@north-light/cli 0.0.0-stage → 0.3.413

package/dist/commands/pkg/market.d.ts

@@ -0,0 +1 @@
+export declare const marketBranch: import("../../core/command.js").BranchDef;

package/dist/commands/pkg/market.js

@@ -0,0 +1 @@
+import{defineBranch as e}from"../../core/command.js";import{marketAdd as r,marketRemove as a,marketUpdate as o}from"./market-manage.js";import{marketBrowse as t,marketList as n}from"./market-inspect.js";const l=e({name:"market",description:"manage and browse marketplace sources",whenToUse:"working with marketplace sources: add or remove a marketplace repo, refresh registered sources, list them, or browse one source for plugin install refs. Use `pkg plugin install marketplace/plugin` to install a plugin from a marketplace.",help:{name:"pkg market",summary:"marketplace source management and browsing",model:"Marketplaces are git repos containing a .crouter-marketplace/marketplace.json index. This branch owns sources only; plugin lifecycle is under `pkg plugin`."},children:[r,a,o,n,t]});export{l as marketBranch};

package/dist/commands/pkg/plugin-env.d.ts

@@ -0,0 +1,3 @@
+import type { PluginManifest } from '../../types.js';
+/** Collect only missing declared names. The daemon decides which app owns this CLI's request. */
+export declare function collectPluginEnv(manifest: PluginManifest): Promise<string[]>;

package/dist/commands/pkg/plugin-env.js

@@ -0,0 +1,4 @@
+var f=Object.defineProperty;var c=(e,r)=>f(e,"name",{value:r,configurable:!0});import{cliClient as u}from"../api-client.js";import{requiredPluginEnv as l}from"../../core/plugin-env.js";async function v(e){const r=l(e.env);if(!r.length)return[];const t=new Set((await u().listAppEnv()).names),i=[];for(const n of r){if(t.has(n))continue;const s=e.env[n];if(!process.stdin.isTTY||!process.stdout.isTTY){i.push(`Warning: plugin "${e.name}" needs ${n}; set it with crtr sys env set --name ${n}`);continue}process.stderr.write(`${e.name}: ${s.description}${s.url?` (${s.url})`:""}
+${n} (Enter to skip): `);const o=await d(s.secret!==!1);o?(await u().setAppEnv(n,o),t.add(n)):i.push(`Warning: plugin "${e.name}" needs ${n}; set it with crtr sys env set --name ${n}`)}return i}c(v,"collectPluginEnv");function d(e){return new Promise(r=>{const t=process.stdin,i=t.isRaw;let n="";e&&t.setRawMode(!0),t.resume();const s=c(()=>{t.off("data",o),e&&t.setRawMode(i),t.pause(),process.stderr.write(`
+`),r(n)},"finish"),o=c(p=>{for(const a of p.toString("utf8")){if(a==="\r"||a===`
+`){s();return}if(a===""){n="",s();return}if(a==="\x7F"){n=n.slice(0,-1);continue}n+=a}},"onData");t.on("data",o)})}c(d,"readPrompt");export{v as collectPluginEnv};

package/dist/commands/pkg/plugin-inspect.d.ts

@@ -0,0 +1,2 @@
+export declare const pluginList: import("../../core/command.js").LeafDef;
+export declare const pluginShow: import("../../core/command.js").LeafDef;

package/dist/commands/pkg/plugin-inspect.js

@@ -0,0 +1 @@
+var b=Object.defineProperty;var u=(t,a)=>b(t,"name",{value:a,configurable:!0});import{defineLeaf as f}from"../../core/command.js";import{notFound as k}from"../../core/errors.js";import{paginate as v}from"../../core/pagination.js";import{listInstalledPlugins as x,findPluginByName as p}from"../../core/resolver.js";import{packageFiles as j}from"../../core/graph/package-files.js";import{validatePluginCommands as q,validateEffectiveCommandPlugins as P}from"../../core/command-plugins/discovery.js";import{compileHookRegistry as w,discoverHookRegistry as S}from"../../core/command-hooks/discovery.js";import{hasDeclaredHooks as R,hookReport as g}from"../../core/command-hooks/report.js";import{SUBTREE_NAMES as D,coreCommandPaths as C,coreHookCatalog as E,extensibleCoreBranches as M}from"../../build-root.js";import{pluginMemoryDir as _,resolveScopeArg as h,projectScopeRoot as y}from"../../core/scope.js";async function B(t){if(!R(t.manifest))return;const a=await E(),l=S(a),n=l.validations.find(i=>i.plugin.root===t.root);if(n===void 0){const i=w(a,[t]);return g(i.validations[0])}return g(n,l.issues.filter(i=>i.plugin===t.name&&i.scope===t.scope))}u(B,"hookInspectionReport");const V=f({name:"list",description:"paginated list of installed plugins",whenToUse:"enumerating installed plugins across user and project scope, optionally including disabled plugins",help:{name:"pkg plugin list",summary:"paginated list of installed plugins",params:[{kind:"flag",name:"scope",type:"enum",choices:["user","project","all"],required:!1,constraint:"Default: all."},{kind:"flag",name:"include-disabled",type:"bool",required:!1,constraint:"Include disabled plugins. Default: false."},{kind:"flag",name:"limit",type:"int",required:!1,default:50,constraint:"Default 50, max 200."},{kind:"flag",name:"cursor",type:"string",required:!1,constraint:"Opaque token from next_cursor. Omit on first call."}],output:[{name:"items",type:"object[]",required:!0,constraint:"Each: {name, scope, version?, enabled, transport, source_marketplace?, path}. transport is exec or http for command plugins, null for docs-only plugins. Sorted by scope then name ascending."},{name:"next_cursor",type:"string | null",required:!0,constraint:"null means no more items."},{name:"total",type:"integer | null",required:!0,constraint:"Exact when cheap; null otherwise."}],outputKind:"object",effects:["None. Read-only."]},run:u(async t=>{const a=t.scope,l=t.includeDisabled??!1,n=t.limit,i=n!==void 0?Math.min(Math.max(1,n),200):50,c=t.cursor;let m;if(a!==void 0){const e=h(a);m=e==="all"?["project","user"].filter(s=>s!=="project"||y()!==null):[e]}else m=["project","user"].filter(e=>e!=="project"||y()!==null);const o=m.flatMap(e=>x(e)).filter(e=>l||e.enabled).sort((e,s)=>e.scope==="project"&&s.scope!=="project"?-1:e.scope!=="project"&&s.scope==="project"?1:e.name.localeCompare(s.name)),d=v(o,{limit:i,cursor:c!==void 0?c:void 0},{defaultLimit:50,maxLimit:200,keyOf:u(e=>`${e.scope}:${e.name}`,"keyOf"),total:"count"});return{items:d.items.map(e=>({name:e.name,scope:e.scope,version:e.version,enabled:e.enabled,transport:e.manifest.transport?.kind??null,source_marketplace:e.sourceMarketplace,path:e.root})),next_cursor:d.next_cursor,total:d.total}},"run")}),W=f({name:"show",description:"read plugin manifest and substrate inventory",whenToUse:"reading one installed plugin in detail: manifest, provided documents, scope, path, and enabled state",help:{name:"pkg plugin show",summary:"read plugin manifest and metadata by name",params:[{kind:"positional",name:"name",type:"string",required:!0,constraint:"Plugin name."},{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Narrows resolution."}],output:[{name:"name",type:"string",required:!0,constraint:"Plugin name."},{name:"scope",type:"string",required:!0,constraint:"Scope the plugin is installed in."},{name:"path",type:"string",required:!0,constraint:"Absolute path to the plugin directory."},{name:"enabled",type:"boolean",required:!0,constraint:"Whether the plugin is active."},{name:"manifest",type:"object",required:!0,constraint:"Full plugin.json contents."},{name:"docs",type:"object[]",required:!0,constraint:"Each: {name, path}. Documents provided by the plugin (named under `<pluginName>/`)."},{name:"commands",type:"object",required:!1,constraint:"Present only when the plugin declares a command manifest (manifest.commands). {manifestPath: string, mounts: string[] (accepted command paths), extensibleBranches: string[] (plugin mount names accepting repository fragments), issues: object[] ({code, path?, message, received, expected, next})}. Validated statically; command execution never occurs."},{name:"hooks",type:"object",required:!1,constraint:"Present for every hook declaration, including hook-only plugins. {manifestPath?, executablePath?, declarations: {target, phase, op, description, effects}[], lifecycle?: {event, phase, op, description, effects}[], issues: object[] ({code, path?, message, received, expected, next}), trust: string}. Static only: no hook executable runs."}],outputKind:"object",effects:["None. Read-only. Command and lifecycle-hook manifests are validated statically; plugin executables are never executed."]},run:u(async t=>{const a=t.name,l=t.scope;let n;if(l!==void 0){const o=h(l);o==="all"||o==="builtin"?n=p(a):n=p(a,o)}else n=p(a);if(n===null)throw k(`plugin not found: ${a}`);const i=j(_(n)).files.map(o=>({name:`${n.name}/${o.name}`,path:o.path}));let c;if(typeof n.manifest.commands=="string"&&n.manifest.commands.length>0){const o=new Set(D),[d,e]=await Promise.all([C(),M()]),s=P(o,void 0,void 0,d,e).find(r=>r.plugin.root===n.root)??q(n,o,d,e);c={manifestPath:s.manifestPath,mounts:[...s.contributions.map(r=>r.node.name),...s.coreMounts.map(r=>[...r.parent,r.node.name].join(" "))],extensibleBranches:s.contributions.filter(r=>r.node.extensible===!0).map(r=>r.node.name),issues:s.issues}}const m=await B(n);return{name:n.name,scope:n.scope,path:n.root,enabled:n.enabled,manifest:n.manifest,docs:i.map(o=>({name:o.name,path:o.path})),...c!==void 0?{commands:c}:{},...m!==void 0?{hooks:m}:{}}},"run")});export{V as pluginList,W as pluginShow};

package/dist/commands/pkg/plugin-manage.d.ts

@@ -0,0 +1,94 @@
+import { type CommandDiscoveryIssue } from '../../core/command-plugins/discovery.js';
+import { type InstallBundleArchiveOptions, type PluginBundleValidation, type InstalledBundleArchive } from '../../core/command-plugins/bundle.js';
+import { type HookPluginCandidate } from '../../core/command-hooks/discovery.js';
+import { type HookReport } from '../../core/command-hooks/report.js';
+import { type PluginBundle, type PluginManifest, type Scope } from '../../types.js';
+/** Static command-manifest report attached to install/update results. Runs
+ *  the Phase-1 validator (no execution) so a caller sees exactly which
+ *  top-level commands the plugin now contributes and why any were rejected. */
+interface CommandReport {
+    mounts: string[];
+    issues: CommandDiscoveryIssue[];
+}
+interface MarketplaceRef {
+    marketplace: string;
+    plugin: string;
+}
+interface InstallResult {
+    name: string;
+    scope: Scope;
+    path: string;
+    memory?: PluginMemoryReport;
+}
+interface BundleReplaceResult extends Record<string, unknown> {
+    name: string;
+    scope: Scope;
+    path: string;
+    transport: 'http';
+    version: string;
+    docs: number;
+    /** Count of kind-registry entries the bundle declared (0 when none). */
+    kinds: number;
+    /** Count of page-component registrations the bundle declared (0 when none). */
+    pageComponents: number;
+    commands: CommandReport;
+    hooks?: HookReport;
+    memory?: PluginMemoryReport;
+}
+/** Who owns the `memory/` documents a candidate gate checks. A `package` folder is
+ * bytes this command owns (staged, or installed under the scope's plugins dir);
+ * a `linked` folder is the caller's own directory the install keeps as a live link. */
+type PluginMemoryOwnership = 'package' | 'linked';
+interface PluginMemoryReport extends Record<string, unknown> {
+    /** Markdown documents the candidate's `memory/` folder holds. */
+    docs: number;
+    /** The caller-owned directory kept as a live link, absent for a package corpus. */
+    linkedSource?: string;
+}
+/** Validate a package candidate before it gains an active plugin path. The
+ * candidate namespace shadows any installed declaration of the same name. */
+export declare function assertPluginCandidateValid(manifest: PluginManifest, root: string, scope: Scope, scopeRootPath: string, where: string, candidates?: readonly HookPluginCandidate[], ownership?: PluginMemoryOwnership): Promise<PluginMemoryReport | undefined>;
+/**
+ * Re-check an installed bundle plugin against its endpoint. A `conditional`
+ * check sends the validator stored for the package currently on disk, so an
+ * unchanged package is answered 304 and left untouched; an unconditional one
+ * asks for the archive outright, which is how recovery from a `manifest_stale`
+ * answer gets past a validator that is itself out of date.
+ *
+ * Returns the swap's report, or `undefined` when the package on disk is already
+ * the generation the server serves — whether the server said so with a 304 or
+ * we proved it by hashing bytes it re-sent.
+ *
+ * Every outcome, including a failure, records that the check happened, so an
+ * unreachable endpoint costs one timed-out probe per TTL rather than one per
+ * command. Failures throw; the caller decides whether a stale-but-present
+ * package is still good enough to run on.
+ */
+export declare function revalidateBundlePlugin(name: string, bundleSource: PluginBundle, scope: Scope, options: {
+    enable: boolean;
+    conditional: boolean;
+    timeoutMs?: number;
+}): Promise<BundleReplaceResult | undefined>;
+/** `validatePluginBundle` with the core-name and core-path reservations an
+ *  install applies, for an archive that is cached rather than installed (a
+ *  capability provider's pinned major). */
+export declare function validatePluginArchive(raw: Uint8Array): Promise<PluginBundleValidation>;
+/**
+ * `installBundleArchive` with the full candidate validation `crtr pkg` applies:
+ * core-name and core-path reservations, command collisions, hooks, and the
+ * memory corpus. The daemon installs provider bundles through this too (a
+ * dynamic import from `core/providers/bundles.ts`), so both paths refuse the
+ * same archives. The caller holds the plugin's swap lock.
+ */
+export declare function installPluginArchive(name: string, raw: Uint8Array, options: Omit<InstallBundleArchiveOptions<PluginMemoryReport | undefined>, 'validation' | 'validateStaged' | 'invalid'>): Promise<InstalledBundleArchive<PluginMemoryReport | undefined>>;
+export declare function isMarketplaceRelativeSource(source: string): boolean;
+/** Install one marketplace plugin into a scope. Exported so `sys setup` can
+ *  install the default plugin set through the same path `pkg plugin install`
+ *  uses — refresh the source, resolve the entry, link/clone, register. */
+export declare function installFromMarketplace(ref: MarketplaceRef, scope: Scope): Promise<InstallResult>;
+export declare const pluginInstall: import("../../core/command.js").LeafDef;
+export declare const pluginRemove: import("../../core/command.js").LeafDef;
+export declare const pluginEnable: import("../../core/command.js").LeafDef;
+export declare const pluginDisable: import("../../core/command.js").LeafDef;
+export declare const pluginUpdate: import("../../core/command.js").LeafDef;
+export {};

