@north-light/cli 0.0.0 → 0.3.413

package/dist/core/graph/objects.js

@@ -0,0 +1,11 @@
+var b=Object.defineProperty;var s=(t,e)=>b(t,"name",{value:e,configurable:!0});import{prepared as d}from"../sqlite-statements.js";import{CrtrError as h,notFound as T}from"../errors.js";import{ExitCode as L}from"../../types.js";import{newNodeId as y}from"../runtime/nodes.js";import{kindOf as x}from"./kinds/registry.js";import{canRead as N}from"./access.js";import{bodyOf as A}from"./bodies.js";const _=new Set(["person","app","repo","profile"]);function O(t){return t||null}s(O,"rowFrom");function I(t,e){return O(d(t,"SELECT * FROM objects WHERE id = ?").get(e))}s(I,"getById");function P(t,e){return O(d(t,"SELECT * FROM objects WHERE rowid = ?").get(e))}s(P,"getByRowid");function D(t,e){return x(t,e.type),d(t,`INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(e.id??y(),e.type,e.kind,e.owner,e.privacy,e.name,e.preview,new Date().toISOString())}s(D,"createObject");function S(t,e,o,i,n,r){if(!_.has(e))throw new Error(`ensureOwner: ${e} is not an owner type`);const p=d(t,`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE i.scheme = ? AND i.external_id = ?`).get(o,i);if(p)return p;const E=d(t,`SELECT o.id, o.type, i.scheme, i.external_id FROM objects o
+    LEFT JOIN identities i ON i.object = o.rowid
+    WHERE o.name = ? AND o.type = ?`).get(n,e);if(E)throw new h("conflict",`handle "${n}" is held by ${E.type} ${E.id} (${E.scheme}:${E.external_id}); cannot give it to ${e} ${o}:${i}`,L.GENERAL,{handle:n,holder:E.id});const a=D(t,{type:e,kind:null,owner:e==="profile"?r?.rowid??null:null,privacy:"public",name:n,preview:""});return d(t,"INSERT INTO identities (object, scheme, external_id) VALUES (?, ?, ?)").run(a.rowid,o,i),a}s(S,"ensureOwner");function J(t,e,o){const i=d(t,`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE i.scheme = 'profile' AND i.external_id = ? AND o.type = 'profile' AND o.deleted_at IS NULL`).get(e),n=d(t,`SELECT o.id FROM objects o
+    WHERE o.name = ? AND o.type = 'profile' AND o.deleted_at IS NULL AND o.rowid <> ?`).get(o,i?i.rowid:-1);if(n)throw new h("conflict",`handle "${o}" is already held by profile object ${n.id}; cannot rename profile ${e} to it`,L.GENERAL,{handle:o,holder:n.id});if(!i)return!1;const r=i;return r.name===o?!1:(g(t,r,o),!0)}s(J,"renameProfileObject");function B(t,e){if(e==="user:local")return S(t,"person","local-user",e,"user");if(/^app:[a-z0-9][a-z0-9._-]*$/.test(e))return S(t,"app","app",e,e.slice(4));throw new Error(`node grantee ${JSON.stringify(e)} is neither app:<name> nor user:local`)}s(B,"ownerForGrantee");function G(t,e,o){return O(d(t,"SELECT * FROM objects WHERE (type = 'document' OR instr(type, '.') > 0) AND owner = ? AND name = ? AND deleted_at IS NULL").get(e,o))}s(G,"liveDocumentNamed");function K(t,e){const o=I(t,e);if(!o||o.type!=="node")throw T(`no node object ${e}`);return o}s(K,"nodeObject");function g(t,e,o){d(t,"UPDATE objects SET name = ? WHERE rowid = ?").run(o,e.rowid)}s(g,"setObjectName");function Y(t,e,o){d(t,"UPDATE objects SET kind = ? WHERE rowid = ?").run(o,e.rowid)}s(Y,"setObjectKind");function z(t,e,o,i={}){const n=["rowid > ?"],r=[i.after_rowid??0];return o.type!==void 0&&(n.push("type = ?"),r.push(o.type)),o.kind!==void 0&&(n.push("kind = ?"),r.push(o.kind)),o.owner!==void 0&&(n.push("owner = ?"),r.push(o.owner.rowid)),o.privacy!==void 0&&(n.push("privacy = ?"),r.push(o.privacy)),o.name!==void 0&&(n.push("name = ?"),r.push(o.name)),n.push(o.deleted?"deleted_at IS NOT NULL":"deleted_at IS NULL"),C(t,e,`SELECT * FROM objects WHERE ${n.join(" AND ")}`,r,Math.min(i.limit??100,100))}s(z,"listObjects");function V(t,e,o){const n=[],r=`%${o.text.replace(/[\\%_]/g,c=>`\\${c}`)}%`;if(!o.grep){const c=d(t,`SELECT o.*, d.summary AS _summary FROM objects o LEFT JOIN documents d ON d.object = o.rowid
+      WHERE o.deleted_at IS NULL AND (o.name LIKE ?1 ESCAPE '\\' OR o.preview LIKE ?1 ESCAPE '\\' OR d.summary LIKE ?1 ESCAPE '\\')
+      ORDER BY o.rowid`).all(r),u=o.text.toLowerCase();for(const l of c){const{_summary:f,...w}=l,m=w;if(!N(t,e,m))continue;const R=m.name.toLowerCase().includes(u)?"name":m.preview.toLowerCase().includes(u)?"preview":"summary";if(n.push({object:m,field:R,...R==="summary"?{text:String(f)}:{}}),n.length>=100)return n}}if(!o.body&&!o.grep)return n;const p=new Set(n.map(c=>c.object.rowid)),E=o.grep?(c=>u=>c.test(u))(new RegExp(o.text)):c=>c.includes(o.text),a=d(t,"SELECT * FROM objects WHERE type = 'document' AND deleted_at IS NULL ORDER BY rowid").all(),j=d(t,`SELECT r.body_hash, d.source_path FROM revisions r JOIN documents d ON d.object = r.document WHERE r.document = ?
+    AND NOT EXISTS (SELECT 1 FROM revision_parents p WHERE p.parent = r.rowid)`);for(const c of a)if(!(p.has(c.rowid)||!N(t,e,c)))for(const{body_hash:u,source_path:l}of j.all(c.rowid)){const f=A(u,l).split(`
+`),w=f.findIndex(E);if(!(w<0)){if(n.push({object:c,field:"body",line:w+1,text:f[w]}),n.length>=100)return n;break}}return n}s(V,"searchObjects");function C(t,e,o,i,n){const r=[],p=t.prepare(`${o} ORDER BY rowid LIMIT ${n*4}`);for(;;){const E=p.all(...i);for(const a of E)if(N(t,e,a)&&r.push(a),r.length===n)return r;if(E.length<n*4)return r;i[0]=E[E.length-1].rowid}}s(C,"readablePages");export{D as createObject,S as ensureOwner,I as getById,P as getByRowid,z as listObjects,G as liveDocumentNamed,K as nodeObject,B as ownerForGrantee,J as renameProfileObject,V as searchObjects,Y as setObjectKind,g as setObjectName};

package/dist/core/graph/package-docs.d.ts

@@ -0,0 +1,32 @@
+/** Package documents: builtin (`crtr`) and plugin documents stay files in their package; this
+ *  converges their `objects`/`documents` rows, their one revision and their rules onto those
+ *  files (contract §6.6). Bodies are read from `documents.source_path`, never the body store.
+ *  A plugin is an app: its documents belong to the app `<plugin>` (identity `app:<plugin>`,
+ *  the one `ownerForGrantee` gives), and a document with a `source_path` is shipped. */
+import type { DatabaseSync } from 'node:sqlite';
+export interface PackageSource {
+    plugin: string;
+    dir: string;
+}
+/** The builtin corpus (app `crtr`), then every enabled user-scope plugin's `memory/` folder. */
+export declare function packageSources(): PackageSource[];
+export interface PackageReconcileReport {
+    created: number;
+    updated: number;
+    deleted: number;
+    /** plugins provided by more than one package; only the first is reconciled */
+    conflicts: Array<{
+        plugin: string;
+        message: string;
+    }>;
+    invalid: Array<{
+        path: string;
+        error: string;
+    }>;
+}
+/** Converge every package's documents onto its files. Run inside the caller's transaction.
+ *  Idempotent: a second run over unchanged files changes no document, revision or rule (it re-derives
+ *  each document's link edges, which land the same). A changed body replaces the
+ *  document's single revision and publishes `edited`; a vanished file (or plugin) marks its
+ *  document deleted and publishes `deleted`. */
+export declare function reconcilePackageDocuments(db: DatabaseSync, sources?: readonly PackageSource[]): PackageReconcileReport;

