@north-light/crouter-api 0.3.192 → 0.3.194

package/dist/api/client.d.ts

@@ -1,4 +1,5 @@
 import type { DaemonRestartDTO, HealthDTO, StatusDTO } from './dto/health.js';
+import type { BashJobStatusDTO, BashJobStopResultDTO } from './dto/bash-jobs.js';
 import type { ArtifactListDTO, ArtifactsQuery, ContextListDTO, CreateNodeRequest, ListNodesQuery, NodeDetailDTO, NodeSessionDTO, NodeSnapshotDTO, NodeSummaryDTO, TranscriptDTO, TranscriptQuery } from './dto/nodes.js';
 import type { InterruptResultDTO, MessageResultDTO, SendMessageRequest } from './dto/messages.js';
 import type { PushReportRequest, PushReportResultDTO, ReportDTO, ReportsQuery } from './dto/reports.js';
@@ -15,7 +16,7 @@ import type { CredentialRemovalResultDTO, CredentialResultDTO, InstallCredential
 import type { CreateHumanBridgeRequest, HumanBridgeResultDTO, HumanCancelRequest, HumanCancelResultDTO, HumanResolveRequest, HumanResolveResultDTO } from './dto/human.js';
 import type { CancelReviewRequest, CreateReviewRequest, ListReviewsQuery, ReviewCancelResultDTO, ReviewDocumentBaseDTO, ReviewDTO, ReviewListDTO, ReviewSubmitResultDTO } from './dto/reviews.js';
 import type { CreateReviewCommentRequest, EditReviewCommentRequest, ListReviewCommentsQuery, ReadReviewCommentEventsQuery, ReviewCommentActionRequest, ReviewCommentDetailDTO, ReviewCommentEventsDTO, ReviewCommentListDTO, ReviewCommentMutationDTO, ReviewCommentRangeBatchRequest, ReviewCommentRangeBatchResultDTO } from './dto/review-comments.js';
-import type { CancelInboxTicketRequest, CanceledTicketResultDTO, DeckTicketResultDTO, InboxDeckDTO, InboxListDTO, InboxTicketIdDTO, RespondInboxDeckRequest } from './dto/inbox.js';
+import type { CancelInboxTicketRequest, CanceledTicketResultDTO, InboxListDTO, InboxPageDTO, InboxPageHistoryDTO, InboxPageRenderDTO, PagesBundleAssetDTO, InboxTicketIdDTO, PageResponsesDTO, PageTicketResultDTO, RespondInboxPageRequest } from './dto/inbox.js';
 import type { AttentionCountsDTO, AttentionDTO, DashboardDTO, DashboardQuery, HistoryGrepQuery, HistoryGrepResultDTO, HistoryReadQuery, HistoryReadResultDTO, HistorySearchQuery, HistorySearchResultDTO, PruneRequest, PruneResultDTO, RebuildIndexResultDTO, RosterDTO, SnapshotDTO } from './dto/canvas.js';
 import type { CloseWorktreeResultDTO } from './dto/worktree.js';
 import type { BrokerExtensionStateDTO, BrokerGeneratedNameRequest, BrokerGeneratedNameResultDTO, BrokerInboxCursorDirective, BrokerInboxCursorRequest, BrokerModelCommitRequest, BrokerModelCommitResultDTO, BrokerPersonaAckRequest, BrokerSessionBoundRequest, BrokerSessionBoundResultDTO, BrokerSettleDirective, BrokerSettleRequest } from './dto/broker-ops.js';
@@ -79,6 +80,8 @@ export declare class CrtrClient {
     createNode(req: CreateNodeRequest): Promise<NodeDetailDTO>;
     listNodes(q?: ListNodesQuery): Promise<NodeSummaryDTO[]>;
     getNode(id: string): Promise<NodeDetailDTO>;
+    listBashJobs(id: string): Promise<BashJobStatusDTO[]>;
+    stopBashJob(id: string, jobId: string): Promise<BashJobStopResultDTO>;
     sendMessage(id: string, req: SendMessageRequest): Promise<MessageResultDTO>;
     /** First-class interrupt (the human Esc): cancels pending undelivered
      *  human-send inbox entries, then aborts a live in-flight turn. NEVER
@@ -165,7 +168,7 @@ export declare class CrtrClient {
      *  (`spawnNode` server-side). Distinct from `createNode` (which launches a
      *  broker) precisely because a human bridge must never have one. */
     createHumanBridge(req: CreateHumanBridgeRequest): Promise<HumanBridgeResultDTO>;
-    /** Resolve a deck ticket answer. crtrd claims the ticket (taking over a live
+    /** Resolve a page ticket answer. crtrd claims the ticket (taking over a live
      *  inbox claim where one exists), publishes the canonical result, delivers
      *  to the asking node, and retires the bridge before this resolves. */
     resolveHumanTicket(nodeId: string, body: HumanResolveRequest): Promise<HumanResolveResultDTO>;
