@north-light/crouter 0.3.349 → 0.3.350

package/dist/core/scoped-state/schema.js

@@ -1,13 +1,13 @@
-var r=Object.defineProperty;var T=(E,e)=>r(E,"name",{value:e,configurable:!0});const n=1,_=`
+var r=Object.defineProperty;var T=(e,E)=>r(e,"name",{value:E,configurable:!0});const n=3,a=1,_=`
 CREATE TABLE scope_owners (owner_key TEXT PRIMARY KEY, kind TEXT NOT NULL CHECK(kind IN ('user','profile','project')), root TEXT NOT NULL UNIQUE, profile_id TEXT UNIQUE);
-CREATE TABLE profiles (id TEXT PRIMARY KEY, name TEXT NOT NULL, created_at TEXT NOT NULL, last_used_at TEXT, paused_at TEXT, home TEXT, default_kind TEXT, metadata_json TEXT NOT NULL CHECK(json_valid(metadata_json)));
+CREATE TABLE profiles (id TEXT PRIMARY KEY, name TEXT NOT NULL, created_at TEXT NOT NULL, last_used_at TEXT, paused_at TEXT, default_kind TEXT, grantee TEXT, metadata_json TEXT NOT NULL CHECK(json_valid(metadata_json)));
 CREATE TABLE profile_projects (profile_id TEXT NOT NULL REFERENCES profiles(id) ON DELETE CASCADE, path TEXT NOT NULL, position INTEGER NOT NULL, memory TEXT NOT NULL CHECK(memory IN ('none','name','preview','content')), PRIMARY KEY(profile_id,path), UNIQUE(profile_id,position));
 CREATE TABLE profile_defaults (directory TEXT PRIMARY KEY, profile_id TEXT NOT NULL REFERENCES profiles(id) ON DELETE CASCADE);
 CREATE TABLE scope_settings (owner_key TEXT PRIMARY KEY REFERENCES scope_owners(owner_key), raw_json TEXT NOT NULL CHECK(json_valid(raw_json)));
 CREATE TABLE scope_bookkeeping (owner_key TEXT PRIMARY KEY REFERENCES scope_owners(owner_key), last_self_check TEXT, active_canvas TEXT);
 CREATE TABLE scope_marketplaces (owner_key TEXT NOT NULL REFERENCES scope_owners(owner_key), name TEXT NOT NULL, last_updated TEXT, PRIMARY KEY(owner_key,name));
-CREATE TABLE scope_plugins (owner_key TEXT NOT NULL REFERENCES scope_owners(owner_key), name TEXT NOT NULL, last_updated TEXT, etag TEXT, checked_at TEXT, PRIMARY KEY(owner_key,name));`,i=`
+CREATE TABLE scope_plugins (owner_key TEXT NOT NULL REFERENCES scope_owners(owner_key), name TEXT NOT NULL, last_updated TEXT, etag TEXT, checked_at TEXT, PRIMARY KEY(owner_key,name));`,N=`
 CREATE TABLE managed_accounts (provider_id TEXT NOT NULL, id TEXT NOT NULL, label TEXT NOT NULL, label_key TEXT NOT NULL, position INTEGER NOT NULL, last_attempt_at INTEGER NOT NULL, last_rate_limited_at INTEGER NOT NULL, rate_limited_until INTEGER NOT NULL, auth_failure TEXT CHECK(auth_failure IS NULL OR auth_failure='invalid_grant'), PRIMARY KEY(provider_id,id), UNIQUE(provider_id,label_key));
 CREATE INDEX managed_accounts_order ON managed_accounts(provider_id,position);
 CREATE TABLE rotation_settings (singleton INTEGER PRIMARY KEY CHECK(singleton=1), default_fallback_strength TEXT, revert_when_available INTEGER CHECK(revert_when_available IN (0,1)));
-CREATE TABLE provider_revision (singleton INTEGER PRIMARY KEY CHECK(singleton=1), revision INTEGER NOT NULL);`;function a(E,e){if(E.exec(e==="provider"?i:_),e!=="provider"){const o=e==="user"?"user":"project";E.prepare("INSERT INTO scope_owners(owner_key, kind, root, profile_id) VALUES (?, ?, ?, NULL)").run(o,e,"")}else E.prepare("INSERT INTO provider_revision(singleton, revision) VALUES (1, 0)").run();E.exec("PRAGMA user_version = 1")}T(a,"createScopedSchema");export{n as SCOPED_SCHEMA_VERSION,a as createScopedSchema};
+CREATE TABLE provider_revision (singleton INTEGER PRIMARY KEY CHECK(singleton=1), revision INTEGER NOT NULL);`;function t(e,E){if(e.exec(E==="provider"?N:_),E!=="provider"){const o=E==="user"?"user":"project";e.prepare("INSERT INTO scope_owners(owner_key, kind, root, profile_id) VALUES (?, ?, ?, NULL)").run(o,E,"")}else e.prepare("INSERT INTO provider_revision(singleton, revision) VALUES (1, 0)").run();e.exec(`PRAGMA user_version = ${E==="provider"?1:3}`)}T(t,"createScopedSchema");export{a as PROVIDER_SCHEMA_VERSION,n as SCOPED_SCHEMA_VERSION,t as createScopedSchema};

package/dist/core/scopes.d.ts

@@ -1,7 +1,7 @@
 import { scopeAllowed } from '../shared/env.js';
 export { scopeAllowed };
-/** The scopes a run inherits when its stored list is null. */
-export declare const SCOPE_VOCABULARY: readonly ["ask", "llm", "act", "schedule", "memory:read", "memory:write", "net"];
+/** The scopes an unrestricted local terminal run presents to the document substrate. */
+export declare const SCOPE_VOCABULARY: readonly ["crtr:llm", "crtr:act", "crtr:schedule", "crtr:memory:rw:user", "crtr:memory:manage:user", "crtr:files:rw:user:."];
 /** Reject unknown scope strings before they can silently change an allow-list. */
 export declare function validateScopes(value: unknown): string[];
 export declare function assertScope(meta: {

package/dist/core/scopes.js

@@ -1 +1 @@
-var p=Object.defineProperty;var t=(r,e)=>p(r,"name",{value:e,configurable:!0});import{scopeAllowed as n}from"../shared/env.js";import{InputError as c}from"./io.js";const d=["ask","llm","act","schedule","memory:read","memory:write","net"],s=new Set(d),i=/^[a-z][a-z0-9-]*:[^\s]+$/;function E(r){if(!Array.isArray(r)||r.some(e=>typeof e!="string"||!s.has(e)&&!i.test(e))){const e=Array.isArray(r)?r.find(o=>typeof o!="string"||!s.has(o)&&!i.test(o)):r;throw new c({error:"unknown_scope",message:`unknown scope: ${String(e)}`,received:e,field:"scopes",next:"Use a runtime scope name or a parameterized scope in prefix:operand form."})}return[...r]}t(E,"validateScopes");function A(r,e){if(!n(r.scopes,e))throw new a(`node ${r.node_id}`,e)}t(A,"assertScope");class a extends Error{static{t(this,"ScopeDeniedError")}holder;scope;constructor(e,o){super(`${e} does not hold the ${o} scope`),this.holder=e,this.scope=o,this.name="ScopeDeniedError"}}export{d as SCOPE_VOCABULARY,a as ScopeDeniedError,A as assertScope,n as scopeAllowed,E as validateScopes};
+var c=Object.defineProperty;var o=(e,r)=>c(e,"name",{value:r,configurable:!0});import{parseScope as i}from"@north-light/crouter-identity";import{scopeAllowed as t}from"../shared/env.js";import{InputError as n}from"./io.js";const w=["crtr:llm","crtr:act","crtr:schedule","crtr:memory:rw:user","crtr:memory:manage:user","crtr:files:rw:user:."];function h(e){if(!Array.isArray(e))throw new n({error:"unknown_scope",message:"scopes must be a list",received:e,field:"scopes",next:"Pass identity scope strings."});for(const r of e)try{if(typeof r!="string")throw new TypeError("scope is not a string");i(r)}catch{throw new n({error:"unknown_scope",message:`unknown scope: ${String(r)}`,received:r,field:"scopes",next:"Pass identity scope strings."})}return[...e]}o(h,"validateScopes");function u(e,r){if(!t(e.scopes,r))throw new p(`node ${e.node_id}`,r)}o(u,"assertScope");class p extends Error{static{o(this,"ScopeDeniedError")}holder;scope;constructor(r,s){super(`${r} does not hold the ${s} scope`),this.holder=r,this.scope=s,this.name="ScopeDeniedError"}}export{w as SCOPE_VOCABULARY,p as ScopeDeniedError,u as assertScope,t as scopeAllowed,h as validateScopes};

package/dist/core/secrets.d.ts

@@ -16,6 +16,7 @@ export interface SecretsStore {
  *  owner token (`apiToken`) has no ceiling. */
 export interface ScopedApiToken {
     token: string;
+    grantee: string;
     scopes: string[];
     created: string;
 }

package/dist/core/secrets.js

@@ -1,2 +1,2 @@
-var k=Object.defineProperty;var t=(e,o)=>k(e,"name",{value:o,configurable:!0});import{createHash as T}from"node:crypto";import{existsSync as f,readFileSync as u,writeFileSync as y,chmodSync as d}from"node:fs";import{join as l}from"node:path";import{scopeRoot as A,requireScopeRoot as S}from"./scope.js";import{ensureDir as m}from"./fs-utils.js";const x="secrets.json";function a(e){return l(e,x)}t(a,"secretsPathFor");function s(e){const o=A(e);if(!o)return{relayTokens:{}};const n=a(o);if(!f(n))return{relayTokens:{}};try{const r=JSON.parse(u(n,"utf8")),c=Array.isArray(r.scopedApiTokens)?r.scopedApiTokens.filter(i=>typeof i?.token=="string"&&i.token!==""&&Array.isArray(i.scopes)&&typeof i.created=="string"):[];return{relayTokens:r.relayTokens??{},...typeof r.apiToken=="string"&&r.apiToken!==""?{apiToken:r.apiToken}:{},...c.length>0?{scopedApiTokens:c}:{}}}catch{return{relayTokens:{}}}}t(s,"readSecrets");function p(e,o){const n=S(e);m(n);const r=a(n);y(r,JSON.stringify(o,null,2)+`
-`,{mode:384}),d(r,384)}t(p,"writeSecrets");function w(e,o){return s(o).relayTokens[e]}t(w,"getRelayToken");function J(e,o,n){const r=s(n);r.relayTokens[e]=o,p(n,r)}t(J,"setRelayToken");function N(e,o){const n=s(o);delete n.relayTokens[e],p(o,n)}t(N,"deleteRelayToken");function O(e){return s(e).apiToken}t(O,"getApiToken");function q(e,o){const n=s(o);n.apiToken=e,p(o,n)}t(q,"setApiToken");function C(e){return s(e).scopedApiTokens??[]}t(C,"listScopedApiTokens");function D(e,o){const n=s(o);n.scopedApiTokens=[...n.scopedApiTokens??[],e],p(o,n)}t(D,"addScopedApiToken");function H(e){return T("sha256").update(e).digest("hex").slice(0,12)}t(H,"fingerprint");export{D as addScopedApiToken,N as deleteRelayToken,H as fingerprint,O as getApiToken,w as getRelayToken,C as listScopedApiTokens,s as readSecrets,q as setApiToken,J as setRelayToken,p as writeSecrets};
+var f=Object.defineProperty;var t=(e,o)=>f(e,"name",{value:o,configurable:!0});import{createHash as u}from"node:crypto";import{existsSync as y,readFileSync as d,writeFileSync as l,chmodSync as A}from"node:fs";import{join as m}from"node:path";import{scopeRoot as S,requireScopeRoot as g,userScopeRoot as a}from"./scope.js";import{secretsDir as k}from"./layout.js";import{ensureDir as x}from"./fs-utils.js";const h="secrets.json";function T(e){return m(e===a()?k():e,h)}t(T,"secretsPathFor");function s(e){const o=S(e);if(!o)return{relayTokens:{}};const n=T(o);if(!y(n))return{relayTokens:{}};try{const r=JSON.parse(d(n,"utf8")),c=Array.isArray(r.scopedApiTokens)?r.scopedApiTokens.filter(i=>typeof i?.token=="string"&&i.token!==""&&typeof i.grantee=="string"&&/^app:[a-zA-Z0-9][a-zA-Z0-9._-]*$/.test(i.grantee)&&Array.isArray(i.scopes)&&typeof i.created=="string"):[];return{relayTokens:r.relayTokens??{},...typeof r.apiToken=="string"&&r.apiToken!==""?{apiToken:r.apiToken}:{},...c.length>0?{scopedApiTokens:c}:{}}}catch{return{relayTokens:{}}}}t(s,"readSecrets");function p(e,o){const n=g(e),r=T(n);x(n===a()?k():n),l(r,JSON.stringify(o,null,2)+`
+`,{mode:384}),A(r,384)}t(p,"writeSecrets");function J(e,o){return s(o).relayTokens[e]}t(J,"getRelayToken");function N(e,o,n){const r=s(n);r.relayTokens[e]=o,p(n,r)}t(N,"setRelayToken");function O(e,o){const n=s(o);delete n.relayTokens[e],p(o,n)}t(O,"deleteRelayToken");function Z(e){return s(e).apiToken}t(Z,"getApiToken");function _(e,o){const n=s(o);n.apiToken=e,p(o,n)}t(_,"setApiToken");function q(e){return s(e).scopedApiTokens??[]}t(q,"listScopedApiTokens");function C(e,o){const n=s(o);n.scopedApiTokens=[...n.scopedApiTokens??[],e],p(o,n)}t(C,"addScopedApiToken");function H(e){return u("sha256").update(e).digest("hex").slice(0,12)}t(H,"fingerprint");export{C as addScopedApiToken,O as deleteRelayToken,H as fingerprint,Z as getApiToken,J as getRelayToken,q as listScopedApiTokens,s as readSecrets,_ as setApiToken,N as setRelayToken,p as writeSecrets};

