@north-light/cli 0.0.0 → 0.3.414

package/dist/core/runtime/broker/fault-retry.d.ts

@@ -0,0 +1,127 @@
+import type { AgentSessionServices, ModelRegistry } from '@earendil-works/pi-coding-agent';
+import { type AssistantMessage } from '@earendil-works/pi-ai';
+import { classify } from '../../fault-classifier.js';
+import type { Fault } from '../../fault-classifier.js';
+import type { RecoveryFaultDTO } from '../../../api/dto/recovery.js';
+import type { BrokerSdkConfig } from '../launch.js';
+import type { BrokerToClient } from '../broker-protocol.js';
+import type { BrokerSession } from './read-ops.js';
+import type { SubscriptionGeneration } from './rebind.js';
+import type { TurnAdmissionGate } from './turn-admission.js';
+import type { RunTurnEnds } from './run-turn-end.js';
+/** How long a run node's turn may stay open on in-episode provider retries,
+ *  measured from the episode's first failure. An app waits on the turn's
+ *  `node.turn.completed`; a retry that would fire past this completes the turn
+ *  with its error instead, and the app's next message retries. */
+export declare const RUN_TURN_RETRY_WINDOW_MS = 30000;
+/** Whether a retry that fires `delayMs` from `now` lands outside a run turn's
+ *  retry window opened at `since`. An unparsable `since` counts as expired. */
+export declare function runTurnRetryExpired(since: string, delayMs: number, now: number): boolean;
+/** The recovery card body for one retry. Only a non-run node probes the
+ *  network before a connection retry, so only it may say the network is back. */
+export declare function retryCardBody(kind: RecoveryFaultDTO['kind'], isRun: boolean): string;
+type FaultRetryDeps = {
+    nodeId: string;
+    cfg: BrokerSdkConfig;
+    retryProbe: () => Promise<boolean>;
+    currentSession: () => BrokerSession;
+    currentServices: () => AgentSessionServices;
+    installedGeneration: () => SubscriptionGeneration | undefined;
+    registryOf: (services: AgentSessionServices) => ModelRegistry;
+    formatModelSpec: (model: BrokerSession['model'], thinkingLevel?: string) => string | null;
+    broadcastModelChanged: (persist?: boolean) => Promise<void>;
+    turnAdmission: TurnAdmissionGate;
+    /** Re-snapshot every attached viewer; an in-place rewind emits no relayed event. */
+    reWelcomeAll: () => void;
+    /** A run node's held-back turn ends: a recovery turn takes one over, and a retry that will not run releases it. */
+    turnEnds?: RunTurnEnds;
+};
+/** The kind and retry disposition of a turn that settled on a provider error.
+ *  A final daemon refusal (the model adapter's refusal diagnostic) is fatal
+ *  whatever its text says; every other error follows the classifier. */
+export declare function settledProviderFault(last: AssistantMessage): {
+    classified: ReturnType<typeof classify>;
+    disposition: ReturnType<typeof classify>['disposition'];
+};
+/** Whether the daemon's fault retry will re-drive a turn that settled on this
+ *  assistant message: a provider error (not an abort or a safety refusal) whose
+ *  classified kind the daemon retries on its own. The same test
+ *  `publishSettledProviderFault` applies before it records an `auto` fault. */
+export declare function willDaemonRetry(last: AssistantMessage, contextWindow: number | undefined): boolean;
+/** Inside a provider-retry episode, this 400 says the rewound request was
+ *  malformed, not that the node is broken: the next attempt rebuilds the request
+ *  from the anchor, so keep the ladder running instead of parking the node. */
+export declare function isPrefillRejectionDuringEpisode(message: string, inEpisode: boolean): boolean;
+/** Owns provider fallback and daemon-driven fault retry state for one broker session. */
+export declare class FaultRetry {
+    private readonly deps;
+    private timer;
+    private readonly failedRetryRoutes;
+    private readonly notFoundModels;
+    private providerFallbackInFlight;
+    private notFoundFallbackInFlight;
+    private stagedCapacityFailure;
+    private personaGateFailed;
+    constructor(deps: FaultRetryDeps);
+    clearTimer(): void;
+    reset(): void;
+    /** No recovery turn will follow the settled turn: a run node writes its held-back turn end now. */
+    abandonTurnEnd(): void;
+    /** A failed daemon-backed persona gate is local evidence, not a provider fault. */
+    notePersonaGateFailure(): void;
+    private state;
+    private recordFault;
+    private clearFault;
+    private sessionId;
+    private clearEpisode;
+    onEvent(event: BrokerToClient): void;
+    isActiveAutoFault(fault: RecoveryFaultDTO | null): fault is RecoveryFaultDTO;
+    isActiveAutoFault(fault: Fault | null): fault is Fault;
+    publishSettledProviderFault(generation: SubscriptionGeneration): Promise<void>;
+    /** Startup re-drive reads the durable episode surviving from the process this
+     *  replaces. Revive deliberately clears the ordinary fault marker before this
+     *  boundary, so the episode is the recovery authority. A `pending` episode
+     *  re-arms unconditionally, exactly as before. An `admitted` episode re-arms
+     *  too, but only under a no-progress proof: reopened to `pending` when the
+     *  branch segment from its anchor to the current leaf carries no assistant
+     *  content and no tool activity — the dead attempt did nothing that rolling
+     *  back would destroy. An anchor absent from the loaded branch cannot happen
+     *  in production (session-file identity and the new-cycle guard already rule
+     *  it out below), so it is treated the same as "no progress" rather than
+     *  blocking the ladder. Returns 'retry-armed' when the timer now owns the
+     *  first turn, 'none' when the caller's default kickoff should proceed. */
+    recoverOnStartup(): Promise<'retry-armed' | 'none'>;
+    /** True iff the branch segment strictly after `anchorEntryId` (root→leaf,
+     *  anchor exclusive) contains an assistant message with non-empty content or
+     *  a tool result — the two shapes a runtime card and a `content: []`
+     *  error-settled assistant message are not. An anchor missing from the loaded
+     *  branch cannot be distinguished from "no progress" here; callers treat it
+     *  as no progress rather than as a positive finding. */
+    private hasProgressPastAnchor;
+    schedule(): Promise<void>;
+    /** A run node's retry would land past its turn's retry window: complete the
+     *  turn with its error now and end the episode, so no recovery turn answers a
+     *  turn the app already saw complete. The app's next message is a fresh turn
+     *  (the wire history drops the errored assistant), which is the retry. */
+    private endRunTurnOnFault;
+    /** The daemon backstop's nudge and a signal-stream resync: re-arm the retry
+     *  timer when the durable state says one is owed and none is armed (the
+     *  timer died, or its loop ended on a guard branch). Inert unless a `pending`
+     *  episode on this session carries an active automatic fault, so a nudge
+     *  never touches a held turn end or an admitted attempt. `schedule()` is the
+     *  only decider; admission stays fenced by the episode `admit` op. */
+    rearmIfStranded(): Promise<void>;
+    private maybeSwitchProviderForRetry;
+    private maybeFallbackOnUnusableModel;
+    private nextEligibleFallbackRoute;
+    private targetCannotFitContext;
+    private stageCapacityFailure;
+    private recordPendingProviderFault;
+    private pendingEpisodeMatches;
+    private faultRetryDelayMs;
+    private clearAndArmFaultRetry;
+    /** One retry attempt. Every outcome but a re-armed timer or a prompted recovery turn means no recovery will answer the settled turn. */
+    private runFaultRetry;
+    private attemptFaultRetry;
+}
+export {};

