@north-light/cli 0.0.0 → 0.3.414

package/dist/core/scoped-state/db.js

@@ -0,0 +1,2 @@
+var T=Object.defineProperty;var n=(e,o)=>T(e,"name",{value:o,configurable:!0});import{DatabaseSync as p}from"node:sqlite";import{forgetPrepared as R}from"../sqlite-statements.js";import{chmodSync as m,existsSync as s,mkdirSync as y,readdirSync as O,rmSync as I,statSync as P,writeFileSync as v}from"node:fs";import{join as i}from"node:path";import j from"proper-lockfile";import{CONFIG_FILE as S,PROFILE_DIR as N,STATE_FILE as f}from"../../types.js";import{withExclusiveDirectoryLock as _}from"../exclusive-lock.js";import{layoutNeedsMigration as k}from"../layout.js";import{providerStore as C,projectStore as D,userStore as G}from"./paths.js";import{createScopedSchema as g,ensureProviderModelCooldowns as $,PROVIDER_SCHEMA_VERSION as w,SCOPED_SCHEMA_VERSION as d}from"./schema.js";const l=new Map,B=/^[a-z0-9]+(?:-[a-z0-9]+)*-[0-9a-f]{8}$/;function F(e,o,r){e.prepare("UPDATE scope_owners SET root=? WHERE owner_key=?").run(r,o)}n(F,"writeOwnerRoot");function c(e){return Number(e.prepare("PRAGMA user_version").get().user_version)}n(c,"version");function L(e,o){const r=c(e);if(r===0)throw new Error(`scoped SQL store is uninitialized: ${o.path}; crtr was updated and \`crtr sys daemon restart\` converts local state`);const t=o.kind==="provider"?w:d;if(r>t)throw new Error(`scoped SQL store ${o.path} uses unsupported schema version ${r}`);if(r!==t)throw new Error(`scoped SQL store ${o.path} requires an explicit conversion`)}n(L,"assertVersion");function x(e,o){if(o.kind==="provider"){c(e)===w&&(e.exec("PRAGMA busy_timeout = 5000"),$(e));return}if(!(c(e)>=d)){e.exec("PRAGMA busy_timeout = 5000; BEGIN IMMEDIATE");try{c(e)===1&&(e.prepare("PRAGMA table_info(profiles)").all().some(({name:t})=>t==="grantee")||e.exec("ALTER TABLE profiles ADD COLUMN grantee TEXT"),e.exec("PRAGMA user_version = 2")),c(e)===2&&(e.prepare("PRAGMA table_info(profiles)").all().some(({name:t})=>t==="home")&&e.exec("ALTER TABLE profiles DROP COLUMN home"),e.exec("PRAGMA user_version = 3")),c(e)===3&&(e.exec("ALTER TABLE profiles ADD COLUMN delivery_limits_json TEXT NOT NULL DEFAULT '{}' CHECK(json_valid(delivery_limits_json))"),e.exec("PRAGMA user_version = 4")),c(e)===4&&(e.exec("CREATE TABLE IF NOT EXISTS legacy_project_caps (profile_id TEXT NOT NULL, path TEXT NOT NULL, memory TEXT NOT NULL CHECK(memory IN ('none','name','preview')), PRIMARY KEY(profile_id,path))"),e.prepare("PRAGMA table_info(profile_projects)").all().some(({name:t})=>t==="memory")&&e.exec(`INSERT INTO legacy_project_caps SELECT profile_id, path, memory FROM profile_projects WHERE memory != 'content';
+          ALTER TABLE profile_projects DROP COLUMN memory;`),e.exec(`PRAGMA user_version = ${d}`)),e.exec("COMMIT")}catch(r){throw e.exec("ROLLBACK"),r}}}n(x,"upgradeScopedStore");function ne(e){const o=new p(e.path);try{x(o,e),L(o,e)}finally{o.close()}}n(ne,"assertScopedStoreReady");function U(e){if(!M(e))return;const o=new p(e.path,{readOnly:!0});let r;try{r=c(o)}finally{o.close()}if(r===0)for(const t of[e.path,`${e.path}-wal`,`${e.path}-shm`])I(t,{force:!0})}n(U,"discardIncompleteScopedStore");function H(e,o){return _(i(e,".init.lock"),()=>{const r=i(e,f),t=Date.now()+5e3;let a=10;for(;;){let E;try{E=j.lockSync(r,{realpath:!1,retries:0,stale:3e4,update:1e4})}catch(u){if(u.code!=="ELOCKED")throw u;const A=t-Date.now();if(A<=0)throw new Error(`timed out waiting for project state conversion lock: ${r}`,{cause:u});Atomics.wait(new Int32Array(new SharedArrayBuffer(4)),0,0,Math.min(a,A)),a=Math.min(a*2,250);continue}try{return o()}finally{E()}}})}n(H,"withProjectStateLock");function h(e){s(e)&&m(e,384);for(const o of["-wal","-shm"])s(`${e}${o}`)&&m(`${e}${o}`,384)}n(h,"secure");function M(e){return s(e.path)}n(M,"scopedStoreExists");function K(e){if(e.kind==="project")return[i(e.root,f)];if(e.kind==="provider")return[i(e.root,"anthropic-subscriptions.json"),i(e.root,"openai-codex-subscriptions.json"),i(e.root,"provider-rotation.json")];const o=[i(e.root,S),i(e.root,f),i(e.root,"profile-defaults.json")],r=i(e.root,N);if(s(r))for(const t of O(r,{withFileTypes:!0}))t.isDirectory()&&B.test(t.name)&&o.push(i(r,t.name,"profile.json"),i(r,t.name,S),i(r,t.name,f));return o}n(K,"legacyScopedStorePaths");function X(e){const o=e.kind==="user"?G(e.root):e.kind==="project"?D(e.root):C(e.root);o.kind!=="project"&&y(o.root,{recursive:!0,mode:448});const r=n(()=>{if(o.kind==="project"&&U(o),M(o))return;const t=K(o).find(s);if(t!==void 0)throw new Error(`legacy scoped state exists at ${t}; crtr was updated and \`crtr sys daemon restart\` converts local state`);Q(o,a=>{g(a,o.kind),o.kind!=="provider"&&F(a,o.kind,o.root)})},"initialize");o.kind==="project"?H(o.root,r):_(i(o.root,".init.lock"),r)}n(X,"initializeFreshScopedStore");function z(e){if(k())throw new Error("layout_migration_required");const o=l.get(e.path);if(o!==void 0)return o;X(e);const r=new p(e.path);try{return r.exec("PRAGMA busy_timeout = 5000; PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON;"),x(r,e),L(r,e),h(e.path),l.set(e.path,r),r}catch(t){throw r.close(),t}}n(z,"openScopedStore");function Q(e,o){if(s(e.path))throw new Error(`scoped SQL store already exists: ${e.path}`);if(e.kind!=="project"&&y(e.root,{recursive:!0,mode:448}),!P(e.root).isDirectory())throw new Error(`scoped SQL root is not a directory: ${e.root}`);(e.kind!=="project"||process.platform!=="linux")&&m(e.root,448),v(e.path,"",{mode:384});const r=new p(e.path);try{r.exec("PRAGMA busy_timeout = 5000; PRAGMA journal_mode = WAL; PRAGMA foreign_keys = ON; BEGIN IMMEDIATE;"),o(r),r.exec("COMMIT")}catch(t){try{r.exec("ROLLBACK")}catch{}throw t}finally{h(e.path),r.close()}}n(Q,"createScopedStore");function ie(e,o){const r=z(e);if(r.isTransaction)return o(r);r.exec("BEGIN IMMEDIATE");try{const t=o(r);return r.exec("COMMIT"),h(e.path),t}catch(t){try{r.exec("ROLLBACK")}catch{}throw t}}n(ie,"withScopedWrite");function ce(){for(const e of l.values())R(e),e.close();l.clear()}n(ce,"closeScopedStores");export{B as PROFILE_ID_SHAPE,ne as assertScopedStoreReady,ce as closeScopedStores,Q as createScopedStore,U as discardIncompleteScopedStore,X as initializeFreshScopedStore,K as legacyScopedStorePaths,z as openScopedStore,M as scopedStoreExists,H as withProjectStateLock,ie as withScopedWrite,F as writeOwnerRoot};

package/dist/core/scoped-state/migrate.d.ts

@@ -0,0 +1,8 @@
+export { initializeFreshScopedStore } from './db.js';
+/** Conversion is intentionally explicit. Deployment coordination must prove all legacy writers at these shared roots are stopped before calling it. */
+export declare function convertLegacyScopedStore(input: {
+    kind: 'user' | 'project' | 'provider';
+    root: string;
+}): void;
+/** Converts legacy provider pools only after the activation owner has stopped every writer sharing this agent directory. */
+export declare function convertLegacyProviderStore(agentDir: string): Promise<void>;

