@north-light/crouter 0.3.318 → 0.3.320

package/dist/core/runtime/nodes.js

@@ -1,331 +1 @@
-// Runtime node operations — the behavior layer above the canvas store.
-//
-// canvas/ is the pure data-access layer (nodes + edges). This is where the
-// design's *rules* live: how a node comes into being, the env contract its pi
-// process inherits, and the spawn-time wiring of the subscription spine.
-//
-// Two ways a node is born:
-//   • root  — a user-opened entry point (bare `crtr`).
-//             No parent; resident by default (it's a conversation you live in).
-//   • child — spawned by another node. Terminal until it must persist. On
-//             spawn the PARENT auto-subscribes (active) to the child, so it
-//             learns when the work finishes — this seeds the subscription
-//             graph to mirror the spawn structure. A `spawned_by` audit edge
-//             is also recorded.
-import { envHomeOverride, envRuntimeHomeOverride } from '../../shared/env.js';
-import { randomBytes } from 'node:crypto';
-import { mkdirSync } from 'node:fs';
-import { createNode, getNode, getRow, subscribe, recordSpawn, subscribersOf, contextDir, } from '../canvas/index.js';
-import { memoryDir } from './memory.js';
-import { resolveInstallId } from '../canvas/install-id.js';
-import { canvasDbPath } from '../canvas/paths.js';
-import { usage } from '../errors.js';
-import { assertProfileAvailableForBirth } from '../profiles/deletion-reservation.js';
-import { admitNodeCreate } from '../command-hooks/lifecycle-create.js';
-import { fanDoctrineWake } from './close.js';
-import { BIRTH_ANNOUNCEMENT_MARKER, birthAnnouncementBody } from '../../shared/birth-announcement.js';
-// crtrd sets this once at boot (setInstallId) and it wins unconditionally —
-// a daemon process only ever serves one canvas home for its whole lifetime,
-// so no keying is needed there. Every OTHER in-process caller (tests,
-// in-process tooling — spawnNode is called directly by many existing test
-// files, several of which switch CRTR_HOME + closeDb() between cases) has no
-// such guarantee, so its lazy cache is keyed by canvas-db path — the same
-// identity openDb() itself keys its handle cache by (db.ts's `handles` map) —
-// so a CRTR_HOME switch can never leak one canvas's install id onto another's
-// nodes.
-let daemonInstallId;
-const lazyInstallIdByHome = new Map();
-/** Explicitly set the resolved install id. crtrd calls this once at boot,
- *  immediately after `resolveInstallId()` — see crtrd.ts — so a provisioning
- *  mismatch fails the daemon loudly at STARTUP rather than lazily on first
- *  spawn. Exported for the daemon only; every other caller gets it lazily via
- *  `installId()` below. */
-export function setInstallId(id) {
-    daemonInstallId = id;
-}
-/** Lazily resolve and cache the canvas-install id, keyed by the currently
- *  active canvas home so a process that switches `CRTR_HOME` (tests, in-
- *  process tooling) never keeps stamping a stale home's install id onto a
- *  different home's nodes. crtrd's boot-set value (`setInstallId`) always
- *  wins when present — a daemon never switches homes mid-process. */
-function installId() {
-    if (daemonInstallId !== undefined)
-        return daemonInstallId;
-    const home = canvasDbPath();
-    const cached = lazyInstallIdByHome.get(home);
-    if (cached !== undefined)
-        return cached;
-    const resolved = resolveInstallId();
-    lazyInstallIdByHome.set(home, resolved);
-    return resolved;
-}
-/** Raw time-sortable + random id shape — used for non-node opaque ids such as
- *  focus ids (`f-…`) that are NOT canvas node identities and keep their
- *  historical 2-segment shape (unstamped by the canvas-install id). */
-export function newJobId() {
-    return `${Date.now().toString(36)}-${randomBytes(4).toString('hex')}`;
-}
-/** Generate a NODE id: `<install>-<time36>-<rand4hex>` (3 segments) — the
- *  canvas-install id stamped onto the historical job-id shape, so every
- *  minted node id is a globally-unique NAME that also names the canvas that
- *  minted it (see the unified-chat/addressing design's "ID scheme"). crtrd is
- *  the sole node minter. */
-export function newNodeId() {
-    return `${installId()}-${newJobId()}`;
-}
-// The node id itself is an OPAQUE, caller-meaningless NAME (see the unified
-// chat/addressing design's "ID scheme") — never parsed for structure. This is
-// therefore a single non-structural, charset-safety predicate: lowercase
-// [a-z0-9-] only (so 'remote42' — zero hyphens — is exactly as valid as any
-// stamped 3-segment id) and a length cap. 128 is chosen to exactly match
-// paths.ts's `isSafeNodeId` filesystem-path-segment boundary (the sole other
-// place a node id's raw byte length is safety-checked) rather than picking an
-// independent number that could drift out of sync with it. Every id that
-// passes here is automatically also a safe fs path segment, a safe
-// `crtr/<id>` git branch suffix, and never contains '.', '..', '/', '\\', or a
-// null byte (the charset alone rules all of those out) — no sink needs a
-// leading/trailing/double-hyphen restriction on top, so none is imposed.
