@north-light/cli 0.3.530 → 0.3.531

package/dist/daemon/api/handlers/docs.js

@@ -1 +1 @@
-var re=Object.defineProperty;var u=(t,e)=>re(t,"name",{value:e,configurable:!0});import{prepared as P}from"../../../core/sqlite-statements.js";import{ApiError as _}from"../../../api/errors.js";import{DOC_KINDS as q,DOC_UNSET_FIELDS as H}from"../../../api/dto/docs.js";import{PRIVACY_LEVELS_DTO as U}from"../../../api/dto/objects.js";import{withCanvasWrite as k}from"../../../core/canvas/db.js";import{CrtrError as ie}from"../../../core/errors.js";import{emitEvent as se}from"../../../core/events/emit.js";import{canChange as V,spaceOf as ae}from"../../../core/graph/access.js";import{get as A}from"../../../core/graph/bodies.js";import{deleteDocument as ce,documentRecord as I,editDocument as de,heads as x,history as ue,linksIn as K,moveDocument as fe,readBase as me,setDocumentRecord as le,withCurrentNames as pe,writeDocument as he}from"../../../core/graph/documents.js";import{resolveName as X}from"../../../core/graph/names.js";import{getByRowid as L}from"../../../core/graph/objects.js";import{noteRepoDocumentsChanged as we}from"../../../core/graph/repo-sync/index.js";import{checkoutsForCwd as ye}from"../../../core/graph/repo-sync/repos.js";import{lintRules as ve,rulesOf as ge}from"../../../core/graph/rules.js";import{unifiedDiff as _e}from"../../../core/graph/diff.js";import{ownerFromFlag as M,readerFor as E,resolveRef as z}from"../reader.js";function v(t,e,n,o,i={}){return new _(t,e,n,{...i,error:e,message:n,next:o})}u(v,"refuse");const b=u((t,e)=>new _(400,"invalid_request",t,e),"invalid");function R(t){const e=t.body;if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw b("the request body must be a JSON object");return e}u(R,"bodyOf");const S=u(t=>e=>ye(t,e),"reposFnFor");function C(t,e){if(t instanceof ie){const n=t.details;if(t.code==="read_first")throw v(409,"read_first",t.message,`Read it first with \`crtr canvas read ${e?.id??"<ref>"}\`, then rerun the edit.`,n??{});if(t.code==="conflict")throw new _(409,"name_taken",t.message,n);if(t.code==="forbidden")throw new _(403,"forbidden",t.message,n);if(t.code==="scope_missing")throw v(403,"scope_missing",t.message,`Launch the run with \`${String(n?.scope)}\` in its scopes list.`,n??{});if(n?.rule==="repo-public-only")throw v(422,"repo_documents_are_public",t.message,'Own it as `user` and add a rule with `if: {"repo": "<handle>"}` so it loads only in that repo.')}throw t}u(C,"mapGraphError");function W(t,e,n){const o=z(t,e,decodeURIComponent(n));if("remote"in o)throw v(404,"not_found",G(o.remote),"Check the name with `crtr canvas search`.");if("deleted"in o)throw new _(404,"not_found",`${o.deleted.name} is deleted`,{id:o.deleted.id,deleted:!0});if(o.type!=="document")throw b(`${n} is a ${o.type}, not a document`);return o}u(W,"refDocument");function G(t){return`no object named ${t} on this runtime; it may be on another runtime, or the name may be misspelled`}u(G,"remoteMessage");function be(t,e){const n=e.owner===null?null:L(t,e.owner);return n?n.type==="node"?n.id:n.name:""}u(be,"ownerHandle");function j(t,e){const n=be(t,e);return n?`${n}/${e.name}`:e.name}u(j,"canonicalName");function ke(t,e){const n=e.owner===null?null:L(t,e.owner),o=n?{id:n.id,type:n.type,handle:n.type==="node"?n.id:n.name}:null;return{id:e.id,type:e.type,kind:e.kind,owner:o,privacy:e.privacy,name:e.name,preview:e.preview??"",created_at:e.created_at,deleted_at:e.deleted_at}}u(ke,"objectDTO");function Ee(t,e){const n=e.owner===null?null:L(t,e.owner);return n?.type==="repo"?n:null}u(Ee,"repoOwner");function N(t,e,n,o){const i=[...new Map(n.flatMap(f=>{const s=Ee(t,f);return s?[[s.id,s]]:[]})).values()],a=e.class==="node"?e.cwd:o,r=e.class==="node"?[...e.checkouts,...e.projectCheckouts].map(f=>f.root):[];return{repos:i,dirs:[...new Set([...a!==void 0?[a]:[],...r])]}}u(N,"repoChange");function T(t){for(const e of t.repos)try{we(e,t.dirs)}catch(n){se({level:"warn",event:"repo_sync.failed",outcome:"failed",error:n,fields:{repo:e.name,step:"export",reason:n instanceof Error?n.message:String(n)}})}}u(T,"syncChanged");const Y=/^[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/;function $e(t,e){if(t===void 0)return;if(!Array.isArray(t)){e.push("`rules` must be a list");return}const n=t.map(i=>{if(typeof i!="object"||i===null||Array.isArray(i))return i;const{match_frontmatter:a,...r}=i;return"matchFrontmatter"in r?{...r,match_frontmatter:r.matchFrontmatter}:a===void 0?r:{...r,matchFrontmatter:a}}),o=ve(n);if(o){e.push(o.replaceAll("matchFrontmatter","match_frontmatter"));return}return n}u($e,"rulesFromDTO");function Z(t,e){const n={},o=u(s=>{const c=t[s];if(c!==void 0){if(typeof c!="string"){e.push(`\`${s}\` must be a string`);return}return c}},"str"),i=o("preview");i!==void 0&&(i.trim()===""||/[\r\n]/.test(i)?e.push("`preview` must be one non-empty line"):n.preview=i);const a=o("summary");a!==void 0&&(n.summary=a);const r=o("why_it_exists");if(r!==void 0&&(n.whyItExists=r),t.privacy!==void 0&&(U.includes(t.privacy)?n.privacy=t.privacy:e.push(`\`privacy\` must be one of ${U.join(", ")}`)),t.unlisted!==void 0&&(typeof t.unlisted!="boolean"?e.push("`unlisted` must be a boolean"):n.unlisted=t.unlisted),t.lint_ignore!==void 0){const s=t.lint_ignore;!Array.isArray(s)||s.some(c=>typeof c!="string")?e.push("`lint_ignore` must be a list of strings"):n.lintIgnore=s}if(t.extensions!==void 0){const s=t.extensions;typeof s!="object"||s===null||Array.isArray(s)||Object.values(s).some(c=>typeof c!="object"||c===null||Array.isArray(c))?e.push("`extensions` must map each plugin to an object of fields"):n.extensions=s}const f=$e(t.rules,e);return f!==void 0&&(n.rules=f),n}u(Z,"fieldsFrom");function J(t){if(t.length>0)throw b(t.join("; "),{errors:t})}u(J,"failOn");function Q(t,e,n,o){const i=K(n).filter(a=>"remote"in X(t,e,a));return{...o.length>0?{unresolved_links:o}:{},...i.length>0?{remote_links:i}:{}}}u(Q,"linkReport");function Oe(t){const e=R(t),n=[],o=e.name;(typeof o!="string"||!Y.test(o))&&n.push("`name` must be segments of letters, digits, `_` or `-` joined by `/`"),typeof e.body!="string"&&n.push("`body` must be a string"),typeof e.preview!="string"&&n.push("`preview` is required");const i=e.kind??"knowledge";q.includes(i)||n.push(i==="report"?"reports are written only by `crtr push`":`\`kind\` must be one of ${q.join(", ")}`);const a=Z(e,n);e.cwd!==void 0&&typeof e.cwd!="string"&&n.push("`cwd` must be a string"),J(n);const r=e,{dto:f,change:s}=k(c=>{const h=E(c,t),d=M(c,h,r.owner,r.cwd);if(!V(c,h,d))throw new _(404,"not_found",`no owner ${d.name} you can write to`);try{const{object:p,unresolved:m}=he(c,h,{...a,owner:d,name:r.name,kind:i,preview:a.preview,privacy:a.privacy??"public"},r.body,S(c));return{dto:{id:p.id,name:j(c,p),...Q(c,h,r.body,m)},change:N(c,h,[p],r.cwd)}}catch(p){C(p)}});return T(s),f}u(Oe,"write");function Ae(t,e){let n=t;e.forEach(({old:o,new:i},a)=>{const r=o===""?-1:n.indexOf(o);if(r<0)throw v(422,"replace_no_match",`replace[${a}]: old text not found in the revision you read`,"Copy the old text exactly from your last read and rerun.",{index:a});if(n.indexOf(o,r+1)>=0)throw v(422,"replace_ambiguous",`replace[${a}]: old text occurs more than once`,"Include more surrounding text so the old text matches once, and rerun.",{index:a});n=n.slice(0,r)+i+n.slice(r+o.length)})}u(Ae,"checkReplacements");function je(t){const e=R(t),n=[],o=e.body!==void 0,i=e.replace!==void 0;o&&i&&n.push("give `body` or `replace`, not both"),o&&typeof e.body!="string"&&n.push("`body` must be a string");const a=e.replace;i&&(!Array.isArray(a)||a.length===0||a.some(d=>typeof d!="object"||d===null||typeof d.old!="string"||typeof d.new!="string"))&&n.push("`replace` must be a non-empty list of {old, new} strings"),(typeof e.rationale!="string"||e.rationale.trim()==="")&&n.push("`rationale` is required"),e.verbatim!==void 0&&typeof e.verbatim!="boolean"&&n.push("`verbatim` must be a boolean"),e.base!==void 0&&(typeof e.base!="string"||e.base==="")&&n.push("`base` must be a non-empty heads key"),e.base!==void 0&&!o&&!i&&n.push("`base` applies only to a `body` or `replace` edit");const r=Z(e,n),f=e.unset??[];if(!Array.isArray(f)||f.some(d=>!H.includes(d)))n.push(`\`unset\` takes only ${H.join(", ")}`);else for(const d of f)d==="summary"&&(r.summary=null),d==="why_it_exists"&&(r.whyItExists=null),d==="unlisted"&&(r.unlisted=!1),d==="lint_ignore"&&(r.lintIgnore=null),d==="extensions"&&(r.extensions=null),d==="rules"&&(r.rules=[]);n.length===0&&!o&&!i&&Object.keys(r).length===0&&n.push("nothing to change: give `body`, `replace`, or a field"),J(n);const s=e,{dto:c,synced:h}=k(d=>{const p=E(d,t),m=W(d,p,t.params.ref),g=j(d,m),O=N(d,p,[m]);try{if(!o&&!i)return le(d,p,m,r),{dto:{id:m.id,name:g,revision:I(d,m).revision},synced:O};const y=s.base??me(d,p,m);if(i&&y!==null){const oe=I(d,m),B=x(d,m);oe.heads_key===y&&B.length===1&&Ae(pe(d,m,A(B[0].body_hash)),s.replace)}const D=s.verbatim===!0,l=o?{body:s.body,verbatim:D}:{replace:s.replace,verbatim:D},w=de(d,p,m,l,s.rationale,y,r,S(d));if("stale"in w)throw v(409,"stale_revision",`${g} changed after your read; it is now at revision ${w.stale.revision}`,`Read it again with \`crtr canvas read ${g}\`, then redo your change on the current text.`,{stale:w.stale});const F=A(x(d,m)[0].body_hash);return{dto:{id:m.id,name:g,revision:w.revision,...Q(d,p,F,w.unresolved)},synced:O}}catch(y){C(y,m)}});return T(h),c}u(je,"edit");function De(t){const e=R(t);if(e.new_name===void 0&&e.owner===void 0)throw b("give a new name, an owner, or both");if(e.new_name!==void 0&&(typeof e.new_name!="string"||!Y.test(e.new_name)))throw b("`new_name` must be segments of letters, digits, `_` or `-` joined by `/`");const{dto:n,change:o}=k(i=>{const a=E(i,t),r=W(i,a,t.params.ref),f=e.owner===void 0?void 0:M(i,a,e.owner,e.cwd);try{const s=fe(i,a,r,{...e.new_name!==void 0?{name:e.new_name}:{},...f?{owner:f}:{}},S(i));return{dto:{id:s.id,name:j(i,s)},change:N(i,a,[r,s],e.cwd)}}catch(s){C(s,r)}});return T(o),n}u(De,"move");function Re(t){const{dto:e,change:n}=k(o=>{const i=E(o,t),a=W(o,i,t.params.ref),r=j(o,a),f=N(o,i,[a]);try{ce(o,i,a,S(o))}catch(s){C(s,a)}return{dto:{id:a.id,name:r},change:f}});return T(n),e}u(Re,"remove");function Se(t){const e=t.query.get("diff"),n=e===null?void 0:Number(e);if(n!==void 0&&!(Number.isInteger(n)&&n>0))throw b("`diff` must be a revision number");return k(o=>{const i=E(o,t),a=z(o,i,decodeURIComponent(t.params.ref));if("remote"in a)throw v(404,"not_found",G(a.remote),"Check the name with `crtr canvas search`.");const r="deleted"in a?a.deleted:a;if(r.type!=="document")throw b(`${r.name} is a ${r.type}, not a document`);const f=ue(o,i,r),s={object:ke(o,r),revisions:f.map(c=>({rev_id:c.rev_id,number:c.number,author_id:c.author,rationale:c.rationale,verbatim:c.verbatim,created_at:c.created_at,parents:c.parents}))};if(n!==void 0){const c=f.find(d=>d.number===n);if(!c)throw new _(404,"not_found",`${r.name} has no revision ${n}`);const h=c.parents[0]===void 0?void 0:f.find(d=>d.rev_id===c.parents[0]);s.diff=_e(h?A(h.body_hash):"",A(c.body_hash))}return s})}u(Se,"revisionHistory");const ee=1e3,ne=1e3,te=3e3,Ce=/^When\b.+\bbecause\b.+/,Ne=u(t=>{const e=t.trim();return e===""?0:e.split(/\s+/).length},"words");function Te(t,e){if(t.some(o=>o.on==="boot"&&o.deliver==="content")&&e>ee)return`body is ${e} words, over the ${ee}-word cap for a boot rule at content (the whole body enters every node's context). Keep the core here and move separate subjects into [[linked]] documents.`;const n=[...new Set(t.filter(o=>o.on!=="boot"&&o.deliver==="content").map(o=>o.on))];return n.length>0&&e>ne?`body is ${e} words, over the ${ne}-word cap for a content rule on ${n.join("/")}. Keep the core here and move separate subjects into [[linked]] documents.`:t.some(o=>o.on==="boot"&&o.deliver==="preview")&&e>te?`body is ${e} words, over the ${te}-word cap for a boot rule at preview. Keep the core here and move separate subjects into [[linked]] documents.`:null}u(Te,"lengthFinding");function Fe(t){const e=R(t);return k(n=>{const o=E(n,t),i=e.owner===void 0?null:M(n,o,e.owner,e.cwd),a=P(n,"SELECT * FROM objects WHERE type = 'document' AND deleted_at IS NULL AND home_machine IS NULL AND kind != 'report' ORDER BY name").all(),r=[],f=new Map;for(const s of a){if(i&&s.owner!==i.rowid||!V(n,o,s))continue;const c=I(n,s),h=new Set(c.lint_ignore??[]),d=j(n,s),p=u((l,w,F)=>{h.has(l)||r.push({name:d,severity:w,rule:l,message:F})},"add"),m=ge(n,s),g=x(n,s)[0],O=g?A(g.body_hash):"",y=Te(m,Ne(O));y&&p("length","error",y),m.some(l=>l.deliver==="preview")&&!Ce.test(s.preview??"")&&p("preview-shape","error",`a rule delivers this document at preview, so the preview must read "When <situation in the reader's work>, read this because <what the reader gains>"`);const D=new Set(P(n,"SELECT written_as FROM edges WHERE type = 'links-to' AND src = ?").all(s.rowid).map(l=>l.written_as));for(const l of K(O)){if(D.has(l))continue;const w=X(n,o,l);"remote"in w||"object"in w||"deleted"in w||p("links","warning",`[[${l}]] names no object in your view`)}if(m.some(l=>l.on==="workspace-open"&&l.deliver==="content")){const l=ae(n,s);l.type==="repo"&&!h.has("workspace-open")&&f.set(l.name,[...f.get(l.name)??[],d])}}for(const[s,c]of f)if(!(c.length<2))for(const h of c)r.push({name:h,severity:"warning",rule:"workspace-open",message:`repo ${s} has ${c.length} documents delivered at content on workspace-open (${c.join(", ")}); keep one and link the rest from it`});return{findings:r}})}u(Fe,"lint");const $=u((t,e=200)=>n=>({status:e,body:t(n)}),"ok"),Qe=[{method:"POST",pattern:"/v1/docs",handler:$(Oe,201)},{method:"PATCH",pattern:"/v1/docs/:ref",handler:$(je)},{method:"POST",pattern:"/v1/docs/:ref/move",handler:$(De)},{method:"DELETE",pattern:"/v1/docs/:ref",handler:$(Re)},{method:"GET",pattern:"/v1/docs/:ref/history",handler:$(Se)},{method:"POST",pattern:"/v1/docs/lint",handler:$(Fe)}];export{j as canonicalName,Qe as docRoutes,N as repoChange,T as syncChanged};
