@north-light/crouter 0.3.349 → 0.3.351

package/dist/core/canvas/node-recap.js

@@ -1,2 +1,2 @@
-var d=Object.defineProperty;var r=(e,t)=>d(e,"name",{value:t,configurable:!0});import{join as g}from"node:path";import{mkdirSync as m}from"node:fs";import{jobDir as f}from"./paths.js";import{readJsonIfExists as y,atomicWriteJson as x}from"../fs-utils.js";function u(e){return g(f(e),"recap.json")}r(u,"recapPath");function l(e){return e.replace(/^\s*(goal|state)\s*:\s*/i,"").trim()}r(l,"stripLabel");function b(e){const t=e.split(`
-`).map(i=>i.trim()).filter(i=>i!=="");if(t.length===0)return null;const n=r(i=>t.find(p=>new RegExp(`^${i}\\s*:`,"i").test(p)),"labelled"),o=n("goal")??t[0],a=n("state")??(t[1]!==o?t[1]:void 0),s=o===void 0?"":l(o),c=a===void 0?"":l(a);return s===""&&c===""?null:{goal:s,state:c}}r(b,"parseRecapBriefing");function S(e,t){const n=b(t);if(n!==null)try{m(f(e),{recursive:!0}),x(u(e),{...n,at:new Date().toISOString()})}catch{}}r(S,"writeNodeRecap");function D(e){const t=y(u(e));if(t===null||typeof t!="object")return;const n=typeof t.goal=="string"?t.goal:"",o=typeof t.state=="string"?t.state:"";if(!(n===""&&o===""))return{goal:n,state:o,at:typeof t.at=="string"?t.at:""}}r(D,"readNodeRecap");export{b as parseRecapBriefing,D as readNodeRecap,S as writeNodeRecap};
+var d=Object.defineProperty;var r=(e,t)=>d(e,"name",{value:t,configurable:!0});import{join as g}from"node:path";import{mkdirSync as m}from"node:fs";import{jobDir as c}from"./paths.js";import{readJsonIfExists as w,atomicWriteJson as y}from"../fs-utils.js";function l(e){return g(c(e),"recap.json")}r(l,"recapPath");function p(e){return e.replace(/^\s*(goal|state)\s*:\s*/i,"").trim()}r(p,"stripLabel");function b(e){const t=e.split(`
+`).map(i=>i.trim()).filter(i=>i!=="");if(t.length===0)return null;const n=r(i=>t.find(u=>new RegExp(`^${i}\\s*:`,"i").test(u)),"labelled"),o=n("goal")??t[0],a=n("state")??(t[1]!==o?t[1]:void 0),s=o===void 0?"":p(o),f=a===void 0?"":p(a);return s===""&&f===""?null:{goal:s,state:f}}r(b,"parseRecapBriefing");function L(e,t){const n=b(t);if(n===null)throw new TypeError("recap briefing has no goal or state");m(c(e),{recursive:!0}),y(l(e),{...n,at:new Date().toISOString()})}r(L,"writeNodeRecap");function S(e){const t=w(l(e));if(t===null||typeof t!="object")return;const n=typeof t.goal=="string"?t.goal:"",o=typeof t.state=="string"?t.state:"";if(!(n===""&&o===""))return{goal:n,state:o,at:typeof t.at=="string"?t.at:""}}r(S,"readNodeRecap");export{b as parseRecapBriefing,S as readNodeRecap,L as writeNodeRecap};

package/dist/core/canvas/node-tokens.d.ts

@@ -0,0 +1,24 @@
+import { openDb } from './db.js';
+export interface NodePrincipal {
+    app: string;
+    node: string;
+    run: string | null;
+    uid: number;
+    sub: string;
+    grant: string | null;
+    client_id: string | null;
+    scopes: string[] | null;
+}
+export declare function mintNodeToken(db: ReturnType<typeof openDb>, executionId: string, nodeId: string, issuedAt: string): void;
+/** Called exactly once by the host at spawn, never serialized into a launch recipe. */
+export declare function takeNodeToken(executionId: string): string;
+export declare function forgetNodeToken(executionId: string): void;
+/** A stopped or superseded execution can never authenticate, even after restart. */
+export declare function resolveNodeToken(token: string): NodePrincipal | null;
+export declare function revokeExitedNodeToken(executionId: string): void;
+export declare function revokePriorEpochNodeTokens(epoch: string): void;
+/** OWN-11 for a joined runtime: a `user:local` subject becomes the owner, a
+ *  `user:local` grantee becomes `app:terminal` (no token has the owner as grantee),
+ *  and a reference to the dropped local grant is cleared. */
+export declare function rewriteLocalNodeTokenIdentity(db: ReturnType<typeof openDb>, owner: string, localGrantId: string): number;
+export declare function revokeNodeTokens(db: ReturnType<typeof openDb>, where: 'broker_process_id' | 'node_id', id: string, at: string): void;

package/dist/core/canvas/node-tokens.js

@@ -0,0 +1,5 @@
+var g=Object.defineProperty;var t=(e,n)=>g(e,"name",{value:n,configurable:!0});import{createHash as k,randomBytes as m}from"node:crypto";import{openDb as u}from"./db.js";import{terminalGrant as N}from"../grants/mirror.js";import{readConfig as c}from"../config.js";import{uidForApp as T}from"../spaces/users.js";const i=new Map,l=t(e=>k("sha256").update(e).digest("hex"),"hash");function x(e,n,o,s){const r=e.prepare("SELECT grantee, sub, grant_id, client_id, scopes_json, run_id FROM nodes WHERE node_id = ?").get(o);if(!r)throw new Error(`cannot mint node token: missing node ${o}`);const a=r.run_id&&r.run_id!==o?e.prepare("SELECT sub, grant_id, client_id FROM nodes WHERE node_id = ?").get(r.run_id):void 0,d=r.grantee==="app:terminal"?N():null,p=d?.sub??a?.sub??r.sub,E=d?.id??a?.grant_id??r.grant_id??null;if(r.grantee==="app:terminal"&&c("user").runtime?.issuer&&!d)throw new Error("cannot mint node token: terminal grant is not active");if(!p&&r.grantee!=="user:local"&&!(r.grantee==="app:terminal"&&!c("user").runtime?.issuer))throw new Error(`cannot mint node token: no subject for ${r.grantee}`);const _=m(32).toString("base64url");e.prepare("INSERT INTO node_tokens (broker_process_id, node_id, token_hash, grantee, uid, sub, grant, client_id, scopes_json, issued_at, revoked_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, NULL)").run(n,o,l(_),r.grantee==="user:local"?"app:terminal":r.grantee,T(r.grantee==="user:local"?"app:terminal":r.grantee),p??"user:local",E,a?.client_id??r.client_id,r.scopes_json,s),i.set(n,_)}t(x,"mintNodeToken");function A(e){const n=i.get(e);if(i.delete(e),!n)throw new Error(`missing node token for execution ${e}`);return n}t(A,"takeNodeToken");function f(e){i.delete(e)}t(f,"forgetNodeToken");function D(e){if(!/^[A-Za-z0-9_-]{43}$/.test(e))return null;const n=u().prepare(`SELECT t.node_id, t.grantee, t.uid, t.sub, t.grant, t.client_id, t.scopes_json, n.run_id
+    FROM node_tokens t JOIN executions e ON e.execution_id = t.broker_process_id
+    JOIN nodes n ON n.node_id = t.node_id
+    WHERE t.token_hash = ? AND t.revoked_at IS NULL AND e.state != 'exited'`).get(l(e));return n?{app:n.grantee,node:n.node_id,run:n.run_id,uid:n.uid,sub:n.sub,grant:n.grant,client_id:n.client_id,scopes:n.scopes_json===null?null:JSON.parse(n.scopes_json)}:null}t(D,"resolveNodeToken");function v(e){f(e),S(u(),"broker_process_id",e,new Date().toISOString())}t(v,"revokeExitedNodeToken");function U(e){u().prepare(`UPDATE node_tokens SET revoked_at = ? WHERE revoked_at IS NULL
+    AND broker_process_id IN (SELECT execution_id FROM executions WHERE daemon_epoch IS NOT ?)`).run(new Date().toISOString(),e)}t(U,"revokePriorEpochNodeTokens");function H(e,n,o){return Number(e.prepare("UPDATE node_tokens SET sub = ? WHERE sub = 'user:local'").run(n).changes)+Number(e.prepare("UPDATE node_tokens SET grantee = 'app:terminal' WHERE grantee = 'user:local'").run().changes)+Number(e.prepare('UPDATE node_tokens SET "grant" = NULL WHERE "grant" = ?').run(o).changes)}t(H,"rewriteLocalNodeTokenIdentity");function S(e,n,o,s){e.prepare(`UPDATE node_tokens SET revoked_at = ? WHERE ${n} = ? AND revoked_at IS NULL`).run(s,o)}t(S,"revokeNodeTokens");export{f as forgetNodeToken,x as mintNodeToken,D as resolveNodeToken,v as revokeExitedNodeToken,S as revokeNodeTokens,U as revokePriorEpochNodeTokens,H as rewriteLocalNodeTokenIdentity,A as takeNodeToken};

package/dist/core/canvas/paths.d.ts

@@ -1,25 +1,14 @@
-/** Root of the global canvas home (`~/.crouter/canvas` unless `CRTR_HOME` is set).
- *  Nested under the `.crouter` scope root so the whole runtime lives in one
- *  visible top-level dir; `canvas/` keeps node-graph runtime state separate from
- *  durable user content (memory/plugins/marketplaces/config) at the scope root. */
+/** Runtime-owned records; never a bind source for an app sandbox. */
 export declare function crtrHome(): string;
 /** The canvas home requires durable storage with SQLite WAL locking support. */
 export declare function canvasDbPath(): string;
 export declare function onDiskMigrationLockPath(): string;
 export declare function onDiskMigrationMarkerPath(): string;
-/** Absolute path to a node's broker `view.sock` — always `view.sock` under the
- *  node dir. Stale socket files (a host reboot, a sandbox recreate on a
- *  durable volume) are harmless: the broker unlinks any existing socket before
- *  it binds. */
+/** The viewer socket belongs to the per-node run folder, not the durable records. */
 export declare function viewSocketPath(nodeId: string): string;
 export declare function nodesRoot(): string;
 export declare function reviewsRoot(): string;
 export declare function reviewDir(reviewId: string): string;
-export declare function reviewBranchPath(reviewId: string): string;
-/** The immutable session branch a single comment's fork is born from. Each
- *  comment gets its own branch file so concurrent forks never share a source. */
-export declare function reviewForkBranchPath(reviewId: string, commentId: string): string;
-export declare function ensureReviewForkDir(reviewId: string): void;
 export declare function reviewResultPath(reviewId: string): string;
 export declare function ensureReviewDir(reviewId: string): void;
 /** Absolute path to crtrd's API listener unix socket, a sibling of
@@ -38,8 +27,14 @@ export declare function apiSocketPath(): string;
 export declare function sessionListCachePath(): string;
 /** Whether a persisted node ID is safe as a single filesystem path segment. */
 export declare function isSafeNodeId(nodeId: string): boolean;
-export declare function nodeDir(nodeId: string): string;
-export declare function contextDir(nodeId: string): string;
+export declare function nodeRecordDir(nodeId: string): string;
+/** Existing callers use nodeDir for the daemon's records only. */
+export declare const nodeDir: typeof nodeRecordDir;
+/** Pure path builder. A broker may resolve its own app from its launch identity;
+ *  every other caller must supply the app from the daemon's node row. */
+export declare function nodeAgentDir(nodeId: string, grantee?: string): string;
+export declare function nodeRunDir(nodeId: string): string;
+export declare function contextDir(nodeId: string, grantee?: string): string;
 /** Replace the literal env-var tokens `$CRTR_CONTEXT_DIR` / `$CRTR_NODE_ID` in
  *  agent-facing doc text with the node's real values, so a doc surfaced INTO a
  *  node hands it a concrete absolute path instead of a shell-only string. The
@@ -49,9 +44,10 @@ export declare function contextDir(nodeId: string): string;
  *  Write, so this substitution is strictly safer. Callers must only apply it
  *  when they have a concrete node to render for (never on generic, node-less
  *  output). Pure string work — no I/O. */
-export declare function interpolateNodePaths(text: string, nodeId: string): string;
+export declare function interpolateNodePaths(text: string, nodeId: string, grantee?: string): string;
 export declare function jobDir(nodeId: string): string;
-export declare function reportsDir(nodeId: string): string;
+export declare function nodeRunJobDir(nodeId: string): string;
+export declare function reportsDir(nodeId: string, grantee?: string): string;
 /** Overflow store for inbox entries whose inline body exceeds the digest's
  *  bounded preview (a direct `node message send` or a close/cancel doctrine
  *  wake) — the full body spills here, mirroring how a
@@ -68,7 +64,8 @@ export declare function sessionPtrPath(nodeId: string): string;
 /** Frozen preference snapshot and rank-aware exposure state for the node's
  * currently loaded LLM context. The filename remains stable across schema versions. */
 export declare function injectedDocsPath(nodeId: string): string;
-/** Create the full directory skeleton for a node. Idempotent. */
-export declare function ensureNodeDirs(nodeId: string): void;
+/** Create the full directory skeleton for a node. Idempotent. The agent and
+ *  run folders are app-writable, so their subfolders are made beneath them. */
+export declare function ensureNodeDirs(nodeId: string, grantee: string): void;
 /** Ensure the canvas home exists. Idempotent. */
 export declare function ensureHome(): void;

