@north-light/crouter 0.3.318 → 0.3.320

package/dist/core/__tests__/events-contract.test.js

@@ -1,76 +0,0 @@
-import assert from 'node:assert/strict';
-import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-import test from 'node:test';
-import { buildEnvelope, serializeEventRecord, validateOperationId } from '../events/index.js';
-import { readLogSnapshot } from '../events/read.js';
-test('event serialization bounds cyclic Unicode fields with truncation metadata', () => {
-    const cyclic = {};
-    cyclic.self = cyclic;
-    const serialized = serializeEventRecord(buildEnvelope({
-        level: 'error',
-        event: 'contract.serialization',
-        component: 'daemon',
-        fields: {
-            cyclic,
-            huge: '🍞'.repeat(40_000),
-            array: Array.from({ length: 100 }, (_, index) => ({ index, value: 'x'.repeat(5_000) })),
-        },
-    }));
-    assert.ok(Buffer.byteLength(serialized, 'utf8') + 1 <= 65_536);
-    assert.ok(!serialized.includes('\n'));
-    const record = JSON.parse(serialized);
-    assert.equal(record.record_truncated, true);
-    assert.ok((record.original_bytes ?? 0) > 0);
-    assert.ok((record.dropped_fields_count ?? 0) > 0);
-});
-test('a value-only truncated record with dropped_fields_count 0 survives readLogSnapshot', () => {
-    const home = mkdtempSync(join(tmpdir(), 'crtr-events-contract-'));
-    const priorHome = process.env['CRTR_HOME'];
-    process.env['CRTR_HOME'] = home;
-    try {
-        const serialized = serializeEventRecord(buildEnvelope({
-            level: 'info',
-            event: 'contract.value_truncation',
-            component: 'daemon',
-            fields: { huge: 'x'.repeat(5_000) },
-        }));
-        const record = JSON.parse(serialized);
-        assert.equal(record.record_truncated, true);
-        assert.equal(record.dropped_fields_count, 0);
-        assert.ok((record.original_bytes ?? 0) > 0);
-        assert.ok(Buffer.byteLength(serialized, 'utf8') + 1 <= 65_536);
-        writeFileSync(join(home, 'crtrd.log'), `${serialized}\n`);
-        const snapshot = readLogSnapshot({}, false);
-        assert.equal(snapshot.invalidCanonicalLines, 0);
-        assert.equal(snapshot.items.length, 1);
-        const [item] = snapshot.items;
-        assert.equal(item?.kind, 'event');
-        if (item?.kind !== 'event')
-            throw new Error('expected canonical event item');
-        assert.equal(item.envelope.record_truncated, true);
-        assert.equal(item.envelope.dropped_fields_count, 0);
-        assert.ok((item.envelope.original_bytes ?? 0) > 0);
-    }
-    finally {
-        if (priorHome === undefined)
-            delete process.env['CRTR_HOME'];
-        else
-            process.env['CRTR_HOME'] = priorHome;
-        rmSync(home, { recursive: true, force: true });
-    }
-});
-test('operation IDs are exactly non-zero lowercase 32-character hexadecimal', () => {
-    assert.equal(validateOperationId('0123456789abcdef0123456789abcdef'), '0123456789abcdef0123456789abcdef');
-    for (const invalid of [
-        '00000000000000000000000000000000',
-        '0123456789ABCDEF0123456789ABCDEF',
-        '0123456789abcdef0123456789abcdeg',
-        '0123456789abcdef0123456789abcde',
-        '0123456789abcdef0123456789abcdef0',
-        '',
-        42,
-    ])
-        assert.throws(() => validateOperationId(invalid));
-});

package/dist/core/__tests__/extension-abort.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/core/__tests__/extension-abort.test.js

