as Xe}from"../events/source.js";import{emitEvent as E,flushBrokerLog as He}from"../events/emit.js";import{operationIdContext as Ye}from"../events/operation-id.js";import{findMissingPackagePaths as ze}from"./package-health.js";import{installBrokerConfigSnapshot as Je}from"../config.js";import{FRONT_DOOR_ENV as Qe}from"./front-door.js";import{CANVAS_EXTENSIONS as te,piInvocationToSdkConfig as Ze}from"./launch.js";import{assertEngineVersion as en,loadBrokerEngine as nn}from"./broker-sdk.js";import{initCrtrTheme as tn}from"./crtr-theme.js";import{resolveBundledPiPackageDir as on}from"./pi-cli.js";import{captureSessionChatCapabilities as rn}from"./command-surface.js";import{InMemoryCredentialStore as sn}from"@earendil-works/pi-ai";import{configureBrokerModelRuntime as an}from"./broker/model-adapter.js";import{mutateBrokerFault as Y,recordBrokerTurn as be}from"./broker/daemon-ops.js";import{modelRequestFromConfig as dn,expandModelCandidates as ln,parseModelSpec as cn,unregisteredConcreteModel as mn}from"../model-routes.js";import{KNOWN_STREAM_WAIT_UI as un}from"./stream-watchdog.js";import{probeOnline as fn}from"./connectivity.js";import{CRTR_CYCLE_CUSTOM_TYPE as pn,cycleAwareMessages as gn,endedByAbort as vn}from"./session-cycles.js";import{turnErrorOf as hn}from"../llm/refusal.js";import{projectTranscript as _n}from"./session-visibility.js";import{currentTurnVisibility as wn}from"./turn-visibility.js";import{isUnknownModel as oe}from"./model-selection.js";import{BrokerClientRegistry as Sn}from"./broker/client-registry.js";import{ToolGroupTracker as yn}from"./broker/tool-groups.js";import{onNodeNamed as bn}from"./broker/node-named.js";import{FaultRetry as Tn,willDaemonRetry as En}from"./broker/fault-retry.js";import{RunTurnEnds as kn}from"./broker/run-turn-end.js";import{createTurnAdmissionGate as Rn}from"./broker/turn-admission.js";import{BROKER_IDLE_TURN_START as xn,BROKER_RUN_TURN_BUSY as Cn}from"./broker/held-deferred-inbox.js";import{prependRunDeferredMail as Mn,settleRunDeferredMail as An}from"./broker/run-deferred-mail.js";import{createRunTurnQueue as Pn}from"./broker/run-turn-queue.js";import{EventProjection as In}from"./broker/event-projection.js";import{createFrameDispatchContext as On,handleFrame as Dn}from"./broker/frame-dispatch.js";import{hydratePersistedAdvertisedCommandMessages as Nn,installAdvertisedCommandInvocationContract as Fn}from"./advertised-command-invocation.js";import{RebindDriver as Ln}from"./broker/rebind.js";import{beginRuntimeTeardown as Bn}from"./broker/extension-abort.js";import{receiveNodeToken as $n}from"./broker/node-token.js";import{serveCliRelay as Un}from"./broker/cli-relay.js";import{decodeKickoffOrigin as Gn,KICKOFF_ORIGIN_ENV as Kn}from"./stamp/protocol.js";import{announceMessageOrigin as jn}from"./stamp/channel.js";import{brokerExtensionState as Wn,commitBrokerModel as qn}from"./broker/daemon-ops.js";import{composerNames as Vn}from"./broker/frame-memory-refs.js";import{FrameOverflowError as Xn,normalizeSnapshotTail as Hn}from"./broker-protocol.js";import{ReviewBoundaryNavigationError as co,REVIEW_BOUNDARY_NAVIGATION_CODE as mo}from"./broker/frame-replies.js";function re(n){return new je(n.modelRuntime)}e(re,"registryOf");function $(n,o){if(n==null||oe(n))return null;const s=o!==void 0&&o!==""&&o!=="off"?`:${o}`:"";return`${n.provider}/${n.id}${s}`}e($,"formatModelSpec");function Yn(n,o){const s=$(n,void 0);return s===null?null:`${s}:${o===void 0||o===""?"off":o}`}e(Yn,"formatExactModelSpec");const zn=12e4;let z=null;import{brokerSignalClient as J}from"./broker/signal-stream.js";function Jn(){J().stop();const n=z;if(z=null,n!==null)try{n.dispose()}catch{}}e(Jn,"disposeActiveSession");function Qn(n,o){const s=Le(o,"crtr:act")?void 0:["bash"],m=n!==void 0&&n.length>0?[...new Set([...n,Ge])]:n===void 0?void 0:[...n];return{...m!==void 0?{tools:m}:{},...s!==void 0?{excludeTools:s}:{}}}e(Qn,"brokerToolOptions");async function so(n,o=process.hrtime.bigint(),s=new Date().toISOString()){Xe(n);const m=await $n(),i=await Un(n,m);process.env.CRTR_API_SOCKET=i.path,Ye.fresh(()=>{E({level:"info",event:"broker.startup.cli_entry",ts:s,duration_ms:0,fields:{runtime_version:process.version,engine_version:null,model:null}}),E({level:"info",event:"broker.startup.module_loaded",duration_ms:Number(process.hrtime.bigint()-o)/1e6,fields:{runtime_version:process.version,engine_version:null,model:null}})});const a=new Set;let l=null;const d=e((t,r=null)=>{a.has(t)||(a.add(t),Ue(t,{duration_ms:Number(process.hrtime.bigint()-o)/1e6}),E({level:"info",event:t,duration_ms:Number(process.hrtime.bigint()-o)/1e6,fields:{runtime_version:process.version,engine_version:l,model:r}}))},"emitStartupMilestone");process.env[Qe]="1",process.env.CRTR_BROKER_PID=String(process.pid),delete process.env.TMUX_PANE,delete process.env.TMUX,Ke(n);const f=await nn();en(f.VERSION),l=f.VERSION;const w=qe(n),k=ye(w,"broker-launch.json"),S=JSON.parse($e(k,"utf8"));if(Fe()){if(!S.configSnapshot)throw new Error("broker launch is missing its config snapshot");Je(S.configSnapshot)}const u=Ze(S);u.modelExact===!0?process.env.CRTR_MODEL_EXACT="1":delete process.env.CRTR_MODEL_EXACT;const y=await Vn(n);let b,C;const q=e(t=>{b!==void 0?b(t):C??=t},"onSignal");process.on("SIGTERM",()=>q("SIGTERM")),process.on("SIGINT",()=>q("SIGINT"));let{session:U,services:M,resuming:ie,runtime:G}=await ot(f,u);d("broker.startup.session_built");const P=(await Wn(n)).node.review_binding?.review_id,T=Ae();z=U;const D=fn;try{process.env.PI_PACKAGE_DIR=on(),tn(M.settingsManager.getTheme(),H(),!1)}catch(t){E({level:"error",event:"broker.theme.initialization_failed",error:t})}try{for(const t of ze(H()))E({level:"warn",event:"broker.startup.warning",fields:{stage:"package_health",source:t.source,resolved_path:t.resolved}})}catch{}const K=Ve(n),_=new Sn(n),V=new Map,I=new yn(n,t=>_.broadcast(t));bn(t=>_.broadcast({type:"node_named",...t}));let N=!1,se=!1,X,ae,p,j;const Q=new kn;let F,de=e(()=>{},"notifyTurnAccepted"),le=e(()=>{},"resetFrameState");const Z=Rn();let ce=e(()=>0,"pendingPromptDispatches"),me;const L=Pn({runNode:T,session:e(()=>p.session(),"session"),isReplacing:e(()=>p.isReplacing(),"isReplacing"),isAgentRunActive:e(()=>p.isAgentRunActive(),"isAgentRunActive"),pendingDispatches:e(()=>ce(),"pendingDispatches"),turnAdmission:Z,prependDeferred:e(t=>Mn(n,t),"prependDeferred"),onError:e(t=>E({level:"error",event:"broker.inbox.idle_prompt_failed",error:t}),"onError")}),ue=L.drain;u.firstPrompt!==void 0&&u.firstPrompt!==""&&L.holdForKickoff(),globalThis[xn]=L.start,globalThis[Cn]=L.busy,p=new Ln({nodeId:n,cfg:u,session:U,services:M,runtime:G,registry:_,toolGroups:I,uiContext:e(()=>ae,"uiContext"),faultRetry:e(()=>j,"faultRetry"),projection:e(()=>F,"projection"),setActiveSession:e(t=>{if(z=t,me?.(),T){let r="stop",c,g=!1;me=t.subscribe(v=>{if(v.type==="agent_start"&&(r="stop",c=void 0,g=!1,Q.started()),v.type==="agent_end"){const h=[...v.messages??[]].reverse().find(B=>B.role==="assistant");h&&(r=h.stopReason,c=vn(h)?void 0:hn(h),g=h.role==="assistant"&&En(h,t.model?.contextWindow))}v.type==="agent_settled"&&(Q.settled(t.sessionManager,{stop_reason:r,...c?