@north-light/crouter 0.3.324 → 0.3.325

package/dist/core/runtime/run-command.d.ts

@@ -0,0 +1,29 @@
+export interface RunCommandOnceOptions {
+    command: string;
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    timeoutMs: number;
+    headBytes: number;
+}
+export interface RunCommandOnceResult {
+    exitCode: number | null;
+    signal: NodeJS.Signals | null;
+    stdout: string;
+    stdoutTruncated: boolean;
+    stderr: string;
+    stderrTruncated: boolean;
+    timedOut: boolean;
+    durationMs: number;
+    stdoutSha256: string;
+    processError: Error | null;
+}
+export interface RunningCommand {
+    pid: number | null;
+    completion: Promise<RunCommandOnceResult>;
+    terminate(): void;
+}
+/** Start one admitted-PATH bash command in its own process group. The returned
+ * handle exposes the pid immediately for callers that must record ownership
+ * before waiting for completion; `completion` resolves after the process group
+ * has stopped, including timeout teardown. */
+export declare function runCommandOnce({ command, cwd, env, timeoutMs, headBytes }: RunCommandOnceOptions): RunningCommand;

package/dist/core/runtime/run-command.js

@@ -0,0 +1 @@
+var R=Object.defineProperty;var u=(a,s)=>R(a,"name",{value:s,configurable:!0});import{spawn as x}from"node:child_process";import{createHash as G}from"node:crypto";import{captureTeardownSnapshot as v,isAnyPidAlive as C,killProcessTreePids as g}from"../canvas/pid.js";import{CRON_DEATH_POLL_MS as K,CRON_KILL_GRACE_MS as N,newHeadCapture as k}from"../../daemon/cron/capture.js";import{resolveAdmittedHostCommand as b}from"./spawn-env.js";function Q({command:a,cwd:s,env:w,timeoutMs:D,headBytes:S}){const E=Date.now(),r=x(b("bash",w,s),["-c",a],{cwd:s,env:w,detached:!0,stdio:["ignore","pipe","pipe"]}),i=r.pid??null,f=k(S),c=k(S),A=G("sha256");r.stdout?.on("data",t=>{A.update(t),f.take(t)}),r.stderr?.on("data",t=>c.take(t));let L=!1,m=null,o,_=null,d=!1,H=!1,n,l,p,e,O;const I=new Promise(t=>{O=t}),T=u(()=>{d||o===void 0||(d=!0,n!==void 0&&clearTimeout(n),l!==void 0&&clearTimeout(l),p!==void 0&&clearTimeout(p),O({exitCode:o,signal:_,stdout:f.decode(),stdoutTruncated:f.truncated(),stderr:c.decode(),stderrTruncated:c.truncated(),timedOut:L,durationMs:Date.now()-E,stdoutSha256:A.digest("hex"),processError:m}))},"finish"),h=u(()=>{if(e===void 0||!C(e.tree)){T();return}p=setTimeout(h,K)},"awaitTeardownDeath"),P=u(()=>{i===null||d||(e??=v(i,null),g(e.tree,"SIGTERM",e.identities),l===void 0&&(l=setTimeout(()=>{C(e.tree)&&g(e.tree,"SIGKILL",e.identities),H=!0,o!==void 0&&h()},N),l.unref?.()))},"terminate");return r.on("error",t=>{m===null&&(m=t),i===null&&(o=null,T())}),r.on("close",(t,M)=>{if(!d){if(o=t,_=M,n!==void 0&&clearTimeout(n),e!==void 0&&C(e.tree)){H&&h();return}T()}}),i!==null&&(n=setTimeout(()=>{d||(L=!0,P())},D),n.unref?.()),{pid:i,completion:I,terminate:P}}u(Q,"runCommandOnce");export{Q as runCommandOnce};

package/dist/daemon/api/handlers/bash.d.ts

@@ -0,0 +1,2 @@
+import type { RouteTable } from '../router.js';
+export declare const bashRoutes: RouteTable;

package/dist/daemon/api/handlers/bash.js

@@ -0,0 +1 @@
+var m=Object.defineProperty;var d=(r,t)=>m(r,"name",{value:t,configurable:!0});import{statSync as u}from"node:fs";import{isAbsolute as f}from"node:path";import{ApiError as a}from"../../../api/index.js";import{buildOperationalEnvBase as l}from"../../../core/runtime/spawn-env.js";import{runCommandOnce as p}from"../../../core/runtime/run-command.js";import{readProfileEnvVars as w}from"../../../core/profiles/env-store.js";import{usage as s}from"../../../core/errors.js";const _=60,c=600,y=256*1024;function b(r){if(typeof r!="object"||r===null||Array.isArray(r))throw s("bash requires an object body");const t=r;if(typeof t.command!="string"||t.command==="")throw s("bash requires a non-empty `command`");if(typeof t.cwd!="string"||!f(t.cwd))throw new a(404,"cwd_not_found","cwd must name an absolute directory");try{if(!u(t.cwd).isDirectory())throw new Error("not a directory")}catch{throw new a(404,"cwd_not_found",`cwd not found: ${t.cwd}`)}const e=t.timeout_s??_;if(typeof e!="number"||!Number.isFinite(e)||e<=0||e>c)throw new a(422,"invalid_timeout",`timeout_s must be greater than 0 and at most ${c}`);if(t.profile!==void 0&&typeof t.profile!="string")throw s("profile must be a string");let n;if(t.env!==void 0){if(typeof t.env!="object"||t.env===null||Array.isArray(t.env))throw s("env must be an object of string values");n={};for(const[i,o]of Object.entries(t.env)){if(typeof o!="string")throw s("env must be an object of string values");n[i]=o}}return{command:t.command,cwd:t.cwd,timeout_s:e,env:n,profile:t.profile}}d(b,"parseRequest");async function T(r){const t=b(r.body),e=t.profile??null,n=l({targetCwd:t.cwd,targetProfileId:e}),i={...n,...w(e),...t.env,...e===null?{}:{CRTR_PROFILE_ID:e},CRTR_ADMITTED_HOST_PATH:n.CRTR_ADMITTED_HOST_PATH},o=await p({command:t.command,cwd:t.cwd,env:i,timeoutMs:t.timeout_s*1e3,headBytes:y}).completion;if(o.processError!==null)throw o.processError;return{status:200,body:{exit_code:o.timedOut?null:o.exitCode,signal:o.signal,stdout:o.stdout,stdout_truncated:o.stdoutTruncated,stderr:o.stderr,stderr_truncated:o.stderrTruncated,timed_out:o.timedOut,duration_ms:o.durationMs}}}d(T,"handleBash");const C=[{method:"POST",pattern:"/v1/bash",handler:T}];export{C as bashRoutes};

package/dist/daemon/api/handlers/files.js

@@ -1 +1 @@
-var p=Object.defineProperty;var f=(n,e)=>p(n,"name",{value:e,configurable:!0});import{closeSync as u,fstatSync as m,openSync as y,readSync as E}from"node:fs";import{isAbsolute as b}from"node:path";import{notFound as w,usage as s}from"../../../core/errors.js";import{ApiError as d}from"../../../api/index.js";const a=512*1024;function S(n){const e=n.query.get("path");if(e===null||e==="")throw s("a file peek requires a `path` query param");if(!b(e))throw s("file peek path must be absolute",{received:e});let r;try{r=y(e,"r")}catch(t){const o=t.code;throw o==="ENOENT"?w(`no such file: ${e}`,{received:e}):o==="EACCES"||o==="EPERM"?new d(403,"forbidden",`permission denied reading ${e}`):new d(500,"internal",`cannot read ${e}: ${t instanceof Error?t.message:String(t)}`)}try{const t=m(r);if(t.isDirectory())throw s(`file peek path is a directory: ${e}`,{received:e});const o=t.size,i=Buffer.allocUnsafe(Math.min(o,a)+1),c=E(r,i,0,i.length,0),l=c>a,h=i.toString("utf8",0,Math.min(c,a));return{status:200,body:{path:e,content:h,truncated:l}}}finally{u(r)}}f(S,"handlePeek");const q=[{method:"GET",pattern:"/v1/files/peek",handler:S}];export{q as fileRoutes};
+var p=Object.defineProperty;var c=(e,t)=>p(e,"name",{value:t,configurable:!0});import{closeSync as y,fsyncSync as S,fstatSync as T,lstatSync as $,mkdirSync as A,openSync as g,readSync as q,readdirSync as _,realpathSync as I,renameSync as L,statSync as N,unlinkSync as k,writeSync as z}from"node:fs";import{randomUUID as B}from"node:crypto";import{basename as M,dirname as F,isAbsolute as O,join as b}from"node:path";import{ApiError as a}from"../../../api/index.js";import{notFound as P,usage as u}from"../../../core/errors.js";import{InputError as D}from"../../../core/io.js";const m=512*1024,w=1024*1024,R=1e3;function h(e,t){if(e===null||e==="")throw u(`a file ${t} requires a \`path\` ${t==="write"?"body field":"query param"}`);if(!O(e))throw u(`file ${t} path must be absolute`,{received:e});return e}c(h,"requireAbsolutePath");function E(e){if(e==null)return"utf8";if(e==="utf8"||e==="base64")return e;throw u("encoding must be `utf8` or `base64`",{received:e})}c(E,"parseEncoding");function l(e,t,n){if(e instanceof a||e instanceof D)throw e;const r=e.code;throw r==="ENOENT"?P(`no such file: ${t}`,{received:t}):r==="EACCES"||r==="EPERM"?new a(403,"forbidden",`permission denied ${n} ${t}`):new a(500,"internal",`cannot ${n} ${t}: ${e instanceof Error?e.message:String(e)}`)}c(l,"mapFilesystemError");function U(e,t){let n;try{n=g(e,"r")}catch(r){return l(r,e,"reading")}try{const r=T(n);if(r.isDirectory())throw u(`file peek path is a directory: ${e}`,{received:e});const f=Buffer.allocUnsafe(Math.min(r.size,m)+1),o=q(n,f,0,f.length,0),i=o>m,s=f.subarray(0,Math.min(o,m)).toString(t);return{path:e,content:s,truncated:i}}catch(r){return l(r,e,"reading")}finally{y(n)}}c(U,"readHead");function j(e){const t=h(e.query.get("path"),"peek");return{status:200,body:U(t,E(e.query.get("encoding")))}}c(j,"handlePeek");function C(e){return e.length%4===0&&/^(?:[A-Za-z0-9+/]{4})*(?:[A-Za-z0-9+/]{2}==|[A-Za-z0-9+/]{3}=)?$/.test(e)}c(C,"isBase64");function W(e){if(typeof e!="object"||e===null||Array.isArray(e))throw u("file write requires an object body");const t=e,n=h(typeof t.path=="string"?t.path:null,"write");if(typeof t.content!="string")throw u("file write requires a string `content` body field");const r=E(t.encoding);if(r==="base64"&&!C(t.content))throw u("base64 file content must be valid base64");return{path:n,content:t.content,encoding:r}}c(W,"parseWriteBody");function Z(e){try{if(!$(e).isSymbolicLink())return e}catch(t){return t.code!=="ENOENT"?l(t,e,"resolving"):e}try{return I(e)}catch(t){return l(t,e,"resolving")}}c(Z,"writeTarget");function v(e,t){if(t.byteLength>w)throw new a(413,"file_too_large",`file content exceeds the ${w} byte limit`);const n=Z(e),r=F(n);try{A(r,{recursive:!0})}catch(i){return l(i,e,"creating parent directory for")}const f=b(r,`.${M(e)}.${B()}.tmp`);let o;try{o=g(f,"wx",384);let i=0;for(;i<t.length;)i+=z(o,t,i,t.length-i);return S(o),y(o),o=void 0,L(f,n),{path:e,bytes_written:t.byteLength}}catch(i){return l(i,e,"writing")}finally{o!==void 0&&y(o);try{k(f)}catch(i){if(i.code!=="ENOENT")throw i}}}c(v,"writeAtomically");function G(e){const{path:t,content:n,encoding:r}=W(e.body);return{status:200,body:v(t,Buffer.from(n,r))}}c(G,"handleWrite");function X(e){if(e===null)return R;const t=Number(e);if(!Number.isInteger(t)||t<1)throw u("file list limit must be a positive integer",{received:e});return t}c(X,"parseLimit");function Y(e){const t=h(e.query.get("path"),"list"),n=X(e.query.get("limit"));let r;try{r=_(t,{withFileTypes:!0}).sort((s,d)=>s.name.localeCompare(d.name))}catch(s){return l(s,t,"listing")}const f=r.slice(0,n),o=[];try{for(const s of f){const d=N(b(t,s.name));o.push({name:s.name,type:d.isFile()?"file":d.isDirectory()?"dir":"other",size:d.size,modified:d.mtime.toISOString()})}}catch(s){return l(s,t,"listing")}return{status:200,body:{path:t,entries:o,truncated:r.length>n}}}c(Y,"handleList");const te=[{method:"GET",pattern:"/v1/files/peek",handler:j},{method:"POST",pattern:"/v1/files/write",handler:G},{method:"GET",pattern:"/v1/files/list",handler:Y}];export{te as fileRoutes};

