@north-light/cli 0.0.0 → 0.3.414

package/dist/core/model-routes.d.ts

@@ -0,0 +1,90 @@
+import type { ModelStrength } from '../types.js';
+import { type ProviderCandidate, type ProviderCandidateRejection } from './subscription-state.js';
+export type ModelRequest = {
+    kind: 'logical';
+    family: string;
+    strength: ModelStrength;
+    spec: string;
+} | {
+    kind: 'concrete';
+    spec: string;
+} | {
+    kind: 'exact';
+    spec: string;
+};
+export type RoutedCandidate = {
+    routeId: string;
+    credentialSource: string;
+    family: string;
+    strength: ModelStrength;
+    providerId: string;
+    modelId: string;
+    thinkingLevel?: string;
+    rank: number;
+};
+export type RouteAvailability = {
+    authenticated: boolean;
+    coolingUntil?: number;
+    registered: boolean;
+};
+export interface ModelRegistryLike {
+    find(providerId: string, modelId: string): unknown;
+    hasConfiguredAuth(model: unknown): boolean;
+}
+export interface InitialModelRegistryLike<Model extends {
+    provider: string;
+    id: string;
+}> {
+    find(providerId: string, modelId: string): Model | undefined;
+    getAll(): Model[];
+    hasConfiguredAuth(model: Model): boolean;
+}
+export interface InitialModelRouteSelection<Model extends {
+    provider: string;
+    id: string;
+}> {
+    selected?: {
+        model: Model;
+        candidate: ProviderCandidate;
+    };
+    rejected: Array<{
+        candidate: ProviderCandidate;
+        reason: ProviderCandidateRejection;
+    }>;
+}
+export interface UnregisteredConcreteModel {
+    request: Extract<ModelRequest, {
+        kind: 'concrete' | 'exact';
+    }>;
+    candidate: RoutedCandidate;
+    reason: 'unregistered';
+}
+export declare function parseModelSpec(spec: string): {
+    providerId: string;
+    modelId: string;
+    thinkingLevel?: string;
+} | undefined;
+/** Expand config-derived route order only. Availability never affects rank. */
+export declare function expandModelCandidates(request: ModelRequest, cwd?: string, profileId?: string | null): RoutedCandidate[];
+/** Identify the one permanently invalid recipe shape: a concrete/exact request
+ * whose requested provider/model is absent from the serving registry. Auth and
+ * cooldown are deliberately outside this discriminator so callers retain their
+ * existing policy for those transient states. */
+export declare function unregisteredConcreteModel(request: ModelRequest | undefined, registry: ModelRegistryLike, options?: {
+    cwd?: string;
+    profileId?: string | null;
+}): UnregisteredConcreteModel | undefined;
+/** Probe the common availability facts consumed unchanged by resolveProviderCandidates. */
+export declare function probeRouteAvailability(candidate: RoutedCandidate, registry: ModelRegistryLike, now?: number): RouteAvailability;
+/** Select the first viable route for a new SDK session. Route declarations own
+ * preference order; logical requests append registered models not declared by a
+ * route. The caller owns broker faults/events and the no-viable outcome. */
+export declare function selectInitialModelRoute<Model extends {
+    provider: string;
+    id: string;
+}>(request: ModelRequest, registry: InitialModelRegistryLike<Model>, options?: {
+    cwd?: string;
+    profileId?: string | null;
+    now?: number;
+}): InitialModelRouteSelection<Model>;
+export declare function modelRequestFromConfig(model: string | undefined, modelIntent: string | undefined, exact: boolean): ModelRequest | undefined;

package/dist/core/model-routes.js

@@ -0,0 +1 @@
+var E=Object.defineProperty;var u=(e,t)=>E(e,"name",{value:t,configurable:!0});import{readMergedLaunchConfig as P}from"./config.js";import{isManagedProvider as w,readRotationConfig as U,coolingUntilFor as M,readSubscriptionPool as D,resolveProviderCandidates as G}from"./subscription-state.js";const b=["ultra","strong","medium","light"],L=new Set(["off","minimal","low","medium","high","xhigh","max"]);function x(e){const t=e.indexOf("/");if(t<=0||t===e.length-1)return;const o=e.slice(0,t),n=e.slice(t+1),s=n.lastIndexOf(":"),f=s>0?n.slice(s+1).toLowerCase():void 0;return{providerId:o,modelId:f!==void 0&&L.has(f)?n.slice(0,s):n,...f!==void 0&&L.has(f)&&f!=="off"?{thinkingLevel:f}:{}}}u(x,"parseModelSpec");function H(e){const t=u(o=>{const n=e[o].strong.slice(0,e[o].strong.indexOf("/"));return{family:o,credentialSource:"default",providerId:n,models:e[o]}},"route");return{anthropic:t("anthropic"),openai:t("openai")}}u(H,"synthesizeRoutes");function $(e,t){return[e,...t.filter(o=>o!==e)]}u($,"ordered");function K(e,t){return $(e,t).filter((o,n,s)=>s.indexOf(o)===n)}u(K,"strengths");function j(e,t,o){if(e.kind==="exact"){const r=x(e.spec);return r?[{routeId:"exact",credentialSource:"exact",family:r.providerId,strength:"strong",...r,rank:0}]:[]}const n=P(t,o??null),s={...n.modelRoutes??{},...n.legacyModelRoutes??{}},f=Object.keys(s).length>0?s:H(n.modelLadders),l=Object.entries(f),m=n.modelRouting?.strengthFallback??[U().defaultFallbackStrength??"strong"],S=l.map(([,r])=>r.family).filter((r,d,a)=>a.indexOf(r)===d),I=l.map(([,r])=>r.credentialSource).filter((r,d,a)=>a.indexOf(r)===d),c=e.kind==="concrete"?x(e.spec):void 0,v=e.kind==="logical"?e:void 0,i=u((r,d)=>{const a=x(r);return a!==void 0&&c!==void 0&&a.providerId===c.providerId&&a.modelId===c.modelId&&(!d||a.thinkingLevel===c.thinkingLevel)},"matchesConcrete"),p=c===void 0?void 0:l.find(([,r])=>Object.values(r.models).some(d=>i(d,!1))),y=v?.strength??(()=>{if(!c)return"strong";for(const r of[!0,!1])for(const d of r?b:[...b].reverse())if(l.some(([,a])=>{const h=a.models[d];return h!==void 0&&i(h,r)}))return d;return"strong"})(),O=v?.family??p?.[1].family??c?.providerId??"anthropic",T=c?I:n.modelRouting?.credentialSourceOrder??I,N=c?[O]:n.modelRouting?.familyOrder??S,R=[],F=new Set,C=u((r,d,a,h)=>{const g=x(h);if(!g||c&&g.modelId!==c.modelId)return;const k=JSON.stringify([r,g.providerId,g.modelId,g.thinkingLevel]);F.has(k)||(F.add(k),R.push({routeId:r,credentialSource:d.credentialSource,family:d.family,strength:a,...g,rank:R.length}))},"append");if(c){const[r,d]=p??["concrete",{family:O,credentialSource:"default"}];C(r,d,y,e.spec)}for(const r of T)for(const d of c?[y]:K(y,m))for(const a of $(O,N))for(const[h,g]of l){if(g.credentialSource!==r||g.family!==a)continue;const k=g.models[d];k&&C(h,g,d,k)}return R.map((r,d)=>({...r,rank:d}))}u(j,"expandModelCandidates");function X(e,t,o={}){if(e===void 0||e.kind==="logical")return;const n=j(e,o.cwd,o.profileId)[0];if(!(n===void 0||t.find(n.providerId,n.modelId)!==void 0))return{request:e,candidate:n,reason:"unregistered"}}u(X,"unregisteredConcreteModel");function A(e,t,o=Date.now()){const n=t.find(e.providerId,e.modelId);if(n===void 0)return{registered:!1,authenticated:!1};if(!w(e.providerId))return{registered:!0,authenticated:t.hasConfiguredAuth(n)};const s=D(e.providerId).filter(l=>l.authFailure===void 0),f=s.length>0&&s.every(l=>M(l,e.modelId)>o);return{registered:!0,authenticated:s.length>0||t.hasConfiguredAuth(n),...f?{coolingUntil:Math.min(...s.map(l=>M(l,e.modelId)))}:{}}}u(A,"probeRouteAvailability");function _(e,t,o={}){const n=j(e,o.cwd,o.profileId),s=new Set(n.map(i=>`${i.providerId}/${i.modelId}`)),f=e.kind==="logical"?t.getAll().filter(i=>!s.has(`${i.provider}/${i.id}`)).map((i,p)=>({routeId:`registry:${i.provider}/${i.id}`,credentialSource:"registry",family:i.provider,strength:"strong",providerId:i.provider,modelId:i.id,rank:n.length+p})):[],l=[...n,...f],m=o.now??Date.now(),S=l.some(i=>{const p=A(i,t,m);return w(i.providerId)&&p.registered&&p.authenticated}),I=G(l.map(i=>({...i,...A(i,t,m),automaticFallback:i.routeId.startsWith("registry:")?w(i.providerId)||!S:!0})),m,{pinnedToFirst:e.kind==="exact"}),c=I.candidates[0],v=c===void 0?void 0:t.find(c.providerId,c.modelId);return{...c!==void 0&&v!==void 0?{selected:{model:v,candidate:c}}:{},rejected:I.rejected}}u(_,"selectInitialModelRoute");function B(e,t,o){if(e){if(o)return{kind:"exact",spec:e};if(t){const n=t.lastIndexOf("/"),s=n>0?t.slice(n+1):"";if(b.includes(s))return{kind:"logical",family:t.slice(0,n),strength:s,spec:e}}return{kind:"concrete",spec:e}}}u(B,"modelRequestFromConfig");export{j as expandModelCandidates,B as modelRequestFromConfig,x as parseModelSpec,A as probeRouteAvailability,_ as selectInitialModelRoute,X as unregisteredConcreteModel};

