@north-light/cli 0.3.529 → 0.3.531

package/dist/core/llm/app-rungs.d.ts

@@ -13,4 +13,4 @@ export declare function resolveAppRung(endpoint: InferenceEndpoint, requested: s
 export declare function appCandidates(endpoint: InferenceEndpoint, requested: string | undefined, exact?: boolean): AppRung[];
 /** The rung an app-paid grant's node runs on for `requested` (RT-RTE-24), or null when the grant is user-paid or
  *  absent. Every path that chooses a node's model (spawn, `node config --model`) resolves through here. */
-export declare function appRungForGrant(grantId: string | null | undefined, requested: string | undefined, exact?: boolean): AppRung | null;
+export declare function appRungForGrant(grantId: string | null | undefined, requested: string | undefined, exact?: boolean): Promise<AppRung | null>;

package/dist/core/llm/app-rungs.js

@@ -1 +1 @@
-var h=Object.defineProperty;var f=(e,r)=>h(e,"name",{value:r,configurable:!0});import{defaultModelLaddersConfig as x}from"../../types.js";import{MODEL_STRENGTHS as b,stripThinkingSuffix as p}from"../runtime/model-selection.js";import{modelTokenStrength as O}from"../runtime/launch.js";import{RunError as u}from"../runs/operations.js";import{grantRecord as w}from"../grants/mirror.js";const o=b;function l(e,r){const t=o.indexOf(r);return o.filter(n=>e.rungs[n]!==void 0).sort((n,i)=>Math.abs(o.indexOf(n)-t)-Math.abs(o.indexOf(i)-t)||o.indexOf(n)-o.indexOf(i)).map(n=>({strength:n,model:e.rungs[n]}))}f(l,"rungsByDistance");function d(e,r){const t=l(e,r)[0];if(t===void 0)throw new u(404,"model_unavailable","the app's inference endpoint declares no rung");return t}f(d,"rungAt");function g(e,r,t=!1){if(r===void 0||r==="")return d(e,"strong");const n=O(r)??void 0;if(n!==void 0)return d(e,n);const i=p(r),s=o.find(a=>e.rungs[a]===i);if(s!==void 0)return{strength:s,model:e.rungs[s]};if(t)throw new u(400,"substitution_refused",`model '${r}' is not one of this app's inference rungs`);const c=x(),m=[...Object.entries(c.anthropic),...Object.entries(c.openai)].find(([,a])=>p(a)===i);return d(e,m?.[0]??"strong")}f(g,"resolveAppRung");function v(e,r,t=!1){const n=g(e,r,t);if(t)return[n];const i=l(e,n.strength).filter(s=>s.strength!==n.strength);return[n,...i]}f(v,"appCandidates");function G(e,r,t=!1){const n=e?w(e):null;if(n?.payer!=="app")return null;if(!n.inference_endpoint)throw new u(404,"model_unavailable",`${n.grantee} is app-paid but its grant carries no inference endpoint`);return g(n.inference_endpoint,r,t)}f(G,"appRungForGrant");export{v as appCandidates,G as appRungForGrant,g as resolveAppRung,d as rungAt};
+var h=Object.defineProperty;var s=(e,r)=>h(e,"name",{value:r,configurable:!0});import{defaultModelLaddersConfig as x}from"../../types.js";import{MODEL_STRENGTHS as b,stripThinkingSuffix as p}from"../runtime/model-selection.js";import{modelTokenStrength as w}from"../runtime/launch.js";import{RunError as u}from"../runs/operations.js";import{grantRecord as O}from"../grants/mirror.js";const o=b;function l(e,r){const t=o.indexOf(r);return o.filter(n=>e.rungs[n]!==void 0).sort((n,i)=>Math.abs(o.indexOf(n)-t)-Math.abs(o.indexOf(i)-t)||o.indexOf(n)-o.indexOf(i)).map(n=>({strength:n,model:e.rungs[n]}))}s(l,"rungsByDistance");function d(e,r){const t=l(e,r)[0];if(t===void 0)throw new u(404,"model_unavailable","the app's inference endpoint declares no rung");return t}s(d,"rungAt");function g(e,r,t=!1){if(r===void 0||r==="")return d(e,"strong");const n=w(r)??void 0;if(n!==void 0)return d(e,n);const i=p(r),f=o.find(a=>e.rungs[a]===i);if(f!==void 0)return{strength:f,model:e.rungs[f]};if(t)throw new u(400,"substitution_refused",`model '${r}' is not one of this app's inference rungs`);const c=x(),m=[...Object.entries(c.anthropic),...Object.entries(c.openai)].find(([,a])=>p(a)===i);return d(e,m?.[0]??"strong")}s(g,"resolveAppRung");function v(e,r,t=!1){const n=g(e,r,t);if(t)return[n];const i=l(e,n.strength).filter(f=>f.strength!==n.strength);return[n,...i]}s(v,"appCandidates");async function y(e,r,t=!1){const n=e?await O(e):null;if(n?.payer!=="app")return null;if(!n.inference_endpoint)throw new u(404,"model_unavailable",`${n.grantee} is app-paid but its grant carries no inference endpoint`);return g(n.inference_endpoint,r,t)}s(y,"appRungForGrant");export{v as appCandidates,y as appRungForGrant,g as resolveAppRung,d as rungAt};

package/dist/core/llm/run.js

@@ -1,3 +1,3 @@
 var be=Object.defineProperty;var u=(e,t)=>be(e,"name",{value:t,configurable:!0});import{randomUUID as ve}from"node:crypto";import{streamSimple as we}from"@earendil-works/pi-ai/compat";import{expandModelCandidates as ie,parseModelSpec as se,probeRouteAvailability as xe}from"../model-routes.js";import{readMergedLaunchConfig as ae}from"../config.js";import{openModelRegistry as ke}from"../runtime/model-registry.js";import{MAX_RATE_LIMIT_COOLDOWN_MS as de,coolingUntilFor as le,isManagedProvider as H,markSubscriptionRateLimited as je,markSubscriptionSuccess as Me,readSubscriptionPool as Ae,retryAfterMsFromHeaders as K,retryAfterMsFromError as qe,refreshSubscriptionCredential as $e,subscriptionNeedsSuccessWrite as Re}from"../subscription-state.js";import{classifyRateLimit as Ie,describeRateLimitScope as ce,rateLimitHeaders as Ce}from"../rate-limit-scope.js";import{RunError as i}from"../runs/operations.js";import{recognizeProviderError as Y}from"../provider-error-recognition.js";import{isSafetyRefusal as Se}from"./refusal.js";import{assertUnderCap as Oe,recordModelUsage as ue}from"../usage/ledger.js";import{outboundToken as Le}from"../providers/mint.js";import{discardFile as Ee}from"../providers/token-cache.js";import{ProviderError as Ne}from"../providers/errors.js";import{appCandidates as De}from"./app-rungs.js";function Fe(e){return typeof e=="string"||e===null||Array.isArray(e)&&e.every(t=>t&&typeof t=="object"&&(t.type==="text"&&typeof t.text=="string"||t.type==="image_url"&&typeof t.image_url?.url=="string"&&/^data:image\/(png|jpeg|gif|webp);base64,[A-Za-z0-9+/]+={0,2}$/.test(t.image_url.url)))}u(Fe,"validContent");function fe(e){return Array.isArray(e)?e.map(t=>{if(t.type==="text")return t;const[,n,r]=/^data:(image\/(?:png|jpeg|gif|webp));base64,(.*)$/.exec(t.image_url.url);return{type:"image",mimeType:n,data:r}}):e??""}u(fe,"imageContent");function Te(e,t){const n=(e instanceof Error?e.message:String(e)).split("; stack=",1)[0],r=Y({message:n}).kind;return r!=="connection"&&r!=="connection-only"?e:new i(503,"upstream_model_unavailable",n.slice(0,500),void 0,{served_model:t})}u(Te,"refreshFailure");function lt(e){if(!e||typeof e!="object"||Array.isArray(e))throw new i(400,"invalid_request","body must be an object");const t=e;if(!Array.isArray(t.messages)||!t.messages.every(n=>n&&typeof n=="object"&&["system","user","assistant","tool"].includes(n.role)&&Fe(n.content)))throw new i(400,"invalid_request","messages must be chat messages","messages");if(t.messages.some(n=>["system","assistant"].includes(n.role)&&typeof n.content!="string"&&n.content!==null))throw new i(400,"invalid_request","system and assistant content must be text","messages");if(t.model!==void 0&&typeof t.model!="string")throw new i(400,"invalid_request","model must be a string","model");if(t.model_policy!==void 0&&!["exact","substitute"].includes(t.model_policy))throw new i(400,"invalid_request","invalid model_policy","model_policy");if(t.payer!==void 0&&!["user","app"].includes(t.payer))throw new i(400,"invalid_request","invalid payer","payer");if(t.reasoning_effort!==void 0&&!["minimal","low","medium","high","xhigh","max"].includes(t.reasoning_effort))throw new i(400,"invalid_request","invalid reasoning_effort","reasoning_effort");if(t.stream!==void 0&&typeof t.stream!="boolean")throw new i(400,"invalid_request","stream must be boolean","stream");if(t.tools!==void 0&&(!Array.isArray(t.tools)||!t.tools.every(n=>n?.type==="function"&&typeof n.function?.name=="string"&&n.function.name.length>0&&(n.function.description===void 0||typeof n.function.description=="string")&&(n.function.parameters===void 0||n.function.parameters!==null&&typeof n.function.parameters=="object"&&!Array.isArray(n.function.parameters)&&n.function.parameters.type==="object"))))throw new i(400,"invalid_request","invalid tools","tools");if(t.tool_choice!==void 0&&t.tool_choice!=="auto"&&t.tool_choice!=="none"&&t.tool_choice!=="required"&&(typeof t.tool_choice!="object"||t.tool_choice===null||t.tool_choice.type!=="function"||typeof t.tool_choice.function?.name!="string"))throw new i(400,"invalid_request","invalid tool_choice","tool_choice");if(t.messages.some(n=>n.role==="assistant"&&n.tool_calls!==void 0&&(!Array.isArray(n.tool_calls)||!n.tool_calls.every(r=>r&&typeof r.id=="string"&&typeof r.function?.name=="string"&&typeof r.function.arguments=="string"&&Pe(r.function.arguments)))))throw new i(400,"invalid_request","invalid assistant tool_calls","messages");if(t.stop!==void 0&&!(typeof t.stop=="string"||Array.isArray(t.stop)&&t.stop.every(n=>typeof n=="string")))throw new i(400,"invalid_request","invalid stop","stop");if(t.seed!==void 0&&!Number.isSafeInteger(t.seed))throw new i(400,"invalid_request","invalid seed","seed");for(const[n,r]of[["temperature",t.temperature],["top_p",t.top_p],["max_tokens",t.max_tokens]])if(r!==void 0&&(typeof r!="number"||!Number.isFinite(r)||n==="temperature"&&(r<0||r>2)||n==="top_p"&&(r<0||r>1)||n==="max_tokens"&&(!Number.isSafeInteger(r)||r<1)))throw new i(400,"invalid_request",`invalid ${n}`,n);if(t.response_format!==void 0){const n=t.response_format;if(!n||typeof n!="object"||Array.isArray(n)||!["text","json_object","json_schema"].includes(n.type)||n.type==="json_schema"&&(typeof n.json_schema?.name!="string"||!n.json_schema.name||!n.json_schema.schema||typeof n.json_schema.schema!="object"||Array.isArray(n.json_schema.schema)))throw new i(400,"invalid_request","invalid response_format","response_format")}if(t.metadata!==void 0&&Buffer.byteLength(JSON.stringify(t.metadata)??"")>4096)throw new i(400,"invalid_request","metadata exceeds 4 KB","metadata");return t}u(lt,"parseLlmRequest");function Pe(e){try{const t=JSON.parse(e);return t!==null&&typeof t=="object"&&!Array.isArray(t)}catch{return!1}}u(Pe,"isJsonObject");function Ue(e){const t=Date.now(),n=e.messages.map(s=>s.role==="system"?{role:"system",content:s.content??"",timestamp:t}:s.role==="tool"?{role:"toolResult",toolCallId:s.tool_call_id??"",toolName:"",content:typeof s.content=="string"||s.content===null?[{type:"text",text:s.content??""}]:fe(s.content),isError:!1,timestamp:t}:s.role==="assistant"?{role:"assistant",content:[...s.content?[{type:"text",text:s.content}]:[],...(s.tool_calls??[]).map(g=>({type:"toolCall",id:g.id,name:g.function.name,arguments:JSON.parse(g.function.arguments)}))],api:"openai-completions",provider:"openai",model:e.model??"",usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"stop",timestamp:t}:{role:"user",content:fe(s.content),timestamp:t}),r=n.findIndex(s=>s.role!=="system"),w=n.slice(0,r<0?n.length:r).map(s=>s.content),y=w.join(`
 