package/dist/daemon/api/handlers/node-events.d.ts

@@ -0,0 +1,36 @@
+import type { NodeEventDTO, NodeEventErrorDTO, ReportDTO } from '../../../api/index.js';
+import type { BrokerToClient } from '../../../core/runtime/broker-protocol.js';
+import type { RouteTable } from '../router.js';
+type StreamEvent = Exclude<NodeEventDTO, NodeEventErrorDTO>;
+type WithoutSequence<T> = T extends unknown ? Omit<T, 'sequence_number'> : never;
+type StreamEventPayload = WithoutSequence<StreamEvent>;
+type Subscriber = (event: NodeEventDTO) => void;
+/** The bounded per-node resume buffer. Event sequence numbers belong here rather
+ * than to HTTP connections, so every subscriber observes the same cursor. */
+export declare class NodeEventRing {
+    private events;
+    private bytes;
+    private nextSequence;
+    private earliestAvailable;
+    append(event: StreamEventPayload): StreamEvent;
+    replay(after: number | undefined): {
+        gap: NodeEventErrorDTO | null;
+        events: readonly StreamEvent[];
+    };
+    get empty(): boolean;
+}
+/** Translate only the application-safe subset of broker frames. The map retains
+ * tool argument summaries between start/end; raw arguments and tool output never
+ * cross this boundary. */
+export declare function translateBrokerFrame(nodeId: string, frame: BrokerToClient, toolSummaries?: Map<string, string>): StreamEventPayload[];
+declare class NodeEventStreams {
+    private readonly hubs;
+    subscribe(nodeId: string, after: number | undefined, subscriber: Subscriber): {
+        unsubscribe: () => void;
+        terminal: boolean;
+    };
+    report(nodeId: string, report: ReportDTO): void;
+}
+export declare const nodeEventStreams: NodeEventStreams;
+export declare const nodeEventRoutes: RouteTable;
+export {};

package/dist/daemon/api/handlers/node-events.js

@@ -0,0 +1,6 @@
+var q=Object.defineProperty;var o=(n,e)=>q(n,"name",{value:e,configurable:!0});import{randomUUID as T}from"node:crypto";import{ApiError as E}from"../../../api/errors.js";import{BrokerClient as C}from"../../../core/broker-client/client.js";import{getNode as b}from"../../../core/canvas/canvas.js";import{isPidAlive as A}from"../../../core/canvas/pid.js";import{BROKER_VIEW_SOCKET_WAIT_MS as M}from"../../../core/runtime/view-socket.js";import{toNodeOutcomeDTO as B}from"../map.js";import{reportsForNode as k}from"./reports.js";const L=15e3,$=6e4,w=250,P=512,R=256*1024,j=1e3,D=32*1024*1024;class G{static{o(this,"NodeEventRing")}events=[];bytes=0;nextSequence=1;earliestAvailable=1;append(e){const t={...e,sequence_number:this.nextSequence++},s=Buffer.byteLength(JSON.stringify(t),"utf8");if(s>R)return this.events=[],this.bytes=0,this.earliestAvailable=this.nextSequence,t;for(this.events.push(t),this.bytes+=s;this.events.length>P||this.bytes>R;){const r=this.events.shift();if(r===void 0)break;this.bytes-=Buffer.byteLength(JSON.stringify(r),"utf8"),this.earliestAvailable=r.sequence_number+1}return t}replay(e){if(e===void 0)return{gap:null,events:this.events};const t=e<this.earliestAvailable-1||e>=this.nextSequence?N(this.earliestAvailable):null;return{gap:t,events:t===null?this.events.filter(s=>s.sequence_number>e):this.events}}get empty(){return this.events.length===0}}function N(n){return{type:"error",error:{code:"stream_gap",message:"the requested event cursor is older than this daemon can resume",details:{earliest_sequence:n}}}}o(N,"streamGap");function V(n){return n===null?"arguments: null":Array.isArray(n)?`arguments: array (${n.length} items)`:typeof n=="object"?`arguments: object (${Object.keys(n).length} fields)`:`arguments: ${typeof n}`}o(V,"toolSummary");function I(n){if(typeof n!="object"||n===null)return"";const e=n.content;return typeof e=="string"?e:Array.isArray(e)?e.filter(t=>typeof t=="object"&&t!==null).filter(t=>t.type==="text"&&typeof t.text=="string").map(t=>t.text).join(""):""}o(I,"assistantText");function H(n,e,t=new Map){switch(e.type){case"message_update":return e.message.role==="assistant"&&e.assistantMessageEvent.type==="text_delta"?[{type:"node.output_text.delta",node_id:n,delta:e.assistantMessageEvent.delta}]:[];case"message_end":return e.message.role==="assistant"?[{type:"node.output_text.done",node_id:n,text:I(e.message)}]:[];case"tool_execution_start":{const s=V(e.args);return t.set(e.toolCallId,s),[{type:"node.tool_call.started",node_id:n,tool_call_id:e.toolCallId,tool:e.toolName,summary:s}]}case"tool_execution_end":{const s=t.get(e.toolCallId)??"[arguments unavailable]";return t.delete(e.toolCallId),[{type:"node.tool_call.completed",node_id:n,tool_call_id:e.toolCallId,tool:e.toolName,status:e.isError?"error":"ok",summary:s}]}case"turn_start":return[{type:"node.turn.started",node_id:n}];case"turn_end":return[{type:"node.turn.completed",node_id:n}];default:return[]}}o(H,"translateBrokerFrame");class z{static{o(this,"NodeEventHub")}nodeId;remove;ring=new G;subscribers=new Set;observer;observerErrorAt;poll;reconnect;idleClose;status;settledRevision;settledOutcome;settledSequence;snapshotSeeded=!1;reportsSeeded=!1;toolSummaries=new Map;fresh=!0;constructor(e,t){this.nodeId=e,this.remove=t}subscribe(e,t){const s=this.fresh&&e!==void 0;this.fresh=!1,this.start();const r=this.settledOutcome!==void 0,d=s?{gap:N(1),events:this.ring.replay(void 0).events}:this.ring.replay(e);r||(this.subscribers.add(t),this.status!=="dormant"&&this.openObserver());let h=!1;return queueMicrotask(()=>{if(!h){d.gap!==null&&t(d.gap);for(const l of d.events)t(l)}}),r&&this.scheduleIdleClose(),{unsubscribe:o(()=>{h=!0,r||this.unsubscribe(t)},"unsubscribe"),terminal:r}}report(e){this.settledRevision===void 0&&this.publish({type:"node.report.pushed",node_id:this.nodeId,report:e})}start(){this.idleClose!==void 0&&(clearTimeout(this.idleClose),this.idleClose=void 0),this.poll===void 0&&(this.check(),this.settledRevision===void 0&&(this.seedReports(),this.poll=setInterval(()=>this.check(),w)))}seedReports(){if(!this.reportsSeeded){this.reportsSeeded=!0;for(const e of k(this.nodeId).reverse())this.report(e)}}check(){const e=b(this.nodeId);if(e===null){this.fail("stream_error",`node ${this.nodeId} no longer exists`);return}const t=B(e);if(t!==null){this.settledRevision!==t.revision&&(this.settledRevision=t.revision,this.settledOutcome=t,this.settledSequence=this.publish({type:"node.settled",node_id:this.nodeId,outcome:t}).sequence_number,this.stopObserver(),this.stopPoll());return}const s=e.pi_pid===null?"dormant":e.status;if(s==="dormant"){this.status!=="dormant"&&(this.status=s,this.publish({type:"node.status.changed",node_id:this.nodeId,status:s}));return}this.status===void 0?this.status=s:this.status!=="dormant"&&this.status!==s&&(this.status=s,this.publish({type:"node.status.changed",node_id:this.nodeId,status:s})),this.openObserver()}openObserver(){if(this.observer!==void 0||this.subscribers.size===0)return;const e=new C(this.nodeId);this.observer=e,e.on("connect",()=>{this.observerErrorAt=void 0;const t=b(this.nodeId);this.status==="dormant"&&t!==null&&t.pi_pid!==null&&(this.status=t.status,this.publish({type:"node.status.changed",node_id:this.nodeId,status:t.status})),e.send({type:"hello",role:"observer",client_id:T(),attends:!1})}),e.on("frame",t=>{try{t.type==="welcome"&&this.seedSnapshot(t.snapshot);for(const s of H(this.nodeId,t,this.toolSummaries))this.publish(s)}catch(s){this.fail("stream_error",s instanceof Error?s.message:String(s))}}),e.on("error",()=>{const t=b(this.nodeId),s=Date.now();t!==null&&t.pi_pid!==null&&A(t.pi_pid)&&(this.observerErrorAt??=s,s-this.observerErrorAt<M)||this.fail("stream_error","observer connection failed")}),e.on("close",()=>{this.observer===e&&(this.observer=void 0,!(this.subscribers.size===0||this.settledRevision!==void 0)&&(this.status!=="dormant"&&(this.publish({type:"node.status.changed",node_id:this.nodeId,status:"dormant"}),this.status="dormant"),this.scheduleReconnect()))}),e.connect()}seedSnapshot(e){if(this.snapshotSeeded)return;this.snapshotSeeded=!0;const t=e.messages.filter(r=>r.role==="assistant"),s=e.state.isStreaming?t.pop():void 0;for(const r of t)this.publish({type:"node.output_text.done",node_id:this.nodeId,text:I(r)});s!==void 0&&this.publish({type:"node.output_text.delta",node_id:this.nodeId,delta:I(s)})}scheduleReconnect(){this.reconnect===void 0&&(this.reconnect=setTimeout(()=>{this.reconnect=void 0,this.check()},w))}publish(e){const t=this.ring.append(e);for(const s of[...this.subscribers])s(t);return t}fail(e,t){const s={type:"error",error:{code:e,message:t}};for(const r of[...this.subscribers])r(s);this.stopObserver(),this.stopPoll()}unsubscribe(e){this.subscribers.delete(e),this.subscribers.size===0&&this.scheduleIdleClose()}scheduleIdleClose(){this.idleClose===void 0&&(this.idleClose=setTimeout(()=>{this.stopObserver(),this.stopPoll(),this.remove()},$))}stopObserver(){this.reconnect!==void 0&&(clearTimeout(this.reconnect),this.reconnect=void 0);const e=this.observer;this.observer=void 0,e?.close()}stopPoll(){this.poll!==void 0&&(clearInterval(this.poll),this.poll=void 0)}}class J{static{o(this,"NodeEventStreams")}hubs=new Map;subscribe(e,t,s){let r=this.hubs.get(e);return r===void 0&&(r=new z(e,()=>this.hubs.delete(e)),this.hubs.set(e,r)),r.subscribe(t,s)}report(e,t){this.hubs.get(e)?.report(t)}}const F=new J;function K(n){const e=n.get("after");if(e===null||e==="")return{};if(!/^(?:0|[1-9]\d*)$/.test(e))throw new E(400,"invalid_request","`after` must be a non-negative integer");const t=Number(e);if(!Number.isSafeInteger(t))throw new E(400,"invalid_request","`after` must be a safe integer");return{after:t}}o(K,"parseQuery");function S(n){const{type:e,...t}=n;return`event: ${e}
+data: ${JSON.stringify(t)}
+
+`}o(S,"sseRecord");async function U(n){const e=n.params.id??"";if(b(e)===null)throw new E(404,"node_not_found",`no node ${e}`);const{after:t}=K(n.query),{req:s,res:r}=n;r.writeHead(200,{"content-type":"text/event-stream; charset=utf-8","cache-control":"no-cache",connection:"keep-alive"});let d=!1,h=!1,l=!1,c=0;const u=[];let m,f;const v=o(()=>{r.writableEnded||r.end()},"finish"),p=o(()=>{if(!d){if(d=!0,f!==void 0&&clearInterval(f),m?.(),s.destroyed||r.destroyed){u.length=0,c=0,v();return}if(l||u.length>0){h=!0;return}v()}},"close"),_=o(()=>{for(l=!1;u.length>0;){const i=u.shift();if(c-=Buffer.byteLength(i,"utf8"),!r.write(i)){l=!0,r.once("drain",_);return}}h&&v()},"flush"),O=o(()=>{if(d)return;u.length=0,c=0;const i=S({type:"error",error:{code:"stream_dropped",message:"stream reader is too slow"}});u.push(i),c=Buffer.byteLength(i,"utf8"),d=!0,h=!0,f!==void 0&&clearInterval(f),m?.(),l||_()},"dropSlowReader"),y=o(i=>{if(d)return!1;if(l||u.length>0){const a=Buffer.byteLength(i,"utf8");return u.length>=j||c+a>D?(O(),!1):(u.push(i),c+=a,!0)}return r.write(i)||(l=!0,r.once("drain",_)),!0},"write"),g=o((i,a)=>{d||y(S({type:"error",error:{code:i,message:a}})),p()},"fail"),x=o(i=>{try{if(!y(S(i)))return;(i.type==="node.settled"||i.type==="error"&&i.error.code!=="stream_gap")&&p()}catch(a){g("stream_error",a instanceof Error?a.message:String(a))}},"onEvent");f=setInterval(()=>{try{d||y(`: keepalive
+
+`)}catch(i){g("stream_error",i instanceof Error?i.message:String(i))}},L),s.once("close",p);try{const i=F.subscribe(e,t,x);m=i.unsubscribe,i.terminal&&queueMicrotask(p)}catch(i){g("stream_error",i instanceof Error?i.message:String(i))}return{status:200}}o(U,"handleEvents");const re=[{method:"GET",pattern:"/v1/nodes/:id/events",handler:U}];export{G as NodeEventRing,re as nodeEventRoutes,F as nodeEventStreams,H as translateBrokerFrame};

