@north-light/cli 0.0.0-stage → 0.3.413

package/dist/daemon/api/handlers/validate.js

@@ -0,0 +1 @@
+var f=Object.defineProperty;var i=(r,n)=>f(r,"name",{value:n,configurable:!0});import{ApiError as p}from"../../../api/index.js";import{isRecord as o}from"../../../shared/predicates.js";function a(r,n){throw new p(400,"invalid_request",`${r} is invalid`,{violations:n})}i(a,"invalidRequest");function l(r,n,t){if(!o(r))return t.push({field:"body",problem:"must be an object",received:r}),{};for(const e of Object.keys(r))n.includes(e)||t.push({field:e,problem:"is not allowed",received:r[e]});return r}i(l,"objectBody");function v(r,n,t){const e=r[n];if(typeof e!="string"||e.trim()===""){t.push({field:n,problem:"must be a non-empty string",...e===void 0?{}:{received:e}});return}return e}i(v,"requiredString");function b(r,n,t){const e=r[n];if(e!==void 0){if(typeof e!="string"||e.trim()===""){t.push({field:n,problem:"must be a non-empty string",received:e});return}return e}}i(b,"optionalString");function g(r,n,t,e,d){const u=r.params[n];if(u===void 0||!e(u)){d.push({field:n,problem:t,...u===void 0?{}:{received:u}});return}return u}i(g,"requireParam");export{a as invalidRequest,o as isRecord,l as objectBody,b as optionalString,g as requireParam,v as requiredString};

package/dist/daemon/api/handlers/vendor-status.d.ts

@@ -0,0 +1,8 @@
+export type VendorState = 'connected' | 'needs_reconnecting' | 'not_set_up';
+export interface VendorStatusAnswer {
+    vendors: {
+        anthropic: VendorState;
+        openai: VendorState;
+    };
+}
+export declare function vendorStatus(): VendorStatusAnswer;

package/dist/daemon/api/handlers/vendor-status.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var e=(t,n)=>u(t,"name",{value:n,configurable:!0});import{ANTHROPIC_PROVIDER_ID as c,OPENAI_CODEX_PROVIDER_ID as s}from"../../../core/subscription-state.js";import{managedStatus as i}from"./modelauth.js";function r(t){const n=i(t),o=n.managed?n.accounts:[];return o.length===0?"not_set_up":o.some(a=>a.auth_failure===void 0)?"connected":"needs_reconnecting"}e(r,"stateOf");function m(){return{vendors:{anthropic:r(c),openai:r(s)}}}e(m,"vendorStatus");export{m as vendorStatus};

package/dist/daemon/api/handlers/worktree.d.ts

@@ -0,0 +1,2 @@
+import { type RouteTable } from '../router.js';
+export declare const worktreeRoutes: RouteTable;

package/dist/daemon/api/handlers/worktree.js

@@ -0,0 +1 @@
+var s=Object.defineProperty;var a=(e,r)=>s(e,"name",{value:r,configurable:!0});import{closeManagedWorktreeAsync as i}from"../../../core/worktree-close.js";import{abandonManagedWorktreeAsync as d}from"../../../core/worktree-mutation-async.js";import{listQuarantinedManagedWorktrees as p}from"../../../core/worktree-quarantine.js";import{usage as m}from"../../../core/errors.js";import{directorySizeBytes as c}from"../../../core/disk-usage.js";import{appsRoot as n,userRoot as y}from"../../../core/layout.js";import{existsSync as u,readdirSync as h}from"node:fs";import{join as l}from"node:path";import{ownerOnly as f}from"../router.js";async function b(e){const r=e.params.id;return{status:200,body:await i(r)}}a(b,"handleWorktreeClose");async function w(e){const r=e.body?.by,o=typeof r=="string"?r.trim():"";if(o==="")throw m("abandon requires a non-empty invoking identity",{received:e.body,next:"Pass the invoking node id or human identity."});return{status:200,body:await d(e.params.id,o)}}a(w,"handleWorktreeAbandon");async function k(){return{status:200,body:await p()}}a(k,"handleQuarantinedWorktrees");async function g(){const e=u(n())?h(n(),{withFileTypes:!0}).filter(t=>t.isDirectory()).map(t=>t.name).sort():[],r=[{space:"user",path:y()},...e.map(t=>({space:`app:${t}`,path:l(n(),t)}))];return{status:200,body:{spaces:await Promise.all(r.map(async t=>({...t,size_bytes:await c(t.path)})))}}}a(g,"handleSpaces");const z=f([{method:"GET",pattern:"/v1/spaces",handler:g},{method:"POST",pattern:"/v1/nodes/:id/worktree/close",handler:b},{method:"POST",pattern:"/v1/nodes/:id/worktree/abandon",handler:w},{method:"GET",pattern:"/v1/worktrees/quarantined",handler:k}]);export{z as worktreeRoutes};

package/dist/daemon/api/long-poll-wait.d.ts

@@ -0,0 +1,3 @@
+import { type LongPollName } from '../../api/long-poll.js';
+/** Seconds to hold this long-poll (0: answer at once); a `wait` outside the route's range is 400 `invalid_request`. */
+export declare function waitSeconds(name: LongPollName, query: URLSearchParams): number;

package/dist/daemon/api/long-poll-wait.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var e=(t,n)=>m(t,"name",{value:n,configurable:!0});import{LONG_POLL_MAX_WAIT_SECONDS as a,LONG_POLL_ROUTES as s,requestedWait as u}from"../../api/long-poll.js";import{RunError as _}from"../../core/runs/operations.js";function O(t,n){const i=s.find(r=>r.name===t),o=u(i,n);if(o===null){const r="minWait"in i?i.minWait:0;throw new _(400,"invalid_request",`wait must be an integer from ${r} through ${a}`,"wait")}return o}e(O,"waitSeconds");export{O as waitSeconds};