package/dist/core/spaces/mounts.d.ts

@@ -0,0 +1,32 @@
+import { type RunPermissions } from './permissions.js';
+import type { LaunchSpec } from '../../launcher/spec.js';
+export interface LaunchNode {
+    nodeId: string;
+    app: string;
+    sub: string;
+    grantId: string | null;
+    scopes: string[] | null;
+    command: string[];
+    env: Record<string, string>;
+    /** No node exists for this app process (e.g. an unanchored cron). */
+    withoutNode?: boolean;
+    cwd?: string;
+    /** Hook code alone may be mounted from the installed plugin root, read-only. */
+    pluginRoot?: string;
+    /** Missing granted directories are omitted and reported to the daemon. */
+    auditMissing: (source: string) => void;
+}
+/** The mounts a run's grant adds beyond its own app space (other apps' files
+ *  and nodes, and the person's files). */
+export declare function grantedMounts(permissions: RunPermissions): LaunchSpec['mounts'];
+/** Whether a launched mount came from a grant: it lies under the person's files
+ *  or under another app's space. Own-space and system mounts never do. */
+export declare function isGrantedSource(app: string, source: string): boolean;
+/** A launched mount the current permissions still give: the same or a broader
+ *  granted directory, writable if the mount is. */
+export declare function mountAllowed(mount: LaunchSpec['mounts'][number], allowed: LaunchSpec['mounts']): boolean;
+/** Whether a spec compiled earlier is still within the node's current
+ *  permissions. A launch whose grant generation moved while the launcher was
+ *  starting it checks this before registering the sandbox (runtime spec §15). */
+export declare function launchStillGranted(node: Pick<LaunchNode, 'app' | 'sub' | 'grantId' | 'scopes'>, spec: Pick<LaunchSpec, 'mounts'>): boolean;
+export declare function compileLaunch(node: LaunchNode): LaunchSpec;

package/dist/core/spaces/mounts.js

@@ -0,0 +1 @@
+var W=Object.defineProperty;var p=(t,r)=>W(t,"name",{value:r,configurable:!0});import{lstatSync as y}from"node:fs";import{join as u,relative as a,sep as c}from"node:path";import{appSpace as m,appsRoot as D,runtimeRoot as f,socketDir as h,userFilesRoot as b}from"../layout.js";import{nodeAgentDir as F,nodeRunDir as R}from"../canvas/paths.js";import{uidForApp as S}from"./users.js";import{permissionsForRun as I}from"./permissions.js";function k(t){const r=[];for(const e of t.otherFiles){const i=e.holder==="user"?b():m(e.holder).files;r.push({source:e.path==="."?i:u(i,e.path),writable:e.writable})}for(const e of t.otherNodes)r.push({source:m(e).nodes,writable:!1});return r}p(k,"grantedMounts");function w(t,r){const e=a(t,r);return e===""||e!==".."&&!e.startsWith(`..${c}`)&&!e.startsWith(c)}p(w,"beneath");function A(t,r){return w(b(),r)||w(D(),r)&&!w(m(t).root,r)}p(A,"isGrantedSource");function M(t,r){return r.some(e=>w(e.source,t.source)&&(e.writable||!t.writable))}p(M,"mountAllowed");function q(t,r){try{const e=k(I(t.app,t.sub,t.grantId,t.scopes));return r.mounts.every(i=>!A(t.app,i.source)||M(i,e))}catch{return!1}}p(q,"launchStillGranted");function z(t){const r=m(t.app),e=I(t.app,t.sub,t.grantId,t.scopes),i=new Map,s=p((o,n,l=!1,E=!1)=>{if(l)try{y(o)}catch(d){if(d.code!=="ENOENT")throw d;E&&t.auditMissing(o);return}i.set(o,n||(i.get(o)??!1))},"add");for(const o of["/usr","/bin","/lib","/lib64","/opt/crouter","/etc/passwd","/etc/group","/etc/resolv.conf","/etc/hosts","/etc/ssl","/etc/ca-certificates"])s(o,!1,!0);t.withoutNode||s(F(t.nodeId,t.app),!0),s(r.home,!0),s(r.files,!0),t.withoutNode||s(R(t.nodeId),!0),s(u(h(),"api.sock"),!0),s(u(h(),"store.sock"),!0),e.ownNodes&&s(r.nodes,!0);for(const o of k(e))s(o.source,o.writable,!0,!0);if(t.pluginRoot!==void 0){const o=p(l=>t.pluginRoot===l||a(l,t.pluginRoot)!==".."&&!a(l,t.pluginRoot).startsWith(`..${c}`),"within"),n=u(f(),"plugins");if([...i].some(([l])=>o(l))){if(i.get(t.pluginRoot)===!0)throw new Error("hook root cannot also be writable");s(t.pluginRoot,!1)}else if(o(n)&&t.pluginRoot!==n)s(t.pluginRoot,!1);else if(o("/opt/crouter"))s(t.pluginRoot,!1);else throw new Error("hook root is not readable with this app\u2019s mounts")}const x=t.cwd??r.files,g=[...i].sort(([o],[n])=>o.split(c).length-n.split(c).length||o.localeCompare(n)),N=u(f(),"nodes",t.nodeId,"job","broker.log"),v=process.platform!=="linux"?[R(t.nodeId),u(h(),"api.sock"),u(h(),"store.sock")]:[];if(g.some(([o])=>o!==t.pluginRoot&&!v.includes(o)&&(o===f()||!a(f(),o).startsWith("..")&&!a(f(),o).startsWith(c))))throw new Error("runtime records cannot be mounted");return{nodeId:t.nodeId,uid:S(t.app),mounts:g.map(([o,n])=>({source:o,writable:n})),cwd:x,env:t.env,command:t.command,log:N}}p(z,"compileLaunch");export{z as compileLaunch,k as grantedMounts,A as isGrantedSource,q as launchStillGranted,M as mountAllowed};

package/dist/core/spaces/open-beneath.d.ts

@@ -0,0 +1,71 @@
+import { type Dirent, type Stats } from 'node:fs';
+export declare function isBeneathRefusal(error: unknown): boolean;
+/** Whether a beneath read failed because nothing usable is there: absent, not a
+ *  directory, unreadable, or refused (see `BeneathRefusal`). */
+export declare function isAbsentOrRefused(error: unknown): boolean;
+/** An fd for `path` opened with `flags`, resolved beneath `root`. Never creates:
+ *  `openat2` takes no mode, so a file it created would be mode 0000. On Linux
+ *  the fd is a regular file or a directory, except with O_PATH, which opens
+ *  nothing and is only stat'd. */
+export declare function openBeneath(root: string, path: string, flags: number): number;
+export declare function readFileBeneath(root: string, path: string): Buffer;
+/** The file's text, or null when it is missing or refused. */
+export declare function readTextBeneathIfExists(root: string, path: string): string | null;
+export declare function statBeneath(root: string, path: string): Stats;
+export declare function existsBeneath(root: string, path: string): boolean;
+/** Run `fn` with `at(name)`, a pathname that reaches one entry of `dir` after
+ *  `dir` itself resolved beneath `root` (`at()` is the directory). With
+ *  `create`, missing directories on the way are made. */
+export declare function withDirBeneath<T>(root: string, dir: string, fn: (at: (name?: string) => string) => T, create?: boolean): T;
+/** Write `data` to `path` beneath `root`, making missing parents. `atomic`
+ *  writes a temporary file and renames it over the target, so on Linux a
+ *  symlink at the target is replaced, never followed. A Mac writes through a
+ *  symlink to its target, as it always has (a dangling one fails ENOENT). */
+export declare function writeFileBeneath(root: string, path: string, data: Buffer | string, options?: {
+    mode?: number;
+    atomic?: boolean;
+}): void;
+/** Create `path` beneath `root` only if absent (`wx`), making missing parents. */
+export declare function createFileBeneath(root: string, path: string, data: Buffer | string, mode?: number): void;
+export declare function appendFileBeneath(root: string, path: string, data: string): void;
+export declare function unlinkBeneath(root: string, path: string): void;
+export declare function rmdirBeneath(root: string, path: string): void;
+export declare function renameBeneath(root: string, from: string, to: string): void;
+/** link(2) without replacement: fails if `to` exists. */
+export declare function linkBeneath(root: string, from: string, to: string): void;
+export declare function fsyncDirBeneath(root: string, dir: string): void;
+/** Directory entries typed by the directory itself (a symlink stays a symlink). */
+export declare function readdirBeneath(root: string, dir: string): Dirent[];
+/** The first `limit` entries by name, each with its own (unfollowed on Linux)
+ *  stat; an entry removed before its stat is left out. */
+export declare function listBeneath(root: string, dir: string, limit: number): Array<{
+    name: string;
+    stat: Stats;
+}>;
+/** Regular files under `dir` matching `predicate`, never descending a symlink. */
+export declare function walkFilesBeneath(root: string, dir: string, predicate?: (name: string) => boolean, skipDir?: (name: string) => boolean): string[];
+/** Copy the entries of `from` (beneath `fromRoot`) into `to` (beneath
+ *  `toRoot`): directories and regular files with their permission bits, and
+ *  symlinks as links, never followed. Any other entry, any entry removed or
+ *  refused after the directory was read, and any top-level name in `skip`, is
+ *  left out. A name `to` already holds is overwritten, except by a symlink. */
+export declare function copyTreeBeneath(fromRoot: string, from: string, toRoot: string, to: string, skip?: ReadonlySet<string>): void;
+/** Set the mode (and, with `owner`, the owner) of the file or directory at
+ *  `path` beneath `root` through an fd opened without following a symlink. A
+ *  Mac sets them by pathname, as it always has. */
+export declare function setModeBeneath(root: string, path: string, mode: number, owner?: {
+    uid: number;
+    gid: number;
+}): void;
+/** Remove the tree at `path` beneath `root`, never descending a symlink: a
+ *  symlink at `path` or inside it is unlinked itself. Absent is not an error.
+ *  On Linux the walk holds one directory fd per level and opens each child
+ *  relative to its parent, so a deep tree costs one open per entry. */
+export declare function removeTreeBeneath(root: string, path: string): void;
+/** A pathname that connects to the unix socket at `path` beneath `root`
+ *  without following a symlink, and `release`, to call once the connect has
+ *  settled. On Linux it is the magic link of an O_PATH fd held until release. */
+export declare function socketBeneath(root: string, path: string): {
+    path: string;
+    release: () => void;
+};