@@ -188,16 +191,28 @@ export declare class CrtrClient {
     resolveReviewComment(commentId: string, req?: ReviewCommentActionRequest): Promise<ReviewCommentMutationDTO>;
     reopenReviewComment(commentId: string, req?: ReviewCommentActionRequest): Promise<ReviewCommentMutationDTO>;
     deleteReviewComment(commentId: string, req?: ReviewCommentActionRequest): Promise<ReviewCommentMutationDTO>;
-    /** Pending deck/review tickets across every available crouter-owned
+    /** Pending page/review tickets across every available crouter-owned
      *  humanloop root. */
     listHumanInbox(): Promise<InboxListDTO>;
-    /** Read one pending deck by its opaque ticket id, with Markdown bodies
-     *  resolved inline. */
-    getHumanInboxDeck(ticketId: InboxTicketIdDTO): Promise<InboxDeckDTO>;
-    /** Submit ordered interaction responses for a pending deck. Single-assignment
-     *  server-side: a competing resolution races to `ticket_already_resolved`. */
-    respondHumanInboxDeck(ticketId: InboxTicketIdDTO, request: RespondInboxDeckRequest): Promise<DeckTicketResultDTO>;
-    /** Cancel a pending deck (terminal response, never deletion). */
+    /** Read one page ticket by its opaque ticket id (pending, resolved, or canceled). */
+    getHumanInboxPage(ticketId: InboxTicketIdDTO): Promise<InboxPageDTO>;
+    /** All page tickets raised by one node, oldest first (pending, resolved, or canceled). */
+    getInboxHistory(nodeId: string): Promise<InboxPageHistoryDTO>;
+    /** Submit responses for a page ticket. Single-assignment server-side: a competing
+     *  resolution races to `ticket_already_resolved`. */
+    respondHumanInboxPage(ticketId: InboxTicketIdDTO, request: RespondInboxPageRequest): Promise<PageTicketResultDTO>;
+    /** Autosave partial page work. Omitted slots are permitted in progress updates. */
+    postInboxProgress(ticketId: InboxTicketIdDTO, responses: PageResponsesDTO): Promise<void>;
+    /** Get the published response for a resolved page ticket. 404 if pending or canceled. */
+    getInboxResponse(ticketId: InboxTicketIdDTO): Promise<PageTicketResultDTO>;
+    /** The page's body-level HTML payload, for pending, resolved, and canceled
+     *  tickets alike. The host wraps it and injects the page runtime bundle. */
+    renderHumanInboxPage(ticketId: InboxTicketIdDTO): Promise<InboxPageRenderDTO>;
+    /** One built page runtime asset. Pass the previously returned `etag` as
+     *  `ifNoneMatch` to get a 304 (and no bytes) while the cached copy is
+     *  current. The one non-JSON route on this surface. */
+    getPagesBundleAsset(asset: 'js' | 'css', ifNoneMatch?: string): Promise<PagesBundleAssetDTO>;
+    /** Cancel a ticket (terminal response, never deletion). */
     cancelHumanInboxTicket(ticketId: InboxTicketIdDTO, request?: CancelInboxTicketRequest): Promise<CanceledTicketResultDTO>;
     /** Composed client-side from `GET /v1/nodes` + `GET /v1/status` (spec §6.3 —
      *  the dashboard is absorbed into those two reads; there is no single route).
@@ -231,7 +246,13 @@ export declare class CrtrClient {
     /** Raw request for routes not yet method-wrapped. Applies the same
      *  autostart + error-mapping semantics. */
     request<T>(method: string, path: string, body?: unknown): Promise<T>;
+    /** The unparsed request: autostart + handover recovery, no JSON parse. Every
+     *  wrapper goes through here; only the non-JSON routes call it directly. */
+    private send;
     private nodePath;
+    /** Validate a background job id before route construction. Job ids arrive
+     *  from the daemon's file-backed roster and must remain one path segment. */
+    private jobPath;
     /** Validate a cron id before route construction — `routes.ts` interpolates
      *  it raw, so a value carrying `/`, whitespace or `?` would corrupt the
      *  request line rather than 404 cleanly. Mirrors `nodePath`. */

