@north-light/cli 0.0.0 → 0.3.414

package/dist/daemon/api/router.js

@@ -0,0 +1 @@
+var O=Object.defineProperty;var a=(e,t)=>O(e,"name",{value:t,configurable:!0});import{toErrorBody as S}from"./map.js";import{emitEvent as $}from"../../core/events/emit.js";import{scopeAllowed as c,ScopeDeniedError as T}from"../../core/scopes.js";import{ApiError as h}from"../../api/errors.js";import{activeGrant as v,grantFor as A}from"../../core/grants/mirror.js";import{getNode as _}from"../../core/canvas/canvas.js";import{ownedRun as U,RunError as y}from"../../core/runs/operations.js";import{nodeMayReach as N}from"../../core/runs/confinement.js";import{readConfig as W}from"../../core/config.js";import{SCOPE_VOCABULARY as j}from"../../core/scopes.js";import{operationFor as G}from"./operations.js";import{CONTROL_BODY_MAX_BYTES as J}from"../../core/llm/body-limits.js";import{getRequest as H,getRequestByInboxTicket as z}from"../../core/human/requests.js";import{requireVisibleReview as E}from"../../core/review/store.js";import{getComment as x}from"../../core/review/comments.js";function I(e,t,o,s,n){const r=e.path,u=n&&typeof n=="object"&&!Array.isArray(n)?n:{};if(r==="/v1/human/requests"||r==="/v1/human/reviews"){if((r.endsWith("/reviews")?u.origin_node_id:u.requester_node_id)!==t.node)throw new h(403,"other_app_run","a broker may create a human request only for its own node");const i=u.source;if(i&&typeof i=="object"&&"nodeId"in i&&i.nodeId!==t.node)throw new h(403,"other_app_run","request source must name the calling node")}if(r==="/v1/human/reviews/self/comments"&&e.method==="GET"&&s.get("actor_node_id")!==t.node)throw new h(403,"other_app_run","self review requires the calling node");if(r.includes("/comments")&&e.method!=="GET"&&u.actor_node_id!==t.node)throw new h(403,"other_app_run","comment author must be the calling node");if(o.comment_id&&!x(o.comment_id))throw new h(404,"not_found","comment not found")}a(I,"authorizeHumanBody");function g(e){if(e.class==="person"||e.class==="anonymous")return[];if(e.class==="app")return e.scopes;const t=e.grant?v(e.grant):A(e.app,e.sub);if(t&&t.grantee===e.app&&t.sub===e.sub)return t.resolved;if(e.app==="app:terminal"&&!W("user").runtime?.issuer)return j;throw new h(401,"grant_revoked","the node grant is not active")}a(g,"resolvedScopes");function b(e){return"class"in e?e.class==="person"||e.class==="anonymous"?null:e.app:e.grantee}a(b,"runCallerApp");function l(e,t,o){return t===void 0||!("class"in e)||e.class!=="broker"?!0:N(e.node,e.app,t,o)}a(l,"brokerMayReach");function L(e,t,o){const s=b(e);if(s===t)return l(e,o,t);if(s===null)return!0;const n="class"in e?null:v(e.grant),r="class"in e?g(e):n?.sub===e.sub&&n.grantee===e.grantee?n.resolved:[];return c(r,`crtr:conversations:read:${t}`)&&(!("class"in e)||e.class!=="broker"||c(e.scopes,`crtr:conversations:read:${t}`))}a(L,"canReadRun");function fe(e,t,o=!1,s=!1){const n=_(t);if(!n||n.parent!==null||n.run_id!==t||!n.grantee||n.deleting_at&&!s)throw new y(404,"not_found","run not found");if(!L(e,n.grantee,t))throw new y(404,"not_found","run not found");if(o&&b(e)!==null&&b(e)!==n.grantee)throw new y(403,"other_app_run","cannot change another app's run");return U(t,n.grantee,s)}a(fe,"requireRun");function B(e,t,o){return e.class!=="person"&&e.class!=="anonymous"&&e.app===t?l(e,o,t):e.class==="person"||e.class!=="anonymous"&&(e.app===t||c(g(e),`crtr:objects:read:${t}`)&&(e.class!=="broker"||c(e.scopes,`crtr:objects:read:${t}`)))}a(B,"canReadNode");function P(e,t,o){if(!e.classes.includes(t.class)&&!(t.class!=="anonymous"&&e.classes.includes("anonymous")))throw new h(403,"permission_error","this operation is not available to the caller");if(t.class==="person"||t.class==="anonymous")return;const s=g(t);if(e.scope&&(!c(s,e.scope)||t.class==="broker"&&!c(t.scopes,e.scope)))throw new h(403,"scope_missing",`missing scope ${e.scope}`);if(t.class!=="broker")return;if(e.resource==="daemon-bash"&&(!c(s,"crtr:files:rw:user:.")||!c(t.scopes,"crtr:files:rw:user:.")))throw new h(403,"scope_missing","missing scope crtr:files:rw:user:.");if(e.resource==="human"){const r=e.path,u=e.method==="GET";if(!u&&(r.endsWith("/respond")||r.endsWith("/submit")||r.endsWith("/dismiss")||r.endsWith("/progress")||r.endsWith("/comment-ranges")||r.includes("/feedback-comments")))throw new h(403,"permission_error","only the person may answer or edit the human inbox");const d=o.request_id?H(o.request_id):o.ticket_id?z(o.ticket_id):null,i=o.comment_id?x(o.comment_id):null,w=o.review_id?E(o.review_id):i?E(i.review_id):null,m=d?.requester_node_id??w?.origin_node_id;if(m!=null){const f=_(m);if(f&&(u?!B(t,f.grantee??"app:terminal",m):f.grantee!==t.app))throw new h(u?404:403,u?"not_found":"other_app_run","human request belongs to another app");if(f&&!u&&!l(t,m,f.grantee??"app:terminal"))throw new h(404,"not_found","human request not found")}else if(d||w)throw new h(403,"permission_error","only the person may access a request without a node")}const n=o.id;if(e.resource==="node-own"&&n!==void 0&&n!==t.node)throw new h(403,"other_app_run","the operation requires the calling node");if((e.resource==="node-read"||e.resource==="node-write")&&n!==void 0){const r=_(n);if(!r)return;if(e.resource==="node-write"&&r.grantee!==t.app)throw new h(403,"other_app_run","cannot change another app's node");if(e.resource==="node-write"&&!l(t,n,r.grantee??"app:terminal"))throw new h(404,"not_found","node not found");if(e.resource==="node-read"&&!B(t,r.grantee??"app:terminal",n))throw new h(404,"not_found","node not found")}}a(P,"authorizeOperation");function M(e,t){if(!c(e,t))throw new T("the bearer token",t)}a(M,"assertCeiling");function Y(){return new h(403,"owner_only","this operation is owner-only; a scoped token does not reach it")}a(Y,"ownerOnlyError");function me(e){return e.map(t=>({...t,ownerOnly:!0}))}a(me,"ownerOnly");class we{static{a(this,"Router")}routes=[];register(t){const o=G(t.method,t.pattern);if(!o)throw new Error(`route has no operation row: ${t.method} ${t.pattern}`);if(this.routes.some(s=>s.method===t.method.toUpperCase()&&s.operation.path===t.pattern))throw new Error(`duplicate route: ${t.method} ${t.pattern}`);return this.routes.push({operation:o,method:t.method.toUpperCase(),segments:k(t.pattern),handler:t.handler,maxBodyBytes:t.maxBodyBytes??J}),this}registerAll(t){for(const o of t)this.register(o);return this}match(t,o){const s=t.toUpperCase(),n=k(o);for(const r of this.routes){if(r.method!==s)continue;const u=F(r.segments,n);if(u!==null)return{handler:r.handler,params:u,operation:r.operation,maxBodyBytes:r.maxBodyBytes}}return null}async handle(t,o,s,n={class:"person"}){try{const r=new URL(t.url??"/","http://127.0.0.1"),u=(t.method??"GET").toUpperCase(),d=this.match(u,r.pathname);if(d===null){C(o,404,"not_found",`no route for ${u} ${r.pathname}`);return}if(P(d.operation,n,d.params),s!==null){if(d.operation.classes.length===1&&d.operation.classes[0]==="person")throw Y();d.operation.scope&&M(s,d.operation.scope)}let i;try{i=await V(t,d.maxBodyBytes)}catch(f){const p=f instanceof R?"payload_too_large":"invalid_request";C(o,p==="payload_too_large"?413:400,p,f.message);return}n.class==="broker"&&d.operation.resource==="human"&&I(d.operation,n,d.params,r.searchParams,i);const w={method:u,path:r.pathname,params:d.params,query:r.searchParams,body:i,ceiling:s,principal:n,...n.class==="anonymous"&&typeof t.headers.authorization=="string"?{publishToken:t.headers.authorization.slice(7)}:{},req:t,res:o},m=await d.handler(w);o.writableEnded||D(o,m)}catch(r){const{status:u,body:d}=S(r);u>=500&&$({event:"api.request.failed",level:"error",error:r instanceof Error?r:new Error(String(r)),...n.class==="broker"?{node_id:n.node}:{},fields:{method:(t.method??"GET").toUpperCase(),path:t.url??""}}),q(o,u,d)}}}function k(e){return e.split("/").filter(t=>t.length>0)}a(k,"splitPath");function F(e,t){if(e.length!==t.length)return null;const o={};for(let s=0;s<e.length;s++){const n=e[s],r=t[s];if(n.startsWith(":"))o[n.slice(1)]=decodeURIComponent(r);else if(n!==r)return null}return o}a(F,"matchSegments");class R extends Error{static{a(this,"BodyTooLargeError")}}async function V(e,t){const o=[];let s=0;for await(const r of e){const u=r;if(s+=u.length,s>t)throw new R(`request body exceeds ${t} bytes`);o.push(u)}if(s===0)return;const n=Buffer.concat(o).toString("utf8").trim();if(n!=="")try{return JSON.parse(n)}catch{throw new Error("request body is not valid JSON")}}a(V,"readJsonBody");function D(e,t){if(e.headersSent)return;const o={...t.headers??{}};if(t.rawBody!==void 0){e.writeHead(t.status,o),e.end(t.rawBody);return}if(t.status===204||t.body===void 0){e.writeHead(t.status,o),e.end();return}o["content-type"]===void 0&&(o["content-type"]="application/json; charset=utf-8"),e.writeHead(t.status,o),e.end(JSON.stringify(t.body))}a(D,"writeResult");function q(e,t,o){if(e.headersSent){e.end();return}e.writeHead(t,{"content-type":"application/json; charset=utf-8"}),e.end(JSON.stringify(o))}a(q,"writeJson");function C(e,t,o,s){q(e,t,{error:{code:o,message:s}})}a(C,"writeError");export{we as Router,M as assertCeiling,l as brokerMayReach,B as canReadNode,L as canReadRun,me as ownerOnly,Y as ownerOnlyError,fe as requireRun,g as resolvedScopes,b as runCallerApp};