package/dist/core/spaces/open-beneath.js

@@ -0,0 +1 @@
+var ie=Object.defineProperty;var f=(t,e)=>ie(t,"name",{value:e,configurable:!0});import{chmodSync as V,chownSync as oe,closeSync as y,constants as d,fchmodSync as K,fchownSync as ce,fstatSync as $,fsyncSync as A,linkSync as fe,lstatSync as X,mkdirSync as M,openSync as w,readdirSync as C,readFileSync as se,readlinkSync as le,readSync as H,realpathSync as ue,renameSync as j,rmdirSync as G,rmSync as ae,statSync as q,symlinkSync as ye,unlinkSync as R,writeSync as he}from"node:fs";import{randomUUID as de}from"node:crypto";import{basename as p,dirname as N,join as _,relative as g,resolve as k,sep as v}from"node:path";import{loadLinuxNative as Oe,O_CLOEXEC as I,O_PATH as D,RESOLVE_BENEATH as Ee,RESOLVE_NO_SYMLINKS as pe}from"../../native/linux.js";const Ne=Ee|pe,B=D|d.O_DIRECTORY|I;let b=null;function m(){return b===null&&(b=Oe()),b}f(m,"native");function E(t){return t.code}f(E,"code");class S extends Error{static{f(this,"BeneathRefusal")}}function z(t){return t instanceof S}f(z,"isBeneathRefusal");function J(t,e){switch(E(t)){case"ELOOP":case"EXDEV":return new S(`path meets a symlink: ${e}`);case"ENXIO":return new S(`path is not a regular file: ${e}`);case"EAGAIN":return new S(`path is held by a lease: ${e}`);default:return t}}f(J,"refused");function x(t,e,r,i,n){try{return t.openat2(e,r,i,Ne)}catch(c){throw J(c,n)}}f(x,"openat2");function Q(t,e,r){let i;try{i=$(t)}catch(n){throw y(t),n}if(i.isFile()||r&&i.isDirectory())return t;throw y(t),new S(`path is not a regular file: ${e}`)}f(Q,"regular");const Y=new Set(["ENOENT","ENOTDIR","EACCES"]);function W(t){return Y.has(E(t)??"")||z(t)}f(W,"isAbsentOrRefused");function Z(t,e){const r=g(k(t),k(e));if(r===".."||r.startsWith(`..${v}`)||r.startsWith(v))throw new Error(`${e} is outside ${t}`);return r}f(Z,"inside");function ee(t){if(t===""||t===".."||t.includes("/"))throw new Error(`not one path component: ${t}`);return t}f(ee,"entry");function L(t,e,r){if(r&d.O_CREAT)throw new Error("openBeneath never creates; use writeFileBeneath or createFileBeneath");const i=Z(t,e),n=m();if(!n)return w(e,r);const c=w("/",B);let o;try{o=x(n,c,g("/",k(t))||".",B,t)}finally{y(c)}try{return r&D?x(n,o,i||".",r|I,e):Q(x(n,o,i||".",r|I|d.O_NONBLOCK,e),e,!0)}finally{y(o)}}f(L,"openBeneath");function we(t,e){const r=L(t,e,d.O_RDONLY);try{return se(r)}finally{y(r)}}f(we,"readFileBeneath");function Le(t,e){try{return we(t,e).toString("utf8")}catch(r){if(E(r)==="ENOENT"||z(r))return null;throw r}}f(Le,"readTextBeneathIfExists");function te(t,e){if(!m())return q(e);const r=L(t,e,D);try{return $(r)}finally{y(r)}}f(te,"statBeneath");function Fe(t,e){try{return te(t,e),!0}catch(r){if(Y.has(E(r)??""))return!1;throw r}}f(Fe,"existsBeneath");function O(t,e,r,i=!1){Z(t,e);const n=m();if(!n)return i&&M(e,{recursive:!0}),r(o=>o===void 0?e:_(e,ee(o)));let c=w("/",B);try{for(const s of g("/",k(e)).split(v).filter(Boolean)){let a;try{a=x(n,c,s,B,e)}catch(u){if(!i||E(u)!=="ENOENT")throw u;try{M(`/proc/self/fd/${c}/${s}`)}catch(l){if(E(l)!=="EEXIST")throw l}a=x(n,c,s,B,e)}y(c),c=a}const o=`/proc/self/fd/${c}`;return r(s=>s===void 0?o:`${o}/${ee(s)}`)}finally{y(c)}}f(O,"withDirBeneath");function P(t,e,r,i){if(!m())return w(t,e,r);let n;try{n=w(t,e|d.O_NOFOLLOW|d.O_NONBLOCK,r)}catch(c){throw J(c,i)}return Q(n,i,!1)}f(P,"openForWrite");function F(t,e){let r=0;for(;r<e.length;)r+=he(t,e,r,e.length-r)}f(F,"writeAll");function ke(t,e,r,i={}){const n=typeof r=="string"?Buffer.from(r,"utf8"):r,c=i.mode??438;let o=N(e),s=p(e),a=t;if(i.atomic&&!m()){let u=!1;try{u=X(e).isSymbolicLink()}catch(l){if(E(l)!=="ENOENT")throw l}if(u){const l=ue(e);o=N(l),s=p(l),a="/"}}O(a,o,u=>{if(!i.atomic){const T=P(u(s),d.O_WRONLY|d.O_CREAT|d.O_TRUNC,c,e);try{F(T,n)}finally{y(T)}return}const l=u(`.${s}.${de()}.tmp`);let h=w(l,"wx",c);try{F(h,n),A(h),y(h),h=void 0,j(l,u(s))}finally{h!==void 0&&y(h);try{R(l)}catch(T){if(E(T)!=="ENOENT")throw T}}},!0)}f(ke,"writeFileBeneath");function De(t,e,r,i=438){const n=typeof r=="string"?Buffer.from(r,"utf8"):r;O(t,N(e),c=>{const o=w(c(p(e)),"wx",i);try{F(o,n),A(o)}finally{y(o)}},!0)}f(De,"createFileBeneath");function Ae(t,e,r){O(t,N(e),i=>{const n=P(i(p(e)),d.O_WRONLY|d.O_CREAT|d.O_APPEND,438,e);try{F(n,Buffer.from(r,"utf8"))}finally{y(n)}},!0)}f(Ae,"appendFileBeneath");function Ce(t,e){O(t,N(e),r=>R(r(p(e))))}f(Ce,"unlinkBeneath");function Re(t,e){O(t,N(e),r=>G(r(p(e))))}f(Re,"rmdirBeneath");function ge(t,e,r){O(t,N(e),i=>O(t,N(r),n=>j(i(p(e)),n(p(r))),!0))}f(ge,"renameBeneath");function ve(t,e,r){O(t,N(e),i=>O(t,N(r),n=>fe(i(p(e)),n(p(r)))))}f(ve,"linkBeneath");function Ie(t,e){O(t,e,r=>{const i=w(r(),d.O_RDONLY);try{A(i)}finally{y(i)}})}f(Ie,"fsyncDirBeneath");function U(t,e){return O(t,e,r=>C(r(),{withFileTypes:!0}))}f(U,"readdirBeneath");function be(t,e,r){return O(t,e,i=>C(i()).sort((n,c)=>n.localeCompare(c)).slice(0,r).flatMap(n=>{try{return[{name:n,stat:m()?X(i(n)):q(i(n))}]}catch(c){if(E(c)==="ENOENT")return[];throw c}}))}f(be,"listBeneath");function Ye(t,e,r=()=>!0,i=()=>!1){const n=[],c=[e];for(;c.length;){const o=c.pop();let s;try{s=U(t,o)}catch(a){if(o===e&&!Y.has(E(a)??""))throw a;continue}for(const a of s){const u=_(o,a.name);a.isDirectory()?i(a.name)||c.push(u):a.isFile()&&r(a.name)&&n.push(u)}}return n}f(Ye,"walkFilesBeneath");function We(t,e,r,i,n=new Set){re(t,e,U(t,e),r,i,n)}f(We,"copyTreeBeneath");function re(t,e,r,i,n,c){O(i,n,()=>{},!0);for(const o of r){if(c.has(o.name))continue;const s=_(e,o.name),a=_(n,o.name);if(o.isDirectory()){let u,l;try{u=te(t,s).mode&511,l=U(t,s)}catch(h){if(W(h))continue;throw h}re(t,s,l,i,a,new Set),O(i,n,h=>V(h(o.name),u))}else if(o.isSymbolicLink()){let u;try{u=O(t,e,l=>le(l(o.name)))}catch(l){if(E(l)==="EINVAL"||W(l))continue;throw l}O(i,n,l=>ye(u,l(o.name)))}else if(o.isFile()){let u;try{u=L(t,s,d.O_RDONLY)}catch(l){if(W(l))continue;throw l}try{me(u,i,a)}finally{y(u)}}}}f(re,"copyEntries");function me(t,e,r){const i=$(t).mode&511;O(e,N(r),n=>{const c=P(n(p(r)),d.O_WRONLY|d.O_CREAT|d.O_TRUNC,i,r);try{K(c,i);const o=Buffer.allocUnsafe(1<<20);for(let s=H(t,o);s>0;s=H(t,o))F(c,o.subarray(0,s))}finally{y(c)}},!0)}f(me,"copyFileFd");function Pe(t,e,r,i){if(!m()){i&&oe(e,i.uid,i.gid),V(e,r);return}const n=L(t,e,d.O_RDONLY|d.O_NONBLOCK);try{const c=$(n);if(!c.isFile()&&!c.isDirectory())throw new S(`path is not a regular file or directory: ${e}`);i&&ce(n,i.uid,i.gid),K(n,r)}finally{y(n)}}f(Pe,"setModeBeneath");function ne(t){try{R(t)}catch(e){if(E(e)!=="ENOENT")throw e}}f(ne,"unlinkIfPresent");function Ue(t,e){const r=m();if(!r){ae(e,{recursive:!0,force:!0});return}try{O(t,N(e),i=>{const n=w(i(),B);try{Se(r,n,p(e),e)}finally{y(n)}})}catch(i){if(E(i)!=="ENOENT")throw i}}f(Ue,"removeTreeBeneath");function Se(t,e,r,i){const n=[],c=f((o,s,a)=>{let u;try{u=x(t,o,s,B,a)}catch(h){if(E(h)==="ENOENT")return;if(E(h)!=="ENOTDIR"&&!(h instanceof S))throw h;ne(`/proc/self/fd/${o}/${s}`);return}n.push({fd:u,parentFd:o,name:s,shown:a,dirs:[]});const l=n[n.length-1];for(const h of C(`/proc/self/fd/${u}`,{withFileTypes:!0}))h.isDirectory()?l.dirs.push(h.name):ne(`/proc/self/fd/${u}/${h.name}`)},"enter");try{for(c(e,r,i);n.length>0;){const o=n[n.length-1],s=o.dirs.pop();if(s!==void 0){c(o.fd,s,_(o.shown,s));continue}n.pop(),y(o.fd);try{G(`/proc/self/fd/${o.parentFd}/${o.name}`)}catch(a){if(E(a)!=="ENOENT")throw a}}}finally{for(const o of n)y(o.fd)}}f(Se,"removeTreeAt");function Ve(t,e){if(!m())return{path:e,release:f(()=>{},"release")};const r=L(t,e,D);let i;try{i=$(r)}catch(c){throw y(r),c}if(!i.isSocket())throw y(r),new S(`path is not a socket: ${e}`);let n=!0;return{path:`/proc/self/fd/${r}`,release:f(()=>{n&&(n=!1,y(r))},"release")}}f(Ve,"socketBeneath");export{Ae as appendFileBeneath,We as copyTreeBeneath,De as createFileBeneath,Fe as existsBeneath,Ie as fsyncDirBeneath,W as isAbsentOrRefused,z as isBeneathRefusal,ve as linkBeneath,be as listBeneath,L as openBeneath,we as readFileBeneath,Le as readTextBeneathIfExists,U as readdirBeneath,Ue as removeTreeBeneath,ge as renameBeneath,Re as rmdirBeneath,Pe as setModeBeneath,Ve as socketBeneath,te as statBeneath,Ce as unlinkBeneath,Ye as walkFilesBeneath,O as withDirBeneath,ke as writeFileBeneath};

package/dist/core/spaces/permissions.d.ts

@@ -0,0 +1,46 @@
+import { type ActiveGrant } from '../grants/mirror.js';
+import type { MemoryStoreDescriptor, MemoryTarget } from '../memory-resolver.js';
+export interface RunPermissions {
+    app: string;
+    ownNodes: boolean;
+    otherFiles: Array<{
+        holder: string;
+        path: string;
+        writable: boolean;
+    }>;
+    otherNodes: string[];
+}
+/** Only the active mirror and the launched scope list determine a run's mounts. */
+export declare function permissionsForRun(app: string, sub: string, grantId: string | null, launched: string[] | null): RunPermissions;
+/** The same computation over a given grant record, e.g. the mirror before a sync replaced it. */
+export declare function permissionsForGrant(app: string, sub: string, grant: ActiveGrant | null, launched: string[] | null): RunPermissions;
+/** The grant is current on every call; an explicit run scope list narrows it. */
+export declare function memoryPermission(app: string, resolved: readonly string[], launched: readonly string[] | null, store: MemoryStoreDescriptor, access: 'read' | 'rw', name?: string, wholeStore?: boolean): boolean;
+export declare function automaticallyLoadsUserMemory(resolved: readonly string[], launched: readonly string[] | null): boolean;
+/** A project is available only through an actual file mount, never a symlink or an ancestor of it. */
+export declare function readableProject(repository: string, roots: readonly string[]): boolean;
+export declare function readableProjectForScopes(repository: string, app: string, resolved: readonly string[], launched: readonly string[] | null): boolean;
+export interface FileCaller {
+    app: string;
+    resolved: readonly string[];
+    launched: readonly string[] | null;
+}
+/** The directory a caller's permission names for `path`: the daemon opens
+ *  `path` beneath it. `missing` is the scope the caller lacks (null when no
+ *  scope names the path). The person (`null`) and a Mac terminal node keep a
+ *  Mac's whole filesystem; on Linux the person reaches /user and /apps. */
+export declare function fileRoot(caller: FileCaller | null, target: string, access: 'read' | 'rw'): {
+    root: string;
+} | {
+    missing: string | null;
+};
+/** Daemon-only automatic corpus; never deliver a store merely because it is explicitly readable. */
+export declare function automaticMemoryTarget(node: {
+    node_id: string;
+    cwd: string;
+    profile_id?: string | null;
+    grantee: string;
+    sub?: string | null;
+    grant_id?: string | null;
+    scopes?: string[] | null;
+}): MemoryTarget;

package/dist/core/spaces/permissions.js

@@ -0,0 +1 @@
+var I=Object.defineProperty;var u=(r,t)=>I(r,"name",{value:t,configurable:!0});import{covers as g,parseScope as C}from"@north-light/crouter-identity";import{activeGrant as P,grantFor as W}from"../grants/mirror.js";import{appSpace as v,appsRoot as _,userFilesRoot as b,userRoot as L}from"../layout.js";import{relative as R,join as S,sep as E,resolve as A}from"node:path";import{lstatSync as M,realpathSync as Z}from"node:fs";import{readConfig as k}from"../config.js";import{SCOPE_VOCABULARY as G}from"../scopes.js";function X(r,t,o,e){return N(r,t,o?P(o):W(r,t),e)}u(X,"permissionsForRun");function N(r,t,o,e){if(!o||o.grantee!==r||o.sub!==t)throw new Error(`no active grant for ${r}`);if(e!==null&&!Array.isArray(e))throw new Error("invalid launched scopes");const s=[],i=[];let n=e===null;const f=e??o.resolved;for(const c of f){if(typeof c!="string")throw new Error("invalid launched scope");C(c);const w=c===`crtr:memory:read:${r}`||c===`crtr:memory:rw:${r}`||c.startsWith(`crtr:memory:read:${r}:`)||c.startsWith(`crtr:memory:rw:${r}:`);if(e!==null&&!w&&!o.resolved.some(p=>g(p,c)))throw new Error(`launched scope not in grant: ${c}`);const m=/^crtr:files:(read|rw):(user|app:[A-Za-z0-9_-]{1,64}):(.+)$/.exec(c);if(m){const[,p,l,$]=m;if(l===r)throw new Error(`own-app files cannot narrow a run: ${c}`);s.push({holder:l,path:$,writable:p==="rw"})}const a=/^crtr:objects:read:(app:[A-Za-z0-9_-]{1,64})$/.exec(c);a&&a[1]!==r&&i.push(a[1])}return{app:r,ownNodes:n,otherFiles:s,otherNodes:i}}u(N,"permissionsForGrant");function O(r,t,o,e,s,i,n=!1){if(e.scope==="builtin")return s==="read";if(e.scope==="project")return!0;const f=e.scope==="user"?"user":e.ownerApp??(e.scope==="profile"?"app:terminal":r),c=e.scope==="profile"&&!e.profileId&&i?.match(/^profiles\/([A-Za-z0-9_-]{1,64})(?:\/(.+))?$/),w=e.scope==="profile"&&e.profileId?`:profile:${e.profileId}`:c?`:profile:${c[1]}`:"",m=c?c[2]:f==="user"||e.profileId?i:void 0,a=`crtr:memory:${s}:${f}${w}${m?`:${m}`:""}`,p=u(l=>g(l,a)||!n&&i===void 0&&l.startsWith(`${a}:`),"permits");return(f===r||t.some(p))&&(o===null||o.some(p))}u(O,"memoryPermission");function U(r,t){return r.includes("crtr:memory:manage:user")&&(t===null||t.includes("crtr:memory:manage:user"))}u(U,"automaticallyLoadsUserMemory");function h(r,t){const o=R(r,t);return o===""||o!==".."&&!o.startsWith(`..${E}`)&&!o.startsWith(E)}u(h,"contains");function q(r,t){const o=A(r);for(const e of t){const s=A(e);if(h(s,o))try{if(Z(o)!==o||Z(s)!==s)continue;let i=o;for(;h(s,i)&&!M(i).isSymbolicLink();){if(i===s)return!0;i=A(i,"..")}}catch{}}return!1}u(q,"readableProject");function B(r,t,o,e){const s=[v(t).files];for(const i of e??o){if(e!==null&&!o.some(f=>g(f,i)))continue;const n=/^crtr:files:(?:read|rw):(user|app:[A-Za-z0-9_-]{1,64}):(.+)$/.exec(i);n&&s.push(S(n[1]==="user"?b():v(n[1]).files,n[2]==="."?"":n[2]))}return q(r,s)}u(B,"readableProjectForScopes");function rr(r,t,o){const e=A(t);if(r===null||process.platform!=="linux"&&r.app==="app:terminal"){if(process.platform!=="linux")return{root:"/"};const p=[L(),_()].find(l=>h(l,e));return p?{root:p}:{missing:null}}const s=v(r.app);for(const p of[s.files,s.nodes])if(h(p,e))return{root:p};const i=u(p=>r.resolved.some(l=>g(l,p))&&(r.launched===null||r.launched.some(l=>g(l,p))),"held"),n=u((p,l)=>{const $=R(l,e)||".",z=u(y=>y.flatMap(x=>{const d=/^crtr:files:(read|rw):(user|app:[A-Za-z0-9_-]{1,64}):(.+)$/.exec(x);return!d||d[2]!==p||o==="rw"&&d[1]!=="rw"?[]:d[3]==="."||d[3]===$||$.startsWith(`${d[3]}/`)?[S(l,d[3]==="."?"":d[3])]:[]}),"dirs"),j=z(r.resolved),F=r.launched===null?j:z(r.launched);return!j.length||!F.length?{missing:`crtr:files:${o}:${p}:${$}`}:{root:[...j,...F].reduce((y,x)=>x.length>y.length?x:y)}},"files");if(h(b(),e))return n("user",b());const[f,c,w,m]=R(_(),e).split(E);if(!h(_(),e)||!f||!/^[A-Za-z0-9_-]{1,64}$/.test(f))return{missing:null};const a=v(`app:${f}`);return c==="files"?n(`app:${f}`,a.files):c!=="nodes"||o!=="read"?{missing:null}:i(`crtr:objects:read:app:${f}`)?{root:a.nodes}:w&&(m==="attachments"||m==="reports")&&i(`crtr:conversations:read:app:${f}`)?{root:S(a.nodes,w,m)}:{missing:`crtr:objects:read:app:${f}`}}u(rr,"fileRoot");function er(r){const t=r.grantee,e=(r.grant_id?P(r.grant_id):W(t,r.sub??""))?.resolved??(t==="app:terminal"&&!k("user").runtime?.issuer?G:null);if(e===null)throw new Error(`no active memory grant for ${t}`);const s=r.scopes??null,i=u(n=>process.platform!=="linux"&&t==="app:terminal"||B(n,t,e,s),"projectReadable");return{cwd:r.cwd,profileId:r.profile_id??null,nodeId:r.node_id,grantee:t,allowsProject:i,allowsStore:u(n=>n.scope==="project"?i(n.repositoryRoot??n.ownerDir??n.storeRoot):n.scope==="user"?U(e,s):n.scope==="node"?n.ownerApp===t:n.scope==="profile"?O(t,e,s,n,"read",void 0,!0):!0,"allowsStore")}}u(er,"automaticMemoryTarget");export{er as automaticMemoryTarget,U as automaticallyLoadsUserMemory,rr as fileRoot,O as memoryPermission,N as permissionsForGrant,X as permissionsForRun,q as readableProject,B as readableProjectForScopes};

