@north-light/cli 0.3.530 → 0.3.532

package/dist/core/providers/files.js

@@ -1 +1 @@
-var te=Object.defineProperty;var d=(e,t)=>te(e,"name",{value:t,configurable:!0});import{prepared as oe}from"../sqlite-statements.js";import{createHash as ne}from"node:crypto";import{closeSync as D,constants as re,createWriteStream as ie}from"node:fs";import{basename as ae,extname as se,isAbsolute as de,join as F}from"node:path";import{Transform as ue}from"node:stream";import{pipeline as le}from"node:stream/promises";import{appSpace as I}from"../layout.js";import{RunError as T}from"../runs/operations.js";import{createFileBeneath as ce,existsBeneath as M,openBeneath as fe,removeTreeBeneath as N,setModeBeneath as pe,unlinkBeneath as he,withDirBeneath as we}from"../spaces/open-beneath.js";import{ensureAppSpace as me}from"../spaces/space.js";import{invalidStorageName as H,storageClient as B,StorageRefused as U,UPLOAD_MAX_BYTES as C}from"../storage/client.js";import{contentTypeFor as _e,openCallerFile as ge}from"../storage/download.js";import{withCanvasWrite as ye}from"../canvas/db.js";import{deleteUploadUse as be,getUpload as $e,insertUpload as Se,insertUploadUses as ve,setUploadSize as Ue,uploadUseAt as ze}from"../storage/tables.js";import{ProviderError as l}from"./errors.js";const Ee=11e4,Ae="app:terminal";function P(e){if(e.class==="person")return e.grantee??Ae;if(!e.grantee)throw new l("server_error","provider caller has no grantee");return e.grantee}d(P,"grantee");function Fe(e){return e.class==="person"?null:{app:P(e),resolved:e.resolved??[],launched:e.class==="broker"?e.nodeScopes:null}}d(Fe,"fileCaller");function y(e){return e instanceof l?e:e instanceof U?new l("storage_unavailable",`storage refused: ${e.message}`):e instanceof T&&e.code==="storage_unavailable"?new l("storage_unavailable",e.message):e}d(y,"storageFailure");const b=d(e=>new l("provider_error",e,{origin:"provider"}),"providerError");function Te(e,t,n){if(typeof n!="string"||!n||!de(n)||n.includes("\0"))throw new l("invalid_request",`${t} must be an absolute runtime path`,{param:t});let i;try{i=ge(Fe(e),n)}catch(r){throw r instanceof T?r.code==="scope_missing"?new l("scope_missing",r.message,{param:t,...r.scope?{scope:r.scope}:{}}):r.code==="not_found"||r.code==="invalid_request"?new l("not_found",`no such file: ${n}`,{param:t}):r:r}try{if(i.size>C)throw new l("invalid_request",`${t} exceeds 100 MiB`,{param:t});const r=ae(i.path),o=H(r);if(o)throw new l("invalid_request",`${t}: file name cannot be sent: ${o}`,{param:t});return{param:t,file:i,name:r,mediaType:_e(i.path)}}catch(r){throw D(i.fd),r}}d(Te,"checkFileArgument");async function Be(e,t){try{const n=await e.createOutbound({name:t.name,size:t.file.size,media_type:t.mediaType});await e.putFileBytes(n.upload_link,t.file.fd,t.file.size,t.mediaType);const i=await e.signOutbound(n.object_id);return{param:t.param,path:t.file.path,name:t.name,object_id:n.object_id,url:i.url}}catch(n){throw y(n)}}d(Be,"copyOutbound");async function k(e,t,n,i){const r=[];try{for(const a of t)n[a]===void 0||n[a]===null||r.push(Te(e,a,n[a]));if(!r.length)return[];let o;try{o=i()}catch(a){throw y(a)}const c=[];for(const a of r)c.push(await Be(o,a));return c}finally{for(const o of r)D(o.file.fd)}}d(k,"copyArguments");function q(e){const t=H(e);if(t)throw new l("server_error",`file output ${e} cannot name an upload: ${t}`)}d(q,"checkOutputField");async function W(e,t,n){q(t);const i=P(e),r="application/octet-stream";let o;try{o=await n().createResultUpload({name:t,media_type:r,max_size:C})}catch(c){throw y(c)}return Se({upload_id:o.upload_id,grantee:i,name:t,media_type:r,size:C,created_at:new Date().toISOString()}),{field:t,upload_id:o.upload_id,upload_link:o.upload_link,grantee:i}}d(W,"createResultUpload");function X(e){return e?{"Crtr-Upload-Id":e.upload_id,"Crtr-Upload-Link":e.upload_link}:{}}d(X,"uploadHeaders");function Y(e,t){const n={...e};for(const i of t)n[i.param]=i.url;return n}d(Y,"withUrls");async function Je(e,t,n,i={}){const r=i.storage??B;t.output&&q(t.output);const o=await k(e,t.params,n,r),c=t.output?await W(e,t.output,r):null;return{arguments:Y(n,o),copies:o,upload:c,headers:X(c)}}d(Je,"prepareFileCall");async function Ke(e,t,n,i,r={}){const o=r.storage??B,c=[];for(const s of i.copies)try{const p=await o().signOutbound(s.object_id);c.push({...s,url:p.url})}catch(p){if(!(p instanceof U))throw y(p);c.push(...await k(e,[s.param],n,o))}let a=i.upload;if(a)try{const s=await o().signUploadLink(a.upload_id);a={...a,upload_link:s.upload_link}}catch(s){if(!(s instanceof U))throw y(s);s.status===404&&(a=await W(e,t.output??a.field,o))}return{arguments:Y(n,c),copies:c,upload:a,headers:X(a)}}d(Ke,"resignForRetry");const Ce=/^[0-9a-f]{64}$/i;function Oe(e,t){if(t===1)return e;const n=se(e);return n&&n!==e?`${e.slice(0,-n.length)}-${t}${n}`:`${e}-${t}`}d(Oe,"candidate");async function Qe(e,t,n,i={}){const r={result:n,file:null,cleanup:d(()=>{},"cleanup")},o=t.upload;if(!o||!n||typeof n!="object"||Array.isArray(n))return r;const c=n,a=c[o.field];if(a==null)return r;if(typeof a!="object"||Array.isArray(a))throw b(`${o.field} must be {upload_id, size, sha256}`);const s=a;if(typeof s.upload_id!="string"||typeof s.size!="number"||!Number.isSafeInteger(s.size)||s.size<0||typeof s.sha256!="string"||!Ce.test(s.sha256))throw b(`${o.field} must be {upload_id, size, sha256}`);if(s.upload_id!==o.upload_id)throw b(`${o.field} names an upload other than Crtr-Upload-Id`);const p=s.size,G=s.sha256.toLowerCase(),z=AbortSignal.timeout(i.budgetMs??Ee),O=i.signal?AbortSignal.any([z,i.signal]):z;let h;try{h=await(i.storage??B)().fetchUpload(o.upload_id,O)}catch(m){throw m instanceof U?b(`${o.field} names an upload with nothing stored`):y(m)}if(h.size===null)throw h.body.destroy(),new l("storage_unavailable",`storage did not say how many bytes ${o.field} holds`);if(h.size!==p)throw h.body.destroy(),b(`${o.field} claims ${p} bytes; storage holds ${h.size}`);const E=o.grantee,$=e.node_id!==null,J=await me(E),f=$?I(E).nodes:I(E).files,A=$?F(f,e.node_id):f,S=$?F(A,"attachments"):f,K={uid:process.getuid?.()??0,gid:J.gid},R=$&&!M(f,A),Q=$&&!R&&!M(f,S);let w=null,v=null,x=!1;const L=d(()=>{if(!x){if(x=!0,v)try{be(v)}catch{}if(w)try{he(f,w)}catch{}try{R?N(f,A):Q&&N(f,S)}catch{}}},"cleanup");try{we(f,S,()=>{},!0);for(let u=1;;u++){const _=F(S,Oe(o.field,u));if(!ze(_))try{ce(f,_,Buffer.alloc(0),432),w=_;break}catch(g){if(g.code!=="EEXIST")throw g}}let m=0;const j=ne("sha256"),V=new ue({transform(u,_,g){m+=u.length,j.update(u),g(null,u)}}),Z=fe(f,w,re.O_WRONLY);try{await le(h.body,V,ie("",{fd:Z,autoClose:!0}),{signal:O})}catch(u){throw z.aborted?new l("storage_unavailable","the file result could not be fetched within 110 s"):u instanceof T?y(u):new l("storage_unavailable",`storage stopped sending ${o.field}: ${u instanceof Error?u.message:String(u)}`)}if(m!==p)throw new l("storage_unavailable",`storage sent ${m} of ${p} bytes of ${o.field}`);if(j.digest("hex")!==G)throw b(`${o.field}: the stored bytes do not match sha256`);pe(f,w,432,K);const ee=w;ye(u=>{const _=$e(o.upload_id,u);if(!_||_.delete_pending_since)throw new l("not_found",`${o.field}: the upload was deleted while it was fetched`);if(Ue(o.upload_id,p,u),!e.run_id)return;const g=oe(u,"SELECT deleting_at FROM nodes WHERE node_id = ?").get(e.run_id);if(!g||g.deleting_at)throw new l("not_found",`run ${e.run_id} was deleted while its file result was fetched`);v={upload_id:o.upload_id,run_id:e.run_id,path:ee},ve([v],u)})}catch(m){throw h.body.destroy(),L(),m}return{result:{...c,[o.field]:w},file:{path:w,upload_id:o.upload_id},cleanup:L}}d(Qe,"resolveFileResult");export{Ee as FILE_RESULT_FETCH_BUDGET_MS,Je as prepareFileCall,Ke as resignForRetry,Qe as resolveFileResult};
+var te=Object.defineProperty;var d=(e,t)=>te(e,"name",{value:t,configurable:!0});import{createHash as oe}from"node:crypto";import{closeSync as D,constants as ne,createWriteStream as ie}from"node:fs";import{basename as re,extname as ae,isAbsolute as se,join as F}from"node:path";import{Transform as de}from"node:stream";import{pipeline as ue}from"node:stream/promises";import{appSpace as I}from"../layout.js";import{RunError as T}from"../runs/operations.js";import{createFileBeneath as ce,existsBeneath as M,openBeneath as le,removeTreeBeneath as N,setModeBeneath as fe,unlinkBeneath as pe,withDirBeneath as he}from"../spaces/open-beneath.js";import{ensureAppSpace as we}from"../spaces/space.js";import{invalidStorageName as H,storageClient as B,StorageRefused as U,UPLOAD_MAX_BYTES as C}from"../storage/client.js";import{contentTypeFor as _e,openCallerFile as me}from"../storage/download.js";import{withCanvasWrite as ge}from"../canvas/db.js";import{deleteUploadUse as ye,getUpload as be,insertUpload as $e,insertUploadUses as Se,setUploadSize as ve,uploadUseAt as Ue}from"../storage/tables.js";import{ProviderError as c}from"./errors.js";const ze=11e4,Ee="app:terminal";function P(e){if(e.class==="person")return e.grantee??Ee;if(!e.grantee)throw new c("server_error","provider caller has no grantee");return e.grantee}d(P,"grantee");function Ae(e){return e.class==="person"?null:{app:P(e),resolved:e.resolved??[],launched:e.class==="broker"?e.nodeScopes:null}}d(Ae,"fileCaller");function y(e){return e instanceof c?e:e instanceof U?new c("storage_unavailable",`storage refused: ${e.message}`):e instanceof T&&e.code==="storage_unavailable"?new c("storage_unavailable",e.message):e}d(y,"storageFailure");const b=d(e=>new c("provider_error",e,{origin:"provider"}),"providerError");function Fe(e,t,n){if(typeof n!="string"||!n||!se(n)||n.includes("\0"))throw new c("invalid_request",`${t} must be an absolute runtime path`,{param:t});let r;try{r=me(Ae(e),n)}catch(i){throw i instanceof T?i.code==="scope_missing"?new c("scope_missing",i.message,{param:t,...i.scope?{scope:i.scope}:{}}):i.code==="not_found"||i.code==="invalid_request"?new c("not_found",`no such file: ${n}`,{param:t}):i:i}try{if(r.size>C)throw new c("invalid_request",`${t} exceeds 100 MiB`,{param:t});const i=re(r.path),o=H(i);if(o)throw new c("invalid_request",`${t}: file name cannot be sent: ${o}`,{param:t});return{param:t,file:r,name:i,mediaType:_e(r.path)}}catch(i){throw D(r.fd),i}}d(Fe,"checkFileArgument");async function Te(e,t){try{const n=await e.createOutbound({name:t.name,size:t.file.size,media_type:t.mediaType});await e.putFileBytes(n.upload_link,t.file.fd,t.file.size,t.mediaType);const r=await e.signOutbound(n.object_id);return{param:t.param,path:t.file.path,name:t.name,object_id:n.object_id,url:r.url}}catch(n){throw y(n)}}d(Te,"copyOutbound");async function k(e,t,n,r){const i=[];try{for(const a of t)n[a]===void 0||n[a]===null||i.push(Fe(e,a,n[a]));if(!i.length)return[];let o;try{o=r()}catch(a){throw y(a)}const l=[];for(const a of i)l.push(await Te(o,a));return l}finally{for(const o of i)D(o.file.fd)}}d(k,"copyArguments");function q(e){const t=H(e);if(t)throw new c("server_error",`file output ${e} cannot name an upload: ${t}`)}d(q,"checkOutputField");async function W(e,t,n){q(t);const r=P(e),i="application/octet-stream";let o;try{o=await n().createResultUpload({name:t,media_type:i,max_size:C})}catch(l){throw y(l)}return await $e({upload_id:o.upload_id,grantee:r,name:t,media_type:i,size:C,created_at:new Date().toISOString()}),{field:t,upload_id:o.upload_id,upload_link:o.upload_link,grantee:r}}d(W,"createResultUpload");function X(e){return e?{"Crtr-Upload-Id":e.upload_id,"Crtr-Upload-Link":e.upload_link}:{}}d(X,"uploadHeaders");function Y(e,t){const n={...e};for(const r of t)n[r.param]=r.url;return n}d(Y,"withUrls");async function Ye(e,t,n,r={}){const i=r.storage??B;t.output&&q(t.output);const o=await k(e,t.params,n,i),l=t.output?await W(e,t.output,i):null;return{arguments:Y(n,o),copies:o,upload:l,headers:X(l)}}d(Ye,"prepareFileCall");async function Ge(e,t,n,r,i={}){const o=i.storage??B,l=[];for(const s of r.copies)try{const p=await o().signOutbound(s.object_id);l.push({...s,url:p.url})}catch(p){if(!(p instanceof U))throw y(p);l.push(...await k(e,[s.param],n,o))}let a=r.upload;if(a)try{const s=await o().signUploadLink(a.upload_id);a={...a,upload_link:s.upload_link}}catch(s){if(!(s instanceof U))throw y(s);s.status===404&&(a=await W(e,t.output??a.field,o))}return{arguments:Y(n,l),copies:l,upload:a,headers:X(a)}}d(Ge,"resignForRetry");const Be=/^[0-9a-f]{64}$/i;function Ce(e,t){if(t===1)return e;const n=ae(e);return n&&n!==e?`${e.slice(0,-n.length)}-${t}${n}`:`${e}-${t}`}d(Ce,"candidate");async function Je(e,t,n,r={}){const i={result:n,file:null,cleanup:d(async()=>{},"cleanup")},o=t.upload;if(!o||!n||typeof n!="object"||Array.isArray(n))return i;const l=n,a=l[o.field];if(a==null)return i;if(typeof a!="object"||Array.isArray(a))throw b(`${o.field} must be {upload_id, size, sha256}`);const s=a;if(typeof s.upload_id!="string"||typeof s.size!="number"||!Number.isSafeInteger(s.size)||s.size<0||typeof s.sha256!="string"||!Be.test(s.sha256))throw b(`${o.field} must be {upload_id, size, sha256}`);if(s.upload_id!==o.upload_id)throw b(`${o.field} names an upload other than Crtr-Upload-Id`);const p=s.size,G=s.sha256.toLowerCase(),z=AbortSignal.timeout(r.budgetMs??ze),O=r.signal?AbortSignal.any([z,r.signal]):z;let h;try{h=await(r.storage??B)().fetchUpload(o.upload_id,O)}catch(_){throw _ instanceof U?b(`${o.field} names an upload with nothing stored`):y(_)}if(h.size===null)throw h.body.destroy(),new c("storage_unavailable",`storage did not say how many bytes ${o.field} holds`);if(h.size!==p)throw h.body.destroy(),b(`${o.field} claims ${p} bytes; storage holds ${h.size}`);const E=o.grantee,$=e.node_id!==null,J=await we(E),f=$?I(E).nodes:I(E).files,A=$?F(f,e.node_id):f,S=$?F(A,"attachments"):f,K={uid:process.getuid?.()??0,gid:J.gid},R=$&&!M(f,A),Q=$&&!R&&!M(f,S);let w=null,v=null,x=!1;const L=d(async()=>{if(!x){if(x=!0,v)try{await ye(v)}catch{}if(w)try{pe(f,w)}catch{}try{R?N(f,A):Q&&N(f,S)}catch{}}},"cleanup");try{he(f,S,()=>{},!0);for(let u=1;;u++){const m=F(S,Ce(o.field,u));if(!await Ue(m))try{ce(f,m,Buffer.alloc(0),432),w=m;break}catch(g){if(g.code!=="EEXIST")throw g}}let _=0;const j=oe("sha256"),V=new de({transform(u,m,g){_+=u.length,j.update(u),g(null,u)}}),Z=le(f,w,ne.O_WRONLY);try{await ue(h.body,V,ie("",{fd:Z,autoClose:!0}),{signal:O})}catch(u){throw z.aborted?new c("storage_unavailable","the file result could not be fetched within 110 s"):u instanceof T?y(u):new c("storage_unavailable",`storage stopped sending ${o.field}: ${u instanceof Error?u.message:String(u)}`)}if(_!==p)throw new c("storage_unavailable",`storage sent ${_} of ${p} bytes of ${o.field}`);if(j.digest("hex")!==G)throw b(`${o.field}: the stored bytes do not match sha256`);fe(f,w,432,K);const ee=w;await ge(async u=>{const m=await be(o.upload_id,u);if(!m||m.delete_pending_since)throw new c("not_found",`${o.field}: the upload was deleted while it was fetched`);if(await ve(o.upload_id,p,u),!e.run_id)return;const g=await u.prepare("SELECT deleting_at FROM nodes WHERE node_id = ?").get(e.run_id);if(!g||g.deleting_at)throw new c("not_found",`run ${e.run_id} was deleted while its file result was fetched`);v={upload_id:o.upload_id,run_id:e.run_id,path:ee},await Se([v],u)})}catch(_){throw h.body.destroy(),await L(),_}return{result:{...l,[o.field]:w},file:{path:w,upload_id:o.upload_id},cleanup:L}}d(Je,"resolveFileResult");export{ze as FILE_RESULT_FETCH_BUDGET_MS,Ye as prepareFileCall,Ge as resignForRetry,Je as resolveFileResult};

