@north-light/crouter 0.3.318 → 0.3.320

package/dist/core/canvas/remote-canvas-source.js

@@ -1,288 +1 @@
-// remote-canvas-source.ts — a CanvasSource backed by a remote canvas over the
-// relay-token-authed `/__crtr/source` transport (see `remote-transport.ts`).
-// Every method shells out to an EXISTING `crtr --json <subcommand>` in-guest —
-// no new in-guest command, no remote SQLite read, no drive-plane verb. A
-// short-TTL cache coalesces the repeated reads a single remote inspection or
-// dashboard render would otherwise make for the same node.
-//
-// P2 DEFERRAL (Stage-C, plan C-1/C-5): this remote path still targets the
-// `/__crtr/source` in-guest fulfillment endpoint on a preview host, NOT the
-// crtrd `/v1` API. Repointing remote canvases at a crtrd proxy shell is a P2
-// item; until then this subsystem is a settled, intentional exception to the
-// "every process is a /v1 client" architecture (which governs LOCAL access).
-import { createRemoteExec } from './remote-transport.js';
-const CACHE_TTL_MS = 1000;
-// Remote JSON shape validation.
-//
-// `execJson<T>` parses stdout and casts it to T with NO structural check — a
-// remote subprocess that exits 0 with a wrong shape (e.g. `{}`, `{node:null}`)
-// would otherwise pass through as a "valid" T. `fetchShow`/`listNodes`/
-// `ticketCountsForView` validate before caching/returning; on a shape mismatch
-// they degrade exactly like the existing network-failure path (null/[]/{}),
-// never a malformed object a caller might dereference.
-function isPlainObject(x) {
-    return typeof x === 'object' && x !== null && !Array.isArray(x);
-}
-function isValidShowResponse(x) {
-    if (!isPlainObject(x))
-        return false;
-    const node = x['node'];
-    if (!isPlainObject(node) || typeof node['node_id'] !== 'string')
-        return false;
-    if (!Array.isArray(x['reports']) || !Array.isArray(x['managers']))
-        return false;
-    const artifacts = x['artifacts'];
-    if (!isPlainObject(artifacts) ||
-        typeof artifacts['report'] !== 'number' ||
-        typeof artifacts['doc'] !== 'number' ||
-        typeof artifacts['roadmap'] !== 'number')
-        return false;
-    if (typeof x['pending_crons'] !== 'number')
-        return false;
-    const paths = x['paths'];
-    if (!isPlainObject(paths) ||
-        typeof paths['context_dir'] !== 'string' ||
-        typeof paths['reports_dir'] !== 'string' ||
-        ('session_file' in paths && paths['session_file'] !== null && typeof paths['session_file'] !== 'string'))
-        return false;
-    if (typeof x['follow_up'] !== 'string')
-        return false;
-    const fault = x['fault'];
-    if (fault !== undefined && fault !== null) {
-        if (!isPlainObject(fault) || typeof fault['link'] !== 'string' || typeof fault['kind'] !== 'string' || typeof fault['since'] !== 'string')
-            return false;
-        const retry = fault['retry'];
-        if (!isPlainObject(retry) || typeof retry['disposition'] !== 'string')
-            return false;
-    }
-    return true;
-}
-/** A `reports`/`managers` entry (`RemoteShowResponse`) — validated per-element
- *  because `isValidShowResponse` only checks the array wrapper. Without this,
- *  a malformed neighbor (`null`, `{}`) survives into `subscriptionsOf`/
- *  `subscribersOf`'s `.map()` and `node/inspect.ts`'s remote `show` passthrough render,
- *  both of which dereference `.node_id`/`.active` unguarded. */
-function isValidNeighborEntry(x) {
-    return (isPlainObject(x) &&
-        typeof x['node_id'] === 'string' &&
-        typeof x['name'] === 'string' &&
-        typeof x['kind'] === 'string' &&
-        typeof x['status'] === 'string' &&
-        typeof x['active'] === 'boolean');
-}
-/** A `NodeRow` element from `node inspect list`'s `nodes` array — validated
- *  per-element because a remote success payload can be `{nodes:[null]}` (the
- *  outer array check alone lets that through). Requires the string identity/
