@north-light/cli 0.0.0 → 0.3.414

package/dist/core/layout-migrate/stores.d.ts

@@ -0,0 +1,30 @@
+import { profileSpace } from '../layout.js';
+import type { LayoutMigration } from './index.js';
+export interface ProfileFolder {
+    id: string;
+    source: string;
+    /** No scoped-state row: the whole folder moves to `files`. */
+    target: ReturnType<typeof profileSpace> | null;
+    files: string;
+    /** Entries with no slot in the new layout, moved under `files` at the same name. */
+    extras: string[];
+}
+/**
+ * A profile is its scoped-state row; the row is authoritative even when an
+ * interrupted run already removed the old profile folder. There is no profile
+ * folder in the new layout: the old folder's own path (the profile's
+ * scope_owners.root) becomes its memory folder. What else the folder holds is
+ * the profile's own files and moves to `apps/<app>/files/profiles/<id>/`; a
+ * folder with no row moves there whole, under the terminal app.
+ */
+export declare function profileFolders(migration: LayoutMigration): {
+    folders: ProfileFolder[];
+    junk: string[];
+    aside: string[];
+};
+export declare function memoryAndProfiles(migration: LayoutMigration): void;
+export declare function conversations(migration: LayoutMigration): void;
+export declare function repairMovedRepositories(migration: LayoutMigration): void;
+export declare function worktrees(migration: LayoutMigration): void;
+/** Every resolution the real run would make, computed without changing anything. */
+export declare function previewStores(migration: LayoutMigration): void;

package/dist/core/layout-migrate/stores.js

@@ -0,0 +1,3 @@
+var oe=Object.defineProperty;var h=(e,t)=>oe(e,"name",{value:t,configurable:!0});import{DatabaseSync as z}from"node:sqlite";import{closeSync as se,copyFileSync as re,existsSync as u,realpathSync as ne,fsyncSync as pe,lstatSync as $,mkdirSync as B,openSync as ce,readFileSync as T,readdirSync as E,renameSync as M,rmdirSync as F,unlinkSync as D,writeFileSync as J}from"node:fs";import{execFileSync as Z}from"node:child_process";import{basename as x,dirname as R,isAbsolute as q,join as n,relative as k,resolve as C,sep as P}from"node:path";import{profileSpace as ae}from"../layout.js";import{isJunkFile as j,movePath as S,sameFile as A,setAside as O,setAsidePath as H}from"./index.js";import{rewriteBodyPaths as ie}from"./stored-paths.js";function L(e,t){Z("git",["-c",`safe.directory=${e}`,"-C",e,...t],{stdio:"pipe"})}h(L,"gitInRepo");function _(e,t){const{root:s,targetRoot:p}=t.map.old;return C(s,k(p,e))}h(_,"physical");function N(e,t=!1){const{old:s}=e.map,p=n(s.canvas,"canvas.db"),o=n(s.root,"runtime","canvas.db"),r=u(p)?p:o;return u(r)&&$(r).size>0?new z(r,{readOnly:!t||e.dryRun}):null}h(N,"canvasDb");function W(e){return new Map(e.prepare("SELECT node_id, grantee FROM nodes").all().map(({node_id:t,grantee:s})=>{const p=s==="user:local"?"terminal":s.startsWith("app:")?s.slice(4):"";if(!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(p))throw new Error(`node ${t} has no valid app`);return[t,p]}))}h(W,"nodeApps");function Y(e,t,s){return n(s.map.old.targetRoot,"apps",e,"files","profiles",t)}h(Y,"profileFiles");function G(e,t,s,p){if(!u(e))return;if(!u(t)){S(e,t,p);return}const o=$(e),r=$(t);if(o.isDirectory()&&r.isDirectory()){for(const d of E(e))G(n(e,d),n(t,d),n(s,d),p);F(e);return}if(o.isFile()&&r.isFile()&&A(e,t)){D(e);return}const a=_(s,p);p.dryRun||S(e,a,p),p.resolutions.push(`profile-home: ${t} differs from the profile's ${e}; kept the app home's copy, moved the profile's to ${a}`)}h(G,"mergeHome");function K(e,t,s,p){if(!u(e)||!u(t))return;const o=$(e),r=$(t);if(o.isDirectory()&&r.isDirectory()){for(const a of E(e))K(n(e,a),n(t,a),n(s,a),p);return}o.isFile()&&r.isFile()&&A(e,t)||p.resolutions.push(`profile-home: ${t} differs from the profile's ${e}; kept the app home's copy, moved the profile's to ${_(s,p)}`)}h(K,"previewHome");function Q(e,t,s){e.bodyPaths.some(([p])=>p===t)||e.bodyPaths.push([t,s])}h(Q,"bodyPath");function V(e){const{map:t}=e,s=[n(t.old.scope,"operations.db"),n(t.old.root,"runtime","scope","operations.db")].find(u),p=s?new z(s,{readOnly:!0}):null,o=new Map;try{if(p&&p.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='profiles'").get())for(const i of p.prepare("SELECT id, grantee FROM profiles").all())o.set(i.id,i.grantee)}finally{p?.close()}const r=new Map;for(const[i,c]of o){const w=c==null||c==="user:local"?"terminal":c.startsWith("app:")?c.slice(4):"",f=ae(w,i),y=n(t.old.storedScope,"profiles",i);t.retire(y,f.memory),t.add(n(y,"memory"),f.memory),t.add(n(y,"env.json"),f.env),t.add(n(y,"home"),f.home),r.set(i,{target:f,app:w})}const a=n(t.old.scope,"profiles"),d={folders:[],junk:[],aside:[]};if(!u(a))return d;for(const i of E(a)){const c=n(a,i);if(!$(c).isDirectory()){(j(i)?d.junk:d.aside).push(c);continue}if(i===".locks"){for(const l of E(c)){const v=n(c,l);!(l.endsWith(".lock")&&$(v).isFile())&&!j(l)&&d.aside.push(v)}continue}const w=n(t.old.storedScope,"profiles",i),f=r.get(i);if(!f){const l=Y("terminal",i,e);t.add(w,l),Q(e,w,l),d.folders.push({id:i,source:c,target:null,files:l,extras:[]});continue}const y=Y(f.app,i,e),b=[];for(const l of E(c)){const v=$(n(c,l));(l==="memory"||l==="home"?v.isDirectory():l==="env.json"||l==="profile.json"||l.endsWith(".lock")?v.isFile():j(l))||(b.push(l),t.add(n(w,l),n(y,l)),Q(e,n(w,l),n(y,l)))}d.folders.push({id:i,source:c,target:f.target,files:y,extras:b})}return d}h(V,"profileFolders");function X(e,t){for(const s of e.folders){s.target||t.resolutions.push(`profile-folder: ${s.source} has no profile row; moved whole to ${_(s.files,t)}`);for(const p of s.extras)t.resolutions.push(`profile-extra: ${n(s.source,p)} moved to ${_(n(s.files,p),t)}`)}for(const s of e.junk)t.resolutions.push(`profile-leftover: deleted ${s} (not profile data)`);for(const s of e.aside)t.resolutions.push(`profile-leftover: ${s} is not a profile; moved to ${H(t,"profiles",x(s))}`)}h(X,"profileLines");function Fe(e){const{map:t}=e;S(n(t.old.scope,"memory"),n(t.old.root,"user","memory"),e);const s=N(e);if(s)try{for(const[r,a]of W(s)){const d=n(t.old.root,"apps",a,"memory","nodes",r);S(n(t.old.root,"apps",a,"nodes",r,"context","memory"),d,e),S(n(t.old.canvas,"nodes",r,"context","memory"),d,e)}}finally{s.close()}const p=V(e);X(p,e);for(const{source:r,target:a,files:d,extras:i}of p.folders){if(!a){S(r,_(d,e),e,!0);continue}for(const c of i)S(n(r,c),_(n(d,c),e),e);S(n(r,"memory"),_(a.memory,e),e),S(n(r,"env.json"),_(a.env,e),e),G(n(r,"home"),_(a.home,e),n(d,"home"),e);for(const c of E(r))D(n(r,c));F(r),e.moved++,e.changes.push(`${r} (removed)`)}for(const r of p.junk)D(r);for(const r of p.aside)O(r,"profiles",e);const o=n(t.old.scope,"profiles");if(u(o)){const r=n(o,".locks");if(u(r)){for(const a of E(r))D(n(r,a));F(r)}F(o)}}h(Fe,"memoryAndProfiles");function de(e,t,s,p){if(u(e)){if(!$(e).isFile())throw new Error(`session path is not a file: ${e}`);if(B(R(t),{recursive:!0}),u(t)){if($(t).isFile()&&A(e,t))return;const o=O(t,"replaced",s,k(s.map.old.root,t));s.resolutions.push(`stray-destination: ${t} predates the migration; moved it to ${o} and put ${e} in its place`)}if(p){const o=n(R(t),`.${x(t)}.migrating`);u(o)&&D(o),re(e,o);const r=ce(o,"r");try{pe(r)}finally{se(r)}if(!A(e,o))throw new Error(`session copy verification failed: ${e}`);M(o,t),s.moved++,s.changes.push(`${e} -> ${t} (source retained)`);return}M(e,t),s.moved++,s.changes.push(`${e} -> ${t}`)}}h(de,"moveSession");function le(e,t,s){const p=new Set(t.prepare("SELECT s.transcript_path AS path FROM sessions s JOIN nodes n ON n.node_id = s.node_id WHERE s.unbound_at IS NULL AND n.status IN ('active', 'idle') AND s.transcript_path IS NOT NULL").all().map(r=>r.path)),o=e.dryRun?null:t.prepare("UPDATE sessions SET transcript_path = NULL WHERE transcript_path = ?");for(const r of s)if(!(u(r.source)||u(_(r.destination,e)))){if(p.has(r.transcript_path)){e.resolutions.push(`lost-transcript: ${r.transcript_path} is missing but is a live node's current session; kept its path`);continue}o?.run(r.transcript_path),e.resolutions.push(`lost-transcript: ${r.transcript_path} is missing from both paths; cleared the session's transcript path`)}}h(le,"lostTranscripts");function fe(e){const t=N(e,!0);if(t)try{const s=W(t),p=t.prepare("SELECT session_id, node_id, transcript_path FROM sessions WHERE transcript_path IS NOT NULL ORDER BY session_id, (unbound_at IS NULL) DESC, created_at DESC, rowid DESC").all(),o=new Map,r=new Map,a=new Map;for(const c of p){o.has(c.session_id)||o.set(c.session_id,c.node_id),a.set(c.transcript_path,(a.get(c.transcript_path)??0)+1);const w=r.get(c.transcript_path)??new Set;w.add(c.session_id),r.set(c.transcript_path,w)}const d=new Set,i=[];for(const{session_id:c,node_id:w,transcript_path:f}of p){if(d.has(f))continue;if(d.add(f),r.get(f).size!==1)throw new Error(`two conversations share a transcript: ${f}`);const y=a.get(f)>1?o.get(c):w,b=s.get(y);if(!b)throw new Error(`session belongs to unknown node: ${y}`);if(!q(f))throw new Error(`session path is not absolute: ${f}`);const l=n(e.map.old.targetRoot,"apps",b,"conversations",y,x(f));if(f===l)continue;const v=f===e.map.old.storedAgent||f.startsWith(e.map.old.storedAgent+P),m=v?n(e.map.old.agent,k(e.map.old.storedAgent,f)):f;i.push({transcript_path:f,destination:l,source:m,retain:process.platform==="linux"&&v})}le(e,t,i);for(const{transcript_path:c,destination:w}of i)e.map.add(c,w);if(e.dryRun)return;for(const{destination:c,source:w,retain:f}of i)de(w,_(c,e),e,f)}finally{t.close()}}h(fe,"conversations");function De(e){if(process.platform!=="linux")return;const t=N(e);if(t)try{const s=t.prepare("SELECT node_id, path, repo_root FROM worktrees").all(),p=W(t);for(const o of s){const r=e.map.mapPath(o.repo_root);if(r===o.repo_root)continue;const a=p.get(o.node_id);if(!a)throw new Error(`worktree belongs to unknown node: ${o.node_id}`);const d=_(n(e.map.old.targetRoot,"apps",a,"nodes",o.node_id,"worktree"),e);if(!u(d))continue;L(_(r,e),["worktree","repair",d]);const i=o.path.startsWith(e.map.old.storedCanvas+P)?n(e.map.old.canvas,k(e.map.old.storedCanvas,o.path)):o.path;I(i,d,e)}}finally{t.close()}}h(De,"repairMovedRepositories");function I(e,t,s){const p=h(o=>{for(const r of E(o)){const a=n(o,r);if(r===".git"&&a!==n(t,".git")&&$(a).isFile()){const d=T(a,"utf8");if(!d.startsWith("gitdir: "))throw new Error(`invalid submodule git link: ${a}`);const i=d.slice(8).trim(),c=C(R(a),i),w=n(e,k(t,a)),f=C(R(w),i),y=u(c)?c:f;if(!u(y))throw new Error(`submodule git directory missing: ${w}`);const b=s?.map.mapPath(y)??y,l=s&&b!==y?_(b,s):y;if(!u(l))throw new Error(`moved submodule git directory missing: ${l}`);c!==l&&J(a,`gitdir: ${k(R(a),l)}
+`);const v=n(l,"config"),m=T(v,"utf8");if(!/^\s*worktree\s*=.*$/m.test(m))throw new Error(`submodule has no worktree setting: ${v}`);const te=JSON.stringify(k(l,R(a))),U=m.replace(/^(\s*worktree\s*=).*$/m,`$1 ${te}`);U!==m&&J(v,U)}else r!==".git"&&$(a).isDirectory()&&p(a)}},"visit");p(t)}h(I,"repairSubmoduleLinks");function ue(e,t){return Z("git",["-c",`safe.directory=${e}`,"-C",e,...t],{stdio:"pipe",encoding:"utf8"})}h(ue,"gitOut");function g(e){try{return ne(e)}catch{return C(e)}}h(g,"real");function he(e,t){try{const s=g(t);return ue(e,["worktree","list","--porcelain"]).split(`
+`).some(p=>p.startsWith("worktree ")&&g(p.slice(9))===s)}catch{return!1}}h(he,"registered");function we(e,t){if(!u(e))return!1;try{const s=T(n(t,".git"),"utf8");return s.startsWith("gitdir: ")?u(C(t,s.slice(8).trim())):!1}catch{return!1}}h(we,"repairable");function ee(e,t,s){s.dryRun||t.state!=="open"&&t.cleanup_state==="complete"||e.prepare("UPDATE worktrees SET state = CASE WHEN state = 'open' THEN 'closed' ELSE state END, cleanup_state = 'complete', closed_at = COALESCE(closed_at, ?) WHERE node_id = ?").run(new Date().toISOString(),t.node_id)}h(ee,"closeRow");function ye(e){const t=N(e,!0);if(t){try{const s=W(t),p=t.prepare("SELECT node_id, state, cleanup_state, path, repo_root FROM worktrees").all();for(const o of p){const r=s.get(o.node_id);if(!r)throw new Error(`worktree belongs to unknown node: ${o.node_id}`);if(!q(o.path))throw new Error(`worktree path is not absolute: ${o.path}`);const a=n(e.map.old.targetRoot,"apps",r,"nodes",o.node_id,"worktree");if(o.path===a)continue;const d=o.path===e.map.old.storedCanvas||o.path.startsWith(e.map.old.storedCanvas+P)?n(e.map.old.canvas,k(e.map.old.storedCanvas,o.path)):o.path,i=_(a,e);if(!u(d)){e.map.add(o.path,a),u(i)?!e.dryRun&&u(o.repo_root)&&(L(o.repo_root,["worktree","repair",i]),I(d,i)):o.state!=="open"&&o.cleanup_state==="complete"||(ee(t,o,e),e.resolutions.push(`missing-worktree: ${o.path} (node ${o.node_id}) is gone; closed its row`));continue}if(!he(o.repo_root,d))if(o.state==="open"&&we(o.repo_root,d))e.resolutions.push(`unregistered-worktree: ${o.path} (node ${o.node_id}) is not registered in ${o.repo_root}; relinked it with git worktree repair`),e.dryRun||L(o.repo_root,["worktree","repair",d]);else{const c=H(e,"worktrees",x(d));e.resolutions.push(`unregistered-worktree: ${o.path} (node ${o.node_id}${o.state==="open"?"":`, ${o.state}`}) is not a worktree of ${u(o.repo_root)?o.repo_root:`the missing repository ${o.repo_root}`}; ${o.state==="open"?"closed its row and ":""}moved the folder to ${c}`),e.map.redirect(o.path,n(e.map.old.targetRoot,k(e.map.old.root,c))),e.dryRun||(O(d,"worktrees",e),ee(t,o,e));continue}if(e.map.add(o.path,a),u(i)){const c=H(e,"replaced",k(e.map.old.root,i));e.resolutions.push(`stray-destination: ${i} predates the migration; moved it to ${c} and put the worktree ${d} in its place`),e.dryRun||O(i,"replaced",e,k(e.map.old.root,i))}if(!e.dryRun){B(R(i),{recursive:!0});try{L(o.repo_root,["worktree","move",d,i])}catch(c){if(!String(c.stderr??"").includes("submodule"))throw c;M(d,i),L(o.repo_root,["worktree","repair",i])}I(d,i),e.moved++,e.changes.push(`${d} -> ${i} (git worktree move)`)}}}finally{t.close()}e.dryRun||_e(e)}}h(ye,"worktrees");function _e(e){const t=n(e.map.old.canvas,"nodes");if(u(t)){for(const s of E(t)){const p=n(t,s);$(p).isDirectory()&&E(p).length===0&&F(p)}E(t).length===0&&F(t)}}h(_e,"pruneOldNodeFolders");function Ce(e){ye(e);const t=V(e);X(t,e);for(const{source:s,target:p,files:o}of t.folders)p&&K(n(s,"home"),_(p.home,e),n(o,"home"),e);fe(e),ie(e)}h(Ce,"previewStores");export{fe as conversations,Fe as memoryAndProfiles,Ce as previewStores,V as profileFolders,De as repairMovedRepositories,ye as worktrees};

