@north-light/crouter 0.3.317 → 0.3.319

package/dist/commands/sys/feedback.js

@@ -1,228 +1,7 @@
-// `crtr sys feedback` — report a crtr harness bug when the harness itself
-// misbehaves (a command errors unexpectedly, hangs, churns, or acts contrary to
-// its documented contract). The agent supplies one prose description; everything
-// else (version, node identity, recent activity) is auto-collected and templated
-// into the report body.
-//
-// WHERE the report goes is a property of the deployment, not of the agent: this
-// command owns the report — its contract, its context collection, its templating
-// — while the deployment owns delivery. A host with `gh` and a person behind it
-// opens the issue directly; a hosted runtime (a Northlight guest VM, say) has no
-// GitHub credential and shouldn't be given one, so it sets
-// CRTR_FEEDBACK_ENDPOINT and its backend forwards the report with an identity
-// crtr never has to hold. Exactly one sink is chosen per deployment — this is a
-// configured provider, not a fallback chain. Delivery failure on either path
-// still writes a durable local file so the report is never lost.
-import { spawnSync } from 'node:child_process';
-import { mkdirSync, writeFileSync } from 'node:fs';
-import { join } from 'node:path';
-import os from 'node:os';
-import { defineLeaf } from '../../core/command.js';
-import { usage } from '../../core/errors.js';
-import { userScopeRoot } from '../../core/scope.js';
-import { readTelemetry } from '../../core/canvas/telemetry.js';
-import { ApiError } from '../../api/index.js';
-import { cliClient } from '../api-client.js';
-import { projectTier1Event, readLogSnapshot } from '../../core/events/read.js';
-import { readPackageVersion } from './shared.js';
-/** Canonical repo for crtr harness feedback — feedback is always about the
- *  tool, regardless of which project the reporting agent is working in. */
-const FEEDBACK_REPO = 'vallum-security/crouter';
-/** Deployment-configured delivery. When CRTR_FEEDBACK_ENDPOINT names an HTTP
- *  endpoint, it is the sink and gh is not consulted; CRTR_FEEDBACK_TOKEN, when
- *  present, is sent as a bearer credential. */
-const ENDPOINT_ENV = 'CRTR_FEEDBACK_ENDPOINT';
-const TOKEN_ENV = 'CRTR_FEEDBACK_TOKEN';
-const ENDPOINT_TIMEOUT_MS = 15_000;
-async function collectContext() {
-    const env = process.env;
-    const nodeId = env['CRTR_NODE_ID'] ?? null;
-    let cycle = null;
-    let logTail = [];
-    if (nodeId !== null) {
-        const meta = await fetchNodeOrNull(nodeId);
-        if (meta !== null && typeof meta.cycles === 'number')
-            cycle = meta.cycles;
-        logTail = readRecentActivity(nodeId);
-    }
-    const contextTokens = nodeId !== null ? readTelemetry(nodeId).context_tokens ?? null : null;
-    return {
-        version: readPackageVersion(),
-        platform: `${os.platform()} ${os.release()} (${os.arch()})`,
-        nodeId,
-        kind: env['CRTR_KIND'] ?? null,
-        mode: env['CRTR_MODE'] ?? null,
-        lifecycle: env['CRTR_LIFECYCLE'] ?? null,
-        cwd: env['CRTR_NODE_CWD'] ?? process.cwd(),
-        cycle,
-        contextTokens,
-        logTail,
-    };
-}
-/** Fetch a node's detail via the API, mapping the daemon's 404 (and any other
- *  failure) to null so feedback context collection never fails because the node
- *  is absent or the daemon is momentarily unreachable — the report must survive. */
-async function fetchNodeOrNull(nodeId) {
-    try {
-        return await cliClient().getNode(nodeId);
-    }
-    catch (err) {
-        if (err instanceof ApiError)
-            return null;
-        throw err;
-    }
-}
-/** Recent canonical broker events — best-effort, never throws. */
-function readRecentActivity(nodeId) {
-    try {
-        return readLogSnapshot({ nodeId, component: 'broker' }, false).items
-            .filter((item) => item.kind === 'event')
-            .slice(-15)
-            .map((item) => JSON.stringify(projectTier1Event(item.envelope)));
-    }
-    catch {
-        return [];
-    }
-}
-function deriveTitle(raw, message) {
-    const explicit = raw !== undefined && raw.trim() !== '' ? raw.trim() : undefined;
-    const base = explicit ?? message.split('\n')[0].trim();
-    const trimmed = base.length > 80 ? base.slice(0, 79) + '…' : base;
-    return `[feedback] ${trimmed}`;
-}
-function buildBody(message, ctx) {
-    const rows = [
-        `| crtr version | \`${ctx.version}\` |`,
-        `| platform | ${ctx.platform} |`,
-    ];
-    if (ctx.nodeId !== null) {
-        rows.push(`| node id | \`${ctx.nodeId}\` |`);
-        rows.push(`| kind / mode / lifecycle | ${ctx.kind ?? '?'} / ${ctx.mode ?? '?'} / ${ctx.lifecycle ?? '?'} |`);
-        if (ctx.cycle !== null)
-            rows.push(`| cycle | ${ctx.cycle} |`);
-        if (ctx.contextTokens !== null)
-            rows.push(`| context tokens | ${ctx.contextTokens.toLocaleString('en-US')} |`);
-    }
-    if (ctx.cwd !== null)
-        rows.push(`| working dir | \`${ctx.cwd}\` |`);
-    const parts = [
-        message.trim(),
-        '',
-        '---',
-        '_Filed via `crtr sys feedback` — context below auto-attached by the harness._',
-        '',
-        '### Environment',
-        '| | |',
-        '|---|---|',
-        ...rows,
-    ];
-    if (ctx.logTail.length > 0) {
-        parts.push('', `### Recent node activity (last ${ctx.logTail.length} log events)`, '```jsonl', ...ctx.logTail, '```');
-    }
-    return parts.join('\n') + '\n';
-}
-/** POST the report to the deployment's configured endpoint. The endpoint may
- *  answer with a `url` naming where the report landed; anything else about the
- *  response body is the backend's business, not ours. */
-async function deliverToEndpoint(endpoint, title, body, message, ctx) {
-    const token = process.env[TOKEN_ENV];
-    try {
-        const res = await fetch(endpoint, {
-            method: 'POST',
-            headers: {
-                'content-type': 'application/json',
-                ...(token !== undefined && token !== '' ? { authorization: `Bearer ${token}` } : {}),
-            },
-            body: JSON.stringify({ title, body, message, context: ctx }),
-            signal: AbortSignal.timeout(ENDPOINT_TIMEOUT_MS),
-        });
-        if (!res.ok) {
-            const detail = (await res.text().catch(() => '')).trim().slice(0, 400);
-            return { error: `${ENDPOINT_ENV} returned HTTP ${res.status}${detail === '' ? '' : `: ${detail}`}` };
-        }
-        const payload = (await res.json().catch(() => null));
-        const url = typeof payload?.url === 'string' ? payload.url : undefined;
-        return url === undefined ? {} : { url };
-    }
-    catch (err) {
-        return { error: `${ENDPOINT_ENV} unreachable: ${err instanceof Error ? err.message : String(err)}` };
-    }
-}
-/** Open the GitHub issue directly with the host's own gh credential. */
-function deliverToGitHub(title, body) {
