@north-light/cli 0.0.0-stage → 0.3.413

package/dist/migrations/004-canvas-documents/fields.d.ts

@@ -0,0 +1,24 @@
+import type { Privacy, RuleSpec } from '../../core/graph/types.js';
+export type DocumentKind = 'knowledge' | 'preference' | 'report';
+export interface DocumentFields {
+    kind: DocumentKind;
+    privacy: Privacy;
+    preview: string;
+    summary: string | null;
+    whyItExists: string | null;
+    unlisted: boolean;
+    lintIgnore: unknown;
+    extensions: unknown;
+    rules: RuleSpec[];
+    /** Frontmatter keys with no document field; listed in the report. */
+    dropped: string[];
+}
+/** First non-empty body line, with a leading markdown heading or list marker removed. */
+export declare function firstLine(body: string): string;
+/** `missingPrivacy` is what a document without a valid `privacy` key gets. */
+export declare function documentFields(fm: Record<string, unknown> | null, body: string, opts: {
+    kind?: DocumentKind;
+    missingPrivacy: Privacy;
+}): DocumentFields;
+/** AND `extra` into every rule's `if` (private repo documents re-owned to the person). */
+export declare function andIntoRules(rules: RuleSpec[], extra: Record<string, unknown>): RuleSpec[];

package/dist/migrations/004-canvas-documents/fields.js

@@ -0,0 +1,2 @@
+var c=Object.defineProperty;var r=(e,t)=>c(e,"name",{value:t,configurable:!0});import{rulesFromFrontmatter as u}from"../../core/graph/rules.js";const f=new Set(["kind","privacy","unlisted","lint-ignore","extensions","when-and-why-to-read","short-form","rationale","surfaces","gate","slash","origin","last-updated","name","namespace"]),p=["public","friends","private"],s=r(e=>typeof e=="string"&&e.trim()!==""?e.trim():null,"str");function m(e){for(const t of e.split(`
+`)){const i=t.trim().replace(/^#+\s*/,"").replace(/^[-*]\s+/,"").trim();if(i!==""&&i!=="---")return i}return""}r(m,"firstLine");function g(e,t,i){const n=e??{},o=Object.keys(n).filter(a=>!f.has(a));let l=i.kind??"knowledge";i.kind===void 0&&n.kind!==void 0&&(n.kind==="knowledge"||n.kind==="preference"?l=n.kind:o.push("kind"));const d=typeof n.privacy=="string"&&p.includes(n.privacy)?n.privacy:i.missingPrivacy;return{kind:l,privacy:d,preview:s(n["when-and-why-to-read"])?.replace(/\s+/g," ")??m(t),summary:s(n["short-form"]),whyItExists:s(n.rationale),unlisted:n.unlisted===!0,lintIgnore:n["lint-ignore"]??null,extensions:n.extensions??null,rules:u(n),dropped:o}}r(g,"documentFields");function h(e,t){return e.map(i=>({...i,if:i.if===void 0?t:{all:[i.if,t]}}))}r(h,"andIntoRules");export{h as andIntoRules,g as documentFields,m as firstLine};

package/dist/migrations/004-canvas-documents/index.d.ts

@@ -0,0 +1,16 @@
+import { type ImportBlocker, type ImportReport } from './plan.js';
+export type { ImportBlocker, ImportReport } from './plan.js';
+export interface CanvasImportResult {
+    report: ImportReport;
+    blockers: ImportBlocker[];
+    dryRun: boolean;
+    /** True while this home still has to be imported (always false after a write run succeeds). */
+    pending: boolean;
+}
+/** Whether this home's import has already been recorded. */
+export declare function canvasImportDone(): boolean;
+/** Plan and (unless `dryRun` or blocked) apply the import. On an imported home a dry run
+ *  returns the recorded report; a write run does nothing and returns empty counts. */
+export declare function runCanvasImport(opts: {
+    dryRun: boolean;
+}): CanvasImportResult;

package/dist/migrations/004-canvas-documents/index.js

@@ -0,0 +1,2 @@
+var g=Object.defineProperty;var a=(e,n)=>g(e,"name",{value:n,configurable:!0});import{existsSync as f}from"node:fs";import{join as l}from"node:path";import{openDb as c,withCanvasWrite as w}from"../../core/canvas/db.js";import{nodeAgentDir as k,nodeRecordDir as S,onDiskMigrationMarkerPath as C}from"../../core/canvas/paths.js";import{identifyCheckout as j}from"../../core/graph/repo-sync/identity.js";import{profileSpace as I,userRoot as b}from"../../core/layout.js";import{commitConvertedProjectCaps as E,listLegacyProjectCaps as P,listStoredProfiles as x}from"../../core/scoped-state/profiles.js";import{userStore as L}from"../../core/scoped-state/paths.js";import{userScopeRoot as y}from"../../core/scope.js";import{applyPlan as M,readImportRecord as h,storePlanBodies as _}from"./apply.js";import{readLegacyCorpus as v,readMarkerIds as D}from"./legacy/discover.js";import{planImport as O}from"./plan.js";const F=a(()=>({stores:[],counts:{},rewrites:[],droppedFields:[],skipped:[],resolutions:[]}),"emptyReport");function A(){const e=y(),n=x(e),o=P(e),m=L(e).path,i=n.map(({profileId:r,manifest:s})=>{const p=s.grantee??"app:terminal",d=new Map(o.filter(t=>t.profileId===r).map(t=>[t.path,t.memory]));return{id:r,name:s.name,app:p,memory:I(p,r).memory,projects:s.projects.map(t=>t.path),raw:{projects:s.projects.map(t=>d.has(t.path)?{path:t.path,memory:d.get(t.path)}:{path:t.path})},manifestPath:`${m}#${r}`}}),u=c().prepare("SELECT node_id, cwd, grantee FROM node_rows ORDER BY created").all(),R=u.map(r=>{const s=r.grantee==="user:local"?"app:terminal":r.grantee,p=s?.startsWith("app:")?k(r.node_id,s):null,d=p!==null&&(f(l(p,"context"))||f(l(p,"reports")))?p:S(r.node_id);return{id:r.node_id,dir:d}});return{roots:{userMemory:l(b(),"memory"),profiles:i,nodeCwds:[...new Set(u.map(r=>r.cwd))],nodes:R},stored:n}}a(A,"legacyRoots");function N(){const{roots:e,stored:n}=A(),o=v(e),m=c().prepare(`SELECT o.type, o.name AS handle, i.external_id AS externalId FROM objects o
+    LEFT JOIN identities i ON i.object = o.rowid WHERE o.type IN ('person','app','repo','profile')`).all();return O(o,{roots:e,markerIds:D(C()),repoIdentity:j,existingOwners:m,storedProfiles:n.map(i=>({id:i.profileId,deliveryLimits:{...i.manifest.delivery_limits??{}}}))})}a(N,"plan");function V(){return h(c())!==null}a(V,"canvasImportDone");function X(e){const n=h(c());if(n!==null)return{report:e.dryRun?n:F(),blockers:[],dryRun:e.dryRun,pending:!1};const o=N();if(e.dryRun||o.blockers.length>0)return{report:o.report,blockers:o.blockers,dryRun:e.dryRun,pending:!0};const m=_(o);return E(y(),o.profileLimits),w(i=>M(i,o,m)),{report:o.report,blockers:[],dryRun:!1,pending:!1}}a(X,"runCanvasImport");export{V as canvasImportDone,X as runCanvasImport};

package/dist/migrations/004-canvas-documents/legacy/discover.d.ts

@@ -0,0 +1,16 @@
+import type { LegacyCorpus, LegacyProfile, LegacyRoots } from './types.js';
+export type { LegacyCorpus, LegacyDoc, LegacyOwnerRef, LegacyProfile, LegacyRoots, LegacyStoreRoot, LegacyHistoryRecord } from './types.js';
+/** Every stored profile manifest, read as raw JSON (the current manifest reader
+ *  is not used). `memoryFor(app, id)` resolves the profile's store path. */
+export declare function readLegacyProfiles(profilesRoot: string, memoryFor: (app: string, id: string) => string): {
+    profiles: LegacyProfile[];
+    skipped: Array<{
+        path: string;
+        reason: string;
+    }>;
+};
+/** Ids listed in `<canvas home>/on-disk-migrations.json`, or null when the marker is absent. */
+export declare function readMarkerIds(markerPath: string): string[] | null;
+export declare function readLegacyCorpus(roots: LegacyRoots): LegacyCorpus;
+/** Cheap probe: is there any legacy document to import? */
+export declare function hasLegacyContent(roots: LegacyRoots): boolean;