package/dist/daemon/api/handlers/reports.js

@@ -1,16 +1,16 @@
-var N=Object.defineProperty;var s=(t,e)=>N(t,"name",{value:e,configurable:!0});import{existsSync as q,readdirSync as x,readFileSync as D,statSync as P}from"node:fs";import{join as A}from"node:path";import{getNode as c}from"../../../core/canvas/canvas.js";import{push as E,FinalizationError as _}from"../../../core/feed/feed.js";import{branchIsPushedAtCurrentTip as C,hasOpenManagedWorktree as I,missingWorktreeRecoveryHint as F}from"../../../core/worktree.js";import{autoDropCleanManagedWorktreeAsync as j}from"../../../core/worktree-mutation-async.js";import{reportsDir as J}from"../../../core/canvas/paths.js";import{notFound as M,usage as l}from"../../../core/errors.js";import{InputError as d}from"../../../core/io.js";import{parseFrontmatterGeneric as z}from"../../../core/frontmatter.js";import{toReportResultDTO as B}from"../map.js";import{outputSchemaPath as H,readOutputRequest as v,removeOutputSchema as W,validateStructuredResult as L,writeOutputDeclined as G,writeOutputResult as X}from"../../../core/runtime/structured-output.js";function y(t){if(c(t)===null)throw M(`unknown node: ${t}`,{received:t})}s(y,"requireNode");function K(t){if(typeof t!="object"||t===null)throw l("a push report requires a JSON body { tier, body }");const e=t.tier,n=t.delivery_tier,r=t.body;if(e!=="update"&&e!=="urgent"&&e!=="final")throw l(`invalid report tier: ${String(e)} (expected update|urgent|final)`);if(n!==void 0&&n!=="deferred"&&n!=="normal"&&n!=="urgent")throw l(`invalid delivery_tier: ${String(n)} (expected deferred|normal|urgent)`);if(e!=="update"&&n!==void 0)throw l("delivery_tier is only valid for update reports");if(typeof r!="string"||r.trim()==="")throw l("a push report requires a non-empty body");return{tier:e,...n===void 0?{}:{delivery_tier:n},body:r}}s(K,"parsePushBody");async function V(t){const e=t.params.id;y(e);const n=K(t.body);if(n.tier==="final"&&v(e).state==="valid")throw new d({error:"structured_result_pending",message:"This node owes a structured result \u2014 a plain `push final` would finish it without recording one.",next:'Submit the result with `crtr push result` instead; it validates against the pending schema, records it, and pushes the final report for you. If the schema cannot be honestly satisfied, `crtr push result --decline "<reason>" --code <token>` records the decline and finishes the node.'});const r=n.tier==="final"?c(e)?.status:void 0,i=n.tier==="final"?await S(e):void 0,o=await R(e,n),u=n.tier==="final"&&r!==void 0?{from:r,to:c(e)?.status??"done"}:void 0;return{status:200,body:B(o,u,i)}}s(V,"handlePush");async function S(t){if(!I(c(t)))return;const e=await j(t);if(e!==null)return e.worktree_path;if(!await C(c(t).managed_worktree))throw new d({error:"open_managed_worktree",message:"This node still owns an open managed worktree that is neither clean and locally landed nor clean with its exact tip on origin \u2014 `push final` cannot finish.",next:(()=>{const n=c(t)?.managed_worktree;return n!=null&&n.state==="open"&&!q(n.path)?F(n):"Commit the remaining work in the worktree, push its branch to origin at its current tip, then rerun `crtr push final`; or run `crtr node worktree close` to land it locally."})()})}s(S,"guardFinalWorktree");const k=2e3;function Q(t,e){const n=JSON.stringify(e,null,2),r=n.length>k?`${n.slice(0,k)}
-\u2026 (truncated \u2014 the full result is at the result path above)`:n;return`Structured output submitted.
+var D=Object.defineProperty;var s=(t,e)=>D(t,"name",{value:e,configurable:!0});import{existsSync as P,readdirSync as E,readFileSync as A,statSync as C}from"node:fs";import{join as I}from"node:path";import{getNode as f}from"../../../core/canvas/canvas.js";import{push as F,FinalizationError as S}from"../../../core/feed/feed.js";import{branchIsPushedAtCurrentTip as j,hasOpenManagedWorktree as J,missingWorktreeRecoveryHint as M}from"../../../core/worktree.js";import{autoDropCleanManagedWorktreeAsync as z}from"../../../core/worktree-mutation-async.js";import{reportsDir as B}from"../../../core/canvas/paths.js";import{notFound as H,usage as c}from"../../../core/errors.js";import{InputError as d}from"../../../core/io.js";import{parseFrontmatterGeneric as W}from"../../../core/frontmatter.js";import{toReportResultDTO as L}from"../map.js";import{outputSchemaPath as G,readOutputRequest as k,removeOutputSchema as X,validateStructuredResult as K,writeOutputDeclined as V,writeOutputResult as Q}from"../../../core/runtime/structured-output.js";import{nodeEventStreams as O}from"./node-events.js";function g(t){if(f(t)===null)throw H(`unknown node: ${t}`,{received:t})}s(g,"requireNode");function U(t){if(typeof t!="object"||t===null)throw c("a push report requires a JSON body { tier, body }");const e=t.tier,r=t.delivery_tier,n=t.body;if(e!=="update"&&e!=="urgent"&&e!=="final")throw c(`invalid report tier: ${String(e)} (expected update|urgent|final)`);if(r!==void 0&&r!=="deferred"&&r!=="normal"&&r!=="urgent")throw c(`invalid delivery_tier: ${String(r)} (expected deferred|normal|urgent)`);if(e!=="update"&&r!==void 0)throw c("delivery_tier is only valid for update reports");if(typeof n!="string"||n.trim()==="")throw c("a push report requires a non-empty body");return{tier:e,...r===void 0?{}:{delivery_tier:r},body:n}}s(U,"parsePushBody");async function Y(t){const e=t.params.id;g(e);const r=U(t.body);if(r.tier==="final"&&k(e).state==="valid")throw new d({error:"structured_result_pending",message:"This node owes a structured result \u2014 a plain `push final` would finish it without recording one.",next:'Submit the result with `crtr push result` instead; it validates against the pending schema, records it, and pushes the final report for you. If the schema cannot be honestly satisfied, `crtr push result --decline "<reason>" --code <token>` records the decline and finishes the node.'});const n=r.tier==="final"?f(e)?.status:void 0,i=r.tier==="final"?await $(e):void 0,o=await q(e,r),u=r.tier==="final"&&n!==void 0?{from:n,to:f(e)?.status??"done"}:void 0,l=L(o,u,i),p=b(e).find(a=>a.path===o.reportPath);return p!==void 0&&O.report(e,p),{status:200,body:l}}s(Y,"handlePush");async function $(t){if(!J(f(t)))return;const e=await z(t);if(e!==null)return e.worktree_path;if(!await j(f(t).managed_worktree))throw new d({error:"open_managed_worktree",message:"This node still owns an open managed worktree that is neither clean and locally landed nor clean with its exact tip on origin \u2014 `push final` cannot finish.",next:(()=>{const r=f(t)?.managed_worktree;return r!=null&&r.state==="open"&&!P(r.path)?M(r):"Commit the remaining work in the worktree, push its branch to origin at its current tip, then rerun `crtr push final`; or run `crtr node worktree close` to land it locally."})()})}s($,"guardFinalWorktree");const R=2e3;function Z(t,e){const r=JSON.stringify(e,null,2),n=r.length>R?`${r.slice(0,R)}
+\u2026 (truncated \u2014 the full result is at the result path above)`:r;return`Structured output submitted.
 
 Result path: ${t}
 
 \`\`\`json
-${r}
+${n}
 \`\`\`
-`}s(Q,"submitReportBody");function U(t,e){return`Structured result declined.
+`}s(Z,"submitReportBody");function ee(t,e){return`Structured result declined.
 
