@north-light/crouter 0.3.196 → 0.3.198

package/dist/api/client.d.ts

@@ -16,7 +16,7 @@ import type { CredentialRemovalResultDTO, CredentialResultDTO, InstallCredential
 import type { CreateHumanBridgeRequest, HumanBridgeResultDTO, HumanCancelRequest, HumanCancelResultDTO, HumanResolveRequest, HumanResolveResultDTO } from './dto/human.js';
 import type { CancelReviewRequest, CreateReviewRequest, ListReviewsQuery, ReviewCancelResultDTO, ReviewDocumentBaseDTO, ReviewDTO, ReviewListDTO, ReviewSubmitResultDTO } from './dto/reviews.js';
 import type { CreateReviewCommentRequest, EditReviewCommentRequest, ListReviewCommentsQuery, ReadReviewCommentEventsQuery, ReviewCommentActionRequest, ReviewCommentDetailDTO, ReviewCommentEventsDTO, ReviewCommentListDTO, ReviewCommentMutationDTO, ReviewCommentRangeBatchRequest, ReviewCommentRangeBatchResultDTO } from './dto/review-comments.js';
-import type { CancelInboxTicketRequest, CanceledTicketResultDTO, InboxListDTO, InboxPageDTO, InboxPageHistoryDTO, InboxPageRenderDTO, PagesBundleAssetDTO, InboxTicketIdDTO, PageResponsesDTO, PageTicketResultDTO, RespondInboxPageRequest } from './dto/inbox.js';
+import type { CancelInboxTicketRequest, CanceledTicketResultDTO, InboxListDTO, InboxPageDTO, InboxPageHistoryDTO, InboxPageRenderDTO, PagesBundleAssetDTO, InboxPageResponseDTO, InboxTicketIdDTO, PageResponsesDTO, PageTicketResultDTO, RespondInboxPageRequest } from './dto/inbox.js';
 import type { AttentionCountsDTO, AttentionDTO, DashboardDTO, DashboardQuery, HistoryGrepQuery, HistoryGrepResultDTO, HistoryReadQuery, HistoryReadResultDTO, HistorySearchQuery, HistorySearchResultDTO, PruneRequest, PruneResultDTO, RebuildIndexResultDTO, RosterDTO, SnapshotDTO } from './dto/canvas.js';
 import type { CloseWorktreeResultDTO } from './dto/worktree.js';
 import type { BrokerExtensionStateDTO, BrokerGeneratedNameRequest, BrokerGeneratedNameResultDTO, BrokerInboxCursorDirective, BrokerInboxCursorRequest, BrokerModelCommitRequest, BrokerModelCommitResultDTO, BrokerPersonaAckRequest, BrokerSessionBoundRequest, BrokerSessionBoundResultDTO, BrokerSettleDirective, BrokerSettleRequest } from './dto/broker-ops.js';
@@ -204,7 +204,7 @@ export declare class CrtrClient {
     /** Autosave partial page work. Omitted slots are permitted in progress updates. */
     postInboxProgress(ticketId: InboxTicketIdDTO, responses: PageResponsesDTO): Promise<void>;
     /** Get the published response for a resolved page ticket. 404 if pending or canceled. */
-    getInboxResponse(ticketId: InboxTicketIdDTO): Promise<PageTicketResultDTO>;
+    getInboxResponse(ticketId: InboxTicketIdDTO): Promise<InboxPageResponseDTO>;
     /** The page's body-level HTML payload, for pending, resolved, and canceled
      *  tickets alike. The host wraps it and injects the page runtime bundle. */
     renderHumanInboxPage(ticketId: InboxTicketIdDTO): Promise<InboxPageRenderDTO>;

