@north-light/cli 0.3.561 → 0.3.562

package/dist/daemon/api/handlers/broker-signals.js

@@ -1,2 +1,2 @@
-var D=Object.defineProperty;var r=(c,e)=>D(c,"name",{value:e,configurable:!0});import{ApiError as M}from"../../../api/errors.js";import{getNode as y}from"../../../core/canvas/canvas.js";import{brokerSignalBus as E}from"../../broker-signals/bus.js";import{boundDaemonControl as T}from"../../control.js";import{requireCurrentExecution as v}from"./broker-recovery.js";import{extensionNode as _}from"./broker-ops.js";const R=15e3,C=3e4;class N{static{r(this,"BrokerSignalStreams")}timing;streams=new Map;constructor(e={pingMs:R,blockedMs:C}){this.timing=e}async open(e,t,u,d){this.streams.get(e)?.close();let n=!1,i=!1,h=!1,w=!1,g=!1,s,m,b;const a=r((o=!1)=>{n||(n=!0,m!==void 0&&clearInterval(m),s!==void 0&&clearTimeout(s),t.off("drain",k),t.off("close",l),t.off("error",l),d.off("aborted",l),b?.(),this.streams.get(e)===S&&this.streams.delete(e),o?t.destroy():t.writableEnded||t.end())},"close"),f=r(o=>{n||i||t.write(`${JSON.stringify(o)}
-`)||(i=!0,s=setTimeout(()=>a(!0),this.timing.blockedMs),s.unref())},"send"),p=r(async()=>{if(!(n||i)&&(h&&(h=!1,f({type:"mail",channel:"wake",at:Date.now()})),g&&!i&&(g=!1,f({type:"fault-retry",at:Date.now()})),w&&!i)){w=!1;const o=await y(e);o!==null&&f({type:"node",node:await _(o),at:Date.now()})}},"flush"),k=r(()=>{i=!1,s!==void 0&&clearTimeout(s),s=void 0,p().catch(()=>a())},"drain"),l=r(()=>a(),"onClosed"),S={close:a,nudgeFaultRetry:r(async()=>{if(!n){g=!0;try{await p()}catch{a()}}},"nudgeFaultRetry")};this.streams.set(e,S),t.on("drain",k),t.once("close",l),t.once("error",l),b=await E.subscribe((o,x)=>{o!==e||n||(x==="mail"?h=!0:w=!0,p().catch(()=>a()))}),m=setInterval(()=>{if(!(i||n))try{f({type:"ping",at:Date.now()})}catch{a()}},this.timing.pingMs),m.unref(),d.once("aborted",l);try{f(u),await p()}catch{a()}}async nudgeFaultRetry(e){const t=this.streams.get(e);return t===void 0?!1:(await t.nudgeFaultRetry(),!0)}close(){for(const e of[...this.streams.values()])e.close()}}const B=new N;async function F(c){const e=c.params.id??"",t=await y(e);if(t===null)throw new M(404,"node_not_found",`no node ${e}`);const u=c.query.get("execution_id");await v(e,u);const{req:d,res:n}=c;n.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache",connection:"keep-alive"});try{await B.open(e,n,{type:"hello",epoch:T()?.epoch??"",execution_id:u,node:await _(await y(e)??t),at:Date.now()},d)}catch{n.writableEnded||n.end()}return{status:200}}r(F,"handleSignals");const J=[{method:"GET",pattern:"/v1/nodes/:id/broker/signals",handler:F}];export{N as BrokerSignalStreams,J as brokerSignalRoutes,B as brokerSignalStreams};
+var D=Object.defineProperty;var r=(l,e)=>D(l,"name",{value:e,configurable:!0});import{ApiError as M}from"../../../api/errors.js";import{getNode as y}from"../../../core/canvas/canvas.js";import{brokerSignalBus as E}from"../../broker-signals/bus.js";import{boundDaemonControl as T}from"../../control.js";import{requireCurrentExecution as v}from"./broker-recovery.js";import{extensionNode as x}from"./broker-ops.js";const C=15e3,N=3e4;class B{static{r(this,"BrokerSignalStreams")}timing;streams=new Map;constructor(e={pingMs:C,blockedMs:N}){this.timing=e}async open(e,t,u,d){this.streams.get(e)?.close();let n=!1,a=!1,p=!1,h=!1,w=!1,i,m,b;const s=r((o=!1)=>{n||(n=!0,m!==void 0&&clearInterval(m),i!==void 0&&clearTimeout(i),t.off("drain",k),t.off("close",c),t.off("error",c),d.off("aborted",c),b?.(),this.streams.get(e)===S&&this.streams.delete(e),o?t.destroy():t.writableEnded||t.end())},"close"),f=r(o=>{n||a||t.write(`${JSON.stringify(o)}
+`)||(a=!0,i=setTimeout(()=>s(!0),this.timing.blockedMs),i.unref())},"send"),g=r(async()=>{if(!(n||a)&&(p&&(p=!1,f({type:"mail",channel:"wake",at:Date.now()})),w&&!a&&(w=!1,f({type:"fault-retry",at:Date.now()})),h&&!a)){h=!1;const o=await y(e);o!==null&&f({type:"node",node:await x(o),at:Date.now()})}},"flush"),k=r(()=>{a=!1,i!==void 0&&clearTimeout(i),i=void 0,g().catch(()=>s())},"drain"),c=r(()=>s(),"onClosed"),S={close:s};this.streams.set(e,S),t.on("drain",k),t.once("close",c),t.once("error",c),b=await E.subscribe((o,_)=>{o!==e||n||(_==="mail"?p=!0:_==="fault_retry"?w=!0:h=!0,g().catch(()=>s()))},{kinds:["mail","node","fault_retry"]}),m=setInterval(()=>{if(!(a||n))try{f({type:"ping",at:Date.now()})}catch{s()}},this.timing.pingMs),m.unref(),d.once("aborted",c);try{f(u),await g()}catch{s()}}close(){for(const e of[...this.streams.values()])e.close()}}const q=new B;async function G(l){const e=l.params.id??"",t=await y(e);if(t===null)throw new M(404,"node_not_found",`no node ${e}`);const u=l.query.get("execution_id");await v(e,u);const{req:d,res:n}=l;n.writeHead(200,{"content-type":"application/x-ndjson; charset=utf-8","cache-control":"no-cache",connection:"keep-alive"});try{await q.open(e,n,{type:"hello",epoch:T()?.epoch??"",execution_id:u,node:await x(await y(e)??t),at:Date.now()},d)}catch{n.writableEnded||n.end()}return{status:200}}r(G,"handleSignals");const K=[{method:"GET",pattern:"/v1/nodes/:id/broker/signals",handler:G}];export{B as BrokerSignalStreams,K as brokerSignalRoutes,q as brokerSignalStreams};