package/dist/core/canvas/paths.js

@@ -1 +1 @@
-var f=Object.defineProperty;var r=(t,o)=>f(t,"name",{value:o,configurable:!0});import{homedir as x}from"node:os";import{join as e}from"node:path";import{mkdirSync as u}from"node:fs";import{CRTR_DIR_NAME as h}from"../../types.js";function i(){const t=process.env.CRTR_HOME;return t!==void 0&&t!==""?t:e(x(),h,"canvas")}r(i,"crtrHome");function b(){return e(i(),"canvas.db")}r(b,"canvasDbPath");function g(){return e(i(),"on-disk-migration.lock")}r(g,"onDiskMigrationLockPath");function T(){return e(i(),"on-disk-migrations.json")}r(T,"onDiskMigrationMarkerPath");function N(t){return c(t),e(n(t),"view.sock")}r(N,"viewSocketPath");function a(){return e(i(),"nodes")}r(a,"nodesRoot");function m(){return e(i(),"reviews")}r(m,"reviewsRoot");function s(t){return c(t),e(m(),t)}r(s,"reviewDir");function C(t){return e(s(t),"branch-point.jsonl")}r(C,"reviewBranchPath");function E(t,o){return c(o),e(s(t),"forks",`${o}.jsonl`)}r(E,"reviewForkBranchPath");function M(t){u(e(s(t),"forks"),{recursive:!0,mode:448})}r(M,"ensureReviewForkDir");function d(t){return e(s(t),"result.json")}r(d,"reviewResultPath");function y(t){u(s(t),{recursive:!0,mode:448})}r(y,"ensureReviewDir");function S(){return e(i(),"crtrd.sock")}r(S,"apiSocketPath");function A(){return e(i(),"session-list-cache.json")}r(A,"sessionListCachePath");const v=128;function D(t){return typeof t=="string"&&t!==""&&t!=="."&&t!==".."&&!/[\\/\0]/u.test(t)&&Buffer.byteLength(t,"utf8")<=v}r(D,"isSafeNodeId");function c(t){if(!D(t))throw new TypeError("node_id must be a non-empty path segment of at most 128 UTF-8 bytes")}r(c,"assertSafeNodeId");function n(t){return c(t),e(a(),t)}r(n,"nodeDir");function p(t){return e(n(t),"context")}r(p,"contextDir");function B(t,o){return t.replaceAll("$CRTR_CONTEXT_DIR",p(o)).replaceAll("$CRTR_NODE_ID",o)}r(B,"interpolateNodePaths");function l(t){return e(n(t),"job")}r(l,"jobDir");function P(t){return e(n(t),"reports")}r(P,"reportsDir");function O(t){return e(n(t),"messages")}r(O,"messagesDir");function F(t){return e(n(t),"meta.json")}r(F,"nodeMetaPath");function H(t){return e(n(t),"inbox.jsonl")}r(H,"inboxPath");function L(t){return e(n(t),"situational-context.md")}r(L,"situationalContextPath");function $(t){return e(n(t),"passive.jsonl")}r($,"passivePath");function X(t){return e(n(t),"transcript.jsonl")}r(X,"transcriptPath");function U(t){return e(n(t),"session.ptr")}r(U,"sessionPtrPath");function Y(t){return e(n(t),"injected-docs.json")}r(Y,"injectedDocsPath");function q(t){for(const o of[p(t),l(t),P(t)])u(o,{recursive:!0})}r(q,"ensureNodeDirs");function z(){u(a(),{recursive:!0})}r(z,"ensureHome");export{S as apiSocketPath,b as canvasDbPath,p as contextDir,i as crtrHome,z as ensureHome,q as ensureNodeDirs,y as ensureReviewDir,M as ensureReviewForkDir,H as inboxPath,Y as injectedDocsPath,B as interpolateNodePaths,D as isSafeNodeId,l as jobDir,O as messagesDir,n as nodeDir,F as nodeMetaPath,a as nodesRoot,g as onDiskMigrationLockPath,T as onDiskMigrationMarkerPath,$ as passivePath,P as reportsDir,C as reviewBranchPath,s as reviewDir,E as reviewForkBranchPath,d as reviewResultPath,m as reviewsRoot,A as sessionListCachePath,U as sessionPtrPath,L as situationalContextPath,X as transcriptPath,N as viewSocketPath};
+var P=Object.defineProperty;var r=(t,n)=>P(t,"name",{value:n,configurable:!0});import{join as e}from"node:path";import{mkdirSync as c}from"node:fs";import{appSpace as x,runtimeRoot as j,socketDir as m}from"../layout.js";import{envGrantee as k,envNodeId as R}from"../../shared/env.js";import{withDirBeneath as h}from"../spaces/open-beneath.js";function i(){return j()}r(i,"crtrHome");function A(){return e(i(),"canvas.db")}r(A,"canvasDbPath");function B(){return e(i(),"on-disk-migration.lock")}r(B,"onDiskMigrationLockPath");function L(){return e(i(),"on-disk-migrations.json")}r(L,"onDiskMigrationMarkerPath");function O(t){return e(u(t),"view.sock")}r(O,"viewSocketPath");function D(){return e(i(),"nodes")}r(D,"nodesRoot");function w(){return e(i(),"reviews")}r(w,"reviewsRoot");function l(t){return p(t),e(w(),t)}r(l,"reviewDir");function $(t){return e(l(t),"result.json")}r($,"reviewResultPath");function H(t){c(l(t),{recursive:!0,mode:448})}r(H,"ensureReviewDir");function X(){return e(m(),"api.sock")}r(X,"apiSocketPath");function F(){return e(i(),"session-list-cache.json")}r(F,"sessionListCachePath");const b=128;function g(t){return typeof t=="string"&&t!==""&&t!=="."&&t!==".."&&!/[\\/\0]/u.test(t)&&Buffer.byteLength(t,"utf8")<=b}r(g,"isSafeNodeId");function p(t){if(!g(t))throw new TypeError("node_id must be a non-empty path segment of at most 128 UTF-8 bytes")}r(p,"assertSafeNodeId");function a(t){return p(t),e(D(),t)}r(a,"nodeRecordDir");const s=a;function f(t,n){p(t);const o=n??(R()===t?k():void 0);if(!o)throw new Error(`node ${t} has no app assignment`);return e(x(o).nodes,t)}r(f,"nodeAgentDir");function u(t){return p(t),process.platform==="linux"?e(m(),"nodes",t):e(a(t),"run")}r(u,"nodeRunDir");function N(t,n){return e(f(t,n),"context")}r(N,"contextDir");function G(t,n,o){return t.replaceAll("$CRTR_CONTEXT_DIR",N(n,o)).replaceAll("$CRTR_NODE_ID",n)}r(G,"interpolateNodePaths");function _(t){return e(a(t),"job")}r(_,"jobDir");function S(t){return e(u(t),"job")}r(S,"nodeRunJobDir");function J(t,n){return e(f(t,n),"reports")}r(J,"reportsDir");function U(t){return e(s(t),"messages")}r(U,"messagesDir");function Y(t){return e(s(t),"meta.json")}r(Y,"nodeMetaPath");function q(t){return e(s(t),"inbox.jsonl")}r(q,"inboxPath");function z(t){return e(u(t),"situational-context.md")}r(z,"situationalContextPath");function K(t){return e(s(t),"passive.jsonl")}r(K,"passivePath");function Q(t){return e(s(t),"transcript.jsonl")}r(Q,"transcriptPath");function V(t){return e(s(t),"session.ptr")}r(V,"sessionPtrPath");function W(t){return e(u(t),"injected-docs.json")}r(W,"injectedDocsPath");function Z(t,n){const o=f(t,n);c(a(t),{recursive:!0}),c(_(t),{recursive:!0});for(const v of["context","reports","attachments","worktree"])h(x(n).nodes,e(o,v),()=>{},!0);h(u(t),S(t),()=>{},!0)}r(Z,"ensureNodeDirs");function I(){c(D(),{recursive:!0})}r(I,"ensureHome");export{X as apiSocketPath,A as canvasDbPath,N as contextDir,i as crtrHome,I as ensureHome,Z as ensureNodeDirs,H as ensureReviewDir,q as inboxPath,W as injectedDocsPath,G as interpolateNodePaths,g as isSafeNodeId,_ as jobDir,U as messagesDir,f as nodeAgentDir,s as nodeDir,Y as nodeMetaPath,a as nodeRecordDir,u as nodeRunDir,S as nodeRunJobDir,D as nodesRoot,B as onDiskMigrationLockPath,L as onDiskMigrationMarkerPath,K as passivePath,J as reportsDir,l as reviewDir,$ as reviewResultPath,w as reviewsRoot,F as sessionListCachePath,V as sessionPtrPath,z as situationalContextPath,Q as transcriptPath,O as viewSocketPath};

package/dist/core/canvas/render-source.d.ts

@@ -108,7 +108,7 @@ export interface DashboardRow {
      *  Undefined for rows built by other paths (dashboardRowsFromSource). */
     srcRow?: NodeRow;
 }
-export declare function readGoalText(nodeId: string): string | undefined;
+export declare function readGoalText(contextPath: string): string | undefined;
 /** The newest pushed report, reduced to what a preview panel can use. */
 export interface NodeReportPreview {
     /** final | update | urgent (frontmatter, else the filename suffix). */
@@ -123,7 +123,7 @@ export interface NodeReportPreview {
 /** The node's newest report, read straight off disk. Report filenames lead with a
  *  compact timestamp, so the lexicographic maximum is the latest one — no stat of
  *  the whole directory. Never throws; undefined when the node pushed nothing. */
-export declare function readNewestReport(nodeId: string): NodeReportPreview | undefined;
+export declare function readNewestReport(reportPath: string): NodeReportPreview | undefined;
 interface SessionParts {
     prompts?: string;
     lastAssistant?: string;

package/dist/core/canvas/render-source.js

@@ -1,10 +1,7 @@
-var Y=Object.defineProperty;var f=(t,e)=>Y(t,"name",{value:e,configurable:!0});import{existsSync as b,readFileSync as _,readdirSync as B,statSync as U,openSync as W,readSync as H,closeSync as Z}from"node:fs";import{join as T}from"node:path";import{RemoteCanvasSource as x}from"./remote-canvas-source.js";import{fullName as $}from"./labels.js";import{jobDir as q,contextDir as K,reportsDir as R}from"./paths.js";import{readNodeRecap as Q}from"./node-recap.js";import{parseFrontmatterGeneric as X}from"../frontmatter.js";import{isFrozenRow as v,resolveNodeVisual as C,faultSummary as P}from"./status-glyph.js";import{parseCard as L}from"../../shared/generated-context.js";function j(t){return t===void 0||t===0?"0k":`${Math.floor(t/1e3)}k`}f(j,"fmtCtx");function I(t,e,n,i,c,a){if(t===void 0)return`${n}${i}? <missing meta: ${e}>`;const s=t.fault??null,r=C(t.status,{hanging:s,frozen:v(t)}).glyph,o=c?"0k":j(t.telemetry_tokens_in??void 0),u=a[e]??0,m=u>0?` \u2691${u}`:"",d=s!==null?` \xB7 ${P(s)}`:"";return`${n}${i}${r} ${$(t)} [${t.kind}/${t.mode}] ctx ${o}${m}${d}`}f(I,"nodeLineFromSource");async function z(t,e,n,i,c,a,s,r,o){if(a.has(n))return;a.add(n);const u=c?"\u2514\u2500 ":"\u251C\u2500 ";s.push(I(e.get(n),n,i,u,r,o));const m=i+(c?"   ":"\u2502  ");let d;try{d=await t.subscriptionsOf(n)}catch(l){s.push(`${m}\u26A0 children unavailable: ${l instanceof Error?l.message:String(l)}`);return}for(let l=0;l<d.length;l++){const h=d[l],S=l===d.length-1;if(a.has(h.node_id)){const N=S?"\u2514\u2500 ":"\u251C\u2500 ";s.push(`${m}${N}\u21BA <cycle: ${h.node_id}>`);continue}await z(t,e,h.node_id,m,S,a,s,r,o)}}f(z,"walkTreeFromSource");async function tt(t,e,n,i,c){const a=t instanceof x,s=new Map((n??await t.listNodes()).map(p=>[p.node_id,p])),r=s.get(e);if(r===void 0)return`? <missing node: ${e}>`;let o=i,u=c??null;if(o===void 0)try{o=await t.ticketCountsForView(e)}catch(p){o={},u=p instanceof Error?p.message:String(p)}const m=a?"0k":j(r.telemetry_tokens_in??void 0),d=o[e]??0,l=d>0?` \u2691${d}`:"",h=r.fault??null,S=C(r.status,{hanging:h,frozen:v(r)}).glyph,N=h!==null?` \xB7 ${P(h)}`:"",g=[];g.push(`${S} ${$(r)} [${r.kind}/${r.mode}] ctx ${m}${l}${N}`);const V=new Set([e]);let y;try{y=await t.subscriptionsOf(e)}catch(p){g.push(`\u26A0 children unavailable: ${p instanceof Error?p.message:String(p)}`),y=[]}for(let p=0;p<y.length;p++){const G=y[p],J=p===y.length-1;await z(t,s,G.node_id,"",J,V,g,a,o)}return u!==null&&g.push(`Tickets: unavailable (${u}).`),g.join(`
-`)}f(tt,"renderTreeFromSource");async function Nt(t,e,n,i){const c=e??await t.listNodes();if(c.length===0)return"(canvas is empty)";const a=c.filter(r=>r.parent===null&&(r.status==="active"||r.status==="idle"));if(a.length===0)return"(no live roots)";const s=[];for(const r of a)s.push(await tt(t,r.node_id,c,n,i));return s.join(`
+var H=Object.defineProperty;var u=(t,e)=>H(t,"name",{value:e,configurable:!0});import{conversationIdFromPath as v,conversationStore as A,ConversationNotFoundError as C}from"../conversation-store/index.js";import{dirname as b,join as N}from"node:path";import{readdirBeneath as J,readFileBeneath as F,readTextBeneathIfExists as U}from"../spaces/open-beneath.js";import{RemoteCanvasSource as y}from"./remote-canvas-source.js";import{fullName as $}from"./labels.js";import{nodeRunDir as Z,nodeRunJobDir as q,contextDir as K,reportsDir as Q}from"./paths.js";import{readNodeRecap as X}from"./node-recap.js";import{parseFrontmatterGeneric as I}from"../frontmatter.js";import{isFrozenRow as P,resolveNodeVisual as L,faultSummary as E}from"./status-glyph.js";import{parseCard as j}from"../../shared/generated-context.js";function w(t){return t===void 0||t===0?"0k":`${Math.floor(t/1e3)}k`}u(w,"fmtCtx");function tt(t,e,n,i,r,s){if(t===void 0)return`${n}${i}? <missing meta: ${e}>`;const a=t.fault??null,o=L(t.status,{hanging:a,frozen:P(t)}).glyph,c=r?"0k":w(t.telemetry_tokens_in??void 0),l=s[e]??0,h=l>0?` \u2691${l}`:"",m=a!==null?` \xB7 ${E(a)}`:"";return`${n}${i}${o} ${$(t)} [${t.kind}/${t.mode}] ctx ${c}${h}${m}`}u(tt,"nodeLineFromSource");async function M(t,e,n,i,r,s,a,o,c){if(s.has(n))return;s.add(n);const l=r?"\u2514\u2500 ":"\u251C\u2500 ";a.push(tt(e.get(n),n,i,l,o,c));const h=i+(r?"   ":"\u2502  ");let m;try{m=await t.subscriptionsOf(n)}catch(f){a.push(`${h}\u26A0 children unavailable: ${f instanceof Error?f.message:String(f)}`);return}for(let f=0;f<m.length;f++){const d=m[f],x=f===m.length-1;if(s.has(d.node_id)){const S=x?"\u2514\u2500 ":"\u251C\u2500 ";a.push(`${h}${S}\u21BA <cycle: ${d.node_id}>`);continue}await M(t,e,d.node_id,h,x,s,a,o,c)}}u(M,"walkTreeFromSource");async function et(t,e,n,i,r){const s=t instanceof y,a=new Map((n??await t.listNodes()).map(p=>[p.node_id,p])),o=a.get(e);if(o===void 0)return`? <missing node: ${e}>`;let c=i,l=r??null;if(c===void 0)try{c=await t.ticketCountsForView(e)}catch(p){c={},l=p instanceof Error?p.message:String(p)}const h=s?"0k":w(o.telemetry_tokens_in??void 0),m=c[e]??0,f=m>0?` \u2691${m}`:"",d=o.fault??null,x=L(o.status,{hanging:d,frozen:P(o)}).glyph,S=d!==null?` \xB7 ${E(d)}`:"",g=[];g.push(`${x} ${$(o)} [${o.kind}/${o.mode}] ctx ${h}${f}${S}`);const G=new Set([e]);let _;try{_=await t.subscriptionsOf(e)}catch(p){g.push(`\u26A0 children unavailable: ${p instanceof Error?p.message:String(p)}`),_=[]}for(let p=0;p<_.length;p++){const Y=_[p],W=p===_.length-1;await M(t,a,Y.node_id,"",W,G,g,s,c)}return l!==null&&g.push(`Tickets: unavailable (${l}).`),g.join(`
+`)}u(et,"renderTreeFromSource");async function Tt(t,e,n,i){const r=e??await t.listNodes();if(r.length===0)return"(canvas is empty)";const s=r.filter(o=>o.parent===null&&(o.status==="active"||o.status==="idle"));if(s.length===0)return"(no live roots)";const a=[];for(const o of s)a.push(await et(t,o.node_id,r,n,i));return a.join(`
 
