@north-light/crouter 0.3.348 → 0.3.350

package/dist/daemon/api/server.js

@@ -1 +1 @@
-var L=Object.defineProperty;var s=(t,o)=>L(t,"name",{value:o,configurable:!0});import{createServer as O}from"node:http";import{chmodSync as J,existsSync as U,unlinkSync as P}from"node:fs";import{apiSocketPath as D}from"../../core/canvas/paths.js";import{readConfig as F}from"../../core/config.js";import{getApiToken as M,listScopedApiTokens as $}from"../../core/secrets.js";import{emitEvent as A}from"../../core/events/emit.js";import{envCrtrdTcp as W,envCrtrdToken as Y}from"../../shared/env.js";import{Router as N}from"./router.js";import{handleAttachUpgrade as Z,refuseUpgrade as b}from"./bridge.js";import{boundDaemonControl as K}from"../control.js";import{attachRoutes as Q}from"./handlers/attach.js";import{bashJobRoutes as V}from"./handlers/bash-jobs.js";import{bashRoutes as X}from"./handlers/bash.js";import{brokerOperationRoutes as H}from"./handlers/broker-ops.js";import{brokerRecoveryRoutes as I,nodeFaultRoutes as q}from"./handlers/broker-recovery.js";import{canvasRoutes as ee}from"./handlers/canvas.js";import{chatInventoryRoutes as re}from"./handlers/chat-inventory.js";import{daemonRoutes as te}from"./handlers/daemon.js";import{fileRoutes as oe}from"./handlers/files.js";import{focusRoutes as ne}from"./handlers/focus.js";import{healthRoutes as ie}from"./handlers/health.js";import{humanRequestRoutes as se}from"./handlers/human-requests.js";import{inboxRoutes as le}from"./handlers/inbox.js";import{feedbackCommentRoutes as ce}from"./handlers/feedback-comments.js";import{memoryRoutes as ae}from"./handlers/memory.js";import{brokerMailRoutes as _,messageRoutes as ue}from"./handlers/messages.js";import{modelAuthRoutes as de}from"./handlers/modelauth.js";import{modelConfigRoutes as me}from"./handlers/model-config.js";import{nodeRoutes as pe}from"./handlers/nodes.js";import{nodeOutcomeRoutes as fe}from"./handlers/node-outcomes.js";import{nodeEventRoutes as ge}from"./handlers/node-events.js";import{profileRoutes as he}from"./handlers/profiles.js";import{prospectiveChatInventoryRoutes as Ae}from"./handlers/prospective-chat-inventory.js";import{reportRoutes as Re}from"./handlers/reports.js";import{reviewCommentRoutes as ve}from"./handlers/review-comments.js";import{reviewRoutes as ye}from"./handlers/reviews.js";import{subscriptionRoutes as be}from"./handlers/subscriptions.js";import{cronRoutes as we}from"./handlers/crons.js";import{worktreeRoutes as Te}from"./handlers/worktree.js";function Se(t){return new N().registerAll(ie(t)).registerAll(te).registerAll(pe).registerAll(fe).registerAll(ge).registerAll(V).registerAll(X).registerAll(H).registerAll(I).registerAll(q).registerAll(Te).registerAll(_).registerAll(ue).registerAll(Re).registerAll(Q).registerAll(ee).registerAll(oe).registerAll(ae).registerAll(ne).registerAll(be).registerAll(we).registerAll(he).registerAll(de).registerAll(me).registerAll(ye).registerAll(ve).registerAll(le).registerAll(se).registerAll(re).registerAll(Ae).registerAll(ce)}s(Se,"buildRouter");function Ce(t,o){if(t.toUpperCase()!=="GET")return null;const i=o.split("/").filter(f=>f.length>0);if(i.length!==4||i[0]!=="v1"||i[1]!=="nodes"||i[3]!=="attach")return null;const u=i[2];return u===void 0||u===""?null:decodeURIComponent(u)}s(Ce,"attachNodeId");function ke(t){const o=t.trim();if(o==="")return null;const i=o.lastIndexOf(":");if(i<0)return null;const u=o.slice(0,i),f=o.slice(i+1),a=Number(f);return!Number.isInteger(a)||a<0||a>65535?null:{host:u===""?"0.0.0.0":u,port:a}}s(ke,"parseTcp");function Ee(t,o){return`${t.includes(":")?`[${t}]`:t}:${o}`}s(Ee,"formatTcpAddress");const w={code:"unauthorized",message:"missing or invalid bearer token"},x={code:"owner_only",message:"attach is owner-only; a scoped token does not reach it"};function Oe(t){const o=new Map;for(const i of $("user"))o.set(i.token,i.scopes);return o.set(t,null),o}s(Oe,"resolveBearers");function z(t,o){const i=t.headers.authorization;if(!(typeof i!="string"||!i.startsWith("Bearer ")))return o.get(i.slice(7))}s(z,"authorize");function Ue(t){t.writeHead(401,{"content-type":"application/json; charset=utf-8"}),t.end(JSON.stringify({error:w}))}s(Ue,"writeUnauthorized");function Pe(t,o){t.writeHead(503,{"content-type":"application/json; charset=utf-8"}),t.end(JSON.stringify({error:{code:"startup_blocked",message:o}}))}s(Pe,"writeStartupBlocked");function B(t){return new Promise(o=>{try{t.closeAllConnections()}catch{}t.close(()=>o())})}s(B,"closeServer");function Rr(t={}){let o=null;const i=Se(()=>o),u=new N().registerAll(H).registerAll(I).registerAll(_),f=s((e,r)=>{const c=K()?.startupBlock()??null;return c===null||e==="GET"&&(r==="/healthz"||r==="/v1/status")||e==="POST"&&(r==="/v1/daemon/migrate"||r==="/v1/daemon/admit")||c.phase==="recovering"&&u.match(e,r)!==null?null:c},"startupBlockFor"),a=D(),v=s((e,r,c)=>{const m=s(n=>{A({event:"api.request.failed",level:"error",error:n instanceof Error?n:new Error(String(n))});try{r.headersSent||r.writeHead(500,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"internal",message:"internal error"}}))}catch{}},"internalFailure");let p;try{p=new URL(e.url??"/","http://127.0.0.1")}catch{try{r.writeHead(400,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"invalid_request",message:"request URL is invalid"}}))}catch{}return}try{const n=f((e.method??"GET").toUpperCase(),p.pathname);if(n!==null){Pe(r,n.message);return}i.handle(e,r,c).catch(m)}catch(n){m(n)}},"onRequest"),y=s((e,r,c)=>{r.on("error",()=>{});try{const m=new URL(e.url??"/","http://127.0.0.1"),p=f((e.method??"GET").toUpperCase(),m.pathname);if(p!==null){b(r,503,"Service Unavailable","startup_blocked",p.message);return}const n=Ce(e.method??"GET",m.pathname);if(n===null){r.destroy();return}Z(e,r,c,n).catch(()=>{try{r.destroy()}catch{}})}catch{try{r.destroy()}catch{}}},"onUpgrade"),G=s(e=>{e.on("error",r=>{A({event:"api.server.failed",level:"error",error:r})})},"bindErrorHandler"),h=O((e,r)=>v(e,r,null));h.on("upgrade",y);let T=!1,S,C;const j=new Promise((e,r)=>{S=e,C=r});h.once("listening",()=>{T=!0,S()}),h.on("error",e=>{A({event:"api.server.failed",level:"error",error:e}),T||C(e)});try{U(a)&&P(a)}catch{}h.listen(a,()=>{try{J(a,384)}catch(e){A({event:"api.socket.chmod_failed",level:"error",error:e instanceof Error?e:new Error(String(e))})}});let d;const R=t.tcp??W()??F("user").api.tcp;if(R!==void 0&&R!==""){const e=ke(R);if(e===null)A({event:"api.tcp.invalid",level:"error",error:new Error(`invalid CRTRD_TCP/--tcp spec: ${R}`)});else{const r=t.token??Y()??M("user"),c=r===void 0?void 0:Oe(r),m=c===void 0?(n,l)=>v(n,l,null):(n,l)=>{if((n.method??"GET").toUpperCase()==="OPTIONS"){l.writeHead(204,{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Headers":"authorization, content-type","Access-Control-Allow-Methods":"GET, POST, PATCH, PUT, DELETE, OPTIONS","Access-Control-Max-Age":"600"}),l.end();return}const g=z(n,c);if(g===void 0){Ue(l);return}l.setHeader("Access-Control-Allow-Origin","*"),v(n,l,g)},p=c===void 0?y:(n,l,g)=>{const E=z(n,c);if(E===void 0){b(l,401,"Unauthorized",w.code,w.message);return}if(E!==null){b(l,403,"Forbidden",x.code,x.message);return}y(n,l,g)};d=O(m),d.on("upgrade",p),G(d),d.once("listening",()=>{const n=d?.address();if(n!==null&&typeof n=="object"){const{address:l,port:g}=n;o=Ee(l,g)}}),d.listen(e.port,e.host)}}let k=!1;return{ready:j,tcpAddress:s(()=>o,"tcpAddress"),close:s(async()=>{if(!k){k=!0,await Promise.all([B(h),d!==void 0?B(d):Promise.resolve()]);try{U(a)&&P(a)}catch{}}},"close")}}s(Rr,"createApiServer");export{Rr as createApiServer};
+var D=Object.defineProperty;var l=(t,o)=>D(t,"name",{value:o,configurable:!0});import{createServer as H}from"node:http";import{chmodSync as Y,existsSync as C,unlinkSync as x}from"node:fs";import{apiSocketPath as Z}from"../../core/canvas/paths.js";import{resolveNodeToken as I}from"../../core/canvas/node-tokens.js";import{grantFor as K,hasSyncedGrants as Q}from"../../core/grants/mirror.js";import{readConfig as U}from"../../core/config.js";import{peerUid as V}from"../../native/linux.js";import{getApiToken as X,listScopedApiTokens as q}from"../../core/secrets.js";import{emitEvent as g}from"../../core/events/emit.js";import{envCrtrdTcp as ee,envCrtrdToken as re}from"../../shared/env.js";import{Router as B}from"./router.js";import{handleAttachUpgrade as te,refuseUpgrade as A}from"./bridge.js";import{boundDaemonControl as oe}from"../control.js";import{attachRoutes as ne}from"./handlers/attach.js";import{bashJobRoutes as ie}from"./handlers/bash-jobs.js";import{bashRoutes as se}from"./handlers/bash.js";import{hookExecRoutes as le}from"./handlers/hook-exec.js";import{brokerOperationRoutes as G}from"./handlers/broker-ops.js";import{brokerRecoveryRoutes as j,nodeFaultRoutes as ae}from"./handlers/broker-recovery.js";import{canvasRoutes as ce}from"./handlers/canvas.js";import{chatInventoryRoutes as ue}from"./handlers/chat-inventory.js";import{daemonRoutes as pe}from"./handlers/daemon.js";import{fileRoutes as de}from"./handlers/files.js";import{focusRoutes as me}from"./handlers/focus.js";import{analyticsRoutes as fe}from"./handlers/analytics.js";import{memoryReadsRoutes as ge}from"./handlers/memory-reads.js";import{healthRoutes as he}from"./handlers/health.js";import{humanRequestRoutes as Ae}from"./handlers/human-requests.js";import{inboxRoutes as Re}from"./handlers/inbox.js";import{feedbackCommentRoutes as ve}from"./handlers/feedback-comments.js";import{memoryRoutes as ye}from"./handlers/memory.js";import{brokerMailRoutes as $,messageRoutes as be}from"./handlers/messages.js";import{modelAuthRoutes as we}from"./handlers/modelauth.js";import{llmRoutes as Se}from"./handlers/llm.js";import{modelConfigRoutes as ke}from"./handlers/model-config.js";import{nodeRoutes as Te}from"./handlers/nodes.js";import{nodeRecordRoutes as Ee}from"./handlers/node-records.js";import{nodeOutcomeRoutes as Ce}from"./handlers/node-outcomes.js";import{nodeEventRoutes as Ue}from"./handlers/node-events.js";import{profileRoutes as Oe}from"./handlers/profiles.js";import{prospectiveChatInventoryRoutes as ze}from"./handlers/prospective-chat-inventory.js";import{reportRoutes as Pe}from"./handlers/reports.js";import{runRoutes as _e}from"./handlers/run-routes.js";import{reviewCommentRoutes as Ne}from"./handlers/review-comments.js";import{reviewRoutes as He}from"./handlers/reviews.js";import{subscriptionRoutes as xe}from"./handlers/subscriptions.js";import{cronRoutes as Ie}from"./handlers/crons.js";import{worktreeRoutes as Be}from"./handlers/worktree.js";function Ge(t){return new B().registerAll(he(t)).registerAll(pe).registerAll(Te).registerAll(Ee).registerAll(Ce).registerAll(Ue).registerAll(ie).registerAll(se).registerAll(le).registerAll(G).registerAll(j).registerAll(ae).registerAll(Be).registerAll($).registerAll(be).registerAll(Pe).registerAll(_e).registerAll(ne).registerAll(ce).registerAll(fe).registerAll(ge).registerAll(de).registerAll(ye).registerAll(me).registerAll(xe).registerAll(Ie).registerAll(Oe).registerAll(we).registerAll(Se).registerAll(ke).registerAll(He).registerAll(Ne).registerAll(Re).registerAll(Ae).registerAll(ue).registerAll(ze).registerAll(ve)}l(Ge,"buildRouter");function je(t,o){if(t.toUpperCase()!=="GET")return null;const s=o.split("/").filter(d=>d.length>0);if(s.length!==4||s[0]!=="v1"||s[1]!=="nodes"||s[3]!=="attach")return null;const p=s[2];return p===void 0||p===""?null:decodeURIComponent(p)}l(je,"attachNodeId");function $e(t){const o=t.trim();if(o==="")return null;const s=o.lastIndexOf(":");if(s<0)return null;const p=o.slice(0,s),d=o.slice(s+1),c=Number(d);return!Number.isInteger(c)||c<0||c>65535?null:{host:p===""?"0.0.0.0":p,port:c}}l($e,"parseTcp");function Fe(t,o){return`${t.includes(":")?`[${t}]`:t}:${o}`}l(Fe,"formatTcpAddress");const v={code:"unauthorized",message:"missing or invalid bearer token"},w={code:"owner_only",message:"attach is owner-only; a scoped token does not reach it"},S=new WeakMap;function Je(t){return S.get(t)}l(Je,"socketPrincipal");function F(t,o){const s=process.platform==="linux"?V(t.socket):null,p=t.headers.authorization;if(p===void 0)return s===null||o.has(s)?{class:"person"}:"unauthorized";if(typeof p!="string"||!p.startsWith("Bearer "))return"unauthorized";const d=I(p.slice(7));if(!d||s!==null&&s!==d.uid)return"unauthorized";const c=U("user").runtime?.issuer;if(c&&!Q(c.replace(/\/$/,"")))return"runtime_starting";const y=d.grant??K("app:terminal",d.sub)?.id??null;return{class:"broker",...d,grant:y}}l(F,"resolveSocketPrincipal");function Le(t){const o=new Map;for(const s of q("user"))o.set(s.token,{principal:{class:"app",app:s.grantee,scopes:s.scopes},ceiling:s.scopes});return o.set(t,{principal:{class:"person"},ceiling:null}),o}l(Le,"resolveBearers");function J(t,o){const s=t.headers.authorization;if(!(typeof s!="string"||!s.startsWith("Bearer ")))return o.get(s.slice(7))}l(J,"authorize");function k(t){t.writeHead(401,{"content-type":"application/json; charset=utf-8"}),t.end(JSON.stringify({error:v}))}l(k,"writeUnauthorized");function Me(t,o){t.writeHead(503,{"content-type":"application/json; charset=utf-8"}),t.end(JSON.stringify({error:{code:"startup_blocked",message:o}}))}l(Me,"writeStartupBlocked");function L(t){return new Promise(o=>{try{t.closeAllConnections()}catch{}t.close(()=>o())})}l(L,"closeServer");function Fr(t={}){let o=null;const s=Ge(()=>o),p=new B().registerAll(G).registerAll(j).registerAll($),d=l((e,r)=>{const n=oe()?.startupBlock()??null;return n===null||e==="GET"&&(r==="/healthz"||r==="/v1/status")||e==="POST"&&(r==="/v1/daemon/migrate"||r==="/v1/daemon/admit")||n.phase==="recovering"&&p.match(e,r)!==null?null:n},"startupBlockFor"),c=Z(),y=new Set([process.getuid?.()??0,...U("user").runtime?.person_uids??[]]),T=l((e,r,n)=>{const a=l(i=>{g({event:"api.request.failed",level:"error",error:i instanceof Error?i:new Error(String(i))});try{r.headersSent||r.writeHead(500,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"internal",message:"internal error"}}))}catch{}},"internalFailure");let h;try{h=new URL(e.url??"/","http://127.0.0.1")}catch{try{r.writeHead(400,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"invalid_request",message:"request URL is invalid"}}))}catch{}return}try{const i=d((e.method??"GET").toUpperCase(),h.pathname);if(i!==null){Me(r,i.message);return}s.handle(e,r,n,Je(e)??{class:"person"}).catch(a)}catch(i){a(i)}},"onRequest"),E=l((e,r,n)=>{r.on("error",()=>{});try{const a=new URL(e.url??"/","http://127.0.0.1"),h=d((e.method??"GET").toUpperCase(),a.pathname);if(h!==null){A(r,503,"Service Unavailable","startup_blocked",h.message);return}const i=je(e.method??"GET",a.pathname);if(i===null){r.destroy();return}te(e,r,n,i).catch(()=>{try{r.destroy()}catch{}})}catch{try{r.destroy()}catch{}}},"onUpgrade"),M=l(e=>{e.on("error",r=>{g({event:"api.server.failed",level:"error",error:r})})},"bindErrorHandler"),R=H((e,r)=>{try{const n=F(e,y);if(n==="unauthorized"){k(r);return}if(n==="runtime_starting"){r.writeHead(503,{"content-type":"application/json; charset=utf-8"}),r.end(JSON.stringify({error:{code:"runtime_starting",message:"grant sync is not ready",type:"server_error",origin:"runtime",retryable:!0}}));return}S.set(e,n),n.class==="broker"&&g({event:"api.request.principal",level:"info",node_id:n.node,fields:{principal:`${n.app} node:${n.node}`,method:e.method,path:e.url}}),T(e,r,null)}catch(n){g({event:"api.principal.failed",level:"error",error:n instanceof Error?n:new Error(String(n))}),k(r)}});R.on("upgrade",(e,r,n)=>{try{const a=F(e,y);if(a==="unauthorized"||a==="runtime_starting"){A(r,a==="unauthorized"?401:503,"Unauthorized",a,"socket principal unavailable");return}if(a.class!=="person"){A(r,403,"Forbidden",w.code,w.message);return}S.set(e,a),E(e,r,n)}catch(a){g({event:"api.principal.failed",level:"error",error:a instanceof Error?a:new Error(String(a))}),A(r,401,"Unauthorized",v.code,v.message)}});let O=!1,z,P;const W=new Promise((e,r)=>{z=e,P=r});R.once("listening",()=>{O=!0,z()}),R.on("error",e=>{g({event:"api.server.failed",level:"error",error:e}),O||P(e)});try{C(c)&&x(c)}catch{}R.listen(c,()=>{try{Y(c,process.platform==="linux"&&C("/run/crtr/launcher.sock")?438:384)}catch(e){g({event:"api.socket.chmod_failed",level:"error",error:e instanceof Error?e:new Error(String(e))})}});let f;const b=t.tcp??ee()??U("user").api.tcp;if(b!==void 0&&b!==""){const e=$e(b);if(e===null)g({event:"api.tcp.invalid",level:"error",error:new Error(`invalid CRTRD_TCP/--tcp spec: ${b}`)});else{const r=t.token??re()??X("user"),n=r===void 0?void 0:Le(r),a=n===void 0?(i,u)=>{const m=i.headers.authorization;if(typeof m=="string"&&m.startsWith("Bearer ")&&I(m.slice(7))){k(u);return}T(i,u,null)}:(i,u)=>{if((i.method??"GET").toUpperCase()==="OPTIONS"){u.writeHead(204,{"Access-Control-Allow-Origin":"*","Access-Control-Allow-Headers":"authorization, content-type","Access-Control-Allow-Methods":"GET, POST, PATCH, PUT, DELETE, OPTIONS","Access-Control-Max-Age":"600"}),u.end();return}const m=J(i,n);if(m===void 0){k(u);return}S.set(i,m.principal),u.setHeader("Access-Control-Allow-Origin","*"),T(i,u,m.ceiling)},h=n===void 0?E:(i,u,m)=>{const N=J(i,n);if(N===void 0){A(u,401,"Unauthorized",v.code,v.message);return}if(N.ceiling!==null){A(u,403,"Forbidden",w.code,w.message);return}E(i,u,m)};f=H(a),f.on("upgrade",h),M(f),f.once("listening",()=>{const i=f?.address();if(i!==null&&typeof i=="object"){const{address:u,port:m}=i;o=Fe(u,m)}}),f.listen(e.port,e.host)}}let _=!1;return{ready:W,tcpAddress:l(()=>o,"tcpAddress"),close:l(async()=>{if(!_){_=!0,await Promise.all([L(R),f!==void 0?L(f):Promise.resolve()]);try{C(c)&&x(c)}catch{}}},"close")}}l(Fr,"createApiServer");export{Fr as createApiServer,Je as socketPrincipal};