{error:c}:{}},g),An(n,t).catch(h=>{E({level:"error",event:"broker.run_deferred_mail.settle_failed",error:h})}),queueMicrotask(()=>{p.session()===t&&ue()}))})}},"setActiveSession"),disposeAndExit:e((t,r)=>W(t,r),"disposeAndExit"),onSessionRebind:e(()=>{le()},"onSessionRebind"),onReplacementIdle:e(()=>{T&&ue()},"onReplacementIdle"),reWelcomeAll:e(()=>ee(),"reWelcomeAll")});const fe=e(async(t,r=!1)=>{const c=p.session(),g=$(c.model,c.thinkingLevel);if(g===null)return null;const v=await qn(n,{spec:g,...t!==void 0?{intent:t}:{},userSelected:r});return r&&(u.model=v.modelOverride,t!==void 0?(process.env.CRTR_MODEL_INTENT=`${t.family}/${t.strength}`,delete process.env.CRTR_MODEL_EXACT,u.modelExact=void 0):(delete process.env.CRTR_MODEL_INTENT,process.env.CRTR_MODEL_EXACT="1",u.modelExact=!0)),v.modelOverride},"persistModelChoice"),pe=e(async(t=!0,r,c=!1)=>{const g=p.session(),v=$(g.model,g.thinkingLevel),h=t?await fe(r,c):v;_.broadcast({type:"model_changed",model:oe(g.model)?void 0:g.model,spec:h})},"broadcastModelChanged");j=new Tn({nodeId:n,cfg:u,retryProbe:D,currentSession:e(()=>p.session(),"currentSession"),currentServices:e(()=>p.services(),"currentServices"),installedGeneration:e(()=>p.installedGeneration(),"installedGeneration"),registryOf:re,formatModelSpec:$,broadcastModelChanged:pe,turnAdmission:Z,reWelcomeAll:e(()=>ee(),"reWelcomeAll"),...T?{turnEnds:Q}:{}});const ge=e(()=>{j.rearmIfStranded().catch(t=>{E({level:"warn",event:"broker.runtime.diagnostic",fields:{message:`fault retry re-arm failed: ${t instanceof Error?t.message:String(t)}`}})})},"rearmStrandedRetry");J().subscribe("resync",ge),J().subscribe("fault-retry",ge),F=new In({registry:_,faultRetry:j,installedGeneration:e(()=>p.installedGeneration(),"installedGeneration"),currentSession:e(()=>p.session(),"currentSession"),notifyTurnAccepted:e(()=>de(),"notifyTurnAccepted"),emitStartupMilestone:d,formatModelSpec:$});const Ee=e(t=>{const r=p.session(),c=et(r,P),g=Hn(t.snapshotTail),v=c===void 0||g===void 0?c:c.slice(-g),h=v?.map(({message:O})=>O)??r.sessionManager.buildSessionContext().messages,B=I.summaries(),_e=v!==void 0&&g!==void 0?Zn(h):void 0,Ce=_e===void 0?B:Object.fromEntries(Object.entries(B).filter(([O])=>_e.has(O)));return{messages:h,...v===void 0?{}:{messageIds:v.map(({id:O})=>O)},messageVisibility:v?.map(({visibility:O})=>O)??h.map(()=>"visible"),turnVisibility:wn(),stats:r.getSessionStats(),state:{model:oe(r.model)?void 0:r.model,thinkingLevel:r.thinkingLevel,isStreaming:r.isStreaming,isCompacting:r.isCompacting,steeringMode:r.steeringMode,followUpMode:r.followUpMode,sessionFile:r.sessionFile,sessionId:r.sessionId,sessionName:r.sessionName,autoCompactionEnabled:r.autoCompactionEnabled,messageCount:r.messages.length,pendingMessageCount:r.pendingMessageCount},display:{..._.displaySnapshot()},toolGroupSummaries:Ce,workingActivity:F.currentWorkingActivity(),queued:{steering:[...r.getSteeringMessages()],followUp:[...r.getFollowUpMessages()]}}},"buildSnapshot"),ve=e(t=>{const r=t.role==="controller"?V.values().next().value:void 0;_.sendFrame(t,{type:"welcome",snapshot:Ee(t),role:t.role,pending_dialog:r!==void 0?r.request:null,agentDir:H()},!0)},"sendWelcome"),ke=e(t=>{const r=[...V.values()];for(let c=1;c<r.length;c++)_.sendFrame(t,r[c].request)},"replayExtraPendingDialogsTo"),ee=e(()=>{_.forEachHelloed(ve)},"reWelcomeAll"),he=e(async t=>{if(!N){N=!0,J().stop(),I.persistPendingSummary(),F.dispose(),Jn();try{X?.close()}catch{}i.close(),_.dispose();try{we(K)&&Se(K)}catch{}_.clearAttachState(),await He(),process.exit(t)}},"completeExit"),W=e((t,r=0)=>{if(N)return;const c=t==="shutdown-hook"||t==="shutdown-after-settle";if(c&&I.finishOpenToolGroup(!0),c&&I.hasSummaryTasks()){if(se)return;se=!0,I.waitForSummaryTasks().finally(()=>he(r));return}he(r)},"disposeAndExit");ae=rt({writable:e(()=>_.writableClients(),"writable"),forward:e((t,r)=>_.sendFrame(t,r),"forward"),pending:V,broadcast:e(t=>_.broadcastUi(t),"broadcast"),onKnownStreamWait:e(t=>F.knownStreamWait(t),"onKnownStreamWait")}),p.setRebindSession(),await p.enqueueRebind(U,M),d("broker.startup.extensions_bound");const R=On({nodeId:n,registry:_,toolGroups:I,projection:F,rebind:p,boundaryReviewId:P,pendingDialogs:V,sendWelcome:ve,replayExtraPendingDialogsTo:ke,reWelcomeAll:ee,disposeAndExit:W,persistModelChoice:fe,broadcastModelChanged:pe,registryOf:re,formatModelSpec:$,formatExactModelSpec:Yn,turnAdmission:Z,memoryInventory:y,runNode:T,onKickoffAdmitted:L.releaseKickoff});de=R.notifyTurnAccepted,le=R.resetForSession,ce=R.pendingPromptDispatches;const Re=2500;let ne=!1;const xe=e(async t=>{if(N||ne)return;if(ne=!0,p.isAgentRunActive()||p.session().isStreaming||R.pendingPromptDispatches()>0){const c=Date.now()+Re;for(;R.pendingPromptDispatches()>0&&!p.session().isStreaming&&Date.now()<c;)await new Promise(g=>setTimeout(g,25));if(p.session().isStreaming){const g=c-Date.now();if(g>0){let v;try{Bn(),await Promise.race([p.session().abort().then(()=>!0,()=>!1),new Promise(B=>{v=setTimeout(()=>B(!1),g)})])&&await be(n,{event:"closed",end_reason:"teardown-aborted"})}finally{v!==void 0&&clearTimeout(v)}}}else(R.pendingPromptDispatches()>0||p.isAgentRunActive())&&await be(n,{event:"interrupted"})}W(t)},"abortAndExit");if(b=e(t=>{xe(t)},"signalTeardown"),C!==void 0){b(C);return}try{we(K)&&Se(K)}catch{}X=Be(t=>{const r=_.create(t);t.on("data",g=>{let v;try{v=r.decoder.push(g)}catch(h){h instanceof Xn?(_.sendFrame(r,{type:"error",code:"frame_overflow",message:h.message}),_.dropClient(r,`frame overflow: ${h.message}`)):_.dropClient(r,`decoder error: ${String(h)}`);return}for(const h of v)try{Dn(R,r,h)}catch{}});const c=e(()=>{_.removeClient(r)},"drop");t.on("close",c),t.on("error",()=>{})}),X.on("error",t=>{N||(E({level:"error",event:"broker.socket.failed",error:t}),W("socket-error",1))}),X.listen(K,async()=>{Promise.all([Y(n,{op:"clear",link:"viewer\u2194broker"}),Y(n,{op:"clear",link:"relay\u2194broker"})]).catch(r=>E({level:"error",event:"broker.daemon.operation.failed",node_id:n,error:r,fields:{operation:"broker_socket_bound_fault_clear"}}));let t;try{t=await j.recoverOnStartup()}catch(r){E({level:"error",event:"broker.daemon.operation.failed",node_id:n,error:r,fields:{operation:"recovery_startup"}}),W("recovery-startup-failed",1);return}if(!(N||ne))if(t!=="retry-armed"&&u.firstPrompt!==void 0&&u.firstPrompt!==""){const r=Gn(process.env[Kn]);r!==null&&jn(u.firstPrompt,r);const c=process.env.CRTR_KICKOFF_MESSAGE_IDS;R.kickoff(u.firstPrompt,c?JSON.parse(c):[])}else L.releaseKickoff()}),_.persistAttachState()}e(so,"runBroker");function Zn(n){const o=new Set;for(const s of n)if(!(s.role!=="assistant"||!Array.isArray(s.content)))for(const m of s.content)m!==null&&typeof m=="object"&&m.type==="toolCall"&&typeof m.id=="string"&&o.add(m.id);return o}e(Zn,"toolCallIds");function et(n,o){const s=n.sessionManager,m=gn(s);return m!==void 0&&Nn(m.map(({message:i})=>i)),m===void 0?void 0:_n(m,{boundaryReviewId:o,sessionEntries:s.getEntries?.()})}e(et,"snapshotMessages");function Te(){const n=Oe();if(n===void 0||n==="")throw new Error("broker launch is missing CRTR_NODE_ID");return n}e(Te,"currentBrokerNodeId");async function nt(n,o){const s=dn(o.model,Pe(),o.modelExact===!0);if(s===void 0)return;const m=re(n),i={cwd:Ie()??o.cwd,profileId:De()},a=mn(s,m,i);if(a!