@north-light/crouter 0.3.317 → 0.3.319

package/dist/daemon/messaging/node-message.js

@@ -1,99 +1 @@
-import { getNode } from '../../core/canvas/canvas.js';
-import { cancelCronsOnWake } from '../../core/canvas/crons.js';
-import { withFreshTerminalGuard } from '../../core/canvas/canvas.js';
-import { enqueueNodeMail } from '../../core/feed/messages.js';
-import { BrokerUnreachableError } from '../../core/runtime/broker-request.js';
-import { deliverLive } from '../../core/runtime/interactive-deliver.js';
-import { isBrokerLive } from '../../core/runtime/model-swap.js';
-import { reviveNode } from '../../core/runtime/revive.js';
-import { hasNoNaturalCycle } from '../../core/runtime/revive-all.js';
-import { ReviewOperationError } from '../../core/review/types.js';
-import { formatCard } from '../../shared/generated-context.js';
-import { isProfilePaused } from '../../core/profiles/manifest.js';
-function deliveryUnroutable(nodeId, reason) {
-    throw new ReviewOperationError('delivery_unroutable', reason === 'origin_missing' ? 'message target was not found' : 'message target has no natural delivery cycle', { node_id: nodeId, reason });
-}
-/** Run a fresh terminal guard before any delivery path, including live engine sends. */
-function guardRoutable(nodeId, body) {
-    const outcome = withFreshTerminalGuard(nodeId, hasNoNaturalCycle, body);
-    if (outcome.kind === 'missing')
-        deliveryUnroutable(nodeId, 'origin_missing');
-    if (outcome.kind === 'terminal')
-        deliveryUnroutable(nodeId, 'no_natural_cycle');
-    return outcome.result;
-}
-/**
- * Deliver one daemon-originated node message. Interactive messages use the live
- * broker when available; every other successful path is durable node mail.
- */
-export async function deliverNodeMessage(args) {
-    // A live interactive delivery has no durable append to guard, so establish
-    // routability first. The durable fallback below takes the guard again to
-    // close the race before its append.
-    guardRoutable(args.node_id, () => undefined);
-    let target = getNode(args.node_id);
-    if (target === null)
-        deliveryUnroutable(args.node_id, 'origin_missing');
-    if (args.mode === 'interactive' && !isProfilePaused(target.profile_id) && isBrokerLive(target)) {
-        try {
-            // Inbox delivery supplies the raw body as an entry in its outer inbox
-            // card; only live delivery needs this message's own envelope.
-            await deliverLive(args.node_id, args.runtime === undefined
-                ? args.body
-                : formatCard(args.runtime.kind, args.runtime.facts, args.body), {
-                // The authorship the durable fallback below would record for this
-                // same send, so the two routes stamp identically.
-                origin: args.from === 'human'
-                    ? { type: 'human' }
-                    : {
-                        type: 'runtime',
-                        kind: 'inbox',
-                        entries: [{
-                                ...(args.from == null ? {} : { from: args.from }),
-                                kind: 'message',
-                                tier: 'normal',
-                            }],
-                    },
-            });
-            // The broker acknowledgement is asynchronous to the SQLite guard. Recheck
-            // before reporting an engine receipt so a final that committed during the
-            // request is not represented as a routable delivery.
-            guardRoutable(args.node_id, () => undefined);
-            cancelCronsOnWake(args.node_id);
-            return { entry_id: null, via: 'engine', revived: false };
-        }
-        catch (error) {
-            if (!(error instanceof BrokerUnreachableError))
-                throw error;
-        }
-    }
-    const entry = guardRoutable(args.node_id, () => enqueueNodeMail(args.node_id, {
-        senderNodeId: args.from ?? null,
-        kind: 'message',
-        label: args.label,
-        bodyJson: { ...args.data, body: args.body },
-        urgency: args.mode === 'quiet' ? 'deferred' : 'normal',
-        wake: 1,
-    }));
-    let revived = false;
-    let reason;
-    if (entry.urgency !== 'deferred') {
-        target = getNode(args.node_id);
-        if (target === null)
-            deliveryUnroutable(args.node_id, 'origin_missing');
-        if (!isBrokerLive(target)) {
-            try {
-                // Mail is durable, so a wake denied for capacity waits for a slot
-                // rather than being lost: the row freezes and the tick relaunches it.
-                const result = await reviveNode(args.node_id, { resume: true, capacity: 'freeze' });
-                revived = result.launch !== undefined;
-                if (result.outcome === 'frozen')
-                    reason = 'capacity_frozen';
-            }
-            catch {
-                // The durable entry remains authoritative; one wake attempt is enough.
