@north-light/cli 0.3.529 → 0.3.531

package/dist/core/feed/feed.js

@@ -1,4 +1,4 @@
-var N=Object.defineProperty;var i=(e,t)=>N(e,"name",{value:t,configurable:!0});import{prepared as p}from"../sqlite-statements.js";import{cancelCronsOnWake as $,getNode as h}from"../canvas/index.js";import{runStructuredRequestEffects as R,settleStructuredRequestIn as k}from"../canvas/structured-requests.js";import{openDb as y,withCanvasWrite as U}from"../canvas/db.js";import{randomUUID as b}from"node:crypto";import{composeNodeOutcomeDocument as q}from"../runtime/outcome-document.js";import{closeNode as A}from"../runtime/close.js";import{put as F}from"../graph/bodies.js";import{writeDocument as L}from"../graph/documents.js";import{asRuntimeWriter as W}from"../graph/spaces/own-memory.js";import{publish as C}from"../graph/events.js";import{nodeObject as v}from"../graph/objects.js";import{readerForNode as z}from"../graph/reader.js";import{endMessageSubscriptions as D}from"../graph/watches.js";import{operationIdContext as M}from"../events/operation-id.js";class B extends Error{static{i(this,"StructuredRequestFinalizationError")}state;constructor(t){super(t==="expired"?"structured_request_expired":"structured_request_settled"),this.state=t}}class g extends Error{static{i(this,"FinalizationError")}code;report;constructor(t,r){super(t),this.code=t,this.report=r}}function H(e){const t=i((r,n=2)=>String(r).padStart(n,"0"),"pad");return`${e.getUTCFullYear()}${t(e.getUTCMonth()+1)}${t(e.getUTCDate())}T${t(e.getUTCHours())}${t(e.getUTCMinutes())}${t(e.getUTCSeconds())}${t(e.getUTCMilliseconds(),3)}`}i(H,"compactTs");function O(e,t=80){const r=e.split(`
-`)[0]??"";return r.length>t?`${r.slice(0,t-1)}\u2026`:r}i(O,"firstLine");function j(e){return e.kind==="final"?{event:"report.final"}:e.result!==void 0?{event:"report.result"}:e.kind==="urgent"?{event:"report.update",level:7}:{event:"report.update",level:e.deliveryTier==="deferred"?3:e.deliveryTier==="urgent"?7:5}}i(j,"eventFor");function S(e,t,r){const n=r.from??t,o=`reports/${H(new Date)}-${b().slice(-8)}-${r.kind}`,u=v(e,t),a=v(e,n),{object:s}=L(e,W(z(e,n,()=>[])),{owner:u,kind:"report",name:o,preview:O(r.body)||r.kind,privacy:"public"},r.body),c=`${t}/${o}`,{event:_,level:m}=j(r);C(e,{event:_,object:u,actor:a,...m===void 0?{}:{level:m},attrs:{},pointer:s.id,messageBody:{kind:r.kind,label:O(r.body),bodyRef:c,...r.disposition===void 0?{}:{disposition:r.disposition}}});const l=p(e,`SELECT d.destination_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id
+var N=Object.defineProperty;var i=(e,t)=>N(e,"name",{value:t,configurable:!0});import{cancelCronsOnWake as O,getNode as E}from"../canvas/index.js";import{runStructuredRequestEffects as y,settleStructuredRequestIn as R}from"../canvas/structured-requests.js";import{openDb as q,withCanvasWrite as T}from"../canvas/db.js";import{randomUUID as x}from"node:crypto";import{composeNodeOutcomeDocument as F}from"../runtime/outcome-document.js";import{closeNode as M}from"../runtime/close.js";import{put as W}from"../graph/bodies.js";import{writeDocument as z}from"../graph/documents.js";import{asRuntimeWriter as A}from"../graph/spaces/own-memory.js";import{publish as k}from"../graph/events.js";import{nodeObject as v}from"../graph/objects.js";import{readerForNode as L}from"../graph/reader.js";import{endMessageSubscriptions as C}from"../graph/watches.js";import{operationIdContext as D}from"../events/operation-id.js";class H extends Error{static{i(this,"StructuredRequestFinalizationError")}state;constructor(t){super(t==="expired"?"structured_request_expired":"structured_request_settled"),this.state=t}}class h extends Error{static{i(this,"FinalizationError")}code;report;constructor(t,r){super(t),this.code=t,this.report=r}}function j(e){const t=i((r,n=2)=>String(r).padStart(n,"0"),"pad");return`${e.getUTCFullYear()}${t(e.getUTCMonth()+1)}${t(e.getUTCDate())}T${t(e.getUTCHours())}${t(e.getUTCMinutes())}${t(e.getUTCSeconds())}${t(e.getUTCMilliseconds(),3)}`}i(j,"compactTs");function S(e,t=80){const r=e.split(`
+`)[0]??"";return r.length>t?`${r.slice(0,t-1)}\u2026`:r}i(S,"firstLine");function B(e){return e.kind==="final"?{event:"report.final"}:e.result!==void 0?{event:"report.result"}:e.kind==="urgent"?{event:"report.update",level:7}:{event:"report.update",level:e.deliveryTier==="deferred"?3:e.deliveryTier==="urgent"?7:5}}i(B,"eventFor");async function U(e,t,r){const n=r.from??t,o=`reports/${j(new Date)}-${x().slice(-8)}-${r.kind}`,u=await v(e,t),c=await v(e,n),{object:d}=await z(e,A(await L(e,n,async()=>[])),{owner:u,kind:"report",name:o,preview:S(r.body)||r.kind,privacy:"public"},r.body),s=`${t}/${o}`,{event:p,level:m}=B(r);await k(e,{event:p,object:u,actor:c,...m===void 0?{}:{level:m},attrs:{},pointer:d.id,messageBody:{kind:r.kind,label:S(r.body),bodyRef:s,...r.disposition===void 0?{}:{disposition:r.disposition}}});const l=(await e.prepare(`SELECT d.destination_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id
     JOIN objects receiver ON receiver.id = d.destination_id
-    WHERE m.body_ref = ? AND receiver.type = 'node' ORDER BY d.destination_id`).all(c).map(w=>w.destination_id);return r.kind==="final"?D(e,u,"final"):r.result?.requestMessageId&&D(e,u,{result:r.result.requestMessageId}),{name:o,ref:c,doc:s,createdAt:s.created_at,deliveredTo:l}}i(S,"writeReport");function J(e,t){const r=y();r.exec("BEGIN IMMEDIATE");try{const n=p(r,"SELECT status, final_report FROM nodes WHERE node_id = ?").get(e);if(n===void 0)throw new g("unknown_node");const o=t.outcome;let u;if(o?.structured!==void 0){const d=k(r,o.structured.requestId,o.structured.declined===void 0?{intended:"completed",result:o.structured.value}:{intended:"declined",declined:o.structured.declined});if(!d.changed||d.row===null||d.row.state!=="completed"&&d.row.state!=="declined")return r.exec("COMMIT"),{written:void 0,...d.row===null?{}:{structured:d.row},structuredRefused:!0};u=d.row}else{const d=r.prepare("SELECT request_id FROM structured_requests WHERE node_id = ? AND state = 'pending'").get(e);if(d!==void 0){const f=k(r,d.request_id,{intended:"failed",failureReason:"finalized"});if(!f.changed||f.row===null||f.row.state!=="failed")return r.exec("COMMIT"),{written:void 0,...f.row===null?{}:{structured:f.row},structuredRefused:!0};u=f.row}}if(n.final_report!==null)throw new g("already_finalized",`${e}/${n.final_report}`);if(n.status!=="active"&&n.status!=="idle"&&n.status!=="done")throw new g("finalization_forbidden");const a=S(r,e,t),s=h(e),c=s?.kind!=="human",_=(s?.outcome_revision??0)+1,m=t.outcome?.kind??"result",l=t.outcome?.reason??"finalized",w=t.outcome?.detailJson??null,E=a.createdAt;if(c){const d=s===null?null:q({node:{...s,status:"done",intent:"done",terminal_reason:l},outcome:{kind:m,reason:l,at:E,revision:_,detailJson:w},finalReport:a.name,...u?.state==="completed"?{structuredResult:u.result}:{}});p(r,"UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = ?, final_report = ?, finalized_at = ?, outcome_kind = ?, outcome_reason = ?, outcome_at = ?, outcome_revision = outcome_revision + 1, outcome_detail_json = ? WHERE node_id = ? AND final_report IS NULL").run(l,a.name,E,m,l,E,w,e),d!==null&&C(r,{event:"outcome",object:v(r,e),actor:null,attrs:{revision:_},messageBody:d})}else p(r,"UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = 'finalized', final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL").run(a.name,E,e);return r.exec("COMMIT"),{written:a,...u===void 0?{}:{structured:u}}}catch(n){throw r.exec("ROLLBACK"),n}}i(J,"commitCanonicalFinal");async function x(e,t){if(!e)throw new Error(`push: empty nodeId (kind=${t.kind}) \u2014 a report must belong to a node`);if(t.kind==="final"&&t.deliveryTier!==void 0)throw new Error("push final does not accept a delivery tier");if(t.kind!=="final"&&t.outcome!==void 0)throw new Error("push outcome is final-only");if(t.kind!=="update"&&t.result!==void 0)throw new Error("a one-off result is an update report");if(F(t.body),t.kind==="final"){const n=J(e,t);if(n.structuredRefused===!0)throw n.structured!==void 0&&R(n.structured),new B(n.structured?.state??"failed");n.structured!==void 0&&t.outcome?.structured?.skipEffects!==!0&&R(n.structured);const{written:o}=n;if($(e),h(e)?.run_id===e){const a=p(y(),"SELECT node_id FROM nodes WHERE run_id = ? AND node_id != ? ORDER BY created DESC").all(e,e);for(const s of a){const c=h(s.node_id);c&&c.status!=="done"&&c.status!=="canceled"&&c.status!=="dead"&&A(s.node_id,{preserveEmpty:!0})}}return{report:o.ref,reportId:o.doc.id,deliveredTo:o.deliveredTo}}const r=U(n=>S(n,e,t));return{report:r.ref,reportId:r.doc.id,deliveredTo:r.deliveredTo}}i(x,"pushWithContext");function T(e,t){return M.current()===void 0?M.fresh(()=>x(e,t)):x(e,t)}i(T,"push");async function ue(e,t,r){return T(e,{kind:"update",body:t,...r})}i(ue,"pushUpdate");async function se(e,t,r){return T(e,{kind:"urgent",body:t,...r})}i(se,"pushUrgent");async function ce(e,t,r){return T(e,{kind:"final",body:t,...r})}i(ce,"pushFinal");export{g as FinalizationError,B as StructuredRequestFinalizationError,T as push,ce as pushFinal,ue as pushUpdate,se as pushUrgent};
+    WHERE m.body_ref = ? AND receiver.type = 'node' ORDER BY d.destination_id`).all(s)).map(w=>w.destination_id);return r.kind==="final"?await C(e,u,"final"):r.result?.requestMessageId&&await C(e,u,{result:r.result.requestMessageId}),{name:o,ref:s,doc:d,createdAt:d.created_at,deliveredTo:l}}i(U,"writeReport");async function J(e,t){return T(async r=>{const n=await r.prepare("SELECT status, final_report FROM nodes WHERE node_id = ?").get(e);if(n===void 0)throw new h("unknown_node");const o=t.outcome;let u;if(o?.structured!==void 0){const a=await R(r,o.structured.requestId,o.structured.declined===void 0?{intended:"completed",result:o.structured.value}:{intended:"declined",declined:o.structured.declined});if(!a.changed||a.row===null||a.row.state!=="completed"&&a.row.state!=="declined")return{written:void 0,...a.row===null?{}:{structured:a.row},structuredRefused:!0};u=a.row}else{const a=await r.prepareUncached("SELECT request_id FROM structured_requests WHERE node_id = ? AND state = 'pending'").get(e);if(a!==void 0){const f=await R(r,a.request_id,{intended:"failed",failureReason:"finalized"});if(!f.changed||f.row===null||f.row.state!=="failed")return{written:void 0,...f.row===null?{}:{structured:f.row},structuredRefused:!0};u=f.row}}if(n.final_report!==null)throw new h("already_finalized",`${e}/${n.final_report}`);if(n.status!=="active"&&n.status!=="idle"&&n.status!=="done")throw new h("finalization_forbidden");const c=await U(r,e,t),d=await E(e),s=d?.kind!=="human",p=(d?.outcome_revision??0)+1,m=t.outcome?.kind??"result",l=t.outcome?.reason??"finalized",w=t.outcome?.detailJson??null,_=c.createdAt;if(s){const a=d===null?null:await F({node:{...d,status:"done",intent:"done",terminal_reason:l},outcome:{kind:m,reason:l,at:_,revision:p,detailJson:w},finalReport:c.name,...u?.state==="completed"?{structuredResult:u.result}:{}});await r.prepare("UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = ?, final_report = ?, finalized_at = ?, outcome_kind = ?, outcome_reason = ?, outcome_at = ?, outcome_revision = outcome_revision + 1, outcome_detail_json = ? WHERE node_id = ? AND final_report IS NULL").run(l,c.name,_,m,l,_,w,e),a!==null&&await k(r,{event:"outcome",object:await v(r,e),actor:null,attrs:{revision:p},messageBody:a})}else await r.prepare("UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = 'finalized', final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL").run(c.name,_,e);return{written:c,...u===void 0?{}:{structured:u}}})}i(J,"commitCanonicalFinal");async function $(e,t){if(!e)throw new Error(`push: empty nodeId (kind=${t.kind}) \u2014 a report must belong to a node`);if(t.kind==="final"&&t.deliveryTier!==void 0)throw new Error("push final does not accept a delivery tier");if(t.kind!=="final"&&t.outcome!==void 0)throw new Error("push outcome is final-only");if(t.kind!=="update"&&t.result!==void 0)throw new Error("a one-off result is an update report");if(W(t.body),t.kind==="final"){const n=await J(e,t);if(n.structuredRefused===!0)throw n.structured!==void 0&&y(n.structured),new H(n.structured?.state??"failed");n.structured!==void 0&&t.outcome?.structured?.skipEffects!==!0&&y(n.structured);const{written:o}=n;if(await O(e),(await E(e))?.run_id===e){const c=await(await q()).prepare("SELECT node_id FROM nodes WHERE run_id = ? AND node_id != ? ORDER BY created DESC").all(e,e);for(const d of c){const s=await E(d.node_id);s&&s.status!=="done"&&s.status!=="canceled"&&s.status!=="dead"&&await M(d.node_id,{preserveEmpty:!0})}}return{report:o.ref,reportId:o.doc.id,deliveredTo:o.deliveredTo}}const r=await T(async n=>await U(n,e,t));return{report:r.ref,reportId:r.doc.id,deliveredTo:r.deliveredTo}}i($,"pushWithContext");function g(e,t){return D.current()===void 0?D.fresh(()=>$(e,t)):$(e,t)}i(g,"push");async function oe(e,t,r){return g(e,{kind:"update",body:t,...r})}i(oe,"pushUpdate");async function ae(e,t,r){return g(e,{kind:"urgent",body:t,...r})}i(ae,"pushUrgent");async function ue(e,t,r){return g(e,{kind:"final",body:t,...r})}i(ue,"pushFinal");export{h as FinalizationError,H as StructuredRequestFinalizationError,g as push,ue as pushFinal,oe as pushUpdate,ae as pushUrgent};