package/dist/core/scoped-state/migrate.js

@@ -0,0 +1,3 @@
+var U=Object.defineProperty;var f=(e,r)=>U(e,"name",{value:r,configurable:!0});import{prepared as p}from"../sqlite-statements.js";import{randomUUID as x}from"node:crypto";import{chmodSync as I,copyFileSync as P,existsSync as m,mkdirSync as w,readFileSync as _,readdirSync as V,statSync as N}from"node:fs";import{dirname as L,join as u,relative as J}from"node:path";import W from"proper-lockfile";import{CONFIG_FILE as b,PROFILE_DIR as D,STATE_FILE as v}from"../../types.js";import{LockedJsonFile as C}from"../locked-file.js";import{assertScopedStoreReady as q,createScopedStore as j,discardIncompleteScopedStore as z,legacyScopedStorePaths as O,PROFILE_ID_SHAPE as G,scopedStoreExists as g,withProjectStateLock as H,writeOwnerRoot as K}from"./db.js";import{canonicalRoot as M,providerStore as T,projectStore as X,userStore as B}from"./paths.js";import{profileSpace as Q}from"../layout.js";import{createScopedSchema as F}from"./schema.js";function h(e){return JSON.parse(_(e,"utf8"))}f(h,"json");function R(e){return e.some(m)}f(R,"existsLegacy");function E(e,r){const o=u(e,".legacy-scoped-state");try{w(o,{mode:448})}catch(a){if(a.code!=="EEXIST"||!N(o).isDirectory())throw a}I(o,448);for(const a of r)if(m(a)&&N(a).isFile()){const n=J(e,a);if(n===""||n.startsWith(".."))throw new Error(`legacy state is outside its owning root: ${a}`);const t=u(o,n);L(t)!==o&&w(L(t),{recursive:!0,mode:448}),P(a,t),I(t,384)}}f(E,"preserve");import{initializeFreshScopedStore as ge}from"./db.js";function me(e){const r=e.kind==="user"?B(e.root):e.kind==="project"?X(e.root):T(e.root);if(e.kind!=="project"&&g(r))return;if(e.kind==="provider")throw new Error("provider conversion requires convertLegacyProviderStore() under coordinated shared-agent-dir activation");const o=O(r),a=f(()=>{e.kind==="project"&&z(r),!g(r)&&(e.kind==="project"&&R(o)&&E(r.root,o),j(r,n=>{F(n,e.kind);const t=e.kind==="user"?"user":"project";K(n,t,r.root),e.kind==="user"?re(n,r.root):k(n,t,u(r.root,v))}),e.kind==="user"&&R(o)&&E(r.root,o))},"convert");e.kind==="project"?H(r.root,()=>{a(),q(r)}):a()}f(me,"convertLegacyScopedStore");function Y(e){if(!m(e))return[];const r=JSON.parse(_(e,"utf8"));if(!Array.isArray(r))throw new Error(`legacy subscription pool is malformed: ${e}`);const o=new Set;return r.map((a,n)=>{if(a===null||typeof a!="object"||Array.isArray(a))throw new Error(`legacy subscription pool entry ${n+1} is malformed: ${e}`);const t=a,s=typeof t.label=="string"?t.label.trim():"",c=typeof t.refresh=="string"?t.refresh.trim():"",i=typeof t.access=="string"?t.access.trim():"",d=Number(t.expires);if(!s||!c||!i||!Number.isFinite(d))throw new Error(`legacy subscription pool entry ${n+1} is incomplete: ${e}`);const y=s.toLowerCase();if(o.has(y))throw new Error(`legacy subscription pool has duplicate label "${s}": ${e}`);o.add(y);const l=f(A=>Number.isFinite(Number(t[A]))?Number(t[A]):0,"timing"),S=typeof t.accountId=="string"&&t.accountId.trim()!==""?t.accountId.trim():void 0;return{label:s,refresh:c,access:i,expires:d,rateLimitedUntil:l("rateLimitedUntil"),lastAttemptAt:l("lastAttemptAt"),lastRateLimitedAt:l("lastRateLimitedAt"),...t.authFailure==="invalid_grant"?{authFailure:"invalid_grant"}:{},...S?{accountId:S}:{}}})}f(Y,"parseLegacyProviderPool");function Z(e){if(!m(e))return{};const r=JSON.parse(_(e,"utf8"));if(r===null||typeof r!="object"||Array.isArray(r))throw new Error(`legacy provider rotation settings are malformed: ${e}`);const o=r;return{...o.defaultFallbackStrength==="ultra"||o.defaultFallbackStrength==="strong"||o.defaultFallbackStrength==="medium"||o.defaultFallbackStrength==="light"?{defaultFallbackStrength:o.defaultFallbackStrength}:{},...typeof o.revertWhenAvailable=="boolean"?{revertWhenAvailable:o.revertWhenAvailable}:{}}}f(Z,"parseLegacyRotation");async function ee(e,r){const o=[];try{for(const a of e)m(a)&&o.push(await W.lock(a,{realpath:!1,retries:0,stale:3e4,update:1e4}));return await r()}finally{await Promise.allSettled(o.reverse().map(a=>a()))}}f(ee,"withLegacyProviderLocks");async function ye(e){const r=T(e);if(g(r))return;const o=O(r);await ee(o,async()=>{if(g(r))return;const a=new Map(o.slice(0,2).map((t,s)=>[s===0?"anthropic":"openai-codex",Y(t)])),n=Z(o[2]);w(r.root,{recursive:!0,mode:448}),E(r.root,o);for(const[t,s]of a){const c=Object.fromEntries(s.map(d=>[x(),{refresh:d.refresh,access:d.access,expires:d.expires,...d.accountId?{accountId:d.accountId}:{}}]));await new C(u(r.root,`${t}-credentials.json`),!0,`{"version":1,"accounts":{}}
+`).withLockAsync(async(d,y,l)=>(l(`${JSON.stringify({version:1,accounts:c})}
+`),{result:void 0}))}j(r,t=>{F(t,"provider");for(const[s,c]of a){const i=JSON.parse(_(u(r.root,`${s}-credentials.json`),"utf8")),d=Object.keys(i.accounts),y=p(t,"INSERT INTO managed_accounts(provider_id,id,label,label_key,position,last_attempt_at,last_rate_limited_at,rate_limited_until,auth_failure) VALUES(?,?,?,?,?,?,?,?,?)");c.forEach((l,S)=>y.run(s,d[S],l.label,l.label.toLowerCase(),S,l.lastAttemptAt,l.lastRateLimitedAt,l.rateLimitedUntil,l.authFailure??null))}(n.defaultFallbackStrength!==void 0||n.revertWhenAvailable!==void 0)&&p(t,"INSERT INTO rotation_settings(singleton,default_fallback_strength,revert_when_available) VALUES(1,?,?)").run(n.defaultFallbackStrength??null,n.revertWhenAvailable===void 0?null:n.revertWhenAvailable?1:0)})})}f(ye,"convertLegacyProviderStore");function $(e,r,o){if(!m(o))return;const a=h(o);if(a===null||typeof a!="object"||Array.isArray(a))throw new Error(`legacy config is malformed: ${o}`);p(e,"INSERT INTO scope_settings(owner_key,raw_json) VALUES(?,?)").run(r,JSON.stringify(a))}f($,"importSettings");function k(e,r,o){if(!m(o))return;const a=h(o);if(a===null||typeof a!="object"||Array.isArray(a))throw new Error(`legacy state is malformed: ${o}`);const n=a;p(e,"INSERT INTO scope_bookkeeping(owner_key,last_self_check,active_canvas) VALUES(?,?,?)").run(r,n.last_self_check??null,n.activeCanvas??null);const t=p(e,"INSERT INTO scope_marketplaces(owner_key,name,last_updated) VALUES(?,?,?)");for(const[c,i]of Object.entries(n.marketplaces??{}))t.run(r,c,i.last_updated??null);const s=p(e,"INSERT INTO scope_plugins(owner_key,name,last_updated,etag,checked_at) VALUES(?,?,?,?,?)");for(const[c,i]of Object.entries(n.plugins??{}))s.run(r,c,i.last_updated??null,i.etag??null,i.checked_at??null)}f(k,"importState");function re(e,r){$(e,"user",u(r,b)),k(e,"user",u(r,v));const o=u(r,D);if(m(o))for(const n of V(o,{withFileTypes:!0})){if(!n.isDirectory()||!G.test(n.name))continue;const t=n.name,s=u(o,t),c=u(s,"profile.json");if(!m(c))throw new Error(`legacy profile manifest is missing: ${c}`);const i=h(c);if(!i||typeof i!="object"||!Array.isArray(i.projects)||typeof i.name!="string"||typeof i.created_at!="string")throw new Error(`legacy profile manifest is malformed: ${c}`);p(e,"INSERT INTO profiles(id,name,created_at,last_used_at,paused_at,default_kind,grantee,metadata_json) VALUES(?,?,?,?,?,?,?,?)").run(t,i.name,i.created_at,i.last_used_at??null,i.paused_at??null,i.default_kind??null,i.grantee??null,JSON.stringify(i.metadata??{})),p(e,"INSERT INTO scope_owners(owner_key,kind,root,profile_id) VALUES(?,?,?,?)").run(`profile:${t}`,"profile",M(Q(i.grantee??"app:terminal",t).memory),t);const d=p(e,"INSERT INTO profile_projects(profile_id,path,position) VALUES(?,?,?)"),y=p(e,"INSERT INTO legacy_project_caps(profile_id,path,memory) VALUES(?,?,?)");i.projects.forEach((l,S)=>{d.run(t,l.path,S),l.memory!==void 0&&l.memory!=="content"&&y.run(t,l.path,l.memory)}),$(e,`profile:${t}`,u(s,b)),k(e,`profile:${t}`,u(s,v))}const a=u(r,"profile-defaults.json");if(m(a)){const n=h(a);if(n===null||typeof n!="object"||Array.isArray(n))throw new Error(`legacy profile defaults are malformed: ${a}`);const t=p(e,"INSERT INTO profile_defaults(directory,profile_id) VALUES(?,?)");for(const[s,c]of Object.entries(n)){if(typeof c!="string")throw new Error(`legacy profile default is malformed: ${a}`);t.run(s,c)}}}f(re,"importUser");export{ye as convertLegacyProviderStore,me as convertLegacyScopedStore,ge as initializeFreshScopedStore};

package/dist/core/scoped-state/paths.d.ts

@@ -0,0 +1,9 @@
+export type ScopedStore = {
+    path: string;
+    root: string;
+    kind: 'user' | 'project' | 'provider';
+};
+export declare function canonicalRoot(root: string): string;
+export declare function userStore(root: string): ScopedStore;
+export declare function projectStore(root: string): ScopedStore;
+export declare function providerStore(agentDir: string): ScopedStore;

package/dist/core/scoped-state/paths.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var r=(t,o)=>p(t,"name",{value:o,configurable:!0});import{existsSync as u,realpathSync as d}from"node:fs";import{basename as l,dirname as f,join as e,resolve as s}from"node:path";function i(t){const o=s(t);let n=o;const c=[];for(;!u(n);){const a=f(n);if(a===n)return o;c.unshift(l(n)),n=a}return s(d(n),...c)}r(i,"canonicalRoot");function b(t){const o=i(t);return{path:e(o,"operations.db"),root:o,kind:"user"}}r(b,"userStore");function S(t){const o=i(t);return{path:e(o,"operations.db"),root:o,kind:"project"}}r(S,"projectStore");function j(t){const o=i(t);return{path:e(o,"crouter-operations.db"),root:o,kind:"provider"}}r(j,"providerStore");export{i as canonicalRoot,S as projectStore,j as providerStore,b as userStore};

