@north-light/crouter 0.3.317 → 0.3.319

package/dist/core/runtime/lifecycle.js

@@ -1,213 +1,2 @@
-// lifecycle.ts — the node status×intent state machine.
-//
-// ONE place defines which (status, intent) moves are legal and enacts them.
-// The legal transition TABLE is the definition, and `transition(id, event)` is
-// the single writer of status+intent for every caller (reset, close, revive,
-// feed, daemon, stophook, queue, promote): it validates the from-status, then
-// writes both fields in ONE atomic statement (on the WAL'd row setters) so the
-// two can never disagree.
-//
-// Persona modules own context framing; this file owns which status/intent move
-// is legal. The two state machines stay independent.
-//
-// Crash-safety invariant: flip status to a non-supervised value + clear intent
-// BEFORE killing the host (tmux pane or headless broker) — the daemon only ever
-// revives active|idle nodes, so a teardown must leave the node done/canceled
-// first to close the revive race. That invariant is the DEFINITION of the
-// `cancel` event: callers flip via transition() and only THEN tear the host down.
-//
-// An externally-reaped node — torn down because the user moved on (close
-// cascade) OR because a root relaunch superseded its workers — ends `canceled`,
-// NOT `done`. `done` is reserved for a node that finished its OWN work (finish)
-// — including a relaunched root, which is parked `done` as history, not
-// canceled. There is no separate reap event: it would be identical to `cancel`
-// in every field and side effect, so reset.ts's reapDescendants routes through
-// `cancel`.
-//
-// Layering note: lifecycle.ts is runtime, but it is the canvas write surface's
-// `transition` verb (the only writer of status+intent), so it drives the
-// atomic status+intent write through canvas.ts's `transitionStatusIntent`
-// (its own decision logic — the legality table below, and the
-// unknown-node/illegal-move/already-finalized-cancel branching — stays here;
-// only the raw conditional UPDATE lives in canvas.ts, keeping every `.prepare(`
-// inside `core/canvas/`).
-import { getNode, cancelCronsOnWake, transitionStatusIntent } from '../canvas/index.js';
-import { readExternalActionDelivery } from '../canvas/deliveries.js';
-import { composeNodeOutcomeDocument } from './outcome-document.js';
-const ANY = '*';
-const TERMINAL_REASONS = {
-    finish: 'finished',
-    park: 'parked',
-    cancel: 'stranded',
-    crash: 'crashed',
-    'refresh-launch': null,
-    revive: null,
-};
-/** The supervised statuses — a live node the daemon watches. */
-const LIVE = ['active', 'idle'];
-/** The legal transition table — derived directly from the (status, intent) pairs
- *  the runtime actually wrote at its audited call sites, so behavior is preserved
- *  by construction. Each entry's comment names its writer(s). */
-const TRANSITIONS = {
-    // markCleanExitDone (clean quit) · queue cancellation · relaunchRoot park-old.
-    finish: { status: 'done', intent: 'done', from: LIVE },
-    // The unattended park: a node whose conversation went idle with nothing left
-    // to wake it. `intent='parked'` IS the durable park marker — it qualifies the
-    // `done` it is written with, and `revive` clears it. Read it through
-    // `isParked` below, never by comparing the string at a call site.
-    park: { status: 'done', intent: 'parked', from: LIVE },
-    // closeNode cascade · reapDescendants. Forced teardown of a node that did NOT
-    // finish its own work → canceled, intent cleared. (A5: done is reserved for
-    // finish; every external reap unifies on canceled.)
-    cancel: { status: 'canceled', intent: null, from: ANY },
-    // daemon superviseTick: engine container gone (tmux pane or broker process)
-    // with no yield/release intent. Intent KEPT (the dead log line still reports it).
-    crash: { status: 'dead', from: LIVE },
-    // requestYield · relaunchRoot new-node safety net. Status KEPT (already active).
-    yield: { intent: 'refresh', from: LIVE },
-    // Free the host, stay woken by the inbox. A parked resident can also drain
-    // here after a capacity freeze without spending a slot.
-    release: { status: 'idle', intent: 'idle-release', from: [...LIVE, 'done'] },
-    // reviveNode provisional refresh launch: activate without committing the
-    // refresh until session_start proves the engine booted.
-    'refresh-launch': { status: 'active', intent: 'refresh', from: ANY },
-    // reviveNode ordinary launch · resetRoot · stophook boot confirmation.