package/dist/daemon/api/map.d.ts

@@ -0,0 +1,167 @@
+import type { ManagedWorktree, NodeMeta, NodeRow, NodeRuntime, SubscriptionRef } from '../../core/canvas/types.js';
+import type { ReviewComment, ReviewCommentEvent, ReviewErrorCode, ReviewRecord, ReviewResult } from '../../core/review/types.js';
+import { type Cron, type CronRunRecord } from '../../core/canvas/crons.js';
+import type { ProfileEntry } from '../../core/profiles/manifest.js';
+import type { ReviveResult } from '../../core/runtime/revive.js';
+import type { CloseNodeResult } from '../../core/runtime/close.js';
+import { type PushResult } from '../../core/feed/feed.js';
+import type { PageFeedback, PageFeedbackComment } from '../../core/human/feedback.js';
+import type { CanvasImportResult } from '../../migrations/activation.js';
+import type { CloseResultDTO, CronDTO, CronRunDTO, ErrorBody, NodeEdgesDTO, NodeOutcomeDTO, RunOutcomeDTO, NodeOutcomeSummaryDTO, NodePathsDTO, NodeStatusDTO, OutcomeDeliveryDTO, NodeSummaryDTO, NodeDetailDTO, NodeWorktreeDTO, ProfileDTO, ReviewCommentDTO, ReviewCommentEventDTO, ReviewDTO, FeedbackResultDTO, GraphNodeDTO, PageFeedbackCommentDTO, PageFeedbackDTO, PushReportResultDTO, ReviveResultDTO, MigrateStateDTO, SubscriptionDTO } from '../../api/index.js';
+export declare function toMigrateStateDTO(result: CanvasImportResult, options: {
+    resumed: boolean;
+    resumeError?: string;
+}): MigrateStateDTO;
+/** Project the list-row outcome, or null while this node remains unsettled. */
+export declare function toNodeOutcomeSummaryDTO(node: NodeRuntime): NodeOutcomeSummaryDTO | null;
+/** Project the full outcome, or null while this node remains unsettled. */
+export declare function toNodeOutcomeDTO(node: Pick<NodeMeta, 'node_id' | 'final_report' | 'grantee'> & NodeRuntime): NodeOutcomeDTO | null;
+export declare function toRunOutcomeDTO(node: Pick<NodeMeta, 'node_id' | 'final_report'> & NodeRuntime): RunOutcomeDTO | null;
+/** The outcome-delivery fields exposed by the API. The delivery store supplies this projection directly. */
+export interface OutcomeDeliveryDTOInput {
+    nodeId: string;
+    state: 'armed' | 'pending' | 'running' | 'accepted' | 'permanent_failed';
+    actionName: string;
+    attempt: number;
+    nextAttemptAt: number;
+    acceptedAt: number | null;
+    permanentFailedAt: number | null;
+    lastFailure: {
+        kind: 'exit' | 'signal' | 'timeout' | 'spawn_error';
+        exitCode?: number;
+        signal?: string;
+        message?: string;
+    } | null;
+    createdAt: number;
+    updatedAt: number;
+}
+/** Project a durable delivery row without exposing its execution coordinates or stderr tail. */
+export declare function toOutcomeDeliveryDTO(row: OutcomeDeliveryDTOInput): OutcomeDeliveryDTO;
+/** Project the queryable row (what `listNodes` yields) into a summary DTO. */
+export declare function toGraphNodeDTO(row: {
+    node_id: string;
+    name: string;
+    description: string | null;
+    cycles: number | null;
+    kind: string;
+    status: NodeStatusDTO;
+    frozen_at: string | null;
+    pi_pid: number | null;
+    telemetry_context_tokens: number | null;
+    telemetry_last_activity: string | null;
+    fault: NodeRow['fault'];
+    streaming: boolean;
+}): GraphNodeDTO;
+export declare function toNodeSummaryDTO(row: NodeRow, paused?: boolean): NodeSummaryDTO;
+/** The subscription/child edges a detail projection needs. The handler gathers
+ *  these from `subscriptionsOf`/`subscribersOf` + a children query and passes
+ *  them in, so this module stays a pure projection with no db reach. */
+export interface NodeEdgesInput {
+    /** Publishers this node subscribes to (`subscriptionsOf(id)`). */
+    subscribesTo: readonly SubscriptionRef[];
+    /** Subscribers to this node's output — its managers (`subscribersOf(id)`). */
+    subscribers: readonly SubscriptionRef[];
+    /** Node ids this node spawned (children). */
+    children: readonly string[];
+}
+/** Project a node's spine + subscription edges (absorbs `managers`/`paths`). */
+export declare function toNodeEdgesDTO(meta: NodeMeta, edges: NodeEdgesInput): NodeEdgesDTO;
+/** Absolute filesystem paths for a node (absorbs the `paths` read).
+ *  App assignment comes from the authoritative node row. */
+export declare function toNodePathsDTO(nodeId: string, grantee: string): NodePathsDTO;
+/** Project a node's managed git worktree, if any. */
+export declare function toNodeWorktreeDTO(w: ManagedWorktree): NodeWorktreeDTO;
+/** Project the hydrated node view (`getNode` → `NodeMeta`) into a detail DTO.
+ *  The summary fields come from the meta's runtime half (hydrated from the
+ *  authoritative row); the identity extras (description/cycles/session) come
+ *  from the meta's identity half. Edges are gathered by the handler. */
+export declare function toNodeDetailDTO(meta: NodeMeta, edges: NodeEdgesInput): NodeDetailDTO;
+/** Project a `reviveNode` result. `revived` is true only when a fresh launch
+ *  actually happened — the double-revive no-op (already-alive) returns without a
+ *  `launch` handle, so its absence is the "nothing relaunched" signal. `status`
+ *  is the caller's post-revive row read. */
+export declare function toReviveResultDTO(nodeId: string, result: ReviveResult, status: NodeStatusDTO): ReviveResultDTO;
+/** Project a `closeNode` cascade result. Field names align 1:1. */
+export declare function toCloseResultDTO(result: CloseNodeResult): CloseResultDTO;
+/** Project a feed `push` result into a push-report result. `transitioned` is
+ *  supplied by the handler only for a `final` push (the server-side lifecycle
+ *  flip); an update/urgent push omits it. */
+export declare function toReportResultDTO(result: PushResult, transitioned?: {
+    from: string;
+    to: string;
+}, autoDroppedWorktreePath?: string): PushReportResultDTO;
+/** Project a subscription ref as seen from one endpoint. */
+export declare function toSubscriptionDTO(ref: SubscriptionRef): SubscriptionDTO;
+/** Project a cron row into its DTO — a straight column projection minus the
+ *  internal lease plumbing (run_pid/run_lease_owner/env_json/last_output_hash/
+ *  queued stay server-side); the sink JSON is rendered back to its display
+ *  spec. `lastRun` is the most recent settled run — the recent health every
+ *  cron projection carries so `cron list` needs no `cron show` per row. */
+export declare function toCronDTO(c: Cron, lastRun?: CronRunRecord | null): CronDTO;
+/** Project one settled run-log record into its DTO — a straight projection
+ *  minus the redundant cron_id (the route already names the cron). */
+export declare function toCronRunDTO(r: CronRunRecord): CronRunDTO;
+/** Project a profile-manifest entry into its DTO. `default_dir` (the directory
+ *  this profile is pinned as default for) is a reverse lookup not carried on the
+ *  entry, so it is left null here — a caller that needs it resolves it
+ *  separately. Project entries are cloned: the manifest entry is shared cache
+ *  state, so handing out its objects would let a DTO consumer mutate it. */
+export declare function toProfileDTO(entry: ProfileEntry): ProfileDTO;
+/** Extra daemon-derived review fields whose source is outside the canonical row. */
+export interface ReviewDTOExtras {
+    /** Deterministic destination of an approved review's immutable result. */
+    result_path?: string;
+}
+/** Project the canonical review row without exposing fork/session/store coordinates. */
+export declare function toReviewDTO(row: ReviewRecord, extras?: ReviewDTOExtras): ReviewDTO;
+/** Project one daemon-owned comment, omitting absent node identities on human actions. */
+export declare function toReviewCommentDTO(comment: ReviewComment): ReviewCommentDTO;
+/** Project one ticket-attached page feedback comment. */
+export declare function toPageFeedbackCommentDTO(comment: PageFeedbackComment): PageFeedbackCommentDTO;
+/** Project one ticket's page feedback state. */
+export declare function toPageFeedbackDTO(feedback: PageFeedback): PageFeedbackDTO;
+/** Project one immutable review-comment audit event. */
+export declare function toReviewCommentEventDTO(event: ReviewCommentEvent): ReviewCommentEventDTO;
+/** Project the immutable snake_case review result to the existing camelCase feedback wire shape. */
+export declare function toFeedbackResultDTO(result: ReviewResult): FeedbackResultDTO;
+/** The only internal review-error to public HTTP projection. Every internal
+ * review failure is listed explicitly so handlers never need to invent a status
+ * or public code. */
+export declare const REVIEW_ERROR_MAP: Readonly<Record<ReviewErrorCode, {
+    status: number;
+    code: string;
+}>>;
+/** The single error-mapping function (spec §8). Projects any thrown value into
+ *  `{ status, code }`:
+ *   - a CrtrError → status by its `exitCode` class, `code` its machine code;
+ *   - a feed `FinalizationError` → 409 `already_finalized` /
+ *     `finalization_forbidden`, or 404 `node_not_found`;
+ *   - a `NodeIdConflictError` (a `--node-id`/`node_id` spawn at an id that
+ *     already exists) → 409 `node_id_exists`;
+ *   - a `WorktreeError` → its own code at 400 (404 for `unknown_node`), with
+ *     `next` + git `detail` preserved as CrtrError details;
+ *   - `reviveNode`'s finalization-latch throw → 409 `already_finalized`;
+ *   - an "unknown node" throw (reviveNode / transition / getNode-null handler) →
+ *     404 `node_not_found`;
+ *   - a `transition` illegal-move throw → 409 `illegal_transition`;
+ *   - anything already carrying a numeric `status` + string `code` (an
+ *     `ApiError`-shaped throw) → used verbatim;
+ *   - anything else → 500 `internal`.
+ *  The recognized plain-`Error` cases match on the throw sites' messages (the
+ *  only signal those sites carry); the source sites are named above so a message
+ *  change there is caught by the A-11 tests. */
+export declare function errorToStatus(thrown: unknown): {
+    status: number;
+    code: string;
+};
+/** Build the uniform JSON error body (spec §8) for a thrown value, using
+ *  `errorToStatus` for the status/code. Structured `details` are surfaced for a
+ *  CrtrError or ApiError (they let the client reconstruct the error verbatim). A 500 still
+ *  omits `details` for hygiene, but NO LONGER strips the message to a bare
+ *  `internal error`: it surfaces the bounded cause (`boundedCause`) so a caller
+ *  is never left with a causeless internal, while the router logs the full
+ *  error (with stack) server-side. */
+export declare function toErrorBody(thrown: unknown): {
+    status: number;
+    body: ErrorBody;
+};

