@north-light/crouter 0.3.318 → 0.3.320

package/dist/core/runtime/tool-group-summary.js

@@ -1,85 +1,6 @@
-// Broker-side, best-effort tool-group summarization. The only successful output
-// path is the constrained submit_summary tool; failures deliberately yield no
-// substitute object so callers leave the normal folded calls visible.
-import { Type } from '@earendil-works/pi-ai';
-import { headlessToolCall } from './headless-pi.js';
-import { defaultProvider, modelLadders } from './model-selection.js';
-import { lightModel } from './naming.js';
-import { normalizeToolGroupSummary } from '../../shared/tool-groups.js';
-const BOUNDARY_CAP = 600;
-const TOOL_ARGS_CAP = 300;
-const RESULT_CAP = 400;
-const TEXT_CAP = 1_000;
-const SEGMENT_CAP = 10_000;
-const SUMMARY_TIMEOUT_MS = 45_000;
-function capped(value, cap) {
-    const normalized = value.replace(/\s+/g, ' ').trim();
-    return normalized.length <= cap ? normalized : `${normalized.slice(0, Math.max(0, cap - 1)).trimEnd()}…`;
-}
-function printable(value, cap) {
-    try {
-        return capped(typeof value === 'string' ? value : JSON.stringify(value), cap);
-    }
-    catch {
-        return capped(String(value), cap);
-    }
-}
-/** Serialize only the causal material around one group, with fixed per-piece
- * and total budgets so a verbose tool result cannot dominate the light-model call. */
-export function serializeToolGroup(previousBoundaryProse, pieces) {
-    const lines = [`Previous visible message: ${capped(previousBoundaryProse, BOUNDARY_CAP) || '(none)'}`, 'Between-message activity:'];
-    for (const piece of pieces) {
-        if (piece.type === 'tool')
-            lines.push(`- tool ${piece.name}(${printable(piece.args, TOOL_ARGS_CAP)})`);
-        else if (piece.type === 'result')
-            lines.push(`- ${piece.isError ? 'error' : 'result'} ${piece.name}: ${printable(piece.result, RESULT_CAP)}`);
-        else
-            lines.push(`- context: ${capped(piece.text, TEXT_CAP)}`);
-    }
-    return capped(lines.join('\n'), SEGMENT_CAP);
-}
-// Tool mechanics, identifiers, and inbox bookkeeping produce a machine log rather
-// than the glanceable human recap this surface needs, so the prompt asks only for
-// very short outcomes while the structured fields retain the underlying stats.
-const SUMMARY_SYSTEM_PROMPT = 'Create a structured recap of this coding-agent tool activity. ' +
-    'Prefer 1–3 bullets and use at most 5 only for distinct meaningful outcomes. ' +
-    'Each bullet must be an extremely readable plain-English outcome of 3–10 words, without markdown markers. ' +
-    'Describe what changed or was accomplished, not the tools, commands, or investigation steps; for code work, say what capability was added to a one- or two-phrase plain-English part of the system, such as "Added scheduling controls to the worker service." ' +
-    'Never include IDs, hashes, paths, filenames, command names, tool names, raw values, or report text. ' +
-    'Omit inbox receipt, delivery, and queueing; node-response and report bookkeeping; help lookups; status checks; and summary-generation activity. ' +
-    'A node response may support a substantive outcome, but its arrival or resummarization is never itself an outcome. ' +
-    'If no meaningful outcome remains after those omissions, submit the single bullet "No meaningful changes." ' +
-    'Count distinct files removed from disk only when the supplied tool arguments or results evidence them; otherwise use zero, even when the corresponding mechanics are omitted from bullets. ' +
-    'A deleted file is one that no longer exists after the segment, never a file that was merely edited or overwritten, and a recursive or wildcard removal of an unknown number of files counts as one. ' +
-    'Do not invent success when a result shows failure. ' +
-    'Call submit_summary exactly once with bullets and filesDeleted, then stop.';
-const SUBMIT_SUMMARY_SCHEMA = Type.Object({
-    bullets: Type.Array(Type.String({
-        minLength: 1,
-        maxLength: 120,
-        description: 'A very short, plain-English outcome without bullet markers, identifiers, or operational bookkeeping.',
-    }), { minItems: 1, maxItems: 5 }),
-    filesDeleted: Type.Integer({
-        minimum: 0,
-        description: 'Count of distinct files removed from disk during the supplied segment, or zero when none are evidenced.',
-    }),
-}, { additionalProperties: false });
-/** Generate a structured summary object, or null on every failure. */
