@north-light/cli 0.3.530 → 0.3.532

package/dist/core/spaces/process.js

@@ -1 +1 @@
-var C=Object.defineProperty;var i=(e,r)=>C(e,"name",{value:r,configurable:!0});import{existsSync as v}from"node:fs";import{assertGranteeRunsHere as $}from"../runtime/unsandboxed.js";import{randomUUID as N}from"node:crypto";import{join as h}from"node:path";import{getNode as R}from"../canvas/canvas.js";import{nodeAgentDir as O,nodeHome as k,nodeRunDir as H}from"../canvas/paths.js";import{appSpace as K}from"../layout.js";import{activeGrant as w,activeGrantForApp as _,grantFor as I,grantsGeneration as S}from"../grants/mirror.js";import{readConfig as B}from"../config.js";import{emitEvent as G}from"../events/emit.js";import{ensureAppSpace as F}from"./space.js";import{compileLaunch as T,launchStillGranted as M}from"./mounts.js";import{pinSandboxRuntimeHome as j}from"./runtime-home.js";import{sandboxCacheEnv as q}from"./cache-env.js";import{launcherRequest as b}from"../../launcher/client.js";import{LAUNCHER_SOCKET as y}from"../../launcher/spec.js";function U(e){return`cron-${e}`}i(U,"cronLaunchId");function ce(){if(process.platform!=="linux")return!1;if(v(y))return!0;throw new Error("root launcher socket is unavailable; refusing an unsandboxed app process")}i(ce,"appProcessSandboxed");function fe(){return A??(process.platform==="linux"&&v(y))}i(fe,"appProcessesSandboxed");let A;function le(e){A=e}i(le,"__setAppProcessesSandboxedForTest");function me(e,r,n,o=!1,t,d){const u=n===void 0?null:R(n),s=d!==void 0?d.grantId?w(d.grantId):I(e,d.sub):u?null:_(e);if(d!==void 0?!s&&!(d.grantId===null&&e==="app:terminal"):!u&&!s)throw new Error(`no active grant for ${e}`);return T({nodeId:n??"proc-cwd-check",app:e,...d!==void 0?{sub:d.sub,grantId:s?.id??null,scopes:d.scopes}:{sub:u?u.sub??"user:local":s.sub,grantId:u?u.grant_id??null:s.id,scopes:u?.scopes??null},command:["true"],env:{},...n===void 0?{withoutNode:!0}:{},...t===void 0?{}:{folder:t},isolated:u?.isolated===!0||o,auditMissing:i(()=>{},"auditMissing")}).mounts.some(({source:c})=>r===c||r.startsWith(c==="/"?"/":`${c}/`))}i(me,"cwdIsMounted");async function D(e,r="SIGKILL",n){if(!("ok"in await b({operation:"stop",pid:e,signal:r,...n===void 0?{}:{nodeId:n}})))throw new Error("launcher did not stop process")}i(D,"stopAppProcess");function W(e,r,n,o,t){return o?t??O(e,r):n}i(W,"appProcessCwd");async function pe(e){if(e.cron!==void 0&&(e.nodeId!==void 0||e.principal===void 0))throw new Error("a cron launch has a stored principal and no node");const r=e.nodeId===void 0?null:R(e.nodeId);if(e.nodeId!==void 0&&!r)throw new Error(`missing node ${e.nodeId}`);const n=r?.grantee??e.app??"app:terminal";if($(n),e.app!==void 0&&e.app!==n)throw new Error("app does not match node");const o=e.principal;let t=null;if(o!==void 0){if(t=o.grantId?w(o.grantId):I(n,o.sub),!(t===null&&o.grantId===null&&n==="app:terminal"&&!B("user").runtime?.issuer)&&(!t||t.grantee!==n||t.sub!==o.sub))throw new Error(`no active grant for ${n}`)}else if(r){if(n!=="app:terminal"&&!(r.grant_id?w(r.grant_id):I(n,r.sub??"user:local")))throw new Error(`no active grant for ${n}`)}else if(t=_(n),!t)throw new Error(`no active grant for ${n}`);await F(n);const d=e.cron===void 0?e.nodeId??`proc-${N()}`:U(e.cron.executionId),u=r?.isolated===!0||e.isolated===!0;if(u&&!r&&e.folder===void 0)throw new Error("isolated process requires a live node");const s=K(n),m=W(d,n,e.cwd,u,e.folder),c=r?k(d,n,u):u&&e.folder!==void 0?h(e.folder,"home"):s.home,L=j(Object.fromEntries(Object.entries({...e.env,...process.platform==="linux"?q(n):{},HOME:c,PI_CODING_AGENT_DIR:h(c,".pi","agent"),PWD:m,...e.nodeId===void 0&&e.cron===void 0?{}:{CRTR_API_SOCKET:h(H(d),"cli.sock")}}).filter(a=>a[1]!==void 0))),E=o!==void 0?{nodeId:d,app:n,sub:o.sub,grantId:t?.id??null,scopes:o.scopes}:{nodeId:d,app:n,sub:r?r.sub??"user:local":t.sub,grantId:r?r.grant_id??null:t.id,scopes:r?.scopes??null},P=i(()=>{const a=T({...E,command:e.command,env:L,...e.nodeId===void 0?{withoutNode:!0}:{},isolated:u,cwd:m,...e.folder===void 0?{}:{folder:e.folder},...e.cron===void 0?{}:{cron:e.cron.anchorDir===void 0?{}:{anchorDir:e.cron.anchorDir}},...e.pluginRoot===void 0?{}:{pluginRoot:e.pluginRoot},auditMissing:i(g=>G({level:"warn",event:"process.mount.missing",...e.nodeId===void 0?{}:{node_id:e.nodeId},fields:{source:g}}),"auditMissing")});if(e.pluginRoot!==void 0&&(a.pluginRoot=e.pluginRoot),e.capture===!1){if(e.nodeId===void 0||e.stdin!==void 0)throw new Error("uncaptured process requires a node and no stdin")}else a.capture={stdoutBytes:e.stdoutBytes??256*1024,stderrBytes:e.stderrBytes??256*1024,...e.stderrTail?{stderrTail:!0}:{},...e.stdin===void 0?{}:{stdin:e.stdin}};return a},"compile");let f;for(let a=0;a<2&&f===void 0;a++){const g=S(),x=P(),l=await b({operation:"launch",spec:x});if(!("pid"in l))throw new Error("launcher did not return a process id");if(S()===g||M(E,x)){f=l.pid;break}G({level:"info",event:"process.launch.regranted",...e.nodeId===void 0?{}:{node_id:e.nodeId},fields:{pid:l.pid}}),await D(l.pid,"SIGKILL").catch(()=>{})}if(f===void 0)throw new Error("grant changed during every launch attempt");const p=f;return{pid:p,get completion(){return b({operation:"wait",pid:p}).then(a=>{if(!("result"in a))throw new Error("launcher did not return process completion");return a.result})},stop:i((a="SIGKILL")=>D(p,a,e.cron===void 0?e.nodeId:d),"stop")}}i(pe,"launchAppProcess");export{le as __setAppProcessesSandboxedForTest,W as appProcessCwd,ce as appProcessSandboxed,fe as appProcessesSandboxed,U as cronLaunchId,me as cwdIsMounted,pe as launchAppProcess,D as stopAppProcess};
+var C=Object.defineProperty;var u=(e,r)=>C(e,"name",{value:r,configurable:!0});import{existsSync as v}from"node:fs";import{assertGranteeRunsHere as $}from"../runtime/unsandboxed.js";import{randomUUID as N}from"node:crypto";import{join as g}from"node:path";import{getNode as R}from"../canvas/canvas.js";import{nodeAgentDir as O,nodeHome as k,nodeRunDir as H}from"../canvas/paths.js";import{appSpace as K}from"../layout.js";import{activeGrant as h,activeGrantForApp as _,grantFor as I,grantsGeneration as S}from"../grants/mirror.js";import{readConfig as B}from"../config.js";import{emitEvent as y}from"../events/emit.js";import{ensureAppSpace as F}from"./space.js";import{compileLaunch as G,launchStillGranted as M}from"./mounts.js";import{pinSandboxRuntimeHome as j}from"./runtime-home.js";import{sandboxCacheEnv as q}from"./cache-env.js";import{launcherRequest as b}from"../../launcher/client.js";import{LAUNCHER_SOCKET as T}from"../../launcher/spec.js";function U(e){return`cron-${e}`}u(U,"cronLaunchId");function ce(){if(process.platform!=="linux")return!1;if(v(T))return!0;throw new Error("root launcher socket is unavailable; refusing an unsandboxed app process")}u(ce,"appProcessSandboxed");function fe(){return A??(process.platform==="linux"&&v(T))}u(fe,"appProcessesSandboxed");let A;function le(e){A=e}u(le,"__setAppProcessesSandboxedForTest");async function me(e,r,n,o=!1,t,d){const a=n===void 0?null:await R(n),s=d!==void 0?d.grantId?await h(d.grantId):await I(e,d.sub):a?null:await _(e);if(d!==void 0?!s&&!(d.grantId===null&&e==="app:terminal"):!a&&!s)throw new Error(`no active grant for ${e}`);return(await G({nodeId:n??"proc-cwd-check",app:e,...d!==void 0?{sub:d.sub,grantId:s?.id??null,scopes:d.scopes}:{sub:a?a.sub??"user:local":s.sub,grantId:a?a.grant_id??null:s.id,scopes:a?.scopes??null},command:["true"],env:{},...n===void 0?{withoutNode:!0}:{},...t===void 0?{}:{folder:t},isolated:a?.isolated===!0||o,auditMissing:u(()=>{},"auditMissing")})).mounts.some(({source:c})=>r===c||r.startsWith(c==="/"?"/":`${c}/`))}u(me,"cwdIsMounted");async function D(e,r="SIGKILL",n){if(!("ok"in await b({operation:"stop",pid:e,signal:r,...n===void 0?{}:{nodeId:n}})))throw new Error("launcher did not stop process")}u(D,"stopAppProcess");function W(e,r,n,o,t){return o?t??O(e,r):n}u(W,"appProcessCwd");async function pe(e){if(e.cron!==void 0&&(e.nodeId!==void 0||e.principal===void 0))throw new Error("a cron launch has a stored principal and no node");const r=e.nodeId===void 0?null:await R(e.nodeId);if(e.nodeId!==void 0&&!r)throw new Error(`missing node ${e.nodeId}`);const n=r?.grantee??e.app??"app:terminal";if($(n),e.app!==void 0&&e.app!==n)throw new Error("app does not match node");const o=e.principal;let t=null;if(o!==void 0){if(t=o.grantId?await h(o.grantId):await I(n,o.sub),!(t===null&&o.grantId===null&&n==="app:terminal"&&!B("user").runtime?.issuer)&&(!t||t.grantee!==n||t.sub!==o.sub))throw new Error(`no active grant for ${n}`)}else if(r){if(n!=="app:terminal"&&!(r.grant_id?await h(r.grant_id):await I(n,r.sub??"user:local")))throw new Error(`no active grant for ${n}`)}else if(t=await _(n),!t)throw new Error(`no active grant for ${n}`);await F(n);const d=e.cron===void 0?e.nodeId??`proc-${N()}`:U(e.cron.executionId),a=r?.isolated===!0||e.isolated===!0;if(a&&!r&&e.folder===void 0)throw new Error("isolated process requires a live node");const s=K(n),m=W(d,n,e.cwd,a,e.folder),c=r?k(d,n,a):a&&e.folder!==void 0?g(e.folder,"home"):s.home,L=j(Object.fromEntries(Object.entries({...e.env,...process.platform==="linux"?q(n):{},HOME:c,PI_CODING_AGENT_DIR:g(c,".pi","agent"),PWD:m,...e.nodeId===void 0&&e.cron===void 0?{}:{CRTR_API_SOCKET:g(H(d),"cli.sock")}}).filter(i=>i[1]!==void 0))),E=o!==void 0?{nodeId:d,app:n,sub:o.sub,grantId:t?.id??null,scopes:o.scopes}:{nodeId:d,app:n,sub:r?r.sub??"user:local":t.sub,grantId:r?r.grant_id??null:t.id,scopes:r?.scopes??null},P=u(async()=>{const i=await G({...E,command:e.command,env:L,...e.nodeId===void 0?{withoutNode:!0}:{},isolated:a,cwd:m,...e.folder===void 0?{}:{folder:e.folder},...e.cron===void 0?{}:{cron:e.cron.anchorDir===void 0?{}:{anchorDir:e.cron.anchorDir}},...e.pluginRoot===void 0?{}:{pluginRoot:e.pluginRoot},auditMissing:u(w=>y({level:"warn",event:"process.mount.missing",...e.nodeId===void 0?{}:{node_id:e.nodeId},fields:{source:w}}),"auditMissing")});if(e.pluginRoot!==void 0&&(i.pluginRoot=e.pluginRoot),e.capture===!1){if(e.nodeId===void 0||e.stdin!==void 0)throw new Error("uncaptured process requires a node and no stdin")}else i.capture={stdoutBytes:e.stdoutBytes??256*1024,stderrBytes:e.stderrBytes??256*1024,...e.stderrTail?{stderrTail:!0}:{},...e.stdin===void 0?{}:{stdin:e.stdin}};return i},"compile");let f;for(let i=0;i<2&&f===void 0;i++){const w=await S(),x=await P(),l=await b({operation:"launch",spec:x});if(!("pid"in l))throw new Error("launcher did not return a process id");if(await S()===w||await M(E,x)){f=l.pid;break}y({level:"info",event:"process.launch.regranted",...e.nodeId===void 0?{}:{node_id:e.nodeId},fields:{pid:l.pid}}),await D(l.pid,"SIGKILL").catch(()=>{})}if(f===void 0)throw new Error("grant changed during every launch attempt");const p=f;return{pid:p,get completion(){return b({operation:"wait",pid:p}).then(i=>{if(!("result"in i))throw new Error("launcher did not return process completion");return i.result})},stop:u((i="SIGKILL")=>D(p,i,e.cron===void 0?e.nodeId:d),"stop")}}u(pe,"launchAppProcess");export{le as __setAppProcessesSandboxedForTest,W as appProcessCwd,ce as appProcessSandboxed,fe as appProcessesSandboxed,U as cronLaunchId,me as cwdIsMounted,pe as launchAppProcess,D as stopAppProcess};