package/dist/migrations/004-canvas-documents/legacy/discover.js

@@ -0,0 +1 @@
+var J=Object.defineProperty;var l=(t,o)=>J(t,"name",{value:o,configurable:!0});import{existsSync as D,readdirSync as b,readFileSync as x,realpathSync as P,statSync as R}from"node:fs";import{basename as T,dirname as C,isAbsolute as L,join as i,relative as A,resolve as F}from"node:path";import{walkFiles as I}from"../../../core/fs-utils.js";import{historyLogPath as O,HISTORY_DIR as z,readHistory as X}from"./history.js";import{walkNestedStores as W}from"./nested.js";import{contextDocName as _,parseFile as $,rawFile as E,storeDocName as q}from"./parse.js";const G=/^[a-z0-9]+(?:-[a-z0-9]+)*-[0-9a-f]{8}$/;function k(t){try{return P(t)}catch{return F(t)}}l(k,"real");const w=l(t=>{try{return R(t).isDirectory()}catch{return!1}},"isDir"),Y=l(t=>["canvas","canvas.db","runtime","profiles"].some(o=>D(i(t,o))),"isCrouterHome"),H=l(t=>I(t,o=>o.toLowerCase().endsWith(".md"),o=>o.startsWith(".")).sort(),"markdownIn");function re(t,o){const s=[],y=[];if(!w(t))return{profiles:s,skipped:y};for(const j of b(t).sort()){const d=i(t,j,"profile.json");if(!G.test(j)||!D(d))continue;let h;try{const p=JSON.parse(x(d,"utf8"));if(p===null||typeof p!="object"||Array.isArray(p))throw new Error("not a JSON object");h=p}catch(p){y.push({path:d,reason:`invalid-manifest: ${p.message}`});continue}const v=typeof h.grantee=="string"?h.grantee:"app:terminal",M=Array.isArray(h.projects)?h.projects.flatMap(p=>typeof p=="string"?[p]:p!==null&&typeof p=="object"&&typeof p.path=="string"?[p.path]:[]):[];s.push({id:j,name:typeof h.name=="string"?h.name:j,app:v,memory:o(v,j),projects:M,raw:h,manifestPath:d})}return{profiles:s,skipped:y}}l(re,"readLegacyProfiles");function ne(t){if(!D(t))return null;const o=JSON.parse(x(t,"utf8"));if(!Array.isArray(o))throw new Error(`${t}: not a JSON array`);return o.map(s=>typeof s=="string"?s:String(s.id))}l(ne,"readMarkerIds");function B(t){const o=i(t,".git");if(w(o))return k(o);if(!D(o))return null;const s=/^gitdir:\s*(.+)$/m.exec(x(o,"utf8"));if(!s)return null;const y=L(s[1].trim())?s[1].trim():F(t,s[1].trim()),j=i(y,"commondir");if(!D(j))return k(y);const d=x(j,"utf8").trim();return k(L(d)?d:F(y,d))}l(B,"gitCommonDir");function K(t){const o={docs:[],storeRoots:[],skipped:[],orphanHistory:0,orphanNodeDirs:0,nonMarkdown:0,injectedDocs:0},s=new Set([t.userMemory,...t.profiles.map(e=>e.memory)].map(k)),y=l((e,r,c)=>{const u=H(e),S=new Set(u.map(n=>O(e,n)));o.orphanHistory+=I(i(e,z),n=>n.endsWith(".jsonl")).filter(n=>!S.has(n)).length;let g=0;for(const n of u){const f=c+q(A(e,n));let m;try{m=$(n)}catch(N){o.docs.push({path:n,owner:r,name:f,source:"store",...E(n),history:[],invalid:{kind:"invalid-source",reason:`invalid frontmatter: ${N.message}`}}),g+=1;continue}let a;try{a=X(O(e,n))}catch(N){o.docs.push({path:n,owner:r,name:f,source:"store",...m,history:[],invalid:{kind:"invalid-history",reason:`unreadable history log: ${N.message}`}}),g+=1;continue}o.docs.push({path:n,owner:r,name:f,source:"store",...m,history:a}),g+=1}o.storeRoots.push({root:e,owner:r,docs:g})},"readStore");w(t.userMemory)&&y(t.userMemory,{type:"person"},"");for(const e of t.profiles)w(e.memory)&&y(e.memory,{type:"profile",id:e.id},"");const j=l(e=>{let r=null;for(let c=k(e);;c=C(c)){if(D(i(c,".git")))return c;const u=i(c,".crouter","memory");if(r===null&&w(u)&&!s.has(k(u))&&!Y(i(c,".crouter"))&&(r=c),C(c)===c)return r}},"projectRoot"),d=[];for(const e of[...t.profiles.flatMap(r=>r.projects),...t.nodeCwds]){if(!w(e))continue;const r=j(e);r!==null&&d.push(r)}const h=new Map,v=new Set,M=[];for(;d.length>0;){const e=d.shift();if(v.has(e))continue;v.add(e);const r=B(e);if(M.push({root:e,commonDir:r}),r!==null){h.set(r,[...h.get(r)??[],e]);const c=C(r);T(r)===".git"&&w(i(c,".git"))&&d.push(c)}d.push(...W(e).embeddedRepos)}for(const{root:e,commonDir:r}of M.sort((c,u)=>c.root.localeCompare(u.root))){const c=r===null?[e]:h.get(r),u=c.find(a=>w(i(a,".git")))??[...c].sort()[0],S=i(e,".crouter","memory"),g=w(S)&&!s.has(k(S)),n=W(e).nested.filter(a=>!s.has(k(i(e,a,".crouter","memory"))));let f=null;if(g&&D(i(S,"INDEX.md")))try{const a=$(i(S,"INDEX.md")).frontmatter?.namespace;typeof a=="string"&&a!==""&&(f=a)}catch{}const m={type:"repo",root:e,commonDir:r,namespace:f};if(e!==u){g&&o.storeRoots.push({root:S,owner:m,docs:0,skipped:"duplicate-worktree"});for(const a of n)o.storeRoots.push({root:i(e,a,".crouter","memory"),owner:m,docs:0,skipped:"duplicate-worktree"});continue}g&&y(S,m,"");for(const a of n)y(i(e,a,".crouter","memory"),m,a.split(/[\\/]/).join("/")+"/")}const p=new Set(t.nodes.map(e=>e.id));for(const e of new Set(t.nodes.map(r=>C(r.dir))))for(const r of b(e,{withFileTypes:!0}))r.isDirectory()&&!p.has(r.name)&&(o.orphanNodeDirs+=1);for(const{id:e,dir:r}of t.nodes){const c={type:"node",id:e};D(i(r,"injected-docs.json"))&&(o.injectedDocs+=1);const u=i(r,"context");w(i(u,"memory"))&&y(i(u,"memory"),c,"");const S=l((n,f,m)=>{try{o.docs.push({path:n,owner:c,name:f,source:m,...$(n),history:[]})}catch(a){o.docs.push({path:n,owner:c,name:f,source:m,...E(n),history:[],invalid:{kind:"invalid-source",reason:`invalid frontmatter: ${a.message}`}})}},"readPlain");for(const n of I(u,()=>!0,f=>f.startsWith(".")).sort()){const f=A(u,n),m=f.split(/[\\/]/)[0];m==="memory"||m==="jobs"||(n.toLowerCase().endsWith(".md")?S(n,_(f),"context"):o.nonMarkdown+=1)}const g=i(r,"reports");if(w(g))for(const n of b(g,{withFileTypes:!0}).sort((f,m)=>f.name.localeCompare(m.name)))n.isFile()&&(n.name.toLowerCase().endsWith(".md")?S(i(g,n.name),`reports/${n.name.replace(/\.md$/i,"")}`,"report"):o.nonMarkdown+=1)}return o}l(K,"readLegacyCorpus");function se(t){const o=l(s=>w(s)&&H(s).length>0,"anyMd");return o(t.userMemory)||t.profiles.some(s=>o(s.memory))||t.nodes.some(s=>o(i(s.dir,"context"))||o(i(s.dir,"reports")))?!0:K({...t,nodes:[]}).docs.length>0}l(se,"hasLegacyContent");export{se as hasLegacyContent,K as readLegacyCorpus,re as readLegacyProfiles,ne as readMarkerIds};

package/dist/migrations/004-canvas-documents/legacy/history.d.ts

@@ -0,0 +1,5 @@
+import type { LegacyHistoryRecord } from './types.js';
+export declare const HISTORY_DIR = ".history";
+export declare function historyLogPath(storeRoot: string, docPath: string): string;
+/** Records of the current life, or throws naming the bad line. */
+export declare function readHistory(logPath: string): LegacyHistoryRecord[];

package/dist/migrations/004-canvas-documents/legacy/history.js

@@ -0,0 +1,2 @@
+var c=Object.defineProperty;var o=(r,t)=>c(r,"name",{value:t,configurable:!0});import{existsSync as f,readFileSync as l}from"node:fs";import{join as a,relative as y}from"node:path";const h=".history";function w(r,t){return a(r,h,y(r,t).replace(/\.md$/i,"")+".jsonl")}o(w,"historyLogPath");function x(r){if(!f(r))return[];const t=[];return l(r,"utf8").split(`
+`).forEach((n,i)=>{if(n.trim()==="")return;let s;try{s=JSON.parse(n)}catch(p){throw new Error(`line ${i+1}: ${p.message}`)}const e=s;if(e===null||typeof e!="object"||typeof e.op!="string"||typeof e.at!="string"||typeof e.after!="string")throw new Error(`line ${i+1}: not a history record`);e.op==="delete"?t.length=0:t.push(e)}),t}o(x,"readHistory");export{h as HISTORY_DIR,w as historyLogPath,x as readHistory};