package/dist/core/spaces/process.d.ts

@@ -0,0 +1,27 @@
+import { type CapturedExit } from '../../launcher/spec.js';
+export interface AppProcess {
+    pid: number;
+    completion: Promise<CapturedExit>;
+    stop(signal?: 'SIGTERM' | 'SIGKILL'): Promise<void>;
+}
+export interface AppProcessOptions {
+    nodeId?: string;
+    app?: string;
+    command: string[];
+    cwd: string;
+    env: NodeJS.ProcessEnv;
+    stdin?: string;
+    stdoutBytes?: number;
+    stderrBytes?: number;
+    stderrTail?: boolean;
+    pluginRoot?: string;
+    /** A file-backed job writes its own log and needs no launcher output capture. */
+    capture?: boolean;
+}
+/** The same mount compiler and launcher request used by broker launches. A node
+ * keeps its launched scope list; a process without a node uses the app's whole
+ * current grant. Linux never falls back to direct execution when configured
+ * with a launcher whose socket is missing. */
+export declare function appProcessSandboxed(): boolean;
+export declare function stopAppProcess(pid: number, signal?: 'SIGTERM' | 'SIGKILL', nodeId?: string): Promise<void>;
+export declare function launchAppProcess(options: AppProcessOptions): Promise<AppProcess>;

package/dist/core/spaces/process.js

@@ -0,0 +1 @@
+var v=Object.defineProperty;var d=(e,r)=>v(e,"name",{value:r,configurable:!0});import{existsSync as _}from"node:fs";import{randomUUID as b}from"node:crypto";import{join as h}from"node:path";import{getNode as S}from"../canvas/canvas.js";import{nodeRunDir as y}from"../canvas/paths.js";import{appSpace as G}from"../layout.js";import{activeGrant as L,activeGrantForApp as T,grantFor as x,grantsGeneration as g}from"../grants/mirror.js";import{emitEvent as I}from"../events/emit.js";import{ensureAppSpace as A}from"./space.js";import{compileLaunch as N,launchStillGranted as O}from"./mounts.js";import{launcherRequest as s}from"../../launcher/client.js";import{LAUNCHER_SOCKET as C}from"../../launcher/spec.js";function z(){if(process.platform!=="linux")return!1;if(_(C))return!0;throw new Error("root launcher socket is unavailable; refusing an unsandboxed app process")}d(z,"appProcessSandboxed");async function E(e,r="SIGKILL",t){if(!("ok"in await s({operation:"stop",pid:e,signal:r,...t===void 0?{}:{nodeId:t}})))throw new Error("launcher did not stop process")}d(E,"stopAppProcess");async function J(e){const r=e.nodeId===void 0?null:S(e.nodeId);if(e.nodeId!==void 0&&!r)throw new Error(`missing node ${e.nodeId}`);const t=r?.grantee??e.app??"app:terminal";if(e.app!==void 0&&e.app!==t)throw new Error("app does not match node");const o=r?null:T(t);if(!r&&!o)throw new Error(`no active grant for ${t}`);if(r&&t!=="app:terminal"&&!(r.grant_id?L(r.grant_id):x(t,r.sub??"user:local")))throw new Error(`no active grant for ${t}`);await A(t);const p=e.nodeId??`proc-${b()}`,l=G(t),f=Object.fromEntries(Object.entries({...e.env,HOME:l.home,PI_CODING_AGENT_DIR:h(l.home,".pi","agent"),PWD:e.cwd,...e.nodeId===void 0?{}:{CRTR_API_SOCKET:h(y(p),"cli.sock")}}).filter(n=>n[1]!==void 0));delete f.CRTR_RUNTIME_HOME;const m={nodeId:p,app:t,sub:r?r.sub??"user:local":o.sub,grantId:r?r.grant_id??null:o.id,scopes:r?.scopes??null},R=d(()=>{const n=N({...m,command:e.command,env:f,...e.nodeId===void 0?{withoutNode:!0}:{},cwd:e.cwd,...e.pluginRoot===void 0?{}:{pluginRoot:e.pluginRoot},auditMissing:d(c=>I({level:"warn",event:"process.mount.missing",...e.nodeId===void 0?{}:{node_id:e.nodeId},fields:{source:c}}),"auditMissing")});if(e.pluginRoot!==void 0&&(n.pluginRoot=e.pluginRoot),e.capture===!1){if(e.nodeId===void 0||e.stdin!==void 0)throw new Error("uncaptured process requires a node and no stdin")}else n.capture={stdoutBytes:e.stdoutBytes??256*1024,stderrBytes:e.stderrBytes??256*1024,...e.stderrTail?{stderrTail:!0}:{},...e.stdin===void 0?{}:{stdin:e.stdin}};return n},"compile");let i;for(let n=0;n<2&&i===void 0;n++){const c=g(),w=R(),a=await s({operation:"launch",spec:w});if(!("pid"in a))throw new Error("launcher did not return a process id");if(g()===c||O(m,w)){i=a.pid;break}I({level:"info",event:"process.launch.regranted",...e.nodeId===void 0?{}:{node_id:e.nodeId},fields:{pid:a.pid}}),await E(a.pid,"SIGKILL").catch(()=>{})}if(i===void 0)throw new Error("grant changed during every launch attempt");const u=i;return{pid:u,get completion(){return s({operation:"wait",pid:u}).then(n=>{if(!("result"in n))throw new Error("launcher did not return process completion");return n.result})},stop:d((n="SIGKILL")=>E(u,n,e.nodeId),"stop")}}d(J,"launchAppProcess");export{z as appProcessSandboxed,J as launchAppProcess,E as stopAppProcess};

package/dist/core/spaces/space.d.ts

@@ -0,0 +1,8 @@
+/** App sandboxes bind the person's files through nl-data group access. */
+export declare function ensureUserFiles(): void;
+/** On macOS no launcher or nl-data group exists; directories stay owned by the Mac user. */
+export declare function ensureAppSpace(app: string): Promise<{
+    uid: number;
+    gid: number;
+    root: string;
+}>;

package/dist/core/spaces/space.js

@@ -0,0 +1,2 @@
+var f=Object.defineProperty;var n=(o,r)=>f(o,"name",{value:r,configurable:!0});import{chownSync as d,chmodSync as a,existsSync as m,mkdirSync as u,readFileSync as l,statSync as h}from"node:fs";import{appSpace as g,appsRoot as w,userFilesRoot as y}from"../layout.js";import{launcherRequest as S}from"../../launcher/client.js";import{LAUNCHER_SOCKET as x}from"../../launcher/spec.js";import{allocateAppUser as E,uidForApp as v}from"./users.js";function p(){const o=l("/etc/group","utf8").split(`
+`).find(e=>e.startsWith("nl-data:"));if(!o)throw new Error("nl-data group is required on sandboxed Linux");const r=Number(o.split(":")[2]);if(!Number.isInteger(r))throw new Error("invalid nl-data group id");return r}n(p,"dataGroup");function L(){const o=y(),r=p();u(o,{recursive:!0,mode:1528});const e=h(o),t=e.mode&4095;if(!e.isDirectory()||e.gid!==r||t!==1528){if(!e.isDirectory()||e.uid!==process.getuid())throw new Error(`${o} has owner ${e.uid}, group ${e.gid}, mode ${t.toString(8).padStart(4,"0")}; requires an nl-data (${r}) directory with mode 2770; only its owner can repair it`);e.gid!==r&&d(o,e.uid,r),t!==1528&&a(o,1528)}}n(L,"ensureUserFiles");async function N(o){const r=g(o);if(!(process.platform==="linux"&&m(x))){if(process.platform==="linux")throw new Error("app space requires the root launcher on Linux");for(const i of[r.root,r.memory,r.conversations,r.nodes,r.files,r.home])u(i,{recursive:!0});return{uid:v(o),gid:process.getgid(),root:r.root}}const t=p(),s=E(o),c=await S({operation:"user.create",app:r.root.slice(w().length+1),uid:s.uid});if(!("uid"in c)||c.uid!==s.uid)throw new Error(`launcher did not create OS user for ${o}`);for(const i of[r.root,r.memory,r.conversations,r.nodes,r.files,r.home])u(i,{recursive:!0,mode:1528}),d(i,process.getuid(),t),a(i,1528);return{uid:s.uid,gid:t,root:r.root}}n(N,"ensureAppSpace");export{N as ensureAppSpace,L as ensureUserFiles};

package/dist/core/spaces/stop.d.ts

@@ -0,0 +1,8 @@
+import { type TeardownResult } from '../runtime/host.js';
+/** Stop the broker first so it cannot start another job during the job scan. */
+export declare function stopNodeSandboxes(nodeId: string, reason: string, options?: {
+    excludePid?: number;
+    after?: () => Promise<void>;
+    deleting?: boolean;
+    holdRecovery?: boolean;
+}): Promise<TeardownResult>;

package/dist/core/spaces/stop.js

@@ -0,0 +1,2 @@
+var v=Object.defineProperty;var f=(e,n)=>v(e,"name",{value:n,configurable:!0});import{randomUUID as h}from"node:crypto";import{activeBackgroundBashJobs as R,bashJobPaths as _,stopBackgroundBashJob as D}from"../bash-jobs.js";import{getNode as T}from"../canvas/index.js";import{openDb as $}from"../canvas/db.js";import{readLiveSession as B}from"../canvas/sessions.js";import{contextDir as N}from"../canvas/node-agent-paths.js";import{conversationStore as x}from"../conversation-store/index.js";import{enqueueNodeMail as J}from"../feed/messages.js";import{requestBrokerTeardown as L}from"../runtime/host.js";import{holdRecovery as M}from"../runtime/recovery-hold.js";const d=new Map;function Y(e,n,r={}){const b=d.get(e);if(b)return b;const u=T(e);if(!u)return Promise.resolve({confirmed:!1,error:new Error(`missing node ${e}`)});const m=B(e)?.sessionId,g=f(()=>$().prepare(`SELECT type, body_json FROM run_events WHERE node_id = ?
+    AND type IN ('node.turn.started', 'node.turn.completed') ORDER BY sequence_number DESC LIMIT 1`).get(e),"latestTurn"),w=u.run_id!==null&&u.pi_pid!==null&&g()?.type==="node.turn.started",j=r.holdRecovery?M(e):()=>{},k=L(e,{excludePid:r.excludePid}),i=(async()=>{const c=await k;if(!c.confirmed)return c;try{const o=N(e);for(const t of R(o,!0)){const s=await D(o,t.jobId,!0,e,n);if(s.kind==="not-stoppable")throw new Error(`background bash job ${t.jobId} could not be stopped`);if(s.kind!=="stopped"||r.deleting)continue;const p=_(o,t.jobId),a=`Background bash job ${t.jobId} stopped: ${n}. Log: ${p.jobLog}  Command: ${p.cmdSh}`;J(e,{senderNodeId:null,urgency:"urgent",wake:0,kind:"message",label:a.slice(0,120),bodyJson:{body:a},idempotencyKey:`bash-stopped:${e}:${t.jobId}`})}if(w&&m&&!r.deleting){const t=g(),s=t?.type==="node.turn.started",p=t?.type==="node.turn.completed"&&JSON.parse(t.body_json).stop_reason==="aborted";if(!s&&!p)return await r.after?.(),c;const a=x(),{entries:E}=a.read(m),S=E.at(-1),y=new Date().toISOString(),l={type:"message",id:h(),parentId:S?.id??null,timestamp:y,message:{role:"assistant",content:[],api:"openai-completions",provider:"crouter",model:"",usage:{input:0,output:0,cacheRead:0,cacheWrite:0,totalTokens:0,cost:{input:0,output:0,cacheRead:0,cacheWrite:0,total:0}},stopReason:"error",errorMessage:n,timestamp:Date.now()}};a.append(m,s?[l,{type:"custom",id:h(),parentId:l.id,timestamp:y,customType:"crtr-turn-end",data:{stop_reason:"error"}}]:[l])}return await r.after?.(),c}catch(o){return{confirmed:!1,error:o instanceof Error?o:new Error(String(o))}}})();return d.set(e,i),i.finally(()=>{j(),d.get(e)===i&&d.delete(e)}),i}f(Y,"stopNodeSandboxes");export{Y as stopNodeSandboxes};

package/dist/core/spaces/users.d.ts

@@ -0,0 +1,19 @@
+export interface AppUser {
+    app: string;
+    uid: number;
+    created: string;
+    status: 'active' | 'removed';
+}
+/** The launcher is absent on macOS; there is no app uid on that host. */
+export declare function uidForApp(app: string): number;
+/** An app has at most one active row. A removed app that reconnects gets a new
+ *  row above every uid ever allocated, so a uid is never reused. */
+export declare function allocateAppUser(app: string): AppUser;
+export declare function activeAppUsers(): Array<{
+    app: string;
+    uid: number;
+}>;
+/** The app's OS-user row not yet marked removed, if any. */
+export declare function activeAppUser(app: string): AppUser | null;
+/** The removal cascade's last write (runtime spec, "On removal"). */
+export declare function markAppUserRemoved(uid: number): void;

