@north-light/crouter 0.3.351 → 0.3.353

package/dist/core/canvas/migrations.js

@@ -1,4 +1,4 @@
-var te=Object.defineProperty;var o=(e,n)=>te(e,"name",{value:n,configurable:!0});import{parseScope as oe}from"@north-light/crouter-identity";import{importNodeSqlAuthority as ie,recreateNodeRowsView as re}from"./node-sql-migration.js";import{migrateRecoveryWitnesses as se}from"./recovery.js";import{migrateMessagingState as Te}from"./deliveries.js";import{migrateHumanRequestsState as Ee}from"../human/requests.js";import{existsSync as p,readFileSync as U,readdirSync as S,realpathSync as ae,statSync as de}from"node:fs";import{basename as _e,join as w,resolve as H}from"node:path";import{crtrHome as ce,isSafeNodeId as Ne,nodesRoot as X,nodeMetaPath as I}from"./paths.js";import{STATE_MIGRATIONS as ue}from"../../migrations/registry.js";import{customExtensionPaths as Le}from"./extensions.js";import{readMetaObject as P,updateJsonFileDurably as Y,withMetaLock as le,writeMetaObjectLocked as pe}from"./meta-file.js";function Ae(e){e.exec(`
+var te=Object.defineProperty;var o=(e,n)=>te(e,"name",{value:n,configurable:!0});import{parseScope as oe}from"@north-light/crouter-identity";import{importNodeSqlAuthority as ie,recreateNodeRowsView as Te}from"./node-sql-migration.js";import{migrateRecoveryWitnesses as Ee}from"./recovery.js";import{migrateMessagingState as re}from"./deliveries.js";import{migrateHumanRequestsState as se}from"../human/requests.js";import{existsSync as p,readFileSync as U,readdirSync as S,realpathSync as ae,statSync as de}from"node:fs";import{basename as _e,join as x,resolve as H}from"node:path";import{crtrHome as ce,isSafeNodeId as Ne,nodesRoot as f,nodeMetaPath as I}from"./paths.js";import{STATE_MIGRATIONS as ue}from"../../migrations/registry.js";import{customExtensionPaths as Le}from"./extensions.js";import{readMetaObject as P,updateJsonFileDurably as Y,withMetaLock as le,writeMetaObjectLocked as pe}from"./meta-file.js";function Oe(e){e.exec(`
 CREATE TABLE IF NOT EXISTS nodes (
   node_id    TEXT PRIMARY KEY,
   name       TEXT NOT NULL,
@@ -23,7 +23,7 @@ CREATE TABLE IF NOT EXISTS edges (
 CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
 CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
 CREATE INDEX IF NOT EXISTS idx_nodes_status ON nodes(status);
-`)}o(Ae,"baselineSchema");function x(e,n){return new Set(e.prepare(`PRAGMA table_info(${n})`).all().map(t=>t.name))}o(x,"tableColumns");function W(e,n,t,i){n.has(t)||(e.exec(i),n.add(t))}o(W,"addColumnIfMissing");function u(e){return x(e,"nodes")}o(u,"nodeColumns");const E=W;function Oe(e){const n=u(e);E(e,n,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),E(e,n,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),E(e,n,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),E(e,n,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}o(Oe,"addRuntimeColumns");function Re(e){const n=X();if(!p(n))return;const t=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const i of S(n)){const T=I(i);if(!p(T))continue;let r;try{r=JSON.parse(U(T,"utf8"))}catch{continue}t.run(r.intent??null,r.pi_pid??null,r.window??null,r.tmux_session??null,i)}}o(Re,"backfillRuntime");function me(e){if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
+`)}o(Oe,"baselineSchema");function w(e,n){return new Set(e.prepare(`PRAGMA table_info(${n})`).all().map(t=>t.name))}o(w,"tableColumns");function W(e,n,t,i){n.has(t)||(e.exec(i),n.add(t))}o(W,"addColumnIfMissing");function u(e){return w(e,"nodes")}o(u,"nodeColumns");const s=W;function Ae(e){const n=u(e);s(e,n,"intent","ALTER TABLE nodes ADD COLUMN intent TEXT;"),s(e,n,"pi_pid","ALTER TABLE nodes ADD COLUMN pi_pid INTEGER;"),s(e,n,"window","ALTER TABLE nodes ADD COLUMN window TEXT;"),s(e,n,"tmux_session","ALTER TABLE nodes ADD COLUMN tmux_session TEXT;")}o(Ae,"addRuntimeColumns");function Re(e){const n=f();if(!p(n))return;const t=e.prepare('UPDATE nodes SET intent = ?, pi_pid = ?, "window" = ?, tmux_session = ? WHERE node_id = ?');for(const i of S(n)){const r=I(i);if(!p(r))continue;let T;try{T=JSON.parse(U(r,"utf8"))}catch{continue}t.run(T.intent??null,T.pi_pid??null,T.window??null,T.tmux_session??null,i)}}o(Re,"backfillRuntime");function Xe(e){if(!(e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'edges'").get()!==void 0)){e.exec(`
 CREATE TABLE edges (
   type     TEXT NOT NULL,
   from_id  TEXT NOT NULL,
@@ -57,14 +57,14 @@ DROP TABLE edges;
 ALTER TABLE edges_new RENAME TO edges;
 CREATE INDEX IF NOT EXISTS idx_edges_to   ON edges(type, to_id);
 CREATE INDEX IF NOT EXISTS idx_edges_from ON edges(type, from_id);
-`);const i=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(i!==t)throw new Error(`edges FK rebuild lost rows: expected ${t} non-orphan edge(s), got ${i}`);const T=e.prepare("PRAGMA foreign_key_check").all();if(T.length>0)throw new Error(`edges FK rebuild left ${T.length} foreign-key violation(s)`);e.exec("COMMIT")}catch(i){throw e.exec("ROLLBACK"),i}}finally{e.exec("PRAGMA foreign_keys = ON;")}}o(me,"edgesForeignKeyCascade");function fe(e){const n=u(e);E(e,n,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}o(fe,"addPaneColumn");function Xe(e){e.exec(`
+`);const i=e.prepare("SELECT COUNT(*) AS n FROM edges").get().n;if(i!==t)throw new Error(`edges FK rebuild lost rows: expected ${t} non-orphan edge(s), got ${i}`);const r=e.prepare("PRAGMA foreign_key_check").all();if(r.length>0)throw new Error(`edges FK rebuild left ${r.length} foreign-key violation(s)`);e.exec("COMMIT")}catch(i){throw e.exec("ROLLBACK"),i}}finally{e.exec("PRAGMA foreign_keys = ON;")}}o(Xe,"edgesForeignKeyCascade");function me(e){const n=u(e);s(e,n,"pane","ALTER TABLE nodes ADD COLUMN pane TEXT;")}o(me,"addPaneColumn");function fe(e){e.exec(`
 CREATE TABLE IF NOT EXISTS focuses (
   focus_id  TEXT PRIMARY KEY,   -- stable internal id for the viewport
   pane      TEXT,               -- the durable %pane_id realizing the focus
   session   TEXT,               -- derived cache of the user session (reconciled from pane)
   node_id   TEXT NOT NULL UNIQUE -- the node shown; UNIQUE \u2192 a node occupies <=1 focus
 );
-`)}o(Xe,"addFocusesTable");function Ie(e){e.exec(`
+`)}o(fe,"addFocusesTable");function Ie(e){e.exec(`
 CREATE TABLE IF NOT EXISTS wakeups (
   wakeup_id  TEXT PRIMARY KEY,
   node_id    TEXT,                       -- TARGET + node-anchored cancel anchor; NULL = canvas-detached
@@ -131,12 +131,12 @@ SELECT
 FROM wakeups;
 
