@north-light/crouter 0.3.353 → 0.3.354

package/dist/core/graph/exposures.js

@@ -0,0 +1,4 @@
+var S=Object.defineProperty;var a=(n,e)=>S(n,"name",{value:e,configurable:!0});const p={name:1,preview:2,content:3},O=["system","transcript"],E=new WeakMap;function j(n){return{node:n.node,preferenceSnapshot:n.preferenceSnapshot,objects:new Map([...n.objects].map(([e,t])=>[e,{...t}])),listed:new Map([...n.listed].map(([e,t])=>[e,{...t}]))}}a(j,"cloneLedger");function _(n){return{node:n,preferenceSnapshot:null,objects:new Map,listed:new Map}}a(_,"emptyLedger");function y(n,e){const t=_(e),s=n.prepare("SELECT preference_snapshot, listed_json FROM context_sessions WHERE node = ?").get(e);if(s!==void 0){t.preferenceSnapshot=s.preference_snapshot;for(const[o,c]of Object.entries(JSON.parse(s.listed_json)))t.listed.set(o,c)}const r=n.prepare("SELECT object, channel, level, heads_key, content_hash FROM exposures WHERE node = ?").all(e);for(const o of r){const c=t.objects.get(o.object)??{headsKey:o.heads_key,contentHash:o.content_hash};c[o.channel]=o.level,t.objects.set(o.object,c)}return E.set(t,j(t)),t}a(y,"loadLedger");function N(n,e){const t=E.get(e)??_(e.node),s=JSON.stringify(Object.fromEntries(e.listed));(e.preferenceSnapshot!==t.preferenceSnapshot||s!==JSON.stringify(Object.fromEntries(t.listed)))&&n.prepare(`INSERT INTO context_sessions (node, preference_snapshot, listed_json) VALUES (?, ?, ?)
+      ON CONFLICT(node) DO UPDATE SET preference_snapshot = excluded.preference_snapshot, listed_json = excluded.listed_json`).run(e.node,e.preferenceSnapshot,s);const r=n.prepare(`INSERT INTO exposures (node, object, channel, level, heads_key, content_hash) VALUES (?, ?, ?, ?, ?, ?)
+    ON CONFLICT(node, object, channel) DO UPDATE SET level = excluded.level, heads_key = excluded.heads_key, content_hash = excluded.content_hash`),o=n.prepare("DELETE FROM exposures WHERE node = ? AND object = ? AND channel = ?"),c=new Set([...t.objects.keys(),...e.objects.keys()]);for(const i of c){const f=e.objects.get(i),u=t.objects.get(i);for(const d of O){const h=f?.[d];h===void 0?u?.[d]!==void 0&&o.run(e.node,i,d):(h!==u?.[d]||f.headsKey!==u?.headsKey||f.contentHash!==u?.contentHash)&&r.run(e.node,i,d,h,f.headsKey,f.contentHash)}}E.set(e,j(e))}a(N,"saveLedger");function T(n,e){return n.prepare("SELECT 1 FROM context_sessions WHERE node = ? UNION ALL SELECT 1 FROM exposures WHERE node = ? LIMIT 1").get(e,e)!==void 0}a(T,"hasLedger");function b(n,e){n.prepare("DELETE FROM exposures WHERE node = ?").run(e),n.prepare("DELETE FROM context_sessions WHERE node = ?").run(e)}a(b,"clearLedger");function x(n,e,t){b(n,t),n.prepare(`INSERT INTO exposures (node, object, channel, level, heads_key, content_hash)
+    SELECT ?, object, channel, level, heads_key, content_hash FROM exposures WHERE node = ? AND channel = 'transcript'`).run(t,e);const s=n.prepare("SELECT listed_json FROM context_sessions WHERE node = ?").get(e);if(s===void 0)return;const r={};for(const[o,c]of Object.entries(JSON.parse(s.listed_json)))c.transcript!==void 0&&(r[o]={transcript:c.transcript});n.prepare("INSERT INTO context_sessions (node, preference_snapshot, listed_json) VALUES (?, NULL, ?)").run(t,JSON.stringify(r))}a(x,"forkLedger");function l(n,e){if(n===void 0)return 0;const t=a(s=>n[s]!==void 0?p[n[s]]:0,"of");return e!==void 0?t(e):Math.max(t("system"),t("transcript"))}a(l,"rankIn");function H(n,e,t,s){const r=p[t],o=n.objects.get(e.object);if(o!==void 0&&l(o,s)>=r&&(t!=="content"||o.headsKey===e.headsKey))return!0;if(e.contentHash===null)return!1;for(const c of n.objects.values())if(c.contentHash===e.contentHash&&l(c,s)>=r)return!0;return!1}a(H,"heldAtOrAbove");function R(n,e,t,s){const r=n.objects.get(t.object),o=r!==void 0&&r.headsKey===t.headsKey&&r.contentHash===t.contentHash,c=o?{...r}:{headsKey:t.headsKey,contentHash:t.contentHash},i=o?r[e]:void 0;c[e]=i!==void 0&&p[i]>=p[s]?i:s,n.objects.set(t.object,c)}a(R,"hold");function M(n,e,t,s){return l(n.listed.get(e),s)>=p[t]}a(M,"listedAtOrAbove");function m(n,e,t,s){const r=n.listed.get(t)??{},o=r[e];o!==void 0&&p[o]>=p[s]||n.listed.set(t,{...r,[e]:s})}a(m,"holdListing");function A(n,e){const t=n.objects.get(e);if(t!==void 0)for(const[s,r]of n.objects){if(s!==e&&(t.contentHash===null||r.contentHash!==t.contentHash))continue;const{transcript:o,...c}=r;c.system===void 0?n.objects.delete(s):n.objects.set(s,c)}}a(A,"demoteTranscript");function v(n,e){return n.preferenceSnapshot===null&&(n.preferenceSnapshot=e),n.preferenceSnapshot}a(v,"freezePreferences");function I(n){return[...n.objects.values()].some(e=>e.transcript!==void 0)||[...n.listed.values()].some(e=>e.transcript!==void 0)}a(I,"hasTranscript");export{b as clearLedger,A as demoteTranscript,x as forkLedger,v as freezePreferences,T as hasLedger,I as hasTranscript,H as heldAtOrAbove,R as hold,m as holdListing,M as listedAtOrAbove,y as loadLedger,N as saveLedger};

package/dist/core/graph/jobs.d.ts

@@ -0,0 +1,31 @@
+/** Jobs: a backgrounded bash command as an object the node that started it owns, with its
+ *  `jobs` row and the events of its start and end. Runs in the caller's transaction. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow } from './types.js';
+export type JobStatus = 'running' | 'exited' | 'killed';
+export interface JobRow {
+    object: number;
+    command: string;
+    status: JobStatus;
+    exit_code: number | null;
+    job_dir: string;
+    log_path: string;
+}
+export declare function jobRow(db: DatabaseSync, job: ObjectRow): JobRow | null;
+/** Create the job object (`id` keeps the job id the runner already uses), its `running` row,
+ *  the node's acted-on edge and `job-start` watch, and publish `created`. */
+export declare function startJob(db: DatabaseSync, node: ObjectRow, spec: {
+    id?: string;
+    command: string;
+    jobDir: string;
+    logPath: string;
+}): ObjectRow;
+/** End a running job: `exited` with its exit code, or `killed` with the killer as actor (null
+ *  when the runtime killed it, e.g. at its deadline; `reason` then names why). The event carries
+ *  the exit code and log path, never output. A job already ended is left as is. */
+export declare function finishJob(db: DatabaseSync, job: ObjectRow, end: {
+    exitCode: number;
+} | {
+    killedBy: ObjectRow | null;
+    reason?: string;
+}): ObjectRow;