package/dist/commands/pkg/plugin-manage.js

@@ -0,0 +1,17 @@
+var qe=Object.defineProperty;var u=(e,t)=>qe(e,"name",{value:t,configurable:!0});import{envProfileId as Ae}from"../../shared/env.js";import{invalidPluginEnvReasons as Ce}from"../../core/plugin-env.js";import{collectPluginEnv as Z}from"./plugin-env.js";import{dirname as ee,join as g,resolve as N,isAbsolute as Me,relative as L}from"node:path";import{renameSync as P}from"node:fs";import{defineLeaf as H}from"../../core/command.js";import{cliClient as Le,rethrowAsCliError as He}from"../api-client.js";import{notFound as h,usage as w,general as m,network as Be,CrtrError as _e}from"../../core/errors.js";import{findMarketplaceByName as De,findPluginByName as q,listAllPlugins as ne}from"../../core/resolver.js";import{pluginsDir as A,ensureProjectScopeRoot as O,userScopeRoot as R,resolveScopeArg as te,projectScopeRoot as ie,requireScopeRoot as C}from"../../core/scope.js";import{readState as Ie,updateConfig as B,updateState as U,ensureScopeInitialized as z,invalidPluginKindsReasons as Ne,invalidPluginBinReasons as Ue,invalidPluginRequiresReasons as Fe,normalizeRequires as Ve}from"../../core/config.js";import{withExclusiveDirectoryLockAsync as We}from"../../core/exclusive-lock.js";import{bundleSwapLockPath as oe}from"../../core/plugin-swap-lock.js";import{invalidPageComponentsReasons as Oe}from"../../core/human/page-catalog.js";import{pathExists as b,ensureDir as M,removePath as E,nowIso as G,linkOrCopy as ae,isSymlink as F,readSymlinkTarget as ze,readText as Ge,realpathOrSelf as Ke,walkFiles as Je}from"../../core/fs-utils.js";import{clone as V,deriveNameFromUrl as Ye,currentSha as S,gitSync as re,isGitRepo as K}from"../../core/git.js";import{readMarketplaceManifest as se,readPluginManifest as x}from"../../core/manifest.js";import{pluginExtensionCatalog as Qe,validateMemoryExtensionValues as Xe,validatePluginMemoryExtensions as Ze}from"../../core/plugin-extensions.js";import{lintPackageFrontmatter as en,packageFiles as nn}from"../../core/graph/package-files.js";import{parseFrontmatterGeneric as tn}from"../../core/frontmatter.js";import{validatePluginCommands as J,validateEffectiveCommandPlugins as on}from"../../core/command-plugins/discovery.js";import{normalizeEndpoint as an,validateEndpoint as rn,validateHttpPluginTransport as sn}from"../../core/command-plugins/endpoint.js";import{buildBrokerEnv as ln,resolvePathExecutable as cn}from"../../core/runtime/spawn-env.js";import{bundleVersion as dn,installBundleArchive as un,isInstalledGeneration as pn,recordCheckedGeneration as mn,validatePluginBundle as fn}from"../../core/command-plugins/bundle.js";import{compileHookRegistry as le,discoverCandidateHookRegistry as hn,discoverCandidateHookRegistryForCandidates as gn,discoverHookRegistry as vn}from"../../core/command-hooks/discovery.js";import{hasDeclaredHooks as ce,hookReport as de}from"../../core/command-hooks/report.js";import{fetchHttpPluginBundle as ue}from"../../core/command-plugins/transport/http-fetch.js";import{SUBTREE_NAMES as _,coreCommandPaths as D,coreHookCatalog as pe,extensibleCoreBranches as I}from"../../build-root.js";import{ExitCode as yn}from"../../types.js";import{isGitUrl as me,resolvePluginConfigTarget as kn,setPluginEnabled as fe,resolveInstallScope as wn}from"./shared.js";async function Y(e,t){const n=q(e,t);if(n===null||typeof n.manifest.commands!="string"||n.manifest.commands.length===0)return;const i=new Set(_),[o,s]=await Promise.all([D(),I()]),a=on(i,void 0,void 0,o,s).find(r=>r.plugin.root===n.root)??J(n,i,o,s);return{mounts:[...a.contributions.map(r=>r.node.name),...a.coreMounts.map(r=>[...r.parent,r.node.name].join(" "))],issues:a.issues}}u(Y,"commandReport");const bn=/^[a-z][a-z0-9]*(-[a-z0-9]+)*$/;function he(e,t,n){if(typeof e!="string"||!bn.test(e))throw w("invalid --name: expected a lowercase kebab-case plugin handle");const i=rn(t);if(!i.isValid)throw w(`invalid --endpoint: ${i.errors.join("; ")}`);const o=an(t),s=sn({kind:"http",endpoint:o,...n!==void 0?{authEnv:n}:{}});if(s.transport===void 0)throw w(`invalid HTTP plugin transport: ${s.errors.join("; ")}`);return s.transport}u(he,"validateHttpInstall");function W(e,t){const n=t.map(i=>`- ${i.code}${i.path!==void 0?` at ${i.path}`:""}: ${i.message} (received ${JSON.stringify(i.received)}, expected ${i.expected})`);return m(`${e}:
+${n.join(`
+`)}`,{issues:t,...t.length>0?{next:t[0].next}:{}})}u(W,"invalidBundleError");function $n(e,t){if(e.kinds===void 0)return;const n=Ne(e.kinds);if(n.length>0)throw m(`plugin manifest at ${t} declares an invalid kinds block:
+${n.map(i=>`- ${i}`).join(`
+`)}`,{issues:n})}u($n,"assertManifestKindsValid");function Pn(e,t){if(e.bin===void 0)return;const n=Ue(e.bin);if(n.length>0)throw m(`plugin manifest at ${t} declares an invalid bin block:
+${n.map(i=>`- ${i}`).join(`
+`)}`,{issues:n})}u(Pn,"assertManifestBinValid");function jn(e,t){if(e.requires===void 0)return;const n=Fe(e.requires);if(n.length>0)throw m(`plugin manifest at ${t} declares an invalid requires block:
+${n.map(i=>`- ${i}`).join(`
+`)}`,{issues:n})}u(jn,"assertManifestRequiresValid");function ge(e){if(e.requires===void 0)return[];const t=ln({argv:[],env:{CRTR_NODE_CWD:process.cwd(),CRTR_PROFILE_ID:Ae()??""}});return Object.entries(Ve(e.requires)).filter(([n])=>cn(n,t,process.cwd())===null).map(([n,i])=>`Warning: plugin "${e.name}" requires "${n}" on PATH \u2014 ${i}`)}u(ge,"missingRequirementWarnings");function xn(e,t){if(e.page_components===void 0)return;const n=Oe(e.page_components);if(n.length>0)throw m(`plugin manifest at ${t} declares an invalid page_components block:
+${n.map(i=>`- ${i}`).join(`
+`)}`,{issues:n})}u(xn,"assertManifestPageComponentsValid");async function Q(e,t){const n=q(e,t);if(n===null||!ce(n.manifest))return;const i=await pe(),o=vn(i),s=o.validations.find(a=>a.plugin.root===n.root);if(s===void 0){const a=le(i,[n]);return de(a.validations[0])}return de(s,o.issues.filter(a=>a.plugin===n.name&&a.scope===n.scope))}u(Q,"hookLifecycleReport");async function Rn(e,t,n,i,o,s){if(!ce(e))return;const a={name:e.name,scope:n,root:t,manifest:e,enabled:!0},r=s??[{plugin:a,scopeRoot:i}],c=await pe(),l=s===void 0?hn(c,a,i):gn(c,r),v=l.validations.find(d=>d.plugin.root===t)===void 0?le(c,[a]).issues:l.issues.filter(d=>d.plugin===a.name&&d.scope===a.scope);if(v.length>0)throw W(`plugin hook behavior at ${o} is invalid`,v)}u(Rn,"assertManifestHooksValid");function En(e,t){const n=L(e,t);return n===""?e:n}u(En,"storeRelative");function Sn(e,t,n,i,o){const s=g(t,"memory");if(!b(s))return;const{files:a,invalid:r}=nn(s);if(r.length>0){const c=r.map(l=>`- ${En(s,l.path)}: ${l.error}`);throw m(`plugin "${e.name}" memory corpus at ${i} has documents that cannot be named:
+${c.join(`
+`)}`,{issues:r,next:`Correct the package's memory documents, then retry \u2014 "${e.name}" was not activated.`})}return{docs:a.length,...o==="linked"?{linkedSource:Ke(s)}:{}}}u(Sn,"migratePluginMemory");async function j(e,t,n,i,o,s,a="package"){try{Ze(e)}catch(d){const f=d instanceof Error?d.message:String(d);throw m(`plugin manifest at ${o} declares invalid memory_extensions: ${f}`)}if($n(e,o),xn(e,o),Pn(e,o),jn(e,o),e.env!==void 0){const d=Ce(e.env);if(d.length)throw m(`plugin manifest at ${o} declares an invalid env block:
+${d.map(f=>`- ${f}`).join(`
+`)}`,{issues:d})}const[r,c]=await Promise.all([D(),I()]),l=J({name:e.name,scope:n,root:t,manifest:e,enabled:!0},new Set(_),r,c);if(l.issues.length>0)throw W(`plugin command behavior at ${o} is invalid`,l.issues);await Rn(e,t,n,i,o,s);const p=g(t,"memory"),v=Qe(n,i,{candidate:e});for(const d of Je(p,f=>f.endsWith(".md"),f=>f.startsWith("."))){let f;try{f=tn(Ge(d)).data}catch(k){throw m(`plugin memory document ${L(t,d)} has invalid YAML frontmatter: ${k instanceof Error?k.message.split(`
+`)[0]:String(k)}`)}const y=en(f);if(y!==null)throw m(`plugin memory document ${L(t,d)} is invalid: ${y}`);for(const k of Xe(f?.extensions,v))throw m(`plugin memory document ${L(t,d)} is invalid: ${k.path}: ${k.message}`)}return Sn(e,t,n,o,a)}u(j,"assertPluginCandidateValid");function Tn(e){return{kind:"http",endpoint:new URL(e.endpoint).origin,...e.authEnv!==void 0?{authEnv:e.authEnv}:{}}}u(Tn,"invocationTransport");async function qn(e,t,n,i,o){const s=await j(o,n,t,i,`${n}/.crouter-plugin/plugin.json`),a={name:e,scope:t,root:n,manifest:o,enabled:!0},[r,c]=await Promise.all([D(),I()]),l=J(a,new Set(_),r,c);if(l.issues.length>0)throw W(`bundle staged package for "${e}" is invalid`,l.issues);return s}u(qn,"validateStagedBundle");function ve(e){return e.sourceMarketplace!==void 0||K(e.root)||F(e.root)}u(ve,"isSourceInstalled");function ye(e){throw m(`HTTP plugin "${e}" uses the removed commands-only endpoint format`,{next:`Run \`crtr pkg plugin remove ${e}\`, then reinstall it with \`crtr pkg plugin install --name ${e} --endpoint <archive-url>\`.`})}u(ye,"rejectLegacyHttpPlugin");function An(e,t,n){if(!b(n))return;const i=q(e,t);if(i?.manifest.bundle!==void 0)return i;throw i?.manifest.transport?.kind==="http"&&i!==void 0&&!ve(i)&&ye(e),m(`plugin "${e}" already exists at ${n}; run \`crtr pkg plugin remove ${e}\` before installing the archive plugin.`)}u(An,"existingBundleRoot");function ke(e,t,n,i){const o=he(e,t.endpoint,t.authEnv),s={endpoint:o.endpoint,...o.authEnv!==void 0?{authEnv:o.authEnv}:{}},a=g(A(n),e);return An(e,n,a),{bundle:s,transport:Tn(s),scopeRootPath:i,root:a}}u(ke,"resolveBundleTarget");function we(e,t){return{name:e,endpoint:t.endpoint,...t.authEnv!==void 0?{authEnv:t.authEnv}:{}}}u(we,"fetchTarget");const Cn=6e4,Mn=1e4;async function be(e,t,n,i){const o=t==="project"?O():R();return M(g(o,"tmp")),We(oe(o,e),()=>i(o),{timeoutMs:n,timeoutError:u(()=>m(`timed out waiting for another crtr process to finish replacing plugin "${e}"`,{next:`Re-run once that process has finished, or check for a stalled crtr holding ${oe(o,e)}.`}),"timeoutError")})}u(be,"withBundleSwapLock");async function $e(e,t,n,i){return be(e,n,Cn,async o=>{const s=ke(e,t,n,o),a=await ue(we(e,s.bundle));if(a.status!==200){const r=`HTTP plugin bundle fetch failed for "${e}": ${a.message}`;throw a.status==="auth_env_missing"?w(r):a.status==="cli_unreachable"?Be(r):m(r)}return Pe(e,n,s,a.raw,a.etag,i)})}u($e,"replaceBundlePlugin");async function kt(e,t,n,i){return be(e,n,Mn,async o=>{try{const s=ke(e,t,n,o),a=i.conditional?Ie(n).plugins[e]?.etag:void 0,r={...a!==void 0?{ifNoneMatch:a}:{},...i.timeoutMs!==void 0?{timeoutMs:i.timeoutMs}:{}},c=await ue(we(e,s.bundle),r);if(c.status===304)return;if(c.status!==200)throw m(`HTTP plugin bundle revalidation failed for "${e}": ${c.message}`);const l=dn(c.raw);if(pn(e,n,s.root,l)){mn(n,e,c.etag,{swapped:!1});return}return await Pe(e,n,s,c.raw,c.etag,i,l)}finally{Ln(n,e)}})}u(kt,"revalidateBundlePlugin");function Ln(e,t){U(e,n=>{n.plugins[t]===void 0&&(n.plugins[t]={}),n.plugins[t].checked_at=G()})}u(Ln,"recordPluginCheck");async function Pe(e,t,n,i,o,s,a){const{bundle:r,transport:c,scopeRootPath:l,root:p}=n,v=await Hn(e,i,{scope:t,scopeRootPath:l,root:p,bundle:r,transport:c,etag:o,enable:s.enable,...a!==void 0?{version:a}:{}}),{validated:d,version:f,staged:y}=v,k=await Y(e,t);if(k===void 0)throw m(`bundle plugin "${e}" has no staged command report`);const $=await Q(e,t);return{name:e,scope:t,path:p,transport:"http",version:f,docs:d.memory.length,kinds:Object.keys(d.kinds??{}).length,pageComponents:(d.page_components??[]).length,commands:k,...$!==void 0?{hooks:$}:{},...y!==void 0?{memory:y}:{}}}u(Pe,"applyBundleArchive");async function wt(e){const[t,n]=await Promise.all([D(),I()]);return fn(e,{reservedCoreNames:new Set(_),coreCommandPaths:t,extensibleCoreBranches:n})}u(wt,"validatePluginArchive");async function Hn(e,t,n){const[i,o]=await Promise.all([D(),I()]);return un(e,t,{...n,validation:{reservedCoreNames:new Set(_),coreCommandPaths:i,extensibleCoreBranches:o},validateStaged:u((s,a)=>qn(e,n.scope,s,n.scopeRootPath,a),"validateStaged"),invalid:u((s,a)=>W(s,a),"invalid")})}u(Hn,"installPluginArchive");async function Bn(e,t,n,i){const o=he(e,t,n);return $e(e,{endpoint:o.endpoint,...o.authEnv!==void 0?{authEnv:o.authEnv}:{}},i,{enable:!0})}u(Bn,"installHttpPlugin");function _n(e){if(e.startsWith("./")||e.startsWith("../")||e.startsWith("/"))return{kind:"local",value:e};if(me(e))return{kind:"git",value:e};const t=e.split("/");if(t.length===2&&t[0]!==""&&t[1]!=="")return{kind:"marketplace",value:{marketplace:t[0],plugin:t[1]}};throw w(`invalid plugin install ref: ${e}
+Accepted forms: marketplace/plugin, git URL (https://, ssh://, git@, file://, or *.git), or local path starting ./, ../, or /. Bare plugin names are not install refs.`)}u(_n,"classifyInstallRef");function je(e){return e.startsWith("./")||e.startsWith("../")||!Me(e)&&!me(e)}u(je,"isMarketplaceRelativeSource");async function xe(e,t,n){const i=t.get(e);if(i!==void 0)return i;const o=De(e);if(o===null){if(n.strict)throw h(`marketplace not found: ${e}`);return null}const s=se(o.root);if(s===null)throw h(`marketplace manifest not found: ${o.root}/.crouter-marketplace/marketplace.json`);if(!K(o.root)){const l={marketplace:o,manifest:s,pull:{updated:!1,sha:S(o.root)??""}};return t.set(e,l),l}const a=S(o.root),r=g(ee(o.root),`.${e}.${process.pid}.${Date.now()}.candidate`),c=`${r}.previous`;try{V(o.url,r,{ref:o.ref,depth:1});const l=se(r);if(l===null)throw h(`marketplace manifest not found in candidate checkout: ${r}/.crouter-marketplace/marketplace.json`);const p=ne().filter(d=>d.sourceMarketplace===e&&F(d.root));for(const d of p){const f=l.plugins.find(Te=>Te.name===d.name);if(f===void 0||!je(f.source))throw m(`marketplace candidate removes relative-source plugin "${d.name}" while it is installed`);const y=ze(d.root);if(y===null)throw m(`installed marketplace plugin "${d.name}" has no readable symlink target`);const k=L(o.root,N(ee(d.root),y)),$=N(r,f.source);if($!==N(r,k))throw m(`marketplace candidate moves installed relative-source plugin "${d.name}" from ${k} to ${f.source}`);if(!b($))throw h(`marketplace candidate source path does not exist for plugin "${d.name}": ${$}`);const X=x($);if(X===null)throw h(`plugin manifest not found in marketplace candidate: ${$}/.crouter-plugin/plugin.json`);const Se=d.scope==="project"?C("project"):R();await j(X,$,d.scope,Se,`${$}/.crouter-plugin/plugin.json`)}P(o.root,c);try{P(r,o.root)}catch(d){throw P(c,o.root),d}E(c);for(const d of p){const f=l.plugins.find(y=>y.name===d.name);Re(d.scope,d.name,f.version??d.manifest.version)}U(o.scope,d=>{d.marketplaces[e]===void 0&&(d.marketplaces[e]={}),d.marketplaces[e].last_updated=G()});const v={marketplace:o,manifest:l,pull:{updated:a!==S(o.root),sha:S(o.root)??""}};return t.set(e,v),v}finally{E(r),b(c)&&!b(o.root)&&P(c,o.root)}}u(xe,"refreshMarketplace");function Re(e,t,n){B(e,i=>{const o=i.plugins[t];o!==void 0?n!==void 0&&(o.version=n):i.plugins[t]={enabled:!0,version:n}}),U(e,i=>{i.plugins[t]===void 0&&(i.plugins[t]={}),i.plugins[t].last_updated=G()})}u(Re,"updatePluginVersion");async function Dn(e,t,n){const i=n==="project"?O():R();z(n,i);const o=A(n),s=Ye(e),a=g(i,"tmp",`${s}.${process.pid}.${Date.now()}`);M(g(i,"tmp"));try{V(e,a,{ref:t,depth:1});const r=x(a);if(r===null)throw m(`cloned repo does not contain a valid .crouter-plugin/plugin.json: ${e}`);const c=await j(r,a,n,i,`${e}/.crouter-plugin/plugin.json`),l=g(o,r.name);if(b(l))throw m(`plugin "${r.name}" is already installed at ${l}`);return M(o),P(a,l),B(n,p=>{p.plugins[r.name]={enabled:!0,version:r.version}}),{name:r.name,scope:n,path:l,...c!==void 0?{memory:c}:{}}}finally{E(a)}}u(Dn,"installFromGit");async function In(e,t){const n=N(e),i=x(n);if(i===null)throw h(`plugin manifest not found at ${n}/.crouter-plugin/plugin.json`);const o=t==="project"?O():R(),s=await j(i,n,t,o,`${n}/.crouter-plugin/plugin.json`,void 0,"linked");z(t,o);const a=g(A(t),i.name);if(b(a))throw m(`plugin "${i.name}" is already installed at ${a}`);return ae(n,a),B(t,r=>{r.plugins[i.name]={enabled:!0,version:i.version}}),{name:i.name,scope:t,path:a,...s!==void 0?{memory:s}:{}}}u(In,"installFromLocal");async function Nn(e,t){const n=await xe(e.marketplace,new Map,{strict:!0});if(n===null)throw h(`marketplace not found: ${e.marketplace}`);const i=n.manifest.plugins.find(l=>l.name===e.plugin);if(i===void 0)throw h(`plugin "${e.plugin}" not found in marketplace "${e.marketplace}"`);const o=C(t);z(t,o);const s=g(A(t),e.plugin);if(b(s))throw m(`plugin "${e.plugin}" is already installed at ${s}`);let a,r;if(je(i.source)){const l=g(n.marketplace.root,i.source);if(!b(l))throw h(`plugin source path does not exist: ${l}`);const p=x(l);if(p===null)throw h(`plugin manifest not found at ${l}/.crouter-plugin/plugin.json`);r=await j(p,l,t,o,`${l}/.crouter-plugin/plugin.json`,void 0,"linked"),ae(l,s),a=p}else{const l=g(o,"tmp",`${e.plugin}.${process.pid}.