@north-light/crouter 0.3.198 → 0.3.199

package/dist/daemon/api/handlers/human.js

@@ -4,21 +4,20 @@
 import { existsSync } from 'node:fs';
 import { ApiError } from '../../../api/index.js';
 import { isSafeNodeId } from '../../../core/canvas/paths.js';
-import { pageManifestPath, reviewPath } from '../../../core/human/convention.js';
+import { pageManifestPath, readTicketReplyRoute, reviewPath } from '../../../core/human/convention.js';
 import { ticketDir } from '../../../core/human/root.js';
 import { readTicketResult, validatePageTicketResponses } from '../../../core/human/tickets.js';
-import { readConfig } from '../../../core/config.js';
 import { getReviewByBridge } from '../../../core/review/store.js';
 import { ReviewOperationError } from '../../../core/review/types.js';
 import { spawnNode } from '../../../core/runtime/nodes.js';
 import { cancelHumanTicket, resolvePageTicket } from '../../human/finish.js';
 import { cancelReview } from '../../review/finish.js';
-function requireTicketNodeId(ctx) {
-    const nodeId = ctx.params['node_id'];
-    if (nodeId === undefined || !isSafeNodeId(nodeId)) {
-        throw new ApiError(400, 'invalid_request', 'invalid ticket node id');
+function requireInteractionTicketId(ctx) {
+    const ticketId = ctx.params['ticket_id'];
+    if (ticketId === undefined || !isSafeNodeId(ticketId)) {
+        throw new ApiError(400, 'invalid_request', 'invalid interaction ticket id');
     }
-    return nodeId;
+    return ticketId;
 }
 // ===========================================================================
 // POST /v1/human/bridge — create a terminal bridge without a broker
@@ -48,7 +47,7 @@ function handleCreateBridge(ctx) {
     }
 }
 // ===========================================================================
-// POST /v1/human/tickets/:node_id/resolve and /cancel
+// POST /v1/human/tickets/:ticket_id/resolve and /cancel
 // ===========================================================================
 function reviewSubmitGuidance() {
     return new ApiError(400, 'invalid_request', 'review approvals use POST /v1/human/reviews/:review_id/submit');
@@ -78,6 +77,8 @@ function requirePageTicket(dir) {
 }
 function invalidResolveRequest(error) {
     const detail = error instanceof Error ? error.message : String(error);
+    if (detail === 'page_has_no_response_lifecycle')
+        return new ApiError(409, 'page_has_no_response_lifecycle', 'this page has no response lifecycle');
     return new ApiError(400, 'invalid_request', `invalid ticket resolve body: ${detail}`);
 }
 function preflightResolve(validate) {
@@ -89,26 +90,26 @@ function preflightResolve(validate) {
     }
 }
 async function handleResolve(ctx) {
-    const nodeId = requireTicketNodeId(ctx);
+    const ticketId = requireInteractionTicketId(ctx);
     const request = requireResolveRequest(ctx);
-    const dir = ticketDir(nodeId);
+    const dir = ticketDir(ticketId);
     requirePageTicket(dir);
-    const productKinds = readConfig('user').page_components;
-    const responses = preflightResolve(() => validatePageTicketResponses(dir, request.responses, productKinds));
-    await resolvePageTicket(nodeId, responses, productKinds);
-    return { status: 200, body: { delivered: true, kind: 'page' } };
+    const responses = preflightResolve(() => validatePageTicketResponses(dir, request.responses));
+    const replyExpected = readTicketReplyRoute(dir) !== null;
+    await resolvePageTicket(ticketId, responses);
+    return { status: 200, body: { completed: true, reply_delivered: replyExpected, kind: 'page' } };
 }
 function hasPublishedTicket(dir) {
     return existsSync(pageManifestPath(dir)) || existsSync(reviewPath(dir)) || readTicketResult(dir) !== null;
 }
 async function handleCancel(ctx) {
-    const nodeId = requireTicketNodeId(ctx);
+    const ticketId = requireInteractionTicketId(ctx);
     const request = ctx.body;
     if (request !== undefined && (typeof request !== 'object' || request === null)) {
         throw new ApiError(400, 'invalid_request', 'ticket cancel body must be an object');
     }
-    const dir = ticketDir(nodeId);
-    const review = getReviewByBridge(nodeId);
+    const dir = ticketDir(ticketId);
+    const review = getReviewByBridge(ticketId);
     try {
         if (review !== null) {
             if (review.state === 'approved') {
@@ -125,12 +126,15 @@ async function handleCancel(ctx) {
         if (!hasPublishedTicket(dir)) {
             throw new ApiError(404, 'ticket_not_found', 'no matching ticket');
         }
-        await cancelHumanTicket(nodeId, request ?? {});
+        await cancelHumanTicket(ticketId, request ?? {});
         return { status: 200, body: { canceled: true } };
     }
     catch (error) {
         if (error instanceof ApiError)
             throw error;
+        if (error instanceof Error && error.message === 'page_has_no_response_lifecycle') {
+            throw new ApiError(409, 'page_has_no_response_lifecycle', 'this page has no response lifecycle');
+        }
         // Review errors are not part of the retained ticket route's vocabulary.
         if (error instanceof ReviewOperationError) {
             throw new ApiError(409, 'ticket_already_resolved', 'ticket already resolved');
@@ -140,6 +144,6 @@ async function handleCancel(ctx) {
 }
 export const humanRoutes = [
     { method: 'POST', pattern: '/v1/human/bridge', handler: handleCreateBridge },
-    { method: 'POST', pattern: '/v1/human/tickets/:node_id/resolve', handler: handleResolve },
-    { method: 'POST', pattern: '/v1/human/tickets/:node_id/cancel', handler: handleCancel },
+    { method: 'POST', pattern: '/v1/human/tickets/:ticket_id/resolve', handler: handleResolve },
+    { method: 'POST', pattern: '/v1/human/tickets/:ticket_id/cancel', handler: handleCancel },
 ];