-`)}f(Nt,"renderForestFromSource");const M=4096;function et(t){try{const e=T(K(t),"initial-prompt.md");if(!b(e))return;const n=_(e,"utf8").trim();return n===""?void 0:n.length>M?n.slice(0,M):n}catch{return}}f(et,"readGoalText");const E=1024;function nt(t){const e=t.match(/^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})(\d{3})?$/);if(e!==null)return`${e[1]}-${e[2]}-${e[3]}T${e[4]}:${e[5]}:${e[6]}.${e[7]??"000"}Z`}f(nt,"reportStampToIso");function it(t){let e;try{for(const l of B(R(t)))l.endsWith(".md")&&(e===void 0||l>e)&&(e=l)}catch{return}if(e===void 0)return;let n;try{n=_(T(R(t),e),"utf8")}catch{return}const{data:i,body:c}=X(n),a=e.replace(/\.md$/,""),s=typeof i?.kind=="string"?i.kind:a.split("-").pop()??"report",r=typeof i?.ts=="string"?i.ts:nt(a.split("-")[0]??"")??"",o=c.split(`
-`);let u="",m=c;for(let l=0;l<o.length;l++){const h=(o[l]??"").trim();if(h!==""){u=h.startsWith("#")?h.replace(/^#+\s*/,"").trim():h,m=o.slice(l+1).join(`
-`);break}}const d=m.replace(/\s+/g," ").trim();return{kind:s,ts:r,heading:u,body:d.length>E?d.slice(0,E):d}}f(it,"readNewestReport");const rt=1<<20,st=1<<20,ot=4<<20;function w(t,e,n){if(t==null||t==="")return null;try{if(!b(t))return null;const i=U(t).size;if(i<=e+n){const a=_(t,"utf8").split(`
-`);return{head:a,tail:a}}const c=W(t,"r");try{const a=f((o,u)=>{if(u<=0)return[];const m=Buffer.allocUnsafe(u),d=H(c,m,0,u,o);return m.subarray(0,d).toString("utf8").split(`
-`)},"slice"),s=a(0,e),r=a(i-n,n);return s.length>0&&s.pop(),r.length>0&&r.shift(),{head:s,tail:r}}finally{Z(c)}}catch{return null}}f(w,"readSessionWindow");const O=8192,k=2048;function at(t){const e=w(t,rt,st);if(e===null)return{};const n=[];let i=0;for(const s of e.head){if(s===""||s.indexOf('"role":"user"')===-1&&s.indexOf('"role": "user"')===-1)continue;let r;try{r=JSON.parse(s)}catch{continue}if(r.type!=="message"||r.message?.role!=="user")continue;const o=A(r.message.content);if(o===""||L({role:"user",content:o})!==null)continue;const u=o.length>k?o.slice(0,k):o;if(n.push(u),i+=u.length+1,i>=O)break}let c;if(n.length>0){const s=n.join(`
-`);c=s.length>O?s.slice(0,O):s}let a;for(let s=e.tail.length-1;s>=0;s--){const r=e.tail[s];if(r===""||r.indexOf('"role":"assistant"')===-1&&r.indexOf('"role": "assistant"')===-1)continue;let o;try{o=JSON.parse(r)}catch{continue}if(o.type!=="message"||o.message?.role!=="assistant")continue;const u=A(o.message.content);if(u!==""){a=u.length>k?u.slice(0,k):u;break}}return{prompts:c,lastAssistant:a}}f(at,"readSessionParts");const D=120,F=4096;function ct(t){const e=w(t,0,ot);if(e===null)return[];const n=[];for(const i of e.tail){if(i==="")continue;const c=i.indexOf('"role":"user"')!==-1||i.indexOf('"role": "user"')!==-1,a=!c&&(i.indexOf('"role":"assistant"')!==-1||i.indexOf('"role": "assistant"')!==-1);if(!c&&!a)continue;let s;try{s=JSON.parse(i)}catch{continue}if(s.type!=="message")continue;const r=s.message?.role;if(r!=="user"&&r!=="assistant")continue;const o=A(s.message?.content);o!==""&&L({role:r,content:o})===null&&n.push({role:r,text:o.length>F?o.slice(0,F):o})}return n.length>D?n.slice(n.length-D):n}f(ct,"readTranscript");function bt(t){if(t==null||t==="")return!1;let e;try{if(!b(t))return!1;e=_(t,"utf8").split(`
-`)}catch{return!1}for(const n of e){if(n===""||n.indexOf('"role":"assistant"')===-1&&n.indexOf('"role": "assistant"')===-1)continue;let i;try{i=JSON.parse(n)}catch{continue}if(!(i.type!=="message"||i.message?.role!=="assistant")&&ut(i.message.content))return!0}return!1}f(bt,"nodeHasAssistantMessage");function ut(t){if(typeof t=="string")return t.trim()!=="";if(!Array.isArray(t))return!1;for(const e of t){if(e===null||typeof e!="object")continue;const n=e,i=(n.type??"").toLowerCase();if(i==="text"){if(typeof n.text=="string"&&n.text.trim()!=="")return!0}else if(i==="thinking"){if(typeof n.thinking=="string"&&n.thinking.trim()!=="")return!0}else return!0}return!1}f(ut,"assistantContentIsSubstantive");function A(t){if(typeof t=="string")return t.trim();if(!Array.isArray(t))return"";const e=[];for(const n of t)if(n!==null&&typeof n=="object"){const i=n;i.type==="text"&&typeof i.text=="string"&&e.push(i.text)}return e.join(" ").trim()}f(A,"extractUserText");function ft(t,e,n=!1){if(!n&&e!==null&&e!==void 0){const c=Date.parse(e);if(!Number.isNaN(c))return c}const i=Date.parse(t);return Number.isNaN(i)?0:i}f(ft,"sessionMtime");function lt(t){if(t.status!=="active")return!1;try{const e=JSON.parse(_(T(q(t.node_id),"attach.json"),"utf8"));return typeof e.viewers=="number"&&e.viewers>0}catch{return!1}}f(lt,"hasLiveBrokerViewer");function dt(t,e,n){const i=t.status==="active"||t.status==="idle",c=t.fault??null;return{node_id:t.node_id,name:$(t),handle:t.name,description:t.description,status:t.status,frozen_at:t.frozen_at??null,terminal_reason:t.terminal_reason??null,kind:t.kind,mode:t.mode,ctx_tokens:n?0:t.telemetry_tokens_in??0,asks:0,cwd:t.cwd,profile_id:t.profile_id,created:t.created,lifecycle:t.lifecycle,finalized:t.final_report!=null,mtimeMs:ft(t.created,t.telemetry_updated_at,n),streaming:c===null&&i&&t.streaming===!0,hanging:c,viewed:n?!1:e.has(t.node_id)||lt(t),srcRow:t}}f(dt,"dashboardRowFromNodeRow");async function Tt(t,e,n,i){const c=t instanceof x,a=i??await t.ticketCountsForView(e).catch(()=>({})),s=new Map((n??await t.listNodes()).map(o=>[o.node_id,o]));return[e,...await t.view(e)].flatMap(o=>{const u=s.get(o);return u===void 0?[]:[{node_id:o,name:$(u),handle:u.name,description:u.description,status:u.status,frozen_at:u.frozen_at??null,terminal_reason:u.terminal_reason??null,kind:u.kind,mode:u.mode,ctx_tokens:c?0:u.telemetry_tokens_in??0,asks:a[o]??0,cwd:u.cwd,profile_id:u.profile_id,created:u.created}]})}f(Tt,"dashboardRowsFromSource");async function Ot(t,e=new Set,n=!1,i){const c=t instanceof x,a=c?new Set:e;return(i??await t.listNodes(n?{status:["active","idle"]}:void 0)).map(r=>dt(r,a,c))}f(Ot,"dashboardRowsAllFromSource");async function At(t,e,n){const i=e.filter(a=>a.enriched!==!0);if(i.length===0)return;const c=n??{};for(const a of i)a.asks=c[a.node_id]??0,a.enriched=!0}f(At,"enrichRowsFromSource");async function Rt(t,e){if(e.previewLoaded===!0)return e;const n=t instanceof x;if(e.goal=n?void 0:et(e.node_id),!n){const i=await t.getNode(e.node_id),{prompts:c,lastAssistant:a}=at(i?.pi_session_file);e.prompts=c,e.lastAssistant=a,e.recap=Q(e.node_id),e.report=it(e.node_id)}return e.previewLoaded=!0,e}f(Rt,"loadPreviewFromSource");async function vt(t,e){if(e.transcriptLoaded===!0)return e;if(t instanceof x)return e.transcript=[],e.transcriptLoaded=!0,e;const n=await t.getNode(e.node_id);return e.transcript=ct(n?.pi_session_file),e.transcriptLoaded=!0,e}f(vt,"loadTranscriptFromSource");export{dt as dashboardRowFromNodeRow,Ot as dashboardRowsAllFromSource,Tt as dashboardRowsFromSource,At as enrichRowsFromSource,j as fmtCtx,Rt as loadPreviewFromSource,vt as loadTranscriptFromSource,bt as nodeHasAssistantMessage,et as readGoalText,it as readNewestReport,at as readSessionParts,ct as readTranscript,Nt as renderForestFromSource,tt as renderTreeFromSource,ft as sessionMtime};
+`)}u(Tt,"renderForestFromSource");const O=4096;function nt(t){try{const e=U(b(t),N(t,"initial-prompt.md"))?.trim()??"";return e===""?void 0:e.length>O?e.slice(0,O):e}catch{return}}u(nt,"readGoalText");const z=1024;function it(t){const e=t.match(/^(\d{4})(\d{2})(\d{2})T(\d{2})(\d{2})(\d{2})(\d{3})?$/);if(e!==null)return`${e[1]}-${e[2]}-${e[3]}T${e[4]}:${e[5]}:${e[6]}.${e[7]??"000"}Z`}u(it,"reportStampToIso");function rt(t){let e;try{for(const f of J(b(t),t)){const d=f.name;!f.isFile()||!d.endsWith(".md")||(e===void 0||d>e)&&(e=d)}}catch{return}if(e===void 0)return;let n;try{n=F(b(t),N(t,e)).toString("utf8")}catch{return}const{data:i,body:r}=I(n),s=e.replace(/\.md$/,""),a=typeof i?.kind=="string"?i.kind:s.split("-").pop()??"report",o=typeof i?.ts=="string"?i.ts:it(s.split("-")[0]??"")??"",c=r.split(`
+`);let l="",h=r;for(let f=0;f<c.length;f++){const d=(c[f]??"").trim();if(d!==""){l=d.startsWith("#")?d.replace(/^#+\s*/,"").trim():d,h=c.slice(f+1).join(`
+`);break}}const m=h.replace(/\s+/g," ").trim();return{kind:a,ts:o,heading:l,body:m.length>z?m.slice(0,z):m}}u(rt,"readNewestReport");const st=1<<20,ot=1<<20,at=4<<20;function B(t,e,n){if(t==null||t==="")return null;const i=v(t);if(i===null)return null;try{const{entries:r,tail:s}=A().read(i,{head:e,tail:n});return{head:r,tail:s??r}}catch(r){if(r instanceof C)return null;throw r}}u(B,"readSessionWindow");const T=8192,k=2048;function ct(t){const e=B(t,st,ot);if(e===null)return{};const n=[];let i=0;for(const a of e.head){if(a.type!=="message"||a.message.role!=="user")continue;const o=R(a.message.content);if(o===""||j({role:"user",content:o})!==null)continue;const c=o.length>k?o.slice(0,k):o;if(n.push(c),i+=c.length+1,i>=T)break}let r;if(n.length>0){const a=n.join(`
+`);r=a.length>T?a.slice(0,T):a}let s;for(let a=e.tail.length-1;a>=0;a--){const o=e.tail[a];if(o.type!=="message"||o.message.role!=="assistant")continue;const c=R(o.message.content);if(c!==""){s=c.length>k?c.slice(0,k):c;break}}return{prompts:r,lastAssistant:s}}u(ct,"readSessionParts");const D=120,V=4096;function lt(t){const e=B(t,0,at);if(e===null)return[];const n=[];for(const i of e.tail){if(i.type!=="message")continue;const r=i.message.role;if(r!=="user"&&r!=="assistant")continue;const s=R(i.message.content);s!==""&&j({role:r,content:s})===null&&n.push({role:r,text:s.length>V?s.slice(0,V):s})}return n.length>D?n.slice(n.length-D):n}u(lt,"readTranscript");function Rt(t){if(t==null||t==="")return!1;const e=v(t);if(e===null)return!1;let n;try{n=A().read(e).entries}catch(i){if(i instanceof C)return!1;throw i}for(const i of n)if(!(i.type!=="message"||i.message.role!=="assistant")&&ut(i.message.content))return!0;return!1}u(Rt,"nodeHasAssistantMessage");function ut(t){if(typeof t=="string")return t.trim()!=="";if(!Array.isArray(t))return!1;for(const e of t){if(e===null||typeof e!="object")continue;const n=e,i=(n.type??"").toLowerCase();if(i==="text"){if(typeof n.text=="string"&&n.text.trim()!=="")return!0}else if(i==="thinking"){if(typeof n.thinking=="string"&&n.thinking.trim()!=="")return!0}else return!0}return!1}u(ut,"assistantContentIsSubstantive");function R(t){if(typeof t=="string")return t.trim();if(!Array.isArray(t))return"";const e=[];for(const n of t)if(n!==null&&typeof n=="object"){const i=n;i.type==="text"&&typeof i.text=="string"&&e.push(i.text)}return e.join(" ").trim()}u(R,"extractUserText");function ft(t,e,n=!1){if(!n&&e!==null&&e!==void 0){const r=Date.parse(e);if(!Number.isNaN(r))return r}const i=Date.parse(t);return Number.isNaN(i)?0:i}u(ft,"sessionMtime");function dt(t){if(t.status!=="active")return!1;try{const e=JSON.parse(F(Z(t.node_id),N(q(t.node_id),"attach.json")).toString("utf8"));return typeof e.viewers=="number"&&e.viewers>0}catch{return!1}}u(dt,"hasLiveBrokerViewer");function pt(t,e,n){const i=t.status==="active"||t.status==="idle",r=t.fault??null;return{node_id:t.node_id,name:$(t),handle:t.name,description:t.description,status:t.status,frozen_at:t.frozen_at??null,terminal_reason:t.terminal_reason??null,kind:t.kind,mode:t.mode,ctx_tokens:n?0:t.telemetry_tokens_in??0,asks:0,cwd:t.cwd,profile_id:t.profile_id,created:t.created,lifecycle:t.lifecycle,finalized:t.final_report!=null,mtimeMs:ft(t.created,t.telemetry_updated_at,n),streaming:r===null&&i&&t.streaming===!0,hanging:r,viewed:n?!1:e.has(t.node_id)||dt(t),srcRow:t}}u(pt,"dashboardRowFromNodeRow");async function vt(t,e,n,i){const r=t instanceof y,s=i??await t.ticketCountsForView(e).catch(()=>({})),a=new Map((n??await t.listNodes()).map(c=>[c.node_id,c]));return[e,...await t.view(e)].flatMap(c=>{const l=a.get(c);return l===void 0?[]:[{node_id:c,name:$(l),handle:l.name,description:l.description,status:l.status,frozen_at:l.frozen_at??null,terminal_reason:l.terminal_reason??null,kind:l.kind,mode:l.mode,ctx_tokens:r?0:l.telemetry_tokens_in??0,asks:s[c]??0,cwd:l.cwd,profile_id:l.profile_id,created:l.created}]})}u(vt,"dashboardRowsFromSource");async function At(t,e=new Set,n=!1,i){const r=t instanceof y,s=r?new Set:e;return(i??await t.listNodes(n?{status:["active","idle"]}:void 0)).map(o=>pt(o,s,r))}u(At,"dashboardRowsAllFromSource");async function Ct(t,e,n){const i=e.filter(s=>s.enriched!==!0);if(i.length===0)return;const r=n??{};for(const s of i)s.asks=r[s.node_id]??0,s.enriched=!0}u(Ct,"enrichRowsFromSource");async function Ft(t,e){if(e.previewLoaded===!0)return e;if(!(t instanceof y)){const i=await t.getNode(e.node_id),r=i?.paths,s=r===void 0?e.srcRow?.grantee??(await t.getRow(e.node_id))?.grantee:void 0;if(r===void 0&&!s)throw new Error(`node ${e.node_id} has no app assignment`);const a=r?.context_dir??K(e.node_id,s),o=r?.reports_dir??Q(e.node_id,s);e.goal=nt(a);const{prompts:c,lastAssistant:l}=ct(i?.pi_session_file);e.prompts=c,e.lastAssistant=l,e.recap=X(e.node_id),e.report=rt(o)}return e.previewLoaded=!0,e}u(Ft,"loadPreviewFromSource");async function Pt(t,e){if(e.transcriptLoaded===!0)return e;if(t instanceof y)return e.transcript=[],e.transcriptLoaded=!0,e;const n=await t.getNode(e.node_id);return e.transcript=lt(n?.pi_session_file),e.transcriptLoaded=!0,e}u(Pt,"loadTranscriptFromSource");export{pt as dashboardRowFromNodeRow,At as dashboardRowsAllFromSource,vt as dashboardRowsFromSource,Ct as enrichRowsFromSource,w as fmtCtx,Ft as loadPreviewFromSource,Pt as loadTranscriptFromSource,Rt as nodeHasAssistantMessage,nt as readGoalText,rt as readNewestReport,ct as readSessionParts,lt as readTranscript,Tt as renderForestFromSource,et as renderTreeFromSource,ft as sessionMtime};