package/dist/core/spaces/users.js

@@ -0,0 +1 @@
+var c=Object.defineProperty;var r=(e,t)=>c(e,"name",{value:t,configurable:!0});import{existsSync as E}from"node:fs";import{openDb as u,withCanvasWrite as i}from"../canvas/db.js";import{APP_UID_MAX as d,APP_UID_MIN as n,LAUNCHER_SOCKET as A}from"../../launcher/spec.js";function v(e){return process.platform!=="linux"||!E(A)?process.getuid?.()??0:S(e).uid}r(v,"uidForApp");function S(e){if(process.platform!=="linux")throw new Error("app OS users exist only on Linux");return i(t=>{const a=t.prepare("SELECT app, uid, created, status FROM app_users WHERE app = ? AND status = 'active'").get(e);if(a)return a;const o=t.prepare("SELECT MAX(uid) AS uid FROM app_users").get().uid,p=Math.max(n,(o??n-1)+1);if(p>d)throw new Error("app OS user range exhausted");const s=new Date().toISOString();return t.prepare("INSERT INTO app_users (app, uid, created, status) VALUES (?, ?, ?, ?)").run(e,p,s,"active"),{app:e,uid:p,created:s,status:"active"}})}r(S,"allocateAppUser");function _(){return u().prepare("SELECT app, uid FROM app_users WHERE status = 'active'").all().map(t=>({app:t.app.startsWith("app:")?t.app.slice(4):t.app,uid:t.uid}))}r(_,"activeAppUsers");function R(e){return u().prepare("SELECT app, uid, created, status FROM app_users WHERE app = ? AND status = 'active'").get(e)??null}r(R,"activeAppUser");function O(e){i(t=>{t.prepare("UPDATE app_users SET status = 'removed', removed_at = ? WHERE uid = ? AND status = 'active'").run(new Date().toISOString(),e)})}r(O,"markAppUserRemoved");export{R as activeAppUser,_ as activeAppUsers,S as allocateAppUser,O as markAppUserRemoved,v as uidForApp};

package/dist/core/subscription-state.d.ts

@@ -90,6 +90,8 @@ export declare function commitManagedLogin(provider: ManagedProviderId, label: s
     autoLabel?: boolean;
 }): Promise<SubscriptionCredential[]>;
 export declare function parseRetryAfterHeader(value: string | undefined, now?: number): number | undefined;
+export declare function retryAfterMsFromHeaders(headers: Headers | Record<string, string> | undefined): number | undefined;
+export declare function retryAfterMsFromError(error: unknown): number | undefined;
 export declare function readRotationConfig(): RotationConfig;
 export declare function writeRotationConfig(next: RotationConfig): RotationConfig;
 export declare function formatStatusLine(provider: ManagedProviderId, now?: number): string;