-const NODE_ID_MAX_LEN = 128;
-const NODE_ID_FORMAT = /^[a-z0-9-]+$/;
-/** Thrown when a caller-specified `--node-id` (or its API twin `node_id`)
- *  already names a live node. Distinguishable from every other spawn failure
- *  so a caller can treat it as "attach instead of create" per the unified
- *  chat/addressing design's ensure semantics — never overwrite, never
- *  double-spawn. Mapped to HTTP 409 in `src/daemon/api/map.ts`. */
-export class NodeIdConflictError extends Error {
-    nodeId;
-    constructor(nodeId) {
-        super(`node already exists: ${nodeId}`);
-        this.nodeId = nodeId;
-        this.name = 'NodeIdConflictError';
-    }
-}
-/** Format-validate a CALLER-SUPPLIED node id operand. Throws a usage error on
- *  a bad shape; never touches the canvas. Shared by the early best-effort
- *  preflight (`preflightNodeId`, run before any worktree is allocated) and the
- *  authoritative check immediately before node creation (`validatedExplicitNodeId`
- *  below) so the two can never disagree about what shape is valid. */
-function validateNodeIdFormat(nodeId) {
-    if (nodeId.length === 0 || nodeId.length > NODE_ID_MAX_LEN) {
-        throw usage(`invalid --node-id '${nodeId}': must be 1-${NODE_ID_MAX_LEN} characters`, {
-            next: `Pass an id-safe string (lowercase letters, digits, hyphens) of at most ${NODE_ID_MAX_LEN} characters.`,
-        });
-    }
-    if (!NODE_ID_FORMAT.test(nodeId)) {
-        throw usage(`invalid --node-id '${nodeId}': must contain only lowercase letters, digits, and hyphens (e.g. 'remote42', 'my-node-1')`, { next: 'Use only lowercase letters, digits, and hyphens.' });
-    }
-}
-/** Best-effort preflight for a caller-supplied `--node-id`, run BEFORE any
- *  worktree is allocated for it (`spawnChild` in spawn.ts) — so a malformed or
- *  already-taken id fails before there is anything to leak/clean up. Format
- *  validation here is authoritative (an id that fails it can never become
- *  valid); the duplicate check is advisory only — a concurrent create can
- *  still win the race between this check and the synchronous check-then-
- *  create below, which remains the SOLE authoritative decider. */
-export function preflightNodeId(nodeId) {
-    validateNodeIdFormat(nodeId);
-    if (getNode(nodeId) !== null)
-        throw new NodeIdConflictError(nodeId);
-}
-/** Validate + duplicate-check a CALLER-SUPPLIED node id operand before it
- *  reaches the canvas. Internally-minted ids (newNodeId()-derived) already
- *  satisfy the format unconditionally and are never a duplicate (they embed a
- *  fresh timestamp+random suffix), so this is only ever exercised by an
- *  explicit `opts.nodeId` from a real caller (`--node-id` / API `node_id`).
- *  It runs inside the create critical section immediately before `createNode`,
- *  so concurrent explicit-id births resolve to one winner and one
- *  `NodeIdConflictError`. */
-function validatedExplicitNodeId(nodeId) {
-    validateNodeIdFormat(nodeId);
-    if (getNode(nodeId) !== null)
-        throw new NodeIdConflictError(nodeId);
-    return nodeId;
-}
-/** The root of a node's spine: walk the `parent` column up to `parent == null`.
- *  Cycle-guarded (parents must not cycle, but never loop forever). Lives in the
- *  node layer (not placement) so the env-builder and placement both reach it
- *  without an import cycle — `CRTR_SUBTREE` is emitted as `rootOfSpine(nodeId)`
- *  at every launch site. */
-export function rootOfSpine(nodeId) {
-    let cur = nodeId;
-    const seen = new Set();
-    for (;;) {
-        if (seen.has(cur))
-            return cur;
-        seen.add(cur);
-        const row = getRow(cur);
-        if (row === null || row.parent == null)
-            return cur;
-        cur = row.parent;
-    }
-}
-/** Read the current node's identity from the environment. A spawned pi process
- *  runs with CRTR_NODE_ID set; its own `crtr` invocations spawn children under
- *  it by reading CRTR_NODE_ID as the parent. */
-export function currentNodeContext() {
-    const env = process.env;
-    return {
-        nodeId: env['CRTR_NODE_ID'] ?? null,
-        kind: env['CRTR_KIND'] ?? null,
-        mode: env['CRTR_MODE'] ?? null,
-    };
-}
-/** The env injected into a node's pi process. Self-gating extensions read
- *  CRTR_KIND/CRTR_MODE to flip behavior on polymorph without a respawn; the
- *  feed/inbox machinery reads CRTR_NODE_ID. */
-export function nodeEnv(meta) {
-    const env = {
-        CRTR_NODE_ID: meta.node_id,
-        CRTR_KIND: meta.kind,
-        CRTR_MODE: meta.mode,
-        CRTR_LIFECYCLE: meta.lifecycle,
-        CRTR_NODE_CWD: meta.cwd,
-        // The node's own context dir (canvas home), as an ABSOLUTE path. The engine
-        // runs with cwd = CRTR_NODE_CWD (the project), so a relative `context/`
-        // resolves into the REPO, not here — agents must address artifacts via this.
-        CRTR_CONTEXT_DIR: contextDir(meta.node_id),
-        CRTR_CYCLES: (meta.cycles ?? 0).toString(),
-        // The runtime→resolver seam: memory-resolver.ts/scope.ts/config.ts read
-        // this process-wide env var to pull in the node's profile memory store and
-        // multi-project pointer set. '' (never omitted) only for historical
-        // null-profile rows, matching every other CRTR_* scalar here.