package/dist/core/graph/jobs.js

@@ -0,0 +1,2 @@
+var w=Object.defineProperty;var n=(t,r)=>w(t,"name",{value:r,configurable:!0});import{recordActedOn as s}from"./edges.js";import{levelFor as u,publish as d}from"./events.js";import{createObject as E,getByRowid as h}from"./objects.js";import{recordWatch as b}from"./watches.js";function p(t){return t.split(`
+`,1)[0].trim()}n(p,"firstLine");function m(t,r){return`${p(t)} (${r})`}n(m,"previewOf");function j(t,r){return t.prepare("SELECT * FROM jobs WHERE object = ?").get(r.rowid)??null}n(j,"jobRow");function R(t,r,o){if(r.type!=="node")throw new Error(`startJob: ${r.id} is a ${r.type}, not a node`);const e=E(t,{...o.id===void 0?{}:{id:o.id},type:"job",kind:"bash",owner:r.rowid,privacy:"public",name:p(o.command)||"bash",preview:m(o.command,"running")});return t.prepare("INSERT INTO jobs (object, command, status, exit_code, job_dir, log_path) VALUES (?, ?, 'running', NULL, ?, ?)").run(e.rowid,o.command,o.jobDir,o.logPath),s(t,r,e),b(t,r,e,"job-start"),d(t,{event:"created",object:e,actor:r,level:u("created"),attrs:{}}),e}n(R,"startJob");function T(t,r,o){const e=j(t,r);if(e===null)throw new Error(`finishJob: ${r.id} has no jobs row`);if(e.status!=="running")return r;const i="killedBy"in o,a=i?"killed":"exited",l=i?null:o.exitCode;t.prepare("UPDATE jobs SET status = ?, exit_code = ? WHERE object = ?").run(a,l,r.rowid);const f=i?"killed":`exited ${l}`;t.prepare("UPDATE objects SET preview = ? WHERE rowid = ?").run(m(e.command,f),r.rowid);const c=h(t,r.rowid);return i&&o.killedBy!==null&&s(t,o.killedBy,c),d(t,{event:a,object:c,actor:i?o.killedBy:null,level:u(a),attrs:i?{"log-path":e.log_path,...o.reason===void 0?{}:{reason:o.reason}}:{"exit-code":l,"log-path":e.log_path}}),c}n(T,"finishJob");export{T as finishJob,j as jobRow,R as startJob};

package/dist/core/graph/names.d.ts

@@ -0,0 +1,28 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow, Reader } from './types.js';
+export type Resolution = {
+    object: ObjectRow;
+} | {
+    deleted: ObjectRow;
+} | {
+    remote: string;
+} | {
+    ambiguous: ObjectRow[];
+} | {
+    missing: true;
+};
+/** The owners a bare name is looked up under, in order: own node, repos nearest
+ *  first, profile, app, you, then the apps whose tools the run may use (installed
+ *  plugins) with `crtr` last. */
+export declare function viewOf(db: DatabaseSync, reader: Reader): ObjectRow[];
+/** The owner types that carry a handle; `<type>:<handle>/<name>` names one exactly. */
+export declare const HANDLE_TYPES: readonly ["person", "app", "repo", "profile"];
+/** Every owner a handle names: a node by id, and each handle-carrying owner type
+ *  holding that handle (handles are unique per type, not across types). */
+export declare function ownersByHandle(db: DatabaseSync, handle: string, type?: string): ObjectRow[];
+/** `name` may be wrapped in `[[ ]]`, a raw object id, a bare document name,
+ *  `<owner handle>/<name>`, or `<type>:<owner handle>/<name>`. Under a handle
+ *  several owner types share, owners in the reader's view come first in view
+ *  order; otherwise exactly one holder wins and more are `ambiguous`. Anything
+ *  the reader cannot read answers `missing`. */
+export declare function resolveName(db: DatabaseSync, reader: Reader, raw: string): Resolution;

package/dist/core/graph/names.js

@@ -0,0 +1,3 @@
+var L=Object.defineProperty;var a=(e,t)=>L(e,"name",{value:t,configurable:!0});import{isSafeNodeId as O}from"../canvas/paths.js";import{canRead as S,toolApps as j}from"./access.js";import{getById as x}from"./objects.js";function I(e,t){const r=e.prepare("SELECT * FROM objects WHERE type = 'person' AND name = 'user'").get(),o=j(e,t),u=t.class==="node"?[t.node,...t.repos,t.profile,t.app]:t.class==="app"?[t.app]:[],s=new Set;return[...u,r,...o].filter(i=>!!i&&!s.has(i.rowid)&&!!s.add(i.rowid))}a(I,"viewOf");function d(e,t,r,o){return e.prepare(`SELECT * FROM objects WHERE type = 'document' AND owner = ? AND name = ?
+    AND deleted_at IS ${o?"NOT NULL ORDER BY deleted_at DESC":"NULL"}`).all(t.rowid,r)}a(d,"documentsNamed");const C=["person","app","repo","profile"],g=/^(person|app|repo|profile|node):([^/]+)\/(.+)$/;function T(e,t,r){return r==="node"?e.prepare("SELECT * FROM objects WHERE type = 'node' AND id = ?").all(t):r?e.prepare("SELECT * FROM objects WHERE type = ? AND name = ?").all(r,t):e.prepare(`SELECT * FROM objects WHERE (type = 'node' AND id = ?)
+    OR (type IN ('person','app','repo','profile') AND name = ?)`).all(t,t)}a(T,"ownersByHandle");function F(e,t,r){let o=r.trim().replace(/^\[\[(.*)\]\]$/,"$1").trim();const u=/^([^:/]+):reports\/(.+?)(?:\.md)?$/.exec(o);u&&!g.test(o)&&(o=`${u[1]}/reports/${u[2]}`);const s=a(c=>S(e,t,c),"readable"),i=x(e,o);if(i&&s(i))return i.deleted_at?{deleted:i}:{object:i};const N=I(e,t);for(const c of N){const p=d(e,c,o,!1).find(s);if(p)return{object:p}}const f=g.exec(o),w=o.indexOf("/");if(f||w>0){const c=f?f[2]:o.slice(0,w),p=f?f[3]:o.slice(w+1),E=T(e,c,f?.[1]),R=a(n=>{const l=N.findIndex(A=>A.rowid===n.rowid);return l<0?1/0:l},"rank"),y=E.filter(n=>R(n)<1/0).sort((n,l)=>R(n)-R(l));for(const n of y){const l=d(e,n,p,!1).find(s);if(l)return{object:l}}const m=E.flatMap(n=>d(e,n,p,!1)).filter(s);if(m.length===1)return{object:m[0]};if(m.length>1)return{ambiguous:m};const D=E.flatMap(n=>d(e,n,p,!0)).find(s);return D?{deleted:D}:!f&&E.length===0&&O(c)?{remote:o}:{missing:!0}}for(const c of N){const p=d(e,c,o,!0).find(s);if(p)return{deleted:p}}return{missing:!0}}a(F,"resolveName");export{C as HANDLE_TYPES,T as ownersByHandle,F as resolveName,I as viewOf};

package/dist/core/graph/objects.d.ts

@@ -0,0 +1,55 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow, ObjectType, Privacy, Reader } from './types.js';
+export declare function getById(db: DatabaseSync, id: string): ObjectRow | null;
+export declare function getByRowid(db: DatabaseSync, rowid: number): ObjectRow | null;
+export declare function createObject(db: DatabaseSync, spec: {
+    id?: string;
+    type: ObjectType;
+    kind: string | null;
+    owner: number | null;
+    privacy: Privacy;
+    name: string;
+    preview: string;
+}): ObjectRow;
+/** The owner object for an identity, created on first sight. Idempotent on
+ *  (scheme, externalId). Handles are unique per owner type: a handle already held
+ *  by a different identity of the same type throws `conflict` naming both; it is
+ *  never renamed silently. */
+export declare function ensureOwner(db: DatabaseSync, type: ObjectType, scheme: string, externalId: string, handle: string, owner?: ObjectRow): ObjectRow;
+/** The owner object of a node grantee: `user:local` → person `user`; `app:<x>` → app `<x>`. */
+export declare function ownerForGrantee(db: DatabaseSync, grantee: string): ObjectRow;
+/** The owner's live document named `name`, or null. */
+export declare function liveDocumentNamed(db: DatabaseSync, owner: number, name: string): ObjectRow | null;
+export declare function nodeObject(db: DatabaseSync, nodeId: string): ObjectRow;
+export declare function setObjectName(db: DatabaseSync, object: ObjectRow, name: string): void;
+export declare function setObjectKind(db: DatabaseSync, object: ObjectRow, kind: string | null): void;
+export interface ObjectFilter {
+    type?: ObjectType;
+    kind?: string;
+    owner?: ObjectRow;
+    privacy?: Privacy;
+    name?: string;
+    deleted?: boolean;
+}
+export interface Page {
+    limit?: number;
+    after_rowid?: number;
+}
+/** Objects the reader can read, in rowid order. Records nothing. `limit` ≤ 100. */
+export declare function listObjects(db: DatabaseSync, reader: Reader, filter: ObjectFilter, page?: Page): ObjectRow[];
+export interface SearchQuery {
+    text: string;
+    body?: boolean;
+    grep?: boolean;
+}
+export interface SearchHit {
+    object: ObjectRow;
+    field: 'name' | 'preview' | 'summary' | 'body';
+    line?: number;
+    text?: string;
+}
+/** Up to 100 hits over live objects the reader can read. Records nothing. `text`
+ *  matches name, preview and document summary as a substring; `body` also scans
+ *  each document's head bodies for the substring, and `grep` scans them for `text`
+ *  as a regular expression. Body search reads every readable body: linear, no index. */
+export declare function searchObjects(db: DatabaseSync, reader: Reader, query: SearchQuery): SearchHit[];