package/dist/api/dto/inbox.d.ts

@@ -5,6 +5,7 @@ export interface TicketSourceDTO {
     sessionName?: string;
     askedBy?: string;
     blockedSince?: IsoTime;
+    profileName?: string;
     nodeId?: string;
 }
 export interface ReviewTicketSummaryDTO {
@@ -28,6 +29,8 @@ export interface PageTicketSummaryDTO {
     slot_kinds: string[];
     awaits_response: boolean;
     state?: 'pending' | 'resolved' | 'canceled';
+    /** Present only on resolved history entries; the stored one-line answer digest. */
+    answer_digest?: string;
 }
 export type InboxTicketSummaryDTO = PageTicketSummaryDTO | ReviewTicketSummaryDTO;
 export interface InboxListDTO {
@@ -39,6 +42,7 @@ export interface PageSlotDTO {
     step: number;
     config: Record<string, unknown>;
     unvalidated?: true;
+    display?: true;
 }
 /** The nested protocol object is deliberately camelCase on the wire. */
 export interface PageManifestDTO {
@@ -131,6 +135,48 @@ export interface PageTicketResultDTO {
     summary: string;
     completedAt: IsoTime;
 }
+export interface PageAnswerGroupDTO {
+    group: 'option' | 'card' | 'row' | 'column';
+    mode: 'single' | 'multi';
+    total: number;
+    picked: {
+        id: string;
+        label: string;
+    }[];
+}
+export interface PageAnswerCommentDTO {
+    anchor: PageCommentAnchorDTO;
+    anchorLabel: string;
+    text: string;
+}
+export interface PageAnswerSlotDTO {
+    id: string;
+    kind: string;
+    label?: string;
+    state: 'answered' | 'unanswered';
+    blank: boolean;
+    groups: PageAnswerGroupDTO[];
+    freetext?: string;
+    text?: {
+        value: string;
+        edited: boolean;
+        singleLine?: boolean;
+    };
+    comments: PageAnswerCommentDTO[];
+    raw?: Record<string, unknown>;
+}
+/** The camelCase protocol object shipped only by GET .../response. */
+export interface PageAnswerDTO {
+    title: string;
+    subtitle?: string;
+    completedAt: IsoTime;
+    kind: 'answer' | 'acknowledgement';
+    digest: string;
+    slots: PageAnswerSlotDTO[];
+}
+export interface InboxPageResponseDTO extends PageTicketResultDTO {
+    answer: PageAnswerDTO;
+}
 /** `POST /v1/human/inbox/:ticket_id/cancel` body. */
 export interface CancelInboxTicketRequest {
     reason?: string;

package/dist/builtin-memory/00-runtime-base.md

@@ -10,7 +10,7 @@ rationale: >-
 
   "Waiting is a way to end a turn" lived in its own ungated all-node doc until 2026-07-28. Same gate, same audience, never independently readable — so the split bought no routing and cost a stub cross-reference in this file pointing at a section spliced a few hundred tokens later. Split it back out only if it ever needs a gate of its own.
 
-  The rich-Markdown line exists because supported viewer affordances are otherwise invisible to an agent working from ordinary Markdown defaults. Silas explicitly wanted one generic capability entrance rather than a permanent tag catalog in every node's system prompt.
+  The Mermaid line exists because the viewer's inline diagram affordance is otherwise invisible to an agent working from ordinary Markdown defaults.
 lint-ignore: length
 ---
 
@@ -41,8 +41,8 @@ Two different moves; don't conflate them. **Promote** when worthwhile independen
 
 Never yield carrying an unasked question: put anything you're still wondering for the human through `crtr human ask` BEFORE you yield — an in-flight ask survives the refresh, and its answer wakes your fresh window like any child's report.
 
-## Rich Markdown
-When visual structure or progressive disclosure would land faster than prose, use a Mermaid fence or supported HTML in Markdown; the human's terminal viewer renders both inline. Put nonessential supporting detail in collapsible sections, and use highlighted text only for the one thing the reader should notice. Reach for them when the shape is the point, not for everything.
+## Mermaid diagrams
+When visual structure would land faster than prose, use a Mermaid fence; the human's terminal viewer renders it inline. Reach for it when the shape is the point, not for everything.
 