-`),l=e.tools?.map(({function:s})=>({name:s.name,description:s.description??"",parameters:s.parameters??{type:"object",properties:{}}}));return{...y?{systemPrompt:y}:{},messages:n.slice(w.length),...l?{tools:l}:{}}}u(Ue,"contextOf");function me(e,t,n,r){if(!e){const y=ae(n,r),l=Object.values({...y.modelRoutes??{},...y.legacyModelRoutes??{}}),s=l.length?[y.modelLadders.defaultProvider,...y.modelRouting?.familyOrder??[],...l.map(g=>g.family)].find(g=>l.some(E=>E.family===g)):y.modelLadders.defaultProvider??"anthropic";return{kind:"logical",family:s,strength:"strong",spec:`${s}/strong`}}const w=/^([^/]+)\/(ultra|strong|medium|light)$/.exec(e);return w?{kind:"logical",family:w[1],strength:w[2],spec:e}:{kind:t==="exact"?"exact":"concrete",spec:e}}u(me,"requestFor");function Je(e,t){const{input:n,output:r,cacheRead:w,cacheWrite:y}=e.cost;return n===0&&r===0&&w===0&&y===0?null:Number.isFinite(t)&&t>=0?t:null}u(Je,"usdEquivalent");function We(e,t){return e.compat?.allowedFallbackModels?.find(r=>r.provider===e.provider&&r.model===t)}u(We,"allowedFallback");function ct(e){return e?{payer:e.payer??"user",sub:e.sub,grantee:e.grantee,inference_endpoint:e.inference_endpoint??null}:void 0}u(ct,"llmCallerOf");function He(e){return e instanceof Ne?e.code==="server_error"?new i(503,"upstream_model_unavailable",e.message):new i(404,"model_unavailable",e.message):e}u(He,"mintFailure");const Ke=/\bmodel is not supported when using Codex with a ChatGPT account\b/i;function ze(e,t,n){if(!(e!=="openai-codex"||t===void 0||!Ke.test(t)))return new i(404,"model_unavailable",t,void 0,{served_model:n})}u(ze,"codexAccountModelRejection");async function ut(e,t,n,r,w,y){const l=y?.payer==="app"?y:void 0;if(e.payer==="app"&&!l)throw new i(403,"payer_not_app","this grant is not app-paid");if(e.payer==="user"&&l)throw new i(400,"invalid_request","this grant is app-paid; payer cannot be user","payer");if(l&&!l.inference_endpoint)throw new i(404,"model_unavailable",`${l.grantee} is app-paid but its grant carries no inference endpoint`);const s=l?.inference_endpoint??void 0;l||Oe(w);const g=await ke(),E=u(c=>c.routeId!=="concrete"&&c.routeId!=="exact","configured"),ee=u(c=>{const h=g.find(c.providerId,c.modelId);return h!==void 0&&(!e.reasoning_effort||h.reasoning)&&(e.seed===void 0&&e.response_format===void 0||h.api==="openai-completions")&&(e.stop===void 0||["openai-completions","anthropic-messages"].includes(h.api))},"matchesFeatures"),pe=u(()=>{const c=me(e.model,e.model_policy,r?.cwd,r?.profileId),h=ie(c.kind==="exact"?{kind:"concrete",spec:c.spec}:c,r?.cwd,r?.profileId).filter(E);let a;if(c.kind==="logical")a=e.model_policy==="exact"?h.filter(m=>m.family===c.family&&m.strength===c.strength).slice(0,1):h;else{const m=se(c.spec),q=h.filter(j=>j.providerId===m?.providerId&&j.modelId===m.modelId&&(e.model_policy!=="exact"||j.thinkingLevel===m.thinkingLevel)&&ee(j));if(e.model_policy==="exact")a=q.slice(0,1);else if(q.length)a=q;else{const j=ae(r?.cwd,r?.profileId),x=[...Object.values(j.modelRoutes??{}).flatMap(v=>Object.entries(v.models)),...[j.modelLadders.anthropic,j.modelLadders.openai].flatMap(v=>Object.entries(v))].find(([,v])=>v===c.spec)?.[0],f=me(void 0,"substitute",r?.cwd,r?.profileId);a=x&&f.kind==="logical"?ie({...f,strength:x,spec:c.spec},r?.cwd,r?.profileId).filter(v=>E(v)&&v.strength===x):[]}}return a},"ownerCandidates");let R;if(s?R=De(s,e.model,e.model_policy==="exact").flatMap((c,h)=>{const a=se(c.model);return a?[{routeId:"app",credentialSource:"app",family:"app",strength:c.strength,...a,rank:h}]:[]}):R=pe(),R=R.filter(ee),R.length===0)throw e.model_policy==="exact"?new i(400,"substitution_refused","no eligible model route is configured"):new i(404,"model_unavailable","no eligible model route is configured");const te=`chatcmpl-${ve()}`;let I=1/0,b,z;for(const c of R){if(!l&&!xe(c,g).authenticated)continue;const h=g.find(c.providerId,c.modelId);if(!h)continue;const a=s?{...h,baseUrl:`${s.base_url}/${h.provider}`}:h,m=c.providerId,q=!l&&H(m)?Ae(m).filter(x=>!x.authFailure):[],j=q.filter(x=>le(x,a.id)<=Date.now());if(q.length&&!j.length){const x=Math.min(...q.map(f=>le(f,a.id)));x<I&&(I=x,z=`${a.provider}/${a.id}`);continue}const oe=l?[void 0,void 0]:q.length?j:[void 0];for(const[x,f]of oe.entries()){const v=Date.now();let ne=f?.access;if(f&&f.expires<=Date.now()&&H(m)){const o=g.getProvider(m)?.auth.oauth;if(!o)throw new i(503,"upstream_model_unavailable",`no OAuth refresh for ${m}`,void 0,{served_model:`${a.provider}/${a.id}`});ne=(await $e(m,f.label,async(k,re)=>{const W=await o.refresh({type:"oauth",refresh:k,access:"",expires:0,...re?{clientId:re}:{}},t??new AbortController().signal).catch(ge=>{throw Te(ge,`${a.provider}/${a.id}`)}),V=W.clientId;return{refresh:W.refresh,access:W.access,expires:W.expires,...typeof V=="string"&&V?{clientId:V}:{}}})).access}const he=Ue(e);let N;if(l&&s)try{N=await Le({audience:s.base_url,sub:l.sub,grantee:l.grantee,initiating_app:l.grantee,scope:["crtr:llm"]},{signal:t})}catch(o){throw He(o)}const C=f||l?void 0:await g.getApiKeyAndHeaders(a);if(C&&!C.ok)continue;const p=`${a.provider}/${a.id}`,S=e.model??p;let A=!1,L,M=3e4,$;const B=[],X=[],D=[];let d,F;const T=u((o,_=null)=>({id:te,object:"chat.completion.chunk",created:Math.floor(v/1e3),model:p,served_model:p,requested_model:S,substituted:S!==p&&!/^([^/]+)\/(ultra|strong|medium|light)$/.test(S),choices:[{index:0,delta:o,finish_reason:_}]}),"chunk"),P=u(o=>{B.push(o),n?.(o)},"emit"),_e=we(a,he,{apiKey:N?.access_token??ne??(C?.ok?C.apiKey:void 0),...C?.ok?{headers:C.headers}:{},signal:t,reasoning:e.reasoning_effort??c.thinkingLevel,...e.temperature!==void 0?{temperature:e.temperature}:{},...e.max_tokens!==void 0?{maxTokens:e.max_tokens}:{},...e.top_p!==void 0?{samplingParams:{top_p:e.top_p}}:{},...e.tool_choice==="none"?{toolChoice:"none"}:{},onPayload:u(o=>{if(!o||typeof o!="object")return;const _=e.tool_choice,k=_==="required"?a.api==="anthropic-messages"?{type:"any"}:"required":typeof _=="object"&&_!==null?a.api==="anthropic-messages"?{type:"tool",name:_.function.name}:_:void 0;return{...o,...k?{tool_choice:k}:{},...e.stop!==void 0?{[a.api==="anthropic-messages"?"stop_sequences":"stop"]:typeof e.stop=="string"?[e.stop]:e.stop}:{},...e.seed!==void 0?{seed:e.seed}:{},...e.response_format!==void 0?{response_format:e.response_format}:{}}},"onPayload"),fetch:u(async(o,_)=>{const k=await fetch(o,_);return L=k.status,k.status===429&&(A=!0,$=k.headers,M=K(k.headers)??15e3),k},"fetch"),onResponse:u(o=>{o.status===429&&(A=!0,$=o.headers,M=K(o.headers)??15e3)},"onResponse")});try{for await(const o of _e)o.type==="text_delta"&&(X.push(o.delta),P(T({content:o.delta}))),o.type==="thinking_delta"&&(D.push(o.delta),P(T({reasoning_content:o.delta}))),o.type==="done"&&(d=o.message),o.type==="error"&&(d=o.error)}catch(o){const _=qe(o);$===void 0&&o&&typeof o=="object"&&"headers"in o&&Object.keys(Ce(o.headers)).length&&($=o.headers);const k=Y({status:o&&typeof o=="object"&&"status"in o?o.status:void 0,message:o instanceof Error?o.message:String(o)});if(l)F=o;else{if(!A&&k.kind!=="rate-limit")throw B.length?new i(503,"upstream_model_unavailable",o instanceof Error?o.message:String(o),void 0,{served_model:p}):o;A=!0,M=_??M}}if(l){if(L===401){if(N&&Ee(N.key),x===0)continue;throw new i(404,"model_unavailable",`${s.base_url} refuses this runtime's tokens`,void 0,{served_model:p})}if(A&&K($)===void 0)throw new i(503,"upstream_model_unavailable",`${p} was rate-limited without a retry-after`,void 0,{served_model:p});if(!A&&(F!==void 0||L!==void 0&&L>=500))throw new i(503,"upstream_model_unavailable",F instanceof Error?F.message:d?.errorMessage??"inference endpoint failed",void 0,{served_model:p})}if(!A&&d?.stopReason==="error"&&Y({message:d.errorMessage}).kind==="rate-limit"&&(A=!0,M=15e3),A){const o=Ie($,a.id);if(K($)===void 0&&o.resetAt!==void 0&&(M=Math.max(M,o.resetAt-Date.now())),b={provider:m,model:a.id,...f?{account:f.label}:{},observation:o},console.error(`[llm] 429 from ${p}${f?` account "${f.label}"`:""}: scope=${ce(o.scope)} retry_after_ms=${M} headers=${JSON.stringify(o.headers)}`),f&&H(m)&&await je(m,f.label,M,v,Date.now(),o.scope),Date.now()+Math.min(M,de)<I&&(I=Date.now()+Math.min(M,de),z=p),X.length||D.length)throw new i(503,"service_unavailable","vendor rate limit after output began",void 0,{served_model:p});if(l)break;continue}const U=Se(d);if(L===400&&e.tool_choice!==void 0&&e.tool_choice!=="auto"&&e.tool_choice!=="none"&&/\btool[_ ]choice\b/i.test(d?.errorMessage??"")&&/not supported|does not support|unsupported|cannot|must be auto/i.test(d?.errorMessage??""))throw new i(400,"invalid_request",d.errorMessage,"tool_choice",{served_model:p});if(d?.stopReason==="error"){const o=ze(a.provider,d.errorMessage,p);if(o)throw o}if(!d||d.stopReason==="error"&&!U||d.stopReason==="aborted")throw new i(503,"upstream_model_unavailable",d?.errorMessage??"model request failed",void 0,{served_model:p});f&&H(m)&&Re(f,a.id)&&await Me(m,f.label,v,a.id);const G=d.content.filter(o=>o.type==="toolCall").map(o=>({id:o.id,type:"function",function:{name:o.name,arguments:JSON.stringify(o.arguments)}})),Z=U?"content_filter":d.stopReason==="toolUse"?"tool_calls":d.stopReason==="length"?"length":"stop",Q=d.responseModel?We(a,d.responseModel):void 0,O=Q?`${a.provider}/${Q.model}`:p,J={prompt_tokens:d.usage.input,completion_tokens:d.usage.output,total_tokens:d.usage.totalTokens,cache_read_tokens:d.usage.cacheRead,cache_write_tokens:d.usage.cacheWrite,usd_equivalent:Je(Q??a,d.usage.cost.total),served_model:O};l?ue(l.grantee,"app",O,d.usage,J.usd_equivalent):w&&ue(w.grantee,"user",O,d.usage,J.usd_equivalent);const ye={id:te,object:"chat.completion",created:Math.floor(v/1e3),model:O,served_model:O,requested_model:S,substituted:S!==O&&!/^([^/]+)\/(ultra|strong|medium|light)$/.test(S),choices:[{index:0,message:{role:"assistant",content:X.join("")||null,...D.length?{reasoning_content:D.join("")}:{},...G.length?{tool_calls:G}:{},...U?{refusal:d.errorMessage??"Content filtered"}:{}},finish_reason:Z}],usage:J,...e.metadata!==void 0?{metadata:e.metadata}:{}};for(const[o,_]of G.entries())P(T({tool_calls:[{index:o,..._}]}));return P({...T({},Z),...U?{choices:[{index:0,delta:{},finish_reason:Z,message:{refusal:d.errorMessage??"Content filtered"}}]}:{},usage:J}),{completion:ye,chunks:B}}}throw I!==1/0?new i(429,"all_routes_exhausted","all eligible model routes are rate-limited",void 0,{retry_after_s:Math.max(1,Math.ceil((I-Date.now())/1e3)),served_model:b?`${b.provider}/${b.model}`:z,...b?{rate_limit:{provider:b.provider,model:b.model,...b.account?{account:b.account}:{},scope:ce(b.observation.scope),...b.observation.claim?{claim:b.observation.claim}:{},headers:b.observation.headers}}:{}},void 0,!0):e.model_policy==="exact"?new i(400,"substitution_refused","the requested model is unavailable"):new i(404,"model_unavailable","no usable model route is available")}u(ut,"runLlm");export{ct as llmCallerOf,lt as parseLlmRequest,ut as runLlm};
+`),l=e.tools?.map(({function:s})=>({name:s.name,description:s.description??"",parameters:s.parameters??{type:"object",properties:{}}}));return{...y?{systemPrompt:y}:{},messages:n.slice(w.length),...l?{tools:l}:{}}}u(Ue,"contextOf");function me(e,t,n,r){if(!e){const y=ae(n,r),l=Object.values({...y.modelRoutes??{},...y.legacyModelRoutes??{}}),s=l.length?[y.modelLadders.defaultProvider,...y.modelRouting?.familyOrder??[],...l.map(g=>g.family)].find(g=>l.some(E=>E.family===g)):y.modelLadders.defaultProvider??"anthropic";return{kind:"logical",family:s,strength:"strong",spec:`${s}/strong`}}const w=/^([^/]+)\/(ultra|strong|medium|light)$/.exec(e);return w?{kind:"logical",family:w[1],strength:w[2],spec:e}:{kind:t==="exact"?"exact":"concrete",spec:e}}u(me,"requestFor");function Je(e,t){const{input:n,output:r,cacheRead:w,cacheWrite:y}=e.cost;return n===0&&r===0&&w===0&&y===0?null:Number.isFinite(t)&&t>=0?t:null}u(Je,"usdEquivalent");function We(e,t){return e.compat?.allowedFallbackModels?.find(r=>r.provider===e.provider&&r.model===t)}u(We,"allowedFallback");function ct(e){return e?{payer:e.payer??"user",sub:e.sub,grantee:e.grantee,inference_endpoint:e.inference_endpoint??null}:void 0}u(ct,"llmCallerOf");function He(e){return e instanceof Ne?e.code==="server_error"?new i(503,"upstream_model_unavailable",e.message):new i(404,"model_unavailable",e.message):e}u(He,"mintFailure");const Ke=/\bmodel is not supported when using Codex with a ChatGPT account\b/i;function ze(e,t,n){if(!(e!=="openai-codex"||t===void 0||!Ke.test(t)))return new i(404,"model_unavailable",t,void 0,{served_model:n})}u(ze,"codexAccountModelRejection");async function ut(e,t,n,r,w,y){const l=y?.payer==="app"?y:void 0;if(e.payer==="app"&&!l)throw new i(403,"payer_not_app","this grant is not app-paid");if(e.payer==="user"&&l)throw new i(400,"invalid_request","this grant is app-paid; payer cannot be user","payer");if(l&&!l.inference_endpoint)throw new i(404,"model_unavailable",`${l.grantee} is app-paid but its grant carries no inference endpoint`);const s=l?.inference_endpoint??void 0;l||await Oe(w);const g=await ke(),E=u(c=>c.routeId!=="concrete"&&c.routeId!=="exact","configured"),ee=u(c=>{const h=g.find(c.providerId,c.modelId);return h!==void 0&&(!e.reasoning_effort||h.reasoning)&&(e.seed===void 0&&e.response_format===void 0||h.api==="openai-completions")&&(e.stop===void 0||["openai-completions","anthropic-messages"].includes(h.api))},"matchesFeatures"),pe=u(()=>{const c=me(e.model,e.model_policy,r?.cwd,r?.profileId),h=ie(c.kind==="exact"?{kind:"concrete",spec:c.spec}:c,r?.cwd,r?.profileId).filter(E);let a;if(c.kind==="logical")a=e.model_policy==="exact"?h.filter(m=>m.family===c.family&&m.strength===c.strength).slice(0,1):h;else{const m=se(c.spec),q=h.filter(j=>j.providerId===m?.providerId&&j.modelId===m.modelId&&(e.model_policy!=="exact"||j.thinkingLevel===m.thinkingLevel)&&ee(j));if(e.model_policy==="exact")a=q.slice(0,1);else if(q.length)a=q;else{const j=ae(r?.cwd,r?.profileId),x=[...Object.values(j.modelRoutes??{}).flatMap(v=>Object.entries(v.models)),...[j.modelLadders.anthropic,j.modelLadders.openai].flatMap(v=>Object.entries(v))].find(([,v])=>v===c.spec)?.[0],f=me(void 0,"substitute",r?.cwd,r?.profileId);a=x&&f.kind==="logical"?ie({...f,strength:x,spec:c.spec},r?.cwd,r?.profileId).filter(v=>E(v)&&v.strength===x):[]}}return a},"ownerCandidates");let R;if(s?R=De(s,e.model,e.model_policy==="exact").flatMap((c,h)=>{const a=se(c.model);return a?[{routeId:"app",credentialSource:"app",family:"app",strength:c.strength,...a,rank:h}]:[]}):R=pe(),R=R.filter(ee),R.length===0)throw e.model_policy==="exact"?new i(400,"substitution_refused","no eligible model route is configured"):new i(404,"model_unavailable","no eligible model route is configured");const te=`chatcmpl-${ve()}`;let I=1/0,b,z;for(const c of R){if(!l&&!xe(c,g).authenticated)continue;const h=g.find(c.providerId,c.modelId);if(!h)continue;const a=s?{...h,baseUrl:`${s.base_url}/${h.provider}`}:h,m=c.providerId,q=!l&&H(m)?Ae(m).filter(x=>!x.authFailure):[],j=q.filter(x=>le(x,a.id)<=Date.now());if(q.length&&!j.length){const x=Math.min(...q.map(f=>le(f,a.id)));x<I&&(I=x,z=`${a.provider}/${a.id}`);continue}const oe=l?[void 0,void 0]:q.length?j:[void 0];for(const[x,f]of oe.entries()){const v=Date.now();let ne=f?.access;if(f&&f.expires<=Date.now()&&H(m)){const o=g.getProvider(m)?.auth.oauth;if(!o)throw new i(503,"upstream_model_unavailable",`no OAuth refresh for ${m}`,void 0,{served_model:`${a.provider}/${a.id}`});ne=(await $e(m,f.label,async(k,re)=>{const W=await o.refresh({type:"oauth",refresh:k,access:"",expires:0,...re?{clientId:re}:{}},t??new AbortController().signal).catch(ge=>{throw Te(ge,`${a.provider}/${a.id}`)}),V=W.clientId;return{refresh:W.refresh,access:W.access,expires:W.expires,...typeof V=="string"&&V?{clientId:V}:{}}})).access}const he=Ue(e);let N;if(l&&s)try{N=await Le({audience:s.base_url,sub:l.sub,grantee:l.grantee,initiating_app:l.grantee,scope:["crtr:llm"]},{signal:t})}catch(o){throw He(o)}const C=f||l?void 0:await g.getApiKeyAndHeaders(a);if(C&&!C.ok)continue;const p=`${a.provider}/${a.id}`,S=e.model??p;let A=!1,L,M=3e4,$;const B=[],X=[],D=[];let d,F;const T=u((o,_=null)=>({id:te,object:"chat.completion.chunk",created:Math.floor(v/1e3),model:p,served_model:p,requested_model:S,substituted:S!==p&&!/^([^/]+)\/(ultra|strong|medium|light)$/.test(S),choices:[{index:0,delta:o,finish_reason:_}]}),"chunk"),P=u(o=>{B.push(o),n?.(o)},"emit"),_e=we(a,he,{apiKey:N?.access_token??ne??(C?.ok?C.apiKey:void 0),...C?.ok?{headers:C.headers}:{},signal:t,reasoning:e.reasoning_effort??c.thinkingLevel,...e.temperature!==void 0?{temperature:e.temperature}:{},...e.max_tokens!==void 0?{maxTokens:e.max_tokens}:{},...e.top_p!==void 0?{samplingParams:{top_p:e.top_p}}:{},...e.tool_choice==="none"?{toolChoice:"none"}:{},onPayload:u(o=>{if(!o||typeof o!="object")return;const _=e.tool_choice,k=_==="required"?a.api==="anthropic-messages"?{type:"any"}:"required":typeof _=="object"&&_!==null?a.api==="anthropic-messages"?{type:"tool",name:_.function.name}:_:void 0;return{...o,...k?{tool_choice:k}:{},...e.stop!==void 0?{[a.api==="anthropic-messages"?"stop_sequences":"stop"]:typeof e.stop=="string"?[e.stop]:e.stop}:{},...e.seed!==void 0?{seed:e.seed}:{},...e.response_format!==void 0?{response_format:e.response_format}:{}}},"onPayload"),fetch:u(async(o,_)=>{const k=await fetch(o,_);return L=k.status,k.status===429&&(A=!0,$=k.headers,M=K(k.headers)??15e3),k},"fetch"),onResponse:u(o=>{o.status===429&&(A=!0,$=o.headers,M=K(o.headers)??15e3)},"onResponse")});try{for await(const o of _e)o.type==="text_delta"&&(X.push(o.delta),P(T({content:o.delta}))),o.type==="thinking_delta"&&(D.push(o.delta),P(T({reasoning_content:o.delta}))),o.type==="done"&&(d=o.message),o.type==="error"&&(d=o.error)}catch(o){const _=qe(o);$===void 0&&o&&typeof o=="object"&&"headers"in o&&Object.keys(Ce(o.headers)).length&&($=o.headers);const k=Y({status:o&&typeof o=="object"&&"status"in o?o.status:void 0,message:o instanceof Error?o.message:String(o)});if(l)F=o;else{if(!A&&k.kind!=="rate-limit")throw B.length?new i(503,"upstream_model_unavailable",o instanceof Error?o.message:String(o),void 0,{served_model:p}):o;A=!0,M=_??M}}if(l){if(L===401){if(N&&Ee(N.key),x===0)continue;throw new i(404,"model_unavailable",`${s.base_url} refuses this runtime's tokens`,void 0,{served_model:p})}if(A&&K($)===void 0)throw new i(503,"upstream_model_unavailable",`${p} was rate-limited without a retry-after`,void 0,{served_model:p});if(!A&&(F!==void 0||L!==void 0&&L>=500))throw new i(503,"upstream_model_unavailable",F instanceof Error?F.message:d?.errorMessage??"inference endpoint failed",void 0,{served_model:p})}if(!A&&d?.stopReason==="error"&&Y({message:d.errorMessage}).kind==="rate-limit"&&(A=!0,M=15e3),A){const o=Ie($,a.id);if(K($)===void 0&&o.resetAt!==void 0&&(M=Math.max(M,o.resetAt-Date.now())),b={provider:m,model:a.id,...f?{account:f.label}:{},observation:o},console.error(`[llm] 429 from ${p}${f?` account "${f.label}"`:""}: scope=${ce(o.scope)} retry_after_ms=${M} headers=${JSON.stringify(o.headers)}`),f&&H(m)&&await je(m,f.label,M,v,Date.now(),o.scope),Date.now()+Math.min(M,de)<I&&(I=Date.now()+Math.min(M,de),z=p),X.length||D.length)throw new i(503,"service_unavailable","vendor rate limit after output began",void 0,{served_model:p});if(l)break;continue}const U=Se(d);if(L===400&&e.tool_choice!==void 0&&e.tool_choice!=="auto"&&e.tool_choice!=="none"&&/\btool[_ ]choice\b/i.test(d?.errorMessage??"")&&/not supported|does not support|unsupported|cannot|must be auto/i.test(d?.errorMessage??""))throw new i(400,"invalid_request",d.errorMessage,"tool_choice",{served_model:p});if(d?.stopReason==="error"){const o=ze(a.provider,d.errorMessage,p);if(o)throw o}if(!d||d.stopReason==="error"&&!U||d.stopReason==="aborted")throw new i(503,"upstream_model_unavailable",d?.errorMessage??"model request failed",void 0,{served_model:p});f&&H(m)&&Re(f,a.id)&&await Me(m,f.label,v,a.id);const G=d.content.filter(o=>o.type==="toolCall").map(o=>({id:o.id,type:"function",function:{name:o.name,arguments:JSON.stringify(o.arguments)}})),Z=U?"content_filter":d.stopReason==="toolUse"?"tool_calls":d.stopReason==="length"?"length":"stop",Q=d.responseModel?We(a,d.responseModel):void 0,O=Q?`${a.provider}/${Q.model}`:p,J={prompt_tokens:d.usage.input,completion_tokens:d.usage.output,total_tokens:d.usage.totalTokens,cache_read_tokens:d.usage.cacheRead,cache_write_tokens:d.usage.cacheWrite,usd_equivalent:Je(Q??a,d.usage.cost.total),served_model:O};l?await ue(l.grantee,"app",O,d.usage,J.usd_equivalent):w&&await ue(w.grantee,"user",O,d.usage,J.usd_equivalent);const ye={id:te,object:"chat.completion",created:Math.floor(v/1e3),model:O,served_model:O,requested_model:S,substituted:S!==O&&!/^([^/]+)\/(ultra|strong|medium|light)$/.test(S),choices:[{index:0,message:{role:"assistant",content:X.join("")||null,...D.length?{reasoning_content:D.join("")}:{},...G.length?{tool_calls:G}:{},...U?{refusal:d.errorMessage??"Content filtered"}:{}},finish_reason:Z}],usage:J,...e.metadata!==void 0?{metadata:e.metadata}:{}};for(const[o,_]of G.entries())P(T({tool_calls:[{index:o,..._}]}));return P({...T({},Z),...U?{choices:[{index:0,delta:{},finish_reason:Z,message:{refusal:d.errorMessage??"Content filtered"}}]}:{},usage:J}),{completion:ye,chunks:B}}}throw I!==1/0?new i(429,"all_routes_exhausted","all eligible model routes are rate-limited",void 0,{retry_after_s:Math.max(1,Math.ceil((I-Date.now())/1e3)),served_model:b?`${b.provider}/${b.model}`:z,...b?{rate_limit:{provider:b.provider,model:b.model,...b.account?{account:b.account}:{},scope:ce(b.observation.scope),...b.observation.claim?{claim:b.observation.claim}:{},headers:b.observation.headers}}:{}},void 0,!0):e.model_policy==="exact"?new i(400,"substitution_refused","the requested model is unavailable"):new i(404,"model_unavailable","no usable model route is available")}u(ut,"runLlm");export{ct as llmCallerOf,lt as parseLlmRequest,ut as runLlm};