package/dist/daemon/api/vendor-signin.d.ts

@@ -0,0 +1,7 @@
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import type { AppPrincipalResolver } from './principal.js';
+export declare const VENDOR_SIGNIN_PATH = "/signin/vendor";
+export declare function isVendorSignInPath(pathname: string): boolean;
+/** Serve one `/signin/vendor*` request; errors propagate as RunErrors so the
+ *  listener answers them with contract 2's envelope (RT-LLM-53). */
+export declare function handleVendorSignIn(req: IncomingMessage, res: ServerResponse, url: URL, principal: AppPrincipalResolver): Promise<void>;

package/dist/daemon/api/vendor-signin.js

@@ -0,0 +1,77 @@
+var k=Object.defineProperty;var a=(e,t)=>k(e,"name",{value:t,configurable:!0});import{randomBytes as P}from"node:crypto";import{joinedOwner as _}from"../../core/directory/join.js";import{consumeHandoffJti as E,handoffJtiConsumed as w}from"../../core/model-auth/handoff-jti.js";import{completeModelAuthFlow as $,modelAuthProvider as j,readModelAuthFlow as v,startModelAuthFlow as I,waitModelAuthFlow as O}from"../../core/model-auth/flows.js";import{RunError as s}from"../../core/runs/operations.js";const d="/signin/vendor",A=25e3,R="https://chatgpt.com/#settings/Security";function K(e){return e===d||e.startsWith(`${d}/`)}a(K,"isVendorSignInPath");function u(){return new s(401,"unauthorized","invalid vendor sign-in handoff")}a(u,"unauthorized");async function C(e,t){const n=await e.verifyHandoff(t);let o;try{o=_()}catch{o=null}if(n.sub!==o)throw u();return n}a(C,"verifyOwnerHandoff");function B(e){const t=e.headers.authorization;return t?.startsWith("Bearer ")&&t.length>7?t.slice(7):void 0}a(B,"bearer");function y(e,t){const n=e.getAll(t);return n.length===1?n[0]:void 0}a(y,"single");function N(e,t){const n=new URL(e);return n.searchParams.set("status",t),n.toString()}a(N,"returnUrl");function f(e){return e.replace(/[&<>"']/g,t=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;","'":"&#39;"})[t])}a(f,"escapeHtml");function l(e,t,n){e.writeHead(t,{"Content-Type":"application/json; charset=utf-8","Cache-Control":"no-store"}),e.end(JSON.stringify(n))}a(l,"sendJson");async function U(e){const t=[];let n=0;for await(const r of e){if(n+=r.length,n>64*1024)throw new s(400,"invalid_request","request body too large");t.push(r)}let o;try{o=JSON.parse(Buffer.concat(t).toString("utf8"))}catch{throw new s(400,"invalid_request","invalid JSON body")}if(typeof o!="object"||o===null||Array.isArray(o))throw new s(400,"invalid_request","request body must be a JSON object");return o}a(U,"jsonBody");const G=`
+body{font:16px/1.5 system-ui,-apple-system,sans-serif;max-width:34rem;margin:3rem auto;padding:0 1.25rem;color:#1a1a1a}
+h1{font-size:1.4rem;margin:0 0 1rem}
+.button{display:inline-block;background:#1a1a1a;color:#fff;border:0;border-radius:.5rem;padding:.8rem 1.4rem;font-size:1.05rem;text-decoration:none;cursor:pointer}
+.code{font:600 2.2rem/1.2 ui-monospace,monospace;letter-spacing:.12em;margin:.5rem 0}
+.note{background:#f4f4f5;border-radius:.5rem;padding:.8rem 1rem}
+label{display:block;font-weight:600;margin:1.5rem 0 .4rem}
+input[type=text]{width:100%;box-sizing:border-box;font:1rem ui-monospace,monospace;padding:.6rem;border:1px solid #bbb;border-radius:.4rem}
+#error{color:#b00020}
+[hidden]{display:none}
+`,J=`
+(function(){
+var cfg=JSON.parse(document.getElementById('cfg').textContent);
+history.replaceState(null,'',location.pathname);
+var auth={'Authorization':'Bearer '+cfg.handoff};
+function back(status){var u=new URL(cfg.returnTo);u.searchParams.set('status',status);location.assign(u.toString());}
+function show(id){document.getElementById(id).hidden=false;}
+var error=document.getElementById('error');
+if(cfg.kind==='anthropic'){
+  var form=document.getElementById('paste');
+  form.addEventListener('submit',function(e){
+    e.preventDefault();
+    var button=form.querySelector('button');button.disabled=true;error.textContent='';
+    fetch(cfg.base,{method:'POST',headers:Object.assign({'Content-Type':'application/json'},auth),body:JSON.stringify({input:form.elements.code.value})})
+      .then(function(r){return r.json().then(function(b){return {ok:r.ok,s:r.status,b:b};});})
+      .then(function(x){
+        if(x.ok){back(x.b.status==='connected'?'connected':'failed');return;}
+        if(x.s===401||x.s===404){back('failed');return;}
+        error.textContent=(x.b&&x.b.error&&x.b.error.message)||'That code was not accepted.';button.disabled=false;
+      })
+      .catch(function(){error.textContent='Could not reach your runtime. Try again.';button.disabled=false;});
+  });
+}else{
+  document.getElementById('copy').addEventListener('click',function(){navigator.clipboard&&navigator.clipboard.writeText(cfg.userCode);});
+  document.getElementById('renew').addEventListener('click',function(){back('failed');});
+  (function poll(){
+    fetch(cfg.base+'/wait',{headers:auth})
+      .then(function(r){if(r.status===401||r.status===404)return {status:'failed'};if(!r.ok)throw new Error(String(r.status));return r.json();})
+      .then(function(b){
+        if(b.status==='pending'){poll();return;}
+        if(b.status==='connected'){back('connected');return;}
+        if(b.status==='expired'){document.getElementById('device').hidden=true;show('expired');return;}
+        back('failed');
+      })
+      .catch(function(){setTimeout(poll,3000);});
+  })();
+}
+})();
+`;function x(e){const t=JSON.stringify(e.config).replace(/</g,"\\u003c");return`<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+<title>${f(e.title)}</title><style nonce="${e.nonce}">${G}</style></head>
+<body>${e.body}
+<script type="application/json" id="cfg">${t}<\/script>
+<script nonce="${e.nonce}">${J}<\/script>
+</body></html>`}a(x,"page");function L(e,t,n,o){return x({nonce:t,title:"Connect Claude",body:`<h1>Connect your Claude account</h1>
+<p>Sign in to Claude in a new tab. When Claude shows you a code, copy it and paste it below.</p>
+<p><a class="button" href="${f(e.url)}" target="_blank" rel="noopener noreferrer">Sign in at claude.ai</a></p>
+<form id="paste" autocomplete="off">
+<label for="code">Paste the code Claude shows</label>
+<input type="text" id="code" name="code" required spellcheck="false">
+<p><button class="button" type="submit">Connect</button></p>
+<p id="error" role="alert"></p>
+</form>`,config:{kind:"anthropic",base:`${d}/${encodeURIComponent(e.flow_id)}`,returnTo:n,handoff:o}})}a(L,"anthropicPage");function H(e,t,n,o){const r=e.user_code??"";return x({nonce:t,title:"Connect ChatGPT",body:`<h1>Connect your ChatGPT account</h1>
+<p class="note">OpenAI refuses this sign-in unless <strong>device code authorization for Codex</strong> is turned on in your
+<a href="${R}" target="_blank" rel="noopener noreferrer">ChatGPT Security Settings</a>. Turn it on first.</p>
+<p>When OpenAI shows an account email, check it is the account you want to use: approving connects that account.</p>
+<div id="device">
+<p>Open <a href="${f(e.url)}" target="_blank" rel="noopener noreferrer">${f(e.url.replace(/^https:\/\//,""))}</a> and enter this code:</p>
+<p class="code">${f(r)}</p>
+<p><button class="button" type="button" id="copy">Copy code</button></p>
+<p>The code expires in 15 minutes. This page moves on by itself once you approve.</p>
+</div>
+<div id="expired" hidden>
+<p>The code expired before it was approved.</p>
+<p><button class="button" type="button" id="renew">Get a new code</button></p>
+</div>
+<p id="error" role="alert"></p>`,config:{kind:"openai",base:`${d}/${encodeURIComponent(e.flow_id)}`,returnTo:n,handoff:o,userCode:r}})}a(H,"openaiPage");async function z(e,t,n,o){const r=y(n.searchParams,"handoff"),c=await C(o,r);if(w(c.jti))throw u();const i=y(n.searchParams,"return_to");let m;try{m=i===void 0?void 0:new URL(i).origin}catch{m=void 0}if(i===void 0||m!==new URL(o.issuer).origin)throw new s(400,"invalid_request","return_to must be an absolute URL on the directory origin","return_to");const p=y(n.searchParams,"vendor");if(p!=="anthropic"&&p!=="openai")throw new s(400,"invalid_request","vendor must be anthropic or openai","vendor");if(!E(c.jti,c.exp))throw u();let b;try{b=await I({provider:j(p),jti:c.jti})}catch(g){console.error("[vendor-signin] start failed:",g instanceof Error?g.message:g),t.writeHead(303,{Location:N(i,"failed"),"Cache-Control":"no-store","Referrer-Policy":"no-referrer"}),t.end();return}const h=P(16).toString("base64"),T=p==="anthropic"?L(b,h,i,r):H(b,h,i,r);t.writeHead(200,{"Content-Type":"text/html; charset=utf-8","Cache-Control":"no-store","Referrer-Policy":"no-referrer","X-Content-Type-Options":"nosniff","Content-Security-Policy":`default-src 'none'; script-src 'nonce-${h}'; style-src 'nonce-${h}'; connect-src 'self'; form-action 'none'; base-uri 'none'; frame-ancestors 'none'`}),t.end(T)}a(z,"startPage");async function S(e,t,n){const o=await C(t,B(e)),r=v(n);if(!r){if(w(o.jti))return!1;throw u()}if(r.jti===void 0||r.jti!==o.jti)throw u();return!0}a(S,"followUpFlow");async function q(e,t,n,o){if(!await S(e,n,o)){l(t,200,{status:"failed"});return}const r=await U(e);try{await $(o,r.input),l(t,200,{status:"connected"})}catch(c){const i=v(o);if(i&&i.status!=="pending"){l(t,200,{status:"failed"});return}throw c}}a(q,"submitCode");async function F(e,t,n,o){if(!await S(e,n,o)){l(t,200,{status:"failed"});return}const r=new AbortController;t.once("close",()=>r.abort());const c=await O(o,A,r.signal);l(t,200,{status:c?.status??"failed"})}a(F,"waitFlow");async function Q(e,t,n,o){const r=e.method??"GET";if(n.pathname===d&&r==="GET"){await z(e,t,n,o);return}const c=n.pathname.slice(d.length+1).split("/");let i="";try{i=c[0]?decodeURIComponent(c[0]):""}catch{throw new s(404,"not_found","unknown operation")}if(i&&c.length===1&&r==="POST"){await q(e,t,o,i);return}if(i&&c.length===2&&c[1]==="wait"&&r==="GET"){await F(e,t,o,i);return}throw new s(404,"not_found","unknown operation")}a(Q,"handleVendorSignIn");export{d as VENDOR_SIGNIN_PATH,Q as handleVendorSignIn,K as isVendorSignInPath};

package/dist/daemon/api/viewer-presence.d.ts

@@ -0,0 +1,3 @@
+export declare function hasAttachedBrokerViewers(nodeId: string): boolean;
+export declare function attachViewer(nodeId: string, connection: object): void;
+export declare function detachViewer(nodeId: string, connection: object): void;

package/dist/daemon/api/viewer-presence.js

@@ -0,0 +1 @@
+var r=Object.defineProperty;var c=(e,n)=>r(e,"name",{value:n,configurable:!0});const i=new Map;function s(e){return(i.get(e)?.size??0)>0}c(s,"hasAttachedBrokerViewers");function a(e,n){let t=i.get(e);t||(t=new Set,i.set(e,t)),t.add(n)}c(a,"attachViewer");function f(e,n){const t=i.get(e);t&&(t.delete(n),t.size===0&&i.delete(e))}c(f,"detachViewer");export{a as attachViewer,f as detachViewer,s as hasAttachedBrokerViewers};

package/dist/daemon/cron/armed-context.d.ts

@@ -7,6 +7,10 @@ import type { Cron } from '../../core/canvas/crons.js';
  *  purview silently replaced. That throws, and the run fails loudly once
  *  instead of running wrong on every tick. */
 export declare function resolveLiveProfile(c: Cron): string | null;
+/** The node a cron's birth is a child of: its live creator. With none, the
+ *  birth is a parentless root, which is the person's (app:terminal); an app's
+ *  cron has no node to take its grant from, so it cannot start one. */
+export declare function cronBirthParent(c: Cron): string | null;
 export declare function resolveLiveProfileOrRoot(c: Cron): string | null;
 export declare function resolveLiveProfileName(c: Cron): string | undefined;
 /** A stored context cannot be rebuilt; the run fails rather than running under a context nobody armed. */