 Reason: ${e.reason}
 Code: ${e.code}
 Retryable: ${e.retryable?"yes":"no"}
 
 Declined marker: ${t}
-`}s(U,"declineReportBody");const O=1024,$=64;function Y(t){if(typeof t!="object"||t===null)throw l("a result submission requires a JSON body { value } or { decline, code, retryable }");const e=Object.hasOwn(t,"value"),n=Object.hasOwn(t,"decline");if(e&&n)throw l("a result submission carries either { value } or { decline, code, retryable }, not both");if(n){const{decline:r,code:i,retryable:o}=t;if(typeof r!="string"||r.trim()==="")throw new d({error:"missing_decline_reason",message:"A decline needs a reason.",next:'Rerun with `--decline "<one sentence on why the schema cannot be honestly satisfied>" --code <token>`.'});if(r.length>O)throw new d({error:"decline_reason_too_long",message:`A decline reason is at most ${O} characters (got ${r.length}).`,next:"Keep the reason to one plain sentence; put any detail in an artifact and name its path."});if(typeof i!="string"||i.trim()===""||/\s/.test(i.trim())||i.trim().length>$)throw new d({error:"invalid_decline_code",message:`A decline needs a code: one whitespace-free token of at most ${$} characters naming the decline class.`,next:"Rerun with `--code <token>` \u2014 the token your requester documented for this case."});if(typeof o!="boolean")throw l("a decline carries `retryable` as a boolean");return{declined:{reason:r.trim(),code:i.trim(),retryable:o}}}if(!e)throw l("a result submission requires a JSON body { value } or { decline, code, retryable }");return{value:t.value}}s(Y,"parseSubmitBody");async function Z(t){const e=t.params.id;y(e);const n=Y(t.body),r=v(e);if(r.state==="absent")throw new d({error:"no_output_request",message:"No structured output is currently requested of this node.",next:"Nothing to submit here \u2014 continue working, or finish with `crtr push final`."});if(r.state==="invalid")throw new d({error:"invalid_output_request",message:`The structured-output request file is invalid: ${r.error}`,next:`Have the requester re-issue the request, or remove ${H(e)} and finish with \`crtr push final\`.`});const{mode:i,schema:o}=r.request;let u;if("value"in n)try{u=await L(o,n.value)}catch(f){throw new d({error:"result_schema_mismatch",message:`the submitted result does not match the requested schema: ${f.message}`,next:'Fix the listed fields and rerun `crtr push result`; if the schema cannot be honestly satisfied, rerun with `--decline "<reason>" --code <token>`.'})}const h=i==="terminal"?c(e)?.status:void 0,p=i==="terminal"?await S(e):void 0;let a,m,w;if("declined"in n){const{declined:f}=n;if(a=G(e,{mode:i,...f,at:new Date().toISOString()}),m=U(a,f),i==="terminal"){const T={schema:"crtr.node-outcome-detail/v1",message:f.reason,declined:f};w={kind:"failure",reason:"declined",detailJson:JSON.stringify(T)}}}else a=X(e,u),m=Q(a,u);const g=await R(e,{tier:i==="terminal"?"final":"update",body:m},w);W(e);const b=i==="terminal"&&h!==void 0?{from:h,to:c(e)?.status??"done"}:void 0;return{status:200,body:{mode:i,result_path:a,report_path:g.reportPath,notified:[...g.deliveredTo],..."declined"in n?{declined:n.declined}:{},...b===void 0?{}:{transitioned:b},...p===void 0?{}:{worktree_auto_dropped:!0,worktree_auto_dropped_path:p}}}}s(Z,"handleSubmitResult");async function R(t,e,n){try{return await E(t,{kind:e.tier,body:e.body,...e.delivery_tier===void 0?{}:{deliveryTier:e.delivery_tier},...n===void 0?{}:{outcome:n}})}catch(r){throw r instanceof _&&r.code==="already_finalized"?new d({error:"already_finalized",message:"This node already submitted its canonical final result.",next:"Push an update with the new information, then stop."}):r instanceof _&&r.code==="finalization_forbidden"?new d({error:"finalization_forbidden",message:"A canceled or dead node cannot submit a canonical final result.",next:"Do not push final from this node."}):r}}s(R,"pushOrRethrow");function ee(t){const e=t.match(/^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})$/);return e===null?t:`${e[1]}-${e[2]}-${e[3]}T${e[4]}:${e[5]}:${e[6]}`}s(ee,"compactToIso");function te(t){const e=J(t);let n;try{n=x(e).filter(i=>i.endsWith(".md"))}catch{n=[]}const r=[];for(const i of n){const o=A(e,i),u=D(o,"utf8"),{data:h,body:p}=z(u),a=i.match(/^([0-9]{8}T[0-9]{6})-(\w+)\.md$/),m=(typeof h?.kind=="string"?h.kind:void 0)??(a?a[2]:"update"),w=(typeof h?.ts=="string"?h.ts:void 0)??(a?ee(a[1]):new Date(P(o).mtimeMs).toISOString());r.push({path:o,tier:m,body:p.trim(),created:w})}return r.sort((i,o)=>i.created<o.created?1:i.created>o.created?-1:0),r}s(te,"reportsForNode");function ne(t){const e=t.params.id;y(e);const n=t.query.get("tier"),r=t.query.get("limit"),i=r!==null?Number(r):void 0;let o=te(e);return n!==null&&(o=o.filter(u=>u.tier===n)),i!==void 0&&Number.isFinite(i)&&i>=0&&(o=o.slice(0,i)),{status:200,body:o}}s(ne,"handleList");const ye=[{method:"POST",pattern:"/v1/nodes/:id/reports",handler:V},{method:"GET",pattern:"/v1/nodes/:id/reports",handler:ne},{method:"POST",pattern:"/v1/nodes/:id/result",handler:Z}];export{ye as reportRoutes,te as reportsForNode};
+`}s(ee,"declineReportBody");const T=1024,N=64;function te(t){if(typeof t!="object"||t===null)throw c("a result submission requires a JSON body { value } or { decline, code, retryable }");const e=Object.hasOwn(t,"value"),r=Object.hasOwn(t,"decline");if(e&&r)throw c("a result submission carries either { value } or { decline, code, retryable }, not both");if(r){const{decline:n,code:i,retryable:o}=t;if(typeof n!="string"||n.trim()==="")throw new d({error:"missing_decline_reason",message:"A decline needs a reason.",next:'Rerun with `--decline "<one sentence on why the schema cannot be honestly satisfied>" --code <token>`.'});if(n.length>T)throw new d({error:"decline_reason_too_long",message:`A decline reason is at most ${T} characters (got ${n.length}).`,next:"Keep the reason to one plain sentence; put any detail in an artifact and name its path."});if(typeof i!="string"||i.trim()===""||/\s/.test(i.trim())||i.trim().length>N)throw new d({error:"invalid_decline_code",message:`A decline needs a code: one whitespace-free token of at most ${N} characters naming the decline class.`,next:"Rerun with `--code <token>` \u2014 the token your requester documented for this case."});if(typeof o!="boolean")throw c("a decline carries `retryable` as a boolean");return{declined:{reason:n.trim(),code:i.trim(),retryable:o}}}if(!e)throw c("a result submission requires a JSON body { value } or { decline, code, retryable }");return{value:t.value}}s(te,"parseSubmitBody");async function re(t){const e=t.params.id;g(e);const r=te(t.body),n=k(e);if(n.state==="absent")throw new d({error:"no_output_request",message:"No structured output is currently requested of this node.",next:"Nothing to submit here \u2014 continue working, or finish with `crtr push final`."});if(n.state==="invalid")throw new d({error:"invalid_output_request",message:`The structured-output request file is invalid: ${n.error}`,next:`Have the requester re-issue the request, or remove ${G(e)} and finish with \`crtr push final\`.`});const{mode:i,schema:o}=n.request;let u;if("value"in r)try{u=await K(o,r.value)}catch(h){throw new d({error:"result_schema_mismatch",message:`the submitted result does not match the requested schema: ${h.message}`,next:'Fix the listed fields and rerun `crtr push result`; if the schema cannot be honestly satisfied, rerun with `--decline "<reason>" --code <token>`.'})}const l=i==="terminal"?f(e)?.status:void 0,p=i==="terminal"?await $(e):void 0;let a,m,w;if("declined"in r){const{declined:h}=r;if(a=V(e,{mode:i,...h,at:new Date().toISOString()}),m=ee(a,h),i==="terminal"){const x={schema:"crtr.node-outcome-detail/v1",message:h.reason,declined:h};w={kind:"failure",reason:"declined",detailJson:JSON.stringify(x)}}}else a=Q(e,u),m=Z(a,u);const y=await q(e,{tier:i==="terminal"?"final":"update",body:m},w);X(e);const _=i==="terminal"&&l!==void 0?{from:l,to:f(e)?.status??"done"}:void 0,v=b(e).find(h=>h.path===y.reportPath);return v!==void 0&&O.report(e,v),{status:200,body:{mode:i,result_path:a,report_path:y.reportPath,notified:[...y.deliveredTo],..."declined"in r?{declined:r.declined}:{},..._===void 0?{}:{transitioned:_},...p===void 0?{}:{worktree_auto_dropped:!0,worktree_auto_dropped_path:p}}}}s(re,"handleSubmitResult");async function q(t,e,r){try{return await F(t,{kind:e.tier,body:e.body,...e.delivery_tier===void 0?{}:{deliveryTier:e.delivery_tier},...r===void 0?{}:{outcome:r}})}catch(n){throw n instanceof S&&n.code==="already_finalized"?new d({error:"already_finalized",message:"This node already submitted its canonical final result.",next:"Push an update with the new information, then stop."}):n instanceof S&&n.code==="finalization_forbidden"?new d({error:"finalization_forbidden",message:"A canceled or dead node cannot submit a canonical final result.",next:"Do not push final from this node."}):n}}s(q,"pushOrRethrow");function ne(t){const e=t.match(/^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})$/);return e===null?t:`${e[1]}-${e[2]}-${e[3]}T${e[4]}:${e[5]}:${e[6]}`}s(ne,"compactToIso");function b(t){const e=B(t);let r;try{r=E(e).filter(i=>i.endsWith(".md"))}catch{r=[]}const n=[];for(const i of r){const o=I(e,i),u=A(o,"utf8"),{data:l,body:p}=W(u),a=i.match(/^([0-9]{8}T[0-9]{6})-(\w+)\.md$/),m=(typeof l?.kind=="string"?l.kind:void 0)??(a?a[2]:"update"),w=(typeof l?.ts=="string"?l.ts:void 0)??(a?ne(a[1]):new Date(C(o).mtimeMs).toISOString());n.push({path:o,tier:m,body:p.trim(),created:w})}return n.sort((i,o)=>i.created<o.created?1:i.created>o.created?-1:0),n}s(b,"reportsForNode");function ie(t){const e=t.params.id;g(e);const r=t.query.get("tier"),n=t.query.get("limit"),i=n!==null?Number(n):void 0;let o=b(e);return r!==null&&(o=o.filter(u=>u.tier===r)),i!==void 0&&Number.isFinite(i)&&i>=0&&(o=o.slice(0,i)),{status:200,body:o}}s(ie,"handleList");const _e=[{method:"POST",pattern:"/v1/nodes/:id/reports",handler:Y},{method:"GET",pattern:"/v1/nodes/:id/reports",handler:ie},{method:"POST",pattern:"/v1/nodes/:id/result",handler:re}];export{_e as reportRoutes,b as reportsForNode};