package/dist/core/providers/mint.js

@@ -1 +1 @@
-var T=Object.defineProperty;var a=(r,e)=>T(r,"name",{value:e,configurable:!0});import{createHash as M}from"node:crypto";import{readConfig as E}from"../config.js";import{emitEvent as $}from"../events/emit.js";import{grantSyncStateFor as A}from"../grants/mirror.js";import{assertion as N,machineRevokedMessage as O,requestGrantSync as P,runtimeClient as I}from"../grants/sync.js";import{isUnsandboxedMachine as F}from"../runtime/unsandboxed.js";import{ProviderError as h}from"./errors.js";import{cacheKey as G,cachedToken as L,discardEpoch as U,storeToken as C}from"./token-cache.js";import{discardFile as ce}from"./token-cache.js";const D=1e4;function J(r){const e=r.issuer??E("user").runtime?.issuer;if(!e)throw new h("not_found","provider calls need a directory-connected runtime");return e.replace(/\/$/,"")}a(J,"issuerOf");function f(r,e,t){return new h(r,e,{origin:"directory",details:t})}a(f,"directoryError");function B(r,e,t,i){const n=typeof e.error=="string"?e.error:null,o=typeof e.error_description=="string"?e.error_description:void 0,c={directory_status:r,...n?{directory_error:n}:{},...o?{directory_description:o}:{}},u=o?`: ${o}`:"";switch(n){case"invalid_client":return F()?{error:f("machine_revoked",O(i),c),grantRefusal:!1}:{error:f("server_error",`the directory refused the outbound token request (${n})${u}`,c),grantRefusal:!1};case"invalid_request":return{error:f("server_error",`the directory refused the outbound token request (${n})${u}`,c),grantRefusal:!1};case"invalid_target":return{error:f("not_found",`the directory knows no provider at ${t.audience}${u}`,c),grantRefusal:!1};case"invalid_grant":return{error:f("grant_revoked",`the directory has no active grant for ${t.grantee}${u}`,c),grantRefusal:!0};case"provider_not_connected":return{error:f("provider_not_connected",o??"The user has not connected this provider.",c),grantRefusal:!1};case"invalid_scope":{const s=typeof e.scope=="string"&&e.scope?e.scope:t.scope.length===1?t.scope[0]:void 0,m=s?`missing scope ${s}`:`the grant does not cover ${t.scope.join(" ")}`;return{error:new h("scope_missing",m,{origin:"directory",details:c,...s?{scope:s}:{}}),grantRefusal:!0}}default:return{error:f("server_error",`the directory token endpoint answered ${r}${n?` ${n}`:""}${u}`,c),grantRefusal:!1}}}a(B,"refusal");function H(r){try{return JSON.parse(Buffer.from(r.split(".")[1]??"","base64url").toString("utf8"))}catch{return{}}}a(H,"claims");function K(r){const e=r.grant_rev,t=r.grant_status;return typeof e!="number"||!Number.isInteger(e)||e<0||typeof t!="string"?null:{rev:e,status:t}}a(K,"refusedGrantState");function z(r,e){const t=a(i=>i.status==="active"?0:1,"phase");return r.rev>e.rev||r.rev===e.rev&&t(r)>t(e)}a(z,"newer");function Q(r,e,t){if(!e)return;const i=A(r.grantee,r.sub)??{rev:0,status:"removed"};if(!z(e,i))return;const n=t.syncGrants??P;Promise.resolve().then(()=>n({fresh:!0})).catch(()=>{})}a(Q,"syncIfNewer");async function V(r,e={}){const t=J(e),i=`${t}/token`,n=I(),o=new URLSearchParams({grant_type:"client_credentials",client_id:n.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:N(n,i),audience:r.audience,sub:r.sub,grantee:r.grantee,scope:[...new Set(r.scope)].sort().join(" "),initiating_app:r.initiating_app}),c=AbortSignal.timeout(D),u=e.signal?AbortSignal.any([e.signal,c]):c;let s,m;try{s=await(e.fetch??fetch)(i,{method:"POST",body:o,signal:u,headers:{Accept:"application/json"}}),m=await s.text()}catch(l){throw e.signal?.aborted?e.signal.reason:new h("server_error",`the directory token endpoint could not be reached: ${l instanceof Error?l.message:String(l)}`,{origin:"directory"})}let p=null;try{p=m?JSON.parse(m):null}catch{p=null}const g=p&&typeof p=="object"&&!Array.isArray(p)?p:{};if(!s.ok){const{error:l,grantRefusal:j}=B(s.status,g,r,t);throw l.code==="machine_revoked"&&$({level:"error",event:"daemon.grants.machine_revoked",fields:{audience:r.audience}}),$({level:"info",event:"daemon.providers.mint_refused",fields:{audience:r.audience,grantee:r.grantee,code:l.code,directory_error:typeof g.error=="string"?g.error:null,status:s.status}}),j&&Q(r,K(g),e),l}const y=g.access_token;if(typeof y!="string"||!y)throw new h("server_error","the directory token response has no access_token",{origin:"directory"});const d=H(y),S=Math.floor((e.now?.()??Date.now())/1e3),_=g.expires_in,v=typeof _=="number"&&Number.isFinite(_)&&_>0?S+Math.floor(_):null,w=typeof d.exp=="number"?d.exp:null,b=v!==null&&w!==null?Math.min(v,w):v??w;if(b===null)throw new h("server_error","the directory token response names no expiry",{origin:"directory"});const x=typeof d.jti=="string"&&d.jti?d.jti:M("sha256").update(y).digest("hex"),R=typeof d.payer=="string"&&d.payer?d.payer:r.sub;return{access_token:y,jti:x,exp:b,payer:R}}a(V,"mintOutboundToken");const k=new Map;async function ie(r,e={}){const t=G(r),i=e.now??Date.now,n=L(t,i());if(n)return{...n,key:t};let o=k.get(t);if(!o){const u=U(t);o=V(r,{...e,signal:void 0}).then(s=>(C(t,s,u),s)).finally(()=>{k.delete(t)}),o.catch(()=>{}),k.set(t,o)}return{...e.signal?await W(o,e.signal):await o,key:t}}a(ie,"outboundToken");function W(r,e){return e.aborted?Promise.reject(e.reason):new Promise((t,i)=>{const n=a(()=>i(e.reason),"onAbort");e.addEventListener("abort",n,{once:!0}),r.then(t,i).finally(()=>e.removeEventListener("abort",n))})}a(W,"abortable");export{D as MINT_TIMEOUT_MS,ce as discardFile,V as mintOutboundToken,ie as outboundToken};
+var T=Object.defineProperty;var a=(r,e)=>T(r,"name",{value:e,configurable:!0});import{createHash as M}from"node:crypto";import{readConfig as E}from"../config.js";import{emitEvent as $}from"../events/emit.js";import{grantSyncStateFor as A}from"../grants/mirror.js";import{assertion as N,machineRevokedMessage as O,requestGrantSync as P,runtimeClient as I}from"../grants/sync.js";import{isUnsandboxedMachine as F}from"../runtime/unsandboxed.js";import{ProviderError as h}from"./errors.js";import{cacheKey as G,cachedToken as L,discardEpoch as U,storeToken as C}from"./token-cache.js";import{discardFile as ce}from"./token-cache.js";const D=1e4;function J(r){const e=r.issuer??E("user").runtime?.issuer;if(!e)throw new h("not_found","provider calls need a directory-connected runtime");return e.replace(/\/$/,"")}a(J,"issuerOf");function f(r,e,t){return new h(r,e,{origin:"directory",details:t})}a(f,"directoryError");function B(r,e,t,i){const n=typeof e.error=="string"?e.error:null,o=typeof e.error_description=="string"?e.error_description:void 0,c={directory_status:r,...n?{directory_error:n}:{},...o?{directory_description:o}:{}},u=o?`: ${o}`:"";switch(n){case"invalid_client":return F()?{error:f("machine_revoked",O(i),c),grantRefusal:!1}:{error:f("server_error",`the directory refused the outbound token request (${n})${u}`,c),grantRefusal:!1};case"invalid_request":return{error:f("server_error",`the directory refused the outbound token request (${n})${u}`,c),grantRefusal:!1};case"invalid_target":return{error:f("not_found",`the directory knows no provider at ${t.audience}${u}`,c),grantRefusal:!1};case"invalid_grant":return{error:f("grant_revoked",`the directory has no active grant for ${t.grantee}${u}`,c),grantRefusal:!0};case"provider_not_connected":return{error:f("provider_not_connected",o??"The user has not connected this provider.",c),grantRefusal:!1};case"invalid_scope":{const s=typeof e.scope=="string"&&e.scope?e.scope:t.scope.length===1?t.scope[0]:void 0,m=s?`missing scope ${s}`:`the grant does not cover ${t.scope.join(" ")}`;return{error:new h("scope_missing",m,{origin:"directory",details:c,...s?{scope:s}:{}}),grantRefusal:!0}}default:return{error:f("server_error",`the directory token endpoint answered ${r}${n?` ${n}`:""}${u}`,c),grantRefusal:!1}}}a(B,"refusal");function H(r){try{return JSON.parse(Buffer.from(r.split(".")[1]??"","base64url").toString("utf8"))}catch{return{}}}a(H,"claims");function K(r){const e=r.grant_rev,t=r.grant_status;return typeof e!="number"||!Number.isInteger(e)||e<0||typeof t!="string"?null:{rev:e,status:t}}a(K,"refusedGrantState");function z(r,e){const t=a(i=>i.status==="active"?0:1,"phase");return r.rev>e.rev||r.rev===e.rev&&t(r)>t(e)}a(z,"newer");async function Q(r,e,t){if(!e)return;const i=await A(r.grantee,r.sub)??{rev:0,status:"removed"};if(!z(e,i))return;const n=t.syncGrants??P;Promise.resolve().then(()=>n({fresh:!0})).catch(()=>{})}a(Q,"syncIfNewer");async function V(r,e={}){const t=J(e),i=`${t}/token`,n=I(),o=new URLSearchParams({grant_type:"client_credentials",client_id:n.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:N(n,i),audience:r.audience,sub:r.sub,grantee:r.grantee,scope:[...new Set(r.scope)].sort().join(" "),initiating_app:r.initiating_app}),c=AbortSignal.timeout(D),u=e.signal?AbortSignal.any([e.signal,c]):c;let s,m;try{s=await(e.fetch??fetch)(i,{method:"POST",body:o,signal:u,headers:{Accept:"application/json"}}),m=await s.text()}catch(l){throw e.signal?.aborted?e.signal.reason:new h("server_error",`the directory token endpoint could not be reached: ${l instanceof Error?l.message:String(l)}`,{origin:"directory"})}let p=null;try{p=m?JSON.parse(m):null}catch{p=null}const g=p&&typeof p=="object"&&!Array.isArray(p)?p:{};if(!s.ok){const{error:l,grantRefusal:j}=B(s.status,g,r,t);throw l.code==="machine_revoked"&&$({level:"error",event:"daemon.grants.machine_revoked",fields:{audience:r.audience}}),$({level:"info",event:"daemon.providers.mint_refused",fields:{audience:r.audience,grantee:r.grantee,code:l.code,directory_error:typeof g.error=="string"?g.error:null,status:s.status}}),j&&await Q(r,K(g),e),l}const y=g.access_token;if(typeof y!="string"||!y)throw new h("server_error","the directory token response has no access_token",{origin:"directory"});const d=H(y),S=Math.floor((e.now?.()??Date.now())/1e3),_=g.expires_in,v=typeof _=="number"&&Number.isFinite(_)&&_>0?S+Math.floor(_):null,w=typeof d.exp=="number"?d.exp:null,b=v!==null&&w!==null?Math.min(v,w):v??w;if(b===null)throw new h("server_error","the directory token response names no expiry",{origin:"directory"});const x=typeof d.jti=="string"&&d.jti?d.jti:M("sha256").update(y).digest("hex"),R=typeof d.payer=="string"&&d.payer?d.payer:r.sub;return{access_token:y,jti:x,exp:b,payer:R}}a(V,"mintOutboundToken");const k=new Map;async function ie(r,e={}){const t=G(r),i=e.now??Date.now,n=L(t,i());if(n)return{...n,key:t};let o=k.get(t);if(!o){const u=U(t);o=V(r,{...e,signal:void 0}).then(s=>(C(t,s,u),s)).finally(()=>{k.delete(t)}),o.catch(()=>{}),k.set(t,o)}return{...e.signal?await W(o,e.signal):await o,key:t}}a(ie,"outboundToken");function W(r,e){return e.aborted?Promise.reject(e.reason):new Promise((t,i)=>{const n=a(()=>i(e.reason),"onAbort");e.addEventListener("abort",n,{once:!0}),r.then(t,i).finally(()=>e.removeEventListener("abort",n))})}a(W,"abortable");export{D as MINT_TIMEOUT_MS,ce as discardFile,V as mintOutboundToken,ie as outboundToken};