package/dist/daemon/cron/armed-context.js

@@ -1 +1 @@
-var f=Object.defineProperty;var n=(e,r)=>f(e,"name",{value:r,configurable:!0});import{envHomeOverride as v}from"../../shared/env.js";import{loadProfileManifest as p,lookupProfile as h}from"../../core/profiles/manifest.js";import{readProfileEnvVars as c}from"../../core/profiles/env-store.js";import{ADMITTED_HOST_PATH_ENV as d,buildOperationalEnvBase as m}from"../../core/runtime/spawn-env.js";function u(e){if(e.profile==null)return null;let r;try{r=h(e.profile)}catch{return null}if(r.kind==="resolved")return r.entry.profileId;if(r.kind==="absent")return null;throw new a(`the armed profile "${e.profile}" is still on this host but its manifest could not be read (${r.manifestPath}) \u2014 running as root would silently give this cron a different identity, env store, and purview. Repair the manifest, or re-arm the cron under a profile that resolves.`)}n(u,"resolveLiveProfile");function C(e){try{return u(e)}catch{return null}}n(C,"resolveLiveProfileOrRoot");function x(e){if(e.profile!=null)try{return p(e.profile).manifest.name}catch{return}}n(x,"resolveLiveProfileName");class a extends Error{static{n(this,"ArmedContextError")}constructor(r){super(r),this.name="ArmedContextError"}}function R(e){if(e==null)return{};let r;try{r=JSON.parse(e)}catch(t){throw new a(`the armed env snapshot is not valid JSON (${t.message}) \u2014 this cron's stored env_json is corrupt, so the run would silently drop every armed variable. Re-arm the cron with a valid --env.`)}if(typeof r!="object"||r===null||Array.isArray(r))throw new a("the armed env snapshot is not a JSON object \u2014 this cron's stored env_json is corrupt. Re-arm the cron with a valid --env.");const i={};for(const[t,o]of Object.entries(r)){if(typeof o!="string")throw new a(`the armed env snapshot's value for "${t}" is not a string \u2014 this cron's stored env_json is corrupt, so the run would silently drop that variable. Re-arm the cron with a valid --env.`);i[t]=o}return i}n(R,"parseArmedEnv");function b(e,r){const i=R(e.env_json),t=u(e),o=m({targetCwd:e.cwd,targetProfileId:t}),s={...o,...c(t),...i,...t!==null?{CRTR_PROFILE_ID:t}:{},CRTR_CRON_ID:e.cron_id,CRTR_CRON_NAME:e.name,CRTR_RUN_ID:r},l=v();return l!==void 0&&l!==""&&(s.CRTR_HOME=l),e.anchor_node!=null&&(s.CRTR_ANCHOR=e.anchor_node),s[d]=o[d],{profileId:t,env:s}}n(b,"buildArmedRunContext");export{a as ArmedContextError,b as buildArmedRunContext,u as resolveLiveProfile,x as resolveLiveProfileName,C as resolveLiveProfileOrRoot};
+var p=Object.defineProperty;var o=(e,r)=>p(e,"name",{value:r,configurable:!0});import{envHomeOverride as h}from"../../shared/env.js";import{loadProfileManifest as v,lookupProfile as c}from"../../core/profiles/manifest.js";import{readProfileEnvVars as m}from"../../core/profiles/env-store.js";import{ADMITTED_HOST_PATH_ENV as u,buildOperationalEnvBase as _}from"../../core/runtime/spawn-env.js";import{getNode as R}from"../../core/canvas/canvas.js";function f(e){if(e.profile==null)return null;let r;try{r=c(e.profile)}catch{return null}if(r.kind==="resolved")return r.entry.profileId;if(r.kind==="absent")return null;throw new i(`the armed profile "${e.profile}" is still on this host but its manifest could not be read (${r.manifestPath}) \u2014 running as root would silently give this cron a different identity, env store, and purview. Repair the manifest, or re-arm the cron under a profile that resolves.`)}o(f,"resolveLiveProfile");function x(e){if(e.created_by!==null&&R(e.created_by)!==null)return e.created_by;if(e.grantee!=="app:terminal")throw new i(`cron ${e.cron_id} belongs to ${e.grantee} and its creator node is gone; only a node of that app can start its births`);return null}o(x,"cronBirthParent");function A(e){try{return f(e)}catch{return null}}o(A,"resolveLiveProfileOrRoot");function N(e){if(e.profile!=null)try{return v(e.profile).manifest.name}catch{return}}o(N,"resolveLiveProfileName");class i extends Error{static{o(this,"ArmedContextError")}constructor(r){super(r),this.name="ArmedContextError"}}function w(e){if(e==null)return{};let r;try{r=JSON.parse(e)}catch(t){throw new i(`the armed env snapshot is not valid JSON (${t.message}) \u2014 this cron's stored env_json is corrupt, so the run would silently drop every armed variable. Re-arm the cron with a valid --env.`)}if(typeof r!="object"||r===null||Array.isArray(r))throw new i("the armed env snapshot is not a JSON object \u2014 this cron's stored env_json is corrupt. Re-arm the cron with a valid --env.");const a={};for(const[t,n]of Object.entries(r)){if(typeof n!="string")throw new i(`the armed env snapshot's value for "${t}" is not a string \u2014 this cron's stored env_json is corrupt, so the run would silently drop that variable. Re-arm the cron with a valid --env.`);a[t]=n}return a}o(w,"parseArmedEnv");function P(e,r){const a=w(e.env_json),t=e.grantee==="app:terminal",n=t?f(e):null,d=_({targetCwd:e.cwd,targetProfileId:n,skipSpawnAllow:!t}),l={...d,...t?m(n):{},...a,...n!==null?{CRTR_PROFILE_ID:n}:{},CRTR_CRON_ID:e.cron_id,CRTR_CRON_NAME:e.name,CRTR_RUN_ID:r},s=h();return s!==void 0&&s!==""&&(l.CRTR_HOME=s),e.anchor_node!=null&&(l.CRTR_ANCHOR=e.anchor_node),l[u]=d[u],{profileId:n,env:l}}o(P,"buildArmedRunContext");export{i as ArmedContextError,P as buildArmedRunContext,x as cronBirthParent,f as resolveLiveProfile,N as resolveLiveProfileName,A as resolveLiveProfileOrRoot};

package/dist/daemon/cron/escalation.js

@@ -1,3 +1,3 @@
-var f=Object.defineProperty;var o=(e,r)=>f(e,"name",{value:r,configurable:!0});import{getNode as l}from"../../core/canvas/canvas.js";import{fullName as h}from"../../core/canvas/labels.js";import{listCronRuns as p,setCronState as $}from"../../core/canvas/crons.js";import{emitEvent as u}from"../../core/events/emit.js";import{spawnChild as y}from"../../core/runtime/spawn.js";import{cronWakeOrigin as _}from"../../core/runtime/bearings.js";import{cadenceDisplay as w}from"../../core/wake.js";import{resolveLiveProfileOrRoot as b}from"./armed-context.js";function g(e,r){return r!==null?r:e.timedOut?`run timed out after ${e.runTimeoutS}s (killed; recorded exit -1)`:e.processErrorMessage!==null?`run process error: ${e.processErrorMessage}`:`command exited ${e.exitCode??"(no exit observed)"}`}o(g,"failureSummary");function v(e,r,a){const i=e.created_by!=null?l(e.created_by):null,t=e.created_by==null?"created by: (no creating node recorded)":i!==null?`created by: node ${e.created_by} ("${h(i)}") \u2014 still on the canvas; consider telling it what happened`:`created by: node ${e.created_by} (now gone)`,c=e.recur!=null?`every ${w(e.recur)}`:`one-shot at ${e.fire_at}`,d=p(e.cron_id).slice(0,10).map(n=>{const m=n.exit_code===null?"no exit":`exit ${n.exit_code}`,s=(n.stderr_head??n.stdout_head??"").split(`
-`)[0]?.slice(0,120)??"";return`- ${n.started} \u2014 ${m}, ${n.duration_ms}ms \u2014 ${n.delivered??""}${s!==""?` \u2014 ${s}`:""}`});return["A scheduled cron FAILED and has paused itself. You were spawned to deal with it.","",`- cron: "${e.name}" (${e.cron_id})`,`- schedule: ${c}${e.tz!=null?` (tz ${e.tz})`:""}`,`- context: cwd ${e.cwd}${e.profile!=null?`, profile ${e.profile}`:""}`,`- ${t}`,`- this failure: ${g(r,a)}`,"","## The command","","```bash",e.command,"```","","## This run","",`- exit: ${r.timedOut?"-1 (timeout)":String(r.exitCode)}`,`- stdout (head): ${r.stdoutHead===""?"(empty)":""}`,...r.stdoutHead!==""?["```",r.stdoutHead,"```"]:[],`- stderr (head): ${r.stderrHead===""?"(empty)":""}`,...r.stderrHead!==""?["```",r.stderrHead,"```"]:[],"","## Recent runs (most recent first, this failure not yet recorded)","",...d.length>0?d:["(no prior runs recorded)"],"","## Your mandate","","Diagnose why it failed and decide what to do:",`- Transient or fixable: fix the environment/command context, verify with \`crtr cron run ${e.cron_id}\` (fires now, out of band, shows you the result), then \`crtr cron resume ${e.cron_id}\` to re-arm it.`,`- Obsolete: \`crtr cron cancel ${e.cron_id}\`.`,"- The user's call (or the fix needs a change you cannot make): `crtr human send`.","","The cron stays paused until someone resumes it \u2014 nothing refires while you work."].join(`
-`)}o(v,"buildEscalationKickoff");async function A(e,r,a){$(e.cron_id,"paused");const i=e.created_by!=null&&l(e.created_by)!==null;try{const t=await y({kind:"general",cwd:e.cwd,prompt:v(e,r,a),...i?{parent:e.created_by}:{root:!0,rootLifecycle:"terminal"},readiness:"launch",profile:b(e),wakeOrigin:_(e,"node_birth")});return u({level:"info",event:"cron.failure.escalated",fields:{cron_id:e.cron_id,name:e.name,escalation_node:t.node.node_id}}),`failure: cron paused, escalation node ${t.node.node_id} spawned`}catch(t){return u({level:"error",event:"cron.escalation.spawn_failed",error:t,fields:{cron_id:e.cron_id,name:e.name}}),`failure: cron paused; escalation spawn failed: ${t.message}`}}o(A,"escalateFailure");function L(e){return[`${e}.`,"This is a ONE-SHOT, so it has been PAUSED rather than released: its side effects may have completed in full,","and re-firing would enact them a second time. Determine whether the work actually landed, then either","`crtr cron run` it to redo it deliberately, or `crtr cron cancel` it."].join(" ")}o(L,"crashedOneShotSummary");export{L as crashedOneShotSummary,A as escalateFailure,g as failureSummary};
+var m=Object.defineProperty;var o=(e,r)=>m(e,"name",{value:r,configurable:!0});import{getNode as h}from"../../core/canvas/canvas.js";import{fullName as f}from"../../core/canvas/labels.js";import{listCronRuns as p,setCronState as $}from"../../core/canvas/crons.js";import{emitEvent as l}from"../../core/events/emit.js";import{spawnChild as y}from"../../core/runtime/spawn.js";import{cronWakeOrigin as _}from"../../core/runtime/bearings.js";import{cadenceDisplay as w}from"../../core/wake.js";import{cronBirthParent as b,resolveLiveProfileOrRoot as g}from"./armed-context.js";function v(e,r){return r!==null?r:e.timedOut?`run timed out after ${e.runTimeoutS}s (killed; recorded exit -1)`:e.processErrorMessage!==null?`run process error: ${e.processErrorMessage}`:`command exited ${e.exitCode??"(no exit observed)"}`}o(v,"failureSummary");function O(e,r,a){const t=e.created_by!=null?h(e.created_by):null,i=e.created_by==null?"created by: (no creating node recorded)":t!==null?`created by: node ${e.created_by} ("${f(t)}") \u2014 still on the canvas; consider telling it what happened`:`created by: node ${e.created_by} (now gone)`,u=e.recur!=null?`every ${w(e.recur)}`:`one-shot at ${e.fire_at}`,d=p(e.cron_id).slice(0,10).map(n=>{const c=n.exit_code===null?"no exit":`exit ${n.exit_code}`,s=(n.stderr_head??n.stdout_head??"").split(`
+`)[0]?.slice(0,120)??"";return`- ${n.started} \u2014 ${c}, ${n.duration_ms}ms \u2014 ${n.delivered??""}${s!==""?` \u2014 ${s}`:""}`});return["A scheduled cron FAILED and has paused itself. You were spawned to deal with it.","",`- cron: "${e.name}" (${e.cron_id})`,`- schedule: ${u}${e.tz!=null?` (tz ${e.tz})`:""}`,`- context: cwd ${e.cwd}${e.profile!=null?`, profile ${e.profile}`:""}`,`- ${i}`,`- this failure: ${v(r,a)}`,"","## The command","","```bash",e.command,"```","","## This run","",`- exit: ${r.timedOut?"-1 (timeout)":String(r.exitCode)}`,`- stdout (head): ${r.stdoutHead===""?"(empty)":""}`,...r.stdoutHead!==""?["```",r.stdoutHead,"```"]:[],`- stderr (head): ${r.stderrHead===""?"(empty)":""}`,...r.stderrHead!==""?["```",r.stderrHead,"```"]:[],"","## Recent runs (most recent first, this failure not yet recorded)","",...d.length>0?d:["(no prior runs recorded)"],"","## Your mandate","","Diagnose why it failed and decide what to do:",`- Transient or fixable: fix the environment/command context, verify with \`crtr cron run ${e.cron_id}\` (fires now, out of band, shows you the result), then \`crtr cron resume ${e.cron_id}\` to re-arm it.`,`- Obsolete: \`crtr cron cancel ${e.cron_id}\`.`,"- The user's call (or the fix needs a change you cannot make): `crtr human send`.","","The cron stays paused until someone resumes it \u2014 nothing refires while you work."].join(`
+`)}o(O,"buildEscalationKickoff");async function R(e,r,a){$(e.cron_id,"paused");try{const t=b(e),i=await y({kind:"general",cwd:e.cwd,prompt:O(e,r,a),...t!==null?{parent:t}:{root:!0,rootLifecycle:"terminal"},readiness:"launch",profile:g(e),wakeOrigin:_(e,"node_birth")});return l({level:"info",event:"cron.failure.escalated",fields:{cron_id:e.cron_id,name:e.name,escalation_node:i.node.node_id}}),`failure: cron paused, escalation node ${i.node.node_id} spawned`}catch(t){return l({level:"error",event:"cron.escalation.spawn_failed",error:t,fields:{cron_id:e.cron_id,name:e.name}}),`failure: cron paused; escalation spawn failed: ${t.message}`}}o(R,"escalateFailure");function z(e){return[`${e}.`,"This is a ONE-SHOT, so it has been PAUSED rather than released: its side effects may have completed in full,","and re-firing would enact them a second time. Determine whether the work actually landed, then either","`crtr cron run` it to redo it deliberately, or `crtr cron cancel` it."].join(" ")}o(z,"crashedOneShotSummary");export{z as crashedOneShotSummary,R as escalateFailure,v as failureSummary};

package/dist/daemon/cron/lease-recovery.js

@@ -1 +1 @@
-var S=Object.defineProperty;var i=(e,r)=>S(e,"name",{value:r,configurable:!0});import{randomUUID as c}from"node:crypto";import{setTimeout as v}from"node:timers/promises";import{CRON_DEATH_POLL_MS as p,CRON_KILL_GRACE_MS as A,EMPTY_STDOUT_SHA256 as m}from"./capture.js";import{cronDaemonInstanceId as C}from"./live-runs.js";import{crashedOneShotSummary as H,escalateFailure as M}from"./escalation.js";import{settleRun as _}from"./settle.js";import{killLeasedCronRun as f,runningCrons as D,setCronState as O,verifyLeasedCronRun as h}from"../../core/canvas/crons.js";import{emitEvent as u}from"../../core/events/emit.js";function k(e,r={}){for(const t of D()){if(t.run_lease_owner===C)continue;if(!h(t)){I(t,e,r);continue}const s=t.run_started_at!=null?new Date(t.run_started_at).getTime():e;if(e-s<t.run_timeout_s*1e3)continue;if(!f(t)){I(t,e,r);continue}const o={runId:c(),startedAtIso:t.run_started_at??new Date(e).toISOString(),exitCode:-1,timedOut:!0,runTimeoutS:t.run_timeout_s,processErrorMessage:null,stdoutHead:"",stdoutSha256:m,stderrHead:`run timed out after ${t.run_timeout_s}s (recovered stale lease from a prior daemon instance)`},n=(async()=>{await g(t),await _(t,{outOfBand:!1,outcome:{kind:"disposed",ctx:o},record:{runId:o.runId,startedAtIso:o.startedAtIso,finishedAtMs:e,durationMs:e-s,exitCode:-1,stdoutHead:null,stderrHead:o.stderrHead},lease:{kind:"clear"}})})();r.register?.(n),n.catch(a=>{u({level:"error",event:"cron.stale_lease.settle_failed",error:a,fields:{cron_id:t.cron_id}})})}}i(k,"recoverStaleCronLeases");async function g(e){const r=Date.now()+A;for(;Date.now()<r;)if(await v(p),!h(e))return;f(e,"SIGKILL")}i(g,"awaitLeasedRunDeath");function I(e,r,t){const s=e.recur==null,o=e.run_started_at!=null?new Date(e.run_started_at).getTime():r,n="the daemon life that owned this run ended before it settled \u2014 the process is gone and its outcome was never observed",a={runId:c(),startedAtIso:e.run_started_at??new Date(r).toISOString(),exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:n,stdoutHead:"",stdoutSha256:m,stderrHead:`run outcome unobserved: ${n}`},l=(async()=>{let d=`crashed: ${n}${s?"":" \u2014 the next occurrence is unaffected"}`;s&&(O(e.cron_id,"paused"),d=e.on_output==="silent"?`crashed: ${n} \u2014 one-shot paused, not re-fired (silent: not escalated)`:`crashed one-shot: ${await M(e,a,H(n))}`),await _(e,{outOfBand:!1,outcome:{kind:"stated",delivered:d,paused:s},record:{runId:a.runId,startedAtIso:a.startedAtIso,finishedAtMs:r,durationMs:Math.max(0,r-o),exitCode:null,stdoutHead:null,stderrHead:a.stderrHead},lease:"release"}),u({level:"warn",event:"cron.run.unobserved",fields:{cron_id:e.cron_id,name:e.name,one_shot:s}})})();t.register?.(l),l.catch(d=>{u({level:"error",event:"cron.crashed_run.settle_failed",error:d,fields:{cron_id:e.cron_id}})})}i(I,"settleCrashedRun");export{k as recoverStaleCronLeases};
+var v=Object.defineProperty;var d=(e,r)=>v(e,"name",{value:r,configurable:!0});import{randomUUID as m}from"node:crypto";import{setTimeout as S}from"node:timers/promises";import{CRON_DEATH_POLL_MS as w,CRON_KILL_GRACE_MS as A,EMPTY_STDOUT_SHA256 as f}from"./capture.js";import{cronDaemonInstanceId as C}from"./live-runs.js";import{crashedOneShotSummary as L,escalateFailure as H}from"./escalation.js";import{settleRun as h}from"./settle.js";import{runningCrons as M,stopLeasedCronRun as p,setCronState as g,verifyLeasedCronRun as l}from"../../core/canvas/crons.js";import{emitEvent as c}from"../../core/events/emit.js";const i=new Set;function K(e,r={}){for(const t of M()){if(t.run_lease_owner===C||i.has(t.cron_id))continue;if(t.run_pid===null||!l(t)){i.add(t.cron_id),D(t,e,r);continue}const o=t.run_started_at!=null?new Date(t.run_started_at).getTime():e;if(e-o<t.run_timeout_s*1e3)continue;const a={runId:m(),startedAtIso:t.run_started_at??new Date(e).toISOString(),exitCode:-1,timedOut:!0,runTimeoutS:t.run_timeout_s,processErrorMessage:null,stdoutHead:"",stdoutSha256:f,stderrHead:`run timed out after ${t.run_timeout_s}s (recovered stale lease from a prior daemon instance)`};i.add(t.cron_id);const n=(async()=>{await p(t),await y(t),await h(t,{outOfBand:!1,outcome:{kind:"disposed",ctx:a},record:{runId:a.runId,startedAtIso:a.startedAtIso,finishedAtMs:e,durationMs:e-o,exitCode:-1,stdoutHead:null,stderrHead:a.stderrHead},lease:{kind:"clear"}})})().finally(()=>i.delete(t.cron_id));r.register?.(n),n.catch(s=>{c({level:"error",event:"cron.stale_lease.settle_failed",error:s,fields:{cron_id:t.cron_id}})})}}d(K,"recoverStaleCronLeases");async function y(e){if(!await I(e)&&(await p(e,"SIGKILL"),!await I(e)))throw new Error(`cron ${e.cron_id} run ${e.run_pid} survived SIGKILL`)}d(y,"awaitLeasedRunDeath");async function I(e){const r=Date.now()+A;for(;Date.now()<r;){if(!l(e))return!0;await S(w)}return!l(e)}d(I,"pollLeasedRunGone");function D(e,r,t){const o=e.recur==null,a=e.run_started_at!=null?new Date(e.run_started_at).getTime():r,n=e.run_pid===null?"the daemon life that claimed this run ended before its launch pid was recorded \u2014 the command may have started and its outcome is unknown":"the daemon life that owned this run ended before it settled \u2014 the process is gone and its outcome was never observed",s={runId:m(),startedAtIso:e.run_started_at??new Date(r).toISOString(),exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:n,stdoutHead:"",stdoutSha256:f,stderrHead:`run outcome unobserved: ${n}`},_=(async()=>{let u=`crashed: ${n}${o?"":" \u2014 the next occurrence is unaffected"}`;o&&(g(e.cron_id,"paused"),u=e.on_output==="silent"?`crashed: ${n} \u2014 one-shot paused, not re-fired (silent: not escalated)`:`crashed one-shot: ${await H(e,s,L(n))}`),await h(e,{outOfBand:!1,outcome:{kind:"stated",delivered:u,paused:o},record:{runId:s.runId,startedAtIso:s.startedAtIso,finishedAtMs:r,durationMs:Math.max(0,r-a),exitCode:null,stdoutHead:null,stderrHead:s.stderrHead},lease:"release"}),c({level:"warn",event:"cron.run.unobserved",fields:{cron_id:e.cron_id,name:e.name,one_shot:o}})})().finally(()=>i.delete(e.cron_id));t.register?.(_),_.catch(u=>{c({level:"error",event:"cron.crashed_run.settle_failed",error:u,fields:{cron_id:e.cron_id}})})}d(D,"settleCrashedRun");export{K as recoverStaleCronLeases};