package/dist/daemon/api/handlers/canvas.js

@@ -1,6 +1,6 @@
-var Q=Object.defineProperty;var c=(n,e)=>Q(n,"name",{value:e,configurable:!0});import{gzipSync as Y}from"node:zlib";import{browseNodes as B,graphNodes as V,pruneNodes as X,pruneToLimit as Z,rosterEdges as N,rosterNodes as ee}from"../../../core/canvas/canvas.js";import{liveObjectWaitsNamed as te,readControllerWait as ne}from"../../../core/canvas/waits.js";import{activeBackgroundBashJobs as se}from"../../../core/bash-jobs.js";import{contextDir as oe}from"../../../core/canvas/node-agent-paths.js";import{nowIso as I}from"../../../core/fs-utils.js";import{isPidPresent as re}from"../../../core/canvas/pid.js";import{dashboardRowsAllFromSource as ie,enrichRowsFromSource as ae}from"../../../core/canvas/render-source.js";import{localCanvasSource as P}from"../../../core/canvas/source.js";import{ticketCountsForNodes as F,ticketsAcrossCanvas as de}from"../../../core/canvas/attention.js";import{buildCorpus as le,groupCorpus as ce,resolveRef as ue}from"../../../core/canvas/history.js";import{listFocuses as G,reapEmptyNodes as fe}from"../../../core/runtime/placement.js";import{boundFleet as me}from"../../../core/runtime/fleet.js";import{retentionHold as pe}from"../../reconcilers/live-obligation.js";import{notFound as _e,usage as _}from"../../../core/errors.js";import{openDb as ye}from"../../../core/canvas/db.js";import{view as he}from"../../../core/canvas/tree.js";import{isLiveStatus as be}from"../../../core/canvas/node-order.js";import{readNodeRecap as ge}from"../../../core/canvas/node-recap.js";import{readGoal as ve}from"../../../core/runtime/kickoff.js";import{faultSummary as we}from"../../../core/canvas/status-glyph.js";import{listPendingAsks as ke}from"../../../core/human/requests.js";import{toGraphNodeDTO as Se}from"../map.js";import{actsAsPerson as Ne,readableNodeIds as D}from"../router.js";import{ApiError as T}from"../../../api/errors.js";import{mapAsync as q}from"../../../core/async-array.js";async function w(n){return await D(n.principal)}c(w,"visibleNodes");async function Ce(n){const e=await w(n);return{status:200,body:{items:(await de()).filter(t=>e===null||e.has(t.node_id)).map(t=>({node_id:t.node_id,name:t.name,cwd:t.cwd,count:t.count,subjects:t.subjects}))}}}c(Ce,"handleAttention");async function Re(n){const e=n.body;if(e===null||typeof e!="object"||!Array.isArray(e.node_ids))throw _("attention count request requires node_ids: string[]");const o=e.node_ids;if(!o.every(l=>typeof l=="string"))throw _("attention count request node_ids must contain only strings");const t=await w(n);return{status:200,body:{counts:await F(o.filter(l=>t===null||t.has(l)))}}}c(Re,"handleAttentionCounts");function x(n){return Buffer.from(String(n),"utf8").toString("base64")}c(x,"encodeCursor");function H(n){const e=Number(Buffer.from(n,"base64").toString("utf8"));if(!Number.isInteger(e)||e<0)throw _(`invalid cursor: ${n}`);return e}c(H,"decodeCursor");function je(n,e,o){const a=n.loadBody().split(`
-`);if(e.length>0){const i=a.findIndex(m=>{const f=m.toLowerCase();return e.some(y=>f.includes(y))});if(i!==-1)return a.slice(i,i+o).map(m=>m.trim()).filter(m=>m!=="").join(" \u23CE ")}const l=a.map(i=>i.trim()).filter(i=>i!=="").slice(0,o).join(" \u23CE ");return l!==""?l:n.title}c(je,"snippet");function Ie(n,e,o){const t=[...n];return e==="relevance"&&o!==void 0?t.sort((a,l)=>(o.get(l.ref)??0)-(o.get(a.ref)??0)||l.tsMs-a.tsMs||a.ref.localeCompare(l.ref)):e==="oldest"?t.sort((a,l)=>a.tsMs-l.tsMs||a.ref.localeCompare(l.ref)):t.sort((a,l)=>l.tsMs-a.tsMs||a.ref.localeCompare(l.ref)),t}c(Ie,"sortArtifacts");function Me(n){if(n==null)return{};if(typeof n!="object")throw _("history search body must be a JSON object");return n}c(Me,"parseSearchBody");function Le(n){if(n===null||typeof n!="object")throw _("history grep body must be a JSON object");const e=n;if(typeof e.pattern!="string"||e.pattern==="")throw _("history grep body requires a non-empty pattern");return e}c(Le,"parseGrepBody");async function $(n,e){const o={cwd:n.cwd,allCwds:n.all_cwds===!0,under:n.under,nodes:n.nodes},t={types:n.types,kinds:n.kinds,statuses:n.statuses,sinceMs:n.since_ms,untilMs:n.until_ms,origins:n.origins,roles:n.roles,from:n.from},a=await w(e);return(await le(o,t)).filter(l=>a===null||a.has(l.nodeId))}c($,"buildCorpusFromQuery");function Oe(n){if(n==null)return{};if(typeof n!="object")throw _("history stats body must be a JSON object");return n}c(Oe,"parseStatsBody");const z=["origin","node","kind","day","type","role"];async function Ee(n){const e=Oe(n.body),o=e.group_by??"type";if(!z.includes(o))throw _(`--group-by must be one of: ${z.join(", ")}; received: ${String(e.group_by)}`);const t=await $(e,n),a=ce(t,o);return{status:200,body:{group_by:o,groups:a,total:a.reduce((i,m)=>i+m.count,0),scanned:t.length}}}c(Ee,"handleHistoryStats");async function Te(n){const e=Le(n.body),o=Math.min(100,Math.max(1,e.limit??20)),t=await $(e,n),a=e.cursor!==void 0?H(e.cursor):0;let l;try{l=new RegExp(e.pattern,"i")}catch{throw _(`invalid regex pattern: ${e.pattern}`)}const i=[];for(const r of t)r.loadBody().split(`
-`).forEach((u,g)=>{l.test(u)&&i.push({ref:r.ref,node:`${r.nodeName} (${r.nodeId})`,ts:r.ts,line:g+1,text:u.trim()})});i.sort((r,s)=>r.ref.localeCompare(s.ref)||r.line-s.line);const m=i.slice(a,a+o),f=a+o<i.length?x(a+o):null;return{status:200,body:{hits:m,next_cursor:f,total:i.length}}}c(Te,"handleHistoryGrep");async function $e(n){const e=Me(n.body),o=(e.query??"").trim(),t=e.weigh_body===!0,a=e.full===!0,l=Math.max(1,e.snippet_lines??1),i=Math.min(100,Math.max(1,e.limit??20)),m=e.per_node===!0;if(m&&(e.nodes===void 0||e.nodes.length===0))throw new T(400,"invalid_request","`per_node` requires a non-empty `nodes` list",{param:"nodes"});const f=await $(e,n),y=e.cursor!==void 0?H(e.cursor):0,r=o.toLowerCase().split(/\s+/).filter(d=>d.length>0);let s=f,u;const g=e.sort??(r.length>0?"relevance":"recency");if(r.length>0&&g==="relevance"){u=new Map;const d=[];for(const p of f){const E=p.title.toLowerCase(),W=p.nodeName.toLowerCase(),U=p.nodeDesc.toLowerCase(),A=t?p.loadBody().toLowerCase():null;let S=0;for(const j of r)E.includes(j)&&(S+=10),W.includes(j)&&(S+=5),U.includes(j)&&(S+=3),A!==null&&A.includes(j)&&(S+=1);S>0&&(u.set(p.ref,S),d.push(p))}s=d}else r.length>0&&(s=f.filter(d=>{const p=`${d.title}
+var Y=Object.defineProperty;var c=(n,e)=>Y(n,"name",{value:e,configurable:!0});import{gzipSync as V}from"node:zlib";import{browseNodes as B,graphNodes as X,pruneNodes as Z,pruneToLimit as ee,rosterEdges as N,rosterNodes as te}from"../../../core/canvas/canvas.js";import{liveObjectWaitsNamed as ne,readControllerWait as se}from"../../../core/canvas/waits.js";import{runningJobs as oe}from"../../../core/graph/jobs.js";import{nowIso as I}from"../../../core/fs-utils.js";import{isPidPresent as re}from"../../../core/canvas/pid.js";import{dashboardRowsAllFromSource as ie,enrichRowsFromSource as ae}from"../../../core/canvas/render-source.js";import{localCanvasSource as P}from"../../../core/canvas/source.js";import{ticketCountsForNodes as F,ticketsAcrossCanvas as de}from"../../../core/canvas/attention.js";import{buildCorpus as le,groupCorpus as ce,resolveRef as ue}from"../../../core/canvas/history.js";import{listFocuses as G,reapEmptyNodes as fe}from"../../../core/runtime/placement.js";import{boundFleet as me}from"../../../core/runtime/fleet.js";import{retentionHold as pe}from"../../reconcilers/live-obligation.js";import{notFound as _e,usage as _}from"../../../core/errors.js";import{openDb as q}from"../../../core/canvas/db.js";import{view as ye}from"../../../core/canvas/tree.js";import{isLiveStatus as he}from"../../../core/canvas/node-order.js";import{readNodeRecap as be}from"../../../core/canvas/node-recap.js";import{readGoal as ge}from"../../../core/runtime/kickoff.js";import{faultSummary as ve}from"../../../core/canvas/status-glyph.js";import{listPendingAsks as we}from"../../../core/human/requests.js";import{toGraphNodeDTO as ke}from"../map.js";import{actsAsPerson as Se,readableNodeIds as D}from"../router.js";import{ApiError as T}from"../../../api/errors.js";import{mapAsync as x}from"../../../core/async-array.js";async function w(n){return await D(n.principal)}c(w,"visibleNodes");async function Ne(n){const e=await w(n);return{status:200,body:{items:(await de()).filter(t=>e===null||e.has(t.node_id)).map(t=>({node_id:t.node_id,name:t.name,cwd:t.cwd,count:t.count,subjects:t.subjects}))}}}c(Ne,"handleAttention");async function Ce(n){const e=n.body;if(e===null||typeof e!="object"||!Array.isArray(e.node_ids))throw _("attention count request requires node_ids: string[]");const o=e.node_ids;if(!o.every(l=>typeof l=="string"))throw _("attention count request node_ids must contain only strings");const t=await w(n);return{status:200,body:{counts:await F(o.filter(l=>t===null||t.has(l)))}}}c(Ce,"handleAttentionCounts");function H(n){return Buffer.from(String(n),"utf8").toString("base64")}c(H,"encodeCursor");function z(n){const e=Number(Buffer.from(n,"base64").toString("utf8"));if(!Number.isInteger(e)||e<0)throw _(`invalid cursor: ${n}`);return e}c(z,"decodeCursor");function Re(n,e,o){const a=n.loadBody().split(`
+`);if(e.length>0){const i=a.findIndex(m=>{const f=m.toLowerCase();return e.some(y=>f.includes(y))});if(i!==-1)return a.slice(i,i+o).map(m=>m.trim()).filter(m=>m!=="").join(" \u23CE ")}const l=a.map(i=>i.trim()).filter(i=>i!=="").slice(0,o).join(" \u23CE ");return l!==""?l:n.title}c(Re,"snippet");function je(n,e,o){const t=[...n];return e==="relevance"&&o!==void 0?t.sort((a,l)=>(o.get(l.ref)??0)-(o.get(a.ref)??0)||l.tsMs-a.tsMs||a.ref.localeCompare(l.ref)):e==="oldest"?t.sort((a,l)=>a.tsMs-l.tsMs||a.ref.localeCompare(l.ref)):t.sort((a,l)=>l.tsMs-a.tsMs||a.ref.localeCompare(l.ref)),t}c(je,"sortArtifacts");function Ie(n){if(n==null)return{};if(typeof n!="object")throw _("history search body must be a JSON object");return n}c(Ie,"parseSearchBody");function Me(n){if(n===null||typeof n!="object")throw _("history grep body must be a JSON object");const e=n;if(typeof e.pattern!="string"||e.pattern==="")throw _("history grep body requires a non-empty pattern");return e}c(Me,"parseGrepBody");async function $(n,e){const o={cwd:n.cwd,allCwds:n.all_cwds===!0,under:n.under,nodes:n.nodes},t={types:n.types,kinds:n.kinds,statuses:n.statuses,sinceMs:n.since_ms,untilMs:n.until_ms,origins:n.origins,roles:n.roles,from:n.from},a=await w(e);return(await le(o,t)).filter(l=>a===null||a.has(l.nodeId))}c($,"buildCorpusFromQuery");function Le(n){if(n==null)return{};if(typeof n!="object")throw _("history stats body must be a JSON object");return n}c(Le,"parseStatsBody");const J=["origin","node","kind","day","type","role"];async function Oe(n){const e=Le(n.body),o=e.group_by??"type";if(!J.includes(o))throw _(`--group-by must be one of: ${J.join(", ")}; received: ${String(e.group_by)}`);const t=await $(e,n),a=ce(t,o);return{status:200,body:{group_by:o,groups:a,total:a.reduce((i,m)=>i+m.count,0),scanned:t.length}}}c(Oe,"handleHistoryStats");async function Ee(n){const e=Me(n.body),o=Math.min(100,Math.max(1,e.limit??20)),t=await $(e,n),a=e.cursor!==void 0?z(e.cursor):0;let l;try{l=new RegExp(e.pattern,"i")}catch{throw _(`invalid regex pattern: ${e.pattern}`)}const i=[];for(const r of t)r.loadBody().split(`
+`).forEach((u,g)=>{l.test(u)&&i.push({ref:r.ref,node:`${r.nodeName} (${r.nodeId})`,ts:r.ts,line:g+1,text:u.trim()})});i.sort((r,s)=>r.ref.localeCompare(s.ref)||r.line-s.line);const m=i.slice(a,a+o),f=a+o<i.length?H(a+o):null;return{status:200,body:{hits:m,next_cursor:f,total:i.length}}}c(Ee,"handleHistoryGrep");async function Te(n){const e=Ie(n.body),o=(e.query??"").trim(),t=e.weigh_body===!0,a=e.full===!0,l=Math.max(1,e.snippet_lines??1),i=Math.min(100,Math.max(1,e.limit??20)),m=e.per_node===!0;if(m&&(e.nodes===void 0||e.nodes.length===0))throw new T(400,"invalid_request","`per_node` requires a non-empty `nodes` list",{param:"nodes"});const f=await $(e,n),y=e.cursor!==void 0?z(e.cursor):0,r=o.toLowerCase().split(/\s+/).filter(d=>d.length>0);let s=f,u;const g=e.sort??(r.length>0?"relevance":"recency");if(r.length>0&&g==="relevance"){u=new Map;const d=[];for(const p of f){const E=p.title.toLowerCase(),U=p.nodeName.toLowerCase(),Q=p.nodeDesc.toLowerCase(),A=t?p.loadBody().toLowerCase():null;let S=0;for(const j of r)E.includes(j)&&(S+=10),U.includes(j)&&(S+=5),Q.includes(j)&&(S+=3),A!==null&&A.includes(j)&&(S+=1);S>0&&(u.set(p.ref,S),d.push(p))}s=d}else r.length>0&&(s=f.filter(d=>{const p=`${d.title}
 ${d.nodeName}
 ${d.nodeDesc}${t?`
-`+d.loadBody():""}`.toLowerCase();return r.some(E=>p.includes(E))}));let b=Ie(s,g,u);if(m){const d=new Set;b=b.filter(p=>!d.has(p.nodeId)&&d.add(p.nodeId))}const v=m?b:b.slice(y,y+i),h=!m&&y+i<b.length?x(y+i):null;return{status:200,body:{hits:v.map(d=>{const p={ref:d.ref,node:`${d.nodeName} (${d.nodeId})`,kind:d.nodeKind,source:d.source,ts:d.ts,...m?{node_id:d.nodeId}:{}};return g==="relevance"&&u!==void 0&&(p.score=u.get(d.ref)??0),a?p.body=d.loadBody():p.snippet=je(d,r,l),p}),next_cursor:h,total:b.length}}}c($e,"handleHistorySearch");async function Ae(n){const e=(n.query.get("ref")??"").trim();if(!e.includes(":"))throw _(`ref must be <node-id>:inbox/<n>, <node-id>:session, or <node-id>:session/<n>; received: ${e}`,{received:e,next:"Get a valid ref from `crtr canvas history search`. Reports and documents are `crtr canvas read <name>`."});const o=await ue(e);if(o===null)throw _e(`no inbox entry or message for ref: ${e}`,{ref:e,next:"Re-run `crtr canvas history search` for a current ref. Reports and documents are `crtr canvas read <name>`."});if((await w(n))?.has(o.nodeId)===!1)throw new T(404,"not_found","artifact not found");const t=o.source,l=n.query.get("format")==="raw"&&o.raw!==null?o.raw:o.body;return{status:200,body:{ref:e,node:`${o.nodeName} (${o.nodeId})`,source:t,ts:o.ts,content:l}}}c(Ae,"handleHistoryRead");function Be(n){for(const[t]of n.query)if(t!=="live")throw _(`unknown snapshot query parameter: ${t}`);const e=n.query.getAll("live");if(e.length>1)throw _("live must appear at most once");const o=e[0];if(o===void 0||o==="false"||o==="0")return!1;if(o==="true"||o==="1")return!0;throw _("live must be true or false")}c(Be,"snapshotLiveOnly");async function Pe(n){const e=new Set((await G()).map(r=>r.node_id)),o=await w(n),t=(await ie(P,e,Be(n))).filter(r=>o===null||o.has(r.node_id)),a=await F(t.map(r=>r.node_id));await ae(P,t,a);const l=await q(t,async r=>{const s=r.srcRow,u=s?.host_kind??"tmux";return{node_id:r.node_id,name:r.name,title:r.handle??r.name,description:r.description??null,kind:r.kind,mode:r.mode,lifecycle:r.lifecycle??s?.lifecycle,status:r.status,cwd:r.cwd,profile_id:r.profile_id??null,parent:s?.parent??null,created:r.created,host_kind:u,enterable:u==="broker",attention_count:r.asks,...s?.cycles!=null?{cycles:s.cycles}:{},...r.mtimeMs!==void 0?{last_activity:new Date(r.mtimeMs).toISOString()}:{},ctx_tokens:r.ctx_tokens,streaming:r.streaming??!1,jobs_active:s!==void 0&&re(s.pi_pid)?se(await oe(r.node_id)).length:0,waiting_for:(await ne(r.node_id))?.controllerId??null,hanging:r.hanging??null,viewed:r.viewed??!1,final_report:s?.final_report??null,finalized_at:s?.finalized_at??null}}),i=new Map;for(const r of await N()){const s=i.get(r.from_id);s===void 0?i.set(r.from_id,[r.to_id]):s.push(r.to_id)}const m=new Set(t.map(r=>r.node_id)),f=Object.fromEntries(t.map(r=>[r.node_id,(i.get(r.node_id)??[]).filter(s=>m.has(s))]));return{status:200,body:{generated_at:I(),nodes:l,subscriptions:f}}}c(Pe,"handleSnapshot");async function J(){const n=(await ee()).map(t=>{const a=t.host_kind??"tmux";return{node_id:t.node_id,name:t.name,kind:t.kind,mode:t.mode,lifecycle:t.lifecycle,status:t.status,cwd:t.cwd,host_kind:a,enterable:a==="broker",parent:t.parent,created:t.created,description:t.description}}),e=(await N()).map(t=>({from_id:t.from_id,to_id:t.to_id,active:t.active,created:t.created})),o=(await te()).map(t=>({node_id:t.nodeId,object_id:t.objectId,object_type:t.objectType,object_name:t.objectName,created:new Date(t.createdAt).toISOString()}));return{generated_at:I(),nodes:n,edges:e,object_waits:o}}c(J,"buildRoster");let C=null,M=null;function Fe(){return C===null?(C=Promise.resolve().then(async()=>await J()).finally(()=>{C=null}),C):(M===null&&(M=C.then(async()=>await J()).finally(()=>{M=null})),M)}c(Fe,"rosterCoalesced");async function Ge(n){const e=await Fe(),o=await w(n);return o===null?{status:200,body:e}:{status:200,body:{...e,nodes:e.nodes.filter(t=>o.has(t.node_id)),edges:e.edges.filter(t=>o.has(t.from_id)&&o.has(t.to_id)),object_waits:(e.object_waits??[]).filter(t=>o.has(t.node_id))}}}c(Ge,"handleRoster");function K(n){if(n.name!==""&&n.name!==n.kind)return n.name;const e=(n.description??"").trim();return e!==""?e:n.name}c(K,"liveRootName");const De=1440*6e4;async function qe(){const n=await B(),e=new Map(n.map(s=>[s.node_id,s])),o=new Map((await(await ye()).prepare("SELECT node_id, reply_at, read_at, intent FROM nodes WHERE parent IS NULL").all()).map(s=>[s.node_id,s])),t=await ke(),a=new Map;for(const s of t)a.set(s.requester_node_id,(a.get(s.requester_node_id)??0)+1);const l=new Date(Date.now()-De).toISOString(),i=c(s=>{const u=o.get(s.node_id);return u?.reply_at!=null&&(u.read_at==null||u.reply_at>u.read_at)||(a.get(s.node_id)??0)>0?!0:s.status!=="done"||u?.intent!=="parked"?!1:[s.created,s.telemetry_updated_at,u.reply_at].reduce((v,h)=>h!=null&&h>v?h:v,"")>=l},"keepFinished"),m=n.filter(s=>s.parent===null&&s.kind!=="human"&&(be(s.status)||i(s))),f=new Map;for(const s of await N())f.set(s.from_id,[...f.get(s.from_id)??[],s.to_id]);const y=c(s=>{const u=e.get(s)?.fault;return u&&u.link!=="broker\u2194crtrd"?we(u):null},"faultOf"),r=await q(m,async s=>{const u=[s.node_id,...await he(s.node_id)].filter(d=>e.get(d)?.kind!=="human"&&e.has(d)),g=new Set(u),b=t.filter(d=>g.has(d.requester_node_id)),v=o.get(s.node_id),h=v?.reply_at??null,O=v?.read_at??null;let k=s.created;for(const d of u){const p=e.get(d).telemetry_updated_at;p!=null&&p>k&&(k=p)}return h!==null&&h>k&&(k=h),{node_id:s.node_id,name:K(s),cwd:s.cwd,profile_id:s.profile_id,status:s.status,state_line:(()=>{const d=ge(s.node_id)?.state.trim();return d||null})(),goal:(await ve(s.node_id))?.trim()||null,asks:b.length,first_ask_ticket_id:b[0]?.inbox_ticket_id??null,fault:u.map(y).find(d=>d!==null)??null,running_count:u.filter(d=>e.get(d).streaming===!0).length,unread:h!==null&&(O===null||h>O),last_activity:k,children:(f.get(s.node_id)??[]).filter(d=>e.has(d)&&e.get(d).kind!=="human").map(d=>{const p=e.get(d);return{node_id:d,name:K(p),status:p.status,streaming:p.streaming===!0,asks:a.get(d)??0,fault:y(d)}})}});return{generated_at:I(),rows:r}}c(qe,"buildLiveRoots");let R=null,L=null;function xe(){const n=c(()=>Promise.resolve().then(qe),"run");return R===null?(R=n().finally(()=>{R=null}),R):(L===null&&(L=R.then(n).finally(()=>{L=null})),L)}c(xe,"liveRootsCoalesced");async function He(n){if(!Ne(n.principal))throw new T(403,"permission_error","only the person reads the dashboard");const e=await xe(),o=n.query.get("profile");return{status:200,body:o===null?e:{...e,rows:e.rows.filter(t=>t.profile_id===o)}}}c(He,"handleLiveRoots");async function ze(n){const e=await D(n.principal),o=(await B()).filter(i=>e===null||e.has(i.node_id)).map(i=>({node_id:i.node_id,name:i.name,description:i.description,kind:i.kind,mode:i.mode,lifecycle:i.lifecycle,status:i.status,cwd:i.cwd,profile_id:i.profile_id,grantee:i.grantee??"app:terminal",parent:i.parent,created:i.created,frozen_at:i.frozen_at??null,terminal_reason:i.terminal_reason??null,final_report:i.final_report??null,telemetry_tokens_in:i.telemetry_tokens_in??null,telemetry_updated_at:i.telemetry_updated_at??null,fault:i.fault&&i.fault.link!=="broker\u2194crtrd"?{...i.fault,link:i.fault.link}:null,streaming:i.streaming??!1})),t=new Set(o.map(i=>i.node_id)),a=(await N()).filter(i=>t.has(i.from_id)&&t.has(i.to_id));return{status:200,rawBody:Y(JSON.stringify({nodes:o,edges:a}),{level:1}),headers:{"content-type":"application/gzip"}}}c(ze,"handleBrowse");async function Je(n){const e=await w(n);return{status:200,body:{generated_at:I(),nodes:(await V()).filter(t=>e===null||e.has(t.node_id)).map(Se),edges:(await N()).filter(t=>e===null||e.has(t.from_id)&&e.has(t.to_id)).map(t=>({from_id:t.from_id,to_id:t.to_id,active:t.active,created:t.created})),focused_node_ids:(await G()).map(t=>t.node_id).filter(t=>e===null||e.has(t))}}}c(Je,"handleGraph");function Ke(n){if(n==null)return{};if(typeof n!="object")throw _("prune body must be a JSON object");const e=n,o=c(r=>{const s=e[r];if(s!==void 0){if(typeof s!="number"||!Number.isFinite(s))throw _(`${r} must be a number`);return s}},"num"),t=c(r=>{const s=e[r];if(s!==void 0){if(typeof s!="boolean")throw _(`${r} must be a boolean`);return s}},"bool"),a={},l=o("limit");l!==void 0&&(a.limit=l);const i=o("ttl_days");i!==void 0&&(a.ttl_days=i);const m=t("include_stale");m!==void 0&&(a.include_stale=m);const f=t("empty");f!==void 0&&(a.empty=f);const y=t("dry_run");return y!==void 0&&(a.dry_run=y),a}c(Ke,"parsePruneBody");async function We(n){const e=Ke(n.body),o=e.ttl_days??14,t=e.dry_run??!1,a=await pe(me());let l;return e.limit!==void 0?l=(await Z({maxNodes:e.limit,held:a,dryRun:t})).pruned.map(f=>({node_id:f.node_id,status:f.status,created:f.created})):e.empty===!0?l=(await fe({dryRun:t})).map(f=>({node_id:f,status:"empty",created:""})):l=(await X({ttlDays:o,held:a,dryRun:t,includeStale:e.include_stale??!1})).pruned.map(f=>({node_id:f.node_id,status:f.status,created:f.created})),{status:200,body:{pruned:l,dry_run:t,ttl_days:o}}}c(We,"handlePrune");const wt=[{method:"GET",pattern:"/v1/canvas/attention",handler:Ce},{method:"POST",pattern:"/v1/canvas/attention/counts",handler:Re},{method:"POST",pattern:"/v1/canvas/history/search",handler:$e},{method:"POST",pattern:"/v1/canvas/history/grep",handler:Te},{method:"GET",pattern:"/v1/canvas/history/read",handler:Ae},{method:"POST",pattern:"/v1/canvas/history/stats",handler:Ee},{method:"GET",pattern:"/v1/canvas/snapshot",handler:Pe},{method:"GET",pattern:"/v1/canvas/roster",handler:Ge},{method:"GET",pattern:"/v1/canvas/live-roots",handler:He},{method:"GET",pattern:"/v1/canvas/browse",handler:ze},{method:"GET",pattern:"/v1/canvas/graph",handler:Je},{method:"POST",pattern:"/v1/canvas/prune",ownerOnly:!0,handler:We}];export{wt as canvasRoutes,ze as handleBrowse};
+`+d.loadBody():""}`.toLowerCase();return r.some(E=>p.includes(E))}));let b=je(s,g,u);if(m){const d=new Set;b=b.filter(p=>!d.has(p.nodeId)&&d.add(p.nodeId))}const v=m?b:b.slice(y,y+i),h=!m&&y+i<b.length?H(y+i):null;return{status:200,body:{hits:v.map(d=>{const p={ref:d.ref,node:`${d.nodeName} (${d.nodeId})`,kind:d.nodeKind,source:d.source,ts:d.ts,...m?{node_id:d.nodeId}:{}};return g==="relevance"&&u!==void 0&&(p.score=u.get(d.ref)??0),a?p.body=d.loadBody():p.snippet=Re(d,r,l),p}),next_cursor:h,total:b.length}}}c(Te,"handleHistorySearch");async function $e(n){const e=(n.query.get("ref")??"").trim();if(!e.includes(":"))throw _(`ref must be <node-id>:inbox/<n>, <node-id>:session, or <node-id>:session/<n>; received: ${e}`,{received:e,next:"Get a valid ref from `crtr canvas history search`. Reports and documents are `crtr canvas read <name>`."});const o=await ue(e);if(o===null)throw _e(`no inbox entry or message for ref: ${e}`,{ref:e,next:"Re-run `crtr canvas history search` for a current ref. Reports and documents are `crtr canvas read <name>`."});if((await w(n))?.has(o.nodeId)===!1)throw new T(404,"not_found","artifact not found");const t=o.source,l=n.query.get("format")==="raw"&&o.raw!==null?o.raw:o.body;return{status:200,body:{ref:e,node:`${o.nodeName} (${o.nodeId})`,source:t,ts:o.ts,content:l}}}c($e,"handleHistoryRead");function Ae(n){for(const[t]of n.query)if(t!=="live")throw _(`unknown snapshot query parameter: ${t}`);const e=n.query.getAll("live");if(e.length>1)throw _("live must appear at most once");const o=e[0];if(o===void 0||o==="false"||o==="0")return!1;if(o==="true"||o==="1")return!0;throw _("live must be true or false")}c(Ae,"snapshotLiveOnly");async function Be(n){const e=new Set((await G()).map(r=>r.node_id)),o=await w(n),t=(await ie(P,e,Ae(n))).filter(r=>o===null||o.has(r.node_id)),a=await F(t.map(r=>r.node_id));await ae(P,t,a);const l=await x(t,async r=>{const s=r.srcRow,u=s?.host_kind??"tmux";return{node_id:r.node_id,name:r.name,title:r.handle??r.name,description:r.description??null,kind:r.kind,mode:r.mode,lifecycle:r.lifecycle??s?.lifecycle,status:r.status,cwd:r.cwd,profile_id:r.profile_id??null,parent:s?.parent??null,created:r.created,host_kind:u,enterable:u==="broker",attention_count:r.asks,...s?.cycles!=null?{cycles:s.cycles}:{},...r.mtimeMs!==void 0?{last_activity:new Date(r.mtimeMs).toISOString()}:{},ctx_tokens:r.ctx_tokens,streaming:r.streaming??!1,jobs_active:s!==void 0&&re(s.pi_pid)?(await oe(await q(),r.node_id)).length:0,waiting_for:(await se(r.node_id))?.controllerId??null,hanging:r.hanging??null,viewed:r.viewed??!1,final_report:s?.final_report??null,finalized_at:s?.finalized_at??null}}),i=new Map;for(const r of await N(o)){const s=i.get(r.from_id);s===void 0?i.set(r.from_id,[r.to_id]):s.push(r.to_id)}const m=new Set(t.map(r=>r.node_id)),f=Object.fromEntries(t.map(r=>[r.node_id,(i.get(r.node_id)??[]).filter(s=>m.has(s))]));return{status:200,body:{generated_at:I(),nodes:l,subscriptions:f}}}c(Be,"handleSnapshot");async function K(){const n=(await te()).map(t=>{const a=t.host_kind??"tmux";return{node_id:t.node_id,name:t.name,kind:t.kind,mode:t.mode,lifecycle:t.lifecycle,status:t.status,cwd:t.cwd,host_kind:a,enterable:a==="broker",parent:t.parent,created:t.created,description:t.description}}),e=(await N()).map(t=>({from_id:t.from_id,to_id:t.to_id,active:t.active,created:t.created})),o=(await ne()).map(t=>({node_id:t.nodeId,object_id:t.objectId,object_type:t.objectType,object_name:t.objectName,created:new Date(t.createdAt).toISOString()}));return{generated_at:I(),nodes:n,edges:e,object_waits:o}}c(K,"buildRoster");let C=null,M=null;function Pe(){return C===null?(C=Promise.resolve().then(async()=>await K()).finally(()=>{C=null}),C):(M===null&&(M=C.then(async()=>await K()).finally(()=>{M=null})),M)}c(Pe,"rosterCoalesced");async function Fe(n){const e=await Pe(),o=await w(n);return o===null?{status:200,body:e}:{status:200,body:{...e,nodes:e.nodes.filter(t=>o.has(t.node_id)),edges:e.edges.filter(t=>o.has(t.from_id)&&o.has(t.to_id)),object_waits:(e.object_waits??[]).filter(t=>o.has(t.node_id))}}}c(Fe,"handleRoster");function W(n){if(n.name!==""&&n.name!==n.kind)return n.name;const e=(n.description??"").trim();return e!==""?e:n.name}c(W,"liveRootName");const Ge=1440*6e4;async function qe(){const n=await B(),e=new Map(n.map(s=>[s.node_id,s])),o=new Map((await(await q()).prepare("SELECT node_id, reply_at, read_at, intent FROM nodes WHERE parent IS NULL").all()).map(s=>[s.node_id,s])),t=await we(),a=new Map;for(const s of t)a.set(s.requester_node_id,(a.get(s.requester_node_id)??0)+1);const l=new Date(Date.now()-Ge).toISOString(),i=c(s=>{const u=o.get(s.node_id);return u?.reply_at!=null&&(u.read_at==null||u.reply_at>u.read_at)||(a.get(s.node_id)??0)>0?!0:s.status!=="done"||u?.intent!=="parked"?!1:[s.created,s.telemetry_updated_at,u.reply_at].reduce((v,h)=>h!=null&&h>v?h:v,"")>=l},"keepFinished"),m=n.filter(s=>s.parent===null&&s.kind!=="human"&&(he(s.status)||i(s))),f=new Map;for(const s of await N())f.set(s.from_id,[...f.get(s.from_id)??[],s.to_id]);const y=c(s=>{const u=e.get(s)?.fault;return u&&u.link!=="broker\u2194crtrd"?ve(u):null},"faultOf"),r=await x(m,async s=>{const u=[s.node_id,...await ye(s.node_id)].filter(d=>e.get(d)?.kind!=="human"&&e.has(d)),g=new Set(u),b=t.filter(d=>g.has(d.requester_node_id)),v=o.get(s.node_id),h=v?.reply_at??null,O=v?.read_at??null;let k=s.created;for(const d of u){const p=e.get(d).telemetry_updated_at;p!=null&&p>k&&(k=p)}return h!==null&&h>k&&(k=h),{node_id:s.node_id,name:W(s),cwd:s.cwd,profile_id:s.profile_id,status:s.status,state_line:(()=>{const d=be(s.node_id)?.state.trim();return d||null})(),goal:(await ge(s.node_id))?.trim()||null,asks:b.length,first_ask_ticket_id:b[0]?.inbox_ticket_id??null,fault:u.map(y).find(d=>d!==null)??null,running_count:u.filter(d=>e.get(d).streaming===!0).length,unread:h!==null&&(O===null||h>O),last_activity:k,children:(f.get(s.node_id)??[]).filter(d=>e.has(d)&&e.get(d).kind!=="human").map(d=>{const p=e.get(d);return{node_id:d,name:W(p),status:p.status,streaming:p.streaming===!0,asks:a.get(d)??0,fault:y(d)}})}});return{generated_at:I(),rows:r}}c(qe,"buildLiveRoots");let R=null,L=null;function De(){const n=c(()=>Promise.resolve().then(qe),"run");return R===null?(R=n().finally(()=>{R=null}),R):(L===null&&(L=R.then(n).finally(()=>{L=null})),L)}c(De,"liveRootsCoalesced");async function xe(n){if(!Se(n.principal))throw new T(403,"permission_error","only the person reads the dashboard");const e=await De(),o=n.query.get("profile");return{status:200,body:o===null?e:{...e,rows:e.rows.filter(t=>t.profile_id===o)}}}c(xe,"handleLiveRoots");async function He(n){const e=await D(n.principal),o=(await B()).filter(i=>e===null||e.has(i.node_id)).map(i=>({node_id:i.node_id,name:i.name,description:i.description,kind:i.kind,mode:i.mode,lifecycle:i.lifecycle,status:i.status,cwd:i.cwd,profile_id:i.profile_id,grantee:i.grantee??"app:terminal",parent:i.parent,created:i.created,frozen_at:i.frozen_at??null,terminal_reason:i.terminal_reason??null,final_report:i.final_report??null,telemetry_tokens_in:i.telemetry_tokens_in??null,telemetry_updated_at:i.telemetry_updated_at??null,fault:i.fault&&i.fault.link!=="broker\u2194crtrd"?{...i.fault,link:i.fault.link}:null,streaming:i.streaming??!1})),t=new Set(o.map(i=>i.node_id)),a=(await N(e)).filter(i=>t.has(i.from_id)&&t.has(i.to_id));return{status:200,rawBody:V(JSON.stringify({nodes:o,edges:a}),{level:1}),headers:{"content-type":"application/gzip"}}}c(He,"handleBrowse");async function ze(n){const e=await w(n);return{status:200,body:{generated_at:I(),nodes:(await X()).filter(t=>e===null||e.has(t.node_id)).map(ke),edges:(await N(e)).filter(t=>e===null||e.has(t.from_id)&&e.has(t.to_id)).map(t=>({from_id:t.from_id,to_id:t.to_id,active:t.active,created:t.created})),focused_node_ids:(await G()).map(t=>t.node_id).filter(t=>e===null||e.has(t))}}}c(ze,"handleGraph");function Je(n){if(n==null)return{};if(typeof n!="object")throw _("prune body must be a JSON object");const e=n,o=c(r=>{const s=e[r];if(s!==void 0){if(typeof s!="number"||!Number.isFinite(s))throw _(`${r} must be a number`);return s}},"num"),t=c(r=>{const s=e[r];if(s!==void 0){if(typeof s!="boolean")throw _(`${r} must be a boolean`);return s}},"bool"),a={},l=o("limit");l!==void 0&&(a.limit=l);const i=o("ttl_days");i!==void 0&&(a.ttl_days=i);const m=t("include_stale");m!==void 0&&(a.include_stale=m);const f=t("empty");f!==void 0&&(a.empty=f);const y=t("dry_run");return y!==void 0&&(a.dry_run=y),a}c(Je,"parsePruneBody");async function Ke(n){const e=Je(n.body),o=e.ttl_days??14,t=e.dry_run??!1,a=await pe(me());let l;return e.limit!==void 0?l=(await ee({maxNodes:e.limit,held:a,dryRun:t})).pruned.map(f=>({node_id:f.node_id,status:f.status,created:f.created})):e.empty===!0?l=(await fe({dryRun:t})).map(f=>({node_id:f,status:"empty",created:""})):l=(await Z({ttlDays:o,held:a,dryRun:t,includeStale:e.include_stale??!1})).pruned.map(f=>({node_id:f.node_id,status:f.status,created:f.created})),{status:200,body:{pruned:l,dry_run:t,ttl_days:o}}}c(Ke,"handlePrune");const gt=[{method:"GET",pattern:"/v1/canvas/attention",handler:Ne},{method:"POST",pattern:"/v1/canvas/attention/counts",handler:Ce},{method:"POST",pattern:"/v1/canvas/history/search",handler:Te},{method:"POST",pattern:"/v1/canvas/history/grep",handler:Ee},{method:"GET",pattern:"/v1/canvas/history/read",handler:$e},{method:"POST",pattern:"/v1/canvas/history/stats",handler:Oe},{method:"GET",pattern:"/v1/canvas/snapshot",handler:Be},{method:"GET",pattern:"/v1/canvas/roster",handler:Fe},{method:"GET",pattern:"/v1/canvas/live-roots",handler:xe},{method:"GET",pattern:"/v1/canvas/browse",handler:He},{method:"GET",pattern:"/v1/canvas/graph",handler:ze},{method:"POST",pattern:"/v1/canvas/prune",ownerOnly:!0,handler:Ke}];export{gt as canvasRoutes,He as handleBrowse};

