@north-light/crouter 0.3.348 → 0.3.350

package/dist/pi-extensions/canvas-passive-context.js

@@ -1,14 +1,14 @@
-var $=Object.defineProperty;var f=(e,n)=>$(e,"name",{value:n,configurable:!0});import{envNodeId as h}from"../shared/env.js";import{existsSync as b,readFileSync as v}from"node:fs";import{acknowledgeBrokerMail as w,claimBrokerMail as k,brokerExtensionState as C}from"../core/runtime/broker/daemon-ops.js";import{wasTurnRefused as M}from"../core/runtime/broker/extension-abort.js";import{emitEvent as P}from"../core/events/emit.js";import{reportPathFromRef as S}from"../core/runtime/broker-extension-render.js";import{parseCard as j}from"../shared/generated-context.js";const y=4e3;function _(e){if(!e.startsWith(`---
-`))return e;const n=e.indexOf(`
+var v=Object.defineProperty;var l=(t,e)=>v(t,"name",{value:e,configurable:!0});import{envNodeId as p}from"../shared/env.js";import{isAbsolute as h}from"node:path";import{acknowledgeBrokerMail as $,claimBrokerMail as _,readBrokerPassiveMessage as w}from"../core/runtime/broker/daemon-ops.js";import{ApiError as b}from"../api/errors.js";import{wasTurnRefused as k}from"../core/runtime/broker/extension-abort.js";import{emitEvent as C}from"../core/events/emit.js";import{parseCard as A}from"../shared/generated-context.js";const y=4e3;function P(t){if(!t.startsWith(`---
+`))return t;const e=t.indexOf(`
 ---
-`,4);return n===-1?e:e.slice(n+5)}f(_,"stripFrontmatter");function x(e,n){if(e.ref!==void 0&&e.ref!==""){const t=S(e.ref,n);if(t!==null)try{const i=_(v(t,"utf8")).trim();if(i!=="")return i.length>y?`${i.slice(0,y)}
-\u2026 (truncated; read the full report with \`crtr canvas history read ${e.ref}\`)`:i}catch{}if(b(e.ref))try{const i=_(v(e.ref,"utf8")).trim();if(i!=="")return i.length>y?`${i.slice(0,y)}
-\u2026 (truncated; full report at ${e.ref})`:i}catch{}}const r=e.data?.body;return typeof r=="string"&&r.trim()!==""?r.trim():e.label}f(x,"entryContent");function m(e){return e.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}f(m,"attr");function A(e,n=new Map){const r=e.map(t=>{const i=m(t.from??"system"),u=t.from_name!==void 0&&t.from_name!==""?` from_name="${m(t.from_name)}"`:"",o=t.ref!==void 0&&t.ref!==""?` ref="${m(t.ref)}"`:"";return`<update from="${i}"${u} kind="${m(t.kind)}" at="${m(t.ts)}"${o}>
-${x(t,n)}
-</update>`}).join(`
-`);return`<passive-subscription-backlog count="${e.length}" note="Reports accumulated from nodes you passively subscribe to while you were not actively listening. Surfaced now because you were messaged. Oldest first.">
+`,4);return e===-1?t:t.slice(e+5)}l(P,"stripFrontmatter");async function j(t,e){if(e.ref!==void 0&&e.ref!==""){const n=e.data?.report_body;if(typeof n=="string"&&n.trim()!==""){const i=n.trim();return i.length>y?`${i.slice(0,y)}
+\u2026 (truncated; read the full report with \`crtr canvas history read ${e.ref}\`)`:i}if(h(e.ref))try{const{content:i}=await w(t,e.ref),f=P(i).trim();if(f!=="")return f.length>y?`${f.slice(0,y)}
+\u2026 (truncated; full report at ${e.ref})`:f}catch(i){if(!(i instanceof b)||i.status!==404)throw i}}const r=e.data?.body;return typeof r=="string"&&r.trim()!==""?r.trim():e.label}l(j,"entryContent");function m(t){return t.replace(/&/g,"&amp;").replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;")}l(m,"attr");async function B(t,e=p()??""){const r=(await Promise.all(t.map(async n=>{const i=m(n.from??"system"),f=n.from_name!==void 0&&n.from_name!==""?` from_name="${m(n.from_name)}"`:"",o=n.ref!==void 0&&n.ref!==""?` ref="${m(n.ref)}"`:"";return`<update from="${i}"${f} kind="${m(n.kind)}" at="${m(n.ts)}"${o}>
+${await j(e,n)}
+</update>`}))).join(`
+`);return`<passive-subscription-backlog count="${t.length}" note="Reports accumulated from nodes you passively subscribe to while you were not actively listening. Surfaced now because you were messaged. Oldest first.">
 ${r}
-</passive-subscription-backlog>`}f(A,"formatPassive");const B="</runtime>";function E(e,n){if(e.trim()==="")return n;const r=j({role:"user",content:e});if(r===null)return`${n}
+</passive-subscription-backlog>`}l(B,"formatPassive");const M="</runtime>";function E(t,e){if(t.trim()==="")return e;const r=A({role:"user",content:t});if(r===null)return`${e}
 
-${e}`;const t=e.length-r.body.length-B.length;return`${e.slice(0,t)}${n}
-${e.slice(t)}`}f(E,"placeBacklog");function F(e){const n=new Map;let r,t;function i(o){try{P({level:"error",event:"inbox.delivery.failed",outcome:"failed",error:o,fields:{channel:"passive"}})}catch{}}f(i,"reportFailure");async function u(o){if(t!==void 0)return t;if(r===void 0&&(r=[...n.values()].filter(s=>s.injected).map(({claim:s})=>({delivery_id:s.delivery_id,attempts:s.attempts,disposition:M()?"released":"acknowledged"}))),r.length===0)return r=void 0,!0;const d=r,a=(async()=>{try{const s=await w(o,d);if(s.action==="hold")return!1;for(const l of d){const p=s.results.find(g=>g.delivery_id===l.delivery_id);if(p?.outcome!==l.disposition&&p?.outcome!=="stale")throw new Error(`passive mail settlement has no terminal outcome: ${l.delivery_id}`)}for(const l of d)n.delete(l.delivery_id);return r=void 0,!0}catch(s){return i(s),!1}})().finally(()=>{t===a&&(t=void 0)});return t=a,a}f(u,"settle"),e.on("input",async o=>{const d=h();if(!(d===void 0||d.trim()===""))try{if(r!==void 0&&!await u(d))return;const a=await k(d,"passive");if(a.action==="hold")return;for(const c of a.deliveries)n.has(c.delivery_id)||n.set(c.delivery_id,{claim:c,injected:!1});const s=[...n.values()].filter(c=>!c.injected);if(s.length===0)return;const l=await C(d),p=new Map(l.report_nodes.map(c=>[c.node_id,c])),g=E(o.text,A(s.map(({claim:c})=>c.entry),p));for(const c of s)c.injected=!0;return{action:"transform",text:g,images:o.images}}catch(a){i(a);return}}),e.on("agent_settled",async()=>{const o=h();o!==void 0&&o!==""&&await u(o)}),e.on("session_shutdown",async(o,d)=>{const a=h();a!==void 0&&a!==""&&d?.hasPendingMessages?.()!==!0&&await u(a)})}f(F,"registerCanvasPassiveContext");var Y=F;export{Y as default,A as formatPassive,E as placeBacklog,F as registerCanvasPassiveContext};
+${t}`;const n=t.length-r.body.length-M.length;return`${t.slice(0,n)}${e}
+${t.slice(n)}`}l(E,"placeBacklog");function I(t){const e=new Map;let r,n;function i(o){try{C({level:"error",event:"inbox.delivery.failed",outcome:"failed",error:o,fields:{channel:"passive"}})}catch{}}l(i,"reportFailure");async function f(o){if(n!==void 0)return n;if(r===void 0&&(r=[...e.values()].filter(s=>s.injected).map(({claim:s})=>({delivery_id:s.delivery_id,attempts:s.attempts,disposition:k()?"released":"acknowledged"}))),r.length===0)return r=void 0,!0;const d=r,a=(async()=>{try{const s=await $(o,d);if(s.action==="hold")return!1;for(const u of d){const c=s.results.find(g=>g.delivery_id===u.delivery_id);if(c?.outcome!==u.disposition&&c?.outcome!=="stale")throw new Error(`passive mail settlement has no terminal outcome: ${u.delivery_id}`)}for(const u of d)e.delete(u.delivery_id);return r=void 0,!0}catch(s){return i(s),!1}})().finally(()=>{n===a&&(n=void 0)});return n=a,a}l(f,"settle"),t.on("input",async o=>{const d=p();if(!(d===void 0||d.trim()===""))try{if(r!==void 0&&!await f(d))return;const a=await _(d,"passive");if(a.action==="hold")return;for(const c of a.deliveries)e.has(c.delivery_id)||e.set(c.delivery_id,{claim:c,injected:!1});const s=[...e.values()].filter(c=>!c.injected);if(s.length===0)return;const u=E(o.text,await B(s.map(({claim:c})=>c.entry),d));for(const c of s)c.injected=!0;return{action:"transform",text:u,images:o.images}}catch(a){i(a);return}}),t.on("agent_settled",async()=>{const o=p();o!==void 0&&o!==""&&await f(o)}),t.on("session_shutdown",async(o,d)=>{const a=p();a!==void 0&&a!==""&&d?.hasPendingMessages?.()!==!0&&await f(a)})}l(I,"registerCanvasPassiveContext");var N=I;export{N as default,B as formatPassive,E as placeBacklog,I as registerCanvasPassiveContext};

