@north-light/crouter 0.3.317 → 0.3.319

package/dist/daemon/api/handlers/messages.js

@@ -1,506 +1,2 @@
-// Message handler (spec §6.2). `POST /v1/nodes/{id}/messages` delivers an
-// inbox message now (201) or fresh-revives with no inbox entry. `{id}` is the
-// target node.
-import { join } from 'node:path';
-import { claimNodeMail, acknowledgeNodeMail } from '../../../core/canvas/deliveries.js';
-import { nodeMailEntry } from '../../../core/feed/inbox.js';
-import { enqueueNodeMail, cancelPendingNodeMail } from '../../../core/feed/messages.js';
-import { reviveNode } from '../../../core/runtime/revive.js';
-import { BrokerUnreachableError } from '../../../core/runtime/broker-request.js';
-import { isBrokerLive } from '../../../core/runtime/model-swap.js';
-import { deliverLive, interruptLive } from '../../../core/runtime/interactive-deliver.js';
-import { isProfilePaused } from '../../../core/profiles/manifest.js';
-import { getNode, withFreshTerminalGuard } from '../../../core/canvas/canvas.js';
-import { reportsDir } from '../../../core/canvas/paths.js';
-import { withCanvasWrite } from '../../../core/canvas/db.js';
-import { cancelCronsOnWake } from '../../../core/canvas/crons.js';
-import { assertNotFinalized, assertFinalizedForReopen, commitReopenResident, } from '../../../core/runtime/reopen.js';
-import { writeOutputSchema } from '../../../core/runtime/structured-output.js';
-import { appendSituationalContext, formatSituationalProse } from '../../../core/runtime/situational-context.js';
-import { formatDataCard } from '../../../shared/generated-context.js';
-import { hasNoNaturalCycle } from '../../../core/runtime/revive-all.js';
-import { recordPendingParkActivity } from '../../park-pending.js';
-import { wantsExecution } from '../../reconcilers/node-lifecycle/wants-execution.js';
-import { hasFreshGroundState } from '../../../core/runtime/revive.js';
-import { notFound, usage } from '../../../core/errors.js';
-import { InputError } from '../../../core/io.js';
-import { ApiError } from '../../../api/index.js';
-// POST /v1/nodes/{id}/messages
-const TIERS = ['critical', 'urgent', 'normal', 'deferred'];
-/** Validate + narrow one caller-supplied runtime card. A bare kind is crouter's
- *  own closed vocabulary, so a caller must namespace: no product can shadow a
- *  core kind, and the parser's decode rule keys on exactly this property. */
-function parseCardRequest(value, field) {
-    if (typeof value !== 'object' || value === null || Array.isArray(value)) {
-        throw usage(`${field} must be an object { kind, facts?, body? }`);
-    }
-    const raw = value;
-    const kind = raw['kind'];
-    if (typeof kind !== 'string' || kind.trim() === '')
-        throw usage(`${field}.kind is required`);
-    if (!kind.includes(':'))
-        throw usage(`${field}.kind must be namespaced (contain ':'): ${kind}`);
-    const card = { kind };
-    const facts = raw['facts'];
-    if (facts !== undefined) {
-        if (typeof facts !== 'object' || facts === null || Array.isArray(facts)) {
-            throw usage(`${field}.facts must be an object of string or number values`);
-        }
-        const values = {};
-        for (const [name, fact] of Object.entries(facts)) {
-            if (typeof fact !== 'string' && typeof fact !== 'number') {
-                throw usage(`${field}.facts.${name} must be a string or number`);
-            }
-            values[name] = fact;
-        }
-        card.facts = values;
-    }
-    const body = raw['body'];
-    if (body !== undefined) {
-        if (typeof body !== 'string')
-            throw usage(`${field}.body must be a string`);
-        card.body = body;
-    }
-    return card;
-}
-/** Render a validated card. `formatDataCard` escapes the body exactly once —
- *  this is the ONLY escape on the path — and rejects a fact name that cannot be
- *  an XML attribute, which is caller input and so a 400, not a 500. */
-function renderCard(card, field) {
-    try {
-        return formatDataCard(card.kind, card.facts ?? {}, card.body ?? '');
-    }
-    catch (err) {
-        throw usage(`${field}: ${err instanceof Error ? err.message : String(err)}`);
-    }
-}
-/** Validate + narrow the send-message body (spec §6.2). */
-function parseSendBody(body) {
-    if (typeof body !== 'object' || body === null) {
-        throw usage('a message requires a JSON body { body, tier?, fresh? }');
-    }
-    const b = body;
-    const text = b['body'];
-    const fresh = b['fresh'] === true;
-    const tierRaw = b['tier'];
-    const situational = b['situational_context'];
-    const outputSchema = b['output_schema'];
-    const hasBody = typeof text === 'string' && text.trim() !== '';
-    const hasSituational = typeof situational === 'string' && situational.trim() !== '';
-    const hasSchema = typeof outputSchema === 'string' && outputSchema.trim() !== '';
-    const situationalCardRaw = b['situational_card'];
-    const contextCardsRaw = b['context_cards'];
-    const situationalCard = situationalCardRaw === undefined
-        ? undefined
-        : parseCardRequest(situationalCardRaw, 'situational_card');
-    if (contextCardsRaw !== undefined && !Array.isArray(contextCardsRaw)) {
-        throw usage('context_cards must be an array of { kind, facts?, body? }');
-    }
-    const contextCards = contextCardsRaw?.map((card, index) => parseCardRequest(card, `context_cards[${index}]`));
-    // The sidecar is singular, so the card form and the prose form are one slot.
