@north-light/crouter 0.3.317 → 0.3.319

package/dist/core/profiles/manifest.js

@@ -1,574 +1 @@
-// The profile store: `~/.crouter/profiles/<slug>-<id>/` — a manifest
-// (`profile.json`) naming N project directories, plus the profile's own
-// `memory/` store (spec §2.1). This module is the SOLE place that resolves a
-// profile id/name to a path and writes/mutates a manifest: every join against
-// the canonical profiles root goes through the id-shape + containment checks
-// here, so no caller ever passes a raw CLI operand or `CRTR_PROFILE_ID`
-// straight into `join(profilesRoot(), value)`.
-import { randomUUID } from 'node:crypto';
-import { existsSync, realpathSync, rmSync, statSync, } from 'node:fs';
-import { join, relative, resolve as resolvePath, sep } from 'node:path';
-import { SCHEMA_VERSION, PROFILE_DIR } from '../../types.js';
-import { PROFILE_PROJECT_MEMORY_VALUES } from '../../api/dto/profiles.js';
-import { userScopeRoot, resetScopeCache } from '../scope.js';
-import { ensureDir, nowIso } from '../fs-utils.js';
-import { deleteStoredProfile, getStoredProfile, insertStoredProfile, listStoredProfiles, updateStoredProfile } from '../scoped-state/profiles.js';
-import { usage, notFound, ambiguous, general } from '../errors.js';
-import { withExclusiveDirectoryLock } from '../exclusive-lock.js';
-import { fuzzyMatchProfile } from './fuzzy-match.js';
-// Path safety — the only code in the tree that builds a path under the
-// profiles root. Every other module reaches profile paths through this file.
-/** `<slug>-<shortid>`: slug is lower-case, non-alphanumeric collapsed to `-`,
- *  trimmed to 40 chars (defaulting to `profile`); shortid is 8 lowercase hex
- *  chars. The char class alone rules out `/`, `\`, `.`, and `..` segments —
- *  this is the "generated id shape" check every exact-id lookup requires. */
-const ID_SHAPE = /^[a-z0-9]+(?:-[a-z0-9]+)*-[0-9a-f]{8}$/;
-export const ROOT_PROFILE_ID = 'root-00000000';
-const ROOT_PROFILE_NAME = 'root';
-function scaffoldProfile(profileId, _manifest) {
-    const root = profileRoot(profileId);
-    ensureDir(root);
-    ensureDir(join(root, 'memory'));
-}
-export function profilesRoot() {
-    return join(userScopeRoot(), PROFILE_DIR);
-}
-function assertSafeProfileId(profileId) {
-    if (!ID_SHAPE.test(profileId)) {
-        throw usage(`invalid profile id: ${profileId}`, {
-            received: profileId,
-            next: 'Profile ids look like <slug>-<8-hex-chars> (as printed by `crtr profile new`). Pass an exact id or a profile name, not a raw path.',
-        });
-    }
-}
-/** Before any read/write/lock/delete: the resolved target must live INSIDE
- *  the canonical profiles root, even after symlink resolution. Every caller
- *  below reaches this only via `profileRoot`, which already ran
- *  `assertSafeProfileId` first — this is defense-in-depth, not the primary
- *  guard, and is what makes an unexpected symlink under a profile dir inert. */
-function assertInsideProfilesRoot(path) {
-    const root = profilesRoot();
-    const absRoot = resolvePath(root);
-    const resolvedRoot = existsSync(root) ? realpathSync(root) : absRoot;
-    const resolvedPath = existsSync(path)
-        ? realpathSync(path)
-        : resolvePath(resolvedRoot, relative(absRoot, resolvePath(path)));
-    if (resolvedPath !== resolvedRoot && !resolvedPath.startsWith(resolvedRoot + sep)) {
-        throw usage(`profile path escapes the profiles root: ${path}`);
-    }
-}
-export function profileRoot(profileId) {
-    assertSafeProfileId(profileId);
-    const root = join(profilesRoot(), profileId);
-    assertInsideProfilesRoot(root);
-    return root;
-}
-export function profileManifestPath(profileId) {
-    return join(profileRoot(profileId), 'profile.json');
-}
-export function profileMemoryDir(profileId) {
-    return join(profileRoot(profileId), 'memory');
-}
-// Enumeration + resolution — the ONLY functions that turn a CLI operand into
-// a profile id. Both walk immediate children of the canonical root; neither
-// ever joins an unvalidated operand into a path.
-/** A profile's `home` DEFAULTS to its first project dir. Normalizing here (the
- *  single read path) rather than at write time means a manifest written before
- *  homes existed, and one whose explicit home was later removed from purview,
- *  both still answer with a usable home — no migration pass.