package/dist/core/runtime/broker/fault-retry.js

@@ -0,0 +1 @@
+var ie=Object.defineProperty;var y=(r,e)=>ie(r,"name",{value:e,configurable:!0});import{envModelIntent as G,envNodeCwd as $,envProfileId as L}from"../../../shared/env.js";import{isContextOverflow as D}from"@earendil-works/pi-ai";import{classify as N}from"../../fault-classifier.js";import{isModelNotFoundError as ne,isProviderUnconfiguredError as re}from"../fault.js";import{brokerRecovery as se,mutateBrokerFault as U,mutateBrokerProviderRetry as b}from"./daemon-ops.js";import{extractCoolingDeadline as oe}from"../managed-provider-cooling.js";import{extractProviderFailureDetails as ae}from"../../provider-failure.js";import{expandModelCandidates as B,modelRequestFromConfig as Y,probeRouteAvailability as de}from"../../model-routes.js";import{operationIdContext as W}from"../../events/operation-id.js";import{emitEvent as F}from"../../events/emit.js";import{CONNECTION_FAULT_RECOVERY_BODY as le,PROVIDER_FAULT_RECOVERY_BODY as ue,RUN_CONNECTION_FAULT_RETRY_BODY as ce,formatCard as q,formatModelFallbackRecovery as pe}from"../../../shared/generated-context.js";import{markFatalOnExhaust as V,nextFaultRetry as j,policyFor as J}from"../fault-recovery.js";import{parseModelSpec as X}from"../model-selection.js";import{endedByAbort as z}from"../session-cycles.js";import{resolveProviderCandidates as fe}from"../../subscription-state.js";import{announceMessageOrigin as H}from"../stamp/channel.js";import{LLM_REFUSAL_DIAGNOSTIC as he,refusalRetryAt as me}from"./model-adapter.js";import{isSafetyRefusal as K}from"../../llm/refusal.js";const ge=2147483647,Q=3e4;function ye(r,e,t){const i=Date.parse(r);return!Number.isFinite(i)||t+e-i>Q}y(ye,"runTurnRetryExpired");function ve(r,e){return r!=="connection"?ue:e?ce:le}y(ve,"retryCardBody");function w(r){return{link:r.link,op:r.op,kind:r.kind,retry:r.retry,message:r.message,since:r.since,operation_id:r.operation_id,...r.anchor_entry_id===void 0?{}:{anchorEntryId:r.anchor_entry_id},...r.provider_error===void 0?{}:{providerError:r.provider_error}}}y(w,"policyFault");function S(r){return{link:r.link,op:r.op,kind:r.kind,retry:r.retry,message:r.message,...r.operation_id===void 0?{}:{operation_id:r.operation_id},...r.since===void 0?{}:{since:r.since},...r.anchorEntryId===void 0?{}:{anchor_entry_id:r.anchorEntryId},...r.providerError===void 0?{}:{provider_error:r.providerError}}}y(S,"faultInput");function Z(r,e){const t=y(i=>`${i.providerId}/${i.modelId}`===e.modelSpec,"onLiveModel");return(r.find(i=>t(i)&&i.thinkingLevel===e.thinkingLevel)??r.find(t))?.rank}y(Z,"liveRouteRank");function ee(r){const e=N("pi\u2192provider",r),t=r.diagnostics?.some(i=>i.type===he)??!1;return{classified:e,disposition:t?"fatal":e.disposition}}y(ee,"settledProviderFault");function Ue(r,e){if(r.stopReason!=="error"||z(r)||K(r)||D(r,e))return!1;const{classified:t,disposition:i}=ee(r);return i==="auto"&&(t.kind==="connection"||t.kind==="rate-limit"||t.kind==="overloaded")}y(Ue,"willDaemonRetry");const Fe=/does not support assistant message prefill|conversation must end with a user message/i;function ke(r,e){return e&&Fe.test(r)}y(ke,"isPrefillRejectionDuringEpisode");class Be{static{y(this,"FaultRetry")}deps;timer=null;failedRetryRoutes=new Set;notFoundModels=new Set;providerFallbackInFlight=null;notFoundFallbackInFlight=null;stagedCapacityFailure=null;personaGateFailed=!1;constructor(e){this.deps=e}clearTimer(){this.timer!==null&&(clearTimeout(this.timer),this.timer=null)}reset(){this.clearTimer(),this.deps.turnEnds?.abandon(),this.providerFallbackInFlight=null,this.notFoundFallbackInFlight=null,this.stagedCapacityFailure=null,this.personaGateFailed=!1}abandonTurnEnd(){this.deps.turnEnds?.abandon()}notePersonaGateFailure(){this.personaGateFailed=!0}state(){return se(this.deps.nodeId)}async recordFault(e){return(await U(this.deps.nodeId,{op:"record",input:e})).fault}async clearFault(e,t=!1){await U(this.deps.nodeId,{op:"clear",...e===void 0?{}:{link:e},...t?{preserve_episode:!0}:{}})}sessionId(e){const t=e.sessionManager.getSessionId?.();return typeof t=="string"&&t!==""?t:null}async clearEpisode(e){const t=this.sessionId(e);t!==null&&await b(this.deps.nodeId,{op:"clear",session_id:t})}onEvent(e){this.maybeSwitchProviderForRetry(e),this.maybeFallbackOnUnusableModel(e)}isActiveAutoFault(e){return e===null||e.retry.disposition!=="auto"||e.retry.by!=="daemon"?!1:e.kind==="connection"||e.kind==="rate-limit"||e.kind==="overloaded"}async publishSettledProviderFault(e){const t=e.stagedProviderAgentEnd,i=e.stagedWatchdogAbort,n=e.stagedRefreshAbort,o=e.stagedOverflowFailure,a=this.stagedCapacityFailure?.generation===e?this.stagedCapacityFailure:null,c=this.personaGateFailed;this.stagedCapacityFailure=null,this.personaGateFailed=!1,e.stagedProviderAgentEnd=null,e.stagedWatchdogAbort=!1,e.stagedRefreshAbort=!1,e.stagedOverflowFailure=null;const s=e.session,l=await this.state(),p=l.fault,h=l.episode,f=this.sessionId(s),m=this.isActiveAutoFault(p)&&p.link==="pi\u2192provider"?p:h?.state==="admitted"&&h.session_id===f&&this.isActiveAutoFault(h.fault)?h.fault:null,d=m===null?null:{since:m.since,anchorEntryId:m.anchor_entry_id,attempt:m.retry.attempt},u=[...Array.isArray(t?.messages)?t.messages:[]].reverse().find(R=>typeof R=="object"&&R!==null&&R.role==="assistant");if(c){await this.clearEpisode(s);return}if(a!==null||o!==null){await this.clearFault("pi\u2192provider"),await this.clearEpisode(s),await this.recordFault({link:"pi\u2192provider",op:"context overflow recovery",kind:"context-overflow",retry:{disposition:"fatal"},message:a?.errorMessage??o.errorMessage,anchor_entry_id:s.sessionManager.getLeafId?.()??void 0});return}if(i&&u?.stopReason==="aborted"){await this.recordPendingProviderFault(s,{link:"pi\u2192provider",op:"generation turn",kind:"connection",retry:{disposition:"auto",by:"daemon",...d?.attempt!==void 0?{attempt:d.attempt}:{}},message:typeof u.errorMessage=="string"?u.errorMessage:"engine error (no errorMessage recorded)",...d!==null?{since:d.since}:{},anchor_entry_id:d?.anchorEntryId??s.sessionManager.getLeafId?.()??void 0});return}if(u?.stopReason!=="error"){u!==void 0&&await this.clearEpisode(s);return}if(n){await this.clearEpisode(s);return}if(K(u)){await this.clearEpisode(s);return}const k=typeof u.errorMessage=="string"?u.errorMessage:"engine error (no errorMessage recorded)";if(z({stopReason:"error",errorMessage:k})){await this.clearEpisode(s);return}const v=D(u,s.model?.contextWindow),I=ee(u),A=d!==null&&I.disposition!=="auto"&&ke(k,!0),te=A?{kind:"connection",disposition:"auto"}:I.classified,E=A?"auto":I.disposition,M=oe(u),x=me(u),C=ae(u),T=typeof u.provider=="string"&&u.provider!==""?u.provider:s.model?.provider,O=typeof u.model=="string"&&u.model!==""?u.model:s.model?.id,P=C===void 0||T===void 0||O===void 0?void 0:{provider:T,model:O,...C};v&&(await this.clearFault("pi\u2192provider"),await this.clearEpisode(s));const _={link:"pi\u2192provider",op:"generation turn",kind:v?"context-overflow":te.kind,retry:v?{disposition:"fatal"}:E==="auto"?{disposition:"auto",by:"daemon",...M!==void 0?{nextAt:new Date(M).toISOString()}:{},...d?.attempt!==void 0?{attempt:d.attempt}:{}}:{disposition:E,...x!==void 0?{nextAt:new Date(x).toISOString()}:{}},message:k,...!v&&E==="auto"&&d!==null?{since:d.since}:{},anchor_entry_id:!v&&E==="auto"&&d?.anchorEntryId!==void 0?d.anchorEntryId:s.sessionManager.getLeafId?.()??void 0,...P===void 0?{}:{provider_error:P}};_.retry.disposition==="auto"?await this.recordPendingProviderFault(s,_):(await this.clearEpisode(s),await this.clearFault("pi\u2192provider"),await this.recordFault(_))}async recoverOnStartup(){const e=this.deps.installedGeneration();if(e===void 0)return"none";const t=(await this.state()).episode,i=this.sessionId(e.session);if(this.deps.cfg.newCycle===!0)return t!==null&&i!==null&&t.session_id===i&&await b(this.deps.nodeId,{op:"invalidate",session_id:i}),"none";if(t===null||i===null||t.session_id!==i)return"none";if(t.state==="admitted")if(t.fault.anchor_entry_id!==void 0&&!this.hasProgressPastAnchor(e.session,t.fault.anchor_entry_id)){if(!(await b(this.deps.nodeId,{op:"reopen",session_id:i})).applied)return"none"}else return await this.clearEpisode(e.session),"none";else if(t.state!=="pending")return"none";return await this.recordFault(S(w(t.fault))),await this.schedule(),"retry-armed"}hasProgressPastAnchor(e,t){const i=e.sessionManager.getBranch(),n=i.findIndex(a=>a.id===t);return(n===-1?i:i.slice(n+1)).some(a=>{if(a.type!=="message")return!1;const{message:c}=a;return c.role==="toolResult"?!0:c.role==="assistant"&&Array.isArray(c.content)&&c.content.length>0})}async schedule(){const e=this.deps.installedGeneration(),t=this.deps.currentSession();if(t.isStreaming||this.timer!==null)return;if(e===void 0){this.abandonTurnEnd();return}const i=await this.state(),n=i.fault;if(!this.isActiveAutoFault(n)||this.sessionId(t)!==null&&!this.pendingEpisodeMatches(t,n,i)){this.clearTimer(),this.abandonTurnEnd();return}const o=Date.now(),a=this.faultRetryDelayMs(n,o);if(a!==null&&this.deps.turnEnds?.holding()===!0&&ye(n.since,a,o)){await this.endRunTurnOnFault(t,n,a);return}a!==null?this.clearAndArmFaultRetry(a,e):this.abandonTurnEnd()}async endRunTurnOnFault(e,t,i){this.clearTimer(),this.abandonTurnEnd(),F({level:"info",event:"broker.runtime.diagnostic",fields:{message:`run turn completed on provider fault: ${t.kind} retry in ${i}ms is past the ${Q}ms turn window (since ${t.since}, attempt ${t.retry.attempt??0})`}}),await this.clearEpisode(e),await this.clearFault("pi\u2192provider")}async rearmIfStranded(){if(this.timer!==null||this.deps.installedGeneration()===void 0)return;const e=this.deps.currentSession();if(e.isStreaming)return;const t=await this.state();!this.isActiveAutoFault(t.fault)||!this.pendingEpisodeMatches(e,t.fault,t)||await this.schedule()}maybeSwitchProviderForRetry(e){if(e.type!=="auto_retry_start")return;const t=N("pi\u2192provider",e.errorMessage??"").kind;if(t!=="rate-limit"&&t!=="connection"||this.providerFallbackInFlight!==null||this.deps.cfg.modelExact===!0)return;const i=this.deps.installedGeneration();if(i===void 0)return;const n=this.deps.currentSession(),o=this.deps.currentServices(),a=this.deps.formatModelSpec(n.model,n.thinkingLevel);if(a===null)return;const c=Y(this.deps.cfg.model,G(),!1);if(c===void 0)return;const s=B(c,$()??this.deps.cfg.cwd,L()),l=X(a),p=Z(s,l),h=p===void 0?{route:void 0,capacityExhausted:!1}:this.nextEligibleFallbackRoute(s.slice(p+1),this.deps.registryOf(o),n.getContextUsage()?.tokens,d=>!this.failedRetryRoutes.has(d.routeId));if(h.route===void 0){h.capacityExhausted&&(this.stageCapacityFailure(i,n),queueMicrotask(()=>{this.deps.installedGeneration()===i&&this.deps.currentSession()===n&&n.abortRetry()}));return}const f=h.route,m=(async()=>{const d=this.deps.registryOf(o).find(f.providerId,f.modelId);if(!d||(await n.setModel(d),this.deps.installedGeneration()!==i||this.deps.currentSession()!==n))return;const g=`${f.providerId}/${f.modelId}`===l.modelSpec?l.thinkingLevel:f.thinkingLevel;n.setThinkingLevel(g??"off"),this.failedRetryRoutes.add(f.routeId),await this.deps.broadcastModelChanged(!1)})().catch(d=>{F({level:"debug",event:"broker.runtime.diagnostic",fields:{message:`provider route fallback failed: ${d instanceof Error?d.message:String(d)}`}})}).finally(()=>{this.deps.installedGeneration()===i&&(this.providerFallbackInFlight=null)});this.providerFallbackInFlight=m}maybeFallbackOnUnusableModel(e){if(e.type!=="message_end"||e.message.role!=="assistant"||e.message.stopReason!=="error")return;const t=re(e.message.errorMessage??"");if(!t&&!ne(e.message.errorMessage??"")||this.deps.cfg.modelExact===!0||this.notFoundFallbackInFlight!==null)return;const i=this.deps.installedGeneration();if(i===void 0)return;const n=this.deps.currentSession(),o=this.deps.currentServices(),a=this.deps.formatModelSpec(n.model,n.thinkingLevel);if(a===null)return;const c=X(a);this.notFoundModels.add(c.modelSpec);const s=Y(this.deps.cfg.model,G(),!1),l=s?B(s,$()??this.deps.cfg.cwd,L()):[],p=Z(l,c),h=p===void 0?{route:void 0,capacityExhausted:!1}:this.nextEligibleFallbackRoute(l.slice(p+1),this.deps.registryOf(o),n.getContextUsage()?.tokens,g=>!this.notFoundModels.has(`${g.providerId}/${g.modelId}`));if(h.route===void 0){h.capacityExhausted&&this.stageCapacityFailure(i,n);return}const f=h.route,m=`${f.providerId}/${f.modelId}${f.thinkingLevel?`:${f.thinkingLevel}`:""}`,d=(async()=>{const g=this.deps.registryOf(o).find(f.providerId,f.modelId);if(g===void 0){F({level:"debug",event:"broker.runtime.diagnostic",fields:{message:`${t?"unconfigured-provider":"not_found"} fallback skipped: ${m} is not registered`}});return}if(await n.setModel(g),this.deps.installedGeneration()!==i||this.deps.currentSession()!==n)return;n.setThinkingLevel(f.thinkingLevel??"off"),await this.deps.broadcastModelChanged();const u=this.deps.formatModelSpec(n.model,n.thinkingLevel)??m;if(F({level:"debug",event:"broker.runtime.diagnostic",fields:{message:`${t?"unconfigured-provider":"not_found"} fallback: ${a} unavailable \u2192 ${u}; re-driving turn`}}),await n.agent.waitForIdle(),this.deps.installedGeneration()!==i||this.deps.currentSession()!==n)return;t&&await this.clearFault("pi\u2192provider");const k=q("recovery",{},pe(a,u,t?"credential":"not-found"));H(k,{type:"runtime",kind:"recovery"}),await this.deps.turnAdmission.admit(v=>W.fresh(()=>n.prompt(k,{preflightResult:v})))})().catch(g=>{F({level:"debug",event:"broker.runtime.diagnostic",fields:{message:`${t?"unconfigured-provider":"not_found"} fallback failed: ${g instanceof Error?g.message:String(g)}`}})}).finally(()=>{this.deps.installedGeneration()===i&&(this.notFoundFallbackInFlight=null)});this.notFoundFallbackInFlight=d}nextEligibleFallbackRoute(e,t,i,n){let o=0,a=0;for(const c of e){if(!n(c)||fe([{...c,...de(c,t),automaticFallback:!0}]).candidates.length===0)continue;const s=t.find(c.providerId,c.modelId);if(s!==void 0){if(o++,this.targetCannotFitContext(s.contextWindow,i)){a++;continue}return{route:c,capacityExhausted:!1}}}return{route:void 0,capacityExhausted:o>0&&o===a}}targetCannotFitContext(e,t){return Number.isFinite(e)&&Number.isFinite(t)&&e<t}stageCapacityFailure(e,t){const i=t.getContextUsage()?.tokens;this.stagedCapacityFailure={generation:e,errorMessage:Number.isFinite(i)?`All available fallback models have context windows smaller than the current conversation (${i} tokens).`:"All available fallback models have context windows smaller than the current conversation."}}async recordPendingProviderFault(e,t){const i=this.sessionId(e);if(i===null){await this.recordFault(t);return}await b(this.deps.nodeId,{op:"record-pending",session_id:i,input:t})}pendingEpisodeMatches(e,t,i){const n=this.sessionId(e),o=i.episode;return n!==null&&o!==null&&o.state==="pending"&&o.session_id===n&&o.fault.fault_id===t.fault_id}faultRetryDelayMs(e,t){if(e.retry.nextAt!==void 0){const i=Date.parse(e.retry.nextAt)-t;return Number.isFinite(i)?Math.max(0,i):null}return j(w(e),t)?.delayMs??null}clearAndArmFaultRetry(e,t){if(this.deps.installedGeneration()!==t)return;this.clearTimer();const i=Math.min(Math.max(0,e),ge),n=Math.max(0,e-i);this.timer=setTimeout(()=>{if(this.timer=null,this.deps.installedGeneration()===t){if(n>0){this.clearAndArmFaultRetry(n,t);return}this.runFaultRetry().catch(o=>{this.abandonTurnEnd(),F({level:"warn",event:"broker.runtime.diagnostic",fields:{message:`fault retry fire failed: ${o instanceof Error?o.message:String(o)}`}})})}},i),typeof this.timer.unref=="function"&&this.timer.unref()}async runFaultRetry(){await this.attemptFaultRetry()===void 0&&this.abandonTurnEnd()}async attemptFaultRetry(){const e=this.deps.installedGeneration();if(e===void 0)return;const t=e.session;if(t.isStreaming)return;const i=(await this.state()).fault;if(!this.isActiveAutoFault(i))return;let n=i;if(i.kind==="connection"&&this.deps.turnEnds===void 0){const l=await this.deps.retryProbe();if(this.deps.installedGeneration()!==e||this.deps.currentSession()!==t||t.isStreaming)return;const p=(await this.state()).fault;if(!this.isActiveAutoFault(p)||p.since!==i.since)return;if(!l)return this.clearAndArmFaultRetry(J(p.kind).baseDelayMs,e),"rearmed";n=p}const o=this.deps.turnEnds!==void 0,a=n.retry.attempt??0,c=J(n.kind);if(a>=c.max){await this.recordFault(S(V(w(n)))),await this.clearEpisode(t);return}const s=j(w(n),Date.now());if(s===null){await this.recordFault(S(V(w(n)))),await this.clearEpisode(t);return}if(n.anchor_entry_id!==void 0)try{if((t.sessionManager.getLeafId?.()??null)!==n.anchor_entry_id){const l=await t.navigateTree(n.anchor_entry_id);if(this.deps.installedGeneration()!==e||this.deps.currentSession()!==t)return;l.cancelled||this.deps.reWelcomeAll()}}catch(l){F({level:"debug",event:"broker.runtime.diagnostic",fields:{message:`fault retry rewind skipped: ${l instanceof Error?l.message:String(l)}`}})}if(!(this.deps.installedGeneration()!==e||this.deps.currentSession()!==t))return this.deps.turnAdmission.admit(async l=>{const p=(await this.state()).fault;if(this.deps.installedGeneration()!==e||this.deps.currentSession()!==t||t.isStreaming||!this.isActiveAutoFault(p)||p.since!==n.since){l();return}const h=this.sessionId(t);if(h===null){l();return}if(!(await b(this.deps.nodeId,{op:"admit",session_id:h,fault_id:p.fault_id,retry:s.fault.retry})).applied){l();return}const m=q("recovery",o?{attempt:s.attempt}:{attempt:s.attempt,max:s.max},ve(n.kind,o));H(m,{type:"runtime",kind:"recovery"}),this.deps.turnEnds?.beginRecovery();try{await W.fresh(()=>t.prompt(m,{preflightResult:l}))}finally{this.deps.turnEnds?.recoveryReturned()}return"prompted"})}}export{Be as FaultRetry,Q as RUN_TURN_RETRY_WINDOW_MS,ke as isPrefillRejectionDuringEpisode,ve as retryCardBody,ye as runTurnRetryExpired,ee as settledProviderFault,Ue as willDaemonRetry};