package/dist/core/layout.d.ts

@@ -0,0 +1,34 @@
+export declare const LAYOUT_VERSION = "1";
+/** CRTR_HOME names the volume root, not the canvas records directory. */
+export declare function layoutRoot(): string;
+export declare function runtimeRoot(): string;
+export declare function userRoot(): string;
+export declare function appsRoot(): string;
+export declare function secretsDir(): string;
+export declare function profileSpace(app: string, id: string): {
+    memory: string;
+    env: string;
+    home: string;
+};
+export declare function socketDir(): string;
+export declare function layoutVersionFile(): string;
+export declare function userFilesRoot(): string;
+export declare function appSpace(app: string): {
+    root: string;
+    memory: string;
+    conversations: string;
+    nodes: string;
+    files: string;
+    home: string;
+    cache: string;
+};
+/** The HOME an app's processes run with. With no sandbox (a Mac) the terminal is
+ *  the person at their own machine — its grant already holds all of the person's
+ *  files and nothing at the OS level confines its bash — so it gets the person's
+ *  real home, and their keys, dotfiles and CLI logins with it. Every other app,
+ *  and the terminal wherever a sandbox exists, keeps its own app home. Callers
+ *  keep `PI_CODING_AGENT_DIR` in the app home either way. */
+export declare function appProcessHome(app: string): string;
+/** A missing version on an occupied volume is never initialized by daemon startup. */
+export declare function layoutNeedsMigration(): boolean;
+export declare function initializeEmptyLayout(): void;

package/dist/core/layout.js

@@ -0,0 +1,2 @@
+var w=Object.defineProperty;var t=(r,e)=>w(r,"name",{value:e,configurable:!0});import{existsSync as i,mkdirSync as m,readFileSync as E,statSync as R,writeFileSync as _}from"node:fs";import{homedir as S,userInfo as T}from"node:os";import{basename as p,dirname as O,isAbsolute as b,join as o,resolve as f}from"node:path";import{envHomeOverride as g}from"../shared/env.js";import{readConfig as A}from"./config.js";const l="1";function s(){const r=f(g()||(process.platform==="linux"?"/":o(S(),".crouter")));if($()&&r===z())throw new Error(`refusing to use the account's real crouter root ${r} from a node --test process; point CRTR_HOME (not only HOME) at a temporary directory`);return r}t(s,"layoutRoot");function $(){return process.env.NODE_TEST_CONTEXT!==void 0||process.execArgv.includes("--test")}t($,"runningUnderNodeTest");let c;function z(){if(c===void 0)try{c=f(T().homedir,".crouter")}catch{c=null}return c}t(z,"accountLayoutRoot");function u(){return o(s(),"runtime")}t(u,"runtimeRoot");function d(){return o(s(),"user")}t(d,"userRoot");function h(){return o(s(),"apps")}t(h,"appsRoot");function y(){return o(u(),"secrets")}t(y,"secretsDir");function M(r,e){if(!/^[a-z0-9]+(?:-[a-z0-9]+)*-[0-9a-f]{8}$/.test(e))throw new Error(`invalid profile id: ${e}`);const n=v(r);return{memory:o(n.memory,"profiles",e),env:o(y(),"env",p(n.root),e),home:n.home}}t(M,"profileSpace");function x(){return process.platform==="linux"?"/run/crtr":u()}t(x,"socketDir");function a(){return o(u(),"layout")}t(a,"layoutVersionFile");function C(){const r=A("user").paths?.user_files??(process.platform==="linux"?o(d(),"files"):O(s()));if(!b(r))throw new Error("paths.user_files must be absolute");return f(r)}t(C,"userFilesRoot");function v(r){const e=r.startsWith("app:")?r.slice(4):r;if(!/^[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(e)||e==="."||e==="..")throw new Error(`invalid app id: ${r}`);const n=o(h(),e);return{root:n,memory:o(n,"memory"),conversations:o(n,"conversations"),nodes:o(n,"nodes"),files:o(n,"files"),home:o(n,"home"),cache:o(n,"cache")}}t(v,"appSpace");function I(r){const e=v(r);return process.platform==="linux"?e.home:p(e.root)==="terminal"?C():e.home}t(I,"appProcessHome");function F(){if(process.env.CRTR_LAYOUT_REFUSE==="1")return!0;if(i(a())){if(E(a(),"utf8").trim()!==l)throw new Error("unsupported runtime layout version");return!1}const r=s(),e=process.platform==="linux"&&r==="/"&&i("/volume")?"/volume":r;return i(o(e,"canvas"))||i(o(e,"canvas.db"))?!0:i(o(u(),"canvas.db"))}t(F,"layoutNeedsMigration");function V(){if(F())throw new Error("layout_migration_required");for(const r of[u(),d(),h(),y()])m(r,{recursive:!0,mode:448});if(m(x(),{recursive:!0,mode:493}),process.platform==="linux"&&(R(x()).mode&511)!==493)throw new Error("launcher socket directory must be mode 0755");i(a())||_(a(),`${l}
+`,{flag:"wx",mode:384})}t(V,"initializeEmptyLayout");export{l as LAYOUT_VERSION,I as appProcessHome,v as appSpace,h as appsRoot,V as initializeEmptyLayout,F as layoutNeedsMigration,s as layoutRoot,a as layoutVersionFile,M as profileSpace,u as runtimeRoot,y as secretsDir,x as socketDir,C as userFilesRoot,d as userRoot};