package/dist/core/feed/inbox.d.ts

@@ -24,11 +24,11 @@ export interface InboxEntry {
 export declare function nodeMailEntry(delivery: ClaimedNodeMail): InboxEntry;
 /** The newest head body of the report document a message points at, or null when the entry
  *  is not a report or the document is gone. */
-export declare function reportDocumentBody(objectId: string): string | null;
+export declare function reportDocumentBody(objectId: string): Promise<string | null>;
 export interface InboxDelivery {
     kind: 'human' | 'card';
     text: string;
     entries: readonly InboxEntry[];
 }
 /** Split delivered entries into verbatim human messages and sender-grouped inbox cards. */
-export declare function coalesce(entries: readonly InboxEntry[]): readonly InboxDelivery[];
+export declare function coalesce(entries: readonly InboxEntry[]): Promise<readonly InboxDelivery[]>;

package/dist/core/feed/inbox.js

@@ -1 +1 @@
-var c=Object.defineProperty;var d=(o,e)=>c(o,"name",{value:e,configurable:!0});import{prepared as u}from"../sqlite-statements.js";import{openDb as m}from"../canvas/db.js";import{heads as p}from"../graph/documents.js";import{getById as l}from"../graph/objects.js";import{bodyOf as h}from"../graph/bodies.js";import{validateOperationId as y}from"../events/operation-id.js";import{formatInboxCard as b,machineOfEntries as I}from"../../shared/generated-context.js";import{inlineBody as g,renderEntryBody as E,reportRefNodeId as _}from"../../shared/inbox-entry-body.js";const x=/^(?!0{32}$)[0-9a-f]{32}$/;function k(o){if(typeof o!="string"||!x.test(o))throw new TypeError("entry_id must be 32 lowercase non-zero hexadecimal characters");return o}d(k,"validateInboxEntryId");function $(o){const e=o.message;return{entry_id:k(e.messageId),operation_id:y(e.operationId),ts:e.createdAt,from:e.senderNodeId,...e.senderName===null?{}:{from_name:e.senderName},tier:o.urgency,kind:e.kind,...e.bodyRef===null?{}:{ref:e.bodyRef},label:e.label,...e.bodyJson===null?{}:{data:e.bodyJson},...e.disposition===null?{}:{disposition:e.disposition}}}d($,"nodeMailEntry");function B(o){const e=m(),n=l(e,o);if(n===null||n.type!=="document"||n.deleted_at!==null)return null;const s=p(e,n)[0];if(s===void 0)return null;const i=u(e,"SELECT source_path FROM documents WHERE object = ?").get(n.rowid);return h(s.body_hash,i?.source_path??null)}d(B,"reportDocumentBody");function N(o){const e=o.data?.push?.object?.id,n=_(o.ref)!==void 0&&e!==void 0?B(e):null;return E(o,n)}d(N,"entryBody");function R(o){return{kind:o.kind,body:N(o),...o.ref===void 0?{}:{ref:o.ref},...o.disposition===void 0?{}:{disposition:o.disposition}}}d(R,"cardEntry");function z(o){if(o.length===0)return[];const e=new Map;for(const t of o){const r=t.from??"system";e.has(r)||e.set(r,[]),e.get(r).push(t)}const n=[],s=[];let i=-1;for(const[t,r]of e){if(t==="human"){for(const f of r){const a=g(f);n.push({kind:"human",text:a===""?f.label:a,entries:[f]})}continue}i<0&&(i=n.length,n.push({kind:"card",text:"",entries:[]})),s.push({id:t,...I(r),entries:r.map(R)})}return i>=0&&(n[i]={kind:"card",text:b(s),entries:o.filter(t=>(t.from??"system")!=="human")}),n}d(z,"coalesce");export{z as coalesce,$ as nodeMailEntry,B as reportDocumentBody};
+var f=Object.defineProperty;var i=(n,e)=>f(n,"name",{value:e,configurable:!0});import{openDb as u}from"../canvas/db.js";import{heads as m}from"../graph/documents.js";import{getById as p}from"../graph/objects.js";import{bodyOf as l}from"../graph/bodies.js";import{validateOperationId as y}from"../events/operation-id.js";import{formatInboxCard as h,machineOfEntries as b}from"../../shared/generated-context.js";import{inlineBody as w,renderEntryBody as I,reportRefNodeId as g}from"../../shared/inbox-entry-body.js";import{mapAsync as E}from"../async-array.js";const _=/^(?!0{32}$)[0-9a-f]{32}$/;function x(n){if(typeof n!="string"||!_.test(n))throw new TypeError("entry_id must be 32 lowercase non-zero hexadecimal characters");return n}i(x,"validateInboxEntryId");function S(n){const e=n.message;return{entry_id:x(e.messageId),operation_id:y(e.operationId),ts:e.createdAt,from:e.senderNodeId,...e.senderName===null?{}:{from_name:e.senderName},tier:n.urgency,kind:e.kind,...e.bodyRef===null?{}:{ref:e.bodyRef},label:e.label,...e.bodyJson===null?{}:{data:e.bodyJson},...e.disposition===null?{}:{disposition:e.disposition}}}i(S,"nodeMailEntry");async function k(n){const e=await u(),o=await p(e,n);if(o===null||o.type!=="document"||o.deleted_at!==null)return null;const s=(await m(e,o))[0];if(s===void 0)return null;const d=await e.prepare("SELECT source_path FROM documents WHERE object = ?").get(o.rowid);return l(s.body_hash,d?.source_path??null)}i(k,"reportDocumentBody");async function B(n){const e=n.data?.push?.object?.id,o=g(n.ref)!==void 0&&e!==void 0?await k(e):null;return I(n,o)}i(B,"entryBody");async function N(n){return{kind:n.kind,body:await B(n),...n.ref===void 0?{}:{ref:n.ref},...n.disposition===void 0?{}:{disposition:n.disposition}}}i(N,"cardEntry");async function $(n){if(n.length===0)return[];const e=new Map;for(const t of n){const r=t.from??"system";e.has(r)||e.set(r,[]),e.get(r).push(t)}const o=[],s=[];let d=-1;for(const[t,r]of e){if(t==="human"){for(const a of r){const c=w(a);o.push({kind:"human",text:c===""?a.label:c,entries:[a]})}continue}d<0&&(d=o.length,o.push({kind:"card",text:"",entries:[]})),s.push({id:t,...b(r),entries:await E(r,N)})}return d>=0&&(o[d]={kind:"card",text:h(s),entries:n.filter(t=>(t.from??"system")!=="human")}),o}i($,"coalesce");export{$ as coalesce,S as nodeMailEntry,k as reportDocumentBody};

package/dist/core/feed/messages.d.ts

@@ -1,5 +1,4 @@
-import type { DatabaseSync } from 'node:sqlite';
-import { openDb } from '../canvas/db.js';
+import { type CanvasDb } from '../canvas/db.js';
 import type { OperationId } from '../events/types.js';
 import type { Level, ListenDelivery } from '../graph/types.js';
 import { type InboxDisposition, type InboxKind, type InboxTier } from './inbox.js';
@@ -20,7 +19,7 @@ export interface NodeMailInput {
     /** Optional caller-owned obligation identity, used by cron settlement replay. */
     idempotencyKey?: string;
     /** Runs with the mail insert, before the transaction commits. */
-    withinEnqueue?: (db: DatabaseSync, messageId: string) => void;
+    withinEnqueue?: (db: CanvasDb, messageId: string) => Promise<void>;
 }
 export interface EnqueuedNodeMail {
     messageId: string;
@@ -30,8 +29,8 @@ export interface EnqueuedNodeMail {
 }
 export declare function newId(): string;
 /** A terminal-lifecycle destination's normal or deferred mail is raised to urgent. */
-export declare function effectiveTier(nodeId: string, urgency: InboxTier): InboxTier;
-export declare function insertMessage(db: ReturnType<typeof openDb>, input: {
+export declare function effectiveTier(nodeId: string, urgency: InboxTier): Promise<InboxTier>;
+export declare function insertMessage(db: CanvasDb, input: {
     messageId?: string;
     operationId: OperationId;
     createdAt: string;
@@ -50,7 +49,7 @@ export declare function insertMessage(db: ReturnType<typeof openDb>, input: {
     };
     causeMessageId?: string | null;
     depth?: number;
-}): string;
+}): Promise<string>;
 /** The message's creation time, operation id and body — an oversized inline body is clipped
  *  into `destinationNodeId`'s messages dir and referenced; with no destination it stays inline. */
 export declare function finalizeNodeMail(input: Omit<NodeMailInput, 'wake'>, destinationNodeId: string | null): {
@@ -60,24 +59,24 @@ export declare function finalizeNodeMail(input: Omit<NodeMailInput, 'wake'>, des
     bodyJson: unknown | undefined;
 };
 /** Insert one immutable message and one node-inbox obligation into the caller's write transaction. */
-export declare function enqueueNodeMail(destinationNodeId: string, input: NodeMailInput): EnqueuedNodeMail;
+export declare function enqueueNodeMail(destinationNodeId: string, input: NodeMailInput): Promise<EnqueuedNodeMail>;
 /** Contract §1: a listening delivery maps 1:1 onto an inbox tier; only `next-turn` does not wake. */
 export declare function listenDeliveryTier(delivery: ListenDelivery): {
     urgency: InboxTier;
     wake: 0 | 1;
 };
 /** Queue one runtime notice to a node's inbox inside the caller's write transaction (no sender). */
-export declare function queueNodeNotice(db: DatabaseSync, nodeId: string, notice: {
+export declare function queueNodeNotice(db: CanvasDb, nodeId: string, notice: {
     body: string;
     label?: string;
     tier: InboxTier;
     wake: 0 | 1;
-}): EnqueuedNodeMail;
+}): Promise<EnqueuedNodeMail>;
 /** Retract an obligation without fabricating a terminal receipt. */
-export declare function cancelDelivery(deliveryId: string, now?: number): boolean;
+export declare function cancelDelivery(deliveryId: string, now?: number): Promise<boolean>;
 export declare function cancelPendingNodeMail(nodeId: string, select?: {
     senderNodeId?: string | null;
     kind?: InboxKind;
-}): string[];
+}): Promise<string[]>;
 /** Enqueue the one notice only if the same live controller wait is still dead. */
-export declare function enqueueControllerDeathNotice(nodeId: string, controllerId: string): EnqueuedNodeMail | null;
+export declare function enqueueControllerDeathNotice(nodeId: string, controllerId: string): Promise<EnqueuedNodeMail | null>;