package/dist/core/canvas/sessions.d.ts

@@ -1,3 +1,4 @@
+import { type ConversationStore } from '../conversation-store/index.js';
 export interface SessionBinding {
     bindingId: string;
     sessionId: string | null;
@@ -31,3 +32,20 @@ export declare function transferSession(input: {
 }): 'transferred' | 'shutdown' | 'changed';
 export declare function unbindSession(nodeId: string): void;
 export declare function setCyclePending(nodeId: string, pending: boolean): void;
+export declare function conversationOwner(conversationId: string): string | null;
+/** Map only the indexed conversation paths; repair each file on first use. */
+export declare function openCanvasConversationStore(root: string): ConversationStore & {
+    recover(rows: Array<{
+        session_id: string;
+        node_id: string;
+        transcript_path: string | null;
+    }>): void;
+    repair(id: string): void;
+};
+export declare function repairRunConversations(runId: string): void;
+/** Open the canvas conversation store from the user `store` settings, install it in this
+ *  process, and serve it for brokers. Unset settings use pi's sessions dir and
+ *  `<CRTR_HOME>/store.sock`. */
+export declare function serveCanvasConversationStore(): Promise<{
+    close(): Promise<void>;
+}>;

package/dist/core/canvas/sessions.js

@@ -1 +1,4 @@
-var p=Object.defineProperty;var r=(n,e)=>p(n,"name",{value:e,configurable:!0});import{randomUUID as a}from"node:crypto";import{openDb as d,withCanvasWrite as _}from"./db.js";import{canonicalSessionFile as t}from"./canvas.js";function u(){return new Date().toISOString()}r(u,"now");function c(n,e,s){return n.prepare("SELECT 1 FROM executions WHERE execution_id = ? AND node_id = ? AND state != 'exited'").get(s,e)!==void 0}r(c,"liveExecution");function l(n){return{bindingId:n.binding_id,sessionId:n.session_id??null,nodeId:n.node_id,transcriptPath:n.transcript_path??null,sourceSessionId:n.source_session_id??null,forkEntryId:n.fork_entry_id??null,createdAt:n.created_at,boundAt:n.bound_at,unboundAt:n.unbound_at??null}}r(l,"hydrate");function T(n){const e=d().prepare("SELECT * FROM sessions WHERE node_id = ? AND unbound_at IS NULL").get(n);return e===void 0?null:l(e)}r(T,"readLiveSession");function I(n){return d().prepare("SELECT node_id FROM sessions WHERE transcript_path = ? AND unbound_at IS NULL").get(t(n))?.node_id??null}r(I,"findNodeBySessionFileSql");function g(n,e){return _(s=>{if(!c(s,n,e.executionId))return"shutdown";const i=u(),E=e.transcriptPath===null?null:t(e.transcriptPath),o=s.prepare("SELECT binding_id, session_id FROM sessions WHERE node_id = ? AND unbound_at IS NULL").get(n);return o!==void 0&&o.session_id===e.sessionId?s.prepare("UPDATE sessions SET transcript_path = ?, source_session_id = ?, bound_at = ? WHERE binding_id = ?").run(E,e.sourceSessionId??null,i,o.binding_id):(o!==void 0&&s.prepare("UPDATE sessions SET unbound_at = ? WHERE binding_id = ?").run(i,o.binding_id),s.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at) VALUES (?, ?, ?, ?, ?, NULL, ?, ?)").run(a(),e.sessionId,n,E,e.sourceSessionId??null,i,i)),s.prepare("UPDATE nodes SET cycle_pending = 0 WHERE node_id = ?").run(n),"bound"})}r(g,"bindSession");function U(n,e){_(s=>{const i=u();s.prepare("UPDATE sessions SET unbound_at = ? WHERE node_id = ? AND unbound_at IS NULL").run(i,n),s.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at) VALUES (?, ?, ?, ?, NULL, NULL, ?, ?)").run(a(),e.sessionId,n,e.transcriptPath===null?null:t(e.transcriptPath),i,i),s.prepare("UPDATE nodes SET cycle_pending = 0 WHERE node_id = ?").run(n)})}r(U,"resetSession");function A(n){return _(e=>{if(!c(e,n.toNodeId,n.executionId))return"shutdown";if(e.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND binding_id = ? AND unbound_at IS NULL").get(n.fromNodeId,n.fromBindingId)===void 0)return"changed";const i=u();return e.prepare("UPDATE sessions SET unbound_at = ? WHERE binding_id = ?").run(i,n.fromBindingId),e.prepare("UPDATE sessions SET unbound_at = ? WHERE node_id = ? AND unbound_at IS NULL").run(i,n.toNodeId),e.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at) VALUES (?, ?, ?, ?, NULL, NULL, ?, ?)").run(a(),n.sessionId,n.toNodeId,n.transcriptPath===null?null:t(n.transcriptPath),i,i),e.prepare("UPDATE nodes SET cycle_pending = 0 WHERE node_id = ?").run(n.toNodeId),"transferred"})}r(A,"transferSession");function b(n){d().prepare("UPDATE sessions SET unbound_at = ? WHERE node_id = ? AND unbound_at IS NULL").run(u(),n)}r(b,"unbindSession");function D(n,e){d().prepare("UPDATE nodes SET cycle_pending = ? WHERE node_id = ?").run(e?1:0,n)}r(D,"setCyclePending");export{g as bindSession,I as findNodeBySessionFileSql,T as readLiveSession,U as resetSession,D as setCyclePending,A as transferSession,b as unbindSession};
+var v=Object.defineProperty;var i=(n,e)=>v(n,"name",{value:e,configurable:!0});import{randomUUID as R}from"node:crypto";import{closeSync as C,existsSync as w,openSync as U,readSync as A,statSync as W,truncateSync as g,unlinkSync as m}from"node:fs";import{openDb as d,withCanvasWrite as p}from"./db.js";import{canonicalSessionFile as L}from"./canvas.js";import{join as I}from"node:path";import{readConfig as h}from"../config.js";import{appSpace as y,socketDir as H}from"../layout.js";import{createFileStore as M,conversationStore as F,defaultConversationRoot as x,installConversationStore as D}from"../conversation-store/index.js";import{listenConversationStore as P}from"../conversation-store/listener.js";import{appendConversationEvents as O}from"../../daemon/runs/append-section.js";function f(){return new Date().toISOString()}i(f,"now");function b(n,e,s){return n.prepare("SELECT 1 FROM executions WHERE execution_id = ? AND node_id = ? AND state != 'exited'").get(s,e)!==void 0}i(b,"liveExecution");function B(n){return{bindingId:n.binding_id,sessionId:n.session_id??null,nodeId:n.node_id,transcriptPath:n.transcript_path??null,sourceSessionId:n.source_session_id??null,forkEntryId:n.fork_entry_id??null,createdAt:n.created_at,boundAt:n.bound_at,unboundAt:n.unbound_at??null}}i(B,"hydrate");function en(n){const e=d().prepare("SELECT * FROM sessions WHERE node_id = ? AND unbound_at IS NULL").get(n);return e===void 0?null:B(e)}i(en,"readLiveSession");function sn(n){return d().prepare("SELECT node_id FROM sessions WHERE transcript_path = ? AND unbound_at IS NULL").get(L(n))?.node_id??null}i(sn,"findNodeBySessionFileSql");function on(n,e){return p(s=>{if(!b(s,n,e.executionId))return"shutdown";const o=f(),r=e.transcriptPath===null?null:L(e.transcriptPath),a=s.prepare("SELECT binding_id, session_id FROM sessions WHERE node_id = ? AND unbound_at IS NULL").get(n);if(a!==void 0&&a.session_id===e.sessionId)s.prepare("UPDATE sessions SET transcript_path = ?, source_session_id = ?, bound_at = ? WHERE binding_id = ?").run(r,e.sourceSessionId??null,o,a.binding_id);else{a!==void 0&&s.prepare("UPDATE sessions SET unbound_at = ? WHERE binding_id = ?").run(o,a.binding_id);const t=e.sessionId===null?void 0:s.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND session_id = ? ORDER BY created_at DESC LIMIT 1").get(n,e.sessionId);t?s.prepare("UPDATE sessions SET transcript_path = ?, source_session_id = ?, bound_at = ?, unbound_at = NULL WHERE binding_id = ?").run(r,e.sourceSessionId??null,o,t.binding_id):s.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at) VALUES (?, ?, ?, ?, ?, NULL, ?, ?)").run(R(),e.sessionId,n,r,e.sourceSessionId??null,o,o)}return s.prepare("UPDATE nodes SET cycle_pending = 0 WHERE node_id = ?").run(n),"bound"})}i(on,"bindSession");function rn(n,e){p(s=>{const o=f();s.prepare("UPDATE sessions SET unbound_at = ? WHERE node_id = ? AND unbound_at IS NULL").run(o,n),s.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at) VALUES (?, ?, ?, ?, NULL, NULL, ?, ?)").run(R(),e.sessionId,n,e.transcriptPath===null?null:L(e.transcriptPath),o,o),s.prepare("UPDATE nodes SET cycle_pending = 0 WHERE node_id = ?").run(n)})}i(rn,"resetSession");function tn(n){return p(e=>{if(!b(e,n.toNodeId,n.executionId))return"shutdown";if(e.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND binding_id = ? AND unbound_at IS NULL").get(n.fromNodeId,n.fromBindingId)===void 0)return"changed";if(e.prepare("SELECT run_id FROM nodes WHERE node_id IN (?, ?) AND run_id IS NOT NULL LIMIT 1").get(n.fromNodeId,n.toNodeId))throw new Error("run conversation transfer is not supported");const r=f();return e.prepare("UPDATE sessions SET unbound_at = ? WHERE binding_id = ?").run(r,n.fromBindingId),e.prepare("UPDATE sessions SET unbound_at = ? WHERE node_id = ? AND unbound_at IS NULL").run(r,n.toNodeId),e.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at) VALUES (?, ?, ?, ?, NULL, NULL, ?, ?)").run(R(),n.sessionId,n.toNodeId,n.transcriptPath===null?null:L(n.transcriptPath),r,r),e.prepare("UPDATE nodes SET cycle_pending = 0 WHERE node_id = ?").run(n.toNodeId),"transferred"})}i(tn,"transferSession");function dn(n){d().prepare("UPDATE sessions SET unbound_at = ? WHERE node_id = ? AND unbound_at IS NULL").run(f(),n)}i(dn,"unbindSession");function an(n,e){d().prepare("UPDATE nodes SET cycle_pending = ? WHERE node_id = ?").run(e?1:0,n)}i(an,"setCyclePending");const T="unbound_at IS NULL DESC, created_at DESC, rowid DESC";function _n(n){return d().prepare(`SELECT node_id FROM sessions WHERE session_id = ? ORDER BY ${T} LIMIT 1`).get(n)?.node_id??null}i(_n,"conversationOwner");const $={appendSection:i((n,e,s)=>{const o=e.kind==="create"?e:void 0;o&&p(r=>{if(!r.prepare("SELECT node_id FROM nodes WHERE node_id = ?").get(o.nodeId))throw new Error(`missing conversation owner ${o.nodeId}`);const t=f();r.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at, unbound_at, event_offset) VALUES (?, ?, ?, ?, ?, NULL, ?, ?, ?, 0)").run(R(),n,o.nodeId,o.path,o.sourceId??null,t,t,t)}),p(r=>{const a=r.prepare(`SELECT node_id, binding_id, input_ids_json FROM sessions WHERE session_id = ? ORDER BY ${T} LIMIT 1`).get(n),t=o?o.nodeId:a?.node_id;if(!t)throw new Error(`conversation ${n} has no active owner`);const u=r.prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(t);if(!u)throw new Error(`cannot write conversation ${n}: missing node ${t}`);if(e.kind==="replace"&&u.run_id!==null)throw new Error(`run conversation ${n} is append-only; replace refused`);const l=a.binding_id,S=s();if(u.run_id!==null&&e.kind!=="replace"){const E=o?.sourceId?[]:e.entries,_=O(r,u.run_id,t,E,JSON.parse(a?.input_ids_json??"[]"));r.prepare("UPDATE sessions SET event_offset = ?, indexed_entry_id = ?, input_ids_json = ? WHERE binding_id = ?").run(S,E.at(-1)?.id??null,JSON.stringify(_),l)}})},"appendSection"),abortCreate(n){d().prepare("DELETE FROM sessions WHERE session_id = ? AND event_offset = 0").run(n)},delete(n){d().prepare("DELETE FROM sessions WHERE session_id = ?").run(n)},pathFor(n){return d().prepare(`SELECT transcript_path FROM sessions WHERE session_id = ? ORDER BY ${T} LIMIT 1`).get(n)?.transcript_path??void 0},createPath(n,e){const s=d().prepare("SELECT grantee FROM nodes WHERE node_id = ?").get(n);if(!s)throw new Error(`missing conversation owner ${n}`);return I(y(s.grantee).conversations,n,`${e.timestamp.replace(/[:.]/g,"-")}_${e.id}.jsonl`)},repair(n,e){k(n,e)},owners(){const n=new Map,e=d().prepare(`SELECT session_id, node_id FROM sessions WHERE session_id IS NOT NULL ORDER BY session_id, ${T}`).all();for(const s of e)n.has(s.session_id)||n.set(s.session_id,s.node_id);return n}};function k(n,e){const s=d().prepare(`SELECT s.binding_id, s.node_id, s.event_offset, s.input_ids_json, s.source_session_id, n.run_id