package/dist/pi-extensions/canvas-recap.js

@@ -1,11 +1,11 @@
-var L=Object.defineProperty;var a=(n,s)=>L(n,"name",{value:s,configurable:!0});import{envNodeId as W,envRecapIdleMs as O}from"../shared/env.js";import{brokerExtensionState as k}from"../core/runtime/broker/daemon-ops.js";import{generateRecap as U}from"../core/runtime/recap.js";import{writeNodeRecap as V}from"../core/canvas/node-recap.js";import{isReviewBoundary as B}from"../core/runtime/session-visibility.js";import{editorLabelForBrokerNode as q}from"../core/runtime/broker-extension-render.js";import{generateAndCommitRecapName as F,readRoadmap as H}from"./broker-local.js";function K(){return O()}a(K,"idleMs");const Y=7e3,A=5,z=1200,C="crtr-recap";let M;function J(n){const s=n.content;return typeof s=="string"?s.trim():Array.isArray(s)?s.filter(r=>r!==null&&typeof r=="object"&&r.type==="text"&&typeof r.text=="string").map(r=>(r.text??"").trim()).filter(r=>r!=="").join(`
-`).trim():""}a(J,"messageText");function Q(n,s){let r;try{r=n.getEntries()}catch{return{entries:[],boundaryPresent:s===void 0}}if(s===void 0)return{entries:r,boundaryPresent:!0};const t=r.findIndex(o=>B(o,s));return t===-1?{entries:[],boundaryPresent:!1}:{entries:r.slice(t+1),boundaryPresent:!0}}a(Q,"recapEntries");function D(n,s,r,t){const{entries:o,boundaryPresent:u}=Q(n,t),l=[],m=a(f=>{const p=f.role;if(p!=="user"&&p!=="assistant")return;let d=J(f);if(d==="")return;d.length>s&&(d=`${d.slice(0,s)} \u2026[truncated]`);const g=`${p==="user"?"User":"Agent"}: ${d}`;l.at(-1)!==g&&l.push(g)},"append");for(const f of o)f.type!=="message"||f.message===void 0||m(f.message);return u&&r?.role==="assistant"&&m(r),l}a(D,"conversationParts");function X(n,s,r){const t=D(n,z,s,r);if(t.length===0)return"";if(t.length<=A*2)return t.join(`
+var W=Object.defineProperty;var a=(n,s)=>W(n,"name",{value:s,configurable:!0});import{envNodeId as B,envRecapIdleMs as O}from"../shared/env.js";import{brokerExtensionState as G}from"../core/runtime/broker/daemon-ops.js";import{generateRecap as U}from"../core/runtime/recap.js";import{putBrokerRecap as V}from"../core/runtime/broker/daemon-ops.js";import{isReviewBoundary as q}from"../core/runtime/session-visibility.js";import{editorLabelForBrokerNode as F}from"../core/runtime/broker-extension-render.js";import{generateAndCommitRecapName as H,readRoadmap as K}from"./broker-local.js";function Y(){return O()}a(Y,"idleMs");const z=7e3,b=5,J=1200,$="crtr-recap";let M;function Q(n){const s=n.content;return typeof s=="string"?s.trim():Array.isArray(s)?s.filter(r=>r!==null&&typeof r=="object"&&r.type==="text"&&typeof r.text=="string").map(r=>(r.text??"").trim()).filter(r=>r!=="").join(`
+`).trim():""}a(Q,"messageText");function X(n,s){let r;try{r=n.getEntries()}catch{return{entries:[],boundaryPresent:s===void 0}}if(s===void 0)return{entries:r,boundaryPresent:!0};const t=r.findIndex(o=>q(o,s));return t===-1?{entries:[],boundaryPresent:!1}:{entries:r.slice(t+1),boundaryPresent:!0}}a(X,"recapEntries");function C(n,s,r,t){const{entries:o,boundaryPresent:u}=X(n,t),l=[],m=a(f=>{const p=f.role;if(p!=="user"&&p!=="assistant")return;let d=Q(f);if(d==="")return;d.length>s&&(d=`${d.slice(0,s)} \u2026[truncated]`);const g=`${p==="user"?"User":"Agent"}: ${d}`;l.at(-1)!==g&&l.push(g)},"append");for(const f of o)f.type!=="message"||f.message===void 0||m(f.message);return u&&r?.role==="assistant"&&m(r),l}a(C,"conversationParts");function Z(n,s,r){const t=C(n,J,s,r);if(t.length===0)return"";if(t.length<=b*2)return t.join(`
 
-`);const o=t.length-A*2;return[...t.slice(0,A),`[\u2026 ${o} message${o===1?"":"s"} omitted \u2026]`,...t.slice(t.length-A)].join(`
+`);const o=t.length-b*2;return[...t.slice(0,b),`[\u2026 ${o} message${o===1?"":"s"} omitted \u2026]`,...t.slice(t.length-b)].join(`
 
-`)}a(X,"buildConversation");function Z(n,s,r){const t=D(n,600,s,r);if(t.length===0)return"";const o=48;return t.length<=o?t.join(`
+`)}a(Z,"buildConversation");function ee(n,s,r){const t=C(n,600,s,r);if(t.length===0)return"";const o=48;return t.length<=o?t.join(`
 
 `):Array.from({length:o},(l,m)=>{const f=Math.round(m*(t.length-1)/(o-1));return t[f]}).join(`
 
-`)}a(Z,"buildNamingConversation");function ee(n,s=U,r){const t=W();if(t===void 0||t.trim()==="")return;let o,u,l,m;const f=a(i=>{const e=i.model?.provider?.trim(),c=i.model?.id?.trim();e&&c&&(m=`${e}/${c}`)},"captureLiveModel");let p=Date.now(),d=0,g,v=!1,_=!1,S=!1,h=!1;const N=a(()=>o!==void 0&&typeof o.setWidget=="function","canPaint"),R=a(i=>{try{o?.notify?.(i,"info")}catch{}},"notify"),b=a(()=>{if(N())try{o.setWidget(C,void 0,{placement:"aboveEditor"})}catch{}},"clearRecap"),$=a(i=>{if(!N()||i==="")return;const e=i.split(`
-`).filter(c=>c.trim()!=="");if(e.length!==0)try{o.setWidget(C,e,{placement:"aboveEditor"})}catch{}},"showRecap"),I=a(()=>{p=Date.now(),d+=1,S=!1,v&&(_=!0)},"onMessage"),j=a(i=>{if(!(n.getSessionName===void 0||n.setSessionName===void 0)){if(r!==void 0){const e=n.getSessionName();if(e===void 0)return;r(t,i,()=>n.getSessionName?.()===e,c=>{try{n.setSessionName?.(c)}catch{}});return}k(t).then(({node:e})=>{if(e.name.trim()!==""&&e.name!==e.kind)return;const c=q(e);n.getSessionName?.()===c&&F(t,i,{name:e.name,description:e.description??"",title:e.title??"",icon:e.icon??"",kind:e.kind},()=>n.getSessionName?.()===c,w=>{try{n.setSessionName?.(w)}catch{}})}).catch(()=>{})}},"refreshAutomaticName"),P=a(i=>{if(!N()||u===void 0||h)return;const e=g,c=l?.review_binding?.review_id??u.getEntries().map(y=>y.details?.reviewId).find(y=>typeof y=="string"),w=X(u,e,c);if(w===""){S=!0,v=!1,_=!1,b();return}S=!1;const T=i?Z(u,e,c):"",x=d;h=!0,i&&(R("Generating recap\u2026"),j(T));let G;try{G=H(t)??void 0}catch{}s(w,y=>{h=!1,!(!i&&d!==x||!N())&&(V(t,y),v=!0,_=d!==x,$(y),i&&R("Recap ready"))},m,G),setTimeout(()=>{h=!1},3e4).unref?.()},"requestRecap");n.registerCommand?.("recap",{description:"Generate a Goal/State recap and refresh the original generated session title",handler:a((i,e)=>{o=e.ui,u=e.sessionManager,f(e),P(!0)},"handler")}),n.on("session_start",(i,e)=>{o=e.ui,u=e.sessionManager,f(e),l=void 0,k(t).then(c=>{l=c.node}).catch(()=>{}),p=Date.now(),d=0,g=void 0,v=!1,_=!1,S=!1,h=!1,b()}),n.on("input",(i,e)=>{I()}),n.on("message_update",(i,e)=>{const c=i?.message;c?.role==="assistant"&&(g=c),I()}),n.on("turn_end",(i,e)=>{g=void 0,f(e),I()}),M!==void 0&&clearInterval(M);const E=setInterval(()=>{try{if(!N()||u===void 0||S||v&&!_||h||Date.now()-p<K())return;P(!1)}catch{}},Y);typeof E.unref=="function"&&E.unref(),M=E,n.on("session_shutdown",()=>{clearInterval(E),M===E&&(M=void 0)})}a(ee,"registerCanvasRecap");var fe=ee;export{fe as default,ee as registerCanvasRecap};
+`)}a(ee,"buildNamingConversation");function te(n,s=U,r){const t=B();if(t===void 0||t.trim()==="")return;let o,u,l,m;const f=a(i=>{const e=i.model?.provider?.trim(),c=i.model?.id?.trim();e&&c&&(m=`${e}/${c}`)},"captureLiveModel");let p=Date.now(),d=0,g,_=!1,S=!1,E=!1,h=!1;const v=a(()=>o!==void 0&&typeof o.setWidget=="function","canPaint"),A=a(i=>{try{o?.notify?.(i,"info")}catch{}},"notify"),P=a(()=>{if(v())try{o.setWidget($,void 0,{placement:"aboveEditor"})}catch{}},"clearRecap"),D=a(i=>{if(!v()||i==="")return;const e=i.split(`
+`).filter(c=>c.trim()!=="");if(e.length!==0)try{o.setWidget($,e,{placement:"aboveEditor"})}catch{}},"showRecap"),I=a(()=>{p=Date.now(),d+=1,E=!1,_&&(S=!0)},"onMessage"),j=a(i=>{if(!(n.getSessionName===void 0||n.setSessionName===void 0)){if(r!==void 0){const e=n.getSessionName();if(e===void 0)return;r(t,i,()=>n.getSessionName?.()===e,c=>{try{n.setSessionName?.(c)}catch{}});return}G(t).then(({node:e})=>{if(e.name.trim()!==""&&e.name!==e.kind)return;const c=F(e);n.getSessionName?.()===c&&H(t,i,{name:e.name,description:e.description??"",title:e.title??"",icon:e.icon??"",kind:e.kind},()=>n.getSessionName?.()===c,R=>{try{n.setSessionName?.(R)}catch{}})}).catch(()=>{})}},"refreshAutomaticName"),x=a(i=>{if(!v()||u===void 0||h)return;const e=g,c=l?.review_binding?.review_id??u.getEntries().map(y=>y.details?.reviewId).find(y=>typeof y=="string"),R=Z(u,e,c);if(R===""){E=!0,_=!1,S=!1,P();return}E=!1;const T=i?ee(u,e,c):"",w=d;h=!0,i&&(A("Generating recap\u2026"),j(T));let k;try{k=K(t)??void 0}catch{}s(R,y=>{!i&&d!==w||!v()||V(t,y).then(()=>{!i&&d!==w||!v()||(_=!0,S=d!==w,D(y),i&&A("Recap ready"))}).catch(L=>A(`Recap could not be saved: ${String(L)}`)).finally(()=>{h=!1})},m,k),setTimeout(()=>{h=!1},3e4).unref?.()},"requestRecap");n.registerCommand?.("recap",{description:"Generate a Goal/State recap and refresh the original generated session title",handler:a((i,e)=>{o=e.ui,u=e.sessionManager,f(e),x(!0)},"handler")}),n.on("session_start",(i,e)=>{o=e.ui,u=e.sessionManager,f(e),l=void 0,G(t).then(c=>{l=c.node}).catch(()=>{}),p=Date.now(),d=0,g=void 0,_=!1,S=!1,E=!1,h=!1,P()}),n.on("input",(i,e)=>{I()}),n.on("message_update",(i,e)=>{const c=i?.message;c?.role==="assistant"&&(g=c),I()}),n.on("turn_end",(i,e)=>{g=void 0,f(e),I()}),M!==void 0&&clearInterval(M);const N=setInterval(()=>{try{if(!v()||u===void 0||E||_&&!S||h||Date.now()-p<Y())return;x(!1)}catch{}},z);typeof N.unref=="function"&&N.unref(),M=N,n.on("session_shutdown",()=>{clearInterval(N),M===N&&(M=void 0)})}a(te,"registerCanvasRecap");var de=te;export{de as default,te as registerCanvasRecap};