${Date.now()}`);M(g(o,"tmp"));try{V(i.source,l,{depth:1});const p=x(l);if(p===null)throw h(`plugin manifest not found at ${l}/.crouter-plugin/plugin.json`);r=await j(p,l,t,o,`${l}/.crouter-plugin/plugin.json`),M(A(t)),P(l,s),a=p}finally{E(l)}}const c=i.version??a.version;return B(t,l=>{const p={enabled:!0,source_marketplace:e.marketplace};c!==void 0&&(p.version=c),l.plugins[e.plugin]=p}),{name:e.plugin,scope:t,path:s,...r!==void 0?{memory:r}:{}}}u(Nn,"installFromMarketplace");async function Un(e){if(F(e.root)){const r=x(e.root);if(r===null)throw h(`plugin manifest not found at ${e.root}/.crouter-plugin/plugin.json`);const c=e.scope==="project"?C("project"):R(),l=await j(r,e.root,e.scope,c,`${e.root}/.crouter-plugin/plugin.json`,void 0,"linked");return{updated:!1,sha:S(e.root)??"",manifest:r,...l!==void 0?{memory:l}:{}}}if(!K(e.root)){const r=x(e.root);if(r===null)throw h(`plugin manifest not found at ${e.root}/.crouter-plugin/plugin.json`);const c=e.scope==="project"?C("project"):R(),l=await j(r,e.root,e.scope,c,`${e.root}/.crouter-plugin/plugin.json`);return{updated:!1,sha:"",manifest:r,...l!==void 0?{memory:l}:{}}}const t=re(["config","--get","remote.origin.url"],e.root).stdout.trim();if(t==="")throw m(`plugin "${e.name}" has no origin remote to stage an update from`);const n=re(["symbolic-ref","--short","HEAD"],e.root).stdout.trim();if(n==="")throw m(`plugin "${e.name}" is detached at its installed revision and has no tracked branch to update`);const i=e.scope==="project"?C("project"):R(),o=g(i,"tmp",`${e.name}.${process.pid}.${Date.now()}.candidate`),s=`${o}.previous`,a=S(e.root);M(g(i,"tmp"));try{V(t,o,{ref:n,depth:1});const r=x(o);if(r===null)throw h(`plugin manifest not found in update candidate: ${o}/.crouter-plugin/plugin.json`);const c=await j(r,o,e.scope,i,`${o}/.crouter-plugin/plugin.json`);P(e.root,s);try{P(o,e.root)}catch(p){throw P(s,e.root),p}E(s);const l=S(e.root)??"";return{updated:a!==l,sha:l,manifest:r,...c!==void 0?{memory:c}:{}}}finally{E(o),b(s)&&!b(e.root)&&P(s,e.root)}}u(Un,"updateGitPluginCandidate");async function Ee(e,t,n){if(e.manifest.provider!==void 0)return{name:e.name,transport:"http",updated:!1,warnings:[`"${e.name}" is a capability provider bundle; the runtime refreshes it on grant sync`]};const i=ve(e);if(!i&&e.manifest.bundle!==void 0){const p=await $e(e.name,e.manifest.bundle,e.scope,{enable:e.enabled});return{name:e.name,transport:"http",updated:!0,version:p.version,docs:p.docs,kinds:p.kinds,pageComponents:p.pageComponents,commands:p.commands,...p.hooks!==void 0?{hooks:p.hooks}:{},...p.memory!==void 0?{memory:p.memory}:{}}}e.manifest.transport?.kind==="http"&&!i&&ye(e.name);let o,s=!1;if(e.sourceMarketplace!==void 0){const p=await xe(e.sourceMarketplace,t,n);p!==null&&(o=p.manifest.plugins.find(d=>d.name===e.name)?.version,s=p.pull.updated)}const a=await Un(e);Re(e.scope,e.name,o??a.manifest.version);const r=await Y(e.name,e.scope),c=await Q(e.name,e.scope),l=[...ge(a.manifest),...await Z(a.manifest)];return{name:e.name,...e.manifest.transport!==void 0?{transport:e.manifest.transport.kind}:{},updated:s||a.updated,sha:a.sha,...r!==void 0?{commands:r}:{},...c!==void 0?{hooks:c}:{},...a.memory!==void 0?{memory:a.memory}:{},...l.length>0?{warnings:l}:{}}}u(Ee,"updateOnePlugin");async function T(e){const n=(await Le().documents.reconcilePackages().catch(i=>He(i))).conflicts.find(i=>i.plugin===e);if(n)throw new _e("conflict",`plugin "${e}" is installed but its documents are not on the canvas: ${n.message}`,yn.GENERAL,{plugin:e,next:"Uninstall the other package providing that plugin name, then run `crtr pkg plugin update --name "+e+"`."})}u(T,"reconcilePluginDocuments");const bt=H({name:"install",description:"install from a ref or HTTP endpoint",whenToUse:"installing one plugin from a marketplace ref, git URL, local path, or an HTTP directory-archive endpoint",help:{name:"pkg plugin install",summary:"install a plugin from a ref or HTTP endpoint",params:[{kind:"positional",name:"install-ref",type:"string",required:!1,constraint:"Plugin install ref. Provide exactly one of INSTALL-REF or --endpoint. Accepted ref forms: marketplace/plugin; git URL starting https://, ssh://, git@, file://, or ending .git; local path starting ./, ../, or /."},{kind:"flag",name:"endpoint",type:"string",required:!1,constraint:"HTTP plugin directory-archive endpoint. Provide exactly one of --endpoint or INSTALL-REF. Must be an absolute https: URL; http: is permitted only for localhost, any *.localhost host, 127.0.0.1, [::1], ::1, or host.docker.internal. Credentials and fragments are rejected."},{kind:"flag",name:"name",type:"string",required:!1,constraint:"Required with --endpoint and rejected without it. Lowercase kebab-case plugin handle."},{kind:"flag",name:"auth-env",type:"string",required:!1,constraint:"Optional environment variable holding the HTTP bearer token. Accepted only with --endpoint; its value is never stored."},{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Default: project if available, else user."},{kind:"flag",name:"ref",type:"string",required:!1,constraint:"Git ref (branch/tag) for git URL installs. Rejected with --endpoint; ignored for marketplace and local path refs."}],output:[{name:"name",type:"string",required:!0,constraint:"Plugin name as installed."},{name:"scope",type:"string",required:!0,constraint:"Scope the plugin was installed into."},{name:"path",type:"string",required:!0,constraint:"Absolute path to the installed plugin directory."},{name:"transport",type:"string",required:!1,constraint:"exec or http when the plugin declares commands. Always http for an --endpoint install."},{name:"version",type:"string",required:!1,constraint:"First 12 hex characters of the fetched archive SHA-256 for an --endpoint install."},{name:"docs",type:"integer",required:!1,constraint:"Memory document count written from an --endpoint archive."},{name:"kinds",type:"integer",required:!1,constraint:"Kind-registry entry count declared by an --endpoint archive\u2019s bundle.json."},{name:"pageComponents",type:"integer",required:!1,constraint:"Page-component registration count declared by an --endpoint archive\u2019s bundle.json."},{name:"commands",type:"object",required:!1,constraint:"Present only when the plugin declares a command manifest. {mounts: string[] (accepted command paths now live for the next invocation), issues: object[] (typed validation issues that rejected a contribution \u2014 {code, path?, message, received, expected, next})}. Validated statically; commands are never executed."},{name:"hooks",type:"object",required:!1,constraint:"Present only when the plugin declares hooks. {manifestPath?, executablePath?, declarations: {target, phase, op, description, effects}[], lifecycle?: {event, phase, op, description, effects}[], issues: object[], trust: string}. Command targets, lifecycle events, and replacement collisions are validated statically; hook executables are never run."},{name:"warnings",type:"string[]",required:!1,constraint:"Advisory missing PATH executable requirements declared by the installed plugin. The install still succeeds and leaves the plugin enabled."},{name:"memory",type:"object",required:!1,constraint:"Present only when the plugin ships documents (its `memory/` folder). {docs: integer (documents checked), linkedSource?: string (the caller-owned directory, present only when the install keeps that directory as a live link)}."}],outputKind:"object",effects:["A ref install clones, links, or copies the plugin into the scope plugins directory and registers it with enabled=true. Marketplace installs refresh the source marketplace before resolving the plugin entry.","An --endpoint install fetches and validates one authenticated uncompressed tar archive before writing. It replaces the complete plugin directory with synthesized provenance and invocation metadata, commands.json, memory docs, and, when declared, hooks.json plus the hooks/ tree; it also copies any kind-registry entries the bundle.json declares (they join the launch registry below this scope\u2019s own config.json kinds), and any page components it declares (they join the active page-component catalog alongside the user config entries); a fetch or validation failure preserves the prior package.","If the plugin declares a command manifest, its commands go live on the next crtr invocation. Exec commands run trusted local code only when explicitly invoked; HTTP commands call their declared endpoint only when explicitly invoked.","Plugin command hooks go live on the next crtr invocation. They run implicitly with caller authority, may receive normalized inputs and after results, may block or replace declared targets, and may transmit received data. Lifecycle hooks run unprompted at every declared event before node launch and may transmit node identity and resolved paths. Hook executables are never run during install or update validation.","A plugin manifest `requires` declaration is checked against the PATH a node bash receives after install. Missing executables emit a warning with the declared install hint but never fail the install, disable the plugin, or remove its bare-binary contributions.","Before activation the candidate\u2019s `memory/` documents are checked for identity findings and refused if it cannot mount; a local path or marketplace-relative source stays a live link, named as `memory.linkedSource`. A refused package installs nothing."]},run:u(async e=>{const t=e.installRef,n=e.endpoint,i=e.name,o=e.authEnv,s=e.scope,a=e.ref,r=wn(s);if(t===void 0==(n===void 0))throw w("provide exactly one of INSTALL-REF or --endpoint");if(n!==void 0){if(i===void 0)throw w("--name is required with --endpoint");if(a!==void 0)throw w("--ref is only valid with a git INSTALL-REF, not --endpoint");const y=await Bn(i,n,o,r);return await T(i),y}if(i!==void 0)throw w("--name is only valid with --endpoint");if(o!==void 0)throw w("--auth-env is only valid with --endpoint");const c=_n(t),l=c.kind==="marketplace"?await Nn(c.value,r):c.kind==="local"?await In(c.value,r):await Dn(c.value,a,r),p=q(l.name,l.scope),v=await Y(l.name,l.scope),d=await Q(l.name,l.scope),f=p===null?[]:[...ge(p.manifest),...await Z(p.manifest)];return await T(l.name),{...l,...p?.manifest.transport!==void 0?{transport:p.manifest.transport.kind}:{},...v!==void 0?{commands:v}:{},...d!==void 0?{hooks:d}:{},...f.length>0?{warnings:f}:{}}},"run")}),$t=H({name:"remove",description:"remove plugin and directory",whenToUse:"uninstalling a plugin: deletes its directory and removes it from config",help:{name:"pkg plugin remove",summary:"remove a plugin and its directory from the given scope",params:[{kind:"positional",name:"name",type:"string",required:!0,constraint:"Plugin name to remove."},{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Default: searches every scope."}],output:[{name:"scopes",type:"string[]",required:!0,constraint:"Scopes the plugin was removed from."}],outputKind:"object",effects:["Deletes the plugin directory. Removes the plugin entry from config.json."]},run:u(async e=>{const t=e.name,n=e.scope;if(t==="crtr")throw w('cannot remove builtin plugin "crtr" \u2014 it ships with the binary');let i;if(n!==void 0){const s=te(n);if(s==="builtin")throw w("cannot remove plugins from builtin scope");i=s==="all"?["project","user"].filter(a=>a!=="project"||ie()!==null):[s]}else i=["project","user"].filter(s=>s!=="project"||ie()!==null);const o=[];for(const s of i){const a=A(s);if(a===null)continue;const r=g(a,t);b(r)&&(E(r),B(s,c=>{delete c.plugins[t]}),U(s,c=>{delete c.plugins[t]}),o.push(s))}if(o.length===0)throw h(`plugin not found: ${t}`);return await T(),{scopes:o}},"run")}),Pt=H({name:"enable",description:"enable a plugin",whenToUse:"reactivating a plugin that was previously disabled so its memory docs resolve again",help:{name:"pkg plugin enable",summary:"enable a plugin in the given scope",params:[{kind:"positional",name:"name",type:"string",required:!0,constraint:"Plugin name to enable."},{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Default: scope where the plugin is installed."}],output:[{name:"scope",type:"string",required:!0,constraint:"Scope the change was applied in."},{name:"memory",type:"object",required:!1,constraint:"Present only when the plugin ships documents (its `memory/` folder). {docs: integer (documents checked), linkedSource?: string (the caller-owned directory, present only for a symlinked install)}."}],outputKind:"object",effects:["Validates the installed package before any config change: its `memory/` documents are checked for identity findings and refused if it cannot mount. A refusal leaves the plugin disabled.","Sets plugin enabled=true in config.json."]},run:u(async e=>{const t=e.name,n=kn(t,e.scope);if(n===null)throw h(`plugin not found: ${t}`);const i=x(n.root);if(i===null)throw h(`plugin manifest not found at ${n.root}/.crouter-plugin/plugin.json`);const o=n.scope==="project"?C("project"):R(),s=await j(i,n.root,n.scope,o,`${n.root}/.crouter-plugin/plugin.json`,void 0,F(n.root)?"linked":"package"),a=await fe(e,!0);return await T(t),{scope:a.scope,...s!==void 0?{memory:s}:{}}},"run")}),jt=H({name:"disable",description:"disable without removing",whenToUse:"hiding a plugin from resolution without deleting it, so you can re-enable it later",help:{name:"pkg plugin disable",summary:"disable a plugin (keeps files, hides from resolution)",params:[{kind:"positional",name:"name",type:"string",required:!0,constraint:"Plugin name to disable."},{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Default: scope where the plugin is installed."}],output:[{name:"scope",type:"string",required:!0,constraint:"Scope the change was applied in."}],outputKind:"object",effects:["Sets plugin enabled=false in config.json."]},run:u(async e=>{const t=await fe(e,!1);return await T(),{scope:t.scope}},"run")}),xt=H({name:"update",description:"update installed plugin content",whenToUse:"refreshing one named plugin or all installed plugins: archive plugins replace their complete package, while source-installed plugins retain their source update behavior",help:{name:"pkg plugin update",summary:"refresh one or all installed plugins",params:[{kind:"flag",name:"name",type:"string",required:!1,constraint:"Plugin name to update. Omit to update all installed plugins."},{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Narrows resolution."}],output:[{name:"updated",type:"object[]",required:!0,constraint:"One entry per plugin processed: {name, transport?, updated, sha?, version?, docs?, kinds?, pageComponents?, commands?, hooks?, memory?, warnings?, error?}. memory is present for a plugin shipping documents and reports the same memory check install performs: {docs, linkedSource?}. Archive plugins report transport=http and replace their complete directory after an authenticated refetch; version is the archive content identifier, docs is the written memory-document count, kinds is the declared kind-registry entry count, and pageComponents is the declared page-component registration count. sha is present for git updates. A bulk update reports and skips a failed archive plugin. commands is present for validated command plugins: {mounts: string[] (accepted command paths), issues: object[]}. hooks is present for plugins declaring hooks: {manifestPath?, executablePath?, declarations: {target, phase, op, description, effects}[], lifecycle?: {event, phase, op, description, effects}[], issues: object[], trust: string}; it is static and never executes hooks. warnings lists advisory PATH requirements that remain absent after update."}],outputKind:"object",effects:["Archive plugins unconditionally re-fetch, validate, and replace their complete package; a named failure exits nonzero and preserves the prior package. Bulk update reports a failed archive plugin and continues. Source-installed plugins retain their source update, version, and last_updated behavior.","A capability provider bundle (installed by the runtime from the directory) is skipped with a warning: the runtime refreshes it on grant sync.","Each candidate passes the same pre-activation memory check install performs."]},run:u(async e=>{const t=e.name,n=e.scope,i=n===void 0?void 0:te(n),o=new Map;if(t!==void 0){const r=i===void 0||i==="all"||i==="builtin"?q(t):q(t,i);if(r===null)throw h(`plugin not found: ${t}${i===void 0||i==="all"||i==="builtin"?"":` (scope: ${i})`}`);const c=await Ee(r,o,{strict:!0});return await T(t),{updated:[c]}}const s=ne().filter(r=>r.scope!=="builtin"&&(i===void 0||i==="all"||r.scope===i)),a=[];for(const r of s)try{a.push(await Ee(r,o,{strict:!1}))}catch(c){a.push({name:r.name,...r.manifest.transport!==void 0?{transport:r.manifest.transport.kind}:{},updated:!1,error:c instanceof Error?c.message:String(c)})}return await T(),{updated:a}},"run")});export{j as assertPluginCandidateValid,Nn as installFromMarketplace,Hn as installPluginArchive,je as isMarketplaceRelativeSource,jt as pluginDisable,Pt as pluginEnable,bt as pluginInstall,$t as pluginRemove,xt as pluginUpdate,kt as revalidateBundlePlugin,wt as validatePluginArchive};