- *  lifecycle fields local/API-backed row renderers dereference unguarded;
- *  the remaining nullable runtime
- *  fields (host_kind, parent, pi_pid, ...) are left to cast through as-is. */
-function isValidRosterEdge(x) {
-    return (isPlainObject(x) &&
-        typeof x['from_id'] === 'string' &&
-        typeof x['to_id'] === 'string' &&
-        typeof x['active'] === 'boolean' &&
-        typeof x['created'] === 'string');
-}
-function isValidNodeRow(x) {
-    if (!isPlainObject(x))
-        return false;
-    return (typeof x['node_id'] === 'string' &&
-        typeof x['name'] === 'string' &&
-        typeof x['kind'] === 'string' &&
-        typeof x['mode'] === 'string' &&
-        typeof x['lifecycle'] === 'string' &&
-        typeof x['status'] === 'string' &&
-        typeof x['cwd'] === 'string' &&
-        typeof x['created'] === 'string');
-}
-export class RemoteCanvasSource {
-    previewEndpoint;
-    relayToken;
-    exec;
-    nodeCache = new Map();
-    rosterCache = new Map();
-    topologyCache = null;
-    viewCache = new Map();
-    constructor(previewEndpoint, relayToken) {
-        this.previewEndpoint = previewEndpoint;
-        this.relayToken = relayToken;
-        this.exec = createRemoteExec(previewEndpoint, relayToken);
-    }
-    async execJson(args) {
-        let raw;
-        try {
-            raw = await this.exec('crtr', ['--json', ...args]);
-        }
-        catch {
-            return null;
-        }
-        if (!raw.ok)
-            return null;
-        if (raw.exitCode !== undefined && raw.exitCode !== 0)
-            return null;
-        try {
-            return JSON.parse(raw.stdout.trim());
-        }
-        catch {
-            return null;
-        }
-    }
-    async fetchShow(id) {
-        const cached = this.nodeCache.get(id);
-        if (cached && Date.now() - cached.at < CACHE_TTL_MS)
-            return cached.value;
-        const raw = await this.execJson(['node', 'inspect', 'show', id]);
-        // Sanitize reports/managers elements here (not just the outer array shape)
-        // so both consumers — subscriptionsOf/subscribersOf's `.map()` below AND
-        // node/inspect.ts's remote `show` passthrough render — see only well-formed
-        // neighbor entries, never a malformed one they'd dereference unguarded.
-        const res = isValidShowResponse(raw)
-            ? { ...raw, fault: raw.fault ?? null, reports: raw.reports.filter(isValidNeighborEntry), managers: raw.managers.filter(isValidNeighborEntry) }
-            : null;
-        this.nodeCache.set(id, { value: res, at: Date.now() });
-        return res;
-    }
-    topology() {
-        if (this.topologyCache !== null && Date.now() - this.topologyCache.at < CACHE_TTL_MS)
-            return this.topologyCache.value;
-        const request = this.loadTopology();
-        this.topologyCache = { value: request, at: Date.now() };
-        return request;
-    }
-    async loadTopology() {
-        const response = await this.exec('crtr', ['--json', 'canvas', 'roster']);
-        if (!response.ok || (response.exitCode !== undefined && response.exitCode !== 0)) {
-            throw new Error('remote canvas topology is unavailable');
-        }
-        let raw;
-        try {
-            raw = JSON.parse(response.stdout.trim());
-        }
-        catch {
-            throw new Error('remote canvas topology is invalid');
-        }
-        if (!isPlainObject(raw) || !Array.isArray(raw['edges']) || !raw['edges'].every(isValidRosterEdge)) {
-            throw new Error('remote canvas topology is invalid');
-        }
-        const edges = raw['edges'];
-        const topology = { subscriptions: new Map(), subscribers: new Map() };
-        for (const edge of edges) {
-            const subscription = { node_id: edge.to_id, active: edge.active, created: edge.created };
-            const subscriber = { node_id: edge.from_id, active: edge.active, created: edge.created };
-            const subscriptions = topology.subscriptions.get(edge.from_id);