package/dist/core/runtime/broker/frame-client.d.ts

@@ -0,0 +1,38 @@
+import { type ClientToBroker } from '../broker-protocol.js';
+import type { BrokerClient, BrokerClientRegistry } from './client-registry.js';
+import type { EngineDriver } from './engine-drive.js';
+import type { FrameReplies } from './frame-replies.js';
+import type { BrokerSession } from './read-ops.js';
+import type { TurnAcceptanceGate } from './turn-ignition.js';
+/** An extension dialog fanned out to writable clients, awaiting the first answer. */
+export type PendingDialog = {
+    resolve: (response: Extract<ClientToBroker, {
+        type: 'extension_ui_response';
+    }>) => void;
+};
+/** The frames about a client's own connection — admission, one-shot delivery,
+ *  dialog answers, and the two ways a socket or the broker ends. */
+export type ClientFrameHandlers = {
+    hello(client: BrokerClient, frame: Extract<ClientToBroker, {
+        type: 'hello';
+    }>): void;
+    deliver(client: BrokerClient, frame: Extract<ClientToBroker, {
+        type: 'deliver';
+    }>): void;
+    dialog(client: BrokerClient, frame: Extract<ClientToBroker, {
+        type: 'extension_ui_response';
+    }>): void;
+    bye(client: BrokerClient): void;
+    shutdown(): void;
+};
+export declare function createClientHandlers(deps: {
+    registry: BrokerClientRegistry;
+    replies: FrameReplies;
+    session: () => BrokerSession;
+    driveEngine: EngineDriver;
+    turnAcceptance: TurnAcceptanceGate;
+    pendingDialogs: Map<string, PendingDialog>;
+    sendWelcome: (client: BrokerClient) => void;
+    replayExtraPendingDialogsTo: (client: BrokerClient) => void;
+    disposeAndExit: (reason: string, status?: number) => void;
+}): ClientFrameHandlers;