package/dist/daemon/api/handlers/charges.d.ts

@@ -1,3 +1,3 @@
-import { type RouteTable } from '../router.js';
+import type { RouteTable } from '../router.js';
 export declare const chargeRoutes: RouteTable;
 export declare const spendLimitRoutes: RouteTable;

package/dist/daemon/api/handlers/charges.js

@@ -1 +1 @@
-var b=Object.defineProperty;var o=(n,e)=>b(n,"name",{value:e,configurable:!0});import{ApiError as l}from"../../../api/errors.js";import{personIdAsync as w}from"../../../core/canvas/person.js";import{assertReference as v,deleteLimit as _,listCharges as q,listLimits as y,monthTotals as R,parseUsageMonth as E,upsertLimit as L}from"../../../core/ledger/index.js";import{ownerOnly as T}from"../router.js";import{integer as $}from"./runs.js";import{invalidRequest as N,objectBody as O}from"./validate.js";function k(n){const{principal:e}=n;if(e.class==="app"||e.class==="broker")return e.app;if(e.class!=="person")throw new l(403,"owner_only","charges are read by the person, a node or an app")}o(k,"granteeOf");async function F(n){const e=k(n),r=n.query.get("under"),t=n.query.get("after"),s=n.query.get("month"),i=r===null||s!==null?E(s):void 0,{charges:d,next:p}=await q({...i===void 0?{}:{month:i},...e===void 0?{}:{grantee:e},...r===null?{}:{under:v(r)},...t===null?{}:{after:t},limit:$(n.query.get("limit"),"limit",1,1e4,1e3)}),a=e===void 0&&r===null?await R(i):void 0;return{...i===void 0?{}:{month:i},charges:d,next:p,...a===void 0?{}:{totals:a}}}o(F,"listRoute");const h=["bill","subscription","key","endpoint","take","legacy"],f="person:";function g(n){const e=n.params.id??"";if(!e.startsWith(f)||e.length===f.length||e.length>128)throw new l(400,"invalid_request",`a person limit id starts with \`${f}\`; received ${e}`,{violations:[{field:"id",problem:`must start with ${f}`,received:e}]});return e}o(g,"idOf");function c(n,e,r){const t=n[e];if(t==null)return t;if(typeof t!="string"||t===""){r.push({field:e,problem:"must be a non-empty string or null",received:t});return}return t}o(c,"nullableString");async function G(n){const e=g(n),r=[],t=O(n.body,["payer","usd_per_month","funding","grantee","provider","sub"],r),s=t.payer;(typeof s!="string"||!/^(user|app):.+/.test(s))&&r.push({field:"payer",problem:"must be user:<id> or app:<id>",...s===void 0?{}:{received:s}});const i=t.usd_per_month;(typeof i!="number"||!Number.isFinite(i)||i<0)&&r.push({field:"usd_per_month",problem:"must be a number of at least 0",...i===void 0?{}:{received:i}});const d=c(t,"funding",r);typeof d=="string"&&!h.includes(d)&&r.push({field:"funding",problem:`must be one of ${h.join(", ")}`,received:d});const p=c(t,"grantee",r),a=c(t,"provider",r),m=c(t,"sub",r);r.length>0&&N("spend limit request",r);const u=t;if(u.payer.startsWith("user:")&&u.payer!==await w())throw new l(403,"owner_only","a person sets limits only on their own payer or on an app",{payer:u.payer});return await L({id:e,payer:u.payer,usd_per_month:u.usd_per_month,source:"person",...d===void 0?{}:{funding:d},...p===void 0?{}:{grantee:p},...a===void 0?{}:{provider:a},...m===void 0?{}:{sub:m}})}o(G,"setRoute");async function I(n){const e=g(n);if((await y({source:"person"})).find(t=>t.id===e)===void 0||!await _(e))throw new l(404,"not_found",`no person limit ${e}`);return{id:e,removed:!0}}o(I,"removeRoute");const B=[{method:"GET",pattern:"/v1/charges",handler:o(async n=>({status:200,body:await F(n)}),"handler")}],C=T([{method:"GET",pattern:"/v1/spend-limits",handler:o(async()=>({status:200,body:{limits:await y()}}),"handler")},{method:"PUT",pattern:"/v1/spend-limits/:id",handler:o(async n=>({status:200,body:await G(n)}),"handler")},{method:"DELETE",pattern:"/v1/spend-limits/:id",handler:o(async n=>({status:200,body:await I(n)}),"handler")}]);export{B as chargeRoutes,C as spendLimitRoutes};
+var _=Object.defineProperty;var s=(n,e)=>_(n,"name",{value:e,configurable:!0});import{ApiError as p}from"../../../api/errors.js";import{personIdAsync as $}from"../../../core/canvas/person.js";import{assertReference as q,deleteLimit as R,listCharges as E,listLimits as w,monthTotals as L,parseUsageMonth as O,upsertLimit as T}from"../../../core/ledger/index.js";import{payersOf as b}from"../../../core/ledger/read.js";import{integer as N}from"./runs.js";import{invalidRequest as W,objectBody as k}from"./validate.js";function F(n){const{principal:e}=n;if(e.class==="app"||e.class==="broker")return{app:e.app};if(e.class==="person")return e.sub===void 0?void 0:{person:e.sub};throw new p(403,"owner_only","charges are read by the person, a node or an app")}s(F,"readerOf");async function G(n){const e=F(n),r=n.query.get("under"),t=n.query.get("after"),o=n.query.get("month"),i=r===null||o!==null?O(o):void 0,{charges:a,next:d}=await E({...i===void 0?{}:{month:i},...e===void 0?{}:{reader:e},...r===null?{}:{under:q(r)},...t===null?{}:{after:t},limit:N(n.query.get("limit"),"limit",1,1e4,1e3)}),f=r!==null||e!==void 0&&!("person"in e)?void 0:await L(i,e===void 0?void 0:e.person);return{...i===void 0?{}:{month:i},charges:a,next:d,...f===void 0?{}:{totals:f}}}s(G,"listRoute");const g=["bill","subscription","key","endpoint","take","legacy"],l="person:";function m(n){const{principal:e}=n;if(e.class!=="person")throw new p(403,"owner_only","spend limits are set by a person");return e.sub===void 0?void 0:e.sub.startsWith("user:")?e.sub:`user:${e.sub}`}s(m,"limitOwner");function v(n,e){const r=n.params.id??"";if(!r.startsWith(l)||r.length===l.length||r.length>128)throw new p(400,"invalid_request",`a person limit id starts with \`${l}\`; received ${r}`,{violations:[{field:"id",problem:`must start with ${l}`,received:r}]});if(e===void 0)return r;const t=r.slice(l.length);if(t.includes("/"))throw new p(400,"invalid_request","a person limit name has no `/`",{violations:[{field:"id",problem:"must not contain /",received:r}]});return`${l}${e.slice(5)}/${t}`}s(v,"idOf");function c(n,e,r){const t=n[e];if(t==null)return t;if(typeof t!="string"||t===""){r.push({field:e,problem:"must be a non-empty string or null",received:t});return}return t}s(c,"nullableString");async function I(n){const e=m(n),r=v(n,e),t=[],o=k(n.body,["payer","usd_per_month","funding","grantee","provider","sub"],t),i=o.payer;(typeof i!="string"||!/^(user|app):.+/.test(i))&&t.push({field:"payer",problem:"must be user:<id> or app:<id>",...i===void 0?{}:{received:i}});const a=o.usd_per_month;(typeof a!="number"||!Number.isFinite(a)||a<0)&&t.push({field:"usd_per_month",problem:"must be a number of at least 0",...a===void 0?{}:{received:a}});const d=c(o,"funding",t);typeof d=="string"&&!g.includes(d)&&t.push({field:"funding",problem:`must be one of ${g.join(", ")}`,received:d});const f=c(o,"grantee",t),y=c(o,"provider",t),h=c(o,"sub",t);t.length>0&&W("spend limit request",t);const u=o;if(e===void 0){if(u.payer.startsWith("user:")&&u.payer!==await $())throw new p(403,"owner_only","a person sets limits only on their own payer or on an app",{payer:u.payer})}else if(!(await b(e)).includes(u.payer))throw new p(403,"owner_only","a person sets limits only on their own payer or on an app they hold",{payer:u.payer});return await T({id:r,payer:u.payer,usd_per_month:u.usd_per_month,source:"person",...d===void 0?{}:{funding:d},...f===void 0?{}:{grantee:f},...y===void 0?{}:{provider:y},...h===void 0?{}:{sub:h}})}s(I,"setRoute");async function P(n){const e=m(n),r=await w();if(e===void 0)return{limits:r};const t=new Set(await b(e)),o=`${l}${e.slice(5)}/`;return{limits:r.filter(i=>i.id.startsWith(o)||i.payer!==null&&t.has(i.payer)||i.account===e)}}s(P,"listLimitsRoute");async function S(n){const e=v(n,m(n));if((await w({source:"person"})).find(t=>t.id===e)===void 0||!await R(e))throw new p(404,"not_found",`no person limit ${e}`);return{id:e,removed:!0}}s(S,"removeRoute");const X=[{method:"GET",pattern:"/v1/charges",handler:s(async n=>({status:200,body:await G(n)}),"handler")}],z=[{method:"GET",pattern:"/v1/spend-limits",handler:s(async n=>({status:200,body:await P(n)}),"handler")},{method:"PUT",pattern:"/v1/spend-limits/:id",handler:s(async n=>({status:200,body:await I(n)}),"handler")},{method:"DELETE",pattern:"/v1/spend-limits/:id",handler:s(async n=>({status:200,body:await S(n)}),"handler")}];export{X as chargeRoutes,z as spendLimitRoutes};

package/dist/daemon/api/handlers/conversations.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const conversationRoutes: RouteTable;

package/dist/daemon/api/handlers/conversations.js

@@ -0,0 +1,3 @@
+var _=Object.defineProperty;var r=(e,a)=>_(e,"name",{value:a,configurable:!0});import{conversationStore as b}from"../../../core/conversation-store/index.js";import{createRowStore as T}from"../../../core/conversation-store/row-store.js";import{conversationOwner as N}from"../../../core/canvas/sessions.js";import{mayOnNode as v}from"../router.js";import{ApiError as l}from"../../../api/errors.js";const m=128*1024*1024,s=r(()=>b(),"store"),o=r(e=>e.body,"input");function d(){throw new l(404,"not_found","conversation not found")}r(d,"notFound");async function p(e,a,n=!1){const t=await N(a);if(!t)return d();if(e.principal.class==="broker"){if(t!==e.principal.node)return d()}else if(n||e.principal.class!=="person"||!await v(e.principal,"read",t))return d();return t}r(p,"authorize");const O=r(async(e,a)=>{await p(e,a);const n=e.query.get("head"),t=e.query.get("tail");if(n!==null||t!==null){if(n===null||t===null||!/^\d+$/.test(n)||!/^\d+$/.test(t)||Number(n)>m||Number(t)>m)throw new l(400,"invalid_request","head and tail must be byte counts");const i=await s().read(a,{head:Number(n),tail:Number(t)});return e.res.writeHead(200,{"content-type":"application/x-ndjson","x-conversation-path":i.path,...i.tail?{"x-conversation-tail":String(i.entries.length+1)}:{}}),e.res.end([i.header,...i.entries,...i.tail??[]].map(f=>JSON.stringify(f)+`
+`).join("")),{status:200}}const c=await s().readLines?.(a);if(!c)throw new Error("conversation store does not support streaming reads");e.res.writeHead(200,{"content-type":"application/x-ndjson","x-conversation-path":c.path});let u="";const w=r(()=>{const i=u;return u="",new Promise((f,y)=>e.res.write(i,h=>h?y(h):f()))},"flush");for await(const i of c.lines)u+=i+`
+`,u.length>=256*1024&&await w();return u&&await w(),e.res.end(),{status:200}},"readResult"),k=[{method:"POST",pattern:"/v1/conversations",maxBodyBytes:m,handler:r(async e=>e.principal.class!=="broker"||o(e).node_id!==e.principal.node?d():{status:201,body:{conversation_id:await s().create(e.principal.node,o(e).header,o(e).entries)}},"handler")},{method:"GET",pattern:"/v1/conversations",handler:r(async e=>{if(e.principal.class==="broker"){const n=e.query.get("node_id");return n&&n!==e.principal.node?d():{status:200,body:{conversations:await s().list(e.principal.node)}}}if(e.principal.class!=="person")return d();const a=e.query.get("node_id");if(!a)throw new l(400,"invalid_request","node_id is required");return await v(e.principal,"read",a)?{status:200,body:{conversations:await s().list(a)}}:d()},"handler")},{method:"POST",pattern:"/v1/conversations/:id/entries",maxBodyBytes:m,handler:r(async e=>{await p(e,e.params.id,!0);const a=process.env.CRTR_FAULT_CONVERSATION??"";if(a.startsWith("append_refuse:")){const n=Number(a.slice(14));throw process.env.CRTR_FAULT_CONVERSATION=n>1?`append_refuse:${n-1}`:"",new l(503,"unavailable","conversation append refused (fault)")}return await s().append(e.params.id,o(e).entries),a==="append_drop_after_store"?(e.res.destroy(),{status:204}):{status:204}},"handler")},{method:"POST",pattern:"/v1/conversations/:id/commit",handler:r(async e=>{if(await p(e,e.params.id,!0),process.env.CRTR_FAULT_CONVERSATION==="commit_put_fail")throw new l(503,"unavailable","conversation commit refused (fault)");return{status:200,body:{seq:await T().commit(e.params.id)}}},"handler")},{method:"GET",pattern:"/v1/conversations/:id",handler:r(async e=>await O(e,e.params.id),"handler")},{method:"GET",pattern:"/v1/conversations/:id/header",handler:r(async e=>(await p(e,e.params.id),{status:200,body:await s().header(e.params.id)}),"handler")},{method:"PUT",pattern:"/v1/conversations/:id",maxBodyBytes:m,handler:r(async e=>(await p(e,e.params.id,!0),await s().replace(e.params.id,o(e).header,o(e).entries),{status:204}),"handler")},{method:"POST",pattern:"/v1/conversations/:id/fork",handler:r(async e=>{const a=await p(e,e.params.id,!0);return o(e).node_id!==a?d():{status:201,body:{conversation_id:await s().fork(e.params.id,a,o(e).leaf_id,o(e).cwd)}}},"handler")},{method:"DELETE",pattern:"/v1/conversations/:id",handler:r(async e=>(await p(e,e.params.id,!0),await s().delete(e.params.id),{status:204}),"handler")}];export{k as conversationRoutes};