package/dist/daemon/cron/sinks.js

@@ -1,2 +1,2 @@
-var m=Object.defineProperty;var t=(e,o)=>m(e,"name",{value:o,configurable:!0});import{newNodeId as a}from"../../core/runtime/nodes.js";import{getNode as i}from"../../core/canvas/canvas.js";import{parseCronSink as s}from"../../core/canvas/crons.js";import{hasNoNaturalCycle as u}from"../../core/runtime/revive-all.js";import{isParked as p}from"../../core/runtime/lifecycle.js";import{cronWakeOrigin as f}from"../../core/runtime/bearings.js";import{resolveLiveProfile as c,resolveLiveProfileName as k}from"./armed-context.js";function I(e,o,d){const n=s(e.sink);if(n===null)return{kind:"none",delivered:"no sink armed \u2014 nothing delivered"};if(n.kind==="node"){const r=i(n.node);if(r===null)throw new Error(`node sink ${n.node} is gone`);if(u(r)&&!p(r))throw new Error(`node sink ${n.node} has no natural cycle ahead (done or finalized)`);return{kind:"node",destinationNodeId:n.node,senderNodeId:e.created_by!==null&&i(e.created_by)!==null?e.created_by:null,label:`\u23F0 cron ${e.name}`,stdout:d,urgency:e.tier}}if(n.kind==="spawn"){const r=e.created_by!==null&&i(e.created_by)!==null,l=[`Scheduled cron "${e.name}" (${e.cron_id}) fired and delivered its output to you as your kickoff.`,"","## Command output","",d].join(`
-`);return{kind:"external",destinationId:"cron_spawn",adapter:{adapter:"cron_spawn",cronId:e.cron_id,nodeId:a(),kind:n.spawn,cwd:e.cwd,...r?{parent:e.created_by,root:!1}:{parent:null,root:!0,rootLifecycle:"terminal"},profile:c(e),wakeOrigin:f(e,"node_birth"),prompt:l},bodyJson:{runId:o,stdout:d}}}return{kind:"external",destinationId:"cron_human",adapter:{adapter:"cron_human",cronId:e.cron_id,requestId:a(),title:`\u23F0 cron ${e.name}`,summary:`Scheduled cron "${e.name}" delivered output for your attention.`,sessionName:`cron ${e.name} (${e.cron_id})`,profileName:k(e)??null},bodyJson:{runId:o,stdout:d}}}t(I,"resolveCronSink");export{I as resolveCronSink};
+var m=Object.defineProperty;var d=(n,o)=>m(n,"name",{value:o,configurable:!0});import{newNodeId as t}from"../../core/runtime/nodes.js";import{getNode as a}from"../../core/canvas/canvas.js";import{parseCronSink as s}from"../../core/canvas/crons.js";import{hasNoNaturalCycle as u}from"../../core/runtime/revive-all.js";import{isParked as p}from"../../core/runtime/lifecycle.js";import{cronWakeOrigin as f}from"../../core/runtime/bearings.js";import{cronBirthParent as k,resolveLiveProfile as c,resolveLiveProfileName as y}from"./armed-context.js";function g(n,o,i){const e=s(n.sink);if(e===null)return{kind:"none",delivered:"no sink armed \u2014 nothing delivered"};if(e.kind==="node"){const r=a(e.node);if(r===null)throw new Error(`node sink ${e.node} is gone`);if(u(r)&&!p(r))throw new Error(`node sink ${e.node} has no natural cycle ahead (done or finalized)`);return{kind:"node",destinationNodeId:e.node,senderNodeId:n.created_by!==null&&a(n.created_by)!==null?n.created_by:null,label:`\u23F0 cron ${n.name}`,stdout:i,urgency:n.tier}}if(e.kind==="spawn"){const r=k(n),l=[`Scheduled cron "${n.name}" (${n.cron_id}) fired and delivered its output to you as your kickoff.`,"","## Command output","",i].join(`
+`);return{kind:"external",destinationId:"cron_spawn",adapter:{adapter:"cron_spawn",cronId:n.cron_id,nodeId:t(),kind:e.spawn,cwd:n.cwd,...r!==null?{parent:r,root:!1}:{parent:null,root:!0,rootLifecycle:"terminal"},profile:c(n),wakeOrigin:f(n,"node_birth"),prompt:l},bodyJson:{runId:o,stdout:i}}}return{kind:"external",destinationId:"cron_human",adapter:{adapter:"cron_human",cronId:n.cron_id,requestId:t(),title:`\u23F0 cron ${n.name}`,summary:`Scheduled cron "${n.name}" delivered output for your attention.`,sessionName:`cron ${n.name} (${n.cron_id})`,profileName:y(n)??null},bodyJson:{runId:o,stdout:i}}}d(g,"resolveCronSink");export{g as resolveCronSink};

package/dist/daemon/cron-run.d.ts

@@ -6,9 +6,9 @@ export { type RunDueCronOptions } from './cron/passes.js';
 export { recoverStaleCronLeases } from './cron/lease-recovery.js';
 /** Kick off ONE cron run and return its settlement promise, resolving with
  *  the settled run record (null = the idle→running lease was lost, or the row
- *  was quarantined — nothing was recorded by THIS call). The subprocess
- *  starts synchronously (spawn + lease + recurrence advance happen before
- *  this returns); the promise resolves only after the child has CLOSED and
+ *  was quarantined — nothing was recorded by THIS call). The lease and
+ *  recurrence advance happen synchronously before the asynchronous launcher
+ *  request; the promise resolves only after the child has CLOSED and
  *  every durable transition — disposition/delivery, run record, lease
  *  release, one-shot consumption — is written.
  *
@@ -20,8 +20,8 @@ export declare function executeCron(c: Cron, opts: {
     outOfBand: boolean;
 }): Promise<CronRunRecord | null>;
 /** The daemon's cron pass: expire clock-bounded rows, apply overlap policies,
- *  then kick off every due active idle cron. Each child starts synchronously
- *  but is NEVER awaited in the tick; returns one settlement promise per
+ *  then kick off every due active idle cron. Each lease is claimed synchronously,
+ *  but its launch is NEVER awaited in the tick; returns one settlement promise per
  *  admitted run.
  *
  *  A run that launches or revives a node is admitted unconditionally: the

package/dist/daemon/cron-run.js

@@ -1 +1 @@
-var O=Object.defineProperty;var m=(e,t)=>O(e,"name",{value:t,configurable:!0});import{randomUUID as D}from"node:crypto";import{CRON_OUTPUT_HEAD_BYTES as h,EMPTY_STDOUT_SHA256 as x,formatCronOutputHead as _}from"./cron/capture.js";import{clearLiveRun as A,cronDaemonInstanceId as R,liveRunFor as T,registerLiveRun as v}from"./cron/live-runs.js";import{buildArmedRunContext as g}from"./cron/armed-context.js";import{decideHeldSettle as M,EXIT_HELD as k,HELD_DELIVERED as B}from"./cron/held.js";import{settleRun as H}from"./cron/settle.js";import{applyOverlapPolicies as L,expireDueCrons as U}from"./cron/passes.js";import{dueClockCrons as b,acquireCronRunLease as y,advanceCron as P,setCronState as $}from"../core/canvas/crons.js";import{emitEvent as N}from"../core/events/emit.js";import{runCommandOnce as Y}from"../core/runtime/run-command.js";import{nextSlotAfter as F}from"../core/wake.js";import{CRON_OUTPUT_HEAD_BYTES as ae}from"./cron/capture.js";import{cronDaemonInstanceId as ue,markSelfCanceledCronRun as le}from"./cron/live-runs.js";import{recoverStaleCronLeases as me}from"./cron/lease-recovery.js";async function q(e,t){const{runId:d,outOfBand:r,startedAtIso:n,finishedAtMs:o,code:u,timedOut:l,processError:i}=t,p=!r&&!l&&i==null&&u===k&&!t.wasReplaced&&!t.wasSelfCanceled;let a,c;return t.wasReplaced?(a={kind:"stated",delivered:"replaced (overlap=replace)"},c="release"):p?(a={kind:"stated",delivered:B},c=M(e,n,o)??"release"):(a={kind:"disposed",ctx:{runId:d,startedAtIso:n,exitCode:l?-1:u,timedOut:l,runTimeoutS:e.run_timeout_s,processErrorMessage:i!=null?i.message:null,stdoutHead:t.stdoutHead,stdoutSha256:t.stdoutSha256,stderrHead:t.stderrHead},selfCanceled:t.wasSelfCanceled},c=r?"release":{kind:"clear"}),H(e,{outOfBand:r,outcome:a,record:{runId:d,startedAtIso:n,finishedAtMs:o,durationMs:o-t.startedAtMs,exitCode:l?-1:u,stdoutHead:t.stdoutHead===""?null:t.stdoutHead,stderrHead:i!=null?`run process error: ${i.message}`.slice(0,h):t.stderrHead===""?null:t.stderrHead},lease:c})}m(q,"settleClosedRun");function I(e,t,d,r){const n=Date.now(),o=`${d}: ${r.message}`.slice(0,h);return H(e,{outOfBand:t.outOfBand,outcome:{kind:"disposed",ctx:{runId:t.runId,startedAtIso:t.startedAtIso,exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:r.message,stdoutHead:"",stdoutSha256:x,stderrHead:o}},record:{runId:t.runId,startedAtIso:t.startedAtIso,finishedAtMs:n,durationMs:n-t.startedAtMs,exitCode:null,stdoutHead:null,stderrHead:o},lease:"none"})}m(I,"settleUnspawnedRun");function J(e,t){let d;try{d=F(e.recur,new Date(t))}catch(r){return N({level:"error",event:"cron.recur.unparseable",error:r,fields:{cron_id:e.cron_id,name:e.name,recur:e.recur}}),$(e.cron_id,"paused"),new Error(`unparseable recurrence ${JSON.stringify(e.recur)}: ${r.message} \u2014 this cron cannot be rescheduled until its recurrence is fixed (\`crtr cron cancel\` and re-arm it), so it has been paused.`)}return P(e.cron_id,d),null}m(J,"advanceRecurrence");function V(e,t){const{outOfBand:d}=t;return new Promise((r,n)=>{const o=D(),u=Date.now(),l=new Date(u).toISOString(),i={runId:o,outOfBand:d,startedAtIso:l,startedAtMs:u};let p;try{({env:p}=g(e,o))}catch(s){I(e,i,"run could not be armed",s).then(r,n);return}let a;try{a=Y({command:e.command,cwd:e.cwd,env:p,timeoutMs:e.run_timeout_s*1e3,headBytes:h})}catch(s){I(e,i,"run failed to spawn",s).then(r,n);return}if(a.pid===null){a.completion.then(s=>{I(e,i,"run failed to spawn",s.processError??new Error("bash did not provide a process id")).then(r,n)},n);return}let c=!1,C=null;const S=m(()=>{a.completion.then(s=>{const f=T(e.cron_id),w=f!==void 0&&f.runId===o&&f.replaced,E=f!==void 0&&f.runId===o&&f.selfCanceled;if(A(e.cron_id,o),c){r(null);return}q(e,{runId:o,outOfBand:d,startedAtIso:l,startedAtMs:u,finishedAtMs:Date.now(),code:s.exitCode,timedOut:s.timedOut,processError:C??s.processError,stdoutHead:_(s.stdout,s.stdoutTruncated),stderrHead:_(s.stderr,s.stderrTruncated),stdoutSha256:s.stdoutSha256,wasReplaced:w,wasSelfCanceled:E}).then(r,n)},n)},"settleCommand");if(!y(e.cron_id,R,a.pid,l,d)){c=!0,a.terminate(),S();return}v(e.cron_id,{runId:o,replaced:!1,selfCanceled:!1,kill:a.terminate}),!d&&e.recur!=null&&(C=J(e,u),C!==null&&a.terminate()),S()})}m(V,"executeCron");function oe(e,t={}){const d=new Date(e).toISOString();U(d),L(e,d);const r=[];for(const n of b(d)){const o=V(n,{outOfBand:!1}).then(()=>{});r.push(o),t.register?.(o)}for(const n of r)n.catch(()=>{});return r}m(oe,"runDueCrons");export{ae as CRON_OUTPUT_HEAD_BYTES,ue as cronDaemonInstanceId,V as executeCron,le as markSelfCanceledCronRun,me as recoverStaleCronLeases,oe as runDueCrons};
+var D=Object.defineProperty;var f=(e,t)=>D(e,"name",{value:t,configurable:!0});import{randomUUID as O}from"node:crypto";import{CRON_OUTPUT_HEAD_BYTES as h,EMPTY_STDOUT_SHA256 as x,formatCronOutputHead as I}from"./cron/capture.js";import{clearLiveRun as A,cronDaemonInstanceId as S,liveRunFor as R,registerLiveRun as T}from"./cron/live-runs.js";import{buildArmedRunContext as g}from"./cron/armed-context.js";import{decideHeldSettle as v,EXIT_HELD as M,HELD_DELIVERED as k}from"./cron/held.js";import{settleRun as w}from"./cron/settle.js";import{applyOverlapPolicies as B,expireDueCrons as L}from"./cron/passes.js";import{dueClockCrons as U,acquireCronRunLease as b,attachCronRunPid as y,advanceCron as P,setCronState as $}from"../core/canvas/crons.js";import{emitEvent as N}from"../core/events/emit.js";import{runAppCommand as Y}from"../core/runtime/run-command.js";import{nextSlotAfter as F}from"../core/wake.js";import{CRON_OUTPUT_HEAD_BYTES as ae}from"./cron/capture.js";import{cronDaemonInstanceId as ue,markSelfCanceledCronRun as le}from"./cron/live-runs.js";import{recoverStaleCronLeases as fe}from"./cron/lease-recovery.js";async function q(e,t){const{runId:s,outOfBand:r,startedAtIso:o,finishedAtMs:d,code:l,timedOut:i,processError:u}=t,p=!r&&!i&&u==null&&l===M&&!t.wasReplaced&&!t.wasSelfCanceled;let n,c;return t.wasReplaced?(n={kind:"stated",delivered:"replaced (overlap=replace)"},c="release"):p?(n={kind:"stated",delivered:k},c=v(e,o,d)??"release"):(n={kind:"disposed",ctx:{runId:s,startedAtIso:o,exitCode:i?-1:l,timedOut:i,runTimeoutS:e.run_timeout_s,processErrorMessage:u!=null?u.message:null,stdoutHead:t.stdoutHead,stdoutSha256:t.stdoutSha256,stderrHead:t.stderrHead},selfCanceled:t.wasSelfCanceled},c=r?"release":{kind:"clear"}),w(e,{outOfBand:r,outcome:n,record:{runId:s,startedAtIso:o,finishedAtMs:d,durationMs:d-t.startedAtMs,exitCode:i?-1:l,stdoutHead:t.stdoutHead===""?null:t.stdoutHead,stderrHead:u!=null?`run process error: ${u.message}`.slice(0,h):t.stderrHead===""?null:t.stderrHead},lease:c})}f(q,"settleClosedRun");function C(e,t,s,r){const o=Date.now(),d=`${s}: ${r.message}`.slice(0,h);return w(e,{outOfBand:t.outOfBand,outcome:{kind:"disposed",ctx:{runId:t.runId,startedAtIso:t.startedAtIso,exitCode:null,timedOut:!1,runTimeoutS:e.run_timeout_s,processErrorMessage:r.message,stdoutHead:"",stdoutSha256:x,stderrHead:d}},record:{runId:t.runId,startedAtIso:t.startedAtIso,finishedAtMs:o,durationMs:o-t.startedAtMs,exitCode:null,stdoutHead:null,stderrHead:d},lease:"release"})}f(C,"settleUnspawnedRun");function J(e,t){let s;try{s=F(e.recur,new Date(t))}catch(r){return N({level:"error",event:"cron.recur.unparseable",error:r,fields:{cron_id:e.cron_id,name:e.name,recur:e.recur}}),$(e.cron_id,"paused"),new Error(`unparseable recurrence ${JSON.stringify(e.recur)}: ${r.message} \u2014 this cron cannot be rescheduled until its recurrence is fixed (\`crtr cron cancel\` and re-arm it), so it has been paused.`)}return P(e.cron_id,s),null}f(J,"advanceRecurrence");function V(e,t){const{outOfBand:s}=t;return new Promise((r,o)=>{const d=O(),l=Date.now(),i=new Date(l).toISOString(),u={runId:d,outOfBand:s,startedAtIso:i,startedAtMs:l};if(!b(e.cron_id,S,i,s)){r(null);return}let p;try{if({env:p}=g(e,d),!s&&e.recur!=null){const n=J(e,l);if(n!==null)throw n}}catch(n){C(e,u,"run could not be armed",n).then(r,o);return}Y({command:e.command,cwd:e.cwd,env:p,app:e.grantee,...e.anchor_node===null?{}:{nodeId:e.anchor_node},timeoutMs:e.run_timeout_s*1e3,headBytes:h}).then(n=>{if(n.pid===null){n.completion.then(a=>{C(e,u,"run failed to spawn",a.processError??new Error("bash did not provide a process id")).then(r,o)},o);return}let c=!1;const _=f(()=>{n.completion.then(a=>{const m=R(e.cron_id),H=m!==void 0&&m.runId===d&&m.replaced,E=m!==void 0&&m.runId===d&&m.selfCanceled;if(A(e.cron_id,d),c){r(null);return}q(e,{runId:d,outOfBand:s,startedAtIso:i,startedAtMs:l,finishedAtMs:Date.now(),code:a.exitCode,timedOut:a.timedOut,processError:a.processError,stdoutHead:I(a.stdout,a.stdoutTruncated),stderrHead:I(a.stderr,a.stderrTruncated),stdoutSha256:a.stdoutSha256,wasReplaced:H,wasSelfCanceled:E}).then(r,o)},o)},"settleCommand");if(!y(e.cron_id,S,i,n.pid)){c=!0,n.terminate(),_();return}T(e.cron_id,{runId:d,replaced:!1,selfCanceled:!1,kill:n.terminate}),_()},n=>{C(e,u,"run failed to spawn",n).then(r,o)})})}f(V,"executeCron");function oe(e,t={}){const s=new Date(e).toISOString();L(s),B(e,s);const r=[];for(const o of U(s)){const d=V(o,{outOfBand:!1}).then(()=>{});r.push(d),t.register?.(d)}for(const o of r)o.catch(()=>{});return r}f(oe,"runDueCrons");export{ae as CRON_OUTPUT_HEAD_BYTES,ue as cronDaemonInstanceId,V as executeCron,le as markSelfCanceledCronRun,fe as recoverStaleCronLeases,oe as runDueCrons};

