@north-light/cli 0.0.0 → 0.3.413

package/dist/daemon/analytics/scan.d.ts

@@ -0,0 +1,37 @@
+import type { AnalyticsDTO } from '../../api/dto/analytics.js';
+export interface ResponseRecord {
+    node_id: string;
+    at_ms: number;
+    provider: string;
+    model: string;
+    input: number;
+    output: number;
+    cache_read: number;
+    cache_write: number;
+    cost: number;
+}
+export interface ScanInput {
+    nodes: Array<{
+        node_id: string;
+        created: string;
+        transcripts: string[];
+    }>;
+    windowStartMs: number;
+    asOfMs: number;
+}
+/** `unknown_at` lists each response with no model or usage (still a model response: it makes its agent active). */
+export interface ScanResult {
+    responses: ResponseRecord[];
+    transcripts: AnalyticsDTO['transcripts'];
+    unknown: number;
+    unknown_at: Array<{
+        node_id: string;
+        at_ms: number;
+    }>;
+}
+/**
+ * Reads every transcript in one worker thread so the daemon's event loop never parses JSONL. At most MAX_WORKERS run
+ * daemon-wide; the rest queue. Aborting `signal` drops a queued scan or terminates its worker. Rejects when the worker
+ * fails or the scan is aborted.
+ */
+export declare function scanResponses(input: ScanInput, signal?: AbortSignal): Promise<ScanResult>;

package/dist/daemon/analytics/scan.js

@@ -0,0 +1 @@
+var b=Object.defineProperty;var t=(u,e)=>b(u,"name",{value:e,configurable:!0});import{Worker as v}from"node:worker_threads";const E=4;let c=0;const a=[];function k(){c--,a.shift()?.()}t(k,"release");function L(u,e){return new Promise((p,n)=>{const i=t(()=>new Error("transcript scan aborted: the analytics request was closed"),"aborted");if(e?.aborted){n(i());return}const d=t(()=>{if(e?.aborted){n(i());return}c++;const o=new v(new URL(import.meta.url.endsWith(".ts")?"./scan-worker.ts":"./scan-worker.js",import.meta.url),{workerData:u});let r=!1;const m=t(()=>{r||(r=!0,n(i()),o.terminate())},"onAbort");e?.addEventListener("abort",m,{once:!0}),o.once("message",s=>{r||(r=!0,p(s))}),o.once("error",s=>{r||(r=!0,n(s))}),o.once("exit",s=>{e?.removeEventListener("abort",m),k(),r||(r=!0,n(new Error(`transcript scan worker exited with ${s} before replying`)))})},"start");if(c<E){d();return}const f=t(()=>{e?.removeEventListener("abort",w),d()},"queued"),w=t(()=>{const o=a.indexOf(f);o>=0&&a.splice(o,1),n(i())},"dropQueued");e?.addEventListener("abort",w,{once:!0}),a.push(f)})}t(L,"scanResponses");export{L as scanResponses};

package/dist/daemon/api/app-listener.d.ts

@@ -0,0 +1,22 @@
+import { type IncomingMessage, type ServerResponse } from 'node:http';
+import { type RequestPrincipal } from './router.js';
+import { type DeferHeadOptions } from './deferred-head.js';
+import type { AppPrincipal } from './principal.js';
+import type { ScopeConfig } from '../../types.js';
+import type { GrantSync } from '../../core/grants/sync.js';
+export declare function cursor(req: IncomingMessage, query: URLSearchParams): number;
+/** A run's SSE stream ends with `event: idle` after this long with no running turn and no new event. */
+export declare const RUN_STREAM_IDLE_MS = 60000;
+export interface RunStreamOptions {
+    idleMs?: number;
+    idleCheckMs?: number;
+    isRunning?: (runId: string) => boolean;
+}
+export declare function streamRunEvents(req: IncomingMessage, res: ServerResponse, id: string, principal: AppPrincipal | RequestPrincipal, after: number, requestId: string, framing: 'sse' | 'ndjson', options?: RunStreamOptions): Promise<void>;
+export declare function createAppListener(config: NonNullable<ScopeConfig['runtime']>, grantsReady: () => boolean, syncGrants: GrantSync, listenerOptions?: {
+    deferHead?: DeferHeadOptions;
+    stream?: RunStreamOptions;
+}): {
+    ready: Promise<void>;
+    close: () => Promise<void>;
+};

package/dist/daemon/api/app-listener.js

@@ -0,0 +1,24 @@
+var B=Object.defineProperty;var s=(e,n)=>B(e,"name",{value:n,configurable:!0});import{randomUUID as L}from"node:crypto";import{createServer as $}from"node:http";import{Router as j}from"./router.js";import{OPERATIONS as V}from"./operations.js";import{errorCodes as D}from"../../api/error-codes.js";import{MINIMUM_RUNTIME_VERSION_HEADER as G,RUNTIME_VERSION_HEADER as Y,minimumRuntimeRefusal as z}from"../../api/runtime-version.js";import{crtrVersion as x}from"../../shared/crtr-version.js";import{AppPrincipalResolver as F}from"./principal.js";import{handleRunOperation as Q,integer as W}from"./handlers/runs.js";import{parseLlmRequest as K,runLlm as Z}from"../../core/llm/run.js";import{CONTROL_BODY_MAX_BYTES as ee,MODEL_CONTEXT_BODY_MAX_BYTES as te}from"../../core/llm/body-limits.js";import{RunError as d,runIsRunning as ne}from"../../core/runs/operations.js";import{requireRun as P}from"./router.js";import{deferHead as re}from"./deferred-head.js";import{readRunEvents as J,registerGrantStream as ae,subscribeRunEvents as oe}from"../../core/runs/events.js";import{activeGrant as se}from"../../core/grants/mirror.js";import{releaseGrantWaiters as ie}from"../../core/grants/watch.js";import{emitEvent as ue}from"../../core/events/emit.js";import{runNotices as le}from"../run-notices.js";import{handleVendorSignIn as de,isVendorSignInPath as ce}from"./vendor-signin.js";import{listAppProfiles as fe}from"./handlers/app-profiles.js";import{handleTransferDownload as me,handleTransferOperation as pe,TRANSFER_OPERATIONS as he}from"./handlers/transfer.js";import{handleQuestionOperation as ye,QUESTION_OPERATIONS as _e}from"./handlers/questions.js";import{vendorStatus as we}from"./handlers/vendor-status.js";import{handleMemoryOperation as ve,MEMORY_OPERATIONS as Oe}from"./handlers/memory.js";import{abortOnClose as Re,callerFromApp as ge,handleProviderOperation as Se,PROVIDER_OPERATIONS as be,providerFailure as Ee}from"./handlers/providers.js";function Ne(e){return Object.prototype.hasOwnProperty.call(D,e)?D[e]:void 0}s(Ne,"fixedRow");function Te(e){const n=Ne(e);return n?n.type:e==="stream_gap"||e==="provider_error"||e==="runtime_version_unsupported"?"invalid_request_error":"server_error"}s(Te,"errorType");function Ae(e){if(!e||typeof e!="object"||Array.isArray(e)||!("rate_limit"in e))return e;const{rate_limit:n,...a}=e;return a}s(Ae,"appDetails");function A(e,n,a){const u=Ae(e.details);return{error:{code:e.code,message:e.message,...u===void 0?{}:{details:u},type:Te(e.code),...e.param?{param:e.param}:{},origin:"runtime",retryable:e.retryable||e.code==="stream_dropped",request_id:n,...a?{run_id:a}:{},...e.scope?{scope:e.scope}:{},...e.code==="unauthorized"?{user_action:"reconnect"}:{},...e.code==="all_routes_exhausted"?{retry_after_s:e.details.retry_after_s}:{}}}}s(A,"envelope");function Ie(e,n,a,u){const i=n instanceof d?n:new d(500,"server_failure","runtime request failed");if(n instanceof d||console.error("[app-listener]",n),e.headersSent&&!String(e.getHeader("Content-Type")??"").startsWith("text/event-stream")){e.destroy();return}if(e.headersSent){e.end(`event: error
+data: ${JSON.stringify(A(i,a,u))}
+
+`);return}e.writeHead(i.status,{"Content-Type":"application/json; charset=utf-8","Request-Id":a,"X-Content-Type-Options":"nosniff",...i.code==="all_routes_exhausted"?{"Retry-After":String(i.details.retry_after_s)}:{}}),e.end(JSON.stringify(A(i,a,u)))}s(Ie,"fail");function Pe(e){return Array.isArray(e)?e[0]:e}s(Pe,"headerValue");function R(e,n,a){e.writeHead(n,{"Content-Type":"application/json; charset=utf-8"}),e.end(JSON.stringify(a))}s(R,"json");async function T(e,n=ee){const a=[];let u=0;for await(const i of e){if(u+=i.length,u>n)throw new d(400,"invalid_request","request body too large");a.push(i)}if(u)try{return JSON.parse(Buffer.concat(a).toString("utf8"))}catch{throw new d(400,"invalid_request","invalid JSON body")}}s(T,"bodyOf");function Ce(e,n){const a=e.headers["last-event-id"]??n.get("after");if(Array.isArray(a))throw new d(400,"invalid_request","invalid cursor","after");return W(a??null,"after",0,Number.MAX_SAFE_INTEGER,0)}s(Ce,"cursor");function Me(e){return`id: ${e.sequence_number}
+event: ${e.type}
+data: ${JSON.stringify(e)}
+
+`}s(Me,"frame");const He=6e4;function ke(e,n,a,u,i,N,w,v={}){P(u,a);let y=J(a,i);if(i>y.latest_sequence)throw new d(400,"invalid_request","cursor is beyond the run","after");if(i<y.latest_sequence&&(y.earliest_sequence===null||i<y.earliest_sequence-1))throw new d(409,"stream_gap","events have expired",void 0,{earliest_sequence:y.earliest_sequence,latest_sequence:y.latest_sequence});if(n.destroyed||e.destroyed)return n.destroy(),Promise.resolve();n.writeHead(200,{"Content-Type":w==="sse"?"text/event-stream":"application/x-ndjson","Cache-Control":"no-cache","X-Accel-Buffering":"no"}),w==="sse"?n.write(`: connected
+
+`):n.flushHeaders();let r=i;const t=le().streamOpened(a);let c=!1,_=!1,f=!1,p;const g=new Promise(m=>{p=m}),o=s(()=>{c||(c=!0,t(r),clearInterval(q),clearInterval(H),b(),I(),n.off("close",o),n.off("drain",h),n.end(),p())},"end"),h=s(()=>{f=!1,l()},"onDrain"),E=s(m=>{c||n.write(w==="sse"?`event: error
+data: ${JSON.stringify(A(m,N,a))}
+
+`:`${JSON.stringify({type:"error",...A(m,N,a)})}
+`),o()},"error"),l=s(()=>{if(!(c||_)){_=!0;try{if(!O()){S();return}if(P(u,a),y=J(a,r),y.backlog_count>1e3||y.backlog_bytes>32*1024*1024){E(new d(503,"stream_dropped","stream reader fell behind",void 0,{last_sequence:r}));return}for(const m of y.events){if(f)break;f=!n.write(w==="sse"?Me(m):`${JSON.stringify(m)}
+`),r=m.sequence_number}}catch(m){E(m instanceof d?m:new d(500,"server_failure","stream failed"))}finally{_=!1}}},"flush"),S=s(()=>E(new d(401,"grant_revoked","grant is not active")),"revoked"),O=s(()=>"class"in u||se(u.grant)!==null,"grantActive"),b=oe(a,l),I="class"in u?()=>{}:ae(u.grant,S),q=setInterval(()=>{!c&&!f&&w==="sse"&&n.write(`: keepalive
+
+`)},15e3),U=v.idleMs??He,X=v.isRunning??ne;let C=Date.now(),M=r;const H=setInterval(()=>{if(c||w!=="sse")return;const m=Date.now();let k=!0;try{k=X(a)}catch{}if(k||r!==M){C=m,M=r;return}m-C<U||f||(n.write(`event: idle
+data: {}
+
+`),o())},v.idleCheckMs??1e3);return H.unref(),n.on("drain",h),n.on("close",o),l(),g}s(ke,"streamRunEvents");function ut(e,n,a,u={}){if(!e.issuer||!e.audience||!e.listener?.address||!Number.isInteger(e.listener.port)||e.listener.port<1||e.listener.port>65535)throw new Error("runtime issuer, audience and listener address/port are required");if(["0.0.0.0","::","[::]"].includes(e.listener.address))throw new Error("runtime listener must bind a specific address");const i=new F(e.issuer,e.audience,a,e.jwksUrl),N=new j,w=new Map;for(const r of V.filter(t=>t.stage!==void 0)){const t=s(()=>({status:500}),"handler");N.register({method:r.method,pattern:r.path,handler:t}),w.set(t,r)}const v=$((r,t)=>{(async()=>{re(r,t,u.deferHead);const c=L();t.setHeader("Request-Id",c),t.setHeader(Y,x());let _;try{const f=z(Pe(r.headers[G.toLowerCase()]),x());if(f!==null)throw f.status===400?new d(400,f.code,f.message,f.param):new d(426,f.code,f.message,void 0,f.details);const p=new URL(r.url??"/","http://runtime.local");if(ce(p.pathname)){await de(r,t,p,i);return}if((r.method!=="GET"||p.pathname!=="/v1/health")&&(!i.isReady()||!n()))throw new d(503,"runtime_starting","runtime_starting");const g=N.match(r.method??"GET",p.pathname);if(!g)throw new d(404,"not_found","unknown operation");const o=w.get(g.handler);if(!o)throw new d(404,"not_found","unknown operation");if(_=g.params.run_id,o.name==="health"){R(t,200,{status:"ok",api_version:"2026-09-23"});return}if(o.name==="runtime.sync-notice"){if(!await i.verifySyncNotice(r.headers.authorization)){t.writeHead(204),t.end();return}ue({level:"info",event:"daemon.grants.sync_notice",fields:{request_id:c}});try{await a({fresh:!0})}catch{throw new d(503,"service_unavailable","grant sync failed")}t.writeHead(204),t.end();return}if(o.name==="runtime.vendor-status"){await i.verifyDirectoryRead(r.headers.authorization,"vendor_status"),R(t,200,we());return}const h=await i.resolve(r.headers.authorization,o.scope);if(t.setHeader("Request-Id",c),_&&P(h,_,["run.message","run.interrupt","run.cancel","run.rename","run.delete"].includes(o.name),o.name==="run.delete"),o.stream==="bytes"){await me(r,t,h,p.searchParams);return}if(o.stream){ke(r,t,_,h,Ce(r,p.searchParams),c,"sse",u.stream);return}if(o.name==="llm"){const l=K(await T(r,te)),S=new AbortController,O=s(()=>S.abort(),"abort");t.on("close",O);try{const b=await Z(l,S.signal,l.stream?I=>{t.headersSent||t.writeHead(200,{"Content-Type":"text/event-stream","Cache-Control":"no-cache","X-Accel-Buffering":"no"}),t.write(`data: ${JSON.stringify(I)}
+
+`)}:void 0);l.stream?(t.headersSent||t.writeHead(200,{"Content-Type":"text/event-stream","Cache-Control":"no-cache","X-Accel-Buffering":"no"}),t.end(`data: [DONE]
+
+`)):R(t,200,b.completion)}finally{t.off("close",O)}return}if(o.name==="profile.list"){R(t,200,fe(h));return}if(_e.has(o.name)){const l=await ye(o.name,h,g.params.question_id,o.method==="POST"?await T(r):void 0);R(t,l.status,l.body);return}if(be.has(o.name)){const{signal:l,release:S}=Re(t);try{const O=await Se(o.name,ge(h),{params:g.params,body:o.method==="POST"?await T(r):void 0,query:p.searchParams},{requestId:c,signal:l});R(t,O.status,O.body)}catch(O){const b=Ee(O,c,!0);t.writeHead(b.status,{"Content-Type":"application/json; charset=utf-8","X-Content-Type-Options":"nosniff",...b.headers}),t.end(JSON.stringify(b.body))}finally{S()}return}if(Oe.has(o.name)){const l=ve(o.name,{class:"app",app:h.grantee,scopes:h.resolved},p.searchParams);R(t,l.status,l.body);return}if(he.has(o.name)){const l=await pe(o,h,g.params,p.searchParams,await T(r));R(t,l.status,l.body);return}const E=await Q(o,h,_,p.searchParams,await T(r),r.headers["idempotency-key"]);R(t,E.status,E.body)}catch(f){Ie(t,f,c,_)}})()});return{ready:new Promise((r,t)=>{v.once("error",t),v.listen(e.listener.port,e.listener.address,()=>{v.off("error",t),r()})}),close:s(async()=>{i.close(),ie(),v.closeAllConnections(),await new Promise((r,t)=>v.close(c=>c?t(c):r()))},"close")}}s(ut,"createAppListener");export{He as RUN_STREAM_IDLE_MS,ut as createAppListener,Ce as cursor,ke as streamRunEvents};