package/dist/core/peer/directory.d.ts

@@ -67,7 +67,7 @@ export declare const directory: DirectoryClient;
 export declare const listMachines: () => Promise<Machine[]>;
 export declare const machineReach: (machineId: string) => Promise<Machine | null>;
 /** The URL peers call this machine at, as the directory last reported it from a status call; null before the first one. */
-export declare function machineUrl(): string | null;
+export declare function machineUrl(): Promise<string | null>;
 /** Tell the directory this machine is up (its plugins and crtr version) and store the URL it answers with as `machine_url`.
  *  Returns the stored URL, or null when this daemon has no directory identity. Throws `DirectoryError` when the directory fails. */
 export declare function reportMachineStatus(client?: DirectoryClient): Promise<MachineStatus | null>;

package/dist/core/peer/directory.js

@@ -1 +1 @@
-var $=Object.defineProperty;var o=(t,e)=>$(t,"name",{value:e,configurable:!0});import{normalizeMachineId as m,rememberMachineName as y}from"./names.js";import{prepared as _}from"../sqlite-statements.js";import{openDb as C,withCanvasWrite as M}from"../canvas/db.js";import{readConfig as S}from"../config.js";import{runtimeClient as g}from"../grants/sync.js";import{crtrVersion as I}from"../../shared/crtr-version.js";import{installedPluginIds as R}from"../directory/join.js";import{peerTokens as A}from"./token.js";const b=5*6e4,O=1e4;class c extends Error{static{o(this,"DirectoryError")}status;constructor(e,i){super(i),this.status=e,this.name="DirectoryError"}}function E(t){if(!t||typeof t!="object")return null;const{kind:e,relay:i}=t;return e==="stable"?{kind:"stable"}:e==="relay"&&typeof i=="string"?{kind:"relay",relay:i}:null}o(E,"asReach");function T(t){const e=t,i=E(e?.reach);if(!e||typeof e.machine_id!="string"||typeof e.url!="string"||i===null)throw new c(502,"the directory answered a machine record with a missing machine_id, url or reach");return{machine_id:e.machine_id,name:typeof e.name=="string"?e.name:e.machine_id,url:e.url.replace(/\/$/,""),reach:i,crtr_version:typeof e.crtr_version=="string"?e.crtr_version:null,last_seen:typeof e.last_seen=="string"?e.last_seen:null,kind:e.kind==="device"?"device":"runtime",plugins:Array.isArray(e.plugins)?e.plugins.filter(u=>typeof u=="string"):[],...typeof e.is_default=="boolean"?{is_default:e.is_default}:{}}}o(T,"asMachine");function U(t,e){const i=new Map;let u=null;async function d(s,a,r){const n=t.issuer();if(n===null)throw new c(0,"this daemon has no directory");const f=n.replace(/\/$/,"");for(let w=0;;w++){let l;try{const h=await t.tokens.get(f);l=await t.fetch(`${f}${a}`,{method:s,headers:{authorization:`Bearer ${h}`,...r===void 0?{}:{"content-type":"application/json"}},...r===void 0?{}:{body:JSON.stringify(r)},signal:AbortSignal.timeout(O)})}catch(h){throw new c(0,`the directory could not be reached: ${h instanceof Error?h.message:String(h)}`)}if(l.status===401&&w===0){t.tokens.drop(f);continue}if(!l.ok)throw new c(l.status,`directory ${s} ${a} answered ${l.status}`);try{return await l.json()}catch{throw new c(502,`directory ${s} ${a} answered a body that is not JSON`)}}}return o(d,"call"),{async list(){const s=await d("GET","/v1/machines");if(!Array.isArray(s))throw new c(502,"the directory answered a machine list that is not an array");const a=s.map(T),r=t.now();for(const n of a)i.set(n.machine_id,{machine:n,at:r}),y(n.machine_id,n.name);return u={machines:a,at:r},a},lastList(){return u===null?null:u.machines},async reach(s){const a=m(s),r=i.get(a);if(r&&t.now()-r.at<b)return r.machine;try{const n=T(await d("GET",`/v1/machines/${encodeURIComponent(a)}/reach`));return i.set(a,{machine:n,at:t.now()}),y(n.machine_id,n.name),n}catch(n){if(n instanceof c&&n.status===404)return i.delete(a),null;if(r&&n instanceof c&&n.status===0)return r.machine;throw n}},async status(s){const a=e(),r=await d("PUT",`/v1/machines/${encodeURIComponent(a)}/status`,s);if(!r||typeof r.machine_id!="string"||typeof r.url!="string")throw new c(502,"the directory answered a status record with a missing machine_id or url");return{machine_id:r.machine_id,url:r.url.replace(/\/$/,""),reach:E(r.reach)}},invalidate(s){s===void 0?(i.clear(),u=null):i.delete(m(s))}}}o(U,"createDirectoryClient");function k(){return m(g().runtime)}o(k,"ownMachineId");function v(){return S("user").runtime?.issuer??null}o(v,"directoryIssuer");const p=U({issuer:v,tokens:A,fetch:o((t,e)=>fetch(t,e),"fetch"),now:Date.now},k),V=o(()=>p.list(),"listMachines"),W=o(t=>p.reach(t),"machineReach"),x="machine_url";function Y(){return _(C(),"SELECT value FROM runtime_state WHERE key = ?").get(x)?.value??null}o(Y,"machineUrl");function D(t){M(e=>{_(e,"INSERT INTO runtime_state (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(x,t)})}o(D,"storeMachineUrl");async function B(t=p){if(v()===null)return null;try{g()}catch{return null}const e=await t.status({plugins:R(),crtr_version:I()});if(e.machine_id!==k())throw new c(502,"the directory answered a status for another machine");return D(e.url),e}o(B,"reportMachineStatus");export{O as DIRECTORY_CALL_TIMEOUT_MS,c as DirectoryError,b as REACH_TTL_MS,U as createDirectoryClient,p as directory,v as directoryIssuer,V as listMachines,W as machineReach,Y as machineUrl,m as normalizeMachineId,k as ownMachineId,B as reportMachineStatus};
+var v=Object.defineProperty;var o=(t,e)=>v(t,"name",{value:e,configurable:!0});import{normalizeMachineId as m,rememberMachineName as p}from"./names.js";import{openDb as _}from"../canvas/db.js";import{readConfig as M}from"../config.js";import{runtimeClient as g}from"../grants/sync.js";import{crtrVersion as C}from"../../shared/crtr-version.js";import{installedPluginIds as I}from"../directory/join.js";import{peerTokens as R}from"./token.js";const S=5*6e4,A=1e4;class c extends Error{static{o(this,"DirectoryError")}status;constructor(e,i){super(i),this.status=e,this.name="DirectoryError"}}function E(t){if(!t||typeof t!="object")return null;const{kind:e,relay:i}=t;return e==="stable"?{kind:"stable"}:e==="relay"&&typeof i=="string"?{kind:"relay",relay:i}:null}o(E,"asReach");function T(t){const e=t,i=E(e?.reach);if(!e||typeof e.machine_id!="string"||typeof e.url!="string"||i===null)throw new c(502,"the directory answered a machine record with a missing machine_id, url or reach");return{machine_id:e.machine_id,name:typeof e.name=="string"?e.name:e.machine_id,url:e.url.replace(/\/$/,""),reach:i,crtr_version:typeof e.crtr_version=="string"?e.crtr_version:null,last_seen:typeof e.last_seen=="string"?e.last_seen:null,kind:e.kind==="device"?"device":"runtime",plugins:Array.isArray(e.plugins)?e.plugins.filter(u=>typeof u=="string"):[],...typeof e.is_default=="boolean"?{is_default:e.is_default}:{}}}o(T,"asMachine");function b(t,e){const i=new Map;let u=null;async function f(s,a,r){const n=t.issuer();if(n===null)throw new c(0,"this daemon has no directory");const d=n.replace(/\/$/,"");for(let y=0;;y++){let l;try{const h=await t.tokens.get(d);l=await t.fetch(`${d}${a}`,{method:s,headers:{authorization:`Bearer ${h}`,...r===void 0?{}:{"content-type":"application/json"}},...r===void 0?{}:{body:JSON.stringify(r)},signal:AbortSignal.timeout(A)})}catch(h){throw new c(0,`the directory could not be reached: ${h instanceof Error?h.message:String(h)}`)}if(l.status===401&&y===0){t.tokens.drop(d);continue}if(!l.ok)throw new c(l.status,`directory ${s} ${a} answered ${l.status}`);try{return await l.json()}catch{throw new c(502,`directory ${s} ${a} answered a body that is not JSON`)}}}return o(f,"call"),{async list(){const s=await f("GET","/v1/machines");if(!Array.isArray(s))throw new c(502,"the directory answered a machine list that is not an array");const a=s.map(T),r=t.now();for(const n of a)i.set(n.machine_id,{machine:n,at:r}),p(n.machine_id,n.name);return u={machines:a,at:r},a},lastList(){return u===null?null:u.machines},async reach(s){const a=m(s),r=i.get(a);if(r&&t.now()-r.at<S)return r.machine;try{const n=T(await f("GET",`/v1/machines/${encodeURIComponent(a)}/reach`));return i.set(a,{machine:n,at:t.now()}),p(n.machine_id,n.name),n}catch(n){if(n instanceof c&&n.status===404)return i.delete(a),null;if(r&&n instanceof c&&n.status===0)return r.machine;throw n}},async status(s){const a=e(),r=await f("PUT",`/v1/machines/${encodeURIComponent(a)}/status`,s);if(!r||typeof r.machine_id!="string"||typeof r.url!="string")throw new c(502,"the directory answered a status record with a missing machine_id or url");return{machine_id:r.machine_id,url:r.url.replace(/\/$/,""),reach:E(r.reach)}},invalidate(s){s===void 0?(i.clear(),u=null):i.delete(m(s))}}}o(b,"createDirectoryClient");function k(){return m(g().runtime)}o(k,"ownMachineId");function x(){return M("user").runtime?.issuer??null}o(x,"directoryIssuer");const w=b({issuer:x,tokens:R,fetch:o((t,e)=>fetch(t,e),"fetch"),now:Date.now},k),F=o(()=>w.list(),"listMachines"),G=o(t=>w.reach(t),"machineReach"),$="machine_url";async function J(){return(await(await _()).prepare("SELECT value FROM runtime_state WHERE key = ?").get($))?.value??null}o(J,"machineUrl");async function O(t){await(await _()).prepare("INSERT INTO runtime_state (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run($,t)}o(O,"storeMachineUrl");async function V(t=w){if(x()===null)return null;try{g()}catch{return null}const e=await t.status({plugins:I(),crtr_version:C()});if(e.machine_id!==k())throw new c(502,"the directory answered a status for another machine");return await O(e.url),e}o(V,"reportMachineStatus");export{A as DIRECTORY_CALL_TIMEOUT_MS,c as DirectoryError,S as REACH_TTL_MS,b as createDirectoryClient,w as directory,x as directoryIssuer,F as listMachines,G as machineReach,J as machineUrl,m as normalizeMachineId,k as ownMachineId,V as reportMachineStatus};