package/dist/core/graph/package-docs.js

@@ -0,0 +1,5 @@
+var D=Object.defineProperty;var a=(e,s)=>D(e,"name",{value:s,configurable:!0});import{prepared as m}from"../sqlite-statements.js";import{createHash as _,randomUUID as v}from"node:crypto";import{CrtrError as N}from"../errors.js";import{listInstalledPlugins as I}from"../resolver.js";import{builtinMemoryRoot as A,pluginMemoryDir as L}from"../scope.js";import{documentFields as k}from"../../migrations/004-canvas-documents/fields.js";import{applyDocumentFields as j,deleteDocument as T,documentRecord as R,heads as x,importDocument as U,linksIn as F,moveDocument as b}from"./documents.js";import{isShipped as J}from"./access.js";import{setLinks as C}from"./edges.js";import{publish as H}from"./events.js";import{resolveName as W}from"./names.js";import{packageFiles as M}from"./package-files.js";import{ensureOwner as P,getByRowid as E,setObjectKind as K}from"./objects.js";import{checkoutsForCwd as $}from"./repo-sync/repos.js";import{rulesOf as B}from"./rules.js";function q(){return[{plugin:"crtr",dir:A()},...I("user").filter(e=>e.enabled).map(e=>({plugin:e.name,dir:L(e)}))]}a(q,"packageSources");const z=a(e=>_("sha256").update(e,"utf8").digest("hex"),"sha256");function pe(e,s=q()){const o={created:0,updated:0,deleted:0,conflicts:[],invalid:[]},c=a(t=>$(e,t),"reposFn"),p=new Set,n=[],r=new Set;for(const t of s){let i;try{if(r.has(t.plugin))throw new N("conflict",`plugin "${t.plugin}" is already provided by another package`);r.add(t.plugin),i=P(e,"app","app",`app:${t.plugin}`,t.plugin)}catch(u){if(!(u instanceof N)||u.code!=="conflict")throw u;o.conflicts.push({plugin:t.plugin,message:u.message});continue}p.add(i.rowid);const{files:d,invalid:w}=M(t.dir);o.invalid.push(...w);const g=new Set;for(const u of d){const h=Q(e,i,u,o,c);g.add(h),n.push({owner:i,rowid:h,body:u.body})}O(e,i,g,o,c)}const f=m(e,`SELECT DISTINCT o.owner AS rowid FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.deleted_at IS NULL AND d.source_path IS NOT NULL`).all();for(const{rowid:t}of f)p.has(t)||O(e,E(e,t),new Set,o,c);for(const{owner:t,rowid:i,body:d}of n)G(e,t,E(e,i),d);return o}a(pe,"reconcilePackageDocuments");function G(e,s,o,c){if(o.deleted_at!==null)return;const p={class:"app",app:s,scopes:[]},n=[];for(const t of F(c)){const i=W(e,p,t);"object"in i&&i.object.rowid!==o.rowid&&J(e,i.object)&&n.push({written_as:t,dst:i.object})}const r=a(t=>JSON.stringify(t.map(i=>[i.dst,i.written_as]).sort()),"key"),f=m(e,"SELECT dst, written_as FROM edges WHERE type = 'links-to' AND src = ?").all(o.rowid);r(f)!==r(n.map(t=>({dst:t.dst.rowid,written_as:t.written_as})))&&C(e,o,n)}a(G,"deriveLinks");function Q(e,s,o,c,p){const n=k(o.frontmatter,o.body,{missingPrivacy:"public"}),r={preview:n.preview.trim()===""?o.name:n.preview,summary:n.summary,whyItExists:n.whyItExists,unlisted:n.unlisted,rules:n.rules,lintIgnore:Array.isArray(n.lintIgnore)?n.lintIgnore.filter(l=>typeof l=="string"):null,extensions:n.extensions!==null&&typeof n.extensions=="object"&&!Array.isArray(n.extensions)?n.extensions:null},f=z(o.body);let t=m(e,`SELECT o.* FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.owner = ? AND o.deleted_at IS NULL AND d.source_path = ?`).get(s.rowid,o.path);if(t||(t=m(e,`SELECT o.* FROM objects o JOIN documents d ON d.object = o.rowid
+      WHERE o.type = 'document' AND o.owner = ? AND o.deleted_at IS NULL AND o.name = ? AND d.source_path IS NOT NULL`).get(s.rowid,o.name),t&&m(e,"UPDATE documents SET source_path = ? WHERE object = ?").run(o.path,t.rowid)),!t){const l=U(e,{owner:s,name:o.name,kind:n.kind,privacy:"public",...r,revisions:[{body_hash:f,author:s,rationale:null,created_at:new Date().toISOString()}]});return m(e,"UPDATE documents SET source_path = ? WHERE object = ?").run(o.path,l.rowid),c.created+=1,l.rowid}const i=t.name!==o.name||t.kind!==n.kind;t.name!==o.name&&(t=b(e,null,t,{name:o.name})),t.kind!==n.kind&&(K(e,t,n.kind),t=E(e,t.rowid));const d=R(e,t),[w]=x(e,t),g=w?.body_hash!==f,u=t.preview!==r.preview||d.summary!==r.summary||d.why_it_exists!==r.whyItExists||d.unlisted!==r.unlisted||JSON.stringify(d.lint_ignore)!==JSON.stringify(r.lintIgnore)||JSON.stringify(d.extensions)!==JSON.stringify(r.extensions)||JSON.stringify(B(e,t).map(S))!==JSON.stringify(r.rules.map(S));if(!g&&!u&&!i)return t.rowid;const h=j(e,t,r);if(g&&w){const l=v(),y=w.number+1;m(e,"UPDATE revisions SET rev_id = ?, number = ?, body_hash = ?, created_at = ? WHERE rowid = ?").run(l,y,f,new Date().toISOString(),w.rowid),m(e,"UPDATE documents SET heads_key = ?, revision = ? WHERE object = ?").run(l,y,h.rowid),H(e,{event:"edited",object:h,actor:s,pointer:l,attrs:{revision:y,from_revision:w.number,rationale:"package file changed"}},p)}return c.updated+=1,h.rowid}a(Q,"convergeFile");function S(e){return[e.on,e.deliver,e.match??null,e.matchFrontmatter??null,e.if??null]}a(S,"ruleKey");function O(e,s,o,c,p){const n=m(e,`SELECT o.* FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.owner = ? AND o.deleted_at IS NULL AND d.source_path IS NOT NULL`).all(s.rowid);for(const r of n)o.has(r.rowid)||(T(e,null,r,p),c.deleted+=1)}a(O,"deleteMissing");export{q as packageSources,pe as reconcilePackageDocuments};

package/dist/core/graph/package-files.d.ts

@@ -0,0 +1,20 @@
+/** One markdown file of a package's `memory/` folder. */
+export interface PackageFile {
+    /** owner-local document name; a package root `INDEX.md` is `index` */
+    name: string;
+    path: string;
+    frontmatter: Record<string, unknown> | null;
+    body: string;
+}
+/** The documents of one package folder, sorted by name. A file whose frontmatter does not parse,
+ *  or whose name another file already holds, is returned in `invalid` and is not a document. */
+export declare function packageFiles(dir: string): {
+    files: PackageFile[];
+    invalid: Array<{
+        path: string;
+        error: string;
+    }>;
+};
+/** Strict frontmatter check a plugin package's documents must pass before the
+ *  package installs. */
+export declare function lintPackageFrontmatter(fm: Record<string, unknown> | null): string | null;

package/dist/core/graph/package-files.js

@@ -0,0 +1,2 @@
+var b=Object.defineProperty;var u=(e,r)=>b(e,"name",{value:r,configurable:!0});import{readFileSync as v}from"node:fs";import{relative as $,sep as S}from"node:path";import{parseFrontmatterGeneric as w}from"../frontmatter.js";import{pathExists as k,walkFiles as x}from"../fs-utils.js";import{explicitLocalName as N,isDocKind as A,localNameFromPath as h,representationForPath as E}from"../substrate/schema.js";function W(e){const r=[];if(!k(e))return{files:[],invalid:r};const n=new Map;for(const o of x(e,i=>i.endsWith(".md")&&i!=="SKILL.md",i=>i===".crouter"||i.startsWith(".")).sort()){const i=$(e,o).split(S).join("/");let s;try{s=w(v(o,"utf8"))}catch(f){r.push({path:o,error:`invalid frontmatter: ${(f instanceof Error?f.message:String(f)).split(`
+`)[0]}`});continue}const d=h(i)===""?"":N(s.data)??h(i),a=d===""?"index":d,l={name:a,path:o,frontmatter:s.data,body:s.body,index:E(i)==="directory-index"},c=n.get(a);if(c&&(c.index||!l.index)){r.push({path:o,error:`name ${a} is already held by ${c.path}`});continue}c&&r.push({path:c.path,error:`name ${a} is already held by ${o}`}),n.set(a,l)}return{files:[...n.values()].map(({index:o,...i})=>i).sort((o,i)=>o.name.localeCompare(i.name)),invalid:r}}u(W,"packageFiles");const m=["public","friends","private"],y=["boot","workspace-open","read","memory-read","command","pre-command"],p=["name","preview","content"],j=["system-prompt-visibility","file-read-visibility","applies-to","read-when"],O=["on","match","match-frontmatter","gate","at"],g=["length","broad-memory-read","orphan"];function J(e){if(e===void 0)return null;if(!Array.isArray(e))return`invalid surfaces: ${JSON.stringify(e)} (expected a list of {on, at, match?, match-frontmatter?, gate?} entries)`;for(const r of e){if(r===null||typeof r!="object"||Array.isArray(r))return`invalid surfaces entry: ${JSON.stringify(r)} (expected an {on, at, match?, match-frontmatter?, gate?} object)`;const n=r;for(const a of Object.keys(n))if(!O.includes(a))return`invalid surfaces entry: unknown key \`${a}\` (an entry carries only on, match, match-frontmatter, gate, at)`;const t=n.on;if(typeof t!="string"||!y.includes(t))return`invalid surfaces entry \`on\`: ${JSON.stringify(t)} (expected ${y.join("|")})`;const o=n.at;if(typeof o!="string"||!p.includes(o))return`invalid surfaces entry \`at\`: ${JSON.stringify(o)} (expected ${p.join("|")})`;let i=!1;if(n.match!==void 0){if(t==="boot"||t==="workspace-open")return`invalid surfaces entry: \`match\` is meaningless on \`${t}\` \u2014 the entry's presence is the match; drop it`;const a=n.match,l=typeof a=="string"?[a]:Array.isArray(a)&&a.every(c=>typeof c=="string")?a:null;if(l===null||l.length===0||l.some(c=>c.trim()===""))return`invalid surfaces entry \`match\`: ${JSON.stringify(a)} (expected a non-empty glob or non-empty glob list)`;i=!0}const s=n["match-frontmatter"];if(s!==void 0){if(t!=="read")return"invalid surfaces entry: `match-frontmatter` is a `read`-event predicate only";if(s===null||typeof s!="object"||Array.isArray(s))return`invalid surfaces entry \`match-frontmatter\`: ${JSON.stringify(s)} (expected a field\u2192matcher object)`}if((t==="read"||t==="memory-read"||t==="command"||t==="pre-command")&&!i&&s===void 0)return`invalid surfaces entry: a \`${t}\` entry requires \`match\`${t==="read"?" or `match-frontmatter`":""}`;const d=n.gate;if(d!==void 0&&(d===null||typeof d!="object"||Array.isArray(d)))return`invalid surfaces entry \`gate\`: ${JSON.stringify(d)} (expected a field\u2192matcher object)`}return null}u(J,"lintPackageSurfaces");function C(e){if(e===null)return"missing frontmatter: a package document requires `kind: knowledge|preference`";if(!A(e.kind))return`invalid kind: ${JSON.stringify(e.kind)} (expected knowledge|preference)`;if("when"in e||"why"in e)return'retired `when`/`why` keys: merge them into one `when-and-why-to-read` line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';if(typeof e["when-and-why-to-read"]!="string"||e["when-and-why-to-read"].trim()==="")return'missing `when-and-why-to-read`: one routing line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';for(const n of j)if(n in e)return`retired \`${n}\` key: a package document no longer carries it; delete it and, to load the document on its own, route it with a \`surfaces\` list of {on: ${y.join("|")}, at: ${p.join("|")}, match?, match-frontmatter?, gate?} entries (omit \`surfaces\` for a package document delivered by no rule \u2014 read only when pointed at, listed, or searched)`;if("privacy"in e&&!m.includes(e.privacy))return`invalid privacy: ${JSON.stringify(e.privacy)} (expected ${m.join("|")})`;if(e.unlisted!==void 0&&typeof e.unlisted!="boolean")return`invalid unlisted: ${JSON.stringify(e.unlisted)} (expected a boolean)`;const r=J(e.surfaces);if(r!==null)return r;if(e.gate!==void 0&&(e.gate===null||typeof e.gate!="object"||Array.isArray(e.gate)))return`invalid gate: ${JSON.stringify(e.gate)} (expected a field\u2192matcher object)`;if(e.slash!==void 0&&typeof e.slash!="boolean")return`invalid slash: ${JSON.stringify(e.slash)} (expected a boolean)`;if(e.rationale!==void 0&&typeof e.rationale!="string")return`invalid rationale: ${JSON.stringify(e.rationale)} (expected a string)`;if(e["lint-ignore"]!==void 0){const n=Array.isArray(e["lint-ignore"])?e["lint-ignore"]:[e["lint-ignore"]];if(n.length===0||!n.every(t=>typeof t=="string"&&g.includes(t)))return`invalid lint-ignore: ${JSON.stringify(e["lint-ignore"])} (suppressible rules: ${g.map(t=>`\`${t}\``).join(", ")})`}return null}u(C,"lintPackageFrontmatter");export{C as lintPackageFrontmatter,W as packageFiles};

package/dist/core/graph/reader.d.ts

@@ -0,0 +1,30 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { RequestPrincipal } from '../../daemon/api/router.js';
+import { type ActiveGrant } from '../grants/mirror.js';
+import type { Checkout, ObjectRow, Reader } from './types.js';
+/** The repos enclosing a directory, with their checkout roots, nearest first. */
+export type ReposFn = (cwd: string) => Checkout[];
+export declare function readerFor(db: DatabaseSync, principal: RequestPrincipal, reposFn: ReposFn): Exclude<Reader, {
+    class: 'object';
+}>;
+export declare function readerForNode(db: DatabaseSync, nodeId: string, reposFn: ReposFn, lookups?: ReaderLookups, allowRevoked?: boolean): Extract<Reader, {
+    class: 'node';
+}>;
+/** A receiving object reads using its owner's app grant, not its registering caller's rights. */
+export declare function readerForObject(db: DatabaseSync, watcher: ObjectRow, reposFn?: ReposFn, lookups?: ReaderLookups): Extract<Reader, {
+    class: 'node' | 'object';
+}>;
+/** What building a node reader looks up besides the node's own row. `liveLookups` reads each
+ *  one per call; `publishLookups` memoizes them for one publish inside its transaction, so the
+ *  readers of one event share a single config read and one lookup per grant, owner and
+ *  profile. Never keep a memoized one past that transaction. */
+export interface ReaderLookups {
+    grantById(grantId: string): ActiveGrant | null;
+    grantFor(app: string, sub: string): ActiveGrant | null;
+    terminalHasIssuer(): boolean;
+    object(rowid: number): ObjectRow | null;
+    profile(profileId: string, app: ObjectRow): ObjectRow;
+}
+export declare function liveLookups(db: DatabaseSync): ReaderLookups;
+export declare function publishLookups(db: DatabaseSync): ReaderLookups;
+export declare function profileObject(db: DatabaseSync, profileId: string, app: ObjectRow): ObjectRow;

package/dist/core/graph/reader.js

@@ -0,0 +1,3 @@
+var h=Object.defineProperty;var s=(o,e)=>h(o,"name",{value:e,configurable:!0});import{prepared as u}from"../sqlite-statements.js";import{covers as H,parseScope as b}from"@north-light/identity";import{activeGrant as N,grantFor as x}from"../grants/mirror.js";import{prepared as j}from"../canvas/db.js";import{readConfig as y}from"../config.js";import{SCOPE_VOCABULARY as O}from"../scopes.js";import{loadExactProfileManifest as C}from"../profiles/manifest.js";import{ensureOwner as w,getByRowid as L,nodeObject as M}from"./objects.js";function R(o){return{repos:o.map(e=>e.repo),checkouts:o}}s(R,"inRepos");function V(o,e,a){if(e.class==="anonymous")throw new Error("a publish token cannot read as a principal");if(e.class==="person")return{class:"person",person:F(o)};if(e.class==="app")return{class:"app",app:v(o,e.app),scopes:e.scopes};const n=E(o),r=M(o,e.node),t=r.owner===null?null:n.object(r.owner);if(!t)throw new Error(`node ${e.node} has no owner`);const i=u(o,"SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(e.node);return{class:"node",node:r,app:t,scopes:_(e.app,e.sub,e.grant,e.scopes,n),cwd:i.cwd,...R(a(i.cwd)),profile:i.profile_id===null?null:n.profile(i.profile_id,t)}}s(V,"readerFor");function $(o,e,a,n=E(o),r=!1){const t=j(o,"SELECT o.* FROM objects o WHERE o.id = ? AND o.type = 'node'").get(e),i=j(o,`SELECT (SELECT external_id FROM identities WHERE object = ?) AS grantee,
+    sub, grant_id, scopes_json, cwd, profile_id FROM nodes WHERE node_id = ?`).get(t?.owner??null,e);if(!t||!i)throw new Error(`no node ${e}`);const{grantee:l,sub:p,grant_id:f,scopes_json:c,cwd:m,profile_id:g}=i,d=t.owner===null?null:n.object(t.owner);if(!d)throw new Error(`node ${e} has no owner`);const S=c===null?null:JSON.parse(c);return{class:"node",node:t,app:d,scopes:_(l,p??"",f,S,n,r),cwd:m,...R(a(m)),profile:g===null?null:n.profile(g,d)}}s($,"readerForNode");function Y(o,e,a=()=>[],n=E(o)){if(e.type==="node")return $(o,e.id,a,n,!0);const r=e.owner===null?null:n.object(e.owner);if(!r)throw new Error(`watcher ${e.id} has no owner`);const i=(r.type==="app"?r:r.type==="profile"&&r.owner!==null?n.object(r.owner):null)??u(o,"SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object WHERE i.external_id = 'app:terminal' AND i.scheme = 'app'").get()??u(o,"SELECT * FROM objects WHERE type = 'person' AND name = 'user'").get();if(!i)throw new Error("no terminal app or person object");const l=u(o,"SELECT external_id FROM identities WHERE object = ? AND scheme = 'app'").get(i.rowid)?.external_id??"app:terminal",p=u(o,"SELECT resolved_scopes_json FROM grants WHERE grantee = ? AND status = 'active'").all(l),f=r.type==="person"?null:p.length===0?l==="app:terminal"&&!n.terminalHasIssuer()?O:null:p.length===1?JSON.parse(p[0].resolved_scopes_json).filter(c=>c.mode==="always").map(c=>b(c.scope)):null;return{class:"object",object:e,node:e,owner:r,app:i,scopes:f,repos:r.type==="repo"?[r]:[]}}s(Y,"readerForObject");function E(o){return{grantById:N,grantFor:x,terminalHasIssuer:s(()=>!!y("user").runtime?.issuer,"terminalHasIssuer"),object:s(e=>L(o,e),"object"),profile:s((e,a)=>A(o,e,a),"profile")}}s(E,"liveLookups");function q(o){const e=E(o),a=new Map,n=s((r,t)=>(a.has(r)||a.set(r,t()),a.get(r)),"memo");return{grantById:s(r=>n(`g\0${r}`,()=>e.grantById(r)),"grantById"),grantFor:s((r,t)=>n(`a\0${r}\0${t}`,()=>e.grantFor(r,t)),"grantFor"),terminalHasIssuer:s(()=>n("issuer",()=>e.terminalHasIssuer()),"terminalHasIssuer"),object:s(r=>n(`o\0${r}`,()=>e.object(r)),"object"),profile:s((r,t)=>n(`p\0${r}\0${t.rowid}`,()=>e.profile(r,t)),"profile")}}s(q,"publishLookups");function _(o,e,a,n,r,t=!1){const i=a?r.grantById(a):r.grantFor(o,e),l=i&&i.grantee===o?i.resolved:o==="app:terminal"&&!r.terminalHasIssuer()?O:null;if(l===null){if(t)return null;throw new Error(`the grant of ${o} is not active`)}return n===null?l:n.filter(p=>l.some(f=>H(f,p)))}s(_,"nodeScopes");function F(o){return w(o,"person","local-user","user:local","user")}s(F,"personObject");function v(o,e){return e==="user:local"?F(o):w(o,"app","app",e,e.replace(/^app:/,""))}s(v,"appObject");function A(o,e,a){return u(o,`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE i.scheme = 'profile' AND i.external_id = ?`).get(e)??w(o,"profile","profile",e,C(e).manifest.name,a)}s(A,"profileObject");export{E as liveLookups,A as profileObject,q as publishLookups,V as readerFor,$ as readerForNode,Y as readerForObject};

package/dist/core/graph/receiver-url.d.ts

@@ -0,0 +1,11 @@
+import * as dns from 'node:dns/promises';
+import { request } from 'node:https';
+export declare function isPublicReceiverAddress(address: string): boolean;
+export declare function receiverEndpoint(raw: string): URL;
+/** Resolve all answers, not merely the first: a mixed public/private DNS response is unsafe. */
+export declare function resolveReceiverAddress(url: URL, resolve?: typeof dns.lookup, signal?: AbortSignal, isAllowedAddress?: (address: string) => boolean): Promise<{
+    address: string;
+    family: 4 | 6;
+}>;
+/** The vetted DNS answer is pinned to this one socket; never delegate a second lookup to TLS. */
+export declare function postReceiverUrl(raw: string, body: string, headers: Record<string, string>, timeoutMs: number, resolve?: typeof dns.lookup, send?: typeof request, isAllowedAddress?: (address: string) => boolean): Promise<number>;

package/dist/core/graph/receiver-url.js

@@ -0,0 +1 @@
+var x=Object.defineProperty;var i=(r,e)=>x(r,"name",{value:e,configurable:!0});import*as b from"node:dns/promises";import{BlockList as v,isIP as h}from"node:net";import{request as L}from"node:https";const m=new v;for(const[r,e]of[["0.0.0.0",8],["10.0.0.0",8],["100.64.0.0",10],["127.0.0.0",8],["169.254.0.0",16],["172.16.0.0",12],["192.0.0.0",24],["192.0.2.0",24],["192.88.99.0",24],["192.168.0.0",16],["198.18.0.0",15],["198.51.100.0",24],["203.0.113.0",24],["224.0.0.0",4],["240.0.0.0",4]])m.addSubnet(r,e,"ipv4");for(const[r,e]of[["2001::",23],["2001:4:112::",48],["2001:db8::",32],["2002::",16],["3fff::",20]])m.addSubnet(r,e,"ipv6");const w=new v;w.addSubnet("2000::",3,"ipv6");function P(r){const e=h(r);return e===4?!m.check(r,"ipv4"):e===6&&w.check(r,"ipv6")&&!m.check(r,"ipv6")}i(P,"isPublicReceiverAddress");function k(r){let e;try{e=new URL(r)}catch{throw new Error("receiver URL must be an absolute HTTPS URL")}if(e.protocol!=="https:"||!e.hostname||e.username||e.password||e.hash)throw new Error("receiver URL must be HTTPS without credentials or fragment");return e}i(k,"receiverEndpoint");async function E(r,e=b.lookup,n=AbortSignal.timeout(5e3),f=P){const a=r.hostname.replace(/^\[|\]$/g,""),l=h(a),s=l?[{address:a,family:l}]:await Promise.race([e(a,{all:!0,verbatim:!0}),new Promise((d,t)=>{n.aborted?t(n.reason):n.addEventListener("abort",()=>t(n.reason),{once:!0})})]);if(!s.length||s.some(d=>!f(d.address)))throw new Error("receiver URL resolves to a non-public IP address");const c=s[0];return{address:c.address,family:c.family}}i(E,"resolveReceiverAddress");async function T(r,e,n,f,a=b.lookup,l=L,s=P){const c=k(r),d=AbortSignal.timeout(f),t=await E(c,a,d,s);return new Promise((y,R)=>{const u=l(c,{method:"POST",headers:n,agent:!1,signal:d,lookup:i((o,S,p)=>{S.all?p(null,[t]):p(null,t.address,t.family)},"lookup")},o=>{o.resume(),y(o.statusCode??0)});u.on("socket",o=>{o.on("connect",()=>{(!o.remoteAddress||o.remoteAddress!==t.address||!s(o.remoteAddress))&&u.destroy(new Error("receiver socket connected to a non-public or unexpected IP address"))})}),u.on("error",R),u.end(e)})}i(T,"postReceiverUrl");export{P as isPublicReceiverAddress,T as postReceiverUrl,k as receiverEndpoint,E as resolveReceiverAddress};

package/dist/core/graph/receivers.d.ts

@@ -0,0 +1,26 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow, Level, ListenDelivery } from './types.js';
+export interface ReceiverDestination {
+    id: string;
+    reception: 1 | 2;
+    delivery: ListenDelivery;
+}
+export interface ReceivedMessage {
+    messageId: string;
+    event: string;
+    level: Level;
+    senderNodeId: string | null;
+    elevatesTier: boolean;
+}
+export interface Receiver {
+    bodyOwner(destinations: readonly ReceiverDestination[]): string | null;
+    enqueue(db: DatabaseSync, message: ReceivedMessage, destinations: readonly ReceiverDestination[]): void;
+}
+export type ReceiverName = 'inbox' | 'argv' | 'url' | 'queue';
+/** The receiver is per instance, not per kind. An action's historical argv JSON is unchanged. */
+export declare function receiverForObject(db: DatabaseSync, object: ObjectRow): ReceiverName | undefined;
+export declare const BACKLOG_CAP = 1000;
+export declare function onQueueSignal(objectId: string, cb: () => void): () => void;
+export declare function signalQueue(id: string): void;
+export declare const argvReceiver: Receiver;
+export declare const RECEIVERS: Readonly<Record<ReceiverName, Receiver>>;