package/dist/daemon/api/bridge.d.ts

@@ -0,0 +1,63 @@
+import type { IncomingMessage } from 'node:http';
+import type { Duplex } from 'node:stream';
+import { type WebSocket } from 'ws';
+/** Keep a RELAYING connection alive across a gap between frames, through common
+ * 60s proxy idle limits. A viewer only observes a broker, so a missed heartbeat
+ * may close this socket but must never affect the broker or its in-flight work. */
+export declare const REMOTE_ATTACH_HEARTBEAT_MS = 25000;
+/** How long after the last relayed frame the heartbeat keeps pinging. Past this,
+ * the attach is carrying nothing — no viewer output, no streaming node — and the
+ * heartbeat goes silent so the network path underneath can reap the connection.
+ *
+ * This matters far beyond a socket: on a hosted guest (Blaxel) a connection that
+ * is pinged every 25s is never idle, so the host never suspends the sandbox. An
+ * unconditional heartbeat held whole fleets awake for 15h at a time. A drop on a
+ * quiet attach is a normal close the remote peer re-attaches from, and real work
+ * is anchored by its own keep-alive, not by this ping.
+ *
+ * The clock starts when the attach OPENS, not at its first relayed frame: a
+ * never-relaying attach still gets pings until this window elapses. The welcome
+ * frame lands in milliseconds, so this only pads the tail of the very first
+ * window.
+ *
+ * ROLLOUT ORDER — this half is only half the answer, and shipping it FIRST is
+ * strictly worse than shipping nothing. The host that owns the attach must also
+ * let go of a quiet one; crouter cloud does that at its own 60s quiesce
+ * (`CROUTER_FOLLOW_QUIESCE_MS`). Against a host that holds the attach forever,
+ * going quiet here only moves the drop to the network path, the host reports a
+ * detach, its client reconnects, and the box wakes again — the same pin, now
+ * with a full re-snapshot every couple of minutes. Ship the host's quiesce
+ * first, then roll the guest image. */
+export declare const REMOTE_ATTACH_QUIET_MS = 60000;
+export interface RemoteAttachHeartbeat {
+    /** Stop the heartbeat permanently (teardown). Idempotent. */
+    stop: () => void;
+    /** Record a relayed frame in either direction — this is what keeps the
+     *  heartbeat armed, and what re-arms it after a quiet stretch. */
+    noteActivity: () => void;
+}
+export declare function startRemoteAttachHeartbeat(ws: WebSocket, intervalMs?: number, quietMs?: number): RemoteAttachHeartbeat;
+/** Refuse an upgrade PRE-handshake: write a plain HTTP error (uniform API
+ *  `ErrorBody`, spec §8) to the raw socket and destroy it. Never throws — a
+ *  reset peer is swallowed. Shared with server.ts's auth and startup gates. */
+export declare function refuseUpgrade(socket: Duplex, status: number, statusText: string, code: string, message: string): void;
+/** Handle the HTTP upgrade for `GET /v1/nodes/{id}/attach`. A-9 matches the
+ *  route, extracts `{id}`, and calls this with the raw upgrade triplet; this
+ *  owns the WS handshake (its own noServer `wss` above) AND the spec §5.3
+ *  attach-implies-revive semantics. Never throws — every failure path either
+ *  refuses the upgrade (plain HTTP error + socket destroy) or, post-handshake,
+ *  closes the WS with a code. So A-9's upgrade router needs no try/catch around
+ *  this call beyond its own top-level safety net.
+ *
+ *  Flow:
+ *   1. Guard `isSafeNodeId` (→ 400) and existence (→ 404) BEFORE building any
+ *      fs path or reviving — an unsafe id must never reach `viewSocketPath`.
+ *   2. Unless revive is opted out (`?revive=0` / `X-Crtr-Attach-Revive: 0`):
+ *      `decideAttachRevive(id, { resume:true }, wakeParked)` then
+ *      `waitForBrokerViewSocket` (bounded). Revive throw OR socket-not-listenable
+ *      → refuse 409, WS never opens. Without `?wakeParked=1` an exact parked
+ *      resident is left parked and refused 409 `node_dormant` — see the call site.
+ *   3. Revive opted out: a single connect probe. Dormant (socket refuses) →
+ *      refuse 409 (spec §5.3 asymmetry: a dead broker can't stream over WS).
+ *   4. Only then upgrade and hand the live WS to {@link bridgeConnection}. */
+export declare function handleAttachUpgrade(req: IncomingMessage, socket: Duplex, head: Buffer, nodeId: string): Promise<void>;

package/dist/daemon/api/bridge.js

@@ -0,0 +1,8 @@
+var E=Object.defineProperty;var s=(t,e)=>E(t,"name",{value:e,configurable:!0});import{WebSocketServer as $}from"ws";import{isSafeNodeId as A}from"../../core/canvas/paths.js";import{getNode as S}from"../../core/canvas/index.js";import{BROKER_READ_CAPS as R,CLIENT_READ_CAPS as T,FrameDecoder as B,FrameOverflowError as x}from"../../core/runtime/broker-protocol.js";import{classify as k}from"../../core/fault-classifier.js";import{clearFault as p,recordFault as g}from"../../core/canvas/recovery.js";import{decideAttachRevive as C}from"../../core/runtime/revive.js";import{connectViewSocket as N,probeViewSocket as O,waitForBrokerViewSocket as P}from"../../core/runtime/view-socket.js";import{isBeneathRefusal as F}from"../../core/spaces/open-beneath.js";import{attachViewer as _,detachViewer as U}from"./viewer-presence.js";const D=new $({noServer:!0,maxPayload:R.maxLineBytes}),L=25e3,H=6e4;function V(t,e=L,i=H){let o=!0,n=!1,a=Date.now();const f=s(()=>{o=!0},"acknowledge"),m=s(()=>{n||(n=!0,clearInterval(h),t.off("pong",f))},"stop");t.on("pong",f);const h=setInterval(()=>{if(Date.now()-a>i){o=!0;return}if(!o){m(),t.terminate();return}o=!1;try{t.ping()}catch{m(),t.terminate()}},e);return h.unref(),{stop:m,noteActivity:s(()=>{a=Date.now()},"noteActivity")}}s(V,"startRemoteAttachHeartbeat");function b(t){const e=Buffer.from(t,"utf8");return e.byteLength<=123?t:e.subarray(0,123).toString("utf8")}s(b,"clampReason");function u(t,e,i,o,n){const a=JSON.stringify({error:{code:o,message:n}}),f=`HTTP/1.1 ${e} ${i}\r
+content-type: application/json; charset=utf-8\r
+content-length: ${Buffer.byteLength(a)}\r
+connection: close\r
+\r
+`+a;try{t.end(f)}catch{try{t.destroy()}catch{}}}s(u,"refuseUpgrade");function M(t){if(new URL(t.url??"/","http://127.0.0.1").searchParams.get("revive")==="0")return!0;const i=t.headers["x-crtr-attach-revive"];return(Array.isArray(i)?i[0]:i)==="0"}s(M,"reviveOptedOut");function J(t){return new URL(t.url??"/","http://127.0.0.1").searchParams.get("wakeParked")==="1"}s(J,"wakeParkedRequested");function W(t,e){if(!A(e)){try{t.close(1008,b(`invalid node id: ${e}`))}catch{}return}if(S(e)===null){try{t.close(1011,b(`no node ${e}`))}catch{}return}p(e,{link:"viewer\u2194crtrd"});const i=N(e),o=new B(T);let n=!1,a=!1,f,m=!1,h=!1,v=!1;i.on("connect",()=>{m=!0,!n&&v&&_(e,t),p(e,{link:"relay\u2194broker"})});const y=s((r,l)=>{if(!n){if(n=!0,U(e,t),f?.stop(),!i.destroyed)try{i.destroy()}catch{}try{t.close(r,b(l))}catch{}}},"teardown");f=V(t),i.on("data",r=>{f?.noteActivity();let l;try{l=o.push(r)}catch(c){const d=c instanceof x?`broker sent an oversized frame (${c.message})`:`failed to decode a broker frame for ${e}`;y(1009,d);return}for(const c of l)t.readyState===t.OPEN&&t.send(JSON.stringify(c))}),i.on("error",r=>{const l=k("relay\u2194broker",r);g(e,{link:"relay\u2194broker",op:"bridge socket",kind:l.kind,retry:{disposition:"manual"},message:r.message});const c=r.code==="ECONNREFUSED"||r.code==="ENOENT"?`no running broker for ${e}`:`view socket error for ${e}: ${r.message}`;y(1011,c)}),i.on("close",r=>{n||r||(p(e,{link:"relay\u2194broker"}),y(1e3,"broker socket closed"))}),t.on("close",(r,l)=>{const c=l.toString("utf8");if(n){r===1e3&&p(e,{link:"viewer\u2194crtrd"});return}if(r===1e3)p(e,{link:"viewer\u2194crtrd"});else if(!a){a=!0;const d=k("viewer\u2194crtrd",{code:r,reason:c});g(e,{link:"viewer\u2194crtrd",op:"remote attach websocket",kind:d.kind,retry:{disposition:"auto"},message:c||`remote attach closed (${r})`})}y(r,c||`remote attach closed (${r})`)}),t.on("error",()=>{if(!a){a=!0;const r=k("viewer\u2194crtrd",{code:1006,reason:"remote attach websocket error"});g(e,{link:"viewer\u2194crtrd",op:"remote attach websocket",kind:r.kind,retry:{disposition:"auto"},message:"remote attach websocket error"})}y(1011,"remote attach websocket error")}),t.on("message",r=>{if(n||i.destroyed)return;f?.noteActivity();const c=(Array.isArray(r)?Buffer.concat(r):Buffer.isBuffer(r)?r:Buffer.from(new Uint8Array(r))).toString("utf8");if(!h)try{const w=JSON.parse(c);w?.type==="hello"&&(h=!0,v=w.attends!==!1,v&&m&&_(e,t))}catch{}const d=c.endsWith(`
+`)?c:c+`
+`;try{i.write(d)}catch{}})}s(W,"bridgeConnection");async function te(t,e,i,o){e.on("error",()=>{});try{if(!A(o)){u(e,400,"Bad Request","invalid_node_id",`invalid node id: ${o}`);return}if(S(o)===null){u(e,404,"Not Found","node_not_found",`no node ${o}`);return}if(M(t)){if(!await O(o,250)){u(e,409,"Conflict","node_dormant",`node ${o} is dormant and revive was opted out (?revive=0)`);return}}else{let n;try{const a=await C(o,{resume:!0,capacity:"refuse"},J(t));if(a.parked){u(e,409,"Conflict","node_dormant",`node ${o} is parked; attach with ?wakeParked=1 to wake it`);return}n=a.result.launch?.exited}catch(a){const f=a instanceof Error?a.message:String(a);u(e,409,"Conflict","attach_revive_failed",`attach revive failed: ${f}`);return}if(!await P(o,n)){u(e,409,"Conflict","broker_not_ready",`broker view socket for ${o} did not become listenable after revive`);return}}if(e.destroyed)return;D.handleUpgrade(t,e,i,n=>W(n,o))}catch(n){const a=n instanceof Error?n.message:String(n);if(F(n)){u(e,400,"Bad Request","invalid_request",a);return}u(e,500,"Internal Server Error","internal",`attach upgrade failed: ${a}`)}}s(te,"handleAttachUpgrade");export{L as REMOTE_ATTACH_HEARTBEAT_MS,H as REMOTE_ATTACH_QUIET_MS,te as handleAttachUpgrade,u as refuseUpgrade,V as startRemoteAttachHeartbeat};

package/dist/daemon/api/deferred-head.d.ts

@@ -0,0 +1,14 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+export declare const DEFER_HEAD_REQUEST_HEADER = "crtr-defer-head";
+export declare const DEFERRED_HEAD_CONTENT_TYPE = "application/vnd.crtr.deferred-head";
+export declare const DEFERRED_HEAD_MAGIC = "crtr-deferred-head/1\n";
+export declare const DEFER_HEAD_AFTER_MS = 40000;
+export declare const DEFER_HEAD_KEEPALIVE_MS = 15000;
+export interface DeferHeadOptions {
+    afterMs?: number;
+    keepaliveMs?: number;
+}
+/** Whether this request asked for a deferred head. */
+export declare function wantsDeferredHead(req: IncomingMessage): boolean;
+/** Arm the wrapper on `res`. A no-op unless the request carries `Crtr-Defer-Head: 1`. */
+export declare function deferHead(req: IncomingMessage, res: ServerResponse, options?: DeferHeadOptions): void;