 ## Waiting is a way to end a turn
 

package/dist/builtin-memory/internal/nodes-and-canvas.md

@@ -48,4 +48,4 @@ Tear-down: `node lifecycle close` cascade-cancels a node + its exclusive subtree
 
 Use `node lifecycle revive <id>` to reopen one dormant or terminal node. It resumes an existing saved conversation by default; `--fresh` starts a new cycle on its existing session file, or a truly fresh session if no file exists. A finalized node requires `--reopen` before it can take a new mandate. Mass-reconnecting every eligible disconnected node after a reboot or outage is `canvas revive --all` instead. `reviveNode()` is the **only** sanctioned launcher of a node's broker engine — it builds the pi invocation, sets `CRTR_NODE_ID` + canvas extensions, runs `transition('revive')`, and starts the headless broker host, keeping the db row and broker process in lockstep. Never spawn `pi --session` raw, and never open a node by spawning pi directly — UIs go through `surface node focus` / `node lifecycle revive`.
 
-The daemon (`crtrd`, managed via `sys daemon start/stop/status`) supervises live broker exits. It releases an unattended broker after 15 minutes: residents with no live obligation become `done` and pruning-eligible, while terminal nodes and residents awaiting a live child, controller, human, deadline, or structured output become `idle` and remain wakeable. It applies a bounded respawn policy to interrupted nonterminal nodes: a cleanly aborted saved turn resumes with a continuation, while a dirty interrupted turn, pending refresh, or pending cycle starts a fresh cycle from the saved session. Repeated short-lived exits and boot failures terminalize the node as `dead`; no automatic recovery occurs after terminalization, so use an explicit lifecycle revive or an inbox wake. It does not host agents or open viewers. When activating source changes, build, run `npm run install-runtime`, then restart the daemon because new daemon/brokers select the atomically switched, immutable generation while live brokers retain their own. Restarting is safe: it never signals running nodes.
+The daemon (`crtrd`, managed via `sys daemon start/stop/status`) supervises live broker exits. It releases an unattended broker after 15 minutes: residents with no live obligation become `done` and pruning-eligible, while terminal nodes and residents awaiting a live child, controller, human, deadline, or structured output become `idle` and remain wakeable. It applies a bounded respawn policy to interrupted nonterminal nodes: an interrupted saved turn resumes in the same conversation with a continuation, whether the broker persisted a clean abort or died abruptly. A pending refresh or pending cycle still starts a fresh cycle from the saved session. Repeated short-lived exits and boot failures terminalize the node as `dead`; no automatic recovery occurs after terminalization, so use an explicit lifecycle revive or an inbox wake. It does not host agents or open viewers. When activating source changes, build, run `npm run install-runtime`, then restart the daemon because new daemon/brokers select the atomically switched, immutable generation while live brokers retain their own. Restarting is safe: it never signals running nodes.

package/dist/builtin-memory/internal/storage-tiers.md

@@ -22,7 +22,7 @@ User-wide content with no cwd dimension also belongs here: `~/.crouter/profile-d
 
 ## 2. Canvas home — node-graph runtime state, node artifacts, and bounded diagnostics
 
-`~/.crouter/canvas/` (overridable with `CRTR_HOME`) is the cwd-agnostic node-graph home. `canvas.db` is the SQLite WAL topology store for nodes and edges, including durable tmux-pane focus. `nodes/<node_id>/` owns `meta.json`, `context/`, `reports/`, `messages/`, `inbox.jsonl`, `transcript.jsonl`, `session.ptr`, and `job/` state. Human ticket files (`page.json`, `page.md`, `run.json`, `response.json`, `review.json`, and `branch-point.jsonl`) live directly in a terminal human bridge node directory; `nodes/` is the single ticket root, derived rather than registered.
+`~/.crouter/canvas/` (overridable with `CRTR_HOME`) is the cwd-agnostic node-graph home. `canvas.db` is the SQLite WAL topology store for nodes and edges, including durable tmux-pane focus. `nodes/<node_id>/` owns `meta.json`, `context/`, `reports/`, `messages/`, `inbox.jsonl`, `transcript.jsonl`, `session.ptr`, and `job/` state. Human ticket files (`page.json`, `page.html`, `run.json`, `response.json`, `review.json`, and `branch-point.jsonl`) live directly in a terminal human bridge node directory; `nodes/` is the single ticket root, derived rather than registered.
 