- *
- *  The root profile is the exception and never takes the default: it is the
- *  identity a directory nothing covers falls back to, so its nodes belong where
- *  the user started them, not in whatever dir was last added to its purview. */
-function normalizeHome(profileId, manifest) {
-    const stored = typeof manifest.home === 'string' && manifest.home !== '' ? manifest.home : null;
-    return { ...manifest, home: profileId === ROOT_PROFILE_ID ? stored : stored ?? manifest.projects[0]?.path ?? null, paused_at: typeof manifest.paused_at === 'string' && manifest.paused_at !== '' ? manifest.paused_at : null };
-}
-export function assertProfileProjects(entries) {
-    const memories = PROFILE_PROJECT_MEMORY_VALUES.join(', ');
-    if (!Array.isArray(entries))
-        throw usage('projects must be an array of {path, memory} objects', { received: typeof entries, field: 'projects', next: `Pass entries like {"path": "/abs/dir", "memory": "content"} — memory is one of: ${memories}.` });
-    for (const entry of entries) {
-        if (typeof entry !== 'object' || entry === null || Array.isArray(entry))
-            throw usage(`invalid project entry: ${JSON.stringify(entry)}`, { field: 'projects', next: 'Every project is an object like {"path": "/abs/dir", "memory": "content"}.' });
-        const { path, memory } = entry;
-        if (typeof path !== 'string' || path.trim() === '')
-            throw usage(`project entry has no path: ${JSON.stringify(entry)}`, { field: 'projects', next: 'Give every project entry a non-empty directory path.' });
-        if (typeof memory !== 'string' || !PROFILE_PROJECT_MEMORY_VALUES.includes(memory))
-            throw usage(`invalid project memory value: ${JSON.stringify(memory)}`, { received: String(memory), field: 'projects', next: `Set memory on ${path} to one of: ${memories}.` });
-    }
-}
-export function profileHome(profileId) {
-    if (profileId === null || profileId === '')
-        return null;
-    try {
-        const home = loadProfileManifest(profileId).manifest.home;
-        return home !== null && existsSync(home) && statSync(home).isDirectory() ? home : null;
-    }
-    catch {
-        return null;
-    }
-}
-function enumerateProfiles() { return { entries: listStoredProfiles(userScopeRoot()).map(({ profileId, manifest }) => ({ profileId, manifest: normalizeHome(profileId, manifest) })), unreadableIds: [] }; }
-export function listProfiles() { return enumerateProfiles().entries; }
-export function lookupProfile(profileIdOrName) { const entries = listProfiles(); const exact = findExactProfile(entries, profileIdOrName); return exact ? { kind: 'resolved', entry: exact } : { kind: 'absent' }; }
-// Three resolvers, in descending tolerance. `resolveProfileOperand` is what a
-// command leaf calls for a value the USER TYPED: exact id, exact name, then a
-// fuzzy fallback. `loadProfileManifest` is the strict middle — exact id or
-// exact name, no guessing — and is what every runtime consumer holding a
-// stored `profile_id` or `CRTR_PROFILE_ID` calls. `loadExactProfileManifest`
-// skips name matching entirely, for persistence gates already holding a
-// resolved durable identity. All three check the id shape against the
-// actually-enumerated dirs rather than joining a raw operand onto the root, so
-// no caller can traverse out of the profiles root.
-/** Read one exact profile id without falling back to manifest-name matching.
- * Used at persistence gates that already hold a resolved durable identity. */
-export function loadExactProfileManifest(profileId) {
-    assertSafeProfileId(profileId);
-    const stored = getStoredProfile(userScopeRoot(), profileId);
-    if (stored !== null)
-        return { profileId, manifest: normalizeHome(profileId, stored.manifest) };
-    throw notFound(`profile not found: ${profileId}`, { received: profileId, next: 'Run `crtr profile list` to see available profiles.' });
-}
-/** Exact resolution only: the generated id, else a unique manifest `name`.
- *  Returns `null` when nothing matches exactly; still THROWS when a name is
- *  shared by several profiles, because that is a real collision the caller
- *  cannot resolve by guessing (and fuzzy matching would only guess harder). */
-function findExactProfile(all, profileIdOrName) {
-    if (ID_SHAPE.test(profileIdOrName)) {
-        const byId = all.find((p) => p.profileId === profileIdOrName);
-        if (byId !== undefined)
-            return byId;
-    }
-    const byName = all.filter((p) => p.manifest.name === profileIdOrName);
-    if (byName.length === 1)
-        return byName[0];
-    if (byName.length > 1) {
-        const ids = byName.map((p) => p.profileId);
-        throw ambiguous(`profile name "${profileIdOrName}" matches ${ids.length} profiles: ${ids.join(', ')}`, {
-            received: profileIdOrName,
-            candidates: ids,
-            next: `Re-run with one exact profile id: ${ids.join(', ')}.`,
-        });
-    }
-    return null;
-}
-/** Name the actual value set in the failure: a caller that guessed an id or a
- *  stale name can correct itself from this error alone, without a lookup hop. */
-function profileNotFound(all, profileIdOrName) {
-    const available = all.map((p) => `${p.profileId} (${p.manifest.name})`);
-    return notFound(`profile not found: ${profileIdOrName}`, {
-        received: profileIdOrName,
-        available,
-        next: available.length > 0
-            ? `Re-run with one of the profiles on this host: ${available.join(', ')} — or create one with \`crtr profile new --name <name>\`.`
-            : 'No profiles exist on this host yet — create one with `crtr profile new --name <name>`.',
-    });
-}
-export function loadProfileManifest(profileIdOrName) {
-    const lookup = lookupProfile(profileIdOrName);
-    if (lookup.kind === 'resolved')
-        return lookup.entry;
-    // Unreadable and absent both answer not-found here: this is the tolerant
-    // resolver every runtime consumer already handles that way. A caller that
-    // must NOT substitute another identity calls `lookupProfile` directly.