package/dist/migrations/004-canvas-documents/legacy/nested.d.ts

@@ -0,0 +1,7 @@
+export interface NestedWalk {
+    /** `<rel>` of each `<root>/<rel>/.crouter/memory`, rel non-empty. */
+    nested: string[];
+    /** Folders below the root holding their own `.git`. */
+    embeddedRepos: string[];
+}
+export declare function walkNestedStores(root: string): NestedWalk;

package/dist/migrations/004-canvas-documents/legacy/nested.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var d=(s,e)=>m(s,"name",{value:e,configurable:!0});import{existsSync as c,readdirSync as p}from"node:fs";import{join as i,relative as u}from"node:path";function l(s){const e={nested:[],embeddedRepos:[]},o=[s];for(;o.length>0;){const t=o.pop();if(t!==s){if(c(i(t,".git"))){e.embeddedRepos.push(t);continue}c(i(t,".crouter","memory"))&&e.nested.push(u(s,t))}let r;try{r=p(t,{withFileTypes:!0})}catch{continue}for(const n of r)!n.isDirectory()||n.name.startsWith(".")||n.name==="node_modules"||o.push(i(t,n.name))}return e.nested.sort(),e.embeddedRepos.sort(),e}d(l,"walkNestedStores");export{l as walkNestedStores};

package/dist/migrations/004-canvas-documents/legacy/parse.d.ts

@@ -0,0 +1,14 @@
+export interface ParsedFile {
+    frontmatter: Record<string, unknown> | null;
+    body: string;
+    mtime: string;
+}
+/** Throws when the frontmatter is not valid YAML. */
+export declare function parseFile(path: string): ParsedFile;
+/** A file whose frontmatter does not parse: the whole text is the body. */
+export declare function rawFile(path: string): ParsedFile;
+/** Frozen store naming: drop `.md`, strip each segment's `NN-` ordering prefix,
+ *  fold `a/INDEX` to `a`; the store's root `INDEX.md` is `index`. */
+export declare function storeDocName(relPath: string): string;
+/** A node context file's name: its folder-relative path without `.md`. */
+export declare function contextDocName(relPath: string): string;

package/dist/migrations/004-canvas-documents/legacy/parse.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var r=(e,t)=>m(e,"name",{value:t,configurable:!0});import{readFileSync as n,statSync as o}from"node:fs";import{parseFrontmatterGeneric as a}from"../../../core/frontmatter.js";function f(e){const t=a(n(e,"utf8"));return{frontmatter:t.data,body:t.body,mtime:o(e).mtime.toISOString()}}r(f,"parseFile");function u(e){return{frontmatter:null,body:n(e,"utf8"),mtime:o(e).mtime.toISOString()}}r(u,"rawFile");function d(e){const t=e.replace(/\\/g,"/").replace(/\.md$/i,"").split("/").map(i=>i.replace(/^\d{2}-/,""));return t[t.length-1]==="INDEX"&&t.pop(),t.length===0?"index":t.join("/")}r(d,"storeDocName");function s(e){return e.replace(/\\/g,"/").replace(/\.md$/i,"")}r(s,"contextDocName");export{s as contextDocName,f as parseFile,u as rawFile,d as storeDocName};

package/dist/migrations/004-canvas-documents/legacy/types.d.ts

@@ -0,0 +1,91 @@
+/** Frozen copy of the history record shape the retired store-file history wrote. */
+export interface LegacyHistoryRecord {
+    op: 'create' | 'edit' | 'delete' | 'move';
+    at: string;
+    node?: string;
+    cwd: string;
+    from?: string;
+    rationale?: string;
+    verbatim?: boolean;
+    before: string;
+    after: string;
+}
+export interface LegacyProfile {
+    id: string;
+    name: string;
+    /** The owning app (`grantee`), `app:terminal` for older manifests without one. */
+    app: string;
+    /** The profile's store (`<app memory>/profiles/<id>`), resolved by the caller. */
+    memory: string;
+    /** Every `projects[].path` in the manifest. */
+    projects: string[];
+    /** The manifest as parsed JSON, for fields the plan converts (`projects[].memory`). */
+    raw?: Record<string, unknown>;
+    manifestPath?: string;
+}
+export interface LegacyRoots {
+    userMemory: string;
+    profiles: LegacyProfile[];
+    nodeCwds: string[];
+    /** Node rows that exist in canvas.db and their folders (`<nodes>/<id>`). */
+    nodes: Array<{
+        id: string;
+        dir: string;
+    }>;
+}
+export type LegacyOwnerRef = {
+    type: 'person';
+} | {
+    type: 'profile';
+    id: string;
+} | {
+    type: 'repo';
+    root: string;
+    commonDir: string | null;
+    namespace: string | null;
+} | {
+    type: 'node';
+    id: string;
+};
+export interface LegacyDoc {
+    path: string;
+    owner: LegacyOwnerRef;
+    /** The document name under its owner (INDEX folding, nested prefix, `reports/<stem>`, root `INDEX.md` → `index`). */
+    name: string;
+    source: 'store' | 'context' | 'report';
+    frontmatter: Record<string, unknown> | null;
+    body: string;
+    mtime: string;
+    /** Records of the file's current life (after its last `delete`), in file order; store documents only. */
+    history: LegacyHistoryRecord[];
+    /** Set when the file could not be read as written: `invalid-source` (unparseable
+     *  frontmatter; `body` is the whole file and `frontmatter` null) or `invalid-history`
+     *  (its history log is unreadable; `history` is empty). */
+    invalid?: {
+        kind: 'invalid-source' | 'invalid-history';
+        reason: string;
+    };
+}
+export interface LegacyStoreRoot {
+    root: string;
+    owner: LegacyOwnerRef;
+    docs: number;
+    skipped?: 'duplicate-worktree';
+}
+export interface LegacyCorpus {
+    docs: LegacyDoc[];
+    storeRoots: LegacyStoreRoot[];
+    /** Files or roots not read, with the reason; informational. */
+    skipped: Array<{
+        path: string;
+        reason: string;
+    }>;
+    /** History logs whose document file no longer exists. */
+    orphanHistory: number;
+    /** Folders beside the given node folders with no node row. */
+    orphanNodeDirs: number;
+    /** Non-markdown files under node `context/` and `reports/` folders (not imported). */
+    nonMarkdown: number;
+    /** `injected-docs.json` ledgers found in node folders (not imported; the roll ends their sessions). */
+    injectedDocs: number;
+}

package/dist/migrations/004-canvas-documents/legacy-edges.d.ts

@@ -0,0 +1,6 @@
+import type { DatabaseSync } from 'node:sqlite';
+/** canvas.db chain step: converts the node-only `legacy_edges` rows into graph rows, then drops it.
+ *  `spawned_by(child, parent)` → `edges(acted-on, parent → child)`.
+ *  `subscribes_to(watcher, object)` → an in-tree watch with one `>` subscription, started `spawn`
+ *  when the object was spawned by the watcher, else `ask`; a passive row listens at next-turn. */
+export declare function convertLegacyEdges(db: DatabaseSync): void;

package/dist/migrations/004-canvas-documents/legacy-edges.js

@@ -0,0 +1,18 @@
+var n=Object.defineProperty;var s=(e,t)=>n(e,"name",{value:t,configurable:!0});function _(e){if(!e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'legacy_edges'").get())return;const t=s(d=>e.prepare(d).get().n,"count"),c=t("SELECT COUNT(*) AS n FROM legacy_edges WHERE type = 'spawned_by'"),r=t("SELECT COUNT(*) AS n FROM legacy_edges WHERE type = 'subscribes_to'"),o=t("SELECT COUNT(*) AS n FROM legacy_edges WHERE type NOT IN ('spawned_by', 'subscribes_to')");if(o>0)throw new Error(`convertLegacyEdges: ${o} legacy edge(s) of an unknown type`);const a=e.prepare(`INSERT INTO edges (type, src, dst, written_as, created_at)
+    SELECT 'acted-on', p.rowid, c.rowid, NULL, e.created
+    FROM legacy_edges e JOIN objects c ON c.id = e.from_id JOIN objects p ON p.id = e.to_id
+    WHERE e.type = 'spawned_by'
+    ON CONFLICT (type, src, dst) DO NOTHING`).run().changes,E=e.prepare(`INSERT INTO watches (watcher, object, in_tree, read_heads_key, created_at)
+    SELECT w.rowid, o.rowid, 1, NULL, e.created
+    FROM legacy_edges e JOIN objects w ON w.id = e.from_id JOIN objects o ON o.id = e.to_id
+    WHERE e.type = 'subscribes_to'
+    ON CONFLICT (watcher, object) DO UPDATE SET in_tree = 1`).run().changes;if(e.exec(`INSERT INTO watch_subscriptions (watch, pattern, filter_json, config_json, started_by, ends_on, created_at)
+    SELECT wt.rowid, '>', NULL,
+           CASE WHEN e.active = 1 THEN NULL ELSE '{"3":"next-turn"}' END,
+           CASE WHEN EXISTS (SELECT 1 FROM legacy_edges s
+                             WHERE s.type = 'spawned_by' AND s.from_id = e.to_id AND s.to_id = e.from_id)
+                THEN 'spawn' ELSE 'ask' END,
+           NULL, e.created
+    FROM legacy_edges e JOIN objects w ON w.id = e.from_id JOIN objects o ON o.id = e.to_id
+    JOIN watches wt ON wt.watcher = w.rowid AND wt.object = o.rowid
+    WHERE e.type = 'subscribes_to'`),a!==c||E!==r)throw new Error(`convertLegacyEdges: converted ${a}/${c} spawned_by and ${E}/${r} subscribes_to rows`);e.exec("DROP TABLE legacy_edges")}s(_,"convertLegacyEdges");export{_ as convertLegacyEdges};