package/dist/daemon/api/deferred-head.js

@@ -0,0 +1,4 @@
+var m=Object.defineProperty;var a=(s,e)=>m(s,"name",{value:e,configurable:!0});const h="crtr-defer-head",v="application/vnd.crtr.deferred-head",y=`crtr-deferred-head/1
+`,b=4e4,M=15e3;function C(s){const e=s.headers[h];return(Array.isArray(e)?e[0]:e)?.trim()==="1"}a(C,"wantsDeferredHead");function R(s){const e={};for(const[l,c]of s)c!==void 0&&(e[l]=Array.isArray(c)?c.map(String):String(c));return e}a(R,"stringified");function F(s,e,l={}){if(!C(s))return;const c=l.afterMs??4e4,p=l.keepaliveMs??15e3,u={writeHead:e.writeHead.bind(e),write:e.write.bind(e),end:e.end.bind(e)};let r=null,H=!1,i;const w=a(()=>{clearTimeout(A),i!==void 0&&clearInterval(i),i=void 0},"stop"),A=setTimeout(()=>{e.headersSent||e.writableEnded||e.destroyed||D()},c);e.once("close",w),e.once("finish",w);function D(){const n=e.statusCode,t=new Map;for(const[o,f]of Object.entries(e.getHeaders()))f!==void 0&&t.set(o,f);for(const o of["content-length","transfer-encoding","content-type","content-encoding"])e.removeHeader(o);u.writeHead(200,{"Content-Type":v}),u.write(y),e.statusCode=n,r=t,i=setInterval(()=>{!H&&!e.destroyed&&u.write(`
+`)},p),i.unref(),g()}a(D,"commit");function g(){const n=e;Object.defineProperty(e,"headersSent",{configurable:!0,get:a(()=>H,"get")}),n.setHeader=(t,o)=>(r.set(t.toLowerCase(),o),e),n.getHeader=t=>r.get(t.toLowerCase()),n.getHeaders=()=>Object.fromEntries(r),n.getHeaderNames=()=>[...r.keys()],n.hasHeader=t=>r.has(t.toLowerCase()),n.removeHeader=t=>{r.delete(t.toLowerCase())},n.flushHeaders=()=>{},n.writeHead=(t,...o)=>{const f=o.find(d=>d!==null&&typeof d=="object");if(Array.isArray(f)){const d=f;for(let E=0;E+1<d.length;E+=2)r.set(String(d[E]).toLowerCase(),d[E+1])}else if(f)for(const[d,E]of Object.entries(f))r.set(d.toLowerCase(),E);return e.statusCode=t,_(),e},n.write=(t,...o)=>(_(),u.write(t,...o)),n.end=(...t)=>(_(),u.end(...t))}a(g,"present");function _(){H||(H=!0,i!==void 0&&clearInterval(i),i=void 0,u.write(`${JSON.stringify({status:e.statusCode,headers:R(r)})}
+`))}a(_,"sendHead")}a(F,"deferHead");export{v as DEFERRED_HEAD_CONTENT_TYPE,y as DEFERRED_HEAD_MAGIC,b as DEFER_HEAD_AFTER_MS,M as DEFER_HEAD_KEEPALIVE_MS,h as DEFER_HEAD_REQUEST_HEADER,F as deferHead,C as wantsDeferredHead};

package/dist/daemon/api/handlers/analytics.d.ts

@@ -0,0 +1,2 @@
+import { type RouteTable } from '../router.js';
+export declare const analyticsRoutes: RouteTable;

package/dist/daemon/api/handlers/analytics.js

@@ -0,0 +1 @@
+var y=Object.defineProperty;var n=(e,o)=>y(e,"name",{value:o,configurable:!0});import{prepared as l}from"../../../core/sqlite-statements.js";import{listNodes as h}from"../../../core/canvas/canvas.js";import{openDb as m}from"../../../core/canvas/db.js";import{listMemoryReads as g,memoryReadsStartedAt as b}from"../../../core/canvas/memory-reads.js";import{usage as a}from"../../../core/errors.js";import{computeAnalytics as R,WINDOW_MS as S}from"../../analytics/compute.js";import{scanResponses as O}from"../../analytics/scan.js";import{canReadNode as E}from"../router.js";const M=new Set(["as_of","window","project"]);async function N(e){for(const[t]of e.query)if(!M.has(t))throw a(`unknown analytics query parameter: ${t}`);const o=e.query.get("as_of")??"",i=Date.parse(o);if(!Number.isFinite(i))throw a(`as_of must be an ISO 8601 time, got "${o}"`);const r=e.query.get("window")??"";if(!Object.hasOwn(S,r))throw a(`window must be 24h or 7d, got "${r}"`);const d=e.query.get("project");if(d==="")throw a("project must be a non-empty directory path when given");const s=new Map,f=l(m(),"SELECT node_id, transcript_path FROM sessions WHERE transcript_path IS NOT NULL").all();for(const t of f)s.set(t.node_id,(s.get(t.node_id)??new Set).add(t.transcript_path));const w=new Map(l(m(),"SELECT node_id, title FROM node_rows WHERE title IS NOT NULL").all().map(t=>[t.node_id,t.title])),c=e.principal,u=h().filter(t=>t.kind!=="human"&&(c.class==="person"||E(c,t.grantee??"app:terminal",t.node_id))).map(t=>({node_id:t.node_id,name:t.name,title:w.get(t.node_id)??null,kind:t.kind,parent:t.parent??null,cwd:t.cwd,created:t.created,finalized_at:t.finalized_at??null,final_report:t.final_report??null,lifecycle:t.lifecycle,transcripts:[...s.get(t.node_id)??[]]})),p=new AbortController;return e.res.once("close",()=>p.abort()),{status:200,body:await R({asOfMs:i,window:r,project:d??null,agents:u,scan:n(t=>O(t,p.signal),"scan"),memory:n((t,_)=>({rows:g(t,_),startedAt:b()}),"memory")})}}n(N,"handleAnalytics");const D=[{method:"GET",pattern:"/v1/canvas/analytics",handler:N}];export{D as analyticsRoutes};

package/dist/daemon/api/handlers/app-profiles.d.ts

@@ -0,0 +1,17 @@
+import type { AppPrincipal } from '../principal.js';
+/** `profile.list` for an app caller (daemon-operations §profile.list): the
+ *  caller's app's profiles, and each profile of another app B that its resolved
+ *  scope set covers with `crtr:memory:rw:app:<B>:profile:<id>` (which
+ *  `crtr:memory:rw:app:<B>` covers) — the visibility of the owner socket's
+ *  `GET /v1/profiles` for an app. `default` marks the caller's own default
+ *  profile. Creates, changes, and selects nothing beyond that default profile,
+ *  which `run.start` without `profile` would create the same way. */
+export declare function listAppProfiles(caller: AppPrincipal): {
+    profiles: Array<{
+        profile_id: string;
+        name: string;
+        grantee: string;
+        default_kind: string;
+        default: boolean;
+    }>;
+};

package/dist/daemon/api/handlers/app-profiles.js

@@ -0,0 +1 @@
+var s=Object.defineProperty;var t=(r,o)=>s(r,"name",{value:o,configurable:!0});import{covers as m}from"@north-light/identity";import{ensureAppProfile as a,listProfiles as l}from"../../../core/profiles/manifest.js";import{resolveRunKind as d}from"../../../core/runtime/launch-target.js";function P(r){const o=a(r.grantee).profileId;return{profiles:l().filter(({profileId:e,manifest:p})=>{const i=p.grantee??"app:terminal";if(i===r.grantee)return!0;const n=`crtr:memory:rw:${i}:profile:${e}`;return r.resolved.some(f=>m(f,n))}).map(e=>({profile_id:e.profileId,name:e.manifest.name,grantee:e.manifest.grantee??"app:terminal",default_kind:d(e),default:e.profileId===o}))}}t(P,"listAppProfiles");export{P as listAppProfiles};

package/dist/daemon/api/handlers/attach.d.ts

@@ -0,0 +1,2 @@
+import { type RouteTable } from '../router.js';
+export declare const attachRoutes: RouteTable;

package/dist/daemon/api/handlers/attach.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var i=(t,e)=>c(t,"name",{value:e,configurable:!0});import{getNode as m}from"../../../core/canvas/canvas.js";import{decideAttachRevive as k}from"../../../core/runtime/revive.js";import{viewSocketPath as l}from"../../../core/canvas/paths.js";import{waitForBrokerViewSocket as v}from"../../../core/runtime/placement-tmux.js";import{notFound as p,usage as n}from"../../../core/errors.js";import{ownerOnly as w}from"../router.js";function h(t){if(t==null)return{resume:!0,revive:!0,wakeParked:!0};if(typeof t!="object")throw n("attach body must be a JSON object { resume?, revive?, wakeParked? }");const e=t.resume,r=t.revive,o=t.wakeParked;if(e!==void 0&&typeof e!="boolean")throw n("resume must be a boolean");if(r!==void 0&&typeof r!="boolean")throw n("revive must be a boolean");if(o!==void 0&&typeof o!="boolean")throw n("wakeParked must be a boolean");return{resume:e??!0,revive:r??!0,wakeParked:o??!0}}i(h,"parseAttachBody");async function b(t){const e=t.params.id;if(m(e)===null)throw p(`unknown node: ${e}`,{received:e});const{resume:r,revive:o,wakeParked:f}=h(t.body);let u=!1,d=!1,s=!1;if(o){const a=await k(e,{resume:r,capacity:"refuse"},f);s=a.parked,a.parked||(u=a.result.launch!==void 0,d=a.result.resumed,await v(e))}return{status:200,body:{node_id:e,socket_path:l(e),revived:u,resumed:d,parked:s}}}i(b,"handleAttach");const F=w([{method:"POST",pattern:"/v1/nodes/:id/attach",handler:b}]);export{F as attachRoutes};

package/dist/daemon/api/handlers/bash-jobs.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const bashJobRoutes: RouteTable;

package/dist/daemon/api/handlers/bash-jobs.js

@@ -0,0 +1 @@
+var S=Object.defineProperty;var h=(e,o)=>S(e,"name",{value:o,configurable:!0});import{killBashJobObject as B,recordBashJobObject as E}from"../../../core/spaces/stop.js";import{readerFor as J}from"../reader.js";import{join as P}from"node:path";import{createFileBeneath as m,existsBeneath as w,unlinkBeneath as $}from"../../../core/spaces/open-beneath.js";import{launchAppProcess as A,appProcessSandboxed as q}from"../../../core/spaces/process.js";import{BASH_JOB_SUPERVISOR_SCRIPT as O}from"../../../core/bash-job-supervisor.js";import{resolveAdmittedHostCommand as N}from"../../../core/runtime/spawn-env.js";import{requireCurrentExecution as _}from"./broker-recovery.js";import{isSafeNodeId as L}from"../../../core/canvas/paths.js";import{contextDir as y}from"../../../core/canvas/node-agent-paths.js";import{getNode as j}from"../../../core/canvas/canvas.js";import{isBrokerLive as T}from"../../../core/runtime/model-swap.js";import{assertNotFinalized as D}from"../../../core/runtime/reopen.js";import{reviveNode as R}from"../../../core/runtime/revive.js";import{activeBackgroundBashJobs as C,bashJobPaths as v,isBashJobProcessGroupAlive as z,readJobPgid as F,readJobPgidIdentity as M,isSafeBashJobId as I,readBashNiceness as G,stopBackgroundBashJob as H}from"../../../core/bash-jobs.js";import{ApiError as i}from"../../../api/index.js";import{notFound as Z}from"../../../core/errors.js";import{freshChildNodeExecPath as U}from"../../../core/runtime/branded-host.js";function f(e){const o=e.params.id;if(o===void 0||!L(o))throw new i(400,"invalid_node_id",`invalid node id: ${JSON.stringify(o)}`);if(j(o)===null)throw Z(`unknown node: ${o}`,{received:o});const d=e.params.jobId;if(d!==void 0){if(!I(d))throw new i(400,"invalid_job_id",`invalid background job id: ${JSON.stringify(d)}`);return{nodeId:o,jobId:d,dir:y(o)}}return{nodeId:o,dir:y(o)}}h(f,"requireTarget");async function V(e){const{nodeId:o,dir:t}=f(e);if(e.principal.class!=="broker"||e.principal.node!==o)throw new i(403,"permission_error","only this node\u2019s broker may start a job");const d=e.body;if(!d||typeof d!="object"||Array.isArray(d))throw new i(400,"invalid_request","job.start requires a JSON body");const s=d;_(o,s.expected_execution_id);const r=s.job_id,a=s.cwd,u=s.env;if(typeof r!="string"||!I(r)||typeof a!="string"||!u||typeof u!="object"||Array.isArray(u)||Object.entries(u).some(([c,b])=>!/^[A-Za-z_][A-Za-z0-9_]*$/.test(c)||typeof b!="string"))throw new i(400,"invalid_request","invalid job id, cwd or environment");if(!q())throw new i(400,"invalid_request","job.start is only used with the root launcher");const n=v(t,r);if(![n.jobRun,n.cmdSh,n.jobLog].every(c=>w(n.root,c)))throw new i(404,"job_not_found","job was not prepared by this node");const p=P(n.dir,"job.starting");try{m(n.root,p,"")}catch(c){throw c.code==="EEXIST"?new i(409,"job_already_started","job was already started"):c}let l;try{const c=u,b=N("bash",c,a),g=j(o),k=await U();return l=await A({nodeId:o,app:g.grantee??"app:terminal",isolated:g.isolated,cwd:a,env:c,capture:!1,command:[b,"-c",O,"--",n.cmdSh,n.jobLog,n.jobExit,n.jobRun,n.jobDone,b,String(G(t)),k]}),m(n.root,n.jobPgid,String(l.pid),384),m(n.root,n.jobPgidIdentity,`launcher:${l.pid}`,384),{status:201,body:{pid:l.pid}}}catch(c){if(l!==void 0)try{await l.stop()}catch(b){throw new AggregateError([c,b],`job ${r} launched but could not be recorded or stopped`)}try{$(n.root,p)}catch(b){if(b.code!=="ENOENT")throw b}throw c}}h(V,"handleStart");function X(e){const{nodeId:o,dir:t}=f(e),d=Date.now();return{status:200,body:C(t).map(r=>{const a=F(t,r.jobId)??null;return{job_id:r.jobId,command:r.command,purpose:r.purpose,started_at:new Date(r.startedAtMs).toISOString(),elapsed_ms:Math.max(0,d-r.startedAtMs),pgid:a,pgid_alive:a!==null&&z(a,M(t,r.jobId))}})}}h(X,"handleList");async function x(e){const{nodeId:o,jobId:t,dir:d}=f(e);if(t===void 0)throw new i(400,"invalid_request","a job id is required");const s=e.query.get("foreground")==="1";if(s){if(e.principal.class!=="broker"||e.principal.node!==o)throw new i(403,"permission_error","only this node\u2019s broker may abort its foreground job");_(o,e.body?.expected_execution_id)}const r=await H(d,t,s,o);if(r.kind==="missing")throw new i(404,"job_not_found",`no background job ${t} for ${o}`);if(r.kind==="retired")throw new i(404,"job_not_found",`background job ${t} for ${o} is no longer running`,{log_path:r.logPath});if(r.kind==="not-stoppable")throw new i(409,"job_not_stoppable",`job ${t} recorded no trusted process identity`,{log_path:r.logPath});if(s)return{status:200,body:{node_id:o,job_id:t,signaled:r.signaled}};D(o),B(t,n=>{const p=J(n,e);return p.class==="person"?p.person:p.class==="app"?p.app:p.node});const a=j(o);if(a!==null&&!T(a))try{await R(o,{resume:!0,capacity:"freeze"})}catch{}return{status:200,body:{node_id:o,job_id:t,signaled:r.signaled}}}h(x,"handleStop");function K(e){const{nodeId:o,jobId:t,dir:d}=f(e);if(t===void 0)throw new i(400,"invalid_request","a job id is required");if(e.principal.class!=="broker"||e.principal.node!==o)throw new i(403,"permission_error","only this node\u2019s broker may record its job");const s=e.body,r=v(d,t);if(typeof s?.command!="string"||s.job_dir!==r.dir||s.log_path!==r.jobLog)throw new i(400,"invalid_request",`job.background requires command, job_dir ${r.dir} and log_path ${r.jobLog}`);if(!w(r.root,r.jobBg))throw new i(404,"job_not_found",`job ${t} of ${o} is not backgrounded`);const a=s.command;return{status:201,body:{id:E(o,t,{command:a,jobDir:r.dir,logPath:r.jobLog}).id}}}h(K,"handleBackground");const jo=[{method:"POST",pattern:"/v1/nodes/:id/jobs/:jobId/background",handler:K},{method:"POST",pattern:"/v1/nodes/:id/jobs/start",handler:V},{method:"GET",pattern:"/v1/nodes/:id/jobs",handler:X},{method:"DELETE",pattern:"/v1/nodes/:id/jobs/:jobId",handler:x}];export{jo as bashJobRoutes};