package/dist/api/client.js

@@ -16,6 +16,7 @@ import { join } from 'node:path';
 import { ApiError, isErrorBody } from './errors.js';
 import { routes } from './routes.js';
 import { isSafeNodeId } from './dto/common.js';
+import { isSafeBashJobId } from './dto/bash-jobs.js';
 import { isSafeCronId, } from './dto/crons.js';
 /** Filesystem/scope constants mirrored from `core/types.ts` (`CRTR_DIR_NAME`)
  *  and `core/canvas/paths.ts` (`crtrHome`/`apiSocketPath`). Duplicated — not
@@ -97,6 +98,12 @@ export class CrtrClient {
     getNode(id) {
         return this.request('GET', routes.node(this.nodePath(id)));
     }
+    listBashJobs(id) {
+        return this.request('GET', routes.nodeJobs(this.nodePath(id)));
+    }
+    stopBashJob(id, jobId) {
+        return this.request('DELETE', routes.nodeJob(this.nodePath(id), this.jobPath(jobId)));
+    }
     sendMessage(id, req) {
         return this.request('POST', routes.nodeMessages(this.nodePath(id)), req);
     }
@@ -302,7 +309,7 @@ export class CrtrClient {
     createHumanBridge(req) {
         return this.request('POST', routes.humanBridge(), req);
     }
-    /** Resolve a deck ticket answer. crtrd claims the ticket (taking over a live
+    /** Resolve a page ticket answer. crtrd claims the ticket (taking over a live
      *  inbox claim where one exists), publishes the canonical result, delivers
      *  to the asking node, and retires the bridge before this resolves. */
     resolveHumanTicket(nodeId, body) {
@@ -365,22 +372,61 @@ export class CrtrClient {
         return this.request('POST', routes.humanCommentDelete(this.commentPath(commentId)), req);
     }
     // ---- Humanloop inbox (Northlight crouter-inbox v1, inbox-contract.md §A) --
-    /** Pending deck/review tickets across every available crouter-owned
+    /** Pending page/review tickets across every available crouter-owned
      *  humanloop root. */
     listHumanInbox() {
         return this.request('GET', routes.humanInbox());
     }
-    /** Read one pending deck by its opaque ticket id, with Markdown bodies
-     *  resolved inline. */
-    getHumanInboxDeck(ticketId) {
+    /** Read one page ticket by its opaque ticket id (pending, resolved, or canceled). */
+    getHumanInboxPage(ticketId) {
         return this.request('GET', routes.humanInboxTicket(this.ticketId(ticketId)));
     }
-    /** Submit ordered interaction responses for a pending deck. Single-assignment
-     *  server-side: a competing resolution races to `ticket_already_resolved`. */
-    respondHumanInboxDeck(ticketId, request) {
+    /** All page tickets raised by one node, oldest first (pending, resolved, or canceled). */
+    getInboxHistory(nodeId) {
+        if (typeof nodeId !== 'string' || nodeId === '') {
+            throw new TypeError(`invalid node id: ${JSON.stringify(nodeId)}`);
+        }
+        return this.request('GET', withQuery(routes.humanInbox() + '/history', { node_id: nodeId }));
+    }
+    /** Submit responses for a page ticket. Single-assignment server-side: a competing
+     *  resolution races to `ticket_already_resolved`. */
+    respondHumanInboxPage(ticketId, request) {
         return this.request('POST', routes.humanInboxRespond(this.ticketId(ticketId)), request);
     }
-    /** Cancel a pending deck (terminal response, never deletion). */
+    /** Autosave partial page work. Omitted slots are permitted in progress updates. */
+    postInboxProgress(ticketId, responses) {
+        return this.request('POST', routes.humanInboxProgress(this.ticketId(ticketId)), { responses });
+    }
+    /** Get the published response for a resolved page ticket. 404 if pending or canceled. */
+    getInboxResponse(ticketId) {
+        return this.request('GET', routes.humanInboxResponse(this.ticketId(ticketId)));
+    }
+    /** The page's body-level HTML payload, for pending, resolved, and canceled
+     *  tickets alike. The host wraps it and injects the page runtime bundle. */
+    renderHumanInboxPage(ticketId) {
+        return this.request('GET', routes.humanInboxRender(this.ticketId(ticketId)));
+    }
+    /** One built page runtime asset. Pass the previously returned `etag` as
+     *  `ifNoneMatch` to get a 304 (and no bytes) while the cached copy is
+     *  current. The one non-JSON route on this surface. */
+    async getPagesBundleAsset(asset, ifNoneMatch) {
+        if (asset !== 'js' && asset !== 'css') {
+            throw new TypeError(`invalid page bundle asset: ${JSON.stringify(asset)}`);
+        }
+        const res = await this.send('GET', routes.humanPagesBundle(asset), undefined, ifNoneMatch === undefined ? undefined : { 'if-none-match': ifNoneMatch });
+        if (res.status === 304) {
+            return { status: 304, etag: res.headers['etag'] ?? '', content_type: res.headers['content-type'] ?? '', content: null };
+        }
+        if (res.status < 200 || res.status >= 300)
+            parse(res); // throws the mapped ApiError
+        return {
+            status: 200,
+            etag: res.headers['etag'] ?? '',