-    throw profileNotFound(listProfiles(), profileIdOrName);
-}
-/** Resolve a profile the USER TYPED — a `--profile` flag or a `<profile>`
- *  operand. Exact id or name wins outright; only when nothing matches exactly
- *  does this fall back to fuzzy matching on name and id slug, so a typed
- *  `crout`, `Crouter`, or `cruoter` reaches the `crouter` profile instead of
- *  failing with a list the user has to read and retype. A fuzzy hit is
- *  announced on STDERR (never stdout, which callers pipe) so the user always
- *  knows which profile actually ran.
- *
- *  NEVER call this with a STORED `profile_id` (a node's `meta.profile_id`,
- *  `CRTR_PROFILE_ID`, a pinned default). A durable id that no longer resolves
- *  means the profile was deleted — the correct answer there is the not-found
- *  those callers already handle, not the nearest surviving profile. Use
- *  `loadProfileManifest` (or `loadExactProfileManifest`) for those. */
-export function resolveProfileOperand(operand) {
-    const all = listProfiles();
-    const exact = findExactProfile(all, operand);
-    if (exact !== null)
-        return exact;
-    const { match, tied } = fuzzyMatchProfile(operand, all.map((p) => ({ profileId: p.profileId, name: p.manifest.name })));
-    if (match !== null) {
-        const picked = all.find((p) => p.profileId === match.profileId);
-        console.error(`crtr: no profile named "${operand}" — using the closest match: ${picked.manifest.name} (${picked.profileId})`);
-        return picked;
-    }
-    if (tied.length > 1) {
-        const ids = tied.map((c) => `${c.profileId} (${c.name})`);
-        throw ambiguous(`"${operand}" is equally close to ${tied.length} profiles: ${ids.join(', ')}`, {
-            received: operand,
-            candidates: tied.map((c) => c.profileId),
-            next: `Re-run with one exact profile id or name: ${ids.join(', ')}.`,
-        });
-    }
-    throw profileNotFound(all, operand);
-}
-function locksDir() {
-    return join(profilesRoot(), '.locks');
-}
-/** Hold the per-profile manifest lock for the duration of `fn`. ALL manifest
- *  mutations (create/rename/add-project/remove-project/delete/last-used)
- *  below run inside this. */
-export function withProfileManifestLock(profileId, fn) {
-    assertSafeProfileId(profileId);
-    ensureDir(locksDir());
-    return withExclusiveDirectoryLock(join(locksDir(), `${profileId}.lock`), fn, {
-        timeoutError: () => general(`timed out waiting for the profile lock: ${profileId}`, {
-            next: 'Retry — another `crtr profile` command may be running concurrently on this profile.',
-        }),
-    });
-}
-// Project dirs — resolved to absolute real paths, must exist + be a directory
-// on add/create, deduped by real path, stored in manifest order.
-function resolveExistingProjectDir(dir) {
-    const abs = resolvePath(dir);
-    if (!existsSync(abs) || !statSync(abs).isDirectory()) {
-        throw usage(`project directory does not exist or is not a directory: ${dir}`, {
-            received: dir,
-            next: 'Pass an existing directory path.',
-        });
-    }
-    try {
-        return realpathSync(abs);
-    }
-    catch {
-        return abs;
-    }
-}
-/** First-wins by resolved path, manifest order preserved. */
-function dedupeProjects(entries) {
-    const seen = new Set();
-    const out = [];
-    for (const entry of entries) {
-        if (seen.has(entry.path))
-            continue;
-        seen.add(entry.path);
-        out.push(entry);
-    }
-    return out;
-}
-function slugify(name) {
-    let slug = name.toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-+|-+$/g, '');
-    if (slug.length > 40)
-        slug = slug.slice(0, 40).replace(/-+$/g, '');
-    return slug.length > 0 ? slug : 'profile';
-}
-function generateProfileId(name) {
-    const slug = slugify(name);
-    const root = profilesRoot();
-    for (let attempt = 0; attempt < 20; attempt++) {
-        const shortId = randomUUID().replace(/-/g, '').slice(0, 8);
-        const candidate = `${slug}-${shortId}`;
-        if (!existsSync(join(root, candidate)))
-            return candidate;
-    }
-    throw general(`failed to generate a unique profile id for "${name}" after 20 attempts`);
-}
-// Mutations — all under withProfileManifestLock, all atomic writes, all call
-// resetScopeCache() when they can change project dirs or the profile name
-// (never for a bare last-used-at touch).