package/dist/daemon/api/handlers/bash.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const bashRoutes: RouteTable;

package/dist/daemon/api/handlers/bash.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var p=(o,t)=>m(o,"name",{value:t,configurable:!0});import{statSync as u}from"node:fs";import{isAbsolute as l}from"node:path";import{ApiError as d}from"../../../api/index.js";import{buildOperationalEnvBase as f}from"../../../core/runtime/spawn-env.js";import{runAppCommand as w}from"../../../core/runtime/run-command.js";import{getNode as _}from"../../../core/canvas/canvas.js";import{readProfileEnvVars as b}from"../../../core/profiles/env-store.js";import{readAppEnvVars as y}from"../../../core/profiles/app-env-store.js";import{usage as i}from"../../../core/errors.js";const h=60,c=600,T=256*1024;function E(o){if(typeof o!="object"||o===null||Array.isArray(o))throw i("bash requires an object body");const t=o;if(typeof t.command!="string"||t.command==="")throw i("bash requires a non-empty `command`");if(typeof t.cwd!="string"||!l(t.cwd))throw new d(404,"cwd_not_found","cwd must name an absolute directory");try{if(!u(t.cwd).isDirectory())throw new Error("not a directory")}catch{throw new d(404,"cwd_not_found",`cwd not found: ${t.cwd}`)}const r=t.timeout_s??h;if(typeof r!="number"||!Number.isFinite(r)||r<=0||r>c)throw new d(422,"invalid_timeout",`timeout_s must be greater than 0 and at most ${c}`);if(t.profile!==void 0&&typeof t.profile!="string")throw i("profile must be a string");let n;if(t.env!==void 0){if(typeof t.env!="object"||t.env===null||Array.isArray(t.env))throw i("env must be an object of string values");n={};for(const[s,a]of Object.entries(t.env)){if(typeof a!="string")throw i("env must be an object of string values");n[s]=a}}return{command:t.command,cwd:t.cwd,timeout_s:r,env:n,profile:t.profile}}p(E,"parseRequest");async function A(o){const t=E(o.body),r=o.principal.class==="person"?"app:terminal":o.principal.app;if(r!=="app:terminal"&&t.profile!==void 0)throw new d(403,"permission_error","app bash cannot select an owner profile");const n=r==="app:terminal"?t.profile??null:null,s=f({targetCwd:t.cwd,targetProfileId:n,skipSpawnAllow:r!=="app:terminal"}),a={...s,...y(r),...r==="app:terminal"?b(n):{},...t.env,...n===null?{}:{CRTR_PROFILE_ID:n},CRTR_ADMITTED_HOST_PATH:s.CRTR_ADMITTED_HOST_PATH},e=await(await w({app:r,...o.principal.class==="broker"?{nodeId:o.principal.node,isolated:_(o.principal.node)?.isolated===!0}:{},command:t.command,cwd:t.cwd,env:a,timeoutMs:t.timeout_s*1e3,headBytes:T})).completion;if(e.processError!==null)throw e.processError;return{status:200,body:{exit_code:e.timedOut?null:e.exitCode,signal:e.signal,stdout:e.stdout,stdout_truncated:e.stdoutTruncated,stderr:e.stderr,stderr_truncated:e.stderrTruncated,timed_out:e.timedOut,duration_ms:e.durationMs}}}p(A,"handleBash");const H=[{method:"POST",pattern:"/v1/bash",scope:"crtr:act",handler:A}];export{H as bashRoutes};

package/dist/daemon/api/handlers/broker-ops.d.ts

@@ -0,0 +1,5 @@
+import type { BrokerExtensionNodeDTO } from '../../../api/dto/broker-ops.js';
+import { getNode } from '../../../core/canvas/canvas.js';
+import { type RouteTable } from '../router.js';
+export declare function extensionNode(node: NonNullable<ReturnType<typeof getNode>>): BrokerExtensionNodeDTO;
+export declare const brokerOperationRoutes: RouteTable;

package/dist/daemon/api/handlers/broker-ops.js

@@ -0,0 +1 @@
+var A=Object.defineProperty;var i=(e,t)=>A(e,"name",{value:t,configurable:!0});import{canonicalSessionFile as F,findNodeBySessionFile as O,getNode as y,isWarmSpare as R,listNodeIdentities as T,recordRespawnAttempt as I,recordSettledTurn as $,setPresence as b,subscriptionsOf as j,updateNode as g,updateNodeTelemetry as C}from"../../../core/canvas/canvas.js";import{recordExecutionPid as q}from"../../../core/canvas/executions.js";import{bindSession as E,readLiveSession as M,transferSession as L}from"../../../core/canvas/sessions.js";import{isSafeNodeId as D}from"../../../core/canvas/paths.js";import{appForNode as G}from"../../../core/canvas/node-agent-paths.js";import{isPidAlive as J}from"../../../core/canvas/pid.js";import{editorLabel as P}from"../../../core/canvas/labels.js";import{assembleNodeSubject as W}from"../../../core/substrate/subject.js";import{withCanvasWrite as l}from"../../../core/canvas/db.js";import{notFound as v,usage as a}from"../../../core/errors.js";import{hasUnseenWakeMail as N}from"../../../core/canvas/deliveries.js";import{clearYieldMessage as U}from"../../../core/runtime/kickoff.js";import{readRoadmap as V}from"../../../core/runtime/roadmap.js";import{forkSourceNode as Y}from"../../../core/runtime/nodes.js";import{transition as _}from"../../../core/runtime/lifecycle.js";import{focusOf as k,tearDownNode as x}from"../../../core/runtime/placement.js";import{hasAttachedBrokerViewers as z}from"../viewer-presence.js";import{evaluateStop as H}from"../../../core/runtime/stop-guard.js";import{clearFault as h,recordFault as K}from"../../../core/canvas/recovery.js";import{updateModelRecipe as Q}from"../../../core/runtime/model-swap.js";import{completeCompanionRequestedSubmit as X}from"../../review/finish.js";import{emitEvent as Z}from"../../../core/events/emit.js";import{consumePendingPark as ee,recordPendingParkActivity as te}from"../../park-pending.js";import{shouldParkAfterSummary as ne}from"../../park-activity.js";import{ownerOnly as oe}from"../router.js";import{requireCurrentExecution as m}from"./broker-recovery.js";import{ensureRunObserver as re}from"../../runs/observer.js";import{parseNodeTelemetryRecord as ie,writeNodeTelemetryRecord as se}from"./telemetry-record.js";function p(e,t){if(typeof e!="object"||e===null||Array.isArray(e))throw a(`${t} requires a JSON body`);return e}i(p,"objectBody");function ae(e){const t=p(e,"broker session-bound");if(typeof t.executionId!="string"||t.executionId==="")throw a("executionId must be a non-empty string");if(typeof t.piSessionId!="string"||t.piSessionId==="")throw a("piSessionId must be a non-empty string");if(t.sessionFile!==null&&typeof t.sessionFile!="string")throw a("sessionFile must be a string or null");if(!Number.isSafeInteger(t.pid)||t.pid<=0)throw a("pid must be a positive safe integer");if(t.reason!==null&&typeof t.reason!="string")throw a("reason must be a string or null");if(!Array.isArray(t.reviewBoundaryIds)||!t.reviewBoundaryIds.every(n=>typeof n=="string"))throw a("reviewBoundaryIds must be an array of strings");return t}i(ae,"parseSessionBoundBody");function de(e){const t=p(e,"broker settle");if(typeof t.stopReason!="string")throw a("stopReason must be a string");for(const n of["backgroundJobsRunning","pushedFinal"])if(typeof t[n]!="boolean")throw a(`${n} must be a boolean`);return t}i(de,"parseSettleBody");function ue(e){const t=p(e,"broker park-complete");if(t.outcome!=="completed"&&t.outcome!=="failed")throw a("outcome must be completed or failed");return t}i(ue,"parseParkCompleteBody");function ce(e){const t=p(e,"broker telemetry");if(typeof t.expected_execution_id!="string"||t.expected_execution_id==="")throw a("expected_execution_id must be a non-empty string");const n=ie(t);return{...n,expected_execution_id:t.expected_execution_id,updated_at:new Date(n.updated_at).toISOString()}}i(ce,"parseTelemetryBody");function le(e){const t=p(e,"broker model");if(typeof t.spec!="string"||t.spec.trim()==="")throw a("spec must be a non-empty string");const n=t.intent;if(n!==void 0){const r=n!==null&&typeof n=="object"?n:void 0;if(r===void 0||typeof r.family!="string"||r.family===""||!["ultra","strong","medium","light"].includes(r.strength))throw a("intent must be { family, strength } with strength ultra|strong|medium|light when present")}if(typeof t.userSelected!="boolean")throw a("userSelected must be a boolean");return t}i(le,"parseModelCommitBody");function f(e){const t=y(e);if(t===null)throw v(`unknown node: ${e}`,{received:e});return t}i(f,"requireNode");function w(e){return{node_id:e.node_id,grantee:G(e.node_id),name:e.name,...e.description===void 0?{}:{description:e.description},...e.title===void 0?{}:{title:e.title},...e.icon===void 0?{}:{icon:e.icon},kind:e.kind,mode:e.mode,lifecycle:e.lifecycle,status:e.status,cwd:e.cwd,parent:e.parent??null,fork_from:e.fork_from??null,profile_id:e.profile_id??null,...e.managed_worktree===void 0?{}:{managed_worktree:e.managed_worktree===null?null:{state:e.managed_worktree.state,...e.managed_worktree.cleanup===void 0?{}:{cleanup:e.managed_worktree.cleanup},path:e.managed_worktree.path,branch:e.managed_worktree.branch,base_ref:e.managed_worktree.base_ref,base_sha:e.managed_worktree.base_sha}},...e.review_binding===void 0?{}:{review_binding:e.review_binding??null},intent:e.intent??null,...e.persona_ack===void 0?{}:{persona_ack:e.persona_ack},created:e.created}}i(w,"extensionNode");function pe(e){const t=f(e),n=[],r=new Set([e]);let o=t.parent??null;for(;o!==null&&o!==""&&!r.has(o);){r.add(o);const c=y(o);if(c===null)break;n.unshift(w(c)),o=c.parent??null}const s=j(e).map(c=>y(c.node_id)).filter(c=>c!==null&&c.kind!=="human").sort((c,S)=>c.status===S.status?0:c.status==="active"?-1:S.status==="active"?1:0).map(w),u=typeof t.fork_source_file=="string"?Y(t.fork_source_file):null,d=W(e);if(d===null)throw v(`unknown node: ${e}`,{received:e});return{node:w(t),warm_spare:R(e),ancestors:n,children:s,fork_source:u===null?null:w(u),subject:d,report_nodes:T(),roadmap:V(e)}}i(pe,"extensionState");function B(e,t){return e?.kind===t.kind&&e?.mode===t.mode&&e?.lifecycle===t.lifecycle}i(B,"samePersona");function me(e){const t=p(e,"broker generated-name");if(t.kind!=="initial"&&t.kind!=="recap")throw a("kind must be initial or recap");if(typeof t.description!="string"||typeof t.title!="string"||typeof t.icon!="string")throw a("description, title, and icon must be strings");if(t.kind==="initial")return t;const n=t.expected;if(typeof n!="object"||n===null||Array.isArray(n)||["name","description","title","icon","kind"].some(r=>typeof n[r]!="string"))throw a("recap expected must contain name, description, title, icon, and kind strings");return t}i(me,"parseGeneratedNameBody");function fe(e){const t=p(e,"broker persona-ack"),n=i(r=>{const o=t[r];if(typeof o!="object"||o===null||Array.isArray(o)||typeof o.kind!="string"||o.mode!=="base"&&o.mode!=="orchestrator"||o.lifecycle!=="terminal"&&o.lifecycle!=="resident")throw a(`${r} must be a persona state`);return o},"parse");return{expected_execution_id:t.expected_execution_id,from:n("from"),to:n("to")}}i(fe,"parsePersonaAckBody");function he(e){const t=e.params.id,n=ae(e.body),r=n.sessionFile===null?null:F(n.sessionFile);return{status:200,body:l(()=>{const s=f(t);if(q(n.executionId,t,n.pid)==="shutdown")return{action:"shutdown"};const u=s.review_binding?.review_id;if(u!==void 0&&!n.reviewBoundaryIds.includes(u))return{action:"shutdown"};if(n.reason==="new"&&s.parent==null)return{action:"relaunch_root"};if(n.reason!=="new"&&s.fork_from!=null&&s.pi_session_id==null&&r===null)return{action:"shutdown"};const d=r===null?null:O(r);if(d!==null&&d.node_id!==t){if(J(d.pi_pid))return K(t,{link:"daemon\u2192node",op:"session-file-ownership",kind:"protocol",retry:{disposition:"fatal"},message:`refusing to bind ${r}: it is owned by live node ${d.node_id}`}),{action:"shutdown"};const c=M(d.node_id);if(c===null||L({fromNodeId:d.node_id,fromBindingId:c.bindingId,toNodeId:t,executionId:n.executionId,sessionId:n.piSessionId,transcriptPath:r})!=="transferred")return{action:"shutdown"}}else if(E(t,{executionId:n.executionId,sessionId:n.piSessionId,transcriptPath:r})==="shutdown")return{action:"shutdown"};return n.reason!=="new"&&(U(t),s.intent==="refresh"&&_(t,"revive")),{action:"none"}})}}i(he,"handleSessionBound");function ye(e,t){const n=y(e);if(n===null){if(t.pushedFinal)return{action:"shutdown"};throw v(`unknown node: ${e}`,{received:e})}if($(e,new Date().toISOString()),(t.stopReason==="stop"||t.stopReason==="length")&&I(e,{failures:0,notBefore:null}),t.stopReason==="quit")return(n.status==="active"||n.status==="idle")&&n.intent===null&&(_(e,"finish"),h(e),k(e)!==null&&x(e),b(e,{pane:null,tmux_session:null,window:null})),{action:"shutdown"};if(t.stopReason!=="stop"&&t.stopReason!=="length")return h(e,{link:"daemon\u2192node"}),n.intent==="refresh"?{action:"shutdown"}:{action:"stay_dormant"};const r={pushedFinal:t.pushedFinal};if(r.pushedFinal||n.status==="done")return h(e),k(e)!==null&&x(e),b(e,{pane:null,tmux_session:null,window:null}),{action:"shutdown"};if(n.intent==="refresh")return h(e),{action:"shutdown"};const o=H(e,r,t.backgroundJobsRunning);return h(e),o.action==="reprompt"?{action:"reprompt",prompt:o.message}:o.reason==="finished"?N(e)?{action:"stay_dormant"}:{action:"shutdown"}:o.reason!=="awaiting"&&o.reason!=="scheduled"?{action:"stay_dormant"}:k(e)!==null||z(e)||N(e)?{action:"stay_dormant"}:(_(e,"release"),{action:"shutdown"})}i(ye,"settleBroker");function _e(e){const t=e.params.id,n=de(e.body);m(t,n.expected_execution_id);const r=l(()=>ye(t,n));return r.action!=="reprompt"&&X(t),{status:200,body:r}}i(_e,"handleSettle");function ke(e){const t=e.params.id,n=ue(e.body);return m(t,n.expected_execution_id),{status:200,body:l(()=>{const o=ee(t);if(o===void 0)return{action:"stay_dormant"};const s=f(t);return ne(t,s,o)?(h(t),_(t,"park"),k(t)!==null&&x(t),b(t,{pane:null,tmux_session:null,window:null}),Z({level:n.outcome==="completed"?"info":"warn",event:"broker.park.complete",...D(t)?{node_id:t}:{},outcome:n.outcome==="completed"?"succeeded":"failed"}),{action:"shutdown"}):{action:"stay_dormant"}})}}i(ke,"handleParkComplete");function we(e){const t=e.params.id;return m(t,p(e.body,"broker park-activity").expected_execution_id),{status:200,body:l(()=>({activity:te(t)?"recorded":"none"}))}}i(we,"handleParkActivity");function be(e){const t=e.params.id,n=ce(e.body);return m(t,n.expected_execution_id),l(()=>{C(t,{tokensIn:n.tokens_in,contextTokens:n.context_tokens,lastActivity:n.last_activity,updatedAt:n.updated_at}),se(t,n)}),{status:204}}i(be,"handleTelemetry");function ge(e){const t=e.params.id,n=le(e.body);return m(t,n.expected_execution_id),{status:200,body:{modelOverride:l(()=>Q(f(t),n.spec,n.intent,n.userSelected)).model_override}}}i(ge,"handleModelCommit");function ve(e){const t=e.params.id,n=f(t);return n.run_id&&re(t,n.run_id),{status:200,body:pe(t)}}i(ve,"handleExtensionState");function xe(e){const t=e.params.id,n=me(e.body);return m(t,n.expected_execution_id),{status:200,body:l(()=>{const o=f(t);if(n.kind==="initial"){if((o.description??"").trim()!=="")return{applied:!1};const d=g(t,{description:n.description,...n.title.trim()===""?{}:{title:n.title},...n.icon.trim()===""?{}:{icon:n.icon}});return{applied:!0,editorLabel:P(d),description:d.description??"",title:d.title??"",icon:d.icon??""}}const s=n.expected;if(o.name!==s.name||(o.description??"")!==s.description||(o.title??"")!==s.title||(o.icon??"")!==s.icon||o.kind!==s.kind)return{applied:!1};const u=g(t,{description:n.description,title:n.title.trim()===""?void 0:n.title,icon:n.icon.trim()===""?void 0:n.icon});return{applied:!0,editorLabel:P(u),description:u.description??"",title:u.title??"",icon:u.icon??""}})}}i(xe,"handleGeneratedName");function Se(e){const t=e.params.id,n=fe(e.body);return m(t,n.expected_execution_id),{status:200,body:l(()=>{const o=f(t),s={kind:o.kind,mode:o.mode,lifecycle:o.lifecycle},u=o.persona_ack,d=u===void 0?s:{kind:u.kind??o.kind,mode:u.mode,lifecycle:u.lifecycle};return!B(s,n.to)||!B(d,n.from)?{applied:!1}:(g(t,{persona_ack:n.to}),{applied:!0})})}}i(Se,"handlePersonaAck");const et=oe([{method:"POST",pattern:"/v1/nodes/:id/broker/session-bound",handler:he},{method:"POST",pattern:"/v1/nodes/:id/broker/settle",handler:_e},{method:"POST",pattern:"/v1/nodes/:id/broker/park-complete",handler:ke},{method:"POST",pattern:"/v1/nodes/:id/broker/park-activity",handler:we},{method:"POST",pattern:"/v1/nodes/:id/broker/telemetry",handler:be},{method:"POST",pattern:"/v1/nodes/:id/broker/model",handler:ge},{method:"GET",pattern:"/v1/nodes/:id/broker/extension-state",handler:ve},{method:"POST",pattern:"/v1/nodes/:id/broker/generated-name",handler:xe},{method:"POST",pattern:"/v1/nodes/:id/broker/persona-ack",handler:Se}]);export{et as brokerOperationRoutes,w as extensionNode};