package/dist/core/peer/envelope.d.ts

@@ -31,14 +31,14 @@ export interface EnvelopeContext {
     /** This machine's id (`runtime:<id>`). */
     via?: string;
     /** A node's run place. */
-    placeOf?: (nodeId: string) => RunPlace | null;
+    placeOf?: (nodeId: string) => Promise<RunPlace | null>;
 }
 /** The envelope for a call made by `principal` on this machine. Broker → its app, node, stored scopes and run place; cron → its app, anchor node
  *  (null when unanchored), stored scopes and origin run; person → no inner `act`. */
-export declare function envelopeFor(principal: EnvelopeCaller, context?: EnvelopeContext): Envelope;
+export declare function envelopeFor(principal: EnvelopeCaller, context?: EnvelopeContext): Promise<Envelope>;
 export declare function encodeEnvelope(envelope: Envelope): string;
 /** Parse and validate a `Crtr-Envelope` header value. Throws `EnvelopeError` for anything that is not the documented shape. */
 export declare function decodeEnvelope(header: string): Envelope;
 /** The envelope for a `provider.call` made by `caller` to a device machine: the account owner (`sub`), this machine, and the calling app and node
  *  (a person has no inner `act`). The device shows it in its recent-activity list and checks nothing in it. */
-export declare function envelopeForProviderCaller(caller: ProviderCaller, sub: string, context?: Pick<EnvelopeContext, 'via' | 'placeOf'>): Envelope;
+export declare function envelopeForProviderCaller(caller: ProviderCaller, sub: string, context?: Pick<EnvelopeContext, 'via' | 'placeOf'>): Promise<Envelope>;

package/dist/core/peer/envelope.js

@@ -1 +1 @@
-var p=Object.defineProperty;var l=(e,o)=>p(e,"name",{value:o,configurable:!0});import{joinedOwner as b}from"../directory/join.js";import{runPlace as d}from"../runs/confinement.js";import{ownMachineId as f}from"./directory.js";const _="Crtr-Envelope",h=16*1024;class r extends Error{static{l(this,"EnvelopeError")}constructor(o){super(o),this.name="EnvelopeError"}}function g(e,o={}){const n=o.via??f(),s=e.class==="person"?"":e.sub,t=o.owner??(s.startsWith("user:")?s:b());if(t==null)throw new r("this machine has no account owner to make a peer call for");if(e.class==="person")return{sub:t,act:{sub:n}};if(e.class==="broker"){const a=(o.placeOf??(u=>d(u)))(e.node);return{sub:t,act:{sub:n,act:{sub:e.app,node:e.node,node_scopes:e.scopes===null?null:[...e.scopes],place:a}}}}return{sub:t,act:{sub:n,act:{sub:e.app,node:e.anchor,node_scopes:e.scopes===null?null:[...e.scopes],place:{run:e.origin_run??"",isolated:e.isolated}}}}}l(g,"envelopeFor");function y(e){return Buffer.from(JSON.stringify(e),"utf8").toString("base64url")}l(y,"encodeEnvelope");const c=l(e=>typeof e=="string"&&e!=="","isString"),i=l(e=>typeof e=="object"&&e!==null&&!Array.isArray(e),"isRecord");function S(e){if(e.length>h)throw new r("the envelope is too large");if(!/^[A-Za-z0-9_-]+$/.test(e))throw new r("the envelope is not base64url");let o;try{o=JSON.parse(Buffer.from(e,"base64url").toString("utf8"))}catch{throw new r("the envelope is not JSON")}if(!i(o)||!c(o.sub)||!o.sub.startsWith("user:"))throw new r("the envelope names no user");const n=o.act;if(!i(n)||!c(n.sub)||!n.sub.startsWith("runtime:"))throw new r("the envelope names no calling machine");const s=n.act;if(s===void 0)return{sub:o.sub,act:{sub:n.sub}};if(!i(s)||!c(s.sub)||!s.sub.startsWith("app:"))throw new r("the envelope names no calling app");const{node:t,node_scopes:a,place:u}=s;if(t!==null&&!c(t))throw new r("the envelope node is not a node id");if(a!==null&&!(Array.isArray(a)&&a.every(c)))throw new r("the envelope node_scopes is not a list of scopes");if(u!==null&&!(i(u)&&typeof u.run=="string"&&typeof u.isolated=="boolean"))throw new r("the envelope place is malformed");return{sub:o.sub,act:{sub:n.sub,act:{sub:s.sub,node:t,node_scopes:a,place:u===null?null:{run:u.run,isolated:u.isolated}}}}}l(S,"decodeEnvelope");function O(e,o,n={}){const s=n.via??f();if(e.class==="person"||e.grantee===null)return{sub:o,act:{sub:s}};const t=e.node_id===null?null:(n.placeOf??(a=>d(a)))(e.node_id);return{sub:o,act:{sub:s,act:{sub:e.grantee,node:e.node_id,node_scopes:e.nodeScopes===null?null:[...e.nodeScopes],place:t}}}}l(O,"envelopeForProviderCaller");export{_ as ENVELOPE_HEADER,r as EnvelopeError,h as MAX_ENVELOPE_BYTES,S as decodeEnvelope,y as encodeEnvelope,g as envelopeFor,O as envelopeForProviderCaller};
+var p=Object.defineProperty;var c=(e,o)=>p(e,"name",{value:o,configurable:!0});import{joinedOwner as b}from"../directory/join.js";import{runPlace as d}from"../runs/confinement.js";import{ownMachineId as f}from"./directory.js";const y="Crtr-Envelope",h=16*1024;class r extends Error{static{c(this,"EnvelopeError")}constructor(o){super(o),this.name="EnvelopeError"}}async function _(e,o={}){const n=o.via??f(),s=e.class==="person"?"":e.sub,t=o.owner??(s.startsWith("user:")?s:b());if(t==null)throw new r("this machine has no account owner to make a peer call for");if(e.class==="person")return{sub:t,act:{sub:n}};if(e.class==="broker"){const a=await(o.placeOf??(async u=>await d(u)))(e.node);return{sub:t,act:{sub:n,act:{sub:e.app,node:e.node,node_scopes:e.scopes===null?null:[...e.scopes],place:a}}}}return{sub:t,act:{sub:n,act:{sub:e.app,node:e.anchor,node_scopes:e.scopes===null?null:[...e.scopes],place:{run:e.origin_run??"",isolated:e.isolated}}}}}c(_,"envelopeFor");function g(e){return Buffer.from(JSON.stringify(e),"utf8").toString("base64url")}c(g,"encodeEnvelope");const l=c(e=>typeof e=="string"&&e!=="","isString"),i=c(e=>typeof e=="object"&&e!==null&&!Array.isArray(e),"isRecord");function S(e){if(e.length>h)throw new r("the envelope is too large");if(!/^[A-Za-z0-9_-]+$/.test(e))throw new r("the envelope is not base64url");let o;try{o=JSON.parse(Buffer.from(e,"base64url").toString("utf8"))}catch{throw new r("the envelope is not JSON")}if(!i(o)||!l(o.sub)||!o.sub.startsWith("user:"))throw new r("the envelope names no user");const n=o.act;if(!i(n)||!l(n.sub)||!n.sub.startsWith("runtime:"))throw new r("the envelope names no calling machine");const s=n.act;if(s===void 0)return{sub:o.sub,act:{sub:n.sub}};if(!i(s)||!l(s.sub)||!s.sub.startsWith("app:"))throw new r("the envelope names no calling app");const{node:t,node_scopes:a,place:u}=s;if(t!==null&&!l(t))throw new r("the envelope node is not a node id");if(a!==null&&!(Array.isArray(a)&&a.every(l)))throw new r("the envelope node_scopes is not a list of scopes");if(u!==null&&!(i(u)&&typeof u.run=="string"&&typeof u.isolated=="boolean"))throw new r("the envelope place is malformed");return{sub:o.sub,act:{sub:n.sub,act:{sub:s.sub,node:t,node_scopes:a,place:u===null?null:{run:u.run,isolated:u.isolated}}}}}c(S,"decodeEnvelope");async function O(e,o,n={}){const s=n.via??f();if(e.class==="person"||e.grantee===null)return{sub:o,act:{sub:s}};const t=e.node_id===null?null:await(n.placeOf??(async a=>await d(a)))(e.node_id);return{sub:o,act:{sub:s,act:{sub:e.grantee,node:e.node_id,node_scopes:e.nodeScopes===null?null:[...e.nodeScopes],place:t}}}}c(O,"envelopeForProviderCaller");export{y as ENVELOPE_HEADER,r as EnvelopeError,h as MAX_ENVELOPE_BYTES,S as decodeEnvelope,g as encodeEnvelope,_ as envelopeFor,O as envelopeForProviderCaller};

package/dist/core/peer/home.d.ts

@@ -1,6 +1,6 @@
-import type { DatabaseSync } from 'node:sqlite';
 import { type PeerRequest, type PeerResult } from './client.js';
 import { type Machine } from './directory.js';
+import type { CanvasDb } from '../canvas/db.js';
 export type HomeAnswer = {
     where: 'here';
 } | {
@@ -26,15 +26,15 @@ export interface HomeDeps {
     joined(): boolean;
 }
 export declare const defaultHomeDeps: HomeDeps;
-export declare function cachedLocation(db: DatabaseSync, id: string): string | null;
-export declare function rememberLocation(db: DatabaseSync, id: string, machine: string, now?: number): void;
-export declare function dropLocation(db: DatabaseSync, id: string): void;
+export declare function cachedLocation(db: CanvasDb, id: string): Promise<string | null>;
+export declare function rememberLocation(db: CanvasDb, id: string, machine: string, now?: number): Promise<void>;
+export declare function dropLocation(db: CanvasDb, id: string): Promise<void>;
 /** Ask every other machine "do you hold `id`?". First `here`/`moved` wins; unreachable machines are listed. */
-export declare function locate(db: DatabaseSync, id: string, deps?: HomeDeps, skip?: string): Promise<HomeAnswer>;
+export declare function locate(db: CanvasDb, id: string, deps?: HomeDeps, skip?: string): Promise<HomeAnswer>;
 /** Where `id` lives. `hint` is the machine the request names (`?machine=`). */
-export declare function homeOf(db: DatabaseSync, id: string, opts?: {
+export declare function homeOf(db: CanvasDb, id: string, opts?: {
     hint?: string | null;
     deps?: HomeDeps;
 }): Promise<HomeAnswer>;
 /** A cached or hinted machine said `404 not_here`: forget it and ask everyone else. */
-export declare function relocate(db: DatabaseSync, id: string, wrong: string, deps?: HomeDeps): Promise<HomeAnswer>;
+export declare function relocate(db: CanvasDb, id: string, wrong: string, deps?: HomeDeps): Promise<HomeAnswer>;