-            if (subscriptions === undefined)
-                topology.subscriptions.set(edge.from_id, [subscription]);
-            else
-                subscriptions.push(subscription);
-            const subscribers = topology.subscribers.get(edge.to_id);
-            if (subscribers === undefined)
-                topology.subscribers.set(edge.to_id, [subscriber]);
-            else
-                subscribers.push(subscriber);
-        }
-        return topology;
-    }
-    /** The full passthrough object `node inspect show` produces — used by
-     *  `nodeShow`'s remote branch (`src/commands/node/inspect.ts`) to return the exact
-     *  same shape a local read would, without re-deriving it. */
-    async rawShow(id) {
-        return this.fetchShow(id);
-    }
-    async getNode(id) {
-        return (await this.fetchShow(id))?.node ?? null;
-    }
-    async getRow(id) {
-        const n = (await this.fetchShow(id))?.node;
-        if (!n)
-            return null;
-        return {
-            node_id: n.node_id,
-            name: n.name,
-            kind: n.kind,
-            mode: n.mode,
-            lifecycle: n.lifecycle,
-            status: n.status,
-            cwd: n.cwd,
-            host_kind: n.host_kind ?? null,
-            profile_id: n.profile_id ?? null,
-            parent: n.parent ?? null,
-            created: n.created,
-            intent: n.intent ?? null,
-            waiting_for: n.waiting_for ?? null,
-            frozen_at: n.frozen_at ?? null,
-            terminal_reason: n.terminal_reason ?? null,
-            pi_pid: n.pi_pid ?? null,
-            pi_pid_identity: n.pi_pid_identity ?? null,
-            window: n.window ?? null,
-            tmux_session: n.tmux_session ?? null,
-            pane: n.pane ?? null,
-            // Recovery state projected by the REMOTE canvas's own daemon (stale-provider
-            // overlay already applied there), never a read of this host's files.
-            fault: n.fault ?? null,
-            streaming: n.streaming === true,
-        };
-    }
-    async listNodes(filter) {
-        const key = JSON.stringify(filter?.status ?? null);
-        const cached = this.rosterCache.get(key);
-        if (cached && Date.now() - cached.at < CACHE_TTL_MS)
-            return cached.value;
-        const args = ['node', 'inspect', 'list'];
-        if (filter?.status) {
-            args.push('--status', (Array.isArray(filter.status) ? filter.status : [filter.status]).join(','));
-        }
-        const res = await this.execJson(args);
-        const rawNodes = isPlainObject(res) && Array.isArray(res['nodes']) ? res['nodes'] : [];
-        const nodes = rawNodes.filter(isValidNodeRow);
-        this.rosterCache.set(key, { value: nodes, at: Date.now() });
-        return nodes;
-    }
-    async subscriptionsOf(id) {
-        return (await this.topology()).subscriptions.get(id) ?? [];
-    }
-    async subscribersOf(id) {
-        return (await this.topology()).subscribers.get(id) ?? [];
-    }
-    async view(root) {
-        const cached = this.viewCache.get(root);
-        if (cached && Date.now() - cached.at < CACHE_TTL_MS)
-            return cached.value;
-        const seen = new Set([root]);
-        const out = [];
-        const queue = (await this.subscriptionsOf(root)).map((s) => s.node_id);
-        while (queue.length > 0) {
-            const id = queue.shift();
-            if (seen.has(id))
-                continue;
-            seen.add(id);
-            out.push(id);
-            for (const s of await this.subscriptionsOf(id)) {
-                if (!seen.has(s.node_id))
-                    queue.push(s.node_id);
-            }
-        }
-        this.viewCache.set(root, { value: out, at: Date.now() });
-        return out;
-    }
-    async ticketCountsForNodes(nodeIds) {
-        // The `canvas attention map` transport's `counts` values mean all pending
-        // human tickets (page/review), not just asks.