-        CRTR_PROFILE_ID: meta.profile_id ?? '',
-        // The Claude subscription adapter re-injects pi's docs block as a hidden
-        // message whenever a turn's prompt mentions pi. canvas-prompt-scrub already
-        // removes that block from the system prompt, so re-injection would only put
-        // the adapter's own fallback copy back into the conversation. Never inject.
-        PI_CLAUDE_OAUTH_REINJECT_SCOPE: 'never',
-    };
-    if (meta.parent)
-        env['CRTR_PARENT_NODE_ID'] = meta.parent;
-    // Propagate an explicit canvas home so children share the same canvas.
-    const home = envHomeOverride();
-    if (home !== undefined && home !== '')
-        env['CRTR_HOME'] = home;
-    // Propagate an explicit runtime home so broker-side `crtr` invocations use
-    // the same installed generation despite an isolated HOME.
-    const runtimeHome = envRuntimeHomeOverride();
-    if (runtimeHome !== undefined && runtimeHome !== '')
-        env['CRTR_RUNTIME_HOME'] = runtimeHome;
-    // Propagate the subtree-root node id. The broker uses it to group a subtree;
-    // each launch site also emits the authoritative rootOfSpine(nodeId) over this
-    // passthrough.
-    const subtree = process.env['CRTR_SUBTREE'];
-    if (subtree !== undefined && subtree !== '')
-        env['CRTR_SUBTREE'] = subtree;
-    // Merge any launch-spec env last (it may override / extend).
-    return { ...env, ...(meta.launch?.env ?? {}) };
-}
-/** Create a node on the canvas and wire its spawn-time edges.
- *
- *  For a child (parent given): the parent auto-subscribes ACTIVE to the child
- *  (so it's woken when the child finishes), and a spawned_by audit edge is
- *  recorded. For a root (no parent): no edges, resident by default. */
-export async function spawnNode(opts) {
-    const nodeId = opts.nodeId !== undefined ? (validateNodeIdFormat(opts.nodeId), opts.nodeId) : newNodeId();
-    const parent = opts.parent ?? null;
-    const isRoot = parent === null;
-    // Provenance is independent of the spine: a root has no parent but still
-    // records who spawned it. A child's spawner is its parent unless overridden.
-    const spawnedBy = opts.spawnedBy ?? parent;
-    const creator = opts.creator ?? null;
-    const mode = opts.mode ?? 'base';
-    // A user-opened root is resident (a conversation you live in); a spawned node
-    // is terminal until it must persist (promotion handles that later).
-    const lifecycle = opts.lifecycle ?? (isRoot ? 'resident' : 'terminal');
-    const meta = {
-        node_id: nodeId,
-        name: opts.name ?? opts.kind,
-        description: opts.description,
-        cycles: 0,
-        created: new Date().toISOString(),
-        cwd: opts.cwd,
-        // Broker is the only host: every node runs on the headless broker; a tmux
-        // pane is only an attach viewer.
-        host_kind: 'broker',
-        profile_id: opts.profile_id ?? null,
-        kind: opts.kind,
-        mode,
-        lifecycle,
-        // Birth snapshots already represent this persona, so no transition is pending.
-        persona_ack: { kind: opts.kind, mode, lifecycle },
-        status: 'active',
-        parent,
-        spawned_by: spawnedBy,
-        creator,
-        fork_from: opts.forkFrom,
-        fork_source_file: opts.forkSourceFile,
-        review_binding: opts.reviewBinding,
-        model_override: opts.modelOverride ?? null,
-        passive_default: opts.passiveDefault ?? false,
-        ...(opts.managedWorktree !== undefined ? { managed_worktree: opts.managedWorktree } : {}),
-        intent: null,
-        deadline_at: opts.deadlineAt ?? null,
-        pi_session_id: null,
-        pi_session_file: null,
-        launch: opts.launch,
-    };
-    // Validate BEFORE minting: a bad parent must leave no half-born orphan row or
-    // dirs behind, so the parent's existence is checked before createNode
-    // scaffolds anything on disk or in the db.
-    if (parent !== null && getNode(parent) === null) {
-        throw new Error(`cannot spawn under unknown parent node: ${parent}`);
-    }
-    if (creator !== null && getNode(creator) === null) {
-        throw new Error(`cannot spawn from unknown creator node: ${creator}`);
-    }
-    assertProfileAvailableForBirth(meta.profile_id ?? null);
-    const releaseCreateGate = await admitNodeCreate({
-        kind: meta.kind,
-        mode: meta.mode,
-        cwd: meta.cwd,
-        profile: meta.profile_id ?? null,
-        root: isRoot,
-        parentId: parent,
-        requestingNodeId: creator,
-        lifecycle,
-        replaces: opts.replaces ?? null,
-    });
-    try {
-        if (opts.nodeId !== undefined)
-            validatedExplicitNodeId(opts.nodeId);
-        await opts.beforeCreate?.();
-        createNode(meta, opts.outcomeDelivery === undefined ? undefined : { outcomeDelivery: opts.outcomeDelivery });
-    }
-    finally {
-        releaseCreateGate();
-    }
-    // Create the node-local memory directory so substrate docs can be written
-    // directly into it without a separate mkdir. Skip for ephemeral human-bridge
-    // rows (kind 'human') — they are not agent nodes.
-    if (meta.kind !== 'human') {
-        mkdirSync(memoryDir(meta.node_id), { recursive: true });
-    }
-    if (parent !== null && opts.subscribe !== false) {
-        // The load-bearing seed: parent subscribes (active) to child so it learns
-        // when the work finishes. This mirrors spawn structure into the spine.