package/dist/core/nvim-launch.d.ts

@@ -0,0 +1,7 @@
+export type NvimLaunchMode = 'readonly' | 'edit';
+/** Leading nvim arguments (before any `--` / file operands) for a launch mode. */
+export declare function nvimArgs(mode: NvimLaunchMode): string[];
+/** `nvim <args> -- <files>` as one shell-safe command string. */
+export declare function nvimShellCommand(mode: NvimLaunchMode, files: readonly string[], nvimBin?: string): string;
+/** Is `nvim` on PATH and runnable? */
+export declare function nvimAvailable(): boolean;

package/dist/core/nvim-launch.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var t=(n,i)=>r(n,"name",{value:i,configurable:!0});import{spawnSync as l}from"node:child_process";import{shellQuote as a}from"../shared/shell-quote.js";const u=["local hint = ' q  quit   (:q also works) '","local function apply()","  vim.keymap.set('n', 'q', '<cmd>qa<CR>', { buffer = 0, nowait = true, silent = true, desc = 'quit' })","  if vim.wo.winbar == '' then vim.wo.winbar = hint end","end","vim.api.nvim_create_autocmd({ 'BufWinEnter', 'FileType' }, { callback = apply })","apply()"].join(" "),c=["local hint = ' :wq  save & quit   \xB7   :q!  quit without saving '","local function apply() if vim.wo.winbar == '' then vim.wo.winbar = hint end end","vim.api.nvim_create_autocmd({ 'BufWinEnter' }, { callback = apply })","apply()"].join(" ");function m(n){return n==="readonly"?["-R","-c",`lua ${u}`]:["-c",`lua ${c}`]}t(m,"nvimArgs");function f(n,i,e="nvim"){const o=[a(e),...m(n).map(a)];return i.length>0&&o.push("--",...i.map(a)),o.join(" ")}t(f,"nvimShellCommand");function d(){const n=l("nvim",["--version"],{stdio:"ignore"});return n.error===void 0&&(n.status===0||n.status===null)}t(d,"nvimAvailable");export{m as nvimArgs,d as nvimAvailable,f as nvimShellCommand};

package/dist/core/output.d.ts

@@ -0,0 +1,35 @@
+import { CrtrError } from './errors.js';
+export declare const stdoutColor: {
+    dim: (s: string) => string;
+    bold: (s: string) => string;
+    red: (s: string) => string;
+    green: (s: string) => string;
+    yellow: (s: string) => string;
+    blue: (s: string) => string;
+    cyan: (s: string) => string;
+    gray: (s: string) => string;
+};
+export declare const stderrColor: {
+    dim: (s: string) => string;
+    bold: (s: string) => string;
+    red: (s: string) => string;
+    green: (s: string) => string;
+    yellow: (s: string) => string;
+    blue: (s: string) => string;
+    cyan: (s: string) => string;
+    gray: (s: string) => string;
+};
+export declare function out(line: string): void;
+export declare function err(line: string): void;
+export declare function hint(line: string): void;
+export declare function warn(line: string): void;
+export declare function info(line: string): void;
+export declare function jsonOut(obj: unknown): void;
+export declare function jsonError(error: CrtrError | Error): void;
+export declare function isTTY(): boolean;
+export declare function isJsonRequested(opts: {
+    json?: boolean;
+} | undefined): boolean;
+export declare function handleError(error: unknown, opts?: {
+    json?: boolean;
+}): never;

package/dist/core/output.js

@@ -0,0 +1,7 @@
+var a=Object.defineProperty;var r=(e,t)=>a(e,"name",{value:t,configurable:!0});import{CrtrError as i}from"./errors.js";import{ExitCode as p,SCHEMA_VERSION as u}from"../types.js";const s={reset:"\x1B[0m",dim:"\x1B[2m",bold:"\x1B[1m",red:"\x1B[31m",green:"\x1B[32m",yellow:"\x1B[33m",blue:"\x1B[34m",cyan:"\x1B[36m",gray:"\x1B[90m"};function m(e){return process.env.NO_COLOR?!1:process.env.FORCE_COLOR?!0:!!e.isTTY}r(m,"shouldColor");function o(e,t,n){return m(e)?`${t}${n}${s.reset}`:n}r(o,"paint");const g={dim:r(e=>o(process.stdout,s.dim,e),"dim"),bold:r(e=>o(process.stdout,s.bold,e),"bold"),red:r(e=>o(process.stdout,s.red,e),"red"),green:r(e=>o(process.stdout,s.green,e),"green"),yellow:r(e=>o(process.stdout,s.yellow,e),"yellow"),blue:r(e=>o(process.stdout,s.blue,e),"blue"),cyan:r(e=>o(process.stdout,s.cyan,e),"cyan"),gray:r(e=>o(process.stdout,s.gray,e),"gray")},c={dim:r(e=>o(process.stderr,s.dim,e),"dim"),bold:r(e=>o(process.stderr,s.bold,e),"bold"),red:r(e=>o(process.stderr,s.red,e),"red"),green:r(e=>o(process.stderr,s.green,e),"green"),yellow:r(e=>o(process.stderr,s.yellow,e),"yellow"),blue:r(e=>o(process.stderr,s.blue,e),"blue"),cyan:r(e=>o(process.stderr,s.cyan,e),"cyan"),gray:r(e=>o(process.stderr,s.gray,e),"gray")};function b(e){process.stdout.write(e.endsWith(`
+`)?e:e+`
+`)}r(b,"out");function d(e){process.stderr.write(e.endsWith(`
+`)?e:e+`
+`)}r(d,"err");function w(e){d(c.dim(`# ${e}`))}r(w,"hint");function E(e){d(c.yellow(`crtr: ${e}`))}r(E,"warn");function C(e){d(c.gray(`crtr: ${e}`))}r(C,"info");function O(e){const t=typeof e=="object"&&e!==null&&!Array.isArray(e)?{schema_version:u,...e}:{schema_version:u,data:e};process.stdout.write(JSON.stringify(t,null,2)+`
+`)}r(O,"jsonOut");function l(e){const t=e instanceof i?e:new i("error",e.message,p.GENERAL);process.stdout.write(JSON.stringify({schema_version:u,error:!0,code:t.code,message:t.message,...t.details??{}},null,2)+`
+`)}r(l,"jsonError");function h(){return!!process.stdout.isTTY}r(h,"isTTY");function $(e){return!!e?.json}r($,"isJsonRequested");function N(e,t={}){e instanceof i&&(t.json?l(e):d(c.red(`crtr: ${e.message}`)),process.exit(e.exitCode));const n=e;t.json?l(n):d(c.red(`crtr: ${n.message??String(n)}`)),process.exit(p.GENERAL)}r(N,"handleError");export{d as err,N as handleError,w as hint,C as info,$ as isJsonRequested,h as isTTY,l as jsonError,O as jsonOut,b as out,c as stderrColor,g as stdoutColor,E as warn};

package/dist/core/pagination.d.ts

@@ -0,0 +1,35 @@
+/** Encodes a stable sort key into an opaque base64url cursor token. */
+export declare function encodeCursor(key: string): string;
+/** Decodes an opaque cursor token back to the sort key it encodes.
+ *  Throws `CrtrError` with code `'invalid_cursor'` on malformed input. */
+export declare function decodeCursor(token: string): string;
+export interface PaginateResult<T> {
+    items: T[];
+    next_cursor: string | null;
+    total: number | null;
+}
+export interface PaginateOpts<T> {
+    /** Default page size when `params.limit` is absent. */
+    defaultLimit: number;
+    /** Hard cap; `params.limit` is clamped to [1, maxLimit]. */
+    maxLimit: number;
+    /** Returns the stable sort key for an item. Must match the sort order of the
+     *  input array — ascending by this key. */
+    keyOf: (item: T) => string;
+    /** Compares sort keys when their order is not raw code-unit order. */
+    compareKeys?: (left: string, right: string) => number;
+    /** 'count' → compute and return `total`; 'omit' → return `null`. */
+    total: 'count' | 'omit';
+}
+/**
+ * Returns one page of items from a pre-sorted list, with a stable opaque
+ * cursor for resumption.
+ *
+ * @param allItemsSortedAscByKey - Full dataset, sorted ascending by `keyOf`.
+ * @param params - Agent-supplied `{ limit?, cursor? }` from stdin.
+ * @param opts - Caller-supplied configuration (limits, key extractor, total).
+ */
+export declare function paginate<T>(allItemsSortedAscByKey: T[], params: {
+    limit?: number;
+    cursor?: string;
+}, opts: PaginateOpts<T>): PaginateResult<T>;