+var oe=Object.defineProperty;var u=(n,e)=>oe(n,"name",{value:e,configurable:!0});import{ApiError as _}from"../../../api/errors.js";import{DOC_KINDS as P,DOC_UNSET_FIELDS as q}from"../../../api/dto/docs.js";import{PRIVACY_LEVELS_DTO as H}from"../../../api/dto/objects.js";import{withCanvasWrite as k}from"../../../core/canvas/db.js";import{CrtrError as re}from"../../../core/errors.js";import{emitEvent as ie}from"../../../core/events/emit.js";import{canChange as U,spaceOf as ae}from"../../../core/graph/access.js";import{get as O}from"../../../core/graph/bodies.js";import{deleteDocument as se,documentRecord as I,editDocument as ce,heads as x,history as de,linksIn as V,moveDocument as ue,readBase as fe,setDocumentRecord as le,withCurrentNames as me,writeDocument as pe}from"../../../core/graph/documents.js";import{resolveName as K}from"../../../core/graph/names.js";import{getByRowid as L}from"../../../core/graph/objects.js";import{noteRepoDocumentsChanged as we}from"../../../core/graph/repo-sync/index.js";import{checkoutsForCwd as he}from"../../../core/graph/repo-sync/repos.js";import{lintRules as ye,rulesOf as ve}from"../../../core/graph/rules.js";import{unifiedDiff as ge}from"../../../core/graph/diff.js";import{ownerFromFlag as M,readerFor as E,resolveRef as X}from"../reader.js";import{filterAsync as _e,flatMapAsync as be}from"../../../core/async-array.js";function v(n,e,t,o,i={}){return new _(n,e,t,{...i,error:e,message:t,next:o})}u(v,"refuse");const b=u((n,e)=>new _(400,"invalid_request",n,e),"invalid");function R(n){const e=n.body;if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw b("the request body must be a JSON object");return e}u(R,"bodyOf");const C=u(async n=>async e=>await he(n,e),"reposFnFor");function S(n,e){if(n instanceof re){const t=n.details;if(n.code==="read_first")throw v(409,"read_first",n.message,`Read it first with \`crtr canvas read ${e?.id??"<ref>"}\`, then rerun the edit.`,t??{});if(n.code==="conflict")throw new _(409,"name_taken",n.message,t);if(n.code==="forbidden")throw new _(403,"forbidden",n.message,t);if(n.code==="scope_missing")throw v(403,"scope_missing",n.message,`Launch the run with \`${String(t?.scope)}\` in its scopes list.`,t??{});if(t?.rule==="repo-public-only")throw v(422,"repo_documents_are_public",n.message,'Own it as `user` and add a rule with `if: {"repo": "<handle>"}` so it loads only in that repo.')}throw n}u(S,"mapGraphError");async function W(n,e,t){const o=await X(n,e,decodeURIComponent(t));if("remote"in o)throw v(404,"not_found",z(o.remote),"Check the name with `crtr canvas search`.");if("deleted"in o)throw new _(404,"not_found",`${o.deleted.name} is deleted`,{id:o.deleted.id,deleted:!0});if(o.type!=="document")throw b(`${t} is a ${o.type}, not a document`);return o}u(W,"refDocument");function z(n){return`no object named ${n} on this runtime; it may be on another runtime, or the name may be misspelled`}u(z,"remoteMessage");async function ke(n,e){const t=e.owner===null?null:await L(n,e.owner);return t?t.type==="node"?t.id:t.name:""}u(ke,"ownerHandle");async function j(n,e){const t=await ke(n,e);return t?`${t}/${e.name}`:e.name}u(j,"canonicalName");async function Ee(n,e){const t=e.owner===null?null:await L(n,e.owner),o=t?{id:t.id,type:t.type,handle:t.type==="node"?t.id:t.name}:null;return{id:e.id,type:e.type,kind:e.kind,owner:o,privacy:e.privacy,name:e.name,preview:e.preview??"",created_at:e.created_at,deleted_at:e.deleted_at}}u(Ee,"objectDTO");async function $e(n,e){const t=e.owner===null?null:await L(n,e.owner);return t?.type==="repo"?t:null}u($e,"repoOwner");async function N(n,e,t,o){const i=[...new Map(await be(t,async f=>{const a=await $e(n,f);return a?[[a.id,a]]:[]})).values()],s=e.class==="node"?e.cwd:o,r=e.class==="node"?[...e.checkouts,...e.projectCheckouts].map(f=>f.root):[];return{repos:i,dirs:[...new Set([...s!==void 0?[s]:[],...r])]}}u(N,"repoChange");async function T(n){for(const e of n.repos)try{await we(e,n.dirs)}catch(t){ie({level:"warn",event:"repo_sync.failed",outcome:"failed",error:t,fields:{repo:e.name,step:"export",reason:t instanceof Error?t.message:String(t)}})}}u(T,"syncChanged");const G=/^[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/;function Ae(n,e){if(n===void 0)return;if(!Array.isArray(n)){e.push("`rules` must be a list");return}const t=n.map(i=>{if(typeof i!="object"||i===null||Array.isArray(i))return i;const{match_frontmatter:s,...r}=i;return"matchFrontmatter"in r?{...r,match_frontmatter:r.matchFrontmatter}:s===void 0?r:{...r,matchFrontmatter:s}}),o=ye(t);if(o){e.push(o.replaceAll("matchFrontmatter","match_frontmatter"));return}return t}u(Ae,"rulesFromDTO");function Y(n,e){const t={},o=u(a=>{const c=n[a];if(c!==void 0){if(typeof c!="string"){e.push(`\`${a}\` must be a string`);return}return c}},"str"),i=o("preview");i!==void 0&&(i.trim()===""||/[\r\n]/.test(i)?e.push("`preview` must be one non-empty line"):t.preview=i);const s=o("summary");s!==void 0&&(t.summary=s);const r=o("why_it_exists");if(r!==void 0&&(t.whyItExists=r),n.privacy!==void 0&&(H.includes(n.privacy)?t.privacy=n.privacy:e.push(`\`privacy\` must be one of ${H.join(", ")}`)),n.unlisted!==void 0&&(typeof n.unlisted!="boolean"?e.push("`unlisted` must be a boolean"):t.unlisted=n.unlisted),n.lint_ignore!==void 0){const a=n.lint_ignore;!Array.isArray(a)||a.some(c=>typeof c!="string")?e.push("`lint_ignore` must be a list of strings"):t.lintIgnore=a}if(n.extensions!==void 0){const a=n.extensions;typeof a!="object"||a===null||Array.isArray(a)||Object.values(a).some(c=>typeof c!="object"||c===null||Array.isArray(c))?e.push("`extensions` must map each plugin to an object of fields"):t.extensions=a}const f=Ae(n.rules,e);return f!==void 0&&(t.rules=f),t}u(Y,"fieldsFrom");function Z(n){if(n.length>0)throw b(n.join("; "),{errors:n})}u(Z,"failOn");async function J(n,e,t,o){const i=await _e(V(t),async s=>"remote"in await K(n,e,s));return{...o.length>0?{unresolved_links:o}:{},...i.length>0?{remote_links:i}:{}}}u(J,"linkReport");async function Oe(n){const e=R(n),t=[],o=e.name;(typeof o!="string"||!G.test(o))&&t.push("`name` must be segments of letters, digits, `_` or `-` joined by `/`"),typeof e.body!="string"&&t.push("`body` must be a string"),typeof e.preview!="string"&&t.push("`preview` is required");const i=e.kind??"knowledge";P.includes(i)||t.push(i==="report"?"reports are written only by `crtr push`":`\`kind\` must be one of ${P.join(", ")}`);const s=Y(e,t);e.cwd!==void 0&&typeof e.cwd!="string"&&t.push("`cwd` must be a string"),Z(t);const r=e,{dto:f,change:a}=await k(async c=>{const w=await E(c,n),d=await M(c,w,r.owner,r.cwd);if(!await U(c,w,d))throw new _(404,"not_found",`no owner ${d.name} you can write to`);try{const{object:p,unresolved:l}=await pe(c,w,{...s,owner:d,name:r.name,kind:i,preview:s.preview,privacy:s.privacy??"public"},r.body,await C(c));return{dto:{id:p.id,name:await j(c,p),...await J(c,w,r.body,l)},change:await N(c,w,[p],r.cwd)}}catch(p){S(p)}});return await T(a),f}u(Oe,"write");function je(n,e){let t=n;e.forEach(({old:o,new:i},s)=>{const r=o===""?-1:t.indexOf(o);if(r<0)throw v(422,"replace_no_match",`replace[${s}]: old text not found in the revision you read`,"Copy the old text exactly from your last read and rerun.",{index:s});if(t.indexOf(o,r+1)>=0)throw v(422,"replace_ambiguous",`replace[${s}]: old text occurs more than once`,"Include more surrounding text so the old text matches once, and rerun.",{index:s});t=t.slice(0,r)+i+t.slice(r+o.length)})}u(je,"checkReplacements");async function De(n){const e=R(n),t=[],o=e.body!==void 0,i=e.replace!==void 0;o&&i&&t.push("give `body` or `replace`, not both"),o&&typeof e.body!="string"&&t.push("`body` must be a string");const s=e.replace;i&&(!Array.isArray(s)||s.length===0||s.some(d=>typeof d!="object"||d===null||typeof d.old!="string"||typeof d.new!="string"))&&t.push("`replace` must be a non-empty list of {old, new} strings"),(typeof e.rationale!="string"||e.rationale.trim()==="")&&t.push("`rationale` is required"),e.verbatim!==void 0&&typeof e.verbatim!="boolean"&&t.push("`verbatim` must be a boolean"),e.base!==void 0&&(typeof e.base!="string"||e.base==="")&&t.push("`base` must be a non-empty heads key"),e.base!==void 0&&!o&&!i&&t.push("`base` applies only to a `body` or `replace` edit");const r=Y(e,t),f=e.unset??[];if(!Array.isArray(f)||f.some(d=>!q.includes(d)))t.push(`\`unset\` takes only ${q.join(", ")}`);else for(const d of f)d==="summary"&&(r.summary=null),d==="why_it_exists"&&(r.whyItExists=null),d==="unlisted"&&(r.unlisted=!1),d==="lint_ignore"&&(r.lintIgnore=null),d==="extensions"&&(r.extensions=null),d==="rules"&&(r.rules=[]);t.length===0&&!o&&!i&&Object.keys(r).length===0&&t.push("nothing to change: give `body`, `replace`, or a field"),Z(t);const a=e,{dto:c,synced:w}=await k(async d=>{const p=await E(d,n),l=await W(d,p,n.params.ref),g=await j(d,l),A=await N(d,p,[l]);try{if(!o&&!i)return await le(d,p,l,r),{dto:{id:l.id,name:g,revision:(await I(d,l)).revision},synced:A};const y=a.base??await fe(d,p,l);if(i&&y!==null){const ne=await I(d,l),B=await x(d,l);ne.heads_key===y&&B.length===1&&je(await me(d,l,O(B[0].body_hash)),a.replace)}const D=a.verbatim===!0,m=o?{body:a.body,verbatim:D}:{replace:a.replace,verbatim:D},h=await ce(d,p,l,m,a.rationale,y,r,await C(d));if("stale"in h)throw v(409,"stale_revision",`${g} changed after your read; it is now at revision ${h.stale.revision}`,`Read it again with \`crtr canvas read ${g}\`, then redo your change on the current text.`,{stale:h.stale});const F=O((await x(d,l))[0].body_hash);return{dto:{id:l.id,name:g,revision:h.revision,...await J(d,p,F,h.unresolved)},synced:A}}catch(y){S(y,l)}});return await T(w),c}u(De,"edit");async function Re(n){const e=R(n);if(e.new_name===void 0&&e.owner===void 0)throw b("give a new name, an owner, or both");if(e.new_name!==void 0&&(typeof e.new_name!="string"||!G.test(e.new_name)))throw b("`new_name` must be segments of letters, digits, `_` or `-` joined by `/`");const{dto:t,change:o}=await k(async i=>{const s=await E(i,n),r=await W(i,s,n.params.ref),f=e.owner===void 0?void 0:await M(i,s,e.owner,e.cwd);try{const a=await ue(i,s,r,{...e.new_name!==void 0?{name:e.new_name}:{},...f?{owner:f}:{}},await C(i));return{dto:{id:a.id,name:await j(i,a)},change:await N(i,s,[r,a],e.cwd)}}catch(a){S(a,r)}});return await T(o),t}u(Re,"move");async function Ce(n){const{dto:e,change:t}=await k(async o=>{const i=await E(o,n),s=await W(o,i,n.params.ref),r=await j(o,s),f=await N(o,i,[s]);try{await se(o,i,s,await C(o))}catch(a){S(a,s)}return{dto:{id:s.id,name:r},change:f}});return await T(t),e}u(Ce,"remove");async function Se(n){const e=n.query.get("diff"),t=e===null?void 0:Number(e);if(t!==void 0&&!(Number.isInteger(t)&&t>0))throw b("`diff` must be a revision number");return await k(async o=>{const i=await E(o,n),s=await X(o,i,decodeURIComponent(n.params.ref));if("remote"in s)throw v(404,"not_found",z(s.remote),"Check the name with `crtr canvas search`.");const r="deleted"in s?s.deleted:s;if(r.type!=="document")throw b(`${r.name} is a ${r.type}, not a document`);const f=await de(o,i,r),a={object:await Ee(o,r),revisions:f.map(c=>({rev_id:c.rev_id,number:c.number,author_id:c.author,rationale:c.rationale,verbatim:c.verbatim,created_at:c.created_at,parents:c.parents}))};if(t!==void 0){const c=f.find(d=>d.number===t);if(!c)throw new _(404,"not_found",`${r.name} has no revision ${t}`);const w=c.parents[0]===void 0?void 0:f.find(d=>d.rev_id===c.parents[0]);a.diff=ge(w?O(w.body_hash):"",O(c.body_hash))}return a})}u(Se,"revisionHistory");const Q=1e3,ee=1e3,te=3e3,Ne=/^When\b.+\bbecause\b.+/,Te=u(n=>{const e=n.trim();return e===""?0:e.split(/\s+/).length},"words");function Fe(n,e){if(n.some(o=>o.on==="boot"&&o.deliver==="content")&&e>Q)return`body is ${e} words, over the ${Q}-word cap for a boot rule at content (the whole body enters every node's context). Keep the core here and move separate subjects into [[linked]] documents.`;const t=[...new Set(n.filter(o=>o.on!=="boot"&&o.deliver==="content").map(o=>o.on))];return t.length>0&&e>ee?`body is ${e} words, over the ${ee}-word cap for a content rule on ${t.join("/")}. Keep the core here and move separate subjects into [[linked]] documents.`:n.some(o=>o.on==="boot"&&o.deliver==="preview")&&e>te?`body is ${e} words, over the ${te}-word cap for a boot rule at preview. Keep the core here and move separate subjects into [[linked]] documents.`:null}u(Fe,"lengthFinding");async function Ie(n){const e=R(n);return await k(async t=>{const o=await E(t,n),i=e.owner===void 0?null:await M(t,o,e.owner,e.cwd),s=await t.prepare("SELECT * FROM objects WHERE type = 'document' AND deleted_at IS NULL AND home_machine IS NULL AND kind != 'report' ORDER BY name").all(),r=[],f=new Map;for(const a of s){if(i&&a.owner!==i.rowid||!await U(t,o,a))continue;const c=await I(t,a),w=new Set(c.lint_ignore??[]),d=await j(t,a),p=u((m,h,F)=>{w.has(m)||r.push({name:d,severity:h,rule:m,message:F})},"add"),l=await ve(t,a),g=(await x(t,a))[0],A=g?O(g.body_hash):"",y=Fe(l,Te(A));y&&p("length","error",y),l.some(m=>m.deliver==="preview")&&!Ne.test(a.preview??"")&&p("preview-shape","error",`a rule delivers this document at preview, so the preview must read "When <situation in the reader's work>, read this because <what the reader gains>"`);const D=new Set((await t.prepare("SELECT written_as FROM edges WHERE type = 'links-to' AND src = ?").all(a.rowid)).map(m=>m.written_as));for(const m of V(A)){if(D.has(m))continue;const h=await K(t,o,m);"remote"in h||"object"in h||"deleted"in h||p("links","warning",`[[${m}]] names no object in your view`)}if(l.some(m=>m.on==="workspace-open"&&m.deliver==="content")){const m=await ae(t,a);m.type==="repo"&&!w.has("workspace-open")&&f.set(m.name,[...f.get(m.name)??[],d])}}for(const[a,c]of f)if(!(c.length<2))for(const w of c)r.push({name:w,severity:"warning",rule:"workspace-open",message:`repo ${a} has ${c.length} documents delivered at content on workspace-open (${c.join(", ")}); keep one and link the rest from it`});return{findings:r}})}u(Ie,"lint");const $=u((n,e=200)=>async t=>({status:e,body:await n(t)}),"ok"),et=[{method:"POST",pattern:"/v1/docs",handler:$(Oe,201)},{method:"PATCH",pattern:"/v1/docs/:ref",handler:$(De)},{method:"POST",pattern:"/v1/docs/:ref/move",handler:$(Re)},{method:"DELETE",pattern:"/v1/docs/:ref",handler:$(Ce)},{method:"GET",pattern:"/v1/docs/:ref/history",handler:$(Se)},{method:"POST",pattern:"/v1/docs/lint",handler:$(Ie)}];export{j as canonicalName,et as docRoutes,N as repoChange,T as syncChanged};