 DROP TABLE wakeups;
-`)}o(Ue,"migrateWakeupsToTriggers");function Se(e){const n=u(e);E(e,n,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}o(Se,"addHostKindColumn");function Ce(e){e.exec(`
+`)}o(Ue,"migrateWakeupsToTriggers");function Se(e){const n=u(e);s(e,n,"host_kind","ALTER TABLE nodes ADD COLUMN host_kind TEXT;")}o(Se,"addHostKindColumn");function Ce(e){e.exec(`
 CREATE TABLE IF NOT EXISTS canvas_meta (
   key   TEXT PRIMARY KEY,
   value TEXT NOT NULL
 );
-`)}o(Ce,"addCanvasMetaTable");function De(e){const n=u(e);E(e,n,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}o(De,"addProfileIdColumn");function ge(e){const n=u(e);E(e,n,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}o(ge,"addPidIdentityColumn");function he(e){const n=u(e);E(e,n,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}o(he,"addMessageWaitColumn");function K(e){const n=u(e);if(n.size===0)return;E(e,n,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),E(e,n,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const t=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),i=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:T}of t){const r=w(X(),T,"reports");if(!p(r))continue;let s=null;for(const a of S(r))if(a.endsWith(".md"))try{const d=U(w(r,a),"utf8"),_=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(d);if(_===null||Number.isNaN(Date.parse(_[1])))continue;const c={name:a,ts:_[1]};(s===null||c.ts>s.ts||c.ts===s.ts&&c.name>s.name)&&(s=c)}catch{}s!==null&&i.run(s.name,s.ts,T)}}o(K,"addCanonicalFinalColumns");function we(e){const n=X();if(p(n))for(const t of S(n)){const i=I(t);p(i)&&Y(i,T=>{const r=T.launch;if(typeof r!="object"||r===null||Array.isArray(r))return!1;const s=r.extensions;if(!Array.isArray(s)||!s.every(d=>typeof d=="string"))return!1;const a=Le(s);return a.length===s.length?!1:(r.extensions=a,!0)})}}o(we,"normalizePersistedLaunchExtensions");function xe(e){const n=u(e);E(e,n,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}o(xe,"addMessageWaitGenerationColumn");function ye(e){e.exec(`
+`)}o(Ce,"addCanvasMetaTable");function De(e){const n=u(e);s(e,n,"profile_id","ALTER TABLE nodes ADD COLUMN profile_id TEXT;")}o(De,"addProfileIdColumn");function ge(e){const n=u(e);s(e,n,"pi_pid_identity","ALTER TABLE nodes ADD COLUMN pi_pid_identity TEXT;")}o(ge,"addPidIdentityColumn");function he(e){const n=u(e);s(e,n,"waiting_for","ALTER TABLE nodes ADD COLUMN waiting_for TEXT;")}o(he,"addMessageWaitColumn");function K(e){const n=u(e);if(n.size===0)return;s(e,n,"final_report","ALTER TABLE nodes ADD COLUMN final_report TEXT;"),s(e,n,"finalized_at","ALTER TABLE nodes ADD COLUMN finalized_at TEXT;");const t=e.prepare("SELECT node_id FROM nodes WHERE status = 'done' AND final_report IS NULL").all(),i=e.prepare("UPDATE nodes SET final_report = ?, finalized_at = ? WHERE node_id = ? AND final_report IS NULL");for(const{node_id:r}of t){const T=x(f(),r,"reports");if(!p(T))continue;let E=null;for(const a of S(T))if(a.endsWith(".md"))try{const d=U(x(T,a),"utf8"),_=/^---\nnode: [^\n]+\nkind: final\nts: ([^\n]+)\n---\n/.exec(d);if(_===null||Number.isNaN(Date.parse(_[1])))continue;const c={name:a,ts:_[1]};(E===null||c.ts>E.ts||c.ts===E.ts&&c.name>E.name)&&(E=c)}catch{}E!==null&&i.run(E.name,E.ts,r)}}o(K,"addCanonicalFinalColumns");function xe(e){const n=f();if(p(n))for(const t of S(n)){const i=I(t);p(i)&&Y(i,r=>{const T=r.launch;if(typeof T!="object"||T===null||Array.isArray(T))return!1;const E=T.extensions;if(!Array.isArray(E)||!E.every(d=>typeof d=="string"))return!1;const a=Le(E);return a.length===E.length?!1:(T.extensions=a,!0)})}}o(xe,"normalizePersistedLaunchExtensions");function we(e){const n=u(e);s(e,n,"waiting_for_generation","ALTER TABLE nodes ADD COLUMN waiting_for_generation INTEGER NOT NULL DEFAULT 0;")}o(we,"addMessageWaitGenerationColumn");function ye(e){e.exec(`
 CREATE TABLE IF NOT EXISTS consult_outbox (
   node_id      TEXT PRIMARY KEY,   -- legacy work node id
   dir          TEXT NOT NULL,      -- legacy ticket directory
@@ -150,7 +150,7 @@ CREATE INDEX IF NOT EXISTS idx_consult_outbox_status ON consult_outbox(status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir ON consult_outbox(dir);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_request_status ON consult_outbox(dir, request_id, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_dir_status ON consult_outbox(dir, status);
-`)}o(ye,"addHumanWorkOutboxTable");function ve(e){const n=x(e,"consult_outbox"),t=o((i,T)=>W(e,n,i,T),"add");t("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),t("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),t("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),t("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),t("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),t("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),t("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
+`)}o(ye,"addHumanWorkOutboxTable");function ve(e){const n=w(e,"consult_outbox"),t=o((i,r)=>W(e,n,i,r),"add");t("work_kind","ALTER TABLE consult_outbox ADD COLUMN work_kind TEXT NOT NULL DEFAULT 'follow_up';"),t("interaction_id","ALTER TABLE consult_outbox ADD COLUMN interaction_id TEXT;"),t("generation_id","ALTER TABLE consult_outbox ADD COLUMN generation_id TEXT;"),t("interaction_snapshot","ALTER TABLE consult_outbox ADD COLUMN interaction_snapshot TEXT;"),t("handler_command","ALTER TABLE consult_outbox ADD COLUMN handler_command TEXT;"),t("handler_args_json","ALTER TABLE consult_outbox ADD COLUMN handler_args_json TEXT;"),t("claim_token","ALTER TABLE consult_outbox ADD COLUMN claim_token TEXT;"),e.exec(`
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_status ON consult_outbox(work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_dir_status ON consult_outbox(dir, work_kind, status);
 CREATE INDEX IF NOT EXISTS idx_consult_outbox_human_work_request_status ON consult_outbox(dir, request_id, work_kind, status);
@@ -216,28 +216,28 @@ CREATE INDEX IF NOT EXISTS idx_cron_runs_cron ON cron_runs(cron_id, started);
 `)}o(ke,"addCronsTables");function R(e){return`'${e.replace(/'/g,`'"'"'`)}'`}o(R,"shellSingleQuote");function Me(e,n){let t=0;for(;;){const i=`${n}_${t}`;if(!e.split(`
 `).includes(i))return i;t++}}o(Me,"uniqueHeredocDelimiter");function b(e,n,t){const i=Me(n,t);return`${e} <<'${i}'
 ${n}
-${i}`}o(b,"heredocCommand");function Be(e){if(typeof e!="string")return{};try{const n=JSON.parse(e);return typeof n!="object"||n===null||Array.isArray(n)?{}:n}catch{return{}}}o(Be,"migrationPayload");function l(e,n,t){const i=e[n];if(typeof i!="string"||i.trim()==="")throw new Error(`trigger ${t} payload requires non-empty ${n}`);return i}o(l,"requiredString");function C(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(C,"optionalString");function m(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(m,"optionalColumn");function q(e,n,t,i){return b(`crtr node message send --to ${R(e)} --tier ${R(n)}`,t,`CRTR_MIGRATED_${i.replace(/[^A-Za-z0-9]/g,"_")}`)}o(q,"migratedMessageCommand");function Ge(e,n){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${R(e)} --tier ${R(n)}`}o(Ge,"migratedGateStdoutMessageCommand");function He(e,n){const t=[`crtr node new --kind ${R(l(e,"kind",n))}`],i=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[r,s]of i){const a=C(e,r);a!==void 0&&t.push(`--${s} ${R(a)}`)}e.root===!0&&t.push("--root");const T=l(e,"prompt",n);return b(t.join(" "),T,`CRTR_MIGRATED_${n.replace(/[^A-Za-z0-9]/g,"_")}`)}o(He,"migratedSpawnCommand");const $="migration.v22.skipped";function Pe(e){const n=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(n!==void 0?m(n,"cwd"):void 0)??process.cwd()}o(Pe,"ambientMigrationCwd");function Ye(e){let n;try{n=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const t of n){const i=t.eval_pid;if(!(typeof i!="number"||!Number.isInteger(i)||i<=1))try{process.kill(-i,"SIGTERM")}catch{}}}o(Ye,"reapRunningPredicateEvaluations");function We(e){const n=[],t=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;t&&Ye(e);let i=[];if(t)try{i=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(s){n.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${s instanceof Error?s.message:String(s)}`})}const T=Pe(e),r=e.prepare(`
+${i}`}o(b,"heredocCommand");function Be(e){if(typeof e!="string")return{};try{const n=JSON.parse(e);return typeof n!="object"||n===null||Array.isArray(n)?{}:n}catch{return{}}}o(Be,"migrationPayload");function l(e,n,t){const i=e[n];if(typeof i!="string"||i.trim()==="")throw new Error(`trigger ${t} payload requires non-empty ${n}`);return i}o(l,"requiredString");function C(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(C,"optionalString");function X(e,n){const t=e[n];return typeof t=="string"&&t.trim()!==""?t:void 0}o(X,"optionalColumn");function q(e,n,t,i){return b(`crtr node message send --to ${R(e)} --tier ${R(n)}`,t,`CRTR_MIGRATED_${i.replace(/[^A-Za-z0-9]/g,"_")}`)}o(q,"migratedMessageCommand");function Ge(e,n){return`printf '%s\\n' "$CRTR_GATE_STDOUT" | crtr node message send --to ${R(e)} --tier ${R(n)}`}o(Ge,"migratedGateStdoutMessageCommand");function He(e,n){const t=[`crtr node new --kind ${R(l(e,"kind",n))}`],i=[["mode","mode"],["cwd","cwd"],["name","name"],["parent","parent"],["worktreeBase","worktree"],["forkFrom","fork-from"],["model","model"],["profile","profile"],["situationalContext","situational-context"]];for(const[T,E]of i){const a=C(e,T);a!==void 0&&t.push(`--${E} ${R(a)}`)}e.root===!0&&t.push("--root");const r=l(e,"prompt",n);return b(t.join(" "),r,`CRTR_MIGRATED_${n.replace(/[^A-Za-z0-9]/g,"_")}`)}o(He,"migratedSpawnCommand");const $="migration.v22.skipped";function Pe(e){const n=e.prepare("SELECT cwd FROM nodes WHERE parent IS NULL ORDER BY created LIMIT 1").get();return(n!==void 0?X(n,"cwd"):void 0)??process.cwd()}o(Pe,"ambientMigrationCwd");function Ye(e){let n;try{n=e.prepare("SELECT eval_pid FROM triggers WHERE eval_state = 'running' AND eval_pid IS NOT NULL").all()}catch{return}for(const t of n){const i=t.eval_pid;if(!(typeof i!="number"||!Number.isInteger(i)||i<=1))try{process.kill(-i,"SIGTERM")}catch{}}}o(Ye,"reapRunningPredicateEvaluations");function We(e){const n=[],t=e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = 'triggers'").get()!==void 0;t&&Ye(e);let i=[];if(t)try{i=e.prepare("SELECT * FROM triggers ORDER BY created, trigger_id").all()}catch(E){n.push({trigger_id:"<unreadable table>",reason:`triggers table could not be read: ${E instanceof Error?E.message:String(E)}`})}const r=Pe(e),T=e.prepare(`
 INSERT OR REPLACE INTO crons (
   cron_id, name, created_by, command, fire_at, recur, tz, expires_at,
   anchor_node, cancel_on_wake, cwd, env_json, profile, scope,
   run_timeout_s, overlap, on_output, sink, tier, created, updated
-) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const s of i){const a=m(s,"trigger_id");if(a===void 0){n.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Ke(e,r,s,a,T)}catch(d){n.push({trigger_id:a,reason:d instanceof Error?d.message:String(d)})}}n.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run($,JSON.stringify(n)),console.warn(`[canvas migration v22] ${n.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${$}']: `+n.map(s=>`${s.trigger_id} (${s.reason})`).join("; "))),e.exec(`
+) VALUES (?, ?, ?, ?, ?, ?, NULL, ?, ?, ?, ?, NULL, ?, 'profile', ?, 'skip', 'on-failure', '{}', ?, ?, ?)`);for(const E of i){const a=X(E,"trigger_id");if(a===void 0){n.push({trigger_id:"<unidentified row>",reason:"row carries no trigger_id"});continue}try{Ke(e,T,E,a,r)}catch(d){n.push({trigger_id:a,reason:d instanceof Error?d.message:String(d)})}}n.length>0&&(e.prepare("INSERT INTO canvas_meta (key, value) VALUES (?, ?) ON CONFLICT(key) DO UPDATE SET value = excluded.value").run($,JSON.stringify(n)),console.warn(`[canvas migration v22] ${n.length} retired schedule(s) could not be converted to crons and were dropped; see canvas_meta['${$}']: `+n.map(E=>`${E.trigger_id} (${E.reason})`).join("; "))),e.exec(`
 DROP INDEX IF EXISTS idx_triggers_fire;
 DROP INDEX IF EXISTS idx_triggers_node;
 DROP INDEX IF EXISTS idx_triggers_owner;
 DROP INDEX IF EXISTS idx_triggers_eval;
 DROP INDEX IF EXISTS idx_triggers_deadline;
 DROP TABLE IF EXISTS triggers;
-`)}o(We,"migrateTriggersToCrons");function Ke(e,n,t,i,T){const r=l(t,"owner_id",i),s=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(r),a=(s===void 0?void 0:m(s,"cwd"))??T,d=s===void 0?null:m(s,"profile_id")??null,_=m(t,"node_id")??null,c=l(t,"action",i),N=l(t,"action_mode",i),L=l(t,"trigger_type",i),f=Be(t.payload),M=m(t,"created")??new Date().toISOString(),g=N==="deadline_message"?"urgent":C(f,"tier")??"normal",y=C(f,"label");let A,h,B=!1;if(c==="msg"&&(N==="inbox_message"||N==="deadline_message")){if(_===null)throw new Error("has no message target");const O=C(f,"body");O!==void 0?A=q(_,g,O,i):L==="when"?(B=!0,A=Ge(_,g)):A=q(_,g,y??"Scheduled message (no body was recorded when this schedule was armed).",i),h=y??(N==="deadline_message"?"deadline":"scheduled message")}else if(c==="msg"&&N==="fresh_revive"){if(_===null)throw new Error("has no revive target");A=`crtr node lifecycle revive ${R(_)} --fresh`,h=y??"scheduled fresh revive"}else if(c==="new"&&N==="node_birth")A=He(f,i),h=C(f,"name")??`scheduled ${l(f,"kind",i)} node`;else throw new Error(`has unsupported action ${c}/${N}`);let v,F,G=null;if(L==="when"){v=l(t,"next_eval_at",i),F=l(t,"eval_every",i),G=m(t,"timeout_at")??null;const O=l(t,"when_script",i);A=`${B?`if ! CRTR_GATE_STDOUT="$(
-${O}
+`)}o(We,"migrateTriggersToCrons");function Ke(e,n,t,i,r){const T=l(t,"owner_id",i),E=e.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(T),a=(E===void 0?void 0:X(E,"cwd"))??r,d=E===void 0?null:X(E,"profile_id")??null,_=X(t,"node_id")??null,c=l(t,"action",i),N=l(t,"action_mode",i),L=l(t,"trigger_type",i),m=Be(t.payload),M=X(t,"created")??new Date().toISOString(),g=N==="deadline_message"?"urgent":C(m,"tier")??"normal",y=C(m,"label");let O,h,B=!1;if(c==="msg"&&(N==="inbox_message"||N==="deadline_message")){if(_===null)throw new Error("has no message target");const A=C(m,"body");A!==void 0?O=q(_,g,A,i):L==="when"?(B=!0,O=Ge(_,g)):O=q(_,g,y??"Scheduled message (no body was recorded when this schedule was armed).",i),h=y??(N==="deadline_message"?"deadline":"scheduled message")}else if(c==="msg"&&N==="fresh_revive"){if(_===null)throw new Error("has no revive target");O=`crtr node lifecycle revive ${R(_)} --fresh`,h=y??"scheduled fresh revive"}else if(c==="new"&&N==="node_birth")O=He(m,i),h=C(m,"name")??`scheduled ${l(m,"kind",i)} node`;else throw new Error(`has unsupported action ${c}/${N}`);let v,F,G=null;if(L==="when"){v=l(t,"next_eval_at",i),F=l(t,"eval_every",i),G=X(t,"timeout_at")??null;const A=l(t,"when_script",i);O=`${B?`if ! CRTR_GATE_STDOUT="$(
+${A}
 )"; then`:`if ! (
-${O}
+${A}
 ); then`}
   exit 0
 fi
 {
-${A}
-} && crtr cron cancel "$CRTR_CRON_ID"`}else if(L==="at"||L==="every"||L==="until")v=l(t,"fire_at",i),F=L==="every"?l(t,"recur",i):null;else throw new Error(`has unknown timing type ${L}`);if(N==="deadline_message"&&_!==null){const O=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(_,i);if(O!==void 0)throw new Error(`node ${_} already has a migrated deadline (${String(O.cron_id)}); only one is allowed`)}n.run(i,h,r,A,v,F,G,_,N==="deadline_message"?1:0,a,d,300,g,M,M)}o(Ke,"convertTriggerRow");function be(e){const n=x(e,"crons");n.size===0||n.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}o(be,"addCronRunPidIdentityColumn");function qe(e){const n=x(e,"crons");n.size!==0&&(n.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),n.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}o(qe,"addCronOutOfBandColumn");function $e(e){e.exec(`
+${O}
+} && crtr cron cancel "$CRTR_CRON_ID"`}else if(L==="at"||L==="every"||L==="until")v=l(t,"fire_at",i),F=L==="every"?l(t,"recur",i):null;else throw new Error(`has unknown timing type ${L}`);if(N==="deadline_message"&&_!==null){const A=e.prepare("SELECT cron_id FROM crons WHERE anchor_node = ? AND cancel_on_wake = 1 AND cron_id <> ?").get(_,i);if(A!==void 0)throw new Error(`node ${_} already has a migrated deadline (${String(A.cron_id)}); only one is allowed`)}n.run(i,h,T,O,v,F,G,_,N==="deadline_message"?1:0,a,d,300,g,M,M)}o(Ke,"convertTriggerRow");function be(e){const n=w(e,"crons");n.size===0||n.has("run_pid_identity")||e.exec("ALTER TABLE crons ADD COLUMN run_pid_identity TEXT;")}o(be,"addCronRunPidIdentityColumn");function qe(e){const n=w(e,"crons");n.size!==0&&(n.has("run_out_of_band")||e.exec("ALTER TABLE crons ADD COLUMN run_out_of_band INTEGER NOT NULL DEFAULT 0;"),n.has("queued")&&e.exec("ALTER TABLE crons DROP COLUMN queued;"))}o(qe,"addCronOutOfBandColumn");function $e(e){e.exec(`
 CREATE TABLE IF NOT EXISTS warm_pool (
   node_id    TEXT PRIMARY KEY REFERENCES nodes(node_id) ON DELETE CASCADE,
   recipe_key TEXT NOT NULL,   -- frozen launch tuple this spare was minted for
@@ -256,7 +256,7 @@ CREATE TABLE consult_outbox_new (
 );
 `);const t=e.prepare(`
 INSERT INTO consult_outbox_new (node_id, ticket_node_id, request_id, work_kind, status, final_report, updated_at)
-VALUES (?, ?, ?, ?, ?, ?, ?)`);let i=0;for(const T of n){const r=_e(T.dir);if(!(T.root===H(T.root)&&T.dir===w(T.root,r))||!Ne(r)){i+=1;continue}t.run(T.node_id,r,T.request_id,T.work_kind,T.status,T.final_report,T.updated_at)}i>0&&console.warn(`[canvas migration v26] dropped ${i} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
+VALUES (?, ?, ?, ?, ?, ?, ?)`);let i=0;for(const r of n){const T=_e(r.dir);if(!(r.root===H(r.root)&&r.dir===x(r.root,T))||!Ne(T)){i+=1;continue}t.run(r.node_id,T,r.request_id,r.work_kind,r.status,r.final_report,r.updated_at)}i>0&&console.warn(`[canvas migration v26] dropped ${i} consult_outbox row(s) whose legacy ticket path cannot safely map to a ticket node id`),e.exec(`
 DROP TABLE consult_outbox;
 ALTER TABLE consult_outbox_new RENAME TO consult_outbox;
 