package/dist/core/llm/body-limits.d.ts

@@ -0,0 +1,7 @@
+/** Request-body caps shared by the daemon's routes and the broker's model adapter. */
+/** The cap on a control route's JSON body (spawn, message, config, ...). */
+export declare const CONTROL_BODY_MAX_BYTES: number;
+/** The cap on a route whose body is a model context (`/v1/llm`). A conversation
+ *  carrying inline screenshots is megabytes of base64; 32 MiB is Anthropic's own
+ *  request limit, so a body past it could not be served by the vendor anyway. */
+export declare const MODEL_CONTEXT_BODY_MAX_BYTES: number;

package/dist/core/llm/body-limits.js

@@ -0,0 +1 @@
+const _=4194304,O=33554432;export{_ as CONTROL_BODY_MAX_BYTES,O as MODEL_CONTEXT_BODY_MAX_BYTES};

package/dist/core/llm/refusal.d.ts

@@ -0,0 +1,13 @@
+import type { TurnErrorDTO } from '../../api/dto/run-events.js';
+/** True when an assistant message stopped because the vendor refused it on safety grounds.
+ *  The one test both the `llm` path and a run's turn error use. */
+export declare function isSafetyRefusal(message: {
+    rawStopReason?: string;
+} | undefined): boolean;
+/** The error a run's turn reports when its last assistant message stopped with `error`. */
+export type TurnError = TurnErrorDTO;
+export declare function turnErrorOf(message: {
+    stopReason?: string;
+    errorMessage?: string;
+    rawStopReason?: string;
+}): TurnError | undefined;

package/dist/core/llm/refusal.js

@@ -0,0 +1 @@
+var t=Object.defineProperty;var r=(e,n)=>t(e,"name",{value:n,configurable:!0});const o=new Set(["refusal","sensitive","content_filter","incomplete.content_filter","content_filtered","guardrail_intervened","SAFETY","PROHIBITED_CONTENT","BLOCKLIST","SPII","RECITATION"]);function i(e){return e?.rawStopReason!==void 0&&o.has(e.rawStopReason)}r(i,"isSafetyRefusal");function u(e){if(e.stopReason==="error")return{code:i(e)?"content_refused":"model_error",message:e.errorMessage&&e.errorMessage!==""?e.errorMessage:"model request failed"}}r(u,"turnErrorOf");export{i as isSafetyRefusal,u as turnErrorOf};

package/dist/core/llm/run.d.ts

@@ -0,0 +1,60 @@
+import { type ThinkingLevel } from '@earendil-works/pi-ai/compat';
+type WireContent = string | null | Array<{
+    type: 'text';
+    text: string;
+} | {
+    type: 'image_url';
+    image_url: {
+        url: string;
+    };
+}>;
+export interface LlmRequest {
+    messages: Array<{
+        role: 'system' | 'user' | 'assistant' | 'tool';
+        content: WireContent;
+        tool_call_id?: string;
+        tool_calls?: Array<{
+            id: string;
+            function: {
+                name: string;
+                arguments: string;
+            };
+        }>;
+    }>;
+    model?: string;
+    model_policy?: 'exact' | 'substitute';
+    stream?: boolean;
+    tools?: Array<{
+        type: 'function';
+        function: {
+            name: string;
+            description?: string;
+            parameters?: Record<string, unknown>;
+        };
+    }>;
+    tool_choice?: 'auto' | 'none' | 'required' | {
+        type: 'function';
+        function: {
+            name: string;
+        };
+    };
+    reasoning_effort?: ThinkingLevel;
+    temperature?: number;
+    top_p?: number;
+    max_tokens?: number;
+    metadata?: unknown;
+    payer?: 'user' | 'app';
+    response_format?: unknown;
+    stop?: string | string[];
+    seed?: number;
+}
+export declare function parseLlmRequest(raw: unknown): LlmRequest;
+export interface LlmResult {
+    completion: Record<string, unknown>;
+    chunks: Array<Record<string, unknown>>;
+}
+export declare function runLlm(input: LlmRequest, signal?: AbortSignal, onChunk?: (chunk: Record<string, unknown>) => void, target?: {
+    cwd: string;
+    profileId: string | null;
+}): Promise<LlmResult>;
+export {};