package/dist/core/pagination.js

@@ -0,0 +1 @@
+var x=Object.defineProperty;var c=(r,e)=>x(r,"name",{value:e,configurable:!0});import{CrtrError as s}from"./errors.js";import{ExitCode as d}from"../types.js";function v(r){const e=JSON.stringify({k:r});return Buffer.from(e,"utf8").toString("base64url")}c(v,"encodeCursor");function O(r){let e;try{e=Buffer.from(r,"base64url").toString("utf8")}catch{throw new s("invalid_cursor","cursor could not be decoded.",d.USAGE,{received:r,next:"Omit cursor to restart from the beginning."})}let t;try{t=JSON.parse(e)}catch{throw new s("invalid_cursor","cursor payload is not valid JSON.",d.USAGE,{received:r,next:"Omit cursor to restart from the beginning."})}if(typeof t!="object"||t===null||!("k"in t)||typeof t.k!="string")throw new s("invalid_cursor","cursor payload is missing required key field.",d.USAGE,{received:r,next:"Omit cursor to restart from the beginning."});return t.k}c(O,"decodeCursor");function y(r,e,t){const m=e.limit!==void 0?e.limit:t.defaultLimit,u=Math.min(Math.max(1,m),t.maxLimit);let n=0;if(e.cursor!==void 0){const f=O(e.cursor),h=t.compareKeys??((o,a)=>o<a?-1:o>a?1:0);n=r.findIndex(o=>h(t.keyOf(o),f)>0),n===-1&&(n=r.length)}const i=r.slice(n,n+u);let l=null;if(i.length===u&&n+u<r.length){const f=t.keyOf(i[i.length-1]);l=v(f)}const g=t.total==="count"?r.length:null;return{items:i,next_cursor:l,total:g}}c(y,"paginate");export{O as decodeCursor,v as encodeCursor,y as paginate};

package/dist/core/plugin-env.d.ts

@@ -0,0 +1,8 @@
+export interface PluginEnvDeclaration {
+    description: string;
+    required?: boolean;
+    secret?: boolean;
+    url?: string;
+}
+export declare function invalidPluginEnvReasons(raw: unknown): string[];
+export declare function requiredPluginEnv(raw: Record<string, PluginEnvDeclaration> | undefined): string[];

package/dist/core/plugin-env.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var s=(t,e)=>u(t,"name",{value:e,configurable:!0});import{validateEnvVarName as a}from"./env-name.js";import{isReservedEnvName as f}from"./profiles/env-store.js";function l(t){if(!t||typeof t!="object"||Array.isArray(t))return["env must be an object mapping variable names to declarations"];const e=[];for(const[r,i]of Object.entries(t)){if((!a(r).isValid||f(r))&&e.push(`env.${r} has an invalid or reserved name`),!i||typeof i!="object"||Array.isArray(i)){e.push(`env.${r} must be an object`);continue}const n=i;(typeof n.description!="string"||!n.description.trim())&&e.push(`env.${r}.description must be a non-empty string`),n.required!==void 0&&typeof n.required!="boolean"&&e.push(`env.${r}.required must be boolean`),n.secret!==void 0&&typeof n.secret!="boolean"&&e.push(`env.${r}.secret must be boolean`),n.url!==void 0&&(typeof n.url!="string"||!/^https:\/\/[^\s]+$/.test(n.url))&&e.push(`env.${r}.url must be an https URL`);for(const o of Object.keys(n))["description","required","secret","url"].includes(o)||e.push(`env.${r}.${o} is unknown`)}return e}s(l,"invalidPluginEnvReasons");function m(t){return Object.entries(t??{}).filter(([,e])=>e.required!==!1).map(([e])=>e)}s(m,"requiredPluginEnv");export{l as invalidPluginEnvReasons,m as requiredPluginEnv};

package/dist/core/plugin-extensions.d.ts

@@ -0,0 +1,29 @@
+import type { MemoryExtensionDeclarations, MemoryExtensionScalar, PluginManifest, Scope } from '../types.js';
+export type MemoryExtensionCatalog = Record<string, MemoryExtensionDeclarations>;
+export interface MemoryExtensionValidationIssue {
+    path: string;
+    message: string;
+}
+export interface MemoryExtensionCatalogOptions {
+    /** The manifest currently being staged. Its namespace shadows an installed copy only for that candidate validation. */
+    candidate?: Pick<PluginManifest, 'name' | 'memory_extensions'>;
+}
+export declare function isMemoryExtensionScalar(value: unknown): value is MemoryExtensionScalar;
+/** Parse the closed declaration addendum. Callers that accept a plugin manifest
+ * invoke this at their install/preflight boundary; normal runtime catalogs only
+ * admit declarations which have already cleared that boundary. */
+export declare function validateMemoryExtensionDeclarations(raw: unknown): MemoryExtensionDeclarations;
+/** Throw when a manifest carries an invalid addendum; absent is valid. */
+export declare function validatePluginMemoryExtensions(manifest: Pick<PluginManifest, 'memory_extensions'>): void;
+/** Declarations for a native document. Project documents use their owning
+ * project scope only, then user scope; profile/node/user docs use user scope. */
+/** Installed declarations a package candidate's documents validate against:
+ * a project-scope candidate sees its project's plugins, then user scope; any
+ * other scope sees user scope. Disabled plugins remain present so existing
+ * values can still be checked. The candidate's namespace shadows an installed
+ * copy of the same name. */
+export declare function pluginExtensionCatalog(scope: Scope, scopeRootPath: string, options?: MemoryExtensionCatalogOptions): MemoryExtensionCatalog;
+/** Validate the raw `extensions` frontmatter value. Unresolved namespaces are
+ * intentionally reported rather than discarded: removal leaves raw metadata
+ * intact but lint-invalid until its plugin returns. */
+export declare function validateMemoryExtensionValues(raw: unknown, catalog: MemoryExtensionCatalog): MemoryExtensionValidationIssue[];

package/dist/core/plugin-extensions.js

@@ -0,0 +1 @@
+var _=Object.defineProperty;var l=(e,o)=>_(e,"name",{value:o,configurable:!0});import{listInstalledPlugins as y,listInstalledPluginsInRoot as $}from"./resolver.js";const v=/^[a-z][a-z0-9]*(?:-[a-z0-9]+)*$/,j=new Set(["type","values","default","write_help","edit_help"]);function p(e){return e!==null&&typeof e=="object"&&!Array.isArray(e)}l(p,"isRecord");function m(e){return typeof e=="string"||typeof e=="boolean"||typeof e=="number"&&Number.isFinite(e)}l(m,"isMemoryExtensionScalar");function f(e,o){return new Error(`invalid memory_extensions declaration at ${e}: ${o}`)}l(f,"declarationError");function g(e){return typeof e=="string"&&e.trim()!==""&&!/[\r\n]/.test(e)}l(g,"validHelp");function h(e,o){return m(o)?e.type==="enum"?typeof o=="string"&&e.values.includes(o):typeof o===e.type:!1}l(h,"validDefault");function x(e){if(!p(e))throw f("memory_extensions","expected a non-empty object");const o={},i=Object.entries(e);if(i.length===0)throw f("memory_extensions","must not be empty");for(const[a,n]of i){const t=`memory_extensions.${a}`;if(!v.test(a))throw f(t,"field names must be lowercase kebab-case");if(!p(n))throw f(t,"expected a declaration object");for(const s of Object.keys(n))if(!j.has(s))throw f(t,`unknown key \`${s}\``);const r=n.type;if(r!=="boolean"&&r!=="string"&&r!=="number"&&r!=="enum")throw f(`${t}.type`,"expected boolean, string, number, or enum");if(!g(n.write_help))throw f(`${t}.write_help`,"expected a nonblank single-line string");if(!g(n.edit_help))throw f(`${t}.edit_help`,"expected a nonblank single-line string");if(r==="enum"){const s=n.values;if(!Array.isArray(s)||s.length===0||!s.every(c=>typeof c=="string"&&c!==""))throw f(`${t}.values`,"expected a non-empty string list");if(new Set(s).size!==s.length)throw f(`${t}.values`,"values must be unique");const d={type:r,values:[...s],write_help:n.write_help,edit_help:n.edit_help};if("default"in n){if(!h(d,n.default))throw f(`${t}.default`,"must be one of the declared enum values");d.default=n.default}o[a]=d;continue}if("values"in n)throw f(`${t}.values`,"is allowed only for enum declarations");const u={type:r,write_help:n.write_help,edit_help:n.edit_help};if("default"in n){if(!h(u,n.default))throw f(`${t}.default`,`must be a ${r}`);u.default=n.default}o[a]=u}return o}l(x,"validateMemoryExtensionDeclarations");function O(e){e.memory_extensions!==void 0&&x(e.memory_extensions)}l(O,"validatePluginMemoryExtensions");function b(e,o){if(e.memory_extensions!==void 0)try{return x(e.memory_extensions)}catch(i){if(o)throw i;return}}l(b,"declarationsFromManifest");function E(e,o,i){const a={},n=new Set;if(i!==void 0){n.add(i.name);const t=b(i,!0);t!==void 0&&(a[i.name]=t)}for(const t of e)for(const r of t){if(o&&!r.enabled)continue;const u=r.manifest.name;if(n.has(u)||a[u]!==void 0)continue;const s=b(r.manifest,!1);s!==void 0&&(a[u]=s)}return a}l(E,"catalogForPlugins");function M(e,o,i={}){const a=e==="project"?[$("project",o),y("user")]:e==="builtin"?[]:[y("user")];return E(a,!1,i.candidate)}l(M,"pluginExtensionCatalog");function I(e,o){if(e===void 0)return[];if(!p(e))return[{path:"extensions",message:"expected a mapping"}];const i=[];for(const[a,n]of Object.entries(e)){const t=`extensions.${a}`;if(!p(n)){i.push({path:t,message:"expected a mapping"});continue}const r=o[a];if(r===void 0){i.push({path:t,message:"unresolved extension namespace"});for(const[u,s]of Object.entries(n))m(s)||i.push({path:`${t}.${u}`,message:"expected a string, boolean, or finite number"});continue}for(const[u,s]of Object.entries(n)){const d=`${t}.${u}`;if(!m(s)){i.push({path:d,message:"expected a string, boolean, or finite number"});continue}const c=r[u];if(c===void 0){i.push({path:d,message:"undeclared extension field"});continue}if(!h(c,s)){const w=c.type==="enum"?`one of ${c.values.join("|")}`:c.type;i.push({path:d,message:`expected ${w}`})}}}return i}l(I,"validateMemoryExtensionValues");export{m as isMemoryExtensionScalar,M as pluginExtensionCatalog,x as validateMemoryExtensionDeclarations,I as validateMemoryExtensionValues,O as validatePluginMemoryExtensions};