package/dist/core/runtime/broker/frame-client.js

@@ -0,0 +1 @@
+var E=Object.defineProperty;var a=(s,d)=>E(s,"name",{value:d,configurable:!0});import{SITUATIONAL_CONTEXT_CUSTOM_TYPE as S}from"../../../shared/generated-context.js";import{emitEvent as g}from"../../events/emit.js";import{normalizeSnapshotTail as b}from"../broker-protocol.js";function O(s){const{registry:d,replies:f,session:p,driveEngine:h,turnAcceptance:l,pendingDialogs:T,sendWelcome:m,replayExtraPendingDialogsTo:y,disposeAndExit:A}=s,{notWritable:c,ackTo:u}=f;return{hello(e,r){const t=!e.helloed;e.id=r.client_id,e.snapshotTail=b(r.snapshot_tail),t&&(e.helloed=!0,e.role=r.role==="controller"?"controller":"observer",e.attends=r.attends!==!1),m(e),t&&d.persistAttachState(),e.role==="controller"&&y(e)},deliver(e,r){if(c(e,"drive the engine",r.id))return;const t=p().isStreaming?"steer":"prompt";for(const i of r.cards??[])p().sendCustomMessage({customType:S,content:i,display:!0},t==="steer"?{deliverAs:"steer"}:void 0).catch(_=>g({level:"error",event:"broker.deliver.card_failed",error:_}));let n=!1;const o=a(()=>{n||(n=!0,u(e,"deliver",!0,t,r.id))},"ackAccepted");t==="prompt"&&l.waitFor(o);const v=h(e,{type:"prompt",text:r.text,...r.images!==void 0?{images:r.images}:{},delivery:{...r.origin===void 0?{}:{origin:r.origin}}});if(t==="steer"||v===void 0){l.cancel(o),o();return}v.then(i=>{if(l.cancel(o),i===void 0){o();return}g({level:"error",event:"broker.prompt.deliver_failed",error:i}),!n&&(n=!0,u(e,"deliver",!1,String(i),r.id))})},dialog(e,r){c(e,"answer dialogs")||T.get(r.id)?.resolve(r)},bye(e){e.socket.end()},shutdown(){A("shutdown-frame")}}}a(O,"createClientHandlers");export{O as createClientHandlers};

package/dist/core/runtime/broker/frame-dispatch.d.ts

@@ -0,0 +1,64 @@
+import type { AgentSessionServices, ModelRegistry } from '@earendil-works/pi-coding-agent';
+import type { ClientToBroker } from '../broker-protocol.js';
+import type { BrokerClient, BrokerClientRegistry } from './client-registry.js';
+import type { BrokerSession } from './read-ops.js';
+import { type DriveFrame } from './engine-drive.js';
+import { type PendingDialog } from './frame-client.js';
+import type { TurnAdmissionGate } from './turn-admission.js';
+import type { ToolGroupTracker } from './tool-groups.js';
+import type { EventProjection } from './event-projection.js';
+import type { RebindDriver } from './rebind.js';
+import type { ModelIntent } from '../../../types.js';
+export type FrameDispatchDeps = {
+    nodeId: string;
+    registry: BrokerClientRegistry;
+    toolGroups: ToolGroupTracker;
+    projection: EventProjection;
+    rebind: RebindDriver;
+    /** The bound review id whose boundary marker opens this companion's visible
+     *  transcript; undefined for ordinary nodes. */
+    boundaryReviewId: string | undefined;
+    pendingDialogs: Map<string, PendingDialog>;
+    sendWelcome: (client: BrokerClient) => void;
+    replayExtraPendingDialogsTo: (client: BrokerClient) => void;
+    reWelcomeAll: () => void;
+    disposeAndExit: (reason: string, status?: number) => void;
+    persistModelChoice: (intent?: ModelIntent, userSelected?: boolean) => Promise<string | null>;
+    broadcastModelChanged: (persist?: boolean, intent?: ModelIntent, userSelected?: boolean) => Promise<void>;
+    registryOf: (services: AgentSessionServices) => ModelRegistry;
+    formatModelSpec: (model: BrokerSession['model'], thinkingLevel?: string) => string | null;
+    formatExactModelSpec: (model: BrokerSession['model'], thinkingLevel?: string) => string | null;
+    turnAdmission: TurnAdmissionGate;
+    runNode: boolean;
+    memoryInventory: import('./frame-memory-refs.js').ComposerNames;
+    /** The launch prompt was admitted; inbox turns held behind it may queue. */
+    onKickoffAdmitted?: () => void;
+};
+export type FrameDispatchContext = ReturnType<typeof createFrameDispatchContext>;
+/** Owns frame-local input state while dispatching through explicit broker collaborators. */
+export declare function createFrameDispatchContext(deps: FrameDispatchDeps): {
+    handlers: {
+        hello: (client: BrokerClient, frame: Extract<ClientToBroker, {
+            type: "hello";
+        }>) => void;
+        drive: (client: BrokerClient, frame: DriveFrame) => void;
+        deliver: (client: BrokerClient, frame: Extract<ClientToBroker, {
+            type: "deliver";
+        }>) => void;
+        dialog: (client: BrokerClient, frame: Extract<ClientToBroker, {
+            type: "extension_ui_response";
+        }>) => void;
+        engineControl: (client: BrokerClient, frame: import("./frame-engine-control.js").EngineControlFrame) => void;
+        read: (client: BrokerClient, frame: import("./frame-read.js").ReadFrame) => void;
+        session: (client: BrokerClient, frame: import("./frame-session.js").SessionFrame) => void;
+        authentication: (client: BrokerClient) => void;
+        bye: (client: BrokerClient) => void;
+        shutdown: () => void;
+    };
+    kickoff: (prompt: string, messageIds?: string[]) => void;
+    notifyTurnAccepted: () => void;
+    pendingPromptDispatches: () => number;
+    resetForSession: () => void;
+};
+/** The socket listener calls this explicit dispatcher for every decoded client frame. */
+export declare function handleFrame(ctx: FrameDispatchContext, client: BrokerClient, frame: ClientToBroker): void;

package/dist/core/runtime/broker/frame-dispatch.js

@@ -0,0 +1 @@
+var j=Object.defineProperty;var o=(r,e)=>j(r,"name",{value:e,configurable:!0});import{createFrameReplies as q}from"./frame-replies.js";import{createEngineDriver as N}from"./engine-drive.js";import{announceMessageOrigin as x}from"../stamp/channel.js";import{createClientHandlers as z}from"./frame-client.js";import{createMemoryRefGuidance as B}from"./frame-memory-refs.js";import{createEngineControlHandler as J}from"./frame-engine-control.js";import{createReadHandler as L}from"./frame-read.js";import{createSessionHandler as Q}from"./frame-session.js";import{createKickoffDriver as U,createPromptDispatchTracker as V,createTurnAcceptanceGate as X}from"./turn-ignition.js";import{prependRunDeferredMail as y}from"./run-deferred-mail.js";function ce(r){const{nodeId:e,registry:s,toolGroups:v,projection:k,rebind:d,boundaryReviewId:m,pendingDialogs:w,sendWelcome:D,replayExtraPendingDialogsTo:b,reWelcomeAll:A,disposeAndExit:C,persistModelChoice:F,broadcastModelChanged:M,registryOf:E,formatModelSpec:R,formatExactModelSpec:S,turnAdmission:u,runNode:h,memoryInventory:H,onKickoffAdmitted:T}=r,t=o(()=>d.session(),"currentSession"),P=o(()=>d.services(),"currentServices"),a=q(s),{notWritable:G}=a,l=B(t,e,H),p=V(t),_=X(),g=U({session:t,dispatches:p,turnAdmission:u,prependDeferred:h?n=>y(e,n):void 0,onAdmitted:T}),f=N({nodeId:e,registry:s,replies:a,session:t,dispatches:p,memoryRefs:l,rebind:d,projection:k,toolGroups:v,turnAdmission:u,prependDeferred:h?n=>y(e,n):void 0}),I=o((n,i)=>{G(n,"drive the engine")||((i.type==="prompt"||i.type==="steer"||i.type==="follow_up")&&x(i.text,{type:"human",channel:{type:"viewer"}}),f(n,i))},"handleDriveFrame"),c=z({registry:s,replies:a,session:t,driveEngine:f,turnAcceptance:_,pendingDialogs:w,sendWelcome:D,replayExtraPendingDialogsTo:b,disposeAndExit:C}),W=J({registry:s,replies:a,session:t,services:P,registryOf:E,persistModelChoice:F,broadcastModelChanged:o(async(...n)=>{await M(...n),g.drivePending()},"broadcastModelChanged"),formatModelSpec:R}),K=L({registry:s,replies:a,session:t,boundaryReviewId:m,memoryRefs:l,formatExactModelSpec:S}),O=Q({registry:s,replies:a,rebind:d,session:t,boundaryReviewId:m,memoryRefs:l,reWelcomeAll:A});return{handlers:{hello:c.hello,drive:I,deliver:c.deliver,dialog:c.dialog,engineControl:W,read:K,session:O,authentication:o(n=>{a.ackTo(n,"reload_auth")},"authentication"),bye:c.bye,shutdown:c.shutdown},kickoff:o((n,i)=>g.kickoff(n,i),"kickoff"),notifyTurnAccepted:_.notifyAccepted,pendingPromptDispatches:p.pending,resetForSession:o(()=>{},"resetForSession")}}o(ce,"createFrameDispatchContext");function de(r,e,s){switch(s.type){case"hello":r.handlers.hello(e,s);return;case"prompt":case"steer":case"follow_up":case"abort":case"bash":r.handlers.drive(e,s);return;case"deliver":r.handlers.deliver(e,s);return;case"extension_ui_response":r.handlers.dialog(e,s);return;case"set_model":case"deliver_custom_message":case"cycle_model":case"cycle_ladder":case"cycle_thinking":case"dequeue":case"set_thinking_level":case"set_auto_retry":case"set_auto_compaction":case"compact":case"set_session_name":r.handlers.engineControl(e,s);return;case"get_commands":case"list_models":case"list_scoped_models":case"list_memory_refs":case"get_tree":case"get_settings":case"list_sessions":case"get_human_fork_coordinates":r.handlers.read(e,s);return;case"navigate_tree":case"reload":case"export":case"new_session":case"switch_session":case"fork":case"clone":case"share":r.handlers.session(e,s);return;case"reload_auth":r.handlers.authentication(e);return;case"bye":r.handlers.bye(e);return;case"shutdown":r.handlers.shutdown();return}}o(de,"handleFrame");export{ce as createFrameDispatchContext,de as handleFrame};

