@north-light/cli 0.3.561 → 0.3.563

package/dist/pi-extensions/canvas-review-boundary.js

@@ -1,3 +1,3 @@
-var h=Object.defineProperty;var d=(e,a)=>h(e,"name",{value:a,configurable:!0});import{envNodeId as f}from"../shared/env.js";import{brokerExtensionState as m}from"../core/runtime/broker/daemon-ops.js";import{isReviewBoundary as w,REVIEW_BOUNDARY_CUSTOM_TYPE as _}from"../core/runtime/session-visibility.js";import{formatCard as b}from"../shared/generated-context.js";function l(e){e.on("session_start",async(a,v)=>{const i=f();if(!i||i.trim()==="")return;let n;try{n=(await m(i)).node}catch{return}if(n.review_binding==null||v.sessionManager.getBranch().some(g=>w(g,n.review_binding?.review_id)))return;const r=n.review_binding,{review_id:t,origin_node_id:o,target_file:s}=r,c=r.kind==="page_feedback"?[`This conversation began from feedback on page ${t}.`,`Page source: ${s}`,`Origin node: ${o}`,"","The person's visible transcript starts here. Everything above this marker is the origin node's work \u2014 inherited context they have not seen."].join(`
-`):[`Reviewed file: ${s}`,`Review ID: ${t}`,`Origin node: ${o}`,"","The person's visible transcript starts here. Everything above this marker is inherited context they have not seen."].join(`
-`);e.sendMessage({customType:_,content:b("review-boundary",{},c),display:!0,details:{reviewId:t,originNodeId:o,targetFile:s,kind:r.kind??"review"}})})}d(l,"registerCanvasReviewBoundary");var R=l;export{R as default,l as registerCanvasReviewBoundary};
+var h=Object.defineProperty;var d=(e,i)=>h(e,"name",{value:i,configurable:!0});import{envNodeId as f}from"../shared/env.js";import{bootExtensionState as m}from"../core/runtime/broker/boot-state.js";import{isReviewBoundary as w,REVIEW_BOUNDARY_CUSTOM_TYPE as _}from"../core/runtime/session-visibility.js";import{formatCard as b}from"../shared/generated-context.js";function l(e,i=m){e.on("session_start",async(p,v)=>{const r=f();if(!r||r.trim()==="")return;let n;try{n=(await i(r)).node}catch{return}if(n.review_binding==null||v.sessionManager.getBranch().some(g=>w(g,n.review_binding?.review_id)))return;const t=n.review_binding,{review_id:o,origin_node_id:s,target_file:a}=t,c=t.kind==="page_feedback"?[`This conversation began from feedback on page ${o}.`,`Page source: ${a}`,`Origin node: ${s}`,"","The person's visible transcript starts here. Everything above this marker is the origin node's work \u2014 inherited context they have not seen."].join(`
+`):[`Reviewed file: ${a}`,`Review ID: ${o}`,`Origin node: ${s}`,"","The person's visible transcript starts here. Everything above this marker is inherited context they have not seen."].join(`
+`);e.sendMessage({customType:_,content:b("review-boundary",{},c),display:!0,details:{reviewId:o,originNodeId:s,targetFile:a,kind:t.kind??"review"}})})}d(l,"registerCanvasReviewBoundary");var T=l;export{T as default,l as registerCanvasReviewBoundary};