-    const res = spawnSync('gh', ['issue', 'create', '--repo', FEEDBACK_REPO, '--title', title, '--body-file', '-'], { input: body, encoding: 'utf8' });
-    if (res.error === undefined && res.status === 0) {
-        const url = res.stdout.trim().split('\n').filter((l) => l.startsWith('http')).pop() ?? res.stdout.trim();
-        return { url };
-    }
-    return {
-        error: res.error !== undefined
-            ? `gh not available: ${res.error.message}`
-            : (res.stderr?.trim() || `gh exited ${res.status}`),
-    };
-}
-/** Persist a report locally when delivery fails, so nothing is lost. Returns
- *  the absolute path written. */
-function saveLocally(title, body) {
-    const dir = join(userScopeRoot(), 'feedback');
-    mkdirSync(dir, { recursive: true });
-    const ts = new Date().toISOString().replace(/[:.]/g, '-');
-    const path = join(dir, `${ts}.md`);
-    writeFileSync(path, `# ${title}\n\n${body}`, 'utf8');
-    return path;
-}
-export const sysFeedbackLeaf = defineLeaf({
-    name: 'feedback',
-    description: 'report a crtr harness bug to whoever maintains this crtr install',
-    whenToUse: 'a crtr command itself misbehaves — it errors unexpectedly, hangs, churns, double-spawns, or acts contrary to its documented contract. NOT for your task work or decisions the user should make (that is `crtr human send`); this reports the TOOL, filing a report with the crtr maintainers with your node context auto-attached.',
-    help: {
-        name: 'sys feedback',
-        summary: 'file a report describing a crtr harness bug, with node context auto-attached',
-        params: [
-            {
-                kind: 'positional',
-                name: 'message',
-                required: true,
-                constraint: 'What broke, in your own words: the command you ran, what you expected, what happened instead. Be concrete — this is the only part you write; everything else is auto-collected.',
-            },
-            {
-                kind: 'flag',
-                name: 'title',
-                type: 'string',
-                required: false,
-                constraint: 'Issue title. Default: first line of the message, truncated.',
-            },
-        ],
-        output: [
-            { name: 'status', type: 'string', required: true, constraint: 'filed | saved-locally.' },
-            { name: 'url', type: 'string', required: false, constraint: 'Where the report landed, when the sink names a location.' },
-            { name: 'path', type: 'string', required: false, constraint: 'Local report path when status is saved-locally.' },
-            { name: 'error', type: 'string', required: false, constraint: 'Why filing fell back to local save.' },
-        ],
-        outputKind: 'object',
-        effects: [
-            `Sends the report where this install delivers harness feedback: the ${ENDPOINT_ENV} endpoint when the deployment sets one, otherwise a public GitHub issue on ${FEEDBACK_REPO} via gh.`,
-            'On delivery failure, writes the report to ~/.crouter/feedback/ instead — never lost.',
-        ],
-    },
-    run: async (input) => {
-        const message = input['message']?.trim();
-        if (message === undefined || message === '') {
-            throw usage('feedback message is required: describe what broke. Run `crtr sys feedback -h`.');
-        }
-        const ctx = await collectContext();
-        const title = deriveTitle(input['title'], message);
-        const body = buildBody(message, ctx);
-        const endpoint = process.env[ENDPOINT_ENV]?.trim();
-        const delivery = endpoint !== undefined && endpoint !== ''
-            ? await deliverToEndpoint(endpoint, title, body, message, ctx)
-            : deliverToGitHub(title, body);
-        if (delivery.error === undefined) {
-            return delivery.url === undefined ? { status: 'filed' } : { status: 'filed', url: delivery.url };
-        }
-        // The sink rejected or was unreachable — persist locally so the report
-        // survives, and tell the agent why.
-        const path = saveLocally(title, body);
-        return { status: 'saved-locally', path, error: delivery.error };
-    },
-});
+var h=Object.defineProperty;var a=(r,e)=>h(r,"name",{value:e,configurable:!0});import{spawnSync as y}from"node:child_process";import{mkdirSync as g,writeFileSync as w}from"node:fs";import{join as m}from"node:path";import u from"node:os";import{defineLeaf as b}from"../../core/command.js";import{usage as k}from"../../core/errors.js";import{userScopeRoot as v}from"../../core/scope.js";import{readTelemetry as T}from"../../core/canvas/telemetry.js";import{ApiError as $}from"../../api/index.js";import{cliClient as E}from"../api-client.js";import{projectTier1Event as _,readLogSnapshot as N}from"../../core/events/read.js";import{readPackageVersion as O}from"./shared.js";const p="vallum-security/crouter",l="CRTR_FEEDBACK_ENDPOINT",R="CRTR_FEEDBACK_TOKEN",S=15e3;async function C(){const r=process.env,e=r.CRTR_NODE_ID??null;let t=null,n=[];if(e!==null){const s=await D(e);s!==null&&typeof s.cycles=="number"&&(t=s.cycles),n=I(e)}const o=e!==null?T(e).context_tokens??null:null;return{version:O(),platform:`${u.platform()} ${u.release()} (${u.arch()})`,nodeId:e,kind:r.CRTR_KIND??null,mode:r.CRTR_MODE??null,lifecycle:r.CRTR_LIFECYCLE??null,cwd:r.CRTR_NODE_CWD??process.cwd(),cycle:t,contextTokens:o,logTail:n}}a(C,"collectContext");async function D(r){try{return await E().getNode(r)}catch(e){if(e instanceof $)return null;throw e}}a(D,"fetchNodeOrNull");function I(r){try{return N({nodeId:r,component:"broker"},!1).items.filter(e=>e.kind==="event").slice(-15).map(e=>JSON.stringify(_(e.envelope)))}catch{return[]}}a(I,"readRecentActivity");function L(r,e){const n=(r!==void 0&&r.trim()!==""?r.trim():void 0)??e.split(`
+`)[0].trim();return`[feedback] ${n.length>80?n.slice(0,79)+"\u2026":n}`}a(L,"deriveTitle");function j(r,e){const t=[`| crtr version | \`${e.version}\` |`,`| platform | ${e.platform} |`];e.nodeId!==null&&(t.push(`| node id | \`${e.nodeId}\` |`),t.push(`| kind / mode / lifecycle | ${e.kind??"?"} / ${e.mode??"?"} / ${e.lifecycle??"?"} |`),e.cycle!==null&&t.push(`| cycle | ${e.cycle} |`),e.contextTokens!==null&&t.push(`| context tokens | ${e.contextTokens.toLocaleString("en-US")} |`)),e.cwd!==null&&t.push(`| working dir | \`${e.cwd}\` |`);const n=[r.trim(),"","---","_Filed via `crtr sys feedback` \u2014 context below auto-attached by the harness._","","### Environment","| | |","|---|---|",...t];return e.logTail.length>0&&n.push("",`### Recent node activity (last ${e.logTail.length} log events)`,"```jsonl",...e.logTail,"```"),n.join(`
+`)+`