package/dist/daemon/api/handlers/crons.js

@@ -1 +1 @@
-var X=Object.defineProperty;var t=(e,n)=>X(e,"name",{value:n,configurable:!0});import{randomUUID as nn}from"node:crypto";import{relative as en,resolve as z,sep as G}from"node:path";import{ApiError as c}from"../../../api/errors.js";import{armCron as rn,parseCronSink as on,getCron as v,listCrons as P,listCronRuns as F,pokeHeldCrons as tn,setCronState as L}from"../../../core/canvas/crons.js";import{getNode as _}from"../../../core/canvas/canvas.js";import{appSpace as an,cronFolder as sn}from"../../../core/layout.js";import{appProcessesSandboxed as cn,cwdIsMounted as ln}from"../../../core/spaces/process.js";import{activeGrant as dn,activeGrantForApp as un,grantFor as pn,terminalGrant as fn}from"../../../core/grants/mirror.js";import{assertScope as Z}from"../../../core/scopes.js";import{InputError as s}from"../../../core/io.js";import{nextSlotAfter as wn}from"../../../core/wake.js";import{executeCron as _n,markSelfCanceledCronRun as hn}from"../../cron-run.js";import{toCronDTO as k,toCronRunDTO as H}from"../map.js";import{appOf as T,assertCeiling as mn,canReadNode as gn}from"../router.js";import{checkCronBirth as yn,checkCronFire as bn,cronRefusalError as vn}from"../../cron/authority.js";import{endCron as kn}from"../../cron/ended.js";import{requireUsableProfile as Sn}from"./profiles.js";import{filterAsync as $n,mapAsync as On}from"../../../core/async-array.js";import{personId as Cn}from"../../../core/canvas/person.js";function E(e,n){const r=e[n];if(typeof r!="string"||r.trim()==="")throw new s({error:"missing_field",message:`cron arm request requires a non-empty "${n}"`,field:n,next:`Send a non-empty string "${n}".`});return r}t(E,"requireString");function O(e,n,r,o){if(e==null)return o;if(typeof e=="string"&&r.includes(e))return e;throw new s({error:`bad_${n}`,message:`"${String(e)}" is not a valid ${n}`,field:n,next:`Use one of: ${r.join(", ")}.`})}t(O,"requireEnum");async function In(e){if(e==="human")return JSON.stringify({human:!0});if(e.startsWith("node:")){const n=e.slice(5).trim();if(n==="")throw new s({error:"bad_sink",message:"node sink requires a node id",field:"sink",next:'Use sink "node:<node-id>".'});if(await _(n)===null)throw new s({error:"sink_node_not_found",message:`sink node ${n} does not exist on the canvas`,field:"sink",next:"Name a live node id, or use spawn:<kind> for a delivery that outlives any one node."});return JSON.stringify({node:n})}if(e.startsWith("spawn:")){const n=e.slice(6).trim();if(n==="")throw new s({error:"bad_sink",message:"spawn sink requires a node kind",field:"sink",next:'Use sink "spawn:<kind>" (e.g. spawn:general).'});return JSON.stringify({spawn:n})}throw new s({error:"bad_sink",message:`"${e}" is not a valid sink`,field:"sink",next:"Use node:<node-id>, spawn:<kind>, or human."})}t(In,"parseSinkSpec");const qn=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;function M(e,n){if(!qn.test(e)||Number.isNaN(Date.parse(e)))throw new s({error:`bad_${n}`,message:`"${e}" is not a UTC ISO instant`,field:n,next:'Send a resolved UTC instant like "2026-06-07T09:00:00.000Z" (the client resolves the time grammar).'});return e}t(M,"requireUtcIso");function Nn(e){try{wn(e,new Date)}catch(n){throw new s({error:"bad_recur",message:`recur is not advanceable: ${n instanceof Error?n.message:String(n)}`,field:"recur",next:'Send recur JSON the daemon can advance: {"every":"6h"} or {"cron":"0 9 * * *","tz":"America/New_York"}.'})}return e}t(Nn,"requireRecur");function jn(e){let n;try{n=JSON.parse(e)}catch{throw new s({error:"bad_env_json",message:"env_json is not valid JSON",field:"env_json",next:'Send a JSON object of string values, e.g. {"API_BASE":"https://x"}.'})}if(typeof n!="object"||n===null||Array.isArray(n))throw new s({error:"bad_env_json",message:"env_json must be a JSON object",field:"env_json",next:'Send a JSON object of string values, e.g. {"API_BASE":"https://x"}.'});for(const[r,o]of Object.entries(n))if(typeof o!="string")throw new s({error:"bad_env_json",message:`env_json value for "${r}" is not a string`,field:"env_json",next:"Every env value must be a string."});return e}t(jn,"requireEnvJson");function U(e){const n=e.query.get("profile");return n!==null&&n.trim()!==""?n.trim():null}t(U,"callerProfile");function Y(e,n){return n===null||e.scope==="global"||e.profile===n}t(Y,"inScope");function K(e){return e.principal.class==="person"?null:T(e.principal)}t(K,"callerApp");async function J(e,n){return await gn(e.principal,n.grantee,n.created_by??void 0)}t(J,"visibleTo");function An(e){return typeof e.anchor_node=="string"&&e.anchor_node!==""?e.anchor_node:null}t(An,"anchorNodeOf");async function Pn(e,n,r,o,i,d){const u=typeof e.cwd=="string"&&e.cwd.trim()!==""?z(e.cwd):null;if(!cn()){if(u===null)throw new s({error:"missing_field",message:'cron arm request requires a non-empty "cwd"',field:"cwd",next:'Send a non-empty string "cwd".'});return u}const h=o!==null&&await _(o)!==null?o:void 0,l=t(async q=>await ln(n,q,h,i,void 0,d),"reaches");if(u!==null&&await l(u))return u;const a=an(n).files;if(u!==null&&e.cwd_is_default!==!0)throw new c(400,"invalid_request",`cwd ${u} is not inside a directory this app's cron runs can see, so every run would fail to start; use a directory under ${a}`,{cwd:u,default:a},void 0,{param:"cwd"});const p=r===null?null:(await _(r))?.cwd??null;return p!==null&&await l(p)?p:a}t(Pn,"resolveArmedCwd");async function Tn(e,n,r){const o=e.principal;if(o.class==="person"){const a=await fn();return{sub:a?.sub??Cn(),grant_id:a?.id??null,scopes:null,origin_run_id:null}}if(o.class==="app"){const a=await un(n);if(a===null)throw new c(401,"grant_revoked",`no active grant for ${n}`);const p=e.ceiling??o.scopes;return{sub:a.sub,grant_id:a.id,scopes:p===null?null:[...p],origin_run_id:null}}if(o.class==="cron"){const a=await bn({grantee:o.app,sub:o.sub,grant_id:o.grant,scopes:o.scopes});if(!a.allowed)throw new c(a.reason==="scope_missing"?403:401,a.reason==="scope_missing"?"scope_missing":"grant_revoked",a.message);return{sub:o.sub,grant_id:o.grant,scopes:o.scopes===null?null:[...o.scopes],origin_run_id:o.origin_run,armed_from_exec:o.from_exec}}if(o.class!=="broker")throw new c(401,"unauthorized","this caller cannot arm a cron");const i=r??await _(o.node),d=i?.grant_id??o.grant,u=i?.sub??o.sub,h=d!=null?await dn(d):await pn(n,u);if(h===null)throw new c(401,"grant_revoked","the node grant is not active");const l=i?.scopes??o.scopes;return{sub:h.sub,grant_id:h.id,scopes:l===null?null:[...l],origin_run_id:i?.run_id??o.run}}t(Tn,"armPrincipal");async function En(e){const n=e.body??{},r=E(n,"name"),o=E(n,"command"),i=M(E(n,"fire_at"),"fire_at"),d=typeof n.recur=="string"&&n.recur!==""?Nn(n.recur):null,u=typeof n.expires_at=="string"&&n.expires_at!==""?M(n.expires_at,"expires_at"):null,h=typeof n.env_json=="string"&&n.env_json!==""?jn(n.env_json):null,l=typeof n.sink=="string"&&n.sink.trim()!==""?n.sink.trim():null,a=O(n.on_output,"on_output",["silent","on-failure","always","on-change"],l?.startsWith("node:")?"on-change":"on-failure"),p=O(n.overlap,"overlap",["skip","queue","replace"],"skip"),q=O(n.tier,"tier",["normal","urgent","critical"],"normal"),x=a==="always"||a==="on-change";if(x&&l===null)throw new s({error:"sink_required",message:`on_output "${a}" delivers stdout every qualifying run \u2014 it needs a sink`,field:"sink",next:"Pass sink node:<node-id> (a living node's inbox), spawn:<kind> (birth a fresh node per delivery), or human (the humanloop inbox)."});if(!x&&l!==null)throw new s({error:"sink_unused",message:`on_output "${a}" never delivers stdout \u2014 a sink would be dead config`,field:"sink",next:'Drop the sink, or use on_output "always"/"on-change" if delivery is the point.'});const Q=l!==null?await In(l):"{}";if(l?.startsWith("spawn:")&&(mn(e.ceiling,"crtr:act"),e.principal.class==="cron")){const y=await yn({grantee:e.principal.app,sub:e.principal.sub,grant_id:e.principal.grant,scopes:e.principal.scopes,from_exec:e.principal.from_exec},{kind:l.slice(6)});if(!y.allowed)throw vn(y)}const g=T(e.principal)??"app:terminal",b=e.principal.class==="broker"?e.principal.node:e.principal.class==="cron"?null:typeof n.created_by=="string"&&n.created_by!==""?n.created_by:null;if(e.principal.class==="broker"&&n.created_by!=null&&n.created_by!==b)throw new c(403,"permission_error","a broker may only arm a cron as its own node");const m=b===null?null:await _(b);if(m!==null){if(m.grantee!==g)throw new s({error:"creator_app_mismatch",message:"creator node belongs to another app",field:"created_by",next:"Use a node of the calling app."});Z(m,"crtr:schedule"),l?.startsWith("spawn:")&&Z(m,"crtr:act")}if(n.isolated!==void 0&&typeof n.isolated!="boolean")throw new c(400,"invalid_request","isolated must be a boolean");if(m?.isolated&&n.isolated===!1)throw new c(403,"isolated_run","a cron created by an isolated node cannot escape isolation");const D=m?.isolated===!0||e.principal.class==="cron"&&e.principal.isolated;if(D&&n.isolated===!1)throw new c(403,"isolated_run","a cron created by an isolated caller cannot escape isolation");const N=D||n.isolated===!0,f=await Tn(e,g,m),j=nn(),S=N?sn(g,j):null;if(S!==null&&n.cwd_is_default!==!0){const y=en(S,typeof n.cwd=="string"&&n.cwd.trim()!==""?z(n.cwd):S);if(y===".."||y.startsWith(`..${G}`)||y.startsWith(G))throw new c(400,"invalid_request","an isolated cron must run in its own cron folder",{param:"cwd"})}const V=S??await Pn(n,g,b,An(n),N,{sub:f.sub,grantId:f.grant_id,scopes:f.scopes}),w=typeof n.anchor_node=="string"&&n.anchor_node!==""?n.anchor_node:null;if(w!==null&&await _(w)!==null&&(await _(w)).grantee!==g)throw new s({error:"anchor_app_mismatch",message:"anchor node belongs to another app",field:"anchor_node",next:"Use an anchor of the calling app."});if(w!==null&&await _(w)===null)throw new s({error:"anchor_not_found",message:`anchor node ${w} does not exist on the canvas`,field:"anchor_node",next:"Name a live node id, or drop the anchor \u2014 an unanchored cron outlives every node."});const W=n.cancel_on_wake===!0;if(W&&w===null)throw new s({error:"cancel_on_wake_needs_anchor",message:"cancel_on_wake couples the cron to a node's dormancy \u2014 it requires an anchor node",field:"anchor_node",next:"Pass anchor_node with the node whose wake should cancel this cron."});const $=n.run_timeout_s??300;if(typeof $!="number"||!Number.isInteger($)||$<=0)throw new s({error:"bad_run_timeout",message:`run_timeout_s must be a positive integer (got ${String(n.run_timeout_s)})`,field:"run_timeout_s",next:"Send the timeout in whole seconds, e.g. 300."});const A=typeof n.profile=="string"&&n.profile!==""?(await Sn(e,n.profile)).profileId:null,B=O(n.scope,"scope",["profile","global"],A!==null?"profile":"global");if(B==="profile"&&A===null)throw new s({error:"scope_needs_profile",message:'scope "profile" names the profile the cron lists and cancels within \u2014 it requires a profile',field:"profile",next:'Send a profile, or use scope "global" for a canvas-home-wide cron.'});return await rn({cron_id:j,name:r,created_by:b,grantee:g,sub:f.sub,grant_id:f.grant_id,scopes:f.scopes,origin_run_id:f.origin_run_id,armed_from_exec:f.armed_from_exec===!0,isolated:N,command:o,fire_at:i,recur:d,tz:typeof n.tz=="string"?n.tz:null,expires_at:u,anchor_node:w,cancel_on_wake:W,cwd:V,env_json:h,profile:A,scope:B,run_timeout_s:$,overlap:p,on_output:a,sink:Q,tier:q}),{status:201,body:k(await v(j),null)}}t(En,"handleArm");async function Un(e){const n=U(e),r=e.query.get("created_by");if(r==="")throw new c(400,"invalid_request","created_by must be nonempty when present");const o=await $n((n===null?await P({all:!0}):[...await P({profile:n}),...await P({global:!0})].sort((i,d)=>i.fire_at<d.fire_at?-1:i.fire_at>d.fire_at?1:0)).filter(i=>r===null||i.created_by===r),async i=>await J(e,i));return{status:200,body:await On(o,async i=>k(i,await R(i)))}}t(Un,"handleList");async function R(e){return(await F(e.cron_id))[0]??null}t(R,"lastRunOf");async function C(e){const n=e.params.cronId,r=await v(n);if(r===null||!await J(e,r))throw new c(404,"cron_not_found",`no cron ${n}`);if(!Y(r,U(e)))throw new c(404,"cron_not_found",`no cron ${n} in this profile \u2014 it is scoped to another profile`);return r}t(C,"requireCron");function I(e,n){const r=K(e);if(r!==null&&n.grantee!==r)throw new c(403,"other_app_run",`cron ${n.cron_id} belongs to another app`);return n}t(I,"requireOwnCron");async function Jn(e){const n=await C(e),r=await F(n.cron_id);return{status:200,body:{cron:k(n,r[0]??null),runs:r.map(H)}}}t(Jn,"handleShow");async function Rn(e){const n=I(e,await C(e));await L(n.cron_id,"paused");const r=await v(n.cron_id);return{status:200,body:k(r,await R(r))}}t(Rn,"handlePause");async function xn(e){const n=I(e,await C(e));await L(n.cron_id,"active");const r=await v(n.cron_id);return{status:200,body:k(r,await R(r))}}t(xn,"handleResume");async function Dn(e){const n=I(e,await C(e));if(n.run_state==="running")throw new c(409,"cron_running",`cron ${n.cron_id} has a run in flight \u2014 wait for it to settle`);const r=await _n(n,{outOfBand:!0});if(r===null)throw new c(409,"cron_running",`cron ${n.cron_id} was claimed by a concurrent run \u2014 check \`cron show\` for its result`);return{status:200,body:H(r)}}t(Dn,"handleRun");async function Wn(e){const n=new Date().toISOString();return{status:200,body:{unparked:await tn(n,K(e)),at:n}}}t(Wn,"handlePoke");function Bn(e,n){const r=e.principal;if(r.class==="cron")return r.kind==="exec"?{kind:"canceled",by:r.app}:r.cron===n.cron_id?null:{kind:"canceled",by:`cron ${r.cron}`};if(r.class==="broker"){const i=on(n.sink);return i?.kind==="node"&&i.node===r.node?null:{kind:"canceled",by:`node ${r.node}`}}const o=T(r);return{kind:"canceled",by:o===null||o==="app:terminal"?"the person":o}}t(Bn,"cancelNotice");async function zn(e){const n=e.params.cronId,r=await v(n);if(r!==null&&!await J(e,r))throw new c(404,"cron_not_found",`no cron ${n}`);if(r!==null&&!Y(r,U(e)))throw new c(404,"cron_not_found",`no cron ${n} in this profile \u2014 it is scoped to another profile`);r!==null&&I(e,r);const o=e.query.get("run_id"),i=e.principal.class==="cron"?e.principal.kind==="cron"&&o===e.principal.execution&&n===e.principal.cron:!0,d=o!==null&&i&&hn(n,o);return r!==null&&await kn(r,d?null:Bn(e,r),{preserveRunningProcess:d}),{status:204}}t(zn,"handleCancel");const le=[{method:"POST",pattern:"/v1/crons",scope:"crtr:schedule",handler:En},{method:"GET",pattern:"/v1/crons",handler:Un},{method:"GET",pattern:"/v1/crons/:cronId",handler:Jn},{method:"POST",pattern:"/v1/crons/:cronId/pause",scope:"crtr:schedule",handler:Rn},{method:"POST",pattern:"/v1/crons/:cronId/resume",scope:"crtr:schedule",handler:xn},{method:"POST",pattern:"/v1/crons/poke",scope:"crtr:schedule",handler:Wn},{method:"POST",pattern:"/v1/crons/:cronId/run",scope:"crtr:schedule",handler:Dn},{method:"DELETE",pattern:"/v1/crons/:cronId",scope:"crtr:schedule",handler:zn}];export{le as cronRoutes};
+var X=Object.defineProperty;var t=(e,n)=>X(e,"name",{value:n,configurable:!0});import{randomUUID as nn}from"node:crypto";import{relative as en,resolve as G,sep as F}from"node:path";import{ApiError as s}from"../../../api/errors.js";import{armCron as rn,parseCronSink as on,getCron as v,listCrons as P,listCronRuns as L,pokeHeldCrons as tn,setCronState as Z}from"../../../core/canvas/crons.js";import{getNode as _}from"../../../core/canvas/canvas.js";import{appSpace as an,cronFolder as sn}from"../../../core/layout.js";import{appProcessesSandboxed as cn,cwdIsMounted as ln}from"../../../core/spaces/process.js";import{activeGrant as dn,activeGrantForApp as un,grantFor as pn,terminalGrant as fn}from"../../../core/grants/mirror.js";import{assertScope as H}from"../../../core/scopes.js";import{InputError as c}from"../../../core/io.js";import{nextSlotAfter as wn}from"../../../core/wake.js";import{executeCron as _n,markSelfCanceledCronRun as hn}from"../../cron-run.js";import{toCronDTO as k,toCronRunDTO as M}from"../map.js";import{appOf as T,assertCeiling as mn,canReadNode as gn}from"../router.js";import{checkCronBirth as yn,checkCronFire as bn,cronRefusalError as vn}from"../../cron/authority.js";import{endCron as kn}from"../../cron/ended.js";import{requireUsableProfile as Sn}from"./profiles.js";import{filterAsync as $n,mapAsync as On}from"../../../core/async-array.js";import{personId as Cn}from"../../../core/canvas/person.js";function E(e,n){const r=e[n];if(typeof r!="string"||r.trim()==="")throw new c({error:"missing_field",message:`cron arm request requires a non-empty "${n}"`,field:n,next:`Send a non-empty string "${n}".`});return r}t(E,"requireString");function O(e,n,r,o){if(e==null)return o;if(typeof e=="string"&&r.includes(e))return e;throw new c({error:`bad_${n}`,message:`"${String(e)}" is not a valid ${n}`,field:n,next:`Use one of: ${r.join(", ")}.`})}t(O,"requireEnum");async function In(e){if(e==="human")return JSON.stringify({human:!0});if(e.startsWith("node:")){const n=e.slice(5).trim();if(n==="")throw new c({error:"bad_sink",message:"node sink requires a node id",field:"sink",next:'Use sink "node:<node-id>".'});if(await _(n)===null)throw new c({error:"sink_node_not_found",message:`sink node ${n} does not exist on the canvas`,field:"sink",next:"Name a live node id, or use spawn:<kind> for a delivery that outlives any one node."});return JSON.stringify({node:n})}if(e.startsWith("spawn:")){const n=e.slice(6).trim();if(n==="")throw new c({error:"bad_sink",message:"spawn sink requires a node kind",field:"sink",next:'Use sink "spawn:<kind>" (e.g. spawn:general).'});return JSON.stringify({spawn:n})}throw new c({error:"bad_sink",message:`"${e}" is not a valid sink`,field:"sink",next:"Use node:<node-id>, spawn:<kind>, or human."})}t(In,"parseSinkSpec");const qn=/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}(?:\.\d{3})?Z$/;function Y(e,n){if(!qn.test(e)||Number.isNaN(Date.parse(e)))throw new c({error:`bad_${n}`,message:`"${e}" is not a UTC ISO instant`,field:n,next:'Send a resolved UTC instant like "2026-06-07T09:00:00.000Z" (the client resolves the time grammar).'});return e}t(Y,"requireUtcIso");function Nn(e){try{wn(e,new Date)}catch(n){throw new c({error:"bad_recur",message:`recur is not advanceable: ${n instanceof Error?n.message:String(n)}`,field:"recur",next:'Send recur JSON the daemon can advance: {"every":"6h"} or {"cron":"0 9 * * *","tz":"America/New_York"}.'})}return e}t(Nn,"requireRecur");function jn(e){let n;try{n=JSON.parse(e)}catch{throw new c({error:"bad_env_json",message:"env_json is not valid JSON",field:"env_json",next:'Send a JSON object of string values, e.g. {"API_BASE":"https://x"}.'})}if(typeof n!="object"||n===null||Array.isArray(n))throw new c({error:"bad_env_json",message:"env_json must be a JSON object",field:"env_json",next:'Send a JSON object of string values, e.g. {"API_BASE":"https://x"}.'});for(const[r,o]of Object.entries(n))if(typeof o!="string")throw new c({error:"bad_env_json",message:`env_json value for "${r}" is not a string`,field:"env_json",next:"Every env value must be a string."});return e}t(jn,"requireEnvJson");function U(e){const n=e.query.get("profile");return n!==null&&n.trim()!==""?n.trim():null}t(U,"callerProfile");function K(e,n){return n===null||e.scope==="global"||e.profile===n}t(K,"inScope");function J(e){if(e.principal.class==="person"&&e.principal.sub!==void 0)throw new s(403,"permission_error","schedules are managed by the install's person, a node or an app");return e.principal.class==="person"?null:T(e.principal)}t(J,"callerApp");async function R(e,n){return await gn(e.principal,n.grantee,n.created_by??void 0)}t(R,"visibleTo");function An(e){return typeof e.anchor_node=="string"&&e.anchor_node!==""?e.anchor_node:null}t(An,"anchorNodeOf");async function Pn(e,n,r,o,i,d){const u=typeof e.cwd=="string"&&e.cwd.trim()!==""?G(e.cwd):null;if(!cn()){if(u===null)throw new c({error:"missing_field",message:'cron arm request requires a non-empty "cwd"',field:"cwd",next:'Send a non-empty string "cwd".'});return u}const h=o!==null&&await _(o)!==null?o:void 0,l=t(async q=>await ln(n,q,h,i,void 0,d),"reaches");if(u!==null&&await l(u))return u;const a=an(n).files;if(u!==null&&e.cwd_is_default!==!0)throw new s(400,"invalid_request",`cwd ${u} is not inside a directory this app's cron runs can see, so every run would fail to start; use a directory under ${a}`,{cwd:u,default:a},void 0,{param:"cwd"});const p=r===null?null:(await _(r))?.cwd??null;return p!==null&&await l(p)?p:a}t(Pn,"resolveArmedCwd");async function Tn(e,n,r){const o=e.principal;if(o.class==="person"){if(o.sub!==void 0)throw new s(403,"permission_error","schedules are managed by the install's person, a node or an app");const a=await fn();return{sub:a?.sub??Cn(),grant_id:a?.id??null,scopes:null,origin_run_id:null}}if(o.class==="app"){const a=await un(n);if(a===null)throw new s(401,"grant_revoked",`no active grant for ${n}`);const p=e.ceiling??o.scopes;return{sub:a.sub,grant_id:a.id,scopes:p===null?null:[...p],origin_run_id:null}}if(o.class==="cron"){const a=await bn({grantee:o.app,sub:o.sub,grant_id:o.grant,scopes:o.scopes});if(!a.allowed)throw new s(a.reason==="scope_missing"?403:401,a.reason==="scope_missing"?"scope_missing":"grant_revoked",a.message);return{sub:o.sub,grant_id:o.grant,scopes:o.scopes===null?null:[...o.scopes],origin_run_id:o.origin_run,armed_from_exec:o.from_exec}}if(o.class!=="broker")throw new s(401,"unauthorized","this caller cannot arm a cron");const i=r??await _(o.node),d=i?.grant_id??o.grant,u=i?.sub??o.sub,h=d!=null?await dn(d):await pn(n,u);if(h===null)throw new s(401,"grant_revoked","the node grant is not active");const l=i?.scopes??o.scopes;return{sub:h.sub,grant_id:h.id,scopes:l===null?null:[...l],origin_run_id:i?.run_id??o.run}}t(Tn,"armPrincipal");async function En(e){const n=e.body??{},r=E(n,"name"),o=E(n,"command"),i=Y(E(n,"fire_at"),"fire_at"),d=typeof n.recur=="string"&&n.recur!==""?Nn(n.recur):null,u=typeof n.expires_at=="string"&&n.expires_at!==""?Y(n.expires_at,"expires_at"):null,h=typeof n.env_json=="string"&&n.env_json!==""?jn(n.env_json):null,l=typeof n.sink=="string"&&n.sink.trim()!==""?n.sink.trim():null,a=O(n.on_output,"on_output",["silent","on-failure","always","on-change"],l?.startsWith("node:")?"on-change":"on-failure"),p=O(n.overlap,"overlap",["skip","queue","replace"],"skip"),q=O(n.tier,"tier",["normal","urgent","critical"],"normal"),W=a==="always"||a==="on-change";if(W&&l===null)throw new c({error:"sink_required",message:`on_output "${a}" delivers stdout every qualifying run \u2014 it needs a sink`,field:"sink",next:"Pass sink node:<node-id> (a living node's inbox), spawn:<kind> (birth a fresh node per delivery), or human (the humanloop inbox)."});if(!W&&l!==null)throw new c({error:"sink_unused",message:`on_output "${a}" never delivers stdout \u2014 a sink would be dead config`,field:"sink",next:'Drop the sink, or use on_output "always"/"on-change" if delivery is the point.'});const Q=l!==null?await In(l):"{}";if(l?.startsWith("spawn:")&&(mn(e.ceiling,"crtr:act"),e.principal.class==="cron")){const y=await yn({grantee:e.principal.app,sub:e.principal.sub,grant_id:e.principal.grant,scopes:e.principal.scopes,from_exec:e.principal.from_exec},{kind:l.slice(6)});if(!y.allowed)throw vn(y)}const g=T(e.principal)??"app:terminal",b=e.principal.class==="broker"?e.principal.node:e.principal.class==="cron"?null:typeof n.created_by=="string"&&n.created_by!==""?n.created_by:null;if(e.principal.class==="broker"&&n.created_by!=null&&n.created_by!==b)throw new s(403,"permission_error","a broker may only arm a cron as its own node");const m=b===null?null:await _(b);if(m!==null){if(m.grantee!==g)throw new c({error:"creator_app_mismatch",message:"creator node belongs to another app",field:"created_by",next:"Use a node of the calling app."});H(m,"crtr:schedule"),l?.startsWith("spawn:")&&H(m,"crtr:act")}if(n.isolated!==void 0&&typeof n.isolated!="boolean")throw new s(400,"invalid_request","isolated must be a boolean");if(m?.isolated&&n.isolated===!1)throw new s(403,"isolated_run","a cron created by an isolated node cannot escape isolation");const x=m?.isolated===!0||e.principal.class==="cron"&&e.principal.isolated;if(x&&n.isolated===!1)throw new s(403,"isolated_run","a cron created by an isolated caller cannot escape isolation");const N=x||n.isolated===!0,f=await Tn(e,g,m),j=nn(),S=N?sn(g,j):null;if(S!==null&&n.cwd_is_default!==!0){const y=en(S,typeof n.cwd=="string"&&n.cwd.trim()!==""?G(n.cwd):S);if(y===".."||y.startsWith(`..${F}`)||y.startsWith(F))throw new s(400,"invalid_request","an isolated cron must run in its own cron folder",{param:"cwd"})}const V=S??await Pn(n,g,b,An(n),N,{sub:f.sub,grantId:f.grant_id,scopes:f.scopes}),w=typeof n.anchor_node=="string"&&n.anchor_node!==""?n.anchor_node:null;if(w!==null&&await _(w)!==null&&(await _(w)).grantee!==g)throw new c({error:"anchor_app_mismatch",message:"anchor node belongs to another app",field:"anchor_node",next:"Use an anchor of the calling app."});if(w!==null&&await _(w)===null)throw new c({error:"anchor_not_found",message:`anchor node ${w} does not exist on the canvas`,field:"anchor_node",next:"Name a live node id, or drop the anchor \u2014 an unanchored cron outlives every node."});const B=n.cancel_on_wake===!0;if(B&&w===null)throw new c({error:"cancel_on_wake_needs_anchor",message:"cancel_on_wake couples the cron to a node's dormancy \u2014 it requires an anchor node",field:"anchor_node",next:"Pass anchor_node with the node whose wake should cancel this cron."});const $=n.run_timeout_s??300;if(typeof $!="number"||!Number.isInteger($)||$<=0)throw new c({error:"bad_run_timeout",message:`run_timeout_s must be a positive integer (got ${String(n.run_timeout_s)})`,field:"run_timeout_s",next:"Send the timeout in whole seconds, e.g. 300."});const A=typeof n.profile=="string"&&n.profile!==""?(await Sn(e,n.profile)).profileId:null,z=O(n.scope,"scope",["profile","global"],A!==null?"profile":"global");if(z==="profile"&&A===null)throw new c({error:"scope_needs_profile",message:'scope "profile" names the profile the cron lists and cancels within \u2014 it requires a profile',field:"profile",next:'Send a profile, or use scope "global" for a canvas-home-wide cron.'});return await rn({cron_id:j,name:r,created_by:b,grantee:g,sub:f.sub,grant_id:f.grant_id,scopes:f.scopes,origin_run_id:f.origin_run_id,armed_from_exec:f.armed_from_exec===!0,isolated:N,command:o,fire_at:i,recur:d,tz:typeof n.tz=="string"?n.tz:null,expires_at:u,anchor_node:w,cancel_on_wake:B,cwd:V,env_json:h,profile:A,scope:z,run_timeout_s:$,overlap:p,on_output:a,sink:Q,tier:q}),{status:201,body:k(await v(j),null)}}t(En,"handleArm");async function Un(e){J(e);const n=U(e),r=e.query.get("created_by");if(r==="")throw new s(400,"invalid_request","created_by must be nonempty when present");const o=await $n((n===null?await P({all:!0}):[...await P({profile:n}),...await P({global:!0})].sort((i,d)=>i.fire_at<d.fire_at?-1:i.fire_at>d.fire_at?1:0)).filter(i=>r===null||i.created_by===r),async i=>await R(e,i));return{status:200,body:await On(o,async i=>k(i,await D(i)))}}t(Un,"handleList");async function D(e){return(await L(e.cron_id))[0]??null}t(D,"lastRunOf");async function C(e){const n=e.params.cronId,r=await v(n);if(r===null||!await R(e,r))throw new s(404,"cron_not_found",`no cron ${n}`);if(!K(r,U(e)))throw new s(404,"cron_not_found",`no cron ${n} in this profile \u2014 it is scoped to another profile`);return r}t(C,"requireCron");function I(e,n){const r=J(e);if(r!==null&&n.grantee!==r)throw new s(403,"other_app_run",`cron ${n.cron_id} belongs to another app`);return n}t(I,"requireOwnCron");async function Jn(e){const n=await C(e),r=await L(n.cron_id);return{status:200,body:{cron:k(n,r[0]??null),runs:r.map(M)}}}t(Jn,"handleShow");async function Rn(e){const n=I(e,await C(e));await Z(n.cron_id,"paused");const r=await v(n.cron_id);return{status:200,body:k(r,await D(r))}}t(Rn,"handlePause");async function Dn(e){const n=I(e,await C(e));await Z(n.cron_id,"active");const r=await v(n.cron_id);return{status:200,body:k(r,await D(r))}}t(Dn,"handleResume");async function Wn(e){const n=I(e,await C(e));if(n.run_state==="running")throw new s(409,"cron_running",`cron ${n.cron_id} has a run in flight \u2014 wait for it to settle`);const r=await _n(n,{outOfBand:!0});if(r===null)throw new s(409,"cron_running",`cron ${n.cron_id} was claimed by a concurrent run \u2014 check \`cron show\` for its result`);return{status:200,body:M(r)}}t(Wn,"handleRun");async function xn(e){const n=new Date().toISOString();return{status:200,body:{unparked:await tn(n,J(e)),at:n}}}t(xn,"handlePoke");function Bn(e,n){const r=e.principal;if(r.class==="cron")return r.kind==="exec"?{kind:"canceled",by:r.app}:r.cron===n.cron_id?null:{kind:"canceled",by:`cron ${r.cron}`};if(r.class==="broker"){const i=on(n.sink);return i?.kind==="node"&&i.node===r.node?null:{kind:"canceled",by:`node ${r.node}`}}const o=T(r);return{kind:"canceled",by:o===null||o==="app:terminal"?"the person":o}}t(Bn,"cancelNotice");async function zn(e){const n=e.params.cronId,r=await v(n);if(r!==null&&!await R(e,r))throw new s(404,"cron_not_found",`no cron ${n}`);if(r!==null&&!K(r,U(e)))throw new s(404,"cron_not_found",`no cron ${n} in this profile \u2014 it is scoped to another profile`);r!==null&&I(e,r);const o=e.query.get("run_id"),i=e.principal.class==="cron"?e.principal.kind==="cron"&&o===e.principal.execution&&n===e.principal.cron:!0,d=o!==null&&i&&hn(n,o);return r!==null&&await kn(r,d?null:Bn(e,r),{preserveRunningProcess:d}),{status:204}}t(zn,"handleCancel");const le=[{method:"POST",pattern:"/v1/crons",scope:"crtr:schedule",handler:En},{method:"GET",pattern:"/v1/crons",handler:Un},{method:"GET",pattern:"/v1/crons/:cronId",handler:Jn},{method:"POST",pattern:"/v1/crons/:cronId/pause",scope:"crtr:schedule",handler:Rn},{method:"POST",pattern:"/v1/crons/:cronId/resume",scope:"crtr:schedule",handler:Dn},{method:"POST",pattern:"/v1/crons/poke",scope:"crtr:schedule",handler:xn},{method:"POST",pattern:"/v1/crons/:cronId/run",scope:"crtr:schedule",handler:Wn},{method:"DELETE",pattern:"/v1/crons/:cronId",scope:"crtr:schedule",handler:zn}];export{le as cronRoutes};