package/dist/core/spaces/space.js

@@ -1,2 +1,2 @@
 var f=Object.defineProperty;var n=(o,r)=>f(o,"name",{value:r,configurable:!0});import{chownSync as a,chmodSync as d,existsSync as l,mkdirSync as c,readFileSync as h,statSync as m}from"node:fs";import{appSpace as g,appsRoot as w,userFilesRoot as y}from"../layout.js";import{launcherRequest as S}from"../../launcher/client.js";import{LAUNCHER_SOCKET as x}from"../../launcher/spec.js";import{allocateAppUser as E,uidForApp as v}from"./users.js";function p(){const o=h("/etc/group","utf8").split(`
-`).find(e=>e.startsWith("crtr-data:"));if(!o)throw new Error("crtr-data group is required on sandboxed Linux");const r=Number(o.split(":")[2]);if(!Number.isInteger(r))throw new Error("invalid crtr-data group id");return r}n(p,"dataGroup");function L(){const o=y(),r=p();c(o,{recursive:!0,mode:1528});const e=m(o),t=e.mode&4095;if(!e.isDirectory()||e.gid!==r||t!==1528){if(!e.isDirectory()||e.uid!==process.getuid())throw new Error(`${o} has owner ${e.uid}, group ${e.gid}, mode ${t.toString(8).padStart(4,"0")}; requires an crtr-data (${r}) directory with mode 2770; only its owner can repair it`);e.gid!==r&&a(o,e.uid,r),t!==1528&&d(o,1528)}}n(L,"ensureUserFiles");async function N(o){const r=g(o);if(!(process.platform==="linux"&&l(x))){if(process.platform==="linux")throw new Error("app space requires the root launcher on Linux");for(const i of[r.root,r.profiles,r.conversations,r.nodes,r.files,r.home,r.cache])c(i,{recursive:!0});return{uid:v(o),gid:process.getgid(),root:r.root}}const t=p(),s=E(o),u=await S({operation:"user.create",app:r.root.slice(w().length+1),uid:s.uid});if(!("uid"in u)||u.uid!==s.uid)throw new Error(`launcher did not create OS user for ${o}`);for(const i of[r.root,r.profiles,r.conversations,r.nodes,r.files,r.home,r.cache])c(i,{recursive:!0,mode:1528}),a(i,process.getuid(),t),d(i,1528);return{uid:s.uid,gid:t,root:r.root}}n(N,"ensureAppSpace");export{N as ensureAppSpace,L as ensureUserFiles};
+`).find(e=>e.startsWith("crtr-data:"));if(!o)throw new Error("crtr-data group is required on sandboxed Linux");const r=Number(o.split(":")[2]);if(!Number.isInteger(r))throw new Error("invalid crtr-data group id");return r}n(p,"dataGroup");function L(){const o=y(),r=p();c(o,{recursive:!0,mode:1528});const e=m(o),t=e.mode&4095;if(!e.isDirectory()||e.gid!==r||t!==1528){if(!e.isDirectory()||e.uid!==process.getuid())throw new Error(`${o} has owner ${e.uid}, group ${e.gid}, mode ${t.toString(8).padStart(4,"0")}; requires an crtr-data (${r}) directory with mode 2770; only its owner can repair it`);e.gid!==r&&a(o,e.uid,r),t!==1528&&d(o,1528)}}n(L,"ensureUserFiles");async function N(o){const r=g(o);if(!(process.platform==="linux"&&l(x))){if(process.platform==="linux")throw new Error("app space requires the root launcher on Linux");for(const i of[r.root,r.profiles,r.conversations,r.nodes,r.files,r.home,r.cache])c(i,{recursive:!0});return{uid:await v(o),gid:process.getgid(),root:r.root}}const t=p(),s=await E(o),u=await S({operation:"user.create",app:r.root.slice(w().length+1),uid:s.uid});if(!("uid"in u)||u.uid!==s.uid)throw new Error(`launcher did not create OS user for ${o}`);for(const i of[r.root,r.profiles,r.conversations,r.nodes,r.files,r.home,r.cache])c(i,{recursive:!0,mode:1528}),a(i,process.getuid(),t),d(i,1528);return{uid:s.uid,gid:t,root:r.root}}n(N,"ensureAppSpace");export{N as ensureAppSpace,L as ensureUserFiles};

package/dist/core/spaces/stop.d.ts

@@ -1,9 +1,9 @@
-import type { DatabaseSync } from 'node:sqlite';
+import { type CanvasDb } from '../canvas/db.js';
 import type { ObjectRow } from '../graph/types.js';
 import { type TeardownResult } from '../runtime/host.js';
 /** End the job object of a backgrounded command as killed. A command that was never backgrounded
  *  has no job object; that answers false. Daemon-only: opens canvas.db. */
-export declare function killBashJobObject(jobId: string, killedBy: (db: DatabaseSync) => ObjectRow | null, reason?: string): boolean;
+export declare function killBashJobObject(jobId: string, killedBy: (db: CanvasDb) => Promise<ObjectRow | null>, reason?: string): Promise<boolean>;
 /** Record a backgrounded command as its node's job object (id = job id); an existing job
  *  object is returned as is. The one path for both the broker's record call and the
  *  daemon adopting a job the broker backgrounded while exiting. Daemon-only. */
@@ -11,7 +11,7 @@ export declare function recordBashJobObject(nodeId: string, jobId: string, spec:
     command: string;
     jobDir: string;
     logPath: string;
-}): ObjectRow;
+}): Promise<ObjectRow>;
 /** Stop the broker first so it cannot start another job during the job scan. */
 export declare function stopNodeSandboxes(nodeId: string, reason: string, options?: {
     excludePid?: number;

package/dist/core/spaces/stop.js

@@ -1,2 +1,2 @@
-var _=Object.defineProperty;var a=(e,t)=>_(e,"name",{value:t,configurable:!0});import{prepared as x}from"../sqlite-statements.js";import{randomUUID as y}from"node:crypto";import{activeBackgroundBashJobs as R,stopBackgroundBashJob as S}from"../bash-jobs.js";import{getNode as T}from"../canvas/index.js";import{openDb as D,withCanvasWrite as h}from"../canvas/db.js";import{finishJob as J,startJob as O}from"../graph/jobs.js";import{getById as w,nodeObject as M}from"../graph/objects.js";import{readLiveSession as N}from"../canvas/sessions.js";import{contextDir as W}from"../canvas/node-agent-paths.js";import{conversationStore as $}from"../conversation-store/index.js";import{requestBrokerTeardown as C}from"../runtime/host.js";import{holdRecovery as L}from"../runtime/recovery-hold.js";function P(e,t,o){return h(n=>{const r=w(n,e);return r===null||r.type!=="job"?!1:(J(n,r,{killedBy:t(n),...o===void 0?{}:{reason:o}}),!0)})}a(P,"killBashJobObject");function I(e,t,o){return h(n=>{const r=w(n,t);if(r!==null){if(r.type!=="job")throw new Error(`${t} names a ${r.type}`);return r}return O(n,M(n,e),{id:t,...o})})}a(I,"recordBashJobObject");const d=new Map;function ee(e,t,o={}){const n=d.get(e);if(n)return n;const r=T(e);if(!r)return Promise.resolve({confirmed:!1,error:new Error(`missing node ${e}`)});const m=N(e)?.sessionId,l=a(()=>x(D(),`SELECT type, body_json FROM run_events WHERE node_id = ?
-    AND type IN ('node.turn.started', 'node.turn.completed') ORDER BY sequence_number DESC LIMIT 1`).get(e),"latestTurn"),v=r.run_id!==null&&r.pi_pid!==null&&l()?.type==="node.turn.started",E=o.holdRecovery?L(e):()=>{},j=C(e,{excludePid:o.excludePid}),c=(async()=>{const p=await j;if(!p.confirmed)return p;try{const s=W(e);for(const u of R(s,!0)){const i=await S(s,u.jobId,!0,e,t);if(i.kind==="not-stoppable")throw new Error(`background bash job ${u.jobId} could not be stopped`);i.kind!=="stopped"||o.deleting||P(u.jobId,()=>null,t)}if(v&&m&&!o.deleting){if(l()?.type!=="node.turn.started")return await o.after?.(),p;const i=$(),{entries:k}=i.read(m),B=k.at(-1),f=new Date().toISOString(),g=t==="permission_revoked",b={type:"message",id:y(),parentId:B?.id??null,timestamp:f,message:{role:"assistant",content:[],api:"openai-completions",provider:"crouter",model:"",usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:g?"error":"aborted",errorMessage:t,timestamp:Date.now()}};i.append(m,[b,{type:"custom",id:y(),parentId:b.id,timestamp:f,customType:"crtr-turn-end",data:g?{stop_reason:"error",error:{code:"model_error",message:t}}:{stop_reason:"aborted"}}])}return await o.after?.(),p}catch(s){return{confirmed:!1,error:s instanceof Error?s:new Error(String(s))}}})();return d.set(e,c),c.finally(()=>{E(),d.get(e)===c&&d.delete(e)}),c}a(ee,"stopNodeSandboxes");export{P as killBashJobObject,I as recordBashJobObject,ee as stopNodeSandboxes};
+var _=Object.defineProperty;var s=(t,e)=>_(t,"name",{value:e,configurable:!0});import{randomUUID as g}from"node:crypto";import{activeBackgroundBashJobs as x,stopBackgroundBashJob as R}from"../bash-jobs.js";import{getNode as T}from"../canvas/index.js";import{withCanvasWrite as b,openDb as D}from"../canvas/db.js";import{finishJob as S,startJob as J}from"../graph/jobs.js";import{getById as h,nodeObject as O}from"../graph/objects.js";import{readLiveSession as M}from"../canvas/sessions.js";import{contextDir as N}from"../canvas/node-agent-paths.js";import{conversationStore as W}from"../conversation-store/index.js";import{requestBrokerTeardown as $}from"../runtime/host.js";import{holdRecovery as C}from"../runtime/recovery-hold.js";async function L(t,e,o){return await b(async n=>{const r=await h(n,t);return r===null||r.type!=="job"?!1:(await S(n,r,{killedBy:await e(n),...o===void 0?{}:{reason:o}}),!0)})}s(L,"killBashJobObject");async function X(t,e,o){return await b(async n=>{const r=await h(n,e);if(r!==null){if(r.type!=="job")throw new Error(`${e} names a ${r.type}`);return r}return await J(n,await O(n,t),{id:e,...o})})}s(X,"recordBashJobObject");const d=new Map;async function Z(t,e,o={}){const n=d.get(t);if(n)return n;const r=await T(t);if(!r)return Promise.resolve({confirmed:!1,error:new Error(`missing node ${t}`)});const l=(await M(t))?.sessionId,m=s(async()=>await(await D()).prepare(`SELECT type, body_json FROM run_events WHERE node_id = ?
+    AND type IN ('node.turn.started', 'node.turn.completed') ORDER BY sequence_number DESC LIMIT 1`).get(t),"latestTurn"),v=r.run_id!==null&&r.pi_pid!==null&&(await m())?.type==="node.turn.started",E=o.holdRecovery?C(t):()=>{},j=$(t,{excludePid:o.excludePid}),c=(async()=>{const u=await j;if(!u.confirmed)return u;try{const a=await N(t);for(const p of x(a,!0)){const i=await R(a,p.jobId,!0,t,e);if(i.kind==="not-stoppable")throw new Error(`background bash job ${p.jobId} could not be stopped`);i.kind!=="stopped"||o.deleting||await L(p.jobId,async()=>null,e)}if(v&&l&&!o.deleting){if((await m())?.type!=="node.turn.started")return await o.after?.(),u;const i=W(),{entries:k}=await i.read(l),B=k.at(-1),f=new Date().toISOString(),w=e==="permission_revoked",y={type:"message",id:g(),parentId:B?.id??null,timestamp:f,message:{role:"assistant",content:[],api:"openai-completions",provider:"crouter",model:"",usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:w?"error":"aborted",errorMessage:e,timestamp:Date.now()}};await i.append(l,[y,{type:"custom",id:g(),parentId:y.id,timestamp:f,customType:"crtr-turn-end",data:w?{stop_reason:"error",error:{code:"model_error",message:e}}:{stop_reason:"aborted"}}])}return await o.after?.(),u}catch(a){return{confirmed:!1,error:a instanceof Error?a:new Error(String(a))}}})();return d.set(t,c),c.finally(()=>{E(),d.get(t)===c&&d.delete(t)}),c}s(Z,"stopNodeSandboxes");export{L as killBashJobObject,X as recordBashJobObject,Z as stopNodeSandboxes};

package/dist/core/spaces/users.d.ts

@@ -5,15 +5,15 @@ export interface AppUser {
     status: 'active' | 'removed';
 }
 /** The launcher is absent on macOS; there is no app uid on that host. */
-export declare function uidForApp(app: string): number;
+export declare function uidForApp(app: string): Promise<number>;
 /** An app has at most one active row. A removed app that reconnects gets a new
  *  row above every uid ever allocated, so a uid is never reused. */
-export declare function allocateAppUser(app: string): AppUser;
-export declare function activeAppUsers(): Array<{
+export declare function allocateAppUser(app: string): Promise<AppUser>;
+export declare function activeAppUsers(): Promise<Array<{
     app: string;
     uid: number;
-}>;
+}>>;
 /** The app's OS-user row not yet marked removed, if any. */
-export declare function activeAppUser(app: string): AppUser | null;
+export declare function activeAppUser(app: string): Promise<AppUser | null>;
 /** The removal cascade's last write (runtime spec, "On removal"). */
-export declare function markAppUserRemoved(uid: number): void;
+export declare function markAppUserRemoved(uid: number): Promise<void>;