@@ -378,18 +378,18 @@ CREATE TABLE human_action_deliveries (
   updated_at           INTEGER NOT NULL
 );
 CREATE INDEX idx_human_action_deliveries_due ON human_action_deliveries(state, next_attempt_at);
-`)}o(nn,"addHumanActionDeliveries");function tn(e){const n=u(e);E(e,n,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const t of S(X(),{withFileTypes:!0}))if(t.isDirectory())try{const i=JSON.parse(U(I(t.name),"utf8"));typeof i.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(i.pi_session_file,t.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(tn,"addNodeSessionFileIndex");function j(e,n){const t=o(a=>{const d=H(a);return p(d)?ae(d):d},"canonical"),i=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const T=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:a}of T){const d=I(a);if(P(d)===null){i.run(null,a);continue}const _=le(d,()=>{const c=P(d);if(c===null)throw new Error(`node ${a} session metadata changed during ownership migration`);if(typeof c.pi_session_file!="string")return null;const N=c.pi_session_file,L=t(N);return L!==N&&(c.pi_session_file=L,pe(d,c)),L});i.run(_,a)}const r=e.prepare(`
+`)}o(nn,"addHumanActionDeliveries");function tn(e){const n=u(e);s(e,n,"pi_session_file","ALTER TABLE nodes ADD COLUMN pi_session_file TEXT;");for(const t of S(f(),{withFileTypes:!0}))if(t.isDirectory())try{const i=JSON.parse(U(I(t.name),"utf8"));typeof i.pi_session_file=="string"&&e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?").run(i.pi_session_file,t.name)}catch{}e.exec("CREATE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(tn,"addNodeSessionFileIndex");function j(e,n){const t=o(a=>{const d=H(a);return p(d)?ae(d):d},"canonical"),i=e.prepare("UPDATE nodes SET pi_session_file = ? WHERE node_id = ?");e.exec("DROP INDEX IF EXISTS idx_nodes_pi_session_file;");const r=e.prepare("SELECT node_id FROM nodes ORDER BY created ASC, node_id ASC").all();for(const{node_id:a}of r){const d=I(a);if(P(d)===null){i.run(null,a);continue}const _=le(d,()=>{const c=P(d);if(c===null)throw new Error(`node ${a} session metadata changed during ownership migration`);if(typeof c.pi_session_file!="string")return null;const N=c.pi_session_file,L=t(N);return L!==N&&(c.pi_session_file=L,pe(d,c)),L});i.run(_,a)}const T=e.prepare(`
 SELECT pi_session_file
 FROM nodes
 WHERE pi_session_file IS NOT NULL
 GROUP BY pi_session_file
 HAVING COUNT(*) > 1
-`).all();if(!n&&r.length>0){const a=r.map(({pi_session_file:d})=>d).join(", ");throw new Error(`cannot restore unique Pi session ownership: authoritative metadata has concurrent claimants for ${a}`)}const s=e.prepare("UPDATE nodes SET pi_session_file = NULL WHERE node_id = ?");for(const{pi_session_file:a}of r){const d=e.prepare(`
+`).all();if(!n&&T.length>0){const a=T.map(({pi_session_file:d})=>d).join(", ");throw new Error(`cannot restore unique Pi session ownership: authoritative metadata has concurrent claimants for ${a}`)}const E=e.prepare("UPDATE nodes SET pi_session_file = NULL WHERE node_id = ?");for(const{pi_session_file:a}of T){const d=e.prepare(`
 SELECT node_id
 FROM nodes
 WHERE pi_session_file = ?
 ORDER BY created ASC, node_id ASC
-`).all(a);for(const{node_id:_}of d.slice(1)){if(!Y(I(_),N=>{const L=N.pi_session_file;if(typeof L!="string"||t(L)!==a)throw new Error(`node ${_} session metadata changed during ownership migration`);return N.pi_session_id=null,N.pi_session_file=null,!0}))throw new Error(`node ${_} session metadata changed during ownership migration`);s.run(_)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(j,"reconcileNodeSessionFileOwners");function on(e){j(e,!0)}o(on,"makeNodeSessionFileUnique");function rn(e){j(e,!1)}o(rn,"repairNodeSessionFileUniqueIndex");function sn(e){const n=u(e);E(e,n,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),E(e,n,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),E(e,n,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),E(e,n,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),E(e,n,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),E(e,n,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
+`).all(a);for(const{node_id:_}of d.slice(1)){if(!Y(I(_),N=>{const L=N.pi_session_file;if(typeof L!="string"||t(L)!==a)throw new Error(`node ${_} session metadata changed during ownership migration`);return N.pi_session_id=null,N.pi_session_file=null,!0}))throw new Error(`node ${_} session metadata changed during ownership migration`);E.run(_)}}e.exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_nodes_pi_session_file ON nodes(pi_session_file);")}o(j,"reconcileNodeSessionFileOwners");function on(e){j(e,!0)}o(on,"makeNodeSessionFileUnique");function Tn(e){j(e,!1)}o(Tn,"repairNodeSessionFileUniqueIndex");function En(e){const n=u(e);s(e,n,"frozen_at","ALTER TABLE nodes ADD COLUMN frozen_at TEXT;"),s(e,n,"respawn_failures","ALTER TABLE nodes ADD COLUMN respawn_failures INTEGER NOT NULL DEFAULT 0;"),s(e,n,"respawn_not_before","ALTER TABLE nodes ADD COLUMN respawn_not_before TEXT;"),s(e,n,"launched_at","ALTER TABLE nodes ADD COLUMN launched_at TEXT;"),s(e,n,"last_settled_at","ALTER TABLE nodes ADD COLUMN last_settled_at TEXT;"),s(e,n,"terminal_reason","ALTER TABLE nodes ADD COLUMN terminal_reason TEXT;"),e.exec(`
 UPDATE nodes SET terminal_reason = CASE
   WHEN status = 'done' AND final_report IS NOT NULL THEN 'finalized'
   WHEN status = 'done' AND intent = 'parked'        THEN 'parked'
@@ -398,7 +398,7 @@ UPDATE nodes SET terminal_reason = CASE
   WHEN status = 'dead'                              THEN 'crashed'
 END
 WHERE status IN ('done','canceled','dead') AND terminal_reason IS NULL;
-`)}o(sn,"addNodeLifecycleColumns");function Tn(e){const n=u(e);E(e,n,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),E(e,n,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const t=X();if(!p(t))return;const i=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const T of S(t)){const r=I(T);if(!p(r))continue;let s;try{s=JSON.parse(U(r,"utf8"))}catch{continue}const a=typeof s.description=="string"?s.description:null,d=typeof s.cycles=="number"?s.cycles:null;i.run(a,d,T)}}o(Tn,"addNodeLabelColumns");function En(e){const n=u(e);E(e,n,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),E(e,n,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),E(e,n,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),E(e,n,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),E(e,n,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),E(e,n,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
+`)}o(En,"addNodeLifecycleColumns");function rn(e){const n=u(e);s(e,n,"description","ALTER TABLE nodes ADD COLUMN description TEXT;"),s(e,n,"cycles","ALTER TABLE nodes ADD COLUMN cycles INTEGER;");const t=f();if(!p(t))return;const i=e.prepare("UPDATE nodes SET description = ?, cycles = ? WHERE node_id = ?");for(const r of S(t)){const T=I(r);if(!p(T))continue;let E;try{E=JSON.parse(U(T,"utf8"))}catch{continue}const a=typeof E.description=="string"?E.description:null,d=typeof E.cycles=="number"?E.cycles:null;i.run(a,d,r)}}o(rn,"addNodeLabelColumns");function sn(e){const n=u(e);s(e,n,"outcome_kind","ALTER TABLE nodes ADD COLUMN outcome_kind TEXT;"),s(e,n,"outcome_reason","ALTER TABLE nodes ADD COLUMN outcome_reason TEXT;"),s(e,n,"outcome_at","ALTER TABLE nodes ADD COLUMN outcome_at TEXT;"),s(e,n,"outcome_revision","ALTER TABLE nodes ADD COLUMN outcome_revision INTEGER NOT NULL DEFAULT 0;"),s(e,n,"outcome_detail_json","ALTER TABLE nodes ADD COLUMN outcome_detail_json TEXT;"),s(e,n,"deadline_at","ALTER TABLE nodes ADD COLUMN deadline_at TEXT;"),e.exec(`
 CREATE TABLE IF NOT EXISTS node_outcome_deliveries (
   node_id              TEXT PRIMARY KEY,
   state                TEXT NOT NULL,
@@ -431,17 +431,17 @@ UPDATE nodes SET outcome_kind='failure',
        outcome_reason=COALESCE(terminal_reason,'crashed'),
        outcome_at=COALESCE(finalized_at, created), outcome_revision=1
  WHERE final_report IS NULL AND status IN ('done','dead','canceled') AND outcome_at IS NULL;
-`)}o(En,"addNodeOutcomeAndDeadline");function an(e){const n=u(e);E(e,n,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),E(e,n,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),E(e,n,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),E(e,n,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const t=e.prepare(`UPDATE nodes
+`)}o(sn,"addNodeOutcomeAndDeadline");function an(e){const n=u(e);s(e,n,"telemetry_tokens_in","ALTER TABLE nodes ADD COLUMN telemetry_tokens_in INTEGER;"),s(e,n,"telemetry_context_tokens","ALTER TABLE nodes ADD COLUMN telemetry_context_tokens INTEGER;"),s(e,n,"telemetry_last_activity","ALTER TABLE nodes ADD COLUMN telemetry_last_activity TEXT;"),s(e,n,"telemetry_updated_at","ALTER TABLE nodes ADD COLUMN telemetry_updated_at TEXT;");const t=e.prepare(`UPDATE nodes
     SET telemetry_tokens_in = ?, telemetry_context_tokens = ?,
         telemetry_last_activity = ?, telemetry_updated_at = ?
-    WHERE node_id = ?`);for(const{node_id:i}of e.prepare("SELECT node_id FROM nodes").all()){const T=w(X(),i,"job","telemetry.json");if(p(T))try{const r=JSON.parse(U(T,"utf8")),s=typeof r.tokens_in=="number"&&Number.isFinite(r.tokens_in)?r.tokens_in:null,a=typeof r.context_tokens=="number"&&Number.isFinite(r.context_tokens)?r.context_tokens:null,d=typeof r.last_activity=="string"?r.last_activity:null,_=de(T).mtime.toISOString();t.run(s,a,d,_,i)}catch{}}}o(an,"addNodeTelemetryColumns");function dn(e){e.exec(`
+    WHERE node_id = ?`);for(const{node_id:i}of e.prepare("SELECT node_id FROM nodes").all()){const r=x(f(),i,"job","telemetry.json");if(p(r))try{const T=JSON.parse(U(r,"utf8")),E=typeof T.tokens_in=="number"&&Number.isFinite(T.tokens_in)?T.tokens_in:null,a=typeof T.context_tokens=="number"&&Number.isFinite(T.context_tokens)?T.context_tokens:null,d=typeof T.last_activity=="string"?T.last_activity:null,_=de(r).mtime.toISOString();t.run(E,a,d,_,i)}catch{}}}o(an,"addNodeTelemetryColumns");function dn(e){e.exec(`
 CREATE INDEX IF NOT EXISTS deliveries_external_due_order
   ON deliveries(state, next_attempt_at, created_at, delivery_id)
   WHERE destination_kind = 'external_action' AND canceled_at IS NULL;
 DROP INDEX IF EXISTS deliveries_external_due;
 CREATE INDEX IF NOT EXISTS idx_nodes_parent_created ON nodes(parent, created);
 CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
-`)}o(dn,"addRecurringLaneIndexes");const _n=ue.filter(e=>e.lane==="journaled").map(e=>n=>e.apply(n,ce()));function cn(e){re(e)}o(cn,"projectLiveNodeState");function Nn(e){E(e,u(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}o(Nn,"addNodeScopes");function un(e){const n=u(e);E(e,n,"grantee","ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT 'user:local';"),E(e,n,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),E(e,n,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),E(e,n,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),E(e,n,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),E(e,n,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),E(e,n,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),E(e,n,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),E(e,n,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
+`)}o(dn,"addRecurringLaneIndexes");const _n=ue.filter(e=>e.lane==="journaled").map(e=>n=>e.apply(n,ce()));function cn(e){Te(e)}o(cn,"projectLiveNodeState");function Nn(e){s(e,u(e),"scopes_json","ALTER TABLE nodes ADD COLUMN scopes_json TEXT;")}o(Nn,"addNodeScopes");function un(e){const n=u(e);s(e,n,"grantee","ALTER TABLE nodes ADD COLUMN grantee TEXT NOT NULL DEFAULT 'user:local';"),s(e,n,"sub","ALTER TABLE nodes ADD COLUMN sub TEXT;"),s(e,n,"grant_id","ALTER TABLE nodes ADD COLUMN grant_id TEXT;"),s(e,n,"client_id","ALTER TABLE nodes ADD COLUMN client_id TEXT;"),s(e,n,"metadata_json","ALTER TABLE nodes ADD COLUMN metadata_json TEXT;"),s(e,n,"run_id","ALTER TABLE nodes ADD COLUMN run_id TEXT;"),s(e,n,"event_cursor","ALTER TABLE nodes ADD COLUMN event_cursor INTEGER;"),s(e,n,"usage_json","ALTER TABLE nodes ADD COLUMN usage_json TEXT;"),s(e,n,"deleting_at","ALTER TABLE nodes ADD COLUMN deleting_at TEXT;"),e.exec(`
     ALTER TABLE sessions ADD COLUMN event_offset INTEGER;
     CREATE INDEX idx_nodes_run_id ON nodes(run_id);
     -- Child nodes may be pruned while their root run and event history remain.
@@ -478,13 +478,13 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
     );
     CREATE UNIQUE INDEX idx_grants_grantee_sub ON grants(grantee, sub);
     CREATE TABLE runtime_state (key TEXT PRIMARY KEY, value TEXT NOT NULL);
-  `)}o(ln,"addGrantMirror");function pn(e){e.exec("UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = 'user:local';")}o(pn,"migrateTerminalGrantees");function An(e){const n={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},t=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),i=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const T of t){const r=JSON.parse(T.scopes_json);if(!Array.isArray(r))throw new Error(`invalid launched scopes for node ${T.node_id}`);const s=[];for(const a of r){if(typeof a!="string")continue;const d=n[a]??a;try{oe(d),s.push(d)}catch(_){if(!(_ instanceof TypeError))throw _}}i.run(JSON.stringify([...new Set(s)]),T.node_id)}}o(An,"migrateLaunchedScopes");function On(e){e.exec(`CREATE TABLE node_tokens (
+  `)}o(ln,"addGrantMirror");function pn(e){e.exec("UPDATE nodes SET grantee = 'app:terminal' WHERE grantee = 'user:local';")}o(pn,"migrateTerminalGrantees");function On(e){const n={llm:"crtr:llm",act:"crtr:act",schedule:"crtr:schedule","memory:read":"crtr:memory:read:user","memory:write":"crtr:memory:rw:user"},t=e.prepare("SELECT node_id, scopes_json FROM nodes WHERE scopes_json IS NOT NULL").all(),i=e.prepare("UPDATE nodes SET scopes_json = ? WHERE node_id = ?");for(const r of t){const T=JSON.parse(r.scopes_json);if(!Array.isArray(T))throw new Error(`invalid launched scopes for node ${r.node_id}`);const E=[];for(const a of T){if(typeof a!="string")continue;const d=n[a]??a;try{oe(d),E.push(d)}catch(_){if(!(_ instanceof TypeError))throw _}}i.run(JSON.stringify([...new Set(E)]),r.node_id)}}o(On,"migrateLaunchedScopes");function An(e){e.exec(`CREATE TABLE node_tokens (
     broker_process_id TEXT PRIMARY KEY REFERENCES executions(execution_id) ON DELETE CASCADE,
     node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
     token_hash TEXT NOT NULL UNIQUE, grantee TEXT NOT NULL, uid INTEGER NOT NULL,
     sub TEXT NOT NULL, grant TEXT, client_id TEXT, scopes_json TEXT,
     issued_at TEXT NOT NULL, revoked_at TEXT
-  );`)}o(On,"addNodeTokens");function z(e,n){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(n)!==void 0}o(z,"hasTable");function J(e,n,t){return e.prepare(`PRAGMA table_info(${n})`).all().some(i=>i.name===t)}o(J,"hasColumn");function Q(e){z(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
+  );`)}o(An,"addNodeTokens");function z(e,n){return e.prepare("SELECT 1 FROM sqlite_master WHERE type = 'table' AND name = ?").get(n)!==void 0}o(z,"hasTable");function J(e,n,t){return e.prepare(`PRAGMA table_info(${n})`).all().some(i=>i.name===t)}o(J,"hasColumn");function Q(e){z(e,"memory_reads")||e.exec(`CREATE TABLE memory_reads (
     node_id TEXT NOT NULL REFERENCES nodes(node_id) ON DELETE CASCADE,
     name TEXT NOT NULL,
     scope TEXT NOT NULL,
@@ -498,7 +498,7 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
     created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'retired'))
   );`)}o(Z,"addAppUsers");function ee(e){J(e,"crons","grantee")||(e.exec("ALTER TABLE crons ADD COLUMN grantee TEXT NOT NULL DEFAULT 'app:terminal'"),e.exec(`UPDATE crons SET grantee = COALESCE(
     (SELECT COALESCE(nodes.grantee, 'app:terminal') FROM nodes WHERE nodes.node_id = crons.anchor_node),
-    'app:terminal') WHERE anchor_node IS NOT NULL`))}o(ee,"addCronGrantee");function Rn(e){Q(e),V(e),Z(e),ee(e)}o(Rn,"convergeSharedVersions");function mn(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
+    'app:terminal') WHERE anchor_node IS NOT NULL`))}o(ee,"addCronGrantee");function Rn(e){Q(e),V(e),Z(e),ee(e)}o(Rn,"convergeSharedVersions");function Xn(e){(e.prepare("SELECT sql FROM sqlite_master WHERE type = 'table' AND name = 'app_users'").get()?.sql??"").includes("'removed'")||e.exec(`CREATE TABLE app_users_new (
     uid INTEGER PRIMARY KEY, app TEXT NOT NULL,
     created TEXT NOT NULL, status TEXT NOT NULL CHECK (status IN ('active', 'removed')),
     removed_at TEXT
@@ -508,4 +508,20 @@ CREATE INDEX IF NOT EXISTS idx_edges_type_created ON edges(type, created);
       CASE status WHEN 'active' THEN NULL ELSE created END FROM app_users;
   DROP TABLE app_users;
   ALTER TABLE app_users_new RENAME TO app_users;
-  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}o(mn,"appUsersRemoved");const D=[Ae,Oe,Re,me,fe,Xe,Ie,Se,Ue,Ce,De,ge,he,K,we,K,xe,ye,ve,Fe,ke,We,be,qe,$e,je,ze,Je,Qe,Ve,Ze,en,nn,tn,sn,on,rn,Tn,En,..._n,e=>{ie(e),se(e),Te(e),Ee(e)},dn,cn,an,Nn,un,Ln,ln,On,pn,An,Q,V,Z,ee,Rn,mn],fn=new Set([3]);function k(e){return e.prepare("PRAGMA user_version").get().user_version}o(k,"currentUserVersion");function ne(e,n){D[n](e),e.exec(`PRAGMA user_version = ${n+1}`)}o(ne,"applyMigration");function Mn(e){const n=k(e);if(n>D.length)throw new Error(`unsupported canvas schema version ${n} (latest supported ${D.length})`);if(n===D.length)return;const t=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{Xn(e)}finally{e.exec(`PRAGMA busy_timeout = ${t};`)}}o(Mn,"migrate");function Xn(e){for(;;){const n=k(e);if(n>=D.length)return;if(e.isTransaction||fn.has(n)){ne(e,n);continue}e.exec("BEGIN IMMEDIATE");try{k(e)===n&&ne(e,n),e.exec("COMMIT")}catch(t){try{e.exec("ROLLBACK")}catch{}throw t}}}o(Xn,"runPendingMigrations");export{D as MIGRATIONS,Mn as migrate};
+  CREATE UNIQUE INDEX idx_app_users_active_app ON app_users(app) WHERE status = 'active';`)}o(Xn,"appUsersRemoved");function mn(e){e.exec(`CREATE TABLE IF NOT EXISTS uploads (
+    upload_id TEXT PRIMARY KEY, grantee TEXT NOT NULL, name TEXT NOT NULL, media_type TEXT NOT NULL,
+    size INTEGER NOT NULL, created_at TEXT NOT NULL, delete_pending_since TEXT
+  );
+  CREATE INDEX IF NOT EXISTS idx_uploads_grantee ON uploads(grantee);
+  CREATE INDEX IF NOT EXISTS idx_uploads_delete_pending ON uploads(delete_pending_since) WHERE delete_pending_since IS NOT NULL;
+  CREATE TABLE IF NOT EXISTS upload_uses (
+    upload_id TEXT NOT NULL, run_id TEXT NOT NULL, path TEXT NOT NULL,
+    PRIMARY KEY (run_id, path)
+  );
+  CREATE INDEX IF NOT EXISTS idx_upload_uses_upload ON upload_uses(upload_id);
+  CREATE TABLE IF NOT EXISTS shares (
+    share_id TEXT PRIMARY KEY, source_space TEXT NOT NULL, source_path TEXT NOT NULL, storage_key TEXT NOT NULL,
+    url TEXT NOT NULL, created_by TEXT NOT NULL, created_at TEXT NOT NULL, expires_at TEXT,
+    status TEXT NOT NULL CHECK (status IN ('on', 'off')), object_deleted_at TEXT
+  );
+  CREATE INDEX IF NOT EXISTS idx_shares_created_by ON shares(created_by);`)}o(mn,"addFileTransfer");const D=[Oe,Ae,Re,Xe,me,fe,Ie,Se,Ue,Ce,De,ge,he,K,xe,K,we,ye,ve,Fe,ke,We,be,qe,$e,je,ze,Je,Qe,Ve,Ze,en,nn,tn,En,on,Tn,rn,sn,..._n,e=>{ie(e),Ee(e),re(e),se(e)},dn,cn,an,Nn,un,Ln,ln,An,pn,On,Q,V,Z,ee,Rn,Xn,mn],fn=new Set([3]);function k(e){return e.prepare("PRAGMA user_version").get().user_version}o(k,"currentUserVersion");function ne(e,n){D[n](e),e.exec(`PRAGMA user_version = ${n+1}`)}o(ne,"applyMigration");function Bn(e){const n=k(e);if(n>D.length)throw new Error(`unsupported canvas schema version ${n} (latest supported ${D.length})`);if(n===D.length)return;const t=e.prepare("PRAGMA busy_timeout").get().timeout;e.exec("PRAGMA busy_timeout = 60000;");try{In(e)}finally{e.exec(`PRAGMA busy_timeout = ${t};`)}}o(Bn,"migrate");function In(e){for(;;){const n=k(e);if(n>=D.length)return;if(e.isTransaction||fn.has(n)){ne(e,n);continue}e.exec("BEGIN IMMEDIATE");try{k(e)===n&&ne(e,n),e.exec("COMMIT")}catch(t){try{e.exec("ROLLBACK")}catch{}throw t}}}o(In,"runPendingMigrations");export{D as MIGRATIONS,Bn as migrate};