package/dist/core/runtime/broker/frame-engine-control.d.ts

@@ -0,0 +1,21 @@
+import type { AgentSessionServices, ModelRegistry } from '@earendil-works/pi-coding-agent';
+import type { ClientToBroker } from '../broker-protocol.js';
+import type { ModelIntent } from '../../../types.js';
+import type { BrokerClient, BrokerClientRegistry } from './client-registry.js';
+import type { FrameReplies } from './frame-replies.js';
+import type { BrokerSession } from './read-ops.js';
+/** The engine-command ops — every one of them a controller-gated mutation of
+ *  the live engine's model, thinking level, queue, or session settings. */
+export type EngineControlFrame = Extract<ClientToBroker, {
+    type: 'set_model' | 'deliver_custom_message' | 'cycle_model' | 'cycle_ladder' | 'cycle_thinking' | 'dequeue' | 'set_thinking_level' | 'set_auto_retry' | 'set_auto_compaction' | 'compact' | 'set_session_name';
+}>;
+export declare function createEngineControlHandler(deps: {
+    registry: BrokerClientRegistry;
+    replies: FrameReplies;
+    session: () => BrokerSession;
+    services: () => AgentSessionServices;
+    registryOf: (services: AgentSessionServices) => ModelRegistry;
+    persistModelChoice: (intent?: ModelIntent, userSelected?: boolean) => Promise<string | null>;
+    broadcastModelChanged: (persist?: boolean, intent?: ModelIntent, userSelected?: boolean) => Promise<void>;
+    formatModelSpec: (model: BrokerSession['model'], thinkingLevel?: string) => string | null;
+}): (client: BrokerClient, frame: EngineControlFrame) => void;

package/dist/core/runtime/broker/frame-engine-control.js

@@ -0,0 +1 @@
+var $=Object.defineProperty;var r=(h,l)=>$(h,"name",{value:l,configurable:!0});import{configuredLadderProviders as H,explicitModelIntent as f,nextLadderModel as O,normalizeModel as U}from"../launch.js";import{isManagedProvider as W,readSubscriptionPool as j}from"../../subscription-state.js";import{parseModelSpec as v}from"../model-selection.js";import{envModelIntent as B}from"../../../shared/env.js";import{resolveModelQuery as M}from"./frame-model-query.js";function X(h){const{registry:l,replies:L,session:n,services:S,registryOf:T,persistModelChoice:b,broadcastModelChanged:m,formatModelSpec:w}=h,{notWritable:d,ackTo:i,engineErrorTo:s}=L,y=r(()=>T(S()),"modelRegistry"),_=r((e,t)=>l.sendFrame(e,{type:"error",code:"engine_error",message:t}),"noSuchModel"),k=r(()=>{const e=B();return b(e===void 0?void 0:f(e),!0)},"persistThinkingChoice"),A=r((e,t)=>{if(d(e,"set the model"))return;const o=v(t.model);let u,c;try{c=v(U(o.modelSpec)),u=M(y(),c.modelSpec)}catch(a){s(e)(a);return}if(u===void 0){_(e,`no model matching '${t.model}' in the registry`);return}n().setModel(u).then(async()=>{const a=o.thinkingLevel??c.thinkingLevel;a!==void 0&&n().setThinkingLevel(a),await m(!0,t.intent??f(t.model),!0),i(e,"set_model")}).catch(s(e))},"setModel"),C=r((e,t)=>{d(e,"deliver a custom message")||n().sendCustomMessage({customType:t.customType,content:t.content,display:!0,...t.details!==void 0?{details:t.details}:{}},...t.deliverAs!==void 0?[{deliverAs:t.deliverAs}]:[]).then(()=>i(e,"deliver_custom_message")).catch(s(e))},"deliverCustomMessage"),q=r((e,t)=>{d(e,"cycle the model")||n().cycleModel(t.direction).then(async()=>{await m(!0,void 0,!0),i(e,"cycle_model")}).catch(s(e))},"cycleModel"),E=r((e,t)=>{if(d(e,"cycle the model ladder"))return;const o=(()=>{try{const g=y();return H(p=>W(p)&&j(p).length>0||g.getProviderAuthStatus(p).configured)}catch{return}})(),u=w(n().model,n().thinkingLevel)??"",c=v(O(u,t.direction==="backward"?-1:1,o));let a;try{a=M(y(),c.modelSpec)}catch(g){s(e)(g);return}if(a===void 0){_(e,`ladder model '${c.modelSpec}' not in the registry`);return}n().setModel(a).then(async()=>{c.thinkingLevel!==void 0&&n().setThinkingLevel(c.thinkingLevel),await m(!0,void 0,!0),i(e,"cycle_ladder")}).catch(s(e))},"cycleLadder"),P=r(e=>{d(e,"cycle the thinking level")||(async()=>{n().cycleThinkingLevel(),await k(),i(e,"cycle_thinking")})().catch(s(e))},"cycleThinking"),x=r((e,t)=>{if(!d(e,"dequeue messages",t.id))try{const{steering:o,followUp:u}=n().clearQueue();l.sendFrame(e,{type:"data",id:t.id,kind:"dequeue",steering:o,followUp:u})}catch(o){s(e,t.id)(o)}},"dequeue"),R=r((e,t)=>{d(e,"set the thinking level")||(async()=>{n().setThinkingLevel(t.level),await k(),i(e,"set_thinking_level")})().catch(s(e))},"setThinkingLevel"),z=r((e,t)=>{if(!d(e,"set auto-retry"))try{if(t.enabled)throw new Error("The daemon model adapter owns retries for broker sessions; pi auto-retry cannot be enabled");n().setAutoRetryEnabled(!1),i(e,"set_auto_retry")}catch(o){s(e)(o)}},"setAutoRetry"),F=r((e,t)=>{if(!d(e,"set auto-compaction"))try{n().setAutoCompactionEnabled(t.enabled),i(e,"set_auto_compaction")}catch(o){s(e)(o)}},"setAutoCompaction"),N=r((e,t)=>{d(e,"compact the session")||n().compact(t.instructions).then(()=>i(e,"compact")).catch(s(e))},"compact"),Q=r((e,t)=>{if(!d(e,"rename the session"))try{n().setSessionName(t.name),i(e,"set_session_name")}catch(o){s(e)(o)}},"setSessionName");return(e,t)=>{switch(t.type){case"set_model":return A(e,t);case"deliver_custom_message":return C(e,t);case"cycle_model":return q(e,t);case"cycle_ladder":return E(e,t);case"cycle_thinking":return P(e);case"dequeue":return x(e,t);case"set_thinking_level":return R(e,t);case"set_auto_retry":return z(e,t);case"set_auto_compaction":return F(e,t);case"compact":return N(e,t);case"set_session_name":return Q(e,t)}}}r(X,"createEngineControlHandler");export{X as createEngineControlHandler};

package/dist/core/runtime/broker/frame-memory-refs.d.ts

@@ -0,0 +1,25 @@
+import type { RefMeta } from '../broker-protocol.js';
+import type { BrokerSession } from './read-ops.js';
+/**
+ * Inline memory-reference inventory (design: inline memory references) — a
+ * single broker-level memo shared by BOTH the `list_memory_refs` read-op reply
+ * and per-submission guidance resolution, so a burst of reads + submissions
+ * between reloads never re-walks the corpus per call. Invalidated only when the
+ * corpus is KNOWN to have changed (a successful `session.reload()`); a failed
+ * reload leaves the memo intact.
+ */
+export interface ComposerNames {
+    refs: RefMeta[];
+    names: string[];
+}
+/** The display names in the node's view, from the delivery route. */
+export declare function composerNames(nodeId: string): Promise<ComposerNames>;
+export type MemoryRefGuidance = {
+    /** The memoized inventory rows the `list_memory_refs` read-op replies with. */
+    refs(): RefMeta[];
+    /** The hidden guidance text for a human frame's verbatim text, or `null`. */
+    guidanceFor(text: string): string | null;
+    /** Refresh the inventory after a successful session reload. */
+    invalidate(): Promise<void>;
+};
+export declare function createMemoryRefGuidance(session: () => BrokerSession, nodeId: string, initial: ComposerNames): MemoryRefGuidance;

package/dist/core/runtime/broker/frame-memory-refs.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var t=(r,e)=>i(r,"name",{value:e,configurable:!0});import{emitEvent as m}from"../../events/emit.js";import{brokerDelivery as f}from"./daemon-ops.js";import{buildGuidance as u}from"../../../shared/inline-ref-guidance.js";import{isLeadingEngineCommand as c}from"./engine-routing.js";async function d(r){const e=await f(r,{activity:"names"});if(e.refs===void 0||e.names===void 0)throw new Error(`delivery route returned no names for ${r}`);return{refs:e.refs,names:e.names}}t(d,"composerNames");function g(r,e,o){let a={refs:o.refs,names:new Set(o.names)};return{refs:t(()=>a.refs,"refs"),guidanceFor(n){try{return c(n,r())?null:u(n,a.names)}catch(s){return m({level:"warn",event:"broker.memory_refs.guidance_resolve_failed",error:s}),null}},async invalidate(){const n=await d(e);a={refs:n.refs,names:new Set(n.names)}}}}t(g,"createMemoryRefGuidance");export{d as composerNames,g as createMemoryRefGuidance};

package/dist/core/runtime/broker/frame-model-query.d.ts

@@ -0,0 +1,13 @@
+import type { ModelRegistry } from '@earendil-works/pi-coding-agent';
+/** A model resolved out of the registry, or undefined when nothing matches. */
+export type ResolvedModel = ReturnType<ModelRegistry['find']>;
+/** Resolve a `provider/id` model spec against the LIVE services registry (which
+ *  carries any extension-registered providers). Pure: returns undefined on a
+ *  malformed spec or an unknown model. */
+export declare function findModelSpec(registry: ModelRegistry, spec: string): ResolvedModel;
+/** Resolve a model from a free-text query — `/model opus`, `/model fable`. Tries
+ *  the exact `provider/id` spec first; failing that, searches the registry the
+ *  way the picker's search box does (case-insensitive substring on the model id
+ *  and the `provider/id` key) and returns the BEST match, preferring authed/
+ *  available models. Returns undefined only when nothing matches. */
+export declare function resolveModelQuery(registry: ModelRegistry, query: string): ResolvedModel;

package/dist/core/runtime/broker/frame-model-query.js

@@ -0,0 +1 @@
+var b=Object.defineProperty;var i=(t,n)=>b(t,"name",{value:n,configurable:!0});import{parseModelSpec as h}from"../model-selection.js";import{modelKey as f}from"./read-ops.js";function w(t,n){const{modelSpec:o}=h(n),e=o.indexOf("/");if(!(e<=0))return t.find(o.slice(0,e),o.slice(e+1))}i(w,"findModelSpec");function v(t,n){const o=w(t,n);if(o)return o;const e=n.trim().toLowerCase();if(e==="")return;let a;try{a=t.getAll()}catch{return}let c;try{c=new Set(t.getAvailable().map(f))}catch{c=new Set}const m=i(r=>{const s=r.id.toLowerCase(),p=f(r).toLowerCase();let l=-1;if(s===e)l=100;else if(p===e)l=90;else if(s.startsWith(e))l=80;else if(s.includes(e))l=60;else if(p.includes(e))l=40;else return-1;return l+(c.has(f(r))?5:0)},"rank");let d,u=0;for(const r of a){const s=m(r);s>u&&(u=s,d=r)}return d}i(v,"resolveModelQuery");export{w as findModelSpec,v as resolveModelQuery};