package/dist/daemon/api/handlers/daemon.js

@@ -1 +1 @@
-var i=Object.defineProperty;var r=(e,t)=>i(e,"name",{value:t,configurable:!0});import{toMigrateStateDTO as u}from"../map.js";import{migrateLooseKeys as m}from"../../../core/layout-migrate/loose-keys.js";import{boundDaemonControl as s}from"../../control.js";import{ownerOnly as c}from"../router.js";function l(){const e=s();if(e===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot hand over"};const{graceMs:t}=e.requestHandover();return{status:202,body:{accepted:!0,predecessor_pid:process.pid,predecessor_epoch:e.epoch,grace_ms:t}}}r(l,"handleRestart");async function y(e){if(e.body!==void 0)throw{status:400,code:"invalid_request",message:"admission request must not include a body"};const t=s();if(t===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot admit normal work"};return{status:200,body:await t.admitStartup()}}r(y,"handleAdmit");async function h(e){const t=s();if(t===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot run the canvas import"};const o=e.body;if(o!==void 0&&(typeof o!="object"||o===null||Array.isArray(o)))throw{status:400,code:"invalid_request",message:"migration request body must be an object"};const n=o??{};if(n.dry_run!==void 0&&typeof n.dry_run!="boolean")throw{status:400,code:"invalid_request",message:"dry_run must be a boolean"};const d=m(n.dry_run===!0),a=await t.repairMigrations({dryRun:n.dry_run===!0});return{status:200,body:{...u(a.result,{resumed:a.resumed,resumeError:a.resumeError}),loose_keys:d}}}r(h,"handleMigrate");const g=c([{method:"POST",pattern:"/v1/daemon/restart",handler:r(e=>l(),"handler")},{method:"POST",pattern:"/v1/daemon/migrate",handler:h},{method:"POST",pattern:"/v1/daemon/admit",handler:y}]);export{g as daemonRoutes};
+var i=Object.defineProperty;var r=(e,t)=>i(e,"name",{value:t,configurable:!0});import{toMigrateStateDTO as u}from"../map.js";import{migrateLooseKeys as m}from"../../../core/layout-migrate/loose-keys.js";import{boundDaemonControl as s}from"../../control.js";import{ownerOnly as c}from"../router.js";function l(){const e=s();if(e===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot hand over"};const{graceMs:t}=e.requestHandover();return{status:202,body:{accepted:!0,predecessor_pid:process.pid,predecessor_epoch:e.epoch,grace_ms:t}}}r(l,"handleRestart");async function y(e){if(e.body!==void 0)throw{status:400,code:"invalid_request",message:"admission request must not include a body"};const t=s();if(t===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot admit normal work"};return{status:200,body:await t.admitStartup()}}r(y,"handleAdmit");async function h(e){const t=s();if(t===null)throw{status:503,code:"daemon_control_unavailable",message:"this API server is not hosted by a live daemon and cannot run the canvas import"};const o=e.body;if(o!==void 0&&(typeof o!="object"||o===null||Array.isArray(o)))throw{status:400,code:"invalid_request",message:"migration request body must be an object"};const n=o??{};if(n.dry_run!==void 0&&typeof n.dry_run!="boolean")throw{status:400,code:"invalid_request",message:"dry_run must be a boolean"};const d=await m(n.dry_run===!0),a=await t.repairMigrations({dryRun:n.dry_run===!0});return{status:200,body:{...u(a.result,{resumed:a.resumed,resumeError:a.resumeError}),loose_keys:d}}}r(h,"handleMigrate");const g=c([{method:"POST",pattern:"/v1/daemon/restart",handler:r(e=>l(),"handler")},{method:"POST",pattern:"/v1/daemon/migrate",handler:h},{method:"POST",pattern:"/v1/daemon/admit",handler:y}]);export{g as daemonRoutes};

package/dist/daemon/api/handlers/delivery.d.ts

@@ -1,2 +1,2 @@
-import type { RouteTable } from '../router.js';
+import { type RouteTable } from '../router.js';
 export declare const deliveryRoutes: RouteTable;

package/dist/daemon/api/handlers/delivery.js

@@ -1 +1 @@
-var _=Object.defineProperty;var c=(e,n)=>_(e,"name",{value:n,configurable:!0});import{ApiError as r}from"../../../api/errors.js";import{withCanvasWrite as f}from"../../../core/canvas/db.js";import{readerForNode as l}from"../../../core/graph/reader.js";import{noteNodeBooting as j}from"../../../core/graph/repo-sync/index.js";import{checkoutsForCwd as h,warmCheckoutIdentities as k}from"../../../core/graph/repo-sync/repos.js";import{getNode as N}from"../../../core/canvas/canvas.js";import{DRY_RUN_ONLY as q,deliver as A,hypotheticalFrom as C,hypotheticalReader as I,inspect as p}from"../../../core/substrate/delivery/deliver.js";import{requireCurrentExecution as w}from"./broker-recovery.js";const O=["boot","system-prompt","compact","persona","file-read","command","pre-command","slash-command","names",...q];function m(e){if(typeof e!="object"||e===null||Array.isArray(e))throw new r(400,"usage","delivery requires a JSON body");const n=e;if(!O.includes(n.activity))throw new r(400,"usage",`invalid delivery activity: ${String(n.activity)}`);if(n.subject!==void 0&&typeof n.subject!="string")throw new r(400,"usage","delivery subject must be a string");return n}c(m,"parse");function b(e){if(e.principal.class!=="person"&&e.principal.class!=="broker")throw new r(403,"permission_error","a delivery dry run is available to a person or a node only")}c(b,"requirePerson");function R(e){if(typeof e!="object"||e===null||Array.isArray(e))throw new r(400,"usage","hypothetical must be an object");const n=c((o,s)=>{if(o!==void 0){if(typeof o!="string"||o==="")throw new r(400,"usage",`hypothetical.${s} must be a non-empty string`);return o}},"str"),t=n(e.cwd,"cwd");if(t!==void 0&&!t.startsWith("/"))throw new r(400,"usage","hypothetical.cwd must be an absolute path");if(e.mode!==void 0&&e.mode!=="base"&&e.mode!=="orchestrator")throw new r(400,"usage","hypothetical.mode must be base or orchestrator");if(e.lifecycle!==void 0&&e.lifecycle!=="terminal"&&e.lifecycle!=="resident")throw new r(400,"usage","hypothetical.lifecycle must be terminal or resident");if(e.has_manager!==void 0&&typeof e.has_manager!="boolean")throw new r(400,"usage","hypothetical.has_manager must be a boolean");if(e.depth!==void 0&&(!Number.isInteger(e.depth)||e.depth<0))throw new r(400,"usage","hypothetical.depth must be a non-negative integer");const i={};t!==void 0&&(i.cwd=t),e.profile!==void 0&&(i.profile=e.profile===null?null:n(e.profile,"profile"));const d=n(e.grantee,"grantee");d!==void 0&&(i.grantee=d);const a=n(e.kind,"kind");return a!==void 0&&(i.kind=a),e.mode!==void 0&&(i.mode=e.mode),e.lifecycle!==void 0&&(i.lifecycle=e.lifecycle),e.has_manager!==void 0&&(i.hasManager=e.has_manager),e.depth!==void 0&&(i.depth=e.depth),i}c(R,"hypotheticalOf");async function y(e,n){const t=e===void 0?void 0:await N(e);for(const i of[t?.cwd,n])i&&k(i)}c(y,"warmDeliveryCwds");async function S(e){b(e);const n=m(e.body);if(n.node!==void 0&&typeof n.node!="string")throw new r(400,"usage","node must be a node id");const t={activity:n.activity,...n.subject!==void 0?{subject:n.subject}:{}};await y(n.node,n.hypothetical?.cwd);const{result:i,plan:d}=await f(async a=>{if(n.hypothetical===void 0){if(n.node===void 0)throw new r(400,"usage","a delivery dry run names a node, a hypothetical node, or both");return await p(a,await l(a,n.node,async v=>await h(a,v)),t,n.subject_override)}const o=R(n.hypothetical),s=n.node!==void 0?await C(n.node,o):{...o,cwd:o.cwd??""};if(s.cwd==="")throw new r(400,"usage","a hypothetical node needs a cwd");const{reader:u,subject:g}=await I(a,s);return await p(a,u,t,n.subject_override,g)},{rollback:!0});return{status:200,body:{...i,plan:d}}}c(S,"handleDryRun");async function D(e){const n=e.params.id,t=m(e.body),i={activity:t.activity,...t.subject!==void 0?{subject:t.subject}:{},...t.inherited===!0?{inherited:!0}:{}};if(t.dry_run===!0){b(e),await y(n);const{result:a,plan:o}=await f(async s=>await p(s,await l(s,n,async u=>await h(s,u)),i,t.subject_override),{rollback:!0});return{status:200,body:{...a,plan:o}}}if(e.principal.class==="broker"&&e.principal.node!==n)throw new r(403,"permission_error","delivery is performed by the node's own broker");return await w(n,t.expected_execution_id),t.activity==="boot"&&(await j(n),await w(n,t.expected_execution_id)),await y(n),{status:200,body:await f(async a=>await A(a,await l(a,n,async o=>await h(a,o)),i))}}c(D,"handleDelivery");const L=[{method:"POST",pattern:"/v1/nodes/:id/delivery",handler:D},{method:"POST",pattern:"/v1/delivery/dry-run",handler:S}];export{L as deliveryRoutes};
+var _=Object.defineProperty;var c=(e,t)=>_(e,"name",{value:t,configurable:!0});import{ApiError as n}from"../../../api/errors.js";import{openDb as j,withCanvasWrite as f}from"../../../core/canvas/db.js";import{readerForNode as l,warmNodeRepos as k}from"../../../core/graph/reader.js";import{noteNodeBooting as A}from"../../../core/graph/repo-sync/index.js";import{checkoutsForCwd as h,warmCheckoutIdentities as N}from"../../../core/graph/repo-sync/repos.js";import{DRY_RUN_ONLY as q,deliver as C,hypotheticalFrom as R,hypotheticalReader as D,inspect as p}from"../../../core/substrate/delivery/deliver.js";import{actsAsPerson as I}from"../router.js";import{requireCurrentExecution as w}from"./broker-recovery.js";const O=["boot","system-prompt","compact","persona","file-read","command","pre-command","slash-command","names",...q];function m(e){if(typeof e!="object"||e===null||Array.isArray(e))throw new n(400,"usage","delivery requires a JSON body");const t=e;if(!O.includes(t.activity))throw new n(400,"usage",`invalid delivery activity: ${String(t.activity)}`);if(t.subject!==void 0&&typeof t.subject!="string")throw new n(400,"usage","delivery subject must be a string");return t}c(m,"parse");function b(e){if(!I(e.principal)&&e.principal.class!=="broker")throw new n(403,"permission_error","a delivery dry run is available to a person or a node only")}c(b,"requirePerson");function S(e){if(typeof e!="object"||e===null||Array.isArray(e))throw new n(400,"usage","hypothetical must be an object");const t=c((o,s)=>{if(o!==void 0){if(typeof o!="string"||o==="")throw new n(400,"usage",`hypothetical.${s} must be a non-empty string`);return o}},"str"),i=t(e.cwd,"cwd");if(i!==void 0&&!i.startsWith("/"))throw new n(400,"usage","hypothetical.cwd must be an absolute path");if(e.mode!==void 0&&e.mode!=="base"&&e.mode!=="orchestrator")throw new n(400,"usage","hypothetical.mode must be base or orchestrator");if(e.lifecycle!==void 0&&e.lifecycle!=="terminal"&&e.lifecycle!=="resident")throw new n(400,"usage","hypothetical.lifecycle must be terminal or resident");if(e.has_manager!==void 0&&typeof e.has_manager!="boolean")throw new n(400,"usage","hypothetical.has_manager must be a boolean");if(e.depth!==void 0&&(!Number.isInteger(e.depth)||e.depth<0))throw new n(400,"usage","hypothetical.depth must be a non-negative integer");const r={};i!==void 0&&(r.cwd=i),e.profile!==void 0&&(r.profile=e.profile===null?null:t(e.profile,"profile"));const u=t(e.grantee,"grantee");u!==void 0&&(r.grantee=u);const a=t(e.kind,"kind");return a!==void 0&&(r.kind=a),e.mode!==void 0&&(r.mode=e.mode),e.lifecycle!==void 0&&(r.lifecycle=e.lifecycle),e.has_manager!==void 0&&(r.hasManager=e.has_manager),e.depth!==void 0&&(r.depth=e.depth),r}c(S,"hypotheticalOf");async function y(e,t){e!==void 0&&await k(await j(),e),t&&await N(t)}c(y,"warmDeliveryCwds");async function P(e){b(e);const t=m(e.body);if(t.node!==void 0&&typeof t.node!="string")throw new n(400,"usage","node must be a node id");const i={activity:t.activity,...t.subject!==void 0?{subject:t.subject}:{}};await y(t.node,t.hypothetical?.cwd);const{result:r,plan:u}=await f(async a=>{if(t.hypothetical===void 0){if(t.node===void 0)throw new n(400,"usage","a delivery dry run names a node, a hypothetical node, or both");return await p(a,await l(a,t.node,async v=>await h(a,v)),i,t.subject_override)}const o=S(t.hypothetical),s=t.node!==void 0?await R(t.node,o):{...o,cwd:o.cwd??""};if(s.cwd==="")throw new n(400,"usage","a hypothetical node needs a cwd");const{reader:d,subject:g}=await D(a,s);return await p(a,d,i,t.subject_override,g)},{rollback:!0});return{status:200,body:{...r,plan:u}}}c(P,"handleDryRun");async function T(e){const t=e.params.id,i=m(e.body),r={activity:i.activity,...i.subject!==void 0?{subject:i.subject}:{},...i.inherited===!0?{inherited:!0}:{}};if(i.dry_run===!0){b(e),await y(t);const{result:a,plan:o}=await f(async s=>await p(s,await l(s,t,async d=>await h(s,d)),r,i.subject_override),{rollback:!0});return{status:200,body:{...a,plan:o}}}if(e.principal.class==="broker"&&e.principal.node!==t)throw new n(403,"permission_error","delivery is performed by the node's own broker");return await w(t,i.expected_execution_id),i.activity==="boot"&&(await A(t),await w(t,i.expected_execution_id)),await y(t),{status:200,body:await f(async a=>await C(a,await l(a,t,async o=>await h(a,o)),r))}}c(T,"handleDelivery");const U=[{method:"POST",pattern:"/v1/nodes/:id/delivery",handler:T},{method:"POST",pattern:"/v1/delivery/dry-run",handler:P}];export{U as deliveryRoutes};