package/dist/core/peer/home.js

@@ -1,2 +1,2 @@
-var E=Object.defineProperty;var a=(n,r)=>E(n,"name",{value:r,configurable:!0});import{prepared as l}from"../sqlite-statements.js";import{getById as y}from"../graph/objects.js";import{isUnreachable as b,peerCall as x}from"./client.js";import{directoryIssuer as O,listMachines as T,normalizeMachineId as w,ownMachineId as I}from"./directory.js";import{stubOf as L}from"./stubs.js";const m={call:a((n,r)=>x(n,r),"call"),machines:T,self:I,now:Date.now,joined:a(()=>O()!==null,"joined")};function S(n,r){return l(n,"SELECT machine_id FROM peer_locations WHERE id = ?").get(r)?.machine_id??null}a(S,"cachedLocation");function g(n,r,t,i=Date.now()){l(n,`INSERT INTO peer_locations (id, machine_id, learned_at) VALUES (?, ?, ?)
-    ON CONFLICT(id) DO UPDATE SET machine_id = excluded.machine_id, learned_at = excluded.learned_at`).run(r,t,i)}a(g,"rememberLocation");function D(n,r){l(n,"DELETE FROM peer_locations WHERE id = ?").run(r)}a(D,"dropLocation");async function p(n,r,t=m,i){if(!t.joined())return{where:"nowhere"};let c;try{c=await t.machines()}catch(e){return{where:"unknown",unreachable:[`directory (${e instanceof Error?e.message:String(e)})`]}}const s=t.self(),_=c.filter(e=>e.machine_id!==s&&e.machine_id!==i&&e.kind!=="device"),d=await Promise.all(_.map(async e=>{const o=await t.call(e.machine_id,{method:"POST",path:"/v1/peer/locate",body:{id:r}});if(b(o))return{m:e,state:"unreachable"};const h=o.body;return o.status===200&&h?.answer==="here"?{m:e,state:"here",machine:e.machine_id}:o.status===200&&h?.answer==="moved"&&typeof h.machine=="string"?{m:e,state:"here",machine:w(h.machine)}:o.status===200&&h?.answer==="no"?{m:e,state:"no"}:{m:e,state:"unreachable"}})),u=d.find(e=>e.state==="here");if(u&&"machine"in u)return g(n,r,u.machine,t.now()),{where:"machine",machine:u.machine,source:"locate"};const f=d.filter(e=>e.state==="unreachable").map(e=>e.m.name||e.m.machine_id);return f.length>0?{where:"unknown",unreachable:f}:{where:"nowhere"}}a(p,"locate");async function v(n,r,t={}){const i=y(n,r);if(i!==null){const s=L(n,i);return s===null?{where:"here"}:{where:"machine",machine:s.home_machine,source:"stub"}}if(!(t.deps??m).joined())return{where:"nowhere"};if(t.hint)return{where:"machine",machine:w(t.hint),source:"hint"};const c=S(n,r);return c!==null?{where:"machine",machine:c,source:"cache"}:p(n,r,t.deps)}a(v,"homeOf");async function F(n,r,t,i=m){return D(n,r),p(n,r,i,t)}a(F,"relocate");export{S as cachedLocation,m as defaultHomeDeps,D as dropLocation,v as homeOf,p as locate,F as relocate,g as rememberLocation};
+var _=Object.defineProperty;var t=(n,a)=>_(n,"name",{value:a,configurable:!0});import{getById as y}from"../graph/objects.js";import{isUnreachable as E,peerCall as b}from"./client.js";import{directoryIssuer as x,listMachines as O,normalizeMachineId as d,ownMachineId as T}from"./directory.js";import{stubOf as I}from"./stubs.js";const l={call:t((n,a)=>b(n,a),"call"),machines:O,self:T,now:Date.now,joined:t(()=>x()!==null,"joined")};async function L(n,a){return(await n.prepare("SELECT machine_id FROM peer_locations WHERE id = ?").get(a))?.machine_id??null}t(L,"cachedLocation");async function g(n,a,r,i=Date.now()){await n.prepare(`INSERT INTO peer_locations (id, machine_id, learned_at) VALUES (?, ?, ?)
+    ON CONFLICT(id) DO UPDATE SET machine_id = excluded.machine_id, learned_at = excluded.learned_at`).run(a,r,i)}t(g,"rememberLocation");async function D(n,a){await n.prepare("DELETE FROM peer_locations WHERE id = ?").run(a)}t(D,"dropLocation");async function f(n,a,r=l,i){if(!r.joined())return{where:"nowhere"};let c;try{c=await r.machines()}catch(e){return{where:"unknown",unreachable:[`directory (${e instanceof Error?e.message:String(e)})`]}}const s=r.self(),p=c.filter(e=>e.machine_id!==s&&e.machine_id!==i&&e.kind!=="device"),m=await Promise.all(p.map(async e=>{const o=await r.call(e.machine_id,{method:"POST",path:"/v1/peer/locate",body:{id:a}});if(E(o))return{m:e,state:"unreachable"};const h=o.body;return o.status===200&&h?.answer==="here"?{m:e,state:"here",machine:e.machine_id}:o.status===200&&h?.answer==="moved"&&typeof h.machine=="string"?{m:e,state:"here",machine:d(h.machine)}:o.status===200&&h?.answer==="no"?{m:e,state:"no"}:{m:e,state:"unreachable"}})),u=m.find(e=>e.state==="here");if(u&&"machine"in u)return await g(n,a,u.machine,r.now()),{where:"machine",machine:u.machine,source:"locate"};const w=m.filter(e=>e.state==="unreachable").map(e=>e.m.name||e.m.machine_id);return w.length>0?{where:"unknown",unreachable:w}:{where:"nowhere"}}t(f,"locate");async function j(n,a,r={}){const i=await y(n,a);if(i!==null){const s=await I(n,i);return s===null?{where:"here"}:{where:"machine",machine:s.home_machine,source:"stub"}}if(!(r.deps??l).joined())return{where:"nowhere"};if(r.hint)return{where:"machine",machine:d(r.hint),source:"hint"};const c=await L(n,a);return c!==null?{where:"machine",machine:c,source:"cache"}:f(n,a,r.deps)}t(j,"homeOf");async function k(n,a,r,i=l){return await D(n,a),f(n,a,i,r)}t(k,"relocate");export{L as cachedLocation,l as defaultHomeDeps,D as dropLocation,j as homeOf,f as locate,k as relocate,g as rememberLocation};

package/dist/core/peer/ingest.d.ts

@@ -1,6 +1,6 @@
-import type { DatabaseSync } from 'node:sqlite';
 import type { ObjectRow } from '../graph/types.js';
 import { type ClaimedRow, type PeerEventPayload } from './outbox-store.js';
+import { type CanvasDb } from '../canvas/db.js';
 /** Most events one `peer.events` call carries. */
 export declare const MAX_EVENTS_PER_CALL = 100;
 export interface IngestResult {
@@ -25,11 +25,11 @@ export declare const ingestKey: (via: string, messageId: string) => string;
  *  an app-made watch of a remote node's object is recorded here as the destination's own watch of the stub (start `act`, all events,
  *  never changing a watch that exists), and a row whose message was already applied for another destination is published once more to
  *  that destination alone. The delivery key `peer:<via>:<message_id>:<destination>` keeps each destination to one delivery. */
-export declare function ingestPeerEvents(db: DatabaseSync, via: string, events: readonly PeerEventPayload[]): IngestResult;
+export declare function ingestPeerEvents(db: CanvasDb, via: string, events: readonly PeerEventPayload[]): Promise<IngestResult>;
 /** Whether `object` is a stub of `machine` (a sender may only describe what it homes). */
-export declare const isStubOf: (db: DatabaseSync, object: ObjectRow, machine: string) => boolean;
-export declare const claimFor: (db: DatabaseSync, via: string, limit: number) => ClaimedRow[];
-export declare const ackFor: (db: DatabaseSync, via: string, acks: ReadonlyArray<{
+export declare const isStubOf: (db: CanvasDb, object: ObjectRow, machine: string) => Promise<boolean>;
+export declare const claimFor: (db: CanvasDb, via: string, limit: number) => Promise<ClaimedRow[]>;
+export declare const ackFor: (db: CanvasDb, via: string, acks: ReadonlyArray<{
     key: string;
     claim_token: string;
-}>) => string[];
+}>) => Promise<string[]>;

package/dist/core/peer/ingest.js

@@ -1 +1 @@
-var k=Object.defineProperty;var r=(e,t)=>k(e,"name",{value:t,configurable:!0});import{prepared as d}from"../sqlite-statements.js";import{CrtrError as R}from"../errors.js";import{getById as O,getByRowid as S}from"../graph/objects.js";import{publish as L}from"../graph/events.js";import{markLinkWatch as h,recordWatch as w}from"../graph/watches.js";import{armObjectWaitForWatch as x}from"../graph/object-waits.js";import{ackRows as A,claimRows as T}from"./outbox-store.js";import{ensureStub as E,localOwnerActor as $,stubOf as f}from"./stubs.js";const P=100,G=r(e=>e==="unknown_event"||e==="unknown_kind","isCatalogLag"),m=r((e,t)=>`peer:${e}:${t}`,"ingestKey");function N(e,t){return d(e,"SELECT 1 FROM peer_ingested WHERE key = ?").get(t)!==void 0?!0:d(e,"SELECT 1 FROM deliveries WHERE idempotency_key >= ? AND idempotency_key < ? LIMIT 1").get(`${t}:`,`${t};`)!==void 0}r(N,"applied");const y=r((e,t,n)=>{d(e,"INSERT OR IGNORE INTO peer_ingested_destinations (key, ingested_at) VALUES (?, ?)").run(`${t}:${n}`,Date.now())},"markDestination");function C(e,t,n){return d(e,"SELECT 1 FROM peer_ingested_destinations WHERE key = ?").get(`${t}:${n}`)!==void 0||d(e,"SELECT 1 FROM deliveries WHERE idempotency_key = ?").get(`${t}:${n}`)!==void 0}r(C,"destinationDone");function F(e,t,n){return $(e,t)??E(e,t.id,t.type,n,void 0,t)}r(F,"actorFor");function _(e,t,n,c,i){const l=n.actor===null?null:F(e,n.actor,t),u=n.body_text,o=n.body===void 0&&u===void 0?void 0:{...n.body??{},...u===void 0?{}:{body:u}};L(e,{event:n.event,object:c,actor:l,level:n.level,attrs:n.attrs,...o===void 0?{}:{messageBody:o},idempotencyKey:m(t,n.message_id),...i===void 0?{}:{onlyWatchers:i}})}r(_,"apply");function I(e,t){const n=`ev:${t.message_id}:`;if(!t.key.startsWith(n)||t.key.length===n.length)return null;const c=O(e,t.key.slice(n.length));return c!==null&&c.type==="node"&&c.deleted_at===null&&f(e,c)===null?c:null}r(I,"localDestination");function U(e,t,n){const c={accepted:[],rejected:[]};for(const i of n){const l=m(t,i.message_id),u=N(e,l);e.exec("SAVEPOINT peer_event");try{const o=I(e,i);if(u&&o===null){e.exec("RELEASE peer_event"),c.accepted.push(i.key);continue}const s=E(e,i.object.id,i.object.type,t,void 0,i.object),p=i.linked===!0&&o!==null&&s.owner!==null?S(e,s.owner):null,a=p!==null&&p.type==="app"?p:null;if(o!==null&&d(e,"SELECT 1 FROM watches WHERE watcher = ? AND object = ?").get(o.rowid,s.rowid)===void 0?(w(e,o,s,"act",{patterns:[">"],...a===null?{}:{linkApp:a}}),x(e,o,s)):o!==null&&a!==null&&h(e,o,s,a),u)C(e,l,o.id)||_(e,t,i,s,[o.id]);else{_(e,t,i,s),d(e,"INSERT OR IGNORE INTO peer_ingested (key, ingested_at) VALUES (?, ?)").run(l,Date.now());for(const g of d(e,"SELECT destination_id FROM deliveries WHERE idempotency_key >= ? AND idempotency_key < ?").all(`${l}:`,`${l};`))y(e,l,g.destination_id)}o!==null&&y(e,l,o.id),e.exec("RELEASE peer_event"),c.accepted.push(i.key)}catch(o){e.exec("ROLLBACK TO peer_event"),e.exec("RELEASE peer_event");const s=o instanceof R?o.code:"invalid_event";c.rejected.push({key:i.key,code:s,message:o instanceof Error?o.message:String(o)})}}return c}r(U,"ingestPeerEvents");const X=r((e,t,n)=>f(e,t)?.home_machine===n,"isStubOf"),q=r((e,t,n)=>T(e,t,n),"claimFor"),z=r((e,t,n)=>A(e,t,n),"ackFor");export{P as MAX_EVENTS_PER_CALL,z as ackFor,q as claimFor,m as ingestKey,U as ingestPeerEvents,G as isCatalogLag,X as isStubOf};
+var g=Object.defineProperty;var o=(e,t)=>g(e,"name",{value:t,configurable:!0});import{CrtrError as _}from"../errors.js";import{getById as k,getByRowid as R}from"../graph/objects.js";import{publish as O}from"../graph/events.js";import{markLinkWatch as h,recordWatch as S}from"../graph/watches.js";import{armObjectWaitForWatch as L}from"../graph/object-waits.js";import{ackRows as $,claimRows as T}from"./outbox-store.js";import{ensureStub as u,localOwnerActor as W,stubOf as w}from"./stubs.js";import{withCanvasWrite as x}from"../canvas/db.js";const P=100,U=o(e=>e==="unknown_event"||e==="unknown_kind","isCatalogLag"),y=o((e,t)=>`peer:${e}:${t}`,"ingestKey");async function A(e,t){return await e.prepare("SELECT 1 FROM peer_ingested WHERE key = ?").get(t)!==void 0?!0:await e.prepare("SELECT 1 FROM deliveries WHERE idempotency_key >= ? AND idempotency_key < ? LIMIT 1").get(`${t}:`,`${t};`)!==void 0}o(A,"applied");const f=o(async(e,t,n)=>{await e.prepare("INSERT OR IGNORE INTO peer_ingested_destinations (key, ingested_at) VALUES (?, ?)").run(`${t}:${n}`,Date.now())},"markDestination");async function C(e,t,n){return await e.prepare("SELECT 1 FROM peer_ingested_destinations WHERE key = ?").get(`${t}:${n}`)!==void 0||await e.prepare("SELECT 1 FROM deliveries WHERE idempotency_key = ?").get(`${t}:${n}`)!==void 0}o(C,"destinationDone");async function F(e,t,n){return await W(e,t)??await u(e,t.id,t.type,n,void 0,t)}o(F,"actorFor");async function E(e,t,n,r,a){const c=n.actor===null?null:await F(e,n.actor,t),l=n.body_text,i=n.body===void 0&&l===void 0?void 0:{...n.body??{},...l===void 0?{}:{body:l}};await O(e,{event:n.event,object:r,actor:c,level:n.level,attrs:n.attrs,...i===void 0?{}:{messageBody:i},idempotencyKey:y(t,n.message_id),...a===void 0?{}:{onlyWatchers:a}})}o(E,"apply");async function N(e,t){const n=`ev:${t.message_id}:`;if(!t.key.startsWith(n)||t.key.length===n.length)return null;const r=await k(e,t.key.slice(n.length));return r!==null&&r.type==="node"&&r.deleted_at===null&&await w(e,r)===null?r:null}o(N,"localDestination");async function X(e,t,n){const r={accepted:[],rejected:[]};for(const a of n){const c=y(t,a.message_id),l=await A(e,c);try{await x(async()=>{const i=await N(e,a);if(l&&i===null)return;const s=await u(e,a.object.id,a.object.type,t,void 0,a.object),d=a.linked===!0&&i!==null&&s.owner!==null?await R(e,s.owner):null,p=d!==null&&d.type==="app"?d:null;if(i!==null&&await e.prepare("SELECT 1 FROM watches WHERE watcher = ? AND object = ?").get(i.rowid,s.rowid)===void 0?(await S(e,i,s,"act",{patterns:[">"],...p===null?{}:{linkApp:p}}),await L(e,i,s)):i!==null&&p!==null&&await h(e,i,s,p),l)await C(e,c,i.id)||await E(e,t,a,s,[i.id]);else{await E(e,t,a,s),await e.prepare("INSERT OR IGNORE INTO peer_ingested (key, ingested_at) VALUES (?, ?)").run(c,Date.now());for(const m of await e.prepare("SELECT destination_id FROM deliveries WHERE idempotency_key >= ? AND idempotency_key < ?").all(`${c}:`,`${c};`))await f(e,c,m.destination_id)}i!==null&&await f(e,c,i.id)},{savepoint:!0}),r.accepted.push(a.key)}catch(i){const s=i instanceof _?i.code:"invalid_event";r.rejected.push({key:a.key,code:s,message:i instanceof Error?i.message:String(i)})}}return r}o(X,"ingestPeerEvents");const q=o(async(e,t,n)=>(await w(e,t))?.home_machine===n,"isStubOf"),v=o(async(e,t,n)=>await T(e,t,n),"claimFor"),z=o(async(e,t,n)=>await $(e,t,n),"ackFor");export{P as MAX_EVENTS_PER_CALL,z as ackFor,v as claimFor,y as ingestKey,X as ingestPeerEvents,U as isCatalogLag,q as isStubOf};