+`}a(j,"buildBody");async function q(r,e,t,n,o){const s=process.env[R];try{const i=await fetch(r,{method:"POST",headers:{"content-type":"application/json",...s!==void 0&&s!==""?{authorization:`Bearer ${s}`}:{}},body:JSON.stringify({title:e,body:t,message:n,context:o}),signal:AbortSignal.timeout(S)});if(!i.ok){const f=(await i.text().catch(()=>"")).trim().slice(0,400);return{error:`${l} returned HTTP ${i.status}${f===""?"":`: ${f}`}`}}const c=await i.json().catch(()=>null),d=typeof c?.url=="string"?c.url:void 0;return d===void 0?{}:{url:d}}catch(i){return{error:`${l} unreachable: ${i instanceof Error?i.message:String(i)}`}}}a(q,"deliverToEndpoint");function F(r,e){const t=y("gh",["issue","create","--repo",p,"--title",r,"--body-file","-"],{input:e,encoding:"utf8"});return t.error===void 0&&t.status===0?{url:t.stdout.trim().split(`
+`).filter(o=>o.startsWith("http")).pop()??t.stdout.trim()}:{error:t.error!==void 0?`gh not available: ${t.error.message}`:t.stderr?.trim()||`gh exited ${t.status}`}}a(F,"deliverToGitHub");function K(r,e){const t=m(v(),"feedback");g(t,{recursive:!0});const n=new Date().toISOString().replace(/[:.]/g,"-"),o=m(t,`${n}.md`);return w(o,`# ${r}
+
+${e}`,"utf8"),o}a(K,"saveLocally");const Q=b({name:"feedback",description:"report a crtr harness bug to whoever maintains this crtr install",whenToUse:"a crtr command itself misbehaves \u2014 it errors unexpectedly, hangs, churns, double-spawns, or acts contrary to its documented contract. NOT for your task work or decisions the user should make (that is `crtr human send`); this reports the TOOL, filing a report with the crtr maintainers with your node context auto-attached.",help:{name:"sys feedback",summary:"file a report describing a crtr harness bug, with node context auto-attached",params:[{kind:"positional",name:"message",required:!0,constraint:"What broke, in your own words: the command you ran, what you expected, what happened instead. Be concrete \u2014 this is the only part you write; everything else is auto-collected."},{kind:"flag",name:"title",type:"string",required:!1,constraint:"Issue title. Default: first line of the message, truncated."}],output:[{name:"status",type:"string",required:!0,constraint:"filed | saved-locally."},{name:"url",type:"string",required:!1,constraint:"Where the report landed, when the sink names a location."},{name:"path",type:"string",required:!1,constraint:"Local report path when status is saved-locally."},{name:"error",type:"string",required:!1,constraint:"Why filing fell back to local save."}],outputKind:"object",effects:[`Sends the report where this install delivers harness feedback: the ${l} endpoint when the deployment sets one, otherwise a public GitHub issue on ${p} via gh.`,"On delivery failure, writes the report to ~/.crouter/feedback/ instead \u2014 never lost."]},run:a(async r=>{const e=r.message?.trim();if(e===void 0||e==="")throw k("feedback message is required: describe what broke. Run `crtr sys feedback -h`.");const t=await C(),n=L(r.title,e),o=j(e,t),s=process.env[l]?.trim(),i=s!==void 0&&s!==""?await q(s,n,o,e,t):F(n,o);return i.error===void 0?i.url===void 0?{status:"filed"}:{status:"filed",url:i.url}:{status:"saved-locally",path:K(n,o),error:i.error}},"run")});export{Q as sysFeedbackLeaf};

package/dist/commands/sys/logs.js

@@ -1,129 +1,3 @@
-import { defineLeaf } from '../../core/command.js';
-import { isSafeNodeId } from '../../core/canvas/paths.js';
-import { usage } from '../../core/errors.js';
-import { validateOperationId } from '../../core/events/operation-id.js';
-import { readLogSnapshot } from '../../core/events/read.js';
-import { emitLine, isJsonOutput, recordPreviewLine } from '../../core/io.js';
-const ISO_TIMESTAMP = /^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/u;
-const MAX_PATTERN_BYTES = 4_096;
-function invalidFlag(flag, received, expected) {
-    throw usage(`--${flag} ${expected}; received ${JSON.stringify(received)}.`, {
-        received,
-        field: flag,
-        next: `Retry with a value that ${expected}.`,
-    });
-}
-function parseTimestamp(flag, raw) {
-    if (raw === undefined)
-        return undefined;
-    const value = raw.trim();
-    const match = ISO_TIMESTAMP.exec(value);
-    const parsed = Date.parse(value);
-    if (match === null || !Number.isFinite(parsed)) {
-        invalidFlag(flag, raw, 'must be a valid ISO 8601 timestamp with a timezone');
-    }
-    const calendar = new Date(Date.parse(`${match[1]}-${match[2]}-${match[3]}T${match[4]}:${match[5]}:${match[6]}Z`));
-    if (calendar.getUTCFullYear() !== Number(match[1])
-        || calendar.getUTCMonth() + 1 !== Number(match[2])
-        || calendar.getUTCDate() !== Number(match[3])
-        || calendar.getUTCHours() !== Number(match[4])
-        || calendar.getUTCMinutes() !== Number(match[5])
-        || calendar.getUTCSeconds() !== Number(match[6])) {
-        invalidFlag(flag, raw, 'must be a valid ISO 8601 timestamp with a timezone');
-    }
-    return parsed;
-}
-function parseNodeId(raw) {
-    if (raw === undefined)
-        return undefined;
-    const nodeId = raw.trim();
-    if (!isSafeNodeId(nodeId)) {
-        invalidFlag('node', raw, 'must be one non-empty path segment of at most 128 UTF-8 bytes');
-    }
-    return nodeId;
-}
-function parseOperationId(raw) {
-    if (raw === undefined)
-        return undefined;
-    const operationId = raw.trim();
-    try {
-        return validateOperationId(operationId);
-    }
-    catch {
-        invalidFlag('operation', raw, 'must be 32 lowercase non-zero hexadecimal characters');
-    }
-}
-function parsePattern(raw) {
-    if (raw === undefined)
-        return undefined;
-    const bytes = Buffer.byteLength(raw, 'utf8');
-    if (bytes === 0 || bytes > MAX_PATTERN_BYTES) {
-        invalidFlag('pattern', raw, `must be a non-empty literal of at most ${MAX_PATTERN_BYTES.toLocaleString('en-US')} UTF-8 bytes`);
-    }
-    return raw;
-}
-function renderEvent(envelope) {
-    const { v: _version, ts, level, event, component, operation_id: operationId, ...optional } = envelope;
-    const suffix = Object.keys(optional).length === 0 ? '' : ` ${JSON.stringify(optional)}`;
-    return `${ts} ${level.toUpperCase()} ${component} ${event} op=${operationId}${suffix}`;
-}
-export const sysLogsLeaf = defineLeaf({
-    name: 'logs',
-    description: 'inspect recent local runtime events',
-    whenToUse: 'you need a bounded local diagnostic snapshot, especially to correlate a node with an operation ID.',
-    help: {
-        name: 'sys logs',
-        summary: 'show the latest 200 matching local event and raw-residue records, oldest first',
-        params: [
-            { kind: 'flag', name: 'node', type: 'string', required: false, constraint: 'Safe node ID; the node need not still be active.' },
-            { kind: 'flag', name: 'component', type: 'enum', choices: ['daemon', 'broker'], required: false, constraint: 'Owning runtime component.' },
-            { kind: 'flag', name: 'operation', type: 'string', required: false, constraint: 'Exact 32-character lowercase non-zero hexadecimal operation ID.' },
-            { kind: 'flag', name: 'since', type: 'string', required: false, constraint: 'Inclusive ISO 8601 lower bound with a timezone.' },
-            { kind: 'flag', name: 'until', type: 'string', required: false, constraint: 'Inclusive ISO 8601 upper bound with a timezone; cannot precede --since.' },