package/dist/core/graph/objects.js

@@ -0,0 +1,9 @@
+var S=Object.defineProperty;var s=(o,e)=>S(o,"name",{value:e,configurable:!0});import{CrtrError as L,notFound as j}from"../errors.js";import{ExitCode as b}from"../../types.js";import{newNodeId as T}from"../runtime/nodes.js";import{canRead as l}from"./access.js";import{bodyOf as x}from"./bodies.js";const y=new Set(["person","app","repo","profile"]);function h(o){return o||null}s(h,"rowFrom");function I(o,e){return h(o.prepare("SELECT * FROM objects WHERE id = ?").get(e))}s(I,"getById");function W(o,e){return h(o.prepare("SELECT * FROM objects WHERE rowid = ?").get(e))}s(W,"getByRowid");function _(o,e){return o.prepare(`INSERT INTO objects (id, type, kind, owner, privacy, name, preview, created_at)
+    VALUES (?, ?, ?, ?, ?, ?, ?, ?) RETURNING *`).get(e.id??T(),e.type,e.kind,e.owner,e.privacy,e.name,e.preview,new Date().toISOString())}s(_,"createObject");function R(o,e,t,p,r,n){if(!y.has(e))throw new Error(`ensureOwner: ${e} is not an owner type`);const a=o.prepare(`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE i.scheme = ? AND i.external_id = ?`).get(t,p);if(a)return a;const c=o.prepare(`SELECT o.id, o.type, i.scheme, i.external_id FROM objects o
+    LEFT JOIN identities i ON i.object = o.rowid
+    WHERE o.name = ? AND o.type = ?`).get(r,e);if(c)throw new L("conflict",`handle "${r}" is held by ${c.type} ${c.id} (${c.scheme}:${c.external_id}); cannot give it to ${e} ${t}:${p}`,b.GENERAL,{handle:r,holder:c.id});const d=_(o,{type:e,kind:null,owner:e==="profile"?n?.rowid??null:null,privacy:"public",name:r,preview:""});return o.prepare("INSERT INTO identities (object, scheme, external_id) VALUES (?, ?, ?)").run(d.rowid,t,p),d}s(R,"ensureOwner");function H(o,e){if(e==="user:local")return R(o,"person","local-user",e,"user");if(/^app:[a-z0-9][a-z0-9._-]*$/.test(e))return R(o,"app","app",e,e.slice(4));throw new Error(`node grantee ${JSON.stringify(e)} is neither app:<name> nor user:local`)}s(H,"ownerForGrantee");function M(o,e,t){return h(o.prepare("SELECT * FROM objects WHERE type = 'document' AND owner = ? AND name = ? AND deleted_at IS NULL").get(e,t))}s(M,"liveDocumentNamed");function U(o,e){const t=I(o,e);if(!t||t.type!=="node")throw j(`no node object ${e}`);return t}s(U,"nodeObject");function k(o,e,t){o.prepare("UPDATE objects SET name = ? WHERE rowid = ?").run(t,e.rowid)}s(k,"setObjectName");function P(o,e,t){o.prepare("UPDATE objects SET kind = ? WHERE rowid = ?").run(t,e.rowid)}s(P,"setObjectKind");function B(o,e,t,p={}){const r=["rowid > ?"],n=[p.after_rowid??0];return t.type!==void 0&&(r.push("type = ?"),n.push(t.type)),t.kind!==void 0&&(r.push("kind = ?"),n.push(t.kind)),t.owner!==void 0&&(r.push("owner = ?"),n.push(t.owner.rowid)),t.privacy!==void 0&&(r.push("privacy = ?"),n.push(t.privacy)),t.name!==void 0&&(r.push("name = ?"),n.push(t.name)),r.push(t.deleted?"deleted_at IS NOT NULL":"deleted_at IS NULL"),g(o,e,`SELECT * FROM objects WHERE ${r.join(" AND ")}`,n,Math.min(p.limit??100,100))}s(B,"listObjects");function J(o,e,t){const r=[],n=`%${t.text.replace(/[\\%_]/g,i=>`\\${i}`)}%`;if(!t.grep){const i=o.prepare(`SELECT o.*, d.summary AS _summary FROM objects o LEFT JOIN documents d ON d.object = o.rowid
+      WHERE o.deleted_at IS NULL AND (o.name LIKE ?1 ESCAPE '\\' OR o.preview LIKE ?1 ESCAPE '\\' OR d.summary LIKE ?1 ESCAPE '\\')
+      ORDER BY o.rowid`).all(n),u=t.text.toLowerCase();for(const m of i){const{_summary:w,...E}=m,f=E;if(!l(o,e,f))continue;const O=f.name.toLowerCase().includes(u)?"name":f.preview.toLowerCase().includes(u)?"preview":"summary";if(r.push({object:f,field:O,...O==="summary"?{text:String(w)}:{}}),r.length>=100)return r}}if(!t.body&&!t.grep)return r;const a=new Set(r.map(i=>i.object.rowid)),c=t.grep?(i=>u=>i.test(u))(new RegExp(t.text)):i=>i.includes(t.text),d=o.prepare("SELECT * FROM objects WHERE type = 'document' AND deleted_at IS NULL ORDER BY rowid").all(),N=o.prepare(`SELECT r.body_hash, d.source_path FROM revisions r JOIN documents d ON d.object = r.document WHERE r.document = ?
+    AND NOT EXISTS (SELECT 1 FROM revision_parents p WHERE p.parent = r.rowid)`);for(const i of d)if(!(a.has(i.rowid)||!l(o,e,i)))for(const{body_hash:u,source_path:m}of N.all(i.rowid)){const w=x(u,m).split(`
+`),E=w.findIndex(c);if(!(E<0)){if(r.push({object:i,field:"body",line:E+1,text:w[E]}),r.length>=100)return r;break}}return r}s(J,"searchObjects");function g(o,e,t,p,r){const n=[],a=o.prepare(`${t} ORDER BY rowid LIMIT ${r*4}`);for(;;){const c=a.all(...p);for(const d of c)if(l(o,e,d)&&n.push(d),n.length===r)return n;if(c.length<r*4)return n;p[0]=c[c.length-1].rowid}}s(g,"readablePages");export{_ as createObject,R as ensureOwner,I as getById,W as getByRowid,B as listObjects,M as liveDocumentNamed,U as nodeObject,H as ownerForGrantee,J as searchObjects,P as setObjectKind,k as setObjectName};

package/dist/core/graph/package-docs.d.ts

@@ -0,0 +1,31 @@
+/** Package documents: builtin (`crtr`) and plugin documents stay files in their package; this
+ *  converges their `objects`/`documents` rows, their one revision and their rules onto those
+ *  files (contract §6.6). Bodies are read from `documents.source_path`, never the body store.
+ *  A plugin is an app: its documents belong to the app `<plugin>` (identity `app:<plugin>`,
+ *  the one `ownerForGrantee` gives), and a document with a `source_path` is shipped. */
+import type { DatabaseSync } from 'node:sqlite';
+export interface PackageSource {
+    plugin: string;
+    dir: string;
+}
+/** The builtin corpus (app `crtr`), then every enabled user-scope plugin's `memory/` folder. */
+export declare function packageSources(): PackageSource[];
+export interface PackageReconcileReport {
+    created: number;
+    updated: number;
+    deleted: number;
+    /** plugins provided by more than one package; only the first is reconciled */
+    conflicts: Array<{
+        plugin: string;
+        message: string;
+    }>;
+    invalid: Array<{
+        path: string;
+        error: string;
+    }>;
+}
+/** Converge every package's documents onto its files. Run inside the caller's transaction.
+ *  Idempotent: a second run over unchanged files writes nothing. A changed body replaces the
+ *  document's single revision and publishes `edited`; a vanished file (or plugin) marks its
+ *  document deleted and publishes `deleted`. */
+export declare function reconcilePackageDocuments(db: DatabaseSync, sources?: readonly PackageSource[]): PackageReconcileReport;