package/dist/core/feed/messages.js

@@ -1,8 +1,8 @@
-var w=Object.defineProperty;var a=(r,e)=>w(r,"name",{value:e,configurable:!0});import{prepared as l}from"../sqlite-statements.js";import{existsSync as E,mkdirSync as N,renameSync as I,writeFileSync as v}from"node:fs";import{randomBytes as b,randomUUID as k}from"node:crypto";import{join as S}from"node:path";import{cancelCronsOnWake as m}from"../canvas/crons.js";import{withCanvasWrite as u}from"../canvas/db.js";import{getRow as h}from"../canvas/canvas.js";import{messagesDir as R}from"../canvas/paths.js";import{syncDirectory as A,syncFile as D}from"../fs-utils.js";import{settleDeadControllerWait as T,settleMatchingControllerWait as O}from"../canvas/waits.js";import{generateOperationId as x,operationIdContext as L,validateOperationId as J}from"../events/operation-id.js";import{clipBody as C}from"../../shared/inbox-entry-body.js";function y(){let r;do r=b(16).toString("hex");while(r==="00000000000000000000000000000000");return r}a(y,"newId");function M(r,e){const n=JSON.stringify(r);if(n===void 0)throw new TypeError(`${e} must be JSON-serializable`);return n}a(M,"stringify");function W(r,e){return e!=="normal"&&e!=="deferred"?e:h(r)?.lifecycle==="terminal"?"urgent":e}a(W,"effectiveTier");function q(r,e,n){const t=R(r);E(t)||N(t,{recursive:!0});const d=e.replace(/[^0-9]/g,""),o=S(t,`${d}-${k().slice(0,6)}.md`),i=`${o}.tmp`;return v(i,n,"utf8"),D(i),I(i,o),A(t),o}a(q,"writeMessageBody");function U(r){if(typeof r!="object"||r===null)return"";const e=r.body;return typeof e=="string"?e.trim():""}a(U,"inlineBody");function f(r,e){const n=e.messageId??y(),t=Number(l(r,"UPDATE message_sequence SET seq = seq + 1 WHERE id = 1 RETURNING seq").get().seq);return l(r,`INSERT INTO messages
+var p=Object.defineProperty;var s=(r,e)=>p(r,"name",{value:e,configurable:!0});import{existsSync as _,mkdirSync as E,renameSync as N,writeFileSync as I}from"node:fs";import{randomBytes as v,randomUUID as b}from"node:crypto";import{join as k}from"node:path";import{cancelCronsOnWake as u}from"../canvas/crons.js";import{withCanvasWrite as c,openDb as h}from"../canvas/db.js";import{getRow as S}from"../canvas/canvas.js";import{messagesDir as R}from"../canvas/paths.js";import{syncDirectory as D,syncFile as A}from"../fs-utils.js";import{settleDeadControllerWait as T,settleMatchingControllerWait as O}from"../canvas/waits.js";import{generateOperationId as x,operationIdContext as L,validateOperationId as J}from"../events/operation-id.js";import{clipBody as U}from"../../shared/inbox-entry-body.js";function y(){let r;do r=v(16).toString("hex");while(r==="00000000000000000000000000000000");return r}s(y,"newId");function C(r,e){const t=JSON.stringify(r);if(t===void 0)throw new TypeError(`${e} must be JSON-serializable`);return t}s(C,"stringify");async function M(r,e){return e!=="normal"&&e!=="deferred"?e:(await S(r))?.lifecycle==="terminal"?"urgent":e}s(M,"effectiveTier");function W(r,e,t){const n=R(r);_(n)||E(n,{recursive:!0});const a=e.replace(/[^0-9]/g,""),d=k(n,`${a}-${b().slice(0,6)}.md`),i=`${d}.tmp`;return I(i,t,"utf8"),A(i),N(i,d),D(n),d}s(W,"writeMessageBody");function q(r){if(typeof r!="object"||r===null)return"";const e=r.body;return typeof e=="string"?e.trim():""}s(q,"inlineBody");async function m(r,e){const t=e.messageId??y(),n=Number((await r.prepare("UPDATE message_sequence SET seq = seq + 1 WHERE id = 1 RETURNING seq").get()).seq);return await r.prepare(`INSERT INTO messages
        (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition,
         event, object_id, level, actor_id, cause_message_id, depth)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(n,t,e.operationId,e.createdAt,e.senderNodeId,e.senderName,e.kind,e.label,e.bodyRef,e.bodyJson===void 0?null:M(e.bodyJson,"message body"),e.disposition,e.event?.event??null,e.event?.objectId??null,e.event?.level??null,e.event?.actorId??null,e.causeMessageId??null,e.depth??0),n}a(f,"insertMessage");function g(r,e,n,t,d,o,i){const s=y();return l(r,`INSERT INTO deliveries
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(t,n,e.operationId,e.createdAt,e.senderNodeId,e.senderName,e.kind,e.label,e.bodyRef,e.bodyJson===void 0?null:C(e.bodyJson,"message body"),e.disposition,e.event?.event??null,e.event?.objectId??null,e.event?.level??null,e.event?.actorId??null,e.causeMessageId??null,e.depth??0),t}s(m,"insertMessage");async function f(r,e,t,n,a,d,i){const o=y();return await r.prepare(`INSERT INTO deliveries
        (delivery_id, message_id, destination_id, urgency, wake, state, idempotency_key, created_at, updated_at)
-     VALUES (?, ?, ?, ?, ?, 'pending', ?, ?, ?)`).run(s,e,n,t,d,i??null,o,o),s}a(g,"insertNodeDelivery");function _(r,e){const n=new Date().toISOString(),t=r.operationId===void 0?L.current()??x():J(r.operationId);let d=r.bodyRef??null,o=r.bodyJson;if(d===null&&e!==null&&r.senderNodeId!=="human"){const i=U(o),s=C(i);s.clipped&&(d=q(e,n,i),o={...o,body:s.text})}return{createdAt:n,operationId:t,bodyRef:d,bodyJson:o}}a(_,"finalizeNodeMail");function j(r,e){const n=_(e,r);return u(t=>{const d=l(t,"SELECT run_id FROM nodes WHERE node_id = ?").get(r);if(d?.run_id&&l(t,"SELECT deleting_at FROM nodes WHERE node_id = ?").get(d.run_id)?.deleting_at)throw new Error("run is deleting");if(e.idempotencyKey!==void 0){const c=l(t,`SELECT d.delivery_id, d.message_id, d.urgency, m.created_at
-        FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE d.idempotency_key = ?`).get(e.idempotencyKey);if(c!==void 0)return{messageId:c.message_id,deliveryId:c.delivery_id,urgency:c.urgency,createdAt:c.created_at}}const o=Date.now(),i=W(r,e.urgency),s=f(t,{messageId:e.messageId,operationId:n.operationId,createdAt:n.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:n.bodyRef,bodyJson:n.bodyJson,disposition:e.disposition??null}),p=g(t,s,r,i,e.wake,o,e.idempotencyKey);return O(r,e.senderNodeId??null,o,t),e.withinEnqueue?.(t,s),e.wake===1&&i!=="deferred"&&m(r),{messageId:s,deliveryId:p,urgency:i,createdAt:n.createdAt}})}a(j,"enqueueNodeMail");function ee(r){switch(r){case"interrupt":return{urgency:"critical",wake:1};case"steer":return{urgency:"urgent",wake:1};case"after-turn":return{urgency:"normal",wake:1};case"next-turn":return{urgency:"deferred",wake:0}}}a(ee,"listenDeliveryTier");function re(r,e,n){const t={kind:"update",label:n.label??"notice",bodyJson:{body:n.body},urgency:n.tier,wake:n.wake},d=_(t,e),o=Date.now(),i=f(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:null,senderName:null,kind:t.kind,label:t.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:null}),s=g(r,i,e,n.tier,n.wake,o);return n.wake===1&&n.tier!=="deferred"&&m(e),{messageId:i,deliveryId:s,urgency:n.tier,createdAt:d.createdAt}}a(re,"queueNodeNotice");function ne(r,e=Date.now()){return u(n=>Number(l(n,"UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id = ? AND canceled_at IS NULL").run(e,e,r).changes)===1)}a(ne,"cancelDelivery");function te(r,e={}){return u(n=>{const t=["d.destination_id = ?","d.canceled_at IS NULL","d.state IN ('pending', 'handed_off')"],d=[r];e.senderNodeId!==void 0&&(t.push("m.sender_node_id IS ?"),d.push(e.senderNodeId)),e.kind!==void 0&&(t.push("m.kind = ?"),d.push(e.kind));const o=n.prepare(`SELECT d.delivery_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE ${t.join(" AND ")}`).all(...d);if(o.length===0)return[];const i=Date.now();return n.prepare(`UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id IN (${o.map(()=>"?").join(",")})`).run(i,i,...o.map(s=>s.delivery_id)),o.map(s=>s.delivery_id)})}a(te,"cancelPendingNodeMail");function de(r,e){return u(n=>{const t=Date.now(),d=l(n,`SELECT target.status AS controller_status FROM waits w LEFT JOIN nodes target ON target.node_id = w.target_id
-        WHERE w.node_id = ? AND w.kind = 'controller' AND w.target_id = ? AND w.satisfied_at IS NULL`).get(r,e);if(d===void 0||d.controller_status==="active"||d.controller_status==="idle")return null;const o=j(r,{kind:"urgent",label:"declared controller is no longer live",bodyJson:{body:`Controller ${e} is no longer live; the declared message wait was cleared.`},urgency:"urgent",wake:1});if(!T(r,e,t,n))throw new Error(`controller wait changed while notifying ${r}`);return o})}a(de,"enqueueControllerDeathNotice");export{ne as cancelDelivery,te as cancelPendingNodeMail,W as effectiveTier,de as enqueueControllerDeathNotice,j as enqueueNodeMail,_ as finalizeNodeMail,f as insertMessage,ee as listenDeliveryTier,y as newId,re as queueNodeNotice};
+     VALUES (?, ?, ?, ?, ?, 'pending', ?, ?, ?)`).run(o,e,t,n,a,i??null,d,d),o}s(f,"insertNodeDelivery");function g(r,e){const t=new Date().toISOString(),n=r.operationId===void 0?L.current()??x():J(r.operationId);let a=r.bodyRef??null,d=r.bodyJson;if(a===null&&e!==null&&r.senderNodeId!=="human"){const i=q(d),o=U(i);o.clipped&&(a=W(e,t,i),d={...d,body:o.text})}return{createdAt:t,operationId:n,bodyRef:a,bodyJson:d}}s(g,"finalizeNodeMail");async function j(r,e){const t=g(e,r);return await c(async n=>{const a=await n.prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(r);if(a?.run_id&&(await n.prepare("SELECT deleting_at FROM nodes WHERE node_id = ?").get(a.run_id))?.deleting_at)throw new Error("run is deleting");if(e.idempotencyKey!==void 0){const l=await n.prepare(`SELECT d.delivery_id, d.message_id, d.urgency, m.created_at
+        FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE d.idempotency_key = ?`).get(e.idempotencyKey);if(l!==void 0)return{messageId:l.message_id,deliveryId:l.delivery_id,urgency:l.urgency,createdAt:l.created_at}}const d=Date.now(),i=await M(r,e.urgency),o=await m(n,{messageId:e.messageId,operationId:t.operationId,createdAt:t.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:t.bodyRef,bodyJson:t.bodyJson,disposition:e.disposition??null}),w=await f(n,o,r,i,e.wake,d,e.idempotencyKey);return await O(r,e.senderNodeId??null,d,n),await e.withinEnqueue?.(n,o),e.wake===1&&i!=="deferred"&&await u(r),{messageId:o,deliveryId:w,urgency:i,createdAt:t.createdAt}})}s(j,"enqueueNodeMail");function Z(r){switch(r){case"interrupt":return{urgency:"critical",wake:1};case"steer":return{urgency:"urgent",wake:1};case"after-turn":return{urgency:"normal",wake:1};case"next-turn":return{urgency:"deferred",wake:0}}}s(Z,"listenDeliveryTier");async function ee(r,e,t){const n={kind:"update",label:t.label??"notice",bodyJson:{body:t.body},urgency:t.tier,wake:t.wake},a=g(n,e),d=Date.now(),i=await m(r,{operationId:a.operationId,createdAt:a.createdAt,senderNodeId:null,senderName:null,kind:n.kind,label:n.label,bodyRef:a.bodyRef,bodyJson:a.bodyJson,disposition:null}),o=await f(r,i,e,t.tier,t.wake,d);return t.wake===1&&t.tier!=="deferred"&&await u(e),{messageId:i,deliveryId:o,urgency:t.tier,createdAt:a.createdAt}}s(ee,"queueNodeNotice");async function re(r,e=Date.now()){return Number((await(await h()).prepare("UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id = ? AND canceled_at IS NULL").run(e,e,r)).changes)===1}s(re,"cancelDelivery");async function te(r,e={}){return await c(async t=>{const n=["d.destination_id = ?","d.canceled_at IS NULL","d.state IN ('pending', 'handed_off')"],a=[r];e.senderNodeId!==void 0&&(n.push("m.sender_node_id IS ?"),a.push(e.senderNodeId)),e.kind!==void 0&&(n.push("m.kind = ?"),a.push(e.kind));const d=await t.prepareUncached(`SELECT d.delivery_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE ${n.join(" AND ")}`).all(...a);if(d.length===0)return[];const i=Date.now();return await t.prepareUncached(`UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id IN (${d.map(()=>"?").join(",")})`).run(i,i,...d.map(o=>o.delivery_id)),d.map(o=>o.delivery_id)})}s(te,"cancelPendingNodeMail");async function ne(r,e){return await c(async t=>{const n=Date.now(),a=await t.prepare(`SELECT target.status AS controller_status FROM waits w LEFT JOIN nodes target ON target.node_id = w.target_id
+        WHERE w.node_id = ? AND w.kind = 'controller' AND w.target_id = ? AND w.satisfied_at IS NULL`).get(r,e);if(a===void 0||a.controller_status==="active"||a.controller_status==="idle")return null;const d=await j(r,{kind:"urgent",label:"declared controller is no longer live",bodyJson:{body:`Controller ${e} is no longer live; the declared message wait was cleared.`},urgency:"urgent",wake:1});if(!await T(r,e,n,t))throw new Error(`controller wait changed while notifying ${r}`);return d})}s(ne,"enqueueControllerDeathNotice");export{re as cancelDelivery,te as cancelPendingNodeMail,M as effectiveTier,ne as enqueueControllerDeathNotice,j as enqueueNodeMail,g as finalizeNodeMail,m as insertMessage,Z as listenDeliveryTier,y as newId,ee as queueNodeNotice};