package/dist/core/plugin-swap-lock.d.ts

@@ -0,0 +1,9 @@
+/** Under the scope root's `tmp/`, alongside the staging and `.prev` dirs the
+ *  swap itself uses, so one directory holds the whole transition. */
+export declare function bundleSwapLockPath(scopeRootPath: string, name: string): string;
+/** Whether ANOTHER live process currently holds this plugin's swap lock. Our
+ *  own lock does not count: the swapper reads the plugin list from inside its
+ *  own critical section. */
+export declare function bundleSwapInFlightElsewhere(scopeRootPath: string, name: string): boolean;
+/** Wait out another process's swap of this plugin, bounded. */
+export declare function awaitBundleSwap(scopeRootPath: string, name: string): void;

package/dist/core/plugin-swap-lock.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var n=(e,o)=>r(e,"name",{value:o,configurable:!0});import{join as p}from"node:path";import{awaitExclusiveLockRelease as c,exclusiveLockOwnerPid as l}from"./exclusive-lock.js";const u=2e3;function i(e,o){return p(e,"tmp",`${o}.swap.lock`)}n(i,"bundleSwapLockPath");function d(e,o){const t=l(i(e,o));return t!==null&&t!==process.pid}n(d,"bundleSwapInFlightElsewhere");function f(e,o){c(i(e,o),u)}n(f,"awaitBundleSwap");export{f as awaitBundleSwap,d as bundleSwapInFlightElsewhere,i as bundleSwapLockPath};

package/dist/core/pool-credential-store.d.ts

@@ -0,0 +1,34 @@
+import type { Credential, CredentialInfo, CredentialStore } from '@earendil-works/pi-ai';
+import { type ManagedProviderId, type SubscriptionCredential } from './subscription-state.js';
+/**
+ * Which pool account pi is handed for a managed provider. Deliberately dumb: pi calls `read()`
+ * mid-turn, so this must be cheap, must not touch the network, and must not make a policy
+ * decision that surprises a turn already in flight. First entry that is healthy and not cooling
+ * wins; ties break on pool order, which is stable and user-controlled (`/provider-sub select`
+ * promotes).
+ *
+ * When every account is cooling or auth-failed we still return the first one rather than
+ * nothing: deciding a turn is unservable belongs to the rotation loop, and an `undefined` here
+ * would make pi's eager launch gate FATAL a node that rotation could still have serviced.
+ */
+export declare function electPoolCredential(providerId: ManagedProviderId, now?: number): SubscriptionCredential | undefined;
+export declare class PoolCredentialStore implements CredentialStore {
+    private readonly authPath;
+    private readonly auth;
+    constructor(authPath?: string);
+    read(providerId: string): Promise<Credential | undefined>;
+    list(): Promise<readonly CredentialInfo[]>;
+    /**
+     * pi's locked read-modify-write, chiefly its OAuth refresh. The whole transaction — electing
+     * the account, running pi's `fn`, committing the result — happens under the pool file's
+     * cross-process lock, because a refresh token is single-use: two brokers electing the same
+     * expired account outside a lock would both spend it and the loser would get a genuine
+     * `invalid_grant`. Electing under the lock is also what guarantees the refreshed token lands
+     * back on exactly the account whose token was spent.
+     *
+     * A managed provider with no pool account is NOT created here — pi must not be able to mint a
+     * managed account behind crouter's login surfaces, which own the account-identity gate.
+     */
+    modify(providerId: string, fn: (current: Credential | undefined) => Promise<Credential | undefined>): Promise<Credential | undefined>;
+    delete(providerId: string): Promise<void>;
+}

package/dist/core/pool-credential-store.js

@@ -0,0 +1 @@
+var l=Object.defineProperty;var s=(n,t)=>l(n,"name",{value:t,configurable:!0});import{CrouterCredentialStore as m,defaultAuthPath as w}from"./auth-file.js";import{MANAGED_PROVIDER_IDS as x,getProviderLabel as g,isManagedProvider as c,modifyElectedSubscription as y,readSubscriptionPool as h,removeManagedAccount as P}from"./subscription-state.js";function r(n,t=Date.now()){return f(h(n),t)}s(r,"electPoolCredential");function f(n,t=Date.now()){return n.find(e=>!e.authFailure&&(!e.rateLimitedUntil||e.rateLimitedUntil<=t))??n[0]}s(f,"electFrom");function d(n){return{type:"oauth",refresh:n.refresh,access:n.access,expires:n.expires,...n.accountId?{accountId:n.accountId}:{},...n.clientId?{clientId:n.clientId}:{}}}s(d,"toCredential");class D{static{s(this,"PoolCredentialStore")}authPath;auth;constructor(t=w()){this.authPath=t,this.auth=new m(t)}async read(t){if(!c(t))return this.auth.read(t);const e=r(t);if(e!==void 0)return d(e);const i=await this.auth.read(t);return i?.type==="oauth"?void 0:i}async list(){const t=(await this.auth.list()).filter(e=>!(c(e.providerId)&&e.type==="oauth"));for(const e of x)t.some(i=>i.providerId===e)||h(e).length>0&&t.push({providerId:e,type:"oauth"});return t}async modify(t,e){if(!c(t))return this.auth.modify(t,e);if(r(t)===void 0){if(await this.read(t)!==void 0)return this.auth.modify(t,e);throw new Error(`${g(t)} has no account to update \u2014 add one with \`crtr sys settings\` or \`/provider-sub ${t} add\`.`)}const i=await y(t,u=>f(u),async u=>{const a=await e(d(u));if(a===void 0||a.type!=="oauth")return;const o=a.clientId;return{refresh:a.refresh,access:a.access,expires:a.expires,...typeof o=="string"&&o?{clientId:o}:{}}});return i===void 0?void 0:d(i)}async delete(t){if(!c(t))return this.auth.delete(t);const e=r(t);e!==void 0&&await P(t,e.label),await this.auth.read(t)!==void 0&&await this.auth.delete(t)}}export{D as PoolCredentialStore,r as electPoolCredential};