+    FROM sessions s JOIN nodes n ON n.node_id = s.node_id WHERE s.session_id = ? ORDER BY s.unbound_at IS NULL DESC, s.created_at DESC, s.rowid DESC LIMIT 1`).get(n);if(!s?.run_id||s.event_offset===null)return;if(s.event_offset===0&&!w(e)){d().prepare("DELETE FROM sessions WHERE binding_id = ?").run(s.binding_id);return}const o=W(e).size;if(o<s.event_offset)throw new Error(`conversation shorter than indexed offset: ${n}`);if(o===s.event_offset)return;const r=U(e,"r"),a=[];try{const _=Buffer.allocUnsafe(65536);for(let c=s.event_offset;c<o;){const N=A(r,_,0,Math.min(_.length,o-c),c);if(!N)throw new Error(`conversation read ended early: ${n}`);a.push(Buffer.from(_.subarray(0,N))),c+=N}}finally{C(r)}const t=Buffer.concat(a).toString("utf8"),u=t.lastIndexOf(`
+`);if(u<0){s.event_offset===0?(m(e),d().prepare("DELETE FROM sessions WHERE binding_id = ?").run(s.binding_id)):g(e,s.event_offset);return}const l=t.slice(0,u+1),S=l.split(`
+`).filter(Boolean).map(_=>JSON.parse(_)).filter(_=>_.type!=="session"),E=s.event_offset+Buffer.byteLength(l);E<o&&g(e,E),p(_=>{const c=s.source_session_id?[]:O(_,s.run_id,s.node_id,S,JSON.parse(s.input_ids_json));_.prepare("UPDATE sessions SET event_offset = ?, indexed_entry_id = ?, input_ids_json = ? WHERE binding_id = ?").run(E,S.at(-1)?.id??null,JSON.stringify(c),s.binding_id)})}i(k,"repairConversationTail");function j(n){return M(n,$)}i(j,"openCanvasConversationStore");function un(n){const e=d().prepare("SELECT DISTINCT s.session_id FROM sessions s JOIN nodes n ON n.node_id = s.node_id WHERE n.run_id = ? AND s.session_id IS NOT NULL").all(n),s=F();for(const o of e)s.repair?.(o.session_id)}i(un,"repairRunConversations");async function En(){const n=h("user").store,e=n?.address??I(H(),"store.sock"),s=j(n?.root??x());D(s),process.env.CRTR_STORE_ADDRESS=e;const o=await P(e,s);return{async close(){await o.close(),D(void 0)}}}i(En,"serveCanvasConversationStore");export{on as bindSession,_n as conversationOwner,sn as findNodeBySessionFileSql,j as openCanvasConversationStore,en as readLiveSession,un as repairRunConversations,rn as resetSession,En as serveCanvasConversationStore,an as setCyclePending,tn as transferSession,dn as unbindSession};

package/dist/core/canvas/types.d.ts

@@ -55,12 +55,7 @@ export interface LaunchSpec {
     /** Model id/pattern passed to pi `--model`. */
     model?: string;
     /** Original logical family/strength preference, retained after normalization. */
-    modelIntent?: {
-        family: string;
-        strength: import('../../types.js').ModelStrength;
-    };
-    /** True only for a caller's explicit concrete `provider/id` override. */
-    modelProviderPinned?: boolean;
+    modelIntent?: import('../../types.js').ModelIntent;
     /** True for an exact-consult launch: `model` is the verbatim captured
      *  `provider/id:thinking` spec, bypassing the review floor/normalize and
      *  every launch-time/turn-time provider fallback — an unavailable exact
@@ -259,6 +254,16 @@ export interface NodeIdentity {
     model_override?: string | null;
     /** Per-run allow-list; null inherits the full runtime vocabulary. */
     scopes?: string[] | null;
+    grantee?: string;
+    sub?: string | null;
+    grant_id?: string | null;
+    client_id?: string | null;
+    metadata_json?: string | null;
+    run_id?: string | null;
+    event_cursor?: number | null;
+    last_activity_at?: string | null;
+    usage_json?: string | null;
+    deleting_at?: string | null;
     /** Full pi launch recipe; rewritten on every polymorph. */
     launch?: LaunchSpec;
     /** Managed git worktree owned by this node (if any). */
@@ -351,6 +356,7 @@ export interface NodeMemoryTarget {
     nodeId: string;
     cwd: string;
     profileId: string | null;
+    grantee: string;
 }
 export interface NodeRow {
     node_id: string;
@@ -374,6 +380,16 @@ export interface NodeRow {
     profile_id: string | null;
     /** Per-run allow-list; null inherits the full runtime vocabulary. */
     scopes: string[] | null;
+    grantee?: string;
+    sub?: string | null;
+    grant_id?: string | null;
+    client_id?: string | null;
+    metadata_json?: string | null;
+    run_id?: string | null;
+    event_cursor?: number | null;
+    last_activity_at?: string | null;
+    usage_json?: string | null;
+    deleting_at?: string | null;
     parent: string | null;
     created: string;
     /** Authoritative runtime columns (see NodeRuntime). */

package/dist/core/command-hooks/compose.js

@@ -1 +1 @@
-var v=Object.defineProperty;var p=(n,r)=>v(n,"name",{value:r,configurable:!0});import{ExitCode as w}from"../../types.js";import{CrtrError as $}from"../errors.js";import{operationIdContext as E}from"../events/operation-id.js";import{createCoreHookCatalog as k}from"./catalog.js";function A(n,r){const o=k(n),a=p((t,e)=>{if(t.kind==="leaf"){const i=e.join(" ");return o.has(i)?Object.freeze({...t,effectiveHelp:x(t,i,r),run:j(t,e,r)}):t}return{...t,children:t.children.map(i=>a(i,[...e,i.name]))}},"visit");return n.map(t=>a(t,[t.name]))}p(A,"composeCoreHooks");function x(n,r,o){return async()=>{const{projectEffectiveLeafHelp:a}=await import("./help.js");try{const t=await o();return a(n.help,t.valid?t.plans.get(r):void 0)}catch{return a(n.help)}}}p(x,"projectedHelp");function j(n,r,o){const a=n.run,t=r.join(" ");return async(e,i)=>{const f=await o();if(!f.valid)throw y(t,f.issues);const d=f.plans.get(t);if(d===void 0)return a(e,i);const l=E.current();if(l===void 0)throw new $("internal",`\`${t}\` ran outside a crouter operation identity, so its plugin hooks cannot be dispatched.`,w.GENERAL,{command:[...r]});const{invokeExecHook:s}=await import("./transport/exec-invoke.js"),u=p(c=>({plugin:c.plugin.name,executable:c.executable,op:c.op,phase:c.phase,commandPath:r,...c.phase==="replace"?{output:n.help.output}:{}}),"spec"),h=[...i?.providedParams??[]];for(const c of d.before)await s(u(c),{operationId:l,input:e,providedParams:h});const g=d.replacements[0],m=g===void 0?await a(e,i):await s(u(g),{operationId:l,input:e,providedParams:h});for(const c of d.after)await s(u(c),{operationId:l,input:e,providedParams:h,...m===void 0?{}:{result:m}});return m}}p(j,"hookedRun");function y(n,r){const o=r[0],a=r.map(e=>`${e.plugin} (${e.scope}) ${e.path??"hooks"}: ${e.message} \u2014 received ${e.received}, expected ${e.expected}`).join("; "),t=[...new Set(r.map(e=>e.plugin))];return new $(o.code,`\`${n}\` cannot run: ${String(r.length)} unusable hook declaration${r.length===1?"":"s"} \u2014 ${a}.`,w.GENERAL,{received:o.received,...o.path===void 0?{}:{field:o.path},next:`${o.next} ${t.map(e=>`\`crtr pkg plugin show ${e}\``).join(" and ")} or \`crtr sys doctor\` reports the same issues; disabling the plugin also clears them.`})}p(y,"registryError");export{A as composeCoreHooks};
+var $=Object.defineProperty;var p=(n,r)=>$(n,"name",{value:r,configurable:!0});import{ExitCode as w}from"../../types.js";import{CrtrError as v}from"../errors.js";import{operationIdContext as E}from"../events/operation-id.js";import{createCoreHookCatalog as x}from"./catalog.js";function A(n,r){const a=x(n),c=p((t,e)=>{if(t.kind==="leaf"){const o=e.join(" ");return a.has(o)?Object.freeze({...t,effectiveHelp:H(t,o,r),run:j(t,e,r)}):t}return{...t,children:t.children.map(o=>c(o,[...e,o.name]))}},"visit");return n.map(t=>c(t,[t.name]))}p(A,"composeCoreHooks");function H(n,r,a){return async c=>{const{projectEffectiveLeafHelp:t}=await import("./help.js"),e=n.effectiveHelp!==void 0?await n.effectiveHelp(c):n.help;try{const o=await a();return t(e,o.valid?o.plans.get(r):void 0)}catch{return t(e)}}}p(H,"projectedHelp");function j(n,r,a){const c=n.run,t=r.join(" ");return async(e,o)=>{const f=await a();if(!f.valid)throw k(t,f.issues);const d=f.plans.get(t);if(d===void 0)return c(e,o);const l=E.current();if(l===void 0)throw new v("internal",`\`${t}\` ran outside a crouter operation identity, so its plugin hooks cannot be dispatched.`,w.GENERAL,{command:[...r]});const{invokeExecHook:s}=await import("./transport/exec-invoke.js"),u=p(i=>({id:i.id,plugin:i.plugin.name,executable:i.executable,op:i.op,phase:i.phase,commandPath:r,...i.phase==="replace"?{output:n.help.output}:{}}),"spec"),m=[...o?.providedParams??[]];for(const i of d.before)await s(u(i),{operationId:l,input:e,providedParams:m});const g=d.replacements[0],h=g===void 0?await c(e,o):await s(u(g),{operationId:l,input:e,providedParams:m});for(const i of d.after)await s(u(i),{operationId:l,input:e,providedParams:m,...h===void 0?{}:{result:h}});return h}}p(j,"hookedRun");function k(n,r){const a=r[0],c=r.map(e=>`${e.plugin} (${e.scope}) ${e.path??"hooks"}: ${e.message} \u2014 received ${e.received}, expected ${e.expected}`).join("; "),t=[...new Set(r.map(e=>e.plugin))];return new v(a.code,`\`${n}\` cannot run: ${String(r.length)} unusable hook declaration${r.length===1?"":"s"} \u2014 ${c}.`,w.GENERAL,{received:a.received,...a.path===void 0?{}:{field:a.path},next:`${a.next} ${t.map(e=>`\`crtr pkg plugin show ${e}\``).join(" and ")} or \`crtr sys doctor\` reports the same issues; disabling the plugin also clears them.`})}p(k,"registryError");export{A as composeCoreHooks};