package/dist/core/spaces/users.js

@@ -1 +1 @@
-var E=Object.defineProperty;var r=(t,e)=>E(t,"name",{value:e,configurable:!0});import{prepared as p}from"../sqlite-statements.js";import{existsSync as d}from"node:fs";import{openDb as i,withCanvasWrite as n}from"../canvas/db.js";import{APP_UID_MAX as m,APP_UID_MIN as o,LAUNCHER_SOCKET as S}from"../../launcher/spec.js";function R(t){return process.platform!=="linux"||!d(S)?process.getuid?.()??0:A(t).uid}r(R,"uidForApp");function A(t){if(process.platform!=="linux")throw new Error("app OS users exist only on Linux");return n(e=>{const a=p(e,"SELECT app, uid, created, status FROM app_users WHERE app = ? AND status = 'active'").get(t);if(a)return a;const c=p(e,"SELECT MAX(uid) AS uid FROM app_users").get().uid,s=Math.max(o,(c??o-1)+1);if(s>m)throw new Error("app OS user range exhausted");const u=new Date().toISOString();return p(e,"INSERT INTO app_users (app, uid, created, status) VALUES (?, ?, ?, ?)").run(t,s,u,"active"),{app:t,uid:s,created:u,status:"active"}})}r(A,"allocateAppUser");function O(){return p(i(),"SELECT app, uid FROM app_users WHERE status = 'active'").all().map(e=>({app:e.app.startsWith("app:")?e.app.slice(4):e.app,uid:e.uid}))}r(O,"activeAppUsers");function D(t){return p(i(),"SELECT app, uid, created, status FROM app_users WHERE app = ? AND status = 'active'").get(t)??null}r(D,"activeAppUser");function T(t){n(e=>{p(e,"UPDATE app_users SET status = 'removed', removed_at = ? WHERE uid = ? AND status = 'active'").run(new Date().toISOString(),t)})}r(T,"markAppUserRemoved");export{D as activeAppUser,O as activeAppUsers,A as allocateAppUser,T as markAppUserRemoved,R as uidForApp};
+var o=Object.defineProperty;var e=(t,a)=>o(t,"name",{value:a,configurable:!0});import{existsSync as c}from"node:fs";import{withCanvasWrite as E,openDb as p}from"../canvas/db.js";import{APP_UID_MAX as d,APP_UID_MIN as u,LAUNCHER_SOCKET as w}from"../../launcher/spec.js";async function l(t){return process.platform!=="linux"||!c(w)?process.getuid?.()??0:(await A(t)).uid}e(l,"uidForApp");async function A(t){if(process.platform!=="linux")throw new Error("app OS users exist only on Linux");return await E(async a=>{const s=await a.prepare("SELECT app, uid, created, status FROM app_users WHERE app = ? AND status = 'active'").get(t);if(s)return s;const n=(await a.prepare("SELECT MAX(uid) AS uid FROM app_users").get()).uid,r=Math.max(u,(n??u-1)+1);if(r>d)throw new Error("app OS user range exhausted");const i=new Date().toISOString();return await a.prepare("INSERT INTO app_users (app, uid, created, status) VALUES (?, ?, ?, ?)").run(t,r,i,"active"),{app:t,uid:r,created:i,status:"active"}})}e(A,"allocateAppUser");async function v(){return(await(await p()).prepare("SELECT app, uid FROM app_users WHERE status = 'active'").all()).map(a=>({app:a.app.startsWith("app:")?a.app.slice(4):a.app,uid:a.uid}))}e(v,"activeAppUsers");async function _(t){return await(await p()).prepare("SELECT app, uid, created, status FROM app_users WHERE app = ? AND status = 'active'").get(t)??null}e(_,"activeAppUser");async function R(t){await(await p()).prepare("UPDATE app_users SET status = 'removed', removed_at = ? WHERE uid = ? AND status = 'active'").run(new Date().toISOString(),t)}e(R,"markAppUserRemoved");export{_ as activeAppUser,v as activeAppUsers,A as allocateAppUser,R as markAppUserRemoved,l as uidForApp};

package/dist/core/storage/attachments.d.ts

@@ -1,5 +1,5 @@
-import type { DatabaseSync } from 'node:sqlite';
 import { type StorageClient, type StorageConfig } from './client.js';
+import type { CanvasDb } from '../canvas/db.js';
 /** The fetch step of one `run.start` or `run.message` is bounded to 110 s in
  *  total (the hosting router waits 120 s for its headers). */
 export declare const ATTACHMENT_FETCH_BUDGET_MS = 110000;
@@ -24,7 +24,7 @@ export interface ResolveOptions {
 /** Re-check, inside the accepting write, that every used upload is still this
  *  grantee's and not pending delete (the due-work tick or an app removal may
  *  have released it while its bytes were fetched). */
-export declare function assertUploadsUsable(grantee: string, uses: readonly AttachmentUse[], db: DatabaseSync): void;
+export declare function assertUploadsUsable(grantee: string, uses: readonly AttachmentUse[], db: CanvasDb): Promise<void>;
 /** Fetch every upload a storage URL in `text` names into
  *  `appSpace(grantee).nodes/<rootId>/attachments/` and replace exactly each
  *  URL's span with the file's absolute runtime path. Without configured

package/dist/core/storage/attachments.js

@@ -1 +1 @@
-var N=Object.defineProperty;var i=(e,n)=>N(e,"name",{value:n,configurable:!0});import{constants as Z,createWriteStream as j}from"node:fs";import{extname as q,join as E}from"node:path";import{Transform as G}from"node:stream";import{pipeline as X}from"node:stream/promises";import{appSpace as Y}from"../layout.js";import{RunError as v}from"../runs/operations.js";import{createFileBeneath as J,existsBeneath as z,openBeneath as K,removeTreeBeneath as O,setModeBeneath as P,unlinkBeneath as Q,withDirBeneath as V}from"../spaces/open-beneath.js";import{ensureAppSpace as ee}from"../spaces/space.js";import{storageClient as te,storageConfig as oe,StorageRefused as ne}from"./client.js";import{getUpload as k}from"./tables.js";const re=11e4,p=i((e,n)=>new v(400,"invalid_request",n,void 0,{url:e}),"refused"),R=i(e=>new v(503,"storage_unavailable",e,void 0,void 0,void 0,!0),"unavailable");function x(e,n){return/^[^\s<>"'`)\]]*/.exec(e.slice(n))[0].replace(/[.,;:!?]+$/,"")}i(x,"shownUrl");function ae(e,n,r,c,d){const l=`${n}/`,_=[];let h=0;for(let u=e.indexOf(l,h);u!==-1;u=e.indexOf(l,h)){const t=x(e,u),f=/^([A-Za-z0-9_-]+)\/([A-Za-z0-9_-]+)\//.exec(e.slice(u+l.length));if(!f)throw p(t,`storage URL ${t} does not name an upload`);if(f[1]!==r)throw p(t,`storage URL ${t} names another runtime`);const s=k(f[2],d);if(!s||s.grantee!==c)throw p(t,`storage URL ${t} names an unknown upload`);if(s.delete_pending_since)throw p(t,`storage URL ${t} names a deleted upload`);const $=u+l.length+f[0].length,m=encodeURIComponent(s.name);if(!e.startsWith(m,$))throw p(t,`storage URL ${t} does not match the upload's name`);_.push({start:u,end:$+m.length,upload:s}),h=$+m.length}return _}i(ae,"matchStorageUrls");function _e(e,n,r){for(const c of n){const d=k(c.upload_id,r);if(!d||d.grantee!==e||d.delete_pending_since)throw p(c.url,`storage URL ${c.url} names an upload deleted while it was fetched`)}}i(_e,"assertUploadsUsable");function se(e,n){if(n===1)return e;const r=q(e);return r&&r!==e?`${e.slice(0,-r.length)}-${n}${r}`:`${e}-${n}`}i(se,"candidate");async function $e(e,n,r,c={}){const d={text:r,uses:[],cleanup:i(()=>{},"cleanup")},l=(c.config??oe)();if(!l||!r.includes(`${l.base_url}/`))return d;const _=(c.client??te)(),h=ae(r,l.base_url,_.runtimeId,e);if(!h.length)return d;const u=await ee(e),t=Y(e).nodes,f=E(t,n),s=E(f,"attachments"),$={uid:process.getuid?.()??0,gid:u.gid},m=!z(t,f),I=!m&&!z(t,s),C=[];let D=!1;const M=i(()=>{if(!D){D=!0;for(const o of C)try{Q(t,o)}catch{}try{m?O(t,f):I&&O(t,s)}catch{}}},"cleanup"),U=AbortSignal.timeout(c.budgetMs??re),b=new Map;try{V(t,s,()=>{},!0);for(const{upload:o,start:B}of h){if(b.has(o.upload_id))continue;const g=x(r,B);let L;try{L=await _.fetchUpload(o.upload_id,U)}catch(a){throw a instanceof ne?p(g,a.status===409?`storage URL ${g} names an upload that was never finished`:`storage URL ${g} names an unknown upload`):U.aborted?R("attachments could not be fetched within 110 s"):a}let w="";for(let a=1;;a++){w=E(s,se(o.name,a));try{J(t,w,Buffer.alloc(0),432);break}catch(A){if(A.code!=="EEXIST")throw L.body.destroy(),A}}C.push(w);let T=0;const W=new G({transform(a,A,H){T+=a.length,H(null,a)}}),F=K(t,w,Z.O_WRONLY);try{await X(L.body,W,j("",{fd:F,autoClose:!0}),{signal:U})}catch(a){throw U.aborted?R("attachments could not be fetched within 110 s"):a instanceof v?a:R(`storage stopped sending ${o.name}: ${a instanceof Error?a.message:String(a)}`)}if(T!==o.size)throw R(`storage sent ${T} of ${o.size} bytes of ${o.name}`);P(t,w,432,$),b.set(o.upload_id,{path:w,url:g})}}catch(o){throw M(),o}let y="",S=0;for(const o of h)y+=r.slice(S,o.start)+b.get(o.upload.upload_id).path,S=o.end;return y+=r.slice(S),{text:y,uses:[...b].map(([o,{path:B,url:g}])=>({upload_id:o,path:B,url:g})),cleanup:M}}i($e,"resolveStorageUrls");export{re as ATTACHMENT_FETCH_BUDGET_MS,_e as assertUploadsUsable,$e as resolveStorageUrls};
+var N=Object.defineProperty;var i=(e,o)=>N(e,"name",{value:o,configurable:!0});import{constants as Z,createWriteStream as j}from"node:fs";import{extname as q,join as E}from"node:path";import{Transform as G}from"node:stream";import{pipeline as X}from"node:stream/promises";import{appSpace as Y}from"../layout.js";import{RunError as v}from"../runs/operations.js";import{createFileBeneath as J,existsBeneath as z,openBeneath as K,removeTreeBeneath as O,setModeBeneath as P,unlinkBeneath as Q,withDirBeneath as V}from"../spaces/open-beneath.js";import{ensureAppSpace as ee}from"../spaces/space.js";import{storageClient as te,storageConfig as ne,StorageRefused as oe}from"./client.js";import{getUpload as k}from"./tables.js";const re=11e4,p=i((e,o)=>new v(400,"invalid_request",o,void 0,{url:e}),"refused"),y=i(e=>new v(503,"storage_unavailable",e,void 0,void 0,void 0,!0),"unavailable");function x(e,o){return/^[^\s<>"'`)\]]*/.exec(e.slice(o))[0].replace(/[.,;:!?]+$/,"")}i(x,"shownUrl");async function ae(e,o,r,c,d){const l=`${o}/`,_=[];let h=0;for(let u=e.indexOf(l,h);u!==-1;u=e.indexOf(l,h)){const t=x(e,u),f=/^([A-Za-z0-9_-]+)\/([A-Za-z0-9_-]+)\//.exec(e.slice(u+l.length));if(!f)throw p(t,`storage URL ${t} does not name an upload`);if(f[1]!==r)throw p(t,`storage URL ${t} names another runtime`);const s=await k(f[2],d);if(!s||s.grantee!==c)throw p(t,`storage URL ${t} names an unknown upload`);if(s.delete_pending_since)throw p(t,`storage URL ${t} names a deleted upload`);const $=u+l.length+f[0].length,m=encodeURIComponent(s.name);if(!e.startsWith(m,$))throw p(t,`storage URL ${t} does not match the upload's name`);_.push({start:u,end:$+m.length,upload:s}),h=$+m.length}return _}i(ae,"matchStorageUrls");async function _e(e,o,r){for(const c of o){const d=await k(c.upload_id,r);if(!d||d.grantee!==e||d.delete_pending_since)throw p(c.url,`storage URL ${c.url} names an upload deleted while it was fetched`)}}i(_e,"assertUploadsUsable");function se(e,o){if(o===1)return e;const r=q(e);return r&&r!==e?`${e.slice(0,-r.length)}-${o}${r}`:`${e}-${o}`}i(se,"candidate");async function $e(e,o,r,c={}){const d={text:r,uses:[],cleanup:i(()=>{},"cleanup")},l=(c.config??ne)();if(!l||!r.includes(`${l.base_url}/`))return d;const _=(c.client??te)(),h=await ae(r,l.base_url,_.runtimeId,e);if(!h.length)return d;const u=await ee(e),t=Y(e).nodes,f=E(t,o),s=E(f,"attachments"),$={uid:process.getuid?.()??0,gid:u.gid},m=!z(t,f),I=!m&&!z(t,s),C=[];let D=!1;const M=i(()=>{if(!D){D=!0;for(const n of C)try{Q(t,n)}catch{}try{m?O(t,f):I&&O(t,s)}catch{}}},"cleanup"),U=AbortSignal.timeout(c.budgetMs??re),b=new Map;try{V(t,s,()=>{},!0);for(const{upload:n,start:B}of h){if(b.has(n.upload_id))continue;const g=x(r,B);let L;try{L=await _.fetchUpload(n.upload_id,U)}catch(a){throw a instanceof oe?p(g,a.status===409?`storage URL ${g} names an upload that was never finished`:`storage URL ${g} names an unknown upload`):U.aborted?y("attachments could not be fetched within 110 s"):a}let w="";for(let a=1;;a++){w=E(s,se(n.name,a));try{J(t,w,Buffer.alloc(0),432);break}catch(A){if(A.code!=="EEXIST")throw L.body.destroy(),A}}C.push(w);let T=0;const W=new G({transform(a,A,H){T+=a.length,H(null,a)}}),F=K(t,w,Z.O_WRONLY);try{await X(L.body,W,j("",{fd:F,autoClose:!0}),{signal:U})}catch(a){throw U.aborted?y("attachments could not be fetched within 110 s"):a instanceof v?a:y(`storage stopped sending ${n.name}: ${a instanceof Error?a.message:String(a)}`)}if(T!==n.size)throw y(`storage sent ${T} of ${n.size} bytes of ${n.name}`);P(t,w,432,$),b.set(n.upload_id,{path:w,url:g})}}catch(n){throw M(),n}let R="",S=0;for(const n of h)R+=r.slice(S,n.start)+b.get(n.upload.upload_id).path,S=n.end;return R+=r.slice(S),{text:R,uses:[...b].map(([n,{path:B,url:g}])=>({upload_id:n,path:B,url:g})),cleanup:M}}i($e,"resolveStorageUrls");export{re as ATTACHMENT_FETCH_BUDGET_MS,_e as assertUploadsUsable,$e as resolveStorageUrls};