package/dist/daemon/api/server.d.ts

@@ -0,0 +1,28 @@
+import { type IncomingMessage } from 'node:http';
+import { type RequestPrincipal } from './router.js';
+export interface CreateApiServerOptions {
+    /** Opt-in TCP listener as `host:port` (or `:port` for all interfaces).
+     *  Falls back to `CRTRD_TCP`, then the user setting. Absent → unix socket only. */
+    tcp?: string;
+    /** Bearer token for the TCP listener. Falls back to `CRTRD_TOKEN`, then the 0600 user secrets store. */
+    token?: string;
+}
+export interface ApiServer {
+    /** Settles only after the mandatory Unix socket binds; rejects on its bind failure. */
+    ready: Promise<void>;
+    /** The actual bound TCP address, including a kernel-selected port; null when TCP is off or not yet bound. */
+    tcpAddress(): string | null;
+    /** Tear down both listeners and unlink the socket file. Double-close safe. */
+    close(): Promise<void>;
+}
+export type SocketPrincipal = RequestPrincipal;
+export declare function socketPrincipal(req: IncomingMessage): SocketPrincipal | undefined;
+/** Create and start the crtrd API server. Returns immediately with a `close()`
+ *  handle and a `ready` promise for the mandatory Unix socket bind. TCP remains
+ *  opt-in, and its bind or post-listen accept errors are emitted but non-fatal.
+ *
+ *  A Node `net.Server`/`http.Server` binds exactly ONE handle, so the two
+ *  listeners are separate `http.Server` instances sharing request and upgrade
+ *  handlers. The Router and attach bridge are process-wide singletons, so both
+ *  servers route into identical state. */
+export declare function createApiServer(opts?: CreateApiServerOptions): ApiServer;

package/dist/daemon/api/server.js

@@ -0,0 +1 @@
+var X=Object.defineProperty;var u=(t,n)=>X(t,"name",{value:n,configurable:!0});import{createServer as x}from"node:http";import{chmodSync as q,existsSync as C,unlinkSync as B}from"node:fs";import{MINIMUM_RUNTIME_VERSION_HEADER as j,RUNTIME_VERSION_HEADER as O,minimumRuntimeRefusal as ee}from"../../api/runtime-version.js";import{crtrVersion as M}from"../../shared/crtr-version.js";import{apiSocketPath as re}from"../../core/canvas/paths.js";import{resolveNodeToken as G}from"../../core/canvas/node-tokens.js";import{grantFor as te,hasSyncedGrants as oe}from"../../core/grants/mirror.js";import{readConfig as U}from"../../core/config.js";import{peerUid as ne}from"../../native/linux.js";import{getApiToken as ie,listScopedApiTokens as se}from"../../core/secrets.js";import{emitEvent as g}from"../../core/events/emit.js";import{envCrtrdTcp as le,envCrtrdToken as ae}from"../../shared/env.js";import{Router as L}from"./router.js";import{handleAttachUpgrade as ce,refuseUpgrade as A}from"./bridge.js";import{boundDaemonControl as ue}from"../control.js";import{attachRoutes as pe}from"./handlers/attach.js";import{bashJobRoutes as de}from"./handlers/bash-jobs.js";import{bashRoutes as me}from"./handlers/bash.js";import{hookExecRoutes as fe}from"./handlers/hook-exec.js";import{brokerOperationRoutes as W}from"./handlers/broker-ops.js";import{brokerSignalRoutes as ge,brokerSignalStreams as he}from"./handlers/broker-signals.js";import{brokerRecoveryRoutes as $,nodeFaultRoutes as Ae}from"./handlers/broker-recovery.js";import{canvasRoutes as Re}from"./handlers/canvas.js";import{chatInventoryRoutes as ye}from"./handlers/chat-inventory.js";import{daemonRoutes as ve}from"./handlers/daemon.js";import{fileRoutes as be}from"./handlers/files.js";import{focusRoutes as we}from"./handlers/focus.js";import{analyticsRoutes as Se}from"./handlers/analytics.js";import{memoryReadsRoutes as Ee}from"./handlers/memory-reads.js";import{memoryRoutes as ke}from"./handlers/memory.js";import{healthRoutes as Te}from"./handlers/health.js";import{humanRequestRoutes as _e}from"./handlers/human-requests.js";import{inboxRoutes as Ce}from"./handlers/inbox.js";import{feedbackCommentRoutes as Oe}from"./handlers/feedback-comments.js";import{objectRoutes as Ue}from"./handlers/objects.js";import{customObjectRoutes as He}from"./handlers/custom-objects.js";import{docRoutes as Ne}from"./handlers/docs.js";import{deliveryRoutes as D}from"./handlers/delivery.js";import{deliveryRetryRoutes as ze}from"./handlers/delivery-retry.js";import{packageDocRoutes as Pe}from"./handlers/package-docs.js";import{brokerMailRoutes as J,messageRoutes as Ie}from"./handlers/messages.js";import{modelAuthRoutes as xe}from"./handlers/modelauth.js";import{llmRoutes as Be}from"./handlers/llm.js";import{providerRoutes as je}from"./handlers/providers.js";import{modelConfigRoutes as Me}from"./handlers/model-config.js";import{nodeRoutes as Ge}from"./handlers/nodes.js";import{nodeRecordRoutes as Le}from"./handlers/node-records.js";import{nodeOutcomeRoutes as We}from"./handlers/node-outcomes.js";import{nodeEventRoutes as $e}from"./handlers/node-events.js";import{profileRoutes as De}from"./handlers/profiles.js";import{prospectiveChatInventoryRoutes as Je}from"./handlers/prospective-chat-inventory.js";import{reportRoutes as Fe}from"./handlers/reports.js";import{runRoutes as Ve}from"./handlers/run-routes.js";import{reviewCommentRoutes as Ye}from"./handlers/review-comments.js";import{reviewRoutes as Ze}from"./handlers/reviews.js";import{subscriptionRoutes as Ke}from"./handlers/subscriptions.js";import{structuredRequestRoutes as Qe}from"./handlers/structured-requests.js";import{cronRoutes as Xe}from"./handlers/crons.js";import{worktreeRoutes as qe}from"./handlers/worktree.js";import{limitsRoutes as er}from"./handlers/limits.js";function rr(t){return new L().registerAll(Te(t)).registerAll(ve).registerAll(Ge).registerAll(Le).registerAll(We).registerAll(ze).registerAll($e).registerAll(de).registerAll(me).registerAll(fe).registerAll(W).registerAll(ge).registerAll(D).registerAll($).registerAll(Ae).registerAll(qe).registerAll(er).registerAll(J).registerAll(Ie).registerAll(Fe).registerAll(Ve).registerAll(Qe).registerAll(pe).registerAll(Re).registerAll(Se).registerAll(Ee).registerAll(ke).registerAll(be).registerAll(Ue).registerAll(He).registerAll(Ne).registerAll(Pe).registerAll(we).registerAll(Ke).registerAll(Xe).registerAll(De).registerAll(xe).registerAll(Be).registerAll(je).registerAll(Me).registerAll(Ze).registerAll(Ye).registerAll(Ce).registerAll(_e).registerAll(ye).registerAll(Je).registerAll(Oe)}u(rr,"buildRouter");function tr(t,n){if(t.toUpperCase()!=="GET")return null;const i=n.split("/").filter(m=>m.length>0);if(i.length!==4||i[0]!=="v1"||i[1]!=="nodes"||i[3]!=="attach")return null;const p=i[2];return p===void 0||p===""?null:decodeURIComponent(p)}u(tr,"attachNodeId");function or(t){const n=t.trim();if(n==="")return null;const i=n.lastIndexOf(":");if(i<0)return null;const p=n.slice(0,i),m=n.slice(i+1),d=Number(m);return!Number.isInteger(d)||d<0||d>65535?null:{host:p===""?"0.0.0.0":p,port:d}}u(or,"parseTcp");function nr(t,n){return`${t.includes(":")?