package/dist/core/peer/outbox-store.d.ts

@@ -1,5 +1,5 @@
-import type { DatabaseSync } from 'node:sqlite';
 import type { ObjectRef } from './stubs.js';
+import type { CanvasDb } from '../canvas/db.js';
 export type OutboxState = 'pending' | 'waiting' | 'claimed' | 'done' | 'expired';
 /** What one event looks like on the wire, in both directions (`peer.events` body, `peer.outbox.claim` rows). */
 export interface PeerEventPayload {
@@ -42,20 +42,20 @@ export declare const CATALOG_LAG_RETRY_MS: number;
 /** Subscribe to enqueues (the delivery lane pushes a relay peer's row at once). Returns the unsubscribe. */
 export declare function onPeerEnqueued(listener: (peer: string) => void): () => void;
 /** Write one row; a key already present adds nothing. Returns whether a row was added. Runs in the caller's transaction. */
-export declare function enqueuePeerRow(db: DatabaseSync, row: {
+export declare function enqueuePeerRow(db: CanvasDb, row: {
     peer: string;
     kind: string;
     key: string;
     payload: unknown;
-}, now?: number): boolean;
+}, now?: number): Promise<boolean>;
 /** Rows the lane may push now: pending and due. */
-export declare function dueRows(db: DatabaseSync, now: number, limit?: number): OutboxRow[];
+export declare function dueRows(db: CanvasDb, now: number, limit?: number): Promise<OutboxRow[]>;
 /** Pending rows to one peer that are new or due (a relay peer's push at enqueue; a row that already failed waits for its backoff). */
-export declare function pendingFor(db: DatabaseSync, peer: string, now: number, limit?: number): OutboxRow[];
-export declare const markDone: (db: DatabaseSync, id: number) => void;
-export declare const markWaiting: (db: DatabaseSync, id: number, attempts: number) => void;
-export declare const markRetry: (db: DatabaseSync, id: number, attempts: number, nextAt: number, firstFailedAt: number) => void;
-export declare const markExpired: (db: DatabaseSync, id: number) => void;
+export declare function pendingFor(db: CanvasDb, peer: string, now: number, limit?: number): Promise<OutboxRow[]>;
+export declare const markDone: (db: CanvasDb, id: number) => Promise<void>;
+export declare const markWaiting: (db: CanvasDb, id: number, attempts: number) => Promise<void>;
+export declare const markRetry: (db: CanvasDb, id: number, attempts: number, nextAt: number, firstFailedAt: number) => Promise<void>;
+export declare const markExpired: (db: CanvasDb, id: number) => Promise<void>;
 export interface ClaimedRow {
     key: string;
     claim_token: string;
@@ -63,14 +63,14 @@ export interface ClaimedRow {
 }
 /** The calling machine's own rows (`peer = via`, never another's), fenced with a fresh token. Takes pending and waiting rows
  *  and claims whose lease ran out; a row still under a live lease is left alone. */
-export declare function claimRows(db: DatabaseSync, via: string, limit: number, now?: number): ClaimedRow[];
+export declare function claimRows(db: CanvasDb, via: string, limit: number, now?: number): Promise<ClaimedRow[]>;
 /** Mark done the rows the caller still holds: `peer = via`, the same token, still `claimed`. Returns the keys acked. */
-export declare function ackRows(db: DatabaseSync, via: string, acks: ReadonlyArray<{
+export declare function ackRows(db: CanvasDb, via: string, acks: ReadonlyArray<{
     key: string;
     claim_token: string;
-}>): string[];
+}>): Promise<string[]>;
 /** Retire rows done long ago, so the table stays small. */
-export declare function pruneOutbox(db: DatabaseSync, now: number, keepMs?: number): void;
+export declare function pruneOutbox(db: CanvasDb, now: number, keepMs?: number): Promise<void>;
 /** Give up on rows older than `OUTBOX_MAX_AGE_MS` that were never delivered, and on rows whose claim lapsed unacked (the receiver
  *  refused them as catalog lag and left them to be claimed again) once they are older than `CATALOG_LAG_RETRY_MS`. Returns how many. */
-export declare function expireOld(db: DatabaseSync, now: number): number;
+export declare function expireOld(db: CanvasDb, now: number): Promise<number>;

package/dist/core/peer/outbox-store.js

@@ -1,5 +1,5 @@
-var u=Object.defineProperty;var a=(t,e)=>u(t,"name",{value:e,configurable:!0});import{prepared as r}from"../sqlite-statements.js";import{randomBytes as x}from"node:crypto";const E=10*6e4,m=720*60*6e4,N=1440*6e4,d=new Set;function l(t){return d.add(t),()=>{d.delete(t)}}a(l,"onPeerEnqueued");function L(t,e,n=Date.now()){const o=r(t,`INSERT INTO peer_outbox (peer, kind, payload_json, idempotency_key, state, attempts, next_at, created_at)
-    VALUES (?, ?, ?, ?, 'pending', 0, ?, ?) ON CONFLICT (idempotency_key) DO NOTHING`).run(e.peer,e.kind,JSON.stringify(e.payload),e.key,n,n);return Number(o.changes)===0?!1:(setImmediate(()=>{for(const i of[...d])try{i(e.peer)}catch{}}),!0)}a(L,"enqueuePeerRow");function T(t,e,n=200){return r(t,"SELECT * FROM peer_outbox WHERE state = 'pending' AND next_at <= ? ORDER BY id LIMIT ?").all(e,n)}a(T,"dueRows");function y(t,e,n,o=50){return r(t,"SELECT * FROM peer_outbox WHERE state = 'pending' AND peer = ? AND (attempts = 0 OR next_at <= ?) ORDER BY id LIMIT ?").all(e,n,o)}a(y,"pendingFor");const O=a((t,e)=>{r(t,"UPDATE peer_outbox SET state = 'done', claimed_by = NULL, next_at = NULL WHERE id = ? AND state IN ('pending', 'waiting')").run(e)},"markDone"),g=a((t,e,n)=>{r(t,"UPDATE peer_outbox SET state = 'waiting', attempts = ?, next_at = NULL WHERE id = ? AND state = 'pending'").run(n,e)},"markWaiting"),S=a((t,e,n,o,i)=>{r(t,"UPDATE peer_outbox SET attempts = ?, next_at = ?, first_failed_at = ? WHERE id = ? AND state = 'pending'").run(n,o,i,e)},"markRetry"),b=a((t,e)=>{r(t,"UPDATE peer_outbox SET state = 'expired', next_at = NULL WHERE id = ? AND state IN ('pending', 'waiting')").run(e)},"markExpired");function f(t,e,n,o=Date.now()){const i=Math.max(1,Math.min(n,100)),_=r(t,`SELECT * FROM peer_outbox WHERE peer = ?
-    AND (state IN ('pending', 'waiting') OR (state = 'claimed' AND claimed_at <= ?)) ORDER BY id LIMIT ?`).all(e,o-E,i),s=x(16).toString("hex"),c=r(t,"UPDATE peer_outbox SET state = 'claimed', claimed_by = ?, claimed_at = ?, next_at = NULL WHERE id = ?");return _.map(p=>(c.run(s,o,p.id),{key:p.idempotency_key,claim_token:s,payload:JSON.parse(p.payload_json)}))}a(f,"claimRows");function k(t,e,n){const o=r(t,`UPDATE peer_outbox SET state = 'done', claimed_by = NULL WHERE idempotency_key = ? AND peer = ?
-    AND state = 'claimed' AND claimed_by = ?`);return n.filter(i=>Number(o.run(i.key,e,i.claim_token).changes)>0).map(i=>i.key)}a(k,"ackRows");function I(t,e,n=1440*6e4){r(t,"DELETE FROM peer_outbox WHERE state IN ('done', 'expired') AND created_at < ?").run(e-n)}a(I,"pruneOutbox");function U(t,e){return Number(r(t,`UPDATE peer_outbox SET state = 'expired', next_at = NULL
-    WHERE (state IN ('pending', 'waiting') AND created_at < ?) OR (state = 'claimed' AND claimed_at <= ? AND created_at < ?)`).run(e-m,e-E,e-N).changes)}a(U,"expireOld");export{N as CATALOG_LAG_RETRY_MS,E as CLAIM_LEASE_MS,m as OUTBOX_MAX_AGE_MS,k as ackRows,f as claimRows,T as dueRows,L as enqueuePeerRow,U as expireOld,O as markDone,b as markExpired,S as markRetry,g as markWaiting,l as onPeerEnqueued,y as pendingFor,I as pruneOutbox};
+var _=Object.defineProperty;var n=(t,e)=>_(t,"name",{value:e,configurable:!0});import{randomBytes as u}from"node:crypto";import{filterAsync as x,mapAsync as m}from"../async-array.js";const c=10*6e4,y=720*60*6e4,N=1440*6e4,o=new Set;function l(t){return o.add(t),()=>{o.delete(t)}}n(l,"onPeerEnqueued");async function L(t,e,a=Date.now()){const r=await t.prepare(`INSERT INTO peer_outbox (peer, kind, payload_json, idempotency_key, state, attempts, next_at, created_at)
+    VALUES (?, ?, ?, ?, 'pending', 0, ?, ?) ON CONFLICT (idempotency_key) DO NOTHING`).run(e.peer,e.kind,JSON.stringify(e.payload),e.key,a,a);return Number(r.changes)===0?!1:(setImmediate(()=>{for(const i of[...o])try{i(e.peer)}catch{}}),!0)}n(L,"enqueuePeerRow");async function T(t,e,a=200){return await t.prepare("SELECT * FROM peer_outbox WHERE state = 'pending' AND next_at <= ? ORDER BY id LIMIT ?").all(e,a)}n(T,"dueRows");async function O(t,e,a,r=50){return await t.prepare("SELECT * FROM peer_outbox WHERE state = 'pending' AND peer = ? AND (attempts = 0 OR next_at <= ?) ORDER BY id LIMIT ?").all(e,a,r)}n(O,"pendingFor");const g=n(async(t,e)=>{await t.prepare("UPDATE peer_outbox SET state = 'done', claimed_by = NULL, next_at = NULL WHERE id = ? AND state IN ('pending', 'waiting')").run(e)},"markDone"),S=n(async(t,e,a)=>{await t.prepare("UPDATE peer_outbox SET state = 'waiting', attempts = ?, next_at = NULL WHERE id = ? AND state = 'pending'").run(a,e)},"markWaiting"),b=n(async(t,e,a,r,i)=>{await t.prepare("UPDATE peer_outbox SET attempts = ?, next_at = ?, first_failed_at = ? WHERE id = ? AND state = 'pending'").run(a,r,i,e)},"markRetry"),f=n(async(t,e)=>{await t.prepare("UPDATE peer_outbox SET state = 'expired', next_at = NULL WHERE id = ? AND state IN ('pending', 'waiting')").run(e)},"markExpired");async function k(t,e,a,r=Date.now()){const i=Math.max(1,Math.min(a,100)),d=await t.prepare(`SELECT * FROM peer_outbox WHERE peer = ?
+    AND (state IN ('pending', 'waiting') OR (state = 'claimed' AND claimed_at <= ?)) ORDER BY id LIMIT ?`).all(e,r-c,i),s=u(16).toString("hex"),E=t.prepare("UPDATE peer_outbox SET state = 'claimed', claimed_by = ?, claimed_at = ?, next_at = NULL WHERE id = ?");return await m(d,async p=>(await E.run(s,r,p.id),{key:p.idempotency_key,claim_token:s,payload:JSON.parse(p.payload_json)}))}n(k,"claimRows");async function w(t,e,a){const r=t.prepare(`UPDATE peer_outbox SET state = 'done', claimed_by = NULL WHERE idempotency_key = ? AND peer = ?
+    AND state = 'claimed' AND claimed_by = ?`);return(await x(a,async i=>Number((await r.run(i.key,e,i.claim_token)).changes)>0)).map(i=>i.key)}n(w,"ackRows");async function I(t,e,a=1440*6e4){await t.prepare("DELETE FROM peer_outbox WHERE state IN ('done', 'expired') AND created_at < ?").run(e-a)}n(I,"pruneOutbox");async function U(t,e){return Number((await t.prepare(`UPDATE peer_outbox SET state = 'expired', next_at = NULL
+    WHERE (state IN ('pending', 'waiting') AND created_at < ?) OR (state = 'claimed' AND claimed_at <= ? AND created_at < ?)`).run(e-y,e-c,e-N)).changes)}n(U,"expireOld");export{N as CATALOG_LAG_RETRY_MS,c as CLAIM_LEASE_MS,y as OUTBOX_MAX_AGE_MS,w as ackRows,k as claimRows,T as dueRows,L as enqueuePeerRow,U as expireOld,g as markDone,f as markExpired,b as markRetry,S as markWaiting,l as onPeerEnqueued,O as pendingFor,I as pruneOutbox};

package/dist/core/peer/receiver.d.ts

@@ -1,8 +1,8 @@
-import type { DatabaseSync } from 'node:sqlite';
 import type { Receiver } from '../graph/receivers.js';
 import { type PeerEventPayload } from './outbox-store.js';
+import type { CanvasDb } from '../canvas/db.js';
 /** The outbox key of one event to one destination stub. */
 export declare const eventKey: (messageId: string, destination: string) => string;
 /** The event as it crosses the wire: the object and actor by identity, the attributes, and the body inline. */
-export declare function payloadFor(db: DatabaseSync, messageId: string, key: string): PeerEventPayload;
+export declare function payloadFor(db: CanvasDb, messageId: string, key: string): Promise<PeerEventPayload>;
 export declare const peerReceiver: Receiver;