package/dist/pi-extensions/canvas-stophook.js

@@ -1 +1 @@
-var X=Object.defineProperty;var l=(n,t)=>X(n,"name",{value:t,configurable:!0});import{brokerSignalClient as P}from"../core/runtime/broker/signal-stream.js";import{brokerExecutionId as K}from"../core/runtime/broker/daemon-ops.js";import{envNodeId as Z}from"../shared/env.js";import{stripCdPrefix as ee}from"../shared/strip-cd-prefix.js";import{contextDir as te}from"../core/canvas/paths.js";import{mutateBrokerFault as ne,recordBrokerTelemetry as re,recordBrokerTurn as x,clearBrokerPushedFinal as oe,consumeBrokerPushedFinal as se}from"../core/runtime/broker/daemon-ops.js";import{bindBrokerSession as ae,cachedBrokerNode as j,relaunchBrokerRoot as ie,settleBroker as L}from"../core/runtime/broker/daemon-ops.js";import{emitEvent as F}from"../core/events/emit.js";import{activeBackgroundBashJobs as le}from"../core/bash-jobs.js";import{CONTEXT_NUDGE_CUSTOM_TYPE as ue,formatCard as ce}from"../shared/generated-context.js";import{isReviewBoundary as de}from"../core/runtime/session-visibility.js";import{clearRefusedTurn as fe,isRuntimeTeardownInProgress as he,refuseTurn as me,runRefreshAbort as ge}from"../core/runtime/broker/extension-abort.js";import{announceMessageOrigin as Y}from"../core/runtime/stamp/channel.js";const z=80;function ye(n,t){const i=t??{},s=l(w=>typeof w=="string"?w:"","pick"),h=ee(s(i.command).trim())||s(i.path)||s(i.file_path)||s(i.pattern)||s(i.description)||s(i.prompt),m=(h!==""?`${n}: ${h}`:n).replace(/\s+/g," ").trim();return m.length>z?m.slice(0,z):m}l(ye,"summarizeActivity");function pe(n){for(let t=n.length-1;t>=0;t--)if(n[t]?.role==="assistant")return n[t]}l(pe,"lastAssistantMessage");function we(n){try{const t=n?.sessionManager?.getBranch();if(!Array.isArray(t))return[];const i=new Set;for(const s of t){if(!de(s))continue;const u=s.details?.reviewId;typeof u=="string"&&i.add(u)}return[...i]}catch{return[]}}l(we,"currentReviewBoundaryIds");const G=1e4,A=[13e4,15e4,17e4,185e3,2e5];function _e(n){const t=A[0],i=A[A.length-1];if(n<t)return null;if(n>=i)return i+Math.floor((n-i)/G)*G;let s=t;for(const u of A)n>=u&&(s=u);return s}l(_e,"steerBand");function ke(n,t,i){const s=Math.round(n/1e3),u=n>=185e3;if(i==="orchestrator")return n<15e4?`Context ~${s}k and growing. When you reach a good stopping point, consider updating your roadmap (\`crtr doc edit roadmap\`) and running \`crtr node yield\` to refresh against it \u2014 no rush yet.`:u?`Context ~${s}k \u2014 this is getting long. Stop taking on new work now: bring your roadmap current, hand off anything outstanding, and \`crtr node yield\` immediately to refresh before this context overflows.`:`Context ~${s}k. Update your roadmap (\`crtr doc edit roadmap\`) so a fresh revive can continue, delegate any outstanding work, then \`crtr node yield\` to refresh.`;if(t==="resident"){const h="If substantial work remains, `crtr node yield` to continue fresh against your goal and your note. Add --promote only when worthwhile independent work can run in parallel and coordinating it should become your primary job; `crtr node yield -h` has the boundary.";return n<15e4?`Context ~${s}k and growing. ${h} Otherwise no rush \u2014 wrap up when you reach a good stopping point.`:u?`Context ~${s}k \u2014 this is getting long. Wrap up now before this context overflows: finish what's in hand, or \`crtr node yield\` immediately to continue fresh against your goal and your note if substantial work remains.`:`Context ~${s}k. ${h} If you're near done, just finish here; if there's more open-ended work, \`crtr node yield\` rather than letting this context grow.`}return n<15e4?`Context ~${s}k and growing. If you're near done, finish with \`crtr push final\`. If real work remains, \`crtr node yield\` to continue in a fresh window against your goal and your note \u2014 no rush yet.`:u?`Context ~${s}k \u2014 this is getting long. Wrap up now before this context overflows: \`crtr push final\` if you're close, otherwise \`crtr node yield\` immediately to continue in a fresh window against your goal and your note.`:`Context ~${s}k. If you're close, finish with \`crtr push final\`; otherwise \`crtr node yield\` now to refresh into a clean window and keep going against your goal and your note.`}l(ke,"steerNote");function be(n){const t=Z();if(t===void 0||t.trim()==="")return;let i=0,s=0,u="",h=null,m=null;const w=new Set;let k=!1,C=!1;const D=l(e=>{if(!C){C=!0;try{ge(()=>e?.abort?.())}catch{}}},"abortForRefresh");let T;const Q=P().subscribe("node",()=>{const e=P();k&&e.state==="connected"&&e.latestNode?.intent==="refresh"&&D(T)}),N=l(()=>le(te(t)).length>0,"backgroundJobsRunning"),c=l((e,r)=>{F({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:r,fields:{operation:e}})},"emitDaemonOperationFailure"),O=l((e,r)=>{if(e.action==="reprompt"){Y(e.prompt,{type:"runtime",kind:"stop-guard"}),n.sendUserMessage(e.prompt,{deliverAs:"followUp"});return}if(e.action==="shutdown")try{r?.shutdown?.()}catch{}},"enactSettleDirective"),V=3e3;let U=0,I=Promise.resolve(),d=null,q=null,J=-1/0,g=null,R=0;const S=l(()=>{if(d===null||d===q)return;const e=d;q=e,J=Date.now(),I=I.then(()=>re(t,e)).catch(r=>c("telemetry",r))},"queueTelemetry"),B=l((e,r)=>{if(d!==null&&d.tokens_in===i&&d.tokens_out===s&&d.model===u&&d.context_tokens===e&&d.last_activity===r)return;R=Math.max(Date.now(),R+1),d={tokens_in:i,tokens_out:s,model:u,context_tokens:e,last_activity:r,updated_at:new Date(R).toISOString()};const o=2e3-(Date.now()-J);o<=0?S():g===null&&(g=setTimeout(()=>{g=null,S()},o),g.unref?.())},"publishTelemetry"),E=l(()=>(g!==null&&clearTimeout(g),g=null,S(),I),"flushTelemetry");let $=Promise.resolve();const H=l(e=>($=$.catch(()=>{}).then(async()=>{const r=await x(t,{event:"progress"});(r.fault_link==="daemon\u2192node"||e&&r.fault_link==="pi\u2192provider")&&await ne(t,{op:"clear",link:r.fault_link})}),$),"reportProgress"),v=l(()=>{const e=Date.now();e-U<V||(U=e,H(!1).catch(r=>c("turn_progress",r)))},"heartbeat");n.on("session_start",async(e,r)=>{try{const o=r?.sessionManager?.getSessionId?.();if(typeof o!="string"||o==="")return;const y=r?.sessionManager?.getSessionFile?.(),p=typeof y=="string"&&y!==""?y:null,_=typeof e?.reason=="string"?e.reason:null;_==="new"&&(i=0,s=0,w.clear());const a=await ae(t,{piSessionId:o,sessionFile:p,pid:process.pid,reason:_,reviewBoundaryIds:we(r)});if(a.action==="none"&&P().start(t,K()),a.action==="shutdown"){try{r?.shutdown?.()}catch{}return}if(a.action==="relaunch_root"){ie(t).catch(f=>{const b=f instanceof Error?f.message:String(f);r?.ui?.notify?.(`/new refused: ${b}`,"error"),F({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:f,fields:{operation:"relaunch_root"}})});return}}catch(o){F({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:o,fields:{operation:"session_bound"}})}}),n.on("agent_start",async(e,r)=>{k=!0,T=r;try{if(!(await x(t,{event:"started"})).applied)throw new Error("daemon refused turn open")}catch(o){c("turn_open",o),r?.ui?.notify?.("Turn refused: the broker no longer owns this node.","error"),me(()=>r?.abort?.())}}),n.on("input",async()=>{k||(C=!1),fe();try{await oe(t)}catch(e){throw c("clear_pushed_final",e),e}}),n.on("tool_execution_start",e=>{try{m=ye(String(e?.toolName??""),e?.args),B(h,m),v()}catch{}}),n.on("tool_execution_update",()=>{try{v()}catch{}}),n.on("message_update",()=>{try{v()}catch{}}),n.on("tool_execution_end",async(e,r)=>{try{v(),(await j(t)).intent==="refresh"&&D(r)}catch{}}),n.on("session_shutdown",async(e,r)=>{Q(),k=!1,T=void 0,await E();try{await x(t,{event:"closed",end_reason:"teardown-aborted"})}catch(o){c("turn_close_teardown",o)}if(e?.reason==="quit")try{const o=await L(t,{stopReason:"quit",backgroundJobsRunning:N(),pushedFinal:!1});O(o,r)}catch(o){c("settle_quit",o)}});const W=l(e=>{e?.role!=="assistant"||e.usage==null||(i+=Number(e.usage.input??0)||0,s+=Number(e.usage.output??0)||0,typeof e.model=="string"&&e.model!==""&&(u=e.model))},"accumulate");n.on("turn_end",async(e,r)=>{W(e?.message);let o=null;try{const a=r.getContextUsage()?.tokens;typeof a=="number"&&(o=a)}catch{}o!==null&&(h=o),B(o,m),await E();try{const a=e?.message?.stopReason!=="error"&&e?.message?.stopReason!=="aborted";await H(a)}catch(a){c("turn_end_fault_clear",a)}const y=Array.isArray(e?.message?.content)?e.message.content:[],p=e?.message?.stopReason??"",_=p!=="error"&&p!=="aborted"&&y.some(a=>a?.type==="toolCall");try{const a=o!==null?_e(o):null,f=a!==null&&!w.has(a)?await j(t):null;if(a!==null&&f!==null){w.add(a);const b=ce("context-nudge",{},ke(a,f.lifecycle,f.mode));_?(Y(b,{type:"runtime",kind:"context-nudge"}),n.sendUserMessage(b,{deliverAs:"steer"})):n.sendMessage({customType:ue,content:b,display:!0},{deliverAs:"nextTurn"})}}catch(a){c("turn_boundary",a)}});let M=null;n.on("agent_end",e=>{M=e;try{const r=Array.isArray(e?.messages)?e.messages:[];for(const o of r)W(o)}catch{}}),n.on("agent_settled",async(e,r)=>{k=!1,T=void 0,B(h,m),await E();const o=M;if(M=null,he())return;try{await x(t,{event:"closed",end_reason:"settled"})}catch(a){c("turn_close",a);return}const y=Array.isArray(o?.messages)?o.messages:[],p=pe(y),_=typeof p?.stopReason=="string"?p.stopReason:"";try{const a=o===null?{pushedFinal:!1}:await se(t),f=await L(t,{stopReason:_,backgroundJobsRunning:N(),pushedFinal:a.pushedFinal});O(f,r)}catch(a){c("settle",a)}})}l(be,"registerCanvasStophook");var De=be;export{De as default,be as registerCanvasStophook,ke as steerNote};
+var X=Object.defineProperty;var l=(n,t)=>X(n,"name",{value:t,configurable:!0});import{brokerSignalClient as A}from"../core/runtime/broker/signal-stream.js";import{brokerExecutionId as J}from"../core/runtime/broker/daemon-ops.js";import{envNodeId as K}from"../shared/env.js";import{stripCdPrefix as Z}from"../shared/strip-cd-prefix.js";import{mutateBrokerFault as ee,recordBrokerTelemetry as te,recordBrokerTurn as x,clearBrokerPushedFinal as ne,consumeBrokerPushedFinal as re}from"../core/runtime/broker/daemon-ops.js";import{bindBrokerSession as oe,cachedBrokerNode as j,postBrokerIdle as se,relaunchBrokerRoot as ae,settleBroker as L}from"../core/runtime/broker/daemon-ops.js";import{emitEvent as F}from"../core/events/emit.js";import{CONTEXT_NUDGE_CUSTOM_TYPE as ie,formatCard as le}from"../shared/generated-context.js";import{isReviewBoundary as ue}from"../core/runtime/session-visibility.js";import{clearRefusedTurn as ce,isRuntimeTeardownInProgress as de,refuseTurn as fe,runRefreshAbort as he}from"../core/runtime/broker/extension-abort.js";import{announceMessageOrigin as Y}from"../core/runtime/stamp/channel.js";const z=80;function ye(n,t){const i=t??{},s=l(w=>typeof w=="string"?w:"","pick"),h=Z(s(i.command).trim())||s(i.path)||s(i.file_path)||s(i.pattern)||s(i.description)||s(i.prompt),y=(h!==""?`${n}: ${h}`:n).replace(/\s+/g," ").trim();return y.length>z?y.slice(0,z):y}l(ye,"summarizeActivity");function pe(n){for(let t=n.length-1;t>=0;t--)if(n[t]?.role==="assistant")return n[t]}l(pe,"lastAssistantMessage");function me(n){try{const t=n?.sessionManager?.getBranch();if(!Array.isArray(t))return[];const i=new Set;for(const s of t){if(!ue(s))continue;const u=s.details?.reviewId;typeof u=="string"&&i.add(u)}return[...i]}catch{return[]}}l(me,"currentReviewBoundaryIds");const G=1e4,C=[13e4,15e4,17e4,185e3,2e5];function ge(n){const t=C[0],i=C[C.length-1];if(n<t)return null;if(n>=i)return i+Math.floor((n-i)/G)*G;let s=t;for(const u of C)n>=u&&(s=u);return s}l(ge,"steerBand");function we(n,t,i){const s=Math.round(n/1e3),u=n>=185e3;if(i==="orchestrator")return n<15e4?`Context ~${s}k and growing. When you reach a good stopping point, consider updating your roadmap (\`crtr doc edit roadmap\`) and running \`crtr node yield\` to refresh against it \u2014 no rush yet.`:u?`Context ~${s}k \u2014 this is getting long. Stop taking on new work now: bring your roadmap current, hand off anything outstanding, and \`crtr node yield\` immediately to refresh before this context overflows.`:`Context ~${s}k. Update your roadmap (\`crtr doc edit roadmap\`) so a fresh revive can continue, delegate any outstanding work, then \`crtr node yield\` to refresh.`;if(t==="resident"){const h="If substantial work remains, `crtr node yield` to continue fresh against your goal and your note. Add --promote only when worthwhile independent work can run in parallel and coordinating it should become your primary job; `crtr node yield -h` has the boundary.";return n<15e4?`Context ~${s}k and growing. ${h} Otherwise no rush \u2014 wrap up when you reach a good stopping point.`:u?`Context ~${s}k \u2014 this is getting long. Wrap up now before this context overflows: finish what's in hand, or \`crtr node yield\` immediately to continue fresh against your goal and your note if substantial work remains.`:`Context ~${s}k. ${h} If you're near done, just finish here; if there's more open-ended work, \`crtr node yield\` rather than letting this context grow.`}return n<15e4?`Context ~${s}k and growing. If you're near done, finish with \`crtr push final\`. If real work remains, \`crtr node yield\` to continue in a fresh window against your goal and your note \u2014 no rush yet.`:u?`Context ~${s}k \u2014 this is getting long. Wrap up now before this context overflows: \`crtr push final\` if you're close, otherwise \`crtr node yield\` immediately to continue in a fresh window against your goal and your note.`:`Context ~${s}k. If you're close, finish with \`crtr push final\`; otherwise \`crtr node yield\` now to refresh into a clean window and keep going against your goal and your note.`}l(we,"steerNote");function _e(n){const t=K();if(t===void 0||t.trim()==="")return;let i=0,s=0,u="",h=null,y=null;const w=new Set;let k=!1,I=!1;const N=l(e=>{if(!I){I=!0;try{he(()=>e?.abort?.())}catch{}}},"abortForRefresh");let T;const Q=A().subscribe("node",()=>{const e=A();k&&e.state==="connected"&&e.latestNode?.intent==="refresh"&&N(T)}),c=l((e,r)=>{F({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:r,fields:{operation:e}})},"emitDaemonOperationFailure"),D=l((e,r)=>{if(e.action==="reprompt"){Y(e.prompt,{type:"runtime",kind:"stop-guard"}),n.sendUserMessage(e.prompt,{deliverAs:"followUp"});return}if(e.action==="stay_resident"){se(t).then(()=>A().stop(),o=>c("idle",o));return}if(e.action==="shutdown")try{r?.shutdown?.()}catch{}},"enactSettleDirective"),V=3e3;let O=0,S=Promise.resolve(),d=null,U=null,q=-1/0,p=null,B=0;const R=l(()=>{if(d===null||d===U)return;const e=d;U=e,q=Date.now(),S=S.then(()=>te(t,e)).catch(r=>c("telemetry",r))},"queueTelemetry"),E=l((e,r)=>{if(d!==null&&d.tokens_in===i&&d.tokens_out===s&&d.model===u&&d.context_tokens===e&&d.last_activity===r)return;B=Math.max(Date.now(),B+1),d={tokens_in:i,tokens_out:s,model:u,context_tokens:e,last_activity:r,updated_at:new Date(B).toISOString()};const o=2e3-(Date.now()-q);o<=0?R():p===null&&(p=setTimeout(()=>{p=null,R()},o),p.unref?.())},"publishTelemetry"),$=l(()=>(p!==null&&clearTimeout(p),p=null,R(),S),"flushTelemetry");let M=Promise.resolve();const H=l(e=>(M=M.catch(()=>{}).then(async()=>{const r=await x(t,{event:"progress"});(r.fault_link==="daemon\u2192node"||e&&r.fault_link==="pi\u2192provider")&&await ee(t,{op:"clear",link:r.fault_link})}),M),"reportProgress"),v=l(()=>{const e=Date.now();e-O<V||(O=e,H(!1).catch(r=>c("turn_progress",r)))},"heartbeat");n.on("session_start",async(e,r)=>{try{const o=r?.sessionManager?.getSessionId?.();if(typeof o!="string"||o==="")return;const m=r?.sessionManager?.getSessionFile?.(),g=typeof m=="string"&&m!==""?m:null,_=typeof e?.reason=="string"?e.reason:null;_==="new"&&(i=0,s=0,w.clear());const a=await oe(t,{piSessionId:o,sessionFile:g,pid:process.pid,reason:_,reviewBoundaryIds:me(r)});if(a.action==="none"&&A().start(t,J()),a.action==="shutdown"){try{r?.shutdown?.()}catch{}return}if(a.action==="relaunch_root"){ae(t).catch(f=>{const b=f instanceof Error?f.message:String(f);r?.ui?.notify?.(`/new refused: ${b}`,"error"),F({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:f,fields:{operation:"relaunch_root"}})});return}}catch(o){F({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:o,fields:{operation:"session_bound"}})}}),n.on("agent_start",async(e,r)=>{k=!0,T=r;try{if(!(await x(t,{event:"started"})).applied)throw new Error("daemon refused turn open")}catch(o){c("turn_open",o),r?.ui?.notify?.("Turn refused: the broker no longer owns this node.","error"),fe(()=>r?.abort?.())}}),n.on("input",async()=>{k||(I=!1),ce();try{await ne(t)}catch(e){throw c("clear_pushed_final",e),e}}),n.on("tool_execution_start",e=>{try{y=ye(String(e?.toolName??""),e?.args),E(h,y),v()}catch{}}),n.on("tool_execution_update",()=>{try{v()}catch{}}),n.on("message_update",()=>{try{v()}catch{}}),n.on("tool_execution_end",async(e,r)=>{try{v(),(await j(t)).intent==="refresh"&&N(r)}catch{}}),n.on("session_shutdown",async(e,r)=>{Q(),k=!1,T=void 0,await $();try{await x(t,{event:"closed",end_reason:"teardown-aborted"})}catch(o){c("turn_close_teardown",o)}if(e?.reason==="quit")try{const o=await L(t,{stopReason:"quit",pushedFinal:!1});D(o,r)}catch(o){c("settle_quit",o)}});const W=l(e=>{e?.role!=="assistant"||e.usage==null||(i+=Number(e.usage.input??0)||0,s+=Number(e.usage.output??0)||0,typeof e.model=="string"&&e.model!==""&&(u=e.model))},"accumulate");n.on("turn_end",async(e,r)=>{W(e?.message);let o=null;try{const a=r.getContextUsage()?.tokens;typeof a=="number"&&(o=a)}catch{}o!==null&&(h=o),E(o,y),await $();try{const a=e?.message?.stopReason!=="error"&&e?.message?.stopReason!=="aborted";await H(a)}catch(a){c("turn_end_fault_clear",a)}const m=Array.isArray(e?.message?.content)?e.message.content:[],g=e?.message?.stopReason??"",_=g!=="error"&&g!=="aborted"&&m.some(a=>a?.type==="toolCall");try{const a=o!==null?ge(o):null,f=a!==null&&!w.has(a)?await j(t):null;if(a!==null&&f!==null){w.add(a);const b=le("context-nudge",{},we(a,f.lifecycle,f.mode));_?(Y(b,{type:"runtime",kind:"context-nudge"}),n.sendUserMessage(b,{deliverAs:"steer"})):n.sendMessage({customType:ie,content:b,display:!0},{deliverAs:"nextTurn"})}}catch(a){c("turn_boundary",a)}});let P=null;n.on("agent_end",e=>{P=e;try{const r=Array.isArray(e?.messages)?e.messages:[];for(const o of r)W(o)}catch{}}),n.on("agent_settled",async(e,r)=>{k=!1,T=void 0,E(h,y),await $();const o=P;if(P=null,de())return;try{await x(t,{event:"closed",end_reason:"settled"})}catch(a){c("turn_close",a);return}const m=Array.isArray(o?.messages)?o.messages:[],g=pe(m),_=typeof g?.stopReason=="string"?g.stopReason:"";try{const a=o===null?{pushedFinal:!1}:await re(t),f=await L(t,{stopReason:_,pushedFinal:a.pushedFinal});D(f,r)}catch(a){c("settle",a)}})}l(_e,"registerCanvasStophook");var $e=_e;export{$e as default,_e as registerCanvasStophook,we as steerNote};