-            }
-        }
-    }
-    return { entry_id: entry.messageId, via: 'inbox', revived, ...(reason === undefined ? {} : { reason }) };
-}
+var a=Object.defineProperty;var r=(e,i)=>a(e,"name",{value:i,configurable:!0});import{getNode as l}from"../../core/canvas/canvas.js";import{cancelCronsOnWake as c}from"../../core/canvas/crons.js";import{withFreshTerminalGuard as y}from"../../core/canvas/canvas.js";import{enqueueNodeMail as _}from"../../core/feed/messages.js";import{BrokerUnreachableError as s}from"../../core/runtime/broker-request.js";import{deliverLive as p}from"../../core/runtime/interactive-deliver.js";import{isBrokerLive as u}from"../../core/runtime/model-swap.js";import{reviveNode as v}from"../../core/runtime/revive.js";import{hasNoNaturalCycle as b}from"../../core/runtime/revive-all.js";import{ReviewOperationError as h}from"../../core/review/types.js";import{formatCard as k}from"../../shared/generated-context.js";import{isProfilePaused as w}from"../../core/profiles/manifest.js";function t(e,i){throw new h("delivery_unroutable",i==="origin_missing"?"message target was not found":"message target has no natural delivery cycle",{node_id:e,reason:i})}r(t,"deliveryUnroutable");function m(e,i){const n=y(e,b,i);return n.kind==="missing"&&t(e,"origin_missing"),n.kind==="terminal"&&t(e,"no_natural_cycle"),n.result}r(m,"guardRoutable");async function F(e){m(e.node_id,()=>{});let i=l(e.node_id);if(i===null&&t(e.node_id,"origin_missing"),e.mode==="interactive"&&!w(i.profile_id)&&u(i))try{return await p(e.node_id,e.runtime===void 0?e.body:k(e.runtime.kind,e.runtime.facts,e.body),{origin:e.from==="human"?{type:"human"}:{type:"runtime",kind:"inbox",entries:[{...e.from==null?{}:{from:e.from},kind:"message",tier:"normal"}]}}),m(e.node_id,()=>{}),c(e.node_id),{entry_id:null,via:"engine",revived:!1}}catch(o){if(!(o instanceof s))throw o}const n=m(e.node_id,()=>_(e.node_id,{senderNodeId:e.from??null,kind:"message",label:e.label,bodyJson:{...e.data,body:e.body},urgency:e.mode==="quiet"?"deferred":"normal",wake:1}));let f=!1,d;if(n.urgency!=="deferred"&&(i=l(e.node_id),i===null&&t(e.node_id,"origin_missing"),!u(i)))try{const o=await v(e.node_id,{resume:!0,capacity:"freeze"});f=o.launch!==void 0,o.outcome==="frozen"&&(d="capacity_frozen")}catch{}return{entry_id:n.messageId,via:"inbox",revived:f,...d===void 0?{}:{reason:d}}}r(F,"deliverNodeMessage");export{F as deliverNodeMessage};

package/dist/daemon/park-activity.js

@@ -1,30 +1 @@
-import { statSync } from 'node:fs';
-import { emitEvent } from '../core/events/emit.js';
-import { hasWakeMailSince } from '../core/canvas/deliveries.js';
-import { readLiveTurn } from '../core/canvas/recovery.js';
-import { parkEvent } from './reconcilers/live-obligation.js';
-/** A main-session write after parking was armed is durable evidence of live
- * input even when the turn has since settled and the viewer detached. */
-export function mainSessionActivitySince(sessionFile, startedAt) {
-    if (sessionFile === null || sessionFile === undefined)
-        return false;
-    try {
-        return statSync(sessionFile).mtimeMs >= startedAt;
-    }
-    catch (error) {
-        if (error.code === 'ENOENT')
-            return false;
-        emitEvent({ level: 'warn', event: 'broker.park.session_activity_scan_failed', error });
-        return true;
-    }
-}
-/** One verdict shared by normal completion and grace expiry. A broker records
- * accepted live input against the process-local marker before it drives Pi, so
- * the verdict cannot race a viewer, live delivery, or durable wake. */
-export function shouldParkAfterSummary(nodeId, node, pending) {
-    return !pending.activity
-        && readLiveTurn(nodeId)?.busy !== true
-        && !mainSessionActivitySince(node.pi_session_file, pending.startedAt)
-        && !hasWakeMailSince(nodeId, pending.startedAt)
-        && parkEvent(nodeId, node.lifecycle) === 'park';
-}
+var a=Object.defineProperty;var i=(r,t)=>a(r,"name",{value:t,configurable:!0});import{statSync as f}from"node:fs";import{emitEvent as m}from"../core/events/emit.js";import{hasWakeMailSince as n}from"../core/canvas/deliveries.js";import{readLiveTurn as o}from"../core/canvas/recovery.js";import{parkEvent as u}from"./reconcilers/live-obligation.js";function c(r,t){if(r==null)return!1;try{return f(r).mtimeMs>=t}catch(e){return e.code==="ENOENT"?!1:(m({level:"warn",event:"broker.park.session_activity_scan_failed",error:e}),!0)}}i(c,"mainSessionActivitySince");function S(r,t,e){return!e.activity&&o(r)?.busy!==!0&&!c(t.pi_session_file,e.startedAt)&&!n(r,e.startedAt)&&u(r,t.lifecycle)==="park"}i(S,"shouldParkAfterSummary");export{c as mainSessionActivitySince,S as shouldParkAfterSummary};

package/dist/daemon/park-pending.js

@@ -1,52 +1 @@
-// park-pending.ts — the in-flight parking turns, one map keyed by node id.
-//
-// When the unattended clock expires on a live resident, the daemon does not
-// terminalize it: it asks the still-live engine for one summary turn and hands
-// the terminal decision to broker settlement. This module is the only record
-// that a given node's next settlement means "park", read by exactly two
-// collaborators inside crtrd — the supervision reconciler (which armed it, and
-// which enforces its abort conditions and grace) and the broker-settle handler
-// (which consumes it).
