@north-light/crouter 0.3.223 → 0.3.224

package/dist/core/__tests__/preview-mirror-cap.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/core/__tests__/preview-mirror-cap.test.js

@@ -0,0 +1,37 @@
+// Regression: the preview mirror is bounded. A `crtr integration run` in a
+// canvas bash call once mirrored a 3 MB CRM dump into ToolResult.details via
+// this channel — bypassing pi's 50 KB stdout truncation entirely — and five
+// such calls made a 16 MB transcript that Northlight could no longer open.
+// The writer is the one choke point, so the writer is what this pins.
+import { strict as assert } from 'node:assert';
+import { existsSync, mkdtempSync, readFileSync, rmSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { after, test } from 'node:test';
+import { beginPreview, publishPreviewResult, PREVIEW_RESULT_MAX_BYTES } from '../io.js';
+import { PREVIEW_RESULT_PATH_ENV } from '../preview-result-path.js';
+const dir = mkdtempSync(join(tmpdir(), 'crtr-preview-cap-'));
+const priorEnv = process.env[PREVIEW_RESULT_PATH_ENV];
+after(() => {
+    rmSync(dir, { recursive: true, force: true });
+    if (priorEnv === undefined)
+        delete process.env[PREVIEW_RESULT_PATH_ENV];
+    else
+        process.env[PREVIEW_RESULT_PATH_ENV] = priorEnv;
+});
+test('a record over PREVIEW_RESULT_MAX_BYTES is dropped, not mirrored', () => {
+    const resultPath = join(dir, 'oversized.json');
+    process.env[PREVIEW_RESULT_PATH_ENV] = resultPath;
+    beginPreview('integration run');
+    publishPreviewResult({ ok: true, output: 'x'.repeat(PREVIEW_RESULT_MAX_BYTES) });
+    assert.equal(existsSync(resultPath), false);
+});
+test('a bounded record still mirrors verbatim', () => {
+    const resultPath = join(dir, 'bounded.json');
+    process.env[PREVIEW_RESULT_PATH_ENV] = resultPath;
+    beginPreview('integration run');
+    publishPreviewResult({ ok: true, output: 'small' });
+    const record = JSON.parse(readFileSync(resultPath, 'utf8'));
+    assert.equal(record.path, 'integration run');
+    assert.equal(record.result.output, 'small');
+});

package/dist/core/io.d.ts

@@ -10,6 +10,15 @@ export interface CrtrPreviewRecord {
     jsonl?: Record<string, unknown>[];
     error?: ErrorPayload;
 }
+/** A preview is bounded UI metadata, never a bulk-data channel. One
+ * `crtr integration run` once mirrored a 3 MB CRM dump into every copy of the
+ * transcript that contains its tool result — the session file, every replay
+ * frame, and the host product's stored conversation — because pi's 50 KB
+ * stdout truncation never sees this channel. The mirror write is the one
+ * choke point every record passes, so the bound lives here: an oversized
+ * record is dropped, and the viewer falls back to rendering the agent-facing
+ * stdout text, which pi bounds itself. */
+export declare const PREVIEW_RESULT_MAX_BYTES: number;
 /** Begin collecting the current leaf's structured response, if its caller
  * supplied the private per-tool-call result path. */
 export declare function beginPreview(path: string): void;

package/dist/core/io.js

@@ -14,6 +14,15 @@ import { ApiError } from '../api/index.js';
 // ---------------------------------------------------------------------------
 let jsonOutput = false;
 let preview;
+/** A preview is bounded UI metadata, never a bulk-data channel. One
+ * `crtr integration run` once mirrored a 3 MB CRM dump into every copy of the
+ * transcript that contains its tool result — the session file, every replay
+ * frame, and the host product's stored conversation — because pi's 50 KB
+ * stdout truncation never sees this channel. The mirror write is the one
+ * choke point every record passes, so the bound lives here: an oversized
+ * record is dropped, and the viewer falls back to rendering the agent-facing
+ * stdout text, which pi bounds itself. */
+export const PREVIEW_RESULT_MAX_BYTES = 256 * 1024;
 /** Begin collecting the current leaf's structured response, if its caller
  * supplied the private per-tool-call result path. */
 export function beginPreview(path) {
@@ -24,9 +33,12 @@ function publishPreview(record) {
     const resultPath = process.env[PREVIEW_RESULT_PATH_ENV];
     if (resultPath === undefined || resultPath === '')
         return;
+    const line = `${JSON.stringify({ path: preview?.path ?? '', ...record })}\n`;
+    if (Buffer.byteLength(line, 'utf8') > PREVIEW_RESULT_MAX_BYTES)
+        return;
     const tempPath = `${resultPath}.${process.pid}.tmp`;
     try {
-        writeFileSync(tempPath, `${JSON.stringify({ path: preview?.path ?? '', ...record })}\n`, 'utf8');
+        writeFileSync(tempPath, line, 'utf8');
         renameSync(tempPath, resultPath);
     }
     catch {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.223",
+  "version": "0.3.224",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.223",
+  "version": "0.3.224",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/crouter",
-      "version": "0.3.223",
+      "version": "0.3.224",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {