@north-light/cli 0.0.0 → 0.3.414

package/dist/daemon/api/handlers/nodes.d.ts

@@ -0,0 +1,17 @@
+import { type ModelRegistryLike } from '../../../core/model-routes.js';
+import { type HandlerResult, type RequestContext, type RouteTable } from '../router.js';
+interface NodeHandlerDeps {
+    modelRegistry?: ModelRegistryLike;
+}
+interface CreatePreparation {
+    deadlineAt?: string;
+    beforeBrokerLaunch?: (nodeId: string) => void;
+}
+export { resolveCreateKind } from '../../../core/runtime/launch-target.js';
+export declare function handleCreate(ctx: RequestContext, deps?: NodeHandlerDeps, preparation?: CreatePreparation): Promise<HandlerResult>;
+export declare function handleList(ctx: RequestContext): HandlerResult;
+export declare function handleFork(ctx: RequestContext): Promise<HandlerResult>;
+export declare function handlePromote(ctx: RequestContext, deps?: NodeHandlerDeps): Promise<HandlerResult>;
+export declare function handleYield(ctx: RequestContext, deps?: NodeHandlerDeps): Promise<HandlerResult>;
+export declare function handleConfig(ctx: RequestContext, deps?: NodeHandlerDeps): Promise<HandlerResult>;
+export declare const nodeRoutes: RouteTable;