`[${t}]`:t}:${n}`}u(nr,"formatTcpAddress");const b={code:"unauthorized",message:"missing or invalid bearer token"},k={code:"owner_only",message:"attach is owner-only; a scoped token does not reach it"},H={class:"anonymous",app:"",node:"",run:null,uid:-1,sub:"",grant:null,client_id:null,scopes:[]},R=new WeakMap;function F(t){return R.get(t)}u(F,"socketPrincipal");function V(t,n){const i=process.platform==="linux"?ne(t.socket):null,p=t.headers.authorization;if(p===void 0)return i===null||n.has(i)?{class:"person"}:"unauthorized";if(typeof p!="string"||!p.startsWith("Bearer "))return"unauthorized";if(p.slice(7).startsWith("crtr_pub_"))return H;const m=G(p.slice(7));if(!m||i!==null&&i!==m.uid)return"unauthorized";const d=U("user").runtime?.issuer;if(d&&!oe(d.replace(/\/$/,"")))return"runtime_starting";const w=m.grant??te("app:terminal",m.sub)?.id??null;return{class:"broker",...m,grant:w}}u(V,"resolveSocketPrincipal");function ir(t){const n=new Map;for(const i of se("user"))n.set(i.token,{principal:{class:"app",app:i.grantee,scopes:i.scopes},ceiling:i.scopes});return n.set(t,{principal:{class:"person"},ceiling:null}),n}u(ir,"resolveBearers");function Y(t,n){const i=t.headers.authorization;if(!(typeof i!="string"||!i.startsWith("Bearer ")))return n.get(i.slice(7))}u(Y,"authorize");function T(t){t.writeHead(401,{"content-type":"application/json; charset=utf-8"}),t.end(JSON.stringify({error:b}))}u(T,"writeUnauthorized");function sr(t,n){t.writeHead(503,{"content-type":"application/json; charset=utf-8"}),t.end(JSON.stringify({error:{code:"startup_blocked",message:n}}))}u(sr,"writeStartupBlocked");function Z(t){return new Promise(n=>{try{t.closeAllConnections()}catch{}t.close(()=>n())})}u(Z,"closeServer");function gt(t={}){let n=null;const i=rr(()=>n),p=new L().registerAll(W).registerAll(D).registerAll($).registerAll(J),m=u((e,r)=>{const o=ue()?.startupBlock()??null;return o===null||e==="GET"&&(r==="/healthz"||r==="/v1/status")||e==="POST"&&(r==="/v1/daemon/migrate"||r==="/v1/daemon/admit")||o.phase==="recovering"&&p.match(e,r)!==null?null:o},"startupBlockFor"),d=re(),w=new Set([process.getuid?.()??0,...U("user").runtime?.person_uids??[]]),S=u((e,r,o)=>{r.setHeader(O,M());const a=e.headers[j.toLowerCase()],f=ee(Array.isArray(a)?a[0]:a,M());if(f!==null){r.writeHead(f.status,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:f.code,message:f.message,type:"invalid_request_error",origin:"runtime",retryable:!1,..."param"in f?{param:f.param}:{details:f.details}}}));return}const s=u(l=>{const v=F(e);g({event:"api.request.failed",level:"error",...v?.class==="broker"?{node_id:v.node}:{},error:l instanceof Error?l:new Error(String(l))});try{r.headersSent||r.writeHead(500,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"internal",message:"internal error"}}))}catch{}},"internalFailure");let c;try{c=new URL(e.url??"/","http://127.0.0.1")}catch{try{r.writeHead(400,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"invalid_request",message:"request URL is invalid"}}))}catch{}return}try{const l=m((e.method??"GET").toUpperCase(),c.pathname);if(l!==null){sr(r,l.message);return}i.handle(e,r,o,F(e)??{class:"person"}).catch(s)}catch(l){s(l)}},"onRequest"),_=u((e,r,o)=>{r.on("error",()=>{});try{const a=new URL(e.url??"/","http://127.0.0.1"),f=m((e.method??"GET").toUpperCase(),a.pathname);if(f!==null){A(r,503,"Service Unavailable","startup_blocked",f.message);return}const s=tr(e.method??"GET",a.pathname);if(s===null){r.destroy();return}ce(e,r,o,s).catch(()=>{try{r.destroy()}catch{}})}catch{try{r.destroy()}catch{}}},"onUpgrade"),K=u(e=>{e.on("error",r=>{g({event:"api.server.failed",level:"error",error:r})})},"bindErrorHandler"),y=x((e,r)=>{try{const o=V(e,w);if(o==="unauthorized"){g({event:"api.principal.denied",level:"warn",fields:{method:e.method}}),T(r);return}if(o==="runtime_starting"){r.writeHead(503,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"runtime_starting",message:"grant sync is not ready",type:"server_error",origin:"runtime",retryable:!0}}));return}R.set(e,o),o.class==="broker"&&g({event:"api.request.principal",level:o.app==="app:terminal"?"debug":"info",node_id:o.node,fields:{principal:`${o.app} node:${o.node}`,method:e.method,path:e.url}}),S(e,r,null)}catch(o){g({event:"api.principal.failed",level:"error",error:o instanceof Error?o:new Error(String(o))}),T(r)}});y.on("upgrade",(e,r,o)=>{try{const a=V(e,w);if(a==="unauthorized"||a==="runtime_starting"){a==="unauthorized"&&g({event:"api.principal.denied",level:"warn",fields:{method:e.method}}),A(r,a==="unauthorized"?401:503,"Unauthorized",a,"socket principal unavailable");return}if(a.class!=="person"&&a.class!=="broker"){A(r,403,"Forbidden",k.code,k.message);return}R.set(e,a),_(e,r,o)}catch(a){g({event:"api.principal.failed",level:"error",error:a instanceof Error?a:new Error(String(a))}),A(r,401,"Unauthorized",b.code,b.message)}});let N=!1,z,P;const Q=new Promise((e,r)=>{z=e,P=r});y.once("listening",()=>{N=!0,z()}),y.on("error",e=>{g({event:"api.server.failed",level:"error",error:e}),N||P(e)});try{C(d)&&B(d)}catch{}y.listen(d,()=>{try{q(d,process.platform==="linux"&&C("/run/crtr/launcher.sock")?438:384)}catch(e){g({event:"api.socket.chmod_failed",level:"error",error:e instanceof Error?e:new Error(String(e))})}});let h;const E=t.tcp??le()??U("user").api.tcp;if(E!==void 0&&E!==""){const e=or(E);if(e===null)g({event:"api.tcp.invalid",level:"error",error:new Error(`invalid CRTRD_TCP/--tcp spec: ${E}`)});else{const r=t.token??ae()??ie("user"),o=r===void 0?void 0:ir(r),a=o===void 0?(s,c)=>{const l=s.headers.authorization;if(typeof l=="string"&&l.startsWith("Bearer crtr_pub_"))R.set(s,H);else if(typeof l=="string"&&l.startsWith("Bearer ")&&G(l.slice(7))){T(c);return}S(s,c,null)}:(s,c)=>{if((s.method??"GET").toUpperCase()==="OPTIONS"){c.writeHead(204,{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Headers":`authorization, content-type, ${j.toLowerCase()}`,"Access-Control-Allow-Methods":"GET, POST, PATCH, PUT, DELETE, OPTIONS","Access-Control-Max-Age":"600"}),c.end();return}const l=Y(s,o);if(l===void 0&&s.headers.authorization?.startsWith("Bearer crtr_pub_")){R.set(s,H),c.setHeader("Access-Control-Allow-Origin","*"),c.setHeader("Access-Control-Expose-Headers",O),S(s,c,null);return}if(l===void 0){T(c);return}R.set(s,l.principal),c.setHeader("Access-Control-Allow-Origin","*"),c.setHeader("Access-Control-Expose-Headers",O),S(s,c,l.ceiling)},f=o===void 0?_:(s,c,l)=>{const v=Y(s,o);if(v===void 0){A(c,401,"Unauthorized",b.code,b.message);return}if(v.ceiling!==null){A(c,403,"Forbidden",k.code,k.message);return}_(s,c,l)};h=x(a),h.on("upgrade",f),K(h),h.once("listening",()=>{const s=h?.address();if(s!==null&&typeof s=="object"){const{address:c,port:l}=s;n=nr(c,l)}}),h.listen(e.port,e.host)}}let I=!1;return{ready:Q,tcpAddress:u(()=>n,"tcpAddress"),close:u(async()=>{if(!I){I=!0,he.close(),await Promise.all([Z(y),h!==void 0?Z(h):Promise.resolve()]);try{C(d)&&B(d)}catch{}}},"close")}}u(gt,"createApiServer");export{gt as createApiServer,F as socketPrincipal};