-        // A root (parent=null) gets NO subscription — nobody is woken by it.
-        subscribe(parent, meta.node_id, true);
-    }
-    if (parent !== null && creator !== parent) {
-        try {
-            fanDoctrineWake(meta.node_id, subscribersOf(meta.node_id), `Child created — ${meta.name} (${meta.node_id}, ${meta.kind})`, {
-                birth_announcement: BIRTH_ANNOUNCEMENT_MARKER,
-                body: birthAnnouncementBody({
-                    name: meta.name,
-                    nodeId: meta.node_id,
-                    kind: meta.kind,
-                    creator: creator === null ? 'an external process' : getNode(creator).name,
-                }),
-            }, 'deferred');
-        }
-        catch {
-            /* a failed birth announcement never prevents the child from existing */
-        }
-    }
-    // Audit-only provenance edge — recorded for a root too (from its spawner).
-    if (spawnedBy !== null && spawnedBy !== undefined && getNode(spawnedBy) !== null) {
-        recordSpawn(meta.node_id, spawnedBy);
-    }
-    return meta;
-}
+var h=Object.defineProperty;var i=(e,n)=>h(e,"name",{value:n,configurable:!0});import{envHomeOverride as I,envRuntimeHomeOverride as C}from"../../shared/env.js";import{randomBytes as p}from"node:crypto";import{mkdirSync as v}from"node:fs";import{createNode as y,getNode as a,getRow as D,subscribe as N,recordSpawn as k,subscribersOf as T,contextDir as g}from"../canvas/index.js";import{memoryDir as O}from"./memory.js";import{resolveInstallId as b}from"../canvas/install-id.js";import{canvasDbPath as x}from"../canvas/paths.js";import{usage as m}from"../errors.js";import{assertProfileAvailableForBirth as $}from"../profiles/deletion-reservation.js";import{admitNodeCreate as S}from"../command-hooks/lifecycle-create.js";import{fanDoctrineWake as A}from"./close.js";import{BIRTH_ANNOUNCEMENT_MARKER as B,birthAnnouncementBody as M}from"../../shared/birth-announcement.js";let u;const R=new Map;function ne(e){u=e}i(ne,"setInstallId");function H(){if(u!==void 0)return u;const e=x(),n=R.get(e);if(n!==void 0)return n;const r=b();return R.set(e,r),r}i(H,"installId");function F(){return`${Date.now().toString(36)}-${p(4).toString("hex")}`}i(F,"newJobId");function P(){return`${H()}-${F()}`}i(P,"newNodeId");const s=128,U=/^[a-z0-9-]+$/;class w extends Error{static{i(this,"NodeIdConflictError")}nodeId;constructor(n){super(`node already exists: ${n}`),this.nodeId=n,this.name="NodeIdConflictError"}}function f(e){if(e.length===0||e.length>s)throw m(`invalid --node-id '${e}': must be 1-${s} characters`,{next:`Pass an id-safe string (lowercase letters, digits, hyphens) of at most ${s} characters.`});if(!U.test(e))throw m(`invalid --node-id '${e}': must contain only lowercase letters, digits, and hyphens (e.g. 'remote42', 'my-node-1')`,{next:"Use only lowercase letters, digits, and hyphens."})}i(f,"validateNodeIdFormat");function re(e){if(f(e),a(e)!==null)throw new w(e)}i(re,"preflightNodeId");function L(e){if(f(e),a(e)!==null)throw new w(e);return e}i(L,"validatedExplicitNodeId");function oe(e){let n=e;const r=new Set;for(;;){if(r.has(n))return n;r.add(n);const t=D(n);if(t===null||t.parent==null)return n;n=t.parent}}i(oe,"rootOfSpine");function ie(){const e=process.env;return{nodeId:e.CRTR_NODE_ID??null,kind:e.CRTR_KIND??null,mode:e.CRTR_MODE??null}}i(ie,"currentNodeContext");function te(e){const n={CRTR_NODE_ID:e.node_id,CRTR_KIND:e.kind,CRTR_MODE:e.mode,CRTR_LIFECYCLE:e.lifecycle,CRTR_NODE_CWD:e.cwd,CRTR_CONTEXT_DIR:g(e.node_id),CRTR_CYCLES:(e.cycles??0).toString(),CRTR_PROFILE_ID:e.profile_id??"",PI_CLAUDE_OAUTH_REINJECT_SCOPE:"never"};e.parent&&(n.CRTR_PARENT_NODE_ID=e.parent);const r=I();r!==void 0&&r!==""&&(n.CRTR_HOME=r);const t=C();t!==void 0&&t!==""&&(n.CRTR_RUNTIME_HOME=t);const d=process.env.CRTR_SUBTREE;return d!==void 0&&d!==""&&(n.CRTR_SUBTREE=d),{...n,...e.launch?.env??{}}}i(te,"nodeEnv");async function de(e){const n=e.nodeId!==void 0?(f(e.nodeId),e.nodeId):P(),r=e.parent??null,t=r===null,d=e.spawnedBy??r,l=e.creator??null,_=e.mode??"base",c=e.lifecycle??(t?"resident":"terminal"),o={node_id:n,name:e.name??e.kind,description:e.description,cycles:0,created:new Date().toISOString(),cwd:e.cwd,host_kind:"broker",profile_id:e.profile_id??null,kind:e.kind,mode:_,lifecycle:c,persona_ack:{kind:e.kind,mode:_,lifecycle:c},status:"active",parent:r,spawned_by:d,creator:l,fork_from:e.forkFrom,fork_source_file:e.forkSourceFile,review_binding:e.reviewBinding,model_override:e.modelOverride??null,passive_default:e.passiveDefault??!1,...e.managedWorktree!==void 0?{managed_worktree:e.managedWorktree}:{},intent:null,deadline_at:e.deadlineAt??null,pi_session_id:null,pi_session_file:null,launch:e.launch};if(r!==null&&a(r)===null)throw new Error(`cannot spawn under unknown parent node: ${r}`);if(l!