@@ -1,21 +0,0 @@
-import assert from 'node:assert/strict';
-import test from 'node:test';
-import { abortSessionFromExtension, runRefreshAbort } from '../runtime/broker/extension-abort.js';
-test('refresh extension abort clears Pi follow-ups before abort while an ordinary abort preserves them', () => {
-    const events = [];
-    const session = {
-        clearQueue: () => { events.push('clear'); },
-        abort: async () => { events.push('abort'); },
-    };
-    abortSessionFromExtension(session);
-    assert.deepEqual(events, ['abort'], 'ordinary extension abort leaves queued messages in the current conversation');
-    events.length = 0;
-    let refreshAborts = 0;
-    runRefreshAbort(() => abortSessionFromExtension(session, () => { refreshAborts += 1; }));
-    assert.deepEqual(events, ['clear', 'abort'], 'refresh removes queued messages before stopping the discarded conversation');
-    assert.equal(refreshAborts, 1, 'refresh stages provenance with the host abort');
-    events.length = 0;
-    abortSessionFromExtension(session, () => { refreshAborts += 1; });
-    assert.deepEqual(events, ['abort'], 'the refresh scope does not leak into a later critical abort');
-    assert.equal(refreshAborts, 1, 'an ordinary extension abort does not stage refresh provenance');
-});

package/dist/core/__tests__/fault-classifier.test.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/core/__tests__/fault-classifier.test.js