package/dist/daemon/api/handlers/nodes.js

@@ -0,0 +1 @@
+var be=Object.defineProperty;var a=(e,t)=>be(e,"name",{value:t,configurable:!0});import{prepared as Y}from"../../../core/sqlite-statements.js";import{envProfileId as ve}from"../../../shared/env.js";import{pausedCanvasProfiles as ke}from"../../../core/profiles/manifest.js";import{existsSync as C,realpathSync as Q,statSync as X}from"node:fs";import{isAbsolute as L,resolve as T}from"node:path";import{appendSituationalContext as Se,formatSituationalProse as Oe}from"../../../core/runtime/situational-context.js";import{closeNode as Re}from"../../../core/runtime/close.js";import{reviveNode as Ie}from"../../../core/runtime/revive.js";import{nowIso as M}from"../../../core/fs-utils.js";import{assertLaunchModelRegistered as F,forkNode as $e,resolveForkSource as Ne,spawnChildPrepared as Ae}from"../../../core/runtime/spawn.js";import{forkSourceNode as Ce,newNodeId as Te}from"../../../core/runtime/nodes.js";import{abandonCreateRequest as Z,childrenOf as Ee,completeCreateRequest as q,findCreateRequest as Pe,getNode as k,recordCreateRequestNode as De,reserveCreateRequest as ee,reserveCreateRequestNode as je,listNodes as ne,recordRespawnAttempt as xe,subscribersOf as Le,subscriptionsOf as te,setMessageWait as Me,updateNode as N}from"../../../core/canvas/canvas.js";import{subtreeIds as Fe}from"../../../core/canvas/nav-model.js";import{withCanvasWrite as G}from"../../../core/canvas/db.js";import{nodeObject as Ge}from"../../../core/graph/objects.js";import{recordActedOn as Be}from"../../../core/graph/edges.js";import{publish as Ke}from"../../../core/graph/events.js";import{readerFor as We}from"../reader.js";import{relocateSessionCwd as Ve,unbindSession as ze}from"../../../core/canvas/sessions.js";import{ticketCountsForNodes as Je}from"../../../core/canvas/attention.js";import{isSafeNodeId as Ue}from"../../../core/canvas/paths.js";import{contextDir as oe,nodeAgentDir as re}from"../../../core/canvas/node-agent-paths.js";import{existsBeneath as He,isAbsentOrRefused as Ye,isBeneathRefusal as Qe,readdirBeneath as Xe}from"../../../core/spaces/open-beneath.js";import{readNodeMessagesPage as Ze,readNodeSession as qe,readNodeSnapshot as en,transcriptMarkdown as nn}from"../../../core/runtime/node-read.js";import{assembleNodeSubject as tn}from"../../../core/substrate/subject.js";import{reviveAll as on}from"../../../core/runtime/revive-all.js";import{promoteAsync as rn,requestYieldAsync as dn,reshapeNodeAsync as B}from"../../../core/runtime/promote.js";import{recycleNode as sn}from"../../../core/runtime/recycle.js";import{relaunchRoot as an}from"../../../core/runtime/reset.js";import{assertReopenGate as ln}from"../../../core/runtime/reopen.js";import{writeYieldMessage as cn,readGoal as fn}from"../../../core/runtime/kickoff.js";import{ensureRoadmap as un,hasRoadmap as pn}from"../../../core/runtime/roadmap.js";import{renameWindow as mn}from"../../../core/runtime/placement.js";import{buildLaunchSpecAsync as hn,explicitModelIntent as wn,normalizeModel as yn,readMergedLaunchConfigAsync as ie}from"../../../core/runtime/launch.js";import{modelRequestFromConfig as _n}from"../../../core/model-routes.js";import{persistDormantModel as gn,setModelLive as bn}from"../../../core/runtime/model-swap.js";import{waitForBrokerViewSocket as vn}from"../../../core/runtime/view-socket.js";import{BrokerUnreachableError as kn}from"../../../core/runtime/broker-request.js";import{boundFleet as K}from"../../../core/runtime/fleet.js";import{admitLegacyStructuredOutput as Sn}from"../../structured-requests/sidecar.js";import{OUTCOME_PAYLOAD_MAX_BYTES as de}from"../../../core/canvas/types.js";import{HUMAN_ACTION_NAME_PATTERN as On}from"../../../core/human/action-binding.js";import{resolveHumanAction as Rn}from"../../../core/human-actions.js";import{parseDurationMs as In}from"../../../core/wake.js";import{claimWarmNode as $n,refillWarmPool as se,resumeWarmClaim as Nn,warmPoolEnabled as An}from"../../../core/runtime/warm-pool.js";import{assertLaunchKind as W,isLaunchKind as Cn,resolveLaunchTarget as Tn}from"../../../core/runtime/launch-target.js";import{fullName as En}from"../../../core/canvas/labels.js";import{reportsForNode as ae}from"./reports.js";import{requireUsableProfile as Pn}from"./profiles.js";import{assertProfileActive as Dn,loadExactProfileManifest as jn}from"../../../core/profiles/manifest.js";import{getCron as xn}from"../../../core/canvas/crons.js";import{cronWakeOrigin as Ln}from"../../../core/runtime/bearings.js";import{boundDaemonControl as Mn}from"../../control.js";import{notFound as E,usage as p}from"../../../core/errors.js";import{assertScope as Fn,validateScopes as le}from"../../../core/scopes.js";import{scopeAllowed as R}from"../../../shared/env.js";import{toCloseResultDTO as Gn,toNodeDetailDTO as V,toNodeSummaryDTO as Bn,toReviveResultDTO as Kn}from"../map.js";import{ApiError as m}from"../../../api/index.js";import{InputError as h}from"../../../core/io.js";import{brokerMayReach as z,canReadNode as ce,resolvedScopes as Wn}from"../router.js";import{fileRoot as Vn}from"../../../core/spaces/file-root.js";import{activeGrant as zn,terminalGrant as Jn}from"../../../core/grants/mirror.js";import{readConfig as Un}from"../../../core/config.js";import{hasConfiguredProviderCredential as Hn,NO_PROVIDER_CREDENTIAL_MESSAGE as fe}from"../../../core/runtime/provider-credential-gate.js";function w(e){const t=k(e);if(t===null)throw E(`unknown node: ${e}`,{received:e});return t}a(w,"requireMeta");function J(e){return{subscribesTo:te(e),subscribers:Le(e),children:Ee(e)}}a(J,"edgesFor");function g(e){const t=w(e);return V(t,J(e))}a(g,"detailOf");function Yn(e){let t=ae(e).length;try{t+=Xe(re(e),oe(e)).length}catch(n){if(!Ye(n))throw n}return t}a(Yn,"countFiles");function Qn(e){if(typeof e!="object"||e===null)throw p("a node create requires a JSON body");const t=e;if(t.kind!==void 0&&(typeof t.kind!="string"||t.kind.trim()===""))throw p("kind must be a non-empty string when provided");if(t.description!==void 0&&(typeof t.description!="string"||t.description.trim()===""))throw p("description must be a non-empty string when provided");if(t.creator!==void 0&&(typeof t.creator!="string"||t.creator.trim()===""))throw p("creator must be a non-empty node id when provided");if(t.scopes!==void 0&&le(t.scopes),t.isolated!==void 0&&typeof t.isolated!="boolean")throw new m(400,"invalid_request","isolated must be a boolean",{param:"isolated"});const n=t.root_lifecycle;if(n!==void 0&&n!=="resident"&&n!=="terminal")throw p("root_lifecycle must be 'resident' or 'terminal'");if(t.request_key!==void 0&&(typeof t.request_key!="string"||t.request_key.trim()===""||t.request_key.length>128))throw p("request_key must be a non-empty string of at most 128 characters when provided");return t}a(Qn,"parseCreateBody");function Xn(e){if(e===void 0)return;const t=In(e),n=t===null?null:new Date(Date.now()+t);if(t===null||!Number.isFinite(t)||t<=0||n===null||!Number.isFinite(n.getTime()))throw new m(422,"invalid_deadline","`deadline` must be a positive representable duration");return n.toISOString()}a(Xn,"parseDeadline");function Zn(e){if(e!==void 0){if(typeof e!="object"||e===null||Array.isArray(e))throw new m(400,"invalid_request","`outcome_delivery` must be an object");if(typeof e.action!="string"||!On.test(e.action))throw new m(400,"invalid_request","`outcome_delivery.action` must be a declared action name");if(e.payload!==void 0){let t;try{t=JSON.stringify(e.payload)}catch{throw new m(400,"invalid_request","`outcome_delivery.payload` must be JSON-serializable")}if(t===void 0)throw new m(400,"invalid_request","`outcome_delivery.payload` must be JSON-serializable");if(Buffer.byteLength(t,"utf8")>de)throw new m(413,"payload_too_large",`serialized payload exceeds ${de} bytes`)}return e}}a(Zn,"parseOutcomeDelivery");function qn(e,t){const n=Rn(e.action,t);if(!("kind"in n))return{actionName:e.action,argv:n.argv,cwd:n.cwd,configOrigin:n.configOrigin,...e.payload===void 0?{}:{payload:e.payload}};throw n.kind==="unknown_action"?new m(422,"unknown_action",`no action named ${e.action} is declared from ${t}`):new m(422,"invalid_action",`${e.action} is declared in ${n.configOrigin} but unusable: ${n.reason}`,{reason:n.reason,configOrigin:n.configOrigin})}a(qn,"resolveOutcomeDelivery");function et(e,t,n){const r={kind:e.kind,cwd:n,prompt:e.prompt??""};return e.mode!==void 0&&(r.mode=e.mode),e.name!==void 0&&(r.name=e.name),e.description!==void 0&&(r.description=e.description),t!==void 0&&(r.parent=t),e.creator!==void 0&&(r.creator=e.creator),e.scopes!==void 0&&(r.scopes=e.scopes),e.isolated!==void 0&&(r.isolated=e.isolated),e.root===!0&&(r.root=!0),e.root_lifecycle!==void 0&&(r.rootLifecycle=e.root_lifecycle),(e.worktree===!0||typeof e.worktree=="string")&&(r.worktree=!0),typeof e.worktree=="string"&&(r.worktreeBase=e.worktree),e.worktree!==void 0&&(r.worktreeCwd=T(e.pin_cwd??e.cwd??n)),e.fork_from!==void 0&&(r.forkFrom=e.fork_from),e.model!==void 0&&(r.model=e.model),e.profile!==void 0&&(r.profile=e.profile),e.situational_context!==void 0&&(r.situationalContext=e.situational_context),e.node_id!==void 0&&(r.nodeId=e.node_id),r}a(et,"buildRecipe");function nt(e,t,n){return!An()||e.prefer_warm!==!0||e.root!==!0||e.parent!=null||e.root_lifecycle==="terminal"||(e.prompt??"")!==""||e.model!==void 0||e.fork_from!==void 0||e.worktree!==void 0||e.node_id!==void 0||e.scopes!==void 0||e.isolated!==void 0?null:{kind:e.kind,mode:e.mode??"base",cwd:t,profileId:n,model:e.model??null,situationalContext:e.situational_context??null,name:e.name??null,creator:e.creator??null}}a(nt,"warmRequestFor");import{resolveCreateKind as zo}from"../../../core/runtime/launch-target.js";function ue(e){const t=e.modelIntent===void 0?void 0:`${e.modelIntent.family}/${e.modelIntent.strength}`;return _n(e.model,t,e.modelExact===!0)}a(ue,"requestFromLaunch");function tt(e,t){if(t===null)return e;if(e.scopes===void 0)return{...e,scopes:[...t]};const n=e.scopes.filter(r=>!R(t,r));if(n.length===0)return e;throw new m(403,"scope_denied",`scopes exceed the bearer token's ceiling: ${n.join(", ")}`,{scopes:n,ceiling:t})}a(tt,"withinCeiling");async function pe(e,t,n){const r=(await hn(t.kind,t.mode,{lifecycle:t.lifecycle,hasManager:e.parent!==null,model:t.model,modelOverride:!0,cwd:e.cwd,profileId:e.profile_id??null})).launch;await F(ue(r),{cwd:e.cwd,profileId:e.profile_id??null},n)}a(pe,"assertNodeModelChangeRegistered");function me(e,t){const n=e.principal;if(n.class!=="broker")return;const r=Vn({app:n.app,resolved:Wn(n),launched:n.scopes},t,"read");if("root"in r)return;const o="missing"in r?r.missing:null;throw new m(403,"scope_missing",o?`the child's directory ${t} needs missing scope ${o}`:`no permission of this run names the child's directory ${t}`,void 0,void 0,o?{scope:o}:void 0)}a(me,"assertCallerReaches");const U=new Map;async function ot(e,t={},n={}){const r=tt(Qn(e.body),e.ceiling);if(e.principal.class==="broker"){const u=e.principal;if(r.prefer_warm===!0&&u.app!=="app:terminal"&&(r.prefer_warm=!1),r.parent!=null){const i=w(r.parent);if(i.grantee!==u.app)throw new m(403,"other_app_run","cannot create a child under another app's node");if(!z(u,r.parent,i.grantee??"app:terminal"))throw E(`unknown node: ${r.parent}`,{received:r.parent})}if(r.creator!==void 0&&r.creator!==u.node)throw new m(403,"other_app_run","cannot create for another node");if(r.fork_from!==void 0){let i=null;try{i=Ce(Ne(r.fork_from))}catch{}if(i?.grantee!==u.app||!z(u,i.node_id,i.grantee))throw new m(403,"other_app_run","cannot fork another app's conversation")}r.creator=u.node}r.creator!==void 0&&Fn(w(r.creator),"crtr:act");const o=r.request_key?.trim();if(o===void 0||r.node_id!==void 0&&Ue(r.node_id)&&k(r.node_id)!==null&&Pe(o)?.nodeId!==r.node_id)return P(e,r,t,n);const d=U.get(o);if(d!==void 0)return d;const s=rt(e,r,o,t,n);U.set(o,s);try{return await s}finally{U.delete(o)}}a(ot,"handleCreate");async function rt(e,t,n,r,o){const d=ee(n);if(d.nodeId!==null&&k(d.nodeId)!==null){if(d.state!=="warm_claimed"){const s=k(d.nodeId);if(e.principal.class!=="person"&&!ce(e.principal,s.grantee??"app:terminal",d.nodeId))throw new m(409,"create_request_conflict","request_key belongs to another caller");return{status:201,body:g(d.nodeId)}}return P(e,t,r,o,d)}try{return await P(e,t,r,o,d)}catch(s){const u=ee(n);throw(u.nodeId===null||k(u.nodeId)===null)&&Z(n,u.nodeId),s}}a(rt,"handleKeyedCreateRequest");async function P(e,t,n,r,o=void 0){const d=r.deadlineAt??Xn(t.deadline),s=Zn(t.outcome_delivery),u=t.parent??void 0;if(u==null&&t.root!==!0)throw p("a node create requires a parent (or root: true for an independent root)");let i=null;if(t.output_schema!==void 0)try{i=JSON.parse(t.output_schema)}catch{throw p("output_schema must be a JSON schema string")}const{profileId:l,kind:y,cwd:f,launch:c}=await Tn(t,{validateKind:ge});me(e,f),t.worktree!==void 0&&me(e,T(t.pin_cwd??t.cwd??f));const _={...t,kind:y},S=s===void 0?void 0:qn(s,f);if(await F(ue(c),{cwd:f,profileId:l},n.modelRegistry),!await Hn(l))throw new m(412,"no_provider_credential",fe,{error:"no_provider_credential",message:fe,next:"The person running this runtime logs a provider in with `crtr sys setup`, or stores a provider key on the profile."});let $=null;{const O=o===void 0||o.nodeId===null||o.state==="warm_claimed"?nt(_,f,l):null,j=i===null&&r.beforeBrokerLaunch===void 0?void 0:v=>{i!==null&&Sn(v,"terminal",i),r.beforeBrokerLaunch?.(v)};if(o?.state==="warm_claimed"&&o.nodeId!==null){const v=O===null?null:await Nn(O,o.nodeId,j);if(v===null)throw Z(o.requestKey,o.nodeId),new m(503,"create_resume_failed",`could not resume warm claim ${o.nodeId}; retry the create`);return q(o.requestKey,v),{status:201,body:g(v)}}if(O!==null){const v=await $n(O,{...d===void 0?{}:{deadlineAt:d},...S===void 0?{}:{outcomeDelivery:S},...o===void 0?{}:{requestKey:o.requestKey}},j);if(v!==null)return o!==void 0&&q(o.requestKey,v),se(O),{status:201,body:g(v)};$=O}const x=o?.nodeId??t.node_id??(o===void 0?void 0:Te());o!==void 0&&o.nodeId===null&&je(o.requestKey,x);const A=et(x===void 0?_:{..._,node_id:x},u,f);d!==void 0&&(A.deadlineAt=d),S!==void 0&&(A.outcomeDelivery=S),A.readiness=t.root===!0?"await":"launch";const H=await Ae(A,j,()=>{$!==null&&se($)});return o!==void 0&&De(o.requestKey,H.node.node_id),{status:201,body:g(H.node.node_id)}}}a(P,"handleCreateRequest");function b(e,t){const n=e.query.getAll(t);if(n.length>1)throw p(`${t} must appear at most once`);return n[0]}a(b,"singleQueryValue");function he(e,t){if(e!==void 0){if(e==="1"||e==="true")return!0;if(e==="0"||e==="false")return!1;throw p(`${t} must be true or false`)}}a(he,"optionalBoolean");function D(e,t,n){if(e!==void 0){if(n.includes(e))return e;throw p(`${t} must be one of: ${n.join(", ")}`)}}a(D,"oneOf");function it(e){const t=new Set(["status","lifecycle","kind","mode","profile_id","profile_prefix","parent","top_level","under","hanging","include"]);for(const[_]of e.query)if(!t.has(_))throw p(`unknown nodes query parameter: ${_}`);const n=D(b(e,"status"),"status",["active","idle","done","dead","canceled"]),r=D(b(e,"lifecycle"),"lifecycle",["terminal","resident"]),o=b(e,"kind"),d=D(b(e,"mode"),"mode",["base","orchestrator"]),s=b(e,"profile_id"),u=b(e,"profile_prefix"),i=b(e,"parent"),l=he(b(e,"top_level"),"top_level"),y=b(e,"under"),f=he(b(e,"hanging"),"hanging"),c=D(b(e,"include"),"include",["activity"]);if(i!==void 0&&l===!0)throw p("parent and top_level=true cannot be combined");return{...n!==void 0?{status:n}:{},...r!==void 0?{lifecycle:r}:{},...o!==void 0?{kind:o}:{},...d!==void 0?{mode:d}:{},...s!==void 0?{profile_id:s}:{},...u!==void 0?{profile_prefix:u}:{},...i!==void 0?{parent:i}:{},...l!==void 0?{top_level:l}:{},...y!==void 0?{under:y}:{},...f!==void 0?{hanging:f}:{},...c!==void 0?{include:c}:{}}}a(it,"parseListQuery");function dt(e){const t=it(e);let n=t.status!==void 0?ne({status:t.status}):ne();if(e.principal.class!=="person"&&(n=n.filter(s=>ce(e.principal,s.grantee??"app:terminal",s.node_id))),t.lifecycle!==void 0&&(n=n.filter(s=>s.lifecycle===t.lifecycle)),t.kind!==void 0&&(n=n.filter(s=>s.kind===t.kind)),t.mode!==void 0&&(n=n.filter(s=>s.mode===t.mode)),t.profile_id!==void 0&&(n=n.filter(s=>s.profile_id===t.profile_id)),t.profile_prefix!==void 0&&(n=n.filter(s=>s.profile_id?.startsWith(t.profile_prefix))),t.parent!==void 0&&(n=n.filter(s=>s.parent===t.parent)),t.top_level===!0&&(n=n.filter(s=>s.parent===null)),t.under!==void 0){const s=new Set(Fe(t.under));n=n.filter(u=>s.has(u.node_id))}t.hanging===!0&&(n=n.filter(s=>s.parent!==null&&k(s.parent)===null));const r=t.include==="activity"?Je(n.map(s=>s.node_id)):null,o=n.length>0?ke():new Set;return{status:200,body:n.map(s=>{const u=Bn(s,s.profile_id!==null&&o.has(s.profile_id));if(r!==null){const i=ae(s.node_id);u.activity={latest_report:i[0]??null,final_report:s.final_report===null?null:i.find(l=>l.name===s.final_report)??null,pending_human_count:r[s.node_id]??0}}return u})}}a(dt,"handleList");function st(e){const t=e.params.id;return w(t),{status:200,body:g(t)}}a(st,"handleDetail");async function at(e){const t=e.params.id;w(t);const n=await en(t);return{status:200,body:{node_id:t,snapshot:{messages:n.snapshot.messages,...n.snapshot.messageIds===void 0?{}:{messageIds:n.snapshot.messageIds},messageVisibility:n.snapshot.messageVisibility,turnVisibility:n.snapshot.turnVisibility,stats:n.snapshot.stats,state:n.snapshot.state,display:n.snapshot.display,...n.snapshot.queued===void 0?{}:{queued:n.snapshot.queued},...n.snapshot.toolGroupSummaries===void 0?{}:{toolGroupSummaries:n.snapshot.toolGroupSummaries},...n.snapshot.workingActivity===void 0?{}:{workingActivity:n.snapshot.workingActivity}},commands:n.commands.map(o=>({name:o.name,description:o.description,source:o.source})),captured_at:M()}}}a(at,"handleSnapshot");async function lt(e){const t=e.params.id,n=tn(t);if(n===null)throw E(`unknown node: ${t}`,{received:t});return{status:200,body:n}}a(lt,"handleSubject");function ct(e){for(const[d]of e.query)if(d!=="cursor"&&d!=="limit")throw p(`unknown messages query parameter: ${d}`);const t=e.query.getAll("cursor"),n=e.query.getAll("limit");if(t.length>1)throw p("cursor must appear at most once");if(n.length>1)throw p("limit must appear at most once");if(n.length===0)return t.length===0?{}:{cursor:t[0]};const r=n[0],o=Number(r);if(!Number.isSafeInteger(o)||r==="")throw p("limit must be an integer from 1 through 500");return t.length===0?{limit:o}:{cursor:t[0],limit:o}}a(ct,"parseMessagesQuery");async function ft(e){const t=e.params.id,n=await Ze(t,ct(e));return{status:200,body:{node_id:t,messages:n.messages,...n.messageIds===void 0?{}:{message_ids:n.messageIds},message_visibility:n.messageVisibility,next_cursor:n.nextCursor,captured_at:M()}}}a(ft,"handleMessages");function ut(e){const t=e.params.id;w(t);const n=qe(t);return{status:200,body:{node_id:t,session_file:n.sessionFile,session_jsonl:n.sessionJsonl,system_prompt:n.systemPrompt,captured_at:M()}}}a(ut,"handleSession");async function pt(e){const t=e.params.id;return w(t),{status:200,body:{node_id:t,markdown:await nn(t)}}}a(pt,"handleTranscript");function mt(e){const t=e.params.id;w(t);const n=a((o,d)=>({node_id:o,label:k(o)?.name??o,dir:oe(o),self:d,files:Yn(o)}),"root"),r=[n(t,!0),...te(t).map(o=>n(o.node_id,!1))].filter(o=>ht(o.node_id,o.dir)||o.files>0);return{status:200,body:{node_id:t,roots:r}}}a(mt,"handleContext");function ht(e,t){try{return He(re(e),t)}catch(n){if(Qe(n))return!1;throw n}}a(ht,"hasDir");async function wt(e){const t=w(e.params.id),n=e.principal.class==="broker"?e.principal.scopes:e.ceiling,r=n===null?void 0:t.scopes==null?[...n]:[...new Set([...t.scopes.filter(d=>R(n,d)),...n.filter(d=>R(t.scopes,d))])],o=await $e(t.node_id,r,e.principal.class==="broker"?e.principal.node:void 0);return{status:201,body:g(o.node.node_id)}}a(wt,"handleFork");async function yt(e){const t=e.params.id;w(t);const n=e.body,r=n?.resume??!0,o=n?.reopen??!1;ln(t,o);const d=!r&&n?.cron_id!==void 0?xn(n.cron_id):null,s=await Ie(t,{resume:r,capacity:"refuse",...d!==null?{wakeReason:Ln(d,"schedule_revive")}:{}});s.outcome!=="already-live"&&xe(t,{failures:0,notBefore:null});const u=k(t)?.status??"active";return{status:200,body:Kn(t,s,u)}}a(yt,"handleRevive");async function _t(e){const t=e.params.id;return{status:200,body:{newNodeId:(await an(t))?.newNodeId??null}}}a(_t,"handleRelaunchRoot");function gt(e){const t=e.params.id;w(t);const n=e.body;if(n?.caller_pid!==void 0&&(!Number.isInteger(n.caller_pid)||n.caller_pid<=0))throw p("caller_pid must be a positive integer when provided");const r=Mn(),o=Re(t,{rootEvent:n?.finish===!0?"finish":"cancel",callerPid:n?.caller_pid,...e.principal.class==="broker"?{closer:e.principal.node}:{},...r===null?{}:{registerDetached:r.registerDetached}});return{status:200,body:Gn(o)}}a(gt,"handleClose");async function bt(e){const t=e.params.id;w(t);const n=await sn(t);return{status:200,body:{recycled:n.recycled,finalized:n.finalized,new_root:n.newRoot,delivered:n.delivered}}}a(bt,"handleRecycle");async function vt(e){const t=e.params.id;return w(t),await B(t,{lifecycle:"terminal"}),I(e,t,["lifecycle"]),{status:200,body:g(t)}}a(vt,"handleDemote");async function kt(e,t={}){const n=e.params.id,r=w(n),o=e.body??{};o.kind!==void 0&&await W(o.kind,r.cwd,r.profile_id??null),o.model!==void 0&&await pe(r,{kind:o.kind??r.kind,mode:"orchestrator",lifecycle:o.resident===!0?"resident":r.lifecycle,model:o.model},t.modelRegistry);const d=await rn(n,{...o.kind!==void 0?{kind:o.kind}:{},...o.resident===!0?{resident:!0}:{},...o.model!==void 0?{model:o.model}:{}});I(e,n,["mode",...o.kind!==void 0?["kind"]:[],...o.resident===!0?["lifecycle"]:[],...o.model!==void 0?["model"]:[]]);const s=V(d.meta,J(n));return s.roadmap_written=d.roadmapWritten,s.roadmap_ref=d.roadmapRef,s.goal_path=d.goalPath,{status:200,body:s}}a(kt,"handlePromote");async function St(e,t={}){const n=e.params.id,r=w(n),o=e.body??{};o.kind!==void 0&&await W(o.kind,r.cwd,r.profile_id??null),o.model!==void 0&&await pe(r,{kind:o.kind??r.kind,mode:o.promote===!0?"orchestrator":r.mode,lifecycle:r.lifecycle,model:o.model},t.modelRegistry);const d=o.note??"Refresh: continue against your roadmap or goal.";cn(n,d);const s=await dn(n,{...o.promote===!0?{promote:!0}:{},...o.kind!==void 0?{kind:o.kind}:{},...o.model!==void 0?{model:o.model}:{}});return{status:200,body:V(s.meta,J(n))}}a(St,"handleYield");function Ot(e){const t=e.params.id;w(t);const n=e.body;if(n===void 0||typeof n.controller!="string"||n.controller.trim()==="")throw p("a wait requires a controller node id");const r=k(n.controller);if(r===null)throw E(`unknown controller: ${n.controller}`,{received:n.controller});if(r.status!=="active"&&r.status!=="idle")throw new m(422,"unprocessable",`controller ${n.controller} is ${r.status}`);return Me(t,n.controller),{status:200,body:g(t)}}a(Ot,"handleWait");async function Rt(e){const t=e.principal,n=await on(t.class==="broker"?o=>o.grantee===t.app&&z(t,o.node_id,o.grantee):void 0);return{status:200,body:{revived:[...n.revived],failed:[...n.failed],frozen:[...n.frozen]}}}a(Rt,"handleReviveAll");const It=new Set(["interrupt","steer","after-turn","next-turn"]);function $t(e){if(e===null)return null;const t=a(r=>{throw new h({error:"invalid_listen",message:r,received:e,field:"listen",next:'Send an object mapping levels "1".."10" to interrupt|steer|after-turn|next-turn (e.g. {"3":"next-turn"}), or null to reset to the global default.'})},"bad");if(typeof e!="object"||Array.isArray(e))return t("listen must be an object or null");const n=Object.entries(e);if(n.length===0)return t("listen must name at least one level");for(const[r,o]of n)/^(?:[1-9]|10)$/.test(r)||t(`listen level must be 1..10: ${r}`),(typeof o!="string"||!It.has(o))&&t(`listen delivery must be interrupt|steer|after-turn|next-turn: ${String(o)}`);return JSON.stringify(Object.fromEntries(n))}a($t,"listenJson");function I(e,t,n,r){n.length===0&&r===void 0||G(o=>{if(r?.(o),n.length===0)return;const d=Ge(o,t),s=We(o,e),u=s.class==="person"?s.person:s.class==="app"?s.app:s.node;Be(o,u,d),Ke(o,{event:"configured",object:d,actor:u,attrs:{changed:n.join(",")}})})}a(I,"recordConfigured");function we(e){const t=K().get(e);if(t===void 0)return!1;try{return process.kill(t.pid,"SIGTERM"),!0}catch{return!1}}a(we,"restartLiveBroker");function ye(e,t){try{return Q(e)===Q(t)}catch{return!1}}a(ye,"sameDirectory");async function Nt(e,t={}){const n=e.params.id,r=e.body;let o;if(r===void 0)o={};else if(typeof r=="object"&&r!==null&&!Array.isArray(r))o=r;else throw new h({error:"cwd_invalid",message:"cwd repair requires a non-null object with a non-empty cwd string",received:r,field:"cwd",next:"Send a config patch with a non-empty absolute cwd string."});if(o.profile!==void 0){if(typeof o.profile!="string"||o.profile==="")throw new h({error:"profile_invalid",message:"profile must be a non-empty profile id or name",received:o.profile,field:"profile",next:"Send a profile id or exact name."});if(Object.keys(o).some(f=>f!=="profile"&&f!=="restart"&&o[f]!==void 0))throw new h({error:"profile_not_exclusive",message:"profile can only be combined with restart",field:"profile",next:"Send profile (and optionally restart) alone."});const i=w(n),l=Pn(e,o.profile);Dn(l.profileId);const y=jn(l.profileId).manifest.grantee??"app:terminal";if(y!==(i.grantee??"app:terminal"))throw new h({error:"profile_grantee_mismatch",message:`profile ${l.profileId} belongs to ${y}, node ${n} to ${i.grantee}`,received:o.profile,field:"profile",next:"Pick a profile owned by the same app as the node."});return(i.profile_id??null)!==l.profileId&&(Cn(i.kind)?(await W(i.kind,i.cwd,l.profileId),await B(n,{profileId:l.profileId})):N(n,{profile_id:l.profileId}),I(e,n,["profile"])),o.restart===!0&&we(n),{status:200,body:g(n)}}if(Object.prototype.hasOwnProperty.call(o,"cwd")){const i=o.cwd;if(typeof i!="string"||i==="")throw new h({error:"cwd_invalid",message:"cwd must be a non-empty string",received:i,field:"cwd",next:"Send a non-empty absolute cwd string."});if(Object.keys(o).some(c=>c!=="cwd"&&c!=="keep_session"&&c!=="restart"&&o[c]!==void 0))throw new h({error:"cwd_not_exclusive",message:"cwd repair cannot be combined with another config field",received:o,field:"cwd",next:"Send cwd as the only config field."});const l=w(n),y=C(l.cwd);if(o.keep_session===!0||y&&L(i)&&C(i)&&ye(l.cwd,i)){if(!L(i))throw new h({error:"cwd_not_absolute",message:`cwd must be an absolute path: ${i}`,received:i,field:"cwd",next:"Send an absolute path."});const c=T(i);let _=!1;try{_=X(c).isDirectory()}catch{}if(!_)throw new h({error:"cwd_missing",message:`cwd is not an existing directory: ${c}`,received:i,field:"cwd",next:"Send an existing absolute directory."});if(y&&!ye(l.cwd,c))throw new h({error:"cwd_not_same_directory",message:`${c} is not the same directory as the recorded ${l.cwd}; --keep-session only relocates an alias`,received:i,field:"cwd",next:"Drop --keep-session to repair a gone cwd, or pass the real path of the recorded directory."});if(l.managed_worktree?.state==="open")throw new h({error:"cwd_node_managed_worktree_open",message:`${n} owns an open managed worktree and cannot relocate its cwd`,received:i,field:"cwd",next:"Reconcile the managed worktree first."});const S=l.cwd;return S!==c&&(G($=>{N(n,{cwd:c}),Y($,"UPDATE crons SET cwd = ? WHERE anchor_node = ? AND cwd = ?").run(c,n,S),Ve(n,S,c)}),I(e,n,["cwd"])),o.restart===!0&&we(n),{status:200,body:g(n)}}if(K().has(n)){const c=`${n} cannot repair its cwd while its broker is live`;throw new m(409,"cwd_node_live",c,{error:"cwd_node_live",message:c,received:i,field:"cwd",next:"Let the node become dormant, then retry the cwd repair."})}if(l.fork_from!=null)throw new h({error:"cwd_node_forked",message:`${n} is a fork and cannot repair its cwd; recorded cwd: ${l.cwd}`,received:i,field:"cwd",next:`Restore ${l.cwd}, then revive the fork normally.`});if(l.managed_worktree?.state==="open")throw new h({error:"cwd_node_managed_worktree_open",message:`${n} owns an open managed worktree and cannot repair its cwd`,received:i,field:"cwd",next:"Restore or reconcile the recorded checkout, then use the managed-worktree close or abandon flow."});if(C(l.cwd))throw new h({error:"cwd_still_present",message:`${n} recorded cwd still exists: ${l.cwd}; cwd repair is not a relocation command`,received:i,field:"cwd",next:"This command only repairs a node whose recorded cwd is gone."});if(!L(i))throw new h({error:"cwd_not_absolute",message:`cwd must be an absolute path: ${i}`,received:i,field:"cwd",next:"Send an absolute path."});const f=T(i);if(!C(f))throw new h({error:"cwd_missing",message:`cwd does not exist: ${f}`,received:i,field:"cwd",next:"Create the replacement directory or send an existing absolute directory."});try{if(!X(f).isDirectory())throw new h({error:"cwd_not_a_directory",message:`cwd is not a directory: ${f}`,received:i,field:"cwd",next:"Send an existing absolute directory."})}catch(c){throw c instanceof h?c:new h({error:"cwd_missing",message:`cwd does not exist: ${f}`,received:i,field:"cwd",next:"Create the replacement directory or send an existing absolute directory."})}return G(()=>{N(n,{cwd:f}),ze(n)}),I(e,n,["cwd"]),{status:200,body:g(n)}}let d=w(n);const s=o.listen===void 0?void 0:$t(o.listen);if(o.scopes!==void 0){const i=le(o.scopes),l=d.grantee==="app:terminal"?Jn():d.grant_id?zn(d.grant_id):null,y=d.grantee==="app:terminal"&&!Un("user").runtime?.issuer;if(!i.every(f=>R(d.scopes,f)&&(l?R(l.resolved,f):y)))throw new h({error:"unknown_scope",message:"scopes may only narrow the node's current effective set",received:i,field:"scopes",next:"Send only scopes the node currently holds."});if(i.includes("crtr:act")&&!R(i,"crtr:llm"))throw new m(400,"invalid_scope","crtr:act requires crtr:llm");d=N(n,{scopes:i})}if(o.situational_context!==void 0&&Se(n,Oe(o.situational_context)),o.model!==void 0){const i=(await ie(d.cwd,d.profile_id??null)).modelLadders,l=wn(o.model,i),y=yn(o.model,i);await F({kind:"concrete",spec:y},{cwd:d.cwd,profileId:d.profile_id??null},t.modelRegistry);const f=K();let c=!1;if(f.isClaimed(n)&&await vn(n,f.get(n)?.handle.exited)&&(c=await bn(n,y,l).then(()=>!0,_=>{if(_ instanceof kn)return!1;throw _})),!c){if(f.isClaimed(n)){const _=`${n}'s broker did not accept the model switch; the model was not changed`;throw new m(409,"broker_not_ready",_,{error:"broker_not_ready",message:_,received:o.model,field:"model",next:"Check the node with `crtr node show`, then retry the model change."})}if(!y.includes("/"))throw p(`model must resolve to a provider/id spec: ${o.model}`);gn(n,y,l)}d=w(n)}if(o.kind!==void 0||o.mode!==void 0||o.lifecycle!==void 0){o.kind!==void 0&&await ge(o.kind);const i=o.kind??d.kind,l=o.mode??d.mode,y=o.lifecycle??d.lifecycle;let f;l==="orchestrator"&&!pn(n)&&(f=a(()=>{const c=fn(n);un(n,c!==null&&c.trim()!==""?{goal:c.trim()}:{})},"beforePersist")),d=await B(n,{...o.kind!==void 0?{kind:i}:{},...o.mode!==void 0?{mode:l}:{},...o.lifecycle!==void 0?{lifecycle:y}:{}},f)}o.name!==void 0&&(d=N(n,{name:o.name}),d.window&&mn(d.window,En(d)));const u=["scopes","situational_context","model","kind","mode","lifecycle","name","listen"].filter(i=>o[i]!==void 0);return I(e,n,u,s===void 0?void 0:i=>{Y(i,"UPDATE objects SET listen_json = ? WHERE id = ? AND type = 'node'").run(s,n)}),{status:200,body:g(n)}}a(Nt,"handleConfig");async function _e(){return(await ie(process.cwd(),ve()||null)).kinds}a(_e,"daemonKinds");async function ge(e){const t=Object.keys(await _e());if(!t.includes(e))throw p(`unknown kind: ${e}`,{received:e,next:`Valid kinds: ${t.sort().join(", ")}.`})}a(ge,"assertKindServer");async function At(){const e=await _e();return{status:200,body:{kinds:Object.keys(e).sort().map(n=>({kind:n,when_to_use:e[n]?.whenToUse??null,available_to:e[n]?.availableTo??null}))}}}a(At,"handleListKinds");const Ko=[{method:"POST",pattern:"/v1/nodes",scope:"crtr:act",handler:ot},{method:"GET",pattern:"/v1/nodes",handler:dt},{method:"GET",pattern:"/v1/kinds",handler:a(()=>At(),"handler")},{method:"POST",pattern:"/v1/nodes/revive-all",scope:"crtr:act",handler:Rt},{method:"GET",pattern:"/v1/nodes/:id",handler:st},{method:"GET",pattern:"/v1/nodes/:id/snapshot",handler:at},{method:"GET",pattern:"/v1/nodes/:id/subject",handler:lt},{method:"GET",pattern:"/v1/nodes/:id/messages",handler:ft},{method:"GET",pattern:"/v1/nodes/:id/session",handler:ut},{method:"GET",pattern:"/v1/nodes/:id/transcript",handler:pt},{method:"GET",pattern:"/v1/nodes/:id/context",handler:mt},{method:"POST",pattern:"/v1/nodes/:id/fork",scope:"crtr:act",handler:wt},{method:"POST",pattern:"/v1/nodes/:id/revive",scope:"crtr:act",handler:yt},{method:"POST",pattern:"/v1/nodes/:id/relaunch-root",scope:"crtr:act",handler:_t},{method:"POST",pattern:"/v1/nodes/:id/close",handler:gt},{method:"POST",pattern:"/v1/nodes/:id/recycle",scope:"crtr:act",handler:bt},{method:"POST",pattern:"/v1/nodes/:id/demote",scope:"crtr:act",handler:vt},{method:"POST",pattern:"/v1/nodes/:id/promote",scope:"crtr:act",handler:kt},{method:"POST",pattern:"/v1/nodes/:id/yield",scope:"crtr:act",handler:St},{method:"POST",pattern:"/v1/nodes/:id/wait",handler:Ot},{method:"PATCH",pattern:"/v1/nodes/:id/config",handler:Nt}];export{Nt as handleConfig,ot as handleCreate,wt as handleFork,dt as handleList,kt as handlePromote,St as handleYield,Ko as nodeRoutes,zo as resolveCreateKind};