package/dist/daemon/api/map.js

@@ -0,0 +1,2 @@
+var h=Object.defineProperty;var r=(e,t)=>h(e,"name",{value:t,configurable:!0});import{join as g}from"node:path";import{readOutputResult as b}from"../../core/runtime/structured-output.js";import{ReviewOperationError as _}from"../../core/review/types.js";import{cronSinkDisplay as y}from"../../core/canvas/crons.js";import{isProfilePaused as c,profileMemoryDir as x,sanitizeProfileMetadata as O}from"../../core/profiles/manifest.js";import{nodeMetaPath as D,transcriptPath as T,viewSocketPath as E}from"../../core/canvas/paths.js";import{appForNode as f,contextDir as S,nodeAgentDir as A}from"../../core/canvas/node-agent-paths.js";import{FinalizationError as R}from"../../core/feed/feed.js";import{NodeIdConflictError as z}from"../../core/runtime/nodes.js";import{ScopeDeniedError as N}from"../../core/scopes.js";import{isBeneathRefusal as C}from"../../core/spaces/open-beneath.js";import{CrtrError as s}from"../../core/errors.js";import{WorktreeError as j}from"../../core/worktree.js";import{ApiError as q}from"../../api/errors.js";import{RunError as l}from"../../core/runs/operations.js";import{ExitCode as o}from"../../types.js";function ce(e,t){const{report:n}=e;return{stores:n.stores.map(i=>({root:i.root,owner:{...i.owner},docs:i.docs,...i.skipped===void 0?{}:{skipped:i.skipped}})),counts:n.counts,rewrites:n.rewrites,dropped_fields:n.droppedFields,skipped:n.skipped,resolutions:n.resolutions.map(i=>({kind:i.kind,message:i.message,paths:i.paths})),blockers:e.blockers.map(i=>({kind:i.kind,message:i.message,paths:i.paths})),dryRun:e.dryRun,pending:e.pending,resumed:t.resumed,...t.resumeError===void 0?{}:{resume_error:t.resumeError}}}r(ce,"toMigrateStateDTO");function F(e,t){try{return b(e,t)??null}catch{return null}}r(F,"readStructuredResult");function I(e){return e.outcome_at===null||e.outcome_at===void 0||e.outcome_kind===null||e.outcome_kind===void 0||e.outcome_reason===null||e.outcome_reason===void 0?null:{kind:e.outcome_kind,reason:e.outcome_reason,settled_at:e.outcome_at}}r(I,"toNodeOutcomeSummaryDTO");function p(e){if(e.outcome_at===null||e.outcome_at===void 0||e.outcome_kind===null||e.outcome_kind===void 0||e.outcome_reason===null||e.outcome_reason===void 0)return null;let t=null;if(e.outcome_detail_json!==null&&e.outcome_detail_json!==void 0)try{t=JSON.parse(e.outcome_detail_json)}catch{t=null}const n=e.final_report??null,i={node_id:e.node_id,revision:e.outcome_revision??1,settled_at:e.outcome_at,final_report:n===null?null:`${e.node_id}/${n}`,structured_result:e.outcome_kind==="result"?F(e.node_id,e.grantee):null,detail:t};return e.outcome_kind==="result"?{...i,kind:"result",reason:e.outcome_reason,declined:null}:e.outcome_reason==="declined"?{...i,kind:"failure",reason:"declined",declined:t?.declined??null}:{...i,kind:"failure",reason:e.outcome_reason,declined:null}}r(p,"toNodeOutcomeDTO");function fe(e){const t=p(e);return t===null||t.reason==="parked"?null:t.kind==="result"||t.reason==="finished"?{...t,kind:"result",reason:"finalized",declined:null}:t.reason==="declined"?{...t,reason:"declined",details:t.declined}:t.reason==="deadline_exceeded"?{...t,reason:"deadline_exceeded",declined:null}:t.reason==="closed"||t.reason==="stranded"||t.reason==="retired"?{...t,reason:"canceled",declined:null}:{...t,reason:"runtime_error",declined:null,details:{crouter_reason:t.reason}}}r(fe,"toRunOutcomeDTO");function pe(e){const t=e.lastFailure;return{node_id:e.nodeId,state:e.state,action:e.actionName,attempt:e.attempt,next_attempt_at:e.nextAttemptAt===0?null:new Date(e.nextAttemptAt).toISOString(),accepted_at:e.acceptedAt===null?null:new Date(e.acceptedAt).toISOString(),permanent_failed_at:e.permanentFailedAt===null?null:new Date(e.permanentFailedAt).toISOString(),last_failure:t===null?null:{kind:t.kind,...t.exitCode===void 0?{}:{exit_code:t.exitCode},...t.signal===void 0?{}:{signal:t.signal},...t.message===void 0?{}:{message:t.message}},created_at:new Date(e.createdAt).toISOString(),updated_at:new Date(e.updatedAt).toISOString()}}r(pe,"toOutcomeDeliveryDTO");function me(e){return{node_id:e.node_id,name:e.name,description:e.description,cycles:e.cycles,kind:e.kind,status:e.status,frozen_at:e.frozen_at,pi_pid:e.pi_pid,telemetry_context_tokens:e.telemetry_context_tokens,telemetry_last_activity:e.telemetry_last_activity,fault:e.fault&&e.fault.link!=="broker\u2194crtrd"?{...e.fault,link:e.fault.link}:null,streaming:e.streaming}}r(me,"toGraphNodeDTO");function ve(e,t=c(e.profile_id)){return{node_id:e.node_id,name:e.name,description:e.description,cycles:e.cycles,kind:e.kind,mode:e.mode,lifecycle:e.lifecycle,status:e.status,cwd:e.cwd,host_kind:e.host_kind,profile_id:e.profile_id,scopes:e.scopes,isolated:e.isolated,grantee:e.grantee??f(e.node_id),profile_paused:t,parent:e.parent,created:e.created,intent:e.intent,waiting_for:e.waiting_for,frozen_at:e.frozen_at??null,terminal_reason:e.terminal_reason??null,pi_pid:e.pi_pid,pi_pid_identity:e.pi_pid_identity,window:e.window,tmux_session:e.tmux_session,pane:e.pane,final_report:e.final_report??null,finalized_at:e.finalized_at??null,deadline_at:e.deadline_at??null,telemetry_tokens_in:e.telemetry_tokens_in??null,telemetry_context_tokens:e.telemetry_context_tokens??null,telemetry_last_activity:e.telemetry_last_activity??null,telemetry_updated_at:e.telemetry_updated_at??null,outcome:I(e),fault:e.fault&&e.fault.link!=="broker\u2194crtrd"?{...e.fault,link:e.fault.link}:null,streaming:e.streaming??!1}}r(ve,"toNodeSummaryDTO");function P(e,t){return{parent:e.parent??null,spawned_by:e.spawned_by??null,subscribes_to:t.subscribesTo.map(n=>n.node_id),subscribers:t.subscribers.map(n=>n.node_id),children:[...t.children]}}r(P,"toNodeEdgesDTO");function M(e,t){return{node_dir:A(e,t),context_dir:S(e,t),meta_path:D(e),transcript_path:T(e),view_socket:E(e)}}r(M,"toNodePathsDTO");function U(e){const t={state:e.state,path:e.path,branch:e.branch,repo_root:e.repo_root,base_ref:e.base_ref,base_sha:e.base_sha,created:e.created};return e.cleanup!==void 0&&(t.cleanup=e.cleanup),e.closed!==void 0&&(t.closed=e.closed),e.abandoned!==void 0&&(t.abandoned={...e.abandoned}),t}r(U,"toNodeWorktreeDTO");function ke(e,t){const n=f(e.node_id),i={node_id:e.node_id,name:e.name,kind:e.kind,mode:e.mode,lifecycle:e.lifecycle,status:e.status,cwd:e.cwd,host_kind:e.host_kind??null,profile_id:e.profile_id??null,scopes:e.scopes??null,isolated:e.isolated===!0,grantee:n,profile_paused:c(e.profile_id),parent:e.parent??null,created:e.created,intent:e.intent??null,waiting_for:e.waiting_for??null,frozen_at:e.frozen_at??null,terminal_reason:e.terminal_reason??null,pi_pid:e.pi_pid??null,pi_pid_identity:e.pi_pid_identity??null,window:e.window??null,tmux_session:e.tmux_session??null,pane:e.pane??null,final_report:e.final_report??null,finalized_at:e.finalized_at??null,deadline_at:e.deadline_at??null,telemetry_tokens_in:e.telemetry_tokens_in??null,telemetry_context_tokens:e.telemetry_context_tokens??null,telemetry_last_activity:e.telemetry_last_activity??null,telemetry_updated_at:e.telemetry_updated_at??null,outcome:p(e),fault:e.fault&&e.fault.link!=="broker\u2194crtrd"?{...e.fault,link:e.fault.link}:null,streaming:e.streaming??!1,creator:e.creator??null,edges:P(e,t),paths:M(e.node_id,n)};return e.description!==void 0&&(i.description=e.description),e.title!==void 0&&(i.title=e.title),e.icon!==void 0&&(i.icon=e.icon),e.cycles!==void 0&&(i.cycles=e.cycles),i.context_tokens=e.telemetry_context_tokens??e.telemetry_tokens_in??null,e.pi_session_id!==void 0&&(i.pi_session_id=e.pi_session_id??null),i.model_override=e.model_override??null,e.pi_session_file!==void 0&&(i.pi_session_file=e.pi_session_file??null),e.review_binding!==void 0&&(i.review_binding=e.review_binding===null?null:{...e.review_binding.kind===void 0?{}:{kind:e.review_binding.kind},review_id:e.review_binding.review_id,origin_node_id:e.review_binding.origin_node_id,branch_file:e.review_binding.branch_file,target_file:e.review_binding.target_file}),e.managed_worktree!=null&&(i.worktree=U(e.managed_worktree)),i}r(ke,"toNodeDetailDTO");function he(e,t,n){return{node_id:e,revived:t.launch!==void 0,resumed:t.resumed,status:n,outcome:t.outcome}}r(he,"toReviveResultDTO");function ge(e){return{root:e.root,closed:[...e.closed],spared:[...e.spared]}}r(ge,"toCloseResultDTO");function be(e,t,n){const i={report:e.report,notified:[...e.deliveredTo]};return t!==void 0&&(i.transitioned=t),n!==void 0&&(i.worktree_auto_dropped=!0,i.worktree_auto_dropped_path=n),i}r(be,"toReportResultDTO");function ye(e){return{node_id:e.node_id,active:e.active,created:e.created}}r(ye,"toSubscriptionDTO");function G(e){if(e===null||e==="")return[];try{const t=JSON.parse(e);return typeof t=="object"&&t!