package/dist/core/providers/receipts.d.ts

@@ -16,5 +16,5 @@ type ReceiptCall = {
  * own, and one that fails the check is dropped without dropping the others. Returns the first
  * accepted receipt id.
  */
-export declare function acceptProviderReceipt(value: string | string[] | undefined, call: ReceiptCall): string | undefined;
+export declare function acceptProviderReceipt(value: string | string[] | undefined, call: ReceiptCall): Promise<string | undefined>;
 export {};

package/dist/core/providers/receipts.js

@@ -1,2 +1,2 @@
-var a=Object.defineProperty;var _=(t,r)=>a(t,"name",{value:r,configurable:!0});import{prepared as p}from"../sqlite-statements.js";import{withCanvasWrite as f}from"../canvas/db.js";import{addUsage as g}from"../usage/ledger.js";const y=8,c=65536;function v(t,r){if(!t||typeof t!="object"||Array.isArray(t))return!1;const e=t;return typeof e.receipt_id=="string"&&!!e.receipt_id&&e.receipt_id.length<=256&&e.provider===`app:${r.provider}`&&e.tool===r.tool&&e.request_id===r.request_id&&e.sub===r.sub&&e.grantee===r.grantee&&e.payer===r.payer&&(e.run_id??null)===r.run_id&&typeof e.unit=="string"&&!!e.unit&&typeof e.units=="number"&&Number.isFinite(e.units)&&e.units>=0&&typeof e.time=="string"&&Number.isFinite(Date.parse(e.time))&&typeof e.usd_equivalent=="number"&&Number.isFinite(e.usd_equivalent)&&e.usd_equivalent>=0}_(v,"belongsToCall");function q(t,r){const e=Array.isArray(t)?t[0]:t;if(!e||e.length>c)return;let n;try{n=JSON.parse(e)}catch{return}if(Array.isArray(n)&&n.length>y)return;const o=(Array.isArray(n)?n:[n]).filter(i=>v(i,r));if(o.length)return f(i=>{for(const s of o){if(!p(i,`INSERT OR IGNORE INTO provider_receipts
-        (provider, receipt_id, grantee, run_id, usd_equivalent, received_at) VALUES (?, ?, ?, ?, ?, ?)`).run(r.provider,s.receipt_id,r.grantee,r.run_id,s.usd_equivalent,new Date().toISOString()).changes||(g(i,{grantee:r.ledger_grantee??r.grantee,payer:r.payer.startsWith("app:")?"app":"user",source:`provider:${r.provider}`,served_model:"",input_tokens:0,output_tokens:0,cached_tokens:0,usd_equivalent:s.usd_equivalent}),!r.run_id))continue;const d=p(i,"SELECT usage_json FROM nodes WHERE node_id = ? AND run_id = ?").get(r.run_id,r.run_id);if(!d)continue;const u=d.usage_json?JSON.parse(d.usage_json):{};u.cost_usd=(typeof u.cost_usd=="number"?u.cost_usd:0)+s.usd_equivalent,p(i,"UPDATE nodes SET usage_json = ? WHERE node_id = ?").run(JSON.stringify(u),r.run_id)}}),o[0].receipt_id}_(q,"acceptProviderReceipt");export{q as acceptProviderReceipt};
+var p=Object.defineProperty;var a=(t,r)=>p(t,"name",{value:r,configurable:!0});import{withCanvasWrite as _}from"../canvas/db.js";import{addUsage as f}from"../usage/ledger.js";const g=8,y=65536;function c(t,r){if(!t||typeof t!="object"||Array.isArray(t))return!1;const e=t;return typeof e.receipt_id=="string"&&!!e.receipt_id&&e.receipt_id.length<=256&&e.provider===`app:${r.provider}`&&e.tool===r.tool&&e.request_id===r.request_id&&e.sub===r.sub&&e.grantee===r.grantee&&e.payer===r.payer&&(e.run_id??null)===r.run_id&&typeof e.unit=="string"&&!!e.unit&&typeof e.units=="number"&&Number.isFinite(e.units)&&e.units>=0&&typeof e.time=="string"&&Number.isFinite(Date.parse(e.time))&&typeof e.usd_equivalent=="number"&&Number.isFinite(e.usd_equivalent)&&e.usd_equivalent>=0}a(c,"belongsToCall");async function S(t,r){const e=Array.isArray(t)?t[0]:t;if(!e||e.length>y)return;let n;try{n=JSON.parse(e)}catch{return}if(Array.isArray(n)&&n.length>g)return;const o=(Array.isArray(n)?n:[n]).filter(i=>c(i,r));if(o.length)return await _(async i=>{for(const s of o){if(!(await i.prepare(`INSERT OR IGNORE INTO provider_receipts
+        (provider, receipt_id, grantee, run_id, usd_equivalent, received_at) VALUES (?, ?, ?, ?, ?, ?)`).run(r.provider,s.receipt_id,r.grantee,r.run_id,s.usd_equivalent,new Date().toISOString())).changes||(await f(i,{grantee:r.ledger_grantee??r.grantee,payer:r.payer.startsWith("app:")?"app":"user",source:`provider:${r.provider}`,served_model:"",input_tokens:0,output_tokens:0,cached_tokens:0,usd_equivalent:s.usd_equivalent}),!r.run_id))continue;const d=await i.prepare("SELECT usage_json FROM nodes WHERE node_id = ? AND run_id = ?").get(r.run_id,r.run_id);if(!d)continue;const u=d.usage_json?JSON.parse(d.usage_json):{};u.cost_usd=(typeof u.cost_usd=="number"?u.cost_usd:0)+s.usd_equivalent,await i.prepare("UPDATE nodes SET usage_json = ? WHERE node_id = ?").run(JSON.stringify(u),r.run_id)}}),o[0].receipt_id}a(S,"acceptProviderReceipt");export{S as acceptProviderReceipt};

package/dist/core/review/birth.js

@@ -1 +1 @@
-var s=Object.defineProperty;var n=(o,e)=>s(o,"name",{value:e,configurable:!0});import{commitBindingRequest as w}from"../human/requests.js";import{getReview as _}from"./store.js";import{discardStaging as a,stageReview as c}from"./stage.js";import{realizeReview as d}from"./realize.js";async function f(o){const e=await c(o);if(e.existing!==void 0){await d(e.existing.request_id);const r=_(e.existing.request_id);if(r===null)throw new Error(`realized review disappeared: ${e.existing.request_id}`);return r}let i;try{i=w({request_id:e.row.review_id,idempotency_key:e.row.idempotency_key,requester_node_id:e.row.origin_node_id,companion_node_id:e.row.companion_node_id,request_dir:e.row.review_dir,file:e.row.file,specification:{origin_kind:e.row.origin_kind,origin_session_file:e.row.origin_session_file,origin_session_id:e.row.origin_session_id,origin_leaf_id:e.row.origin_leaf_id,model_spec:e.row.model_spec,branch_file:e.row.branch_file,baseline_sha256:e.row.baseline_sha256,baseline_bytes:e.row.baseline_bytes,captured_at:e.row.captured_at,output_path:e.row.output_path,document_id:e.row.document_id,document_name:e.row.document_name,document_base:e.row.document_base},anchor_base_sha256:e.row.anchor_base_sha256,anchor_base_bytes:e.row.anchor_base_bytes,created_at:e.row.created,subtitle:e.row.subtitle,...e.row.document_name===null?{}:{title:e.row.document_name},inbox_listed:e.row.origin_kind==="ticket"})}catch(r){throw a(e.row.review_id,e.row.branch_file),r}i.won||a(e.row.review_id,e.row.branch_file),await d(i.request_id);const t=_(i.request_id);if(t===null)throw new Error(`realized review disappeared: ${i.request_id}`);return t}n(f,"createReview");export{f as createReview};
+var s=Object.defineProperty;var n=(o,e)=>s(o,"name",{value:e,configurable:!0});import{commitBindingRequest as w}from"../human/requests.js";import{getReview as a}from"./store.js";import{discardStaging as _,stageReview as c}from"./stage.js";import{realizeReview as d}from"./realize.js";async function f(o){const e=await c(o);if(e.existing!==void 0){await d(e.existing.request_id);const r=await a(e.existing.request_id);if(r===null)throw new Error(`realized review disappeared: ${e.existing.request_id}`);return r}let i;try{i=await w({request_id:e.row.review_id,idempotency_key:e.row.idempotency_key,requester_node_id:e.row.origin_node_id,companion_node_id:e.row.companion_node_id,request_dir:e.row.review_dir,file:e.row.file,specification:{origin_kind:e.row.origin_kind,origin_session_file:e.row.origin_session_file,origin_session_id:e.row.origin_session_id,origin_leaf_id:e.row.origin_leaf_id,model_spec:e.row.model_spec,branch_file:e.row.branch_file,baseline_sha256:e.row.baseline_sha256,baseline_bytes:e.row.baseline_bytes,captured_at:e.row.captured_at,output_path:e.row.output_path,document_id:e.row.document_id,document_name:e.row.document_name,document_base:e.row.document_base},anchor_base_sha256:e.row.anchor_base_sha256,anchor_base_bytes:e.row.anchor_base_bytes,created_at:e.row.created,subtitle:e.row.subtitle,...e.row.document_name===null?{}:{title:e.row.document_name},inbox_listed:e.row.origin_kind==="ticket"})}catch(r){throw await _(e.row.review_id,e.row.branch_file),r}i.won||await _(e.row.review_id,e.row.branch_file),await d(i.request_id);const t=await a(i.request_id);if(t===null)throw new Error(`realized review disappeared: ${i.request_id}`);return t}n(f,"createReview");export{f as createReview};

package/dist/core/review/comments.d.ts

@@ -1,4 +1,4 @@
-import type { DatabaseSync } from 'node:sqlite';
+import { type CanvasDb } from '../canvas/db.js';
 import { type CommentAnchor, type CommentAuthorKind, type CommentStatus, type ReviewComment, type ReviewCommentEvent } from './types.js';
 interface Actor {
     kind: CommentAuthorKind;
@@ -17,53 +17,53 @@ export declare function createComment(args: {
     doc_hash: string;
     actor: Actor;
     operation_id: string;
-}): {
+}): Promise<{
     comment: ReviewComment;
     changed: true;
-};
+}>;
 export declare function editComment(commentIdValue: string, args: {
     text: string;
     actor: Actor;
     operation_id: string;
     if_revision?: number;
-}): {
+}): Promise<{
     comment: ReviewComment;
     changed: boolean;
-};
-export declare function resolveComment(commentIdValue: string, args: CommentMutationArgs): {
+}>;
+export declare function resolveComment(commentIdValue: string, args: CommentMutationArgs): Promise<{
     comment: ReviewComment;
     changed: boolean;
-};
-export declare function reopenComment(commentIdValue: string, args: CommentMutationArgs): {
+}>;
+export declare function reopenComment(commentIdValue: string, args: CommentMutationArgs): Promise<{
     comment: ReviewComment;
     changed: boolean;
-};
-export declare function deleteComment(commentIdValue: string, args: CommentMutationArgs): {
+}>;
+export declare function deleteComment(commentIdValue: string, args: CommentMutationArgs): Promise<{
     comment: ReviewComment;
     changed: boolean;
-};
+}>;
 export declare function listComments(reviewId: string, opts?: {
     status?: CommentStatus | 'all';
-}): ReviewComment[];
-export declare function getComment(commentIdValue: string): ReviewComment | null;
-export declare function listCommentEvents(commentIdValue: string): ReviewCommentEvent[];
+}): Promise<ReviewComment[]>;
+export declare function getComment(commentIdValue: string): Promise<ReviewComment | null>;
+export declare function listCommentEvents(commentIdValue: string): Promise<ReviewCommentEvent[]>;
 export declare function listReviewEvents(reviewId: string, opts: {
     since_seq?: number;
     limit?: number;
-}): {
+}): Promise<{
     events: ReviewCommentEvent[];
     next_since_seq: number;
-};
-export declare function snapshotCommentsLocked(db: DatabaseSync, reviewId: string): {
+}>;
+export declare function snapshotCommentsLocked(db: CanvasDb, reviewId: string): Promise<{
     comments: import('../human/types.js').FeedbackComment[];
     total: number;
     unresolved: number;
-};
+}>;
 export declare function appendDeliveryEvent(args: {
     review_id: string;
     comment_id: string;
     kind: 'notified' | 'notify_failed';
     payload: unknown;
     operation_id: string;
-}): void;
+}): Promise<void>;
 export {};