-export async function headlessToolGroupSummary(segment) {
-    const ladders = modelLadders();
-    const modelIntent = `${defaultProvider(ladders)}/light`;
-    return normalizeToolGroupSummary(await headlessToolCall({
-        systemPrompt: SUMMARY_SYSTEM_PROMPT,
-        userPrompt: `<tool-group>\n${segment}\n</tool-group>\n\nSummarize the activity above.`,
-        modelSpec: lightModel(),
-        modelIntent,
-        timeoutMs: SUMMARY_TIMEOUT_MS,
-        tool: {
-            name: 'submit_summary',
-            label: 'Submit summary',
-            description: 'Submit the structured tool-group activity recap exactly once, then stop.',
-            parameters: SUBMIT_SUMMARY_SCHEMA,
-            constrainedSampling: false,
-        },
-    }));
-}
+var l=Object.defineProperty;var r=(e,t)=>l(e,"name",{value:t,configurable:!0});import{Type as i}from"@earendil-works/pi-ai";import{headlessToolCall as m}from"./headless-pi.js";import{defaultProvider as u,modelLadders as c}from"./model-selection.js";import{lightModel as d}from"./naming.js";import{normalizeToolGroupSummary as p}from"../../shared/tool-groups.js";const h=600,f=300,g=400,y=1e3,b=1e4,v=45e3;function n(e,t){const o=e.replace(/\s+/g," ").trim();return o.length<=t?o:`${o.slice(0,Math.max(0,t-1)).trimEnd()}\u2026`}r(n,"capped");function a(e,t){try{return n(typeof e=="string"?e:JSON.stringify(e),t)}catch{return n(String(e),t)}}r(a,"printable");function E(e,t){const o=[`Previous visible message: ${n(e,h)||"(none)"}`,"Between-message activity:"];for(const s of t)s.type==="tool"?o.push(`- tool ${s.name}(${a(s.args,f)})`):s.type==="result"?o.push(`- ${s.isError?"error":"result"} ${s.name}: ${a(s.result,g)}`):o.push(`- context: ${n(s.text,y)}`);return n(o.join(`
+`),b)}r(E,"serializeToolGroup");const w='Create a structured recap of this coding-agent tool activity. Prefer 1\u20133 bullets and use at most 5 only for distinct meaningful outcomes. Each bullet must be an extremely readable plain-English outcome of 3\u201310 words, without markdown markers. Describe what changed or was accomplished, not the tools, commands, or investigation steps; for code work, say what capability was added to a one- or two-phrase plain-English part of the system, such as "Added scheduling controls to the worker service." Never include IDs, hashes, paths, filenames, command names, tool names, raw values, or report text. Omit inbox receipt, delivery, and queueing; node-response and report bookkeeping; help lookups; status checks; and summary-generation activity. A node response may support a substantive outcome, but its arrival or resummarization is never itself an outcome. If no meaningful outcome remains after those omissions, submit the single bullet "No meaningful changes." Count distinct files removed from disk only when the supplied tool arguments or results evidence them; otherwise use zero, even when the corresponding mechanics are omitted from bullets. A deleted file is one that no longer exists after the segment, never a file that was merely edited or overwritten, and a recursive or wildcard removal of an unknown number of files counts as one. Do not invent success when a result shows failure. Call submit_summary exactly once with bullets and filesDeleted, then stop.',S=i.Object({bullets:i.Array(i.String({minLength:1,maxLength:120,description:"A very short, plain-English outcome without bullet markers, identifiers, or operational bookkeeping."}),{minItems:1,maxItems:5}),filesDeleted:i.Integer({minimum:0,description:"Count of distinct files removed from disk during the supplied segment, or zero when none are evidenced."})},{additionalProperties:!1});async function P(e){const t=c(),o=`${u(t)}/light`;return p(await m({systemPrompt:w,userPrompt:`<tool-group>
+${e}
+</tool-group>
+
+Summarize the activity above.`,modelSpec:d(),modelIntent:o,timeoutMs:v,tool:{name:"submit_summary",label:"Submit summary",description:"Submit the structured tool-group activity recap exactly once, then stop.",parameters:S,constrainedSampling:!1}}))}r(P,"headlessToolGroupSummary");export{P as headlessToolGroupSummary,E as serializeToolGroup};

package/dist/core/runtime/turn-visibility.js

@@ -1,31 +1 @@
-// Process-global visibility for the agent run currently owned by the broker.
-//
-// The broker is native ESM while guest and crouter pi extensions are Jiti-loaded,
-// so ordinary module state splits at the loader boundary. A registered symbol
-// keeps crouter's decision visible to every in-process extension.
