@north-light/cli 0.0.0 → 0.3.413

package/dist/commands/sys/context/resolve.d.ts

@@ -0,0 +1,115 @@
+import type { InputParam } from '../../../core/help.js';
+import type { DeliveryActivity, HypotheticalNodeDTO } from '../../../api/dto/delivery.js';
+import type { NodeConfigSubject } from '../../../core/substrate/subject-fields.js';
+import { type Rung } from '../../../core/substrate/schema.js';
+/** The activities whose dry run carries a plan: each is a rule `on` name. */
+export declare const PLANNED_EVENTS: readonly ["boot", "workspace-open", "file-read", "document-read", "command", "pre-command", "slash-command"];
+export type PlannedEvent = (typeof PLANNED_EVENTS)[number];
+declare const SNAPSHOT_PARAMS: InputParam[];
+export { SNAPSHOT_PARAMS };
+export declare const resolveLeaf: import("../../../core/command.js").LeafDef;
+export interface ContextSnapshot {
+    /** A live node the dry run reads, or starts a simulation from. */
+    nodeId: string | null;
+    /** The simulated node; null when the dry run reads a live node as it is. */
+    hypothetical: HypotheticalNodeDTO | null;
+    override: Partial<NodeConfigSubject>;
+    /** --node named an id that does not exist; the node is simulated. */
+    nodeMissing: boolean;
+}
+/** A live node when one is named (or this runs inside one) and neither --cwd
+ *  nor --profile dials it; otherwise a simulated node, starting from the live
+ *  node when there is one. */
+export declare function buildSnapshot(input: Record<string, unknown>): Promise<ContextSnapshot>;
+/** The fields every result leads with: which node, or which simulated one. */
+export declare function snapshotHead(snapshot: ContextSnapshot): Record<string, unknown>;
+export interface PayloadFlags {
+    file: string | null;
+    /** `document-read`: the document read. */
+    readName: string | null;
+    command: string | null;
+}
+/** The activity's subject string from the flags that carry it. An activity
+ *  invoked without its payload matches nothing. */
+export declare function subjectFor(event: PlannedEvent, flags: PayloadFlags): string | undefined;
+export interface PlanRule {
+    on: string;
+    match?: string[];
+    matchFrontmatter?: Record<string, unknown>;
+    if?: unknown;
+    deliver: Rung;
+}
+export interface PlanDoc {
+    object: {
+        id: string;
+    };
+    ownerHandle: string;
+    kind: string;
+    name: string;
+    displayName: string;
+}
+export type GateOutcome = {
+    pass: true;
+} | {
+    pass: false;
+    reason: string;
+};
+export interface PlanRecord {
+    doc: PlanDoc;
+    authoredRules: Array<{
+        rule: PlanRule;
+        matched: boolean;
+        gate: GateOutcome;
+    }>;
+    matchedRule: PlanRule | null;
+    authoredRung: Rung;
+    limit: Rung | null;
+    cappedRung: Rung;
+    ruleGate: GateOutcome | null;
+    finalRung: Rung;
+    winner: boolean;
+    shadowedBy: PlanDoc | null;
+}
+export interface Plan {
+    on: string;
+    subject: NodeConfigSubject | null;
+    docs: PlanRecord[];
+}
+export declare function dryRun(snapshot: ContextSnapshot, activity: DeliveryActivity, subject?: string): Promise<{
+    plan: Plan;
+    content: string;
+}>;
+export declare function subjectSummary(subject: NodeConfigSubject | null): Record<string, unknown>;
+export declare function optionalString(value: unknown): string | null;
+export interface DocRow {
+    name: string;
+    kind: string;
+    owner: string;
+    ref: string;
+    authored_rung: Rung;
+    limit: Rung | null;
+    capped_rung: Rung;
+    final_rung: Rung;
+    winner: boolean;
+    shadowed_by: string | null;
+    gate: string | null;
+    matched_rule: string | null;
+    excluded?: string;
+}
+/** A document delivers when it holds its name and resolved to a level above none. */
+export declare function delivers(record: PlanRecord): boolean;
+export declare function docRow(record: PlanRecord, includeAll: boolean, subject: NodeConfigSubject | null): DocRow;
+/** The rule `if` verdict as one cell: `pass`, or `fail:` plus the failing clauses. */
+export declare function gateText(record: PlanRecord, subject: NodeConfigSubject | null): string | null;
+export declare function ruleText(rule: PlanRule | null): string | null;
+/** Why a considered document delivers nothing, in the order the planner applies its checks. */
+export declare function exclusionReason(record: PlanRecord, subject: NodeConfigSubject | null): string;
+/** Which node the result describes, live or simulated. */
+export declare function nodeLine(head: {
+    node?: string;
+    cwd?: string;
+    node_missing?: boolean;
+}): string;
+export declare function describeSubject(subject: Record<string, unknown>): string;
+export declare function cell(v: unknown): string;
+export declare function table(cols: string[], rows: string[][]): string;

package/dist/commands/sys/context/resolve.js

@@ -0,0 +1,8 @@
+var x=Object.defineProperty;var r=(e,n)=>x(e,"name",{value:n,configurable:!0});import{resolve as h}from"node:path";import{defineLeaf as k}from"../../../core/command.js";import{ApiError as $}from"../../../api/index.js";import{cliClient as p}from"../../api-client.js";import{envNodeId as _}from"../../../shared/env.js";import{explainGate as R,formatClause as j}from"../../../core/substrate/gate-explain.js";import{rungAtLeast as q}from"../../../core/substrate/schema.js";const y=["boot","workspace-open","file-read","document-read","command","pre-command","slash-command"],g=[{kind:"flag",name:"node",type:"string",required:!1,constraint:"The node whose view, owners, and profile limits apply. Defaults to the calling node (CRTR_NODE_ID). A node that does not exist is simulated from the other flags and reported as `node_missing`."},{kind:"flag",name:"cwd",type:"path",required:!1,constraint:"Simulate the node working in this directory: the repos enclosing it apply. Without --node and outside a node, the node simulated is one that does not exist, working in the current directory."},{kind:"flag",name:"profile",type:"string",required:!1,constraint:"Simulate the node under this profile (id or name), whose delivery limits apply. Defaults to the node\u2019s profile, else the profile pinned to the directory."},{kind:"flag",name:"kind",type:"string",required:!1,constraint:"Override the node kind that rule `if` conditions see. A simulated node defaults to `general`."},{kind:"flag",name:"mode",type:"enum",choices:["base","orchestrator"],required:!1,constraint:"Override the node mode that rule `if` conditions see. A simulated node defaults to `base`."},{kind:"flag",name:"lifecycle",type:"enum",choices:["terminal","resident"],required:!1,constraint:"Override the node lifecycle that rule `if` conditions see. A simulated node defaults to `terminal` for base, `resident` for orchestrator."},{kind:"flag",name:"has-manager",type:"enum",choices:["true","false"],required:!1,constraint:"Override whether rule `if` conditions see the node as having a manager. A simulated node defaults to true."}],ne=k({name:"resolve",description:"resolve what a node receives for one delivery activity",whenToUse:"you are asking what a node (or one that does not exist yet) actually receives \u2014 at boot, on opening a workspace, on reading a file or a document, around a command, or as slash commands \u2014 and why each document is in or out",help:{name:"sys context resolve",summary:"resolve the documents a node receives for one delivery activity",params:[...g,{kind:"flag",name:"event",type:"enum",choices:[...y],required:!1,constraint:"The rule `on` name to resolve. Defaults to `boot`. Ignored when --all-events is set."},{kind:"flag",name:"all-events",type:"bool",required:!1,constraint:"Resolve every event instead of one, and report each plan separately."},{kind:"flag",name:"file",type:"path",required:!1,constraint:"Payload for `--event file-read`: the file that was read. Without it, no file-read rule matches."},{kind:"flag",name:"name",type:"string",required:!1,constraint:"Payload for `--event document-read`: the document read, as `crtr canvas read` takes it. Without it, no document-read rule matches."},{kind:"flag",name:"command",type:"string",required:!1,constraint:"Payload for `--event command` / `--event pre-command`: the command string."},{kind:"flag",name:"granularity",type:"enum",choices:["summary","docs","assembled"],required:!1,constraint:"`summary` folds to per-level counts; `docs` reports one row per document; `assembled` returns the rendered text (at boot, the system-prompt preferences followed by the boot context). Defaults to `docs`."},{kind:"flag",name:"all",type:"bool",required:!1,constraint:"At `docs` granularity, include every considered document, not just the ones that deliver, with the reason each was excluded."}],output:[{name:"node",type:"string",required:!1,constraint:"The node the dry run ran for, or the node --cwd and --profile dialled away from. Absent when the node is simulated."},{name:"cwd",type:"string",required:!1,constraint:"The simulated node\u2019s directory. Present when the node is simulated."},{name:"node_missing",type:"boolean",required:!1,constraint:"Present when --node named a node that does not exist, so the node was simulated."},{name:"subject",type:"object",required:!0,constraint:"The node configuration rule `if` conditions were evaluated against, overrides applied."},{name:"event",type:"string",required:!1,constraint:"The resolved event. Absent with --all-events, where every entry in `plans` carries its own."},{name:"docs",type:"array",required:!1,constraint:"At `docs` granularity, one entry per document: name, kind, owner, ref, authored_rung, limit, capped_rung, final_rung, winner, shadowed_by, gate, matched_rule, and excluded when --all includes a non-delivering document."},{name:"counts",type:"object",required:!1,constraint:"At `summary` granularity: {considered, delivered: {content, preview, name}, delivered_total, excluded: {<reason>: count}}."},{name:"assembled",type:"string",required:!1,constraint:"At `assembled` granularity: the text the node would receive."},{name:"plans",type:"array",required:!1,constraint:"With --all-events: one result per event, each shaped as above."}],outputKind:"object",effects:["None. Read-only; the dry run records no watch, event, or exposure."]},run:r(async e=>{const n=await A(e),t=e.granularity??"docs",o=e.all===!0,d=e.allEvents===!0?[...y]:[e.event??"boot"],a={file:s(e.file),readName:s(e.name),command:s(e.command)},i=[];let l=null;for(const c of d){const{plan:m,content:b}=await w(n,c,T(c,a));l??=m.subject,i.push(await M(n,c,m,b,t,o))}const u={...N(n),subject:O(l)};return d.length===1?{...u,...i[0]}:{...u,plans:i}},"run"),render:r(e=>H(e),"render")});async function A(e){const n=s(e.node);let t=n??s(_()),o=!1;t!==null&&!await S(t)&&(n===null||(o=!0),t=null);const d=s(e.cwd),a=s(e.profile),i={},l=s(e.kind);l!==null&&(i.kind=l),e.mode!==void 0&&(i.mode=e.mode),e.lifecycle!==void 0&&(i.lifecycle=e.lifecycle);const u=s(e.hasManager);if(u!==null&&(i.hasManager=u==="true"),t!==null&&d===null&&a===null)return{nodeId:t,hypothetical:null,override:i,nodeMissing:o};const c={...d!==null?{cwd:h(d)}:t===null?{cwd:process.cwd()}:{},...a===null?{}:{profile:a},...i.kind===void 0?{}:{kind:i.kind},...i.mode===void 0?{}:{mode:i.mode},...i.lifecycle===void 0?{}:{lifecycle:i.lifecycle},...i.hasManager===void 0?{}:{has_manager:i.hasManager}};return{nodeId:t,hypothetical:c,override:{},nodeMissing:o}}r(A,"buildSnapshot");async function S(e){try{return await p().getNode(e),!0}catch(n){if(n instanceof $&&n.status===404)return!1;throw n}}r(S,"nodeExists");function N(e){return{...e.nodeId===null?{}:{node:e.nodeId},...e.hypothetical?.cwd===void 0?{}:{cwd:e.hypothetical.cwd},...e.nodeMissing?{node_missing:!0}:{}}}r(N,"snapshotHead");function T(e,n){if(e==="file-read")return n.file===null?void 0:h(n.file);if(e==="document-read")return n.readName??void 0;if(e==="command"||e==="pre-command")return n.command??void 0}r(T,"subjectFor");async function w(e,n,t){if(t===void 0&&(n==="file-read"||n==="document-read"||n==="command"||n==="pre-command"))return{plan:{on:n,subject:null,docs:[]},content:""};const o={activity:n,...t===void 0?{}:{subject:t},...e.nodeId===null?{}:{node:e.nodeId},...e.hypothetical===null?{}:{hypothetical:e.hypothetical},...Object.keys(e.override).length===0?{}:{subject_override:e.override}},d=await p().deliveryDryRun(o);return{plan:d.plan??{on:n,subject:null,docs:[]},content:d.content}}r(w,"dryRun");function O(e){return e===null?{}:{kind:e.kind,mode:e.mode,lifecycle:e.lifecycle,hasManager:e.hasManager,profile:e.profile,repo:e.repo,depth:e.orchestration.depth}}r(O,"subjectSummary");function s(e){return typeof e=="string"&&e.trim()!==""?e:null}r(s,"optionalString");async function M(e,n,t,o,d,a){if(d==="assembled"){if(n!=="boot")return{event:n,assembled:o};const i=(await w(e,"system-prompt")).content;return{event:n,assembled:[i,o].filter(l=>l!=="").join(`
+
+`)}}return d==="summary"?{event:n,counts:G(t)}:{event:n,docs:t.docs.filter(i=>a||f(i)).map(i=>P(i,a,t.subject))}}r(M,"planSection");function f(e){return e.winner&&q(e.finalRung,"name")}r(f,"delivers");function P(e,n,t){const o={name:e.doc.displayName,kind:e.doc.kind,owner:e.doc.ownerHandle,ref:e.doc.object.id,authored_rung:e.authoredRung,limit:e.limit,capped_rung:e.cappedRung,final_rung:e.finalRung,winner:e.winner,shadowed_by:e.shadowedBy===null?null:`${e.shadowedBy.ownerHandle}/${e.shadowedBy.name}`,gate:B(e,t),matched_rule:D(e.matchedRule)};return n&&!f(e)&&(o.excluded=E(e,t)),o}r(P,"docRow");function B(e,n){const t=e.ruleGate;return t===null?null:t.pass?"pass":`fail: ${v(e,n,t.reason)}`}r(B,"gateText");function v(e,n,t){const o=e.authoredRules.find(a=>!a.gate.pass)?.rule.if,d=o===void 0||n===null?[]:R(o,n);return d.length===0?t:d.map(j).join("; ")}r(v,"gateReason");function D(e){if(e===null)return null;const n=[`deliver=${e.deliver}`];return e.match!==void 0&&n.push(`match=${e.match.join(",")}`),e.matchFrontmatter!==void 0&&n.push("match-frontmatter"),e.if!==void 0&&n.push("if"),n.join(" ")}r(D,"ruleText");function E(e,n){return e.shadowedBy!==null?`shadowed by ${e.shadowedBy.ownerHandle}/${e.shadowedBy.name}`:e.authoredRules.length===0?"no rule for this event":e.matchedRule===null?e.ruleGate!==null&&!e.ruleGate.pass?`rule if: ${v(e,n,e.ruleGate.reason)}`:"no rule matched this event\u2019s payload":e.cappedRung==="none"?`limited to none by the profile\u2019s delivery limit (authored ${e.authoredRung})`:`resolved to none (authored ${e.authoredRung})`}r(E,"exclusionReason");function I(e){return e.shadowedBy!==null?"shadowed":e.authoredRules.length===0?"no_rule":e.matchedRule===null?e.ruleGate!==null&&!e.ruleGate.pass?"rule_if":"no_match":e.cappedRung==="none"?"limited":"none"}r(I,"exclusionBucket");function G(e){const n={content:0,preview:0,name:0},t={};for(const o of e.docs){if(f(o)){n[o.finalRung]=(n[o.finalRung]??0)+1;continue}const d=I(o);t[d]=(t[d]??0)+1}return{considered:e.docs.length,delivered:n,delivered_total:n.content+n.preview+n.name,excluded:t}}r(G,"countsOf");function H(e){const n=[L(e),`subject: ${C(e.subject)}`],t=e.plans??[{event:e.event,docs:e.docs,counts:e.counts,assembled:e.assembled}];for(const o of t)n.push("",`## ${o.event}`,"",W(o));return n.join(`
+`)}r(H,"renderResolve");function L(e){return e.cwd===void 0?`node: ${e.node??""}`:`node: simulated (${e.node===void 0?"a node that does not exist":`${e.node}, dialled`}; cwd ${e.cwd})${e.node_missing===!0?" \u2014 the named node does not exist":""}`}r(L,"nodeLine");function C(e){return Object.entries(e).map(([n,t])=>`${n}=${Array.isArray(t)?t.join(",")||"(none)":String(t)}`).join(" ")}r(C,"describeSubject");function W(e){if(e.assembled!==void 0)return e.assembled===""?"Nothing is delivered for this event.":["```",e.assembled,"```"].join(`
+`);if(e.counts!==void 0)return F(e.counts);const n=e.docs??[];if(n.length===0)return"No document delivers for this event.";const t=n.some(a=>a.excluded!==void 0),o=["document","owner","kind","authored","limit","final","matched","if",...t?["excluded"]:[]],d=n.map(a=>[a.name,a.owner,a.kind,a.authored_rung,a.limit??"\u2014",a.final_rung,a.matched_rule??"\u2014",a.gate??"\u2014",...t?[a.excluded??""]:[]]);return[`${n.length} document${n.length===1?"":"s"}:`,"",U(o,d)].join(`
+`)}r(W,"renderSection");function F(e){const n=e.delivered,t=e.excluded,o=Object.keys(t).length===0?"none":Object.entries(t).map(([d,a])=>`${d}=${a}`).join(" ");return[`- considered: ${String(e.considered)}`,`- delivered: ${String(e.delivered_total)} (content=${n.content} preview=${n.preview} name=${n.name})`,`- excluded: ${o}`].join(`
+`)}r(F,"renderCounts");function K(e){return String(e).replace(/\|/g,"\\|").replace(/\n/g," ")}r(K,"cell");function U(e,n){return[`| ${e.join(" | ")} |`,`| ${e.map(()=>"---").join(" | ")} |`,...n.map(t=>`| ${t.map(K).join(" | ")} |`)].join(`
+`)}r(U,"table");export{y as PLANNED_EVENTS,g as SNAPSHOT_PARAMS,A as buildSnapshot,K as cell,f as delivers,C as describeSubject,P as docRow,w as dryRun,E as exclusionReason,B as gateText,L as nodeLine,s as optionalString,ne as resolveLeaf,D as ruleText,N as snapshotHead,T as subjectFor,O as subjectSummary,U as table};