package/dist/core/predicate.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Predicate matcher engine — vendored verbatim from pi's frontmatter-rules
+ * extension.
+ *
+ * Source: src/builtin-pi-packages/pi-crtr-extensions/extensions/frontmatter-rules/index.ts
+ *         (the "Condition language" block, functions `asArray` … `evalCondition`).
+ *
+ * The unified document substrate uses this to evaluate a document's `gate`
+ * predicate against a node-config subject (e.g. `orchestration.depth: { gte: 2 }`).
+ *
+ * This is intentionally a COPY, not an import: the bundled pi package is
+ * excluded from crouter's tsc compile unit (tsconfig `exclude`) — it is loaded
+ * by pi's own TS loader at runtime — so compiled core cannot import from it;
+ * cross-boundary imports go extension→core only. The functions are pure
+ * TS over `unknown` / `Record<string, unknown>` with zero external imports, so
+ * vendoring them keeps this module standalone and dependency-free. Keep it in
+ * sync with the source by hand if the matcher language ever changes.
+ *
+ * Condition language (evaluated against the subject object):
+ *   A condition is a map of <field> -> <matcher>, AND-ed across fields.
+ *   `field` may be dotted to reach nested values (e.g. `orchestration.depth`).
+ *
+ *   Matcher forms:
+ *     scalar (string/number/bool/null)
+ *         field === value, OR (if the field is an array) the array includes value
+ *     array  [a, b, c]
+ *         membership/intersection: field is one of these, OR the field array
+ *         shares any element with these
+ *     object { <op>: <arg>, ... }   (multiple ops AND together)
+ *         eq          equals (scalar or array-includes)
+ *         ne          not eq
+ *         in          [..] — field (or any of its array elements) is in the list
+ *         nin         not in
+ *         exists      true|false — field is present / absent
+ *         contains    field array includes this value
+ *         containsAll [..] — field array includes all of these
+ *         containsAny [..] — field array includes any of these
+ *         matches     regex string, case-sensitive (tests String(field); arrays: any)
+ *         imatches    regex string, case-insensitive
+ *         gt gte lt lte   numeric comparison
+ *
+ *   Combinators (reserved keys at any condition level):
+ *     all: [ {..}, {..} ]   every sub-condition true (AND)
+ *     any: [ {..}, {..} ]   at least one true (OR)
+ *     not: { .. }           sub-condition false
+ *   Sibling field matchers next to combinators are AND-ed in.
+ *
+ *   Two load-bearing edge cases preserved from the source:
+ *     - An empty condition (`{}`) is INERT: it returns false, NOT match-all.
+ *     - An unknown op never matches.
+ */
+export declare function asArray(v: unknown): unknown[];
+export declare function scalarEq(a: unknown, b: unknown): boolean;
+export declare function getField(subject: unknown, key: string): unknown;
+export declare function toRegExp(arg: unknown, flags: string): RegExp | null;
+export declare function applyOp(op: string, value: unknown, arg: unknown): boolean;
+export declare function matchField(value: unknown, matcher: unknown): boolean;
+/**
+ * Evaluate a `gate` predicate against a subject object.
+ *
+ * This is the one function consumers call. Returns true iff `condition`
+ * matches `subject`. A null/non-object condition and an empty object both
+ * return false (inert), never match-all.
+ */
+export declare function evalCondition(condition: unknown, subject: Record<string, unknown>): boolean;

package/dist/core/predicate.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var u=(r,e)=>m(r,"name",{value:e,configurable:!0});function l(r){return Array.isArray(r)?r:r===void 0?[]:[r]}u(l,"asArray");function o(r,e){return r===e?!0:(typeof r=="number"||typeof r=="string")&&(typeof e=="number"||typeof e=="string")?String(r)===String(e):!1}u(o,"scalarEq");function c(r,e){if(r&&typeof r=="object"&&e in r)return r[e];if(!e.includes("."))return;let n=r;for(const s of e.split(".")){if(n==null||typeof n!="object")return;n=n[s]}return n}u(c,"getField");function A(r,e){if(typeof r!="string")return null;try{return new RegExp(r,e)}catch{return null}}u(A,"toRegExp");function a(r,e,n){const s=l(e);switch(r){case"eq":return Array.isArray(e)?e.some(i=>o(i,n)):o(e,n);case"ne":return!a("eq",e,n);case"in":return l(n).some(i=>s.some(t=>o(t,i)));case"nin":return!a("in",e,n);case"exists":return e!==void 0==(n!==!1);case"contains":return s.some(i=>o(i,n));case"containsAll":return l(n).every(i=>s.some(t=>o(t,i)));case"containsAny":return l(n).some(i=>s.some(t=>o(t,i)));case"matches":case"imatches":{const i=A(n,r==="imatches"?"i":"");return i?s.some(t=>typeof t=="string"||typeof t=="number"?i.test(String(t)):!1):!1}case"gt":case"gte":case"lt":case"lte":{const i=Number(e),t=Number(n);return Number.isNaN(i)||Number.isNaN(t)?!1:r==="gt"?i>t:r==="gte"?i>=t:r==="lt"?i<t:i<=t}default:return!1}}u(a,"applyOp");function p(r,e){if(e===null||["string","number","boolean"].includes(typeof e))return Array.isArray(r)?r.some(n=>o(n,e)):o(r,e);if(Array.isArray(e)){const n=l(r);return e.some(s=>n.some(i=>o(i,s)))}return e&&typeof e=="object"?Object.entries(e).every(([n,s])=>a(n,r,s)):!1}u(p,"matchField");function y(r,e){if(r==null)return!1;if(Array.isArray(r))return r.every(t=>y(t,e));if(typeof r!="object")return!1;const n=r;if("all"in n||"any"in n||"not"in n){let t=!0;"all"in n&&(t=t&&l(n.all).every(f=>y(f,e))),"any"in n&&(t=t&&l(n.any).some(f=>y(f,e))),"not"in n&&(t=t&&!y(n.not,e));for(const f of Object.keys(n))f==="all"||f==="any"||f==="not"||(t=t&&p(c(e,f),n[f]));return t}const i=Object.keys(n);return i.length===0?!1:i.every(t=>p(c(e,t),n[t]))}u(y,"evalCondition");export{a as applyOp,l as asArray,y as evalCondition,c as getField,p as matchField,o as scalarEq,A as toRegExp};

package/dist/core/preview-registry.d.ts

@@ -0,0 +1,59 @@
+export declare const SUPPRESS_OUTPUT_LEAVES: ReadonlySet<string>;
+/** True when the leaf at this full help-name path (e.g. "canvas snapshot")
+ *  declares `preview.suppressOutput: true`. */
+export declare function suppressOutputForLeaf(helpName: string): boolean;
+/** Same lookup from argv tokens (e.g. ['node', 'inspect', 'snapshot', 'abc'])
+ *  instead of a pre-joined help name. Matches a registered leaf name against
+ *  a *prefix* of the tokens, not the whole joined tail, so a leaf's own
+ *  positional arguments (e.g. the snapshot id in `node inspect snapshot
+ *  abc`) don't prevent the match. */
+export declare function suppressOutputForPath(tokens: readonly string[]): boolean;
+export declare const HELP_ICON: string;
+/** Glyphs for the plain agent tools the attach viewer re-skins (render/tool-calls.ts).
+ *  Same registry as the crtr command icons so every Nerd Font codepoint the viewer
+ *  paints lives in one file: terminal for `bash`, file-text for `read`, floppy for
+ *  `write` (content committed to disk), pencil-square for `edit`. */
+export declare const TOOL_ICON: Readonly<Record<'bash' | 'read' | 'write' | 'edit', string>>;
+/** Per-leaf overrides, keyed by full leaf help-name path (e.g. "doc
+ *  lint"), same shape as SUPPRESS_OUTPUT_LEAVES. */
+export declare const LEAF_ICON_CP: Record<string, number>;
+/** Resolve the Nerd Font glyph for a command's argv tokens: the longest
+ *  matching LEAF_ICON_CP prefix, else the tokens[0] family glyph, else the
+ *  generic ◆ fallback for an unmapped family. */
+export declare function iconForPath(tokens: readonly string[]): string;
+export type SummaryTone = 'plain' | 'success' | 'error' | 'warning' | 'muted' | 'accent';
+export interface SummaryLine {
+    text: string;
+    tone?: SummaryTone;
+}
+export interface CrtrPreview {
+    path: string;
+    result?: Record<string, unknown>;
+    jsonl?: Record<string, unknown>[];
+    error?: Record<string, unknown>;
+}
+/** Every crtr invocation's own structured result in one bash tool result, in
+ *  invocation order — mirrored onto `details` by the canvas preview extension
+ *  (pi-extensions/canvas-preview-result.ts), and present on live tool events and
+ *  on rebuilt snapshot messages alike.
+ *
+ *  `crtrPreviews` carries every invocation in the call; `crtrPreview` (the last
+ *  record alone) is all a transcript persisted before the channel became a list
+ *  can offer, so both are read. This validates only the transport envelope —
+ *  command-owned summaries validate the fields they use. */
+export declare function crtrPreviewRecords(result: unknown): CrtrPreview[];
+type SummaryInput = {
+    result?: Record<string, unknown>;
+    jsonl?: Record<string, unknown>[];
+    error?: Record<string, unknown>;
+};
+type Summarizer = (input: SummaryInput, tokens: readonly string[]) => SummaryLine[] | null;
+export declare const SUMMARIZERS: ReadonlyArray<{
+    path: string;
+    run: Summarizer;
+}>;
+/** Summarize an exact CLI result record. The recorded path is authoritative:
+ * shell tokenization is used only for an invocation's static icon/help chrome,
+ * never to identify or decode the returned leaf data. */
+export declare function summarizePath(preview: CrtrPreview, tokens?: readonly string[]): SummaryLine[] | null;
+export {};