package/dist/migrations/004-canvas-documents/plan.d.ts

@@ -0,0 +1,102 @@
+import { type CheckoutIdentity } from '../../core/graph/repo-sync/identity.js';
+import type { Privacy, RuleSpec } from '../../core/graph/types.js';
+import { type DocumentKind } from './fields.js';
+import type { LegacyCorpus, LegacyRoots } from './legacy/types.js';
+/** The store migrations every plan assumes already ran (the previous release's lanes). */
+export declare const CONVERGED_MARKER_IDS: readonly ["001-surfaces-frontmatter", "002-profile-project-memory", "003-repository-root-memory-identity"];
+export type OwnerType = 'person' | 'app' | 'profile' | 'repo' | 'node';
+export interface PlannedOwner {
+    /** Stable key documents point at: `person`, `app:<handle>`, `profile:<id>`, `repo:<externalId>`, `node:<id>`. */
+    key: string;
+    type: OwnerType;
+    handle: string;
+    /** Repo identity (`ensureRepo`). */
+    scheme?: 'git' | 'local-path';
+    externalId?: string;
+    /** A profile's owning app, as an owner key (`app:<handle>`). */
+    ownerKey?: string;
+}
+export interface PlannedRevision {
+    body: string;
+    authorNodeId: string | null;
+    rationale: string | null;
+    createdAt: string;
+}
+export interface PlannedDocument {
+    ownerKey: string;
+    name: string;
+    kind: DocumentKind;
+    privacy: Privacy;
+    preview: string;
+    summary: string | null;
+    whyItExists: string | null;
+    unlisted: boolean;
+    lintIgnore: unknown;
+    extensions: unknown;
+    rules: RuleSpec[];
+    /** Oldest first; the last one is the head, whose body carries the pointer rewrite. */
+    revisions: PlannedRevision[];
+    sourcePath: string;
+}
+/** A stored-profile update (scoped-state `profiles.delivery_limits_json`): the legacy
+ *  profile.json `projects[].memory` caps, keyed by repo handle, merged over the row's limits. */
+export interface PlannedProfileLimits {
+    profileId: string;
+    deliveryLimits: Record<string, string>;
+}
+/** Something that stops the import. Only a runtime that skipped the previous
+ *  release's store migrations blocks; every other finding resolves itself. */
+export interface ImportBlocker {
+    kind: 'marker';
+    message: string;
+    paths: string[];
+}
+/** One finding the plan resolved on its own, with what it did. */
+export interface ImportResolution {
+    kind: 'invalid-source' | 'invalid-history' | 'name-clash' | 'repo-handle' | 'profile-handle' | 'repo-identity' | 'delivery-limit' | 'empty-preview';
+    message: string;
+    paths: string[];
+}
+export interface ImportReport {
+    stores: LegacyCorpus['storeRoots'];
+    counts: Record<string, number>;
+    rewrites: Array<{
+        path: string;
+        from: string;
+        to: string;
+    }>;
+    droppedFields: Array<{
+        path: string;
+        field: string;
+    }>;
+    skipped: LegacyCorpus['skipped'];
+    /** Every clash or unreadable source the plan resolved, one line each. */
+    resolutions: ImportResolution[];
+}
+export interface ImportPlan {
+    owners: PlannedOwner[];
+    documents: PlannedDocument[];
+    profileLimits: PlannedProfileLimits[];
+    blockers: ImportBlocker[];
+    report: ImportReport;
+}
+export interface PlanContext {
+    roots: LegacyRoots;
+    /** Ids in `on-disk-migrations.json`, or null when it is absent. */
+    markerIds: string[] | null;
+    /** Repo identity of a git checkout root (repo-sync `identifyCheckout`). */
+    repoIdentity: (root: string) => CheckoutIdentity;
+    /** Owner objects already in canvas.db; a new handle must not take one of theirs. */
+    existingOwners: Array<{
+        type: string;
+        handle: string;
+        externalId: string | null;
+    }>;
+    /** Stored profile rows (scoped-state) with their current `delivery_limits`. */
+    storedProfiles: Array<{
+        id: string;
+        deliveryLimits: Record<string, string>;
+    }>;
+    home?: string;
+}
+export declare function planImport(corpus: LegacyCorpus, ctx: PlanContext): ImportPlan;