package/dist/daemon/api/vendor-signin.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { AppPrincipalResolver } from './principal.js';
+export declare const VENDOR_SIGNIN_PATH = "/signin/vendor";
+export declare function isVendorSignInPath(pathname: string): boolean;
+/** Serve one `/signin/vendor*` request; errors propagate as RunErrors so the
+ *  listener answers them with contract 2's envelope (RT-LLM-53). */
+export declare function handleVendorSignIn(req: IncomingMessage, res: ServerResponse, url: URL, principal: AppPrincipalResolver): Promise<void>;

package/dist/daemon/api/vendor-signin.js

@@ -0,0 +1,77 @@
+var k=Object.defineProperty;var a=(e,t)=>k(e,"name",{value:t,configurable:!0});import{randomBytes as _}from"node:crypto";import{joinedOwner as P}from"../../core/directory/join.js";import{consumeHandoffJti as E,handoffJtiConsumed as w}from"../../core/model-auth/handoff-jti.js";import{completeModelAuthFlow as O,modelAuthProvider as I,readModelAuthFlow as v,startModelAuthFlow as $,waitModelAuthFlow as j}from"../../core/model-auth/flows.js";import{RunError as s}from"../../core/runs/operations.js";import{LONG_POLL_MAX_WAIT_SECONDS as A}from"../../api/long-poll.js";const d="/signin/vendor",R=A*1e3,L="https://chatgpt.com/#settings/Security";function Z(e){return e===d||e.startsWith(`${d}/`)}a(Z,"isVendorSignInPath");function u(){return new s(401,"unauthorized","invalid vendor sign-in handoff")}a(u,"unauthorized");async function C(e,t){const n=await e.verifyHandoff(t);let o;try{o=P()}catch{o=null}if(n.sub!==o)throw u();return n}a(C,"verifyOwnerHandoff");function N(e){const t=e.headers.authorization;return t?.startsWith("Bearer ")&&t.length>7?t.slice(7):void 0}a(N,"bearer");function y(e,t){const n=e.getAll(t);return n.length===1?n[0]:void 0}a(y,"single");function B(e,t){const n=new URL(e);return n.searchParams.set("status",t),n.toString()}a(B,"returnUrl");function f(e){return e.replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t])}a(f,"escapeHtml");function l(e,t,n){e.writeHead(t,{"Content-Type":"application/json; charset=utf-8","Cache-Control":"no-store"}),e.end(JSON.stringify(n))}a(l,"sendJson");async function G(e){const t=[];let n=0;for await(const r of e){if(n+=r.length,n>64*1024)throw new s(400,"invalid_request","request body too large");t.push(r)}let o;try{o=JSON.parse(Buffer.concat(t).toString("utf8"))}catch{throw new s(400,"invalid_request","invalid JSON body")}if(typeof o!="object"||o===null||Array.isArray(o))throw new s(400,"invalid_request","request body must be a JSON object");return o}a(G,"jsonBody");const U=`
+body{font:16px/1.5 system-ui,-apple-system,sans-serif;max-width:34rem;margin:3rem auto;padding:0 1.25rem;color:#1a1a1a}
+h1{font-size:1.4rem;margin:0 0 1rem}
+.button{display:inline-block;background:#1a1a1a;color:#fff;border:0;border-radius:.5rem;padding:.8rem 1.4rem;font-size:1.05rem;text-decoration:none;cursor:pointer}
+.code{font:600 2.2rem/1.2 ui-monospace,monospace;letter-spacing:.12em;margin:.5rem 0}
+.note{background:#f4f4f5;border-radius:.5rem;padding:.8rem 1rem}
+label{display:block;font-weight:600;margin:1.5rem 0 .4rem}
+input[type=text]{width:100%;box-sizing:border-box;font:1rem ui-monospace,monospace;padding:.6rem;border:1px solid #bbb;border-radius:.4rem}
+#error{color:#b00020}
+[hidden]{display:none}
+`,J=`
+(function(){
+var cfg=JSON.parse(document.getElementById('cfg').textContent);
+history.replaceState(null,'',location.pathname);
+var auth={'Authorization':'Bearer '+cfg.handoff};
+function back(status){var u=new URL(cfg.returnTo);u.searchParams.set('status',status);location.assign(u.toString());}
+function show(id){document.getElementById(id).hidden=false;}
+var error=document.getElementById('error');
+if(cfg.kind==='anthropic'){
+  var form=document.getElementById('paste');
+  form.addEventListener('submit',function(e){
+    e.preventDefault();
+    var button=form.querySelector('button');button.disabled=true;error.textContent='';
+    fetch(cfg.base,{method:'POST',headers:Object.assign({'Content-Type':'application/json'},auth),body:JSON.stringify({input:form.elements.code.value})})
+      .then(function(r){return r.json().then(function(b){return {ok:r.ok,s:r.status,b:b};});})
+      .then(function(x){
+        if(x.ok){back(x.b.status==='connected'?'connected':'failed');return;}
+        if(x.s===401||x.s===404){back('failed');return;}
+        error.textContent=(x.b&&x.b.error&&x.b.error.message)||'That code was not accepted.';button.disabled=false;
+      })
+      .catch(function(){error.textContent='Could not reach your runtime. Try again.';button.disabled=false;});
+  });
+}else{
+  document.getElementById('copy').addEventListener('click',function(){navigator.clipboard&&navigator.clipboard.writeText(cfg.userCode);});
+  document.getElementById('renew').addEventListener('click',function(){back('failed');});
+  (function poll(){
+    fetch(cfg.base+'/wait',{headers:auth})
+      .then(function(r){if(r.status===401||r.status===404)return {status:'failed'};if(!r.ok)throw new Error(String(r.status));return r.json();})
+      .then(function(b){
+        if(b.status==='pending'){poll();return;}
+        if(b.status==='connected'){back('connected');return;}
+        if(b.status==='expired'){document.getElementById('device').hidden=true;show('expired');return;}
+        back('failed');
+      })
+      .catch(function(){setTimeout(poll,3000);});
+  })();
+}
+})();
+`;function S(e){const t=JSON.stringify(e.config).replace(/</g,"\\u003c");return`<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>${f(e.title)}</title><style nonce="${e.nonce}">${U}</style></head>
+<body>${e.body}
+<script type="application/json" id="cfg">${t}<\/script>
+<script nonce="${e.nonce}">${J}<\/script>
+</body></html>`}a(S,"page");function H(e,t,n,o){return S({nonce:t,title:"Connect Claude",body:`<h1>Connect your Claude account</h1>
+<p>Sign in to Claude in a new tab. When Claude shows you a code, copy it and paste it below.</p>
+<p><a class="button" href="${f(e.url)}" target="_blank" rel="noopener noreferrer">Sign in at claude.ai</a></p>
+<form id="paste" autocomplete="off">
+<label for="code">Paste the code Claude shows</label>
+<input type="text" id="code" name="code" required spellcheck="false">
+<p><button class="button" type="submit">Connect</button></p>
+<p id="error" role="alert"></p>
+</form>`,config:{kind:"anthropic",base:`${d}/${encodeURIComponent(e.flow_id)}`,returnTo:n,handoff:o}})}a(H,"anthropicPage");function z(e,t,n,o){const r=e.user_code??"";return S({nonce:t,title:"Connect ChatGPT",body:`<h1>Connect your ChatGPT account</h1>
+<p class="note">OpenAI refuses this sign-in unless <strong>device code authorization for Codex</strong> is turned on in your
+<a href="${L}" target="_blank" rel="noopener noreferrer">ChatGPT Security Settings</a>. Turn it on first.</p>
+<p>When OpenAI shows an account email, check it is the account you want to use: approving connects that account.</p>
+<div id="device">
+<p>Open <a href="${f(e.url)}" target="_blank" rel="noopener noreferrer">${f(e.url.replace(/^https:\/\//,""))}</a> and enter this code:</p>
+<p class="code">${f(r)}</p>
+<p><button class="button" type="button" id="copy">Copy code</button></p>
+<p>The code expires in 15 minutes. This page moves on by itself once you approve.</p>
+</div>
+<div id="expired" hidden>
+<p>The code expired before it was approved.</p>
+<p><button class="button" type="button" id="renew">Get a new code</button></p>
+</div>
+<p id="error" role="alert"></p>`,config:{kind:"openai",base:`${d}/${encodeURIComponent(e.flow_id)}`,returnTo:n,handoff:o,userCode:r}})}a(z,"openaiPage");async function q(e,t,n,o){const r=y(n.searchParams,"handoff"),c=await C(o,r);if(w(c.jti))throw u();const i=y(n.searchParams,"return_to");let m;try{m=i===void 0?void 0:new URL(i).origin}catch{m=void 0}if(i===void 0||m!==new URL(o.issuer).origin)throw new s(400,"invalid_request","return_to must be an absolute URL on the directory origin","return_to");const p=y(n.searchParams,"vendor");if(p!=="anthropic"&&p!=="openai")throw new s(400,"invalid_request","vendor must be anthropic or openai","vendor");if(!E(c.jti,c.exp))throw u();let b;try{b=await $({provider:I(p),jti:c.jti})}catch(g){console.error("[vendor-signin] start failed:",g instanceof Error?g.message:g),t.writeHead(303,{Location:B(i,"failed"),"Cache-Control":"no-store","Referrer-Policy":"no-referrer"}),t.end();return}const h=_(16).toString("base64"),T=p==="anthropic"?H(b,h,i,r):z(b,h,i,r);t.writeHead(200,{"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","Referrer-Policy":"no-referrer","X-Content-Type-Options":"nosniff","Content-Security-Policy":`default-src 'none'; script-src 'nonce-${h}'; style-src 'nonce-${h}'; connect-src 'self'; form-action 'none'; base-uri 'none'; frame-ancestors 'none'`}),t.end(T)}a(q,"startPage");async function x(e,t,n){const o=await C(t,N(e)),r=v(n);if(!r){if(w(o.jti))return!1;throw u()}if(r.jti===void 0||r.jti!==o.jti)throw u();return!0}a(x,"followUpFlow");async function F(e,t,n,o){if(!await x(e,n,o)){l(t,200,{status:"failed"});return}const r=await G(e);try{await O(o,r.input),l(t,200,{status:"connected"})}catch(c){const i=v(o);if(i&&i.status!=="pending"){l(t,200,{status:"failed"});return}throw c}}a(F,"submitCode");async function M(e,t,n,o){if(!await x(e,n,o)){l(t,200,{status:"failed"});return}const r=new AbortController;t.once("close",()=>r.abort());const c=await j(o,R,r.signal);l(t,200,{status:c?.status??"failed"})}a(M,"waitFlow");async function ee(e,t,n,o){const r=e.method??"GET";if(n.pathname===d&&r==="GET"){await q(e,t,n,o);return}const c=n.pathname.slice(d.length+1).split("/");let i="";try{i=c[0]?decodeURIComponent(c[0]):""}catch{throw new s(404,"not_found","unknown operation")}if(i&&c.length===1&&r==="POST"){await F(e,t,o,i);return}if(i&&c.length===2&&c[1]==="wait"&&r==="GET"){await M(e,t,o,i);return}throw new s(404,"not_found","unknown operation")}a(ee,"handleVendorSignIn");export{d as VENDOR_SIGNIN_PATH,ee as handleVendorSignIn,Z as isVendorSignInPath};

package/dist/daemon/api/viewer-presence.d.ts

@@ -0,0 +1,3 @@
+export declare function hasAttachedBrokerViewers(nodeId: string): boolean;
+export declare function attachViewer(nodeId: string, connection: object): void;
+export declare function detachViewer(nodeId: string, connection: object): void;

package/dist/daemon/api/viewer-presence.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var c=(e,n)=>r(e,"name",{value:n,configurable:!0});const i=new Map;function s(e){return(i.get(e)?.size??0)>0}c(s,"hasAttachedBrokerViewers");function a(e,n){let t=i.get(e);t||(t=new Set,i.set(e,t)),t.add(n)}c(a,"attachViewer");function f(e,n){const t=i.get(e);t&&(t.delete(n),t.size===0&&i.delete(e))}c(f,"detachViewer");export{a as attachViewer,f as detachViewer,s as hasAttachedBrokerViewers};

package/dist/daemon/boot-migrations.d.ts

@@ -0,0 +1,14 @@
+export interface BootMigrationResult {
+    changed: boolean;
+    summary: Record<string, unknown>;
+}
+export interface BootMigration {
+    readonly id: string;
+    readonly description: string;
+    /** Runs unconditionally at every daemon boot. Must be safe to re-run every
+     *  time (idempotent via its own convergence, not a version gate) and must
+     *  isolate its own per-item failures — a thrown error here is NOT caught by
+     *  the boot sequence and would abort daemon startup. */
+    apply(): BootMigrationResult;
+}
+export declare const BOOT_MIGRATIONS: readonly BootMigration[];

package/dist/daemon/boot-migrations.js

@@ -0,0 +1 @@
+var n=Object.defineProperty;var i=(e,r)=>n(e,"name",{value:r,configurable:!0});import{migrateLegacyInboxIdentities as t}from"../core/feed/inbox-migrate.js";const a=[{id:"legacy-inbox-identities",description:"normalize pre-cutover inbox entry/operation ids (UUID-spelled or missing) and cursors (ISO-timestamp boundaries) into canonical 32-lowercase-hex identities the strict inbox reader requires.",apply:i(()=>{const e=t();return{changed:e.nodes>0||e.failures>0,summary:{...e}}},"apply")}];export{a as BOOT_MIGRATIONS};