-//
-// The pending park is PROCESS-LOCAL on purpose. The park clock and the pending
-// park are the same authority and must die together: if crtrd is replaced
-// mid-turn, the successor has no clock reading and no pending park, the node
-// simply stays live, and its 15-minute clock restarts. Nothing is inconsistent
-// and nothing needs repair. A durable in-flight flag would instead need its own
-// reconciliation on every daemon start to avoid stranding a node that never got
-// its prompt.
-/** node id → the pending parking turn and any accepted main-engine input. */
-const pending = new Map();
-/** Arm a pending park for `nodeId`. The caller delivers the parking prompt. */
-export function beginPendingPark(nodeId, now) {
-    pending.set(nodeId, { startedAt: now, activity: false });
-}
-/** Record main-engine input accepted while the isolated turn is in flight. */
-export function recordPendingParkActivity(nodeId) {
-    const marker = pending.get(nodeId);
-    if (marker === undefined)
-        return false;
-    marker.activity = true;
-    return true;
-}
-export function isPendingPark(nodeId) {
-    return pending.has(nodeId);
-}
-/** When the pending park was armed, or undefined when none is armed. */
-export function pendingParkStartedAt(nodeId) {
-    return pending.get(nodeId)?.startedAt;
-}
-/** Delete-and-report the pending marker. Both the supervision tick and the
- * settle handler run on the daemon thread with no await between their check and
- * this call, so exactly one of them ever enacts a given park. */
-export function consumePendingPark(nodeId) {
-    const marker = pending.get(nodeId);
-    if (marker !== undefined)
-        pending.delete(nodeId);
-    return marker;
-}
-/** Every node with a parking turn in flight — the reconciler's sweep drops the
- *  ones whose broker has left the fleet. */
-export function pendingParkIds() {
-    return Array.from(pending.keys());
-}
+var i=Object.defineProperty;var n=(e,t)=>i(e,"name",{value:t,configurable:!0});const r=new Map;function o(e,t){r.set(e,{startedAt:t,activity:!1})}n(o,"beginPendingPark");function u(e){const t=r.get(e);return t===void 0?!1:(t.activity=!0,!0)}n(u,"recordPendingParkActivity");function d(e){return r.has(e)}n(d,"isPendingPark");function c(e){return r.get(e)?.startedAt}n(c,"pendingParkStartedAt");function f(e){const t=r.get(e);return t!==void 0&&r.delete(e),t}n(f,"consumePendingPark");function s(){return Array.from(r.keys())}n(s,"pendingParkIds");export{o as beginPendingPark,f as consumePendingPark,d as isPendingPark,s as pendingParkIds,c as pendingParkStartedAt,u as recordPendingParkActivity};

package/dist/daemon/pidfile.js

@@ -1,37 +1 @@
-// pidfile.ts — the lean crtrd pidfile + liveness helpers, split out of crtrd.ts
-// so the CLI's daemon front door (`daemon/manage.ts` → `ensureDaemon`) can
-// resolve "is the daemon up?" WITHOUT importing crtrd.ts, whose module graph
-// pulls the entire canvas state store (`core/canvas/index.js` → `openDb`). A
-// `crtr` CLI process asking whether crtrd is running must not, by that question
-// alone, open canvas.db — this module keeps that path fs/process-only.
-//
-// PURITY: Node built-ins + `core/canvas/paths.ts` (pure path builder) + the
-// db-free `core/canvas/pid.ts` liveness probe. Never `openDb` / crtrd.ts / any
-// canvas state accessor. crtrd.ts imports + re-exports these to preserve its
-// historical export surface (tests, `commands/sys/daemon.ts`).
-import { existsSync, readFileSync } from 'node:fs';
-import { join } from 'node:path';
-import { crtrHome } from '../core/canvas/paths.js';
-import { isPidAlive } from '../core/canvas/pid.js';
-import { envPidfileOverride } from '../shared/env.js';
-// Re-exported so `isPidAlive` stays reachable from the daemon layer's public
-// surface (crtrd.ts already re-exports it; callers may reach it either way).