package/dist/core/storage/shares.d.ts

@@ -21,9 +21,9 @@ export declare function createShare(caller: FileCaller, input: {
     expires_at: string | null;
 }>;
 /** `share.list`: the shares `createdBy` created. */
-export declare function listOwnShares(createdBy: string): {
+export declare function listOwnShares(createdBy: string): Promise<{
     shares: ShareView[];
-};
+}>;
 /** `share.delete`: turn the share off, then delete its stored copy. A storage
  *  failure leaves `object_deleted_at` unset for the due-work tick to retry. */
 export declare function deleteOwnShare(createdBy: string, shareId: string): Promise<{

package/dist/core/storage/shares.js

@@ -1 +1 @@
-var g=Object.defineProperty;var n=(e,t)=>g(e,"name",{value:t,configurable:!0});import{closeSync as x,read as v}from"node:fs";import{promisify as O}from"node:util";import{basename as $,relative as u,sep as d}from"node:path";import{Readable as _}from"node:stream";import{appsRoot as m,appSpace as A}from"../layout.js";import{RunError as s}from"../runs/operations.js";import{scopeAllowed as k}from"../scopes.js";import{invalidStorageName as q,storageClient as w,UPLOAD_MAX_BYTES as D}from"./client.js";import{contentTypeFor as E,openCallerFile as C}from"./download.js";import{getShare as R,insertShare as T,listShares as B,markShareObjectDeleted as N,turnShareOff as F}from"./tables.js";const f="crtr:files:share";function y(e,t){const r=u(e,t);return r===""||r!==".."&&!r.startsWith(`..${d}`)&&!r.startsWith(d)}n(y,"contains");function M(e){if(y(m(),e)){const t=u(m(),e).split(d)[0];if(t)return`app:${t}`}return"user"}n(M,"spaceOf");const b=n(e=>new s(503,"storage_unavailable",e,void 0,void 0,void 0,!0),"unavailable"),P=O(v);async function*U(e,t){let r=0;for(;r<t;){const a=Buffer.allocUnsafe(Math.min(1048576,t-r)),{bytesRead:i}=await P(e,a,0,a.length,r);if(i===0)throw new Error("shared file shrank while it was being copied");r+=i,yield a.subarray(0,i)}}n(U,"chunks");async function W(e,t,r,a){const i=_.from(U(t,r));let c;try{c=await fetch(e,{method:"PUT",signal:AbortSignal.timeout(11e4),headers:{"Content-Type":a,"Content-Length":String(r)},body:_.toWeb(i),duplex:"half"})}catch(p){throw b(`storage could not be reached: ${p instanceof Error?p.message:String(p)}`)}finally{i.destroy()}if(await c.body?.cancel().catch(()=>{}),!c.ok)throw b(`storage answered ${c.status} to the share upload`)}n(W,"putBytes");async function Z(e,t){if(typeof t.path!="string"||!t.path)throw new s(400,"invalid_request","path is required","path");let r;if(t.expires_at!==void 0&&t.expires_at!==null){const i=typeof t.expires_at=="string"?Date.parse(t.expires_at):NaN;if(!Number.isFinite(i))throw new s(400,"invalid_request","expires_at must be an ISO 8601 time","expires_at");if(i<=Date.now())throw new s(400,"invalid_request","expires_at must be in the future","expires_at");r=new Date(i).toISOString()}const a=C(e,t.path);try{if(!k(e.resolved,f)&&!y(A(e.app).root,a.path))throw new s(403,"scope_missing",`missing scope ${f}: without it only files in the app's own space can be shared`,void 0,void 0,f);if(a.size>D)throw new s(400,"invalid_request","file exceeds 100 MiB","path");const i=$(a.path),c=q(i);if(c)throw new s(400,"invalid_request",`file name cannot be shared: ${c}`,"path");const p=E(a.path),h=w(),o=await h.createShare({name:i,media_type:p,size:a.size,...r?{expires_at:r}:{}});try{await W(o.upload_link,a.fd,a.size,p)}catch(S){throw await h.deleteShare(o.share_id).catch(()=>{}),S}const l=o.expires_at??r??null;return T({share_id:o.share_id,source_space:M(a.path),source_path:a.path,storage_key:`${h.runtimeId}/shares/${o.share_id}/${i}`,url:o.url,created_by:e.app,created_at:new Date().toISOString(),expires_at:l}),{share_id:o.share_id,url:o.url,expires_at:l}}finally{x(a.fd)}}n(Z,"createShare");function j(e){return{share_id:e.share_id,url:e.url,source_path:e.source_path,created_by:e.created_by,created_at:e.created_at,expires_at:e.expires_at,status:e.status}}n(j,"view");function ee(e){return{shares:B(e).map(j)}}n(ee,"listOwnShares");async function te(e,t){const r=R(t);if(!r||r.created_by!==e)throw new s(404,"not_found","share not found");if(F(t),!r.object_deleted_at)try{await w().deleteShare(t),N(t)}catch(a){if(!(a instanceof s&&a.code==="storage_unavailable"))throw a}return{share_id:t,status:"off"}}n(te,"deleteOwnShare");export{f as SHARE_SCOPE,Z as createShare,te as deleteOwnShare,ee as listOwnShares};
+var g=Object.defineProperty;var n=(e,t)=>g(e,"name",{value:t,configurable:!0});import{closeSync as x,read as v}from"node:fs";import{promisify as O}from"node:util";import{basename as $,relative as u,sep as d}from"node:path";import{Readable as _}from"node:stream";import{appsRoot as m,appSpace as A}from"../layout.js";import{RunError as s}from"../runs/operations.js";import{scopeAllowed as k}from"../scopes.js";import{invalidStorageName as q,storageClient as w,UPLOAD_MAX_BYTES as D}from"./client.js";import{contentTypeFor as E,openCallerFile as C}from"./download.js";import{getShare as R,insertShare as T,listShares as B,markShareObjectDeleted as N,turnShareOff as F}from"./tables.js";const f="crtr:files:share";function y(e,t){const a=u(e,t);return a===""||a!==".."&&!a.startsWith(`..${d}`)&&!a.startsWith(d)}n(y,"contains");function M(e){if(y(m(),e)){const t=u(m(),e).split(d)[0];if(t)return`app:${t}`}return"user"}n(M,"spaceOf");const b=n(e=>new s(503,"storage_unavailable",e,void 0,void 0,void 0,!0),"unavailable"),P=O(v);async function*U(e,t){let a=0;for(;a<t;){const r=Buffer.allocUnsafe(Math.min(1048576,t-a)),{bytesRead:i}=await P(e,r,0,r.length,a);if(i===0)throw new Error("shared file shrank while it was being copied");a+=i,yield r.subarray(0,i)}}n(U,"chunks");async function W(e,t,a,r){const i=_.from(U(t,a));let c;try{c=await fetch(e,{method:"PUT",signal:AbortSignal.timeout(11e4),headers:{"Content-Type":r,"Content-Length":String(a)},body:_.toWeb(i),duplex:"half"})}catch(p){throw b(`storage could not be reached: ${p instanceof Error?p.message:String(p)}`)}finally{i.destroy()}if(await c.body?.cancel().catch(()=>{}),!c.ok)throw b(`storage answered ${c.status} to the share upload`)}n(W,"putBytes");async function Z(e,t){if(typeof t.path!="string"||!t.path)throw new s(400,"invalid_request","path is required","path");let a;if(t.expires_at!==void 0&&t.expires_at!==null){const i=typeof t.expires_at=="string"?Date.parse(t.expires_at):NaN;if(!Number.isFinite(i))throw new s(400,"invalid_request","expires_at must be an ISO 8601 time","expires_at");if(i<=Date.now())throw new s(400,"invalid_request","expires_at must be in the future","expires_at");a=new Date(i).toISOString()}const r=C(e,t.path);try{if(!k(e.resolved,f)&&!y(A(e.app).root,r.path))throw new s(403,"scope_missing",`missing scope ${f}: without it only files in the app's own space can be shared`,void 0,void 0,f);if(r.size>D)throw new s(400,"invalid_request","file exceeds 100 MiB","path");const i=$(r.path),c=q(i);if(c)throw new s(400,"invalid_request",`file name cannot be shared: ${c}`,"path");const p=E(r.path),h=w(),o=await h.createShare({name:i,media_type:p,size:r.size,...a?{expires_at:a}:{}});try{await W(o.upload_link,r.fd,r.size,p)}catch(S){throw await h.deleteShare(o.share_id).catch(()=>{}),S}const l=o.expires_at??a??null;return await T({share_id:o.share_id,source_space:M(r.path),source_path:r.path,storage_key:`${h.runtimeId}/shares/${o.share_id}/${i}`,url:o.url,created_by:e.app,created_at:new Date().toISOString(),expires_at:l}),{share_id:o.share_id,url:o.url,expires_at:l}}finally{x(r.fd)}}n(Z,"createShare");function j(e){return{share_id:e.share_id,url:e.url,source_path:e.source_path,created_by:e.created_by,created_at:e.created_at,expires_at:e.expires_at,status:e.status}}n(j,"view");async function ee(e){return{shares:(await B(e)).map(j)}}n(ee,"listOwnShares");async function te(e,t){const a=await R(t);if(!a||a.created_by!==e)throw new s(404,"not_found","share not found");if(await F(t),!a.object_deleted_at)try{await w().deleteShare(t),await N(t)}catch(r){if(!(r instanceof s&&r.code==="storage_unavailable"))throw r}return{share_id:t,status:"off"}}n(te,"deleteOwnShare");export{f as SHARE_SCOPE,Z as createShare,te as deleteOwnShare,ee as listOwnShares};

package/dist/core/storage/tables.d.ts

@@ -1,4 +1,4 @@
-import type { DatabaseSync } from 'node:sqlite';
+import { type CanvasDb } from '../canvas/db.js';
 /** Row helpers for the v60 file-transfer tables. Each takes an optional handle
  *  so a caller inside `withCanvasWrite` passes its transaction. */
 export interface UploadRow {
@@ -27,37 +27,37 @@ export interface ShareRow {
     status: 'on' | 'off';
     object_deleted_at: string | null;
 }
-export declare function insertUpload(row: Omit<UploadRow, 'delete_pending_since'>, db?: DatabaseSync): void;
-export declare function getUpload(uploadId: string, db?: DatabaseSync): UploadRow | null;
-export declare function deleteUploadRow(uploadId: string, db?: DatabaseSync): void;
+export declare function insertUpload(row: Omit<UploadRow, 'delete_pending_since'>, db?: CanvasDb): Promise<void>;
+export declare function getUpload(uploadId: string, db?: CanvasDb): Promise<UploadRow | null>;
+export declare function deleteUploadRow(uploadId: string, db?: CanvasDb): Promise<void>;
 /** Uploads the runtime owes storage a delete for, oldest first. */
-export declare function pendingUploadDeletes(db?: DatabaseSync): UploadRow[];
+export declare function pendingUploadDeletes(db?: CanvasDb): Promise<UploadRow[]>;
 /** Mark uploads for deletion (idempotent: keeps the first mark). */
-export declare function markUploadsDeletePending(uploadIds: readonly string[], db?: DatabaseSync, at?: string): void;
-export declare function insertUploadUses(uses: readonly UploadUseRow[], db?: DatabaseSync): void;
+export declare function markUploadsDeletePending(uploadIds: readonly string[], db?: CanvasDb, at?: string): Promise<void>;
+export declare function insertUploadUses(uses: readonly UploadUseRow[], db?: CanvasDb): Promise<void>;
 /** Remove one recorded use (a file result undone after it was recorded). */
-export declare function deleteUploadUse(use: UploadUseRow, db?: DatabaseSync): void;
+export declare function deleteUploadUse(use: UploadUseRow, db?: CanvasDb): Promise<void>;
 /** Record the size storage actually holds for an upload created with `max_size`. */
-export declare function setUploadSize(uploadId: string, size: number, db?: DatabaseSync): void;
+export declare function setUploadSize(uploadId: string, size: number, db?: CanvasDb): Promise<void>;
 /** The use recorded at `path`, if any. */
-export declare function uploadUseAt(path: string, db?: DatabaseSync): UploadUseRow | null;
+export declare function uploadUseAt(path: string, db?: CanvasDb): Promise<UploadUseRow | null>;
 /** Delete a run's uses and mark each of its uploads that no other run uses for
  *  deletion. Returns the upload ids newly owed a storage delete. */
-export declare function releaseRunUploads(runIds: readonly string[], db?: DatabaseSync): string[];
+export declare function releaseRunUploads(runIds: readonly string[], db?: CanvasDb): Promise<string[]>;
 /** Uploads never used 24 h after creation (the tick marks them for deletion). */
-export declare function staleUnusedUploads(before: string, db?: DatabaseSync): string[];
-export declare function insertShare(row: Omit<ShareRow, 'status' | 'object_deleted_at'>, db?: DatabaseSync): void;
-export declare function getShare(shareId: string, db?: DatabaseSync): ShareRow | null;
+export declare function staleUnusedUploads(before: string, db?: CanvasDb): Promise<string[]>;
+export declare function insertShare(row: Omit<ShareRow, 'status' | 'object_deleted_at'>, db?: CanvasDb): Promise<void>;
+export declare function getShare(shareId: string, db?: CanvasDb): Promise<ShareRow | null>;
 /** Shares `created_by` owns; `null` (the person) lists every share. */
-export declare function listShares(createdBy: string | null, db?: DatabaseSync): ShareRow[];
-export declare function turnShareOff(shareId: string, db?: DatabaseSync): void;
+export declare function listShares(createdBy: string | null, db?: CanvasDb): Promise<ShareRow[]>;
+export declare function turnShareOff(shareId: string, db?: CanvasDb): Promise<void>;
 /** Turn every share `created_by` owns off; returns their ids. */
-export declare function turnSharesOffFor(createdBy: string, db?: DatabaseSync): string[];
+export declare function turnSharesOffFor(createdBy: string, db?: CanvasDb): Promise<string[]>;
 /** Shares `on` whose `expires_at` has passed turn `off`; returns their ids. */
-export declare function expireShares(at?: string, db?: DatabaseSync): string[];
+export declare function expireShares(at?: string, db?: CanvasDb): Promise<string[]>;
 /** Shares `off` whose stored object storage has not confirmed deleted. */
-export declare function sharesOwingObjectDelete(db?: DatabaseSync): ShareRow[];
-export declare function markShareObjectDeleted(shareId: string, db?: DatabaseSync, at?: string): void;
+export declare function sharesOwingObjectDelete(db?: CanvasDb): Promise<ShareRow[]>;
+export declare function markShareObjectDeleted(shareId: string, db?: CanvasDb, at?: string): Promise<void>;
 /** Mark every upload `grantee` created for deletion (app removal); returns the
  *  ids newly marked. */
-export declare function markGranteeUploadsDeletePending(grantee: string, db?: DatabaseSync, at?: string): string[];
+export declare function markGranteeUploadsDeletePending(grantee: string, db?: CanvasDb, at?: string): Promise<string[]>;