package/dist/daemon/api/handlers/objects.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const objectRoutes: RouteTable;

package/dist/daemon/api/handlers/objects.js

@@ -0,0 +1,2 @@
+var Z=Object.defineProperty;var f=(e,r)=>Z(e,"name",{value:r,configurable:!0});import{prepared as J}from"../../../core/sqlite-statements.js";import{ApiError as g}from"../../../api/errors.js";import{PRIVACY_LEVELS_DTO as K}from"../../../api/dto/objects.js";import{openDb as A,withCanvasWrite as b}from"../../../core/canvas/db.js";import{actorOf as $}from"../../../core/graph/documents.js";import{readerForObject as F}from"../../../core/graph/reader.js";import{canRead as U}from"../../../core/graph/access.js";import{customObjectRef as I,authorizeCustom as S,fenceArgv as C}from"./custom-objects.js";import{edgesOf as Y}from"../../../core/graph/edges.js";import{publish as B}from"../../../core/graph/events.js";import{objectDTO as a}from"../../../core/graph/kinds/dto.js";import{isKind as Q,kindNames as X,kindOf as D}from"../../../core/graph/kinds/registry.js";import{listObjects as x,searchObjects as L}from"../../../core/graph/objects.js";import{checkoutsForCwd as ee}from"../../../core/graph/repo-sync/repos.js";import{recordWatch as te,unwatch as re,watchersOf as ne,watchesOf as oe}from"../../../core/graph/watches.js";import{readerFor as m,resolveRef as P}from"../reader.js";import{invalidRequest as E,isRecord as v}from"./validate.js";const W=f(e=>r=>ee(e,r),"reposFnFor");function z(e,r){return{...a(e,r),...D(e,r.type).listItem?.(e,r)}}f(z,"listItem");function ie(e){return`no object named ${e} on this runtime; it may be on another runtime, or the name may be misspelled`}f(ie,"remoteMessage");function G(e,r,t){try{return k(e,r,t)}catch(o){if(o instanceof g&&o.code==="not_found"&&!o.details?.deleted)return null;throw o}}f(G,"ownerFilter");function k(e,r,t){const o=P(e,r,t);if("remote"in o)throw new g(404,"not_found",ie(o.remote),{next:"Check the name with `crtr canvas search`."});if("deleted"in o)throw new g(404,"not_found",`${o.deleted.name} is deleted`,{id:o.deleted.id,deleted:!0});return o}f(k,"liveRef");const O=f(e=>decodeURIComponent(e.params.ref),"refParam");function se(e){const r=["1","true"].includes(e.query.get("fields")??"");return b(t=>{const o=m(t,e),n=P(t,o,O(e));if("remote"in n)return{state:"remote",remote:n.remote};if("deleted"in n)return{state:"deleted",deleted:a(t,n.deleted)};const{data:i,text:s}=D(t,n.type).read(t,o,n,{fields:r,reposFn:W(t)});return{state:"object",type:n.type,object:a(t,n),text:s,data:i}})}f(se,"read");function q(e,r,t,o){if(e!=null){if(!t.includes(e)){o.push({field:r,problem:`must be one of ${t.join(", ")}`,received:e});return}return e}}f(q,"oneOf");function V(e,r,t){if(r!=null){if(typeof r!="string"||!Q(e,r)){t.push({field:"type",problem:`must be a kind: one of ${X(e).join(", ")}`,received:r});return}return r}}f(V,"kindName");function H(e,r,t,o){if(e==null)return o;const n=Number(e);return!Number.isInteger(n)||n<1||n>100?(t.push({field:r,problem:"must be an integer from 1 to 100",received:e}),o):n}f(H,"limitOf");function ce(e){const r=e.query,t=[],o=V(A(),r.get("type"),t),n=q(r.get("privacy"),"privacy",K,t),i=H(r.get("limit"),"limit",t,50),s=r.get("cursor");s!==null&&!/^\d+$/.test(s)&&t.push({field:"cursor",problem:"is not a cursor from a previous page",received:s});const c=r.get("deleted");return c!==null&&!["0","1","true","false"].includes(c)&&t.push({field:"deleted",problem:"must be true or false",received:c}),t.length>0&&E("object list request",t),b(u=>{const d=m(u,e),p={...o?{type:o}:{},...n?{privacy:n}:{},...r.get("kind")!==null?{kind:r.get("kind")}:{},...c==="1"||c==="true"?{deleted:!0}:{}},h=r.get("owner");if(h!==null){const y=G(u,d,h);if(y===null)return{items:[],next_cursor:null};p.owner=y}const _=r.get("name"),w=[];let l=s===null?0:Number(s),T=!0;for(;w.length<i&&T;){const y=x(u,d,p,{limit:100,after_rowid:l});T=y.length===100;for(const R of y)if(l=R.rowid,(_===null||R.name.startsWith(_))&&w.push(R),w.length===i)break}const N=w.at(-1);return{items:w.map(y=>z(u,y)),next_cursor:w.length===i&&N?String(N.rowid):null}})}f(ce,"list");function ue(e){const r=[],t=v(e.body)?e.body:{};v(e.body)||r.push({field:"body",problem:"must be an object",received:e.body});const o=t.text;(typeof o!="string"||o.trim()==="")&&r.push({field:"text",problem:"is required",received:o});const n=t.grep;if(n!==void 0)if(typeof n!="string")r.push({field:"grep",problem:"must be a regular expression string",received:n});else try{new RegExp(n)}catch(c){r.push({field:"grep",problem:`is not a valid regular expression: ${c.message}`,received:n})}t.body!==void 0&&typeof t.body!="boolean"&&r.push({field:"body",problem:"must be a boolean",received:t.body});const i=V(A(),t.type,r);t.kind!==void 0&&typeof t.kind!="string"&&r.push({field:"kind",problem:"must be a string",received:t.kind}),t.owner!==void 0&&typeof t.owner!="string"&&r.push({field:"owner",problem:"must be a string",received:t.owner});const s=H(t.limit,"limit",r,50);return r.length>0&&E("object search request",r),b(c=>{const u=m(c,e),d=typeof t.owner=="string"?G(c,u,t.owner):null;if(typeof t.owner=="string"&&d===null)return{items:[]};const p=L(c,u,{text:o,body:t.body===!0||typeof n=="string"}),h=new Set(p.map(l=>l.object.rowid));return{items:(typeof n=="string"?L(c,u,{text:n,grep:!0}).filter(l=>h.has(l.object.rowid)):p).filter(l=>(!i||l.object.type===i)&&(t.kind===void 0||l.object.kind===t.kind)&&(!d||l.object.owner===d.rowid)).slice(0,s).map(l=>({object:z(c,l.object),...l.line!==void 0?{matches:[{line:l.line,text:l.text??""}]}:{}}))}})}f(ue,"search");const M=["interrupt","steer","after-turn","next-turn"],fe=/^(\*|>|[A-Za-z0-9_-]+)(\.(\*|>|[A-Za-z0-9_-]+))*$/;function de(e,r){if(e!==void 0){if(!Array.isArray(e)||e.length===0||e.some(t=>typeof t!="string"||!fe.test(t)||t.includes(">")&&!t.endsWith(">"))){r.push({field:"patterns",problem:"must be a non-empty list of event patterns (dot-separated words, `*` for one word, a final `>` for the rest)",received:e});return}return e}}f(de,"patternsOf");function le(e,r){if(e===void 0)return;if(!v(e)||Object.keys(e).length===0){r.push({field:"config",problem:"must map levels 1-10 to a delivery",received:e});return}const t=[];for(const[o,n]of Object.entries(e)){const i=Number(o);!Number.isInteger(i)||i<1||i>10?r.push({field:`config.${o}`,problem:"level must be an integer from 1 to 10"}):M.includes(n)?t.push({threshold:i,delivery:n}):r.push({field:`config.${o}`,problem:`delivery must be one of ${M.join(", ")}`,received:n})}return t.sort((o,n)=>n.threshold-o.threshold)}f(le,"configOf");function ae(e){const r=[],t=e.body===void 0?{}:v(e.body)?e.body:(r.push({field:"body",problem:"must be an object"}),{}),o=de(t.patterns,r),n=le(t.config,r);return t.filter!==void 0&&!v(t.filter)&&r.push({field:"filter",problem:"must be an object",received:t.filter}),t.watcher!==void 0&&typeof t.watcher!="string"&&r.push({field:"watcher",problem:"must be a custom-object ref",received:t.watcher}),r.length>0&&E("watch request",r),b(i=>{const s=typeof t.watcher=="string"?I(i,t.watcher):null;if(e.publishToken&&!s)throw new g(404,"not_found","watcher not found");if(e.principal.class==="anonymous"&&!s)throw new g(404,"not_found","watcher not found");const c=s?S(i,e,s):$(m(i,e));s&&C(i,e,s);const u=s?F(i,s):m(i,e),d=s?(()=>{const h=k(i,u,O(e));if(!U(i,u,h))throw new g(404,"not_found","object not found");return h})():k(i,u,O(e)),p=o??[">"];return te(i,s??c,d,s?"act":"ask",{patterns:p,...n?{config:n}:{},...t.filter!==void 0?{filter:t.filter}:{}}),B(i,{event:"watched",object:d,actor:c,attrs:{}},W(i)),{object:a(i,d),patterns:p}})}f(ae,"watch");function pe(e){const r=e.query.get("pattern"),t=e.query.get("watcher");return b(o=>{const n=t?I(o,t):null;if((e.publishToken||e.principal.class==="anonymous")&&!n)throw new g(404,"not_found","watcher not found");const i=n?S(o,e,n):$(m(o,e));n&&C(o,e,n);const s=n?F(o,n):m(o,e),c=k(o,s,O(e)),u=f(()=>J(o,`SELECT count(*) AS n FROM watch_subscriptions s JOIN watches w ON w.rowid = s.watch
+      WHERE w.watcher = ? AND w.object = ?`).get((n??i).rowid,c.rowid).n,"count"),d=u();return re(o,n??i,c,r??void 0),{object:a(o,c),removed:d-u()}})}f(pe,"unwatchRoute");function me(e){const r=[],t=q(e.query.get("type"),"type",["acted-on","links-to","watches"],r),o=q(e.query.get("direction"),"direction",["out","in"],r);return r.length>0&&E("edges request",r),b(n=>{const i=m(n,e),s=k(n,i,O(e)),c=[];if(t!=="watches")for(const u of Y(n,i,s,{...t?{type:t}:{},direction:o??"both"}))c.push({type:u.type,src:a(n,u.src),dst:a(n,u.dst),...u.written_as?{written_as:u.written_as}:{}});if(t===void 0||t==="watches"){const u=[...o!=="in"?oe(n,i,s):[],...o!=="out"?ne(n,i,s):[]];for(const d of u)c.push({type:"watches",src:a(n,d.watcher),dst:a(n,d.object)})}return{items:c}})}f(me,"edges");const j=f(e=>r=>({status:200,body:e(r)}),"ok"),Ie=[{method:"POST",pattern:"/v1/objects/search",handler:j(ue)},{method:"GET",pattern:"/v1/objects/:ref/edges",handler:j(me)},{method:"POST",pattern:"/v1/objects/:ref/watch",handler:j(ae)},{method:"DELETE",pattern:"/v1/objects/:ref/watch",handler:j(pe)},{method:"GET",pattern:"/v1/objects/:ref",handler:j(se)},{method:"GET",pattern:"/v1/objects",handler:j(ce)}];export{Ie as objectRoutes};

package/dist/daemon/api/handlers/package-docs.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const packageDocRoutes: RouteTable;

package/dist/daemon/api/handlers/package-docs.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var o=(e,t)=>a(e,"name",{value:t,configurable:!0});import{withCanvasWrite as c}from"../../../core/canvas/db.js";import{reconcilePackageDocuments as r}from"../../../core/graph/package-docs.js";const i=[{method:"POST",pattern:"/v1/documents/reconcile-packages",handler:o(()=>({status:200,body:c(e=>r(e))}),"handler")}];export{i as packageDocRoutes};

package/dist/daemon/api/handlers/profiles.d.ts

@@ -0,0 +1,11 @@
+import { listProfiles, type ProfileEntry } from '../../../core/profiles/manifest.js';
+import { type RequestContext, type RouteTable } from '../router.js';
+/** Rename a profile's manifest name and its live canvas profile object's handle as one unit, so
+ *  `[[name/x]]` links, `owner=` listings and `--owner profile:<name>` follow the new name. The
+ *  object is renamed first inside the canvas transaction, which refuses with `conflict` before
+ *  anything is written when another live profile object holds the handle; a manifest failure then
+ *  rolls the object rename back. */
+export declare function renameProfileAndHandle(profileId: string, name: string): ProfileEntry;
+/** One visible profile by exact id or unique name; a miss or an invisible profile is 404. */
+export declare function requireUsableProfile(ctx: RequestContext, name: string): ReturnType<typeof listProfiles>[number];
+export declare const profileRoutes: RouteTable;