 Specifications and plans are ordinary node-context artifacts. They share the node's lifetime and are removed when that node is reaped.
 

package/dist/builtin-memory/wedged-child-on-runaway-bash.md

@@ -13,7 +13,7 @@ A base node can wedge mid-turn on a runaway bash command (for example, an unboun
 ## Recover the process that is actually stuck
 
 - **A subprocess exists.** The daemon leaves the broker alone because a runaway bash/find/grep is the likely cause. Inspect the broker process tree, kill the scanner subprocess rather than its shell wrapper or node, and let the tool call return. The pi turn then resumes with its context intact. Tell the owning orchestrator if you discovered the wedge before its doctrine wake.
-- **No subprocess exists.** The broker itself is stalled. The daemon SIGTERMs it; its live-exit policy then makes a bounded recovery attempt. A broker-certified clean abort resumes the saved session with a continuation. A dirty interrupted turn, pending refresh, or pending cycle starts a new recovery cycle from the saved session instead. A broker that never established a session terminalizes rather than entering a respawn loop.
+- **No subprocess exists.** The broker itself is stalled. The daemon SIGTERMs it; its live-exit policy then makes a bounded recovery attempt. An interrupted saved turn resumes in the same conversation with a continuation, whether the broker persisted a clean abort or died abruptly. A pending refresh or pending cycle starts a new cycle from the saved session instead. A broker that never established a session terminalizes rather than entering a respawn loop.
 
 Recovery is not unconditional. Repeated short-lived exits or a boot failure terminalize the node as `dead`; no daemon respawn follows that terminal state. Reopen it explicitly with `crtr node lifecycle revive <id>` (use `--reopen` if it finalized), or deliver an inbox wake where that is the intended control path. If the daemon is down, it cannot detect, signal, or respawn a wedge; restore the daemon before relying on lifecycle recovery.
 

package/dist/clients/attach/render/chat-view.d.ts

@@ -111,15 +111,11 @@ export declare class ChatView {
     private readonly recapPalette;
     /** Bold accent for the expanded crtr-context label. */
     private readonly labelStyle;
-    /** Undefined honors each `<details open>` attribute until Ctrl+O establishes
-     *  one viewer-wide disclosure state. */
-    private detailsExpandedOverride;
     /** Viewer-local Markdown projection, handed to pi's message components so
      *  THEY apply it at render time with the exact content width. The viewer keeps
      *  no projected copy: the components hold canonical source, and each
-     *  transformer reads live viewer state (disclosure, palette) on every call.
-     *  Diagrams and the HTML allowlist apply only to assistant-authored
-     *  Markdown. */
+     *  transformer reads live viewer state on every call. Diagrams apply only to
+     *  assistant-authored Markdown. */
     private readonly markdownTransformers;
     /** The assistant message component currently being streamed (between
      *  message_start and message_end for an assistant turn). */
@@ -204,8 +200,7 @@ export declare class ChatView {
      *  one process it should call this on detach to avoid a leaked interval. */
     dispose(): void;
     /** Ctrl+O prefers summaries when the user enabled both folding and summary
-     * generation. The same disclosure state drives assistant-authored `<details>`
-     * sections, so the transcript has one reveal-more action rather than two. */
+     * generation. */
     toggleToolsExpanded(): ToolDisplayToggle;
     /** The `fold finished tool calls` view setting (`/fold-tools`, Alt+C → z → f).
      *  Returns the new state so the caller can surface a notice. */