-            { kind: 'flag', name: 'level', type: 'enum', choices: ['debug', 'info', 'warn', 'error'], required: false, constraint: 'Minimum severity.' },
-            { kind: 'flag', name: 'pattern', type: 'string', required: false, constraint: 'Case-insensitive literal, non-empty and at most 4,096 UTF-8 bytes.' },
-        ],
-        output: [
-            { name: 'record', type: 'EventEnvelope | RAW line', required: false, constraint: 'At most 200 matches, oldest to newest. Default canonical summaries occupy one line; unstructured daemon/broker residue is visibly prefixed RAW. Machine JSON output is canonical EventEnvelope JSONL only.' },
-        ],
-        outputKind: 'jsonl',
-        effects: ['None. Read-only.'],
-    },
-    run: async (input) => {
-        const nodeId = parseNodeId(input.node);
-        const operationId = parseOperationId(input.operation);
-        const sinceMs = parseTimestamp('since', input.since);
-        const untilMs = parseTimestamp('until', input.until);
-        if (sinceMs !== undefined && untilMs !== undefined && sinceMs > untilMs) {
-            throw usage('--since cannot be later than --until.', {
-                received: { since: input.since, until: input.until },
-                field: 'since/until',
-                next: 'Retry with an inclusive range whose lower bound does not exceed its upper bound.',
-            });
-        }
-        const query = {
-            nodeId,
-            component: input.component,
-            operationId,
-            sinceMs,
-            untilMs,
-            minimumLevel: input.level,
-            pattern: parsePattern(input.pattern),
-        };
-        const json = isJsonOutput();
-        const snapshot = readLogSnapshot(query, !json);
-        for (const item of snapshot.items) {
-            if (item.kind === 'event') {
-                if (json)
-                    emitLine({ ...item.envelope });
-                else {
-                    recordPreviewLine({ ...item.envelope });
-                    process.stdout.write(`${renderEvent(item.envelope)}\n`);
-                }
-            }
-            else if (!json) {
-                process.stdout.write(`RAW ${item.source} ${new Date(item.effectiveTsMs).toISOString()} ${JSON.stringify(item.content)}\n`);
-            }
-        }
-    },
-});
+var p=Object.defineProperty;var a=(e,n)=>p(e,"name",{value:n,configurable:!0});import{defineLeaf as g}from"../../core/command.js";import{isSafeNodeId as h}from"../../core/canvas/paths.js";import{usage as l}from"../../core/errors.js";import{validateOperationId as y}from"../../core/events/operation-id.js";import{readLogSnapshot as v}from"../../core/events/read.js";import{emitLine as b,isJsonOutput as $,recordPreviewLine as I}from"../../core/io.js";const S=/^(\d{4})-(\d{2})-(\d{2})T(\d{2}):(\d{2}):(\d{2})(?:\.\d{1,9})?(?:Z|[+-]\d{2}:\d{2})$/u,m=4096;function c(e,n,i){throw l(`--${e} ${i}; received ${JSON.stringify(n)}.`,{received:n,field:e,next:`Retry with a value that ${i}.`})}a(c,"invalidFlag");function f(e,n){if(n===void 0)return;const i=n.trim(),t=S.exec(i),s=Date.parse(i);(t===null||!Number.isFinite(s))&&c(e,n,"must be a valid ISO 8601 timestamp with a timezone");const o=new Date(Date.parse(`${t[1]}-${t[2]}-${t[3]}T${t[4]}:${t[5]}:${t[6]}Z`));return(o.getUTCFullYear()!==Number(t[1])||o.getUTCMonth()+1!==Number(t[2])||o.getUTCDate()!==Number(t[3])||o.getUTCHours()!==Number(t[4])||o.getUTCMinutes()!==Number(t[5])||o.getUTCSeconds()!==Number(t[6]))&&c(e,n,"must be a valid ISO 8601 timestamp with a timezone"),s}a(f,"parseTimestamp");function T(e){if(e===void 0)return;const n=e.trim();return h(n)||c("node",e,"must be one non-empty path segment of at most 128 UTF-8 bytes"),n}a(T,"parseNodeId");function N(e){if(e===void 0)return;const n=e.trim();try{return y(n)}catch{c("operation",e,"must be 32 lowercase non-zero hexadecimal characters")}}a(N,"parseOperationId");function O(e){if(e===void 0)return;const n=Buffer.byteLength(e,"utf8");return(n===0||n>m)&&c("pattern",e,`must be a non-empty literal of at most ${m.toLocaleString("en-US")} UTF-8 bytes`),e}a(O,"parsePattern");function w(e){const{v:n,ts:i,level:t,event:s,component:o,operation_id:d,...u}=e,r=Object.keys(u).length===0?"":` ${JSON.stringify(u)}`;return`${i} ${t.toUpperCase()} ${o} ${s} op=${d}${r}`}a(w,"renderEvent");const E=g({name:"logs",description:"inspect recent local runtime events",whenToUse:"you need a bounded local diagnostic snapshot, especially to correlate a node with an operation ID.",help:{name:"sys logs",summary:"show the latest 200 matching local event and raw-residue records, oldest first",params:[{kind:"flag",name:"node",type:"string",required:!1,constraint:"Safe node ID; the node need not still be active."},{kind:"flag",name:"component",type:"enum",choices:["daemon","broker"],required:!1,constraint:"Owning runtime component."},{kind:"flag",name:"operation",type:"string",required:!1,constraint:"Exact 32-character lowercase non-zero hexadecimal operation ID."},{kind:"flag",name:"since",type:"string",required:!1,constraint:"Inclusive ISO 8601 lower bound with a timezone."},{kind:"flag",name:"until",type:"string",required:!1,constraint:"Inclusive ISO 8601 upper bound with a timezone; cannot precede --since."},{kind:"flag",name:"level",type:"enum",choices:["debug","info","warn","error"],required:!1,constraint:"Minimum severity."},{kind:"flag",name:"pattern",type:"string",required:!1,constraint:"Case-insensitive literal, non-empty and at most 4,096 UTF-8 bytes."}],output:[{name:"record",type:"EventEnvelope | RAW line",required:!1,constraint:"At most 200 matches, oldest to newest. Default canonical summaries occupy one line; unstructured daemon/broker residue is visibly prefixed RAW. Machine JSON output is canonical EventEnvelope JSONL only."}],outputKind:"jsonl",effects:["None. Read-only."]},run:a(async e=>{const n=T(e.node),i=N(e.operation),t=f("since",e.since),s=f("until",e.until);if(t!==void 0&&s!==void 0&&t>s)throw l("--since cannot be later than --until.",{received:{since:e.since,until:e.until},field:"since/until",next:"Retry with an inclusive range whose lower bound does not exceed its upper bound."});const o={nodeId:n,component:e.component,operationId:i,sinceMs:t,untilMs:s,minimumLevel:e.level,pattern:O(e.pattern)},d=$(),u=v(o,!d);for(const r of u.items)r.kind==="event"?d?b({...r.envelope}):(I({...r.envelope}),process.stdout.write(`${w(r.envelope)}
+`)):d||process.stdout.write(`RAW ${r.source} ${new Date(r.effectiveTsMs).toISOString()} ${JSON.stringify(r.content)}
+`)},"run")});export{E as sysLogsLeaf};

package/dist/commands/sys/migrate.js

@@ -1,94 +1 @@
-// `crtr sys migrate` formats the shared on-disk migration runner's result.
-// Journaled canvas-db migrations remain in the database's ordered chain.
-import { defineLeaf } from '../../core/command.js';
-import { general, usage } from '../../core/errors.js';
-import { resolve } from 'node:path';
-import { pathExists } from '../../core/fs-utils.js';
-import { cliClient, rethrowAsCliError } from '../api-client.js';
