@north-light/crouter 0.3.349 → 0.3.350

package/dist/core/directory/join.js

@@ -0,0 +1 @@
+var j=Object.defineProperty;var a=(t,e)=>j(t,"name",{value:e,configurable:!0});import{createHash as S,generateKeyPairSync as v,randomUUID as _}from"node:crypto";import{mkdirSync as b}from"node:fs";import{join as $}from"node:path";import{InputError as c}from"../io.js";import{network as d}from"../errors.js";import{secretsDir as l}from"../layout.js";import{apiSocketPath as E}from"../canvas/paths.js";import{daemonAnswers as P}from"../layout-migrate/index.js";import{atomicWriteJson as U,readJsonIfExists as w}from"../fs-utils.js";import{updateConfig as J}from"../config.js";import{userScopeRoot as L}from"../scope.js";import{rewriteLocalProfileGrantees as O}from"../scoped-state/profiles.js";function m(){return $(l(),"runtime-client.json")}a(m,"clientPath");function p(t){if(typeof t!="string")return!1;try{const{protocol:e}=new URL(t);return e==="http:"||e==="https:"}catch{return!1}}a(p,"isUrl");function g(t){const e=t??{},{runtime:i,client_id:n,issuer:o,owner:s,url:r}=e;if(typeof i!="string"||!/^runtime:.+/.test(i)||typeof n!="string"||n===""||!p(o)||typeof s!="string"||!/^user:.+/.test(s)||!p(r))throw d("directory registration answer is missing runtime, client_id, issuer, owner, or url");return{runtime:i,client_id:n,issuer:o,owner:s,url:r}}a(g,"registration");async function R(t,e,i){const n=`${t.replace(/\/$/,"")}/v1/runtimes/registration`;let o;try{o=await fetch(n,{method:"PUT",headers:{authorization:`Bearer ${e}`,"content-type":"application/json"},body:JSON.stringify({jwk:i}),signal:AbortSignal.timeout(3e4)})}catch(r){throw d(`directory registration request to ${n} failed: ${r instanceof Error?r.message:String(r)}`)}const s=await o.text();if(!o.ok)throw new c({error:"join_refused",message:`directory refused the registration: ${o.status} ${s.slice(0,500)}`,next:"The enrollment token is single-use and short-lived; provisioning must retry with a fresh token."});try{return g(JSON.parse(s))}catch(r){throw r instanceof SyntaxError?d("directory registration answer is not JSON"):r}}a(R,"register");function y(t){J("user",e=>{e.runtime={...e.runtime,issuer:t.issuer,audience:t.url}}),O(L())}a(y,"commit");function F(){const t=w(m());if(t?.token_sha256===void 0)return null;const{owner:e}=t;if(typeof e!="string"||!/^user:.+/.test(e))throw new Error(`${m()} was written by join but has a missing or invalid owner`);return e}a(F,"joinedOwner");async function M(t,e){if(!p(t))throw new c({error:"invalid_directory",message:"directory must be an http or https URL",received:t,field:"directory",next:"Pass the directory base URL, for example https://directory.example."});if(e==="")throw new c({error:"invalid_token",message:"token is empty",field:"token",next:"Pass the enrollment token provisioning supplied."});const i=E();if(await P(i))throw new c({error:"daemon_running",message:`cannot join while a daemon answers on ${i}`,next:"Join before the daemon starts: stop the daemon that owns this volume, then run `crtr sys join` again."});const n=S("sha256").update(e).digest("hex"),o=w(m());if(o?.token_sha256===n){const h=g(o);return y(h),{...h,registered:!1}}const{privateKey:s,publicKey:r}=v("ec",{namedCurve:"P-256"}),u=_(),k={...s.export({format:"jwk"}),kid:u,alg:"ES256",use:"sig"},f=await R(t,e,{...r.export({format:"jwk"}),kid:u,alg:"ES256",use:"sig"});b(l(),{recursive:!0,mode:448});const x={jwk:k,kid:u,alg:"ES256",...f,token_sha256:n};return U(m(),x,{mode:384}),y(f),{...f,registered:!0}}a(M,"joinDirectory");export{M as joinDirectory,F as joinedOwner};

package/dist/core/disk-usage.d.ts

@@ -0,0 +1,4 @@
+/** Disk usage of one directory in bytes, or null when it cannot be measured.
+ *  `du` is spawned asynchronously: a managed checkout can be tens of gigabytes,
+ *  and this runs inside the daemon, which must never block its event loop. */
+export declare function directorySizeBytes(path: string): Promise<number | null>;

package/dist/core/disk-usage.js

@@ -0,0 +1 @@
+var u=Object.defineProperty;var s=(r,t)=>u(r,"name",{value:t,configurable:!0});import{spawn as l}from"node:child_process";import{existsSync as c}from"node:fs";async function f(r){return c(r)?new Promise(t=>{const n=l("du",["-sk",r]);let e="";n.stdout.on("data",o=>e+=o.toString()),n.stderr.on("data",()=>{}),n.on("error",()=>t(null)),n.on("close",o=>{if(o!==0)return t(null);const i=Number(e.trim().split(/\s+/)[0]);t(Number.isSafeInteger(i)?i*1024:null)})}):null}s(f,"directorySizeBytes");export{f as directorySizeBytes};

package/dist/core/events/emit.d.ts

@@ -1,4 +1,6 @@
 import type { BuildEnvelopeInput } from './types.js';
 export type EmitEventInput = Omit<BuildEnvelopeInput, 'component' | 'stream_id'>;
+/** Resolves after every broker event emitted so far has been appended or written to stderr. */
+export declare function flushBrokerLog(): Promise<void>;
 /** The only canonical write path. The bound source owns the destination component/path/stream; node_id identifies the event target, with a broker source enforcing its bound node. */
 export declare function emitEvent(input: EmitEventInput): boolean;

package/dist/core/events/emit.js

@@ -1 +1,3 @@
-var r=Object.defineProperty;var o=(d,e)=>r(d,"name",{value:e,configurable:!0});import{appendRotatingRecord as i}from"../log.js";import{buildEnvelope as t}from"./envelope.js";import{serializeEventRecord as m}from"./serialize.js";import{eventSource as f}from"./source.js";function p(d){const e=f();if(e===void 0)return!1;if(e.component==="broker"&&e.node_id!==void 0&&d.node_id!==void 0&&d.node_id!==e.node_id)throw new TypeError(`broker event target node_id must match bound node_id; received ${d.node_id}`);if(d.level==="debug"&&process.env.CRTR_LOG!=="debug")return!1;const n=t({...d,component:e.component,...e.node_id===void 0?{}:{node_id:e.node_id},...e.stream_id===void 0?{}:{stream_id:e.stream_id}});return i(e.path,m(n))}o(p,"emitEvent");export{p as emitEvent};
+var i=Object.defineProperty;var n=(r,e)=>i(r,"name",{value:e,configurable:!0});import{appendRotatingRecord as s}from"../log.js";import{buildEnvelope as f}from"./envelope.js";import{serializeEventRecord as c}from"./serialize.js";import{eventSource as m}from"./source.js";import{envExecutionId as u}from"../../shared/env.js";import{appendBrokerLog as p}from"../runtime/broker/daemon-ops.js";let d=Promise.resolve();function E(){return d}n(E,"flushBrokerLog");function a(r,e){d=d.then(async()=>{try{const{appended:o}=await p(r,e);o||process.stderr.write(`[broker] log.jsonl refused record: ${e}
+`)}catch(o){process.stderr.write(`[broker] log.jsonl append failed (${o instanceof Error?o.message:String(o)}): ${e}
+`)}})}n(a,"queueBrokerRecord");function R(r){const e=m();if(e===void 0)return!1;if(e.component==="broker"&&e.node_id!==void 0&&r.node_id!==void 0&&r.node_id!==e.node_id)throw new TypeError(`broker event target node_id must match bound node_id; received ${r.node_id}`);if(r.level==="debug"&&process.env.CRTR_LOG!=="debug")return!1;const o=f({...r,component:e.component,...e.node_id===void 0?{}:{node_id:e.node_id},...e.stream_id===void 0?{}:{stream_id:e.stream_id}}),t=c(o);return e.component==="broker"&&e.node_id!==void 0&&u()!==void 0?(a(e.node_id,t),!0):s(e.path,t)}n(R,"emitEvent");export{R as emitEvent,E as flushBrokerLog};