package/dist/core/feed/reports.d.ts

@@ -1,10 +1,10 @@
 /** Whether `nodeId` owns any live report document — proof it already did work. */
-export declare function hasReportDocuments(nodeId: string): boolean;
+export declare function hasReportDocuments(nodeId: string): Promise<boolean>;
 /** `<nodeId>/<name>` of `nodeId`'s newest live report document — the name
  *  `crtr canvas read` takes — or null when it pushed none. */
-export declare function newestReportName(nodeId: string): string | null;
+export declare function newestReportName(nodeId: string): Promise<string | null>;
 /** Body of `nodeId`'s newest live report document, trimmed; '' when it pushed none. */
-export declare function newestReportBody(nodeId: string): string;
+export declare function newestReportBody(nodeId: string): Promise<string>;
 /** Body of the report document a push's `<nodeId>/reports/<name>` ref names;
  *  null when the ref is not that shape or the document is gone. */
-export declare function reportBodyByName(ref: string): string | null;
+export declare function reportBodyByName(ref: string): Promise<string | null>;

package/dist/core/feed/reports.js

@@ -1,2 +1,2 @@
-var l=Object.defineProperty;var r=(t,e)=>l(t,"name",{value:e,configurable:!0});import{prepared as u}from"../sqlite-statements.js";import{openDb as d}from"../canvas/db.js";import{get as a}from"../graph/bodies.js";import{heads as p}from"../graph/documents.js";import{getById as c}from"../graph/objects.js";function R(t){const e=d(),n=c(e,t);return n===null||n.type!=="node"?!1:u(e,"SELECT 1 FROM objects WHERE owner = ? AND type = 'document' AND kind = 'report' AND deleted_at IS NULL LIMIT 1").get(n.rowid)!==void 0}r(R,"hasReportDocuments");function f(t){const e=d(),n=c(e,t);if(!(n===null||n.type!=="node"))return u(e,`SELECT * FROM objects WHERE owner = ? AND type = 'document' AND kind = 'report' AND deleted_at IS NULL
-    ORDER BY created_at DESC, name DESC LIMIT 1`).get(n.rowid)}r(f,"newestReport");function L(t){const e=f(t);return e===void 0?null:`${t}/${e.name}`}r(L,"newestReportName");function b(t){const e=d(),n=f(t);if(n===void 0)return"";const o=p(e,n)[0];if(o===void 0)return"";try{return a(o.body_hash).trim()}catch{return""}}r(b,"newestReportBody");function w(t){const e=t.indexOf("/");if(e<=0||!t.startsWith("reports/",e+1))return null;const n=d(),o=c(n,t.slice(0,e));if(o===null||o.type!=="node")return null;const i=u(n,"SELECT * FROM objects WHERE owner = ? AND type = 'document' AND name = ? AND deleted_at IS NULL").get(o.rowid,t.slice(e+1)),s=i===void 0?void 0:p(n,i)[0];if(s===void 0)return null;try{return a(s.body_hash)}catch{return null}}r(w,"reportBodyByName");export{R as hasReportDocuments,b as newestReportBody,L as newestReportName,w as reportBodyByName};
+var f=Object.defineProperty;var o=(t,e)=>f(t,"name",{value:e,configurable:!0});import{openDb as a}from"../canvas/db.js";import{get as u}from"../graph/bodies.js";import{heads as s}from"../graph/documents.js";import{getById as d}from"../graph/objects.js";async function D(t){const e=await a(),n=await d(e,t);return n===null||n.type!=="node"?!1:await e.prepare("SELECT 1 FROM objects WHERE owner = ? AND type = 'document' AND kind = 'report' AND deleted_at IS NULL LIMIT 1").get(n.rowid)!==void 0}o(D,"hasReportDocuments");async function p(t){const e=await a(),n=await d(e,t);if(!(n===null||n.type!=="node"))return await e.prepare(`SELECT * FROM objects WHERE owner = ? AND type = 'document' AND kind = 'report' AND deleted_at IS NULL
+    ORDER BY created_at DESC, name DESC LIMIT 1`).get(n.rowid)}o(p,"newestReport");async function N(t){const e=await p(t);return e===void 0?null:`${t}/${e.name}`}o(N,"newestReportName");async function h(t){const e=await a(),n=await p(t);if(n===void 0)return"";const r=(await s(e,n))[0];if(r===void 0)return"";try{return u(r.body_hash).trim()}catch{return""}}o(h,"newestReportBody");async function R(t){const e=t.indexOf("/");if(e<=0||!t.startsWith("reports/",e+1))return null;const n=await a(),r=await d(n,t.slice(0,e));if(r===null||r.type!=="node")return null;const i=await n.prepare("SELECT * FROM objects WHERE owner = ? AND type = 'document' AND name = ? AND deleted_at IS NULL").get(r.rowid,t.slice(e+1)),c=i===void 0?void 0:(await s(n,i))[0];if(c===void 0)return null;try{return u(c.body_hash)}catch{return null}}o(R,"reportBodyByName");export{D as hasReportDocuments,h as newestReportBody,N as newestReportName,R as reportBodyByName};

package/dist/core/grants/cover.d.ts

@@ -8,7 +8,7 @@ export type GrantSync = (options?: {
 export declare function ensureCovers(grantId: string, rev: number, syncGrants: GrantSync): Promise<void>;
 /** The mirrored grant a caller names, read now, when it is still the caller's: active, the same `sub` and
  *  `grantee`, and not past `expires_at`. Otherwise 401 `grant_revoked`. */
-export declare function callerGrantOf(grantId: string, sub: string, grantee: string): ActiveGrant;
+export declare function callerGrantOf(grantId: string, sub: string, grantee: string): Promise<ActiveGrant>;
 /** The grant a token's app link names: the mirror made to cover `rev`, then the grant itself checked against
  *  `sub` and `grantee`. Errors are `ensureCovers`' and `callerGrantOf`'s `RunError`s. */
 export declare function coverGrant(grantId: string, rev: number, sub: string, grantee: string, syncGrants: GrantSync): Promise<ActiveGrant>;

package/dist/core/grants/cover.js

@@ -1 +1 @@
-var l=Object.defineProperty;var r=(e,n)=>l(e,"name",{value:n,configurable:!0});import{emitEvent as w}from"../events/emit.js";import{RunError as a}from"../runs/operations.js";import{activeGrant as h,grantExpired as m,grantSyncState as s,grantsGeneration as g}from"./mirror.js";let c=new Map,f=-1;function u(e){const n=g();return n!==f&&(c=new Map,f=n),c.get(e)}r(u,"behindRev");const v=r((e,n)=>e!==null&&e.rev>=n,"covered");async function p(e,n,o){if(v(s(e),n))return;const t=u(e);if(t===void 0||n>t){try{await o({fresh:!0})}catch{throw new a(503,"service_unavailable","grant sync failed")}const i=s(e);if(v(i,n))return;u(e),c.set(e,Math.max(n,c.get(e)??0)),w({level:"error",event:"daemon.grants.behind_token",fields:{grant:e,token_rev:n,mirror_rev:i?.rev??0}})}throw s(e)?new a(503,"service_unavailable","the directory answered grant sync below the access token's grant revision"):new a(401,"grant_revoked","grant is not active")}r(p,"ensureCovers");function b(e,n,o){const t=h(e);if(!t||t.sub!==n||t.grantee!==o||m(t))throw new a(401,"grant_revoked","grant is not active");return t}r(b,"callerGrantOf");async function x(e,n,o,t,i){return await p(e,n,i),b(e,o,t)}r(x,"coverGrant");export{b as callerGrantOf,x as coverGrant,p as ensureCovers};
+var v=Object.defineProperty;var r=(e,t)=>v(e,"name",{value:t,configurable:!0});import{emitEvent as l}from"../events/emit.js";import{RunError as o}from"../runs/operations.js";import{activeGrant as h,grantExpired as m,grantSyncState as s,grantsGeneration as g}from"./mirror.js";let c=new Map,w=-1;async function f(e){const t=await g();return t!==w&&(c=new Map,w=t),c.get(e)}r(f,"behindRev");const u=r((e,t)=>e!==null&&e.rev>=t,"covered");async function p(e,t,a){if(u(await s(e),t))return;const n=await f(e);if(n===void 0||t>n){try{await a({fresh:!0})}catch{throw new o(503,"service_unavailable","grant sync failed")}const i=await s(e);if(u(i,t))return;await f(e),c.set(e,Math.max(t,c.get(e)??0)),l({level:"error",event:"daemon.grants.behind_token",fields:{grant:e,token_rev:t,mirror_rev:i?.rev??0}})}throw await s(e)?new o(503,"service_unavailable","the directory answered grant sync below the access token's grant revision"):new o(401,"grant_revoked","grant is not active")}r(p,"ensureCovers");async function y(e,t,a){const n=await h(e);if(!n||n.sub!==t||n.grantee!==a||m(n))throw new o(401,"grant_revoked","grant is not active");return n}r(y,"callerGrantOf");async function x(e,t,a,n,i){return await p(e,t,i),await y(e,a,n)}r(x,"coverGrant");export{y as callerGrantOf,x as coverGrant,p as ensureCovers};

package/dist/core/grants/local.d.ts

@@ -1,4 +1,4 @@
 /** The unjoined runtime's one grant; nodes created before join reference it by id. */
 export declare const LOCAL_TERMINAL_GRANT_ID = "local:terminal";
 /** An unjoined local runtime has exactly one grant, owned by its terminal app. */
-export declare function installLocalTerminalGrant(): void;
+export declare function installLocalTerminalGrant(): Promise<void>;

package/dist/core/grants/local.js

@@ -1 +1 @@
-var l=Object.defineProperty;var r=(e,a)=>l(e,"name",{value:a,configurable:!0});import{replaceGrants as n}from"./mirror.js";const t=["crtr:llm","crtr:act","crtr:schedule","crtr:memory:rw:user","crtr:memory:manage:user","crtr:files:rw:user:."].map(e=>({scope:e,mode:"always"})),s="local:terminal";function p(){const e=new Date().toISOString();n([{id:s,runtime:"runtime:local",sub:"user:local",grantee:"app:terminal",rev:1,scopes:t,resolved_scopes:t,spend_cap:null,expires_at:null,status:"active",revoked_at:null,approved_at:e,payer:"user",dependencies:{},synced_at:e}],e,"local")}r(p,"installLocalTerminalGrant");export{s as LOCAL_TERMINAL_GRANT_ID,p as installLocalTerminalGrant};
+var l=Object.defineProperty;var r=(e,t)=>l(e,"name",{value:t,configurable:!0});import{replaceGrants as n}from"./mirror.js";const a=["crtr:llm","crtr:act","crtr:schedule","crtr:memory:rw:user","crtr:memory:manage:user","crtr:files:rw:user:."].map(e=>({scope:e,mode:"always"})),s="local:terminal";async function p(){const e=new Date().toISOString();await n([{id:s,runtime:"runtime:local",sub:"user:local",grantee:"app:terminal",rev:1,scopes:a,resolved_scopes:a,spend_cap:null,expires_at:null,status:"active",revoked_at:null,approved_at:e,payer:"user",dependencies:{},synced_at:e}],e,"local")}r(p,"installLocalTerminalGrant");export{s as LOCAL_TERMINAL_GRANT_ID,p as installLocalTerminalGrant};