-    if (situationalCard !== undefined && typeof situational === 'string' && situational !== '') {
-        throw usage('situational_card and situational_context are mutually exclusive');
-    }
-    const hasCards = situationalCard !== undefined || (contextCards !== undefined && contextCards.length > 0);
-    // A body is required unless this is a fresh revive, a context-only update,
-    // or a one-off output-schema request.
-    if (!fresh && !hasBody && !hasSituational && !hasSchema && !hasCards) {
-        throw usage('a message requires a non-empty body (or fresh: true, situational_context, a runtime card, or output_schema)');
-    }
-    // A fresh revive appends no inbox entry, so a one-shot card would have no
-    // carrier. The sidecar card survives the revive through the bearings.
-    if (fresh && contextCards !== undefined && contextCards.length > 0) {
-        throw usage('context_cards cannot ride a fresh revive (no inbox entry carries them)');
-    }
-    if (tierRaw !== undefined && !TIERS.includes(tierRaw)) {
-        throw usage(`invalid tier: ${String(tierRaw)} (expected critical|urgent|normal|deferred)`);
-    }
-    const out = { body: typeof text === 'string' ? text : '' };
-    if (tierRaw !== undefined)
-        out.tier = tierRaw;
-    if (fresh)
-        out.fresh = true;
-    if (b['reopen'] === true)
-        out.reopen = true;
-    if (typeof situational === 'string')
-        out.situational_context = situational;
-    if (situationalCard !== undefined)
-        out.situational_card = situationalCard;
-    if (contextCards !== undefined)
-        out.context_cards = contextCards;
-    if (typeof outputSchema === 'string')
-        out.output_schema = outputSchema;
-    if (typeof b['from'] === 'string')
-        out.from = b['from'];
-    const delivery = b['delivery'];
-    if (delivery !== undefined && delivery !== 'interactive') {
-        throw usage(`invalid delivery: ${String(delivery)} (expected interactive)`);
-    }
-    if (delivery === 'interactive') {
-        // Interactive delivery is a live-conversation send: a plain immediate body,
-        // nothing that only makes sense on the durable path.
-        // Runtime cards ARE accepted here: a card-bearing send is an ordinary human
-        // send that happens to carry context, and the live deliver frame places the
-        // cards ahead of the body in one turn (D11).
-        if (fresh || out.situational_context !== undefined || out.output_schema !== undefined) {
-            throw usage('interactive delivery supports a body, runtime cards, and reopen only (no fresh, situational_context, or output_schema)');
-        }
-        if (!hasBody)
-            throw usage('interactive delivery requires a non-empty body');
-        if (out.tier === 'deferred')
-            throw usage('interactive delivery cannot be deferred');
-        out.delivery = 'interactive';
-    }
-    return out;
-}
-/** Parse a raw JSON-schema string to an object, mapping a parse failure to a
- *  400 (mirrors handleCreate's output_schema handling). */
-function parseSchema(raw) {
-    try {
-        return JSON.parse(raw);
-    }
-    catch {
-        throw usage('output_schema must be a JSON schema string');
-    }
-}
-function label(text) {
-    return text.split('\n')[0].slice(0, 120);
-}
-function previousFinalReportCard(nodeId, finalReport) {
-    if (finalReport === null)
-        return '';
-    const path = join(reportsDir(nodeId), finalReport);
-    return formatDataCard('reopen-final-report', { path }, 'This node previously completed work. Read this final report before acting on the new instruction.');
-}
-/** The fail-loud rejection for a deferred immediate message aimed at a
- *  target with no natural cycle ahead of it (done/canceled/finalized). Thrown as
- *  an InputError so `toErrorBody` round-trips the FULL structured payload
- *  (code+message+next) into `ApiError.details`, and the CLI's shared
- *  `apiErrorToCliError` reconstructs the SPECIFIC `deferred_no_natural_cycle`
- *  code byte-for-byte — a plain `ApiError(422,…)` would drop it (422 maps back
- *  to the generic `unprocessable`), which the pre-P1 CLI leaf never emitted. */
-function deferredNoNaturalCycle(id, status) {
-    return new InputError({
-        error: 'deferred_no_natural_cycle',
-        message: `${id} is ${status} with no natural next cycle ahead of it — a deferred message would never be delivered.`,
-        next: 'Use --tier normal, urgent, or critical to wake it now, or --reopen (with a body or --fresh) to re-task it first.',
-    });
-}
-/** A fresh revive re-reads the node's goal/roadmap from disk; with neither, it
- *  would resume amnesiac. Rejected fail-loud (422) BEFORE any revive/arm — the
- *  CLI's old pure pre-check, relocated behind the API so `--fresh` parity holds. */
-function assertRecoverableForFresh(id) {
-    if (hasFreshGroundState(id))
-        return;
-    // ApiError (not a plain literal) so its message survives `toErrorBody`.