package/dist/daemon/api/handlers/feedback-comments.js

@@ -1,3 +1,3 @@
-var g=Object.defineProperty;var c=(o,t)=>g(o,"name",{value:t,configurable:!0});import{basename as y}from"node:path";import{ApiError as r}from"../../../api/index.js";import{createPageFeedbackComment as I,readPageFeedback as u,resolvePageFeedbackComment as q,PageFeedbackCommentAlreadyResolvedError as C,PageTicketTerminalError as k,UnknownPageFeedbackCommentError as T}from"../../../core/human/feedback.js";import{discardFeedbackCompanion as b,pageDocumentSha256 as P,realizeFeedbackCompanion as N}from"../../../core/human/feedback-companion.js";import{parsePage as S}from"../../../core/human/page.js";import{pageTicketState as F,selectedPageDir as E}from"../../../core/human/tickets.js";import{deliverNodeMessage as x}from"../../messaging/node-message.js";import{requireTicketId as D,resolveTicket as O}from"./inbox.js";import{invalidRequest as p,objectBody as h,optionalString as R,requiredString as l}from"./validate.js";import{toPageFeedbackDTO as w,toPageFeedbackCommentDTO as v}from"../map.js";const M=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;function _(o){const t=D(o.params),e=O(t);if(e===null)throw new r(404,"ticket_not_found","no matching ticket");if(e.kind==="review")throw new r(409,"ticket_kind_unsupported","review tickets have no feedback comments");const n=F(e.dir);if(n==="resolved"||n==="canceled")throw new r(409,"ticket_terminal","ticket already has a terminal outcome");return e}c(_,"requireMutablePageTicket");function j(o){const t=o.comment_id;if(t===void 0||!M.test(t))throw new r(400,"invalid_request","invalid feedback comment id");return t}c(j,"requireCommentId");function $(o){return[...o.quote.split(`
-`).map(e=>`> ${e}`),"",o.note].join(`
-`)}c($,"renderCommentTurn");async function z(o){const t=o.mutation.feedback.companionNodeId;if(t===void 0)throw new r(500,"internal","feedback has comments but no companion conversation");try{const e=await x({node_id:t,body:$(o.mutation.comment),label:o.title,from:"human",mode:"interactive",data:{page_id:y(o.dir),comment_id:o.mutation.comment.id,verb:"create"}});return{target_node_id:t,status:"delivered",via:e.via,woke:e.revived,...e.reason===void 0?{}:{reason:e.reason}}}catch(e){return{target_node_id:t,status:"failed",woke:!1,error:e instanceof Error?e.message:String(e)}}}c(z,"deliverCommentTurn");function A(o){const t=[],e=h(o.body,["quote","context","note"],t),n=l(e,"quote",t),i=R(e,"context",t),d=l(e,"note",t);return(t.length>0||n===void 0||d===void 0)&&p("page feedback comment request",t),{quote:n,...i===void 0?{}:{context:i},note:d}}c(A,"parseCreate");async function B(o){const t=A(o),e=_(o),n=S(E(e.dir));if(n.dialect!=="jsx")throw new r(409,"page_dialect_unsupported","feedback comments exist only on TSX pages");let i=u(e.dir).companionNodeId,d,s=!1;if(i===void 0){const m=n.source?.nodeId;if(m===void 0)throw new r(409,"ticket_has_no_sender","this page carries no sending node to deliver feedback to");d=P(e.dir);try{i=await N({ticketId:e.ticketId,dir:e.dir,senderNodeId:m,title:n.title})}catch(f){throw new r(409,"fork_failed",`the sending node could not be forked: ${f instanceof Error?f.message:String(f)}`)}s=!0}let a;try{a=I(e.dir,{...t,companionNodeId:i,firstCommentedSha256:d})}catch(m){throw s&&b(i),m instanceof k?new r(409,"ticket_terminal","ticket already has a terminal outcome"):m}return s&&a.feedback.companionNodeId!==i&&b(i),{status:200,body:{comment:v(a.comment),feedback:w(a.feedback),delivery:await z({dir:e.dir,title:n.title,mutation:a})}}}c(B,"handleCreate");function U(o){const t=[],e=h(o.body,["node_id"],t),n=l(e,"node_id",t);return(t.length>0||n===void 0)&&p("feedback resolve request",t),n}c(U,"parseResolve");async function X(o){const t=_(o),e=j(o.params),n=U(o),i=u(t.dir).companionNodeId;if(i===void 0||n!==i)throw new r(403,"not_companion","only the ticket's bound feedback companion resolves its comments");let d;try{d=q(t.dir,e)}catch(a){throw a instanceof T?new r(404,"unknown_comment",a.message):a instanceof C?new r(409,"comment_already_resolved",a.message):a instanceof k?new r(409,"ticket_terminal","ticket already has a terminal outcome"):a}return{status:200,body:{comment:v(d.comment),feedback:w(d.feedback)}}}c(X,"handleResolve");const oe=[{method:"POST",pattern:"/v1/human/inbox/:ticket_id/feedback-comments",handler:B},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/feedback-comments/:comment_id/resolve",handler:X}];export{oe as feedbackCommentRoutes};
+var g=Object.defineProperty;var c=(n,t)=>g(n,"name",{value:t,configurable:!0});import{basename as y}from"node:path";import{ApiError as a}from"../../../api/index.js";import{createPageFeedbackComment as I,readPageFeedback as u,resolvePageFeedbackComment as q,PageFeedbackCommentAlreadyResolvedError as C,PageTicketTerminalError as k,UnknownPageFeedbackCommentError as T}from"../../../core/human/feedback.js";import{discardFeedbackCompanion as w,pageDocumentSha256 as P,realizeFeedbackCompanion as N}from"../../../core/human/feedback-companion.js";import{parsePage as S}from"../../../core/human/page.js";import{pageTicketState as F,selectedPageDir as E}from"../../../core/human/tickets.js";import{deliverNodeMessage as x}from"../../messaging/node-message.js";import{requireTicketId as D,resolveTicket as O}from"./inbox.js";import{invalidRequest as b,objectBody as p,optionalString as R,requiredString as l}from"./validate.js";import{toPageFeedbackDTO as h,toPageFeedbackCommentDTO as v}from"../map.js";const M=/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;async function _(n){const t=D(n.params),e=await O(t);if(e===null)throw new a(404,"ticket_not_found","no matching ticket");if(e.kind==="review")throw new a(409,"ticket_kind_unsupported","review tickets have no feedback comments");const o=await F(e.dir);if(o==="resolved"||o==="canceled")throw new a(409,"ticket_terminal","ticket already has a terminal outcome");return e}c(_,"requireMutablePageTicket");function j(n){const t=n.comment_id;if(t===void 0||!M.test(t))throw new a(400,"invalid_request","invalid feedback comment id");return t}c(j,"requireCommentId");function $(n){return[...n.quote.split(`
+`).map(e=>`> ${e}`),"",n.note].join(`
+`)}c($,"renderCommentTurn");async function z(n){const t=n.mutation.feedback.companionNodeId;if(t===void 0)throw new a(500,"internal","feedback has comments but no companion conversation");try{const e=await x({node_id:t,body:$(n.mutation.comment),label:n.title,from:"human",mode:"interactive",data:{page_id:y(n.dir),comment_id:n.mutation.comment.id,verb:"create"}});return{target_node_id:t,status:"delivered",via:e.via,woke:e.revived,...e.reason===void 0?{}:{reason:e.reason}}}catch(e){return{target_node_id:t,status:"failed",woke:!1,error:e instanceof Error?e.message:String(e)}}}c(z,"deliverCommentTurn");function A(n){const t=[],e=p(n.body,["quote","context","note"],t),o=l(e,"quote",t),i=R(e,"context",t),d=l(e,"note",t);return(t.length>0||o===void 0||d===void 0)&&b("page feedback comment request",t),{quote:o,...i===void 0?{}:{context:i},note:d}}c(A,"parseCreate");async function B(n){const t=A(n),e=await _(n),o=S(await E(e.dir));if(o.dialect!=="jsx")throw new a(409,"page_dialect_unsupported","feedback comments exist only on TSX pages");let i=(await u(e.dir)).companionNodeId,d,s=!1;if(i===void 0){const m=o.source?.nodeId;if(m===void 0)throw new a(409,"ticket_has_no_sender","this page carries no sending node to deliver feedback to");d=await P(e.dir);try{i=await N({ticketId:e.ticketId,dir:e.dir,senderNodeId:m,title:o.title})}catch(f){throw new a(409,"fork_failed",`the sending node could not be forked: ${f instanceof Error?f.message:String(f)}`)}s=!0}let r;try{r=await I(e.dir,{...t,companionNodeId:i,firstCommentedSha256:d})}catch(m){throw s&&await w(i),m instanceof k?new a(409,"ticket_terminal","ticket already has a terminal outcome"):m}return s&&r.feedback.companionNodeId!==i&&await w(i),{status:200,body:{comment:v(r.comment),feedback:h(r.feedback),delivery:await z({dir:e.dir,title:o.title,mutation:r})}}}c(B,"handleCreate");function U(n){const t=[],e=p(n.body,["node_id"],t),o=l(e,"node_id",t);return(t.length>0||o===void 0)&&b("feedback resolve request",t),o}c(U,"parseResolve");async function X(n){const t=await _(n),e=j(n.params),o=U(n),i=(await u(t.dir)).companionNodeId;if(i===void 0||o!==i)throw new a(403,"not_companion","only the ticket's bound feedback companion resolves its comments");let d;try{d=await q(t.dir,e)}catch(r){throw r instanceof T?new a(404,"unknown_comment",r.message):r instanceof C?new a(409,"comment_already_resolved",r.message):r instanceof k?new a(409,"ticket_terminal","ticket already has a terminal outcome"):r}return{status:200,body:{comment:v(d.comment),feedback:h(d.feedback)}}}c(X,"handleResolve");const ne=[{method:"POST",pattern:"/v1/human/inbox/:ticket_id/feedback-comments",handler:B},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/feedback-comments/:comment_id/resolve",handler:X}];export{ne as feedbackCommentRoutes};

package/dist/daemon/api/handlers/files.js

@@ -1 +1 @@
-var A=Object.defineProperty;var o=(e,t)=>A(e,"name",{value:t,configurable:!0});import{closeSync as _,constants as q,fstatSync as B,readSync as T}from"node:fs";import{isAbsolute as R,resolve as v}from"node:path";import{appSpace as I}from"../../../core/layout.js";import{ApiError as f}from"../../../api/index.js";import{notFound as g,usage as c}from"../../../core/errors.js";import{InputError as L}from"../../../core/io.js";import{RunError as p}from"../../../core/runs/operations.js";import{isBeneathRefusal as M,listBeneath as k,openBeneath as z,writeFileBeneath as F}from"../../../core/spaces/open-beneath.js";import{fileRoot as N}from"../../../core/spaces/permissions.js";import{nodeMayReach as P,runNodeIds as O,runPlace as D}from"../../../core/runs/confinement.js";import{resolvedScopes as w}from"../router.js";const m=512*1024,E=1024*1024,C=1e3;function h(e,t){if(e===null||e==="")throw c(`a file ${t} requires a \`path\` ${t==="write"?"body field":"query param"}`);if(!R(e))throw c(`file ${t} path must be absolute`,{received:e});return e}o(h,"requireAbsolutePath");function $(e){if(e==null)return"utf8";if(e==="utf8"||e==="base64")return e;throw c("encoding must be `utf8` or `base64`",{received:e})}o($,"parseEncoding");function u(e,t,r){if(e instanceof f||e instanceof L||e instanceof p)throw e;if(M(e))throw new p(400,"invalid_request",`${t} meets a symlink, leaves its permitted root, or is not a regular file`,"path");const n=e.code;throw n==="ENOENT"?g(`no such file: ${t}`,{received:t}):n==="EACCES"||n==="EPERM"?new f(403,"forbidden",`permission denied ${r} ${t}`):new f(500,"internal",`cannot ${r} ${t}: ${e instanceof Error?e.message:String(e)}`)}o(u,"mapFilesystemError");function S(e,t){const r=D(e);if(r?.isolated){const n=new Set(O(r.run));return{isolated:!0,reaches:o(i=>n.has(i),"reaches")}}return{isolated:!1,reaches:o(n=>P(e,t,n,t),"reaches")}}o(S,"runConfinement");function y(e,t,r){const n=e.principal;if(n.class==="forwarded"||n.class==="machine")throw new f(403,"permission_error","this operation is not available to the caller");const i=n.class==="person"?null:n.class==="app"?{app:n.app,resolved:n.scopes,launched:null}:n.class==="cron"?{app:n.app,resolved:w(n),launched:n.scopes}:{app:n.app,resolved:w(n),launched:n.scopes,run:S(n.node,n.app)},s=N(i,t,r);if("root"in s)return s.root;throw"hidden"in s?g(`no such file: ${t}`,{received:t}):new p(403,"scope_missing",s.missing?`missing scope ${s.missing}`:`no permission names ${t}`,void 0,void 0,s.missing??void 0)}o(y,"rootFor");function W(e,t,r){let n;try{n=z(e,t,q.O_RDONLY)}catch(i){return u(i,t,"reading")}try{const i=B(n);if(i.isDirectory())throw c(`file peek path is a directory: ${t}`,{received:t});const s=Buffer.allocUnsafe(Math.min(i.size,m)+1),d=T(n,s,0,s.length,0),b=d>m,a=s.subarray(0,Math.min(d,m)).toString(r);return{path:t,content:a,truncated:b}}catch(i){return u(i,t,"reading")}finally{_(n)}}o(W,"readHead");function Y(e){const t=h(e.query.get("path"),"peek");return{status:200,body:W(y(e,t,"read"),t,$(e.query.get("encoding")))}}o(Y,"handlePeek");function Z(e){return e.length%4===0&&/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e)}o(Z,"isBase64");function j(e){if(typeof e!="object"||e===null||Array.isArray(e))throw c("file write requires an object body");const t=e,r=h(typeof t.path=="string"?t.path:null,"write");if(typeof t.content!="string")throw c("file write requires a string `content` body field");const n=$(t.encoding);if(n==="base64"&&!Z(t.content))throw c("base64 file content must be valid base64");return{path:r,content:t.content,encoding:n}}o(j,"parseWriteBody");function G(e,t,r){if(r.byteLength>E)throw new f(413,"file_too_large",`file content exceeds the ${E} byte limit`);try{return F(e,t,r,{mode:process.platform==="linux"?432:384,atomic:!0}),{path:t,bytes_written:r.byteLength}}catch(n){return u(n,t,"writing")}}o(G,"writeAtomically");function U(e){const{path:t,content:r,encoding:n}=j(e.body);return{status:200,body:G(y(e,t,"rw"),t,Buffer.from(r,n))}}o(U,"handleWrite");function X(e){if(e===null)return C;const t=Number(e);if(!Number.isInteger(t)||t<1)throw c("file list limit must be a positive integer",{received:e});return t}o(X,"parseLimit");function H(e){const t=h(e.query.get("path"),"list"),r=X(e.query.get("limit")),n=y(e,t,"read");let i;try{i=k(n,t,r+1)}catch(a){return u(a,t,"listing")}const s=e.principal;if(s.class==="broker"&&v(t)===I(s.app).nodes){const a=S(s.node,s.app);i=i.filter(({name:l})=>a.reaches(l))}const d=i.slice(0,r).map(({name:a,stat:l})=>({name:a,type:l.isFile()?"file":l.isDirectory()?"dir":"other",size:l.size,modified:l.mtime.toISOString()}));return{status:200,body:{path:t,entries:d,truncated:i.length>r}}}o(H,"handleList");const ce=[{method:"GET",pattern:"/v1/files/peek",scope:"crtr:act",handler:Y},{method:"POST",pattern:"/v1/files/write",scope:"crtr:act",handler:U},{method:"GET",pattern:"/v1/files/list",scope:"crtr:act",handler:H}];export{ce as fileRoutes};
+var q=Object.defineProperty;var o=(e,t)=>q(e,"name",{value:t,configurable:!0});import{closeSync as B,constants as T,fstatSync as v,readSync as R}from"node:fs";import{isAbsolute as I,relative as L,resolve as b,sep as F}from"node:path";import{filterAsync as M}from"../../../core/async-array.js";import{appSpace as g}from"../../../core/layout.js";import{ApiError as d}from"../../../api/index.js";import{notFound as E,usage as a}from"../../../core/errors.js";import{InputError as k}from"../../../core/io.js";import{RunError as p}from"../../../core/runs/operations.js";import{isBeneathRefusal as z,listBeneath as N,openBeneath as P,writeFileBeneath as O}from"../../../core/spaces/open-beneath.js";import{fileRoot as C}from"../../../core/spaces/permissions.js";import{nodeMayReach as D,runNodeIds as W,runPlace as Y}from"../../../core/runs/confinement.js";import{resolvedScopes as $}from"../router.js";const h=512*1024,S=1024*1024,Z=1e3;function y(e,t){if(e===null||e==="")throw a(`a file ${t} requires a \`path\` ${t==="write"?"body field":"query param"}`);if(!I(e))throw a(`file ${t} path must be absolute`,{received:e});return e}o(y,"requireAbsolutePath");function A(e){if(e==null)return"utf8";if(e==="utf8"||e==="base64")return e;throw a("encoding must be `utf8` or `base64`",{received:e})}o(A,"parseEncoding");function m(e,t,r){if(e instanceof d||e instanceof k||e instanceof p)throw e;if(z(e))throw new p(400,"invalid_request",`${t} meets a symlink, leaves its permitted root, or is not a regular file`,"path");const n=e.code;throw n==="ENOENT"?E(`no such file: ${t}`,{received:t}):n==="EACCES"||n==="EPERM"?new d(403,"forbidden",`permission denied ${r} ${t}`):new d(500,"internal",`cannot ${r} ${t}: ${e instanceof Error?e.message:String(e)}`)}o(m,"mapFilesystemError");async function _(e,t){const r=await Y(e);if(r?.isolated){const n=new Set(await W(r.run));return{isolated:!0,reaches:o(async i=>n.has(i),"reaches")}}return{isolated:!1,reaches:o(async n=>await D(e,t,n,t),"reaches")}}o(_,"runConfinement");async function j(e,t,r){const{isolated:n,reaches:i}=await _(e,t),[s,c]=L(g(t).root,b(r)).split(F),u=s==="nodes"&&c?await i(c):!1;return{isolated:n,reaches:o(()=>u,"reaches")}}o(j,"runConfinementFor");async function w(e,t,r){const n=e.principal;if(n.class==="forwarded"||n.class==="machine")throw new d(403,"permission_error","this operation is not available to the caller");const i=n.class==="person"?null:n.class==="app"?{app:n.app,resolved:n.scopes,launched:null}:n.class==="cron"?{app:n.app,resolved:await $(n),launched:n.scopes}:{app:n.app,resolved:await $(n),launched:n.scopes,run:await j(n.node,n.app,t)},s=C(i,t,r);if("root"in s)return s.root;throw"hidden"in s?E(`no such file: ${t}`,{received:t}):new p(403,"scope_missing",s.missing?`missing scope ${s.missing}`:`no permission names ${t}`,void 0,void 0,s.missing??void 0)}o(w,"rootFor");function G(e,t,r){let n;try{n=P(e,t,T.O_RDONLY)}catch(i){return m(i,t,"reading")}try{const i=v(n);if(i.isDirectory())throw a(`file peek path is a directory: ${t}`,{received:t});const s=Buffer.allocUnsafe(Math.min(i.size,h)+1),c=R(n,s,0,s.length,0),u=c>h,l=s.subarray(0,Math.min(c,h)).toString(r);return{path:t,content:l,truncated:u}}catch(i){return m(i,t,"reading")}finally{B(n)}}o(G,"readHead");async function U(e){const t=y(e.query.get("path"),"peek");return{status:200,body:G(await w(e,t,"read"),t,A(e.query.get("encoding")))}}o(U,"handlePeek");function X(e){return e.length%4===0&&/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e)}o(X,"isBase64");function H(e){if(typeof e!="object"||e===null||Array.isArray(e))throw a("file write requires an object body");const t=e,r=y(typeof t.path=="string"?t.path:null,"write");if(typeof t.content!="string")throw a("file write requires a string `content` body field");const n=A(t.encoding);if(n==="base64"&&!X(t.content))throw a("base64 file content must be valid base64");return{path:r,content:t.content,encoding:n}}o(H,"parseWriteBody");function K(e,t,r){if(r.byteLength>S)throw new d(413,"file_too_large",`file content exceeds the ${S} byte limit`);try{return O(e,t,r,{mode:process.platform==="linux"?432:384,atomic:!0}),{path:t,bytes_written:r.byteLength}}catch(n){return m(n,t,"writing")}}o(K,"writeAtomically");async function J(e){const{path:t,content:r,encoding:n}=H(e.body);return{status:200,body:K(await w(e,t,"rw"),t,Buffer.from(r,n))}}o(J,"handleWrite");function Q(e){if(e===null)return Z;const t=Number(e);if(!Number.isInteger(t)||t<1)throw a("file list limit must be a positive integer",{received:e});return t}o(Q,"parseLimit");async function V(e){const t=y(e.query.get("path"),"list"),r=Q(e.query.get("limit")),n=await w(e,t,"read");let i;try{i=N(n,t,r+1)}catch(l){return m(l,t,"listing")}const s=e.principal;if(s.class==="broker"&&b(t)===g(s.app).nodes){const l=await _(s.node,s.app);i=await M(i,async({name:f})=>await l.reaches(f))}const c=i.slice(0,r).map(({name:l,stat:f})=>({name:l,type:f.isFile()?"file":f.isDirectory()?"dir":"other",size:f.size,modified:f.mtime.toISOString()}));return{status:200,body:{path:t,entries:c,truncated:i.length>r}}}o(V,"handleList");const ue=[{method:"GET",pattern:"/v1/files/peek",scope:"crtr:act",handler:U},{method:"POST",pattern:"/v1/files/write",scope:"crtr:act",handler:J},{method:"GET",pattern:"/v1/files/list",scope:"crtr:act",handler:V}];export{ue as fileRoutes};