package/dist/core/review/comments.js

@@ -1,21 +1,21 @@
-var D=Object.defineProperty;var i=(e,t)=>D(e,"name",{value:t,configurable:!0});import{prepared as _}from"../sqlite-statements.js";import{randomBytes as F}from"node:crypto";import{openDb as l,withCanvasWrite as h}from"../canvas/db.js";import{nowIso as v}from"../fs-utils.js";import{signalReviewActivity as E}from"./signal.js";import{COMMENT_EVENTS_PAGE_DEFAULT as U,COMMENT_EVENTS_PAGE_MAX as W,COMMENT_LINE_TEXT_MAX as B,COMMENT_TEXT_MAX as k,LIVE_COMMENTS_MAX as N,ReviewOperationError as u}from"./types.js";function m(e){return{comment_id:e.comment_id,review_id:e.review_id,status:e.status,revision:e.revision,text:e.text,anchor:{line:e.anchor_line,end_line:e.anchor_end_line,...e.anchor_col_start===null?{}:{col_start:e.anchor_col_start},...e.anchor_col_end===null?{}:{col_end:e.anchor_col_end},...e.anchor_quote===null?{}:{quote:e.anchor_quote}},anchor_state:e.anchor_state,anchor_line_text:e.anchor_line_text,anchor_doc_hash:e.anchor_doc_hash,author:{kind:e.author_kind,node_id:e.author_node_id},updated_by:{kind:e.updated_by_kind,node_id:e.updated_by_node_id},created_at:e.created_at,updated_at:e.updated_at,resolved_at:e.resolved_at,deleted_at:e.deleted_at,created_seq:e.created_seq}}i(m,"commentFromRow");function q(e){return{seq:e.seq,review_id:e.review_id,comment_id:e.comment_id,kind:e.kind,state_change:e.state_change===0?0:1,revision_after:e.revision_after,actor:{kind:e.actor_kind,node_id:e.actor_node_id},at:e.at,operation_id:e.operation_id,...e.payload===null?{}:{payload:JSON.parse(e.payload)}}}i(q,"eventFromRow");function y(e){return JSON.stringify(e)}i(y,"json");function S(){let e;do e=F(16).toString("hex");while(/^0+$/.test(e));return e}i(S,"commentId");function C(e){const t=e.trim();if(t==="")throw new Error("comment text must not be empty");const n=Buffer.byteLength(t,"utf8");if(n>k)throw new u("text_too_long","comment text exceeds the maximum length",{limit:k,received:n});return t}i(C,"trimText");function H(e,t){if(Buffer.byteLength(e,"utf8")<=t)return e;const n="\u2026 [truncated]",r=Buffer.byteLength(n,"utf8"),o=Buffer.from(e,"utf8");let d=Math.max(0,t-r);for(;d>0&&(o[d]&192)===128;)d-=1;return`${o.subarray(0,d).toString("utf8")}${n}`}i(H,"truncateUtf8");function p(e,t){return _(e,"SELECT * FROM review_comments WHERE comment_id = ?").get(t)??null}i(p,"getStoredComment");function f(e,t){const n=p(e,t);if(n===null)throw new u("unknown_comment","comment was not found",{received:t});return n}i(f,"requireStoredComment");function L(e,t){if(_(e,"SELECT request_id FROM human_requests WHERE request_id = ? AND kind = 'review' AND state = 'open'").get(t)===void 0)throw new u("unknown_review","review was not found",{received:t})}i(L,"assertReviewExists");function M(e,t){if(t!==void 0&&t!==e.revision)throw new u("stale_comment","comment revision is stale",{revision:e.revision,text:e.text})}i(M,"assertRevision");function x(e,t){const n=_(e,`
+var A=Object.defineProperty;var i=(e,t)=>A(e,"name",{value:t,configurable:!0});import{randomBytes as D}from"node:crypto";import{withCanvasWrite as u,openDb as l}from"../canvas/db.js";import{nowIso as h}from"../fs-utils.js";import{signalReviewActivity as v}from"./signal.js";import{COMMENT_EVENTS_PAGE_DEFAULT as F,COMMENT_EVENTS_PAGE_MAX as U,COMMENT_LINE_TEXT_MAX as W,COMMENT_TEXT_MAX as R,LIVE_COMMENTS_MAX as T,ReviewOperationError as m}from"./types.js";function _(e){return{comment_id:e.comment_id,review_id:e.review_id,status:e.status,revision:e.revision,text:e.text,anchor:{line:e.anchor_line,end_line:e.anchor_end_line,...e.anchor_col_start===null?{}:{col_start:e.anchor_col_start},...e.anchor_col_end===null?{}:{col_end:e.anchor_col_end},...e.anchor_quote===null?{}:{quote:e.anchor_quote}},anchor_state:e.anchor_state,anchor_line_text:e.anchor_line_text,anchor_doc_hash:e.anchor_doc_hash,author:{kind:e.author_kind,node_id:e.author_node_id},updated_by:{kind:e.updated_by_kind,node_id:e.updated_by_node_id},created_at:e.created_at,updated_at:e.updated_at,resolved_at:e.resolved_at,deleted_at:e.deleted_at,created_seq:e.created_seq}}i(_,"commentFromRow");function k(e){return{seq:e.seq,review_id:e.review_id,comment_id:e.comment_id,kind:e.kind,state_change:e.state_change===0?0:1,revision_after:e.revision_after,actor:{kind:e.actor_kind,node_id:e.actor_node_id},at:e.at,operation_id:e.operation_id,...e.payload===null?{}:{payload:JSON.parse(e.payload)}}}i(k,"eventFromRow");function N(e){return JSON.stringify(e)}i(N,"json");function q(){let e;do e=D(16).toString("hex");while(/^0+$/.test(e));return e}i(q,"commentId");function C(e){const t=e.trim();if(t==="")throw new Error("comment text must not be empty");const n=Buffer.byteLength(t,"utf8");if(n>R)throw new m("text_too_long","comment text exceeds the maximum length",{limit:R,received:n});return t}i(C,"trimText");function B(e,t){if(Buffer.byteLength(e,"utf8")<=t)return e;const n="\u2026 [truncated]",r=Buffer.byteLength(n,"utf8"),o=Buffer.from(e,"utf8");let a=Math.max(0,t-r);for(;a>0&&(o[a]&192)===128;)a-=1;return`${o.subarray(0,a).toString("utf8")}${n}`}i(B,"truncateUtf8");async function p(e,t){return await e.prepare("SELECT * FROM review_comments WHERE comment_id = ?").get(t)??null}i(p,"getStoredComment");async function E(e,t){const n=await p(e,t);if(n===null)throw new m("unknown_comment","comment was not found",{received:t});return n}i(E,"requireStoredComment");async function L(e,t){if(await e.prepare("SELECT request_id FROM human_requests WHERE request_id = ? AND kind = 'review' AND state = 'open'").get(t)===void 0)throw new m("unknown_review","review was not found",{received:t})}i(L,"assertReviewExists");function S(e,t){if(t!==void 0&&t!==e.revision)throw new m("stale_comment","comment revision is stale",{revision:e.revision,text:e.text})}i(S,"assertRevision");async function w(e,t){const n=await e.prepare(`
     INSERT INTO review_comment_events
       (review_id, comment_id, kind, state_change, revision_after, actor_kind, actor_node_id, at, operation_id, payload)
     VALUES (?, ?, ?, 1, ?, ?, ?, ?, ?, ?)
-  `).run(t.row.review_id,t.row.comment_id,t.kind,t.row.revision,t.actor.kind,t.actor.node_id,t.at,t.operation_id,y(t.payload));return Number(n.lastInsertRowid)}i(x,"appendStateEvent");function O(e,t,n,r,o){const d=t.revision+1;return _(e,`
+  `).run(t.row.review_id,t.row.comment_id,t.kind,t.row.revision,t.actor.kind,t.actor.node_id,t.at,t.operation_id,N(t.payload));return Number(n.lastInsertRowid)}i(w,"appendStateEvent");async function M(e,t,n,r,o){const a=t.revision+1;return await e.prepare(`
     UPDATE review_comments
     SET status = ?, revision = ?, text = ?, updated_by_kind = ?, updated_by_node_id = ?,
         updated_at = ?, resolved_at = ?, deleted_at = ?
     WHERE comment_id = ?
-  `).run(n.status??t.status,d,n.text??t.text,r.kind,r.node_id,o,n.resolved_at===void 0?t.resolved_at:n.resolved_at,n.deleted_at===void 0?t.deleted_at:n.deleted_at,t.comment_id),{...t,...n,revision:d,updated_by_kind:r.kind,updated_by_node_id:r.node_id,updated_at:o}}i(O,"updateComment");function A(e){return e.changed&&E(),e}i(A,"completeMutation");function G(e){const t=h(n=>{L(n,e.review_id);const r=_(n,"SELECT COUNT(*) AS count FROM review_comments WHERE review_id = ? AND status != 'deleted'").get(e.review_id);if(Number(r.count)>=N)throw new u("comment_limit_reached","review comment limit reached",{limit:N,live:Number(r.count)});const o=C(e.text),d=H(e.line_text,B),c=v();let a=S();for(;p(n,a)!==null;)a=S();if(_(n,`
+  `).run(n.status??t.status,a,n.text??t.text,r.kind,r.node_id,o,n.resolved_at===void 0?t.resolved_at:n.resolved_at,n.deleted_at===void 0?t.deleted_at:n.deleted_at,t.comment_id),{...t,...n,revision:a,updated_by_kind:r.kind,updated_by_node_id:r.node_id,updated_at:o}}i(M,"updateComment");function O(e){return e.changed&&v(),e}i(O,"completeMutation");async function P(e){const t=await u(async n=>{await L(n,e.review_id);const r=await n.prepare("SELECT COUNT(*) AS count FROM review_comments WHERE review_id = ? AND status != 'deleted'").get(e.review_id);if(Number(r.count)>=T)throw new m("comment_limit_reached","review comment limit reached",{limit:T,live:Number(r.count)});const o=C(e.text),a=B(e.line_text,W),d=h();let c=q();for(;await p(n,c)!==null;)c=q();if((await n.prepare(`
       INSERT INTO review_comments
         (comment_id, review_id, status, revision, text, anchor_line, anchor_end_line,
          anchor_col_start, anchor_col_end, anchor_quote, anchor_line_text, anchor_doc_hash, anchor_state,
          author_kind, author_node_id, updated_by_kind, updated_by_node_id, created_at,
          updated_at, resolved_at, deleted_at, created_seq)
       VALUES (?, ?, 'open', 1, ?, ?, ?, ?, ?, ?, ?, ?, 'live', ?, ?, ?, ?, ?, ?, NULL, NULL, 0)
-    `).run(a,e.review_id,o,e.anchor.line,e.anchor.end_line,e.anchor.col_start??null,e.anchor.col_end??null,e.anchor.quote??null,d,e.doc_hash,e.actor.kind,e.actor.node_id,e.actor.kind,e.actor.node_id,c,c).changes!==1)throw new Error("failed to insert review comment");const w=p(n,a),T=x(n,{row:w,kind:"created",actor:e.actor,operation_id:e.operation_id,at:c,payload:{text:o,anchor:e.anchor,line_text:d,doc_hash:e.doc_hash}});return _(n,"UPDATE review_comments SET created_seq = ? WHERE comment_id = ?").run(T,a),{comment:m({...w,created_seq:T}),changed:!0}});return E(),t}i(G,"createComment");function J(e,t){const n=h(r=>{const o=f(r,e);if(o.status==="deleted")throw new u("comment_deleted","comment is a deleted tombstone",{comment_id:o.comment_id,deleted_at:o.deleted_at});const d=C(t.text);if(o.text===d)return{comment:m(o),changed:!1};M(o,t.if_revision);const c=v(),a=m(o).anchor,s=O(r,o,{text:d},t.actor,c);return x(r,{row:s,kind:"edited",actor:t.actor,operation_id:t.operation_id,at:c,payload:{previous_text:o.text,text:d,previous_anchor:a,anchor:m(s).anchor}}),{comment:m(s),changed:!0}});return A(n)}i(J,"editComment");function R(e,t,n,r){const o=h(d=>{const c=f(d,e);if(c.status==="deleted"){if(n==="deleted")return{comment:m(c),changed:!1};throw new u("comment_deleted","comment is a deleted tombstone",{comment_id:c.comment_id,deleted_at:c.deleted_at})}if(c.status===n)return{comment:m(c),changed:!1};M(c,t.if_revision);const a=v(),s=O(d,c,{status:n,resolved_at:n==="resolved"?a:n==="open"?null:void 0,deleted_at:n==="deleted"?a:void 0},t.actor,a);return x(d,{row:s,kind:r,actor:t.actor,operation_id:t.operation_id,at:a,payload:{previous_status:c.status,status:n,previous_text:c.text,text:s.text,previous_anchor:m(c).anchor,anchor:m(s).anchor}}),{comment:m(s),changed:!0}});return A(o)}i(R,"transitionComment");function j(e,t){return R(e,t,"resolved","resolved")}i(j,"resolveComment");function z(e,t){return R(e,t,"open","reopened")}i(z,"reopenComment");function K(e,t){return R(e,t,"deleted","deleted")}i(K,"deleteComment");function Q(e,t){const n=l(),r=t?.status;return(r===void 0?_(n,"SELECT * FROM review_comments WHERE review_id = ? AND status != 'deleted' ORDER BY anchor_line, created_seq").all(e):r==="all"?_(n,"SELECT * FROM review_comments WHERE review_id = ? ORDER BY anchor_line, created_seq").all(e):_(n,"SELECT * FROM review_comments WHERE review_id = ? AND status = ? ORDER BY anchor_line, created_seq").all(e,r)).map(m)}i(Q,"listComments");function Z(e){const t=p(l(),e);return t===null?null:m(t)}i(Z,"getComment");function g(e){return _(l(),"SELECT * FROM review_comment_events WHERE comment_id = ? ORDER BY seq").all(e).map(q)}i(g,"listCommentEvents");function ee(e,t){const n=t.since_seq??0,r=Math.min(Math.max(t.limit??U,1),W),d=_(l(),"SELECT * FROM review_comment_events WHERE review_id = ? AND seq > ? ORDER BY seq LIMIT ?").all(e,n,r).map(q);return{events:d,next_since_seq:d.length===0?n:d[d.length-1].seq}}i(ee,"listReviewEvents");function te(e,t){const n=_(e,"SELECT * FROM review_comments WHERE review_id = ? AND status != 'deleted' ORDER BY anchor_line, created_seq").all(t);return{comments:n.map(o=>({id:o.comment_id,line:o.anchor_line,endLine:o.anchor_end_line,...o.anchor_quote===null?{}:{quote:o.anchor_quote},...o.anchor_col_start===null?{}:{colStart:o.anchor_col_start},...o.anchor_col_end===null?{}:{colEnd:o.anchor_col_end},lineText:o.anchor_line_text,comment:o.text,createdAt:o.created_at})),total:n.length,unresolved:n.filter(o=>o.status==="open").length}}i(te,"snapshotCommentsLocked");function ne(e){h(t=>{if(L(t,e.review_id),f(t,e.comment_id).review_id!==e.review_id)throw new u("unknown_comment","comment was not found",{received:e.comment_id});_(t,`
+    `).run(c,e.review_id,o,e.anchor.line,e.anchor.end_line,e.anchor.col_start??null,e.anchor.col_end??null,e.anchor.quote??null,a,e.doc_hash,e.actor.kind,e.actor.node_id,e.actor.kind,e.actor.node_id,d,d)).changes!==1)throw new Error("failed to insert review comment");const y=await p(n,c),x=await w(n,{row:y,kind:"created",actor:e.actor,operation_id:e.operation_id,at:d,payload:{text:o,anchor:e.anchor,line_text:a,doc_hash:e.doc_hash}});return await n.prepare("UPDATE review_comments SET created_seq = ? WHERE comment_id = ?").run(x,c),{comment:_({...y,created_seq:x}),changed:!0}});return v(),t}i(P,"createComment");async function $(e,t){const n=await u(async r=>{const o=await E(r,e);if(o.status==="deleted")throw new m("comment_deleted","comment is a deleted tombstone",{comment_id:o.comment_id,deleted_at:o.deleted_at});const a=C(t.text);if(o.text===a)return{comment:_(o),changed:!1};S(o,t.if_revision);const d=h(),c=_(o).anchor,s=await M(r,o,{text:a},t.actor,d);return await w(r,{row:s,kind:"edited",actor:t.actor,operation_id:t.operation_id,at:d,payload:{previous_text:o.text,text:a,previous_anchor:c,anchor:_(s).anchor}}),{comment:_(s),changed:!0}});return O(n)}i($,"editComment");async function f(e,t,n,r){const o=await u(async a=>{const d=await E(a,e);if(d.status==="deleted"){if(n==="deleted")return{comment:_(d),changed:!1};throw new m("comment_deleted","comment is a deleted tombstone",{comment_id:d.comment_id,deleted_at:d.deleted_at})}if(d.status===n)return{comment:_(d),changed:!1};S(d,t.if_revision);const c=h(),s=await M(a,d,{status:n,resolved_at:n==="resolved"?c:n==="open"?null:void 0,deleted_at:n==="deleted"?c:void 0},t.actor,c);return await w(a,{row:s,kind:r,actor:t.actor,operation_id:t.operation_id,at:c,payload:{previous_status:d.status,status:n,previous_text:d.text,text:s.text,previous_anchor:_(d).anchor,anchor:_(s).anchor}}),{comment:_(s),changed:!0}});return O(o)}i(f,"transitionComment");async function G(e,t){return await f(e,t,"resolved","resolved")}i(G,"resolveComment");async function J(e,t){return await f(e,t,"open","reopened")}i(J,"reopenComment");async function j(e,t){return await f(e,t,"deleted","deleted")}i(j,"deleteComment");async function z(e,t){const n=await l(),r=t?.status;return(r===void 0?await n.prepare("SELECT * FROM review_comments WHERE review_id = ? AND status != 'deleted' ORDER BY anchor_line, created_seq").all(e):r==="all"?await n.prepare("SELECT * FROM review_comments WHERE review_id = ? ORDER BY anchor_line, created_seq").all(e):await n.prepare("SELECT * FROM review_comments WHERE review_id = ? AND status = ? ORDER BY anchor_line, created_seq").all(e,r)).map(_)}i(z,"listComments");async function K(e){const t=await p(await l(),e);return t===null?null:_(t)}i(K,"getComment");async function Q(e){return(await(await l()).prepare("SELECT * FROM review_comment_events WHERE comment_id = ? ORDER BY seq").all(e)).map(k)}i(Q,"listCommentEvents");async function Z(e,t){const n=t.since_seq??0,r=Math.min(Math.max(t.limit??F,1),U),a=(await(await l()).prepare("SELECT * FROM review_comment_events WHERE review_id = ? AND seq > ? ORDER BY seq LIMIT ?").all(e,n,r)).map(k);return{events:a,next_since_seq:a.length===0?n:a[a.length-1].seq}}i(Z,"listReviewEvents");async function g(e,t){const n=await e.prepare("SELECT * FROM review_comments WHERE review_id = ? AND status != 'deleted' ORDER BY anchor_line, created_seq").all(t);return{comments:n.map(o=>({id:o.comment_id,line:o.anchor_line,endLine:o.anchor_end_line,...o.anchor_quote===null?{}:{quote:o.anchor_quote},...o.anchor_col_start===null?{}:{colStart:o.anchor_col_start},...o.anchor_col_end===null?{}:{colEnd:o.anchor_col_end},lineText:o.anchor_line_text,comment:o.text,createdAt:o.created_at})),total:n.length,unresolved:n.filter(o=>o.status==="open").length}}i(g,"snapshotCommentsLocked");async function ee(e){await u(async t=>{if(await L(t,e.review_id),(await E(t,e.comment_id)).review_id!==e.review_id)throw new m("unknown_comment","comment was not found",{received:e.comment_id});await t.prepare(`
       INSERT INTO review_comment_events
         (review_id, comment_id, kind, state_change, revision_after, actor_kind, actor_node_id, at, operation_id, payload)
       VALUES (?, ?, ?, 0, NULL, 'system', NULL, ?, ?, ?)
-    `).run(e.review_id,e.comment_id,e.kind,v(),e.operation_id,y(e.payload))}),E()}i(ne,"appendDeliveryEvent");export{ne as appendDeliveryEvent,G as createComment,K as deleteComment,J as editComment,Z as getComment,g as listCommentEvents,Q as listComments,ee as listReviewEvents,z as reopenComment,j as resolveComment,te as snapshotCommentsLocked};
+    `).run(e.review_id,e.comment_id,e.kind,h(),e.operation_id,N(e.payload))}),v()}i(ee,"appendDeliveryEvent");export{ee as appendDeliveryEvent,P as createComment,j as deleteComment,$ as editComment,K as getComment,Q as listCommentEvents,z as listComments,Z as listReviewEvents,J as reopenComment,G as resolveComment,g as snapshotCommentsLocked};