package/dist/daemon/api/handlers/inbox.d.ts

@@ -1,2 +1,12 @@
+import type { InboxTicketIdDTO } from '../../../api/index.js';
 import type { RouteTable } from '../router.js';
+export interface ResolvedTicket {
+    ticketId: string;
+    dir: string;
+    kind: 'page' | 'review';
+}
+/** Resolve one opaque inbox ticket id to its canonical directory. Shared with
+ * the feedback-comment routes, which address tickets by the same ids. */
+export declare function resolveTicket(ticketId: InboxTicketIdDTO): ResolvedTicket | null;
+export declare function requireTicketId(params: Record<string, string>): InboxTicketIdDTO;
 export declare const inboxRoutes: RouteTable;

package/dist/daemon/api/handlers/inbox.js

@@ -2,18 +2,17 @@
 // v1, inbox-contract.md §A). This public ticket-serving resource enumerates,
 // reads, responds to, and cancels tickets while preserving its product DTOs.
 import { createHash } from 'node:crypto';
-import { existsSync, readFileSync, readdirSync, realpathSync, statSync } from 'node:fs';
-import { basename, resolve, join } from 'node:path';
+import { existsSync, readdirSync, realpathSync, statSync } from 'node:fs';
+import { basename, resolve } from 'node:path';
 import { ApiError } from '../../../api/index.js';
-import { assetRoot } from '../../../core/asset-root.js';
+import { readPageFeedback } from '../../../core/human/feedback.js';
+import { toPageFeedbackDTO } from '../map.js';
 import { pageManifestPath, reviewPath } from '../../../core/human/convention.js';
 import { parsePage } from '../../../core/human/page.js';
-import { renderPageHtml } from '../../../core/human/page-render.js';
 import { ticketsRoot } from '../../../core/human/root.js';
 import { scanInbox, scanPageHistory } from '../../../core/human/scan.js';
 import { readPageTicket, readTicketResult, validatePageTicketResponses, writePageProgress, } from '../../../core/human/tickets.js';
 import { describePageAnswer } from '../../../core/human/answer.js';
-import { readConfig } from '../../../core/config.js';
 import { cancelHumanTicket, resolvePageTicket } from '../../human/finish.js';
 import { filterTerminalReviewTickets } from '../../../core/review/ticket-filter.js';
 const DEFAULT_CANCEL_REASON = 'Canceled from the inbox.';
@@ -25,7 +24,9 @@ const TICKET_ID_PATTERN = /^[a-f0-9]{64}$/;
 function ticketHash(canonicalRoot, ticketBasename) {
     return createHash('sha256').update(`${canonicalRoot}\0${ticketBasename}`, 'utf8').digest('hex');
 }
-function resolveTicket(ticketId) {
+/** Resolve one opaque inbox ticket id to its canonical directory. Shared with
+ * the feedback-comment routes, which address tickets by the same ids. */
+export function resolveTicket(ticketId) {
     let canonicalRoot;
     try {
         canonicalRoot = realpathSync(ticketsRoot());
@@ -56,13 +57,13 @@ function resolveTicket(ticketId) {
         if (resolve(canonicalDir, '..') !== canonicalRoot || basename(canonicalDir) !== entry)
             continue;
         if (existsSync(pageManifestPath(canonicalDir)))
-            return { nodeId: entry, dir: canonicalDir, kind: 'page' };
+            return { ticketId: entry, dir: canonicalDir, kind: 'page' };
         if (existsSync(reviewPath(canonicalDir)))
-            return { nodeId: entry, dir: canonicalDir, kind: 'review' };
+            return { ticketId: entry, dir: canonicalDir, kind: 'review' };
     }
     return null;
 }
-function requireTicketId(params) {
+export function requireTicketId(params) {
     const ticketId = params['ticket_id'];
     if (ticketId === undefined || !TICKET_ID_PATTERN.test(ticketId)) {
         throw new ApiError(400, 'invalid_request', 'invalid ticket id');
@@ -88,10 +89,10 @@ function pageSlotToDTO(slot) {
 }
 function pageManifestToDTO(manifest) {
     const dto = {
-        schema: 'crtr.page/v1',
+        schema: 'crtr.page/v2',
         dialect: manifest.dialect,
         title: manifest.title,
-        placement: manifest.placement,
+        delivery: manifest.delivery,
         document: manifest.document,
         steps: manifest.steps,
         slots: manifest.slots.map(pageSlotToDTO),
@@ -104,8 +105,8 @@ function pageManifestToDTO(manifest) {