package/dist/daemon/api/handlers/focus.js

@@ -1 +1 @@
-var r=Object.defineProperty;var o=(n,e)=>r(n,"name",{value:e,configurable:!0});import{focusByPane as i,focusOf as d,listFocuses as a,registerViewerFocus as c}from"../../../core/runtime/placement.js";import{closeFocusRow as f,setFocusPane as p}from"../../../core/canvas/focuses.js";import{usage as s}from"../../../core/errors.js";import{ownerOnly as l}from"../router.js";function u(n){return n===null?null:{focus_id:n.focus_id,pane:n.pane,session:n.session,node_id:n.node_id}}o(u,"toFocusDTO");function y(){return{status:200,body:a().map(e=>u(e))}}o(y,"handleListFocuses");function h(n){const e=n.query.get("node_id");if(e===null||e==="")throw s("focuses/by-node requires a node_id query param");return{status:200,body:u(d(e))}}o(h,"handleFocusByNode");function m(n){const e=n.query.get("pane");if(e===null||e==="")throw s("focuses/by-pane requires a pane query param");return{status:200,body:u(i(e))}}o(m,"handleFocusByPane");function _(n){if(typeof n!="object"||n===null)throw s("register-focus body must be a JSON object");const e=n;if(typeof e.node_id!="string"||e.node_id==="")throw s("node_id is required");if(typeof e.pane!="string"||e.pane==="")throw s("pane is required");return{node_id:e.node_id,pane:e.pane,session:typeof e.session=="string"?e.session:null,window:typeof e.window=="string"?e.window:null}}o(_,"parseRegisterBody");function b(n){const e=_(n.body),t=c(e.node_id,e.pane,e.session,e.window);return{status:200,body:u(t)}}o(b,"handleRegisterFocus");function w(n){if(typeof n!="object"||n===null)throw s("set-focus-pane body must be a JSON object");const e=n;return{pane:typeof e.pane=="string"?e.pane:null,session:typeof e.session=="string"?e.session:null}}o(w,"parseSetPaneBody");function g(n){const e=n.params.focus_id;if(e===void 0||e==="")throw s("focus_id is required");const t=w(n.body);return p(e,t.pane,t.session),{status:204}}o(g,"handleSetFocusPane");function q(n){const e=n.params.focus_id;if(e===void 0||e==="")throw s("focus_id is required");return f(e),{status:204}}o(q,"handleCloseFocus");const O=l([{method:"GET",pattern:"/v1/focuses",handler:y},{method:"POST",pattern:"/v1/focuses",handler:b},{method:"GET",pattern:"/v1/focuses/by-node",handler:h},{method:"GET",pattern:"/v1/focuses/by-pane",handler:m},{method:"PATCH",pattern:"/v1/focuses/:focus_id",handler:g},{method:"DELETE",pattern:"/v1/focuses/:focus_id",handler:q}]);export{O as focusRoutes};
+var u=Object.defineProperty;var s=(n,e)=>u(n,"name",{value:e,configurable:!0});import{focusByPane as r,focusOf as a,listFocuses as d,registerViewerFocus as c}from"../../../core/runtime/placement.js";import{closeFocusRow as f,setFocusPane as p}from"../../../core/canvas/focuses.js";import{usage as o}from"../../../core/errors.js";import{ownerOnly as l}from"../router.js";function i(n){return n===null?null:{focus_id:n.focus_id,pane:n.pane,session:n.session,node_id:n.node_id}}s(i,"toFocusDTO");async function y(){return{status:200,body:(await d()).map(e=>i(e))}}s(y,"handleListFocuses");async function h(n){const e=n.query.get("node_id");if(e===null||e==="")throw o("focuses/by-node requires a node_id query param");return{status:200,body:i(await a(e))}}s(h,"handleFocusByNode");async function w(n){const e=n.query.get("pane");if(e===null||e==="")throw o("focuses/by-pane requires a pane query param");return{status:200,body:i(await r(e))}}s(w,"handleFocusByPane");function m(n){if(typeof n!="object"||n===null)throw o("register-focus body must be a JSON object");const e=n;if(typeof e.node_id!="string"||e.node_id==="")throw o("node_id is required");if(typeof e.pane!="string"||e.pane==="")throw o("pane is required");return{node_id:e.node_id,pane:e.pane,session:typeof e.session=="string"?e.session:null,window:typeof e.window=="string"?e.window:null}}s(m,"parseRegisterBody");async function _(n){const e=m(n.body),t=await c(e.node_id,e.pane,e.session,e.window);return{status:200,body:i(t)}}s(_,"handleRegisterFocus");function b(n){if(typeof n!="object"||n===null)throw o("set-focus-pane body must be a JSON object");const e=n;return{pane:typeof e.pane=="string"?e.pane:null,session:typeof e.session=="string"?e.session:null}}s(b,"parseSetPaneBody");async function g(n){const e=n.params.focus_id;if(e===void 0||e==="")throw o("focus_id is required");const t=b(n.body);return await p(e,t.pane,t.session),{status:204}}s(g,"handleSetFocusPane");async function q(n){const e=n.params.focus_id;if(e===void 0||e==="")throw o("focus_id is required");return await f(e),{status:204}}s(q,"handleCloseFocus");const O=l([{method:"GET",pattern:"/v1/focuses",handler:y},{method:"POST",pattern:"/v1/focuses",handler:_},{method:"GET",pattern:"/v1/focuses/by-node",handler:h},{method:"GET",pattern:"/v1/focuses/by-pane",handler:w},{method:"PATCH",pattern:"/v1/focuses/:focus_id",handler:g},{method:"DELETE",pattern:"/v1/focuses/:focus_id",handler:q}]);export{O as focusRoutes};

package/dist/daemon/api/handlers/health.js

@@ -1,9 +1,9 @@
-var u=Object.defineProperty;var o=(e,t)=>u(e,"name",{value:t,configurable:!0});import{prepared as r}from"../../../core/sqlite-statements.js";import{openDb as s}from"../../../core/canvas/db.js";import{apiSocketPath as c}from"../../../core/canvas/paths.js";import{currentVersion as d}from"../../../core/self-update.js";import{API_VERSION as p}from"../../../api/index.js";import{DEFAULT_INTERVAL_MS as l}from"../../supervise-cadence.js";import{isPidPresent as _}from"../../../core/canvas/pid.js";import{boundDaemonControl as i}from"../../control.js";import{dueReport as m}from"../../due.js";import{runtimeReadiness as h}from"../../readiness.js";import{processGeneration as f}from"../../../commands/sys/shared.js";const E=l;function a(){try{return r(s(),"SELECT 1 FROM nodes LIMIT 1").get(),!0}catch{return!1}}o(a,"canvasAccessible");function T(){const e={},t=r(s(),`
+var i=Object.defineProperty;var e=(a,t)=>i(a,"name",{value:t,configurable:!0});import{openDb as n}from"../../../core/canvas/db.js";import{apiSocketPath as c}from"../../../core/canvas/paths.js";import{currentVersion as u}from"../../../core/self-update.js";import{API_VERSION as d}from"../../../api/index.js";import{DEFAULT_INTERVAL_MS as p}from"../../supervise-cadence.js";import{isPidPresent as l}from"../../../core/canvas/pid.js";import{boundDaemonControl as r}from"../../control.js";import{dueReport as _}from"../../due.js";import{runtimeReadiness as m}from"../../readiness.js";import{processGeneration as h}from"../../../commands/sys/shared.js";const w=p;async function s(){try{return await(await n()).prepare("SELECT 1 FROM nodes LIMIT 1").get(),!0}catch{return!1}}e(s,"canvasAccessible");async function f(){const a={},t=await(await n()).prepare(`
     SELECT status, COUNT(*) AS count
     FROM node_rows
     WHERE node_id NOT IN (SELECT node_id FROM warm_pool)
     GROUP BY status
-  `).all();for(const n of t)e[n.status]=n.count;return e}o(T,"nodeCounts");function b(){return r(s(),`
+  `).all();for(const o of t)a[o.status]=o.count;return a}e(f,"nodeCounts");async function y(){return(await(await n()).prepare(`
     SELECT pi_pid
     FROM node_rows
     WHERE node_id NOT IN (SELECT node_id FROM warm_pool)
@@ -11,4 +11,4 @@ var u=Object.defineProperty;var o=(e,t)=>u(e,"name",{value:t,configurable:!0});i
       AND pi_pid IS NOT NULL
       AND turn_open_at IS NOT NULL
       AND turn_closed_at IS NULL
-  `).all().filter(t=>_(t.pi_pid)).length}o(b,"busyNodeCount");function N(){const e=a(),t=i()?.startupBlock()??null,n={ok:e&&t===null,daemon_up:!0,store_accessible:e,brokers_reconciled:t===null,startup_phase:t?.phase??"ready",...t===null?{}:{startup_blocked:t.message}};return{status:n.ok?200:503,body:n}}o(N,"handleHealthz");function L(){const e=h();return{status:e.ready?200:503,body:e}}o(L,"handleReady");function R(e){if(!a())throw{status:503,code:"store_unavailable",message:"canvas store is inaccessible"};return{status:200,body:{daemon_pid:process.pid,tick_interval_ms:E,node_counts:T(),busy_node_count:b(),listeners:{socket_path:c(),tcp:e()},runtime_version:d(),generation_id:f()?.id??null,api_version:p,startup_phase:i()?.startupBlock()?.phase??"ready"}}}o(R,"handleStatus");function S(){if(!a())throw{status:503,code:"store_unavailable",message:"canvas store is inaccessible"};return{status:200,body:m()}}o(S,"handleDue");function G(e){return[{method:"GET",pattern:"/healthz",handler:o(t=>N(),"handler")},{method:"GET",pattern:"/v1/ready",handler:o(t=>L(),"handler")},{method:"GET",pattern:"/v1/status",handler:o(t=>R(e),"handler")},{method:"GET",pattern:"/v1/due",handler:o(t=>S(),"handler")}]}o(G,"healthRoutes");export{G as healthRoutes};
+  `).all()).filter(t=>l(t.pi_pid)).length}e(y,"busyNodeCount");async function E(){const a=await s(),t=r()?.startupBlock()??null,o={ok:a&&t===null,daemon_up:!0,store_accessible:a,brokers_reconciled:t===null,startup_phase:t?.phase??"ready",...t===null?{}:{startup_blocked:t.message}};return{status:o.ok?200:503,body:o}}e(E,"handleHealthz");async function T(){const a=await m();return{status:a.ready?200:503,body:a}}e(T,"handleReady");async function b(a){if(!await s())throw{status:503,code:"store_unavailable",message:"canvas store is inaccessible"};return{status:200,body:{daemon_pid:process.pid,tick_interval_ms:w,node_counts:await f(),busy_node_count:await y(),listeners:{socket_path:c(),tcp:a()},runtime_version:u(),generation_id:h()?.id??null,api_version:d,startup_phase:r()?.startupBlock()?.phase??"ready"}}}e(b,"handleStatus");async function N(){if(!await s())throw{status:503,code:"store_unavailable",message:"canvas store is inaccessible"};return{status:200,body:await _()}}e(N,"handleDue");function g(a){return[{method:"GET",pattern:"/healthz",handler:e(async t=>await E(),"handler")},{method:"GET",pattern:"/v1/ready",handler:e(async t=>await T(),"handler")},{method:"GET",pattern:"/v1/status",handler:e(async t=>await b(a),"handler")},{method:"GET",pattern:"/v1/due",handler:e(async t=>await N(),"handler")}]}e(g,"healthRoutes");export{g as healthRoutes};

package/dist/daemon/api/handlers/hook-exec.js

@@ -1 +1 @@
-var x=Object.defineProperty;var p=(o,n)=>x(o,"name",{value:n,configurable:!0});import{realpathSync as E}from"node:fs";import{isAbsolute as _,relative as k,sep as h}from"node:path";import{ApiError as i}from"../../../api/index.js";import{coreHookCatalog as T}from"../../../build-root.js";import{getNode as O}from"../../../core/canvas/canvas.js";import{isSafeNodeId as P,nodeAgentDir as A}from"../../../core/canvas/paths.js";import{discoverHookRegistry as I}from"../../../core/command-hooks/discovery.js";import{EXEC_HOOK_TIMEOUT_MS as S}from"../../../core/command-hooks/transport/exec-invoke.js";import{buildAppProcessEnv as H}from"../../../core/runtime/spawn-env.js";import{compileLaunch as N}from"../../../core/spaces/mounts.js";import{appProcessSandboxed as M,launchAppProcess as R}from"../../../core/spaces/process.js";import{requireCurrentExecution as B}from"./broker-recovery.js";function y(o,n,t){const r=o.params.id;if(r===void 0?o.principal.class!=="person":!P(r)||o.principal.class!=="broker"||o.principal.node!==r)throw new i(403,"permission_error","hook execution requires its current node, or the person for the global route");const e=r===void 0?null:O(r);if(r!==void 0&&!e)throw new i(404,"not_found","node not found");if(r!==void 0&&B(r,n),typeof t!="string"||!_(t))throw new i(400,"invalid_request","hook cwd must be absolute");if(!M())throw new i(400,"invalid_request","hook routes require the root launcher");let a;try{a=E(t)}catch(u){throw u.code==="ENOENT"?new i(400,"invalid_request","hook cwd does not exist"):u}if(e){if(e.isolated===!0){const d=A(r,e.grantee??"app:terminal"),s=k(d,a);if(s===".."||s.startsWith(`..${h}`)||s.startsWith(h))throw new i(403,"permission_error","hook cwd is outside the isolated node folder")}const u=N({nodeId:r,app:o.principal.class==="broker"?o.principal.app:"app:terminal",sub:e.sub??"user:local",grantId:e.grant_id??null,scopes:e.scopes??null,isolated:e.isolated===!0,command:[],env:{},auditMissing:p(()=>{},"auditMissing")}),f=p(d=>{const s=k(d,a);return s===""||s!==".."&&!s.startsWith(`..${h}`)&&!_(s)},"within");if(!u.mounts.some(d=>f(d.source)))throw new i(403,"permission_error","hook cwd is outside the node mounts")}return{id:r,node:e,cwd:a,app:e&&o.principal.class==="broker"?o.principal.app:"app:terminal"}}p(y,"checkedContext");async function b(o,n){const t=I(await T(),o,n);if(!t.valid)throw new i(422,"hook_registry_invalid","the effective hook registry is invalid");return t}p(b,"currentRegistry");async function C(o){const{node:n,cwd:t}=y(o,o.query.get("expected_execution_id"),o.query.get("cwd"));return{status:200,body:{hooks:(await b(t,n.profile_id??null)).hooks.filter(e=>e.plugin.scope==="user").map(e=>({id:e.id,plugin:e.plugin.name,target:e.target,phase:e.phase,op:e.op,description:e.description,effects:e.effects,declarationIndex:e.declarationIndex}))}}}p(C,"handleHookPlan");async function v(o){const n=o.body;if(!n||typeof n!="object"||Array.isArray(n))throw new i(400,"invalid_request","hook execution requires a JSON body");const t=n,{id:r,node:e,cwd:a,app:u}=y(o,t.expected_execution_id,t.cwd);if(typeof t.hook_id!="string"||typeof t.request!="string")throw new i(400,"invalid_request","hook execution requires hook_id and request");const d=(await b(a,e?.profile_id??null)).hooks.find(c=>c.id===t.hook_id);if(!d)throw new i(404,"hook_not_registered","hook id is not registered for this cwd");const s=H(a,e?.profile_id??null,u),m=await R({...r===void 0?{}:{nodeId:r},app:u,command:[d.executable,"--crtr-hook-protocol","1"],cwd:a,pluginRoot:d.plugin.root,env:s,stdin:t.request,stdoutBytes:10*1024*1024,stderrBytes:64*1024});let l,w=!1;try{const c=await Promise.race([m.completion,new Promise((W,g)=>{l=setTimeout(()=>{w=!0,m.stop().then(()=>g(new i(504,"hook_timeout","hook executable timed out")),q=>g(q))},S)})]);if(w)throw new i(504,"hook_timeout","hook executable timed out");if(c.stdoutTruncated)throw new i(502,"hook_output_limit","hook stdout exceeded the 10 MiB cap");return{status:200,body:{stdout:c.stdout,status:c.exitCode,signal:c.signal}}}finally{l&&clearTimeout(l)}}p(v,"handleHookExec");const Y=[{method:"GET",pattern:"/v1/nodes/:id/hooks/plan",handler:C},{method:"POST",pattern:"/v1/nodes/:id/hooks/exec",handler:v},{method:"POST",pattern:"/v1/hooks/exec",handler:v}];export{Y as hookExecRoutes};
+var x=Object.defineProperty;var c=(o,n)=>x(o,"name",{value:n,configurable:!0});import{realpathSync as E}from"node:fs";import{isAbsolute as y,relative as _,sep as h}from"node:path";import{ApiError as r}from"../../../api/index.js";import{coreHookCatalog as T}from"../../../build-root.js";import{getNode as O}from"../../../core/canvas/canvas.js";import{isSafeNodeId as P,nodeAgentDir as A}from"../../../core/canvas/paths.js";import{discoverHookRegistry as I}from"../../../core/command-hooks/discovery.js";import{EXEC_HOOK_TIMEOUT_MS as S}from"../../../core/command-hooks/transport/exec-invoke.js";import{buildAppProcessEnv as H}from"../../../core/runtime/spawn-env.js";import{compileLaunch as N}from"../../../core/spaces/mounts.js";import{appProcessSandboxed as M,launchAppProcess as R}from"../../../core/spaces/process.js";import{requireCurrentExecution as B}from"./broker-recovery.js";async function k(o,n,t){const i=o.params.id;if(i===void 0?o.principal.class!=="person":!P(i)||o.principal.class!=="broker"||o.principal.node!==i)throw new r(403,"permission_error","hook execution requires its current node, or the person for the global route");const e=i===void 0?null:await O(i);if(i!==void 0&&!e)throw new r(404,"not_found","node not found");if(i!==void 0&&await B(i,n),typeof t!="string"||!y(t))throw new r(400,"invalid_request","hook cwd must be absolute");if(!M())throw new r(400,"invalid_request","hook routes require the root launcher");let d;try{d=E(t)}catch(u){throw u.code==="ENOENT"?new r(400,"invalid_request","hook cwd does not exist"):u}if(e){if(e.isolated===!0){const a=A(i,e.grantee??"app:terminal"),s=_(a,d);if(s===".."||s.startsWith(`..${h}`)||s.startsWith(h))throw new r(403,"permission_error","hook cwd is outside the isolated node folder")}const u=await N({nodeId:i,app:o.principal.class==="broker"?o.principal.app:"app:terminal",sub:e.sub??"user:local",grantId:e.grant_id??null,scopes:e.scopes??null,isolated:e.isolated===!0,command:[],env:{},auditMissing:c(()=>{},"auditMissing")}),f=c(a=>{const s=_(a,d);return s===""||s!==".."&&!s.startsWith(`..${h}`)&&!y(s)},"within");if(!u.mounts.some(a=>f(a.source)))throw new r(403,"permission_error","hook cwd is outside the node mounts")}return{id:i,node:e,cwd:d,app:e&&o.principal.class==="broker"?o.principal.app:"app:terminal"}}c(k,"checkedContext");async function b(o,n){const t=I(await T(),o,n);if(!t.valid)throw new r(422,"hook_registry_invalid","the effective hook registry is invalid");return t}c(b,"currentRegistry");async function C(o){const{node:n,cwd:t}=await k(o,o.query.get("expected_execution_id"),o.query.get("cwd"));return{status:200,body:{hooks:(await b(t,n.profile_id??null)).hooks.filter(e=>e.plugin.scope==="user").map(e=>({id:e.id,plugin:e.plugin.name,target:e.target,phase:e.phase,op:e.op,description:e.description,effects:e.effects,declarationIndex:e.declarationIndex}))}}}c(C,"handleHookPlan");async function v(o){const n=o.body;if(!n||typeof n!="object"||Array.isArray(n))throw new r(400,"invalid_request","hook execution requires a JSON body");const t=n,{id:i,node:e,cwd:d,app:u}=await k(o,t.expected_execution_id,t.cwd);if(typeof t.hook_id!="string"||typeof t.request!="string")throw new r(400,"invalid_request","hook execution requires hook_id and request");const a=(await b(d,e?.profile_id??null)).hooks.find(p=>p.id===t.hook_id);if(!a)throw new r(404,"hook_not_registered","hook id is not registered for this cwd");const s=H(d,e?.profile_id??null,u),m=await R({...i===void 0?{}:{nodeId:i},app:u,command:[a.executable,"--crtr-hook-protocol","1"],cwd:d,pluginRoot:a.plugin.root,env:s,stdin:t.request,stdoutBytes:10*1024*1024,stderrBytes:64*1024});let l,w=!1;try{const p=await Promise.race([m.completion,new Promise((W,g)=>{l=setTimeout(()=>{w=!0,m.stop().then(()=>g(new r(504,"hook_timeout","hook executable timed out")),q=>g(q))},S)})]);if(w)throw new r(504,"hook_timeout","hook executable timed out");if(p.stdoutTruncated)throw new r(502,"hook_output_limit","hook stdout exceeded the 10 MiB cap");return{status:200,body:{stdout:p.stdout,status:p.exitCode,signal:p.signal}}}finally{l&&clearTimeout(l)}}c(v,"handleHookExec");const Y=[{method:"GET",pattern:"/v1/nodes/:id/hooks/plan",handler:C},{method:"POST",pattern:"/v1/nodes/:id/hooks/exec",handler:v},{method:"POST",pattern:"/v1/hooks/exec",handler:v}];export{Y as hookExecRoutes};