package/dist/commands/sys/context/sysprompt.d.ts

@@ -0,0 +1 @@
+export declare const sysSyspromptLeaf: import("../../../core/command.js").LeafDef;

package/dist/commands/sys/context/sysprompt.js

@@ -0,0 +1,5 @@
+var l=Object.defineProperty;var i=(t,e)=>l(t,"name",{value:e,configurable:!0});import{envNodeId as f}from"../../../shared/env.js";import{existsSync as h,readFileSync as y,statSync as g,writeFileSync as x}from"node:fs";import{tmpdir as _}from"node:os";import{join as p}from"node:path";import{defineLeaf as b}from"../../../core/command.js";import{InputError as n}from"../../../core/io.js";import{nodeRunJobDir as $}from"../../../core/canvas/paths.js";import{openNodeWindow as v}from"../../../core/runtime/placement-tmux.js";import{ApiError as q}from"../../../api/index.js";import{cliClient as c}from"../../api-client.js";import{shellQuote as k}from"../../../shared/shell-quote.js";const A=b({name:"sysprompt",description:"print a node's assembled system prompt",whenToUse:"you want to inspect a node's assembled system prompt headlessly, without paying conversation/context cost \u2014 the broker writes it to disk while live, and this command reads that artifact back as markdown.",help:{name:"sys context sysprompt",summary:"print a node's assembled system prompt",params:[{kind:"positional",name:"node",required:!1,constraint:"Node id. Defaults to the calling node (CRTR_NODE_ID)."},{kind:"flag",name:"window",type:"bool",required:!1,constraint:"Open the assembled prompt in a NEW tmux window in the session currently showing that node instead of printing to stdout."}],output:[{name:"node_id",type:"string",required:!0,constraint:"The node whose prompt was read."},{name:"captured_at",type:"string",required:!0,constraint:"File mtime in ISO-8601 UTC."},{name:"chars",type:"number",required:!0,constraint:"Character count of the stored prompt."},{name:"prompt",type:"string",required:!0,constraint:"The assembled system prompt, exactly as pi built it."},{name:"session",type:"string",required:!1,constraint:"tmux session showing the node (only when --window is used)."},{name:"window",type:"string",required:!1,constraint:"tmux window opened for the prompt (only when --window is used)."}],outputKind:"object",effects:["Read-only: reads the node's job/system-prompt.md artifact, or opens it in a tmux window."],preview:{suppressOutput:!0}},run:i(async t=>{const e=t.node?.trim()||f();if(e===void 0||e==="")throw new n({error:"empty_node",message:"a node id is required",field:"node",next:"Pass a node id or run from inside a node."});try{await c().getNode(e)}catch(o){throw o instanceof q&&o.status===404?new n({error:"not_found",message:`no node: ${e}`,field:"node",next:"List nodes with `crtr node inspect list`."}):o}const s=p($(e),"system-prompt.md");if(!h(s))throw new n({error:"not_found",message:`system prompt not captured yet for ${e}`,field:"node",next:"Focus or revive the node once while its broker is live, then rerun `crtr sys context sysprompt <node>`."});const r=y(s,"utf8"),u=g(s).mtime.toISOString();if(t.window===!0){const o=await c().focusOf(e);if(o===null||o.session===null||o.session==="")throw new n({error:"not_focused",message:`node ${e} is not currently shown in tmux`,field:"node",next:`Focus the node first with \`crtr surface node focus ${e}\`, then rerun \`crtr sys context sysprompt --window ${e}\`.`});const d=p(_(),`crtr-sysprompt-${e}.md`);x(d,r,"utf8");const a=k(d),w=`if command -v bat >/dev/null 2>&1; then bat --language=markdown --color=always --paging=always --style=plain ${a}; else less -R ${a}; fi`,m=v({session:o.session,name:`sysprompt:${e}`,cwd:process.cwd(),env:{},command:w});if(m===null)throw new n({error:"window_open_failed",message:`tmux could not open a window for node ${e}`,field:"node",next:"Check the tmux server is reachable, then retry."});return{node_id:e,session:o.session,window:m.window}}return{node_id:e,captured_at:u,chars:r.length,prompt:r}},"run"),render:i(t=>"window"in t?`Opened system prompt for node ${t.node_id} in tmux session ${t.session} \u2014 window ${t.window}.`:`- node_id: ${t.node_id}
+- captured_at: ${t.captured_at}
+- chars: ${t.chars}
+
+${t.prompt}`,"render")});export{A as sysSyspromptLeaf};

package/dist/commands/sys/context.d.ts

@@ -0,0 +1,2 @@
+import type { BranchDef } from '../../core/command.js';
+export declare const contextBranch: BranchDef;

package/dist/commands/sys/context.js

@@ -0,0 +1 @@
+import{defineBranch as e}from"../../core/command.js";import{resolveLeaf as o}from"./context/resolve.js";import{docLeaf as r}from"./context/doc.js";import{sysSyspromptLeaf as t}from"./context/sysprompt.js";import{promptReviewLeaf as a}from"./context/prompt-review.js";import{adminLeaf as n}from"./context/admin.js";import{exposeLeaf as s}from"./context/expose.js";const f=e({name:"context",description:"inspect what documents a node\u2019s delivery rules hand it",whenToUse:"you are asking what a node loads, why a document does or does not reach it, or what a prompt assembles to",help:{name:"sys context",summary:"inspect the documents delivery hands a node, and assembled prompts",model:"A document reaches a node when one of its rules fires for an event (boot, file-read, command, pre-command, slash-command), the rule `if` holds for the node, and the document wins its bare name against owners earlier in the node\u2019s view; the profile\u2019s delivery limit for the owner caps the level at boot only. resolve answers that forward \u2014 node plus event to the delivered set; expose delivers the file-read documents for files a local command displays. doc answers it in reverse \u2014 one document across every event. Both read the daemon\u2019s dry run and record nothing. sysprompt and prompt-review read assembled prompts (a live node\u2019s captured one, and one rendered for a chosen kind and mode). admin is the interactive surface over all of it: dial a node, see what every activity delivers, and edit the rules that decide it."},children:[o,s,r,t,a,n]});export{f as contextBranch};

package/dist/commands/sys/daemon.d.ts

@@ -0,0 +1,4 @@
+import type { BranchDef } from '../../core/command.js';
+export declare const daemonBranch: BranchDef;
+/** The daemon-only `sys` subtree used before scoped user state is available. */
+export declare function registerDaemonControlSys(): BranchDef;