package/dist/core/scoped-state/profiles.d.ts

@@ -0,0 +1,27 @@
+import type { ProfileManifest } from '../../types.js';
+export type StoredProfile = {
+    profileId: string;
+    manifest: ProfileManifest;
+};
+export declare function listStoredProfiles(root: string): StoredProfile[];
+export declare function getStoredProfile(root: string, id: string): StoredProfile | null;
+/** Pause gates need only this column; do not hydrate projects or JSON manifests. */
+export declare function profilePaused(root: string, id: string): boolean;
+export declare function pausedProfileIds(root: string): Set<string>;
+export declare function insertStoredProfile(root: string, profile: StoredProfile): void;
+export declare function updateStoredProfile(root: string, id: string, mutate: (current: ProfileManifest) => ProfileManifest): StoredProfile | null;
+export declare function deleteStoredProfile(root: string, id: string): boolean;
+export declare function rewriteLocalProfileGrantees(root: string): void;
+export declare function readStoredDefaults(root: string): Record<string, string>;
+export declare function mutateStoredDefaults(root: string, mutate: (current: Record<string, string>) => Record<string, string>): Record<string, string>;
+/** Pre-canvas per-project memory caps (`none|name|preview`) the canvas import has not converted yet. */
+export declare function listLegacyProjectCaps(root: string): Array<{
+    profileId: string;
+    path: string;
+    memory: string;
+}>;
+/** Store each converted profile's delivery limits and delete every legacy cap row, in one write. */
+export declare function commitConvertedProjectCaps(root: string, limits: ReadonlyArray<{
+    profileId: string;
+    deliveryLimits: Record<string, string>;
+}>): void;

package/dist/core/scoped-state/profiles.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var o=(t,e)=>c(t,"name",{value:e,configurable:!0});import{prepared as n}from"../sqlite-statements.js";import{canonicalRoot as m,userStore as S}from"./paths.js";import{profileSpace as R}from"../layout.js";import{openScopedStore as f,withScopedWrite as d}from"./db.js";function s(t){return S(t)}o(s,"store");function O(t,e){return{profileId:t.id,manifest:{schema_version:1,name:t.name,projects:e,paused_at:t.paused_at,...t.default_kind===null?{}:{default_kind:t.default_kind},...t.grantee===null?{}:{grantee:t.grantee},...t.delivery_limits_json==="{}"?{}:{delivery_limits:JSON.parse(t.delivery_limits_json)},...Object.keys(JSON.parse(t.metadata_json)).length===0?{}:{metadata:JSON.parse(t.metadata_json)},created_at:t.created_at,last_used_at:t.last_used_at}}}o(O,"rowToProfile");function u(t,e){const r=n(t,"SELECT id, name, created_at, last_used_at, paused_at, default_kind, grantee, metadata_json, delivery_limits_json FROM profiles WHERE id=?").get(e);if(!r)return null;const i=n(t,"SELECT path FROM profile_projects WHERE profile_id=? ORDER BY position").all(e);return O(r,i)}o(u,"get");function I(t){const e=f(s(t));return n(e,"SELECT id FROM profiles ORDER BY rowid").all().map(({id:i})=>u(e,i)).filter(Boolean)}o(I,"listStoredProfiles");function N(t,e){return u(f(s(t)),e)}o(N,"getStoredProfile");function k(t,e){return n(f(s(t)),"SELECT paused_at FROM profiles WHERE id=?").get(e)?.paused_at!=null}o(k,"profilePaused");function h(t){const e=n(f(s(t)),"SELECT id FROM profiles WHERE paused_at IS NOT NULL").all();return new Set(e.map(r=>r.id))}o(h,"pausedProfileIds");function D(t,e){d(s(t),r=>{n(r,"INSERT INTO profiles(id,name,created_at,last_used_at,paused_at,default_kind,grantee,metadata_json,delivery_limits_json) VALUES(?,?,?,?,?,?,?,?,?)").run(e.profileId,e.manifest.name,e.manifest.created_at,e.manifest.last_used_at,e.manifest.paused_at,e.manifest.default_kind??null,e.manifest.grantee??null,JSON.stringify(e.manifest.metadata??{}),JSON.stringify(e.manifest.delivery_limits??{})),n(r,"INSERT INTO scope_owners(owner_key,kind,root,profile_id) VALUES(?,?,?,?)").run(`profile:${e.profileId}`,"profile",m(R(e.manifest.grantee??"app:terminal",e.profileId).memory),e.profileId);const i=n(r,"INSERT INTO profile_projects(profile_id,path,position) VALUES(?,?,?)");e.manifest.projects.forEach((l,a)=>i.run(e.profileId,l.path,a))})}o(D,"insertStoredProfile");function F(t,e,r){return d(s(t),i=>{const l=u(i,e);if(!l)return null;const a=r(l.manifest);n(i,"UPDATE profiles SET name=?, last_used_at=?, paused_at=?, default_kind=?, grantee=?, metadata_json=?, delivery_limits_json=? WHERE id=?").run(a.name,a.last_used_at,a.paused_at,a.default_kind??null,a.grantee??null,JSON.stringify(a.metadata??{}),JSON.stringify(a.delivery_limits??{}),e),n(i,"DELETE FROM profile_projects WHERE profile_id=?").run(e);const p=n(i,"INSERT INTO profile_projects(profile_id,path,position) VALUES(?,?,?)");return a.projects.forEach((E,_)=>p.run(e,E.path,_)),{profileId:e,manifest:a}})}o(F,"updateStoredProfile");function M(t,e){return d(s(t),r=>{if(!u(r,e))return!1;const i=`profile:${e}`;return n(r,"DELETE FROM scope_settings WHERE owner_key=?").run(i),n(r,"DELETE FROM scope_bookkeeping WHERE owner_key=?").run(i),n(r,"DELETE FROM scope_marketplaces WHERE owner_key=?").run(i),n(r,"DELETE FROM scope_plugins WHERE owner_key=?").run(i),n(r,"DELETE FROM scope_owners WHERE owner_key=?").run(i),n(r,"DELETE FROM profiles WHERE id=?").run(e),!0})}o(M,"deleteStoredProfile");function W(t){d(s(t),e=>{n(e,"UPDATE profiles SET grantee = 'app:terminal' WHERE grantee = 'user:local'").run()})}o(W,"rewriteLocalProfileGrantees");function x(t){const e=f(s(t));return Object.fromEntries(n(e,"SELECT directory,profile_id FROM profile_defaults").all().map(r=>[r.directory,r.profile_id]))}o(x,"readStoredDefaults");function H(t,e){return d(s(t),r=>{const i=Object.fromEntries(n(r,"SELECT directory,profile_id FROM profile_defaults").all().map(p=>[p.directory,p.profile_id])),l=e(i);n(r,"DELETE FROM profile_defaults").run();const a=n(r,"INSERT INTO profile_defaults(directory,profile_id) VALUES(?,?)");for(const[p,E]of Object.entries(l))a.run(p,E);return l})}o(H,"mutateStoredDefaults");function P(t){return n(f(s(t)),"SELECT profile_id, path, memory FROM legacy_project_caps ORDER BY profile_id, path").all().map(e=>({profileId:e.profile_id,path:e.path,memory:e.memory}))}o(P,"listLegacyProjectCaps");function v(t,e){d(s(t),r=>{const i=n(r,"UPDATE profiles SET delivery_limits_json=? WHERE id=?");for(const l of e)if(i.run(JSON.stringify(l.deliveryLimits),l.profileId).changes!==1)throw new Error(`no stored profile ${l.profileId}`);n(r,"DELETE FROM legacy_project_caps").run()})}o(v,"commitConvertedProjectCaps");export{v as commitConvertedProjectCaps,M as deleteStoredProfile,N as getStoredProfile,D as insertStoredProfile,P as listLegacyProjectCaps,I as listStoredProfiles,H as mutateStoredDefaults,h as pausedProfileIds,k as profilePaused,x as readStoredDefaults,W as rewriteLocalProfileGrantees,F as updateStoredProfile};

package/dist/core/scoped-state/providers.d.ts

@@ -0,0 +1,24 @@
+import type { DatabaseSync } from 'node:sqlite';
+export type ProviderRow = {
+    providerId: string;
+    id: string;
+    label: string;
+    labelKey: string;
+    position: number;
+    lastAttemptAt: number;
+    lastRateLimitedAt: number;
+    rateLimitedUntil: number;
+    authFailure?: 'invalid_grant';
+};
+/** One model family's cooldown on one account (`managed_account_model_cooldowns`). */
+export type ProviderModelCooldown = {
+    family: string;
+    rateLimitedUntil: number;
+    lastRateLimitedAt: number;
+};
+export declare function providerRows(agentDir: string, providerId: string): ProviderRow[];
+export declare function providerRowByReference(db: DatabaseSync, providerId: string, ref: string): ProviderRow | undefined;
+export declare function providerModelCooldowns(db: DatabaseSync, providerId: string): Map<string, ProviderModelCooldown[]>;
+export declare function providerModelCooldownsFor(agentDir: string, providerId: string): Map<string, ProviderModelCooldown[]>;
+export declare function providerWrite<T>(agentDir: string, run: (db: DatabaseSync) => T): T;
+export declare function providerRevision(agentDir: string): number;