package/dist/core/peer/receiver.js

@@ -1 +1 @@
-var p=Object.defineProperty;var s=(o,t)=>p(o,"name",{value:t,configurable:!0});import{prepared as a}from"../sqlite-statements.js";import{heads as _}from"../graph/documents.js";import{bodyOf as y}from"../graph/bodies.js";import{getById as i}from"../graph/objects.js";import{enqueuePeerRow as b}from"./outbox-store.js";import{describeObject as f,stubOf as j}from"./stubs.js";const g=s((o,t)=>`ev:${o}:${t}`,"eventKey");function h(o,t){const d=typeof t?.pointer=="string"?t.pointer:void 0,e=d===void 0?null:i(o,d);if(e===null||e.type!=="document"||e.deleted_at!==null)return;const n=_(o,e)[0];if(n===void 0)return;const r=a(o,"SELECT source_path FROM documents WHERE object = ?").get(e.rowid);return y(n.body_hash,r?.source_path??null)}s(h,"reportText");function v(o,t,d){const e=a(o,"SELECT message_id, event, object_id, level, actor_id, body_ref, body_json FROM messages WHERE message_id = ?").get(t);if(e===void 0)throw new Error(`no message ${t}`);const n=i(o,e.object_id);if(n===null)throw new Error(`no object ${e.object_id}`);const r=e.actor_id===null?null:i(o,e.actor_id),m=e.body_json===null?{}:JSON.parse(e.body_json),{push:c,bodyRef:E,...u}=m,l=e.body_ref===null?void 0:h(o,c);return{key:d,message_id:e.message_id,event:e.event,level:e.level,object:f(o,n),actor:r===null?null:f(o,r),attrs:c?.attrs??{},...Object.keys(u).length>0?{body:u}:{},...l===void 0?{}:{body_text:l}}}s(v,"payloadFor");const $={bodyOwner:s(()=>null,"bodyOwner"),enqueue(o,t,d){for(const e of d){const n=j(o,e.id);if(n===null)continue;const r=g(t.messageId,e.id);b(o,{peer:n.home_machine,kind:"event",key:r,payload:{...v(o,t.messageId,r),...e.linked?{linked:!0}:{}}})}}};export{g as eventKey,v as payloadFor,$ as peerReceiver};
+var p=Object.defineProperty;var a=(t,n)=>p(t,"name",{value:n,configurable:!0});import{heads as y}from"../graph/documents.js";import{bodyOf as _}from"../graph/bodies.js";import{getById as s}from"../graph/objects.js";import{enqueuePeerRow as m}from"./outbox-store.js";import{describeObject as l,stubOf as w}from"./stubs.js";const b=a((t,n)=>`ev:${t}:${n}`,"eventKey");async function j(t,n){const i=typeof n?.pointer=="string"?n.pointer:void 0,e=i===void 0?null:await s(t,i);if(e===null||e.type!=="document"||e.deleted_at!==null)return;const o=(await y(t,e))[0];if(o===void 0)return;const r=await t.prepare("SELECT source_path FROM documents WHERE object = ?").get(e.rowid);return _(o.body_hash,r?.source_path??null)}a(j,"reportText");async function g(t,n,i){const e=await t.prepare("SELECT message_id, event, object_id, level, actor_id, body_ref, body_json FROM messages WHERE message_id = ?").get(n);if(e===void 0)throw new Error(`no message ${n}`);const o=await s(t,e.object_id);if(o===null)throw new Error(`no object ${e.object_id}`);const r=e.actor_id===null?null:await s(t,e.actor_id),f=e.body_json===null?{}:JSON.parse(e.body_json),{push:d,bodyRef:h,...c}=f,u=e.body_ref===null?void 0:await j(t,d);return{key:i,message_id:e.message_id,event:e.event,level:e.level,object:await l(t,o),actor:r===null?null:await l(t,r),attrs:d?.attrs??{},...Object.keys(c).length>0?{body:c}:{},...u===void 0?{}:{body_text:u}}}a(g,"payloadFor");const T={bodyOwner:a(()=>null,"bodyOwner"),async enqueue(t,n,i){for(const e of i){const o=await w(t,e.id);if(o===null)continue;const r=b(n.messageId,e.id);await m(t,{peer:o.home_machine,kind:"event",key:r,payload:{...await g(t,n.messageId,r),...e.linked?{linked:!0}:{}}})}}};export{b as eventKey,g as payloadFor,T as peerReceiver};

package/dist/core/peer/stubs.d.ts

@@ -1,8 +1,8 @@
-import type { DatabaseSync } from 'node:sqlite';
 import type { ObjectRow, Privacy } from '../graph/types.js';
 import { type CustomEvents } from '../graph/custom.js';
 import type { ObjectDTO } from '../../api/dto/objects.js';
 import type { Envelope } from './envelope.js';
+import type { CanvasDb } from '../canvas/db.js';
 /** The part of an envelope a stub stores: who the remote watcher is, never what it may do. */
 export interface StubIdentity {
     sub: string;
@@ -50,12 +50,12 @@ export interface StubRecord {
     identity: StubIdentity | null;
 }
 export declare const identityOfEnvelope: (envelope: Envelope) => StubIdentity;
-export declare function stubOf(db: DatabaseSync, object: ObjectRow | string): StubRecord | null;
-export declare const isStub: (db: DatabaseSync, object: ObjectRow) => boolean;
+export declare function stubOf(db: CanvasDb, object: ObjectRow | string): Promise<StubRecord | null>;
+export declare const isStub: (db: CanvasDb, object: ObjectRow) => Promise<boolean>;
 /** The local object for an app or person the other machine names as an event's actor, or null for any other type. An app or person is an
  *  owner, not a thing that lives on one machine: it is the same object here as there, so it is never given a stub (a stub would collide
  *  with the local owner object of the same handle, as with an installed plugin's app). */
-export declare function localOwnerActor(db: DatabaseSync, ref: ObjectRef): ObjectRow | null;
+export declare function localOwnerActor(db: CanvasDb, ref: ObjectRef): Promise<ObjectRow | null>;
 /**
  * The stub of the object `id` that lives on `machine`, created on first sight. Idempotent: a second
  * call returns the same row and, given an `envelope`, replaces the identity it stores. Refuses
@@ -63,7 +63,7 @@ export declare function localOwnerActor(db: DatabaseSync, ref: ObjectRef): Objec
  * local app (or person) object of the remote owner, so the stub sits in a space the access rules
  * understand. No `nodes` row is written.
  */
-export declare function ensureStub(db: DatabaseSync, id: string, type: string, machine: string, envelope?: Envelope, ref?: ObjectRef): ObjectRow;
+export declare function ensureStub(db: CanvasDb, id: string, type: string, machine: string, envelope?: Envelope, ref?: ObjectRef): Promise<ObjectRow>;
 /**
  * The stub of the node `nodeId` that lives on `machine`, as a watcher: created on first sight with no envelope
  * identity, owned by the local person, and marked `reception = 2` so `publish` considers it and the node
@@ -71,12 +71,12 @@ export declare function ensureStub(db: DatabaseSync, id: string, type: string, m
  * identity on the same row (`ensureStub` with an envelope). Refuses (`conflict`) an id that is a real local
  * object or a stub of another machine. Writes no `nodes` row.
  */
-export declare function ensureNodeStub(db: DatabaseSync, nodeId: string, machine: string): ObjectRow;
+export declare function ensureNodeStub(db: CanvasDb, nodeId: string, machine: string): Promise<ObjectRow>;
 /** The object moved: the machine that answered for it is now its home. A no-op for a local object or a stub already homed there. */
-export declare function rehomeStub(db: DatabaseSync, id: string, machine: string): void;
+export declare function rehomeStub(db: CanvasDb, id: string, machine: string): Promise<void>;
 /** How `o` is described to another machine. */
-export declare function describeObject(db: DatabaseSync, o: ObjectRow): ObjectRef;
+export declare function describeObject(db: CanvasDb, o: ObjectRow): Promise<ObjectRef>;
 /** The declaration of the custom kind `type`, or null for a built-in (no `object_kinds` row). Carries no `read` leaf. */
-export declare function kindDeclarationOf(db: DatabaseSync, type: string): KindDeclaration | null;
+export declare function kindDeclarationOf(db: CanvasDb, type: string): Promise<KindDeclaration | null>;
 /** `dto` with the declaration of its object's kind, when the kind is custom. */
-export declare function withKindDecl(db: DatabaseSync, row: ObjectRow, dto: ObjectDTO): ObjectDTO;
+export declare function withKindDecl(db: CanvasDb, row: ObjectRow, dto: ObjectDTO): Promise<ObjectDTO>;

package/dist/core/peer/stubs.js

@@ -1 +1 @@
-var x=Object.defineProperty;var o=(n,e)=>x(n,"name",{value:e,configurable:!0});import{prepared as i}from"../sqlite-statements.js";import{createObject as A,ensureOwner as h,getById as y,getByRowid as p}from"../graph/objects.js";import{upsertKind as b}from"../graph/custom.js";import{CrtrError as f}from"../errors.js";import{ExitCode as m}from"../../types.js";import{normalizeMachineId as H}from"./names.js";const N=["public","friends","private"],W=o(n=>{const e=n.act.act;return e===void 0?{sub:n.sub,app:null,node:null,node_scopes:null,place:null}:{sub:n.sub,app:e.sub,node:e.node,node_scopes:e.node_scopes,place:e.place}},"identityOfEnvelope");function S(n,e){const r=typeof e=="string"?y(n,e):e;if(r===null)return null;const t=i(n,"SELECT home_machine, envelope_json FROM peer_stubs WHERE object = ?").get(r.rowid);return t?{object:r,home_machine:t.home_machine,identity:t.envelope_json===null?null:JSON.parse(t.envelope_json)}:null}o(S,"stubOf");const I=o((n,e)=>i(n,"SELECT 1 FROM peer_stubs WHERE object = ?").get(e.rowid)!==void 0,"isStub");function d(n){return h(n,"person","local-user","user:local","user")}o(d,"localPerson");function w(n,e){return e==="user:local"?d(n):h(n,"app","app",e,e.replace(/^app:/,""))}o(w,"localApp");function F(n,e){return e.type==="app"?w(n,`app:${e.name}`):e.type==="person"?d(n):null}o(F,"localOwnerActor");function v(n,e,r){if(e!==null)return e.app===null?d(n):w(n,e.app);const t=r?.owner;return t?.type==="app"?w(n,t.external_id??`app:${t.handle}`):d(n)}o(v,"ownerFor");function g(n,e,r,t,_,u){const l=_===void 0?null:W(_),s=u?.privacy??"public";if(!N.includes(s))throw new f("invalid_event",`invalid privacy ${JSON.stringify(s)}`,m.GENERAL,{id:e});const c=y(n,e);if(c!==null){const a=S(n,c);if(a===null)throw new f("conflict",`${e} is a local ${c.type}, not a stub of ${t}`,m.GENERAL,{id:e});if(a.home_machine!==t)throw new f("conflict",`${e} is already a stub of ${a.home_machine}, not ${t}`,m.GENERAL,{id:e,home_machine:a.home_machine});return l!==null&&(i(n,"UPDATE peer_stubs SET envelope_json = ? WHERE object = ?").run(JSON.stringify(l),c.rowid),i(n,"UPDATE objects SET reception = 2 WHERE rowid = ?").run(c.rowid)),u!==void 0&&(R(n,r,u),u.privacy!==void 0&&c.privacy!==s)?(i(n,"UPDATE objects SET privacy = ? WHERE rowid = ?").run(s,c.rowid),p(n,c.rowid)):c}const O=v(n,l,u);R(n,r,u);const E=A(n,{id:e,type:r,kind:u?.kind??null,owner:O.rowid,privacy:s,name:u?.name??e,preview:u?.preview??"",home_machine:t});return i(n,"INSERT INTO peer_stubs (object, home_machine, envelope_json, created_at) VALUES (?, ?, ?, ?)").run(E.rowid,t,l===null?null:JSON.stringify(l),new Date().toISOString()),l!==null&&i(n,"UPDATE objects SET reception = 2 WHERE rowid = ?").run(E.rowid),p(n,E.rowid)}o(g,"ensureStub");function R(n,e,r){const t=r?.kind_decl;t===void 0||t.name!==e||b(n,{name:t.name,owner:v(n,null,{...r,owner:t.owner}),description:t.description,events:t.events,read:null,source:"peer"})}o(R,"holdKind");function J(n,e,r){const t=g(n,e,"node",H(r));return i(n,"UPDATE objects SET reception = 2 WHERE rowid = ?").run(t.rowid),p(n,t.rowid)}o(J,"ensureNodeStub");function M(n,e,r){const t=S(n,e);t===null||t.home_machine===r||(i(n,"UPDATE peer_stubs SET home_machine = ? WHERE object = ?").run(r,t.object.rowid),i(n,"UPDATE objects SET home_machine = ? WHERE rowid = ?").run(r,t.object.rowid))}o(M,"rehomeStub");function G(n,e){const r=j(n,e.owner===null?null:p(n,e.owner)),t=T(n,e.type);return{id:e.id,type:e.type,kind:e.kind,name:e.name,preview:e.preview,owner:r,privacy:e.privacy,...t===null?{}:{kind_decl:t}}}o(G,"describeObject");function j(n,e){if(e===null||e.type!=="person"&&e.type!=="app"&&e.type!=="repo"&&e.type!=="profile")return null;const r=i(n,"SELECT scheme, external_id FROM identities WHERE object = ?").get(e.rowid);return{id:e.id,type:e.type,scheme:r?.scheme??null,external_id:r?.external_id??null,handle:e.name}}o(j,"ownerRefOf");function T(n,e){const r=i(n,"SELECT owner, description, events_json FROM object_kinds WHERE name = ?").get(e),t=r===void 0?null:j(n,p(n,r.owner));return r===void 0||t===null?null:{name:e,description:r.description,events:JSON.parse(r.events_json),owner:t}}o(T,"kindDeclarationOf");function K(n,e,r){const t=T(n,e.type);return t===null?r:{...r,kind_decl:t}}o(K,"withKindDecl");export{G as describeObject,J as ensureNodeStub,g as ensureStub,W as identityOfEnvelope,I as isStub,T as kindDeclarationOf,F as localOwnerActor,M as rehomeStub,S as stubOf,K as withKindDecl};
+var O=Object.defineProperty;var i=(n,e)=>O(n,"name",{value:e,configurable:!0});import{createObject as x,ensureOwner as y,getById as _,getByRowid as u}from"../graph/objects.js";import{upsertKind as A}from"../graph/custom.js";import{CrtrError as d}from"../errors.js";import{ExitCode as E}from"../../types.js";import{normalizeMachineId as b}from"./names.js";const H=["public","friends","private"],N=i(n=>{const e=n.act.act;return e===void 0?{sub:n.sub,app:null,node:null,node_scopes:null,place:null}:{sub:n.sub,app:e.sub,node:e.node,node_scopes:e.node_scopes,place:e.place}},"identityOfEnvelope");async function h(n,e){const r=typeof e=="string"?await _(n,e):e;if(r===null)return null;const t=await n.prepare("SELECT home_machine, envelope_json FROM peer_stubs WHERE object = ?").get(r.rowid);return t?{object:r,home_machine:t.home_machine,identity:t.envelope_json===null?null:JSON.parse(t.envelope_json)}:null}i(h,"stubOf");const U=i(async(n,e)=>await n.prepare("SELECT 1 FROM peer_stubs WHERE object = ?").get(e.rowid)!==void 0,"isStub");async function l(n){return await y(n,"person","local-user","user:local","user")}i(l,"localPerson");async function f(n,e){return e==="user:local"?await l(n):await y(n,"app","app",e,e.replace(/^app:/,""))}i(f,"localApp");async function C(n,e){return e.type==="app"?await f(n,`app:${e.name}`):e.type==="person"?await l(n):null}i(C,"localOwnerActor");async function v(n,e,r){if(e!==null)return e.app===null?await l(n):await f(n,e.app);const t=r?.owner;return t?.type==="app"?await f(n,t.external_id??`app:${t.handle}`):await l(n)}i(v,"ownerFor");async function W(n,e,r,t,m,a){const c=m===void 0?null:N(m),p=a?.privacy??"public";if(!H.includes(p))throw new d("invalid_event",`invalid privacy ${JSON.stringify(p)}`,E.GENERAL,{id:e});const o=await _(n,e);if(o!==null){const s=await h(n,o);if(s===null)throw new d("conflict",`${e} is a local ${o.type}, not a stub of ${t}`,E.GENERAL,{id:e});if(s.home_machine!==t)throw new d("conflict",`${e} is already a stub of ${s.home_machine}, not ${t}`,E.GENERAL,{id:e,home_machine:s.home_machine});return c!==null&&(await n.prepare("UPDATE peer_stubs SET envelope_json = ? WHERE object = ?").run(JSON.stringify(c),o.rowid),await n.prepare("UPDATE objects SET reception = 2 WHERE rowid = ?").run(o.rowid)),a!==void 0&&(await S(n,r,a),a.privacy!==void 0&&o.privacy!==p)?(await n.prepare("UPDATE objects SET privacy = ? WHERE rowid = ?").run(p,o.rowid),await u(n,o.rowid)):o}const T=await v(n,c,a);await S(n,r,a);const w=await x(n,{id:e,type:r,kind:a?.kind??null,owner:T.rowid,privacy:p,name:a?.name??e,preview:a?.preview??"",home_machine:t});return await n.prepare("INSERT INTO peer_stubs (object, home_machine, envelope_json, created_at) VALUES (?, ?, ?, ?)").run(w.rowid,t,c===null?null:JSON.stringify(c),new Date().toISOString()),c!==null&&await n.prepare("UPDATE objects SET reception = 2 WHERE rowid = ?").run(w.rowid),await u(n,w.rowid)}i(W,"ensureStub");async function S(n,e,r){const t=r?.kind_decl;t===void 0||t.name!==e||await A(n,{name:t.name,owner:await v(n,null,{...r,owner:t.owner}),description:t.description,events:t.events,read:null,source:"peer"})}i(S,"holdKind");async function I(n,e,r){const t=await W(n,e,"node",b(r));return await n.prepare("UPDATE objects SET reception = 2 WHERE rowid = ?").run(t.rowid),await u(n,t.rowid)}i(I,"ensureNodeStub");async function F(n,e,r){const t=await h(n,e);t===null||t.home_machine===r||(await n.prepare("UPDATE peer_stubs SET home_machine = ? WHERE object = ?").run(r,t.object.rowid),await n.prepare("UPDATE objects SET home_machine = ? WHERE rowid = ?").run(r,t.object.rowid))}i(F,"rehomeStub");async function J(n,e){const r=await R(n,e.owner===null?null:await u(n,e.owner)),t=await j(n,e.type);return{id:e.id,type:e.type,kind:e.kind,name:e.name,preview:e.preview,owner:r,privacy:e.privacy,...t===null?{}:{kind_decl:t}}}i(J,"describeObject");async function R(n,e){if(e===null||e.type!=="person"&&e.type!=="app"&&e.type!=="repo"&&e.type!=="profile")return null;const r=await n.prepare("SELECT scheme, external_id FROM identities WHERE object = ?").get(e.rowid);return{id:e.id,type:e.type,scheme:r?.scheme??null,external_id:r?.external_id??null,handle:e.name}}i(R,"ownerRefOf");async function j(n,e){const r=await n.prepare("SELECT owner, description, events_json FROM object_kinds WHERE name = ?").get(e),t=r===void 0?null:await R(n,await u(n,r.owner));return r===void 0||t===null?null:{name:e,description:r.description,events:JSON.parse(r.events_json),owner:t}}i(j,"kindDeclarationOf");async function M(n,e,r){const t=await j(n,e.type);return t===null?r:{...r,kind_decl:t}}i(M,"withKindDecl");export{J as describeObject,I as ensureNodeStub,W as ensureStub,N as identityOfEnvelope,U as isStub,j as kindDeclarationOf,C as localOwnerActor,F as rehomeStub,h as stubOf,M as withKindDecl};