package/dist/core/grants/mirror.d.ts

@@ -1,5 +1,5 @@
-import type { DatabaseSync } from 'node:sqlite';
 import { type Scope } from '@north-light/identity';
+import { type CanvasDb } from '../canvas/db.js';
 import type { ProviderDependency } from '../../api/dto/grants.js';
 import type { ModelStrength } from '../../types.js';
 export interface GrantScope {
@@ -53,9 +53,9 @@ export declare function inferenceEndpointOf(value: unknown): InferenceEndpoint |
  *  cascade, provider install, or run notice. */
 export declare function mirrorOnly(grant: Pick<GrantRecord, 'grantee'>): boolean;
 /** Every mirrored grant this machine acts on: `allGrants()` without the mirror-only ones. */
-export declare function localGrants(): GrantRecord[];
+export declare function localGrants(): Promise<GrantRecord[]>;
 /** Every mirrored grant, whatever its status. */
-export declare function allGrants(): GrantRecord[];
+export declare function allGrants(): Promise<GrantRecord[]>;
 /** Whether a grant's `expires_at` has passed. An unparsable time reads as expired (fail closed). */
 export declare function grantExpired(grant: Pick<GrantRecord, 'expires_at'>): boolean;
 /** The active form of a grant record read earlier, or null when it is not active, is past `expires_at`, or is unparsable. */
@@ -65,7 +65,7 @@ export declare function activeRecord(grant: GrantRecord): ActiveGrant | null;
  *  `payer`, `inference_endpoint`, `dependencies`. `synced_at` and the token's claims are left out, so a
  *  periodic sync with the same content (or a daemon restart) keeps it. */
 export declare function grantVersion(grant: Pick<GrantRecord, 'rev' | 'resolved_scopes' | 'spend_cap' | 'payer' | 'dependencies' | 'inference_endpoint'>): string;
-export declare function hasGrant(grantId: string): boolean;
+export declare function hasGrant(grantId: string): Promise<boolean>;
 /** The grant state the freshness ordering reads (contract 1 "Grant sync"):
  *  the mirrored grant's revision and status, whatever its status. */
 export interface GrantSyncState {
@@ -73,35 +73,35 @@ export interface GrantSyncState {
     status: GrantRecord['status'];
 }
 /** The mirrored state of grant `grantId`, or null when the mirror lacks it. */
-export declare function grantSyncState(grantId: string): GrantSyncState | null;
+export declare function grantSyncState(grantId: string): Promise<GrantSyncState | null>;
 /** The mirrored state of the grant `sub` gave `grantee`, whatever its status, or null when the mirror lacks it. */
-export declare function grantSyncStateFor(grantee: string, sub: string): GrantSyncState | null;
+export declare function grantSyncStateFor(grantee: string, sub: string): Promise<GrantSyncState | null>;
 /** The mirrored grant `grantId`, whatever its status, or null when the mirror lacks it or the row is unparsable. */
-export declare function grantRecord(grantId: string): GrantRecord | null;
+export declare function grantRecord(grantId: string): Promise<GrantRecord | null>;
 /** Who a grant's model calls are charged to: `app` only for a mirrored grant the directory marked app-paid, else the person. */
-export declare function payerOfGrant(grantId: string | null | undefined): 'user' | 'app';
-export declare function activeGrant(grantId: string): ActiveGrant | null;
-export declare function grantFor(grantee: string, sub: string): ActiveGrant | null;
+export declare function payerOfGrant(grantId: string | null | undefined): Promise<'user' | 'app'>;
+export declare function activeGrant(grantId: string): Promise<ActiveGrant | null>;
+export declare function grantFor(grantee: string, sub: string): Promise<ActiveGrant | null>;
 /** The app's own active grant on this machine. Null for a mirror-only grant: an
  *  unsandboxed machine runs no app, so a fanned-out hosted grant is never "the
  *  app's grant" for a local app caller, sandbox or install. */
-export declare function activeGrantForApp(grantee: string): ActiveGrant | null;
+export declare function activeGrantForApp(grantee: string): Promise<ActiveGrant | null>;
 /** Where a run's notice goes: its grant's registered `run_notice_url`, with the grant's `sub` and `grantee`. Null when the run has no active grant or the grantee registered no URL. */
-export declare function runNoticeTarget(grantId: string): {
+export declare function runNoticeTarget(grantId: string): Promise<{
     url: string;
     sub: string;
     grantee: string;
-} | null;
-export declare function terminalGrant(): ActiveGrant | null;
+} | null>;
+export declare function terminalGrant(): Promise<ActiveGrant | null>;
 /** Where the grant mirror came from: `'local'` for an unjoined runtime's own grant, the directory issuer once joined, null before any install. */
-export declare function grantsSource(): string | null;
-export declare function hasSyncedGrants(source: string): boolean;
+export declare function grantsSource(): Promise<string | null>;
+export declare function hasSyncedGrants(source: string): Promise<boolean>;
 /** OWN-11 for a joined runtime: the unjoined runtime's local mirror grants
  *  `user:local` full local scopes and is not the directory's. Delete it so no
  *  grant exists until grant sync installs the directory's mirror. */
-export declare function dropLocalGrantMirror(db: DatabaseSync): number;
+export declare function dropLocalGrantMirror(db: CanvasDb): Promise<number>;
 /** The directory response is complete; commit it or keep the prior snapshot intact. */
-export declare function replaceGrants(grants: readonly GrantRecord[], syncedAt: string, source: string): void;
+export declare function replaceGrants(grants: readonly GrantRecord[], syncedAt: string, source: string): Promise<void>;
 /** Bumped by every `replaceGrants`. A launch compiled against one generation
  *  and started under another may hold mounts the new mirror no longer grants. */
-export declare function grantsGeneration(): number;
+export declare function grantsGeneration(): Promise<number>;

package/dist/core/grants/mirror.js

@@ -1,4 +1,4 @@
-var y=Object.defineProperty;var t=(e,r)=>y(e,"name",{value:r,configurable:!0});import{createHash as g}from"node:crypto";import{prepared as o}from"../sqlite-statements.js";import{parseScope as S}from"@north-light/identity";import{openDb as u,withCanvasWrite as T}from"../canvas/db.js";import{isUnsandboxedMachine as m}from"../runtime/unsandboxed.js";const v=["not_started","pending","ready","failed","unavailable"],O=["ultra","strong","medium","light"];function p(e){if(!Array.isArray(e))throw new TypeError("grant scopes must be a list");return e.map(r=>{if(!r||typeof r!="object"||typeof r.scope!="string"||!["always","ask"].includes(r.mode))throw new TypeError("invalid grant scope entry");return{scope:r.scope,mode:r.mode}})}t(p,"entries");function x(e){if(!e||typeof e!="object"||Array.isArray(e))return null;const{state:r,message:s,next:i,step:n}=e;return typeof r!="string"||!v.includes(r)||s!==void 0&&typeof s!="string"||n!==void 0&&typeof n!="string"||typeof i!="string"||!i?null:{state:r,...s===void 0?{}:{message:s},next:i,...n===void 0?{}:{step:n}}}t(x,"dependencyOf");function _(e){if(!e||typeof e!="object"||Array.isArray(e))return{};const r={};for(const[s,i]of Object.entries(e)){const n=x(i);n&&(r[s]=n)}return r}t(_,"dependenciesOf");function R(e){if(!e||typeof e!="object"||Array.isArray(e))return null;const{base_url:r,rungs:s}=e;if(typeof r!="string"||!r||!s||typeof s!="object"||Array.isArray(s))return null;const i={};for(const n of O){const c=s[n];typeof c=="string"&&c&&(i[n]=c)}return Object.keys(i).length?{base_url:r.replace(/\/+$/,""),rungs:i}:null}t(R,"inferenceEndpointOf");function f(e){return{id:e.id,runtime:e.runtime,sub:e.sub,grantee:e.grantee,rev:e.rev,scopes:p(JSON.parse(e.scopes_json)),resolved_scopes:p(JSON.parse(e.resolved_scopes_json)),spend_cap:e.spend_cap,expires_at:e.expires_at,status:e.status,revoked_at:e.revoked_at,approved_at:e.approved_at,payer:e.payer,dependencies:_(JSON.parse(e.dependencies_json)),run_notice_url:e.run_notice_url??null,inference_endpoint:e.inference_endpoint_json?R(JSON.parse(e.inference_endpoint_json)):null,synced_at:e.synced_at}}t(f,"record");function l(e){if(!e||e.status!=="active")return null;try{return h(f(e))}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return null;throw r}}t(l,"active");function d(e){return e.grantee!=="app:terminal"&&m()}t(d,"mirrorOnly");function H(){return N().filter(e=>!d(e))}t(H,"localGrants");function N(){return o(u(),"SELECT * FROM grants").all().flatMap(e=>{try{return[f(e)]}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return[];throw r}})}t(N,"allGrants");function A(e){return e.expires_at!==null&&!(Date.parse(e.expires_at)>Date.now())}t(A,"grantExpired");function h(e){if(e.status!=="active"||A(e))return null;try{const r=e.resolved_scopes.map(({scope:s})=>S(s));return{...e,resolved:e.resolved_scopes.flatMap(({mode:s},i)=>s==="always"?[r[i]]:[])}}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return null;throw r}}t(h,"activeRecord");function E(e){return Array.isArray(e)?`[${e.map(E).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().filter(r=>e[r]!==void 0).map(r=>`${JSON.stringify(r)}:${E(e[r])}`).join(",")}}`:JSON.stringify(e)??"null"}t(E,"canonicalJson");function D(e){const r={rev:e.rev,resolved_scopes:e.resolved_scopes,spend_cap:e.spend_cap,payer:e.payer,dependencies:e.dependencies??{},...e.inference_endpoint?{inference_endpoint:e.inference_endpoint}:{}};return g("sha256").update(E(r)).digest("base64url").slice(0,22)}t(D,"grantVersion");function W(e){return!!o(u(),"SELECT 1 FROM grants WHERE id = ?").get(e)}t(W,"hasGrant");function G(e){return o(u(),"SELECT rev, status FROM grants WHERE id = ?").get(e)??null}t(G,"grantSyncState");function J(e,r){return o(u(),"SELECT rev, status FROM grants WHERE grantee = ? AND sub = ?").get(e,r)??null}t(J,"grantSyncStateFor");function b(e){const r=o(u(),"SELECT * FROM grants WHERE id = ?").get(e);if(!r)return null;try{return f(r)}catch(s){if(s instanceof TypeError||s instanceof SyntaxError)return null;throw s}}t(b,"grantRecord");function I(e){return(e?b(e)?.payer:null)??"user"}t(I,"payerOfGrant");function U(e){return l(o(u(),"SELECT * FROM grants WHERE id = ?").get(e))}t(U,"activeGrant");function $(e,r){return l(o(u(),"SELECT * FROM grants WHERE grantee = ? AND sub = ?").get(e,r))}t($,"grantFor");function w(e){if(d({grantee:e}))return null;const r=o(u(),"SELECT * FROM grants WHERE grantee = ? AND status = 'active'").all(e);if(r.length>1)throw new Error(`multiple active grants for ${e}`);return l(r[0])}t(w,"activeGrantForApp");function V(e){const r=o(u(),"SELECT run_notice_url AS url, sub, grantee FROM grants WHERE id = ? AND status = 'active'").get(e);return r&&r.url&&!d(r)?{url:r.url,sub:r.sub,grantee:r.grantee}:null}t(V,"runNoticeTarget");function P(){const e=o(u(),"SELECT * FROM grants WHERE grantee = 'app:terminal' AND status = 'active'").all();if(e.length>1)throw new Error("multiple active terminal grants");return l(e[0])}t(P,"terminalGrant");function X(){return o(u(),"SELECT value FROM runtime_state WHERE key = 'grants_source'").get()?.value??null}t(X,"grantsSource");function q(e){return o(u(),"SELECT value FROM runtime_state WHERE key = 'grants_source'").get()?.value===e}t(q,"hasSyncedGrants");function z(e){return o(e,"SELECT value FROM runtime_state WHERE key = 'grants_source'").get()?.value!=="local"?0:(o(e,"DELETE FROM runtime_state WHERE key = 'grants_source'").run(),Number(o(e,"DELETE FROM grants").run().changes))}t(z,"dropLocalGrantMirror");function B(e,r,s){const i=new Set;for(const n of e){if(i.has(n.id)||!n.id||!n.runtime||!n.sub||!n.grantee||!Number.isInteger(n.rev)||!["active","revoked","removed"].includes(n.status))throw new TypeError("invalid grant sync response");i.add(n.id),p(n.scopes),p(n.resolved_scopes)}T(n=>{n.exec("DELETE FROM grants");const c=o(n,`INSERT INTO grants