package/dist/daemon/api/handlers/docs.js

@@ -1 +1 @@
-var oe=Object.defineProperty;var u=(n,e)=>oe(n,"name",{value:e,configurable:!0});import{ApiError as k}from"../../../api/errors.js";import{DOC_KINDS as P,DOC_UNSET_FIELDS as H}from"../../../api/dto/docs.js";import{PRIVACY_LEVELS_DTO as U}from"../../../api/dto/objects.js";import{withCanvasWrite as A}from"../../../core/canvas/db.js";import{CrtrError as re}from"../../../core/errors.js";import{emitEvent as ie}from"../../../core/events/emit.js";import{canChange as ae,spaceOf as se}from"../../../core/graph/access.js";import{get as $}from"../../../core/graph/bodies.js";import{deleteDocument as ce,documentRecord as I,editDocument as de,heads as x,history as ue,linksIn as V,moveDocument as fe,readBase as le,setDocumentRecord as me,withCurrentNames as pe,writeDocument as he}from"../../../core/graph/documents.js";import{resolveName as K}from"../../../core/graph/names.js";import{getById as L}from"../../../core/graph/objects.js";import{noteRepoDocumentsChanged as we}from"../../../core/graph/repo-sync/index.js";import{checkoutsForCwd as ye}from"../../../core/graph/repo-sync/repos.js";import{lintRules as ge,rulesOf as ve}from"../../../core/graph/rules.js";import{unifiedDiff as _e}from"../../../core/graph/diff.js";import{ownerForGrantee as be}from"../../../core/graph/objects.js";import{ownerFromFlag as W,readerFor as E,resolveRef as G}from"../reader.js";import{appCaller as X,asApiError as ke,requireOwnNamespace as Ae}from"./schemas.js";import{filterAsync as Ee,flatMapAsync as Oe}from"../../../core/async-array.js";function g(n,e,t,o,a={}){return new k(n,e,t,{...a,error:e,message:t,next:o})}u(g,"refuse");const b=u((n,e)=>new k(400,"invalid_request",n,e),"invalid");function R(n){const e=n.body;if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw b("the request body must be a JSON object");return e}u(R,"bodyOf");const C=u(async n=>async e=>await ye(n,e),"reposFnFor");function N(n,e){if(n instanceof re){const t=n.details;if(n.code==="read_first")throw g(409,"read_first",n.message,`Read it first with \`crtr canvas read ${e?.id??"<ref>"}\`, then rerun the edit.`,t??{});if(n.code==="conflict")throw new k(409,"name_taken",n.message,t);if(n.code==="forbidden")throw typeof t?.next=="string"?g(403,"forbidden",n.message,t.next,t):new k(403,"forbidden",n.message,t);if(n.code==="scope_missing")throw g(403,"scope_missing",n.message,`Launch the run with \`${String(t?.scope)}\` in its scopes list.`,t??{});if(t?.rule==="repo-public-only")throw g(422,"repo_documents_are_public",n.message,'Own it as `user` and add a rule with `if: {"repo": "<handle>"}` so it loads only in that repo.')}throw ke(n)}u(N,"mapGraphError");async function M(n,e,t){const o=await G(n,e,decodeURIComponent(t));if("remote"in o)throw g(404,"not_found",z(o.remote),"Check the name with `crtr canvas search`.");if("deleted"in o)throw new k(404,"not_found",`${o.deleted.name} is deleted`,{id:o.deleted.id,deleted:!0});if(o.type!=="document")throw b(`${t} is a ${o.type}, not a document`);return o}u(M,"refDocument");function z(n){return`no object named ${n} on this runtime; it may be on another runtime, or the name may be misspelled`}u(z,"remoteMessage");async function $e(n,e){const t=e.owner===null?null:await L(n,e.owner);return t?t.type==="node"?t.id:t.name:""}u($e,"ownerHandle");async function j(n,e){const t=await $e(n,e);return t?`${t}/${e.name}`:e.name}u(j,"canonicalName");async function je(n,e){const t=e.owner===null?null:await L(n,e.owner),o=t?{id:t.id,type:t.type,handle:t.type==="node"?t.id:t.name}:null;return{id:e.id,type:e.type,kind:e.kind,owner:o,privacy:e.privacy,name:e.name,preview:e.preview??"",created_at:e.created_at,deleted_at:e.deleted_at,...e.type==="document"?{schema_type:e.schema_type??null}:{}}}u(je,"objectDTO");async function De(n,e){const t=e.owner===null?null:await L(n,e.owner);return t?.type==="repo"?t:null}u(De,"repoOwner");async function S(n,e,t,o){const a=[...new Map(await Oe(t,async f=>{const r=await De(n,f);return r?[[r.id,r]]:[]})).values()],c=e.class==="node"?e.cwd:o,s=e.class==="node"?[...e.checkouts,...e.projectCheckouts].map(f=>f.root):[];return{repos:a,dirs:[...new Set([...c!==void 0?[c]:[],...s])]}}u(S,"repoChange");async function T(n){for(const e of n.repos)try{await we(e,n.dirs)}catch(t){ie({level:"warn",event:"repo_sync.failed",outcome:"failed",error:t,fields:{repo:e.name,step:"export",reason:t instanceof Error?t.message:String(t)}})}}u(T,"syncChanged");const Y=/^[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/;function Re(n,e){if(n===void 0)return;if(!Array.isArray(n)){e.push("`rules` must be a list");return}const t=n.map(a=>{if(typeof a!="object"||a===null||Array.isArray(a))return a;const{match_frontmatter:c,...s}=a;return"matchFrontmatter"in s?{...s,match_frontmatter:s.matchFrontmatter}:c===void 0?s:{...s,matchFrontmatter:c}}),o=ge(t);if(o){e.push(o.replaceAll("matchFrontmatter","match_frontmatter"));return}return t}u(Re,"rulesFromDTO");function Z(n,e){const t={},o=u(r=>{const d=n[r];if(d!==void 0){if(typeof d!="string"){e.push(`\`${r}\` must be a string`);return}return d}},"str"),a=o("preview");a!==void 0&&(a.trim()===""||/[\r\n]/.test(a)?e.push("`preview` must be one non-empty line"):t.preview=a);const c=o("summary");c!==void 0&&(t.summary=c);const s=o("why_it_exists");if(s!==void 0&&(t.whyItExists=s),n.privacy!==void 0&&(U.includes(n.privacy)?t.privacy=n.privacy:e.push(`\`privacy\` must be one of ${U.join(", ")}`)),n.unlisted!==void 0&&(typeof n.unlisted!="boolean"?e.push("`unlisted` must be a boolean"):t.unlisted=n.unlisted),n.lint_ignore!==void 0){const r=n.lint_ignore;!Array.isArray(r)||r.some(d=>typeof d!="string")?e.push("`lint_ignore` must be a list of strings"):t.lintIgnore=r}if(n.extensions!==void 0){const r=n.extensions;typeof r!="object"||r===null||Array.isArray(r)||Object.values(r).some(d=>typeof d!="object"||d===null||Array.isArray(d))?e.push("`extensions` must map each plugin to an object of fields"):t.extensions=r}const f=Re(n.rules,e);return f!==void 0&&(t.rules=f),t}u(Z,"fieldsFrom");function J(n){if(n.length>0)throw b(n.join("; "),{errors:n})}u(J,"failOn");async function Q(n,e,t,o){const a=await Ee(V(t),async c=>"remote"in await K(n,e,c));return{...o.length>0?{unresolved_links:o}:{},...a.length>0?{remote_links:a}:{}}}u(Q,"linkReport");async function Ce(n){const e=R(n),t=[],o=e.name;(typeof o!="string"||!Y.test(o))&&t.push("`name` must be segments of letters, digits, `_` or `-` joined by `/`"),typeof e.body!="string"&&t.push("`body` must be a string"),typeof e.preview!="string"&&t.push("`preview` is required");const a=e.kind??"knowledge";P.includes(a)||t.push(a==="report"?"reports are written only by `crtr push`":`\`kind\` must be one of ${P.join(", ")}`);const c=Z(e,t);e.cwd!==void 0&&typeof e.cwd!="string"&&t.push("`cwd` must be a string");const s=e.schema_type;s!==void 0&&typeof s!="string"&&t.push("`schema_type` must be a string");const f=e.relations;f!==void 0&&(!Array.isArray(f)||f.some(i=>typeof i!="object"||i===null||typeof i.relation!="string"||typeof i.subject!="string"))&&t.push("`relations` must be a list of {relation, subject} strings"),J(t);const r=e,{dto:d,change:w}=await A(async i=>{const l=await E(i,n);r.schema_type!==void 0?await Ae(i,X(n).app,r.schema_type):r.relations!==void 0&&X(n);const m=r.owner==="user"&&l.class==="app"&&l.sub!==void 0?await be(i,l.sub.startsWith("user:")?l.sub:`user:${l.sub}`):await W(i,l,r.owner,r.cwd);try{const{object:h,unresolved:_}=await he(i,l,{...c,owner:m,name:r.name,kind:a,preview:c.preview,privacy:c.privacy??"public",...r.schema_type!==void 0?{schemaType:r.schema_type}:{},...r.relations!==void 0?{relations:r.relations}:{}},r.body,await C(i));return{dto:{id:h.id,name:await j(i,h),...await Q(i,l,r.body,_)},change:await S(i,l,[h],r.cwd)}}catch(h){N(h)}});return await T(w),d}u(Ce,"write");function Ne(n,e){let t=n;e.forEach(({old:o,new:a},c)=>{const s=o===""?-1:t.indexOf(o);if(s<0)throw g(422,"replace_no_match",`replace[${c}]: old text not found in the revision you read`,"Copy the old text exactly from your last read and rerun.",{index:c});if(t.indexOf(o,s+1)>=0)throw g(422,"replace_ambiguous",`replace[${c}]: old text occurs more than once`,"Include more surrounding text so the old text matches once, and rerun.",{index:c});t=t.slice(0,s)+a+t.slice(s+o.length)})}u(Ne,"checkReplacements");async function Se(n){const e=R(n),t=[],o=e.body!==void 0,a=e.replace!==void 0;o&&a&&t.push("give `body` or `replace`, not both"),o&&typeof e.body!="string"&&t.push("`body` must be a string");const c=e.replace;a&&(!Array.isArray(c)||c.length===0||c.some(i=>typeof i!="object"||i===null||typeof i.old!="string"||typeof i.new!="string"))&&t.push("`replace` must be a non-empty list of {old, new} strings"),(typeof e.rationale!="string"||e.rationale.trim()==="")&&t.push("`rationale` is required"),e.verbatim!==void 0&&typeof e.verbatim!="boolean"&&t.push("`verbatim` must be a boolean"),e.base!==void 0&&(typeof e.base!="string"||e.base==="")&&t.push("`base` must be a non-empty heads key"),e.base!==void 0&&!o&&!a&&t.push("`base` applies only to a `body` or `replace` edit");const s=Z(e,t),f=e.unset??[];if(!Array.isArray(f)||f.some(i=>!H.includes(i)))t.push(`\`unset\` takes only ${H.join(", ")}`);else for(const i of f)i==="summary"&&(s.summary=null),i==="why_it_exists"&&(s.whyItExists=null),i==="unlisted"&&(s.unlisted=!1),i==="lint_ignore"&&(s.lintIgnore=null),i==="extensions"&&(s.extensions=null),i==="rules"&&(s.rules=[]);t.length===0&&!o&&!a&&Object.keys(s).length===0&&t.push("nothing to change: give `body`, `replace`, or a field"),J(t);const r=e,{dto:d,synced:w}=await A(async i=>{const l=await E(i,n),m=await M(i,l,n.params.ref),h=await j(i,m),_=await S(i,l,[m]);try{if(!o&&!a)return await me(i,l,m,s,r.rationale),{dto:{id:m.id,name:h,revision:(await I(i,m)).revision},synced:_};const v=r.base??await le(i,l,m);if(a&&v!==null){const q=await I(i,m),B=await x(i,m);q.source_path===null&&q.heads_key===v&&B.length===1&&Ne(await pe(i,m,$(B[0].body_hash)),r.replace)}const D=r.verbatim===!0,p=o?{body:r.body,verbatim:D}:{replace:r.replace,verbatim:D},y=await de(i,l,m,p,r.rationale,v,s,await C(i));if("stale"in y)throw g(409,"stale_revision",`${h} changed after your read; it is now at revision ${y.stale.revision}`,`Read it again with \`crtr canvas read ${h}\`, then redo your change on the current text.`,{stale:y.stale});const F=$((await x(i,m))[0].body_hash);return{dto:{id:m.id,name:h,revision:y.revision,...await Q(i,l,F,y.unresolved)},synced:_}}catch(v){N(v,m)}});return await T(w),d}u(Se,"edit");async function Te(n){const e=R(n);if(e.new_name===void 0&&e.owner===void 0)throw b("give a new name, an owner, or both");if(e.new_name!==void 0&&(typeof e.new_name!="string"||!Y.test(e.new_name)))throw b("`new_name` must be segments of letters, digits, `_` or `-` joined by `/`");const{dto:t,change:o}=await A(async a=>{const c=await E(a,n),s=await M(a,c,n.params.ref),f=e.owner===void 0?void 0:await W(a,c,e.owner,e.cwd);try{const r=await fe(a,c,s,{...e.new_name!==void 0?{name:e.new_name}:{},...f?{owner:f}:{}},await C(a));return{dto:{id:r.id,name:await j(a,r)},change:await S(a,c,[s,r],e.cwd)}}catch(r){N(r,s)}});return await T(o),t}u(Te,"move");async function Fe(n){const{dto:e,change:t}=await A(async o=>{const a=await E(o,n),c=await M(o,a,n.params.ref),s=await j(o,c),f=await S(o,a,[c]);try{await ce(o,a,c,await C(o))}catch(r){N(r,c)}return{dto:{id:c.id,name:s},change:f}});return await T(t),e}u(Fe,"remove");async function Ie(n){const e=n.query.get("diff"),t=e===null?void 0:Number(e);if(t!==void 0&&!(Number.isInteger(t)&&t>0))throw b("`diff` must be a revision number");return await A(async o=>{const a=await E(o,n),c=await G(o,a,decodeURIComponent(n.params.ref));if("remote"in c)throw g(404,"not_found",z(c.remote),"Check the name with `crtr canvas search`.");const s="deleted"in c?c.deleted:c;if(s.type!=="document")throw b(`${s.name} is a ${s.type}, not a document`);const f=await ue(o,a,s),r={object:await je(o,s),revisions:f.map(d=>({rev_id:d.rev_id,number:d.number,author_id:d.author,rationale:d.rationale,verbatim:d.verbatim,created_at:d.created_at,parents:d.parents,acting_app:d.acting_app,acting_for:d.acting_for}))};if(t!==void 0){const d=f.find(i=>i.number===t);if(!d)throw new k(404,"not_found",`${s.name} has no revision ${t}`);const w=d.parents[0]===void 0?void 0:f.find(i=>i.rev_id===d.parents[0]);r.diff=_e(w?$(w.body_hash):"",$(d.body_hash))}return r})}u(Ie,"revisionHistory");const ee=1e3,te=1e3,ne=3e3,xe=/^When\b.+\bbecause\b.+/,Le=u(n=>{const e=n.trim();return e===""?0:e.split(/\s+/).length},"words");function We(n,e){if(n.some(o=>o.on==="boot"&&o.deliver==="content")&&e>ee)return`body is ${e} words, over the ${ee}-word cap for a boot rule at content (the whole body enters every node's context). Keep the core here and move separate subjects into [[linked]] documents.`;const t=[...new Set(n.filter(o=>o.on!=="boot"&&o.deliver==="content").map(o=>o.on))];return t.length>0&&e>te?`body is ${e} words, over the ${te}-word cap for a content rule on ${t.join("/")}. Keep the core here and move separate subjects into [[linked]] documents.`:n.some(o=>o.on==="boot"&&o.deliver==="preview")&&e>ne?`body is ${e} words, over the ${ne}-word cap for a boot rule at preview. Keep the core here and move separate subjects into [[linked]] documents.`:null}u(We,"lengthFinding");async function Me(n){const e=R(n);return await A(async t=>{const o=await E(t,n),a=e.owner===void 0?null:await W(t,o,e.owner,e.cwd),c=await t.prepare("SELECT * FROM objects WHERE type = 'document' AND deleted_at IS NULL AND home_machine IS NULL AND kind != 'report' ORDER BY name").all(),s=[],f=new Map;for(const r of c){if(a&&r.owner!==a.id||!await ae(t,o,r))continue;const d=await I(t,r),w=new Set(d.lint_ignore??[]),i=await j(t,r),l=u((p,y,F)=>{w.has(p)||s.push({name:i,severity:y,rule:p,message:F})},"add"),m=await ve(t,r),h=(await x(t,r))[0],_=h?$(h.body_hash):"",v=We(m,Le(_));v&&l("length","error",v),m.some(p=>p.deliver==="preview")&&!xe.test(r.preview??"")&&l("preview-shape","error",`a rule delivers this document at preview, so the preview must read "When <situation in the reader's work>, read this because <what the reader gains>"`);const D=new Set((await t.prepare("SELECT written_as FROM edges WHERE type = 'links-to' AND src = ?").all(r.id)).map(p=>p.written_as));for(const p of V(_)){if(D.has(p))continue;const y=await K(t,o,p);"remote"in y||"object"in y||"deleted"in y||l("links","warning",`[[${p}]] names no object in your view`)}if(m.some(p=>p.on==="workspace-open"&&p.deliver==="content")){const p=await se(t,r);p.type==="repo"&&!w.has("workspace-open")&&f.set(p.name,[...f.get(p.name)??[],i])}}for(const[r,d]of f)if(!(d.length<2))for(const w of d)s.push({name:w,severity:"warning",rule:"workspace-open",message:`repo ${r} has ${d.length} documents delivered at content on workspace-open (${d.join(", ")}); keep one and link the rest from it`});return{findings:s}})}u(Me,"lint");const O=u((n,e=200)=>async t=>({status:e,body:await n(t)}),"ok"),at=[{method:"POST",pattern:"/v1/docs",handler:O(Ce,201)},{method:"PATCH",pattern:"/v1/docs/:ref",handler:O(Se)},{method:"POST",pattern:"/v1/docs/:ref/move",handler:O(Te)},{method:"DELETE",pattern:"/v1/docs/:ref",handler:O(Fe)},{method:"GET",pattern:"/v1/docs/:ref/history",handler:O(Ie)},{method:"POST",pattern:"/v1/docs/lint",handler:O(Me)}];export{j as canonicalName,at as docRoutes,S as repoChange,T as syncChanged};
+var ie=Object.defineProperty;var u=(n,e)=>ie(n,"name",{value:e,configurable:!0});import{ApiError as k}from"../../../api/errors.js";import{DOC_KINDS as x,DOC_UNSET_FIELDS as U}from"../../../api/dto/docs.js";import{PRIVACY_LEVELS_DTO as V}from"../../../api/dto/objects.js";import{withCanvasWrite as A}from"../../../core/canvas/db.js";import{CrtrError as re}from"../../../core/errors.js";import{emitEvent as ae}from"../../../core/events/emit.js";import{canChange as se,spaceOf as ce}from"../../../core/graph/access.js";import{get as j}from"../../../core/graph/bodies.js";import{deleteDocument as de,documentRecord as L,editDocument as ue,heads as W,history as fe,linksIn as K,moveDocument as pe,readBase as le,setDocumentRecord as me,withCurrentNames as we,writeDocument as he}from"../../../core/graph/documents.js";import{resolveName as G}from"../../../core/graph/names.js";import{getById as M}from"../../../core/graph/objects.js";import{noteRepoDocumentsChanged as ye}from"../../../core/graph/repo-sync/index.js";import{checkoutsForCwd as ge}from"../../../core/graph/repo-sync/repos.js";import{lintRules as ve,rulesOf as _e}from"../../../core/graph/rules.js";import{unifiedDiff as be}from"../../../core/graph/diff.js";import{ownerForGrantee as ke}from"../../../core/graph/objects.js";import{ownerFromFlag as q,readerFor as E,resolveRef as X,warmReaderRepos as O}from"../reader.js";import{appCaller as z,asApiError as Ae,requireOwnNamespace as Ee}from"./schemas.js";import{filterAsync as Oe,flatMapAsync as $e}from"../../../core/async-array.js";function g(n,e,t,o,a={}){return new k(n,e,t,{...a,error:e,message:t,next:o})}u(g,"refuse");const b=u((n,e)=>new k(400,"invalid_request",n,e),"invalid");function C(n){const e=n.body;if(e===void 0)return{};if(typeof e!="object"||e===null||Array.isArray(e))throw b("the request body must be a JSON object");return e}u(C,"bodyOf");const N=u(async n=>async e=>await ge(n,e),"reposFnFor");function S(n,e){if(n instanceof re){const t=n.details;if(n.code==="read_first")throw g(409,"read_first",n.message,`Read it first with \`crtr canvas read ${e?.id??"<ref>"}\`, then rerun the edit.`,t??{});if(n.code==="conflict")throw new k(409,"name_taken",n.message,t);if(n.code==="forbidden")throw typeof t?.next=="string"?g(403,"forbidden",n.message,t.next,t):new k(403,"forbidden",n.message,t);if(n.code==="scope_missing")throw g(403,"scope_missing",n.message,`Launch the run with \`${String(t?.scope)}\` in its scopes list.`,t??{});if(t?.rule==="repo-public-only")throw g(422,"repo_documents_are_public",n.message,'Own it as `user` and add a rule with `if: {"repo": "<handle>"}` so it loads only in that repo.')}throw Ae(n)}u(S,"mapGraphError");async function B(n,e,t){const o=await X(n,e,decodeURIComponent(t));if("remote"in o)throw g(404,"not_found",Y(o.remote),"Check the name with `crtr canvas search`.");if("deleted"in o)throw new k(404,"not_found",`${o.deleted.name} is deleted`,{id:o.deleted.id,deleted:!0});if(o.type!=="document")throw b(`${t} is a ${o.type}, not a document`);return o}u(B,"refDocument");function Y(n){return`no object named ${n} on this runtime; it may be on another runtime, or the name may be misspelled`}u(Y,"remoteMessage");async function je(n,e){const t=e.owner===null?null:await M(n,e.owner);return t?t.type==="node"?t.id:t.name:""}u(je,"ownerHandle");async function R(n,e){const t=await je(n,e);return t?`${t}/${e.name}`:e.name}u(R,"canonicalName");async function Re(n,e){const t=e.owner===null?null:await M(n,e.owner),o=t?{id:t.id,type:t.type,handle:t.type==="node"?t.id:t.name}:null;return{id:e.id,type:e.type,kind:e.kind,owner:o,privacy:e.privacy,name:e.name,preview:e.preview??"",created_at:e.created_at,deleted_at:e.deleted_at,...e.type==="document"?{schema_type:e.schema_type??null}:{}}}u(Re,"objectDTO");async function De(n,e){const t=e.owner===null?null:await M(n,e.owner);return t?.type==="repo"?t:null}u(De,"repoOwner");async function T(n,e,t,o){const a=[...new Map(await $e(t,async f=>{const i=await De(n,f);return i?[[i.id,i]]:[]})).values()],c=e.class==="node"?e.cwd:o,s=e.class==="node"?[...e.checkouts,...e.projectCheckouts].map(f=>f.root):[];return{repos:a,dirs:[...new Set([...c!==void 0?[c]:[],...s])]}}u(T,"repoChange");async function F(n){for(const e of n.repos)try{await ye(e,n.dirs)}catch(t){ae({level:"warn",event:"repo_sync.failed",outcome:"failed",error:t,fields:{repo:e.name,step:"export",reason:t instanceof Error?t.message:String(t)}})}}u(F,"syncChanged");const Z=/^[A-Za-z0-9_-]+(\/[A-Za-z0-9_-]+)*$/;function Ce(n,e){if(n===void 0)return;if(!Array.isArray(n)){e.push("`rules` must be a list");return}const t=n.map(a=>{if(typeof a!="object"||a===null||Array.isArray(a))return a;const{match_frontmatter:c,...s}=a;return"matchFrontmatter"in s?{...s,match_frontmatter:s.matchFrontmatter}:c===void 0?s:{...s,matchFrontmatter:c}}),o=ve(t);if(o){e.push(o.replaceAll("matchFrontmatter","match_frontmatter"));return}return t}u(Ce,"rulesFromDTO");function J(n,e){const t={},o=u(i=>{const d=n[i];if(d!==void 0){if(typeof d!="string"){e.push(`\`${i}\` must be a string`);return}return d}},"str"),a=o("preview");a!==void 0&&(a.trim()===""||/[\r\n]/.test(a)?e.push("`preview` must be one non-empty line"):t.preview=a);const c=o("summary");c!==void 0&&(t.summary=c);const s=o("why_it_exists");if(s!==void 0&&(t.whyItExists=s),n.privacy!==void 0&&(V.includes(n.privacy)?t.privacy=n.privacy:e.push(`\`privacy\` must be one of ${V.join(", ")}`)),n.unlisted!==void 0&&(typeof n.unlisted!="boolean"?e.push("`unlisted` must be a boolean"):t.unlisted=n.unlisted),n.lint_ignore!==void 0){const i=n.lint_ignore;!Array.isArray(i)||i.some(d=>typeof d!="string")?e.push("`lint_ignore` must be a list of strings"):t.lintIgnore=i}if(n.extensions!==void 0){const i=n.extensions;typeof i!="object"||i===null||Array.isArray(i)||Object.values(i).some(d=>typeof d!="object"||d===null||Array.isArray(d))?e.push("`extensions` must map each plugin to an object of fields"):t.extensions=i}const f=Ce(n.rules,e);return f!==void 0&&(t.rules=f),t}u(J,"fieldsFrom");function Q(n){if(n.length>0)throw b(n.join("; "),{errors:n})}u(Q,"failOn");async function ee(n,e,t,o){const a=await Oe(K(t),async c=>"remote"in await G(n,e,c));return{...o.length>0?{unresolved_links:o}:{},...a.length>0?{remote_links:a}:{}}}u(ee,"linkReport");async function Ne(n){const e=C(n),t=[],o=e.name;(typeof o!="string"||!Z.test(o))&&t.push("`name` must be segments of letters, digits, `_` or `-` joined by `/`"),typeof e.body!="string"&&t.push("`body` must be a string"),typeof e.preview!="string"&&t.push("`preview` is required");const a=e.kind??"knowledge";x.includes(a)||t.push(a==="report"?"reports are written only by `crtr push`":`\`kind\` must be one of ${x.join(", ")}`);const c=J(e,t);e.cwd!==void 0&&typeof e.cwd!="string"&&t.push("`cwd` must be a string");const s=e.schema_type;s!==void 0&&typeof s!="string"&&t.push("`schema_type` must be a string");const f=e.relations;f!==void 0&&(!Array.isArray(f)||f.some(r=>typeof r!="object"||r===null||typeof r.relation!="string"||typeof r.subject!="string"))&&t.push("`relations` must be a list of {relation, subject} strings"),Q(t);const i=e;await O(n.principal,i.cwd);const{dto:d,change:h}=await A(async r=>{const p=await E(r,n);i.schema_type!==void 0?await Ee(r,z(n).app,i.schema_type):i.relations!==void 0&&z(n);const l=i.owner==="user"&&p.class==="app"&&p.sub!==void 0?await ke(r,p.sub.startsWith("user:")?p.sub:`user:${p.sub}`):await q(r,p,i.owner,i.cwd);try{const{object:w,unresolved:_}=await he(r,p,{...c,owner:l,name:i.name,kind:a,preview:c.preview,privacy:c.privacy??"public",...i.schema_type!==void 0?{schemaType:i.schema_type}:{},...i.relations!==void 0?{relations:i.relations}:{}},i.body,await N(r));return{dto:{id:w.id,name:await R(r,w),...await ee(r,p,i.body,_)},change:await T(r,p,[w],i.cwd)}}catch(w){S(w)}});return await F(h),d}u(Ne,"write");function Se(n,e){let t=n;e.forEach(({old:o,new:a},c)=>{const s=o===""?-1:t.indexOf(o);if(s<0)throw g(422,"replace_no_match",`replace[${c}]: old text not found in the revision you read`,"Copy the old text exactly from your last read and rerun.",{index:c});if(t.indexOf(o,s+1)>=0)throw g(422,"replace_ambiguous",`replace[${c}]: old text occurs more than once`,"Include more surrounding text so the old text matches once, and rerun.",{index:c});t=t.slice(0,s)+a+t.slice(s+o.length)})}u(Se,"checkReplacements");async function Te(n){const e=C(n),t=[],o=e.body!==void 0,a=e.replace!==void 0;o&&a&&t.push("give `body` or `replace`, not both"),o&&typeof e.body!="string"&&t.push("`body` must be a string");const c=e.replace;a&&(!Array.isArray(c)||c.length===0||c.some(r=>typeof r!="object"||r===null||typeof r.old!="string"||typeof r.new!="string"))&&t.push("`replace` must be a non-empty list of {old, new} strings"),(typeof e.rationale!="string"||e.rationale.trim()==="")&&t.push("`rationale` is required"),e.verbatim!==void 0&&typeof e.verbatim!="boolean"&&t.push("`verbatim` must be a boolean"),e.base!==void 0&&(typeof e.base!="string"||e.base==="")&&t.push("`base` must be a non-empty heads key"),e.base!==void 0&&!o&&!a&&t.push("`base` applies only to a `body` or `replace` edit");const s=J(e,t),f=e.unset??[];if(!Array.isArray(f)||f.some(r=>!U.includes(r)))t.push(`\`unset\` takes only ${U.join(", ")}`);else for(const r of f)r==="summary"&&(s.summary=null),r==="why_it_exists"&&(s.whyItExists=null),r==="unlisted"&&(s.unlisted=!1),r==="lint_ignore"&&(s.lintIgnore=null),r==="extensions"&&(s.extensions=null),r==="rules"&&(s.rules=[]);t.length===0&&!o&&!a&&Object.keys(s).length===0&&t.push("nothing to change: give `body`, `replace`, or a field"),Q(t);const i=e;await O(n.principal);const{dto:d,synced:h}=await A(async r=>{const p=await E(r,n),l=await B(r,p,n.params.ref),w=await R(r,l),_=await T(r,p,[l]);try{if(!o&&!a)return await me(r,p,l,s,i.rationale),{dto:{id:l.id,name:w,revision:(await L(r,l)).revision},synced:_};const v=i.base??await le(r,p,l);if(a&&v!==null){const P=await L(r,l),H=await W(r,l);P.source_path===null&&P.heads_key===v&&H.length===1&&Se(await we(r,l,j(H[0].body_hash)),i.replace)}const D=i.verbatim===!0,m=o?{body:i.body,verbatim:D}:{replace:i.replace,verbatim:D},y=await ue(r,p,l,m,i.rationale,v,s,await N(r));if("stale"in y)throw g(409,"stale_revision",`${w} changed after your read; it is now at revision ${y.stale.revision}`,`Read it again with \`crtr canvas read ${w}\`, then redo your change on the current text.`,{stale:y.stale});const I=j((await W(r,l))[0].body_hash);return{dto:{id:l.id,name:w,revision:y.revision,...await ee(r,p,I,y.unresolved)},synced:_}}catch(v){S(v,l)}});return await F(h),d}u(Te,"edit");async function Fe(n){const e=C(n);if(e.new_name===void 0&&e.owner===void 0)throw b("give a new name, an owner, or both");if(e.new_name!==void 0&&(typeof e.new_name!="string"||!Z.test(e.new_name)))throw b("`new_name` must be segments of letters, digits, `_` or `-` joined by `/`");await O(n.principal,e.cwd);const{dto:t,change:o}=await A(async a=>{const c=await E(a,n),s=await B(a,c,n.params.ref),f=e.owner===void 0?void 0:await q(a,c,e.owner,e.cwd);try{const i=await pe(a,c,s,{...e.new_name!==void 0?{name:e.new_name}:{},...f?{owner:f}:{}},await N(a));return{dto:{id:i.id,name:await R(a,i)},change:await T(a,c,[s,i],e.cwd)}}catch(i){S(i,s)}});return await F(o),t}u(Fe,"move");async function Ie(n){await O(n.principal);const{dto:e,change:t}=await A(async o=>{const a=await E(o,n),c=await B(o,a,n.params.ref),s=await R(o,c),f=await T(o,a,[c]);try{await de(o,a,c,await N(o))}catch(i){S(i,c)}return{dto:{id:c.id,name:s},change:f}});return await F(t),e}u(Ie,"remove");async function Le(n){const e=n.query.get("diff"),t=e===null?void 0:Number(e);if(t!==void 0&&!(Number.isInteger(t)&&t>0))throw b("`diff` must be a revision number");return await O(n.principal),await A(async o=>{const a=await E(o,n),c=await X(o,a,decodeURIComponent(n.params.ref));if("remote"in c)throw g(404,"not_found",Y(c.remote),"Check the name with `crtr canvas search`.");const s="deleted"in c?c.deleted:c;if(s.type!=="document")throw b(`${s.name} is a ${s.type}, not a document`);const f=await fe(o,a,s),i={object:await Re(o,s),revisions:f.map(d=>({rev_id:d.rev_id,number:d.number,author_id:d.author,rationale:d.rationale,verbatim:d.verbatim,created_at:d.created_at,parents:d.parents,acting_app:d.acting_app,acting_for:d.acting_for}))};if(t!==void 0){const d=f.find(r=>r.number===t);if(!d)throw new k(404,"not_found",`${s.name} has no revision ${t}`);const h=d.parents[0]===void 0?void 0:f.find(r=>r.rev_id===d.parents[0]);i.diff=be(h?j(h.body_hash):"",j(d.body_hash))}return i})}u(Le,"revisionHistory");const te=1e3,ne=1e3,oe=3e3,We=/^When\b.+\bbecause\b.+/,Me=u(n=>{const e=n.trim();return e===""?0:e.split(/\s+/).length},"words");function qe(n,e){if(n.some(o=>o.on==="boot"&&o.deliver==="content")&&e>te)return`body is ${e} words, over the ${te}-word cap for a boot rule at content (the whole body enters every node's context). Keep the core here and move separate subjects into [[linked]] documents.`;const t=[...new Set(n.filter(o=>o.on!=="boot"&&o.deliver==="content").map(o=>o.on))];return t.length>0&&e>ne?`body is ${e} words, over the ${ne}-word cap for a content rule on ${t.join("/")}. Keep the core here and move separate subjects into [[linked]] documents.`:n.some(o=>o.on==="boot"&&o.deliver==="preview")&&e>oe?`body is ${e} words, over the ${oe}-word cap for a boot rule at preview. Keep the core here and move separate subjects into [[linked]] documents.`:null}u(qe,"lengthFinding");async function Be(n){const e=C(n);return await O(n.principal,e.cwd),await A(async t=>{const o=await E(t,n),a=e.owner===void 0?null:await q(t,o,e.owner,e.cwd),c=await t.prepare("SELECT * FROM objects WHERE type = 'document' AND deleted_at IS NULL AND home_machine IS NULL AND kind != 'report' ORDER BY name").all(),s=[],f=new Map;for(const i of c){if(a&&i.owner!==a.id||!await se(t,o,i))continue;const d=await L(t,i),h=new Set(d.lint_ignore??[]),r=await R(t,i),p=u((m,y,I)=>{h.has(m)||s.push({name:r,severity:y,rule:m,message:I})},"add"),l=await _e(t,i),w=(await W(t,i))[0],_=w?j(w.body_hash):"",v=qe(l,Me(_));v&&p("length","error",v),l.some(m=>m.deliver==="preview")&&!We.test(i.preview??"")&&p("preview-shape","error",`a rule delivers this document at preview, so the preview must read "When <situation in the reader's work>, read this because <what the reader gains>"`);const D=new Set((await t.prepare("SELECT written_as FROM edges WHERE type = 'links-to' AND src = ?").all(i.id)).map(m=>m.written_as));for(const m of K(_)){if(D.has(m))continue;const y=await G(t,o,m);"remote"in y||"object"in y||"deleted"in y||p("links","warning",`[[${m}]] names no object in your view`)}if(l.some(m=>m.on==="workspace-open"&&m.deliver==="content")){const m=await ce(t,i);m.type==="repo"&&!h.has("workspace-open")&&f.set(m.name,[...f.get(m.name)??[],r])}}for(const[i,d]of f)if(!(d.length<2))for(const h of d)s.push({name:h,severity:"warning",rule:"workspace-open",message:`repo ${i} has ${d.length} documents delivered at content on workspace-open (${d.join(", ")}); keep one and link the rest from it`});return{findings:s}})}u(Be,"lint");const $=u((n,e=200)=>async t=>({status:e,body:await n(t)}),"ok"),st=[{method:"POST",pattern:"/v1/docs",handler:$(Ne,201)},{method:"PATCH",pattern:"/v1/docs/:ref",handler:$(Te)},{method:"POST",pattern:"/v1/docs/:ref/move",handler:$(Fe)},{method:"DELETE",pattern:"/v1/docs/:ref",handler:$(Ie)},{method:"GET",pattern:"/v1/docs/:ref/history",handler:$(Le)},{method:"POST",pattern:"/v1/docs/lint",handler:$(Be)}];export{R as canonicalName,st as docRoutes,T as repoChange,F as syncChanged};