-    throw new ApiError(422, 'unprocessable', `node ${id} has no goal/roadmap on disk — a fresh revive would resume amnesiac.`);
-}
-async function handleMessage(ctx) {
-    const id = ctx.params['id'];
-    const meta = getNode(id);
-    if (meta === null)
-        throw notFound(`unknown node: ${id}`, { received: id });
-    const req = parseSendBody(ctx.body);
-    const tier = (req.tier ?? 'normal');
-    // A paused profile takes no new work through either delivery route: the
-    // interactive route hands the body to the live broker instead of queueing it,
-    // and a wake is a revive by another name. So a paused target always takes the
-    // durable path and its entry waits, at every tier, for `crtr profile resume`
-    // (the live broker's watcher holds it; a dormant one is not woken).
-    const paused = isProfilePaused(meta.profile_id);
-    const from = req.from ?? null;
-    const hasBody = req.body.trim() !== '';
-    // One sidecar slot: the caller's rendered card, or prose rendered as one.
-    const sidecar = req.situational_card !== undefined
-        ? renderCard(req.situational_card, 'situational_card')
-        : req.situational_context !== undefined
-            ? formatSituationalProse(req.situational_context.trim())
-            : '';
-    const hasSidecar = sidecar !== '';
-    const oneShotCards = (req.context_cards ?? []).map((card, index) => renderCard(card, `context_cards[${index}]`));
-    const schema = req.output_schema !== undefined && req.output_schema.trim() !== ''
-        ? parseSchema(req.output_schema)
-        : null;
-    // Fresh revive: no inbox entry, resume:false (spec §7.7).
-    // Mirrors the CLI's immediate --fresh: validate the finalization latch
-    // (--reopen) and upsert the situational sidecar BEFORE the revive, so the
-    // fresh kickoff picks up the update. The goal/roadmap recoverable-state guard
-    // stays a pure CLI-side pre-check.
-    if (req.fresh) {
-        const expectedFinalReport = req.reopen ? assertFinalizedForReopen(id) : null;
-        if (!req.reopen)
-            assertNotFinalized(id);
-        assertRecoverableForFresh(id);
-        if (hasSidecar)
-            appendSituationalContext(id, sidecar);
-        if (req.reopen)
-            commitReopenResident(id, expectedFinalReport);
-        // A fresh revive appends no inbox entry, so nothing survives a freeze for
-        // the daemon to act on later: at the cap the caller is told, not ignored.
-        const result = await reviveNode(id, { resume: false, capacity: 'refuse' });
-        const body = {
-            node_id: id,
-            delivered: false,
-            revived: result.launch !== undefined,
-        };
-        return { status: 201, body };
-    }
-    // Interactive delivery has the same finalization doorway as durable mail:
-    // a live broker remains reachable briefly after its final claim, but must not
-    // accept a mandate it cannot finalize. `--reopen` is the deliberate exception.
-    if (req.delivery === 'interactive' && !req.reopen)
-        assertNotFinalized(id);
-    // An interactive reopen commits before even choosing its engine-or-inbox
-    // route. A live transport race then falls back with this same committed state.
-    let reopenCommitted = false;
-    let previousFinalCard = '';
-    if (req.delivery === 'interactive' && req.reopen) {
-        previousFinalCard = previousFinalReportCard(id, commitReopenResident(id));
-        reopenCommitted = true;
-    }
-    // --- Interactive delivery: route via the LIVE broker's serialized frame
-    //     loop (broker routes idle→prompt / streaming→steer itself) instead of
-    //     the durable inbox — no watcher latency, and send/stop share one
-    //     ordering. A mid-revive race (liveness said live, connection refused)
-    //     falls back to the durable path below; a genuinely dormant target skips
-    //     straight there (append + revive, watcher delivers post-boot). ---
-    if (req.delivery === 'interactive' && !paused && isBrokerLive(meta)) {
-        try {
-            if (hasSidecar)
-                appendSituationalContext(id, sidecar);
-            await deliverLive(id, req.body, {
-                cards: [
-                    ...(previousFinalCard === '' ? [] : [previousFinalCard]),
-                    ...(hasSidecar ? [sidecar] : []),
-                    ...oneShotCards,
-                ],
-                // Same authorship the durable route would record for this send, so a
-                // reader cannot tell live from inbox delivery by the stamp.