package/dist/pi-extensions/canvas-structured-output.d.ts

@@ -33,8 +33,10 @@ interface ToolDefinitionLike {
 interface PiLike {
     on(event: 'before_agent_start', handler: (event: BeforeAgentStartEventLike) => {
         systemPrompt: string;
-    } | void): void;
-    on(event: 'turn_end', handler: () => void): void;
+    } | void | Promise<{
+        systemPrompt: string;
+    } | void>): void;
+    on(event: 'turn_end', handler: () => void | Promise<void>): void;
     registerTool(tool: ToolDefinitionLike): void;
     getActiveTools(): string[];
     setActiveTools(toolNames: string[]): void;
@@ -44,6 +46,6 @@ export declare function structuredOutputPromptBlock(request: StructuredOutputReq
 /** The model-facing text for an accepted submission — the same wording `crtr push result` prints. */
 export declare function submitResultText(result: SubmitResultDTO): string;
 /** Build the `submit_result` tool for one node. Exported for the test suite. */
-export declare function createSubmitResultTool(nodeId: string, submit?: (req: SubmitResultRequest) => Promise<SubmitResultDTO>): ToolDefinitionLike;
+export declare function createSubmitResultTool(nodeId: string, submit?: (req: SubmitResultRequest) => Promise<SubmitResultDTO>, readPending?: () => Promise<StructuredOutputRequest | null>): ToolDefinitionLike;
 export declare function registerCanvasStructuredOutput(pi: PiLike): void;
 export default registerCanvasStructuredOutput;