package/dist/commands/sys/daemon.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var s=(r,e)=>c(r,"name",{value:e,configurable:!0});import{defineLeaf as d,defineBranch as w}from"../../core/command.js";import{InputError as o}from"../../core/io.js";import{parseDurationMs as f}from"../../core/wake.js";import{DaemonNotPreparedError as g,probeDaemonHealth as u,probeErrorMessage as y,spawnDaemon as h,stopDaemonProcess as b,sweepStrayDaemons as v}from"../../daemon/manage.js";import{isDaemonRunning as _,readPidfile as m,isPidAlive as l}from"../../daemon/pidfile.js";import{cliClient as k}from"../api-client.js";import{localClient as T}from"../../api/node-transport.js";import{defineSysBranch as q}from"./branch.js";const x=d({name:"start",description:"start the daemon in the background",whenToUse:"bringing the crtrd supervisor up for the first time in a session so node window-exits get handled (no-op only when its Unix API socket already serves)",help:{name:"sys daemon start",summary:"start the crtrd supervisor daemon in the background (no-op only if its Unix API socket serves)",params:[{kind:"flag",name:"prepare",type:"bool",required:!1,constraint:"Hold normal daemon work after storage preparation until `sys daemon admit`; omit for ordinary startup."}],output:[{name:"started",type:"boolean",required:!0,constraint:"True when a new daemon process was spawned; false when one was already running."},{name:"pid",type:"number",required:!1,constraint:"PID of the newly spawned daemon."},{name:"existing_pid",type:"number",required:!1,constraint:"PID of the already-running daemon (when started=false)."},{name:"running",type:"boolean",required:!1,constraint:"True only when a live pidfile owner does not serve its Unix API socket."},{name:"serving",type:"boolean",required:!1,constraint:"False only when a live pidfile owner does not answer /healthz."},{name:"probe_error",type:"string",required:!1,constraint:"The final /healthz probe failure when a live owner missed readiness."},{name:"startup_phase",type:"string",required:!1,constraint:"The observed daemon phase when it was reachable."}],outputKind:"object",effects:["Spawns dist/daemon/crtrd-cli.js detached + unref'd; it outlives this process.","Writes a pidfile at CRTR_PIDFILE if set, otherwise crtrHome()/crtrd.pid."]},run:s(async r=>{try{return await h({targetPhase:r.prepare===!0?"prepared":"ready"})}catch(e){throw e instanceof g?new o({error:"daemon_not_prepared",message:e.message,next:"Stop the live daemon, then start a new one with `crtr sys daemon start --prepare` before setup."}):e}},"run")}),D=100;async function I(r,e){const n=Date.now(),a=n+e;let i="initializing",p="the daemon socket was not reachable";for(;Date.now()<a;){try{const t=await u(Math.min(1e3,Math.max(1,a-Date.now())));if(i=t.startup_phase,p=t.startup_blocked??`daemon is ${t.startup_phase}`,t.startup_phase==="blocked")throw new o({error:"startup_blocked",message:t.startup_blocked??"daemon startup is blocked",received:t.startup_phase,field:"phase",next:"Repair the reported blocker paths with `crtr sys migrate`, then retry the await."});if(t.startup_phase===r)return{startup_phase:r,waited_ms:Date.now()-n};if(r==="prepared"&&t.startup_phase==="ready")throw new o({error:"await_missed_phase",message:"daemon is already ready and cannot return to prepared in this process",received:t.startup_phase,field:"phase",next:"Start a new daemon with `crtr sys daemon start --prepare` before awaiting prepared."})}catch(t){if(t instanceof o)throw t;p=t instanceof Error?t.message:String(t)}await new Promise(t=>setTimeout(t,Math.min(D,Math.max(0,a-Date.now()))))}throw new o({error:"await_timeout",message:`daemon did not reach ${r} within ${e}ms (last phase: ${i}; last observation: ${p})`,received:i,field:"phase",next:"Inspect `crtr sys daemon status` and resolve any reported startup blocker before retrying."})}s(I,"awaitDaemonPhase");const S=d({name:"await",description:"wait for a daemon startup phase",whenToUse:"a caller started or was given a daemon that must reach prepared or ready before its next step.",help:{name:"sys daemon await",summary:"wait for the running daemon to report one startup phase",params:[{kind:"flag",name:"phase",type:"enum",choices:["prepared","ready"],required:!0,constraint:"The phase that permits the caller\u2019s next step."},{kind:"flag",name:"timeout",type:"string",required:!1,default:"5m",constraint:"Maximum wait as a positive duration such as 90s, 5m, or 1h30m."}],output:[{name:"startup_phase",type:"string",required:!0,constraint:"The requested phase."},{name:"waited_ms",type:"number",required:!0,constraint:"Elapsed wall-clock time before the phase was observed."}],outputKind:"object",effects:["Read-only: polls /healthz until the requested phase is observed or the caller-bounded timeout expires."]},run:s(async r=>{const e=r.timeout,n=f(e);if(n===null||n<=0)throw new o({error:"invalid_duration",message:`not a positive duration: ${e}`,received:e,field:"timeout",next:"Use a positive duration such as 90s, 5m, or 1h30m."});return I(r.phase,n)},"run")}),E=d({name:"admit",description:"admit normal work after daemon preparation",whenToUse:"the caller has completed its setup against a prepared daemon and is ready for normal daemon work to start.",help:{name:"sys daemon admit",summary:"ask a prepared daemon to start normal services",params:[],output:[{name:"admitted",type:"boolean",required:!0,constraint:"True only when this request began admission."},{name:"already_admitted",type:"boolean",required:!0,constraint:"True when admission had already begun or completed."},{name:"startup_phase",type:"string",required:!0,constraint:"The phase after admission settles."}],outputKind:"object",effects:["Starts normal daemon services when the daemon is prepared."]},run:s(async r=>await T({autostart:!1}).admitDaemon(),"run")}),P=d({name:"status",description:"check whether the daemon is running",whenToUse:"operator/dev diagnostic \u2014 probing whether the crtrd supervisor process is alive while troubleshooting revive/supervision behavior",help:{name:"sys daemon status",summary:"check whether the crtrd supervisor daemon is currently running",params:[],output:[{name:"running",type:"boolean",required:!0,constraint:"True when the daemon pidfile owner is alive."},{name:"serving",type:"boolean",required:!1,constraint:"True when the live daemon answers /healthz; false when one probe does not."},{name:"pid",type:"number",required:!1,constraint:"PID of the running daemon."},{name:"probe_error",type:"string",required:!1,constraint:"The failed /healthz observation when the live owner did not answer."},{name:"startup_phase",type:"string",required:!1,constraint:"The observed daemon startup phase when the socket answered."}],outputKind:"object",effects:["Read-only: reads the pidfile, probes the pid, and requests /healthz without autostart."]},run:s(async r=>{const e=m();if(!(e!==null&&l(e)))return{running:!1};try{const a=await u();return{running:!0,serving:a.ok,pid:e,...a.startup_phase===void 0?{}:{startup_phase:a.startup_phase}}}catch(a){return{running:!0,serving:!1,pid:e,probe_error:y(a)}}},"run")}),R=d({name:"restart",description:"put the selected runtime generation in service via a daemon-owned handover",whenToUse:"adopting a newly installed runtime generation \u2014 the routine restart. Use this instead of stop+start: the daemon answers before it hands over, so a caller running inside a node (whose broker the handover tears down) still gets a settled result and is resumed automatically.",help:{name:"sys daemon restart",summary:"ask the running daemon to replace itself with a successor on the selected runtime generation",params:[],output:[{name:"restarted",type:"boolean",required:!0,constraint:"True when a running daemon accepted the handover. False when none was running \u2014 one was started instead."},{name:"started",type:"boolean",required:!1,constraint:"True when no daemon was running and this call started one (restarted=false)."},{name:"pid",type:"number",required:!1,constraint:"The daemon that accepted the handover, or the one just started."},{name:"grace_ms",type:"number",required:!1,constraint:"How long the daemon waits after answering before teardown begins."},{name:"note",type:"string",required:!1,constraint:"What happens next to the calling node. Read it before acting on an interrupted turn."}],outputKind:"object",effects:["The daemon acknowledges immediately, then after a short grace tears its whole broker fleet down, releases its claim, spawns a successor on the runtime generation currently selected, and exits.","Each torn-down broker hands its foreground bash commands to the file-backed background job system; they keep running and report completion by urgent inbox message.","Every node it tore down \u2014 including the caller \u2014 is resolved by the successor through the ordinary row-driven supervision tick.","The calling process is killed as part of that teardown, AFTER this result is returned."]},run:s(async r=>{if(!_()){const e=await h();return{restarted:!1,started:e.started,...e.pid!==void 0?{pid:e.pid}:{},...e.existing_pid!==void 0?{pid:e.existing_pid}:{},note:"No daemon was running, so there was nothing to hand over; one was started on the selected runtime generation."}}try{const e=await k().restartDaemon();return{restarted:e.accepted,pid:e.predecessor_pid,grace_ms:e.grace_ms,note:"Handover accepted. If you are running inside a node, your broker is about to be torn down and resumed on the new generation \u2014 THIS RESTART ALREADY SUCCEEDED. When your turn resumes with this result in the transcript, do not re-run it."}}catch(e){throw new o({error:"daemon_restart_failed",message:`the daemon did not accept a handover: ${e.message}`,next:"Run `crtr sys daemon status` to inspect the daemon."})}},"run")}),A=d({name:"stop",description:"stop the running daemon",whenToUse:"shutting the crtrd supervisor down for good, ending auto-revival of nodes on window exit. Not the way to pick up a new runtime generation \u2014 `restart` is, because stopping kills every broker of this epoch, including the caller's own, so this command cannot report its result to an agent that runs it.",help:{name:"sys daemon stop",summary:"stop the crtrd supervisor daemon and confirm it exited",params:[],output:[{name:"stopped",type:"boolean",required:!0,constraint:"True when a daemon (recorded or stray) was found and killed. False when none was running."},{name:"pid",type:"number",required:!1,constraint:"The recorded pidfile pid that exited (when one was recorded and alive)."},{name:"strays_killed",type:"array",required:!1,constraint:"PIDs of stray crtrd daemons (alive but not in the pidfile) swept alongside the recorded one \u2014 the backstop against a daemon that survived a prior stop."},{name:"force_killed",type:"boolean",required:!1,constraint:"True when the recorded daemon ignored SIGTERM and had to be SIGKILLed."}],outputKind:"object",effects:["Sends SIGTERM to the recorded pid and waits for it to exit and release its pidfile, escalating to SIGKILL if it does not.","Then sweeps any OTHER live crtrd daemon process (SIGTERM, escalating to SIGKILL after 2s) so a stray daemon orphaned from the pidfile cannot keep supervising."]},run:s(async r=>{const e=m(),n=e!==null&&l(e);try{let a=!1;n&&(a=await b(e)==="killed");const i=v(null);return!n&&i.length===0?{stopped:!1}:{stopped:!0,...n?{pid:e}:{},...i.length>0?{strays_killed:i}:{},...a?{force_killed:!0}:{}}}catch(a){throw new o({error:"daemon_stop_failed",message:`failed to stop daemon${n?` pid ${e}`:""}: ${a.message}`,next:"Run `crtr sys daemon status` to inspect the daemon before retrying."})}},"run")}),U=w({name:"daemon",description:"manage the crtrd supervisor process",whenToUse:"managing the crtrd supervisor that auto-revives nodes on window exit \u2014 start it, restart it onto a new runtime generation, check its status, or stop it",help:{name:"sys daemon",summary:"manage the crtrd canvas supervisor daemon",model:"crtrd is a thin background daemon that polls active+idle nodes and acts on window exit: crashed windows become dead; refresh-yield windows get a fresh respawn. It holds no orchestration logic \u2014 just process supervision. These are operator/dev self-management, not something a normal agent turn needs to check. Picking up a newly installed runtime generation is `restart` (a handover the daemon performs on itself); `stop` is the terminal one, and it kills the caller along with the rest of the fleet."},children:[x,S,E,R,P,A]});function F(){return q([U])}s(F,"registerDaemonControlSys");export{U as daemonBranch,F as registerDaemonControlSys};

package/dist/commands/sys/doctor.d.ts

@@ -0,0 +1,36 @@
+import { type Scope } from '../../types.js';
+type CheckStatus = 'pass' | 'fail';
+type CheckScope = Scope | 'canvas';
+/**
+ * Structured fix action for a failing check. Surfaced on each
+ * non-pass result so an agent reading doctor output can apply it directly
+ * when `--fix` is not used (or when --fix did not auto-apply). Every
+ * remediation includes the exact action and payload — no inference required.
+ */
+interface Remediation {
+    kind: 'remove_config_key' | 'rm_path' | 'human_action';
+    description: string;
+    scope?: Scope;
+    configKey?: string;
+    path?: string;
+    command?: string;
+}
+interface CheckResult {
+    scope: CheckScope;
+    name: string;
+    status: CheckStatus;
+    message: string;
+    fixed?: boolean;
+    remediation?: Remediation;
+}
+/**
+ * Validate the command manifest + executable path of every effective command
+ * plugin (the deduped, enabled set that actually composes into the tree).
+ * Purely static — the plugin binary is NEVER executed, and no remediation ever
+ * chmods or rewrites third-party plugin content (every fix is a human_action:
+ * disable/update/remove the plugin). Only plugins whose scope is in `scopes`
+ * are reported, so `--scope` narrows these checks too.
+ */
+export declare function runCommandPluginChecks(scopes: Scope[]): Promise<CheckResult[]>;
+export declare const sysDoctorLeaf: import("../../core/command.js").LeafDef;
+export {};