package/dist/daemon/api/handlers/exec.js

@@ -1 +1 @@
-var k=Object.defineProperty;var o=(t,u)=>k(t,"name",{value:u,configurable:!0});import{randomUUID as V}from"node:crypto";import{covers as Y}from"@north-light/identity";import{appSpace as j}from"../../../core/layout.js";import{emitEvent as M}from"../../../core/events/emit.js";import{RunError as i}from"../../../core/runs/operations.js";import{readAppEnvVars as F}from"../../../core/profiles/app-env-store.js";import{ADMITTED_HOST_PATH_ENV as R,buildOperationalEnvBase as $,resolveAdmittedHostCommand as J}from"../../../core/runtime/spawn-env.js";import{appProcessesSandboxed as G,launchAppProcess as K}from"../../../core/spaces/process.js";import{uidForApp as z}from"../../../core/spaces/users.js";import{envHomeOverride as Q}from"../../../shared/env.js";import{closeCronExecution as W,openCronExecution as Z}from"../../cron/run-socket.js";const ee=60,U=100,C=32*1024,pe=C+1024,q=256*1024,L=4,l=new Map;function te(t){if(typeof t!="object"||t===null||Array.isArray(t))throw new i(400,"invalid_request","exec requires an object body");const u=t,r=u.argv;if(!Array.isArray(r)||r.length===0||!r.every(e=>typeof e=="string"))throw new i(400,"invalid_request","argv must be a non-empty array of strings","argv");if(r.some(e=>e.includes("\0")))throw new i(400,"invalid_request","argv strings cannot contain NUL","argv");if(Buffer.byteLength(JSON.stringify(r))>=C)throw new i(400,"invalid_request","argv must be less than 32 KB as JSON","argv");const s=u.timeout_s??ee;if(typeof s!="number"||!Number.isFinite(s)||s<=0||s>U)throw new i(400,"invalid_request",`timeout_s must be greater than 0 and at most ${U}`,"timeout_s");return{argv:r,timeout_s:s}}o(te,"parse");async function _e(t,u,r){if(!t.resolved.some(n=>Y(n,"crtr:schedule")))throw new i(403,"scope_missing","missing scope crtr:schedule",void 0,void 0,"crtr:schedule");const s=te(u);if(!G())throw new i(503,"sandbox_unavailable","this runtime has no root launcher, so it cannot sandbox an app process",void 0,void 0,void 0,!1);const e=t.grantee,h=l.get(e)??0;if(h>=L)throw new i(429,"busy",`${e} already has ${L} exec processes running; retry when one finishes`,void 0,void 0,void 0,!0);l.set(e,h+1);const f=V(),p=Date.now();let a,b=!1,E=!1;const y=o(()=>{if(E)return;E=!0,b&&W(f);const n=(l.get(e)??1)-1;n>0?l.set(e,n):l.delete(e),M({level:"info",event:"exec.run",fields:{app:e,argv:s.argv.join(" ").slice(0,200),exit_code:a?.exit_code??null,duration_ms:Date.now()-p}})},"release");let c=null,x=o(()=>{},"wake");const A=new Promise(n=>{x=o(()=>n(null),"wake")}),_=o(n=>{c===null&&(c=n,x())},"cancel"),H=setTimeout(()=>_("timeout"),s.timeout_s*1e3),T=o(()=>_("abort"),"onAbort");r.addEventListener("abort",T,{once:!0}),r.aborted&&_("abort");const I=o(()=>({exit_code:null,signal:null,stdout:"",stdout_truncated:!1,stderr:"",stderr_truncated:!1,timed_out:c==="timeout",duration_ms:Date.now()-p}),"unstarted");let D=!1;try{const n=j(e).files,O=$({targetCwd:n,targetProfileId:null,skipSpawnAllow:!0}),g=Q(),S={...O,...F(e),CRTR_RUN_ID:f,...g===void 0||g===""?{}:{CRTR_HOME:g},[R]:O[R]},N=J("crtr",S,n),v={executionId:f,kind:"exec",cronId:null,fromExec:!0,grantee:e,sub:t.sub,grantId:t.grant,scopes:null,originRunId:null,isolated:!1,anchor:null,uid:await z(e),rebuilt:!1,refusal:null};if(await Z(v,n,null),b=!0,c!==null)return a=I(),a;const P=K({app:e,principal:{sub:t.sub,grantId:t.grant,scopes:null},cron:{executionId:f},command:[N,...s.argv],cwd:n,env:S,stdoutBytes:q,stderrBytes:q}),m=await Promise.race([P,A]);if(m===null)return D=!0,P.then(w=>w.stop()).catch(()=>{}).finally(y),a=I(),a;const X=o(()=>{m.stop().catch(w=>M({level:"error",event:"exec.stop_failed",error:w,fields:{app:e,pid:m.pid}}))},"stop");A.then(X);const d=await m.completion;if(v.refusal!==null)throw new i(401,"grant_revoked",v.refusal.message);const B=c==="timeout";return a={exit_code:B?null:d.exitCode,signal:d.signal,stdout:d.stdout,stdout_truncated:d.stdoutTruncated,stderr:d.stderr,stderr_truncated:d.stderrTruncated,timed_out:B,duration_ms:Date.now()-p},a}finally{clearTimeout(H),r.removeEventListener("abort",T),D||y()}}o(_e,"handleExec");export{pe as EXEC_BODY_MAX_BYTES,_e as handleExec};
+var k=Object.defineProperty;var o=(t,u)=>k(t,"name",{value:u,configurable:!0});import{randomUUID as V}from"node:crypto";import{covers as Y}from"@north-light/identity";import{appSpace as j}from"../../../core/layout.js";import{emitEvent as M}from"../../../core/events/emit.js";import{RunError as i}from"../../../core/runs/operations.js";import{readAppEnvVars as F}from"../../../core/profiles/app-env-store.js";import{ADMITTED_HOST_PATH_ENV as R,buildOperationalEnvBase as $,resolveAdmittedHostCommand as J}from"../../../core/runtime/spawn-env.js";import{appProcessesSandboxed as G,launchAppProcess as K}from"../../../core/spaces/process.js";import{uidForApp as z}from"../../../core/spaces/users.js";import{envHomeOverride as Q}from"../../../shared/env.js";import{closeCronExecution as W,openCronExecution as Z}from"../../cron/run-socket.js";const ee=60,U=100,C=32*1024,pe=C+1024,q=256*1024,L=4,l=new Map;function te(t){if(typeof t!="object"||t===null||Array.isArray(t))throw new i(400,"invalid_request","exec requires an object body");const u=t,r=u.argv;if(!Array.isArray(r)||r.length===0||!r.every(e=>typeof e=="string"))throw new i(400,"invalid_request","argv must be a non-empty array of strings","argv");if(r.some(e=>e.includes("\0")))throw new i(400,"invalid_request","argv strings cannot contain NUL","argv");if(Buffer.byteLength(JSON.stringify(r))>=C)throw new i(400,"invalid_request","argv must be less than 32 KB as JSON","argv");const s=u.timeout_s??ee;if(typeof s!="number"||!Number.isFinite(s)||s<=0||s>U)throw new i(400,"invalid_request",`timeout_s must be greater than 0 and at most ${U}`,"timeout_s");return{argv:r,timeout_s:s}}o(te,"parse");async function _e(t,u,r){if(!t.resolved.some(n=>Y(n,"crtr:schedule")))throw new i(403,"scope_missing","missing scope crtr:schedule",void 0,void 0,"crtr:schedule");const s=te(u);if(!G())throw new i(503,"sandbox_unavailable","this runtime has no root launcher, so it cannot sandbox an app process",void 0,void 0,void 0,!1);const e=t.grantee,h=l.get(e)??0;if(h>=L)throw new i(429,"busy",`${e} already has ${L} exec processes running; retry when one finishes`,void 0,void 0,void 0,!0);l.set(e,h+1);const f=V(),p=Date.now();let a,b=!1,E=!1;const y=o(()=>{if(E)return;E=!0,b&&W(f);const n=(l.get(e)??1)-1;n>0?l.set(e,n):l.delete(e),M({level:"info",event:"exec.run",fields:{app:e,argv:s.argv.join(" ").slice(0,200),exit_code:a?.exit_code??null,duration_ms:Date.now()-p}})},"release");let c=null,x=o(()=>{},"wake");const A=new Promise(n=>{x=o(()=>n(null),"wake")}),_=o(n=>{c===null&&(c=n,x())},"cancel"),H=setTimeout(()=>_("timeout"),s.timeout_s*1e3),T=o(()=>_("abort"),"onAbort");r.addEventListener("abort",T,{once:!0}),r.aborted&&_("abort");const I=o(()=>({exit_code:null,signal:null,stdout:"",stdout_truncated:!1,stderr:"",stderr_truncated:!1,timed_out:c==="timeout",duration_ms:Date.now()-p}),"unstarted");let D=!1;try{const n=j(e).files,O=$({targetCwd:n,targetProfileId:null,skipSpawnAllow:!0}),g=Q(),S={...O,...await F(e),CRTR_RUN_ID:f,...g===void 0||g===""?{}:{CRTR_HOME:g},[R]:O[R]},N=J("crtr",S,n),v={executionId:f,kind:"exec",cronId:null,fromExec:!0,grantee:e,sub:t.sub,grantId:t.grant,scopes:null,originRunId:null,isolated:!1,anchor:null,uid:await z(e),rebuilt:!1,refusal:null};if(await Z(v,n,null),b=!0,c!==null)return a=I(),a;const P=K({app:e,principal:{sub:t.sub,grantId:t.grant,scopes:null},cron:{executionId:f},command:[N,...s.argv],cwd:n,env:S,stdoutBytes:q,stderrBytes:q}),m=await Promise.race([P,A]);if(m===null)return D=!0,P.then(w=>w.stop()).catch(()=>{}).finally(y),a=I(),a;const X=o(()=>{m.stop().catch(w=>M({level:"error",event:"exec.stop_failed",error:w,fields:{app:e,pid:m.pid}}))},"stop");A.then(X);const d=await m.completion;if(v.refusal!==null)throw new i(401,"grant_revoked",v.refusal.message);const B=c==="timeout";return a={exit_code:B?null:d.exitCode,signal:d.signal,stdout:d.stdout,stdout_truncated:d.stdoutTruncated,stderr:d.stderr,stderr_truncated:d.stderrTruncated,timed_out:B,duration_ms:Date.now()-p},a}finally{clearTimeout(H),r.removeEventListener("abort",T),D||y()}}o(_e,"handleExec");export{pe as EXEC_BODY_MAX_BYTES,_e as handleExec};

package/dist/daemon/api/handlers/execution-start.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const executionStartRoutes: RouteTable;

package/dist/daemon/api/handlers/execution-start.js

@@ -0,0 +1,2 @@
+var w=Object.defineProperty;var l=(r,n)=>w(r,"name",{value:n,configurable:!0});import{ApiError as s}from"../../../api/errors.js";import{getNode as f}from"../../../core/canvas/canvas.js";import{openDb as d}from"../../../core/canvas/db.js";import{environmentOfNode as h,recipeOf as g}from"../environment-of.js";import{mintInstallationToken as E}from"./git-credential.js";async function k(r,n){const i=await d(),u=n===null?["user"]:["user",`profile:${n}`],t=await i.prepare(`SELECT owner_key, name, version, source_marketplace, source_path FROM scope_plugins
+    WHERE person = ? AND enabled = 1 AND owner_key IN (${u.map(()=>"?").join(", ")}) ORDER BY name`).all(r,...u),o=new Map;for(const e of t)(!o.has(e.name)||e.owner_key!=="user")&&o.set(e.name,e);const a=[];for(const e of o.values()){if(e.source_path!==null){a.push({name:e.name,source:{path:e.source_path},version:e.version});continue}if(e.source_marketplace===null)throw new s(500,"plugin_source_missing",`plugin ${e.name} names neither a marketplace nor a path`);const c=await i.prepare("SELECT url, ref FROM scope_marketplaces WHERE person = ? AND owner_key = ? AND name = ?").get(r,e.owner_key,e.source_marketplace);a.push({name:e.name,source:{marketplace:{url:c?.url??null,ref:c?.ref??null}},version:e.version})}return a}l(k,"plugins");async function b(r){const{principal:n}=r;if(n.class!=="broker")throw new s(403,"broker_only","the start bundle is read with a node token");const i=r.params.execution_id??"",u=await d(),t=await u.prepare("SELECT node_id, state, launch_json FROM executions WHERE execution_id = ?").get(i);if(t===void 0||t.node_id!==n.node)throw new s(403,"not_your_execution",`execution ${i} is not an execution of this node`);if(t.state!=="launching"&&t.state!=="running")throw new s(403,"execution_ended",`execution ${i} is ${t.state}`);if(t.launch_json===null)throw new s(409,"launch_missing",`execution ${i} carries no launch recipe`);const o=await f(n.node);if(o===null)throw new s(404,"node_not_found",`no node ${n.node}`);const a=await u.prepare("SELECT plugins_revision FROM person_settings WHERE person = ?").get(n.sub),e=await h(o.profile_id??null),c=await g(e),p=c?.repositories.map(m=>m.github_full_name)??[],_=p.length===0?null:(await E(n.sub,p)).author;return{status:200,body:{launch:JSON.parse(t.launch_json),node:{id:o.node_id,app:n.app,cwd:o.cwd,profile:o.profile_id??null,isolated:o.isolated===!0,environment_id:e},recipe:c,git_identity:_,plugins_revision:a===void 0?0:Number(a.plugins_revision),plugins:await k(n.sub,o.profile_id??null)}}}l(b,"handleStart");const S=[{method:"GET",pattern:"/v1/executions/:execution_id/start",handler:b}];export{S as executionStartRoutes};