-export { isPidAlive };
-/** Absolute path to crtrd's pidfile. `CRTR_PIDFILE` overrides for tests. */
-export function pidfilePath() {
-    return envPidfileOverride() ?? join(crtrHome(), 'crtrd.pid');
-}
-/** Read the pid stored in the pidfile, or null if absent / malformed. */
-export function readPidfile() {
-    const p = pidfilePath();
-    if (!existsSync(p))
-        return null;
-    const raw = readFileSync(p, 'utf8').trim();
-    const n = Number(raw);
-    return Number.isFinite(n) && n > 0 ? n : null;
-}
-/** True when a crtrd process is already running (pidfile exists + pid alive). */
-export function isDaemonRunning() {
-    const pid = readPidfile();
-    return pid !== null && isPidAlive(pid);
-}
+var o=Object.defineProperty;var i=(r,n)=>o(r,"name",{value:n,configurable:!0});import{existsSync as m,readFileSync as u}from"node:fs";import{join as f}from"node:path";import{crtrHome as p}from"../core/canvas/paths.js";import{isPidAlive as e}from"../core/canvas/pid.js";import{envPidfileOverride as c}from"../shared/env.js";function l(){return c()??f(p(),"crtrd.pid")}i(l,"pidfilePath");function d(){const r=l();if(!m(r))return null;const n=u(r,"utf8").trim(),t=Number(n);return Number.isFinite(t)&&t>0?t:null}i(d,"readPidfile");function y(){const r=d();return r!==null&&e(r)}i(y,"isDaemonRunning");export{y as isDaemonRunning,e as isPidAlive,l as pidfilePath,d as readPidfile};

package/dist/daemon/profile-delete.js

@@ -1,306 +1 @@
-import { existsSync, readFileSync, readdirSync, rmSync } from 'node:fs';
-import { join } from 'node:path';
-import { cronIdsForProfileDeletion, cronIdsForProfileDetach, deleteCronsForProfile, deleteNodes, getNode, getRow, globalizeCronsForProfile, listNodesByProfile, nodesRoot, reviewDir, } from '../core/canvas/index.js';
-import { usage } from '../core/errors.js';
-import { emitEvent } from '../core/events/emit.js';
-import { clearDefaultProfileId, defaultProfileDirs, } from '../core/profiles/default-binding.js';
-import { reserveProfileDeletion } from '../core/profiles/deletion-reservation.js';
-import { deleteProfile, loadProfileManifest, } from '../core/profiles/manifest.js';
-import { deleteReviewsByOriginNodes, reviewIdsByOriginNodes, } from '../core/review/store.js';
-import { boundFleet } from '../core/runtime/fleet.js';
-import { headlessBrokerHost } from '../core/runtime/host.js';
-import { transition } from '../core/runtime/lifecycle.js';
-import { tearDownNode } from '../core/runtime/placement.js';
-import { reshapeNode } from '../core/runtime/promote.js';
-import { reviveNode } from '../core/runtime/revive.js';
-const SELF_DELETE_GRACE_MS = 1_000;
-const TICKET_FILES = new Set([
-    'page.json',
-    'page.tsx',
-    'page.html',
-    'page.js',
-    'review.json',
-    'response.json',
-    'progress.json',
-    'claim.json',
-    'reply-route.json',
-    'feedback-comments.json',
-    'feedback.json',
-    '.ticket-lock',
-]);
-const pending = new Map();
-function requestObject(body) {
-    if (typeof body !== 'object' || body === null || Array.isArray(body)) {
-        throw usage('profile deletion requires a JSON request body', {
-            error: 'force_required',
-            message: 'profile deletion requires --force',
-            next: 'Re-run `crtr profile delete <profile> --force` after reviewing its effects.',
-        });
-    }
-    return body;
-}
-function validateRequest(body) {
-    const value = requestObject(body);
-    if (value['force'] !== true) {
-        throw usage('profile deletion requires --force', {
-            error: 'force_required',
-            message: 'profile deletion requires --force',
-            next: 'Re-run `crtr profile delete <profile> --force` after reviewing its effects.',
-        });
-    }
-    if (value['detach'] !== undefined && typeof value['detach'] !== 'boolean') {
-        throw usage('detach must be a boolean', {
-            error: 'invalid_detach',
-            message: 'detach must be a boolean',
-            next: 'Use --detach as a presence-only flag, or omit it.',
-        });
-    }
-    const caller = value['caller_node_id'];
-    if (caller !== undefined && caller !== null && (typeof caller !== 'string' || caller === '')) {
-        throw usage('caller_node_id must be a nonempty string or null');
-    }
-    return {
-        force: true,
-        ...(value['detach'] === true ? { detach: true } : {}),
-        ...(caller === undefined ? {} : { caller_node_id: caller }),
-    };
-}
-function manifestSourceNodeId(path) {
-    if (!existsSync(path))
-        return null;
-    try {
-        const parsed = JSON.parse(readFileSync(path, 'utf8'));
-        return typeof parsed.source?.nodeId === 'string' && parsed.source.nodeId !== ''
-            ? parsed.source.nodeId
-            : null;
-    }
-    catch {
-        return null;
-    }
-}
-function ticketCleanupForNodes(nodeIds) {
-    const wanted = new Set(nodeIds);
-    const root = nodesRoot();
-    if (wanted.size === 0 || !existsSync(root))
-        return [];
-    const cleanup = [];
-    for (const dirent of readdirSync(root, { withFileTypes: true })) {
-        if (!dirent.isDirectory())
-            continue;
-        const dir = join(root, dirent.name);