package/dist/daemon/crtrd-cli.js

@@ -1 +1 @@
-var i=Object.defineProperty;var n=(r,e)=>i(r,"name",{value:e,configurable:!0});import"../suppress-experimental-warnings.js";import{runDaemon as c}from"./crtrd.js";function s(r){for(let e=0;e<r.length;e++){const t=r[e];if(t==="--tcp")return r[e+1];if(t!==void 0&&t.startsWith("--tcp="))return t.slice(6)}}n(s,"parseTcpArg");function a(r){return r.includes("--prepare")}n(a,"parsePrepareArg");const p=process.argv.slice(2);await c({tcp:s(p),prepare:a(p)});
+var i=Object.defineProperty;var n=(r,e)=>i(r,"name",{value:e,configurable:!0});import"../suppress-experimental-warnings.js";import{runDaemon as c}from"./crtrd.js";import{configureDaemonHttpDispatcher as o}from"./http-dispatcher.js";function a(r){for(let e=0;e<r.length;e++){const t=r[e];if(t==="--tcp")return r[e+1];if(t!==void 0&&t.startsWith("--tcp="))return t.slice(6)}}n(a,"parseTcpArg");function s(r){return r.includes("--prepare")}n(s,"parsePrepareArg"),o();const p=process.argv.slice(2);await c({tcp:a(p),prepare:s(p)});