-export function ensureRootProfile() {
-    return withProfileManifestLock(ROOT_PROFILE_ID, () => {
-        const existing = getStoredProfile(userScopeRoot(), ROOT_PROFILE_ID);
-        if (existing !== null) {
-            ensureDir(profileRoot(ROOT_PROFILE_ID));
-            ensureDir(profileMemoryDir(ROOT_PROFILE_ID));
-            return { profileId: ROOT_PROFILE_ID, manifest: normalizeHome(ROOT_PROFILE_ID, existing.manifest) };
-        }
-        const next = {
-            schema_version: SCHEMA_VERSION,
-            name: ROOT_PROFILE_NAME,
-            projects: [],
-            home: null,
-            paused_at: null,
-            created_at: nowIso(),
-            last_used_at: nowIso(),
-        };
-        scaffoldProfile(ROOT_PROFILE_ID, next);
-        insertStoredProfile(userScopeRoot(), { profileId: ROOT_PROFILE_ID, manifest: next }, profileRoot(ROOT_PROFILE_ID));
-        resetScopeCache();
-        return { profileId: ROOT_PROFILE_ID, manifest: next };
-    });
-}
-/** Key shape every stored metadata entry must satisfy — kept env-mappable
- *  (`CRTR_PROFILE_META_<KEY>`, see `core/runtime/spawn-env.ts`) by
- *  construction. */
-const METADATA_KEY_SHAPE = /^[A-Za-z0-9][A-Za-z0-9_-]*$/;
-/** The env name a metadata entry surfaces as (spawn-env source F). Also the
- *  uniqueness domain for keys: the fold is lossy (`a-b`, `a_b`, `A_B` →
- *  `CRTR_PROFILE_META_A_B`), so two stored keys may not share a fold. */
-export function metadataEnvName(key) {
-    return `CRTR_PROFILE_META_${key.toUpperCase().replace(/[^A-Z0-9]+/g, '_')}`;
-}
-/** Reject anything a valid metadata map may not carry. Takes `unknown`
- *  because the API route hands over a caller-supplied body slice — the
- *  TypeScript type on the DTO proves nothing at runtime. */
-export function assertProfileMetadata(entries) {
-    if (typeof entries !== 'object' || entries === null || Array.isArray(entries)) {
-        throw usage('metadata must be a map of string keys to string values', {
-            field: 'metadata',
-            next: 'Pass an object, e.g. {"role": "support"}.',
-        });
-    }
-    const claimed = new Map();
-    for (const [key, value] of Object.entries(entries)) {
-        if (!METADATA_KEY_SHAPE.test(key)) {
-            throw usage(`invalid metadata key: ${JSON.stringify(key)}`, {
-                received: key,
-                field: 'metadata',
-                next: 'Keys start with a letter or digit, followed by letters, digits, `_`, or `-`.',
-            });
-        }
-        if (typeof value !== 'string') {
-            throw usage(`metadata value for ${key} must be a string`, {
-                received: typeof value,
-                field: 'metadata',
-                next: 'Every metadata value is an env-var value — pass strings only.',
-            });
-        }
-        if (value.includes('\0')) {
-            throw usage(`metadata value for ${key} contains a NUL byte, which no OS accepts in an environment variable`, {
-                field: 'metadata',
-                next: 'Remove NUL bytes from the value and retry.',
-            });
-        }
-        const envName = metadataEnvName(key);
-        const prior = claimed.get(envName);
-        if (prior !== undefined) {
-            throw usage(`metadata keys ${JSON.stringify(prior)} and ${JSON.stringify(key)} both surface as ${envName}`, {
-                field: 'metadata',
-                next: 'Rename or drop one — keys must stay distinct after uppercasing and `_`-folding.',
-            });
-        }
-        claimed.set(envName, key);
-    }
-}
-/** Drop entries no valid mutation could have written — a manifest is
- *  hand-editable, so a projection or merge base must never trust it raw.
- *  Never throws; on an env-name collision the first entry wins (matching
- *  injection, where a deterministic winner beats insertion-order luck). */
-export function sanitizeProfileMetadata(stored) {
-    if (typeof stored !== 'object' || stored === null || Array.isArray(stored))
-        return {};
-    const out = {};
-    const claimed = new Set();
-    for (const [key, value] of Object.entries(stored)) {
-        if (typeof value !== 'string')
-            continue;
-        if (!METADATA_KEY_SHAPE.test(key))
-            continue;
-        if (value.includes('\0'))
-            continue;
-        const envName = metadataEnvName(key);
-        if (claimed.has(envName))
-            continue;
-        claimed.add(envName);
-        out[key] = value;
-    }
-    return out;
-}
-export function createProfile(name, projects = [], opts = {}) {
-    const trimmed = name.trim();
-    if (trimmed === '')
-        throw usage('profile name must not be empty');
-    if (opts.metadata !== undefined)
-        assertProfileMetadata(opts.metadata);
-    assertProfileProjects(projects);
-    const resolvedProjects = dedupeProjects(projects.map((p) => ({ path: resolveExistingProjectDir(p.path), memory: p.memory })));
-    const profileId = generateProfileId(trimmed);
-    return withProfileManifestLock(profileId, () => {
-        const manifest = {
-            schema_version: SCHEMA_VERSION,
-            name: trimmed,
-            projects: resolvedProjects,
-            home: resolvedProjects[0]?.path ?? null,
-            paused_at: null,
-            ...(opts.defaultKind !== undefined ? { default_kind: opts.defaultKind } : {}),
-            ...(opts.metadata !== undefined && Object.keys(opts.metadata).length > 0 ? { metadata: { ...opts.metadata } } : {}),
-            created_at: nowIso(),
-            last_used_at: null,
-        };
-        scaffoldProfile(profileId, manifest);
-        insertStoredProfile(userScopeRoot(), { profileId, manifest }, profileRoot(profileId));
-        resetScopeCache();
-        return { profileId, manifest };
-    });
-}
-function requireExistingProfile(profileId) {
-    assertSafeProfileId(profileId);
-    if (getStoredProfile(userScopeRoot(), profileId) === null)