package/dist/daemon/api/handlers/profiles.js

@@ -0,0 +1 @@
+var I=Object.defineProperty;var i=(t,e)=>I(t,"name",{value:e,configurable:!0});import{assertLaunchKind as v}from"../../../core/runtime/launch-target.js";import{listNodesByProfile as h,shiftProfileNodeDeadlines as T}from"../../../core/canvas/canvas.js";import{liveExecutionForNode as k}from"../../../core/canvas/executions.js";import{shiftAutoBackgroundBashDeadlines as D}from"../../../core/bash-jobs.js";import{contextDir as q}from"../../../core/canvas/node-agent-paths.js";import{boundFleet as N}from"../../../core/runtime/fleet.js";import{recordedPidLiveness as O}from"../../../core/canvas/pid.js";import{withCanvasWrite as L}from"../../../core/canvas/db.js";import{renameProfileObject as M}from"../../../core/graph/objects.js";import{usage as l}from"../../../core/errors.js";import{ApiError as p}from"../../../api/errors.js";import{scopeAllowed as b}from"../../../core/scopes.js";import{validateEnvVarName as S}from"../../../core/env-name.js";import{listProfileEnvNames as V,removeProfileEnvVar as $,setProfileEnvVar as F}from"../../../core/profiles/env-store.js";import{listAppEnvNames as R,removeAppEnvVar as G,setAppEnvVar as U}from"../../../core/profiles/app-env-store.js";import{addProfileProject as B,assertDeliveryLimits as C,setProfileDeliveryLimit as K,assertProfileProjects as y,createProfile as P,ensureRootProfile as H,listProfiles as u,loadProfileManifest as _,pauseProfile as W,removeProfileProject as z,renameProfile as J,resumeProfile as Q,setProfileDefaultKind as X,updateProfileMetadata as Y}from"../../../core/profiles/manifest.js";import{requestProfileDeletion as Z}from"../../profile-delete.js";import{brokerSignalBus as x}from"../../broker-signals/bus.js";import{toProfileDTO as d}from"../map.js";import{resolvedScopes as ee}from"../router.js";const w="root";function m(t){return t.principal.class==="person"?"app:terminal":t.principal.app}i(m,"callerApp");function E(t,e,n=null){if(u().some(r=>r.manifest.name===e&&r.profileId!==n&&(r.manifest.grantee??"app:terminal")===t))throw new p(400,"invalid_request",`${t} already has a profile named ${e}`)}i(E,"assertNameFree");function f(t,e){const n=j(t,e),r=n.manifest.grantee??"app:terminal";if(t.principal.class!=="person"&&r!==t.principal.app)throw new p(403,"permission_error",`profile ${n.profileId} belongs to ${r}; only that app changes it`);return n}i(f,"requireOwnProfile");async function te(t){const e=t.body??{};if(typeof e.name!="string"||e.name.trim()==="")throw l("a profile name is required",{field:"name"});e.projects!==void 0&&y(e.projects);const n=m(t),r=e.name.trim();E(n,r),e.default_kind!==void 0&&await v(e.default_kind,process.cwd(),null);const o=P(r,e.projects??[],{defaultKind:e.default_kind,metadata:e.metadata,grantee:n});return{status:201,body:d(o)}}i(te,"handleCreate");function re(t,e){const n=e.trim();if(n==="")throw l("profile name must not be empty");return L(r=>(M(r,t,n),J(t,n)))}i(re,"renameProfileAndHandle");async function ne(t){const{profileId:e,manifest:n}=f(t,t.params.name),r=t.body??{};return r.name!==void 0&&E(n.grantee??"app:terminal",r.name.trim(),e),r.default_kind!==void 0&&await v(r.default_kind,process.cwd(),e),r.add_project!==void 0&&y([r.add_project]),r.set_delivery_limit!==void 0&&C({[r.set_delivery_limit.owner]:r.set_delivery_limit.level}),r.name!==void 0&&re(e,r.name),r.default_kind!==void 0&&X(e,r.default_kind),r.add_project!==void 0&&B(e,r.add_project.path),r.set_delivery_limit!==void 0&&K(e,r.set_delivery_limit.owner,r.set_delivery_limit.level),r.remove_project!==void 0&&z(e,r.remove_project),{status:200,body:d(_(e))}}i(ne,"handleUpdate");function ae(t){const{profileId:e}=f(t,t.params.name);return{status:200,body:{profile_id:e,names:V(e)}}}i(ae,"handleEnvList");function c(t){const e=t.params.var,n=S(e);if(!n.isValid)throw l(`invalid env var name: ${n.errors.join("; ")}`,{field:"name",received:e});return e}i(c,"requireEnvVarName");function ie(t){const{profileId:e}=f(t,t.params.name),n=c(t),{value:r}=t.body??{};if(typeof r!="string"||r==="")throw l("a non-empty env value is required",{field:"value"});return{status:200,body:{profile_id:e,changed:F(e,n,r)}}}i(ie,"handleEnvSet");function oe(t){const{profileId:e}=f(t,t.params.name),n=c(t);return{status:200,body:{profile_id:e,changed:$(e,n)}}}i(oe,"handleEnvRemove");async function se(t){const e=t.params.name,n=t.body??{};n.projects!==void 0&&y(n.projects);const r=m(t);if(e===w&&r==="app:terminal")return{status:200,body:d(H())};if(e===w)throw new p(403,"permission_error","root belongs to the terminal app");const o=u().find(s=>s.manifest.name===e&&(s.manifest.grantee??"app:terminal")===r);if(o!==void 0)return{status:200,body:d(o)};n.default_kind!==void 0&&await v(n.default_kind,process.cwd(),null);const a=P(e,n.projects??[],{defaultKind:n.default_kind,metadata:n.metadata,grantee:r});return{status:200,body:d(a)}}i(se,"handleEnsure");function de(t){const e=f(t,t.params.name),n=t.body??{};if(typeof n!="object"||n===null||Array.isArray(n))throw l("profile metadata body must be an object",{field:"body"});const r=n,o=r.unset===void 0?[]:r.unset;if(!Array.isArray(o)||o.some(A=>typeof A!="string"))throw l("profile metadata `unset` must be an array of strings",{field:"unset"});const a=r.set===void 0?{}:r.set,s=Y(e.profileId,a,o);return{status:200,body:d(s)}}i(de,"handleSetMetadata");function le(t){const e=_(t.params.name),n=W(e.profileId),r=h(e.profileId).filter(a=>a.status==="active"||a.status==="idle");if(r.length===0)return{status:200,body:{profile_id:e.profileId,paused_at:n.manifest.paused_at}};const o=N();for(const a of r){const s=o.get(a.node_id);if(s!==void 0){o.interruptForProfilePause(a.node_id,s.pid);continue}a.pi_pid!=null&&O(a.pi_pid,a.pi_pid_identity)==="alive"&&o.interruptForProfilePause(a.node_id,a.pi_pid)}return{status:200,body:{profile_id:e.profileId,paused_at:n.manifest.paused_at}}}i(le,"handlePause");function fe(t){const e=_(t.params.name),n=Q(e.profileId);for(const r of h(e.profileId))(r.status==="active"||r.status==="idle"||k(r.node_id)!==null)&&x.markMail(r.node_id);if(n.pausedAt!==null){const r=Date.parse(n.pausedAt);if(!Number.isNaN(r)){const o=Math.max(0,Date.now()-r);T(e.profileId,o);for(const a of h(e.profileId))a.status!=="dead"&&D(q(a.node_id),o)}}return{status:200,body:{profile_id:e.profileId,paused_at:n.manifest.paused_at}}}i(fe,"handleResume");function g(t){const e=t.principal;if(e.class==="person")return u();const n=ee(e);return u().filter(({profileId:r,manifest:o})=>{const a=o.grantee??"app:terminal";if(a===e.app)return!0;const s=`crtr:memory:rw:${a}:profile:${r}`;return b(n,s)&&(e.class!=="broker"||b(e.scopes,s))})}i(g,"visibleProfiles");function j(t,e){const n=g(t),r=n.find(({profileId:a})=>a===e),o=r?[r]:n.filter(({manifest:a})=>a.name===e);if(o.length===0)throw new p(404,"not_found","profile not found");if(o.length>1)throw new p(400,"ambiguous","profile name matches multiple visible profiles; use an exact id");return o[0]}i(j,"requireUsableProfile");function pe(t){return{status:200,body:g(t).map(d)}}i(pe,"handleList");function me(t){return{status:200,body:d(j(t,t.params.name))}}i(me,"handleGet");async function ue(t){return Z(f(t,t.params.name).profileId,t.body)}i(ue,"handleDelete");const Se=[{method:"GET",pattern:"/v1/apps/self/env",handler:i(t=>({status:200,body:{names:R(m(t))}}),"handler")},{method:"PUT",pattern:"/v1/apps/self/env/:var",handler:i(t=>{const e=c(t),{value:n}=t.body??{};if(typeof n!="string"||!n)throw l("a non-empty env value is required",{field:"value"});return{status:200,body:{changed:U(m(t),e,n)}}},"handler")},{method:"DELETE",pattern:"/v1/apps/self/env/:var",handler:i(t=>({status:200,body:{changed:G(m(t),c(t))}}),"handler")},{method:"PUT",pattern:"/v1/profiles/:name",handler:se},{method:"POST",pattern:"/v1/profiles/:name/pause",ownerOnly:!0,handler:le},{method:"POST",pattern:"/v1/profiles/:name/resume",ownerOnly:!0,handler:fe},{method:"PATCH",pattern:"/v1/profiles/:name/metadata",handler:de},{method:"POST",pattern:"/v1/profiles",handler:te},{method:"PATCH",pattern:"/v1/profiles/:name",handler:ne},{method:"GET",pattern:"/v1/profiles/:name/env",handler:ae},{method:"PUT",pattern:"/v1/profiles/:name/env/:var",handler:ie},{method:"DELETE",pattern:"/v1/profiles/:name/env/:var",handler:oe},{method:"DELETE",pattern:"/v1/profiles/:name",handler:ue},{method:"GET",pattern:"/v1/profiles",handler:pe},{method:"GET",pattern:"/v1/profiles/:name",handler:me}];export{Se as profileRoutes,re as renameProfileAndHandle,j as requireUsableProfile};

package/dist/daemon/api/handlers/prospective-chat-inventory.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const prospectiveChatInventoryRoutes: RouteTable;

package/dist/daemon/api/handlers/prospective-chat-inventory.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var a=(e,n)=>u(e,"name",{value:n,configurable:!0});import{ApiError as m}from"../../../api/errors.js";import{usage as p}from"../../../core/errors.js";import{resolveLaunchTarget as y}from"../../../core/runtime/launch-target.js";import{runProspectiveInventory as h}from"../../../core/runtime/prospective-inventory.js";const c=new Map;function l(e,n){const o=e.query.getAll(n);if(o.length>1)throw p(`${n} must appear at most once`);return o[0]}a(l,"singleQueryValue");async function w(e){for(const[s]of e.query)if(s!=="profile"&&s!=="cwd"&&s!=="kind")throw p(`unknown prospective inventory query parameter: ${s}`);const n=l(e,"profile"),o=l(e,"cwd"),i=l(e,"kind");if(i!==void 0&&i.trim()==="")throw p("kind must be a non-empty string when provided");const t=await y({root:!0,...n!==void 0?{profile:n}:{},...o!==void 0?{cwd:o}:{},...i!==void 0?{kind:i}:{}},{readOnlyProfileSelection:!0}),d=JSON.stringify([t.profileId,t.cwd,t.kind]);let r=c.get(d);r===void 0&&(r=h({cwd:t.cwd,profileId:t.profileId,extensions:t.launch.extensions}),c.set(d,r),r.finally(()=>{c.get(d)===r&&c.delete(d)}).catch(()=>{}));let f;try{f=await r}catch{throw new m(503,"preflight_failed","prospective chat inventory preflight failed")}return{status:200,body:{profile_id:t.profileId,cwd:t.cwd,commands:f.commands,memory_refs:f.memory_refs}}}a(w,"handleGet");const q=[{method:"GET",pattern:"/v1/prospective-chat-inventory",handler:w}];export{q as prospectiveChatInventoryRoutes};

package/dist/daemon/api/handlers/providers.d.ts

@@ -0,0 +1,70 @@
+import type { ServerResponse } from 'node:http';
+import { type RequestPrincipal, type RouteTable } from '../router.js';
+import type { AppPrincipal } from '../principal.js';
+export declare const PROVIDER_OPERATIONS: Set<string>;
+/** Who is calling, normalized across listeners. `resolved` is the caller's
+ *  resolved scope set read at call time (the grant mirror, so a grant sync
+ *  changes the answer for a running broker, D3-TOK-21); `null` = the person,
+ *  who holds every group (contract 1 OWN-4). `nodeScopes` is a broker node's
+ *  own narrowing list (`null` = none). */
+export interface ProviderCaller {
+    class: 'person' | 'app' | 'broker';
+    /** The user on whose behalf; `null` for a person on the socket (R2 resolves it). */
+    sub: string | null;
+    grantee: string | null;
+    client_id: string | null;
+    resolved: readonly string[] | null;
+    nodeScopes: readonly string[] | null;
+    run_id: string | null;
+    node_id: string | null;
+}
+export declare function callerFromRequest(principal: RequestPrincipal): ProviderCaller;
+export declare function callerFromApp(principal: AppPrincipal): ProviderCaller;
+/** Does the caller hold `<provider>:<group>`? Both the resolved set and a
+ *  broker's node list must cover it. */
+export declare function callerAllows(caller: ProviderCaller, scope: string): boolean;
+/** Throws `scope_missing` naming `<provider>:<group>` unless the caller holds it (D2-PRV-10). */
+export declare function requireGroup(caller: ProviderCaller, provider: string, group: string): void;
+/** v0 = no directory configured: both rows answer `not_found` (D3-V0-1). */
+export declare function providerOperationsEnabled(): boolean;
+export interface ProviderCallInput {
+    provider: string;
+    tool: string;
+    arguments: Record<string, unknown>;
+    version?: number;
+    /** Outside a run, the answered approval question the repeat names (R5). */
+    approval?: string;
+}
+export declare function parseProvider(value: unknown): string;
+export declare function parseCallInput(body: unknown): ProviderCallInput;
+/** Per-request context the call path needs: the audit `request_id` (also the
+ *  `Crtr-Request-Id` a provider receives) and the signal that aborts the call
+ *  when the caller's socket closes (R9). */
+export interface ProviderRequest {
+    requestId: string;
+    signal: AbortSignal;
+}
+export interface ProviderInput {
+    params: Record<string, string>;
+    body: unknown;
+    query?: URLSearchParams;
+}
+/** Dispatch one provider operation. Throws `ProviderError`/`RunError`; the listener renders it with `providerErrorBody`. */
+export declare function handleProviderOperation(name: string, caller: ProviderCaller, input: ProviderInput, request: ProviderRequest): Promise<{
+    status: number;
+    body: unknown;
+}>;
+/** An `AbortController` tied to the response: closing the caller's socket aborts the call. */
+export declare function abortOnClose(res: ServerResponse): {
+    signal: AbortSignal;
+    release: () => void;
+};
+/** Render a thrown value as the contract-2 envelope; a non-`RunError` is logged as a 500.
+ *  `directoryCaller`: true on the app listener (a directory-token caller), false on the socket. */
+export declare function providerFailure(error: unknown, requestId: string, directoryCaller: boolean, runId?: string | null): {
+    status: number;
+    body: unknown;
+    headers: Record<string, string>;
+};
+/** Socket routes (person, broker). The router has already checked the caller class. */
+export declare const providerRoutes: RouteTable;