==null&&!Array.isArray(t)?Object.keys(t):[]}catch{return[]}}r(G,"envKeys");function xe(e,t){return{cron_id:e.cron_id,name:e.name,created_by:e.created_by,command:e.command,isolated:e.isolated,fire_at:e.fire_at,recur:e.recur,tz:e.tz,expires_at:e.expires_at,anchor_node:e.anchor_node,cancel_on_wake:e.cancel_on_wake,cwd:e.cwd,profile:e.profile,scope:e.scope,env_keys:G(e.env_json),run_timeout_s:e.run_timeout_s,overlap:e.overlap,on_output:e.on_output,sink:y(e.sink),tier:e.tier,state:e.state,held:e.held,run_state:e.run_state,last_run:t==null?null:{finished:t.finished,exit_code:t.exit_code,delivered:t.delivered},created:e.created,updated:e.updated}}r(xe,"toCronDTO");function Oe(e){return{run_id:e.run_id,started:e.started,finished:e.finished,duration_ms:e.duration_ms,exit_code:e.exit_code,stdout_head:e.stdout_head,stderr_head:e.stderr_head,delivered:e.delivered}}r(Oe,"toCronRunDTO");function De(e){return{id:e.profileId,app:e.manifest.grantee??"app:terminal",name:e.manifest.name,projects:e.manifest.projects.map(t=>({...t})),delivery_limits:{...e.manifest.delivery_limits},paused_at:e.manifest.paused_at,default_kind:e.manifest.default_kind??"general",metadata:O(e.manifest.metadata),default_dir:null,created_at:e.manifest.created_at,last_used_at:e.manifest.last_used_at,memory_path:x(e.profileId)}}r(De,"toProfileDTO");function m(e,t={}){const n={review_id:e.review_id,origin_kind:e.origin_kind,origin_node_id:e.origin_node_id,review_dir:e.review_dir,companion_node_id:e.companion_node_id,file:e.file,state:e.state,created:e.created,source_missing:e.source_missing,anchor_base_sha256:e.anchor_base_sha256};return e.document_name!==null&&(n.document=e.document_name),e.opened_at!==null&&(n.opened_at=e.opened_at),e.submit_requested_at!==null&&(n.submit_requested_at=e.submit_requested_at),e.approved_at!==null&&(n.approved_at=e.approved_at),e.changed!==null&&(n.changed=e.changed),e.comments_total!==null&&(n.comments_total=e.comments_total),e.comments_unresolved!==null&&(n.comments_unresolved=e.comments_unresolved),e.canceled_at!==null&&(n.canceled_at=e.canceled_at),e.cancel_reason!==null&&(n.cancel_reason=e.cancel_reason),e.cancel_actor!==null&&(n.cancel_actor=e.cancel_actor),t.result_path!==void 0&&(n.result_path=t.result_path),e.delivery_error!==null&&(n.delivery_error=e.delivery_error),e.projection_error!==null&&(n.projection_error=e.projection_error),n}r(m,"toReviewDTO");function Te(e){return{comment_id:e.comment_id,review_id:e.review_id,status:e.status,revision:e.revision,text:e.text,anchor:{...e.anchor},anchor_state:e.anchor_state,anchor_line_text:e.anchor_line_text,anchor_doc_hash:e.anchor_doc_hash,author:{kind:e.author.kind,...e.author.node_id===null?{}:{node_id:e.author.node_id}},updated_by:{kind:e.updated_by.kind,...e.updated_by.node_id===null?{}:{node_id:e.updated_by.node_id}},created_at:e.created_at,updated_at:e.updated_at,...e.resolved_at===null?{}:{resolved_at:e.resolved_at},...e.deleted_at===null?{}:{deleted_at:e.deleted_at},created_seq:e.created_seq}}r(Te,"toReviewCommentDTO");function B(e){return{id:e.id,quote:e.quote,...e.context===void 0?{}:{context:e.context},note:e.note,status:e.status,created_at:e.createdAt,...e.resolvedAt===void 0?{}:{resolved_at:e.resolvedAt}}}r(B,"toPageFeedbackCommentDTO");function Ee(e){return{companion_node_id:e.companionNodeId??null,open_count:e.comments.filter(t=>t.status==="open").length,comments:e.comments.map(B)}}r(Ee,"toPageFeedbackDTO");function Se(e){return{seq:e.seq,review_id:e.review_id,comment_id:e.comment_id,kind:e.kind,state_change:e.state_change===1,revision_after:e.revision_after,actor:{kind:e.actor.kind,...e.actor.node_id===null?{}:{node_id:e.actor.node_id}},at:e.at,operation_id:e.operation_id,...e.payload===void 0?{}:{payload:e.payload}}}r(Se,"toReviewCommentEventDTO");function Ae(e){return{file:e.file,submitted:e.submitted,approved:e.approved,comments:e.comments.map(n=>({...n})),submittedAt:e.submittedAt,savedAt:e.savedAt,reviewId:e.review_id,changed:e.changed,baselineSha256:e.baseline_sha256,approvedSha256:e.approved_sha256,companionNodeId:e.companion_node_id,commentsTotal:e.comments_total,commentsUnresolved:e.comments_unresolved}}r(Ae,"toFeedbackResultDTO");const L=!0,W=Object.freeze({review_origin_missing:{status:400,code:"review_origin_unavailable"},review_origin_unforkable:{status:400,code:"review_origin_unavailable"},review_branch_unavailable:{status:409,code:"review_branch_unavailable"},branch_lost:{status:409,code:"review_branch_unavailable"},review_companion_unbound:{status:409,code:"review_companion_unbound"},review_bridge_unsubscribed:{status:409,code:"review_bridge_unavailable"},review_target_unreviewable:{status:400,code:"review_file_unreadable"},source_unreadable:{status:409,code:"review_source_unreadable"},delivery_unroutable:{status:409,code:"review_delivery_unroutable"},unknown_review:{status:404,code:"unknown_review"},review_terminal:{status:409,code:"review_terminal_conflict"},review_required:{status:400,code:"review_required"},stale_document:{status:409,code:"stale_document"},stale_revision:{status:409,code:"stale_revision"},unknown_comment:{status:404,code:"unknown_comment"},comment_deleted:{status:409,code:"comment_deleted"},invalid_anchor:{status:400,code:"invalid_anchor"},anchor_out_of_range:{status:400,code:"anchor_out_of_range"},text_too_long:{status:400,code:"text_too_long"},comment_limit_reached:{status:409,code:"comment_limit_reached"},stale_comment:{status:409,code:"stale_comment"},range_batch_incomplete:{status:409,code:"range_batch_incomplete"},range_batch_stale:{status:409,code:"range_batch_stale"}});function $(e){const t=v(e);if(typeof t=="object"&&t!==null&&typeof t.status=="number"&&typeof t.code=="string")return{status:t.status,code:t.code};if(t instanceof R)return t.code==="unknown_node"?{status:404,code:"node_not_found"}:t.code==="already_finalized"?{status:409,code:"already_finalized"}:{status:409,code:"finalization_forbidden"};if(t instanceof z)return{status:409,code:"node_id_exists"};if(t instanceof N)return{status:403,code:"scope_denied"};if(C(t))return{status:400,code:"invalid_request"};if(t instanceof _)return W[t.code];if(t instanceof s)return["kind_owned","name_taken","hop_limit","not_a_queue"].includes(t.code)?{status:409,code:t.code}:t.code==="invalid_publish_token"?{status:401,code:t.code}:t.code==="forbidden"||t.code==="argv_forbidden"?{status:403,code:t.code}:{status:H(t.exitCode),code:t.code};if(t instanceof Error){const n=t.message;if(/unknown node/i.test(n))return{status:404,code:"node_not_found"};if(/finalization latch/i.test(n))return{status:409,code:"already_finalized"};if(/illegal lifecycle transition/i.test(n))return{status:409,code:"illegal_transition"}}return{status:500,code:"internal"}}r($,"errorToStatus");function v(e){if(!(e instanceof j))return e;const t=e.code==="unknown_node"?o.NOT_FOUND:o.GENERAL,n={error:e.code,message:e.message,next:e.next};return e.detail!==void 0&&(n.received=e.detail),new s(e.code,e.message,t,n)}r(v,"normalizeThrow");function K(e){if(e.code!=="review_terminal")return e.detail;const{review:t,...n}=e.detail;return{...n,review:V(t)}}r(K,"reviewErrorDetails");function V(e){return e.state!=="approved"?m(e):m(e,{result_path:g(e.review_dir,"result.json")})}r(V,"terminalConflictReviewDTO");function H(e){switch(e){case o.NOT_FOUND:return 404;case o.USAGE:return 400;case o.AMBIGUOUS:return 400;case o.NETWORK:return 503;case o.GENERAL:return 400;default:return 500}}r(H,"statusForExitCode");function J(e){const n=(e instanceof Error?e.message:String(e)).split(`
+`,1)[0].trim();return n===""?"internal error":n.length>500?`${n.slice(0,497)}\u2026`:n}r(J,"boundedCause");function Re(e){const t=v(e),{status:n,code:i}=$(t);if(n>=500){const a={error:{code:i,message:J(t)}};return t instanceof l&&(a.error.origin="runtime",a.error.retryable=t.retryable),{status:n,body:a}}const k=t instanceof Error?t.message:String(t),u=t instanceof _?K(t):(t instanceof s||t instanceof q||t instanceof l)&&t.details!==void 0?t.details:void 0,d={error:{code:i,message:k}};return u!==void 0&&(d.error.details=u),t instanceof l&&(t.param&&(d.error.param=t.param),t.scope&&(d.error.scope=t.scope),d.error.origin="runtime",d.error.retryable=t.retryable),{status:n,body:d}}r(Re,"toErrorBody");export{W as REVIEW_ERROR_MAP,$ as errorToStatus,ge as toCloseResultDTO,xe as toCronDTO,Oe as toCronRunDTO,Re as toErrorBody,Ae as toFeedbackResultDTO,me as toGraphNodeDTO,ce as toMigrateStateDTO,ke as toNodeDetailDTO,P as toNodeEdgesDTO,p as toNodeOutcomeDTO,I as toNodeOutcomeSummaryDTO,M as toNodePathsDTO,ve as toNodeSummaryDTO,U as toNodeWorktreeDTO,pe as toOutcomeDeliveryDTO,B as toPageFeedbackCommentDTO,Ee as toPageFeedbackDTO,De as toProfileDTO,be as toReportResultDTO,Te as toReviewCommentDTO,Se as toReviewCommentEventDTO,m as toReviewDTO,he as toReviveResultDTO,fe as toRunOutcomeDTO,ye as toSubscriptionDTO};