package/dist/core/preview-registry.js

@@ -0,0 +1,3 @@
+var v=Object.defineProperty;var u=(n,e)=>v(n,"name",{value:e,configurable:!0});const g=new Set(["canvas roster","canvas snapshot","node inspect snapshot","node inspect show","sys context sysprompt"]);function N(n){return g.has(n)}u(N,"suppressOutputForLeaf");function M(n){for(const e of g){const t=e.split(" ");if(t.length<=n.length&&t.every((r,s)=>n[s]===r))return!0}return!1}u(M,"suppressOutputForPath");const b=61529,R=String.fromCodePoint(b),H={bash:String.fromCodePoint(61728),read:String.fromCodePoint(61788),write:String.fromCodePoint(61639),edit:String.fromCodePoint(61508)},w={canvas:61672,capture:61501,device:61705,doc:61485,human:61447,node:61842,pkg:61874,profile:62141,push:61678,"exa-search":61442,surface:61704,sys:61459},k={"canvas dashboard":61668,"canvas snapshot":61488,"canvas browse":61774,"canvas attention count":62098,"canvas attention list":61498,"canvas attention map":62073,"canvas revive":61473,"node lifecycle revive":61473,"canvas list":61498,"canvas read":61485,"canvas search":61442,"canvas history search":61442,"canvas history grep":61616,"sys daemon start":61515,"sys daemon status":61713,"sys daemon stop":61517,"canvas chord":61441,"surface tmux-spread":61449,"canvas issue new":61832,"canvas prune":61636,"human send":61529,"human review":61508,"human show":61704,"human cancel":61453,"human list":61498,"human resolve":61452,"doc write":61504,"doc edit":61508,"doc history":61914,"doc lint":61770,"node new":61543,"node message send":61664,"node message request":61664,"cron add":61463,"node wait deadline":61463,"node subscription add":61683,"node subscription remove":61942,"node promote":61698,"node yield":62093,"surface node focus":61531,"surface node cycle":61473,"node inspect list":61498,"node inspect show":61550,"node inspect snapshot":61488,"node inspect context":61564,"node lifecycle recycle":61880,"node lifecycle close":61453,"node lifecycle demote":61699,"node config":61459,"cron list":61463,"cron cancel":61534,"pkg plugin install":61465,"pkg plugin remove":61460,"pkg plugin enable":61452,"pkg plugin disable":61534,"pkg plugin update":61473,"pkg plugin list":61498,"pkg plugin show":61550,"pkg market add":61543,"pkg market remove":61460,"pkg market update":61473,"pkg market list":61498,"pkg market browse":61774,"push update":61587,"push final":61726,"exa-search web":61612,"exa-search answer":61557,"exa-search contents":61686,"surface attach to":61926,"sys config get":61465,"sys config set":61504,"sys config path":61563,"sys settings":61459,"sys setup":61613,"sys doctor":61681,"sys context sysprompt":61788,"sys context prompt-review":61442,"sys feedback":61557,"sys update":61473,"sys version":61483,"sys sync":61561};function U(n){let e;for(const[r,s]of Object.entries(k)){const o=r.split(" ");o.length<=n.length&&o.every((a,f)=>n[f]===a)&&(e===void 0||o.length>e.words)&&(e={words:o.length,cp:s})}if(e!==void 0)return String.fromCodePoint(e.cp);const t=n.length>0?w[n[0]]:void 0;return t!==void 0?String.fromCodePoint(t):"\u25C6"}u(U,"iconForPath");function p(n){return n!==null&&typeof n=="object"&&!Array.isArray(n)?n:void 0}u(p,"plainObject");function T(n){const e=p(p(n)?.details);if(e===void 0)return[];const t=e.crtrPreviews;return(Array.isArray(t)?t:[e.crtrPreview]).flatMap(s=>{const o=p(s);if(o===void 0||typeof o.path!="string")return[];const a=o.jsonl;return[{path:o.path,result:p(o.result),jsonl:Array.isArray(a)?a.flatMap(f=>{const h=p(f);return h===void 0?[]:[h]}):void 0,error:p(o.error)}]})}u(T,"crtrPreviewRecords");const P=4;function c(n){return n.result}u(c,"record");function i(n,e){const t=n[e];return typeof t=="string"&&t!==""?t:void 0}u(i,"stringField");function x(n,e){return typeof n[e]=="boolean"?n[e]:void 0}u(x,"booleanField");function l(n,e){return typeof n[e]=="number"&&Number.isFinite(n[e])?n[e]:void 0}u(l,"numberField");function A(n,e){const t=n[e];return Array.isArray(t)&&t.every(r=>r!==null&&typeof r=="object"&&!Array.isArray(r))?t:void 0}u(A,"arrayField");function D(n){const e=n.replace(/[\\/]+$/,""),t=Math.max(e.lastIndexOf("/"),e.lastIndexOf("\\"));return t===-1?e:e.slice(t+1)}u(D,"basename");function S(n,e){return n.length>e?`${n.slice(0,e).trimEnd()}\u2026`:n}u(S,"truncateLine");function $(n,e,t=5){const r=n.map(a=>i(a,e));if(r.some(a=>a===void 0))return;const s=r.slice(0,t),o=r.length-s.length;return o>0?`${s.join(", ")}, \u2026 ${o} more`:s.join(", ")}u($,"topNames");function j(n){const e=n.error;if(e===void 0)return null;const t=i(e,"error"),r=i(e,"message");return t===void 0||r===void 0?null:[{text:t,tone:"error"},{text:S(r,160),tone:"muted"}]}u(j,"summarizeError");function C(n){const e=c(n);if(e===void 0)return null;const t=i(e,"deleted")??i(e,"remote");if(t!==void 0)return[{text:t.trim().split(`
+`)[0]??"",tone:"warning"}];const r=i(e,"readMetadata")??i(e,"object");if(r===void 0)return null;const s=r.split(`
+`).filter(o=>o.trim()!==""&&!o.startsWith("<auto-loaded-context")&&!o.startsWith("</auto-loaded-context"));return s.length===0?null:[{text:s[0]},...s.slice(1,P).map(o=>({text:o,tone:"muted"}))]}u(C,"summarizeCanvasRead");function _(n,e=!1){return t=>{const r=c(t),s=r===void 0?void 0:l(r,"count")??l(r,"total");return s===void 0?null:s===0&&e?[{text:`PASS \xB7 no ${n}`,tone:"success"}]:[{text:`${s} ${n}`,tone:s===0?"muted":"plain"}]}}u(_,"summarizeCount");function d(n,e="items"){return t=>{const r=c(t);if(r===void 0)return null;const s=A(r,e),o=l(r,"total")??s?.length;if(s===void 0||o===void 0)return null;const a=[{text:`${o} ${n}`,tone:o===0?"muted":"plain"}],f=$(s,"name");return f!==void 0&&f!==""&&a.push({text:f,tone:"muted"}),a}}u(d,"summarizeArray");function O(n){const t=c(n)?.counts;if(t===null||typeof t!="object"||Array.isArray(t))return null;const r=Object.entries(t);if(r.some(([,a])=>typeof a!="number"))return null;const s=r.reduce((a,[,f])=>a+f,0);if(s===0)return[{text:"PASS \xB7 no pending asks",tone:"success"}];const o=r.filter(([,a])=>a>0).sort((a,f)=>f[1]-a[1])[0];return o===void 0?null:[{text:`${s} asks`,tone:"warning"},{text:`hottest: ${o[0]} (${o[1]})`,tone:"muted"}]}u(O,"summarizeAttentionMap");function m(n,e,t){return r=>{const s=c(r);if(s===void 0)return null;const o=x(s,n);if(o===void 0)return null;const a=l(s,"pid")??l(s,"existing_pid");return[{text:o?`${e}${a===void 0?"":` \xB7 pid ${a}`}`:t,tone:o?"success":"muted"}]}}u(m,"summarizeDaemon");function z(n){const e=c(n);if(e===void 0||i(e,"page_id")===void 0)return null;const t=x(e,"reply");return t===void 0?null:[{text:t?"page sent \u2192 waiting on human":"announcement sent",tone:t?"accent":"success"}]}u(z,"summarizeHumanSend");function E(n){const e=c(n);if(e===void 0)return null;const t=x(e,"resolved"),r=i(e,"job_id");return t===void 0||r===void 0?null:[{text:`${t?"resolved":"not resolved"} ${r}`,tone:t?"success":"warning"}]}u(E,"summarizeHumanResolve");function y(n){const e=c(n);if(e===void 0)return null;const t=i(e,"status");return t===void 0?null:[{text:t,tone:["done","success","submitted","filed"].includes(t)?"success":t==="failed"?"error":"plain"}]}u(y,"summarizeStatus");function F(n){const e=n.jsonl;if(e===void 0)return null;const t=e.filter(r=>i(r,"name")!==void 0&&l(r,"projects_count")!==void 0);return t.length===0&&e.length>0?null:[{text:`${t.length} profile${t.length===1?"":"s"}`},...t.slice(0,5).map(r=>({text:`${i(r,"name")} \xB7 ${l(r,"projects_count")} projects`,tone:"muted"}))]}u(F,"summarizeProfileList");const I=[{path:"canvas read",run:C},{path:"canvas list",run:d("objects")},{path:"canvas search",run:d("hits")},{path:"canvas attention count",run:_("pending asks",!0)},{path:"canvas attention list",run:d("pending asks")},{path:"canvas attention map",run:O},{path:"human send",run:z},{path:"human list",run:d("pending")},{path:"human resolve",run:E},{path:"pkg plugin list",run:d("plugins")},{path:"pkg market list",run:d("marketplaces")},{path:"pkg market browse",run:d("plugins")},{path:"canvas dashboard",run:d("nodes","rows")},{path:"node inspect list",run:d("nodes","nodes")},{path:"sys daemon start",run:m("started","started","already running")},{path:"sys daemon status",run:m("running","running","not running")},{path:"sys daemon stop",run:m("stopped","stopped","was not running")},{path:"sys update",run:y},{path:"sys feedback",run:y},{path:"profile list",run:F}];function V(n,e=[]){const t=j(n);return t!==null?t:I.find(({path:s})=>s===n.path)?.run(n,e)??null}u(V,"summarizePath");export{R as HELP_ICON,k as LEAF_ICON_CP,I as SUMMARIZERS,g as SUPPRESS_OUTPUT_LEAVES,H as TOOL_ICON,T as crtrPreviewRecords,U as iconForPath,V as summarizePath,N as suppressOutputForLeaf,M as suppressOutputForPath};