-                origin: from === 'human'
-                    ? { type: 'human' }
-                    : {
-                        type: 'runtime',
-                        kind: 'inbox',
-                        entries: [{ ...(from === null ? {} : { from }), kind: 'message', tier }],
-                    },
-            });
-            cancelCronsOnWake(id);
-            const body = {
-                node_id: id,
-                delivered: true,
-                revived: false,
-                delivered_via: 'engine',
-            };
-            return { status: 201, body };
-        }
-        catch (err) {
-            if (!(err instanceof BrokerUnreachableError))
-                throw err;
-            // fall through to the durable inbox path
-        }
-    }
-    // --- Immediate delivery (spec §7.7) — pre-delivery side effects first,
-    //     then the reopen commit, then exactly one inbox append. Once the commit
-    //     succeeds, an append failure makes no further state change. ---
-    const deliverImmediate = () => {
-        if (!req.reopen)
-            assertNotFinalized(id);
-        if (schema !== null)
-            writeOutputSchema(id, 'oneoff', schema);
-        if (hasSidecar)
-            appendSituationalContext(id, sidecar);
-        if (req.reopen && !reopenCommitted) {
-            previousFinalCard = previousFinalReportCard(id, commitReopenResident(id));
-        }
-        const cards = [
-            ...(previousFinalCard === '' ? [] : [previousFinalCard]),
-            ...oneShotCards,
-        ];
-        const cardData = cards.length > 0 ? { cards } : {};
-        if (hasBody || schema !== null) {
-            const messageBody = hasBody
-                ? req.body
-                : 'A one-off structured-output request has been granted. Submit a result matching the requested schema with `crtr push result` before you stop; after it is accepted, continue normally.';
-            return enqueueNodeMail(id, {
-                senderNodeId: from,
-                urgency: tier,
-                wake: 1,
-                kind: 'message',
-                label: label(messageBody),
-                bodyJson: { body: messageBody, ...(hasSidecar ? { situational: true } : {}), ...cardData },
-            });
-        }
-        // Context-only: a hidden wake marker excluded from the visible digest. Its
-        // one-shot cards have no visible delivery to ride, so the watcher's context
-        // channel carries them.
-        return enqueueNodeMail(id, {
-            senderNodeId: from,
-            urgency: tier,
-            wake: 1,
-            kind: 'message',
-            label: hasSidecar ? '(ambient context updated)' : '(context delivered)',
-            bodyJson: { ...(hasSidecar ? { situational: true } : {}), situationalOnly: true, ...cardData },
-        });
-    };
-    // Deferred guard: a done/canceled/finalized target has no natural
-    // cycle ahead of it, so a deferred entry would sit unseen forever — reject
-    // fail-loud BEFORE any side effect, atomically with the append (the read and
-    // the write share one canvas write-lock). Non-deferred tiers deliver directly.
-    //
-    // `--reopen` does NOT exempt a target from this guard. It commits the target
-    // resident and retracts the finalization latch, but it never moves `status`
-    // out of `done` — so a reopened target is still one `hasNoNaturalCycle` says
-    // nothing will ever bring back on its own, and a deferred entry appended to it
-    // would wait forever. Reopen widens the WAKE-CAPABLE tiers to a finalized
-    // target; deferred stays rejected, and the rejection names those tiers.
-    const deliver = () => {
-        if (tier === 'deferred') {
-            const outcome = withFreshTerminalGuard(id, hasNoNaturalCycle, deliverImmediate);
-            if (outcome.kind === 'missing')
-                throw notFound(`unknown node: ${id}`, { received: id });
-            if (outcome.kind === 'terminal')
-                throw deferredNoNaturalCycle(id, outcome.status);
-            return outcome.result;
-        }
-        return deliverImmediate();
-    };
-    const entry = deliver();
-    // Wake-capable durable mail wins the same park-completion boundary as a live
-    // broker input. A completion that won before this append is handled by the
-    // fresh row read below, which revives the now-parked node.
-    if (entry.urgency !== 'deferred')
-        withCanvasWrite(() => recordPendingParkActivity(id));
-    const current = getNode(id);
-    if (current === null)
-        throw notFound(`unknown node: ${id}`, { received: id });
-    // Deferred mail normally waits for a natural cycle, but a frozen row already
-    // owes a thaw; consume its deadline when that durable future wake arrives.
-    if (meta.frozen_at !== null)
-        cancelCronsOnWake(id);
-    // A wake-capable entry for an active or idle target is admitted by the
-    // lifecycle tick. Reopen delivery preserves this handler's synchronous wake
-    // authority; a terminal-lifecycle row also needs it because it has no later
-    // natural cycle to consume the entry.
-    let revived = false;
-    let frozen = false;
-    const needsSynchronousWake = req.reopen || current.lifecycle === 'terminal' || !wantsExecution(current);
-    if (needsSynchronousWake && entry.urgency !== 'deferred' && !paused && !isBrokerLive(current)) {
-        try {
-            // The entry is already durable, so a wake denied for capacity is only
-            // delayed: the row freezes and the tick relaunches it — at which point
-            // the inbox watcher delivers this entry as it always would.
-            const result = await reviveNode(id, { resume: true, capacity: 'freeze' });
-            revived = result.launch !== undefined;
-            frozen = result.outcome === 'frozen';
-        }
-        catch {
-            /* best-effort wake — the entry is durably appended regardless */
-        }
-    }
-    const body = {
-        node_id: id,
-        delivered: true,
-        revived,
-        ...(frozen ? { not_revived_reason: 'capacity_frozen' } : {}),
-        delivered_at: entry.createdAt,
-        ...(entry.urgency === tier ? {} : { delivered_tier: entry.urgency }),
-        ...(req.delivery === 'interactive' ? { delivered_via: 'inbox' } : {}),
-    };
-    return { status: 201, body };
-}
-// POST /v1/nodes/{id}/interrupt
-/** The human Esc, first-class. Cancel pending undelivered human sends FIRST,
- *  then abort the live turn — in that order, so a watcher injection racing
- *  between the two is caught by the abort right behind it. A dormant target is
- *  NEVER revived (outcome 'idle'). */
-async function handleInterrupt(ctx) {
-    const id = ctx.params['id'];
-    const meta = getNode(id);
-    if (meta === null)
-        throw notFound(`unknown node: ${id}`, { received: id });
-    // 1. Boot-window close: mark undelivered human-send inbox entries canceled so
-    //    a send riding the durable path (dormant target / mid-revive fallback) is
-    //    never injected after the Esc — the watcher skips canceled entries.