package/dist/migrations/004-canvas-documents/plan.js

@@ -0,0 +1,3 @@
+var ae=Object.defineProperty;var c=(o,a)=>ae(o,"name",{value:a,configurable:!0});import{realpathSync as de}from"node:fs";import{homedir as pe}from"node:os";import{isAbsolute as le,join as ce,relative as fe}from"node:path";import{parseFrontmatterGeneric as he}from"../../core/frontmatter.js";import{handleHint as me}from"../../core/graph/repo-sync/identity.js";import{andIntoRules as ue,documentFields as ye}from"./fields.js";import{rewritePointers as we}from"./pointers.js";const $e=["001-surfaces-frontmatter","002-profile-project-memory","003-repository-root-memory-identity"],U=["none","name","preview","content"];function O(o){try{return de(o)}catch{return o}}c(O,"real");const X=c(o=>o.replace(/^app:/,""),"appHandle");function Re(o,a){const v=[],m={},d=c((e,n=1)=>{m[e]=(m[e]??0)+n},"count"),p=[],u=[],g=[],l=c(e=>{g.push(e),d(`resolutions.${e.kind}`)},"resolve");o.docs.length>0&&[...a.markerIds??[]].sort().join(`
+`)!==[...$e].sort().join(`
+`)&&v.push({kind:"marker",paths:[],message:`this runtime skipped the store migrations of the previous release (on-disk-migrations.json lists ${a.markerIds===null?"nothing":JSON.stringify(a.markerIds)}); start the previous crtr release once, then upgrade`});for(const e of o.docs)e.invalid!==void 0&&l({kind:e.invalid.kind,paths:[e.path],message:e.invalid.kind==="invalid-source"?`${e.path}: ${e.invalid.reason} \u2014 imported the whole file as the body, with no rules`:`${e.path}: ${e.invalid.reason} \u2014 imported the current file without its history`});const k=new Map,G=new Map,x=c((e,n)=>G.get(`${e}\0${n}`),"held"),S=c((e,n,t)=>{G.set(`${e}\0${n}`,t)},"hold"),Y=c(e=>e.type==="repo"&&e.externalId!==null?`repo:${e.externalId}`:e.type==="person"?"person":e.type==="profile"&&e.externalId!==null?`profile:${e.externalId}`:`${e.type}:${e.handle}`,"keyOfExisting");for(const e of a.existingOwners)S(e.type,e.handle,Y(e));const W=c((e,n)=>{let t=2;for(;x(e,`${n}-${t}`)!==void 0;)t+=1;return`${n}-${t}`},"freeHandle"),M=c(e=>{const n=k.get(e.key);if(n!==void 0)return n;const t=x(e.type,e.handle),r=t!==void 0&&t!==e.key?W(e.type,e.handle):e.handle,s={...e,handle:r};return S(s.type,r,s.key),k.set(s.key,s),s},"claim");for(const e of a.existingOwners)e.type==="person"&&k.set("person",{key:"person",type:"person",handle:e.handle});const z=M({key:"person",type:"person",handle:"user"}),Z=new Map(a.roots.profiles.map(e=>[e.id,e])),ee=new Set(a.roots.nodes.map(e=>e.id)),te=new Map(a.roots.nodes.map(e=>[e.id,e.dir])),C=new Map;for(const e of[...a.roots.profiles].sort((n,t)=>n.id.localeCompare(t.id))){const n=x("profile",e.name);if(n===void 0||n===`profile:${e.id}`){C.set(e.id,e.name),S("profile",e.name,`profile:${e.id}`);continue}const t=x("profile",e.id)===void 0?e.id:W("profile",e.id);C.set(e.id,t),S("profile",t,`profile:${e.id}`),l({kind:"profile-handle",paths:e.manifestPath===void 0?[]:[e.manifestPath],message:`profile ${e.id} shares the name \`${e.name}\` with ${n}; it takes the handle \`${t}\``})}const N=new Map,E=new Map,B=c((e,n)=>{if(E.has(e.root))return;const t=e.commonDir===null?{ok:!1,code:"not-a-repo",dir:e.root,reason:"no .git"}:a.repoIdentity(e.root);let r="local-path",s=O(e.root),i=me(s);t.ok?(r=t.scheme,s=t.externalId,i=t.handleHint):t.code!=="not-a-repo"&&l({kind:"repo-identity",paths:n,message:`${e.root}: repo identity lookup failed (${t.code}: ${t.reason}); imported as the local-path repo ${s}`});const f=`repo:${s}`;E.set(e.root,f);const h=a.existingOwners.find(y=>y.type==="repo"&&y.externalId===s),w=N.get(f);w!==void 0?w.roots.push(e.root):N.set(f,{key:f,scheme:r,externalId:s,wanted:h?.handle??e.namespace??i,roots:[e.root]})},"identify");for(const e of o.storeRoots)e.owner.type==="repo"&&e.skipped===void 0&&B(e.owner,[e.root]);for(const e of o.docs)e.owner.type==="repo"&&B(e.owner,[e.path]);const J=new Map,K=new Map;for(const e of N.values())K.set(e.wanted,[...K.get(e.wanted)??[],e]);for(const[e,n]of[...K].sort(([t],[r])=>t.localeCompare(r))){const t=c(r=>x("repo",e)===r.key?0:r.scheme==="git"?1:2,"rank");n.sort((r,s)=>t(r)-t(s)||r.externalId.localeCompare(s.externalId));for(const r of n){const s=M({key:r.key,type:"repo",handle:e,scheme:r.scheme,externalId:r.externalId});s.handle!==e&&(J.set(r.key,{from:e,to:s.handle}),l({kind:"repo-handle",paths:r.roots,message:`repo ${r.externalId} (${r.roots.join(", ")}) wanted the handle \`${e}\`, held by ${x("repo",e)}; it takes \`${s.handle}\` and its documents' \`[[${e}/\u2026]]\` links are rewritten to match`}))}}const P=new Map;for(const[e,n]of E)P.set(e,k.get(n));const ne=c(e=>P.get(e.root),"repoOwner"),oe=c(e=>{const n=Z.get(e),t=M({key:`app:${X(n?.app??"app:terminal")}`,type:"app",handle:X(n?.app??"app:terminal")});return M({key:`profile:${e}`,type:"profile",handle:C.get(e)??n?.name??e,ownerKey:t.key})},"profileOwner"),re=c(e=>{switch(e.owner.type){case"person":return z;case"profile":return oe(e.owner.id);case"repo":return ne(e.owner);case"node":return M({key:`node:${e.owner.id}`,type:"node",handle:e.owner.id})}},"ownerFor"),R=new Map;for(const e of o.docs)e.owner.type==="repo"&&e.mtime>(R.get(e.owner.root)??"")&&R.set(e.owner.root,e.mtime);const D=new Map;for(const[e,n]of P){const t=D.get(n.key);(t===void 0||(R.get(e)??"")>(R.get(t)??""))&&D.set(n.key,e)}const A=[...o.skipped],T=new Set,H=[],j=new Map;for(const e of o.docs){const n=re(e);if(e.owner.type==="repo"&&D.get(n.key)!==e.owner.root){T.has(e.owner.root)||(T.add(e.owner.root),A.push({path:e.owner.root,reason:`duplicate-clone: ${n.handle} imports from ${D.get(n.key)}`})),d("documents.duplicate-clone");continue}let t=n.key,r=e.name;const s=e.source==="report",i=ye(e.invalid?.kind==="invalid-source"?null:e.frontmatter,e.body,{...s?{kind:"report"}:{},missingPrivacy:n.type==="repo"?"public":"private"});for(const $ of i.dropped)p.push({path:e.path,field:$});let f=i.rules,h=i.preview;e.source==="context"&&r==="roadmap"&&(f=[...f,{on:"boot",deliver:"content"}],h=h||`The roadmap of node ${n.handle}`),h.trim()===""&&(h=e.name,l({kind:"empty-preview",paths:[e.path],message:`${e.path} has no text to preview; its preview is its name, ${e.name}`})),n.type==="repo"&&i.privacy!=="public"&&(f=ue(f,{repo:n.handle}),t=z.key,r=`${n.handle}/${r}`,d("documents.private-repo-to-person"));const w=ke(e,ee,l),y=k.get(t).handle,b={doc:e,qualified:`${y}/${r}`,contextDir:e.owner.type==="node"?ce(te.get(e.owner.id)??"","context"):null,repoKey:e.owner.type==="repo"?n.key:null,planned:{ownerKey:t,name:r,kind:i.kind,privacy:i.privacy,preview:h,summary:i.summary,whyItExists:i.whyItExists,unlisted:i.unlisted,lintIgnore:i.lintIgnore,extensions:i.extensions,rules:f,revisions:w,sourcePath:e.path}},_=`${t}\0${r}`,I=j.get(_);if(I!==void 0){const $=I.doc.mtime<=e.mtime?I:b;let L=1;for(;j.has(`${t}\0${r}.conflict-${L}`);)L+=1;$.planned.name=`${r}.conflict-${L}`,$.qualified=`${y}/${$.planned.name}`,j.set(`${t}\0${$.planned.name}`,$),j.set(_,$===I?b:I),l({kind:"name-clash",paths:[I.doc.path,e.path],message:`${I.doc.path} and ${e.path} both import as \`${y}/${r}\`; the newer keeps the name and ${$.doc.path} imports as \`${$.planned.name}\``})}else j.set(_,b);H.push(b),d(`documents.${i.kind}`),d(`documents.owner.${k.get(t).type}`),d("revisions",w.length)}const q=new Map,V=new Set,Q=new Set;for(const e of H){q.set(e.doc.path,e.qualified),q.set(O(e.doc.path),e.qualified),e.doc.source==="report"&&V.add(e.qualified);const n=k.get(e.planned.ownerKey);e.planned.name==="index"&&n.type!=="node"&&Q.add(n.handle)}const ie={byPath:q,reports:V,indexHandles:Q,home:a.home??pe(),real:O};for(const e of H){const n=e.planned.revisions[e.planned.revisions.length-1],t=we(n.body,ie,{contextDir:e.contextDir}),r=e.repoKey===null?void 0:J.get(e.repoKey);if(r!==void 0){const s=`[[${r.from}/`,i=`[[${r.to}/`;t.body.includes(s)&&(t.body=t.body.split(s).join(i),t.rewrites.push({from:s,to:i}))}if(t.rewrites.length!==0){n.body=t.body;for(const s of t.rewrites)u.push({path:e.doc.path,...s});d("documents.rewritten")}}const F=[],se=new Map(a.storedProfiles.map(e=>[e.id,e.deliveryLimits]));for(const e of a.roots.profiles){if(e.raw===void 0||e.manifestPath===void 0)continue;const n=Array.isArray(e.raw.projects)?e.raw.projects:[];if(!n.some(i=>i!==null&&typeof i=="object"&&"memory"in i))continue;const t=se.get(e.id);if(t===void 0){A.push({path:e.manifestPath,reason:`profile-not-stored: profile ${e.id} has a manifest but no stored profile row; its memory caps are not carried over`});continue}const r={...t},s=new Map;n.forEach(i=>{if(i===null||typeof i!="object"||!("memory"in i))return i;const{memory:f,...h}=i;if(f==="content"||typeof h.path!="string")return h;const w=ge(h.path,a,P);if(w===null)return A.push({path:e.manifestPath,reason:`delivery-limit-dropped: project ${h.path} (memory ${String(f)}) is in no repo and has no project store`}),h;const y=r[w];if(y!==void 0&&y!==f){const b=U.indexOf(String(f))>U.indexOf(y)?String(f):y;if(l({kind:"delivery-limit",paths:[e.manifestPath],message:`profile ${e.name}: ${s.get(w)??"delivery_limits"} and ${h.path} both map to repo \`${w}\` with different memory caps (${y}, ${String(f)}); kept the larger, ${b}`}),b===y)return h}return r[w]=String(f),s.set(w,h.path),h}),Object.keys(r).some(i=>r[i]!==t[i])&&F.push({profileId:e.id,deliveryLimits:r})}return d("profile-limits",F.length),m.stores=o.storeRoots.filter(e=>e.skipped===void 0).length,m["stores.duplicate-worktree"]=o.storeRoots.filter(e=>e.skipped!==void 0).length,m.owners=k.size,m["orphan-history"]=o.orphanHistory,m["orphan-node-dirs"]=o.orphanNodeDirs,m["non-markdown"]=o.nonMarkdown,m["exposure-ledgers-not-imported"]=o.injectedDocs,{owners:[...k.values()],documents:H.map(e=>e.planned),profileLimits:F,blockers:v,report:{stores:o.storeRoots,counts:m,rewrites:u,droppedFields:p,skipped:A,resolutions:g}}}c(Re,"planImport");function ge(o,a,v){const m=O(o);let d=null;for(const[u,g]of v){const l=fe(O(u),m);(l===""||!l.startsWith("..")&&!le(l))&&(d===null||u.length>d.root.length)&&(d={root:u,owner:g})}const p=a.repoIdentity(m);if(p.ok){const u=[...v.values()].find(l=>l.externalId===p.externalId);return u?u.handle:a.existingOwners.find(l=>l.type==="repo"&&l.externalId===p.externalId)?.handle??p.handleHint}return d?.owner.handle??null}c(ge,"projectHandle");function ke(o,a,v){const m=c(p=>typeof p=="string"&&a.has(p)?p:null,"author");if(o.source!=="store")return[{body:o.body,authorNodeId:o.owner.type==="node"&&a.has(o.owner.id)?o.owner.id:null,rationale:null,createdAt:o.mtime}];const d=[];for(const p of o.history){if(p.op!=="create"&&p.op!=="edit"&&p.op!=="move")continue;let u;try{u=he(p.after).body}catch(g){return v({kind:"invalid-history",paths:[o.path],message:`${o.path}: history record at ${p.at} has invalid frontmatter (${g.message}); imported the current file without its history`}),[{body:o.body,authorNodeId:null,rationale:null,createdAt:o.mtime}]}d.length>0&&d[d.length-1].body===u||d.push({body:u,authorNodeId:m(p.node),rationale:p.rationale??null,createdAt:p.at})}if(d.length===0){const p=o.frontmatter?.origin??{},u=c(l=>typeof l=="string"?l:l instanceof Date?l.toISOString():null,"stamp"),g=u(p.created)??u(o.frontmatter?.["last-updated"])??o.mtime;return[{body:o.body,authorNodeId:m(p.node),rationale:null,createdAt:g}]}return d[d.length-1].body!==o.body&&d.push({body:o.body,authorNodeId:null,rationale:"changed outside crtr before import",createdAt:o.mtime}),d}c(ke,"revisionsOf");export{$e as CONVERGED_MARKER_IDS,Re as planImport};

