@north-light/crouter 0.3.175 → 0.3.177

package/dist/daemon/manage.d.ts

@@ -78,12 +78,12 @@ export declare function waitForDaemonExit(pid: number, timeoutMs?: number, deps?
 /** Stop the RECORDED daemon: SIGTERM, and if it does not exit within the wait
  *  window, escalate to SIGKILL exactly as `sweepStrayDaemons` does for a stray.
  *
- *  The escalation is the point. `stop` used to send SIGTERM, wait, and throw on
- *  timeout — before ever reaching the stray sweep — so the one daemon `stop` is
- *  actually aimed at was the only crtrd process exempt from the SIGKILL backstop.
- *  A daemon whose shutdown hung (or outran the window) then became permanently
- *  unstoppable from the CLI: every retry re-sent a SIGTERM it was already
- *  ignoring, and `start` kept refusing as "already running".
+ *  The escalation is the point. Without it — SIGTERM, wait, throw on timeout,
+ *  never reaching the stray sweep — the one daemon `stop` is actually aimed at
+ *  would be the only crtrd process exempt from the SIGKILL backstop, and a
+ *  daemon whose shutdown hangs (or outruns the window) becomes permanently
+ *  unstoppable from the CLI: every retry re-sends a SIGTERM it is already
+ *  ignoring, and `start` keeps refusing as "already running".
  *
  *  A SIGKILL'd daemon runs no exit handler, so it leaves its pidfile behind
  *  pointing at a dead pid. That is a stale record, not an owner: `readPidfile`

package/dist/daemon/manage.js

@@ -193,15 +193,14 @@ export function sweepStrayDaemons(keepPid) {
 // Daemon lifecycle transitions are bounded so callers never claim a state
 // change before the pidfile and process liveness agree.
 //
-// #508: a cold boot right after `install-runtime` (empty module cache, fresh
-// generation, possible pending db migration) can take several seconds to
-// reach writePidfile() — a fixed 5s window produced false "did not become
-// ready" failures on a daemon that was in fact starting up fine. Widened to
-// tolerate that slow-but-valid cold start; a process exit (signal/non-zero
-// code) still fails immediately regardless of this window.
+// A cold boot right after `install-runtime` (empty module cache, fresh
+// generation, possible pending db migration) can take several seconds to reach
+// writePidfile(), so the window is wide enough to tolerate that slow-but-valid
+// cold start rather than report a false "did not become ready"; a process exit
+// (signal/non-zero code) still fails immediately regardless of this window.
 // Exported so `commands/api-client.ts` can align the CLI-side `CrtrClient`'s
 // cold-start `/healthz` poll window with this authoritative valid-startup bound
-// (issue #508 follow-up) instead of the two windows drifting independently.
+// instead of the two windows drifting independently.
 export const DAEMON_VERIFY_WINDOW_MS = 20_000;
 const DAEMON_VERIFY_POLL_MS = 10;
 function sleepMs(ms) {
@@ -272,12 +271,12 @@ const DAEMON_KILL_WINDOW_MS = 2_000;
 /** Stop the RECORDED daemon: SIGTERM, and if it does not exit within the wait
  *  window, escalate to SIGKILL exactly as `sweepStrayDaemons` does for a stray.
  *
- *  The escalation is the point. `stop` used to send SIGTERM, wait, and throw on
- *  timeout — before ever reaching the stray sweep — so the one daemon `stop` is
- *  actually aimed at was the only crtrd process exempt from the SIGKILL backstop.
- *  A daemon whose shutdown hung (or outran the window) then became permanently
- *  unstoppable from the CLI: every retry re-sent a SIGTERM it was already
- *  ignoring, and `start` kept refusing as "already running".
+ *  The escalation is the point. Without it — SIGTERM, wait, throw on timeout,
+ *  never reaching the stray sweep — the one daemon `stop` is actually aimed at
+ *  would be the only crtrd process exempt from the SIGKILL backstop, and a
+ *  daemon whose shutdown hangs (or outruns the window) becomes permanently
+ *  unstoppable from the CLI: every retry re-sends a SIGTERM it is already
+ *  ignoring, and `start` keeps refusing as "already running".
  *
  *  A SIGKILL'd daemon runs no exit handler, so it leaves its pidfile behind
  *  pointing at a dead pid. That is a stale record, not an owner: `readPidfile`
@@ -332,8 +331,8 @@ export async function spawnDaemon() {
     // output the daemon doesn't control, plus the narrow set of authorized raw
     // `[crtrd] …` bootstrap/fatal lines that by construction predate or escape
     // canonical event emission (the pre-bind losing-claim line and a cleanup-
-    // fatal write in crtrd.ts): all used to go to /dev/null for any manually-
-    // started daemon, the common case (only a launchd-owned daemon had a
+    // fatal write in crtrd.ts). Without this fd all of it is discarded for any
+    // manually-started daemon, the common case (only a launchd-owned daemon has a
     // logging plist). Every other daemon diagnostic — including per-node
     // supervise/relaunch failures — is a canonical `emitEvent` write, not raw
     // stderr; this file is not where those live. Mirrors host.ts's broker.log
@@ -344,7 +343,7 @@ export async function spawnDaemon() {
         bindDaemonEventSource();
     // `--canvas-home` declares this daemon's canvas ownership in argv so
     // findDaemonPids()/sweepStrayDaemons (above) can match its own daemon
-    // exactly instead of scanning the whole machine (#518). crtrd-cli.ts's argv
+    // exactly instead of scanning the whole machine. crtrd-cli.ts's argv
     // parsing only looks for `--tcp`, so this extra pair of tokens is inert
     // there — it exists purely for `ps` visibility.
     const child = spawn(hostExecPath(), [...launchArgs, '--canvas-home', crtrHome()], {