package/dist/core/llm/run.js

@@ -0,0 +1,4 @@
+var ie=Object.defineProperty;var p=(t,e)=>ie(t,"name",{value:e,configurable:!0});import{randomUUID as ae}from"node:crypto";import{streamSimple as le}from"@earendil-works/pi-ai/compat";import{expandModelCandidates as Q,parseModelSpec as de,probeRouteAvailability as ce}from"../model-routes.js";import{readMergedLaunchConfig as V}from"../config.js";import{openModelRegistry as fe}from"../runtime/model-registry.js";import{coolingUntilFor as X,isManagedProvider as P,markSubscriptionRateLimited as ue,markSubscriptionSuccess as me,readSubscriptionPool as pe,retryAfterMsFromHeaders as K,retryAfterMsFromError as he,refreshSubscriptionCredential as ye,subscriptionNeedsSuccessWrite as _e}from"../subscription-state.js";import{classifyRateLimit as ge,describeRateLimitScope as Y,rateLimitHeaders as ve}from"../rate-limit-scope.js";import{RunError as l}from"../runs/operations.js";import{recognizeProviderError as ee}from"../provider-error-recognition.js";import{isSafetyRefusal as be}from"./refusal.js";function we(t){return typeof t=="string"||t===null||Array.isArray(t)&&t.every(e=>e&&typeof e=="object"&&(e.type==="text"&&typeof e.text=="string"||e.type==="image_url"&&typeof e.image_url?.url=="string"&&/^data:image\/(png|jpeg|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/.test(e.image_url.url)))}p(we,"validContent");function te(t){return Array.isArray(t)?t.map(e=>{if(e.type==="text")return e;const[,n,r]=/^data:(image\/(?:png|jpeg|gif|webp));base64,(.*)$/.exec(e.image_url.url);return{type:"image",mimeType:n,data:r}}):t??""}p(te,"imageContent");function De(t){if(!t||typeof t!="object"||Array.isArray(t))throw new l(400,"invalid_request","body must be an object");const e=t;if(!Array.isArray(e.messages)||!e.messages.every(n=>n&&typeof n=="object"&&["system","user","assistant","tool"].includes(n.role)&&we(n.content)))throw new l(400,"invalid_request","messages must be chat messages","messages");if(e.messages.some(n=>["system","assistant"].includes(n.role)&&typeof n.content!="string"&&n.content!==null))throw new l(400,"invalid_request","system and assistant content must be text","messages");if(e.model!==void 0&&typeof e.model!="string")throw new l(400,"invalid_request","model must be a string","model");if(e.model_policy!==void 0&&!["exact","substitute"].includes(e.model_policy))throw new l(400,"invalid_request","invalid model_policy","model_policy");if(e.payer!==void 0&&!["user","app"].includes(e.payer))throw new l(400,"invalid_request","invalid payer","payer");if(e.reasoning_effort!==void 0&&!["minimal","low","medium","high","xhigh","max"].includes(e.reasoning_effort))throw new l(400,"invalid_request","invalid reasoning_effort","reasoning_effort");if(e.stream!==void 0&&typeof e.stream!="boolean")throw new l(400,"invalid_request","stream must be boolean","stream");if(e.tools!==void 0&&(!Array.isArray(e.tools)||!e.tools.every(n=>n?.type==="function"&&typeof n.function?.name=="string"&&n.function.name.length>0&&(n.function.description===void 0||typeof n.function.description=="string")&&(n.function.parameters===void 0||n.function.parameters!==null&&typeof n.function.parameters=="object"&&!Array.isArray(n.function.parameters)&&n.function.parameters.type==="object"))))throw new l(400,"invalid_request","invalid tools","tools");if(e.tool_choice!==void 0&&e.tool_choice!=="auto"&&e.tool_choice!=="none"&&e.tool_choice!=="required"&&(typeof e.tool_choice!="object"||e.tool_choice===null||e.tool_choice.type!=="function"||typeof e.tool_choice.function?.name!="string"))throw new l(400,"invalid_request","invalid tool_choice","tool_choice");if(e.messages.some(n=>n.role==="assistant"&&n.tool_calls!==void 0&&(!Array.isArray(n.tool_calls)||!n.tool_calls.every(r=>r&&typeof r.id=="string"&&typeof r.function?.name=="string"&&typeof r.function.arguments=="string"&&xe(r.function.arguments)))))throw new l(400,"invalid_request","invalid assistant tool_calls","messages");if(e.stop!==void 0&&!(typeof e.stop=="string"||Array.isArray(e.stop)&&e.stop.every(n=>typeof n=="string")))throw new l(400,"invalid_request","invalid stop","stop");if(e.seed!==void 0&&!Number.isSafeInteger(e.seed))throw new l(400,"invalid_request","invalid seed","seed");for(const[n,r]of[["temperature",e.temperature],["top_p",e.top_p],["max_tokens",e.max_tokens]])if(r!==void 0&&(typeof r!="number"||!Number.isFinite(r)||n==="temperature"&&(r<0||r>2)||n==="top_p"&&(r<0||r>1)||n==="max_tokens"&&(!Number.isSafeInteger(r)||r<1)))throw new l(400,"invalid_request",`invalid ${n}`,n);if(e.response_format!==void 0){const n=e.response_format;if(!n||typeof n!="object"||Array.isArray(n)||!["text","json_object","json_schema"].includes(n.type)||n.type==="json_schema"&&(typeof n.json_schema?.name!="string"||!n.json_schema.name||!n.json_schema.schema||typeof n.json_schema.schema!="object"||Array.isArray(n.json_schema.schema)))throw new l(400,"invalid_request","invalid response_format","response_format")}if(e.metadata!==void 0&&Buffer.byteLength(JSON.stringify(e.metadata)??"")>4096)throw new l(400,"invalid_request","metadata exceeds 4 KB","metadata");return e}p(De,"parseLlmRequest");function xe(t){try{const e=JSON.parse(t);return e!==null&&typeof e=="object"&&!Array.isArray(e)}catch{return!1}}p(xe,"isJsonObject");function je(t,e){const n=Date.now(),r=t.messages.map(s=>s.role==="system"?{role:"system",content:s.content??"",timestamp:n}:s.role==="tool"?{role:"toolResult",toolCallId:s.tool_call_id??"",toolName:"",content:typeof s.content=="string"||s.content===null?[{type:"text",text:s.content??""}]:te(s.content),isError:!1,timestamp:n}:s.role==="assistant"?{role:"assistant",content:[...s.content?[{type:"text",text:s.content}]:[],...(s.tool_calls??[]).map(m=>({type:"toolCall",id:m.id,name:m.function.name,arguments:JSON.parse(m.function.arguments)}))],api:"openai-completions",provider:"openai",model:t.model??"",usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"stop",timestamp:n}:{role:"user",content:te(s.content),timestamp:n});if(e){const s=r.filter(c=>c.role==="system").map(c=>c.content).join(`
+`).slice(0,16384),m=r.findIndex(c=>c.role==="user");if(s&&m>=0){const c=r[m];r[m]={...c,content:typeof c.content=="string"?`${s}
+
+${c.content}`:[{type:"text",text:s},...c.content]}}s&&m<0&&r.unshift({role:"user",content:s,timestamp:n});for(let c=r.length-1;c>=0;c--)r[c]?.role==="system"&&r.splice(c,1)}const g=t.tools?.map(({function:s})=>({name:s.name,description:s.description??"",parameters:s.parameters??{type:"object",properties:{}}}));return{messages:r,...g?{tools:g}:{}}}p(je,"contextOf");function oe(t,e,n,r){if(!t){const s=V(n,r),m=Object.values({...s.modelRoutes??{},...s.legacyModelRoutes??{}}),c=m.length?[s.modelLadders.defaultProvider,...s.modelRouting?.familyOrder??[],...m.map(x=>x.family)].find(x=>m.some(w=>w.family===x)):s.modelLadders.defaultProvider??"anthropic";return{kind:"logical",family:c,strength:"strong",spec:`${c}/strong`}}const g=/^([^/]+)\/(ultra|strong|medium|light)$/.exec(t);return g?{kind:"logical",family:g[1],strength:g[2],spec:t}:{kind:e==="exact"?"exact":"concrete",spec:t}}p(oe,"requestFor");async function Ne(t,e,n,r){if(t.payer==="app")throw new l(403,"payer_not_app","app-paid inference routes are not registered");const g=await fe(),s=oe(t.model,t.model_policy,r?.cwd,r?.profileId),m=p(u=>u.routeId!=="concrete"&&u.routeId!=="exact","configured"),c=p(u=>{const a=g.find(u.providerId,u.modelId);return a!==void 0&&(!t.reasoning_effort||a.reasoning)&&(t.seed===void 0&&t.response_format===void 0||a.api==="openai-completions")&&(t.stop===void 0||["openai-completions","anthropic-messages"].includes(a.api))},"matchesFeatures"),x=Q(s.kind==="exact"?{kind:"concrete",spec:s.spec}:s,r?.cwd,r?.profileId).filter(m);let w;if(s.kind==="logical")w=t.model_policy==="exact"?x.filter(u=>u.family===s.family&&u.strength===s.strength).slice(0,1):x;else{const u=de(s.spec),a=x.filter(f=>f.providerId===u?.providerId&&f.modelId===u.modelId&&(t.model_policy!=="exact"||f.thinkingLevel===u.thinkingLevel)&&c(f));if(t.model_policy==="exact")w=a.slice(0,1);else if(a.length)w=a;else{const f=V(r?.cwd,r?.profileId),A=[...Object.values(f.modelRoutes??{}).flatMap(i=>Object.entries(i.models)),...[f.modelLadders.anthropic,f.modelLadders.openai].flatMap(i=>Object.entries(i))].find(([,i])=>i===s.spec)?.[0],S=oe(void 0,"substitute",r?.cwd,r?.profileId);w=A&&S.kind==="logical"?Q({...S,strength:A,spec:s.spec},r?.cwd,r?.profileId).filter(i=>m(i)&&i.strength===A):[]}}if(w=w.filter(c),w.length===0)throw t.model_policy==="exact"?new l(400,"substitution_refused","no eligible model route is configured"):new l(404,"model_unavailable","no eligible model route is configured");const W=`chatcmpl-${ae()}`;let k=1/0,_,F;for(const u of w){if(!ce(u,g).authenticated)continue;const a=g.find(u.providerId,u.modelId);if(!a)continue;const f=u.providerId,M=P(f)?pe(f).filter(i=>!i.authFailure):[],A=M.filter(i=>X(i,a.id)<=Date.now());if(M.length&&!A.length){const i=Math.min(...M.map(q=>X(q,a.id)));i<k&&(k=i,F=`${a.provider}/${a.id}`);continue}const S=M.length?A:[void 0];for(const i of S){const q=Date.now();let B=i?.access;if(i&&i.expires<=Date.now()&&P(f)){const o=g.getProvider(f)?.auth.oauth;if(!o)throw new l(503,"upstream_model_unavailable",`no OAuth refresh for ${f}`,void 0,{served_model:`${a.provider}/${a.id}`});B=(await ye(f,i.label,async(v,G)=>{const N=await o.refresh({type:"oauth",refresh:v,access:"",expires:0,...G?{clientId:G}:{}},e??new AbortController().signal),H=N.clientId;return{refresh:N.refresh,access:N.access,expires:N.expires,...typeof H=="string"&&H?{clientId:H}:{}}})).access}const ne=je(t,!!i),R=i?void 0:await g.getApiKeyAndHeaders(a);if(R&&!R.ok)continue;const h=`${a.provider}/${a.id}`,$=t.model??h;let j=!1,z,b=3e4,I;const E=[],J=[],C=[];let d;const L=p((o,y=null)=>({id:W,object:"chat.completion.chunk",created:Math.floor(q/1e3),model:h,served_model:h,requested_model:$,substituted:$!==h&&!/^([^/]+)\/(ultra|strong|medium|light)$/.test($),choices:[{index:0,delta:o,finish_reason:y}]}),"chunk"),O=p(o=>{E.push(o),n?.(o)},"emit"),re=le(a,ne,{apiKey:B??(R?.ok?R.apiKey:void 0),...R?.ok?{headers:R.headers}:{},signal:e,reasoning:t.reasoning_effort??u.thinkingLevel,...t.temperature!==void 0?{temperature:t.temperature}:{},...t.max_tokens!==void 0?{maxTokens:t.max_tokens}:{},...t.top_p!==void 0?{samplingParams:{top_p:t.top_p}}:{},...t.tool_choice==="none"?{toolChoice:"none"}:{},onPayload:p(o=>{if(!o||typeof o!="object")return;const y=t.tool_choice,v=y==="required"?a.api==="anthropic-messages"?{type:"any"}:"required":typeof y=="object"&&y!==null?a.api==="anthropic-messages"?{type:"tool",name:y.function.name}:y:void 0;return{...o,...v?{tool_choice:v}:{},...t.stop!==void 0?{[a.api==="anthropic-messages"?"stop_sequences":"stop"]:typeof t.stop=="string"?[t.stop]:t.stop}:{},...t.seed!==void 0?{seed:t.seed}:{},...t.response_format!==void 0?{response_format:t.response_format}:{}}},"onPayload"),fetch:p(async(o,y)=>{const v=await fetch(o,y);return z=v.status,v.status===429&&(j=!0,I=v.headers,b=K(v.headers)??15e3),v},"fetch"),onResponse:p(o=>{o.status===429&&(j=!0,I=o.headers,b=K(o.headers)??15e3)},"onResponse")});try{for await(const o of re)o.type==="text_delta"&&(J.push(o.delta),O(L({content:o.delta}))),o.type==="thinking_delta"&&(C.push(o.delta),O(L({reasoning_content:o.delta}))),o.type==="done"&&(d=o.message),o.type==="error"&&(d=o.error)}catch(o){const y=he(o);I===void 0&&o&&typeof o=="object"&&"headers"in o&&Object.keys(ve(o.headers)).length&&(I=o.headers);const v=ee({status:o&&typeof o=="object"&&"status"in o?o.status:void 0,message:o instanceof Error?o.message:String(o)});if(!j&&v.kind!=="rate-limit")throw E.length?new l(503,"upstream_model_unavailable",o instanceof Error?o.message:String(o),void 0,{served_model:h}):o;j=!0,b=y??b}if(!j&&d?.stopReason==="error"&&ee({message:d.errorMessage}).kind==="rate-limit"&&(j=!0,b=15e3),j){const o=ge(I,a.id);if(K(I)===void 0&&o.resetAt!==void 0&&(b=Math.max(b,o.resetAt-Date.now())),_={provider:f,model:a.id,...i?{account:i.label}:{},observation:o},console.error(`[llm] 429 from ${h}${i?` account "${i.label}"`:""}: scope=${Y(o.scope)} retry_after_ms=${b} headers=${JSON.stringify(o.headers)}`),i&&P(f)&&await ue(f,i.label,b,q,Date.now(),o.scope),Date.now()+b<k&&(k=Date.now()+b,F=h),J.length||C.length)throw new l(503,"service_unavailable","vendor rate limit after output began",void 0,{served_model:h});continue}const D=be(d);if(z===400&&t.tool_choice!==void 0&&t.tool_choice!=="auto"&&t.tool_choice!=="none"&&/\btool[_ ]choice\b/i.test(d?.errorMessage??"")&&/not supported|does not support|unsupported|cannot|must be auto/i.test(d?.errorMessage??""))throw new l(400,"invalid_request",d.errorMessage,"tool_choice",{served_model:h});if(!d||d.stopReason==="error"&&!D||d.stopReason==="aborted")throw new l(503,"upstream_model_unavailable",d?.errorMessage??"model request failed",void 0,{served_model:h});i&&P(f)&&_e(i,a.id)&&await me(f,i.label,q,a.id);const T=d.content.filter(o=>o.type==="toolCall").map(o=>({id:o.id,type:"function",function:{name:o.name,arguments:JSON.stringify(o.arguments)}})),U=D?"content_filter":d.stopReason==="toolUse"?"tool_calls":d.stopReason==="length"?"length":"stop",Z={prompt_tokens:d.usage.input,completion_tokens:d.usage.output,total_tokens:d.usage.totalTokens,cache_read_tokens:d.usage.cacheRead,cache_write_tokens:d.usage.cacheWrite,usd_equivalent:null,served_model:h},se={id:W,object:"chat.completion",created:Math.floor(q/1e3),model:h,served_model:h,requested_model:$,substituted:$!==h&&!/^([^/]+)\/(ultra|strong|medium|light)$/.test($),choices:[{index:0,message:{role:"assistant",content:J.join("")||null,...C.length?{reasoning_content:C.join("")}:{},...T.length?{tool_calls:T}:{},...D?{refusal:d.errorMessage??"Content filtered"}:{}},finish_reason:U}],usage:Z,...t.metadata!==void 0?{metadata:t.metadata}:{}};for(const[o,y]of T.entries())O(L({tool_calls:[{index:o,...y}]}));return O({...L({},U),...D?{choices:[{index:0,delta:{},finish_reason:U,message:{refusal:d.errorMessage??"Content filtered"}}]}:{},usage:Z}),{completion:se,chunks:E}}}throw k!==1/0?new l(429,"all_routes_exhausted","all eligible model routes are rate-limited",void 0,{retry_after_s:Math.max(1,Math.ceil((k-Date.now())/1e3)),served_model:_?`${_.provider}/${_.model}`:F,..._?{rate_limit:{provider:_.provider,model:_.model,..._.account?{account:_.account}:{},scope:Y(_.observation.scope),..._.observation.claim?{claim:_.observation.claim}:{},headers:_.observation.headers}}:{}},void 0,!0):t.model_policy==="exact"?new l(400,"substitution_refused","the requested model is unavailable"):new l(404,"model_unavailable","no usable model route is available")}p(Ne,"runLlm");export{De as parseLlmRequest,Ne as runLlm};