package/dist/daemon/broker-signals/bus.d.ts

@@ -0,0 +1,30 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { BrokerExtensionNodeDTO } from '../../api/dto/broker-ops.js';
+/** Node-owned mutable fields in extensionNode's projection. Keep this list and
+ * the typed cache view together; object/worktree-owned fields are never cached. */
+export declare const BROKER_SIGNAL_NODE_COLUMNS: readonly ["description", "title", "icon", "mode", "lifecycle", "status", "cwd", "parent", "fork_from", "profile_id", "review_binding_json", "persona_ack_json", "intent"];
+type ProjectedNodeKey<C extends string> = C extends 'review_binding_json' ? 'review_binding' : C extends 'persona_ack_json' ? 'persona_ack' : C;
+export type BrokerSignalCachedNode = Pick<BrokerExtensionNodeDTO, Extract<ProjectedNodeKey<(typeof BROKER_SIGNAL_NODE_COLUMNS)[number]>, keyof BrokerExtensionNodeDTO>>;
+/** Only node-owned columns are suitable for P4's cache. The source list also
+ * drives the SQLite trigger, so a newly added node field has one edit point. */
+export declare function cachedBrokerNodeFields(node: BrokerExtensionNodeDTO): BrokerSignalCachedNode;
+export type BrokerSignalKind = 'mail' | 'node';
+export type BrokerSignalSubscriber = (nodeId: string, kind: BrokerSignalKind) => void;
+/** Hints, not delivery state: a rolled-back write may mark a node. The consumer
+ * always re-reads durable state. Pending marks are bounded by distinct node ids. */
+export declare class BrokerSignalBus {
+    private readonly dirty;
+    private readonly subscribers;
+    private scheduled;
+    subscribe(listener: BrokerSignalSubscriber): () => void;
+    markMail(nodeId: string): void;
+    markNode(nodeId: string): void;
+    private mark;
+    private flush;
+    /** Reinstalled for every new daemon canvas handle (TEMP triggers vanish on close). */
+    install(db: DatabaseSync): void;
+    close(): void;
+}
+/** One daemon-process bus; the API fixture binds this same instance. */
+export declare const brokerSignalBus: BrokerSignalBus;
+export {};

package/dist/daemon/broker-signals/bus.js

@@ -0,0 +1,10 @@
+var a=Object.defineProperty;var r=(t,e)=>a(t,"name",{value:e,configurable:!0});const d=["description","title","icon","mode","lifecycle","status","cwd","parent","fork_from","profile_id","review_binding_json","persona_ack_json","intent"],c=r(t=>t==="review_binding_json"?"review_binding":t==="persona_ack_json"?"persona_ack":t,"nodeField");function l(t){const e={};for(const i of d){const s=c(i);e[s]=t[s]}return e}r(l,"cachedBrokerNodeFields");class o{static{r(this,"BrokerSignalBus")}dirty=new Map;subscribers=new Set;scheduled;subscribe(e){return this.subscribers.add(e),()=>{this.subscribers.delete(e)}}markMail(e){this.mark(e,1)}markNode(e){this.mark(e,2)}mark(e,i){this.dirty.set(e,(this.dirty.get(e)??0)|i),this.scheduled??=setImmediate(()=>this.flush())}flush(){this.scheduled=void 0;const e=[...this.dirty];this.dirty.clear();for(const[i,s]of e)for(const n of this.subscribers)try{s&1&&n(i,"mail"),s&2&&n(i,"node")}catch{}}install(e){e.function("crtr_signal",{deterministic:!1},(i,s)=>{try{typeof s=="string"&&(i==="mail"&&this.markMail(s),i==="node"&&this.markNode(s))}catch{}return null}),e.exec(`
+      CREATE TEMP TRIGGER crtr_sig_deliv_ins AFTER INSERT ON main.deliveries
+        WHEN NEW.wake = 1 BEGIN SELECT crtr_signal('mail', NEW.destination_id); END;
+      CREATE TEMP TRIGGER crtr_sig_deliv_upd AFTER UPDATE OF state, canceled_at, claim_owner ON main.deliveries
+        WHEN NEW.wake = 1 BEGIN SELECT crtr_signal('mail', NEW.destination_id); END;
+      CREATE TEMP TRIGGER crtr_sig_deliv_del AFTER DELETE ON main.deliveries
+        WHEN OLD.wake = 1 BEGIN SELECT crtr_signal('mail', OLD.destination_id); END;
+      CREATE TEMP TRIGGER crtr_sig_node_upd AFTER UPDATE OF ${d.join(", ")} ON main.nodes
+        BEGIN SELECT crtr_signal('node', NEW.node_id); END;
+    `)}close(){this.scheduled!==void 0&&clearImmediate(this.scheduled),this.scheduled=void 0,this.dirty.clear(),this.subscribers.clear()}}const _=new o;export{d as BROKER_SIGNAL_NODE_COLUMNS,o as BrokerSignalBus,_ as brokerSignalBus,l as cachedBrokerNodeFields};

package/dist/daemon/companion-retire.d.ts

@@ -0,0 +1,4 @@
+/** Retire a companion only through the terminal transition legal for its current status.
+ *  A review companion may have forks working single comments beside it; they hold
+ *  the same review binding and go terminal with the review that owns them. */
+export declare function retireCompanion(nodeId: string, outcome: 'approved' | 'canceled'): Promise<'retired' | 'already' | 'missing'>;

package/dist/daemon/companion-retire.js

@@ -0,0 +1 @@
+var d=Object.defineProperty;var o=(i,r)=>d(i,"name",{value:r,configurable:!0});import{childrenOf as f,getNode as s}from"../core/canvas/canvas.js";import{FinalizationError as l,pushFinal as u}from"../core/feed/feed.js";import{transition as p}from"../core/runtime/lifecycle.js";import{requestBrokerTeardown as c}from"../core/runtime/host.js";async function m(i,r){const e=s(i);if(e===null)return"missing";const a=e.review_binding?.review_id;if(a!==void 0)for(const t of f(i))s(t)?.review_binding?.review_id===a&&await m(t,r);if(e.status==="canceled"||r==="canceled"&&e.status==="done")return"already";if(r==="approved"&&(e.status==="active"||e.status==="idle"||e.status==="done")){let t="retired";try{await u(i,"The companion conversation is complete.")}catch(n){if(!(n instanceof l)||n.code!=="already_finalized")throw n;t="already"}return c(i),t}return p(i,"cancel",{reason:"retired"}),(e.status==="active"||e.status==="idle")&&c(i),"retired"}o(m,"retireCompanion");export{m as retireCompanion};

package/dist/daemon/control.d.ts

@@ -0,0 +1,40 @@
+import type { DaemonAdmitDTO, StartupPhaseDTO } from '../api/dto/health.js';
+/** What crtrd exposes to handlers that act on the daemon process itself. */
+export interface DaemonControl {
+    /** This daemon's epoch id. */
+    epoch: string;
+    /** Schedule the handover: this daemon answers now, then after a bounded
+     *  grace tears its fleet down, releases its claim, spawns a successor on the
+     *  currently selected runtime generation, and exits.
+     *
+     *  Returns the grace it will wait. Idempotent — a second request while one is
+     *  already scheduled returns the same grace and schedules nothing new, so an
+     *  agent that retries cannot stack handovers. */
+    requestHandover(): {
+        graceMs: number;
+    };
+    /** Register daemon-owned post-response work for shutdown draining. */
+    registerDetached(work: Promise<void>): void;
+    /** Null only after normal startup completed. */
+    startupBlock(): {
+        phase: Exclude<StartupPhaseDTO, 'ready'>;
+        message: string;
+        blockerPaths: readonly string[];
+    } | null;
+    /** Admit normal work after the daemon has prepared its storage. */
+    admitStartup(): Promise<DaemonAdmitDTO>;
+    /** Plan or run the canvas import and resume normal startup when it completes. */
+    repairMigrations(req: {
+        dryRun: boolean;
+    }): Promise<{
+        result: import('../migrations/activation.js').CanvasImportResult;
+        resumed: boolean;
+        resumeError?: string;
+    }>;
+}
+/** Bind this process's control surface. Called once, by `runDaemon`. */
+export declare function bindDaemonControl(control: DaemonControl): void;
+/** Release the binding (cleanup, and test isolation). */
+export declare function clearDaemonControl(): void;
+/** The bound control surface, or null when this process is not a live daemon. */
+export declare function boundDaemonControl(): DaemonControl | null;

package/dist/daemon/control.js

@@ -0,0 +1 @@
+var l=Object.defineProperty;var n=(o,e)=>l(o,"name",{value:e,configurable:!0});let t=null;function u(o){t=o}n(u,"bindDaemonControl");function a(){t=null}n(a,"clearDaemonControl");function c(){return t}n(c,"boundDaemonControl");export{u as bindDaemonControl,c as boundDaemonControl,a as clearDaemonControl};

package/dist/daemon/cron/armed-context.d.ts

@@ -0,0 +1,25 @@
+import type { Cron } from '../../core/canvas/crons.js';
+/** The cron's profile, re-validated now and returned in canonical id form.
+ *
+ *  A DELETED profile is the spec's root fallback: null. An UNREADABLE one is
+ *  not — the profile is still there, so running as root would execute the
+ *  command under an identity nobody armed, with the profile's own env store and
+ *  purview silently replaced. That throws, and the run fails loudly once
+ *  instead of running wrong on every tick. */
+export declare function resolveLiveProfile(c: Cron): string | null;
+/** The node a cron's birth is a child of: its live creator. With none, the
+ *  birth is a parentless root, which is the person's (app:terminal); an app's
+ *  cron has no node to take its grant from, so it cannot start one. */
+export declare function cronBirthParent(c: Cron): string | null;
+export declare function resolveLiveProfileOrRoot(c: Cron): string | null;
+export declare function resolveLiveProfileName(c: Cron): string | undefined;
+/** A stored context cannot be rebuilt; the run fails rather than running under a context nobody armed. */
+export declare class ArmedContextError extends Error {
+    constructor(message: string);
+}
+export interface ArmedRunContext {
+    profileId: string | null;
+    env: NodeJS.ProcessEnv;
+}
+/** Rebuild the armed context. Corrupt snapshots and unreadable profiles fail rather than silently changing its identity or environment. */
+export declare function buildArmedRunContext(c: Cron, runId: string): ArmedRunContext;