package/dist/core/graph/package-docs.js

@@ -0,0 +1,5 @@
+var D=Object.defineProperty;var p=(e,s)=>D(e,"name",{value:s,configurable:!0});import{createHash as O,randomUUID as I}from"node:crypto";import{CrtrError as w}from"../errors.js";import{listInstalledPlugins as v}from"../resolver.js";import{builtinMemoryRoot as A,pluginMemoryDir as _}from"../scope.js";import{documentFields as L}from"../../migrations/004-canvas-documents/fields.js";import{applyDocumentFields as T,deleteDocument as x,documentRecord as R,heads as j,importDocument as k,moveDocument as U}from"./documents.js";import{publish as F}from"./events.js";import{packageFiles as J}from"./package-files.js";import{ensureOwner as b,getByRowid as y,setObjectKind as C}from"./objects.js";import{reposForCwd as H}from"./repo-sync/repos.js";import{rulesOf as W}from"./rules.js";function M(){return[{plugin:"crtr",dir:A()},...v("user").filter(e=>e.enabled).map(e=>({plugin:e.name,dir:_(e)}))]}p(M,"packageSources");const P=p(e=>O("sha256").update(e,"utf8").digest("hex"),"sha256");function te(e,s=M()){const t={created:0,updated:0,deleted:0,conflicts:[],invalid:[]},c=p(r=>H(e,r),"reposFn"),l=new Set,n=new Set;for(const r of s){let o;try{if(n.has(r.plugin))throw new w("conflict",`plugin "${r.plugin}" is already provided by another package`);n.add(r.plugin),o=b(e,"app","app",`app:${r.plugin}`,r.plugin)}catch(a){if(!(a instanceof w)||a.code!=="conflict")throw a;t.conflicts.push({plugin:r.plugin,message:a.message});continue}l.add(o.rowid);const{files:f,invalid:m}=J(r.dir);t.invalid.push(...m);const d=new Set;for(const a of f)d.add(K(e,o,a,t,c));E(e,o,d,t,c)}const i=e.prepare(`SELECT DISTINCT o.owner AS rowid FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.deleted_at IS NULL AND d.source_path IS NOT NULL`).all();for(const{rowid:r}of i)l.has(r)||E(e,y(e,r),new Set,t,c);return t}p(te,"reconcilePackageDocuments");function K(e,s,t,c,l){const n=L(t.frontmatter,t.body,{missingPrivacy:"public"}),i={preview:n.preview.trim()===""?t.name:n.preview,summary:n.summary,whyItExists:n.whyItExists,unlisted:n.unlisted,rules:n.rules,lintIgnore:Array.isArray(n.lintIgnore)?n.lintIgnore.filter(u=>typeof u=="string"):null,extensions:n.extensions!==null&&typeof n.extensions=="object"&&!Array.isArray(n.extensions)?n.extensions:null},r=P(t.body);let o=e.prepare(`SELECT o.* FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.owner = ? AND o.deleted_at IS NULL AND d.source_path = ?`).get(s.rowid,t.path);if(o||(o=e.prepare(`SELECT o.* FROM objects o JOIN documents d ON d.object = o.rowid
+      WHERE o.type = 'document' AND o.owner = ? AND o.deleted_at IS NULL AND o.name = ? AND d.source_path IS NOT NULL`).get(s.rowid,t.name),o&&e.prepare("UPDATE documents SET source_path = ? WHERE object = ?").run(t.path,o.rowid)),!o){const u=k(e,{owner:s,name:t.name,kind:n.kind,privacy:"public",...i,revisions:[{body_hash:r,author:s,rationale:null,created_at:new Date().toISOString()}]});return e.prepare("UPDATE documents SET source_path = ? WHERE object = ?").run(t.path,u.rowid),c.created+=1,u.rowid}const f=o.name!==t.name||o.kind!==n.kind;o.name!==t.name&&(o=U(e,null,o,{name:t.name})),o.kind!==n.kind&&(C(e,o,n.kind),o=y(e,o.rowid));const m=R(e,o),[d]=j(e,o),a=d?.body_hash!==r,S=o.preview!==i.preview||m.summary!==i.summary||m.why_it_exists!==i.whyItExists||m.unlisted!==i.unlisted||JSON.stringify(m.lint_ignore)!==JSON.stringify(i.lintIgnore)||JSON.stringify(m.extensions)!==JSON.stringify(i.extensions)||JSON.stringify(W(e,o).map(N))!==JSON.stringify(i.rules.map(N));if(!a&&!S&&!f)return o.rowid;const g=T(e,o,i);if(a&&d){const u=I(),h=d.number+1;e.prepare("UPDATE revisions SET rev_id = ?, number = ?, body_hash = ?, created_at = ? WHERE rowid = ?").run(u,h,r,new Date().toISOString(),d.rowid),e.prepare("UPDATE documents SET heads_key = ?, revision = ? WHERE object = ?").run(u,h,g.rowid),F(e,{event:"edited",object:g,actor:s,level:8,pointer:u,attrs:{revision:h,from_revision:d.number,rationale:"package file changed"}},l)}return c.updated+=1,g.rowid}p(K,"convergeFile");function N(e){return[e.on,e.deliver,e.match??null,e.matchFrontmatter??null,e.if??null]}p(N,"ruleKey");function E(e,s,t,c,l){const n=e.prepare(`SELECT o.* FROM objects o JOIN documents d ON d.object = o.rowid
+    WHERE o.type = 'document' AND o.owner = ? AND o.deleted_at IS NULL AND d.source_path IS NOT NULL`).all(s.rowid);for(const i of n)t.has(i.rowid)||(x(e,null,i,l),c.deleted+=1)}p(E,"deleteMissing");export{M as packageSources,te as reconcilePackageDocuments};

package/dist/core/graph/package-files.d.ts

@@ -0,0 +1,20 @@
+/** One markdown file of a package's `memory/` folder. */
+export interface PackageFile {
+    /** owner-local document name; a package root `INDEX.md` is `index` */
+    name: string;
+    path: string;
+    frontmatter: Record<string, unknown> | null;
+    body: string;
+}
+/** The documents of one package folder, sorted by name. A file whose frontmatter does not parse,
+ *  or whose name another file already holds, is returned in `invalid` and is not a document. */
+export declare function packageFiles(dir: string): {
+    files: PackageFile[];
+    invalid: Array<{
+        path: string;
+        error: string;
+    }>;
+};
+/** Strict frontmatter check a plugin package's documents must pass before the
+ *  package installs. */
+export declare function lintPackageFrontmatter(fm: Record<string, unknown> | null): string | null;

