@north-light/crouter 0.3.308 → 0.3.310

package/dist/pi-extensions/canvas-doc-substrate.js

@@ -19,7 +19,7 @@ import { homedir } from 'node:os';
 import { join, resolve } from 'node:path';
 import { brokerExtensionState } from '../core/runtime/broker/daemon-ops.js';
 import { renderPreferencesFromState } from '../core/runtime/broker-extension-render.js';
-import { corpusHasPreCommandSurfaces, demotePreCommandExposures, renderOnCommandDocsForSubject, renderOnReadDocsForSubject, renderPreCommandDocsForSubject, } from '../core/substrate/on-read.js';
+import { corpusHasCommandSurfaceForCommand, corpusHasPreCommandSurfaceForCommand, demotePreCommandExposures, renderOnCommandDocsForSubject, renderOnReadDocsForSubject, renderPreCommandDocsForSubject, } from '../core/substrate/on-read.js';
 import { clearSessionCache } from '../core/substrate/session-cache.js';
 import { cloneContextExposureState, exposureTarget, freezePreferenceSnapshot, loadContextExposureState, mergeContextExposureState, replaceContextExposureState, saveContextExposureState, sharedContextExposureState, } from '../core/substrate/injected-store.js';
 import { autoLoadedContextInner, mergeAutoLoadedContext } from './envelope-merge.js';
@@ -110,12 +110,13 @@ export function registerCanvasDocSubstrate(pi) {
         const command = bashCommandOf(event.input);
         if (command === null)
             return;
-        // The common case is a corpus with no pre-command doc at all, and it must
-        // cost nothing — short-circuit before the daemon round-trip below.
-        if (!corpusHasPreCommandSurfaces())
-            return;
         if (blockedThisTurn)
             return { block: true, reason: HELD_SIBLING_REASON };
+        // Match the parsed command before resolving daemon-owned node config. Gates
+        // remain intentionally conservative here: a matching gated entry still
+        // resolves its subject and cannot fail open.
+        if (!corpusHasPreCommandSurfaceForCommand(command))
+            return;
         const state = await brokerExtensionState(nodeId);
         mergeContextExposureState(contextExposure, loadContextExposureState(nodeId));
         const next = cloneContextExposureState(contextExposure);
@@ -152,6 +153,11 @@ export function registerCanvasDocSubstrate(pi) {
         else {
             return;
         }
+        // A successful bash call only needs daemon-owned node config when its
+        // parsed command could match a post-command surface. Gates are deliberately
+        // ignored by this prefilter so a matching safety gate cannot fail open.
+        if (command !== null && !corpusHasCommandSurfaceForCommand(command))
+            return;
         const state = await brokerExtensionState(nodeId);
         mergeContextExposureState(contextExposure, loadContextExposureState(nodeId));
         const next = cloneContextExposureState(contextExposure);

package/dist/shared/generated-context.d.ts

@@ -69,5 +69,7 @@ export declare function formatCard(kind: string, facts: Record<string, string |
 export declare function formatDataCard(kind: string, facts: Record<string, string | number | boolean | undefined>, body: string): string;
 /** Parse a runtime envelope, with pre-envelope customType compatibility. */
 export declare function parseCard(message: GeneratedContextMessageLike): GeneratedCard | null;
+/** Explain how an inbox entry's ref is read without guessing its filesystem location. */
+export declare function formatInboxRefInstruction(ref: string): string;
 /** Format a complete inbox card from report bodies resolved by the caller. */
 export declare function formatInboxCard(sections: readonly InboxCardSection[]): string;

package/dist/shared/generated-context.js

@@ -205,6 +205,12 @@ export function parseCard(message) {
         senders: [],
     };
 }
+/** Explain how an inbox entry's ref is read without guessing its filesystem location. */
+export function formatInboxRefInstruction(ref) {
+    return ref.startsWith('/')
+        ? `Preview only. Read the full body from file \`${ref}\`.`
+        : `Read this report with \`crtr canvas history read ${ref}\`.`;
+}
 /** Format a complete inbox card from report bodies resolved by the caller. */
 export function formatInboxCard(sections) {
     const body = sections.map((section) => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.308",
+  "version": "0.3.310",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.308",
+  "version": "0.3.310",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/crouter",
-      "version": "0.3.308",
+      "version": "0.3.310",
       "hasInstallScript": true,
       "license": "MIT",
       "workspaces": [
@@ -5206,17 +5206,17 @@
     },
     "packages/crouter-api": {
       "name": "@north-light/crouter-api",
-      "version": "0.3.308",
+      "version": "0.3.310",
       "license": "UNLICENSED"
     },
     "packages/crouter-env-docker": {
       "name": "@north-light/crouter-env-docker",
-      "version": "0.3.308",
+      "version": "0.3.310",
       "license": "UNLICENSED"
     },
     "packages/crouter-sdk": {
       "name": "@north-light/crouter-sdk",
-      "version": "0.3.308",
+      "version": "0.3.310",
       "license": "UNLICENSED",
       "dependencies": {
         "@north-light/crouter-api": "^0.3.295"