package/dist/core/graph/receivers.js

@@ -0,0 +1,7 @@
+var f=Object.defineProperty;var i=(e,t)=>f(e,"name",{value:t,configurable:!0});import{prepared as o}from"../sqlite-statements.js";import{randomBytes as g}from"node:crypto";import{nodeInbox as _}from"./kinds/node.js";function L(e,t){const n=o(e,"SELECT receiver_json FROM custom_objects WHERE object = ?").get(t.rowid);if(!n?.receiver_json)return;const r=JSON.parse(n.receiver_json);if(r==="queue")return"queue";if(r&&typeof r=="object"&&!Array.isArray(r)){if("url"in r)return"url";if("argv"in r)return"argv"}}i(L,"receiverForObject");const E=1e3,a=new Map;function A(e,t){const n=a.get(e)??new Set;return n.add(t),a.set(e,n),()=>{n.delete(t),n.size===0&&a.delete(e)}}i(A,"onQueueSignal");function p(e){setImmediate(()=>{for(const t of a.get(e)??[])t()})}i(p,"signalQueue");function m(e,t){const n=o(e,`SELECT COUNT(*) AS n FROM deliveries WHERE destination_id = ?
+    AND state = 'pending' AND canceled_at IS NULL`).get(t).n;if(n<=E)return;const r=o(e,`SELECT delivery_id, message_id FROM deliveries
+    WHERE destination_id = ? AND state = 'pending' AND canceled_at IS NULL
+    ORDER BY created_at, rowid LIMIT ?`).all(t,n-E);for(const s of r)o(e,"DELETE FROM deliveries WHERE delivery_id = ?").run(s.delivery_id),o(e,"DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(s.message_id,s.message_id);r.length&&o(e,`UPDATE custom_objects SET dropped = dropped + ? WHERE object =
+    (SELECT rowid FROM objects WHERE id = ?)`).run(r.length,t)}i(m,"cap");function c(e,t){return{bodyOwner:i(()=>null,"bodyOwner"),enqueue(n,r,s){const d=Date.now(),l=o(n,`INSERT INTO deliveries
+        (delivery_id, message_id, destination_id, urgency, wake, state, next_attempt_at, created_at, updated_at)
+        VALUES (?, ?, ?, 'normal', 0, 'pending', ?, ?, ?)`);for(const u of s)l.run(g(16).toString("hex"),r.messageId,u.id,e?d:null,d,d),m(n,u.id),t&&p(u.id)}}}i(c,"pushReceiver");const R=c(!0,!1),N={inbox:_,argv:R,url:c(!0,!1),queue:c(!1,!0)};export{E as BACKLOG_CAP,N as RECEIVERS,R as argvReceiver,A as onQueueSignal,L as receiverForObject,p as signalQueue};

package/dist/core/graph/repo-sync/exchange.d.ts

@@ -0,0 +1,34 @@
+/** The canvas side of repo sync: export a repo space's public documents to `refs/crtr/docs`
+ *  tree files, and import a changed tree back into canvas.db. Export only reads; import only
+ *  adds revisions (never drops one) and publishes `created`, `edited` and `deleted` with a
+ *  null actor, since the act happened on another runtime. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ReposFn } from '../reader.js';
+import type { ObjectRow } from '../types.js';
+/**
+ * The tree (path → file text) of every public document the repo space owns, deleted ones
+ * included. A revision already in `previous` is copied verbatim, so a remote author and the
+ * links it was written with survive; a revision made here carries its author's object id, and
+ * a head carries the document's current `links-to` edges.
+ */
+export declare function exportRepo(db: DatabaseSync, repo: ObjectRow, previous: Map<string, string> | null): Map<string, string>;
+export interface ImportResult {
+    created: number;
+    revisions: number;
+    deleted: number;
+    needsMerge: string[];
+    refused: Array<{
+        path: string;
+        reason: string;
+    }>;
+}
+/**
+ * Apply the difference between two trees (the one last imported and the new one) to the
+ * repo's documents, in one transaction. Per changed file: a file that does not parse, is not
+ * public, or names an id held by an object outside this repo is refused and reported; a new
+ * document is created with its id; arriving revisions are added (author NULL); changed record
+ * fields and a rename are applied; a tombstone or a removed file deletes. Each document
+ * publishes once: `created`, `edited` (with `heads` and `needs_merge`) or `deleted`. A
+ * document that fails is rolled back alone and reported in `refused`.
+ */
+export declare function importTree(db: DatabaseSync, repo: ObjectRow, before: Map<string, string>, after: Map<string, string>, reposFn?: ReposFn): ImportResult;

package/dist/core/graph/repo-sync/exchange.js

@@ -0,0 +1,2 @@
+var B=Object.defineProperty;var f=(e,t)=>B(e,"name",{value:t,configurable:!0});import{prepared as y}from"../../sqlite-statements.js";import{get as T,put as j}from"../bodies.js";import{setLinks as H}from"../edges.js";import{collectUnlinked as W,deleteDocument as D,documentRecord as M,heads as $,importDocument as F,insertImportedRevisions as J,moveDocument as P,setDocumentRecord as Y}from"../documents.js";import{publish as C}from"../events.js";import{getById as I,getByRowid as K,setObjectKind as z}from"../objects.js";import{rulesOf as U}from"../rules.js";import{SPACES as V}from"../spaces/index.js";import{docPath as q,parseDoc as g,serializeDoc as G}from"./ref-format.js";function N(e){const t=V[e.type];if(e.owner!==null||!t||t.sync!=="repo-ref")throw new Error(`${e.type} ${e.id} is not a space that syncs through a repo ref`)}f(N,"assertRepoRefSpace");function Q(e){const t=new Map;for(const[r,i]of e??[]){const l=g(r,i);l.ok&&t.set(l.doc.id,l.doc)}return t}f(Q,"parseMap");function ue(e,t,r){N(t);const i=Q(r),l=y(e,"SELECT * FROM objects WHERE type = 'document' AND owner = ? AND privacy = 'public' ORDER BY rowid").all(t.rowid),u=y(e,"SELECT rowid, rev_id, number, body_hash, author, rationale, created_at FROM revisions WHERE document = ? ORDER BY number, rev_id"),m=y(e,"SELECT p.rev_id FROM revision_parents rp JOIN revisions p ON p.rowid = rp.parent WHERE rp.child = ?"),o=y(e,`SELECT e.written_as, o.id FROM edges e JOIN objects o ON o.rowid = e.dst
+    WHERE e.type = 'links-to' AND e.src = ? ORDER BY e.written_as, o.id`),d=new Map;for(const n of l){const p=M(e,n),w=new Map((i.get(n.id)?.revisions??[]).map(s=>[s.rev_id,s])),h=new Set($(e,n).map(s=>s.rev_id)),R=o.all(n.rowid).map(s=>({written_as:s.written_as??"",dst:s.id})),v=u.all(n.rowid).map(s=>w.get(s.rev_id)??{rev_id:s.rev_id,number:s.number,parents:m.all(s.rowid).map(k=>k.rev_id),body:T(s.body_hash),body_hash:s.body_hash,author:s.author===null?null:K(e,s.author)?.id??null,rationale:s.rationale,created_at:s.created_at,links:h.has(s.rev_id)?R:[]});if(v.length===0)continue;const O=U(e,n).map(s=>({position:s.position,on:s.on,match:s.match??null,match_frontmatter:s.matchFrontmatter??null,if:s.if??null,deliver:s.deliver})),_={id:n.id,name:n.name,kind:n.kind??"document",privacy:"public",preview:n.preview,summary:p.summary,why_it_exists:p.why_it_exists,unlisted:p.unlisted,lint_ignore:p.lint_ignore,extensions:p.extensions,created_at:n.created_at,deleted_at:n.deleted_at,rules:O,revisions:v};d.set(q(n.id),G(_))}return d}f(ue,"exportRepo");function X(e){return[...e].sort((t,r)=>t.position-r.position).map(t=>({on:t.on,deliver:t.deliver,...t.match!==null&&t.match!==void 0?{match:t.match}:{},...t.match_frontmatter!==null&&t.match_frontmatter!==void 0?{matchFrontmatter:t.match_frontmatter}:{},...t.if!==null&&t.if!==void 0?{if:t.if}:{}}))}f(X,"toRuleSpecs");const Z=f((e,t)=>JSON.stringify(e??null)===JSON.stringify(t??null),"same");function L(e,t){const r={},i=f(l=>!e||!Z(e[l],t[l]),"differs");return i("preview")&&(r.preview=t.preview),i("summary")&&(r.summary=t.summary),i("why_it_exists")&&(r.whyItExists=t.why_it_exists),i("unlisted")&&(r.unlisted=t.unlisted),i("lint_ignore")&&(r.lintIgnore=t.lint_ignore),i("extensions")&&(r.extensions=t.extensions),i("rules")&&(r.rules=X(t.rules)),r}f(L,"changedFields");let b=0;function A(e,t){const r=`repo_sync_import_${++b}`;e.exec(`SAVEPOINT ${r}`);try{const i=t();return e.exec(`RELEASE ${r}`),i}catch(i){throw e.exec(`ROLLBACK TO ${r}`),e.exec(`RELEASE ${r}`),i}}f(A,"atomic");function me(e,t,r,i,l){N(t);const u={created:0,revisions:0,deleted:0,needsMerge:[],refused:[]},m=[];for(const[o,d]of i){if(r.get(o)===d)continue;const n=g(o,d);if(!n.ok){u.refused.push({path:o,reason:n.reason});continue}const p=r.has(o)?g(o,r.get(o)):null;m.push({path:o,prior:p?.ok?p.doc:null,doc:n.doc})}for(const[o,d]of r){if(i.has(o))continue;const n=g(o,d);n.ok&&m.push({path:o,prior:n.doc,doc:null,priorId:n.doc.id})}for(const o of m)for(const d of o.doc?.revisions??[])j(d.body);return A(e,()=>{for(const o of m)try{A(e,()=>ee(e,t,o.prior,o.doc,o.priorId??o.doc.id,u,l))}catch(d){u.refused.push({path:o.path,reason:d.message})}}),u}f(me,"importTree");function ee(e,t,r,i,l,u,m){const o=I(e,l);if(o&&(o.type!=="document"||o.owner!==t.rowid))throw new Error(`id ${l} is held by ${o.type} ${o.name} outside ${t.name}`);if(!i){o&&!o.deleted_at&&(D(e,null,o,m),u.deleted++);return}const d=y(e,"SELECT count(*) AS n FROM revisions WHERE document = ?");let n,p=!1,w=0,h=0;if(o){n=o,w=M(e,n).revision;const a=i.kind;(r?r.kind!==a:n.kind!==a)&&z(e,n,a);const c=L(r,i);Object.keys(c).length>0&&(n=Y(e,null,n,c)),i.name!==n.name&&!n.deleted_at&&(n=P(e,null,n,{name:i.name}))}else{const c=i.revisions.filter(E=>E.parents.length===0).sort((E,S)=>E.number-S.number||E.rev_id.localeCompare(S.rev_id))[0];if(!c)throw new Error(`${i.name}: no root revision`);n=F(e,{id:i.id,owner:t,name:i.name,kind:i.kind,preview:i.preview,privacy:"public",...L(null,i),revisions:[{rev_id:c.rev_id,body_hash:c.body_hash,author:null,rationale:c.rationale,created_at:c.created_at}]}),p=!0,h=1}const R=d.get(n.rowid).n,{headCount:v}=J(e,n,i.revisions.map(a=>({rev_id:a.rev_id,parents:a.parents,body_hash:a.body_hash,rationale:a.rationale,created_at:a.created_at})));h+=d.get(n.rowid).n-R,u.revisions+=h;const _=$(e,n)[0],s=new Map(i.revisions.map(a=>[a.rev_id,a]));if(h>0){const a=(s.get(_.rev_id)?.links??[]).map(c=>({written_as:c.written_as,dst:I(e,c.dst)})).filter(c=>c.dst!==null);W(e,H(e,n,a),m)}if(v>1&&u.needsMerge.push(n.id),i.deleted_at&&!n.deleted_at){D(e,null,n,m),u.deleted++;return}if(p){u.created++,C(e,{event:"created",object:n,actor:null,attrs:{revision:_.number},pointer:_.rev_id},m);return}if(h===0)return;const x=i.revisions.filter(a=>!r?.revisions.some(c=>c.rev_id===a.rev_id)).sort((a,c)=>c.number-a.number||c.created_at.localeCompare(a.created_at))[0]??s.get(_.rev_id);C(e,{event:"edited",object:n,actor:null,pointer:_.rev_id,attrs:{revision:_.number,from_revision:w,rationale:x?.rationale??null,author:x?.author??null,heads:v,needs_merge:v>1}},m)}f(ee,"importOne");export{ue as exportRepo,me as importTree};