-        throw notFound(`profile not found: ${profileId}`, { received: profileId, next: 'Run `crtr profile list` to see available profiles.' });
-}
-function mutateManifest(profileId, mutate) {
-    requireExistingProfile(profileId);
-    return withProfileManifestLock(profileId, () => {
-        const result = updateStoredProfile(userScopeRoot(), profileId, mutate);
-        if (result === null)
-            throw notFound(`profile not found: ${profileId}`, { received: profileId });
-        return { profileId, manifest: normalizeHome(profileId, result.manifest) };
-    });
-}
-export function updateProfileLastUsed(profileId) {
-    return mutateManifest(profileId, (m) => ({ ...m, last_used_at: nowIso() }));
-}
-/** Resolve an existing profile for a launch gate without making stale durable
- * profile ids a new failure mode on a hot path. */
-function loadProfileManifestOrNull(profileId) {
-    if (profileId === null || profileId === undefined || profileId === '')
-        return null;
-    try {
-        return loadProfileManifest(profileId);
-    }
-    catch {
-        return null;
-    }
-}
-/** Paused check for an ALREADY-RESOLVED durable id (a canvas row's `profile_id`,
- * `CRTR_PROFILE_ID`) — exact-id only, no name matching, so it costs one small
- * read on the hot delivery paths that call it every poll. Fails OPEN: an id
- * whose manifest is missing or corrupt is not paused, because treating it as
- * paused would strand that node's queued inbox forever. */
-export function isProfilePaused(profileId) {
-    if (profileId === null || profileId === undefined || profileId === '')
-        return false;
-    try {
-        return loadExactProfileManifest(profileId).manifest.paused_at !== null;
-    }
-    catch {
-        return false;
-    }
-}
-/** Refuse a launch under a paused profile, naming the resume command. Shared by
- * every gate that already holds a loaded manifest. */
-export function assertProfileEntryActive(entry) {
-    if (entry.manifest.paused_at === null)
-        return;
-    throw usage(`profile "${entry.manifest.name}" is paused and cannot start nodes`, {
-        received: entry.profileId,
-        next: `Resume it with \`crtr profile resume ${entry.profileId}\`.`,
-    });
-}
-export function assertProfileActive(profileId) {
-    const entry = loadProfileManifestOrNull(profileId);
-    if (entry === null)
-        return null;
-    assertProfileEntryActive(entry);
-    return entry;
-}
-export function pauseProfile(profileId) {
-    return mutateManifest(profileId, (m) => ({ ...m, paused_at: m.paused_at ?? nowIso() }));
-}
-export function resumeProfile(profileId) {
-    let pausedAt = null;
-    const entry = mutateManifest(profileId, (m) => {
-        pausedAt = m.paused_at;
-        return { ...m, paused_at: null };
-    });
-    return { ...entry, pausedAt };
-}
-export function setProfileDefaultKind(profileId, defaultKind) {
-    return mutateManifest(profileId, (m) => ({ ...m, default_kind: defaultKind }));
-}
-/** Merge `set` entries over the stored map and drop `unset` keys; the
- *  `metadata` field is omitted entirely when the result is empty. */
-export function updateProfileMetadata(profileId, set, unset = []) {
-    assertProfileMetadata(set);
-    return mutateManifest(profileId, (m) => {
-        const next = { ...sanitizeProfileMetadata(m.metadata), ...set };
-        for (const key of unset)
-            delete next[key];
-        // Re-assert the merged result: a set key may collide with a STORED key in
-        // the env-name domain (`a-b` over stored `a_b`), which per-argument
-        // validation cannot see.
-        assertProfileMetadata(next);
-        const { metadata: _dropped, ...rest } = m;
-        return { ...rest, ...(Object.keys(next).length > 0 ? { metadata: next } : {}) };
-    });
-}
-/** A profile's stored metadata for broker-env injection — sanitized entry by
- *  entry (a manifest is hand-editable, so a bad key/value is dropped rather
- *  than trusted) and never throwing: a stale/invalid/absent profile id is a
- *  hot-path no-op, because broker-env resolution must never fail a launch
- *  over a bad profile id (mirrors `readProfileEnvVars`). */
-export function readProfileMetadata(profileId) {
-    if (profileId === null || profileId === '')
-        return {};
-    try {
-        return sanitizeProfileMetadata(loadExactProfileManifest(profileId).manifest.metadata);
-    }
-    catch {
-        return {};
-    }
-}
-export function renameProfile(profileId, name) {
-    const trimmed = name.trim();
-    if (trimmed === '')
-        throw usage('profile name must not be empty');
-    const result = mutateManifest(profileId, (m) => ({ ...m, name: trimmed }));
-    resetScopeCache();
-    return result;
-}
-/** Upsert: a new path appends, an existing one keeps its position and takes
- *  the supplied memory value. Every caller names a memory value — a profile
- *  relationship never acquires one by default. */
-export function addProfileProject(profileId, dir, opts) {
-    assertProfileProjects([{ path: dir, memory: opts.memory }]);
-    const resolved = resolveExistingProjectDir(dir);
-    const result = mutateManifest(profileId, (m) => {
-        const existing = m.projects.some((p) => p.path === resolved);
-        const projects = existing
-            ? m.projects.map((p) => (p.path === resolved ? { ...p, memory: opts.memory } : p))
-            : dedupeProjects([...m.projects, { path: resolved, memory: opts.memory }]);
-        return {
-            ...m,
-            projects,
-            ...(opts.home === true ? { home: resolved } : {}),
-        };
-    });
-    resetScopeCache();
-    return result;
-}
-export function removeProfileProject(profileId, dir) {
-    // Lenient resolution: a project dir may have been deleted since it was
-    // added, so removal must not require it to still exist on disk. Compare
-    // against both its real path (if still resolvable) and its plain resolved
-    // path (how it would have been stored had it never been a symlink).