-    revive: { status: 'active', intent: null, from: ANY },
-};
-function firstLineAtMost(value, maxBytes) {
-    const line = value.split('\n')[0] ?? '';
-    let bytes = 0;
-    let result = '';
-    for (const character of line) {
-        const next = Buffer.byteLength(character, 'utf8');
-        if (bytes + next > maxBytes)
-            break;
-        bytes += next;
-        result += character;
-    }
-    return result;
-}
-function detailJson(detail) {
-    if (detail === undefined)
-        return null;
-    const message = detail.message === undefined ? undefined : firstLineAtMost(detail.message, 500);
-    const bounded = { ...detail, ...(message === undefined ? {} : { message }) };
-    const serialized = JSON.stringify(bounded);
-    if (Buffer.byteLength(serialized, 'utf8') <= 4 * 1024)
-        return serialized;
-    return JSON.stringify({ schema: 'crtr.node-outcome-detail/v1', truncated: true, ...(message === undefined ? {} : { message }) });
-}
-function armedOutcomeAction(nodeId) {
-    const delivery = readExternalActionDelivery(`node-outcome:${nodeId}`);
-    if (delivery === null || delivery.state !== 'armed')
-        return null;
-    const adapter = delivery.adapter;
-    if (adapter?.adapter !== 'subprocess' || !Array.isArray(adapter.argv) || !adapter.argv.every((entry) => typeof entry === 'string') || typeof adapter.cwd !== 'string') {
-        throw new Error(`outcome delivery ${delivery.deliveryId} has an invalid subprocess adapter`);
-    }
-    return { name: delivery.destinationId, payload: adapter.payload ?? null };
-}
-function nodeAtOutcome(node, reason) {
-    let status;
-    let intent;
-    if (reason === 'finished' || reason === 'declined') {
-        status = 'done';
-        intent = 'done';
-    }
-    else if (reason === 'parked') {
-        status = 'done';
-        intent = 'parked';
-    }
-    else if (reason === 'closed' || reason === 'retired' || reason === 'stranded' || reason === 'deadline_exceeded') {
-        status = 'canceled';
-        intent = null;
-    }
-    else {
-        status = 'dead';
-        intent = null;
-    }
-    return { ...node, status, intent, terminal_reason: reason };
-}
-/** Enact a lifecycle event on a node: validate the from-status against the
- *  table, then write status+intent in ONE atomic statement (so they can never
- *  disagree). Returns the hydrated node view after the write.
- *
- *  Throws on an unknown node or an illegal move. The conditional update makes
- *  legality authoritative at SQLite write time rather than at a stale read. */
-export function transition(nodeId, event, opts) {
-    const spec = TRANSITIONS[event];
-    const writeStatus = Object.prototype.hasOwnProperty.call(spec, 'status');
-    const writeIntent = Object.prototype.hasOwnProperty.call(spec, 'intent');
-    const reason = opts?.reason ?? TERMINAL_REASONS[event];
-    const fields = {};
-    if (writeStatus)
-        fields.status = spec.status;
-    if (writeIntent)
-        fields.intent = spec.intent ?? null;
-    if (reason !== undefined)
-        fields.terminal_reason = reason;
-    const terminal = event === 'finish' || event === 'park' || event === 'cancel' || event === 'crash';
-    const current = terminal ? getNode(nodeId) : null;
-    const recordsOutcome = terminal && current?.kind !== 'human';
-    const outcomeReason = reason;
-    const outcomeAt = terminal ? new Date().toISOString() : null;
-    const outcomeDetailJson = detailJson(opts?.outcome?.detail);
-    let documentJson;
-    if (recordsOutcome && current !== null && current.outcome_at === null) {
-        const action = armedOutcomeAction(nodeId);
-        if (action !== null) {
-            documentJson = JSON.stringify(composeNodeOutcomeDocument({
-                node: nodeAtOutcome(current, outcomeReason),
-                outcome: { kind: 'failure', reason: outcomeReason, at: outcomeAt, revision: (current.outcome_revision ?? 0) + 1, detailJson: outcomeDetailJson },
-                action,
-            }));
-        }
-    }
-    // A committed canonical result is protected from a concurrent close.
-    const changes = transitionStatusIntent(nodeId, fields, {
-        fromStatuses: spec.from === ANY ? undefined : spec.from,
-        requireNoFinalReport: event === 'cancel',
-        ...(recordsOutcome ? {
-            outcome: {
-                kind: 'failure',
-                reason: outcomeReason,
-                detailJson: outcomeDetailJson,
-                at: outcomeAt,
-                ...(documentJson === undefined ? {} : { documentJson }),
-            },
-        } : {}),
-    });
-    if (changes === 0) {
-        const cur = getNode(nodeId);
-        if (cur === null)
-            throw new Error(`transition: unknown node ${nodeId}`);
-        if (event === 'cancel' && cur.final_report !== null && cur.final_report !== undefined)
-            return cur;
-        throw new Error(`illegal lifecycle transition: '${event}' from status='${cur.status}' (node ${nodeId})`);
-    }
-    // Wait-cron cleanup — writes a DIFFERENT table (crons) AFTER the atomic
-    // status/intent write above, so the single-(status,intent)-writer rule holds.