package/dist/core/feed/feed.js

@@ -1,7 +1,7 @@
-var x=Object.defineProperty;var o=(n,e)=>x(n,"name",{value:e,configurable:!0});import{existsSync as N,linkSync as O,mkdirSync as F,rmSync as d,writeFileSync as M}from"node:fs";import{dirname as L,join as y}from"node:path";import{randomUUID as D}from"node:crypto";import{reportsDir as P,cancelCronsOnWake as z,getNode as _}from"../canvas/index.js";import{openDb as W,withCanvasWrite as H}from"../canvas/db.js";import{activateArmedExternalActionDelivery as J,readExternalActionDelivery as K}from"../canvas/deliveries.js";import{composeNodeOutcomeDocument as Y}from"../runtime/outcome-document.js";import{syncDirectory as j,syncFile as q}from"../fs-utils.js";import{enqueueSubscriberMail as G}from"./messages.js";import{operationIdContext as R}from"../events/operation-id.js";class p extends Error{static{o(this,"FinalizationError")}code;reportPath;constructor(e,t){super(e),this.code=e,this.reportPath=t}}function Q(n){const e=o((t,r=2)=>String(t).padStart(r,"0"),"pad");return`${n.getUTCFullYear()}${e(n.getUTCMonth()+1)}${e(n.getUTCDate())}T${e(n.getUTCHours())}${e(n.getUTCMinutes())}${e(n.getUTCSeconds())}${e(n.getUTCMilliseconds(),3)}`}o(Q,"compactTs");function V(n,e,t){const r=P(n);N(r)||F(r,{recursive:!0});const l=new Date,s=`${Q(l)}-${D().slice(-8)}-${e}.md`,c=y(r,s),i=y(r,`.${s}.${D()}.tmp`),u=l.toISOString();return M(i,`---
+var U=Object.defineProperty;var o=(n,e)=>U(n,"name",{value:e,configurable:!0});import{dirname as L,join as E}from"node:path";import{randomUUID as O}from"node:crypto";import{cancelCronsOnWake as x,getNode as p}from"../canvas/index.js";import{nodeAgentDir as M,reportsDir as R}from"../canvas/node-agent-paths.js";import{createFileBeneath as F,fsyncDirBeneath as J,linkBeneath as W,unlinkBeneath as z}from"../spaces/open-beneath.js";import{openDb as A,withCanvasWrite as H}from"../canvas/db.js";import{activateArmedExternalActionDelivery as B,readExternalActionDelivery as Y}from"../canvas/deliveries.js";import{composeNodeOutcomeDocument as K}from"../runtime/outcome-document.js";import{closeNode as j}from"../runtime/close.js";import{enqueueSubscriberMail as q}from"./messages.js";import{operationIdContext as P}from"../events/operation-id.js";class h extends Error{static{o(this,"FinalizationError")}code;reportPath;constructor(e,r){super(e),this.code=e,this.reportPath=r}}function G(n){const e=o((r,i=2)=>String(r).padStart(i,"0"),"pad");return`${n.getUTCFullYear()}${e(n.getUTCMonth()+1)}${e(n.getUTCDate())}T${e(n.getUTCHours())}${e(n.getUTCMinutes())}${e(n.getUTCSeconds())}${e(n.getUTCMilliseconds(),3)}`}o(G,"compactTs");function Q(n,e,r){const i=M(n),c=R(n),u=new Date,s=`${G(u)}-${O().slice(-8)}-${e}.md`,a=E(c,s),d=E(c,`.${s}.${O()}.tmp`),t=u.toISOString();return F(i,d,`---
 node: ${n}
 kind: ${e}
-ts: ${u}
+ts: ${t}
 ---
-${t}`,"utf8"),q(i),{finalPath:c,stagedPath:i,basename:s,ts:u}}o(V,"stageReport");function g(n){let e=!1;try{O(n.stagedPath,n.finalPath),e=!0,d(n.stagedPath,{force:!0}),j(L(n.finalPath))}catch(t){throw e&&d(n.finalPath,{force:!0}),t}}o(g,"install");function X(n,e=80){const t=n.split(`
-`)[0]??"";return t.length>e?`${t.slice(0,e-1)}\u2026`:t}o(X,"firstLine");function Z(n,e){return e??(n==="urgent"?"urgent":"normal")}o(Z,"tierFor");function B(n){const e=K(`node-outcome:${n}`);if(e===null)return null;const t=e.adapter;if(t?.adapter!=="subprocess"||!Array.isArray(t.argv)||!t.argv.every(r=>typeof r=="string")||typeof t.cwd!="string")throw new Error(`outcome delivery ${e.deliveryId} has an invalid subprocess adapter`);return{name:e.destinationId,payload:t.payload??null}}o(B,"outcomeAction");function E(n,e,t,r,l,s,c,i){return G(n,{kind:r,label:X(c),senderNodeId:e,senderName:t,bodyRef:s,urgency:Z(r,l),...i===void 0?{}:{disposition:i}}).map(u=>u.destinationNodeId)}o(E,"enqueueReport");function I(n,e,t,r,l,s,c){const i=W();let u=!1;i.exec("BEGIN IMMEDIATE");try{const a=i.prepare("SELECT status, final_report FROM nodes WHERE node_id = ?").get(n);if(a===void 0)throw new p("unknown_node");if(a.final_report!==null)throw new p("already_finalized",a.final_report);if(a.status==="canceled"||a.status==="dead")throw new p("finalization_forbidden");if(a.status!=="active"&&a.status!=="idle"&&a.status!=="done")throw new p("finalization_forbidden");const C=i.prepare("SELECT from_id AS node_id, active, created FROM edges WHERE type = 'subscribes_to' AND to_id = ? ORDER BY created").all(n).map(h=>({node_id:h.node_id,active:h.active===1,created:h.created})),f=_(n),b=f?.kind!=="human",A=(f?.outcome_revision??0)+1,$=c?.kind??"result",m=c?.reason??"finalized",w=c?.detailJson??null,T=f===null?null:B(n),S=!b||T===null||f===null?null:JSON.stringify(Y({node:{...f,status:"done",intent:"done",terminal_reason:m},outcome:{kind:$,reason:m,at:e.ts,revision:A,detailJson:w},action:T,finalReport:e.basename}));g(e),u=!0,b?(i.prepare("UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = ?, final_report = ?, finalized_at = ?, outcome_kind = ?, outcome_reason = ?, outcome_at = ?, outcome_revision = outcome_revision + 1, outcome_detail_json = ? WHERE node_id = ? AND final_report IS NULL").run(m,e.basename,e.ts,$,m,e.ts,w,n),S!==null&&J(i,{idempotencyKey:`node-outcome:${n}`,label:n,bodyJson:S,supersede:!0},Date.now())):i.prepare("UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = 'finalized', final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL").run(e.basename,e.ts,n);const U=E(C,r,l,"final",void 0,`${n}:reports/${e.basename}`,t,s);return i.exec("COMMIT"),{deliveredTo:U}}catch(a){throw i.exec("ROLLBACK"),u&&d(e.finalPath,{force:!0}),a}finally{d(e.stagedPath,{force:!0})}}o(I,"commitCanonicalFinal");async function k(n,e){if(!n)throw new Error(`push: empty nodeId (kind=${e.kind}) \u2014 a report must belong to a node`);if(e.kind==="final"&&e.deliveryTier!==void 0)throw new Error("push final does not accept a delivery tier");if(e.kind!=="final"&&e.outcome!==void 0)throw new Error("push outcome is final-only");const t=V(n,e.kind,e.body),r=e.from??n,l=_(r)?.name;if(e.kind==="final"){const{deliveredTo:c}=I(n,t,e.body,r,l,e.disposition,e.outcome);return z(n),{reportPath:t.finalPath,deliveredTo:c}}let s=!1;try{g(t),s=!0;const c=H(i=>{const u=i.prepare("SELECT from_id AS node_id, active, created FROM edges WHERE type = 'subscribes_to' AND to_id = ? ORDER BY created").all(n).map(a=>({node_id:a.node_id,active:a.active===1,created:a.created}));return E(u,r,l,e.kind,e.deliveryTier,`${n}:reports/${t.basename}`,e.body,e.disposition)});return{reportPath:t.finalPath,deliveredTo:c}}catch(c){throw s&&d(t.finalPath,{force:!0}),c}finally{d(t.stagedPath,{force:!0})}}o(k,"pushWithContext");function v(n,e){return R.current()===void 0?R.fresh(()=>k(n,e)):k(n,e)}o(v,"push");async function de(n,e,t){return v(n,{kind:"update",body:e,...t})}o(de,"pushUpdate");async function fe(n,e,t){return v(n,{kind:"urgent",body:e,...t})}o(fe,"pushUrgent");async function me(n,e,t){return v(n,{kind:"final",body:e,...t})}o(me,"pushFinal");function pe(n,e,t,r,l){if(t===""||t.includes("/")||t.includes("\\"))throw new Error(`invalid canonical final report basename: ${t}`);const s=E([{node_id:e,active:!0,created:""}],n,_(n)?.name,"final",void 0,`${n}:reports/${t}`,r,l?.disposition);return{reportPath:y(P(n),t),deliveredTo:s}}o(pe,"redeliverFinalReport");export{p as FinalizationError,v as push,me as pushFinal,de as pushUpdate,fe as pushUrgent,pe as redeliverFinalReport};
+${r}`),{root:i,finalPath:a,stagedPath:d,basename:s,ts:t}}o(Q,"stageReport");function f(n,e){try{z(n.root,e)}catch(r){if(r.code!=="ENOENT")throw r}}o(f,"remove");function S(n){let e=!1;try{W(n.root,n.stagedPath,n.finalPath),e=!0,f(n,n.stagedPath),J(n.root,L(n.finalPath))}catch(r){throw e&&f(n,n.finalPath),r}}o(S,"install");function V(n,e=80){const r=n.split(`
+`)[0]??"";return r.length>e?`${r.slice(0,e-1)}\u2026`:r}o(V,"firstLine");function X(n,e){return e??(n==="urgent"?"urgent":"normal")}o(X,"tierFor");function Z(n){const e=Y(`node-outcome:${n}`);if(e===null)return null;const r=e.adapter;if(r?.adapter!=="subprocess"||!Array.isArray(r.argv)||!r.argv.every(i=>typeof i=="string")||typeof r.cwd!="string")throw new Error(`outcome delivery ${e.deliveryId} has an invalid subprocess adapter`);return{name:e.destinationId,payload:r.payload??null}}o(Z,"outcomeAction");function y(n,e,r,i,c,u,s,a){return q(n,{kind:i,label:V(s),senderNodeId:e,senderName:r,bodyRef:u,urgency:X(i,c),...a===void 0?{}:{disposition:a}}).map(d=>d.destinationNodeId)}o(y,"enqueueReport");function I(n,e,r,i,c,u,s){const a=A();let d=!1;a.exec("BEGIN IMMEDIATE");try{const t=a.prepare("SELECT status, final_report FROM nodes WHERE node_id = ?").get(n);if(t===void 0)throw new h("unknown_node");if(t.final_report!==null)throw new h("already_finalized",t.final_report);if(t.status==="canceled"||t.status==="dead")throw new h("finalization_forbidden");if(t.status!=="active"&&t.status!=="idle"&&t.status!=="done")throw new h("finalization_forbidden");const l=a.prepare("SELECT e.from_id AS node_id, e.active, e.created FROM edges e JOIN nodes source ON source.node_id = e.to_id JOIN nodes subscriber ON subscriber.node_id = e.from_id WHERE e.type = 'subscribes_to' AND e.to_id = ? AND subscriber.grantee = source.grantee AND (source.run_id IS NULL OR subscriber.run_id = source.run_id) ORDER BY e.created").all(n).map(b=>({node_id:b.node_id,active:b.active===1,created:b.created})),m=p(n),N=m?.kind!=="human",k=(m?.outcome_revision??0)+1,D=s?.kind??"result",_=s?.reason??"finalized",$=s?.detailJson??null,T=m===null?null:Z(n),w=!N||T===null||m===null?null:JSON.stringify(K({node:{...m,status:"done",intent:"done",terminal_reason:_},outcome:{kind:D,reason:_,at:e.ts,revision:k,detailJson:$},action:T,finalReport:e.basename}));S(e),d=!0,N?(a.prepare("UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = ?, final_report = ?, finalized_at = ?, outcome_kind = ?, outcome_reason = ?, outcome_at = ?, outcome_revision = outcome_revision + 1, outcome_detail_json = ? WHERE node_id = ? AND final_report IS NULL").run(_,e.basename,e.ts,D,_,e.ts,$,n),w!==null&&B(a,{idempotencyKey:`node-outcome:${n}`,label:n,bodyJson:w,supersede:!0},Date.now())):a.prepare("UPDATE nodes SET status = 'done', intent = 'done', terminal_reason = 'finalized', final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL").run(e.basename,e.ts,n);const g=y(l,i,c,"final",void 0,`${n}:reports/${e.basename}`,r,u);return a.exec("COMMIT"),{deliveredTo:g}}catch(t){throw a.exec("ROLLBACK"),d&&f(e,e.finalPath),t}finally{f(e,e.stagedPath)}}o(I,"commitCanonicalFinal");async function C(n,e){if(!n)throw new Error(`push: empty nodeId (kind=${e.kind}) \u2014 a report must belong to a node`);if(e.kind==="final"&&e.deliveryTier!==void 0)throw new Error("push final does not accept a delivery tier");if(e.kind!=="final"&&e.outcome!==void 0)throw new Error("push outcome is final-only");const r=Q(n,e.kind,e.body),i=e.from??n,c=p(i)?.name;if(e.kind==="final"){const{deliveredTo:s}=I(n,r,e.body,i,c,e.disposition,e.outcome);if(x(n),p(n)?.run_id===n){const d=A().prepare("SELECT node_id FROM nodes WHERE run_id = ? AND node_id != ? ORDER BY created DESC").all(n,n);for(const t of d){const l=p(t.node_id);l&&l.status!=="done"&&l.status!=="canceled"&&l.status!=="dead"&&j(t.node_id,{preserveEmpty:!0})}}return{reportPath:r.finalPath,deliveredTo:s}}let u=!1;try{S(r),u=!0;const s=H(a=>{const d=a.prepare("SELECT e.from_id AS node_id, e.active, e.created FROM edges e JOIN nodes source ON source.node_id = e.to_id JOIN nodes subscriber ON subscriber.node_id = e.from_id WHERE e.type = 'subscribes_to' AND e.to_id = ? AND subscriber.grantee = source.grantee AND (source.run_id IS NULL OR subscriber.run_id = source.run_id) ORDER BY e.created").all(n).map(t=>({node_id:t.node_id,active:t.active===1,created:t.created}));return y(d,i,c,e.kind,e.deliveryTier,`${n}:reports/${r.basename}`,e.body,e.disposition)});return{reportPath:r.finalPath,deliveredTo:s}}catch(s){throw u&&f(r,r.finalPath),s}finally{f(r,r.stagedPath)}}o(C,"pushWithContext");function v(n,e){return P.current()===void 0?P.fresh(()=>C(n,e)):C(n,e)}o(v,"push");async function fe(n,e,r){return v(n,{kind:"update",body:e,...r})}o(fe,"pushUpdate");async function me(n,e,r){return v(n,{kind:"urgent",body:e,...r})}o(me,"pushUrgent");async function pe(n,e,r){return v(n,{kind:"final",body:e,...r})}o(pe,"pushFinal");function _e(n,e,r,i,c){if(r===""||r.includes("/")||r.includes("\\"))throw new Error(`invalid canonical final report basename: ${r}`);const u=y([{node_id:e,active:!0,created:""}],n,p(n)?.name,"final",void 0,`${n}:reports/${r}`,i,c?.disposition);return{reportPath:E(R(n),r),deliveredTo:u}}o(_e,"redeliverFinalReport");export{h as FinalizationError,v as push,pe as pushFinal,fe as pushUpdate,me as pushUrgent,_e as redeliverFinalReport};

package/dist/core/feed/messages.d.ts

@@ -1,3 +1,4 @@
+import type { DatabaseSync } from 'node:sqlite';
 import { type InboxDisposition, type InboxKind, type InboxTier } from './inbox.js';
 export type { InboxDisposition, InboxKind, InboxTier } from './inbox.js';
 export interface NodeMailInput {
@@ -13,6 +14,8 @@ export interface NodeMailInput {
     operationId?: string;
     /** Optional caller-owned obligation identity, used by cron settlement replay. */
     idempotencyKey?: string;
+    /** Runs with the mail insert, before the transaction commits. */
+    withinEnqueue?: (db: DatabaseSync, messageId: string) => void;
 }
 export interface ExternalActionAdapter {
     adapter: 'subprocess' | 'cron_spawn' | 'cron_human';