-        const sourceIds = [
-            manifestSourceNodeId(join(dir, 'page.json')),
-            manifestSourceNodeId(join(dir, 'review.json')),
-        ];
-        if (!sourceIds.some((sourceId) => sourceId !== null && wanted.has(sourceId)))
-            continue;
-        cleanup.push({
-            dir,
-            wholeDirectory: wanted.has(dirent.name) || getRow(dirent.name) === null,
-        });
-    }
-    return cleanup.sort((a, b) => a.dir.localeCompare(b.dir));
-}
-function isTicketOwnedResidue(name) {
-    if (TICKET_FILES.has(name))
-        return true;
-    for (const base of TICKET_FILES) {
-        if (name.startsWith(`${base}.`) && (name.endsWith('.tmp') || name.endsWith('.lock'))) {
-            return true;
-        }
-    }
-    return false;
-}
-function cleanTickets(tickets) {
-    let cleaned = 0;
-    for (const ticket of tickets) {
-        if (!existsSync(ticket.dir))
-            continue;
-        if (ticket.wholeDirectory) {
-            rmSync(ticket.dir, { recursive: true, force: true });
-            cleaned += 1;
-            continue;
-        }
-        for (const dirent of readdirSync(ticket.dir, { withFileTypes: true })) {
-            if (!isTicketOwnedResidue(dirent.name))
-                continue;
-            rmSync(join(ticket.dir, dirent.name), { recursive: true, force: true });
-        }
-        cleaned += 1;
-    }
-    return cleaned;
-}
-function openWorktreeError(nodes) {
-    const blocked = nodes
-        .filter((node) => node.managed_worktree?.state === 'open')
-        .map((node) => ({ node_id: node.node_id, path: node.managed_worktree.path }));
-    if (blocked.length === 0)
-        return null;
-    const message = `profile deletion is blocked by ${blocked.length} open managed worktree${blocked.length === 1 ? '' : 's'}`;
-    return usage(message, {
-        error: 'open_managed_worktree',
-        message,
-        nodes: blocked,
-        next: `Close ${blocked.map(({ node_id }) => node_id).join(', ')} with \`crtr node worktree close <node>\`, then retry.`,
-    });
-}
-function prepareDeletion(entry, request) {
-    const nodes = listNodesByProfile(entry.profileId);
-    const blocked = openWorktreeError(nodes);
-    if (blocked !== null)
-        throw blocked;
-    const nodeIds = nodes.map(({ node_id }) => node_id);
-    const mode = request.detach === true ? 'detached' : 'deleted';
-    return {
-        entry,
-        mode,
-        nodes,
-        nodeIds,
-        tickets: mode === 'deleted' ? ticketCleanupForNodes(nodeIds) : [],
-        cronIds: mode === 'deleted'
-            ? cronIdsForProfileDeletion(entry.profileId, nodeIds)
-            : cronIdsForProfileDetach(entry.profileId),
-        reviewIds: mode === 'deleted' ? reviewIdsByOriginNodes(nodeIds) : [],
-        defaultDirs: defaultProfileDirs(entry.profileId),
-    };
-}
-function assertDeletionPlanPreconditions(plan) {
-    const currentNodes = plan.nodeIds.flatMap((nodeId) => {
-        const node = getNode(nodeId);
-        return node === null ? [] : [node];
-    });
-    const blocked = openWorktreeError(currentNodes);
-    if (blocked !== null)
-        throw blocked;
-}
-function resultForPlan(plan) {
-    return {
-        profile_id: plan.entry.profileId,
-        name: plan.entry.manifest.name,
-        mode: plan.mode,
-        nodes: plan.nodeIds.length,
-        crons: plan.cronIds.length,
-        tickets: plan.tickets.length,
-        reviews: plan.reviewIds.length,
-        default_pins: plan.defaultDirs.length,
-    };
-}
-async function detachProfile(plan) {
-    assertDeletionPlanPreconditions(plan);
-    const existingNodeIds = plan.nodeIds.filter((nodeId) => getNode(nodeId) !== null);
-    const fleet = boundFleet();
-    const live = existingNodeIds.flatMap((nodeId) => {
-        const entry = fleet.get(nodeId);
-        return entry === undefined ? [] : [{ nodeId, exited: entry.handle.exited }];
-    });
-    const restartNodeIds = [];
-    for (const { nodeId } of live) {
-        const current = getNode(nodeId);
-        if (current?.status === 'active' || current?.status === 'idle') {
-            transition(nodeId, 'release');
-            restartNodeIds.push(nodeId);
-        }
-        headlessBrokerHost.teardown(nodeId);
-    }
-    await Promise.all(live.map(({ exited }) => exited));
-    const detachedNodeIds = [];
-    for (const nodeId of existingNodeIds) {
-        if (getNode(nodeId) === null)
-            continue;
-        reshapeNode(nodeId, { profileId: null });
-        detachedNodeIds.push(nodeId);
-    }
-    const cronIds = globalizeCronsForProfile(plan.entry.profileId);
-    const defaultDirs = clearDefaultProfileId(plan.entry.profileId);
-    deleteProfile(plan.entry.profileId);
-    const detached = new Set(detachedNodeIds);
-    for (const nodeId of restartNodeIds) {
-        if (detached.has(nodeId))
-            await reviveNode(nodeId, { resume: true, recovery: true, capacity: 'freeze' });
-    }
-    return {
-        ...resultForPlan(plan),
-        nodes: detachedNodeIds.length,
-        crons: cronIds.length,
-        default_pins: defaultDirs.length,
-    };
-}
-function hardDeleteProfile(plan) {
-    assertDeletionPlanPreconditions(plan);