==void 0)throw await Y(Te(),{op:"record",input:{link:"crtr\u2192pi",op:"model resolution at launch",kind:"model-not-found",retry:{disposition:"fatal"},message:`model '${a.request.spec}' is not registered in the serving model registry`}}),new Error(`[broker] FATAL: model '${a.request.spec}' is not registered in the serving model registry`);const l=ln(s,i.cwd,i.profileId),d=cn(s.spec);for(const f of l){const w=m.find(f.providerId,f.modelId);if(w===void 0)continue;const S=d?.providerId===f.providerId&&d.modelId===f.modelId?d.thinkingLevel??(f.thinkingLevel===void 0?void 0:"off"):f.thinkingLevel;return{model:w,thinkingLevel:S}}if(o.modelExact===!0){const f=l.map(w=>`'${w.providerId}/${w.modelId}' unregistered`).join("; ");throw await Y(Te(),{op:"record",input:{link:"crtr\u2192pi",op:"model resolution at launch",kind:"model-not-found",retry:{disposition:"fatal"},message:`exact-consult model '${o.model}' is unavailable \u2014 refusing to substitute (${f})`}}),new Error(`[broker] FATAL: exact-consult model '${o.model}' is unavailable`)}E({level:"warn",event:"broker.model.none_viable",fields:{rejected_candidates:l.map(f=>({provider:f.providerId,model:f.modelId,reason:"unregistered"})).slice(0,16)}})}e(nt,"resolveLaunchModel");function tt(n){let o=!0;return{runtime:new Proxy(n,{get(m,i,a){return o&&i==="getAvailableSnapshot"?()=>[]:o&&i==="getAvailable"?async()=>[]:o&&i==="getModel"?()=>{}:Reflect.get(m,i,a)}}),reveal:e(()=>{o=!1},"reveal")}}e(tt,"modelLessRegistry");async function ot(n,o){const s=H(),m=e(async S=>{const u=await We.create({credentials:new sn,modelsPath:ye(S.agentDir,"models.json")});an(u);const y=await n.createAgentSessionServices({cwd:S.cwd,agentDir:S.agentDir,modelRuntime:u,resourceLoaderOptions:{additionalExtensionPaths:o.extensionPaths,appendSystemPrompt:o.appendSystemPromptPath!==void 0?[o.appendSystemPromptPath]:void 0,noContextFiles:!0,extensionsOverride:e(A=>({...A,extensions:A.extensions.filter(P=>!/[/\\]provider-rotation\.(?:ts|js)$/.test(P.path))}),"extensionsOverride")}}),b=y.resourceLoader.getExtensions();if(o.extensionPaths.some(A=>te.includes(A))){const A=new Set(b.extensions.map(T=>T.path)),P=te.filter(T=>!A.has(T));if(P.length>0){const T=b.errors.filter(D=>te.includes(D.path)).map(D=>`${D.path}: ${D.error}`).join("; ");throw new Error(`[broker] FATAL: mandatory canvas extensions failed to load: ${P.join(", ")}${T===""?"":` (${T})`}`)}}y.settingsManager.getRetryEnabled=()=>!1;const C=await nt(y,o),q=C?.model,U=C?.thinkingLevel,M=C===void 0?tt(y.modelRuntime):void 0,ie=M!==void 0?{...y,modelRuntime:M.runtime}:y,G=await n.createAgentSessionFromServices({services:ie,sessionManager:S.sessionManager,model:q,thinkingLevel:U,...Qn(o.tools,Ne()),sessionStartEvent:S.sessionStartEvent});return Fn(G.session),rn(G.session),M?.reveal(),{...G,services:y}},"buildForManager"),i=o.resumeSessionPath,a=o.forkFrom!==void 0&&o.forkFrom!=="";if(!a&&(i===void 0||i==="")&&o.resumeSessionId!==void 0&&o.resumeSessionId!=="")throw new Error(`[broker] resume requires a session .jsonl PATH; got only a bare id '${o.resumeSessionId}' (pi_session_file was never captured for this node)`);const l=!a&&i!==void 0&&i!=="",d=l&&o.newCycle===!0,f=l&&!d;let w;if(a)w=n.SessionManager.forkFrom(o.forkFrom,o.cwd);else if(f||d){if(w=n.SessionManager.open(i),d){const S=w.getLeafId();w.resetLeaf(),w.appendCustomEntry(pn,{cycle:Number(process.env.CRTR_CYCLES),fromLeaf:S})}}else w=n.SessionManager.create(o.cwd);if(n.createAgentSessionRuntime!==void 0){const S=e(async y=>{const b=await m({cwd:y.cwd,agentDir:y.agentDir,sessionManager:y.sessionManager,sessionStartEvent:y.sessionStartEvent});return{...b,diagnostics:b.services.diagnostics??[]}},"factory"),u=await n.createAgentSessionRuntime(S,{cwd:o.cwd,agentDir:s,sessionManager:w});return{session:u.session,services:u.services,resuming:f,runtime:u}}const k=await m({cwd:o.cwd,agentDir:s,sessionManager:w});return{session:k.session,services:k.services,resuming:f,runtime:void 0}}e(ot,"buildBrokerSession");function rt(n){const o=e((i,a,l,d)=>{if(d?.signal?.aborted)return Promise.resolve(i);const f=n.writable();return f.length===0?Promise.resolve(i):new Promise(w=>{let k;const S=e(()=>{k!==void 0&&clearTimeout(k),d?.signal?.removeEventListener("abort",u),n.pending.delete(a.id)},"cleanup"),u=e(()=>{S(),n.broadcast({type:"extension_ui_dismiss",id:a.id}),w(i)},"onAbort");d?.signal?.addEventListener("abort",u,{once:!0});const y=d?.timeout!==void 0?d.timeout:zn;k=setTimeout(()=>{S(),n.broadcast({type:"extension_ui_dismiss",id:a.id}),w(i)},y),typeof k.unref=="function"&&k.unref(),n.pending.set(a.id,{request:a,resolve:e(b=>{S(),n.broadcast({type:"extension_ui_dismiss",id:a.id}),w(l(b))},"resolve")});for(const b of f)n.forward(b,a)})},"dialogPromise"),s=e(()=>{},"noop");return{[un]:n.onKnownStreamWait??(i=>()=>{}),get theme(){const i=globalThis[Symbol.for("@earendil-works/pi-coding-agent:theme")];if(i==null)throw new Error("Theme not initialized. Call initTheme() first.");return i},select:e((i,a,l)=>o(void 0,{type:"extension_ui_request",id:x(),method:"select",title:i,options:a,timeout:l?.timeout},d=>"cancelled"in d&&d.cancelled?void 0:"value"in d?d.value:void 0,l),"select"),confirm:e((i,a,l)=>o(!1,{type:"extension_ui_request",id:x(),method:"confirm",title:i,message:a,timeout:l?.timeout},d=>"cancelled"in d&&d.cancelled?!1:"confirmed"in d?d.confirmed:!1,l),"confirm"),input:e((i,a,l)=>o(void 0,{type:"extension_ui_request",id:x(),method:"input",title:i,placeholder:a,timeout:l?.timeout},d=>"cancelled"in d&&d.cancelled?void 0:"value"in d?d.value:void 0,l),"input"),editor:e((i,a)=>o(void 0,{type:"extension_ui_request",id:x(),method:"editor",title:i,prefill:a},l=>"cancelled"in l&&l.cancelled?void 0:"value"in l?l.value:void 0),"editor"),setStatus:e((i,a)=>n.broadcast({type:"extension_ui_request",id:x(),method:"setStatus",statusKey:i,statusText:a}),"setStatus"),setWidget:e((i,a,l)=>{typeof a!="function"&&n.broadcast({type:"extension_ui_request",id:x(),method:"setWidget",widgetKey:i,widgetLines:a,widgetPlacement:l?.placement})},"setWidget"),setTitle:e(i=>n.broadcast({type:"extension_ui_request",id:x(),method:"setTitle",title:i}),"setTitle"),notify:e((i,a)=>{const l=a==="warn"?"warning":a;n.broadcast({type:"extension_ui_request",id:x(),method:"notify",message:i,notifyType:l})},"notify"),onTerminalInput:e(()=>s,"onTerminalInput"),setWorkingMessage:s,setWorkingVisible:s,setWorkingIndicator:s,setHiddenThinkingLabel:s,setFooter:s,setHeader:s,custom:e(()=>Promise.resolve(void 0),"custom"),pasteToEditor:s,setEditorText:s,getEditorText:e(()=>"","getEditorText"),addAutocompleteProvider:s,setEditorComponent:s,getEditorComponent:e(()=>{},"getEditorComponent"),getAllThemes:e(()=>[],"getAllThemes"),getTheme:e(()=>{},"getTheme"),setTheme:s,getToolsExpanded:e(()=>!1,"getToolsExpanded"),setToolsExpanded:s}}e(rt,"makeBrokerUiContext");export{mo as REVIEW_BOUNDARY_NAVIGATION_CODE,co as ReviewBoundaryNavigationError,Qn as brokerToolOptions,ot as buildBrokerSession,Jn as disposeActiveSession,rt as makeBrokerUiContext,so as runBroker,et as snapshotMessages};