+            content_type: res.headers['content-type'] ?? '',
+            content: res.text,
+        };
+    }
+    /** Cancel a ticket (terminal response, never deletion). */
     cancelHumanInboxTicket(ticketId, request) {
         return this.request('POST', routes.humanInboxCancel(this.ticketId(ticketId)), request ?? {});
     }
@@ -441,23 +487,23 @@ export class CrtrClient {
     /** Raw request for routes not yet method-wrapped. Applies the same
      *  autostart + error-mapping semantics. */
     async request(method, path, body) {
-        let res;
+        return parse(await this.send(method, path, body));
+    }
+    /** The unparsed request: autostart + handover recovery, no JSON parse. Every
+     *  wrapper goes through here; only the non-JSON routes call it directly. */
+    async send(method, path, body, extraHeaders) {
         try {
-            res = await this.transport(method, path, body);
+            return await this.transport(method, path, body, extraHeaders);
         }
         catch (err) {
             if (this.isColdSocketError(err)) {
                 await this.handleColdSocket();
-                res = await this.transport(method, path, body);
-            }
-            else if (this.isHandoverHangup(err)) {
-                res = await this.rideOutHandover(method, path, body);
-            }
-            else {
-                throw toTransportApiError(err);
+                return await this.transport(method, path, body, extraHeaders);
             }
+            if (this.isHandoverHangup(err))
+                return await this.rideOutHandover(method, path, body, extraHeaders);
+            throw toTransportApiError(err);
         }
-        return parse(res);
     }
     // ---- internals ---------------------------------------------------------
     nodePath(id) {
@@ -466,6 +512,14 @@ export class CrtrClient {
         }
         return id;
     }
+    /** Validate a background job id before route construction. Job ids arrive
+     *  from the daemon's file-backed roster and must remain one path segment. */
+    jobPath(id) {
+        if (!isSafeBashJobId(id)) {
+            throw new ApiError(400, 'invalid_job_id', `invalid background job id: ${JSON.stringify(id)}`);
+        }
+        return id;
+    }
     /** Validate a cron id before route construction — `routes.ts` interpolates
      *  it raw, so a value carrying `/`, whitespace or `?` would corrupt the
      *  request line rather than 404 cleanly. Mirrors `nodePath`. */
@@ -506,11 +560,11 @@ export class CrtrClient {
         }
         return id;
     }
-    transport(method, path, body) {
+    transport(method, path, body, extraHeaders) {
         const usingHttps = this.baseUrl?.protocol === 'https:';
         const doRequest = usingHttps ? httpsRequest : httpRequest;
         const payload = body === undefined ? undefined : JSON.stringify(body);
-        const headers = { accept: 'application/json', ...this.headers };
+        const headers = { accept: 'application/json', ...this.headers, ...extraHeaders };
         if (payload !== undefined) {
             headers['content-type'] = 'application/json';
             headers['content-length'] = String(Buffer.byteLength(payload));
@@ -535,7 +589,12 @@ export class CrtrClient {
                 const chunks = [];
                 res.on('data', (chunk) => chunks.push(chunk));
                 res.on('end', () => {
-                    resolve({ status: res.statusCode ?? 0, text: Buffer.concat(chunks).toString('utf8') });
+                    const received = {};
+                    for (const [name, value] of Object.entries(res.headers)) {
+                        if (value !== undefined)
+                            received[name] = Array.isArray(value) ? value.join(', ') : value;
+                    }
+                    resolve({ status: res.statusCode ?? 0, text: Buffer.concat(chunks).toString('utf8'), headers: received });
                 });
                 res.on('error', reject);
             });
@@ -572,7 +631,7 @@ export class CrtrClient {
      *  before the socket dropped, so it fails with `daemon_restarting` (retry),
      *  never `daemon_unavailable` ("start the daemon" is the wrong advice for a
      *  daemon that is mid-handover). */
-    async rideOutHandover(method, path, body) {
+    async rideOutHandover(method, path, body, extraHeaders) {
         if (!(await this.awaitHandover())) {
             throw new ApiError(503, 'daemon_unavailable', `crtrd went away mid-request and did not come back within ${this.coldStartPollWindowMs}ms.`);
         }
@@ -580,7 +639,7 @@ export class CrtrClient {
             throw new ApiError(503, 'daemon_restarting', `crtrd handed over to a new runtime generation mid-request; this ${method} may or may not have been applied.`);
         }
         try {
-            return await this.transport(method, path, body);
+            return await this.transport(method, path, body, extraHeaders);
         }
         catch (err) {
             throw toTransportApiError(err);