package/dist/core/graph/package-files.js

@@ -0,0 +1,2 @@
+var b=Object.defineProperty;var u=(e,n)=>b(e,"name",{value:n,configurable:!0});import{readFileSync as v}from"node:fs";import{relative as S,sep as $}from"node:path";import{parseFrontmatterGeneric as w}from"../frontmatter.js";import{pathExists as x,walkFiles as k}from"../fs-utils.js";import{explicitLocalName as N,isDocKind as A,localNameFromPath as y,representationForPath as E}from"../substrate/schema.js";function W(e){const n=[];if(!x(e))return{files:[],invalid:n};const r=new Map;for(const o of k(e,i=>i.endsWith(".md")&&i!=="SKILL.md",i=>i===".crouter"||i.startsWith(".")).sort()){const i=S(e,o).split($).join("/");let s;try{s=w(v(o,"utf8"))}catch(f){n.push({path:o,error:`invalid frontmatter: ${(f instanceof Error?f.message:String(f)).split(`
+`)[0]}`});continue}const d=y(i)===""?"":N(s.data)??y(i),a=d===""?"index":d,l={name:a,path:o,frontmatter:s.data,body:s.body,index:E(i)==="directory-index"},c=r.get(a);if(c&&(c.index||!l.index)){n.push({path:o,error:`name ${a} is already held by ${c.path}`});continue}c&&n.push({path:c.path,error:`name ${a} is already held by ${o}`}),r.set(a,l)}return{files:[...r.values()].map(({index:o,...i})=>i).sort((o,i)=>o.name.localeCompare(i.name)),invalid:n}}u(W,"packageFiles");const p=["public","friends","private"],h=["boot","workspace-open","read","memory-read","command","pre-command"],m=["name","preview","content"],O=["system-prompt-visibility","file-read-visibility","applies-to","read-when"],j=["on","match","match-frontmatter","gate","at"],g=["length","broad-memory-read","orphan"];function J(e){if(e===void 0)return null;if(!Array.isArray(e))return`invalid surfaces: ${JSON.stringify(e)} (expected a list of {on, at, match?, match-frontmatter?, gate?} entries)`;for(const n of e){if(n===null||typeof n!="object"||Array.isArray(n))return`invalid surfaces entry: ${JSON.stringify(n)} (expected an {on, at, match?, match-frontmatter?, gate?} object)`;const r=n;for(const a of Object.keys(r))if(!j.includes(a))return`invalid surfaces entry: unknown key \`${a}\` (an entry carries only on, match, match-frontmatter, gate, at)`;const t=r.on;if(typeof t!="string"||!h.includes(t))return`invalid surfaces entry \`on\`: ${JSON.stringify(t)} (expected ${h.join("|")})`;const o=r.at;if(typeof o!="string"||!m.includes(o))return`invalid surfaces entry \`at\`: ${JSON.stringify(o)} (expected ${m.join("|")})`;let i=!1;if(r.match!==void 0){if(t==="boot"||t==="workspace-open")return`invalid surfaces entry: \`match\` is meaningless on \`${t}\` \u2014 the entry's presence is the match; drop it`;const a=r.match,l=typeof a=="string"?[a]:Array.isArray(a)&&a.every(c=>typeof c=="string")?a:null;if(l===null||l.length===0||l.some(c=>c.trim()===""))return`invalid surfaces entry \`match\`: ${JSON.stringify(a)} (expected a non-empty glob or non-empty glob list)`;i=!0}const s=r["match-frontmatter"];if(s!==void 0){if(t!=="read")return"invalid surfaces entry: `match-frontmatter` is a `read`-event predicate only";if(s===null||typeof s!="object"||Array.isArray(s))return`invalid surfaces entry \`match-frontmatter\`: ${JSON.stringify(s)} (expected a field\u2192matcher object)`}if((t==="read"||t==="memory-read"||t==="command"||t==="pre-command")&&!i&&s===void 0)return`invalid surfaces entry: a \`${t}\` entry requires \`match\`${t==="read"?" or `match-frontmatter`":""}`;const d=r.gate;if(d!==void 0&&(d===null||typeof d!="object"||Array.isArray(d)))return`invalid surfaces entry \`gate\`: ${JSON.stringify(d)} (expected a field\u2192matcher object)`}return null}u(J,"lintPackageSurfaces");function C(e){if(e===null)return"missing frontmatter: a package document requires `kind: knowledge|preference`";if(!A(e.kind))return`invalid kind: ${JSON.stringify(e.kind)} (expected knowledge|preference)`;if("when"in e||"why"in e)return'retired `when`/`why` keys: merge them into one `when-and-why-to-read` line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';if(typeof e["when-and-why-to-read"]!="string"||e["when-and-why-to-read"].trim()==="")return'missing `when-and-why-to-read`: one routing line \u2014 "When <circumstance>, this <kind> should be read because <broader downstream payoff>." WHY is the benefit unlocked by reading, not the document summary, rule, or obedience rationale.';for(const r of O)if(r in e)return`retired \`${r}\` key: the visibility axes were replaced by \`surfaces\` event routing \u2014 run \`crtr sys migrate\` to convert old-format docs, or author \`surfaces\` entries by hand (\`crtr memory write -h\`)`;if("privacy"in e&&!p.includes(e.privacy))return`invalid privacy: ${JSON.stringify(e.privacy)} (expected ${p.join("|")})`;if(e.unlisted!==void 0&&typeof e.unlisted!="boolean")return`invalid unlisted: ${JSON.stringify(e.unlisted)} (expected a boolean)`;const n=J(e.surfaces);if(n!==null)return n;if(e.gate!==void 0&&(e.gate===null||typeof e.gate!="object"||Array.isArray(e.gate)))return`invalid gate: ${JSON.stringify(e.gate)} (expected a field\u2192matcher object)`;if(e.slash!==void 0&&typeof e.slash!="boolean")return`invalid slash: ${JSON.stringify(e.slash)} (expected a boolean)`;if(e.rationale!==void 0&&typeof e.rationale!="string")return`invalid rationale: ${JSON.stringify(e.rationale)} (expected a string)`;if(e["lint-ignore"]!==void 0){const r=Array.isArray(e["lint-ignore"])?e["lint-ignore"]:[e["lint-ignore"]];if(r.length===0||!r.every(t=>typeof t=="string"&&g.includes(t)))return`invalid lint-ignore: ${JSON.stringify(e["lint-ignore"])} (suppressible rules: ${g.map(t=>`\`${t}\``).join(", ")})`}return null}u(C,"lintPackageFrontmatter");export{C as lintPackageFrontmatter,W as packageFiles};

package/dist/core/graph/reader.d.ts

@@ -0,0 +1,21 @@
+import type { DatabaseSync } from 'node:sqlite';
+import type { RequestPrincipal } from '../../daemon/api/router.js';
+import { type ActiveGrant } from '../grants/mirror.js';
+import type { ObjectRow, Reader } from './types.js';
+export type ReposFn = (cwd: string) => ObjectRow[];
+export declare function readerFor(db: DatabaseSync, principal: RequestPrincipal, reposFn: ReposFn): Reader;
+export declare function readerForNode(db: DatabaseSync, nodeId: string, reposFn: ReposFn, lookups?: ReaderLookups): Reader;
+/** What building a node reader looks up besides the node's own row. `liveLookups` reads each
+ *  one per call; `publishLookups` memoizes them for one publish inside its transaction, so the
+ *  readers of one event share a single config read and one lookup per grant, owner and
+ *  profile. Never keep a memoized one past that transaction. */
+export interface ReaderLookups {
+    grantById(grantId: string): ActiveGrant | null;
+    grantFor(app: string, sub: string): ActiveGrant | null;
+    terminalHasIssuer(): boolean;
+    object(rowid: number): ObjectRow | null;
+    profile(profileId: string, app: ObjectRow): ObjectRow;
+}
+export declare function liveLookups(db: DatabaseSync): ReaderLookups;
+export declare function publishLookups(db: DatabaseSync): ReaderLookups;
+export declare function profileObject(db: DatabaseSync, profileId: string, app: ObjectRow): ObjectRow;

package/dist/core/graph/reader.js

@@ -0,0 +1,3 @@
+var _=Object.defineProperty;var t=(o,e)=>_(o,"name",{value:e,configurable:!0});import{covers as R}from"@north-light/crouter-identity";import{activeGrant as h,grantFor as F}from"../grants/mirror.js";import{prepared as E}from"../canvas/db.js";import{readConfig as $}from"../config.js";import{SCOPE_VOCABULARY as H}from"../scopes.js";import{loadExactProfileManifest as S}from"../profiles/manifest.js";import{ensureOwner as p,getByRowid as x,nodeObject as C}from"./objects.js";function I(o,e,i){if(e.class==="person")return{class:"person",person:j(o)};if(e.class==="app")return{class:"app",app:L(o,e.app),scopes:e.scopes};const s=f(o),r=C(o,e.node),n=r.owner===null?null:s.object(r.owner);if(!n)throw new Error(`node ${e.node} has no owner`);const l=o.prepare("SELECT cwd, profile_id FROM nodes WHERE node_id = ?").get(e.node);return{class:"node",node:r,app:n,scopes:g(e.app,e.sub,e.grant,e.scopes,s),cwd:l.cwd,repos:i(l.cwd),profile:l.profile_id===null?null:s.profile(l.profile_id,n)}}t(I,"readerFor");function D(o,e,i,s=f(o)){const r=E(o,"SELECT o.* FROM objects o WHERE o.id = ? AND o.type = 'node'").get(e),n=E(o,`SELECT (SELECT external_id FROM identities WHERE object = ?) AS grantee,
+    sub, grant_id, scopes_json, cwd, profile_id FROM nodes WHERE node_id = ?`).get(r?.owner??null,e);if(!r||!n)throw new Error(`no node ${e}`);const{grantee:l,sub:c,grant_id:a,scopes_json:d,cwd:w,profile_id:m}=n,u=r.owner===null?null:s.object(r.owner);if(!u)throw new Error(`node ${e} has no owner`);const O=d===null?null:JSON.parse(d);return{class:"node",node:r,app:u,scopes:g(l,c??"",a,O,s),cwd:w,repos:i(w),profile:m===null?null:s.profile(m,u)}}t(D,"readerForNode");function f(o){return{grantById:h,grantFor:F,terminalHasIssuer:t(()=>!!$("user").runtime?.issuer,"terminalHasIssuer"),object:t(e=>x(o,e),"object"),profile:t((e,i)=>b(o,e,i),"profile")}}t(f,"liveLookups");function J(o){const e=f(o),i=new Map,s=t((r,n)=>(i.has(r)||i.set(r,n()),i.get(r)),"memo");return{grantById:t(r=>s(`g\0${r}`,()=>e.grantById(r)),"grantById"),grantFor:t((r,n)=>s(`a\0${r}\0${n}`,()=>e.grantFor(r,n)),"grantFor"),terminalHasIssuer:t(()=>s("issuer",()=>e.terminalHasIssuer()),"terminalHasIssuer"),object:t(r=>s(`o\0${r}`,()=>e.object(r)),"object"),profile:t((r,n)=>s(`p\0${r}\0${n.rowid}`,()=>e.profile(r,n)),"profile")}}t(J,"publishLookups");function g(o,e,i,s,r){const n=i?r.grantById(i):r.grantFor(o,e),l=n&&n.grantee===o?n.resolved:o==="app:terminal"&&!r.terminalHasIssuer()?H:null;if(l===null)throw new Error(`the grant of ${o} is not active`);return s===null?l:s.filter(c=>l.some(a=>R(a,c)))}t(g,"nodeScopes");function j(o){return p(o,"person","local-user","user:local","user")}t(j,"personObject");function L(o,e){return e==="user:local"?j(o):p(o,"app","app",e,e.replace(/^app:/,""))}t(L,"appObject");function b(o,e,i){return o.prepare(`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE i.scheme = 'profile' AND i.external_id = ?`).get(e)??p(o,"profile","profile",e,S(e).manifest.name,i)}t(b,"profileObject");export{f as liveLookups,b as profileObject,J as publishLookups,I as readerFor,D as readerForNode};