package/dist/daemon/api/handlers/human-requests.js

@@ -1 +1 @@
-var P=Object.defineProperty;var o=(e,t)=>P(e,"name",{value:t,configurable:!0});import{statSync as N}from"node:fs";import{isAbsolute as T}from"node:path";import{ApiError as s}from"../../../api/index.js";import{readDaemonActionById as C}from"../../../core/canvas/daemon-actions.js";import{isSafeNodeId as I}from"../../../core/canvas/paths.js";import{getNode as b}from"../../../core/canvas/canvas.js";import{assertScope as $}from"../../../core/scopes.js";import{resolvePageComponents as g}from"../../../core/config.js";import{resolveHumanAction as D}from"../../../core/human-actions.js";import{HUMAN_ACTION_NAME_PATTERN as x}from"../../../core/human/action-binding.js";import{createPageRequest as J,getRequest as F}from"../../../core/human/requests.js";import{preparePageSource as M}from"../../../core/human/page-authoring.js";import{PageCompilerError as B}from"../../../core/human/page-errors.js";import{publishPage as G,validatePageTicketResponses as H}from"../../../core/human/tickets.js";import{cancelHumanTicket as L,resolvePageTicket as U}from"../../human/finish.js";import{inboxPageProjection as K}from"./inbox-page.js";import{appOf as X}from"../router.js";const z=1e3,q=200,m={placement:"inline",inbox:!0,reply:!1},v=["sessionName","askedBy","emittedAt","profileName","nodeId"];function c(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}o(c,"isPlainObject");function l(e,t,n){for(const r of Object.keys(e))if(!t.includes(r))throw new s(400,"invalid_request",`unexpected field in ${n}: ${r}`)}o(l,"requireNoExtraKeys");function i(e){return new s(400,"invalid_request",e)}o(i,"invalid");function w(e){if(!c(e))throw i("`page` must be an object");if(l(e,["dialect","source"],"`page`"),e.dialect!=="jsx"&&e.dialect!=="html")throw i('`page.dialect` must be "jsx" or "html"');if(typeof e.source!="string"||e.source.trim()==="")throw i("`page.source` must be the authored page text");return{dialect:e.dialect,source:e.source}}o(w,"validatePage");function S(e,t){const n=e??t;if(n!=="inline"&&n!=="panel")throw i('`delivery.placement` must be "inline" or "panel"');return n}o(S,"validatePlacement");function V(e,t){if(e===void 0)return m;if(!c(e))throw i("`delivery` must be an object");l(e,["placement","inbox","reply"],"`delivery`");const n=e.inbox??m.inbox,r=e.reply??m.reply;if(typeof n!="boolean")throw i("`delivery.inbox` must be boolean");if(typeof r!="boolean")throw i("`delivery.reply` must be boolean");if(r&&t===null)throw i("`delivery.reply` requires `requester_node_id`");return{placement:S(e.placement,m.placement),inbox:n,reply:r}}o(V,"validateCreateDelivery");function Y(e,t){if(e===void 0)return t;if(!c(e))throw i("`delivery` must be an object");return l(e,["placement"],"`delivery`"),{...t,placement:S(e.placement,t.placement)}}o(Y,"validateReplaceDelivery");function Q(e){if(e===void 0)return;if(!c(e))throw i("`source` must be an object");l(e,v,"`source`");const t={};for(const n of v){const r=e[n];if(r!==void 0){if(typeof r!="string"||r==="")throw i(`\`source.${n}\` must be a nonempty string`);t[n]=r}}return t}o(Q,"validateSource");function W(e){if(typeof e!="string"||e==="")throw i("`creator_cwd` is required");if(!T(e))throw i("`creator_cwd` must be an absolute path");try{if(!N(e).isDirectory())throw i(`\`creator_cwd\` is not a directory: ${e}`)}catch(t){throw t instanceof s?t:i(`\`creator_cwd\` does not exist: ${e}`)}return e}o(W,"validateCreatorCwd");function Z(e){if(e!==void 0){if(!c(e))throw i("`action` must be an object");if(l(e,["name","payload"],"`action`"),typeof e.name!="string"||!x.test(e.name))throw i("`action.name` must be a declared action name");return{name:e.name,payload:e.payload??null}}}o(Z,"validateActionSelection");function ee(e){if(e==null)return null;if(typeof e!="string"||!I(e))throw i("`requester_node_id` must be a safe node id or null");return e}o(ee,"validateRequesterNodeId");function te(e){if(!c(e))throw i("request body is required");l(e,["page","delivery","source","requester_node_id","creator_cwd","action"],"the request body");const t=Q(e.source),n=ee(e.requester_node_id),r=Z(e.action);return{page:w(e.page),delivery:V(e.delivery,n),...t===void 0?{}:{source:t},requesterNodeId:n,creatorCwd:W(e.creator_cwd),...r===void 0?{}:{action:r}}}o(te,"validateCreateRequest");function ne(e,t){if(!c(e))throw i("request body is required");return l(e,["page","delivery"],"the request body"),{page:w(e.page),delivery:Y(e.delivery,t)}}o(ne,"validateReplaceRequest");function _(e,t,n){if(e!==void 0){if(typeof e!="string"||e.trim()===""||e.length>n)throw i(`\`${t}\` must be nonempty after trim and at most ${n} characters`);return e}}o(_,"optionalBoundedString");function re(e){if(!c(e))throw i("request body is required");if(l(e,["responses","actor"],"the request body"),!c(e.responses))throw i("`responses` must be an object");const t=_(e.actor,"actor",q);return{responses:e.responses,...t===void 0?{}:{actor:t}}}o(re,"validateRespondRequest");function oe(e){if(e===void 0)return{};if(!c(e))throw i("request body must be an object");l(e,["reason","actor"],"the request body");const t=_(e.reason,"reason",z),n=_(e.actor,"actor",q);return{...t===void 0?{}:{reason:t},...n===void 0?{}:{actor:n}}}o(oe,"validateSettleRequest");function h(e){const t=e.params.request_id;if(typeof t!="string"||t==="")throw i("request id is required");return t}o(h,"requestId");function f(e){const t=F(e);if(t===null||t.kind!=="page")throw new s(404,"not_found","no request with that id");return t}o(f,"requirePageRequest");function A(e){try{const t=JSON.parse(e.specification_json);if(!c(t))throw new Error("not an object");return t}catch{throw new s(500,"internal","the request specification could not be read")}}o(A,"manifest");function ie(e){if(e.result_json===null)return null;try{return JSON.parse(e.result_json)}catch{throw new s(500,"internal","the request result could not be read")}}o(ie,"terminalResult");function ae(e){if(e.action_json===null)return null;try{const t=JSON.parse(e.action_json);if(t.schema!=="crtr.human-action-binding/v1"||typeof t.name!="string")throw new Error("invalid action");return t}catch{throw new s(500,"internal","the request action could not be read")}}o(ae,"frozenAction");function se(e){return e.state!=="settled"?"pending":e.outcome==="answered"?"answered":e.outcome==="dismissed"?"dismissed":"canceled"}o(se,"requestState");function de(e){if(e.action_delivery_id===null)return{state:"none",attempt:0};const t=C(e.action_delivery_id);if(t===null)return{state:"none",attempt:0};const n=t.state==="acknowledged"?"accepted":t.state==="permanent_failed"?"permanent_failed":t.state==="handed_off"?"running":"pending",r={state:n,attempt:t.attempts};return n==="pending"&&t.nextAttemptAt!==null&&(r.next_attempt_at=new Date(t.nextAttemptAt).toISOString()),t.acknowledgedAt!==null&&(r.accepted_at=new Date(t.acknowledgedAt).toISOString()),t.failedAt!==null&&(r.permanent_failed_at=new Date(t.failedAt).toISOString()),t.lastFailure!==null&&(r.last_failure=t.lastFailure),r}o(de,"deliveryDetail");function y(e){const t=A(e),n=ie(e),r=se(e),a={request_id:e.request_id,inbox_ticket_id:e.inbox_ticket_id,request_dir:e.request_dir,kind:e.kind,state:r,title:e.title,source:t.source??{},emitted_at:t.source?.emittedAt??e.created_at};e.subtitle!==null&&(a.subtitle=e.subtitle),e.kind==="page"&&(a.page=K(e)),n!==null&&(a.settled_at=e.settled_at??e.updated_at,n.kind==="page"&&r==="answered"&&(a.responses=n.responses),n.kind==="canceled"&&n.reason!==void 0&&(a.reason=n.reason),n.kind==="page"&&n.actor!==void 0&&(a.actor=n.actor),n.kind==="canceled"&&n.actor!==void 0&&(a.actor=n.actor));const u=ae(e);return u!==null&&(a.action={name:u.name,payload:u.payload},a.delivery=de(e)),a}o(y,"requestToDTO");function k(e,t,n,r){try{return M({dialect:e,document:t,source:n,delivery:r,productKinds:g()})}catch(a){throw a instanceof B?a:i(a instanceof Error?a.message:"the page could not be prepared")}}o(k,"prepareOrReject");function ce(e){const t=te(e.body),n=t.requesterNodeId??t.source?.nodeId;if(n!=null){const d=b(n);d!==null&&$(d,"crtr:act")}let r;if(t.action!==void 0){const d=D(t.action.name,t.creatorCwd);if("kind"in d){const E=d.kind==="unknown_action"?`no action named ${d.name} is declared from ${t.creatorCwd}`:`${d.name} is declared in ${d.configOrigin} but unusable: ${d.reason}`;throw new s(400,d.kind,E)}const p=n==null?null:b(n);if(n&&!p)throw new s(404,"not_found","action requester node not found");if(p&&e.principal.class!=="person"&&p.grantee!==X(e.principal))throw new s(403,"permission_error","action requester belongs to another app");r=JSON.stringify({schema:"crtr.human-action-binding/v1",name:t.action.name,payload:t.action.payload,creatorCwd:t.creatorCwd,configOrigin:d.configOrigin,argv:d.argv,cwd:d.cwd,app:p?.grantee??(e.principal.class==="broker"?e.principal.app:"app:terminal")})}const a=k(t.page.dialect,t.page.source,t.source,t.delivery),u=J({prepared:a,requester_node_id:t.requesterNodeId,...r===void 0?{}:{action_json:r}});return{status:201,body:{request_id:u.request_id,request_dir:u.request_dir,state:"pending",...t.action===void 0?{}:{action:{name:t.action.name}},delivery_state:"none"}}}o(ce,"handleCreate");function ue(e){return{status:200,body:y(f(h(e)))}}o(ue,"handleGet");function le(e){const t=f(h(e));if(t.state==="settled")throw new s(409,"already_settled","the request already has a terminal result");const n=A(t),r=ne(e.body,n.delivery),a=k(r.page.dialect,r.page.source,n.source,r.delivery);try{G(t.request_dir,a)}catch(u){throw u instanceof Error&&u.message===`page request is not open: ${t.request_id}`?new s(409,"already_settled","the request already has a terminal result"):u}return{status:200,body:y(f(t.request_id))}}o(le,"handleReplace");function O(e){return e instanceof s?e:e instanceof Error&&e.message.includes("unknown page request")?new s(404,"not_found","no request with that id"):e instanceof Error&&e.message==="page_has_no_response_lifecycle"?new s(409,"not_settleable","this request carries no response lifecycle"):new s(500,"internal","the request could not be settled")}o(O,"settlementError");function R(e){if(e.state==="settled")throw new s(409,"already_settled","the request already has a terminal result");if(!e.settleable)throw new s(409,"not_settleable","this request carries no response lifecycle")}o(R,"requireSettleable");async function fe(e){const t=f(h(e)),n=re(e.body);R(t);try{H(t.request_dir,n.responses)}catch(r){throw i(r instanceof Error?r.message:"the response map is invalid")}try{await U(t.request_id,n.responses,n.actor===void 0?{}:{actor:n.actor})}catch(r){throw O(r)}return{status:200,body:y(f(t.request_id))}}o(fe,"handleRespond");async function j(e,t){const n=f(h(e)),r=oe(e.body);R(n);try{await L(n.request_id,{...r,disposition:t})}catch(a){throw O(a)}return{status:200,body:y(f(n.request_id))}}o(j,"settle");function pe(){return{status:200,body:{components:[...g()]}}}o(pe,"handleComponents");const Te=[{method:"GET",pattern:"/v1/human/components",handler:o(()=>pe(),"handler")},{method:"POST",pattern:"/v1/human/requests",scope:"crtr:act",handler:ce},{method:"GET",pattern:"/v1/human/requests/:request_id",handler:ue},{method:"POST",pattern:"/v1/human/requests/:request_id/replace",handler:le},{method:"POST",pattern:"/v1/human/requests/:request_id/respond",handler:fe},{method:"POST",pattern:"/v1/human/requests/:request_id/dismiss",handler:o(e=>j(e,"dismissed"),"handler")},{method:"POST",pattern:"/v1/human/requests/:request_id/cancel",handler:o(e=>j(e,"canceled"),"handler")}];export{Te as humanRequestRoutes};
+var P=Object.defineProperty;var o=(e,t)=>P(e,"name",{value:t,configurable:!0});import{statSync as N}from"node:fs";import{isAbsolute as T}from"node:path";import{ApiError as s}from"../../../api/index.js";import{readDaemonActionById as C}from"../../../core/canvas/daemon-actions.js";import{isSafeNodeId as I}from"../../../core/canvas/paths.js";import{getNode as b}from"../../../core/canvas/canvas.js";import{assertScope as $}from"../../../core/scopes.js";import{resolvePageComponents as g}from"../../../core/config.js";import{resolveHumanAction as D}from"../../../core/human-actions.js";import{HUMAN_ACTION_NAME_PATTERN as x}from"../../../core/human/action-binding.js";import{createPageRequest as J,getRequest as F}from"../../../core/human/requests.js";import{preparePageSource as M}from"../../../core/human/page-authoring.js";import{PageCompilerError as B}from"../../../core/human/page-errors.js";import{publishPage as G,validatePageTicketResponses as H}from"../../../core/human/tickets.js";import{cancelHumanTicket as L,resolvePageTicket as U}from"../../human/finish.js";import{inboxPageProjection as K}from"./inbox-page.js";import{appOf as X}from"../router.js";const z=1e3,q=200,m={placement:"inline",inbox:!0,reply:!1},v=["sessionName","askedBy","emittedAt","profileName","nodeId"];function c(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}o(c,"isPlainObject");function l(e,t,n){for(const r of Object.keys(e))if(!t.includes(r))throw new s(400,"invalid_request",`unexpected field in ${n}: ${r}`)}o(l,"requireNoExtraKeys");function i(e){return new s(400,"invalid_request",e)}o(i,"invalid");function w(e){if(!c(e))throw i("`page` must be an object");if(l(e,["dialect","source"],"`page`"),e.dialect!=="jsx"&&e.dialect!=="html")throw i('`page.dialect` must be "jsx" or "html"');if(typeof e.source!="string"||e.source.trim()==="")throw i("`page.source` must be the authored page text");return{dialect:e.dialect,source:e.source}}o(w,"validatePage");function S(e,t){const n=e??t;if(n!=="inline"&&n!=="panel")throw i('`delivery.placement` must be "inline" or "panel"');return n}o(S,"validatePlacement");function V(e,t){if(e===void 0)return m;if(!c(e))throw i("`delivery` must be an object");l(e,["placement","inbox","reply"],"`delivery`");const n=e.inbox??m.inbox,r=e.reply??m.reply;if(typeof n!="boolean")throw i("`delivery.inbox` must be boolean");if(typeof r!="boolean")throw i("`delivery.reply` must be boolean");if(r&&t===null)throw i("`delivery.reply` requires `requester_node_id`");return{placement:S(e.placement,m.placement),inbox:n,reply:r}}o(V,"validateCreateDelivery");function Y(e,t){if(e===void 0)return t;if(!c(e))throw i("`delivery` must be an object");return l(e,["placement"],"`delivery`"),{...t,placement:S(e.placement,t.placement)}}o(Y,"validateReplaceDelivery");function Q(e){if(e===void 0)return;if(!c(e))throw i("`source` must be an object");l(e,v,"`source`");const t={};for(const n of v){const r=e[n];if(r!==void 0){if(typeof r!="string"||r==="")throw i(`\`source.${n}\` must be a nonempty string`);t[n]=r}}return t}o(Q,"validateSource");function W(e){if(typeof e!="string"||e==="")throw i("`creator_cwd` is required");if(!T(e))throw i("`creator_cwd` must be an absolute path");try{if(!N(e).isDirectory())throw i(`\`creator_cwd\` is not a directory: ${e}`)}catch(t){throw t instanceof s?t:i(`\`creator_cwd\` does not exist: ${e}`)}return e}o(W,"validateCreatorCwd");function Z(e){if(e!==void 0){if(!c(e))throw i("`action` must be an object");if(l(e,["name","payload"],"`action`"),typeof e.name!="string"||!x.test(e.name))throw i("`action.name` must be a declared action name");return{name:e.name,payload:e.payload??null}}}o(Z,"validateActionSelection");function ee(e){if(e==null)return null;if(typeof e!="string"||!I(e))throw i("`requester_node_id` must be a safe node id or null");return e}o(ee,"validateRequesterNodeId");function te(e){if(!c(e))throw i("request body is required");l(e,["page","delivery","source","requester_node_id","creator_cwd","action"],"the request body");const t=Q(e.source),n=ee(e.requester_node_id),r=Z(e.action);return{page:w(e.page),delivery:V(e.delivery,n),...t===void 0?{}:{source:t},requesterNodeId:n,creatorCwd:W(e.creator_cwd),...r===void 0?{}:{action:r}}}o(te,"validateCreateRequest");function ne(e,t){if(!c(e))throw i("request body is required");return l(e,["page","delivery"],"the request body"),{page:w(e.page),delivery:Y(e.delivery,t)}}o(ne,"validateReplaceRequest");function _(e,t,n){if(e!==void 0){if(typeof e!="string"||e.trim()===""||e.length>n)throw i(`\`${t}\` must be nonempty after trim and at most ${n} characters`);return e}}o(_,"optionalBoundedString");function re(e){if(!c(e))throw i("request body is required");if(l(e,["responses","actor"],"the request body"),!c(e.responses))throw i("`responses` must be an object");const t=_(e.actor,"actor",q);return{responses:e.responses,...t===void 0?{}:{actor:t}}}o(re,"validateRespondRequest");function oe(e){if(e===void 0)return{};if(!c(e))throw i("request body must be an object");l(e,["reason","actor"],"the request body");const t=_(e.reason,"reason",z),n=_(e.actor,"actor",q);return{...t===void 0?{}:{reason:t},...n===void 0?{}:{actor:n}}}o(oe,"validateSettleRequest");function h(e){const t=e.params.request_id;if(typeof t!="string"||t==="")throw i("request id is required");return t}o(h,"requestId");async function f(e){const t=await F(e);if(t===null||t.kind!=="page")throw new s(404,"not_found","no request with that id");return t}o(f,"requirePageRequest");function A(e){try{const t=JSON.parse(e.specification_json);if(!c(t))throw new Error("not an object");return t}catch{throw new s(500,"internal","the request specification could not be read")}}o(A,"manifest");function ie(e){if(e.result_json===null)return null;try{return JSON.parse(e.result_json)}catch{throw new s(500,"internal","the request result could not be read")}}o(ie,"terminalResult");function ae(e){if(e.action_json===null)return null;try{const t=JSON.parse(e.action_json);if(t.schema!=="crtr.human-action-binding/v1"||typeof t.name!="string")throw new Error("invalid action");return t}catch{throw new s(500,"internal","the request action could not be read")}}o(ae,"frozenAction");function se(e){return e.state!=="settled"?"pending":e.outcome==="answered"?"answered":e.outcome==="dismissed"?"dismissed":"canceled"}o(se,"requestState");async function de(e){if(e.action_delivery_id===null)return{state:"none",attempt:0};const t=await C(e.action_delivery_id);if(t===null)return{state:"none",attempt:0};const n=t.state==="acknowledged"?"accepted":t.state==="permanent_failed"?"permanent_failed":t.state==="handed_off"?"running":"pending",r={state:n,attempt:t.attempts};return n==="pending"&&t.nextAttemptAt!==null&&(r.next_attempt_at=new Date(t.nextAttemptAt).toISOString()),t.acknowledgedAt!==null&&(r.accepted_at=new Date(t.acknowledgedAt).toISOString()),t.failedAt!==null&&(r.permanent_failed_at=new Date(t.failedAt).toISOString()),t.lastFailure!==null&&(r.last_failure=t.lastFailure),r}o(de,"deliveryDetail");async function y(e){const t=A(e),n=ie(e),r=se(e),a={request_id:e.request_id,inbox_ticket_id:e.inbox_ticket_id,request_dir:e.request_dir,kind:e.kind,state:r,title:e.title,source:t.source??{},emitted_at:t.source?.emittedAt??e.created_at};e.subtitle!==null&&(a.subtitle=e.subtitle),e.kind==="page"&&(a.page=await K(e)),n!==null&&(a.settled_at=e.settled_at??e.updated_at,n.kind==="page"&&r==="answered"&&(a.responses=n.responses),n.kind==="canceled"&&n.reason!==void 0&&(a.reason=n.reason),n.kind==="page"&&n.actor!==void 0&&(a.actor=n.actor),n.kind==="canceled"&&n.actor!==void 0&&(a.actor=n.actor));const u=ae(e);return u!==null&&(a.action={name:u.name,payload:u.payload},a.delivery=await de(e)),a}o(y,"requestToDTO");function k(e,t,n,r){try{return M({dialect:e,document:t,source:n,delivery:r,productKinds:g()})}catch(a){throw a instanceof B?a:i(a instanceof Error?a.message:"the page could not be prepared")}}o(k,"prepareOrReject");async function ce(e){const t=te(e.body),n=t.requesterNodeId??t.source?.nodeId;if(n!=null){const d=await b(n);d!==null&&$(d,"crtr:act")}let r;if(t.action!==void 0){const d=D(t.action.name,t.creatorCwd);if("kind"in d){const E=d.kind==="unknown_action"?`no action named ${d.name} is declared from ${t.creatorCwd}`:`${d.name} is declared in ${d.configOrigin} but unusable: ${d.reason}`;throw new s(400,d.kind,E)}const p=n==null?null:await b(n);if(n&&!p)throw new s(404,"not_found","action requester node not found");if(p&&e.principal.class!=="person"&&p.grantee!==X(e.principal))throw new s(403,"permission_error","action requester belongs to another app");r=JSON.stringify({schema:"crtr.human-action-binding/v1",name:t.action.name,payload:t.action.payload,creatorCwd:t.creatorCwd,configOrigin:d.configOrigin,argv:d.argv,cwd:d.cwd,app:p?.grantee??(e.principal.class==="broker"?e.principal.app:"app:terminal")})}const a=k(t.page.dialect,t.page.source,t.source,t.delivery),u=await J({prepared:a,requester_node_id:t.requesterNodeId,...r===void 0?{}:{action_json:r}});return{status:201,body:{request_id:u.request_id,request_dir:u.request_dir,state:"pending",...t.action===void 0?{}:{action:{name:t.action.name}},delivery_state:"none"}}}o(ce,"handleCreate");async function ue(e){return{status:200,body:await y(await f(h(e)))}}o(ue,"handleGet");async function le(e){const t=await f(h(e));if(t.state==="settled")throw new s(409,"already_settled","the request already has a terminal result");const n=A(t),r=ne(e.body,n.delivery),a=k(r.page.dialect,r.page.source,n.source,r.delivery);try{await G(t.request_dir,a)}catch(u){throw u instanceof Error&&u.message===`page request is not open: ${t.request_id}`?new s(409,"already_settled","the request already has a terminal result"):u}return{status:200,body:await y(await f(t.request_id))}}o(le,"handleReplace");function O(e){return e instanceof s?e:e instanceof Error&&e.message.includes("unknown page request")?new s(404,"not_found","no request with that id"):e instanceof Error&&e.message==="page_has_no_response_lifecycle"?new s(409,"not_settleable","this request carries no response lifecycle"):new s(500,"internal","the request could not be settled")}o(O,"settlementError");function R(e){if(e.state==="settled")throw new s(409,"already_settled","the request already has a terminal result");if(!e.settleable)throw new s(409,"not_settleable","this request carries no response lifecycle")}o(R,"requireSettleable");async function fe(e){const t=await f(h(e)),n=re(e.body);R(t);try{await H(t.request_dir,n.responses)}catch(r){throw i(r instanceof Error?r.message:"the response map is invalid")}try{await U(t.request_id,n.responses,n.actor===void 0?{}:{actor:n.actor})}catch(r){throw O(r)}return{status:200,body:await y(await f(t.request_id))}}o(fe,"handleRespond");async function j(e,t){const n=await f(h(e)),r=oe(e.body);R(n);try{await L(n.request_id,{...r,disposition:t})}catch(a){throw O(a)}return{status:200,body:await y(await f(n.request_id))}}o(j,"settle");function pe(){return{status:200,body:{components:[...g()]}}}o(pe,"handleComponents");const Te=[{method:"GET",pattern:"/v1/human/components",handler:o(()=>pe(),"handler")},{method:"POST",pattern:"/v1/human/requests",scope:"crtr:act",handler:ce},{method:"GET",pattern:"/v1/human/requests/:request_id",handler:ue},{method:"POST",pattern:"/v1/human/requests/:request_id/replace",handler:le},{method:"POST",pattern:"/v1/human/requests/:request_id/respond",handler:fe},{method:"POST",pattern:"/v1/human/requests/:request_id/dismiss",handler:o(e=>j(e,"dismissed"),"handler")},{method:"POST",pattern:"/v1/human/requests/:request_id/cancel",handler:o(e=>j(e,"canceled"),"handler")}];export{Te as humanRequestRoutes};