package/dist/core/locked-file.d.ts

@@ -0,0 +1,27 @@
+export type LockResult<T> = {
+    result: T;
+    next?: string;
+};
+/** Throws if this lock was compromised (stolen/expired) since acquisition. Callers that write
+ *  from INSIDE the critical section must call it immediately before that write, because the
+ *  post-`fn` check cannot un-write a file the callback already replaced. */
+export type LockHeldGuard = () => void;
+export type LockedFilePublish = (next: string) => void;
+export interface LockedFileBackend {
+    withLockAsync<T>(fn: (current: string | undefined, assertLockHeld: LockHeldGuard, publish: LockedFilePublish) => Promise<LockResult<T>>): Promise<T>;
+    /** The current whole-file contents, or undefined when the file does not exist yet.
+     *  Lock-free: every writer replaces the file by atomic rename. */
+    readUnlocked(): string | undefined;
+}
+/** A 0600 JSON file guarded by a cross-process `proper-lockfile` lock on its own path. */
+export declare class LockedJsonFile implements LockedFileBackend {
+    private readonly path;
+    private readonly durable;
+    private readonly initialContent;
+    constructor(path: string, durable?: boolean, initialContent?: string);
+    readUnlocked(): string | undefined;
+    private ensureFile;
+    /** Acquire the lock without blocking the event loop, keeping every read-modify-write
+     *  callback on the same asynchronous path. */
+    withLockAsync<T>(fn: (current: string | undefined, assertLockHeld: LockHeldGuard, publish: LockedFilePublish) => Promise<LockResult<T>>): Promise<T>;
+}

package/dist/core/locked-file.js

@@ -0,0 +1 @@
+var T=Object.defineProperty;var r=(c,t)=>T(c,"name",{value:t,configurable:!0});import{chmodSync as f,existsSync as a,fsyncSync as u,mkdirSync as F,openSync as m,readFileSync as y,renameSync as L,writeFileSync as S,closeSync as w}from"node:fs";import{dirname as _}from"node:path";import x from"proper-lockfile";const b={encoding:"utf-8",mode:384},E=3e4,O=5e3;class K{static{r(this,"LockedJsonFile")}path;durable;initialContent;constructor(t,e=!1,i="{}"){this.path=t,this.durable=e,this.initialContent=i}readUnlocked(){return a(this.path)?y(this.path,"utf-8"):void 0}ensureFile(){const t=_(this.path);a(t)||F(t,{recursive:!0,mode:448}),a(this.path)||(S(this.path,this.initialContent,b),f(this.path,384))}async withLockAsync(t){this.ensureFile();let e,i;const s=r(()=>{if(i)throw i},"throwIfCompromised");try{e=await x.lock(this.path,{realpath:!1,retries:{retries:10,factor:2,minTimeout:100,maxTimeout:1e4,randomize:!0},stale:E,update:O,onCompromised:r(h=>{i=h},"onCompromised")}),s();const k=a(this.path)?y(this.path,"utf-8"):void 0;let l=!1;const d=r(h=>{if(l)throw new Error(`locked file was published twice: ${this.path}`);s();const o=`${this.path}.${process.pid}.${Date.now()}.tmp`;if(S(o,h,b),f(o,384),this.durable){const n=m(o,"r");try{u(n)}finally{w(n)}}if(L(o,this.path),this.durable){const n=m(_(this.path),"r");try{u(n)}finally{w(n)}}l=!0},"publish"),{result:C,next:p}=await t(k,s,d);return s(),p!==void 0&&d(p),s(),C}finally{if(e)try{await e()}catch{}}}}export{K as LockedJsonFile};

package/dist/core/log.d.ts

@@ -0,0 +1,9 @@
+export declare const MAX_ROTATING_RECORD_BYTES = 65536;
+/** Synchronously appends one complete NDJSON record, retaining active + .1 + .2. */
+export declare function appendRotatingRecord(path: string, recordWithoutLf: string): boolean;
+/** One timed/bounded daemon batch instead of a mkdir/stat/open/write per event.
+ *  Process 'exit' drains synchronously even after an uncaught exception; SIGKILL
+ *  and a host power loss cannot run an exit handler. */
+export declare function appendBufferedDaemonRecord(path: string, recordWithoutLf: string): boolean;
+/** Flush the daemon batch; also invoked synchronously on process exit. */
+export declare function flushDaemonLog(): void;

package/dist/core/log.js

@@ -0,0 +1,5 @@
+var S=Object.defineProperty;var f=(e,n)=>S(e,"name",{value:n,configurable:!0});import{appendFileSync as o,existsSync as d,mkdirSync as B,renameSync as l,rmSync as _,statSync as g}from"node:fs";import{dirname as R}from"node:path";const m=65536,T=5*1024*1024,b=128*1024,x=200;function y(e,n){let t="";try{B(R(e),{recursive:!0});let i=d(e)?g(e).size:0;for(const p of n){const u=`${p}
+`,c=Buffer.byteLength(u,"utf8");i+c>T&&i>0&&(t!==""&&(o(e,t,"utf8"),t=""),_(`${e}.2`,{force:!0}),d(`${e}.1`)&&l(`${e}.1`,`${e}.2`),l(e,`${e}.1`),i=0),t+=u,i+=c}return t!==""&&o(e,t,"utf8"),!0}catch{return!1}}f(y,"appendRotatingRecords");function D(e,n){return n.includes(`
+`)||n.includes("\r")||Buffer.byteLength(n,"utf8")+1>m?!1:y(e,[n])}f(D,"appendRotatingRecord");let r,a=!1;function I(e,n){if(n.includes(`
+`)||n.includes("\r"))return!1;const t=Buffer.byteLength(n,"utf8")+1;return t>m?!1:(r!==void 0&&r.path!==e&&s(),r===void 0&&(r={path:e,records:[],bytes:0},a||(process.on("exit",s),a=!0)),r.path=e,r.records.push(n),r.bytes+=t,r.bytes>=b?s():r.timer===void 0&&(r.timer=setTimeout(s,x),r.timer.unref()),!0)}f(I,"appendBufferedDaemonRecord");function s(){const e=r;if(!(e===void 0||e.records.length===0)&&(e.timer!==void 0&&clearTimeout(e.timer),r=void 0,!y(e.path,e.records)))for(const n of e.records)process.stderr.write(`[crtrd] event log append failed: ${n}
+`)}f(s,"flushDaemonLog");export{m as MAX_ROTATING_RECORD_BYTES,I as appendBufferedDaemonRecord,D as appendRotatingRecord,s as flushDaemonLog};

package/dist/core/manifest-recovery.d.ts

@@ -0,0 +1,15 @@
+import type { RootDef } from './command.js';
+/**
+ * Run `argv` against `root`, and if the backend answers `manifest_stale`,
+ * refetch that plugin's package and run the ORIGINAL argv again against a
+ * freshly resolved tree — exactly once.
+ *
+ * Re-parsing the original argv, rather than re-running the leaf that failed, is
+ * what makes a RENAMED verb recoverable: the old leaf no longer exists in the
+ * refreshed tree, and only the dispatcher can answer that against the fresh
+ * tree's own siblings.
+ *
+ * Never throws: every outcome is rendered through the dispatcher's own
+ * `handle`, so a caller can mark the end of dispatch unconditionally.
+ */
+export declare function dispatchWithStaleRecovery(root: RootDef, argv: string[]): Promise<void>;

package/dist/core/manifest-recovery.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var e=(t,r)=>c(t,"name",{value:r,configurable:!0});import{resolveRoot as f}from"../build-root.js";import{runCli as a}from"./command.js";import{forceRevalidateBundlePlugin as l}from"./command-plugins/revalidate.js";import{handle as n}from"./io.js";import{staleManifestPlugin as u}from"./manifest-stale.js";async function P(t,r){try{await a(t,r);return}catch(i){if(!await m(i)){n(i);return}try{await a(await f(r[2]),r)}catch(o){n(o)}}}e(P,"dispatchWithStaleRecovery");async function m(t){const r=u(t);if(r===void 0)return!1;try{return await l(r)}catch{return!1}}e(m,"refetchStalePlugin");export{P as dispatchWithStaleRecovery};

package/dist/core/manifest-stale.d.ts

@@ -0,0 +1,18 @@
+import type { ManifestStaleEnvelope } from '../api/plugin-manifest-schema.js';
+/** What crtr attaches to the `CrtrError` it raises for a stale answer. */
+type StaleErrorDetails = Required<ManifestStaleEnvelope> & {
+    plugin: string;
+};
+/** Did the backend's own error envelope claim staleness? Reads the parsed JSON
+ *  body, before it becomes a `CrtrError`. */
+export declare function envelopeClaimsStale(envelope: Record<string, unknown>): boolean;
+/** The details a transport adds when it converts a stale envelope into the
+ *  error the dispatcher rethrows. */
+export declare function staleErrorDetails(plugin: string): StaleErrorDetails;
+/** Is this the one error class the dispatcher rethrows instead of rendering? */
+export declare function isManifestStaleError(error: unknown): boolean;
+/** The plugin to refetch, or `undefined` when this error is not a recoverable
+ *  stale answer. A stale flag with no plugin name is not actionable: nothing
+ *  identifies the package whose description went out of date. */
+export declare function staleManifestPlugin(error: unknown): string | undefined;
+export {};

package/dist/core/manifest-stale.js

@@ -0,0 +1 @@
+var o=Object.defineProperty;var e=(t,n)=>o(t,"name",{value:n,configurable:!0});import{CrtrError as u}from"./errors.js";const r="manifest_stale",i="plugin";function l(t){return t[r]===!0}e(l,"envelopeClaimsStale");function p(t){return{[r]:!0,[i]:t}}e(p,"staleErrorDetails");function s(t){return t instanceof u&&t.details?.[r]===!0}e(s,"isManifestStaleError");function c(t){if(!s(t))return;const n=t.details?.[i];return typeof n=="string"?n:void 0}e(c,"staleManifestPlugin");export{l as envelopeClaimsStale,s as isManifestStaleError,p as staleErrorDetails,c as staleManifestPlugin};

package/dist/core/manifest.d.ts

@@ -0,0 +1,5 @@
+import type { MarketplaceManifest, PluginManifest } from '../types.js';
+export declare function pluginManifestPath(pluginRoot: string): string;
+export declare function marketplaceManifestPath(mktRoot: string): string;
+export declare function readPluginManifest(pluginRoot: string): PluginManifest | null;
+export declare function readMarketplaceManifest(mktRoot: string): MarketplaceManifest | null;

package/dist/core/manifest.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var r=(t,o)=>i(t,"name",{value:o,configurable:!0});import{join as n}from"node:path";import{MARKETPLACE_MANIFEST_DIR as a,MARKETPLACE_MANIFEST_FILE as f,PLUGIN_MANIFEST_DIR as E,PLUGIN_MANIFEST_FILE as I}from"../types.js";import{readJsonIfExists as e}from"./fs-utils.js";function M(t){return n(t,E,I)}r(M,"pluginManifestPath");function p(t){return n(t,a,f)}r(p,"marketplaceManifestPath");function s(t){return e(M(t))}r(s,"readPluginManifest");function P(t){return e(p(t))}r(P,"readMarketplaceManifest");export{p as marketplaceManifestPath,M as pluginManifestPath,P as readMarketplaceManifest,s as readPluginManifest};