package/dist/migrations/004-canvas-documents/pointers.d.ts

@@ -0,0 +1,23 @@
+export interface PointerTargets {
+    /** Absolute file path (as read and realpath) → qualified document name. */
+    byPath: ReadonlyMap<string, string>;
+    /** `<node-id>/reports/<stem>` of every imported report. */
+    reports: ReadonlySet<string>;
+    /** Owner handles that have an imported `index` document. */
+    indexHandles: ReadonlySet<string>;
+    home: string;
+    /** Resolve symlinks of a path that is not in `byPath` as written; returns the input when it does not exist. */
+    real: (path: string) => string;
+}
+export interface PointerContext {
+    /** The node folder's `context/` dir when the document is owned by a node (for `$CRTR_CONTEXT_DIR/…`). */
+    contextDir: string | null;
+}
+/** Rewrite one head body; `rewrites` receives every replacement made. */
+export declare function rewritePointers(body: string, t: PointerTargets, ctx: PointerContext): {
+    body: string;
+    rewrites: Array<{
+        from: string;
+        to: string;
+    }>;
+};

package/dist/migrations/004-canvas-documents/pointers.js

@@ -0,0 +1,4 @@
+var T=Object.defineProperty;var f=(s,t)=>T(s,"name",{value:t,configurable:!0});import{join as a}from"node:path";const _=/(?<![\w./$-])((?:~|\$CRTR_CONTEXT_DIR|\$\{CRTR_CONTEXT_DIR\})?\/[^\s()[\]<>`'"]*?\.md)(?![\w-]|\.[\w-])/g,m=/(?<![\w/-])([a-z0-9]+(?:-[a-z0-9]+)+):reports\/([A-Za-z0-9._-]+?)(?:\.md)?(?![\w-]|\.[\w-])/g,g=/\[\[([^\]|#/\s]+)((?:[|#][^\]]*)?)\]\]/g;function R(s,t,l){let r;if(s.startsWith("~/"))r=a(t.home,s.slice(2));else if(s.startsWith("$")){if(l.contextDir===null)return null;r=a(l.contextDir,s.slice(s.indexOf("/")+1))}else r=s;return t.byPath.get(r)??t.byPath.get(t.real(r))??null}f(R,"resolvePointer");function $(s,t,l){const r=`${s}/reports/${t}`;return l.reports.has(r)?r:null}f($,"resolveReport");function d(s,t,l,r){const c=f((e,n)=>n===null?e:(r.push({from:e,to:`[[${n}]]`}),`[[${n}]]`),"sub");return s.replace(_,(e,n)=>c(e,R(n,t,l))).replace(m,(e,n,u)=>c(e,$(n,u,t))).replace(g,(e,n,u)=>{if(!t.indexHandles.has(n))return e;const o=`[[${n}/index${u}]]`;return r.push({from:e,to:o}),o})}f(d,"rewriteText");function x(s,t,l,r,c){const e=t.trim(),n=/^([a-z0-9]+(?:-[a-z0-9]+)+):reports\/([A-Za-z0-9._-]+?)(?:\.md)?$/.exec(e),u=n!==null?$(n[1],n[2],l):/^(?:~|\$CRTR_CONTEXT_DIR|\$\{CRTR_CONTEXT_DIR\})?\/\S*\.md$/.test(e)?R(e,l,r):null;return u===null?s:(c.push({from:s,to:`[[${u}]]`}),`[[${u}]]`)}f(x,"rewriteCodeSpan");function D(s,t,l){const r=[],c=[];let e=null,n=[];const u=f(()=>{if(n.length===0)return;const o=n.join(`
+`),i=[];let h=0;for(const p of o.matchAll(/(`+)([^`]|[^`][\s\S]*?[^`])\1(?!`)/g))i.push(d(o.slice(h,p.index),t,l,r)),i.push(x(p[0],p[2],t,l,r)),h=p.index+p[0].length;i.push(d(o.slice(h),t,l,r)),c.push(i.join("")),n=[]},"flush");for(const o of s.split(`
+`)){const i=/^\s*(`{3,}|~{3,})/.exec(o)?.[1];e===null&&i!==void 0?(u(),e=i,c.push(o)):e!==null?(c.push(o),i!==void 0&&i[0]===e[0]&&i.length>=e.length&&o.trim()===i&&(e=null)):n.push(o)}return u(),{body:c.join(`
+`),rewrites:r}}f(D,"rewritePointers");export{D as rewritePointers};

package/dist/migrations/activation.d.ts

@@ -0,0 +1,17 @@
+import { type CanvasImportResult } from './004-canvas-documents/index.js';
+export type { CanvasImportResult } from './004-canvas-documents/index.js';
+/** A migration blocker is a STANDING condition, not a transient fault: the same
+ *  stores produce the same blockers on every boot, so a caller that retries a
+ *  daemon start against one retries forever. Typing it lets the startup path
+ *  tell "try again" apart from "this needs a human", and carry the repair line
+ *  to whoever can act on it. */
+export declare class MigrationBlockedError extends Error {
+    readonly blockerPaths: readonly string[];
+    constructor(message: string, blockerPaths: readonly string[]);
+}
+/** Startup: import the legacy stores unless already recorded. Throws `MigrationBlockedError` when the plan has blockers. */
+export declare function activateCanvasImport(): Promise<CanvasImportResult | null>;
+/** `crtr sys migrate`: plan (and unless `dryRun`, apply) regardless of startup state. */
+export declare function runForcedCanvasImport(opts: {
+    dryRun: boolean;
+}): Promise<CanvasImportResult>;

package/dist/migrations/activation.js

@@ -0,0 +1,2 @@
+var a=Object.defineProperty;var o=(r,t)=>a(r,"name",{value:t,configurable:!0});import{mkdirSync as c}from"node:fs";import{dirname as m}from"node:path";import{onDiskMigrationLockPath as u}from"../core/canvas/paths.js";import{withExclusiveDirectoryLockAsync as p}from"../core/exclusive-lock.js";import{DAEMON_STARTUP_WINDOW_MS as l}from"../daemon/startup-policy.js";import{canvasImportDone as h,runCanvasImport as s}from"./004-canvas-documents/index.js";class d extends Error{static{o(this,"MigrationBlockedError")}blockerPaths;constructor(t,n){super(t),this.name="MigrationBlockedError",this.blockerPaths=n}}function i(r){const t=u();return c(m(t),{recursive:!0,mode:448}),p(t,async()=>r(),{timeoutMs:l,timeoutError:o(()=>new Error(`timed out waiting for the canvas import lock: ${t}`),"timeoutError")})}o(i,"coordinate");async function M(){return i(()=>{if(h())return null;const r=s({dryRun:!1});if(r.blockers.length>0){const t=[...new Set(r.blockers.flatMap(e=>e.paths))],n=[`canvas import (004-canvas-documents) blocked by ${r.blockers.length} finding(s)`,...r.blockers.map(e=>`${e.kind}: ${e.message}`)];throw n.push("Repair each finding, then: crtr sys migrate --dry-run, then crtr sys migrate"),new d(n.join(`
+`),t)}return r})}o(M,"activateCanvasImport");async function w(r){return i(()=>s(r))}o(w,"runForcedCanvasImport");export{d as MigrationBlockedError,M as activateCanvasImport,w as runForcedCanvasImport};