package/dist/daemon/crtrd.js

@@ -1,8 +1,9 @@
-var ne=Object.defineProperty;var o=(t,i)=>ne(t,"name",{value:i,configurable:!0});import{writeFileSync as ie,readFileSync as oe,rmSync as ae,mkdirSync as se}from"node:fs";import{dirname as ce}from"node:path";import{randomBytes as le}from"node:crypto";import{crtrHome as de}from"../core/canvas/paths.js";import{listNodeMemoryTargets as B,listNodesForSupervision as me}from"../core/canvas/index.js";import{createApiServer as pe}from"./api/server.js";import{reconcileUndeliveredTickets as fe}from"./human/sweep.js";import{resetHandedOffDeliveries as ue}from"../core/canvas/deliveries.js";import{sweepReviews as he}from"./review/sweep.js";import{pidfilePath as R}from"./pidfile.js";import{rendererWarning as ge}from"../core/runtime/package-health.js";import{DEFAULT_INTERVAL_MS as ve}from"./supervise-cadence.js";import{BrokerSupervisionReconciler as we}from"./reconcilers/broker-supervision.js";import{ControllerDeathReconciler as ye}from"./reconcilers/controller-death.js";import{NodeLifecycleReconciler as Se}from"./reconcilers/node-lifecycle/tick.js";import{NodeDeadlineReconciler as ke}from"./reconcilers/node-deadline.js";import{CronLaneReconciler as be}from"./reconcilers/cron-lane.js";import{DeliveryLaneReconciler as _e}from"./reconcilers/delivery-lane.js";import{migrateLegacyExecutionIdentities as Ee}from"../core/canvas/executions.js";import{PendingReviewSubmitReconciler as Pe}from"./reconcilers/pending-review-submit.js";import{StorageMaintenanceReconciler as De}from"./reconcilers/storage-maintenance.js";import{BashDeadlineReconciler as Ie}from"./reconcilers/bash-deadline.js";import{captureLivenessSnapshot as j,capturePidCommand as Re,captureTeardownSnapshot as z,isPidAlive as Te,isAnyPidAlive as H,killProcessTreePids as W}from"../core/canvas/pid.js";import{bindFleet as Me,boundFleet as xe}from"../core/runtime/fleet.js";import{bindDaemonControl as Le,clearDaemonControl as Ae}from"./control.js";import{execDaemon as Ce,spawnDaemon as $e}from"./manage.js";import{reconcileAndMigrateBoot as Oe}from"../core/canvas/boot.js";import{resolveInstallId as Fe}from"../core/canvas/install-id.js";import{setInstallId as Ge}from"../core/runtime/nodes.js";import{claimDaemonOwnership as Ne,releaseDaemonOwnership as K}from"../core/canvas/daemon-owner.js";import{migrate as Be,openDb as je}from"../core/canvas/db.js";import{prewarmRecentRecipes as ze,reapStaleSpares as He}from"../core/runtime/warm-pool.js";import{DaemonFleet as We}from"./fleet.js";import{BOOT_MIGRATIONS as Ke}from"./boot-migrations.js";import{emitEvent as u}from"../core/events/emit.js";import{operationIdContext as v}from"../core/events/operation-id.js";import{bindDaemonEventSource as Ue}from"../core/events/source.js";import{activateOnDiskMigrations as Ve,MigrationBlockedError as qe,runForcedOnDiskMigrations as Qe}from"../migrations/activation.js";import{profilesRoot as Je,withProfileManifestLock as Xe}from"../core/profiles/manifest.js";import{runProfileManifestMigrations as Ye}from"../migrations/profile-manifests.js";import{convertLegacyProviderStore as Ze,convertLegacyScopedStore as er}from"../core/scoped-state/migrate.js";import{userScopeRoot as rr}from"../core/scope.js";import{piAgentDir as tr}from"../core/runtime/package-health.js";function T(t,i){return t.includes(` --canvas-home ${i} `)}o(T,"brokerCommandDeclaresCanvasHome");function M(t){return/ --epoch (\S+) /.exec(t)?.[1]??null}o(M,"brokerCommandEpoch");const nr=5e3,U=150;async function ir(t){const i=j();if(i===null)throw u({level:"error",event:"daemon.census.snapshot_failed",fields:{invariant:"prior-epoch brokers are reaped before readiness"}}),new Error("prior-epoch broker census could not capture the process table");const s=de(),c=[];for(const[a,p]of i.processes){const l=p.command;if(p.zombie||!l.includes("broker-cli.js")||!T(l,s)||M(l)===t)continue;const S=l.trim().split(/\s+/).at(-1)??"";S===""||S.endsWith("broker-cli.js")||c.push({pid:a,nodeId:S})}let f=0;const n=[];for(const a of c){const p=Re(a.pid);if(p===null||!p.includes("broker-cli.js")||!T(p,s)||M(p)===t||p.trim().split(/\s+/).at(-1)!==a.nodeId)continue;const l=z(a.pid,null);if(!l.reused){try{process.kill(a.pid,"SIGTERM")}catch{continue}f++,n.push({pid:a.pid,snap:l})}}const w=Date.now()+nr;for(;Date.now()<w&&n.some(a=>H(a.snap.tree.length>0?a.snap.tree:[a.pid]));)await new Promise(a=>setTimeout(a,U));let g=0;for(const a of n){const p=a.snap.tree.length>0?a.snap.tree:[a.pid];H(p)&&(W(p,"SIGKILL",a.snap.identities),g++)}g>0&&await new Promise(a=>setTimeout(a,U));const h=j();if(h===null)throw u({level:"error",event:"daemon.census.snapshot_failed",fields:{invariant:"prior-epoch brokers are reaped before readiness",stage:"final"}}),new Error("prior-epoch broker census could not capture the final process table");const y=[];for(const[a,p]of h.processes){const l=p.command;p.zombie||!l.includes("broker-cli.js")||T(l,s)&&M(l)!==t&&y.push(a)}if(y.length>0)throw new Error(`prior-epoch broker census could not prove termination of pid(s): ${y.join(", ")}`);u({level:"info",event:"daemon.census.completed",fields:{prior_epoch_brokers:c.length,sigtermed:f,sigkilled:g}})}o(ir,"reapPriorEpochBrokers");const or=5e3;async function ar(t){const i=Array.from(t.entries());if(i.length===0)return;const s=i.map(([,n])=>({pid:n.pid,snap:z(n.pid,null),exited:n.handle.exited}));for(const n of s)if(!n.snap.reused)try{process.kill(n.pid,"SIGTERM")}catch{}const c=new Promise(n=>{setTimeout(n,or).unref()});await Promise.allSettled(s.map(n=>Promise.race([n.exited.then(()=>{}),c])));const f=[];for(const n of s)Te(n.pid)&&(W(n.snap.tree.length>0?n.snap.tree:[n.pid],"SIGKILL",n.snap.identities),f.push(n));await Promise.all(f.map(n=>n.exited)),u({level:"info",event:"daemon.fleet_teardown.completed",fields:{brokers:s.length,sigkilled:f.length}})}o(ar,"teardownFleet");function sr(){se(ce(R()),{recursive:!0}),ie(R(),String(process.pid),"utf8")}o(sr,"writePidfile");function V(t){return typeof t=="object"&&t!==null&&t.code==="ENOENT"}o(V,"isMissingPathError");function cr(t){const i=R();let s;try{s=oe(i,"utf8")}catch(c){if(V(c))return;throw c}if(s.trim()!==String(t))throw new Error(`daemon readiness mirror does not name this invocation (expected pid ${t})`);try{ae(i)}catch(c){if(V(c))return;throw c}}o(cr,"removeOwnedPidfileMirror");const lr={acceptsDetachedWork:o(()=>!0,"acceptsDetachedWork"),registerDetached:o(t=>{t.catch(()=>{})},"registerDetached")},x=new we,dr=new ye,mr=new Se,pr=new ke,fr=new be,ur=new _e,hr=new Pe,gr=new De,vr=new Ie;async function wr(t=Date.now(),i=lr){const s=xe(),c=await x.runFleetPreamble(s);let f,n;try{const g=me();f=g.filter(h=>h.status==="active"||h.status==="idle"),n=g.filter(h=>h.status==="done"||h.status==="canceled"||h.status==="dead")}catch(g){u({level:"error",event:"canvas.node_list.failed",error:g});return}await x.run(t,{rows:f,fleet:s,lifecycle:i}),dr.run(t,{rows:f});const w=await mr.run(t,{rows:[...f,...n],fleet:s});pr.run(t),fr.run(t,{lifecycle:i}),ur.run(t,{lifecycle:i}),hr.run(t,{lifecycle:i}),gr.run(t,{lifecycle:i,fleet:s}),await vr.run(t,{rows:f}),x.warnIfSaturated({fleet:s,lifecycle:i,thresholds:c,frozen:w})}o(wr,"superviseTick");async function yr(t={}){const i=Ne(le(16).toString("hex"));if(!i.claimed){if(i.reason==="incumbent_alive")process.stderr.write(`[crtrd] already running (pid ${i.incumbentPid??"?"})
-`);else{const e=[i.incumbentPid!==void 0?`pid ${i.incumbentPid}`:void 0,i.verdict!==void 0?`verdict ${i.verdict}`:void 0].filter(d=>d!==void 0),r=e.length>0?` (${e.join(", ")})`:"";process.stderr.write(`[crtrd] claim lost: ${i.reason}${r}
-`)}return async()=>{}}const s=i.claim;try{await ir(s.token),Ye(Je(),{dryRun:!1,withLock:Xe}),er({kind:"user",root:rr()}),await Ze(tr()),Be(je())}catch(e){try{const{released:r}=K(s);if(!r)throw new Error("daemon ownership claim was not released")}catch(r){throw new AggregateError([e,r],"daemon startup failed and cleanup also failed")}throw e}let c=!0,f,n=Promise.resolve(),w=!1,g,h;const y=new Set;let a=!1,p=!1,l,S,L=!1,m={phase:"initializing",message:"daemon startup is initializing its on-disk memory migration and normal services are unavailable",blockerPaths:[]},_="initial startup activation",q=null;function Q(){return m.phase==="ready"?null:{phase:m.phase,message:m.message,blockerPaths:m.blockerPaths}}o(Q,"startupBlock");function A(e){y.add(e),e.finally(()=>{y.delete(e)}).catch(()=>{})}o(A,"registerDetached");const J={acceptsDetachedWork:o(()=>c,"acceptsDetachedWork"),registerDetached:A};async function X(){try{c=!1,g!==void 0&&(clearInterval(g),g=void 0);let e;do e=n,await e;while(e!==n);for(;y.size>0;)await Promise.allSettled([...y]);if(h!==void 0&&(await ar(h),h.dispose()),S!==void 0&&!L&&(L=!0,await S.close()),a||(cr(process.pid),a=!0),a&&!p){const{released:r}=K(s);if(!r)throw new Error("daemon ownership claim was not released");p=!0}}finally{Ae(),process.off("SIGINT",O),process.off("SIGTERM",F),process.off("exit",G)}}o(X,"cleanupAttempt");const P=1e3;let C=!1;function Y(){return C?{graceMs:P}:(C=!0,v.fresh(()=>{u({level:"info",event:"daemon.handover.armed",fields:{pid:process.pid,grace_ms:P}})}),setTimeout(()=>{Z()},P),{graceMs:P})}o(Y,"requestHandover");async function Z(){try{await k()}catch(e){const r=e instanceof Error?e.stack??e.message:String(e);process.stderr.write(`[crtrd] handover cleanup failed:
+var ve=Object.defineProperty;var a=(t,o)=>ve(t,"name",{value:o,configurable:!0});import{writeFileSync as ge,readFileSync as we,rmSync as ye,mkdirSync as V,existsSync as b,chmodSync as Se}from"node:fs";import{createServer as J}from"node:http";import{dirname as _e}from"node:path";import{envCrtrdTcp as be}from"../shared/env.js";import{serveCanvasConversationStore as ke}from"../core/canvas/sessions.js";import{pollRunObservers as Ee}from"./runs/observer.js";import{randomBytes as Pe}from"node:crypto";import{apiSocketPath as Ie,crtrHome as Te}from"../core/canvas/paths.js";import{activeAppUsers as Re}from"../core/spaces/users.js";import{ensureAppSpace as xe,ensureUserFiles as De}from"../core/spaces/space.js";import{LAUNCHER_SOCKET as E}from"../launcher/spec.js";import{launcherRequest as T}from"../launcher/client.js";import{initializeEmptyLayout as Ce,layoutNeedsMigration as Me,socketDir as Q}from"../core/layout.js";import{listNodeMemoryTargets as Y,listNodesForSupervision as Ae}from"../core/canvas/index.js";import{createApiServer as Le}from"./api/server.js";import{createAppListener as Ne}from"./api/app-listener.js";import{installLocalTerminalGrant as Ge}from"../core/grants/local.js";import{createGrantSync as $e,GRANT_SYNC_INTERVAL_S as Oe}from"../core/grants/sync.js";import{runRemovalCascades as Fe}from"../core/grants/remove.js";import{sweepSandboxes as je}from"../core/grants/on-sync.js";import{hasSyncedGrants as He}from"../core/grants/mirror.js";import{readConfig as ze}from"../core/config.js";import{reconcileUndeliveredTickets as Be}from"./human/sweep.js";import{resetHandedOffDeliveries as Ue}from"../core/canvas/deliveries.js";import{sweepReviews as qe}from"./review/sweep.js";import{pidfilePath as $}from"./pidfile.js";import{rendererWarning as We}from"../core/runtime/package-health.js";import{DEFAULT_INTERVAL_MS as Ke}from"./supervise-cadence.js";import{BrokerSupervisionReconciler as Ve}from"./reconcilers/broker-supervision.js";import{ControllerDeathReconciler as Je}from"./reconcilers/controller-death.js";import{NodeLifecycleReconciler as Qe}from"./reconcilers/node-lifecycle/tick.js";import{NodeDeadlineReconciler as Ye}from"./reconcilers/node-deadline.js";import{CronLaneReconciler as Xe}from"./reconcilers/cron-lane.js";import{DeliveryLaneReconciler as Ze}from"./reconcilers/delivery-lane.js";import{migrateLegacyExecutionIdentities as er}from"../core/canvas/executions.js";import{revokePriorEpochNodeTokens as rr}from"../core/canvas/node-tokens.js";import{PendingReviewSubmitReconciler as tr}from"./reconcilers/pending-review-submit.js";import{StorageMaintenanceReconciler as nr}from"./reconcilers/storage-maintenance.js";import{BashDeadlineReconciler as or}from"./reconcilers/bash-deadline.js";import{captureLivenessSnapshot as X,capturePidCommand as ir,captureTeardownSnapshot as Z,isPidAlive as ar,isAnyPidAlive as ee,killProcessTreePids as re}from"../core/canvas/pid.js";import{bindFleet as sr,boundFleet as cr}from"../core/runtime/fleet.js";import{bindDaemonControl as lr,clearDaemonControl as dr}from"./control.js";import{execDaemon as pr,spawnDaemon as mr}from"./manage.js";import{reconcileAndMigrateBoot as fr}from"../core/canvas/boot.js";import{resolveInstallId as ur}from"../core/canvas/install-id.js";import{setInstallId as hr}from"../core/runtime/nodes.js";import{claimDaemonOwnership as vr,releaseDaemonOwnership as te}from"../core/canvas/daemon-owner.js";import{migrate as gr,openDb as wr}from"../core/canvas/db.js";import{prewarmRecentRecipes as yr,reapStaleSpares as Sr}from"../core/runtime/warm-pool.js";import{DaemonFleet as _r}from"./fleet.js";import{BOOT_MIGRATIONS as br}from"./boot-migrations.js";import{applyJoinedOwner as kr}from"./joined-owner.js";import{emitEvent as h}from"../core/events/emit.js";import{operationIdContext as _}from"../core/events/operation-id.js";import{bindDaemonEventSource as Er}from"../core/events/source.js";import{activateOnDiskMigrations as Pr,MigrationBlockedError as Ir,runForcedOnDiskMigrations as Tr}from"../migrations/activation.js";import{convertLegacyProviderStore as Rr,convertLegacyScopedStore as xr}from"../core/scoped-state/migrate.js";import{userScopeRoot as Dr}from"../core/scope.js";import{secretsDir as Cr}from"../core/layout.js";function O(t,o){return t.includes(` --canvas-home ${o} `)}a(O,"brokerCommandDeclaresCanvasHome");function F(t){return/ --epoch (\S+) /.exec(t)?.[1]??null}a(F,"brokerCommandEpoch");const Mr=5e3,ne=150;async function Ar(t){const o=X();if(o===null)throw h({level:"error",event:"daemon.census.snapshot_failed",fields:{invariant:"prior-epoch brokers are reaped before readiness"}}),new Error("prior-epoch broker census could not capture the process table");const s=Te(),m=[];for(const[i,p]of o.processes){const g=p.command;if(p.zombie||!g.includes("broker-cli.js")||!O(g,s)||F(g)===t)continue;const y=g.trim().split(/\s+/).at(-1)??"";y===""||y.endsWith("broker-cli.js")||m.push({pid:i,nodeId:y})}let f=0;const n=[];for(const i of m){const p=ir(i.pid);if(p===null||!p.includes("broker-cli.js")||!O(p,s)||F(p)===t||p.trim().split(/\s+/).at(-1)!==i.nodeId)continue;const g=Z(i.pid,null);if(!g.reused){try{process.platform==="linux"&&b(E)?await T({operation:"stop",pid:i.pid}):process.kill(i.pid,"SIGTERM")}catch{continue}f++,n.push({pid:i.pid,snap:g})}}const w=Date.now()+Mr;for(;Date.now()<w&&n.some(i=>ee(i.snap.tree.length>0?i.snap.tree:[i.pid]));)await new Promise(i=>setTimeout(i,ne));let v=0;for(const i of n){const p=i.snap.tree.length>0?i.snap.tree:[i.pid];ee(p)&&(process.platform==="linux"&&b(E)?await T({operation:"stop",pid:i.pid}):re(p,"SIGKILL",i.snap.identities),v++)}v>0&&await new Promise(i=>setTimeout(i,ne));const c=X();if(c===null)throw h({level:"error",event:"daemon.census.snapshot_failed",fields:{invariant:"prior-epoch brokers are reaped before readiness",stage:"final"}}),new Error("prior-epoch broker census could not capture the final process table");const d=[];for(const[i,p]of c.processes){const g=p.command;p.zombie||!g.includes("broker-cli.js")||O(g,s)&&F(g)!==t&&d.push(i)}if(d.length>0)throw new Error(`prior-epoch broker census could not prove termination of pid(s): ${d.join(", ")}`);h({level:"info",event:"daemon.census.completed",fields:{prior_epoch_brokers:m.length,sigtermed:f,sigkilled:v}})}a(Ar,"reapPriorEpochBrokers");const Lr=5e3;async function Nr(t){const o=Array.from(t.entries());if(o.length===0)return;const s=o.map(([,n])=>({pid:n.pid,snap:Z(n.pid,null),exited:n.handle.exited}));for(const n of s)if(!n.snap.reused)try{process.platform==="linux"&&b(E)?await T({operation:"stop",pid:n.pid}):process.kill(n.pid,"SIGTERM")}catch{}const m=new Promise(n=>{setTimeout(n,Lr).unref()});await Promise.allSettled(s.map(n=>Promise.race([n.exited.then(()=>{}),m])));const f=[];for(const n of s)ar(n.pid)&&(process.platform==="linux"&&b(E)?await T({operation:"stop",pid:n.pid}):re(n.snap.tree.length>0?n.snap.tree:[n.pid],"SIGKILL",n.snap.identities),f.push(n));await Promise.all(f.map(n=>n.exited)),h({level:"info",event:"daemon.fleet_teardown.completed",fields:{brokers:s.length,sigkilled:f.length}})}a(Nr,"teardownFleet");function oe(){V(_e($()),{recursive:!0}),ge($(),String(process.pid),"utf8")}a(oe,"writePidfile");function ie(t){return typeof t=="object"&&t!==null&&t.code==="ENOENT"}a(ie,"isMissingPathError");function ae(t){const o=$();let s;try{s=we(o,"utf8")}catch(m){if(ie(m))return;throw m}if(s.trim()!==String(t))throw new Error(`daemon readiness mirror does not name this invocation (expected pid ${t})`);try{ye(o)}catch(m){if(ie(m))return;throw m}}a(ae,"removeOwnedPidfileMirror");const Gr={acceptsDetachedWork:a(()=>!0,"acceptsDetachedWork"),registerDetached:a(t=>{t.catch(()=>{})},"registerDetached")},j=new Ve,$r=new Je,Or=new Qe,Fr=new Ye,jr=new Xe,Hr=new Ze,zr=new tr,Br=new nr,Ur=new or;async function qr(t=Date.now(),o=Gr){const s=cr(),m=await j.runFleetPreamble(s);let f,n;try{const v=Ae();f=v.filter(c=>c.status==="active"||c.status==="idle"),n=v.filter(c=>c.status==="done"||c.status==="canceled"||c.status==="dead")}catch(v){h({level:"error",event:"canvas.node_list.failed",error:v});return}await j.run(t,{rows:f,fleet:s,lifecycle:o}),$r.run(t,{rows:f});const w=await Or.run(t,{rows:[...f,...n],fleet:s});Fr.run(t),jr.run(t,{lifecycle:o}),Hr.run(t,{lifecycle:o}),zr.run(t,{lifecycle:o}),Br.run(t,{lifecycle:o,fleet:s}),Ee(),await Ur.run(t,{rows:f}),j.warnIfSaturated({fleet:s,lifecycle:o,thresholds:m,frozen:w})}a(qr,"superviseTick");async function Wr(t){V(Q(),{recursive:!0,mode:493}),process.platform==="linux"&&Se(Q(),493);const o=Ie();if(b(o))throw new Error(`layout refusal cannot bind occupied socket: ${o}`);const s=J((c,d)=>{if(c.method==="GET"&&c.url==="/healthz"){d.writeHead(200,{"content-type":"application/json; charset=utf-8"}),d.end(JSON.stringify({ok:!1,daemon_up:!0,store_accessible:!1,brokers_reconciled:!1,startup_phase:"blocked",startup_blocked:"layout_migration_required"}));return}d.writeHead(503,{"content-type":"application/json; charset=utf-8"}),d.end(JSON.stringify({error:{code:"layout_migration_required",message:"run crtr sys migrate while the runtime is offline",type:"server_error",origin:"runtime",retryable:!1}}))});await new Promise((c,d)=>{s.once("error",d),s.listen(o,()=>{s.off("error",d),c()})});let m;const f=t.tcp??be();if(f){const c=/^(.*):(\d+)$/.exec(f);if(!c||Number(c[2])>65535)throw new Error(`invalid refusal TCP address: ${f}`);const d=J(s.listeners("request")[0]);await new Promise((i,p)=>{d.once("error",p),d.listen(Number(c[2]),c[1],()=>{d.off("error",p),i()})}),m=d}oe();let n;const w=a(()=>(n??=(async()=>{s.closeAllConnections(),m?.closeAllConnections(),await Promise.all([s,m].filter(c=>c!==void 0).map(c=>new Promise((d,i)=>c.close(p=>p?i(p):d())))),ae(process.pid),process.off("SIGINT",v),process.off("SIGTERM",v)})(),n),"cleanup"),v=a(()=>{w().then(()=>process.exit(0),c=>{process.stderr.write(`[crtrd] layout refusal cleanup failed: ${String(c)}
+`),process.exit(1)})},"onSignal");return process.on("SIGINT",v),process.on("SIGTERM",v),w}a(Wr,"serveLayoutRefusal");async function Kr(t={}){if(Me())return Wr(t);Ce();const o=vr(Pe(16).toString("hex"));if(!o.claimed){if(o.reason==="incumbent_alive")process.stderr.write(`[crtrd] already running (pid ${o.incumbentPid??"?"})
+`);else{const e=[o.incumbentPid!==void 0?`pid ${o.incumbentPid}`:void 0,o.verdict!==void 0?`verdict ${o.verdict}`:void 0].filter(l=>l!==void 0),r=e.length>0?` (${e.join(", ")})`:"";process.stderr.write(`[crtrd] claim lost: ${o.reason}${r}
+`)}return async()=>{}}const s=o.claim;let m=null;try{await Ar(s.token),xr({kind:"user",root:Dr()}),await Rr(Cr()),gr(wr()),m=kr(),process.platform==="linux"&&b(E)&&await T({operation:"users.sync",users:Re()}),rr(s.token)}catch(e){try{const{released:r}=te(s);if(!r)throw new Error("daemon ownership claim was not released")}catch(r){throw new AggregateError([e,r],"daemon startup failed and cleanup also failed")}throw e}let f=!0,n,w=Promise.resolve(),v=!1,c,d;const i=new Set;let p=!1,g=!1,y,C,H=!1,M,R,x,A,u={phase:"initializing",message:"daemon startup is initializing its on-disk memory migration and normal services are unavailable",blockerPaths:[]},P="initial startup activation",se=null;function ce(){return u.phase==="ready"?null:{phase:u.phase,message:u.message,blockerPaths:u.blockerPaths}}a(ce,"startupBlock");function I(e){i.add(e),e.finally(()=>{i.delete(e)}).catch(()=>{})}a(I,"registerDetached");const le={acceptsDetachedWork:a(()=>f,"acceptsDetachedWork"),registerDetached:I};async function de(){try{f=!1,c!==void 0&&(clearInterval(c),c=void 0),x!==void 0&&(clearInterval(x),x=void 0);let e;do e=w,await e;while(e!==w);for(;i.size>0;)await Promise.allSettled([...i]);if(d!==void 0&&(await Nr(d),d.dispose()),C!==void 0&&!H&&(H=!0,await C.close()),R!==void 0){const r=R;R=void 0,await r.close()}if(M!==void 0){const r=M;M=void 0,await r.close()}if(p||(ae(process.pid),p=!0),p&&!g){const{released:r}=te(s);if(!r)throw new Error("daemon ownership claim was not released");g=!0}}finally{dr(),process.off("SIGINT",U),process.off("SIGTERM",q),process.off("exit",W)}}a(de,"cleanupAttempt");const L=1e3;let z=!1;function pe(){return z?{graceMs:L}:(z=!0,_.fresh(()=>{h({level:"info",event:"daemon.handover.armed",fields:{pid:process.pid,grace_ms:L}})}),setTimeout(()=>{me()},L),{graceMs:L})}a(pe,"requestHandover");async function me(){try{await k()}catch(e){const r=e instanceof Error?e.stack??e.message:String(e);process.stderr.write(`[crtrd] handover cleanup failed:
 ${r}
-`),process.exit(1)}try{process.pid===1&&await Ce();const e=await $e();v.fresh(()=>{u({level:"info",event:"daemon.handover.completed",fields:{predecessor_pid:process.pid,successor_pid:e.pid??e.existing_pid??null,spawned:e.started}})})}catch(e){v.fresh(()=>{u({level:"error",event:"daemon.handover.successor_failed",error:e})});const r=e instanceof Error?e.message:String(e);process.stderr.write(`[crtrd] handover successor failed to start: ${r}
-`),process.exit(1)}process.exit(0)}o(Z,"performHandover");function k(){if(l!==void 0)return l;const e=X();return l=e,e.then(()=>{l===e&&(l=void 0)},()=>{l===e&&(l=void 0)}),e}o(k,"requestCleanup");async function $(e){try{await k(),process.exit(0)}catch(r){process.exitCode=1;const d=r instanceof Error?r.stack??`${r.name}: ${r.message}`:String(r);process.stderr.write(`[crtrd] ${e} cleanup failed:
-${d}
-`),process.exit(1)}}o($,"handleSignal");function O(){$("SIGINT")}o(O,"onSigint");function F(){$("SIGTERM")}o(F,"onSigterm");function G(){k().catch(()=>{})}o(G,"onExit");function D(e){c&&(n=n.then(e).then(()=>{},r=>{v.fresh(()=>{u({level:"error",event:"daemon.lane_job.failed",error:r})})}))}o(D,"enqueue");function N(){!c||w||(w=!0,D(async()=>{if(w=!1,!!c)try{await wr(Date.now(),J)}catch(e){v.fresh(()=>{u({level:"error",event:"daemon.tick.failed",error:e})})}}))}o(N,"enqueueTick");let E=null;async function ee(){if(E!==null)throw{status:500,code:"admission_failed",message:`daemon admission previously failed: ${E instanceof Error?E.message:String(E)}`};if(m.phase==="ready")return{admitted:!1,already_admitted:!0,startup_phase:"ready"};if(m.phase!=="prepared"&&m.phase!=="recovering")throw{status:409,code:"not_prepared",message:m.message};const e=m.phase==="prepared";try{return await I(),m={phase:"ready",message:"",blockerPaths:[]},e?{admitted:!0,already_admitted:!1,startup_phase:"ready"}:{admitted:!1,already_admitted:!0,startup_phase:"ready"}}catch(r){throw E=r,{status:500,code:"admission_failed",message:`daemon admission failed: ${r instanceof Error?r.message:String(r)}`}}}o(ee,"admitStartup");async function re(e){if(_!==null)throw{status:409,code:"migration_in_progress",message:`on-disk migration is already running (${_})`};_="repair";try{const r=await Qe({dryRun:e.dryRun,explicitDirs:e.dirs,nodes:B()});if(e.dryRun||!r.finalVerificationSucceeded||m.phase!=="blocked")return{result:r,resumed:!1};if(t.prepare)return m={phase:"prepared",message:"daemon storage is prepared and normal services are unavailable until admission",blockerPaths:[]},{result:r,resumed:!1};try{return await I(),m={phase:"ready",message:"",blockerPaths:[]},{result:r,resumed:!0}}catch(d){const b=d instanceof Error?d.message:String(d);return setTimeout(()=>{k().catch(()=>{})},1e3),{result:r,resumed:!1,resumeError:b}}}finally{_=null}}o(re,"repairMigrations");async function te(){f=t.intervalMs??ve;const e=s.token;h=new We({epoch:e,enqueue:D}),Me(h),m={phase:"recovering",message:"daemon startup recovery is running and normal services are unavailable",blockerPaths:[]},v.fresh(()=>{u({level:"info",event:"daemon.started",fields:{pid:process.pid,interval_ms:f}})});const r=Fe();Ge(r),v.fresh(()=>{u({level:"info",event:"daemon.install_id.resolved",fields:{install_id:r}})}),v.fresh(()=>{let d;try{d=ge()}catch{return}d!==null&&u({level:"warn",event:"daemon.startup.warning",fields:{stage:"termrender",warning:d.slice(0,2048)}})}),await v.fresh(async()=>{await he(),await fe(),ue(Date.now())}),v.fresh(()=>{const{reconcile:d,migrated:b}=Oe(Ee);d.changed&&u({level:"info",event:"daemon.boot_change.reconciled",fields:{cleared_count:d.cleared.length,same_boot_proven:d.sameBootProven}}),b.length>0&&u({level:"info",event:"daemon.pid_identity.migrated",fields:{migrated_count:b.length}})}),v.fresh(()=>{for(const d of Ke){const b=d.apply();b.changed&&u({level:"info",event:"daemon.boot_migration.applied",fields:{migration:d.id,...b.summary}})}}),D(()=>{He(),ze()}),g=setInterval(N,f),N()}o(te,"completeStartup");function I(){return q??=te().catch(e=>{throw m={phase:"initializing",message:"daemon startup recovery failed and normal services are unavailable",blockerPaths:[]},e})}o(I,"resumeStartup");try{process.on("SIGINT",O),process.on("SIGTERM",F),process.on("exit",G),Ue();const e=s.token;Le({epoch:e,requestHandover:Y,registerDetached:A,startupBlock:Q,admitStartup:ee,repairMigrations:re}),sr(),S=pe({tcp:t.tcp}),await S.ready;try{await Ve({nodes:B()})}catch(r){if(_=null,r instanceof qe)return m={phase:"blocked",message:r.message,blockerPaths:r.blockerPaths},k;throw r}try{t.prepare?m={phase:"prepared",message:"daemon storage is prepared and normal services are unavailable until admission",blockerPaths:[]}:(await I(),m={phase:"ready",message:"",blockerPaths:[]})}finally{_=null}return k}catch(e){try{await k()}catch(r){throw new AggregateError([e,r],"daemon startup failed and cleanup also failed")}throw e}}o(yr,"runDaemon");var dt=yr;export{T as brokerCommandDeclaresCanvasHome,M as brokerCommandEpoch,dt as default,yr as runDaemon,wr as superviseTick};
+`),process.exit(1)}try{process.platform==="linux"&&b(E)&&(await T({operation:"daemon.handover"}),process.exit(0)),process.pid===1&&await pr();const e=await mr();_.fresh(()=>{h({level:"info",event:"daemon.handover.completed",fields:{predecessor_pid:process.pid,successor_pid:e.pid??e.existing_pid??null,spawned:e.started}})})}catch(e){_.fresh(()=>{h({level:"error",event:"daemon.handover.successor_failed",error:e})});const r=e instanceof Error?e.message:String(e);process.stderr.write(`[crtrd] handover successor failed to start: ${r}
+`),process.exit(1)}process.exit(0)}a(me,"performHandover");function k(){if(y!==void 0)return y;const e=de();return y=e,e.then(()=>{y===e&&(y=void 0)},()=>{y===e&&(y=void 0)}),e}a(k,"requestCleanup");async function B(e){try{await k(),process.exit(0)}catch(r){process.exitCode=1;const l=r instanceof Error?r.stack??`${r.name}: ${r.message}`:String(r);process.stderr.write(`[crtrd] ${e} cleanup failed:
+${l}
+`),process.exit(1)}}a(B,"handleSignal");function U(){B("SIGINT")}a(U,"onSigint");function q(){B("SIGTERM")}a(q,"onSigterm");function W(){k().catch(()=>{})}a(W,"onExit");function N(e){f&&(w=w.then(e).then(()=>{},r=>{_.fresh(()=>{h({level:"error",event:"daemon.lane_job.failed",error:r})})}))}a(N,"enqueue");function K(){!f||v||(v=!0,N(async()=>{if(v=!1,!!f)try{await qr(Date.now(),le)}catch(e){_.fresh(()=>{h({level:"error",event:"daemon.tick.failed",error:e})})}}))}a(K,"enqueueTick");let D=null;async function fe(){if(D!==null)throw{status:500,code:"admission_failed",message:`daemon admission previously failed: ${D instanceof Error?D.message:String(D)}`};if(u.phase==="ready")return{admitted:!1,already_admitted:!0,startup_phase:"ready"};if(u.phase!=="prepared"&&u.phase!=="recovering")throw{status:409,code:"not_prepared",message:u.message};const e=u.phase==="prepared";try{return await G(),u={phase:"ready",message:"",blockerPaths:[]},e?{admitted:!0,already_admitted:!1,startup_phase:"ready"}:{admitted:!1,already_admitted:!0,startup_phase:"ready"}}catch(r){throw D=r,{status:500,code:"admission_failed",message:`daemon admission failed: ${r instanceof Error?r.message:String(r)}`}}}a(fe,"admitStartup");async function ue(e){if(P!==null)throw{status:409,code:"migration_in_progress",message:`on-disk migration is already running (${P})`};P="repair";try{const r=await Tr({dryRun:e.dryRun,explicitDirs:e.dirs,nodes:Y()});if(e.dryRun||!r.finalVerificationSucceeded||u.phase!=="blocked")return{result:r,resumed:!1};if(t.prepare)return u={phase:"prepared",message:"daemon storage is prepared and normal services are unavailable until admission",blockerPaths:[]},{result:r,resumed:!1};try{return await G(),u={phase:"ready",message:"",blockerPaths:[]},{result:r,resumed:!0}}catch(l){const S=l instanceof Error?l.message:String(l);return setTimeout(()=>{k().catch(()=>{})},1e3),{result:r,resumed:!1,resumeError:S}}}finally{P=null}}a(ue,"repairMigrations");async function he(){n=t.intervalMs??Ke;const e=s.token;d=new _r({epoch:e,enqueue:N}),sr(d),u={phase:"recovering",message:"daemon startup recovery is running and normal services are unavailable",blockerPaths:[]},_.fresh(()=>{h({level:"info",event:"daemon.started",fields:{pid:process.pid,interval_ms:n}})});const r=ur();if(hr(r),_.fresh(()=>{h({level:"info",event:"daemon.install_id.resolved",fields:{install_id:r}})}),_.fresh(()=>{let l;try{l=We()}catch{return}l!==null&&h({level:"warn",event:"daemon.startup.warning",fields:{stage:"termrender",warning:l.slice(0,2048)}})}),await _.fresh(async()=>{await qe(),await Be(),Ue(Date.now())}),_.fresh(()=>{const{reconcile:l,migrated:S}=fr(er);l.changed&&h({level:"info",event:"daemon.boot_change.reconciled",fields:{cleared_count:l.cleared.length,same_boot_proven:l.sameBootProven}}),S.length>0&&h({level:"info",event:"daemon.pid_identity.migrated",fields:{migrated_count:S.length}})}),_.fresh(()=>{for(const l of br){const S=l.apply();S.changed&&h({level:"info",event:"daemon.boot_migration.applied",fields:{migration:l.id,...S.summary}})}}),A){const l=a(()=>{I(A().catch(()=>{}))},"refresh");I(Fe().catch(()=>{})),I(je().then(({completion:S})=>S).catch(S=>{h({level:"error",event:"daemon.grants.sweep_failed",error:S})})),l(),x=setInterval(l,Oe*1e3),x.unref()}N(()=>{Sr(),yr()}),c=setInterval(K,n),K()}a(he,"completeStartup");function G(){return se??=he().catch(e=>{throw u={phase:"initializing",message:"daemon startup recovery failed and normal services are unavailable",blockerPaths:[]},e})}a(G,"resumeStartup");try{process.on("SIGINT",U),process.on("SIGTERM",q),process.on("exit",W),Er(),m!==null&&h({level:"info",event:"daemon.joined_owner.applied",fields:{owner:m.owner,rows:m.rows}}),M=await ke();const e=s.token;lr({epoch:e,requestHandover:pe,registerDetached:I,startupBlock:ce,admitStartup:fe,repairMigrations:ue}),oe(),C=Le({tcp:t.tcp}),await C.ready;const r=ze("user").runtime;r?.issuer?A=$e(r.issuer,I):Ge(),r!==void 0&&(R=Ne(r,()=>He(r.issuer.replace(/\/$/,"")),A),await R.ready);try{await Pr({nodes:Y()})}catch(l){if(P=null,l instanceof Ir)return u={phase:"blocked",message:l.message,blockerPaths:l.blockerPaths},k;throw l}process.platform==="linux"&&b(E)&&(De(),await xe("app:terminal"));try{t.prepare?u={phase:"prepared",message:"daemon storage is prepared and normal services are unavailable until admission",blockerPaths:[]}:(await G(),u={phase:"ready",message:"",blockerPaths:[]})}finally{P=null}return k}catch(e){try{await k()}catch(r){throw new AggregateError([e,r],"daemon startup failed and cleanup also failed")}throw e}}a(Kr,"runDaemon");var en=Kr;export{O as brokerCommandDeclaresCanvasHome,F as brokerCommandEpoch,en as default,Kr as runDaemon,qr as superviseTick};