package/dist/pi-extensions/canvas-structured-output.js

@@ -1,5 +1,5 @@
-var b=Object.defineProperty;var d=(e,t)=>b(e,"name",{value:t,configurable:!0});import{Type as i}from"typebox";import{envNodeId as g}from"../shared/env.js";import{localClient as y}from"../api/node-transport.js";import{ApiError as q}from"../api/index.js";import{readBrokerOutputRequest as h,SUBMIT_RESULT_TOOL as a}from"../core/runtime/structured-output.js";function $(e){const t=JSON.stringify(e.schema,null,2),n=`call the ${`\`${a}\` tool with \`request_id: "${e.request_id}"\``} and the JSON in \`result\``,r=`call \`${a}\` with \`decline: { reason, code }\` instead`;return`<structured-output-request>
-${e.mode==="terminal"?`This node owes a terminal structured result. When the work is complete, submit it: ${n}. That records it and pushes your final report in one step, finishing this node. Do NOT call \`crtr push final\` yourself; it is blocked while this request is pending. If the schema cannot be honestly satisfied (blocked, unavailable, bad input), ${r} of inventing a value \u2014 that finishes the node with a declined outcome. You cannot stop or go dormant until the result is accepted or declined.`:`This node owes a one-off structured result. Submit it: ${n}. That records it and pushes an update report to your subscribers, then you continue working normally. If the schema cannot be honestly satisfied, ${r} of inventing a value. You cannot stop or go dormant until the result is accepted or declined.`}
+var b=Object.defineProperty;var o=(e,t)=>b(e,"name",{value:t,configurable:!0});import{Type as i}from"typebox";import{envNodeId as q}from"../shared/env.js";import{localClient as p}from"../api/node-transport.js";import{ApiError as w}from"../api/index.js";import{SUBMIT_RESULT_TOOL as a}from"../core/runtime/structured-output.js";function O(e){const t=JSON.stringify(e.schema,null,2),r=`call the ${`\`${a}\` tool with \`request_id: "${e.request_id}"\``} and the JSON in \`result\``,n=`call \`${a}\` with \`decline: { reason, code }\` instead`;return`<structured-output-request>
+${e.mode==="terminal"?`This node owes a terminal structured result. When the work is complete, submit it: ${r}. That records it and pushes your final report in one step, finishing this node. Do NOT call \`crtr push final\` yourself; it is blocked while this request is pending. If the schema cannot be honestly satisfied (blocked, unavailable, bad input), ${n} of inventing a value \u2014 that finishes the node with a declined outcome. You cannot stop or go dormant until the result is accepted or declined.`:`This node owes a one-off structured result. Submit it: ${r}. That records it and pushes an update report to your subscribers, then you continue working normally. If the schema cannot be honestly satisfied, ${n} of inventing a value. You cannot stop or go dormant until the result is accepted or declined.`}
 
 The submitted JSON is validated against this schema; a mismatch rejects with field errors and records nothing, so fix it and call the tool again.
 
@@ -8,16 +8,11 @@ Required schema:
 \`\`\`json
 ${t}
 \`\`\`
-</structured-output-request>`}d($,"structuredOutputPromptBlock");function w(e){const t=e.declined,s=e.mode==="terminal"?`${t?"Decline recorded":"Result recorded"} \u2014 node finished; its engine shuts down on next stop. Nothing more to do here: STOP your turn immediately. Reply with just "Done." and nothing else.`:`${t?"One-off request declined":"One-off result recorded"} and pushed \u2014 the structured-output gate is cleared; continue working normally.`,n=t===void 0?"":`
+</structured-output-request>`}o(O,"structuredOutputPromptBlock");function $(e){const t=e.declined,s=e.mode==="terminal"?`${t?"Decline recorded":"Result recorded"} \u2014 node finished; its engine shuts down on next stop. Nothing more to do here: STOP your turn immediately. Reply with just "Done." and nothing else.`:`${t?"One-off request declined":"One-off result recorded"} and pushed \u2014 the structured-output gate is cleared; continue working normally.`,r=t===void 0?"":`
 - code: ${t.code} (${t.retryable?"retryable":"not retryable"})`;return`${s}
 
-- ${t?"declined":"result"}: ${e.result_path}${n}
-- report: ${e.report}`}d(w,"submitResultText");function O(e,t){if(typeof t!="string")return t;const s=h(e),n=s.state==="valid"?s.request.schema.type:void 0;if(n!=="object"&&n!=="array")return t;try{return JSON.parse(t)}catch{return t}}d(O,"normalizeResult");function l(e){return{content:[{type:"text",text:e}],details:void 0,isError:!0}}d(l,"errorResult");function T(e,t=s=>y({autostart:!1}).submitResult(e,s)){return{name:a,label:"Submit result",description:"Answer this node's pending structured-output request. Pass the request id from the structured-output instruction and either `result` (the JSON value matching the required schema) or `decline` when the schema cannot be honestly satisfied. The result is validated against the schema; a mismatch is rejected with field errors and nothing is recorded.",promptSnippet:"Submit the JSON result for a pending structured-output request (or decline it)",parameters:i.Object({request_id:i.String({description:"The request id named in the structured-output instruction."}),result:i.Optional(i.Unknown({description:"The JSON value matching the required schema. Omit when declining."})),decline:i.Optional(i.Object({reason:i.String({description:"One sentence on why the schema cannot be honestly satisfied."}),code:i.String({description:"A whitespace-free token naming the decline class, as the requester documented."}),retryable:i.Optional(i.Boolean({description:"Whether a retry could succeed. Default false."}))},{description:"Decline the request instead of submitting a result."}))}),defaultActive:!1,async execute(s,n){const r=typeof n.request_id=="string"?n.request_id.trim():"";if(r==="")return l("request_id is required: pass the request id named in the structured-output instruction.");const c=Object.hasOwn(n,"result")&&n.result!==void 0,o=n.decline;if(c&&o!==void 0)return l("Pass either `result` or `decline`, not both.");if(!c&&o===void 0)return l("Pass `result` (the JSON value matching the required schema), or `decline` when the schema cannot be honestly satisfied.");const f=o!==void 0?{request_id:r,decline:o.reason,code:o.code,retryable:o.retryable===!0}:{request_id:r,value:O(e,n.result)};try{const u=await t(f);return{content:[{type:"text",text:w(u)}],details:u}}catch(u){if(u instanceof q){const m=u.details,p=typeof m?.next=="string"?`
+- report: ${e.report}${r}`}o($,"submitResultText");async function m(e){return(await p({autostart:!1}).brokerStructuredRequest(e)).request}o(m,"readPendingRequest");function T(e,t){if(typeof t!="string")return t;const s=e?.schema.type;if(s!=="object"&&s!=="array")return t;try{return JSON.parse(t)}catch{return t}}o(T,"normalizeResult");function l(e){return{content:[{type:"text",text:e}],details:void 0,isError:!0}}o(l,"errorResult");function S(e,t=r=>p({autostart:!1}).submitResult(e,r),s=()=>m(e)){return{name:a,label:"Submit result",description:"Answer this node's pending structured-output request. Pass the request id from the structured-output instruction and either `result` (the JSON value matching the required schema) or `decline` when the schema cannot be honestly satisfied. The result is validated against the schema; a mismatch is rejected with field errors and nothing is recorded.",promptSnippet:"Submit the JSON result for a pending structured-output request (or decline it)",parameters:i.Object({request_id:i.String({description:"The request id named in the structured-output instruction."}),result:i.Optional(i.Unknown({description:"The JSON value matching the required schema. Omit when declining."})),decline:i.Optional(i.Object({reason:i.String({description:"One sentence on why the schema cannot be honestly satisfied."}),code:i.String({description:"A whitespace-free token naming the decline class, as the requester documented."}),retryable:i.Optional(i.Boolean({description:"Whether a retry could succeed. Default false."}))},{description:"Decline the request instead of submitting a result."}))}),defaultActive:!1,async execute(r,n){const d=typeof n.request_id=="string"?n.request_id.trim():"";if(d==="")return l("request_id is required: pass the request id named in the structured-output instruction.");const h=Object.hasOwn(n,"result")&&n.result!==void 0,c=n.decline;if(h&&c!==void 0)return l("Pass either `result` or `decline`, not both.");if(!h&&c===void 0)return l("Pass `result` (the JSON value matching the required schema), or `decline` when the schema cannot be honestly satisfied.");const y=c!==void 0?{request_id:d,decline:c.reason,code:c.code,retryable:c.retryable===!0}:{request_id:d,value:T(await s(),n.result)};try{const u=await t(y);return{content:[{type:"text",text:$(u)}],details:u}}catch(u){if(u instanceof w){const f=u.details,g=typeof f?.next=="string"?`
 