package/dist/core/providers/approval.d.ts

@@ -9,11 +9,11 @@ export interface ApprovalQuestion {
     }>;
 }
 /** A runless repeat consumes an answer exactly once, before any provider request. */
-export declare function consumeApproval(caller: ProviderCaller, input: ProviderCallInput, callShape: string): {
+export declare function consumeApproval(caller: ProviderCaller, input: ProviderCallInput, callShape: string): Promise<{
     option: string;
     requestId: string;
     prepared: PreparedFileCall | null;
-};
+}>;
 /** Called when the human ticket settles (answer or cancel), in the settlement transaction. */
 export declare function notifyProviderApproval(questionId: string): void;
 /** Create a page and either suspend a run or return its durable id to an app. */

package/dist/core/providers/approval.js

@@ -1,3 +1,3 @@
-var b=Object.defineProperty;var a=(r,e)=>b(r,"name",{value:e,configurable:!0});import{prepared as l}from"../sqlite-statements.js";import{createHash as q}from"node:crypto";import{openDb as E,withCanvasWrite as v}from"../canvas/db.js";import{newNodeId as A}from"../runtime/nodes.js";import{createPageRequest as S,getRequest as N}from"../human/requests.js";import{providerApprovalPage as O}from"../runs/questions.js";import{ProviderError as c}from"./errors.js";function _(r){return Array.isArray(r)?r.map(_):r!==null&&typeof r=="object"?Object.fromEntries(Object.entries(r).sort(([e],[n])=>e.localeCompare(n)).map(([e,n])=>[e,_(n)])):r}a(_,"canonical");function y(r){return q("sha256").update(JSON.stringify(_(r))).digest("hex")}a(y,"hashArgs");function f(){return new c("invalid_request","approval is not an answered question for this call",{param:"approval"})}a(f,"invalidApproval");function s(){return new c("user_denied","the user did not approve this call")}a(s,"denied");function R(r){if(r.aborted)throw s()}a(R,"canceled");function m(r){return l(E(),"SELECT * FROM provider_approvals WHERE question_id = ?").get(r)}a(m,"row");function z(r,e,n){const o=e.approval;if(!o||r.run_id!==null||r.grantee===null||r.sub===null)throw f();const t=m(o);if(!t||t.grantee!==r.grantee||t.sub!==r.sub||t.provider!==e.provider||t.tool!==e.tool||t.version!==(e.version??null)||t.args_hash!==y(e.arguments)||t.call_shape!==n)throw f();const p=N(o);if(!p||p.state!=="settled"||p.outcome!=="answered"||t.status!=="answered")throw f();const i=t.option_id;if(!i||v(d=>l(d,"UPDATE provider_approvals SET status = 'consumed' WHERE question_id = ? AND status = 'answered'").run(o).changes)!==1)throw f();if(i==="deny")throw s();return{option:i,requestId:t.request_id,prepared:t.prepared_files?JSON.parse(t.prepared_files):null}}a(z,"consumeApproval");function T(r){if(!r||typeof r!="object"||Array.isArray(r))throw new c("provider_error","provider approval question is invalid",{origin:"provider"});const e=r,n=e.options;if(typeof e.title!="string"||!e.title.trim()||typeof e.body!="string"||!Array.isArray(n)||n.length===0||n.some(o=>!o||typeof o!="object"||typeof o.option_id!="string"||!/^[A-Za-z0-9_-]{1,64}$/.test(o.option_id)||o.option_id==="deny"||typeof o.label!="string"||!o.label.trim())||new Set(n.map(o=>o.option_id)).size!==n.length)throw new c("provider_error","provider approval question is invalid",{origin:"provider"});return e}a(T,"validateQuestion");const w=new Map;function C(r){for(const e of w.get(r)??[])queueMicrotask(e)}a(C,"notifyProviderApproval");async function P(r,e){const n=a(()=>{const t=m(r);if(!t||t.status==="canceled")throw s();return t.status==="answered"?t.option_id:null},"read");if(e.aborted)throw s();let o=n();if(o==="deny")throw s();if(o!==null)return o;if(await new Promise(t=>{const p=w.get(r)??new Set,i=a(()=>{e.removeEventListener("abort",i),p.delete(i),p.size||w.delete(r),t()},"wake");p.add(i),w.set(r,p),e.addEventListener("abort",i,{once:!0}),(e.aborted||m(r)?.status!=="open")&&i()}),e.aborted||(o=n(),o===null||o==="deny"))throw s();return o}a(P,"waitForApproval");async function F(r,e,n,o,t,p,i){const g=T(o);if(!r.sub||!r.grantee)throw new c("grant_revoked","caller has no active grant");R(t);const d=A();v(u=>l(u,`INSERT INTO provider_approvals
+var g=Object.defineProperty;var a=(r,e)=>g(r,"name",{value:e,configurable:!0});import{createHash as b}from"node:crypto";import{openDb as f}from"../canvas/db.js";import{newNodeId as q}from"../runtime/nodes.js";import{createPageRequest as E,getRequest as A}from"../human/requests.js";import{providerApprovalPage as S}from"../runs/questions.js";import{ProviderError as c}from"./errors.js";function h(r){return Array.isArray(r)?r.map(h):r!==null&&typeof r=="object"?Object.fromEntries(Object.entries(r).sort(([e],[i])=>e.localeCompare(i)).map(([e,i])=>[e,h(i)])):r}a(h,"canonical");function m(r){return b("sha256").update(JSON.stringify(h(r))).digest("hex")}a(m,"hashArgs");function w(){return new c("invalid_request","approval is not an answered question for this call",{param:"approval"})}a(w,"invalidApproval");function s(){return new c("user_denied","the user did not approve this call")}a(s,"denied");function N(r){if(r.aborted)throw s()}a(N,"canceled");async function v(r){return await(await f()).prepare("SELECT * FROM provider_approvals WHERE question_id = ?").get(r)}a(v,"row");async function x(r,e,i){const o=e.approval;if(!o||r.run_id!==null||r.grantee===null||r.sub===null)throw w();const t=await v(o);if(!t||t.grantee!==r.grantee||t.sub!==r.sub||t.provider!==e.provider||t.tool!==e.tool||t.version!==(e.version??null)||t.args_hash!==m(e.arguments)||t.call_shape!==i)throw w();const p=await A(o);if(!p||p.state!=="settled"||p.outcome!=="answered"||t.status!=="answered")throw w();const n=t.option_id;if(!n||(await(await f()).prepare("UPDATE provider_approvals SET status = 'consumed' WHERE question_id = ? AND status = 'answered'").run(o)).changes!==1)throw w();if(n==="deny")throw s();return{option:n,requestId:t.request_id,prepared:t.prepared_files?JSON.parse(t.prepared_files):null}}a(x,"consumeApproval");function O(r){if(!r||typeof r!="object"||Array.isArray(r))throw new c("provider_error","provider approval question is invalid",{origin:"provider"});const e=r,i=e.options;if(typeof e.title!="string"||!e.title.trim()||typeof e.body!="string"||!Array.isArray(i)||i.length===0||i.some(o=>!o||typeof o!="object"||typeof o.option_id!="string"||!/^[A-Za-z0-9_-]{1,64}$/.test(o.option_id)||o.option_id==="deny"||typeof o.label!="string"||!o.label.trim())||new Set(i.map(o=>o.option_id)).size!==i.length)throw new c("provider_error","provider approval question is invalid",{origin:"provider"});return e}a(O,"validateQuestion");const l=new Map;function M(r){for(const e of l.get(r)??[])queueMicrotask(e)}a(M,"notifyProviderApproval");async function R(r,e){const i=a(async()=>{const t=await v(r);if(!t||t.status==="canceled")throw s();return t.status==="answered"?t.option_id:null},"read");if(e.aborted)throw s();let o=await i();if(o==="deny")throw s();if(o!==null)return o;if(await new Promise(async t=>{const p=l.get(r)??new Set,n=a(()=>{e.removeEventListener("abort",n),p.delete(n),p.size||l.delete(r),t()},"wake");p.add(n),l.set(r,p),e.addEventListener("abort",n,{once:!0}),(e.aborted||(await v(r))?.status!=="open")&&n()}),e.aborted||(o=await i(),o===null||o==="deny"))throw s();return o}a(R,"waitForApproval");async function z(r,e,i,o,t,p,n){const _=O(o);if(!r.sub||!r.grantee)throw new c("grant_revoked","caller has no active grant");N(t);const d=await q();await(await f()).prepare(`INSERT INTO provider_approvals
     (question_id, grantee, sub, provider, tool, version, args_hash, request_id, status, call_shape, prepared_files)
-    VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'open', ?, ?)`).run(d,r.grantee,r.sub,e.provider,e.tool,e.version??null,y(e.arguments),n,p??null,i&&(i.copies.length||i.upload)?JSON.stringify(i):null));try{S({request_id:d,requester_node_id:r.run_id?r.node_id:null,prepared:O(g)})}catch(u){throw v(h=>l(h,"DELETE FROM provider_approvals WHERE question_id = ? AND status = 'open'").run(d)),u}if(!r.run_id){if(t.aborted){const{cancelHumanTicket:u}=await import("../../daemon/human/finish.js");throw await u(d,{reason:"the provider call was canceled"}),s()}throw new c("approval_pending","the provider requires the user to answer a question",{question_id:d})}try{const u=await P(d,t);if(t.aborted)throw s();return{option:u,questionId:d}}catch(u){if(t.aborted){const{cancelHumanTicket:h}=await import("../../daemon/human/finish.js");throw await h(d,{reason:"the provider call was canceled"}),s()}throw u}}a(F,"requireProviderApproval");export{z as consumeApproval,C as notifyProviderApproval,F as requireProviderApproval};
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'open', ?, ?)`).run(d,r.grantee,r.sub,e.provider,e.tool,e.version??null,m(e.arguments),i,p??null,n&&(n.copies.length||n.upload)?JSON.stringify(n):null);try{await E({request_id:d,requester_node_id:r.run_id?r.node_id:null,prepared:S(_)})}catch(u){throw await(await f()).prepare("DELETE FROM provider_approvals WHERE question_id = ? AND status = 'open'").run(d),u}if(!r.run_id){if(t.aborted){const{cancelHumanTicket:u}=await import("../../daemon/human/finish.js");throw await u(d,{reason:"the provider call was canceled"}),s()}throw new c("approval_pending","the provider requires the user to answer a question",{question_id:d})}try{const u=await R(d,t);if(t.aborted)throw s();return{option:u,questionId:d}}catch(u){if(t.aborted){const{cancelHumanTicket:y}=await import("../../daemon/human/finish.js");throw await y(d,{reason:"the provider call was canceled"}),s()}throw u}}a(z,"requireProviderApproval");export{x as consumeApproval,M as notifyProviderApproval,z as requireProviderApproval};

package/dist/core/providers/audit.d.ts

@@ -12,7 +12,7 @@ export interface ProviderAudit {
     question_id?: string;
 }
 /** One row per authorization, including refusals before a token is minted. */
-export declare function writeProviderAudit(row: ProviderAudit): void;
+export declare function writeProviderAudit(row: ProviderAudit): Promise<void>;
 export interface AuditFilters {
     after?: number;
     limit: number;
@@ -22,7 +22,7 @@ export interface AuditFilters {
     since?: string;
     until?: string;
 }
-export declare function listAudit(grantee: string | null, filters: AuditFilters): {
+export declare function listAudit(grantee: string | null, filters: AuditFilters): Promise<{
     rows: Record<string, unknown>[];
     next: string | null;
-};
+}>;