-export const sysMigrateLeaf = defineLeaf({
-    name: 'migrate',
-    description: 'converge every profile manifest and writable memory store to the current on-disk format',
-    whenToUse: 'after a crtr update whose release notes name a state migration, when profiles stop resolving on a home that predates the update, or when old-format docs resurface (a restore, a sync, a hand-authored file). Convergent and idempotent: re-running over current state changes nothing, so use --dry-run first only when you want to review the rewrite.',
-    help: {
-        name: 'sys migrate',
-        summary: 'run the registered state migrations over every profile manifest and discovered memory store',
-        guide: 'Discovery decides what is migrated: the profiles and the projects they name, the ancestors of this directory, every nested store below any project root it reaches (a node\'s recorded cwd included), every installed plugin (disabled included), the node stores holding documents, and builtin as read-only input. A store outside that frontier is invisible to the run — add it with --dir; discovery_roots reports the frontier the run actually searched. A migration that changes a canonical identity plans across the whole corpus at once and applies in two phases, every reference rewrite before any identity rewrite, so one blocker writes nothing anywhere.',
-        params: [
-            { kind: 'flag', name: 'dry-run', type: 'bool', required: false, constraint: 'Plan and report every rewrite without writing any file.' },
-            { kind: 'flag', name: 'dir', type: 'path', required: false, repeatable: true, constraint: 'Project directory (the one containing `.crouter/`, not the memory dir) to add to discovery, once per occurrence. For a store no profile names and this directory does not sit under. The path must exist.' },
-        ],
-        output: [
-            { name: 'profiles', type: 'number', required: true, constraint: 'Profile manifests scanned.' },
-            { name: 'stores', type: 'number', required: true, constraint: 'Memory stores discovered, deduped by realpath. Builtin is counted: it is read-only corpus input.' },
-            { name: 'changed', type: 'number', required: true, constraint: 'Files rewritten (or, under --dry-run, that would be) — manifests, per-store documents, and corpus phases together.' },
-            { name: 'applied', type: 'object[]', required: true, constraint: 'One row per migration that changed files: {store, lane, migration, files}, lane one of profile-manifest, convergent, corpus. Empty when the state is already current.' },
-            { name: 'skipped', type: 'object[]', required: true, constraint: 'Files left untouched because they could not be parsed — a doc whose frontmatter is not valid YAML, or a manifest that is not valid JSON: {store, relPath, error}. Fix the file, then re-run.' },
-            { name: 'blockers', type: 'object[]', required: true, constraint: 'Why the corpus lane may not write: {kind, message, store?, target?, path?, name?, paths?}. kind is inaccessible-root, inaccessible-target, parse-failure, namespace, association, front-door, divergent-reference, unsafe-route, collision, package-owned-corpus, or verification. A non-empty list with a corpus migration registered fails the run, and `received` carries this whole report plus {corpus_phase, wrote} — corpus_phase is not-started (the corpus is untouched), planned (--dry-run), or written (both phases landed and verification then failed, so `wrote` is the inventory on disk).' },
-            { name: 'discovery_roots', type: 'object[]', required: true, constraint: 'The frontier searched: {reason, root, boundary, detail?}. reason is user, profile, profile-project, cwd-ancestor, descendant, node, plugin, builtin, or explicit-dir; boundary is store, ancestors, descendants, plugins, or nodes.' },
-            { name: 'discovered_stores', type: 'object[]', required: true, constraint: 'One row per physical store: {store, scope, namespace, mount_status, writable, reasons, targets, docs}. reasons holds every way the store was reached; targets the target ids that mount it; docs its parseable document count.' },
-            { name: 'discovered_targets', type: 'object[]', required: true, constraint: 'One row per resolution view: {id, kind, origin, cwd, profile_id, node_id, stores}. stores lists store keys in that target\'s precedence order.' },
-            { name: 'repository_namespaces', type: 'object[]', required: true, constraint: 'Repository-root namespace decisions this run makes: {repository_root, repository_key, declaration_path, namespace, source, action}. A nested store inherits this declaration; its reported effective prefix is not a declaration.' },
-            { name: 'store_prefixes', type: 'object[]', required: true, constraint: 'Effective prefix facts for each project store: {store_root, owner_dir, repository_root, owner_relative_path, old_prefix, old_rule, effective_prefix, nested_declaration_action, front_door_action}. A nonempty owner_relative_path always reports front_door_action `none`; a nested effective_prefix is derived, not a declaration.' },
-            { name: 'renames', type: 'object[]', required: true, constraint: 'Canonical identity changes: {store_root, path, from, to}.' },
-            { name: 'references', type: 'object[]', required: true, constraint: 'Rewritten pointers at a changed identity: {store_root, path, kind, from, to}, kind link or memory-read.' },
-            { name: 'dryRun', type: 'boolean', required: true, constraint: 'True when nothing was written (preview only).' },
-            { name: 'resumed', type: 'boolean', required: true, constraint: 'True only when this repair resumed the blocked daemon startup.' },
-            { name: 'resume_error', type: 'string', required: false, constraint: 'Present when corpus repair succeeded but normal daemon startup then failed.' },
-        ],
-        outputKind: 'object',
-        effects: [
-            'The daemon that owns this canvas runs the migration. Rewrites old-format `profile.json` manifests in place (atomic, under the same per-profile lock `profile project add/remove` take). A manifest whose structure cannot be converted fails the whole run — no project setting is ever guessed.',
-            'Rewrites old-format memory documents in place (atomic per-file writes) across every writable discovered store: profiles, profile-owned projects, this directory\'s ancestors, nested descendant stores, installed plugin stores, and node stores. Builtin docs are package-owned and never touched.',
-            'Applies corpus-wide identity changes in two ordered phases across every writable store, after the global plan comes back blocker-free; a post-write pass re-reads the corpus from disk and verifies it.',
-            'Under --dry-run: read-only, writes nothing.',
-        ],
-    },
-    run: async (input) => {
-        const dryRun = input.dryRun === true;
-        const explicitDirs = (input['dir'] ?? []).map((dir) => resolve(dir));