-${m.next}`:"";return l(`${u.code}: ${u.message}${p}`)}return l(`The result was not submitted: ${u.message}`)}}}}d(T,"createSubmitResultTool");function S(e){const t=g();if(t===void 0||t.trim()==="")return;e.registerTool(T(t));const s=d(n=>{const r=e.getActiveTools(),c=r.includes(a);n&&!c?e.setActiveTools([...r,a]):!n&&c&&e.setActiveTools(r.filter(o=>o!==a))},"syncTool");e.on("before_agent_start",n=>{const r=h(t);if(s(r.state!=="absent"),r.state==="invalid")return{systemPrompt:`${n.systemPrompt}
+${f.next}`:"";return l(`${u.code}: ${u.message}${g}`)}return l(`The result was not submitted: ${u.message}`)}}}}o(S,"createSubmitResultTool");function x(e){const t=q();if(t===void 0||t.trim()==="")return;e.registerTool(S(t));const s=o(r=>{const n=e.getActiveTools(),d=n.includes(a);r&&!d?e.setActiveTools([...n,a]):!r&&d&&e.setActiveTools(n.filter(h=>h!==a))},"syncTool");e.on("before_agent_start",async r=>{const n=await m(t);if(s(n!==null),n!==null)return{systemPrompt:`${r.systemPrompt}
 
-<structured-output-request>
-This node owes a structured result, but its request file is unreadable to this process (${r.error}). Call the \`${a}\` tool with the request_id and required schema named in the stop-guard message; the server validates it.
-</structured-output-request>`};if(r.state==="valid")return{systemPrompt:`${n.systemPrompt}
-
-${$(r.request)}`}}),e.on("turn_end",()=>{s(h(t).state!=="absent")})}d(S,"registerCanvasStructuredOutput");var P=S;export{a as SUBMIT_RESULT_TOOL,T as createSubmitResultTool,P as default,S as registerCanvasStructuredOutput,$ as structuredOutputPromptBlock,w as submitResultText};
+${O(n)}`}}),e.on("turn_end",async()=>{s(await m(t)!==null)})}o(x,"registerCanvasStructuredOutput");var J=x;export{a as SUBMIT_RESULT_TOOL,S as createSubmitResultTool,J as default,x as registerCanvasStructuredOutput,O as structuredOutputPromptBlock,$ as submitResultText};

package/dist/pi-extensions/canvas-tool-guide.d.ts

@@ -2,13 +2,20 @@ declare function injectToolGuide(systemPrompt: string, helpText: string): string
 interface BeforeAgentStartEventLike {
     systemPrompt: string;
 }
+interface SessionStartCtxLike {
+    sessionManager: {
+        getBranch(): ReadonlyArray<{
+            type: string;
+        }>;
+    };
+}
 interface PiLike {
-    on(event: 'session_start', handler: () => void | Promise<void>): void;
+    on(event: 'session_start', handler: (event: unknown, ctx: SessionStartCtxLike) => void | Promise<void>): void;
     on(event: 'before_agent_start', handler: (event: BeforeAgentStartEventLike) => {
         systemPrompt: string;
     } | void): void;
 }
 /** Register the root crtr tool-guide injection for a canvas node. */
-export declare function registerCanvasToolGuide(pi: PiLike): void;
+export declare function registerCanvasToolGuide(pi: PiLike, release?: () => string): void;
 export { injectToolGuide };
 export default registerCanvasToolGuide;

package/dist/pi-extensions/canvas-tool-guide.js

@@ -1,9 +1,9 @@
-var f=Object.defineProperty;var c=(t,o)=>f(t,"name",{value:o,configurable:!0});import{envNodeId as d,envScopes as l}from"../shared/env.js";import{execFile as m}from"node:child_process";import{createHash as p}from"node:crypto";import{mkdirSync as h,readFileSync as x,writeFileSync as y}from"node:fs";import{homedir as g}from"node:os";import{dirname as $,join as S}from"node:path";import{promisify as _}from"node:util";const w=_(m),s=15e3,O=`
+var p=Object.defineProperty;var i=(e,r)=>p(e,"name",{value:r,configurable:!0});import{envNodeId as h,envScopes as v}from"../shared/env.js";import{crtrVersion as g}from"../shared/crtr-version.js";import{effectiveCommandPlugins as x}from"../core/command-plugins/presence.js";import{emitEvent as y}from"../core/events/emit.js";import{execFile as _}from"node:child_process";import{createHash as $}from"node:crypto";import{mkdirSync as S,readFileSync as O,writeFileSync as j}from"node:fs";import{homedir as N}from"node:os";import{dirname as k,join as w}from"node:path";import{promisify as C}from"node:util";const I=C(_),R=`
 
-Guidelines:`;function T(t){const o=p("sha1").update(`${t}\0${l()?.join(",")??""}`).digest("hex").slice(0,16);return S(g(),".cache","crouter",`crtr-tool-guide-${o}.json`)}c(T,"helpCacheFile");function a(t,o){const r=`<crtr-tool-guide>
-${o}
-</crtr-tool-guide>`,n=t.indexOf(O);return n===-1?`${t}
+Guidelines:`;function T(e){const r=process.env.CRTR_PLUGINS_REVISION;return r!==void 0&&r!==""?r:x(e).map(t=>`${t.scope}:${t.name}@${t.version??""}:${t.root}`).sort().join("|")}i(T,"pluginsRevision");function b(e,r){const t=[r,e,v()?.join(",")??"",T(e)].join("\0"),o=$("sha1").update(t).digest("hex").slice(0,16);return w(N(),".cache","crouter",`crtr-tool-guide-${o}.json`)}i(b,"helpCacheFile");function d(e,r){const t=`<crtr-tool-guide>
+${r}
+</crtr-tool-guide>`,o=e.indexOf(R);return o===-1?`${e}
 
-${r}`:`${t.slice(0,n)}
+${t}`:`${e.slice(0,o)}
 
-${r}${t.slice(n)}`}c(a,"injectToolGuide");function v(t){const o=d();if(o===void 0||o.trim()==="")return;let r="",n=0;async function u(){if(r!==""&&Date.now()-n<s)return;const i=T(process.cwd());try{const e=JSON.parse(x(i,"utf8"));if(typeof e.text=="string"&&e.text!==""&&typeof e.at=="number"&&Date.now()-e.at<s){r=e.text,n=e.at;return}}catch{}try{const{stdout:e}=await w("crtr",["-h"],{timeout:1e4});r=e.trim(),n=Date.now();try{h($(i),{recursive:!0}),y(i,JSON.stringify({text:r,at:n}),"utf8")}catch{}}catch(e){console.error("[canvas-tool-guide] crtr -h capture failed:",e)}}c(u,"refresh"),t.on("session_start",u),t.on("before_agent_start",i=>{if(r!=="")return{systemPrompt:a(i.systemPrompt,r)}})}c(v,"registerCanvasToolGuide");var A=v;export{A as default,a as injectToolGuide,v as registerCanvasToolGuide};
+${t}${e.slice(o)}`}i(d,"injectToolGuide");function F(e,r=g){const t=h();if(t===void 0||t.trim()==="")return;let o="";function a(c,f,s){y({level:c==="failed"?"warn":"info",event:"broker.startup.tool_guide",duration_ms:performance.now()-f,...c==="failed"?{outcome:"failed"}:{},fields:{source:c,resumed:s}})}i(a,"emitSource");async function l(c,f){const s=performance.now(),m=f.sessionManager.getBranch().some(n=>n.type==="message"),u=b(process.cwd(),r());try{const n=JSON.parse(O(u,"utf8"));if(typeof n.text=="string"&&n.text!==""){o=n.text,a("disk_cache",s,m);return}}catch{}try{const{stdout:n}=await I("crtr",["-h"],{timeout:1e4});o=n.trim();try{S(k(u),{recursive:!0}),j(u,JSON.stringify({text:o}),"utf8")}catch{}a("captured",s,m)}catch(n){console.error("[canvas-tool-guide] crtr -h capture failed:",n),a("failed",s,m)}}i(l,"refresh"),e.on("session_start",l),e.on("before_agent_start",c=>{if(o!=="")return{systemPrompt:d(c.systemPrompt,o)}})}i(F,"registerCanvasToolGuide");var q=F;export{q as default,d as injectToolGuide,F as registerCanvasToolGuide};