package/dist/daemon/review/finish.js

@@ -8,7 +8,7 @@ import { reviewResultPath } from '../../core/canvas/paths.js';
 import { snapshotCommentsLocked } from '../../core/review/comments.js';
 import { readReviewSource } from '../../core/review/document.js';
 import { signalReviewActivity } from '../../core/review/signal.js';
-import { approveReviewLocked, cancelReviewRow, getReview, markDelivered, markDeliveryError, markProjected, markProjectionError, } from '../../core/review/store.js';
+import { approveReviewLocked, cancelReviewRow, markDelivered, markDeliveryError, markProjected, markProjectionError, requireVisibleReview, } from '../../core/review/store.js';
 import { ReviewOperationError } from '../../core/review/types.js';
 import { transition } from '../../core/runtime/lifecycle.js';
 import { headlessBrokerHost } from '../../core/runtime/host.js';
@@ -22,15 +22,6 @@ function now() {
 function errorText(error) {
     return error instanceof Error ? error.message : String(error);
 }
-function unknownReview(reviewId) {
-    throw new ReviewOperationError('unknown_review', 'review was not found', { received: reviewId });
-}
-function requireVisibleReview(reviewId) {
-    const review = getReview(reviewId);
-    if (review === null || review.state === 'binding')
-        return unknownReview(reviewId);
-    return review;
-}
 function terminalConflict(review, requested) {
     throw new ReviewOperationError('review_terminal', 'review already has a terminal outcome', {
         state: review.state,

package/dist/pi-extensions/canvas-context-intro.js

@@ -30,6 +30,7 @@ import { CONTEXT_INTRO_CUSTOM_TYPE } from '../shared/generated-context.js';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { buildContextBearingsFromState, buildForkBearingsFromState, buildProjectContextBlockForBroker } from '../core/runtime/broker-extension-render.js';
 import { situationalContextBlock } from '../core/runtime/situational-context.js';
+import { truncateToWidth } from './truncate.js';
 /** The `customType` stamped on the injected session message. Used both to write
  *  the entry and to detect it on resume (the idempotency guard). Defined beside
  *  the block builder in `core/runtime/bearings.ts` because the warm-pool claim's
@@ -91,20 +92,6 @@ function wrapLine(line, width) {
         out.push(chars.slice(i, i + width).join(''));
     return out;
 }
-/** Truncate plain text to at most `width` columns, appending an ellipsis when it
- *  would overflow. Content here is ANSI-free plain text (label + prose), so a
- *  code-point count stands in for visible width. The renderer MUST keep every
- *  emitted line within the terminal width or pi's TUI aborts the whole render. */
-function truncateToWidth(text, width) {
-    if (width <= 0)
-        return '';
-    const chars = Array.from(text);
-    if (chars.length <= width)
-        return text;
-    if (width === 1)
-        return '…';
-    return chars.slice(0, width - 1).join('') + '…';
-}
 /**
  * Renderer for `crtr-context` messages. Collapsed (default) shows a one-line
  * stub; expanded (Ctrl+O) shows the label + full body. Returns a plain object