package/dist/core/review/companion.d.ts

@@ -27,7 +27,7 @@ export declare function captureOrigin(originNodeId: string, deps?: {
 /** Create the ordinary, promptless companion node. Realization owns its launch. */
 export declare function spawnReviewCompanion(spec: ReviewCompanionSpec): Promise<void>;
 /** A companion is bound only when its session coordinates and visible boundary are durable. */
-export declare function isReviewCompanionBound(nodeId: string): boolean;
+export declare function isReviewCompanionBound(nodeId: string): Promise<boolean>;
 /** Wait for the durable companion bind without owning companion liveness. */
 export declare function awaitCompanionBind(nodeId: string, deadlineMs: number): Promise<boolean>;
 export {};

package/dist/core/review/companion.js

@@ -1 +1 @@
-var y=Object.defineProperty;var s=(e,o)=>y(e,"name",{value:o,configurable:!0});import{randomUUID as v}from"node:crypto";import{conversationIdFromPath as u,conversationStore as w,ConversationNotFoundError as p}from"../conversation-store/index.js";import{basename as F,isAbsolute as c}from"node:path";import{BrokerClient as x}from"../broker-client/index.js";import{deleteNode as M,getNode as g}from"../canvas/index.js";import{expandModelCandidates as C,selectInitialModelRoute as E}from"../model-routes.js";import{buildLaunchSpec as L}from"../runtime/launch.js";import{openModelRegistry as B}from"../runtime/model-registry.js";import{isBrokerLive as O}from"../runtime/model-swap.js";import{spawnNode as R}from"../runtime/nodes.js";import{SessionManager as D}from"../runtime/broker-sdk.js";import{isReviewBoundary as P}from"../runtime/session-visibility.js";import{forkNodeLedger as $}from"../runtime/ledger.js";import{ReviewOperationError as b}from"./types.js";const I=/^[^/\s:]+\/[^/\s:]+:(?:off|minimal|low|medium|high|xhigh|max)$/,q=100;function N(e){return new b("review_origin_missing","review origin was not found",{origin_node_id:e})}s(N,"originMissing");function f(e,o,r={}){return new b("review_origin_unforkable","review origin has no forkable exact session",{origin_node_id:e,reason:o,...r})}s(f,"originUnforkable");async function k(e,o,r){const n=u(o.sourceFile);if(!c(o.sourceFile)||n===null||n!==o.sourceSessionId||o.leafId===null||o.leafId==="")throw f(e,"no_forkable_session");try{w().header(n)}catch(i){throw i instanceof p?f(e,"no_forkable_session"):i}if(o.modelSpec===null||!I.test(o.modelSpec))throw f(e,"model_unresolvable");const t=E({kind:"exact",spec:o.modelSpec},r??await B(),{cwd:o.cwd,profileId:o.profileId});if(t.selected===void 0)throw f(e,"model_unresolvable",{model_reason:t.rejected[0]?.reason});return{sourceFile:o.sourceFile,sourceSessionId:o.sourceSessionId,leafId:o.leafId,modelSpec:o.modelSpec}}s(k,"validateCapture");function U(e){return new Promise((o,r)=>{const n=new x(e);let t=!1;function i(d){t||(t=!0,n.close(),d())}s(i,"finish"),n.on("error",d=>i(()=>r(d))),n.on("close",()=>i(()=>r(new Error("origin broker closed before fork coordinates were read")))),n.on("connect",()=>{n.send({type:"hello",role:"observer",client_id:v()}),n.request({type:"get_human_fork_coordinates"}).then(d=>{if(d.kind!=="human_fork_coordinates"){i(()=>r(new Error("origin broker returned an unexpected fork-coordinate response")));return}i(()=>o(d))}).catch(d=>i(()=>r(d)))}),n.connect()})}s(U,"captureLiveOrigin");async function re(e,o={}){const r=g(e);if(r===null)throw N(e);if(O(r)){const a=await U(e);return k(e,{...a,cwd:r.cwd,profileId:r.profile_id},o.registry)}const n=typeof r.pi_session_file=="string"?r.pi_session_file:"";let t="",i=null,d=null;const h=u(n);if(c(n)&&h!==null)try{const a=w().read(h),m=D.inMemory(a.header.cwd,void 0,[a.header,...a.entries]);t=m.getSessionId(),i=m.getLeafId();const _=r.launch?.model,l=typeof _=="string"?C({kind:"exact",spec:_},r.cwd,r.profile_id)[0]:void 0;if(l!==void 0){const S=l.thinkingLevel??(m.buildSessionContext().thinkingLevel||"off");d=`${l.providerId}/${l.modelId}:${S}`}}catch(a){if(!(a instanceof p))throw a}return k(e,{sourceFile:n,sourceSessionId:t,leafId:i,modelSpec:d,cwd:r.cwd,profileId:r.profile_id},o.registry)}s(re,"captureOrigin");async function ne(e){if(!c(e.branchFile)||!c(e.targetFile))throw new Error("review companion requires absolute branch and target paths");if(!I.test(e.modelSpec))throw new Error("review companion requires an exact model spec");const{launch:o}=L("review/companion","base",{lifecycle:"resident",hasManager:!1,model:e.modelSpec,modelExact:!0,cwd:e.cwd,profileId:e.profileId}),r=await R({nodeId:e.nodeId,kind:"review/companion",mode:"base",lifecycle:"resident",cwd:e.cwd,profile_id:e.profileId,parent:e.originNodeId,creator:e.originNodeId,subscribe:!1,forkFrom:e.branchFile,forkSourceFile:e.branchFile,modelOverride:e.modelSpec,reviewBinding:{review_id:e.reviewId,origin_node_id:e.originNodeId,branch_file:e.branchFile,target_file:e.targetFile},name:`review ${F(e.targetFile)}`,launch:o});try{$(r.node_id,e.originNodeId)}catch(n){throw M(r.node_id),n}}s(ne,"spawnReviewCompanion");function A(e){const o=g(e),r=o?.review_binding,n=o?.pi_session_file,t=typeof n=="string"?u(n):null;if(r==null||o?.pi_session_id==null||t===null)return!1;try{return w().read(t).entries.some(i=>P(i,r.review_id))}catch(i){if(i instanceof p)return!1;throw i}}s(A,"isReviewCompanionBound");async function ie(e,o){const r=Date.now()+Math.max(0,o);for(;;){if(A(e))return!0;const n=r-Date.now();if(n<=0)return!1;await new Promise(t=>setTimeout(t,Math.min(q,n)))}}s(ie,"awaitCompanionBind");export{ie as awaitCompanionBind,re as captureOrigin,A as isReviewCompanionBound,ne as spawnReviewCompanion};
+var S=Object.defineProperty;var d=(e,o)=>S(e,"name",{value:o,configurable:!0});import{randomUUID as v}from"node:crypto";import{conversationIdFromPath as w,conversationStore as u,ConversationNotFoundError as p}from"../conversation-store/index.js";import{basename as F,isAbsolute as c}from"node:path";import{BrokerClient as x}from"../broker-client/index.js";import{deleteNode as M,getNode as g}from"../canvas/index.js";import{expandModelCandidates as C,selectInitialModelRoute as E}from"../model-routes.js";import{buildLaunchSpec as L}from"../runtime/launch.js";import{openModelRegistry as B}from"../runtime/model-registry.js";import{isBrokerLive as O}from"../runtime/model-swap.js";import{spawnNode as R}from"../runtime/nodes.js";import{SessionManager as D}from"../runtime/broker-sdk.js";import{isReviewBoundary as P}from"../runtime/session-visibility.js";import{forkNodeLedger as $}from"../runtime/ledger.js";import{ReviewOperationError as b}from"./types.js";const I=/^[^/\s:]+\/[^/\s:]+:(?:off|minimal|low|medium|high|xhigh|max)$/,q=100;function N(e){return new b("review_origin_missing","review origin was not found",{origin_node_id:e})}d(N,"originMissing");function f(e,o,r={}){return new b("review_origin_unforkable","review origin has no forkable exact session",{origin_node_id:e,reason:o,...r})}d(f,"originUnforkable");async function k(e,o,r){const i=w(o.sourceFile);if(!c(o.sourceFile)||i===null||i!==o.sourceSessionId||o.leafId===null||o.leafId==="")throw f(e,"no_forkable_session");try{await u().header(i)}catch(n){throw n instanceof p?f(e,"no_forkable_session"):n}if(o.modelSpec===null||!I.test(o.modelSpec))throw f(e,"model_unresolvable");const t=E({kind:"exact",spec:o.modelSpec},r??await B(),{cwd:o.cwd,profileId:o.profileId});if(t.selected===void 0)throw f(e,"model_unresolvable",{model_reason:t.rejected[0]?.reason});return{sourceFile:o.sourceFile,sourceSessionId:o.sourceSessionId,leafId:o.leafId,modelSpec:o.modelSpec}}d(k,"validateCapture");function U(e){return new Promise(async(o,r)=>{const i=new x(e);let t=!1;function n(s){t||(t=!0,i.close(),s())}d(n,"finish"),i.on("error",s=>n(()=>r(s))),i.on("close",()=>n(()=>r(new Error("origin broker closed before fork coordinates were read")))),i.on("connect",()=>{i.send({type:"hello",role:"observer",client_id:v()}),i.request({type:"get_human_fork_coordinates"}).then(s=>{if(s.kind!=="human_fork_coordinates"){n(()=>r(new Error("origin broker returned an unexpected fork-coordinate response")));return}n(()=>o(s))}).catch(s=>n(()=>r(s)))}),i.connect()})}d(U,"captureLiveOrigin");async function re(e,o={}){const r=await g(e);if(r===null)throw N(e);if(O(r)){const a=await U(e);return k(e,{...a,cwd:r.cwd,profileId:r.profile_id},o.registry)}const i=typeof r.pi_session_file=="string"?r.pi_session_file:"";let t="",n=null,s=null;const h=w(i);if(c(i)&&h!==null)try{const a=await u().read(h),m=D.inMemory(a.header.cwd,void 0,[a.header,...a.entries]);t=m.getSessionId(),n=m.getLeafId();const _=r.launch?.model,l=typeof _=="string"?C({kind:"exact",spec:_},r.cwd,r.profile_id)[0]:void 0;if(l!==void 0){const y=l.thinkingLevel??(m.buildSessionContext().thinkingLevel||"off");s=`${l.providerId}/${l.modelId}:${y}`}}catch(a){if(!(a instanceof p))throw a}return k(e,{sourceFile:i,sourceSessionId:t,leafId:n,modelSpec:s,cwd:r.cwd,profileId:r.profile_id},o.registry)}d(re,"captureOrigin");async function ie(e){if(!c(e.branchFile)||!c(e.targetFile))throw new Error("review companion requires absolute branch and target paths");if(!I.test(e.modelSpec))throw new Error("review companion requires an exact model spec");const{launch:o}=L("review/companion","base",{lifecycle:"resident",hasManager:!1,model:e.modelSpec,modelExact:!0,cwd:e.cwd,profileId:e.profileId}),r=await R({nodeId:e.nodeId,kind:"review/companion",mode:"base",lifecycle:"resident",cwd:e.cwd,profile_id:e.profileId,parent:e.originNodeId,creator:e.originNodeId,subscribe:!1,forkFrom:e.branchFile,forkSourceFile:e.branchFile,modelOverride:e.modelSpec,reviewBinding:{review_id:e.reviewId,origin_node_id:e.originNodeId,branch_file:e.branchFile,target_file:e.targetFile},name:`review ${F(e.targetFile)}`,launch:o});try{await $(r.node_id,e.originNodeId)}catch(i){throw await M(r.node_id),i}}d(ie,"spawnReviewCompanion");async function A(e){const o=await g(e),r=o?.review_binding,i=o?.pi_session_file,t=typeof i=="string"?w(i):null;if(r==null||o?.pi_session_id==null||t===null)return!1;try{return(await u().read(t)).entries.some(n=>P(n,r.review_id))}catch(n){if(n instanceof p)return!1;throw n}}d(A,"isReviewCompanionBound");async function ne(e,o){const r=Date.now()+Math.max(0,o);for(;;){if(await A(e))return!0;const i=r-Date.now();if(i<=0)return!1;await new Promise(t=>setTimeout(t,Math.min(q,i)))}}d(ne,"awaitCompanionBind");export{ne as awaitCompanionBind,re as captureOrigin,A as isReviewCompanionBound,ie as spawnReviewCompanion};