+var y=Object.defineProperty;var t=(e,r)=>y(e,"name",{value:r,configurable:!0});import{createHash as _}from"node:crypto";import{parseScope as g}from"@north-light/identity";import{openDb as o,withCanvasWrite as S}from"../canvas/db.js";import{isUnsandboxedMachine as T}from"../runtime/unsandboxed.js";const v=["not_started","pending","ready","failed","unavailable"],O=["ultra","strong","medium","light"];function p(e){if(!Array.isArray(e))throw new TypeError("grant scopes must be a list");return e.map(r=>{if(!r||typeof r!="object"||typeof r.scope!="string"||!["always","ask"].includes(r.mode))throw new TypeError("invalid grant scope entry");return{scope:r.scope,mode:r.mode}})}t(p,"entries");function m(e){if(!e||typeof e!="object"||Array.isArray(e))return null;const{state:r,message:a,next:i,step:n}=e;return typeof r!="string"||!v.includes(r)||a!==void 0&&typeof a!="string"||n!==void 0&&typeof n!="string"||typeof i!="string"||!i?null:{state:r,...a===void 0?{}:{message:a},next:i,...n===void 0?{}:{step:n}}}t(m,"dependencyOf");function E(e){if(!e||typeof e!="object"||Array.isArray(e))return{};const r={};for(const[a,i]of Object.entries(e)){const n=m(i);n&&(r[a]=n)}return r}t(E,"dependenciesOf");function w(e){if(!e||typeof e!="object"||Array.isArray(e))return null;const{base_url:r,rungs:a}=e;if(typeof r!="string"||!r||!a||typeof a!="object"||Array.isArray(a))return null;const i={};for(const n of O){const c=a[n];typeof c=="string"&&c&&(i[n]=c)}return Object.keys(i).length?{base_url:r.replace(/\/+$/,""),rungs:i}:null}t(w,"inferenceEndpointOf");function l(e){return{id:e.id,runtime:e.runtime,sub:e.sub,grantee:e.grantee,rev:e.rev,scopes:p(JSON.parse(e.scopes_json)),resolved_scopes:p(JSON.parse(e.resolved_scopes_json)),spend_cap:e.spend_cap,expires_at:e.expires_at,status:e.status,revoked_at:e.revoked_at,approved_at:e.approved_at,payer:e.payer,dependencies:E(JSON.parse(e.dependencies_json)),run_notice_url:e.run_notice_url??null,inference_endpoint:e.inference_endpoint_json?w(JSON.parse(e.inference_endpoint_json)):null,synced_at:e.synced_at}}t(l,"record");function u(e){if(!e||e.status!=="active")return null;try{return N(l(e))}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return null;throw r}}t(u,"active");function f(e){return e.grantee!=="app:terminal"&&T()}t(f,"mirrorOnly");async function M(){return(await x()).filter(e=>!f(e))}t(M,"localGrants");async function x(){return(await(await o()).prepare("SELECT * FROM grants").all()).flatMap(e=>{try{return[l(e)]}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return[];throw r}})}t(x,"allGrants");function R(e){return e.expires_at!==null&&!(Date.parse(e.expires_at)>Date.now())}t(R,"grantExpired");function N(e){if(e.status!=="active"||R(e))return null;try{const r=e.resolved_scopes.map(({scope:a})=>g(a));return{...e,resolved:e.resolved_scopes.flatMap(({mode:a},i)=>a==="always"?[r[i]]:[])}}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return null;throw r}}t(N,"activeRecord");function d(e){return Array.isArray(e)?`[${e.map(d).join(",")}]`:e&&typeof e=="object"?`{${Object.keys(e).sort().filter(r=>e[r]!==void 0).map(r=>`${JSON.stringify(r)}:${d(e[r])}`).join(",")}}`:JSON.stringify(e)??"null"}t(d,"canonicalJson");function j(e){const r={rev:e.rev,resolved_scopes:e.resolved_scopes,spend_cap:e.spend_cap,payer:e.payer,dependencies:e.dependencies??{},...e.inference_endpoint?{inference_endpoint:e.inference_endpoint}:{}};return _("sha256").update(d(r)).digest("base64url").slice(0,22)}t(j,"grantVersion");async function k(e){return!!await(await o()).prepare("SELECT 1 FROM grants WHERE id = ?").get(e)}t(k,"hasGrant");async function H(e){return await(await o()).prepare("SELECT rev, status FROM grants WHERE id = ?").get(e)??null}t(H,"grantSyncState");async function D(e,r){return await(await o()).prepare("SELECT rev, status FROM grants WHERE grantee = ? AND sub = ?").get(e,r)??null}t(D,"grantSyncStateFor");async function A(e){const r=await(await o()).prepare("SELECT * FROM grants WHERE id = ?").get(e);if(!r)return null;try{return l(r)}catch(a){if(a instanceof TypeError||a instanceof SyntaxError)return null;throw a}}t(A,"grantRecord");async function W(e){return(e?(await A(e))?.payer:null)??"user"}t(W,"payerOfGrant");async function G(e){return u(await(await o()).prepare("SELECT * FROM grants WHERE id = ?").get(e))}t(G,"activeGrant");async function J(e,r){return u(await(await o()).prepare("SELECT * FROM grants WHERE grantee = ? AND sub = ?").get(e,r))}t(J,"grantFor");async function I(e){if(f({grantee:e}))return null;const r=await(await o()).prepare("SELECT * FROM grants WHERE grantee = ? AND status = 'active'").all(e);if(r.length>1)throw new Error(`multiple active grants for ${e}`);return u(r[0])}t(I,"activeGrantForApp");async function U(e){const r=await(await o()).prepare("SELECT run_notice_url AS url, sub, grantee FROM grants WHERE id = ? AND status = 'active'").get(e);return r&&r.url&&!f(r)?{url:r.url,sub:r.sub,grantee:r.grantee}:null}t(U,"runNoticeTarget");async function $(){const e=await(await o()).prepare("SELECT * FROM grants WHERE grantee = 'app:terminal' AND status = 'active'").all();if(e.length>1)throw new Error("multiple active terminal grants");return u(e[0])}t($,"terminalGrant");async function V(){return(await(await o()).prepare("SELECT value FROM runtime_state WHERE key = 'grants_source'").get())?.value??null}t(V,"grantsSource");async function P(e){return(await(await o()).prepare("SELECT value FROM runtime_state WHERE key = 'grants_source'").get())?.value===e}t(P,"hasSyncedGrants");async function X(e){return(await e.prepare("SELECT value FROM runtime_state WHERE key = 'grants_source'").get())?.value!=="local"?0:(await e.prepare("DELETE FROM runtime_state WHERE key = 'grants_source'").run(),Number((await e.prepare("DELETE FROM grants").run()).changes))}t(X,"dropLocalGrantMirror");async function q(e,r,a){const i=new Set;for(const n of e){if(i.has(n.id)||!n.id||!n.runtime||!n.sub||!n.grantee||!Number.isInteger(n.rev)||!["active","revoked","removed"].includes(n.status))throw new TypeError("invalid grant sync response");i.add(n.id),p(n.scopes),p(n.resolved_scopes)}await S(async n=>{await n.exec("DELETE FROM grants");const c=n.prepare(`INSERT INTO grants
       (id, runtime, sub, grantee, rev, scopes_json, resolved_scopes_json, spend_cap, expires_at,
        status, revoked_at, approved_at, payer, dependencies_json, run_notice_url, inference_endpoint_json, synced_at)
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);for(const a of e)c.run(a.id,a.runtime,a.sub,a.grantee,a.rev,JSON.stringify(a.scopes),JSON.stringify(a.resolved_scopes),a.spend_cap,a.expires_at,a.status,a.revoked_at,a.approved_at,a.payer,JSON.stringify(_(a.dependencies)),a.run_notice_url??null,a.inference_endpoint?JSON.stringify(a.inference_endpoint):null,a.synced_at);o(n,"INSERT INTO runtime_state (key, value) VALUES ('grants_source', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(s),o(n,"INSERT INTO runtime_state (key, value) VALUES ('grants_generation', '1') ON CONFLICT(key) DO UPDATE SET value = CAST(CAST(value AS INTEGER) + 1 AS TEXT)").run()})}t(B,"replaceGrants");function K(){const e=o(u(),"SELECT value FROM runtime_state WHERE key = 'grants_generation'").get();return e?Number(e.value):0}t(K,"grantsGeneration");export{U as activeGrant,w as activeGrantForApp,h as activeRecord,N as allGrants,_ as dependenciesOf,z as dropLocalGrantMirror,A as grantExpired,$ as grantFor,b as grantRecord,G as grantSyncState,J as grantSyncStateFor,D as grantVersion,K as grantsGeneration,X as grantsSource,W as hasGrant,q as hasSyncedGrants,R as inferenceEndpointOf,H as localGrants,d as mirrorOnly,I as payerOfGrant,B as replaceGrants,V as runNoticeTarget,P as terminalGrant};
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);for(const s of e)await c.run(s.id,s.runtime,s.sub,s.grantee,s.rev,JSON.stringify(s.scopes),JSON.stringify(s.resolved_scopes),s.spend_cap,s.expires_at,s.status,s.revoked_at,s.approved_at,s.payer,JSON.stringify(E(s.dependencies)),s.run_notice_url??null,s.inference_endpoint?JSON.stringify(s.inference_endpoint):null,s.synced_at);await n.prepare("INSERT INTO runtime_state (key, value) VALUES ('grants_source', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(a),await n.prepare("INSERT INTO runtime_state (key, value) VALUES ('grants_generation', '1') ON CONFLICT(key) DO UPDATE SET value = CAST(CAST(value AS INTEGER) + 1 AS TEXT)").run()})}t(q,"replaceGrants");async function z(){const e=await(await o()).prepare("SELECT value FROM runtime_state WHERE key = 'grants_generation'").get();return e?Number(e.value):0}t(z,"grantsGeneration");export{G as activeGrant,I as activeGrantForApp,N as activeRecord,x as allGrants,E as dependenciesOf,X as dropLocalGrantMirror,R as grantExpired,J as grantFor,A as grantRecord,H as grantSyncState,D as grantSyncStateFor,j as grantVersion,z as grantsGeneration,V as grantsSource,k as hasGrant,P as hasSyncedGrants,w as inferenceEndpointOf,M as localGrants,f as mirrorOnly,W as payerOfGrant,q as replaceGrants,U as runNoticeTarget,$ as terminalGrant};