package/dist/daemon/api/handlers/providers.js

@@ -0,0 +1 @@
+var A=Object.defineProperty;var s=(e,r)=>A(e,"name",{value:r,configurable:!0});import{randomUUID as E}from"node:crypto";import{readConfig as P}from"../../../core/config.js";import{activeGrantForApp as I,allGrants as h}from"../../../core/grants/mirror.js";import{getNode as R}from"../../../core/canvas/canvas.js";import{scopeAllowed as O}from"../../../core/scopes.js";import{ProviderError as u,providerErrorBody as $,scopeMissing as q}from"../../../core/providers/errors.js";import{callProvider as x,providerTools as G}from"../../../core/providers/call.js";import{providerIdsFromGrants as N,providerInstallState as T}from"../../../core/providers/bundles.js";import{listInstalledPlugins as F}from"../../../core/resolver.js";import{listAudit as j,writeProviderAudit as C}from"../../../core/providers/audit.js";import{emitEvent as g}from"../../../core/events/emit.js";import{resolvedScopes as D}from"../router.js";const fe=new Set(["provider.tools","provider.call","audit.list"]);function M(e){if(e.class==="person")return{class:"person",sub:null,grantee:null,client_id:null,resolved:null,nodeScopes:null,run_id:null,node_id:null};if(e.class==="app"){const r=I(e.app);if(!r)throw new u("grant_revoked",`app ${e.app} has no active grant`);return{class:"app",sub:r.sub,grantee:e.app,client_id:null,resolved:r.resolved,nodeScopes:e.scopes,run_id:null,node_id:null}}return{class:"broker",sub:e.sub,grantee:e.app,client_id:e.client_id,resolved:D(e),nodeScopes:e.scopes,run_id:e.run??R(e.node)?.run_id??null,node_id:e.node}}s(M,"callerFromRequest");function pe(e){return{class:"app",sub:e.sub,grantee:e.grantee,client_id:e.client_id,resolved:e.resolved,nodeScopes:null,run_id:null,node_id:null}}s(pe,"callerFromApp");const U=/^([A-Za-z0-9_-]{1,64}):([A-Za-z0-9_-]{1,64})$/;function k(e){const r=U.exec(e);return r!==null&&r[1]!=="crtr"}s(k,"isProviderScope");const w=new WeakMap;function z(e){let r=w.get(e);return r===void 0&&(r=new Set(e),w.set(e,r)),r}s(z,"heldSet");function _(e,r){return e===null?!0:k(r)?z(e).has(r):O(e,r)}s(_,"holds");function y(e,r){return e.class==="person"?!0:_(e.resolved??[],r)&&_(e.nodeScopes,r)}s(y,"callerAllows");function ce(e,r,t){const n=`${r}:${t}`;if(!y(e,n))throw q(n)}s(ce,"requireGroup");function L(){return!!P("user").runtime?.issuer}s(L,"providerOperationsEnabled");const V=/^[A-Za-z0-9_-]{1,64}$/;function c(e,r){return new u("invalid_request",e,{param:r})}s(c,"invalid");function S(e){if(typeof e!="string"||!V.test(e)||e==="crtr")throw c("provider must be a provider id","provider");return e}s(S,"parseProvider");function Z(e){if(!e||typeof e!="object"||Array.isArray(e))throw new u("invalid_request","a JSON object is required");const r=e,t=S(r.provider),n=r.tool;if(typeof n!="string"||!n.trim())throw c("tool must be a non-empty string","tool");const i=r.arguments??{};if(!i||typeof i!="object"||Array.isArray(i))throw c("arguments must be an object","arguments");const d=r.version;if(d!==void 0&&(typeof d!="number"||!Number.isInteger(d)||d<1))throw c("version must be an integer >= 1","version");const o=r.approval;if(o!==void 0&&(typeof o!="string"||!o))throw c("approval must be a question id","approval");return{provider:t,tool:n.trim(),arguments:i,...d===void 0?{}:{version:d},...o===void 0?{}:{approval:o}}}s(Z,"parseCallInput");function B(e,r=new URLSearchParams){const t=s((o,f,p)=>{const l=r.get(o);if(l===null)return f;if(!/^\d+$/.test(l)||Number(l)>p||Number(l)<1)throw c(`invalid ${o}`,o);return Number(l)},"numeric"),n=r.has("after")?t("after",0,Number.MAX_SAFE_INTEGER):void 0,i=t("limit",100,1e3),d=Object.fromEntries(["operation","outcome","run_id","since","until"].filter(o=>r.has(o)).map(o=>[o,r.get(o)]));return{status:200,body:j(e.class==="person"?null:e.grantee,{after:n,limit:i,...d})}}s(B,"auditList");async function H(e,r,t){const n=performance.now(),i=new Set(F("user").filter(a=>a.enabled&&a.manifest.provider?.id===a.name).map(a=>a.name)),d=N(h()),o=[...new Set([...i,...d])].sort();if(r!==void 0&&!o.includes(r))throw new u("not_found",`provider "${r}" is not available`);const f=r===void 0?o:[r],p=e.class==="person"?h().flatMap(a=>a.status==="active"?a.resolved_scopes.map(({scope:v})=>v):[]):e.resolved??[],l=await Promise.all(f.map(async a=>{if(!p.some(m=>m.startsWith(`${a}:`)&&y(e,m)))return null;if(i.has(a)){const m=await G(e,a);return m.groups.length>0?m:null}const b=T(a);return{provider:a,display_name:a,status:b.status,...b.error?{error:b.error}:{},groups:[],commands:[]}})).then(a=>a.filter(v=>v!==null));if(g({level:"debug",event:"api.provider.tools",duration_ms:performance.now()-n,fields:{caller:e.class,provider:r??null,providers:l.length}}),r!==void 0){if(l.length===0)throw new u("not_found",`provider "${r}" is not available`);return{status:200,body:l[0]}}return{status:200,body:{providers:l}}}s(H,"providerTools");async function W(e,r,t){return x(e,r,t)}s(W,"providerCall");async function J(e,r,t,n){if(!L())throw new u("not_found","provider operations need a directory-connected runtime");if(e==="audit.list")return B(r,t.query);if(e==="provider.tools")return H(r,t.params.provider===void 0?void 0:S(t.params.provider),n);if(e==="provider.call"){let i;try{i=Z(t.body)}catch(d){const o=t.body&&typeof t.body=="object"&&!Array.isArray(t.body)?t.body:{};throw C({request_id:n.requestId,caller:r,provider:typeof o.provider=="string"?o.provider:"",tool:typeof o.tool=="string"?o.tool:"",outcome:`refused:${d instanceof u?d.code:"invalid_request"}`}),d}return W(r,i,n)}throw new u("not_found","unknown operation")}s(J,"handleProviderOperation");function X(e){const r=new AbortController,t=s(()=>{e.writableFinished||r.abort()},"abort");return e.on("close",t),{signal:r.signal,release:s(()=>e.off("close",t),"release")}}s(X,"abortOnClose");function K(e,r,t,n){const i=$(e,r,t,n??void 0);return i.status>=500&&!(e instanceof u)&&g({event:"api.provider.failed",level:"error",error:e instanceof Error?e:new Error(String(e)),fields:{request_id:r}}),i}s(K,"providerFailure");const me=[{method:"GET",pattern:"/v1/audit",name:"audit.list"},{method:"GET",pattern:"/v1/providers/tools",name:"provider.tools"},{method:"GET",pattern:"/v1/providers/:provider/tools",name:"provider.tools"},{method:"POST",pattern:"/v1/provider/call",name:"provider.call"}].map(({method:e,pattern:r,name:t})=>({method:e,pattern:r,handler:s(async n=>{const i=E(),{signal:d,release:o}=X(n.res);let f=null;try{return f=M(n.principal),{...await J(t,f,{params:n.params,body:n.body,query:new URL(n.req.url??"/","http://runtime.local").searchParams},{requestId:i,signal:d}),headers:{"Request-Id":i}}}catch(p){return K(p,i,!1,f?.run_id)}finally{o()}},"handler")}));export{fe as PROVIDER_OPERATIONS,X as abortOnClose,y as callerAllows,pe as callerFromApp,M as callerFromRequest,J as handleProviderOperation,Z as parseCallInput,S as parseProvider,K as providerFailure,L as providerOperationsEnabled,me as providerRoutes,ce as requireGroup};

package/dist/daemon/api/handlers/questions.d.ts

@@ -0,0 +1,7 @@
+import type { AppPrincipal } from '../principal.js';
+export declare const QUESTION_OPERATIONS: Set<string>;
+/** `question.get` / `question.answer` (daemon-operations §question.*) for an app caller. */
+export declare function handleQuestionOperation(name: string, caller: AppPrincipal, questionId: string, body: unknown): Promise<{
+    status: number;
+    body: unknown;
+}>;

package/dist/daemon/api/handlers/questions.js

@@ -0,0 +1 @@
+var g=Object.defineProperty;var o=(e,t)=>g(e,"name",{value:t,configurable:!0});import{validatePageTicketResponses as h}from"../../../core/human/tickets.js";import{getRequest as y}from"../../../core/human/requests.js";import{RunError as a}from"../../../core/runs/operations.js";import{getQuestion as _,questionObject as b,questionResult as v,questionStatus as d}from"../../../core/runs/questions.js";import{answerPageTicket as R}from"../../human/finish.js";import{requireRun as A}from"../router.js";const Q=new Set(["question.get","question.answer"]),f=o(()=>new a(404,"not_found","question not found"),"missing");function l(e,t,n){const r=_(t);if(r===null)throw f();if(r.run===null){if(r.approval?.grantee!==e.grantee||r.approval.sub!==e.sub)throw f()}else try{A(e,r.run.run_id,n)}catch(s){throw s instanceof a&&s.code==="not_found"?f():s}return r}o(l,"reachable");function w(e){const t=y(e);return new a(409,"run_settled",`question ${e} is already ${d(t)}`,void 0,{state:d(t),result:v(t)})}o(w,"settled");function O(e){return/slot(?: id)? "([^"]+)"/.exec(e)?.[1]??"responses"}o(O,"slotParam");async function N(e,t,n,r){if(e==="question.get"){const{request:i,run:c,approval:q}=l(t,n,!1);return{status:200,body:b(i,c,q)}}const{request:s}=l(t,n,!0);if(s.state==="settled")throw w(n);const u=r&&typeof r=="object"&&!Array.isArray(r)?r.responses:void 0;if(!u||typeof u!="object"||Array.isArray(u))throw new a(400,"invalid_request","responses must be an object keyed by slot id","responses");try{h(s.request_dir,u)}catch(i){const c=i instanceof Error?i.message:String(i);throw new a(400,"invalid_request",c,O(c))}const p=await R(s.request_id,u,{actor:t.grantee});if(p.outcome==="already_settled")throw w(n);const m=p.result;return{status:200,body:{question_id:s.request_id,status:"answered",answer:m.responses}}}o(N,"handleQuestionOperation");export{Q as QUESTION_OPERATIONS,N as handleQuestionOperation};

package/dist/daemon/api/handlers/reports.d.ts

@@ -0,0 +1,6 @@
+import type { ReportDTO } from '../../../api/index.js';
+import type { RouteTable } from '../router.js';
+/** One node's report documents, newest first, read as the person (records nothing). This stays
+ * in the daemon so collection projections can include report activity without client-side N+1s. */
+export declare function reportsForNode(id: string): ReportDTO[];
+export declare const reportRoutes: RouteTable;

package/dist/daemon/api/handlers/reports.js

@@ -0,0 +1,18 @@
+var B=Object.defineProperty;var d=(t,e)=>B(t,"name",{value:e,configurable:!0});import{existsSync as M,rmSync as j}from"node:fs";import{getNode as a}from"../../../core/canvas/canvas.js";import{liveExecutionForNode as J}from"../../../core/canvas/executions.js";import{markStopSignal as z}from"../../../core/runtime/stop-signals.js";import{emitEvent as L}from"../../../core/events/emit.js";import{push as W,FinalizationError as S,StructuredRequestFinalizationError as H}from"../../../core/feed/feed.js";import{branchIsPushedAtCurrentTip as X,hasOpenManagedWorktree as G,missingWorktreeRecoveryHint as K}from"../../../core/worktree.js";import{autoDropCleanManagedWorktreeAsync as U}from"../../../core/worktree-mutation-async.js";import{openDb as V,withCanvasWrite as Y}from"../../../core/canvas/db.js";import{get as Q}from"../../../core/graph/bodies.js";import{heads as Z}from"../../../core/graph/documents.js";import{listObjects as ee,nodeObject as te}from"../../../core/graph/objects.js";import{readerFor as re}from"../../../core/graph/reader.js";import{notFound as ne,usage as f}from"../../../core/errors.js";import{InputError as u}from"../../../core/io.js";import{toReportResultDTO as ie}from"../map.js";import{clearSchemaReprompts as oe,outputDeclinedPath as se,stageStructuredResult as de,structuredRequestResultPath as ae,validateStructuredResult as ue}from"../../../core/runtime/structured-output.js";import{getPendingStructuredRequestForNode as _,getStructuredRequest as R,settleStructuredRequestIn as le}from"../../../core/canvas/structured-requests.js";import{ApiError as p}from"../../../api/errors.js";import{applySettlementEffects as $}from"../../structured-requests/effects.js";import{nodeEventStreams as x}from"./node-events.js";import{emitRunEvent as E}from"../../../core/runs/events.js";function g(t){const e=a(t);if(e===null)throw ne(`unknown node: ${t}`,{received:t});return e}d(g,"requireNode");function ce(t){if(typeof t!="object"||t===null)throw f("a push report requires a JSON body { tier, body }");const e=t.tier,i=t.delivery_tier,r=t.body;if(e!=="update"&&e!=="urgent"&&e!=="final")throw f(`invalid report tier: ${String(e)} (expected update|urgent|final)`);if(i!==void 0&&i!=="deferred"&&i!=="normal"&&i!=="urgent")throw f(`invalid delivery_tier: ${String(i)} (expected deferred|normal|urgent)`);if(e!=="update"&&i!==void 0)throw f("delivery_tier is only valid for update reports");if(typeof r!="string"||r.trim()==="")throw f("a push report requires a non-empty body");return{tier:e,...i===void 0?{}:{delivery_tier:i},body:r}}d(ce,"parsePushBody");async function fe(t){const e=t.params.id;g(e);const i=ce(t.body);if(i.tier==="final"&&_(e)!==null)throw new u({error:"structured_result_pending",message:"This node owes a structured result \u2014 a plain `push final` would finish it without recording one.",next:'Submit the result with the `submit_result` tool instead (or `crtr push result`); it validates against the pending schema, records it, and pushes the final report for you. If the schema cannot be honestly satisfied, call `submit_result` with `decline` (or `crtr push result --decline "<reason>" --code <token>`) to record the decline and finish the node.'});const r=i.tier==="final"?a(e)?.status:void 0,n=i.tier==="final"?await O(e):void 0,o=await b(e,i);i.tier==="final"&&A(e);const s=i.tier==="final"&&r!==void 0?{from:r,to:a(e)?.status??"done"}:void 0,m=ie(o,s,n),l=q(e).find(c=>c.id===o.reportId);if(l!==void 0){x.report(e,l);const c=a(e)?.run_id;c&&E(c,e,"node.report.pushed",{body:l.body,kind:l.tier==="final"?"final":"update"})}return{status:200,body:m}}d(fe,"handlePush");async function O(t){if(!G(a(t)))return;const e=await U(t);if(e!==null)return e.worktree_path;if(!await X(a(t).managed_worktree))throw new u({error:"open_managed_worktree",message:"This node still owns an open managed worktree that is neither clean and locally landed nor clean with its exact tip on origin \u2014 `push final` cannot finish.",next:(()=>{const i=a(t)?.managed_worktree;return i!=null&&i.state==="open"&&!M(i.path)?K(i):"Make the recorded worktree clean, including untracked files: commit work to retain and remove or ignore only disposable generated files. With its recorded branch checked out and no rebase in progress, push its current tip to a branch on origin, then rerun `crtr push final`; or run `crtr node worktree close` to land the clean worktree into its recorded local base."})()})}d(O,"guardFinalWorktree");const I=2e3;function me(t,e){const i=JSON.stringify(e,null,2),r=i.length>I?`${i.slice(0,I)}
+\u2026 (truncated \u2014 the full result is at the result path above)`:i;return`Structured output submitted.
+
+Result path: ${t}
+
+\`\`\`json
+${r}
+\`\`\`
+`}d(me,"submitReportBody");function he(t,e){return`Structured result declined.
+
+Reason: ${e.reason}
+Code: ${e.code}
+Retryable: ${e.retryable?"yes":"no"}
+
+Declined marker: ${t}
+`}d(he,"declineReportBody");const N=1024,T=64;function pe(t,e){if(typeof t!="object"||t===null)throw f("a result submission requires a JSON body { value } or { decline, code, retryable }");const i=t.request_id;if(typeof i!="string"||i.trim()===""){const o=_(e);throw new u({error:"request_id_required",message:`a structured result requires request_id${o===null?"":` (pending request: ${o.request_id})`}`,next:"Pass `--request <request-id>` exactly as named in the structured-output instruction."})}const r=Object.hasOwn(t,"value"),n=Object.hasOwn(t,"decline");if(r&&n)throw f("a result submission carries either { value } or { decline, code, retryable }, not both");if(n){const{decline:o,code:s,retryable:m}=t;if(typeof o!="string"||o.trim()==="")throw new u({error:"missing_decline_reason",message:"A decline needs a reason.",next:'Rerun with `--decline "<one sentence on why the schema cannot be honestly satisfied>" --code <token>`.'});if(o.length>N)throw new u({error:"decline_reason_too_long",message:`A decline reason is at most ${N} characters (got ${o.length}).`,next:"Keep the reason to one plain sentence; put any detail in an artifact and name its path."});if(typeof s!="string"||s.trim()===""||/\s/.test(s.trim())||s.trim().length>T)throw new u({error:"invalid_decline_code",message:`A decline needs a code: one whitespace-free token of at most ${T} characters naming the decline class.`,next:"Rerun with `--code <token>` \u2014 the token your requester documented for this case."});if(typeof m!="boolean")throw f("a decline carries `retryable` as a boolean");return{requestId:i.trim(),declined:{reason:o.trim(),code:s.trim(),retryable:m}}}if(!r)throw f("a result submission requires a JSON body { value } or { decline, code, retryable }");return{requestId:i.trim(),value:t.value}}d(pe,"parseSubmitBody");const we=1024*1024;async function ye(t){const e=t.params.id,i=g(e);_(e)!==null&&oe(e);const r=pe(t.body,e),n=R(r.requestId);if(n===null||n.node_id!==e)throw new p(404,"structured_request_not_found","the named structured request does not belong to this node");if(n.state!=="pending")throw new p(409,n.state==="expired"?"structured_request_expired":"structured_request_settled",`structured request ${n.request_id} is already ${n.state}`);let o;if("value"in r){if(Buffer.byteLength(JSON.stringify(r.value)??"")>we)throw new u({error:"result_too_large",message:"the submitted result is over 1 MiB serialized; nothing was recorded.",next:"Submit a smaller result \u2014 write bulky content to a file and put its path in the result."});try{o=await ue(n.schema,r.value)}catch(c){throw new u({error:"result_schema_mismatch",message:`the submitted result does not match the requested schema: ${c.message}`,next:'Fix the listed fields and submit again; if the schema cannot be honestly satisfied, decline it (`submit_result` with `decline`, or `crtr push result --decline "<reason>" --code <token>`).'})}}const s="declined"in r?se(e,i.grantee):ae(e,n.request_id,n.submission,i.grantee),m="declined"in r?he(s,r.declined):me(s,o),l="value"in r?de(e,n.request_id,n.submission,o,i.grantee):void 0;try{if(n.submission==="oneoff"){const h=Y(D=>le(D,n.request_id,"declined"in r?{intended:"declined",declined:r.declined}:{intended:"completed",result:o}));if(!h.changed||h.row===null||h.row.state!=="completed"&&h.row.state!=="declined")throw new p(409,h.row?.state==="expired"?"structured_request_expired":"structured_request_settled",`structured request ${n.request_id} is already ${h.row?.state??"settled"}`);await $(h.row,l);const y=await b(e,{tier:"update",body:m},void 0,{requestMessageId:n.request_message_id});return P(e,y.reportId),{status:200,body:{mode:n.submission,result_path:s,report:y.report,notified:[...y.deliveredTo],..."declined"in r?{declined:r.declined}:{}}}}const c=a(e)?.status,v=await O(e),F="declined"in r?{kind:"failure",reason:"declined",detailJson:JSON.stringify({schema:"crtr.node-outcome-detail/v1",message:r.declined.reason,declined:r.declined}),structured:{requestId:n.request_id,declined:r.declined,skipEffects:!0}}:{structured:{requestId:n.request_id,value:o,skipEffects:!0}},w=await b(e,{tier:"final",body:m},F);A(e);const C=R(n.request_id);await $(C,l),P(e,w.reportId);const k=c===void 0?void 0:{from:c,to:a(e)?.status??"done"};return{status:200,body:{mode:n.submission,result_path:s,report:w.report,notified:[...w.deliveredTo],..."declined"in r?{declined:r.declined}:{},...k===void 0?{}:{transitioned:k},...v===void 0?{}:{worktree_auto_dropped:!0,worktree_auto_dropped_path:v}}}}finally{l!==void 0&&j(l.tmpPath,{force:!0})}}d(ye,"handleSubmitResult");function P(t,e){const i=q(t).find(n=>n.id===e);if(i===void 0)return;x.report(t,i);const r=a(t)?.run_id;r&&E(r,t,"node.report.pushed",{body:i.body,kind:i.tier==="final"?"final":"update"})}d(P,"emitReportEvents");function A(t){try{const e=J(t);e!==null&&z(t,"pushedFinal",e.executionId)}catch(e){try{L({event:"daemon.node.final-marker.failed",level:"error",node_id:t,error:e})||process.stderr.write(`final marker failed for ${t}: ${String(e)}
+`)}catch{process.stderr.write(`final marker failed for ${t}: ${String(e)}
+`)}}}d(A,"markCommittedFinal");async function b(t,e,i,r){try{return await W(t,{kind:e.tier,body:e.body,...e.delivery_tier===void 0?{}:{deliveryTier:e.delivery_tier},...i===void 0?{}:{outcome:i},...r===void 0?{}:{result:r}})}catch(n){throw n instanceof H?new p(409,n.message,n.message==="structured_request_expired"?"the named structured request expired before this submission committed":"the named structured request is already settled"):n instanceof S&&n.code==="already_finalized"?new u({error:"already_finalized",message:"This node already submitted its canonical final result.",next:"Push an update with the new information, then stop."}):n instanceof S&&n.code==="finalization_forbidden"?new u({error:"finalization_forbidden",message:"A canceled or dead node cannot submit a canonical final result.",next:"Do not push final from this node."}):n}}d(b,"pushOrRethrow");function q(t){const e=V();return ee(e,re(e,{class:"person"},()=>[]),{type:"document",kind:"report",owner:te(e,t)}).map(r=>{const n=r.name.match(/-(update|urgent|final)$/)?.[1]??"update",o=Z(e,r)[0];return{name:r.name,id:r.id,tier:n,body:o===void 0?"":Q(o.body_hash).trim(),created:r.created_at}}).sort((r,n)=>r.created<n.created?1:r.created>n.created?-1:n.name.localeCompare(r.name))}d(q,"reportsForNode");function _e(t){const e=t.params.id;g(e);const i=t.query.get("tier"),r=t.query.get("limit"),n=r!==null?Number(r):void 0;let o=q(e);return i!==null&&(o=o.filter(s=>s.tier===i)),n!==void 0&&Number.isFinite(n)&&n>=0&&(o=o.slice(0,n)),{status:200,body:o}}d(_e,"handleList");const ze=[{method:"POST",pattern:"/v1/nodes/:id/reports",ownerOnly:!0,handler:fe},{method:"GET",pattern:"/v1/nodes/:id/reports",handler:_e},{method:"POST",pattern:"/v1/nodes/:id/result",handler:ye}];export{ze as reportRoutes,q as reportsForNode};