package/dist/api/dto/bash-jobs.d.ts

@@ -0,0 +1,24 @@
+import type { IsoTime, NodeIdDTO } from './common.js';
+/** A still-live background bash job owned by one node. */
+export interface BashJobStatusDTO {
+    job_id: string;
+    command: string;
+    /** Human-readable label supplied with the bash call, or null when absent. */
+    purpose: string | null;
+    started_at: IsoTime;
+    elapsed_ms: number;
+    /** Persisted supervisor process group, or null for legacy jobs. */
+    pgid: number | null;
+    /** Whether the persisted process group currently exists. */
+    pgid_alive: boolean;
+}
+/** Result of stopping one background bash job. `signaled` is false when the
+ * process group had already exited, but the job is still retired via its exit
+ * sentinel. */
+export interface BashJobStopResultDTO {
+    node_id: NodeIdDTO;
+    job_id: string;
+    signaled: boolean;
+}
+/** Whether a job id is safe to interpolate as one API/filesystem segment. */
+export declare function isSafeBashJobId(jobId: string): boolean;

package/dist/api/dto/bash-jobs.js

@@ -0,0 +1,9 @@
+// Background bash job API shapes. The daemon projects the file-backed job
+// control plane into these dependency-light DTOs for remote presenters.
+/** Whether a job id is safe to interpolate as one API/filesystem segment. */
+export function isSafeBashJobId(jobId) {
+    return typeof jobId === 'string'
+        && jobId !== '' && jobId !== '.' && jobId !== '..'
+        && /^[A-Za-z0-9._~-]+$/u.test(jobId)
+        && Buffer.byteLength(jobId, 'utf8') <= 128;
+}

package/dist/api/dto/human.d.ts

@@ -1,5 +1,4 @@
 import type { NodeIdDTO } from './common.js';
-import type { InteractionResponseDTO } from './inbox.js';
 /** One anchored review comment, mirroring crouter's ticket-store shape as a
  *  plain structural wire type (no store import). */
 export interface FeedbackCommentDTO {
@@ -37,9 +36,9 @@ export interface FeedbackResultDTO {
     commentsTotal: number;
     commentsUnresolved: number;
 }
-/** `POST /v1/human/tickets/{node_id}/resolve` body — a deck answer. */
+/** `POST /v1/human/tickets/{node_id}/resolve` body — a page answer keyed by slot id. */
 export interface HumanResolveRequest {
-    responses: InteractionResponseDTO[];
+    responses: Record<string, Record<string, unknown>>;
 }
 /** `POST /v1/human/tickets/{node_id}/cancel` body. */
 export interface HumanCancelRequest {
@@ -49,7 +48,7 @@ export interface HumanCancelRequest {
 /** `POST /v1/human/tickets/{node_id}/resolve` result. */
 export interface HumanResolveResultDTO {
     delivered: true;
-    kind: 'deck';
+    kind: 'page';
 }
 /** `POST /v1/human/tickets/{node_id}/cancel` result. */
 export interface HumanCancelResultDTO {