package/dist/daemon/api/handlers/inbox-page.d.ts

@@ -1,4 +1,4 @@
 import type { InboxPageDTO } from '../../../api/index.js';
 import { type HumanRequestRecord } from '../../../core/human/requests.js';
 /** Project the one SQL-selected page revision for every page reader. */
-export declare function inboxPageProjection(request: HumanRequestRecord): InboxPageDTO;
+export declare function inboxPageProjection(request: HumanRequestRecord): Promise<InboxPageDTO>;

package/dist/daemon/api/handlers/inbox-page.js

@@ -1 +1 @@
-var u=Object.defineProperty;var i=(e,t)=>u(e,"name",{value:t,configurable:!0});import{readFileSync as n}from"node:fs";import{readPageFeedback as s}from"../../../core/human/feedback.js";import{pageModulePath as a,pagePath as l}from"../../../core/human/convention.js";import{parsePage as p}from"../../../core/human/page.js";import{presentationDir as f}from"../../../core/human/requests.js";import{readPageProgress as g,readTicketResult as m}from"../../../core/human/tickets.js";import{toPageFeedbackDTO as k}from"../map.js";function b(e){const t={kind:e.kind,step:e.step,config:e.config};return e.id!==void 0&&(t.id=e.id),e.unvalidated===!0&&(t.unvalidated=!0),e.display===!0&&(t.display=!0),t}i(b,"pageSlotToDTO");function _(e){const t={schema:"crtr.page/v2",dialect:e.dialect,title:e.title,delivery:e.delivery,document:e.document,steps:e.steps,slots:e.slots.map(b)};if(e.subtitle!==void 0&&(t.subtitle=e.subtitle),e.source!==void 0){const r={};e.source.sessionName!==void 0&&(r.sessionName=e.source.sessionName),e.source.askedBy!==void 0&&(r.askedBy=e.source.askedBy),e.source.emittedAt!==void 0&&(r.emittedAt=e.source.emittedAt),e.source.profileName!==void 0&&(r.profileName=e.source.profileName),e.source.nodeId!==void 0&&(r.nodeId=e.source.nodeId),Object.keys(r).length>0&&(t.source=r)}return t}i(_,"pageManifestToDTO");function y(e){return e.settleable?e.state!=="settled"?"pending":e.outcome==="canceled"||e.outcome==="dismissed"?"canceled":"resolved":"passive"}i(y,"state");function v(e){const t=m(e.request_dir);if(t===null)return null;if(t.kind==="page"||t.kind==="canceled")return t;throw new Error(`page request has an invalid terminal result: ${e.request_id}`)}i(v,"result");function O(e){if(e.kind!=="page")throw new Error(`request is not a page: ${e.request_id}`);const t=f(e),r=p(t),o=n(l(t,r.dialect),"utf8"),c=r.dialect==="jsx"?n(a(t),"utf8"):o,d=e.settleable?g(e.request_dir):null;return{ticket_id:e.inbox_ticket_id,kind:"page",state:y(e),revision:t,page:_(r),document:c,source_document:o,document_media_type:r.dialect==="jsx"?"text/jsx":"text/html",progress:d===null?null:{responses:d},result:v(e),feedback:k(s(e.request_dir))}}i(O,"inboxPageProjection");export{O as inboxPageProjection};
+var s=Object.defineProperty;var r=(e,t)=>s(e,"name",{value:t,configurable:!0});import{readFileSync as n}from"node:fs";import{readPageFeedback as u}from"../../../core/human/feedback.js";import{pageModulePath as a,pagePath as l}from"../../../core/human/convention.js";import{parsePage as p}from"../../../core/human/page.js";import{presentationDir as f}from"../../../core/human/requests.js";import{readPageProgress as g,readTicketResult as m}from"../../../core/human/tickets.js";import{toPageFeedbackDTO as k}from"../map.js";function y(e){const t={kind:e.kind,step:e.step,config:e.config};return e.id!==void 0&&(t.id=e.id),e.unvalidated===!0&&(t.unvalidated=!0),e.display===!0&&(t.display=!0),t}r(y,"pageSlotToDTO");function b(e){const t={schema:"crtr.page/v2",dialect:e.dialect,title:e.title,delivery:e.delivery,document:e.document,steps:e.steps,slots:e.slots.map(y)};if(e.subtitle!==void 0&&(t.subtitle=e.subtitle),e.source!==void 0){const i={};e.source.sessionName!==void 0&&(i.sessionName=e.source.sessionName),e.source.askedBy!==void 0&&(i.askedBy=e.source.askedBy),e.source.emittedAt!==void 0&&(i.emittedAt=e.source.emittedAt),e.source.profileName!==void 0&&(i.profileName=e.source.profileName),e.source.nodeId!==void 0&&(i.nodeId=e.source.nodeId),Object.keys(i).length>0&&(t.source=i)}return t}r(b,"pageManifestToDTO");function _(e){return e.settleable?e.state!=="settled"?"pending":e.outcome==="canceled"||e.outcome==="dismissed"?"canceled":"resolved":"passive"}r(_,"state");async function v(e){const t=await m(e.request_dir);if(t===null)return null;if(t.kind==="page"||t.kind==="canceled")return t;throw new Error(`page request has an invalid terminal result: ${e.request_id}`)}r(v,"result");async function O(e){if(e.kind!=="page")throw new Error(`request is not a page: ${e.request_id}`);const t=f(e),i=p(t),o=n(l(t,i.dialect),"utf8"),c=i.dialect==="jsx"?n(a(t),"utf8"):o,d=e.settleable?await g(e.request_dir):null;return{ticket_id:e.inbox_ticket_id,kind:"page",state:_(e),revision:t,page:b(i),document:c,source_document:o,document_media_type:i.dialect==="jsx"?"text/jsx":"text/html",progress:d===null?null:{responses:d},result:await v(e),feedback:k(await u(e.request_dir))}}r(O,"inboxPageProjection");export{O as inboxPageProjection};

package/dist/daemon/api/handlers/inbox.d.ts

@@ -7,6 +7,6 @@ export interface ResolvedTicket {
 }
 /** Resolve one opaque inbox ticket id to its canonical directory. Shared with
  * the feedback-comment routes, which address tickets by the same ids. */
-export declare function resolveTicket(ticketId: InboxTicketIdDTO): ResolvedTicket | null;
+export declare function resolveTicket(ticketId: InboxTicketIdDTO): Promise<ResolvedTicket | null>;
 export declare function requireTicketId(params: Record<string, string>): InboxTicketIdDTO;
 export declare const inboxRoutes: RouteTable;