package/dist/commands/sys/doctor.js

@@ -0,0 +1 @@
+var D=Object.defineProperty;var p=(n,s)=>D(n,"name",{value:s,configurable:!0});import{envGrantee as F,envProfileId as b}from"../../shared/env.js";import{requiredPluginEnv as q}from"../../core/plugin-env.js";import{createHash as x}from"node:crypto";import{lstat as w,readFile as T,readdir as _,readlink as C}from"node:fs/promises";import{dirname as E,isAbsolute as S,join as h,relative as I,resolve as j,sep as H}from"node:path";import{defineLeaf as M}from"../../core/command.js";import{normalizeRequires as L,readConfig as B,updateConfig as G}from"../../core/config.js";import{scopeRoot as A,listScopes as K,marketplacesDir as z,pluginsDir as W}from"../../core/scope.js";import{readMarketplaceManifest as J,readPluginManifest as V}from"../../core/manifest.js";import{pathExists as $,listDirs as O,removePath as U}from"../../core/fs-utils.js";import{lsRemote as Z}from"../../core/git.js";import{cliClient as Q}from"../api-client.js";import{detectNerdFont as X,nerdFontInstallCommand as Y,NERD_FONT_SELECT_HINT as R}from"../../core/runtime/nerd-font.js";import{detectPackageManager as ee}from"./setup-core.js";import{validateEffectiveCommandPlugins as ne}from"../../core/command-plugins/discovery.js";import{adaptPluginContributions as te}from"../../core/command-plugins/compose.js";import{resolveCommandRegistry as ie}from"../../core/command-manifests/registry.js";import{applyCommandExtensions as oe,orphanCommandExtensionValidations as se}from"../../core/command-plugins/extensions.js";import{discoverHookRegistry as ae}from"../../core/command-hooks/discovery.js";import{resolveBinContributions as re}from"../../core/runtime/bin-contributions.js";import{inspectHumanActions as ce}from"../../core/human-actions.js";import{buildBrokerEnv as le,resolvePathExecutable as ue}from"../../core/runtime/spawn-env.js";import{listAllPlugins as de}from"../../core/resolver.js";import{SUBTREE_NAMES as me,coreCommandPaths as pe,coreHookCatalog as fe,extensibleCoreBranches as he}from"../../build-root.js";import{processGeneration as ge,processLocatedGeneration as $e,runtimeManifest as y,selectedGeneration as ye}from"./shared.js";import{CONFIG_FILE as ve}from"../../types.js";function f(n,s,t){return{scope:n,name:s,status:"pass",message:t}}p(f,"pass");function m(n,s,t,r){return{scope:n,name:s,status:"fail",message:t,...r?{remediation:r}:{}}}p(m,"failCheck");function k(n){try{switch(n.kind){case"remove_config_key":{if(!n.scope||!n.configKey)return!1;const s=n.configKey.split(".");return G(n.scope,t=>{let r=t;for(let i=0;i<s.length-1;i++){const e=r[s[i]];if(typeof e!="object"||e===null)return;r=e}delete r[s[s.length-1]]}),!0}case"rm_path":return n.path?(U(n.path),!0):!1;case"human_action":return!1;default:return!1}}catch{return!1}}p(k,"applyRemediation");function ke(n){return[`${n.link} ${n.kind}`,`disposition=${n.retry.disposition}`,typeof n.retry.attempt=="number"&&typeof n.retry.max=="number"?`attempt=${n.retry.attempt}/${n.retry.max}`:void 0,typeof n.retry.nextAt=="string"?`nextAt=${n.retry.nextAt}`:void 0].filter(t=>t!==void 0).join(" \xB7 ")}p(ke,"faultMessage");function P(n){return/^[A-Za-z0-9._:/@%+=,-]+$/u.test(n)?n:`'${n.replaceAll("'","'\\''")}'`}p(P,"shellArgument");function we(n,s){const t={connection:"restore connectivity","rate-limit":"wait for the rate limit to clear",overloaded:"wait for load to drop",auth:"re-authenticate",protocol:"fix the protocol mismatch","context-overflow":"shrink the task or loaded context, or choose a larger-context model before spawning the node again",other:"fix the underlying issue",wedged:"read `crtr canvas read wedged-child-on-runaway-bash` \u2014 if a runaway subprocess is to blame, kill it (not the node); if the broker had no subprocess, the daemon SIGTERM-kicks it and starts a fresh recovery cycle automatically","model-not-found":"pass a valid `--model provider/id` or configure credentials for an authenticated provider, then revive the node (`crtr node lifecycle revive <id>`)"},r=n.retry.disposition==="auto"?n.retry.by==="client"?"client redialing":typeof n.retry.attempt=="number"&&typeof n.retry.max=="number"?`auto-retrying, attempt ${n.retry.attempt}/${n.retry.max}`:"auto-retrying":n.retry.disposition==="fatal"?"parked fatal":"manual",i=`crtr sys logs --node ${P(s)} --operation ${P(n.operation_id)}`;return{kind:"human_action",description:`${t[n.kind]}; ${r}; inspect the correlated operation with ${i}`,command:i}}p(we,"faultRemediation");async function be(n){const s=[],t=new Set(n),r=new Set(me),[i,e]=await Promise.all([pe(),he()]),c=ne(r,void 0,void 0,i,e);for(const l of c){const o=l.plugin;if(!t.has(o.scope))continue;const u=l.issues.filter(a=>a.code!=="command_collision");if(u.length===0){const a=l.contributions.map(d=>d.node.name).join(", ");s.push(f(o.scope,`plugin:${o.name}:commands`,a.length>0?`contributes top-level command(s): ${a}`:"command manifest valid"));continue}u.forEach((a,d)=>{const g={kind:"human_action",description:`${a.next} Inspect with \`pkg plugin show ${o.name}\`; then update (\`pkg plugin update --name ${o.name}\`) or remove (\`pkg plugin remove ${o.name}\`) the plugin.`},v=a.path!==void 0?` at ${a.path}`:"";s.push(m(o.scope,`plugin:${o.name}:commands[${d}]`,`${a.code}${v}: ${a.message} (received ${a.received}, expected ${a.expected})`,g))})}if(t.has("project")){const l=ie(te(c.flatMap(a=>a.contributions)).contributions,r),u=[...oe(l.contributions).validations,...se(l.contributions)];for(const a of u){if(a.issue===void 0){s.push(f("project",`extension:${a.branch}`,`repository fragment valid: ${a.fragmentPath}`));continue}const d=a.issue;s.push(m("project",`extension:${a.branch}`,`${d.code} at ${d.path??a.fragmentPath}: ${d.message} (received ${d.received}, expected ${d.expected})`,{kind:"human_action",description:d.next}))}}return s}p(be,"runCommandPluginChecks");async function xe(n){const s=new Set(n),t=ae(await fe()),r=[];for(const i of t.validations){const e=i.plugin;if(!s.has(e.scope))continue;const c=t.issues.filter(l=>l.plugin===e.name&&l.scope===e.scope);if(c.length===0){const l=i.hooks.map(u=>`${u.target} [${u.phase} ${u.op}]`),o=(i.manifest?.schemaVersion===2?i.manifest.lifecycle:[]).map(u=>`${u.event} [${u.phase} ${u.op}; effects: ${u.effects.join(", ")}]`);r.push(f(e.scope,`plugin:${e.name}:hooks`,`effective hook declaration(s): ${[...l,...o].join("; ")}`));continue}c.forEach((l,o)=>{const u=i.manifestPath??h(e.root,".crouter-plugin","plugin.json"),a=l.path!==void 0?`${u}:${l.path}`:u;r.push(m(e.scope,`plugin:${e.name}:hooks[${o}]`,`${l.code} at ${a}: ${l.message} (received ${l.received}, expected ${l.expected})`,{kind:"human_action",description:`${l.next} Inspect with \`crtr pkg plugin show ${e.name}\`; then disable (\`crtr pkg plugin disable ${e.name} --scope ${e.scope}\`), update (\`crtr pkg plugin update --name ${e.name}\`), or remove (\`crtr pkg plugin remove ${e.name}\`) the plugin.`}))})}return r}p(xe,"runHookPluginChecks");function _e(n){const s=new Set(n),{bins:t,issues:r}=re(process.cwd(),b()||null),i=[];for(const e of r)s.has(e.scope)&&i.push(m(e.scope,`bin:${e.name}`,`${e.origin}: ${e.message}`,{kind:"human_action",description:`Fix the \`bin.${e.name}\` declaration in ${e.origin} \u2014 point it at an executable regular file inside that contributor's own root, or remove it. A same-precedence collision is resolved by renaming one of the claimants.`}));for(const e of t.values())s.has(e.scope)&&i.push(f(e.scope,`bin:${e.name}`,`${e.origin} \u2192 ${e.target}`));return i}p(_e,"runBinContributionChecks");function Ce(n){const s=new Set(n),t=h(A("user"),ve),r=[],i=new Map;for(const e of ce(process.cwd())){if("kind"in e){if(e.kind==="unknown_action")continue;const u=e.configOrigin===t?"user":"project",a=e.block===!0,d=a?void 0:i.get(e.name);if(!a&&d===void 0&&i.set(e.name,e.configOrigin),!s.has(u))continue;const g=a?`humanActions:block@${e.configOrigin}`:`humanActions:${e.name}@${e.configOrigin}`,v={kind:"human_action",description:a?`Fix or remove the \`humanActions\` block in ${e.configOrigin}. Actions run argv directly without a shell.`:`Fix or remove the \`humanActions.${e.name}\` declaration in ${e.configOrigin}. Actions run argv directly without a shell.`};d!==void 0?r.push({scope:u,name:g,status:"pass",message:`warning: shadowed by ${d}; ${e.configOrigin}: ${e.reason}`,remediation:v}):r.push(m(u,g,`${e.configOrigin}: ${e.reason}`,v));continue}const c=e.configOrigin===t?"user":"project",l=i.get(e.name);if(l===void 0&&i.set(e.name,e.configOrigin),!s.has(c))continue;const o=l===void 0?"":`shadowed by ${l}; `;r.push(f(c,`humanActions:${e.name}@${e.configOrigin}`,`${o}${e.configOrigin} \u2192 ${e.argv[0]} (cwd ${e.cwd})`))}return r}p(Ce,"runHumanActionChecks");function Ee(n){const s=new Set(n),t=le({argv:[],env:{CRTR_NODE_CWD:process.cwd(),CRTR_PROFILE_ID:b()??"",CRTR_GRANTEE:F()??"app:terminal"}}),r=[];for(const i of de())if(!(!s.has(i.scope)||!i.enabled)){for(const e of q(i.manifest.env))t[e]!==void 0?r.push(f(i.scope,`env:${e}`,`plugin "${i.name}" has ${e}`)):r.push(m(i.scope,`env:${e}`,`plugin "${i.name}" needs ${e}`,{kind:"human_action",description:`crtr sys env set --name ${e}`}));if(i.manifest.requires!==void 0)for(const[e,c]of Object.entries(L(i.manifest.requires))){const l=ue(e,t,process.cwd());l!==null?r.push(f(i.scope,`requires:${e}`,`plugin "${i.name}" \u2192 ${l}`)):r.push(m(i.scope,`requires:${e}`,`plugin "${i.name}" requires executable "${e}" on PATH`,{kind:"human_action",description:c}))}}return r}p(Ee,"runRequiresChecks");async function Se(n){const s=[];async function t(r){for(const i of await _(r)){const e=h(r,i),c=I(n,e).replaceAll(H,"/");if(c==="generation.json")continue;const l=await w(e);if(l.isDirectory())await t(e);else if(l.isFile()){const o=await T(e);s.push({path:c,size:l.size,sha256:x("sha256").update(o).digest("hex")})}else if(l.isSymbolicLink()){const o=await C(e);if(S(o)||!y.contained(n,j(E(e),o)))throw new Error(`generation symlink escapes root: ${c}`);s.push({path:c,size:Buffer.byteLength(o),sha256:x("sha256").update(o).digest("hex"),symlink:!0})}else throw new Error(`unsupported generation file: ${c}`)}}return p(t,"walk"),await t(n),y.sortInventory(s)}p(Se,"inventory");async function je(n){async function s(t){const r=await w(t);if(!r.isDirectory()||r.isSymbolicLink())throw new Error(`generation directory is invalid: ${t}`);if((r.mode&146)!==0)throw new Error(`generation path is writable: ${t}`);for(const i of await _(t)){const e=h(t,i),c=await w(e);if(c.isDirectory())await s(e);else if(c.isFile()){if((c.mode&146)!==0)throw new Error(`generation path is writable: ${e}`)}else if(c.isSymbolicLink()){const l=await C(e);if(S(l)||!y.contained(n,j(E(e),l)))throw new Error(`generation symlink escapes root: ${e}`)}else throw new Error(`unsupported generation file: ${e}`)}}p(s,"walk"),await s(n)}p(je,"verifySealed");function Ae(){const n=X();if(n.installed)return f("user","terminal:nerd-font",`installed (${n.evidence}) \u2014 if icons still render as boxes, ${R}`);const s=Y(ee());return m("user","terminal:nerd-font","no Nerd Font installed \u2014 viewer tool/command icons will render as tofu boxes",{kind:"human_action",description:`Install a Nerd Font (${s.hint}), ${R}`,...s.command?{command:s.command}:{}})}p(Ae,"runNerdFontCheck");async function N(n,s,t){if(s.generation===null){const c=s.error??"no runtime generation";return[t?f("canvas",`runtime:${n}`,c):m("canvas",`runtime:${n}`,c)]}const r=s.generation,i=[],e=y.validateManifestShape(r.manifest,{id:r.id,entryName:"cli"});if(!e.ok)return[m("canvas",`runtime:${n}:manifest`,e.error)];i.push(f("canvas",`runtime:${n}:manifest`,`${r.id} ${r.manifest.packageVersion}`));try{await je(r.root),i.push(f("canvas",`runtime:${n}:sealing`,"generation tree is sealed and contained"))}catch(c){i.push(m("canvas",`runtime:${n}:sealing`,c instanceof Error?c.message:String(c)))}try{const c=await Se(r.root),l=y.sortInventory(r.manifest.files);JSON.stringify(r.manifest.files)!==JSON.stringify(l)?i.push(m("canvas",`runtime:${n}:inventory`,"manifest inventory is not in canonical runtime-generation-manifest order")):JSON.stringify(c)!==JSON.stringify(l)?i.push(m("canvas",`runtime:${n}:inventory`,"full generation inventory hash does not match generation.json")):i.push(f("canvas",`runtime:${n}:inventory`,`${c.length} files hash-verified`))}catch(c){i.push(m("canvas",`runtime:${n}:inventory`,c instanceof Error?c.message:String(c)))}return i}p(N,"generationChecks");async function Oe(){const n=[];for(const s of await Q().listNodes()){const t=s.fault??null;if(t===null)continue;const r=`fault:${s.node_id}:${t.link}`,i=we(t,s.node_id);n.push(m("canvas",r,ke(t),i))}return n}p(Oe,"runFaultChecks");function Re(n,s){const t=[];if(!A(n))return t;const i=B(n),e=z(n);for(const o of Object.keys(i.marketplaces)){if(!e){t.push(m(n,`marketplace:${o}:dir`,"marketplaces directory unavailable"));continue}const u=h(e,o);if($(u))t.push(f(n,`marketplace:${o}:dir`,"directory exists"));else{const a={kind:"remove_config_key",description:`Drop stale config entry config.${n}.marketplaces.${o}`,scope:n,configKey:`marketplaces.${o}`};s.fix&&k(a)?t.push({scope:n,name:`marketplace:${o}:dir`,status:"fail",message:"directory missing \u2014 removed stale config entry",fixed:!0,remediation:a}):t.push(m(n,`marketplace:${o}:dir`,`directory missing: ${u}`,a))}}const c=W(n);for(const o of Object.keys(i.plugins)){if(!c){t.push(m(n,`plugin:${o}:dir`,"plugins directory unavailable"));continue}const u=h(c,o);if($(u))t.push(f(n,`plugin:${o}:dir`,"directory exists"));else{const a={kind:"remove_config_key",description:`Drop stale config entry config.${n}.plugins.${o}`,scope:n,configKey:`plugins.${o}`};s.fix&&k(a)?t.push({scope:n,name:`plugin:${o}:dir`,status:"fail",message:"directory missing \u2014 removed stale config entry",fixed:!0,remediation:a}):t.push(m(n,`plugin:${o}:dir`,`directory missing: ${u}`,a))}}if(e&&$(e))for(const o of O(e)){const u=h(e,o),a=J(u);if(a){t.push(f(n,`marketplace:${o}:manifest`,"manifest valid"));for(const d of a.plugins){if(d.source.startsWith("http://")||d.source.startsWith("https://")||d.source.startsWith("git@"))continue;const g=h(u,d.source);$(g)?t.push(f(n,`marketplace:${o}:plugin-source:${d.name}`,"source resolves")):t.push(m(n,`marketplace:${o}:plugin-source:${d.name}`,`source path does not resolve: ${g}`))}}else{const d={kind:"rm_path",description:"Remove dangling marketplace directory (no valid .crouter-marketplace/marketplace.json)",path:u};s.fix&&k(d)?t.push({scope:n,name:`marketplace:${o}:manifest`,status:"fail",message:"no valid marketplace.json \u2014 removed dangling directory",fixed:!0,remediation:d}):t.push(m(n,`marketplace:${o}:manifest`,`no valid marketplace.json in ${u}`,d))}}const l=new Map;if(c&&$(c))for(const o of O(c)){const u=h(c,o),a=V(u);if(!a){const d={kind:"rm_path",description:"Remove dangling plugin directory (no valid .crouter-plugin/plugin.json)",path:u};s.fix&&k(d)?t.push({scope:n,name:`plugin:${o}:manifest`,status:"fail",message:"no valid plugin.json \u2014 removed dangling directory",fixed:!0,remediation:d}):t.push(m(n,`plugin:${o}:manifest`,`no valid plugin.json in ${u}`,d));continue}t.push(f(n,`plugin:${o}:manifest`,"manifest valid")),l.has(o)?t.push(m(n,`plugin:${o}:duplicate`,`duplicate plugin name within scope (also at ${l.get(o)})`)):l.set(o,u),s.remote&&a.source&&(Z(a.source).status!==0?t.push(m(n,`plugin:${o}:remote`,`git remote unreachable: ${a.source}`)):t.push(f(n,`plugin:${o}:remote`,"git remote reachable")))}return t}p(Re,"runChecksForScope");const an=M({name:"doctor",description:"diagnose installation health",whenToUse:"something in your crtr install looks off and you want it diagnosed \u2014 a plugin or marketplace manifest is missing, a config entry points at a directory that no longer exists, or a plugin command/hook declaration is malformed. Reports each problem with a structured remediation, and can apply the safe repairs for you.",help:{name:"sys doctor",summary:"diagnose runtime integrity, missing manifests, and broken config entries",params:[{kind:"flag",name:"scope",type:"enum",choices:["user","project"],required:!1,constraint:"Scope to check. Default: all scopes."},{kind:"flag",name:"fix",type:"bool",required:!1,constraint:"Apply each non-pass check's remediation and report what was fixed."},{kind:"flag",name:"remote",type:"bool",required:!1,constraint:"Check git remotes with ls-remote (slow \u2014 makes network calls)."}],output:[{name:"checks",type:"object[]",required:!0,constraint:"Each: {scope, name, status, message, fixed?, remediation?}. status: pass | fail. scope may be user | project | canvas. bin:<name> checks report bare-binary contributions (a `bin` block in a plugin manifest or a scope config.json): a pass names the contributor and the resolved target, a fail names an unsafe/reserved command name, malformed target declaration, missing/non-executable/escaping target, or same-precedence name collision that installed nothing; their remediation is always a human_action. humanActions:<name>@<config-origin> checks validate each user/project scope completion-action declaration: action-name and argv shape, cwd directory, argv[0] regular-file existence, and execute permission; they never execute an action. A malformed effective declaration fails; a malformed shadowed declaration is a pass-level warning that names the winning and shadowed origins. requires:<name> checks report each enabled plugin manifest PATH requirement: a pass names the plugin and resolved executable path; a fail names the plugin and carries its declared install hint as remediation. Runtime checks validate selected and process generation manifests, sealing/containment, and full SHA-256 inventories. terminal:nerd-font (user scope) reports whether a Nerd Font is installed for the viewer's icon glyphs; its remediation is always a human_action carrying the platform install command, never auto-fixed. Plugin checks appear as plugin:<name>:commands and plugin:<name>:hooks; both are validated statically and never execute plugin code. Hook failures identify manifest/path/target/event/collision problems and carry disable/update/remove/show remediation; healthy command hooks list effective target, phase, and op, while lifecycle hooks list event, phase, op, and effects. remediation (when present) is {kind, description, ...payload} where kind is remove_config_key | rm_path | human_action; fault human_action remediations include the canonical logs command. Sorted by scope then name."},{name:"ok",type:"boolean",required:!0,constraint:"True when no unresolved fail checks remain."}],outputKind:"object",effects:["Read-only unless --fix is passed. Runtime verification reads and hashes every selected/process generation file; plugin command and hook manifests, bare-binary (`bin`) declarations, humanActions declarations, and advisory `requires` PATH checks never execute plugin or contributed binaries.","With --fix: applies each non-pass check's `remediation` \u2014 removes stale config entries and deletes dangling plugin/marketplace directories; canvas fault findings and plugin command/hook findings stay read-only (--fix never chmods or rewrites third-party plugin content).","Each non-pass result carries a structured `remediation` describing the fix action (absolute paths, exact config keys, or a human_action with its command) so callers can apply it directly without --fix."]},run:p(async n=>{const s=n.scope,t=n.fix,r=n.remote,i=K(s),e=[];for(const a of i){const d=Re(a,{fix:t,remote:r});e.push(...d)}i.includes("user")&&e.push(Ae()),e.push(...await be(i)),e.push(...await xe(i)),e.push(..._e(i)),e.push(...Ce(i)),e.push(...Ee(i)),e.push(...await Oe());const c=ge();e.push(...await N("selected",ye(),c===null)),e.push(...await N("process",$e(),!0));const l={user:0,project:1,builtin:2,canvas:3};e.sort((a,d)=>a.scope!==d.scope?l[a.scope]-l[d.scope]:a.name.localeCompare(d.name));const o=!e.some(a=>a.status==="fail"&&a.fixed!==!0),u=e.filter(a=>a.status==="fail"&&a.fixed!==!0).length;return{checks:e,ok:o,failed:u}},"run")});export{be as runCommandPluginChecks,an as sysDoctorLeaf};