@@ -1,138 +0,0 @@
-// Run with: node --import tsx/esm --test src/core/__tests__/fault-classifier.test.ts
-//
-// Issue #94 — a fatal provider AUTH fault (a dead OAuth grant) must classify as
-// kind 'auth' + disposition 'fatal', NOT 'other'. The stophook hands `classify`
-// a raw provider error STRING (not an HTTP object), so the text branch alone
-// has to recognise auth — otherwise `invalid_grant` mislabelled as 'other' and
-// the canvas said "other · needs you" instead of "auth · needs you". Both are
-// fatal, but the taxonomy must name the cause so the notice can say re-login.
-import { test } from 'node:test';
-import assert from 'node:assert/strict';
-import { classify } from '../fault-classifier.js';
-import { __classifyProviderErrorForTest } from '../../builtin-pi-packages/pi-crtr-extensions/extensions/provider-rotation.js';
-test('invalid_grant text classifies as fatal auth (issue #94)', () => {
-    const c = classify('pi→provider', 'Anthropic token refresh failed: invalid_grant');
-    assert.equal(c.kind, 'auth');
-    assert.equal(c.disposition, 'fatal');
-});
-test('"refresh token not found or invalid" is auth, not a transient connection blip', () => {
-    const c = classify('pi→provider', 'Refresh token not found or invalid');
-    assert.equal(c.kind, 'auth', 'must not fall into the not-found/connection branch');
-    assert.equal(c.disposition, 'fatal');
-});
-test('provider text preserves rate-limit, auth, protocol, overloaded, and connection semantics', () => {
-    assert.equal(classify('pi→provider', 'rate limit exceeded (429)').kind, 'rate-limit');
-    assert.equal(classify('pi→provider', 'API error: 401 unauthorized').kind, 'auth');
-    for (const msg of ['WebSocket closed with code 1002: Protocol error', 'WebSocket closed: 1008 policy violation']) {
-        const c = classify('pi→provider', msg);
-        assert.equal(c.kind, 'protocol');
-        assert.equal(c.disposition, 'fatal');
-    }
-    assert.equal(classify('pi→provider', 'Overloaded: server busy (529)').kind, 'overloaded');
-    assert.equal(classify('pi→provider', 'ECONNRESET while streaming').kind, 'connection');
-});
-test('only pi’s failed context-overflow recovery is a terminal context-overflow fault', () => {
-    assert.equal(classify('pi→provider', 'Your input exceeds the context window of this model').kind, 'other', 'pi owns the compact-and-retry recovery for a raw provider overflow');
-    const c = classify('pi→provider', 'Context overflow recovery failed after one compact-and-retry attempt');
-    assert.equal(c.kind, 'context-overflow');
-    assert.equal(c.disposition, 'fatal');
-});
-test('flattened provider 5xx and API-error text classify as overloaded/auto (#153)', () => {
-    for (const msg of ['Internal server error (500)', 'APIError: upstream rejected the request', 'HTTP 502 Bad Gateway', 'status=504']) {
-        const c = classify('pi→provider', msg);
-        assert.equal(c.kind, 'overloaded', `"${msg}" must classify as overloaded`);
-        assert.equal(c.disposition, 'auto', `"${msg}" must be auto-retried`);
-    }
-});
-// A gateway that refuses the request for SIZE cannot be retried: the daemon
-// re-posts the same conversation and fails identically. One oversized image in
-// a tool result wedged a live applet conversation this way — the rejection
-// arrived as 5xx prose, classified 'overloaded', and looped on injected
-// recovery messages until the chat surfaced CROUTER_PROVIDER_UNAVAILABLE.
-test('a request-size rejection is fatal, even wrapped in 5xx prose', () => {
-    for (const msg of [
-        '413 Payload Too Large',
-        'PayloadTooLargeError: request entity too large',
-        'Request body exceeds the 5 MB limit',
-        '500 Internal Server Error: request entity too large',
-    ]) {
-        const c = classify('pi→provider', msg);
-        assert.equal(c.kind, 'protocol', `"${msg}" must classify as protocol, not overloaded`);
-        assert.equal(c.disposition, 'fatal', `"${msg}" must never arm an automatic retry`);
-    }
-    const http = classify('pi→provider', { status: 413, statusText: 'Payload Too Large' });
-    assert.equal(http.kind, 'protocol');
-    assert.equal(http.disposition, 'fatal');
-});
-test('interrupted WebSocket text, including close 1000 and flattened error/interrupt (#302, #258), classifies as connection/auto', () => {
-    for (const msg of ['WebSocket closed 1000', 'WebSocket stream closed before response.completed', 'WebSocket error', 'WebSocket connection interrupted']) {
-        const c = classify('pi→provider', msg);
-        assert.equal(c.kind, 'connection', `"${msg}" must classify as connection`);
-        assert.equal(c.disposition, 'auto', `"${msg}" must be auto-retried`);