package/dist/core/graph/repo-sync/exchange.d.ts

@@ -0,0 +1,34 @@
+/** The canvas side of repo sync: export a repo space's public documents to `refs/crtr/docs`
+ *  tree files, and import a changed tree back into canvas.db. Export only reads; import only
+ *  adds revisions (never drops one) and publishes `created`, `edited` and `deleted` with a
+ *  null actor, since the act happened on another runtime. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ReposFn } from '../reader.js';
+import type { ObjectRow } from '../types.js';
+/**
+ * The tree (path → file text) of every public document the repo space owns, deleted ones
+ * included. A revision already in `previous` is copied verbatim, so a remote author and the
+ * links it was written with survive; a revision made here carries its author's object id, and
+ * a head carries the document's current `links-to` edges.
+ */
+export declare function exportRepo(db: DatabaseSync, repo: ObjectRow, previous: Map<string, string> | null): Map<string, string>;
+export interface ImportResult {
+    created: number;
+    revisions: number;
+    deleted: number;
+    needsMerge: string[];
+    refused: Array<{
+        path: string;
+        reason: string;
+    }>;
+}
+/**
+ * Apply the difference between two trees (the one last imported and the new one) to the
+ * repo's documents, in one transaction. Per changed file: a file that does not parse, is not
+ * public, or names an id held by an object outside this repo is refused and reported; a new
+ * document is created with its id; arriving revisions are added (author NULL); changed record
+ * fields and a rename are applied; a tombstone or a removed file deletes. Each document
+ * publishes once: `created`, `edited` (with `heads` and `needs_merge`) or `deleted`. A
+ * document that fails is rolled back alone and reported in `refused`.
+ */
+export declare function importTree(db: DatabaseSync, repo: ObjectRow, before: Map<string, string>, after: Map<string, string>, reposFn?: ReposFn): ImportResult;

package/dist/core/graph/repo-sync/exchange.js

@@ -0,0 +1,2 @@
+var A=Object.defineProperty;var f=(e,t)=>A(e,"name",{value:t,configurable:!0});import{get as B,put as T}from"../bodies.js";import{setLinks as j}from"../edges.js";import{deleteDocument as S,documentRecord as D,heads as M,importDocument as F,insertImportedRevisions as H,moveDocument as W,setDocumentRecord as J}from"../documents.js";import{publish as $}from"../events.js";import{getById as C,getByRowid as P,setObjectKind as Y}from"../objects.js";import{rulesOf as K}from"../rules.js";import{SPACES as z}from"../spaces/index.js";import{docPath as V,parseDoc as E,serializeDoc as b}from"./ref-format.js";function I(e){const t=z[e.type];if(e.owner!==null||!t||t.sync!=="repo-ref")throw new Error(`${e.type} ${e.id} is not a space that syncs through a repo ref`)}f(I,"assertRepoRefSpace");function q(e){const t=new Map;for(const[r,i]of e??[]){const l=E(r,i);l.ok&&t.set(l.doc.id,l.doc)}return t}f(q,"parseMap");function ce(e,t,r){I(t);const i=q(r),l=e.prepare("SELECT * FROM objects WHERE type = 'document' AND owner = ? AND privacy = 'public' ORDER BY rowid").all(t.rowid),u=e.prepare("SELECT rowid, rev_id, number, body_hash, author, rationale, created_at FROM revisions WHERE document = ? ORDER BY number, rev_id"),p=e.prepare("SELECT p.rev_id FROM revision_parents rp JOIN revisions p ON p.rowid = rp.parent WHERE rp.child = ?"),o=e.prepare(`SELECT e.written_as, o.id FROM edges e JOIN objects o ON o.rowid = e.dst
+    WHERE e.type = 'links-to' AND e.src = ? ORDER BY e.written_as, o.id`),d=new Map;for(const n of l){const m=D(e,n),y=new Map((i.get(n.id)?.revisions??[]).map(s=>[s.rev_id,s])),h=new Set(M(e,n).map(s=>s.rev_id)),g=o.all(n.rowid).map(s=>({written_as:s.written_as??"",dst:s.id})),v=u.all(n.rowid).map(s=>y.get(s.rev_id)??{rev_id:s.rev_id,number:s.number,parents:p.all(s.rowid).map(O=>O.rev_id),body:B(s.body_hash),body_hash:s.body_hash,author:s.author===null?null:P(e,s.author)?.id??null,rationale:s.rationale,created_at:s.created_at,links:h.has(s.rev_id)?g:[]});if(v.length===0)continue;const R=K(e,n).map(s=>({position:s.position,on:s.on,match:s.match??null,match_frontmatter:s.matchFrontmatter??null,if:s.if??null,deliver:s.deliver})),_={id:n.id,name:n.name,kind:n.kind??"document",privacy:"public",preview:n.preview,summary:m.summary,why_it_exists:m.why_it_exists,unlisted:m.unlisted,lint_ignore:m.lint_ignore,extensions:m.extensions,created_at:n.created_at,deleted_at:n.deleted_at,rules:R,revisions:v};d.set(V(n.id),b(_))}return d}f(ce,"exportRepo");function G(e){return[...e].sort((t,r)=>t.position-r.position).map(t=>({on:t.on,deliver:t.deliver,...t.match!==null&&t.match!==void 0?{match:t.match}:{},...t.match_frontmatter!==null&&t.match_frontmatter!==void 0?{matchFrontmatter:t.match_frontmatter}:{},...t.if!==null&&t.if!==void 0?{if:t.if}:{}}))}f(G,"toRuleSpecs");const Q=f((e,t)=>JSON.stringify(e??null)===JSON.stringify(t??null),"same");function N(e,t){const r={},i=f(l=>!e||!Q(e[l],t[l]),"differs");return i("preview")&&(r.preview=t.preview),i("summary")&&(r.summary=t.summary),i("why_it_exists")&&(r.whyItExists=t.why_it_exists),i("unlisted")&&(r.unlisted=t.unlisted),i("lint_ignore")&&(r.lintIgnore=t.lint_ignore),i("extensions")&&(r.extensions=t.extensions),i("rules")&&(r.rules=G(t.rules)),r}f(N,"changedFields");let U=0;function L(e,t){const r=`repo_sync_import_${++U}`;e.exec(`SAVEPOINT ${r}`);try{const i=t();return e.exec(`RELEASE ${r}`),i}catch(i){throw e.exec(`ROLLBACK TO ${r}`),e.exec(`RELEASE ${r}`),i}}f(L,"atomic");function de(e,t,r,i,l){I(t);const u={created:0,revisions:0,deleted:0,needsMerge:[],refused:[]},p=[];for(const[o,d]of i){if(r.get(o)===d)continue;const n=E(o,d);if(!n.ok){u.refused.push({path:o,reason:n.reason});continue}const m=r.has(o)?E(o,r.get(o)):null;p.push({path:o,prior:m?.ok?m.doc:null,doc:n.doc})}for(const[o,d]of r){if(i.has(o))continue;const n=E(o,d);n.ok&&p.push({path:o,prior:n.doc,doc:null,priorId:n.doc.id})}for(const o of p)for(const d of o.doc?.revisions??[])T(d.body);return L(e,()=>{for(const o of p)try{L(e,()=>X(e,t,o.prior,o.doc,o.priorId??o.doc.id,u,l))}catch(d){u.refused.push({path:o.path,reason:d.message})}}),u}f(de,"importTree");function X(e,t,r,i,l,u,p){const o=C(e,l);if(o&&(o.type!=="document"||o.owner!==t.rowid))throw new Error(`id ${l} is held by ${o.type} ${o.name} outside ${t.name}`);if(!i){o&&!o.deleted_at&&(S(e,null,o,p),u.deleted++);return}const d=e.prepare("SELECT count(*) AS n FROM revisions WHERE document = ?");let n,m=!1,y=0,h=0;if(o){n=o,y=D(e,n).revision;const a=i.kind;(r?r.kind!==a:n.kind!==a)&&Y(e,n,a);const c=N(r,i);Object.keys(c).length>0&&(n=J(e,null,n,c)),i.name!==n.name&&!n.deleted_at&&(n=W(e,null,n,{name:i.name}))}else{const c=i.revisions.filter(w=>w.parents.length===0).sort((w,x)=>w.number-x.number||w.rev_id.localeCompare(x.rev_id))[0];if(!c)throw new Error(`${i.name}: no root revision`);n=F(e,{id:i.id,owner:t,name:i.name,kind:i.kind,preview:i.preview,privacy:"public",...N(null,i),revisions:[{rev_id:c.rev_id,body_hash:c.body_hash,author:null,rationale:c.rationale,created_at:c.created_at}]}),m=!0,h=1}const g=d.get(n.rowid).n,{headCount:v}=H(e,n,i.revisions.map(a=>({rev_id:a.rev_id,parents:a.parents,body_hash:a.body_hash,rationale:a.rationale,created_at:a.created_at})));h+=d.get(n.rowid).n-g,u.revisions+=h;const _=M(e,n)[0],s=new Map(i.revisions.map(a=>[a.rev_id,a]));if(h>0){const a=(s.get(_.rev_id)?.links??[]).map(c=>({written_as:c.written_as,dst:C(e,c.dst)})).filter(c=>c.dst!==null);j(e,n,a)}if(v>1&&u.needsMerge.push(n.id),i.deleted_at&&!n.deleted_at){S(e,null,n,p),u.deleted++;return}if(m){u.created++,$(e,{event:"created",object:n,actor:null,level:4,attrs:{revision:_.number},pointer:_.rev_id},p);return}if(h===0)return;const k=i.revisions.filter(a=>!r?.revisions.some(c=>c.rev_id===a.rev_id)).sort((a,c)=>c.number-a.number||c.created_at.localeCompare(a.created_at))[0]??s.get(_.rev_id);$(e,{event:"edited",object:n,actor:null,level:8,pointer:_.rev_id,attrs:{revision:_.number,from_revision:y,rationale:k?.rationale??null,author:k?.author??null,heads:v,needs_merge:v>1}},p)}f(X,"importOne");export{ce as exportRepo,de as importTree};