-    // Event-gated; exactly ONE delegated crons helper, never inline cron SQL here:
-    //   finish · park · cancel → cancelCronsOnWake: delete the cancel-on-wake crons
-    //     ANCHORED to this node — the deadlines it armed to bound a wait. Ending
-    //     the wait deliberately (finish) or having it ended for you (close cascade
-    //     · reapDescendants) settles that race, so the deadline must not fire
-    //     afterwards: on a finished node its urgent self-message hits
-    //     `assertNotFinalized`, fails, and escalates a spurious agent; on a closed
-    //     node it succeeds and revives a node the user deliberately shut. Only
-    //     cancel-on-wake rows go — a standing declarative cron (anchored or not)
-    //     SURVIVES a node ending.
-    //   crash → NOTHING. A fault is not a deliberate end-of-waiting; a pending
-    //     deadline MUST survive instance death so the wait still settles.
-    if (event === 'finish' || event === 'park' || event === 'cancel')
-        cancelCronsOnWake(nodeId);
-    return getNode(nodeId);
-}
-/** Whether this row is a PARKED node — terminalized by the unattended clock
- *  rather than by finishing its own work. The one read of the park marker:
- *  `done` qualified by `intent='parked'`, both written in the same atomic
- *  statement by the `park` event above. Revival clears it (`revive` writes
- *  `intent: null`), so a reopened node is an ordinary node again. */
-export function isParked(node) {
-    return node.status === 'done' && node.intent === 'parked';
-}
+var w=Object.defineProperty;var i=(t,e)=>w(t,"name",{value:e,configurable:!0});import{getNode as y,cancelCronsOnWake as S,transitionStatusIntent as A}from"../canvas/index.js";import{readExternalActionDelivery as N}from"../canvas/deliveries.js";import{composeNodeOutcomeDocument as b}from"./outcome-document.js";const f="*",J={finish:"finished",park:"parked",cancel:"stranded",crash:"crashed","refresh-launch":null,revive:null},c=["active","idle"],_={finish:{status:"done",intent:"done",from:c},park:{status:"done",intent:"parked",from:c},cancel:{status:"canceled",intent:null,from:f},crash:{status:"dead",from:c},yield:{intent:"refresh",from:c},release:{status:"idle",intent:"idle-release",from:[...c,"done"]},"refresh-launch":{status:"active",intent:"refresh",from:f},revive:{status:"active",intent:null,from:f}};function v(t,e){const r=t.split(`
+`)[0]??"";let n=0,l="";for(const u of r){const s=Buffer.byteLength(u,"utf8");if(n+s>e)break;n+=s,l+=u}return l}i(v,"firstLineAtMost");function E(t){if(t===void 0)return null;const e=t.message===void 0?void 0:v(t.message,500),r={...t,...e===void 0?{}:{message:e}},n=JSON.stringify(r);return Buffer.byteLength(n,"utf8")<=4*1024?n:JSON.stringify({schema:"crtr.node-outcome-detail/v1",truncated:!0,...e===void 0?{}:{message:e}})}i(E,"detailJson");function $(t){const e=N(`node-outcome:${t}`);if(e===null||e.state!=="armed")return null;const r=e.adapter;if(r?.adapter!=="subprocess"||!Array.isArray(r.argv)||!r.argv.every(n=>typeof n=="string")||typeof r.cwd!="string")throw new Error(`outcome delivery ${e.deliveryId} has an invalid subprocess adapter`);return{name:e.destinationId,payload:r.payload??null}}i($,"armedOutcomeAction");function x(t,e){let r,n;return e==="finished"||e==="declined"?(r="done",n="done"):e==="parked"?(r="done",n="parked"):e==="closed"||e==="retired"||e==="stranded"||e==="deadline_exceeded"?(r="canceled",n=null):(r="dead",n=null),{...t,status:r,intent:n,terminal_reason:e}}i(x,"nodeAtOutcome");function j(t,e,r){const n=_[e],l=Object.prototype.hasOwnProperty.call(n,"status"),u=Object.prototype.hasOwnProperty.call(n,"intent"),s=r?.reason??J[e],d={};l&&(d.status=n.status),u&&(d.intent=n.intent??null),s!==void 0&&(d.terminal_reason=s);const m=e==="finish"||e==="park"||e==="cancel"||e==="crash",a=m?y(t):null,g=m&&a?.kind!=="human",p=s,k=m?new Date().toISOString():null,O=E(r?.outcome?.detail);let h;if(g&&a!==null&&a.outcome_at===null){const o=$(t);o!==null&&(h=JSON.stringify(b({node:x(a,p),outcome:{kind:"failure",reason:p,at:k,revision:(a.outcome_revision??0)+1,detailJson:O},action:o})))}if(A(t,d,{fromStatuses:n.from===f?void 0:n.from,requireNoFinalReport:e==="cancel",...g?{outcome:{kind:"failure",reason:p,detailJson:O,at:k,...h===void 0?{}:{documentJson:h}}}:{}})===0){const o=y(t);if(o===null)throw new Error(`transition: unknown node ${t}`);if(e==="cancel"&&o.final_report!==null&&o.final_report!==void 0)return o;throw new Error(`illegal lifecycle transition: '${e}' from status='${o.status}' (node ${t})`)}return(e==="finish"||e==="park"||e==="cancel")&&S(t),y(t)}i(j,"transition");function B(t){return t.status==="done"&&t.intent==="parked"}i(B,"isParked");export{B as isParked,j as transition};

package/dist/core/runtime/managed-provider-cooling.js

@@ -1,62 +1 @@
-// managed-provider-cooling.ts — the typed carrier for "every managed provider
-// pool tried this turn is temporarily cooling down".