package/dist/core/feed/messages.js

@@ -1,11 +1,11 @@
-var v=Object.defineProperty;var s=(n,e)=>v(n,"name",{value:e,configurable:!0});import{existsSync as S,mkdirSync as k,renameSync as O,writeFileSync as A}from"node:fs";import{randomBytes as R,randomUUID as D}from"node:crypto";import{join as h}from"node:path";import{cancelCronsOnWake as _}from"../canvas/crons.js";import{withCanvasWrite as c}from"../canvas/db.js";import{getRow as T}from"../canvas/canvas.js";import{messagesDir as L}from"../canvas/paths.js";import{syncDirectory as b,syncFile as x}from"../fs-utils.js";import{settleDeadControllerWait as C,settleMatchingControllerWait as f}from"../canvas/waits.js";import{generateOperationId as g,operationIdContext as p,validateOperationId as J}from"../events/operation-id.js";import{clipBody as M}from"./inbox.js";function m(){let n;do n=R(16).toString("hex");while(n==="00000000000000000000000000000000");return n}s(m,"newId");function u(n,e){const d=JSON.stringify(n);if(d===void 0)throw new TypeError(`${e} must be JSON-serializable`);return d}s(u,"stringify");function I(n,e){return e!=="normal"&&e!=="deferred"?e:T(n)?.lifecycle==="terminal"?"urgent":e}s(I,"effectiveTier");function W(n,e,d){const r=L(n);S(r)||k(r,{recursive:!0});const o=e.replace(/[^0-9]/g,""),t=h(r,`${o}-${D().slice(0,6)}.md`),i=`${t}.tmp`;return A(i,d,"utf8"),x(i),O(i,t),b(r),t}s(W,"writeMessageBody");function U(n){if(typeof n!="object"||n===null)return"";const e=n.body;return typeof e=="string"?e.trim():""}s(U,"inlineBody");function y(n,e){const d=e.messageId??m(),r=Number(n.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM messages").get().seq)+1;return n.prepare(`INSERT INTO messages
+var v=Object.defineProperty;var s=(n,e)=>v(n,"name",{value:e,configurable:!0});import{existsSync as S,mkdirSync as k,renameSync as O,writeFileSync as R}from"node:fs";import{randomBytes as A,randomUUID as h}from"node:crypto";import{join as T}from"node:path";import{cancelCronsOnWake as f}from"../canvas/crons.js";import{withCanvasWrite as c}from"../canvas/db.js";import{getRow as D}from"../canvas/canvas.js";import{messagesDir as L}from"../canvas/paths.js";import{syncDirectory as x,syncFile as C}from"../fs-utils.js";import{settleDeadControllerWait as b,settleMatchingControllerWait as g}from"../canvas/waits.js";import{generateOperationId as p,operationIdContext as u,validateOperationId as M}from"../events/operation-id.js";import{clipBody as J}from"./inbox.js";function y(){let n;do n=A(16).toString("hex");while(n==="00000000000000000000000000000000");return n}s(y,"newId");function E(n,e){const d=JSON.stringify(n);if(d===void 0)throw new TypeError(`${e} must be JSON-serializable`);return d}s(E,"stringify");function I(n,e){return e!=="normal"&&e!=="deferred"?e:D(n)?.lifecycle==="terminal"?"urgent":e}s(I,"effectiveTier");function W(n,e,d){const r=L(n);S(r)||k(r,{recursive:!0});const o=e.replace(/[^0-9]/g,""),t=T(r,`${o}-${h().slice(0,6)}.md`),i=`${t}.tmp`;return R(i,d,"utf8"),C(i),O(i,t),x(r),t}s(W,"writeMessageBody");function F(n){if(typeof n!="object"||n===null)return"";const e=n.body;return typeof e=="string"?e.trim():""}s(F,"inlineBody");function _(n,e){const d=e.messageId??y(),r=Number(n.prepare("SELECT COALESCE(MAX(seq), 0) AS seq FROM messages").get().seq)+1;return n.prepare(`INSERT INTO messages
        (message_id, seq, operation_id, created_at, sender_node_id, sender_name, kind, label, body_ref, body_json, disposition)
-     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(d,r,e.operationId,e.createdAt,e.senderNodeId,e.senderName,e.kind,e.label,e.bodyRef,e.bodyJson===void 0?null:u(e.bodyJson,"message body"),e.disposition),d}s(y,"insertMessage");function N(n,e,d,r,o,t,i){const a=m();return n.prepare(`INSERT INTO deliveries
+     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`).run(d,r,e.operationId,e.createdAt,e.senderNodeId,e.senderName,e.kind,e.label,e.bodyRef,e.bodyJson===void 0?null:E(e.bodyJson,"message body"),e.disposition),d}s(_,"insertMessage");function N(n,e,d,r,o,t,i){const a=y();return n.prepare(`INSERT INTO deliveries
        (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, idempotency_key, created_at, updated_at)
-     VALUES (?, ?, 'node_inbox', ?, ?, ?, 'pending', ?, ?, ?)`).run(a,e,d,r,o,i??null,t,t),a}s(N,"insertNodeDelivery");function E(n,e){const d=new Date().toISOString(),r=n.operationId===void 0?p.current()??g():J(n.operationId);let o=n.bodyRef??null,t=n.bodyJson;if(o===null){const i=U(t),a=M(i);a.clipped&&(o=W(e,d,i),t={...t,body:a.text})}return{createdAt:d,operationId:r,bodyRef:o,bodyJson:t}}s(E,"finalizeNodeMail");function F(n,e){const d=E(e,n);return c(r=>{if(e.idempotencyKey!==void 0){const l=r.prepare(`SELECT d.delivery_id, d.message_id, d.urgency, m.created_at
-        FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE d.idempotency_key = ?`).get(e.idempotencyKey);if(l!==void 0)return{messageId:l.message_id,deliveryId:l.delivery_id,urgency:l.urgency,createdAt:l.created_at}}const o=Date.now(),t=I(n,e.urgency),i=y(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null}),a=N(r,i,n,t,e.wake,o,e.idempotencyKey);return f(n,e.senderNodeId??null,o,r),e.wake===1&&t!=="deferred"&&_(n),{messageId:i,deliveryId:a,urgency:t,createdAt:d.createdAt}})}s(F,"enqueueNodeMail");function Y(n,e){if(n.length===0)return[];const d=E(e,n[0].node_id);return c(r=>{const o=Date.now(),t=y(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null});return n.map(i=>{const a=I(i.node_id,e.urgency),l=i.active?1:0,w=N(r,t,i.node_id,a,l,o);return f(i.node_id,e.senderNodeId??null,o,r),l===1&&a!=="deferred"&&_(i.node_id),{destinationNodeId:i.node_id,messageId:t,deliveryId:w,urgency:a,createdAt:d.createdAt}})})}s(Y,"enqueueSubscriberMail");function Z(n){return c(e=>{const d=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(n.idempotencyKey);if(d!==void 0)return{messageId:d.message_id,deliveryId:d.delivery_id};const r=Date.now(),o=y(e,{operationId:p.current()??g(),createdAt:new Date(r).toISOString(),senderNodeId:null,senderName:null,kind:n.kind??"completed",label:n.label??n.destinationId,bodyRef:null,bodyJson:n.bodyJson,disposition:null}),t=m(),i=e.prepare(`INSERT INTO deliveries
+     VALUES (?, ?, 'node_inbox', ?, ?, ?, 'pending', ?, ?, ?)`).run(a,e,d,r,o,i??null,t,t),a}s(N,"insertNodeDelivery");function w(n,e){const d=new Date().toISOString(),r=n.operationId===void 0?u.current()??p():M(n.operationId);let o=n.bodyRef??null,t=n.bodyJson;if(o===null&&n.senderNodeId!=="human"){const i=F(t),a=J(i);a.clipped&&(o=W(e,d,i),t={...t,body:a.text})}return{createdAt:d,operationId:r,bodyRef:o,bodyJson:t}}s(w,"finalizeNodeMail");function H(n,e){const d=w(e,n);return c(r=>{const o=r.prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(n);if(o?.run_id&&r.prepare("SELECT deleting_at FROM nodes WHERE node_id = ?").get(o.run_id)?.deleting_at)throw new Error("run is deleting");if(e.idempotencyKey!==void 0){const l=r.prepare(`SELECT d.delivery_id, d.message_id, d.urgency, m.created_at
+        FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE d.idempotency_key = ?`).get(e.idempotencyKey);if(l!==void 0)return{messageId:l.message_id,deliveryId:l.delivery_id,urgency:l.urgency,createdAt:l.created_at}}const t=Date.now(),i=I(n,e.urgency),a=_(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null}),m=N(r,a,n,i,e.wake,t,e.idempotencyKey);return g(n,e.senderNodeId??null,t,r),e.withinEnqueue?.(r,a),e.wake===1&&i!=="deferred"&&f(n),{messageId:a,deliveryId:m,urgency:i,createdAt:d.createdAt}})}s(H,"enqueueNodeMail");function Y(n,e){if(n.length===0)return[];const d=w(e,n[0].node_id);return c(r=>{const o=Date.now(),t=_(r,{operationId:d.operationId,createdAt:d.createdAt,senderNodeId:e.senderNodeId??null,senderName:e.senderName??null,kind:e.kind,label:e.label,bodyRef:d.bodyRef,bodyJson:d.bodyJson,disposition:e.disposition??null});return n.map(i=>{const a=I(i.node_id,e.urgency),m=i.active?1:0,l=N(r,t,i.node_id,a,m,o);return g(i.node_id,e.senderNodeId??null,o,r),m===1&&a!=="deferred"&&f(i.node_id),{destinationNodeId:i.node_id,messageId:t,deliveryId:l,urgency:a,createdAt:d.createdAt}})})}s(Y,"enqueueSubscriberMail");function Z(n){return c(e=>{const d=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(n.idempotencyKey);if(d!==void 0)return{messageId:d.message_id,deliveryId:d.delivery_id};const r=Date.now(),o=_(e,{operationId:u.current()??p(),createdAt:new Date(r).toISOString(),senderNodeId:null,senderName:null,kind:n.kind??"completed",label:n.label??n.destinationId,bodyRef:null,bodyJson:n.bodyJson,disposition:null}),t=y(),i=e.prepare(`INSERT INTO deliveries
          (delivery_id, message_id, destination_kind, destination_id, urgency, wake, state, next_attempt_at,
           adapter_json, idempotency_key, created_at, updated_at)
        VALUES (?, ?, 'external_action', ?, 'normal', 0, 'pending', ?, ?, ?, ?, ?)
-       ON CONFLICT(idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING`).run(t,o,n.destinationId,r,u(n.adapter,"external action adapter"),n.idempotencyKey,r,r);if(Number(i.changes)===1)return{messageId:o,deliveryId:t};const a=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(n.idempotencyKey);if(a===void 0)throw new Error(`external action idempotency winner disappeared: ${n.idempotencyKey}`);return{messageId:a.message_id,deliveryId:a.delivery_id}})}s(Z,"enqueueExternalAction");function ee(n,e=Date.now()){return c(d=>Number(d.prepare("UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id = ? AND canceled_at IS NULL").run(e,e,n).changes)===1)}s(ee,"cancelDelivery");function ne(n,e={}){return c(d=>{const r=["d.destination_kind = 'node_inbox'","d.destination_id = ?","d.canceled_at IS NULL","d.state IN ('pending', 'handed_off')"],o=[n];e.senderNodeId!==void 0&&(r.push("m.sender_node_id IS ?"),o.push(e.senderNodeId)),e.kind!==void 0&&(r.push("m.kind = ?"),o.push(e.kind));const t=d.prepare(`SELECT d.delivery_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE ${r.join(" AND ")}`).all(...o);if(t.length===0)return[];const i=Date.now();return d.prepare(`UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id IN (${t.map(()=>"?").join(",")})`).run(i,i,...t.map(a=>a.delivery_id)),t.map(a=>a.delivery_id)})}s(ne,"cancelPendingNodeMail");function de(n,e){return c(d=>{const r=Date.now(),o=d.prepare(`SELECT target.status AS controller_status FROM waits w LEFT JOIN nodes target ON target.node_id = w.target_id
-        WHERE w.node_id = ? AND w.kind = 'controller' AND w.target_id = ? AND w.satisfied_at IS NULL`).get(n,e);if(o===void 0||o.controller_status==="active"||o.controller_status==="idle")return null;const t=F(n,{kind:"urgent",label:"declared controller is no longer live",bodyJson:{body:`Controller ${e} is no longer live; the declared message wait was cleared.`},urgency:"urgent",wake:1});if(!C(n,e,r,d))throw new Error(`controller wait changed while notifying ${n}`);return t})}s(de,"enqueueControllerDeathNotice");export{ee as cancelDelivery,ne as cancelPendingNodeMail,de as enqueueControllerDeathNotice,Z as enqueueExternalAction,F as enqueueNodeMail,Y as enqueueSubscriberMail};
+       ON CONFLICT(idempotency_key) WHERE idempotency_key IS NOT NULL DO NOTHING`).run(t,o,n.destinationId,r,E(n.adapter,"external action adapter"),n.idempotencyKey,r,r);if(Number(i.changes)===1)return{messageId:o,deliveryId:t};const a=e.prepare("SELECT delivery_id, message_id FROM deliveries WHERE idempotency_key = ?").get(n.idempotencyKey);if(a===void 0)throw new Error(`external action idempotency winner disappeared: ${n.idempotencyKey}`);return{messageId:a.message_id,deliveryId:a.delivery_id}})}s(Z,"enqueueExternalAction");function ee(n,e=Date.now()){return c(d=>Number(d.prepare("UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id = ? AND canceled_at IS NULL").run(e,e,n).changes)===1)}s(ee,"cancelDelivery");function ne(n,e={}){return c(d=>{const r=["d.destination_kind = 'node_inbox'","d.destination_id = ?","d.canceled_at IS NULL","d.state IN ('pending', 'handed_off')"],o=[n];e.senderNodeId!==void 0&&(r.push("m.sender_node_id IS ?"),o.push(e.senderNodeId)),e.kind!==void 0&&(r.push("m.kind = ?"),o.push(e.kind));const t=d.prepare(`SELECT d.delivery_id FROM deliveries d JOIN messages m ON m.message_id = d.message_id WHERE ${r.join(" AND ")}`).all(...o);if(t.length===0)return[];const i=Date.now();return d.prepare(`UPDATE deliveries SET canceled_at = ?, updated_at = ? WHERE delivery_id IN (${t.map(()=>"?").join(",")})`).run(i,i,...t.map(a=>a.delivery_id)),t.map(a=>a.delivery_id)})}s(ne,"cancelPendingNodeMail");function de(n,e){return c(d=>{const r=Date.now(),o=d.prepare(`SELECT target.status AS controller_status FROM waits w LEFT JOIN nodes target ON target.node_id = w.target_id
+        WHERE w.node_id = ? AND w.kind = 'controller' AND w.target_id = ? AND w.satisfied_at IS NULL`).get(n,e);if(o===void 0||o.controller_status==="active"||o.controller_status==="idle")return null;const t=H(n,{kind:"urgent",label:"declared controller is no longer live",bodyJson:{body:`Controller ${e} is no longer live; the declared message wait was cleared.`},urgency:"urgent",wake:1});if(!b(n,e,r,d))throw new Error(`controller wait changed while notifying ${n}`);return t})}s(de,"enqueueControllerDeathNotice");export{ee as cancelDelivery,ne as cancelPendingNodeMail,de as enqueueControllerDeathNotice,Z as enqueueExternalAction,H as enqueueNodeMail,Y as enqueueSubscriberMail};

package/dist/core/fs-utils.d.ts

@@ -11,6 +11,8 @@ export declare function writeJson(path: string, data: unknown): void;
 export interface AtomicWriteOptions {
     /** Force this mode regardless of any existing file's mode. Omitted: preserve the existing file's mode, or default a new file to `0o600`. */
     mode?: number;
+    /** Require the parent to exist, rather than recreate a removed project root. */
+    createParent?: boolean;
 }
 export declare function atomicWriteJson(path: string, data: unknown, opts?: AtomicWriteOptions): void;
 /** Force a file's written bytes to stable storage. */