package/dist/commands/sys/env.d.ts

@@ -0,0 +1 @@
+export declare const sysEnvBranch: import("../../core/command.js").BranchDef;

package/dist/commands/sys/env.js

@@ -0,0 +1 @@
+var v=Object.defineProperty;var a=(e,n)=>v(e,"name",{value:n,configurable:!0});import{defineBranch as u,defineLeaf as r}from"../../core/command.js";import{InputError as i}from"../../core/io.js";import{validateEnvVarName as l}from"../../core/env-name.js";import{stripSingleTrailingLineEnding as p}from"../profile/env.js";import{cliClient as t}from"../api-client.js";function s(e){const n=e.name;if(!l(n).isValid)throw new i({error:"invalid_name",message:"invalid env var name",field:"name",next:"Use an env-var-shaped name."});return n}a(s,"name");const y=u({name:"env",description:"manage env vars for every profile of the calling app",whenToUse:"a plugin needs a credential available to every node in this app",help:{name:"sys env",summary:"write-only app env store; list returns names, never values",model:"A stored value reaches new launches immediately, and a running node on its next revive. Profile env overrides app env."},children:[r({name:"set",description:"store one app env value from stdin",whenToUse:"a plugin declares a required env name",help:{name:"sys env set",summary:"set one app-wide env variable without printing its value",params:[{kind:"flag",name:"name",type:"string",required:!0,constraint:"Env var name, not CRTR_* or HOME."},{kind:"stdin",name:"value",required:!0,constraint:"Pipe value on stdin, never argv. One trailing line ending is removed."}],output:[{name:"created",constraint:"Never includes a stored value.",type:"boolean",required:!0},{name:"follow_up",constraint:"Never includes a stored value.",type:"string",required:!0}],outputKind:"object",effects:["Writes the 0600 app env store; a running node picks up changes on next revive."]},run:a(async e=>{const n=p(e.value);if(!n)throw new i({error:"empty_value",message:"env var value is empty",field:"value",next:"Pipe a non-empty value on stdin."});const{changed:o}=await t().setAppEnv(s(e),n);return{created:o,follow_up:"A running node picks up the change on its next revive."}},"run")}),r({name:"list",description:"list app env names, not values",whenToUse:"checking which plugin credentials are set",help:{name:"sys env list",summary:"list stored app env names only",params:[],output:[{name:"names",constraint:"Never includes a stored value.",type:"string[]",required:!0},{name:"count",constraint:"Never includes a stored value.",type:"int",required:!0}],outputKind:"object",effects:["Read-only; never returns values."]},run:a(async()=>{const{names:e}=await t().listAppEnv();return{names:e,count:e.length}},"run")}),r({name:"remove",description:"remove one app env value",whenToUse:"the app no longer needs a plugin credential",help:{name:"sys env remove",summary:"delete a stored app env variable",params:[{kind:"flag",name:"name",type:"string",required:!0,constraint:"Env var name."}],output:[{name:"removed",constraint:"Never includes a stored value.",type:"boolean",required:!0}],outputKind:"object",effects:["A running node picks up the removal on its next revive."]},run:a(async e=>({removed:(await t().removeAppEnv(s(e))).changed}),"run")})]});export{y as sysEnvBranch};

package/dist/commands/sys/feedback.d.ts

@@ -0,0 +1 @@
+export declare const sysFeedbackLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/sys/feedback.js

@@ -0,0 +1,7 @@
+var p=Object.defineProperty;var a=(r,e)=>p(r,"name",{value:e,configurable:!0});import{spawnSync as y}from"node:child_process";import{mkdirSync as g,writeFileSync as w}from"node:fs";import{join as h}from"node:path";import d from"node:os";import{defineLeaf as b}from"../../core/command.js";import{usage as k}from"../../core/errors.js";import{userScopeRoot as v}from"../../core/scope.js";import{readTelemetry as T}from"../../core/canvas/telemetry.js";import{ApiError as $}from"../../api/index.js";import{cliClient as E}from"../api-client.js";import{projectTier1Event as N,readLogSnapshot as _}from"../../core/events/read.js";import{readPackageVersion as O}from"./shared.js";const m="Northlight-Systems/crouter",l="CRTR_FEEDBACK_ENDPOINT",R="CRTR_FEEDBACK_TOKEN",S=15e3;async function C(){const r=process.env,e=r.CRTR_NODE_ID??null;let t=null,n=[];if(e!==null){const s=await D(e);s!==null&&typeof s.cycles=="number"&&(t=s.cycles),n=I(e)}const o=e!==null?T(e).context_tokens??null:null;return{version:O(),platform:`${d.platform()} ${d.release()} (${d.arch()})`,nodeId:e,kind:r.CRTR_KIND??null,mode:r.CRTR_MODE??null,lifecycle:r.CRTR_LIFECYCLE??null,cwd:r.CRTR_NODE_CWD??process.cwd(),cycle:t,contextTokens:o,logTail:n}}a(C,"collectContext");async function D(r){try{return await E().getNode(r)}catch(e){if(e instanceof $)return null;throw e}}a(D,"fetchNodeOrNull");function I(r){try{return _({nodeId:r,component:"broker"},!1).items.filter(e=>e.kind==="event").slice(-15).map(e=>JSON.stringify(N(e.envelope)))}catch{return[]}}a(I,"readRecentActivity");function L(r,e){const n=(r!==void 0&&r.trim()!==""?r.trim():void 0)??e.split(`
+`)[0].trim();return`[feedback] ${n.length>80?n.slice(0,79)+"\u2026":n}`}a(L,"deriveTitle");function j(r,e){const t=[`| crtr version | \`${e.version}\` |`,`| platform | ${e.platform} |`];e.nodeId!==null&&(t.push(`| node id | \`${e.nodeId}\` |`),t.push(`| kind / mode / lifecycle | ${e.kind??"?"} / ${e.mode??"?"} / ${e.lifecycle??"?"} |`),e.cycle!==null&&t.push(`| cycle | ${e.cycle} |`),e.contextTokens!==null&&t.push(`| context tokens | ${e.contextTokens.toLocaleString("en-US")} |`)),e.cwd!==null&&t.push(`| working dir | \`${e.cwd}\` |`);const n=[r.trim(),"","---","_Filed via `crtr sys feedback` \u2014 context below auto-attached by the harness._","","### Environment","| | |","|---|---|",...t];return e.logTail.length>0&&n.push("",`### Recent node activity (last ${e.logTail.length} log events)`,"```jsonl",...e.logTail,"```"),n.join(`
+`)+`
+`}a(j,"buildBody");async function q(r,e,t,n,o){const s=process.env[R];try{const i=await fetch(r,{method:"POST",headers:{"content-type":"application/json",...s!==void 0&&s!==""?{authorization:`Bearer ${s}`}:{}},body:JSON.stringify({title:e,body:t,message:n,context:o}),signal:AbortSignal.timeout(S)});if(!i.ok){const f=(await i.text().catch(()=>"")).trim().slice(0,400);return{error:`${l} returned HTTP ${i.status}${f===""?"":`: ${f}`}`}}const c=await i.json().catch(()=>null),u=typeof c?.url=="string"?c.url:void 0;return u===void 0?{}:{url:u}}catch(i){return{error:`${l} unreachable: ${i instanceof Error?i.message:String(i)}`}}}a(q,"deliverToEndpoint");function F(r,e){const t=y("gh",["issue","create","--repo",m,"--title",r,"--body-file","-"],{input:e,encoding:"utf8"});return t.error===void 0&&t.status===0?{url:t.stdout.trim().split(`
+`).filter(o=>o.startsWith("http")).pop()??t.stdout.trim()}:{error:t.error!==void 0?`gh not available: ${t.error.message}`:t.stderr?.trim()||`gh exited ${t.status}`}}a(F,"deliverToGitHub");function K(r,e){const t=h(v(),"feedback");g(t,{recursive:!0});const n=new Date().toISOString().replace(/[:.]/g,"-"),o=h(t,`${n}.md`);return w(o,`# ${r}
+
+${e}`,"utf8"),o}a(K,"saveLocally");const Q=b({name:"feedback",description:"report a crtr harness bug to whoever maintains this crtr install",whenToUse:"a crtr command itself misbehaves \u2014 it errors unexpectedly, hangs, churns, double-spawns, or acts contrary to its documented contract. NOT for your task work or decisions the user should make (that is `crtr human send`); this reports the TOOL, filing a report with the crtr maintainers with your node context auto-attached.",help:{name:"sys feedback",summary:"file a report describing a crtr harness bug, with node context auto-attached",params:[{kind:"positional",name:"message",required:!0,constraint:"What broke, in your own words: the command you ran, what you expected, what happened instead. Be concrete \u2014 this is the only part you write; everything else is auto-collected."},{kind:"flag",name:"title",type:"string",required:!1,constraint:"Issue title. Default: first line of the message, truncated."}],output:[{name:"status",type:"string",required:!0,constraint:"filed | saved-locally."},{name:"url",type:"string",required:!1,constraint:"Where the report landed, when the sink names a location."},{name:"path",type:"string",required:!1,constraint:"Local report path when status is saved-locally."},{name:"error",type:"string",required:!1,constraint:"Why filing fell back to local save."}],outputKind:"object",effects:[`Sends the report where this install delivers harness feedback: the ${l} endpoint when the deployment sets one, otherwise a public GitHub issue on ${m} via gh.`,"On delivery failure, writes the report to ~/.crouter/feedback/ instead \u2014 never lost."]},run:a(async r=>{const e=r.message?.trim();if(e===void 0||e==="")throw k("feedback message is required: describe what broke. Run `crtr sys feedback -h`.");const t=await C(),n=L(r.title,e),o=j(e,t),s=process.env[l]?.trim(),i=s!==void 0&&s!==""?await q(s,n,o,e,t):F(n,o);return i.error===void 0?i.url===void 0?{status:"filed"}:{status:"filed",url:i.url}:{status:"saved-locally",path:K(n,o),error:i.error}},"run")});export{Q as sysFeedbackLeaf};

package/dist/commands/sys/join.d.ts

@@ -0,0 +1 @@
+export declare const sysJoinLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/sys/join.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var t=(e,n)=>r(e,"name",{value:n,configurable:!0});import{defineLeaf as i}from"../../core/command.js";import{joinDirectory as s}from"../../core/directory/join.js";const u=i({name:"join",description:"register this runtime with its directory using an enrollment token, offline",whenToUse:"at a hosted runtime's first boot, before the daemon starts, with the enrollment token provisioning passed in. Not for a runtime that is already running: the daemon must be stopped.",help:{name:"sys join",summary:"exchange a directory enrollment token for a new runtime client key and record the returned identity",guide:"Generates a new ES256 client key, sends only its public key to `PUT <directory>/v1/runtimes/registration` with the token as bearer, and learns the runtime id, client id, issuer, owner and URL from the answer. Only after that answer does it write the key file, set the user settings `runtime.issuer` and `runtime.audience`, and rewrite `user:local` profile grantees to `app:terminal`. canvas.db belongs to the daemon: its next start rewrites `user:local` there, before it serves anything. Presenting the token of the stored successful registration again finishes those local writes without calling the directory. Any other token generates a new key and registers again.",params:[{kind:"flag",name:"directory",type:"string",required:!0,constraint:"Directory base URL (http or https) that minted the token."},{kind:"flag",name:"token",type:"string",required:!0,sensitive:!0,constraint:"Single-use enrollment token. Sensitive: never echoed in output or errors."}],output:[{name:"runtime",type:"string",required:!0,constraint:"Runtime principal from the directory, `runtime:<id>`."},{name:"client_id",type:"string",required:!0,constraint:"OAuth client id registered for the new key."},{name:"issuer",type:"string",required:!0,constraint:"Canonical issuer, written to `runtime.issuer`."},{name:"owner",type:"string",required:!0,constraint:"Owner principal, `user:<id>`, that replaces `user:local` subjects."},{name:"canvas_rewrite",type:"string",required:!0,constraint:"Always `next daemon start`: when canvas.db identity fields are rewritten."},{name:"url",type:"string",required:!0,constraint:"Runtime URL, written to `runtime.audience`."},{name:"registered",type:"boolean",required:!0,constraint:"False when the token matched the stored registration and the directory was not called."}],outputKind:"object",effects:["Refuses while a daemon answers on the API socket.","On a new token: calls the directory once; on success writes `<runtime>/secrets/runtime-client.json` (mode 0600) with the private key, registration and the token's SHA-256, replacing any earlier key file. A refused or failed call writes nothing.","Sets `runtime.issuer` and `runtime.audience` in user settings.","Rewrites `user:local` profile grantees to `app:terminal`.","At every later daemon start, before any listener: exact `user:local` subjects in canvas.db nodes and node_tokens become the owner (as do missing subjects on `app:terminal` nodes), `user:local` grantees in nodes, run_events, idempotency_keys and node_tokens become `app:terminal`, references to the unjoined runtime's `local:terminal` grant are cleared, and that local grant mirror is deleted so grant sync installs the directory's. Application grantees and free text are unchanged; a start with nothing left to rewrite changes no rows."]},run:t(async e=>({...await s(e.directory,e.token),canvas_rewrite:"next daemon start"}),"run")});export{u as sysJoinLeaf};

package/dist/commands/sys/limits.d.ts

@@ -0,0 +1 @@
+export declare const sysLimitsBranch: import("../../core/command.js").BranchDef;