package/dist/core/review/document.d.ts

@@ -1,6 +1,6 @@
-import type { DatabaseSync } from 'node:sqlite';
 import type { ReviewRecord } from './types.js';
 import { type CommentAnchor } from './types.js';
+import type { CanvasDb } from '../canvas/db.js';
 type SourcePhase = 'submit' | 'comment';
 /** Read the reviewed document once, preserving the exact bytes used for its digest. */
 export declare function readReviewSource(file: string, phase?: SourcePhase): {
@@ -15,11 +15,11 @@ export declare function requireCurrentDocument(review: ReviewRecord, expected_do
     lines: string[];
 };
 /** Verify a create-time source precondition from the review row held by the caller's canvas write transaction. */
-export declare function requireCurrentDocumentLocked(db: DatabaseSync, review_id: string, expected_doc_hash: string): {
+export declare function requireCurrentDocumentLocked(db: CanvasDb, review_id: string, expected_doc_hash: string): Promise<{
     bytes: Buffer;
     sha256: string;
     lines: string[];
-};
+}>;
 /** Reject malformed ranges rather than normalizing them into a different anchor. */
 export declare function validateAnchorShape(anchor: CommentAnchor): void;
 /** Capture the full source range used to render an anchor, without silently clamping it. */

package/dist/core/review/document.js

@@ -1,2 +1,2 @@
-var f=Object.defineProperty;var i=(e,t)=>f(e,"name",{value:t,configurable:!0});import{prepared as m}from"../sqlite-statements.js";import{createHash as g}from"node:crypto";import{readFileSync as b,statSync as p}from"node:fs";import{documentLines as w}from"../document-lines.js";import{COMMENT_QUOTE_MAX as a,ReviewOperationError as u}from"./types.js";const l=2*1024*1024;function o(e,t,n){throw new u("source_unreadable","review source is unreadable",{phase:t,reason:n,file:e})}i(o,"sourceUnreadable");function h(e,t="submit"){let n;try{const s=p(e);if(!s.isFile())return o(e,t,"unreadable");n=s.size}catch(s){return o(e,t,s.code==="ENOENT"?"missing":"unreadable")}if(n>l)return o(e,t,"too_large");let r;try{r=b(e)}catch(s){return o(e,t,s.code==="ENOENT"?"missing":"unreadable")}if(r.length>l)return o(e,t,"too_large");if(r.includes(0))return o(e,t,"binary");let d;try{d=new TextDecoder("utf-8",{fatal:!0}).decode(r)}catch{return o(e,t,"binary")}return{bytes:r,sha256:g("sha256").update(r).digest("hex"),lines:w(d)}}i(h,"readReviewSource");function c(e,t){const n=h(e.file,"comment");if(n.sha256!==t)throw new u("stale_document","review document changed since it was rendered",{reason:"document_changed",expected_sha256:t,actual_sha256:n.sha256});if(n.sha256!==e.anchor_base_sha256)throw new u("stale_document","review comment ranges have not been remapped to the current document",{reason:"anchor_base_stale",expected_sha256:e.anchor_base_sha256,actual_sha256:n.sha256});return n}i(c,"requireDocumentSource");function I(e,t){return c(e,t)}i(I,"requireCurrentDocument");function T(e,t,n){const r=m(e,"SELECT file, anchor_base_sha256 FROM human_requests WHERE request_id = ? AND kind = 'review' AND state = 'open'").get(t);if(r===void 0)throw new u("unknown_review","review was not found",{received:t});return c(r,n)}i(T,"requireCurrentDocumentLocked");function v(e){const t=[],n=e.col_start!==void 0,r=e.col_end!==void 0;if((!Number.isSafeInteger(e.line)||e.line<1)&&t.push("line must be a positive integer"),(!Number.isSafeInteger(e.end_line)||e.end_line<1)&&t.push("end_line must be a positive integer"),Number.isSafeInteger(e.line)&&Number.isSafeInteger(e.end_line)&&e.end_line<e.line&&t.push("end_line must be greater than or equal to line"),n!==r&&t.push("col_start and col_end must be provided together"),n&&(!Number.isSafeInteger(e.col_start)||e.col_start<0)&&t.push("col_start must be a non-negative integer"),r&&(!Number.isSafeInteger(e.col_end)||e.col_end<0)&&t.push("col_end must be a non-negative integer"),n&&r&&e.line===e.end_line&&Number.isSafeInteger(e.col_start)&&Number.isSafeInteger(e.col_end)&&e.col_end<=e.col_start&&t.push("col_end must be greater than col_start for a single-line anchor"),e.quote!==void 0&&typeof e.quote!="string"&&t.push("quote must be a string"),typeof e.quote=="string"&&Buffer.byteLength(e.quote,"utf8")>a&&t.push(`quote exceeds ${a} bytes`),t.length>0)throw new u("invalid_anchor","comment anchor is invalid",{violations:t})}i(v,"validateAnchorShape");function _(e,t){return t===e.length||(e[t]&192)!==128}i(_,"isUtf8Boundary");function O(e,t){if(v(t),t.line>e.length||t.end_line>e.length)throw new u("anchor_out_of_range","comment anchor exceeds the reviewed document",{line_count:e.length,requested:{line:t.line,end_line:t.end_line}});if(t.col_start!==void 0&&t.col_end!==void 0){const n=Buffer.from(e[t.line-1],"utf8"),r=Buffer.from(e[t.end_line-1],"utf8");if(t.col_start>n.length||t.col_end>r.length||!_(n,t.col_start)||!_(r,t.col_end))throw new u("anchor_out_of_range","comment anchor columns exceed the reviewed document",{line_count:e.length,requested:{line:t.line,end_line:t.end_line}})}return e.slice(t.line-1,t.end_line).join(`
-`)}i(O,"captureAnchorText");export{O as captureAnchorText,h as readReviewSource,I as requireCurrentDocument,T as requireCurrentDocumentLocked,v as validateAnchorShape};
+var f=Object.defineProperty;var i=(e,t)=>f(e,"name",{value:t,configurable:!0});import{createHash as m}from"node:crypto";import{readFileSync as g,statSync as b}from"node:fs";import{documentLines as p}from"../document-lines.js";import{COMMENT_QUOTE_MAX as a,ReviewOperationError as u}from"./types.js";const l=2*1024*1024;function o(e,t,n){throw new u("source_unreadable","review source is unreadable",{phase:t,reason:n,file:e})}i(o,"sourceUnreadable");function w(e,t="submit"){let n;try{const s=b(e);if(!s.isFile())return o(e,t,"unreadable");n=s.size}catch(s){return o(e,t,s.code==="ENOENT"?"missing":"unreadable")}if(n>l)return o(e,t,"too_large");let r;try{r=g(e)}catch(s){return o(e,t,s.code==="ENOENT"?"missing":"unreadable")}if(r.length>l)return o(e,t,"too_large");if(r.includes(0))return o(e,t,"binary");let d;try{d=new TextDecoder("utf-8",{fatal:!0}).decode(r)}catch{return o(e,t,"binary")}return{bytes:r,sha256:m("sha256").update(r).digest("hex"),lines:p(d)}}i(w,"readReviewSource");function _(e,t){const n=w(e.file,"comment");if(n.sha256!==t)throw new u("stale_document","review document changed since it was rendered",{reason:"document_changed",expected_sha256:t,actual_sha256:n.sha256});if(n.sha256!==e.anchor_base_sha256)throw new u("stale_document","review comment ranges have not been remapped to the current document",{reason:"anchor_base_stale",expected_sha256:e.anchor_base_sha256,actual_sha256:n.sha256});return n}i(_,"requireDocumentSource");function q(e,t){return _(e,t)}i(q,"requireCurrentDocument");async function y(e,t,n){const r=await e.prepare("SELECT file, anchor_base_sha256 FROM human_requests WHERE request_id = ? AND kind = 'review' AND state = 'open'").get(t);if(r===void 0)throw new u("unknown_review","review was not found",{received:t});return _(r,n)}i(y,"requireCurrentDocumentLocked");function h(e){const t=[],n=e.col_start!==void 0,r=e.col_end!==void 0;if((!Number.isSafeInteger(e.line)||e.line<1)&&t.push("line must be a positive integer"),(!Number.isSafeInteger(e.end_line)||e.end_line<1)&&t.push("end_line must be a positive integer"),Number.isSafeInteger(e.line)&&Number.isSafeInteger(e.end_line)&&e.end_line<e.line&&t.push("end_line must be greater than or equal to line"),n!==r&&t.push("col_start and col_end must be provided together"),n&&(!Number.isSafeInteger(e.col_start)||e.col_start<0)&&t.push("col_start must be a non-negative integer"),r&&(!Number.isSafeInteger(e.col_end)||e.col_end<0)&&t.push("col_end must be a non-negative integer"),n&&r&&e.line===e.end_line&&Number.isSafeInteger(e.col_start)&&Number.isSafeInteger(e.col_end)&&e.col_end<=e.col_start&&t.push("col_end must be greater than col_start for a single-line anchor"),e.quote!==void 0&&typeof e.quote!="string"&&t.push("quote must be a string"),typeof e.quote=="string"&&Buffer.byteLength(e.quote,"utf8")>a&&t.push(`quote exceeds ${a} bytes`),t.length>0)throw new u("invalid_anchor","comment anchor is invalid",{violations:t})}i(h,"validateAnchorShape");function c(e,t){return t===e.length||(e[t]&192)!==128}i(c,"isUtf8Boundary");function I(e,t){if(h(t),t.line>e.length||t.end_line>e.length)throw new u("anchor_out_of_range","comment anchor exceeds the reviewed document",{line_count:e.length,requested:{line:t.line,end_line:t.end_line}});if(t.col_start!==void 0&&t.col_end!==void 0){const n=Buffer.from(e[t.line-1],"utf8"),r=Buffer.from(e[t.end_line-1],"utf8");if(t.col_start>n.length||t.col_end>r.length||!c(n,t.col_start)||!c(r,t.col_end))throw new u("anchor_out_of_range","comment anchor columns exceed the reviewed document",{line_count:e.length,requested:{line:t.line,end_line:t.end_line}})}return e.slice(t.line-1,t.end_line).join(`
+`)}i(I,"captureAnchorText");export{I as captureAnchorText,w as readReviewSource,q as requireCurrentDocument,y as requireCurrentDocumentLocked,h as validateAnchorShape};

package/dist/core/review/fork.js

@@ -1,5 +1,5 @@
-var m=Object.defineProperty;var d=(o,n)=>m(o,"name",{value:n,configurable:!0});import{basename as c}from"node:path";import{getNode as s}from"../canvas/index.js";import{materializeSessionBranch as p}from"../runtime/session-branch.js";import{spawnChildPrepared as w}from"../runtime/spawn.js";import{getComment as l}from"./comments.js";import{captureOrigin as _}from"./companion.js";import{requireVisibleReview as f}from"./store.js";import{ReviewOperationError as a}from"./types.js";function h(o,n){const{line:e,end_line:i}=n.anchor,t=i>e?`lines ${e}-${i}`:`line ${e}`,r=n.anchor_line_text===""?"":`
+var m=Object.defineProperty;var d=(o,n)=>m(o,"name",{value:n,configurable:!0});import{basename as c}from"node:path";import{getNode as s}from"../canvas/index.js";import{materializeSessionBranch as w}from"../runtime/session-branch.js";import{spawnChildPrepared as p}from"../runtime/spawn.js";import{getComment as l}from"./comments.js";import{captureOrigin as _}from"./companion.js";import{requireVisibleReview as f}from"./store.js";import{ReviewOperationError as a}from"./types.js";function h(o,n){const{line:e,end_line:i}=n.anchor,t=i>e?`lines ${e}-${i}`:`line ${e}`,r=n.anchor_line_text===""?"":`
 > ${n.anchor_line_text}
 `;return[`The person handed you this one comment on \`${o.file}\` so it can be worked in parallel. The review companion you were forked from keeps the rest of the document.`,`${t}:${r}`,n.text,`Address it by editing only the lines this comment is about \u2014 other forks may be editing the same file \u2014 then resolve it with \`crtr human review comment resolve ${n.comment_id}\`, and tell the companion what changed with \`crtr push update\`.`].join(`
 