package/dist/core/scoped-state/providers.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var o=(t,e)=>u(t,"name",{value:e,configurable:!0});import{prepared as l}from"../sqlite-statements.js";import{openScopedStore as d,withScopedWrite as c}from"./db.js";import{providerStore as a}from"./paths.js";function _(t){return{providerId:t.provider_id,id:t.id,label:t.label,labelKey:t.label_key,position:t.position,lastAttemptAt:t.last_attempt_at,lastRateLimitedAt:t.last_rate_limited_at,rateLimitedUntil:t.rate_limited_until,...t.auth_failure?{authFailure:t.auth_failure}:{}}}o(_,"map");const p="provider_id,id,label,label_key,position,last_attempt_at,last_rate_limited_at,rate_limited_until,auth_failure";function S(t,e){return d(a(t)).prepare(`SELECT ${p} FROM managed_accounts WHERE provider_id=? ORDER BY position`).all(e).map(_)}o(S,"providerRows");function g(t,e,r){const i=r.trim().toLowerCase(),n=Number.parseInt(i,10),s=Number.isFinite(n)&&String(n)===i&&n>=1?t.prepare(`SELECT ${p} FROM managed_accounts WHERE provider_id=? AND position=?`).get(e,n-1):t.prepare(`SELECT ${p} FROM managed_accounts WHERE provider_id=? AND label_key=?`).get(e,i);return s?_(s):void 0}o(g,"providerRowByReference");function m(t,e){const r=new Map;for(const i of l(t,"SELECT account_id,family,rate_limited_until,last_rate_limited_at FROM managed_account_model_cooldowns WHERE provider_id=? ORDER BY family").all(e)){const n=r.get(i.account_id)??[];n.push({family:i.family,rateLimitedUntil:i.rate_limited_until,lastRateLimitedAt:i.last_rate_limited_at}),r.set(i.account_id,n)}return r}o(m,"providerModelCooldowns");function L(t,e){return m(d(a(t)),e)}o(L,"providerModelCooldownsFor");function b(t,e){return c(a(t),r=>{const i=e(r);return l(r,"UPDATE provider_revision SET revision=revision+1 WHERE singleton=1").run(),i})}o(b,"providerWrite");function y(t){const e=d(a(t));return l(e,"SELECT revision FROM provider_revision WHERE singleton=1").get().revision}o(y,"providerRevision");export{m as providerModelCooldowns,L as providerModelCooldownsFor,y as providerRevision,g as providerRowByReference,S as providerRows,b as providerWrite};

package/dist/core/scoped-state/schema.d.ts

@@ -0,0 +1,6 @@
+import type { DatabaseSync } from 'node:sqlite';
+export declare const SCOPED_SCHEMA_VERSION = 5;
+export declare const PROVIDER_SCHEMA_VERSION = 1;
+/** Adds the model-cooldown table to a provider store that predates it; a no-op (no write) once present. */
+export declare function ensureProviderModelCooldowns(db: DatabaseSync): void;
+export declare function createScopedSchema(db: DatabaseSync, kind: 'user' | 'project' | 'provider'): void;

package/dist/core/scoped-state/schema.js

@@ -0,0 +1,16 @@
+var t=Object.defineProperty;var T=(e,E)=>t(e,"name",{value:E,configurable:!0});import{prepared as o}from"../sqlite-statements.js";const a=5,_=1,n=`
+CREATE TABLE scope_owners (owner_key TEXT PRIMARY KEY, kind TEXT NOT NULL CHECK(kind IN ('user','profile','project')), root TEXT NOT NULL UNIQUE, profile_id TEXT UNIQUE);
+CREATE TABLE profiles (id TEXT PRIMARY KEY, name TEXT NOT NULL, created_at TEXT NOT NULL, last_used_at TEXT, paused_at TEXT, default_kind TEXT, grantee TEXT, metadata_json TEXT NOT NULL CHECK(json_valid(metadata_json)), delivery_limits_json TEXT NOT NULL DEFAULT '{}' CHECK(json_valid(delivery_limits_json)));
+CREATE TABLE profile_projects (profile_id TEXT NOT NULL REFERENCES profiles(id) ON DELETE CASCADE, path TEXT NOT NULL, position INTEGER NOT NULL, PRIMARY KEY(profile_id,path), UNIQUE(profile_id,position));
+-- Pre-canvas per-project memory caps awaiting the canvas import, which turns them into delivery_limits and deletes the rows.
+CREATE TABLE legacy_project_caps (profile_id TEXT NOT NULL, path TEXT NOT NULL, memory TEXT NOT NULL CHECK(memory IN ('none','name','preview')), PRIMARY KEY(profile_id,path));
+CREATE TABLE profile_defaults (directory TEXT PRIMARY KEY, profile_id TEXT NOT NULL REFERENCES profiles(id) ON DELETE CASCADE);
+CREATE TABLE scope_settings (owner_key TEXT PRIMARY KEY REFERENCES scope_owners(owner_key), raw_json TEXT NOT NULL CHECK(json_valid(raw_json)));
+CREATE TABLE scope_bookkeeping (owner_key TEXT PRIMARY KEY REFERENCES scope_owners(owner_key), last_self_check TEXT, active_canvas TEXT);
+CREATE TABLE scope_marketplaces (owner_key TEXT NOT NULL REFERENCES scope_owners(owner_key), name TEXT NOT NULL, last_updated TEXT, PRIMARY KEY(owner_key,name));
+CREATE TABLE scope_plugins (owner_key TEXT NOT NULL REFERENCES scope_owners(owner_key), name TEXT NOT NULL, last_updated TEXT, etag TEXT, checked_at TEXT, PRIMARY KEY(owner_key,name));`,r="CREATE TABLE IF NOT EXISTS managed_account_model_cooldowns (provider_id TEXT NOT NULL, account_id TEXT NOT NULL, family TEXT NOT NULL, rate_limited_until INTEGER NOT NULL, last_rate_limited_at INTEGER NOT NULL, PRIMARY KEY(provider_id,account_id,family));";function l(e){e.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name='managed_account_model_cooldowns'").get()===void 0&&e.exec(r)}T(l,"ensureProviderModelCooldowns");const N=`
+CREATE TABLE managed_accounts (provider_id TEXT NOT NULL, id TEXT NOT NULL, label TEXT NOT NULL, label_key TEXT NOT NULL, position INTEGER NOT NULL, last_attempt_at INTEGER NOT NULL, last_rate_limited_at INTEGER NOT NULL, rate_limited_until INTEGER NOT NULL, auth_failure TEXT CHECK(auth_failure IS NULL OR auth_failure='invalid_grant'), PRIMARY KEY(provider_id,id), UNIQUE(provider_id,label_key));
+CREATE INDEX managed_accounts_order ON managed_accounts(provider_id,position);
+CREATE TABLE rotation_settings (singleton INTEGER PRIMARY KEY CHECK(singleton=1), default_fallback_strength TEXT, revert_when_available INTEGER CHECK(revert_when_available IN (0,1)));
+CREATE TABLE provider_revision (singleton INTEGER PRIMARY KEY CHECK(singleton=1), revision INTEGER NOT NULL);
+${r}`;function R(e,E){if(e.exec(E==="provider"?N:n),E!=="provider"){const i=E==="user"?"user":"project";o(e,"INSERT INTO scope_owners(owner_key, kind, root, profile_id) VALUES (?, ?, ?, NULL)").run(i,E,"")}else o(e,"INSERT INTO provider_revision(singleton, revision) VALUES (1, 0)").run();e.exec(`PRAGMA user_version = ${E==="provider"?_:a}`)}T(R,"createScopedSchema");export{_ as PROVIDER_SCHEMA_VERSION,a as SCOPED_SCHEMA_VERSION,R as createScopedSchema,l as ensureProviderModelCooldowns};

package/dist/core/scoped-state/settings.d.ts

@@ -0,0 +1,28 @@
+import type { ScopeState } from '../../types.js';
+import type { ScopedStore } from './paths.js';
+export type SettingsOwner = {
+    store: ScopedStore;
+    key: string;
+    kind: 'user' | 'profile' | 'project';
+    root: string;
+    profileId?: string;
+};
+export declare class SettingsRevisionConflictError extends Error {
+    constructor();
+}
+export declare function readRawSettingsWithRevision(owner: SettingsOwner): {
+    settings: Record<string, unknown> | null;
+    revision: string;
+};
+export declare function readRawSettings(owner: SettingsOwner): Record<string, unknown> | null;
+export declare function replaceRawSettings(owner: SettingsOwner, next: Record<string, unknown>, ifRevision: string, validate: (settings: Record<string, unknown>) => void): {
+    revision: string;
+    changed: boolean;
+};
+export declare function writeRawSettings(owner: SettingsOwner, raw: Record<string, unknown>): void;
+export declare function mutateRawSettings<T>(owner: SettingsOwner, mutate: (current: Record<string, unknown>) => {
+    value: T;
+    next: Record<string, unknown>;
+}): T;
+export declare function readBookkeeping(owner: SettingsOwner): ScopeState;
+export declare function writeBookkeeping(owner: SettingsOwner, state: ScopeState): void;