-    const cronIds = deleteCronsForProfile(plan.entry.profileId, plan.nodeIds);
-    for (const nodeId of plan.nodeIds) {
-        headlessBrokerHost.teardown(nodeId);
-        tearDownNode(nodeId);
-    }
-    const reviewIds = deleteReviewsByOriginNodes(plan.nodeIds);
-    for (const reviewId of reviewIds)
-        rmSync(reviewDir(reviewId), { recursive: true, force: true });
-    const tickets = cleanTickets(plan.tickets);
-    const deletedNodeIds = deleteNodes(plan.nodeIds);
-    const defaultDirs = clearDefaultProfileId(plan.entry.profileId);
-    deleteProfile(plan.entry.profileId);
-    return {
-        ...resultForPlan(plan),
-        nodes: deletedNodeIds.length,
-        crons: cronIds.length,
-        tickets,
-        reviews: reviewIds.length,
-        default_pins: defaultDirs.length,
-    };
-}
-async function executePlan(plan) {
-    return plan.mode === 'detached' ? detachProfile(plan) : hardDeleteProfile(plan);
-}
-function scheduleSelfDeletion(plan, releaseReservation) {
-    const result = {
-        ...resultForPlan(plan),
-        accepted: true,
-        grace_ms: SELF_DELETE_GRACE_MS,
-    };
-    pending.set(plan.entry.profileId, { result });
-    setTimeout(() => {
-        void (async () => {
-            try {
-                await executePlan(plan);
-            }
-            catch (error) {
-                emitEvent({
-                    level: 'error',
-                    event: 'profile.delete.deferred_failed',
-                    error: error instanceof Error ? error : new Error(String(error)),
-                    fields: { profile_id: plan.entry.profileId, mode: plan.mode },
-                });
-            }
-            finally {
-                pending.delete(plan.entry.profileId);
-                releaseReservation();
-            }
-        })();
-    }, SELF_DELETE_GRACE_MS);
-    return result;
-}
-/** Validate and enact one forced profile deletion. A request from a node that
- *  belongs to the target profile is acknowledged before its broker is stopped. */
-export async function requestProfileDeletion(name, body) {
-    const request = validateRequest(body);
-    const entry = loadProfileManifest(name);
-    const existing = pending.get(entry.profileId);
-    if (existing !== undefined)
-        return { status: 202, body: existing.result };
-    const releaseReservation = reserveProfileDeletion(entry.profileId);
-    let deferred = false;
-    try {
-        const plan = prepareDeletion(entry, request);
-        const selfDeleting = request.caller_node_id != null && plan.nodeIds.includes(request.caller_node_id);
-        if (selfDeleting) {
-            const result = scheduleSelfDeletion(plan, releaseReservation);
-            deferred = true;
-            return { status: 202, body: result };
-        }
-        return { status: 200, body: await executePlan(plan) };
-    }
-    finally {
-        if (!deferred)
-            releaseReservation();
-    }
-}
+var x=Object.defineProperty;var d=(e,r)=>x(e,"name",{value:r,configurable:!0});import{existsSync as p,readFileSync as F,readdirSync as y,rmSync as h}from"node:fs";import{join as a}from"node:path";import{cronIdsForProfileDeletion as q,cronIdsForProfileDetach as E,deleteCronsForProfile as R,deleteNodes as T,getNode as m,getRow as C,globalizeCronsForProfile as O,listNodesByProfile as M,nodesRoot as B,reviewDir as W}from"../core/canvas/index.js";import{usage as u}from"../core/errors.js";import{emitEvent as $}from"../core/events/emit.js";import{clearDefaultProfileId as _,defaultProfileDirs as z}from"../core/profiles/default-binding.js";import{reserveProfileDeletion as A}from"../core/profiles/deletion-reservation.js";import{deleteProfile as v,loadProfileManifest as L}from"../core/profiles/manifest.js";import{deleteReviewsByOriginNodes as J,reviewIdsByOriginNodes as G}from"../core/review/store.js";import{boundFleet as H}from"../core/runtime/fleet.js";import{headlessBrokerHost as k}from"../core/runtime/host.js";import{transition as K}from"../core/runtime/lifecycle.js";import{tearDownNode as U}from"../core/runtime/placement.js";import{reshapeNode as Q}from"../core/runtime/promote.js";import{reviveNode as V}from"../core/runtime/revive.js";const D=1e3,b=new Set(["page.json","page.tsx","page.html","page.js","review.json","response.json","progress.json","claim.json","reply-route.json","feedback-comments.json","feedback.json",".ticket-lock"]),I=new Map;function X(e){if(typeof e!="object"||e===null||Array.isArray(e))throw u("profile deletion requires a JSON request body",{error:"force_required",message:"profile deletion requires --force",next:"Re-run `crtr profile delete <profile> --force` after reviewing its effects."});return e}d(X,"requestObject");function Y(e){const r=X(e);if(r.force!==!0)throw u("profile deletion requires --force",{error:"force_required",message:"profile deletion requires --force",next:"Re-run `crtr profile delete <profile> --force` after reviewing its effects."});if(r.detach!==void 0&&typeof r.detach!="boolean")throw u("detach must be a boolean",{error:"invalid_detach",message:"detach must be a boolean",next:"Use --detach as a presence-only flag, or omit it."});const t=r.caller_node_id;if(t!