==null&&a(l)===null)throw new Error(`cannot spawn from unknown creator node: ${l}`);$(o.profile_id??null);const E=await S({kind:o.kind,mode:o.mode,cwd:o.cwd,profile:o.profile_id??null,root:t,parentId:r,requestingNodeId:l,lifecycle:c,replaces:e.replaces??null});try{e.nodeId!==void 0&&L(e.nodeId),await e.beforeCreate?.(),y(o,e.outcomeDelivery===void 0?void 0:{outcomeDelivery:e.outcomeDelivery})}finally{E()}if(o.kind!=="human"&&v(O(o.node_id),{recursive:!0}),r!==null&&e.subscribe!==!1&&N(r,o.node_id,!0),r!==null&&l!==r)try{A(o.node_id,T(o.node_id),`Child created \u2014 ${o.name} (${o.node_id}, ${o.kind})`,{birth_announcement:B,body:M({name:o.name,nodeId:o.node_id,kind:o.kind,creator:l===null?"an external process":a(l).name})},"deferred")}catch{}return d!=null&&a(d)!==null&&k(o.node_id,d),o}i(de,"spawnNode");export{w as NodeIdConflictError,ie as currentNodeContext,F as newJobId,P as newNodeId,te as nodeEnv,re as preflightNodeId,oe as rootOfSpine,ne as setInstallId,de as spawnNode};

package/dist/core/runtime/outcome-document.js

@@ -1,97 +1 @@
-// The immutable outcome document handed to a registered delivery target.
-import { existsSync, readFileSync } from 'node:fs';
-import { contextDir, reportsDir } from '../canvas/paths.js';
-import { outputResultPath } from './structured-output.js';
-const MAX_DOCUMENT_BYTES = 256 * 1024;
-function structuredResult(nodeId) {
-    const path = outputResultPath(nodeId);
-    try {
-        return existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-function parseDetail(detailJson) {
-    if (detailJson === null)
-        return null;
-    try {
-        return JSON.parse(detailJson);
-    }
-    catch {
-        return null;
-    }
-}
-/** Preserve valid Unicode while bounding a display-only field by UTF-8 bytes. */
-function truncateDescription(value) {
-    const maxBytes = 1024;
-    if (Buffer.byteLength(value, 'utf8') <= maxBytes)
-        return value;
-    const ellipsis = '…';
-    let bytes = Buffer.byteLength(ellipsis, 'utf8');
-    let result = '';
-    for (const character of value) {
-        const next = Buffer.byteLength(character, 'utf8');
-        if (bytes + next > maxBytes)
-            break;
-        bytes += next;
-        result += character;
-    }
-    return `${result}${ellipsis}`;
-}
-/** Compose a document at outcome time; delivery only replaces `delivery.attempt`. */
-export function composeNodeOutcomeDocument(args) {
-    const { node, outcome, action } = args;
-    const detail = parseDetail(outcome.detailJson);
-    const finalReport = args.finalReport ?? node.final_report ?? '';
-    const name = truncateDescription(node.name);
-    const description = node.description === undefined ? undefined : truncateDescription(node.description);
-    const result = outcome.kind === 'result'
-        ? args.structuredResult === undefined ? structuredResult(node.node_id) : args.structuredResult
-        : undefined;
-    const document = {
-        schema: 'crtr.node-outcome/v1',
-        outcomeId: `${node.node_id}:${outcome.revision}`,
-        nodeId: node.node_id,
-        revision: outcome.revision,
-        kind: outcome.kind,
-        reason: outcome.reason,
-        settledAt: outcome.at,
-        node: {
-            name,
-            ...(description === undefined ? {} : { description }),
-            kind: node.kind,
-            mode: node.mode,
-            lifecycle: node.lifecycle,
-            status: node.status,
-            terminalReason: node.terminal_reason ?? null,
-            cwd: node.cwd,
-            createdAt: node.created,
-            parent: node.parent ?? null,
-            spawnedBy: node.spawned_by ?? null,
-        },
-        ...(outcome.kind === 'result' ? {
-            result: {
-                finalReport: { basename: finalReport, path: `${reportsDir(node.node_id)}/${finalReport}` },
-                ...(result === undefined ? {} : { structuredResult: result }),
-            },
-        } : {
-            failure: {
-                message: detail?.message ?? null,
-                faultKind: detail?.fault_kind ?? null,
-                errorClass: detail?.error_class ?? null,
-                respawnFailures: detail?.respawn_failures ?? null,
-                deadline: detail?.deadline === undefined ? null : { deadlineAt: detail.deadline.deadline_at, elapsedMs: detail.deadline.elapsed_ms },
-                declined: detail?.declined ?? null,
-            },
-        }),
-        action,
-        delivery: { attempt: 0 },
-    };
-    if (Buffer.byteLength(JSON.stringify(document), 'utf8') > MAX_DOCUMENT_BYTES && document.result?.structuredResult !== undefined) {
-        delete document.result.structuredResult;
-        document.result.structuredResultOmitted = true;