package/dist/core/graph/repo-sync/identity.d.ts

@@ -0,0 +1,30 @@
+export type CheckoutIdentity = {
+    ok: true;
+    scheme: 'git';
+    externalId: string;
+    remoteUrl: string;
+    root: string;
+    commonDir: string;
+    handleHint: string;
+} | {
+    ok: true;
+    scheme: 'local-path';
+    externalId: string;
+    root: string;
+    handleHint: string;
+} | {
+    ok: false;
+    code: 'not-a-repo' | 'git-lookup-failed';
+    dir: string;
+    reason: string;
+};
+/** `https://User@GitHub.com:443/Org/Repo.git/` and `git@github.com:org/repo`
+ *  both give `github.com/org/repo`. A local remote (absolute path or
+ *  `file://`) gives `file:<realpath>`, resolved against `base` when relative. */
+export declare function normalizeRemoteUrl(url: string, base?: string): string;
+/** Owner handle a new repo object takes: the last segment of its external id (the normalized remote path, or the folder of a local-path repo), without `.git`. */
+export declare function handleHint(externalId: string): string;
+export declare function identifyCheckout(dir: string): CheckoutIdentity;
+/** Checkouts enclosing `dir`, innermost first; stops at the first directory
+ *  that is not in a repo. A failed lookup ends the chain and is returned last. */
+export declare function checkoutChain(dir: string): CheckoutIdentity[];

package/dist/core/graph/repo-sync/identity.js

@@ -0,0 +1 @@
+var C=Object.defineProperty;var u=(o,e)=>C(o,"name",{value:e,configurable:!0});import{existsSync as O}from"node:fs";import{basename as g,dirname as k,isAbsolute as v,resolve as $}from"node:path";import{gitSync as x}from"../../git.js";import{realpathOrSelf as f}from"../../fs-utils.js";const p=5e3,M=6e4,h=new Map;function b(o,e){const r=o.trim();let t,s;const l=/^([a-z][a-z0-9+.-]*):\/\//i.exec(r);if(l){if(l[1].toLowerCase()==="file")return`file:${w(decodeURIComponent(r.slice(7)),e)}`;const i=r.slice(l[0].length),a=i.indexOf("/"),c=a<0?i:i.slice(0,a);s=a<0?"":i.slice(a),t=c.replace(/^.*@/,"").replace(/:\d*$/,"")}else{const i=/^(?:[^@/]+@)?([^:/]+):(.*)$/.exec(r);if(!i)return`file:${w(r,e)}`;t=i[1],s=i[2]}return s=s.replace(/^\/*~?/,"").replace(/\/+$/,"").replace(/\.git$/i,"").replace(/\/+$/,""),`${t}/${s}`.toLowerCase()}u(b,"normalizeRemoteUrl");function w(o,e){const r=v(o)?o:$(e??process.cwd(),o);return f(r).replace(/\/+$/,"")||"/"}u(w,"localPath");function y(o){const e=o.startsWith("file:")?o.slice(5):o;return g(e).replace(/\.git$/i,"")||"repo"}u(y,"handleHint");function L(o){const e=f($(o)),r=h.get(e);if(r&&Date.now()-r.at<M)return r.id;if(!O(e))return{ok:!1,code:"not-a-repo",dir:e,reason:"directory does not exist"};const t=x(["rev-parse","--path-format=absolute","--show-toplevel","--git-common-dir"],e,void 0,{timeoutMs:p});if(t.timedOut)return{ok:!1,code:"git-lookup-failed",dir:e,reason:`git lookup timed out after ${p}ms`};if(t.status!==0){if(/not a git repository/i.test(t.stderr)){const n={ok:!1,code:"not-a-repo",dir:e,reason:t.stderr.trim()};return h.set(e,{at:Date.now(),id:n}),n}return{ok:!1,code:"git-lookup-failed",dir:e,reason:t.stderr.trim()||t.processError||`git rev-parse exited ${t.status}`}}const[s,l]=t.stdout.split(/\r?\n/).map(n=>n.trim());if(!s||!l)return{ok:!1,code:"git-lookup-failed",dir:e,reason:"git rev-parse returned no work tree (bare repository?)"};const i=f(s),a=f(l),c=x(["remote","get-url","origin"],i,void 0,{timeoutMs:p});if(c.timedOut)return{ok:!1,code:"git-lookup-failed",dir:e,reason:`git remote lookup timed out after ${p}ms`};let d;const m=c.stdout.trim();if(c.status===0&&m!==""){const n=b(m,i);d={ok:!0,scheme:"git",externalId:n,remoteUrl:m,root:i,commonDir:a,handleHint:y(n)}}else if(/no such remote/i.test(c.stderr)){const n=g(a)===".git"?k(a):a;d={ok:!0,scheme:"local-path",externalId:n,root:i,handleHint:y(n)}}else return{ok:!1,code:"git-lookup-failed",dir:e,reason:c.stderr.trim()||`git remote get-url exited ${c.status}`};return h.set(e,{at:Date.now(),id:d}),d}u(L,"identifyCheckout");function z(o){const e=[];let r=o;for(;;){const t=L(r);if(!t.ok)return t.code==="git-lookup-failed"&&e.push(t),e;e.push(t);const s=k(t.root);if(s===t.root)return e;r=s}}u(z,"checkoutChain");export{z as checkoutChain,y as handleHint,L as identifyCheckout,b as normalizeRemoteUrl};

package/dist/core/graph/repo-sync/index.d.ts

@@ -0,0 +1,4 @@
+/** The import surface of repo sync for other domains. */
+export { startRepoSync, noteNodeWorking, noteNodeBooting, noteRepoDocumentsChanged, syncRepo, FIRST_FETCH_WAIT_MS } from './sync.js';
+export type { SyncOutcome, SyncStep } from './sync.js';
+export type { ImportResult } from './exchange.js';

package/dist/core/graph/repo-sync/index.js

@@ -0,0 +1 @@
+import{startRepoSync as n,noteNodeWorking as t,noteNodeBooting as p,noteRepoDocumentsChanged as r,syncRepo as R,FIRST_FETCH_WAIT_MS as c}from"./sync.js";export{c as FIRST_FETCH_WAIT_MS,p as noteNodeBooting,t as noteNodeWorking,r as noteRepoDocumentsChanged,n as startRepoSync,R as syncRepo};

package/dist/core/graph/repo-sync/mirror.d.ts

@@ -0,0 +1,30 @@
+/** crtr's own bare git repo holding one repo object's `refs/crtr/docs`. Nothing
+ *  here touches a user's checkout: fetch and push address the remote URL directly.
+ *  Local refs: `refs/crtr/docs` (local tip), `refs/crtr/remote-docs` (last fetched),
+ *  `refs/crtr/imported` (tree last imported into canvas.db). */
+export interface Mirror {
+    dir: string;
+}
+export type RemoteResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare const FIRST_FETCH_MARKER = "first-fetch-done";
+export declare function openMirror(repoObjectId: string): Promise<Mirror>;
+export declare function resolveRef(m: Mirror, ref: string): Promise<string | null>;
+export declare function readTree(m: Mirror, ref: string): Promise<Map<string, string> | null>;
+export declare function commitTree(m: Mirror, files: Map<string, string>, parents: string[], message: string): Promise<string>;
+/** `expectOld` null requires the ref to not exist yet. */
+export declare function setRef(m: Mirror, ref: string, sha: string, expectOld: string | null): Promise<void>;
+export declare function mergeBase(m: Mirror, a: string, b: string): Promise<string | null>;
+export declare function isAncestor(m: Mirror, a: string, b: string): Promise<boolean>;
+export declare function remoteDocsTip(m: Mirror, url: string): Promise<RemoteResult<string | null>>;
+export declare function fetchDocs(m: Mirror, url: string): Promise<RemoteResult<string>>;
+/** Never forced; `--no-verify` so no user hook runs. A non-fast-forward answers `rejected`. */
+export declare function pushDocs(m: Mirror, url: string, sha: string): Promise<RemoteResult<'pushed'> | {
+    ok: false;
+    reason: 'rejected';
+}>;