package/dist/daemon/delivery/run-delivery.d.ts

@@ -19,6 +19,10 @@ export interface DeliveryJob {
     /** The stored document; its `delivery.attempt` is stamped per attempt. */
     document: unknown;
     attempt: number;
+    /** Originating node, or null for a request made outside a node. */
+    nodeId?: string | null;
+    /** Frozen originating app, used with its current grant after node deletion. */
+    app?: string;
 }
 /** Spawn and settle one already-claimed delivery. `settle` writes the outcome
  *  to whichever durable row owns this attempt. */

package/dist/daemon/delivery/run-delivery.js

@@ -1 +1 @@
-var w=Object.defineProperty;var i=(e,t)=>w(e,"name",{value:t,configurable:!0});import{spawn as _}from"node:child_process";import{envHomeOverride as C}from"../../shared/env.js";import{deliveryBackoffMs as o}from"../../core/canvas/delivery-contract.js";import{killProcessGroup as E}from"../../core/canvas/pid.js";import{buildOperationalEnvBase as O}from"../../core/runtime/spawn-env.js";const T=12e4,A=2e3,p=4*1024;function c(e,t,r){return e.spawnError!==void 0?{state:"pending",nextAttemptAt:r+o(t),failure:a("spawn_error",{message:e.spawnError.message,stderr:e.stderr})}:e.timedOut?{state:"pending",nextAttemptAt:r+o(t),failure:a("timeout",{...e.signal===null?{}:{signal:e.signal},stderr:e.stderr})}:e.signal!==null?{state:"pending",nextAttemptAt:r+o(t),failure:a("signal",{signal:e.signal,stderr:e.stderr})}:e.exitCode===0?{state:"accepted"}:e.exitCode===78?{state:"permanent_failed",failure:a("exit",{exitCode:78,stderr:e.stderr})}:{state:"pending",nextAttemptAt:r+o(t),failure:a("exit",{exitCode:e.exitCode??void 0,stderr:e.stderr})}}i(c,"deliverySettlementForOutcome");function a(e,t){return{kind:e,...t}}i(a,"failure");function I(){let e=Buffer.alloc(0);return{take(t){e=t.length>=p?t.subarray(t.length-p):Buffer.concat([e,t]).subarray(Math.max(0,e.length+t.length-p))},decode(){return e.toString("utf8")}}}i(I,"stderrTailCapture");function D(e,t){const r=e,l=r.delivery;return JSON.stringify({...r,delivery:{...l,attempt:t}})}i(D,"documentForAttempt");function L(e){const t=O({targetCwd:e,targetProfileId:null}),r=C();return r!==void 0&&r!==""&&(t.CRTR_HOME=r),t}i(L,"deliveryEnv");async function G(e,t){const r=I();let l;try{l=D(e.document,e.attempt)}catch(s){t(c({exitCode:null,signal:null,timedOut:!1,spawnError:s,stderr:r.decode()},e.attempt,Date.now()));return}let n;try{n=_(e.argv[0],e.argv.slice(1),{cwd:e.cwd,env:L(e.cwd),detached:!0,stdio:["pipe","pipe","pipe"]})}catch(s){t(c({exitCode:null,signal:null,timedOut:!1,spawnError:s,stderr:r.decode()},e.attempt,Date.now()));return}await new Promise(s=>{let g=!1,m=!1,u,f;const x=i(d=>{g||(g=!0,f!==void 0&&clearTimeout(f),!d.timedOut&&u!==void 0&&clearTimeout(u),n.stdin?.destroy(),n.stdout?.destroy(),n.stderr?.destroy(),t(c(d,e.attempt,Date.now())),s())},"finish");n.stdout?.on("data",()=>{}),n.stderr?.on("data",d=>r.take(d)),n.stdin?.on("error",()=>{}),n.on("error",d=>{x({exitCode:null,signal:null,timedOut:!1,spawnError:d,stderr:r.decode()})}),n.on("exit",(d,y)=>{x({exitCode:d,signal:y,timedOut:m,stderr:r.decode()})});const v=i(()=>{n.pid!==void 0&&(E(n.pid),u=setTimeout(()=>E(n.pid,"SIGKILL"),A),u.unref?.())},"killWithEscalation");f=setTimeout(()=>{m=!0,v()},T),f.unref?.(),n.stdin?.end(l,"utf8")})}i(G,"runDelivery");export{p as DELIVERY_STDERR_TAIL_BYTES,T as DELIVERY_TIMEOUT_MS,c as deliverySettlementForOutcome,G as runDelivery};
+var C=Object.defineProperty;var a=(e,t)=>C(e,"name",{value:t,configurable:!0});import{spawn as T}from"node:child_process";import{envHomeOverride as h}from"../../shared/env.js";import{deliveryBackoffMs as g}from"../../core/canvas/delivery-contract.js";import{killProcessGroup as y}from"../../core/canvas/pid.js";import{buildOperationalEnvBase as v}from"../../core/runtime/spawn-env.js";import{getNode as O}from"../../core/canvas/canvas.js";import{appProcessSandboxed as A,launchAppProcess as _}from"../../core/spaces/process.js";const E=12e4,S=2e3,w=4*1024;function x(e,t,r){return e.spawnError!==void 0?{state:"pending",nextAttemptAt:r+g(t),failure:m("spawn_error",{message:e.spawnError.message,stderr:e.stderr})}:e.timedOut?{state:"pending",nextAttemptAt:r+g(t),failure:m("timeout",{...e.signal===null?{}:{signal:e.signal},stderr:e.stderr})}:e.signal!==null?{state:"pending",nextAttemptAt:r+g(t),failure:m("signal",{signal:e.signal,stderr:e.stderr})}:e.exitCode===0?{state:"accepted"}:e.exitCode===78?{state:"permanent_failed",failure:m("exit",{exitCode:78,stderr:e.stderr})}:{state:"pending",nextAttemptAt:r+g(t),failure:m("exit",{exitCode:e.exitCode??void 0,stderr:e.stderr})}}a(x,"deliverySettlementForOutcome");function m(e,t){return{kind:e,...t}}a(m,"failure");function D(){let e=Buffer.alloc(0);return{take(t){e=t.length>=w?t.subarray(t.length-w):Buffer.concat([e,t]).subarray(Math.max(0,e.length+t.length-w))},decode(){return e.toString("utf8")}}}a(D,"stderrTailCapture");function L(e,t){const r=e,u=r.delivery;return JSON.stringify({...r,delivery:{...u,attempt:t}})}a(L,"documentForAttempt");function R(e){const t=v({targetCwd:e,targetProfileId:null}),r=h();return r!==void 0&&r!==""&&(t.CRTR_HOME=r),t}a(R,"deliveryEnv");async function V(e,t){const r=D();let u;try{u=L(e.document,e.attempt)}catch(d){t(x({exitCode:null,signal:null,timedOut:!1,spawnError:d,stderr:r.decode()},e.attempt,Date.now()));return}if(process.platform==="linux"){let d;try{if(!A())throw new Error("root launcher is required for delivery");const o=e.nodeId===null||e.nodeId===void 0?null:O(e.nodeId),f=e.app??o?.grantee??(e.nodeId==null?"app:terminal":void 0);if(!f)throw new Error(`delivery origin ${e.nodeId} was deleted without a stored app`);const l=await _({...o?{nodeId:e.nodeId}:{},app:f,command:e.argv,cwd:e.cwd,env:v({targetCwd:e.cwd,targetProfileId:null,skipSpawnAllow:!0}),stdin:u,stdoutBytes:0,stderrBytes:w,stderrTail:!0});let s,p=!1;try{s=setTimeout(()=>{p=!0,l.stop().catch(i=>{console.error(`delivery process ${l.pid} could not be stopped:`,i)})},E),s.unref?.();const c=await l.completion;d={exitCode:c.exitCode,signal:c.signal,timedOut:p,stderr:c.stderr}}finally{s!==void 0&&clearTimeout(s)}}catch(o){d={exitCode:null,signal:null,timedOut:!1,spawnError:o,stderr:""}}t(x(d,e.attempt,Date.now()));return}let n;try{n=T(e.argv[0],e.argv.slice(1),{cwd:e.cwd,env:R(e.cwd),detached:!0,stdio:["pipe","pipe","pipe"]})}catch(d){t(x({exitCode:null,signal:null,timedOut:!1,spawnError:d,stderr:r.decode()},e.attempt,Date.now()));return}await new Promise(d=>{let o=!1,f=!1,l,s;const p=a(i=>{o||(o=!0,s!==void 0&&clearTimeout(s),!i.timedOut&&l!==void 0&&clearTimeout(l),n.stdin?.destroy(),n.stdout?.destroy(),n.stderr?.destroy(),t(x(i,e.attempt,Date.now())),d())},"finish");n.stdout?.on("data",()=>{}),n.stderr?.on("data",i=>r.take(i)),n.stdin?.on("error",()=>{}),n.on("error",i=>{p({exitCode:null,signal:null,timedOut:!1,spawnError:i,stderr:r.decode()})}),n.on("exit",(i,I)=>{p({exitCode:i,signal:I,timedOut:f,stderr:r.decode()})});const c=a(()=>{n.pid!==void 0&&(y(n.pid),l=setTimeout(()=>y(n.pid,"SIGKILL"),S),l.unref?.())},"killWithEscalation");s=setTimeout(()=>{f=!0,c()},E),s.unref?.(),n.stdin?.end(u,"utf8")})}a(V,"runDelivery");export{w as DELIVERY_STDERR_TAIL_BYTES,E as DELIVERY_TIMEOUT_MS,x as deliverySettlementForOutcome,V as runDelivery};

package/dist/daemon/fleet.d.ts

@@ -66,7 +66,7 @@ export declare class DaemonFleet implements FleetRegistry {
     interruptForProfilePause(nodeId: string, pid?: number | undefined): void;
     hasProfilePauseInterruption(nodeId: string): boolean;
     forget(nodeId: string): void;
-    onChildExit(nodeId: string, status: FleetExitStatus): void;
+    onChildExit(nodeId: string, status: FleetExitStatus, executionId?: string): void;
     deliverExit(nodeId: string, status: FleetExitStatus): void;
     /** The node-lifecycle tick's enactment entry. */
     applyDeadRowPolicy(nodeId: string): Promise<void>;

package/dist/daemon/fleet.js

@@ -1,17 +1,17 @@
-var b=Object.defineProperty;var l=(s,e)=>b(s,"name",{value:e,configurable:!0});import{getNode as d,getRow as g,subscribersOf as k}from"../core/canvas/index.js";import{isProfilePaused as $}from"../core/profiles/manifest.js";import{fullName as p}from"../core/canvas/labels.js";import{isSafeNodeId as a}from"../core/canvas/paths.js";import{transition as m}from"../core/runtime/lifecycle.js";import{fanDoctrineWake as T}from"../core/runtime/close.js";import{readInterruptedTurn as P,readTransportPoisonVerdict as x}from"../core/canvas/recovery.js";import{hasPendingWake as E}from"./reconcilers/live-obligation.js";import{clearRespawnPolicy as h,deferRespawnWhileOffline as N,MAX_RESPAWN_ATTEMPTS as R,OFFLINE_RESPAWN_RETRY_MS as C,recordRespawnPolicy as F,respawnBackoffMs as S}from"./reconcilers/node-lifecycle/respawn-policy.js";import{probeOnline as M}from"../core/runtime/connectivity.js";import{reviveNode as O}from"../core/runtime/revive.js";import{pushUrgent as v}from"../core/feed/feed.js";import{emitEvent as c}from"../core/events/emit.js";import{brokerThresholdsForDaemon as A}from"../core/runtime/fleet.js";function w(s,e){const r=e===void 0?"The daemon did not observe an exit status.":`The observed exit status was code ${e.code??"null"}, signal ${e.signal??"null"}.`;return`\u26A0 Spawn failed \u2014 \`${s.name}\` (${s.kind}) never started.
+var b=Object.defineProperty;var l=(t,e)=>b(t,"name",{value:e,configurable:!0});import{getNode as p,getRow as g,subscribersOf as k}from"../core/canvas/index.js";import{revokeExitedNodeToken as $}from"../core/canvas/node-tokens.js";import{isProfilePaused as T}from"../core/profiles/manifest.js";import{fullName as v}from"../core/canvas/labels.js";import{isSafeNodeId as o}from"../core/canvas/paths.js";import{transition as _}from"../core/runtime/lifecycle.js";import{fanDoctrineWake as P}from"../core/runtime/close.js";import{readInterruptedTurn as E,readTransportPoisonVerdict as x}from"../core/canvas/recovery.js";import{hasPendingWake as N}from"./reconcilers/live-obligation.js";import{clearRespawnPolicy as h,deferRespawnWhileOffline as R,MAX_RESPAWN_ATTEMPTS as C,OFFLINE_RESPAWN_RETRY_MS as F,recordRespawnPolicy as S,respawnBackoffMs as M}from"./reconcilers/node-lifecycle/respawn-policy.js";import{probeOnline as O}from"../core/runtime/connectivity.js";import{reviveNode as A}from"../core/runtime/revive.js";import{pushUrgent as m}from"../core/feed/feed.js";import{emitEvent as c}from"../core/events/emit.js";import{brokerThresholdsForDaemon as z}from"../core/runtime/fleet.js";import{isRecoveryHeld as D}from"../core/runtime/recovery-hold.js";function w(t,e){const r=e===void 0?"The daemon did not observe an exit status.":`The observed exit status was code ${e.code??"null"}, signal ${e.signal??"null"}.`;return`\u26A0 Spawn failed \u2014 \`${t.name}\` (${t.kind}) never started.
 