package/dist/core/grants/on-sync.d.ts

@@ -7,7 +7,7 @@ export type Detach = (work: Promise<void>) => void;
 export declare function exceeds(sandbox: Pick<SandboxRecord, 'uid' | 'nodeId' | 'mounts'>, owners?: ReadonlyMap<number, {
     app: string;
     status: string;
-}>): string | null;
+}>): Promise<string | null>;
 /** R26 from current state (runtime spec §15 "Ending revoked file access"):
  *  compare every live launcher sandbox's launched mounts with what the current
  *  mirror grants, and stop each one that holds more. Runs after every sync and

package/dist/core/grants/on-sync.js

@@ -1 +1 @@
-var w=Object.defineProperty;var c=(n,r)=>w(n,"name",{value:r,configurable:!0});import{prepared as v}from"../sqlite-statements.js";import{relative as b,sep as g}from"node:path";import{activeBackgroundBashJobs as x,readJobPgid as y}from"../bash-jobs.js";import{appSpace as S}from"../layout.js";import{getNode as l,recordSettledTurn as k}from"../canvas/index.js";import{transition as E}from"../runtime/lifecycle.js";import{openDb as _}from"../canvas/db.js";import{contextDir as R}from"../canvas/node-agent-paths.js";import{emitEvent as p}from"../events/emit.js";import{closeGrantStreams as C}from"../runs/events.js";import{grantedMounts as G,isGrantedSource as I,mountAllowed as P}from"../spaces/mounts.js";import{permissionsForRun as m}from"../spaces/permissions.js";import{stopNodeSandboxes as O}from"../spaces/stop.js";import{discardChangedGrantTokens as T}from"../providers/token-cache.js";import{activeGrantForApp as F,allGrants as M,mirrorOnly as A}from"./mirror.js";import{runRemovalCascades as D}from"./remove.js";import{notifyGrantChanges as N}from"./watch.js";import{launcherPresent as W,listSandboxes as j,stopSandboxPid as B}from"./sandboxes.js";import{checkCronFire as J}from"../../daemon/cron/authority.js";import{cronExecutionFor as L}from"../../daemon/cron/live-runs.js";import{cronExecutionsReady as U}from"../../daemon/cron/run-socket.js";function h(){return new Map(v(_(),"SELECT uid, app, status FROM app_users").all().map(n=>[n.uid,{app:n.app,status:n.status}]))}c(h,"appUserOwners");function $(n,r=h()){const o=r.get(n.uid),i=n.nodeId.startsWith("cron-"),e=i?L(n.nodeId.slice(5)):void 0;if(i&&(e===void 0||!o))return"permission_revoked";if(e!==void 0&&o.status==="active"){const s=J({grantee:e.grantee,sub:e.sub,grant_id:e.grantId,scopes:e.scopes});if(!s.allowed)return e.refusal??={reason:s.reason,message:s.message},"permission_revoked"}if(!o||o.app==="app:terminal")return null;if(o.status!=="active")return"app_removed";const t=l(n.nodeId);try{let s;if(e!==void 0)s=m(e.grantee,e.sub,e.grantId,e.scopes);else if(t&&t.grantee===o.app)s=m(o.app,t.sub??"user:local",t.grant_id??null,t.scopes??null);else{const d=F(o.app);if(!d)return"permission_revoked";s=m(o.app,d.sub,d.id,null)}const u=G(s),f=S(o.app).root;return n.mounts.every(d=>{const a=b(f,d.source);return a===""||a!==".."&&!a.startsWith(`..${g}`)&&!a.startsWith(g)||!I(o.app,d.source)||P(d,u)})?null:"permission_revoked"}catch{return"permission_revoked"}}c($,"exceeds");async function H(n){const r=l(n);if(!r)return;(r.status==="active"||r.status==="idle")&&E(n,"release");const o=new Date().toISOString();k(n,o),r.run_id&&r.run_id!==n&&v(_(),"UPDATE nodes SET last_settled_at = COALESCE(last_settled_at, ?) WHERE node_id = ?").run(o,r.run_id)}c(H,"afterRevocationStop");function q(n){const r=new Set,o=l(n);o?.pi_pid!=null&&r.add(o.pi_pid);try{const i=R(n,o?.grantee);for(const e of x(i,!0)){const t=y(i,e.jobId);t!==void 0&&r.add(t)}}catch{}return r}c(q,"nodePids");async function z(){if(!W())return{completion:Promise.resolve()};await U();const n=await j(),r=h(),o=n.flatMap(t=>{const s=$(t,r);return s?[{sandbox:t,reason:s}]:[]}),i=[],e=new Map;for(const t of o){p({level:"info",event:"daemon.grants.sandbox_stop",fields:{sandbox_node:t.sandbox.nodeId,pid:t.sandbox.pid,grantee:r.get(t.sandbox.uid).app,reason:t.reason}});const s=e.get(t.sandbox.nodeId)??[];s.push(t),e.set(t.sandbox.nodeId,s)}for(const[t,s]of e){const u=l(t),f=u?q(t):new Set,d=u!==null&&s.some(({sandbox:a})=>f.has(a.pid));i.push((async()=>{if(d){const a=await O(t,"permission_revoked",{holdRecovery:!0,after:c(()=>H(t),"after")});if(!a.confirmed)throw a.error??new Error(`stop of ${t} was not confirmed`)}for(const{sandbox:a}of s)(!d||!f.has(a.pid))&&await B(a.pid)})().catch(a=>{p({level:"error",event:"daemon.grants.sandbox_stop_failed",...u?{node_id:t}:{fields:{sandbox_node:t}},error:a})}))}return{completion:Promise.all(i).then(()=>{})}}c(z,"sweepSandboxes");function K(n,r){try{const{pairs:o,providers:i,tokens:e}=T(n,r);(o||i)&&p({level:"info",event:"daemon.grants.outbound_tokens_discarded",fields:{grants:o,providers:i,tokens:e}})}catch(o){p({level:"error",event:"daemon.grants.outbound_tokens_discard_failed",error:o})}}c(K,"discardOutboundTokens");async function he(n,r=o=>{}){const o=M();try{N(n,o)}catch(e){p({level:"error",event:"daemon.grants.notify_failed",error:e})}K(n,o);for(const e of n){if(e.status!=="active"||o.find(u=>u.id===e.id)?.status==="active")continue;const s=C(e.id);s&&p({level:"info",event:"daemon.grants.streams_closed",fields:{grant:e.id,grantee:e.grantee,streams:s}})}try{const{completion:e}=await z();r(e)}catch(e){p({level:"error",event:"daemon.grants.sweep_failed",error:e})}const i=new Set(o.filter(e=>!A(e)&&e.status==="removed"&&n.find(t=>t.id===e.id)?.status!=="removed").map(e=>e.grantee));r(D(i).catch(()=>{})),r(import("../providers/bundles.js").then(({syncProviderBundles:e})=>e()).catch(e=>{p({level:"error",event:"daemon.providers.bundle_sync_failed",error:e})}))}c(he,"onGrantSync");export{$ as exceeds,he as onGrantSync,z as sweepSandboxes};
+var _=Object.defineProperty;var c=(n,r)=>_(n,"name",{value:r,configurable:!0});import{relative as y,sep as w}from"node:path";import{activeBackgroundBashJobs as h,readJobPgid as b}from"../bash-jobs.js";import{appSpace as x}from"../layout.js";import{getNode as l,recordSettledTurn as S}from"../canvas/index.js";import{transition as k}from"../runtime/lifecycle.js";import{openDb as v}from"../canvas/db.js";import{contextDir as E}from"../canvas/node-agent-paths.js";import{emitEvent as p}from"../events/emit.js";import{closeGrantStreams as R}from"../runs/events.js";import{grantedMounts as C,isGrantedSource as G,mountAllowed as I}from"../spaces/mounts.js";import{permissionsForRun as m}from"../spaces/permissions.js";import{stopNodeSandboxes as P}from"../spaces/stop.js";import{discardChangedGrantTokens as O}from"../providers/token-cache.js";import{activeGrantForApp as T,allGrants as A,mirrorOnly as F}from"./mirror.js";import{runRemovalCascades as M}from"./remove.js";import{notifyGrantChanges as D}from"./watch.js";import{launcherPresent as N,listSandboxes as W,stopSandboxPid as j}from"./sandboxes.js";import{checkCronFire as B}from"../../daemon/cron/authority.js";import{cronExecutionFor as J}from"../../daemon/cron/live-runs.js";import{cronExecutionsReady as L}from"../../daemon/cron/run-socket.js";import{flatMapAsync as U}from"../async-array.js";async function g(){return new Map((await(await v()).prepare("SELECT uid, app, status FROM app_users").all()).map(n=>[n.uid,{app:n.app,status:n.status}]))}c(g,"appUserOwners");async function $(n,r){r??=await g();const t=r.get(n.uid),i=n.nodeId.startsWith("cron-"),e=i?J(n.nodeId.slice(5)):void 0;if(i&&(e===void 0||!t))return"permission_revoked";if(e!==void 0&&t.status==="active"){const a=await B({grantee:e.grantee,sub:e.sub,grant_id:e.grantId,scopes:e.scopes});if(!a.allowed)return e.refusal??={reason:a.reason,message:a.message},"permission_revoked"}if(!t||t.app==="app:terminal")return null;if(t.status!=="active")return"app_removed";const o=await l(n.nodeId);try{let a;if(e!==void 0)a=await m(e.grantee,e.sub,e.grantId,e.scopes);else if(o&&o.grantee===t.app)a=await m(t.app,o.sub??"user:local",o.grant_id??null,o.scopes??null);else{const d=await T(t.app);if(!d)return"permission_revoked";a=await m(t.app,d.sub,d.id,null)}const u=C(a),f=x(t.app).root;return n.mounts.every(d=>{const s=y(f,d.source);return s===""||s!==".."&&!s.startsWith(`..${w}`)&&!s.startsWith(w)||!G(t.app,d.source)||I(d,u)})?null:"permission_revoked"}catch{return"permission_revoked"}}c($,"exceeds");async function H(n){const r=await l(n);if(!r)return;(r.status==="active"||r.status==="idle")&&await k(n,"release");const t=new Date().toISOString();await S(n,t),r.run_id&&r.run_id!==n&&await(await v()).prepare("UPDATE nodes SET last_settled_at = COALESCE(last_settled_at, ?) WHERE node_id = ?").run(t,r.run_id)}c(H,"afterRevocationStop");async function q(n){const r=new Set,t=await l(n);t?.pi_pid!=null&&r.add(t.pi_pid);try{const i=await E(n,t?.grantee);for(const e of h(i,!0)){const o=b(i,e.jobId);o!==void 0&&r.add(o)}}catch{}return r}c(q,"nodePids");async function z(){if(!N())return{completion:Promise.resolve()};await L();const n=await W(),r=await g(),t=await U(n,async o=>{const a=await $(o,r);return a?[{sandbox:o,reason:a}]:[]}),i=[],e=new Map;for(const o of t){p({level:"info",event:"daemon.grants.sandbox_stop",fields:{sandbox_node:o.sandbox.nodeId,pid:o.sandbox.pid,grantee:r.get(o.sandbox.uid).app,reason:o.reason}});const a=e.get(o.sandbox.nodeId)??[];a.push(o),e.set(o.sandbox.nodeId,a)}for(const[o,a]of e){const u=await l(o),f=u?await q(o):new Set,d=u!==null&&a.some(({sandbox:s})=>f.has(s.pid));i.push((async()=>{if(d){const s=await P(o,"permission_revoked",{holdRecovery:!0,after:c(()=>H(o),"after")});if(!s.confirmed)throw s.error??new Error(`stop of ${o} was not confirmed`)}for(const{sandbox:s}of a)(!d||!f.has(s.pid))&&await j(s.pid)})().catch(s=>{p({level:"error",event:"daemon.grants.sandbox_stop_failed",...u?{node_id:o}:{fields:{sandbox_node:o}},error:s})}))}return{completion:Promise.all(i).then(()=>{})}}c(z,"sweepSandboxes");function K(n,r){try{const{pairs:t,providers:i,tokens:e}=O(n,r);(t||i)&&p({level:"info",event:"daemon.grants.outbound_tokens_discarded",fields:{grants:t,providers:i,tokens:e}})}catch(t){p({level:"error",event:"daemon.grants.outbound_tokens_discard_failed",error:t})}}c(K,"discardOutboundTokens");async function _e(n,r=t=>{}){const t=await A();try{D(n,t)}catch(e){p({level:"error",event:"daemon.grants.notify_failed",error:e})}K(n,t);for(const e of n){if(e.status!=="active"||t.find(u=>u.id===e.id)?.status==="active")continue;const a=R(e.id);a&&p({level:"info",event:"daemon.grants.streams_closed",fields:{grant:e.id,grantee:e.grantee,streams:a}})}try{const{completion:e}=await z();r(e)}catch(e){p({level:"error",event:"daemon.grants.sweep_failed",error:e})}const i=new Set(t.filter(e=>!F(e)&&e.status==="removed"&&n.find(o=>o.id===e.id)?.status!=="removed").map(e=>e.grantee));r(M(i).catch(()=>{})),r(import("../providers/bundles.js").then(({syncProviderBundles:e})=>e()).catch(e=>{p({level:"error",event:"daemon.providers.bundle_sync_failed",error:e})}))}c(_e,"onGrantSync");export{$ as exceeds,_e as onGrantSync,z as sweepSandboxes};

package/dist/core/grants/remove.js

@@ -1 +1 @@
-var S=Object.defineProperty;var m=(r,i)=>S(r,"name",{value:i,configurable:!0});import{prepared as d}from"../sqlite-statements.js";import{rmSync as h}from"node:fs";import{join as w}from"node:path";import{deleteNodes as O}from"../canvas/canvas.js";import{openDb as c,withCanvasWrite as E}from"../canvas/db.js";import{cancelCron as T}from"../canvas/crons.js";import{emitEvent as l}from"../events/emit.js";import{appSpace as C,appsRoot as u,secretsDir as D}from"../layout.js";import{notifyRunDeleted as L}from"../runs/events.js";import{cancelOpenQuestions as W}from"../runs/questions.js";import{removeTreeBeneath as F}from"../spaces/open-beneath.js";import{markGranteeUploadsDeletePending as H,releaseRunUploads as N,turnSharesOffFor as M}from"../storage/tables.js";import{stopNodeSandboxes as b}from"../spaces/stop.js";import{activeAppUser as p,markAppUserRemoved as I}from"../spaces/users.js";import{launcherRequest as y}from"../../launcher/client.js";import{LaunchRefused as A}from"../../launcher/spec.js";import{localGrants as P}from"./mirror.js";import{launcherPresent as g,listSandboxes as U,stopSandboxPid as $}from"./sandboxes.js";let v=Promise.resolve();function ae(r=new Set){const i=v.then(async()=>{const t=P(),o=new Set(t.filter(n=>n.status==="removed").map(n=>n.grantee));for(const n of o)if(!t.some(a=>a.grantee===n&&a.status==="active")&&!(p(n)===null&&!r.has(n)))try{await x(n)}catch(a){l({level:"error",event:"daemon.grants.removal_failed",error:a,fields:{grantee:n}})}});return v=i.catch(()=>{}),i}m(ae,"runRemovalCascades");async function x(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const i=C(r),t=p(r);l({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:t?.uid??null}}),await W({grantee:r},"the app was removed");const o=E(e=>(d(e,"UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE node_id IN (SELECT node_id FROM node_rows WHERE grantee = ?)").run(new Date().toISOString(),r),d(e,"SELECT node_id FROM node_rows WHERE grantee = ? ORDER BY created DESC").all(r).map(s=>s.node_id)));for(const{cron_id:e}of d(c(),"SELECT cron_id FROM crons WHERE grantee = ?").all(r))T(e);const a=(await Promise.all(o.map(e=>b(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(a.length)throw new Error(`sandbox teardown could not be confirmed for ${a.length} node(s) of ${r}`);if(t&&g())for(const e of await U())e.uid===t.uid&&await $(e.pid);const R=o.filter(e=>d(c(),"SELECT run_id FROM nodes WHERE node_id = ?").get(e)?.run_id===e);E(e=>{if(M(r,e),N(o,e),H(r,e),!o.length)return;const s=o.map(()=>"?").join(","),_=e.prepare(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_id IN (${s})`).all(...o,...o);e.prepare(`DELETE FROM deliveries WHERE destination_id IN (${s})`).run(...o);for(const{message_id:f}of _)d(e,"DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(f,f)}),O(o);for(const e of R)L(e);if(h(w(D(),"env",i.root.slice(u().length+1)),{recursive:!0,force:!0}),F(u(),i.root),t&&g())try{await y({operation:"user.delete",uid:t.uid})}catch(e){if(!(e instanceof A&&e.refusal==="invalid_uid"))throw e}t&&I(t.uid),l({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:t?.uid??null,nodes:o.length}})}m(x,"removeApp");export{x as removeApp,ae as runRemovalCascades};
+var R=Object.defineProperty;var d=(r,n)=>R(r,"name",{value:n,configurable:!0});import{rmSync as _}from"node:fs";import{join as h}from"node:path";import{deleteNodes as S}from"../canvas/canvas.js";import{withCanvasWrite as c,openDb as f}from"../canvas/db.js";import{cancelCron as O}from"../canvas/crons.js";import{emitEvent as m}from"../events/emit.js";import{appSpace as T,appsRoot as E,secretsDir as C}from"../layout.js";import{notifyRunDeleted as D}from"../runs/events.js";import{cancelOpenQuestions as L}from"../runs/questions.js";import{removeTreeBeneath as W}from"../spaces/open-beneath.js";import{markGranteeUploadsDeletePending as y,releaseRunUploads as F,turnSharesOffFor as H}from"../storage/tables.js";import{stopNodeSandboxes as N}from"../spaces/stop.js";import{activeAppUser as p,markAppUserRemoved as M}from"../spaces/users.js";import{launcherRequest as U}from"../../launcher/client.js";import{LaunchRefused as b}from"../../launcher/spec.js";import{localGrants as A}from"./mirror.js";import{launcherPresent as u,listSandboxes as I,stopSandboxPid as P}from"./sandboxes.js";import{filterAsync as $}from"../async-array.js";let w=Promise.resolve();function ie(r=new Set){const n=w.then(async()=>{const o=await A(),t=new Set(o.filter(a=>a.status==="removed").map(a=>a.grantee));for(const a of t)if(!o.some(i=>i.grantee===a&&i.status==="active")&&!(await p(a)===null&&!r.has(a)))try{await x(a)}catch(i){m({level:"error",event:"daemon.grants.removal_failed",error:i,fields:{grantee:a}})}});return w=n.catch(()=>{}),n}d(ie,"runRemovalCascades");async function x(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const n=T(r),o=await p(r);m({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:o?.uid??null}}),await L({grantee:r},"the app was removed");const t=await c(async e=>(await e.prepare("UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE node_id IN (SELECT node_id FROM node_rows WHERE grantee = ?)").run(new Date().toISOString(),r),(await e.prepare("SELECT node_id FROM node_rows WHERE grantee = ? ORDER BY created DESC").all(r)).map(s=>s.node_id)));for(const{cron_id:e}of await(await f()).prepare("SELECT cron_id FROM crons WHERE grantee = ?").all(r))await O(e);const i=(await Promise.all(t.map(e=>N(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(i.length)throw new Error(`sandbox teardown could not be confirmed for ${i.length} node(s) of ${r}`);if(o&&u())for(const e of await I())e.uid===o.uid&&await P(e.pid);const g=await $(t,async e=>(await(await f()).prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(e))?.run_id===e);await c(async e=>{if(await H(r,e),await F(t,e),await y(r,e),!t.length)return;const s=t.map(()=>"?").join(","),v=await e.prepareUncached(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_id IN (${s})`).all(...t,...t);await e.prepareUncached(`DELETE FROM deliveries WHERE destination_id IN (${s})`).run(...t);for(const{message_id:l}of v)await e.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(l,l)}),await S(t);for(const e of g)D(e);if(_(h(C(),"env",n.root.slice(E().length+1)),{recursive:!0,force:!0}),W(E(),n.root),o&&u())try{await U({operation:"user.delete",uid:o.uid})}catch(e){if(!(e instanceof b&&e.refusal==="invalid_uid"))throw e}o&&await M(o.uid),m({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:o?.uid??null,nodes:t.length}})}d(x,"removeApp");export{x as removeApp,ie as runRemovalCascades};