package/dist/core/fs-utils.js

@@ -1,3 +1,3 @@
-var W=Object.defineProperty;var n=(r,t)=>W(r,"name",{value:t,configurable:!0});import{existsSync as i,lstatSync as N,mkdirSync as g,readdirSync as y,readFileSync as f,rmSync as S,statSync as d,symlinkSync as h,writeFileSync as a,cpSync as w,readlinkSync as E,renameSync as I,chmodSync as $,realpathSync as b,closeSync as J,fsyncSync as O,openSync as T}from"node:fs";import{dirname as s,join as k,relative as L,sep as j}from"node:path";import{homedir as F,platform as v}from"node:os";function D(r){try{return b(r)}catch{return r}}n(D,"realpathOrSelf");function Q(r,t=F()){return r==="~"?t:r.startsWith("~/")||v()==="win32"&&r.startsWith("~\\")?k(t,r.slice(2)):r}n(Q,"expandTilde");function R(r,t=F()){return r===t?"~":r.startsWith(t+j)?"~"+r.slice(t.length):r}n(R,"tildify");function l(r){g(r,{recursive:!0})}n(l,"ensureDir");function U(r,t){l(s(r)),a(r,JSON.stringify(t,null,2)+`
-`,"utf8")}n(U,"writeJson");function V(r,t,c){C(r,JSON.stringify(t,null,2)+`
-`,c)}n(V,"atomicWriteJson");function X(r){const t=T(r,"r");try{O(t)}finally{J(t)}}n(X,"syncFile");function Y(r){const t=T(r,"r");try{O(t)}finally{J(t)}}n(Y,"syncDirectory");function C(r,t,c){l(s(r));const e=`${r}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`,o=c?.mode??(i(r)?d(r).mode&511:384);try{a(e,t,{mode:o}),$(e,o),I(e,r)}finally{i(e)&&S(e,{force:!0})}}n(C,"atomicWriteText");function M(r){return JSON.parse(f(r,"utf8"))}n(M,"readJson");function Z(r){return i(r)?M(r):null}n(Z,"readJsonIfExists");function _(r){try{return JSON.parse(f(r,"utf8"))}catch{return null}}n(_,"readJsonOrNull");function P(r){return i(r)?f(r,"utf8"):null}n(P,"readTextIfExists");function rr(r){return f(r,"utf8")}n(rr,"readText");function tr(r,t){l(s(r)),a(r,t,"utf8")}n(tr,"writeText");function q(r){try{return d(r).isDirectory()}catch{return!1}}n(q,"isDir");function z(r){try{return N(r).isSymbolicLink()}catch{return!1}}n(z,"isSymlink");function nr(r){return i(r)}n(nr,"pathExists");function er(r){return i(r)?y(r,{withFileTypes:!0}).filter(t=>t.isDirectory()||t.isSymbolicLink()).map(t=>t.name):[]}n(er,"listDirs");function ir(r){return i(r)?y(r):[]}n(ir,"listEntries");function A(r){!i(r)&&!z(r)||S(r,{recursive:!0,force:!0})}n(A,"removePath");function or(r,t,c={}){l(s(t)),A(t);const e=v()==="win32";if(!c.noSymlink&&!e){const o=L(D(s(t)),D(r));try{return h(o,t,q(r)?"dir":"file"),"symlink"}catch{return w(r,t,{recursive:!0}),"copy"}}return w(r,t,{recursive:!0}),"copy"}n(or,"linkOrCopy");function cr(r){try{return E(r)}catch{return null}}n(cr,"readSymlinkTarget");function ur(r,t=()=>!0,c=()=>!1){const e=[];if(!i(r))return e;const o=[r];for(;o.length;){const x=o.pop();let p;try{p=y(x,{withFileTypes:!0})}catch{continue}for(const u of p){const m=k(x,u.name);u.isDirectory()?c(u.name)||o.push(m):u.isFile()&&t(u.name)&&e.push(m)}}return e}n(ur,"walkFiles");function sr(){return new Date().toISOString()}n(sr,"nowIso");export{V as atomicWriteJson,C as atomicWriteText,l as ensureDir,Q as expandTilde,q as isDir,z as isSymlink,or as linkOrCopy,er as listDirs,ir as listEntries,sr as nowIso,nr as pathExists,M as readJson,Z as readJsonIfExists,_ as readJsonOrNull,cr as readSymlinkTarget,rr as readText,P as readTextIfExists,D as realpathOrSelf,A as removePath,Y as syncDirectory,X as syncFile,R as tildify,ur as walkFiles,U as writeJson,tr as writeText};
+var v=Object.defineProperty;var n=(r,t)=>v(r,"name",{value:t,configurable:!0});import{existsSync as c,lstatSync as D,mkdirSync as E,readdirSync as y,readFileSync as f,rmSync as S,statSync as d,symlinkSync as W,writeFileSync as a,cpSync as w,readlinkSync as g,renameSync as I,chmodSync as $,realpathSync as b,closeSync as J,fsyncSync as O,openSync as T}from"node:fs";import{dirname as s,join as h,relative as L,sep as j}from"node:path";import{homedir as k,platform as F}from"node:os";function N(r){try{return b(r)}catch{return r}}n(N,"realpathOrSelf");function Q(r,t=k()){return r==="~"?t:r.startsWith("~/")||F()==="win32"&&r.startsWith("~\\")?h(t,r.slice(2)):r}n(Q,"expandTilde");function R(r,t=k()){return r===t?"~":r.startsWith(t+j)?"~"+r.slice(t.length):r}n(R,"tildify");function l(r){E(r,{recursive:!0})}n(l,"ensureDir");function U(r,t){l(s(r)),a(r,JSON.stringify(t,null,2)+`
+`,"utf8")}n(U,"writeJson");function V(r,t,i){C(r,JSON.stringify(t,null,2)+`
+`,i)}n(V,"atomicWriteJson");function X(r){const t=T(r,"r");try{O(t)}finally{J(t)}}n(X,"syncFile");function Y(r){const t=T(r,"r");try{O(t)}finally{J(t)}}n(Y,"syncDirectory");function C(r,t,i){i?.createParent!==!1&&l(s(r));const e=`${r}.${process.pid}.${Date.now()}.${Math.random().toString(16).slice(2)}.tmp`,o=i?.mode??(c(r)?d(r).mode&511:384);try{a(e,t,{mode:o}),$(e,o),I(e,r)}finally{c(e)&&S(e,{force:!0})}}n(C,"atomicWriteText");function M(r){return JSON.parse(f(r,"utf8"))}n(M,"readJson");function Z(r){try{return M(r)}catch(t){if(t.code==="ENOENT")return null;throw t}}n(Z,"readJsonIfExists");function _(r){try{return JSON.parse(f(r,"utf8"))}catch{return null}}n(_,"readJsonOrNull");function P(r){return c(r)?f(r,"utf8"):null}n(P,"readTextIfExists");function rr(r){return f(r,"utf8")}n(rr,"readText");function tr(r,t){l(s(r)),a(r,t,"utf8")}n(tr,"writeText");function q(r){try{return d(r).isDirectory()}catch{return!1}}n(q,"isDir");function z(r){try{return D(r).isSymbolicLink()}catch{return!1}}n(z,"isSymlink");function nr(r){return c(r)}n(nr,"pathExists");function er(r){return c(r)?y(r,{withFileTypes:!0}).filter(t=>t.isDirectory()||t.isSymbolicLink()).map(t=>t.name):[]}n(er,"listDirs");function ir(r){return c(r)?y(r):[]}n(ir,"listEntries");function A(r){!c(r)&&!z(r)||S(r,{recursive:!0,force:!0})}n(A,"removePath");function or(r,t,i={}){l(s(t)),A(t);const e=F()==="win32";if(!i.noSymlink&&!e){const o=L(N(s(t)),N(r));try{return W(o,t,q(r)?"dir":"file"),"symlink"}catch{return w(r,t,{recursive:!0}),"copy"}}return w(r,t,{recursive:!0}),"copy"}n(or,"linkOrCopy");function cr(r){try{return g(r)}catch{return null}}n(cr,"readSymlinkTarget");function ur(r,t=()=>!0,i=()=>!1){const e=[];if(!c(r))return e;const o=[r];for(;o.length;){const x=o.pop();let p;try{p=y(x,{withFileTypes:!0})}catch{continue}for(const u of p){const m=h(x,u.name);u.isDirectory()?i(u.name)||o.push(m):u.isFile()&&t(u.name)&&e.push(m)}}return e}n(ur,"walkFiles");function sr(){return new Date().toISOString()}n(sr,"nowIso");export{V as atomicWriteJson,C as atomicWriteText,l as ensureDir,Q as expandTilde,q as isDir,z as isSymlink,or as linkOrCopy,er as listDirs,ir as listEntries,sr as nowIso,nr as pathExists,M as readJson,Z as readJsonIfExists,_ as readJsonOrNull,cr as readSymlinkTarget,rr as readText,P as readTextIfExists,N as realpathOrSelf,A as removePath,Y as syncDirectory,X as syncFile,R as tildify,ur as walkFiles,U as writeJson,tr as writeText};

package/dist/core/grants/local.d.ts

@@ -0,0 +1,4 @@
+/** The unjoined runtime's one grant; nodes created before join reference it by id. */
+export declare const LOCAL_TERMINAL_GRANT_ID = "local:terminal";
+/** An unjoined local runtime has exactly one grant, owned by its terminal app. */
+export declare function installLocalTerminalGrant(): void;

package/dist/core/grants/local.js

@@ -0,0 +1 @@
+var l=Object.defineProperty;var e=(r,a)=>l(r,"name",{value:a,configurable:!0});import{replaceGrants as s}from"./mirror.js";const t=["crtr:llm","crtr:act","crtr:schedule","crtr:memory:rw:user","crtr:memory:manage:user","crtr:files:rw:user:."].map(r=>({scope:r,mode:"always"})),c="local:terminal";function m(){const r=new Date().toISOString();s([{id:c,runtime:"runtime:local",sub:"user:local",grantee:"app:terminal",rev:1,scopes:t,resolved_scopes:t,spend_cap:null,expires_at:null,status:"active",revoked_at:null,approved_at:r,payer:"user",synced_at:r}],r,"local")}e(m,"installLocalTerminalGrant");export{c as LOCAL_TERMINAL_GRANT_ID,m as installLocalTerminalGrant};

package/dist/core/grants/mirror.d.ts

@@ -0,0 +1,44 @@
+import type { DatabaseSync } from 'node:sqlite';
+import { type Scope } from '@north-light/crouter-identity';
+export interface GrantScope {
+    scope: string;
+    mode: 'always' | 'ask';
+}
+export interface GrantRecord {
+    id: string;
+    runtime: string;
+    sub: string;
+    grantee: string;
+    rev: number;
+    scopes: GrantScope[];
+    resolved_scopes: GrantScope[];
+    spend_cap: number | null;
+    expires_at: string | null;
+    status: 'active' | 'revoked' | 'removed';
+    revoked_at: string | null;
+    approved_at: string | null;
+    payer: 'user' | 'app' | null;
+    synced_at: string;
+}
+export interface ActiveGrant extends GrantRecord {
+    resolved: Scope[];
+}
+/** Every mirrored grant, whatever its status. */
+export declare function allGrants(): GrantRecord[];
+/** The active form of a grant record read earlier, or null when it is not active or unparsable. */
+export declare function activeRecord(grant: GrantRecord): ActiveGrant | null;
+export declare function hasGrant(grantId: string): boolean;
+export declare function activeGrant(grantId: string): ActiveGrant | null;
+export declare function grantFor(grantee: string, sub: string): ActiveGrant | null;
+export declare function activeGrantForApp(grantee: string): ActiveGrant | null;
+export declare function terminalGrant(): ActiveGrant | null;
+export declare function hasSyncedGrants(source: string): boolean;
+/** OWN-11 for a joined runtime: the unjoined runtime's local mirror grants
+ *  `user:local` full local scopes and is not the directory's. Delete it so no
+ *  grant exists until grant sync installs the directory's mirror. */
+export declare function dropLocalGrantMirror(db: DatabaseSync): number;
+/** The directory response is complete; commit it or keep the prior snapshot intact. */
+export declare function replaceGrants(grants: readonly GrantRecord[], syncedAt: string, source: string): void;
+/** Bumped by every `replaceGrants`. A launch compiled against one generation
+ *  and started under another may hold mounts the new mirror no longer grants. */
+export declare function grantsGeneration(): number;