-`)}d(h,"forkTask");async function R(o){const n=l(o);if(n===null)throw new a("unknown_comment","comment was not found",{received:o});if(n.status!=="open")throw new a("comment_deleted","only an open comment can be forked",{comment_id:o,status:n.status});const e=f(n.review_id);if(e.state!=="open")throw new a("review_terminal","review already has a terminal outcome",{state:e.state,requested:"fork",review:e});const i=s(e.companion_node_id);if(i===null)throw new a("review_companion_unbound","review companion is gone",{companion_node_id:e.companion_node_id});const t=await _(e.companion_node_id),r=p(t);return{node_id:(await w({kind:"review/companion",mode:"base",cwd:i.cwd,parent:e.companion_node_id,creator:e.companion_node_id,rootLifecycle:"resident",prompt:h(e,n),forkFrom:r,model:t.modelSpec,name:`comment on ${c(e.file)}`,reviewBinding:{review_id:e.review_id,origin_node_id:e.origin_node_id,branch_file:r,target_file:e.file}})).node.node_id,cwd:i.cwd}}d(R,"forkReviewComment");export{R as forkReviewComment};
+`)}d(h,"forkTask");async function R(o){const n=await l(o);if(n===null)throw new a("unknown_comment","comment was not found",{received:o});if(n.status!=="open")throw new a("comment_deleted","only an open comment can be forked",{comment_id:o,status:n.status});const e=await f(n.review_id);if(e.state!=="open")throw new a("review_terminal","review already has a terminal outcome",{state:e.state,requested:"fork",review:e});const i=await s(e.companion_node_id);if(i===null)throw new a("review_companion_unbound","review companion is gone",{companion_node_id:e.companion_node_id});const t=await _(e.companion_node_id),r=await w(t);return{node_id:(await p({kind:"review/companion",mode:"base",cwd:i.cwd,parent:e.companion_node_id,creator:e.companion_node_id,rootLifecycle:"resident",prompt:h(e,n),forkFrom:r,model:t.modelSpec,name:`comment on ${c(e.file)}`,reviewBinding:{review_id:e.review_id,origin_node_id:e.origin_node_id,branch_file:r,target_file:e.file}})).node.node_id,cwd:i.cwd}}d(R,"forkReviewComment");export{R as forkReviewComment};

package/dist/core/review/realize.js

@@ -1 +1 @@
-var m=Object.defineProperty;var r=(i,e)=>m(i,"name",{value:e,configurable:!0});import{conversationIdFromPath as v,conversationStore as h,ConversationNotFoundError as g}from"../conversation-store/index.js";import{getNode as s}from"../canvas/index.js";import{openRequest as q,cancelBindingRequest as b,getRequest as y}from"../human/requests.js";import{NodeIdConflictError as I}from"../runtime/nodes.js";import{reviveNode as N}from"../runtime/revive.js";import{awaitCompanionBind as E,spawnReviewCompanion as S}from"./companion.js";import{signalReviewActivity as l}from"./signal.js";import{COMPANION_BIND_DEADLINE_MS as f,ReviewOperationError as o}from"./types.js";function p(i){const e=y(i);if(e===null||e.kind!=="review")throw new o("unknown_review","review was not found",{received:i});return e}r(p,"requireBinding");function R(i){try{const e=JSON.parse(i.specification_json);if(typeof e!="object"||e===null)throw new Error("not an object");return e}catch(e){throw new Error(`corrupt review specification: ${i.request_id}`,{cause:e})}}r(R,"specification");async function k(i){let e=p(i);if(e.state!=="binding")return e;const w=R(e),t=w.branch_file,d=typeof t=="string"?v(t):null;let u=d===null;if(d!==null)try{h().header(d)}catch(n){if(!(n instanceof g))throw n;u=!0}if(u)throw b(e.request_id,new Date().toISOString(),"branch_lost")&&l(),new o("branch_lost","review branch was lost before realization",{review_id:e.request_id});if(e.file===null||e.requester_node_id===null||e.companion_node_id===null)throw new Error(`binding review has incomplete identity: ${e.request_id}`);const a=s(e.requester_node_id);if(a===null)throw new o("review_origin_missing","review origin was not found",{origin_node_id:e.requester_node_id});if(s(e.companion_node_id)===null){const n=w.model_spec;if(typeof n!="string")throw new Error(`binding review has no model spec: ${e.request_id}`);try{await S({nodeId:e.companion_node_id,reviewId:e.request_id,originNodeId:e.requester_node_id,branchFile:t,targetFile:e.file,modelSpec:n,cwd:a.cwd,profileId:a.profile_id??null})}catch(_){if(!(_ instanceof I))throw _}}const c=s(e.companion_node_id);if(c===null)throw new o("review_companion_unbound","review companion was not created",{review_id:e.request_id});if(c.pi_session_id===null&&await N(c.node_id,{resume:!1,capacity:"refuse"}),!await E(e.companion_node_id,f))throw new o("review_companion_unbound","review companion did not bind in time",{review_id:e.request_id,waited_ms:f});return q(e.request_id,new Date().toISOString())&&l(),e=p(i),e}r(k,"realizeReview");export{k as realizeReview};
+var m=Object.defineProperty;var r=(i,e)=>m(i,"name",{value:e,configurable:!0});import{conversationIdFromPath as v,conversationStore as h,ConversationNotFoundError as g}from"../conversation-store/index.js";import{getNode as s}from"../canvas/index.js";import{openRequest as q,cancelBindingRequest as b,getRequest as y}from"../human/requests.js";import{NodeIdConflictError as I}from"../runtime/nodes.js";import{reviveNode as N}from"../runtime/revive.js";import{awaitCompanionBind as E,spawnReviewCompanion as S}from"./companion.js";import{signalReviewActivity as l}from"./signal.js";import{COMPANION_BIND_DEADLINE_MS as f,ReviewOperationError as o}from"./types.js";async function p(i){const e=await y(i);if(e===null||e.kind!=="review")throw new o("unknown_review","review was not found",{received:i});return e}r(p,"requireBinding");function R(i){try{const e=JSON.parse(i.specification_json);if(typeof e!="object"||e===null)throw new Error("not an object");return e}catch(e){throw new Error(`corrupt review specification: ${i.request_id}`,{cause:e})}}r(R,"specification");async function k(i){let e=await p(i);if(e.state!=="binding")return e;const w=R(e),t=w.branch_file,a=typeof t=="string"?v(t):null;let u=a===null;if(a!==null)try{await h().header(a)}catch(n){if(!(n instanceof g))throw n;u=!0}if(u)throw await b(e.request_id,new Date().toISOString(),"branch_lost")&&l(),new o("branch_lost","review branch was lost before realization",{review_id:e.request_id});if(e.file===null||e.requester_node_id===null||e.companion_node_id===null)throw new Error(`binding review has incomplete identity: ${e.request_id}`);const d=await s(e.requester_node_id);if(d===null)throw new o("review_origin_missing","review origin was not found",{origin_node_id:e.requester_node_id});if(await s(e.companion_node_id)===null){const n=w.model_spec;if(typeof n!="string")throw new Error(`binding review has no model spec: ${e.request_id}`);try{await S({nodeId:e.companion_node_id,reviewId:e.request_id,originNodeId:e.requester_node_id,branchFile:t,targetFile:e.file,modelSpec:n,cwd:d.cwd,profileId:d.profile_id??null})}catch(_){if(!(_ instanceof I))throw _}}const c=await s(e.companion_node_id);if(c===null)throw new o("review_companion_unbound","review companion was not created",{review_id:e.request_id});if(c.pi_session_id===null&&await N(c.node_id,{resume:!1,capacity:"refuse"}),!await E(e.companion_node_id,f))throw new o("review_companion_unbound","review companion did not bind in time",{review_id:e.request_id,waited_ms:f});return await q(e.request_id,new Date().toISOString())&&l(),e=await p(i),e}r(k,"realizeReview");export{k as realizeReview};

package/dist/core/review/remap.d.ts

@@ -16,9 +16,9 @@ export declare function applyRangeBatch(args: {
     entries: RangeBatchEntry[];
     actor: Actor;
     operation_id: string;
-}): {
+}): Promise<{
     updated: number;
     detached: number;
     anchor_base_sha256: string;
-};
+}>;
 export {};

package/dist/core/review/remap.js

@@ -1,19 +1,19 @@
-var q=Object.defineProperty;var i=(e,n)=>q(e,"name",{value:n,configurable:!0});import{prepared as u}from"../sqlite-statements.js";import{withCanvasWrite as A}from"../canvas/db.js";import{nowIso as k}from"../fs-utils.js";import{signalReviewActivity as T}from"./signal.js";import{replaceAnchorBaseLocked as b}from"./store.js";import{ReviewOperationError as h}from"./types.js";import{captureAnchorText as O,readReviewSource as N,validateAnchorShape as D}from"./document.js";function I(e){return{line:e.anchor_line,end_line:e.anchor_end_line,...e.anchor_col_start===null?{}:{col_start:e.anchor_col_start},...e.anchor_col_end===null?{}:{col_end:e.anchor_col_end},...e.anchor_quote===null?{}:{quote:e.anchor_quote}}}i(I,"anchorFromRow");function f(e,n,c,_){throw new h("range_batch_stale","review comment ranges are stale",{reason:e,expected:n,actual:c,..._===void 0?{}:{comment_id:_}})}i(f,"rangeBatchStale");function L(e){if(typeof e.comment_id!="string"||e.comment_id==="")throw new h("invalid_anchor","comment anchor is invalid",{violations:["comment_id must be a non-empty string"]});const n=e.anchor!==void 0,c=e.detached===!0;if(n===c)throw new h("invalid_anchor","comment anchor is invalid",{violations:["each range batch entry must provide exactly one of anchor or detached"]});n&&D(e.anchor)}i(L,"validateEntry");function W(e,n){u(e,`
+var q=Object.defineProperty;var r=(e,o)=>q(e,"name",{value:o,configurable:!0});import{withCanvasWrite as A}from"../canvas/db.js";import{nowIso as S}from"../fs-utils.js";import{signalReviewActivity as k}from"./signal.js";import{replaceAnchorBaseLocked as T}from"./store.js";import{ReviewOperationError as h}from"./types.js";import{captureAnchorText as b,readReviewSource as O,validateAnchorShape as N}from"./document.js";function D(e){return{line:e.anchor_line,end_line:e.anchor_end_line,...e.anchor_col_start===null?{}:{col_start:e.anchor_col_start},...e.anchor_col_end===null?{}:{col_end:e.anchor_col_end},...e.anchor_quote===null?{}:{quote:e.anchor_quote}}}r(D,"anchorFromRow");function p(e,o,c,i){throw new h("range_batch_stale","review comment ranges are stale",{reason:e,expected:o,actual:c,...i===void 0?{}:{comment_id:i}})}r(p,"rangeBatchStale");function I(e){if(typeof e.comment_id!="string"||e.comment_id==="")throw new h("invalid_anchor","comment anchor is invalid",{violations:["comment_id must be a non-empty string"]});const o=e.anchor!==void 0,c=e.detached===!0;if(o===c)throw new h("invalid_anchor","comment anchor is invalid",{violations:["each range batch entry must provide exactly one of anchor or detached"]});o&&N(e.anchor)}r(I,"validateEntry");async function L(e,o){await e.prepare(`
     INSERT INTO review_comment_events
       (review_id, comment_id, kind, state_change, revision_after, actor_kind, actor_node_id, at, operation_id, payload)
     SELECT review_id, ?, 'reanchored', 1, ?, ?, ?, ?, ?, ?
     FROM review_comments WHERE comment_id = ?
-  `).run(n.row.comment_id,n.row.revision+1,n.actor.kind,n.actor.node_id,n.at,n.operation_id,JSON.stringify({previous_anchor:n.previous_anchor,anchor:n.anchor,previous_anchor_state:n.previous_anchor_state,anchor_state:n.anchor_state,previous_doc_hash:n.previous_doc_hash,doc_hash:n.doc_hash,line_text:n.line_text}),n.row.comment_id)}i(W,"appendReanchorEvent");function j(e){const n=A(c=>{const _=u(c,"SELECT file, anchor_base_sha256 FROM human_requests WHERE request_id = ? AND kind = 'review' AND state = 'open'").get(e.review_id);if(_===void 0)throw new h("unknown_review","review was not found",{received:e.review_id});const a=N(_.file,"comment");a.sha256!==e.to_doc_hash&&f("to_doc_hash",e.to_doc_hash,a.sha256),_.anchor_base_sha256!==e.from_doc_hash&&f("from_doc_hash",_.anchor_base_sha256,e.from_doc_hash);const d=u(c,`
+  `).run(o.row.comment_id,o.row.revision+1,o.actor.kind,o.actor.node_id,o.at,o.operation_id,JSON.stringify({previous_anchor:o.previous_anchor,anchor:o.anchor,previous_anchor_state:o.previous_anchor_state,anchor_state:o.anchor_state,previous_doc_hash:o.previous_doc_hash,doc_hash:o.doc_hash,line_text:o.line_text}),o.row.comment_id)}r(L,"appendReanchorEvent");async function U(e){const o=await A(async c=>{const i=await c.prepare("SELECT file, anchor_base_sha256 FROM human_requests WHERE request_id = ? AND kind = 'review' AND state = 'open'").get(e.review_id);if(i===void 0)throw new h("unknown_review","review was not found",{received:e.review_id});const a=O(i.file,"comment");a.sha256!==e.to_doc_hash&&p("to_doc_hash",e.to_doc_hash,a.sha256),i.anchor_base_sha256!==e.from_doc_hash&&p("from_doc_hash",i.anchor_base_sha256,e.from_doc_hash);const d=await c.prepare(`
       SELECT comment_id, status, revision, text, anchor_line, anchor_end_line,
              anchor_col_start, anchor_col_end, anchor_quote, anchor_line_text,
              anchor_doc_hash, anchor_state
       FROM review_comments
       WHERE review_id = ? AND status != 'deleted'
       ORDER BY created_seq
-    `).all(e.review_id);for(const o of d)o.anchor_doc_hash!==e.from_doc_hash&&f("comment_hash",e.from_doc_hash,o.anchor_doc_hash,o.comment_id);const r=new Map,s=[];for(const o of e.entries)L(o),r.has(o.comment_id)?s.push(o.comment_id):r.set(o.comment_id,o);const y=new Set(d.map(o=>o.comment_id));for(const o of r.keys())y.has(o)||s.push(o);const p=d.filter(o=>!r.has(o.comment_id)).map(o=>o.comment_id);if(p.length>0||s.length>0)throw new h("range_batch_incomplete","range batch must cover every non-deleted comment exactly once",{missing:p,extra:s});let w=0,E=0;const x=k();for(const o of d){const m=r.get(o.comment_id),R=I(o),t=m.detached===!0?R:m.anchor,l=m.detached===!0?"detached":"live",v=m.detached===!0?o.anchor_line_text:O(a.lines,t);if(!(o.anchor_state!==l||o.anchor_doc_hash!==a.sha256||o.anchor_line!==t.line||o.anchor_end_line!==t.end_line||o.anchor_col_start!==(t.col_start??null)||o.anchor_col_end!==(t.col_end??null)||o.anchor_quote!==(t.quote??null)||o.anchor_line_text!==v))continue;const S=o.revision+1;u(c,`
+    `).all(e.review_id);for(const n of d)n.anchor_doc_hash!==e.from_doc_hash&&p("comment_hash",e.from_doc_hash,n.anchor_doc_hash,n.comment_id);const _=new Map,s=[];for(const n of e.entries)I(n),_.has(n.comment_id)?s.push(n.comment_id):_.set(n.comment_id,n);const y=new Set(d.map(n=>n.comment_id));for(const n of _.keys())y.has(n)||s.push(n);const v=d.filter(n=>!_.has(n.comment_id)).map(n=>n.comment_id);if(v.length>0||s.length>0)throw new h("range_batch_incomplete","range batch must cover every non-deleted comment exactly once",{missing:v,extra:s});let f=0,w=0;const E=S();for(const n of d){const m=_.get(n.comment_id),x=D(n),t=m.detached===!0?x:m.anchor,l=m.detached===!0?"detached":"live",u=m.detached===!0?n.anchor_line_text:b(a.lines,t);if(!(n.anchor_state!==l||n.anchor_doc_hash!==a.sha256||n.anchor_line!==t.line||n.anchor_end_line!==t.end_line||n.anchor_col_start!==(t.col_start??null)||n.anchor_col_end!==(t.col_end??null)||n.anchor_quote!==(t.quote??null)||n.anchor_line_text!==u))continue;const R=n.revision+1;await c.prepare(`
         UPDATE review_comments
         SET revision = ?, anchor_line = ?, anchor_end_line = ?, anchor_col_start = ?, anchor_col_end = ?,
             anchor_quote = ?, anchor_line_text = ?, anchor_doc_hash = ?, anchor_state = ?,
             updated_by_kind = ?, updated_by_node_id = ?, updated_at = ?
         WHERE comment_id = ?
-      `).run(S,t.line,t.end_line,t.col_start??null,t.col_end??null,t.quote??null,v,a.sha256,l,e.actor.kind,e.actor.node_id,x,o.comment_id),W(c,{row:o,actor:e.actor,operation_id:e.operation_id,at:x,previous_anchor:R,anchor:t,previous_anchor_state:o.anchor_state,anchor_state:l,previous_doc_hash:o.anchor_doc_hash,doc_hash:a.sha256,line_text:v}),w+=1,l==="detached"&&(E+=1)}return b(c,e.review_id,a.bytes,a.sha256),{updated:w,detached:E,anchor_base_sha256:a.sha256}});return T(),n}i(j,"applyRangeBatch");export{j as applyRangeBatch};
+      `).run(R,t.line,t.end_line,t.col_start??null,t.col_end??null,t.quote??null,u,a.sha256,l,e.actor.kind,e.actor.node_id,E,n.comment_id),await L(c,{row:n,actor:e.actor,operation_id:e.operation_id,at:E,previous_anchor:x,anchor:t,previous_anchor_state:n.anchor_state,anchor_state:l,previous_doc_hash:n.anchor_doc_hash,doc_hash:a.sha256,line_text:u}),f+=1,l==="detached"&&(w+=1)}return await T(c,e.review_id,a.bytes,a.sha256),{updated:f,detached:w,anchor_base_sha256:a.sha256}});return k(),o}r(U,"applyRangeBatch");export{U as applyRangeBatch};