package/dist/core/graph/repo-sync/mirror.js

@@ -0,0 +1,6 @@
+var k=Object.defineProperty;var i=(t,r)=>k(t,"name",{value:r,configurable:!0});import{spawn as A}from"node:child_process";import{existsSync as R}from"node:fs";import{mkdir as F,mkdtemp as S,rm as N,writeFile as _}from"node:fs/promises";import{join as x}from"node:path";import{gitAsync as $}from"../../git.js";import{crtrHome as G}from"../../canvas/paths.js";const g=6e4,j="first-fetch-done",T={...process.env,GIT_TERMINAL_PROMPT:"0",GIT_AUTHOR_NAME:"crtr",GIT_AUTHOR_EMAIL:"crtr@localhost",GIT_COMMITTER_NAME:"crtr",GIT_COMMITTER_EMAIL:"crtr@localhost"};function u(t,r,s,e={}){return $(["--git-dir",t.dir,...r],void 0,s,{env:e.env??T,timeoutMs:e.timeoutMs})}i(u,"git");function f(t,r){return new Error(`git ${t} failed (${r.timedOut?"timed out":`exit ${r.status}`}): ${r.stderr.trim()}`)}i(f,"fail");function y(t){return t.timedOut?"timed out":t.stderr.trim()||`exit ${t.status}`}i(y,"reason");async function K(t){const r=x(G(),"repo-sync",t),s={dir:r};if(!R(x(r,"HEAD"))){await F(r,{recursive:!0});const e=await $(["init","--bare","--quiet",r],void 0,void 0,{env:T});if(e.status!==0)throw f("init",e)}return s}i(K,"openMirror");async function v(t,r){const s=await u(t,["rev-parse","--verify","--quiet",`${r}^{commit}`]);if(s.status===0)return s.stdout.trim();if(s.status===1&&!s.executionFailed)return null;throw f("rev-parse",s)}i(v,"resolveRef");function D(t,r){return new Promise((s,e)=>{const o=A("git",["--git-dir",t.dir,"cat-file","--batch"],{env:{...T,GIT_OPTIONAL_LOCKS:"0"}}),d=[];let a="";o.stdout.on("data",n=>d.push(n)),o.stderr.on("data",n=>a+=n.toString()),o.on("error",e),o.on("close",n=>{if(n!==0)return e(new Error(`git cat-file failed (exit ${n}): ${a.trim()}`));const l=Buffer.concat(d),p=[];let w=0;for(const h of r){const b=l.indexOf(10,w),c=l.subarray(w,b).toString(),[m,I,O]=c.split(" ");if(m!==h||I!=="blob")return e(new Error(`git cat-file: unexpected header "${c}" for ${h}`));const M=b+1,E=M+Number(O);p.push(l.subarray(M,E)),w=E+1}s(p)}),o.stdin.end(r.map(n=>`${n}
+`).join(""))})}i(D,"catFileBatch");async function U(t,r){const s=await v(t,r);if(s===null)return null;const e=await u(t,["ls-tree","-r","-z",s]);if(e.status!==0)throw f("ls-tree",e);const o=e.stdout.split("\0").filter(Boolean).map(a=>{const n=a.indexOf("	"),[,l,p]=a.slice(0,n).split(" ");if(l!=="blob")throw new Error(`repo-sync mirror: ${a.slice(n+1)} is a ${l}, not a file`);return{path:a.slice(n+1),blob:p}}),d=o.length===0?[]:await D(t,o.map(a=>a.blob));return new Map(o.map((a,n)=>[a.path,d[n].toString("utf8")]))}i(U,"readTree");async function W(t,r,s,e){const o=await S(x(t.dir,"commit-"));try{const d=[...r.keys()].sort(),a=d.map((c,m)=>x(o,`blob-${m}`));await Promise.all(d.map((c,m)=>_(a[m],r.get(c),"utf8")));let n=[];if(d.length>0){const c=await u(t,["hash-object","-w","--stdin-paths"],a.map(m=>`${m}
+`).join(""));if(c.status!==0)throw f("hash-object",c);n=c.stdout.trim().split(`
+`)}const l={...T,GIT_INDEX_FILE:x(o,"index")},p=d.map((c,m)=>`100644 ${n[m]}	${c}\0`).join(""),w=await u(t,["update-index","-z","--index-info"],p,{env:l});if(w.status!==0)throw f("update-index",w);const h=await u(t,["write-tree"],void 0,{env:l});if(h.status!==0)throw f("write-tree",h);const b=await u(t,["commit-tree",h.stdout.trim(),...s.flatMap(c=>["-p",c]),"-m",e]);if(b.status!==0)throw f("commit-tree",b);return b.stdout.trim()}finally{await N(o,{recursive:!0,force:!0})}}i(W,"commitTree");async function V(t,r,s,e){const o=await u(t,["update-ref",r,s,e??"0".repeat(40)]);if(o.status!==0)throw f("update-ref",o)}i(V,"setRef");async function X(t,r,s){const e=await u(t,["merge-base",r,s]);if(e.status===0)return e.stdout.trim();if(e.status===1&&!e.executionFailed)return null;throw f("merge-base",e)}i(X,"mergeBase");async function J(t,r,s){const e=await u(t,["merge-base","--is-ancestor",r,s]);if(e.status===0)return!0;if(e.status===1&&!e.executionFailed)return!1;throw f("merge-base --is-ancestor",e)}i(J,"isAncestor");async function Q(t,r){const s=await u(t,["ls-remote",r,"refs/crtr/docs"],void 0,{timeoutMs:g});if(s.status!==0)return{ok:!1,reason:y(s)};const e=s.stdout.split(`
+`).find(o=>o.endsWith("	refs/crtr/docs"));return{ok:!0,value:e?e.split("	")[0]:null}}i(Q,"remoteDocsTip");async function Y(t,r){const s=await u(t,["fetch","--no-tags","--quiet",r,"+refs/crtr/docs:refs/crtr/remote-docs"],void 0,{timeoutMs:g});if(s.status!==0)return{ok:!1,reason:y(s)};const e=await v(t,"refs/crtr/remote-docs");return e===null?{ok:!1,reason:"fetch succeeded but refs/crtr/remote-docs is missing"}:(await _(x(t.dir,j),`${new Date().toISOString()}
+`),{ok:!0,value:e})}i(Y,"fetchDocs");async function Z(t,r,s){const e=await u(t,["push","--no-verify","--porcelain",r,`${s}:refs/crtr/docs`],void 0,{timeoutMs:g});return e.status===0?{ok:!0,value:"pushed"}:/\[rejected\]|non-fast-forward|fetch first/.test(e.stdout+e.stderr)?{ok:!1,reason:"rejected"}:{ok:!1,reason:y(e)}}i(Z,"pushDocs");export{j as FIRST_FETCH_MARKER,W as commitTree,Y as fetchDocs,J as isAncestor,X as mergeBase,K as openMirror,Z as pushDocs,U as readTree,Q as remoteDocsTip,v as resolveRef,V as setRef};

package/dist/core/graph/repo-sync/ref-format.d.ts

@@ -0,0 +1,76 @@
+import type { RuleOn } from '../types.js';
+export interface RefRule {
+    position: number;
+    on: RuleOn;
+    match: unknown;
+    match_frontmatter: unknown;
+    if: unknown;
+    deliver: 'name' | 'preview' | 'content';
+}
+export interface RefRevision {
+    rev_id: string;
+    number: number;
+    parents: string[];
+    body: string;
+    body_hash: string;
+    /** Object id of the author on the runtime that wrote it; null when unknown. */
+    author: string | null;
+    rationale: string | null;
+    created_at: string;
+    links: Array<{
+        written_as: string;
+        dst: string;
+    }>;
+}
+export interface RefDocument {
+    id: string;
+    name: string;
+    kind: string;
+    privacy: 'public';
+    preview: string;
+    summary: string | null;
+    why_it_exists: string | null;
+    unlisted: boolean;
+    lint_ignore: unknown;
+    extensions: unknown;
+    created_at: string;
+    deleted_at: string | null;
+    rules: RefRule[];
+    revisions: RefRevision[];
+}
+export declare const docPath: (id: string) => string;
+/** Every field merged three-way: all but id, created_at and revisions. */
+export declare const RECORD_FIELDS: readonly ["name", "kind", "privacy", "preview", "summary", "why_it_exists", "unlisted", "lint_ignore", "extensions", "deleted_at", "rules"];
+export declare function sha256(body: string): string;
+export declare function serializeDoc(doc: RefDocument): string;
+/** Parse one ref file. Refuses anything not public, a body whose hash disagrees, or an id that is not the file name. */
+export declare function parseDoc(path: string, text: string): {
+    ok: true;
+    doc: RefDocument;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Merge one document. Revisions: union by rev_id (first copy kept verbatim). Fields: three-way
+ * against base, remote wins when both changed. A side missing the file while base had it deleted
+ * it: the result is marked deleted (at `now`) and keeps every revision.
+ */
+export declare function mergeDoc(base: RefDocument | null, local: RefDocument | null, remote: RefDocument | null, now?: string): RefDocument | null;
+/**
+ * Merge three trees (path → file text). Per path mergeDoc; then two live documents with one name:
+ * the one already on the remote under that name keeps it, the other becomes `<name>-<id first 8>`.
+ * A file that fails to parse is refused; it stays in the tree only as the local side's text.
+ */
+export declare function mergeTrees(base: Map<string, string>, local: Map<string, string>, remote: Map<string, string>, now?: string): {
+    tree: Map<string, string>;
+    renamed: Array<{
+        id: string;
+        from: string;
+        to: string;
+    }>;
+    refused: Array<{
+        path: string;
+        reason: string;
+    }>;
+};

package/dist/core/graph/repo-sync/ref-format.js

@@ -0,0 +1,2 @@
+var $=Object.defineProperty;var a=(n,r)=>$(n,"name",{value:r,configurable:!0});import{createHash as O}from"node:crypto";const D=a(n=>`docs/${n}.json`,"docPath"),N=["name","kind","privacy","preview","summary","why_it_exists","unlisted","lint_ignore","extensions","deleted_at","rules"];function R(n){return O("sha256").update(n,"utf8").digest("hex")}a(R,"sha256");function h(n){if(Array.isArray(n))return n.map(h);if(n&&typeof n=="object"){const r={};for(const o of Object.keys(n).sort())r[o]=h(n[o]);return r}return n}a(h,"sortKeys");const v=a(n=>JSON.stringify(h(n??null)),"stable");function S(n,r){return n.number-r.number||(n.rev_id<r.rev_id?-1:n.rev_id>r.rev_id?1:0)}a(S,"byRevision");function j(n){const r={...n,rules:[...n.rules].sort((o,t)=>o.position-t.position),revisions:[...n.revisions].map(o=>({...o,parents:[...o.parents].sort()})).sort(S)};return`${JSON.stringify(h(r),null,2)}
+`}a(j,"serializeDoc");const E=new Set(["boot","workspace-open","file-read","document-read","command","pre-command","slash-command"]),I=new Set(["name","preview","content"]),p=a(n=>typeof n=="string","isStr"),g=a(n=>n===null||typeof n=="string","isStrOrNull");function x(n,r){let o;try{o=JSON.parse(r)}catch(e){return{ok:!1,reason:`not JSON: ${e.message}`}}if(!o||typeof o!="object"||Array.isArray(o))return{ok:!1,reason:"not an object"};const t=o;if(t.privacy!=="public")return{ok:!1,reason:`privacy is ${String(t.privacy)}; a repo holds only public documents`};if(!p(t.id)||D(t.id)!==n)return{ok:!1,reason:`id ${String(t.id)} does not match file ${n}`};for(const e of["name","kind","preview","created_at"])if(!p(t[e]))return{ok:!1,reason:`${e} is not a string`};for(const e of["summary","why_it_exists","deleted_at"])if(!g(t[e]))return{ok:!1,reason:`${e} is not a string or null`};if(typeof t.unlisted!="boolean")return{ok:!1,reason:"unlisted is not a boolean"};if(!Array.isArray(t.rules))return{ok:!1,reason:"rules is not an array"};for(const e of t.rules)if(!e||typeof e.position!="number"||!E.has(e.on)||!I.has(e.deliver))return{ok:!1,reason:"malformed rule"};if(!Array.isArray(t.revisions)||t.revisions.length===0)return{ok:!1,reason:"no revisions"};const d=new Set;for(const e of t.revisions){if(!e||!p(e.rev_id)||typeof e.number!="number"||!p(e.body)||!p(e.body_hash)||!p(e.created_at)||!g(e.author)||!g(e.rationale)||!Array.isArray(e.parents)||!e.parents.every(p)||!Array.isArray(e.links))return{ok:!1,reason:"malformed revision"};if(d.has(e.rev_id))return{ok:!1,reason:`revision ${e.rev_id} appears twice`};if(d.add(e.rev_id),R(e.body)!==e.body_hash)return{ok:!1,reason:`revision ${e.rev_id} body does not match body_hash`}}return{ok:!0,doc:t}}a(x,"parseDoc");function A(...n){const r=new Map;for(const o of n)for(const t of o?.revisions??[])r.has(t.rev_id)||r.set(t.rev_id,t);return[...r.values()].sort(S)}a(A,"unionRevisions");function M(n,r,o,t=new Date().toISOString()){if(!r&&!o)return null;if(!r||!o){const e=r??o;return n?{...e,deleted_at:e.deleted_at??t,revisions:A(o,r,n)}:e}const d={...o,revisions:A(o,r,n)};for(const e of N){const u=v(r[e]),m=v(o[e]);if(u===m)continue;(n?v(n[e]):void 0)===m&&(d[e]=r[e])}return d}a(M,"mergeDoc");function L(n,r,o,t=new Date().toISOString()){const d=new Map,e=[],u=new Map,m=[...new Set([...n.keys(),...r.keys(),...o.keys()])].sort();for(const i of m){const s=[];let l=null;for(const c of[n,r,o]){const y=c.get(i);if(y===void 0){s.push(null);continue}const k=x(i,y);k.ok?s.push(k.doc):(l??=k.reason,s.push(null))}if(l!==null){e.push({path:i,reason:l});const c=r.get(i);c!==void 0&&d.set(i,c);continue}const f=M(s[0],s[1],s[2],t);f&&u.set(i,f)}const b=a(i=>{const s=o.get(i);if(s===void 0)return null;const l=x(i,s);return l.ok&&l.doc.deleted_at===null?l.doc.name:null},"remoteNameOf"),_=new Map;for(const[i,s]of u)s.deleted_at===null&&_.set(s.name,[..._.get(s.name)??[],i]);const w=[];for(const[i,s]of _){if(s.length<2)continue;const l=s.find(f=>b(f)===i)??[...s].sort((f,c)=>u.get(f).id.localeCompare(u.get(c).id))[0];for(const f of s){if(f===l)continue;const c=u.get(f),y=`${i}-${c.id.slice(0,8)}`;u.set(f,{...c,name:y}),w.push({id:c.id,from:i,to:y})}}for(const[i,s]of u)d.set(i,j(s));return{tree:new Map([...d].sort(([i],[s])=>i.localeCompare(s))),renamed:w,refused:e}}a(L,"mergeTrees");export{N as RECORD_FIELDS,D as docPath,M as mergeDoc,L as mergeTrees,x as parseDoc,j as serializeDoc,R as sha256};