package/dist/core/scoped-state/settings.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var r=(e,t)=>d(e,"name",{value:t,configurable:!0});import{prepared as a}from"../sqlite-statements.js";import{createHash as E}from"node:crypto";import{openScopedStore as p,withScopedWrite as _}from"./db.js";function l(e,t){const n=a(e,"SELECT kind, root, profile_id FROM scope_owners WHERE owner_key = ?").get(t.key);if(!n)throw new Error(`scoped SQL owner is missing: ${t.key}`);if(n.kind!==t.kind||n.root!==t.root||(t.profileId??null)!==n.profile_id)throw new Error(`scoped SQL owner does not match its root: ${t.key}`)}r(l,"ensureOwner");function u(e){return e===void 0?"absent":E("sha256").update(e.raw_json).digest("hex")}r(u,"revisionFor");function k(e,t){return a(e,"SELECT raw_json FROM scope_settings WHERE owner_key = ?").get(t.key)}r(k,"readRawSettingsRow");class g extends Error{static{r(this,"SettingsRevisionConflictError")}constructor(){super("settings changed since the supplied revision"),this.name="SettingsRevisionConflictError"}}function f(e){const t=p(e.store);l(t,e);const n=k(t,e);return{revision:u(n),settings:n===void 0?null:JSON.parse(n.raw_json)}}r(f,"readRawSettingsWithRevision");function T(e){return f(e).settings}r(T,"readRawSettings");function h(e,t,n,i){return _(e.store,o=>{l(o,e);const s=k(o,e);if(n!==u(s))throw new g;i(t);const c=JSON.stringify(t);return s?.raw_json===c?{revision:u(s),changed:!1}:(a(o,"INSERT INTO scope_settings(owner_key, raw_json) VALUES (?, ?) ON CONFLICT(owner_key) DO UPDATE SET raw_json=excluded.raw_json").run(e.key,c),{revision:u({raw_json:c}),changed:!0})})}r(h,"replaceRawSettings");function m(e,t){_(e.store,n=>{l(n,e),a(n,"INSERT INTO scope_settings(owner_key, raw_json) VALUES (?, ?) ON CONFLICT(owner_key) DO UPDATE SET raw_json=excluded.raw_json").run(e.key,JSON.stringify(t))})}r(m,"writeRawSettings");function v(e,t){return _(e.store,n=>{l(n,e);const i=a(n,"SELECT raw_json FROM scope_settings WHERE owner_key = ?").get(e.key),o=t(i?JSON.parse(i.raw_json):{});return a(n,"INSERT INTO scope_settings(owner_key, raw_json) VALUES (?, ?) ON CONFLICT(owner_key) DO UPDATE SET raw_json=excluded.raw_json").run(e.key,JSON.stringify(o.next)),o.value})}r(v,"mutateRawSettings");function N(e){const t=p(e.store);l(t,e);const n=a(t,"SELECT last_self_check, active_canvas FROM scope_bookkeeping WHERE owner_key = ?").get(e.key),i=Object.fromEntries(a(t,"SELECT name, last_updated FROM scope_marketplaces WHERE owner_key = ?").all(e.key).map(s=>[s.name,s.last_updated===null?{}:{last_updated:s.last_updated}])),o=Object.fromEntries(a(t,"SELECT name, last_updated, etag, checked_at FROM scope_plugins WHERE owner_key = ?").all(e.key).map(s=>[s.name,{...s.last_updated===null?{}:{last_updated:s.last_updated},...s.etag===null?{}:{etag:s.etag},...s.checked_at===null?{}:{checked_at:s.checked_at}}]));return{marketplaces:i,plugins:o,...n?.last_self_check===null||n===void 0?{}:{last_self_check:n.last_self_check},activeCanvas:n?.active_canvas??null}}r(N,"readBookkeeping");function w(e,t){_(e.store,n=>{l(n,e),a(n,"INSERT INTO scope_bookkeeping(owner_key, last_self_check, active_canvas) VALUES (?, ?, ?) ON CONFLICT(owner_key) DO UPDATE SET last_self_check=excluded.last_self_check, active_canvas=excluded.active_canvas").run(e.key,t.last_self_check??null,t.activeCanvas??null),a(n,"DELETE FROM scope_marketplaces WHERE owner_key = ?").run(e.key),a(n,"DELETE FROM scope_plugins WHERE owner_key = ?").run(e.key);const i=a(n,"INSERT INTO scope_marketplaces(owner_key, name, last_updated) VALUES (?, ?, ?)");for(const[s,c]of Object.entries(t.marketplaces))i.run(e.key,s,c.last_updated??null);const o=a(n,"INSERT INTO scope_plugins(owner_key, name, last_updated, etag, checked_at) VALUES (?, ?, ?, ?, ?)");for(const[s,c]of Object.entries(t.plugins))o.run(e.key,s,c.last_updated??null,c.etag??null,c.checked_at??null)})}r(w,"writeBookkeeping");export{g as SettingsRevisionConflictError,v as mutateRawSettings,N as readBookkeeping,T as readRawSettings,f as readRawSettingsWithRevision,h as replaceRawSettings,w as writeBookkeeping,m as writeRawSettings};

package/dist/core/scopes.d.ts

@@ -0,0 +1,17 @@
+import { scopeAllowed } from '../shared/env.js';
+export { scopeAllowed };
+/** The scopes an unrestricted local terminal run presents to the document substrate. */
+export declare const SCOPE_VOCABULARY: readonly ["crtr:llm", "crtr:act", "crtr:schedule", "crtr:memory:rw:user", "crtr:memory:manage:user", "crtr:files:rw:user:."];
+/** Reject unknown scope strings before they can silently change an allow-list. */
+export declare function validateScopes(value: unknown): string[];
+export declare function assertScope(meta: {
+    node_id: string;
+    scopes?: readonly string[] | null;
+}, scope: string): void;
+/** `holder` names who lacks the scope in prose — `node <id>` for a node's own
+ *  allow-list, `the bearer token` for a scoped API token's ceiling. */
+export declare class ScopeDeniedError extends Error {
+    readonly holder: string;
+    readonly scope: string;
+    constructor(holder: string, scope: string);
+}

package/dist/core/scopes.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var o=(e,r)=>c(e,"name",{value:r,configurable:!0});import{parseScope as i}from"@north-light/identity";import{scopeAllowed as t}from"../shared/env.js";import{InputError as n}from"./io.js";const w=["crtr:llm","crtr:act","crtr:schedule","crtr:memory:rw:user","crtr:memory:manage:user","crtr:files:rw:user:."];function h(e){if(!Array.isArray(e))throw new n({error:"unknown_scope",message:"scopes must be a list",received:e,field:"scopes",next:"Pass identity scope strings."});for(const r of e)try{if(typeof r!="string")throw new TypeError("scope is not a string");i(r)}catch{throw new n({error:"unknown_scope",message:`unknown scope: ${String(r)}`,received:r,field:"scopes",next:"Pass identity scope strings."})}return[...e]}o(h,"validateScopes");function u(e,r){if(!t(e.scopes,r))throw new p(`node ${e.node_id}`,r)}o(u,"assertScope");class p extends Error{static{o(this,"ScopeDeniedError")}holder;scope;constructor(r,s){super(`${r} does not hold the ${s} scope`),this.holder=r,this.scope=s,this.name="ScopeDeniedError"}}export{w as SCOPE_VOCABULARY,p as ScopeDeniedError,u as assertScope,t as scopeAllowed,h as validateScopes};

package/dist/core/secrets.d.ts

@@ -0,0 +1,40 @@
+import type { Scope } from '../types.js';
+/** The 0600 secrets store: raw relay/bearer tokens for `remoteCanvas.targets`,
+ *  kept OUT of `config.json` (which is not permission-hardened and is treated
+ *  as shareable/inspectable) and never logged. `crtr canvas config add
+ *  --relay-token -` is the ONLY accepted form — reads the raw token from
+ *  stdin; any other value is rejected with a generic error (never echoing
+ *  what was received). Keyed by `RemoteCanvasTarget.relayTokenRef`, never by
+ *  the target name directly, so a rename doesn't orphan the secret. */
+export interface SecretsStore {
+    relayTokens: Record<string, string>;
+    apiToken?: string;
+    scopedApiTokens?: ScopedApiToken[];
+}
+/** A bearer token minted by `crtr sys connect --scopes` whose `scopes` list is
+ *  the ceiling for every scope-gated daemon operation the holder performs. The
+ *  owner token (`apiToken`) has no ceiling. */
+export interface ScopedApiToken {
+    token: string;
+    grantee: string;
+    scopes: string[];
+    created: string;
+}
+export declare function readSecrets(scope: Scope): SecretsStore;
+/** Writes secrets.json directly (never via `fs-utils.writeJson`, which has no
+ *  mode control) so the file is created 0600 from the first byte, then
+ *  `chmodSync`s belt-and-suspenders in case the file pre-existed with looser
+ *  permissions (e.g. hand-copied from another machine). */
+export declare function writeSecrets(scope: Scope, store: SecretsStore): void;
+export declare function getRelayToken(ref: string, scope: Scope): string | undefined;
+export declare function setRelayToken(ref: string, token: string, scope: Scope): void;
+export declare function deleteRelayToken(ref: string, scope: Scope): void;
+export declare function getApiToken(scope: Scope): string | undefined;
+export declare function setApiToken(token: string, scope: Scope): void;
+export declare function listScopedApiTokens(scope: Scope): ScopedApiToken[];
+export declare function addScopedApiToken(entry: ScopedApiToken, scope: Scope): void;
+/** A short, non-reversible display fingerprint of a raw token — safe to print
+ *  in `canvas config list`/`show` output. NEVER derive this from anything
+ *  that could round-trip back to the token, and never log/return the raw
+ *  token itself alongside it. */
+export declare function fingerprint(token: string): string;

package/dist/core/secrets.js

@@ -0,0 +1,2 @@
+var f=Object.defineProperty;var t=(e,o)=>f(e,"name",{value:o,configurable:!0});import{createHash as u}from"node:crypto";import{existsSync as y,readFileSync as d,writeFileSync as l,chmodSync as A}from"node:fs";import{join as m}from"node:path";import{scopeRoot as S,requireScopeRoot as g,userScopeRoot as a}from"./scope.js";import{secretsDir as k}from"./layout.js";import{ensureDir as x}from"./fs-utils.js";const h="secrets.json";function T(e){return m(e===a()?k():e,h)}t(T,"secretsPathFor");function s(e){const o=S(e);if(!o)return{relayTokens:{}};const n=T(o);if(!y(n))return{relayTokens:{}};try{const r=JSON.parse(d(n,"utf8")),c=Array.isArray(r.scopedApiTokens)?r.scopedApiTokens.filter(i=>typeof i?.token=="string"&&i.token!==""&&typeof i.grantee=="string"&&/^app:[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(i.grantee)&&Array.isArray(i.scopes)&&typeof i.created=="string"):[];return{relayTokens:r.relayTokens??{},...typeof r.apiToken=="string"&&r.apiToken!==""?{apiToken:r.apiToken}:{},...c.length>0?{scopedApiTokens:c}:{}}}catch{return{relayTokens:{}}}}t(s,"readSecrets");function p(e,o){const n=g(e),r=T(n);x(n===a()?k():n),l(r,JSON.stringify(o,null,2)+`
+`,{mode:384}),A(r,384)}t(p,"writeSecrets");function J(e,o){return s(o).relayTokens[e]}t(J,"getRelayToken");function N(e,o,n){const r=s(n);r.relayTokens[e]=o,p(n,r)}t(N,"setRelayToken");function O(e,o){const n=s(o);delete n.relayTokens[e],p(o,n)}t(O,"deleteRelayToken");function Z(e){return s(e).apiToken}t(Z,"getApiToken");function _(e,o){const n=s(o);n.apiToken=e,p(o,n)}t(_,"setApiToken");function q(e){return s(e).scopedApiTokens??[]}t(q,"listScopedApiTokens");function C(e,o){const n=s(o);n.scopedApiTokens=[...n.scopedApiTokens??[],e],p(o,n)}t(C,"addScopedApiToken");function H(e){return u("sha256").update(e).digest("hex").slice(0,12)}t(H,"fingerprint");export{C as addScopedApiToken,O as deleteRelayToken,H as fingerprint,Z as getApiToken,J as getRelayToken,q as listScopedApiTokens,s as readSecrets,_ as setApiToken,N as setRelayToken,p as writeSecrets};