-const TURN_VISIBILITY = Symbol.for('@crouton-kit/crtr:turn-visibility');
-function state() {
-    const host = globalThis;
-    const existing = host[TURN_VISIBILITY];
-    if (existing !== undefined)
-        return existing;
-    const created = { value: 'visible' };
-    host[TURN_VISIBILITY] = created;
-    return created;
-}
-/** The presentation classification of the current agent run. */
-export function currentTurnVisibility() {
-    return state().value;
-}
-/** Whether the current agent run is structurally internal to crouter. */
-export function isTurnInternal() {
-    return currentTurnVisibility() === 'internal';
-}
-/** Set visibility before handing an admitted input to pi. */
-export function setTurnVisibility(visibility) {
-    state().value = visibility;
-}
-/** Return to the fail-open state after the complete agent run settles. */
-export function clearTurnVisibility() {
-    state().value = 'visible';
-}
+var o=Object.defineProperty;var i=(t,n)=>o(t,"name",{value:n,configurable:!0});const u=Symbol.for("@crouton-kit/crtr:turn-visibility");function r(){const t=globalThis,n=t[u];if(n!==void 0)return n;const e={value:"visible"};return t[u]=e,e}i(r,"state");function l(){return r().value}i(l,"currentTurnVisibility");function c(){return l()==="internal"}i(c,"isTurnInternal");function a(t){r().value=t}i(a,"setTurnVisibility");function b(){r().value="visible"}i(b,"clearTurnVisibility");export{b as clearTurnVisibility,l as currentTurnVisibility,c as isTurnInternal,a as setTurnVisibility};

package/dist/core/runtime/view-socket.js

@@ -1,83 +1 @@
-// Broker view-socket readiness — one connect probe and its distinct wait policies.
-//
-// A successful Unix-socket connect proves a broker is listening; socket-file
-// existence alone can be stale after a broker exit. This stays canvas-db-free so
-// command callers can wait without reaching a runtime placement owner.
-import { createConnection } from 'node:net';
-import { viewSocketPath } from '../canvas/paths.js';
-const BROKER_FOCUS_SOCKET_WAIT_MS = 30_000;
-const BROKER_FOCUS_SOCKET_RETRY_MS = 100;
-/** The shared cold-start deadline (ms) a freshly-opened viewer waits for its
- * broker's view.sock — one source of truth for CRTR_ATTACH_WAIT_MS. */
-export const BROKER_VIEW_SOCKET_WAIT_MS = BROKER_FOCUS_SOCKET_WAIT_MS;
-function sleep(ms) {
-    return new Promise((resolve) => {
-        setTimeout(resolve, ms);
-    });
-}
-/** Resolve true exactly when `sockPath` accepts a connection within `timeoutMs`. */
-export function probeViewSocket(sockPath, timeoutMs) {
-    return new Promise((resolve) => {
-        let settled = false;
-        let socket = null;
-        const finish = (ok) => {
-            if (settled)
-                return;
-            settled = true;
-            if (socket !== null)
-                socket.destroy();
-            resolve(ok);
-        };
-        try {
-            socket = createConnection(sockPath);
-        }
-        catch {
-            finish(false);
-            return;
-        }
-        socket.once('connect', () => finish(true));
-        socket.once('error', () => finish(false));
-        socket.setTimeout(timeoutMs, () => finish(false));
-    });
-}
-/** Bounded retry for the revive leaf, which has no launch handle to observe. */
-export async function waitForViewSocketReady(nodeId) {
-    const sockPath = viewSocketPath(nodeId);
-    const deadline = Date.now() + BROKER_FOCUS_SOCKET_WAIT_MS;
-    while (Date.now() <= deadline) {
-        if (await probeViewSocket(sockPath, BROKER_FOCUS_SOCKET_RETRY_MS))
-            return true;
-        await sleep(BROKER_FOCUS_SOCKET_RETRY_MS);
-    }
-    return false;
-}
-/** Wait for a launched broker's view.sock, failing fast when its launch handle
- * exits. `exited` remains optional for existing callers that only need the same
- * bounded readiness deadline without a handle. */
-export async function waitForBrokerViewSocket(nodeId, exited) {
-    const sockPath = viewSocketPath(nodeId);
-    const deadline = Date.now() + BROKER_FOCUS_SOCKET_WAIT_MS;
-    const exitSeen = exited?.then(() => 'exit');
-    while (Date.now() <= deadline) {
-        const remaining = Math.max(0, deadline - Date.now());
-        const probe = probeViewSocket(sockPath, Math.min(BROKER_FOCUS_SOCKET_RETRY_MS, remaining))
-            .then((ok) => (ok ? 'ready' : 'retry'));
-        const outcome = exitSeen === undefined ? await probe : await Promise.race([probe, exitSeen]);
-        if (outcome === 'ready')
-            return true;
-        if (outcome === 'exit')
-            return false;
-        if (exitSeen !== undefined) {
-            const sleptOrExit = await Promise.race([
-                sleep(BROKER_FOCUS_SOCKET_RETRY_MS).then(() => 'sleep'),
-                exitSeen,
-            ]);
-            if (sleptOrExit === 'exit')
-                return false;
-        }
-        else {
-            await sleep(BROKER_FOCUS_SOCKET_RETRY_MS);
-        }
-    }
-    return false;
-}
+var S=Object.defineProperty;var r=(t,n)=>S(t,"name",{value:n,configurable:!0});import{createConnection as _}from"node:net";import{viewSocketPath as m}from"../canvas/paths.js";const u=3e4,s=100,E=u;function f(t){return new Promise(n=>{setTimeout(n,t)})}r(f,"sleep");function d(t,n){return new Promise(i=>{let a=!1,e=null;const o=r(c=>{a||(a=!0,e!==null&&e.destroy(),i(c))},"finish");try{e=_(t)}catch{o(!1);return}e.once("connect",()=>o(!0)),e.once("error",()=>o(!1)),e.setTimeout(n,()=>o(!1))})}r(d,"probeViewSocket");async function O(t){const n=m(t),i=Date.now()+u;for(;Date.now()<=i;){if(await d(n,s))return!0;await f(s)}return!1}r(O,"waitForViewSocketReady");async function R(t,n){const i=m(t),a=Date.now()+u,e=n?.then(()=>"exit");for(;Date.now()<=a;){const o=Math.max(0,a-Date.now()),c=d(i,Math.min(s,o)).then(w=>w?"ready":"retry"),l=e===void 0?await c:await Promise.race([c,e]);if(l==="ready")return!0;if(l==="exit")return!1;if(e!==void 0){if(await Promise.race([f(s).then(()=>"sleep"),e])==="exit")return!1}else await f(s)}return!1}r(R,"waitForBrokerViewSocket");export{E as BROKER_VIEW_SOCKET_WAIT_MS,d as probeViewSocket,R as waitForBrokerViewSocket,O as waitForViewSocketReady};

package/dist/core/runtime/warm-pool.js

@@ -1,395 +1 @@
-// warm-pool.ts — spare pre-booted roots, so `POST /v1/nodes` can answer in
-// milliseconds instead of waiting out a full pi engine boot (~3.6s in a guest
-// container, all of it `waitForBrokerViewSocket`).