=null&&(typeof t!="string"||t===""))throw u("caller_node_id must be a nonempty string or null");return{force:!0,...r.detach===!0?{detach:!0}:{},...t===void 0?{}:{caller_node_id:t}}}d(Y,"validateRequest");function P(e){if(!p(e))return null;try{const r=JSON.parse(F(e,"utf8"));return typeof r.source?.nodeId=="string"&&r.source.nodeId!==""?r.source.nodeId:null}catch{return null}}d(P,"manifestSourceNodeId");function Z(e){const r=new Set(e),t=B();if(r.size===0||!p(t))return[];const o=[];for(const n of y(t,{withFileTypes:!0})){if(!n.isDirectory())continue;const s=a(t,n.name);[P(a(s,"page.json")),P(a(s,"review.json"))].some(l=>l!==null&&r.has(l))&&o.push({dir:s,wholeDirectory:r.has(n.name)||C(n.name)===null})}return o.sort((n,s)=>n.dir.localeCompare(s.dir))}d(Z,"ticketCleanupForNodes");function ee(e){if(b.has(e))return!0;for(const r of b)if(e.startsWith(`${r}.`)&&(e.endsWith(".tmp")||e.endsWith(".lock")))return!0;return!1}d(ee,"isTicketOwnedResidue");function re(e){let r=0;for(const t of e)if(p(t.dir)){if(t.wholeDirectory){h(t.dir,{recursive:!0,force:!0}),r+=1;continue}for(const o of y(t.dir,{withFileTypes:!0}))ee(o.name)&&h(a(t.dir,o.name),{recursive:!0,force:!0});r+=1}return r}d(re,"cleanTickets");function N(e){const r=e.filter(o=>o.managed_worktree?.state==="open").map(o=>({node_id:o.node_id,path:o.managed_worktree.path}));if(r.length===0)return null;const t=`profile deletion is blocked by ${r.length} open managed worktree${r.length===1?"":"s"}`;return u(t,{error:"open_managed_worktree",message:t,nodes:r,next:`Close ${r.map(({node_id:o})=>o).join(", ")} with \`crtr node worktree close <node>\`, then retry.`})}d(N,"openWorktreeError");function te(e,r){const t=M(e.profileId),o=N(t);if(o!==null)throw o;const n=t.map(({node_id:c})=>c),s=r.detach===!0?"detached":"deleted";return{entry:e,mode:s,nodes:t,nodeIds:n,tickets:s==="deleted"?Z(n):[],cronIds:s==="deleted"?q(e.profileId,n):E(e.profileId),reviewIds:s==="deleted"?G(n):[],defaultDirs:z(e.profileId)}}d(te,"prepareDeletion");function j(e){const r=e.nodeIds.flatMap(o=>{const n=m(o);return n===null?[]:[n]}),t=N(r);if(t!==null)throw t}d(j,"assertDeletionPlanPreconditions");function g(e){return{profile_id:e.entry.profileId,name:e.entry.manifest.name,mode:e.mode,nodes:e.nodeIds.length,crons:e.cronIds.length,tickets:e.tickets.length,reviews:e.reviewIds.length,default_pins:e.defaultDirs.length}}d(g,"resultForPlan");async function oe(e){j(e);const r=e.nodeIds.filter(i=>m(i)!==null),t=H(),o=r.flatMap(i=>{const f=t.get(i);return f===void 0?[]:[{nodeId:i,exited:f.handle.exited}]}),n=[];for(const{nodeId:i}of o){const f=m(i);(f?.status==="active"||f?.status==="idle")&&(K(i,"release"),n.push(i)),k.teardown(i)}await Promise.all(o.map(({exited:i})=>i));const s=[];for(const i of r)m(i)!==null&&(Q(i,{profileId:null}),s.push(i));const c=O(e.entry.profileId),l=_(e.entry.profileId);v(e.entry.profileId);const w=new Set(s);for(const i of n)w.has(i)&&await V(i,{resume:!0,recovery:!0,capacity:"freeze"});return{...g(e),nodes:s.length,crons:c.length,default_pins:l.length}}d(oe,"detachProfile");function ne(e){j(e);const r=R(e.entry.profileId,e.nodeIds);for(const c of e.nodeIds)k.teardown(c),U(c);const t=J(e.nodeIds);for(const c of t)h(W(c),{recursive:!0,force:!0});const o=re(e.tickets),n=T(e.nodeIds),s=_(e.entry.profileId);return v(e.entry.profileId),{...g(e),nodes:n.length,crons:r.length,tickets:o,reviews:t.length,default_pins:s.length}}d(ne,"hardDeleteProfile");async function S(e){return e.mode==="detached"?oe(e):ne(e)}d(S,"executePlan");function ie(e,r){const t={...g(e),accepted:!0,grace_ms:D};return I.set(e.entry.profileId,{result:t}),setTimeout(()=>{(async()=>{try{await S(e)}catch(o){$({level:"error",event:"profile.delete.deferred_failed",error:o instanceof Error?o:new Error(String(o)),fields:{profile_id:e.entry.profileId,mode:e.mode}})}finally{I.delete(e.entry.profileId),r()}})()},D),t}d(ie,"scheduleSelfDeletion");async function ke(e,r){const t=Y(r),o=L(e),n=I.get(o.profileId);if(n!==void 0)return{status:202,body:n.result};const s=A(o.profileId);let c=!1;try{const l=te(o,t);if(t.caller_node_id!=null&&l.nodeIds.includes(t.caller_node_id)){const i=ie(l,s);return c=!0,{status:202,body:i}}return{status:200,body:await S(l)}}finally{c||s()}}d(ke,"requestProfileDeletion");export{ke as requestProfileDeletion};

package/dist/daemon/reconcilers/bash-deadline.js

@@ -1,80 +1 @@
-import { bashJobPaths, expiredAutoBackgroundBashJobs, formatBashElapsed, stopBackgroundBashJob, } from '../../core/bash-jobs.js';
-import { isSafeNodeId } from '../../core/canvas/paths.js';
-import { contextDir } from '../../core/canvas/paths.js';
-import { enqueueNodeMail } from '../../core/feed/messages.js';
-import { emitEvent } from '../../core/events/emit.js';
-import { operationIdContext } from '../../core/events/operation-id.js';
-import { isProfilePaused } from '../../core/profiles/manifest.js';
-// How often the deadline scan runs. The valve arms a 60s default deadline, so a
-// few seconds of enforcement latency is immaterial; scanning every tick would
-// readdir every node's jobs dir needlessly.
-const SCAN_INTERVAL_MS = 5 * 1000;
-/** Cancel AUTO-backgrounded bash jobs whose claim-or-cancel deadline has passed.