package/dist/pi-extensions/canvas-doc-substrate.js

@@ -34,7 +34,7 @@ import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { renderPreferencesFromState } from '../core/runtime/broker-extension-render.js';
-import { renderOnReadDocsForSubject } from '../core/substrate/on-read-pure.js';
+import { renderOnReadDocsForSubject } from '../core/substrate/on-read.js';
 import { clearSessionCache } from '../core/substrate/session-cache.js';
 import { loadInjectedDocs, saveInjectedDocs } from '../core/substrate/injected-store.js';
 import { autoLoadedContextInner, mergeAutoLoadedContext } from './envelope-merge.js';
@@ -76,7 +76,7 @@ export function registerCanvasDocSubstrate(pi) {
     //    (memory-usage guidance + preferences). The guidance frame is always
     //    present for a canvas node (the memory system always exists), so the block
     //    is never empty even when no preference is eligible. (The knowledge catalog
-    //    no longer enters the system prompt — it rides the bearings message via
+    //    does not enter the system prompt — it rides the bearings message via
     //    renderKnowledgeBlock.)
     pi.on('before_agent_start', async (event) => {
         try {

package/dist/pi-extensions/canvas-preview-result.d.ts

@@ -0,0 +1,22 @@
+interface ToolCallEvent {
+    toolName: string;
+    toolCallId: string;
+    input: {
+        command?: string;
+    };
+}
+interface ToolResultEvent {
+    toolName: string;
+    toolCallId: string;
+    details?: Record<string, unknown>;
+}
+interface PiLike {
+    on(event: 'tool_call', handler: (event: ToolCallEvent) => void): void;
+    on(event: 'tool_result', handler: (event: ToolResultEvent) => {
+        details: Record<string, unknown>;
+    } | void): void;
+}
+/** Loaded into every canvas broker. Plain Pi sessions have no node id and
+ * deliberately receive no filesystem transport. */
+export declare function registerCanvasPreviewResult(pi: PiLike): void;
+export default registerCanvasPreviewResult;

package/dist/pi-extensions/canvas-preview-result.js

@@ -0,0 +1,60 @@
+// canvas-preview-result.ts — private structured result transport for crtr bash calls.
+//
+// A crtr leaf returns a record, but the CLI normally renders that record to
+// stdout for the agent. stdout is model context, so this hook assigns every
+// bash call a private file, lets crtr atomically mirror its record there, then
+// attaches the record to Pi's ToolResult.details. The attach viewer can render
+// a structured preview without parsing the agent-facing text.
+import { existsSync, mkdirSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+function isPreviewRecord(value) {
+    if (value === null || typeof value !== 'object' || typeof value['path'] !== 'string')
+        return false;
+    const record = value;
+    return (record.result !== undefined && record.result !== null && typeof record.result === 'object' && !Array.isArray(record.result))
+        || (Array.isArray(record.jsonl) && record.jsonl.every((item) => item !== null && typeof item === 'object' && !Array.isArray(item)))
+        || (record.error !== undefined && record.error !== null && typeof record.error === 'object' && !Array.isArray(record.error));
+}
+/** Loaded into every canvas broker. Plain Pi sessions have no node id and
+ * deliberately receive no filesystem transport. */
+export function registerCanvasPreviewResult(pi) {
+    if (process.env['CRTR_NODE_ID'] === undefined || process.env['CRTR_NODE_ID'] === '')
+        return;
+    const directory = join(tmpdir(), 'crouter-preview-results');
+    const paths = new Map();
+    pi.on('tool_call', (event) => {
+        if (event.toolName !== 'bash' || typeof event.input.command !== 'string')
+            return;
+        mkdirSync(directory, { recursive: true });
+        const path = join(directory, `${encodeURIComponent(event.toolCallId)}.json`);
+        paths.set(event.toolCallId, path);
+        // Export before the complete script rather than prefixing its first simple
+        // command: agent bash calls routinely start with `cd … &&`, a compound
+        // statement, or setup commands before crtr itself.
+        event.input.command = `export CRTR_PREVIEW_RESULT_PATH=${JSON.stringify(path)}\n${event.input.command}`;
+    });
+    pi.on('tool_result', (event) => {
+        const path = paths.get(event.toolCallId);
+        if (path === undefined)
+            return;
+        paths.delete(event.toolCallId);
+        if (!existsSync(path))
+            return;
+        try {
+            const record = JSON.parse(readFileSync(path, 'utf8'));
+            if (!isPreviewRecord(record))
+                return;
+            return { details: { ...(event.details ?? {}), crtrPreview: record } };
+        }
+        catch {
+            // A malformed side-channel record is not agent-visible output and must
+            // not change the bash call's actual result.
+            return;
+        }
+        finally {
+            rmSync(path, { force: true });
+        }
+    });
+}
+export default registerCanvasPreviewResult;