-    const canceled = cancelPendingNodeMail(id, { senderNodeId: 'human', kind: 'message' });
-    // 2. Abort whatever is live. The broker acks once processed; on its single
-    //    frame loop that ack also implies every earlier-accepted deliver was
-    //    already routed, so a just-started turn is caught, not missed.
-    let abortedTurn = false;
-    if (isBrokerLive(meta)) {
-        try {
-            const outcome = await interruptLive(id);
-            abortedTurn = outcome !== 'idle';
-        }
-        catch (err) {
-            if (!(err instanceof BrokerUnreachableError))
-                throw err;
-            // Mid-revive race: nothing reachable to abort. The cancel markers above
-            // already cover the boot window, so the interrupt still holds.
-        }
-    }
-    const body = {
-        node_id: id,
-        outcome: abortedTurn ? 'aborted_turn' : canceled.length > 0 ? 'canceled_pending' : 'idle',
-        aborted_turn: abortedTurn,
-        canceled_pending: canceled.length,
-    };
-    return { status: 200, body };
-}
-function mailBody(ctx) {
-    if (typeof ctx.body !== 'object' || ctx.body === null || Array.isArray(ctx.body))
-        throw usage('mail requires an object body');
-    const body = ctx.body;
-    if (typeof body['execution_id'] !== 'string' || body['execution_id'].trim() === '')
-        throw usage('execution_id is required');
-    return body;
-}
-function handleMailClaim(ctx) {
-    const body = mailBody(ctx);
-    const channel = body['channel'];
-    if (channel !== 'wake' && channel !== 'passive')
-        throw usage('channel must be wake or passive');
-    const result = claimNodeMail(ctx.params['id'], body['execution_id'], channel);
-    const projected = {
-        action: result.action,
-        deliveries: result.deliveries.map((delivery) => ({
-            delivery_id: delivery.deliveryId,
-            attempts: delivery.attempts,
-            handoff: delivery.handoff,
-            entry: nodeMailEntry(delivery),
-        })),
-    };
-    return { status: 200, body: projected };
-}
-function handleMailAcknowledge(ctx) {
-    const body = mailBody(ctx);
-    if (!Array.isArray(body['deliveries']))
-        throw usage('deliveries must be an array');
-    const receipts = body['deliveries'].map((value) => {
-        if (typeof value !== 'object' || value === null || Array.isArray(value))
-            throw usage('each delivery must be an object');
-        const receipt = value;
-        if (typeof receipt['delivery_id'] !== 'string' || receipt['delivery_id'] === '')
-            throw usage('delivery_id is required');
-        if (!Number.isSafeInteger(receipt['attempts']) || receipt['attempts'] < 1)
-            throw usage('attempts must be a positive integer');
-        if (receipt['disposition'] !== 'acknowledged' && receipt['disposition'] !== 'released')
-            throw usage('disposition must be acknowledged or released');
-        return { delivery_id: receipt['delivery_id'], attempts: receipt['attempts'], disposition: receipt['disposition'] };
-    });
-    const result = acknowledgeNodeMail(ctx.params['id'], body['execution_id'], receipts.map((receipt) => ({
-        deliveryId: receipt.delivery_id, attempts: receipt.attempts, disposition: receipt.disposition,
-    })));
-    const projected = {
-        action: result.action,
-        results: result.results.map((result) => ({ delivery_id: result.deliveryId, outcome: result.outcome })),
-    };
-    return { status: 200, body: projected };
-}
-export const brokerMailRoutes = [
-    { method: 'POST', pattern: '/v1/nodes/:id/mail/claim', handler: handleMailClaim },
-    { method: 'POST', pattern: '/v1/nodes/:id/mail/acknowledge', handler: handleMailAcknowledge },
-];
-export const messageRoutes = [
-    { method: 'POST', pattern: '/v1/nodes/:id/messages', handler: handleMessage },
-    { method: 'POST', pattern: '/v1/nodes/:id/interrupt', handler: handleInterrupt },
-];