package/dist/core/review/stage.d.ts

@@ -30,7 +30,7 @@ export type StagedReview = {
     review_dir: string;
 };
 /** Remove only review-directory state that was never committed to a review row. */
-export declare function discardStaging(reviewId: string, branchFile?: string): void;
+export declare function discardStaging(reviewId: string, branchFile?: string): Promise<void>;
 /**
  * Capture an existing origin and write its immutable branch without creating a
  * canvas node or review row. The caller alone commits or discards this stage.

package/dist/core/review/stage.js

@@ -1 +1 @@
-var v=Object.defineProperty;var o=(e,n)=>v(e,"name",{value:n,configurable:!0});import{createHash as g}from"node:crypto";import{existsSync as y,readFileSync as b,realpathSync as S,rmSync as F,statSync as I,writeFileSync as k}from"node:fs";import{isAbsolute as x,join as R}from"node:path";import{getNode as O}from"../canvas/index.js";import{conversationIdFromPath as j,conversationStore as z,ConversationNotFoundError as D}from"../conversation-store/index.js";import{ensureReviewDir as E,reviewDir as l}from"../canvas/paths.js";import{checkReviewableFile as B}from"../human/visible-paths.js";import{newNodeId as w}from"../runtime/nodes.js";import{captureOrigin as N}from"./companion.js";import{materializeSessionBranch as q}from"../runtime/session-branch.js";import{getRequestByIdempotencyKey as A}from"../human/requests.js";import{ReviewOperationError as r}from"./types.js";function a(e,n){return new r("review_target_unreviewable","review target cannot be staged",{phase:"create",file:e,reason:n})}o(a,"targetError");function h(e){if(!x(e))throw a(e,"not_absolute");if(!y(e))throw a(e,"missing");try{if(!I(e).isFile())throw a(e,"not_a_file")}catch(i){throw i instanceof r?i:a(e,"missing")}const n=B(e);if(!n.ok){const i=n.reason==="file is not UTF-8 text"?"binary":n.reason==="file is too large to review (2 MB limit)"?"too_large":n.reason==="file is too long to review (5,000 line limit)"?"too_many_lines":"not_a_file";throw a(e,i)}try{return S(e)}catch{throw a(e,"missing")}}o(h,"validateReviewFile");function U(e){return new r("review_branch_unavailable","review branch could not be materialized",{reason:"materialize_failed",origin_node_id:e})}o(U,"branchUnavailable");async function C(e){try{return await N(e)}catch(n){throw n instanceof r&&n.code==="review_origin_missing"?new r("review_origin_missing","review origin was not found",{origin_node_id:e,reason:"origin_missing"}):n}}o(C,"captureStagedOrigin");function H(e,n){try{return q(n)}catch{throw U(e)}}o(H,"materialize");function K(e,n){if(n!==void 0){const i=j(n);if(i===null)throw new Error(`invalid staged conversation path: ${n}`);try{z().delete(i)}catch(c){if(!(c instanceof D))throw c}}try{F(l(e),{recursive:!0,force:!0})}catch{}}o(K,"discardStaging");async function ee(e){const n=A(e.idempotency_key);if(n!==null)return{existing:n};if(O(e.origin_node_id)===null)throw new r("review_origin_missing","review origin was not found",{origin_node_id:e.origin_node_id,reason:"origin_missing"});const i=w(),c=w();let d,s=e.document===void 0?h(e.file??""):"";try{if(E(i),e.document!==void 0){const m=R(l(i),"document.md");k(m,e.document.body),s=h(m)}const t=await C(e.origin_node_id),p=new Date().toISOString(),_=b(s),u=g("sha256").update(_).digest("hex");d=H(e.origin_node_id,t);const f=new Date().toISOString();return{row:{review_id:i,idempotency_key:e.idempotency_key,origin_kind:e.origin_kind,origin_node_id:e.origin_node_id,companion_node_id:c,review_dir:l(i),file:s,origin_session_file:t.sourceFile,origin_session_id:t.sourceSessionId,origin_leaf_id:t.leafId,model_spec:t.modelSpec,branch_file:d,baseline_sha256:u,baseline_bytes:_.length,anchor_base_sha256:u,anchor_base_bytes:_,state:"binding",created:f,captured_at:p,opened_at:null,submit_requested_at:null,output_path:e.output_path??null,document_id:e.document?.id??null,document_name:e.document?.name??null,document_base:e.document?.base??null,subtitle:e.subtitle??null,approved_at:null,approved_sha256:null,changed:null,comments_total:null,comments_unresolved:null,result_json:null,canceled_at:null,cancel_reason:null,cancel_actor:null,delivery_entry_id:null,delivered_at:null,delivery_error:null,projected_at:null,projection_error:null},review_dir:l(i)}}catch(t){throw K(i,d),t}}o(ee,"stageReview");export{K as discardStaging,ee as stageReview};
+var v=Object.defineProperty;var t=(e,n)=>v(e,"name",{value:n,configurable:!0});import{createHash as g}from"node:crypto";import{existsSync as y,readFileSync as b,realpathSync as S,rmSync as F,statSync as I,writeFileSync as k}from"node:fs";import{isAbsolute as x,join as R}from"node:path";import{getNode as O}from"../canvas/index.js";import{conversationIdFromPath as j,conversationStore as z,ConversationNotFoundError as D}from"../conversation-store/index.js";import{ensureReviewDir as E,reviewDir as l}from"../canvas/paths.js";import{checkReviewableFile as B}from"../human/visible-paths.js";import{newNodeId as w}from"../runtime/nodes.js";import{captureOrigin as N}from"./companion.js";import{materializeSessionBranch as q}from"../runtime/session-branch.js";import{getRequestByIdempotencyKey as A}from"../human/requests.js";import{ReviewOperationError as r}from"./types.js";function a(e,n){return new r("review_target_unreviewable","review target cannot be staged",{phase:"create",file:e,reason:n})}t(a,"targetError");function h(e){if(!x(e))throw a(e,"not_absolute");if(!y(e))throw a(e,"missing");try{if(!I(e).isFile())throw a(e,"not_a_file")}catch(i){throw i instanceof r?i:a(e,"missing")}const n=B(e);if(!n.ok){const i=n.reason==="file is not UTF-8 text"?"binary":n.reason==="file is too large to review (2 MB limit)"?"too_large":n.reason==="file is too long to review (5,000 line limit)"?"too_many_lines":"not_a_file";throw a(e,i)}try{return S(e)}catch{throw a(e,"missing")}}t(h,"validateReviewFile");function U(e){return new r("review_branch_unavailable","review branch could not be materialized",{reason:"materialize_failed",origin_node_id:e})}t(U,"branchUnavailable");async function C(e){try{return await N(e)}catch(n){throw n instanceof r&&n.code==="review_origin_missing"?new r("review_origin_missing","review origin was not found",{origin_node_id:e,reason:"origin_missing"}):n}}t(C,"captureStagedOrigin");async function H(e,n){try{return await q(n)}catch{throw U(e)}}t(H,"materialize");async function K(e,n){if(n!==void 0){const i=j(n);if(i===null)throw new Error(`invalid staged conversation path: ${n}`);try{await z().delete(i)}catch(c){if(!(c instanceof D))throw c}}try{F(l(e),{recursive:!0,force:!0})}catch{}}t(K,"discardStaging");async function ee(e){const n=await A(e.idempotency_key);if(n!==null)return{existing:n};if(await O(e.origin_node_id)===null)throw new r("review_origin_missing","review origin was not found",{origin_node_id:e.origin_node_id,reason:"origin_missing"});const i=await w(),c=await w();let d,s=e.document===void 0?h(e.file??""):"";try{if(E(i),e.document!==void 0){const m=R(l(i),"document.md");k(m,e.document.body),s=h(m)}const o=await C(e.origin_node_id),p=new Date().toISOString(),_=b(s),u=g("sha256").update(_).digest("hex");d=await H(e.origin_node_id,o);const f=new Date().toISOString();return{row:{review_id:i,idempotency_key:e.idempotency_key,origin_kind:e.origin_kind,origin_node_id:e.origin_node_id,companion_node_id:c,review_dir:l(i),file:s,origin_session_file:o.sourceFile,origin_session_id:o.sourceSessionId,origin_leaf_id:o.leafId,model_spec:o.modelSpec,branch_file:d,baseline_sha256:u,baseline_bytes:_.length,anchor_base_sha256:u,anchor_base_bytes:_,state:"binding",created:f,captured_at:p,opened_at:null,submit_requested_at:null,output_path:e.output_path??null,document_id:e.document?.id??null,document_name:e.document?.name??null,document_base:e.document?.base??null,subtitle:e.subtitle??null,approved_at:null,approved_sha256:null,changed:null,comments_total:null,comments_unresolved:null,result_json:null,canceled_at:null,cancel_reason:null,cancel_actor:null,delivery_entry_id:null,delivered_at:null,delivery_error:null,projected_at:null,projection_error:null},review_dir:l(i)}}catch(o){throw await K(i,d),o}}t(ee,"stageReview");export{K as discardStaging,ee as stageReview};

package/dist/core/review/store.d.ts

@@ -1,4 +1,4 @@
-import type { DatabaseSync } from 'node:sqlite';
+import { type CanvasDb } from '../canvas/db.js';
 import { type ReviewRecord, type ReviewState } from './types.js';
 export interface ApproveReviewArgs {
     review_id: string;
@@ -9,36 +9,36 @@ export interface ApproveReviewArgs {
     comments_unresolved: number;
     result_json: string;
 }
-export declare function getReview(reviewId: string): ReviewRecord | null;
-export declare function requireVisibleReview(reviewId: string): ReviewRecord;
-export declare function getReviewByIdempotencyKey(key: string): ReviewRecord | null;
-export declare function getReviewByCompanion(nodeId: string): ReviewRecord | null;
+export declare function getReview(reviewId: string): Promise<ReviewRecord | null>;
+export declare function requireVisibleReview(reviewId: string): Promise<ReviewRecord>;
+export declare function getReviewByIdempotencyKey(key: string): Promise<ReviewRecord | null>;
+export declare function getReviewByCompanion(nodeId: string): Promise<ReviewRecord | null>;
 export declare function listReviews(filter: {
     state?: ReviewState;
     origin_node_id?: string;
     file?: string;
-}): ReviewRecord[];
-export declare function reviewIdsByOriginNodes(nodeIds: readonly string[]): string[];
-export declare function deleteReviewsByOriginNodes(nodeIds: readonly string[]): string[];
-export declare function listBindingReviews(): ReviewRecord[];
-export declare function listSubmitRequestedReviews(): ReviewRecord[];
-export declare function listUnprojectedTerminalReviews(): ReviewRecord[];
-export declare function openReviewRow(reviewId: string, openedAt: string): boolean;
+}): Promise<ReviewRecord[]>;
+export declare function reviewIdsByOriginNodes(nodeIds: readonly string[]): Promise<string[]>;
+export declare function deleteReviewsByOriginNodes(nodeIds: readonly string[]): Promise<string[]>;
+export declare function listBindingReviews(): Promise<ReviewRecord[]>;
+export declare function listSubmitRequestedReviews(): Promise<ReviewRecord[]>;
+export declare function listUnprojectedTerminalReviews(): Promise<ReviewRecord[]>;
+export declare function openReviewRow(reviewId: string, openedAt: string): Promise<boolean>;
 /** Put a deferred submit back to not-requested, so the person sees the review open again. */
-export declare function clearReviewSubmit(reviewId: string): void;
-export declare function requestReviewSubmit(reviewId: string, at: string): boolean;
-export declare function approveReviewLocked(db: DatabaseSync, args: ApproveReviewArgs): boolean;
+export declare function clearReviewSubmit(reviewId: string): Promise<void>;
+export declare function requestReviewSubmit(reviewId: string, at: string): Promise<boolean>;
+export declare function approveReviewLocked(db: CanvasDb, args: ApproveReviewArgs): Promise<boolean>;
 export declare function cancelReviewRow(reviewId: string, args: {
     at: string;
     reason: string;
     actor: string | null;
-}): boolean;
-export declare function markProjected(reviewId: string, at: string): void;
-export declare function markProjectionError(reviewId: string, error: string): void;
+}): Promise<boolean>;
+export declare function markProjected(reviewId: string, at: string): Promise<void>;
+export declare function markProjectionError(reviewId: string, error: string): Promise<void>;
 export declare function markDelivered(_reviewId: string, _receipt: string | null, _at: string): void;
 export declare function markDeliveryError(_reviewId: string, _error: string): void;
-export declare function readAnchorBase(reviewId: string): {
+export declare function readAnchorBase(reviewId: string): Promise<{
     bytes: Buffer;
     sha256: string;
-} | null;
-export declare function replaceAnchorBaseLocked(db: DatabaseSync, reviewId: string, bytes: Buffer, sha256: string): void;
+} | null>;
+export declare function replaceAnchorBaseLocked(db: CanvasDb, reviewId: string, bytes: Buffer, sha256: string): Promise<void>;