package/dist/core/runtime/canvas-extensions.d.ts

@@ -0,0 +1,34 @@
+export declare const CANVAS_STOPHOOK_PATH: string;
+export declare const CANVAS_INBOX_WATCHER_PATH: string;
+export declare const CANVAS_RECAP_PATH: string;
+export declare const CANVAS_GOAL_CAPTURE_PATH: string;
+export declare const CANVAS_PASSIVE_CONTEXT_PATH: string;
+export declare const CANVAS_REVIEW_BOUNDARY_PATH: string;
+export declare const CANVAS_CONTEXT_INTRO_PATH: string;
+export declare const CANVAS_TOOL_GUIDE_PATH: string;
+export declare const CANVAS_DOC_SUBSTRATE_PATH: string;
+export declare const CANVAS_STRUCTURED_OUTPUT_PATH: string;
+export declare const CANVAS_BASH_VALVE_PATH: string;
+export declare const CANVAS_PREVIEW_RESULT_PATH: string;
+export declare const CANVAS_ELAPSED_PATH: string;
+export declare const CANVAS_PROMPT_SCRUB_PATH: string;
+export declare const CANVAS_STAMP_PATH: string;
+export declare const SYSTEM_PROMPT_ENTRY_PATH: string;
+/** The canvas extensions every node loads, in order. The inbox watcher commits
+ *  its cursor at agent_settled before the stophook checks it for idle release.
+ *  The review boundary must run before the stophook commits companion session
+ *  coordinates, and before the context intro appends fork bearings.
+ *
+ *  Every entry here loads ahead of any installed pi package, which is why the
+ *  prompt scrub belongs in this list rather than in crouter's pi package: the
+ *  Claude subscription adapter is a package, and it must not see pi's docs
+ *  block still in the prompt (see canvas-prompt-scrub.ts). */
+export declare const CANVAS_EXTENSIONS: string[];
+/** Preserve the invariant: mandatory extensions are always present exactly once.
+ *
+ *  - canonical mandatory list always prepended
+ *  - duplicates removed
+ *  - genuine custom extras appended in their persisted order
+ */
+export declare function mergeCanvasExtensions(persisted: unknown): string[];
+export declare function assertMandatoryCanvasExtensions(extensions: string[]): void;

package/dist/core/runtime/canvas-extensions.js

@@ -0,0 +1 @@
+var _=Object.defineProperty;var A=(e,s)=>_(e,"name",{value:s,configurable:!0});import{existsSync as T}from"node:fs";import{basename as S,dirname as x,extname as P,join as p}from"node:path";import{fileURLToPath as v}from"node:url";import{customExtensionPaths as E,isShippedCanvasExtension as m}from"../canvas/extensions.js";function t(e){const s=x(v(import.meta.url)),a=[p(s,"..","..","pi-extensions",`${e}.js`),p(s,"..","..","pi-extensions",`${e}.ts`)];return a.find(r=>T(r))??a[0]}A(t,"resolveExtension");const C=t("canvas-stophook"),N=t("canvas-inbox-watcher"),f=t("canvas-recap"),u=t("canvas-goal-capture"),V=t("canvas-passive-context"),d=t("canvas-review-boundary"),H=t("canvas-context-intro"),h=t("canvas-tool-guide"),l=t("canvas-doc-substrate"),O=t("canvas-structured-output"),R=t("canvas-bash-valve"),w=t("canvas-preview-result"),y=t("canvas-elapsed"),U=t("canvas-prompt-scrub"),g=t("canvas-stamp"),b=t("system-prompt-entry"),i=[N,d,C,f,u,V,H,h,l,O,R,w,U,g,y,b];function $(e){const s=i,a=new Set(s),r=[],n=new Set,c=Array.isArray(e)&&e.every(o=>typeof o=="string")?E(e):[];for(const o of c)a.has(o)||n.has(o)||(n.add(o),r.push(o));return[...s,...r]}A($,"mergeCanvasExtensions");function X(e){const s=new Set(i),a=new Map,r=new Set;for(const n of e){if(m(n)){const c=S(n.replaceAll("\\","/")),o=c.slice(0,c.length-P(c).length);if(r.has(o))throw new Error(`duplicate mandatory canvas extension basename ${o}`);r.add(o)}s.has(n)&&a.set(n,(a.get(n)??0)+1)}for(const n of i)if(a.get(n)!==1)throw new Error(`missing mandatory canvas extension ${n} (found ${a.get(n)??0} times)`)}A(X,"assertMandatoryCanvasExtensions");export{R as CANVAS_BASH_VALVE_PATH,H as CANVAS_CONTEXT_INTRO_PATH,l as CANVAS_DOC_SUBSTRATE_PATH,y as CANVAS_ELAPSED_PATH,i as CANVAS_EXTENSIONS,u as CANVAS_GOAL_CAPTURE_PATH,N as CANVAS_INBOX_WATCHER_PATH,V as CANVAS_PASSIVE_CONTEXT_PATH,w as CANVAS_PREVIEW_RESULT_PATH,U as CANVAS_PROMPT_SCRUB_PATH,f as CANVAS_RECAP_PATH,d as CANVAS_REVIEW_BOUNDARY_PATH,g as CANVAS_STAMP_PATH,C as CANVAS_STOPHOOK_PATH,O as CANVAS_STRUCTURED_OUTPUT_PATH,h as CANVAS_TOOL_GUIDE_PATH,b as SYSTEM_PROMPT_ENTRY_PATH,X as assertMandatoryCanvasExtensions,$ as mergeCanvasExtensions};

package/dist/core/runtime/chat-inventory-rows.d.ts

@@ -0,0 +1,8 @@
+import type { ChatInventoryCommandDTO, ChatInventoryMemoryRefDTO } from '../../api/dto/chat-inventory.js';
+/** Keep the command rows a Gateway can use. Malformed registrations are
+ * discarded individually so one producer cannot take down the inventory. */
+export declare function gatewayCommandRows(rows: unknown): ChatInventoryCommandDTO[];
+export declare function chatInventoryCommandRows(rows: unknown): ChatInventoryCommandDTO[];
+export declare function gatewayCommandRowsFromDetail(detail: string | undefined): ChatInventoryCommandDTO[];
+export declare function chatInventoryMemoryRows(rows: unknown): ChatInventoryMemoryRefDTO[];
+export declare function gatewayMemoryRows(refs: unknown): ChatInventoryMemoryRefDTO[];

package/dist/core/runtime/chat-inventory-rows.js

@@ -0,0 +1 @@
+var y=Object.defineProperty;var o=(t,r)=>y(t,"name",{value:r,configurable:!0});import{isDeterministicCommandExpansion as u}from"./command-expansion.js";const p=new Set(["knowledge","preference"]),m=new Set(["node","project","profile","user","builtin"]);function i(t){return typeof t=="string"&&t!==""}o(i,"nonEmptyString");function d(t){if(!Array.isArray(t))return[];const r=[];for(const n of t){if(typeof n!="object"||n===null)continue;const e=n;if(e.gatewayCapable!==!0)continue;const s=e.source;if(s!=="command"&&s!=="template"||!i(e.name)||typeof e.description!="string")continue;const a=e.expansion,c=e.template,f=e.argumentHint;r.push({name:e.name,description:e.description,source:s,...i(f)?{argument_hint:f}:{},...u(a)?{expansion:a}:{},...typeof c=="string"?{template:c}:{}})}return r}o(d,"gatewayCommandRows");function h(t){return Array.isArray(t)?t.filter(r=>{if(typeof r!="object"||r===null)return!1;const n=r;return!i(n.name)||typeof n.description!="string"||n.source!=="command"&&n.source!=="template"||n.argument_hint!==void 0&&!i(n.argument_hint)||n.template!==void 0&&typeof n.template!="string"?!1:n.expansion===void 0||u(n.expansion)}):[]}o(h,"chatInventoryCommandRows");function x(t){if(t===void 0)return[];try{return d(JSON.parse(t))}catch{return[]}}o(x,"gatewayCommandRowsFromDetail");function w(t){return Array.isArray(t)?t.filter(r=>{if(typeof r!="object"||r===null)return!1;const n=r;return i(n.name)&&typeof n.shortForm=="string"&&typeof n.kind=="string"&&p.has(n.kind)&&typeof n.scope=="string"&&m.has(n.scope)}):[]}o(w,"chatInventoryMemoryRows");function A(t){if(!Array.isArray(t))return[];const r=[];for(const n of t){if(typeof n!="object"||n===null)continue;const e=n;e.gatewayVisible===!0&&(!i(e.name)||typeof e.shortForm!="string"||typeof e.kind!="string"||!p.has(e.kind)||typeof e.scope!="string"||!m.has(e.scope)||r.push({name:e.name,kind:e.kind,scope:e.scope,shortForm:e.shortForm}))}return r}o(A,"gatewayMemoryRows");export{h as chatInventoryCommandRows,w as chatInventoryMemoryRows,d as gatewayCommandRows,x as gatewayCommandRowsFromDetail,A as gatewayMemoryRows};