package/dist/core/command-hooks/discovery.d.ts

@@ -21,6 +21,8 @@ export interface HookPluginAttribution {
 }
 /** One declaration resolved to the local executable that will receive it. */
 export interface EffectiveHook {
+    /** Stable identity within this plugin's effective declaration set. */
+    id: string;
     executable: string;
     plugin: HookPluginAttribution;
     target: string;
@@ -70,6 +72,18 @@ export interface HookPluginValidation {
     hooks: readonly EffectiveHook[];
     issues: readonly HookDiscoveryIssue[];
 }
+export type RemoteHookMetadata = Pick<EffectiveHook, 'id' | 'target' | 'phase' | 'op' | 'description' | 'effects' | 'declarationIndex'> & {
+    plugin: string;
+};
+export declare function hookIdentity(hook: {
+    plugin: {
+        name: string;
+    };
+    target: string;
+    phase: HookPhase;
+    op: string;
+    declarationIndex: number;
+}): string;
 export interface HookRegistry {
     catalog: CoreHookCatalog;
     hooks: readonly EffectiveHook[];
@@ -97,7 +111,7 @@ export interface HookPluginCandidate {
  * Statically compiles hooks from already-resolved effective plugins. It reads
  * manifest files to validate them but never executes a plugin executable.
  */
-export declare function compileHookRegistry(catalog: CoreHookCatalog, plugins: readonly InstalledPlugin[]): HookRegistry;
+export declare function compileHookRegistry(catalog: CoreHookCatalog, plugins: readonly InstalledPlugin[], remote?: readonly RemoteHookMetadata[]): HookRegistry;
 /** Compiles lifecycle declarations from resolved plugins without loading the command tree. */
 export declare function compileLifecycleHookRegistry(plugins: readonly InstalledPlugin[]): LifecycleHookRegistry;
 /** Discovers lifecycle hooks for one node's resolved cwd and profile. */

package/dist/core/command-hooks/discovery.js

@@ -1 +1 @@
-var R=Object.defineProperty;var u=(t,n)=>R(t,"name",{value:n,configurable:!0});import{listInstalledPluginsInRoot as b}from"../resolver.js";import{projectScopeRoots as w,userScopeRoot as C}from"../scope.js";import{validatePluginHookArtifact as j}from"./artifact.js";function O(t){return t.manifest.hooks!==void 0||t.manifest.hookExecutable!==void 0}u(O,"hasHookDeclaration");function x(t){const n=new Set,s=[];for(const a of t){const p=b(a.scope,a.root).sort((c,r)=>c.name<r.name?-1:c.name>r.name?1:0);for(const c of p)n.has(c.name)||(n.add(c.name),c.enabled&&O(c)&&s.push(c))}return s}u(x,"orderedPluginsInScopes");function v(t=process.cwd(),n){return[...w(t,n).map(s=>({scope:"project",root:s})),{scope:"user",root:C()}]}u(v,"hookDiscoveryScopes");function z(t=process.cwd(),n){return x(v(t,n))}u(z,"effectiveHookPlugins");function I(t,n=process.cwd(),s){const a=new Set,p=[];for(const c of v(n,s)){const r=t.filter(e=>e.plugin.scope===c.scope&&e.scopeRoot===c.root),i=new Set(r.map(e=>e.plugin.name)),o=[...b(c.scope,c.root).filter(e=>!i.has(e.name)),...r.map(e=>e.plugin)];o.sort((e,l)=>e.name<l.name?-1:e.name>l.name?1:0);for(const e of o)a.has(e.name)||(a.add(e.name),e.enabled&&O(e)&&p.push(e))}return p}u(I,"effectiveHookPluginsWithCandidates");function h(t,n){return{...n,plugin:t.name,scope:t.scope}}u(h,"issue");function k(t,n){return n.map(s=>h(t,s))}u(k,"artifactIssues");function H(t,n,s){const a=[];return n.forEach((p,c)=>{s.has(p.target)||a.push(h(t,{code:"command_hook_target_invalid",path:`hooks[${c}].target`,message:`hook target "${p.target}" is not an eligible core returned-object leaf`,received:p.target,expected:"an exact eligible core leaf path",next:"Choose a current returned-object core leaf; pkg plugin, sys doctor, JSONL, passthrough, and UI/void surfaces are unavailable."}))}),a}u(H,"targetIssues");function g(t,n){const s=[],a=[],p=[];let c=0;for(const o of n){const e=j(o.root,o.manifest),l=k(o,e.issues);let f=[];if(l.length===0&&e.manifest!==void 0&&e.executablePath!==void 0){const d=H(o,e.manifest.hooks,t);l.push(...d),l.length===0&&(f=e.manifest.hooks.map((m,y)=>Object.freeze({executable:e.executablePath,plugin:Object.freeze({name:o.name,scope:o.scope,root:o.root}),target:m.target,phase:m.phase,op:m.op,description:m.description,effects:Object.freeze([...m.effects]),declarationIndex:y,order:c++})),a.push(...f))}s.push(Object.freeze({plugin:o,...e.manifestPath===void 0?{}:{manifestPath:e.manifestPath},...e.executablePath===void 0?{}:{executablePath:e.executablePath},...e.manifest===void 0?{}:{manifest:e.manifest},lifecycleCandidates:Object.freeze([...e.lifecycleCandidates]),hooks:Object.freeze(f),issues:Object.freeze(l)})),p.push(...l)}const r=new Map;for(const o of a){const e=r.get(o.target);e===void 0?r.set(o.target,[o]):e.push(o)}const i=new Map;for(const[o,e]of r){const l=e.filter(f=>f.phase==="replace");if(l.length>1)for(const f of l)p.push(h(f.plugin,{code:"command_hook_collision",path:`hooks[${f.declarationIndex}]`,message:`multiple replacements target "${o}"`,received:l.map(d=>`${d.plugin.name}:${d.op}`).join(", "),expected:"exactly one replacement for this core leaf",next:"Remove or change one replace declaration; before and after hooks may coexist with one replacement."}));i.set(o,Object.freeze({target:o,before:Object.freeze(e.filter(f=>f.phase==="before")),after:Object.freeze(e.filter(f=>f.phase==="after").reverse()),replacements:Object.freeze(l)}))}return Object.freeze({catalog:t,hooks:Object.freeze(a),plans:i,validations:Object.freeze(s),issues:Object.freeze(p),valid:p.length===0})}u(g,"compileHookRegistry");function P(t){const n=[],s=[],a=[];let p=0;for(const r of t){const i=j(r.root,r.manifest),o=k(r,i.issues);let e=[];o.length===0&&i.manifest!==void 0&&i.executablePath!==void 0&&(e=(i.manifest.schemaVersion===2?i.manifest.lifecycle:[]).map((f,d)=>Object.freeze({executable:i.executablePath,plugin:Object.freeze({name:r.name,scope:r.scope,root:r.root}),event:f.event,phase:f.phase,op:f.op,description:f.description,effects:Object.freeze([...f.effects]),declarationIndex:d,order:p++})),s.push(...e)),n.push(Object.freeze({plugin:r,...i.manifestPath===void 0?{}:{manifestPath:i.manifestPath},...i.executablePath===void 0?{}:{executablePath:i.executablePath},...i.manifest===void 0?{}:{manifest:i.manifest},lifecycleCandidates:Object.freeze([...i.lifecycleCandidates]),hooks:Object.freeze([]),issues:Object.freeze(o)})),a.push(...o)}const c=new Map;for(const r of s){const i=c.get(r.event)??[];c.set(r.event,Object.freeze([...i,r]))}return Object.freeze({hooks:Object.freeze(s),plans:c,validations:Object.freeze(n),issues:Object.freeze(a),valid:a.length===0})}u(P,"compileLifecycleHookRegistry");function T(t,n){return process.env.CRTR_TEST_DISABLE_LIFECYCLE_HOOK_DISCOVERY==="1"?P([]):P(z(t,n))}u(T,"discoverLifecycleHookRegistry");function D(t,n=process.cwd(),s){return g(t,z(n,s))}u(D,"discoverHookRegistry");function M(t,n,s,a=process.cwd(),p){return S(t,[{plugin:n,scopeRoot:s}],a,p)}u(M,"discoverCandidateHookRegistry");function S(t,n,s=process.cwd(),a){return g(t,I(n,s,a))}u(S,"discoverCandidateHookRegistryForCandidates");function A(t,n){return g(t,x(n))}u(A,"discoverHookRegistryInScopes");export{g as compileHookRegistry,P as compileLifecycleHookRegistry,M as discoverCandidateHookRegistry,S as discoverCandidateHookRegistryForCandidates,D as discoverHookRegistry,A as discoverHookRegistryInScopes,T as discoverLifecycleHookRegistry,z as effectiveHookPlugins,v as hookDiscoveryScopes};
+var R=Object.defineProperty;var p=(t,n)=>R(t,"name",{value:n,configurable:!0});import{isSandboxedNode as I}from"../../shared/env.js";import{listInstalledPluginsInRoot as O}from"../resolver.js";import{projectScopeRoots as S,userScopeRoot as C}from"../scope.js";import{validatePluginHookArtifact as x}from"./artifact.js";function H(t){return JSON.stringify([t.plugin.name,t.target,t.phase,t.op,t.declarationIndex])}p(H,"hookIdentity");function z(t){return t.manifest.hooks!==void 0||t.manifest.hookExecutable!==void 0}p(z,"hasHookDeclaration");function v(t){const n=new Set,r=[];for(const i of t){const f=O(i.scope,i.root).sort((o,a)=>o.name<a.name?-1:o.name>a.name?1:0);for(const o of f)n.has(o.name)||(n.add(o.name),o.enabled&&z(o)&&r.push(o))}return r}p(v,"orderedPluginsInScopes");function y(t=process.cwd(),n){return[...S(t,n).map(r=>({scope:"project",root:r})),...I()?[]:[{scope:"user",root:C()}]]}p(y,"hookDiscoveryScopes");function P(t=process.cwd(),n){return v(y(t,n))}p(P,"effectiveHookPlugins");function _(t,n=process.cwd(),r){const i=new Set,f=[];for(const o of y(n,r)){const a=t.filter(e=>e.plugin.scope===o.scope&&e.scopeRoot===o.root),c=new Set(a.map(e=>e.plugin.name)),d=[...O(o.scope,o.root).filter(e=>!c.has(e.name)),...a.map(e=>e.plugin)];d.sort((e,s)=>e.name<s.name?-1:e.name>s.name?1:0);for(const e of d)i.has(e.name)||(i.add(e.name),e.enabled&&z(e)&&f.push(e))}return f}p(_,"effectiveHookPluginsWithCandidates");function g(t,n){return{...n,plugin:t.name,scope:t.scope}}p(g,"issue");function k(t,n){return n.map(r=>g(t,r))}p(k,"artifactIssues");function E(t,n,r){const i=[];return n.forEach((f,o)=>{r.has(f.target)||i.push(g(t,{code:"command_hook_target_invalid",path:`hooks[${o}].target`,message:`hook target "${f.target}" is not an eligible core returned-object leaf`,received:f.target,expected:"an exact eligible core leaf path",next:"Choose a current returned-object core leaf; pkg plugin, sys doctor, JSONL, passthrough, and UI/void surfaces are unavailable."}))}),i}p(E,"targetIssues");function b(t,n,r=[]){const i=[],f=[],o=[];let a=0;for(const e of n){const s=x(e.root,e.manifest),u=k(e,s.issues);let l=[];if(u.length===0&&s.manifest!==void 0&&s.executablePath!==void 0){const h=E(e,s.manifest.hooks,t);u.push(...h),u.length===0&&(l=s.manifest.hooks.map((m,j)=>Object.freeze({id:H({plugin:{name:e.name},...m,declarationIndex:j}),executable:s.executablePath,plugin:Object.freeze({name:e.name,scope:e.scope,root:e.root}),target:m.target,phase:m.phase,op:m.op,description:m.description,effects:Object.freeze([...m.effects]),declarationIndex:j,order:a++})),f.push(...l))}i.push(Object.freeze({plugin:e,...s.manifestPath===void 0?{}:{manifestPath:s.manifestPath},...s.executablePath===void 0?{}:{executablePath:s.executablePath},...s.manifest===void 0?{}:{manifest:s.manifest},lifecycleCandidates:Object.freeze([...s.lifecycleCandidates]),hooks:Object.freeze(l),issues:Object.freeze(u)})),o.push(...u)}for(const e of r){if(!t.has(e.target))throw new Error(`daemon supplied an ineligible hook target: ${e.target}`);f.push(Object.freeze({...e,executable:"",plugin:Object.freeze({name:e.plugin,scope:"user",root:""}),order:a++}))}const c=new Map;for(const e of f){const s=c.get(e.target);s===void 0?c.set(e.target,[e]):s.push(e)}const d=new Map;for(const[e,s]of c){const u=s.filter(l=>l.phase==="replace");if(u.length>1)for(const l of u)o.push(g(l.plugin,{code:"command_hook_collision",path:`hooks[${l.declarationIndex}]`,message:`multiple replacements target "${e}"`,received:u.map(h=>`${h.plugin.name}:${h.op}`).join(", "),expected:"exactly one replacement for this core leaf",next:"Remove or change one replace declaration; before and after hooks may coexist with one replacement."}));d.set(e,Object.freeze({target:e,before:Object.freeze(s.filter(l=>l.phase==="before")),after:Object.freeze(s.filter(l=>l.phase==="after").reverse()),replacements:Object.freeze(u)}))}return Object.freeze({catalog:t,hooks:Object.freeze(f),plans:d,validations:Object.freeze(i),issues:Object.freeze(o),valid:o.length===0})}p(b,"compileHookRegistry");function w(t){const n=[],r=[],i=[];let f=0;for(const a of t){const c=x(a.root,a.manifest),d=k(a,c.issues);let e=[];d.length===0&&c.manifest!==void 0&&c.executablePath!==void 0&&(e=(c.manifest.schemaVersion===2?c.manifest.lifecycle:[]).map((u,l)=>Object.freeze({executable:c.executablePath,plugin:Object.freeze({name:a.name,scope:a.scope,root:a.root}),event:u.event,phase:u.phase,op:u.op,description:u.description,effects:Object.freeze([...u.effects]),declarationIndex:l,order:f++})),r.push(...e)),n.push(Object.freeze({plugin:a,...c.manifestPath===void 0?{}:{manifestPath:c.manifestPath},...c.executablePath===void 0?{}:{executablePath:c.executablePath},...c.manifest===void 0?{}:{manifest:c.manifest},lifecycleCandidates:Object.freeze([...c.lifecycleCandidates]),hooks:Object.freeze([]),issues:Object.freeze(d)})),i.push(...d)}const o=new Map;for(const a of r){const c=o.get(a.event)??[];o.set(a.event,Object.freeze([...c,a]))}return Object.freeze({hooks:Object.freeze(r),plans:o,validations:Object.freeze(n),issues:Object.freeze(i),valid:i.length===0})}p(w,"compileLifecycleHookRegistry");function A(t,n){return process.env.CRTR_TEST_DISABLE_LIFECYCLE_HOOK_DISCOVERY==="1"?w([]):w(P(t,n))}p(A,"discoverLifecycleHookRegistry");function F(t,n=process.cwd(),r){return b(t,P(n,r))}p(F,"discoverHookRegistry");function J(t,n,r,i=process.cwd(),f){return $(t,[{plugin:n,scopeRoot:r}],i,f)}p(J,"discoverCandidateHookRegistry");function $(t,n,r=process.cwd(),i){return b(t,_(n,r,i))}p($,"discoverCandidateHookRegistryForCandidates");function V(t,n){return b(t,v(n))}p(V,"discoverHookRegistryInScopes");export{b as compileHookRegistry,w as compileLifecycleHookRegistry,J as discoverCandidateHookRegistry,$ as discoverCandidateHookRegistryForCandidates,F as discoverHookRegistry,V as discoverHookRegistryInScopes,A as discoverLifecycleHookRegistry,P as effectiveHookPlugins,y as hookDiscoveryScopes,H as hookIdentity};