+var E=Object.defineProperty;var c=(r,e)=>E(r,"name",{value:e,configurable:!0});import{join as J}from"node:path";import{claimNodeMail as W,acknowledgeNodeMail as D}from"../../../core/canvas/deliveries.js";import{nodeMailEntry as L}from"../../../core/feed/inbox.js";import{enqueueNodeMail as q,cancelPendingNodeMail as G}from"../../../core/feed/messages.js";import{reviveNode as F}from"../../../core/runtime/revive.js";import{BrokerUnreachableError as I}from"../../../core/runtime/broker-request.js";import{isBrokerLive as $}from"../../../core/runtime/model-swap.js";import{deliverLive as U,interruptLive as H}from"../../../core/runtime/interactive-deliver.js";import{isProfilePaused as K}from"../../../core/profiles/manifest.js";import{getNode as C,withFreshTerminalGuard as Q}from"../../../core/canvas/canvas.js";import{reportsDir as V}from"../../../core/canvas/paths.js";import{withCanvasWrite as X}from"../../../core/canvas/db.js";import{cancelCronsOnWake as O}from"../../../core/canvas/crons.js";import{assertNotFinalized as N,assertFinalizedForReopen as Y,commitReopenResident as A}from"../../../core/runtime/reopen.js";import{writeOutputSchema as Z}from"../../../core/runtime/structured-output.js";import{appendSituationalContext as j,formatSituationalProse as ee}from"../../../core/runtime/situational-context.js";import{formatDataCard as P}from"../../../shared/generated-context.js";import{hasNoNaturalCycle as te}from"../../../core/runtime/revive-all.js";import{recordPendingParkActivity as re}from"../../park-pending.js";import{wantsExecution as ne}from"../../reconcilers/node-lifecycle/wants-execution.js";import{hasFreshGroundState as oe}from"../../../core/runtime/revive.js";import{notFound as x,usage as a}from"../../../core/errors.js";import{InputError as ie}from"../../../core/io.js";import{ApiError as ae}from"../../../api/index.js";const se=["critical","urgent","normal","deferred"];function M(r,e){if(typeof r!="object"||r===null||Array.isArray(r))throw a(`${e} must be an object { kind, facts?, body? }`);const o=r,t=o.kind;if(typeof t!="string"||t.trim()==="")throw a(`${e}.kind is required`);if(!t.includes(":"))throw a(`${e}.kind must be namespaced (contain ':'): ${t}`);const s={kind:t},n=o.facts;if(n!==void 0){if(typeof n!="object"||n===null||Array.isArray(n))throw a(`${e}.facts must be an object of string or number values`);const y={};for(const[m,f]of Object.entries(n)){if(typeof f!="string"&&typeof f!="number")throw a(`${e}.facts.${m} must be a string or number`);y[m]=f}s.facts=y}const i=o.body;if(i!==void 0){if(typeof i!="string")throw a(`${e}.body must be a string`);s.body=i}return s}c(M,"parseCardRequest");function T(r,e){try{return P(r.kind,r.facts??{},r.body??"")}catch(o){throw a(`${e}: ${o instanceof Error?o.message:String(o)}`)}}c(T,"renderCard");function de(r){if(typeof r!="object"||r===null)throw a("a message requires a JSON body { body, tier?, fresh? }");const e=r,o=e.body,t=e.fresh===!0,s=e.tier,n=e.situational_context,i=e.output_schema,y=typeof o=="string"&&o.trim()!=="",m=typeof n=="string"&&n.trim()!=="",f=typeof i=="string"&&i.trim()!=="",g=e.situational_card,h=e.context_cards,b=g===void 0?void 0:M(g,"situational_card");if(h!==void 0&&!Array.isArray(h))throw a("context_cards must be an array of { kind, facts?, body? }");const l=h?.map((v,k)=>M(v,`context_cards[${k}]`));if(b!==void 0&&typeof n=="string"&&n!=="")throw a("situational_card and situational_context are mutually exclusive");const _=b!==void 0||l!==void 0&&l.length>0;if(!t&&!y&&!m&&!f&&!_)throw a("a message requires a non-empty body (or fresh: true, situational_context, a runtime card, or output_schema)");if(t&&l!==void 0&&l.length>0)throw a("context_cards cannot ride a fresh revive (no inbox entry carries them)");if(s!==void 0&&!se.includes(s))throw a(`invalid tier: ${String(s)} (expected critical|urgent|normal|deferred)`);const u={body:typeof o=="string"?o:""};s!==void 0&&(u.tier=s),t&&(u.fresh=!0),e.reopen===!0&&(u.reopen=!0),typeof n=="string"&&(u.situational_context=n),b!==void 0&&(u.situational_card=b),l!==void 0&&(u.context_cards=l),typeof i=="string"&&(u.output_schema=i),typeof e.from=="string"&&(u.from=e.from);const p=e.delivery;if(p!==void 0&&p!=="interactive")throw a(`invalid delivery: ${String(p)} (expected interactive)`);if(p==="interactive"){if(t||u.situational_context!==void 0||u.output_schema!==void 0)throw a("interactive delivery supports a body, runtime cards, and reopen only (no fresh, situational_context, or output_schema)");if(!y)throw a("interactive delivery requires a non-empty body");if(u.tier==="deferred")throw a("interactive delivery cannot be deferred");u.delivery="interactive"}return u}c(de,"parseSendBody");function ce(r){try{return JSON.parse(r)}catch{throw a("output_schema must be a JSON schema string")}}c(ce,"parseSchema");function ue(r){return r.split(`