             source.sessionName = manifest.source.sessionName;
         if (manifest.source.askedBy !== undefined)
             source.askedBy = manifest.source.askedBy;
-        if (manifest.source.blockedSince !== undefined)
-            source.blockedSince = manifest.source.blockedSince;
+        if (manifest.source.emittedAt !== undefined)
+            source.emittedAt = manifest.source.emittedAt;
         if (manifest.source.profileName !== undefined)
             source.profileName = manifest.source.profileName;
         if (manifest.source.nodeId !== undefined)
@@ -169,8 +170,7 @@ function isSlotValidationError(err) {
 // GET /v1/human/inbox — enumerate
 // ===========================================================================
 function handleList() {
-    const productKinds = readConfig('user').page_components;
-    const allItems = scanInbox(productKinds);
+    const allItems = scanInbox();
     const filtered = filterTerminalReviewTickets(allItems);
     const tickets = filtered.map((item) => {
         if (item.kind === 'page') {
@@ -182,9 +182,10 @@ function handleList() {
                 placement: item.placement,
                 dialect: item.dialect,
                 steps: item.steps,
-                blocked_since: item.blockedSince,
+                emitted_at: item.emittedAt,
                 source: item.source,
                 slot_kinds: item.slotKinds,
+                inbox: item.inbox,
                 awaits_response: item.awaitsResponse,
             };
             if (item.subtitle !== '')
@@ -203,7 +204,8 @@ function handleList() {
         }
         throw new Error(`unknown ticket kind: ${item.kind}`);
     }).sort((a, b) => {
-        const byTime = Date.parse(b.blocked_since) - Date.parse(a.blocked_since);
+        const pageTime = (item) => item.kind === 'page' ? item.emitted_at : item.blocked_since;
+        const byTime = Date.parse(pageTime(b)) - Date.parse(pageTime(a));
         return byTime !== 0 ? byTime : a.ticket_id.localeCompare(b.ticket_id);
     });
     return { status: 200, body: { tickets } };
@@ -216,8 +218,7 @@ function handleHistory(ctx) {
     if (!nodeId || typeof nodeId !== 'string') {
         throw new ApiError(400, 'invalid_request', 'history requires a node_id query param');
     }
-    const productKinds = readConfig('user').page_components;
-    const history = scanPageHistory(nodeId, productKinds);
+    const history = scanPageHistory(nodeId);
     const canonicalRoot = realpathSync(ticketsRoot());
     const tickets = history.map((item) => {
         const ticketId = createHash('sha256').update(`${canonicalRoot}\0${item.id}`, 'utf8').digest('hex');
@@ -228,9 +229,10 @@ function handleHistory(ctx) {
             placement: item.placement,
             dialect: item.dialect,
             steps: item.steps,
-            blocked_since: item.blockedSince,
+            emitted_at: item.emittedAt,
             source: item.source,
             slot_kinds: item.slotKinds,
+            inbox: item.inbox,
             awaits_response: item.awaitsResponse,
             state: item.state,
         };
@@ -253,10 +255,9 @@ function handleGetPage(ctx) {
     if (resolved.kind === 'review') {
         throw new ApiError(409, 'ticket_kind_unsupported', 'review tickets have no page read operation');
     }
-    const productKinds = readConfig('user').page_components;
     let ticket;
     try {
-        ticket = readPageTicket(resolved.dir, productKinds);
+        ticket = readPageTicket(resolved.dir);
     }
     catch (err) {
         throw new ApiError(500, 'internal', 'the ticket could not be read');
@@ -270,9 +271,10 @@ function handleGetPage(ctx) {
             kind: 'page',
             state: ticket.state,
             page: pageManifestToDTO(ticket.manifest),
-            document: ticket.document,
-            document_media_type: ticket.manifest.dialect === 'md' ? 'text/markdown' : 'text/html',
+            document: ticket.manifest.dialect === 'jsx' ? ticket.module : ticket.document,
+            document_media_type: ticket.manifest.dialect === 'jsx' ? 'text/jsx' : 'text/html',
             progress: progressDTO,
+            feedback: toPageFeedbackDTO(readPageFeedback(resolved.dir)),