package/dist/core/canvas/recovery.js

@@ -23,4 +23,4 @@ CREATE TABLE IF NOT EXISTS node_faults (
 );
 CREATE UNIQUE INDEX IF NOT EXISTS idx_node_faults_active ON node_faults(node_id) WHERE active = 1;
 CREATE UNIQUE INDEX IF NOT EXISTS idx_node_faults_episode ON node_faults(node_id) WHERE episode_state IS NOT NULL;
-`)}o(ye,"createFaultTable");function y(e,t){return typeof t=="string"&&e.includes(t)}o(y,"contains");function b(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}o(b,"isRecord");function B(e){if(!b(e)||typeof e.provider!="string"||e.provider===""||typeof e.model!="string"||e.model==="")return;const t=typeof e.status=="number"&&Number.isFinite(e.status)?e.status:void 0,r=typeof e.code=="string"||typeof e.code=="number"?e.code:void 0,n=typeof e.errno=="string"?e.errno:void 0,i=typeof e.body=="string"?e.body:void 0,d=Array.isArray(e.causes)?e.causes.flatMap(s=>{if(!b(s))return[];const c={...typeof s.message=="string"?{message:s.message}:{},...typeof s.status=="number"&&Number.isFinite(s.status)?{status:s.status}:{},...typeof s.code=="string"||typeof s.code=="number"?{code:s.code}:{},...typeof s.errno=="string"?{errno:s.errno}:{},...typeof s.body=="string"?{body:s.body}:{}};return Object.keys(c).length===0?[]:[c]}):void 0;return{provider:e.provider,model:e.model,...t===void 0?{}:{status:t},...r===void 0?{}:{code:r},...n===void 0?{}:{errno:n},...i===void 0?{}:{body:i},...d===void 0||d.length===0?{}:{causes:d}}}o(B,"parseProviderError");function K(e){try{const t=JSON.parse(e);if(!y(ce,t.link)||typeof t.op!="string"||t.op===""||!y(pe,t.kind)||typeof t.message!="string"||typeof t.since!="string")return null;const r=X(t.operation_id);if(!b(t.retry)||!y(_e,t.retry.disposition)||t.retry.by!==void 0&&!y(le,t.retry.by)||t.retry.attempt!==void 0&&typeof t.retry.attempt!="number"||t.retry.max!==void 0&&typeof t.retry.max!="number"||t.retry.nextAt!==void 0&&typeof t.retry.nextAt!="string"||t.anchorEntryId!==void 0&&(typeof t.anchorEntryId!="string"||t.anchorEntryId===""))return null;const n=t.providerError===void 0?void 0:B(t.providerError);return t.providerError!==void 0&&n===void 0?null:{link:t.link,op:t.op,kind:t.kind,retry:{disposition:t.retry.disposition,...t.retry.by===void 0?{}:{by:t.retry.by},...t.retry.attempt===void 0?{}:{attempt:t.retry.attempt},...t.retry.max===void 0?{}:{max:t.retry.max},...t.retry.nextAt===void 0?{}:{nextAt:t.retry.nextAt}},message:t.message,since:t.since,operation_id:r,...t.anchorEntryId===void 0?{}:{anchorEntryId:t.anchorEntryId},...n===void 0?{}:{providerError:n}}}catch{return null}}o(K,"parseLegacyFault");function Te(e){const t=de(e);try{return oe(t)}catch{return t}}o(Te,"canonicalPath");function ge(e){try{const t=JSON.parse(e);if(!y(Ee,t.state)||typeof t.sessionFile!="string"||t.sessionFile==="")return null;const r=JSON.stringify(t.fault),n=K(r);if(n===null||n.link!=="pi\u2192provider"||n.retry.disposition!=="auto"||n.retry.by!=="daemon")return null;const i=t.anchorEntryId;return i!==null&&typeof i!="string"||(n.anchorEntryId??null)!==i?null:{state:t.state,sessionFile:Te(t.sessionFile),fault:n}}catch{return null}}o(ge,"parseLegacyEpisode");function J(e){return e!==void 0?X(e):M.current()??M.fresh(r=>r)}o(J,"resolveOperationId");function Ne(e){return e.slice(0,ue)}o(Ne,"clampMessage");function A(e){return e.link==="pi\u2192provider"&&e.retry.disposition==="auto"&&e.retry.by==="daemon"?3:e.retry.disposition==="fatal"?2:1}o(A,"faultPriority");function Y(e){return{link:e.link,op:e.op,kind:e.kind,message:e.message,since:e.since,operationId:e.operation_id,anchorEntryId:e.anchorEntryId??null,retryDisposition:e.retry.disposition,retryBy:e.retry.by??null,retryAttempt:e.retry.attempt??null,retryMax:e.retry.max??null,retryNextAt:e.retry.nextAt??null,providerError:e.providerError===void 0?null:JSON.stringify(e.providerError)}}o(Y,"encodeFault");function G(e){const t=e.provider_error_json,r=typeof t=="string"?B(JSON.parse(t)):void 0;if(typeof t=="string"&&r===void 0)throw new Error(`invalid provider error on stored fault ${e.fault_id}`);const n={disposition:e.retry_disposition,...e.retry_by===null?{}:{by:e.retry_by},...e.retry_attempt===null?{}:{attempt:e.retry_attempt},...e.retry_max===null?{}:{max:e.retry_max},...e.retry_next_at===null?{}:{nextAt:e.retry_next_at}};return{faultId:e.fault_id,link:e.link,op:e.op,kind:e.kind,message:e.message,since:e.since,operation_id:e.operation_id,retry:n,...e.anchor_entry_id===null?{}:{anchorEntryId:e.anchor_entry_id},...r===void 0?{}:{providerError:r}}}o(G,"hydrateFault");function I(e,t){const r=e.prepare("SELECT * FROM node_faults WHERE node_id = ? AND active = 1").get(t);return r===void 0?null:G(r)}o(I,"activeFault");function V(e){if(!y(j,e.link))throw new Error(`fault link is not durable: ${e.link}`);return{link:e.link,op:e.op,kind:e.kind,retry:e.retry,message:Ne(e.message),since:e.since??a(),operation_id:J(e.operation_id),...typeof e.anchorEntryId=="string"&&e.anchorEntryId!==""?{anchorEntryId:e.anchorEntryId}:{},...e.providerError===void 0?{}:{providerError:e.providerError}}}o(V,"storedFault");function Q(e,t){w({level:t.retry.disposition==="fatal"?"error":"warn",event:"fault.recorded",operation_id:t.operation_id,node_id:e,error_class:P(t),fields:{link:t.link,op:t.op,kind:t.kind,retry:t.retry,message:t.message,...t.anchorEntryId===void 0?{}:{anchor_entry_id:t.anchorEntryId},...t.providerError===void 0?{}:{provider_error:t.providerError}}})}o(Q,"emitRecordedFault");function F(e,t,r,n,i){const d=k(),s=Y(r),c=a();return e.prepare("INSERT INTO node_faults (fault_id, node_id, link, op, kind, message, since, operation_id, anchor_entry_id, retry_disposition, retry_by, retry_attempt, retry_max, retry_next_at, provider_error_json, active, episode_state, episode_binding_id, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(d,t,s.link,s.op,s.kind,s.message,s.since,s.operationId,s.anchorEntryId,s.retryDisposition,s.retryBy,s.retryAttempt,s.retryMax,s.retryNextAt,s.providerError,n?1:0,i?.state??null,i?.bindingId??null,c,c),{...r,faultId:d}}o(F,"insertFault");function q(e,t,r,n){const i=Y(r);return e.prepare("UPDATE node_faults SET link = ?, op = ?, kind = ?, message = ?, since = ?, operation_id = ?, anchor_entry_id = ?, retry_disposition = ?, retry_by = ?, retry_attempt = ?, retry_max = ?, retry_next_at = ?, provider_error_json = ?, episode_state = COALESCE(?, episode_state), episode_binding_id = COALESCE(?, episode_binding_id), updated_at = ? WHERE fault_id = ?").run(i.link,i.op,i.kind,i.message,i.since,i.operationId,i.anchorEntryId,i.retryDisposition,i.retryBy,i.retryAttempt,i.retryMax,i.retryNextAt,i.providerError,n?.state??null,n?.bindingId??null,a(),t),{...r,faultId:t}}o(q,"updateFault");function R(e,t){e.prepare("DELETE FROM node_faults WHERE fault_id = ? AND active = 0 AND episode_state IS NULL").run(t)}o(R,"deleteIfUnretained");function z(e,t,r,n){const i=I(e,t);if(i===null){const d=e.prepare("SELECT fault_id, link, kind, since, operation_id FROM node_faults WHERE node_id = ? AND active = 0 AND episode_state IS NOT NULL").get(t);return d!==void 0&&d.link===r.link&&d.kind===r.kind&&d.since===r.since&&d.operation_id===r.operation_id?(e.prepare("UPDATE node_faults SET active = 1, updated_at = ? WHERE fault_id = ?").run(a(),d.fault_id),q(e,d.fault_id,r)):F(e,t,r,!0,n)}if(i.link===r.link&&i.kind===r.kind){const d={...i.retry,...r.retry};return r.retry.disposition==="fatal"&&!("nextAt"in r.retry)&&delete d.nextAt,q(e,i.faultId,{...r,since:i.since,anchorEntryId:i.anchorEntryId??r.anchorEntryId,retry:d},n)}return A(i)>A(r)?null:(e.prepare("UPDATE node_faults SET active = 0, updated_at = ? WHERE fault_id = ?").run(a(),i.faultId),R(e,i.faultId),F(e,t,r,!0,n))}o(z,"replaceActiveFault");function g(e,t,r){return e.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND session_id = ? AND unbound_at IS NULL").get(t,r)?.binding_id??null}o(g,"liveBinding");function Ce(e,t){return p(r=>{const n=a();return r.prepare("UPDATE executions SET turn_progress_at = ? WHERE execution_id = ? AND state != 'exited' AND turn_open_at IS NOT NULL AND turn_closed_at IS NULL").run(n,e).changes>0?!0:r.prepare("UPDATE executions SET turn_open_at = ?, turn_progress_at = ?, turn_closed_at = NULL, turn_end_reason = NULL WHERE execution_id = ? AND state != 'exited'").run(n,n,e).changes>0})}o(Ce,"openTurn");function be(e){return p(t=>t.prepare("UPDATE executions SET turn_progress_at = ? WHERE execution_id = ? AND state != 'exited' AND turn_open_at IS NOT NULL AND turn_closed_at IS NULL").run(a(),e).changes>0)}o(be,"recordTurnProgress");function Fe(e,t){return p(r=>r.prepare("UPDATE executions SET turn_closed_at = ?, turn_end_reason = ? WHERE execution_id = ? AND state != 'exited' AND turn_open_at IS NOT NULL AND turn_closed_at IS NULL").run(a(),t.endReason,e).changes>0)}o(Fe,"closeTurn");function He(e,t){if(!Number.isInteger(t.consecutivePasses)||t.consecutivePasses<1||t.routes.length===0||!t.routes.every(r=>r!==""))throw new Error("invalid transport-poison verdict");return p(r=>r.prepare("UPDATE executions SET exit_diagnostic_json = ? WHERE execution_id = ? AND state != 'exited'").run(JSON.stringify({schema:"crtr.execution-exit-diagnostic/v1",transport_poison:{consecutive_passes:t.consecutivePasses,routes:t.routes}}),e).changes>0)}o(He,"recordTransportPoisonVerdict");function We(e){const t=T().prepare("SELECT exit_diagnostic_json FROM executions WHERE node_id = ? ORDER BY rowid DESC LIMIT 1").get(e);if(t===void 0||t.exit_diagnostic_json===null)return null;try{const r=JSON.parse(t.exit_diagnostic_json),n=r.transport_poison;return r.schema!=="crtr.execution-exit-diagnostic/v1"||n===void 0||!Number.isInteger(n.consecutive_passes)||n.consecutive_passes<1||!Array.isArray(n.routes)||n.routes.length===0||!n.routes.every(i=>typeof i=="string"&&i!=="")?null:{consecutivePasses:n.consecutive_passes,routes:n.routes}}catch{return null}}o(We,"readTransportPoisonVerdict");function Pe(e){const t=T().prepare("SELECT turn_open_at, turn_closed_at, turn_progress_at FROM executions WHERE node_id = ? AND state != 'exited'").get(e);return t===void 0?null:{busy:t.turn_open_at!==null&&t.turn_closed_at===null,progressAt:t.turn_progress_at}}o(Pe,"readLiveTurn");function we(e){const t=T(),r=t.prepare("SELECT turn_closed_at, turn_progress_at FROM executions WHERE node_id = ? AND turn_open_at IS NOT NULL ORDER BY rowid DESC LIMIT 1").get(e);if(r===void 0)return null;const n=t.prepare("SELECT turn_end_reason FROM executions WHERE node_id = ? ORDER BY rowid DESC LIMIT 1").get(e);return{interrupted:r.turn_closed_at===null||n?.turn_end_reason==="teardown-aborted",progressAt:r.turn_progress_at}}o(we,"readInterruptedTurn");function Me(e,t){const r=V(t);return Q(e,r),p(n=>z(n,e,r))}o(Me,"recordFault");function Xe(e,t){return p(r=>{const n=I(r,e);if(n===null||t?.link!==void 0&&n.link!==t.link)return!1;const i=r.prepare("SELECT episode_state FROM node_faults WHERE fault_id = ?").get(n.faultId);r.prepare("UPDATE node_faults SET active = 0, updated_at = ? WHERE fault_id = ?").run(a(),n.faultId),i.episode_state==="pending"&&t?.preserveEpisode!==!0&&r.prepare("UPDATE node_faults SET episode_state = NULL, episode_binding_id = NULL, updated_at = ? WHERE fault_id = ?").run(a(),n.faultId),R(r,n.faultId);const d=J();return w({level:"info",event:"fault.cleared",operation_id:d,node_id:e,error_class:P(n),fields:{cleared_fault_operation_id:n.operation_id,link:n.link,op:n.op,kind:n.kind,retry:n.retry,message:n.message,since:n.since,...n.anchorEntryId===void 0?{}:{anchor_entry_id:n.anchorEntryId}}}),!0})}o(Xe,"clearFault");function Z(e){return I(T(),e)}o(Z,"readFault");function je(e,t){const r=V(t.input);if(r.link!=="pi\u2192provider"||r.retry.disposition!=="auto"||r.retry.by!=="daemon")throw new Error("provider retry episode requires an automatic daemon provider fault");return Q(e,r),p(n=>{const i=g(n,e,t.sessionId);if(i===null)return null;const d=I(n,e);if(d!==null&&(d.link!==r.link||d.kind!