-//
-// A spare is an ordinary canvas node: root, no kickoff prompt (so it never runs
-// a turn before anyone owns it), booted and holding a live broker, carrying a
-// `warm_pool` marker that hides it from every listing until it is claimed.
-// Claiming is the atomic DELETE of that marker (canvas.ts `claimWarmSpare`)
-// plus a `created` restamp and a RESHAPE onto the claimant's persona, after
-// which the node is indistinguishable from one that was just cold-spawned.
-//
-// What a spare must freeze is ONLY what a booted pi process genuinely cannot
-// change: its cwd, its profile, and the launch spec minus the two properties a
-// live session can still be told (tools, extensions, system prompt, env).
-// Everything else is claim-time reshape:
-//   • kind / mode / name / launch spec — rewritten on the row exactly as the
-//     `promote`/`yield --kind` polymorph rewrites them, so the next revive comes
-//     back as the claimed persona and `nodeEnv`'s CRTR_KIND/CRTR_MODE flip for
-//     anything the live process spawns.
-//   • persona_ack — stamped to the claimed persona so a newborn has no pending
-//     transition on its first turn.
-//   • model — swapped over the live broker socket (`setModelLive`, the same
-//     seam provider rotation uses). A model swap that cannot reach the broker
-//     FAILS the claim: the spare is closed and the caller cold-spawns, because
-//     a wrong-model node is worse than a slow one.
-//   • bearings — a spare mints with NONE (the context-intro extension withholds
-//     them from an unclaimed spare), because a block built at mint would assert
-//     the spare's placeholder `general`/`base` persona and snapshot the repo as
-//     it looked at mint time. Built and delivered here instead, over
-//     `deliver-live.ts`, once the row already wears the claimant's persona — and
-//     still landing first, since nobody has spoken in the session yet.
-//   • situational context — the sidecar is written and the block handed to the
-//     running session over `set_situational_context` (`situational-live.ts`),
-//     which queues it for the claimant's FIRST turn rather than starting one.
-//     Fails the claim on the same terms as the model: a node holding the wrong
-//     situation is worse than a slow one.
-//
-// The whole reshape is sound because every installed kind×mode builds an
-// IDENTICAL launch spec apart from `model` — verified across all 34 of them.
-// The key is derived from the actual built spec, so if that ever stops being
-// true the affected kinds simply key into their own pool instead of silently
-// being handed a mismatched node.
-//
-// Pool depth is 1 per key. It is populated lazily (the first `prefer_warm`
-// create for a key falls back to a cold spawn and mints the spare behind it)
-// and at daemon start for the most recently used profiles, so the FIRST node
-// after sitting down is warm too.
-//
-// A spare freezes the directory it was booted in, so a create launched from a
-// different directory than the last one simply misses and cold-spawns — the
-// pool serves the common case of returning to the same working directory.
-//
-// Nothing ever resumes a spare: the daemon's row query hides the pool, so a
-// spare whose broker dies (every daemon handover tears down every broker of the
-// epoch) is garbage, not a parked node. It is also invisible to the count-based
-// prune for the same reason. So the pool owns
-// its own garbage collection — `reapStaleSpares`, below, run at daemon start
-// and on every supervision tick.