package/dist/core/self-update.d.ts

@@ -0,0 +1,27 @@
+export declare const SELF_UPDATE_SCRIPT: string;
+export declare function currentVersion(): string;
+export declare function selfUpdate(): void;
+export interface SelfCheckResult {
+    current: string;
+    latest: string;
+    /** The npm package an update installs from: this install's own name, or
+     *  `@north-light/cli` for an install of the deprecated `@crouter/cli`. */
+    package: string;
+    /** True when an update moves this install to a different package. */
+    migrating: boolean;
+}
+/** Check whether a newer crtr version is available on npm. The package to ask
+ *  comes from scripts/self-update.mjs, so a check and an update always agree.
+ *  Returns null when npm is unreachable. */
+export declare function selfCheck(): SelfCheckResult | null;
+export interface ContentUpdateEntry {
+    name: string;
+    kind: 'marketplace' | 'plugin';
+    current: string | null;
+    latest: string | null;
+    up_to_date: boolean;
+    unreachable: boolean;
+}
+/** Check whether any marketplace/plugin has updates available.
+ *  Returns per-item status without applying anything. */
+export declare function contentCheck(): ContentUpdateEntry[];

package/dist/core/self-update.js

@@ -0,0 +1 @@
+var k=Object.defineProperty;var s=(t,r)=>k(t,"name",{value:r,configurable:!0});import{spawnSync as c}from"node:child_process";import{fileURLToPath as _}from"node:url";import{join as l,dirname as x}from"node:path";import{listAllPlugins as P,listAllMarketplaces as R}from"./resolver.js";import{crtrVersion as S}from"../shared/crtr-version.js";import{fetch as i,currentSha as f,remoteSha as p}from"./git.js";import{general as m}from"./errors.js";const b=_(import.meta.url),w=x(b),T=l(w,"..",".."),h=l(T,"scripts","self-update.mjs");function y(){return S()}s(y,"currentVersion");function V(){const t=c(process.execPath,[h],{stdio:"inherit"});if(t.error)throw m(`self-update failed: ${t.error.message}`);if(t.status!==0)throw m(`self-update failed (${t.status??t.signal??"unknown"})`)}s(V,"selfUpdate");function $(){const t=c(process.execPath,[h,"--resolve"],{encoding:"utf8"});if(t.status!==0)return null;try{const r=JSON.parse(t.stdout);return typeof r.latest!="string"?null:{current:y(),latest:r.latest,package:r.package,migrating:r.migrating}}catch{return null}}s($,"selfCheck");function v(){const t=[],r=R();for(const e of r){if(i(e.root,e.ref).status!==0){t.push({name:e.name,kind:"marketplace",current:null,latest:null,up_to_date:!0,unreachable:!0});continue}const a=f(e.root),n=p(e.root,e.ref),o=a!==null&&n!==null?a===n:!0;t.push({name:e.name,kind:"marketplace",current:a,latest:n,up_to_date:o,unreachable:!1})}const d=P();for(const e of d){if(!e.enabled||e.sourceMarketplace)continue;const u="main";if(i(e.root,u).status!==0){t.push({name:e.name,kind:"plugin",current:null,latest:null,up_to_date:!0,unreachable:!0});continue}const n=f(e.root),o=p(e.root,u),g=n!==null&&o!==null?n===o:!0;t.push({name:e.name,kind:"plugin",current:n,latest:o,up_to_date:g,unreachable:!1})}return t}s(v,"contentCheck");export{h as SELF_UPDATE_SCRIPT,v as contentCheck,y as currentVersion,$ as selfCheck,V as selfUpdate};

package/dist/core/session-model/session-state.d.ts

@@ -0,0 +1,53 @@
+import type { BrokerToClient, ClientRole, RpcExtensionUIRequest, RpcSessionState, WelcomeFrame } from '../runtime/broker-protocol.js';
+/** A retained `ctx.ui.setWidget` entry. */
+export interface DisplayWidget {
+    lines: string[];
+    placement: 'aboveEditor' | 'belowEditor';
+}
+/** The broker-owned display levels (`ctx.ui.setStatus/setWidget/setTitle`),
+ *  insertion-ordered per key exactly as the broker retains them. */
+export interface DisplayState {
+    statuses: Record<string, string>;
+    widgets: Record<string, DisplayWidget>;
+    title: string | undefined;
+}
+export interface SessionState {
+    /** This viewer's fixed role, stated by the broker in `welcome`. `controller`
+     *  means writable and `observer` means read-only; the broker never reassigns
+     *  it, so nothing after `welcome` can change this field. */
+    role: ClientRole;
+    /** The broker process's pi agent dir, from `welcome` — lets a viewer point an
+     *  AuthStorage/ModelRegistry at the SAME auth.json. */
+    agentDir: string | undefined;
+    /** pi's own `get_state` payload. `undefined` until the first welcome. */
+    engine: RpcSessionState | undefined;
+    /** Live context occupancy in prompt tokens: seeded from the snapshot's
+     *  contextUsage, then tracked off each assistant `message_end`. */
+    contextTokens: number | undefined;
+    /** Queued steering + follow-up messages: seeded from `welcome.snapshot.queued`
+     *  and tracked off `queue_update`. Every welcome REPLACES this — the attaching
+     *  broker's own queue is the whole truth, so a dead broker's rows never survive
+     *  and a client attaching mid-queue still sees what is waiting. */
+    queued: Array<{
+        text: string;
+    }>;
+    display: DisplayState;
+    /** The blocking dialog awaiting an answer, or null. Only a writable client is
+     *  ever sent one, and every writable client is sent the SAME one — the first
+     *  answer wins and the broker dismisses the rest by id.
+     *  `welcome.pending_dialog` carries one in flight at attach time, and
+     *  a welcome is a COMPLETE catch-up, so a welcome naming none clears it.
+     *  (The terminal viewer does not read this field: its overlay is owned by
+     *  `InputController`, which holds a live TUI handle rather than data. The field
+     *  remains session state because it is derived solely from broker frames.) */
+    dialog: RpcExtensionUIRequest | null;
+}
+export declare function initialSessionState(role?: ClientRole): SessionState;
+/** The whole session state a `welcome` determines, in ONE step. This is why D1
+ *  had to land first: before the broker carried its retained display levels in
+ *  `snapshot.display`, catch-up was `welcome` plus N replayed edges and this
+ *  function could not be total. */
+export declare function applySnapshot(frame: WelcomeFrame): SessionState;
+/** Fold one broker frame into the session state. Pure and total: a frame that
+ *  carries no session state returns `state` UNCHANGED (same reference). */
+export declare function reduce(state: SessionState, frame: BrokerToClient): SessionState;

package/dist/core/session-model/session-state.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var s=(e,n)=>r(e,"name",{value:n,configurable:!0});const o={statuses:{},widgets:{},title:void 0};function h(e="observer"){return{role:e,agentDir:void 0,engine:void 0,contextTokens:void 0,queued:[],display:o,dialog:null}}s(h,"initialSessionState");function g(e){const n=e.snapshot,t=n.display??o,i=n.stats.contextUsage;return{role:e.role,agentDir:e.agentDir,engine:n.state,contextTokens:i?.tokens??void 0,queued:a(n),display:{statuses:{...t.statuses},widgets:Object.fromEntries(Object.entries(t.widgets).map(([u,l])=>[u,{lines:[...l.lines],placement:l.placement}])),title:t.title},dialog:e.pending_dialog??null}}s(g,"applySnapshot");function w(e,n){switch(n.type){case"welcome":return g(n);case"model_changed":return d(e,{model:n.model});case"extension_ui_request":switch(n.method){case"setStatus":{const t=e.display.statuses[n.statusKey];if(n.statusText===void 0?t===void 0:t===n.statusText)return e;const i={...e.display.statuses};return delete i[n.statusKey],n.statusText!==void 0&&(i[n.statusKey]=n.statusText),{...e,display:{...e.display,statuses:i}}}case"setWidget":{const t=n.widgetLines===void 0?void 0:{lines:[...n.widgetLines],placement:n.widgetPlacement??"aboveEditor"};if(y(e.display.widgets[n.widgetKey],t))return e;const i={...e.display.widgets};return delete i[n.widgetKey],t!==void 0&&(i[n.widgetKey]=t),{...e,display:{...e.display,widgets:i}}}case"setTitle":return e.display.title===n.title?e:{...e,display:{...e.display,title:n.title}};case"notify":return e;default:return{...e,dialog:n}}case"extension_ui_dismiss":return e.dialog!==null&&e.dialog.id===n.id?{...e,dialog:null}:e;case"message_end":return n.message.role!=="assistant"?e:p(e,n.message.usage.input+n.message.usage.cacheRead+n.message.usage.cacheWrite);case"agent_start":return d(e,{isStreaming:!0});case"agent_end":case"agent_settled":return d(e,{isStreaming:!1});case"session_info_changed":return d(e,{sessionName:n.name});case"thinking_level_changed":return d(e,{thinkingLevel:n.level});case"queue_update":{const t=[...n.steering,...n.followUp].map(u=>({text:u}));return{...d(e,{pendingMessageCount:t.length}),queued:t}}default:return e}}s(w,"reduce");function a(e){const n=e.queued;if(typeof n!="object"||n===null)return[];const{steering:t,followUp:i}=n;return[...c(t),...c(i)].map(u=>({text:u}))}s(a,"snapshotQueued");function c(e){return Array.isArray(e)?e.filter(n=>typeof n=="string"):[]}s(c,"texts");function d(e,n){const t=e.engine;if(t===void 0)return e;let i=!1;for(const[u,l]of Object.entries(n))if(t[u]!==l){i=!0;break}return i?{...e,engine:{...t,...n}}:e}s(d,"patchEngine");function p(e,n){return e.contextTokens===n?e:{...e,contextTokens:n}}s(p,"patchContextTokens");function y(e,n){return e===void 0||n===void 0?e===n:e.placement===n.placement&&e.lines.length===n.lines.length&&e.lines.every((t,i)=>t===n.lines[i])}s(y,"widgetEqual");export{g as applySnapshot,h as initialSessionState,w as reduce};