-    const abs = resolvePath(dir);
-    let real = abs;
-    try {
-        real = realpathSync(abs);
-    }
-    catch {
-        /* dir no longer exists — fall back to comparing by its resolved path */
-    }
-    const result = mutateManifest(profileId, (m) => {
-        const filtered = m.projects.filter((p) => p.path !== real && p.path !== abs);
-        // Dropping the home dir from purview falls the home back to the first
-        // remaining project, exactly as `normalizeHome` would for a manifest that
-        // never named one — never leaves the profile pointing outside its purview.
-        const home = m.home === real || m.home === abs ? filtered[0]?.path ?? null : m.home;
-        if (filtered.length === m.projects.length) {
-            throw notFound(`project not found on profile: ${dir}`, {
-                received: dir,
-                next: `Current projects: ${m.projects.length > 0 ? m.projects.map((p) => p.path).join(', ') : '(none)'}.`,
-            });
-        }
-        return { ...m, projects: filtered, home };
-    });
-    resetScopeCache();
-    return result;
-}
-export function deleteProfile(profileId) {
-    requireExistingProfile(profileId);
-    withProfileManifestLock(profileId, () => {
-        if (!deleteStoredProfile(userScopeRoot(), profileId))
-            throw notFound(`profile not found: ${profileId}`, { received: profileId });
-        rmSync(profileRoot(profileId), { recursive: true, force: true });
-    });
-    resetScopeCache();
-}
+var B=Object.defineProperty;var o=(e,t)=>B(e,"name",{value:t,configurable:!0});import{randomUUID as Q}from"node:crypto";import{existsSync as v,realpathSync as j,rmSync as X,statSync as A}from"node:fs";import{join as m,relative as I,resolve as P,sep as ee}from"node:path";import{SCHEMA_VERSION as M,PROFILE_DIR as te}from"../../types.js";import{PROFILE_PROJECT_MEMORY_VALUES as O}from"../../api/dto/profiles.js";import{userScopeRoot as u,resetScopeCache as h}from"../scope.js";import{ensureDir as g,nowIso as $}from"../fs-utils.js";import{deleteStoredProfile as re,getStoredProfile as S,insertStoredProfile as D,listStoredProfiles as ne,updateStoredProfile as oe}from"../scoped-state/profiles.js";import{usage as c,notFound as y,ambiguous as L,general as N}from"../errors.js";import{withExclusiveDirectoryLock as ie}from"../exclusive-lock.js";import{fuzzyMatchProfile as ae}from"./fuzzy-match.js";const z=/^[a-z0-9]+(?:-[a-z0-9]+)*-[0-9a-f]{8}$/,f="root-00000000",se="root";function C(e,t){const r=p(e);g(r),g(m(r,"memory"))}o(C,"scaffoldProfile");function w(){return m(u(),te)}o(w,"profilesRoot");function _(e){if(!z.test(e))throw c(`invalid profile id: ${e}`,{received:e,next:"Profile ids look like <slug>-<8-hex-chars> (as printed by `crtr profile new`). Pass an exact id or a profile name, not a raw path."})}o(_,"assertSafeProfileId");function ce(e){const t=w(),r=P(t),n=v(t)?j(t):r,i=v(e)?j(e):P(n,I(r,P(e)));if(i!==n&&!i.startsWith(n+ee))throw c(`profile path escapes the profiles root: ${e}`)}o(ce,"assertInsideProfilesRoot");function p(e){_(e);const t=m(w(),e);return ce(t),t}o(p,"profileRoot");function ke(e){return m(p(e),"profile.json")}o(ke,"profileManifestPath");function fe(e){return m(p(e),"memory")}o(fe,"profileMemoryDir");function b(e,t){const r=typeof t.home=="string"&&t.home!==""?t.home:null;return{...t,home:e===f?r:r??t.projects[0]?.path??null,paused_at:typeof t.paused_at=="string"&&t.paused_at!==""?t.paused_at:null}}o(b,"normalizeHome");function F(e){const t=O.join(", ");if(!Array.isArray(e))throw c("projects must be an array of {path, memory} objects",{received:typeof e,field:"projects",next:`Pass entries like {"path": "/abs/dir", "memory": "content"} \u2014 memory is one of: ${t}.`});for(const r of e){if(typeof r!="object"||r===null||Array.isArray(r))throw c(`invalid project entry: ${JSON.stringify(r)}`,{field:"projects",next:'Every project is an object like {"path": "/abs/dir", "memory": "content"}.'});const{path:n,memory:i}=r;if(typeof n!="string"||n.trim()==="")throw c(`project entry has no path: ${JSON.stringify(r)}`,{field:"projects",next:"Give every project entry a non-empty directory path."});if(typeof i!="string"||!O.includes(i))throw c(`invalid project memory value: ${JSON.stringify(i)}`,{received:String(i),field:"projects",next:`Set memory on ${n} to one of: ${t}.`})}}o(F,"assertProfileProjects");function Ee(e){if(e===null||e==="")return null;try{const t=H(e).manifest.home;return t!