         },
     };
 }
@@ -288,6 +290,8 @@ async function handleRespond(ctx) {
     if (resolved.kind === 'review') {
         throw new ApiError(409, 'ticket_kind_unsupported', 'review tickets submit through their own path');
     }
+    if (readPageTicket(resolved.dir).state === 'passive')
+        throw new ApiError(409, 'page_has_no_response_lifecycle', 'this page has no response lifecycle');
     const result = readTicketResult(resolved.dir);
     if (result !== null && result.kind !== 'canceled') {
         throw new ApiError(409, 'ticket_already_resolved', 'ticket was already resolved');
@@ -295,9 +299,8 @@ async function handleRespond(ctx) {
     if (result?.kind === 'canceled') {
         throw new ApiError(409, 'ticket_canceled', 'canceled tickets cannot be answered');
     }
-    const productKinds = readConfig('user').page_components;
     try {
-        validatePageTicketResponses(resolved.dir, request.responses, productKinds);
+        validatePageTicketResponses(resolved.dir, request.responses);
     }
     catch (error) {
         if (isSlotValidationError(error)) {
@@ -306,8 +309,8 @@ async function handleRespond(ctx) {
         throw new ApiError(500, 'internal', 'validation failed');
     }
     try {
-        // The shared completion path: it publishes the result and wakes the asking node.
-        const completed = await resolvePageTicket(resolved.nodeId, request.responses, productKinds);
+        // The shared completion path publishes the result and follows the ticket's optional reply route.
+        const completed = await resolvePageTicket(resolved.ticketId, request.responses);
         if (completed.kind !== 'page') {
             throw new ApiError(409, 'ticket_kind_mismatch', 'unexpected result kind');
         }
@@ -334,13 +337,14 @@ function handleProgress(ctx) {
     if (resolved.kind === 'review') {
         throw new ApiError(409, 'ticket_kind_unsupported', 'review tickets do not support progress autosave');
     }
+    if (readPageTicket(resolved.dir).state === 'passive')
+        throw new ApiError(409, 'page_has_no_response_lifecycle', 'this page has no response lifecycle');
     const result = readTicketResult(resolved.dir);
     if (result !== null && result.kind !== 'canceled') {
         throw new ApiError(409, 'ticket_already_resolved', 'ticket was already resolved');
     }
-    const productKinds = readConfig('user').page_components;
     try {
-        writePageProgress(resolved.dir, request.responses, productKinds);
+        writePageProgress(resolved.dir, request.responses);
         return { status: 200, body: {} };
     }
     catch (error) {
@@ -362,8 +366,10 @@ async function handleCancel(ctx) {
     if (resolved.kind === 'review') {
         throw new ApiError(409, 'ticket_kind_unsupported', 'review tickets have their own cancel path');
     }
+    if (readPageTicket(resolved.dir).state === 'passive')
+        throw new ApiError(409, 'page_has_no_response_lifecycle', 'this page has no response lifecycle');
     try {
-        const result = await cancelHumanTicket(resolved.nodeId, {
+        const result = await cancelHumanTicket(resolved.ticketId, {
             reason: request.reason ?? DEFAULT_CANCEL_REASON,
             actor: 'human',
         });
@@ -398,100 +404,18 @@ function handleGetResponse(ctx) {
     if (result.kind !== 'page') {
         throw new ApiError(409, 'ticket_kind_mismatch', 'unexpected result kind');
     }
-    const productKinds = readConfig('user').page_components;
     try {
-        const manifest = parsePage(resolved.dir, productKinds);
-        return { status: 200, body: { ...result, answer: describePageAnswer(manifest, result.responses, { completedAt: result.completedAt, productKinds }) } };
+        const manifest = parsePage(resolved.dir);
+        return { status: 200, body: { ...result, answer: describePageAnswer(manifest, result.responses, { completedAt: result.completedAt }) } };
     }
     catch {
         throw new ApiError(500, 'internal', 'the ticket answer could not be read');
     }
 }
-// ===========================================================================
-// GET /v1/human/inbox/:ticket_id/render — the page's HTML payload