package/dist/core/runtime/close.d.ts

@@ -0,0 +1,46 @@
+import type { InboxTier } from '../feed/inbox.js';
+import type { ObjectRow } from '../graph/types.js';
+export type NoticeEvent = 'notice.crash' | 'notice.deadline' | 'notice.close';
+/** Publish a lifecycle notice on `nodeId` to its watchers, inside the caller's write when one
+ *  is open. The message body carries today's sentence (as `body`, which the inbox card shows)
+ *  and data; `publish` picks the recipients, their tier and wake from each watch. A node whose
+ *  object is already gone publishes nothing. */
+export declare function publishNotice(nodeId: string, event: NoticeEvent, label: string, data: Record<string, unknown>, tier?: InboxTier, actor?: ObjectRow | null): void;
+export interface CloseNodeResult {
+    /** The focused node that was closed — the cascade root. */
+    root: string;
+    /** Every node torn down (root + cascaded descendants), in kill order
+     *  (leaves first, root last). */
+    closed: string[];
+    /** Descendants left alive because a manager outside the subtree still
+     *  subscribes to them. */
+    spared: string[];
+}
+/** The set of nodes to close: the root plus every descendant reachable down the
+ *  subscriptions spine, all of whose managers are themselves in the set. Grown
+ *  to a fixpoint — a node added this pass can qualify its own children next
+ *  pass. Cycle-safe via the membership skip. */
+export declare function closingSet(root: string): Set<string>;
+/** Close `rootId` and its exclusive subtree. Best-effort throughout: a tmux/db
+ *  failure on one node never aborts the cascade. Throws only on an unknown root
+ *  so the command can surface a clean not-found error.
+ *
+ *  `rootEvent` decides the ROOT's terminal status (descendants are always
+ *  `cancel`led — they did not finish their own work, they were torn down with the
+ *  parent):
+ *    'cancel'   (default) — the node was abandoned/torn down  → canceled (⊜).
+ *    'finish'             — the user is marking it COMPLETE   → done (✓). Used by
+ *      the canvas browser's `x` (close-out) action. A root already in a terminal
+ *      status keeps it (finish is only legal from a live status). */
+export declare function closeNode(rootId: string, opts?: {
+    rootEvent?: 'cancel' | 'finish';
+    callerPid?: number;
+    /** App runs retain their root and child rows even when no assistant output exists. */
+    preserveEmpty?: boolean;
+    /** Daemon-owned close work that must drain before this daemon exits. */
+    registerDetached?: (work: Promise<void>) => void;
+    /** Reason recorded when an active turn or background job is stopped. */
+    stopReason?: string;
+    /** The node that asked for the close; absent means the local person. */
+    closer?: string;
+}): CloseNodeResult;

package/dist/core/runtime/close.js

@@ -0,0 +1 @@
+var k=Object.defineProperty;var a=(r,o)=>k(r,"name",{value:o,configurable:!0});import{getNode as h,subscriptionsOf as u,subscribersOf as E}from"../canvas/index.js";import{transition as w}from"./lifecycle.js";import{stopNodeSandboxes as $}from"../spaces/stop.js";import{tearDownNode as D,reapIfEmpty as N}from"./placement.js";import{crtrHome as L,jobDir as O}from"../canvas/paths.js";import{contextDir as x,nodeAgentDir as S}from"../canvas/node-agent-paths.js";import{readLiveSession as j}from"../canvas/sessions.js";import{discoverLifecycleHookRegistry as H}from"../command-hooks/discovery.js";import{invokeLifecycleHooks as A}from"../command-hooks/transport/exec-lifecycle.js";import{emitEvent as p}from"../events/emit.js";import{enqueueNodeMail as B}from"../feed/messages.js";import{withCanvasWrite as v}from"../canvas/db.js";import{recordActedOn as C}from"../graph/edges.js";import{publish as R}from"../graph/events.js";import{getById as y,nodeObject as T,ownerForGrantee as Y}from"../graph/objects.js";const q={deferred:3,normal:5,urgent:7,critical:7};function P(r,o,l,s,d="normal",t=null){v(c=>{const e=y(c,r);e===null||e.type!=="node"||R(c,{event:o,object:e,actor:t,level:q[d],attrs:{},messageBody:{...s,body:l}})})}a(P,"publishNotice");function z(r){const o=new Set([r]);let l=!0;for(;l;){l=!1;for(const s of[...o])for(const d of u(s)){const t=d.node_id;o.has(t)||E(t).every(c=>o.has(c.node_id))&&(o.add(t),l=!0)}}return o}a(z,"closingSet");function F(r,o){const l=[],s=new Set([r]),d=[r];for(;d.length>0;){const t=d.shift();l.push(t);for(const c of u(t))o.has(c.node_id)&&!s.has(c.node_id)&&(s.add(c.node_id),d.push(c.node_id))}for(const t of o)s.has(t)||l.push(t);return l.reverse()}a(F,"killOrder");function G(r,o){const l=r?"You were CLOSED by the user from the canvas":"You were CANCELED \u2014 an ancestor of yours was closed from the canvas";if(o.length===0)return`${l}. Your pi session is preserved; this resume reopened it.`;const s=o.slice(0,4).map(t=>{const c=h(t);return c!==null?`${c.name} (${t})`:t}),d=o.length>s.length?` +${o.length-s.length} more`:"";return`${l}. ${o.length} child node(s) you subscribe to were canceled with you and are no longer running: ${s.join(", ")}${d}. Resuming will NOT restore them \u2014 re-spawn if you still need that work.`}a(G,"cancellationLabel");function se(r,o={}){if(h(r)===null)throw new Error(`closeNode: unknown node ${r}`);const l=o.rootEvent??"cancel",s=z(r),d=F(r,s),t=[];for(const e of s)for(const n of u(e))!s.has(n.node_id)&&!t.includes(n.node_id)&&t.push(n.node_id);const c=[];for(const e of d)try{const n=h(e);if(n===null)continue;const _=u(e).map(i=>i.node_id).filter(i=>s.has(i));let m;try{const i=H(n.cwd,n.profile_id).plans.get("node:close")??[];if(i.length>0){const f={node:{id:e,name:n.name,kind:n.kind,mode:n.mode,lifecycle:n.lifecycle,cwd:n.cwd,nodeDir:S(e),contextDir:x(e),jobDir:O(e)},runtime:{isBirth:!1,canvasHome:L(),profile:n.profile_id??null}};m=a(()=>A(i,f),"afterTeardown")}}catch(i){p({level:"error",event:"node.close_hook.discovery_failed",node_id:e,error:i})}const b=$(e,o.stopReason??"node_closed",{...e===r?{excludePid:o.callerPid}:{},...m?{after:m}:{}});try{o.registerDetached?.(b.then(()=>{}))}catch(i){p({level:"error",event:"node.close_hook.detached_registration_failed",node_id:e,error:i})}if(v(i=>{const f=y(i,e);if(f===null||f.type!=="node")return;const g=o.closer!==void 0?T(i,o.closer):Y(i,"user:local");C(i,g,f),P(e,"notice.close",`Child closed \u2014 ${n.name} (${e}) was closed from the canvas and is no longer running.`,{reason:"child-closed",child:e},"normal",g)}),o.preserveEmpty||n.run_id!==null&&n.pi_pid!==null&&j(e)?.sessionId!=null||!N(e,void 0,!1)){const i=n.final_report!==null&&n.final_report!==void 0;e===r&&l==="finish"||i?(n.status==="active"||n.status==="idle")&&w(e,"finish"):w(e,"cancel",{reason:"closed"}),D(e),B(e,{kind:"message",label:G(e===r,_),bodyJson:{reason:"user-close",cascade_root:r,canceled_children:_},urgency:"normal",wake:1})}c.push(e)}catch(n){p({level:"error",event:"node.close.failed",node_id:e,error:n})}return{root:r,closed:c,spared:t}}a(se,"closeNode");export{se as closeNode,z as closingSet,P as publishNotice};