==null&&v(t)&&A(t).isDirectory()?t:null}catch{return null}}o(Ee,"profileHome");function le(){return{entries:ne(u()).map(({profileId:e,manifest:t})=>({profileId:e,manifest:b(e,t)})),unreadableIds:[]}}o(le,"enumerateProfiles");function k(){return le().entries}o(k,"listProfiles");function ue(e){const t=k(),r=T(t,e);return r?{kind:"resolved",entry:r}:{kind:"absent"}}o(ue,"lookupProfile");function J(e){_(e);const t=S(u(),e);if(t!==null)return{profileId:e,manifest:b(e,t.manifest)};throw y(`profile not found: ${e}`,{received:e,next:"Run `crtr profile list` to see available profiles."})}o(J,"loadExactProfileManifest");function T(e,t){if(z.test(t)){const n=e.find(i=>i.profileId===t);if(n!==void 0)return n}const r=e.filter(n=>n.manifest.name===t);if(r.length===1)return r[0];if(r.length>1){const n=r.map(i=>i.profileId);throw L(`profile name "${t}" matches ${n.length} profiles: ${n.join(", ")}`,{received:t,candidates:n,next:`Re-run with one exact profile id: ${n.join(", ")}.`})}return null}o(T,"findExactProfile");function U(e,t){const r=e.map(n=>`${n.profileId} (${n.manifest.name})`);return y(`profile not found: ${t}`,{received:t,available:r,next:r.length>0?`Re-run with one of the profiles on this host: ${r.join(", ")} \u2014 or create one with \`crtr profile new --name <name>\`.`:"No profiles exist on this host yet \u2014 create one with `crtr profile new --name <name>`."})}o(U,"profileNotFound");function H(e){const t=ue(e);if(t.kind==="resolved")return t.entry;throw U(k(),e)}o(H,"loadProfileManifest");function Ae(e){const t=k(),r=T(t,e);if(r!==null)return r;const{match:n,tied:i}=ae(e,t.map(a=>({profileId:a.profileId,name:a.manifest.name})));if(n!==null){const a=t.find(s=>s.profileId===n.profileId);return console.error(`crtr: no profile named "${e}" \u2014 using the closest match: ${a.manifest.name} (${a.profileId})`),a}if(i.length>1){const a=i.map(s=>`${s.profileId} (${s.name})`);throw L(`"${e}" is equally close to ${i.length} profiles: ${a.join(", ")}`,{received:e,candidates:i.map(s=>s.profileId),next:`Re-run with one exact profile id or name: ${a.join(", ")}.`})}throw U(t,e)}o(Ae,"resolveProfileOperand");function K(){return m(w(),".locks")}o(K,"locksDir");function R(e,t){return _(e),g(K()),ie(m(K(),`${e}.lock`),t,{timeoutError:o(()=>N(`timed out waiting for the profile lock: ${e}`,{next:"Retry \u2014 another `crtr profile` command may be running concurrently on this profile."}),"timeoutError")})}o(R,"withProfileManifestLock");function q(e){const t=P(e);if(!v(t)||!A(t).isDirectory())throw c(`project directory does not exist or is not a directory: ${e}`,{received:e,next:"Pass an existing directory path."});try{return j(t)}catch{return t}}o(q,"resolveExistingProjectDir");function Z(e){const t=new Set,r=[];for(const n of e)t.has(n.path)||(t.add(n.path),r.push(n));return r}o(Z,"dedupeProjects");function me(e){let t=e.toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"");return t.length>40&&(t=t.slice(0,40).replace(/-+$/g,"")),t.length>0?t:"profile"}o(me,"slugify");function de(e){const t=me(e),r=w();for(let n=0;n<20;n++){const i=Q().replace(/-/g,"").slice(0,8),a=`${t}-${i}`;if(!v(m(r,a)))return a}throw N(`failed to generate a unique profile id for "${e}" after 20 attempts`)}o(de,"generateProfileId");function Me(){return R(f,()=>{const e=S(u(),f);if(e!==null)return g(p(f)),g(fe(f)),{profileId:f,manifest:b(f,e.manifest)};const t={schema_version:M,name:se,projects:[],home:null,paused_at:null,created_at:$(),last_used_at:$()};return C(f,t),D(u(),{profileId:f,manifest:t},p(f)),h(),{profileId:f,manifest:t}})}o(Me,"ensureRootProfile");const V=/^[A-Za-z0-9][A-Za-z0-9_-]*$/;function Y(e){return`CRTR_PROFILE_META_${e.toUpperCase().replace(/[^A-Z0-9]+/g,"_")}`}o(Y,"metadataEnvName");function E(e){if(typeof e!="object"||e===null||Array.isArray(e))throw c("metadata must be a map of string keys to string values",{field:"metadata",next:'Pass an object, e.g. {"role": "support"}.'});const t=new Map;for(const[r,n]of Object.entries(e)){if(!V.test(r))throw c(`invalid metadata key: ${JSON.stringify(r)}`,{received:r,field:"metadata",next:"Keys start with a letter or digit, followed by letters, digits, `_`, or `-`."});if(typeof n!="string")throw c(`metadata value for ${r} must be a string`,{received:typeof n,field:"metadata",next:"Every metadata value is an env-var value \u2014 pass strings only."});if(n.includes("\0"))throw c(`metadata value for ${r} contains a NUL byte, which no OS accepts in an environment variable`,{field:"metadata",next:"Remove NUL bytes from the value and retry."});const i=Y(r),a=t.get(i);if(a!