package/dist/daemon/api/operations.d.ts

@@ -0,0 +1,18 @@
+import type { Scope } from '@north-light/identity';
+export type CallerClass = 'anonymous' | 'person' | 'app' | 'broker' | 'directory';
+export type ResourceRule = 'none' | 'node-read' | 'node-write' | 'node-own' | 'nodes-list' | 'canvas-read' | 'cron' | 'profile' | 'human' | 'run' | 'daemon-bash' | 'objects';
+export interface Operation {
+    name: string;
+    method: string;
+    path: string;
+    classes: readonly CallerClass[];
+    scope?: Scope;
+    resource: ResourceRule;
+    stage?: string;
+    idempotency?: string;
+    /** How the response is sent: `true` server-sent run events; `'bytes'` a file's raw bytes (`Range` → 206). */
+    stream?: true | 'bytes';
+}
+export type AppOperation = Operation;
+export declare const OPERATIONS: readonly Operation[];
+export declare function operationFor(method: string, path: string): Operation | undefined;

package/dist/daemon/api/operations.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var r=(e,s)=>a(e,"name",{value:s,configurable:!0});const n=[{name:"health",method:"GET",path:"/v1/health",classes:["anonymous"],resource:"none",stage:"v0.5"},{name:"chat-inventory.get.1",method:"GET",path:"/v1/nodes/:id/chat-inventory",classes:["person","broker"],resource:"node-read"},{name:"model-config.put.2",method:"PUT",path:"/v1/model-config",classes:["person","broker"],resource:"none"},{name:"files.get.3",method:"GET",path:"/v1/files/peek",classes:["person","broker"],resource:"none"},{name:"files.post.4",method:"POST",path:"/v1/files/write",classes:["person","broker"],resource:"none"},{name:"files.get.5",method:"GET",path:"/v1/files/list",classes:["person","broker"],resource:"none"},{name:"reviews.post.6",method:"POST",path:"/v1/human/reviews",classes:["person","broker"],resource:"human",scope:"crtr:act"},{name:"reviews.get.7",method:"GET",path:"/v1/human/reviews",classes:["person","broker"],resource:"human"},{name:"reviews.get.8",method:"GET",path:"/v1/human/reviews/:review_id",classes:["person","broker"],resource:"human"},{name:"reviews.post.9",method:"POST",path:"/v1/human/reviews/:review_id/submit",classes:["person","broker"],resource:"human"},{name:"reviews.post.10",method:"POST",path:"/v1/human/reviews/:review_id/cancel",classes:["person","broker"],resource:"human"},{name:"reviews.get.11",method:"GET",path:"/v1/human/reviews/:review_id/document",classes:["person","broker"],resource:"human"},{name:"feedback-comments.post.12",method:"POST",path:"/v1/human/inbox/:ticket_id/feedback-comments",classes:["person","broker"],resource:"human"},{name:"feedback-comments.post.13",method:"POST",path:"/v1/human/inbox/:ticket_id/feedback-comments/:comment_id/resolve",classes:["person","broker"],resource:"human"},{name:"node.log.append",method:"POST",path:"/v1/nodes/:id/records/log",classes:["person","broker"],resource:"node-own"},{name:"node.telemetry.put",method:"PUT",path:"/v1/nodes/:id/records/telemetry",classes:["person","broker"],resource:"node-own"},{name:"node.recap.put",method:"PUT",path:"/v1/nodes/:id/records/recap",classes:["person","broker"],resource:"node-own"},{name:"node.inbox.read",method:"GET",path:"/v1/nodes/:id/records/inbox",classes:["person","broker"],resource:"node-own"},{name:"node.passive.read",method:"GET",path:"/v1/nodes/:id/records/passive",classes:["person","broker"],resource:"node-own"},{name:"node.pushed-final",method:"POST",path:"/v1/nodes/:id/records/pushed-final",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.14",method:"POST",path:"/v1/nodes/:id/broker/session-bound",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.15",method:"POST",path:"/v1/nodes/:id/broker/settle",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.16",method:"POST",path:"/v1/nodes/:id/broker/park-complete",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.17",method:"POST",path:"/v1/nodes/:id/broker/park-activity",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.18",method:"POST",path:"/v1/nodes/:id/broker/telemetry",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.19",method:"POST",path:"/v1/nodes/:id/broker/model",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.get.20",method:"GET",path:"/v1/nodes/:id/broker/extension-state",classes:["person","broker"],resource:"node-own"},{name:"broker.signals",method:"GET",path:"/v1/nodes/:id/broker/signals",classes:["broker"],resource:"node-own",stream:!0},{name:"broker-ops.post.21",method:"POST",path:"/v1/nodes/:id/broker/generated-name",classes:["person","broker"],resource:"node-own"},{name:"broker-ops.post.22",method:"POST",path:"/v1/nodes/:id/broker/persona-ack",classes:["person","broker"],resource:"node-own"},{name:"objects.read",method:"GET",path:"/v1/objects/:ref",classes:["person","app","broker"],resource:"objects"},{name:"objects.list",method:"GET",path:"/v1/objects",classes:["person","app","broker"],resource:"objects"},{name:"objects.search",method:"POST",path:"/v1/objects/search",classes:["person","app","broker"],resource:"objects"},{name:"objects.watch",method:"POST",path:"/v1/objects/:ref/watch",classes:["anonymous","person","app","broker"],resource:"objects"},{name:"objects.unwatch",method:"DELETE",path:"/v1/objects/:ref/watch",classes:["anonymous","person","app","broker"],resource:"objects"},{name:"custom-objects.register",method:"POST",path:"/v1/custom-objects",classes:["person","app","broker"],resource:"objects"},{name:"custom-objects.publish",method:"POST",path:"/v1/custom-objects/:ref/events",classes:["anonymous","person","app","broker"],resource:"objects"},{name:"custom-objects.unregister",method:"DELETE",path:"/v1/custom-objects/:ref",classes:["anonymous","person","app","broker"],resource:"objects"},{name:"custom-objects.receive",method:"GET",path:"/v1/custom-objects/:ref/deliveries",classes:["anonymous","person","app","broker"],resource:"objects",stream:!0},{name:"custom-objects.ack",method:"POST",path:"/v1/custom-objects/:ref/deliveries/ack",classes:["anonymous","person","app","broker"],resource:"objects"},{name:"objects.edges",method:"GET",path:"/v1/objects/:ref/edges",classes:["person","app","broker"],resource:"objects"},{name:"docs.write",method:"POST",path:"/v1/docs",classes:["person","app","broker"],resource:"objects"},{name:"docs.edit",method:"PATCH",path:"/v1/docs/:ref",classes:["person","app","broker"],resource:"objects"},{name:"docs.move",method:"POST",path:"/v1/docs/:ref/move",classes:["person","app","broker"],resource:"objects"},{name:"docs.delete",method:"DELETE",path:"/v1/docs/:ref",classes:["person","app","broker"],resource:"objects"},{name:"docs.history",method:"GET",path:"/v1/docs/:ref/history",classes:["person","app","broker"],resource:"objects"},{name:"docs.lint",method:"POST",path:"/v1/docs/lint",classes:["person","app","broker"],resource:"objects"},{name:"documents.reconcile-packages",method:"POST",path:"/v1/documents/reconcile-packages",classes:["person","broker"],resource:"none"},{name:"nodes.delivery",method:"POST",path:"/v1/nodes/:id/delivery",classes:["person","broker"],resource:"node-own"},{name:"delivery.dry-run",method:"POST",path:"/v1/delivery/dry-run",classes:["person","broker"],resource:"none"},{name:"bash-jobs.background",method:"POST",path:"/v1/nodes/:id/jobs/:jobId/background",classes:["broker"],resource:"node-own",scope:"crtr:act"},{name:"health.get.33",method:"GET",path:"/healthz",classes:["anonymous"],resource:"none"},{name:"health.get.34",method:"GET",path:"/v1/status",classes:["person","broker"],resource:"none"},{name:"daemon.due",method:"GET",path:"/v1/due",classes:["person","broker"],resource:"none"},{name:"bash-jobs.start",method:"POST",path:"/v1/nodes/:id/jobs/start",classes:["broker"],resource:"node-own",scope:"crtr:act"},{name:"hooks.plan",method:"GET",path:"/v1/nodes/:id/hooks/plan",classes:["broker"],resource:"node-own"},{name:"hooks.exec",method:"POST",path:"/v1/nodes/:id/hooks/exec",classes:["broker"],resource:"node-own"},{name:"hooks.exec.person",method:"POST",path:"/v1/hooks/exec",classes:["person","broker"],resource:"none"},{name:"bash-jobs.get.35",method:"GET",path:"/v1/nodes/:id/jobs",classes:["person","broker"],resource:"node-read"},{name:"bash-jobs.delete.36",method:"DELETE",path:"/v1/nodes/:id/jobs/:jobId",classes:["person","broker"],resource:"node-write"},{name:"prospective-chat-inventory.get.37",method:"GET",path:"/v1/prospective-chat-inventory",classes:["person","broker"],resource:"none"},{name:"node-events.get.38",method:"GET",path:"/v1/nodes/:id/events",classes:["person","broker"],resource:"node-read"},{name:"bash.post.39",method:"POST",path:"/v1/bash",classes:["person","broker"],resource:"daemon-bash",scope:"crtr:act"},{name:"subscriptions.post.40",method:"POST",path:"/v1/nodes/:id/subscriptions",classes:["person","broker"],resource:"node-write"},{name:"subscriptions.delete.41",method:"DELETE",path:"/v1/nodes/:id/subscriptions/:target",classes:["person","broker"],resource:"node-write"},{name:"attach.post.42",method:"POST",path:"/v1/nodes/:id/attach",classes:["person","broker"],resource:"node-write"},{name:"review-comments.post.44",method:"POST",path:"/v1/human/reviews/self/comments",classes:["person","broker"],resource:"human"},{name:"review-comments.get.45",method:"GET",path:"/v1/human/reviews/self/comments",classes:["person","broker"],resource:"human"},{name:"review-comments.post.46",method:"POST",path:"/v1/human/reviews/:review_id/comments",classes:["person","broker"],resource:"human"},{name:"review-comments.get.47",method:"GET",path:"/v1/human/reviews/:review_id/comments",classes:["person","broker"],resource:"human"},{name:"review-comments.get.48",method:"GET",path:"/v1/human/reviews/:review_id/comment-events",classes:["person","broker"],resource:"human"},{name:"review-comments.post.49",method:"POST",path:"/v1/human/reviews/:review_id/comment-ranges",classes:["person","broker"],resource:"human"},{name:"review-comments.get.50",method:"GET",path:"/v1/human/comments/:comment_id",classes:["person","broker"],resource:"human"},{name:"review-comments.post.51",method:"POST",path:"/v1/human/comments/:comment_id/edit",classes:["person","broker"],resource:"human"},{name:"review-comments.post.52",method:"POST",path:"/v1/human/comments/:comment_id/resolve",classes:["person","broker"],resource:"human"},{name:"review-comments.post.53",method:"POST",path:"/v1/human/comments/:comment_id/reopen",classes:["person","broker"],resource:"human"},{name:"review-comments.post.54",method:"POST",path:"/v1/human/comments/:comment_id/delete",classes:["person","broker"],resource:"human"},{name:"review-comments.post.55",method:"POST",path:"/v1/human/comments/:comment_id/fork",classes:["person","broker"],resource:"human"},{name:"messages.post.56",method:"POST",path:"/v1/nodes/:id/mail/claim",classes:["person","broker"],resource:"node-own"},{name:"messages.post.57",method:"POST",path:"/v1/nodes/:id/mail/acknowledge",classes:["person","broker"],resource:"node-own"},{name:"messages.post.58",method:"POST",path:"/v1/nodes/:id/messages",classes:["person","broker"],resource:"node-write"},{name:"messages.post.59",method:"POST",path:"/v1/nodes/:id/interrupt",classes:["person","broker"],resource:"node-write"},{name:"reports.post.60",method:"POST",path:"/v1/nodes/:id/reports",classes:["person","broker"],resource:"node-own"},{name:"reports.get.61",method:"GET",path:"/v1/nodes/:id/reports",classes:["person","broker"],resource:"node-read"},{name:"reports.post.62",method:"POST",path:"/v1/nodes/:id/result",classes:["person","broker"],resource:"node-own"},{name:"inbox.get.63",method:"GET",path:"/v1/human/inbox",classes:["person","broker"],resource:"human"},{name:"inbox.get.64",method:"GET",path:"/v1/human/inbox/history",classes:["person","broker"],resource:"human"},{name:"inbox.get.65",method:"GET",path:"/v1/human/inbox/:ticket_id",classes:["person","broker"],resource:"human"},{name:"inbox.get.66",method:"GET",path:"/v1/human/inbox/:ticket_id/response",classes:["person","broker"],resource:"human"},{name:"inbox.post.67",method:"POST",path:"/v1/human/inbox/:ticket_id/respond",classes:["person","broker"],resource:"human"},{name:"inbox.post.68",method:"POST",path:"/v1/human/inbox/:ticket_id/progress",classes:["person","broker"],resource:"human"},{name:"inbox.post.69",method:"POST",path:"/v1/human/inbox/:ticket_id/cancel",classes:["person","broker"],resource:"human"},{name:"worktree.post.70",method:"POST",path:"/v1/nodes/:id/worktree/close",classes:["person","broker"],resource:"node-write"},{name:"worktree.post.71",method:"POST",path:"/v1/nodes/:id/worktree/abandon",classes:["person","broker"],resource:"node-write"},{name:"worktree.get.72",method:"GET",path:"/v1/worktrees/quarantined",classes:["person","broker"],resource:"none"},{name:"crons.post.73",method:"POST",path:"/v1/crons",classes:["person","app","broker"],resource:"cron",scope:"crtr:schedule"},{name:"crons.get.74",method:"GET",path:"/v1/crons",classes:["person","app","broker"],resource:"cron"},{name:"crons.get.75",method:"GET",path:"/v1/crons/:cronId",classes:["person","app","broker"],resource:"cron"},{name:"crons.post.76",method:"POST",path:"/v1/crons/:cronId/pause",classes:["person","app","broker"],resource:"cron",scope:"crtr:schedule"},{name:"crons.post.77",method:"POST",path:"/v1/crons/:cronId/resume",classes:["person","app","broker"],resource:"cron",scope:"crtr:schedule"},{name:"crons.post.78",method:"POST",path:"/v1/crons/poke",classes:["person","app","broker"],resource:"cron",scope:"crtr:schedule"},{name:"crons.post.79",method:"POST",path:"/v1/crons/:cronId/run",classes:["person","app","broker"],resource:"cron",scope:"crtr:schedule"},{name:"crons.delete.80",method:"DELETE",path:"/v1/crons/:cronId",classes:["person","app","broker"],resource:"cron",scope:"crtr:schedule"},{name:"modelauth.get.81",method:"GET",path:"/v1/model-auth",classes:["person","broker"],resource:"none"},{name:"modelauth.get.82",method:"GET",path:"/v1/model-auth/readiness",classes:["person","broker"],resource:"none"},