-    }
-});
-test('HTTP 401/403 objects still classify as auth (unchanged path)', () => {
-    assert.equal(classify('pi→provider', { status: 401, statusText: 'Unauthorized' }).kind, 'auth');
-    assert.equal(classify('pi→provider', { status: 403 }).kind, 'auth');
-});
-// Stale ⚠ triangles — undici mid-stream disconnect text (e.g. a laptop sleep/
-// wake episode) must classify as a transient connection blip (disposition
-// 'auto'), not fall through to 'other' (disposition 'fatal', "needs you").
-test('undici stream-drop texts classify as connection/auto, not other/fatal', () => {
-    for (const msg of ['terminated', 'other side closed', 'premature close']) {
-        const c = classify('pi→provider', msg);
-        assert.equal(c.kind, 'connection', `"${msg}" must classify as connection`);
-        assert.equal(c.disposition, 'auto', `"${msg}" must be auto-retried, not fatal`);
-    }
-});
-test('"terminated" matches as a whole word only (no false positive on substrings)', () => {
-    // \bterminated\b must not match e.g. "unterminated" as a stray substring hit —
-    // guard the word-boundary choice explicitly.
-    assert.notEqual(classify('pi→provider', 'preterminated').kind, 'connection');
-});
-test('shared recognition preserves each existing policy eligibility, except bare quota', () => {
-    const assertPair = (raw, faultKind, rotationKind, observed = {}) => {
-        assert.equal(classify('pi→provider', raw).kind, faultKind, `fault: ${JSON.stringify(raw)}`);
-        const error = typeof raw === 'string' ? { message: raw } : raw;
-        assert.equal(__classifyProviderErrorForTest(error, observed).kind, rotationKind, `rotation: ${JSON.stringify(raw)}`);
-    };
-    for (const [status, faultKind, rotationKind] of [
-        [401, 'auth', 'fatal'], [403, 'auth', 'fatal'], [429, 'rate-limit', 'rate_limit'],
-        [500, 'overloaded', 'transient'], [502, 'overloaded', 'transient'], [503, 'overloaded', 'transient'], [504, 'overloaded', 'transient'],
-        [529, 'overloaded', 'fatal'], [501, 'overloaded', 'fatal'], [400, 'protocol', 'fatal'], [413, 'protocol', 'fatal'],
-    ])
-        assertPair({ status }, faultKind, rotationKind);
-    assertPair({ status: 503 }, 'overloaded', 'rate_limit', { retryAfterMs: 1 });
-    for (const code of ['ECONNREFUSED', 'ECONNRESET', 'ETIMEDOUT', 'ENOENT', 'ENOTFOUND', 'EAI_AGAIN', 'EPIPE', 'EHOSTUNREACH', 'ENETUNREACH']) {
-        assertPair({ code }, 'connection', 'fatal');
-    }
-    assertPair({ code: 'ELOCKED' }, 'overloaded', 'fatal');
-    assertPair({ code: 1008 }, 'protocol', 'fatal');
-    assertPair({ code: 1006 }, 'connection', 'fatal');
-    assertPair({ code: 1011, reason: 'no running broker' }, 'connection', 'fatal');
-    assertPair({ code: 1011, reason: 'unrelated failure' }, 'other', 'fatal');
-    for (const text of ['rate limit', '429', 'too many requests', 'usage limit', 'usage_not_included', 'usagelimiterror', 'insufficient_quota', 'quota exceeded']) {
-        assertPair(text, 'rate-limit', 'rate_limit');
-    }
-    assertPair('quota', 'other', 'fatal');
-    assertPair('ordinary usage discussion', 'other', 'fatal');
-    for (const text of ['connection', 'network', 'fetch failed', 'econnreset', 'econnrefused', 'enotfound', 'etimedout', 'timed out', 'timeout', 'WebSocket closed', 'WebSocket stream closed before response.completed', 'WebSocket error', 'WebSocket interruption', 'socket hang', 'overloaded', 'temporarily unavailable']) {
-        const faultKind = text === 'overloaded' || text === 'temporarily unavailable' ? 'overloaded' : 'connection';
-        assertPair(text, faultKind, 'transient');
-    }
-    for (const text of ['socket', 'service unavailable'])
-        assertPair(text, 'other', 'transient');
-    for (const text of ['network error: rate limit exceeded', 'service unavailable: too many requests'])
-        assertPair(text, 'rate-limit', 'transient');
-    for (const text of ['413 Payload Too Large', 'invalid_grant', 'context overflow recovery failed']) {
-        const faultKind = text.includes('413') ? 'protocol' : text.includes('invalid_grant') ? 'auth' : 'context-overflow';
-        assertPair(text, faultKind, 'fatal');
-    }
-    assertPair('WebSocket closed: 1008 policy violation', 'protocol', 'transient');
-    for (const text of ['lock file is already being held', 'Internal server error', 'APIError', '500', 'capacity', 'server busy']) {
-        assertPair(text, 'overloaded', 'fatal');
-    }
-    for (const text of ['EPIPE', 'EAI_AGAIN', 'EHOSTUNREACH', 'ENETUNREACH', 'terminated', 'other side closed', 'premature close']) {
-        assertPair(text, 'connection', 'fatal');
-    }
-});