package/dist/pi-extensions/canvas-review-boundary.js

@@ -6,23 +6,10 @@
 // inherited context.
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { isReviewBoundary, REVIEW_BOUNDARY_CUSTOM_TYPE } from '../core/runtime/session-visibility.js';
+import { truncateToWidth } from './truncate.js';
 // ---------------------------------------------------------------------------
 // Collapsed-by-default rendering
 // ---------------------------------------------------------------------------
-/** Truncate plain text to at most `width` columns, appending an ellipsis when it
- *  would overflow. Content here is ANSI-free plain text, so code-point count
- *  stands in for visible width. The renderer MUST keep every emitted line within
- *  the terminal width or pi's TUI aborts the whole render. */
-function truncateToWidth(text, width) {
-    if (width <= 0)
-        return '';
-    const chars = Array.from(text);
-    if (chars.length <= width)
-        return text;
-    if (width === 1)
-        return '…';
-    return chars.slice(0, width - 1).join('') + '…';
-}
 /** Render the marker as a single compact divider; its full content remains in
  * the message list for the model and generated-context presenters. */
 export function renderReviewBoundary(_message, _options, theme) {

package/dist/pi-extensions/truncate.d.ts

@@ -0,0 +1,5 @@
+/** Hard-truncate to `width` columns with an ellipsis when the text would
+ *  overflow. Extension-rendered content is ANSI-free plain text, so a
+ *  code-point count stands in for visible width. Every renderer MUST keep its
+ *  emitted lines within the terminal width or pi's TUI aborts the whole render. */
+export declare function truncateToWidth(text: string, width: number): string;

package/dist/pi-extensions/truncate.js

@@ -0,0 +1,14 @@
+/** Hard-truncate to `width` columns with an ellipsis when the text would
+ *  overflow. Extension-rendered content is ANSI-free plain text, so a
+ *  code-point count stands in for visible width. Every renderer MUST keep its
+ *  emitted lines within the terminal width or pi's TUI aborts the whole render. */
+export function truncateToWidth(text, width) {
+    if (width <= 0)
+        return '';
+    const chars = Array.from(text);
+    if (chars.length <= width)
+        return text;
+    if (width === 1)
+        return '…';
+    return chars.slice(0, width - 1).join('') + '…';
+}

package/dist/shared/predicates.d.ts

@@ -0,0 +1,2 @@
+/** A plain object with named properties: null and arrays are not records. */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;

package/dist/shared/predicates.js

@@ -0,0 +1,4 @@
+/** A plain object with named properties: null and arrays are not records. */
+export function isRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}

package/dist/shared/shell-quote.d.ts

@@ -0,0 +1,3 @@
+/** POSIX single-quote escaping for one shell word, so paths and arguments
+ *  survive spaces and shell metacharacters when interpolated into `sh -c`. */
+export declare function shellQuote(s: string): string;

package/dist/shared/shell-quote.js

@@ -0,0 +1,5 @@
+/** POSIX single-quote escaping for one shell word, so paths and arguments
+ *  survive spaces and shell metacharacters when interpolated into `sh -c`. */
+export function shellQuote(s) {
+    return `'${s.replace(/'/g, `'\\''`)}'`;
+}

package/dist/shared/tool-groups.d.ts

@@ -1,8 +1,10 @@
-/** Broker-generated activity recap for one completed tool-call group. */
+/** Broker-generated activity recap for one completed tool-call group. Changed
+ * files are counted deterministically by the viewer's GroupActivityRecorder;
+ * deletions have no tool of their own, so only the model can evidence them. */
 export interface ToolGroupSummary {
     bullets: string[];
     nodesSpawned: number;
-    filesEdited: number;
+    filesDeleted: number;
 }
 export interface ToolGroupMessageLike {
     role?: string;