package/dist/commands/sys/limits.js

@@ -0,0 +1,3 @@
+var l=Object.defineProperty;var n=(e,r)=>l(e,"name",{value:r,configurable:!0});import{defineBranch as y,defineLeaf as o}from"../../core/command.js";import{InputError as m}from"../../core/io.js";import{LimitInputError as f,parseSize as k}from"../../launcher/limits/settings.js";import{cliClient as i}from"../api-client.js";const d="A size: a byte count, a number with KiB, MiB, GiB or TiB, or `unlimited`.",p="An app id such as `app:terminal`.";function c(e,r){const t=e[r];if(t!==void 0)try{return k(String(t))}catch(s){throw s instanceof f?new m({error:"invalid_size",message:`${s.message}; received ${String(t)}`,field:r,next:"Pass a size such as 2GiB, 512MiB, 1073741824 or unlimited."}):s}}n(c,"size");const u=n(e=>e===null?"none":`${(e/1024**3).toFixed(e<1024**3?3:1)} GiB`,"cap");function a(e){const r=e.disk_used_bytes===null?"":`, disk used ${(e.disk_used_bytes/1048576).toFixed(0)} MiB`;return`- \`${e.app}\` \u2014 memory ${u(e.memory_bytes)} (${e.memory_source}), disk ${u(e.disk_bytes)} (${e.disk_source})${r}`}n(a,"line");const h={name:"limits",type:"AppLimitsDTO",required:!0,constraint:"Record: {app, memory_bytes, disk_bytes, memory_source, disk_source, disk_used_bytes}. A null cap means none."},w=o({name:"show",description:"show each app's memory and disk caps and whether this host enforces them",whenToUse:"checking what an app may use, or why a run was stopped for memory",help:{name:"sys limits show",summary:"list effective per-app memory and disk caps, marking the person-set overrides",params:[],output:[{name:"memory_enforced",type:"boolean",required:!0,constraint:"False when this host cannot write cgroup memory limits; reason in memory_reason."},{name:"memory_reason",type:"string",required:!1,constraint:"Why memory limits are not enforced, or null."},{name:"disk_enforced",type:"boolean",required:!0,constraint:"False when the apps volume has no project quota; reason in disk_reason."},{name:"disk_reason",type:"string",required:!1,constraint:"Why disk limits are not enforced, or null."},{name:"apps",type:"AppLimitsDTO[]",required:!0,constraint:"One record per known app, by id."}],outputKind:"object",effects:["None. Read-only."]},run:n(async()=>({...await i().showLimits()}),"run"),render:n(e=>{const r=e;return[r.memory_enforced?"Memory limits: enforced.":`Memory limits: not enforced (${r.memory_reason}).`,r.disk_enforced?"Disk limits: enforced.":`Disk limits: not enforced (${r.disk_reason}).`,...r.apps.map(a)].join(`
+`)},"render")}),g=o({name:"set",description:"set an app's memory and/or disk cap",whenToUse:"raising or lowering what one app may use, or removing its cap with `unlimited`",help:{name:"sys limits set",summary:"store a person-set memory and/or disk cap for one app and apply it now",params:[{kind:"flag",name:"app",type:"string",required:!0,constraint:p},{kind:"flag",name:"memory",type:"string",required:!1,constraint:`${d} Total resident memory of all the app's running processes; at least 64 MiB.`},{kind:"flag",name:"disk",type:"string",required:!1,constraint:`${d} Bytes under the app's folder, cache included; at least 16 MiB.`}],output:[{name:"app",type:"string",required:!0,constraint:"The app changed."},{name:"applied",type:"boolean",required:!0,constraint:"True when the launcher wrote the caps to the host now; false when this host has no launcher, so the caps are only recorded."},h],outputKind:"object",effects:["Writes limits.json in the runtime directory, which no sandbox mounts.","The launcher rewrites the app's cgroup memory.max and project quota at once; running processes keep running, and a process over a lowered memory cap is reclaimed or OOM-killed by the kernel."]},run:n(async e=>{const r=c(e,"memory"),t=c(e,"disk");if(r===void 0&&t===void 0)throw new m({error:"nothing_to_set",message:"received neither --memory nor --disk",next:"Pass --memory <size>, --disk <size>, or both."});return await i().setAppLimits(String(e.app),{...r===void 0?{}:{memory_bytes:r},...t===void 0?{}:{disk_bytes:t}})},"run"),render:n(e=>`${a(e.limits)}${e.applied?"":`
+Recorded only: this host has no launcher to enforce it.`}`,"render")}),_=o({name:"remove",description:"remove a person-set cap so the app returns to its default",whenToUse:"undoing a `sys limits set` override",help:{name:"sys limits remove",summary:"drop an app's memory and/or disk override; with neither flag, both",params:[{kind:"flag",name:"app",type:"string",required:!0,constraint:p},{kind:"flag",name:"memory",type:"bool",required:!1,constraint:"Remove the memory override."},{kind:"flag",name:"disk",type:"bool",required:!1,constraint:"Remove the disk override."}],output:[{name:"app",type:"string",required:!0,constraint:"The app changed."},{name:"applied",type:"boolean",required:!0,constraint:"True when the launcher wrote the default caps now."},h],outputKind:"object",effects:["Edits limits.json and has the launcher apply the default caps at once."]},run:n(async e=>{const r=[...e.memory===!0?["memory"]:[],...e.disk===!0?["disk"]:[]];return await i().removeAppLimits(String(e.app),r.length===0?["memory","disk"]:r)},"run"),render:n(e=>a(e.limits),"render")}),B=y({name:"limits",description:"per-app memory and disk caps on this runtime",whenToUse:"a person needs to see, raise, lower or remove what one app may use of the hosted runtime's memory and disk",help:{name:"sys limits",summary:"view and change per-app memory and disk caps",model:"Every app has a default memory and disk cap; the terminal app has none. A person-set override replaces the default for one resource of one app and applies immediately. An app cannot change its own caps. A host without cgroup memory control or disk project quota records the caps and reports the limit as not enforced."},children:[w,g,_]});export{B as sysLimitsBranch};

package/dist/commands/sys/logs.d.ts

@@ -0,0 +1 @@
+export declare const sysLogsLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/sys/logs.js

@@ -0,0 +1,3 @@
+var p=Object.defineProperty;var a=(e,n)=>p(e,"name",{value:n,configurable:!0});import{defineLeaf as g}from"../../core/command.js";import{isSafeNodeId as h}from"../../core/canvas/paths.js";import{usage as l}from"../../core/errors.js";import{validateOperationId as y}from"../../core/events/operation-id.js";import{readLogSnapshot as v}from"../../core/events/read.js";import{emitLine as b,isJsonOutput as $,recordPreviewLine as I}from"../../core/io.js";const S=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/u,m=4096;function c(e,n,i){throw l(`--${e} ${i}; received ${JSON.stringify(n)}.`,{received:n,field:e,next:`Retry with a value that ${i}.`})}a(c,"invalidFlag");function f(e,n){if(n===void 0)return;const i=n.trim(),t=S.exec(i),s=Date.parse(i);(t===null||!Number.isFinite(s))&&c(e,n,"must be a valid ISO 8601 timestamp with a timezone");const o=new Date(Date.parse(`${t[1]}-${t[2]}-${t[3]}T${t[4]}:${t[5]}:${t[6]}Z`));return(o.getUTCFullYear()!==Number(t[1])||o.getUTCMonth()+1!==Number(t[2])||o.getUTCDate()!==Number(t[3])||o.getUTCHours()!==Number(t[4])||o.getUTCMinutes()!==Number(t[5])||o.getUTCSeconds()!==Number(t[6]))&&c(e,n,"must be a valid ISO 8601 timestamp with a timezone"),s}a(f,"parseTimestamp");function T(e){if(e===void 0)return;const n=e.trim();return h(n)||c("node",e,"must be one non-empty path segment of at most 128 UTF-8 bytes"),n}a(T,"parseNodeId");function N(e){if(e===void 0)return;const n=e.trim();try{return y(n)}catch{c("operation",e,"must be 32 lowercase non-zero hexadecimal characters")}}a(N,"parseOperationId");function O(e){if(e===void 0)return;const n=Buffer.byteLength(e,"utf8");return(n===0||n>m)&&c("pattern",e,`must be a non-empty literal of at most ${m.toLocaleString("en-US")} UTF-8 bytes`),e}a(O,"parsePattern");function w(e){const{v:n,ts:i,level:t,event:s,component:o,operation_id:d,...u}=e,r=Object.keys(u).length===0?"":` ${JSON.stringify(u)}`;return`${i} ${t.toUpperCase()} ${o} ${s} op=${d}${r}`}a(w,"renderEvent");const E=g({name:"logs",description:"inspect recent local runtime events",whenToUse:"you need a bounded local diagnostic snapshot, especially to correlate a node with an operation ID.",help:{name:"sys logs",summary:"show the latest 200 matching local event and raw-residue records, oldest first",params:[{kind:"flag",name:"node",type:"string",required:!1,constraint:"Safe node ID; the node need not still be active."},{kind:"flag",name:"component",type:"enum",choices:["daemon","broker"],required:!1,constraint:"Owning runtime component."},{kind:"flag",name:"operation",type:"string",required:!1,constraint:"Exact 32-character lowercase non-zero hexadecimal operation ID."},{kind:"flag",name:"since",type:"string",required:!1,constraint:"Inclusive ISO 8601 lower bound with a timezone."},{kind:"flag",name:"until",type:"string",required:!1,constraint:"Inclusive ISO 8601 upper bound with a timezone; cannot precede --since."},{kind:"flag",name:"level",type:"enum",choices:["debug","info","warn","error"],required:!1,constraint:"Minimum severity."},{kind:"flag",name:"pattern",type:"string",required:!1,constraint:"Case-insensitive literal, non-empty and at most 4,096 UTF-8 bytes."}],output:[{name:"record",type:"EventEnvelope | RAW line",required:!1,constraint:"At most 200 matches, oldest to newest. Default canonical summaries occupy one line; unstructured daemon/broker residue is visibly prefixed RAW. Machine JSON output is canonical EventEnvelope JSONL only."}],outputKind:"jsonl",effects:["None. Read-only."]},run:a(async e=>{const n=T(e.node),i=N(e.operation),t=f("since",e.since),s=f("until",e.until);if(t!==void 0&&s!==void 0&&t>s)throw l("--since cannot be later than --until.",{received:{since:e.since,until:e.until},field:"since/until",next:"Retry with an inclusive range whose lower bound does not exceed its upper bound."});const o={nodeId:n,component:e.component,operationId:i,sinceMs:t,untilMs:s,minimumLevel:e.level,pattern:O(e.pattern)},d=$(),u=v(o,!d);for(const r of u.items)r.kind==="event"?d?b({...r.envelope}):(I({...r.envelope}),process.stdout.write(`${w(r.envelope)}
+`)):d||process.stdout.write(`RAW ${r.source} ${new Date(r.effectiveTsMs).toISOString()} ${JSON.stringify(r.content)}
+`)},"run")});export{E as sysLogsLeaf};

package/dist/commands/sys/migrate.d.ts

@@ -0,0 +1 @@
+export declare const sysMigrateLeaf: import("../../core/command.js").LeafDef;

package/dist/commands/sys/migrate.js

@@ -0,0 +1 @@
+var s=Object.defineProperty;var n=(o,e)=>s(o,"name",{value:e,configurable:!0});import{defineLeaf as i}from"../../core/command.js";import{general as d}from"../../core/errors.js";import{cliClient as l,rethrowAsCliError as u}from"../api-client.js";import{layoutNeedsMigration as m}from"../../core/layout.js";import{migrateLayout as h}from"../../core/layout-migrate/index.js";const g=i({name:"migrate",description:"migrate an old runtime layout offline, then import the legacy memory stores into the canvas",whenToUse:"when the daemon reports startup `blocked` by the canvas import, or after moving from a release that kept memory as markdown stores. Run --dry-run first to see the plan and what it resolves; a write run on an imported home does nothing.",help:{name:"sys migrate",summary:"move an old runtime layout offline, then plan or run the daemon-owned canvas import",guide:"A layout migration requires the daemon to be stopped, runs in this process, and stops after writing the layout version; start the daemon and run `crtr sys migrate` again. The daemon then plans the canvas import: every legacy store (the user store, each profile store, every repository `.crouter/memory` reached from a profile project or a node's cwd, node context folders and reports) becomes documents with their revision history, owned by the person, a profile, a repo, or a node. Both stages resolve leftovers and clashes themselves (a folder with no node row is set aside, two repos with one namespace get distinct handles, an unparseable file imports as its raw text, and so on) and list each in `layout_resolutions` and `resolutions`, on the dry run too. The daemon runs the import itself at startup; only a blocker (the store migrations of a skipped release never ran) makes it write nothing and hold startup in `blocked`. The import writes in one transaction and resumes startup. The markdown files are left on disk and are never read again.",params:[{kind:"flag",name:"dry-run",type:"bool",required:!1,constraint:"Plan and report without writing. On an imported home, returns the recorded report with pending false."}],output:[{name:"loose_keys",type:"string[]",required:!1,constraint:"Loose credential paths moved or set aside; never values."},{name:"layout_moved",type:"number",required:!1,constraint:"Old-layout paths moved or stored paths rewritten on this run; present when the layout migration ran."},{name:"layout_resolutions",type:"string[]",required:!1,constraint:"One line per leftover the layout migration resolved (or, under --dry-run, will resolve): set-aside folders, moved profile files, closed worktree rows, cleared transcript paths."},{name:"layout_absent_credentials",type:"string[]",required:!1,constraint:"Old credential files the layout migration looked for and did not find (or, under --dry-run, will not find); present when the layout migration ran. An absent file is legitimate when the old home never held that credential."},{name:"stores",type:"object[]",required:!1,constraint:"Every store root found: {root, owner, docs, skipped?}; skipped is duplicate-worktree for a second checkout of an imported repo."},{name:"counts",type:"object",required:!1,constraint:"Planned (or written) totals: documents.<kind>, documents.owner.<person|profile|repo|node>, revisions, documents.rewritten, owners, stores, profile-limits, and informational counts. Empty on a write run over an imported home."},{name:"rewrites",type:"object[]",required:!1,constraint:"Pointer rewrites in head bodies: {path, from, to}."},{name:"dropped_fields",type:"object[]",required:!1,constraint:"Frontmatter fields with no canvas equivalent: {path, field}."},{name:"skipped",type:"object[]",required:!1,constraint:"Files or roots not imported, with the reason: {path, reason}."},{name:"resolutions",type:"object[]",required:!1,constraint:"Clashes the import resolved itself: {kind, message, paths}; kind is invalid-source, invalid-history, name-clash, repo-handle, profile-handle, repo-identity, or delivery-limit."},{name:"blockers",type:"object[]",required:!1,constraint:"{kind, message, paths}; kind is marker (the store migrations of a skipped release never ran). A blocker makes the command fail with this whole report in `received`; nothing is written."},{name:"dryRun",type:"boolean",required:!0,constraint:"True when nothing was written."},{name:"pending",type:"boolean",required:!1,constraint:"True while this home has not been imported."},{name:"resumed",type:"boolean",required:!1,constraint:"True only when this run resumed a blocked daemon startup."},{name:"resume_error",type:"string",required:!1,constraint:"Present when the import succeeded but normal daemon startup then failed."}],outputKind:"object",effects:["With an old layout and no layout version, refuses while a daemon answers, moves the runtime records, sets aside leftovers under runtime/set-aside/, rewrites stored paths and writes the layout version last, then stops; the next run, with the daemon started, plans or runs the canvas import.","Without --dry-run and with no blockers: stores revision bodies, converts profile project memory caps into profile delivery limits, and writes owners, documents, revisions, links, and the authoring nodes' watches in one canvas transaction, recorded so it runs once.","Under --dry-run: read-only, writes nothing."]},run:n(async o=>{const e=o.dryRun===!0,t=m()?await h(e):null;if(e&&t!==null)return{layout_resolutions:t.resolutions,layout_absent_credentials:t.absentCredentials,dryRun:e,follow_up:"Preview only \u2014 re-run without --dry-run to migrate the layout; the canvas import is planned after it."};if(t!==null)return{layout_moved:t.moved,layout_resolutions:t.resolutions,layout_absent_credentials:t.absentCredentials,dryRun:e,follow_up:"Layout migrated. Start the daemon (in a container, `docker compose exec`), then run `crtr sys migrate --dry-run` against it to plan the canvas import."};let r;try{r=await l().migrateState({dry_run:e})}catch(a){u(a)}if(r.blockers.length>0)throw d(`canvas import blocked by ${r.blockers.length} finding(s) \u2014 nothing was written`,{received:r,next:"Do what received.blockers[].message says, then run `crtr sys migrate` again."});return{...r,follow_up:r.pending?"Preview only \u2014 re-run without --dry-run to import.":e?"Already imported \u2014 this is the recorded report.":void 0}},"run")});export{g as sysMigrateLeaf};