package/dist/daemon/api/handlers/files.js

@@ -1 +1 @@
-var R=Object.defineProperty;var s=(e,t)=>R(e,"name",{value:t,configurable:!0});import{closeSync as T,constants as q,fstatSync as B,readSync as v}from"node:fs";import{isAbsolute as L,relative as F,resolve as b,sep as I}from"node:path";import{filterAsync as M}from"../../../core/async-array.js";import{appSpace as g}from"../../../core/layout.js";import{ApiError as d}from"../../../api/index.js";import{notFound as E,usage as c}from"../../../core/errors.js";import{InputError as k}from"../../../core/io.js";import{RunError as m}from"../../../core/runs/operations.js";import{isBeneathRefusal as z,listBeneath as N,openBeneath as O,writeFileBeneath as D}from"../../../core/spaces/open-beneath.js";import{fileRoot as P}from"../../../core/spaces/permissions.js";import{openDb as C}from"../../../core/canvas/db.js";import{canReadNode as $,resolvedScopes as S}from"../router.js";const y=512*1024,A=1024*1024,W=1e3;function h(e,t){if(e===null||e==="")throw c(`a file ${t} requires a \`path\` ${t==="write"?"body field":"query param"}`);if(!L(e))throw c(`file ${t} path must be absolute`,{received:e});return e}s(h,"requireAbsolutePath");function _(e){if(e==null)return"utf8";if(e==="utf8"||e==="base64")return e;throw c("encoding must be `utf8` or `base64`",{received:e})}s(_,"parseEncoding");function p(e,t,i){if(e instanceof d||e instanceof k||e instanceof m)throw e;if(z(e))throw new m(400,"invalid_request",`${t} meets a symlink, leaves its permitted root, or is not a regular file`,"path");const n=e.code;throw n==="ENOENT"?E(`no such file: ${t}`,{received:t}):n==="EACCES"||n==="EPERM"?new d(403,"forbidden",`permission denied ${i} ${t}`):new d(500,"internal",`cannot ${i} ${t}: ${e instanceof Error?e.message:String(e)}`)}s(p,"mapFilesystemError");async function Y(e,t,i,n){const r=await(await C()).prepare("SELECT isolated FROM nodes WHERE node_id = ?").get(t),[l,f]=F(g(i).root,b(n)).split(I),a=l==="nodes"&&f?await $(e.principal,i,f):!1;return{isolated:r?.isolated===1,reaches:s(()=>a,"reaches")}}s(Y,"runConfinementFor");async function w(e,t,i){const n=e.principal;if(n.class==="forwarded"||n.class==="machine")throw new d(403,"permission_error","this operation is not available to the caller");const o=n.class==="person"?null:n.class==="app"?{app:n.app,resolved:n.scopes,launched:null}:n.class==="cron"?{app:n.app,resolved:await S(n),launched:n.scopes}:{app:n.app,resolved:await S(n),launched:n.scopes,run:await Y(e,n.node,n.app,t)},r=P(o,t,i);if("root"in r)return r.root;throw"hidden"in r?E(`no such file: ${t}`,{received:t}):new m(403,"scope_missing",r.missing?`missing scope ${r.missing}`:`no permission names ${t}`,void 0,void 0,r.missing??void 0)}s(w,"rootFor");function Z(e,t,i){let n;try{n=O(e,t,q.O_RDONLY)}catch(o){return p(o,t,"reading")}try{const o=B(n);if(o.isDirectory())throw c(`file peek path is a directory: ${t}`,{received:t});const r=Buffer.allocUnsafe(Math.min(o.size,y)+1),l=v(n,r,0,r.length,0),f=l>y,a=r.subarray(0,Math.min(l,y)).toString(i);return{path:t,content:a,truncated:f}}catch(o){return p(o,t,"reading")}finally{T(n)}}s(Z,"readHead");async function j(e){const t=h(e.query.get("path"),"peek");return{status:200,body:Z(await w(e,t,"read"),t,_(e.query.get("encoding")))}}s(j,"handlePeek");function G(e){return e.length%4===0&&/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e)}s(G,"isBase64");function H(e){if(typeof e!="object"||e===null||Array.isArray(e))throw c("file write requires an object body");const t=e,i=h(typeof t.path=="string"?t.path:null,"write");if(typeof t.content!="string")throw c("file write requires a string `content` body field");const n=_(t.encoding);if(n==="base64"&&!G(t.content))throw c("base64 file content must be valid base64");return{path:i,content:t.content,encoding:n}}s(H,"parseWriteBody");function U(e,t,i){if(i.byteLength>A)throw new d(413,"file_too_large",`file content exceeds the ${A} byte limit`);try{return D(e,t,i,{mode:process.platform==="linux"?432:384,atomic:!0}),{path:t,bytes_written:i.byteLength}}catch(n){return p(n,t,"writing")}}s(U,"writeAtomically");async function X(e){const{path:t,content:i,encoding:n}=H(e.body);return{status:200,body:U(await w(e,t,"rw"),t,Buffer.from(i,n))}}s(X,"handleWrite");function K(e){if(e===null)return W;const t=Number(e);if(!Number.isInteger(t)||t<1)throw c("file list limit must be a positive integer",{received:e});return t}s(K,"parseLimit");async function J(e){const t=h(e.query.get("path"),"list"),i=K(e.query.get("limit")),n=await w(e,t,"read");let o;try{o=N(n,t,i+1)}catch(a){return p(a,t,"listing")}const r=e.principal;r.class==="broker"&&b(t)===g(r.app).nodes&&(o=await M(o,async({name:a})=>await $(r,r.app,a)));const l=o.slice(0,i).map(({name:a,stat:u})=>({name:a,type:u.isFile()?"file":u.isDirectory()?"dir":"other",size:u.size,modified:u.mtime.toISOString()}));return{status:200,body:{path:t,entries:l,truncated:o.length>i}}}s(J,"handleList");const fe=[{method:"GET",pattern:"/v1/files/peek",scope:"crtr:act",handler:j},{method:"POST",pattern:"/v1/files/write",scope:"crtr:act",handler:X},{method:"GET",pattern:"/v1/files/list",scope:"crtr:act",handler:J}];export{fe as fileRoutes};
+var R=Object.defineProperty;var s=(e,t)=>R(e,"name",{value:t,configurable:!0});import{closeSync as T,constants as q,fstatSync as B,readSync as v}from"node:fs";import{isAbsolute as L,relative as F,resolve as b,sep as I}from"node:path";import{filterAsync as M}from"../../../core/async-array.js";import{appSpace as g}from"../../../core/layout.js";import{ApiError as f}from"../../../api/index.js";import{notFound as E,usage as c}from"../../../core/errors.js";import{InputError as k}from"../../../core/io.js";import{RunError as m}from"../../../core/runs/operations.js";import{isBeneathRefusal as z,listBeneath as N,openBeneath as O,writeFileBeneath as D}from"../../../core/spaces/open-beneath.js";import{fileRoot as P}from"../../../core/spaces/permissions.js";import{openDb as C}from"../../../core/canvas/db.js";import{canReadNode as $,resolvedScopes as S}from"../router.js";const h=512*1024,_=1024*1024,W=1e3;function y(e,t){if(e===null||e==="")throw c(`a file ${t} requires a \`path\` ${t==="write"?"body field":"query param"}`);if(!L(e))throw c(`file ${t} path must be absolute`,{received:e});return e}s(y,"requireAbsolutePath");function A(e){if(e==null)return"utf8";if(e==="utf8"||e==="base64")return e;throw c("encoding must be `utf8` or `base64`",{received:e})}s(A,"parseEncoding");function p(e,t,r){if(e instanceof f||e instanceof k||e instanceof m)throw e;if(z(e))throw new m(400,"invalid_request",`${t} meets a symlink, leaves its permitted root, or is not a regular file`,"path");const n=e.code;throw n==="ENOENT"?E(`no such file: ${t}`,{received:t}):n==="EACCES"||n==="EPERM"?new f(403,"forbidden",`permission denied ${r} ${t}`):new f(500,"internal",`cannot ${r} ${t}: ${e instanceof Error?e.message:String(e)}`)}s(p,"mapFilesystemError");async function Y(e,t,r,n){const i=await(await C()).prepare("SELECT isolated FROM nodes WHERE node_id = ?").get(t),[l,d]=F(g(r).root,b(n)).split(I),a=l==="nodes"&&d?await $(e.principal,r,d):!1;return{isolated:i?.isolated===1,reaches:s(()=>a,"reaches")}}s(Y,"runConfinementFor");async function w(e,t,r){const n=e.principal;if(n.class==="forwarded"||n.class==="machine")throw new f(403,"permission_error","this operation is not available to the caller");if(n.class==="person"&&n.sub!==void 0)throw new f(403,"permission_error","files are read by the install's person or a node");const o=n.class==="person"?null:n.class==="app"?{app:n.app,resolved:n.scopes,launched:null}:n.class==="cron"?{app:n.app,resolved:await S(n),launched:n.scopes}:{app:n.app,resolved:await S(n),launched:n.scopes,run:await Y(e,n.node,n.app,t)},i=P(o,t,r);if("root"in i)return i.root;throw"hidden"in i?E(`no such file: ${t}`,{received:t}):new m(403,"scope_missing",i.missing?`missing scope ${i.missing}`:`no permission names ${t}`,void 0,void 0,i.missing??void 0)}s(w,"rootFor");function Z(e,t,r){let n;try{n=O(e,t,q.O_RDONLY)}catch(o){return p(o,t,"reading")}try{const o=B(n);if(o.isDirectory())throw c(`file peek path is a directory: ${t}`,{received:t});const i=Buffer.allocUnsafe(Math.min(o.size,h)+1),l=v(n,i,0,i.length,0),d=l>h,a=i.subarray(0,Math.min(l,h)).toString(r);return{path:t,content:a,truncated:d}}catch(o){return p(o,t,"reading")}finally{T(n)}}s(Z,"readHead");async function j(e){const t=y(e.query.get("path"),"peek");return{status:200,body:Z(await w(e,t,"read"),t,A(e.query.get("encoding")))}}s(j,"handlePeek");function G(e){return e.length%4===0&&/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e)}s(G,"isBase64");function H(e){if(typeof e!="object"||e===null||Array.isArray(e))throw c("file write requires an object body");const t=e,r=y(typeof t.path=="string"?t.path:null,"write");if(typeof t.content!="string")throw c("file write requires a string `content` body field");const n=A(t.encoding);if(n==="base64"&&!G(t.content))throw c("base64 file content must be valid base64");return{path:r,content:t.content,encoding:n}}s(H,"parseWriteBody");function U(e,t,r){if(r.byteLength>_)throw new f(413,"file_too_large",`file content exceeds the ${_} byte limit`);try{return D(e,t,r,{mode:process.platform==="linux"?432:384,atomic:!0}),{path:t,bytes_written:r.byteLength}}catch(n){return p(n,t,"writing")}}s(U,"writeAtomically");async function X(e){const{path:t,content:r,encoding:n}=H(e.body);return{status:200,body:U(await w(e,t,"rw"),t,Buffer.from(r,n))}}s(X,"handleWrite");function K(e){if(e===null)return W;const t=Number(e);if(!Number.isInteger(t)||t<1)throw c("file list limit must be a positive integer",{received:e});return t}s(K,"parseLimit");async function J(e){const t=y(e.query.get("path"),"list"),r=K(e.query.get("limit")),n=await w(e,t,"read");let o;try{o=N(n,t,r+1)}catch(a){return p(a,t,"listing")}const i=e.principal;i.class==="broker"&&b(t)===g(i.app).nodes&&(o=await M(o,async({name:a})=>await $(i,i.app,a)));const l=o.slice(0,r).map(({name:a,stat:u})=>({name:a,type:u.isFile()?"file":u.isDirectory()?"dir":"other",size:u.size,modified:u.mtime.toISOString()}));return{status:200,body:{path:t,entries:l,truncated:o.length>r}}}s(J,"handleList");const fe=[{method:"GET",pattern:"/v1/files/peek",scope:"crtr:act",handler:j},{method:"POST",pattern:"/v1/files/write",scope:"crtr:act",handler:X},{method:"GET",pattern:"/v1/files/list",scope:"crtr:act",handler:J}];export{fe as fileRoutes};

package/dist/daemon/api/handlers/git-credential.d.ts

@@ -0,0 +1,11 @@
+import type { RouteTable } from '../router.js';
+/** The GitHub app's internal route: a token limited to `repositories` for the person, and the commit author for their GitHub link (null when unlinked). */
+export declare function mintInstallationToken(sub: string, repositories: string[]): Promise<{
+    token: string;
+    expires_at: string;
+    author: {
+        name: string;
+        email: string;
+    } | null;
+}>;
+export declare const gitCredentialRoutes: RouteTable;

package/dist/daemon/api/handlers/git-credential.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var u=(o,t)=>p(o,"name",{value:t,configurable:!0});import{ApiError as n}from"../../../api/errors.js";import{getNode as f}from"../../../core/canvas/canvas.js";import{environmentOfNode as m,recipeOf as _}from"../environment-of.js";import{invalidRequest as w,objectBody as g,optionalString as b,requiredString as v}from"./validate.js";function l(o){const t=process.env[o];if(t===void 0||t==="")throw new n(500,"github_service_unconfigured",`${o} is not set on this control plane`);return t}u(l,"requiredEnv");async function y(o){const{principal:t}=o;if(t.class!=="broker")throw new n(403,"broker_only","git credentials are issued to a node token");const i=o.params.environment_id??"",a=await f(t.node);if(a===null)throw new n(404,"node_not_found",`no node ${t.node}`);if(await m(a.profile_id??null)!==i)throw new n(403,"not_your_environment",`this node does not run in environment ${i}`);const e=[],r=g(o.body,["host","path"],e),s=v(r,"host",e);if(b(r,"path",e),e.length>0&&w("git credential request",e),s!=="github.com")throw new n(400,"unsupported_git_host",`only github.com credentials are issued, not ${s}`);const d=(await _(i))?.repositories.map(h=>h.github_full_name)??[];if(d.length===0)throw new n(409,"no_recipe_repositories",`environment ${i} has no recipe repositories`);const c=await k(t.sub,d);return{status:200,body:{username:"x-access-token",password:c.token,expiry:c.expires_at}}}u(y,"handleGitCredential");async function k(o,t){const i=await fetch(`${l("GITHUB_SERVICE_URL").replace(/\/$/,"")}/internal/installation-token`,{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${l("CROUTER_SERVICE_TOKEN")}`},body:JSON.stringify({sub:o,repositories:t})}),a=await i.text(),e=a===""?{}:JSON.parse(a);if(!i.ok){const s=typeof e.error=="object"?e.error?.code:e.code,d=(typeof e.error=="object"?e.error?.message:e.message)??`the GitHub service answered ${i.status}`;throw i.status===409&&(s==="repositories_span_installations"||s==="github_not_connected")?new n(409,s,d,{repositories:t}):new n(502,"github_service_failed",d,{status:i.status,...s===void 0?{}:{code:s}})}if(typeof e.token!="string"||typeof e.expires_at!="string")throw new n(502,"github_service_failed","the GitHub service answered without a token and expiry");const r=e.author;if(r===void 0)throw new n(502,"github_service_failed","the GitHub service answered without an author field");if(r!==null&&(typeof r.name!="string"||typeof r.email!="string"))throw new n(502,"github_service_failed","the GitHub service answered a malformed author");return{token:e.token,expires_at:e.expires_at,author:r===null?null:{name:r.name,email:r.email}}}u(k,"mintInstallationToken");const R=[{method:"POST",pattern:"/v1/environments/:environment_id/git-credential",handler:y}];export{R as gitCredentialRoutes,k as mintInstallationToken};

package/dist/daemon/api/handlers/hook-exec.d.ts

@@ -1,2 +1,2 @@
-import type { RouteTable } from '../router.js';
+import { type RouteTable } from '../router.js';
 export declare const hookExecRoutes: RouteTable;

package/dist/daemon/api/handlers/hook-exec.js

@@ -1 +1 @@
-var x=Object.defineProperty;var u=(o,n)=>x(o,"name",{value:n,configurable:!0});import{realpathSync as E}from"node:fs";import{isAbsolute as y,relative as _,sep as h}from"node:path";import{ApiError as r}from"../../../api/index.js";import{coreHookCatalog as T}from"../../../build-root.js";import{getNode as I}from"../../../core/canvas/canvas.js";import{isSafeNodeId as O,nodeAgentDir as P}from"../../../core/canvas/paths.js";import{discoverHookRegistry as A}from"../../../core/command-hooks/discovery.js";import{EXEC_HOOK_TIMEOUT_MS as S}from"../../../core/command-hooks/transport/exec-invoke.js";import{buildAppProcessEnv as H}from"../../../core/runtime/spawn-env.js";import{compileLaunch as N}from"../../../core/spaces/mounts.js";import{appProcessSandboxed as M,launchAppProcess as R}from"../../../core/spaces/process.js";import{requireCurrentExecution as B}from"./broker-recovery.js";import{personId as C}from"../../../core/canvas/person.js";async function k(o,n,t){const i=o.params.id;if(i===void 0?o.principal.class!=="person":!O(i)||o.principal.class!=="broker"||o.principal.node!==i)throw new r(403,"permission_error","hook execution requires its current node, or the person for the global route");const e=i===void 0?null:await I(i);if(i!==void 0&&!e)throw new r(404,"not_found","node not found");if(i!==void 0&&await B(i,n),typeof t!="string"||!y(t))throw new r(400,"invalid_request","hook cwd must be absolute");if(!M())throw new r(400,"invalid_request","hook routes require the root launcher");let d;try{d=E(t)}catch(p){throw p.code==="ENOENT"?new r(400,"invalid_request","hook cwd does not exist"):p}if(e){if(e.isolated===!0){const a=P(i,e.grantee??"app:terminal"),s=_(a,d);if(s===".."||s.startsWith(`..${h}`)||s.startsWith(h))throw new r(403,"permission_error","hook cwd is outside the isolated node folder")}const p=await N({nodeId:i,app:o.principal.class==="broker"?o.principal.app:"app:terminal",sub:e.sub??C(),grantId:e.grant_id??null,scopes:e.scopes??null,isolated:e.isolated===!0,command:[],env:{},auditMissing:u(()=>{},"auditMissing")}),f=u(a=>{const s=_(a,d);return s===""||s!==".."&&!s.startsWith(`..${h}`)&&!y(s)},"within");if(!p.mounts.some(a=>f(a.source)))throw new r(403,"permission_error","hook cwd is outside the node mounts")}return{id:i,node:e,cwd:d,app:e&&o.principal.class==="broker"?o.principal.app:"app:terminal"}}u(k,"checkedContext");async function b(o,n){const t=A(await T(),o,n);if(!t.valid)throw new r(422,"hook_registry_invalid","the effective hook registry is invalid");return t}u(b,"currentRegistry");async function W(o){const{node:n,cwd:t}=await k(o,o.query.get("expected_execution_id"),o.query.get("cwd"));return{status:200,body:{hooks:(await b(t,n.profile_id??null)).hooks.filter(e=>e.plugin.scope==="user").map(e=>({id:e.id,plugin:e.plugin.name,target:e.target,phase:e.phase,op:e.op,description:e.description,effects:e.effects,declarationIndex:e.declarationIndex}))}}}u(W,"handleHookPlan");async function v(o){const n=o.body;if(!n||typeof n!="object"||Array.isArray(n))throw new r(400,"invalid_request","hook execution requires a JSON body");const t=n,{id:i,node:e,cwd:d,app:p}=await k(o,t.expected_execution_id,t.cwd);if(typeof t.hook_id!="string"||typeof t.request!="string")throw new r(400,"invalid_request","hook execution requires hook_id and request");const a=(await b(d,e?.profile_id??null)).hooks.find(c=>c.id===t.hook_id);if(!a)throw new r(404,"hook_not_registered","hook id is not registered for this cwd");const s=H(d,e?.profile_id??null,p),m=await R({...i===void 0?{}:{nodeId:i},app:p,command:[a.executable,"--crtr-hook-protocol","1"],cwd:d,pluginRoot:a.plugin.root,env:s,stdin:t.request,stdoutBytes:10*1024*1024,stderrBytes:64*1024});let l,w=!1;try{const c=await Promise.race([m.completion,new Promise(($,g)=>{l=setTimeout(()=>{w=!0,m.stop().then(()=>g(new r(504,"hook_timeout","hook executable timed out")),q=>g(q))},S)})]);if(w)throw new r(504,"hook_timeout","hook executable timed out");if(c.stdoutTruncated)throw new r(502,"hook_output_limit","hook stdout exceeded the 10 MiB cap");return{status:200,body:{stdout:c.stdout,status:c.exitCode,signal:c.signal}}}finally{l&&clearTimeout(l)}}u(v,"handleHookExec");const ee=[{method:"GET",pattern:"/v1/nodes/:id/hooks/plan",handler:W},{method:"POST",pattern:"/v1/nodes/:id/hooks/exec",handler:v},{method:"POST",pattern:"/v1/hooks/exec",handler:v}];export{ee as hookExecRoutes};
+var x=Object.defineProperty;var u=(o,n)=>x(o,"name",{value:n,configurable:!0});import{realpathSync as E}from"node:fs";import{isAbsolute as y,relative as _,sep as h}from"node:path";import{ApiError as r}from"../../../api/index.js";import{coreHookCatalog as P}from"../../../build-root.js";import{getNode as T}from"../../../core/canvas/canvas.js";import{isSafeNodeId as A,nodeAgentDir as I}from"../../../core/canvas/paths.js";import{discoverHookRegistry as O}from"../../../core/command-hooks/discovery.js";import{EXEC_HOOK_TIMEOUT_MS as S}from"../../../core/command-hooks/transport/exec-invoke.js";import{buildAppProcessEnv as H}from"../../../core/runtime/spawn-env-rows.js";import{compileLaunch as N}from"../../../core/spaces/mounts.js";import{appProcessSandboxed as M,launchAppProcess as R}from"../../../core/spaces/process.js";import{requireCurrentExecution as B}from"./broker-recovery.js";import{actsAsPerson as C}from"../router.js";import{personId as W}from"../../../core/canvas/person.js";async function k(o,n,t){const i=o.params.id;if(i===void 0?!C(o.principal):!A(i)||o.principal.class!=="broker"||o.principal.node!==i)throw new r(403,"permission_error","hook execution requires its current node, or the person for the global route");const e=i===void 0?null:await T(i);if(i!==void 0&&!e)throw new r(404,"not_found","node not found");if(i!==void 0&&await B(i,n),typeof t!="string"||!y(t))throw new r(400,"invalid_request","hook cwd must be absolute");if(!M())throw new r(400,"invalid_request","hook routes require the root launcher");let d;try{d=E(t)}catch(p){throw p.code==="ENOENT"?new r(400,"invalid_request","hook cwd does not exist"):p}if(e){if(e.isolated===!0){const a=I(i,e.grantee??"app:terminal"),s=_(a,d);if(s===".."||s.startsWith(`..${h}`)||s.startsWith(h))throw new r(403,"permission_error","hook cwd is outside the isolated node folder")}const p=await N({nodeId:i,app:o.principal.class==="broker"?o.principal.app:"app:terminal",sub:e.sub??W(),grantId:e.grant_id??null,scopes:e.scopes??null,isolated:e.isolated===!0,command:[],env:{},auditMissing:u(()=>{},"auditMissing")}),f=u(a=>{const s=_(a,d);return s===""||s!==".."&&!s.startsWith(`..${h}`)&&!y(s)},"within");if(!p.mounts.some(a=>f(a.source)))throw new r(403,"permission_error","hook cwd is outside the node mounts")}return{id:i,node:e,cwd:d,app:e&&o.principal.class==="broker"?o.principal.app:"app:terminal"}}u(k,"checkedContext");async function b(o,n){const t=O(await P(),o,n);if(!t.valid)throw new r(422,"hook_registry_invalid","the effective hook registry is invalid");return t}u(b,"currentRegistry");async function $(o){const{node:n,cwd:t}=await k(o,o.query.get("expected_execution_id"),o.query.get("cwd"));return{status:200,body:{hooks:(await b(t,n.profile_id??null)).hooks.filter(e=>e.plugin.scope==="user").map(e=>({id:e.id,plugin:e.plugin.name,target:e.target,phase:e.phase,op:e.op,description:e.description,effects:e.effects,declarationIndex:e.declarationIndex}))}}}u($,"handleHookPlan");async function v(o){const n=o.body;if(!n||typeof n!="object"||Array.isArray(n))throw new r(400,"invalid_request","hook execution requires a JSON body");const t=n,{id:i,node:e,cwd:d,app:p}=await k(o,t.expected_execution_id,t.cwd);if(typeof t.hook_id!="string"||typeof t.request!="string")throw new r(400,"invalid_request","hook execution requires hook_id and request");const a=(await b(d,e?.profile_id??null)).hooks.find(c=>c.id===t.hook_id);if(!a)throw new r(404,"hook_not_registered","hook id is not registered for this cwd");const s=await H(d,e?.profile_id??null,p),m=await R({...i===void 0?{}:{nodeId:i},app:p,command:[a.executable,"--crtr-hook-protocol","1"],cwd:d,pluginRoot:a.plugin.root,env:s,stdin:t.request,stdoutBytes:10*1024*1024,stderrBytes:64*1024});let l,w=!1;try{const c=await Promise.race([m.completion,new Promise((D,g)=>{l=setTimeout(()=>{w=!0,m.stop().then(()=>g(new r(504,"hook_timeout","hook executable timed out")),q=>g(q))},S)})]);if(w)throw new r(504,"hook_timeout","hook executable timed out");if(c.stdoutTruncated)throw new r(502,"hook_output_limit","hook stdout exceeded the 10 MiB cap");return{status:200,body:{stdout:c.stdout,status:c.exitCode,signal:c.signal}}}finally{l&&clearTimeout(l)}}u(v,"handleHookExec");const te=[{method:"GET",pattern:"/v1/nodes/:id/hooks/plan",handler:$},{method:"POST",pattern:"/v1/nodes/:id/hooks/exec",handler:v},{method:"POST",pattern:"/v1/hooks/exec",handler:v}];export{te as hookExecRoutes};