package/dist/daemon/api/handlers/broker-recovery.d.ts

@@ -0,0 +1,4 @@
+import { type RouteTable } from '../router.js';
+export declare function requireCurrentExecution(nodeId: string, expectedExecutionId: unknown): void;
+export declare const brokerRecoveryRoutes: RouteTable;
+export declare const nodeFaultRoutes: RouteTable;

package/dist/daemon/api/handlers/broker-recovery.js

@@ -0,0 +1 @@
+var w=Object.defineProperty;var i=(r,e)=>w(r,"name",{value:e,configurable:!0});import{ApiError as E}from"../../../api/errors.js";import{getNode as I}from"../../../core/canvas/canvas.js";import{liveExecutionForNode as S}from"../../../core/canvas/executions.js";import{admitEpisode as T,clearEpisode as q,clearFault as h,closeTurn as R,invalidateEpisode as F,openTurn as v,parseProviderError as A,readEpisode as N,readFault as l,recordFault as b,recordPendingEpisode as P,recordTransportPoisonVerdict as O,recordTurnProgress as j,reopenEpisode as L}from"../../../core/canvas/recovery.js";import{notFound as D,usage as n}from"../../../core/errors.js";import{ownerOnly as g}from"../router.js";const f=new Set(["pi\u2192provider","viewer\u2194broker","relay\u2194broker","viewer\u2194crtrd","daemon\u2192node","crtr\u2192pi"]),B=new Set(["rate-limit","overloaded","connection","auth","protocol","context-overflow","other","wedged","model-not-found"]),$=new Set(["auto","manual","fatal"]),C=new Set(["sdk","daemon","client"]);function d(r,e){if(typeof r!="object"||r===null||Array.isArray(r))throw n(`${e} requires a JSON object`);return r}i(d,"objectBody");function a(r){if(I(r)===null)throw D(`unknown node: ${r}`,{received:r})}i(a,"requireNode");function u(r,e){if(typeof e!="string"||e==="")throw n("expected_execution_id must be a non-empty string");const t=S(r);if(t===null||t.executionId!==e)throw new E(409,"stale_execution","broker execution is no longer current")}i(u,"requireCurrentExecution");function x(r){if(typeof r!="object"||r===null||Array.isArray(r))throw n("retry must be an object");const e=r;if(!$.has(e.disposition))throw n("retry.disposition must be auto, manual, or fatal");if(e.by!==void 0&&!C.has(e.by))throw n("retry.by must be sdk, daemon, or client");for(const t of["attempt","max"])if(e[t]!==void 0&&(!Number.isSafeInteger(e[t])||e[t]<0))throw n(`retry.${t} must be a non-negative safe integer`);if(e.nextAt!==void 0&&typeof e.nextAt!="string")throw n("retry.nextAt must be a string");return e}i(x,"parseRetry");function _(r){const e=d(r,"fault input");if(!f.has(e.link))throw n("fault link is invalid");if(typeof e.op!="string"||e.op==="")throw n("fault op must be a non-empty string");if(!B.has(e.kind))throw n("fault kind is invalid");if(typeof e.message!="string")throw n("fault message must be a string");if(e.operation_id!==void 0&&(typeof e.operation_id!="string"||e.operation_id===""))throw n("operation_id must be a non-empty string");if(e.since!==void 0&&typeof e.since!="string")throw n("since must be a string");if(e.anchor_entry_id!==void 0&&(typeof e.anchor_entry_id!="string"||e.anchor_entry_id===""))throw n("anchor_entry_id must be a non-empty string");const t=e.provider_error===void 0?void 0:A(e.provider_error);if(e.provider_error!==void 0&&t===void 0)throw n("provider_error is invalid");return{...e,...t===void 0?{}:{provider_error:t},retry:x(e.retry)}}i(_,"parseFaultInput");function y(r){return{link:r.link,op:r.op,kind:r.kind,retry:r.retry,message:r.message,...r.operation_id===void 0?{}:{operation_id:r.operation_id},...r.since===void 0?{}:{since:r.since},...r.anchor_entry_id===void 0?{}:{anchorEntryId:r.anchor_entry_id},...r.provider_error===void 0?{}:{providerError:r.provider_error}}}i(y,"faultInput");function c(r){return{fault_id:r.faultId,link:r.link,op:r.op,kind:r.kind,retry:r.retry,message:r.message,since:r.since,operation_id:r.operation_id,...r.anchorEntryId===void 0?{}:{anchor_entry_id:r.anchorEntryId},...r.providerError===void 0?{}:{provider_error:r.providerError}}}i(c,"faultDto");function k(r){const e=l(r),t=N(r);return{fault:e===null?null:c(e),episode:t===null?null:{state:t.state,session_id:t.sessionId,fault:c(t.fault)}}}i(k,"recoveryState");function K(r){const e=d(r,"broker turn"),t=e.event;if(t!=="started"&&t!=="progress"&&t!=="closed"&&t!=="interrupted"&&t!=="exit-diagnostic")throw n("event is invalid");if(typeof e.expected_execution_id!="string"||e.expected_execution_id==="")throw n("expected_execution_id must be a non-empty string");if(t==="closed"){if(e.end_reason!=="settled"&&e.end_reason!=="teardown-aborted")throw n("closed turn requires end_reason settled or teardown-aborted")}else if(e.end_reason!==void 0)throw n("end_reason is valid only for closed turns");if(t==="exit-diagnostic"){const o=d(e.exit_diagnostic,"exit_diagnostic"),s=d(o.transport_poison,"exit_diagnostic.transport_poison");if(o.schema!=="crtr.execution-exit-diagnostic/v1"||!Number.isSafeInteger(s.consecutive_passes)||s.consecutive_passes<1||!Array.isArray(s.routes)||s.routes.length===0||!s.routes.every(p=>typeof p=="string"&&p!==""))throw n("exit_diagnostic is invalid")}else if(e.exit_diagnostic!==void 0)throw n("exit_diagnostic is valid only for exit-diagnostic turns");return e}i(K,"parseTurn");function U(r){const e=r.params.id;a(e);const t=K(r.body);u(e,t.expected_execution_id);let o;switch(t.event){case"started":o=v(t.expected_execution_id,{reason:"agent-start"});break;case"interrupted":o=v(t.expected_execution_id,{reason:"prompt-unsettled"});break;case"progress":o=j(t.expected_execution_id);break;case"closed":o=R(t.expected_execution_id,{endReason:t.end_reason});break;case"exit-diagnostic":{const m=t.exit_diagnostic.transport_poison;o=O(t.expected_execution_id,{consecutivePasses:m.consecutive_passes,routes:m.routes});break}}const s=l(e)?.link;return{status:200,body:{applied:o,fault_link:s==="daemon\u2192node"||s==="pi\u2192provider"?s:null}}}i(U,"handleTurn");function Y(r){const e=d(r,"provider retry");if(typeof e.expected_execution_id!="string"||e.expected_execution_id==="")throw n("expected_execution_id must be a non-empty string");if(!["record-pending","admit","reopen","invalidate","clear"].includes(e.op))throw n("provider retry op is invalid");if(typeof e.session_id!="string"||e.session_id==="")throw n("session_id must be a non-empty string");if(e.op==="record-pending"&&(e.input=_(e.input)),e.op==="admit"){if(typeof e.fault_id!="string"||e.fault_id==="")throw n("admit requires fault_id");e.retry=x(e.retry)}return e}i(Y,"parseProviderRetry");function G(r){const e=r.params.id;a(e);const t=Y(r.body);u(e,t.expected_execution_id);let o;switch(t.op){case"record-pending":o=P(e,{sessionId:t.session_id,input:y(t.input)})!==null;break;case"admit":o=T(e,{sessionId:t.session_id,faultId:t.fault_id,retry:t.retry});break;case"reopen":o=L(e,{sessionId:t.session_id});break;case"invalidate":o=F(e,{sessionId:t.session_id});break;case"clear":o=q(e,{sessionId:t.session_id});break}return{status:200,body:{applied:o,episode:k(e).episode}}}i(G,"handleProviderRetry");function J(r){const e=d(r,"broker fault");if(typeof e.expected_execution_id!="string"||e.expected_execution_id==="")throw n("expected_execution_id must be a non-empty string");if(e.op!=="record"&&e.op!=="clear")throw n("fault op must be record or clear");if(e.op==="record"&&(e.input=_(e.input)),e.op==="clear"&&e.link!==void 0&&!f.has(e.link))throw n("fault link is invalid");if(e.preserve_episode!==void 0&&typeof e.preserve_episode!="boolean")throw n("preserve_episode must be boolean");return e}i(J,"parseBrokerFault");function V(r){const e=r.params.id;a(e);const t=J(r.body);u(e,t.expected_execution_id);const o=t.op==="record"?b(e,y(t.input)):(h(e,{...t.link===void 0?{}:{link:t.link},...t.preserve_episode===void 0?{}:{preserveEpisode:t.preserve_episode}}),l(e));return{status:200,body:{fault:o===null?null:c(o)}}}i(V,"handleBrokerFault");function W(r){const e=r.params.id;return a(e),u(e,r.query.get("expected_execution_id")),{status:200,body:k(e)}}i(W,"handleRecovery");function z(r){const e=r.params.id;a(e);const t=b(e,y(_(r.body)));return{status:200,body:{fault:t===null?null:c(t)}}}i(z,"handleNodeFaultRecord");function H(r){const e=r.params.id;a(e);const t=r.query.get("link");if(t!==null&&!f.has(t))throw n("fault link is invalid");const o=r.query.get("preserve_episode");if(o!==null&&o!=="true"&&o!=="false")throw n("preserve_episode must be true or false");return{status:200,body:{cleared:h(e,{...t===null?{}:{link:t},...o===null?{}:{preserveEpisode:o==="true"}})}}}i(H,"handleNodeFaultClear");const ne=g([{method:"POST",pattern:"/v1/broker/:id/turn",handler:U},{method:"POST",pattern:"/v1/broker/:id/provider-retry",handler:G},{method:"POST",pattern:"/v1/broker/:id/fault",handler:V},{method:"GET",pattern:"/v1/broker/:id/recovery",handler:W}]),oe=g([{method:"POST",pattern:"/v1/nodes/:id/fault",handler:z},{method:"DELETE",pattern:"/v1/nodes/:id/fault",handler:H}]);export{ne as brokerRecoveryRoutes,oe as nodeFaultRoutes,u as requireCurrentExecution};

package/dist/daemon/api/handlers/broker-signals.d.ts

@@ -0,0 +1,19 @@
+import type { ServerResponse } from 'node:http';
+import type { BrokerSignalLineDTO } from '../../../api/dto/broker-signals.js';
+import type { RequestContext, RouteTable } from '../router.js';
+/** One admitted connection per node; no delivery data or unbounded write queue. */
+export declare class BrokerSignalStreams {
+    private readonly timing;
+    private readonly streams;
+    constructor(timing?: {
+        pingMs: number;
+        blockedMs: number;
+    });
+    open(nodeId: string, res: ServerResponse, hello: BrokerSignalLineDTO, req: RequestContext['req']): void;
+    /** Hint the node's broker to re-run its retry scheduling. False when no
+     *  broker stream is open (it resyncs on reconnect instead). */
+    nudgeFaultRetry(nodeId: string): boolean;
+    close(): void;
+}
+export declare const brokerSignalStreams: BrokerSignalStreams;
+export declare const brokerSignalRoutes: RouteTable;