package/dist/clients/attach/render/chat-view.js

@@ -29,7 +29,6 @@ import { CRTR_CYCLE_DIVIDER_CUSTOM_TYPE } from '../../../core/runtime/session-cy
 import { generatedContextExpandedBody, generatedContextPresentation, isRuntimeRestartContinuation, } from '../../../shared/generated-context.js';
 import { assistantVisibleText, isTrueUserMessage, } from '../../../shared/tool-groups.js';
 import { transformDiagramFences } from './diagram.js';
-import { transformHtmlMarkdown } from './html-markdown.js';
 import { styleAttachAgentMarkdown, styleAttachMarkdownSource, styleAttachMessageMarkdown, styleAttachSummaryMarkdown, } from './markdown-source.js';
 import { createCrtrEditToolDefinition } from './edit-diff.js';
 import { GroupActivityRecorder } from './group-activity.js';
@@ -305,27 +304,13 @@ export class ChatView {
     recapPalette;
     /** Bold accent for the expanded crtr-context label. */
     labelStyle = (s) => `\x1b[1m${s}\x1b[22m`;
-    /** Undefined honors each `<details open>` attribute until Ctrl+O establishes
-     *  one viewer-wide disclosure state. */
-    detailsExpandedOverride;
     /** Viewer-local Markdown projection, handed to pi's message components so
      *  THEY apply it at render time with the exact content width. The viewer keeps
      *  no projected copy: the components hold canonical source, and each
-     *  transformer reads live viewer state (disclosure, palette) on every call.
-     *  Diagrams and the HTML allowlist apply only to assistant-authored
-     *  Markdown. */
+     *  transformer reads live viewer state on every call. Diagrams apply only to
+     *  assistant-authored Markdown. */
     markdownTransformers = [
         (markdown, { messageType, availableWidth }) => (messageType === 'assistant' ? transformDiagramFences(markdown, availableWidth) : markdown),
-        (markdown, { messageType }) => (messageType === 'assistant'
-            ? transformHtmlMarkdown(markdown, {
-                detailsExpanded: this.detailsExpandedOverride,
-                styles: {
-                    kbd: (text) => this.recapPalette.active(this.recapPalette.bold(`‹${text}›`)),
-                    mark: (text) => `\x1b[7m${this.recapPalette.bold(this.recapPalette.accent(text))}\x1b[27m`,
-                    hint: this.dimStyle,
-                },
-            })
-            : markdown),
         (markdown, { messageType }) => (messageType === 'user' ? styleAttachMarkdownSource(markdown) : styleAttachAgentMarkdown(markdown)),
     ];
     /** The assistant message component currently being streamed (between
@@ -674,8 +659,7 @@ export class ChatView {
     // `setToolsExpanded` / `toggleThinkingBlockVisibility`.
     // -------------------------------------------------------------------------
     /** Ctrl+O prefers summaries when the user enabled both folding and summary
-     * generation. The same disclosure state drives assistant-authored `<details>`
-     * sections, so the transcript has one reveal-more action rather than two. */
+     * generation. */
     toggleToolsExpanded() {
         let result;
         if (this.summarizeToolCalls && this.foldSettledTools) {
@@ -687,11 +671,6 @@ export class ChatView {
             this.toolOutputExpanded = !this.toolOutputExpanded;
             result = { kind: 'output', expanded: this.toolOutputExpanded };
         }
-        this.detailsExpandedOverride = this.toolOutputExpanded;
-        // The disclosure state lives in the transformer closure, so the transcript
-        // only has to drop its projections: pi's message components rebuild their
-        // Markdown on invalidate() and re-run the transformer on the next render.
-        this.historyContainer.invalidate();
         this.applyToolDisplay();
         return result;
     }