{name:"modelauth.put.83",method:"PUT",path:"/v1/model-auth/:provider",classes:["person","broker"],resource:"none"},{name:"modelauth.delete.84",method:"DELETE",path:"/v1/model-auth/:provider",classes:["person","broker"],resource:"none"},{name:"model_auth.start",method:"POST",path:"/v1/model-auth/flows",classes:["person","broker"],resource:"none"},{name:"model_auth.complete",method:"POST",path:"/v1/model-auth/flows/:flow_id/complete",classes:["person","broker"],resource:"none"},{name:"model_auth.cancel",method:"POST",path:"/v1/model-auth/flows/:flow_id/cancel",classes:["person","broker"],resource:"none"},{name:"model_auth.get",method:"GET",path:"/v1/model-auth/flows/:flow_id",classes:["person","broker"],resource:"none"},{name:"nodes.post.85",method:"POST",path:"/v1/nodes",classes:["person","broker"],resource:"node-own",scope:"crtr:act"},{name:"nodes.get.86",method:"GET",path:"/v1/nodes",classes:["person","broker"],resource:"nodes-list"},{name:"nodes.post.87",method:"POST",path:"/v1/nodes/revive-all",classes:["person","broker"],resource:"none"},{name:"nodes.get.88",method:"GET",path:"/v1/nodes/:id",classes:["person","broker"],resource:"node-read"},{name:"nodes.get.89",method:"GET",path:"/v1/nodes/:id/snapshot",classes:["person","broker"],resource:"node-read"},{name:"nodes.get.90",method:"GET",path:"/v1/nodes/:id/subject",classes:["person","broker"],resource:"node-read"},{name:"nodes.get.91",method:"GET",path:"/v1/nodes/:id/messages",classes:["person","broker"],resource:"node-read"},{name:"nodes.get.92",method:"GET",path:"/v1/nodes/:id/session",classes:["person","broker"],resource:"node-read"},{name:"nodes.get.93",method:"GET",path:"/v1/nodes/:id/transcript",classes:["person","broker"],resource:"node-read"},{name:"nodes.get.94",method:"GET",path:"/v1/nodes/:id/context",classes:["person","broker"],resource:"node-read"},{name:"nodes.post.96",method:"POST",path:"/v1/nodes/:id/fork",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.97",method:"POST",path:"/v1/nodes/:id/revive",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.98",method:"POST",path:"/v1/nodes/:id/relaunch-root",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.99",method:"POST",path:"/v1/nodes/:id/close",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.100",method:"POST",path:"/v1/nodes/:id/recycle",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.101",method:"POST",path:"/v1/nodes/:id/demote",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.102",method:"POST",path:"/v1/nodes/:id/promote",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.103",method:"POST",path:"/v1/nodes/:id/yield",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.post.104",method:"POST",path:"/v1/nodes/:id/wait",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"nodes.patch.105",method:"PATCH",path:"/v1/nodes/:id/config",classes:["person","broker"],resource:"node-write",scope:"crtr:act"},{name:"broker-recovery.post.106",method:"POST",path:"/v1/broker/:id/turn",classes:["person","broker"],resource:"node-own"},{name:"broker-recovery.post.107",method:"POST",path:"/v1/broker/:id/provider-retry",classes:["person","broker"],resource:"node-own"},{name:"broker-recovery.post.108",method:"POST",path:"/v1/broker/:id/fault",classes:["person","broker"],resource:"node-own"},{name:"broker-recovery.get.109",method:"GET",path:"/v1/broker/:id/recovery",classes:["person","broker"],resource:"node-own"},{name:"broker-recovery.post.110",method:"POST",path:"/v1/nodes/:id/fault",classes:["person","broker"],resource:"node-write"},{name:"broker-recovery.delete.111",method:"DELETE",path:"/v1/nodes/:id/fault",classes:["person","broker"],resource:"node-write"},{name:"profiles.put.112",method:"PUT",path:"/v1/profiles/:name",classes:["person","app","broker"],resource:"profile"},{name:"profiles.post.113",method:"POST",path:"/v1/profiles/:name/pause",classes:["person","broker"],resource:"profile"},{name:"profiles.post.114",method:"POST",path:"/v1/profiles/:name/resume",classes:["person","broker"],resource:"profile"},{name:"profiles.patch.115",method:"PATCH",path:"/v1/profiles/:name/metadata",classes:["person","app","broker"],resource:"profile"},{name:"profile.create",method:"POST",path:"/v1/profiles",classes:["person","app","broker"],resource:"profile"},{name:"profile.update",method:"PATCH",path:"/v1/profiles/:name",classes:["person","app","broker"],resource:"profile"},{name:"app.env.list",method:"GET",path:"/v1/apps/self/env",classes:["person","app","broker"],resource:"profile"},{name:"app.env.set",method:"PUT",path:"/v1/apps/self/env/:var",classes:["person","app","broker"],resource:"profile"},{name:"app.env.remove",method:"DELETE",path:"/v1/apps/self/env/:var",classes:["person","app","broker"],resource:"profile"},{name:"profile.env.list",method:"GET",path:"/v1/profiles/:name/env",classes:["person","app","broker"],resource:"profile"},{name:"profile.env.set",method:"PUT",path:"/v1/profiles/:name/env/:var",classes:["person","app","broker"],resource:"profile"},{name:"profile.env.remove",method:"DELETE",path:"/v1/profiles/:name/env/:var",classes:["person","app","broker"],resource:"profile"},{name:"profiles.delete.116",method:"DELETE",path:"/v1/profiles/:name",classes:["person","app","broker"],resource:"profile"},{name:"profile.list",method:"GET",path:"/v1/profiles",classes:["person","app","broker"],resource:"profile",stage:"chat"},{name:"profiles.get.118",method:"GET",path:"/v1/profiles/:name",classes:["person","app","broker"],resource:"profile"},{name:"node-outcomes.get.119",method:"GET",path:"/v1/nodes/:id/outcome",classes:["person","broker"],resource:"node-read"},{name:"node-outcomes.put.120",method:"PUT",path:"/v1/nodes/:id/outcome-delivery",classes:["person","broker"],resource:"node-write"},{name:"node-outcomes.get.121",method:"GET",path:"/v1/nodes/:id/outcome-delivery",classes:["person","broker"],resource:"node-read"},{name:"node-outcomes.delete.122",method:"DELETE",path:"/v1/nodes/:id/outcome-delivery",classes:["person","broker"],resource:"node-write"},{name:"canvas.get.123",method:"GET",path:"/v1/canvas/attention",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.post.124",method:"POST",path:"/v1/canvas/attention/counts",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.post.125",method:"POST",path:"/v1/canvas/history/search",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.post.126",method:"POST",path:"/v1/canvas/history/grep",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.get.127",method:"GET",path:"/v1/canvas/history/read",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.post.128",method:"POST",path:"/v1/canvas/history/stats",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.get.129",method:"GET",path:"/v1/canvas/snapshot",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.get.130",method:"GET",path:"/v1/canvas/roster",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.get.browse",method:"GET",path:"/v1/canvas/browse",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.get.analytics",method:"GET",path:"/v1/canvas/analytics",classes:["person","broker"],resource:"canvas-read"},{name:"memory-reads.post",method:"POST",path:"/v1/nodes/:id/memory-reads",classes:["person","broker"],resource:"node-own"},{name:"canvas.get.131",method:"GET",path:"/v1/canvas/graph",classes:["person","broker"],resource:"canvas-read"},{name:"canvas.post.132",method:"POST",path:"/v1/canvas/prune",classes:["person","broker"],resource:"none"},{name:"daemon.post.133",method:"POST",path:"/v1/daemon/restart",classes:["person","broker"],resource:"none"},{name:"daemon.post.134",method:"POST",path:"/v1/daemon/migrate",classes:["person","broker"],resource:"none"},{name:"daemon.post.135",method:"POST",path:"/v1/daemon/admit",classes:["person","broker"],resource:"none"},{name:"human.components.list",method:"GET",path:"/v1/human/components",classes:["person","broker"],resource:"none"},{name:"human-requests.post.136",method:"POST",path:"/v1/human/requests",classes:["person","broker"],resource:"human",scope:"crtr:act"},{name:"human-requests.get.137",method:"GET",path:"/v1/human/requests/:request_id",classes:["person","broker"],resource:"human"},{name:"human-requests.post.138",method:"POST",path:"/v1/human/requests/:request_id/replace",classes:["person","broker"],resource:"human"},{name:"human-requests.post.139",method:"POST",path:"/v1/human/requests/:request_id/respond",classes:["person","broker"],resource:"human"},{name:"human-requests.post.140",method:"POST",path:"/v1/human/requests/:request_id/dismiss",classes:["person","broker"],resource:"human"},{name:"human-requests.post.141",method:"POST",path:"/v1/human/requests/:request_id/cancel",classes:["person","broker"],resource:"human"},{name:"focus.get.142",method:"GET",path:"/v1/focuses",classes:["person","broker"],resource:"none"},{name:"focus.post.143",method:"POST",path:"/v1/focuses",classes:["person","broker"],resource:"none"},{name:"focus.get.144",method:"GET",path:"/v1/focuses/by-node",classes:["person","broker"],resource:"none"},{name:"focus.get.145",method:"GET",path:"/v1/focuses/by-pane",classes:["person","broker"],resource:"none"},{name:"focus.patch.146",method:"PATCH",path:"/v1/focuses/:focus_id",classes:["person","broker"],resource:"none"},{name:"focus.delete.147",method:"DELETE",path:"/v1/focuses/:focus_id",classes:["person","broker"],resource:"none"},{name:"delivery.retry",method:"POST",path:"/v1/deliveries/:delivery_id/retry",classes:["person","broker"],resource:"none"},{name:"limits.show",method:"GET",path:"/v1/limits",classes:["person"],resource:"none"},{name:"limits.set",method:"PUT",path:"/v1/limits/apps/:app",classes:["person"],resource:"none"},{name:"limits.remove",method:"DELETE",path:"/v1/limits/apps/:app",classes:["person"],resource:"none"},{name:"space.list",method:"GET",path:"/v1/spaces",classes:["person","broker"],resource:"none"},{name:"kinds.list",method:"GET",path:"/v1/kinds",classes:["person","app","broker"],resource:"none"},{name:"grant.get",method:"GET",path:"/v1/grant",classes:["app"],resource:"none",stage:"v0.5"},{name:"llm",method:"POST",path:"/v1/llm",classes:["app","person","broker"],scope:"crtr:llm",resource:"none",stage:"v1"},{name:"structured-request.create",method:"POST",path:"/v1/structured-requests",classes:["person","app","broker"],scope:"crtr:act",resource:"none"},{name:"structured-request.get",method:"GET",path:"/v1/structured-requests/:request_id",classes:["person","app","broker"],resource:"none"},{name:"structured-request.cancel",method:"POST",path:"/v1/structured-requests/:request_id/cancel",classes:["person","app","broker"],scope:"crtr:act",resource:"none"},{name:"run.start",method:"POST",path:"/v1/runs",classes:["app"],scope:"crtr:act",resource:"none",stage:"v0.5",idempotency:"24h"},{name:"run.list",method:"GET",path:"/v1/runs",classes:["app","person","broker"],resource:"run",stage:"v0.5"},{name:"run.get",method:"GET",path:"/v1/runs/:run_id",classes:["app","person","broker"],resource:"run",stage:"v0.5"},{name:"run.message",method:"POST",path:"/v1/runs/:run_id/messages",classes:["app","person","broker"],scope:"crtr:act",resource:"run",stage:"v0.5",idempotency:"24h"},{name:"run.events",method:"GET",path:"/v1/runs/:run_id/events",classes:["app","person","broker"],resource:"run",stage:"v0.5",stream:!0},{name:"run.interrupt",method:"POST",path:"/v1/runs/:run_id/interrupt",classes:["app","person","broker"],resource:"run",stage:"v0.5"},{name:"run.cancel",method:"POST",path:"/v1/runs/:run_id/cancel",classes:["app","person","broker"],resource:"run",stage:"v0.5"},{name:"run.delete",method:"DELETE",path:"/v1/runs/:run_id",classes:["app","person","broker"],resource:"run",stage:"v0.5"},{name:"run.rename",method:"POST",path:"/v1/runs/:run_id/rename",classes:["app"],resource:"run",stage:"chat"},{name:"question.get",method:"GET",path:"/v1/questions/:question_id",classes:["app"],resource:"none",stage:"chat"},{name:"question.answer",method:"POST",path:"/v1/questions/:question_id/answer",classes:["app"],resource:"none",stage:"chat"},{name:"trace.get",method:"GET",path:"/v1/runs/:run_id/trace",classes:["app","person","broker"],resource:"run",stage:"v0.5"},{name:"upload.create",method:"POST",path:"/v1/uploads",classes:["app"],scope:"crtr:act",resource:"none",stage:"file-transfer"},{name:"attachment.link",method:"GET",path:"/v1/attachments/link",classes:["app"],resource:"none",stage:"file-transfer"},{name:"file.download",method:"GET",path:"/v1/files/download",classes:["app"],resource:"none",stage:"file-transfer",stream:"bytes"},{name:"share.create",method:"POST",path:"/v1/shares",classes:["app"],resource:"none",stage:"file-transfer"},{name:"share.list",method:"GET",path:"/v1/shares",classes:["app"],resource:"none",stage:"file-transfer"},{name:"share.delete",method:"DELETE",path:"/v1/shares/:share_id",classes:["app"],resource:"none",stage:"file-transfer"},{name:"memory.list",method:"GET",path:"/v1/memory",classes:["person","app","broker"],resource:"none",stage:"m13"},{name:"memory.get",method:"GET",path:"/v1/memory/document",classes:["person","app","broker"],resource:"none",stage:"m13"},{name:"audit.list",method:"GET",path:"/v1/audit",classes:["person","app"],resource:"none",stage:"v1"},{name:"provider.tools",method:"GET",path:"/v1/providers/tools",classes:["person","app","broker"],resource:"none",stage:"v1"},{name:"provider.tools",method:"GET",path:"/v1/providers/:provider/tools",classes:["person","app","broker"],resource:"none",stage:"v1"},{name:"provider.call",method:"POST",path:"/v1/provider/call",classes:["person","app","broker"],resource:"none",stage:"v1"},{name:"runtime.sync-notice",method:"POST",path:"/v1/runtime/sync-notice",classes:["directory"],resource:"none",stage:"v1"},{name:"runtime.vendor-status",method:"GET",path:"/v1/runtime/vendor-status",classes:["directory"],resource:"none",stage:"v1"}];function c(e,s){return n.find(o=>o.method===e.toUpperCase()&&o.path===s)}r(c,"operationFor");export{n as OPERATIONS,c as operationFor};