package/dist/pi-extensions/canvas-stophook.js

@@ -1 +1 @@
-var J=Object.defineProperty;var c=(t,e)=>J(t,"name",{value:e,configurable:!0});import{envNodeId as j}from"../shared/env.js";import{writeFileSync as q,mkdirSync as H,existsSync as M,readFileSync as W}from"node:fs";import{join as Y}from"node:path";import{contextDir as z,jobDir as G}from"../core/canvas/paths.js";import{mutateBrokerFault as T,recordBrokerTelemetry as L,recordBrokerTurn as v}from"../core/runtime/broker/daemon-ops.js";import{clearStopSignals as V,consumeStopSignals as X}from"../core/runtime/stop-signals.js";import{bindBrokerSession as K,brokerExtensionState as F,relaunchBrokerRoot as Q,settleBroker as O}from"../core/runtime/broker/daemon-ops.js";import{emitEvent as C}from"../core/events/emit.js";import{activeBackgroundBashJobs as Z}from"../core/bash-jobs.js";import{CONTEXT_NUDGE_CUSTOM_TYPE as ee,formatCard as te}from"../shared/generated-context.js";import{isReviewBoundary as ne}from"../core/runtime/session-visibility.js";import{clearRefusedTurn as oe,isRuntimeTeardownInProgress as re,refuseTurn as se,runRefreshAbort as ae}from"../core/runtime/broker/extension-abort.js";import{announceMessageOrigin as N}from"../core/runtime/stamp/channel.js";const P=80;function ie(t,e){const a=e??{},o=c(p=>typeof p=="string"?p:"","pick"),i=o(a.command)||o(a.path)||o(a.file_path)||o(a.pattern)||o(a.description)||o(a.prompt),u=(i!==""?`${t}: ${i}`:t).replace(/\s+/g," ").trim();return u.length>P?u.slice(0,P):u}c(ie,"summarizeActivity");function ce(t,e,a,o,i,u,p){try{M(t)||H(t,{recursive:!0});const m=Y(t,"telemetry.json");let g={};if(M(m))try{g=JSON.parse(W(m,"utf8"))}catch{}const b={tokens_in:e,tokens_out:a,context_tokens:i??g.context_tokens,last_activity:u??g.last_activity,model:o!==""?o:g.model??"",updated_at:p};q(m,JSON.stringify(b,null,2),"utf8")}catch{}}c(ce,"flushTelemetry");function le(t){for(let e=t.length-1;e>=0;e--)if(t[e]?.role==="assistant")return t[e]}c(le,"lastAssistantMessage");function de(t){try{const e=t?.sessionManager?.getBranch();if(!Array.isArray(e))return[];const a=new Set;for(const o of e){if(!ne(o))continue;const i=o.details?.reviewId;typeof i=="string"&&a.add(i)}return[...a]}catch{return[]}}c(de,"currentReviewBoundaryIds");const D=1e4,S=[13e4,15e4,17e4,185e3,2e5];function ue(t){const e=S[0],a=S[S.length-1];if(t<e)return null;if(t>=a)return a+Math.floor((t-a)/D)*D;let o=e;for(const i of S)t>=i&&(o=i);return o}c(ue,"steerBand");function fe(t,e,a){const o=Math.round(t/1e3),i=t>=185e3;if(a==="orchestrator")return t<15e4?`Context ~${o}k and growing. When you reach a good stopping point, consider updating context/roadmap.md and running \`crtr node yield\` to refresh against it \u2014 no rush yet.`:i?`Context ~${o}k \u2014 this is getting long. Stop taking on new work now: checkpoint context/roadmap.md, hand off anything outstanding, and \`crtr node yield\` immediately to refresh before this context overflows.`:`Context ~${o}k. Update context/roadmap.md so a fresh revive can continue, delegate any outstanding work, then \`crtr node yield\` to refresh.`;if(e==="resident"){const u="If substantial work remains, `crtr node yield` to continue fresh against your goal and your note. Add --promote only when worthwhile independent work can run in parallel and coordinating it should become your primary job; `crtr node yield -h` has the boundary.";return t<15e4?`Context ~${o}k and growing. ${u} Otherwise no rush \u2014 wrap up when you reach a good stopping point.`:i?`Context ~${o}k \u2014 this is getting long. Wrap up now before this context overflows: finish what's in hand, or \`crtr node yield\` immediately to continue fresh against your goal and your note if substantial work remains.`:`Context ~${o}k. ${u} If you're near done, just finish here; if there's more open-ended work, \`crtr node yield\` rather than letting this context grow.`}return t<15e4?`Context ~${o}k and growing. If you're near done, finish with \`crtr push final\`. If real work remains, \`crtr node yield\` to continue in a fresh window against your goal and your note \u2014 no rush yet.`:i?`Context ~${o}k \u2014 this is getting long. Wrap up now before this context overflows: \`crtr push final\` if you're close, otherwise \`crtr node yield\` immediately to continue in a fresh window against your goal and your note.`:`Context ~${o}k. If you're close, finish with \`crtr push final\`; otherwise \`crtr node yield\` now to refresh into a clean window and keep going against your goal and your note.`}c(fe,"steerNote");function he(t){const e=j();if(e===void 0||e.trim()==="")return;const a=G(e);let o=0,i=0,u="",p=null,m=null;const g=new Set,b=c(()=>Z(z(e)).length>0,"backgroundJobsRunning"),f=c((n,s)=>{C({event:"broker.daemon.operation.failed",level:"error",node_id:e,error:s,fields:{operation:n}})},"emitDaemonOperationFailure"),I=c((n,s)=>{if(n.action==="reprompt"){N(n.prompt,{type:"runtime",kind:"stop-guard"}),t.sendUserMessage(n.prompt,{deliverAs:"followUp"});return}if(n.action==="shutdown")try{s?.shutdown?.()}catch{}},"enactSettleDirective"),U=3e3;let R=0,B=Promise.resolve();const E=c((n,s)=>{const r=new Date().toISOString();ce(a,o,i,u,n,s,r);const h={tokens_in:o,context_tokens:n,last_activity:s,updated_at:r};B=B.then(()=>L(e,h)).catch(y=>f("telemetry",y))},"publishTelemetry"),k=c(()=>{const n=Date.now();n-R<U||(R=n,Promise.all([v(e,{event:"progress"}),T(e,{op:"clear",link:"daemon\u2192node"})]).catch(s=>f("turn_progress",s)))},"heartbeat");t.on("session_start",async(n,s)=>{try{const r=s?.sessionManager?.getSessionId?.();if(typeof r!="string"||r==="")return;const h=s?.sessionManager?.getSessionFile?.(),y=typeof h=="string"&&h!==""?h:null,w=typeof n?.reason=="string"?n.reason:null;w==="new"&&(o=0,i=0,g.clear());const l=await K(e,{piSessionId:r,sessionFile:y,pid:process.pid,reason:w,reviewBoundaryIds:de(s)});if(l.action==="shutdown"){try{s?.shutdown?.()}catch{}return}if(l.action==="relaunch_root"){Q(e).catch(d=>{const _=d instanceof Error?d.message:String(d);s?.ui?.notify?.(`/new refused: ${_}`,"error"),C({event:"broker.daemon.operation.failed",level:"error",node_id:e,error:d,fields:{operation:"relaunch_root"}})});return}}catch(r){C({event:"broker.daemon.operation.failed",level:"error",node_id:e,error:r,fields:{operation:"session_bound"}})}}),t.on("agent_start",async(n,s)=>{try{if(!(await v(e,{event:"started"})).applied)throw new Error("daemon refused turn open")}catch(r){f("turn_open",r),s?.ui?.notify?.("Turn refused: the broker no longer owns this node.","error"),se(()=>s?.abort?.())}}),t.on("input",()=>{oe();try{V(e)}catch{}}),t.on("tool_execution_start",n=>{try{m=ie(String(n?.toolName??""),n?.args),E(p,m),k()}catch{}}),t.on("tool_execution_update",()=>{try{k()}catch{}}),t.on("message_update",()=>{try{k()}catch{}}),t.on("tool_execution_end",async(n,s)=>{try{if(k(),(await F(e)).node.intent==="refresh")try{ae(()=>s?.abort?.())}catch{}}catch{}}),t.on("session_shutdown",async(n,s)=>{try{await v(e,{event:"closed",end_reason:"teardown-aborted"})}catch(r){f("turn_close_teardown",r)}if(n?.reason==="quit")try{const r=await O(e,{stopReason:"quit",backgroundJobsRunning:b(),pushedFinal:!1});I(r,s)}catch(r){f("settle_quit",r)}});const $=c(n=>{n?.role!=="assistant"||n.usage==null||(o+=Number(n.usage.input??0)||0,i+=Number(n.usage.output??0)||0,typeof n.model=="string"&&n.model!==""&&(u=n.model))},"accumulate");t.on("turn_end",async(n,s)=>{$(n?.message);let r=null;try{const l=s.getContextUsage()?.tokens;typeof l=="number"&&(r=l)}catch{}r!==null&&(p=r),E(r,m),k();try{await Promise.all([T(e,{op:"clear",link:"daemon\u2192node"}),T(e,{op:"clear",link:"pi\u2192provider"})])}catch(l){f("turn_end_fault_clear",l)}const h=Array.isArray(n?.message?.content)?n.message.content:[],y=n?.message?.stopReason??"",w=y!=="error"&&y!=="aborted"&&h.some(l=>l?.type==="toolCall");try{const d=(await F(e)).node,_=r!==null?ue(r):null;if(_!==null&&!g.has(_)){g.add(_);const A=te("context-nudge",{},fe(_,d.lifecycle,d.mode));w?(N(A,{type:"runtime",kind:"context-nudge"}),t.sendUserMessage(A,{deliverAs:"steer"})):t.sendMessage({customType:ee,content:A,display:!0},{deliverAs:"nextTurn"})}}catch(l){f("turn_boundary",l)}});let x=null;t.on("agent_end",n=>{x=n;try{const s=Array.isArray(n?.messages)?n.messages:[];for(const r of s)$(r)}catch{}}),t.on("agent_settled",async(n,s)=>{const r=x;if(x=null,re())return;try{await v(e,{event:"closed",end_reason:"settled"})}catch(d){f("turn_close",d);return}const h=Array.isArray(r?.messages)?r.messages:[],y=le(h),w=typeof y?.stopReason=="string"?y.stopReason:"",l=r===null?{pushedFinal:!1}:X(e);try{const d=await O(e,{stopReason:w,backgroundJobsRunning:b(),pushedFinal:l.pushedFinal});I(d,s)}catch(d){f("settle",d)}})}c(he,"registerCanvasStophook");var Ie=he;export{Ie as default,he as registerCanvasStophook,fe as steerNote};