package/dist/core/runtime/broker/frame-read.d.ts

@@ -0,0 +1,19 @@
+import type { ClientToBroker } from '../broker-protocol.js';
+import type { BrokerClient, BrokerClientRegistry } from './client-registry.js';
+import type { FrameReplies } from './frame-replies.js';
+import type { MemoryRefGuidance } from './frame-memory-refs.js';
+import { type BrokerSession } from './read-ops.js';
+/** The read ops — none of them controller-gated: they are pure reads that
+ *  drive nothing in the engine, so terminal observer connections populate their
+ *  palettes and pickers through these too. */
+export type ReadFrame = Extract<ClientToBroker, {
+    type: 'get_commands' | 'list_models' | 'list_scoped_models' | 'list_memory_refs' | 'get_tree' | 'get_settings' | 'list_sessions' | 'get_human_fork_coordinates';
+}>;
+export declare function createReadHandler(deps: {
+    registry: BrokerClientRegistry;
+    replies: FrameReplies;
+    session: () => BrokerSession;
+    boundaryReviewId: string | undefined;
+    memoryRefs: MemoryRefGuidance;
+    formatExactModelSpec: (model: BrokerSession['model'], thinkingLevel?: string) => string | null;
+}): (client: BrokerClient, frame: ReadFrame) => void;

package/dist/core/runtime/broker/frame-read.js

@@ -0,0 +1 @@
+var h=Object.defineProperty;var c=(t,d)=>h(t,"name",{value:d,configurable:!0});import{SessionListCache as k}from"../session-list-cache.js";import{sessionListCachePath as y}from"../../canvas/paths.js";import{engineLeadingCommandTokens as _}from"./engine-routing.js";import{buildCommandList as p,buildGetTreeData as T,buildListMemoryRefsData as l,buildListModelsData as E,buildScopedModelsData as S,buildSessionsData as F,buildSettingsData as L}from"./read-ops.js";function R(t){const{registry:d,replies:o,session:i,boundaryReviewId:g,memoryRefs:m,formatExactModelSpec:u}=t,b=new k(y());return(s,r)=>{switch(r.type){case"get_commands":{try{o.ackTo(s,"get_commands",!0,JSON.stringify(p(i())))}catch(e){o.engineErrorTo(s)(e)}break}case"list_models":{try{d.sendFrame(s,E(r.id,i()))}catch(e){o.engineErrorTo(s,r.id)(e)}break}case"list_scoped_models":{try{d.sendFrame(s,S(r.id,i()))}catch(e){o.engineErrorTo(s,r.id)(e)}break}case"list_memory_refs":{try{d.sendFrame(s,l(r.id,m.refs(),_(i())))}catch(e){o.engineErrorTo(s,r.id)(e)}break}case"get_tree":{try{d.sendFrame(s,T(r.id,i(),g))}catch(e){o.engineErrorTo(s,r.id)(e)}break}case"get_settings":{try{d.sendFrame(s,L(r.id,i()))}catch(e){o.engineErrorTo(s,r.id)(e)}break}case"list_sessions":{F(r.id,r.scope??"cwd",i(),b).then(e=>d.sendFrame(s,e)).catch(o.engineErrorTo(s,r.id));break}case"get_human_fork_coordinates":{try{const e=i().sessionManager,n=e.getSessionFile(),a=e.getLeafId();if(n===void 0||n===""||a===null){o.engineErrorTo(s,r.id)(new Error("no persisted source session leaf"));break}d.sendFrame(s,{type:"data",id:r.id,kind:"human_fork_coordinates",sourceFile:n,sourceSessionId:e.getSessionId(),leafId:a,modelSpec:u(i().model,i().thinkingLevel)})}catch(e){o.engineErrorTo(s,r.id)(e)}break}}}}c(R,"createReadHandler");export{R as createReadHandler};

package/dist/core/runtime/broker/frame-replies.d.ts

@@ -0,0 +1,24 @@
+import type { BrokerClient, BrokerClientRegistry } from './client-registry.js';
+import type { BrokerSession } from './read-ops.js';
+export declare const REVIEW_BOUNDARY_NAVIGATION_CODE = "review_boundary_navigation";
+export declare class ReviewBoundaryNavigationError extends Error {
+    readonly targetId: string;
+    readonly code = "review_boundary_navigation";
+    constructor(targetId: string);
+}
+/** The reply vocabulary every frame handler answers a client with, bound once
+ *  to the client registry that owns the sockets. */
+export type FrameReplies = {
+    /** Reject a read-only client for a mutating op. The decision reads this
+     *  client's OWN fixed role — there is no shared writer slot, so any number of
+     *  writable clients pass concurrently. Returns true when rejected (the caller
+     *  should `break`). */
+    notWritable(client: BrokerClient, what: string, id?: string): boolean;
+    ackTo(client: BrokerClient, op: string, ok?: boolean, detail?: string, id?: string): void;
+    engineErrorTo(client: BrokerClient, id?: string): (err: unknown) => void;
+    reviewBoundaryRefusalTo(client: BrokerClient, targetId: string): void;
+};
+export declare function createFrameReplies(registry: BrokerClientRegistry): FrameReplies;
+/** True iff `entryId` sits BEFORE this review companion's visible transcript
+ *  boundary — the navigation an ordinary node has no boundary for. */
+export declare function isPreBoundaryReviewEntry(session: BrokerSession, boundaryReviewId: string | undefined, entryId: string): boolean;

package/dist/core/runtime/broker/frame-replies.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var a=(o,e)=>i(o,"name",{value:e,configurable:!0});import{isReviewBoundary as d}from"../session-visibility.js";const u="review_boundary_navigation";class c extends Error{static{a(this,"ReviewBoundaryNavigationError")}targetId;code=u;constructor(e){super(`review companion cannot navigate before the visible transcript boundary (target: ${e})`),this.targetId=e,this.name="ReviewBoundaryNavigationError"}}function p(o){return{notWritable(e,n,r){return e.role==="controller"?!1:(o.sendFrame(e,{type:"error",code:"read_only",message:`a read-only client may not ${n}`,...r!==void 0?{id:r}:{}}),!0)},ackTo(e,n,r=!0,t,s){o.sendFrame(e,{type:"ack",for:n,ok:r,...t!==void 0?{detail:t}:{},...s!==void 0?{id:s}:{}})},engineErrorTo(e,n){return r=>o.sendFrame(e,{type:"error",code:"engine_error",message:String(r),...n!==void 0?{id:n}:{}})},reviewBoundaryRefusalTo(e,n){const r=new c(n);o.sendFrame(e,{type:"error",code:r.code,message:r.message})}}}a(p,"createFrameReplies");function g(o,e,n){return e!==void 0&&!o.sessionManager.getBranch(n).some(r=>d(r,e))}a(g,"isPreBoundaryReviewEntry");export{u as REVIEW_BOUNDARY_NAVIGATION_CODE,c as ReviewBoundaryNavigationError,p as createFrameReplies,g as isPreBoundaryReviewEntry};

package/dist/core/runtime/broker/frame-session.d.ts

@@ -0,0 +1,34 @@
+import type { ClientToBroker } from '../broker-protocol.js';
+import type { BrokerClient, BrokerClientRegistry } from './client-registry.js';
+import type { FrameReplies } from './frame-replies.js';
+import type { MemoryRefGuidance } from './frame-memory-refs.js';
+import type { RebindDriver } from './rebind.js';
+import type { BrokerSession } from './read-ops.js';
+/** True iff a parsed JSONL branch-entry line is a hidden (`display:false`)
+ *  custom message — the general display boundary crossed if left in an
+ *  exported branch (not just `crtr-memory-refs` guidance; any hidden custom
+ *  content). Covers both persisted shapes a branch entry can take: a
+ *  `type:'custom_message'` entry (display at the entry's own top level) and a
+ *  `type:'message'` entry wrapping a `role:'custom'` message (display nested
+ *  under `.message`). */
+export declare function isHiddenJsonlBranchEntry(entry: unknown): boolean;
+/** Rewrite an already-exported JSONL file in place, dropping every hidden
+ *  (`display:false`) branch entry while re-chaining `parentId` so the
+ *  remaining entries stay a single valid linear branch — applying the general
+ *  display:false boundary to `session.exportToJsonl`'s own output, which
+ *  serializes every entry verbatim regardless of display. The header line
+ *  (line 1) is copied through untouched. */
+export declare function stripHiddenEntriesFromJsonlExport(filePath: string): void;
+/** The ops that navigate, replace, or publish this node's session. */
+export type SessionFrame = Extract<ClientToBroker, {
+    type: 'navigate_tree' | 'reload' | 'export' | 'new_session' | 'switch_session' | 'fork' | 'clone' | 'share';
+}>;
+export declare function createSessionHandler(deps: {
+    registry: BrokerClientRegistry;
+    replies: FrameReplies;
+    rebind: RebindDriver;
+    session: () => BrokerSession;
+    boundaryReviewId: string | undefined;
+    memoryRefs: MemoryRefGuidance;
+    reWelcomeAll: () => void;
+}): (client: BrokerClient, frame: SessionFrame) => void;