-// ===========================================================================
-function handleRenderPage(ctx) {
-    const ticketId = requireTicketId(ctx.params);
-    const resolved = resolveTicket(ticketId);
-    if (resolved === null)
-        throw new ApiError(404, 'ticket_not_found', 'no matching ticket');
-    if (resolved.kind === 'review') {
-        throw new ApiError(409, 'ticket_kind_unsupported', 'review tickets have no page render operation');
-    }
-    const productKinds = readConfig('user').page_components;
-    // Addressable for pending, resolved, and canceled tickets alike — the same
-    // read rule as the detail route: a page stays readable after it resolves.
-    let ticket;
-    try {
-        ticket = readPageTicket(resolved.dir, productKinds);
-    }
-    catch {
-        throw new ApiError(500, 'internal', 'the ticket could not be read');
-    }
-    try {
-        return { status: 200, body: { html: renderPageHtml(ticket.manifest, ticket.document, productKinds) } };
-    }
-    catch {
-        throw new ApiError(500, 'internal', 'the page could not be rendered');
-    }
-}
-// ===========================================================================
-// GET /v1/human/pages/bundle.js|.css — the page runtime assets
-// ===========================================================================
-const BUNDLE_MEDIA_TYPES = {
-    'bundle.js': 'text/javascript; charset=utf-8',
-    'bundle.css': 'text/css; charset=utf-8',
-};
-const bundleCache = new Map();
-/** Read one built bundle asset, reusing the cached bytes while the file on disk
- *  is unchanged. A runtime generation swap changes mtime, so the next request
- *  re-reads and re-hashes. */
-function readBundleAsset(name) {
-    let path;
-    let stat;
-    try {
-        path = join(assetRoot(), 'pages', name);
-        stat = statSync(path);
-    }
-    catch {
-        throw new ApiError(500, 'page_bundle_unavailable', `${name} is not present in this runtime generation; the page runtime is built by \`npm run build\``);
-    }
-    const cached = bundleCache.get(name);
-    if (cached !== undefined && cached.mtimeMs === stat.mtimeMs && cached.size === stat.size)
-        return cached;
-    const bytes = readFileSync(path);
-    const asset = {
-        mtimeMs: stat.mtimeMs,
-        size: stat.size,
-        bytes,
-        etag: `"${createHash('sha256').update(bytes).digest('hex').slice(0, 32)}"`,
-    };
-    bundleCache.set(name, asset);
-    return asset;
-}
-function etagMatches(header, etag) {
-    if (header === undefined)
-        return false;
-    return header.split(',').map((candidate) => candidate.trim()).some((candidate) => candidate === '*' || candidate === etag || candidate === `W/${etag}`);
-}
-function handleBundleAsset(name) {
-    return (ctx) => {
-        const asset = readBundleAsset(name);
-        const headers = { etag: asset.etag, 'cache-control': 'no-cache' };
-        const ifNoneMatch = ctx.req.headers['if-none-match'];
-        if (etagMatches(Array.isArray(ifNoneMatch) ? ifNoneMatch.join(',') : ifNoneMatch, asset.etag)) {
-            return { status: 304, headers };
-        }
-        return { status: 200, rawBody: asset.bytes, headers: { ...headers, 'content-type': BUNDLE_MEDIA_TYPES[name] } };
-    };
-}
 export const inboxRoutes = [
-    { method: 'GET', pattern: '/v1/human/pages/bundle.js', handler: handleBundleAsset('bundle.js') },
-    { method: 'GET', pattern: '/v1/human/pages/bundle.css', handler: handleBundleAsset('bundle.css') },
     { method: 'GET', pattern: '/v1/human/inbox', handler: handleList },
     { method: 'GET', pattern: '/v1/human/inbox/history', handler: handleHistory },
     { method: 'GET', pattern: '/v1/human/inbox/:ticket_id', handler: handleGetPage },
-    { method: 'GET', pattern: '/v1/human/inbox/:ticket_id/render', handler: handleRenderPage },
     { method: 'GET', pattern: '/v1/human/inbox/:ticket_id/response', handler: handleGetResponse },
     { method: 'POST', pattern: '/v1/human/inbox/:ticket_id/respond', handler: handleRespond },
     { method: 'POST', pattern: '/v1/human/inbox/:ticket_id/progress', handler: handleProgress },