package/dist/core/runtime/come-back-note.d.ts

@@ -0,0 +1,5 @@
+/** The note, for a node that can still be reopened. */
+export declare function comeBackNote(nodeId: string): string;
+/** Print the note after a viewer exit — only when the viewer ended cleanly and
+ *  the node can still be reopened (it exists and has not finished). */
+export declare function printComeBackNote(nodeId: string, exitCode: number): Promise<void>;

package/dist/core/runtime/come-back-note.js

@@ -0,0 +1,3 @@
+var i=Object.defineProperty;var n=(e,t)=>i(e,"name",{value:t,configurable:!0});import{cliClient as c}from"../../commands/api-client.js";import{stdoutColor as r}from"../output.js";function s(e){const t=r.dim,o=r.bold;return["",`${o("You left the conversation")} ${t("\u2014 the agent is still running in the background.")}`,`  ${o(`crtr -r ${e}`)}  ${t("reopen this conversation")}`,`  ${o("crtr -c")}  ${t("reopen the latest conversation in this directory")}`,`  ${o("crtr")}, then ${o("Alt+C")} \u2192 Find node  ${t("(or type /resume) to pick any conversation")}`,""].join(`
+`)}n(s,"comeBackNote");async function l(e,t){if(t===0){try{const o=await c().getNode(e);if(o.status!=="active"&&o.status!=="idle")return}catch{return}process.stdout.write(s(e)+`
+`)}}n(l,"printComeBackNote");export{s as comeBackNote,l as printComeBackNote};

package/dist/core/runtime/command-expansion.d.ts

@@ -0,0 +1,19 @@
+/** Serializable metadata for an extension command whose handler deterministically
+ * turns its raw argument string into the user prompt sent to the engine. Commands
+ * that open UI, inspect live state, or perform side effects must omit it. */
+export interface DeterministicCommandExpansion {
+    kind: 'memory-slash';
+    commandName: string;
+    body: string;
+}
+/** Accept only the inert, JSON-safe discriminated shape that may cross the
+ * broker boundary. Extension registrations are arbitrary runtime objects, so
+ * never serialize getters, prototypes, or extra metadata into a viewer. */
+export declare function isDeterministicCommandExpansion(value: unknown): value is DeterministicCommandExpansion;
+/** Remove HTML comments from Markdown before it becomes model context. Markdown
+ * command files use comments for author metadata; fenced and inline code remain
+ * literal so examples of HTML are never altered. */
+export declare function stripMarkdownComments(markdown: string): string;
+/** The single expansion path used by deterministic command handlers and by
+ * pre-submit disclosure. `rawArgs` is the unparsed text after the slash name. */
+export declare function expandDeterministicCommand(expansion: DeterministicCommandExpansion, rawArgs: string): string;

package/dist/core/runtime/command-expansion.js

@@ -0,0 +1,9 @@
+var m=Object.defineProperty;var f=(e,n)=>m(e,"name",{value:n,configurable:!0});function b(e){if(typeof e!="object"||e===null||Array.isArray(e))return!1;try{const n=Object.getPrototypeOf(e);if(n!==Object.prototype&&n!==null||Object.getOwnPropertySymbols(e).length!==0)return!1;const t=Object.getOwnPropertyNames(e).sort();if(t.length!==3||t[0]!=="body"||t[1]!=="commandName"||t[2]!=="kind")return!1;const r=Object.getOwnPropertyDescriptors(e);if(Object.values(r).some(c=>!("value"in c)))return!1;const i=e;return i.kind!=="memory-slash"||typeof i.commandName!="string"||typeof i.body!="string"?!1:(JSON.stringify(e),!0)}catch{return!1}}f(b,"isDeterministicCommandExpansion");function y(e){let n="",t=0,r=!0,i,c;for(;t<e.length;){if(r&&c===void 0){const s=e.slice(t).match(/^(?: {0,3})(`{3,}|~{3,})/);if(s!==null){const o=s[1][0],l=s[1].length;i===void 0?i={marker:o,length:l}:i.marker===o&&l>=i.length&&(i=void 0)}}if(i===void 0&&c===void 0&&e.startsWith("<!--",t)){const s=e.indexOf("-->",t+4),o=s===-1?e.length:s+3,l=e.indexOf(`
+`,o),a=e.lastIndexOf(`
+`,t-1)+1,u=e.slice(a,t),g=e.slice(o,l===-1?e.length:l);if(u.trim()===""&&g.trim()===""){u.length>0&&(n=n.slice(0,-u.length)),t=l===-1?e.length:l+1,r=!0;continue}const h=e.slice(t,o);r=h.endsWith(`
+`),t+=h.length;continue}if(i===void 0&&e[t]==="`"){let s=t;for(;e[s]==="`";)s++;const o=s-t;c===void 0?c=o:c===o&&(c=void 0),n+=e.slice(t,s),r=!1,t=s;continue}const d=e[t];n+=d,r=d===`
+`,t++}return n}f(y,"stripMarkdownComments");function O(e,n){const t=n.trim(),r=y(e.body);return r.includes("$ARGUMENTS")?r.split("$ARGUMENTS").join(t):`${t===""?`You invoked /${e.commandName} with no arguments.`:`You invoked /${e.commandName} with: ${t}`}
+
+Follow the instructions below exactly as written \u2014 every part, including the presence or absence of arguments above, is a load-bearing requirement.
+
+${r}`}f(O,"expandDeterministicCommand");export{O as expandDeterministicCommand,b as isDeterministicCommandExpansion,y as stripMarkdownComments};

package/dist/core/runtime/command-surface.d.ts

@@ -0,0 +1,38 @@
+/** The optional fields a shipped extension registration may add so its command
+ *  is disclosed to chat surfaces. Registrations cast their options through
+ *  `ChatCapableRegistration` rather than widening pi's own types. */
+export interface ChatCommandMetadata {
+    /** Present and exactly `true` to opt this command into chat disclosure. */
+    gateway?: true;
+    /** Argument shape shown beside the name, e.g. `'[args]'`. */
+    argumentHint?: string;
+}
+/** Registration options plus the preserved custom fields crouter reads back off
+ *  the resolved command. `T` is `Parameters<ExtensionAPI['registerCommand']>[1]`
+ *  at the call site. */
+export type ChatCapableRegistration<T> = T & ChatCommandMetadata;
+/** What the command disclosure needs to know about one command's chat surface. */
+export interface ChatCommandSurface {
+    gatewayCapable: boolean;
+    argumentHint?: string;
+}
+/** Read the chat surface off a resolved extension command. `command` is an
+ *  arbitrary runtime object from another package, so every field is probed
+ *  rather than trusted. */
+export declare function registrationChatSurface(command: unknown): ChatCommandSurface;
+/** Capture prompt-template chat metadata immediately after pi loads or reloads
+ *  its templates. The opt-in is the template file's own frontmatter; the hint
+ *  is pi's already-parsed `argument-hint`. A missing file, unreadable path, or
+ *  invalid YAML is not chat-capable. */
+export declare function capturePromptTemplateChatSurfaces(templates: unknown): void;
+/** Capture the Gateway capabilities declared by one completed resource load. */
+export declare function captureChatCapabilities(input: {
+    commands: unknown;
+    templates: unknown;
+}): void;
+/** Capture every startup-declared command and prompt template a session
+ *  currently exposes. A broken getter leaves that surface fail-closed. */
+export declare function captureSessionChatCapabilities(session: unknown): void;
+/** Read the chat surface captured for this loaded template. An uncaptured
+ *  template is not disclosed to chat surfaces. */
+export declare function templateChatSurface(template: unknown): ChatCommandSurface;

package/dist/core/runtime/command-surface.js

@@ -0,0 +1 @@
+var s=Object.defineProperty;var a=(t,e)=>s(t,"name",{value:e,configurable:!0});import{readFileSync as l}from"node:fs";import{parseFrontmatterGeneric as m}from"../frontmatter.js";const c={gatewayCapable:!1};let i=new WeakMap;const u=new WeakMap;function p(t){return typeof t=="string"&&t.trim()!==""?{argumentHint:t}:{}}a(p,"hintOf");function d(t){if(typeof t!="object"||t===null)return c;const e=t,{sourceInfo:r,invocationName:n}=e;return typeof r!="object"||r===null||typeof n!="string"||!i.get(r)?.has(n)?c:{gatewayCapable:!0,...p(e.argumentHint)}}a(d,"registrationChatSurface");function y(t){if(i=new WeakMap,!!Array.isArray(t))for(const e of t){if(typeof e!="object"||e===null)continue;const r=e,{sourceInfo:n,invocationName:o}=r;if(r.gateway!==!0||typeof n!="object"||n===null||typeof o!="string")continue;const f=i.get(n)??new Set;f.add(o),i.set(n,f)}}a(y,"captureExtensionCommandSurfaces");function g(t){if(Array.isArray(t))for(const e of t){if(typeof e!="object"||e===null)continue;const{filePath:r,argumentHint:n}=e;let o=c;if(typeof r=="string"&&r!=="")try{m(l(r,"utf8")).data?.gateway===!0&&(o={gatewayCapable:!0,...p(n)})}catch{}u.set(e,o)}}a(g,"capturePromptTemplateChatSurfaces");function C(t){y(t.commands),g(t.templates)}a(C,"captureChatCapabilities");function S(t){try{if(typeof t!="object"||t===null)return;const e=t;C({commands:e.extensionRunner?.getRegisteredCommands?.(),templates:e.promptTemplates})}catch{}}a(S,"captureSessionChatCapabilities");function j(t){return typeof t!="object"||t===null?c:u.get(t)??c}a(j,"templateChatSurface");export{C as captureChatCapabilities,g as capturePromptTemplateChatSurfaces,S as captureSessionChatCapabilities,d as registrationChatSurface,j as templateChatSurface};