package/dist/shared/tool-groups.js

@@ -2,7 +2,7 @@
 // Keep this independent of renderer state: both live event tracking and snapshot
 // reconstruction must agree on which prose closes a run of tools.
 import { generatedContextPresentation, generatedContextText } from './generated-context.js';
-const TOOL_GROUP_SUMMARY_KEYS = new Set(['bullets', 'nodesSpawned', 'filesEdited']);
+const TOOL_GROUP_SUMMARY_KEYS = new Set(['bullets', 'nodesSpawned', 'filesDeleted']);
 const MAX_TOOL_GROUP_BULLETS = 5;
 const MAX_TOOL_GROUP_BULLET_LENGTH = 1_000;
 /** Validate the one durable summary shape and cap its display-sized fields.
@@ -21,14 +21,14 @@ export function normalizeToolGroupSummary(value) {
         return null;
     if (typeof record.nodesSpawned !== 'number' || !Number.isSafeInteger(record.nodesSpawned) || record.nodesSpawned < 0)
         return null;
-    if (typeof record.filesEdited !== 'number' || !Number.isSafeInteger(record.filesEdited) || record.filesEdited < 0)
+    if (typeof record.filesDeleted !== 'number' || !Number.isSafeInteger(record.filesDeleted) || record.filesDeleted < 0)
         return null;
     return {
         bullets: record.bullets
             .slice(0, MAX_TOOL_GROUP_BULLETS)
             .map((bullet) => bullet.trim().slice(0, MAX_TOOL_GROUP_BULLET_LENGTH).trimEnd()),
         nodesSpawned: record.nodesSpawned,
-        filesEdited: record.filesEdited,
+        filesDeleted: record.filesDeleted,
     };
 }
 /** Validate sidecar/snapshot entries independently so one malformed or legacy

package/dist/types.d.ts

@@ -128,13 +128,12 @@ export interface ModelRoutingConfig {
 /** Launch metadata for one kind (a top-level kind like `developer`, or a full
  *  sub-kind string like `plan/reviewers/security`) — the settings-file
  *  replacement for per-kind persona frontmatter. `model`/`tools`/`extensions`
- *  are launch knobs consumed by `buildLaunchSpec` (Phase 3); `whenToUse` is the
+ *  are launch knobs consumed by `buildLaunchSpec`; `whenToUse` is the
  *  one-line gloss shown in `node new -h` / `node promote -h`. `availableTo` is
  *  VISIBILITY-ONLY (never launch validation): the list of top-level kind names
  *  whose spawn menus surface this sub-kind, `'*'` meaning every kind; omitted
  *  defaults to the sub-kind's own top-level ancestor (e.g.
- *  `plan/reviewers/security` defaults to `['plan']`) — this reproduces the
- *  original sub-persona `availableTo` semantics. A direct launch by full kind
+ *  `plan/reviewers/security` defaults to `['plan']`). A direct launch by full kind
  *  string is always valid regardless of `availableTo`. */
 export interface KindConfig {
     model?: string;
@@ -313,9 +312,9 @@ export interface InstalledMarketplace {
  *  (spec §2.1). A profile is an agent identity defined at the user root: it
  *  names N project directories and owns its own `memory/` store. `projects`
  *  are absolute, real-path-resolved directories in manifest order — the
- *  pointer set `findProjectScopeRoots` walks (Phase 5), after the node's own
+ *  pointer set `findProjectScopeRoots` walks, after the node's own
  *  cwd. `name` is the mutable display name (and the gateable `profile` subject
- *  field, Phase 6); `<slug>-<id>` in the directory name is the stable id and
+ *  field); `<slug>-<id>` in the directory name is the stable id and
  *  never changes on rename. See `src/core/profiles/manifest.ts` for every
  *  read/write of this file — it is the sole owner of path resolution and
  *  mutation. */
@@ -323,6 +322,10 @@ export interface ProfileManifest {
     schema_version: number;
     name: string;
     projects: string[];
+    /** The directory nodes under this profile are pinned to (see
+     *  `profileHome`). Normalized on read to the first project when the manifest
+     *  carries none, so a profile written before homes existed still has one. */
+    home: string | null;
     created_at: string;
     last_used_at: string | null;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.175",
+  "version": "0.3.177",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.175",
+  "version": "0.3.177",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/crouter",
-      "version": "0.3.175",
+      "version": "0.3.177",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {

package/dist/core/substrate/on-read-pure.d.ts

@@ -1,7 +0,0 @@
-import type { NodeConfigSubject } from './subject-fields.js';
-/** Surface docs matched by a successful read tool call using the caller-supplied
- * daemon snapshot subject. */
-export declare function renderOnReadDocsForSubject(subject: NodeConfigSubject, readFilePath: string, seen?: Set<string>): string;
-/** Workspace boot docs using the snapshot's cwd/profile instead of a canvas
- * lookup. */
-export declare function renderWorkspaceOpenDocsForSubject(subject: NodeConfigSubject, cwd: string, profileId: string | null): string;