-//
-// runManagedProvider (provider-rotation.ts) raises this once every attempted
-// managed-pool credential is rate-limited with at least one finite future
-// deadline. The error converts to an AssistantMessageDiagnostic that survives
-// verbatim into the terminal error message and therefore into agent_end.messages
-// (pi-ai's AssistantMessageEventStream.result() returns the exact error message
-// object). The canvas-stophook reads the earliest deadline back off that message
-// and stamps it onto the pi→provider fault's retry.nextAt, so the broker's
-// existing auto-retry re-drives the pre-content turn exactly when the soonest
-// pool frees up — turning a transient pool cooldown into an auto (not fatal)
-// fault instead of a permanent one.
-/** Diagnostic `type` tag carrying the cooling deadline; also the wire contract the
- *  stophook matches on. */
-export const MANAGED_PROVIDER_COOLING_DIAGNOSTIC = "crtr:managed-provider-cooling";
-/** Stable error code so a caller can recognize the typed error without message parsing. */
-export const MANAGED_PROVIDER_COOLING_CODE = "managed_provider_cooling";
-/** Every managed provider pool tried this turn is cooling; `rateLimitedUntil` is
- *  the earliest future deadline (epoch ms) across those pools. */
-export class ManagedProviderCoolingError extends Error {
-    code = MANAGED_PROVIDER_COOLING_CODE;
-    rateLimitedUntil;
-    constructor(message, rateLimitedUntil) {
-        super(message);
-        this.name = "ManagedProviderCoolingError";
-        this.rateLimitedUntil = rateLimitedUntil;
-    }
-    /** The diagnostic to attach to the terminal assistant error so the deadline
-     *  reaches the stophook without regex-parsing the message. Built inline (not via
-     *  pi-ai's `createAssistantMessageDiagnostic`) to keep this module's runtime
-     *  import graph pi-free — the shape matches `AssistantMessageDiagnostic`. */
-    toDiagnostic() {
-        return {
-            type: MANAGED_PROVIDER_COOLING_DIAGNOSTIC,
-            timestamp: Date.now(),
-            details: { rateLimitedUntil: this.rateLimitedUntil },
-        };
-    }
-}
-/** Strictly read the managed-cooling deadline (epoch ms) off an assistant
- *  message's diagnostics. Returns the finite, strictly-positive `rateLimitedUntil`
- *  from the first cooling diagnostic, or undefined when the message carries none
- *  (or a malformed one). */
-export function hasManagedProviderCoolingDiagnostic(message) {
-    const diagnostics = message?.diagnostics;
-    return Array.isArray(diagnostics) && diagnostics.some((diagnostic) => diagnostic?.type === MANAGED_PROVIDER_COOLING_DIAGNOSTIC);
-}
-export function extractCoolingDeadline(message) {
-    const diagnostics = message?.diagnostics;
-    if (!Array.isArray(diagnostics))
-        return undefined;
-    for (const diagnostic of diagnostics) {
-        if (diagnostic?.type !== MANAGED_PROVIDER_COOLING_DIAGNOSTIC)
-            continue;
-        const raw = diagnostic?.details?.rateLimitedUntil;
-        const value = typeof raw === "number" ? raw : Number(raw);
-        if (Number.isFinite(value) && value > 0)
-            return value;
-    }
-    return undefined;
-}
+var s=Object.defineProperty;var e=(i,t)=>s(i,"name",{value:t,configurable:!0});const a="crtr:managed-provider-cooling",d="managed_provider_cooling";class g extends Error{static{e(this,"ManagedProviderCoolingError")}code=d;rateLimitedUntil;constructor(t,r){super(t),this.name="ManagedProviderCoolingError",this.rateLimitedUntil=r}toDiagnostic(){return{type:a,timestamp:Date.now(),details:{rateLimitedUntil:this.rateLimitedUntil}}}}function l(i){const t=i?.diagnostics;return Array.isArray(t)&&t.some(r=>r?.type===a)}e(l,"hasManagedProviderCoolingDiagnostic");function u(i){const t=i?.diagnostics;if(Array.isArray(t))for(const r of t){if(r?.type!==a)continue;const n=r?.details?.rateLimitedUntil,o=typeof n=="number"?n:Number(n);if(Number.isFinite(o)&&o>0)return o}}e(u,"extractCoolingDeadline");export{d as MANAGED_PROVIDER_COOLING_CODE,a as MANAGED_PROVIDER_COOLING_DIAGNOSTIC,g as ManagedProviderCoolingError,u as extractCoolingDeadline,l as hasManagedProviderCoolingDiagnostic};

package/dist/core/runtime/memory.js

@@ -1,17 +1 @@
-// memory.ts — the node-local substrate document store.