package/dist/core/storage/tables.js

@@ -1,3 +1,3 @@
-var l=Object.defineProperty;var a=(e,t)=>l(e,"name",{value:t,configurable:!0});import{prepared as d}from"../sqlite-statements.js";import{openDb as _}from"../canvas/db.js";const s=a(e=>e??_(),"handle"),p=a(()=>new Date().toISOString(),"now");function T(e,t){d(s(t),"INSERT INTO uploads (upload_id, grantee, name, media_type, size, created_at, delete_pending_since) VALUES (?, ?, ?, ?, ?, ?, NULL)").run(e.upload_id,e.grantee,e.name,e.media_type,e.size,e.created_at)}a(T,"insertUpload");function f(e,t){return d(s(t),"SELECT * FROM uploads WHERE upload_id = ?").get(e)??null}a(f,"getUpload");function L(e,t){d(s(t),"DELETE FROM uploads WHERE upload_id = ?").run(e)}a(L,"deleteUploadRow");function O(e){return d(s(e),"SELECT * FROM uploads WHERE delete_pending_since IS NOT NULL ORDER BY delete_pending_since, upload_id").all()}a(O,"pendingUploadDeletes");function i(e,t,n=p()){const r=d(s(t),"UPDATE uploads SET delete_pending_since = COALESCE(delete_pending_since, ?) WHERE upload_id = ?");for(const o of e)r.run(n,o)}a(i,"markUploadsDeletePending");function D(e,t){const n=d(s(t),"INSERT INTO upload_uses (upload_id, run_id, path) VALUES (?, ?, ?)");for(const r of e)n.run(r.upload_id,r.run_id,r.path)}a(D,"insertUploadUses");function x(e,t){d(s(t),"DELETE FROM upload_uses WHERE upload_id = ? AND run_id = ? AND path = ?").run(e.upload_id,e.run_id,e.path)}a(x,"deleteUploadUse");function U(e,t,n){d(s(n),"UPDATE uploads SET size = ? WHERE upload_id = ?").run(t,e)}a(U,"setUploadSize");function N(e,t){return d(s(t),"SELECT upload_id, run_id, path FROM upload_uses WHERE path = ? ORDER BY run_id LIMIT 1").get(e)??null}a(N,"uploadUseAt");function g(e,t){const n=s(t);if(!e.length)return[];const r=e.map(()=>"?").join(","),o=n.prepare(`SELECT DISTINCT upload_id FROM upload_uses WHERE run_id IN (${r})`).all(...e).map(E=>E.upload_id);n.prepare(`DELETE FROM upload_uses WHERE run_id IN (${r})`).run(...e);const u=o.filter(E=>!d(n,"SELECT 1 FROM upload_uses WHERE upload_id = ? LIMIT 1").get(E));return i(u,n),u}a(g,"releaseRunUploads");function A(e,t){return d(s(t),`SELECT upload_id FROM uploads u WHERE delete_pending_since IS NULL AND created_at <= ?
-    AND NOT EXISTS (SELECT 1 FROM upload_uses x WHERE x.upload_id = u.upload_id)`).all(e).map(n=>n.upload_id)}a(A,"staleUnusedUploads");function C(e,t){d(s(t),`INSERT INTO shares (share_id, source_space, source_path, storage_key, url, created_by, created_at, expires_at, status, object_deleted_at)
-    VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'on', NULL)`).run(e.share_id,e.source_space,e.source_path,e.storage_key,e.url,e.created_by,e.created_at,e.expires_at)}a(C,"insertShare");function H(e,t){return d(s(t),"SELECT * FROM shares WHERE share_id = ?").get(e)??null}a(H,"getShare");function W(e,t){return e===null?d(s(t),"SELECT * FROM shares ORDER BY created_at DESC, share_id").all():d(s(t),"SELECT * FROM shares WHERE created_by = ? ORDER BY created_at DESC, share_id").all(e)}a(W,"listShares");function c(e,t){d(s(t),"UPDATE shares SET status = 'off' WHERE share_id = ?").run(e)}a(c,"turnShareOff");function m(e,t){const n=s(t),r=d(n,"SELECT share_id FROM shares WHERE created_by = ? AND status = 'on'").all(e).map(o=>o.share_id);return d(n,"UPDATE shares SET status = 'off' WHERE created_by = ? AND status = 'on'").run(e),r}a(m,"turnSharesOffFor");function M(e=p(),t){const n=s(t),r=d(n,"SELECT share_id FROM shares WHERE status = 'on' AND expires_at IS NOT NULL AND expires_at <= ?").all(e).map(o=>o.share_id);for(const o of r)c(o,n);return r}a(M,"expireShares");function F(e){return d(s(e),"SELECT * FROM shares WHERE status = 'off' AND object_deleted_at IS NULL ORDER BY created_at, share_id").all()}a(F,"sharesOwingObjectDelete");function I(e,t,n=p()){d(s(t),"UPDATE shares SET object_deleted_at = COALESCE(object_deleted_at, ?) WHERE share_id = ?").run(n,e)}a(I,"markShareObjectDeleted");function b(e,t,n=p()){const r=s(t),o=d(r,"SELECT upload_id FROM uploads WHERE grantee = ? AND delete_pending_since IS NULL").all(e).map(u=>u.upload_id);return i(o,r,n),o}a(b,"markGranteeUploadsDeletePending");export{L as deleteUploadRow,x as deleteUploadUse,M as expireShares,H as getShare,f as getUpload,C as insertShare,T as insertUpload,D as insertUploadUses,W as listShares,b as markGranteeUploadsDeletePending,I as markShareObjectDeleted,i as markUploadsDeletePending,O as pendingUploadDeletes,g as releaseRunUploads,U as setUploadSize,F as sharesOwingObjectDelete,A as staleUnusedUploads,c as turnShareOff,m as turnSharesOffFor,N as uploadUseAt};
+var E=Object.defineProperty;var t=(a,e)=>E(a,"name",{value:e,configurable:!0});import{openDb as l}from"../canvas/db.js";import{filterAsync as _}from"../async-array.js";const n=t(async a=>a??await l(),"handle"),d=t(()=>new Date().toISOString(),"now");async function w(a,e){await(await n(e)).prepare("INSERT INTO uploads (upload_id, grantee, name, media_type, size, created_at, delete_pending_since) VALUES (?, ?, ?, ?, ?, ?, NULL)").run(a.upload_id,a.grantee,a.name,a.media_type,a.size,a.created_at)}t(w,"insertUpload");async function T(a,e){return await(await n(e)).prepare("SELECT * FROM uploads WHERE upload_id = ?").get(a)??null}t(T,"getUpload");async function f(a,e){await(await n(e)).prepare("DELETE FROM uploads WHERE upload_id = ?").run(a)}t(f,"deleteUploadRow");async function L(a){return await(await n(a)).prepare("SELECT * FROM uploads WHERE delete_pending_since IS NOT NULL ORDER BY delete_pending_since, upload_id").all()}t(L,"pendingUploadDeletes");async function u(a,e,r=d()){const i=(await n(e)).prepare("UPDATE uploads SET delete_pending_since = COALESCE(delete_pending_since, ?) WHERE upload_id = ?");for(const s of a)await i.run(r,s)}t(u,"markUploadsDeletePending");async function O(a,e){const r=(await n(e)).prepare("INSERT INTO upload_uses (upload_id, run_id, path) VALUES (?, ?, ?)");for(const i of a)await r.run(i.upload_id,i.run_id,i.path)}t(O,"insertUploadUses");async function D(a,e){await(await n(e)).prepare("DELETE FROM upload_uses WHERE upload_id = ? AND run_id = ? AND path = ?").run(a.upload_id,a.run_id,a.path)}t(D,"deleteUploadUse");async function U(a,e,r){await(await n(r)).prepare("UPDATE uploads SET size = ? WHERE upload_id = ?").run(e,a)}t(U,"setUploadSize");async function x(a,e){return await(await n(e)).prepare("SELECT upload_id, run_id, path FROM upload_uses WHERE path = ? ORDER BY run_id LIMIT 1").get(a)??null}t(x,"uploadUseAt");async function y(a,e){const r=await n(e);if(!a.length)return[];const i=a.map(()=>"?").join(","),s=(await r.prepareUncached(`SELECT DISTINCT upload_id FROM upload_uses WHERE run_id IN (${i})`).all(...a)).map(o=>o.upload_id);await r.prepareUncached(`DELETE FROM upload_uses WHERE run_id IN (${i})`).run(...a);const p=await _(s,async o=>!await r.prepare("SELECT 1 FROM upload_uses WHERE upload_id = ? LIMIT 1").get(o));return await u(p,r),p}t(y,"releaseRunUploads");async function N(a,e){return(await(await n(e)).prepare(`SELECT upload_id FROM uploads u WHERE delete_pending_since IS NULL AND created_at <= ?
+    AND NOT EXISTS (SELECT 1 FROM upload_uses x WHERE x.upload_id = u.upload_id)`).all(a)).map(r=>r.upload_id)}t(N,"staleUnusedUploads");async function g(a,e){await(await n(e)).prepare(`INSERT INTO shares (share_id, source_space, source_path, storage_key, url, created_by, created_at, expires_at, status, object_deleted_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?, 'on', NULL)`).run(a.share_id,a.source_space,a.source_path,a.storage_key,a.url,a.created_by,a.created_at,a.expires_at)}t(g,"insertShare");async function A(a,e){return await(await n(e)).prepare("SELECT * FROM shares WHERE share_id = ?").get(a)??null}t(A,"getShare");async function C(a,e){return a===null?await(await n(e)).prepare("SELECT * FROM shares ORDER BY created_at DESC, share_id").all():await(await n(e)).prepare("SELECT * FROM shares WHERE created_by = ? ORDER BY created_at DESC, share_id").all(a)}t(C,"listShares");async function c(a,e){await(await n(e)).prepare("UPDATE shares SET status = 'off' WHERE share_id = ?").run(a)}t(c,"turnShareOff");async function H(a,e){const r=await n(e),i=(await r.prepare("SELECT share_id FROM shares WHERE created_by = ? AND status = 'on'").all(a)).map(s=>s.share_id);return await r.prepare("UPDATE shares SET status = 'off' WHERE created_by = ? AND status = 'on'").run(a),i}t(H,"turnSharesOffFor");async function W(a=d(),e){const r=await n(e),i=(await r.prepare("SELECT share_id FROM shares WHERE status = 'on' AND expires_at IS NOT NULL AND expires_at <= ?").all(a)).map(s=>s.share_id);for(const s of i)await c(s,r);return i}t(W,"expireShares");async function m(a){return await(await n(a)).prepare("SELECT * FROM shares WHERE status = 'off' AND object_deleted_at IS NULL ORDER BY created_at, share_id").all()}t(m,"sharesOwingObjectDelete");async function M(a,e,r=d()){await(await n(e)).prepare("UPDATE shares SET object_deleted_at = COALESCE(object_deleted_at, ?) WHERE share_id = ?").run(r,a)}t(M,"markShareObjectDeleted");async function F(a,e,r=d()){const i=await n(e),s=(await i.prepare("SELECT upload_id FROM uploads WHERE grantee = ? AND delete_pending_since IS NULL").all(a)).map(p=>p.upload_id);return await u(s,i,r),s}t(F,"markGranteeUploadsDeletePending");export{f as deleteUploadRow,D as deleteUploadUse,W as expireShares,A as getShare,T as getUpload,g as insertShare,w as insertUpload,O as insertUploadUses,C as listShares,F as markGranteeUploadsDeletePending,M as markShareObjectDeleted,u as markUploadsDeletePending,L as pendingUploadDeletes,y as releaseRunUploads,U as setUploadSize,m as sharesOwingObjectDelete,N as staleUnusedUploads,c as turnShareOff,H as turnSharesOffFor,x as uploadUseAt};