package/dist/core/runtime/broker/frame-session.js

@@ -0,0 +1,4 @@
+var m=Object.defineProperty;var h=(i,a)=>m(i,"name",{value:a,configurable:!0});import{execFile as k}from"node:child_process";import{existsSync as y,readFileSync as w,unlinkSync as T,writeFileSync as S}from"node:fs";import{tmpdir as x}from"node:os";import{join as v}from"node:path";import{captureSessionChatCapabilities as I}from"../command-surface.js";import{isPreBoundaryReviewEntry as g}from"./frame-replies.js";function E(i){if(i===null||typeof i!="object")return!1;const a=i;return a.type==="custom_message"&&a.display===!1||a.type==="message"&&a.message?.role==="custom"&&a.message.display===!1}h(E,"isHiddenJsonlBranchEntry");function R(i){const r=w(i,"utf8").split(`
+`).filter(f=>f!=="");if(r.length===0)return;const[l,...o]=r;let d=null;const p=[];for(const f of o){const e=JSON.parse(f);E(e)||(p.push(JSON.stringify({...e,parentId:d})),typeof e.id=="string"&&(d=e.id))}S(i,`${[l,...p].join(`
+`)}
+`)}h(R,"stripHiddenEntriesFromJsonlExport");function j(i){const{registry:a,replies:r,rebind:l,session:o,boundaryReviewId:d,memoryRefs:p,reWelcomeAll:f}=i;return(e,n)=>{switch(n.type){case"navigate_tree":{if(r.notWritable(e,"navigate the session tree"))break;if(g(o(),d,n.targetId)){r.reviewBoundaryRefusalTo(e,n.targetId);break}o().navigateTree(n.targetId,n.options).then(t=>{t.cancelled||f(),r.ackTo(e,"navigate_tree",!t.cancelled,t.editorText)}).catch(r.engineErrorTo(e));break}case"reload":{if(r.notWritable(e,"reload"))break;o().reload({beforeSessionStart:h(()=>I(o()),"beforeSessionStart")}).then(()=>{const t=o().agent;return t&&(t.steeringMode="all",t.followUpMode="all"),p.invalidate().then(()=>{a.forEachHelloed(s=>{s.role==="observer"&&a.sendFrame(s,{type:"resources_reloaded"})}),r.ackTo(e,"reload")})}).catch(r.engineErrorTo(e));break}case"export":{if(r.notWritable(e,"export the session"))break;if(n.format==="jsonl")try{const t=o().exportToJsonl(n.path);R(t),r.ackTo(e,"export")}catch(t){r.engineErrorTo(e)(t)}else o().exportToHtml(n.path).then(()=>r.ackTo(e,"export")).catch(r.engineErrorTo(e));break}case"new_session":{if(r.notWritable(e,"start a new session"))break;l.runReplacement(e,"new_session",t=>t.newSession());break}case"switch_session":{if(r.notWritable(e,"switch sessions"))break;l.runReplacement(e,"switch_session",t=>t.switchSession(n.path));break}case"fork":{if(r.notWritable(e,"fork the session"))break;if(g(o(),d,n.entryId)){r.reviewBoundaryRefusalTo(e,n.entryId);break}l.runReplacement(e,"fork",t=>t.fork(n.entryId));break}case"clone":{if(r.notWritable(e,"clone the session"))break;l.runReplacement(e,"clone",async t=>{const s=o().sessionManager,c=s.getLeafId();if(c===null)return{cancelled:!0,detail:"no current leaf to clone from"};const u=s.createBranchedSession(c);return u===void 0?{cancelled:!0,detail:"createBranchedSession returned no path"}:t.switchSession(u)});break}case"share":{if(r.notWritable(e,"share the session"))break;const t=v(x(),`pi-share-${Date.now()}.html`);o().exportToHtml(t).then(()=>new Promise((s,c)=>{k("gh",["gist","create","--secret",t],{timeout:3e4,maxBuffer:1024*1024},(u,b)=>{try{y(t)&&T(t)}catch{}if(u){c(u);return}s(b.trim())})})).then(s=>{r.ackTo(e,"share",!0,s)}).catch(s=>{const c=String(s?.message??s);r.ackTo(e,"share",!1,c.includes("not found")||c.includes("gh: command not found")||c.includes("ENOENT")?"`gh` CLI not found \u2014 install GitHub CLI and authenticate with `gh auth login`":`share failed: ${c}`)});break}}}}h(j,"createSessionHandler");export{j as createSessionHandler,E as isHiddenJsonlBranchEntry,R as stripHiddenEntriesFromJsonlExport};

package/dist/core/runtime/broker/held-deferred-inbox.d.ts

@@ -0,0 +1,15 @@
+export declare const HELD_DEFERRED_INBOX_PROMPT_JOIN: unique symbol;
+export declare const BROKER_IDLE_TURN_START: unique symbol;
+export declare const BROKER_RUN_TURN_BUSY: unique symbol;
+export declare function brokerRunTurnBusy(): boolean;
+export type HeldDeferredInboxPromptJoin = (session: {
+    sendCustomMessage: (message: {
+        customType: string;
+        content: string;
+        display: boolean;
+    }) => Promise<void>;
+}) => Promise<void>;
+export declare function heldDeferredInboxPromptJoin(): HeldDeferredInboxPromptJoin | undefined;
+/** Starts an inbox-delivered idle turn through the broker's admission gate. */
+export type BrokerIdleTurnStart = (text: string, messageIds?: string[]) => void;
+export declare function brokerIdleTurnStart(): BrokerIdleTurnStart | undefined;

package/dist/core/runtime/broker/held-deferred-inbox.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var r=(o,t)=>n(o,"name",{value:t,configurable:!0});const e=Symbol.for("@crouton-kit/crtr:held-deferred-inbox-prompt-join"),u=Symbol.for("@crouton-kit/crtr:broker-idle-turn-start"),c=Symbol.for("@crouton-kit/crtr:broker-run-turn-busy");function f(){const o=globalThis[c];return typeof o=="function"&&o()}r(f,"brokerRunTurnBusy");function b(){const o=globalThis[e];return typeof o=="function"?o:void 0}r(b,"heldDeferredInboxPromptJoin");function l(){const o=globalThis[u];return typeof o=="function"?o:void 0}r(l,"brokerIdleTurnStart");export{u as BROKER_IDLE_TURN_START,c as BROKER_RUN_TURN_BUSY,e as HELD_DEFERRED_INBOX_PROMPT_JOIN,l as brokerIdleTurnStart,f as brokerRunTurnBusy,b as heldDeferredInboxPromptJoin};

package/dist/core/runtime/broker/inbox.d.ts

@@ -0,0 +1,22 @@
+import type { MailEntryDTO } from '../../../api/dto/mail.js';
+export { reportRefNodeId } from '../../../shared/inbox-entry-body.js';
+export type BrokerInboxEntryId = string;
+export type BrokerInboxEntry = MailEntryDTO;
+/** One-shot runtime cards an entry carries (rendered envelopes written by the
+ *  message API). They ride the delivery their own entry belongs to, so a note
+ *  can never land ahead of an unrelated person's message — except in the one
+ *  deliberate fold below, where deferred entries join a person's delivery as
+ *  the context their turn reads. */
+export declare function entryCards(entry: BrokerInboxEntry): readonly string[];
+/** One deliverable user message: either a person's verbatim words or the whole
+ *  `<runtime kind="inbox">` envelope. Never both — a reader parses an envelope
+ *  only as a whole message, so mixing them attributes the card to the person.
+ *  `cards` are the one-shot context envelopes that go out ahead of `text`. */
+export interface InboxDelivery {
+    kind: 'human' | 'card';
+    text: string;
+    cards: readonly string[];
+    entries: readonly BrokerInboxEntry[];
+}
+/** Keep each person's words separate and in order; fold preceding deferred context into that same input. */
+export declare function coalesceBrokerInbox(entries: readonly BrokerInboxEntry[]): readonly InboxDelivery[];

package/dist/core/runtime/broker/inbox.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var d=(e,t)=>u(e,"name",{value:t,configurable:!0});import{formatInboxCard as p}from"../../../shared/generated-context.js";import{renderEntryBody as m}from"../../../shared/inbox-entry-body.js";import{reportRefNodeId as I}from"../../../shared/inbox-entry-body.js";function y(e){const t=e.data?.report_body;return m(e,typeof t=="string"?t:null)}d(y,"entryBody");function l(e){return{kind:e.kind,body:y(e),...e.ref===void 0?{}:{ref:e.ref},...e.disposition===void 0?{}:{disposition:e.disposition}}}d(l,"cardEntry");function c(e){const t=e.data?.cards;return Array.isArray(t)?t.filter(s=>typeof s=="string"):[]}d(c,"entryCards");function b(e){const t=[];let s=[];const a=d(()=>{if(s.length===0)return;const r=new Map;for(const n of s){const i=n.from??"system";r.has(i)||r.set(i,[]),r.get(i).push(n)}const o=[...r].map(([n,i])=>({id:n,entries:i.map(f=>l(f))}));t.push({kind:"card",text:p(o),cards:s.flatMap(n=>c(n)),entries:s}),s=[]},"flushRun");for(const r of e){if((r.from??"system")!=="human"){s.push(r);continue}a();const o=r.data?.body;t.push({kind:"human",text:typeof o=="string"?o:r.label,cards:c(r),entries:[r]})}a();for(let r=t.length-2;r>=0;r-=1){const o=t[r],n=t[r+1];o.kind!=="card"||n.kind!=="human"||o.entries.every(i=>i.tier==="deferred")&&(t[r]={...n,cards:[...o.cards,o.text,...n.cards],entries:[...o.entries,...n.entries]},t.splice(r+1,1))}return t}d(b,"coalesceBrokerInbox");export{b as coalesceBrokerInbox,c as entryCards,I as reportRefNodeId};

package/dist/core/runtime/broker/model-adapter.d.ts

@@ -0,0 +1,24 @@
+import { type AssistantMessageEventStream, type Context, type Model, type ModelsSimpleStreamOptions } from '@earendil-works/pi-ai';
+import type { ModelRuntime } from '@earendil-works/pi-coding-agent';
+/** Pi uses availability and auth for its model controls; only the daemon can
+ * decide whether a route has credentials. Keep the broker's metadata selectable. */
+export declare function configureBrokerModelRuntime(runtime: ModelRuntime): void;
+export declare const LLM_BROKER_RETRY_WINDOW_S = 300;
+export declare const LLM_REFUSAL_DIAGNOSTIC = "crtr:llm-refusal";
+/** The retry deadline (epoch ms) a final daemon refusal carried on its
+ *  diagnostic, or undefined when the refusal named none. */
+export declare function refusalRetryAt(message: {
+    diagnostics?: ReadonlyArray<{
+        type: string;
+        details?: unknown;
+    }>;
+}): number | undefined;
+/** Messages the wire request carries. An errored or aborted assistant is an
+ *  incomplete turn that pi-ai's own serializers omit; this adapter bypasses
+ *  them, so drop it here. A request must also end on a non-assistant message
+ *  (Anthropic rejects assistant prefill with a 400), so trailing assistants go
+ *  too. */
+export declare function wireHistory(messages: Context['messages']): Context['messages'];
+export declare function requestBody(model: Model<any>, context: Context, options: ModelsSimpleStreamOptions): Record<string, unknown>;
+/** One pi stream, backed exclusively by the authenticated daemon llm route. */
+export declare function streamBrokerModel(model: Model<any>, context: Context, options?: ModelsSimpleStreamOptions): AssistantMessageEventStream;