package/dist/core/grants/mirror.js

@@ -0,0 +1,4 @@
+var l=Object.defineProperty;var a=(e,r)=>l(e,"name",{value:r,configurable:!0});import{parseScope as v}from"@north-light/crouter-identity";import{openDb as s,withCanvasWrite as d}from"../canvas/db.js";function i(e){if(!Array.isArray(e))throw new TypeError("grant scopes must be a list");return e.map(r=>{if(!r||typeof r!="object"||typeof r.scope!="string"||!["always","ask"].includes(r.mode))throw new TypeError("invalid grant scope entry");return{scope:r.scope,mode:r.mode}})}a(i,"entries");function c(e){return{id:e.id,runtime:e.runtime,sub:e.sub,grantee:e.grantee,rev:e.rev,scopes:i(JSON.parse(e.scopes_json)),resolved_scopes:i(JSON.parse(e.resolved_scopes_json)),spend_cap:e.spend_cap,expires_at:e.expires_at,status:e.status,revoked_at:e.revoked_at,approved_at:e.approved_at,payer:e.payer,synced_at:e.synced_at}}a(c,"record");function u(e){if(!e||e.status!=="active")return null;try{return f(c(e))}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return null;throw r}}a(u,"active");function T(){return s().prepare("SELECT * FROM grants").all().flatMap(e=>{try{return[c(e)]}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return[];throw r}})}a(T,"allGrants");function f(e){if(e.status!=="active")return null;try{const r=e.resolved_scopes.map(({scope:o})=>v(o));return{...e,resolved:e.resolved_scopes.flatMap(({mode:o},p)=>o==="always"?[r[p]]:[])}}catch(r){if(r instanceof TypeError||r instanceof SyntaxError)return null;throw r}}a(f,"activeRecord");function S(e){return!!s().prepare("SELECT 1 FROM grants WHERE id = ?").get(e)}a(S,"hasGrant");function m(e){return u(s().prepare("SELECT * FROM grants WHERE id = ?").get(e))}a(m,"activeGrant");function R(e,r){return u(s().prepare("SELECT * FROM grants WHERE grantee = ? AND sub = ?").get(e,r))}a(R,"grantFor");function O(e){const r=s().prepare("SELECT * FROM grants WHERE grantee = ? AND status = 'active'").all(e);if(r.length>1)throw new Error(`multiple active grants for ${e}`);return u(r[0])}a(O,"activeGrantForApp");function N(){const e=s().prepare("SELECT * FROM grants WHERE grantee = 'app:terminal' AND status = 'active'").all();if(e.length>1)throw new Error("multiple active terminal grants");return u(e[0])}a(N,"terminalGrant");function x(e){return s().prepare("SELECT value FROM runtime_state WHERE key = 'grants_source'").get()?.value===e}a(x,"hasSyncedGrants");function h(e){return e.prepare("SELECT value FROM runtime_state WHERE key = 'grants_source'").get()?.value!=="local"?0:(e.prepare("DELETE FROM runtime_state WHERE key = 'grants_source'").run(),Number(e.prepare("DELETE FROM grants").run().changes))}a(h,"dropLocalGrantMirror");function L(e,r,o){const p=new Set;for(const t of e){if(p.has(t.id)||!t.id||!t.runtime||!t.sub||!t.grantee||!Number.isInteger(t.rev)||!["active","revoked","removed"].includes(t.status))throw new TypeError("invalid grant sync response");p.add(t.id),i(t.scopes),i(t.resolved_scopes)}d(t=>{t.exec("DELETE FROM grants");const E=t.prepare(`INSERT INTO grants
+      (id, runtime, sub, grantee, rev, scopes_json, resolved_scopes_json, spend_cap, expires_at,
+       status, revoked_at, approved_at, payer, synced_at)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`);for(const n of e)E.run(n.id,n.runtime,n.sub,n.grantee,n.rev,JSON.stringify(n.scopes),JSON.stringify(n.resolved_scopes),n.spend_cap,n.expires_at,n.status,n.revoked_at,n.approved_at,n.payer,n.synced_at);t.prepare("INSERT INTO runtime_state (key, value) VALUES ('grants_source', ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run(o),t.prepare("INSERT INTO runtime_state (key, value) VALUES ('grants_generation', '1') ON CONFLICT(key) DO UPDATE SET value = CAST(CAST(value AS INTEGER) + 1 AS TEXT)").run()})}a(L,"replaceGrants");function A(){const e=s().prepare("SELECT value FROM runtime_state WHERE key = 'grants_generation'").get();return e?Number(e.value):0}a(A,"grantsGeneration");export{m as activeGrant,O as activeGrantForApp,f as activeRecord,T as allGrants,h as dropLocalGrantMirror,R as grantFor,A as grantsGeneration,S as hasGrant,x as hasSyncedGrants,L as replaceGrants,N as terminalGrant};

package/dist/core/grants/on-sync.d.ts

@@ -0,0 +1,22 @@
+import type { SandboxRecord } from '../../launcher/spec.js';
+import { type GrantRecord } from './mirror.js';
+/** Work that outlives the sync that started it; the daemon keeps ownership of it during shutdown. */
+export type Detach = (work: Promise<void>) => void;
+/** Why a sandbox must stop under the current mirror, or null when every
+ *  granted mount it was launched with is still granted. */
+export declare function exceeds(sandbox: Pick<SandboxRecord, 'uid' | 'nodeId' | 'mounts'>, owners?: ReadonlyMap<number, {
+    app: string;
+    status: string;
+}>): string | null;
+/** R26 from current state (runtime spec §15 "Ending revoked file access"):
+ *  compare every live launcher sandbox's launched mounts with what the current
+ *  mirror grants, and stop each one that holds more. Runs after every sync and
+ *  once at daemon start, so a stop an earlier daemon never confirmed is retried.
+ *  Resolves once every stop has been started; `completion` settles when they end. */
+export declare function sweepSandboxes(): Promise<{
+    completion: Promise<void>;
+}>;
+/** R26 and R27 after a sync replaced the grant mirror (runtime spec §15).
+ *  Resolves once streams are closed and the sweep's stops have started; stop
+ *  completion and removal cascades continue as detached work. */
+export declare function onGrantSync(before: readonly GrantRecord[], detach?: Detach): Promise<void>;

package/dist/core/grants/on-sync.js

@@ -0,0 +1 @@
+var g=Object.defineProperty;var d=(o,r)=>g(o,"name",{value:r,configurable:!0});import{activeBackgroundBashJobs as x,readJobPgid as b}from"../bash-jobs.js";import{getNode as c,recordSettledTurn as w}from"../canvas/index.js";import{transition as S}from"../runtime/lifecycle.js";import{openDb as m}from"../canvas/db.js";import{contextDir as h}from"../canvas/node-agent-paths.js";import{emitEvent as u}from"../events/emit.js";import{closeGrantStreams as y}from"../runs/events.js";import{grantedMounts as E,isGrantedSource as P,mountAllowed as R}from"../spaces/mounts.js";import{permissionsForRun as v}from"../spaces/permissions.js";import{stopNodeSandboxes as k}from"../spaces/stop.js";import{activeGrantForApp as G,allGrants as M}from"./mirror.js";import{runRemovalCascades as A}from"./remove.js";import{launcherPresent as C,listSandboxes as D,stopSandboxPid as N}from"./sandboxes.js";function _(){return new Map(m().prepare("SELECT uid, app, status FROM app_users").all().map(o=>[o.uid,{app:o.app,status:o.status}]))}d(_,"appUserOwners");function O(o,r=_()){const n=r.get(o.uid);if(!n||n.app==="app:terminal")return null;if(n.status!=="active")return"app_removed";const a=c(o.nodeId);try{let t;if(a&&a.grantee===n.app)t=v(n.app,a.sub??"user:local",a.grant_id??null,a.scopes??null);else{const s=G(n.app);if(!s)return"permission_revoked";t=v(n.app,s.sub,s.id,null)}const e=E(t);return o.mounts.every(s=>!P(n.app,s.source)||R(s,e))?null:"permission_revoked"}catch{return"permission_revoked"}}d(O,"exceeds");async function T(o){const r=c(o);if(!r)return;(r.status==="active"||r.status==="idle")&&S(o,"release");const n=new Date().toISOString();w(o,n),r.run_id&&r.run_id!==o&&m().prepare("UPDATE nodes SET last_settled_at = COALESCE(last_settled_at, ?) WHERE node_id = ?").run(n,r.run_id)}d(T,"afterRevocationStop");function F(o){const r=new Set,n=c(o);n?.pi_pid!=null&&r.add(n.pi_pid);try{const a=h(o,n?.grantee);for(const t of x(a,!0)){const e=b(a,t.jobId);e!==void 0&&r.add(e)}}catch{}return r}d(F,"nodePids");async function I(){if(!C())return{completion:Promise.resolve()};const o=await D(),r=_(),n=o.flatMap(e=>{const s=O(e,r);return s?[{sandbox:e,reason:s}]:[]}),a=[],t=new Map;for(const e of n){u({level:"info",event:"daemon.grants.sandbox_stop",fields:{sandbox_node:e.sandbox.nodeId,pid:e.sandbox.pid,grantee:r.get(e.sandbox.uid).app,reason:e.reason}});const s=t.get(e.sandbox.nodeId)??[];s.push(e),t.set(e.sandbox.nodeId,s)}for(const[e,s]of t){const p=c(e),l=p?F(e):new Set,f=p!==null&&s.some(({sandbox:i})=>l.has(i.pid));a.push((async()=>{if(f){const i=await k(e,"permission_revoked",{holdRecovery:!0,after:d(()=>T(e),"after")});if(!i.confirmed)throw i.error??new Error(`stop of ${e} was not confirmed`)}for(const{sandbox:i}of s)(!f||!l.has(i.pid))&&await N(i.pid)})().catch(i=>{u({level:"error",event:"daemon.grants.sandbox_stop_failed",...p?{node_id:e}:{fields:{sandbox_node:e}},error:i})}))}return{completion:Promise.all(a).then(()=>{})}}d(I,"sweepSandboxes");async function Y(o,r=n=>{}){const n=M();for(const t of o){if(t.status!=="active"||n.find(p=>p.id===t.id)?.status==="active")continue;const s=y(t.id);s&&u({level:"info",event:"daemon.grants.streams_closed",fields:{grant:t.id,grantee:t.grantee,streams:s}})}try{const{completion:t}=await I();r(t)}catch(t){u({level:"error",event:"daemon.grants.sweep_failed",error:t})}const a=new Set(n.filter(t=>t.status==="removed"&&o.find(e=>e.id===t.id)?.status!=="removed").map(t=>t.grantee));r(A(a).catch(()=>{}))}d(Y,"onGrantSync");export{O as exceeds,Y as onGrantSync,I as sweepSandboxes};

package/dist/core/grants/remove.d.ts

@@ -0,0 +1,7 @@
+/** Run the removal cascade for every `removed` grant whose app still has an
+ *  active OS-user row, and once for each app in `transitions` (its grant became
+ *  `removed` at this sync) even with no row. Serialized; each cascade is
+ *  idempotent and marks the row `removed` last, so an interrupted one resumes. */
+export declare function runRemovalCascades(transitions?: ReadonlySet<string>): Promise<void>;
+/** Runtime spec §15 "On removal" (design flow 10). Audit and usage rows stay. */
+export declare function removeApp(app: string): Promise<void>;

package/dist/core/grants/remove.js

@@ -0,0 +1 @@
+var R=Object.defineProperty;var d=(r,i)=>R(r,"name",{value:i,configurable:!0});import{rmSync as S}from"node:fs";import{join as h}from"node:path";import{deleteNodes as w}from"../canvas/canvas.js";import{openDb as f,withCanvasWrite as c}from"../canvas/db.js";import{cancelCron as O}from"../canvas/crons.js";import{emitEvent as m}from"../events/emit.js";import{appSpace as T,appsRoot as E,secretsDir as C}from"../layout.js";import{notifyRunDeleted as D}from"../runs/events.js";import{removeTreeBeneath as N}from"../spaces/open-beneath.js";import{stopNodeSandboxes as L}from"../spaces/stop.js";import{activeAppUser as p,markAppUserRemoved as W}from"../spaces/users.js";import{launcherRequest as b}from"../../launcher/client.js";import{LaunchRefused as H}from"../../launcher/spec.js";import{allGrants as x}from"./mirror.js";import{launcherPresent as u,listSandboxes as A,stopSandboxPid as F}from"./sandboxes.js";let g=Promise.resolve();function V(r=new Set){const i=g.then(async()=>{const o=x(),n=new Set(o.filter(t=>t.status==="removed").map(t=>t.grantee));for(const t of n)if(!o.some(a=>a.grantee===t&&a.status==="active")&&!(p(t)===null&&!r.has(t)))try{await M(t)}catch(a){m({level:"error",event:"daemon.grants.removal_failed",error:a,fields:{grantee:t}})}});return g=i.catch(()=>{}),i}d(V,"runRemovalCascades");async function M(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const i=T(r),o=p(r);m({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:o?.uid??null}});const n=c(e=>(e.prepare("UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE grantee = ?").run(new Date().toISOString(),r),e.prepare("SELECT node_id FROM nodes WHERE grantee = ? ORDER BY created DESC").all(r).map(s=>s.node_id)));for(const{cron_id:e}of f().prepare("SELECT cron_id FROM crons WHERE grantee = ?").all(r))O(e);const a=(await Promise.all(n.map(e=>L(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(a.length)throw new Error(`sandbox teardown could not be confirmed for ${a.length} node(s) of ${r}`);if(o&&u())for(const e of await A())e.uid===o.uid&&await F(e.pid);const v=n.filter(e=>f().prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(e)?.run_id===e);c(e=>{if(!n.length)return;const s=n.map(()=>"?").join(","),_=e.prepare(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).all(...n,...n);e.prepare(`DELETE FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).run(...n);for(const{message_id:l}of _)e.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(l,l)}),w(n);for(const e of v)D(e);if(S(h(C(),"env",i.root.slice(E().length+1)),{recursive:!0,force:!0}),N(E(),i.root),o&&u())try{await b({operation:"user.delete",uid:o.uid})}catch(e){if(!(e instanceof H&&e.refusal==="invalid_uid"))throw e}o&&W(o.uid),m({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:o?.uid??null,nodes:n.length}})}d(M,"removeApp");export{M as removeApp,V as runRemovalCascades};

package/dist/core/grants/sandboxes.d.ts

@@ -0,0 +1,7 @@
+import { type SandboxRecord } from '../../launcher/spec.js';
+/** App sandboxes exist only where the root launcher runs (Linux). */
+export declare function launcherPresent(): boolean;
+/** Every live launcher sandbox with the mounts it was launched with. */
+export declare function listSandboxes(): Promise<SandboxRecord[]>;
+/** Kill one launcher sandbox. A pid the launcher no longer knows has already exited. */
+export declare function stopSandboxPid(pid: number): Promise<void>;

package/dist/core/grants/sandboxes.js

@@ -0,0 +1 @@
+var e=Object.defineProperty;var r=(n,o)=>e(n,"name",{value:o,configurable:!0});import{existsSync as s}from"node:fs";import{launcherRequest as t}from"../../launcher/client.js";import{LAUNCHER_SOCKET as i,LaunchRefused as a}from"../../launcher/spec.js";function l(){return process.platform==="linux"&&s(i)}r(l,"launcherPresent");async function d(){const n=await t({operation:"list"});if(!("sandboxes"in n))throw new Error("launcher did not list sandboxes");return n.sandboxes}r(d,"listSandboxes");async function x(n){try{await t({operation:"stop",pid:n,signal:"SIGKILL"})}catch(o){if(!(o instanceof a&&o.refusal==="invalid_spec"))throw o}}r(x,"stopSandboxPid");export{l as launcherPresent,d as listSandboxes,x as stopSandboxPid};