package/dist/core/model-auth/daemon-login.d.ts

@@ -0,0 +1,13 @@
+import type { ProviderAuthInteraction } from '@earendil-works/pi-ai';
+import type { CrtrClient } from '../../api/client.js';
+import { type ManagedProviderId } from '../subscription-state.js';
+/** A self-host box with a browser on this machine: the vendor's redirect can
+ *  reach the daemon's loopback listener (RT-LLM-41). Over SSH or on a headless
+ *  host the code page / device flow is the only one that works. */
+export declare function localBrowserAvailable(env?: NodeJS.ProcessEnv): boolean;
+/** Sign in to a managed provider through the daemon. Resolves once the daemon
+ *  has written the credential; rejects with `Login cancelled` on abort. */
+export declare function daemonManagedLogin(client: CrtrClient, provider: ManagedProviderId, interaction: ProviderAuthInteraction, options?: {
+    label?: string;
+    loopback?: boolean;
+}): Promise<void>;

package/dist/core/model-auth/daemon-login.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var s=(e,t)=>m(e,"name",{value:t,configurable:!0});import{ApiError as c}from"../../api/errors.js";import{OPENAI_CHATGPT_PROVIDER_ID as f}from"../subscription-state.js";function g(e=process.env){return e.SSH_CONNECTION||e.SSH_TTY?!1:process.platform==="darwin"||process.platform==="win32"?!0:!!(e.DISPLAY||e.WAYLAND_DISPLAY)}s(g,"localBrowserAvailable");function p(e){return e.aborted}s(p,"cancelled");function h(e,t){return t.aborted?Promise.reject(new Error("Login cancelled")):new Promise((a,r)=>{const o=s(()=>r(new Error("Login cancelled")),"onAbort");t.addEventListener("abort",o,{once:!0}),e.then(a,r).finally(()=>t.removeEventListener("abort",o))})}s(h,"raceAbort");function y(e){if(!(!(e instanceof c)||e.status!==404||!/no route for/.test(e.message)))return new Error("The running crtr daemon predates daemon-run sign-in. Run `crtr sys daemon restart`, then sign in again.")}s(y,"olderDaemon");async function u(e,t){try{return await e.startModelAuth(t)}catch(a){throw y(a)??a}}s(u,"startFlow");async function b(e,t,a,r){const o={provider:t===f?"openai-chatgpt":t,...a?{label:a}:{}};if(!r)return{flow:await u(e,o),loopback:!1};try{return{flow:await u(e,{...o,redirect:"loopback"}),loopback:!0}}catch(n){if(n instanceof c&&n.status===409&&n.param==="redirect")return{flow:await u(e,o),loopback:!1};throw n}}s(b,"start");async function d(e,t,a){for(;!p(a);){const r=await h(e.getModelAuthFlow(t,25),a);if(r.status==="connected")return;if(r.status!=="pending")throw new Error(r.message??`sign-in ${r.status}`)}throw new Error("Login cancelled")}s(d,"awaitFlow");async function v(e,t,a,r={}){const{flow:o,loopback:n}=await b(e,t,r.label,r.loopback??g()),i=s(()=>{e.cancelModelAuth(o.flow_id).catch(()=>{})},"cancel");if(p(a.signal))throw i(),new Error("Login cancelled");a.signal.addEventListener("abort",i,{once:!0});try{await A(e,o,n,a)}finally{a.signal.removeEventListener("abort",i)}}s(v,"daemonManagedLogin");async function A(e,t,a,r){if(t.user_code!==void 0){r.notify({type:"device_code",userCode:t.user_code,verificationUri:t.url,expiresInSeconds:900}),await d(e,t.flow_id,r.signal);return}r.notify({type:"auth_url",url:t.url,instructions:t.instructions});const o=t.provider===f;if(a&&!o){await d(e,t.flow_id,r.signal);return}if(a){const n=new AbortController,i=AbortSignal.any([r.signal,n.signal]),l=w(e,t,r,i);l.catch(()=>{});try{await Promise.race([d(e,t.flow_id,r.signal),l])}finally{n.abort()}return}if(o){await w(e,t,r,r.signal);return}for(;;){const n=await r.prompt({type:"manual_code",message:"Paste the code Claude shows"});try{await e.completeModelAuth(t.flow_id,{input:n});return}catch(i){if(i instanceof c&&i.status===400&&(i.param==="input"||i.param==="state")){r.notify({type:"info",message:`${i.message} \u2014 paste it again.`});continue}throw i}}}s(A,"drive");async function w(e,t,a,r){for(;;){const o=await a.prompt({type:"manual_code",message:"Paste the final redirect URL from your browser",placeholder:"http://127.0.0.1:1455/auth/callback?...",signal:r});try{await e.completeModelAuth(t.flow_id,{input:o});return}catch(n){if(n instanceof c&&n.status===400&&(n.param==="input"||n.param==="state")){a.notify({type:"info",message:`${n.message} \u2014 paste it again.`});continue}throw n}}}s(w,"pasteRedirect");export{v as daemonManagedLogin,g as localBrowserAvailable};

package/dist/core/model-auth/flows.d.ts

@@ -0,0 +1,50 @@
+import { type ManagedProviderId } from '../subscription-state.js';
+export declare const MODEL_AUTH_FLOW_TTL_S = 900;
+export type ModelAuthFlowStatus = 'pending' | 'connected' | 'failed' | 'expired';
+export interface StartedFlow {
+    flow_id: string;
+    provider: ManagedProviderId;
+    url: string;
+    instructions: string;
+    user_code?: string;
+    expires_at: string;
+}
+/** API name for the ChatGPT (`openai`) provider. The bare API name `openai`
+ *  stays Codex: crouter cloud's vendor sign-in page (`vendor=openai`) means Codex. */
+export declare const OPENAI_CHATGPT_API_PROVIDER = "openai-chatgpt";
+/** The API name a client sends to start a sign-in for a runtime provider id. */
+export declare function modelAuthApiProvider(provider: ManagedProviderId): 'anthropic' | 'openai-codex' | 'openai-chatgpt';
+/** Resolve a caller-supplied provider (the page's `vendor=openai` included). */
+export declare function modelAuthProvider(provider: unknown): ManagedProviderId;
+/** `model_auth.start` (RT-LLM-20). A second start for a provider replaces its
+ *  in-flight flow (RT-LLM-42). */
+export declare function startModelAuthFlow(input: {
+    provider: unknown;
+    redirect?: unknown;
+    label?: unknown;
+    jti?: string;
+}): Promise<StartedFlow>;
+/** `model_auth.cancel`: the person gave up at the CLI. Ends the flow so it stops
+ *  polling, frees its loopback port, and never writes a credential. Unknown or
+ *  finished flows are left alone. */
+export declare function cancelModelAuthFlow(flowId: string): FlowView | undefined;
+/** `model_auth.complete` (RT-LLM-22, 31, 43, 49). Returns once the credential is
+ *  written; a vendor refusal ends the flow as failed and throws. */
+export declare function completeModelAuthFlow(flowId: unknown, input: unknown): Promise<{
+    flow_id: string;
+    provider: ManagedProviderId;
+    status: 'connected';
+}>;
+export interface FlowView {
+    flow_id: string;
+    provider: ManagedProviderId;
+    status: ModelAuthFlowStatus;
+    message?: string;
+    jti?: string;
+}
+/** A flow's current state, or undefined when it is unknown or long finished. */
+export declare function readModelAuthFlow(flowId: string): FlowView | undefined;
+/** Wait up to `waitMs` for a flow to leave `pending`; answers its state either way. */
+export declare function waitModelAuthFlow(flowId: string, waitMs: number, signal?: AbortSignal): Promise<FlowView | undefined>;
+/** Test seam: forget every flow (a daemon restart does this by construction). */
+export declare function resetModelAuthFlowsForTest(): void;