package/dist/core/shell-segments.d.ts

@@ -0,0 +1,42 @@
+/** One shell word. `opaque` marks a token whose text came from inside quotes:
+ *  it is data, so it must never be treated as an executable or a matched
+ *  command word. */
+export type CommandToken = {
+    text: string;
+    opaque: boolean;
+};
+/** One shell segment: the raw text as the author wrote it, its leading
+ *  `VAR=value` assignments, and the remaining words — so `tokens[0]` is the
+ *  executable. An assignment-only segment (`export`-less `FOO=bar`) has
+ *  assignments and no tokens; the distinction matters, because a leading
+ *  assignment applies ONLY to the command in its own segment.
+ *
+ *  `background` marks a segment ended by a single `&`. It runs in a subshell,
+ *  so nothing it assigns or `cd`s reaches the commands after it. */
+export type CommandSegment = {
+    text: string;
+    assignments: string[];
+    tokens: CommandToken[];
+    background: boolean;
+};
+/** One raw segment and whether a single `&` — not `&&` — ended it. */
+export type RawSegment = {
+    text: string;
+    background: boolean;
+};
+/** Split a command into shell segments on unquoted `;`, newline, `&&`, `||`,
+ *  `|`, and a single `&`. Subshell parentheses and backticks are left inside
+ *  their segment. Heredoc bodies are a separate pre-read concern (see
+ *  `stripHeredocs`). */
+export declare function splitCommandSegments(command: string): RawSegment[];
+/** Tokenize one segment into shell words, marking quoted spans opaque. */
+export declare function tokenizeCommandSegment(segment: string): CommandToken[];
+/** Every non-empty command segment, paired with its raw text. */
+export declare function commandSegments(command: string): CommandSegment[];
+/** Remove heredoc BODIES (the stdin data between `<<DELIM` and its closing
+ *  `DELIM` line) from a command before it is read. The opening line is kept —
+ *  `crtr push final <<'EOF'` is still a real `push final` invocation — but the
+ *  body lines, which are data fed on stdin and never executed as commands, are
+ *  dropped. Without this, a doc-writing command whose body merely MENTIONS a
+ *  matched invocation would have its whole call held or refused. */
+export declare function stripHeredocs(command: string): string;

package/dist/core/shell-segments.js

@@ -0,0 +1,4 @@
+var h=Object.defineProperty;var f=(u,i)=>h(u,"name",{value:i,configurable:!0});function p(u){const i=[];let s="",t=null,n=!1;const l=f((o=!1)=>{i.push({text:s,background:o}),s=""},"finish");for(let o=0;o<u.length;o+=1){const e=u[o];if(n){s+=e,n=!1;continue}if(e==="\\"&&t!=="'"){s+=e,n=!0;continue}if(t!==null){s+=e,e===t&&(t=null);continue}if(e==="'"||e==='"'){s+=e,t=e;continue}if(e===`
+`||e===";"){l();continue}if((e==="&"||e==="|")&&u[o+1]===e){l(),o+=1;continue}if(e==="|"){l();continue}if(e==="&"){l(!0);continue}s+=e}return l(),i}f(p,"splitCommandSegments");function m(u){const i=[];let s="",t=!1,n=!1,l=null,o=!1;const e=f(()=>{n&&i.push({text:s,opaque:t}),s="",t=!1,n=!1},"finish");for(let r=0;r<u.length;r+=1){const c=u[r];if(o){s+=c,n=!0,o=!1;continue}if(c==="\\"&&l!=="'"){o=!0,n=!0;continue}if(l!==null){n=!0,c===l?l=null:s+=c;continue}if(c==="'"||c==='"'){l=c,t=!0,n=!0;continue}if(/\s/.test(c)){e();continue}s+=c,n=!0}return o&&(s+="\\"),e(),i}f(m,"tokenizeCommandSegment");function d(u){return p(u).map(({text:i,background:s})=>{const t=m(i);let n=0;for(;n<t.length&&/^[A-Za-z_][A-Za-z0-9_]*=/.test(t[n].text);)n+=1;return{text:i.trim(),assignments:t.slice(0,n).map(l=>l.text),tokens:t.slice(n),background:s}}).filter(i=>i.assignments.length>0||i.tokens.length>0)}f(d,"commandSegments");const a=/<<(-?)\s*(["']?)([A-Za-z_][A-Za-z0-9_]*)\2/g;function x(u){const i=u.split(`
+`),s=[];let t=0;for(;t<i.length;){const n=i[t];s.push(n),t+=1;const l=[];a.lastIndex=0;let o;for(;(o=a.exec(n))!==null;)l.push({name:o[3],dash:o[1]==="-"});for(const e of l)for(;t<i.length;){const r=e.dash?i[t].replace(/^\t+/,""):i[t];if(t+=1,r===e.name)break}}return s.join(`
+`)}f(x,"stripHeredocs");export{d as commandSegments,p as splitCommandSegments,x as stripHeredocs,m as tokenizeCommandSegment};

package/dist/core/spaces/cache-env.d.ts

@@ -0,0 +1,2 @@
+/** Package-manager caches and Python settings for a sandboxed run. Downloads land in the app's purgeable `cache/` folder, which the cache pass empties when the app nears its disk quota; the guest's own Python is used so no run downloads an interpreter. */
+export declare function sandboxCacheEnv(app: string): Record<string, string>;

package/dist/core/spaces/cache-env.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var c=(n,_)=>p(n,"name",{value:_,configurable:!0});import{appSpace as e}from"../layout.js";function r(n){const _=e(n).cache;return{XDG_CACHE_HOME:_,npm_config_cache:`${_}/npm`,UV_CACHE_DIR:`${_}/uv`,PIP_CACHE_DIR:`${_}/pip`,PLAYWRIGHT_BROWSERS_PATH:`${_}/playwright`,UV_PYTHON:"/usr/bin/python3",UV_PYTHON_DOWNLOADS:"never"}}c(r,"sandboxCacheEnv");export{r as sandboxCacheEnv};

package/dist/core/spaces/file-root.d.ts

@@ -0,0 +1,23 @@
+export declare function contains(parent: string, path: string): boolean;
+export interface FileCaller {
+    app: string;
+    resolved: readonly string[];
+    launched: readonly string[] | null;
+    /** Run confinement for a node caller (Silas, 2026-09-30): `isolated` when the caller's
+     *  run is isolated; `reaches` answers whether a node folder of its own app is visible. */
+    run?: {
+        isolated: boolean;
+        reaches: (nodeId: string) => boolean;
+    };
+}
+/** The directory a caller's permission names for `path`: the daemon opens
+ *  `path` beneath it. `missing` is the scope the caller lacks (null when no
+ *  scope names the path). The person (`null`) and a Mac terminal node keep a
+ *  Mac's whole filesystem; on Linux the person reaches /user and /apps. */
+export declare function fileRoot(caller: FileCaller | null, target: string, access: 'read' | 'rw'): {
+    root: string;
+} | {
+    missing: string | null;
+} | {
+    hidden: true;
+};

package/dist/core/spaces/file-root.js

@@ -0,0 +1 @@
+var S=Object.defineProperty;var u=(r,p)=>S(r,"name",{value:p,configurable:!0});import{covers as _}from"@north-light/identity";import{join as v,relative as l,resolve as b,sep as m}from"node:path";import{appSpace as F,appsRoot as x,userFilesRoot as M,userRoot as k}from"../layout.js";function a(r,p){const o=l(r,p);return o===""||o!==".."&&!o.startsWith(`..${m}`)&&!o.startsWith(m)}u(a,"contains");function D(r,p,o){const e=b(p);if(r===null||process.platform!=="linux"&&r.app==="app:terminal"){if(process.platform!=="linux")return{root:"/"};const t=[k(),x()].find(n=>a(n,e));return t?{root:t}:{missing:null}}const f=F(r.app);if(r.run&&a(f.root,e)){const[t,n]=l(f.root,e).split(m);if(t==="nodes"&&n)return r.run.reaches(n)?{root:v(f.nodes,n)}:{hidden:!0};if(r.run.isolated)return{hidden:!0}}for(const t of[f.files,f.nodes])if(a(t,e))return{root:t};const w=u(t=>r.resolved.some(n=>_(n,t))&&(r.launched===null||r.launched.some(n=>_(n,t))),"held"),R=u((t,n)=>{const $=l(n,e)||".",A=u(d=>d.flatMap(c=>{const s=/^crtr:files:(read|rw):(user|app:[A-Za-z0-9_-]{1,64}):(.+)$/.exec(c);return!s||s[2]!==t||o==="rw"&&s[1]!=="rw"?[]:s[3]==="."||s[3]===$||$.startsWith(`${s[3]}/`)?[v(n,s[3]==="."?"":s[3])]:[]}),"dirs"),g=A(r.resolved),Z=r.launched===null?g:A(r.launched);return!g.length||!Z.length?{missing:`crtr:files:${o}:${t}:${$}`}:{root:[...g,...Z].reduce((d,c)=>c.length>d.length?c:d)}},"files");if(a(M(),e))return R("user",M());const[i,j,W,z]=l(x(),e).split(m);if(!a(x(),e)||!i||!/^[A-Za-z0-9_-]{1,64}$/.test(i))return{missing:null};const h=F(`app:${i}`);return j==="files"?R(`app:${i}`,h.files):j!=="nodes"||o!=="read"?{missing:null}:w(`crtr:objects:read:app:${i}`)?{root:h.nodes}:W&&z==="attachments"&&w(`crtr:conversations:read:app:${i}`)?{root:v(h.nodes,W,z)}:{missing:`crtr:objects:read:app:${i}`}}u(D,"fileRoot");export{a as contains,D as fileRoot};