+`)[0].slice(0,120)}c(ue,"label");function z(r,e){if(e===null)return"";const o=J(V(r),e);return P("reopen-final-report",{path:o},"This node previously completed work. Read this final report before acting on the new instruction.")}c(z,"previousFinalReportCard");function fe(r,e){return new ie({error:"deferred_no_natural_cycle",message:`${r} is ${e} with no natural next cycle ahead of it \u2014 a deferred message would never be delivered.`,next:"Use --tier normal, urgent, or critical to wake it now, or --reopen (with a body or --fresh) to re-task it first."})}c(fe,"deferredNoNaturalCycle");function le(r){if(!oe(r))throw new ae(422,"unprocessable",`node ${r} has no goal/roadmap on disk \u2014 a fresh revive would resume amnesiac.`)}c(le,"assertRecoverableForFresh");async function me(r){const e=r.params.id,o=C(e);if(o===null)throw x(`unknown node: ${e}`,{received:e});const t=de(r.body),s=t.tier??"normal",n=K(o.profile_id),i=t.from??null,y=t.body.trim()!=="",m=t.situational_card!==void 0?T(t.situational_card,"situational_card"):t.situational_context!==void 0?ee(t.situational_context.trim()):"",f=m!=="",g=(t.context_cards??[]).map((d,w)=>T(d,`context_cards[${w}]`)),h=t.output_schema!==void 0&&t.output_schema.trim()!==""?ce(t.output_schema):null;if(t.fresh){const d=t.reopen?Y(e):null;t.reopen||N(e),le(e),f&&j(e,m),t.reopen&&A(e,d);const w=await F(e,{resume:!1,capacity:"refuse"});return{status:201,body:{node_id:e,delivered:!1,revived:w.launch!==void 0}}}t.delivery==="interactive"&&!t.reopen&&N(e);let b=!1,l="";if(t.delivery==="interactive"&&t.reopen&&(l=z(e,A(e)),b=!0),t.delivery==="interactive"&&!n&&$(o))try{return f&&j(e,m),await U(e,t.body,{cards:[...l===""?[]:[l],...f?[m]:[],...g],origin:i==="human"?{type:"human"}:{type:"runtime",kind:"inbox",entries:[{...i===null?{}:{from:i},kind:"message",tier:s}]}}),O(e),{status:201,body:{node_id:e,delivered:!0,revived:!1,delivered_via:"engine"}}}catch(d){if(!(d instanceof I))throw d}const _=c(()=>{t.reopen||N(e),h!==null&&Z(e,"oneoff",h),f&&j(e,m),t.reopen&&!b&&(l=z(e,A(e)));const d=[...l===""?[]:[l],...g],w=d.length>0?{cards:d}:{};if(y||h!==null){const S=y?t.body:"A one-off structured-output request has been granted. Submit a result matching the requested schema with `crtr push result` before you stop; after it is accepted, continue normally.";return q(e,{senderNodeId:i,urgency:s,wake:1,kind:"message",label:ue(S),bodyJson:{body:S,...f?{situational:!0}:{},...w}})}return q(e,{senderNodeId:i,urgency:s,wake:1,kind:"message",label:f?"(ambient context updated)":"(context delivered)",bodyJson:{...f?{situational:!0}:{},situationalOnly:!0,...w}})},"deliverImmediate"),p=c(()=>{if(s==="deferred"){const d=Q(e,te,_);if(d.kind==="missing")throw x(`unknown node: ${e}`,{received:e});if(d.kind==="terminal")throw fe(e,d.status);return d.result}return _()},"deliver")();p.urgency!=="deferred"&&X(()=>re(e));const v=C(e);if(v===null)throw x(`unknown node: ${e}`,{received:e});o.frozen_at!==null&&O(e);let k=!1,R=!1;if((t.reopen||v.lifecycle==="terminal"||!ne(v))&&p.urgency!=="deferred"&&!n&&!$(v))try{const d=await F(e,{resume:!0,capacity:"freeze"});k=d.launch!==void 0,R=d.outcome==="frozen"}catch{}return{status:201,body:{node_id:e,delivered:!0,revived:k,...R?{not_revived_reason:"capacity_frozen"}:{},delivered_at:p.createdAt,...p.urgency===s?{}:{delivered_tier:p.urgency},...t.delivery==="interactive"?{delivered_via:"inbox"}:{}}}}c(me,"handleMessage");async function pe(r){const e=r.params.id,o=C(e);if(o===null)throw x(`unknown node: ${e}`,{received:e});const t=G(e,{senderNodeId:"human",kind:"message"});let s=!1;if($(o))try{s=await H(e)!=="idle"}catch(i){if(!(i instanceof I))throw i}return{status:200,body:{node_id:e,outcome:s?"aborted_turn":t.length>0?"canceled_pending":"idle",aborted_turn:s,canceled_pending:t.length}}}c(pe,"handleInterrupt");function B(r){if(typeof r.body!="object"||r.body===null||Array.isArray(r.body))throw a("mail requires an object body");const e=r.body;if(typeof e.execution_id!="string"||e.execution_id.trim()==="")throw a("execution_id is required");return e}c(B,"mailBody");function ye(r){const e=B(r),o=e.channel;if(o!=="wake"&&o!=="passive")throw a("channel must be wake or passive");const t=W(r.params.id,e.execution_id,o);return{status:200,body:{action:t.action,deliveries:t.deliveries.map(n=>({delivery_id:n.deliveryId,attempts:n.attempts,handoff:n.handoff,entry:L(n)}))}}}c(ye,"handleMailClaim");function he(r){const e=B(r);if(!Array.isArray(e.deliveries))throw a("deliveries must be an array");const o=e.deliveries.map(n=>{if(typeof n!="object"||n===null||Array.isArray(n))throw a("each delivery must be an object");const i=n;if(typeof i.delivery_id!