package/dist/daemon/api/handlers/broker-signals.js

@@ -0,0 +1,2 @@
+var D=Object.defineProperty;var r=(l,e)=>D(l,"name",{value:e,configurable:!0});import{ApiError as M}from"../../../api/errors.js";import{getNode as b}from"../../../core/canvas/canvas.js";import{brokerSignalBus as E}from"../../broker-signals/bus.js";import{boundDaemonControl as T}from"../../control.js";import{requireCurrentExecution as v}from"./broker-recovery.js";import{extensionNode as _}from"./broker-ops.js";const R=15e3,C=3e4;class N{static{r(this,"BrokerSignalStreams")}timing;streams=new Map;constructor(e={pingMs:R,blockedMs:C}){this.timing=e}open(e,t,u,d){this.streams.get(e)?.close();let n=!1,s=!1,h=!1,g=!1,y=!1,a,m,w;const o=r((i=!1)=>{n||(n=!0,m!==void 0&&clearInterval(m),a!==void 0&&clearTimeout(a),t.off("drain",k),t.off("close",c),t.off("error",c),d.off("aborted",c),w?.(),this.streams.get(e)===S&&this.streams.delete(e),i?t.destroy():t.writableEnded||t.end())},"close"),f=r(i=>{n||s||t.write(`${JSON.stringify(i)}
+`)||(s=!0,a=setTimeout(()=>o(!0),this.timing.blockedMs),a.unref())},"send"),p=r(()=>{if(!(n||s)&&(h&&(h=!1,f({type:"mail",channel:"wake",at:Date.now()})),y&&!s&&(y=!1,f({type:"fault-retry",at:Date.now()})),g&&!s)){g=!1;const i=b(e);i!==null&&f({type:"node",node:_(i),at:Date.now()})}},"flush"),k=r(()=>{s=!1,a!==void 0&&clearTimeout(a),a=void 0;try{p()}catch{o()}},"drain"),c=r(()=>o(),"onClosed"),S={close:o,nudgeFaultRetry:r(()=>{if(!n){y=!0;try{p()}catch{o()}}},"nudgeFaultRetry")};this.streams.set(e,S),t.on("drain",k),t.once("close",c),t.once("error",c),w=E.subscribe((i,x)=>{if(!(i!==e||n)){x==="mail"?h=!0:g=!0;try{p()}catch{o()}}}),m=setInterval(()=>{if(!(s||n))try{f({type:"ping",at:Date.now()})}catch{o()}},this.timing.pingMs),m.unref(),d.once("aborted",c);try{f(u),p()}catch{o()}}nudgeFaultRetry(e){const t=this.streams.get(e);return t===void 0?!1:(t.nudgeFaultRetry(),!0)}close(){for(const e of[...this.streams.values()])e.close()}}const B=new N;function F(l){const e=l.params.id??"",t=b(e);if(t===null)throw new M(404,"node_not_found",`no node ${e}`);const u=l.query.get("execution_id");v(e,u);const{req:d,res:n}=l;n.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache",connection:"keep-alive"});try{B.open(e,n,{type:"hello",epoch:T()?.epoch??"",execution_id:u,node:_(b(e)??t),at:Date.now()},d)}catch{n.writableEnded||n.end()}return{status:200}}r(F,"handleSignals");const J=[{method:"GET",pattern:"/v1/nodes/:id/broker/signals",handler:F}];export{N as BrokerSignalStreams,J as brokerSignalRoutes,B as brokerSignalStreams};

package/dist/daemon/api/handlers/canvas.d.ts

@@ -0,0 +1,7 @@
+import { type HandlerResult, type RequestContext, type RouteTable } from '../router.js';
+/** One small compressed snapshot for browse's first frame. Gzip is explicit
+ * application/gzip, not HTTP content-encoding: the local socket fetch returns a
+ * byte stream without automatic decompression. Build from selected columns so
+ * the daemon does not materialize or serialize outcome/activity/placement. */
+export declare function handleBrowse(ctx: RequestContext): HandlerResult;
+export declare const canvasRoutes: RouteTable;

package/dist/daemon/api/handlers/canvas.js

@@ -0,0 +1,6 @@
+var x=Object.defineProperty;var l=(t,e)=>x(t,"name",{value:e,configurable:!0});import{gzipSync as z}from"node:zlib";import{browseNodes as J,graphNodes as q,listNodes as B,pruneNodes as K,pruneToLimit as Q,rosterEdges as k,rosterNodes as U}from"../../../core/canvas/canvas.js";import{activeBackgroundBashJobs as Y}from"../../../core/bash-jobs.js";import{contextDir as V}from"../../../core/canvas/node-agent-paths.js";import{nowIso as C}from"../../../core/fs-utils.js";import{isPidPresent as W}from"../../../core/canvas/pid.js";import{dashboardRowsAllFromSource as X,enrichRowsFromSource as Z}from"../../../core/canvas/render-source.js";import{localCanvasSource as j}from"../../../core/canvas/source.js";import{ticketCountsForNodes as O,ticketsAcrossCanvas as ee}from"../../../core/canvas/attention.js";import{buildCorpus as te,groupCorpus as ne,resolveRef as oe}from"../../../core/canvas/history.js";import{listFocuses as L,reapEmptyNodes as se}from"../../../core/runtime/placement.js";import{boundFleet as re}from"../../../core/runtime/fleet.js";import{retentionHold as ie}from"../../reconcilers/live-obligation.js";import{notFound as ae,usage as p}from"../../../core/errors.js";import{toGraphNodeDTO as de}from"../map.js";import{canReadNode as R,canReadRun as le}from"../router.js";import{ApiError as ce}from"../../../api/errors.js";function g(t){return t.principal.class==="person"?null:new Set(B().filter(e=>R(t.principal,e.grantee??"app:terminal",e.node_id)).map(e=>e.node_id))}l(g,"visibleNodes");function T(t){return t.principal.class==="person"?null:new Set(B().filter(e=>e.run_id?le(t.principal,e.grantee??"app:terminal",e.node_id):R(t.principal,e.grantee??"app:terminal",e.node_id)).map(e=>e.node_id))}l(T,"visibleHistoryNodes");function ue(t){const e=g(t);return{status:200,body:{items:ee().filter(o=>e===null||e.has(o.node_id)).map(o=>({node_id:o.node_id,name:o.name,cwd:o.cwd,count:o.count,subjects:o.subjects}))}}}l(ue,"handleAttention");function fe(t){const e=t.body;if(e===null||typeof e!="object"||!Array.isArray(e.node_ids))throw p("attention count request requires node_ids: string[]");const n=e.node_ids;if(!n.every(s=>typeof s=="string"))throw p("attention count request node_ids must contain only strings");const o=g(t);return{status:200,body:{counts:O(n.filter(s=>o===null||o.has(s)))}}}l(fe,"handleAttentionCounts");function E(t){return Buffer.from(String(t),"utf8").toString("base64")}l(E,"encodeCursor");function G(t){const e=Number(Buffer.from(t,"base64").toString("utf8"));if(!Number.isInteger(e)||e<0)throw p(`invalid cursor: ${t}`);return e}l(G,"decodeCursor");function pe(t,e,n){const i=t.loadBody().split(`
+`);if(e.length>0){const d=i.findIndex(u=>{const c=u.toLowerCase();return e.some(m=>c.includes(m))});if(d!==-1)return i.slice(d,d+n).map(u=>u.trim()).filter(u=>u!=="").join(" \u23CE ")}const s=i.map(d=>d.trim()).filter(d=>d!=="").slice(0,n).join(" \u23CE ");return s!==""?s:t.title}l(pe,"snippet");function me(t,e,n){const o=[...t];return e==="relevance"&&n!==void 0?o.sort((i,s)=>(n.get(s.ref)??0)-(n.get(i.ref)??0)||s.tsMs-i.tsMs||i.ref.localeCompare(s.ref)):e==="oldest"?o.sort((i,s)=>i.tsMs-s.tsMs||i.ref.localeCompare(s.ref)):o.sort((i,s)=>s.tsMs-i.tsMs||i.ref.localeCompare(s.ref)),o}l(me,"sortArtifacts");function he(t){if(t==null)return{};if(typeof t!="object")throw p("history search body must be a JSON object");return t}l(he,"parseSearchBody");function ye(t){if(t===null||typeof t!="object")throw p("history grep body must be a JSON object");const e=t;if(typeof e.pattern!="string"||e.pattern==="")throw p("history grep body requires a non-empty pattern");return e}l(ye,"parseGrepBody");function $(t,e){const n={cwd:t.cwd,allCwds:t.all_cwds===!0,under:t.under,nodes:t.nodes},o={types:t.types,kinds:t.kinds,statuses:t.statuses,sinceMs:t.since_ms,untilMs:t.until_ms,origins:t.origins,roles:t.roles,from:t.from},i=T(e);return te(n,o).filter(s=>i===null||i.has(s.nodeId))}l($,"buildCorpusFromQuery");function _e(t){if(t==null)return{};if(typeof t!="object")throw p("history stats body must be a JSON object");return t}l(_e,"parseStatsBody");const I=["origin","node","kind","day","type","role"];function be(t){const e=_e(t.body),n=e.group_by??"type";if(!I.includes(n))throw p(`--group-by must be one of: ${I.join(", ")}; received: ${String(e.group_by)}`);const o=$(e,t),i=ne(o,n);return{status:200,body:{group_by:n,groups:i,total:i.reduce((d,u)=>d+u.count,0),scanned:o.length}}}l(be,"handleHistoryStats");function ge(t){const e=ye(t.body),n=Math.min(100,Math.max(1,e.limit??20)),o=$(e,t),i=e.cursor!==void 0?G(e.cursor):0;let s;try{s=new RegExp(e.pattern,"i")}catch{throw p(`invalid regex pattern: ${e.pattern}`)}const d=[];for(const r of o)r.loadBody().split(`
+`).forEach((y,b)=>{s.test(y)&&d.push({ref:r.ref,node:`${r.nodeName} (${r.nodeId})`,ts:r.ts,line:b+1,text:y.trim()})});d.sort((r,a)=>r.ref.localeCompare(a.ref)||r.line-a.line);const u=d.slice(i,i+n),c=i+n<d.length?E(i+n):null;return{status:200,body:{hits:u,next_cursor:c,total:d.length}}}l(ge,"handleHistoryGrep");function ve(t){const e=he(t.body),n=(e.query??"").trim(),o=e.weigh_body===!0,i=e.full===!0,s=Math.max(1,e.snippet_lines??1),d=Math.min(100,Math.max(1,e.limit??20)),u=$(e,t),c=e.cursor!==void 0?G(e.cursor):0,m=n.toLowerCase().split(/\s+/).filter(f=>f.length>0);let r=u,a;const y=e.sort??(m.length>0?"relevance":"recency");if(m.length>0&&y==="relevance"){a=new Map;const f=[];for(const h of u){const N=h.title.toLowerCase(),D=h.nodeName.toLowerCase(),H=h.nodeDesc.toLowerCase(),M=o?h.loadBody().toLowerCase():null;let _=0;for(const S of m)N.includes(S)&&(_+=10),D.includes(S)&&(_+=5),H.includes(S)&&(_+=3),M!==null&&M.includes(S)&&(_+=1);_>0&&(a.set(h.ref,_),f.push(h))}r=f}else m.length>0&&(r=u.filter(f=>{const h=`${f.title}
+${f.nodeName}
+${f.nodeDesc}${o?`
+`+f.loadBody():""}`.toLowerCase();return m.some(N=>h.includes(N))}));const b=me(r,y,a),P=b.slice(c,c+d),A=c+d<b.length?E(c+d):null;return{status:200,body:{hits:P.map(f=>{const h={ref:f.ref,node:`${f.nodeName} (${f.nodeId})`,kind:f.nodeKind,source:f.source,ts:f.ts};return y==="relevance"&&a!==void 0&&(h.score=a.get(f.ref)??0),i?h.body=f.loadBody():h.snippet=pe(f,m,s),h}),next_cursor:A,total:b.length}}}l(ve,"handleHistorySearch");function Se(t){const e=(t.query.get("ref")??"").trim();if(!e.includes(":"))throw p(`ref must be <node-id>:inbox/<n>, <node-id>:session, or <node-id>:session/<n>; received: ${e}`,{received:e,next:"Get a valid ref from `crtr canvas history search`. Reports and documents are `crtr canvas read <name>`."});const n=oe(e);if(n===null)throw ae(`no inbox entry or message for ref: ${e}`,{ref:e,next:"Re-run `crtr canvas history search` for a current ref. Reports and documents are `crtr canvas read <name>`."});if(T(t)?.has(n.nodeId)===!1)throw new ce(404,"not_found","artifact not found");const o=n.source,s=t.query.get("format")==="raw"&&n.raw!==null?n.raw:n.body;return{status:200,body:{ref:e,node:`${n.nodeName} (${n.nodeId})`,source:o,ts:n.ts,content:s}}}l(Se,"handleHistoryRead");function ke(t){for(const[o]of t.query)if(o!=="live")throw p(`unknown snapshot query parameter: ${o}`);const e=t.query.getAll("live");if(e.length>1)throw p("live must appear at most once");const n=e[0];if(n===void 0||n==="false"||n==="0")return!1;if(n==="true"||n==="1")return!0;throw p("live must be true or false")}l(ke,"snapshotLiveOnly");async function we(t){const e=new Set(L().map(r=>r.node_id)),n=g(t),o=(await X(j,e,ke(t))).filter(r=>n===null||n.has(r.node_id)),i=O(o.map(r=>r.node_id));await Z(j,o,i);const s=o.map(r=>{const a=r.srcRow,y=a?.host_kind??"tmux";return{node_id:r.node_id,name:r.name,title:r.handle??r.name,description:r.description??null,kind:r.kind,mode:r.mode,lifecycle:r.lifecycle??a?.lifecycle,status:r.status,cwd:r.cwd,profile_id:r.profile_id??null,parent:a?.parent??null,created:r.created,host_kind:y,enterable:y==="broker",attention_count:r.asks,...a?.cycles!=null?{cycles:a.cycles}:{},...r.mtimeMs!==void 0?{last_activity:new Date(r.mtimeMs).toISOString()}:{},ctx_tokens:r.ctx_tokens,streaming:r.streaming??!1,jobs_active:a!==void 0&&W(a.pi_pid)?Y(V(r.node_id)).length:0,waiting_for:a?.waiting_for??null,hanging:r.hanging??null,viewed:r.viewed??!1,final_report:a?.final_report??null,finalized_at:a?.finalized_at??null}}),d=new Map;for(const r of k()){const a=d.get(r.from_id);a===void 0?d.set(r.from_id,[r.to_id]):a.push(r.to_id)}const u=new Set(o.map(r=>r.node_id)),c=Object.fromEntries(o.map(r=>[r.node_id,(d.get(r.node_id)??[]).filter(a=>u.has(a))]));return{status:200,body:{generated_at:C(),nodes:s,subscriptions:c}}}l(we,"handleSnapshot");function F(){const t=U().map(n=>{const o=n.host_kind??"tmux";return{node_id:n.node_id,name:n.name,kind:n.kind,mode:n.mode,lifecycle:n.lifecycle,status:n.status,cwd:n.cwd,host_kind:o,enterable:o==="broker",parent:n.parent,created:n.created}}),e=k().map(n=>({from_id:n.from_id,to_id:n.to_id,active:n.active,created:n.created}));return{generated_at:C(),nodes:t,edges:e}}l(F,"buildRoster");let v=null,w=null;function Ne(){return v===null?(v=Promise.resolve().then(()=>F()).finally(()=>{v=null}),v):(w===null&&(w=v.then(()=>F()).finally(()=>{w=null})),w)}l(Ne,"rosterCoalesced");async function Ce(t){const e=await Ne(),n=g(t);return n===null?{status:200,body:e}:{status:200,body:{...e,nodes:e.nodes.filter(o=>n.has(o.node_id)),edges:e.edges.filter(o=>n.has(o.from_id)&&n.has(o.to_id))}}}l(Ce,"handleRoster");function Re(t){const e=J().filter(s=>t.principal.class==="person"||R(t.principal,s.grantee??"app:terminal",s.node_id)).map(s=>({node_id:s.node_id,name:s.name,description:s.description,kind:s.kind,mode:s.mode,lifecycle:s.lifecycle,status:s.status,cwd:s.cwd,profile_id:s.profile_id,grantee:s.grantee??"app:terminal",parent:s.parent,created:s.created,frozen_at:s.frozen_at??null,terminal_reason:s.terminal_reason??null,final_report:s.final_report??null,telemetry_tokens_in:s.telemetry_tokens_in??null,telemetry_updated_at:s.telemetry_updated_at??null,fault:s.fault&&s.fault.link!=="broker\u2194crtrd"?{...s.fault,link:s.fault.link}:null,streaming:s.streaming??!1})),n=new Set(e.map(s=>s.node_id)),o=k().filter(s=>n.has(s.from_id)&&n.has(s.to_id));return{status:200,rawBody:z(JSON.stringify({nodes:e,edges:o}),{level:1}),headers:{"content-type":"application/gzip"}}}l(Re,"handleBrowse");function $e(t){const e=g(t);return{status:200,body:{generated_at:C(),nodes:q().filter(o=>e===null||e.has(o.node_id)).map(de),edges:k().filter(o=>e===null||e.has(o.from_id)&&e.has(o.to_id)).map(o=>({from_id:o.from_id,to_id:o.to_id,active:o.active,created:o.created})),focused_node_ids:L().map(o=>o.node_id).filter(o=>e===null||e.has(o))}}}l($e,"handleGraph");function Me(t){if(t==null)return{};if(typeof t!="object")throw p("prune body must be a JSON object");const e=t,n=l(r=>{const a=e[r];if(a!==void 0){if(typeof a!="number"||!Number.isFinite(a))throw p(`${r} must be a number`);return a}},"num"),o=l(r=>{const a=e[r];if(a!==void 0){if(typeof a!="boolean")throw p(`${r} must be a boolean`);return a}},"bool"),i={},s=n("limit");s!==void 0&&(i.limit=s);const d=n("ttl_days");d!==void 0&&(i.ttl_days=d);const u=o("include_stale");u!==void 0&&(i.include_stale=u);const c=o("empty");c!==void 0&&(i.empty=c);const m=o("dry_run");return m!==void 0&&(i.dry_run=m),i}l(Me,"parsePruneBody");function Be(t){const e=Me(t.body),n=e.ttl_days??14,o=e.dry_run??!1,i=ie(re());let s;return e.limit!==void 0?s=Q({maxNodes:e.limit,held:i,dryRun:o}).pruned.map(c=>({node_id:c.node_id,status:c.status,created:c.created})):e.empty===!0?s=se({dryRun:o}).map(c=>({node_id:c,status:"empty",created:""})):s=K({ttlDays:n,held:i,dryRun:o,includeStale:e.include_stale??!1}).pruned.map(c=>({node_id:c.node_id,status:c.status,created:c.created})),{status:200,body:{pruned:s,dry_run:o,ttl_days:n}}}l(Be,"handlePrune");const Ve=[{method:"GET",pattern:"/v1/canvas/attention",handler:ue},{method:"POST",pattern:"/v1/canvas/attention/counts",handler:fe},{method:"POST",pattern:"/v1/canvas/history/search",handler:ve},{method:"POST",pattern:"/v1/canvas/history/grep",handler:ge},{method:"GET",pattern:"/v1/canvas/history/read",handler:Se},{method:"POST",pattern:"/v1/canvas/history/stats",handler:be},{method:"GET",pattern:"/v1/canvas/snapshot",handler:we},{method:"GET",pattern:"/v1/canvas/roster",handler:Ce},{method:"GET",pattern:"/v1/canvas/browse",handler:Re},{method:"GET",pattern:"/v1/canvas/graph",handler:$e},{method:"POST",pattern:"/v1/canvas/prune",ownerOnly:!0,handler:Be}];export{Ve as canvasRoutes,Re as handleBrowse};