-        document.result.structuredResultPath = `${contextDir(node.node_id)}/result.json`;
-    }
-    return document;
-}
+var f=Object.defineProperty;var s=(t,e)=>f(t,"name",{value:e,configurable:!0});import{existsSync as p,readFileSync as m}from"node:fs";import{contextDir as y,reportsDir as _}from"../canvas/paths.js";import{outputResultPath as R}from"./structured-output.js";const h=256*1024;function B(t){const e=R(t);try{return p(e)?JSON.parse(m(e,"utf8")):void 0}catch{return}}s(B,"structuredResult");function b(t){if(t===null)return null;try{return JSON.parse(t)}catch{return null}}s(b,"parseDetail");function c(t){if(Buffer.byteLength(t,"utf8")<=1024)return t;const n="\u2026";let i=Buffer.byteLength(n,"utf8"),r="";for(const d of t){const l=Buffer.byteLength(d,"utf8");if(i+l>1024)break;i+=l,r+=d}return`${r}${n}`}s(c,"truncateDescription");function D(t){const{node:e,outcome:n,action:i}=t,r=b(n.detailJson),d=t.finalReport??e.final_report??"",l=c(e.name),o=e.description===void 0?void 0:c(e.description),a=n.kind==="result"?t.structuredResult===void 0?B(e.node_id):t.structuredResult:void 0,u={schema:"crtr.node-outcome/v1",outcomeId:`${e.node_id}:${n.revision}`,nodeId:e.node_id,revision:n.revision,kind:n.kind,reason:n.reason,settledAt:n.at,node:{name:l,...o===void 0?{}:{description:o},kind:e.kind,mode:e.mode,lifecycle:e.lifecycle,status:e.status,terminalReason:e.terminal_reason??null,cwd:e.cwd,createdAt:e.created,parent:e.parent??null,spawnedBy:e.spawned_by??null},...n.kind==="result"?{result:{finalReport:{basename:d,path:`${_(e.node_id)}/${d}`},...a===void 0?{}:{structuredResult:a}}}:{failure:{message:r?.message??null,faultKind:r?.fault_kind??null,errorClass:r?.error_class??null,respawnFailures:r?.respawn_failures??null,deadline:r?.deadline===void 0?null:{deadlineAt:r.deadline.deadline_at,elapsedMs:r.deadline.elapsed_ms},declined:r?.declined??null}},action:i,delivery:{attempt:0}};return Buffer.byteLength(JSON.stringify(u),"utf8")>h&&u.result?.structuredResult!==void 0&&(delete u.result.structuredResult,u.result.structuredResultOmitted=!0,u.result.structuredResultPath=`${y(e.node_id)}/result.json`),u}s(D,"composeNodeOutcomeDocument");export{D as composeNodeOutcomeDocument};

package/dist/core/runtime/package-health.js

@@ -1,99 +1,4 @@
-// package-health: detect pi packages configured in `<agentDir>/settings.json`
-// whose LOCAL-PATH source no longer exists on disk.
-//
-// Why this exists: pi installs a local-path package (e.g. crouter's bundled
-// `pi-crtr-extensions`, which surfaces `~/.claude` commands/skills/plugins as
-// slash commands) by storing its path in settings.json RELATIVE to the settings
-// dir. Moving the crouter repo silently invalidates that relative path — and pi
-// DISCARDS a missing package with no error, so the extension just never loads
-// and its whole feature (here: every Claude command/marketplace command) simply
-// vanishes with no diagnostic. This turns that silent failure into a loud,
-// actionable warning. The fix it points at is `crtr sys setup`, which re-resolves
-// package paths to the repo's current location.
-import { existsSync, readFileSync } from 'node:fs';
-import { homedir } from 'node:os';
-import { join, resolve } from 'node:path';
-import { isRendererReady } from '../termrender/termrender.js';
-import { expandTilde } from '../fs-utils.js';
-/** A non-fatal, action-oriented diagnostic for an unprovisioned managed
- * renderer — the one remaining out-of-tree dependency. Deliberately calls
- * `isRendererReady()`, NOT `ensureRenderer()`: this runs on the front-door boot
- * path and at crtrd startup, where a `uv pip install` (up to 180s) must never
- * happen. Readiness is a handful of fs stats, no subprocess. */
-export function rendererWarning() {
-    if (isRendererReady())
-        return null;
-    return 'crtr: the pinned termrender renderer is not provisioned — pages, reviews, and inline diagrams render as plaintext.\n' +
-        '  Fix: run `crtr sys setup` (requires `uv`: curl -LsSf https://astral.sh/uv/install.sh | sh).';
-}
-/**
- * The pi agent config dir (`~/.pi/agent`, or `$PI_CODING_AGENT_DIR`) — a local
- * reimplementation of pi's `getAgentDir()`. Reimplemented (not imported) ON
- * PURPOSE: `getAgentDir` lives in `@earendil-works/pi-coding-agent`, and
- * importing that package pulls in the ENTIRE ~360ms pi engine module graph. The
- * front door calls this on every bare-`crtr` boot BEFORE spawning the broker, so
- * a static/dynamic pi import here adds ~316ms of serialized dead-time in the
- * foreground before the broker (which loads pi itself) even starts. This mirrors
- * pi's contract exactly: `$PI_CODING_AGENT_DIR` (tilde-expanded) else
- * `~/.pi/agent`. Same precedent as `bearings.ts` (keep the pi engine out of the
- * hot/foreground path). If pi ever rebrands its configDir/env, update here.