package/dist/core/command-hooks/help.d.ts

@@ -1,5 +1,5 @@
-import type { EffectiveLeafHelp, LeafHelp } from '../help.js';
+import type { EffectiveLeafHelp } from '../help.js';
 import type { EffectiveHookPlan } from './discovery.js';
 /** Build a frozen help view whose Effects order matches the effective pipeline.
  *  Core help is never modified; all non-effects fields retain their references. */
-export declare function projectEffectiveLeafHelp(core: LeafHelp, plan?: EffectiveHookPlan): EffectiveLeafHelp;
+export declare function projectEffectiveLeafHelp(core: EffectiveLeafHelp, plan?: EffectiveHookPlan): EffectiveLeafHelp;

package/dist/core/command-hooks/lifecycle-create.d.ts

@@ -1,4 +1,4 @@
 import type { NodeCreateHookRequest } from '../../hook-authoring.js';
 export type NodeCreateRequest = NodeCreateHookRequest['create'];
 /** Admit one node creation and return the release that must run after its row exists. */
-export declare function admitNodeCreate(create: NodeCreateRequest): Promise<() => void>;
+export declare function admitNodeCreate(create: NodeCreateRequest, app: string): Promise<() => void>;

package/dist/core/command-hooks/lifecycle-create.js

@@ -1 +1 @@
-var m=Object.defineProperty;var l=(e,r)=>m(e,"name",{value:r,configurable:!0});import{crtrHome as g}from"../canvas/paths.js";import{nodeCreateRefused as u}from"../errors.js";import{discoverLifecycleHookRegistry as y}from"./discovery.js";import{invokeBlockingLifecycleHooks as w}from"./transport/exec-lifecycle.js";let p=Promise.resolve();async function h(){let e;const r=p;p=new Promise(t=>{e=t}),await r;let o=!1;return()=>{o||(o=!0,e())}}l(h,"enterNodeCreateGate");function v(e,r){const o=y(e,r),t=o.plans.get("node:create")??[],a=o.validations.flatMap(s=>s.lifecycleCandidates.filter(n=>n.event==="node:create"&&!t.some(i=>i.plugin.name===s.plugin.name&&i.declarationIndex===n.index)).map(n=>({validation:s,candidate:n,issue:s.issues.find(i=>i.path===`lifecycle[${n.index}]`||i.path?.startsWith(`lifecycle[${n.index}].`))??s.issues[0]})))[0];if(a===void 0)return o;const{validation:c,candidate:f,issue:d}=a;throw u(`plugin "${c.plugin.name}" lifecycle hook "${f.op}" for node:create could not be discovered: ${d.message}`,`Refused by plugin ${c.plugin.name}, op ${f.op}.`)}l(v,"refusedCreateHookDiscovery");async function R(e){const r=await h();try{const o=v(e.cwd,e.profile),t=await w(o.plans.get("node:create")??[],{create:e,runtime:{canvasHome:g(),profile:e.profile}});if(t!==null)throw u(t.message,t.next);return r}catch(o){throw r(),o}}l(R,"admitNodeCreate");export{R as admitNodeCreate};
+var m=Object.defineProperty;var a=(e,r)=>m(e,"name",{value:r,configurable:!0});import{crtrHome as g}from"../canvas/paths.js";import{nodeCreateRefused as u}from"../errors.js";import{discoverLifecycleHookRegistry as y}from"./discovery.js";import{invokeBlockingLifecycleHooks as w}from"./transport/exec-lifecycle.js";let p=Promise.resolve();async function h(){let e;const r=p;p=new Promise(t=>{e=t}),await r;let o=!1;return()=>{o||(o=!0,e())}}a(h,"enterNodeCreateGate");function v(e,r){const o=y(e,r),t=o.plans.get("node:create")??[],n=o.validations.flatMap(i=>i.lifecycleCandidates.filter(s=>s.event==="node:create"&&!t.some(l=>l.plugin.name===i.plugin.name&&l.declarationIndex===s.index)).map(s=>({validation:i,candidate:s,issue:i.issues.find(l=>l.path===`lifecycle[${s.index}]`||l.path?.startsWith(`lifecycle[${s.index}].`))??i.issues[0]})))[0];if(n===void 0)return o;const{validation:c,candidate:f,issue:d}=n;throw u(`plugin "${c.plugin.name}" lifecycle hook "${f.op}" for node:create could not be discovered: ${d.message}`,`Refused by plugin ${c.plugin.name}, op ${f.op}.`)}a(v,"refusedCreateHookDiscovery");async function R(e,r){const o=await h();try{const t=v(e.cwd,e.profile),n=await w(t.plans.get("node:create")??[],{app:r,create:e,runtime:{canvasHome:g(),profile:e.profile}});if(n!==null)throw u(n.message,n.next);return o}catch(t){throw o(),t}}a(R,"admitNodeCreate");export{R as admitNodeCreate};

package/dist/core/command-hooks/transport/exec-invoke.d.ts

@@ -2,6 +2,8 @@ import type { HookPhase } from '../../../hook-authoring.js';
 import type { Field } from '../../help.js';
 export declare const EXEC_HOOK_TIMEOUT_MS = 15000;
 export interface ExecHookSpec {
+    /** Identity resolved against the daemon's effective hook plan on Linux. */
+    id: string;
     plugin: string;
     /** Absolute, validated hookExecutable path. */
     executable: string;