==r.kind)&&A(d)>A(r))return null;const s=n.prepare("SELECT fault_id FROM node_faults WHERE node_id = ? AND episode_state IS NOT NULL").all(e);n.prepare("UPDATE node_faults SET episode_state = NULL, episode_binding_id = NULL, updated_at = ? WHERE node_id = ? AND episode_state IS NOT NULL").run(a(),e);for(const N of s)R(n,N.fault_id);const c=z(n,e,r,{state:"pending",bindingId:i});return c===null?null:(n.prepare("UPDATE node_faults SET episode_state = ?, episode_binding_id = ?, updated_at = ? WHERE fault_id = ?").run("pending",i,a(),c.faultId),c)})}o(je,"recordPendingEpisode");function $e(e,t){return p(r=>{const n=g(r,e,t.sessionId);return n===null?!1:r.prepare("UPDATE node_faults SET episode_state = 'admitted', retry_disposition = ?, retry_by = ?, retry_attempt = ?, retry_max = ?, retry_next_at = ?, updated_at = ? WHERE node_id = ? AND fault_id = ? AND episode_state = 'pending' AND episode_binding_id = ?").run(t.retry.disposition,t.retry.by??null,t.retry.attempt??null,t.retry.max??null,t.retry.nextAt??null,a(),e,t.faultId,n).changes>0})}o($e,"admitEpisode");function Be(e,t){return p(r=>{const n=g(r,e,t.sessionId);return n===null?!1:r.prepare("UPDATE node_faults SET episode_state = 'pending', updated_at = ? WHERE node_id = ? AND episode_state = 'admitted' AND episode_binding_id = ?").run(a(),e,n).changes>0})}o(Be,"reopenEpisode");function Ke(e,t){return p(r=>{const n=g(r,e,t.sessionId);return n===null?!1:r.prepare("UPDATE node_faults SET episode_state = 'invalidated', updated_at = ? WHERE node_id = ? AND episode_state != 'invalidated' AND episode_state IS NOT NULL AND episode_binding_id = ?").run(a(),e,n).changes>0})}o(Ke,"invalidateEpisode");function Je(e,t){return p(r=>{const n=g(r,e,t.sessionId);if(n===null)return!1;const i=r.prepare("SELECT fault_id FROM node_faults WHERE node_id = ? AND episode_binding_id = ? AND episode_state IS NOT NULL").all(e,n);if(i.length===0)return!1;r.prepare("UPDATE node_faults SET episode_state = NULL, episode_binding_id = NULL, updated_at = ? WHERE node_id = ? AND episode_binding_id = ? AND episode_state IS NOT NULL").run(a(),e,n);for(const d of i)R(r,d.fault_id);return!0})}o(Je,"clearEpisode");function Ye(e){const t=T().prepare("SELECT f.*, s.session_id FROM node_faults f JOIN sessions s ON s.binding_id = f.episode_binding_id WHERE f.node_id = ? AND f.episode_state IS NOT NULL").get(e);return t===void 0?null:{state:t.episode_state,sessionId:t.session_id,fault:G(t)}}o(Ye,"readEpisode");function Ge(e){const t=Z(e)===null;return{explanation(){if(!t)return null;const r=Z(e);if(r===null||r.link!=="crtr\u2192pi"||r.retry.disposition!=="fatal")return null;const n=r.op.trim(),i=r.message.trim();return n===""||i===""?null:`${n}: ${i}`}}}o(Ge,"beginBootFaultAttempt");function ee(e,t){try{return se(e).mtime.toISOString()}catch{return t}}o(ee,"markerMtime");function H(e,t){if(!_(e))return null;try{return ie(e,"utf8")}catch(r){if(!t)return null;throw new Error(`cannot import recovery input ${e}: ${r.message}`)}}o(H,"legacyFile");function Le(e,t){return e.prepare("SELECT execution_id, started_at FROM executions WHERE node_id = ? ORDER BY rowid DESC LIMIT 1").get(t)??null}o(Le,"latestExecution");function me(e,t){const n=$(e,"nodes").has("launched_at")?e.prepare("SELECT COALESCE(launched_at, created) AS started_at FROM nodes WHERE node_id = ?").get(t):e.prepare("SELECT created AS started_at FROM nodes WHERE node_id = ?").get(t);if(n===void 0)throw new Error(`cannot import recovery witness for unknown node ${t}`);const i=k();return e.prepare("INSERT INTO executions (execution_id, node_id, daemon_epoch, pid, process_identity, state, started_at, ended_at, exit_reason) VALUES (?, ?, NULL, NULL, NULL, 'exited', ?, ?, 'pre-consolidation')").run(i,t,n.started_at,n.started_at),{execution_id:i,started_at:n.started_at}}o(me,"syntheticExecution");function te(e,t,r,n,i){return F(e,t,r,n,i)}o(te,"insertMigratedFault");function xe(e,t,r,n){const i=e.prepare("SELECT binding_id, node_id FROM sessions WHERE transcript_path = ? AND unbound_at IS NULL").get(r);if(i!==void 0){if(i.node_id!==t)throw new Error(`cannot import provider retry ${n}: transcript is live-owned by ${i.node_id}`);return i.binding_id}const d=e.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND transcript_path = ? ORDER BY rowid DESC LIMIT 1").get(t,r);if(d!==void 0)return d.binding_id;const s=e.prepare("SELECT created FROM nodes WHERE node_id = ?").get(t);if(s===void 0)throw new Error(`cannot import provider retry ${n}: unknown node ${t}`);const c=k();return e.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at, unbound_at) VALUES (?, NULL, ?, ?, NULL, NULL, ?, ?, ?)").run(c,t,r,s.created,s.created,a()),c}o(xe,"migrationBinding");function Ve(e){if(fe(e),ye(e),!_(C()))return;const t=ne(C(),{withFileTypes:!0}).filter(n=>n.isDirectory()).sort((n,i)=>n.name.localeCompare(i.name)),r=e.prepare("SELECT 1 FROM nodes WHERE node_id = ?");for(const n of t){const i=n.name,d=ae(i),s=f(d,"busy"),c=f(d,"clean-abort"),N=f(d,"transport-poison.json"),h=f(d,"fault"),L=f(d,"provider-retry"),D=_(s),U=_(c);if(!D&&!U&&!_(N)&&!_(h)&&!_(L)||!_(f(C(),i,"meta.json"))&&r.get(i)===void 0)continue;const O=H(N,!1),m=H(h,!0),x=H(L,!0);if(!D&&!U&&O===null&&m===null&&x===null)continue;let l=Le(e,i);if(l===null&&(l=me(e,i)),D){const u=ee(s,l.started_at);e.prepare("UPDATE executions SET turn_open_at = ?, turn_progress_at = ?, turn_closed_at = NULL, turn_end_reason = NULL WHERE execution_id = ?").run(u,u,l.execution_id)}else if(U){const u=ee(c,l.started_at);e.prepare("UPDATE executions SET turn_open_at = ?, turn_progress_at = ?, turn_closed_at = ?, turn_end_reason = 'teardown-aborted' WHERE execution_id = ?").run(u,u,u,l.execution_id)}if(O!==null)try{const u=JSON.parse(O);Number.isInteger(u.consecutivePasses)&&u.consecutivePasses>=1&&Array.isArray(u.routes)&&u.routes.length>0&&u.routes.every(W=>typeof W=="string"&&W!=="")&&e.prepare("UPDATE executions SET exit_diagnostic_json = ? WHERE execution_id = ?").run(JSON.stringify({schema:"crtr.execution-exit-diagnostic/v1",transport_poison:{consecutive_passes:u.consecutivePasses,routes:u.routes}}),l.execution_id)}catch{}const S=m===null?null:K(m);if(m!==null&&S===null)throw new Error(`cannot import recovery fault ${h}`);const E=x===null?null:ge(x);if(x!==null&&E===null)throw new Error(`cannot import provider retry ${L}`);let v=S===null||S.link==="broker\u2194crtrd"?null:te(e,i,S,!0);if(E!==null){const u=xe(e,i,E.sessionFile,L);v!==null&&v.since===E.fault.since?e.prepare("UPDATE node_faults SET episode_state = ?, episode_binding_id = ?, updated_at = ? WHERE fault_id = ?").run(E.state,u,a(),v.faultId):te(e,i,E.fault,!1,{state:E.state,bindingId:u})}}}o(Ve,"migrateRecoveryWitnesses");export{ke as FAULT_QUIET_MS,$e as admitEpisode,Ge as beginBootFaultAttempt,Je as clearEpisode,Xe as clearFault,Fe as closeTurn,G as hydrateFault,Ke as invalidateEpisode,Ve as migrateRecoveryWitnesses,Ce as openTurn,B as parseProviderError,Ye as readEpisode,Z as readFault,we as readInterruptedTurn,Pe as readLiveTurn,We as readTransportPoisonVerdict,Me as recordFault,je as recordPendingEpisode,He as recordTransportPoisonVerdict,be as recordTurnProgress,Be as reopenEpisode};
+`)}o(ye,"createFaultTable");function y(e,t){return typeof t=="string"&&e.includes(t)}o(y,"contains");function F(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}o(F,"isRecord");function B(e){if(!F(e)||typeof e.provider!="string"||e.provider===""||typeof e.model!="string"||e.model==="")return;const t=typeof e.status=="number"&&Number.isFinite(e.status)?e.status:void 0,r=typeof e.code=="string"||typeof e.code=="number"?e.code:void 0,n=typeof e.errno=="string"?e.errno:void 0,i=typeof e.body=="string"?e.body:void 0,d=Array.isArray(e.causes)?e.causes.flatMap(s=>{if(!F(s))return[];const c={...typeof s.message=="string"?{message:s.message}:{},...typeof s.status=="number"&&Number.isFinite(s.status)?{status:s.status}:{},...typeof s.code=="string"||typeof s.code=="number"?{code:s.code}:{},...typeof s.errno=="string"?{errno:s.errno}:{},...typeof s.body=="string"?{body:s.body}:{}};return Object.keys(c).length===0?[]:[c]}):void 0;return{provider:e.provider,model:e.model,...t===void 0?{}:{status:t},...r===void 0?{}:{code:r},...n===void 0?{}:{errno:n},...i===void 0?{}:{body:i},...d===void 0||d.length===0?{}:{causes:d}}}o(B,"parseProviderError");function K(e){try{const t=JSON.parse(e);if(!y(ce,t.link)||typeof t.op!="string"||t.op===""||!y(pe,t.kind)||typeof t.message!="string"||typeof t.since!="string")return null;const r=X(t.operation_id);if(!F(t.retry)||!y(_e,t.retry.disposition)||t.retry.by!==void 0&&!y(le,t.retry.by)||t.retry.attempt!==void 0&&typeof t.retry.attempt!="number"||t.retry.max!==void 0&&typeof t.retry.max!="number"||t.retry.nextAt!==void 0&&typeof t.retry.nextAt!="string"||t.anchorEntryId!==void 0&&(typeof t.anchorEntryId!="string"||t.anchorEntryId===""))return null;const n=t.providerError===void 0?void 0:B(t.providerError);return t.providerError!==void 0&&n===void 0?null:{link:t.link,op:t.op,kind:t.kind,retry:{disposition:t.retry.disposition,...t.retry.by===void 0?{}:{by:t.retry.by},...t.retry.attempt===void 0?{}:{attempt:t.retry.attempt},...t.retry.max===void 0?{}:{max:t.retry.max},...t.retry.nextAt===void 0?{}:{nextAt:t.retry.nextAt}},message:t.message,since:t.since,operation_id:r,...t.anchorEntryId===void 0?{}:{anchorEntryId:t.anchorEntryId},...n===void 0?{}:{providerError:n}}}catch{return null}}o(K,"parseLegacyFault");function Te(e){const t=de(e);try{return oe(t)}catch{return t}}o(Te,"canonicalPath");function ge(e){try{const t=JSON.parse(e);if(!y(Ee,t.state)||typeof t.sessionFile!="string"||t.sessionFile==="")return null;const r=JSON.stringify(t.fault),n=K(r);if(n===null||n.link!=="pi\u2192provider"||n.retry.disposition!=="auto"||n.retry.by!=="daemon")return null;const i=t.anchorEntryId;return i!==null&&typeof i!="string"||(n.anchorEntryId??null)!==i?null:{state:t.state,sessionFile:Te(t.sessionFile),fault:n}}catch{return null}}o(ge,"parseLegacyEpisode");function J(e){return e!==void 0?X(e):M.current()??M.fresh(r=>r)}o(J,"resolveOperationId");function Ne(e){return e.slice(0,ue)}o(Ne,"clampMessage");function A(e){return e.link==="pi\u2192provider"&&e.retry.disposition==="auto"&&e.retry.by==="daemon"?3:e.retry.disposition==="fatal"?2:1}o(A,"faultPriority");function Y(e){return{link:e.link,op:e.op,kind:e.kind,message:e.message,since:e.since,operationId:e.operation_id,anchorEntryId:e.anchorEntryId??null,retryDisposition:e.retry.disposition,retryBy:e.retry.by??null,retryAttempt:e.retry.attempt??null,retryMax:e.retry.max??null,retryNextAt:e.retry.nextAt??null,providerError:e.providerError===void 0?null:JSON.stringify(e.providerError)}}o(Y,"encodeFault");function G(e){const t=e.provider_error_json,r=typeof t=="string"?B(JSON.parse(t)):void 0;if(typeof t=="string"&&r===void 0)throw new Error(`invalid provider error on stored fault ${e.fault_id}`);const n={disposition:e.retry_disposition,...e.retry_by===null?{}:{by:e.retry_by},...e.retry_attempt===null?{}:{attempt:e.retry_attempt},...e.retry_max===null?{}:{max:e.retry_max},...e.retry_next_at===null?{}:{nextAt:e.retry_next_at}};return{faultId:e.fault_id,link:e.link,op:e.op,kind:e.kind,message:e.message,since:e.since,operation_id:e.operation_id,retry:n,...e.anchor_entry_id===null?{}:{anchorEntryId:e.anchor_entry_id},...r===void 0?{}:{providerError:r}}}o(G,"hydrateFault");function I(e,t){const r=e.prepare("SELECT * FROM node_faults WHERE node_id = ? AND active = 1").get(t);return r===void 0?null:G(r)}o(I,"activeFault");function V(e){if(!y(j,e.link))throw new Error(`fault link is not durable: ${e.link}`);return{link:e.link,op:e.op,kind:e.kind,retry:e.retry,message:Ne(e.message),since:e.since??a(),operation_id:J(e.operation_id),...typeof e.anchorEntryId=="string"&&e.anchorEntryId!==""?{anchorEntryId:e.anchorEntryId}:{},...e.providerError===void 0?{}:{providerError:e.providerError}}}o(V,"storedFault");function Q(e,t){w({level:t.retry.disposition==="fatal"?"error":"warn",event:"fault.recorded",operation_id:t.operation_id,node_id:e,error_class:P(t),fields:{link:t.link,op:t.op,kind:t.kind,retry:t.retry,message:t.message,...t.anchorEntryId===void 0?{}:{anchor_entry_id:t.anchorEntryId},...t.providerError===void 0?{}:{provider_error:t.providerError}}})}o(Q,"emitRecordedFault");function b(e,t,r,n,i){const d=k(),s=Y(r),c=a();return e.prepare("INSERT INTO node_faults (fault_id, node_id, link, op, kind, message, since, operation_id, anchor_entry_id, retry_disposition, retry_by, retry_attempt, retry_max, retry_next_at, provider_error_json, active, episode_state, episode_binding_id, created_at, updated_at) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)").run(d,t,s.link,s.op,s.kind,s.message,s.since,s.operationId,s.anchorEntryId,s.retryDisposition,s.retryBy,s.retryAttempt,s.retryMax,s.retryNextAt,s.providerError,n?1:0,i?.state??null,i?.bindingId??null,c,c),{...r,faultId:d}}o(b,"insertFault");function q(e,t,r,n){const i=Y(r);return e.prepare("UPDATE node_faults SET link = ?, op = ?, kind = ?, message = ?, since = ?, operation_id = ?, anchor_entry_id = ?, retry_disposition = ?, retry_by = ?, retry_attempt = ?, retry_max = ?, retry_next_at = ?, provider_error_json = ?, episode_state = COALESCE(?, episode_state), episode_binding_id = COALESCE(?, episode_binding_id), updated_at = ? WHERE fault_id = ?").run(i.link,i.op,i.kind,i.message,i.since,i.operationId,i.anchorEntryId,i.retryDisposition,i.retryBy,i.retryAttempt,i.retryMax,i.retryNextAt,i.providerError,n?.state??null,n?.bindingId??null,a(),t),{...r,faultId:t}}o(q,"updateFault");function R(e,t){e.prepare("DELETE FROM node_faults WHERE fault_id = ? AND active = 0 AND episode_state IS NULL").run(t)}o(R,"deleteIfUnretained");function z(e,t,r,n){const i=I(e,t);if(i===null){const d=e.prepare("SELECT fault_id, link, kind, since, operation_id FROM node_faults WHERE node_id = ? AND active = 0 AND episode_state IS NOT NULL").get(t);return d!