package/dist/commands/pkg/plugin.d.ts

@@ -0,0 +1 @@
+export declare const pluginBranch: import("../../core/command.js").BranchDef;

package/dist/commands/pkg/plugin.js

@@ -0,0 +1 @@
+import{defineBranch as n}from"../../core/command.js";import{pluginDisable as e,pluginEnable as i,pluginInstall as l,pluginRemove as a,pluginUpdate as o}from"./plugin-manage.js";import{pluginList as r,pluginShow as t}from"./plugin-inspect.js";const u=n({name:"plugin",description:"install and manage plugins",whenToUse:"working with individual plugins: install, remove, enable, disable, update, list, or inspect them. Use `pkg market` only for marketplace source registration, refresh, and browsing.",help:{name:"pkg plugin",summary:"plugin lifecycle and inspection",model:"A plugin may contribute documents (its `memory/` folder) and commands. Command plugins declare one transport in plugin.json: exec runs a local executable; http calls a remote endpoint. Install accepts either a source ref or an HTTP endpoint."},children:[l,a,i,e,o,r,t]});export{u as pluginBranch};

package/dist/commands/pkg/shared.d.ts

@@ -0,0 +1,13 @@
+import type { Scope } from '../../types.js';
+export declare const GIT_URL_RE: RegExp;
+export declare function isGitUrl(arg: string): boolean;
+export declare function resolveInstallScope(scopeInput: string | undefined): Scope;
+/** The one installed copy an enable/disable acts on: the first scope in
+ *  precedence whose plugins dir holds `name`, disabled copies included. Enable
+ *  validates that exact copy before flipping its config, so both share this
+ *  resolution rather than each walking the scopes. */
+export declare function resolvePluginConfigTarget(name: string, scopeInput: string | undefined): {
+    scope: Scope;
+    root: string;
+} | null;
+export declare function setPluginEnabled(input: Record<string, unknown>, enabled: boolean): Promise<Record<string, unknown>>;

package/dist/commands/pkg/shared.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var s=(e,o)=>c(e,"name",{value:o,configurable:!0});import{join as f}from"node:path";import{notFound as g,usage as u}from"../../core/errors.js";import{resolveScopeArg as p,pluginsDir as a,projectScopeRoot as l}from"../../core/scope.js";import{updateConfig as d}from"../../core/config.js";import{pathExists as m}from"../../core/fs-utils.js";const j=/^(https?:\/\/|git@|ssh:\/\/|file:\/\/)/;function R(e){return j.test(e)||e.endsWith(".git")}s(R,"isGitUrl");function S(e){if(e!==void 0){const o=p(e);if(o==="all"||o==="builtin")throw u('scope must be "user" or "project"');return o}return l()!==null?"project":"user"}s(S,"resolveInstallScope");function h(e,o){let n;if(o!==void 0){const t=p(o);if(t==="builtin")throw u("cannot enable/disable plugins in builtin scope");n=t==="all"?["project","user"].filter(r=>r!=="project"||l()!==null):[t]}else n=["project","user"].filter(t=>t!=="project"||l()!==null);for(const t of n){const r=a(t);if(r===null)continue;const i=f(r,e);if(m(i))return{scope:t,root:i}}return null}s(h,"resolvePluginConfigTarget");async function y(e,o){const n=e.name,t=h(n,e.scope);if(t===null)throw g(`plugin not found: ${n}`);return d(t.scope,r=>{const i=r.plugins[n];i!==void 0?i.enabled=o:r.plugins[n]={enabled:o}}),{name:n,scope:t.scope,enabled:o}}s(y,"setPluginEnabled");export{j as GIT_URL_RE,R as isGitUrl,S as resolveInstallScope,h as resolvePluginConfigTarget,y as setPluginEnabled};

package/dist/commands/pkg.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../core/command.js';
+export declare function registerPkg(): BranchDef;

package/dist/commands/pkg.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var e=(r,a)=>n(r,"name",{value:a,configurable:!0});import{defineBranch as o}from"../core/command.js";import{pkgBrowseLeaf as t}from"./pkg/browse.js";import{pluginBranch as s}from"./pkg/plugin.js";import{marketBranch as c}from"./pkg/market.js";function u(){return o({name:"pkg",rootEntry:{concept:"plugins and marketplaces that extend crtr",desc:"manage plugins and marketplace sources",useWhen:"installing or browsing plugins and marketplace sources; plugin commands may use local executable or remote HTTP transport"},help:{name:"pkg",summary:"manage plugins and marketplace sources",model:"Marketplaces are configured source catalogs; plugins are installed extensions resolved from those catalogs or direct HTTP endpoints. Browsing searches the configured catalogs without changing source or install state."},children:[t,s,c]})}e(u,"registerPkg");export{u as registerPkg};