package/dist/daemon/api/handlers/chat-inventory.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const chatInventoryRoutes: RouteTable;

package/dist/daemon/api/handlers/chat-inventory.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var e=(t,o)=>n(t,"name",{value:o,configurable:!0});import{getNode as r}from"../../../core/canvas/canvas.js";import{isSafeNodeId as d}from"../../../core/canvas/paths.js";import{notFound as i,usage as a}from"../../../core/errors.js";import{readChatInventory as m}from"../../../core/runtime/broker-inventory.js";async function s(t){const o=t.params.id;if(!d(o))throw a(`invalid node id: ${o}`,{received:o});if(r(o)===null)throw i(`unknown node: ${o}`,{received:o});return{status:200,body:await m(o)}}e(s,"handleGet");const v=[{method:"GET",pattern:"/v1/nodes/:id/chat-inventory",handler:s}];export{v as chatInventoryRoutes};

package/dist/daemon/api/handlers/crons.d.ts

@@ -0,0 +1,2 @@
+import { type RouteTable } from '../router.js';
+export declare const cronRoutes: RouteTable;

package/dist/daemon/api/handlers/crons.js

@@ -0,0 +1 @@
+var K=Object.defineProperty;var o=(n,e)=>K(n,"name",{value:e,configurable:!0});import{randomUUID as Q}from"node:crypto";import{relative as V,resolve as R,sep as D}from"node:path";import{ApiError as i}from"../../../api/errors.js";import{armCron as X,cancelCron as ee,getCron as _,listCrons as N,listCronRuns as W,pokeHeldCrons as ne,setCronState as z}from"../../../core/canvas/crons.js";import{getNode as f}from"../../../core/canvas/canvas.js";import{nodeAgentDir as re}from"../../../core/canvas/node-agent-paths.js";import{appSpace as oe}from"../../../core/layout.js";import{appProcessesSandboxed as te,cwdIsMounted as se}from"../../../core/spaces/process.js";import{assertScope as B}from"../../../core/scopes.js";import{InputError as s}from"../../../core/io.js";import{nextSlotAfter as ie}from"../../../core/wake.js";import{executeCron as ae,markSelfCanceledCronRun as ce}from"../../cron-run.js";import{toCronDTO as w,toCronRunDTO as G}from"../map.js";import{assertCeiling as le,canReadNode as de}from"../router.js";import{requireUsableProfile as ue}from"./profiles.js";function j(n,e){const r=n[e];if(typeof r!="string"||r.trim()==="")throw new s({error:"missing_field",message:`cron arm request requires a non-empty "${e}"`,field:e,next:`Send a non-empty string "${e}".`});return r}o(j,"requireString");function k(n,e,r,t){if(n==null)return t;if(typeof n=="string"&&r.includes(n))return n;throw new s({error:`bad_${e}`,message:`"${String(n)}" is not a valid ${e}`,field:e,next:`Use one of: ${r.join(", ")}.`})}o(k,"requireEnum");function pe(n){if(n==="human")return JSON.stringify({human:!0});if(n.startsWith("node:")){const e=n.slice(5).trim();if(e==="")throw new s({error:"bad_sink",message:"node sink requires a node id",field:"sink",next:'Use sink "node:<node-id>".'});if(f(e)===null)throw new s({error:"sink_node_not_found",message:`sink node ${e} does not exist on the canvas`,field:"sink",next:"Name a live node id, or use spawn:<kind> for a delivery that outlives any one node."});return JSON.stringify({node:e})}if(n.startsWith("spawn:")){const e=n.slice(6).trim();if(e==="")throw new s({error:"bad_sink",message:"spawn sink requires a node kind",field:"sink",next:'Use sink "spawn:<kind>" (e.g. spawn:general).'});return JSON.stringify({spawn:e})}throw new s({error:"bad_sink",message:`"${n}" is not a valid sink`,field:"sink",next:"Use node:<node-id>, spawn:<kind>, or human."})}o(pe,"parseSinkSpec");const fe=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;function L(n,e){if(!fe.test(n)||Number.isNaN(Date.parse(n)))throw new s({error:`bad_${e}`,message:`"${n}" is not a UTC ISO instant`,field:e,next:'Send a resolved UTC instant like "2026-06-07T09:00:00.000Z" (the client resolves the time grammar).'});return n}o(L,"requireUtcIso");function he(n){try{ie(n,new Date)}catch(e){throw new s({error:"bad_recur",message:`recur is not advanceable: ${e instanceof Error?e.message:String(e)}`,field:"recur",next:'Send recur JSON the daemon can advance: {"every":"6h"} or {"cron":"0 9 * * *","tz":"America/New_York"}.'})}return n}o(he,"requireRecur");function me(n){let e;try{e=JSON.parse(n)}catch{throw new s({error:"bad_env_json",message:"env_json is not valid JSON",field:"env_json",next:'Send a JSON object of string values, e.g. {"API_BASE":"https://x"}.'})}if(typeof e!="object"||e===null||Array.isArray(e))throw new s({error:"bad_env_json",message:"env_json must be a JSON object",field:"env_json",next:'Send a JSON object of string values, e.g. {"API_BASE":"https://x"}.'});for(const[r,t]of Object.entries(e))if(typeof t!="string")throw new s({error:"bad_env_json",message:`env_json value for "${r}" is not a string`,field:"env_json",next:"Every env value must be a string."});return n}o(me,"requireEnvJson");function x(n){const e=n.query.get("profile");return e!==null&&e.trim()!==""?e.trim():null}o(x,"callerProfile");function Z(n,e){return e===null||n.scope==="global"||n.profile===e}o(Z,"inScope");function H(n){return n.principal.class==="person"?null:n.principal.app}o(H,"callerApp");function T(n,e){return de(n.principal,e.grantee,e.created_by??void 0)}o(T,"visibleTo");function _e(n){return typeof n.anchor_node=="string"&&n.anchor_node!==""?n.anchor_node:null}o(_e,"anchorNodeOf");function we(n,e,r,t,d){const c=typeof n.cwd=="string"&&n.cwd.trim()!==""?R(n.cwd):null;if(!te()){if(c===null)throw new s({error:"missing_field",message:'cron arm request requires a non-empty "cwd"',field:"cwd",next:'Send a non-empty string "cwd".'});return c}const O=t!==null&&f(t)!==null?t:void 0,g=o(C=>se(e,C,O,d),"reaches");if(c!==null&&g(c))return c;const a=oe(e).files;if(c!==null&&n.cwd_is_default!==!0)throw new i(400,"invalid_request",`cwd ${c} is not inside a directory this app's cron runs can see, so every run would fail to start; use a directory under ${a}`,{cwd:c,default:a},void 0,{param:"cwd"});const l=r===null?null:f(r)?.cwd??null;return l!==null&&g(l)?l:a}o(we,"resolveArmedCwd");function ge(n){const e=n.body??{},r=j(e,"name"),t=j(e,"command"),d=L(j(e,"fire_at"),"fire_at"),c=typeof e.recur=="string"&&e.recur!==""?he(e.recur):null,O=typeof e.expires_at=="string"&&e.expires_at!==""?L(e.expires_at,"expires_at"):null,g=typeof e.env_json=="string"&&e.env_json!==""?me(e.env_json):null,a=typeof e.sink=="string"&&e.sink.trim()!==""?e.sink.trim():null,l=k(e.on_output,"on_output",["silent","on-failure","always","on-change"],a?.startsWith("node:")?"on-change":"on-failure"),C=k(e.overlap,"overlap",["skip","queue","replace"],"skip"),M=k(e.tier,"tier",["normal","urgent","critical"],"normal"),P=l==="always"||l==="on-change";if(P&&a===null)throw new s({error:"sink_required",message:`on_output "${l}" delivers stdout every qualifying run \u2014 it needs a sink`,field:"sink",next:"Pass sink node:<node-id> (a living node's inbox), spawn:<kind> (birth a fresh node per delivery), or human (the humanloop inbox)."});if(!P&&a!==null)throw new s({error:"sink_unused",message:`on_output "${l}" never delivers stdout \u2014 a sink would be dead config`,field:"sink",next:'Drop the sink, or use on_output "always"/"on-change" if delivery is the point.'});const Y=a!==null?pe(a):"{}";a?.startsWith("spawn:")&&le(n.ceiling,"crtr:act");const m=n.principal.class==="person"?"app:terminal":n.principal.app,h=n.principal.class==="broker"?n.principal.node:typeof e.created_by=="string"&&e.created_by!==""?e.created_by:null;if(n.principal.class==="broker"&&e.created_by!=null&&e.created_by!==h)throw new i(403,"permission_error","a broker may only arm a cron as its own node");const p=h===null?null:f(h);if(p!==null){if(p.grantee!==m)throw new s({error:"creator_app_mismatch",message:"creator node belongs to another app",field:"created_by",next:"Use a node of the calling app."});B(p,"crtr:schedule"),a?.startsWith("spawn:")&&B(p,"crtr:act")}if(e.isolated!==void 0&&typeof e.isolated!="boolean")throw new i(400,"invalid_request","isolated must be a boolean");if(p?.isolated&&e.isolated===!1)throw new i(403,"isolated_run","a cron created by an isolated node cannot escape isolation");const y=p?.isolated===!0||e.isolated===!0;if(y&&p===null)throw new i(400,"invalid_request","an isolated cron requires an existing creator node");const v=y?re(h,m):null;if(v!==null){const I=V(v,typeof e.cwd=="string"&&e.cwd.trim()!==""?R(e.cwd):v);if(I===".."||I.startsWith(`..${D}`)||I.startsWith(D))throw new i(400,"invalid_request","an isolated cron must run in its creating node folder",{param:"cwd"})}const F=v??we(e,m,h,_e(e),y),u=typeof e.anchor_node=="string"&&e.anchor_node!==""?e.anchor_node:null;if(u!==null&&f(u)!==null&&f(u).grantee!==m)throw new s({error:"anchor_app_mismatch",message:"anchor node belongs to another app",field:"anchor_node",next:"Use an anchor of the calling app."});if(u!==null&&f(u)===null)throw new s({error:"anchor_not_found",message:`anchor node ${u} does not exist on the canvas`,field:"anchor_node",next:"Name a live node id, or drop the anchor \u2014 an unanchored cron outlives every node."});const E=e.cancel_on_wake===!0;if(E&&u===null)throw new s({error:"cancel_on_wake_needs_anchor",message:"cancel_on_wake couples the cron to a node's dormancy \u2014 it requires an anchor node",field:"anchor_node",next:"Pass anchor_node with the node whose wake should cancel this cron."});const b=e.run_timeout_s??300;if(typeof b!="number"||!Number.isInteger(b)||b<=0)throw new s({error:"bad_run_timeout",message:`run_timeout_s must be a positive integer (got ${String(e.run_timeout_s)})`,field:"run_timeout_s",next:"Send the timeout in whole seconds, e.g. 300."});const q=typeof e.profile=="string"&&e.profile!==""?ue(n,e.profile).profileId:null,U=k(e.scope,"scope",["profile","global"],q!==null?"profile":"global");if(U==="profile"&&q===null)throw new s({error:"scope_needs_profile",message:'scope "profile" names the profile the cron lists and cancels within \u2014 it requires a profile',field:"profile",next:'Send a profile, or use scope "global" for a canvas-home-wide cron.'});const J=Q();return X({cron_id:J,name:r,created_by:h,grantee:m,isolated:y,command:t,fire_at:d,recur:c,tz:typeof e.tz=="string"?e.tz:null,expires_at:O,anchor_node:u,cancel_on_wake:E,cwd:F,env_json:g,profile:q,scope:U,run_timeout_s:b,overlap:C,on_output:l,sink:Y,tier:M}),{status:201,body:w(_(J),null)}}o(ge,"handleArm");function ye(n){const e=x(n);return{status:200,body:(e===null?N({all:!0}):[...N({profile:e}),...N({global:!0})].sort((t,d)=>t.fire_at<d.fire_at?-1:t.fire_at>d.fire_at?1:0)).filter(t=>T(n,t)).map(t=>w(t,A(t)))}}o(ye,"handleList");function A(n){return W(n.cron_id)[0]??null}o(A,"lastRunOf");function S(n){const e=n.params.cronId,r=_(e);if(r===null||!T(n,r))throw new i(404,"cron_not_found",`no cron ${e}`);if(!Z(r,x(n)))throw new i(404,"cron_not_found",`no cron ${e} in this profile \u2014 it is scoped to another profile`);return r}o(S,"requireCron");function $(n,e){const r=H(n);if(r!==null&&e.grantee!==r)throw new i(403,"other_app_run",`cron ${e.cron_id} belongs to another app`);return e}o($,"requireOwnCron");function ve(n){const e=S(n),r=W(e.cron_id);return{status:200,body:{cron:w(e,r[0]??null),runs:r.map(G)}}}o(ve,"handleShow");function be(n){const e=$(n,S(n));z(e.cron_id,"paused");const r=_(e.cron_id);return{status:200,body:w(r,A(r))}}o(be,"handlePause");function ke(n){const e=$(n,S(n));z(e.cron_id,"active");const r=_(e.cron_id);return{status:200,body:w(r,A(r))}}o(ke,"handleResume");async function Se(n){const e=$(n,S(n));if(e.run_state==="running")throw new i(409,"cron_running",`cron ${e.cron_id} has a run in flight \u2014 wait for it to settle`);const r=await ae(e,{outOfBand:!0});if(r===null)throw new i(409,"cron_running",`cron ${e.cron_id} was claimed by a concurrent run \u2014 check \`cron show\` for its result`);return{status:200,body:G(r)}}o(Se,"handleRun");function $e(n){const e=new Date().toISOString();return{status:200,body:{unparked:ne(e,H(n)),at:e}}}o($e,"handlePoke");function Oe(n){const e=n.params.cronId,r=_(e);if(r!==null&&!T(n,r))throw new i(404,"cron_not_found",`no cron ${e}`);if(r!==null&&!Z(r,x(n)))throw new i(404,"cron_not_found",`no cron ${e} in this profile \u2014 it is scoped to another profile`);r!==null&&$(n,r);const t=n.query.get("run_id"),d=t!==null&&ce(e,t);return ee(e,{preserveRunningProcess:d}),{status:204}}o(Oe,"handleCancel");const Be=[{method:"POST",pattern:"/v1/crons",scope:"crtr:schedule",handler:ge},{method:"GET",pattern:"/v1/crons",handler:ye},{method:"GET",pattern:"/v1/crons/:cronId",handler:ve},{method:"POST",pattern:"/v1/crons/:cronId/pause",scope:"crtr:schedule",handler:be},{method:"POST",pattern:"/v1/crons/:cronId/resume",scope:"crtr:schedule",handler:ke},{method:"POST",pattern:"/v1/crons/poke",scope:"crtr:schedule",handler:$e},{method:"POST",pattern:"/v1/crons/:cronId/run",scope:"crtr:schedule",handler:Se},{method:"DELETE",pattern:"/v1/crons/:cronId",scope:"crtr:schedule",handler:Oe}];export{Be as cronRoutes};