package/dist/commands/sys/panels/broker-limits-panel.d.ts

@@ -0,0 +1,17 @@
+import { Input } from '@earendil-works/pi-tui';
+import { type SetupPanel } from '../../../core/tui/panel.js';
+export declare class BrokerLimitsPanel implements SetupPanel {
+    private readonly onChange;
+    readonly warningInput: Input;
+    readonly hardCapInput: Input;
+    private index;
+    private notice;
+    private _focused;
+    constructor(onChange: () => void);
+    set focused(value: boolean);
+    private selected;
+    private move;
+    private save;
+    handleInput(data: string, matches?: (id: string, input: string) => boolean): boolean;
+    render(width: number): string[];
+}

package/dist/commands/sys/panels/broker-limits-panel.js

@@ -0,0 +1,2 @@
+var m=Object.defineProperty;var o=(s,e)=>m(s,"name",{value:e,configurable:!0});import{Input as c,truncateToWidth as h}from"@earendil-works/pi-tui";import{readConfig as I,updateRawConfigAtomically as v}from"../../../core/config.js";import{BROKER_LIMIT_OVERRIDE_PRECEDENCE as d}from"../setup.js";import{padAnsi as C,theme as n,wrapText as p}from"../../../core/tui/panel.js";function f(s){return/^\d+$/.test(s)&&Number.isSafeInteger(Number(s))&&Number(s)>=1?Number(s):void 0}o(f,"positive");class R{static{o(this,"BrokerLimitsPanel")}onChange;warningInput=new c;hardCapInput=new c;index=0;notice;_focused=!1;constructor(e){this.onChange=e;const t=I("user").brokerThresholds;this.warningInput.setValue(String(t.warning)),this.warningInput.handleInput(""),this.hardCapInput.setValue(String(t.automaticReviveCap)),this.hardCapInput.handleInput(""),this.warningInput.onSubmit=()=>this.save(),this.hardCapInput.onSubmit=()=>this.save()}set focused(e){this._focused=e,this.warningInput.focused=e&&this.index===0,this.hardCapInput.focused=e&&this.index===1}selected(){return this.index===0?this.warningInput:this.hardCapInput}move(e){this.index=(this.index+e+2)%2,this.focused=this._focused,this.notice=void 0}save(){const e=f(this.warningInput.getValue()),t=f(this.hardCapInput.getValue());e===void 0||t===void 0?this.notice="Both broker limits must be positive integers.":e>t?this.notice="Warning threshold cannot exceed the automatic-revive hard cap.":(v("user",r=>({...r,brokerThresholds:{warning:e,automaticReviveCap:t}})),this.notice=`Saved to user config. Applies next tick. ${d}`),this.onChange()}handleInput(e,t){return/^\d+$/.test(e)?(this.selected().handleInput(e),this.notice=void 0,this.onChange(),!0):t?(t("crtr.setup.list-down",e)?this.move(1):t("crtr.setup.list-up",e)?this.move(-1):e.length>0&&[...e].every(r=>{const i=r.codePointAt(0);return i>=32&&i!==127})?this.notice="Broker limits accept digits only.":(this.selected().handleInput(e),e!=="\r"&&e!==`
+`&&(this.notice=void 0)),this.onChange(),!0):!1}render(e){const t=[h(`${n.fg("accent",n.bold("Broker limits"))}${n.fg("dim","  user scope \xB7 defaults 16 / 32")}`,e),h(n.fg("dim","These bounds govern daemon automatic revive; explicit node revives remain available."),e),""],r=o((i,u,l,g)=>{const a=i===this.index;t.push(h(`${a?n.fg("accent","\u25B6"):" "} ${C(a?n.fg("accent",u):u,24)} ${g.render(Math.max(8,e-28))[0]??""}`,e)),t.push(h(n.fg("dim",`    ${l}`),e))},"line");r(0,"Warning threshold","Warn when live brokers reach this count. Default: 16.",this.warningInput),r(1,"Automatic-revive hard cap","Defer automatic revives at this count. Default: 32.",this.hardCapInput),t.push("");for(const i of p(`Configured limits apply next tick. ${d}`,e))t.push(n.fg("dim",i));if(this.notice)for(const i of p(this.notice,e))t.push(n.fg(this.notice.startsWith("Saved")?"success":"warning",i));return t}}export{R as BrokerLimitsPanel};

package/dist/commands/sys/panels/dependencies-panel.d.ts

@@ -0,0 +1,14 @@
+import type { SetupSystemInstallPlan } from '../setup-core.js';
+import { type SetupPanel } from '../../../core/tui/panel.js';
+export declare class DependenciesPanel implements SetupPanel {
+    private readonly plans;
+    private readonly onChange;
+    private readonly selectedTools;
+    private index;
+    constructor(plans: SetupSystemInstallPlan[], onChange: () => void);
+    badge(): string;
+    get selected(): readonly SetupSystemInstallPlan[];
+    private current;
+    handleInput(data: string, matches?: (id: string, input: string) => boolean): boolean;
+    render(width: number): string[];
+}

package/dist/commands/sys/panels/dependencies-panel.js

@@ -0,0 +1 @@
+var g=Object.defineProperty;var c=(i,t)=>g(i,"name",{value:t,configurable:!0});import{truncateToWidth as a}from"@earendil-works/pi-tui";import{theme as l}from"../../../core/tui/panel.js";function f(i){return i==="nvim"?"nvim":i==="nerd-font"?"Nerd Font":"tmux"}c(f,"toolLabel");class ${static{c(this,"DependenciesPanel")}plans;onChange;selectedTools=new Set;index=0;constructor(t,s){this.plans=t,this.onChange=s;for(const n of t)!n.installed&&n.autoInstall&&this.selectedTools.add(n.tool);const e=t.findIndex(n=>!n.installed);this.index=e>=0?e:0}badge(){const t=this.plans.filter(s=>!s.installed).length;return t===0?"\u2713":`${t} missing`}get selected(){return this.plans.filter(t=>!t.installed&&this.selectedTools.has(t.tool))}current(){return this.plans[this.index]}handleInput(t,s){if(!s)return!1;if(s("crtr.setup.list-down",t)||s("crtr.setup.list-up",t)){const e=this.plans.map((o,d)=>({tool:o,index:d})).filter(({tool:o})=>!o.installed);if(e.length===0)return!0;const n=e.findIndex(({index:o})=>o===this.index),r=s("crtr.setup.list-down",t)?1:-1;this.index=e[((n>=0?n:0)+r+e.length)%e.length].index}else if(s("crtr.setup.toggle",t)){const e=this.current();e&&!e.installed&&(this.selectedTools.has(e.tool)?this.selectedTools.delete(e.tool):this.selectedTools.add(e.tool))}else return!1;return this.onChange(),!0}render(t){const s=[a(`${l.fg("accent",l.bold("System deps"))}${l.fg("dim","  tmux + nvim + Nerd Font check")}`,t)];for(const[e,n]of this.plans.entries()){const r=e===this.index,o=r?l.fg("accent","\u25B6"):l.fg("dim"," ");if(n.installed){s.push(a(`${o} ${l.fg("success","\u2713 installed")} ${l.fg("muted",f(n.tool))}`,t));continue}const d=this.selectedTools.has(n.tool)?l.fg("success","[x]"):l.fg("dim","[ ]"),u=n.command??n.hint,h=r?l.fg("accent",`Install ${f(n.tool)}`):`Install ${f(n.tool)}`;s.push(a(`${o} ${d} ${h} ${l.fg("dim","\u2014")} ${l.fg("muted",u)} ${l.fg("warning","not installed")}`,t))}return s}}export{$ as DependenciesPanel};

package/dist/commands/sys/panels/keybindings-panel.d.ts

@@ -0,0 +1,56 @@
+import { type BindingId, type BindingResolution } from '../../../core/keybindings/index.js';
+export declare class KeybindingsPanel {
+    private readonly openingBindings;
+    private readonly terminalRows;
+    private readonly onChange;
+    private readonly keyInput;
+    private readonly keyDraft;
+    private keyIndex;
+    private keyFieldIndex;
+    private keyScroll;
+    private keyFilter;
+    private filteringKeys;
+    private editingKey;
+    private keyEditError;
+    private keyDiagnostics;
+    private keyConfirm;
+    private keyNotice;
+    private keyTmuxOccupancy;
+    private _focused;
+    constructor(openingBindings: BindingResolution<BindingId>, rawKeybindings: unknown, rawTmuxPassthrough: unknown, terminalRows: () => number, onChange: () => void);
+    set focused(value: boolean);
+    get focused(): boolean;
+    get dirty(): boolean;
+    badge(): string;
+    get takesPriorityInput(): boolean;
+    requestDiscard(): void;
+    private invalidate;
+    private matches;
+    private label;
+    private filteredKeybindings;
+    private selectedKeyRow;
+    private selectedKeybinding;
+    private tmuxPassthroughOffer;
+    private toggleTmuxPassthrough;
+    private moveKey;
+    private moveKeyField;
+    private keyViewportLines;
+    private keyPageSize;
+    private beginKeyEdit;
+    private commitKeyEdit;
+    private cancelKeyEdit;
+    private saveKeybindings;
+    private refreshTmuxBindingsAfterSave;
+    private confirmKeyAction;
+    private handleKeybindingsInput;
+    private keyRowMessage;
+    /** Number of lines needed to keep the active paired field legible. A narrow
+     *  row stacks the action and field instead of sacrificing the action name,
+     *  selected-field identity, or value to fixed columns. */
+    private keyRowBodyLineCount;
+    private keyLineCost;
+    private renderKeybindings;
+    handleInput(data: string): boolean;
+    render(width: number, _height?: number): string[];
+    footerHint(): string;
+}