package/dist/daemon/api/handlers/profiles.js

@@ -1,17 +1,13 @@
-// Profile handlers (spec §6.6). Server-side for remote/Core (P2) consumers; the
-// local `crtr profile *` verbs stay fs-local (they never open canvas.db, so the
-// exit criterion is untouched by their staying local). The profile store is a
-// deliberately multi-writer fs store serialized by `withProfileManifestLock`
-// (spec §12), so crtrd installing a profile here coexists with the CLI verbs.
+// Profile handlers (spec §6.6). Manifest-only operations share the locked
+// profile filesystem store. Deletion crosses canvas, cron, inbox, review, and
+// broker state, so it is one daemon-owned lifecycle operation.
 //
 //   PUT    /v1/profiles/:name    idempotent ensure (create-or-return)
 //   GET    /v1/profiles          list all profiles
 //   GET    /v1/profiles/:name    resolve one profile by name or id
-//   DELETE /v1/profiles/:name    idempotent delete (missing → 204)
-//
-// The primitive is unchanged — the caller is relocated into crtrd (spec §4.3).
-import { CrtrError } from '../../../core/errors.js';
-import { createProfile, deleteProfile, ensureRootProfile, listProfiles, loadProfileManifest, } from '../../../core/profiles/manifest.js';
+//   DELETE /v1/profiles/:name    required-force cascade or detach
+import { createProfile, ensureRootProfile, listProfiles, loadProfileManifest, } from '../../../core/profiles/manifest.js';
+import { requestProfileDeletion } from '../../profile-delete.js';
 import { toProfileDTO } from '../map.js';
 const ROOT_PROFILE_NAME = 'root';
 /** `PUT /v1/profiles/:name` — idempotent ensure. `root` maps to the singleton
@@ -41,25 +37,11 @@ function handleGet(ctx) {
     const name = ctx.params['name'];
     return { status: 200, body: toProfileDTO(loadProfileManifest(name)) };
 }
-/** `DELETE /v1/profiles/:name` — idempotent delete by exact id or unique name.
- *  A miss is success (204): the caller's goal — the profile is gone — already
- *  holds, so reconcile/retry loops (e.g. Core's applet-delete leg) are safe to
- *  re-run. An ambiguous name still throws `ambiguous` (→ 400): with several
- *  same-named profiles there is no safe pick, and the state is NOT "already
- *  deleted". */
-function handleDelete(ctx) {
-    const name = ctx.params['name'];
-    let profileId;
-    try {
-        ({ profileId } = loadProfileManifest(name));
-    }
-    catch (err) {
-        if (err instanceof CrtrError && err.code === 'not_found')
-            return { status: 204 };
-        throw err;
-    }
-    deleteProfile(profileId);
-    return { status: 204 };
+/** `DELETE /v1/profiles/:name` — forced cascade by default, or forced
+ *  identity detach when requested. Exact resolution, blockers, counts, broker
+ *  teardown, and final manifest removal all live in the daemon lifecycle. */
+async function handleDelete(ctx) {
+    return requestProfileDeletion(ctx.params['name'], ctx.body);
 }
 export const profileRoutes = [
     { method: 'PUT', pattern: '/v1/profiles/:name', handler: handleEnsure },