-        if (nodeIds.length === 0)
-            return {};
-        const res = await this.execJson(['canvas', 'attention', 'map', '--nodes', nodeIds.join(',')]);
-        return isPlainObject(res) && isPlainObject(res['counts']) ? res['counts'] : {};
-    }
-    async ticketCountsForView(root) {
-        const res = await this.execJson(['canvas', 'attention', 'map', '--view', root]);
-        return isPlainObject(res) && isPlainObject(res['counts']) ? res['counts'] : {};
-    }
-    async hasActiveLiveSubscription(id) {
-        const subs = (await this.subscriptionsOf(id)).filter((s) => s.active);
-        for (const s of subs) {
-            const row = await this.getRow(s.node_id);
-            if (row && (row.status === 'active' || row.status === 'idle'))
-                return true;
-        }
-        return false;
-    }
-}
+var y=Object.defineProperty;var u=(s,e)=>y(s,"name",{value:e,configurable:!0});import{createRemoteExec as h}from"./remote-transport.js";const l=1e3;function r(s){return typeof s=="object"&&s!==null&&!Array.isArray(s)}u(r,"isPlainObject");function w(s){if(!r(s))return!1;const e=s.node;if(!r(e)||typeof e.node_id!="string"||!Array.isArray(s.reports)||!Array.isArray(s.managers))return!1;const t=s.artifacts;if(!r(t)||typeof t.report!="number"||typeof t.doc!="number"||typeof t.roadmap!="number"||typeof s.pending_crons!="number")return!1;const o=s.paths;if(!r(o)||typeof o.context_dir!="string"||typeof o.reports_dir!="string"||"session_file"in o&&o.session_file!==null&&typeof o.session_file!="string"||typeof s.follow_up!="string")return!1;const n=s.fault;if(n!=null){if(!r(n)||typeof n.link!="string"||typeof n.kind!="string"||typeof n.since!="string")return!1;const i=n.retry;if(!r(i)||typeof i.disposition!="string")return!1}return!0}u(w,"isValidShowResponse");function p(s){return r(s)&&typeof s.node_id=="string"&&typeof s.name=="string"&&typeof s.kind=="string"&&typeof s.status=="string"&&typeof s.active=="boolean"}u(p,"isValidNeighborEntry");function g(s){return r(s)&&typeof s.from_id=="string"&&typeof s.to_id=="string"&&typeof s.active=="boolean"&&typeof s.created=="string"}u(g,"isValidRosterEdge");function _(s){return r(s)?typeof s.node_id=="string"&&typeof s.name=="string"&&typeof s.kind=="string"&&typeof s.mode=="string"&&typeof s.lifecycle=="string"&&typeof s.status=="string"&&typeof s.cwd=="string"&&typeof s.created=="string":!1}u(_,"isValidNodeRow");class v{static{u(this,"RemoteCanvasSource")}previewEndpoint;relayToken;exec;nodeCache=new Map;rosterCache=new Map;topologyCache=null;viewCache=new Map;constructor(e,t){this.previewEndpoint=e,this.relayToken=t,this.exec=h(e,t)}async execJson(e){let t;try{t=await this.exec("crtr",["--json",...e])}catch{return null}if(!t.ok||t.exitCode!==void 0&&t.exitCode!==0)return null;try{return JSON.parse(t.stdout.trim())}catch{return null}}async fetchShow(e){const t=this.nodeCache.get(e);if(t&&Date.now()-t.at<l)return t.value;const o=await this.execJson(["node","inspect","show",e]),n=w(o)?{...o,fault:o.fault??null,reports:o.reports.filter(p),managers:o.managers.filter(p)}:null;return this.nodeCache.set(e,{value:n,at:Date.now()}),n}topology(){if(this.topologyCache!