package/dist/core/grants/sync.d.ts

@@ -0,0 +1,12 @@
+import { type Detach } from './on-sync.js';
+export declare const GRANT_SYNC_INTERVAL_S = 300;
+export type GrantSync = (options?: {
+    fresh?: boolean;
+}) => Promise<void>;
+/** Calls share one in-flight pull, including the start, periodic, and
+ *  unknown-grant triggers. A `fresh` call (a directory sync notice) needs a pull
+ *  that started after it arrived: while one is in flight it queues exactly one
+ *  more, which every later fresh call shares. A pull resolves once the mirror is
+ *  committed and the R26 stops have started; stop completion and removal
+ *  cascades run as `detach`ed work. */
+export declare function createGrantSync(issuer: string, detach?: Detach): GrantSync;

package/dist/core/grants/sync.js

@@ -0,0 +1 @@
+var w=Object.defineProperty;var s=(t,r)=>w(t,"name",{value:r,configurable:!0});import{createPrivateKey as k,randomUUID as h,sign as v}from"node:crypto";import{readFileSync as S}from"node:fs";import{join as j}from"node:path";import{crtrHome as E}from"../canvas/paths.js";import{emitEvent as u}from"../events/emit.js";import{allGrants as b,replaceGrants as A}from"./mirror.js";import{onGrantSync as $}from"./on-sync.js";const U=300;function T(t,r){const e=Math.floor(Date.now()/1e3),i=Buffer.from(JSON.stringify({alg:"ES256",typ:"JWT",kid:t.kid})).toString("base64url"),a=Buffer.from(JSON.stringify({iss:t.client_id,sub:t.client_id,aud:r,iat:e,exp:e+300,jti:h()})).toString("base64url"),o=`${i}.${a}`,p=v("sha256",Buffer.from(o),{key:k({key:t.jwk,format:"jwk"}),dsaEncoding:"ieee-p1363"});return`${o}.${p.toString("base64url")}`}s(T,"assertion");function N(){const t=JSON.parse(S(j(E(),"secrets","runtime-client.json"),"utf8"));if(!t.jwk||t.alg!=="ES256"||!t.kid||!t.client_id||!t.runtime||t.jwk.kid!==t.kid||t.jwk.kty!=="EC"||t.jwk.crv!=="P-256"||!t.jwk.d)throw new TypeError("invalid runtime client key");return t}s(N,"runtimeClient");function G(t,r){if(!t||typeof t!="object")throw new TypeError("invalid grant sync response");const e=t;if(e.runtime!==(r.runtime.startsWith("runtime:")?r.runtime:`runtime:${r.runtime}`)||typeof e.id!="string"||typeof e.sub!="string"||typeof e.grantee!="string"||!Number.isInteger(e.rev)||!Array.isArray(e.scopes)||!Array.isArray(e.resolved_scopes)||!["active","revoked","removed"].includes(e.status??"")||typeof e.synced_at!="string")throw new TypeError("invalid grant sync response");const a=t.revisions?.find(o=>o.rev===e.rev)?.approved_at;if(typeof a!="string")throw new TypeError("grant revision has no approval time");return{...e,spend_cap:e.spend_cap??null,expires_at:e.expires_at??null,revoked_at:e.revoked_at??null,approved_at:a,payer:"user"}}s(G,"responseGrant");function q(t,r=e=>{}){let e;const i=t.replace(/\/$/,""),a=s(async()=>{const n=N(),d=`${i}/token`,g=new URLSearchParams({grant_type:"client_credentials",client_id:n.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:T(n,d)}),f=await fetch(d,{method:"POST",body:g,signal:AbortSignal.timeout(1e4)});if(!f.ok)throw new Error(`directory token request failed: ${f.status}`);const m=await f.json();if(typeof m.access_token!="string")throw new TypeError("directory token response has no access_token");const y=await fetch(`${i}/v1/runtime/grants`,{headers:{Authorization:`Bearer ${m.access_token}`},signal:AbortSignal.timeout(1e4)});if(!y.ok)throw new Error(`directory grant sync failed: ${y.status}`);const c=await y.json();if(!Array.isArray(c.grants)||typeof c.synced_at!="string")throw new TypeError("invalid grant sync response");const _=b();A(c.grants.map(l=>G(l,n)),c.synced_at,i),u({level:"info",event:"daemon.grants.synced",fields:{grants:c.grants.length,synced_at:c.synced_at}});try{await $(_,r)}catch(l){u({level:"error",event:"daemon.grants.on_sync_failed",error:l})}},"run");let o;const p=s(()=>{const n=a().catch(d=>{throw u({level:"error",event:"daemon.grants.sync_failed",error:d}),d}).finally(()=>{e===n&&(e=void 0)});return e=n,n},"start");return(n={})=>e?n.fresh?(o??=e.catch(()=>{}).then(()=>(o=void 0,e??p())),o):e:p()}s(q,"createGrantSync");export{U as GRANT_SYNC_INTERVAL_S,q as createGrantSync};

package/dist/core/help/memory-extensions.d.ts

@@ -0,0 +1,3 @@
+import type { MemoryExtensionDeclaration } from '../../types.js';
+/** Render the daemon's bounded declaration catalog without opening a memory store in the CLI. */
+export declare function memoryExtensionFieldCatalogHelp(operation: 'write' | 'edit', catalog: Record<string, Record<string, MemoryExtensionDeclaration>>): string | null;

package/dist/core/help/memory-extensions.js

@@ -0,0 +1,2 @@
+var m=Object.defineProperty;var s=(e,l)=>m(e,"name",{value:l,configurable:!0});import{stateBlock as a}from"../help.js";function c(e){return e.type!=="enum"?e.type:`enum (${e.values.join("|")})`}s(c,"declarationValueDescription");function d(e){return typeof e=="string"?JSON.stringify(e):String(e)}s(d,"extensionHelpValue");function g(e,l){const o=Object.entries(l).flatMap(([n,i])=>Object.entries(i).map(([t,u])=>({namespace:n,field:t,declaration:u}))).sort((n,i)=>`${n.namespace}.${n.field}`.localeCompare(`${i.namespace}.${i.field}`));if(o.length===0)return null;const r=50,f=o.slice(0,r).map(({namespace:n,field:i,declaration:t})=>{const u=t.default===void 0?"":`; default ${d(t.default)}`,p=e==="write"?t.write_help:t.edit_help;return`- \`extensions.${n}.${i}\` \u2014 ${c(t)}${u}. ${p}`});return o.length>r&&f.push(`- ${o.length-r} additional declared fields omitted from help.`),a("memory-extension-fields",{count:o.length},f.join(`
+`))}s(g,"memoryExtensionFieldCatalogHelp");export{g as memoryExtensionFieldCatalogHelp};

package/dist/core/help.d.ts

@@ -60,6 +60,9 @@ export interface FlagParam {
      *  deliberately-undiscoverable confirmation gate the agent must be TOLD about
      *  in the command's own output (not by reading the schema), never advertised. */
     hidden?: boolean;
+    /** The value is a secret. Parse errors for the leaf then withhold every stray
+     *  argv value, since a mistyped invocation is how a secret lands in one. */
+    sensitive?: boolean;
     /** Local-file materialization contract, valid only on a `path` flag — see
      *  PositionalParam.encoding. */
     encoding?: FileEncoding;
@@ -252,6 +255,17 @@ export interface LeafHelp {
 export type EffectiveLeafHelp = Readonly<Omit<LeafHelp, 'effects'> & {
     effects: readonly string[];
 }>;
+/** State elements a leaf reads asynchronously (e.g. from the daemon) when its
+ *  help renders: `leaf` stands in for `dynamicState`, `flags` for a named
+ *  flag's `focusedHelp.dynamicState`. */
+export interface AsyncHelpState {
+    leaf?: () => Promise<string>;
+    flags?: Readonly<Record<string, () => Promise<string>>>;
+}
+/** `help` with the async state the render shows read once: the leaf's for
+ *  ordinary help, only `focusedFlag`'s for focused help. A read that throws
+ *  renders no element, the same soft failure `evalDynamic` gives a sync one. */
+export declare function withAsyncHelpState(help: LeafHelp, state: AsyncHelpState, focusedFlag?: string): Promise<LeafHelp>;
 /** Build a self-named runtime-state element: `<tag attr="v">body</tag>`. The
  *  subtree that owns the state authors it through this, so the tag name and any
  *  scalar metadata (e.g. a count) travel with the data and render identically