package/dist/daemon/api/handlers/inbox.js

@@ -1 +1 @@
-var g=Object.defineProperty;var d=(e,n)=>g(e,"name",{value:n,configurable:!0});import{ApiError as t}from"../../../api/index.js";import{inboxPageProjection as v}from"./inbox-page.js";import{getRequestByInboxTicket as p}from"../../../core/human/requests.js";import{getNode as w}from"../../../core/canvas/canvas.js";import{canReadNode as m}from"../router.js";import{parsePage as y}from"../../../core/human/page.js";import{scanInbox as q,scanPageHistory as T}from"../../../core/human/scan.js";import{readPageTicket as h,readTicketResult as k,selectedPageDir as I,validatePageTicketResponses as A,writePageProgress as P}from"../../../core/human/tickets.js";import{describePageAnswer as x}from"../../../core/human/answer.js";import{cancelHumanTicket as E,resolvePageTicket as R}from"../../human/finish.js";const O="Canceled from the inbox.",N=1e3,S=/^[a-f0-9]{64}$/;function c(e){const n=p(e);return n===null?null:{ticketId:n.request_id,dir:n.request_dir,kind:n.kind}}d(c,"resolveTicket");function l(e){const n=e.ticket_id;if(n===void 0||!S.test(n))throw new t(400,"invalid_request","invalid ticket id");return n}d(l,"requireTicketId");function u(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}d(u,"isPlainObject");function f(e,n){for(const i of Object.keys(e))if(!n.includes(i))throw new t(400,"invalid_request",`unexpected field: ${i}`)}d(f,"requireNoExtraKeys");function C(e){if(!u(e))throw new t(400,"invalid_request","respond body is required");if(f(e,["responses"]),!u(e.responses))throw new t(400,"invalid_request","`responses` must be an object");return{responses:e.responses}}d(C,"validateRespondRequest");function D(e){if(!u(e))throw new t(400,"invalid_request","progress body is required");if(f(e,["responses"]),!u(e.responses))throw new t(400,"invalid_request","`responses` must be an object");return{responses:e.responses}}d(D,"validateProgressRequest");function j(e){if(e===void 0)return{};if(!u(e))throw new t(400,"invalid_request","cancel body must be an object");if(f(e,["reason"]),e.reason===void 0)return{};const n=e.reason;if(typeof n!="string")throw new t(400,"invalid_request","`reason` must be a string");if(n.trim()===""||n.length>N)throw new t(400,"invalid_request","`reason` must be nonempty after trim and at most 1000 characters");return{reason:n}}d(j,"validateCancelRequest");const G=[/^slot ".*?" /,/^response names unknown or non-response-bearing slot id/,/^final page response is missing response-bearing slot id/];function _(e){return e instanceof Error&&G.some(n=>n.test(e.message))}d(_,"isSlotValidationError");function b(e){const n={request_id:e.id,request_dir:e.dir,ticket_id:e.inboxTicketId,kind:"page",title:e.title,placement:e.placement,dialect:e.dialect,steps:e.steps,emitted_at:e.emittedAt,source:e.source,slot_kinds:e.slotKinds,inbox:e.inbox,awaits_response:e.awaitsResponse,state:e.state};return e.subtitle!==""&&(n.subtitle=e.subtitle),e.answerDigest!==void 0&&(n.answer_digest=e.answerDigest),e.recommendedOptions.length>0&&(n.recommended_options=e.recommendedOptions.map(i=>({slot_id:i.slotId,option_id:i.optionId,label:i.label}))),e.fastAction!==void 0&&(n.fast_action={kind:e.fastAction.kind,responses:e.fastAction.responses}),n}d(b,"pageSummaryToDTO");function L(e){return{status:200,body:{tickets:q().filter(i=>{if(e.principal.class==="person")return!0;const r=p(i.inboxTicketId),s=r?.requester_node_id?w(r.requester_node_id):null;return s!==null&&m(e.principal,s.grantee??"app:terminal",s.node_id)}).map(i=>{if(i.kind==="page")return b(i);if(i.kind==="review")return{request_id:i.id,request_dir:i.dir,ticket_id:i.inboxTicketId,kind:"review",title:i.title,subtitle:i.subtitle,blocked_since:i.blockedSince,source:i.source};throw new Error(`unknown ticket kind: ${i.kind}`)}).sort((i,r)=>{const s=d(a=>a.kind==="page"?a.emitted_at:a.blocked_since,"pageTime"),o=Date.parse(s(r))-Date.parse(s(i));return o!==0?o:i.ticket_id.localeCompare(r.ticket_id)})}}}d(L,"handleList");function H(e){const n=e.query.get("node_id");if(n==="")throw new t(400,"invalid_request","node_id must be nonempty when present");return{status:200,body:{tickets:T(n??void 0).filter(s=>{if(e.principal.class==="person")return!0;const o=p(s.inboxTicketId),a=o?.requester_node_id?w(o.requester_node_id):null;return a!==null&&m(e.principal,a.grantee??"app:terminal",a.node_id)}).map(b)}}}d(H,"handleHistory");function K(e){const n=l(e.params),i=c(n);if(i===null)throw new t(404,"ticket_not_found","no matching ticket");if(i.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets have no page read operation");const r=p(n);if(r===null||r.kind!=="page")throw new t(404,"ticket_not_found","no matching ticket");try{return{status:200,body:v(r)}}catch{throw new t(500,"internal","the ticket could not be read")}}d(K,"handleGetPage");async function $(e){const n=l(e.params),i=C(e.body),r=c(n);if(r===null)throw new t(404,"ticket_not_found","no matching ticket");if(r.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets submit through their own path");if(h(r.dir).state==="passive")throw new t(409,"page_has_no_response_lifecycle","this page has no response lifecycle");const s=k(r.dir);if(s!==null&&s.kind!=="canceled")throw new t(409,"ticket_already_resolved","ticket was already resolved");if(s?.kind==="canceled")throw new t(409,"ticket_canceled","canceled tickets cannot be answered");try{A(r.dir,i.responses)}catch(o){throw _(o)?new t(400,"invalid_ticket_response",o.message):new t(500,"internal","validation failed")}try{const o=await R(r.ticketId,i.responses);if(o.kind!=="page")throw new t(409,"ticket_kind_mismatch","unexpected result kind");return{status:200,body:o}}catch(o){throw o instanceof t?o:_(o)?new t(400,"invalid_ticket_response",o.message):new t(500,"internal","the ticket could not be finalized")}}d($,"handleRespond");function V(e){const n=l(e.params),i=D(e.body),r=c(n);if(r===null)throw new t(404,"ticket_not_found","no matching ticket");if(r.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets do not support progress autosave");if(h(r.dir).state==="passive")throw new t(409,"page_has_no_response_lifecycle","this page has no response lifecycle");const s=k(r.dir);if(s!==null&&s.kind!=="canceled")throw new t(409,"ticket_already_resolved","ticket was already resolved");try{return P(r.dir,i.responses),{status:200,body:{}}}catch(o){throw _(o)?new t(400,"invalid_ticket_response",o.message):new t(500,"internal","progress could not be saved")}}d(V,"handleProgress");async function z(e){const n=l(e.params),i=j(e.body),r=c(n);if(r===null)throw new t(404,"ticket_not_found","no matching ticket");if(r.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets have their own cancel path");if(h(r.dir).state==="passive")throw new t(409,"page_has_no_response_lifecycle","this page has no response lifecycle");try{const s=await E(r.ticketId,{reason:i.reason??O,actor:"human",disposition:"dismissed"});if(s.outcome==="already_settled"||s.result.kind!=="canceled")throw new t(409,"ticket_already_resolved","ticket was already resolved");return{status:200,body:s.result}}catch(s){throw s instanceof t?s:new t(500,"internal","the ticket could not be canceled")}}d(z,"handleCancel");function B(e){const n=l(e.params),i=c(n);if(i===null)throw new t(404,"ticket_not_found","no matching ticket");if(i.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets fetch responses through their own path");const r=k(i.dir);if(r===null)throw new t(404,"ticket_pending","ticket has no response yet");if(r.kind==="canceled")throw new t(404,"ticket_canceled","canceled tickets have no response");if(r.kind!=="page")throw new t(409,"ticket_kind_mismatch","unexpected result kind");try{const s=y(I(i.dir));return{status:200,body:{...r,answer:x(s,r.responses,{completedAt:r.completedAt})}}}catch{throw new t(500,"internal","the ticket answer could not be read")}}d(B,"handleGetResponse");const ne=[{method:"GET",pattern:"/v1/human/inbox",handler:L},{method:"GET",pattern:"/v1/human/inbox/history",handler:H},{method:"GET",pattern:"/v1/human/inbox/:ticket_id",handler:K},{method:"GET",pattern:"/v1/human/inbox/:ticket_id/response",handler:B},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/respond",handler:$},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/progress",handler:V},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/cancel",handler:z}];export{ne as inboxRoutes,l as requireTicketId,c as resolveTicket};
+var g=Object.defineProperty;var a=(e,n)=>g(e,"name",{value:n,configurable:!0});import{ApiError as t}from"../../../api/index.js";import{inboxPageProjection as v}from"./inbox-page.js";import{getRequestByInboxTicket as p}from"../../../core/human/requests.js";import{getNode as _}from"../../../core/canvas/canvas.js";import{canReadNode as m}from"../router.js";import{parsePage as q}from"../../../core/human/page.js";import{scanInbox as T,scanPageHistory as I}from"../../../core/human/scan.js";import{readPageTicket as w,readTicketResult as h,selectedPageDir as A,validatePageTicketResponses as P,writePageProgress as x}from"../../../core/human/tickets.js";import{describePageAnswer as E}from"../../../core/human/answer.js";import{cancelHumanTicket as R,resolvePageTicket as O}from"../../human/finish.js";import{filterAsync as b}from"../../../core/async-array.js";const N="Canceled from the inbox.",S=1e3,C=/^[a-f0-9]{64}$/;async function c(e){const n=await p(e);return n===null?null:{ticketId:n.request_id,dir:n.request_dir,kind:n.kind}}a(c,"resolveTicket");function l(e){const n=e.ticket_id;if(n===void 0||!C.test(n))throw new t(400,"invalid_request","invalid ticket id");return n}a(l,"requireTicketId");function u(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}a(u,"isPlainObject");function k(e,n){for(const i of Object.keys(e))if(!n.includes(i))throw new t(400,"invalid_request",`unexpected field: ${i}`)}a(k,"requireNoExtraKeys");function D(e){if(!u(e))throw new t(400,"invalid_request","respond body is required");if(k(e,["responses"]),!u(e.responses))throw new t(400,"invalid_request","`responses` must be an object");return{responses:e.responses}}a(D,"validateRespondRequest");function j(e){if(!u(e))throw new t(400,"invalid_request","progress body is required");if(k(e,["responses"]),!u(e.responses))throw new t(400,"invalid_request","`responses` must be an object");return{responses:e.responses}}a(j,"validateProgressRequest");function G(e){if(e===void 0)return{};if(!u(e))throw new t(400,"invalid_request","cancel body must be an object");if(k(e,["reason"]),e.reason===void 0)return{};const n=e.reason;if(typeof n!="string")throw new t(400,"invalid_request","`reason` must be a string");if(n.trim()===""||n.length>S)throw new t(400,"invalid_request","`reason` must be nonempty after trim and at most 1000 characters");return{reason:n}}a(G,"validateCancelRequest");const L=[/^slot ".*?" /,/^response names unknown or non-response-bearing slot id/,/^final page response is missing response-bearing slot id/];function f(e){return e instanceof Error&&L.some(n=>n.test(e.message))}a(f,"isSlotValidationError");function y(e){const n={request_id:e.id,request_dir:e.dir,ticket_id:e.inboxTicketId,kind:"page",title:e.title,placement:e.placement,dialect:e.dialect,steps:e.steps,emitted_at:e.emittedAt,source:e.source,slot_kinds:e.slotKinds,inbox:e.inbox,awaits_response:e.awaitsResponse,state:e.state};return e.subtitle!==""&&(n.subtitle=e.subtitle),e.answerDigest!==void 0&&(n.answer_digest=e.answerDigest),e.recommendedOptions.length>0&&(n.recommended_options=e.recommendedOptions.map(i=>({slot_id:i.slotId,option_id:i.optionId,label:i.label}))),e.fastAction!==void 0&&(n.fast_action={kind:e.fastAction.kind,responses:e.fastAction.responses}),n}a(y,"pageSummaryToDTO");async function H(e){return{status:200,body:{tickets:(await b(await T(),async i=>{if(e.principal.class==="person")return!0;const s=await p(i.inboxTicketId),r=s?.requester_node_id?await _(s.requester_node_id):null;return r!==null&&await m(e.principal,r.grantee??"app:terminal",r.node_id)})).map(i=>{if(i.kind==="page")return y(i);if(i.kind==="review")return{request_id:i.id,request_dir:i.dir,ticket_id:i.inboxTicketId,kind:"review",title:i.title,subtitle:i.subtitle,blocked_since:i.blockedSince,source:i.source};throw new Error(`unknown ticket kind: ${i.kind}`)}).sort((i,s)=>{const r=a(d=>d.kind==="page"?d.emitted_at:d.blocked_since,"pageTime"),o=Date.parse(r(s))-Date.parse(r(i));return o!==0?o:i.ticket_id.localeCompare(s.ticket_id)})}}}a(H,"handleList");async function K(e){const n=e.query.get("node_id");if(n==="")throw new t(400,"invalid_request","node_id must be nonempty when present");return{status:200,body:{tickets:(await b(await I(n??void 0),async r=>{if(e.principal.class==="person")return!0;const o=await p(r.inboxTicketId),d=o?.requester_node_id?await _(o.requester_node_id):null;return d!==null&&await m(e.principal,d.grantee??"app:terminal",d.node_id)})).map(y)}}}a(K,"handleHistory");async function $(e){const n=l(e.params),i=await c(n);if(i===null)throw new t(404,"ticket_not_found","no matching ticket");if(i.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets have no page read operation");const s=await p(n);if(s===null||s.kind!=="page")throw new t(404,"ticket_not_found","no matching ticket");try{return{status:200,body:await v(s)}}catch{throw new t(500,"internal","the ticket could not be read")}}a($,"handleGetPage");async function V(e){const n=l(e.params),i=D(e.body),s=await c(n);if(s===null)throw new t(404,"ticket_not_found","no matching ticket");if(s.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets submit through their own path");if((await w(s.dir)).state==="passive")throw new t(409,"page_has_no_response_lifecycle","this page has no response lifecycle");const r=await h(s.dir);if(r!==null&&r.kind!=="canceled")throw new t(409,"ticket_already_resolved","ticket was already resolved");if(r?.kind==="canceled")throw new t(409,"ticket_canceled","canceled tickets cannot be answered");try{await P(s.dir,i.responses)}catch(o){throw f(o)?new t(400,"invalid_ticket_response",o.message):new t(500,"internal","validation failed")}try{const o=await O(s.ticketId,i.responses);if(o.kind!=="page")throw new t(409,"ticket_kind_mismatch","unexpected result kind");return{status:200,body:o}}catch(o){throw o instanceof t?o:f(o)?new t(400,"invalid_ticket_response",o.message):new t(500,"internal","the ticket could not be finalized")}}a(V,"handleRespond");async function z(e){const n=l(e.params),i=j(e.body),s=await c(n);if(s===null)throw new t(404,"ticket_not_found","no matching ticket");if(s.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets do not support progress autosave");if((await w(s.dir)).state==="passive")throw new t(409,"page_has_no_response_lifecycle","this page has no response lifecycle");const r=await h(s.dir);if(r!==null&&r.kind!=="canceled")throw new t(409,"ticket_already_resolved","ticket was already resolved");try{return await x(s.dir,i.responses),{status:200,body:{}}}catch(o){throw f(o)?new t(400,"invalid_ticket_response",o.message):new t(500,"internal","progress could not be saved")}}a(z,"handleProgress");async function B(e){const n=l(e.params),i=G(e.body),s=await c(n);if(s===null)throw new t(404,"ticket_not_found","no matching ticket");if(s.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets have their own cancel path");if((await w(s.dir)).state==="passive")throw new t(409,"page_has_no_response_lifecycle","this page has no response lifecycle");try{const r=await R(s.ticketId,{reason:i.reason??N,actor:"human",disposition:"dismissed"});if(r.outcome==="already_settled"||r.result.kind!=="canceled")throw new t(409,"ticket_already_resolved","ticket was already resolved");return{status:200,body:r.result}}catch(r){throw r instanceof t?r:new t(500,"internal","the ticket could not be canceled")}}a(B,"handleCancel");async function F(e){const n=l(e.params),i=await c(n);if(i===null)throw new t(404,"ticket_not_found","no matching ticket");if(i.kind==="review")throw new t(409,"ticket_kind_unsupported","review tickets fetch responses through their own path");const s=await h(i.dir);if(s===null)throw new t(404,"ticket_pending","ticket has no response yet");if(s.kind==="canceled")throw new t(404,"ticket_canceled","canceled tickets have no response");if(s.kind!=="page")throw new t(409,"ticket_kind_mismatch","unexpected result kind");try{const r=q(await A(i.dir));return{status:200,body:{...s,answer:E(r,s.responses,{completedAt:s.completedAt})}}}catch{throw new t(500,"internal","the ticket answer could not be read")}}a(F,"handleGetResponse");const se=[{method:"GET",pattern:"/v1/human/inbox",handler:H},{method:"GET",pattern:"/v1/human/inbox/history",handler:K},{method:"GET",pattern:"/v1/human/inbox/:ticket_id",handler:$},{method:"GET",pattern:"/v1/human/inbox/:ticket_id/response",handler:F},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/respond",handler:V},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/progress",handler:z},{method:"POST",pattern:"/v1/human/inbox/:ticket_id/cancel",handler:B}];export{se as inboxRoutes,l as requireTicketId,c as resolveTicket};

package/dist/daemon/api/handlers/llm.d.ts

@@ -4,7 +4,7 @@ import { type SocketPrincipal } from '../server.js';
 import { type SpendTarget } from '../../../core/usage/ledger.js';
 /** Who a socket caller's model call bills: a broker's node bills its grant's app under
  *  that grant's cap; the person (and a local scoped token) bills the person's own agent, uncapped. */
-export declare function spendTarget(principal: SocketPrincipal | undefined): SpendTarget;
+export declare function spendTarget(principal: SocketPrincipal | undefined): Promise<SpendTarget>;
 /** `cap_exhausted` names when the count starts over and what the person can do (contract 2 error table). */
 export declare function capFields(error: RunError): Record<string, unknown>;
 export declare const llmRoutes: RouteTable;

package/dist/daemon/api/handlers/llm.js

@@ -1,3 +1,3 @@
-var O=Object.defineProperty;var s=(e,t)=>O(e,"name",{value:t,configurable:!0});import{randomUUID as _}from"node:crypto";import{MODEL_CONTEXT_BODY_MAX_BYTES as S}from"../../../core/llm/body-limits.js";import{llmCallerOf as g,parseLlmRequest as E,runLlm as R}from"../../../core/llm/run.js";import{RunError as d}from"../../../core/runs/operations.js";import{errorCodes as T}from"../../../api/error-codes.js";import{getNode as q}from"../../../core/canvas/canvas.js";import{socketPrincipal as l}from"../server.js";import{activeGrant as y,activeGrantForApp as h,grantFor as b,grantsSource as w,payerOfGrant as I}from"../../../core/grants/mirror.js";import{parseUsageMonth as N,UNCAPPED_GRANTEE as D,usageFor as G}from"../../../core/usage/ledger.js";function v(e,t){if(t==="broker"||t==="person"||t===void 0||!e||typeof e!="object"||Array.isArray(e)||!("rate_limit"in e))return e;const{rate_limit:o,...a}=e;return a}s(v,"operatorDetails");function A(e){if(e?.class==="broker"){const t=e.grant?y(e.grant):b(e.app,e.sub);return{grantee:e.app,spend_cap:t&&t.grantee===e.app?t.spend_cap:null}}if(e?.class==="app"){const t=w();if(t===null||t==="local")return{grantee:e.app,spend_cap:null};let o;try{o=h(e.app)}catch{throw new d(401,"grant_revoked",`${e.app} has several active grants; a local token cannot name which user's cap applies`)}if(!o)throw new d(401,"grant_revoked",`${e.app} has no active grant`);return{grantee:e.app,spend_cap:o.spend_cap}}return{grantee:D,spend_cap:null}}s(A,"spendTarget");function P(e){if(e?.class==="broker"){if(e.app==="app:terminal")return;const t=e.grant?y(e.grant):b(e.app,e.sub);if(!t&&I(e.grant)==="app")throw new d(401,"grant_revoked",`${e.app}'s app-paid grant is no longer active`);return g(t&&t.grantee===e.app?t:null)}if(e?.class==="app"){const t=w();return t===null||t==="local"?void 0:g(h(e.app))}}s(P,"llmCaller");function k(e){const t=T[e.code];return t?t.type:e.status===429?"rate_limit_error":e.status<500?"invalid_request_error":"server_error"}s(k,"errorType");function U(e){if(e.code!=="cap_exhausted")return{};const t=e.details?.reset_at;return{...typeof t=="string"?{reset_at:t}:{},user_action:"raise_cap"}}s(U,"capFields");const Y=[{method:"POST",pattern:"/v1/llm",scope:"crtr:llm",maxBodyBytes:S,handler:s(async({body:e,res:t,req:o})=>{const a=_();t.setHeader("Request-Id",a);const m=new AbortController,p=s(()=>m.abort(),"abort");t.on("close",p);let i;try{const r=E(e),n=l(o),u=n?.class==="broker"?q(n.node):null;if(n?.class==="broker"&&!u)throw new d(401,"unauthorized","node not found");const c=A(n),x=await R(r,m.signal,r.stream?f=>{typeof f.served_model=="string"&&(i=f.served_model),t.headersSent||t.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache"}),t.write(`${JSON.stringify(f)}
-`)}:void 0,u?{cwd:u.cwd,profileId:u.profile_id??null}:void 0,c,P(n));return r.stream?(t.headersSent||t.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache"}),t.end(),{status:200}):{status:200,body:x.completion}}catch(r){if(t.headersSent){const n=r instanceof d?r:new d(503,"upstream_model_unavailable","model stream failed"),u=n.details&&typeof n.details=="object"&&!Array.isArray(n.details)?n.details:{},c=v(i!==void 0&&typeof u.served_model!="string"?{...u,served_model:i}:n.details,l(o)?.class);return t.end(`${JSON.stringify({error:{code:n.code,message:n.message,...c===void 0?{}:{details:c},type:"server_error",origin:"runtime",retryable:n.retryable,request_id:a}})}
-`),{status:200}}if(r instanceof d){const n=v(r.details,l(o)?.class);return r.code==="all_routes_exhausted"&&t.setHeader("Retry-After",String(r.details.retry_after_s)),{status:r.status,body:{error:{code:r.code,message:r.message,...n===void 0?{}:{details:n},type:k(r),...r.param?{param:r.param}:{},origin:"runtime",retryable:r.retryable,request_id:a,...r.code==="all_routes_exhausted"?{retry_after_s:r.details.retry_after_s}:{},...U(r)}}}}throw r}finally{t.off("close",p)}},"handler")},{method:"GET",pattern:"/v1/usage",handler:s(({req:e})=>{const t=_(),o={"Request-Id":t};try{const a=A(l(e));return{status:200,headers:o,body:G(a.grantee,a.spend_cap,N(new URL(e.url??"/","http://runtime.local").searchParams.get("month")))}}catch(a){if(!(a instanceof d))throw a;return{status:a.status,headers:o,body:{error:{code:a.code,message:a.message,type:k(a),...a.param?{param:a.param}:{},origin:"runtime",retryable:!1,request_id:t}}}}},"handler")}];export{U as capFields,Y as llmRoutes,A as spendTarget};
+var O=Object.defineProperty;var s=(e,t)=>O(e,"name",{value:t,configurable:!0});import{randomUUID as _}from"node:crypto";import{MODEL_CONTEXT_BODY_MAX_BYTES as S}from"../../../core/llm/body-limits.js";import{llmCallerOf as g,parseLlmRequest as E,runLlm as R}from"../../../core/llm/run.js";import{RunError as d}from"../../../core/runs/operations.js";import{errorCodes as T}from"../../../api/error-codes.js";import{getNode as q}from"../../../core/canvas/canvas.js";import{socketPrincipal as i}from"../server.js";import{activeGrant as y,activeGrantForApp as w,grantFor as h,grantsSource as b,payerOfGrant as I}from"../../../core/grants/mirror.js";import{parseUsageMonth as N,UNCAPPED_GRANTEE as D,usageFor as G}from"../../../core/usage/ledger.js";function v(e,t){if(t==="broker"||t==="person"||t===void 0||!e||typeof e!="object"||Array.isArray(e)||!("rate_limit"in e))return e;const{rate_limit:o,...a}=e;return a}s(v,"operatorDetails");async function A(e){if(e?.class==="broker"){const t=e.grant?await y(e.grant):await h(e.app,e.sub);return{grantee:e.app,spend_cap:t&&t.grantee===e.app?t.spend_cap:null}}if(e?.class==="app"){const t=await b();if(t===null||t==="local")return{grantee:e.app,spend_cap:null};let o;try{o=await w(e.app)}catch{throw new d(401,"grant_revoked",`${e.app} has several active grants; a local token cannot name which user's cap applies`)}if(!o)throw new d(401,"grant_revoked",`${e.app} has no active grant`);return{grantee:e.app,spend_cap:o.spend_cap}}return{grantee:D,spend_cap:null}}s(A,"spendTarget");async function P(e){if(e?.class==="broker"){if(e.app==="app:terminal")return;const t=e.grant?await y(e.grant):await h(e.app,e.sub);if(!t&&await I(e.grant)==="app")throw new d(401,"grant_revoked",`${e.app}'s app-paid grant is no longer active`);return g(t&&t.grantee===e.app?t:null)}if(e?.class==="app"){const t=await b();return t===null||t==="local"?void 0:g(await w(e.app))}}s(P,"llmCaller");function k(e){const t=T[e.code];return t?t.type:e.status===429?"rate_limit_error":e.status<500?"invalid_request_error":"server_error"}s(k,"errorType");function U(e){if(e.code!=="cap_exhausted")return{};const t=e.details?.reset_at;return{...typeof t=="string"?{reset_at:t}:{},user_action:"raise_cap"}}s(U,"capFields");const Y=[{method:"POST",pattern:"/v1/llm",scope:"crtr:llm",maxBodyBytes:S,handler:s(async({body:e,res:t,req:o})=>{const a=_();t.setHeader("Request-Id",a);const m=new AbortController,p=s(()=>m.abort(),"abort");t.on("close",p);let l;try{const r=E(e),n=i(o),u=n?.class==="broker"?await q(n.node):null;if(n?.class==="broker"&&!u)throw new d(401,"unauthorized","node not found");const c=await A(n),x=await R(r,m.signal,r.stream?f=>{typeof f.served_model=="string"&&(l=f.served_model),t.headersSent||t.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache"}),t.write(`${JSON.stringify(f)}
+`)}:void 0,u?{cwd:u.cwd,profileId:u.profile_id??null}:void 0,c,await P(n));return r.stream?(t.headersSent||t.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache"}),t.end(),{status:200}):{status:200,body:x.completion}}catch(r){if(t.headersSent){const n=r instanceof d?r:new d(503,"upstream_model_unavailable","model stream failed"),u=n.details&&typeof n.details=="object"&&!Array.isArray(n.details)?n.details:{},c=v(l!==void 0&&typeof u.served_model!="string"?{...u,served_model:l}:n.details,i(o)?.class);return t.end(`${JSON.stringify({error:{code:n.code,message:n.message,...c===void 0?{}:{details:c},type:"server_error",origin:"runtime",retryable:n.retryable,request_id:a}})}
+`),{status:200}}if(r instanceof d){const n=v(r.details,i(o)?.class);return r.code==="all_routes_exhausted"&&t.setHeader("Retry-After",String(r.details.retry_after_s)),{status:r.status,body:{error:{code:r.code,message:r.message,...n===void 0?{}:{details:n},type:k(r),...r.param?{param:r.param}:{},origin:"runtime",retryable:r.retryable,request_id:a,...r.code==="all_routes_exhausted"?{retry_after_s:r.details.retry_after_s}:{},...U(r)}}}}throw r}finally{t.off("close",p)}},"handler")},{method:"GET",pattern:"/v1/usage",handler:s(async({req:e})=>{const t=_(),o={"Request-Id":t};try{const a=await A(i(e));return{status:200,headers:o,body:await G(a.grantee,a.spend_cap,N(new URL(e.url??"/","http://runtime.local").searchParams.get("month")))}}catch(a){if(!(a instanceof d))throw a;return{status:a.status,headers:o,body:{error:{code:a.code,message:a.message,type:k(a),...a.param?{param:a.param}:{},origin:"runtime",retryable:!1,request_id:t}}}}},"handler")}];export{U as capFields,Y as llmRoutes,A as spendTarget};