- *
- * The valve backgrounds a command it could not finish waiting for and arms a
- * deadline the owning node must extend (`crtr node bash extend`) to keep the job
- * alive. This lane is the enforcer: it survives a broker restart and fires while
- * the node is idle, so a runaway command cannot outlive its window just because
- * the agent moved on. A deliberately backgrounded job carries no deadline and is
- * never touched here. */
-export class BashDeadlineReconciler {
-    lastScanAt = Number.NEGATIVE_INFINITY;
-    async run(now, ctx) {
-        if (now - this.lastScanAt < SCAN_INTERVAL_MS)
-            return;
-        this.lastScanAt = now;
-        // A dead node's supervisor was already reaped with its broker; its jobs
-        // cannot still be live, and its inbox notice would reach no one.
-        for (const row of ctx.rows) {
-            if (row.status === 'dead')
-                continue;
-            // A paused profile's node cannot claim anything: pause stopped its broker.
-            // Enforcing the window here would cancel the job for a silence the pause
-            // imposed, so the deadline waits and resume credits it the same interval.
-            if (isProfilePaused(row.profile_id))
-                continue;
-            const dir = contextDir(row.node_id);
-            let expired;
-            try {
-                expired = expiredAutoBackgroundBashJobs(dir, now);
-            }
-            catch (err) {
-                operationIdContext.fresh(() => {
-                    emitEvent({ level: 'error', event: 'bash_deadline.scan_failed', ...(isSafeNodeId(row.node_id) ? { node_id: row.node_id } : {}), error: err });
-                });
-                continue;
-            }
-            for (const job of expired) {
-                await this.cancel(row.node_id, dir, job.jobId, now - job.startedAtMs);
-            }
-        }
-    }
-    async cancel(nodeId, dir, jobId, elapsedMs) {
-        const stopped = await stopBackgroundBashJob(dir, jobId);
-        // Only a job we actually signaled earns a notice; a retired/missing job
-        // finished or was stopped by another path and already reported itself.
-        if (stopped.kind !== 'stopped')
-            return;
-        const paths = bashJobPaths(dir, jobId);
-        operationIdContext.fresh(() => {
-            try {
-                emitEvent({ level: 'info', event: 'bash_deadline.canceled', ...(isSafeNodeId(nodeId) ? { node_id: nodeId } : {}), fields: { job_id: jobId } });
-                enqueueNodeMail(nodeId, {
-                    senderNodeId: null,
-                    urgency: 'urgent',
-                    wake: 1,
-                    kind: 'urgent',
-                    label: 'background bash job canceled at its deadline',
-                    bodyJson: {
-                        body: `Background bash job ${jobId} was canceled after ${formatBashElapsed(elapsedMs)} because its background deadline passed and you did not claim it. ` +
-                            `Next time, give a long command more room up front (a larger inline timeout), or claim the job with \`crtr node bash extend ${jobId} --for <duration>\` before the deadline. ` +
-                            `Log: ${paths.jobLog}  Command: ${paths.cmdSh}`,
-                    },
-                });
-            }
-            catch (err) {
-                emitEvent({ level: 'error', event: 'bash_deadline.notice_failed', ...(isSafeNodeId(nodeId) ? { node_id: nodeId } : {}), error: err, fields: { job_id: jobId } });
-            }
-        });
-    }
-}
+var m=Object.defineProperty;var c=(s,o)=>m(s,"name",{value:o,configurable:!0});import{bashJobPaths as u,expiredAutoBackgroundBashJobs as h,formatBashElapsed as p,stopBackgroundBashJob as b}from"../../core/bash-jobs.js";import{isSafeNodeId as n}from"../../core/canvas/paths.js";import{contextDir as _}from"../../core/canvas/paths.js";import{enqueueNodeMail as g}from"../../core/feed/messages.js";import{emitEvent as d}from"../../core/events/emit.js";import{operationIdContext as l}from"../../core/events/operation-id.js";import{isProfilePaused as N}from"../../core/profiles/manifest.js";const k=5*1e3;class w{static{c(this,"BashDeadlineReconciler")}lastScanAt=Number.NEGATIVE_INFINITY;async run(o,r){if(!(o-this.lastScanAt<k)){this.lastScanAt=o;for(const e of r.rows){if(e.status==="dead"||N(e.profile_id))continue;const a=_(e.node_id);let i;try{i=h(a,o)}catch(t){l.fresh(()=>{d({level:"error",event:"bash_deadline.scan_failed",...n(e.node_id)?{node_id:e.node_id}:{},error:t})});continue}for(const t of i)await this.cancel(e.node_id,a,t.jobId,o-t.startedAtMs)}}}async cancel(o,r,e,a){if((await b(r,e)).kind!=="stopped")return;const t=u(r,e);l.fresh(()=>{try{d({level:"info",event:"bash_deadline.canceled",...n(o)?{node_id:o}:{},fields:{job_id:e}}),g(o,{senderNodeId:null,urgency:"urgent",wake:1,kind:"urgent",label:"background bash job canceled at its deadline",bodyJson:{body:`Background bash job ${e} was canceled after ${p(a)} because its background deadline passed and you did not claim it. Next time, give a long command more room up front (a larger inline timeout), or claim the job with \`crtr node bash extend ${e} --for <duration>\` before the deadline. Log: ${t.jobLog}  Command: ${t.cmdSh}`}})}catch(f){d({level:"error",event:"bash_deadline.notice_failed",...n(o)?{node_id:o}:{},error:f,fields:{job_id:e}})}})}}export{w as BashDeadlineReconciler};