package/dist/daemon/cron/armed-context.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var o=(e,r)=>p(e,"name",{value:r,configurable:!0});import{envHomeOverride as h}from"../../shared/env.js";import{loadProfileManifest as v,lookupProfile as c}from"../../core/profiles/manifest.js";import{readProfileEnvVars as m}from"../../core/profiles/env-store.js";import{readAppEnvVars as _}from"../../core/profiles/app-env-store.js";import{ADMITTED_HOST_PATH_ENV as u,buildOperationalEnvBase as w}from"../../core/runtime/spawn-env.js";import{getNode as R}from"../../core/canvas/canvas.js";function f(e){if(e.profile==null)return null;let r;try{r=c(e.profile)}catch{return null}if(r.kind==="resolved")return r.entry.profileId;if(r.kind==="absent")return null;throw new i(`the armed profile "${e.profile}" is still on this host but its manifest could not be read (${r.manifestPath}) \u2014 running as root would silently give this cron a different identity, env store, and purview. Repair the manifest, or re-arm the cron under a profile that resolves.`)}o(f,"resolveLiveProfile");function N(e){if(e.created_by!==null&&R(e.created_by)!==null)return e.created_by;if(e.isolated)throw new i(`isolated cron ${e.cron_id} cannot start a node after its creator is gone`);if(e.grantee!=="app:terminal")throw new i(`cron ${e.cron_id} belongs to ${e.grantee} and its creator node is gone; only a node of that app can start its births`);return null}o(N,"cronBirthParent");function P(e){try{return f(e)}catch{return null}}o(P,"resolveLiveProfileOrRoot");function T(e){if(e.profile!=null)try{return v(e.profile).manifest.name}catch{return}}o(T,"resolveLiveProfileName");class i extends Error{static{o(this,"ArmedContextError")}constructor(r){super(r),this.name="ArmedContextError"}}function y(e){if(e==null)return{};let r;try{r=JSON.parse(e)}catch(t){throw new i(`the armed env snapshot is not valid JSON (${t.message}) \u2014 this cron's stored env_json is corrupt, so the run would silently drop every armed variable. Re-arm the cron with a valid --env.`)}if(typeof r!="object"||r===null||Array.isArray(r))throw new i("the armed env snapshot is not a JSON object \u2014 this cron's stored env_json is corrupt. Re-arm the cron with a valid --env.");const a={};for(const[t,n]of Object.entries(r)){if(typeof n!="string")throw new i(`the armed env snapshot's value for "${t}" is not a string \u2014 this cron's stored env_json is corrupt, so the run would silently drop that variable. Re-arm the cron with a valid --env.`);a[t]=n}return a}o(y,"parseArmedEnv");function I(e,r){const a=y(e.env_json),t=e.grantee==="app:terminal",n=t?f(e):null,d=w({targetCwd:e.cwd,targetProfileId:n,skipSpawnAllow:!t}),s={...d,..._(e.grantee),...t?m(n):{},...a,...n!==null?{CRTR_PROFILE_ID:n}:{},CRTR_CRON_ID:e.cron_id,CRTR_CRON_NAME:e.name,CRTR_RUN_ID:r},l=h();return l!==void 0&&l!==""&&(s.CRTR_HOME=l),e.anchor_node!=null&&(s.CRTR_ANCHOR=e.anchor_node),s[u]=d[u],{profileId:n,env:s}}o(I,"buildArmedRunContext");export{i as ArmedContextError,I as buildArmedRunContext,N as cronBirthParent,f as resolveLiveProfile,T as resolveLiveProfileName,P as resolveLiveProfileOrRoot};

package/dist/daemon/cron/capture.d.ts

@@ -0,0 +1,22 @@
+/** Output head caps for the run log (spec: "capped, e.g. 4KB"). */
+export declare const CRON_OUTPUT_HEAD_BYTES: number;
+/** Bound between the run-timeout SIGTERM and a forced SIGKILL escalation, so
+ *  a signal-trapping command cannot stall teardown's detached drain. */
+export declare const CRON_KILL_GRACE_MS = 2000;
+/** Poll interval while waiting for a SIGTERMed stale-lease run to actually die
+ *  (each probe is a `ps` call, so this is deliberately coarse). */
+export declare const CRON_DEATH_POLL_MS = 250;
+/** sha256 of empty stdout — the change-detection hash a run that produced no
+ *  output carries (a failed spawn, a recovered stale lease). */
+export declare const EMPTY_STDOUT_SHA256: string;
+/** A byte-capped capture of one output stream's head. Bytes are buffered and
+ *  decoded exactly once, at the end — decoding per chunk both mis-measured the
+ *  cap (UTF-16 code units, not bytes) and corrupted any multi-byte sequence
+ *  that straddled a chunk boundary. Truncation is MARKED, never silent: a
+ *  clipped body reads as complete output to whoever receives the delivery. */
+export declare function newHeadCapture(headBytes?: number): {
+    take(chunk: Buffer): void;
+    decode(): string;
+    truncated(): boolean;
+};
+export declare function formatCronOutputHead(text: string, truncated: boolean): string;

package/dist/daemon/cron/capture.js

@@ -0,0 +1,2 @@
+var c=Object.defineProperty;var a=(t,e)=>c(t,"name",{value:e,configurable:!0});import{createHash as p}from"node:crypto";const s=4*1024,d=2e3,T=250,i=p("sha256").update("").digest("hex");function O(t=s){const e=[];let n=0,o=!1;return{take(r){const u=t-n;if(u<=0){o=!0;return}if(r.length>u){e.push(r.subarray(0,u)),n=t,o=!0;return}e.push(r),n+=r.length},decode(){return Buffer.concat(e).toString("utf8")},truncated(){return o}}}a(O,"newHeadCapture");function x(t,e){return e?`${t}
+[\u2026 output truncated at ${s} bytes]`:t}a(x,"formatCronOutputHead");export{T as CRON_DEATH_POLL_MS,d as CRON_KILL_GRACE_MS,s as CRON_OUTPUT_HEAD_BYTES,i as EMPTY_STDOUT_SHA256,x as formatCronOutputHead,O as newHeadCapture};

package/dist/daemon/cron/disposition.d.ts

@@ -0,0 +1,21 @@
+import { type Cron } from '../../core/canvas/crons.js';
+import { type CronSinkResolution } from './sinks.js';
+export interface RunSettleContext {
+    runId: string;
+    startedAtIso: string;
+    exitCode: number | null;
+    timedOut: boolean;
+    runTimeoutS: number;
+    processErrorMessage: string | null;
+    stdoutHead: string;
+    /** Hash the full output: a capped head can hide a change. */
+    stdoutSha256: string;
+    stderrHead: string;
+}
+export interface Disposition {
+    delivered: string;
+    /** A paused row is retained so `cron resume` can re-arm it. */
+    paused: boolean;
+    obligation?: CronSinkResolution;
+}
+export declare function disposeSettledRun(c: Cron, ctx: RunSettleContext, outOfBand: boolean, selfCanceled?: boolean): Promise<Disposition>;

package/dist/daemon/cron/disposition.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var l=(n,e)=>p(n,"name",{value:e,configurable:!0});import{getCron as v,setCronLastOutputHash as c}from"../../core/canvas/crons.js";import{escalateFailure as u,failureSummary as h}from"./escalation.js";import{resolveCronSink as m}from"./sinks.js";async function w(n,e,t,s=!1){const r=t?"out-of-band: ":"",a=v(n.cron_id);if(a===null&&!s)return{delivered:`${r}cron canceled mid-run \u2014 nothing delivered`,paused:!1};const d=a??n,f=e.timedOut||e.processErrorMessage!==null||e.exitCode!==0;let i=!0;if(d.on_output==="on-change"&&(i=d.last_output_hash!==e.stdoutSha256,!t&&a!==null&&c(n.cron_id,e.stdoutSha256)),f)return d.on_output==="silent"?{delivered:`${r}silent`,paused:!1}:t?{delivered:`out-of-band: ${h(e,null)} \u2014 not escalated`,paused:!1}:{delivered:await u(d,e,null),paused:!0};switch(d.on_output){case"silent":return{delivered:`${r}silent`,paused:!1};case"on-failure":return{delivered:`${r}ok \u2014 nothing to deliver (on-failure)`,paused:!1};case"on-change":return i?o(d,e,t,r):{delivered:`${r}unchanged \u2014 not delivered (on-change)`,paused:!1};case"always":return o(d,e,t,r)}}l(w,"disposeSettledRun");async function o(n,e,t,s){if(e.stdoutHead.trim()==="")return{delivered:`${s}empty stdout \u2014 nothing delivered`,paused:!1};try{const r=m(n,e.runId,e.stdoutHead);return r.kind==="none"?{delivered:`${s}${r.delivered}`,paused:!1}:{delivered:"",paused:!1,obligation:r}}catch(r){const a=`delivery failed: ${r.message}`;return t?{delivered:`out-of-band: ${a} \u2014 not escalated`,paused:!1}:{delivered:await u(n,e,a),paused:!0}}}l(o,"resolveOrEscalate");export{w as disposeSettledRun};

package/dist/daemon/cron/escalation.d.ts

@@ -0,0 +1,12 @@
+import { type Cron } from '../../core/canvas/crons.js';
+import type { RunSettleContext } from './disposition.js';
+export declare function failureSummary(ctx: RunSettleContext, deliveryFailure: string | null): string;
+/** Pause the cron and spawn the escalation node in the cron's originating
+ *  profile (root fallback). Returns the run-log `delivered` string. Never
+ *  throws: an escalation spawn failure is recorded and logged, the pause
+ *  stands (the row must not keep refiring a broken command). */
+export declare function escalateFailure(c: Cron, ctx: RunSettleContext, deliveryFailure: string | null): Promise<string>;
+/** The delivery-failure line an escalated crashed ONE-SHOT carries: its side
+ *  effects may already have landed in full, so a human/agent decides whether to
+ *  redo it rather than the daemon re-firing it. */
+export declare function crashedOneShotSummary(why: string): string;