package/dist/commands/profile/daemon-profiles.d.ts

@@ -0,0 +1,13 @@
+import type { ProfileDTO } from '../../api/dto/profiles.js';
+/** Resolve a `--profile` / profile operand against the caller's visible
+ *  profiles: exact id or name, else the closest name (reported on stderr). */
+export declare function resolveProfileViaDaemon(operand: string): Promise<ProfileDTO>;
+/** A `<profiles count=N>` state element — one `<profile_id> — <name>` line per
+ *  profile the daemon lists for the caller. */
+export declare function profilesStateBlock(): Promise<string>;
+/** A `<kinds count=N>` state element — one `<kind> — <whenToUse>` line per
+ *  top-level kind the daemon accepts. Sub-kinds (e.g. `audit/security`) are
+ *  offered to their own top-level ancestor by default, and this block has no
+ *  single ancestor to check against, so only a sub-kind available to `*` is
+ *  listed; a create naming a full sub-kind is valid regardless. */
+export declare function kindsStateBlock(): Promise<string>;

package/dist/commands/profile/daemon-profiles.js

@@ -0,0 +1,4 @@
+var a=Object.defineProperty;var i=(t,n)=>a(t,"name",{value:n,configurable:!0});import{stateBlock as r}from"../../core/help.js";import{matchProfileOperand as f}from"../../core/profiles/manifest.js";import{localClient as m}from"../../api/node-transport.js";import{cliClient as p}from"../api-client.js";const c=i(()=>m({autostart:!1}),"helpClient"),u=i(t=>({profileId:t.id,name:t.name}),"profileKey");async function k(t){return f(await p().listProfiles(),t,u)}i(k,"resolveProfileViaDaemon");async function x(){const t=await c().listProfiles(),n=20,l=t.slice(0,n).map(e=>`${e.id} \u2014 ${e.name}`).join(`
+`),o=t.length>n?`${l}
+\u2026 ${t.length-n} more; use crtr profile list`:l;return r("profiles",{count:t.length},o)}i(x,"profilesStateBlock");async function P(){const{kinds:t}=await c().listKinds(),n=t.filter(({kind:o,available_to:e})=>{const s=o.indexOf("/");return s===-1||(e??[o.slice(0,s)]).includes("*")}),l=n.map(({kind:o,when_to_use:e})=>e?`${o} \u2014 ${e}`:o).join(`
+`);return r("kinds",{count:n.length},l)}i(P,"kindsStateBlock");export{P as kindsStateBlock,x as profilesStateBlock,k as resolveProfileViaDaemon};

package/dist/commands/profile/default.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../../core/command.js';
+export declare const defaultBranch: BranchDef;

package/dist/commands/profile/default.js

@@ -0,0 +1,2 @@
+var c=Object.defineProperty;var o=(r,e)=>c(r,"name",{value:e,configurable:!0});import{defineLeaf as s,defineBranch as f}from"../../core/command.js";import{InputError as d}from"../../core/io.js";import{loadProfileManifest as l,resolveProfileOperand as u}from"../../core/profiles/manifest.js";import{profileCoversCwd as h}from"../../core/profiles/select.js";import{existsSync as m}from"node:fs";import{getDefaultProfileId as p,setDefaultProfileId as y,clearDefaultProfile as w,clearMissingDefaultDirs as g,listDefaultPins as v,resolveBindingCwd as a}from"../../core/profiles/default-binding.js";const x=s({name:"set",description:"pin a profile as the default for the current directory",whenToUse:"you want crtr to stop asking which profile to use here and always default to a chosen one \u2014 the command form of the startup menu\u2019s `d` action. The profile must already cover this directory (add its purview relationship with `profile project add --dir` first if not).",help:{name:"profile default set",summary:"pin a profile as the current directory's default, so the startup chooser stops asking",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr. Must already cover the current directory (be at/above/below it in its project purview); this pin does not change automatic document delivery limits."}],output:[{name:"dir",type:"string",required:!0,constraint:"The resolved directory the pin was set for."},{name:"profile_id",type:"string",required:!0,constraint:"The pinned profile id."},{name:"name",type:"string",required:!0,constraint:"The pinned profile name."},{name:"follow_up",type:"string",required:!0,constraint:"The resulting ambient effect."}],outputKind:"object",effects:["Writes this directory's pin into `~/.crouter/profile-defaults.json`. The next launch here auto-picks this profile with no prompt (override once with `crtr --pick-profile`)."]},run:o(async r=>{const e=process.cwd(),t=a(e),i=u(r.profile);if(!h(i,t))throw new d({error:"not_covered",message:`profile "${i.manifest.name}" does not cover ${t}, so a default pinned here would be ignored.`,next:`Widen its purview first: \`crtr profile project add ${i.profileId} --dir ${t}\`, then re-run this.`});return y(e,i.profileId),{dir:t,profile_id:i.profileId,name:i.manifest.name,follow_up:`Launches here now auto-pick "${i.manifest.name}".`}},"run")}),_=s({name:"clear",description:"remove the current directory's default-profile pin",whenToUse:"you no longer want a fixed default here \u2014 go back to the normal startup chooser (MRU / covering menu). No-op if nothing was pinned.",help:{name:"profile default clear",summary:"remove a directory's default-profile pin \u2014 the current directory's, or any path with --dir, or every pin whose directory is gone with --missing",params:[{kind:"flag",name:"dir",type:"string",required:!1,constraint:"Directory whose pin to clear instead of the current one. It need not exist any more \u2014 a pin for a deleted directory is addressed by the path it was set with (a symlinked path that still exists resolves to its real path, as `set` stored it)."},{kind:"flag",name:"missing",type:"bool",required:!1,constraint:"Clear every pin whose directory no longer exists on disk, in one write. Used alone."}],output:[{name:"dir",type:"string",required:!1,constraint:"The resolved directory the pin was cleared for; absent with --missing."},{name:"cleared",type:"boolean",required:!0,constraint:"True when a pin existed and was removed; false when nothing was pinned."},{name:"cleared_dirs",type:"array",required:!1,constraint:"With --missing: each removed pin as {dir, profile_id}."},{name:"follow_up",type:"string",required:!0,constraint:"Concrete next commands."}],outputKind:"object",effects:["Deletes the directory's pin from the user-root profile-defaults state, if present. `--missing` deletes every pin whose directory no longer exists."]},run:o(async r=>{if(r.missing===!0){if(r.dir!==void 0)throw new d({error:"missing_not_exclusive",message:"--missing cannot be combined with --dir",field:"missing",next:"Pass --missing alone."});const n=g();return{cleared:n.length>0,cleared_dirs:n,follow_up:n.length>0?`Cleared ${n.length} pin(s) whose directory no longer exists.`:"Every pinned directory still exists."}}const e=r.dir??process.cwd(),t=a(e),i=p(e)!==null;return w(e),{dir:t,cleared:i,follow_up:i?"The startup chooser will ask again here. Re-pin with `crtr profile default set <profile>`.":"Nothing was pinned here."}},"run")}),b=s({name:"show",description:"show the current directory's default-profile pin",whenToUse:"you want to know which profile (if any) is pinned as this directory's default.",help:{name:"profile default show",summary:"report the current directory's pinned default profile, or none; --dir asks about another path",params:[{kind:"flag",name:"dir",type:"string",required:!1,constraint:"Directory whose pin to report instead of the current one. It need not exist any more \u2014 a pin for a deleted directory is addressed by the path it was set with (a symlinked path that still exists resolves to its real path, as `set` stored it)."}],output:[{name:"dir",type:"string",required:!0,constraint:"The resolved directory queried."},{name:"pinned",type:"boolean",required:!0,constraint:"True when a default is pinned here."},{name:"profile_id",type:"string",required:!1,constraint:"The pinned profile id, when pinned."},{name:"name",type:"string",required:!1,constraint:"The pinned profile name, when it still resolves."},{name:"stale",type:"boolean",required:!1,constraint:"True when a pin exists but its profile no longer resolves (deleted); the selector will self-heal it on next launch."},{name:"follow_up",type:"string",required:!0,constraint:"Concrete next commands."}],outputKind:"object",effects:["Read-only."]},run:o(async r=>{const e=r.dir??process.cwd(),t=a(e),i=p(e);if(i===null)return{dir:t,pinned:!1,follow_up:"Pin one with `crtr profile default set <profile>`."};let n;try{n=l(i).manifest.name}catch{n=void 0}return{dir:t,pinned:!0,profile_id:i,...n!==void 0?{name:n}:{stale:!0},follow_up:n!==void 0?"Change it with `crtr profile default set <profile>`, or clear it with `crtr profile default clear`.":"This profile no longer exists; clear the stale pin with `crtr profile default clear`."}},"run")}),T=s({name:"list",description:"list every directory pinned to a default profile",whenToUse:"you want to see all default-profile pins at once \u2014 including pins for directories that no longer exist \u2014 before clearing stale ones with `profile default clear --dir <path>` or `--missing`.",help:{name:"profile default list",summary:"every directory \u2192 default profile pin, with whether the directory and the profile still exist",params:[],output:[{name:"pins",type:"array",required:!0,constraint:"Each pin as {dir, profile_id, name?, dir_exists, profile_exists}, sorted by dir."}],outputKind:"object",effects:["Read-only."]},run:o(async()=>({pins:v().map(r=>{let e;try{e=l(r.profileId).manifest.name}catch{e=void 0}return{dir:r.dir,profile_id:r.profileId,...e!==void 0?{name:e}:{},dir_exists:m(r.dir),profile_exists:e!==void 0}})}),"run"),render:o(r=>{const e=r.pins;return e.length===0?"No default-profile pins.":e.map(t=>`${t.dir} \u2192 ${t.name??t.profile_id}${t.dir_exists?"":" [directory missing]"}${t.profile_exists?"":" [profile missing]"}`).join(`
+`)},"render")}),P=f({name:"default",description:"manage this directory's default-profile pin",whenToUse:"setting, clearing, or inspecting which profile a directory defaults to at startup \u2014 so crtr stops asking. Directory-scoped, independent of project purview and automatic document delivery limits.",help:{name:"profile default",summary:"the per-directory default profile \u2014 pin one so the startup chooser stops asking",model:"A pin binds the CURRENT directory to a profile: launches here auto-pick it with no prompt (`crtr --pick-profile` reopens the chooser once). `set` pins a profile (which must already cover this dir), `clear` removes the pin (`--dir <path>` for another path, even a deleted one; `--missing` for every pin whose directory is gone), `show` reports it (`--dir` too), `list` shows every pin. This is directory-scoped selection, independent of `crtr profile project`: project `path` values govern purview and each `memory` value caps automatic disclosure. The startup menu's `d` action writes the same pin."},children:[x,_,b,T]});export{P as defaultBranch};

package/dist/commands/profile/delete.d.ts

@@ -0,0 +1 @@
+export declare const deleteLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/delete.js

@@ -0,0 +1 @@
+var o=Object.defineProperty;var t=(e,r)=>o(e,"name",{value:r,configurable:!0});import{envNodeId as n}from"../../shared/env.js";import{defineLeaf as a}from"../../core/command.js";import{cliClient as s,rethrowAsCliError as d}from"../api-client.js";const f=a({name:"delete",description:"force-delete a profile and its owned runtime state",whenToUse:"a profile is no longer needed and you intend either to remove every node and schedule pinned to it, or to preserve that state while detaching the profile identity",help:{name:"profile delete",summary:"force-delete a profile and its owned state, or detach that state before removing the profile",params:[{kind:"positional",name:"profile",required:!0,constraint:"Exact profile id, or a unique manifest name. Deletion never guesses at a near miss \u2014 unlike every other profile verb, an unrecognized value fails."},{kind:"flag",name:"force",type:"bool",required:!0,constraint:"Required confirmation for this irreversible operation."},{kind:"flag",name:"detach",type:"bool",required:!1,constraint:"Preserve nodes and inbox/review history; clear their profile identity and globalize matching crons before removing the profile."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"The removed profile\u2019s stable id."},{name:"name",type:"string",required:!0,constraint:"The removed profile\u2019s manifest name."},{name:"mode",type:"string",required:!0,constraint:"`deleted` for the destructive cascade; `detached` when --detach preserved nodes and history."},{name:"nodes",type:"number",required:!0,constraint:"Nodes hard-deleted or detached."},{name:"crons",type:"number",required:!0,constraint:"Crons deleted or globalized."},{name:"tickets",type:"number",required:!0,constraint:"Originating inbox ticket directories removed; zero in detach mode."},{name:"reviews",type:"number",required:!0,constraint:"Originating daemon review records removed; zero in detach mode."},{name:"default_pins",type:"number",required:!0,constraint:"Per-directory default profile pins cleared."},{name:"accepted",type:"boolean",required:!1,constraint:"True when the invoking node belongs to the profile and teardown begins after this result settles."},{name:"grace_ms",type:"number",required:!1,constraint:"Acknowledgement grace before an accepted self-deletion begins."},{name:"follow_up",type:"string",required:!0,constraint:"Concrete next action."}],outputKind:"object",effects:["Always clears every per-directory default pin for the profile, deletes the documents the profile owns (one a live document outside them links to is kept, still owned by the deleted profile, until its last link goes), and removes the profile directory last. Blocks before mutation while any matching node owns an open managed worktree.","Without --detach: tears down and hard-deletes every node whose profile_id matches, deletes matching or anchored crons and their in-flight runs, and removes originating inbox tickets plus review records. Cross-profile children are preserved.","With --detach: preserves nodes, conversations, topology, inbox tickets, and reviews; rewrites node profile_id to null, restarts active brokers without the profile, and rewrites matching crons to global scope."]},run:t(async e=>{const r=await s().deleteProfile(e.profile,{force:e.force,detach:e.detach,caller_node_id:n()??null}).catch(i=>d(i,"List profiles with `crtr profile list`."));return{...r,follow_up:r.accepted===!0?"The deletion was accepted; this node will stop after its result settles.":"Run `crtr profile list` to see remaining profiles."}},"run")});export{f as deleteLeaf};