package/dist/core/model-auth/flows.js

@@ -0,0 +1 @@
+var J=Object.defineProperty;var a=(e,t)=>J(e,"name",{value:t,configurable:!0});import{createHash as V,randomBytes as T,randomUUID as K}from"node:crypto";import{createServer as X}from"node:http";import{RunError as u}from"../runs/operations.js";import{ANTHROPIC_PROVIDER_ID as w,OPENAI_CHATGPT_PROVIDER_ID as m,OPENAI_CODEX_PROVIDER_ID as k,commitManagedLogin as Y,openAIDeviceId as Z,readSubscriptionPool as W}from"../subscription-state.js";const R=900,L="9d1c250a-e61b-44d9-88ed-5944d1962f5e",Q="https://claude.ai/oauth/authorize",ee="https://console.anthropic.com/oauth/code/callback",N={port:53692,path:"/callback",redirect:"http://localhost:53692/callback"},te="org:create_api_key user:profile user:inference user:sessions:claude_code user:mcp_servers user:file_upload",I="app_EMoamEEZ73f0CkXaXp7hrann",ne="https://auth.openai.com/codex/device",U="https://auth.openai.com/deviceauth/callback",D={port:1455,path:"/auth/callback",redirect:"http://localhost:1455/auth/callback"},re="openid profile email offline_access",ie=900,G="https://api.openai.com/auth",oe="dynamic_agent_client",ae="crtr",se="https://auth.openai.com/api/accounts/authorize",H="https://api.openai.com/v1",b={port:1455,path:"/auth/callback",redirect:"http://127.0.0.1:1455/auth/callback"},E="chatgpt.tokens.use.direct",ce=`openid profile email offline_access resource.invoke ${E}`,de=180*1e3,ue=a(()=>process.env.CRTR_MODEL_AUTH_ANTHROPIC_TOKEN_URL||"https://platform.claude.com/v1/oauth/token","anthropicTokenUrl"),P=a(()=>(process.env.CRTR_MODEL_AUTH_OPENAI_BASE||"https://auth.openai.com").replace(/\/$/,""),"openaiBase"),_=new Map,y=new Map;function C(e){return e.toString("base64").replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/,"")}a(C,"base64url");function he(){const e=C(T(32));return{verifier:e,challenge:C(V("sha256").update(e).digest())}}a(he,"pkce");const M="openai-chatgpt";function $(e){if(e==="openai")return k;if(e===M)return m;if(e===w||e===k)return e;throw new u(400,"invalid_request","provider must be anthropic, openai-codex, or openai-chatgpt","provider")}a($,"managedProvider");function Ie(e){return e===m?M:e}a(Ie,"modelAuthApiProvider");function Ee(e){return $(e)}a(Ee,"modelAuthProvider");function f(e,t,n){if(e.status==="pending"){e.status=t,n!==void 0&&(e.message=n),clearTimeout(e.timer),e.abort.abort(),e.server?.close(),e.server?.closeIdleConnections(),y.get(e.provider)===e.id&&y.delete(e.provider);for(const i of e.waiters)i();e.waiters.clear(),setTimeout(()=>{_.get(e.id)===e&&_.delete(e.id)},6e4).unref()}}a(f,"settle");async function S(e,t){if(e.status!=="pending")throw new Error("the sign-in ended before the credential was written");await Y(e.provider,e.label,{access:t.access,refresh:t.refresh,expires:t.expires,...t.accountId?{accountId:t.accountId}:{},...t.clientId?{clientId:t.clientId}:{},...t.email?{email:t.email}:{},lastRateLimitedAt:e.lastRateLimitedAt,autoLabel:e.label===void 0})}a(S,"writeCredential");async function j(e,t,n){const i=await fetch(ue(),{method:"POST",headers:{"Content-Type":"application/json",Accept:"application/json"},body:JSON.stringify({grant_type:"authorization_code",client_id:L,code:t,state:n,redirect_uri:e.redirectUri,code_verifier:e.verifier}),signal:AbortSignal.any([e.abort.signal,AbortSignal.timeout(3e4)])});if(!i.ok)throw new Error(`Anthropic token exchange failed (${i.status})`);const r=await i.json();if(typeof r.access_token!="string"||typeof r.refresh_token!="string"||typeof r.expires_in!="number"||!Number.isFinite(r.expires_in))throw new Error("Anthropic token exchange returned no credential");await S(e,{access:r.access_token,refresh:r.refresh_token,expires:Date.now()+r.expires_in*1e3-300*1e3})}a(j,"exchangeAnthropic");function pe(e){const t=e.split(".")[1];let n;try{n=JSON.parse(Buffer.from(t??"","base64url").toString("utf8"))[G]?.chatgpt_account_id}catch{n=void 0}if(typeof n!="string"||n==="")throw new Error("OpenAI token carries no ChatGPT account id");return n}a(pe,"openaiAccountId");async function q(e,t,n,i){const r=await fetch(`${P()}/oauth/token`,{method:"POST",headers:{"Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",client_id:I,code:t,code_verifier:n,redirect_uri:i}),signal:AbortSignal.any([e.abort.signal,AbortSignal.timeout(3e4)])});if(!r.ok)throw new Error(`OpenAI token exchange failed (${r.status})`);const o=await r.json();if(typeof o.access_token!="string"||typeof o.refresh_token!="string"||typeof o.expires_in!="number")throw new Error("OpenAI token exchange returned no credential");await S(e,{access:o.access_token,refresh:o.refresh_token,expires:Date.now()+o.expires_in*1e3,accountId:pe(o.access_token)})}a(q,"exchangeOpenAI");function F(e){try{const t=JSON.parse(Buffer.from(e?.split(".")[1]??"","base64url").toString("utf8"));return typeof t=="object"&&t!==null&&!Array.isArray(t)?t:void 0}catch{return}}a(F,"jwtPayload");function le(...e){for(const t of e){const n=F(t)?.[G];if(typeof n?.chatgpt_account_id=="string"&&n.chatgpt_account_id)return n.chatgpt_account_id}}a(le,"chatgptAccountId");function z(e,t){const n=e.searchParams.get("error");if(n)throw new u(400,"invalid_request",`ChatGPT authorization failed: ${n}`,"input");const i=e.searchParams.get("code");if(!i)throw new u(400,"invalid_request","the redirect URL has no authorization code","input");if(e.searchParams.get("state")!==t)throw new u(400,"invalid_request","the pasted redirect URL belongs to a different sign-in","state");const r=e.searchParams.get("client_id")?.trim();if(!r)throw new u(400,"invalid_request","the redirect URL carries no issued client id","input");return{code:i,clientId:r}}a(z,"chatgptCallback");async function B(e,t,n){const i=await fetch(`${P()}/api/accounts/oauth/token`,{method:"POST",headers:{Accept:"application/json","Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams({grant_type:"authorization_code",client_id:n,code:t,code_verifier:e.verifier,redirect_uri:e.redirectUri,resource:H}),signal:AbortSignal.any([e.abort.signal,AbortSignal.timeout(3e4)])});if(!i.ok)throw new Error(`ChatGPT token exchange failed (${i.status})`);const r=await i.json();if(typeof r.access_token!="string"||!r.access_token||typeof r.refresh_token!="string"||!r.refresh_token||typeof r.expires_in!="number"||!Number.isFinite(r.expires_in)||r.expires_in<=0||typeof r.id_token!="string"||!r.id_token)throw new Error("ChatGPT token exchange returned no credential");if(!(typeof r.scope=="string"?r.scope.trim().split(/\s+/):[]).includes(E))throw new Error(`ChatGPT sign-in did not grant ${E}`);const s=le(r.access_token,r.id_token),h=F(r.id_token)?.email;await S(e,{access:r.access_token,refresh:r.refresh_token,expires:Date.now()+r.expires_in*1e3-de,clientId:n,...s?{accountId:s}:{},...typeof h=="string"&&h?{email:h}:{}})}a(B,"exchangeChatGPT");function fe(e,t){return new Promise((n,i)=>{if(t.aborted){i(new Error("flow ended"));return}const r=a(()=>{clearTimeout(o),i(new Error("flow ended"))},"onAbort"),o=setTimeout(()=>{t.removeEventListener("abort",r),n()},e);t.addEventListener("abort",r,{once:!0})})}a(fe,"sleep");async function _e(e,t){const n=Math.min(e.expiresAt,Date.now()+ie*1e3);let i=Math.max(1e3,Math.floor(t.intervalS*1e3));try{for(;Date.now()<n&&(await fe(Math.min(i,Math.max(0,n-Date.now())),e.abort.signal),!(Date.now()>=n));){const r=await fetch(`${P()}/api/accounts/deviceauth/token`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({device_auth_id:t.deviceAuthId,user_code:t.userCode}),signal:AbortSignal.any([e.abort.signal,AbortSignal.timeout(3e4)])});if(r.ok){const h=await r.json();if(typeof h.authorization_code!="string"||typeof h.code_verifier!="string")throw new Error("OpenAI device approval returned no code");await q(e,h.authorization_code,h.code_verifier,U),f(e,"connected");return}if(r.status===403||r.status===404)continue;const o=await r.text().catch(()=>"");let s;try{const h=JSON.parse(o).error;s=typeof h=="object"&&h!==null?h.code:h}catch{s=void 0}if(s!=="deviceauth_authorization_pending"){if(s==="slow_down"){i+=5e3;continue}throw new Error(`OpenAI device sign-in failed (${r.status})`)}}f(e,"expired","the OpenAI code expired")}catch(r){e.status==="pending"&&f(e,"failed",r instanceof Error?r.message:String(r))}}a(_e,"pollDevice");function O(e,t){const n=X((i,r)=>{const o=new URL(i.url??"/","http://localhost"),s=a((l,p)=>{r.writeHead(l,{"Content-Type":"text/plain; charset=utf-8",Connection:"close"}),r.end(p)},"reply");if(o.pathname!==t.path){s(404,"Not found.");return}const h=o.searchParams.get("code");if(o.searchParams.get("state")!==e.state||!h){s(400,"Sign-in could not be completed: state mismatch or missing code.");return}let d="";if(e.provider===m)try{d=z(o,e.state).clientId}catch(l){s(400,`Sign-in could not be completed: ${l instanceof Error?l.message:String(l)}.`);return}if(e.status!=="pending"||e.exchanging){s(409,"This sign-in has already finished.");return}e.exchanging=!0,(e.provider===w?j(e,h,e.state):e.provider===m?B(e,h,d):q(e,h,e.verifier,e.redirectUri)).then(()=>{s(200,"Signed in. You can close this window."),f(e,"connected")},l=>{s(502,"The vendor refused the sign-in."),f(e,"failed",l instanceof Error?l.message:String(l))})});return e.server=n,new Promise((i,r)=>{n.once("error",o=>r(new u(409,"conflict",`cannot listen on localhost:${t.port} for the vendor redirect (${o.code??o.message})`,"redirect"))),n.listen(t.port,"127.0.0.1",()=>i())})}a(O,"listenLoopback");async function Ce(e){const t=$(e.provider);if(e.redirect!==void 0&&e.redirect!=="loopback")throw new u(400,"invalid_request",'redirect must be "loopback" when present',"redirect");if(e.label!==void 0&&typeof e.label!="string")throw new u(400,"invalid_request","label must be a string when present","label");const n=typeof e.label=="string"&&e.label.trim()?e.label.trim():void 0,i=y.get(t);if(i!==void 0){const p=_.get(i);p&&f(p,"failed","replaced by a newer sign-in")}const{verifier:r,challenge:o}=he(),s=e.redirect==="loopback",h=Date.now()+R*1e3,d={id:K(),provider:t,kind:s?"loopback":t===w?"code_page":t===m?"redirect_paste":"device",state:t===w?r:T(16).toString("hex"),verifier:r,redirectUri:t===w?s?N.redirect:ee:t===m?b.redirect:s?D.redirect:U,expiresAt:h,status:"pending",...e.jti?{jti:e.jti}:{},...n?{label:n}:{},lastRateLimitedAt:Math.max(0,...W(t).map(p=>p.lastRateLimitedAt)),abort:new AbortController,timer:setTimeout(()=>f(d,"expired","the sign-in expired"),R*1e3),waiters:new Set,exchanging:!1};d.timer.unref(),ge(d);const A=a(()=>new u(409,"conflict","a newer sign-in for this provider replaced this one","provider"),"replacedDuringStart"),l={flow_id:d.id,provider:t,expires_at:new Date(h).toISOString()};try{if(t===w){const c=new URLSearchParams;if(c.set("code","true"),c.set("client_id",L),c.set("response_type","code"),c.set("redirect_uri",d.redirectUri),c.set("scope",te),c.set("code_challenge",o),c.set("code_challenge_method","S256"),c.set("state",d.state),s&&await O(d,N),d.status!=="pending")throw A();return{...l,url:`${Q}?${c.toString()}`,instructions:s?"Sign in to Claude in your browser; this finishes by itself.":"Sign in to Claude, then copy the code Claude shows and paste it here."}}if(t===m){const c=new URL(se);if(c.search=new URLSearchParams({client_id:oe,agent_name_hint:ae,ext_agent_host_id:`urn:uuid:${Z()}`,response_type:"code",redirect_uri:d.redirectUri,resource:H,scope:ce,state:d.state,code_challenge:o,code_challenge_method:"S256",nonce:C(T(32))}).toString(),s&&await O(d,b),d.status!=="pending")throw A();return{...l,url:c.toString(),instructions:s?"Sign in with ChatGPT in your browser; this finishes by itself. If it does not, paste the final redirect URL here.":`Sign in with ChatGPT, then copy the full URL your browser lands on (it starts with ${b.redirect} and may show a connection error) and paste it here.`}}if(s){const c=new URL("https://auth.openai.com/oauth/authorize");if(c.searchParams.set("response_type","code"),c.searchParams.set("client_id",I),c.searchParams.set("redirect_uri",d.redirectUri),c.searchParams.set("scope",re),c.searchParams.set("code_challenge",o),c.searchParams.set("code_challenge_method","S256"),c.searchParams.set("state",d.state),c.searchParams.set("id_token_add_organizations","true"),c.searchParams.set("codex_cli_simplified_flow","true"),c.searchParams.set("originator","pi"),await O(d,D),d.status!=="pending")throw A();return{...l,url:c.toString(),instructions:"Sign in to ChatGPT in your browser; this finishes by itself."}}const p=await fetch(`${P()}/api/accounts/deviceauth/usercode`,{method:"POST",headers:{"Content-Type":"application/json"},body:JSON.stringify({client_id:I}),signal:AbortSignal.timeout(3e4)});if(!p.ok)throw new u(502,"upstream_refused",`OpenAI refused to issue a device code (${p.status})`);const g=await p.json(),v=typeof g.interval=="string"?Number(g.interval.trim()):g.interval;if(typeof g.device_auth_id!="string"||typeof g.user_code!="string"||typeof v!="number"||!Number.isFinite(v)||v<0)throw new u(502,"upstream_refused","OpenAI returned an invalid device code");if(d.status!=="pending")throw A();return _e(d,{deviceAuthId:g.device_auth_id,userCode:g.user_code,intervalS:v}),{...l,url:ne,user_code:g.user_code,instructions:"Open the link, sign in to ChatGPT, and enter the code. The code expires in 15 minutes."}}catch(p){throw f(d,"failed",p instanceof Error?p.message:String(p)),_.delete(d.id),p instanceof u?p:new u(502,"upstream_refused",`vendor sign-in could not start: ${p instanceof Error?p.message:String(p)}`)}}a(Ce,"startModelAuthFlow");function ge(e){_.set(e.id,e),y.set(e.provider,e.id)}a(ge,"register");function Se(e){const t=_.get(e);if(t)return f(t,"failed","cancelled"),x(t)}a(Se,"cancelModelAuthFlow");function me(e){const t=e.trim();if(!t)return{};try{const n=new URL(t);return{code:n.searchParams.get("code")??void 0,state:n.searchParams.get("state")??void 0}}catch{}if(t.includes("#")){const[n,i]=t.split("#",2);return{code:n,state:i}}if(t.includes("code=")){const n=new URLSearchParams(t);return{code:n.get("code")??void 0,state:n.get("state")??void 0}}return{code:t}}a(me,"parseCodeInput");function we(e){const t=typeof e=="string"?_.get(e):void 0;if(!t||t.status!=="pending"||Date.now()>=t.expiresAt)throw new u(400,"invalid_request","no in-flight sign-in has this flow_id","flow_id");return t}a(we,"pendingFlow");async function Oe(e,t){const n=we(e);if(n.provider===m)return Ae(n,t);if(n.kind!=="code_page")throw new u(400,"invalid_request","this sign-in completes without a pasted code","flow_id");if(n.exchanging)throw new u(400,"invalid_request","this sign-in is already being completed","flow_id");if(typeof t!="string")throw new u(400,"invalid_request","input must be the code Claude shows","input");const{code:i,state:r}=me(t);if(!i)throw new u(400,"invalid_request","input must be the code Claude shows","input");if(r!==void 0&&r!==n.state)throw new u(400,"invalid_request","the pasted code belongs to a different sign-in","state");n.exchanging=!0;try{await j(n,i,r??n.state)}catch(o){throw f(n,"failed",o instanceof Error?o.message:String(o)),new u(502,"upstream_refused","Anthropic refused the code")}return f(n,"connected"),{flow_id:n.id,provider:n.provider,status:"connected"}}a(Oe,"completeModelAuthFlow");async function Ae(e,t){if(e.exchanging)throw new u(400,"invalid_request","this sign-in is already being completed","flow_id");const n=new URL(b.redirect);let i;try{i=typeof t=="string"?new URL(t.trim()):void 0}catch{i=void 0}if(!i||i.origin!==n.origin||i.pathname!==n.pathname)throw new u(400,"invalid_request",`input must be the full redirect URL starting with ${b.redirect}`,"input");const{code:r,clientId:o}=z(i,e.state);e.exchanging=!0;try{await B(e,r,o)}catch(s){throw f(e,"failed",s instanceof Error?s.message:String(s)),new u(502,"upstream_refused","OpenAI refused the ChatGPT sign-in")}return f(e,"connected"),{flow_id:e.id,provider:e.provider,status:"connected"}}a(Ae,"completeChatGPTFlow");function x(e){return{flow_id:e.id,provider:e.provider,status:e.status,...e.message?{message:e.message}:{},...e.jti?{jti:e.jti}:{}}}a(x,"view");function xe(e){const t=_.get(e);return t?x(t):void 0}a(xe,"readModelAuthFlow");async function ke(e,t,n){const i=_.get(e);if(i)return i.status==="pending"&&t>0&&!n?.aborted&&await new Promise(r=>{const o=a(()=>{clearTimeout(s),n?.removeEventListener("abort",o),i.waiters.delete(o),r()},"done"),s=setTimeout(o,t);n?.addEventListener("abort",o,{once:!0}),i.waiters.add(o)}),x(i)}a(ke,"waitModelAuthFlow");function Re(){for(const e of _.values())f(e,"failed","reset");_.clear(),y.clear()}a(Re,"resetModelAuthFlowsForTest");export{R as MODEL_AUTH_FLOW_TTL_S,M as OPENAI_CHATGPT_API_PROVIDER,Se as cancelModelAuthFlow,Oe as completeModelAuthFlow,Ie as modelAuthApiProvider,Ee as modelAuthProvider,xe as readModelAuthFlow,Re as resetModelAuthFlowsForTest,Ce as startModelAuthFlow,ke as waitModelAuthFlow};