="string"||i.delivery_id==="")throw a("delivery_id is required");if(!Number.isSafeInteger(i.attempts)||i.attempts<1)throw a("attempts must be a positive integer");if(i.disposition!=="acknowledged"&&i.disposition!=="released")throw a("disposition must be acknowledged or released");return{delivery_id:i.delivery_id,attempts:i.attempts,disposition:i.disposition}}),t=D(r.params.id,e.execution_id,o.map(n=>({deliveryId:n.delivery_id,attempts:n.attempts,disposition:n.disposition})));return{status:200,body:{action:t.action,results:t.results.map(n=>({delivery_id:n.deliveryId,outcome:n.outcome}))}}}c(he,"handleMailAcknowledge");const Le=[{method:"POST",pattern:"/v1/nodes/:id/mail/claim",handler:ye},{method:"POST",pattern:"/v1/nodes/:id/mail/acknowledge",handler:he}],Ge=[{method:"POST",pattern:"/v1/nodes/:id/messages",handler:me},{method:"POST",pattern:"/v1/nodes/:id/interrupt",handler:pe}];export{Le as brokerMailRoutes,Ge as messageRoutes};

package/dist/daemon/api/handlers/model-config.js

@@ -1,44 +1 @@
-import { ApiError } from '../../../api/errors.js';
-import { validateCoreModelConfig, replaceCoreModelConfig } from '../../../core/model-config.js';
-import { parseModelSpec } from '../../../core/model-routes.js';
-import { openModelRegistry } from '../../../core/runtime/model-registry.js';
-function parseRequest(body) {
-    if (body === null || typeof body !== 'object' || Array.isArray(body))
-        throw new ApiError(400, 'invalid_request', 'model config must be an object');
-    const request = body;
-    if (typeof request.config_version !== 'string' || request.config_version.trim() === '') {
-        throw new ApiError(400, 'invalid_request', 'config_version must be a non-empty string');
-    }
-    try {
-        return { configVersion: request.config_version, config: validateCoreModelConfig(request) };
-    }
-    catch (error) {
-        throw new ApiError(400, 'invalid_request', error instanceof Error ? error.message : String(error));
-    }
-}
-/** Validate route refs against this image's baked descriptor catalog before disk changes. */
-async function validateCatalog(config) {
-    const registry = await openModelRegistry();
-    for (const route of Object.values(config.modelRoutes)) {
-        for (const spec of Object.values(route.models)) {
-            const model = parseModelSpec(spec);
-            if (model === undefined || registry.find(model.providerId, model.modelId) === undefined) {
-                throw new ApiError(422, 'unprocessable', `route ref ${spec} is absent from the baked model registry`);
-            }
-        }
-    }
-}
-async function handlePut(ctx) {
-    const { configVersion, config } = parseRequest(ctx.body);
-    await validateCatalog(config);
-    try {
-        replaceCoreModelConfig(config);
-    }
-    catch (error) {
-        throw new ApiError(500, 'model_config_write_failed', error instanceof Error ? error.message : String(error));
-    }
-    return { status: 200, body: { config_version: configVersion, delivered: true } };
-}
-export const modelConfigRoutes = [
-    { method: 'PUT', pattern: '/v1/model-config', handler: handlePut },
-];
+var f=Object.defineProperty;var i=(e,o)=>f(e,"name",{value:o,configurable:!0});import{ApiError as t}from"../../../api/errors.js";import{validateCoreModelConfig as a,replaceCoreModelConfig as c}from"../../../core/model-config.js";import{parseModelSpec as d}from"../../../core/model-routes.js";import{openModelRegistry as l}from"../../../core/runtime/model-registry.js";function g(e){if(e===null||typeof e!="object"||Array.isArray(e))throw new t(400,"invalid_request","model config must be an object");const o=e;if(typeof o.config_version!="string"||o.config_version.trim()==="")throw new t(400,"invalid_request","config_version must be a non-empty string");try{return{configVersion:o.config_version,config:a(o)}}catch(r){throw new t(400,"invalid_request",r instanceof Error?r.message:String(r))}}i(g,"parseRequest");async function m(e){const o=await l();for(const r of Object.values(e.modelRoutes))for(const n of Object.values(r.models)){const s=d(n);if(s===void 0||o.find(s.providerId,s.modelId)===void 0)throw new t(422,"unprocessable",`route ref ${n} is absent from the baked model registry`)}}i(m,"validateCatalog");async function u(e){const{configVersion:o,config:r}=g(e.body);await m(r);try{c(r)}catch(n){throw new t(500,"model_config_write_failed",n instanceof Error?n.message:String(n))}return{status:200,body:{config_version:o,delivered:!0}}}i(u,"handlePut");const _=[{method:"PUT",pattern:"/v1/model-config",handler:u}];export{_ as modelConfigRoutes};