package/dist/core/command-hooks/transport/exec-invoke.js

@@ -1 +1 @@
-var R=Object.defineProperty;var l=(e,t)=>R(e,"name",{value:t,configurable:!0});import{spawn as I}from"node:child_process";import{posixProcessGroupSpawnOptions as A,terminateProcessGroup as D}from"../../../hook-process.js";import{ExitCode as N}from"../../../types.js";import{isRecord as k}from"../../../shared/predicates.js";import{validateCoreDeclaredResult as j}from"../../../api/command-manifest/result.js";import{CrtrError as J}from"../../errors.js";import{diag as V}from"../../io.js";const C=10*1024*1024,P=15e3,M=new Set(["internal","unknown_path","command_collision","command_hook_collision","plugin_protocol_error","hook_protocol_error"]),B=/^[a-z][a-z0-9]*(_[a-z0-9]+)*$/,G=/^[0-9a-f]{32}$/,$="Run `crtr pkg plugin show` or `crtr sys doctor` to inspect the plugin.";async function v(e,t){const s=process.cwd(),o=K(e,t,s),r=await H(e,t,JSON.stringify(o),s);if(r.signal!==null)throw n(e,t,`executable was killed by signal ${r.signal}`,"a clean exit with one JSON envelope on stdout");const i=z(e,t,r.stdout);if(i.ok&&r.status!==0?V(`crtr: ${y(e)} returned ok:true but exited ${r.status} (honoring the envelope)`):!i.ok&&r.status===0&&V(`crtr: ${y(e)} returned ok:false but exited 0 (honoring the envelope)`),i.ok||L(e,t,i),e.phase!=="replace")return;const a=i.result;if(!k(a))throw n(e,t,"replacement success result was not an object","result: an object matching the target output declaration");const p=e.output;if(p===void 0)throw n(e,t,"replacement target output declaration was missing","the target leaf output declaration");const d=j(p,a);if(d!==null){const u=p.find(c=>c.name===d.field);throw d.receivedType!==void 0?n(e,t,`replacement output field "${d.field}" has the wrong type`,`${d.field}: ${u?.type??"unknown"}`):n(e,t,`replacement result is missing required output field "${d.field}"`,`a "${d.field}" field of type ${u?.type??"unknown"}`)}return a}l(v,"invokeExecHook");async function H(e,t,s,o){let r;try{r=I(e.executable,["--crtr-hook-protocol","1"],{cwd:o,env:process.env,stdio:["pipe","pipe","inherit"],...A()})}catch(i){throw n(e,t,`executable could not be run (${E(i)})`,"a runnable hook executable")}return new Promise((i,a)=>{let p=0;const d=[];let u,c=!1,g=!1,S=null,_=null,m;const w=l(()=>{if(!(!c||u!==void 0&&!g)){if(m!==void 0&&clearTimeout(m),u?.kind==="timeout"){a(n(e,t,`executable timed out after ${P}ms`,"one JSON envelope before the execution timeout"));return}if(u?.kind==="output_limit"){a(n(e,t,"stdout exceeded the 10 MiB cap","one JSON envelope under 10 MiB on stdout"));return}if(u?.kind==="spawn"){a(n(e,t,`executable could not be run (${E(u.error)})`,"a runnable hook executable"));return}if(u?.kind==="cleanup"){a(n(e,t,`executable cleanup failed (${E(u.error)})`,"a hook executable whose process group can be terminated"));return}i({stdout:Buffer.concat(d).toString("utf8"),status:S,signal:_})}},"finish"),b=l(f=>{u===void 0&&(u=f,m!==void 0&&clearTimeout(m),D(r).then(()=>{g=!0,w()},x=>{u={kind:"cleanup",error:x},g=!0,w()}))},"terminate");r.stdout.on("data",f=>{if(p+=f.byteLength,p>C){b({kind:"output_limit"});return}d.push(f)}),r.once("error",f=>{if(r.pid===void 0){u={kind:"spawn",error:f},c=!0,g=!0,w();return}b({kind:"spawn",error:f})}),r.once("close",(f,x)=>{S=f,_=x,c=!0,w()}),m=setTimeout(()=>b({kind:"timeout"}),P),r.stdin.end(s)})}l(H,"runHookProcess");function K(e,t,s){if(!G.test(t.operationId))throw n(e,t,"operationId was not a 32-character lowercase hexadecimal string","a valid crouter operation identity");if(!h(t.input))throw n(e,t,"input was not JSON-compatible","a JSON object");if(!t.providedParams.every(r=>typeof r=="string"))throw n(e,t,"providedParams contained a non-string value","an array of parameter names");const o={protocolVersion:1,op:e.op,command:[...e.commandPath],operationId:t.operationId,input:t.input,context:{cwd:s,providedParams:[...t.providedParams]}};if(e.phase==="after"){if(t.result===void 0||!h(t.result))throw n(e,t,"after hook result was missing or not JSON-compatible","the completed primary result");return{...o,phase:"after",result:t.result}}if(t.result!==void 0)throw n(e,t,`${e.phase} hook invocation included a result`,"result only for after hooks");return e.phase==="before"?{...o,phase:"before"}:{...o,phase:"replace"}}l(K,"buildRequest");function z(e,t,s){let o;try{o=JSON.parse(s.trim())}catch{throw n(e,t,"stdout was not a single JSON envelope","exactly one JSON envelope on stdout")}if(!k(o))throw n(e,t,"stdout was not a JSON object","a { protocolVersion: 1, ok: boolean, ... } envelope");if(o.protocolVersion!==1)throw n(e,t,`unsupported protocolVersion ${String(o.protocolVersion)}`,"protocolVersion exactly 1");if(o.ok===!0){const i=e.phase==="replace"?["protocolVersion","ok","result"]:["protocolVersion","ok"];if(!O(o,i))throw n(e,t,"success envelope had missing or extra fields",`{ ${i.join(", ")} } only`);if(e.phase==="replace"){if(!h(o.result))throw n(e,t,"replacement result was not JSON-compatible","a JSON result");return{protocolVersion:1,ok:!0,result:o.result}}return{protocolVersion:1,ok:!0}}if(o.ok!==!1||!O(o,["protocolVersion","ok","error"]))throw n(e,t,"failure envelope had missing or extra fields","{ protocolVersion, ok, error } only");const r=o.error;if(!k(r)||!O(r,["code","message"],["field","next"]))throw n(e,t,"error envelope was missing fields or contained extra fields","error: { code, message, field?, next? }");if(typeof r.code!="string"||r.code===""||typeof r.message!="string"||r.message==="")throw n(e,t,"error envelope had an empty or non-string code/message","non-empty error code and message strings");if(r.field!==void 0&&typeof r.field!="string"||r.next!==void 0&&typeof r.next!="string")throw n(e,t,"error envelope had a non-string field/next","string field and next values when present");return{protocolVersion:1,ok:!1,error:{code:r.code,message:r.message,...r.field===void 0?{}:{field:r.field},...r.next===void 0?{}:{next:r.next}}}}l(z,"parseEnvelope");function L(e,t,s){const{code:o,message:r,field:i,next:a}=s.error;throw!B.test(o)||M.has(o)?n(e,t,`error code "${o}" was invalid or reserved`,"a non-reserved lowercase snake_case code"):new J(o,`${y(e)}: ${r}`,N.GENERAL,T(e,t,i,a))}l(L,"throwHookFailure");function n(e,t,s,o){return new J("hook_protocol_error",`${y(e)}: ${s}. Expected ${o}.`,N.GENERAL,T(e,t,void 0,$,s))}l(n,"protocolError");function T(e,t,s,o,r){const i={plugin:e.plugin,op:e.op,phase:e.phase,command:[...e.commandPath],...r===void 0?{}:{received:r},...s===void 0?{}:{field:s}};if(e.phase!=="after")return{...i,next:o??$};const a="Do not retry the original command; its primary action completed. Inspect and reconcile the failed after hook.";return{...i,primaryCompleted:!0,result:t.result,next:o===void 0||o===$?a:`${o} ${a}`}}l(T,"failureDetails");function y(e){return`plugin "${e.plugin}" ${e.phase} hook "${e.op}" for \`${e.commandPath.join(" ")}\``}l(y,"label");function O(e,t,s=[]){const o=Object.keys(e);return t.every(r=>Object.hasOwn(e,r))&&o.every(r=>t.includes(r)||s.includes(r))}l(O,"hasExactKeys");function h(e){return e===null||typeof e=="boolean"||typeof e=="string"?!0:typeof e=="number"?Number.isFinite(e):Array.isArray(e)?e.every(h):k(e)&&Object.values(e).every(h)}l(h,"isJson");function E(e){return e instanceof Error?e.message:String(e)}l(E,"describeError");export{P as EXEC_HOOK_TIMEOUT_MS,v as invokeExecHook};
+var R=Object.defineProperty;var f=(e,t)=>R(e,"name",{value:t,configurable:!0});import{spawn as T}from"node:child_process";import{socketFetch as A}from"../../../api/node-transport.js";import{apiSocketPath as C}from"../../canvas/paths.js";import{posixProcessGroupSpawnOptions as j,terminateProcessGroup as D}from"../../../hook-process.js";import{ExitCode as S}from"../../../types.js";import{isRecord as m}from"../../../shared/predicates.js";import{envExecutionId as G,envNodeId as K}from"../../../shared/env.js";import{validateCoreDeclaredResult as M}from"../../../api/command-manifest/result.js";import{CrtrError as b}from"../../errors.js";import{diag as I}from"../../io.js";const q=10*1024*1024,V=15e3,B=new Set(["internal","unknown_path","command_collision","command_hook_collision","plugin_protocol_error","hook_protocol_error"]),H=/^[a-z][a-z0-9]*(_[a-z0-9]+)*$/,L=/^[0-9a-f]{32}$/,$="Run `crtr pkg plugin show` or `crtr sys doctor` to inspect the plugin.";async function ie(e,t){const u=process.cwd(),o=F(e,t,u),r=await z(e,t,JSON.stringify(o),u);if(r.signal!==null)throw n(e,t,`executable was killed by signal ${r.signal}`,"a clean exit with one JSON envelope on stdout");const s=U(e,t,r.stdout);if(s.ok&&r.status!==0?I(`crtr: ${k(e)} returned ok:true but exited ${r.status} (honoring the envelope)`):!s.ok&&r.status===0&&I(`crtr: ${k(e)} returned ok:false but exited 0 (honoring the envelope)`),s.ok||X(e,t,s),e.phase!=="replace")return;const l=s.result;if(!m(l))throw n(e,t,"replacement success result was not an object","result: an object matching the target output declaration");const h=e.output;if(h===void 0)throw n(e,t,"replacement target output declaration was missing","the target leaf output declaration");const d=M(h,l);if(d!==null){const i=h.find(a=>a.name===d.field);throw d.receivedType!==void 0?n(e,t,`replacement output field "${d.field}" has the wrong type`,`${d.field}: ${i?.type??"unknown"}`):n(e,t,`replacement result is missing required output field "${d.field}"`,`a "${d.field}" field of type ${i?.type??"unknown"}`)}return l}f(ie,"invokeExecHook");async function z(e,t,u,o){if(process.platform==="linux"){const s=K(),l=G(),h=process.env.CRTR_API_SOCKET??C();if(s&&!l)throw n(e,t,"executable requires a current node execution","a current node execution");let d;try{const i=s?`/v1/nodes/${encodeURIComponent(s)}/hooks/exec`:"/v1/hooks/exec";d=await A(h)(`http://localhost${i}`,{method:"POST",headers:{"content-type":"application/json"},body:JSON.stringify({...s?{expected_execution_id:l}:{},hook_id:e.id,cwd:o,request:u})});const a=await d.json();if(!d.ok){const c=m(a)&&m(a.error)?a.error:null,g=c&&typeof c.message=="string"?c.message:`daemon refused hook execution (${d.status})`;throw c&&(c.code==="hook_timeout"||c.code==="hook_output_limit")?new b(c.code,`${k(e)}: ${g}`,S.GENERAL,N(e,t,void 0,$,g)):new Error(g)}if(!m(a)||typeof a.stdout!="string"||a.status!==null&&typeof a.status!="number"||a.signal!==null&&typeof a.signal!="string")throw new Error("invalid hook execution response");return{stdout:a.stdout,status:a.status,signal:a.signal}}catch(i){throw i instanceof b?i:n(e,t,`executable could not be run (${E(i)})`,"a registered runnable hook executable")}}let r;try{r=T(e.executable,["--crtr-hook-protocol","1"],{cwd:o,env:process.env,stdio:["pipe","pipe","inherit"],...j()})}catch(s){throw n(e,t,`executable could not be run (${E(s)})`,"a runnable hook executable")}return new Promise((s,l)=>{let h=0;const d=[];let i,a=!1,c=!1,g=null,P=null,w;const x=f(()=>{if(!(!a||i!==void 0&&!c)){if(w!==void 0&&clearTimeout(w),i?.kind==="timeout"){l(n(e,t,`executable timed out after ${V}ms`,"one JSON envelope before the execution timeout"));return}if(i?.kind==="output_limit"){l(n(e,t,"stdout exceeded the 10 MiB cap","one JSON envelope under 10 MiB on stdout"));return}if(i?.kind==="spawn"){l(n(e,t,`executable could not be run (${E(i.error)})`,"a runnable hook executable"));return}if(i?.kind==="cleanup"){l(n(e,t,`executable cleanup failed (${E(i.error)})`,"a hook executable whose process group can be terminated"));return}s({stdout:Buffer.concat(d).toString("utf8"),status:g,signal:P})}},"finish"),_=f(p=>{i===void 0&&(i=p,w!==void 0&&clearTimeout(w),D(r).then(()=>{c=!0,x()},O=>{i={kind:"cleanup",error:O},c=!0,x()}))},"terminate");r.stdout.on("data",p=>{if(h+=p.byteLength,h>q){_({kind:"output_limit"});return}d.push(p)}),r.once("error",p=>{if(r.pid===void 0){i={kind:"spawn",error:p},a=!0,c=!0,x();return}_({kind:"spawn",error:p})}),r.once("close",(p,O)=>{g=p,P=O,a=!0,x()}),w=setTimeout(()=>_({kind:"timeout"}),V),r.stdin.end(u)})}f(z,"runHookProcess");function F(e,t,u){if(!L.test(t.operationId))throw n(e,t,"operationId was not a 32-character lowercase hexadecimal string","a valid crouter operation identity");if(!y(t.input))throw n(e,t,"input was not JSON-compatible","a JSON object");if(!t.providedParams.every(r=>typeof r=="string"))throw n(e,t,"providedParams contained a non-string value","an array of parameter names");const o={protocolVersion:1,op:e.op,command:[...e.commandPath],operationId:t.operationId,input:t.input,context:{cwd:u,providedParams:[...t.providedParams]}};if(e.phase==="after"){if(t.result===void 0||!y(t.result))throw n(e,t,"after hook result was missing or not JSON-compatible","the completed primary result");return{...o,phase:"after",result:t.result}}if(t.result!==void 0)throw n(e,t,`${e.phase} hook invocation included a result`,"result only for after hooks");return e.phase==="before"?{...o,phase:"before"}:{...o,phase:"replace"}}f(F,"buildRequest");function U(e,t,u){let o;try{o=JSON.parse(u.trim())}catch{throw n(e,t,"stdout was not a single JSON envelope","exactly one JSON envelope on stdout")}if(!m(o))throw n(e,t,"stdout was not a JSON object","a { protocolVersion: 1, ok: boolean, ... } envelope");if(o.protocolVersion!==1)throw n(e,t,`unsupported protocolVersion ${String(o.protocolVersion)}`,"protocolVersion exactly 1");if(o.ok===!0){const s=e.phase==="replace"?["protocolVersion","ok","result"]:["protocolVersion","ok"];if(!J(o,s))throw n(e,t,"success envelope had missing or extra fields",`{ ${s.join(", ")} } only`);if(e.phase==="replace"){if(!y(o.result))throw n(e,t,"replacement result was not JSON-compatible","a JSON result");return{protocolVersion:1,ok:!0,result:o.result}}return{protocolVersion:1,ok:!0}}if(o.ok!==!1||!J(o,["protocolVersion","ok","error"]))throw n(e,t,"failure envelope had missing or extra fields","{ protocolVersion, ok, error } only");const r=o.error;if(!m(r)||!J(r,["code","message"],["field","next"]))throw n(e,t,"error envelope was missing fields or contained extra fields","error: { code, message, field?, next? }");if(typeof r.code!="string"||r.code===""||typeof r.message!="string"||r.message==="")throw n(e,t,"error envelope had an empty or non-string code/message","non-empty error code and message strings");if(r.field!==void 0&&typeof r.field!="string"||r.next!==void 0&&typeof r.next!="string")throw n(e,t,"error envelope had a non-string field/next","string field and next values when present");return{protocolVersion:1,ok:!1,error:{code:r.code,message:r.message,...r.field===void 0?{}:{field:r.field},...r.next===void 0?{}:{next:r.next}}}}f(U,"parseEnvelope");function X(e,t,u){const{code:o,message:r,field:s,next:l}=u.error;throw!H.test(o)||B.has(o)?n(e,t,`error code "${o}" was invalid or reserved`,"a non-reserved lowercase snake_case code"):new b(o,`${k(e)}: ${r}`,S.GENERAL,N(e,t,s,l))}f(X,"throwHookFailure");function n(e,t,u,o){return new b("hook_protocol_error",`${k(e)}: ${u}. Expected ${o}.`,S.GENERAL,N(e,t,void 0,$,u))}f(n,"protocolError");function N(e,t,u,o,r){const s={plugin:e.plugin,op:e.op,phase:e.phase,command:[...e.commandPath],...r===void 0?{}:{received:r},...u===void 0?{}:{field:u}};if(e.phase!=="after")return{...s,next:o??$};const l="Do not retry the original command; its primary action completed. Inspect and reconcile the failed after hook.";return{...s,primaryCompleted:!0,result:t.result,next:o===void 0||o===$?l:`${o} ${l}`}}f(N,"failureDetails");function k(e){return`plugin "${e.plugin}" ${e.phase} hook "${e.op}" for \`${e.commandPath.join(" ")}\``}f(k,"label");function J(e,t,u=[]){const o=Object.keys(e);return t.every(r=>Object.hasOwn(e,r))&&o.every(r=>t.includes(r)||u.includes(r))}f(J,"hasExactKeys");function y(e){return e===null||typeof e=="boolean"||typeof e=="string"?!0:typeof e=="number"?Number.isFinite(e):Array.isArray(e)?e.every(y):m(e)&&Object.values(e).every(y)}f(y,"isJson");function E(e){return e instanceof Error?e.message:String(e)}f(E,"describeError");export{V as EXEC_HOOK_TIMEOUT_MS,ie as invokeExecHook};

package/dist/core/command-hooks/transport/exec-lifecycle.d.ts

@@ -5,6 +5,7 @@ export interface NodeLifecycleHookInvocation {
     runtime: LifecycleHookRequest['runtime'];
 }
 export interface NodeCreateHookInvocation {
+    app: string;
     create: NodeCreateHookRequest['create'];
     runtime: NodeCreateHookRequest['runtime'];
 }