==null&&Date.now()-this.topologyCache.at<l)return this.topologyCache.value;const e=this.loadTopology();return this.topologyCache={value:e,at:Date.now()},e}async loadTopology(){const e=await this.exec("crtr",["--json","canvas","roster"]);if(!e.ok||e.exitCode!==void 0&&e.exitCode!==0)throw new Error("remote canvas topology is unavailable");let t;try{t=JSON.parse(e.stdout.trim())}catch{throw new Error("remote canvas topology is invalid")}if(!r(t)||!Array.isArray(t.edges)||!t.edges.every(g))throw new Error("remote canvas topology is invalid");const o=t.edges,n={subscriptions:new Map,subscribers:new Map};for(const i of o){const a={node_id:i.to_id,active:i.active,created:i.created},c={node_id:i.from_id,active:i.active,created:i.created},f=n.subscriptions.get(i.from_id);f===void 0?n.subscriptions.set(i.from_id,[a]):f.push(a);const d=n.subscribers.get(i.to_id);d===void 0?n.subscribers.set(i.to_id,[c]):d.push(c)}return n}async rawShow(e){return this.fetchShow(e)}async getNode(e){return(await this.fetchShow(e))?.node??null}async getRow(e){const t=(await this.fetchShow(e))?.node;return t?{node_id:t.node_id,name:t.name,kind:t.kind,mode:t.mode,lifecycle:t.lifecycle,status:t.status,cwd:t.cwd,host_kind:t.host_kind??null,profile_id:t.profile_id??null,parent:t.parent??null,created:t.created,intent:t.intent??null,waiting_for:t.waiting_for??null,frozen_at:t.frozen_at??null,terminal_reason:t.terminal_reason??null,pi_pid:t.pi_pid??null,pi_pid_identity:t.pi_pid_identity??null,window:t.window??null,tmux_session:t.tmux_session??null,pane:t.pane??null,fault:t.fault??null,streaming:t.streaming===!0}:null}async listNodes(e){const t=JSON.stringify(e?.status??null),o=this.rosterCache.get(t);if(o&&Date.now()-o.at<l)return o.value;const n=["node","inspect","list"];e?.status&&n.push("--status",(Array.isArray(e.status)?e.status:[e.status]).join(","));const i=await this.execJson(n),c=(r(i)&&Array.isArray(i.nodes)?i.nodes:[]).filter(_);return this.rosterCache.set(t,{value:c,at:Date.now()}),c}async subscriptionsOf(e){return(await this.topology()).subscriptions.get(e)??[]}async subscribersOf(e){return(await this.topology()).subscribers.get(e)??[]}async view(e){const t=this.viewCache.get(e);if(t&&Date.now()-t.at<l)return t.value;const o=new Set([e]),n=[],i=(await this.subscriptionsOf(e)).map(a=>a.node_id);for(;i.length>0;){const a=i.shift();if(!o.has(a)){o.add(a),n.push(a);for(const c of await this.subscriptionsOf(a))o.has(c.node_id)||i.push(c.node_id)}}return this.viewCache.set(e,{value:n,at:Date.now()}),n}async ticketCountsForNodes(e){if(e.length===0)return{};const t=await this.execJson(["canvas","attention","map","--nodes",e.join(",")]);return r(t)&&r(t.counts)?t.counts:{}}async ticketCountsForView(e){const t=await this.execJson(["canvas","attention","map","--view",e]);return r(t)&&r(t.counts)?t.counts:{}}async hasActiveLiveSubscription(e){const t=(await this.subscriptionsOf(e)).filter(o=>o.active);for(const o of t){const n=await this.getRow(o.node_id);if(n&&(n.status==="active"||n.status==="idle"))return!0}return!1}}export{v as RemoteCanvasSource};

package/dist/core/canvas/remote-transport.js

@@ -1,57 +1 @@
-// remote-transport.ts — the Node-side remote exec transport for a
-// RemoteCanvasSource. POSTs an exec request to a Blaxel preview endpoint's
-// `/__crtr/source` route, bearer-authed with the relay token.