package/dist/shared/inbox-entry-body.js

@@ -1,10 +1,10 @@
-var w=Object.defineProperty;var i=(e,t)=>w(e,"name",{value:t,configurable:!0});import{formatInboxRefInstruction as l}from"./generated-context.js";const $=12,u=1e3,y=1e3;function A(e){return(e===void 0?null:/^([a-z0-9-]+)\/reports\/[^/]+$/.exec(e))?.[1]}i(A,"reportRefNodeId");function j(e){let t=e,r=!1;const o=t.split(`
-`);return o.length>$&&(t=o.slice(0,$).join(`
-`),r=!0),t.length>u&&(t=t.slice(0,u),r=!0),{text:t.trimEnd(),clipped:r}}i(j,"clipBody");function x(e){const t=typeof e.data?.body=="string"?String(e.data.body).trim():"";return t===""||t===e.label?"":t}i(x,"inlineBody");function v(e){const t=e.data?.push;return typeof t=="object"&&t!==null&&typeof t.event=="string"?t:null}i(v,"pushOf");function f(e){const t=e.owner_handle??e.owner;return t==null?e.name:`${t}/${e.name}`}i(f,"objectRef");function _(e){return e.type==="document"?`[[${f(e)}]]`:e.type==="job"?`job ${e.id} (\`${e.name}\`)`:e.type==="node"?`node ${e.name} (${e.id})${e.machine?` on ${e.machine}`:""}`:`${e.type} ${e.name}`}i(_,"objectText");function I(e,t){return t.actor===null?"the runtime":e.from_name===void 0||e.from_name===t.actor?t.actor:`${e.from_name} (${t.actor})`}i(I,"actorText");function m(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):[]}i(m,"list");function R(e,t){const r=_(t.object),o=I(e,t),n=t.attrs,a=t.object.type==="document"?` Read it with \`crtr canvas read ${f(t.object)}\`.`:"";switch(t.event){case"created":return t.object.type==="node"?`${o} created ${r}${typeof n.kind=="string"?`, kind ${n.kind}`:""}.`:`${o} created ${r}.${a}`;case"read":return`${o} read ${r}.`;case"watched":return`${o} started watching ${r}.`;case"deleted":return`${o} deleted ${r}.`;case"edited":{const s=m(n.authors),c=m(n.rationales),d=typeof n.from_revision=="number"&&typeof n.revision=="number"&&n.revision-n.from_revision>1?`revisions ${n.from_revision+1}\u2013${n.revision}`:typeof n.revision=="number"?`revision ${n.revision}`:"a new revision",g=s.length===0?o:s.join(", "),h=c.length===0?"":` Rationale: ${c.join("; ")}.`,b=n.needs_merge===!0?" Two edits were made from the same revision; read it and edit it to merge them.":"",p=` You get this because you read or wrote it; if it no longer concerns your work, stop with \`crtr canvas unwatch ${f(t.object)}\`.`;return`${g} edited ${r} (${d}).${h}${b}${a}${p}`}case"messaged":return`${o} messaged ${r}.`;case"sent":return`${o} sent a message as ${r}.`;case"configured":return`${o} changed the settings of ${r}${typeof n.changed=="string"?`: ${n.changed}`:""}.`;case"exited":return`${r[0].toUpperCase()}${r.slice(1)} exited with code ${String(n["exit-code"])}. Log: ${String(n["log-path"])}`;case"silent":{const s=typeof n.files=="string"?n.files:"";return`${r[0].toUpperCase()}${r.slice(1)} has been silent for ${String(n["silent-for"])}: its processes used almost no CPU and none of the files they hold open for writing changed. It may be hung. Watched: ${s===""?"the job log only":s}. Inspect those files; stop it with \`crtr node bash kill ${t.object.id}\`; or, if it is meant to sit idle, stop these messages with \`crtr node bash quiet ${t.object.id}\`.`}case"killed":{const s=t.actor===null?"":` by ${o}`,c=typeof n.reason=="string"?` (${n.reason})`:"",d=n.reason==="deadline"?` It was canceled at its deadline; claim it with \`crtr node bash extend ${t.object.id} --for <duration>\` next time.`:"";return`${r[0].toUpperCase()}${r.slice(1)} was killed${s}${c}.${d} Log: ${String(n["log-path"])}`}default:return e.label}}i(R,"renderPush");function C(e,t){if(t!==null&&t.length<y&&e.ref!==void 0)return`${t.trimEnd()}
+var w=Object.defineProperty;var o=(e,t)=>w(e,"name",{value:t,configurable:!0});import{formatInboxRefInstruction as l}from"./generated-context.js";const f=12,$=1e3,y=1e3;function A(e){return(e===void 0?null:/^([a-z0-9-]+)\/reports\/[^/]+$/.exec(e))?.[1]}o(A,"reportRefNodeId");function j(e){let t=e,r=!1;const i=t.split(`
+`);return i.length>f&&(t=i.slice(0,f).join(`
+`),r=!0),t.length>$&&(t=t.slice(0,$),r=!0),{text:t.trimEnd(),clipped:r}}o(j,"clipBody");function x(e){const t=typeof e.data?.body=="string"?String(e.data.body).trim():"";return t===""||t===e.label?"":t}o(x,"inlineBody");function v(e){const t=e.data?.push;return typeof t=="object"&&t!==null&&typeof t.event=="string"?t:null}o(v,"pushOf");function u(e){const t=e.owner_handle??e.owner;return t==null?e.name:`${t}/${e.name}`}o(u,"objectRef");function _(e){return e.type==="document"?`[[${u(e)}]]`:e.type==="job"?`job ${e.id} (\`${e.name}\`)`:e.type==="node"?`node ${e.name} (${e.id})${e.machine?` on ${e.machine}`:""}`:`${e.type} ${e.name}`}o(_,"objectText");function k(e,t){return t.actor===null?"the runtime":e.from_name===void 0||e.from_name===t.actor?t.actor:`${e.from_name} (${t.actor})`}o(k,"actorText");function m(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):[]}o(m,"list");function I(e,t){const r=_(t.object),i=k(e,t),n=t.attrs,a=t.object.type==="document"?` Read it with \`crtr canvas read ${u(t.object)}\`.`:"";switch(t.event){case"created":return t.object.type==="node"?`${i} created ${r}${typeof n.kind=="string"?`, kind ${n.kind}`:""}.`:`${i} created ${r}.${a}`;case"read":return`${i} read ${r}.`;case"watched":return`${i} started watching ${r}.`;case"deleted":return`${i} deleted ${r}.`;case"edited":{const s=m(n.authors),c=m(n.rationales),d=typeof n.from_revision=="number"&&typeof n.revision=="number"&&n.revision-n.from_revision>1?`revisions ${n.from_revision+1}\u2013${n.revision}`:typeof n.revision=="number"?`revision ${n.revision}`:"a new revision",b=s.length===0?i:s.join(", "),g=c.length===0?"":` Rationale: ${c.join("; ")}.`,h=n.needs_merge===!0?" Two edits were made from the same revision; read it and edit it to merge them.":"",p=` You get this because you read or wrote it; if it no longer concerns your work, stop with \`crtr canvas unwatch ${u(t.object)}\`.`;return`${b} edited ${r} (${d}).${g}${h}${a}${p}`}case"messaged":return`${i} messaged ${r}.`;case"sent":return`${i} sent a message as ${r}.`;case"configured":return`${i} changed the settings of ${r}${typeof n.changed=="string"?`: ${n.changed}`:""}.`;case"exited":return`${r[0].toUpperCase()}${r.slice(1)} exited with code ${String(n["exit-code"])}. Output: ${String(n["output-key"])}`;case"silent":{const s=typeof n.files=="string"?n.files:"";return`${r[0].toUpperCase()}${r.slice(1)} has been silent for ${String(n["silent-for"])}: its processes used almost no CPU and none of the files they hold open for writing changed. It may be hung. Watched: ${s===""?"the job log only":s}. Inspect those files; stop it with \`crtr node bash kill ${t.object.id}\`; or, if it is meant to sit idle, stop these messages with \`crtr node bash quiet ${t.object.id}\`.`}case"killed":{const s=t.actor===null?"":` by ${i}`,c=typeof n.reason=="string"?` (${n.reason})`:"",d=n.reason==="deadline"?` It was canceled at its deadline; claim it with \`crtr node bash extend ${t.object.id} --for <duration>\` next time.`:"";return`${r[0].toUpperCase()}${r.slice(1)} was killed${s}${c}.${d} Output: ${String(n["output-key"])}`}default:return e.label}}o(I,"renderPush");function C(e,t){if(t!==null&&t.length<y&&e.ref!==void 0)return`${t.trimEnd()}
 