package/dist/daemon/api/server.js

@@ -1,11 +1,11 @@
-var j=Object.defineProperty;var i=(e,t)=>j(e,"name",{value:t,configurable:!0});import{createServer as w}from"node:http";import{chmodSync as z,existsSync as C,unlinkSync as O}from"node:fs";import{apiSocketPath as x}from"../../core/canvas/paths.js";import{readConfig as G}from"../../core/config.js";import{getApiToken as J}from"../../core/secrets.js";import{emitEvent as g}from"../../core/events/emit.js";import{envCrtrdTcp as L,envCrtrdToken as _}from"../../shared/env.js";import{Router as U}from"./router.js";import{handleAttachUpgrade as D}from"./bridge.js";import{boundDaemonControl as F}from"../control.js";import{attachRoutes as M}from"./handlers/attach.js";import{bashJobRoutes as Y}from"./handlers/bash-jobs.js";import{brokerOperationRoutes as k}from"./handlers/broker-ops.js";import{brokerRecoveryRoutes as E,nodeFaultRoutes as Z}from"./handlers/broker-recovery.js";import{canvasRoutes as K}from"./handlers/canvas.js";import{chatInventoryRoutes as Q}from"./handlers/chat-inventory.js";import{daemonRoutes as V}from"./handlers/daemon.js";import{fileRoutes as W}from"./handlers/files.js";import{focusRoutes as X}from"./handlers/focus.js";import{healthRoutes as q}from"./handlers/health.js";import{humanRequestRoutes as ee}from"./handlers/human-requests.js";import{inboxRoutes as re}from"./handlers/inbox.js";import{feedbackCommentRoutes as te}from"./handlers/feedback-comments.js";import{memoryRoutes as oe}from"./handlers/memory.js";import{brokerMailRoutes as P,messageRoutes as ne}from"./handlers/messages.js";import{modelAuthRoutes as ie}from"./handlers/modelauth.js";import{modelConfigRoutes as se}from"./handlers/model-config.js";import{nodeRoutes as le}from"./handlers/nodes.js";import{nodeOutcomeRoutes as ce}from"./handlers/node-outcomes.js";import{profileRoutes as ae}from"./handlers/profiles.js";import{prospectiveChatInventoryRoutes as ue}from"./handlers/prospective-chat-inventory.js";import{reportRoutes as de}from"./handlers/reports.js";import{reviewCommentRoutes as pe}from"./handlers/review-comments.js";import{reviewRoutes as me}from"./handlers/reviews.js";import{subscriptionRoutes as fe}from"./handlers/subscriptions.js";import{cronRoutes as ge}from"./handlers/crons.js";import{worktreeRoutes as he}from"./handlers/worktree.js";function Ae(e){return new U().registerAll(q(e)).registerAll(V).registerAll(le).registerAll(ce).registerAll(Y).registerAll(k).registerAll(E).registerAll(Z).registerAll(he).registerAll(P).registerAll(ne).registerAll(de).registerAll(M).registerAll(K).registerAll(W).registerAll(oe).registerAll(X).registerAll(fe).registerAll(ge).registerAll(ae).registerAll(ie).registerAll(se).registerAll(me).registerAll(pe).registerAll(re).registerAll(ee).registerAll(Q).registerAll(ue).registerAll(te)}i(Ae,"buildRouter");function ye(e,t){if(e.toUpperCase()!=="GET")return null;const s=t.split("/").filter(m=>m.length>0);if(s.length!==4||s[0]!=="v1"||s[1]!=="nodes"||s[3]!=="attach")return null;const a=s[2];return a===void 0||a===""?null:decodeURIComponent(a)}i(ye,"attachNodeId");function Re(e){const t=e.trim();if(t==="")return null;const s=t.lastIndexOf(":");if(s<0)return null;const a=t.slice(0,s),m=t.slice(s+1),c=Number(m);return!Number.isInteger(c)||c<0||c>65535?null:{host:a===""?"0.0.0.0":a,port:c}}i(Re,"parseTcp");function ve(e,t){return`${e.includes(":")?`[${e}]`:e}:${t}`}i(ve,"formatTcpAddress");const H={error:{code:"unauthorized",message:"missing or invalid bearer token"}};function N(e,t){return e.headers.authorization===`Bearer ${t}`}i(N,"isAuthorized");function Te(e){const t=JSON.stringify(H);e.writeHead(401,{"content-type":"application/json; charset=utf-8"}),e.end(t)}i(Te,"writeUnauthorized");function Se(e,t){e.writeHead(503,{"content-type":"application/json; charset=utf-8"}),e.end(JSON.stringify({error:{code:"startup_blocked",message:t}}))}i(Se,"writeStartupBlocked");function be(e,t){const s=JSON.stringify({error:{code:"startup_blocked",message:t}}),a=`HTTP/1.1 503 Service Unavailable\r
+var j=Object.defineProperty;var i=(e,t)=>j(e,"name",{value:t,configurable:!0});import{createServer as w}from"node:http";import{chmodSync as z,existsSync as C,unlinkSync as O}from"node:fs";import{apiSocketPath as x}from"../../core/canvas/paths.js";import{readConfig as G}from"../../core/config.js";import{getApiToken as J}from"../../core/secrets.js";import{emitEvent as g}from"../../core/events/emit.js";import{envCrtrdTcp as L,envCrtrdToken as _}from"../../shared/env.js";import{Router as U}from"./router.js";import{handleAttachUpgrade as D}from"./bridge.js";import{boundDaemonControl as F}from"../control.js";import{attachRoutes as M}from"./handlers/attach.js";import{bashJobRoutes as Y}from"./handlers/bash-jobs.js";import{bashRoutes as Z}from"./handlers/bash.js";import{brokerOperationRoutes as E}from"./handlers/broker-ops.js";import{brokerRecoveryRoutes as k,nodeFaultRoutes as K}from"./handlers/broker-recovery.js";import{canvasRoutes as Q}from"./handlers/canvas.js";import{chatInventoryRoutes as V}from"./handlers/chat-inventory.js";import{daemonRoutes as W}from"./handlers/daemon.js";import{fileRoutes as X}from"./handlers/files.js";import{focusRoutes as q}from"./handlers/focus.js";import{healthRoutes as ee}from"./handlers/health.js";import{humanRequestRoutes as re}from"./handlers/human-requests.js";import{inboxRoutes as te}from"./handlers/inbox.js";import{feedbackCommentRoutes as oe}from"./handlers/feedback-comments.js";import{memoryRoutes as ne}from"./handlers/memory.js";import{brokerMailRoutes as P,messageRoutes as ie}from"./handlers/messages.js";import{modelAuthRoutes as se}from"./handlers/modelauth.js";import{modelConfigRoutes as le}from"./handlers/model-config.js";import{nodeRoutes as ce}from"./handlers/nodes.js";import{nodeOutcomeRoutes as ae}from"./handlers/node-outcomes.js";import{nodeEventRoutes as ue}from"./handlers/node-events.js";import{profileRoutes as de}from"./handlers/profiles.js";import{prospectiveChatInventoryRoutes as pe}from"./handlers/prospective-chat-inventory.js";import{reportRoutes as me}from"./handlers/reports.js";import{reviewCommentRoutes as fe}from"./handlers/review-comments.js";import{reviewRoutes as ge}from"./handlers/reviews.js";import{subscriptionRoutes as he}from"./handlers/subscriptions.js";import{cronRoutes as Ae}from"./handlers/crons.js";import{worktreeRoutes as ye}from"./handlers/worktree.js";function Re(e){return new U().registerAll(ee(e)).registerAll(W).registerAll(ce).registerAll(ae).registerAll(ue).registerAll(Y).registerAll(Z).registerAll(E).registerAll(k).registerAll(K).registerAll(ye).registerAll(P).registerAll(ie).registerAll(me).registerAll(M).registerAll(Q).registerAll(X).registerAll(ne).registerAll(q).registerAll(he).registerAll(Ae).registerAll(de).registerAll(se).registerAll(le).registerAll(ge).registerAll(fe).registerAll(te).registerAll(re).registerAll(V).registerAll(pe).registerAll(oe)}i(Re,"buildRouter");function ve(e,t){if(e.toUpperCase()!=="GET")return null;const s=t.split("/").filter(m=>m.length>0);if(s.length!==4||s[0]!=="v1"||s[1]!=="nodes"||s[3]!=="attach")return null;const a=s[2];return a===void 0||a===""?null:decodeURIComponent(a)}i(ve,"attachNodeId");function Te(e){const t=e.trim();if(t==="")return null;const s=t.lastIndexOf(":");if(s<0)return null;const a=t.slice(0,s),m=t.slice(s+1),c=Number(m);return!Number.isInteger(c)||c<0||c>65535?null:{host:a===""?"0.0.0.0":a,port:c}}i(Te,"parseTcp");function be(e,t){return`${e.includes(":")?`[${e}]`:e}:${t}`}i(be,"formatTcpAddress");const H={error:{code:"unauthorized",message:"missing or invalid bearer token"}};function N(e,t){return e.headers.authorization===`Bearer ${t}`}i(N,"isAuthorized");function Se(e){const t=JSON.stringify(H);e.writeHead(401,{"content-type":"application/json; charset=utf-8"}),e.end(t)}i(Se,"writeUnauthorized");function we(e,t){e.writeHead(503,{"content-type":"application/json; charset=utf-8"}),e.end(JSON.stringify({error:{code:"startup_blocked",message:t}}))}i(we,"writeStartupBlocked");function Ce(e,t){const s=JSON.stringify({error:{code:"startup_blocked",message:t}}),a=`HTTP/1.1 503 Service Unavailable\r
 content-type: application/json; charset=utf-8\r
 content-length: ${Buffer.byteLength(s)}\r
 connection: close\r
 \r
-${s}`;try{e.end(a)}catch{e.destroy()}}i(be,"destroyUpgradeStartupBlocked");function we(e){const t=JSON.stringify(H),s=`HTTP/1.1 401 Unauthorized\r
+${s}`;try{e.end(a)}catch{e.destroy()}}i(Ce,"destroyUpgradeStartupBlocked");function Oe(e){const t=JSON.stringify(H),s=`HTTP/1.1 401 Unauthorized\r
 content-type: application/json; charset=utf-8\r
 content-length: ${Buffer.byteLength(t)}\r
 connection: close\r
 \r
-${t}`;try{e.end(s)}catch{try{e.destroy()}catch{}}}i(we,"destroyUpgradeUnauthorized");function I(e){return new Promise(t=>{try{e.closeAllConnections()}catch{}e.close(()=>t())})}i(I,"closeServer");function ur(e={}){let t=null;const s=Ae(()=>t),a=new U().registerAll(k).registerAll(E).registerAll(P),m=i((o,r)=>{const u=F()?.startupBlock()??null;return u===null||o==="GET"&&(r==="/healthz"||r==="/v1/status")||o==="POST"&&(r==="/v1/daemon/migrate"||r==="/v1/daemon/admit")||u.phase==="recovering"&&a.match(o,r)!==null?null:u},"startupBlockFor"),c=x(),A=i((o,r)=>{const u=i(n=>{g({event:"api.request.failed",level:"error",error:n instanceof Error?n:new Error(String(n))});try{r.headersSent||r.writeHead(500,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"internal",message:"internal error"}}))}catch{}},"internalFailure");let p;try{p=new URL(o.url??"/","http://127.0.0.1")}catch{try{r.writeHead(400,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"invalid_request",message:"request URL is invalid"}}))}catch{}return}try{const n=m((o.method??"GET").toUpperCase(),p.pathname);if(n!==null){Se(r,n.message);return}s.handle(o,r).catch(u)}catch(n){u(n)}},"onRequest"),y=i((o,r,u)=>{r.on("error",()=>{});try{const p=new URL(o.url??"/","http://127.0.0.1"),n=m((o.method??"GET").toUpperCase(),p.pathname);if(n!==null){be(r,n.message);return}const l=ye(o.method??"GET",p.pathname);if(l===null){r.destroy();return}D(o,r,u,l).catch(()=>{try{r.destroy()}catch{}})}catch{try{r.destroy()}catch{}}},"onUpgrade"),B=i(o=>{o.on("error",r=>{g({event:"api.server.failed",level:"error",error:r})})},"bindErrorHandler"),f=w(A);f.on("upgrade",y);let v=!1,T,S;const $=new Promise((o,r)=>{T=o,S=r});f.once("listening",()=>{v=!0,T()}),f.on("error",o=>{g({event:"api.server.failed",level:"error",error:o}),v||S(o)});try{C(c)&&O(c)}catch{}f.listen(c,()=>{try{z(c,384)}catch(o){g({event:"api.socket.chmod_failed",level:"error",error:o instanceof Error?o:new Error(String(o))})}});let d;const h=e.tcp??L()??G("user").api.tcp;if(h!==void 0&&h!==""){const o=Re(h);if(o===null)g({event:"api.tcp.invalid",level:"error",error:new Error(`invalid CRTRD_TCP/--tcp spec: ${h}`)});else{const r=e.token??_()??J("user"),u=r===void 0?A:(n,l)=>{if((n.method??"GET").toUpperCase()==="OPTIONS"){l.writeHead(204,{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Headers":"authorization, content-type","Access-Control-Allow-Methods":"GET, POST, PATCH, PUT, DELETE, OPTIONS","Access-Control-Max-Age":"600"}),l.end();return}if(!N(n,r)){Te(l);return}l.setHeader("Access-Control-Allow-Origin","*"),A(n,l)},p=r===void 0?y:(n,l,R)=>{if(!N(n,r)){we(l);return}y(n,l,R)};d=w(u),d.on("upgrade",p),B(d),d.once("listening",()=>{const n=d?.address();if(n!==null&&typeof n=="object"){const{address:l,port:R}=n;t=ve(l,R)}}),d.listen(o.port,o.host)}}let b=!1;return{ready:$,tcpAddress:i(()=>t,"tcpAddress"),close:i(async()=>{if(!b){b=!0,await Promise.all([I(f),d!==void 0?I(d):Promise.resolve()]);try{C(c)&&O(c)}catch{}}},"close")}}i(ur,"createApiServer");export{ur as createApiServer};
+${t}`;try{e.end(s)}catch{try{e.destroy()}catch{}}}i(Oe,"destroyUpgradeUnauthorized");function I(e){return new Promise(t=>{try{e.closeAllConnections()}catch{}e.close(()=>t())})}i(I,"closeServer");function fr(e={}){let t=null;const s=Re(()=>t),a=new U().registerAll(E).registerAll(k).registerAll(P),m=i((o,r)=>{const u=F()?.startupBlock()??null;return u===null||o==="GET"&&(r==="/healthz"||r==="/v1/status")||o==="POST"&&(r==="/v1/daemon/migrate"||r==="/v1/daemon/admit")||u.phase==="recovering"&&a.match(o,r)!==null?null:u},"startupBlockFor"),c=x(),A=i((o,r)=>{const u=i(n=>{g({event:"api.request.failed",level:"error",error:n instanceof Error?n:new Error(String(n))});try{r.headersSent||r.writeHead(500,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"internal",message:"internal error"}}))}catch{}},"internalFailure");let p;try{p=new URL(o.url??"/","http://127.0.0.1")}catch{try{r.writeHead(400,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"invalid_request",message:"request URL is invalid"}}))}catch{}return}try{const n=m((o.method??"GET").toUpperCase(),p.pathname);if(n!==null){we(r,n.message);return}s.handle(o,r).catch(u)}catch(n){u(n)}},"onRequest"),y=i((o,r,u)=>{r.on("error",()=>{});try{const p=new URL(o.url??"/","http://127.0.0.1"),n=m((o.method??"GET").toUpperCase(),p.pathname);if(n!==null){Ce(r,n.message);return}const l=ve(o.method??"GET",p.pathname);if(l===null){r.destroy();return}D(o,r,u,l).catch(()=>{try{r.destroy()}catch{}})}catch{try{r.destroy()}catch{}}},"onUpgrade"),B=i(o=>{o.on("error",r=>{g({event:"api.server.failed",level:"error",error:r})})},"bindErrorHandler"),f=w(A);f.on("upgrade",y);let v=!1,T,b;const $=new Promise((o,r)=>{T=o,b=r});f.once("listening",()=>{v=!0,T()}),f.on("error",o=>{g({event:"api.server.failed",level:"error",error:o}),v||b(o)});try{C(c)&&O(c)}catch{}f.listen(c,()=>{try{z(c,384)}catch(o){g({event:"api.socket.chmod_failed",level:"error",error:o instanceof Error?o:new Error(String(o))})}});let d;const h=e.tcp??L()??G("user").api.tcp;if(h!==void 0&&h!==""){const o=Te(h);if(o===null)g({event:"api.tcp.invalid",level:"error",error:new Error(`invalid CRTRD_TCP/--tcp spec: ${h}`)});else{const r=e.token??_()??J("user"),u=r===void 0?A:(n,l)=>{if((n.method??"GET").toUpperCase()==="OPTIONS"){l.writeHead(204,{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Headers":"authorization, content-type","Access-Control-Allow-Methods":"GET, POST, PATCH, PUT, DELETE, OPTIONS","Access-Control-Max-Age":"600"}),l.end();return}if(!N(n,r)){Se(l);return}l.setHeader("Access-Control-Allow-Origin","*"),A(n,l)},p=r===void 0?y:(n,l,R)=>{if(!N(n,r)){Oe(l);return}y(n,l,R)};d=w(u),d.on("upgrade",p),B(d),d.once("listening",()=>{const n=d?.address();if(n!==null&&typeof n=="object"){const{address:l,port:R}=n;t=be(l,R)}}),d.listen(o.port,o.host)}}let S=!1;return{ready:$,tcpAddress:i(()=>t,"tcpAddress"),close:i(async()=>{if(!S){S=!0,await Promise.all([I(f),d!==void 0?I(d):Promise.resolve()]);try{C(c)&&O(c)}catch{}}},"close")}}i(fr,"createApiServer");export{fr as createApiServer};