-        const missingDirs = explicitDirs.filter((dir) => !pathExists(dir));
-        if (missingDirs.length > 0) {
-            throw usage(`--dir path does not exist: ${missingDirs.join(', ')}`, {
-                received: missingDirs,
-                field: 'dir',
-                next: 'Pass the project directory that contains `.crouter/`, or omit --dir to migrate the discovered frontier only.',
-            });
-        }
-        let report;
-        try {
-            report = await cliClient().migrateState({ dry_run: dryRun, dirs: explicitDirs });
-        }
-        catch (error) {
-            rethrowAsCliError(error);
-        }
-        if (report.blocked) {
-            const blockers = report.blockers;
-            const earlier = report.applied.filter((row) => row.lane !== 'corpus').flatMap((row) => row.files);
-            const corpusPhase = report.corpus_phase;
-            const wrote = report.wrote;
-            const wroteSummary = dryRun
-                ? '— this was a --dry-run; nothing was written'
-                : corpusPhase === 'written'
-                    ? `after both write phases — ${wrote.corpus_consumers.length} reference and ${wrote.corpus_identities.length} identity rewrite(s) are on disk and are NOT rolled back`
-                    : earlier.length > 0
-                        ? `before any corpus write — the corpus is unchanged, but ${earlier.length} earlier manifest/document rewrite(s) are already on disk`
-                        : '— nothing was written';
-            throw general(`corpus migration ${corpusPhase === 'written' ? 'verification failed with' : 'blocked by'} ${blockers.length} finding(s) ${wroteSummary}`, {
-                received: report,
-                next: corpusPhase === 'written'
-                    ? 'Resolve every verification finding against the files listed in received.wrote.corpus_identities and .corpus_consumers, then re-run `crtr sys migrate` — the lane converges from file truth.'
-                    : 'Resolve every blocker, then re-run `crtr sys migrate` — the earlier lanes are convergent and re-running them is a no-op.',
-            });
-        }
-        return {
-            ...report,
-            follow_up: report.skipped.length > 0
-                ? 'Some files could not be parsed and were left untouched — fix each named file, then re-run `crtr sys migrate`.'
-                : report.changed === 0
-                    ? 'State already current — nothing to rewrite.'
-                    : dryRun
-                        ? 'Preview only — re-run without --dry-run to write these changes.'
-                        : undefined,
-        };
-    },
-});
+var u=Object.defineProperty;var l=(o,t)=>u(o,"name",{value:t,configurable:!0});import{defineLeaf as h}from"../../core/command.js";import{general as m,usage as f}from"../../core/errors.js";import{resolve as y}from"node:path";import{pathExists as w}from"../../core/fs-utils.js";import{cliClient as g,rethrowAsCliError as v}from"../api-client.js";const A=h({name:"migrate",description:"converge every profile manifest and writable memory store to the current on-disk format",whenToUse:"after a crtr update whose release notes name a state migration, when profiles stop resolving on a home that predates the update, or when old-format docs resurface (a restore, a sync, a hand-authored file). Convergent and idempotent: re-running over current state changes nothing, so use --dry-run first only when you want to review the rewrite.",help:{name:"sys migrate",summary:"run the registered state migrations over every profile manifest and discovered memory store",guide:"Discovery decides what is migrated: the profiles and the projects they name, the ancestors of this directory, every nested store below any project root it reaches (a node's recorded cwd included), every installed plugin (disabled included), the node stores holding documents, and builtin as read-only input. A store outside that frontier is invisible to the run \u2014 add it with --dir; discovery_roots reports the frontier the run actually searched. A migration that changes a canonical identity plans across the whole corpus at once and applies in two phases, every reference rewrite before any identity rewrite, so one blocker writes nothing anywhere.",params:[{kind:"flag",name:"dry-run",type:"bool",required:!1,constraint:"Plan and report every rewrite without writing any file."},{kind:"flag",name:"dir",type:"path",required:!1,repeatable:!0,constraint:"Project directory (the one containing `.crouter/`, not the memory dir) to add to discovery, once per occurrence. For a store no profile names and this directory does not sit under. The path must exist."}],output:[{name:"profiles",type:"number",required:!0,constraint:"Profile manifests scanned."},{name:"stores",type:"number",required:!0,constraint:"Memory stores discovered, deduped by realpath. Builtin is counted: it is read-only corpus input."},{name:"changed",type:"number",required:!0,constraint:"Files rewritten (or, under --dry-run, that would be) \u2014 manifests, per-store documents, and corpus phases together."},{name:"applied",type:"object[]",required:!0,constraint:"One row per migration that changed files: {store, lane, migration, files}, lane one of profile-manifest, convergent, corpus. Empty when the state is already current."},{name:"skipped",type:"object[]",required:!0,constraint:"Files left untouched because they could not be parsed \u2014 a doc whose frontmatter is not valid YAML, or a manifest that is not valid JSON: {store, relPath, error}. Fix the file, then re-run."},{name:"blockers",type:"object[]",required:!0,constraint:"Why the corpus lane may not write: {kind, message, store?, target?, path?, name?, paths?}. kind is inaccessible-root, inaccessible-target, parse-failure, namespace, association, front-door, divergent-reference, unsafe-route, collision, package-owned-corpus, or verification. A non-empty list with a corpus migration registered fails the run, and `received` carries this whole report plus {corpus_phase, wrote} \u2014 corpus_phase is not-started (the corpus is untouched), planned (--dry-run), or written (both phases landed and verification then failed, so `wrote` is the inventory on disk)."},{name:"discovery_roots",type:"object[]",required:!0,constraint:"The frontier searched: {reason, root, boundary, detail?}. reason is user, profile, profile-project, cwd-ancestor, descendant, node, plugin, builtin, or explicit-dir; boundary is store, ancestors, descendants, plugins, or nodes."},{name:"discovered_stores",type:"object[]",required:!0,constraint:"One row per physical store: {store, scope, namespace, mount_status, writable, reasons, targets, docs}. reasons holds every way the store was reached; targets the target ids that mount it; docs its parseable document count."},{name:"discovered_targets",type:"object[]",required:!0,constraint:"One row per resolution view: {id, kind, origin, cwd, profile_id, node_id, stores}. stores lists store keys in that target's precedence order."