package/dist/daemon/cron/escalation.js

@@ -0,0 +1,3 @@
+var m=Object.defineProperty;var o=(e,r)=>m(e,"name",{value:r,configurable:!0});import{getNode as f}from"../../core/canvas/canvas.js";import{nodeAgentDir as h}from"../../core/canvas/node-agent-paths.js";import{newNodeId as p}from"../../core/runtime/nodes.js";import{fullName as $}from"../../core/canvas/labels.js";import{listCronRuns as w,setCronState as y}from"../../core/canvas/crons.js";import{emitEvent as u}from"../../core/events/emit.js";import{spawnChild as _}from"../../core/runtime/spawn.js";import{cronWakeOrigin as g}from"../../core/runtime/bearings.js";import{cadenceDisplay as b}from"../../core/wake.js";import{cronBirthParent as v,resolveLiveProfileOrRoot as O}from"./armed-context.js";function k(e,r){return r!==null?r:e.timedOut?`run timed out after ${e.runTimeoutS}s (killed; recorded exit -1)`:e.processErrorMessage!==null?`run process error: ${e.processErrorMessage}`:`command exited ${e.exitCode??"(no exit observed)"}`}o(k,"failureSummary");function S(e,r,d){const t=e.created_by!=null?f(e.created_by):null,i=e.created_by==null?"created by: (no creating node recorded)":t!==null?`created by: node ${e.created_by} ("${$(t)}") \u2014 still on the canvas; consider telling it what happened`:`created by: node ${e.created_by} (now gone)`,a=e.recur!=null?`every ${b(e.recur)}`:`one-shot at ${e.fire_at}`,s=w(e.cron_id).slice(0,10).map(n=>{const c=n.exit_code===null?"no exit":`exit ${n.exit_code}`,l=(n.stderr_head??n.stdout_head??"").split(`
+`)[0]?.slice(0,120)??"";return`- ${n.started} \u2014 ${c}, ${n.duration_ms}ms \u2014 ${n.delivered??""}${l!==""?` \u2014 ${l}`:""}`});return["A scheduled cron FAILED and has paused itself. You were spawned to deal with it.","",`- cron: "${e.name}" (${e.cron_id})`,`- schedule: ${a}${e.tz!=null?` (tz ${e.tz})`:""}`,`- context: cwd ${e.cwd}${e.profile!=null?`, profile ${e.profile}`:""}`,`- ${i}`,`- this failure: ${k(r,d)}`,"","## The command","","```bash",e.command,"```","","## This run","",`- exit: ${r.timedOut?"-1 (timeout)":String(r.exitCode)}`,`- stdout (head): ${r.stdoutHead===""?"(empty)":""}`,...r.stdoutHead!==""?["```",r.stdoutHead,"```"]:[],`- stderr (head): ${r.stderrHead===""?"(empty)":""}`,...r.stderrHead!==""?["```",r.stderrHead,"```"]:[],"","## Recent runs (most recent first, this failure not yet recorded)","",...s.length>0?s:["(no prior runs recorded)"],"","## Your mandate","","Diagnose why it failed and decide what to do:",`- Transient or fixable: fix the environment/command context, verify with \`crtr cron run ${e.cron_id}\` (fires now, out of band, shows you the result), then \`crtr cron resume ${e.cron_id}\` to re-arm it.`,`- Obsolete: \`crtr cron cancel ${e.cron_id}\`.`,"- The user's call (or the fix needs a change you cannot make): `crtr human send`.","","The cron stays paused until someone resumes it \u2014 nothing refires while you work."].join(`
+`)}o(S,"buildEscalationKickoff");async function I(e,r,d){y(e.cron_id,"paused");try{const t=v(e),i=p(),a=await _({nodeId:i,kind:"general",isolated:e.isolated,cwd:e.isolated?h(i,e.grantee):e.cwd,prompt:S(e,r,d),...t!==null?{parent:t}:{root:!0,rootLifecycle:"terminal"},readiness:"launch",profile:O(e),wakeOrigin:g(e,"node_birth")});return u({level:"info",event:"cron.failure.escalated",fields:{cron_id:e.cron_id,name:e.name,escalation_node:a.node.node_id}}),`failure: cron paused, escalation node ${a.node.node_id} spawned`}catch(t){return u({level:"error",event:"cron.escalation.spawn_failed",error:t,fields:{cron_id:e.cron_id,name:e.name}}),`failure: cron paused; escalation spawn failed: ${t.message}`}}o(I,"escalateFailure");function P(e){return[`${e}.`,"This is a ONE-SHOT, so it has been PAUSED rather than released: its side effects may have completed in full,","and re-firing would enact them a second time. Determine whether the work actually landed, then either","`crtr cron run` it to redo it deliberately, or `crtr cron cancel` it."].join(" ")}o(P,"crashedOneShotSummary");export{P as crashedOneShotSummary,I as escalateFailure,k as failureSummary};

package/dist/daemon/cron/held.d.ts

@@ -0,0 +1,4 @@
+import { type Cron, type HeldSettle } from '../../core/canvas/crons.js';
+export declare const EXIT_HELD = 75;
+export declare const HELD_DELIVERED = "deferred (exit 75) \u2014 held for poke";
+export declare function decideHeldSettle(c: Cron, startedAtIso: string, finishedAtMs: number): HeldSettle | undefined;

package/dist/daemon/cron/held.js

@@ -0,0 +1 @@
+var i=Object.defineProperty;var n=(t,r)=>i(t,"name",{value:r,configurable:!0});import{getCron as d}from"../../core/canvas/crons.js";const a=75,f="deferred (exit 75) \u2014 held for poke",_="9999-12-31T23:59:59.999Z";function p(t,r,o){const e=d(t.cron_id);if(e!==null)return e.state==="active"&&e.last_poke_at!==null&&r<e.last_poke_at?{kind:"redue",nowIso:new Date(o).toISOString()}:t.recur!=null?{kind:"park"}:{kind:"park",fireAt:e.expires_at??_}}n(p,"decideHeldSettle");export{a as EXIT_HELD,f as HELD_DELIVERED,p as decideHeldSettle};

package/dist/daemon/cron/lease-recovery.d.ts

@@ -0,0 +1,3 @@
+import type { RunDueCronOptions } from './passes.js';
+/** Recover leases from prior daemon instances. Verify launch identity, not pid liveness: a reboot can recycle the pid, and killing its new owner would signal a stranger. */
+export declare function recoverStaleCronLeases(now: number, options?: RunDueCronOptions): void;

package/dist/daemon/cron/lease-recovery.js

@@ -0,0 +1 @@
+var v=Object.defineProperty;var d=(e,r)=>v(e,"name",{value:r,configurable:!0});import{randomUUID as m}from"node:crypto";import{setTimeout as S}from"node:timers/promises";import{CRON_DEATH_POLL_MS as w,CRON_KILL_GRACE_MS as A,EMPTY_STDOUT_SHA256 as f}from"./capture.js";import{cronDaemonInstanceId as C}from"./live-runs.js";import{crashedOneShotSummary as L,escalateFailure as H}from"./escalation.js";import{settleRun as h}from"./settle.js";import{runningCrons as M,stopLeasedCronRun as p,setCronState as g,verifyLeasedCronRun as l}from"../../core/canvas/crons.js";import{emitEvent as c}from"../../core/events/emit.js";const i=new Set;function K(e,r={}){for(const t of M()){if(t.run_lease_owner===C||i.has(t.cron_id))continue;if(t.run_pid===null||!l(t)){i.add(t.cron_id),D(t,e,r);continue}const o=t.run_started_at!=null?new Date(t.run_started_at).getTime():e;if(e-o<t.run_timeout_s*1e3)continue;const a={runId:m(),startedAtIso:t.run_started_at??new Date(e).toISOString(),exitCode:-1,timedOut:!0,runTimeoutS:t.run_timeout_s,processErrorMessage:null,stdoutHead:"",stdoutSha256:f,stderrHead:`run timed out after ${t.run_timeout_s}s (recovered stale lease from a prior daemon instance)`};i.add(t.cron_id);const n=(async()=>{await p(t),await y(t),await h(t,{outOfBand:!1,outcome:{kind:"disposed",ctx:a},record:{runId:a.runId,startedAtIso:a.startedAtIso,finishedAtMs:e,durationMs:e-o,exitCode:-1,stdoutHead:null,stderrHead:a.stderrHead},lease:{kind:"clear"}})})().finally(()=>i.delete(t.cron_id));r.register?.(n),n.catch(s=>{c({level:"error",event:"cron.stale_lease.settle_failed",error:s,fields:{cron_id:t.cron_id}})})}}d(K,"recoverStaleCronLeases");async function y(e){if(!await I(e)&&(await p(e,"SIGKILL"),!await I(e)))throw new Error(`cron ${e.cron_id} run ${e.run_pid} survived SIGKILL`)}d(y,"awaitLeasedRunDeath");async function I(e){const r=Date.now()+A;for(;Date.now()<r;){if(!l(e))return!0;await S(w)}return!l(e)}d(I,"pollLeasedRunGone");function D(e,r,t){const o=e.recur==null,a=e.run_started_at!=null?new Date(e.run_started_at).getTime():r,n=e.run_pid===null?"the daemon life that claimed this run ended before its launch pid was recorded \u2014 the command may have started and its outcome is unknown":"the daemon life that owned this run ended before it settled \u2014 the process is gone and its outcome was never observed",s={runId:m(),startedAtIso:e.run_started_at??new Date(r).toISOString(),exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:n,stdoutHead:"",stdoutSha256:f,stderrHead:`run outcome unobserved: ${n}`},_=(async()=>{let u=`crashed: ${n}${o?"":" \u2014 the next occurrence is unaffected"}`;o&&(g(e.cron_id,"paused"),u=e.on_output==="silent"?`crashed: ${n} \u2014 one-shot paused, not re-fired (silent: not escalated)`:`crashed one-shot: ${await H(e,s,L(n))}`),await h(e,{outOfBand:!1,outcome:{kind:"stated",delivered:u,paused:o},record:{runId:s.runId,startedAtIso:s.startedAtIso,finishedAtMs:r,durationMs:Math.max(0,r-a),exitCode:null,stdoutHead:null,stderrHead:s.stderrHead},lease:"release"}),c({level:"warn",event:"cron.run.unobserved",fields:{cron_id:e.cron_id,name:e.name,one_shot:o}})})().finally(()=>i.delete(e.cron_id));t.register?.(_),_.catch(u=>{c({level:"error",event:"cron.crashed_run.settle_failed",error:u,fields:{cron_id:e.cron_id}})})}d(D,"settleCrashedRun");export{K as recoverStaleCronLeases};

package/dist/daemon/cron/live-runs.d.ts

@@ -0,0 +1,11 @@
+export declare const cronDaemonInstanceId: `${string}-${string}-${string}-${string}-${string}`;
+export interface LiveRun {
+    runId: string;
+    replaced: boolean;
+    selfCanceled: boolean;
+    kill(): void;
+}
+export declare function liveRunFor(cronId: string): LiveRun | undefined;
+export declare function registerLiveRun(cronId: string, run: LiveRun): void;
+export declare function clearLiveRun(cronId: string, runId: string): void;
+export declare function markSelfCanceledCronRun(cronId: string, runId: string): boolean;

package/dist/daemon/cron/live-runs.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var r=(e,n)=>u(e,"name",{value:n,configurable:!0});import{randomUUID as i}from"node:crypto";const l=i(),o=new Map;function d(e){return o.get(e)}r(d,"liveRunFor");function s(e,n){o.set(e,n)}r(s,"registerLiveRun");function a(e,n){const t=o.get(e);t!==void 0&&t.runId===n&&o.delete(e)}r(a,"clearLiveRun");function p(e,n){const t=o.get(e);return t===void 0||t.runId!==n?!1:(t.selfCanceled=!0,!0)}r(p,"markSelfCanceledCronRun");export{a as clearLiveRun,l as cronDaemonInstanceId,d as liveRunFor,p as markSelfCanceledCronRun,s as registerLiveRun};