-import { createHash } from 'node:crypto';
-import { claimWarmSpare, deleteNode, getNode, listNodes, listWarmSpares, registerWarmSpare, unregisterWarmSpare, updateNode, warmSpareCount, } from '../canvas/index.js';
-import { recordedPidLiveness } from '../canvas/pid.js';
-import { nowIso } from '../fs-utils.js';
-import { admitNodeCreate } from '../command-hooks/lifecycle-create.js';
-import { spawnChildPrepared } from './spawn.js';
-import { buildLaunchSpecAsync } from './launch.js';
-import { setModelLive } from './model-swap.js';
-import { setSituationalContextLive } from './situational-live.js';
-import { deliverBearingsLive } from './deliver-live.js';
-import { closeNode } from './close.js';
-/** Kill switch. `CRTR_WARM_POOL=0` makes every create cold again: claims stop,
- *  refills stop, and daemon-start pre-warm no-ops. Read live (not cached at
- *  module load) so flipping it takes effect on the next `crtr sys daemon
- *  restart` without a rebuild. Env rather than config because the operators who
- *  need it are guest containers — a Blaxel sandbox spec and the local-docker
- *  compose both already carry per-home env, and neither has a config file the
- *  host controls.
- *
- *  Turn it off when a spare's ~150-300 MB resident broker is the scarce
- *  resource (a memory-capped guest), or to isolate the pool while debugging a
- *  node that came back wearing the wrong persona. */
-export function warmPoolEnabled() {
-    return process.env['CRTR_WARM_POOL'] !== '0';
-}
-/** Stable digest of everything a booted broker bakes in. Deliberately excludes
- *  `model`/`modelProviderPinned`/`modelExact` AND the situational context: both
- *  are a socket round-trip on a live session, so both are claim-time, not
- *  mint-time. Keeping the situation out is what stops the pool fanning into a
- *  key (and a resident broker) per distinct ambient context. */
-function warmRecipeKey(cwd, profileId, launch) {
-    const env = Object.entries(launch.env ?? {}).sort(([a], [b]) => (a < b ? -1 : a > b ? 1 : 0));
-    const canonical = JSON.stringify([
-        cwd,
-        profileId,
-        launch.tools ?? [],
-        launch.extensions ?? [],
-        launch.systemPrompt ?? null,
-        env,
-    ]);
-    return createHash('sha256').update(canonical).digest('hex').slice(0, 32);
-}
-/** Resolve a request's frozen half. Both cwd and profile arrive already
- *  resolved from the create handler, so this is pure launch-spec construction. */
-async function resolveRecipe(request) {
-    const { launch } = await buildLaunchSpecAsync(request.kind, request.mode, {
-        lifecycle: 'resident',
-        hasManager: false,
-        ...(request.model !== null ? { model: request.model } : {}),
-        cwd: request.cwd,
-        profileId: request.profileId,
-    });
-    return { key: warmRecipeKey(request.cwd, request.profileId, launch), launch, request };
-}
-/** Claim a spare for `request`, reshaped onto its persona — or null when the
- *  pool cannot serve it. The caller falls back to a cold spawn; a refused
- *  create hook leaves the spare untouched and rejects the create. `beforeClaimDelivery`
- *  persists birth state before the claimant's first session message can arrive. */
-export async function claimWarmNode(request, birth = {}, beforeClaimDelivery) {
-    const recipe = await resolveRecipe(request);
-    if (warmSpareCount(recipe.key) === 0)
-        return null;
-    const created = nowIso();
-    // The claim's requested deadline and delivery registration move with its
-    // marker deletion, so the spare becomes caller-owned only as a fully armed
-    // birth. meta.json follows with the same created stamp.
-    const releaseCreateGate = await admitNodeCreate({
-        kind: request.kind,
-        mode: request.mode,
-        cwd: request.cwd,
-        profile: request.profileId,
-        root: true,
-        parentId: null,
-        requestingNodeId: request.creator,
-        lifecycle: 'resident',
-        replaces: null,
-    });
-    let nodeId;
-    try {
-        nodeId = claimWarmSpare(recipe.key, created, birth);
-    }
-    finally {
-        releaseCreateGate();
-    }
-    if (nodeId === null)
-        return null;
-    const spare = getNode(nodeId);
-    const bootedModel = spare?.launch?.model;
-    updateNode(nodeId, {
-        created,
-        kind: request.kind,
-        mode: request.mode,
-        name: request.name ?? request.kind,
-        creator: request.creator,
-        // The recipe a later revive replays — skip it and the node silently comes
-        // back as the spare's persona.
-        launch: recipe.launch,
-        // A newborn must not be told its persona just changed.
-        persona_ack: { kind: request.kind, mode: request.mode, lifecycle: 'resident' },
-        ...(request.model !== null ? { model_override: request.model } : {}),
-    });
-    // Persist any caller-owned birth state before the first claimant delivery.
-    // A spare has no claimant turn yet, but this keeps claimed and cold roots on
-    // the same durable-before-observable boundary.
-    try {
-        beforeClaimDelivery?.(nodeId);
-    }
-    catch (err) {
-        return abandonSpare(nodeId, 'birth preparation', err);
-    }
-    // Bearings FIRST, before any other delivery: a spare mints without them (see
-    // canvas-context-intro.ts), so this is the node's orienting frame and it must
-    // land as the session's first entry. Built from the row we just reshaped, so
-    // the identity assertion, knowledge catalog, and `<project_context>` snapshot
-    // all describe the node actually being handed out rather than the spare as it
-    // looked whenever it happened to boot.