==void 0&&d.link===r.link&&d.kind===r.kind&&d.since===r.since&&d.operation_id===r.operation_id?(e.prepare("UPDATE node_faults SET active = 1, updated_at = ? WHERE fault_id = ?").run(a(),d.fault_id),q(e,d.fault_id,r)):b(e,t,r,!0,n)}if(i.link===r.link&&i.kind===r.kind){const d={...i.retry,...r.retry};return r.retry.disposition==="fatal"&&!("nextAt"in r.retry)&&delete d.nextAt,q(e,i.faultId,{...r,since:i.since,anchorEntryId:i.anchorEntryId??r.anchorEntryId,retry:d},n)}return A(i)>A(r)?null:(e.prepare("UPDATE node_faults SET active = 0, updated_at = ? WHERE fault_id = ?").run(a(),i.faultId),R(e,i.faultId),b(e,t,r,!0,n))}o(z,"replaceActiveFault");function g(e,t,r){return e.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND session_id = ? AND unbound_at IS NULL").get(t,r)?.binding_id??null}o(g,"liveBinding");function Ce(e,t){return p(r=>{const n=a();return r.prepare("UPDATE executions SET turn_progress_at = ? WHERE execution_id = ? AND state != 'exited' AND turn_open_at IS NOT NULL AND turn_closed_at IS NULL").run(n,e).changes>0?!0:r.prepare("UPDATE executions SET turn_open_at = ?, turn_progress_at = ?, turn_closed_at = NULL, turn_end_reason = NULL WHERE execution_id = ? AND state != 'exited'").run(n,n,e).changes>0})}o(Ce,"openTurn");function Fe(e){return p(t=>t.prepare("UPDATE executions SET turn_progress_at = ? WHERE execution_id = ? AND state != 'exited' AND turn_open_at IS NOT NULL AND turn_closed_at IS NULL").run(a(),e).changes>0)}o(Fe,"recordTurnProgress");function be(e,t){return p(r=>r.prepare("UPDATE executions SET turn_closed_at = ?, turn_end_reason = ? WHERE execution_id = ? AND state != 'exited' AND turn_open_at IS NOT NULL AND turn_closed_at IS NULL").run(a(),t.endReason,e).changes>0)}o(be,"closeTurn");function He(e,t){if(!Number.isInteger(t.consecutivePasses)||t.consecutivePasses<1||t.routes.length===0||!t.routes.every(r=>r!==""))throw new Error("invalid transport-poison verdict");return p(r=>r.prepare("UPDATE executions SET exit_diagnostic_json = ? WHERE execution_id = ? AND state != 'exited'").run(JSON.stringify({schema:"crtr.execution-exit-diagnostic/v1",transport_poison:{consecutive_passes:t.consecutivePasses,routes:t.routes}}),e).changes>0)}o(He,"recordTransportPoisonVerdict");function We(e){const t=T().prepare("SELECT exit_diagnostic_json FROM executions WHERE node_id = ? ORDER BY rowid DESC LIMIT 1").get(e);if(t===void 0||t.exit_diagnostic_json===null)return null;try{const r=JSON.parse(t.exit_diagnostic_json),n=r.transport_poison;return r.schema!=="crtr.execution-exit-diagnostic/v1"||n===void 0||!Number.isInteger(n.consecutive_passes)||n.consecutive_passes<1||!Array.isArray(n.routes)||n.routes.length===0||!n.routes.every(i=>typeof i=="string"&&i!=="")?null:{consecutivePasses:n.consecutive_passes,routes:n.routes}}catch{return null}}o(We,"readTransportPoisonVerdict");function Pe(e){const t=T().prepare("SELECT turn_open_at, turn_closed_at, turn_progress_at FROM executions WHERE node_id = ? AND state != 'exited'").get(e);return t===void 0?null:{busy:t.turn_open_at!==null&&t.turn_closed_at===null,progressAt:t.turn_progress_at}}o(Pe,"readLiveTurn");function we(e){const t=T(),r=t.prepare("SELECT turn_closed_at, turn_progress_at FROM executions WHERE node_id = ? AND turn_open_at IS NOT NULL ORDER BY rowid DESC LIMIT 1").get(e);if(r===void 0)return null;const n=t.prepare("SELECT turn_end_reason FROM executions WHERE node_id = ? ORDER BY rowid DESC LIMIT 1").get(e);return{interrupted:r.turn_closed_at===null||n?.turn_end_reason==="teardown-aborted",progressAt:r.turn_progress_at}}o(we,"readInterruptedTurn");function Me(e,t){const r=V(t);return Q(e,r),p(n=>z(n,e,r))}o(Me,"recordFault");function Xe(e,t){return p(r=>{const n=I(r,e);if(n===null||t?.link!==void 0&&n.link!==t.link)return!1;const i=r.prepare("SELECT episode_state FROM node_faults WHERE fault_id = ?").get(n.faultId);r.prepare("UPDATE node_faults SET active = 0, updated_at = ? WHERE fault_id = ?").run(a(),n.faultId),i.episode_state==="pending"&&t?.preserveEpisode!==!0&&r.prepare("UPDATE node_faults SET episode_state = NULL, episode_binding_id = NULL, updated_at = ? WHERE fault_id = ?").run(a(),n.faultId),R(r,n.faultId);const d=J();return w({level:"info",event:"fault.cleared",operation_id:d,node_id:e,error_class:P(n),fields:{cleared_fault_operation_id:n.operation_id,link:n.link,op:n.op,kind:n.kind,retry:n.retry,message:n.message,since:n.since,...n.anchorEntryId===void 0?{}:{anchor_entry_id:n.anchorEntryId}}}),!0})}o(Xe,"clearFault");function Z(e){return I(T(),e)}o(Z,"readFault");function je(e,t){const r=V(t.input);if(r.link!=="pi\u2192provider"||r.retry.disposition!=="auto"||r.retry.by!=="daemon")throw new Error("provider retry episode requires an automatic daemon provider fault");return Q(e,r),p(n=>{const i=g(n,e,t.sessionId);if(i===null)return null;const d=I(n,e);if(d!==null&&(d.link!==r.link||d.kind!==r.kind)&&A(d)>A(r))return null;const s=n.prepare("SELECT fault_id FROM node_faults WHERE node_id = ? AND episode_state IS NOT NULL").all(e);n.prepare("UPDATE node_faults SET episode_state = NULL, episode_binding_id = NULL, updated_at = ? WHERE node_id = ? AND episode_state IS NOT NULL").run(a(),e);for(const N of s)R(n,N.fault_id);const c=z(n,e,r,{state:"pending",bindingId:i});return c===null?null:(n.prepare("UPDATE node_faults SET episode_state = ?, episode_binding_id = ?, updated_at = ? WHERE fault_id = ?").run("pending",i,a(),c.faultId),c)})}o(je,"recordPendingEpisode");function $e(e,t){return p(r=>{if(r.prepare("SELECT 1 FROM nodes WHERE node_id = ? AND intent IS 'refresh'").get(e)!==void 0)return!1;const n=g(r,e,t.sessionId);return n===null?!1:r.prepare("UPDATE node_faults SET episode_state = 'admitted', retry_disposition = ?, retry_by = ?, retry_attempt = ?, retry_max = ?, retry_next_at = ?, updated_at = ? WHERE node_id = ? AND fault_id = ? AND episode_state = 'pending' AND episode_binding_id = ?").run(t.retry.disposition,t.retry.by??null,t.retry.attempt??null,t.retry.max??null,t.retry.nextAt??null,a(),e,t.faultId,n).changes>0})}o($e,"admitEpisode");function Be(e,t){return p(r=>{const n=g(r,e,t.sessionId);return n===null?!1:r.prepare("UPDATE node_faults SET episode_state = 'pending', updated_at = ? WHERE node_id = ? AND episode_state = 'admitted' AND episode_binding_id = ?").run(a(),e,n).changes>0})}o(Be,"reopenEpisode");function Ke(e,t){return p(r=>{const n=g(r,e,t.sessionId);return n===null?!1:r.prepare("UPDATE node_faults SET episode_state = 'invalidated', updated_at = ? WHERE node_id = ? AND episode_state != 'invalidated' AND episode_state IS NOT NULL AND episode_binding_id = ?").run(a(),e,n).changes>0})}o(Ke,"invalidateEpisode");function Je(e,t){return p(r=>{const n=g(r,e,t.sessionId);if(n===null)return!1;const i=r.prepare("SELECT fault_id FROM node_faults WHERE node_id = ? AND episode_binding_id = ? AND episode_state IS NOT NULL").all(e,n);if(i.length===0)return!1;r.prepare("UPDATE node_faults SET episode_state = NULL, episode_binding_id = NULL, updated_at = ? WHERE node_id = ? AND episode_binding_id = ? AND episode_state IS NOT NULL").run(a(),e,n);for(const d of i)R(r,d.fault_id);return!0})}o(Je,"clearEpisode");function Ye(e){const t=T().prepare("SELECT f.*, s.session_id FROM node_faults f JOIN sessions s ON s.binding_id = f.episode_binding_id WHERE f.node_id = ? AND f.episode_state IS NOT NULL").get(e);return t===void 0?null:{state:t.episode_state,sessionId:t.session_id,fault:G(t)}}o(Ye,"readEpisode");function Ge(e){const t=Z(e)===null;return{explanation(){if(!t)return null;const r=Z(e);if(r===null||r.link!=="crtr\u2192pi"||r.retry.disposition!=="fatal")return null;const n=r.op.trim(),i=r.message.trim();return n===""||i===""?null:`${n}: ${i}`}}}o(Ge,"beginBootFaultAttempt");function ee(e,t){try{return se(e).mtime.toISOString()}catch{return t}}o(ee,"markerMtime");function H(e,t){if(!_(e))return null;try{return ie(e,"utf8")}catch(r){if(!t)return null;throw new Error(`cannot import recovery input ${e}: ${r.message}`)}}o(H,"legacyFile");function Le(e,t){return e.prepare("SELECT execution_id, started_at FROM executions WHERE node_id = ? ORDER BY rowid DESC LIMIT 1").get(t)??null}o(Le,"latestExecution");function me(e,t){const n=$(e,"nodes").has("launched_at")?e.prepare("SELECT COALESCE(launched_at, created) AS started_at FROM nodes WHERE node_id = ?").get(t):e.prepare("SELECT created AS started_at FROM nodes WHERE node_id = ?").get(t);if(n===void 0)throw new Error(`cannot import recovery witness for unknown node ${t}`);const i=k();return e.prepare("INSERT INTO executions (execution_id, node_id, daemon_epoch, pid, process_identity, state, started_at, ended_at, exit_reason) VALUES (?, ?, NULL, NULL, NULL, 'exited', ?, ?, 'pre-consolidation')").run(i,t,n.started_at,n.started_at),{execution_id:i,started_at:n.started_at}}o(me,"syntheticExecution");function te(e,t,r,n,i){return b(e,t,r,n,i)}o(te,"insertMigratedFault");function xe(e,t,r,n){const i=e.prepare("SELECT binding_id, node_id FROM sessions WHERE transcript_path = ? AND unbound_at IS NULL").get(r);if(i!==void 0){if(i.node_id!==t)throw new Error(`cannot import provider retry ${n}: transcript is live-owned by ${i.node_id}`);return i.binding_id}const d=e.prepare("SELECT binding_id FROM sessions WHERE node_id = ? AND transcript_path = ? ORDER BY rowid DESC LIMIT 1").get(t,r);if(d!==void 0)return d.binding_id;const s=e.prepare("SELECT created FROM nodes WHERE node_id = ?").get(t);if(s===void 0)throw new Error(`cannot import provider retry ${n}: unknown node ${t}`);const c=k();return e.prepare("INSERT INTO sessions (binding_id, session_id, node_id, transcript_path, source_session_id, fork_entry_id, created_at, bound_at, unbound_at) VALUES (?, NULL, ?, ?, NULL, NULL, ?, ?, ?)").run(c,t,r,s.created,s.created,a()),c}o(xe,"migrationBinding");function Ve(e){if(fe(e),ye(e),!_(C()))return;const t=ne(C(),{withFileTypes:!0}).filter(n=>n.isDirectory()).sort((n,i)=>n.name.localeCompare(i.name)),r=e.prepare("SELECT 1 FROM nodes WHERE node_id = ?");for(const n of t){const i=n.name,d=ae(i),s=f(d,"busy"),c=f(d,"clean-abort"),N=f(d,"transport-poison.json"),h=f(d,"fault"),L=f(d,"provider-retry"),D=_(s),U=_(c);if(!D&&!U&&!_(N)&&!_(h)&&!_(L)||!_(f(C(),i,"meta.json"))&&r.get(i)===void 0)continue;const O=H(N,!1),m=H(h,!0),x=H(L,!0);if(!D&&!U&&O===null&&m===null&&x===null)continue;let l=Le(e,i);if(l===null&&(l=me(e,i)),D){const u=ee(s,l.started_at);e.prepare("UPDATE executions SET turn_open_at = ?, turn_progress_at = ?, turn_closed_at = NULL, turn_end_reason = NULL WHERE execution_id = ?").run(u,u,l.execution_id)}else if(U){const u=ee(c,l.started_at);e.prepare("UPDATE executions SET turn_open_at = ?, turn_progress_at = ?, turn_closed_at = ?, turn_end_reason = 'teardown-aborted' WHERE execution_id = ?").run(u,u,u,l.execution_id)}if(O!==null)try{const u=JSON.parse(O);Number.isInteger(u.consecutivePasses)&&u.consecutivePasses>=1&&Array.isArray(u.routes)&&u.routes.length>0&&u.routes.every(W=>typeof W=="string"&&W!=="")&&e.prepare("UPDATE executions SET exit_diagnostic_json = ? WHERE execution_id = ?").run(JSON.stringify({schema:"crtr.execution-exit-diagnostic/v1",transport_poison:{consecutive_passes:u.consecutivePasses,routes:u.routes}}),l.execution_id)}catch{}const S=m===null?null:K(m);if(m!==null&&S===null)throw new Error(`cannot import recovery fault ${h}`);const E=x===null?null:ge(x);if(x!==null&&E===null)throw new Error(`cannot import provider retry ${L}`);let v=S===null||S.link==="broker\u2194crtrd"?null:te(e,i,S,!0);if(E!==null){const u=xe(e,i,E.sessionFile,L);v!==null&&v.since===E.fault.since?e.prepare("UPDATE node_faults SET episode_state = ?, episode_binding_id = ?, updated_at = ? WHERE fault_id = ?").run(E.state,u,a(),v.faultId):te(e,i,E.fault,!1,{state:E.state,bindingId:u})}}}o(Ve,"migrateRecoveryWitnesses");export{ke as FAULT_QUIET_MS,$e as admitEpisode,Ge as beginBootFaultAttempt,Je as clearEpisode,Xe as clearFault,be as closeTurn,G as hydrateFault,Ke as invalidateEpisode,Ve as migrateRecoveryWitnesses,Ce as openTurn,B as parseProviderError,Ye as readEpisode,Z as readFault,we as readInterruptedTurn,Pe as readLiveTurn,We as readTransportPoisonVerdict,Me as recordFault,je as recordPendingEpisode,He as recordTransportPoisonVerdict,Fe as recordTurnProgress,Be as reopenEpisode};