+var N=Object.defineProperty;var c=(n,t)=>N(n,"name",{value:t,configurable:!0});import{envNodeId as U}from"../shared/env.js";import{stripCdPrefix as q}from"../shared/strip-cd-prefix.js";import{contextDir as J}from"../core/canvas/paths.js";import{mutateBrokerFault as T,recordBrokerTelemetry as H,recordBrokerTurn as b,putBrokerTelemetry as W,clearBrokerPushedFinal as j,consumeBrokerPushedFinal as Y}from"../core/runtime/broker/daemon-ops.js";import{bindBrokerSession as z,brokerExtensionState as $,relaunchBrokerRoot as G,settleBroker as M}from"../core/runtime/broker/daemon-ops.js";import{emitEvent as C}from"../core/events/emit.js";import{activeBackgroundBashJobs as L}from"../core/bash-jobs.js";import{CONTEXT_NUDGE_CUSTOM_TYPE as V,formatCard as X}from"../shared/generated-context.js";import{isReviewBoundary as K}from"../core/runtime/session-visibility.js";import{clearRefusedTurn as Q,isRuntimeTeardownInProgress as Z,refuseTurn as ee,runRefreshAbort as te}from"../core/runtime/broker/extension-abort.js";import{announceMessageOrigin as P}from"../core/runtime/stamp/channel.js";const F=80;function ne(n,t){const a=t??{},s=c(m=>typeof m=="string"?m:"","pick"),g=q(s(a.command).trim())||s(a.path)||s(a.file_path)||s(a.pattern)||s(a.description)||s(a.prompt),y=(g!==""?`${n}: ${g}`:n).replace(/\s+/g," ").trim();return y.length>F?y.slice(0,F):y}c(ne,"summarizeActivity");function oe(n){for(let t=n.length-1;t>=0;t--)if(n[t]?.role==="assistant")return n[t]}c(oe,"lastAssistantMessage");function re(n){try{const t=n?.sessionManager?.getBranch();if(!Array.isArray(t))return[];const a=new Set;for(const s of t){if(!K(s))continue;const d=s.details?.reviewId;typeof d=="string"&&a.add(d)}return[...a]}catch{return[]}}c(re,"currentReviewBoundaryIds");const O=1e4,v=[13e4,15e4,17e4,185e3,2e5];function se(n){const t=v[0],a=v[v.length-1];if(n<t)return null;if(n>=a)return a+Math.floor((n-a)/O)*O;let s=t;for(const d of v)n>=d&&(s=d);return s}c(se,"steerBand");function ae(n,t,a){const s=Math.round(n/1e3),d=n>=185e3;if(a==="orchestrator")return n<15e4?`Context ~${s}k and growing. When you reach a good stopping point, consider updating context/roadmap.md and running \`crtr node yield\` to refresh against it \u2014 no rush yet.`:d?`Context ~${s}k \u2014 this is getting long. Stop taking on new work now: checkpoint context/roadmap.md, hand off anything outstanding, and \`crtr node yield\` immediately to refresh before this context overflows.`:`Context ~${s}k. Update context/roadmap.md so a fresh revive can continue, delegate any outstanding work, then \`crtr node yield\` to refresh.`;if(t==="resident"){const g="If substantial work remains, `crtr node yield` to continue fresh against your goal and your note. Add --promote only when worthwhile independent work can run in parallel and coordinating it should become your primary job; `crtr node yield -h` has the boundary.";return n<15e4?`Context ~${s}k and growing. ${g} Otherwise no rush \u2014 wrap up when you reach a good stopping point.`:d?`Context ~${s}k \u2014 this is getting long. Wrap up now before this context overflows: finish what's in hand, or \`crtr node yield\` immediately to continue fresh against your goal and your note if substantial work remains.`:`Context ~${s}k. ${g} If you're near done, just finish here; if there's more open-ended work, \`crtr node yield\` rather than letting this context grow.`}return n<15e4?`Context ~${s}k and growing. If you're near done, finish with \`crtr push final\`. If real work remains, \`crtr node yield\` to continue in a fresh window against your goal and your note \u2014 no rush yet.`:d?`Context ~${s}k \u2014 this is getting long. Wrap up now before this context overflows: \`crtr push final\` if you're close, otherwise \`crtr node yield\` immediately to continue in a fresh window against your goal and your note.`:`Context ~${s}k. If you're close, finish with \`crtr push final\`; otherwise \`crtr node yield\` now to refresh into a clean window and keep going against your goal and your note.`}c(ae,"steerNote");function ie(n){const t=U();if(t===void 0||t.trim()==="")return;let a=0,s=0,d="",g=null,y=null;const m=new Set,S=c(()=>L(J(t)).length>0,"backgroundJobsRunning"),l=c((e,r)=>{C({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:r,fields:{operation:e}})},"emitDaemonOperationFailure"),B=c((e,r)=>{if(e.action==="reprompt"){P(e.prompt,{type:"runtime",kind:"stop-guard"}),n.sendUserMessage(e.prompt,{deliverAs:"followUp"});return}if(e.action==="shutdown")try{r?.shutdown?.()}catch{}},"enactSettleDirective"),D=3e3;let I=0,k=Promise.resolve();const R=c((e,r)=>{const o=new Date().toISOString(),f={tokens_in:a,tokens_out:s,model:d,context_tokens:e,last_activity:r,updated_at:o};k=k.then(()=>W(t,f)).catch(u=>l("telemetry-record",u));const h={tokens_in:a,context_tokens:e,last_activity:r,updated_at:o};k=k.then(()=>H(t,h)).catch(u=>l("telemetry",u))},"publishTelemetry"),_=c(()=>{const e=Date.now();e-I<D||(I=e,Promise.all([b(t,{event:"progress"}),T(t,{op:"clear",link:"daemon\u2192node"})]).catch(r=>l("turn_progress",r)))},"heartbeat");n.on("session_start",async(e,r)=>{try{const o=r?.sessionManager?.getSessionId?.();if(typeof o!="string"||o==="")return;const f=r?.sessionManager?.getSessionFile?.(),h=typeof f=="string"&&f!==""?f:null,u=typeof e?.reason=="string"?e.reason:null;u==="new"&&(a=0,s=0,m.clear());const i=await z(t,{piSessionId:o,sessionFile:h,pid:process.pid,reason:u,reviewBoundaryIds:re(r)});if(i.action==="shutdown"){try{r?.shutdown?.()}catch{}return}if(i.action==="relaunch_root"){G(t).catch(p=>{const w=p instanceof Error?p.message:String(p);r?.ui?.notify?.(`/new refused: ${w}`,"error"),C({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:p,fields:{operation:"relaunch_root"}})});return}}catch(o){C({event:"broker.daemon.operation.failed",level:"error",node_id:t,error:o,fields:{operation:"session_bound"}})}}),n.on("agent_start",async(e,r)=>{try{if(!(await b(t,{event:"started"})).applied)throw new Error("daemon refused turn open")}catch(o){l("turn_open",o),r?.ui?.notify?.("Turn refused: the broker no longer owns this node.","error"),ee(()=>r?.abort?.())}}),n.on("input",async()=>{Q();try{await j(t)}catch(e){throw l("clear_pushed_final",e),e}}),n.on("tool_execution_start",e=>{try{y=ne(String(e?.toolName??""),e?.args),R(g,y),_()}catch{}}),n.on("tool_execution_update",()=>{try{_()}catch{}}),n.on("message_update",()=>{try{_()}catch{}}),n.on("tool_execution_end",async(e,r)=>{try{if(_(),(await $(t)).node.intent==="refresh")try{te(()=>r?.abort?.())}catch{}}catch{}}),n.on("session_shutdown",async(e,r)=>{try{await b(t,{event:"closed",end_reason:"teardown-aborted"})}catch(o){l("turn_close_teardown",o)}if(e?.reason==="quit")try{const o=await M(t,{stopReason:"quit",backgroundJobsRunning:S(),pushedFinal:!1});B(o,r)}catch(o){l("settle_quit",o)}});const E=c(e=>{e?.role!=="assistant"||e.usage==null||(a+=Number(e.usage.input??0)||0,s+=Number(e.usage.output??0)||0,typeof e.model=="string"&&e.model!==""&&(d=e.model))},"accumulate");n.on("turn_end",async(e,r)=>{E(e?.message);let o=null;try{const i=r.getContextUsage()?.tokens;typeof i=="number"&&(o=i)}catch{}o!==null&&(g=o),R(o,y),_();try{await Promise.all([T(t,{op:"clear",link:"daemon\u2192node"}),T(t,{op:"clear",link:"pi\u2192provider"})])}catch(i){l("turn_end_fault_clear",i)}const f=Array.isArray(e?.message?.content)?e.message.content:[],h=e?.message?.stopReason??"",u=h!=="error"&&h!=="aborted"&&f.some(i=>i?.type==="toolCall");try{const p=(await $(t)).node,w=o!==null?se(o):null;if(w!==null&&!m.has(w)){m.add(w);const A=X("context-nudge",{},ae(w,p.lifecycle,p.mode));u?(P(A,{type:"runtime",kind:"context-nudge"}),n.sendUserMessage(A,{deliverAs:"steer"})):n.sendMessage({customType:V,content:A,display:!0},{deliverAs:"nextTurn"})}}catch(i){l("turn_boundary",i)}});let x=null;n.on("agent_end",e=>{x=e;try{const r=Array.isArray(e?.messages)?e.messages:[];for(const o of r)E(o)}catch{}}),n.on("agent_settled",async(e,r)=>{const o=x;if(x=null,Z())return;try{await b(t,{event:"closed",end_reason:"settled"})}catch(i){l("turn_close",i);return}const f=Array.isArray(o?.messages)?o.messages:[],h=oe(f),u=typeof h?.stopReason=="string"?h.stopReason:"";try{const i=o===null?{pushedFinal:!1}:await Y(t),p=await M(t,{stopReason:u,backgroundJobsRunning:S(),pushedFinal:i.pushedFinal});B(p,r)}catch(i){l("settle",i)}})}c(ie,"registerCanvasStophook");var ke=ie;export{ke as default,ie as registerCanvasStophook,ae as steerNote};