package/dist/core/runtime/broker/model-adapter.js

@@ -0,0 +1,2 @@
+var q=Object.defineProperty;var l=(t,e)=>q(t,"name",{value:e,configurable:!0});import{setTimeout as F}from"node:timers/promises";import{createAssistantMessageEventStream as P,getCurrentSystemPrompt as W,getCurrentTools as j}from"@earendil-works/pi-ai";import{socketFetch as J}from"../../../api/node-transport.js";import{apiSocketPath as U}from"../../canvas/paths.js";import{currentNodeToken as Y}from"./node-token.js";import{envModelExact as T,envModelIntent as z}from"../../../shared/env.js";import{MODEL_CONTEXT_BODY_MAX_BYTES as k}from"../../llm/body-limits.js";import{modelRequestFromConfig as X}from"../../model-routes.js";import{parseProviderRateLimit as G,providerFailureDiagnostic as H}from"../../provider-failure.js";function de(t){t.checkAuth=async e=>t.getProvider(e)?{type:"api_key"}:void 0,t.getAvailable=async e=>t.getModels(e),t.getAvailableSnapshot=()=>t.getModels(),t.streamSimple=Z}l(de,"configureBrokerModelRuntime");const K=300,$="crtr:llm-refusal";class v extends Error{static{l(this,"LlmRefusalError")}retryAt;rateLimit;constructor(e,o,r){super(e),this.retryAt=o,this.rateLimit=r}}function L(t,e){const o=t===void 0?"the request body":`the request body (${t} bytes)`;return new Error(`request_too_large: ${o} exceeds the ${e}-byte model request limit; compact the conversation to shrink the context`)}l(L,"contextTooLargeError");function O(t){const e=t.details?.rate_limit;if(!e||typeof e!="object")return;const o=G(e);if(o===void 0)return;const{provider:r,model:n}=e;return typeof r=="string"&&r!==""&&typeof n=="string"&&n!==""?{...o,model:`${r}/${n}`}:o}l(O,"refusalRateLimit");function pe(t){for(const e of t.diagnostics??[]){if(e.type!==$)continue;const o=e.details?.retryAt;if(typeof o=="number"&&Number.isFinite(o)&&o>0)return o}}l(pe,"refusalRetryAt");class M extends Error{static{l(this,"ContentFilteredError")}}function C(t){return typeof t=="string"?t:t.map(e=>e.type==="text"?{type:"text",text:e.text}:{type:"image_url",image_url:{url:`data:${e.mimeType};base64,${e.data}`}})}l(C,"wireContent");function Q(t){const e=l(n=>n.role==="assistant"&&(n.stopReason==="error"||n.stopReason==="aborted"),"incomplete"),o=t.some(e)?t.filter(n=>!e(n)):t;let r=o.length;for(;r>0&&o[r-1]?.role==="assistant";)r--;return r===o.length?o:o.slice(0,r)}l(Q,"wireHistory");function V(t,e,o){const r=[],n=W(e.messages),c=j(e.messages);n?r.push({role:"system",content:n}):e.systemPrompt&&r.push({role:"system",content:e.systemPrompt});for(const d of Q(e.messages))d.role==="user"?r.push({role:"user",content:C(d.content)}):d.role==="toolResult"?r.push({role:"tool",content:C(d.content),tool_call_id:d.toolCallId}):d.role==="assistant"&&r.push({role:"assistant",content:d.content.filter(p=>p.type==="text").map(p=>p.text).join("")||null,tool_calls:d.content.filter(p=>p.type==="toolCall").map(p=>({id:p.id,type:"function",function:{name:p.name,arguments:JSON.stringify(p.arguments)}}))});const w=`${t.provider}/${t.id}`,y=z();return{model:X(w,y,T())?.kind==="logical"?y:w,model_policy:T()?"exact":"substitute",stream:!0,messages:r,...c.length?{tools:c.map(d=>({type:"function",function:{name:d.name,description:d.description,parameters:d.parameters}}))}:{},...o.reasoning?{reasoning_effort:o.reasoning}:{},...o.temperature!==void 0?{temperature:o.temperature}:{},...o.maxTokens!==void 0?{max_tokens:o.maxTokens}:{}}}l(V,"requestBody");function R(t,e){if(typeof e!="string")return!1;const o=e.indexOf("/");return o<1||o===e.length-1?!1:(t.provider=e.slice(0,o),t.model=e.slice(o+1),!0)}l(R,"applyServedModel");function D(t){if(t.details?.served_model!==void 0)return t.details.served_model;const e=t.details?.rate_limit;return typeof e?.provider=="string"&&typeof e.model=="string"?`${e.provider}/${e.model}`:void 0}l(D,"refusalRoute");function N(t){if(!t||typeof t!="object"||!("error"in t))throw new Error("llm returned an invalid response");const e=t.error;if(!e||typeof e.message!="string")throw new Error("llm returned an invalid refusal");return e}l(N,"parseRefusal");function Z(t,e,o={}){const r=P(),n={role:"assistant",content:[],api:t.api,provider:t.provider,model:t.id,usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"pending",timestamp:Date.now()};return(async()=>{const c=Y();if(!c)throw new Error("llm requires a node token");const w=JSON.stringify(V(t,e,o)),y=Buffer.byteLength(w);if(y>k)throw L(y,k);let d=0;for(;;){o.signal?.throwIfAborted();const p=await J(U())("http://localhost/v1/llm",{method:"POST",headers:{authorization:`Bearer ${c}`,"content-type":"application/json"},body:w,signal:o.signal});if(!p.ok){const a=N(await p.json());if(p.status===413||a.code==="payload_too_large")throw L(y,k);if(R(n,D(a)),a.retryable!==!0)throw new v(a.message,void 0,O(a));const s=a.retry_after_s;if(typeof s!="number"||!Number.isFinite(s)||s<=0)throw new Error(a.message);const f=K-d;if(s>f){const u=Date.now()+s*1e3;throw new v(`${a.message} (retry after ${s}s, at ${new Date(u).toISOString()})`,u,O(a))}await F(s*1e3,void 0,{signal:o.signal}),d+=s;continue}if(!p.body)throw new Error("llm returned no stream");r.push({type:"start",partial:n});const B=p.body.getReader(),b=new TextDecoder;let h="",_="stop",E,S=!1,I=!1;const A=l(a=>{const s=JSON.parse(a);if(s.error){const i=N(s);throw R(n,D(i)),new Error(i.message)}if(s.served_model){if(I=!0,s.served_model.indexOf("/")<1)throw new Error("llm returned an invalid served_model");R(n,s.served_model)}const f=s.choices?.[0],u=f?.delta;if(u?.reasoning_content){const i=n.content.findIndex(x=>x.type==="thinking"),m=i<0?{type:"thinking",thinking:""}:n.content[i],g=i<0?n.content.push(m)-1:i;if(i<0&&r.push({type:"thinking_start",contentIndex:g,partial:n}),m.type!=="thinking")throw new Error("invalid thinking block");m.thinking+=u.reasoning_content,r.push({type:"thinking_delta",contentIndex:g,delta:u.reasoning_content,partial:n})}if(u?.content){const i=n.content.findIndex(x=>x.type==="text"),m=i<0?{type:"text",text:""}:n.content[i],g=i<0?n.content.push(m)-1:i;if(i<0&&r.push({type:"text_start",contentIndex:g,partial:n}),m.type!=="text")throw new Error("invalid text block");m.text+=u.content,r.push({type:"text_delta",contentIndex:g,delta:u.content,partial:n})}for(const i of u?.tool_calls??[]){const m={type:"toolCall",id:i.id,name:i.function.name,arguments:JSON.parse(i.function.arguments)},g=n.content.push(m)-1;r.push({type:"toolcall_start",contentIndex:g,partial:n}),r.push({type:"toolcall_end",contentIndex:g,toolCall:m,partial:n})}f?.finish_reason&&(_=f.finish_reason),f?.message?.refusal&&(E=f.message.refusal),s.usage&&(S=!0,n.usage={input:s.usage.prompt_tokens,output:s.usage.completion_tokens,cacheRead:s.usage.cache_read_tokens,cacheWrite:s.usage.cache_write_tokens,totalTokens:s.usage.total_tokens,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}})},"apply");for(;;){const{value:a,done:s}=await B.read();if(s)break;h+=b.decode(a,{stream:!0});let f;for(;(f=h.indexOf(`
+`))>=0;){const u=h.slice(0,f).trim();h=h.slice(f+1),u&&A(u)}}if(h+=b.decode(),h.trim()&&A(h.trim()),!S||!I)throw new Error("llm stream ended without usage or served_model");for(const[a,s]of n.content.entries())s.type==="text"&&r.push({type:"text_end",contentIndex:a,content:s.text,partial:n}),s.type==="thinking"&&r.push({type:"thinking_end",contentIndex:a,content:s.thinking,partial:n});if(_==="content_filter")throw new M(E??"Content filtered");if(!["stop","tool_calls","length"].includes(_))throw new Error(`llm returned unknown finish reason: ${_}`);n.stopReason=_==="tool_calls"?"toolUse":_==="length"?"length":"stop",r.push({type:"done",reason:n.stopReason,message:n}),r.end();return}})().catch(c=>{n.stopReason=o.signal?.aborted?"aborted":"error",n.errorMessage=c instanceof Error?c.message:String(c),c instanceof v&&(n.diagnostics=[{type:$,timestamp:Date.now(),...c.retryAt!==void 0?{details:{retryAt:c.retryAt}}:{}},...c.rateLimit!==void 0?[H({status:429,ratelimit:c.rateLimit})]:[]]),c instanceof M&&n.stopReason==="error"&&(n.rawStopReason="content_filter"),r.push({type:"error",reason:n.stopReason,error:n}),r.end()}),r}l(Z,"streamBrokerModel");export{K as LLM_BROKER_RETRY_WINDOW_S,$ as LLM_REFUSAL_DIAGNOSTIC,de as configureBrokerModelRuntime,pe as refusalRetryAt,V as requestBody,Z as streamBrokerModel,Q as wireHistory};

package/dist/core/runtime/broker/node-named.d.ts

@@ -0,0 +1,15 @@
+/** What crtrd stored, as it stored it — the payload of a `node_named` frame. */
+export interface NodeNamedNotice {
+    description: string;
+    title: string;
+    icon: string;
+    editorLabel: string;
+}
+/** Register the broker's fan-out. One broker hosts one pi process, so the last
+ *  registration wins; a second broker in one process is not a thing that
+ *  exists. */
+export declare function onNodeNamed(fn: (notice: NodeNamedNotice) => void): void;
+/** Announce a generated name crtrd's guarded commit APPLIED. A no-op when no
+ *  broker is listening — the same extension code also runs under test harnesses
+ *  that host no client registry. */
+export declare function publishNodeNamed(notice: NodeNamedNotice): void;

package/dist/core/runtime/broker/node-named.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var o=(e,t)=>d(e,"name",{value:t,configurable:!0});let n;function N(e){n=e}o(N,"onNodeNamed");function l(e){n?.(e)}o(l,"publishNodeNamed");export{N as onNodeNamed,l as publishNodeNamed};