-//
-// One scope lives here: node-local memory, a `memory/` directory of substrate
-// documents (.md files with typed frontmatter — kind, when-and-why-to-read,
-// surfaces, gate) inside a node's context dir; it dies with the node. User-global and project memory are scope-resolved stores — see
-// `scopeMemoryDir` in core/scope.ts.
-import { join } from 'node:path';
-// Import the pure path helper from paths.ts directly, NOT the canvas/index.js
-// barrel: the barrel re-exports `openDb`/canvas.ts accessors, so pulling it here
-// would drag canvas.db into the runtime graph of every pure-client CLI leaf that
-// resolves memory docs (e.g. `memory origin`, `sys context prompt-review`). Stage B-9.
-import { contextDir } from '../canvas/paths.js';
-/** The node-local memory directory in a node's context dir — holds substrate
- *  docs (.md files with kind/when/why frontmatter). */
-export function memoryDir(nodeId) {
-    return join(contextDir(nodeId), 'memory');
-}
+var t=Object.defineProperty;var o=(r,m)=>t(r,"name",{value:m,configurable:!0});import{join as i}from"node:path";import{contextDir as e}from"../canvas/paths.js";function c(r){return i(e(r),"memory")}o(c,"memoryDir");export{c as memoryDir};

package/dist/core/runtime/model-registry.js

@@ -1,13 +1 @@
-import { join } from 'node:path';
-import { ModelRegistry, ModelRuntime } from '@earendil-works/pi-coding-agent';
-import { PoolCredentialStore } from '../pool-credential-store.js';
-import { piAgentDir } from './package-health.js';
-/** Open pi's credential-backed model registry for runtime model resolution. */
-export async function openModelRegistry() {
-    const agentDir = piAgentDir();
-    const runtime = await ModelRuntime.create({
-        credentials: new PoolCredentialStore(join(agentDir, 'auth.json')),
-        modelsPath: join(agentDir, 'models.json'),
-    });
-    return new ModelRegistry(runtime);
-}
+var n=Object.defineProperty;var t=(o,e)=>n(o,"name",{value:e,configurable:!0});import{join as r}from"node:path";import{ModelRegistry as i,ModelRuntime as m}from"@earendil-works/pi-coding-agent";import{PoolCredentialStore as s}from"../pool-credential-store.js";import{piAgentDir as a}from"./package-health.js";async function u(){const o=a(),e=await m.create({credentials:new s(r(o,"auth.json")),modelsPath:r(o,"models.json")});return new i(e)}t(u,"openModelRegistry");export{u as openModelRegistry};

package/dist/core/runtime/model-selection.js

@@ -1,135 +1 @@
-// Two-axis model-ladder resolution primitives — the PURE half of the launch
-// recipe's model logic (provider × strength → concrete `model:thinking`).
-//
-// Split out of `launch.ts` so the CLI-side model wizard (`sys setup`) and other
-// pure consumers can resolve/normalize a provider×strength selection WITHOUT
-// dragging in `launch.ts`'s full revive-recipe module graph, which reaches
-// `core/canvas/index.js` (→ `openDb`) via `editorLabel`/`nodeEnv`. Everything
-// here depends only on `readMergedLaunchConfig` (fs/config, openDb-free) and the
-// static `types.ts` shapes, so its transitive runtime import graph is
-// canvas-state-store-free (spec §10 / Stage-C import checker). `launch.ts`
-// imports these back for its own resolution/fallback/picker logic.
-import { readMergedLaunchConfig } from '../config.js';
-/** Model-ladder resolution goes through `readMergedLaunchConfig` — the SAME
- *  project-stack > profile > user > builtin precedence `resolveKindConfig`
- *  already uses for `kinds` — so a project/profile override of `modelLadders`
- *  is honored identically to a kind override, instead of this file reading
- *  only user config. */
-export function modelLadders() {
-    return readMergedLaunchConfig().modelLadders;
-}
-/** Env var naming the DEFAULT provider for an UNqualified bare strength only.
- *  `CRTR_MODEL_PROVIDER=openai` (case-insensitive) makes a bare `strong` resolve
- *  on the OpenAI ladder; anything else defaults to Anthropic. A configured
- *  defaultProvider in config.json wins over this env. */
-export const OPENAI_PROVIDER_ENV = 'CRTR_MODEL_PROVIDER';
-export function defaultProvider(ladders = modelLadders()) {
-    const cfgProvider = ladders.defaultProvider;
-    if (cfgProvider === 'anthropic' || cfgProvider === 'openai')
-        return cfgProvider;
-    return (process.env[OPENAI_PROVIDER_ENV] ?? '').toLowerCase() === 'openai' ? 'openai' : 'anthropic';
-}
-/** Strength synonyms accepted from personas/callers. */
-export const STRENGTH_ALIASES = {
-    ultra: 'ultra',
-    strong: 'strong',
-    medium: 'medium',
-    light: 'light',
-    normal: 'medium',
-    weak: 'light',
-};
-// Every ladder provider — walked for resolution, strength-matching, the model
-// picker, and the Alt+M cycle. Both participate in automatic turn-time fallback.