package/dist/core/model-auth/handoff-jti.d.ts

@@ -0,0 +1,4 @@
+export declare function handoffJtiConsumed(jti: string): boolean;
+/** Record `jti` as consumed until `exp`; false when it already was. Expired
+ *  entries are pruned on every write. */
+export declare function consumeHandoffJti(jti: string, exp: number): boolean;

package/dist/core/model-auth/handoff-jti.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var e=(t,n)=>c(t,"name",{value:n,configurable:!0});import{join as u}from"node:path";import{atomicWriteJson as a,readJsonIfExists as m}from"../fs-utils.js";import{secretsDir as d}from"../layout.js";function i(){return u(d(),"vendor-handoff-jti.json")}e(i,"jtiPath");function f(t){const n=m(i())??{},o={};for(const[s,r]of Object.entries(n))typeof r=="number"&&r>t&&(o[s]=r);return o}e(f,"readLive");function b(t){return Object.hasOwn(f(Date.now()/1e3),t)}e(b,"handoffJtiConsumed");function v(t,n){const o=f(Date.now()/1e3);return Object.hasOwn(o,t)?!1:(o[t]=n,a(i(),o,{mode:384}),!0)}e(v,"consumeHandoffJti");export{v as consumeHandoffJti,b as handoffJtiConsumed};

package/dist/core/model-config.d.ts

@@ -0,0 +1,20 @@
+import type { ModelRoutingConfig, ModelStrength } from '../types.js';
+export type CoreModelRoute = {
+    family: string;
+    credentialSource: string;
+    providerId: string;
+    models: Record<ModelStrength, string>;
+};
+export type CoreKindAssignment = {
+    model: string;
+    orchestratorModel?: string;
+};
+export type CoreModelConfig = {
+    modelRoutes: Record<string, CoreModelRoute>;
+    modelRouting: ModelRoutingConfig;
+    kinds: Record<string, CoreKindAssignment>;
+};
+/** Validate the complete Core-owned payload before its single user-scope write. */
+export declare function validateCoreModelConfig(value: unknown): CoreModelConfig;
+/** Write Core-owned fields atomically while retaining unrelated config and kind fields. */
+export declare function replaceCoreModelConfig(config: CoreModelConfig): void;

package/dist/core/model-config.js

@@ -0,0 +1 @@
+var O=Object.defineProperty;var h=(r,t)=>O(r,"name",{value:t,configurable:!0});import{updateRawConfigAtomically as j}from"./config.js";const b=["ultra","strong","medium","light"],R=/^[^/\s]+\/(ultra|strong|medium|light)$/;function u(r,t){if(r===null||typeof r!="object"||Array.isArray(r))throw new Error(`${t} must be an object`);return r}h(u,"object");function c(r,t){if(typeof r!="string"||r.trim()==="")throw new Error(`${t} must be a non-empty string`);return r}h(c,"nonempty");function M(r){const t=u(r,"model config"),g=u(t.modelRoutes,"modelRoutes"),s={};for(const[e,a]of Object.entries(g)){c(e,"route id");const i=u(a,`modelRoutes.${e}`),l=c(i.providerId,`modelRoutes.${e}.providerId`),d=u(i.models,`modelRoutes.${e}.models`),p={};for(const m of b){const y=c(d[m],`modelRoutes.${e}.models.${m}`),k=y.indexOf("/");if(k<=0||k===y.length-1||y.slice(0,k)!==l)throw new Error(`modelRoutes.${e}.models.${m} must be a ${l}/id ref`);p[m]=y}for(const m of Object.keys(d))if(!b.includes(m))throw new Error(`modelRoutes.${e}.models.${m} is not a model strength`);s[e]={family:c(i.family,`modelRoutes.${e}.family`),credentialSource:c(i.credentialSource,`modelRoutes.${e}.credentialSource`),providerId:l,models:p}}const o=u(t.modelRouting,"modelRouting");for(const e of["credentialSourceOrder","familyOrder"])if(o[e]!==void 0&&(!Array.isArray(o[e])||!o[e].every(a=>typeof a=="string"&&a.trim()!=="")))throw new Error(`modelRouting.${e} must be an array of non-empty strings`);if(o.strengthFallback!==void 0&&(!Array.isArray(o.strengthFallback)||!o.strengthFallback.every(e=>b.includes(e))))throw new Error("modelRouting.strengthFallback must be an array of model strengths");const n=new Set(Object.values(s).map(e=>e.family)),f=new Set(Object.values(s).map(e=>e.credentialSource));for(const e of o.familyOrder??[])if(!n.has(e))throw new Error(`modelRouting.familyOrder names unknown route family ${e}`);for(const e of o.credentialSourceOrder??[])if(!f.has(e))throw new Error(`modelRouting.credentialSourceOrder names unknown credential source ${e}`);const $=u(t.kinds,"kinds"),w={};for(const[e,a]of Object.entries($)){c(e,"kind");const i=u(a,`kinds.${e}`),l=c(i.model,`kinds.${e}.model`);if(!R.test(l))throw new Error(`kinds.${e}.model must be family/strength`);if(!n.has(l.slice(0,l.lastIndexOf("/"))))throw new Error(`kinds.${e}.model names unknown route family`);const d=i.orchestratorModel===void 0?void 0:c(i.orchestratorModel,`kinds.${e}.orchestratorModel`);if(d!==void 0&&!R.test(d))throw new Error(`kinds.${e}.orchestratorModel must be family/strength`);if(d!==void 0&&!n.has(d.slice(0,d.lastIndexOf("/"))))throw new Error(`kinds.${e}.orchestratorModel names unknown route family`);w[e]={model:l,...d===void 0?{}:{orchestratorModel:d}}}return{modelRoutes:s,modelRouting:structuredClone(o),kinds:w}}h(M,"validateCoreModelConfig");function S(r){j("user",t=>{const g=t.kinds!==null&&typeof t.kinds=="object"&&!Array.isArray(t.kinds)?t.kinds:{},s=Object.fromEntries(Object.entries(g).map(([o,n])=>{const f=n!==null&&typeof n=="object"&&!Array.isArray(n)?n:{},{model:$,orchestratorModel:w,...e}=f;return[o,e]}));for(const[o,n]of Object.entries(r.kinds)){const f=s[o]!==null&&typeof s[o]=="object"&&!Array.isArray(s[o])?s[o]:{};s[o]={...f,model:n.model,orchestratorModel:n.orchestratorModel??n.model}}return{...t,modelRoutes:structuredClone(r.modelRoutes),modelRouting:structuredClone(r.modelRouting),kinds:s}})}h(S,"replaceCoreModelConfig");export{S as replaceCoreModelConfig,M as validateCoreModelConfig};