package/dist/daemon/api/handlers/memory-reads.js

@@ -1 +1 @@
-var l=Object.defineProperty;var i=(e,t)=>l(e,"name",{value:t,configurable:!0});import{ApiError as f}from"../../../api/index.js";import{getNode as b}from"../../../core/canvas/canvas.js";import{insertMemoryReads as v}from"../../../core/canvas/memory-reads.js";const p=500,u=512,w=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,3})?Z$/;function r(e){return new f(400,"invalid_request",e)}i(r,"invalid");function y(e,t,o){if(typeof e!="string"||e.length===0||e.length>u)throw r(`events[${o}].${t} must be a non-empty string of at most ${u} characters`);return e}i(y,"text");function g(e){if(typeof e!="object"||e===null||Array.isArray(e))throw r("body must be an object");const t=Object.keys(e).filter(n=>n!=="events");if(t.length>0)throw r(`unknown body field: ${t.join(", ")}`);const o=e.events;if(!Array.isArray(o)||o.length<1||o.length>p)throw r(`events must be an array of 1\u2013${p} events`);return o.map((n,a)=>{if(typeof n!="object"||n===null||Array.isArray(n))throw r(`events[${a}] must be an object`);const s=n,m=Object.keys(s).filter(h=>!["name","scope","at","type"].includes(h));if(m.length>0)throw r(`events[${a}] has unknown field: ${m.join(", ")}`);if(s.type!=="read"&&s.type!=="loaded")throw r(`events[${a}].type must be "read" or "loaded"`);const d=s.at,c=typeof d=="string"&&w.test(d)?Date.parse(d):Number.NaN;if(!Number.isFinite(c))throw r(`events[${a}].at must be an ISO UTC timestamp`);return{name:y(s.name,"name",a),scope:y(s.scope,"scope",a),at:new Date(c).toISOString(),type:s.type}})}i(g,"parseEvents");function A(e){const t=e.params.id??"",o=g(e.body),n=b(t);if(!n||n.kind==="human")throw new f(404,"not_found","node not found");return v(t,o),{status:204}}i(A,"handleMemoryReads");const M=[{method:"POST",pattern:"/v1/nodes/:id/memory-reads",handler:A}];export{p as MAX_MEMORY_READ_EVENTS,u as MAX_MEMORY_READ_TEXT,M as memoryReadsRoutes};
+var l=Object.defineProperty;var i=(t,e)=>l(t,"name",{value:e,configurable:!0});import{ApiError as f}from"../../../api/index.js";import{getNode as w}from"../../../core/canvas/canvas.js";import{insertMemoryReads as b}from"../../../core/canvas/memory-reads.js";const p=500,u=512,v=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(\.\d{1,3})?Z$/;function r(t){return new f(400,"invalid_request",t)}i(r,"invalid");function y(t,e,o){if(typeof t!="string"||t.length===0||t.length>u)throw r(`events[${o}].${e} must be a non-empty string of at most ${u} characters`);return t}i(y,"text");function g(t){if(typeof t!="object"||t===null||Array.isArray(t))throw r("body must be an object");const e=Object.keys(t).filter(n=>n!=="events");if(e.length>0)throw r(`unknown body field: ${e.join(", ")}`);const o=t.events;if(!Array.isArray(o)||o.length<1||o.length>p)throw r(`events must be an array of 1\u2013${p} events`);return o.map((n,a)=>{if(typeof n!="object"||n===null||Array.isArray(n))throw r(`events[${a}] must be an object`);const s=n,m=Object.keys(s).filter(h=>!["name","scope","at","type"].includes(h));if(m.length>0)throw r(`events[${a}] has unknown field: ${m.join(", ")}`);if(s.type!=="read"&&s.type!=="loaded")throw r(`events[${a}].type must be "read" or "loaded"`);const d=s.at,c=typeof d=="string"&&v.test(d)?Date.parse(d):Number.NaN;if(!Number.isFinite(c))throw r(`events[${a}].at must be an ISO UTC timestamp`);return{name:y(s.name,"name",a),scope:y(s.scope,"scope",a),at:new Date(c).toISOString(),type:s.type}})}i(g,"parseEvents");async function A(t){const e=t.params.id??"",o=g(t.body),n=await w(e);if(!n||n.kind==="human")throw new f(404,"not_found","node not found");return await b(e,o),{status:204}}i(A,"handleMemoryReads");const M=[{method:"POST",pattern:"/v1/nodes/:id/memory-reads",handler:A}];export{p as MAX_MEMORY_READ_EVENTS,u as MAX_MEMORY_READ_TEXT,M as memoryReadsRoutes};

package/dist/daemon/api/handlers/memory.d.ts

@@ -24,15 +24,15 @@ export interface MemoryDocument extends MemoryListItem {
 }
 /** The longest prefix of at most `max` bytes that ends on a whole UTF-8 character. */
 export declare function utf8Prefix(buffer: Buffer, max: number): Buffer;
-export declare function memoryList(principal: RequestPrincipal, query: URLSearchParams): {
+export declare function memoryList(principal: RequestPrincipal, query: URLSearchParams): Promise<{
     items: MemoryListItem[];
     next_cursor: string | null;
-};
-export declare function memoryGet(principal: RequestPrincipal, query: URLSearchParams): MemoryDocument;
-export declare function handleMemoryOperation(name: string, principal: RequestPrincipal, query: URLSearchParams): {
+}>;
+export declare function memoryGet(principal: RequestPrincipal, query: URLSearchParams): Promise<MemoryDocument>;
+export declare function handleMemoryOperation(name: string, principal: RequestPrincipal, query: URLSearchParams): Promise<{
     status: number;
     body: unknown;
-};
+}>;
 /** Unix socket and v0 loopback: person, broker, and a scoped app token. */
 export declare const memoryRoutes: RouteTable;
 export {};

package/dist/daemon/api/handlers/memory.js

@@ -1,8 +1,8 @@
-var x=Object.defineProperty;var n=(t,e)=>x(t,"name",{value:e,configurable:!0});import{createHash as C}from"node:crypto";import{prepared as l}from"../../../core/sqlite-statements.js";import{withCanvasWrite as _}from"../../../core/canvas/db.js";import{canRead as y}from"../../../core/graph/access.js";import{bodyOf as H}from"../../../core/graph/bodies.js";import{ensureOwner as j}from"../../../core/graph/objects.js";import{readerFor as B}from"../../../core/graph/reader.js";import{checkoutsForCwd as F}from"../../../core/graph/repo-sync/repos.js";import{RunError as w}from"../../../core/runs/operations.js";const se=new Set(["memory.list","memory.get"]),W=1024*1024,O=/^[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/,R=["knowledge","preference"],a=n((t,e)=>new w(400,"invalid_request",t,e),"invalid"),S=n(()=>new w(404,"not_found","no memory document by that name"),"notFound");function v(t){const e=t.get("store");if(e===null)throw a("store is required","store");if(e!=="user")throw a('store must be "user"',"store")}n(v,"store");function Y(t){const e=t.get("kind");if(e===null)return null;if(!R.includes(e))throw a("kind must be knowledge or preference","kind");return e}n(Y,"kindOf");function J(t){const e=t.get("limit");if(e===null)return 50;if(!/^(0|[1-9]\d*)$/.test(e)||Number(e)<1||Number(e)>100)throw a("limit must be an integer from 1 to 100","limit");return Number(e)}n(J,"limitOf");function z(t,e){return C("sha256").update(JSON.stringify(["user",t,e])).digest("base64url").slice(0,16)}n(z,"filterHash");function U(t,e){return Buffer.from(JSON.stringify({n:t,f:e}),"utf8").toString("base64url")}n(U,"encodeCursor");function $(t,e){if(t===null)return null;try{if(!/^[A-Za-z0-9_-]+$/.test(t))throw new Error("not base64url");const r=JSON.parse(Buffer.from(t,"base64url").toString("utf8"));if(typeof r.n=="string"&&O.test(r.n)&&r.f===e)return r.n}catch{}throw a("cursor is not the next_cursor of a previous page with the same store, path and kind","cursor")}n($,"decodeCursor");function b(t){return j(t,"person","local-user","user:local","user")}n(b,"personObject");function A(t,e){return B(t,e,r=>F(t,r))}n(A,"graphReader");function I(t,e){const r=l(t,`SELECT r.body_hash, r.created_at FROM revisions r WHERE r.document = ?
-    AND NOT EXISTS (SELECT 1 FROM revision_parents p WHERE p.parent = r.rowid) ORDER BY r.number DESC, r.rev_id LIMIT 1`).get(e.rowid),o=l(t,"SELECT created_at, author FROM revisions WHERE document = ? ORDER BY number, created_at LIMIT 1").get(e.rowid);if(!r||!o)throw S();return{head:r,first:o}}n(I,"revisions");function L(t,e){const{head:r,first:o}=I(t,e),i=e.name.lastIndexOf("/");return{name:e.name,folder:i<0?"":e.name.slice(0,i),kind:e.kind,preview:e.preview,summary:e.summary,privacy:e.privacy,revision:e.revision,created_at:o.created_at,updated_at:r.created_at}}n(L,"item");function G(t,e){return e===null?null:l(t,`SELECT i.external_id FROM objects a
+var M=Object.defineProperty;var n=(t,e)=>M(t,"name",{value:e,configurable:!0});import{createHash as x}from"node:crypto";import{withCanvasWrite as N}from"../../../core/canvas/db.js";import{canRead as O}from"../../../core/graph/access.js";import{bodyOf as C}from"../../../core/graph/bodies.js";import{ensureOwner as H}from"../../../core/graph/objects.js";import{readerFor as j}from"../../../core/graph/reader.js";import{checkoutsForCwd as B}from"../../../core/graph/repo-sync/repos.js";import{RunError as g}from"../../../core/runs/operations.js";import{mapAsync as F}from"../../../core/async-array.js";const ie=new Set(["memory.list","memory.get"]),W=1024*1024,E=/^[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/,_=["knowledge","preference"],s=n((t,e)=>new g(400,"invalid_request",t,e),"invalid"),R=n(()=>new g(404,"not_found","no memory document by that name"),"notFound");function S(t){const e=t.get("store");if(e===null)throw s("store is required","store");if(e!=="user")throw s('store must be "user"',"store")}n(S,"store");function Y(t){const e=t.get("kind");if(e===null)return null;if(!_.includes(e))throw s("kind must be knowledge or preference","kind");return e}n(Y,"kindOf");function J(t){const e=t.get("limit");if(e===null)return 50;if(!/^(0|[1-9]\d*)$/.test(e)||Number(e)<1||Number(e)>100)throw s("limit must be an integer from 1 to 100","limit");return Number(e)}n(J,"limitOf");function z(t,e){return x("sha256").update(JSON.stringify(["user",t,e])).digest("base64url").slice(0,16)}n(z,"filterHash");function U(t,e){return Buffer.from(JSON.stringify({n:t,f:e}),"utf8").toString("base64url")}n(U,"encodeCursor");function $(t,e){if(t===null)return null;try{if(!/^[A-Za-z0-9_-]+$/.test(t))throw new Error("not base64url");const r=JSON.parse(Buffer.from(t,"base64url").toString("utf8"));if(typeof r.n=="string"&&E.test(r.n)&&r.f===e)return r.n}catch{}throw s("cursor is not the next_cursor of a previous page with the same store, path and kind","cursor")}n($,"decodeCursor");async function v(t){return await H(t,"person","local-user","user:local","user")}n(v,"personObject");async function b(t,e){return await j(t,e,async r=>await B(t,r))}n(b,"graphReader");async function A(t,e){const r=await t.prepare(`SELECT r.body_hash, r.created_at FROM revisions r WHERE r.document = ?
+    AND NOT EXISTS (SELECT 1 FROM revision_parents p WHERE p.parent = r.rowid) ORDER BY r.number DESC, r.rev_id LIMIT 1`).get(e.rowid),o=await t.prepare("SELECT created_at, author FROM revisions WHERE document = ? ORDER BY number, created_at LIMIT 1").get(e.rowid);if(!r||!o)throw R();return{head:r,first:o}}n(A,"revisions");async function I(t,e){const{head:r,first:o}=await A(t,e),a=e.name.lastIndexOf("/");return{name:e.name,folder:a<0?"":e.name.slice(0,a),kind:e.kind,preview:e.preview,summary:e.summary,privacy:e.privacy,revision:e.revision,created_at:o.created_at,updated_at:r.created_at}}n(I,"item");async function G(t,e){return e===null?null:(await t.prepare(`SELECT i.external_id FROM objects a
     JOIN identities i ON i.object = CASE WHEN a.type = 'node' THEN a.owner ELSE a.rowid END AND i.scheme = 'app'
-    WHERE a.rowid = ?`).get(e)?.external_id??null}n(G,"granteeOf");function Z(t,e){if(t.length<=e)return t;let r=e;for(;r>0&&(t[r]&192)===128;)r--;return t.subarray(0,r)}n(Z,"utf8Prefix");const D=200;function P(t,e){v(e);const r=e.get("path");if(r!==null&&!O.test(r))throw a("path must be name segments of letters, digits, `_` or `-` joined by `/`","path");const o=Y(e),i=J(e),f=z(r,o);let s=$(e.get("cursor"),f);return _(u=>{const h=A(u,t),m=b(u),c=r===null?null:`${r}/`,g=o===null?R:[o],T=l(u,`SELECT o.*, d.summary, d.revision, d.source_path FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE a.rowid = ?`).get(e))?.external_id??null}n(G,"granteeOf");function Z(t,e){if(t.length<=e)return t;let r=e;for(;r>0&&(t[r]&192)===128;)r--;return t.subarray(0,r)}n(Z,"utf8Prefix");const L=200;async function P(t,e){S(e);const r=e.get("path");if(r!==null&&!E.test(r))throw s("path must be name segments of letters, digits, `_` or `-` joined by `/`","path");const o=Y(e),a=J(e),d=z(r,o);let i=$(e.get("cursor"),d);return await N(async u=>{const p=await b(u,t),m=await v(u),c=r===null?null:`${r}/`,w=o===null?_:[o],k=u.prepare(`SELECT o.*, d.summary, d.revision, d.source_path FROM objects o JOIN documents d ON d.object = o.rowid
       WHERE o.owner = ? AND o.type = 'document' AND o.deleted_at IS NULL AND d.unlisted = 0
         AND o.kind IN (?, ?) AND (? IS NULL OR substr(o.name, 1, length(?)) = ?) AND (? IS NULL OR o.name > ?)
-      ORDER BY o.name LIMIT ?`),d=[];for(;;){const p=T.all(m.rowid,g[0],g[g.length-1],c,c,c,s,s,D);for(const N of p)if(s=N.name,y(u,h,N)&&d.push(N),d.length>i)break;if(d.length>i||p.length<D)break}const E=d.slice(0,i),M=d.length>i;return{items:E.map(p=>L(u,p)),next_cursor:M?U(E[E.length-1].name,f):null}})}n(P,"memoryList");function X(t,e){v(e);const r=e.get("name");if(r===null)throw a("name is required","name");if(!O.test(r))throw a("name must be segments of letters, digits, `_` or `-` joined by `/`","name");return _(o=>{const i=A(o,t),f=b(o),s=l(o,`SELECT o.*, d.summary, d.revision, d.source_path FROM objects o JOIN documents d ON d.object = o.rowid
-      WHERE o.owner = ? AND o.type = 'document' AND o.name = ? AND o.deleted_at IS NULL AND o.kind IN ('knowledge', 'preference')`).get(f.rowid,r);if(!s||!y(o,i,s))throw S();const{head:u,first:h}=I(o,s),m=Buffer.from(H(u.body_hash,s.source_path),"utf8"),c=Z(m,W);return{...L(o,s),body:c.toString("utf8"),size:m.length,truncated:c.length<m.length,grantee:G(o,h.author)}})}n(X,"memoryGet");function k(t,e,r){if(t==="memory.list")return{status:200,body:P(e,r)};if(t==="memory.get")return{status:200,body:X(e,r)};throw new w(404,"not_found","unknown operation")}n(k,"handleMemoryOperation");const ae=[{method:"GET",pattern:"/v1/memory",handler:n(t=>k("memory.list",t.principal,t.query),"handler")},{method:"GET",pattern:"/v1/memory/document",handler:n(t=>k("memory.get",t.principal,t.query),"handler")}];export{W as MEMORY_BODY_MAX_BYTES,se as MEMORY_OPERATIONS,k as handleMemoryOperation,X as memoryGet,P as memoryList,ae as memoryRoutes,Z as utf8Prefix};
+      ORDER BY o.name LIMIT ?`),l=[];for(;;){const f=await k.all(m.rowid,w[0],w[w.length-1],c,c,c,i,i,L);for(const y of f)if(i=y.name,await O(u,p,y)&&l.push(y),l.length>a)break;if(l.length>a||f.length<L)break}const h=l.slice(0,a),T=l.length>a;return{items:await F(h,async f=>await I(u,f)),next_cursor:T?U(h[h.length-1].name,d):null}})}n(P,"memoryList");async function X(t,e){S(e);const r=e.get("name");if(r===null)throw s("name is required","name");if(!E.test(r))throw s("name must be segments of letters, digits, `_` or `-` joined by `/`","name");return await N(async o=>{const a=await b(o,t),d=await v(o),i=await o.prepare(`SELECT o.*, d.summary, d.revision, d.source_path FROM objects o JOIN documents d ON d.object = o.rowid
+      WHERE o.owner = ? AND o.type = 'document' AND o.name = ? AND o.deleted_at IS NULL AND o.kind IN ('knowledge', 'preference')`).get(d.rowid,r);if(!i||!await O(o,a,i))throw R();const{head:u,first:p}=await A(o,i),m=Buffer.from(C(u.body_hash,i.source_path),"utf8"),c=Z(m,W);return{...await I(o,i),body:c.toString("utf8"),size:m.length,truncated:c.length<m.length,grantee:await G(o,p.author)}})}n(X,"memoryGet");async function D(t,e,r){if(t==="memory.list")return{status:200,body:await P(e,r)};if(t==="memory.get")return{status:200,body:await X(e,r)};throw new g(404,"not_found","unknown operation")}n(D,"handleMemoryOperation");const se=[{method:"GET",pattern:"/v1/memory",handler:n(async t=>await D("memory.list",t.principal,t.query),"handler")},{method:"GET",pattern:"/v1/memory/document",handler:n(async t=>await D("memory.get",t.principal,t.query),"handler")}];export{W as MEMORY_BODY_MAX_BYTES,ie as MEMORY_OPERATIONS,D as handleMemoryOperation,X as memoryGet,P as memoryList,se as memoryRoutes,Z as utf8Prefix};