package/dist/pi-extensions/canvas-structured-output.js

@@ -1,13 +1,13 @@
-var o=Object.defineProperty;var n=(e,t)=>o(e,"name",{value:t,configurable:!0});import{envNodeId as i}from"../shared/env.js";import{readOutputRequest as u}from"../core/runtime/structured-output.js";function a(e){const t=JSON.stringify(e.schema,null,2);return`<structured-output-request>
-${e.mode==="terminal"?'This node owes a terminal structured result. When the work is complete, submit the result with `crtr push result` (pipe the JSON on stdin) \u2014 that records it and pushes your final report in one step, finishing this node. Do NOT call `crtr push final` yourself; it is blocked while this request is pending. If the schema cannot be honestly satisfied (blocked, unavailable, bad input), decline with `crtr push result --decline "<reason>" --code <token>` instead of inventing a value \u2014 that finishes the node with a declined outcome. You cannot stop or go dormant until the result is accepted or declined.':'This node owes a one-off structured result. Submit it with `crtr push result` (pipe the JSON on stdin) \u2014 that records it and pushes an update report to your subscribers, then you continue working normally. If the schema cannot be honestly satisfied, decline with `crtr push result --decline "<reason>" --code <token>` instead of inventing a value. You cannot stop or go dormant until the result is accepted or declined.'}
+var o=Object.defineProperty;var n=(t,e)=>o(t,"name",{value:e,configurable:!0});import{envNodeId as i}from"../shared/env.js";import{readBrokerOutputRequest as u}from"../core/runtime/structured-output.js";function a(t){const e=JSON.stringify(t.schema,null,2);return`<structured-output-request>
+${t.mode==="terminal"?'This node owes a terminal structured result. When the work is complete, submit the result with `crtr push result` (pipe the JSON on stdin) \u2014 that records it and pushes your final report in one step, finishing this node. Do NOT call `crtr push final` yourself; it is blocked while this request is pending. If the schema cannot be honestly satisfied (blocked, unavailable, bad input), decline with `crtr push result --decline "<reason>" --code <token>` instead of inventing a value \u2014 that finishes the node with a declined outcome. You cannot stop or go dormant until the result is accepted or declined.':'This node owes a one-off structured result. Submit it with `crtr push result` (pipe the JSON on stdin) \u2014 that records it and pushes an update report to your subscribers, then you continue working normally. If the schema cannot be honestly satisfied, decline with `crtr push result --decline "<reason>" --code <token>` instead of inventing a value. You cannot stop or go dormant until the result is accepted or declined.'}
 
 The submitted JSON is validated against this schema; a mismatch rejects with field errors and records nothing, so fix and rerun.
 
 Required schema:
 
 \`\`\`json
-${t}
+${e}
 \`\`\`
-</structured-output-request>`}n(a,"structuredOutputPromptBlock");function d(e){const t=i();t===void 0||t.trim()===""||e.on("before_agent_start",r=>{const s=u(t);if(s.state==="valid")return{systemPrompt:`${r.systemPrompt}
+</structured-output-request>`}n(a,"structuredOutputPromptBlock");function d(t){const e=i();e===void 0||e.trim()===""||t.on("before_agent_start",r=>{const s=u(e);if(s.state==="valid")return{systemPrompt:`${r.systemPrompt}
 
 ${a(s.request)}`}})}n(d,"registerCanvasStructuredOutput");var p=d;export{p as default,d as registerCanvasStructuredOutput,a as structuredOutputPromptBlock};

package/dist/pi-extensions/canvas-tool-guide.js

@@ -1,6 +1,6 @@
 var f=Object.defineProperty;var c=(t,o)=>f(t,"name",{value:o,configurable:!0});import{envNodeId as d}from"../shared/env.js";import{execFile as l}from"node:child_process";import{createHash as m}from"node:crypto";import{mkdirSync as p,readFileSync as h,writeFileSync as x}from"node:fs";import{homedir as y}from"node:os";import{dirname as g,join as S}from"node:path";import{promisify as $}from"node:util";const _=$(l),s=15e3,O=`
 
-Guidelines:`;function T(t){const o=m("sha1").update(`${t}\0${process.env.CRTR_SCOPES??""}`).digest("hex").slice(0,16);return S(y(),".crouter","cache",`crtr-tool-guide-${o}.json`)}c(T,"helpCacheFile");function a(t,o){const r=`<crtr-tool-guide>
+Guidelines:`;function T(t){const o=m("sha1").update(`${t}\0${process.env.CRTR_SCOPES??""}`).digest("hex").slice(0,16);return S(y(),".cache","crouter",`crtr-tool-guide-${o}.json`)}c(T,"helpCacheFile");function a(t,o){const r=`<crtr-tool-guide>
 ${o}
 </crtr-tool-guide>`,n=t.indexOf(O);return n===-1?`${t}
 

package/dist/pi-extensions/system-prompt-entry.d.ts

@@ -0,0 +1,15 @@
+interface PiLike {
+    on(event: 'agent_start', handler: (event: unknown, ctx: {
+        getSystemPrompt(): string;
+        sessionManager: {
+            getEntries(): Array<{
+                type: string;
+                customType?: string;
+                data?: unknown;
+            }>;
+        };
+    }) => void): void;
+    appendEntry(type: string, data: unknown): void;
+}
+export default function registerSystemPromptEntry(pi: PiLike): void;
+export {};

package/dist/pi-extensions/system-prompt-entry.js

@@ -0,0 +1 @@
+var p=Object.defineProperty;var n=(t,e)=>p(t,"name",{value:e,configurable:!0});import{envNodeId as m}from"../shared/env.js";function i(t){t.on("agent_start",(e,r)=>{if(!m())return;const s=r.getSystemPrompt();[...r.sessionManager.getEntries()].reverse().find(o=>o.type==="custom"&&o.customType==="crtr-system-prompt")?.data?.text!==s&&t.appendEntry("crtr-system-prompt",{text:s})})}n(i,"registerSystemPromptEntry");export{i as default};

package/dist/shared/env.d.ts

@@ -1,8 +1,12 @@
 /** The current node's id (`CRTR_NODE_ID`), or undefined outside a node. */
 export declare function envNodeId(): string | undefined;
+/** A Linux node command inherits the broker's relay, not the daemon's filesystem. */
+export declare function isSandboxedNode(): boolean;
+/** The app that owns the current node, supplied in its broker launch identity. */
+export declare function envGrantee(): string | undefined;
 /** The current run's scope allow-list; null means the row inherits everything. */
 export declare function envScopes(): readonly string[] | null;
-/** Whether an allow-list holds a capability. Parameterized memory-read scopes are equivalent in beta. */
+/** Whether a launched scope list covers a capability. Null means not narrowed. */
 export declare function scopeAllowed(scopes: readonly string[] | null | undefined, scope: string): boolean;
 export declare function envExecutionId(): string | undefined;
 /** The current node's target profile id (`CRTR_PROFILE_ID`), or undefined. */