package/dist/commands/profile/env.d.ts

@@ -0,0 +1,8 @@
+import type { BranchDef } from '../../core/command.js';
+/** Strips exactly one trailing line ending (`\r\n` or `\n`) — the one
+ *  documented byte the piped-value contract trims — and leaves every other
+ *  byte (leading/trailing spaces, tabs, embedded newlines) untouched. A
+ *  single-quoted heredoc (`<<'EOF'`) always appends exactly one such
+ *  terminator; anything beyond that is content the caller wrote on purpose. */
+export declare function stripSingleTrailingLineEnding(raw: string): string;
+export declare const envBranch: BranchDef;

package/dist/commands/profile/env.js

@@ -0,0 +1,3 @@
+var v=Object.defineProperty;var t=(e,n)=>v(e,"name",{value:n,configurable:!0});import{defineLeaf as a,defineBranch as p}from"../../core/command.js";import{InputError as l}from"../../core/io.js";import{validateEnvVarName as c}from"../../core/env-name.js";import{cliClient as i}from"../api-client.js";import{resolveProfileViaDaemon as s}from"./daemon-profiles.js";function m(e){return e.endsWith(`\r
+`)?e.slice(0,-2):e.endsWith(`
+`)?e.slice(0,-1):e}t(m,"stripSingleTrailingLineEnding");function d(e){const n=c(e);if(!n.isValid)throw new l({error:"invalid_name",message:`invalid --name: ${n.errors.join("; ")}`,field:"name",received:e,next:"Use an env-var-shaped name: starts with a letter or underscore, followed by letters, digits, or underscores."})}t(d,"requireValidName");const f=a({name:"set",description:"store one env var for a profile, value piped on stdin",whenToUse:"a profile needs a credential or config value injected directly into every broker launched under it \u2014 e.g. a HTTP-transport plugin\u2019s `auth-env` token. Setting it here crosses the broker spawn boundary with no separate `spawnEnv.allow` entry required; re-running with the same name overwrites the value.",help:{name:"profile env set",summary:"write (or overwrite) one env var in a profile\u2019s 0600 env store",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"name",type:"string",required:!0,constraint:"Env var name. Must start with a letter or underscore, followed by letters, digits, or underscores (e.g. NL_CORE_TOKEN)."},{kind:"stdin",name:"value",required:!0,constraint:"The raw value, piped on stdin \u2014 never as an argv value, to keep it out of shell history. Pipe from a single-quoted heredoc (`<<'EOF'`) or `echo -n \"$VALUE\" |` to preserve exact bytes; trailing newline is trimmed."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"created",type:"boolean",required:!0,constraint:"true when this name was newly added, false when it replaced an existing value."},{name:"follow_up",type:"string",required:!0,constraint:"The effect on already-running nodes."}],outputKind:"object",effects:["Writes {name: value} to the profile\u2019s 0600 environment store, replacing any prior value under the same name.","Every broker launched under this profile from now on injects this value directly into its process env \u2014 independent of the daemon\u2019s ambient env, no `spawnEnv.allow` entry needed. Already-running brokers keep whatever env they launched with; a running node picks up a new/changed value only on its next revive."]},run:t(async e=>{const n=e.name;d(n);const{id:r}=await s(e.profile),o=m(e.value??"");if(o==="")throw new l({error:"empty_value",message:"env var value is empty",field:"value",next:"Pipe a non-empty value on stdin."});const{changed:u}=await i().setProfileEnv(r,n,o);return{profile_id:r,created:u,follow_up:"A running node under this profile picks up the change on its next revive."}},"run")}),h=a({name:"list",description:"inventory a profile\u2019s stored env var NAMES \u2014 never values",whenToUse:"you want to know which env vars a profile has set, without exposing any value. Values never leave the 0600 store \u2014 there is no leaf that reads one back.",help:{name:"profile env list",summary:"the sorted list of env var names stored for a profile",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"names",type:"string[]",required:!0,constraint:"Every stored env var name, sorted. Empty when nothing is stored."},{name:"count",type:"int",required:!0,constraint:"names.length."},{name:"follow_up",type:"string",required:!0,constraint:"Concrete next commands."}],outputKind:"object",effects:["None. Read-only \u2014 and value-blind by construction: this leaf never reads the stored values."]},run:t(async e=>{const{id:n}=await s(e.profile),{names:r}=await i().listProfileEnv(n);return{profile_id:n,names:r,count:r.length,follow_up:r.length>0?`Remove one with \`crtr profile env remove ${n} --name <name>\`.`:`Set one with \`crtr profile env set ${n} --name <name>\`.`}},"run")}),y=a({name:"remove",description:"delete one stored env var from a profile",whenToUse:"an env var a profile owns is no longer needed \u2014 remove it so future brokers launched under this profile stop receiving it. No-op-shaped success (`removed: false`) if it was never set.",help:{name:"profile env remove",summary:"delete one env var from a profile\u2019s 0600 env store",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"name",type:"string",required:!0,constraint:"Env var name. Must start with a letter or underscore, followed by letters, digits, or underscores (e.g. NL_CORE_TOKEN)."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"removed",type:"boolean",required:!0,constraint:"true when a value existed and was removed; false when nothing was stored under this name."}],outputKind:"object",effects:["Deletes {name} from the profile\u2019s 0600 environment store, if present.","Already-running brokers keep whatever env they launched with; a running node stops receiving this value only on its next revive."]},run:t(async e=>{const n=e.name;d(n);const{id:r}=await s(e.profile),{changed:o}=await i().removeProfileEnv(r,n);return{profile_id:r,removed:o}},"run")}),_=p({name:"env",description:"manage a profile-scoped store of env vars injected into its brokers",whenToUse:"a profile needs a credential or config value available directly to every broker (and thus every node) launched under it \u2014 e.g. a HTTP-transport plugin\u2019s `auth-env` token \u2014 without exporting it into the daemon\u2019s own ambient shell or granting a `spawnEnv.allow` passthrough.",help:{name:"profile env",summary:"a profile\u2019s own 0600 store of env vars, injected directly into every broker launched under it",model:"Values are write-only from this surface: `set` stores one (value piped on stdin, never argv), `remove` deletes one, `list` reports NAMES only \u2014 no leaf ever reads a value back. `buildBrokerEnv` (`core/runtime/spawn-env.ts`) reads the store straight off disk at every broker launch and injects each value directly into that broker\u2019s process env, independent of the daemon\u2019s own ambient env or any `.envrc`/`.env` a node\u2019s cwd carries. Setting a value here IS the operator\u2019s consent to cross the spawn boundary \u2014 it needs no matching `spawnEnv.allow` entry. A change only reaches an already-running node on its next revive. To set a value for every profile in the calling app, use `crtr sys env set --name <NAME>`."},children:[f,h,y]});export{_ as envBranch,m as stripSingleTrailingLineEnding};

package/dist/commands/profile/kind.d.ts

@@ -0,0 +1 @@
+export declare const kindLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/kind.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var i=(e,t)=>r(e,"name",{value:t,configurable:!0});import{defineLeaf as o}from"../../core/command.js";import{cliClient as n}from"../api-client.js";import{kindsStateBlock as a,resolveProfileViaDaemon as d}from"./daemon-profiles.js";const u=o({name:"kind",description:"set a profile's default node kind",whenToUse:"nodes created under a profile without `--kind` should use a persona other than `general`.",help:{name:"profile kind",summary:"set a profile's manifest `default_kind` for creates that omit --kind",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"positional",name:"kind",required:!0,constraint:"Installed persona kind to use by default. The live <kinds> list below is the accepted value set."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."}],outputKind:"object",effects:["Sets the profile manifest's `default_kind`. Future node creates under the profile that omit --kind resolve to it server-side."]},helpState:{leaf:a},run:i(async e=>{const{id:t}=await d(e.profile);return await n().updateProfile(t,{default_kind:e.kind}),{profile_id:t}},"run")});export{u as kindLeaf};

package/dist/commands/profile/list.d.ts

@@ -0,0 +1 @@
+export declare const listLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/list.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var n=(t,e)=>a(t,"name",{value:e,configurable:!0});import{defineLeaf as s}from"../../core/command.js";import{emitLine as o}from"../../core/io.js";import{cliClient as p}from"../api-client.js";const f=s({name:"list",description:"inventory every profile visible to you and its project relationships",whenToUse:"browse every profile that exists \u2014 one line each with its id, name, explicit project relationships, owning app, paused state, and last-used time. Reach for `profile show` once you have picked one, for its full manifest.",help:{name:"profile list",summary:"every profile the daemon shows the caller (its own app's, plus any another app shared) as JSONL, sorted by name then profile_id",output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"name",type:"string",required:!0,constraint:"Manifest name."},{name:"projects_count",type:"int",required:!0,constraint:"Number of `{path}` project relationships on the manifest."},{name:"projects",type:"ProfileProject[]",required:!0,constraint:"Explicit `{path}` relationships in manifest order. `path` defines profile purview."},{name:"app",type:"string",required:!0,constraint:"The app that owns this profile."},{name:"paused_at",type:"string | null",required:!0,constraint:"ISO 8601 pause timestamp, or null when the profile is active."},{name:"default_kind",type:"string",required:!0,constraint:"Default node kind for creates that omit --kind; `general` when none is stored."},{name:"last_used_at",type:"string | null",required:!0,constraint:"ISO 8601 timestamp of the most recent selection, or null if never selected."}],outputKind:"jsonl",effects:["None. Read-only."]},run:n(async()=>{const t=(await p().listProfiles()).sort((e,i)=>{const r=e.name.localeCompare(i.name);return r!==0?r:e.id.localeCompare(i.id)});for(const e of t)o({profile_id:e.id,name:e.name,projects_count:e.projects.length,projects:e.projects,app:e.app,paused_at:e.paused_at,default_kind:e.default_kind,last_used_at:e.last_used_at});o({follow_up:"Show one in full with `crtr profile show <profile>`."})},"run")});export{f as listLeaf};

package/dist/commands/profile/meta.d.ts

@@ -0,0 +1,4 @@
+/** Fold `KEY=VALUE` flag repetitions into one map. Key-shape validation stays
+ *  with the manifest store (`assertProfileMetadata`); this only splits. */
+export declare function resolveMetaPairs(raw: unknown, field: string): Record<string, string>;
+export declare const metaLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/meta.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var o=(e,t)=>p(e,"name",{value:t,configurable:!0});import{defineLeaf as m}from"../../core/command.js";import{InputError as s}from"../../core/io.js";import{cliClient as d}from"../api-client.js";import{resolveProfileViaDaemon as l}from"./daemon-profiles.js";function f(e,t){const a=Array.isArray(e)?e.map(String):typeof e=="string"&&e!==""?[e]:[],n=Object.create(null);for(const r of a){const i=r.indexOf("=");if(i<=0)throw new s({error:"bad_meta",message:`"${r}" is not KEY=VALUE`,field:t,next:`Pass --${t} KEY=VALUE (repeat the flag per entry).`});n[r.slice(0,i)]=r.slice(i+1)}return n}o(f,"resolveMetaPairs");function u(e){return Array.isArray(e)?e.map(String):typeof e=="string"&&e!==""?[e]:[]}o(u,"resolveNames");const v=m({name:"meta",description:"set or remove entries in a profile's metadata map",whenToUse:"a profile should carry (or stop carrying) identity facts \u2014 a display name, role, description \u2014 that every node launched under it reads from its env as `CRTR_PROFILE_META_<KEY>`. For secrets, use `profile env` instead: metadata is readable back from every projection.",help:{name:"profile meta",summary:"merge entries into (or drop entries from) a profile manifest's `metadata` map",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"set",type:"string",required:!1,repeatable:!0,constraint:"KEY=VALUE to merge over the stored map (repeat per entry). KEY starts with a letter or digit, followed by letters, digits, `_`, or `-`; an existing key is overwritten."},{kind:"flag",name:"unset",type:"string",required:!1,repeatable:!0,constraint:"KEY to remove (repeat per entry). Removing an absent key is a no-op."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"metadata",type:"object",required:!0,constraint:"The full resulting metadata map."}],outputKind:"object",effects:["Rewrites the profile manifest's `metadata` map (omitted entirely when the result is empty).","Every broker launched under this profile from now on sees each entry as `CRTR_PROFILE_META_<KEY>` (key uppercased, non-alphanumeric runs \u2192 `_`). Already-running nodes pick up changes on their next revive."]},run:o(async e=>{const t=f(e.set,"set"),a=u(e.unset);if(Object.keys(t).length===0&&a.length===0)throw new s({error:"nothing_to_do",message:"pass at least one --set KEY=VALUE or --unset KEY",next:"Repeat --set/--unset per entry."});const{id:n}=await l(e.profile),r=await d().updateProfileMetadata(n,{set:t,unset:a});return{profile_id:r.id,metadata:r.metadata}},"run")});export{v as metaLeaf,f as resolveMetaPairs};

package/dist/commands/profile/new.d.ts

@@ -0,0 +1 @@
+export declare const newLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/new.js