package/dist/core/runtime/connectivity.d.ts

@@ -0,0 +1,12 @@
+/** Default per-target connect timeout. Short — a healthy network connects in
+ *  tens of ms; a down network should be declared down quickly so the daemon tick
+ *  isn't held up. */
+export declare const PROBE_TIMEOUT_MS = 3000;
+/** Resolve true iff a TCP connection to host:port completes within timeoutMs.
+ *  Any error/timeout resolves false (never rejects). The socket is always torn
+ *  down. Exported for unit testing against a local listener. */
+export declare function tcpReachable(host: string, port: number, timeoutMs: number): Promise<boolean>;
+/** True when the box can reach the internet (any PROBE_TARGET accepts a TCP
+ *  connection within the timeout). The broker uses this for connection-fault
+ *  retries. Never throws. */
+export declare function probeOnline(timeoutMs?: number): Promise<boolean>;

package/dist/core/runtime/connectivity.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var c=(o,r)=>u(o,"name",{value:r,configurable:!0});import{Socket as i}from"node:net";const p=[{host:"1.1.1.1",port:443},{host:"8.8.8.8",port:443}],f=3e3;function m(o,r,t){return new Promise(a=>{const e=new i;let s=!1;const n=c(l=>{if(!s){s=!0;try{e.destroy()}catch{}a(l)}},"done");e.setTimeout(t),e.once("connect",()=>n(!0)),e.once("timeout",()=>n(!1)),e.once("error",()=>n(!1));try{e.connect(r,o)}catch{n(!1)}})}c(m,"tcpReachable");async function T(o=f){try{return(await Promise.all(p.map(t=>m(t.host,t.port,o)))).some(t=>t)}catch{return!1}}c(T,"probeOnline");export{f as PROBE_TIMEOUT_MS,T as probeOnline,m as tcpReachable};

package/dist/core/runtime/crtr-theme.d.ts

@@ -0,0 +1,12 @@
+/** crtr's default theme name, used when no settings file names one. */
+export declare const CRTR_DEFAULT_THEME = "classic-dark";
+/** Initialize pi's process-global theme for a crtr surface.
+ *
+ *  - No configured name → crtr's `classic-dark`.
+ *  - A configured name → pi resolves it, with `PI_CODING_AGENT_DIR` pinned to
+ *    `agentDir` for the call so a custom theme file is found in the same agent
+ *    dir its name was read from. pi reads that variable on every lookup.
+ *
+ *  `classic-dark` is published on pi's global theme slot, the one every pi
+ *  module copy (including a bundled viewer's inlined copy) reads through. */
+export declare function initCrtrTheme(themeName: string | undefined, agentDir: string, enableWatcher?: boolean): void;

package/dist/core/runtime/crtr-theme.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var s=(e,t)=>d(e,"name",{value:t,configurable:!0});import{initTheme as i,Theme as l}from"@earendil-works/pi-coding-agent";import{getTerminalColorMode as f}from"@earendil-works/pi-tui";const g="classic-dark",m={cyan:"#00d7ff",blue:"#5f87ff",green:"#b5bd68",red:"#cc6666",yellow:"#ffff00",text:"#d4d4d4",gray:"#808080",dimGray:"#666666",darkGray:"#505050",accent:"#8abeb7",selectedBg:"#3a3a4a",userMsgBg:"#343541",toolPendingBg:"#282832",toolSuccessBg:"#283228",toolErrorBg:"#3c2828",customMsgBg:"#2d2838"},u={accent:"accent",border:"blue",borderAccent:"cyan",borderMuted:"darkGray",success:"green",error:"red",warning:"yellow",muted:"gray",dim:"dimGray",text:"text",thinkingText:"gray",selectedBg:"selectedBg",scrollbarTrack:"darkGray",scrollbarThumb:"text",searchMatchBg:"selectedBg",searchMatchText:"text",userMessageBg:"userMsgBg",userMessageText:"text",customMessageBg:"customMsgBg",customMessageText:"text",customMessageLabel:"#9575cd",toolPendingBg:"toolPendingBg",toolSuccessBg:"toolSuccessBg",toolErrorBg:"toolErrorBg",toolTitle:"text",toolOutput:"gray",mdHeading:"#f0c674",mdLink:"#81a2be",mdLinkUrl:"dimGray",mdCode:"accent",mdCodeBlock:"green",mdCodeBlockBorder:"gray",mdQuote:"gray",mdQuoteBorder:"gray",mdHr:"gray",mdListBullet:"accent",toolDiffAdded:"green",toolDiffRemoved:"red",toolDiffContext:"gray",syntaxComment:"#6A9955",syntaxKeyword:"#569CD6",syntaxFunction:"#DCDCAA",syntaxVariable:"#9CDCFE",syntaxString:"#CE9178",syntaxNumber:"#B5CEA8",syntaxType:"#4EC9B0",syntaxOperator:"#D4D4D4",syntaxPunctuation:"#D4D4D4",thinkingOff:"darkGray",thinkingMinimal:"#6e6e6e",thinkingLow:"#5f87af",thinkingMedium:"#81a2be",thinkingHigh:"#b294bb",thinkingXhigh:"#d183e8",thinkingMax:"#ff5fff",bashMode:"green"},B=new Set(["selectedBg","searchMatchBg","userMessageBg","customMessageBg","toolPendingBg","toolSuccessBg","toolErrorBg"]);function y(){const e={},t={};for(const[n,o]of Object.entries(u)){const r=m[o]??o;(B.has(n)?t:e)[n]=r}return new l(e,t,f(),{name:g,appearance:"dark"})}s(y,"classicDarkTheme");const h=Symbol.for("@earendil-works/pi-coding-agent:theme"),D=Symbol.for("@mariozechner/pi-coding-agent:theme");function M(e,t,n=!1){const o=process.env.PI_CODING_AGENT_DIR;process.env.PI_CODING_AGENT_DIR=t;try{const r=e===g?void 0:e;if(i(r??"dark",r!==void 0&&n),r===void 0){const a=y(),c=globalThis;c[h]=a,c[D]=a}}finally{o===void 0?delete process.env.PI_CODING_AGENT_DIR:process.env.PI_CODING_AGENT_DIR=o}}s(M,"initCrtrTheme");export{g as CRTR_DEFAULT_THEME,M as initCrtrTheme};

package/dist/core/runtime/deliver-live.d.ts

@@ -0,0 +1,38 @@
+export interface LiveCustomMessage {
+    customType: string;
+    content: string;
+    /** Omitted → pushed straight onto the message list (lands first in an empty
+     *  session). `nextTurn` → folded into whatever turn comes next. */
+    deliverAs?: 'nextTurn';
+    /** Extension-only metadata, never sent to the LLM. */
+    details?: {
+        nodeId: string;
+    };
+}
+/** Deliver `message` into `nodeId`'s live session. Resolves without doing
+ *  anything when the node has no live broker. Rejects when a live broker cannot
+ *  be reached or refuses the frame — the caller decides what that means (for a
+ *  warm claim it is fatal: a node wearing the wrong bearings is worse than a
+ *  slow one, so the spare is abandoned and the create goes cold). */
+export declare function deliverCustomMessageLive(nodeId: string, message: LiveCustomMessage): Promise<void>;
+/** Build and deliver `nodeId`'s bearings into its live session, and freeze the
+ *  preference snapshot that goes with them. Called by the warm-pool claim once
+ *  the row already wears the claimant's kind/mode/name, so the identity
+ *  assertion, the knowledge catalog, the `<project_context>` environment
+ *  snapshot, and the preference block are all built for the node being handed
+ *  out.
+ *
+ *  The snapshot is frozen HERE for the same reason bearings are built here: a
+ *  spare boots with no claimant, so `canvas-context-intro` skips warm spares
+ *  and the block would otherwise assert the SPARE's preferences. Claim is the
+ *  first moment the real persona, profile, and cwd exist, and it is the last
+ *  moment before the claimant's first turn — which reaches the provider through
+ *  the persona gate, and which need not be a typed prompt. A slash command
+ *  opens its turn through `sendMessage({ triggerTurn: true })`, and Pi emits
+ *  `before_agent_start` only on the typed-prompt path, so the broker's own
+ *  freeze in `canvas-doc-substrate` never runs for it.
+ *
+ *  The `details.nodeId` stamp is what the context-intro extension's idempotency
+ *  guard matches on, so a LATER revive of this node sees its own bearings
+ *  already on the branch and does not inject a second copy. */
+export declare function deliverBearingsLive(nodeId: string): Promise<void>;