package/dist/core/spaces/mounts.d.ts

@@ -0,0 +1,34 @@
+import { type RunPermissions } from './permissions.js';
+import type { LaunchSpec } from '../../launcher/spec.js';
+export interface LaunchNode {
+    nodeId: string;
+    app: string;
+    sub: string;
+    grantId: string | null;
+    scopes: string[] | null;
+    command: string[];
+    env: Record<string, string>;
+    /** No node exists for this app process (e.g. an unanchored cron). */
+    withoutNode?: boolean;
+    /** A node in an isolated run has no own working-files mount or network. */
+    isolated?: boolean;
+    cwd?: string;
+    /** Hook code alone may be mounted from the installed plugin root, read-only. */
+    pluginRoot?: string;
+    /** Missing granted directories are omitted and reported to the daemon. */
+    auditMissing: (source: string) => void;
+}
+/** The mounts a run's grant adds beyond its own app space (other apps' files
+ *  and nodes, and the person's files). */
+export declare function grantedMounts(permissions: RunPermissions): LaunchSpec['mounts'];
+/** Whether a launched mount came from a grant: it lies under the person's files
+ *  or under another app's space. Own-space and system mounts never do. */
+export declare function isGrantedSource(app: string, source: string): boolean;
+/** A launched mount the current permissions still give: the same or a broader
+ *  granted directory, writable if the mount is. */
+export declare function mountAllowed(mount: LaunchSpec['mounts'][number], allowed: LaunchSpec['mounts']): boolean;
+/** Whether a spec compiled earlier is still within the node's current
+ *  permissions. A launch whose grant generation moved while the launcher was
+ *  starting it checks this before registering the sandbox (runtime spec §15). */
+export declare function launchStillGranted(node: Pick<LaunchNode, 'app' | 'sub' | 'grantId' | 'scopes'>, spec: Pick<LaunchSpec, 'mounts'>): boolean;
+export declare function compileLaunch(node: LaunchNode): LaunchSpec;

package/dist/core/spaces/mounts.js

@@ -0,0 +1 @@
+var y=Object.defineProperty;var l=(t,r)=>y(t,"name",{value:r,configurable:!0});import{lstatSync as D}from"node:fs";import{join as u,relative as f,sep as c}from"node:path";import{appSpace as w,appsRoot as S,runtimeRoot as h,socketDir as d,userFilesRoot as R}from"../layout.js";import{nodeAgentDir as I,nodeRunDir as k}from"../canvas/paths.js";import{uidForApp as A}from"./users.js";import{permissionsForRun as E}from"./permissions.js";function x(t){const r=[];for(const e of t.otherFiles){const i=e.holder==="user"?R():w(e.holder).files;r.push({source:e.path==="."?i:u(i,e.path),writable:e.writable})}for(const e of t.otherNodes)r.push({source:w(e).nodes,writable:!1});return r}l(x,"grantedMounts");function m(t,r){const e=f(t,r);return e===""||e!==".."&&!e.startsWith(`..${c}`)&&!e.startsWith(c)}l(m,"beneath");function M(t,r){return m(R(),r)||m(S(),r)&&!m(w(t).root,r)}l(M,"isGrantedSource");function j(t,r){return r.some(e=>m(e.source,t.source)&&(e.writable||!t.writable))}l(j,"mountAllowed");function z(t,r){try{const e=x(E(t.app,t.sub,t.grantId,t.scopes));return r.mounts.every(i=>!M(t.app,i.source)||j(i,e))}catch{return!1}}l(z,"launchStillGranted");function B(t){const r=w(t.app),e=E(t.app,t.sub,t.grantId,t.scopes);if(t.isolated&&t.withoutNode)throw new Error("isolated launch requires a node");const i=t.isolated?I(t.nodeId,t.app):void 0;if(i&&t.cwd!==void 0&&!m(i,t.cwd))throw new Error("isolated cwd must be inside the node folder");const p=new Map,s=l((o,n,a=!1,W=!1)=>{if(a)try{D(o)}catch(b){if(b.code!=="ENOENT")throw b;W&&t.auditMissing(o);return}p.set(o,n||(p.get(o)??!1))},"add");for(const o of["/usr","/bin","/lib","/lib64","/opt/crouter","/etc/passwd","/etc/group","/etc/resolv.conf","/etc/hosts","/etc/ssl","/etc/ca-certificates"])s(o,!1,!0);t.withoutNode||s(I(t.nodeId,t.app),!0),t.isolated||s(r.home,!0),t.isolated||s(r.files,!0),s(r.cache,!0,!0),t.withoutNode||s(k(t.nodeId),!0),s(u(d(),"api.sock"),!0),s(u(d(),"store.sock"),!0);for(const o of x(e))s(o.source,o.writable,!0,!0);if(t.pluginRoot!==void 0){const o=l(a=>t.pluginRoot===a||f(a,t.pluginRoot)!==".."&&!f(a,t.pluginRoot).startsWith(`..${c}`),"within"),n=u(h(),"plugins");if([...p].some(([a])=>o(a))){if(p.get(t.pluginRoot)===!0)throw new Error("hook root cannot also be writable");s(t.pluginRoot,!1)}else if(o(n)&&t.pluginRoot!==n)s(t.pluginRoot,!1);else if(o("/opt/crouter"))s(t.pluginRoot,!1);else throw new Error("hook root is not readable with this app\u2019s mounts")}const N=t.cwd??i??r.files,g=[...p].sort(([o],[n])=>o.split(c).length-n.split(c).length||o.localeCompare(n)),v=u(h(),"nodes",t.nodeId,"job","broker.log"),F=process.platform!=="linux"?[k(t.nodeId),u(d(),"api.sock"),u(d(),"store.sock")]:[];if(g.some(([o])=>o!==t.pluginRoot&&!F.includes(o)&&(o===h()||!f(h(),o).startsWith("..")&&!f(h(),o).startsWith(c))))throw new Error("runtime records cannot be mounted");return{nodeId:t.nodeId,uid:A(t.app),mounts:g.map(([o,n])=>({source:o,writable:n})),cwd:N,env:t.env,command:t.command,log:v,...t.isolated?{network:"none"}:{}}}l(B,"compileLaunch");export{B as compileLaunch,x as grantedMounts,M as isGrantedSource,z as launchStillGranted,j as mountAllowed};

package/dist/core/spaces/open-beneath.d.ts

@@ -0,0 +1,71 @@
+import { type Dirent, type Stats } from 'node:fs';
+export declare function isBeneathRefusal(error: unknown): boolean;
+/** Whether a beneath read failed because nothing usable is there: absent, not a
+ *  directory, unreadable, or refused (see `BeneathRefusal`). */
+export declare function isAbsentOrRefused(error: unknown): boolean;
+/** An fd for `path` opened with `flags`, resolved beneath `root`. Never creates:
+ *  `openat2` takes no mode, so a file it created would be mode 0000. On Linux
+ *  the fd is a regular file or a directory, except with O_PATH, which opens
+ *  nothing and is only stat'd. */
+export declare function openBeneath(root: string, path: string, flags: number): number;
+export declare function readFileBeneath(root: string, path: string): Buffer;
+/** The file's text, or null when it is missing or refused. */
+export declare function readTextBeneathIfExists(root: string, path: string): string | null;
+export declare function statBeneath(root: string, path: string): Stats;
+export declare function existsBeneath(root: string, path: string): boolean;
+/** Run `fn` with `at(name)`, a pathname that reaches one entry of `dir` after
+ *  `dir` itself resolved beneath `root` (`at()` is the directory). With
+ *  `create`, missing directories on the way are made. */
+export declare function withDirBeneath<T>(root: string, dir: string, fn: (at: (name?: string) => string) => T, create?: boolean): T;
+/** Write `data` to `path` beneath `root`, making missing parents. `atomic`
+ *  writes a temporary file and renames it over the target, so on Linux a
+ *  symlink at the target is replaced, never followed. A Mac writes through a
+ *  symlink to its target, as it always has (a dangling one fails ENOENT). */
+export declare function writeFileBeneath(root: string, path: string, data: Buffer | string, options?: {
+    mode?: number;
+    atomic?: boolean;
+}): void;
+/** Create `path` beneath `root` only if absent (`wx`), making missing parents. */
+export declare function createFileBeneath(root: string, path: string, data: Buffer | string, mode?: number): void;
+export declare function appendFileBeneath(root: string, path: string, data: string): void;
+export declare function unlinkBeneath(root: string, path: string): void;
+export declare function rmdirBeneath(root: string, path: string): void;
+export declare function renameBeneath(root: string, from: string, to: string): void;
+/** link(2) without replacement: fails if `to` exists. */
+export declare function linkBeneath(root: string, from: string, to: string): void;
+export declare function fsyncDirBeneath(root: string, dir: string): void;
+/** Directory entries typed by the directory itself (a symlink stays a symlink). */
+export declare function readdirBeneath(root: string, dir: string): Dirent[];
+/** The first `limit` entries by name, each with its own (unfollowed on Linux)
+ *  stat; an entry removed before its stat is left out. */
+export declare function listBeneath(root: string, dir: string, limit: number): Array<{
+    name: string;
+    stat: Stats;
+}>;
+/** Regular files under `dir` matching `predicate`, never descending a symlink. */
+export declare function walkFilesBeneath(root: string, dir: string, predicate?: (name: string) => boolean, skipDir?: (name: string) => boolean): string[];
+/** Copy the entries of `from` (beneath `fromRoot`) into `to` (beneath
+ *  `toRoot`): directories and regular files with their permission bits, and
+ *  symlinks as links, never followed. Any other entry, any entry removed or
+ *  refused after the directory was read, and any top-level name in `skip`, is
+ *  left out. A name `to` already holds is overwritten, except by a symlink. */
+export declare function copyTreeBeneath(fromRoot: string, from: string, toRoot: string, to: string, skip?: ReadonlySet<string>): void;
+/** Set the mode (and, with `owner`, the owner) of the file or directory at
+ *  `path` beneath `root` through an fd opened without following a symlink. A
+ *  Mac sets them by pathname, as it always has. */
+export declare function setModeBeneath(root: string, path: string, mode: number, owner?: {
+    uid: number;
+    gid: number;
+}): void;
+/** Remove the tree at `path` beneath `root`, never descending a symlink: a
+ *  symlink at `path` or inside it is unlinked itself. Absent is not an error.
+ *  On Linux the walk holds one directory fd per level and opens each child
+ *  relative to its parent, so a deep tree costs one open per entry. */
+export declare function removeTreeBeneath(root: string, path: string): void;
+/** A pathname that connects to the unix socket at `path` beneath `root`
+ *  without following a symlink, and `release`, to call once the connect has
+ *  settled. On Linux it is the magic link of an O_PATH fd held until release. */
+export declare function socketBeneath(root: string, path: string): {
+    path: string;
+    release: () => void;
+};