package/dist/daemon/api/map.d.ts

@@ -5,7 +5,8 @@ import type { ProfileEntry } from '../../core/profiles/manifest.js';
 import type { ReviveResult } from '../../core/runtime/revive.js';
 import type { CloseNodeResult } from '../../core/runtime/close.js';
 import { type PushResult } from '../../core/feed/feed.js';
-import type { CloseResultDTO, CronDTO, CronRunDTO, ErrorBody, NodeEdgesDTO, NodePathsDTO, NodeStatusDTO, NodeSummaryDTO, NodeDetailDTO, NodeWorktreeDTO, ProfileDTO, ReviewCommentDTO, ReviewCommentEventDTO, ReviewDTO, FeedbackResultDTO, PushReportResultDTO, ReviveResultDTO, SubscriptionDTO } from '../../api/index.js';
+import type { PageFeedback, PageFeedbackComment } from '../../core/human/feedback.js';
+import type { CloseResultDTO, CronDTO, CronRunDTO, ErrorBody, NodeEdgesDTO, NodePathsDTO, NodeStatusDTO, NodeSummaryDTO, NodeDetailDTO, NodeWorktreeDTO, ProfileDTO, ReviewCommentDTO, ReviewCommentEventDTO, ReviewDTO, FeedbackResultDTO, PageFeedbackCommentDTO, PageFeedbackDTO, PushReportResultDTO, ReviveResultDTO, SubscriptionDTO } from '../../api/index.js';
 /** Project the queryable row (what `listNodes` yields) into a summary DTO. */
 export declare function toNodeSummaryDTO(row: NodeRow): NodeSummaryDTO;
 /** The subscription/child edges a detail projection needs. The handler gathers
@@ -70,6 +71,10 @@ export interface ReviewDTOExtras {
 export declare function toReviewDTO(row: ReviewRecord, extras?: ReviewDTOExtras): ReviewDTO;
 /** Project one daemon-owned comment, omitting absent node identities on human actions. */
 export declare function toReviewCommentDTO(comment: ReviewComment): ReviewCommentDTO;
+/** Project one ticket-attached page feedback comment. */
+export declare function toPageFeedbackCommentDTO(comment: PageFeedbackComment): PageFeedbackCommentDTO;
+/** Project one ticket's page feedback state. */
+export declare function toPageFeedbackDTO(feedback: PageFeedback): PageFeedbackDTO;
 /** Project one immutable review-comment audit event. */
 export declare function toReviewCommentEventDTO(event: ReviewCommentEvent): ReviewCommentEventDTO;
 /** Project the immutable snake_case review result to the existing camelCase feedback wire shape. */