package/dist/shared/env.js

@@ -1 +1 @@
-var _=Object.defineProperty;var e=(n,r)=>_(n,"name",{value:r,configurable:!0});function A(){return process.env.CRTR_NODE_ID}e(A,"envNodeId");function M(){const n=process.env.CRTR_SCOPES;return n===void 0?null:n===""?[]:n.split(",")}e(M,"envScopes");function D(n,r){return n==null?!0:n.some(t=>t===r||r==="memory:read"&&t.startsWith("memory:read:"))}e(D,"scopeAllowed");function S(){return process.env.CRTR_EXECUTION_ID}e(S,"envExecutionId");function x(){return process.env.CRTR_PROFILE_ID}e(x,"envProfileId");function N(){return process.env.CRTR_NODE_CWD}e(N,"envNodeCwd");function a(){return process.env.CRTR_MODEL_INTENT}e(a,"envModelIntent");function O(){return process.env.CRTR_MODEL_EXACT==="1"}e(O,"envModelExact");function I(){return process.env.CRTR_HOME}e(I,"envHomeOverride");function L(){return process.env.CRTR_RUNTIME_HOME}e(L,"envRuntimeHomeOverride");function o(n,r){if(n===void 0)return r;const t=Number(n);return Number.isFinite(t)&&t>0?t:r}e(o,"parsePositiveMs");const R=5*6e4;function m(){return o(process.env.CRTR_STREAM_WATCHDOG_MS,R)}e(m,"envStreamWatchdogMs");const i=800;function P(){return o(process.env.CRTR_WATCHER_TICK_MS,i)}e(P,"envWatcherTickMs");const c=1e3;function U(){return o(process.env.CRTR_WATCHER_DEBOUNCE_MS,c)}e(U,"envWatcherDebounceMs");const T=6e4;function B(){return o(process.env.CRTR_RECAP_IDLE_MS,T)}e(B,"envRecapIdleMs");function l(){const n=process.env.CRTR_RECAP_MODEL;return n!==void 0&&n.trim()!==""?n.trim():void 0}e(l,"envRecapModelOverride");const E=300*1e3;function H(){return o(process.env.CRTR_BASH_VALVE_MS,E)}e(H,"envBashValveMs");const p=60*1e3;function W(){return o(process.env.CRTR_BASH_AUTO_BG_DEADLINE_MS,p)}e(W,"envBashAutoBgDeadlineMs");function F(){const n=process.env.CRTR_PIDFILE;return n!==void 0&&n!==""?n:void 0}e(F,"envPidfileOverride");const v="@earendil-works/pi-coding-agent";function G(){return process.env.CRTR_BROKER_ENGINE??v}e(G,"envBrokerEngine");function K(){return process.env.CRTR_PI_BINARY}e(K,"envPiBinaryOverride");function k(){return process.env.CRTR_NO_DAEMON_AUTOSTART==="1"}e(k,"envNoDaemonAutostart");function g(){return process.env.CRTRD_TCP}e(g,"envCrtrdTcp");function b(){const n=process.env.CRTRD_TOKEN;return n!==void 0&&n!==""?n:void 0}e(b,"envCrtrdToken");function V(){return process.env.CRTR_NO_EXPORTS==="1"}e(V,"envNoExports");function h(){return process.env.CRTR_DEBUG==="1"}e(h,"envDebug");function s(n){if(n===void 0||n==="")return;const r=Number(n);return Number.isSafeInteger(r)&&r>=1?r:void 0}e(s,"parsePositiveInteger");function y(){return s(process.env.CRTR_MAX_LIVE_BROKERS)}e(y,"envMaxLiveBrokers");function X(){return s(process.env.CRTR_WARN_LIVE_BROKERS)}e(X,"envWarnLiveBrokers");function u(n){if(n===void 0)return;const r=Number(n);return Number.isFinite(r)&&r>0?r:void 0}e(u,"parsePositiveMsNoDefault");function w(){return u(process.env.CRTR_TEST_UNATTENDED_PARK_MS)}e(w,"envTestUnattendedParkMs");function Y(){return u(process.env.CRTR_UNATTENDED_PARK_MS)}e(Y,"envUnattendedParkMs");function d(){return u(process.env.CRTR_TEST_PARK_SUMMARY_GRACE_MS)}e(d,"envTestParkSummaryGraceMs");const f=5*6e4;function j(){return d()??f}e(j,"parkSummaryGraceMs");export{W as envBashAutoBgDeadlineMs,H as envBashValveMs,G as envBrokerEngine,g as envCrtrdTcp,b as envCrtrdToken,h as envDebug,S as envExecutionId,I as envHomeOverride,y as envMaxLiveBrokers,O as envModelExact,a as envModelIntent,k as envNoDaemonAutostart,V as envNoExports,N as envNodeCwd,A as envNodeId,K as envPiBinaryOverride,F as envPidfileOverride,x as envProfileId,B as envRecapIdleMs,l as envRecapModelOverride,L as envRuntimeHomeOverride,M as envScopes,m as envStreamWatchdogMs,d as envTestParkSummaryGraceMs,w as envTestUnattendedParkMs,Y as envUnattendedParkMs,X as envWarnLiveBrokers,U as envWatcherDebounceMs,P as envWatcherTickMs,j as parkSummaryGraceMs,D as scopeAllowed};
+var _=Object.defineProperty;var e=(n,r)=>_(n,"name",{value:r,configurable:!0});import{covers as R}from"@north-light/crouter-identity";function c(){return process.env.CRTR_NODE_ID}e(c,"envNodeId");function x(){return process.platform==="linux"&&!!(c()&&process.env.CRTR_API_SOCKET)}e(x,"isSandboxedNode");function S(){return process.env.CRTR_GRANTEE}e(S,"envGrantee");function N(){const n=process.env.CRTR_SCOPES;return n===void 0?null:n===""?[]:n.split(",")}e(N,"envScopes");function a(n,r){return n==null?!0:n.some(o=>R(o,r))}e(a,"scopeAllowed");function O(){return process.env.CRTR_EXECUTION_ID}e(O,"envExecutionId");function I(){return process.env.CRTR_PROFILE_ID}e(I,"envProfileId");function L(){return process.env.CRTR_NODE_CWD}e(L,"envNodeCwd");function P(){return process.env.CRTR_MODEL_INTENT}e(P,"envModelIntent");function B(){return process.env.CRTR_MODEL_EXACT==="1"}e(B,"envModelExact");function U(){return process.env.CRTR_HOME}e(U,"envHomeOverride");function m(){return process.env.CRTR_RUNTIME_HOME}e(m,"envRuntimeHomeOverride");function t(n,r){if(n===void 0)return r;const o=Number(n);return Number.isFinite(o)&&o>0?o:r}e(t,"parsePositiveMs");const i=5*6e4;function l(){return t(process.env.CRTR_STREAM_WATCHDOG_MS,i)}e(l,"envStreamWatchdogMs");const p=800;function H(){return t(process.env.CRTR_WATCHER_TICK_MS,p)}e(H,"envWatcherTickMs");const T=1e3;function G(){return t(process.env.CRTR_WATCHER_DEBOUNCE_MS,T)}e(G,"envWatcherDebounceMs");const v=6e4;function F(){return t(process.env.CRTR_RECAP_IDLE_MS,v)}e(F,"envRecapIdleMs");function K(){const n=process.env.CRTR_RECAP_MODEL;return n!==void 0&&n.trim()!==""?n.trim():void 0}e(K,"envRecapModelOverride");const E=300*1e3;function W(){return t(process.env.CRTR_BASH_VALVE_MS,E)}e(W,"envBashValveMs");const d=60*1e3;function k(){return t(process.env.CRTR_BASH_AUTO_BG_DEADLINE_MS,d)}e(k,"envBashAutoBgDeadlineMs");function b(){const n=process.env.CRTR_PIDFILE;return n!==void 0&&n!==""?n:void 0}e(b,"envPidfileOverride");const f="@earendil-works/pi-coding-agent";function g(){return process.env.CRTR_BROKER_ENGINE??f}e(g,"envBrokerEngine");function V(){return process.env.CRTR_PI_BINARY}e(V,"envPiBinaryOverride");function h(){return process.env.CRTR_NO_DAEMON_AUTOSTART==="1"}e(h,"envNoDaemonAutostart");function X(){return process.env.CRTRD_TCP}e(X,"envCrtrdTcp");function w(){const n=process.env.CRTRD_TOKEN;return n!==void 0&&n!==""?n:void 0}e(w,"envCrtrdToken");function y(){return process.env.CRTR_NO_EXPORTS==="1"}e(y,"envNoExports");function Y(){return process.env.CRTR_DEBUG==="1"}e(Y,"envDebug");function u(n){if(n===void 0||n==="")return;const r=Number(n);return Number.isSafeInteger(r)&&r>=1?r:void 0}e(u,"parsePositiveInteger");function j(){return u(process.env.CRTR_MAX_LIVE_BROKERS)}e(j,"envMaxLiveBrokers");function q(){return u(process.env.CRTR_WARN_LIVE_BROKERS)}e(q,"envWarnLiveBrokers");function s(n){if(n===void 0)return;const r=Number(n);return Number.isFinite(r)&&r>0?r:void 0}e(s,"parsePositiveMsNoDefault");function z(){return s(process.env.CRTR_TEST_UNATTENDED_PARK_MS)}e(z,"envTestUnattendedParkMs");function J(){return s(process.env.CRTR_UNATTENDED_PARK_MS)}e(J,"envUnattendedParkMs");function C(){return s(process.env.CRTR_TEST_PARK_SUMMARY_GRACE_MS)}e(C,"envTestParkSummaryGraceMs");const A=5*6e4;function Q(){return C()??A}e(Q,"parkSummaryGraceMs");export{k as envBashAutoBgDeadlineMs,W as envBashValveMs,g as envBrokerEngine,X as envCrtrdTcp,w as envCrtrdToken,Y as envDebug,O as envExecutionId,S as envGrantee,U as envHomeOverride,j as envMaxLiveBrokers,B as envModelExact,P as envModelIntent,h as envNoDaemonAutostart,y as envNoExports,L as envNodeCwd,c as envNodeId,V as envPiBinaryOverride,b as envPidfileOverride,I as envProfileId,F as envRecapIdleMs,K as envRecapModelOverride,m as envRuntimeHomeOverride,N as envScopes,l as envStreamWatchdogMs,C as envTestParkSummaryGraceMs,z as envTestUnattendedParkMs,J as envUnattendedParkMs,q as envWarnLiveBrokers,G as envWatcherDebounceMs,H as envWatcherTickMs,x as isSandboxedNode,Q as parkSummaryGraceMs,a as scopeAllowed};