package/dist/api/dto/inbox.d.ts

@@ -1,100 +1,141 @@
 import type { IsoTime } from './common.js';
-/** Opaque, stable, URL-safe ticket id: lowercase SHA-256 hex of
- *  `canonicalRoot + "\0" + ticketBasename`. Clients must treat it as opaque —
- *  it discloses no home filesystem path. */
+/** Opaque, stable, URL-safe ticket id: lowercase SHA-256 hex. */
 export type InboxTicketIdDTO = string;
-export type InteractionKindDTO = 'notify' | 'decision' | 'context' | 'error' | 'review';
-export interface DeckSourceDTO {
+export interface TicketSourceDTO {
     sessionName?: string;
     askedBy?: string;
     blockedSince?: IsoTime;
     nodeId?: string;
 }
-export interface DeckTicketSummaryDTO {
+export interface ReviewTicketSummaryDTO {
     ticket_id: InboxTicketIdDTO;
-    kind: 'deck';
+    kind: 'review';
     title: string;
     subtitle: string;
     blocked_since: IsoTime;
-    source: DeckSourceDTO;
-    interaction_kind?: InteractionKindDTO;
+    source: TicketSourceDTO;
 }
-export interface ReviewTicketSummaryDTO {
+export interface PageTicketSummaryDTO {
     ticket_id: InboxTicketIdDTO;
-    kind: 'review';
+    kind: 'page';
     title: string;
-    subtitle: string;
+    subtitle?: string;
+    placement: 'inline' | 'panel';
+    dialect: 'md' | 'html';
+    steps: number;
     blocked_since: IsoTime;
-    source: DeckSourceDTO;
+    source: TicketSourceDTO;
+    slot_kinds: string[];
+    awaits_response: boolean;
+    state?: 'pending' | 'resolved' | 'canceled';
 }
-export type InboxTicketSummaryDTO = DeckTicketSummaryDTO | ReviewTicketSummaryDTO;
-/** `GET /v1/human/inbox` result. `tickets` is sorted newest `blocked_since`
- *  first, then `ticket_id` ascending. */
+export type InboxTicketSummaryDTO = PageTicketSummaryDTO | ReviewTicketSummaryDTO;
 export interface InboxListDTO {
     tickets: InboxTicketSummaryDTO[];
 }
-export interface InteractionOptionDTO {
+export interface PageSlotDTO {
+    id?: string;
+    kind: string;
+    step: number;
+    config: Record<string, unknown>;
+    unvalidated?: true;
+}
+/** The nested protocol object is deliberately camelCase on the wire. */
+export interface PageManifestDTO {
+    schema: 'crtr.page/v1';
+    dialect: 'md' | 'html';
+    title: string;
+    subtitle?: string;
+    placement: 'inline' | 'panel';
+    document: 'page.md' | 'page.html';
+    steps: number;
+    slots: PageSlotDTO[];
+    source?: TicketSourceDTO;
+}
+export interface PageCommentAnchorDTO {
+    kind: 'whole' | 'option' | 'row' | 'column' | 'card' | 'range';
+    optionId?: string;
+    rowId?: string;
+    columnId?: string;
+    cardId?: string;
+    start?: number;
+    end?: number;
+    quote?: string;
+}
+export interface PageCommentDTO {
     id: string;
-    label: string;
-    description?: string;
+    anchor: PageCommentAnchorDTO;
+    text: string;
 }
-export interface InteractionPreAnswerDTO {
-    selectedOptionId?: string;
-    selectedOptionIds?: string[];
+export interface PageOptionsResponseDTO {
+    selectedOptionIds: string[];
+    comments: PageCommentDTO[];
     freetext?: string;
-    label?: string;
 }
-export interface InteractionDTO {
-    id: string;
-    title: string;
-    subtitle: string;
-    /** Resolved source Markdown — `bodyPath` is deliberately impossible here. */
-    body?: string;
-    options: InteractionOptionDTO[];
-    multiSelect?: boolean;
-    allowFreetext?: boolean;
-    freetextLabel?: string;
-    kind?: InteractionKindDTO;