package/dist/daemon/cron/capture.d.ts

@@ -14,7 +14,9 @@ export declare const EMPTY_STDOUT_SHA256: string;
  *  cap (UTF-16 code units, not bytes) and corrupted any multi-byte sequence
  *  that straddled a chunk boundary. Truncation is MARKED, never silent: a
  *  clipped body reads as complete output to whoever receives the delivery. */
-export declare function newHeadCapture(): {
+export declare function newHeadCapture(headBytes?: number): {
     take(chunk: Buffer): void;
     decode(): string;
+    truncated(): boolean;
 };
+export declare function formatCronOutputHead(text: string, truncated: boolean): string;

package/dist/daemon/cron/capture.js

@@ -1,2 +1,2 @@
-var a=Object.defineProperty;var u=(e,r)=>a(e,"name",{value:r,configurable:!0});import{createHash as c}from"node:crypto";const s=4*1024,f=2e3,d=250,x=c("sha256").update("").digest("hex");function T(){const e=[];let r=0,o=!1;return{take(t){const n=s-r;if(n<=0){o=!0;return}if(t.length>n){e.push(t.subarray(0,n)),r=s,o=!0;return}e.push(t),r+=t.length},decode(){const t=Buffer.concat(e).toString("utf8");return o?`${t}
-[\u2026 output truncated at ${s} bytes]`:t}}}u(T,"newHeadCapture");export{d as CRON_DEATH_POLL_MS,f as CRON_KILL_GRACE_MS,s as CRON_OUTPUT_HEAD_BYTES,x as EMPTY_STDOUT_SHA256,T as newHeadCapture};
+var c=Object.defineProperty;var a=(t,e)=>c(t,"name",{value:e,configurable:!0});import{createHash as p}from"node:crypto";const s=4*1024,d=2e3,T=250,i=p("sha256").update("").digest("hex");function O(t=s){const e=[];let n=0,o=!1;return{take(r){const u=t-n;if(u<=0){o=!0;return}if(r.length>u){e.push(r.subarray(0,u)),n=t,o=!0;return}e.push(r),n+=r.length},decode(){return Buffer.concat(e).toString("utf8")},truncated(){return o}}}a(O,"newHeadCapture");function x(t,e){return e?`${t}
+[\u2026 output truncated at ${s} bytes]`:t}a(x,"formatCronOutputHead");export{T as CRON_DEATH_POLL_MS,d as CRON_KILL_GRACE_MS,s as CRON_OUTPUT_HEAD_BYTES,i as EMPTY_STDOUT_SHA256,x as formatCronOutputHead,O as newHeadCapture};

package/dist/daemon/cron-run.js

@@ -1 +1 @@
-var $=Object.defineProperty;var l=(e,t)=>$(e,"name",{value:t,configurable:!0});import{spawn as G}from"node:child_process";import{createHash as Y,randomUUID as F}from"node:crypto";import{CRON_DEATH_POLL_MS as K,CRON_KILL_GRACE_MS as q,CRON_OUTPUT_HEAD_BYTES as L,EMPTY_STDOUT_SHA256 as J,newHeadCapture as M}from"./cron/capture.js";import{clearLiveRun as V,cronDaemonInstanceId as W,liveRunFor as X,registerLiveRun as z}from"./cron/live-runs.js";import{buildArmedRunContext as Q}from"./cron/armed-context.js";import{decideHeldSettle as Z,EXIT_HELD as j,HELD_DELIVERED as ee}from"./cron/held.js";import{settleRun as k}from"./cron/settle.js";import{applyOverlapPolicies as te,expireDueCrons as re}from"./cron/passes.js";import{dueClockCrons as ne,acquireCronRunLease as de,advanceCron as oe,setCronState as se}from"../core/canvas/crons.js";import{captureTeardownSnapshot as ie,isAnyPidAlive as A,killProcessTreePids as P}from"../core/canvas/pid.js";import{emitEvent as ae}from"../core/events/emit.js";import{nextSlotAfter as le}from"../core/wake.js";import{resolveAdmittedHostCommand as ue}from"../core/runtime/spawn-env.js";import{CRON_OUTPUT_HEAD_BYTES as Le}from"./cron/capture.js";import{cronDaemonInstanceId as ke,markSelfCanceledCronRun as Pe}from"./cron/live-runs.js";import{recoverStaleCronLeases as be}from"./cron/lease-recovery.js";async function ce(e,t){const{runId:s,outOfBand:n,startedAtIso:i,finishedAtMs:o,code:c,timedOut:f,processError:m}=t,h=!n&&!f&&m==null&&c===j&&!t.wasReplaced&&!t.wasSelfCanceled;let d,u;return t.wasReplaced?(d={kind:"stated",delivered:"replaced (overlap=replace)"},u="release"):h?(d={kind:"stated",delivered:ee},u=Z(e,i,o)??"release"):(d={kind:"disposed",ctx:{runId:s,startedAtIso:i,exitCode:f?-1:c,timedOut:f,runTimeoutS:e.run_timeout_s,processErrorMessage:m!=null?m.message:null,stdoutHead:t.stdoutHead,stdoutSha256:t.stdoutSha256,stderrHead:t.stderrHead},selfCanceled:t.wasSelfCanceled},u=n?"release":{kind:"clear"}),k(e,{outOfBand:n,outcome:d,record:{runId:s,startedAtIso:i,finishedAtMs:o,durationMs:o-t.startedAtMs,exitCode:f?-1:c,stdoutHead:t.stdoutHead===""?null:t.stdoutHead,stderrHead:m!=null?`run process error: ${m.message}`.slice(0,L):t.stderrHead===""?null:t.stderrHead},lease:u})}l(ce,"settleClosedRun");function U(e,t,s,n){const i=Date.now(),o=`${s}: ${n.message}`.slice(0,L);return k(e,{outOfBand:t.outOfBand,outcome:{kind:"disposed",ctx:{runId:t.runId,startedAtIso:t.startedAtIso,exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:n.message,stdoutHead:"",stdoutSha256:J,stderrHead:o}},record:{runId:t.runId,startedAtIso:t.startedAtIso,finishedAtMs:i,durationMs:i-t.startedAtMs,exitCode:null,stdoutHead:null,stderrHead:o},lease:"none"})}l(U,"settleUnspawnedRun");function fe(e,t){let s;try{s=le(e.recur,new Date(t))}catch(n){return ae({level:"error",event:"cron.recur.unparseable",error:n,fields:{cron_id:e.cron_id,name:e.name,recur:e.recur}}),se(e.cron_id,"paused"),new Error(`unparseable recurrence ${JSON.stringify(e.recur)}: ${n.message} \u2014 this cron cannot be rescheduled until its recurrence is fixed (\`crtr cron cancel\` and re-arm it), so it has been paused.`)}return oe(e.cron_id,s),null}l(fe,"advanceRecurrence");function me(e,t){const{outOfBand:s}=t;return new Promise((n,i)=>{const o=F(),c=Date.now(),f=new Date(c).toISOString(),m={runId:o,outOfBand:s,startedAtIso:f,startedAtMs:c};let h;try{({env:h}=Q(e,o))}catch(r){U(e,m,"run could not be armed",r).then(n,i);return}let d;try{d=G(ue("bash",h,e.cwd),["-c",e.command],{cwd:e.cwd,env:h,detached:!0,stdio:["ignore","pipe","pipe"]})}catch(r){U(e,m,"run failed to spawn",r).then(n,i);return}let u=!1,p,_,H,I,E=!1,D=!1,O=!1,S=null;const R=M(),x=M(),v=Y("sha256");d.stdout?.on("data",r=>{v.update(r),R.take(r)}),d.stderr?.on("data",r=>{x.take(r)});let a;const g=l(r=>{if(u)return;u=!0,p!==void 0&&clearTimeout(p),_!==void 0&&clearTimeout(_),H!==void 0&&clearTimeout(H);const b=R.decode(),y=x.decode(),C=X(e.cron_id),B=C!==void 0&&C.runId===o&&C.replaced,N=C!==void 0&&C.runId===o&&C.selfCanceled;if(V(e.cron_id,o),O){n(null);return}ce(e,{runId:o,outOfBand:s,startedAtIso:f,startedAtMs:c,finishedAtMs:Date.now(),code:r,timedOut:D,processError:S,stdoutHead:b,stderrHead:y,stdoutSha256:v.digest("hex"),wasReplaced:B,wasSelfCanceled:N}).then(n,i)},"settleClosedChild"),T=l(()=>{if(a===void 0||!A(a.tree)){I!==void 0&&g(I);return}H=setTimeout(T,K)},"awaitTeardownDeath"),w=l(r=>{a??=ie(r,null),P(a.tree,"SIGTERM",a.identities),_===void 0&&(_=setTimeout(()=>{A(a.tree)&&P(a.tree,"SIGKILL",a.identities),E=!0,I!==void 0&&T()},q),_.unref?.())},"killWithEscalation");if(d.on("error",r=>{S==null&&(S=r)}),d.on("close",r=>{if(!u){if(I=r,p!==void 0&&clearTimeout(p),a!==void 0&&A(a.tree)){E&&T();return}g(r)}}),d.pid==null||!de(e.cron_id,W,d.pid,f,s)){d.pid!=null&&w(d.pid),O=!0;return}if(z(e.cron_id,{runId:o,replaced:!1,selfCanceled:!1,kill:l(()=>{d.pid!=null&&w(d.pid)},"kill")}),!s&&e.recur!=null){const r=fe(e,c);if(r!==null){S=r,w(d.pid);return}}p=setTimeout(()=>{u||(D=!0,w(d.pid))},e.run_timeout_s*1e3),p.unref?.()})}l(me,"executeCron");function xe(e,t={}){const s=new Date(e).toISOString();re(s),te(e,s);const n=[];for(const i of ne(s)){const o=me(i,{outOfBand:!1}).then(()=>{});n.push(o),t.register?.(o)}for(const i of n)i.catch(()=>{});return n}l(xe,"runDueCrons");export{Le as CRON_OUTPUT_HEAD_BYTES,ke as cronDaemonInstanceId,me as executeCron,Pe as markSelfCanceledCronRun,be as recoverStaleCronLeases,xe as runDueCrons};
+var O=Object.defineProperty;var m=(e,t)=>O(e,"name",{value:t,configurable:!0});import{randomUUID as D}from"node:crypto";import{CRON_OUTPUT_HEAD_BYTES as h,EMPTY_STDOUT_SHA256 as x,formatCronOutputHead as _}from"./cron/capture.js";import{clearLiveRun as A,cronDaemonInstanceId as R,liveRunFor as T,registerLiveRun as v}from"./cron/live-runs.js";import{buildArmedRunContext as g}from"./cron/armed-context.js";import{decideHeldSettle as M,EXIT_HELD as k,HELD_DELIVERED as B}from"./cron/held.js";import{settleRun as H}from"./cron/settle.js";import{applyOverlapPolicies as L,expireDueCrons as U}from"./cron/passes.js";import{dueClockCrons as b,acquireCronRunLease as y,advanceCron as P,setCronState as $}from"../core/canvas/crons.js";import{emitEvent as N}from"../core/events/emit.js";import{runCommandOnce as Y}from"../core/runtime/run-command.js";import{nextSlotAfter as F}from"../core/wake.js";import{CRON_OUTPUT_HEAD_BYTES as ae}from"./cron/capture.js";import{cronDaemonInstanceId as ue,markSelfCanceledCronRun as le}from"./cron/live-runs.js";import{recoverStaleCronLeases as me}from"./cron/lease-recovery.js";async function q(e,t){const{runId:d,outOfBand:r,startedAtIso:n,finishedAtMs:o,code:u,timedOut:l,processError:i}=t,p=!r&&!l&&i==null&&u===k&&!t.wasReplaced&&!t.wasSelfCanceled;let a,c;return t.wasReplaced?(a={kind:"stated",delivered:"replaced (overlap=replace)"},c="release"):p?(a={kind:"stated",delivered:B},c=M(e,n,o)??"release"):(a={kind:"disposed",ctx:{runId:d,startedAtIso:n,exitCode:l?-1:u,timedOut:l,runTimeoutS:e.run_timeout_s,processErrorMessage:i!=null?i.message:null,stdoutHead:t.stdoutHead,stdoutSha256:t.stdoutSha256,stderrHead:t.stderrHead},selfCanceled:t.wasSelfCanceled},c=r?"release":{kind:"clear"}),H(e,{outOfBand:r,outcome:a,record:{runId:d,startedAtIso:n,finishedAtMs:o,durationMs:o-t.startedAtMs,exitCode:l?-1:u,stdoutHead:t.stdoutHead===""?null:t.stdoutHead,stderrHead:i!=null?`run process error: ${i.message}`.slice(0,h):t.stderrHead===""?null:t.stderrHead},lease:c})}m(q,"settleClosedRun");function I(e,t,d,r){const n=Date.now(),o=`${d}: ${r.message}`.slice(0,h);return H(e,{outOfBand:t.outOfBand,outcome:{kind:"disposed",ctx:{runId:t.runId,startedAtIso:t.startedAtIso,exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:r.message,stdoutHead:"",stdoutSha256:x,stderrHead:o}},record:{runId:t.runId,startedAtIso:t.startedAtIso,finishedAtMs:n,durationMs:n-t.startedAtMs,exitCode:null,stdoutHead:null,stderrHead:o},lease:"none"})}m(I,"settleUnspawnedRun");function J(e,t){let d;try{d=F(e.recur,new Date(t))}catch(r){return N({level:"error",event:"cron.recur.unparseable",error:r,fields:{cron_id:e.cron_id,name:e.name,recur:e.recur}}),$(e.cron_id,"paused"),new Error(`unparseable recurrence ${JSON.stringify(e.recur)}: ${r.message} \u2014 this cron cannot be rescheduled until its recurrence is fixed (\`crtr cron cancel\` and re-arm it), so it has been paused.`)}return P(e.cron_id,d),null}m(J,"advanceRecurrence");function V(e,t){const{outOfBand:d}=t;return new Promise((r,n)=>{const o=D(),u=Date.now(),l=new Date(u).toISOString(),i={runId:o,outOfBand:d,startedAtIso:l,startedAtMs:u};let p;try{({env:p}=g(e,o))}catch(s){I(e,i,"run could not be armed",s).then(r,n);return}let a;try{a=Y({command:e.command,cwd:e.cwd,env:p,timeoutMs:e.run_timeout_s*1e3,headBytes:h})}catch(s){I(e,i,"run failed to spawn",s).then(r,n);return}if(a.pid===null){a.completion.then(s=>{I(e,i,"run failed to spawn",s.processError??new Error("bash did not provide a process id")).then(r,n)},n);return}let c=!1,C=null;const S=m(()=>{a.completion.then(s=>{const f=T(e.cron_id),w=f!==void 0&&f.runId===o&&f.replaced,E=f!==void 0&&f.runId===o&&f.selfCanceled;if(A(e.cron_id,o),c){r(null);return}q(e,{runId:o,outOfBand:d,startedAtIso:l,startedAtMs:u,finishedAtMs:Date.now(),code:s.exitCode,timedOut:s.timedOut,processError:C??s.processError,stdoutHead:_(s.stdout,s.stdoutTruncated),stderrHead:_(s.stderr,s.stderrTruncated),stdoutSha256:s.stdoutSha256,wasReplaced:w,wasSelfCanceled:E}).then(r,n)},n)},"settleCommand");if(!y(e.cron_id,R,a.pid,l,d)){c=!0,a.terminate(),S();return}v(e.cron_id,{runId:o,replaced:!1,selfCanceled:!1,kill:a.terminate}),!d&&e.recur!=null&&(C=J(e,u),C!==null&&a.terminate()),S()})}m(V,"executeCron");function oe(e,t={}){const d=new Date(e).toISOString();U(d),L(e,d);const r=[];for(const n of b(d)){const o=V(n,{outOfBand:!1}).then(()=>{});r.push(o),t.register?.(o)}for(const n of r)n.catch(()=>{});return r}m(oe,"runDueCrons");export{ae as CRON_OUTPUT_HEAD_BYTES,ue as cronDaemonInstanceId,V as executeCron,le as markSelfCanceledCronRun,me as recoverStaleCronLeases,oe as runDueCrons};