package/dist/core/subscription-state.js

@@ -1,3 +1,3 @@
-var B=Object.defineProperty;var s=(t,n)=>B(t,"name",{value:n,configurable:!0});import{createHash as z,randomUUID as F}from"node:crypto";import{join as J}from"node:path";import{LockedJsonFile as Q}from"./locked-file.js";import{piAgentDir as G}from"./runtime/package-health.js";import{openScopedStore as X}from"./scoped-state/db.js";import{providerStore as Y}from"./scoped-state/paths.js";import{providerRowByReference as Z,providerRows as v,providerWrite as A}from"./scoped-state/providers.js";const P="anthropic",tt="openai-codex",et=720*60*60*1e3,W="strong",H={anthropic:{label:"Claude",credentials:"anthropic-credentials.json"},"openai-codex":{label:"OpenAI Codex",credentials:"openai-codex-credentials.json"}};function b(){return G()}s(b,"agentDir");function k(t){return J(b(),H[t].credentials)}s(k,"credentialFile");function K(t){return t==="ultra"||t==="strong"||t==="medium"||t==="light"?t:void 0}s(K,"normalizeStrength");function f(t){return t.toLowerCase()}s(f,"key");function nt(t){const n=typeof t.label=="string"?t.label.trim():"",e=typeof t.refresh=="string"?t.refresh.trim():"",a=typeof t.access=="string"?t.access.trim():"",r=Number(t.expires);if(!n||!e||!a||!Number.isFinite(r))return;const i=typeof t.accountId=="string"&&t.accountId.trim()?t.accountId.trim():void 0;return{label:n,refresh:e,access:a,expires:r,rateLimitedUntil:Number.isFinite(Number(t.rateLimitedUntil))?Number(t.rateLimitedUntil):0,lastAttemptAt:Number.isFinite(Number(t.lastAttemptAt))?Number(t.lastAttemptAt):0,lastRateLimitedAt:Number.isFinite(Number(t.lastRateLimitedAt))?Number(t.lastRateLimitedAt):0,...t.authFailure==="invalid_grant"?{authFailure:"invalid_grant"}:{},...i?{accountId:i}:{}}}s(nt,"credential");function $(t,n){if(!n.label?.trim())throw new Error(`${h(t)} subscription label cannot be empty`);const e=nt(n);if(!e)throw new Error(`Refusing to persist incomplete ${h(t)} subscription "${n.label.trim()}"; pool rows require both OAuth tokens.`);return e}s($,"assertCredential");function j(t,n){if(!n||n.trim()==="")return{version:1,accounts:{}};let e;try{e=JSON.parse(n)}catch(a){throw new Error(`managed credential file ${t} is corrupt: ${a instanceof Error?a.message:String(a)}`)}if(typeof e!="object"||e===null||Array.isArray(e)||e.version!==1||typeof e.accounts!="object"||e.accounts===null||Array.isArray(e.accounts))throw new Error(`managed credential file ${t} is corrupt`);return e}s(j,"parseCredentials");function at(t,n){const e=n.accounts[t.id];if(!e||typeof e.refresh!="string"||typeof e.access!="string"||!Number.isFinite(e.expires))throw new Error(`managed ${t.providerId} account ${t.id} has no credential record`);return{label:t.label,refresh:e.refresh,access:e.access,expires:e.expires,rateLimitedUntil:t.rateLimitedUntil,lastAttemptAt:t.lastAttemptAt,lastRateLimitedAt:t.lastRateLimitedAt,...t.authFailure?{authFailure:t.authFailure}:{},...e.accountId?{accountId:e.accountId}:{}}}s(at,"toPublic");function N(t,n){return v(b(),t).map(e=>({row:e,entry:at(e,n)}))}s(N,"rowsWithCredentials");function q(t){return new Q(k(t),!0,`{"version":1,"accounts":{}}
-`)}s(q,"managedCredentialFile");function rt(t){return j(k(t),q(t).readUnlocked())}s(rt,"readFile");function y(t){return t.accountId?.trim()||(t.refresh.trim()?`refresh:${z("sha256").update(t.refresh.trim()).digest("hex")}`:void 0)}s(y,"identity");function V(t,n,e){const a=e.refresh?.trim()??"",r=e.access?.trim()??"",i=Number(e.expires);if(!a||!r||!Number.isFinite(i))throw new Error(`${h(t)} subscription "${n}" returned an incomplete credential; the stored credential was left unchanged.`);return{refresh:a,access:r,expires:i}}s(V,"assertTokens");function gt(t){return t===P||t===tt}s(gt,"isManagedProvider");function h(t){return H[t].label}s(h,"getProviderLabel");function xt(t,n=Date.now(),e={}){const a=[],r=[];for(let i=0;i<t.length;i++){const o=t[i],c=o.registered?o.automaticFallback===!1?"non-managed-fallback":o.authenticated?(o.coolingUntil??0)>n?"cooling":void 0:"unauthenticated":"unregistered";if(!c)a.push(o);else if(r.push({candidate:o,reason:c}),e.pinnedToFirst&&i===0&&c!=="cooling")break}return{candidates:a,rejected:r}}s(xt,"resolveProviderCandidates");class E extends Error{static{s(this,"DuplicateSubscriptionError")}constructor(n){super(n),this.name="DuplicateSubscriptionError"}}function D(t){return N(t,rt(t)).map(({entry:n})=>n)}s(D,"readSubscriptionPool");async function x(t,n){const e=k(t);return q(t).withLockAsync(async(a,r,i)=>{const o=j(e,a);return{result:await n(o,N(t,o),c=>i(`${JSON.stringify(c)}
-`))}})}s(x,"locked");function S(t,n,e){t.prepare("INSERT INTO managed_accounts(provider_id,id,label,label_key,position,last_attempt_at,last_rate_limited_at,rate_limited_until,auth_failure) VALUES(?,?,?,?,?,?,?,?,?)").run(n,e.id,e.label,e.labelKey,e.position,e.lastAttemptAt,e.lastRateLimitedAt,e.rateLimitedUntil,e.authFailure??null)}s(S,"insert");function I(t,n){t.prepare("UPDATE managed_accounts SET label=?,label_key=?,position=?,last_attempt_at=?,last_rate_limited_at=?,rate_limited_until=?,auth_failure=? WHERE provider_id=? AND id=?").run(n.label,n.labelKey,n.position,n.lastAttemptAt,n.lastRateLimitedAt,n.rateLimitedUntil,n.authFailure??null,n.providerId,n.id)}s(I,"update");function L(t,n){return N(t,n).map(({entry:e})=>e)}s(L,"publicPool");function w(t,n){try{n()}catch(e){throw new Error(`managed ${h(t)} credential file was published, but its SQL membership update failed; SQL membership remains authoritative: ${e instanceof Error?e.message:String(e)}`,{cause:e})}}s(w,"writeMembershipAfterCredentialPublish");async function Lt(t,n){return x(t,async(e,a,r)=>{const i=n.map(d=>$(t,d)),o=i.map((d,u)=>({entry:d,id:a[u]?.row.id??F()})),c={};for(const{entry:d,id:u}of o)c[u]={refresh:d.refresh,access:d.access,expires:d.expires,...d.accountId?{accountId:d.accountId}:{}};return r({version:1,accounts:c}),w(t,()=>A(b(),d=>{d.prepare("DELETE FROM managed_accounts WHERE provider_id=?").run(t),o.forEach(({entry:u,id:m},l)=>S(d,t,{providerId:t,id:m,label:u.label,labelKey:f(u.label),position:l,lastAttemptAt:u.lastAttemptAt,lastRateLimitedAt:u.lastRateLimitedAt,rateLimitedUntil:u.rateLimitedUntil,...u.authFailure?{authFailure:u.authFailure}:{}}))})),i})}s(Lt,"writeSubscriptionPool");function U(t,n){const e=n.trim().toLowerCase(),a=Number.parseInt(e,10);return Number.isFinite(a)&&String(a)===e&&a>=1&&a<=t.length?a-1:t.findIndex(({entry:r})=>f(r.label)===e)}s(U,"resolve");async function it(t,n){const e=$(t,n);return x(t,async(a,r,i)=>{if(r.some(({entry:u})=>f(u.label)===f(e.label)))throw new E(`${h(t)} subscription already exists: ${e.label}`);const o=y(e),c=r.find(({entry:u})=>y(u)===o);if(o&&c)throw new E(`This ${h(t)} account is already added as \u201C${c.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);const d=F();return a.accounts[d]={refresh:e.refresh,access:e.access,expires:e.expires,...e.accountId?{accountId:e.accountId}:{}},i(a),w(t,()=>A(b(),u=>S(u,t,{providerId:t,id:d,label:e.label,labelKey:f(e.label),position:r.length,lastAttemptAt:e.lastAttemptAt,lastRateLimitedAt:e.lastRateLimitedAt,rateLimitedUntil:e.rateLimitedUntil,...e.authFailure?{authFailure:e.authFailure}:{}}))),L(t,a)})}s(it,"addSubscription");async function _t(t,n){const e=$(t,n);return D(t).find(r=>f(r.label)===f(e.label))?st(t,e):it(t,e)}s(_t,"upsertSubscription");async function st(t,n){const e=$(t,n);return x(t,async(a,r,i)=>{const o=r.findIndex(({entry:l})=>f(l.label)===f(e.label)),c=r[o],d=r.find(({entry:l},g)=>g!==o&&y(l)===y(e));if(y(e)&&d)throw new E(`This ${h(t)} account is already added as \u201C${d.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);if(!c){const l=F();return a.accounts[l]={refresh:e.refresh,access:e.access,expires:e.expires,...e.accountId?{accountId:e.accountId}:{}},i(a),w(t,()=>A(b(),g=>S(g,t,{providerId:t,id:l,label:e.label,labelKey:f(e.label),position:r.length,lastAttemptAt:e.lastAttemptAt,lastRateLimitedAt:e.lastRateLimitedAt,rateLimitedUntil:e.rateLimitedUntil}))),L(t,a)}const u=c.row,m=e.lastRateLimitedAt>=u.lastRateLimitedAt;return a.accounts[u.id]={refresh:e.refresh,access:e.access,expires:e.expires,...e.accountId?{accountId:e.accountId}:{}},i(a),w(t,()=>A(b(),l=>I(l,{...u,label:e.label,labelKey:f(e.label),lastAttemptAt:Math.max(u.lastAttemptAt,e.lastAttemptAt),lastRateLimitedAt:m?e.lastRateLimitedAt:u.lastRateLimitedAt,rateLimitedUntil:m?e.rateLimitedUntil:u.rateLimitedUntil}))),L(t,a)})}s(st,"upsertSubscriptionWithUniqueAccount");async function Et(t,n,e){return x(t,async(a,r)=>{const i=U(r,n);if(i<0)throw new Error(`Unknown ${h(t)} subscription: ${n}`);const o=e.trim();if(!o)throw new Error(`${h(t)} subscription label cannot be empty`);if(r.some((c,d)=>d!==i&&f(c.entry.label)===f(o)))throw new E(`${h(t)} subscription already exists: ${o}`);return A(b(),c=>I(c,{...r[i].row,label:o,labelKey:f(o)})),L(t,a)})}s(Et,"renameSubscription");async function M(t,n){return x(t,async(e,a,r)=>{const i=U(a,n);if(i<0)throw new Error(`Unknown ${h(t)} subscription: ${n}`);const o=a[i].row;return A(b(),c=>c.prepare("DELETE FROM managed_accounts WHERE provider_id=? AND id=?").run(t,o.id)),delete e.accounts[o.id],r(e),L(t,e)})}s(M,"remove");async function It(t,n){return M(t,n)}s(It,"removeManagedAccount");async function wt(t,n){return M(t,n)}s(wt,"removeSubscription");async function ct(t){return x(t,async(n,e,a)=>{A(b(),r=>r.prepare("DELETE FROM managed_accounts WHERE provider_id=?").run(t));for(const{row:r}of e)delete n.accounts[r.id];return a(n),e.length})}s(ct,"removeAllManagedAccounts");async function Rt(t,n){return n===void 0?(await ct(t),[]):M(t,n)}s(Rt,"removeManagedProvider");async function $t(t,n){return x(t,async(e,a)=>{const r=U(a,n);if(r<0)throw new Error(`Unknown ${h(t)} subscription: ${n}`);return A(b(),i=>{[a[r],...a.filter((c,d)=>d!==r)].forEach((c,d)=>I(i,{...c.row,position:d}))}),L(t,e)})}s($t,"promoteSubscription");async function T(t,n,e){return A(b(),a=>{const r=Z(a,t,n);if(!r)throw new Error(`Unknown ${h(t)} subscription: ${n}`);const i=e(r);i&&I(a,i)}),D(t)}s(T,"mutateHealth");async function Ft(t,n,e=Date.now()){return T(t,n,a=>({...a,lastAttemptAt:Math.max(a.lastAttemptAt,e)}))}s(Ft,"markSubscriptionAttempt");async function St(t,n,e,a,r=Date.now()){return x(t,async(i,o)=>{const c=o.find(({entry:d})=>f(d.label)===f(n));if(!c)throw new Error(`Unknown ${h(t)} subscription: ${n}`);return c.entry.refresh!==e.refresh||c.entry.access!==e.access||A(b(),d=>I(d,{...c.row,authFailure:"invalid_grant",lastAttemptAt:Math.max(c.row.lastAttemptAt,r),rateLimitedUntil:Math.max(c.row.rateLimitedUntil,r+Math.max(0,a))})),L(t,i)})}s(St,"markSubscriptionAuthenticationFailed");async function Ut(t,n,e,a=Date.now(),r=Date.now()){return T(t,n,i=>r<i.lastRateLimitedAt?null:{...i,lastAttemptAt:Math.max(i.lastAttemptAt,a),lastRateLimitedAt:r,rateLimitedUntil:r+Math.max(0,e)})}s(Ut,"markSubscriptionRateLimited");async function kt(t,n,e=Date.now()){return T(t,n,a=>e<a.lastRateLimitedAt?null:{...a,authFailure:void 0,lastAttemptAt:Math.max(a.lastAttemptAt,e),rateLimitedUntil:0})}s(kt,"markSubscriptionSuccess");async function Nt(t,n,e){return x(t,async(a,r,i)=>{const o=U(r,n);if(o<0)throw new Error(`${h(t)} subscription "${n}" no longer exists`);const c=r[o];if(c.entry.expires>Date.now())return c.entry;const d=V(t,c.entry.label,await e(c.entry.refresh));return a.accounts[c.row.id]={...a.accounts[c.row.id],...d},i(a),{...c.entry,...d}})}s(Nt,"refreshSubscriptionCredential");function ot(t){const n=t,e=[n?.errorMessage,n?.message,t instanceof Error?t.message:""].filter(r=>typeof r=="string").join(" ");return(typeof n?.status=="number"?n.status:Number(e.match(/\bstatus[=:]\s*(\d+)/i)?.[1]))===400&&/invalid_grant|refresh token .*invalid|refresh token .*not found/i.test(e)}s(ot,"isInvalidRefreshTokenError");async function Dt(t,n,e){return x(t,async(a,r,i)=>{const o=new Set;let c;for(;o.size<r.length;){const d=n(r.filter(({entry:m})=>!o.has(m.label)).map(({entry:m})=>m));if(!d)break;const u=r.find(({entry:m})=>m.label===d.label);o.add(u.entry.label);try{const m=await e(u.entry);if(m){const l=V(t,u.entry.label,m);return a.accounts[u.row.id]={...a.accounts[u.row.id],...l},i(a),{...u.entry,...l}}return u.entry}catch(m){if(!ot(m))throw m;c=m;const l=Date.now();A(b(),g=>I(g,{...u.row,authFailure:"invalid_grant",lastAttemptAt:Math.max(u.row.lastAttemptAt,l),rateLimitedUntil:Math.max(u.row.rateLimitedUntil,l+et)}))}}if(c)throw c})}s(Dt,"modifyElectedSubscription");async function lt(t,n){const e=n.accountId?.trim();if(t!==P)return e?{accountId:e}:{};try{const a=await fetch("https://api.anthropic.com/api/oauth/profile",{headers:{Authorization:`Bearer ${n.access}`,Accept:"application/json"},signal:AbortSignal.timeout(3e3)});if(!a.ok)return e?{accountId:e}:{};const r=await a.json(),i=typeof r.account?.uuid=="string"&&r.account.uuid.trim()?r.account.uuid.trim():void 0,o=typeof r.account?.email=="string"&&r.account.email.trim()?r.account.email.trim():void 0;return{...i?{accountId:i}:{},...o?{email:o}:{}}}catch{return e?{accountId:e}:{}}}s(lt,"enrichManagedLoginIdentity");async function Mt(t,n,e){const a=await lt(t,e);return x(t,async(r,i,o)=>{const c=e.autoLabel?void 0:n?.trim(),d=y({refresh:e.refresh,accountId:a.accountId}),u=(c?i.find(({entry:p})=>f(p.label)===f(c)):void 0)??i.find(({entry:p})=>y(p)===d);let m=u?.entry.label??c;if(!m&&e.autoLabel){const p=a.email||n?.trim()||`Account ${i.length+1}`;m=p;for(let R=2;i.some(({entry:_})=>f(_.label)===f(m));R++)m=`${p} (${R})`}if(!m)throw new Error(`${h(t)} subscription label cannot be empty`);const l=$(t,{label:m,refresh:e.refresh,access:e.access,expires:e.expires,...a.accountId?{accountId:a.accountId}:{},rateLimitedUntil:0,lastAttemptAt:Date.now(),lastRateLimitedAt:e.lastRateLimitedAt});if(!u){if(i.some(({entry:_})=>f(_.label)===f(l.label)))throw new E(`${h(t)} subscription already exists: ${l.label}`);const p=i.find(({entry:_})=>y(_)===y(l));if(y(l)&&p)throw new E(`This ${h(t)} account is already added as \u201C${p.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);const R=F();return r.accounts[R]={refresh:l.refresh,access:l.access,expires:l.expires,...l.accountId?{accountId:l.accountId}:{}},o(r),w(t,()=>A(b(),_=>S(_,t,{providerId:t,id:R,label:l.label,labelKey:f(l.label),position:i.length,lastAttemptAt:l.lastAttemptAt,lastRateLimitedAt:l.lastRateLimitedAt,rateLimitedUntil:l.rateLimitedUntil}))),L(t,r)}const g=u.row,O=i.find(({entry:p})=>p.label!==u.entry.label&&y(p)===y(l));if(y(l)&&O)throw new E(`This ${h(t)} account is already added as \u201C${O.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);r.accounts[g.id]={refresh:l.refresh,access:l.access,expires:l.expires,...l.accountId?{accountId:l.accountId}:{}},o(r);const C=l.lastRateLimitedAt>=g.lastRateLimitedAt;return w(t,()=>A(b(),p=>I(p,{...g,authFailure:void 0,lastAttemptAt:Math.max(g.lastAttemptAt,l.lastAttemptAt),lastRateLimitedAt:C?l.lastRateLimitedAt:g.lastRateLimitedAt,rateLimitedUntil:C?0:g.rateLimitedUntil}))),L(t,r)})}s(Mt,"commitManagedLogin");function Tt(t,n=Date.now()){if(!t?.trim())return;const e=Number(t.trim());if(Number.isFinite(e))return Math.max(0,Math.round(e*1e3));const a=Date.parse(t);return Number.isFinite(a)?Math.max(0,a-n):void 0}s(Tt,"parseRetryAfterHeader");function ut(){const t=X(Y(b())).prepare("SELECT default_fallback_strength,revert_when_available FROM rotation_settings WHERE singleton=1").get();return{defaultFallbackStrength:K(t?.default_fallback_strength)??W,revertWhenAvailable:t?.revert_when_available===void 0||t.revert_when_available===null?!0:!!t.revert_when_available}}s(ut,"readRotationConfig");function Ot(t){const n=ut(),e={defaultFallbackStrength:K(t.defaultFallbackStrength)??n.defaultFallbackStrength??W,revertWhenAvailable:t.revertWhenAvailable??n.revertWhenAvailable??!0};return A(b(),a=>a.prepare("INSERT INTO rotation_settings(singleton,default_fallback_strength,revert_when_available) VALUES(1,?,?) ON CONFLICT(singleton) DO UPDATE SET default_fallback_strength=excluded.default_fallback_strength,revert_when_available=excluded.revert_when_available").run(e.defaultFallbackStrength,e.revertWhenAvailable?1:0)),e}s(Ot,"writeRotationConfig");function Ct(t,n=Date.now()){const e=D(t),a=e.filter(i=>i.authFailure===void 0&&i.rateLimitedUntil<=n),r=h(t);return a.length===0?`${r} pool exhausted`:`${r} ${a[0]?.label??t} (${a.length}/${e.length} ready)`}s(Ct,"formatStatusLine");export{P as ANTHROPIC_PROVIDER_ID,E as DuplicateSubscriptionError,et as INVALID_REFRESH_TOKEN_BACKOFF_MS,tt as OPENAI_CODEX_PROVIDER_ID,it as addSubscription,Mt as commitManagedLogin,lt as enrichManagedLoginIdentity,Ct as formatStatusLine,h as getProviderLabel,ot as isInvalidRefreshTokenError,gt as isManagedProvider,Ft as markSubscriptionAttempt,St as markSubscriptionAuthenticationFailed,Ut as markSubscriptionRateLimited,kt as markSubscriptionSuccess,Dt as modifyElectedSubscription,Tt as parseRetryAfterHeader,$t as promoteSubscription,ut as readRotationConfig,D as readSubscriptionPool,Nt as refreshSubscriptionCredential,ct as removeAllManagedAccounts,It as removeManagedAccount,Rt as removeManagedProvider,wt as removeSubscription,Et as renameSubscription,xt as resolveProviderCandidates,_t as upsertSubscription,st as upsertSubscriptionWithUniqueAccount,Ot as writeRotationConfig,Lt as writeSubscriptionPool};