package/dist/shared/strip-cd-prefix.d.ts

@@ -0,0 +1 @@
+export declare function stripCdPrefix(line: string): string;

package/dist/shared/strip-cd-prefix.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var r=(e,t)=>c(e,"name",{value:t,configurable:!0});const s=/^cd\s+(?:"[^"]*"|'[^']*'|\S+)\s*(?:&&|;)\s*/;function n(e){let t=e;for(;s.test(t);)t=t.replace(s,"");return t}r(n,"stripCdPrefix");export{n as stripCdPrefix};

package/dist/types.d.ts

@@ -188,6 +188,12 @@ export interface CanvasMenuItem {
     confirm?: boolean;
 }
 export type ModelStrength = 'ultra' | 'strong' | 'medium' | 'light';
+/** A portable model preference: a provider family at a strength, free to rotate
+ *  to another family at the same strength. */
+export interface ModelIntent {
+    family: string;
+    strength: ModelStrength;
+}
 export type ModelProvider = 'anthropic' | 'openai';
 export interface ModelLaddersConfig {
     /** Optional default provider for bare strengths. If unset, runtime falls back
@@ -356,6 +362,26 @@ export interface ScopeConfig {
     remoteCanvas: RemoteCanvasConfig;
     /** The user-owned TCP listener address. Empty leaves the TCP listener off. */
     api: ApiConfig;
+    /** Volume root is CRTR_HOME; this optional key selects the person's file tree. */
+    paths?: {
+        user_files?: string;
+    };
+    /** Conversation store configuration for the daemon. */
+    store?: {
+        root?: string;
+        address?: string;
+    };
+    /** App-facing listener; absent unless this daemon serves a user's runtime. */
+    runtime?: {
+        issuer: string;
+        audience: string;
+        listener: {
+            address: string;
+            port: number;
+        };
+        jwksUrl?: string;
+        person_uids?: number[];
+    };
     /** Extra env-var names/globs a scope explicitly admits across the broker
      *  spawn-env boundary (`buildBrokerEnv`, `core/runtime/spawn-env.ts`) — the
      *  "I accept this crosses as a shell-visible credential" escape hatch for a
@@ -463,25 +489,13 @@ export interface InstalledMarketplace {
     url: string;
     ref: string;
 }
-/** The on-disk manifest at `~/.crouter/profiles/<slug>-<id>/profile.json`
- *  (spec §2.1). A profile is an agent identity defined at the user root: it
- *  names N project directories and owns its own `memory/` store. Project
- *  `path`s are absolute, real-path-resolved directories in manifest order —
- *  the pointer set `findProjectScopeRoots` walks, after the node's own
- *  cwd. `name` is the mutable display name (and the gateable `profile` subject
- *  field); `<slug>-<id>` in the directory name is the stable id and
- *  never changes on rename. See `src/core/profiles/manifest.ts` for every
- *  read/write of this file — it is the sole owner of path resolution and
- *  mutation. */
+/** A profile definition in the scoped-state `profiles` row. Its project
+ *  paths are real-path-resolved and ordered; its id remains stable on rename.
+ *  Memory and environment live in separate app-owned paths. */
 export interface ProfileManifest {
     schema_version: number;
     name: string;
     projects: ProfileProject[];
-    /** The directory nodes under this profile are pinned to (see
-     *  `profileHome`). Normalized on read to the first project's path when the
-     *  manifest carries none, so a profile written before homes existed still
-     *  has one. */
-    home: string | null;
     /** ISO timestamp while the profile is inert; null (or absent on older manifests) means active. */
     paused_at: string | null;
     /** Persona kind for creates that omit kind; absent means `general`. */
@@ -491,6 +505,8 @@ export interface ProfileManifest {
      *  every broker launched under the profile as `CRTR_PROFILE_META_<KEY>`
      *  env (see `core/runtime/spawn-env.ts`). Absent means none. */
     metadata?: Record<string, string>;
+    /** App that owns this profile; older terminal profiles have no grantee. */
+    grantee?: string;
     created_at: string;
     last_used_at: string | null;
 }

package/docs/cli/memory-and-preferences.md

@@ -45,6 +45,8 @@ printf '%s\n' 'Production changes need an explicit approval.' | \
   crtr memory edit <name> --rationale "Updated the approval rule."
 ```
 
-`crtr memory edit` replaces the whole body you pipe; it does not append text. Use `crtr memory history <name>` to read the revision history. If you want to create a document yourself, use `crtr memory write`; it requires a kind, a routing sentence that tells agents when to read it, and the document body.
+`crtr memory edit` replaces the whole body you pipe; it does not append text. Use `crtr memory history <name>` to read the revision history. If you want to create a document yourself, use `crtr memory write`; it requires a kind, a routing sentence that tells agents when to read it, and the document body. New documents persist `privacy: public` unless `--privacy friends` or `--privacy private` is supplied. `crtr memory edit --privacy <level>` changes the level and records the revision. Older documents without the field read as private until edited or migrated. Privacy levels are metadata; crouter does not yet enforce app read or write access by level.
+
+To set every existing user and profile memory document to public after updating crouter, run `npm run build && node scripts/migrate-memory-privacy.mjs` from the crouter repository. Each changed document gets an ordinary edit history record with rationale `privacy rollout: Silas's memories default to public`. The command excludes project, node, builtin, and plugin stores and leaves documents already marked public unchanged. It does not run automatically.
 
 Memory is for reusable current truth and durable instructions, not a transcript of one conversation. When a fact changes, update the existing document rather than saving a second version.

package/docs/sdk/client.md

@@ -15,6 +15,40 @@ const customSocketClient = new Crouter({ socketPath: '/custom/path/crtrd.sock' }
 
 `Crouter` is the default export and the only class an application constructs. `CrtrClient` from `@north-light/crouter-api` is an implementation detail and is not re-exported.
 
+## An app connection and refresh
+
+```ts
+import { OAuth2Client } from '@north-light/crouter-sdk';
+
+const oauth = new OAuth2Client({clientId, privateKey, keyId, redirectUri, issuer});
+const {url, codeVerifier, state, nonce} = await oauth.authorizeUrl({scopes: ['openid', 'crtr:act'], state: sessionState});
+// Save codeVerifier, state, and nonce in the app session; redirect the user to url.
+const connection = await oauth.exchangeCode({code: callbackCode, codeVerifier, state, nonce});
+const client = oauth.client(connection, store);
+```
+
+`ConnectionStore` provides `load(userId)` and `save(connection)`; it may also implement `lock(userId, fn)`. A multi-process app must implement the lock across every process: the SDK reloads the connection, sends the refresh request only if no other process rotated its token, and saves the result while the lock is held. `MemoryConnectionStore` locks only within one process and is for local development.
+
+A Postgres store can hold a transaction-scoped advisory lock for the whole callback (all workers must use the same database):
+
+```ts
+async function lock<T>(userId: string, fn: () => Promise<T>): Promise<T> {
+  const db = await pool.connect();
+  try {
+    await db.query('BEGIN');
+    await db.query('SELECT pg_advisory_xact_lock(hashtextextended($1, 0))', [userId]);
+    const result = await fn(); // load, token request, and save complete before COMMIT
+    await db.query('COMMIT');
+    return result;
+  } catch (error) {
+    await db.query('ROLLBACK');
+    throw error;
+  } finally { db.release(); }
+}
+```
+
+`refresh_token_reused` means the app's processes raced on one refresh token; the directory invalidates the grant's refresh tokens, so the user reconnects (without another consent page). Fix the store's `lock` before reconnecting or the race will recur. `runtime_provisioning` means the user's runtime is still being set up and the SDK retries the token request.
+
 ## Options
 
 | Option | Type | Default | Meaning |

package/docs/sdk/errors.md

@@ -11,6 +11,8 @@ description: Handle API and connection errors separately from settled agent outc
 
 Exceptions are for the layer underneath: the SDK rejected an invalid local identifier or configuration, the daemon refused the request, the connection failed, the request timed out, or you aborted.
 
+An error without `origin` was produced by the SDK because the request reached no server (runtime, router, or directory). Show it as a connection failure, never as a refusal. An OAuth ID token with a missing or mismatched nonce raises the SDK-only `id_token_invalid` code.
+
 ## Classes and mappings
 
 Every class below extends `APIError`, which carries `status`, `code`, `message`, `details`, and `headers`.

package/docs/sdk/memory.md

@@ -43,9 +43,9 @@ Every method accepts `RequestOptions` as its final optional argument (`signal`,
 | `memory.history(name, query?, options?)` | `name`; `MemoryHistoryQuery` | `MemoryHistoryDTO` |
 | `memory.resolve(name, scope?, options?)` | `name`; `MemoryScope` | `MemoryDocRefDTO` |
 
-`MemoryDocCreateRequest` requires `name`, `kind`, `when_and_why_to_read`, and `body`; it also accepts `frontmatter`, `extensions`, and the scope fields. `MemoryDocUpdateRequest` requires `rationale`, which is stored in revision history rather than document text, and optionally accepts `body`, `frontmatter`, `extensions`, `unset`, and the scope fields. `MemoryDocMoveRequest` requires `to` and accepts the scope fields.
+`MemoryDocCreateRequest` requires `name`, `kind`, `when_and_why_to_read`, and `body`; it also accepts `frontmatter`, `extensions`, and the scope fields. `frontmatter.privacy` accepts `public`, `friends`, or `private`; creation defaults to persisted `public`. `MemoryDocUpdateRequest` requires `rationale`, which is stored in revision history rather than document text, and optionally accepts `body`, `frontmatter`, `extensions`, `unset`, and the scope fields. Set `frontmatter.privacy` to change the level; it cannot be unset. A legacy document without the field reads as `private`. `MemoryDocMoveRequest` requires `to` and accepts the scope fields.
 
-`retrieve` returns the body by default. With `frontmatter: true`, its `body` is the complete document source. `MemoryDocDTO` also contains `frontmatter`, `representation` (`'leaf-file'` or `'directory-index'`), `links`, and any lint `findings`; document DTOs include their canonical name, kind, scope, extensions, path, store root, physical relative path, and any competing candidates. `resolve` returns the winning document's location and optional plugin name without reading its body.
+`retrieve` returns the body by default. With `frontmatter: true`, its `body` is the complete document source with the effective privacy level included for older documents. `MemoryDocDTO` also contains `privacy`, `frontmatter`, `representation` (`'leaf-file'` or `'directory-index'`), `links`, and any lint `findings`; document DTOs include their canonical name, kind, scope, extensions, path, store root, physical relative path, and any competing candidates. `resolve` returns the winning document's location and optional plugin name without reading its body.
 