-    try {
-        await deliverBearingsLive(nodeId);
-    }
-    catch (err) {
-        return abandonSpare(nodeId, 'bearings delivery', err);
-    }
-    // Spares are always minted at the kind's DEFAULT model (never an explicit
-    // pin), so this fires only when the claimant asked for a different tier.
-    const target = recipe.launch.model;
-    if (target !== undefined && target !== bootedModel) {
-        try {
-            await setModelLive(nodeId, target, recipe.launch.modelProviderPinned === true);
-        }
-        catch (err) {
-            return abandonSpare(nodeId, 'model swap', err);
-        }
-    }
-    // Spares mint with NO situational context, so this is the claimant's, handed
-    // to a session that is already past session_start. `nextTurn` delivery means
-    // it rides the first real turn instead of waking a node nobody has spoken to.
-    if (request.situationalContext !== null) {
-        try {
-            await setSituationalContextLive(nodeId, request.situationalContext);
-        }
-        catch (err) {
-            return abandonSpare(nodeId, 'situational-context delivery', err);
-        }
-    }
-    return nodeId;
-}
-/** A claim-time reshape that could not be applied leaves a node wearing the
- *  WRONG persona/model/situation — worse than a slow one. Close it and answer
- *  null so the caller cold-spawns. */
-function abandonSpare(nodeId, what, err) {
-    console.error(`[warm-pool] ${what} failed on claim; closing the spare: ${err.message}`);
-    try {
-        closeNode(nodeId);
-    }
-    catch { /* best-effort */ }
-    return null;
-}
-// Reaping
-/** How long an UNCLAIMED spare is worth its resident broker (~150-300 MB).
- *  A spare exists to make the NEXT create instant; one nobody has claimed in
- *  this long is memory rented for nothing, so it is returned. Over-reaping
- *  costs exactly one cold create (which then refills the pool), while
- *  under-reaping accumulates hidden brokers — nothing else reaps them.
- *
- *  It is also what bounds the number of KEYS. Depth is 1 per key, but the key
- *  digests the launch spec, whose extension paths carry the runtime GENERATION
- *  hash — so every `install-runtime` re-keys the pool and strands the previous
- *  key's spare, permanently claimable by nobody. The TTL is what collects them.
- */
-const SPARE_TTL_MS = 60 * 60 * 1000;
-/** Return every spare that is no longer worth its broker: one whose engine is
- *  confirmed GONE (the common case — a daemon handover tears down every broker
- *  of its epoch and nothing resumes a spare), one whose row left `active`/`idle`,
- *  and one nobody claimed inside `SPARE_TTL_MS`.
- *
- *  Order matters: the marker is deleted FIRST, atomically, which is the same
- *  move a claim makes — so a spare handed out a microsecond earlier is left
- *  alone (`unregisterWarmSpare` returns false) and never torn down under its
- *  new owner. Only after winning the marker is the broker killed and the row +
- *  dir deleted. Never throws: a failed reap is retried on the next sweep. */
-export function reapStaleSpares() {
-    const reaped = [];
-    let spares;
-    try {
-        spares = listWarmSpares();
-    }
-    catch (err) {
-        console.error(`[warm-pool] spare scan failed: ${err.message}`);
-        return reaped;
-    }
-    const cutoff = Date.now() - SPARE_TTL_MS;
-    for (const spare of spares) {
-        const mintedAt = Date.parse(spare.created);
-        const expired = Number.isNaN(mintedAt) || mintedAt < cutoff;
-        const liveness = recordedPidLiveness(spare.pi_pid, spare.pi_pid_identity);
-        const live = (spare.status === 'active' || spare.status === 'idle') && liveness === 'alive';
-        if (live && !expired)
-            continue;
-        // A failed probe is not evidence of death — leave it for the next sweep
-        // unless it is past its TTL anyway, where the verdict is the same.
-        if (liveness === 'indeterminate' && !expired)
-            continue;
-        try {
-            if (!unregisterWarmSpare(spare.node_id))
-                continue; // claimed out from under us
-            if (live) {
-                try {
-                    closeNode(spare.node_id);
-                }
-                catch { /* best-effort broker teardown */ }
-            }
-            deleteNode(spare.node_id);
-            reaped.push(spare.node_id);
-        }
-        catch (err) {
-            console.error(`[warm-pool] reap failed for ${spare.node_id}: ${err.message}`);
-        }
-    }
-    return reaped;
-}
-/** Keys with a mint in flight — crtrd is the single writer of the pool, so an
- *  in-process guard is enough to keep depth at 1 under concurrent creates. */
-const minting = new Set();
-/** Bring the pool for `request` back to depth 1, in the background. Never
- *  throws and never blocks a caller: a failed mint just means the next create
- *  for this key is cold again. */
-export function refillWarmPool(request) {
-    if (!warmPoolEnabled())
-        return;
-    try {
-        // Mint at the kind's DEFAULT model and with NO situational context: both
-        // are claim-time properties, so baking either in would only narrow who the
-        // spare can serve.