package/dist/core/grants/remove.js

@@ -1 +1 @@
-var R=Object.defineProperty;var d=(r,i)=>R(r,"name",{value:i,configurable:!0});import{rmSync as S}from"node:fs";import{join as h}from"node:path";import{deleteNodes as w}from"../canvas/canvas.js";import{openDb as f,withCanvasWrite as c}from"../canvas/db.js";import{cancelCron as O}from"../canvas/crons.js";import{emitEvent as m}from"../events/emit.js";import{appSpace as T,appsRoot as E,secretsDir as C}from"../layout.js";import{notifyRunDeleted as D}from"../runs/events.js";import{removeTreeBeneath as N}from"../spaces/open-beneath.js";import{stopNodeSandboxes as L}from"../spaces/stop.js";import{activeAppUser as p,markAppUserRemoved as W}from"../spaces/users.js";import{launcherRequest as b}from"../../launcher/client.js";import{LaunchRefused as H}from"../../launcher/spec.js";import{allGrants as x}from"./mirror.js";import{launcherPresent as u,listSandboxes as A,stopSandboxPid as F}from"./sandboxes.js";let g=Promise.resolve();function V(r=new Set){const i=g.then(async()=>{const o=x(),n=new Set(o.filter(t=>t.status==="removed").map(t=>t.grantee));for(const t of n)if(!o.some(a=>a.grantee===t&&a.status==="active")&&!(p(t)===null&&!r.has(t)))try{await M(t)}catch(a){m({level:"error",event:"daemon.grants.removal_failed",error:a,fields:{grantee:t}})}});return g=i.catch(()=>{}),i}d(V,"runRemovalCascades");async function M(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const i=T(r),o=p(r);m({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:o?.uid??null}});const n=c(e=>(e.prepare("UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE grantee = ?").run(new Date().toISOString(),r),e.prepare("SELECT node_id FROM nodes WHERE grantee = ? ORDER BY created DESC").all(r).map(s=>s.node_id)));for(const{cron_id:e}of f().prepare("SELECT cron_id FROM crons WHERE grantee = ?").all(r))O(e);const a=(await Promise.all(n.map(e=>L(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(a.length)throw new Error(`sandbox teardown could not be confirmed for ${a.length} node(s) of ${r}`);if(o&&u())for(const e of await A())e.uid===o.uid&&await F(e.pid);const v=n.filter(e=>f().prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(e)?.run_id===e);c(e=>{if(!n.length)return;const s=n.map(()=>"?").join(","),_=e.prepare(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).all(...n,...n);e.prepare(`DELETE FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).run(...n);for(const{message_id:l}of _)e.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(l,l)}),w(n);for(const e of v)D(e);if(S(h(C(),"env",i.root.slice(E().length+1)),{recursive:!0,force:!0}),N(E(),i.root),o&&u())try{await b({operation:"user.delete",uid:o.uid})}catch(e){if(!(e instanceof H&&e.refusal==="invalid_uid"))throw e}o&&W(o.uid),m({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:o?.uid??null,nodes:n.length}})}d(M,"removeApp");export{M as removeApp,V as runRemovalCascades};
+var R=Object.defineProperty;var d=(r,i)=>R(r,"name",{value:i,configurable:!0});import{rmSync as h}from"node:fs";import{join as S}from"node:path";import{deleteNodes as w}from"../canvas/canvas.js";import{openDb as f,withCanvasWrite as c}from"../canvas/db.js";import{cancelCron as O}from"../canvas/crons.js";import{emitEvent as m}from"../events/emit.js";import{appSpace as D,appsRoot as p,secretsDir as T}from"../layout.js";import{notifyRunDeleted as C}from"../runs/events.js";import{cancelOpenQuestions as N}from"../runs/questions.js";import{removeTreeBeneath as L}from"../spaces/open-beneath.js";import{markGranteeUploadsDeletePending as W,releaseRunUploads as b,turnSharesOffFor as F}from"../storage/tables.js";import{stopNodeSandboxes as H}from"../spaces/stop.js";import{activeAppUser as E,markAppUserRemoved as A}from"../spaces/users.js";import{launcherRequest as M}from"../../launcher/client.js";import{LaunchRefused as y}from"../../launcher/spec.js";import{allGrants as I}from"./mirror.js";import{launcherPresent as u,listSandboxes as P,stopSandboxPid as U}from"./sandboxes.js";let g=Promise.resolve();function te(r=new Set){const i=g.then(async()=>{const n=I(),o=new Set(n.filter(t=>t.status==="removed").map(t=>t.grantee));for(const t of o)if(!n.some(a=>a.grantee===t&&a.status==="active")&&!(E(t)===null&&!r.has(t)))try{await x(t)}catch(a){m({level:"error",event:"daemon.grants.removal_failed",error:a,fields:{grantee:t}})}});return g=i.catch(()=>{}),i}d(te,"runRemovalCascades");async function x(r){if(r==="app:terminal")throw new Error("app:terminal cannot be removed");const i=D(r),n=E(r);m({level:"info",event:"daemon.grants.removal_started",fields:{grantee:r,uid:n?.uid??null}}),await N({grantee:r},"the app was removed");const o=c(e=>(e.prepare("UPDATE nodes SET deleting_at = COALESCE(deleting_at, ?) WHERE grantee = ?").run(new Date().toISOString(),r),e.prepare("SELECT node_id FROM nodes WHERE grantee = ? ORDER BY created DESC").all(r).map(s=>s.node_id)));for(const{cron_id:e}of f().prepare("SELECT cron_id FROM crons WHERE grantee = ?").all(r))O(e);const a=(await Promise.all(o.map(e=>H(e,"app_removed",{deleting:!0})))).filter(e=>!e.confirmed);if(a.length)throw new Error(`sandbox teardown could not be confirmed for ${a.length} node(s) of ${r}`);if(n&&u())for(const e of await P())e.uid===n.uid&&await U(e.pid);const v=o.filter(e=>f().prepare("SELECT run_id FROM nodes WHERE node_id = ?").get(e)?.run_id===e);c(e=>{if(F(r,e),b(o,e),W(r,e),!o.length)return;const s=o.map(()=>"?").join(","),_=e.prepare(`SELECT message_id FROM messages WHERE sender_node_id IN (${s}) UNION SELECT message_id FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).all(...o,...o);e.prepare(`DELETE FROM deliveries WHERE destination_kind = 'node_inbox' AND destination_id IN (${s})`).run(...o);for(const{message_id:l}of _)e.prepare("DELETE FROM messages WHERE message_id = ? AND NOT EXISTS (SELECT 1 FROM deliveries WHERE message_id = ?)").run(l,l)}),w(o);for(const e of v)C(e);if(h(S(T(),"env",i.root.slice(p().length+1)),{recursive:!0,force:!0}),L(p(),i.root),n&&u())try{await M({operation:"user.delete",uid:n.uid})}catch(e){if(!(e instanceof y&&e.refusal==="invalid_uid"))throw e}n&&A(n.uid),m({level:"info",event:"daemon.grants.removal_completed",fields:{grantee:r,uid:n?.uid??null,nodes:o.length}})}d(x,"removeApp");export{x as removeApp,te as runRemovalCascades};