package/dist/daemon/api/principal.d.ts

@@ -0,0 +1,71 @@
+import { type Scope } from '@north-light/identity';
+import { type ActiveGrant, type GrantDependencies, type GrantScope } from '../../core/grants/mirror.js';
+export interface AppPrincipal {
+    sub: string;
+    grantee: string;
+    client_id: string;
+    grant: string;
+    rev: number;
+    resolved: Scope[];
+    resolved_scopes: GrantScope[];
+    spend_cap: number | null;
+    dependencies: GrantDependencies;
+    exp: number;
+}
+/** A verified vendor sign-in handoff (directory spec, Interfaces → Runtime). */
+export interface VendorHandoff {
+    sub: string;
+    jti: string;
+    exp: number;
+}
+export declare class AppPrincipalResolver {
+    readonly issuer: string;
+    readonly audience: string;
+    private readonly syncGrants;
+    private readonly cache;
+    private ready;
+    private timer;
+    constructor(issuer: string, audience: string, syncGrants: (options?: {
+        fresh?: boolean;
+    }) => Promise<void>, jwksUrl?: string);
+    private load;
+    isReady(): boolean;
+    close(): void;
+    /** jti → exp of every notice accepted within its lifetime. */
+    private readonly notices;
+    /** A directory sync notice authorizes one grant sync and nothing else.
+     *  Returns false for a replay of a notice already accepted. */
+    verifySyncNotice(authorization: string | undefined): Promise<boolean>;
+    /** Verify a directory `vendor_sign_in` handoff: ES256 signature against the
+     *  JWKS mirror, `iss`, `aud`, `exp`, `purpose`, and that `jti` and `sub` are
+     *  present (runtime spec §7 "Vendor sign-in page", RT-LLM-52). The owner and
+     *  single-use `jti` checks are the caller's. Every failure is 401. */
+    verifyHandoff(token: string | undefined): Promise<VendorHandoff>;
+    /** Verify a directory read token (`Authorization: Bearer <ES256 JWT>`): signature
+     *  against the JWKS mirror, `iss`, `aud`, `exp`, and that `purpose` is exactly
+     *  the one this route accepts. It names no owner and is not single-use, so
+     *  there is no `sub` or `jti` requirement. Every failure is 401. */
+    verifyDirectoryRead(authorization: string | undefined, purpose: string): Promise<void>;
+    /** grant id → the highest token `rev` a successful fresh pull failed to
+     *  cover, valid only for the mirror generation it was recorded under: any
+     *  later `replaceGrants` clears it. A call at or below it answers from the
+     *  mirror without pulling again (contract 1 "Grant sync"). */
+    private behind;
+    private behindGeneration;
+    private behindRev;
+    /** The ordering rule (contract 1 "Grant sync"): the mirror covers a token
+     *  stamped `rev = N` when it holds the grant at `rev >= N`, and the decision
+     *  is then the mirror's alone. Otherwise one fresh pull — one that starts
+     *  after this call — is awaited first. A failed pull answers 503; a
+     *  successful pull that still does not cover the token is a directory fault:
+     *  an absent grant is refused `grant_revoked`, a grant below the token's rev
+     *  answers 503, and repeats of either answer without pulling. No clock or
+     *  timer enters the decision. */
+    private ensureCovers;
+    resolve(authorization: string | undefined, scope?: string): Promise<AppPrincipal>;
+}
+/** The mirrored grant a caller's token names, read now, when it is still the
+ *  caller's: active, the same `sub` and `grantee`, and not past `expires_at`.
+ *  Otherwise 401 `grant_revoked`. `resolve()` and every later re-read during a
+ *  request (a `grant.get` long-poll waking) apply this one check. */
+export declare function callerGrant(caller: Pick<AppPrincipal, 'grant' | 'sub' | 'grantee'>): ActiveGrant;

package/dist/daemon/api/principal.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var o=(a,e)=>p(a,"name",{value:e,configurable:!0});import{covers as m,JwksCache as _,MissingRevClaimError as b,verifyAccessToken as k,verifySyncNotice as x}from"@north-light/identity";import{createLocalJWKSet as f,decodeProtectedHeader as w,jwtVerify as g}from"jose";import{emitEvent as G}from"../../core/events/emit.js";import{activeGrant as S,grantSyncState as d,grantsGeneration as j}from"../../core/grants/mirror.js";import{RunError as n}from"../../core/runs/operations.js";class B{static{o(this,"AppPrincipalResolver")}issuer;audience;syncGrants;cache;ready=!1;timer;constructor(e,t,r,i){this.issuer=e,this.audience=t,this.syncGrants=r,this.cache=new _(e,fetch,i),this.load(),this.timer=setInterval(()=>{this.ready||this.load()},5e3),this.timer.unref()}async load(){try{await this.cache.load(),this.ready=!0}catch{}}isReady(){return this.ready}close(){this.timer&&clearInterval(this.timer)}notices=new Map;async verifySyncNotice(e){if(!this.ready)throw new n(503,"runtime_starting","runtime_starting");if(!e?.startsWith("Bearer ")||e.length<=7)throw new n(401,"unauthorized","a directory sync notice token is required");let t;try{t=await x({token:e.slice(7),jwks:this.cache,issuer:this.issuer,audience:this.audience})}catch{throw new n(401,"unauthorized","invalid directory sync notice token")}const r=Math.floor(Date.now()/1e3);for(const[i,s]of this.notices)s+30<r&&this.notices.delete(i);return this.notices.has(t.jti)?!1:(this.notices.set(t.jti,t.exp),!0)}async verifyHandoff(e){if(!this.ready)throw new n(503,"runtime_starting","runtime_starting");const t=o(()=>new n(401,"unauthorized","invalid vendor sign-in handoff"),"refuse");if(!e)throw t();let r;try{const u=w(e);if(u.alg!=="ES256")throw t();const l=await this.cache.forKid(u.kid);({payload:r}=await g(e,f(l),{issuer:this.issuer,audience:this.audience,algorithms:["ES256"],requiredClaims:["exp","jti","sub"]}))}catch{throw t()}const{sub:i,jti:s,exp:c,purpose:h,aud:y}=r;if(h!=="vendor_sign_in"||y!==this.audience||typeof i!="string"||typeof s!="string"||s===""||typeof c!="number")throw t();return{sub:i,jti:s,exp:c}}async verifyDirectoryRead(e,t){if(!this.ready)throw new n(503,"runtime_starting","runtime_starting");const r=o(()=>new n(401,"unauthorized","invalid directory token"),"refuse");if(!e?.startsWith("Bearer ")||e.length<=7)throw r();const i=e.slice(7);let s;try{const c=w(i);if(c.alg!=="ES256")throw r();const h=await this.cache.forKid(c.kid);({payload:s}=await g(i,f(h),{issuer:this.issuer,audience:this.audience,algorithms:["ES256"],requiredClaims:["exp"]}))}catch{throw r()}if(s.purpose!==t||s.aud!==this.audience)throw r()}behind=new Map;behindGeneration=-1;behindRev(e){const t=j();return t!==this.behindGeneration&&(this.behind=new Map,this.behindGeneration=t),this.behind.get(e)}async ensureCovers(e){if(v(d(e.grant),e.rev))return;const t=this.behindRev(e.grant);if(t===void 0||e.rev>t){try{await this.syncGrants({fresh:!0})}catch{throw new n(503,"service_unavailable","grant sync failed")}const r=d(e.grant);if(v(r,e.rev))return;this.behindRev(e.grant),this.behind.set(e.grant,Math.max(e.rev,this.behind.get(e.grant)??0)),G({level:"error",event:"daemon.grants.behind_token",fields:{grant:e.grant,token_rev:e.rev,mirror_rev:r?.rev??0}})}throw d(e.grant)?new n(503,"service_unavailable","the directory answered grant sync below the access token's grant revision"):new n(401,"grant_revoked","grant is not active")}async resolve(e,t){if(!this.ready)throw new n(503,"runtime_starting","runtime_starting");if(!e?.startsWith("Bearer ")||e.length<=7)throw new n(401,"unauthorized","a directory access token is required");let r;try{r=await k({token:e.slice(7),jwks:this.cache,issuer:this.issuer,audience:this.audience})}catch(s){throw s instanceof b?new n(401,"unauthorized",s.message):new n(401,"unauthorized","invalid directory access token")}await this.ensureCovers(r);const i=R(r);if(t&&!i.resolved.some(s=>m(s,t)))throw new n(403,"scope_missing",`missing scope ${t}`,void 0,void 0,t);return{sub:r.sub,grantee:r.grantee,client_id:r.client_id,grant:r.grant,rev:i.rev,resolved:i.resolved,resolved_scopes:i.resolved_scopes,spend_cap:i.spend_cap,dependencies:i.dependencies??{},exp:r.exp}}}function R(a){const e=S(a.grant);if(!e||e.sub!==a.sub||e.grantee!==a.grantee||e.expires_at!==null&&!(Date.parse(e.expires_at)>Date.now()))throw new n(401,"grant_revoked","grant is not active");return e}o(R,"callerGrant");function v(a,e){return a!==null&&a.rev>=e}o(v,"covered");export{B as AppPrincipalResolver,R as callerGrant};