package/dist/daemon/api/handlers/review-comments.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const reviewCommentRoutes: RouteTable;

package/dist/daemon/api/handlers/review-comments.js

@@ -0,0 +1 @@
+var z=Object.defineProperty;var d=(n,t)=>z(n,"name",{value:t,configurable:!0});import{randomUUID as q}from"node:crypto";import{getNode as T}from"../../../core/canvas/canvas.js";import{isSafeNodeId as S}from"../../../core/canvas/paths.js";import{createComment as J,deleteComment as X,editComment as Y,getComment as A,listCommentEvents as Z,listComments as $,listReviewEvents as ee,reopenComment as ne,resolveComment as te}from"../../../core/review/comments.js";import{withCanvasWrite as k}from"../../../core/canvas/db.js";import{captureAnchorText as ie,requireCurrentDocumentLocked as oe}from"../../../core/review/document.js";import{forkReviewComment as re}from"../../../core/review/fork.js";import{applyRangeBatch as de}from"../../../core/review/remap.js";import{getReviewByCompanion as se,requireVisibleReview as f}from"../../../core/review/store.js";import{ReviewOperationError as v}from"../../../core/review/types.js";import{notifyComment as ce}from"../../review/comment-notify.js";import{toReviewCommentDTO as p,toReviewCommentEventDTO as x}from"../map.js";import{invalidRequest as ue,isRecord as I,objectBody as R,requireParam as D,requiredString as P}from"./validate.js";const j=/^[a-f0-9]{32}$/,L=/^[a-f0-9]{64}$/,ae=new Set(["open","resolved","deleted","all"]),me=new Set(["wake","quiet"]);function m(n){ue("review comment request",n)}d(m,"invalidRequest");function le(n,t,e){const i=n[t];if(i!==void 0){if(typeof i!="string"||!L.test(i)){e.push({field:t,problem:"must be a lowercase SHA-256 hex digest",received:i});return}return i}}d(le,"optionalSha256");function M(n,t,e){const i=n[t];if(typeof i!="string"||!L.test(i)){e.push({field:t,problem:"must be a lowercase SHA-256 hex digest",...i===void 0?{}:{received:i}});return}return i}d(M,"requiredSha256");function B(n,t){const e=n.deliver;if(e!==void 0){if(typeof e!="string"||!me.has(e)){t.push({field:"deliver",problem:"must be wake or quiet",received:e});return}return e}}d(B,"optionalDeliver");function fe(n,t){const e=n.if_revision;if(e!==void 0){if(!Number.isSafeInteger(e)||e<0){t.push({field:"if_revision",problem:"must be a non-negative safe integer",received:e});return}return e}}d(fe,"optionalRevision");function F(n,t){const e=n.actor_node_id;return e==null?{kind:"human",node_id:null}:typeof e!="string"||!S(e)?(t.push({field:"actor_node_id",problem:"must be a safe node id or null",received:e}),null):{kind:"node",node_id:e}}d(F,"actorFrom");function G(n,t,e){T(n)===null&&e.push({field:t,problem:"must name an existing node",received:n})}d(G,"requireKnownNode");function N(n,t){n.node_id!==null&&G(n.node_id,"actor_node_id",t)}d(N,"requireKnownActor");function H(n,t,e){if(!I(n)){e.push({field:t,problem:"must be an anchor object",received:n});return}const i=["line","end_line","col_start","col_end","quote"];for(const r of Object.keys(n))i.includes(r)||e.push({field:`${t}.${r}`,problem:"is not allowed",received:n[r]});const o=n.line,s=n.end_line;typeof o!="number"&&e.push({field:`${t}.line`,problem:"must be a number",...o===void 0?{}:{received:o}}),typeof s!="number"&&e.push({field:`${t}.end_line`,problem:"must be a number",...s===void 0?{}:{received:s}});for(const r of["col_start","col_end"]){const c=n[r];c!==void 0&&typeof c!="number"&&e.push({field:`${t}.${r}`,problem:"must be a number",received:c})}if(n.quote!==void 0&&typeof n.quote!="string"&&e.push({field:`${t}.quote`,problem:"must be a string",received:n.quote}),!(typeof o!="number"||typeof s!="number"))return{line:o,end_line:s,...typeof n.col_start=="number"?{col_start:n.col_start}:{},...typeof n.col_end=="number"?{col_end:n.col_end}:{},...typeof n.quote=="string"?{quote:n.quote}:{}}}d(H,"anchorFrom");function w(n,t){return D(n,"review_id","must be a safe review id",S,t)}d(w,"requireReviewId");function C(n,t){return D(n,"comment_id","must be a 32-character lowercase hexadecimal id",e=>j.test(e),t)}d(C,"requireCommentId");function b(n){const t=f(n);if(t.state!=="open")throw new v("review_terminal","review already has a terminal outcome",{state:t.state,requested:"comment",review:t});return t}d(b,"requireOpenReview");function U(n){const t=n===null?void 0:T(n)?.review_binding?.review_id,e=n===null?null:se(n)??(t===void 0?null:f(t));if(e===null||e.state!=="open")throw new v("review_required","an open review is required when no review id is supplied",{actor_node_id:n});return e}d(U,"requireCompanionReview");function he(n){return{comment:p(n),events:Z(n.comment_id).map(x)}}d(he,"toDetail");function _e(n,t){return{attempted:!0,target_node_id:n.companion_node_id,status:"failed",woke:!1,error:t instanceof Error?t.message:String(t)}}d(_e,"deliveryFailure");async function V(n){if(!n.changed)return{comment:p(n.comment),changed:!1};let t;try{t=await ce({review:n.review,comment:n.comment,verb:n.verb,actor_node_id:n.actor.node_id,deliver:n.deliver,operation_id:n.operationId})}catch(e){t=_e(n.review,e)}return{comment:p(n.comment),changed:!0,delivery:t}}d(V,"mutationResult");function ve(n,t){const e=[],i=R(n.body,["text","anchor","doc_hash","actor_node_id","deliver"],e),o=t==="review"?(()=>{const a=w(n,e);return a===void 0?void 0:{kind:"review",review_id:a}})():{kind:"self"},s=P(i,"text",e),r=H(i.anchor,"anchor",e),c=le(i,"doc_hash",e),u=F(i,e),h=B(i,e);return u!==null&&N(u,e),(e.length>0||o===void 0||s===void 0||r===void 0||u===null)&&m(e),{selector:o,text:s,anchor:r,...c===void 0?{}:{doc_hash:c},actor:u,...h===void 0?{}:{deliver:h}}}d(ve,"parseCreate");function pe(n,t){const e=[],i=R(n.body,t?["text","actor_node_id","deliver","if_revision"]:["actor_node_id","deliver","if_revision"],e),o=C(n,e),s=t?P(i,"text",e):void 0,r=F(i,e),c=B(i,e),u=fe(i,e);return r!==null&&N(r,e),(e.length>0||o===void 0||r===null||t&&s===void 0)&&m(e),{comment_id:o,...s===void 0?{}:{text:s},actor:r,...c===void 0?{}:{deliver:c},...u===void 0?{}:{if_revision:u}}}d(pe,"parseAction");function we(n){const t=[],e=R(n.body,["from_doc_hash","to_doc_hash","entries"],t),i=w(n,t),o=M(e,"from_doc_hash",t),s=M(e,"to_doc_hash",t),r=e.entries,c=[];return Array.isArray(r)?r.forEach((u,h)=>{const a=`entries[${h}]`;if(!I(u)){t.push({field:a,problem:"must be an object",received:u});return}for(const g of Object.keys(u))["comment_id","anchor","detached"].includes(g)||t.push({field:`${a}.${g}`,problem:"is not allowed",received:u[g]});const l=u.comment_id;if(typeof l!="string"||!j.test(l)){t.push({field:`${a}.comment_id`,problem:"must be a 32-character lowercase hexadecimal id",received:l});return}const W=u.anchor!==void 0,_=u.detached;_!==void 0&&_!==!0&&t.push({field:`${a}.detached`,problem:"must be true when present",received:_});const E=_===!0;if(W===E){t.push({field:a,problem:"must provide exactly one of anchor or detached: true"});return}if(E){c.push({comment_id:l,detached:!0});return}const O=H(u.anchor,`${a}.anchor`,t);O!==void 0&&c.push({comment_id:l,anchor:O})}):t.push({field:"entries",problem:"must be an array",received:r}),(t.length>0||i===void 0||o===void 0||s===void 0||!Array.isArray(r))&&m(t),{review_id:i,request:{from_doc_hash:o,to_doc_hash:s,entries:c}}}d(we,"parseRangeBatch");function be(n,t,e){for(const[r,c]of n.query)r!=="status"&&(r!=="actor_node_id"||t!=="self")&&e.push({field:r,problem:"is not allowed",received:c});const i=n.query.getAll("status");(i.length>1||i.length===1&&!ae.has(i[0]))&&e.push({field:"status",problem:"must be open, resolved, deleted, or all",received:i.length>1?i:i[0]});const o=n.query.getAll("actor_node_id");let s=null;if(o.length>1)e.push({field:"actor_node_id",problem:"must appear at most once",received:o});else if(o.length===1){const r=o[0];S(r)?(s=r,G(r,"actor_node_id",e)):e.push({field:"actor_node_id",problem:"must be a safe node id",received:r})}return{...i.length===0?{}:{status:i[0]},actor_node_id:s}}d(be,"parseListQuery");function ye(n,t){const e={};for(const[i,o]of n.query)i!=="since_seq"&&i!=="limit"&&t.push({field:i,problem:"is not allowed",received:o});for(const i of["since_seq","limit"]){const o=n.query.getAll(i);if(o.length>1){t.push({field:i,problem:"must appear at most once",received:o});continue}if(o.length===0)continue;const s=o[0],r=Number(s);if(!Number.isSafeInteger(r)||r<0||String(r)!==s){t.push({field:i,problem:"must be a non-negative safe integer",received:s});continue}e[i]=r}return e.limit!==void 0&&e.limit<1&&t.push({field:"limit",problem:"must be at least 1",received:e.limit}),e}d(ye,"parseEventQuery");async function Q(n,t){const e=ve(n,t),i=q(),o=k(s=>{const r=e.selector.kind==="review"?b(e.selector.review_id):b(U(e.actor.node_id).review_id),c=oe(s,r.review_id,e.doc_hash??r.anchor_base_sha256),u=J({review_id:r.review_id,text:e.text,anchor:e.anchor,line_text:ie(c.lines,e.anchor),doc_hash:c.sha256,actor:e.actor,operation_id:i});return{review:r,mutation:u}});return{status:200,body:await V({review:o.review,...o.mutation,verb:"create",actor:e.actor,deliver:e.deliver,operationId:i})}}d(Q,"handleCreate");function K(n,t){const e=[],i=t==="review"?(()=>{const c=w(n,e);return c===void 0?void 0:{kind:"review",review_id:c}})():{kind:"self"},o=be(n,t,e);(e.length>0||i===void 0)&&m(e);const s=i.kind==="review"?f(i.review_id):U(o.actor_node_id);return{status:200,body:{review_id:s.review_id,comments:$(s.review_id,o).map(p)}}}d(K,"handleList");function ge(n){const t=[],e=w(n,t),i=ye(n,t);(t.length>0||e===void 0)&&m(t);const o=f(e),s=ee(o.review_id,i);return{status:200,body:{review_id:o.review_id,events:s.events.map(x),next_since_seq:s.events.length===0?null:s.next_since_seq}}}d(ge,"handleEvents");function qe(n){const{review_id:t,request:e}=we(n),i=q(),o=k(()=>{const r=b(t),c=$(r.review_id).length,u=de({review_id:r.review_id,...e,actor:{kind:"human",node_id:null},operation_id:i});return{review:r,nondeleted:c,applied:u}});return{status:200,body:{review_id:o.review.review_id,anchor_base_sha256:o.applied.anchor_base_sha256,updated:o.applied.updated,detached:o.applied.detached,unchanged:o.nondeleted-o.applied.updated}}}d(qe,"handleRanges");function Se(n){const t=[],e=C(n,t);(t.length>0||e===void 0)&&m(t);const i=A(e);if(i===null)throw new v("unknown_comment","comment was not found",{received:e});return f(i.review_id),{status:200,body:he(i)}}d(Se,"handleDetail");async function y(n,t){const e=pe(n,t==="edit"),i=q(),o=k(()=>{const s=A(e.comment_id);if(s===null)throw new v("unknown_comment","comment was not found",{received:e.comment_id});const r=b(s.review_id),c=t==="edit"?Y(e.comment_id,{text:e.text,actor:e.actor,operation_id:i,if_revision:e.if_revision}):t==="resolve"?te(e.comment_id,{actor:e.actor,operation_id:i,if_revision:e.if_revision}):t==="reopen"?ne(e.comment_id,{actor:e.actor,operation_id:i,if_revision:e.if_revision}):X(e.comment_id,{actor:e.actor,operation_id:i,if_revision:e.if_revision});return{review:r,mutation:c}});return{status:200,body:await V({review:o.review,...o.mutation,verb:t,actor:e.actor,deliver:e.deliver,operationId:i})}}d(y,"handleAction");async function ke(n){const t=[],e=C(n,t);(t.length>0||e===void 0)&&m(t);const i=await re(e);return{status:200,body:{comment_id:e,node_id:i.node_id,cwd:i.cwd}}}d(ke,"handleFork");const Be=[{method:"POST",pattern:"/v1/human/reviews/self/comments",handler:d(n=>Q(n,"self"),"handler")},{method:"GET",pattern:"/v1/human/reviews/self/comments",handler:d(n=>K(n,"self"),"handler")},{method:"POST",pattern:"/v1/human/reviews/:review_id/comments",handler:d(n=>Q(n,"review"),"handler")},{method:"GET",pattern:"/v1/human/reviews/:review_id/comments",handler:d(n=>K(n,"review"),"handler")},{method:"GET",pattern:"/v1/human/reviews/:review_id/comment-events",handler:ge},{method:"POST",pattern:"/v1/human/reviews/:review_id/comment-ranges",handler:qe},{method:"GET",pattern:"/v1/human/comments/:comment_id",handler:Se},{method:"POST",pattern:"/v1/human/comments/:comment_id/edit",handler:d(n=>y(n,"edit"),"handler")},{method:"POST",pattern:"/v1/human/comments/:comment_id/resolve",handler:d(n=>y(n,"resolve"),"handler")},{method:"POST",pattern:"/v1/human/comments/:comment_id/reopen",handler:d(n=>y(n,"reopen"),"handler")},{method:"POST",pattern:"/v1/human/comments/:comment_id/delete",handler:d(n=>y(n,"delete"),"handler")},{method:"POST",pattern:"/v1/human/comments/:comment_id/fork",handler:ke}];export{Be as reviewCommentRoutes};