package/dist/commands/sys/panels/keybindings-panel.js

@@ -0,0 +1 @@
+var Z=Object.defineProperty;var O=(M,e)=>Z(M,"name",{value:e,configurable:!0});import{Input as ee,matchesKey as ie,truncateToWidth as h,visibleWidth as u}from"@earendil-works/pi-tui";import{BINDING_CATALOG as j,formatBinding as S,formatGesture as te,formatMovePair as se,isAttachPaneBinding as ne,matchesPiTuiInput as re,persistUserKeybindings as de,KeybindingConcurrentEditError as oe,KeybindingValidationError as le}from"../../../core/keybindings/index.js";import{installTmuxBindings as ae,occupiedTmuxRootGestures as he}from"../../../core/runtime/tmux-chrome.js";import{SetupKeybindingsDraft as ce}from"../setup-core.js";import{padAnsi as q,theme as n}from"../../../core/tui/panel.js";function ue(){const M=new Map(j.map(i=>[i.id,i])),e=new Set,t=[];for(const i of j){if(e.has(i.id))continue;if(i.pair===void 0){t.push({group:i.group,name:i.name,description:i.description,fields:[{definition:i}]}),e.add(i.id);continue}const s=M.get(i.pair.pairedId);if(s?.pair?.pairedId!==i.id||s.pair.field===i.pair.field)throw new Error(`invalid keybinding pair metadata for ${i.id}`);const a=[i,s],o=a.find(l=>l.pair?.field==="menu"),f=a.find(l=>l.pair?.field!=="menu");if(o===void 0||f===void 0)throw new Error(`incomplete keybinding pair for ${i.id}`);const r=f.pair?.field==="global"?"Global":"Direct";t.push({group:o.group,name:o.name,description:o.description,fields:[{label:"Menu",definition:o},{label:r,definition:f}]}),e.add(o.id),e.add(f.id)}return t}O(ue,"buildSetupKeybindingRows");const W=ue();class be{static{O(this,"KeybindingsPanel")}openingBindings;terminalRows;onChange;keyInput=new ee;keyDraft;keyIndex=0;keyFieldIndex=0;keyScroll=0;keyFilter="";filteringKeys=!1;editingKey=null;keyEditError;keyDiagnostics=[];keyConfirm=null;keyNotice;keyTmuxOccupancy;_focused=!1;constructor(e,t,i,s,a){this.openingBindings=e,this.terminalRows=s,this.onChange=a,this.keyDraft=new ce(t,i),this.keyDiagnostics=this.keyDraft.resolution().diagnostics}set focused(e){this._focused=e,this.keyInput.focused=e&&this.editingKey!==null}get focused(){return this._focused}get dirty(){return this.keyDraft.dirty}badge(){return String(W.length)}get takesPriorityInput(){return this.editingKey!==null||this.filteringKeys||this.keyConfirm!==null}requestDiscard(){this.keyDraft.dirty&&(this.keyConfirm="discard",this.invalidate())}invalidate(){this.onChange()}matches(e,t){return re(this.openingBindings,e,t,(i,s)=>ie(i,s))}label(e){return S(this.openingBindings,e)}filteredKeybindings(){const e=this.keyDraft.resolution(),t=this.keyFilter.trim().toLowerCase();return t===""?W:W.filter(i=>[i.name,i.group,i.description,...i.fields.flatMap(s=>[s.label??"",s.definition.id,s.definition.name,s.definition.description,S(e,s.definition.id)])].some(s=>s.toLowerCase().includes(t)))}selectedKeyRow(){const e=this.filteredKeybindings();if(e.length===0)return;this.keyIndex=Math.max(0,Math.min(this.keyIndex,e.length-1));const t=e[this.keyIndex];return this.keyFieldIndex=Math.max(0,Math.min(this.keyFieldIndex,t.fields.length-1)),t}selectedKeybinding(){return this.selectedKeyRow()?.fields[this.keyFieldIndex]?.definition}tmuxPassthroughOffer(){const e=this.selectedKeybinding();if(e===void 0||!ne(e))return;const t=this.keyDraft.resolution().gestures(e.id),i=t.join("\0");(this.keyTmuxOccupancy?.id!==e.id||this.keyTmuxOccupancy.expression!==i)&&(this.keyTmuxOccupancy={id:e.id,expression:i,gestures:he(t)});const s=this.keyTmuxOccupancy.gestures[0];return s===void 0?void 0:{id:e.id,gesture:s}}toggleTmuxPassthrough(){const e=this.tmuxPassthroughOffer();return e===void 0?!1:(this.keyDraft.toggleTmuxPassthrough(e.id),this.keyTmuxOccupancy=void 0,this.keyNotice=void 0,this.invalidate(),!0)}moveKey(e){const t=this.filteredKeybindings();if(t.length===0)return;this.keyIndex=Math.max(0,Math.min(t.length-1,this.keyIndex+e)),this.keyFieldIndex=Math.min(this.keyFieldIndex,t[this.keyIndex].fields.length-1);const i=this.keyPageSize();this.keyIndex<this.keyScroll&&(this.keyScroll=this.keyIndex),this.keyIndex>=this.keyScroll+i&&(this.keyScroll=this.keyIndex-i+1),this.keyEditError=void 0,this.invalidate()}moveKeyField(e){const t=this.selectedKeyRow();t!==void 0&&(this.keyFieldIndex=Math.max(0,Math.min(t.fields.length-1,this.keyFieldIndex+e)),this.keyEditError=void 0,this.invalidate())}keyViewportLines(){return Math.max(4,this.terminalRows()-11)}keyPageSize(){return Math.max(3,this.keyViewportLines()-4)}beginKeyEdit(){const e=this.selectedKeybinding();if(e){if(this.keyDraft.hasInvalidRoot()){this.keyNotice=`Saved keybindings root is invalid \u2014 ${this.label("crtr.setup.keybindings.reset-all")} (reset all) before editing.`,this.invalidate();return}this.editingKey=e.id,this.keyInput.setValue(this.keyDraft.expression(e.id)),this.keyInput.handleInput(""),this.keyInput.focused=this.focused,this.keyEditError=void 0,this.invalidate()}}commitKeyEdit(){if(this.editingKey===null)return;const e=this.keyDraft.edit(this.editingKey,this.keyInput.getValue());if(!e.ok){this.keyEditError=e.diagnostics[0]?.message??"Invalid keybinding",this.keyDiagnostics=e.diagnostics,this.invalidate();return}this.editingKey=null,this.keyInput.focused=!1,this.keyEditError=void 0,this.keyDiagnostics=this.keyDraft.resolution().diagnostics,this.keyNotice=void 0,this.invalidate()}cancelKeyEdit(){this.editingKey=null,this.keyInput.focused=!1,this.keyEditError=void 0,this.keyDiagnostics=this.keyDraft.resolution().diagnostics,this.invalidate()}saveKeybindings(){const e=this.keyDraft.resolution();this.keyDiagnostics=e.diagnostics;const t=e.diagnostics.filter(i=>i.severity==="error");if(t.length>0){this.keyNotice=t[0].message,this.invalidate();return}try{const i=de(this.keyDraft.overrides(),{expectedKeybindings:this.keyDraft.expectedKeybindings(),tmuxPassthrough:this.keyDraft.tmuxPassthrough(),expectedTmuxPassthrough:this.keyDraft.expectedTmuxPassthrough()});this.keyDraft.markSaved(i.overrides,i.tmuxPassthrough),this.keyNotice="Saved. Reload attach and reopen active views to apply changes; refreshing tmux\u2026",this.refreshTmuxBindingsAfterSave().catch(s=>{this.keyNotice=`Saved, but tmux refresh failed: ${s instanceof Error?s.message:String(s)}`,this.invalidate()})}catch(i){i instanceof oe?this.keyNotice="Keybindings changed on disk. Reopen setup before saving.":i instanceof le?(this.keyDiagnostics=i.diagnostics,this.keyNotice=i.message):this.keyNotice=i instanceof Error?i.message:String(i)}this.invalidate()}async refreshTmuxBindingsAfterSave(){const e=ae(),t=e.diagnostics.filter(i=>i.code==="occupied");e.ok&&t.length===0?this.keyNotice="Saved and applied to tmux. Reload attach and reopen active views.":e.ok?this.keyNotice=`Saved; tmux kept occupied keys: ${t.map(i=>i.message).join("; ")}`:this.keyNotice=`Saved, but tmux refresh failed: ${e.diagnostics.find(i=>i.code==="tmux-error")?.message??"tmux unavailable"}`,this.invalidate()}confirmKeyAction(){this.keyConfirm==="reset-all"?(this.keyDraft.resetAll(),this.keyDiagnostics=[],this.keyNotice="All rows reset to catalog defaults. Press save to write."):this.keyConfirm==="discard"&&(this.keyDraft.discard(),this.keyDiagnostics=this.keyDraft.resolution().diagnostics,this.keyNotice="Unsaved keybinding changes discarded."),this.keyConfirm=null,this.invalidate()}handleKeybindingsInput(e){if(this.keyConfirm!==null){this.matches("crtr.setup.confirm.accept",e)?this.confirmKeyAction():this.matches("crtr.setup.confirm.back",e)&&(this.keyConfirm=null,this.invalidate());return}if(this.editingKey!==null){if(this.matches("crtr.setup.keybindings.commit-edit",e)){this.commitKeyEdit();return}if(this.matches("crtr.setup.keybindings.cancel-edit",e)){this.cancelKeyEdit();return}if(this.matches("crtr.setup.keybindings.page-up",e)){this.moveKey(-this.keyPageSize());return}if(this.matches("crtr.setup.keybindings.page-down",e)){this.moveKey(this.keyPageSize());return}this.keyInput.handleInput(e),this.invalidate();return}if(this.filteringKeys){this.matches("crtr.setup.keybindings.filter-clear",e)?(this.keyFilter="",this.filteringKeys=!1,this.keyIndex=0,this.keyScroll=0):this.matches("crtr.setup.keybindings.edit",e)?this.filteringKeys=!1:this.matches("crtr.setup.keybindings.filter-delete",e)?(this.keyFilter=this.keyFilter.slice(0,-1),this.keyIndex=0,this.keyScroll=0):e.length===1&&e.charCodeAt(0)>=32&&(this.keyFilter+=e,this.keyIndex=0,this.keyScroll=0),this.invalidate();return}if(this.matches("crtr.setup.keybindings.filter",e))this.filteringKeys=!0;else if(this.matches("crtr.setup.list-down",e)){this.moveKey(1);return}else if(this.matches("crtr.setup.list-up",e)){this.moveKey(-1);return}else if(this.matches("crtr.setup.cell-previous",e)){this.moveKeyField(-1);return}else if(this.matches("crtr.setup.cell-next",e)){this.moveKeyField(1);return}else if(this.matches("crtr.setup.keybindings.page-up",e)){this.moveKey(-this.keyPageSize());return}else if(this.matches("crtr.setup.keybindings.page-down",e)){this.moveKey(this.keyPageSize());return}else if(this.matches("crtr.setup.toggle",e)){if(this.toggleTmuxPassthrough())return}else if(this.matches("crtr.setup.keybindings.edit",e)){this.beginKeyEdit();return}else if(this.matches("crtr.setup.keybindings.unbind",e)){const t=this.selectedKeybinding();if(t){const i=this.keyDraft.unbind(t.id);this.keyDiagnostics=i.ok?this.keyDraft.resolution().diagnostics:i.diagnostics,this.keyEditError=i.ok?void 0:i.diagnostics[0]?.message}}else if(this.matches("crtr.setup.keybindings.reset-row",e)){const t=this.selectedKeybinding();t&&this.keyDraft.resetRow(t.id),this.keyDiagnostics=this.keyDraft.resolution().diagnostics}else if(this.matches("crtr.setup.keybindings.reset-all",e))this.keyConfirm="reset-all";else if(this.matches("crtr.setup.keybindings.save",e)){this.saveKeybindings();return}else if(this.matches("crtr.setup.keybindings.discard",e))this.keyFilter!==""?(this.keyFilter="",this.keyIndex=0,this.keyScroll=0,this.keyNotice=void 0):this.keyDraft.dirty?this.keyConfirm="discard":this.keyNotice="No unsaved keybinding changes.";else return;this.invalidate()}keyRowMessage(e,t){const i=e[t],s=t===this.keyIndex,a=i.fields.find(r=>r.definition.id===this.editingKey);if(!s&&a===void 0)return;if(a!==void 0&&this.keyEditError)return{label:a.label,message:this.keyEditError};const o=this.keyDiagnostics.find(r=>i.fields.some(l=>r.bindingId===l.definition.id||r.relatedBindingIds?.includes(l.definition.id)));return o===void 0?void 0:{label:i.fields.find(r=>o.bindingId===r.definition.id||o.relatedBindingIds?.includes(r.definition.id))?.label,message:o.message}}keyRowBodyLineCount(e,t,i,s){const a=e.fields.findIndex(x=>x.definition.id===this.editingKey);if(!(a>=0||t===this.keyIndex)||e.fields.length<2)return 1;const f=a>=0?a:Math.min(this.keyFieldIndex,e.fields.length-1),r=e.fields[f],l=a>=0?`> ${this.keyInput.getValue()}`:S(i,r.definition.id),C=`[${r.label}]`;return 3+u(e.name)+1+u(C)+1+u(l)<=s?1:u(r.label??"")+1+u(l)<=s?2:3}keyLineCost(e,t,i,s,a){let o=0,f;for(let r=t;r<=i;r+=1){const l=e[r];o+=(l.group!==f?1:0)+this.keyRowBodyLineCount(l,r,s,a)+(this.keyRowMessage(e,r)?1:0)+(r===this.keyIndex&&this.tmuxPassthroughOffer()!==void 0?1:0),f=l.group}return o}renderKeybindings(e){const t=[],i=this.filteredKeybindings(),s=this.keyDraft.resolution(),a=this.keyViewportLines(),o=this.keyPageSize(),f=Math.max(0,i.length-o);this.keyScroll=Math.max(0,Math.min(this.keyScroll,f)),this.keyIndex<this.keyScroll&&(this.keyScroll=this.keyIndex),this.keyIndex>=this.keyScroll+o&&(this.keyScroll=Math.max(0,this.keyIndex-o+1));const r=this.editingKey!==null?i.findIndex(y=>y.fields.some(d=>d.definition.id===this.editingKey)):-1,l=r>=0?r:this.keyIndex;if(l>=0)for(l<this.keyScroll&&(this.keyScroll=l);this.keyScroll<l&&this.keyLineCost(i,this.keyScroll,l,s,e)>a;)this.keyScroll+=1;const C=this.keyDraft.dirty?n.fg("warning","unsaved"):n.fg("success","saved");if(t.push(h(`${n.fg("accent",n.bold("Keybindings"))}${n.fg("dim","  crouter-owned only \xB7 ")}${C}`,e)),t.push(h(n.fg("dim",this.keyFilter===""?`${i.length} actions`:`${i.length} matches for \u201C${this.keyFilter}\u201D${this.filteringKeys?"":` \xB7 ${this.label("crtr.setup.keybindings.discard")} clears filter`}`),e)),s.diagnostics.some(y=>y.code==="invalid-keybindings")&&t.push(h(n.fg("warning",n.bold(`Saved keybindings root is invalid \u2014 ${this.label("crtr.setup.keybindings.reset-all")} (reset all) to clear it before editing.`)),e)),i.length===0)return t.push(""),t.push(h(n.fg("warning","No matching keybindings."),e)),t;const N=Math.max(10,Math.min(26,Math.floor(e*.28)));let E=0,x;for(let y=this.keyScroll;y<i.length;y+=1){const d=i[y],p=y===this.keyIndex,A=d.fields.findIndex(c=>c.definition.id===this.editingKey),R=A>=0?A:p?Math.min(this.keyFieldIndex,d.fields.length-1):0,v=this.keyRowMessage(i,y),F=p?this.tmuxPassthroughOffer():void 0,T=this.keyRowBodyLineCount(d,y,s,e),V=(d.group!==x?1:0)+T+(v?1:0)+(F?1:0);if(E>0&&E+V>a)break;d.group!==x&&(t.push(h(n.fg("accent",d.group),e)),x=d.group);const z=p?n.fg("accent","\u25B6"):" ",G=d.fields.some(c=>s.get(c.definition.id).source==="user")?n.fg("warning","\u2022"):" ";if(T>1){const c=d.fields[R],g=c.definition.id===this.editingKey,I=g?`> ${this.keyInput.getValue()}`:S(s,c.definition.id),m=`[${c.label}]`,B=c.label??"";if(t.push(h(`${z}${G} ${p?n.fg("accent",d.name):d.name}`,e)),T===2){const k=u(m)+1+u(I)<=e?m:B,$=n.fg("accent",n.bold(k)),D=" ".repeat(Math.max(0,Math.min(3,e-u(k)-1-u(I)))),w=Math.max(1,e-u(D)-u($)-1),L=g?this.keyInput.render(w)[0]??"":I;t.push(h(`${D}${$} ${L}`,e))}else{const K=n.fg("accent",n.bold(m)),k=" ".repeat(Math.max(0,Math.min(3,e-u(K)))),$=g?this.keyInput.render(e)[0]??"":I;t.push(h(`${k}${K}`,e)),t.push(h($,e))}}else{const c=q(p?n.fg("accent",d.name):d.name,N),g=Math.max(1,e-4-N),m=d.fields.length===1||g>=28?d.fields:[d.fields[R]],B=d.fields.length>1?Math.min(61,g):Math.min(34,g),K=Math.max(0,m.length-1),k=Math.max(1,Math.floor((B-K)/m.length)),D=m.map(b=>{const H=d.fields.indexOf(b),_=b.definition.id===this.editingKey,Y=_||p&&H===R,P=b.label===void 0?"":Y?n.fg("accent",n.bold(`[${b.label}]`)):n.fg("dim",`${b.label}:`),J=u(P),Q=Math.max(1,k-J-(P===""?0:1)),U=_?this.keyInput.render(Q)[0]??"":S(s,b.definition.id),X=P===""?U:`${P} ${U}`;return q(h(X,k),k)}).join(" "),w=g-u(D)-1,L=w>=16?` ${n.fg("dim",h(d.description,w))}`:"";t.push(h(`${z}${G} ${c} ${D}${L}`,e))}if(F){const c=this.keyDraft.usesTmuxPassthrough(F.id)?n.fg("success","[x]"):n.fg("dim","[ ]");t.push(h(`   ${c} ${n.fg("accent",`Use tmux's ${te(F.gesture)} here`)}`,e))}if(v){const c=v.label===void 0?"":`${v.label}: `;t.push(h(n.fg("warning",`   ${c}${v.message}`),e))}E+=V}return this.keyConfirm!==null&&(t.push(""),t.push(h(n.fg("warning",n.bold(this.keyConfirm==="reset-all"?"Reset every keybinding to its catalog default?":"Discard every unsaved keybinding change?")),e))),this.keyNotice&&t.push(h(n.fg("muted",this.keyNotice),e)),t}handleInput(e){return this.handleKeybindingsInput(e),!0}render(e,t){return this.renderKeybindings(e)}footerHint(){return this.keyConfirm!==null?`${this.label("crtr.setup.confirm.accept")} confirm \xB7 ${this.label("crtr.setup.confirm.back")} go back`:this.editingKey!==null?`type gestures separated by commas \xB7 ${this.label("crtr.setup.keybindings.commit-edit")} commit \xB7 ${this.label("crtr.setup.keybindings.cancel-edit")} cancel \xB7 ${this.label("crtr.setup.keybindings.page-up")}/${this.label("crtr.setup.keybindings.page-down")} scroll`:this.filteringKeys?`filter: ${this.keyFilter||"type to search"} \xB7 ${this.label("crtr.setup.keybindings.edit")} keep \xB7 ${this.label("crtr.setup.keybindings.filter-delete")} delete \xB7 ${this.label("crtr.setup.keybindings.filter-clear")} clear`:`${se(this.openingBindings,"crtr.setup.list-down","crtr.setup.list-up")} move \xB7 ${this.label("crtr.setup.cell-previous")}/${this.label("crtr.setup.cell-next")} field \xB7 ${this.label("crtr.setup.keybindings.edit")} edit \xB7 ${this.tmuxPassthroughOffer()===void 0?"":`${this.label("crtr.setup.toggle")} tmux \xB7 `}${this.label("crtr.setup.keybindings.unbind")} disable \xB7 ${this.label("crtr.setup.keybindings.reset-row")} reset \xB7 ${this.label("crtr.setup.keybindings.reset-all")} reset all \xB7 ${this.label("crtr.setup.keybindings.filter")} filter \xB7 ${this.label("crtr.setup.keybindings.save")} save \xB7 ${this.label("crtr.setup.keybindings.discard")} ${this.keyFilter!==""?"clear filter":"discard"}`}}export{be as KeybindingsPanel};