package/dist/core/graph/repo-sync/repos.d.ts

@@ -0,0 +1,19 @@
+/** Repo objects on the canvas: one per repo identity, handle chosen once. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { Checkout, ObjectRow } from '../types.js';
+import { handleHint } from './identity.js';
+export { handleHint };
+export interface RepoIdentity {
+    scheme: 'git' | 'local-path';
+    externalId: string;
+    handleHint: string;
+}
+/** The repo object for an identity, created on first sight. A handle already
+ *  held by another repo gets `-2`, `-3`, … appended. */
+export declare function ensureRepo(db: DatabaseSync, id: RepoIdentity, handle?: string): ObjectRow;
+/** Repos enclosing `cwd`, nearest first: every enclosing git checkout (created
+ *  on first sight) and every existing local-path repo whose path is `cwd` or
+ *  an ancestor of it. A non-git folder is never created here. */
+export declare function reposForCwd(db: DatabaseSync, cwd: string): ObjectRow[];
+/** `reposForCwd` with the directory each repo is checked out at. */
+export declare function checkoutsForCwd(db: DatabaseSync, cwd: string): Checkout[];

package/dist/core/graph/repo-sync/repos.js

@@ -0,0 +1,3 @@
+var h=Object.defineProperty;var s=(t,e)=>h(t,"name",{value:e,configurable:!0});import{prepared as a}from"../../sqlite-statements.js";import{resolve as d,sep as f}from"node:path";import{CrtrError as l}from"../../errors.js";import{realpathOrSelf as m}from"../../fs-utils.js";import{ExitCode as u}from"../../../types.js";import{ensureOwner as E}from"../objects.js";import{checkoutChain as w,handleHint as x}from"./identity.js";function N(t,e,r){return a(t,`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE o.type = 'repo' AND i.scheme = ? AND i.external_id = ?`).get(e,r)??null}s(N,"existingRepo");function O(t,e,r){const n=N(t,e.scheme,e.externalId);if(n)return n;const p=r??e.handleHint,c=a(t,"SELECT 1 FROM objects WHERE name = ? AND type = 'repo'");let o=p;for(let i=2;c.get(o);i++)o=`${p}-${i}`;return E(t,"repo",e.scheme,e.externalId,o)}s(O,"ensureRepo");function W(t,e){return R(t,e).map(r=>r.repo)}s(W,"reposForCwd");function R(t,e){const r=m(d(e)),n=[];for(const o of w(r)){if(!o.ok)throw new l("git-lookup-failed",`cannot identify the repo at ${o.dir}: ${o.reason}`,u.GENERAL,{dir:o.dir});n.push({root:o.root,repo:O(t,o)})}const p=a(t,`SELECT o.*, i.external_id AS path FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE o.type = 'repo' AND i.scheme = 'local-path'`).all();for(const{path:o,...i}of p)(r===o||r.startsWith(o.endsWith(f)?o:o+f))&&n.push({root:o,repo:i});n.sort((o,i)=>i.root.length-o.root.length);const c=new Set;return n.filter(({repo:o})=>!c.has(o.rowid)&&(c.add(o.rowid),!0))}s(R,"checkoutsForCwd");export{R as checkoutsForCwd,O as ensureRepo,x as handleHint,W as reposForCwd};

package/dist/core/graph/repo-sync/sync.d.ts

@@ -0,0 +1,42 @@
+/** The repo-sync engine in crtrd: per repo at most one sync running and one queued. No timer and
+ *  no retry loop — the next trigger is the retry. A failed sync keeps the local mirror commit and
+ *  every canvas.db revision; the next run sends them. Every outcome is written as an event. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { DetachedWorkLifecycle } from '../../../daemon/reconcilers/broker-supervision.js';
+import type { ObjectRow } from '../types.js';
+import { type ImportResult } from './exchange.js';
+export declare const FIRST_FETCH_WAIT_MS = 20000;
+export type SyncStep = 'export' | 'fetch' | 'merge' | 'import' | 'push';
+export type SyncOutcome = {
+    ok: true;
+    pushed: boolean;
+    imported: ImportResult;
+} | {
+    ok: false;
+    step: SyncStep;
+    reason: string;
+};
+/** Called once by crtrd. Until then triggers are refused loudly. */
+export declare function startRepoSync(lifecycle: DetachedWorkLifecycle, db: () => DatabaseSync): void;
+/**
+ * A node starts working in `cwd`, enclosed by `repos`. For each syncing repo: when no fetch has
+ * ever succeeded on this machine and none was attempted in this daemon's lifetime, wait for its
+ * sync, at most FIRST_FETCH_WAIT_MS; otherwise schedule it and return at once.
+ */
+export declare function noteNodeWorking(repos: ObjectRow[], cwd: string): Promise<void>;
+/**
+ * A node's boot delivery is about to render: it starts working in the repos enclosing its cwd.
+ * Sync them first (the first on this machine waits for the first fetch, bounded), so what the
+ * repo's collaborators wrote is on the canvas before its bearings. Never throws: a failed sync
+ * never fails a boot, and every failure is an event.
+ */
+export declare function noteNodeBooting(nodeId: string): Promise<void>;
+/** A repo-owned document changed (write, edit, move at either end, delete). `cwd`, when the caller
+ *  has one inside a checkout, records the fetch URL. */
+export declare function noteRepoDocumentsChanged(repo: ObjectRow, cwd?: string): void;
+/**
+ * One sync: export canvas.db to a local commit, fetch the remote ref, fast-forward or merge,
+ * import the merged tree into canvas.db, push (never forced). A rejected push fetches again,
+ * at most PUSH_ATTEMPTS times.
+ */
+export declare function syncRepo(repo: ObjectRow): Promise<SyncOutcome>;

package/dist/core/graph/repo-sync/sync.js

@@ -0,0 +1,2 @@
+var N=Object.defineProperty;var s=(t,r)=>N(t,"name",{value:r,configurable:!0});import{prepared as R}from"../../sqlite-statements.js";import{existsSync as D}from"node:fs";import{readFile as z,writeFile as B}from"node:fs/promises";import{join as M}from"node:path";import{emitEvent as K}from"../../events/emit.js";import{exportRepo as q,importTree as G}from"./exchange.js";import{checkoutChain as J}from"./identity.js";import{checkoutsForCwd as Q,reposForCwd as V}from"./repos.js";import{commitTree as I,fetchDocs as X,FIRST_FETCH_MARKER as Y,isAncestor as L,mergeBase as Z,openMirror as k,pushDocs as ee,readTree as p,remoteDocsTip as te,resolveRef as w,setRef as h}from"./mirror.js";import{mergeTrees as re}from"./ref-format.js";const ne=2e4,A=3,O="remote-url",l="refs/crtr/docs",oe="refs/crtr/remote-docs",g="refs/crtr/imported";function y(t){try{K(t)}catch{}}s(y,"emitEvent");let T=null;const S=new Map,H=new Set;function Re(t,r){T={lifecycle:t,db:r}}s(Re,"startRepoSync");function U(t,r){return r.type!=="repo"?!1:R(t,"SELECT 1 FROM identities WHERE object = ? AND scheme = 'git'").get(r.rowid)!==void 0}s(U,"gitScheme");async function W(t,r){const e=new Map;for(const f of J(r))f.ok&&f.scheme==="git"&&e.set(f.externalId,f.remoteUrl);if(e.size===0)return;const i=T.db(),o=R(i,"SELECT external_id FROM identities WHERE object = ? AND scheme = 'git'");for(const f of t){const a=o.get(f.rowid),c=a&&e.get(a.external_id);if(!c)continue;const n=await k(f.id);await B(M(n.dir,O),`${c}
+`)}}s(W,"recordRemoteUrls");async function se(t,r){const i=E().db(),o=t.filter(n=>U(i,n));if(o.length===0)return;await W(o,r);const f=[];for(const n of o){const d=!H.has(n.id)&&!D(M((await k(n.id)).dir,Y)),u=v(n);d&&u&&f.push(u)}if(f.length===0)return;let a;const c=new Promise(n=>{a=setTimeout(n,ne)});await Promise.race([Promise.all(f),c]),clearTimeout(a)}s(se,"noteNodeWorking");async function Me(t){try{const r=E().db(),e=R(r,"SELECT cwd FROM nodes WHERE node_id = ?").get(t);if(!e)return;const i=ie(r,()=>V(r,e.cwd));i.length>0&&await se(i,e.cwd)}catch(r){y({level:"warn",event:"repo_sync.failed",outcome:"failed",error:r,node_id:t,fields:{step:"fetch",reason:`the boot trigger failed: ${r instanceof Error?r.message:String(r)}`}})}}s(Me,"noteNodeBooting");function ie(t,r){if(t.isTransaction)return r();t.exec("BEGIN IMMEDIATE");try{const e=r();return t.exec("COMMIT"),e}catch(e){throw t.exec("ROLLBACK"),e}}s(ie,"inWrite");function ke(t,r){const e=E();if(!U(e.db(),t))return;if(r===void 0){v(t);return}const i=W([t],r).then(()=>{v(t)},o=>{y({level:"error",event:"repo_sync.failed",error:o,fields:{repo:t.name,step:"fetch",reason:"recording the remote URL failed"}})});e.lifecycle.registerDetached(i)}s(ke,"noteRepoDocumentsChanged");function E(){if(!T)throw new Error("repo sync is not started: crtrd must call startRepoSync first");return T}s(E,"requireEngine");function v(t){const r=E(),e=S.get(t.id)??{running:null,again:!1};if(S.set(t.id,e),e.running)return e.again=!0,e.running.then(()=>S.get(t.id)?.running??null).then(o=>o??{ok:!0,pushed:!1,imported:$()});if(!r.lifecycle.acceptsDetachedWork())return null;H.add(t.id);const i=ae(t).then(o=>(P(t,o),o),o=>{const f={ok:!1,step:"export",reason:o instanceof Error?o.message:String(o)};return P(t,f),f}).finally(()=>{e.running=null,e.again&&(e.again=!1,v(t))});return e.running=i,r.lifecycle.registerDetached(i.then(()=>{})),i}s(v,"schedule");function P(t,r){if(r.ok){const e=r.imported;y({level:"info",event:"repo_sync.completed",outcome:"succeeded",fields:{repo:t.name,pushed:r.pushed,created:e.created,revisions:e.revisions,deleted:e.deleted,needs_merge:e.needsMerge,refused:e.refused}})}else y({level:"warn",event:"repo_sync.failed",outcome:"failed",fields:{repo:t.name,step:r.step,reason:r.reason}})}s(P,"report");function $(){return{created:0,revisions:0,deleted:0,needsMerge:[],refused:[]}}s($,"emptyImport");class x extends Error{static{s(this,"StepError")}step;constructor(r,e){super(e),this.step=r}}async function _(t,r){try{return await r()}catch(e){throw e instanceof x?e:new x(t,e instanceof Error?e.message:String(e))}}s(_,"step");async function ae(t){const r=E();try{const e=await k(t.id),i=await ce(e);if(i===null)return{ok:!1,step:"fetch",reason:`no checkout of ${t.name} with an origin remote has been seen by this runtime`};let o=$();const f=s(()=>_("import",async()=>{const a=await w(e,l),c=await w(e,g);if(a===null||c===a)return;const n=c?await p(e,g):new Map,d=r.db(),u=G(d,t,n,await p(e,l),m=>Q(d,m));o={created:o.created+u.created,revisions:o.revisions+u.revisions,deleted:o.deleted+u.deleted,needsMerge:[...new Set([...o.needsMerge,...u.needsMerge])],refused:[...o.refused,...u.refused]},await h(e,g,a,c)}),"importLocal");await f(),await _("export",async()=>{const a=await w(e,l),c=a?await p(e,l):null,n=q(r.db(),t,c);if(a?ue(c,n):n.size===0)return;const d=await I(e,n,a?[a]:[],`crtr: export ${t.name}`);await h(e,l,d,a),await h(e,g,d,await w(e,g))});for(let a=1;;a++){const c=await te(e,i);if(!c.ok)return{ok:!1,step:"fetch",reason:c.reason};let n=await w(e,l);if(c.value!==null&&!(n&&await fe(e,c.value)&&await L(e,c.value,n))){const u=await X(e,i);if(!u.ok)return{ok:!1,step:"fetch",reason:u.reason};const m=u.value;n=await _("merge",async()=>{if(!n||await L(e,n,m))return await h(e,l,m,n),m;const b=await Z(e,n,m),C=re(b?await p(e,b):new Map,await p(e,l),await p(e,oe));for(const j of C.refused)o.refused.push(j);const F=await I(e,C.tree,[n,m],`crtr: merge ${t.name}`);return await h(e,l,F,n),F})}if(await f(),n===null||n===c.value)return{ok:!0,pushed:!1,imported:o};const d=await ee(e,i,n);if(d.ok)return{ok:!0,pushed:!0,imported:o};if(d.reason!=="rejected")return{ok:!1,step:"push",reason:d.reason};if(a>=A)return{ok:!1,step:"push",reason:`push rejected ${A} times`}}}catch(e){if(e instanceof x)return{ok:!1,step:e.step,reason:e.message};throw e}}s(ae,"syncRepo");async function ce(t){const r=M(t.dir,O);return D(r)&&(await z(r,"utf8")).trim()||null}s(ce,"readUrl");async function fe(t,r){return await w(t,r)!==null}s(fe,"hasCommit");function ue(t,r){if(t.size!==r.size)return!1;for(const[e,i]of t)if(r.get(e)!==i)return!1;return!0}s(ue,"sameTree");export{ne as FIRST_FETCH_WAIT_MS,Me as noteNodeBooting,se as noteNodeWorking,ke as noteRepoDocumentsChanged,Re as startRepoSync,ae as syncRepo};