-export const MODEL_PROVIDER_KEYS = ['anthropic', 'openai'];
-export const MODEL_STRENGTHS = ['ultra', 'strong', 'medium', 'light'];
-/** Canonical user-facing grammar for a durable model override. Help and
- *  recovery paths compose from this one phrase so accepted forms cannot drift. */
-export const MODEL_SPEC_FORMS = `an exact registered provider/id; provider/tier where provider is ${MODEL_PROVIDER_KEYS.join('|')} and tier is ${MODEL_STRENGTHS.join('|')}; ` +
-    `a bare tier (${MODEL_STRENGTHS.join('|')}); or a family alias (opus|sonnet|haiku)`;
-export const MODEL_SPEC_NEXT = `Pass ${MODEL_SPEC_FORMS}.`;
-/** The ladder providers a picker/cycle should OFFER: a provider column is kept
- *  only when at least one of its ladder cells names a runtime provider the
- *  caller reports as signed in (`isConfigured` — e.g. pool occupancy or
- *  `registry.getProviderAuthStatus(id).configured`). A user who never logged
- *  into Codex sees no openai column in settings and no openai rungs on Alt+M.
- *  When NO column qualifies (a fresh install before any login), every provider
- *  is returned: the model surfaces must stay reachable so the user can still
- *  inspect config and go sign in. Resolution (`normalizeModel` etc.) is
- *  deliberately NOT gated — an explicit `openai/strong` request still resolves
- *  and then fails/falls back through the normal auth-aware launch policy. */
-export function configuredLadderProviders(isConfigured, ladders = modelLadders()) {
-    const kept = MODEL_PROVIDER_KEYS.filter((provider) => MODEL_STRENGTHS.some((strength) => {
-        const cell = ladders[provider][strength];
-        const slash = cell.indexOf('/');
-        return slash > 0 && isConfigured(cell.slice(0, slash));
-    }));
-    return kept.length > 0 ? kept : [...MODEL_PROVIDER_KEYS];
-}
-export const THINKING_SUFFIXES = new Set(['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max']);
-export function parseModelSpec(spec) {
-    const i = spec.lastIndexOf(':');
-    if (i <= 0)
-        return { modelSpec: spec };
-    const suffix = spec.slice(i + 1);
-    if (!THINKING_SUFFIXES.has(suffix))
-        return { modelSpec: spec };
-    return { modelSpec: spec.slice(0, i), thinkingLevel: suffix };
-}
-export function isUnknownModel(model) {
-    return model?.provider === 'unknown' && model.id === 'unknown' && model.api === 'unknown';
-}
-export function stripThinkingSuffix(spec) {
-    const i = spec.lastIndexOf(':');
-    if (i <= 0)
-        return spec;
-    return THINKING_SUFFIXES.has(spec.slice(i + 1)) ? spec.slice(0, i) : spec;
-}
-/** Choose the provider×strength option an editor should highlight for an
- * existing model value. Portable tokens follow the exact provider rules used
- * by `normalizeModel`; concrete ladder refs map back to their configured cell,
- * ignoring a thinking suffix only after an exact match. An off-ladder concrete
- * ref retains a recognizable provider and starts at `ultra`; an unrecognized
- * value starts at `ultra` on the effective default provider. */
-export function inferPortableModelSelection(model, ladders = modelLadders()) {
-    const value = model?.trim() ?? '';
-    if (value !== '') {
-        const slash = value.indexOf('/');
-        if (slash > 0) {
-            const provider = value.slice(0, slash);
-            const strength = STRENGTH_ALIASES[value.slice(slash + 1)];
-            if ((provider === 'anthropic' || provider === 'openai') && strength !== undefined) {
-                return { provider, strength };
-            }
-        }
-        else {
-            const strength = STRENGTH_ALIASES[value];
-            if (strength !== undefined)
-                return { provider: defaultProvider(ladders), strength };
-            if (value === 'opus')
-                return { provider: 'anthropic', strength: 'strong' };
-            if (value === 'sonnet')
-                return { provider: 'anthropic', strength: 'medium' };
-            if (value === 'haiku')
-                return { provider: 'anthropic', strength: 'light' };
-        }
-        for (const provider of MODEL_PROVIDER_KEYS) {
-            for (const strength of MODEL_STRENGTHS) {
-                if (ladders[provider][strength] === value)
-                    return { provider, strength };
-            }
-        }
-        const comparable = stripThinkingSuffix(value);
-        for (const provider of MODEL_PROVIDER_KEYS) {
-            for (const strength of MODEL_STRENGTHS) {
-                if (stripThinkingSuffix(ladders[provider][strength]) === comparable)
-                    return { provider, strength };
-            }
-        }
-        const providerId = slash > 0 ? value.slice(0, slash) : '';