package/dist/core/preview-result-path.d.ts

@@ -0,0 +1,4 @@
+export declare const PREVIEW_RESULT_PATH_ENV = "CRTR_PREVIEW_RESULT_PATH";
+/** Deterministic from the tool call id, so the spawning side and the result
+ *  side derive the same path without sharing state. */
+export declare function previewResultPath(toolCallId: string): string;

package/dist/core/preview-result-path.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var e=(o,r)=>n(o,"name",{value:r,configurable:!0});import{envNodeId as t}from"../shared/env.js";import{tmpdir as p}from"node:os";import{join as i}from"node:path";const u="CRTR_PREVIEW_RESULT_PATH";function m(){return`${encodeURIComponent(t()??"no-node")}-${process.pid}`}e(m,"brokerToken");function E(o){return i(p(),"crouter-preview-results",`${m()}-${encodeURIComponent(o)}.json`)}e(E,"previewResultPath");export{u as PREVIEW_RESULT_PATH_ENV,E as previewResultPath};

package/dist/core/profiles/app-env-store.d.ts

@@ -0,0 +1,4 @@
+export declare function readAppEnvVars(app: string): Record<string, string>;
+export declare function listAppEnvNames(app: string): string[];
+export declare function setAppEnvVar(app: string, name: string, value: string): boolean;
+export declare function removeAppEnvVar(app: string, name: string): boolean;

package/dist/core/profiles/app-env-store.js

@@ -0,0 +1,2 @@
+var h=Object.defineProperty;var o=(r,e)=>h(r,"name",{value:e,configurable:!0});import{existsSync as b,readFileSync as w,writeFileSync as O,chmodSync as S,renameSync as j}from"node:fs";import{basename as E,dirname as a,join as x}from"node:path";import{appSpace as A,secretsDir as N}from"../layout.js";import{ensureDir as f}from"../fs-utils.js";import{withExclusiveDirectoryLock as u}from"../exclusive-lock.js";import{isReservedEnvName as p}from"./env-store.js";import{validateEnvVarName as m}from"../env-name.js";import{usage as v}from"../errors.js";function s(r){return x(N(),"env",E(A(r).root),"_app")}o(s,"storePath");function c(r){const e=Object.create(null);try{if(!b(s(r)))return e;const t=JSON.parse(w(s(r),"utf8"));if(!t||typeof t!="object"||!("vars"in t)||!t.vars||typeof t.vars!="object"||Array.isArray(t.vars))return e;for(const[n,i]of Object.entries(t.vars))m(n).isValid&&!p(n)&&typeof i=="string"&&!i.includes("\0")&&(e[n]=i)}catch{}return e}o(c,"read");function d(r,e){const t=s(r);f(a(t));const n=`${t}.tmp.${process.pid}.${Math.random().toString(36).slice(2)}`;O(n,JSON.stringify({vars:e})+`
+`,{mode:384}),S(n,384),j(n,t)}o(d,"write");function l(r){if(!m(r).isValid||p(r))throw v(`invalid or reserved env var name: ${r}`,{field:"name"})}o(l,"validate");function M(r){return{...c(r)}}o(M,"readAppEnvVars");function P(r){return Object.keys(c(r)).sort()}o(P,"listAppEnvNames");function R(r,e,t){if(l(e),!t||t.includes("\0"))throw v("a non-empty env value without NUL bytes is required",{field:"value"});const n=s(r);return f(a(n)),u(`${n}.lock`,()=>{const i=c(r),y=!Object.hasOwn(i,e);return i[e]=t,d(r,i),y})}o(R,"setAppEnvVar");function U(r,e){l(e);const t=s(r);return f(a(t)),u(`${t}.lock`,()=>{const n=c(r);return Object.hasOwn(n,e)?(delete n[e],d(r,n),!0):!1})}o(U,"removeAppEnvVar");export{P as listAppEnvNames,M as readAppEnvVars,U as removeAppEnvVar,R as setAppEnvVar};

package/dist/core/profiles/default-binding.d.ts

@@ -0,0 +1,15 @@
+export declare function resolveBindingCwd(cwd: string): string;
+export declare function getDefaultProfileId(cwd: string): string | null;
+export declare function setDefaultProfileId(cwd: string, profileId: string): void;
+export declare function clearDefaultProfile(cwd: string): void;
+export declare function defaultProfileDirs(profileId: string): string[];
+export declare function clearDefaultProfileId(profileId: string): string[];
+export declare function listDefaultPins(): Array<{
+    dir: string;
+    profileId: string;
+}>;
+/** Drop every pin whose directory no longer exists; returns what was removed. */
+export declare function clearMissingDefaultDirs(): Array<{
+    dir: string;
+    profile_id: string;
+}>;

package/dist/core/profiles/default-binding.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var o=(t,e)=>u(t,"name",{value:e,configurable:!0});import{existsSync as a,realpathSync as d}from"node:fs";import{resolve as p}from"node:path";import{userScopeRoot as l}from"../scope.js";import{mutateStoredDefaults as s,readStoredDefaults as m}from"../scoped-state/profiles.js";function f(t){const e=p(t);if(!a(e))return e;try{return d(e)}catch{return e}}o(f,"resolveBindingCwd");function c(){return m(l())}o(c,"bindings");function y(t){return c()[f(t)]??null}o(y,"getDefaultProfileId");function O(t,e){const i=f(t);s(l(),r=>({...r,[i]:e}))}o(O,"setDefaultProfileId");function S(t){const e=f(t);s(l(),i=>{const r={...i};return delete r[e],r})}o(S,"clearDefaultProfile");function g(t){return Object.entries(c()).filter(([,e])=>e===t).map(([e])=>e).sort()}o(g,"defaultProfileDirs");function h(t){let e=[];return s(l(),i=>{e=Object.entries(i).filter(([,n])=>n===t).map(([n])=>n).sort();const r={...i};for(const n of e)delete r[n];return r}),e}o(h,"clearDefaultProfileId");function v(){return Object.entries(c()).map(([t,e])=>({dir:t,profileId:e})).sort((t,e)=>t.dir.localeCompare(e.dir))}o(v,"listDefaultPins");function C(){let t=[];return s(l(),e=>{t=Object.entries(e).filter(([r])=>!a(r)).map(([r,n])=>({dir:r,profile_id:n})).sort((r,n)=>r.dir.localeCompare(n.dir));const i=new Set(t.map(r=>r.dir));return Object.fromEntries(Object.entries(e).filter(([r])=>!i.has(r)))}),t}o(C,"clearMissingDefaultDirs");export{S as clearDefaultProfile,h as clearDefaultProfileId,C as clearMissingDefaultDirs,g as defaultProfileDirs,y as getDefaultProfileId,v as listDefaultPins,f as resolveBindingCwd,O as setDefaultProfileId};

package/dist/core/profiles/deletion-reservation.d.ts

@@ -0,0 +1,12 @@
+/** Reserve one profile identity for its complete daemon-owned deletion lifecycle.
+ * The caller must release the returned lease after completion or failure. */
+export declare function reserveProfileDeletion(profileId: string): () => void;
+/** The synchronous birth gate. spawnNode calls this immediately before the
+ * canvas row is persisted, so EVERY birth passes here — the API create, forks,
+ * cron spawns, warm-pool mints, `/new` relaunch, and recycle alike. A
+ * reservation rejects a birth that reaches the gate during deletion; the exact
+ * manifest read rejects one whose async preflight started before a fast hard
+ * deletion and resumed after its lease was released; a paused profile is inert
+ * and creates nothing. `POST /v1/nodes` gates earlier only to phrase the paused
+ * refusal against the operand the caller actually typed. */
+export declare function assertProfileAvailableForBirth(profileId: string | null): void;