package/dist/daemon/api/handlers/reviews.d.ts

@@ -0,0 +1,5 @@
+import type { CreateReviewRequest } from '../../../api/index.js';
+import { type RequestContext, type RouteTable } from '../router.js';
+/** Validate a create body. Exported for its contract test. */
+export declare function parseCreate(ctx: RequestContext): CreateReviewRequest;
+export declare const reviewRoutes: RouteTable;

package/dist/daemon/api/handlers/reviews.js

@@ -0,0 +1 @@
+var k=Object.defineProperty;var s=(t,e)=>k(t,"name",{value:e,configurable:!0});import{ApiError as m}from"../../../api/index.js";import{withCanvasWrite as R}from"../../../core/canvas/db.js";import{isSafeNodeId as p}from"../../../core/canvas/paths.js";import{readDocument as q}from"../../../core/graph/documents.js";import{getByRowid as E}from"../../../core/graph/objects.js";import{checkoutsForCwd as S}from"../../../core/graph/repo-sync/repos.js";import{getNode as b}from"../../../core/canvas/canvas.js";import{assertScope as T}from"../../../core/scopes.js";import{createReview as $}from"../../../core/review/birth.js";import{readAnchorBase as C,listReviews as D,requireVisibleReview as y}from"../../../core/review/store.js";import{cancelReview as I,submitReviewApproval as A}from"../../review/finish.js";import{toFeedbackResultDTO as O,toReviewDTO as F}from"../map.js";import{readerFor as L,resolveRef as B}from"../reader.js";import{canReadNode as N}from"../router.js";import{invalidRequest as P,objectBody as w,optionalString as c,requireParam as j,requiredString as g}from"./validate.js";const G=new Set(["open","approved","canceled"]),V=["origin_kind","origin_node_id","document","file","idempotency_key","subtitle","output_path"],W=["reason","actor","disposition"];function l(t){P("review request",t)}s(l,"invalidRequest");function h(t,e){return j(t,"review_id","must be a safe review id",p,e)}s(h,"requireReviewId");function f(t){return{...F(t,t.state==="approved"?{result_path:`${t.review_dir}/result.json`}:{}),review_dir:t.review_dir}}s(f,"toReviewResponseDTO");function K(t){const e=[],i=w(t.body,V,e),o=i.origin_kind,n=o==="ticket"||o==="inline"?o:void 0;n===void 0&&e.push({field:"origin_kind",problem:"must be ticket or inline",...o===void 0?{}:{received:o}});const r=g(i,"origin_node_id",e);r!==void 0&&!p(r)&&e.push({field:"origin_node_id",problem:"must be a safe node id",received:r});const d=c(i,"document",e),a=c(i,"file",e);n==="ticket"&&(d===void 0||a!==void 0)&&e.push({field:"document",problem:"is required for ticket reviews, and file is not allowed"}),n==="inline"&&a===void 0==(d===void 0)&&e.push({field:"file",problem:"inline reviews take exactly one of file or document"});const u=g(i,"idempotency_key",e);u!==void 0&&u.length>128&&e.push({field:"idempotency_key",problem:"must be at most 128 characters",received:u});const v=c(i,"subtitle",e),_=c(i,"output_path",e);return n==="ticket"&&v===void 0&&i.subtitle===void 0&&e.push({field:"subtitle",problem:"is required for ticket reviews"}),n==="inline"&&i.subtitle!==void 0&&e.push({field:"subtitle",problem:"is only allowed for ticket reviews",received:i.subtitle}),n==="inline"&&i.output_path!==void 0&&e.push({field:"output_path",problem:"is only allowed for ticket reviews",received:i.output_path}),(e.length>0||n===void 0||r===void 0||!p(r)||u===void 0||u.length>128)&&l(e),{origin_kind:n,origin_node_id:r,...d===void 0?{}:{document:d},...a===void 0?{}:{file:a},idempotency_key:u,...v===void 0?{}:{subtitle:v},..._===void 0?{}:{output_path:_}}}s(K,"parseCreate");function M(t){const e=[],i={},o=new Set(["state","origin_node_id","file"]);for(const[n,r]of t.query.entries())o.has(n)||e.push({field:n,problem:"is not allowed",received:r});for(const n of o){const r=t.query.getAll(n);if(r.length>1){e.push({field:n,problem:"must appear at most once",received:r});continue}const d=r[0];d!==void 0&&(n==="state"?G.has(d)?i.state=d:e.push({field:n,problem:"must be open, approved, or canceled",received:d}):n==="origin_node_id"?p(d)?i.origin_node_id=d:e.push({field:n,problem:"must be a safe node id",received:d}):d===""?e.push({field:n,problem:"must be a non-empty string",received:d}):i.file=d)}return e.length>0&&l(e),i}s(M,"parseList");function x(t,e){const i=t.body===void 0?{}:w(t.body,W,e),o=c(i,"reason",e),n=c(i,"actor",e),r=c(i,"disposition",e);return r!==void 0&&r!=="canceled"&&r!=="dismissed"&&e.push({field:"disposition",problem:'must be "canceled" or "dismissed"',received:r}),{...o===void 0?{}:{reason:o},...n===void 0?{}:{actor:n},...r==="canceled"||r==="dismissed"?{disposition:r}:{}}}s(x,"parseCancel");function z(t,e){w(t.body,[],e)}s(z,"requireEmptyBody");async function H(t){const e=K(t),i=b(e.origin_node_id);i!==null&&T(i,"crtr:act");const{document:o,file:n,...r}=e,d=await $({...r,...o===void 0?{file:n??""}:{document:J(t,o)}});return{status:200,body:f(d)}}s(H,"handleCreate");function J(t,e){return R(i=>{const o=L(i,t),n=B(i,o,e);if("remote"in n)throw new m(404,"not_found",`no document named ${n.remote} on this runtime`,{next:"Check the name with `crtr canvas search`."});if("deleted"in n)throw new m(404,"not_found",`${n.deleted.name} is deleted`,{id:n.deleted.id,deleted:!0});if(n.type!=="document")throw new m(400,"invalid_request",`${e} is a ${n.type}, not a document`);const r=q(i,o,n,u=>S(i,u));if(r.needsMerge)throw new m(409,"needs_merge",`${n.name} has ${r.heads.length} heads; merge them before a review`,{id:n.id,next:`Read it with \`crtr canvas read ${n.id}\` and write the merged body with \`crtr doc edit\`.`});const d=n.owner===null?null:E(i,n.owner),a=d===null?"":d.type==="node"?d.id:d.name;return{id:n.id,name:a===""?n.name:`${a}/${n.name}`,base:r.record.heads_key,body:r.heads[0].body}})}s(J,"reviewedDocument");function Q(t){const e=M(t);return{status:200,body:{reviews:D(e).filter(o=>{if(t.principal.class==="person")return!0;const n=b(o.origin_node_id);return n!==null&&N(t.principal,n.grantee??"app:terminal",n.node_id)}).map(f)}}}s(Q,"handleList");function U(t){const e=[],i=h(t,e);return(e.length>0||i===void 0)&&l(e),{status:200,body:f(y(i))}}s(U,"handleRead");async function X(t){const e=[],i=h(t,e);z(t,e),(e.length>0||i===void 0)&&l(e);const o=await A(i);return{status:200,body:o.outcome==="awaiting_companion"?{review:f(o.record),outcome:o.outcome}:{review:f(o.record),result:O(o.result),outcome:o.outcome}}}s(X,"handleSubmit");async function Y(t){const e=[],i=h(t,e),o=x(t,e);(e.length>0||i===void 0)&&l(e);const n=await I(i,o);return{status:200,body:{review:f(n.record),outcome:n.outcome}}}s(Y,"handleCancel");function Z(t){const e=[],i=h(t,e);(e.length>0||i===void 0)&&l(e);const o=y(i),n=C(o.review_id);if(n===null)throw new Error(`review anchor base is missing: ${o.review_id}`);return{status:200,body:{review_id:o.review_id,anchor_base_sha256:n.sha256,anchor_base_text:new TextDecoder("utf-8",{fatal:!0}).decode(n.bytes),file:o.file}}}s(Z,"handleDocument");const ve=[{method:"POST",pattern:"/v1/human/reviews",scope:"crtr:act",handler:H},{method:"GET",pattern:"/v1/human/reviews",handler:Q},{method:"GET",pattern:"/v1/human/reviews/:review_id",handler:U},{method:"POST",pattern:"/v1/human/reviews/:review_id/submit",handler:X},{method:"POST",pattern:"/v1/human/reviews/:review_id/cancel",handler:Y},{method:"GET",pattern:"/v1/human/reviews/:review_id/document",handler:Z}];export{K as parseCreate,ve as reviewRoutes};

package/dist/daemon/api/handlers/run-routes.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const runRoutes: RouteTable;

package/dist/daemon/api/handlers/run-routes.js

@@ -0,0 +1 @@
+var a=Object.defineProperty;var t=(e,r)=>a(e,"name",{value:r,configurable:!0});import{randomUUID as s}from"node:crypto";import{cursor as m,streamRunEvents as i}from"../app-listener.js";import{handleRunOperation as o}from"./runs.js";import{OPERATIONS as d}from"../operations.js";const q=d.filter(e=>["run.list","run.get","run.events","trace.get","run.message","run.interrupt","run.cancel","run.delete"].includes(e.name)).map(e=>({method:e.method,pattern:e.path,handler:t(async r=>{const n=r.params.run_id;if(e.name==="run.events"){const u=m(r.req,r.query);return await i(r.req,r.res,n,r.principal,u,s(),"ndjson"),{status:200}}return o(e,r.principal,n,r.query,r.body,r.req.headers["idempotency-key"])},"handler")}));export{q as runRoutes};

package/dist/daemon/api/handlers/runs.d.ts

@@ -0,0 +1,9 @@
+import { type AppPrincipal } from '../principal.js';
+import { type RequestPrincipal } from '../router.js';
+import type { AppOperation } from '../operations.js';
+declare function integer(value: string | null, param: string, min: number, max: number, fallback: number): number;
+export { integer };
+export declare function handleRunOperation(operation: AppOperation, principal: AppPrincipal | RequestPrincipal, id: string | undefined, query: URLSearchParams, body: unknown, key: string | undefined): Promise<{
+    status: number;
+    body: unknown;
+}>;

package/dist/daemon/api/handlers/runs.js

@@ -0,0 +1 @@
+var q=Object.defineProperty;var w=(a,t)=>q(a,"name",{value:t,configurable:!0});import{callerGrant as p}from"../principal.js";import{grantVersion as g}from"../../../core/grants/mirror.js";import{waitGrantChange as R}from"../../../core/grants/watch.js";import{RunError as n,idempotencyKeyOf as h,cancelRun as S,deleteRun as N,interruptRun as O,listRuns as $,messageRun as A,renameRun as j,requestedScopes as x,startRun as B,traceRun as J,waitRun as z}from"../../../core/runs/operations.js";import{canReadRun as b,requireRun as f,runCallerApp as C}from"../router.js";import{waitSeconds as v}from"../long-poll-wait.js";function l(a){if(!a||typeof a!="object"||Array.isArray(a))throw new n(400,"invalid_request","a JSON object is required");return a}w(l,"object");function y(a,t,i,u,d){if(a===null)return d;if(!/^(0|[1-9]\d*)$/.test(a)||!Number.isSafeInteger(Number(a))||Number(a)<i||Number(a)>u)throw new n(400,"invalid_request",`invalid ${t}`,t);return Number(a)}w(y,"integer");const E=256*1024;async function I(a,t,i,u,d,_){switch(a.name){case"grant.get":{if("class"in t)throw new n(403,"permission_error","an app token is required");const e=v("grant.get",u),s=u.get("since");if(s!==null&&!/^[A-Za-z0-9_-]{1,64}$/.test(s))throw new n(400,"invalid_request","invalid since","since");let r=p(t);return e&&s!==null&&g(r)===s&&(await R(t.grant,e),r=p(t)),{status:200,body:{sub:t.sub,grantee:t.grantee,client_id:t.client_id,grant:t.grant,rev:r.rev,resolved_scopes:r.resolved_scopes,spend_cap:r.spend_cap,exp:t.exp,payer:"user",dependencies:r.dependencies??{},version:g(r)}}}case"run.start":{if("class"in t)throw new n(403,"permission_error","an app token is required");const e=l(d),s=["mode","parent","fork_from","node_id","env","tools","system_prompt"];for(const o of s)if(e[o]!==void 0)throw new n(403,"owner_only",`${o} is owner-only`,o);const r=["payer","model","model_policy","deadline","kind"];for(const o of r)if(e[o]!==void 0)throw new n(400,"invalid_request",`${o} is not available`,o);for(const o of Object.keys(e))if(!["prompt","scopes","metadata","profile","isolated","cwd","worktree","output_schema","message"].includes(o))throw new n(400,"invalid_request",`unknown field ${o}`,o);if(e.profile!==void 0&&(typeof e.profile!="string"||!e.profile))throw new n(400,"invalid_request","profile must be a profile id","profile");if(e.isolated!==void 0&&typeof e.isolated!="boolean")throw new n(400,"invalid_request","isolated must be a boolean","isolated");if(e.cwd!==void 0&&(e.isolated!==!0||typeof e.cwd!="string"||!e.cwd))throw new n(400,"invalid_request","cwd is available only for an isolated run and must be an absolute path inside its root folder","cwd");if(e.worktree!==void 0&&e.isolated!==!0)throw new n(400,"invalid_request","worktree is not available","worktree");if(e.isolated===!0&&e.worktree!==void 0)throw new n(400,"invalid_request","worktree is unavailable for an isolated run","worktree");if(typeof e.prompt!="string"||!e.prompt.trim())throw new n(400,"invalid_request","prompt is required","prompt");if(e.message!==void 0&&(typeof e.message!="string"||!e.message.trim()))throw new n(400,"invalid_request","message must be a non-empty string","message");const c=e.metadata===void 0?{}:l(e.metadata);if(Buffer.byteLength(JSON.stringify(c))>4096)throw new n(400,"invalid_request","metadata exceeds 4 KB","metadata");let m;if(e.output_schema!==void 0){const o=e.output_schema;if(!o||typeof o!="object"||Array.isArray(o))throw new n(400,"invalid_request","output_schema must be a JSON Schema object","output_schema");if(Buffer.byteLength(JSON.stringify(o))>E)throw new n(400,"invalid_request","output_schema exceeds 256 KB","output_schema");m=o}const k=x(t.resolved,e.scopes,t.grantee);return{status:201,body:await B(t,{prompt:e.prompt,scopes:k,metadata:c,profile:e.profile,isolated:e.isolated,cwd:e.cwd,...m===void 0?{}:{output_schema:m},...e.message===void 0?{}:{message:e.message}},h(_))}}case"run.list":{const e=u.get("status")??void 0;if(e&&!["running","waiting_on_user","idle","settled"].includes(e))throw new n(400,"invalid_request","invalid status","status");const s=u.get("app");if(s!==null&&!/^(?:app:)?[a-z0-9][a-z0-9-]*$/.test(s))throw new n(400,"invalid_request","invalid app","app");const r=s===null?C(t):s.startsWith("app:")?s:`app:${s}`;if(r!==null&&!b(t,r))throw new n(404,"not_found","run not found");return{status:200,body:$(r,{status:e,after:u.get("after")??void 0,limit:y(u.get("limit"),"limit",1,100,50),..."class"in t&&t.class==="broker"&&r!==null?{visible:w(c=>b(t,r,c),"visible")}:{}})}}case"run.get":{const e=v("run.get",u),s=f(t,i),r=await z(i,s.grantee,e);return f(t,i),{status:200,body:r}}case"run.message":{const e=l(d);if(typeof e.message!="string"||!e.message.trim())throw new n(400,"invalid_request","message is required","message");if(e.start_turn!==void 0&&typeof e.start_turn!="boolean")throw new n(400,"invalid_request","start_turn must be a boolean","start_turn");return{status:202,body:await A(f(t,i,!0),e.message,void 0,e.start_turn,h(_))}}case"run.interrupt":{const e=l(d===void 0?{}:d);if(e.children!==void 0&&e.children!=="stop"&&e.children!=="continue")throw new n(400,"invalid_request","invalid children","children");return{status:200,body:await O(f(t,i,!0),e.children)}}case"run.cancel":{const e=l(d===void 0?{}:d);if(e.keep_schedules!==void 0&&typeof e.keep_schedules!="boolean")throw new n(400,"invalid_request","invalid keep_schedules","keep_schedules");return{status:200,body:await S(f(t,i,!0),{keepSchedules:e.keep_schedules})}}case"run.rename":{const e=l(d);for(const s of Object.keys(e))if(s!=="name")throw new n(400,"invalid_request",`unknown field ${s}`,s);return{status:200,body:j(f(t,i,!0),e.name)}}case"run.delete":{const{uploads_pending:e}=await N(f(t,i,!0,!0));return{status:200,body:{run_id:i,uploads_pending:e}}}case"trace.get":{const e=u.get("format")??void 0;if(e&&e!=="entries")throw new n(400,"invalid_request","unknown trace format","format");const s=f(t,i);return{status:200,body:J(i,s.grantee,e)}}default:throw new n(404,"not_found","unknown operation")}}w(I,"handleRunOperation");export{I as handleRunOperation,y as integer};

package/dist/daemon/api/handlers/structured-requests.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const structuredRequestRoutes: RouteTable;