package/dist/native/linux.d.ts

@@ -0,0 +1,29 @@
+import type { Socket } from 'node:net';
+export interface LinuxNative {
+    peerCred(fd: number): {
+        pid: number;
+        uid: number;
+        gid: number;
+    };
+    openat2(dirfd: number, path: string, flags: number, resolve: number): number;
+    fdPath(fd: number): string;
+    fstat(fd: number): {
+        uid: number;
+        gid: number;
+        mode: number;
+        nlink: number;
+        dev: bigint;
+        ino: bigint;
+    };
+    sendFds(socketFd: number, data: string, fds: number[]): void;
+    recvFds(socketFd: number): {
+        data: string;
+        fds: number[];
+    };
+}
+export declare const O_PATH = 2097152;
+export declare const O_CLOEXEC = 524288;
+export declare const RESOLVE_NO_SYMLINKS = 4;
+export declare const RESOLVE_BENEATH = 8;
+export declare function loadLinuxNative(): LinuxNative | undefined;
+export declare function peerUid(socket: Socket): number;

package/dist/native/linux.js

@@ -0,0 +1 @@
+var t=Object.defineProperty;var n=(r,e)=>t(r,"name",{value:e,configurable:!0});import{createRequire as i}from"node:module";const p=2097152,x=524288,c=4,s=8;function a(){if(process.platform==="linux")return i(import.meta.url)(`./linux/${process.arch}/addon.node`)}n(a,"loadLinuxNative");function f(r){const e=r._handle?.fd;if(e===void 0||e<0)throw new Error("unix socket peer fd is unavailable");const o=a();if(!o)throw new Error("Linux peer credentials are unavailable");return o.peerCred(e).uid}n(f,"peerUid");export{x as O_CLOEXEC,p as O_PATH,s as RESOLVE_BENEATH,c as RESOLVE_NO_SYMLINKS,a as loadLinuxNative,f as peerUid};

package/dist/pi-extensions/broker-local.d.ts

@@ -0,0 +1,19 @@
+/** Persist a bare root's first real interactive message without clobbering an
+ * existing spawning mandate. This is broker-local file state, not canvas.db. */
+export declare function captureGoalIfAbsent(nodeId: string, text: string): boolean;
+/** The node's `roadmap` document body, read through crtrd (`/v1`), or null. */
+export declare function readRoadmap(nodeId: string): Promise<string | null>;
+/** Generate and commit the first name for a node. The initial operation is
+ * guarded by crtrd, so a concurrent rename or another broker cannot be
+ * overwritten after this projection becomes stale. */
+export declare function generateAndCommitInitialName(nodeId: string, prompt: string, onNamed?: (editorLabel: string) => void): void;
+/** Generate and commit a recap-driven name against the exact node projection
+ * captured before the one-shot model call. The daemon owns the compare-and-set
+ * so a human rename or another generated update wins without a fallback write. */
+export declare function generateAndCommitRecapName(nodeId: string, conversation: string, expected: {
+    name: string;
+    description: string;
+    title: string;
+    icon: string;
+    kind: string;
+}, isStillAutomatic: () => boolean, onNamed?: (editorLabel: string) => void): void;

package/dist/pi-extensions/broker-local.js

@@ -0,0 +1,2 @@
+var f=Object.defineProperty;var o=(i,t)=>f(i,"name",{value:t,configurable:!0});import{existsSync as s,mkdirSync as u,readFileSync as l,writeFileSync as b}from"node:fs";import{join as h}from"node:path";import{contextDir as y}from"../core/canvas/paths.js";import{brokerExtensionState as d,commitBrokerGeneratedName as c}from"../core/runtime/broker/daemon-ops.js";import{publishNodeNamed as N}from"../core/runtime/broker/node-named.js";import{headlessName as x,headlessNameFromConversation as L,sanitizeSessionName as S,sanitizeSessionTitle as k,slugFromPrompt as F,titleFromPrompt as v}from"../core/runtime/naming.js";function R(i,t){const r=y(i),n=h(r,"initial-prompt.md");if(s(n)&&l(n,"utf8").trim()!=="")return!1;const e=t.trim();return e===""?!1:(u(r,{recursive:!0}),b(n,`${e}
+`,"utf8"),!0)}o(R,"captureGoalIfAbsent");async function j(i){return(await d(i)).roadmap}o(j,"readRoadmap");function p(i,t){return{description:S(t.name)||F(i),title:k(t.title)||v(i),icon:t.icon}}o(p,"generatedLabel");function B(i,t,r){const n=t.trim();n!==""&&d(i).then(e=>{if((e.node.description??"").trim()==="")return x(n).then(a=>c(i,{kind:"initial",...p(n,a)}))}).then(e=>{!e?.applied||e.editorLabel===void 0||(N({description:e.description??"",title:e.title??"",icon:e.icon??"",editorLabel:e.editorLabel}),r?.(e.editorLabel))}).catch(()=>{})}o(B,"generateAndCommitInitialName");function D(i,t,r,n,e){const a=t.trim();a!==""&&L(a).then(m=>{if(n())return c(i,{kind:"recap",...p(a,m),expected:r})}).then(m=>{m?.applied&&m.editorLabel!==void 0&&e?.(m.editorLabel)}).catch(()=>{})}o(D,"generateAndCommitRecapName");export{R as captureGoalIfAbsent,B as generateAndCommitInitialName,D as generateAndCommitRecapName,j as readRoadmap};

package/dist/pi-extensions/canvas-bash-valve.d.ts

@@ -0,0 +1,23 @@
+export { MAX_BACKGROUND_BASH_LOG_BYTES, BACKGROUND_BASH_LOG_TRUNCATION_MARKER } from '../core/bash-job-supervisor.js';
+import { createBashToolDefinition, type BashOperations } from '@earendil-works/pi-coding-agent';
+import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
+/** One foreground command handed to the background job system, reported so the
+ * tool result can stand in for the output the agent will no longer receive. */
+export type BashHandoff = {
+    jobId: string;
+    logPath: string;
+    notice: string;
+};
+/** The valve's BashOperations backend. Each tool execution closes over its own
+ * `takePurpose` and its own preview-result path, so concurrent calls cannot
+ * exchange labels or result mirrors. The purpose is consumed even when the
+ * command is invalid or refused, leaving no state to leak later. */
+export declare function createValveOperations(nodeId: string, contextDir: string, takePurpose?: () => string | null, previewPath?: string, onHandoff?: (handoff: BashHandoff) => void): BashOperations;
+type BashToolDefinition = ReturnType<typeof createBashToolDefinition>;
+/** Build the valve-backed bash tool and, when configured, add `purpose` to its
+ * schema. Bind each purpose directly to its own execution: Pi may preflight a
+ * batch before starting its calls, so a shared "next purpose" slot could give a
+ * concurrent call the wrong label. Disabled means absent, not merely ignored —
+ * the model receives pi's upstream bash schema verbatim. */
+export declare function createValveToolDefinition(nodeId: string, contextDir: string, cwd: string, exposePurpose: boolean): BashToolDefinition;
+export default function (pi: ExtensionAPI): void;