-    preAnswered?: InteractionPreAnswerDTO;
-}
-export interface DeckDTO {
-    title: string;
-    source?: DeckSourceDTO;
-    interactions: InteractionDTO[];
+export interface PageTextResponseDTO {
+    text: string;
+    edited: boolean;
+    comments: PageCommentDTO[];
+}
+export interface PageTableResponseDTO {
+    selectedRowIds: string[];
+    selectedColumnIds: string[];
+    comments: PageCommentDTO[];
 }
-/** `GET /v1/human/inbox/:ticket_id` result for a pending deck. */
-export interface InboxDeckDTO {
+export interface PageCardsResponseDTO {
+    selectedCardIds: string[];
+    comments: PageCommentDTO[];
+}
+export type SlotResponseDTO = PageOptionsResponseDTO | PageTextResponseDTO | PageTableResponseDTO | PageCardsResponseDTO | Record<string, unknown>;
+export type PageResponsesDTO = Record<string, SlotResponseDTO>;
+export interface InboxPageDTO {
     ticket_id: InboxTicketIdDTO;
-    kind: 'deck';
-    deck: DeckDTO;
+    kind: 'page';
+    state: 'pending' | 'resolved' | 'canceled';
+    page: PageManifestDTO;
+    document: string;
+    document_media_type: 'text/markdown' | 'text/html';
+    progress: {
+        responses: PageResponsesDTO;
+    } | null;
 }
-export interface InteractionResponseDTO {
-    id: string;
-    selectedOptionId?: string;
-    selectedOptionIds?: string[];
-    freetext?: string;
-    optionComments?: Record<string, string>;
-}
-/** `POST /v1/human/inbox/:ticket_id/respond` body. */
-export interface RespondInboxDeckRequest {
-    responses: InteractionResponseDTO[];
-}
-/** `POST /v1/human/inbox/:ticket_id/respond` result — the canonical humanloop
- *  `humanloop.response/v2` result, unchanged. */
-export interface DeckTicketResultDTO {
-    schema: 'humanloop.response/v2';
-    kind: 'deck';
-    responses: InteractionResponseDTO[];
+export interface InboxPageHistoryDTO {
+    tickets: PageTicketSummaryDTO[];
+}
+/** `GET /v1/human/inbox/:ticket_id/render` — the page's body-level HTML
+ *  payload. It carries the page's own prose and `crtr-*` slot elements only;
+ *  the host supplies the surrounding document and injects the page runtime
+ *  bundle it chooses to serve. */
+export interface InboxPageRenderDTO {
+    html: string;
+}
+/** A client-side projection of `GET /v1/human/pages/bundle.{js,css}` — the one
+ *  non-JSON route on this surface. `content` is null on a 304, where the
+ *  caller's cached copy is still current. */
+export interface PagesBundleAssetDTO {
+    status: 200 | 304;
+    etag: string;
+    content_type: string;
+    content: string | null;
+}
+export interface RespondInboxPageRequest {
+    responses: PageResponsesDTO;
+}
+export interface InboxPageProgressDTO {
+    responses: PageResponsesDTO;
+}
+export interface PageTicketResultDTO {
+    schema: 'crtr.page-response/v1';
+    kind: 'page';
+    responses: PageResponsesDTO;
     summary: string;
     completedAt: IsoTime;
 }
-/** `POST /v1/human/inbox/:ticket_id/cancel` body. `reason`, when present, must
- *  be nonempty after trim and at most 1000 characters. */
+/** `POST /v1/human/inbox/:ticket_id/cancel` body. */
 export interface CancelInboxTicketRequest {
     reason?: string;
 }
-/** `POST /v1/human/inbox/:ticket_id/cancel` result — the canonical humanloop
- *  `humanloop.cancel/v1` result, unchanged. `actor` is always `"human"`. */
+/** `POST /v1/human/inbox/:ticket_id/cancel` result. */
 export interface CanceledTicketResultDTO {
     schema: 'humanloop.cancel/v1';
     kind: 'canceled';