+var B=Object.defineProperty;var s=(t,n)=>B(t,"name",{value:n,configurable:!0});import{createHash as z,randomUUID as $}from"node:crypto";import{join as J}from"node:path";import{brokerConfigSnapshot as Q}from"./config.js";import{LockedJsonFile as G}from"./locked-file.js";import{secretsDir as X}from"./layout.js";import{openScopedStore as Y}from"./scoped-state/db.js";import{providerStore as Z}from"./scoped-state/paths.js";import{providerRowByReference as v,providerRows as tt,providerWrite as A}from"./scoped-state/providers.js";const P="anthropic",et="openai-codex",nt=720*60*60*1e3,H="strong",W={anthropic:{label:"Claude",credentials:"anthropic-credentials.json"},"openai-codex":{label:"OpenAI Codex",credentials:"openai-codex-credentials.json"}};function b(){return X()}s(b,"agentDir");function k(t){return J(b(),W[t].credentials)}s(k,"credentialFile");function j(t){return t==="ultra"||t==="strong"||t==="medium"||t==="light"?t:void 0}s(j,"normalizeStrength");function f(t){return t.toLowerCase()}s(f,"key");function at(t){const n=typeof t.label=="string"?t.label.trim():"",e=typeof t.refresh=="string"?t.refresh.trim():"",a=typeof t.access=="string"?t.access.trim():"",r=Number(t.expires);if(!n||!e||!a||!Number.isFinite(r))return;const i=typeof t.accountId=="string"&&t.accountId.trim()?t.accountId.trim():void 0;return{label:n,refresh:e,access:a,expires:r,rateLimitedUntil:Number.isFinite(Number(t.rateLimitedUntil))?Number(t.rateLimitedUntil):0,lastAttemptAt:Number.isFinite(Number(t.lastAttemptAt))?Number(t.lastAttemptAt):0,lastRateLimitedAt:Number.isFinite(Number(t.lastRateLimitedAt))?Number(t.lastRateLimitedAt):0,...t.authFailure==="invalid_grant"?{authFailure:"invalid_grant"}:{},...i?{accountId:i}:{}}}s(at,"credential");function F(t,n){if(!n.label?.trim())throw new Error(`${h(t)} subscription label cannot be empty`);const e=at(n);if(!e)throw new Error(`Refusing to persist incomplete ${h(t)} subscription "${n.label.trim()}"; pool rows require both OAuth tokens.`);return e}s(F,"assertCredential");function K(t,n){if(!n||n.trim()==="")return{version:1,accounts:{}};let e;try{e=JSON.parse(n)}catch(a){throw new Error(`managed credential file ${t} is corrupt: ${a instanceof Error?a.message:String(a)}`)}if(typeof e!="object"||e===null||Array.isArray(e)||e.version!==1||typeof e.accounts!="object"||e.accounts===null||Array.isArray(e.accounts))throw new Error(`managed credential file ${t} is corrupt`);return e}s(K,"parseCredentials");function rt(t,n){const e=n.accounts[t.id];if(!e||typeof e.refresh!="string"||typeof e.access!="string"||!Number.isFinite(e.expires))throw new Error(`managed ${t.providerId} account ${t.id} has no credential record`);return{label:t.label,refresh:e.refresh,access:e.access,expires:e.expires,rateLimitedUntil:t.rateLimitedUntil,lastAttemptAt:t.lastAttemptAt,lastRateLimitedAt:t.lastRateLimitedAt,...t.authFailure?{authFailure:t.authFailure}:{},...e.accountId?{accountId:e.accountId}:{}}}s(rt,"toPublic");function N(t,n){return tt(b(),t).map(e=>({row:e,entry:rt(e,n)}))}s(N,"rowsWithCredentials");function q(t){return new G(k(t),!0,`{"version":1,"accounts":{}}
+`)}s(q,"managedCredentialFile");function it(t){return K(k(t),q(t).readUnlocked())}s(it,"readFile");function y(t){return t.accountId?.trim()||(t.refresh.trim()?`refresh:${z("sha256").update(t.refresh.trim()).digest("hex")}`:void 0)}s(y,"identity");function V(t,n,e){const a=e.refresh?.trim()??"",r=e.access?.trim()??"",i=Number(e.expires);if(!a||!r||!Number.isFinite(i))throw new Error(`${h(t)} subscription "${n}" returned an incomplete credential; the stored credential was left unchanged.`);return{refresh:a,access:r,expires:i}}s(V,"assertTokens");function Et(t){return t===P||t===et}s(Et,"isManagedProvider");function h(t){return W[t].label}s(h,"getProviderLabel");function It(t,n=Date.now(),e={}){const a=[],r=[];for(let i=0;i<t.length;i++){const o=t[i],c=o.registered?o.automaticFallback===!1?"non-managed-fallback":o.authenticated?(o.coolingUntil??0)>n?"cooling":void 0:"unauthenticated":"unregistered";if(!c)a.push(o);else if(r.push({candidate:o,reason:c}),e.pinnedToFirst&&i===0&&c!=="cooling")break}return{candidates:a,rejected:r}}s(It,"resolveProviderCandidates");class E extends Error{static{s(this,"DuplicateSubscriptionError")}constructor(n){super(n),this.name="DuplicateSubscriptionError"}}function D(t){return N(t,it(t)).map(({entry:n})=>n)}s(D,"readSubscriptionPool");async function x(t,n){const e=k(t);return q(t).withLockAsync(async(a,r,i)=>{const o=K(e,a);return{result:await n(o,N(t,o),c=>i(`${JSON.stringify(c)}
+`))}})}s(x,"locked");function S(t,n,e){t.prepare("INSERT INTO managed_accounts(provider_id,id,label,label_key,position,last_attempt_at,last_rate_limited_at,rate_limited_until,auth_failure) VALUES(?,?,?,?,?,?,?,?,?)").run(n,e.id,e.label,e.labelKey,e.position,e.lastAttemptAt,e.lastRateLimitedAt,e.rateLimitedUntil,e.authFailure??null)}s(S,"insert");function I(t,n){t.prepare("UPDATE managed_accounts SET label=?,label_key=?,position=?,last_attempt_at=?,last_rate_limited_at=?,rate_limited_until=?,auth_failure=? WHERE provider_id=? AND id=?").run(n.label,n.labelKey,n.position,n.lastAttemptAt,n.lastRateLimitedAt,n.rateLimitedUntil,n.authFailure??null,n.providerId,n.id)}s(I,"update");function L(t,n){return N(t,n).map(({entry:e})=>e)}s(L,"publicPool");function w(t,n){try{n()}catch(e){throw new Error(`managed ${h(t)} credential file was published, but its SQL membership update failed; SQL membership remains authoritative: ${e instanceof Error?e.message:String(e)}`,{cause:e})}}s(w,"writeMembershipAfterCredentialPublish");async function wt(t,n){return x(t,async(e,a,r)=>{const i=n.map(d=>F(t,d)),o=i.map((d,u)=>({entry:d,id:a[u]?.row.id??$()})),c={};for(const{entry:d,id:u}of o)c[u]={refresh:d.refresh,access:d.access,expires:d.expires,...d.accountId?{accountId:d.accountId}:{}};return r({version:1,accounts:c}),w(t,()=>A(b(),d=>{d.prepare("DELETE FROM managed_accounts WHERE provider_id=?").run(t),o.forEach(({entry:u,id:m},l)=>S(d,t,{providerId:t,id:m,label:u.label,labelKey:f(u.label),position:l,lastAttemptAt:u.lastAttemptAt,lastRateLimitedAt:u.lastRateLimitedAt,rateLimitedUntil:u.rateLimitedUntil,...u.authFailure?{authFailure:u.authFailure}:{}}))})),i})}s(wt,"writeSubscriptionPool");function U(t,n){const e=n.trim().toLowerCase(),a=Number.parseInt(e,10);return Number.isFinite(a)&&String(a)===e&&a>=1&&a<=t.length?a-1:t.findIndex(({entry:r})=>f(r.label)===e)}s(U,"resolve");async function st(t,n){const e=F(t,n);return x(t,async(a,r,i)=>{if(r.some(({entry:u})=>f(u.label)===f(e.label)))throw new E(`${h(t)} subscription already exists: ${e.label}`);const o=y(e),c=r.find(({entry:u})=>y(u)===o);if(o&&c)throw new E(`This ${h(t)} account is already added as \u201C${c.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);const d=$();return a.accounts[d]={refresh:e.refresh,access:e.access,expires:e.expires,...e.accountId?{accountId:e.accountId}:{}},i(a),w(t,()=>A(b(),u=>S(u,t,{providerId:t,id:d,label:e.label,labelKey:f(e.label),position:r.length,lastAttemptAt:e.lastAttemptAt,lastRateLimitedAt:e.lastRateLimitedAt,rateLimitedUntil:e.rateLimitedUntil,...e.authFailure?{authFailure:e.authFailure}:{}}))),L(t,a)})}s(st,"addSubscription");async function Rt(t,n){const e=F(t,n);return D(t).find(r=>f(r.label)===f(e.label))?ct(t,e):st(t,e)}s(Rt,"upsertSubscription");async function ct(t,n){const e=F(t,n);return x(t,async(a,r,i)=>{const o=r.findIndex(({entry:l})=>f(l.label)===f(e.label)),c=r[o],d=r.find(({entry:l},g)=>g!==o&&y(l)===y(e));if(y(e)&&d)throw new E(`This ${h(t)} account is already added as \u201C${d.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);if(!c){const l=$();return a.accounts[l]={refresh:e.refresh,access:e.access,expires:e.expires,...e.accountId?{accountId:e.accountId}:{}},i(a),w(t,()=>A(b(),g=>S(g,t,{providerId:t,id:l,label:e.label,labelKey:f(e.label),position:r.length,lastAttemptAt:e.lastAttemptAt,lastRateLimitedAt:e.lastRateLimitedAt,rateLimitedUntil:e.rateLimitedUntil}))),L(t,a)}const u=c.row,m=e.lastRateLimitedAt>=u.lastRateLimitedAt;return a.accounts[u.id]={refresh:e.refresh,access:e.access,expires:e.expires,...e.accountId?{accountId:e.accountId}:{}},i(a),w(t,()=>A(b(),l=>I(l,{...u,label:e.label,labelKey:f(e.label),lastAttemptAt:Math.max(u.lastAttemptAt,e.lastAttemptAt),lastRateLimitedAt:m?e.lastRateLimitedAt:u.lastRateLimitedAt,rateLimitedUntil:m?e.rateLimitedUntil:u.rateLimitedUntil}))),L(t,a)})}s(ct,"upsertSubscriptionWithUniqueAccount");async function Ft(t,n,e){return x(t,async(a,r)=>{const i=U(r,n);if(i<0)throw new Error(`Unknown ${h(t)} subscription: ${n}`);const o=e.trim();if(!o)throw new Error(`${h(t)} subscription label cannot be empty`);if(r.some((c,d)=>d!==i&&f(c.entry.label)===f(o)))throw new E(`${h(t)} subscription already exists: ${o}`);return A(b(),c=>I(c,{...r[i].row,label:o,labelKey:f(o)})),L(t,a)})}s(Ft,"renameSubscription");async function M(t,n){return x(t,async(e,a,r)=>{const i=U(a,n);if(i<0)throw new Error(`Unknown ${h(t)} subscription: ${n}`);const o=a[i].row;return A(b(),c=>c.prepare("DELETE FROM managed_accounts WHERE provider_id=? AND id=?").run(t,o.id)),delete e.accounts[o.id],r(e),L(t,e)})}s(M,"remove");async function $t(t,n){return M(t,n)}s($t,"removeManagedAccount");async function St(t,n){return M(t,n)}s(St,"removeSubscription");async function ot(t){return x(t,async(n,e,a)=>{A(b(),r=>r.prepare("DELETE FROM managed_accounts WHERE provider_id=?").run(t));for(const{row:r}of e)delete n.accounts[r.id];return a(n),e.length})}s(ot,"removeAllManagedAccounts");async function Ut(t,n){return n===void 0?(await ot(t),[]):M(t,n)}s(Ut,"removeManagedProvider");async function kt(t,n){return x(t,async(e,a)=>{const r=U(a,n);if(r<0)throw new Error(`Unknown ${h(t)} subscription: ${n}`);return A(b(),i=>{[a[r],...a.filter((c,d)=>d!==r)].forEach((c,d)=>I(i,{...c.row,position:d}))}),L(t,e)})}s(kt,"promoteSubscription");async function T(t,n,e){return A(b(),a=>{const r=v(a,t,n);if(!r)throw new Error(`Unknown ${h(t)} subscription: ${n}`);const i=e(r);i&&I(a,i)}),D(t)}s(T,"mutateHealth");async function Nt(t,n,e=Date.now()){return T(t,n,a=>({...a,lastAttemptAt:Math.max(a.lastAttemptAt,e)}))}s(Nt,"markSubscriptionAttempt");async function Dt(t,n,e,a,r=Date.now()){return x(t,async(i,o)=>{const c=o.find(({entry:d})=>f(d.label)===f(n));if(!c)throw new Error(`Unknown ${h(t)} subscription: ${n}`);return c.entry.refresh!==e.refresh||c.entry.access!==e.access||A(b(),d=>I(d,{...c.row,authFailure:"invalid_grant",lastAttemptAt:Math.max(c.row.lastAttemptAt,r),rateLimitedUntil:Math.max(c.row.rateLimitedUntil,r+Math.max(0,a))})),L(t,i)})}s(Dt,"markSubscriptionAuthenticationFailed");async function Mt(t,n,e,a=Date.now(),r=Date.now()){return T(t,n,i=>r<i.lastRateLimitedAt?null:{...i,lastAttemptAt:Math.max(i.lastAttemptAt,a),lastRateLimitedAt:r,rateLimitedUntil:r+Math.max(0,e)})}s(Mt,"markSubscriptionRateLimited");async function Tt(t,n,e=Date.now()){return T(t,n,a=>e<a.lastRateLimitedAt?null:{...a,authFailure:void 0,lastAttemptAt:Math.max(a.lastAttemptAt,e),rateLimitedUntil:0})}s(Tt,"markSubscriptionSuccess");async function Ct(t,n,e){return x(t,async(a,r,i)=>{const o=U(r,n);if(o<0)throw new Error(`${h(t)} subscription "${n}" no longer exists`);const c=r[o];if(c.entry.expires>Date.now())return c.entry;const d=V(t,c.entry.label,await e(c.entry.refresh));return a.accounts[c.row.id]={...a.accounts[c.row.id],...d},i(a),{...c.entry,...d}})}s(Ct,"refreshSubscriptionCredential");function lt(t){const n=t,e=[n?.errorMessage,n?.message,t instanceof Error?t.message:""].filter(r=>typeof r=="string").join(" ");return(typeof n?.status=="number"?n.status:Number(e.match(/\bstatus[=:]\s*(\d+)/i)?.[1]))===400&&/invalid_grant|refresh token .*invalid|refresh token .*not found/i.test(e)}s(lt,"isInvalidRefreshTokenError");async function Ot(t,n,e){return x(t,async(a,r,i)=>{const o=new Set;let c;for(;o.size<r.length;){const d=n(r.filter(({entry:m})=>!o.has(m.label)).map(({entry:m})=>m));if(!d)break;const u=r.find(({entry:m})=>m.label===d.label);o.add(u.entry.label);try{const m=await e(u.entry);if(m){const l=V(t,u.entry.label,m);return a.accounts[u.row.id]={...a.accounts[u.row.id],...l},i(a),{...u.entry,...l}}return u.entry}catch(m){if(!lt(m))throw m;c=m;const l=Date.now();A(b(),g=>I(g,{...u.row,authFailure:"invalid_grant",lastAttemptAt:Math.max(u.row.lastAttemptAt,l),rateLimitedUntil:Math.max(u.row.rateLimitedUntil,l+nt)}))}}if(c)throw c})}s(Ot,"modifyElectedSubscription");async function ut(t,n){const e=n.accountId?.trim();if(t!==P)return e?{accountId:e}:{};try{const a=await fetch("https://api.anthropic.com/api/oauth/profile",{headers:{Authorization:`Bearer ${n.access}`,Accept:"application/json"},signal:AbortSignal.timeout(3e3)});if(!a.ok)return e?{accountId:e}:{};const r=await a.json(),i=typeof r.account?.uuid=="string"&&r.account.uuid.trim()?r.account.uuid.trim():void 0,o=typeof r.account?.email=="string"&&r.account.email.trim()?r.account.email.trim():void 0;return{...i?{accountId:i}:{},...o?{email:o}:{}}}catch{return e?{accountId:e}:{}}}s(ut,"enrichManagedLoginIdentity");async function Pt(t,n,e){const a=await ut(t,e);return x(t,async(r,i,o)=>{const c=e.autoLabel?void 0:n?.trim(),d=y({refresh:e.refresh,accountId:a.accountId}),u=(c?i.find(({entry:p})=>f(p.label)===f(c)):void 0)??i.find(({entry:p})=>y(p)===d);let m=u?.entry.label??c;if(!m&&e.autoLabel){const p=a.email||n?.trim()||`Account ${i.length+1}`;m=p;for(let R=2;i.some(({entry:_})=>f(_.label)===f(m));R++)m=`${p} (${R})`}if(!m)throw new Error(`${h(t)} subscription label cannot be empty`);const l=F(t,{label:m,refresh:e.refresh,access:e.access,expires:e.expires,...a.accountId?{accountId:a.accountId}:{},rateLimitedUntil:0,lastAttemptAt:Date.now(),lastRateLimitedAt:e.lastRateLimitedAt});if(!u){if(i.some(({entry:_})=>f(_.label)===f(l.label)))throw new E(`${h(t)} subscription already exists: ${l.label}`);const p=i.find(({entry:_})=>y(_)===y(l));if(y(l)&&p)throw new E(`This ${h(t)} account is already added as \u201C${p.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);const R=$();return r.accounts[R]={refresh:l.refresh,access:l.access,expires:l.expires,...l.accountId?{accountId:l.accountId}:{}},o(r),w(t,()=>A(b(),_=>S(_,t,{providerId:t,id:R,label:l.label,labelKey:f(l.label),position:i.length,lastAttemptAt:l.lastAttemptAt,lastRateLimitedAt:l.lastRateLimitedAt,rateLimitedUntil:l.rateLimitedUntil}))),L(t,r)}const g=u.row,C=i.find(({entry:p})=>p.label!==u.entry.label&&y(p)===y(l));if(y(l)&&C)throw new E(`This ${h(t)} account is already added as \u201C${C.entry.label}\u201D \u2014 it shares the same quota, so a second slot adds no redundancy.`);r.accounts[g.id]={refresh:l.refresh,access:l.access,expires:l.expires,...l.accountId?{accountId:l.accountId}:{}},o(r);const O=l.lastRateLimitedAt>=g.lastRateLimitedAt;return w(t,()=>A(b(),p=>I(p,{...g,authFailure:void 0,lastAttemptAt:Math.max(g.lastAttemptAt,l.lastAttemptAt),lastRateLimitedAt:O?l.lastRateLimitedAt:g.lastRateLimitedAt,rateLimitedUntil:O?0:g.rateLimitedUntil}))),L(t,r)})}s(Pt,"commitManagedLogin");function dt(t,n=Date.now()){if(!t?.trim())return;const e=Number(t.trim());if(Number.isFinite(e))return Math.max(0,Math.round(e*1e3));const a=Date.parse(t);return Number.isFinite(a)?Math.max(0,a-n):void 0}s(dt,"parseRetryAfterHeader");function mt(t){if(!t)return;const n=s(a=>t instanceof Headers?t.get(a)??void 0:Object.entries(t).find(([r])=>r.toLowerCase()===a)?.[1],"get"),e=n("retry-after-ms");return e!==void 0&&e.trim()!==""&&Number.isFinite(Number(e))?Math.max(0,Number(e)):dt(n("retry-after"))}s(mt,"retryAfterMsFromHeaders");function Ht(t){if(!t||typeof t!="object"||!("headers"in t))return;const n=t.headers;if(!(!(n instanceof Headers)&&(!n||typeof n!="object"||Array.isArray(n))))return mt(n)}s(Ht,"retryAfterMsFromError");function ft(){const t=Q();if(t)return t.rotation;const n=Y(Z(b())).prepare("SELECT default_fallback_strength,revert_when_available FROM rotation_settings WHERE singleton=1").get();return{defaultFallbackStrength:j(n?.default_fallback_strength)??H,revertWhenAvailable:n?.revert_when_available===void 0||n.revert_when_available===null?!0:!!n.revert_when_available}}s(ft,"readRotationConfig");function Wt(t){const n=ft(),e={defaultFallbackStrength:j(t.defaultFallbackStrength)??n.defaultFallbackStrength??H,revertWhenAvailable:t.revertWhenAvailable??n.revertWhenAvailable??!0};return A(b(),a=>a.prepare("INSERT INTO rotation_settings(singleton,default_fallback_strength,revert_when_available) VALUES(1,?,?) ON CONFLICT(singleton) DO UPDATE SET default_fallback_strength=excluded.default_fallback_strength,revert_when_available=excluded.revert_when_available").run(e.defaultFallbackStrength,e.revertWhenAvailable?1:0)),e}s(Wt,"writeRotationConfig");function jt(t,n=Date.now()){const e=D(t),a=e.filter(i=>i.authFailure===void 0&&i.rateLimitedUntil<=n),r=h(t);return a.length===0?`${r} pool exhausted`:`${r} ${a[0]?.label??t} (${a.length}/${e.length} ready)`}s(jt,"formatStatusLine");export{P as ANTHROPIC_PROVIDER_ID,E as DuplicateSubscriptionError,nt as INVALID_REFRESH_TOKEN_BACKOFF_MS,et as OPENAI_CODEX_PROVIDER_ID,st as addSubscription,Pt as commitManagedLogin,ut as enrichManagedLoginIdentity,jt as formatStatusLine,h as getProviderLabel,lt as isInvalidRefreshTokenError,Et as isManagedProvider,Nt as markSubscriptionAttempt,Dt as markSubscriptionAuthenticationFailed,Mt as markSubscriptionRateLimited,Tt as markSubscriptionSuccess,Ot as modifyElectedSubscription,dt as parseRetryAfterHeader,kt as promoteSubscription,ft as readRotationConfig,D as readSubscriptionPool,Ct as refreshSubscriptionCredential,ot as removeAllManagedAccounts,$t as removeManagedAccount,Ut as removeManagedProvider,St as removeSubscription,Ft as renameSubscription,It as resolveProviderCandidates,Ht as retryAfterMsFromError,mt as retryAfterMsFromHeaders,Rt as upsertSubscription,ct as upsertSubscriptionWithUniqueAccount,Wt as writeRotationConfig,wt as writeSubscriptionPool};