},{name:"repository_namespaces",type:"object[]",required:!0,constraint:"Repository-root namespace decisions this run makes: {repository_root, repository_key, declaration_path, namespace, source, action}. A nested store inherits this declaration; its reported effective prefix is not a declaration."},{name:"store_prefixes",type:"object[]",required:!0,constraint:"Effective prefix facts for each project store: {store_root, owner_dir, repository_root, owner_relative_path, old_prefix, old_rule, effective_prefix, nested_declaration_action, front_door_action}. A nonempty owner_relative_path always reports front_door_action `none`; a nested effective_prefix is derived, not a declaration."},{name:"renames",type:"object[]",required:!0,constraint:"Canonical identity changes: {store_root, path, from, to}."},{name:"references",type:"object[]",required:!0,constraint:"Rewritten pointers at a changed identity: {store_root, path, kind, from, to}, kind link or memory-read."},{name:"dryRun",type:"boolean",required:!0,constraint:"True when nothing was written (preview only)."},{name:"resumed",type:"boolean",required:!0,constraint:"True only when this repair resumed the blocked daemon startup."},{name:"resume_error",type:"string",required:!1,constraint:"Present when corpus repair succeeded but normal daemon startup then failed."}],outputKind:"object",effects:["The daemon that owns this canvas runs the migration. Rewrites old-format `profile.json` manifests in place (atomic, under the same per-profile lock `profile project add/remove` take). A manifest whose structure cannot be converted fails the whole run \u2014 no project setting is ever guessed.","Rewrites old-format memory documents in place (atomic per-file writes) across every writable discovered store: profiles, profile-owned projects, this directory's ancestors, nested descendant stores, installed plugin stores, and node stores. Builtin docs are package-owned and never touched.","Applies corpus-wide identity changes in two ordered phases across every writable store, after the global plan comes back blocker-free; a post-write pass re-reads the corpus from disk and verifies it.","Under --dry-run: read-only, writes nothing."]},run:l(async o=>{const t=o.dryRun===!0,a=(o.dir??[]).map(r=>y(r)),n=a.filter(r=>!w(r));if(n.length>0)throw f(`--dir path does not exist: ${n.join(", ")}`,{received:n,field:"dir",next:"Pass the project directory that contains `.crouter/`, or omit --dir to migrate the discovered frontier only."});let e;try{e=await g().migrateState({dry_run:t,dirs:a})}catch(r){v(r)}if(e.blocked){const r=e.blockers,d=e.applied.filter(s=>s.lane!=="corpus").flatMap(s=>s.files),i=e.corpus_phase,c=e.wrote,p=t?"\u2014 this was a --dry-run; nothing was written":i==="written"?`after both write phases \u2014 ${c.corpus_consumers.length} reference and ${c.corpus_identities.length} identity rewrite(s) are on disk and are NOT rolled back`:d.length>0?`before any corpus write \u2014 the corpus is unchanged, but ${d.length} earlier manifest/document rewrite(s) are already on disk`:"\u2014 nothing was written";throw m(`corpus migration ${i==="written"?"verification failed with":"blocked by"} ${r.length} finding(s) ${p}`,{received:e,next:i==="written"?"Resolve every verification finding against the files listed in received.wrote.corpus_identities and .corpus_consumers, then re-run `crtr sys migrate` \u2014 the lane converges from file truth.":"Resolve every blocker, then re-run `crtr sys migrate` \u2014 the earlier lanes are convergent and re-running them is a no-op."})}return{...e,follow_up:e.skipped.length>0?"Some files could not be parsed and were left untouched \u2014 fix each named file, then re-run `crtr sys migrate`.":e.changed===0?"State already current \u2014 nothing to rewrite.":t?"Preview only \u2014 re-run without --dry-run to write these changes.":void 0}},"run")});export{A as sysMigrateLeaf};

package/dist/commands/sys/panels/broker-limits-panel.js

@@ -1,110 +1,2 @@
-import { Input, truncateToWidth } from '@earendil-works/pi-tui';
-import { readConfig, updateRawConfigAtomically } from '../../../core/config.js';
-import { BROKER_LIMIT_OVERRIDE_PRECEDENCE } from '../setup.js';
-import { padAnsi, theme, wrapText } from '../../../core/tui/panel.js';
-function positive(value) {
-    return /^\d+$/.test(value) &&
-        Number.isSafeInteger(Number(value)) &&
-        Number(value) >= 1
-        ? Number(value)
-        : undefined;
-}
-export class BrokerLimitsPanel {
-    onChange;
-    warningInput = new Input();
-    hardCapInput = new Input();
-    index = 0;
-    notice;
-    _focused = false;
-    constructor(onChange) {
-        this.onChange = onChange;
-        const thresholds = readConfig("user").brokerThresholds;
-        this.warningInput.setValue(String(thresholds.warning));
-        this.warningInput.handleInput("\x05");
-        this.hardCapInput.setValue(String(thresholds.automaticReviveCap));
-        this.hardCapInput.handleInput("\x05");
-        this.warningInput.onSubmit = () => this.save();
-        this.hardCapInput.onSubmit = () => this.save();
-    }
-    set focused(value) {
-        this._focused = value;
-        this.warningInput.focused = value && this.index === 0;
-        this.hardCapInput.focused = value && this.index === 1;
-    }
-    selected() {
-        return this.index === 0 ? this.warningInput : this.hardCapInput;
-    }
-    move(delta) {
-        this.index = ((this.index + delta + 2) % 2);
-        this.focused = this._focused;
-        this.notice = undefined;
-    }
-    save() {
-        const warning = positive(this.warningInput.getValue());
-        const cap = positive(this.hardCapInput.getValue());
-        if (warning === undefined || cap === undefined)
-            this.notice = "Both broker limits must be positive integers.";
-        else if (warning > cap)
-            this.notice =
-                "Warning threshold cannot exceed the automatic-revive hard cap.";
-        else {
-            updateRawConfigAtomically("user", (latest) => ({
-                ...latest,
-                brokerThresholds: { warning, automaticReviveCap: cap },
-            }));
-            this.notice = `Saved to user config. Applies next tick. ${BROKER_LIMIT_OVERRIDE_PRECEDENCE}`;
-        }
-        this.onChange();
-    }
-    handleInput(data, matches) {
-        if (/^\d+$/.test(data)) {
-            this.selected().handleInput(data);
-            this.notice = undefined;
-            this.onChange();
-            return true;
-        }
-        if (!matches)
-            return false;
-        if (matches("crtr.setup.list-down", data))
-            this.move(1);
-        else if (matches("crtr.setup.list-up", data))
-            this.move(-1);
-        // DEL (\x7f) is what terminals send for backspace and its code point sits
-        // above the control range, so it has to be excluded here or editing an
-        // existing value is refused as a non-digit keystroke.