package/dist/core/__tests__/fixtures/api-server-host.d.ts

@@ -1 +0,0 @@
-export {};

package/dist/core/__tests__/fixtures/api-server-host.js

@@ -1,47 +0,0 @@
-// Test fixture: a STANDALONE crtrd API-server process for the integration
-// harness (helpers/harness.ts).
-//
-// Why a separate process (not an in-process createApiServer)? Post-P1 every
-// `crtr` CLI subprocess the harness spawns routes its canvas reads/mutations
-// through cliClient() over crtrd's unix socket. The harness's cli() driver uses
-// spawnSync, which BLOCKS the test process's event loop until the subprocess
-// exits — so a server bound in-process could never answer that subprocess's
-// request, and the subprocess would time out (request_timeout, exit 2). This
-// process runs the API server on its OWN event loop, so it serves those
-// spawnSync subprocess clients (and the harness's own in-process cliClient leaf
-// calls) against the same on-disk canvas DB.
-//
-// It binds ONLY the API server (createApiServer) — NOT the daemon supervision
-// loop. The harness drives superviseTick() in-process under an injectable clock,
-// so a real crtrd (whose own timer loop would race that) must never be spawned.
-// This host carries the isolated home via CRTR_HOME (inherited from the harness,
-// so apiSocketPath() resolves to the isolated socket) and stays alive until the
-// harness kills it in dispose().
-import { randomBytes } from 'node:crypto';
-import { createApiServer } from '../../../daemon/api/server.js';
-import { bindDaemonEventSource } from '../../events/source.js';
-import { bindFleet } from '../../runtime/fleet.js';
-import { DaemonFleet } from '../../../daemon/fleet.js';
-// Bind the daemon event source exactly as real crtrd does at startup, so any
-// event a mutation handler emits persists to the isolated home's event log.
-bindDaemonEventSource();
-// Bind a fleet exactly as real crtrd does — API verbs that launch brokers
-// (`node new`, `node message send`'s revive, …) resolve `boundFleet()` at the
-// host seam and register their ChildProcess handles here — but with an INERT
-// policy lane (`enqueue` drops jobs): dead-node policy authority in a harness
-// run belongs to the HARNESS process, which drives superviseTick and
-// deliverExit under its own controlled lane and clock. Running exit policy
-// here too would race it — e.g. dispose()'s SIGKILL of every broker would
-// trigger instant in-fixture respawns mid-teardown. Registration, the
-// fleet.has revive guard, and capacity counts stay fully real for every verb
-// THIS process serves.
-bindFleet(new DaemonFleet({ epoch: randomBytes(8).toString('hex'), enqueue: () => { } }));
-const server = createApiServer();
-// Announce readiness on stdout so the harness can wait deterministically for a
-// listening server rather than racing the socket-file's creation.
-process.stdout.write('api-server-ready\n');
-function shutdown() {
-    void server.close().finally(() => process.exit(0));
-}
-process.on('SIGTERM', shutdown);
-process.on('SIGINT', shutdown);

package/dist/core/__tests__/fixtures/c3-custom-provider-ext.d.ts

@@ -1,2 +0,0 @@
-import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
-export default function (pi: ExtensionAPI): void;

package/dist/core/__tests__/fixtures/c3-custom-provider-ext.js

@@ -1,34 +0,0 @@
-export default function (pi) {
-    pi.registerProvider('c3prov', {
-        baseUrl: 'https://example.invalid',
-        apiKey: 'c3-test-key',
-        api: 'anthropic-messages',
-        models: [
-            {
-                id: 'c3model',
-                name: 'C3 Custom Model',
-                reasoning: false,
-                input: ['text'],
-                cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-                contextWindow: 1000,
-                maxTokens: 100,
-            },
-        ],
-    });
-    pi.registerProvider('c3fallback', {
-        baseUrl: 'https://example.invalid',
-        apiKey: 'c3-fallback-test-key',
-        api: 'anthropic-messages',
-        models: [
-            {
-                id: 'fallback-model',
-                name: 'C3 Fallback Model',
-                reasoning: false,
-                input: ['text'],
-                cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-                contextWindow: 1000,
-                maxTokens: 100,
-            },
-        ],
-    });
-}

package/dist/core/__tests__/fixtures/c5-command-boundary-ext.d.ts

@@ -1,2 +0,0 @@
-import type { ExtensionAPI } from '@earendil-works/pi-coding-agent';
-export default function (pi: ExtensionAPI): void;

package/dist/core/__tests__/fixtures/c5-command-boundary-ext.js

@@ -1,32 +0,0 @@
-export default function (pi) {
-    pi.registerCommand('devcmd', {
-        description: 'C5 fixture command',
-        handler: async () => {
-            /* never invoked — isLeadingEngineCommand only checks registration */
-        },
-    });
-    pi.registerCommand('gatewaycmd', {
-        description: 'Gateway-advertised custom-message fixture',
-        gateway: true,
-        handler: async () => {
-            pi.sendMessage({
-                customType: 'fixture-output',
-                content: 'expanded agent input',
-                display: true,
-                details: { fixture: true },
-            });
-        },
-    });
-    pi.registerCommand('gatewaynext', {
-        description: 'Queued Gateway custom-message fixture',
-        gateway: true,
-        handler: async () => {
-            pi.sendMessage({
-                customType: 'fixture-next-output',
-                content: null,
-                display: true,
-                details: 'extension-details',
-            }, { deliverAs: 'nextTurn' });
-        },
-    });
-}