package/dist/core/help.js

@@ -1,9 +1,9 @@
-var g=Object.defineProperty;var i=(e,n)=>g(e,"name",{value:n,configurable:!0});function k(e,n,t){const s=Object.entries(n).map(([a,u])=>` ${a}="${u}"`).join("");return`<${e}${s}>
+var g=Object.defineProperty;var i=(e,n)=>g(e,"name",{value:n,configurable:!0});async function N(e,n,t){const s=i(async r=>{try{const a=await r();return()=>a}catch{return()=>null}},"read"),o=t===void 0?void 0:n.flags?.[t],u=new Map(o===void 0?[]:[[t,await s(o)]]);return{...e,...t===void 0&&n.leaf!==void 0?{dynamicState:await s(n.leaf)}:{},params:e.params?.map(r=>{const a=r.kind==="flag"?u.get(r.name):void 0;return r.kind==="flag"&&r.focusedHelp!==void 0&&a!==void 0?{...r,focusedHelp:{...r.focusedHelp,dynamicState:a}}:r})}}i(N,"withAsyncHelpState");function C(e,n,t){const s=Object.entries(n).map(([o,u])=>` ${o}="${u}"`).join("");return`<${e}${s}>
 ${t}
-</${e}>`}i(k,"stateBlock");function l(e){if(e===void 0)return null;try{const n=e();return n!==null&&n!==""?n:null}catch{return null}}i(l,"evalDynamic");function p(e){let n=0;for(const t of e)t.length>n&&(n=t.length);return n}i(p,"maxLen");function h(e,n){return e+" ".repeat(Math.max(0,n-e.length))}i(h,"pad");const b=`I/O contract: flags and positional args on input; stdout is agent-ready markdown/XML you
+</${e}>`}i(C,"stateBlock");function l(e){if(e===void 0)return null;try{const n=e();return n!==null&&n!==""?n:null}catch{return null}}i(l,"evalDynamic");function p(e){let n=0;for(const t of e)t.length>n&&(n=t.length);return n}i(p,"maxLen");function m(e,n){return e+" ".repeat(Math.max(0,n-e.length))}i(m,"pad");const b=`I/O contract: flags and positional args on input; stdout is agent-ready markdown/XML you
 act on directly \u2014 read it as a continuation of your prompt, don't parse it as data.
-Exit 0 on success, non-zero on failure. Schemas appear at leaf -h; a leaf may route an uncommon flag to focused --flag -h guidance.`,y="Before running a crtr command that changes state \u2014 creates, mutates, or deletes anything \u2014 whose exact contract (args, flags, effects) you haven't verified this session, run `-h` on it and read the schema first \u2014 a reliable read beats a guess that wastes a turn or triggers an unintended effect. When a leaf routes a flag to focused help, read that focused help before using the flag; the compact row is discovery, not its invocation contract. Same when the user names a capability you don't fully recognize: `-h` it before acting.";function x(e){const n=e.subcommands??[],t=e.otherSubcommandCount??0;if(n.length===0&&t===0)return[];const s=[];if(n.length>0){const a=p(n.map(u=>u.path));for(const u of n)s.push(u.desc!==void 0&&u.desc!==""?`  ${h(u.path,a)}  ${u.desc}`:`  ${u.path}`)}if(t>0){const a=n.length>0?"other subcommand":"subcommand";s.push(`  [+${t} ${a}${t===1?"":"s"} \u2014 \`crtr ${e.name} -h\`]`)}return s}i(x,"rootSubcommandLines");function C(e){const n=[];n.push(`${e.tagline}`),n.push("");for(const t of e.commands){n.push(`<command name="${t.name}">`),n.push(t.concept),n.push(`use when ${t.useWhen}`);for(const a of x(t))n.push(a);const s=l(t.dynamicState);s!==null&&n.push(s),n.push("</command>"),n.push("")}if(e.globals.length>0){n.push("Globals");const t=p(e.globals.map(s=>s.name));for(const s of e.globals)n.push(`  ${h(s.name,t)}  ${s.desc}`);n.push("")}return n.push(b),n.push(""),n.push(y),n.join(`
-`)}i(C,"renderRoot");function f(e){return e.replace(/"/g,"'")}i(f,"attr");function I(e){const n=[];n.push(`<command name="${e.name}" description="${f(e.summary)}">`);const t=l(e.dynamicState);t!==null&&n.push(t),e.model!==void 0&&n.push(e.model);for(const s of e.listing??[]){if(s.tier==="hidden")continue;const a=s.plugin===void 0?"":` plugin="${f(s.plugin)}"`,u=s.subCount!==void 0&&s.subCount>0?` subcommands="${s.subCount}"`:"";n.length>1&&n.push(""),n.push(`<subcommand name="${s.name}" description="${f(s.description)}" whenToUse="${f(s.whenToUse)}"${a}${u}/>`)}return e.extensionIssue!==void 0&&n.push(`<extension-issue fragment="${f(e.extensionIssue.fragment)}">This repository's contributed commands were rejected: ${e.extensionIssue.message}. Run \`crtr sys doctor\` for the full report.</extension-issue>`),n.push("</command>"),n.join(`
-`)}i(I,"renderBranch");function v(e){if(e.kind==="positional")return`${e.name.toUpperCase()}${e.repeatable===!0?"...":""}`;if(e.kind==="stdin")return"stdin";if(e.kind==="context-file")return"--context-file PATH";const n=e;return n.type==="bool"?`--${n.name}`:`--${n.name} ${n.name.toUpperCase().replace(/-/g,"_")}`}i(v,"paramLabel");function m(e){return e===void 0?"":e==="base64"?" Local file path: the file is read and its raw bytes are base64-encoded into the request; the path itself is never sent.":" Local file path: the file is read as UTF-8 text and its content is sent as the value; the path itself is never sent."}i(m,"fileEncodingNote");function $(e){return e===void 0?"":` Defaults to $${e} when that is set and non-empty in the environment, and counts as supplied.`}i($,"envDefaultNote");function S(e,n){return e.focusedHelp===void 0?"":` Before using this flag, run \`crtr ${n} --${e.name} -h\` and read its focused guidance.`}i(S,"focusedFlagHelpNote");function w(e,n){const t=e.required?"required":"optional";if(e.kind==="positional"){const r=e.repeatable===!0?" Repeatable \u2014 pass multiple values to accumulate in argv order.":"";return`positional, ${t}.${m(e.encoding)}${$(e.defaultFromEnv)} ${e.constraint}${r}`}if(e.kind==="stdin")return`${t}. ${e.constraint}`;if(e.kind==="context-file"){const r=e.shape!==void 0?` Shape: ${e.shape}`:"";return`${t}. Path to a JSON file.${r} ${e.constraint}`.trim()}const s=e,a=S(s,n);if(s.type==="bool")return`${t} boolean. Presence means true. ${s.constraint}${a}`.trim();const u=s.default!==void 0?` Default: ${String(s.default)}.`:"",d=s.type==="enum"&&s.choices!==void 0?` One of: ${s.choices.join(", ")}.`:"",o=s.repeatable===!0?" Repeatable \u2014 pass multiple times to accumulate.":"";return`${s.type}, ${t}.${d}${u}${m(s.encoding)}${$(s.defaultFromEnv)} ${s.constraint}${o}${a}`.trim()}i(w,"paramDesc");function T(e,n){const t=[`${e.name}: ${e.summary}.`],s=(e.params??[]).filter(o=>!(o.kind==="flag"&&o.hidden===!0)),a=n===void 0?void 0:s.find(o=>o.kind==="flag"&&o.name===n&&o.focusedHelp!==void 0);if(a?.focusedHelp!==void 0){const o=a.focusedHelp;if(t.push(""),t.push(`<parameter name="${a.name}">`),t.push("When to use"),t.push(`  ${o.whenToUse}`),t.push(""),t.push("Value"),t.push(`  ${o.value}`),(o.effects??[]).length>0){t.push(""),t.push("Effects");for(const c of o.effects??[])t.push(`  ${c}`)}const r=l(o.dynamicState);return r!==null&&(t.push(""),t.push(r)),t.push("</parameter>"),t.join(`
-`)}if(e.guide!==void 0&&(t.push(""),t.push(e.guide)),t.push(""),s.length>0){t.push("Input");const o=s.map(v),r=p(o);for(let c=0;c<s.length;c++)t.push(`  ${h(o[c],r)}  ${w(s[c],e.name)}`)}else t.push(e.inputNote!==void 0?e.inputNote:"No input parameters.");t.push(""),t.push("Output (fields carried in the rendered result)");const u=p(e.output.map(o=>o.name));for(const o of e.output)t.push(`  ${h(o.name,u)}  ${o.type}. ${o.constraint}`);t.push(""),t.push("Effects");for(const o of e.effects)t.push(`  ${o}`);const d=l(e.dynamicState);return d!==null&&(t.push(""),t.push(d)),t.join(`
-`)}i(T,"renderLeafArgv");export{I as renderBranch,T as renderLeafArgv,C as renderRoot,k as stateBlock};
+Exit 0 on success, non-zero on failure. Schemas appear at leaf -h; a leaf may route an uncommon flag to focused --flag -h guidance.`,y="Before running a crtr command that changes state \u2014 creates, mutates, or deletes anything \u2014 whose exact contract (args, flags, effects) you haven't verified this session, run `-h` on it and read the schema first \u2014 a reliable read beats a guess that wastes a turn or triggers an unintended effect. When a leaf routes a flag to focused help, read that focused help before using the flag; the compact row is discovery, not its invocation contract. Same when the user names a capability you don't fully recognize: `-h` it before acting.";function x(e){const n=e.subcommands??[],t=e.otherSubcommandCount??0;if(n.length===0&&t===0)return[];const s=[];if(n.length>0){const o=p(n.map(u=>u.path));for(const u of n)s.push(u.desc!==void 0&&u.desc!==""?`  ${m(u.path,o)}  ${u.desc}`:`  ${u.path}`)}if(t>0){const o=n.length>0?"other subcommand":"subcommand";s.push(`  [+${t} ${o}${t===1?"":"s"} \u2014 \`crtr ${e.name} -h\`]`)}return s}i(x,"rootSubcommandLines");function H(e){const n=[];n.push(`${e.tagline}`),n.push("");for(const t of e.commands){n.push(`<command name="${t.name}">`),n.push(t.concept),n.push(`use when ${t.useWhen}`);for(const o of x(t))n.push(o);const s=l(t.dynamicState);s!==null&&n.push(s),n.push("</command>"),n.push("")}if(e.globals.length>0){n.push("Globals");const t=p(e.globals.map(s=>s.name));for(const s of e.globals)n.push(`  ${m(s.name,t)}  ${s.desc}`);n.push("")}return n.push(b),n.push(""),n.push(y),n.join(`
+`)}i(H,"renderRoot");function d(e){return e.replace(/"/g,"'")}i(d,"attr");function I(e){const n=[];n.push(`<command name="${e.name}" description="${d(e.summary)}">`);const t=l(e.dynamicState);t!==null&&n.push(t),e.model!==void 0&&n.push(e.model);for(const s of e.listing??[]){if(s.tier==="hidden")continue;const o=s.plugin===void 0?"":` plugin="${d(s.plugin)}"`,u=s.subCount!==void 0&&s.subCount>0?` subcommands="${s.subCount}"`:"";n.length>1&&n.push(""),n.push(`<subcommand name="${s.name}" description="${d(s.description)}" whenToUse="${d(s.whenToUse)}"${o}${u}/>`)}return e.extensionIssue!==void 0&&n.push(`<extension-issue fragment="${d(e.extensionIssue.fragment)}">This repository's contributed commands were rejected: ${e.extensionIssue.message}. Run \`crtr sys doctor\` for the full report.</extension-issue>`),n.push("</command>"),n.join(`
+`)}i(I,"renderBranch");function w(e){if(e.kind==="positional")return`${e.name.toUpperCase()}${e.repeatable===!0?"...":""}`;if(e.kind==="stdin")return"stdin";if(e.kind==="context-file")return"--context-file PATH";const n=e;return n.type==="bool"?`--${n.name}`:`--${n.name} ${n.name.toUpperCase().replace(/-/g,"_")}`}i(w,"paramLabel");function h(e){return e===void 0?"":e==="base64"?" Local file path: the file is read and its raw bytes are base64-encoded into the request; the path itself is never sent.":" Local file path: the file is read as UTF-8 text and its content is sent as the value; the path itself is never sent."}i(h,"fileEncodingNote");function $(e){return e===void 0?"":` Defaults to $${e} when that is set and non-empty in the environment, and counts as supplied.`}i($,"envDefaultNote");function S(e,n){return e.focusedHelp===void 0?"":` Before using this flag, run \`crtr ${n} --${e.name} -h\` and read its focused guidance.`}i(S,"focusedFlagHelpNote");function v(e,n){const t=e.required?"required":"optional";if(e.kind==="positional"){const c=e.repeatable===!0?" Repeatable \u2014 pass multiple values to accumulate in argv order.":"";return`positional, ${t}.${h(e.encoding)}${$(e.defaultFromEnv)} ${e.constraint}${c}`}if(e.kind==="stdin")return`${t}. ${e.constraint}`;if(e.kind==="context-file"){const c=e.shape!==void 0?` Shape: ${e.shape}`:"";return`${t}. Path to a JSON file.${c} ${e.constraint}`.trim()}const s=e,o=S(s,n);if(s.type==="bool")return`${t} boolean. Presence means true. ${s.constraint}${o}`.trim();const u=s.default!==void 0?` Default: ${String(s.default)}.`:"",r=s.type==="enum"&&s.choices!==void 0?` One of: ${s.choices.join(", ")}.`:"",a=s.repeatable===!0?" Repeatable \u2014 pass multiple times to accumulate.":"";return`${s.type}, ${t}.${r}${u}${h(s.encoding)}${$(s.defaultFromEnv)} ${s.constraint}${a}${o}`.trim()}i(v,"paramDesc");function L(e,n){const t=[`${e.name}: ${e.summary}.`],s=(e.params??[]).filter(a=>!(a.kind==="flag"&&a.hidden===!0)),o=n===void 0?void 0:s.find(a=>a.kind==="flag"&&a.name===n&&a.focusedHelp!==void 0);if(o?.focusedHelp!==void 0){const a=o.focusedHelp;if(t.push(""),t.push(`<parameter name="${o.name}">`),t.push("When to use"),t.push(`  ${a.whenToUse}`),t.push(""),t.push("Value"),t.push(`  ${a.value}`),(a.effects??[]).length>0){t.push(""),t.push("Effects");for(const f of a.effects??[])t.push(`  ${f}`)}const c=l(a.dynamicState);return c!==null&&(t.push(""),t.push(c)),t.push("</parameter>"),t.join(`
+`)}if(e.guide!==void 0&&(t.push(""),t.push(e.guide)),t.push(""),s.length>0){t.push("Input");const a=s.map(w),c=p(a);for(let f=0;f<s.length;f++)t.push(`  ${m(a[f],c)}  ${v(s[f],e.name)}`)}else t.push(e.inputNote!==void 0?e.inputNote:"No input parameters.");t.push(""),t.push("Output (fields carried in the rendered result)");const u=p(e.output.map(a=>a.name));for(const a of e.output)t.push(`  ${m(a.name,u)}  ${a.type}. ${a.constraint}`);t.push(""),t.push("Effects");for(const a of e.effects)t.push(`  ${a}`);const r=l(e.dynamicState);return r!==null&&(t.push(""),t.push(r)),t.join(`
+`)}i(L,"renderLeafArgv");export{I as renderBranch,L as renderLeafArgv,H as renderRoot,C as stateBlock,N as withAsyncHelpState};

package/dist/core/host-exports/builtins.js

@@ -1,9 +1,9 @@
-var l=Object.defineProperty;var t=(r,n)=>l(r,"name",{value:n,configurable:!0});import{homedir as o}from"node:os";import{join as i}from"node:path";import{collectSlashSpecs as s}from"../command.js";const c="<!-- crtr-mode-cmd v1 -->",a="<!-- crtr-mode-cmd v";function u(r){const n=r.argumentHint!==void 0?`argument-hint: ${JSON.stringify(r.argumentHint)}
+var s=Object.defineProperty;var t=(r,n)=>s(r,"name",{value:n,configurable:!0});import{homedir as e}from"node:os";import{join as o}from"node:path";import{collectSlashSpecs as c}from"../command.js";import{piAgentDir as l}from"../runtime/package-health.js";const u="<!-- crtr-mode-cmd v1 -->",a="<!-- crtr-mode-cmd v";function m(r){const n=r.argumentHint!==void 0?`argument-hint: ${JSON.stringify(r.argumentHint)}
 `:"";return`---
 description: ${r.description}
 ${n}---
 
-${c}
+${u}
 
 ${r.body}
-`}t(u,"renderSlashTemplate");function d(){return i(o(),".claude","skills")}t(d,"claudeSkillsRoot");function m(){return i(o(),".pi","agent","skills")}t(m,"piSkillsRoot");function p(){return i(o(),".claude","commands")}t(p,"claudeCommandsRoot");function f(){return i(o(),".pi","agent","prompts")}t(f,"piPromptsRoot");const R="<!-- crtr-boot-skill v";function _(){return[{id:"@legacy/crtr-skills",name:"crtr-skills",markerPrefix:R,targets:[{host:"claude",dir:d,layout:"bundle"},{host:"pi",dir:m,layout:"bundle"}]}]}t(_,"legacyExportArtifacts");function y(r){const n=[];for(const e of s(r))n.push({id:`@cmd/${e.name}`,name:e.name,markerPrefix:a,render:t(()=>u(e),"render"),targets:[{host:"claude",dir:p,layout:"file"},{host:"pi",dir:f,layout:"file"}]});return n}t(y,"builtinExportPairs");export{a as SLASH_CMD_MARKER_PREFIX,y as builtinExportPairs,_ as legacyExportArtifacts};
+`}t(m,"renderSlashTemplate");function d(){return o(e(),".claude","skills")}t(d,"claudeSkillsRoot");function p(){return o(l(),"skills")}t(p,"piSkillsRoot");function f(){return o(e(),".claude","commands")}t(f,"claudeCommandsRoot");function R(){return o(l(),"prompts")}t(R,"piPromptsRoot");const S="<!-- crtr-boot-skill v";function A(){return[{id:"@legacy/crtr-skills",name:"crtr-skills",markerPrefix:S,targets:[{host:"claude",dir:d,layout:"bundle"},{host:"pi",dir:p,layout:"bundle"}]}]}t(A,"legacyExportArtifacts");function E(r){const n=[];for(const i of c(r))n.push({id:`@cmd/${i.name}`,name:i.name,markerPrefix:a,render:t(()=>m(i),"render"),targets:[{host:"claude",dir:f,layout:"file"},{host:"pi",dir:R,layout:"file"}]});return n}t(E,"builtinExportPairs");export{a as SLASH_CMD_MARKER_PREFIX,E as builtinExportPairs,A as legacyExportArtifacts};