package/dist/daemon/api/handlers/structured-requests.js

@@ -0,0 +1 @@
+var O=Object.defineProperty;var i=(t,e)=>O(t,"name",{value:e,configurable:!0});import{isSafeNodeId as h}from"../../../core/canvas/paths.js";import{admitStructuredRequest as T,bindStructuredRequest as N,getPendingStructuredRequestForNode as P,getStructuredRequest as c,settleStructuredRequest as l,toStructuredRequestDTO as _}from"../../../core/canvas/structured-requests.js";import{getNode as S}from"../../../core/canvas/canvas.js";import{ApiError as D}from"../../../api/errors.js";import{handleCreate as j}from"./nodes.js";import{handleMessage as E}from"./messages.js";import{writeStructuredRequestSidecar as k}from"../../../core/runtime/structured-output.js";import{requestBrokerTeardown as x}from"../../../core/runtime/host.js";import{transition as $}from"../../../core/runtime/lifecycle.js";import{subscribeStructuredRequest as C}from"../../structured-requests/notifier.js";import{SYNC_WORK_BUDGET_MS as R}from"../../../api/index.js";import{waitSeconds as I}from"../long-poll-wait.js";function d(t,e,n){throw new D(t,e,n)}i(d,"fail");function M(t){(typeof t!="object"||t===null||Array.isArray(t))&&d(400,"invalid_request","a structured request requires a JSON object");const e=t;(typeof e.request_id!="string"||!h(e.request_id))&&d(400,"request_id_invalid","request_id must use the node-id character rule"),e.mode!=="sync"&&e.mode!=="async"&&d(400,"invalid_request","mode must be sync or async"),typeof e.prompt!="string"&&d(400,"invalid_request","prompt must be a string"),(typeof e.output_schema!="object"||e.output_schema===null||Array.isArray(e.output_schema))&&d(400,"invalid_request","output_schema must be a JSON Schema object");const n=e.target;(typeof n!="object"||n===null)&&d(400,"invalid_request","target is required");const r=n;if(r.kind==="node")(typeof r.node_id!="string"||!h(r.node_id))&&d(400,"invalid_request","target.node_id must use the node-id character rule");else if(r.kind==="new"){(typeof r.create!="object"||r.create===null||Array.isArray(r.create))&&d(400,"invalid_request","target.create must be an object");for(const u of["prompt","output_schema","deadline","root_lifecycle","no_kickoff"])Object.hasOwn(r.create,u)&&d(400,"create_field_forbidden",`target.create may not carry ${u}`)}else d(400,"invalid_request","target.kind must be new or node");return e.work_budget_ms!==void 0&&(!Number.isInteger(e.work_budget_ms)||e.work_budget_ms<=0)&&d(400,"work_budget_invalid","work_budget_ms must be a positive integer"),e.deadline_at!==void 0&&(typeof e.deadline_at!="string"||Number.isNaN(Date.parse(e.deadline_at)))&&d(400,"invalid_request","deadline_at must be an ISO timestamp"),e}i(M,"parseCreate");function F(t,e){const n=t.deadline_at===void 0?null:Date.parse(t.deadline_at),r=t.work_budget_ms===void 0?null:e+t.work_budget_ms,u=n===null?r:r===null?n:Math.min(n,r);return t.mode==="sync"?Math.min(u??e+R,e+R):u}i(F,"deadlineFor");function v(t,e,n=""){return{...t,method:"POST",path:"",params:n===""?{}:{id:n},query:new URLSearchParams,body:e}}i(v,"context");function q(t){return{status:200,body:{admitted:!0,request:_(t)}}}i(q,"terminalAdmission");function f(t){return t!==null&&Date.now()>=t}i(f,"deadlinePassed");function w(t){return q(l(t,{intended:"expired"}).row)}i(w,"expireAdmission");async function A(t,e){let n;const r=new Promise(m=>{n=m}),u=C(t,n);try{return c(t).state==="pending"&&e>0&&await Promise.race([r,new Promise(p=>setTimeout(p,e))]),_(c(t))}finally{u()}}i(A,"waitForRequest");async function B(t,e){const n=await A(t,Math.max(0,e-Date.now()));return n.state==="pending"?_(l(t,{intended:"expired"}).row):n}i(B,"waitForTerminal");async function L(t){const e=M(t.body);e.mode==="sync"&&e.target.kind!=="new"&&d(400,"sync_requires_dedicated_node","sync requests require target.kind=new");const n=Date.now(),r=F(e,n);if(f(r))return{status:200,body:{admitted:!1,reason:"work_budget_exhausted"}};let u=null,m="terminal",p=!0;if(e.target.kind==="node"){u=e.target.node_id;const s=S(u);s===null&&d(404,"node_not_found",`unknown node: ${u}`),(s.final_report!==null||s.status==="done"||s.status==="canceled"||s.status==="dead")&&d(409,"node_terminal",`node ${u} is terminal`),P(u)!==null&&d(409,"structured_request_conflict",`node ${u} already has a pending structured request`),m="oneoff",p=!1}if(f(r))return{status:200,body:{admitted:!1,reason:"work_budget_exhausted"}};let y;try{y=T({requestId:e.request_id,mode:e.mode,submission:m,dedicated:p,schema:e.output_schema,deadlineAt:r,nodeId:u,now:Date.now()})}catch(s){const a=String(s);throw(s.code==="ERR_SQLITE_CONSTRAINT_PRIMARYKEY"||a.includes("structured_requests.request_id"))&&d(409,"request_id_in_use",`request_id ${e.request_id} is already in use`),(a.includes("idx_structured_requests_one_pending_node")||a.includes("structured_requests.node_id"))&&d(409,"structured_request_conflict","the target node already has a pending structured request"),s}if(f(r))return w(e.request_id);if(e.target.kind==="new")try{u=(await j(v(t,{...e.target.create,root:!0,root_lifecycle:"terminal",prompt:""}),{},{...r===null?{}:{deadlineAt:new Date(r).toISOString()},beforeBrokerLaunch:i(a=>{if(u=a,f(r))throw new Error("structured request deadline expired before binding");const o=N(e.request_id,a);if(!o.changed||o.row===null||o.row.state!=="pending")throw new Error("structured request bind did not remain pending");u=a,k(o.row)},"beforeBrokerLaunch")})).body.node_id}catch{const a=c(e.request_id),o=a.state==="pending"?l(e.request_id,{intended:"failed",failureReason:a.node_id===null?"node_create_failed":"bind_failed"}).row:a;if(u!==null&&o.node_id===null){const b=S(u);(b?.status==="active"||b?.status==="idle")&&$(u,"cancel",{reason:"stranded"}),await x(u)}return q(o)}else{if(f(r))return w(e.request_id);try{k(y)}catch{return q(l(e.request_id,{intended:"failed",failureReason:"bind_failed"}).row)}}const g=c(e.request_id);if(g.state!=="pending")return q(g);if(f(r))return w(e.request_id);try{await E(v(t,{body:e.prompt,tier:"normal"},u))}catch{return q(l(e.request_id,{intended:"failed",failureReason:"prompt_delivery_failed"}).row)}return e.mode==="async"?{status:202,body:{admitted:!0,request:_(c(e.request_id))}}:{status:200,body:{admitted:!0,request:await B(e.request_id,r)}}}i(L,"handleCreateStructuredRequest");async function Y(t){const e=t.params.request_id,n=I("structured-request.get",t.query),r=c(e);return r===null&&d(404,"structured_request_not_found",`unknown structured request: ${e}`),{status:200,body:n===0?_(r):await A(e,n*1e3)}}i(Y,"handleReadStructuredRequest");async function G(t){const e=l(t.params.request_id,{intended:"canceled"});return e.row===null&&d(404,"structured_request_not_found",`unknown structured request: ${t.params.request_id}`),{status:200,body:_(e.row)}}i(G,"handleCancelStructuredRequest");const ne=[{method:"POST",pattern:"/v1/structured-requests",handler:L},{method:"GET",pattern:"/v1/structured-requests/:request_id",handler:Y},{method:"POST",pattern:"/v1/structured-requests/:request_id/cancel",handler:G}];export{ne as structuredRequestRoutes};

package/dist/daemon/api/handlers/subscriptions.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const subscriptionRoutes: RouteTable;

package/dist/daemon/api/handlers/subscriptions.js

@@ -0,0 +1 @@
+var l=Object.defineProperty;var p=(n,i)=>l(n,"name",{value:i,configurable:!0});import{ApiError as e}from"../../../api/index.js";import{getNode as a,subscribe as b,subscriptionsOf as f,unsubscribe as h}from"../../../core/canvas/canvas.js";import{toSubscriptionDTO as g}from"../map.js";function u(n){if(a(n)===null)throw new e(404,"node_not_found",`unknown node: ${n}`)}p(u,"requireNode");function w(n){const i=n.params.id,t=n.body??{},r=t.target;if(typeof r!="string"||r==="")throw new e(400,"invalid_request","subscribe body requires a `target` node id");if(r===i)throw new e(422,"unprocessable","a node cannot subscribe to itself");if(u(i),u(r),n.principal.class==="broker"){const o=a(i),c=a(r);if(o.grantee!==n.principal.app||c.grantee!==n.principal.app||o.run_id!==c.run_id||n.principal.run!==null&&o.run_id!==n.principal.run)throw new e(403,"other_app_run","subscriptions must stay within the calling app run")}const s=t.active??!0;b(i,r,s);const d=f(i).find(o=>o.node_id===r);if(d===void 0)throw new e(500,"internal","subscription edge vanished after write");return{status:200,body:g(d)}}p(w,"handleSubscribe");function _(n){const i=n.params.id,t=n.params.target;if(u(i),n.principal.class==="broker"){const r=a(i),s=a(t);if(r.grantee!==n.principal.app||n.principal.run!==null&&r.run_id!==n.principal.run||s&&(s.grantee!==r.grantee||s.run_id!==r.run_id))throw new e(403,"other_app_run","subscriptions must stay within the calling app run")}return h(i,t),{status:204}}p(_,"handleUnsubscribe");const E=[{method:"POST",pattern:"/v1/nodes/:id/subscriptions",handler:w},{method:"DELETE",pattern:"/v1/nodes/:id/subscriptions/:target",handler:_}];export{E as subscriptionRoutes};

package/dist/daemon/api/handlers/telemetry-record.d.ts

@@ -0,0 +1,4 @@
+import type { BrokerTelemetryRequest } from '../../../api/dto/broker-ops.js';
+export declare function parseNodeTelemetryRecord(value: Record<string, unknown>): Omit<BrokerTelemetryRequest, 'expected_execution_id'>;
+/** Merge nullable live gauges with the last usable node-local values. */
+export declare function writeNodeTelemetryRecord(nodeId: string, record: Omit<BrokerTelemetryRequest, 'expected_execution_id'>): void;

package/dist/daemon/api/handlers/telemetry-record.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var a=(r,t)=>m(r,"name",{value:t,configurable:!0});import{mkdirSync as u,readFileSync as l,writeFileSync as y}from"node:fs";import{join as c}from"node:path";import{jobDir as p}from"../../../core/canvas/paths.js";import{usage as _}from"../../../core/errors.js";function b(r){const{tokens_in:t,tokens_out:i,context_tokens:e,last_activity:o,model:n,updated_at:s}=r;if(typeof t!="number"||!Number.isFinite(t)||t<0||typeof i!="number"||!Number.isFinite(i)||i<0||e!==null&&(typeof e!="number"||!Number.isFinite(e)||e<0)||o!==null&&typeof o!="string"||typeof n!="string"||typeof s!="string"||Number.isNaN(Date.parse(s)))throw _("invalid telemetry");return{tokens_in:t,tokens_out:i,context_tokens:e,last_activity:o,model:n,updated_at:s}}a(b,"parseNodeTelemetryRecord");function v(r,t){const i=p(r),e=c(i,"telemetry.json");let o={};try{o=JSON.parse(l(e,"utf8"))}catch(n){if(!(n instanceof SyntaxError)&&n.code!=="ENOENT")throw n}u(i,{recursive:!0}),y(e,JSON.stringify({tokens_in:t.tokens_in,tokens_out:t.tokens_out,context_tokens:t.context_tokens??o.context_tokens,last_activity:t.last_activity??o.last_activity,model:t.model||o.model||"",updated_at:t.updated_at},null,2),"utf8")}a(v,"writeNodeTelemetryRecord");export{b as parseNodeTelemetryRecord,v as writeNodeTelemetryRecord};

package/dist/daemon/api/handlers/transfer.d.ts

@@ -0,0 +1,15 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { FileCaller } from '../../../core/spaces/permissions.js';
+import type { AppOperation } from '../operations.js';
+import type { AppPrincipal } from '../principal.js';
+/** The app-listener rows of file transfer (daemon-operations §File transfer). */
+export declare const TRANSFER_OPERATIONS: Set<string>;
+/** An app caller's file permission: its grant, with no narrower launched list. */
+export declare function fileCaller(caller: AppPrincipal): FileCaller;
+/** JSON rows. `file.download` streams and goes through `handleTransferDownload`. */
+export declare function handleTransferOperation(operation: AppOperation, caller: AppPrincipal, params: Record<string, string>, query: URLSearchParams, body: unknown): Promise<{
+    status: number;
+    body: unknown;
+}>;
+/** `file.download` (`stream: 'bytes'`): raw bytes with `Range` support. */
+export declare function handleTransferDownload(req: IncomingMessage, res: ServerResponse, caller: AppPrincipal, query: URLSearchParams): Promise<void>;

package/dist/daemon/api/handlers/transfer.js

@@ -0,0 +1 @@
+var h=Object.defineProperty;var s=(e,a)=>h(e,"name",{value:a,configurable:!0});import{isAbsolute as w,resolve as _}from"node:path";import{RunError as n}from"../../../core/runs/operations.js";import{invalidStorageName as m,storageClient as l,StorageRefused as y,UPLOAD_MAX_BYTES as g}from"../../../core/storage/client.js";import{serveDownload as b}from"../../../core/storage/download.js";import{createShare as q,deleteOwnShare as v,listOwnShares as A}from"../../../core/storage/shares.js";import{getUpload as S,insertUpload as k,uploadUseAt as x}from"../../../core/storage/tables.js";import{requireRun as z}from"../router.js";const C=new Set(["upload.create","attachment.link","file.download","share.create","share.list","share.delete"]);function c(e){if(!e||typeof e!="object"||Array.isArray(e))throw new n(400,"invalid_request","a JSON object is required");return e}s(c,"object");function f(e){return{app:e.grantee,resolved:e.resolved,launched:null}}s(f,"fileCaller");const O=/^[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}\/[A-Za-z0-9][A-Za-z0-9!#$&^_.+-]{0,126}(?:\s*;.{0,200})?$/;async function T(e,a){const i=c(a);for(const p of Object.keys(i))if(!["name","media_type","size"].includes(p))throw new n(400,"invalid_request",`unknown field ${p}`,p);const{name:r,media_type:o,size:t}=i;if(typeof t!="number"||!Number.isSafeInteger(t)||t<0)throw new n(400,"invalid_request","size must be a non-negative integer","size");if(t>g)throw new n(400,"invalid_request","size exceeds 100 MiB","size");if(typeof r!="string")throw new n(400,"invalid_request","name is required","name");const d=m(r);if(d)throw new n(400,"invalid_request",d,"name");if(typeof o!="string"||!O.test(o))throw new n(400,"invalid_request","media_type must be a media type","media_type");const u=await l().createUpload({name:r,media_type:o,size:t});return k({upload_id:u.upload_id,grantee:e.grantee,name:r,media_type:o,size:t,created_at:new Date().toISOString()}),{upload_id:u.upload_id,url:u.url,upload_link:u.upload_link,expires_at:u.expires_at}}s(T,"uploadCreate");async function D(e,a){if(!a)throw new n(400,"invalid_request","path is required","path");if(!w(a))throw new n(400,"invalid_request","path must be absolute","path");const i=x(_(a)),r=s(()=>new n(404,"not_found","no upload is recorded at that path"),"missing");if(!i)throw r();try{z(e,i.run_id)}catch(t){throw t instanceof n&&t.code==="not_found"?r():t}const o=S(i.upload_id);if(!o||o.delete_pending_since)throw r();try{return await l().signDownload(i.upload_id)}catch(t){throw t instanceof y?r():t}}s(D,"attachmentLink");async function M(e,a,i,r,o){switch(e.name){case"upload.create":return{status:201,body:await T(a,o)};case"attachment.link":return{status:200,body:await D(a,r.get("path"))};case"share.create":{const t=c(o);for(const d of Object.keys(t))if(!["path","expires_at"].includes(d))throw new n(400,"invalid_request",`unknown field ${d}`,d);return{status:201,body:await q(f(a),{path:t.path,expires_at:t.expires_at})}}case"share.list":return{status:200,body:A(a.grantee)};case"share.delete":return{status:200,body:await v(a.grantee,i.share_id)};default:throw new n(404,"not_found","unknown operation")}}s(M,"handleTransferOperation");function P(e,a,i,r){return b(e,a,f(i),r.get("path"))}s(P,"handleTransferDownload");export{C as TRANSFER_OPERATIONS,f as fileCaller,P as handleTransferDownload,M as handleTransferOperation};

package/dist/daemon/api/handlers/validate.d.ts

@@ -0,0 +1,23 @@
+import { isRecord } from '../../../shared/predicates.js';
+import type { RequestContext } from '../router.js';
+export { isRecord };
+export type Violation = {
+    field: string;
+    problem: string;
+    received?: unknown;
+};
+/** Reject the request with every violation collected so far. `subject` names
+ *  what was being parsed, e.g. "review comment request". */
+export declare function invalidRequest(subject: string, violations: Violation[]): never;
+/** Narrow a request body to an object and reject any field outside `allowed`.
+ *  A non-object body yields `{}` so the caller's field reads all miss and
+ *  report their own violations rather than throwing. */
+export declare function objectBody(body: unknown, allowed: readonly string[], violations: Violation[]): Record<string, unknown>;
+/** A required field that must be a string carrying at least one non-whitespace
+ *  character — whitespace alone is not a value. */
+export declare function requiredString(body: Record<string, unknown>, field: string, violations: Violation[]): string | undefined;
+/** `requiredString`'s rule when present; absence is allowed. */
+export declare function optionalString(body: Record<string, unknown>, field: string, violations: Violation[]): string | undefined;
+/** A path parameter that must be present and satisfy `accepts`. `problem`
+ *  describes the shape the caller failed to supply. */
+export declare function requireParam(ctx: RequestContext, field: string, problem: string, accepts: (value: string) => boolean, violations: Violation[]): string | undefined;