-        void resolveRecipe({ ...request, model: null, situationalContext: null })
-            .then(mint)
-            .catch((err) => console.error(`[warm-pool] recipe resolution failed: ${err.message}`));
-    }
-    catch (err) {
-        console.error(`[warm-pool] recipe resolution failed: ${err.message}`);
-    }
-}
-/** Mint one spare for an already-resolved recipe, if the pool is short. */
-function mint(recipe) {
-    const { key, request } = recipe;
-    if (minting.has(key))
-        return;
-    if (warmSpareCount(key) > 0)
-        return;
-    minting.add(key);
-    void (async () => {
-        try {
-            await spawnChildPrepared({
-                kind: request.kind,
-                mode: request.mode,
-                cwd: request.cwd,
-                // No kickoff: an empty prompt means no launch turn, so a spare burns no
-                // tokens and holds no history before somebody owns it.
-                prompt: '',
-                root: true,
-                // The spare is only useful once its broker accepts viewers — that wait
-                // is precisely the cost being moved off the create path.
-                readiness: 'await',
-                // Mint at the kind's DEFAULT model: `model_override` then stays unset on
-                // the spare, so a claim only ever SETS it (updateNode cannot clear a
-                // field) and a no-model claim gets a clean row.
-                profile: request.profileId,
-                // No situational context either: the claimant's is delivered live at
-                // claim time, so a spare that baked one in would serve nobody else.
-                // Mark it unclaimed the instant its row exists and BEFORE the broker
-                // launch this call then waits out — otherwise the spare would sit in
-                // every listing for the whole boot as a phantom empty conversation.
-            }, (nodeId) => registerWarmSpare(nodeId, key));
-        }
-        catch (err) {
-            console.error(`[warm-pool] mint failed for ${request.kind}: ${err.message}`);
-        }
-        finally {
-            minting.delete(key);
-        }
-    })();
-}
-// Daemon-start pre-warm
-/** How many profiles get a spare at daemon start. Each spare is a resident
- *  broker at ~150-300 MB, so this is deliberately tiny. */
-const PREWARM_PROFILES = 2;
-/** Mint a spare for the most recently used profiles so the FIRST create after
- *  crtrd boots is warm too, not only the second. The profile is the whole
- *  recipe: it supplies the cwd, and everything else a claim reshapes live.
- *  Fire-and-forget — returns as soon as the mints are scheduled, never blocking
- *  the daemon's work lane. */
-export function prewarmRecentRecipes() {
-    if (!warmPoolEnabled())
-        return;
-    let candidates;
-    try {
-        const seen = new Set();
-        candidates = [];
-        // Newest first; `listNodes` already hides unclaimed spares.
-        for (const row of listNodes({ status: ['active', 'idle'] }).reverse()) {
-            if (row.parent !== null || row.kind === 'human')
-                continue;
-            const profileId = row.profile_id ?? null;
-            if (seen.has(profileId ?? ''))
-                continue;
-            seen.add(profileId ?? '');
-            // A node lands in the directory its launch names, so the profile's last
-            // root predicts the next one better than the profile's home does.
-            candidates.push({ cwd: row.cwd, profileId });
-            if (candidates.length >= PREWARM_PROFILES)
-                break;
-        }
-    }
-    catch (err) {
-        console.error(`[warm-pool] prewarm scan failed: ${err.message}`);
-        return;
-    }
-    for (const candidate of candidates) {
-        try {
-            // `general`/`base` is only the shape the spare BOOTS as — the key it is
-            // filed under excludes everything a claim can reshape, so any kind can
-            // claim it.