package/dist/core/substrate/delivery/corpus.d.ts

@@ -1,12 +1,9 @@
-/** The documents delivery may consider for one reader: rule rows of the
- *  owners in the reader's view, joined to their objects and documents, and
- *  filtered by `canRead`. */
-import type { DatabaseSync } from 'node:sqlite';
 import type { ObjectRow, Reader, RuleOn } from '../../graph/types.js';
 import type { ProfileManifest } from '../../../types.js';
 import { type NodeConfigSubject } from '../subject.js';
 import type { Rung } from '../schema.js';
 import type { DeliveryDoc } from './types.js';
+import type { CanvasDb } from '../../canvas/db.js';
 export declare function ownerHandle(owner: ObjectRow): string;
 /** The key that names one owner exactly in `delivery_limits`: `<type>:<handle>`,
  *  the typed form `resolveName` accepts (`repo:crouter`, `person:user`, `app:terminal`). */
@@ -18,10 +15,10 @@ export declare function typedLimitKey(owner: ObjectRow): string;
 export declare function deliveryLimitFor(manifest: ProfileManifest | null, owner: ObjectRow, reader?: Reader): Rung;
 /** Documents with a rule on one of `on` whose owner is in the reader's view,
  *  in view order. At `boot` a node's own documents come in even without a boot rule. */
-export declare function loadCorpus(db: DatabaseSync, reader: Reader, on: RuleOn[]): DeliveryDoc[];
+export declare function loadCorpus(db: CanvasDb, reader: Reader, on: RuleOn[]): Promise<DeliveryDoc[]>;
 /** One document as a delivery document for `reader`, with all its rules (an explicit read). */
-export declare function deliveryDocOf(db: DatabaseSync, reader: Reader, doc: ObjectRow): DeliveryDoc;
+export declare function deliveryDocOf(db: CanvasDb, reader: Reader, doc: ObjectRow): Promise<DeliveryDoc>;
 /** Every listed document of one owner the reader can read, for prefix listings. */
-export declare function listingCorpus(db: DatabaseSync, reader: Reader, owner: ObjectRow): DeliveryDoc[];
+export declare function listingCorpus(db: CanvasDb, reader: Reader, owner: ObjectRow): Promise<DeliveryDoc[]>;
 /** The node reader's gate subject, with `repo` from the reader's eligible repos (cwd's, then its profile projects'). */
-export declare function nodeSubject(_db: DatabaseSync, reader: Reader): NodeConfigSubject;
+export declare function nodeSubject(_db: CanvasDb, reader: Reader): Promise<NodeConfigSubject>;

package/dist/core/substrate/delivery/corpus.js

@@ -1,3 +1,3 @@
-var O=Object.defineProperty;var s=(o,e)=>O(o,"name",{value:e,configurable:!0});import{prepared as R}from"../../sqlite-statements.js";import{canRead as $}from"../../graph/access.js";import{bodyOf as D}from"../../graph/bodies.js";import{resolveName as k,viewOf as m}from"../../graph/names.js";import{rulesForOwners as S,rulesOf as N}from"../../graph/rules.js";import{loadExactProfileManifest as M}from"../../profiles/manifest.js";import{assembleNodeSubject as L}from"../subject.js";function h(o){return o.type==="node"?o.id:o.name}s(h,"ownerHandle");function C(o){return`${o.type}:${h(o)}`}s(C,"typedLimitKey");function H(o,e,n){if(n?.class==="node"&&n.profile!==null&&n.profile.rowid===e.rowid)return"content";const t=o?.delivery_limits;return t?t[C(e)]??t[h(e)]??"content":"content"}s(H,"deliveryLimitFor");function E(o,e){if(e.class!=="node"||e.profile===null)return null;const n=R(o,"SELECT external_id FROM identities WHERE object = ? AND scheme = 'profile'").get(e.profile.rowid);if(!n)throw new Error(`profile object ${e.profile.id} has no profile identity`);return M(n.external_id).manifest}s(E,"readerManifest");function f(o,e,n){return o.prepare(`SELECT o.*, d.heads_key, d.unlisted, d.source_path FROM objects o JOIN documents d ON d.object = o.rowid
-    WHERE o.type = 'document' AND o.deleted_at IS NULL AND ${e} ORDER BY o.rowid`).all(...n)}s(f,"documentRows");function b(o,e){const n=e.heads_key.split(","),t=o.prepare(`SELECT body_hash FROM revisions WHERE document = ? AND rev_id IN (${n.map(()=>"?").join(",")})
-    ORDER BY number DESC LIMIT 1`).get(e.rowid,...n);if(!t)throw new Error(`document ${e.id} has no head revision ${e.heads_key}`);return t.body_hash}s(b,"headBodyHash");function y(o,e,n){const t=new Map;return{view:n,readable:s(i=>{let c=t.get(i.rowid);return c===void 0&&t.set(i.rowid,c=$(o,e,i)),c},"readable")}}s(y,"resolveContext");function j(o,e,n,t,i,c){const{view:l}=n,d=l.findIndex(x=>x.rowid===i.owner),u=d>=0?l[d]:R(o,"SELECT * FROM objects WHERE rowid = ?").get(i.owner),a=h(u),p=k(o,e,i.name,n),r=b(o,i),{heads_key:w,unlisted:_,source_path:v,...g}=i;return{object:g,owner:u,ownerHandle:a,viewRank:d>=0?d:l.length,ownNode:e.class==="node"&&i.owner===e.node.rowid,shipped:v!==null,kind:i.kind==="preference"?"preference":"knowledge",name:i.name,displayName:"object"in p&&p.object.rowid===i.rowid?i.name:`${a}/${i.name}`,preview:i.preview,unlisted:_!==0,headsKey:w,bodyHash:r,body:s(()=>D(r,v),"body"),rules:c,limit:H(t,u,e)}}s(j,"toDeliveryDoc");function J(o,e,n){const t=m(o,e),i=y(o,e,t),c=E(o,e),l=new Map;for(const r of S(o,n,t.map(w=>w.rowid)))l.set(r.object,[...l.get(r.object)??[],r]);const d=e.class==="node"&&n.includes("boot")?f(o,"o.owner = ?",[e.node.rowid]):[],u=[...new Set([...l.keys(),...d.map(r=>r.rowid)])],a=u.length===0?[]:f(o,`o.rowid IN (${u.map(()=>"?").join(",")})`,u),p=new Map(t.map((r,w)=>[r.rowid,w]));return a.filter(i.readable).sort((r,w)=>p.get(r.owner)-p.get(w.owner)||r.rowid-w.rowid).map(r=>j(o,e,i,c,r,l.get(r.rowid)??[]))}s(J,"loadCorpus");function P(o,e,n){const t=f(o,"o.rowid = ?",[n.rowid])[0];if(!t)throw new Error(`document ${n.id} has no documents row`);return j(o,e,y(o,e,m(o,e)),E(o,e),t,N(o,t))}s(P,"deliveryDocOf");function U(o,e,n){const t=y(o,e,m(o,e)),i=E(o,e);return f(o,"o.owner = ? AND d.unlisted = 0",[n.rowid]).filter(t.readable).map(c=>j(o,e,t,i,c,N(o,c)))}s(U,"listingCorpus");function q(o,e){if(e.class!=="node")throw new Error(`nodeSubject needs a node reader, got ${e.class}`);const n=L(e.node.id,[...e.repos,...e.projectRepos]);if(n===null)throw new Error(`no node ${e.node.id}`);return n}s(q,"nodeSubject");export{P as deliveryDocOf,H as deliveryLimitFor,U as listingCorpus,J as loadCorpus,q as nodeSubject,h as ownerHandle,C as typedLimitKey};
+var $=Object.defineProperty;var r=(n,e)=>$(n,"name",{value:e,configurable:!0});import{canRead as D}from"../../graph/access.js";import{bodyOf as k}from"../../graph/bodies.js";import{resolveName as M,viewOf as m}from"../../graph/names.js";import{rulesForOwners as S,rulesOf as R}from"../../graph/rules.js";import{loadExactProfileManifest as L}from"../../profiles/manifest.js";import{assembleNodeSubject as C}from"../subject.js";import{filterAsync as N,mapAsync as _}from"../../async-array.js";function y(n){return n.type==="node"?n.id:n.name}r(y,"ownerHandle");function H(n){return`${n.type}:${y(n)}`}r(H,"typedLimitKey");function b(n,e,t){if(t?.class==="node"&&t.profile!==null&&t.profile.rowid===e.rowid)return"content";const o=n?.delivery_limits;return o?o[H(e)]??o[y(e)]??"content":"content"}r(b,"deliveryLimitFor");async function h(n,e){if(e.class!=="node"||e.profile===null)return null;const t=await n.prepare("SELECT external_id FROM identities WHERE object = ? AND scheme = 'profile'").get(e.profile.rowid);if(!t)throw new Error(`profile object ${e.profile.id} has no profile identity`);return L(t.external_id).manifest}r(h,"readerManifest");async function f(n,e,t){return await n.prepareUncached(`SELECT o.*, d.heads_key, d.unlisted, d.source_path FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.deleted_at IS NULL AND ${e} ORDER BY o.rowid`).all(...t)}r(f,"documentRows");async function A(n,e){const t=e.heads_key.split(","),o=await n.prepareUncached(`SELECT body_hash FROM revisions WHERE document = ? AND rev_id IN (${t.map(()=>"?").join(",")})
+    ORDER BY number DESC LIMIT 1`).get(e.rowid,...t);if(!o)throw new Error(`document ${e.id} has no head revision ${e.heads_key}`);return o.body_hash}r(A,"headBodyHash");function E(n,e,t){const o=new Map;return{view:t,readable:r(async i=>{let s=o.get(i.rowid);return s===void 0&&o.set(i.rowid,s=await D(n,e,i)),s},"readable")}}r(E,"resolveContext");async function j(n,e,t,o,i,s){const{view:w}=t,u=w.findIndex(O=>O.rowid===i.owner),l=u>=0?w[u]:await n.prepare("SELECT * FROM objects WHERE rowid = ?").get(i.owner),p=y(l),d=await M(n,e,i.name,t),a=await A(n,i),{heads_key:c,unlisted:g,source_path:v,...x}=i;return{object:x,owner:l,ownerHandle:p,viewRank:u>=0?u:w.length,ownNode:e.class==="node"&&i.owner===e.node.rowid,shipped:v!==null,kind:i.kind==="preference"?"preference":"knowledge",name:i.name,displayName:"object"in d&&d.object.rowid===i.rowid?i.name:`${p}/${i.name}`,preview:i.preview,unlisted:g!==0,headsKey:c,bodyHash:a,body:r(()=>k(a,v),"body"),rules:s,limit:b(o,l,e)}}r(j,"toDeliveryDoc");async function J(n,e,t){const o=await m(n,e),i=E(n,e,o),s=await h(n,e),w=new Map;for(const a of await S(n,t,o.map(c=>c.rowid)))w.set(a.object,[...w.get(a.object)??[],a]);const u=e.class==="node"&&t.includes("boot")?await f(n,"o.owner = ?",[e.node.rowid]):[],l=[...new Set([...w.keys(),...u.map(a=>a.rowid)])],p=l.length===0?[]:await f(n,`o.rowid IN (${l.map(()=>"?").join(",")})`,l),d=new Map(o.map((a,c)=>[a.rowid,c]));return await _((await N(p,i.readable)).sort((a,c)=>d.get(a.owner)-d.get(c.owner)||a.rowid-c.rowid),async a=>await j(n,e,i,s,a,w.get(a.rowid)??[]))}r(J,"loadCorpus");async function P(n,e,t){const o=(await f(n,"o.rowid = ?",[t.rowid]))[0];if(!o)throw new Error(`document ${t.id} has no documents row`);return await j(n,e,E(n,e,await m(n,e)),await h(n,e),o,await R(n,o))}r(P,"deliveryDocOf");async function q(n,e,t){const o=E(n,e,await m(n,e)),i=await h(n,e);return await _(await N(await f(n,"o.owner = ? AND d.unlisted = 0",[t.rowid]),o.readable),async s=>await j(n,e,o,i,s,await R(n,s)))}r(q,"listingCorpus");async function z(n,e){if(e.class!=="node")throw new Error(`nodeSubject needs a node reader, got ${e.class}`);const t=await C(e.node.id,[...e.repos,...e.projectRepos]);if(t===null)throw new Error(`no node ${e.node.id}`);return t}r(z,"nodeSubject");export{P as deliveryDocOf,b as deliveryLimitFor,q as listingCorpus,J as loadCorpus,z as nodeSubject,y as ownerHandle,H as typedLimitKey};

package/dist/core/substrate/delivery/deliver.d.ts

@@ -1,9 +1,3 @@
-/** The one-phase delivery transaction behind `POST /v1/nodes/:id/delivery`:
- *  load the node's ledger, render the activity, record a `deliver` watch and a
- *  `read` event for every document delivered at content, save the ledger. The
- *  caller runs it inside one `withCanvasWrite`, so exposures, watches and
- *  events land together or not at all. */
-import type { DatabaseSync } from 'node:sqlite';
 import { type ReposFn } from '../../graph/reader.js';
 import type { ObjectRow, Reader } from '../../graph/types.js';
 import type { DeliveryActivity, DeliveryCommandDTO } from '../../../api/dto/delivery.js';
@@ -11,6 +5,7 @@ import type { RefMeta } from '../../runtime/broker-protocol.js';
 import type { NodeConfigSubject } from '../subject-fields.js';
 import { type DeliveryPlan } from './plan.js';
 import { type DeliveredDoc } from './render-event.js';
+import type { CanvasDb } from '../../canvas/db.js';
 export interface DeliveryRequestInput {
     activity: DeliveryActivity;
     subject?: string;
@@ -27,12 +22,12 @@ export interface DeliveryResult {
 }
 /** Record the content deliveries: a `deliver` watch at the delivered heads, a `read` event each,
  *  and a `loaded` row in the analytics memory log (a full body that entered the context). */
-export declare function recordContentDelivery(db: DatabaseSync, reader: Reader, delivered: readonly DeliveredDoc[], reposFn?: ReposFn): void;
+export declare function recordContentDelivery(db: CanvasDb, reader: Reader, delivered: readonly DeliveredDoc[], reposFn?: ReposFn): Promise<void>;
 /** Activities only a dry run performs: a live node's workspace-open arrives
  *  inside its boot, and a document read goes through the read route. */
 export declare const DRY_RUN_ONLY: readonly DeliveryActivity[];
 /** One delivery for a live node. Call inside `withCanvasWrite`. */
-export declare function deliver(db: DatabaseSync, reader: Reader, req: DeliveryRequestInput): DeliveryResult;
+export declare function deliver(db: CanvasDb, reader: Reader, req: DeliveryRequestInput): Promise<DeliveryResult>;
 /** A node that does not exist, described by what delivery reads of one:
  *  the directory it would work in, its profile and app, and the fields rule
  *  `if` conditions see. Every field but `cwd` has a default. */
@@ -50,27 +45,27 @@ export interface HypotheticalNode {
 }
 /** Fill a hypothetical node's unset fields from a live node, so `--node` with
  *  `--cwd` or `--profile` starts from that node and dials away from it. */
-export declare function hypotheticalFrom(nodeId: string, h: Partial<HypotheticalNode>): HypotheticalNode;
+export declare function hypotheticalFrom(nodeId: string, h: Partial<HypotheticalNode>): Promise<HypotheticalNode>;
 /** The reader and gate subject of a node that does not exist. Resolving its
  *  app, profile and repos may create their owner objects, so call it only
  *  inside a transaction that rolls back. */
-export declare function hypotheticalReader(db: DatabaseSync, h: HypotheticalNode): {
+export declare function hypotheticalReader(db: CanvasDb, h: HypotheticalNode): Promise<{
     reader: Extract<Reader, {
         class: 'node';
     }>;
     subject: NodeConfigSubject;
-};
+}>;
 /** A dry run for inspection: render against an empty ledger and record nothing.
  *  `subjectOverride` replaces fields of the gate subject — the node's own, or
  *  `baseSubject` for a hypothetical reader. */
-export declare function inspect(db: DatabaseSync, reader: Reader, req: DeliveryRequestInput, subjectOverride?: Partial<NodeConfigSubject>, baseSubject?: NodeConfigSubject): {
+export declare function inspect(db: CanvasDb, reader: Reader, req: DeliveryRequestInput, subjectOverride?: Partial<NodeConfigSubject>, baseSubject?: NodeConfigSubject): Promise<{
     result: DeliveryResult;
     plan: DeliveryPlan | null;
-};
+}>;
 /** Watched documents with a revision created after `since` that the node did not author (D8). */
-export declare function changedWhileDone(db: DatabaseSync, node: ObjectRow, since: string): Array<{
+export declare function changedWhileDone(db: CanvasDb, node: ObjectRow, since: string): Promise<Array<{
     doc: ObjectRow;
     from: number | null;
     to: number;
     authors: string[];
-}>;
+}>>;