-        if (providerId === 'anthropic')
-            return { provider: 'anthropic', strength: 'ultra' };
-        if (providerId === 'openai' || providerId === 'openai-codex')
-            return { provider: 'openai', strength: 'ultra' };
-    }
-    return { provider: defaultProvider(ladders), strength: 'ultra' };
-}
+var m=Object.defineProperty;var i=(r,e)=>m(r,"name",{value:e,configurable:!0});import{readMergedLaunchConfig as x}from"../config.js";function p(){return x().modelLadders}i(p,"modelLadders");const v="CRTR_MODEL_PROVIDER";function d(r=p()){const e=r.defaultProvider;return e==="anthropic"||e==="openai"?e:(process.env[v]??"").toLowerCase()==="openai"?"openai":"anthropic"}i(d,"defaultProvider");const l={ultra:"ultra",strong:"strong",medium:"medium",light:"light",normal:"medium",weak:"light"},u=["anthropic","openai"],c=["ultra","strong","medium","light"],E=`an exact registered provider/id; provider/tier where provider is ${u.join("|")} and tier is ${c.join("|")}; a bare tier (${c.join("|")}); or a family alias (opus|sonnet|haiku)`,_=`Pass ${E}.`;function L(r,e=p()){const n=u.filter(s=>c.some(f=>{const a=e[s][f],t=a.indexOf("/");return t>0&&r(a.slice(0,t))}));return n.length>0?n:[...u]}i(L,"configuredLadderProviders");const h=new Set(["off","minimal","low","medium","high","xhigh","max"]);function P(r){const e=r.lastIndexOf(":");if(e<=0)return{modelSpec:r};const n=r.slice(e+1);return h.has(n)?{modelSpec:r.slice(0,e),thinkingLevel:n}:{modelSpec:r}}i(P,"parseModelSpec");function I(r){return r?.provider==="unknown"&&r.id==="unknown"&&r.api==="unknown"}i(I,"isUnknownModel");function g(r){const e=r.lastIndexOf(":");return e<=0?r:h.has(r.slice(e+1))?r.slice(0,e):r}i(g,"stripThinkingSuffix");function R(r,e=p()){const n=r?.trim()??"";if(n!==""){const s=n.indexOf("/");if(s>0){const t=n.slice(0,s),o=l[n.slice(s+1)];if((t==="anthropic"||t==="openai")&&o!==void 0)return{provider:t,strength:o}}else{const t=l[n];if(t!==void 0)return{provider:d(e),strength:t};if(n==="opus")return{provider:"anthropic",strength:"strong"};if(n==="sonnet")return{provider:"anthropic",strength:"medium"};if(n==="haiku")return{provider:"anthropic",strength:"light"}}for(const t of u)for(const o of c)if(e[t][o]===n)return{provider:t,strength:o};const f=g(n);for(const t of u)for(const o of c)if(g(e[t][o])===f)return{provider:t,strength:o};const a=s>0?n.slice(0,s):"";if(a==="anthropic")return{provider:"anthropic",strength:"ultra"};if(a==="openai"||a==="openai-codex")return{provider:"openai",strength:"ultra"}}return{provider:d(e),strength:"ultra"}}i(R,"inferPortableModelSelection");export{u as MODEL_PROVIDER_KEYS,E as MODEL_SPEC_FORMS,_ as MODEL_SPEC_NEXT,c as MODEL_STRENGTHS,v as OPENAI_PROVIDER_ENV,l as STRENGTH_ALIASES,h as THINKING_SUFFIXES,L as configuredLadderProviders,d as defaultProvider,R as inferPortableModelSelection,I as isUnknownModel,p as modelLadders,P as parseModelSpec,g as stripThinkingSuffix};

package/dist/core/runtime/model-swap.js

@@ -1,86 +1 @@
-// model-swap.ts — the engine behind `crtr node config`: swap a node's model
-// (and thus its provider) WITHOUT attaching a viewer, persisting the choice so
-// it survives revives. Two paths, chosen on broker liveness:
-//
-//   LIVE   — the node's broker is up (recorded pi_pid alive AND view.sock
-//            present): connect to view.sock as a controller, send `set_model`,
-//            await the ack. The broker commits model_override + launch.model
-//            through crtrd before broadcasting the resolved durable spec, so this
-//            path never writes or rereads the canvas row itself.
-//   DORMANT — no live broker: write the durable recipe directly (mirroring exactly
-//            the canonical recipe update) so the next revive picks it up.
-//
-// This complements the in-viewer `/model` slash command for the headless case.
-import { existsSync } from 'node:fs';
-import { getNode, updateNode } from '../canvas/index.js';
-import { viewSocketPath } from '../canvas/paths.js';
-import { isPidAlive } from '../canvas/pid.js';
-import { oneShotControllerRequest } from './broker-request.js';
-/** True when the node's broker engine is reachable: its recorded pid is alive
- *  AND its view.sock exists. Both are required — a dead pid with a stale socket,
- *  or a live pid mid-boot before it binds the socket, is NOT a live broker. */
-export function isBrokerLive(node) {
-    return isPidAlive(node.pi_pid) && existsSync(viewSocketPath(node.node_id));
-}
-/** Swap a LIVE node's model over its view.sock. Connects as a controller,
- *  sends `set_model`, and resolves with the broker-resolved durable spec from its
- *  `model_changed` frame. Rejects with the broker's message on an `error` frame (e.g.