package/dist/daemon/cron/passes.d.ts

@@ -0,0 +1,6 @@
+export interface RunDueCronOptions {
+    /** Registers settlement work for graceful-teardown draining. */
+    register?: (work: Promise<void>) => void;
+}
+export declare function expireDueCrons(nowIso: string): void;
+export declare function applyOverlapPolicies(now: number, nowIso: string): void;

package/dist/daemon/cron/passes.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var o=(n,e)=>c(n,"name",{value:e,configurable:!0});import{randomUUID as l}from"node:crypto";import{cronDaemonInstanceId as s,liveRunFor as a}from"./live-runs.js";import{advanceCron as u,cancelCron as p,dueOverlapCrons as f,expiredIdleCrons as _,listCronRuns as m,recordCronRun as v}from"../../core/canvas/crons.js";import{emitEvent as x}from"../../core/events/emit.js";import{nextSlotAfter as h}from"../../core/wake.js";const d="skipped (overlap=skip)";function y(n){for(const e of _(n))p(e.cron_id),x({level:"info",event:"cron.expired",fields:{cron_id:e.cron_id,name:e.name,expires_at:e.expires_at}})}o(y,"expireDueCrons");function C(n){return m(n)[0]?.delivered?.startsWith(d)===!0}o(C,"latestRunIsSkip");function A(n,e){for(const r of f(e)){if(r.overlap==="queue")continue;if(r.overlap==="skip"){let t;try{t=h(r.recur,new Date(n))}catch{continue}u(r.cron_id,t),C(r.cron_id)||v({run_id:l(),cron_id:r.cron_id,started:e,finished:e,duration_ms:0,exit_code:null,stdout_head:null,stderr_head:null,delivered:`${d}: fire landed while the previous run was in flight (consecutive skips are not re-recorded until a run settles)`});continue}const i=a(r.cron_id);r.run_lease_owner===s&&i!==void 0&&!i.replaced&&(i.replaced=!0,i.kill())}}o(A,"applyOverlapPolicies");export{A as applyOverlapPolicies,y as expireDueCrons};

package/dist/daemon/cron/settle.d.ts

@@ -0,0 +1,28 @@
+import { type Cron, type CronRunRecord, type HeldSettle } from '../../core/canvas/crons.js';
+import { type RunSettleContext } from './disposition.js';
+export type LeaseSettlement = 'none' | 'release' | HeldSettle;
+export type SettleOutcome = {
+    kind: 'disposed';
+    ctx: RunSettleContext;
+    selfCanceled?: boolean;
+} | {
+    kind: 'stated';
+    delivered: string;
+    paused?: boolean;
+};
+export interface SettleRecord {
+    runId: string;
+    startedAtIso: string;
+    finishedAtMs: number;
+    durationMs: number;
+    exitCode: number | null;
+    stdoutHead: string | null;
+    stderrHead: string | null;
+}
+export interface SettleRunInput {
+    outOfBand: boolean;
+    outcome: SettleOutcome;
+    record: SettleRecord;
+    lease: LeaseSettlement;
+}
+export declare function settleRun(c: Cron, input: SettleRunInput): Promise<CronRunRecord>;

package/dist/daemon/cron/settle.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var u=(e,s)=>m(e,"name",{value:s,configurable:!0});import{consumeCron as y,recordCronRunLocked as I,releaseCronRunLease as b}from"../../core/canvas/crons.js";import{withCanvasWrite as k}from"../../core/canvas/db.js";import{enqueueDaemonAction as _}from"../../core/canvas/daemon-actions.js";import{enqueueNodeMail as v}from"../../core/feed/messages.js";import{disposeSettledRun as g}from"./disposition.js";function w(e){return typeof e=="object"&&(e.kind==="park"||e.kind==="redue")}u(w,"occurrenceStaysOwed");async function S(e,s){const{outOfBand:c,outcome:o,record:n,lease:i}=s;let t,a,d;if(o.kind==="disposed"){const r=await g(e,o.ctx,c,o.selfCanceled??!1);t=r.delivered,a=r.paused,d=r.obligation}else t=o.delivered,a=o.paused??!1;const f=k(r=>{d!==void 0&&(d.kind==="node"?t=`delivered: ${v(d.destinationNodeId,{kind:"message",label:d.label,senderNodeId:d.senderNodeId,bodyJson:{body:d.stdout},urgency:d.urgency,wake:1,idempotencyKey:n.runId}).deliveryId}`:d.kind==="action"&&(t=`delivered: ${_({adapter:d.adapter,bodyJson:d.bodyJson,idempotencyKey:n.runId})}`));const l={run_id:n.runId,cron_id:e.cron_id,started:n.startedAtIso,finished:new Date(n.finishedAtMs).toISOString(),duration_ms:n.durationMs,exit_code:n.exitCode,stdout_head:n.stdoutHead,stderr_head:n.stderrHead,delivered:t};return I(r,l),l});return i!=="none"&&b(e.cron_id,i==="release"?void 0:i),!c&&e.recur==null&&!a&&!w(i)&&y(e.cron_id),f}u(S,"settleRun");export{S as settleRun};

package/dist/daemon/cron/sinks.d.ts

@@ -0,0 +1,19 @@
+import { type Cron } from '../../core/canvas/crons.js';
+import type { DaemonActionAdapter } from '../../core/canvas/daemon-actions.js';
+export type CronSinkResolution = {
+    kind: 'none';
+    delivered: string;
+} | {
+    kind: 'node';
+    destinationNodeId: string;
+    senderNodeId: string | null;
+    label: string;
+    stdout: string;
+    urgency: 'critical' | 'urgent' | 'normal' | 'deferred';
+} | {
+    kind: 'action';
+    adapter: DaemonActionAdapter;
+    bodyJson: unknown;
+};
+/** Resolve a completed run into a durable obligation. No sink effect happens here. */
+export declare function resolveCronSink(c: Cron, runId: string, stdout: string): CronSinkResolution;

package/dist/daemon/cron/sinks.js

@@ -0,0 +1,2 @@
+var s=Object.defineProperty;var t=(e,r)=>s(e,"name",{value:r,configurable:!0});import{newNodeId as a}from"../../core/runtime/nodes.js";import{nodeAgentDir as u}from"../../core/canvas/node-agent-paths.js";import{getNode as l}from"../../core/canvas/canvas.js";import{parseCronSink as p}from"../../core/canvas/crons.js";import{hasNoNaturalCycle as f}from"../../core/runtime/revive-all.js";import{isParked as k}from"../../core/runtime/lifecycle.js";import{cronWakeOrigin as c}from"../../core/runtime/bearings.js";import{cronBirthParent as y,resolveLiveProfile as h,resolveLiveProfileName as w}from"./armed-context.js";function S(e,r,i){const n=p(e.sink);if(n===null)return{kind:"none",delivered:"no sink armed \u2014 nothing delivered"};if(n.kind==="node"){const o=l(n.node);if(o===null)throw new Error(`node sink ${n.node} is gone`);if(f(o)&&!k(o))throw new Error(`node sink ${n.node} has no natural cycle ahead (done or finalized)`);return{kind:"node",destinationNodeId:n.node,senderNodeId:e.created_by!==null&&l(e.created_by)!==null?e.created_by:null,label:`\u23F0 cron ${e.name}`,stdout:i,urgency:e.tier}}if(n.kind==="spawn"){const o=y(e),d=a(),m=[`Scheduled cron "${e.name}" (${e.cron_id}) fired and delivered its output to you as your kickoff.`,"","## Command output","",i].join(`
+`);return{kind:"action",adapter:{adapter:"cron_spawn",cronId:e.cron_id,nodeId:d,kind:n.spawn,cwd:e.isolated?u(d,e.grantee):e.cwd,isolated:e.isolated,...o!==null?{parent:o,root:!1}:{parent:null,root:!0,rootLifecycle:"terminal"},profile:h(e),wakeOrigin:c(e,"node_birth"),prompt:m},bodyJson:{runId:r,stdout:i}}}return{kind:"action",adapter:{adapter:"cron_human",cronId:e.cron_id,requestId:a(),title:`\u23F0 cron ${e.name}`,summary:`Scheduled cron "${e.name}" delivered output for your attention.`,sessionName:`cron ${e.name} (${e.cron_id})`,profileName:w(e)??null},bodyJson:{runId:r,stdout:i}}}t(S,"resolveCronSink");export{S as resolveCronSink};

package/dist/daemon/cron-run.d.ts

@@ -0,0 +1,31 @@
+import { type RunDueCronOptions } from './cron/passes.js';
+import { type Cron, type CronRunRecord } from '../core/canvas/crons.js';
+export { CRON_OUTPUT_HEAD_BYTES } from './cron/capture.js';
+export { cronDaemonInstanceId, markSelfCanceledCronRun } from './cron/live-runs.js';
+export { type RunDueCronOptions } from './cron/passes.js';
+export { recoverStaleCronLeases } from './cron/lease-recovery.js';
+/** Kick off ONE cron run and return its settlement promise, resolving with
+ *  the settled run record (null = the idle→running lease was lost, or the row
+ *  was quarantined — nothing was recorded by THIS call). The lease and
+ *  recurrence advance happen synchronously before the asynchronous launcher
+ *  request; the promise resolves only after the child has CLOSED and
+ *  every durable transition — disposition/delivery, run record, lease
+ *  release, one-shot consumption — is written.
+ *
+ *  `outOfBand` (the `cron run` verb) takes the same lease but does NOT
+ *  advance a recurrence, does NOT consume a one-shot, and never
+ *  escalates/pauses — it delivers per disposition and hands the record back
+ *  to the invoker. */
+export declare function executeCron(c: Cron, opts: {
+    outOfBand: boolean;
+}): Promise<CronRunRecord | null>;
+/** The daemon's cron pass: expire clock-bounded rows, apply overlap policies,
+ *  then kick off every due active idle cron. Each lease is claimed synchronously,
+ *  but its launch is NEVER awaited in the tick; returns one settlement promise per
+ *  admitted run.
+ *
+ *  A run that launches or revives a node is admitted unconditionally: the
+ *  broker slot ledger is the one admission gate, so such a run's node is born
+ *  or revived frozen at the cap and the node-lifecycle tick starts it when a
+ *  slot frees. The cron itself always fires and settles. */
+export declare function runDueCrons(now: number, options?: RunDueCronOptions): Promise<void>[];