package/dist/core/substrate/delivery/deliver.js

@@ -1,6 +1,6 @@
-var L=Object.defineProperty;var a=(t,e)=>L(t,"name",{value:e,configurable:!0});import{prepared as v}from"../../sqlite-statements.js";import{dirname as F}from"node:path";import{clearLedger as $,demoteTranscript as M,freezePreferences as g,loadLedger as P,saveLedger as T}from"../../graph/exposures.js";import{recordWatch as H}from"../../graph/watches.js";import{publish as x}from"../../graph/events.js";import{viewOf as W}from"../../graph/names.js";import{checkoutsForCwd as y}from"../../graph/repo-sync/repos.js";import{liveLookups as Y,profileObject as U,viewRepos as B}from"../../graph/reader.js";import{ownerForGrantee as G}from"../../graph/objects.js";import{resolveName as J}from"../../graph/names.js";import{SCOPE_VOCABULARY as K}from"../../scopes.js";import{getNode as V}from"../../canvas/index.js";import{recordMemoryReadsIn as X}from"../../canvas/memory-reads.js";import{lookupProfile as z}from"../../profiles/manifest.js";import{getDefaultProfileId as Q}from"../../profiles/default-binding.js";import{effectiveScopes as Z,profileNameFor as q,scopeForCwd as ee}from"../subject-fields.js";import{spineDepth as te}from"../subject.js";import{appForNode as oe}from"../../canvas/node-agent-paths.js";import{interpolateNodePaths as ne}from"../../canvas/paths.js";import{readableProjectForScopes as re}from"../../spaces/permissions.js";import{ApiError as u}from"../../../api/errors.js";import{buildContextBearings as ie}from"../../runtime/bearings.js";import{deliveryDocOf as j,listingCorpus as se,loadCorpus as w,nodeSubject as N}from"./corpus.js";import{listingPrefixes as ce}from"./listings.js";import{planDelivery as de}from"./plan.js";import{renderEvent as O,renderExplicitRead as k}from"./render-event.js";import{renderConfigDelta as ae,renderKnowledge as le,renderPreferences as _,renderWorkspaceOpen as S}from"./render-boot.js";function f(t){if(t.class!=="node")throw new Error(`delivery needs a node reader, got ${t.class}`);return t}a(f,"nodeOf");const R=-1;function h(t){return t.node.rowid===R}a(h,"isHypothetical");function E(t,e){if(!h(e))return oe(e.node.id);const o=v(t,"SELECT external_id FROM identities WHERE object = ?").get(e.app.rowid);if(!o)throw new Error(`app object ${e.app.id} has no identity`);return o.external_id}a(E,"granteeOf");function pe(t,e,o,r=i=>y(t,i)){const i=f(e).node,d=new Set,n=new Date().toISOString(),s=[];for(const{doc:c,level:l}of o)l!=="content"||d.has(c.object.rowid)||(d.add(c.object.rowid),H(t,i,c.object,"deliver",{readHeadsKey:c.headsKey}),x(t,{event:"read",object:c.object,actor:i,attrs:{}},r),s.push({name:c.name,scope:c.ownerHandle,at:n,type:"loaded"}));h(f(e))||X(t,i.id,s)}a(pe,"recordContentDelivery");function C(t,e,o){const r=y(t,F(o)).filter(i=>!e.repos.some(d=>d.rowid===i.repo.rowid));return r.length===0?e:{...e,repos:[...e.repos,...r.map(i=>i.repo)],checkouts:[...e.checkouts,...r]}}a(C,"fileReadReader");function ue(t,e,o){const r=E(t,e);if(!(o.startsWith("/")&&(process.platform!=="linux"&&r==="app:terminal"||re(o,r,e.scopes??[],null))))throw new u(403,"scope_missing","read file is outside the run mounts")}a(ue,"assertReadableFile");function me(t){const e=f(t.reader),o=e.node,r=E(t.db,e),i=w(t.db,t.reader,["slash-command"]),d=i.map(n=>{const s=n.body();return{name:n.displayName,command_name:n.displayName,description:n.preview,canonical_body:s,execution_body:ne(s,o.id,r)}});return{docs:i,commands:d}}a(me,"slashCommands");function fe(t){if(t.shipped)return"builtin";switch(t.owner.type){case"node":return"node";case"repo":return"project";case"profile":return"profile";default:return"user"}}a(fe,"scopeOf");function we(t,e){const o=[],r=new Set;for(const i of W(t,e)){const d=se(t,e,i);for(const n of d){o.push({name:n.displayName,kind:n.kind,scope:fe(n),shortForm:n.preview,gatewayVisible:!n.shipped}),r.add(n.displayName);const s=n.displayName===n.name?"":`${n.ownerHandle}/`;for(const c of ce(d,n.name))r.add(`${s}${c}`)}}return{refs:o,names:[...r]}}a(we,"composerNames");function D(t,e){const o=f(t.reader),{db:r,ledger:i}=t,d=a(()=>{if(typeof e.subject!="string"||e.subject==="")throw new u(400,"usage",`delivery activity ${e.activity} requires a subject`);return e.subject},"requireSubject");switch(e.activity){case"boot":{if(e.inherited===!0){for(const[c,l]of i.objects)if(l.transcript===void 0)i.objects.delete(c);else{const{system:p,...m}=l;i.objects.set(c,m)}for(const[c,l]of i.listed)l.transcript===void 0?i.listed.delete(c):i.listed.set(c,{transcript:l.transcript});return i.preferenceSnapshot=null,{result:{content:"",inherited:!0},delivered:[]}}const n=h(o)?ve(t):ie(o.node.id,t),s=_({...t,channel:"system"});return g(i,s.content),{result:{content:n.content},delivered:[...n.delivered,...s.delivered]}}case"system-prompt":{if(i.preferenceSnapshot!==null)return{result:{content:i.preferenceSnapshot},delivered:[]};const n=_({...t,channel:"system"});return{result:{content:g(i,n.content)},delivered:n.delivered}}case"compact":{for(const n of w(r,o,["pre-command"]))M(i,n.object.rowid);return{result:{content:""},delivered:[]}}case"persona":{const n=ae(t);return{result:{content:n.content},delivered:n.delivered}}case"file-read":{const n=d();ue(r,o,n);const s=C(r,o,n),c={...t,reader:s},l=O(c,"file-read",{absoluteFile:n},w(r,s,["file-read"]));return{result:{content:l.content},delivered:l.delivered}}case"command":case"pre-command":{const n=O(t,e.activity,{command:d()});return{result:{content:n.content},delivered:n.delivered}}case"slash-command":{const{docs:n,commands:s}=me(t);if(e.subject===void 0||e.subject==="")return{result:{content:"",commands:s},delivered:[]};const c=n.findIndex(m=>m.displayName===e.subject||m.name===e.subject);if(c<0)throw new u(404,"not_found",`no slash command named ${e.subject}`);const l=n[c],p=k(t,l,!0);return{result:{content:"",execution_body:s[c].execution_body,blocks:p.attachments===""?[]:[p.attachments]},delivered:[{doc:l,level:"content"},...p.delivered]}}case"workspace-open":{const n=S(t);return{result:{content:n.content},delivered:n.delivered}}case"document-read":{const n=I(r,o,d()),s=k(t,j(r,o,n),!0);return{result:{content:s.attachments},delivered:s.delivered}}case"names":return{result:{content:"",...we(r,o)},delivered:[]};default:throw new u(400,"usage",`unknown delivery activity ${String(e.activity)}`)}}a(D,"render");function ve(t){const e=le(t),o=S(t);return{content:[e.content,o.content].filter(r=>r!=="").join(`
-`),delivered:[...e.delivered,...o.delivered]}}a(ve,"hypotheticalBearings");function I(t,e,o){const r=J(t,e,o);if("object"in r&&r.object.type==="document")return r.object;throw"ambiguous"in r?new u(409,"ambiguous",`${o} names ${r.ambiguous.length} documents; name one as <type>:<owner>/<name>`):new u(404,"not_found",`no document ${o} the reader can read`)}a(I,"readDocument");const ye=["workspace-open","document-read"];function Ve(t,e,o){if(ye.includes(o.activity))throw new u(400,"usage",`delivery activity ${o.activity} is available to a dry run only`);const r=f(e).node;o.activity==="boot"&&o.inherited!==!0&&$(t,r.rowid);const i=P(t,r.rowid),d={db:t,reader:e,subject:N(t,e),ledger:i,channel:"transcript"},{result:n,delivered:s}=D(d,o);return pe(t,e,s),T(t,i),n}a(Ve,"deliver");const he={boot:"boot","workspace-open":"workspace-open","file-read":"file-read","document-read":"document-read",command:"command","pre-command":"pre-command","slash-command":"slash-command"};function Xe(t,e){const o=V(t);if(o===null)throw new u(404,"not_found",`no node ${t}`);return{cwd:e.cwd??o.cwd,profile:e.profile!==void 0?e.profile:o.profile_id,grantee:e.grantee??o.grantee,kind:e.kind??o.kind,mode:e.mode??o.mode,lifecycle:e.lifecycle??o.lifecycle,hasManager:e.hasManager??(o.parent??null)!==null,depth:e.depth??te(t)}}a(Xe,"hypotheticalFrom");function be(t,e){if(t===null)return null;if(t===void 0||t==="")return Q(e);const o=z(t);if(o.kind!=="resolved"){const r=`no profile ${t}`;throw new u(404,"not_found",r,{error:"not_found",message:r,next:"List profile ids and names with `crtr profile list`."})}return o.entry.profileId}a(be,"resolveProfileId");function ze(t,e){const o=G(t,e.grantee??"app:terminal"),r=be(e.profile,e.cwd),i=B(e.cwd,r,p=>y(t,p),Y(t)),{repos:d}=i,n=e.mode??"base",c={class:"node",node:{rowid:R,id:"hypothetical",type:"node",kind:e.kind??"general",owner:o.rowid,privacy:"private",name:"hypothetical",preview:"",created_at:new Date(0).toISOString(),deleted_at:null},app:o,scopes:[...K],cwd:e.cwd,...i,profile:r===null?null:U(t,r,o)},l={kind:e.kind??"general",mode:n,lifecycle:e.lifecycle??(n==="orchestrator"?"resident":"terminal"),hasManager:e.hasManager??!0,cwd:e.cwd,scope:ee(e.cwd),orchestration:{depth:e.depth??0},profile:q(r),scopes:Z(null),repo:[...d,...i.projectRepos].map(p=>p.name)};return{reader:c,subject:l}}a(ze,"hypotheticalReader");function Qe(t,e,o,r,i){const n={node:f(e).node.rowid,preferenceSnapshot:null,objects:new Map,listed:new Map},s={...i??N(t,e),...r},c={db:t,reader:e,subject:s,ledger:n,channel:"transcript"},{result:l}=D(c,o),p=he[o.activity];let m=null;if(p!==void 0){const A=o.activity==="file-read"?{absoluteFile:o.subject}:o.activity==="command"||o.activity==="pre-command"?{command:o.subject}:o.activity==="document-read"&&o.subject!==void 0?{doc:j(t,e,I(t,e,o.subject))}:{},b=o.activity==="file-read"&&o.subject!==void 0?C(t,f(e),o.subject):e;m=de(t,s,b,w(t,b,[p]),p,A)}return{result:l,plan:m}}a(Qe,"inspect");function Ze(t,e,o){return v(t,`SELECT o.*, MAX(r.number) AS to_seq, GROUP_CONCAT(DISTINCT a.id) AS authors
+var I=Object.defineProperty;var d=(t,e)=>I(t,"name",{value:e,configurable:!0});import{dirname as L}from"node:path";import{clearLedger as F,demoteTranscript as $,freezePreferences as b,loadLedger as M,saveLedger as P}from"../../graph/exposures.js";import{recordWatch as T}from"../../graph/watches.js";import{publish as H}from"../../graph/events.js";import{viewOf as x}from"../../graph/names.js";import{checkoutsForCwd as y}from"../../graph/repo-sync/repos.js";import{liveLookups as W,profileObject as Y,viewRepos as U}from"../../graph/reader.js";import{ownerForGrantee as B}from"../../graph/objects.js";import{resolveName as G}from"../../graph/names.js";import{SCOPE_VOCABULARY as J}from"../../scopes.js";import{getNode as K}from"../../canvas/index.js";import{recordMemoryReadsIn as V}from"../../canvas/memory-reads.js";import{lookupProfile as X}from"../../profiles/manifest.js";import{getDefaultProfileId as z}from"../../profiles/default-binding.js";import{effectiveScopes as Q,profileNameFor as Z,scopeForCwd as q}from"../subject-fields.js";import{spineDepth as ee}from"../subject.js";import{appForNode as te}from"../../canvas/node-agent-paths.js";import{interpolateNodePaths as oe}from"../../canvas/paths.js";import{readableProjectForScopes as ne}from"../../spaces/permissions.js";import{ApiError as u}from"../../../api/errors.js";import{buildContextBearings as re}from"../../runtime/bearings.js";import{deliveryDocOf as g,listingCorpus as ie,loadCorpus as w,nodeSubject as j}from"./corpus.js";import{listingPrefixes as ae}from"./listings.js";import{planDelivery as se}from"./plan.js";import{renderEvent as N,renderExplicitRead as O}from"./render-event.js";import{renderConfigDelta as ce,renderKnowledge as de,renderPreferences as k,renderWorkspaceOpen as _}from"./render-boot.js";import{mapAsync as le}from"../../async-array.js";function f(t){if(t.class!=="node")throw new Error(`delivery needs a node reader, got ${t.class}`);return t}d(f,"nodeOf");const R=-1;function v(t){return t.node.rowid===R}d(v,"isHypothetical");async function S(t,e){if(!v(e))return await te(e.node.id);const o=await t.prepare("SELECT external_id FROM identities WHERE object = ?").get(e.app.rowid);if(!o)throw new Error(`app object ${e.app.id} has no identity`);return o.external_id}d(S,"granteeOf");async function pe(t,e,o,r=async i=>await y(t,i)){const i=f(e).node,c=new Set,n=new Date().toISOString(),a=[];for(const{doc:s,level:l}of o)l!=="content"||c.has(s.object.rowid)||(c.add(s.object.rowid),await T(t,i,s.object,"deliver",{readHeadsKey:s.headsKey}),await H(t,{event:"read",object:s.object,actor:i,attrs:{}},r),a.push({name:s.name,scope:s.ownerHandle,at:n,type:"loaded"}));v(f(e))||await V(t,i.id,a)}d(pe,"recordContentDelivery");async function E(t,e,o){const r=(await y(t,L(o))).filter(i=>!e.repos.some(c=>c.rowid===i.repo.rowid));return r.length===0?e:{...e,repos:[...e.repos,...r.map(i=>i.repo)],checkouts:[...e.checkouts,...r]}}d(E,"fileReadReader");async function ue(t,e,o){const r=await S(t,e);if(!(o.startsWith("/")&&(process.platform!=="linux"&&r==="app:terminal"||ne(o,r,e.scopes??[],null))))throw new u(403,"scope_missing","read file is outside the run mounts")}d(ue,"assertReadableFile");async function me(t){const e=f(t.reader),o=e.node,r=await S(t.db,e),i=await w(t.db,t.reader,["slash-command"]),c=i.map(n=>{const a=n.body();return{name:n.displayName,command_name:n.displayName,description:n.preview,canonical_body:a,execution_body:oe(a,o.id,r)}});return{docs:i,commands:c}}d(me,"slashCommands");function fe(t){if(t.shipped)return"builtin";switch(t.owner.type){case"node":return"node";case"repo":return"project";case"profile":return"profile";default:return"user"}}d(fe,"scopeOf");async function we(t,e){const o=[],r=new Set;for(const i of await x(t,e)){const c=await ie(t,e,i);for(const n of c){o.push({name:n.displayName,kind:n.kind,scope:fe(n),shortForm:n.preview,gatewayVisible:!n.shipped}),r.add(n.displayName);const a=n.displayName===n.name?"":`${n.ownerHandle}/`;for(const s of ae(c,n.name))r.add(`${a}${s}`)}}return{refs:o,names:[...r]}}d(we,"composerNames");async function C(t,e){const o=f(t.reader),{db:r,ledger:i}=t,c=d(()=>{if(typeof e.subject!="string"||e.subject==="")throw new u(400,"usage",`delivery activity ${e.activity} requires a subject`);return e.subject},"requireSubject");switch(e.activity){case"boot":{if(e.inherited===!0){for(const[s,l]of i.objects)if(l.transcript===void 0)i.objects.delete(s);else{const{system:p,...m}=l;i.objects.set(s,m)}for(const[s,l]of i.listed)l.transcript===void 0?i.listed.delete(s):i.listed.set(s,{transcript:l.transcript});return i.preferenceSnapshot=null,{result:{content:"",inherited:!0},delivered:[]}}const n=v(o)?await ye(t):await re(o.node.id,t),a=await k({...t,channel:"system"});return b(i,a.content),{result:{content:n.content},delivered:[...n.delivered,...a.delivered]}}case"system-prompt":{if(i.preferenceSnapshot!==null)return{result:{content:i.preferenceSnapshot},delivered:[]};const n=await k({...t,channel:"system"});return{result:{content:b(i,n.content)},delivered:n.delivered}}case"compact":{for(const n of await w(r,o,["pre-command"]))$(i,n.object.rowid);return{result:{content:""},delivered:[]}}case"persona":{const n=await ce(t);return{result:{content:n.content},delivered:n.delivered}}case"file-read":{const n=c();await ue(r,o,n);const a=await E(r,o,n),s={...t,reader:a},l=await N(s,"file-read",{absoluteFile:n},await w(r,a,["file-read"]));return{result:{content:l.content},delivered:l.delivered}}case"command":case"pre-command":{const n=await N(t,e.activity,{command:c()});return{result:{content:n.content},delivered:n.delivered}}case"slash-command":{const{docs:n,commands:a}=await me(t);if(e.subject===void 0||e.subject==="")return{result:{content:"",commands:a},delivered:[]};const s=n.findIndex(m=>m.displayName===e.subject||m.name===e.subject);if(s<0)throw new u(404,"not_found",`no slash command named ${e.subject}`);const l=n[s],p=await O(t,l,!0);return{result:{content:"",execution_body:a[s].execution_body,blocks:p.attachments===""?[]:[p.attachments]},delivered:[{doc:l,level:"content"},...p.delivered]}}case"workspace-open":{const n=await _(t);return{result:{content:n.content},delivered:n.delivered}}case"document-read":{const n=await D(r,o,c()),a=await O(t,await g(r,o,n),!0);return{result:{content:a.attachments},delivered:a.delivered}}case"names":return{result:{content:"",...await we(r,o)},delivered:[]};default:throw new u(400,"usage",`unknown delivery activity ${String(e.activity)}`)}}d(C,"render");async function ye(t){const e=await de(t),o=await _(t);return{content:[e.content,o.content].filter(r=>r!=="").join(`
+`),delivered:[...e.delivered,...o.delivered]}}d(ye,"hypotheticalBearings");async function D(t,e,o){const r=await G(t,e,o);if("object"in r&&r.object.type==="document")return r.object;throw"ambiguous"in r?new u(409,"ambiguous",`${o} names ${r.ambiguous.length} documents; name one as <type>:<owner>/<name>`):new u(404,"not_found",`no document ${o} the reader can read`)}d(D,"readDocument");const ve=["workspace-open","document-read"];async function Ve(t,e,o){if(ve.includes(o.activity))throw new u(400,"usage",`delivery activity ${o.activity} is available to a dry run only`);const r=f(e).node;o.activity==="boot"&&o.inherited!==!0&&await F(t,r.rowid);const i=await M(t,r.rowid),c={db:t,reader:e,subject:await j(t,e),ledger:i,channel:"transcript"},{result:n,delivered:a}=await C(c,o);return await pe(t,e,a),await P(t,i),n}d(Ve,"deliver");const he={boot:"boot","workspace-open":"workspace-open","file-read":"file-read","document-read":"document-read",command:"command","pre-command":"pre-command","slash-command":"slash-command"};async function Xe(t,e){const o=await K(t);if(o===null)throw new u(404,"not_found",`no node ${t}`);return{cwd:e.cwd??o.cwd,profile:e.profile!==void 0?e.profile:o.profile_id,grantee:e.grantee??o.grantee,kind:e.kind??o.kind,mode:e.mode??o.mode,lifecycle:e.lifecycle??o.lifecycle,hasManager:e.hasManager??(o.parent??null)!==null,depth:e.depth??await ee(t)}}d(Xe,"hypotheticalFrom");function be(t,e){if(t===null)return null;if(t===void 0||t==="")return z(e);const o=X(t);if(o.kind!=="resolved"){const r=`no profile ${t}`;throw new u(404,"not_found",r,{error:"not_found",message:r,next:"List profile ids and names with `crtr profile list`."})}return o.entry.profileId}d(be,"resolveProfileId");async function ze(t,e){const o=await B(t,e.grantee??"app:terminal"),r=be(e.profile,e.cwd),i=await U(e.cwd,r,async p=>await y(t,p),W(t)),{repos:c}=i,n=e.mode??"base",s={class:"node",node:{rowid:R,id:"hypothetical",type:"node",kind:e.kind??"general",owner:o.rowid,privacy:"private",name:"hypothetical",preview:"",created_at:new Date(0).toISOString(),deleted_at:null},app:o,scopes:[...J],cwd:e.cwd,...i,profile:r===null?null:await Y(t,r,o)},l={kind:e.kind??"general",mode:n,lifecycle:e.lifecycle??(n==="orchestrator"?"resident":"terminal"),hasManager:e.hasManager??!0,cwd:e.cwd,scope:q(e.cwd),orchestration:{depth:e.depth??0},profile:Z(r),scopes:Q(null),repo:[...c,...i.projectRepos].map(p=>p.name)};return{reader:s,subject:l}}d(ze,"hypotheticalReader");async function Qe(t,e,o,r,i){const n={node:f(e).node.rowid,preferenceSnapshot:null,objects:new Map,listed:new Map},a={...i??await j(t,e),...r},s={db:t,reader:e,subject:a,ledger:n,channel:"transcript"},{result:l}=await C(s,o),p=he[o.activity];let m=null;if(p!==void 0){const A=o.activity==="file-read"?{absoluteFile:o.subject}:o.activity==="command"||o.activity==="pre-command"?{command:o.subject}:o.activity==="document-read"&&o.subject!==void 0?{doc:await g(t,e,await D(t,e,o.subject))}:{},h=o.activity==="file-read"&&o.subject!==void 0?await E(t,f(e),o.subject):e;m=await se(t,a,h,await w(t,h,[p]),p,A)}return{result:l,plan:m}}d(Qe,"inspect");async function Ze(t,e,o){const r=await t.prepare(`SELECT o.*, MAX(r.number) AS to_seq, GROUP_CONCAT(DISTINCT a.id) AS authors
     FROM watches w JOIN objects o ON o.rowid = w.object AND o.type = 'document' AND o.deleted_at IS NULL
     JOIN revisions r ON r.document = o.rowid LEFT JOIN objects a ON a.rowid = r.author
     WHERE w.watcher = ? AND r.created_at > ? AND (r.author IS NULL OR r.author != ?)
-    GROUP BY o.rowid ORDER BY o.rowid`).all(e.rowid,o,e.rowid).map(({to_seq:i,authors:d,...n})=>{const s=v(t,"SELECT MAX(number) AS seq FROM revisions WHERE document = ? AND created_at <= ?").get(n.rowid,o);return{doc:n,from:s.seq,to:i,authors:d===null?[]:d.split(",")}})}a(Ze,"changedWhileDone");export{ye as DRY_RUN_ONLY,Ze as changedWhileDone,Ve as deliver,Xe as hypotheticalFrom,ze as hypotheticalReader,Qe as inspect,pe as recordContentDelivery};
+    GROUP BY o.rowid ORDER BY o.rowid`).all(e.rowid,o,e.rowid);return await le(r,async({to_seq:i,authors:c,...n})=>{const a=await t.prepare("SELECT MAX(number) AS seq FROM revisions WHERE document = ? AND created_at <= ?").get(n.rowid,o);return{doc:n,from:a.seq,to:i,authors:c===null?[]:c.split(",")}})}d(Ze,"changedWhileDone");export{ve as DRY_RUN_ONLY,Ze as changedWhileDone,Ve as deliver,Xe as hypotheticalFrom,ze as hypotheticalReader,Qe as inspect,pe as recordContentDelivery};