package/dist/core/grants/sync.js

@@ -1 +1 @@
-var w=Object.defineProperty;var r=(t,n)=>w(t,"name",{value:n,configurable:!0});import{createPrivateKey as v,randomUUID as E,sign as S}from"node:crypto";import{readFileSync as b}from"node:fs";import{join as j}from"node:path";import{crtrHome as x}from"../canvas/paths.js";import{isUnsandboxedMachine as g}from"../runtime/unsandboxed.js";import{emitEvent as f}from"../events/emit.js";import{allGrants as $,dependenciesOf as T,inferenceEndpointOf as A,replaceGrants as N}from"./mirror.js";import{onGrantSync as O}from"./on-sync.js";const H=300;function G(t,n){const e=Math.floor(Date.now()/1e3),s=Buffer.from(JSON.stringify({alg:"ES256",typ:"JWT",kid:t.kid})).toString("base64url"),c=Buffer.from(JSON.stringify({iss:t.client_id,sub:t.client_id,aud:n,iat:e,exp:e+300,jti:E()})).toString("base64url"),o=`${s}.${c}`,i=S("sha256",Buffer.from(o),{key:v({key:t.jwk,format:"jwk"}),dsaEncoding:"ieee-p1363"});return`${o}.${i.toString("base64url")}`}r(G,"assertion");function y(){const t=JSON.parse(b(j(x(),"secrets","runtime-client.json"),"utf8"));if(!t.jwk||t.alg!=="ES256"||!t.kid||!t.client_id||!t.runtime||t.jwk.kid!==t.kid||t.jwk.kty!=="EC"||t.jwk.crv!=="P-256"||!t.jwk.d)throw new TypeError("invalid runtime client key");return t}r(y,"runtimeClient");function K(t=y()){return t.runtime.startsWith("runtime:")?t.runtime.slice(8):t.runtime}r(K,"runtimeId");function R(t){return`This machine was removed from your Northlight account. To use it again, create a join token at ${t.replace(/\/$/,"")}/account/machines, and run \`crtr sys join\` from a plain terminal.`}r(R,"machineRevokedMessage");class h extends Error{static{r(this,"MachineRevokedError")}constructor(n){super(R(n)),this.name="MachineRevokedError"}}async function B(t,n){const e=y(),s=`${t.replace(/\/$/,"")}/token`,c=new URLSearchParams({grant_type:"client_credentials",client_id:e.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:G(e,s),...n===void 0?{}:{audience:n}}),o=await fetch(s,{method:"POST",body:c,signal:AbortSignal.timeout(1e4)});if(!o.ok)throw o.status===401&&g()&&await D(o)?new h(t):new Error(`directory token request failed: ${o.status}`);const i=await o.json();if(typeof i.access_token!="string")throw new TypeError("directory token response has no access_token");return{access_token:i.access_token,expires_at:J(i.access_token,i.expires_in)}}r(B,"mintDirectoryToken");async function D(t){try{return(await t.json()).error==="invalid_client"}catch{return!1}}r(D,"isInvalidClient");function J(t,n){if(typeof n=="number"&&Number.isFinite(n)&&n>0)return Date.now()+n*1e3;try{const e=JSON.parse(Buffer.from(t.split(".")[1]??"","base64url").toString("utf8"));if(typeof e.exp=="number")return e.exp*1e3}catch{}return Date.now()+3e5}r(J,"tokenExpiry");function M(t,n){if(!t||typeof t!="object")throw new TypeError("invalid grant sync response");const e=t,s=n.runtime.startsWith("runtime:")?n.runtime:`runtime:${n.runtime}`;if(!(e.runtime===s||g()&&typeof e.runtime=="string"&&e.runtime.startsWith("runtime:")&&e.grantee!=="app:terminal")||typeof e.id!="string"||typeof e.sub!="string"||typeof e.grantee!="string"||!Number.isInteger(e.rev)||!Array.isArray(e.scopes)||!Array.isArray(e.resolved_scopes)||!["active","revoked","removed"].includes(e.status??"")||typeof e.synced_at!="string")throw new TypeError("invalid grant sync response");const i=t.revisions?.find(a=>a.rev===e.rev)?.approved_at;if(typeof i!="string")throw new TypeError("grant revision has no approval time");const d=e.payer==="app"?"app":"user";return{...e,spend_cap:e.spend_cap??null,expires_at:e.expires_at??null,revoked_at:e.revoked_at??null,approved_at:i,payer:d,dependencies:T(e.dependencies),inference_endpoint:d==="app"?A(e.inference_endpoint):null,run_notice_url:typeof e.run_notice_url=="string"&&e.run_notice_url!==""?e.run_notice_url:null}}r(M,"responseGrant");let _;function V(t){return _?_(t):Promise.resolve()}r(V,"requestGrantSync");function Y(t,n=e=>{}){let e;const s=t.replace(/\/$/,""),c=r(async()=>{const a=y(),u=await B(s),l=await fetch(`${s}/v1/runtime/grants`,{headers:{Authorization:`Bearer ${u.access_token}`},signal:AbortSignal.timeout(1e4)});if(!l.ok)throw new Error(`directory grant sync failed: ${l.status}`);const p=await l.json();if(!Array.isArray(p.grants)||typeof p.synced_at!="string")throw new TypeError("invalid grant sync response");const k=$();N(p.grants.map(m=>M(m,a)),p.synced_at,s),f({level:"info",event:"daemon.grants.synced",fields:{grants:p.grants.length,synced_at:p.synced_at}});try{await O(k,n)}catch(m){f({level:"error",event:"daemon.grants.on_sync_failed",error:m})}},"run");let o;const i=r(()=>{const a=c().catch(u=>{throw u instanceof h?f({level:"error",event:"daemon.grants.machine_revoked",error:u}):f({level:"error",event:"daemon.grants.sync_failed",error:u}),u}).finally(()=>{e===a&&(e=void 0)});return e=a,a},"start"),d=r((a={})=>e?a.fresh?(o??=e.catch(()=>{}).then(()=>(o=void 0,e??i())),o):e:i(),"sync");return _=d,d}r(Y,"createGrantSync");export{H as GRANT_SYNC_INTERVAL_S,h as MachineRevokedError,G as assertion,Y as createGrantSync,R as machineRevokedMessage,B as mintDirectoryToken,V as requestGrantSync,y as runtimeClient,K as runtimeId};
+var k=Object.defineProperty;var r=(t,n)=>k(t,"name",{value:n,configurable:!0});import{createPrivateKey as v,randomUUID as E,sign as S}from"node:crypto";import{readFileSync as b}from"node:fs";import{join as j}from"node:path";import{crtrHome as x}from"../canvas/paths.js";import{isUnsandboxedMachine as g}from"../runtime/unsandboxed.js";import{emitEvent as f}from"../events/emit.js";import{allGrants as $,dependenciesOf as T,inferenceEndpointOf as A,replaceGrants as N}from"./mirror.js";import{onGrantSync as O}from"./on-sync.js";const H=300;function G(t,n){const e=Math.floor(Date.now()/1e3),s=Buffer.from(JSON.stringify({alg:"ES256",typ:"JWT",kid:t.kid})).toString("base64url"),c=Buffer.from(JSON.stringify({iss:t.client_id,sub:t.client_id,aud:n,iat:e,exp:e+300,jti:E()})).toString("base64url"),o=`${s}.${c}`,i=S("sha256",Buffer.from(o),{key:v({key:t.jwk,format:"jwk"}),dsaEncoding:"ieee-p1363"});return`${o}.${i.toString("base64url")}`}r(G,"assertion");function y(){const t=JSON.parse(b(j(x(),"secrets","runtime-client.json"),"utf8"));if(!t.jwk||t.alg!=="ES256"||!t.kid||!t.client_id||!t.runtime||t.jwk.kid!==t.kid||t.jwk.kty!=="EC"||t.jwk.crv!=="P-256"||!t.jwk.d)throw new TypeError("invalid runtime client key");return t}r(y,"runtimeClient");function K(t=y()){return t.runtime.startsWith("runtime:")?t.runtime.slice(8):t.runtime}r(K,"runtimeId");function R(t){return`This machine was removed from your Northlight account. To use it again, create a join token at ${t.replace(/\/$/,"")}/account/machines, and run \`crtr sys join\` from a plain terminal.`}r(R,"machineRevokedMessage");class h extends Error{static{r(this,"MachineRevokedError")}constructor(n){super(R(n)),this.name="MachineRevokedError"}}async function B(t,n){const e=y(),s=`${t.replace(/\/$/,"")}/token`,c=new URLSearchParams({grant_type:"client_credentials",client_id:e.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:G(e,s),...n===void 0?{}:{audience:n}}),o=await fetch(s,{method:"POST",body:c,signal:AbortSignal.timeout(1e4)});if(!o.ok)throw o.status===401&&g()&&await D(o)?new h(t):new Error(`directory token request failed: ${o.status}`);const i=await o.json();if(typeof i.access_token!="string")throw new TypeError("directory token response has no access_token");return{access_token:i.access_token,expires_at:J(i.access_token,i.expires_in)}}r(B,"mintDirectoryToken");async function D(t){try{return(await t.json()).error==="invalid_client"}catch{return!1}}r(D,"isInvalidClient");function J(t,n){if(typeof n=="number"&&Number.isFinite(n)&&n>0)return Date.now()+n*1e3;try{const e=JSON.parse(Buffer.from(t.split(".")[1]??"","base64url").toString("utf8"));if(typeof e.exp=="number")return e.exp*1e3}catch{}return Date.now()+3e5}r(J,"tokenExpiry");function M(t,n){if(!t||typeof t!="object")throw new TypeError("invalid grant sync response");const e=t,s=n.runtime.startsWith("runtime:")?n.runtime:`runtime:${n.runtime}`;if(!(e.runtime===s||g()&&typeof e.runtime=="string"&&e.runtime.startsWith("runtime:")&&e.grantee!=="app:terminal")||typeof e.id!="string"||typeof e.sub!="string"||typeof e.grantee!="string"||!Number.isInteger(e.rev)||!Array.isArray(e.scopes)||!Array.isArray(e.resolved_scopes)||!["active","revoked","removed"].includes(e.status??"")||typeof e.synced_at!="string")throw new TypeError("invalid grant sync response");const i=t.revisions?.find(a=>a.rev===e.rev)?.approved_at;if(typeof i!="string")throw new TypeError("grant revision has no approval time");const d=e.payer==="app"?"app":"user";return{...e,spend_cap:e.spend_cap??null,expires_at:e.expires_at??null,revoked_at:e.revoked_at??null,approved_at:i,payer:d,dependencies:T(e.dependencies),inference_endpoint:d==="app"?A(e.inference_endpoint):null,run_notice_url:typeof e.run_notice_url=="string"&&e.run_notice_url!==""?e.run_notice_url:null}}r(M,"responseGrant");let _;function V(t){return _?_(t):Promise.resolve()}r(V,"requestGrantSync");function Y(t,n=e=>{}){let e;const s=t.replace(/\/$/,""),c=r(async()=>{const a=y(),u=await B(s),l=await fetch(`${s}/v1/runtime/grants`,{headers:{Authorization:`Bearer ${u.access_token}`},signal:AbortSignal.timeout(1e4)});if(!l.ok)throw new Error(`directory grant sync failed: ${l.status}`);const p=await l.json();if(!Array.isArray(p.grants)||typeof p.synced_at!="string")throw new TypeError("invalid grant sync response");const w=await $();await N(p.grants.map(m=>M(m,a)),p.synced_at,s),f({level:"info",event:"daemon.grants.synced",fields:{grants:p.grants.length,synced_at:p.synced_at}});try{await O(w,n)}catch(m){f({level:"error",event:"daemon.grants.on_sync_failed",error:m})}},"run");let o;const i=r(()=>{const a=c().catch(u=>{throw u instanceof h?f({level:"error",event:"daemon.grants.machine_revoked",error:u}):f({level:"error",event:"daemon.grants.sync_failed",error:u}),u}).finally(()=>{e===a&&(e=void 0)});return e=a,a},"start"),d=r((a={})=>e?a.fresh?(o??=e.catch(()=>{}).then(()=>(o=void 0,e??i())),o):e:i(),"sync");return _=d,d}r(Y,"createGrantSync");export{H as GRANT_SYNC_INTERVAL_S,h as MachineRevokedError,G as assertion,Y as createGrantSync,R as machineRevokedMessage,B as mintDirectoryToken,V as requestGrantSync,y as runtimeClient,K as runtimeId};