package/dist/core/graph/rules.d.ts

@@ -0,0 +1,26 @@
+/** A document's delivery rules as `rules` rows. `rules.owner` mirrors the
+ *  document's `objects.owner` so delivery can select rules by owner through
+ *  `rules_on_owner`; `replaceRules` and `setRulesOwner` are the only writers. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow, RuleOn, RuleSpec } from './types.js';
+export declare const RULE_ONS: readonly RuleOn[];
+export interface RuleRow extends RuleSpec {
+    rowid: number;
+    object: number;
+    owner: number | null;
+    position: number;
+}
+/** Replace the document's rules; `position` is the array index, `owner` the document's owner. */
+export declare function replaceRules(db: DatabaseSync, object: ObjectRow, specs: readonly RuleSpec[]): void;
+/** Re-point the document's rule rows at its current owner (after a move). */
+export declare function setRulesOwner(db: DatabaseSync, object: ObjectRow): void;
+export declare function rulesOf(db: DatabaseSync, object: ObjectRow): RuleRow[];
+/** Every rule on one of `on` whose document belongs to one of `owners`. */
+export declare function rulesForOwners(db: DatabaseSync, on: readonly RuleOn[], owners: readonly number[]): RuleRow[];
+/** The only converter from package/legacy frontmatter (`surfaces`, `gate`,
+ *  `slash`) to rules. Tolerant like the runtime parser it replaces: invalid
+ *  entries are dropped; `lintRules` is the strict check. A document-level
+ *  `gate` is ANDed into every rule's `if`. */
+export declare function rulesFromFrontmatter(fm: Record<string, unknown>): RuleSpec[];
+/** Strict validation of a rule list; null when valid. */
+export declare function lintRules(value: unknown): string | null;

package/dist/core/graph/rules.js

@@ -0,0 +1,3 @@
+var R=Object.defineProperty;var a=(e,n)=>R(e,"name",{value:n,configurable:!0});import{prepared as u}from"../sqlite-statements.js";const E=["boot","workspace-open","file-read","document-read","command","pre-command","slash-command"],p=["name","preview","content"],y=["file-read","document-read","command","pre-command"],O=["on","match","matchFrontmatter","if","deliver"];function g(e){return{rowid:e.rowid,object:e.object,owner:e.owner,position:e.position,on:e.on_event,deliver:e.deliver,...e.match_json!==null?{match:JSON.parse(e.match_json)}:{},...e.match_frontmatter_json!==null?{matchFrontmatter:JSON.parse(e.match_frontmatter_json)}:{},...e.if_json!==null?{if:JSON.parse(e.if_json)}:{}}}a(g,"fromRaw");function _(e,n,t){const i=w(t);if(i!==null)throw new Error(`replaceRules(${n.id}): ${i}`);u(e,"DELETE FROM rules WHERE object = ?").run(n.rowid);const c=u(e,`INSERT INTO rules (object, owner, position, on_event, match_json, match_frontmatter_json, if_json, deliver)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?)`);t.forEach((r,o)=>{c.run(n.rowid,n.owner,o,r.on,r.match!==void 0?JSON.stringify(r.match):null,r.matchFrontmatter!==void 0?JSON.stringify(r.matchFrontmatter):null,r.if!==void 0?JSON.stringify(r.if):null,r.deliver)})}a(_,"replaceRules");function v(e,n){const t=u(e,"SELECT owner FROM objects WHERE rowid = ?").get(n.rowid);if(t===void 0)throw new Error(`setRulesOwner: object ${n.id} does not exist`);u(e,"UPDATE rules SET owner = ? WHERE object = ?").run(t.owner,n.rowid)}a(v,"setRulesOwner");function $(e,n){return u(e,"SELECT * FROM rules WHERE object = ? ORDER BY position").all(n.rowid).map(g)}a($,"rulesOf");function b(e,n,t){if(n.length===0||t.length===0)return[];const i=`SELECT * FROM rules WHERE on_event IN (${n.map(()=>"?").join(",")})
+    AND owner IN (${t.map(()=>"?").join(",")}) ORDER BY object, position`;return e.prepare(i).all(...n,...t).map(g)}a(b,"rulesForOwners");const S={boot:"boot","workspace-open":"workspace-open",read:"file-read","memory-read":"document-read",command:"command","pre-command":"pre-command"};function s(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)?e:void 0}a(s,"predicate");function j(e){if(typeof e=="string")return e.trim()===""?void 0:[e.trim()];if(!Array.isArray(e))return;const n=e.filter(t=>typeof t=="string"&&t.trim()!=="").map(t=>t.trim());return n.length>0?n:void 0}a(j,"globs");function x(e){const n=s(e.gate),t=a(r=>n!==void 0&&r!==void 0?{all:[n,r]}:n??r,"withGate"),i=[],c=Array.isArray(e.surfaces)?e.surfaces:[];for(const r of c){const o=s(r);if(o===void 0)continue;const d=typeof o.on=="string"?S[o.on]:void 0,f=o.at;if(d===void 0||typeof f!="string"||!p.includes(f))continue;const l=j(o.match),m=d==="file-read"?s(o["match-frontmatter"]):void 0;if(y.includes(d)&&l===void 0&&m===void 0)continue;const h=t(s(o.gate));i.push({on:d,deliver:f,...l!==void 0&&d!=="boot"&&d!=="workspace-open"?{match:l}:{},...m!==void 0?{matchFrontmatter:m}:{},...h!==void 0?{if:h}:{}})}return e.slash===!0&&i.push({on:"slash-command",deliver:"content",...n!==void 0?{if:n}:{}}),i}a(x,"rulesFromFrontmatter");function w(e){if(!Array.isArray(e))return`invalid rules: ${JSON.stringify(e)} (expected a list of {on, deliver, match?, matchFrontmatter?, if?} entries)`;for(const n of e){const t=s(n);if(t===void 0)return`invalid rule: ${JSON.stringify(n)} (expected an {on, deliver, match?, matchFrontmatter?, if?} object)`;for(const d of Object.keys(t))if(!O.includes(d))return`invalid rule: unknown key \`${d}\` (a rule carries only ${O.join(", ")})`;const i=t.on;if(typeof i!="string"||!E.includes(i))return`invalid rule \`on\`: ${JSON.stringify(i)} (expected ${E.join("|")})`;const c=t.deliver;if(typeof c!="string"||!p.includes(c))return`invalid rule \`deliver\`: ${JSON.stringify(c)} (expected ${p.join("|")})`;const r=t.match;if(r!==void 0){if(i==="boot"||i==="workspace-open"||i==="slash-command")return`invalid rule: \`match\` is meaningless on \`${i}\`; drop it`;if(!Array.isArray(r)||r.length===0||r.some(d=>typeof d!="string"||d.trim()===""))return`invalid rule \`match\`: ${JSON.stringify(r)} (expected a non-empty list of non-empty globs)`}const o=t.matchFrontmatter;if(o!==void 0){if(i!=="file-read")return"invalid rule: `matchFrontmatter` applies to `file-read` rules only";if(s(o)===void 0)return`invalid rule \`matchFrontmatter\`: ${JSON.stringify(o)} (expected a field\u2192matcher object)`}if(y.includes(i)&&r===void 0&&o===void 0)return`invalid rule: a \`${i}\` rule requires \`match\`${i==="file-read"?" or `matchFrontmatter`":""}`;if(t.if!==void 0&&s(t.if)===void 0)return`invalid rule \`if\`: ${JSON.stringify(t.if)} (expected a predicate object)`}return null}a(w,"lintRules");export{E as RULE_ONS,w as lintRules,_ as replaceRules,b as rulesForOwners,x as rulesFromFrontmatter,$ as rulesOf,v as setRulesOwner};

package/dist/core/graph/spaces/app.d.ts

@@ -0,0 +1,3 @@
+import type { Space } from './index.js';
+/** An app: its nodes (with their documents and jobs), its profiles and its app documents. */
+export declare const appSpace: Space;