package/dist/daemon/api/map.js

@@ -81,6 +81,8 @@ export function toNodeWorktreeDTO(w) {
         base_sha: w.base_sha,
         created: w.created,
     };
+    if (w.cleanup !== undefined)
+        dto.cleanup = w.cleanup;
     if (w.closed !== undefined)
         dto.closed = w.closed;
     return dto;
@@ -130,6 +132,7 @@ export function toNodeDetailDTO(meta, edges) {
         dto.review_binding = meta.review_binding === null
             ? null
             : {
+                ...(meta.review_binding.kind === undefined ? {} : { kind: meta.review_binding.kind }),
                 review_id: meta.review_binding.review_id,
                 origin_node_id: meta.review_binding.origin_node_id,
                 branch_file: meta.review_binding.branch_file,
@@ -331,6 +334,26 @@ export function toReviewCommentDTO(comment) {
         created_seq: comment.created_seq,
     };
 }
+/** Project one ticket-attached page feedback comment. */
+export function toPageFeedbackCommentDTO(comment) {
+    return {
+        id: comment.id,
+        quote: comment.quote,
+        ...(comment.context === undefined ? {} : { context: comment.context }),
+        note: comment.note,
+        status: comment.status,
+        created_at: comment.createdAt,
+        ...(comment.resolvedAt === undefined ? {} : { resolved_at: comment.resolvedAt }),
+    };
+}
+/** Project one ticket's page feedback state. */
+export function toPageFeedbackDTO(feedback) {
+    return {
+        companion_node_id: feedback.companionNodeId ?? null,
+        open_count: feedback.comments.filter((comment) => comment.status === 'open').length,
+        comments: feedback.comments.map(toPageFeedbackCommentDTO),
+    };
+}
 /** Project one immutable review-comment audit event. */
 export function toReviewCommentEventDTO(event) {
     return {

package/dist/daemon/api/server.js

@@ -28,6 +28,7 @@ import { focusRoutes } from './handlers/focus.js';
 import { healthRoutes } from './handlers/health.js';
 import { humanRoutes } from './handlers/human.js';
 import { inboxRoutes } from './handlers/inbox.js';
+import { feedbackCommentRoutes } from './handlers/feedback-comments.js';
 import { memoryRoutes } from './handlers/memory.js';
 import { messageRoutes } from './handlers/messages.js';
 import { modelAuthRoutes } from './handlers/modelauth.js';
@@ -64,7 +65,8 @@ function buildRouter() {
         .registerAll(humanRoutes)
         .registerAll(reviewRoutes)
         .registerAll(reviewCommentRoutes)
-        .registerAll(inboxRoutes);
+        .registerAll(inboxRoutes)
+        .registerAll(feedbackCommentRoutes);
 }
 /** Is this request an attach upgrade — `GET /v1/nodes/{id}/attach` — and if so,
  *  what is `{id}`? Returns null for any non-attach path (the caller destroys the

package/dist/daemon/companion-retire.d.ts

@@ -0,0 +1,2 @@
+/** Retire a companion only through a lifecycle transition legal for its current status. */
+export declare function retireCompanion(nodeId: string, outcome: 'approved' | 'canceled'): 'retired' | 'already' | 'missing';

package/dist/daemon/companion-retire.js

@@ -0,0 +1,33 @@
+// Companion retirement — the one lifecycle exit shared by human-review and
+// page-feedback companions. Lives outside review/finish.ts so human/finish.ts
+// can retire a feedback companion without importing the review finisher (which
+// itself imports human/finish.ts).
+import { getNode } from '../core/canvas/canvas.js';
+import { transition } from '../core/runtime/lifecycle.js';
+import { headlessBrokerHost } from '../core/runtime/host.js';
+/** Retire a companion only through a lifecycle transition legal for its current status. */
+export function retireCompanion(nodeId, outcome) {
+    const node = getNode(nodeId);
+    if (node === null)
+        return 'missing';
+    if (node.status === 'done' || node.status === 'canceled')
+        return 'already';
+    if (outcome === 'approved' && (node.status === 'active' || node.status === 'idle')) {
+        transition(nodeId, 'finish');
+        try {
+            headlessBrokerHost.teardown(nodeId);
+        }
+        catch { /* the terminal transition is authoritative */ }
+        return 'retired';
+    }
+    // Cancellation is legal from every status. An already-dead companion cannot
+    // be finished, so it is retired as canceled even when approval won.
+    transition(nodeId, 'cancel');
+    if (node.status === 'active' || node.status === 'idle') {
+        try {
+            headlessBrokerHost.teardown(nodeId);
+        }
+        catch { /* the terminal transition is authoritative */ }
+    }
+    return 'retired';
+}