package/docs/sdk/README.md

@@ -1,6 +1,6 @@
 # `@north-light/crouter-sdk`
 
-The client an application installs to drive a crouter daemon: create agent runs, wait for typed results, and reach the rest of the daemon's `/v1` API. Streaming and memory are planned phase-2 and phase-3 surfaces, not client methods today.
+The ESM-only client an application installs to drive a crouter daemon: create agent runs, watch streamed events, wait for typed results, and reach the rest of the daemon's `/v1` API. Memory is a planned phase-3 surface, not a client method today.
 
 One package, one class. `new Crouter()` in Node talks to the owner's unix socket. `new Crouter({ baseURL, token })` in a browser or a remote process talks to the daemon's TCP listener with a bearer token. Resource methods issue `/v1` requests; `createAndWait`, `parse`, and `auth.status` compose more than one request. crtrd stays the sole owner of canvas state.
 
@@ -26,8 +26,10 @@ if (run.kind === 'result') console.log(run.output_parsed.root_cause);
 | [Getting started](./getting-started.md) | Install, `new Crouter()` on the owner's socket, `client.auth.status()` and `crtr sys connect` for a browser or remote app, Chrome's local-network prompt |
 | [Client construction](./client.md) | Every constructor option and its environment-variable fallback; per-request options |
 | [Nodes](./nodes.md) | `create` parameters, the outcome union, `parse()` with a zod schema, `waitForOutcome`, `message`, `cancel`, nested resources |
-| [Streaming](./streaming.md) | The event table, `stream()` / `events()`, resume with `after`, `stream_gap` and `stream_dropped` — **phase 2** |
+| [Streaming](./streaming.md) | The event table, `stream()` / `events()`, the activity helper, resume with `after`, `stream_gap` and `stream_dropped` |
 | [Memory](./memory.md) | The scope object and every `client.memory` method — **phase 3** |
+| [Files](./files.md) | Absolute-path reads, writes, and one-level lists |
+| [Bash](./bash.md) | One bounded command and its output result |
 | [Resource map](./resources.md) | Every namespace with its phase, what is deliberately excluded, and the `client.request()` escape hatch |
 | [Errors](./errors.md) | The error class table and the retry policy |
 | [Docker environment](./docker.md) | `start()`, `attach()`, `connection()` from `@north-light/crouter-env-docker` |
@@ -35,19 +37,20 @@ if (run.kind === 'result') console.log(run.output_parsed.root_cause);
 
 ## Phases
 
-The surface ships in three cuts. Every page marks which cut a method belongs to; a method marked phase 2 or phase 3 does not exist yet.
+The surface ships in three cuts. Phase 3 methods do not exist yet.
 
 | Phase | What lands | State |
 |---|---|---|
-| **Phase 1** | Client construction and transports; `client.auth.status()`; `client.nodes.create`, `retrieve`, `list`, `outcome`, `waitForOutcome`, `createAndWait`, `parse`, `message`, `cancel`, and `interrupt`; `nodes.reports.list`; `profiles.ensure` and `retrieve`; `system.status` and `health`; `files.peek`; the error hierarchy; per-request options; `crtr sys connect`; and `env-docker.connection()` | Shipped |
-| **Phase 2** | Streaming (`GET /v1/nodes/{id}/events`, `nodes.stream`, `nodes.events`), plus the canvas, cron, human-inbox, and model namespaces | Not shipped |
+| **Phase 1** | Client construction and transports; `client.auth.status()`; `client.nodes.create`, `retrieve`, `list`, `outcome`, `waitForOutcome`, `createAndWait`, `parse`, `message`, `cancel`, and `interrupt`; `nodes.reports.list`; `profiles.ensure` and `retrieve`; `system.status` and `health`; the error hierarchy; per-request options; `crtr sys connect`; and `env-docker.connection()` | Shipped |
+| **Phase 2 namespaces** | Node lifecycle, job, worktree, and result; canvas and canvas history; crons; human requests and inbox; models; `client.files.read` through `/v1/files/peek`, `write`, and `list`; and `client.bash.run` | Shipped |
+| **Phase 2 streaming** | `GET /v1/nodes/{id}/events`, `nodes.stream(params, options?)`, `nodes.events(id, options?)`, `NodeStream`, and the activity helper | Shipped |
 | **Phase 3** | Memory routes and `client.memory`, plus the review, comment, and chat-inventory namespaces | Not shipped |
 
 The approved per-run `scopes` field and `nodes.update` scope support are not in the shipped client or wire declarations, so this reference does not document them as phase 1.
 
 ## Verification status
 
-Phase-1 pages describe the shipped declarations. The remaining verification markers are confined to the phase-2 streaming and phase-3 memory pages.
+The SDK declarations and streaming examples are verified. The remaining verification markers are confined to the phase-3 memory page.
 