-//
-// This is the ONLY way RemoteCanvasSource reaches the remote canvas: it never
-// reads a remote SQLite file, and it never invokes an in-guest command that
-// doesn't already exist. Every argv it sends is `crtr --json <existing
-// subcommand>` — read-only.
-//
-// P2 DEFERRAL (Stage-C, plan C-1/C-5): `/__crtr/source` on a preview host is
-// the REMOTE transport, deliberately outside the local crtrd `/v1` boundary.
-// Repointing remote hosts at a crtrd proxy shell is a P2 hand-off; this file is
-// a settled exception, not a P1 defect.
-/** The remote read plane crosses a network boundary — a stalled TCP connection
- *  or a hung `/__crtr/source` handler must fail closed, not wedge `node
- *  inspect`/`canvas browse`/attach forever. Low enough that a genuinely hung
- *  endpoint surfaces as a failed read within one interactive frame, not a
- *  silent hang. */
-const DEFAULT_TIMEOUT_MS = 5_000;
-export function createRemoteExec(previewEndpoint, relayToken, timeoutMs = DEFAULT_TIMEOUT_MS) {
-    // A malformed stored token (control chars / non-Latin1 bytes) would throw
-    // from the Headers constructor with the invalid value IN the thrown
-    // message — validate up front so that never happens, and fail with a
-    // GENERIC message instead: no token bytes may ever reach returned stderr.
-    // HTTP header values are ISO-8859-1; reject
-    // anything outside `/^[\x20-\x7e]+$/` (printable ASCII, no CR/LF/control).
-    const tokenValid = /^[\x20-\x7e]+$/.test(relayToken);
-    return async function exec(bin, args) {
-        if (!tokenValid) {
-            return { ok: false, stdout: '', stderr: 'remote source: invalid stored relay token' };
-        }
-        const req = { kind: 'exec', bin, args };
-        const controller = new AbortController();
-        const timer = setTimeout(() => controller.abort(), timeoutMs);
-        let res;
-        try {
-            res = await fetch(new URL('/__crtr/source', previewEndpoint), {
-                method: 'POST',
-                headers: { 'content-type': 'application/json', authorization: `Bearer ${relayToken}` },
-                body: JSON.stringify(req),
-                signal: controller.signal,
-            });
-        }
-        catch (e) {
-            if (controller.signal.aborted) {
-                return { ok: false, stdout: '', stderr: `remote source: timeout after ${timeoutMs}ms` };
-            }
-            return { ok: false, stdout: '', stderr: 'remote source: network error' };
-        }
-        finally {
-            clearTimeout(timer);
-        }
-        if (!res.ok)
-            return { ok: false, stdout: '', stderr: `remote source: HTTP ${res.status} ${res.statusText}` };
-        return (await res.json());
-    };
-}
+var d=Object.defineProperty;var s=(r,e)=>d(r,"name",{value:e,configurable:!0});const k=5e3;function x(r,e,n=5e3){const a=/^[\x20-\x7e]+$/.test(e);return s(async function(c,i){if(!a)return{ok:!1,stdout:"",stderr:"remote source: invalid stored relay token"};const u={kind:"exec",bin:c,args:i},o=new AbortController,l=setTimeout(()=>o.abort(),n);let t;try{t=await fetch(new URL("/__crtr/source",r),{method:"POST",headers:{"content-type":"application/json",authorization:`Bearer ${e}`},body:JSON.stringify(u),signal:o.signal})}catch{return o.signal.aborted?{ok:!1,stdout:"",stderr:`remote source: timeout after ${n}ms`}:{ok:!1,stdout:"",stderr:"remote source: network error"}}finally{clearTimeout(l)}return t.ok?await t.json():{ok:!1,stdout:"",stderr:`remote source: HTTP ${t.status} ${t.statusText}`}},"exec")}s(x,"createRemoteExec");export{x as createRemoteExec};