-            void resolveRecipe({
-                kind: 'general',
-                mode: 'base',
-                cwd: candidate.cwd,
-                profileId: candidate.profileId,
-                model: null,
-                situationalContext: null,
-                name: null,
-                creator: null,
-            }).then(mint).catch((err) => console.error(`[warm-pool] prewarm failed for ${candidate.cwd}: ${err.message}`));
-        }
-        catch (err) {
-            console.error(`[warm-pool] prewarm failed for ${candidate.cwd}: ${err.message}`);
-        }
-    }
-}
+var v=Object.defineProperty;var i=(e,r)=>v(e,"name",{value:r,configurable:!0});import{createHash as k}from"node:crypto";import{claimWarmSpare as S,deleteNode as _,getNode as x,listNodes as $,listWarmSpares as I,registerWarmSpare as N,unregisterWarmSpare as P,updateNode as R,warmSpareCount as w}from"../canvas/index.js";import{recordedPidLiveness as C}from"../canvas/pid.js";import{nowIso as b}from"../fs-utils.js";import{admitNodeCreate as L}from"../command-hooks/lifecycle-create.js";import{spawnChildPrepared as W}from"./spawn.js";import{buildLaunchSpecAsync as M}from"./launch.js";import{setModelLive as A}from"./model-swap.js";import{setSituationalContextLive as O}from"./situational-live.js";import{deliverBearingsLive as E}from"./deliver-live.js";import{closeNode as h}from"./close.js";function y(){return process.env.CRTR_WARM_POOL!=="0"}i(y,"warmPoolEnabled");function T(e,r,n){const o=Object.entries(n.env??{}).sort(([l],[t])=>l<t?-1:l>t?1:0),a=JSON.stringify([e,r,n.tools??[],n.extensions??[],n.systemPrompt??null,o]);return k("sha256").update(a).digest("hex").slice(0,32)}i(T,"warmRecipeKey");async function f(e){const{launch:r}=await M(e.kind,e.mode,{lifecycle:"resident",hasManager:!1,...e.model!==null?{model:e.model}:{},cwd:e.cwd,profileId:e.profileId});return{key:T(e.cwd,e.profileId,r),launch:r,request:e}}i(f,"resolveRecipe");async function Z(e,r={},n){const o=await f(e);if(w(o.key)===0)return null;const a=b(),l=await L({kind:e.kind,mode:e.mode,cwd:e.cwd,profile:e.profileId,root:!0,parentId:null,requestingNodeId:e.creator,lifecycle:"resident",replaces:null});let t;try{t=S(o.key,a,r)}finally{l()}if(t===null)return null;const m=x(t)?.launch?.model;R(t,{created:a,kind:e.kind,mode:e.mode,name:e.name??e.kind,creator:e.creator,launch:o.launch,persona_ack:{kind:e.kind,mode:e.mode,lifecycle:"resident"},...e.model!==null?{model_override:e.model}:{}});try{n?.(t)}catch(d){return c(t,"birth preparation",d)}try{await E(t)}catch(d){return c(t,"bearings delivery",d)}const p=o.launch.model;if(p!==void 0&&p!==m)try{await A(t,p,o.launch.modelProviderPinned===!0)}catch(d){return c(t,"model swap",d)}if(e.situationalContext!==null)try{await O(t,e.situationalContext)}catch(d){return c(t,"situational-context delivery",d)}return t}i(Z,"claimWarmNode");function c(e,r,n){console.error(`[warm-pool] ${r} failed on claim; closing the spare: ${n.message}`);try{h(e)}catch{}return null}i(c,"abandonSpare");const D=3600*1e3;function q(){const e=[];let r;try{r=I()}catch(o){return console.error(`[warm-pool] spare scan failed: ${o.message}`),e}const n=Date.now()-D;for(const o of r){const a=Date.parse(o.created),l=Number.isNaN(a)||a<n,t=C(o.pi_pid,o.pi_pid_identity),s=(o.status==="active"||o.status==="idle")&&t==="alive";if(!(s&&!l)&&!(t==="indeterminate"&&!l))try{if(!P(o.node_id))continue;if(s)try{h(o.node_id)}catch{}_(o.node_id),e.push(o.node_id)}catch(m){console.error(`[warm-pool] reap failed for ${o.node_id}: ${m.message}`)}}return e}i(q,"reapStaleSpares");const u=new Set;function ee(e){if(y())try{f({...e,model:null,situationalContext:null}).then(g).catch(r=>console.error(`[warm-pool] recipe resolution failed: ${r.message}`))}catch(r){console.error(`[warm-pool] recipe resolution failed: ${r.message}`)}}i(ee,"refillWarmPool");function g(e){const{key:r,request:n}=e;u.has(r)||w(r)>0||(u.add(r),(async()=>{try{await W({kind:n.kind,mode:n.mode,cwd:n.cwd,prompt:"",root:!0,readiness:"await",profile:n.profileId},o=>N(o,r))}catch(o){console.error(`[warm-pool] mint failed for ${n.kind}: ${o.message}`)}finally{u.delete(r)}})())}i(g,"mint");const j=2;function re(){if(!y())return;let e;try{const r=new Set;e=[];for(const n of $({status:["active","idle"]}).reverse()){if(n.parent!==null||n.kind==="human")continue;const o=n.profile_id??null;if(!r.has(o??"")&&(r.add(o??""),e.push({cwd:n.cwd,profileId:o}),e.length>=j))break}}catch(r){console.error(`[warm-pool] prewarm scan failed: ${r.message}`);return}for(const r of e)try{f({kind:"general",mode:"base",cwd:r.cwd,profileId:r.profileId,model:null,situationalContext:null,name:null,creator:null}).then(g).catch(n=>console.error(`[warm-pool] prewarm failed for ${r.cwd}: ${n.message}`))}catch(n){console.error(`[warm-pool] prewarm failed for ${r.cwd}: ${n.message}`)}}i(re,"prewarmRecentRecipes");export{Z as claimWarmNode,re as prewarmRecentRecipes,q as reapStaleSpares,ee as refillWarmPool,y as warmPoolEnabled};