@@ -0,0 +1 @@
+var l=Object.defineProperty;var n=(e,t)=>l(e,"name",{value:t,configurable:!0});import{defineLeaf as p}from"../../core/command.js";import{usage as i}from"../../core/errors.js";import{resolve as f}from"node:path";import{cliClient as s}from"../api-client.js";import{resolveMetaPairs as c}from"./meta.js";const k=p({name:"new",description:"create a new profile",whenToUse:"you are establishing a new agent identity \u2014 a stable id, a display name, and its own documents (a profile owns documents like any other owner). Pass at most one initial project directory here (the parser has no repeatable-flag support); use `profile project add` afterward for every additional one. Use `--root` (no name) to provision the canonical stable root profile \u2014 the default identity a home falls back to \u2014 idempotently, without spawning a node.",help:{name:"profile new",summary:"create a profile of the caller's app in the scoped store, with its own app directory",params:[{kind:"flag",name:"name",type:"string",required:!1,constraint:"Display name for the profile. Also slugified into the stable profile id \u2014 the id never changes on later rename. Required unless `--root` is given; mutually exclusive with `--root`."},{kind:"flag",name:"root",type:"bool",required:!1,constraint:"Provision the canonical stable root profile (fixed id `root-00000000`, name `root`) \u2014 the fallback default identity for a home \u2014 instead of a fresh named one. Idempotent: re-running returns the existing root. Node-free (no `node new --root` needed). Mutually exclusive with `--name`/`--project`/`--default-kind`/`--meta`."},{kind:"flag",name:"project",type:"path",required:!1,constraint:"One initial project directory. Must already exist and be a directory; resolved to its absolute real path before storing. Creates a purview relationship. Singular \u2014 add more with `crtr profile project add` after creation."},{kind:"flag",name:"default-kind",type:"string",required:!1,constraint:"Installed persona kind for node creates under this profile that omit --kind. Defaults to general when omitted; the daemon validates it against its installed kind registry."},{kind:"flag",name:"meta",type:"string",required:!1,repeatable:!0,constraint:"KEY=VALUE metadata entry (repeat per entry). KEY starts with a letter or digit, followed by letters, digits, `_`, or `-`. Each entry reaches every broker launched under the profile as `CRTR_PROFILE_META_<KEY>` env; readable back via `profile show` \u2014 not for secrets (those go to `profile env`)."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id (`<slug>-<shortid>`). Pass this, or the name, to every other `profile` verb and to `--profile` elsewhere."},{name:"memory_path",type:"string",required:!0,constraint:"Absolute path to the profile directory under its app space (the legacy location of its pre-canvas markdown; documents the profile owns are canvas documents, read with `crtr canvas read`)."},{name:"projects",type:"ProfileProject[]",required:!0,constraint:"Explicit `{path}` project relationships in manifest order. `path` defines purview. Empty when --project was omitted."},{name:"app",type:"string",required:!0,constraint:"The app that owns this profile."},{name:"default_kind",type:"string",required:!0,constraint:"Default persona kind for node creates that omit --kind; `general` when none is stored."},{name:"metadata",type:"object",required:!0,constraint:"Stored metadata map; empty when --meta was omitted."},{name:"created_at",type:"string",required:!0,constraint:"ISO 8601 creation timestamp."}],outputKind:"object",effects:["Creates a profile row owned by the caller's app (the terminal app for a person) and its directory under that app's space. A name the caller's app already holds is refused."]},run:n(async e=>{const t=e.name,r=e.project,a=e.defaultKind,o=c(e.meta,"meta");if(e.root===!0){if(t!==void 0||r!==void 0||a!==void 0||Object.keys(o).length>0)throw i("`--root` provisions the canonical stable root profile and takes no `--name`/`--project`/`--default-kind`/`--meta`.");return d(await s().ensureProfile("root"))}if(t===void 0)throw i("provide `--name <name>` to create a profile, or `--root` to provision the stable root profile.");return d(await s().createProfile({name:t,...r!==void 0?{projects:[{path:f(r)}]}:{},...a!==void 0?{default_kind:a}:{},...Object.keys(o).length>0?{metadata:o}:{}}))},"run")});function d(e){return{profile_id:e.id,memory_path:e.memory_path,projects:e.projects,app:e.app,default_kind:e.default_kind,metadata:e.metadata,created_at:e.created_at}}n(d,"newProfileOutput");export{k as newLeaf};

package/dist/commands/profile/pause.d.ts

@@ -0,0 +1,2 @@
+export declare const pauseLeaf: import("../../core/command.js").LeafDef;
+export declare const resumeLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/pause.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var t=(e,r)=>u(e,"name",{value:r,configurable:!0});import{defineLeaf as i}from"../../core/command.js";import{cliClient as n,rethrowAsCliError as o}from"../api-client.js";import{resolveProfileViaDaemon as s}from"./daemon-profiles.js";const d={kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},f=i({name:"pause",description:"make a profile inert",whenToUse:"all work under a profile must stop now while in-flight bash commands continue under their detached supervisors.",help:{name:"profile pause",summary:"pause a profile so it creates and revives no nodes",params:[d],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"paused_at",type:"string",required:!0,constraint:"ISO 8601 timestamp when the profile became inert."}],outputKind:"object",effects:["Writes `paused_at`, SIGTERMs every live broker under the profile so its foreground bash hands off to its detached supervisor, and holds cron, deadline, revive, and inbox delivery until resume."]},run:t(async e=>{const{id:r}=await s(e.profile);try{return{...await n().pauseProfile(r)}}catch(a){o(a)}},"run")}),h=i({name:"resume",description:"make a paused profile active",whenToUse:"nodes under a paused profile may create and revive again, including queued inbox delivery.",help:{name:"profile resume",summary:"resume a profile so it may create and revive nodes again",params:[d],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"paused_at",type:"null",required:!0,constraint:"Always null after resume; null means active."}],outputKind:"object",effects:["Clears `paused_at`, credits active node deadlines for the paused interval, and lets retained inbox mail, due crons, and interrupted turns resume."]},run:t(async e=>{const{id:r}=await s(e.profile);try{return{...await n().resumeProfile(r)}}catch(a){o(a)}},"run")});export{f as pauseLeaf,h as resumeLeaf};

package/dist/commands/profile/project.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../../core/command.js';
+export declare const projectBranch: BranchDef;

package/dist/commands/profile/project.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var t=(e,o)=>p(e,"name",{value:o,configurable:!0});import{defineLeaf as i,defineBranch as d}from"../../core/command.js";import{resolve as s}from"node:path";import{cliClient as a}from"../api-client.js";import{resolveProfileViaDaemon as n}from"./daemon-profiles.js";import{PROFILE_PROJECT_MEMORY_VALUES as l}from"../../api/dto/profiles.js";const c=i({name:"add",description:"add a project to a profile's purview",whenToUse:"a profile needs purview over another project directory \u2014 extend it after creation.",help:{name:"profile project add",summary:"add a project relationship to a profile, deduped by real path",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"dir",type:"path",required:!0,constraint:"Directory to add. Must exist and be a directory; resolved to its absolute real path before storing. A path already on the profile keeps its position and nothing changes."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"projects",type:"ProfileProject[]",required:!0,constraint:"The updated `{path}` relationships in profile order. `path` defines purview."}],outputKind:"object",effects:["Appends a new project relationship to the profile row; purview follows `path`. Running brokers discover the updated projects on their next scope read."]},run:t(async e=>{const{id:o}=await n(e.profile),r=await a().updateProfile(o,{add_project:{path:s(e.dir)}});return{profile_id:r.id,projects:r.projects}},"run")}),m=i({name:"remove",description:"remove a project relationship from a profile's purview",whenToUse:"a profile no longer needs purview over one of its listed project directories \u2014 narrow it back. Works even if the directory itself was since deleted.",help:{name:"profile project remove",summary:"remove a project directory from a profile's manifest",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"dir",type:"path",required:!0,constraint:"Directory to remove, matched against the stored project `path`. Does not require the directory to still exist on disk. The profile's app home does not change."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"projects",type:"ProfileProject[]",required:!0,constraint:"The updated `{path}` relationships in profile order."}],outputKind:"object",effects:["Removes a project relationship from the profile row. This narrows purview. Running brokers discover the updated projects on their next scope read."]},run:t(async e=>{const{id:o}=await n(e.profile),r=await a().updateProfile(o,{remove_project:s(e.dir)});return{profile_id:r.id,projects:r.projects}},"run")}),u=i({name:"limit",description:"set how much of one owner's documents automatic delivery may disclose",whenToUse:"a profile's nodes should get less of one owner's documents (a repo, `user`, an app, a plugin) at boot and workspace-open \u2014 or that limit should be lifted.",help:{name:"profile project limit",summary:"set a profile's automatic delivery limit for one owner handle",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"owner",type:"string",required:!0,constraint:"Owner the limit applies to. A bare handle (`crouter`, `user`) matches an owner of any type holding that handle. `<type>:<handle>` names one owner exactly \u2014 `repo:crouter`, `profile:work`, `app:terminal`, `person:user` \u2014 and wins over a bare key; use it when a repo and another owner share a handle. A profile's own documents are never capped, whichever key matches."},{kind:"flag",name:"level",type:"enum",choices:[...l],required:!0,constraint:"Maximum automatic delivery of this owner's documents at boot and workspace-open: `none`, `name`, `preview`, or `content`. `content` is no limit and removes the entry. Does not change explicit `crtr canvas read` access."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"delivery_limits",type:"object",required:!0,constraint:"The profile\u2019s limits after the change, keyed by owner handle or `<type>:<handle>`; an owner not listed is not limited."}],outputKind:"object",effects:["Sets or removes one entry in the profile's `delivery_limits`. It caps only automatic `boot` and `workspace-open` delivery; a node's own documents and its own profile's documents are never capped. A `<type>:<handle>` key (for example `repo:crouter`) names one owner exactly and wins over a bare handle key."]},run:t(async e=>{const{id:o}=await n(e.profile),r=await a().updateProfile(o,{set_delivery_limit:{owner:e.owner,level:e.level}});return{profile_id:r.id,delivery_limits:r.delivery_limits}},"run")}),g=d({name:"project",description:"manage a profile's project purview and automatic delivery limits",whenToUse:"changing a profile\u2019s project purview after creation, or limiting how much of one owner's documents its nodes get automatically.",help:{name:"profile project",summary:"manage project purview and per-owner automatic delivery limits",model:"Each `{path}` relationship widens purview: the profile resolves config from `path`. `add` appends a new real path; `remove` narrows purview. `limit` sets the profile's `delivery_limits` entry for one owner handle, which caps only automatic boot and workspace-open delivery of that owner's documents; explicit reads are not capped. Purview and delivery limits are both independent of a per-cwd default pin (`crtr profile default`)."},children:[c,m,u]});export{g as projectBranch};

package/dist/commands/profile/rename.d.ts

@@ -0,0 +1 @@
+export declare const renameLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/rename.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var a=(e,n)=>r(e,"name",{value:n,configurable:!0});import{defineLeaf as i}from"../../core/command.js";import{cliClient as t}from"../api-client.js";import{resolveProfileViaDaemon as o}from"./daemon-profiles.js";const f=i({name:"rename",description:"change a profile's name and canvas handle",whenToUse:"you want the profile to appear under a new name in bearings, listings, and `profile` subject gates. The profile id (its directory) never changes.",help:{name:"profile rename",summary:"change a profile's name \u2014 its manifest `name` and its canvas handle (`[[name/x]]` links, `owner=` listings) \u2014 while the profile_id stays stable",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name (the CURRENT name, before this rename); a close-enough name resolves to the nearest profile, reported on stderr."},{kind:"flag",name:"name",type:"string",required:!0,constraint:"New display name."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id \u2014 unchanged by this leaf."}],outputKind:"object",effects:["Changes the profile manifest's `name` field and renames the profile's canvas handle in the same daemon operation.","Refuses, before changing anything, when another live profile already holds the new handle. Links are edges to ids, so they keep resolving and render the new name.","A later profile may take the old name."]},run:a(async e=>{const{id:n}=await o(e.profile);return await t().updateProfile(n,{name:e.name}),{profile_id:n}},"run")});export{f as renameLeaf};

package/dist/commands/profile/show.d.ts

@@ -0,0 +1 @@
+export declare const showLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/profile/show.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var a=(r,e)=>i(r,"name",{value:e,configurable:!0});import{defineLeaf as n}from"../../core/command.js";import{resolveProfileViaDaemon as o}from"./daemon-profiles.js";const l=n({name:"show",description:"one profile's manifest in full",whenToUse:"you need a profile's full project list, owning app, id, and timestamps \u2014 after `profile list` narrows to a name, to find where its nodes will run, or to inspect what a node's bearings named as its profile.",help:{name:"profile show",summary:"print one profile's settings and directory path",params:[{kind:"positional",name:"profile",required:!0,constraint:"Profile id or manifest name; a close-enough name resolves to the nearest profile, reported on stderr. A name shared by several profiles fails listing every matching id."}],output:[{name:"profile_id",type:"string",required:!0,constraint:"Stable directory id."},{name:"name",type:"string",required:!0,constraint:"Manifest name."},{name:"projects",type:"ProfileProject[]",required:!0,constraint:"Explicit `{path}` relationships in manifest order. `path` defines profile purview."},{name:"app",type:"string",required:!0,constraint:"The app that owns this profile."},{name:"paused_at",type:"string | null",required:!0,constraint:"ISO 8601 pause timestamp, or null when the profile is active."},{name:"default_kind",type:"string",required:!0,constraint:"Default node kind for creates that omit --kind; `general` when none is stored."},{name:"metadata",type:"object",required:!0,constraint:"Stored metadata map \u2014 each entry reaches brokers launched under the profile as `CRTR_PROFILE_META_<KEY>` env. Empty when none."},{name:"created_at",type:"string",required:!0,constraint:"ISO 8601 creation timestamp."},{name:"last_used_at",type:"string | null",required:!0,constraint:"ISO 8601 timestamp of the most recent selection, or null if never selected."},{name:"memory_path",type:"string",required:!0,constraint:"Absolute path to the profile directory under its app space (the legacy location of its pre-canvas markdown; documents the profile owns are canvas documents, read with `crtr canvas read`)."},{name:"follow_up",type:"string",required:!0,constraint:"Concrete next commands, including the SQL-backed raw settings surface."}],outputKind:"object",effects:["None. Read-only."]},run:a(async r=>{const e=await o(r.profile),t=e.id;return{profile_id:t,name:e.name,projects:e.projects,app:e.app,paused_at:e.paused_at,default_kind:e.default_kind,metadata:e.metadata,created_at:e.created_at,last_used_at:e.last_used_at,memory_path:e.memory_path,follow_up:e.paused_at===null?`Inspect its SQL-backed settings with \`crtr sys config get-raw --scope profile --profile ${t}\`; manage its purview with \`crtr profile project add ${t} --dir <path>\`, pause it with \`crtr profile pause ${t}\`, or set its default kind with \`crtr profile kind ${t} <kind>\`.`:`Inspect its SQL-backed settings with \`crtr sys config get-raw --scope profile --profile ${t}\`; manage its purview with \`crtr profile project add ${t} --dir <path>\`, or resume it with \`crtr profile resume ${t}\`.`}},"run")});export{l as showLeaf};

package/dist/commands/profile.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../core/command.js';
+export declare function registerProfile(): BranchDef;