-${l(e.ref)}`;const r=x(e);if(r===""){const a=v(e);return a!==null&&e.ref===void 0?R(e,a):e.ref===void 0?e.label:`${e.label}
+${l(e.ref)}`;const r=x(e);if(r===""){const a=v(e);return a!==null&&e.ref===void 0?I(e,a):e.ref===void 0?e.label:`${e.label}
 
-${l(e.ref)}`}const{text:o,clipped:n}=j(r);return e.ref!==void 0?`${o}
+${l(e.ref)}`}const{text:i,clipped:n}=j(r);return e.ref!==void 0?`${i}
 
-${l(e.ref)}`:n?`${o}
-\u2026 (body clipped)`:o}i(C,"renderEntryBody");export{y as INLINE_REPORT_MAX_CHARS,j as clipBody,x as inlineBody,C as renderEntryBody,A as reportRefNodeId};
+${l(e.ref)}`:n?`${i}
+\u2026 (body clipped)`:i}o(C,"renderEntryBody");export{y as INLINE_REPORT_MAX_CHARS,j as clipBody,x as inlineBody,C as renderEntryBody,A as reportRefNodeId};

package/dist/types.d.ts

@@ -405,6 +405,18 @@ export interface ScopeConfig {
     /** The money ledger. `take_pct` (0-100, default 0) is Northlight's take on each priced model or tool charge; at 0 no take rows are written. */
     ledger?: {
         take_pct?: number;
+        /** USD per GB-hour of Blaxel sandbox awake time; the `ledger-sandbox` lane writes no rows while it is unset. */
+        sandbox_usd_per_gb_hour?: number;
+        /** Seconds a sandbox stays awake after its broker goes idle or exits (default 30). */
+        sandbox_standby_s?: number;
+        /** USD per GB-month of R2 storage; the `ledger-storage` lane writes no `r2` rows while it is unset. */
+        storage_usd_per_gb_month?: number;
+        /** USD per GB-month of Blaxel sandbox disk; the `ledger-storage` lane writes no `blaxel` rows while it is unset. */
+        sandbox_disk_usd_per_gb_month?: number;
+        /** USD of sandbox and storage a billing account uses free each UTC month (default 50); `billed_usd` on those rows is the part above it. */
+        infra_free_usd_per_month?: number;
+        /** The `ledger-r2` lane moves closed months into the blob store only while this is true (off until 5b is accepted). */
+        r2_move?: boolean;
     };
     /** Conversation store configuration for the daemon. */
     store?: {

package/docs/sdk/release-notes.md

@@ -7,6 +7,10 @@ description: Behavior changes in @north-light/sdk that an app must act on, newes
 
 Changes to `@north-light/sdk` that can change what an existing app sees. Newest first.
 
+## 0.3.562
+
+A cloud role's runtime (one with `CRTR_DIRECTORY_URL` and `CRTR_PUBLIC_API_URL` set) accepts a directory person bearer on its TCP listener: the caller acts as that person and reads only the nodes that person may read; schedules, charges, files and provider calls are refused `403 permission_error` to it. Any other listener still refuses a person bearer `401`, now with the code `person_bearer_not_supported` (was `person_bearer_not_supported_on_cloud_role`). A cloud role also answers `GET /v1/runtime/vendor-status` and `POST /v1/runtime/vendor-account-remove` for the person the directory's token names, and refuses a token that names no person `401`.
+
 ## 0.3.560
 
 A read waits through a hosted runtime being created or replaced, instead of failing with `503`. No new option.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/cli",
-  "version": "0.3.561",
+  "version": "0.3.563",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",
@@ -70,6 +70,9 @@
     "scripts/postinstall.mjs",
     "scripts/patch-pi-tree-root-ordering.mjs",
     "scripts/install-runtime.mjs",
+    "scripts/sandbox-start.mjs",
+    "scripts/sandbox-bootstrap.sh",
+    "scripts/git-credential-crtr",
     "scripts/lib/isolation-env.mjs",
     "scripts/lib/canvas-schema-gate.mjs",
     "scripts/lib/pack-args.mjs",
@@ -98,7 +101,7 @@
     "build:plugin": "tsc -p packages/crouter-plugin/tsconfig.json",
     "typecheck": "tsc --noEmit && tsc -p src/doc-editor/tsconfig.json",
     "typecheck:pi-packages": "npx tsc -p src/builtin-pi-packages/pi-crtr-extensions/tsconfig.json",
-    "test:runtime-packaging": "node --test scripts/runtime-smoke.test.mjs scripts/pack-args.test.mjs scripts/ensure-native-linux.test.mjs scripts/release-version.test.mjs",
+    "test:runtime-packaging": "node --test scripts/runtime-smoke.test.mjs scripts/pack-args.test.mjs scripts/ensure-native-linux.test.mjs scripts/release-version.test.mjs scripts/sandbox-start.test.mjs",
     "contract:check": "node scripts/contract.mjs check",
     "contract:surface": "node scripts/contract.mjs generate",
     "docs:check-reference": "npm exec --workspace @north-light/docs -- tsx scripts/check-reference.ts",
@@ -122,7 +125,7 @@
     "test:seam": "npm run build && npm run test:seam:built",
     "test:sdk": "npm run build:api && npm run build:identity && node --conditions=crtr-src --import tsx/esm --test --test-timeout=60000 'packages/crouter-sdk/src/__tests__/*.test.ts' 'packages/crouter-sdk/src/__tests__/integration/*.test.ts'",
     "test:sdk:pg": "node -e \"if (!process.env.TEST_DATABASE_URL) { console.error('test:sdk:pg needs TEST_DATABASE_URL (a disposable PostgreSQL), e.g. docker run --rm -d -e POSTGRES_PASSWORD=pw -p 127.0.0.1:55432:5432 postgres:18-alpine; TEST_DATABASE_URL=postgres://postgres:pw@127.0.0.1:55432/postgres'); process.exit(1) }\" && node --conditions=crtr-src --import tsx/esm --test --test-timeout=60000 'packages/crouter-sdk/src/**/__tests__/**/*.pg.test.ts'",
-    "test:seam:built": "CRTR_NO_DAEMON_AUTOSTART=1 node scripts/test-lane.mjs -- node --import ./scripts/test-env-scrub.mjs --test --test-concurrency=$(node -p 'Math.min(4, Math.max(2, require(`node:os`).availableParallelism() - 2))') --test-timeout=180000 ${CRTR_TEST_SHARD:+--test-shard=$CRTR_TEST_SHARD} 'dist/**/__tests__/seam/*.test.js'",
+    "test:seam:built": "CRTR_NO_DAEMON_AUTOSTART=1 node scripts/test-lane.mjs -- node --import ./scripts/test-env-scrub.mjs --test --test-concurrency=$(node -p 'Math.min(4, Math.max(2, require(`node:os`).availableParallelism() - 2))') --test-timeout=180000 ${CRTR_TEST_SHARD:+--test-shard=$CRTR_TEST_SHARD} 'dist/**/__tests__/seam/*.test.js' scripts/sandbox-bootstrap.test.mjs scripts/sandbox-clone.test.mjs",
     "test:all": "npm test && npm run test:integration && npm run test:seam",
     "test:isolated": "node scripts/test-isolated.mjs",
     "build:identity": "tsc -p packages/crouter-identity/tsconfig.json"
@@ -141,7 +144,7 @@
   },
   "license": "UNLICENSED",
   "dependencies": {
-    "@north-light/identity": "0.3.561",
+    "@north-light/identity": "0.3.563",
     "@earendil-works/pi-agent-core": "1.1.0",
     "@earendil-works/pi-ai": "1.1.0",
     "@earendil-works/pi-coding-agent": "1.1.0",