package/dist/core/graph/repo-sync/identity.d.ts

@@ -0,0 +1,30 @@
+export type CheckoutIdentity = {
+    ok: true;
+    scheme: 'git';
+    externalId: string;
+    remoteUrl: string;
+    root: string;
+    commonDir: string;
+    handleHint: string;
+} | {
+    ok: true;
+    scheme: 'local-path';
+    externalId: string;
+    root: string;
+    handleHint: string;
+} | {
+    ok: false;
+    code: 'not-a-repo' | 'git-lookup-failed';
+    dir: string;
+    reason: string;
+};
+/** `https://User@GitHub.com:443/Org/Repo.git/` and `git@github.com:org/repo`
+ *  both give `github.com/org/repo`. A local remote (absolute path or
+ *  `file://`) gives `file:<realpath>`, resolved against `base` when relative. */
+export declare function normalizeRemoteUrl(url: string, base?: string): string;
+/** Owner handle a new repo object takes: the last segment of its external id (the normalized remote path, or the folder of a local-path repo), without `.git`. */
+export declare function handleHint(externalId: string): string;
+export declare function identifyCheckout(dir: string): CheckoutIdentity;
+/** Checkouts enclosing `dir`, innermost first; stops at the first directory
+ *  that is not in a repo. A failed lookup ends the chain and is returned last. */
+export declare function checkoutChain(dir: string): CheckoutIdentity[];

package/dist/core/graph/repo-sync/identity.js

@@ -0,0 +1 @@
+var C=Object.defineProperty;var u=(o,e)=>C(o,"name",{value:e,configurable:!0});import{existsSync as O}from"node:fs";import{basename as h,dirname as g,isAbsolute as v,resolve as k}from"node:path";import{gitSync as $}from"../../git.js";import{realpathOrSelf as f}from"../../fs-utils.js";const p=5e3,M=6e4,x=new Map;function b(o,e){const r=o.trim();let t,s;const l=/^([a-z][a-z0-9+.-]*):\/\//i.exec(r);if(l){if(l[1].toLowerCase()==="file")return`file:${w(decodeURIComponent(r.slice(7)),e)}`;const i=r.slice(l[0].length),n=i.indexOf("/"),a=n<0?i:i.slice(0,n);s=n<0?"":i.slice(n),t=a.replace(/^.*@/,"").replace(/:\d*$/,"")}else{const i=/^(?:[^@/]+@)?([^:/]+):(.*)$/.exec(r);if(!i)return`file:${w(r,e)}`;t=i[1],s=i[2]}return s=s.replace(/^\/*~?/,"").replace(/\/+$/,"").replace(/\.git$/i,"").replace(/\/+$/,""),`${t}/${s}`.toLowerCase()}u(b,"normalizeRemoteUrl");function w(o,e){const r=v(o)?o:k(e??process.cwd(),o);return f(r).replace(/\/+$/,"")||"/"}u(w,"localPath");function y(o){const e=o.startsWith("file:")?o.slice(5):o;return h(e).replace(/\.git$/i,"")||"repo"}u(y,"handleHint");function L(o){const e=f(k(o)),r=x.get(e);if(r&&Date.now()-r.at<M)return r.id;if(!O(e))return{ok:!1,code:"not-a-repo",dir:e,reason:"directory does not exist"};const t=$(["rev-parse","--path-format=absolute","--show-toplevel","--git-common-dir"],e,void 0,{timeoutMs:p});if(t.timedOut)return{ok:!1,code:"git-lookup-failed",dir:e,reason:`git lookup timed out after ${p}ms`};if(t.status!==0)return/not a git repository/i.test(t.stderr)?{ok:!1,code:"not-a-repo",dir:e,reason:t.stderr.trim()}:{ok:!1,code:"git-lookup-failed",dir:e,reason:t.stderr.trim()||t.processError||`git rev-parse exited ${t.status}`};const[s,l]=t.stdout.split(/\r?\n/).map(c=>c.trim());if(!s||!l)return{ok:!1,code:"git-lookup-failed",dir:e,reason:"git rev-parse returned no work tree (bare repository?)"};const i=f(s),n=f(l),a=$(["remote","get-url","origin"],i,void 0,{timeoutMs:p});if(a.timedOut)return{ok:!1,code:"git-lookup-failed",dir:e,reason:`git remote lookup timed out after ${p}ms`};let d;const m=a.stdout.trim();if(a.status===0&&m!==""){const c=b(m,i);d={ok:!0,scheme:"git",externalId:c,remoteUrl:m,root:i,commonDir:n,handleHint:y(c)}}else if(/no such remote/i.test(a.stderr)){const c=h(n)===".git"?g(n):n;d={ok:!0,scheme:"local-path",externalId:c,root:i,handleHint:y(c)}}else return{ok:!1,code:"git-lookup-failed",dir:e,reason:a.stderr.trim()||`git remote get-url exited ${a.status}`};return x.set(e,{at:Date.now(),id:d}),d}u(L,"identifyCheckout");function D(o){const e=[];let r=o;for(;;){const t=L(r);if(!t.ok)return t.code==="git-lookup-failed"&&e.push(t),e;e.push(t);const s=g(t.root);if(s===t.root)return e;r=s}}u(D,"checkoutChain");export{D as checkoutChain,y as handleHint,L as identifyCheckout,b as normalizeRemoteUrl};