package/dist/commands/profile.js

@@ -0,0 +1 @@
+var t=Object.defineProperty;var e=(r,o)=>t(r,"name",{value:o,configurable:!0});import{defineBranch as n}from"../core/command.js";import{newLeaf as i}from"./profile/new.js";import{listLeaf as a}from"./profile/list.js";import{showLeaf as s}from"./profile/show.js";import{renameLeaf as d}from"./profile/rename.js";import{deleteLeaf as l}from"./profile/delete.js";import{pauseLeaf as p,resumeLeaf as c}from"./profile/pause.js";import{kindLeaf as f}from"./profile/kind.js";import{metaLeaf as m}from"./profile/meta.js";import{projectBranch as h}from"./profile/project.js";import{defaultBranch as u}from"./profile/default.js";import{envBranch as w}from"./profile/env.js";function S(){return n({name:"profile",rootEntry:{concept:"an agent identity defined at the user root \u2014 a scoped-state row naming project directories; it also owns documents",desc:"create, inspect, and manage profiles",useWhen:"creating a new agent identity, inspecting or listing existing ones, changing a profile\u2019s project purview, pinning which profile a directory defaults to at startup, or managing a profile\u2019s stored env vars. Selecting a profile for a one-off run (`--profile`) lives elsewhere."},help:{name:"profile",summary:"create, inspect, and manage profiles \u2014 agent identities that own documents and have their own project purview",model:"A node\u2019s app owns its home; the profile does not select it. A node lands in the directory it was launched from when there is one: `node new --cwd`, an inherited spawner directory (notably inside a managed worktree), or the directory a root was started in. So one profile can cover many working directories \u2014 cwd selects the identity, and the launch decides where the work happens. `new` creates one from a name (+ at most one initial `--project`). `list` inventories every profile as JSONL. `show` prints one profile definition in full. `rename` changes only the profile name \u2014 the profile_id is stable across a rename. `delete --force` removes the profile after cascading through its nodes, matching schedules, originating inbox/review state, and default pins; `--detach --force` instead preserves nodes and human history while clearing the profile identity and globalizing its schedules. Both modes block while a matching node owns an open managed worktree and never touch the project directories the profile pointed at. `project` widens/narrows a profile\u2019s project purview (the dirs it resolves repo documents + config from). `default` pins which profile a directory defaults to at startup so the chooser stops asking \u2014 directory-scoped, independent of purview. `env` manages a profile-scoped 0600 store of env vars injected directly into every broker launched under that profile \u2014 set on stdin, list names only (never values), or remove one; no `spawnEnv.allow` entry needed. `meta` edits the profile\u2019s readable metadata map \u2014 identity facts each broker under the profile sees as `CRTR_PROFILE_META_<KEY>` env (secrets stay in `env`). Every manifest verb but `new`/`list` takes <profile> as an exact id, a profile name, or a close-enough name that resolves to the nearest profile (reported on stderr); a name shared by several profiles, or one equally close to several, fails listing every matching id. `delete` alone never guesses \u2014 an irreversible verb requires an exact id or name."},children:[i,a,s,d,p,c,f,m,l,h,u,w]})}e(S,"registerProfile");export{S as registerProfile};

package/dist/commands/push.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../core/command.js';
+export declare function registerPush(): BranchDef;

package/dist/commands/push.js

@@ -0,0 +1,9 @@
+var y=Object.defineProperty;var i=(e,r)=>y(e,"name",{value:r,configurable:!0});import{envNodeId as b}from"../shared/env.js";import{defineBranch as k,defineLeaf as c}from"../core/command.js";import{InputError as d,readStdinRaw as h}from"../core/io.js";import{ApiError as q}from"../api/index.js";import{cliClient as p,rethrowAsCliError as u}from"./api-client.js";function f(){const e=b();if(e===void 0||e.trim()==="")throw new d({error:"no_node_context",message:"CRTR_NODE_ID is not set \u2014 push runs inside a canvas node.",next:"Run push from a node process spawned by the runtime."});return e.trim()}i(f,"requireCallerNode");const m={update:"report progress to subscribers",final:"finish: write the canonical result, mark the node done, close its window"},_={update:"you have progress worth surfacing to your managers while work remains in flight. Use normal delivery unless it can wait for their next real wake (--tier deferred) or needs immediate attention (--tier urgent); use push final only when the work is actually done.",final:"the work this node was spawned to do is complete and you are ready to hand back the canonical result \u2014 this writes that result, marks the node done, and closes its window, so it is the LAST thing you do here, not a progress note. Use push update while work is still in flight, and do not reach for final on a node working directly with the user: it has no manager to report up to and would close mid-conversation (the guard blocks it unless you pass --force after the user confirms)."};function v(){return c({name:"result",description:"answer a pending structured-output request with the required JSON result, or decline it",whenToUse:'your system prompt names a pending structured-output request you must answer. The value is validated against the required schema server-side; a mismatch rejects with field errors and records nothing, so fix and rerun. When the schema cannot be honestly satisfied (blocked, unavailable, bad input), pass `--decline "<reason>" --code <token>` (plus `--retryable` when the same request could succeed later) instead of inventing a value; your requester names the code tokens it accepts. For a terminal request either path IS how the node finishes \u2014 never call `crtr push final` alongside it.',help:{name:"push result",summary:"answer a pending structured-output request",params:[{kind:"stdin",name:"value",required:!1,constraint:"The JSON result. Pipe it from a single-quoted heredoc (`<<'EOF'`) to preserve literal bytes. Required unless `--decline` is passed."},{kind:"flag",name:"request",type:"string",required:!0,constraint:"The request id from the structured-output instruction. It binds this result to that exact request; crouter never selects a pending request implicitly."},{kind:"flag",name:"decline",type:"string",required:!1,constraint:"Decline instead of answering: one plain sentence on why the schema cannot be honestly satisfied (blocked, unavailable, bad input). Requires `--code`. Records a failure outcome with reason `declined` carrying the reason, code, and retryable flag, and clears the request; for a terminal request this finishes the node."},{kind:"flag",name:"code",type:"string",required:!1,constraint:"With `--decline`: one whitespace-free token (\u2264 64 chars) naming the decline class. crouter carries it verbatim; the requester validates it against the tokens it documented for you."},{kind:"flag",name:"retryable",type:"bool",required:!1,default:!1,constraint:"With `--decline`: the same request could succeed if issued again later (a transient block). Omit when the decline is final for this input."}],output:[{name:"mode",type:"string",required:!0,constraint:"Which request this answered: `terminal` finished the node; `oneoff` left it working."},{name:"result_path",type:"string",required:!0,constraint:"Absolute path of the recorded artifact: the result JSON, or the declined marker when `--decline` was passed."},{name:"declined",type:"object",required:!1,constraint:"Present only when the request was declined: { reason, code, retryable } as recorded."},{name:"report",type:"string",required:!0,constraint:"Name of the report document pushed alongside the result, `<node-id>/reports/<name>`."},{name:"notified",type:"string[]",required:!0,constraint:"Subscriber node ids that received an inbox pointer."},{name:"transitioned",type:"object",required:!1,constraint:"Present only for a terminal request that flipped the node \u2014 { from, to } lifecycle-status transition applied server-side."}],outputKind:"object",effects:["Validates the value against the pending schema server-side; a mismatch records nothing and the request stays pending.","Writes the accepted result to nodes/<nodeId>/context/result.json (or the decline to context/declined.json) and clears the pending request.","A terminal decline records a `failure` outcome with reason `declined` whose `declined` field carries { reason, code, retryable }; the requester sees no value.","Pushes the mode-matched report: final for a terminal request (the node finishes \u2014 same effects as `push final`), update for a one-off request (the node keeps working)."]},run:i(async e=>{const r=f(),s=typeof e.request=="string"?e.request.trim():"";if(s==="")throw new d({error:"request_id_required",message:"a structured result needs its request id",field:"request",next:"Copy the request id named in the structured-output instruction and rerun with `--request <request-id>`."});const o=typeof e.decline=="string"?e.decline.trim():"",a=typeof e.code=="string"?e.code.trim():"";let n;if(o!==""){if(a==="")throw new d({error:"missing_decline_code",message:"a decline needs a code",field:"code",next:"Pass `--code <token>` \u2014 the whitespace-free token your requester documented for this decline class."});n={request_id:s,decline:o,code:a,retryable:e.retryable===!0}}else{if(a!==""||e.retryable===!0)throw new d({error:"decline_flags_without_decline",message:"--code and --retryable only apply with --decline",next:'Pass `--decline "<reason>"` alongside them, or drop them and submit the JSON result.'});let t=typeof e.value=="string"?e.value.trim():"";if(t===""&&(t=(await h()).trim()),t==="")throw new d({error:"missing_value",message:"no result value",field:"value",next:'Pass the JSON result as an argument or on stdin, or `--decline "<reason>" --code <token>` when the schema cannot be honestly satisfied.'});let l;try{l=JSON.parse(t)}catch(g){throw new d({error:"bad_result_json",message:`the result is not valid JSON: ${g.message}`,field:"value",next:"Pass one valid JSON value matching the requested schema."})}n={request_id:s,value:l}}try{const t=await p().submitResult(r,n);return{mode:t.mode,result_path:t.result_path,report:t.report,notified:t.notified,...t.declined===void 0?{}:{declined:t.declined},...t.transitioned!==void 0?{transitioned:t.transitioned}:{},...t.worktree_auto_dropped===!0?{worktree_auto_dropped:!0,worktree_auto_dropped_path:t.worktree_auto_dropped_path}:{}}}catch(t){u(t)}},"run"),render:i(e=>{const r=e.declined,s=e.mode==="terminal"?`${r?"Decline recorded":"Result recorded"} \u2014 node finished; its engine shuts down on next stop. Nothing more to do here: STOP your turn immediately. Reply with just "Done." and nothing else.`:`${r?"One-off request declined":"One-off result recorded"} and pushed \u2014 the structured-output gate is cleared; continue working normally.`,o=r===void 0?"":`
+- code: ${r.code} (${r.retryable?"retryable":"not retryable"})`;return`${s}
+
+- ${r?"declined":"result"}: ${e.result_path}${o}
+- report: ${e.report}`},"render")})}i(v,"makeResultLeaf");function w(e){return c({name:e,description:m[e],whenToUse:_[e],help:{name:`push ${e}`,summary:m[e],params:[{kind:"stdin",name:"body",required:!0,constraint:"Report body (markdown). Pipe it from a single-quoted heredoc (`<<'EOF'`) to preserve literal bytes."},...e==="update"?[{kind:"flag",name:"tier",type:"enum",choices:["deferred","normal","urgent"],required:!1,default:"normal",constraint:"Delivery urgency: deferred holds for the receiver\u2019s next non-deferred wake; normal wakes normally; urgent steers a live receiver and wakes an idle receiver."}]:[{kind:"flag",name:"force",type:"bool",required:!1,default:!1,constraint:"Override the guard that blocks `push final` on a node the user is attending (a resident with no one to report up to). Only pass this after the user explicitly confirms they want this node finished."}]],output:[{name:"report",type:"string",required:!0,constraint:"Name of the written report document, `<node-id>/reports/<name>`."},{name:"notified",type:"string[]",required:!0,constraint:"Subscriber node ids that received an inbox pointer."},...e==="final"?[{name:"transitioned",type:"object",required:!1,constraint:"Present only for a final that flipped the node \u2014 { from, to } lifecycle-status transition applied server-side."},{name:"worktree_auto_dropped",type:"boolean",required:!1,constraint:"Present only when the server closed this node\u2019s managed-worktree record without requiring `node worktree close`; cleanup of an existing checkout remains pending (see worktree_auto_dropped_path)."},{name:"worktree_auto_dropped_path",type:"string",required:!1,constraint:"Present only alongside worktree_auto_dropped: the closed worktree path; an existing checkout remains until pending cleanup."}]:[]],outputKind:"object",effects:["Creates the report document `<node-id>/reports/<compact-ts>-<uuid8>-<kind>` (server-side).","Appends one inbox pointer per subscriber.",...e==="final"?["Marks the node done (status + intent) server-side; its engine shuts down on next stop.","When this node owns a clean managed worktree already contained in its local base, the server closes its record with cleanup pending instead of blocking on `node worktree close`. A clean worktree whose exact tip exists on any branch on origin may also finalize while retaining its branch and checkout; uncommitted changes or a tip absent from origin still block with open_managed_worktree."]:[]]},run:i(async r=>{const s=f();let o=typeof r.body=="string"?r.body.trim():"";if(o===""&&(o=(await h()).trim()),o==="")throw new d({error:"missing_body",message:"no report body",field:"body",next:"Pass the body as an argument or on stdin."});const a=p();if(e==="final"&&r.force!==!0){let n=null;try{n=await a.getNode(s)}catch(t){t instanceof q&&t.status===404||u(t)}if(n!==null&&n.lifecycle==="resident"&&n.edges.subscribers.length===0)throw new d({error:"no_final_recipient",message:"This node is working directly with the user \u2014 it has no manager to submit a final result to. `push final` would end the conversation mid-stream.",next:'You almost certainly do NOT need to finish here \u2014 just keep working with the user. If the user has explicitly asked you to finish and close this node, confirm with them first, then rerun with `crtr push final --force "<result>"`.'})}try{const n=r.tier,t=await a.pushReport(s,{tier:e,body:o,...n===void 0?{}:{delivery_tier:n}});return{report:t.report,notified:t.notified,...t.transitioned!==void 0?{transitioned:t.transitioned}:{},...t.worktree_auto_dropped===!0?{worktree_auto_dropped:!0,worktree_auto_dropped_path:t.worktree_auto_dropped_path}:{}}}catch(n){u(n)}},"run"),render:i(r=>{const s=Array.isArray(r.notified)?r.notified.length:0,o=e==="final"?'Result recorded \u2014 node finished; its engine shuts down on next stop. Nothing more to do here: STOP your turn immediately. Reply with just "Done." and nothing else.':`Progress report fanned to ${s} subscriber(s).`,a=r.worktree_auto_dropped===!0?`
+
+Closed a clean managed-worktree record at ${String(r.worktree_auto_dropped_path)} \u2014 nothing to land; cleanup remains pending if the checkout still exists.`:"";return`${o}
+
+- report: ${r.report}${a}`},"render")})}i(w,"makePushLeaf");function $(){return k({name:"push",rootEntry:{concept:"the one verb up the graph \u2014 a node reports to whoever subscribes to it",desc:"push an update or final report to your subscribers",useWhen:"sharing progress, raising an alert, or finishing your work"},help:{name:"push",summary:"push a report to your subscribers",model:"A push writes a report document the node owns and fans a lightweight pointer to every subscriber's inbox. Delivery inlines reports under 1,000 characters; a longer report is read with `crtr canvas read <name>`. Point at documents you wrote as `[[<node-id>/<name>]]`, never as a file path. Nothing is pushed automatically \u2014 the feed contains only what a node pushes explicitly, so push whenever you want a manager to see something. Pipe markdown via a single-quoted heredoc so it reaches the report literally. `push final` is how ANY node finishes: write the canonical result, mark done, close the window."},children:[w("update"),w("final"),v()]})}i($,"registerPush");export{$ as registerPush};

package/dist/commands/revive.d.ts

@@ -0,0 +1,2 @@
+import type { LeafDef } from '../core/command.js';
+export declare const reviveLeaf: LeafDef;