package/dist/core/profiles/deletion-reservation.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var i=(e,r)=>n(e,"name",{value:r,configurable:!0});import{usage as o}from"../errors.js";import{assertProfileEntryActive as s,loadExactProfileManifest as a}from"./manifest.js";const t=new Set;function d(e){if(t.has(e))throw o(`profile deletion is already in progress: ${e}`,{error:"profile_deletion_in_progress",profile_id:e,next:"Wait for the accepted deletion to finish before using this profile again."});t.add(e);let r=!1;return()=>{r||(r=!0,t.delete(e))}}i(d,"reserveProfileDeletion");function c(e){if(e!==null){if(t.has(e))throw o(`cannot create a node while its profile is being deleted: ${e}`,{error:"profile_deletion_in_progress",profile_id:e,next:"Choose another profile or wait for this deletion to finish."});s(a(e))}}i(c,"assertProfileAvailableForBirth");export{c as assertProfileAvailableForBirth,d as reserveProfileDeletion};

package/dist/core/profiles/env-store.d.ts

@@ -0,0 +1,22 @@
+export declare function isReservedEnvName(name: string): boolean;
+/** Every stored variable NAME for a profile, sorted. Never returns values. */
+export declare function listProfileEnvNames(profileId: string): string[];
+/** Set one variable, replacing any prior value under the same name. Holds the
+ *  same per-profile lock manifest mutations use (`withProfileManifestLock`),
+ *  so a concurrent `profile delete` can never race a write into an
+ *  about-to-vanish profile dir — whichever runs first wins the lock, and the
+ *  loser either sees `not_found` (delete-then-set) or removes the file right
+ *  back out from under a just-written value (set-then-delete, via
+ *  `deleteProfile`'s recursive rm of the whole profile root). Returns whether
+ *  the name was newly added (`true`) or replaced an existing value (`false`). */
+export declare function setProfileEnvVar(profileId: string, name: string, value: string): boolean;
+/** Remove one variable. Returns whether it was present. */
+export declare function removeProfileEnvVar(profileId: string, name: string): boolean;
+/** Every stored `{name: value}` for a profile — the ONLY function that
+ *  returns raw values, called exclusively by `buildBrokerEnv`
+ *  (`core/runtime/spawn-env.ts`) to inject them directly into a launched
+ *  broker's env. Never throws: a stale/invalid/deleted profile id is a
+ *  hot-path no-op (mirrors `readRawProfileConfig` in `core/config.ts`),
+ *  because broker-env resolution must never fail a launch over a bad profile
+ *  id. */
+export declare function readProfileEnvVars(profileId: string | null): Record<string, string>;

package/dist/core/profiles/env-store.js

@@ -0,0 +1,2 @@
+var E=Object.defineProperty;var n=(e,t)=>E(e,"name",{value:t,configurable:!0});import{existsSync as p,readFileSync as y,renameSync as S,writeFileSync as O,chmodSync as b}from"node:fs";import{dirname as w}from"node:path";import{profileSpace as R}from"../layout.js";import{loadExactProfileManifest as c,withProfileManifestLock as u}from"./manifest.js";import{ensureDir as x}from"../fs-utils.js";import{notFound as N,usage as f}from"../errors.js";const P="CRTR_",g=new Set(["HOME"]);function v(e){return e.startsWith(P)||g.has(e)}n(v,"isReservedEnvName");function m(e){return e.includes("\0")}n(m,"hasNulByte");function l(e){const t=c(e);return R(t.manifest.grantee??"app:terminal",e).env}n(l,"envPath");function s(e){const t=l(e),r=Object.create(null);if(!p(t))return{vars:r};try{const o=JSON.parse(y(t,"utf8"));for(const[i,a]of Object.entries(o.vars??{}))typeof a=="string"&&(m(a)||v(i)||(r[i]=a))}catch{}return{vars:r}}n(s,"readStoreUnlocked");function d(e,t){const r=l(e);x(w(r));const o=`${r}.tmp.${process.pid}.${Math.random().toString(36).slice(2)}`;O(o,JSON.stringify(t,null,2)+`
+`,{mode:384}),b(o,384),S(o,r)}n(d,"writeStoreAtomic");function h(e){try{c(e)}catch(t){throw t instanceof Error&&t.message.startsWith("profile not found:")?N(`profile not found: ${e}`,{received:e}):t}}n(h,"requireProfileExists");function F(e){return Object.keys(s(e).vars).sort()}n(F,"listProfileEnvNames");function A(e,t,r){if(v(t))throw f(`env var name is reserved by crtr: ${t}`,{received:t,field:"name",next:"crtr identity/routing names (CRTR_* and HOME) cannot be stored in a profile env store \u2014 a stored value under one of these names could redirect a broker to a different canvas home. Choose a different name."});if(m(r))throw f("env var value contains a NUL byte, which no OS accepts in an environment variable",{field:"value",next:"Remove NUL bytes from the piped value and retry."});return u(e,()=>{h(e);const o=s(e),i=!Object.hasOwn(o.vars,t);return o.vars[t]=r,d(e,o),i})}n(A,"setProfileEnvVar");function D(e,t){return u(e,()=>{h(e);const r=s(e);return Object.hasOwn(r.vars,t)?(delete r.vars[t],d(e,r),!0):!1})}n(D,"removeProfileEnvVar");function L(e){if(e===null||e==="")return{};try{return{...s(e).vars}}catch{return{}}}n(L,"readProfileEnvVars");export{v as isReservedEnvName,F as listProfileEnvNames,L as readProfileEnvVars,D as removeProfileEnvVar,A as setProfileEnvVar};

package/dist/core/profiles/fuzzy-match.d.ts

@@ -0,0 +1,19 @@
+/** One candidate offered to the matcher: the durable id plus the mutable name. */
+export interface FuzzyCandidate {
+    readonly profileId: string;
+    readonly name: string;
+}
+export interface FuzzyResult {
+    /** The single profile the needle resolved to, or `null` when nothing was
+     *  close enough or several were equally close. */
+    readonly match: FuzzyCandidate | null;
+    /** Populated only when several profiles tied — the caller reports these so
+     *  the user can disambiguate without running `profile list`. */
+    readonly tied: readonly FuzzyCandidate[];
+}
+/** Resolve a typed operand against the profiles on this host. Returns a single
+ *  match only when it is unambiguously the best one: the strongest tier any
+ *  candidate reached, and within it the single lowest edit distance. A genuine
+ *  tie is reported rather than guessed, because silently running under the
+ *  wrong profile is worse than one more prompt. */
+export declare function fuzzyMatchProfile(operand: string, candidates: readonly FuzzyCandidate[]): FuzzyResult;

package/dist/core/profiles/fuzzy-match.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var o=(t,i)=>a(t,"name",{value:i,configurable:!0});function c(t){return t.toLowerCase().replace(/[^a-z0-9]/g,"")}o(c,"normalize");function h(t){return t.replace(/-[0-9a-f]{8}$/,"")}o(h,"idSlug");function m(t){const i=[c(t.name),c(h(t.profileId)),c(t.profileId)];return i.filter((r,e)=>r!==""&&i.indexOf(r)===e)}o(m,"haystacks");function g(t,i){if(t===i)return 0;if(t.length===0)return i.length;if(i.length===0)return t.length;let r=Array.from({length:i.length+1},(e,s)=>s);for(let e=1;e<=t.length;e+=1){const s=[e];for(let n=1;n<=i.length;n+=1){const u=r[n-1]+(t[e-1]===i[n-1]?0:1);s[n]=Math.min(s[n-1]+1,r[n]+1,u)}r=s}return r[i.length]}o(g,"levenshtein");const d=0,p=1,I=2,T=3;function E(t,i){let r=null;for(const e of m(i)){const s=g(t,e);let n=null;t===e?n=d:e.startsWith(t)?n=p:e.includes(t)||t.includes(e)?n=I:s<=Math.max(1,Math.floor(e.length/3))&&(n=T),n!==null&&(r===null||n<r.tier||n===r.tier&&s<r.distance)&&(r={candidate:i,tier:n,distance:s})}return r}o(E,"scoreOne");function R(t,i){const r=c(t);if(r==="")return{match:null,tied:[]};const e=i.map(l=>E(r,l)).filter(l=>l!==null);if(e.length===0)return{match:null,tied:[]};const s=Math.min(...e.map(l=>l.tier)),n=e.filter(l=>l.tier===s),u=Math.min(...n.map(l=>l.distance)),f=n.filter(l=>l.distance===u);return f.length===1?{match:f[0].candidate,tied:[]}:{match:null,tied:f.map(l=>l.candidate)}}o(R,"fuzzyMatchProfile");export{R as fuzzyMatchProfile};