 ## Where the agents read this
 

package/docs/sdk/bash.md

@@ -0,0 +1,34 @@
+# `client.bash`
+
+`client.bash.run` executes one bounded `bash -c` command through the daemon.
+
+```ts
+const result = await client.bash.run({
+  command: 'printf "%s\\n" "$MESSAGE"',
+  cwd: '/absolute/path/to/project',
+  env: { MESSAGE: 'hello' },
+  timeout_s: 30,
+  profile: 'my-app',
+});
+
+if (result.exit_code !== 0) console.error(result.stderr);
+```
+
+`run(params, options?)` returns `Promise<BashRunDTO>`. Its final `options` object is the normal request-options object: `headers`, `signal`, `timeout`, and `maxRetries`.
+
+| Result field | Type | Meaning |
+|---|---|---|
+| `exit_code` | `number \| null` | Process exit code, or `null` after a timeout. A non-zero code is returned, not thrown. |
+| `signal` | `string \| null` | Signal that ended the process, when one did. |
+| `stdout` / `stderr` | `string` | Captured output prefix. |
+| `stdout_truncated` / `stderr_truncated` | `boolean` | Whether that output stream exceeded its 256 KiB capture limit. |
+| `timed_out` | `boolean` | `true` after the daemon terminates the process group for a timeout. |
+| `duration_ms` | `number` | Command duration in milliseconds. |
+
+`cwd` is required, absolute, and must name an existing directory. The daemon never uses its own working directory as a fallback. `timeout_s` defaults to 60, must be greater than 0, and cannot exceed 600. The SDK keeps the HTTP request open for the command timeout plus 15 seconds, unless its configured request timeout is already longer.
+
+Pass dynamic values through `env` and reference them from the command as `"$NAME"`, rather than interpolating them into shell source. The command receives the daemon's default-deny operational environment, selected profile environment, then your `env` values.
+
+## Authority
+
+The token is the owner credential. Anyone holding it can already create an agent with a bash tool, so this command runs with the daemon user's authority and does not provide a restricted command area.

package/docs/sdk/client.md

@@ -1,7 +1,5 @@
 # Client construction
 
-Phase 1.
-
 ```ts
 import Crouter from '@north-light/crouter-sdk';
 
@@ -22,7 +20,7 @@ const customSocketClient = new Crouter({ socketPath: '/custom/path/crtrd.sock' }
 | `timeout` | `number` (ms) | `30_000` | Per-request wall clock. Does not apply to a stream. |
 | `maxRetries` | `number` | `2` | Transient-failure retries. Never applied to `POST` or `PATCH` — see [Errors](./errors.md). |
 | `defaultHeaders` | `Record<string, string>` | `{}` | Merged into every request. |
-| `headers` | `Record<string, string>` | unset | Merged after `defaultHeaders`; a matching name wins. |
+| `headers` | `Record<string, string>` | unset | Merged after `defaultHeaders`; a matching name wins unless `token` is set, in which case the generated `Authorization` header wins at construction. |
 | `fetch` | `typeof fetch` | global `fetch`, or the socket implementation when `socketPath` is used | Transport override, for proxies and instrumentation. |
 | `autostart` | `boolean` | `true` for a socket, `false` for `baseURL` | On a cold socket, run `crtr sys daemon start` and retry once. Node only. |
 
@@ -72,9 +70,9 @@ await client.nodes.retrieve(id, {
 | `signal` | `AbortSignal` | Aborts the underlying `fetch`. Raises `APIUserAbortError`. |
 | `timeout` | `number` (ms) | Overrides the client `timeout`. |
 | `maxRetries` | `number` | Overrides the client `maxRetries`. |
-| `headers` | `Record<string, string>` | Merged over `defaultHeaders` and the client's headers; a matching name, including `Authorization`, wins. |
+| `headers` | `Record<string, string>` | Merged over `defaultHeaders`, client `headers`, and the token-generated header; a matching name, including `Authorization`, wins. |
 
-`signal` is real cancellation. The long-polling helpers (`waitForOutcome`, `createAndWait`, `parse`) honour it between polls and during the in-flight request, and aborting them stops the client — it does not cancel the node. To stop the run itself, call `client.nodes.cancel(id)` or `client.nodes.interrupt(id)`.
+`signal` is real cancellation. The long-polling helpers (`waitForOutcome`, `createAndWait`, `parse`) honour it between polls and during the in-flight request, and aborting them stops the client — it does not cancel the node. To stop the run itself, call `client.nodes.cancel(id)` or `client.nodes.interrupt(id)`. Streams use `NodeEventsOptions`: the same fields except `timeout`, plus `after` for `nodes.events`; see [Streaming](./streaming.md).
 
 ## What is not on the client
 
@@ -83,10 +81,10 @@ await client.nodes.retrieve(id, {
 | `.withResponse()` / `.asResponse()` | They exist to hand back the raw `Response` and an `x-request-id`. The daemon emits no request id, and a caller who needs raw bytes uses `client.request()`. |
 | `local()` and the `Environment` interface | Deleted. The client *is* the connection — `new Crouter()` covers what `local()` did. See [Migration](./migration.md). |
 | `apiKey` | The daemon's credential is a token (`CRTRD_TOKEN`) everywhere in the product. `apiKey` would be a second name for one thing. |
-| Resource-prefixed ids | Node ids have their own format and are validated by the daemon. Nothing is re-prefixed. |
+| Resource-prefixed ids | Node ids have their own format. The SDK validates unsafe path identifiers locally with `TypeError`, and the daemon validates the request too; nothing is re-prefixed. |
 
 ## Wire naming
 
-Wire fields are `snake_case` — `output_schema`, `root_lifecycle`, `pin_cwd`, `final_report_path`. The SDK does not camelize them. Namespaces and method names are camelCase (`client.nodes.waitForOutcome`, `client.nodes.outcomeDelivery`).
+Wire fields are `snake_case` — `output_schema`, `root_lifecycle`, `pin_cwd`, `final_report_path`. The SDK does not camelize them. Namespaces and method names are camelCase (`client.nodes.waitForOutcome`, `client.nodes.worktree`).
 
 Timestamps are ISO-8601 strings (`created`, `settled_at`, `finalized_at`, `deadline_at`), not Unix seconds.

package/docs/sdk/errors.md

@@ -1,19 +1,18 @@
 # Errors
 
-Phase 1.
-
 ## What throws and what does not
 
 **An agent's own outcome is returned, never thrown.** A run that declined the schema, hit its deadline, or crashed comes back as a settled `NodeOutcome` from `waitForOutcome`, `createAndWait`, or `parse`. Narrow on it — see [Nodes](./nodes.md#outcomes).
 
-Exceptions are for the layer underneath: the daemon refused the request, the connection failed, or you aborted.
+Exceptions are for the layer underneath: the SDK rejected an invalid local identifier or configuration, the daemon refused the request, the connection failed, the request timed out, or you aborted.
 
-## Classes
+## Classes and mappings
 
-Every class extends `APIError`, which carries `status`, `code`, `message`, `details`, and `headers`.
+Every class below extends `APIError`, which carries `status`, `code`, `message`, `details`, and `headers`.
 
 | Condition | Class |
 |---|---|
+| SDK configuration error | `CrouterError` with `status: 0`, `code: 'crouter_error'` |
 | HTTP 400 | `BadRequestError` |
 | HTTP 401 | `AuthenticationError` |
 | HTTP 403 | `PermissionDeniedError` |
@@ -21,29 +20,35 @@ Every class extends `APIError`, which carries `status`, `code`, `message`, `deta
 | HTTP 409 | `ConflictError` |
 | HTTP 413, 422 | `UnprocessableEntityError` |
 | HTTP 429 | `RateLimitError` |
-| HTTP ≥ 500 | `InternalServerError` |
-| Transport failure | `APIConnectionError` |
-| Request timeout | `APIConnectionTimeoutError` (extends `APIConnectionError`) |
-| Caller abort | `APIUserAbortError` |
-| Anything else | `APIError` |
+| HTTP 504 or code `request_timeout` | `APIConnectionTimeoutError` (extends `APIConnectionError`) |
+| Other HTTP ≥ 500 | `InternalServerError` |
+| Code `daemon_unavailable`, `transport_error`, `daemon_request_interrupted`, or `daemon_health_unavailable`; or a non-API transport failure | `APIConnectionError` |
+| Code `request_aborted` | `APIUserAbortError` |
+| Any other daemon response | `APIError` |
+
+A terminal SSE `error` event other than `stream_gap` rejects `NodeStream.finalOutcome()` and the iterator with `APIError` carrying that event's code, message, and details. `stream_gap` is delivered as an event and the stream continues. See [Streaming](./streaming.md).
 
 ```ts
 import { ConflictError, NotFoundError, APIConnectionError } from '@north-light/crouter-sdk';
 
 try {
   await client.nodes.create({ prompt, node_id: 'my-run-42' });
-} catch (e) {
-  if (e instanceof ConflictError && e.code === 'node_id_exists') {
+} catch (error) {
+  if (error instanceof ConflictError && error.code === 'node_id_exists') {
     // the run already exists — attach to it instead of spawning a second one
     return client.nodes.waitForOutcome('my-run-42');
   }
-  if (e instanceof NotFoundError) throw new Error('no such node');
-  if (e instanceof APIConnectionError) throw new Error('the daemon is not reachable');
-  throw e;
+  if (error instanceof NotFoundError) throw new Error('no such node');
+  if (error instanceof APIConnectionError) throw new Error('the daemon is not reachable');
+  throw error;
 }
 ```
 
-The subclasses add **no fields**. `status` and `code` on the base class already decide everything there is to branch on. They exist so that `catch (e) { if (e instanceof NotFoundError) … }` — what an OpenAI SDK user writes without thinking about it — works here too.
+The subclasses add **no fields**. `status` and `code` on the base class already decide everything there is to branch on. They exist so that `catch (error) { if (error instanceof NotFoundError) … }` — what an OpenAI SDK user writes without thinking about it — works here too.
+
+## Identifier validation
+
+The SDK validates path-segment identifiers before it makes a request. Invalid node ids, cron ids, bash-job ids, human-request ids, inbox ticket ids, provider names, and profile names throw `TypeError` locally. Node ids apply to core node calls, lifecycle calls, and nested node resources. `nodes.events()` returns a `NodeStream` synchronously, so its invalid-id `TypeError` rejects `stream.node`, `stream.finalOutcome()`, and iteration instead. File paths are not identifiers; invalid or relative file paths reach the daemon and return its mapped API error. `nodes.outcome(id, { wait })` separately throws `RangeError` when `wait` is not an integer from 0 through 25.
 
 ## The wire body
 
@@ -71,8 +76,8 @@ const runId = `invoice-${invoice.id}`;
 
 try {
   await client.nodes.create({ prompt, node_id: runId, root: true });
-} catch (e) {
-  if (!(e instanceof ConflictError && e.code === 'node_id_exists')) throw e;
+} catch (error) {
+  if (!(error instanceof ConflictError && error.code === 'node_id_exists')) throw error;
 }
 
 const outcome = await client.nodes.waitForOutcome(runId);

package/docs/sdk/files.md

@@ -0,0 +1,44 @@
+# `client.files`
+
+`client.files` reads, writes, and lists host files through the daemon.
+
+```ts
+const source = await client.files.read('/absolute/path/to/input.txt');
+const written = await client.files.write('/absolute/path/to/output.txt', source.content);
+const directory = await client.files.list('/absolute/path/to');
+```
+
+Every `path` is absolute. Relative paths and `~` are not expanded. File paths are sent to the daemon unchanged; the daemon checks that they are absolute and returns a mapped API error when they are not.
+
+Every method accepts ordinary request options in its final object: `headers`, `signal`, `timeout`, and `maxRetries`. `read` and `write` add `encoding`; `list` adds `limit`.
+
+## Read
+
+```ts
+await client.files.read(path, { encoding: 'utf8', timeout: 5_000 });
+await client.files.read(path, { encoding: 'base64' });
+```
+
+`read(path, options?)` returns `Promise<FilePeekDTO>`, `{ path, content, truncated }`, through `GET /v1/files/peek`. It captures at most 512 KiB of file bytes. `truncated: true` means `content` is only the prefix. Request `base64` for binary content.
+
+## Write
+
+```ts
+const result = await client.files.write(path, content, { encoding: 'utf8' });
+// result is { path, bytes_written }
+await client.files.write(path, bytes.toString('base64'), { encoding: 'base64' });
+```
+
+`write(path, content, options?)` returns `Promise<FileWriteDTO>`, `{ path, bytes_written }`. Writes create parent directories and atomically replace the target. If `path` is an existing symlink, the daemon resolves it and atomically replaces its destination; the symlink remains. Decoded content above 1 MiB is refused with `UnprocessableEntityError` carrying `status: 413` and `code: 'file_too_large'`; it is never truncated or partially written.
+
+## List
+
+```ts
+const result = await client.files.list(path, { limit: 100 });
+```
+
+`list(path, options?)` returns `Promise<FileListDTO>`, `{ path, entries, truncated }`, for one directory level. Each entry has `name`, `type: 'file' | 'dir' | 'other'`, `size`, and ISO-8601 `modified`. `limit` must be a positive integer; the default is 1000. `truncated: true` means the directory had more entries than the requested limit.
+
+## Authority
+
+The token is the owner credential. Anyone holding it can already create an agent with a bash tool, so these methods run with the daemon user's authority and do not provide a restricted file area.

package/docs/sdk/getting-started.md

@@ -156,5 +156,5 @@ An outcome is returned, never thrown — including a decline and a failure. Only
 - Every constructor option and environment-variable fallback: [Client construction](./client.md)
 - Checking the daemon connection and selected provider before a run: `client.auth.status()` above
 - The full create-parameter table and the outcome union: [Nodes](./nodes.md)
-- Watching a run as it works: [Streaming](./streaming.md) (phase 2)
+- Watching a run as it works: [Streaming](./streaming.md)
 - Running the daemon in a container instead: [Docker environment](./docker.md)