==void 0)throw c(`metadata keys ${JSON.stringify(a)} and ${JSON.stringify(r)} both surface as ${i}`,{field:"metadata",next:"Rename or drop one \u2014 keys must stay distinct after uppercasing and `_`-folding."});t.set(i,r)}}o(E,"assertProfileMetadata");function G(e){if(typeof e!="object"||e===null||Array.isArray(e))return{};const t={},r=new Set;for(const[n,i]of Object.entries(e)){if(typeof i!="string"||!V.test(n)||i.includes("\0"))continue;const a=Y(n);r.has(a)||(r.add(a),t[n]=i)}return t}o(G,"sanitizeProfileMetadata");function Oe(e,t=[],r={}){const n=e.trim();if(n==="")throw c("profile name must not be empty");r.metadata!==void 0&&E(r.metadata),F(t);const i=Z(t.map(s=>({path:q(s.path),memory:s.memory}))),a=de(n);return R(a,()=>{const s={schema_version:M,name:n,projects:i,home:i[0]?.path??null,paused_at:null,...r.defaultKind!==void 0?{default_kind:r.defaultKind}:{},...r.metadata!==void 0&&Object.keys(r.metadata).length>0?{metadata:{...r.metadata}}:{},created_at:$(),last_used_at:null};return C(a,s),D(u(),{profileId:a,manifest:s},p(a)),h(),{profileId:a,manifest:s}})}o(Oe,"createProfile");function W(e){if(_(e),S(u(),e)===null)throw y(`profile not found: ${e}`,{received:e,next:"Run `crtr profile list` to see available profiles."})}o(W,"requireExistingProfile");function d(e,t){return W(e),R(e,()=>{const r=oe(u(),e,t);if(r===null)throw y(`profile not found: ${e}`,{received:e});return{profileId:e,manifest:b(e,r.manifest)}})}o(d,"mutateManifest");function De(e){return d(e,t=>({...t,last_used_at:$()}))}o(De,"updateProfileLastUsed");function pe(e){if(e==null||e==="")return null;try{return H(e)}catch{return null}}o(pe,"loadProfileManifestOrNull");function Le(e){if(e==null||e==="")return!1;try{return J(e).manifest.paused_at!==null}catch{return!1}}o(Le,"isProfilePaused");function he(e){if(e.manifest.paused_at!==null)throw c(`profile "${e.manifest.name}" is paused and cannot start nodes`,{received:e.profileId,next:`Resume it with \`crtr profile resume ${e.profileId}\`.`})}o(he,"assertProfileEntryActive");function Ne(e){const t=pe(e);return t===null?null:(he(t),t)}o(Ne,"assertProfileActive");function ze(e){return d(e,t=>({...t,paused_at:t.paused_at??$()}))}o(ze,"pauseProfile");function Ce(e){let t=null;return{...d(e,n=>(t=n.paused_at,{...n,paused_at:null})),pausedAt:t}}o(Ce,"resumeProfile");function Fe(e,t){return d(e,r=>({...r,default_kind:t}))}o(Fe,"setProfileDefaultKind");function Je(e,t,r=[]){return E(t),d(e,n=>{const i={...G(n.metadata),...t};for(const x of r)delete i[x];E(i);const{metadata:a,...s}=n;return{...s,...Object.keys(i).length>0?{metadata:i}:{}}})}o(Je,"updateProfileMetadata");function Te(e){if(e===null||e==="")return{};try{return G(J(e).manifest.metadata)}catch{return{}}}o(Te,"readProfileMetadata");function Ue(e,t){const r=t.trim();if(r==="")throw c("profile name must not be empty");const n=d(e,i=>({...i,name:r}));return h(),n}o(Ue,"renameProfile");function He(e,t,r){F([{path:t,memory:r.memory}]);const n=q(t),i=d(e,a=>{const x=a.projects.some(l=>l.path===n)?a.projects.map(l=>l.path===n?{...l,memory:r.memory}:l):Z([...a.projects,{path:n,memory:r.memory}]);return{...a,projects:x,...r.home===!0?{home:n}:{}}});return h(),i}o(He,"addProfileProject");function Ke(e,t){const r=P(t);let n=r;try{n=j(r)}catch{}const i=d(e,a=>{const s=a.projects.filter(l=>l.path!==n&&l.path!==r),x=a.home===n||a.home===r?s[0]?.path??null:a.home;if(s.length===a.projects.length)throw y(`project not found on profile: ${t}`,{received:t,next:`Current projects: ${a.projects.length>0?a.projects.map(l=>l.path).join(", "):"(none)"}.`});return{...a,projects:s,home:x}});return h(),i}o(Ke,"removeProfileProject");function qe(e){W(e),R(e,()=>{if(!re(u(),e))throw y(`profile not found: ${e}`,{received:e});X(p(e),{recursive:!0,force:!0})}),h()}o(qe,"deleteProfile");export{f as ROOT_PROFILE_ID,He as addProfileProject,Ne as assertProfileActive,he as assertProfileEntryActive,E as assertProfileMetadata,F as assertProfileProjects,Oe as createProfile,qe as deleteProfile,Me as ensureRootProfile,Le as isProfilePaused,k as listProfiles,J as loadExactProfileManifest,H as loadProfileManifest,ue as lookupProfile,Y as metadataEnvName,ze as pauseProfile,Ee as profileHome,ke as profileManifestPath,fe as profileMemoryDir,p as profileRoot,w as profilesRoot,Te as readProfileMetadata,Ke as removeProfileProject,Ue as renameProfile,Ae as resolveProfileOperand,Ce as resumeProfile,G as sanitizeProfileMetadata,Fe as setProfileDefaultKind,De as updateProfileLastUsed,Je as updateProfileMetadata,R as withProfileManifestLock};