- *  `no model matching '<spec>' in the registry`), on connect failure, or timeout.
- *  `pinned` is the durable-pin decision for this change, made by the CALLER from
- *  the RAW pre-normalize token (`spec` here is already normalizeModel-resolved,
- *  so deriving the pin from `spec`'s shape would wrongly re-pin a deliberately
- *  chosen bare tier that happens to byte-equal a ladder cell) — sent explicitly
- *  on the frame so the broker persists that decision rather than re-inferring it
- *  from the resolved spec. */
-export function setModelLive(nodeId, spec, pinned) {
-    // `set_model` carries no frame id, so the ack is matched on `for` alone.
-    let resolvedSpec;
-    return oneShotControllerRequest({
-        nodeId,
-        what: 'the model switch',
-        ackFor: 'set_model',
-        frame: () => ({ type: 'set_model', model: spec, pinned }),
-        observe: (frame) => {
-            if (frame.type === 'model_changed' && frame.spec !== null)
-                resolvedSpec = frame.spec;
-        },
-        result: () => resolvedSpec ?? spec,
-    });
-}
-/** Persist a model choice into a DORMANT node's durable recipe — mirrors exactly
- *  what the broker's persistModelChoice writes on a live switch: `model_override`
- *  (so polymorphs preserve it via buildLaunchSpec), `launch.model`, and its
- *  exact-consult marker (the recipe buildPiArgv replays on revive). `spec` must
- *  already be a concrete `provider/id` (normalizeModel maps tiers/aliases; a bare
- *  substring cannot resolve offline).
- *  `pinned` is the durable-pin decision for this change — decided by the CALLER
- *  from the RAW pre-normalize token, never re-derived here from `spec`'s shape
- *  (a concrete `spec` always reads as "pinned", which would wrongly re-pin a
- *  deliberately chosen bare tier that happens to byte-equal a ladder cell). */
-export function updateModelRecipe(meta, spec, pinnedOverride, userSelected) {
-    const launch = meta.launch === undefined
-        ? undefined
-        : userSelected
-            ? (() => {
-                const { modelIntent: _modelIntent, env, ...rest } = meta.launch;
-                const { CRTR_MODEL_INTENT: _intentEnv, ...remainingEnv } = env;
-                return {
-                    ...rest,
-                    model: spec,
-                    modelExact: true,
-                    ...(pinnedOverride !== undefined ? { modelProviderPinned: pinnedOverride } : {}),
-                    env: remainingEnv,
-                };
-            })()
-            : {
-                ...meta.launch,
-                model: spec,
-                ...(pinnedOverride !== undefined ? { modelProviderPinned: pinnedOverride } : {}),
-            };
-    return updateNode(meta.node_id, { model_override: spec, ...(launch !== undefined ? { launch } : {}) });
-}
-export function persistDormantModel(nodeId, spec, pinned) {
-    const meta = getNode(nodeId);
-    if (meta !== null)
-        updateModelRecipe(meta, spec, pinned, true);
-}
+var m=Object.defineProperty;var n=(e,o)=>m(e,"name",{value:o,configurable:!0});import{existsSync as c}from"node:fs";import{getNode as s,updateNode as f}from"../canvas/index.js";import{viewSocketPath as p}from"../canvas/paths.js";import{isPidAlive as _}from"../canvas/pid.js";import{oneShotControllerRequest as a}from"./broker-request.js";function g(e){return _(e.pi_pid)&&c(p(e.node_id))}n(g,"isBrokerLive");function k(e,o,t){let d;return a({nodeId:e,what:"the model switch",ackFor:"set_model",frame:n(()=>({type:"set_model",model:o,pinned:t}),"frame"),observe:n(r=>{r.type==="model_changed"&&r.spec!==null&&(d=r.spec)},"observe"),result:n(()=>d??o,"result")})}n(k,"setModelLive");function h(e,o,t,d){const r=e.launch===void 0?void 0:d?(()=>{const{modelIntent:v,env:i,...l}=e.launch,{CRTR_MODEL_INTENT:x,...u}=i;return{...l,model:o,modelExact:!0,...t!==void 0?{modelProviderPinned:t}:{},env:u}})():{...e.launch,model:o,...t!==void 0?{modelProviderPinned:t}:{}};return f(e.node_id,{model_override:o,...r!==void 0?{launch:r}:{}})}n(h,"updateModelRecipe");function w(e,o,t){const d=s(e);d!==null&&h(d,o,t,!0)}n(w,"persistDormantModel");export{g as isBrokerLive,w as persistDormantModel,k as setModelLive,h as updateModelRecipe};