package/dist/core/substrate/frontmatter-validation.js

@@ -1 +1 @@
-var g=Object.defineProperty;var s=(e,n)=>g(e,"name",{value:n,configurable:!0});import{isDocKind as p,parseSubstrateFrontmatter as m,SURFACE_EVENTS as f,SURFACE_RUNGS as y}from"./schema.js";const b=["system-prompt-visibility","file-read-visibility","applies-to","read-when"],S=["on","match","match-frontmatter","gate","at"],h=["length","broad-memory-read","orphan"];function v(e){if(e===void 0)return null;if(!Array.isArray(e))return`invalid surfaces: ${JSON.stringify(e)} (expected a list of {on, at, match?, match-frontmatter?, gate?} entries)`;for(const n of e){if(n===null||typeof n!="object"||Array.isArray(n))return`invalid surfaces entry: ${JSON.stringify(n)} (expected an {on, at, match?, match-frontmatter?, gate?} object)`;const r=n;for(const i of Object.keys(r))if(!S.includes(i))return`invalid surfaces entry: unknown key \`${i}\` (an entry carries only on, match, match-frontmatter, gate, at)`;const t=r.on;if(typeof t!="string"||!f.includes(t))return`invalid surfaces entry \`on\`: ${JSON.stringify(t)} (expected ${f.join("|")})`;const c=r.at;if(typeof c!="string"||!y.includes(c))return`invalid surfaces entry \`at\`: ${JSON.stringify(c)} (expected ${y.join("|")})`;let u=!1;if(r.match!==void 0){if(t==="boot"||t==="workspace-open")return`invalid surfaces entry: \`match\` is meaningless on \`${t}\` \u2014 the entry's presence is the match; drop it`;const i=r.match,d=typeof i=="string"?[i]:Array.isArray(i)&&i.every(l=>typeof l=="string")?i:null;if(d===null||d.length===0||d.some(l=>l.trim()===""))return`invalid surfaces entry \`match\`: ${JSON.stringify(i)} (expected a non-empty glob or non-empty glob list)`;u=!0}const a=r["match-frontmatter"];if(a!==void 0){if(t!=="read")return"invalid surfaces entry: `match-frontmatter` is a `read`-event predicate only";if(a===null||typeof a!="object"||Array.isArray(a))return`invalid surfaces entry \`match-frontmatter\`: ${JSON.stringify(a)} (expected a field\u2192matcher object)`}if((t==="read"||t==="memory-read"||t==="command"||t==="pre-command")&&!u&&a===void 0)return`invalid surfaces entry: a \`${t}\` entry requires \`match\`${t==="read"?" or `match-frontmatter`":""}`;const o=r.gate;if(o!==void 0&&(o===null||typeof o!="object"||Array.isArray(o)))return`invalid surfaces entry \`gate\`: ${JSON.stringify(o)} (expected a field\u2192matcher object)`}return null}s(v,"lintSubstrateSurfaces");function w(e){if(e===null)return"missing frontmatter: a memory store doc requires `kind: knowledge|preference`";if(!p(e.kind))return`invalid kind: ${JSON.stringify(e.kind)} (expected knowledge|preference)`;if("when"in e||"why"in e)return'retired `when`/`why` keys: merge them into one `when-and-why-to-read` line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';if(typeof e["when-and-why-to-read"]!="string"||e["when-and-why-to-read"].trim()==="")return'missing `when-and-why-to-read`: one routing line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';for(const r of b)if(r in e)return`retired \`${r}\` key: the visibility axes were replaced by \`surfaces\` event routing \u2014 run \`crtr sys migrate\` to convert old-format docs, or author \`surfaces\` entries by hand (\`crtr memory write -h\`)`;if(e.unlisted!==void 0&&typeof e.unlisted!="boolean")return`invalid unlisted: ${JSON.stringify(e.unlisted)} (expected a boolean)`;const n=v(e.surfaces);if(n!==null)return n;if(e.gate!==void 0&&(e.gate===null||typeof e.gate!="object"||Array.isArray(e.gate)))return`invalid gate: ${JSON.stringify(e.gate)} (expected a field\u2192matcher object)`;if(e.slash!==void 0&&typeof e.slash!="boolean")return`invalid slash: ${JSON.stringify(e.slash)} (expected a boolean)`;if(e.rationale!==void 0&&typeof e.rationale!="string")return`invalid rationale: ${JSON.stringify(e.rationale)} (expected a string)`;if(e["lint-ignore"]!==void 0){const r=Array.isArray(e["lint-ignore"])?e["lint-ignore"]:[e["lint-ignore"]];if(r.length===0||!r.every(t=>typeof t=="string"&&h.includes(t)))return`invalid lint-ignore: ${JSON.stringify(e["lint-ignore"])} (suppressible rules: ${h.map(t=>`\`${t}\``).join(", ")})`}return null}s(w,"lintSubstrateFrontmatter");const k=w;function A(e){return m(e)?.surfaces??[]}s(A,"parsedSubstrateSurfaces");export{h as SUPPRESSIBLE_RULES,w as lintSubstrateFrontmatter,k as lintSubstrateSchema,v as lintSubstrateSurfaces,A as parsedSubstrateSurfaces};
+var g=Object.defineProperty;var s=(e,n)=>g(e,"name",{value:n,configurable:!0});import{isDocKind as m,parseSubstrateFrontmatter as b,PRIVACY_LEVELS as y,SURFACE_EVENTS as f,SURFACE_RUNGS as h}from"./schema.js";const S=["system-prompt-visibility","file-read-visibility","applies-to","read-when"],v=["on","match","match-frontmatter","gate","at"],p=["length","broad-memory-read","orphan"];function $(e){if(e===void 0)return null;if(!Array.isArray(e))return`invalid surfaces: ${JSON.stringify(e)} (expected a list of {on, at, match?, match-frontmatter?, gate?} entries)`;for(const n of e){if(n===null||typeof n!="object"||Array.isArray(n))return`invalid surfaces entry: ${JSON.stringify(n)} (expected an {on, at, match?, match-frontmatter?, gate?} object)`;const r=n;for(const i of Object.keys(r))if(!v.includes(i))return`invalid surfaces entry: unknown key \`${i}\` (an entry carries only on, match, match-frontmatter, gate, at)`;const t=r.on;if(typeof t!="string"||!f.includes(t))return`invalid surfaces entry \`on\`: ${JSON.stringify(t)} (expected ${f.join("|")})`;const c=r.at;if(typeof c!="string"||!h.includes(c))return`invalid surfaces entry \`at\`: ${JSON.stringify(c)} (expected ${h.join("|")})`;let u=!1;if(r.match!==void 0){if(t==="boot"||t==="workspace-open")return`invalid surfaces entry: \`match\` is meaningless on \`${t}\` \u2014 the entry's presence is the match; drop it`;const i=r.match,d=typeof i=="string"?[i]:Array.isArray(i)&&i.every(l=>typeof l=="string")?i:null;if(d===null||d.length===0||d.some(l=>l.trim()===""))return`invalid surfaces entry \`match\`: ${JSON.stringify(i)} (expected a non-empty glob or non-empty glob list)`;u=!0}const a=r["match-frontmatter"];if(a!==void 0){if(t!=="read")return"invalid surfaces entry: `match-frontmatter` is a `read`-event predicate only";if(a===null||typeof a!="object"||Array.isArray(a))return`invalid surfaces entry \`match-frontmatter\`: ${JSON.stringify(a)} (expected a field\u2192matcher object)`}if((t==="read"||t==="memory-read"||t==="command"||t==="pre-command")&&!u&&a===void 0)return`invalid surfaces entry: a \`${t}\` entry requires \`match\`${t==="read"?" or `match-frontmatter`":""}`;const o=r.gate;if(o!==void 0&&(o===null||typeof o!="object"||Array.isArray(o)))return`invalid surfaces entry \`gate\`: ${JSON.stringify(o)} (expected a field\u2192matcher object)`}return null}s($,"lintSubstrateSurfaces");function w(e){if(e===null)return"missing frontmatter: a memory store doc requires `kind: knowledge|preference`";if(!m(e.kind))return`invalid kind: ${JSON.stringify(e.kind)} (expected knowledge|preference)`;if("when"in e||"why"in e)return'retired `when`/`why` keys: merge them into one `when-and-why-to-read` line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';if(typeof e["when-and-why-to-read"]!="string"||e["when-and-why-to-read"].trim()==="")return'missing `when-and-why-to-read`: one routing line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';for(const r of S)if(r in e)return`retired \`${r}\` key: the visibility axes were replaced by \`surfaces\` event routing \u2014 run \`crtr sys migrate\` to convert old-format docs, or author \`surfaces\` entries by hand (\`crtr memory write -h\`)`;if("privacy"in e&&!y.includes(e.privacy))return`invalid privacy: ${JSON.stringify(e.privacy)} (expected ${y.join("|")})`;if(e.unlisted!==void 0&&typeof e.unlisted!="boolean")return`invalid unlisted: ${JSON.stringify(e.unlisted)} (expected a boolean)`;const n=$(e.surfaces);if(n!==null)return n;if(e.gate!==void 0&&(e.gate===null||typeof e.gate!="object"||Array.isArray(e.gate)))return`invalid gate: ${JSON.stringify(e.gate)} (expected a field\u2192matcher object)`;if(e.slash!==void 0&&typeof e.slash!="boolean")return`invalid slash: ${JSON.stringify(e.slash)} (expected a boolean)`;if(e.rationale!==void 0&&typeof e.rationale!="string")return`invalid rationale: ${JSON.stringify(e.rationale)} (expected a string)`;if(e["lint-ignore"]!==void 0){const r=Array.isArray(e["lint-ignore"])?e["lint-ignore"]:[e["lint-ignore"]];if(r.length===0||!r.every(t=>typeof t=="string"&&p.includes(t)))return`invalid lint-ignore: ${JSON.stringify(e["lint-ignore"])} (suppressible rules: ${p.map(t=>`\`${t}\``).join(", ")})`}return null}s(w,"lintSubstrateFrontmatter");const k=w;function N(e){return b(e)?.surfaces??[]}s(N,"parsedSubstrateSurfaces");export{p as SUPPRESSIBLE_RULES,w as lintSubstrateFrontmatter,k as lintSubstrateSchema,$ as lintSubstrateSurfaces,N as parsedSubstrateSurfaces};

package/dist/core/substrate/injected-store.d.ts

@@ -11,19 +11,44 @@ export interface ContextExposureState {
     /** Canonical identity → ranks loaded from the system and transcript snapshots. */
     exposures: Map<string, ExposureRanks>;
 }
+/** One full document body that entered a context — the analytics memory log's
+ *  `loaded` event, before it is timestamped and sent. */
+export interface MemoryLoad {
+    name: string;
+    scope: string;
+}
 export interface ExposureTarget {
     state: ContextExposureState;
     source: ExposureSource;
+    /** Present only at real delivery sites; diagnostic renders pass none. */
+    loads?: MemoryLoad[];
+}
+/** JSON form exchanged with the daemon after Pi has materialized a baseline. */
+export interface ContextExposureSnapshot {
+    preferenceSnapshot: string | null;
+    exposures: Record<string, {
+        system?: number;
+        transcript?: number;
+    }>;
 }
+export declare function snapshotContextExposure(state: ContextExposureState): ContextExposureSnapshot;
+export declare function restoreContextExposure(value: ContextExposureSnapshot): ContextExposureState;
 export declare function emptyContextExposureState(): ContextExposureState;
-export declare function exposureTarget(state: ContextExposureState, source: ExposureSource): ExposureTarget;
+export declare function exposureTarget(state: ContextExposureState, source: ExposureSource, loads?: MemoryLoad[]): ExposureTarget;
 export declare function exposedAtOrAbove(state: ContextExposureState, identity: string, rung: Rung): boolean;
 /** The sole delivery mutation: max-fold one loaded identity into its source rank. */
 export declare function registerExposure(target: ExposureTarget, identity: string, rung: Rung): void;
 export declare function contentExposureIdentity(body: string): string | null;
 export declare function documentExposedAtOrAbove(state: ContextExposureState, path: string, body: string, rung: Rung): boolean;
-/** Register both the physical document and its non-empty content alias. */
-export declare function registerDocumentExposure(target: ExposureTarget, path: string, body: string, rung: Rung): void;
+/** Register both the physical document and its non-empty content alias. A
+ *  `content` registration of a body the context did not already hold is a full
+ *  body entering the context, so it lands in the target's collector. */
+export declare function registerDocumentExposure(target: ExposureTarget, doc: {
+    path: string;
+    body: string;
+    name: string;
+    scope: string;
+}, rung: Rung): void;
 /** Forget that a document was delivered into the TRANSCRIPT — both its physical
  *  identity and its content alias — while leaving any `system` rank intact,
  *  because the system prompt is rebuilt on every agent run and survives