package/packages/crouter-identity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/identity",
-  "version": "0.3.561",
+  "version": "0.3.563",
   "description": "Northlight access-token verification and scope rules",
   "type": "module",
   "main": "./dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/cli",
-  "version": "0.3.561",
+  "version": "0.3.563",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/cli",
-      "version": "0.3.561",
+      "version": "0.3.563",
       "hasInstallScript": true,
       "license": "UNLICENSED",
       "workspaces": [
@@ -24,7 +24,7 @@
         "@milkdown/preset-gfm": "^7.22.3",
         "@milkdown/prose": "^7.22.3",
         "@milkdown/utils": "^7.22.3",
-        "@north-light/identity": "0.3.561",
+        "@north-light/identity": "0.3.563",
         "cron-parser": "^5.6.0",
         "esbuild": "^0.27.7",
         "jose": "^6.2.12",
@@ -12455,17 +12455,17 @@
     },
     "packages/crouter-api": {
       "name": "@north-light/api",
-      "version": "0.3.561",
+      "version": "0.3.563",
       "license": "UNLICENSED"
     },
     "packages/crouter-env-docker": {
       "name": "@north-light/env-docker",
-      "version": "0.3.561",
+      "version": "0.3.563",
       "license": "UNLICENSED"
     },
     "packages/crouter-identity": {
       "name": "@north-light/identity",
-      "version": "0.3.561",
+      "version": "0.3.563",
       "license": "UNLICENSED",
       "dependencies": {
         "jose": "^6.2.1"
@@ -12473,21 +12473,21 @@
     },
     "packages/crouter-plugin": {
       "name": "@north-light/plugin",
-      "version": "0.3.561",
+      "version": "0.3.563",
       "license": "UNLICENSED",
       "dependencies": {
-        "@north-light/api": "0.3.561",
-        "@north-light/identity": "0.3.561"
+        "@north-light/api": "0.3.563",
+        "@north-light/identity": "0.3.563"
       }
     },
     "packages/crouter-sdk": {
       "name": "@north-light/sdk",
-      "version": "0.3.561",
+      "version": "0.3.563",
       "license": "UNLICENSED",
       "dependencies": {
-        "@north-light/api": "0.3.561",
-        "@north-light/identity": "0.3.561",
-        "@north-light/plugin": "0.3.561",
+        "@north-light/api": "0.3.563",
+        "@north-light/identity": "0.3.563",
+        "@north-light/plugin": "0.3.563",
         "jose": "^6.2.1"
       },
       "bin": {

package/scripts/git-credential-crtr

@@ -0,0 +1,33 @@
+#!/usr/bin/env node
+// scripts/git-credential-crtr — git credential helper for github.com (design-fleet, Components: Git credential helper; C-A2).
+// `git-credential-crtr get` reads git's key=value request on stdin and answers username/password from
+// `POST /v1/environments/<id>/git-credential` through the broker's relay socket (`CRTR_API_SOCKET`), which holds the
+// node token; this process never sees it. It caches nothing. `store` and `erase` do nothing.
+import { readFileSync } from 'node:fs';
+import { request } from 'node:http';
+
+const [, , action] = process.argv;
+if (action !== 'get') process.exit(0);
+
+const fields = Object.fromEntries(readFileSync(0, 'utf8').split('\n').filter((l) => l.includes('=')).map((l) => [l.slice(0, l.indexOf('=')), l.slice(l.indexOf('=') + 1)]));
+if (fields.host !== 'github.com') process.exit(0);
+
+const fail = (message) => { process.stderr.write(`git-credential-crtr: ${message}\n`); process.exit(1); };
+const socketPath = process.env.CRTR_API_SOCKET ?? fail('CRTR_API_SOCKET is not set');
+let environmentId = process.env.CRTR_ENVIRONMENT_ID;
+if (!environmentId) {
+  try { environmentId = readFileSync(`${process.env.CRTR_HOME ?? '/var/lib/crtr'}/environment-id`, 'utf8').trim(); } catch { fail('the environment id is unknown'); }
+}
+const body = JSON.stringify({ host: fields.host, ...(fields.path ? { path: fields.path } : {}) });
+const req = request({ socketPath, path: `/v1/environments/${environmentId}/git-credential`, method: 'POST', headers: { 'content-type': 'application/json', 'content-length': Buffer.byteLength(body) }, timeout: 30_000 }, (res) => {
+  let text = '';
+  res.on('data', (c) => { text += c; });
+  res.on('end', () => {
+    if (res.statusCode !== 200) return fail(`the control plane answered ${res.statusCode}: ${text.slice(0, 300)}`);
+    const out = JSON.parse(text);
+    process.stdout.write(`username=${out.username}\npassword=${out.password}\npasswordExpiryUtc=${Math.floor(Date.parse(out.expiry) / 1000)}\n`);
+  });
+});
+req.on('error', (e) => fail(e.message));
+req.on('timeout', () => { req.destroy(); fail('timed out'); });
+req.end(body);

package/scripts/sandbox-bootstrap.sh

@@ -0,0 +1,54 @@
+#!/bin/sh
+# scripts/sandbox-bootstrap.sh — the Blaxel runner's process command (design-fleet, Wake call step 5; C-A2).
+#
+# Runs as root in the sandbox's `broker-<execution id>` process. Environment: CRTR_NODE_TOKEN, CRTR_RELEASE,
+# CRTR_RELEASE_URL, CRTR_RELEASE_SHA256 and the rest the runner set. Once per sandbox it creates the `crtr` user
+# (`crtrd` refuses root) and its directories; it installs the release if it is absent (download, sha256 check,
+# unpack into a temp dir, rename into place, keep three), then hands over to `crtr-sandbox-start` as `crtr`.
+# The node token reaches the start script on stdin, never in its environment, so no process of user `crtr` can
+# read it from /proc. A failed download or checksum exits non-zero and prints `crtr-sandbox-start: failed <reason>`
+# as its last line (the runner's `status` reports that reason).
+set -eu
+
+fail() { echo "crtr-sandbox-start: failed $1${2:+ ($2)}" >&2; exit "${3:-1}"; }
+
+: "${CRTR_RELEASE:?}" "${CRTR_RELEASE_URL:?}" "${CRTR_RELEASE_SHA256:?}" "${CRTR_NODE_TOKEN:?}"
+case "$CRTR_RELEASE" in *[!A-Za-z0-9._-]*|'') fail bad_release "$CRTR_RELEASE" ;; esac
+
+ROOT=${CRTR_SANDBOX_ROOT:-/opt/crtr}
+RELEASES="$ROOT/releases"
+RELEASE_DIR="$RELEASES/$CRTR_RELEASE"
+RUN_USER=${CRTR_RUN_USER:-crtr}
+
+if ! id "$RUN_USER" >/dev/null 2>&1; then
+  adduser -D -h "/home/$RUN_USER" -s /bin/sh "$RUN_USER" || fail user_create
+fi
+mkdir -p /run/crtr /var/lib/crtr /work "$RELEASES"
+chown "$RUN_USER" /run/crtr /var/lib/crtr /work
+# pi's grep tool wants ripgrep; installing it once per sandbox avoids a GitHub download at the first grep.
+if ! command -v rg >/dev/null 2>&1; then apk add --no-cache ripgrep >/dev/null 2>&1 || echo "crtr-sandbox-start: ripgrep not installed" >&2; fi
+
+if [ ! -f "$RELEASE_DIR/.complete" ]; then
+  tmp=$(mktemp -d "$RELEASES/.tmp.XXXXXX")
+  trap 'rm -rf "$tmp"' EXIT
+  wget -q -O "$tmp/runtime.tar.gz" "$CRTR_RELEASE_URL" || fail release_download "$CRTR_RELEASE"
+  actual=$(sha256sum "$tmp/runtime.tar.gz" | cut -d' ' -f1)
+  [ "$actual" = "$CRTR_RELEASE_SHA256" ] || fail release_checksum "expected $CRTR_RELEASE_SHA256, got $actual"
+  mkdir "$tmp/unpack"
+  tar -xzf "$tmp/runtime.tar.gz" -C "$tmp/unpack" || fail release_unpack
+  : > "$tmp/unpack/.complete"
+  # A concurrent start installing the same release wins the rename; both leave a complete directory.
+  if ! mv "$tmp/unpack" "$RELEASE_DIR" 2>/dev/null; then [ -f "$RELEASE_DIR/.complete" ] || fail release_install; fi
+  rm -rf "$tmp"
+  trap - EXIT
+fi
+ln -sfn "$RELEASE_DIR" "$ROOT/current.new" && mv -T "$ROOT/current.new" "$ROOT/current"
+# Keep the three newest releases (the current one among them).
+ls -1t "$RELEASES" 2>/dev/null | grep -v '^\.' | tail -n +4 | while read -r old; do
+  [ "$old" = "$CRTR_RELEASE" ] || rm -rf "${RELEASES:?}/$old"
+done
+
+token=$CRTR_NODE_TOKEN
+unset CRTR_NODE_TOKEN
+# `su -p` keeps the rest of the environment; the start script derives HOME and the layout itself.
+printf '%s' "$token" | exec su -p -s /bin/sh "$RUN_USER" -c "exec node '$RELEASE_DIR/scripts/sandbox-start.mjs'"