package/dist/api/dto/inbox.js

@@ -1,10 +1,4 @@
 // Humanloop inbox DTOs — crtrd `/v1/human/inbox` (Northlight crouter-inbox v1,
-// inbox-contract.md §A). Crouter API envelope fields use the existing
-// snake_case convention; nested humanloop protocol objects retain their
-// canonical camelCase field names so they cross the wire without translation
-// or loss. Optional fields are omitted when absent, never serialized as
-// `null`. `bodyPath` is deliberately impossible on this wire — crtrd resolves
-// it server-side via humanloop's `parseDeck` and returns inline `body`.
-//
-// PURITY (spec §3.1): Node built-ins + `src/api/*` only.
+// inbox-contract.md §A). API envelope fields use snake_case; nested page
+// protocol objects retain their canonical camelCase field names.
 export {};

package/dist/api/index.d.ts

@@ -6,6 +6,7 @@ export { API_VERSION, routes } from './routes.js';
 export * from './dto/common.js';
 export * from './dto/health.js';
 export * from './dto/nodes.js';
+export * from './dto/bash-jobs.js';
 export * from './dto/messages.js';
 export * from './dto/reports.js';
 export * from './dto/lifecycle.js';

package/dist/api/index.js

@@ -7,6 +7,7 @@ export { API_VERSION, routes } from './routes.js';
 export * from './dto/common.js';
 export * from './dto/health.js';
 export * from './dto/nodes.js';
+export * from './dto/bash-jobs.js';
 export * from './dto/messages.js';
 export * from './dto/reports.js';
 export * from './dto/lifecycle.js';

package/dist/api/routes.d.ts

@@ -14,6 +14,8 @@ export declare const routes: {
     readonly nodeContext: (id: string) => string;
     readonly nodeArtifacts: (id: string) => string;
     readonly nodeReports: (id: string) => string;
+    readonly nodeJobs: (id: string) => string;
+    readonly nodeJob: (id: string, jobId: string) => string;
     readonly nodeMessages: (id: string) => string;
     readonly nodeInterrupt: (id: string) => string;
     readonly nodeFork: (id: string) => string;
@@ -76,7 +78,12 @@ export declare const routes: {
     readonly humanInbox: () => string;
     readonly humanInboxTicket: (ticketId: string) => string;
     readonly humanInboxRespond: (ticketId: string) => string;
+    readonly humanInboxProgress: (ticketId: string) => string;
+    readonly humanInboxResponse: (ticketId: string) => string;
     readonly humanInboxCancel: (ticketId: string) => string;
+    readonly humanInboxRender: (ticketId: string) => string;
+    /** The built page runtime assets, served for whatever host renders a page. */
+    readonly humanPagesBundle: (asset: "js" | "css") => string;
     readonly profiles: () => string;
     readonly profile: (name: string) => string;
     readonly modelAuths: () => string;

package/dist/api/routes.js

@@ -30,6 +30,8 @@ export const routes = {
     nodeContext: (id) => `${V}/nodes/${id}/context`,
     nodeArtifacts: (id) => `${V}/nodes/${id}/artifacts`,
     nodeReports: (id) => `${V}/nodes/${id}/reports`,
+    nodeJobs: (id) => `${V}/nodes/${id}/jobs`,
+    nodeJob: (id, jobId) => `${V}/nodes/${id}/jobs/${jobId}`,
     // Node messages / feed
     nodeMessages: (id) => `${V}/nodes/${id}/messages`,
     nodeInterrupt: (id) => `${V}/nodes/${id}/interrupt`,
@@ -103,7 +105,12 @@ export const routes = {
     humanInbox: () => `${V}/human/inbox`,
     humanInboxTicket: (ticketId) => `${V}/human/inbox/${ticketId}`,
     humanInboxRespond: (ticketId) => `${V}/human/inbox/${ticketId}/respond`,
+    humanInboxProgress: (ticketId) => `${V}/human/inbox/${ticketId}/progress`,
+    humanInboxResponse: (ticketId) => `${V}/human/inbox/${ticketId}/response`,
     humanInboxCancel: (ticketId) => `${V}/human/inbox/${ticketId}/cancel`,
+    humanInboxRender: (ticketId) => `${V}/human/inbox/${ticketId}/render`,
+    /** The built page runtime assets, served for whatever host renders a page. */
+    humanPagesBundle: (asset) => `${V}/human/pages/bundle.${asset}`,
     // Profiles (server-side for P2 Core; CLI profile verbs stay fs-local)
     profiles: () => `${V}/profiles`,
     profile: (name) => `${V}/profiles/${name}`,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter-api",
-  "version": "0.3.192",
+  "version": "0.3.194",
   "description": "Typed crtrd /v1 API contract — DTOs, route builders, the error contract, and the CrtrClient. Zero runtime dependencies.",
   "type": "module",
   "main": "./dist/api/index.js",