package/dist/core/runtime/deliver-live.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var r=(t,e)=>n(t,"name",{value:e,configurable:!0});import{getNode as m}from"../canvas/index.js";import{withCanvasWrite as a}from"../canvas/db.js";import{readerForNode as s}from"../graph/reader.js";import{noteNodeBooting as c}from"../graph/repo-sync/index.js";import{checkoutsForCwd as f}from"../graph/repo-sync/repos.js";import{deliver as l}from"../substrate/delivery/deliver.js";import{oneShotControllerRequest as u}from"./broker-request.js";import{isBrokerLive as p}from"./model-swap.js";import{CONTEXT_INTRO_CUSTOM_TYPE as v}from"./bearings.js";import{formatCard as d}from"../../shared/generated-context.js";async function w(t,e){const o=m(t);if(o===null)throw new Error(`deliverCustomMessageLive: unknown node ${t}`);p(o)&&await u({nodeId:t,what:`the ${e.customType} delivery`,ackFor:"deliver_custom_message",frame:r(()=>({type:"deliver_custom_message",customType:e.customType,content:e.content,...e.deliverAs!==void 0?{deliverAs:e.deliverAs}:{},...e.details!==void 0?{details:e.details}:{}}),"frame"),result:r(()=>{},"result")})}r(w,"deliverCustomMessageLive");async function F(t){await c(t);const{content:e}=a(o=>l(o,s(o,t,i=>f(o,i)),{activity:"boot"}));await w(t,{customType:v,content:d("bearings",{},e),details:{nodeId:t}})}r(F,"deliverBearingsLive");export{F as deliverBearingsLive,w as deliverCustomMessageLive};

package/dist/core/runtime/fault-recovery.d.ts

@@ -0,0 +1,23 @@
+import type { Fault, FaultKind } from '../fault-classifier.js';
+export type FaultRecoveryGate = 'online' | 'time' | 'none';
+export interface FaultRecoveryPolicy {
+    kind: FaultKind;
+    gate: FaultRecoveryGate;
+    max: number;
+    baseDelayMs: number;
+    capDelayMs: number;
+    fatal: boolean;
+}
+export interface FaultRetryPlan {
+    fault: Fault;
+    attempt: number;
+    max: number;
+    nextAt: string;
+    delayMs: number;
+}
+export declare function policyFor(kind: FaultKind): FaultRecoveryPolicy;
+export declare function nextFaultRetry(fault: Fault, now: number, opts?: {
+    retryAfterMs?: number | null;
+    jitterMs?: (fault: Fault, attempt: number) => number;
+}): FaultRetryPlan | null;
+export declare function markFatalOnExhaust(fault: Fault): Fault;

package/dist/core/runtime/fault-recovery.js

@@ -0,0 +1 @@
+var y=Object.defineProperty;var o=(e,t)=>y(e,"name",{value:t,configurable:!0});const d={connection:{kind:"connection",gate:"online",max:8,baseDelayMs:5e3,capDelayMs:6e4,fatal:!1},"rate-limit":{kind:"rate-limit",gate:"time",max:6,baseDelayMs:3e4,capDelayMs:3e5,fatal:!1},overloaded:{kind:"overloaded",gate:"time",max:6,baseDelayMs:1e4,capDelayMs:12e4,fatal:!1},auth:{kind:"auth",gate:"none",max:0,baseDelayMs:0,capDelayMs:0,fatal:!0},protocol:{kind:"protocol",gate:"none",max:0,baseDelayMs:0,capDelayMs:0,fatal:!0},"context-overflow":{kind:"context-overflow",gate:"none",max:0,baseDelayMs:0,capDelayMs:0,fatal:!0},other:{kind:"other",gate:"none",max:0,baseDelayMs:0,capDelayMs:0,fatal:!0},wedged:{kind:"wedged",gate:"none",max:0,baseDelayMs:0,capDelayMs:0,fatal:!0},"model-not-found":{kind:"model-not-found",gate:"none",max:0,baseDelayMs:0,capDelayMs:0,fatal:!0}};function s(e){return d[e]}o(s,"policyFor");function l(e,t){return!Number.isFinite(e)||e<=0?0:Math.min(Math.max(1,Math.round(e)),t)}o(l,"clampDelay");function c(e,t){const r=`${e.link}|${e.kind}|${e.message}|${e.since}|${t}`;let a=0;for(let n=0;n<r.length;n++)a=a*33+r.charCodeAt(n)>>>0;return a%1e3}o(c,"defaultOverloadedJitterMs");function m(e,t,r){const a=s(e.kind);if(a.fatal)return 0;if(e.kind==="rate-limit"&&typeof r?.retryAfterMs=="number"&&Number.isFinite(r.retryAfterMs))return l(r.retryAfterMs,a.capDelayMs);const n=a.baseDelayMs*2**Math.max(0,t-1),i=e.kind==="overloaded"?Math.max(0,Math.round(r?.jitterMs?.(e,t)??c(e,t))):0;return l(n+i,a.capDelayMs)}o(m,"retryDelayMs");function x(e,t,r){const a=s(e.kind);if(a.fatal)return null;const n=(e.retry.attempt??0)+1;if(n>a.max)return null;const i=m(e,n,r);return{fault:{...e,retry:{...e.retry,disposition:"auto",by:e.retry.by??"daemon",attempt:n,max:a.max,nextAt:new Date(t+i).toISOString()}},attempt:n,max:a.max,nextAt:new Date(t+i).toISOString(),delayMs:i}}o(x,"nextFaultRetry");function D(e){const t={...e.retry,disposition:"fatal",by:e.retry.by??"daemon",max:s(e.kind).max,attempt:e.retry.attempt??0};return delete t.nextAt,{...e,retry:t}}o(D,"markFatalOnExhaust");export{D as markFatalOnExhaust,x as nextFaultRetry,s as policyFor};

package/dist/core/runtime/fault.d.ts

@@ -0,0 +1,6 @@
+export type { Fault, FaultKind, FaultLink, FaultProviderError, FaultRetry, FaultRetryDisposition, FaultRetryOwner, } from '../fault-classifier.js';
+export declare const FAULT_QUIET_MS: number;
+/** True when Pi could not resolve credentials for a provider. */
+export declare function isProviderUnconfiguredError(message: string): boolean;
+/** True when a provider reports that a requested model is unavailable. */
+export declare function isModelNotFoundError(message: string): boolean;

package/dist/core/runtime/fault.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var o=(e,t)=>r(e,"name",{value:t,configurable:!0});const i=3e5;function s(e){const t=e??"";return/provider is not configured\b/i.test(t)?!0:/credential store (?:read|modify) failed\b/i.test(t)}o(s,"isProviderUnconfiguredError");function u(e){const t=e??"";return/not_found_error/i.test(t)||/model[^.]{0,40}(not\s*found|does not exist|is not available|unavailable)|(no such|unknown) model/i.test(t)?!0:/\b404\b/.test(t)&&/not\s*found|not available|does not exist/i.test(t)}o(u,"isModelNotFoundError");export{i as FAULT_QUIET_MS,u as isModelNotFoundError,s as isProviderUnconfiguredError};

package/dist/core/runtime/first-run-offer.d.ts

@@ -0,0 +1,11 @@
+export declare const FIRST_RUN_OFFER_SENTENCE = "Want a quick tour of how this works? Say yes, or just tell me what you're working on.";
+/** The prompt the front door gives a freshly booted root, and whether the
+ * viewer should play the initial-whip animation (only for a prompt the user
+ * typed). */
+export declare function frontDoorBootPrompt(facts: {
+    offerTour: boolean;
+    userPrompt: string | undefined;
+}): {
+    prompt: string | undefined;
+    initialWhip: boolean;
+};

package/dist/core/runtime/first-run-offer.js

@@ -0,0 +1,5 @@
+var o=Object.defineProperty;var e=(t,r)=>o(t,"name",{value:r,configurable:!0});import{formatCard as n}from"../../shared/generated-context.js";const i="Want a quick tour of how this works? Say yes, or just tell me what you're working on.",s=n("first-run",{},`Open this conversation with exactly this sentence and nothing else:
+
+${i}
+
+If the user says yes, run \`crtr sys tutorial -h\`, pick the track it names, and teach it one lesson per invocation \u2014 in your own words, letting them try each thing before moving on. If the user says anything else, drop the tour entirely and do what they asked.`);function u(t){return t.userPrompt!==void 0&&t.userPrompt.trim()!==""?{prompt:t.userPrompt,initialWhip:!0}:t.offerTour?{prompt:s,initialWhip:!1}:{prompt:void 0,initialWhip:!1}}e(u,"frontDoorBootPrompt");export{i as FIRST_RUN_OFFER_SENTENCE,u as frontDoorBootPrompt};