 ```ts
 await client.memory.create({

package/docs/sdk/streaming.md

@@ -7,6 +7,27 @@ description: Follow assistant text, tool activity, reports, and outcomes as an a
 
 Watch a run as it works: assistant text as it is produced, tool calls as they start and finish, reports as they are pushed, and the settled outcome.
 
+## Forwarding a run to a browser
+
+The app server keeps the runtime token and connection; the browser connects only to the app. The app server calls `forwardRunEvents(client, runId, {after: cursorFromRequest(request), signal: request.signal})` and returns the Fetch `Response`. After a host cuts the browser connection, EventSource sends its last SSE id as `Last-Event-ID`; `cursorFromRequest` prefers it over the URL's `after` query parameter.
+
+Every forwarded run event is an unnamed SSE record with its `sequence_number` as `id` and the complete event object as `data`. Receive all event types with one handler:
+
+```ts
+const source = new EventSource(`/api/runs/${runId}/events?after=${cursor}`);
+source.onmessage = ({data}) => {
+  const event = JSON.parse(data);
+  if (event.type === 'stream.refused') { showRefusal(event.error); source.close(); return; }
+  if (event.type === 'stream.reconnecting') { showConnectionFailure(event.error); return; }
+  if (event.type === 'stream.reconnected') { clearConnectionFailure(); return; }
+  showRunEvent(event);
+};
+```
+
+The three `stream.*` records are forwarded-stream notices, not daemon run events; they have no `sequence_number` or SSE id. A `stream.refused` carries the full error envelope, including `stream_gap`'s `details.latest_sequence` and `details.earliest_sequence`. The helper ends that response after a refusal. The SDK does not recover a gap by skipping missing events.
+
+When the page reloads mid-reply or gets `stream_gap`, the app reads `runs.trace(runId)` through its server and shows each node's `in_progress_message` (`{thinking, text}` or `null`) as that node's open message. The trace's `latest_sequence` is read consistently with its conversations and open messages. Resume `runs.events(runId, {after: trace.latest_sequence})` (or forward with that cursor); do not use a separately read `runs.get` cursor. Continue appending new deltas to the open message, but replace its thinking or text with the complete content repeated by `node.thinking.done` or `node.output_text.done`. This shows the message from its beginning without duplicating content. `runs.get` and every `runs.list` entry expose `latest_sequence` and `last_activity_at`; a cursor equal to `latest_sequence` is not a gap even when older events have expired.
+
 ## The SDK surface
 
 ```ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.348",
+  "version": "0.3.350",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",
@@ -12,7 +12,8 @@
   "bin": {
     "crtr": "bin/crtr",
     "crouter": "bin/crouter",
-    "crtrd": "bin/crtrd"
+    "crtrd": "bin/crtrd",
+    "crtr-launcher": "bin/crtr-launcher"
   },
   "imports": {
     "#api/*": {
@@ -69,6 +70,13 @@
     "scripts/postinstall.mjs",
     "scripts/patch-pi-tree-root-ordering.mjs",
     "scripts/install-runtime.mjs",
+    "scripts/lib/isolation-env.mjs",
+    "scripts/runtime-smoke.mjs",
+    "scripts/build-native-linux.mjs",
+    "src/native/linux/addon.c",
+    "packages/crouter-identity/package.json",
+    "packages/crouter-identity/dist",
+    "!packages/crouter-identity/dist/**/__tests__/**",
     "scripts/pack-minify.mjs",
     "scripts/runtime-lock.mjs",
     "scripts/self-update.mjs",
@@ -76,13 +84,15 @@
   ],
   "scripts": {
     "build": "node scripts/build.mjs",
+    "build:native:linux": "node scripts/build-native-linux.mjs",
     "activate": "npm run build && npm run install-runtime && crtr sys daemon restart",
     "activate:pull": "git pull && npm install && npm run activate",
     "build:api": "tsc -p packages/crouter-api/tsconfig.json",
     "build:env-docker": "tsc -p packages/crouter-env-docker/tsconfig.json",
-    "build:sdk": "tsc -p packages/crouter-sdk/tsconfig.json",
+    "build:sdk": "npm run build:api && npm run build:identity && tsc -p packages/crouter-sdk/tsconfig.json",
     "build:plugin": "tsc -p packages/crouter-plugin/tsconfig.json",
     "typecheck:pi-packages": "npx tsc -p src/builtin-pi-packages/pi-crtr-extensions/tsconfig.json",
+    "test:runtime-packaging": "node --test scripts/runtime-smoke.test.mjs",
     "test:build-output": "node scripts/build-concurrency-test.mjs",
     "check:cli-no-canvas": "node scripts/check-cli-no-canvas.mjs",
     "check:cli-cold-start": "node scripts/check-cli-cold-start.mjs",
@@ -99,7 +109,9 @@
     "test:integration": "npm run build:api && CRTR_NO_DAEMON_AUTOSTART=1 node --conditions=crtr-src --import tsx/esm --import ./scripts/test-env-scrub.mjs --test --test-concurrency=$(node -p 'Math.min(8, Math.max(2, require(`node:os`).availableParallelism() - 1))') --test-timeout=60000 ${CRTR_TEST_SHARD:+--test-shard=$CRTR_TEST_SHARD} 'src/**/__tests__/integration/*.test.ts' 'packages/crouter-sdk/src/**/__tests__/integration/*.test.ts' 'packages/crouter-plugin/src/**/__tests__/integration/*.test.ts'",
     "test:seam": "npm run build && npm run test:seam:built",
     "test:seam:built": "CRTR_NO_DAEMON_AUTOSTART=1 node --import ./scripts/test-env-scrub.mjs --test --test-concurrency=$(node -p 'Math.min(4, Math.max(2, require(`node:os`).availableParallelism() - 2))') --test-timeout=180000 ${CRTR_TEST_SHARD:+--test-shard=$CRTR_TEST_SHARD} 'dist/**/__tests__/seam/*.test.js'",
-    "test:all": "npm test && npm run test:integration && npm run test:seam"
+    "test:all": "npm test && npm run test:integration && npm run test:seam",
+    "test:isolated": "node scripts/test-isolated.mjs",
+    "build:identity": "tsc -p packages/crouter-identity/tsconfig.json"
   },
   "overrides": {
     "@earendil-works/pi-ai": "0.87.1",
@@ -119,12 +131,15 @@
     "@earendil-works/pi-ai": "0.87.1",
     "@earendil-works/pi-coding-agent": "0.87.1",
     "@earendil-works/pi-tui": "0.87.1",
+    "@north-light/crouter-identity": "^0.3.350",
     "cron-parser": "^5.6.0",
     "esbuild": "^0.27.7",
+    "jose": "^6.2.12",
     "proper-lockfile": "4.1.2",
     "string-width": "^7.0.0",
     "tar": "^7.5.22",
     "typescript": "^5.7.0",
+    "undici": "8.10.2",
     "ws": "^8.21.0",
     "yaml": "^2.9.0",
     "zod": "^4.3.6"

package/packages/crouter-identity/dist/index.d.ts

@@ -0,0 +1,54 @@
+import { type JSONWebKeySet, type JWTPayload } from 'jose';
+export interface AccessTokenClaims extends JWTPayload {
+    sub: string;
+    grantee: string;
+    client_id: string;
+    grant: string;
+    exp: number;
+}
+export interface IdTokenClaims extends JWTPayload {
+    sub: string;
+}
+export type Scope = 'crtr:llm' | 'crtr:act' | 'crtr:schedule' | `crtr:memory:${'read' | 'rw'}:user${'' | `:${string}`}` | 'crtr:memory:manage:user' | `crtr:memory:${'read' | 'rw'}:app:${string}` | `crtr:files:${'read' | 'rw'}:${'user' | `app:${string}`}:${string}` | 'crtr:files:share' | `crtr:${'conversations' | 'objects'}:read:app:${string}` | `crtr:peer:${string}` | `${string}:${string}`;
+/** App-memory form keys omit the app id. */
+export declare const ENFORCED: ReadonlySet<string>;
+export declare function parseScope(value: string, grantee?: string): Scope;
+export declare function covers(held: string, requested: string): boolean;
+/** Keys are scoped to one configured issuer; failed refreshes keep the last successful set. */
+export declare class JwksCache {
+    readonly issuer: string;
+    private readonly fetcher;
+    private keys;
+    private lastUnknownRefresh;
+    private discovery;
+    constructor(issuer: string, fetcher?: typeof fetch, jwksUri?: string);
+    load(): Promise<JSONWebKeySet>;
+    forKid(kid: string | undefined): Promise<JSONWebKeySet>;
+}
+export declare function verifyAccessToken(options: {
+    token: string;
+    jwks: JSONWebKeySet | JwksCache;
+    issuer: string;
+    audience: string;
+}): Promise<AccessTokenClaims>;
+export interface SyncNoticeClaims extends JWTPayload {
+    purpose: 'grant_sync';
+    iat: number;
+    exp: number;
+    jti: string;
+}
+/** The directory's grant-sync notice: ES256 with the directory signing key named
+ *  by `kid`, no `typ`, `aud` = the runtime's registered URL, a lifetime of at most
+ *  five minutes, and a `jti` the runtime uses to answer replays without a sync. */
+export declare function verifySyncNotice(options: {
+    token: string;
+    jwks: JSONWebKeySet | JwksCache;
+    issuer: string;
+    audience: string;
+}): Promise<SyncNoticeClaims>;
+export declare function verifyIdToken(options: {
+    token: string;
+    jwks: JSONWebKeySet | JwksCache;
+    issuer: string;
+    audience: string;
+}): Promise<IdTokenClaims>;