 Its pi vehicle exited before the session came up (no pi_session_id was ever recorded), so the node produced no output. ${r}
 
-Inspect canonical event diagnostics with \`crtr sys logs --node ${s.node_id}\`.
+Inspect canonical event diagnostics with \`crtr sys logs --node ${t.node_id}\`.
 
-If the work still needs doing, re-spawn it.`}l(w,"bootFailureBody");async function y(s,e){await v(s.node_id,w(s,e),{from:s.node_id})}l(y,"surfaceBootFailure");async function z(s){const e=x(s.node_id),r=e===null?"":`
+If the work still needs doing, re-spawn it.`}l(w,"bootFailureBody");async function y(t,e){await m(t.node_id,w(t,e),{from:t.node_id})}l(y,"surfaceBootFailure");async function B(t){const e=x(t.node_id),r=e===null?"":`
 
-Provider rotation observed ${e.consecutivePasses} consecutive route-queue passes with no HTTP response (tried ${e.routes.join(", ")}). Check network and provider transport before reviving.`,t=`\u26A0 Crash loop \u2014 \`${s.name}\` (${s.kind}) kept dying without settling a turn.
+Provider rotation observed ${e.consecutivePasses} consecutive route-queue passes with no HTTP response (tried ${e.routes.join(", ")}). Check network and provider transport before reviving.`,i=`\u26A0 Crash loop \u2014 \`${t.name}\` (${t.kind}) kept dying without settling a turn.
 
 Its session started successfully, but six consecutive relaunches made no progress, so the daemon stopped retrying.`+r+`
 
-Fix the crash cause, then revive the node if the work still needs doing.`;await v(s.node_id,t,{from:s.node_id})}l(z,"surfaceCrashLoop");async function D(s,e){const r=e instanceof Error?e.message:String(e),t=`\u26A0 Recovery failed \u2014 \`${s.name}\` (${s.kind}) could not be relaunched.
+Fix the crash cause, then revive the node if the work still needs doing.`;await m(t.node_id,i,{from:t.node_id})}l(B,"surfaceCrashLoop");async function L(t,e){const r=e instanceof Error?e.message:String(e),i=`\u26A0 Recovery failed \u2014 \`${t.name}\` (${t.kind}) could not be relaunched.
 
 The daemon refused this recovery before starting a broker: ${r}
 
-The node is now dead. Fix the recorded launch configuration, then revive it if the work still needs doing.`;await v(s.node_id,t,{from:s.node_id})}l(D,"surfaceRecoveryFailure");function B(s){return s?.cycle_pending!==!0}l(B,"retryResumeMode");function L(s,e,r=!0){return s===null||s.status==="done"||s.status==="canceled"||s.status==="dead"?"forget":s.intent==="refresh"?"respawn-fresh":s.intent==="idle-release"?"dormant":s.lifecycle==="resident"&&!e&&!r&&s.pi_session_id!=null?"release-idle":s.pi_session_id!=null?B(s)?"respawn-resume":"respawn-cycle":e||s.fork_from!=null?"respawn-fresh":"boot-failure"}l(L,"classifyDeadNode");const W=3e4;class te{static{l(this,"DaemonFleet")}#n;#o;#s;#l;#e=new Map;#r=new Set;#i=new Set;#t=new Map;#c=Number.NEGATIVE_INFINITY;constructor(e){this.#n=e.epoch,this.#o=e.enqueue,this.#s=e.now??Date.now,this.#l=e.probeOnline??(()=>M())}epoch(){return this.#n}register(e,r){if(this.#e.has(e))throw new Error(`fleet: ${e} already has a live broker entry \u2014 refusing a second launch (programming error)`);if(r.pid===null)throw new Error(`fleet: refusing to register ${e} with no pid`);this.#r.delete(e),this.#t.delete(e),this.#e.set(e,{pid:r.pid,handle:r})}has(e){return this.#e.has(e)}isClaimed(e){return this.#e.has(e)||this.#r.has(e)}get(e){return this.#e.get(e)}size(){return this.#e.size}occupancy(){return this.#e.size+this.#r.size}reserveSlot(e){if(this.#r.has(e)||this.#e.has(e))return!0;const{automaticReviveCap:r}=A();if(this.occupancy()<r)return this.#r.add(e),!0;const t=this.#s();return t-this.#c>=W&&(this.#c=t,c({level:"warn",event:"broker.capacity.revive_deferred",fields:{live_count:this.occupancy(),hard_cap:r}})),!1}releaseReservation(e){this.#r.delete(e)}entries(){return this.#e.entries()}interruptForProfilePause(e,r=this.#e.get(e)?.pid){if(r!==void 0){this.#i.add(e);try{process.kill(r,"SIGTERM")}catch{}}}hasProfilePauseInterruption(e){return this.#i.has(e)}forget(e){this.#e.delete(e),this.#r.delete(e),this.#t.delete(e)}onChildExit(e,r){this.#e.delete(e),this.#o(()=>{const t=d(e),n=t?.launched_at==null?Number.NaN:Date.parse(t.launched_at),o=Number.isFinite(n)?Math.max(0,this.#s()-n):null,i=t?.respawn_failures??0;t?.status==="done"||t?.status==="canceled"||t?.status==="dead"?this.#t.delete(e):this.#t.set(e,r),this.#u(e,r,o,i)})}deliverExit(e,r){this.onChildExit(e,r)}async applyDeadRowPolicy(e){const r=this.#t.get(e);try{await this.#f(e,r)}finally{this.#t.get(e)===r&&this.#t.delete(e)}}async terminalizeIfStillNonTerminal(e,r,t,n,o){const i=d(e);return i===null||i.status==="done"||i.status==="canceled"||i.status==="dead"?!1:(await this.#a(e,i,{event:r,reason:n,detail:o,wake:`Child crashed \u2014 ${p(i)} (${e}) could not be relaunched and is now dead. It stays dead until you revive it \u2014 \`crtr node lifecycle revive ${e}\`.`,surface:l(()=>D(i,t),"surface")}),!0)}dispose(){}#u(e,r,t,n){c({level:"info",event:"broker.exit.observed",...a(e)?{node_id:e}:{},fields:{...a(e)?{}:{affected_node_id:e},code:r.code,signal:r.signal,uptime_ms:t,consecutive_failures:n}})}async#f(e,r){return this.#h(e,r)}async#h(e,r){const t=d(e);if(t!==null&&$(t.profile_id))return h(e),"forget";if(this.#i.delete(e))return h(e),"forget";const n=P(e)?.interrupted===!0,o=L(t,n,E(e));switch(o){case"forget":h(e);break;case"dormant":h(e);break;case"release-idle":h(e),m(e,"release"),c({level:"info",event:"broker.recovery.released",...a(e)?{node_id:e}:{},fields:{...a(e)?{}:{affected_node_id:e}}});break;case"boot-failure":await this.#a(e,t,{event:"broker.boot.failed",reason:"boot_failed",detail:{schema:"crtr.node-outcome-detail/v1",message:w(t,r)},wake:`Child crashed \u2014 ${p(t)} (${e}) exited before its session ever came up and is now dead. It stays dead until you revive it \u2014 \`crtr node lifecycle revive ${e}\`.`,surface:l(()=>y(t,r),"surface")});break;case"respawn-fresh":case"respawn-cycle":case"respawn-resume":await this.#d(e,t,o,n);break}return o}async#d(e,r,t,n){const o=g(e);if(o===null)return;const i=o.respawn_failures??0;if(!await this.#l()){N(e,i,this.#s()),c({level:"info",event:"broker.respawn.offline_deferred",...a(e)?{node_id:e}:{},fields:{...a(e)?{}:{affected_node_id:e},action:t,retry_in_ms:C,consecutive_failures:i}});return}const _=o.respawn_not_before==null,f=_?F(o,this.#s()):{failures:i,notBefore:o.respawn_not_before,exhausted:i>=R};if(f.exhausted){const u=`Child crashed \u2014 ${p(r)} (${e}) kept dying without settling a turn (${f.failures} consecutive launches) and is now dead. It stays dead until you revive it \u2014 \`crtr node lifecycle revive ${e}\`.`;await this.#a(e,r,{event:"broker.respawn.exhausted",reason:"crash_looped",detail:{schema:"crtr.node-outcome-detail/v1",message:u,respawn_failures:f.failures},wake:u,...r.pi_session_id!=null?{surface:l(()=>z(r),"surface")}:{}});return}if(_&&f.notBefore!==null){c({level:"info",event:"broker.respawn.deferred",...a(e)?{node_id:e}:{},fields:{...a(e)?{}:{affected_node_id:e},action:t,backoff_ms:S(f.failures),consecutive_failures:f.failures}});return}c({level:"info",event:"broker.respawn.started",...a(e)?{node_id:e}:{},fields:{...a(e)?{}:{affected_node_id:e},action:t,consecutive_failures:f.failures}});try{await O(e,{capacity:"freeze",resume:t==="respawn-resume",wakeReason:t==="respawn-resume"&&n?"runtime-restart-abort":void 0,recovery:!0})}catch(u){c({level:"error",event:"broker.respawn.failed",...a(e)?{node_id:e}:{},error:u,fields:{...a(e)?{}:{affected_node_id:e},action:t}}),await this.terminalizeIfStillNonTerminal(e,"broker.respawn.refused",u,"launch_failed",{schema:"crtr.node-outcome-detail/v1",message:u instanceof Error?u.message:String(u)})}}async#a(e,r,t){c({level:"error",event:t.event,...a(e)?{node_id:e}:{fields:{affected_node_id:e}}}),m(e,"crash",{reason:t.reason,outcome:{detail:t.detail}});try{await(t.surface??(()=>y(r)))()}catch(n){c({level:"error",event:"broker.boot_failure_surface.failed",...a(e)?{node_id:e}:{fields:{affected_node_id:e}},error:n})}T(e,k(e),t.wake,{reason:"child-crashed",child:e})}}export{te as DaemonFleet,L as classifyDeadNode,B as retryResumeMode,y as surfaceBootFailure};
+The node is now dead. Fix the recorded launch configuration, then revive it if the work still needs doing.`;await m(t.node_id,i,{from:t.node_id})}l(L,"surfaceRecoveryFailure");function W(t){return t?.cycle_pending!==!0}l(W,"retryResumeMode");function q(t,e,r=!0){return t===null||t.status==="done"||t.status==="canceled"||t.status==="dead"?"forget":t.intent==="refresh"?"respawn-fresh":t.intent==="idle-release"?"dormant":t.lifecycle==="resident"&&!e&&!r&&t.pi_session_id!=null?"release-idle":t.pi_session_id!=null?W(t)?"respawn-resume":"respawn-cycle":e||t.fork_from!=null?"respawn-fresh":"boot-failure"}l(q,"classifyDeadNode");const G=3e4;class ne{static{l(this,"DaemonFleet")}#n;#o;#i;#l;#e=new Map;#r=new Set;#s=new Set;#t=new Map;#c=Number.NEGATIVE_INFINITY;constructor(e){this.#n=e.epoch,this.#o=e.enqueue,this.#i=e.now??Date.now,this.#l=e.probeOnline??(()=>O())}epoch(){return this.#n}register(e,r){if(this.#e.has(e))throw new Error(`fleet: ${e} already has a live broker entry \u2014 refusing a second launch (programming error)`);if(r.pid===null)throw new Error(`fleet: refusing to register ${e} with no pid`);this.#r.delete(e),this.#t.delete(e),this.#e.set(e,{pid:r.pid,handle:r})}has(e){return this.#e.has(e)}isClaimed(e){return this.#e.has(e)||this.#r.has(e)}get(e){return this.#e.get(e)}size(){return this.#e.size}occupancy(){return this.#e.size+this.#r.size}reserveSlot(e){if(this.#r.has(e)||this.#e.has(e))return!0;const{automaticReviveCap:r}=z();if(this.occupancy()<r)return this.#r.add(e),!0;const i=this.#i();return i-this.#c>=G&&(this.#c=i,c({level:"warn",event:"broker.capacity.revive_deferred",fields:{live_count:this.occupancy(),hard_cap:r}})),!1}releaseReservation(e){this.#r.delete(e)}entries(){return this.#e.entries()}interruptForProfilePause(e,r=this.#e.get(e)?.pid){if(r!==void 0){this.#s.add(e);try{process.kill(r,"SIGTERM")}catch{}}}hasProfilePauseInterruption(e){return this.#s.has(e)}forget(e){this.#e.delete(e),this.#r.delete(e),this.#t.delete(e)}onChildExit(e,r,i){i&&$(i),this.#e.delete(e),this.#o(()=>{const s=p(e),a=s?.launched_at==null?Number.NaN:Date.parse(s.launched_at),n=Number.isFinite(a)?Math.max(0,this.#i()-a):null,d=s?.respawn_failures??0;s?.status==="done"||s?.status==="canceled"||s?.status==="dead"?this.#t.delete(e):this.#t.set(e,r),this.#u(e,r,n,d)})}deliverExit(e,r){this.onChildExit(e,r)}async applyDeadRowPolicy(e){const r=this.#t.get(e);try{await this.#f(e,r)}finally{this.#t.get(e)===r&&this.#t.delete(e)}}async terminalizeIfStillNonTerminal(e,r,i,s,a){const n=p(e);return n===null||n.status==="done"||n.status==="canceled"||n.status==="dead"?!1:(await this.#a(e,n,{event:r,reason:s,detail:a,wake:`Child crashed \u2014 ${v(n)} (${e}) could not be relaunched and is now dead. It stays dead until you revive it \u2014 \`crtr node lifecycle revive ${e}\`.`,surface:l(()=>L(n,i),"surface")}),!0)}dispose(){}#u(e,r,i,s){c({level:"info",event:"broker.exit.observed",...o(e)?{node_id:e}:{},fields:{...o(e)?{}:{affected_node_id:e},code:r.code,signal:r.signal,uptime_ms:i,consecutive_failures:s}})}async#f(e,r){return this.#h(e,r)}async#h(e,r){const i=p(e);if(i!==null&&T(i.profile_id))return h(e),"forget";if(this.#s.delete(e))return h(e),"forget";if(D(e))return"dormant";const s=E(e)?.interrupted===!0,a=q(i,s,N(e));switch(a){case"forget":h(e);break;case"dormant":h(e);break;case"release-idle":h(e),_(e,"release"),c({level:"info",event:"broker.recovery.released",...o(e)?{node_id:e}:{},fields:{...o(e)?{}:{affected_node_id:e}}});break;case"boot-failure":await this.#a(e,i,{event:"broker.boot.failed",reason:"boot_failed",detail:{schema:"crtr.node-outcome-detail/v1",message:w(i,r)},wake:`Child crashed \u2014 ${v(i)} (${e}) exited before its session ever came up and is now dead. It stays dead until you revive it \u2014 \`crtr node lifecycle revive ${e}\`.`,surface:l(()=>y(i,r),"surface")});break;case"respawn-fresh":case"respawn-cycle":case"respawn-resume":await this.#d(e,i,a,s);break}return a}async#d(e,r,i,s){const a=g(e);if(a===null)return;const n=a.respawn_failures??0;if(!await this.#l()){R(e,n,this.#i()),c({level:"info",event:"broker.respawn.offline_deferred",...o(e)?{node_id:e}:{},fields:{...o(e)?{}:{affected_node_id:e},action:i,retry_in_ms:F,consecutive_failures:n}});return}const d=a.respawn_not_before==null,f=d?S(a,this.#i()):{failures:n,notBefore:a.respawn_not_before,exhausted:n>=C};if(f.exhausted){const u=`Child crashed \u2014 ${v(r)} (${e}) kept dying without settling a turn (${f.failures} consecutive launches) and is now dead. It stays dead until you revive it \u2014 \`crtr node lifecycle revive ${e}\`.`;await this.#a(e,r,{event:"broker.respawn.exhausted",reason:"crash_looped",detail:{schema:"crtr.node-outcome-detail/v1",message:u,respawn_failures:f.failures},wake:u,...r.pi_session_id!=null?{surface:l(()=>B(r),"surface")}:{}});return}if(d&&f.notBefore!==null){c({level:"info",event:"broker.respawn.deferred",...o(e)?{node_id:e}:{},fields:{...o(e)?{}:{affected_node_id:e},action:i,backoff_ms:M(f.failures),consecutive_failures:f.failures}});return}c({level:"info",event:"broker.respawn.started",...o(e)?{node_id:e}:{},fields:{...o(e)?{}:{affected_node_id:e},action:i,consecutive_failures:f.failures}});try{await A(e,{capacity:"freeze",resume:i==="respawn-resume",wakeReason:i==="respawn-resume"&&s?"runtime-restart-abort":void 0,recovery:!0})}catch(u){c({level:"error",event:"broker.respawn.failed",...o(e)?{node_id:e}:{},error:u,fields:{...o(e)?{}:{affected_node_id:e},action:i}}),await this.terminalizeIfStillNonTerminal(e,"broker.respawn.refused",u,"launch_failed",{schema:"crtr.node-outcome-detail/v1",message:u instanceof Error?u.message:String(u)})}}async#a(e,r,i){c({level:"error",event:i.event,...o(e)?{node_id:e}:{fields:{affected_node_id:e}}}),_(e,"crash",{reason:i.reason,outcome:{detail:i.detail}});try{await(i.surface??(()=>y(r)))()}catch(s){c({level:"error",event:"broker.boot_failure_surface.failed",...o(e)?{node_id:e}:{fields:{affected_node_id:e}},error:s})}P(e,k(e),i.wake,{reason:"child-crashed",child:e})}}export{ne as DaemonFleet,q as classifyDeadNode,W as retryResumeMode,y as surfaceBootFailure};

package/dist/daemon/http-dispatcher.d.ts

@@ -0,0 +1 @@
+export declare function configureDaemonHttpDispatcher(): void;