- */
-export function piAgentDir(homeDir = homedir()) {
-    const envDir = process.env['PI_CODING_AGENT_DIR'];
-    if (envDir !== undefined && envDir !== '')
-        return expandTilde(envDir, homeDir);
-    return join(homeDir, '.pi', 'agent');
-}
-/** A `packages[]` entry is a LOCAL PATH (not an npm ref) — the only kind that
- *  can go stale on a repo move. `npm:...` and bare registry names resolve
- *  through node/npm, not the filesystem, so they are out of scope here. */
-function isLocalPathSource(source) {
-    if (source.startsWith('npm:'))
-        return false;
-    return source.startsWith('.') || source.startsWith('/') || source.startsWith('~');
-}
-/**
- * Return every local-path package in `<agentDir>/settings.json` whose resolved
- * path is missing. Empty when settings is absent/unreadable or all paths exist.
- * Mirrors pi's own resolution: `resolve(agentDir, expandTilde(source))`.
- */
-export function findMissingPackagePaths(agentDir, homeDir = homedir()) {
-    let raw;
-    try {
-        raw = readFileSync(join(agentDir, 'settings.json'), 'utf8');
-    }
-    catch {
-        return [];
-    }
-    let packages;
-    try {
-        packages = JSON.parse(raw).packages;
-    }
-    catch {
-        return [];
-    }
-    if (!Array.isArray(packages))
-        return [];
-    const missing = [];
-    for (const entry of packages) {
-        if (typeof entry !== 'string' || !isLocalPathSource(entry))
-            continue;
-        const resolved = resolve(agentDir, expandTilde(entry, homeDir));
-        if (!existsSync(resolved))
-            missing.push({ source: entry, resolved });
-    }
-    return missing;
-}
-/** A human-readable, actionable warning for a set of missing packages, or
- *  `null` when nothing is missing. Names `crtr sys setup` as the fix. */
-export function missingPackageWarning(agentDir, homeDir = homedir()) {
-    const missing = findMissingPackagePaths(agentDir, homeDir);
-    if (missing.length === 0)
-        return null;
-    const lines = missing.map((m) => `  • ${m.source}\n      → ${m.resolved} (missing)`);
-    return (`crtr: ${missing.length} configured pi package path${missing.length === 1 ? '' : 's'} ` +
-        `no longer exist${missing.length === 1 ? 's' : ''} — pi silently skips these, so their ` +
-        `slash commands (e.g. ~/.claude commands & marketplace plugins) will not load.\n` +
-        lines.join('\n') +
-        `\n  Fix: re-run \`crtr sys setup\` (re-resolves package paths to this repo's current location).`);
-}
+var u=Object.defineProperty;var t=(r,e)=>u(r,"name",{value:e,configurable:!0});import{existsSync as f,readFileSync as g}from"node:fs";import{homedir as a}from"node:os";import{join as p,resolve as d}from"node:path";import{isRendererReady as h}from"../termrender/termrender.js";import{expandTilde as l}from"../fs-utils.js";function $(){return h()?null:"crtr: the pinned termrender renderer is not provisioned \u2014 pages, reviews, and inline diagrams render as plaintext.\n  Fix: run `crtr sys setup` (requires `uv`: curl -LsSf https://astral.sh/uv/install.sh | sh)."}t($,"rendererWarning");function A(r=a()){const e=process.env.PI_CODING_AGENT_DIR;return e!==void 0&&e!==""?l(e,r):p(r,".pi","agent")}t(A,"piAgentDir");function m(r){return r.startsWith("npm:")?!1:r.startsWith(".")||r.startsWith("/")||r.startsWith("~")}t(m,"isLocalPathSource");function y(r,e=a()){let n;try{n=g(p(r,"settings.json"),"utf8")}catch{return[]}let s;try{s=JSON.parse(n).packages}catch{return[]}if(!Array.isArray(s))return[];const i=[];for(const o of s){if(typeof o!="string"||!m(o))continue;const c=d(r,l(o,e));f(c)||i.push({source:o,resolved:c})}return i}t(y,"findMissingPackagePaths");function j(r,e=a()){const n=y(r,e);if(n.length===0)return null;const s=n.map(i=>`  \u2022 ${i.source}
+      \u2192 ${i.resolved} (missing)`);return`crtr: ${n.length} configured pi package path${n.length===1?"":"s"} no longer exist${n.length===1?"s":""} \u2014 pi silently skips these, so their slash commands (e.g. ~/.claude commands & marketplace plugins) will not load.
+`+s.join(`
+`)+"\n  Fix: re-run `crtr sys setup` (re-resolves package paths to this repo's current location)."}t(j,"missingPackageWarning");export{y as findMissingPackagePaths,j as missingPackageWarning,A as piAgentDir,$ as rendererWarning};

package/dist/core/runtime/persona.js

@@ -1,55 +1,2 @@
-// Persona drift and the non-document framing carried by a fresh-revive kickoff.
-// The new context's system and bearings snapshots supply its memory baseline;
-// canvas-context-intro acknowledges the drift after both snapshots persist.