package/dist/core/substrate/delivery/plan.d.ts

@@ -1,20 +1,10 @@
-/** The row-backed delivery planner: for one activity it decides, per corpus
- *  document, which rule matched and at what level it delivers. It renders
- *  nothing and writes nothing; the ledger and renderers are downstream.
- *
- *  - The profile's delivery limit caps `boot` and `workspace-open` only, and
- *    never the node's own documents.
- *  - At `boot` a node's own document with no boot rule is raised to `name`.
- *  - `boot` and `workspace-open` keep bare-name shadowing: the first document
- *    in view order with a bare name wins it (per boot block), as `[[name]]`
- *    resolves. Every other activity delivers every matching document. */
-import type { DatabaseSync } from 'node:sqlite';
 import type { RuleRow } from '../../graph/rules.js';
 import type { Reader, RuleOn } from '../../graph/types.js';
 import { type Rung } from '../schema.js';
 import type { NodeConfigSubject } from '../subject-fields.js';
 import { type GateOutcome } from './match.js';
 import type { DeliveryDoc } from './types.js';
+import type { CanvasDb } from '../../canvas/db.js';
 export type { GateOutcome } from './match.js';
 /** What the activity exposes. An activity invoked without its field matches nothing. */
 export interface DeliveryPayload {
@@ -64,4 +54,4 @@ export interface DeliveryPlan {
 /** Which boot block a record belongs to: the node's own documents ride in the knowledge block whatever their kind. */
 export declare function bootPartitionOf(record: Pick<DeliveryRecord, 'doc'>): 'knowledge' | 'preference';
 /** Plan one activity over an already-loaded corpus (view order, from `loadCorpus`). */
-export declare function planDelivery(db: DatabaseSync, subject: NodeConfigSubject | null, reader: Reader, corpus: readonly DeliveryDoc[], on: RuleOn, payload?: DeliveryPayload): DeliveryPlan;
+export declare function planDelivery(db: CanvasDb, subject: NodeConfigSubject | null, reader: Reader, corpus: readonly DeliveryDoc[], on: RuleOn, payload?: DeliveryPayload): Promise<DeliveryPlan>;