package/dist/core/grants/sync.d.ts

@@ -1,5 +1,26 @@
+import { type JsonWebKey } from 'node:crypto';
 import { type Detach } from './on-sync.js';
 export declare const GRANT_SYNC_INTERVAL_S = 300;
+export interface RuntimeClient {
+    jwk: JsonWebKey & {
+        kid: string;
+    };
+    kid: string;
+    alg: 'ES256';
+    client_id: string;
+    runtime: string;
+}
+export declare function runtimeClient(): RuntimeClient;
+/** The runtime's id as storage names it: the directory principal id without `runtime:`. */
+export declare function runtimeId(client?: RuntimeClient): string;
+export interface DirectoryToken {
+    access_token: string;
+    expires_at: number;
+}
+/** A `client_credentials` token for the runtime client. With `audience`, the
+ *  directory issues it for that audience (the storage service); without, for
+ *  the directory's own `/v1`. `expires_at` is epoch ms. */
+export declare function mintDirectoryToken(issuer: string, audience?: string): Promise<DirectoryToken>;
 export type GrantSync = (options?: {
     fresh?: boolean;
 }) => Promise<void>;

package/dist/core/grants/sync.js

@@ -1 +1 @@
-var w=Object.defineProperty;var s=(t,r)=>w(t,"name",{value:r,configurable:!0});import{createPrivateKey as k,randomUUID as h,sign as v}from"node:crypto";import{readFileSync as S}from"node:fs";import{join as j}from"node:path";import{crtrHome as E}from"../canvas/paths.js";import{emitEvent as u}from"../events/emit.js";import{allGrants as b,replaceGrants as A}from"./mirror.js";import{onGrantSync as $}from"./on-sync.js";const U=300;function T(t,r){const e=Math.floor(Date.now()/1e3),i=Buffer.from(JSON.stringify({alg:"ES256",typ:"JWT",kid:t.kid})).toString("base64url"),a=Buffer.from(JSON.stringify({iss:t.client_id,sub:t.client_id,aud:r,iat:e,exp:e+300,jti:h()})).toString("base64url"),o=`${i}.${a}`,p=v("sha256",Buffer.from(o),{key:k({key:t.jwk,format:"jwk"}),dsaEncoding:"ieee-p1363"});return`${o}.${p.toString("base64url")}`}s(T,"assertion");function N(){const t=JSON.parse(S(j(E(),"secrets","runtime-client.json"),"utf8"));if(!t.jwk||t.alg!=="ES256"||!t.kid||!t.client_id||!t.runtime||t.jwk.kid!==t.kid||t.jwk.kty!=="EC"||t.jwk.crv!=="P-256"||!t.jwk.d)throw new TypeError("invalid runtime client key");return t}s(N,"runtimeClient");function G(t,r){if(!t||typeof t!="object")throw new TypeError("invalid grant sync response");const e=t;if(e.runtime!==(r.runtime.startsWith("runtime:")?r.runtime:`runtime:${r.runtime}`)||typeof e.id!="string"||typeof e.sub!="string"||typeof e.grantee!="string"||!Number.isInteger(e.rev)||!Array.isArray(e.scopes)||!Array.isArray(e.resolved_scopes)||!["active","revoked","removed"].includes(e.status??"")||typeof e.synced_at!="string")throw new TypeError("invalid grant sync response");const a=t.revisions?.find(o=>o.rev===e.rev)?.approved_at;if(typeof a!="string")throw new TypeError("grant revision has no approval time");return{...e,spend_cap:e.spend_cap??null,expires_at:e.expires_at??null,revoked_at:e.revoked_at??null,approved_at:a,payer:"user"}}s(G,"responseGrant");function q(t,r=e=>{}){let e;const i=t.replace(/\/$/,""),a=s(async()=>{const n=N(),d=`${i}/token`,g=new URLSearchParams({grant_type:"client_credentials",client_id:n.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:T(n,d)}),f=await fetch(d,{method:"POST",body:g,signal:AbortSignal.timeout(1e4)});if(!f.ok)throw new Error(`directory token request failed: ${f.status}`);const m=await f.json();if(typeof m.access_token!="string")throw new TypeError("directory token response has no access_token");const y=await fetch(`${i}/v1/runtime/grants`,{headers:{Authorization:`Bearer ${m.access_token}`},signal:AbortSignal.timeout(1e4)});if(!y.ok)throw new Error(`directory grant sync failed: ${y.status}`);const c=await y.json();if(!Array.isArray(c.grants)||typeof c.synced_at!="string")throw new TypeError("invalid grant sync response");const _=b();A(c.grants.map(l=>G(l,n)),c.synced_at,i),u({level:"info",event:"daemon.grants.synced",fields:{grants:c.grants.length,synced_at:c.synced_at}});try{await $(_,r)}catch(l){u({level:"error",event:"daemon.grants.on_sync_failed",error:l})}},"run");let o;const p=s(()=>{const n=a().catch(d=>{throw u({level:"error",event:"daemon.grants.sync_failed",error:d}),d}).finally(()=>{e===n&&(e=void 0)});return e=n,n},"start");return(n={})=>e?n.fresh?(o??=e.catch(()=>{}).then(()=>(o=void 0,e??p())),o):e:p()}s(q,"createGrantSync");export{U as GRANT_SYNC_INTERVAL_S,q as createGrantSync};
+var g=Object.defineProperty;var o=(e,r)=>g(e,"name",{value:r,configurable:!0});import{createPrivateKey as _,randomUUID as k,sign as w}from"node:crypto";import{readFileSync as h}from"node:fs";import{join as v}from"node:path";import{crtrHome as S}from"../canvas/paths.js";import{emitEvent as y}from"../events/emit.js";import{allGrants as b,replaceGrants as E}from"./mirror.js";import{onGrantSync as j}from"./on-sync.js";const C=300;function A(e,r){const t=Math.floor(Date.now()/1e3),i=Buffer.from(JSON.stringify({alg:"ES256",typ:"JWT",kid:e.kid})).toString("base64url"),a=Buffer.from(JSON.stringify({iss:e.client_id,sub:e.client_id,aud:r,iat:t,exp:t+300,jti:k()})).toString("base64url"),n=`${i}.${a}`,s=w("sha256",Buffer.from(n),{key:_({key:e.jwk,format:"jwk"}),dsaEncoding:"ieee-p1363"});return`${n}.${s.toString("base64url")}`}o(A,"assertion");function l(){const e=JSON.parse(h(v(S(),"secrets","runtime-client.json"),"utf8"));if(!e.jwk||e.alg!=="ES256"||!e.kid||!e.client_id||!e.runtime||e.jwk.kid!==e.kid||e.jwk.kty!=="EC"||e.jwk.crv!=="P-256"||!e.jwk.d)throw new TypeError("invalid runtime client key");return e}o(l,"runtimeClient");function F(e=l()){return e.runtime.startsWith("runtime:")?e.runtime.slice(8):e.runtime}o(F,"runtimeId");async function $(e,r){const t=l(),i=`${e.replace(/\/$/,"")}/token`,a=new URLSearchParams({grant_type:"client_credentials",client_id:t.client_id,client_assertion_type:"urn:ietf:params:oauth:client-assertion-type:jwt-bearer",client_assertion:A(t,i),...r===void 0?{}:{audience:r}}),n=await fetch(i,{method:"POST",body:a,signal:AbortSignal.timeout(1e4)});if(!n.ok)throw new Error(`directory token request failed: ${n.status}`);const s=await n.json();if(typeof s.access_token!="string")throw new TypeError("directory token response has no access_token");return{access_token:s.access_token,expires_at:T(s.access_token,s.expires_in)}}o($,"mintDirectoryToken");function T(e,r){if(typeof r=="number"&&Number.isFinite(r)&&r>0)return Date.now()+r*1e3;try{const t=JSON.parse(Buffer.from(e.split(".")[1]??"","base64url").toString("utf8"));if(typeof t.exp=="number")return t.exp*1e3}catch{}return Date.now()+3e5}o(T,"tokenExpiry");function x(e,r){if(!e||typeof e!="object")throw new TypeError("invalid grant sync response");const t=e;if(t.runtime!==(r.runtime.startsWith("runtime:")?r.runtime:`runtime:${r.runtime}`)||typeof t.id!="string"||typeof t.sub!="string"||typeof t.grantee!="string"||!Number.isInteger(t.rev)||!Array.isArray(t.scopes)||!Array.isArray(t.resolved_scopes)||!["active","revoked","removed"].includes(t.status??"")||typeof t.synced_at!="string")throw new TypeError("invalid grant sync response");const a=e.revisions?.find(n=>n.rev===t.rev)?.approved_at;if(typeof a!="string")throw new TypeError("grant revision has no approval time");return{...t,spend_cap:t.spend_cap??null,expires_at:t.expires_at??null,revoked_at:t.revoked_at??null,approved_at:a,payer:"user"}}o(x,"responseGrant");function U(e,r=t=>{}){let t;const i=e.replace(/\/$/,""),a=o(async()=>{const c=l(),u=await $(i),f=await fetch(`${i}/v1/runtime/grants`,{headers:{Authorization:`Bearer ${u.access_token}`},signal:AbortSignal.timeout(1e4)});if(!f.ok)throw new Error(`directory grant sync failed: ${f.status}`);const p=await f.json();if(!Array.isArray(p.grants)||typeof p.synced_at!="string")throw new TypeError("invalid grant sync response");const m=b();E(p.grants.map(d=>x(d,c)),p.synced_at,i),y({level:"info",event:"daemon.grants.synced",fields:{grants:p.grants.length,synced_at:p.synced_at}});try{await j(m,r)}catch(d){y({level:"error",event:"daemon.grants.on_sync_failed",error:d})}},"run");let n;const s=o(()=>{const c=a().catch(u=>{throw y({level:"error",event:"daemon.grants.sync_failed",error:u}),u}).finally(()=>{t===c&&(t=void 0)});return t=c,c},"start");return(c={})=>t?c.fresh?(n??=t.catch(()=>{}).then(()=>(n=void 0,t??s())),n):t:s()}o(U,"createGrantSync");export{C as GRANT_SYNC_INTERVAL_S,U as createGrantSync,$ as mintDirectoryToken,l as runtimeClient,F as runtimeId};

package/dist/core/human/page-schema.d.ts

@@ -186,8 +186,8 @@ export declare const chartDataRowsSchema: z.ZodArray<z.ZodRecord<z.ZodString, z.
 export declare const chartConfigSchema: z.ZodObject<{
     kind: z.ZodEnum<{
         line: "line";
-        area: "area";
         bar: "bar";
+        area: "area";
     }>;
     x: z.ZodString;
     y: z.ZodArray<z.ZodObject<{

package/dist/core/human/requests.d.ts

@@ -95,6 +95,9 @@ export declare function getRequestByInboxTicket(ticketId: string): HumanRequestR
 export declare function getRequestByDirectory(dir: string): HumanRequestRecord | null;
 export declare function getRequestByCompanion(nodeId: string): HumanRequestRecord | null;
 export declare function getRequestByIdempotencyKey(key: string): HumanRequestRecord | null;
+/** A page asked from a run of an app other than the terminal is that app's to show
+ *  (daemon-operations §question.*: the terminal shows `app:terminal` runs' questions). */
+export declare const NOT_OTHER_APP_QUESTION = "NOT (kind = 'page' AND EXISTS (SELECT 1 FROM nodes n WHERE n.node_id = human_requests.requester_node_id\n  AND n.run_id IS NOT NULL AND n.grantee IS NOT NULL AND n.grantee <> 'app:terminal'))";
 export declare function listOpenInboxRequests(): HumanRequestRecord[];
 export declare function openRequestsByRequester(nodeId: string): HumanRequestRecord[];
 export declare function hasOpenReplyBearingRequestByRequester(nodeId: string): boolean;