-import { getNode, updateNode } from '../canvas/index.js';
-import { readRoadmap, roadmapPath } from './roadmap.js';
-import { orchestratorContextNote } from './bearings.js';
-// Base → orchestrator guidance
-/** Fresh-context framing for a base → orchestrator change. */
-function orchestrationGuidance(nodeId, kind) {
-    const roadmap = readRoadmap(nodeId) ?? '(no roadmap yet)';
-    const rmPath = roadmapPath(nodeId);
-    const parts = [
-        `You are now a ${kind.toUpperCase()} ORCHESTRATOR. Your scarce resource is your own context window.`,
-        'Your job is to manage context and delegate — not to do the goal yourself.',
-    ];
-    parts.push('', `Your roadmap scaffold (\`${rmPath}\`) — author it now: state the goal, exit criteria, and the phase skeleton, using your orchestration protocol. Current contents:`, '', roadmap, '', orchestratorContextNote(nodeId), '', 'Your three long-term memory scopes (user-global, project, node-local) already surface in your bearings at boot. What promotion changes is USE, not access: you now persist across refresh cycles, so node-local carries what THIS goal needs between your refreshes, and durable facts you commit to user-global or project outlive this node. Use `crtr memory write` to save a document; `crtr memory list` to browse; `crtr memory find` to search (see "Your long-term memory" above for the full substrate flow).', '', 'Then delegate each phase with `crtr node new --kind <kind>`. When your context fills, run `crtr node yield` to refresh against this roadmap.');
-    return parts.join('\n');
-}
-// Orchestrator → base guidance
-/** orchestrator → base (demote): hands-on again, finish in-window. */
-function baseModeGuidance() {
-    return ('You are HANDS-ON again — base mode. Do the work yourself in THIS window and finish it here; ' +
-        'stop delegating by default. You no longer drive a roadmap, so `crtr node yield` is not your exit. ' +
-        'Spawn a child only for a cleanly separable unit, never as your first move.');
-}
-/** Build only the non-document framing for a fresh-context transition. */
-export function transitionGuidance(nodeId, from, to) {
-    if (from.mode === to.mode)
-        return '';
-    if (to.mode === 'base')
-        return baseModeGuidance();
-    const node = getNode(nodeId);
-    return orchestrationGuidance(nodeId, node?.kind ?? 'general');
-}
-// Detector + ack commit.
-/** Compare the live persona with the last acknowledged context delivery.
- * `guidance` contains only fresh-context framing; current snapshots supply its
- * documents. An absent or pre-kind acknowledgment cannot fabricate drift. */
-export function personaDrift(nodeId) {
-    const meta = getNode(nodeId);
-    if (meta === null)
-        return null;
-    const to = { kind: meta.kind, mode: meta.mode, lifecycle: meta.lifecycle };
-    const ack = meta.persona_ack;
-    const from = ack === undefined
-        ? to
-        : { kind: ack.kind ?? meta.kind, mode: ack.mode, lifecycle: ack.lifecycle };
-    if (from.kind === to.kind && from.mode === to.mode && from.lifecycle === to.lifecycle)
-        return null;
-    return { from, to, guidance: transitionGuidance(nodeId, from, to) };
-}
-/** Commit the persona state whose context delivery is complete. */
-export function commitPersonaAck(nodeId, to) {
-    updateNode(nodeId, { persona_ack: to });
-}
+var s=Object.defineProperty;var a=(o,e)=>s(o,"name",{value:e,configurable:!0});import{getNode as i,updateNode as c}from"../canvas/index.js";import{readRoadmap as l,roadmapPath as d}from"./roadmap.js";import{orchestratorContextNote as u}from"./bearings.js";function m(o,e){const r=l(o)??"(no roadmap yet)",t=d(o),n=[`You are now a ${e.toUpperCase()} ORCHESTRATOR. Your scarce resource is your own context window.`,"Your job is to manage context and delegate \u2014 not to do the goal yourself."];return n.push("",`Your roadmap scaffold (\`${t}\`) \u2014 author it now: state the goal, exit criteria, and the phase skeleton, using your orchestration protocol. Current contents:`,"",r,"",u(o),"",'Your three long-term memory scopes (user-global, project, node-local) already surface in your bearings at boot. What promotion changes is USE, not access: you now persist across refresh cycles, so node-local carries what THIS goal needs between your refreshes, and durable facts you commit to user-global or project outlive this node. Use `crtr memory write` to save a document; `crtr memory list` to browse; `crtr memory find` to search (see "Your long-term memory" above for the full substrate flow).',"","Then delegate each phase with `crtr node new --kind <kind>`. When your context fills, run `crtr node yield` to refresh against this roadmap."),n.join(`
+`)}a(m,"orchestrationGuidance");function f(){return"You are HANDS-ON again \u2014 base mode. Do the work yourself in THIS window and finish it here; stop delegating by default. You no longer drive a roadmap, so `crtr node yield` is not your exit. Spawn a child only for a cleanly separable unit, never as your first move."}a(f,"baseModeGuidance");function p(o,e,r){if(e.mode===r.mode)return"";if(r.mode==="base")return f();const t=i(o);return m(o,t?.kind??"general")}a(p,"transitionGuidance");function k(o){const e=i(o);if(e===null)return null;const r={kind:e.kind,mode:e.mode,lifecycle:e.lifecycle},t=e.persona_ack,n=t===void 0?r:{kind:t.kind??e.kind,mode:t.mode,lifecycle:t.lifecycle};return n.kind===r.kind&&n.mode===r.mode&&n.lifecycle===r.lifecycle?null:{from:n,to:r,guidance:p(o,n,r)}}a(k,"personaDrift");function b(o,e){c(o,{persona_ack:e})}a(b,"commitPersonaAck");export{b as commitPersonaAck,k as personaDrift,p as transitionGuidance};