package/dist/clients/attach/render/markdown-source.js

@@ -30,10 +30,6 @@ const FENCE_OPEN = /^\s{0,3}(`{3,}|~{3,})/;
  *  a literal `>` stays untouched rather than being mis-split. */
 const XML_TAG_LINE = /^([ \t]{0,3})(<\/?)([A-Za-z][\w.:-]*)((?:[ \t]+[^<>]*?)?)(\/?)>[ \t]*$/;
 const XML_ATTRIBUTE = /([^\s=]+)(?:=("[^"]*"|'[^']*'|[^\s]*))?/g;
-/** Tags the HTML allowlist owns (see html-markdown.ts). A `<details>` block
- *  that reaches this pass is one that failed validation there and is meant to
- *  stay literal. */
-const HTML_ALLOWLIST_TAGS = new Set(['details', 'summary', 'kbd', 'mark']);
 // A constant-lightness ramp from warm yellow to cool blue, with saturation
 // deliberately reduced at each step so the hierarchy recedes rather than
 // becoming a tour of unrelated accent colors.
@@ -85,8 +81,6 @@ function styleXmlTagLine(line) {
     if (!match)
         return undefined;
     const [, indent, open, name, attributes, selfClose] = match;
-    if (HTML_ALLOWLIST_TAGS.has(name.toLowerCase()))
-        return undefined;
     return indent
         + paint(XML_PUNCTUATION, open)
         + paint(XML_NAME, name)

package/dist/clients/attach/render/tool-calls.js

@@ -15,6 +15,7 @@ import { Text, getCapabilities, hyperlink, truncateToWidth, visibleWidth, wrapTe
 import { homedir } from 'node:os';
 import { isAbsolute, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { normalizeBashJobPurpose } from '../../../core/bash-jobs.js';
 import { TOOL_ICON } from '../../../core/preview-registry.js';
 function str(value) {
     return typeof value === 'string' ? value : '';
@@ -216,18 +217,25 @@ function styleCommandLine(line, theme) {
  *  there is more. Expanded (ctrl+o) it prints every line of the command, wrapped
  *  (never clipped — expanded is the raw truth) into the pane with continuations
  *  hanging under the icon. A line wider than the pane would desync pi-tui's line
- *  accounting against the terminal's own wrapping and garble the frame. */
+ *  accounting against the terminal's own wrapping and garble the frame.
+ *
+ *  FOLDED, a call that supplied a `purpose` shows that clause INSTEAD of the
+ *  command: the fold is a dense index of what the turn did, and the agent's own
+ *  words for why it ran this read better there than `rg -n … | head -30`. The
+ *  command itself is never lost — unfolding (or ctrl+o) shows it verbatim. */
 class BashCallComponent {
     command = '';
+    purpose;
     expanded = false;
     timeout;
     theme;
     /** Nothing is cached across paints (render recomputes from the fields), so
      *  pi's cache-drop hook has nothing to do here. */
     invalidate() { }
-    update(theme, command, expanded, timeout) {
+    update(theme, command, purpose, expanded, timeout) {
         this.theme = theme;
         this.command = command;
+        this.purpose = purpose;
         this.expanded = expanded;
         this.timeout = timeout;
     }
@@ -236,6 +244,9 @@ class BashCallComponent {
         if (!theme)
             return [];
         const icon = theme.fg('accent', TOOL_ICON.bash);
+        if (this.purpose !== undefined) {
+            return [truncateToWidth(`${icon} ${theme.fg('toolOutput', this.purpose)}`, width, '…')];
+        }
         const lines = this.command.split('\n').map((line) => line.trim()).filter((line) => line.length > 0);
         const suffix = this.timeout ? theme.fg('muted', ` (timeout ${this.timeout}s)`) : '';
         if (lines.length === 0)
@@ -286,6 +297,9 @@ export function createCrtrPlainBashToolDefinition(cwd, fold = new FoldedToolCall
             }
             const component = context.lastComponent instanceof BashCallComponent ? context.lastComponent : new BashCallComponent();
             component.update(theme, str(a?.command), 
+            // The purpose stands in for the command only while folded; it is normalized
+            // here because it is model-supplied text painted straight into the frame.
+            fold.folded ? normalizeBashJobPurpose(a?.purpose) ?? undefined : undefined, 
             // Folded wins over ctrl+o expansion: a folded bash is always its one-line form.
             Boolean(context.expanded) && !fold.folded, typeof a?.timeout === 'number' ? a.timeout : undefined);
             return fold.capture(component);