package/dist/daemon/api/reader.d.ts

@@ -0,0 +1,17 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { DocOwnerFlag } from '../../api/dto/docs.js';
+import type { ObjectRow, Reader } from '../../core/graph/types.js';
+import type { RequestContext } from './router.js';
+/** The graph reader for a request's principal; repos come from the node's cwd. */
+export declare function readerFor(db: DatabaseSync, ctx: Pick<RequestContext, 'principal'>): Reader;
+/** A ref (`[[ ]]`-wrapped or not, raw id, name, `<owner>/<name>`, or an old
+ *  `<node-id>:reports/<basename>[.md]`) → the object, or a deleted/remote answer.
+ *  Anything unreadable is `not_found`. */
+export declare function resolveRef(db: DatabaseSync, reader: Reader, raw: string): ObjectRow | {
+    deleted: ObjectRow;
+} | {
+    remote: string;
+};
+/** The owner object a `--owner` value names. `cwd` is the caller's directory,
+ *  used for `repo` when the reader is a person (who has no cwd of its own). */
+export declare function ownerFromFlag(db: DatabaseSync, reader: Reader, value: DocOwnerFlag | undefined, cwd?: string): ObjectRow;

package/dist/daemon/api/reader.js

@@ -0,0 +1 @@
+var E=Object.defineProperty;var f=(n,e)=>E(n,"name",{value:e,configurable:!0});import{prepared as h}from"../../core/sqlite-statements.js";import{ApiError as d}from"../../api/index.js";import{readerFor as R}from"../../core/graph/reader.js";import{canRead as v}from"../../core/graph/access.js";import{ownersByHandle as y,resolveName as x,viewOf as F}from"../../core/graph/names.js";import{ensureOwner as $}from"../../core/graph/objects.js";import{checkoutsForCwd as j,reposForCwd as O}from"../../core/graph/repo-sync/repos.js";import{lookupProfile as _}from"../../core/profiles/manifest.js";function M(n,e){return R(n,e.principal,o=>j(n,o))}f(M,"readerFor");function T(n,e,o){const t=x(n,e,o);if("object"in t)return t.object;if("deleted"in t||"remote"in t)return t;if("ambiguous"in t){const p=t.ambiguous.map(u=>`${k(n,u)}/${u.name}`);throw new d(409,"ambiguous_name",`'${o}' names more than one object: ${p.join(", ")}`,{candidates:p,next:"Read one of them by its full `<type>:<owner>/<name>`."})}const r=o.replace(/^\s*\[\[(.*)\]\]\s*$/,"$1").trim(),i=/^(person|app|repo|profile):([^/]+)$/.exec(r),s=(i?y(n,i[2],i[1]):y(n,r).filter(p=>p.type!=="node")).filter(p=>v(n,e,p));if(s.length>0){const p=F(n,e),u=f(m=>{const c=p.findIndex(g=>g.rowid===m.rowid);return c<0?1/0:c},"rank"),w=[...s].sort((m,c)=>u(m)-u(c))[0];if(u(w)===1/0&&s.length>1){const m=s.map(c=>`${c.type}:${c.name}`);throw new d(409,"ambiguous_name",`'${o}' names more than one owner: ${m.join(", ")}`,{candidates:m,next:"Name one as `<type>:<handle>`."})}return w.deleted_at?{deleted:w}:w}const a=`'${o}' not found: no object by that name in your view`,l=`Search for it with \`crtr canvas search ${r}\`.`;throw new d(404,"not_found",a,{error:"not_found",message:a,next:l})}f(T,"resolveRef");function k(n,e){if(e.owner===null)return"";const o=h(n,"SELECT type, id, name FROM objects WHERE rowid = ?").get(e.owner);return o.type==="node"?o.id:`${o.type}:${o.name}`}f(k,"typedOwnerHandle");function B(n,e,o,t){const r=o??(e.class==="node"?"node":e.class==="person"?"user":"app"),i=f(s=>new d(400,"invalid_owner",s,{next:"Run `crtr doc write --owner -h`."}),"refuse");if(r==="node"){if(e.class!=="node")throw i("`--owner node` needs a node; you are not running as one");return e.node}if(r==="user")return $(n,"person","local-user","user:local","user");if(r==="app"){if(e.class==="person")throw i("`--owner app` needs an app; a person has none \u2014 use `--owner user`");return e.app}if(r==="profile"){if(e.class!=="node"||!e.profile)throw i("`--owner profile` needs a profile; you have none");return e.profile}if(r==="repo"){const s=t?O(n,t):[],a=s[0]?s:e.class==="node"?e.repos:[];if(!a[0])throw i(`\`--owner repo\` needs a repo; ${t??(e.class==="node"?e.cwd:"your directory")} is not inside one`);return a[0]}if(r.startsWith("repo:"))return C(n,"repo",r.slice(5),i);if(r.startsWith("profile:")){const s=r.slice(8),a=h(n,"SELECT * FROM objects WHERE type = 'profile' AND name = ?").get(s);if(a)return a;const l=_(s);if(l.kind!=="resolved")throw i(`no profile named '${s}'`);const p=e.class==="person"?e.person:e.app;return $(n,"profile","profile",l.entry.profileId,l.entry.manifest.name,p)}throw i(`unknown --owner value '${r}'`)}f(B,"ownerFromFlag");function C(n,e,o,t){const r=h(n,"SELECT * FROM objects WHERE type = ? AND name = ? AND deleted_at IS NULL").get(e,o);if(!r)throw t(`no ${e} named '${o}'`);return r}f(C,"namedOwner");export{B as ownerFromFlag,M as readerFor,T as resolveRef};

package/dist/daemon/api/router.d.ts

@@ -0,0 +1,123 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { ApiError } from '../../api/errors.js';
+import type { AppPrincipal } from './principal.js';
+import { type Operation } from './operations.js';
+/** What the caller's bearer token may reach: `null` is the owner (every scope,
+ *  every route); a list is the ceiling minted by `crtr sys connect --scopes`. */
+export type Ceiling = readonly string[] | null;
+export type RequestPrincipal = {
+    class: 'anonymous';
+    app: '';
+    node: '';
+    run: null;
+    uid: -1;
+    sub: '';
+    grant: null;
+    client_id: null;
+    scopes: [];
+} | {
+    class: 'person';
+} | {
+    class: 'app';
+    app: string;
+    scopes: readonly string[];
+} | {
+    class: 'broker';
+    app: string;
+    node: string;
+    run: string | null;
+    uid: number;
+    sub: string;
+    grant: string | null;
+    client_id: string | null;
+    scopes: string[] | null;
+};
+export declare function resolvedScopes(principal: RequestPrincipal): readonly string[];
+export declare function runCallerApp(principal: RequestPrincipal | AppPrincipal): string | null;
+/** Run confinement (Silas, 2026-09-30): a broker caller reaches a same-app node or
+ *  run only when it is in the caller's run, or neither run is isolated. `target`
+ *  omitted means no particular node (an app-wide question), which passes. */
+export declare function brokerMayReach(principal: RequestPrincipal | AppPrincipal, target: string | undefined, grantee: string): boolean;
+export declare function canReadRun(principal: RequestPrincipal | AppPrincipal, grantee: string, target?: string): boolean;
+export declare function requireRun(principal: RequestPrincipal | AppPrincipal, id: string, acting?: boolean, allowDeleting?: boolean): import("../../index.js").NodeMeta;
+export declare function canReadNode(principal: RequestPrincipal, grantee: string, target?: string): boolean;
+/** Throw the 403 `scope_denied` a scoped bearer earns when its ceiling lacks
+ *  `scope`. The owner (`null`) always passes. */
+export declare function assertCeiling(ceiling: Ceiling, scope: string): void;
+/** The 403 `owner_only` a scoped bearer earns on a route no ceiling reaches. */
+export declare function ownerOnlyError(): ApiError;
+/** The request view a handler receives: the resolved route params, parsed
+ *  query, parsed JSON body, and the raw req/res for the rare handler that needs
+ *  them (streaming, headers). Everything a handler mutates it does through the
+ *  returned `HandlerResult`, not by writing `res` directly — keeping the
+ *  error-wrap total. */
+export interface RequestContext {
+    method: string;
+    /** The request pathname (no query string). */
+    path: string;
+    /** Captured `:name` path params. */
+    params: Record<string, string>;
+    /** Parsed query string. */
+    query: URLSearchParams;
+    /** Parsed JSON request body, or `undefined` when there was no body. */
+    body: unknown;
+    /** The caller's scope ceiling — `null` for the owner token or the unix socket. */
+    ceiling: Ceiling;
+    principal: RequestPrincipal;
+    /** Opaque object-scoped bearer; only custom-object handlers may use it. */
+    publishToken?: string;
+    req: IncomingMessage;
+    res: ServerResponse;
+}
+/** What a handler returns. `body` is JSON-serialized; omit it (or use 204) for
+ *  an empty response. `headers` are merged over the default `content-type`.
+ *  `rawBody` is the escape hatch for the routes that serve bytes rather than
+ *  JSON (the page runtime bundle): it is written verbatim and the handler owns
+ *  the `content-type`. Setting both is a handler bug — `rawBody` wins. */
+export interface HandlerResult {
+    status: number;
+    body?: unknown;
+    rawBody?: string | Buffer;
+    headers?: Record<string, string>;
+}
+/** A route handler — sync or async. A throw is caught and mapped by the router
+ *  (map.ts §8); a handler never writes an error response itself. */
+export type RouteHandler = (ctx: RequestContext) => HandlerResult | Promise<HandlerResult>;
+/** One entry in the route table. `pattern` is a `:name`-style path template. */
+export interface RouteDef {
+    method: string;
+    pattern: string;
+    handler: RouteHandler;
+    /** A scoped bearer token never reaches this route (403 `owner_only`). */
+    ownerOnly?: true;
+    /** The scope the caller's ceiling must hold (403 `scope_denied` otherwise). */
+    scope?: string;
+    /** Request-body cap in bytes; defaults to `CONTROL_BODY_MAX_BYTES` (4 MiB).
+     *  Raise it only for a route whose body is a model context (`/v1/llm`). */
+    maxBodyBytes?: number;
+}
+/** The flat route table the handler authors (A-7) build up and hand to the
+ *  server (A-9). */
+export type RouteTable = RouteDef[];
+/** Mark every route in `table` owner-only. */
+export declare function ownerOnly(table: RouteTable): RouteTable;
+export declare class Router {
+    private readonly routes;
+    /** Register one route. Returns `this` for chaining. */
+    register(def: RouteDef): this;
+    /** Register a whole table at once. */
+    registerAll(table: RouteTable): this;
+    /** Match a method + pathname against the table, extracting `:name` params.
+     *  Returns null when nothing matches (the caller responds 404). */
+    match(method: string, path: string): {
+        handler: RouteHandler;
+        params: Record<string, string>;
+        operation: Operation;
+        maxBodyBytes: number;
+    } | null;
+    /** Resolve the JSON body, dispatch to the matched handler, and write the
+     *  response. Every failure path — no route, bad JSON, a handler throw — is
+     *  turned into a JSON `ErrorBody` (map.ts §8); this method never throws and
+     *  never leaves the daemon crashed. */
+    handle(req: IncomingMessage, res: ServerResponse, ceiling: Ceiling, principal?: RequestPrincipal): Promise<void>;
+}