package/dist/pi-extensions/canvas-bash-valve.js

@@ -0,0 +1,7 @@
+var ce=Object.defineProperty;var r=(t,n)=>ce(t,"name",{value:n,configurable:!0});import{envBashAutoBgDeadlineMs as ue,envBashValveMs as fe,envNodeId as le}from"../shared/env.js";import{spawn as be}from"node:child_process";import{closeSync as he,existsSync as B,mkdirSync as q,openSync as pe,readFileSync as X,readSync as me,rmSync as Y,statSync as Q,writeFileSync as j}from"node:fs";import{homedir as ge}from"node:os";import{dirname as we}from"node:path";import{performance as P}from"node:perf_hooks";import{backgroundBashJob as Z,bashJobPaths as ye,cancelBashJobProcessTree as je,countJobLogLines as Ie,formatBashElapsed as ee,newBashJobId as Se,normalizeBashJobPurpose as Ee,readBashNiceness as ve,tailJobLog as Be,writeJobDeadlineMs as _e}from"../core/bash-jobs.js";import{BASH_JOB_SUPERVISOR_SCRIPT as Le}from"../core/bash-job-supervisor.js";import{MAX_BACKGROUND_BASH_LOG_BYTES as gt,BACKGROUND_BASH_LOG_TRUNCATION_MARKER as wt}from"../core/bash-job-supervisor.js";import{recordBackgroundedJob as xe,startBrokerBashJob as Re,stopBrokerBashJob as ke}from"../core/runtime/broker/daemon-ops.js";import{bashCommandRefusal as Te}from"../core/bash-guard.js";import{capturePidIdentities as Oe}from"../core/canvas/pid.js";import{readConfig as $e}from"../core/config.js";import{PREVIEW_RESULT_PATH_ENV as Ae,previewResultPath as Pe}from"../core/preview-result-path.js";import{resolveAdmittedHostCommand as Ce}from"../core/runtime/spawn-env.js";import{freshChildNodeExecPath as Ne}from"../core/runtime/branded-host.js";import{Type as C}from"typebox";import{createBashToolDefinition as te}from"@earendil-works/pi-coding-agent";const Je=200;function Me(){return fe()}r(Me,"resolveValveMs");function De(t){return ye(t,Se())}r(De,"makeJobPaths");const _=new Set;let ne=!1;function oe(){for(const t of[..._])try{Z(t),_.delete(t)}catch(n){process.stderr.write(`crtr: failed to background bash job ${t.jobId} during broker termination: ${n.message}
+`)}}r(oe,"backgroundLiveJobsForTermination");function He(){ne||(ne=!0,process.prependListener("SIGTERM",oe),process.platform!=="win32"&&process.prependListener("SIGHUP",oe))}r(He,"installTerminationHandoff");const Ue=64*1024;function N(t,n,i){let s;try{s=Q(t)}catch{return n}if(s.size<=n)return n;const u=pe(t,"r");try{for(;n<s.size;){const m=Math.min(Ue,s.size-n),g=Buffer.allocUnsafe(m),d=me(u,g,0,m,n);if(d===0)break;i(g.subarray(0,d)),n+=d}return n}finally{he(u)}}r(N,"tailOnce");function p(t){try{Y(t,{recursive:!0,force:!0})}catch{}}r(p,"cleanupJobDir");function Fe(t){try{const n=X(t,"utf8").trim(),i=Number(n);return Number.isFinite(i)?i:null}catch{return null}}r(Fe,"readExitCode");function Ge(t){try{if(Q(t).isDirectory())return{cwd:t}}catch{}const n=ge();return{cwd:n,warning:`[working directory no longer exists: ${t}; running from ${n}]
+`}}r(Ge,"resolveExecutionCwd");function re(t,n,i=()=>null,s,u=()=>{}){return{exec:r(async(m,g,{onData:d,signal:b,timeout:w,env:T})=>{const O=await Ne();return new Promise((L,c)=>{const $=i();if(b?.aborted){c(new Error("aborted"));return}const x=Te(m,g);if(x!==null){c(new Error(x));return}const e=De(n);q(e.dir,{recursive:!0}),j(e.cmdSh,m),j(e.jobLog,""),j(e.jobRun,""),$!==null&&j(e.jobPurpose,$);let h=0,R=!1,f,y,I,J=!1;const M=process.platform==="linux",D=P.now(),ie=Me();let S;const se=r(()=>{S&&clearInterval(S),b&&b.removeEventListener("abort",G),_.delete(e)},"teardown"),l=r(o=>{R||(R=!0,se(),o())},"finish");let H=!1;function A(o=!1){R||H||(H=!0,S&&clearInterval(S),xe(t,e.jobId,{command:X(e.cmdSh,"utf8"),job_dir:e.dir,log_path:e.jobLog}).then(()=>U(o,""),a=>U(o,`
+[crtr could not record job ${e.jobId} (${a.message}); it will NOT message you when it exits. Watch its log.]`)))}r(A,"finishBackground");function U(o,a){const de=ee(P.now()-D);let K="";if(o){const W=ue();_e(e,Date.now()+W),K=`It will be CANCELED in ${ee(W)} unless you claim it: crtr node bash extend ${e.jobId} --for <duration> (or --keep to run to completion). `}const z=`
+[backgrounded as job ${e.jobId} after ${de} in the foreground${o?" (auto)":""}. `+K+(a===""?"It will interrupt you with a message when it exits. ":"")+`Watch: tail -f ${e.jobLog} ; stop: crtr node bash kill ${e.jobId}]`;d(Buffer.from(z+a)),u({jobId:e.jobId,logPath:e.jobLog,notice:z+a}),l(()=>L({exitCode:0}))}r(U,"handOff");function F(){h=N(e.jobLog,h,d);const o=Fe(e.jobExit);l(()=>L({exitCode:o})),p(e.dir)}r(F,"finishForeground");function ae(o=!1){const a=Z(e);if(a==="backgrounded"||a==="already-backgrounded"){A(o);return}if(a==="finished"){F();return}l(()=>c(new Error(`bash job ${e.jobId} disappeared before it could be backgrounded`))),p(e.dir)}r(ae,"requestBackground");function k(o){if(!(R||J)){if(h=N(e.jobLog,h,d),B(e.jobBg)){A();return}if(!B(e.jobExit)){if(f===void 0){I??=o;return}if(M){J=!0,ke(t,e.jobId).then(()=>{l(()=>c(o)),p(e.dir)},a=>l(()=>c(a)));return}f!==void 0&&y!==void 0&&je(f,y),l(()=>c(o)),p(e.dir)}}}r(k,"requestStop");function G(){k(new Error("aborted"))}r(G,"onAbort"),b&&b.addEventListener("abort",G,{once:!0});const E=Ge(g);E.warning&&d(Buffer.from(E.warning));let v=T??process.env;s!==void 0&&(q(we(s),{recursive:!0}),Y(s,{force:!0}),v={...v,[Ae]:s});const V=Ce("bash",v,E.cwd);if(M)Re(t,{job_id:e.jobId,cwd:E.cwd,env:v}).then(({pid:o})=>{f=o,y=`launcher:${o}`,_.add(e),I!==void 0&&k(I)},o=>{l(()=>c(o)),p(e.dir)});else{const o=be(V,["-c",Le,"--",e.cmdSh,e.jobLog,e.jobExit,e.jobRun,e.jobDone,V,String(ve(n)),O],{cwd:E.cwd,detached:!0,stdio:"ignore",env:v});if(o.on("error",a=>{l(()=>c(a)),p(e.dir)}),f=o.pid,f!==void 0){if(y=Oe([f])?.get(f),y===void 0){try{process.kill(-f,"SIGKILL")}catch{}l(()=>c(new Error(`bash job ${e.jobId} started without a process identity`))),p(e.dir);return}j(e.jobPgid,String(f)),j(e.jobPgidIdentity,y),_.add(e),I!==void 0&&k(I)}o.unref()}S=setInterval(()=>{if(h=N(e.jobLog,h,d),B(e.jobDone)){F();return}if(B(e.jobBg)){A();return}if(B(e.jobExit))return;const o=P.now()-D;if(w!==void 0&&w>0){o>=w*1e3&&k(new Error(`timeout:${w}`));return}o>=ie&&ae(!0)},Je)})},"exec")}}r(re,"createValveOperations");const Ve=["One short clause naming what this step is FOR, in the words of the person you",'are working for \u2014 "Reading the Acme thread", not "Fetching emails" and never','"Running GMAIL_FETCH_EMAILS". A person reads this while the command runs; it',"is the only thing they see of this step. Under about eight words. Omit it for","steps that only touch your own scratch work."].join(" "),Ke=3;function ze(t){const n=Be(t.logPath,Ke),i=Math.max(0,Ie(t.logPath)-n.length),s=n.length===0?"(no output yet)":n.join(`
+`),u=i===0?"":`
+[${i} earlier output line${i===1?"":"s"} are in the job log only]`;return{content:[{type:"text",text:`${s}${u}${t.notice}`}],details:void 0}}r(ze,"handoffResult");function We(t){return{...t,parameters:C.Object({purpose:C.Optional(C.String({description:Ve})),...t.parameters.properties})}}r(We,"withPurpose");function qe(t,n,i,s){const u=te(i,{operations:re(t,n)});return{...s?We(u):u,execute:r(async(d,b,w,T,O)=>{const L=s?Ee(b.purpose):null;let c=null;const x=await te(i,{operations:re(t,n,()=>L,Pe(d),h=>{c=h})}).execute(d,b,w,T,O),e=c;return e===null?x:ze(e)},"execute")}}r(qe,"createValveToolDefinition");function Xe(t){const n=le();if(n===void 0||n.trim()==="")return;const i=process.env.CRTR_CONTEXT_DIR;i===void 0||i.trim()===""||(He(),t.on("session_start",(s,u)=>{t.registerTool(qe(n,i,u.cwd,$e("user").bash_tool_purpose))}))}r(Xe,"default");export{wt as BACKGROUND_BASH_LOG_TRUNCATION_MARKER,gt as MAX_BACKGROUND_BASH_LOG_BYTES,re as createValveOperations,qe as createValveToolDefinition,Xe as default};