package/dist/daemon/api/handlers/custom-objects.d.ts

@@ -0,0 +1,10 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow } from '../../../core/graph/types.js';
+import type { RequestContext, RouteTable } from '../router.js';
+/** A token cannot read the graph. Resolve only identity here; authorization follows before any response. */
+export declare function customObjectRef(db: DatabaseSync, raw: string): ObjectRow;
+/** An argv object runs host commands: only a person or node principal may change it or what it watches — never an app or publish token. */
+export declare function fenceArgv(db: DatabaseSync, ctx: RequestContext, object: ObjectRow): void;
+/** A valid object bearer grants only this object; an ordinary principal must act as its owner. */
+export declare function authorizeCustom(db: DatabaseSync, ctx: RequestContext, object: ObjectRow, concealed?: boolean): ObjectRow | null;
+export declare const customObjectRoutes: RouteTable;

package/dist/daemon/api/handlers/custom-objects.js

@@ -0,0 +1,3 @@
+var C=Object.defineProperty;var s=(r,e)=>C(r,"name",{value:e,configurable:!0});import{prepared as b}from"../../../core/sqlite-statements.js";import{ApiError as a}from"../../../api/errors.js";import{openDb as F,withCanvasWrite as p}from"../../../core/canvas/db.js";import{registerCustomObject as L,publishCustom as H,unregisterCustomObject as I,pendingFor as N,acknowledge as P,verifyPublishToken as j,mayActAs as _,onQueueSignal as W,customReachable as k}from"../../../core/graph/custom.js";import{getById as E,getByRowid as R}from"../../../core/graph/objects.js";import{readerFor as $}from"../../../core/graph/reader.js";import{resolveName as M}from"../../../core/graph/names.js";import{receiverForObject as z}from"../../../core/graph/receivers.js";import{readerFor as w,resolveRef as B}from"../reader.js";import{isRecord as l}from"./validate.js";import{receiverEndpoint as D,resolveReceiverAddress as Q}from"../../../core/graph/receiver-url.js";const d=s(r=>{throw new a(400,"invalid_request",`invalid ${r}`)},"bad"),f=s(()=>{throw new a(404,"not_found","custom object not found")},"missing");function m(r,e){const n=E(r,e)??(()=>{const o=$(r,{class:"person"},()=>[]),i=M(r,o,e);return"object"in i?i.object:null})();return!n||!n.type.includes(".")||n.deleted_at!==null?f():n}s(m,"customObjectRef");function G(r,e,t){if(z(r,t)==="argv"&&(e.publishToken||e.principal.class!=="person"&&e.principal.class!=="broker"))throw new a(403,"argv_forbidden","argv object requires a person or node principal")}s(G,"fenceArgv");function v(r,e,t,n=!1){if(e.publishToken){if(j(r,t,e.publishToken))return t;if(n)return f();throw new a(401,"invalid_publish_token","invalid publish token")}if(e.principal.class==="anonymous")return f();const o=w(r,e),i=t.owner===null?null:R(r,t.owner);return!i||!_(r,o,i)||!k(r,o,t)?f():o.class==="person"?o.person:o.class==="app"?o.app:o.class==="node"?o.node:o.object}s(v,"authorizeCustom");async function J(r){const e=r.body;if((!l(e)||typeof e.kind!="string"||typeof e.name!="string"||typeof e.description!="string"||!l(e.events)||e.owner!==void 0&&typeof e.owner!="string"||e.rotate_token!==void 0&&typeof e.rotate_token!="boolean")&&d("register request"),l(e.receiver)&&"url"in e.receiver&&typeof e.receiver.url=="string")try{await Q(D(e.receiver.url))}catch(t){throw new a(400,"invalid_receiver",`invalid receiver URL: ${String(t)}`)}return p(t=>{const n=w(t,r),o=e.owner===void 0?n.class==="person"?n.person:n.app:(()=>{const u=B(t,n,e.owner);return"deleted"in u||"remote"in u?f():u})();["person","app","repo","profile"].includes(o.type)||d("owner");const i=L(t,n,{kind:e.kind,name:e.name,owner:o,description:e.description,events:e.events,...e.receiver===void 0?{}:{receiver:e.receiver},rotateToken:e.rotate_token});return{id:i.object.id,name:i.object.name,...i.token?{token:i.token}:{}}})}s(J,"register");function U(r){const e=r.body;return(!l(e)||typeof e.event!="string"||typeof e.summary!="string"||e.cause!==void 0&&typeof e.cause!="string")&&d("publish request"),p(t=>{const n=m(t,r.params.ref),o=v(t,r,n);return H(t,n,o,e)})}s(U,"publish");function K(r){p(e=>{const t=m(e,r.params.ref),n=v(e,r,t);G(e,r,t),I(e,t,n)})}s(K,"unregister");function V(r){const e=r.body;return(!l(e)||!Array.isArray(e.delivery_ids)||e.delivery_ids.some(t=>typeof t!="string"))&&d("delivery_ids"),p(t=>{const n=m(t,r.params.ref);return v(t,r,n,!0),T(t,n),P(t,n,e.delivery_ids)})}s(V,"ack");function T(r,e){if(b(r,"SELECT receiver_json FROM custom_objects WHERE object = ?").get(e.rowid)?.receiver_json!=='"queue"')throw new a(409,"not_a_queue","object does not have a queue receiver")}s(T,"requireQueue");function X(r){const e=r.query.get("after");e!==null&&(!/^\d+$/.test(e)||!Number.isSafeInteger(Number(e)))&&d("after");const t=F(),n=m(t,r.params.ref);v(t,r,n,!0),T(t,n);const o=r.res;o.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache","x-accel-buffering":"no"});let i=-1;const u=s(()=>{const c=E(t,n.id);if(!c||c.deleted_at!==null)return!1;if(r.publishToken)return j(t,c,r.publishToken)&&b(t,"SELECT receiver_json FROM custom_objects WHERE object = ?").get(c.rowid)?.receiver_json==='"queue"';if(r.principal.class==="anonymous")return!1;const y=c.owner===null?null:R(t,c.owner),g=w(t,r);return y!==null&&_(t,g,y)&&k(t,g,c)&&b(t,"SELECT receiver_json FROM custom_objects WHERE object = ?").get(c.rowid)?.receiver_json==='"queue"'},"authorized"),h=s(()=>{if(!(o.destroyed||o.writableEnded)){if(!u()){o.end();return}for(const c of N(t,n,i))o.write(`${JSON.stringify(c)}
+`),i=c.seq}},"flush"),O=W(n.id,h),S=setInterval(()=>{h(),!o.destroyed&&!o.writableEnded&&o.write(`
+`)},15e3),A=s(()=>{clearInterval(S),O()},"close");return o.once("close",A),h(),{status:200}}s(X,"stream");const q=s(r=>e=>({status:200,body:r(e)}),"ok"),ue=[{method:"POST",pattern:"/v1/custom-objects",handler:s(async r=>({status:200,body:await J(r)}),"handler")},{method:"POST",pattern:"/v1/custom-objects/:ref/events",handler:q(U)},{method:"DELETE",pattern:"/v1/custom-objects/:ref",handler:s(r=>(K(r),{status:204}),"handler")},{method:"GET",pattern:"/v1/custom-objects/:ref/deliveries",handler:X},{method:"POST",pattern:"/v1/custom-objects/:ref/deliveries/ack",handler:q(V)}];export{v as authorizeCustom,m as customObjectRef,ue as customObjectRoutes,G as fenceArgv};

package/dist/daemon/api/handlers/daemon.d.ts

@@ -0,0 +1,2 @@
+import { type RouteTable } from '../router.js';
+export declare const daemonRoutes: RouteTable;

package/dist/daemon/api/handlers/daemon.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var r=(e,t)=>i(e,"name",{value:t,configurable:!0});import{toMigrateStateDTO as u}from"../map.js";import{migrateLooseKeys as m}from"../../../core/layout-migrate/loose-keys.js";import{boundDaemonControl as s}from"../../control.js";import{ownerOnly as c}from"../router.js";function l(){const e=s();if(e===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot hand over"};const{graceMs:t}=e.requestHandover();return{status:202,body:{accepted:!0,predecessor_pid:process.pid,predecessor_epoch:e.epoch,grace_ms:t}}}r(l,"handleRestart");async function y(e){if(e.body!==void 0)throw{status:400,code:"invalid_request",message:"admission request must not include a body"};const t=s();if(t===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot admit normal work"};return{status:200,body:await t.admitStartup()}}r(y,"handleAdmit");async function h(e){const t=s();if(t===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot run the canvas import"};const o=e.body;if(o!==void 0&&(typeof o!="object"||o===null||Array.isArray(o)))throw{status:400,code:"invalid_request",message:"migration request body must be an object"};const n=o??{};if(n.dry_run!==void 0&&typeof n.dry_run!="boolean")throw{status:400,code:"invalid_request",message:"dry_run must be a boolean"};const d=m(n.dry_run===!0),a=await t.repairMigrations({dryRun:n.dry_run===!0});return{status:200,body:{...u(a.result,{resumed:a.resumed,resumeError:a.resumeError}),loose_keys:d}}}r(h,"handleMigrate");const g=c([{method:"POST",pattern:"/v1/daemon/restart",handler:r(e=>l(),"handler")},{method:"POST",pattern:"/v1/daemon/migrate",handler:h},{method:"POST",pattern:"/v1/daemon/admit",handler:y}]);export{g as daemonRoutes};

package/dist/daemon/api/handlers/delivery-retry.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const deliveryRetryRoutes: RouteTable;

package/dist/daemon/api/handlers/delivery-retry.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var t=(r,e)=>d(r,"name",{value:e,configurable:!0});import{ApiError as i}from"../../../api/errors.js";import{retryFailedDaemonAction as o}from"../../../core/canvas/daemon-actions.js";import{retryFailedDelivery as n}from"../../../core/canvas/deliveries.js";const a=/^[0-9a-f]{32}$/;function l(r){const e=r.params.delivery_id??"";if(!a.test(e))throw new i(400,"invalid_request","delivery_id must be the 32-character id of a delivery");if(!n(e)&&!o(e))throw new i(404,"delivery_not_failed",`no failed delivery ${e} to retry (it does not exist, is not permanently failed, or was canceled)`);return{status:200,body:{delivery_id:e,state:"pending"}}}t(l,"handleRetry");const m=[{method:"POST",pattern:"/v1/deliveries/:delivery_id/retry",handler:l}];export{m as deliveryRetryRoutes};

package/dist/daemon/api/handlers/delivery.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const deliveryRoutes: RouteTable;