-        else if (data.length > 0 &&
-            [...data].every((char) => {
-                const code = char.codePointAt(0);
-                return code >= 32 && code !== 127;
-            }))
-            this.notice = "Broker limits accept digits only.";
-        else {
-            this.selected().handleInput(data);
-            if (data !== "\r" && data !== "\n")
-                this.notice = undefined;
-        }
-        this.onChange();
-        return true;
-    }
-    render(width) {
-        const out = [
-            truncateToWidth(`${theme.fg("accent", theme.bold("Broker limits"))}${theme.fg("dim", "  user scope · defaults 16 / 32")}`, width),
-            truncateToWidth(theme.fg("dim", "These bounds govern daemon automatic revive; explicit node revives remain available."), width),
-            "",
-        ];
-        const line = (index, label, description, input) => {
-            const selected = index === this.index;
-            out.push(truncateToWidth(`${selected ? theme.fg("accent", "▶") : " "} ${padAnsi(selected ? theme.fg("accent", label) : label, 24)} ${input.render(Math.max(8, width - 28))[0] ?? ""}`, width));
-            out.push(truncateToWidth(theme.fg("dim", `    ${description}`), width));
-        };
-        line(0, "Warning threshold", "Warn when live brokers reach this count. Default: 16.", this.warningInput);
-        line(1, "Automatic-revive hard cap", "Defer automatic revives at this count. Default: 32.", this.hardCapInput);
-        out.push("");
-        for (const text of wrapText(`Configured limits apply next tick. ${BROKER_LIMIT_OVERRIDE_PRECEDENCE}`, width))
-            out.push(theme.fg("dim", text));
-        if (this.notice)
-            for (const text of wrapText(this.notice, width))
-                out.push(theme.fg(this.notice.startsWith("Saved") ? "success" : "warning", text));
-        return out;
-    }
-}
+var m=Object.defineProperty;var o=(s,e)=>m(s,"name",{value:e,configurable:!0});import{Input as c,truncateToWidth as h}from"@earendil-works/pi-tui";import{readConfig as I,updateRawConfigAtomically as v}from"../../../core/config.js";import{BROKER_LIMIT_OVERRIDE_PRECEDENCE as d}from"../setup.js";import{padAnsi as C,theme as n,wrapText as p}from"../../../core/tui/panel.js";function f(s){return/^\d+$/.test(s)&&Number.isSafeInteger(Number(s))&&Number(s)>=1?Number(s):void 0}o(f,"positive");class R{static{o(this,"BrokerLimitsPanel")}onChange;warningInput=new c;hardCapInput=new c;index=0;notice;_focused=!1;constructor(e){this.onChange=e;const t=I("user").brokerThresholds;this.warningInput.setValue(String(t.warning)),this.warningInput.handleInput(""),this.hardCapInput.setValue(String(t.automaticReviveCap)),this.hardCapInput.handleInput(""),this.warningInput.onSubmit=()=>this.save(),this.hardCapInput.onSubmit=()=>this.save()}set focused(e){this._focused=e,this.warningInput.focused=e&&this.index===0,this.hardCapInput.focused=e&&this.index===1}selected(){return this.index===0?this.warningInput:this.hardCapInput}move(e){this.index=(this.index+e+2)%2,this.focused=this._focused,this.notice=void 0}save(){const e=f(this.warningInput.getValue()),t=f(this.hardCapInput.getValue());e===void 0||t===void 0?this.notice="Both broker limits must be positive integers.":e>t?this.notice="Warning threshold cannot exceed the automatic-revive hard cap.":(v("user",r=>({...r,brokerThresholds:{warning:e,automaticReviveCap:t}})),this.notice=`Saved to user config. Applies next tick. ${d}`),this.onChange()}handleInput(e,t){return/^\d+$/.test(e)?(this.selected().handleInput(e),this.notice=void 0,this.onChange(),!0):t?(t("crtr.setup.list-down",e)?this.move(1):t("crtr.setup.list-up",e)?this.move(-1):e.length>0&&[...e].every(r=>{const i=r.codePointAt(0);return i>=32&&i!==127})?this.notice="Broker limits accept digits only.":(this.selected().handleInput(e),e!=="\r"&&e!==`
+`&&(this.notice=void 0)),this.onChange(),!0):!1}render(e){const t=[h(`${n.fg("accent",n.bold("Broker limits"))}${n.fg("dim","  user scope \xB7 defaults 16 / 32")}`,e),h(n.fg("dim","These bounds govern daemon automatic revive; explicit node revives remain available."),e),""],r=o((i,u,l,g)=>{const a=i===this.index;t.push(h(`${a?n.fg("accent","\u25B6"):" "} ${C(a?n.fg("accent",u):u,24)} ${g.render(Math.max(8,e-28))[0]??""}`,e)),t.push(h(n.fg("dim",`    ${l}`),e))},"line");r(0,"Warning threshold","Warn when live brokers reach this count. Default: 16.",this.warningInput),r(1,"Automatic-revive hard cap","Defer automatic revives at this count. Default: 32.",this.hardCapInput),t.push("");for(const i of p(`Configured limits apply next tick. ${d}`,e))t.push(n.fg("dim",i));if(this.notice)for(const i of p(this.notice,e))t.push(n.fg(this.notice.startsWith("Saved")?"success":"warning",i));return t}}export{R as BrokerLimitsPanel};