package/dist/core/host-exports/export.js

@@ -1,3 +1,3 @@
-var x=Object.defineProperty;var o=(r,t)=>x(r,"name",{value:t,configurable:!0});import{writeFileSync as l}from"node:fs";import{homedir as u}from"node:os";import{dirname as c,join as i}from"node:path";import{ensureDir as S,pathExists as s,readText as a,removePath as h}from"../fs-utils.js";import{envNoExports as m}from"../../shared/env.js";import{builtinExportPairs as v,legacyExportArtifacts as E}from"./builtins.js";const y=new Set(["help","--help","-h","--version","-v"]);function p(r){const t=r[2];return t!==void 0&&y.has(t)}o(p,"shouldSkipAllForArgv");function P(r){return r[2]===void 0}o(P,"shouldSkipWritesForArgv");function d(r){return r==="claude"?s(i(u(),".claude")):s(i(u(),".pi","agent"))}o(d,"hostRootExists");function g(r,t){const e=r.dir();return r.layout==="bundle"?i(e,t,"SKILL.md"):i(e,`${t}.md`)}o(g,"targetPath");function w(r,t,e){if(s(r)){const n=a(r);if(!n.includes(e)||n===t)return}S(c(r)),l(r,t,"utf8")}o(w,"writeIfOurs");function A(r,t,e){!s(r)||!a(r).includes(e)||h(t.layout==="bundle"?c(r):r)}o(A,"removeIfOurs");function D(r=process.argv){try{if(m()||p(r))return;for(const t of E())for(const e of t.targets)d(e.host)&&A(g(e,t.name),e,t.markerPrefix)}catch(t){const e=t instanceof Error?t.message:String(t);process.stderr.write(`crtr: exports prune error: ${e}
-`)}}o(D,"pruneLegacyExports");function K(r,t=process.argv){try{if(m()||p(t)||P(t))return;for(const e of v(r)){const n=e.render();for(const f of e.targets)d(f.host)&&w(g(f,e.name),n,e.markerPrefix)}}catch(e){const n=e instanceof Error?e.message:String(e);process.stderr.write(`crtr: exports error: ${n}
-`)}}o(K,"provisionExports");export{K as provisionExports,D as pruneLegacyExports,w as writeIfOurs};
+var g=Object.defineProperty;var o=(r,t)=>g(r,"name",{value:t,configurable:!0});import{writeFileSync as x}from"node:fs";import{homedir as l}from"node:os";import{piAgentDir as S}from"../runtime/package-health.js";import{dirname as u,join as s}from"node:path";import{ensureDir as h,pathExists as i,readText as c,removePath as v}from"../fs-utils.js";import{envNoExports as m}from"../../shared/env.js";import{builtinExportPairs as E,legacyExportArtifacts as y}from"./builtins.js";const A=new Set(["help","--help","-h","--version","-v"]);function a(r){const t=r[2];return t!==void 0&&A.has(t)}o(a,"shouldSkipAllForArgv");function P(r){return r[2]===void 0}o(P,"shouldSkipWritesForArgv");function p(r){return r==="claude"?i(s(l(),".claude")):i(S())}o(p,"hostRootExists");function d(r,t){const e=r.dir();return r.layout==="bundle"?s(e,t,"SKILL.md"):s(e,`${t}.md`)}o(d,"targetPath");function w(r,t,e){if(i(r)){const n=c(r);if(!n.includes(e)||n===t)return}h(u(r)),x(r,t,"utf8")}o(w,"writeIfOurs");function b(r,t,e){!i(r)||!c(r).includes(e)||v(t.layout==="bundle"?u(r):r)}o(b,"removeIfOurs");function M(r=process.argv){try{if(m()||a(r))return;for(const t of y())for(const e of t.targets)p(e.host)&&b(d(e,t.name),e,t.markerPrefix)}catch(t){const e=t instanceof Error?t.message:String(t);process.stderr.write(`crtr: exports prune error: ${e}
+`)}}o(M,"pruneLegacyExports");function N(r,t=process.argv){try{if(m()||a(t)||P(t))return;for(const e of E(r)){const n=e.render();for(const f of e.targets)p(f.host)&&w(d(f,e.name),n,e.markerPrefix)}}catch(e){const n=e instanceof Error?e.message:String(e);process.stderr.write(`crtr: exports error: ${n}
+`)}}o(N,"provisionExports");export{N as provisionExports,M as pruneLegacyExports,w as writeIfOurs};

package/dist/core/human/action-binding.d.ts

@@ -13,6 +13,8 @@ export interface TicketActionBinding {
     argv: string[];
     /** Fully resolved absolute working directory. */
     cwd: string;
+    /** Originating app, retained when its node is later deleted. */
+    app?: string;
 }
 /** Publish the binding before the page exists, so a visible request is never
  * unbound. A second write is a caller bug, not a race to tolerate. */

package/dist/core/human/action-binding.js

@@ -1 +1 @@
-var e=Object.defineProperty;var t=(r,i)=>e(r,"name",{value:i,configurable:!0});import{readFileSync as c}from"node:fs";import{z as n}from"zod";import{actionBindingPath as o,publishJsonExclusive as s}from"./convention.js";const d=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,g=n.object({schema:n.literal("crtr.human-action-binding/v1"),name:n.string().regex(d),payload:n.unknown(),creatorCwd:n.string().min(1),configOrigin:n.string().min(1),argv:n.array(n.string().min(1)).min(1),cwd:n.string().min(1)}).strict();function h(r,i){if(!s(o(r),i))throw new Error(`action binding already exists: ${o(r)}`)}t(h,"publishTicketActionBinding");function A(r){let i;try{i=JSON.parse(c(o(r),"utf8"))}catch(a){if(a.code==="ENOENT")return null;throw a}return{...g.parse(i),payload:i.payload??null}}t(A,"readTicketActionBinding");export{d as HUMAN_ACTION_NAME_PATTERN,h as publishTicketActionBinding,A as readTicketActionBinding};
+var e=Object.defineProperty;var t=(r,i)=>e(r,"name",{value:i,configurable:!0});import{readFileSync as c}from"node:fs";import{z as n}from"zod";import{actionBindingPath as o,publishJsonExclusive as s}from"./convention.js";const p=/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/,d=n.object({schema:n.literal("crtr.human-action-binding/v1"),name:n.string().regex(p),payload:n.unknown(),creatorCwd:n.string().min(1),configOrigin:n.string().min(1),argv:n.array(n.string().min(1)).min(1),cwd:n.string().min(1),app:n.string().min(1).optional()}).strict();function h(r,i){if(!s(o(r),i))throw new Error(`action binding already exists: ${o(r)}`)}t(h,"publishTicketActionBinding");function A(r){let i;try{i=JSON.parse(c(o(r),"utf8"))}catch(a){if(a.code==="ENOENT")return null;throw a}return{...d.parse(i),payload:i.payload??null}}t(A,"readTicketActionBinding");export{p as HUMAN_ACTION_NAME_PATTERN,h as publishTicketActionBinding,A as readTicketActionBinding};

package/dist/core/human/feedback-companion.d.ts

@@ -1,4 +1,3 @@
-export declare function feedbackCompanionBranchPath(dir: string): string;
 /** Hex sha256 of the ticket's page document, recorded at first comment so the
  * settle-time completion can say whether the page changed during feedback. */
 export declare function pageDocumentSha256(dir: string): string;

package/dist/core/human/feedback-companion.js

@@ -1 +1 @@
-var s=Object.defineProperty;var n=(e,o)=>s(e,"name",{value:o,configurable:!0});import{createHash as f}from"node:crypto";import{existsSync as l,readFileSync as u}from"node:fs";import{resolve as h}from"node:path";import{getNode as w}from"../canvas/index.js";import{awaitCompanionBind as _,captureOrigin as b}from"../review/companion.js";import{COMPANION_BIND_DEADLINE_MS as d}from"../review/types.js";import{SessionManager as k}from"../runtime/broker-sdk.js";import{buildLaunchSpec as N}from"../runtime/launch.js";import{transition as I}from"../runtime/lifecycle.js";import{headlessBrokerHost as S}from"../runtime/host.js";import{spawnNode as x}from"../runtime/nodes.js";import{reviveNode as F}from"../runtime/revive.js";import{materializeSessionBranchAt as y}from"../runtime/session-branch.js";import{initializeForkContextExposure as B}from"../substrate/injected-store.js";import{pagePath as a}from"./convention.js";import{selectedPageDir as c}from"./tickets.js";function g(e){return`${e}/companion-branch.jsonl`}n(g,"feedbackCompanionBranchPath");function T(e){return f("sha256").update(u(a(c(e),"jsx"))).digest("hex")}n(T,"pageDocumentSha256");function v(e,o){const r=g(e);if(l(r)){const i=k.open(r);if(i.getSessionFile()===h(r)&&i.getSessionId()!=="")return r}return y(o,r),r}n(v,"materializeFeedbackBranch");function C(e){try{I(e,"cancel",{reason:"retired"}),S.teardown(e)}catch{}}n(C,"discardFeedbackCompanion");async function U(e){const o=w(e.senderNodeId);if(o===null)throw new Error(`page sender was not found: ${e.senderNodeId}`);const r=await b(e.senderNodeId),i=v(e.dir,r),{launch:m}=N(o.kind,o.mode,{lifecycle:"resident",hasManager:!1,model:r.modelSpec,modelExact:!0,cwd:o.cwd,profileId:o.profile_id??null}),t=await x({kind:o.kind,mode:o.mode,lifecycle:"resident",cwd:o.cwd,profile_id:o.profile_id??null,parent:e.senderNodeId,creator:e.senderNodeId,subscribe:!1,forkFrom:i,forkSourceFile:i,modelOverride:r.modelSpec,reviewBinding:{kind:"page_feedback",review_id:e.ticketId,origin_node_id:e.senderNodeId,branch_file:i,target_file:a(c(e.dir),"jsx")},name:`Feedback \xB7 ${e.title}`,launch:m});try{if(B(t.node_id,e.senderNodeId),await F(t.node_id,{resume:!1,capacity:"refuse"}),!await _(t.node_id,d))throw new Error(`feedback companion did not bind within ${d}ms`)}catch(p){throw C(t.node_id),p}return t.node_id}n(U,"realizeFeedbackCompanion");export{C as discardFeedbackCompanion,g as feedbackCompanionBranchPath,T as pageDocumentSha256,U as realizeFeedbackCompanion};
+var f=Object.defineProperty;var i=(e,o)=>f(e,"name",{value:o,configurable:!0});import{createHash as l}from"node:crypto";import{readFileSync as s}from"node:fs";import{getNode as u}from"../canvas/index.js";import{awaitCompanionBind as w,captureOrigin as h}from"../review/companion.js";import{COMPANION_BIND_DEADLINE_MS as t}from"../review/types.js";import{buildLaunchSpec as _}from"../runtime/launch.js";import{transition as k}from"../runtime/lifecycle.js";import{headlessBrokerHost as N}from"../runtime/host.js";import{spawnNode as b}from"../runtime/nodes.js";import{reviveNode as I}from"../runtime/revive.js";import{materializeSessionBranch as x}from"../runtime/session-branch.js";import{initializeForkContextExposure as F}from"../substrate/injected-store.js";import{pagePath as a}from"./convention.js";import{selectedPageDir as c}from"./tickets.js";function L(e){return l("sha256").update(s(a(c(e),"jsx"))).digest("hex")}i(L,"pageDocumentSha256");function S(e){try{k(e,"cancel",{reason:"retired"}),N.teardown(e)}catch{}}i(S,"discardFeedbackCompanion");async function q(e){const o=u(e.senderNodeId);if(o===null)throw new Error(`page sender was not found: ${e.senderNodeId}`);const d=await h(e.senderNodeId),n=x(d),{launch:m}=_(o.kind,o.mode,{lifecycle:"resident",hasManager:!1,model:d.modelSpec,modelExact:!0,cwd:o.cwd,profileId:o.profile_id??null}),r=await b({kind:o.kind,mode:o.mode,lifecycle:"resident",cwd:o.cwd,profile_id:o.profile_id??null,parent:e.senderNodeId,creator:e.senderNodeId,subscribe:!1,forkFrom:n,forkSourceFile:n,modelOverride:d.modelSpec,reviewBinding:{kind:"page_feedback",review_id:e.ticketId,origin_node_id:e.senderNodeId,branch_file:n,target_file:a(c(e.dir),"jsx")},name:`Feedback \xB7 ${e.title}`,launch:m});try{if(F(r.node_id,e.senderNodeId),await I(r.node_id,{resume:!1,capacity:"refuse"}),!await w(r.node_id,t))throw new Error(`feedback companion did not bind within ${t}ms`)}catch(p){throw S(r.node_id),p}return r.node_id}i(q,"realizeFeedbackCompanion");export{S as discardFeedbackCompanion,L as pageDocumentSha256,q as realizeFeedbackCompanion};

package/dist/core/human/page-schema.d.ts

@@ -186,8 +186,8 @@ export declare const chartDataRowsSchema: z.ZodArray<z.ZodRecord<z.ZodString, z.
 export declare const chartConfigSchema: z.ZodObject<{
     kind: z.ZodEnum<{
         line: "line";
-        bar: "bar";
         area: "area";
+        bar: "bar";
     }>;
     x: z.ZodString;
     y: z.ZodArray<z.ZodObject<{

package/dist/core/inspector/core.d.ts

@@ -31,6 +31,8 @@ export interface InspectorState {
     expanded: boolean;
     pendingCancel: PendingAction | null;
     scroll: Record<InspectorSection, number>;
+    /** Opened with `--read-only`: the keymap offers no cron cancel or job stop. */
+    readOnly: boolean;
 }
 export declare const inspectorCore: InspectorCore<InspectorState>;
 export declare function selectedJob(state: InspectorState): BashJobRow | undefined;