package/dist/core/graph/repo-sync/index.d.ts

@@ -0,0 +1,4 @@
+/** The import surface of repo sync for other domains. */
+export { startRepoSync, noteNodeWorking, noteNodeBooting, noteRepoDocumentsChanged, syncRepo, FIRST_FETCH_WAIT_MS } from './sync.js';
+export type { SyncOutcome, SyncStep } from './sync.js';
+export type { ImportResult } from './exchange.js';

package/dist/core/graph/repo-sync/index.js

@@ -0,0 +1 @@
+import{startRepoSync as n,noteNodeWorking as t,noteNodeBooting as p,noteRepoDocumentsChanged as r,syncRepo as R,FIRST_FETCH_WAIT_MS as c}from"./sync.js";export{c as FIRST_FETCH_WAIT_MS,p as noteNodeBooting,t as noteNodeWorking,r as noteRepoDocumentsChanged,n as startRepoSync,R as syncRepo};

package/dist/core/graph/repo-sync/mirror.d.ts

@@ -0,0 +1,30 @@
+/** crtr's own bare git repo holding one repo object's `refs/crtr/docs`. Nothing
+ *  here touches a user's checkout: fetch and push address the remote URL directly.
+ *  Local refs: `refs/crtr/docs` (local tip), `refs/crtr/remote-docs` (last fetched),
+ *  `refs/crtr/imported` (tree last imported into canvas.db). */
+export interface Mirror {
+    dir: string;
+}
+export type RemoteResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    reason: string;
+};
+export declare const FIRST_FETCH_MARKER = "first-fetch-done";
+export declare function openMirror(repoObjectId: string): Promise<Mirror>;
+export declare function resolveRef(m: Mirror, ref: string): Promise<string | null>;
+export declare function readTree(m: Mirror, ref: string): Promise<Map<string, string> | null>;
+export declare function commitTree(m: Mirror, files: Map<string, string>, parents: string[], message: string): Promise<string>;
+/** `expectOld` null requires the ref to not exist yet. */
+export declare function setRef(m: Mirror, ref: string, sha: string, expectOld: string | null): Promise<void>;
+export declare function mergeBase(m: Mirror, a: string, b: string): Promise<string | null>;
+export declare function isAncestor(m: Mirror, a: string, b: string): Promise<boolean>;
+export declare function remoteDocsTip(m: Mirror, url: string): Promise<RemoteResult<string | null>>;
+export declare function fetchDocs(m: Mirror, url: string): Promise<RemoteResult<string>>;
+/** Never forced; `--no-verify` so no user hook runs. A non-fast-forward answers `rejected`. */
+export declare function pushDocs(m: Mirror, url: string, sha: string): Promise<RemoteResult<'pushed'> | {
+    ok: false;
+    reason: 'rejected';
+}>;

package/dist/core/graph/repo-sync/mirror.js

@@ -0,0 +1,6 @@
+var k=Object.defineProperty;var i=(t,r)=>k(t,"name",{value:r,configurable:!0});import{spawn as A}from"node:child_process";import{existsSync as R}from"node:fs";import{mkdir as F,mkdtemp as S,rm as N,writeFile as _}from"node:fs/promises";import{join as x}from"node:path";import{gitAsync as $}from"../../git.js";import{crtrHome as G}from"../../canvas/paths.js";const g=6e4,j="first-fetch-done",T={...process.env,GIT_TERMINAL_PROMPT:"0",GIT_AUTHOR_NAME:"crtr",GIT_AUTHOR_EMAIL:"crtr@localhost",GIT_COMMITTER_NAME:"crtr",GIT_COMMITTER_EMAIL:"crtr@localhost"};function u(t,r,s,e={}){return $(["--git-dir",t.dir,...r],void 0,s,{env:e.env??T,timeoutMs:e.timeoutMs})}i(u,"git");function f(t,r){return new Error(`git ${t} failed (${r.timedOut?"timed out":`exit ${r.status}`}): ${r.stderr.trim()}`)}i(f,"fail");function y(t){return t.timedOut?"timed out":t.stderr.trim()||`exit ${t.status}`}i(y,"reason");async function K(t){const r=x(G(),"repo-sync",t),s={dir:r};if(!R(x(r,"HEAD"))){await F(r,{recursive:!0});const e=await $(["init","--bare","--quiet",r],void 0,void 0,{env:T});if(e.status!==0)throw f("init",e)}return s}i(K,"openMirror");async function v(t,r){const s=await u(t,["rev-parse","--verify","--quiet",`${r}^{commit}`]);if(s.status===0)return s.stdout.trim();if(s.status===1&&!s.executionFailed)return null;throw f("rev-parse",s)}i(v,"resolveRef");function D(t,r){return new Promise((s,e)=>{const o=A("git",["--git-dir",t.dir,"cat-file","--batch"],{env:{...T,GIT_OPTIONAL_LOCKS:"0"}}),d=[];let a="";o.stdout.on("data",n=>d.push(n)),o.stderr.on("data",n=>a+=n.toString()),o.on("error",e),o.on("close",n=>{if(n!==0)return e(new Error(`git cat-file failed (exit ${n}): ${a.trim()}`));const l=Buffer.concat(d),p=[];let w=0;for(const h of r){const b=l.indexOf(10,w),c=l.subarray(w,b).toString(),[m,I,O]=c.split(" ");if(m!==h||I!=="blob")return e(new Error(`git cat-file: unexpected header "${c}" for ${h}`));const M=b+1,E=M+Number(O);p.push(l.subarray(M,E)),w=E+1}s(p)}),o.stdin.end(r.map(n=>`${n}
+`).join(""))})}i(D,"catFileBatch");async function U(t,r){const s=await v(t,r);if(s===null)return null;const e=await u(t,["ls-tree","-r","-z",s]);if(e.status!==0)throw f("ls-tree",e);const o=e.stdout.split("\0").filter(Boolean).map(a=>{const n=a.indexOf("	"),[,l,p]=a.slice(0,n).split(" ");if(l!=="blob")throw new Error(`repo-sync mirror: ${a.slice(n+1)} is a ${l}, not a file`);return{path:a.slice(n+1),blob:p}}),d=o.length===0?[]:await D(t,o.map(a=>a.blob));return new Map(o.map((a,n)=>[a.path,d[n].toString("utf8")]))}i(U,"readTree");async function W(t,r,s,e){const o=await S(x(t.dir,"commit-"));try{const d=[...r.keys()].sort(),a=d.map((c,m)=>x(o,`blob-${m}`));await Promise.all(d.map((c,m)=>_(a[m],r.get(c),"utf8")));let n=[];if(d.length>0){const c=await u(t,["hash-object","-w","--stdin-paths"],a.map(m=>`${m}
+`).join(""));if(c.status!==0)throw f("hash-object",c);n=c.stdout.trim().split(`
+`)}const l={...T,GIT_INDEX_FILE:x(o,"index")},p=d.map((c,m)=>`100644 ${n[m]}	${c}\0`).join(""),w=await u(t,["update-index","-z","--index-info"],p,{env:l});if(w.status!==0)throw f("update-index",w);const h=await u(t,["write-tree"],void 0,{env:l});if(h.status!==0)throw f("write-tree",h);const b=await u(t,["commit-tree",h.stdout.trim(),...s.flatMap(c=>["-p",c]),"-m",e]);if(b.status!==0)throw f("commit-tree",b);return b.stdout.trim()}finally{await N(o,{recursive:!0,force:!0})}}i(W,"commitTree");async function V(t,r,s,e){const o=await u(t,["update-ref",r,s,e??"0".repeat(40)]);if(o.status!==0)throw f("update-ref",o)}i(V,"setRef");async function X(t,r,s){const e=await u(t,["merge-base",r,s]);if(e.status===0)return e.stdout.trim();if(e.status===1&&!e.executionFailed)return null;throw f("merge-base",e)}i(X,"mergeBase");async function J(t,r,s){const e=await u(t,["merge-base","--is-ancestor",r,s]);if(e.status===0)return!0;if(e.status===1&&!e.executionFailed)return!1;throw f("merge-base --is-ancestor",e)}i(J,"isAncestor");async function Q(t,r){const s=await u(t,["ls-remote",r,"refs/crtr/docs"],void 0,{timeoutMs:g});if(s.status!==0)return{ok:!1,reason:y(s)};const e=s.stdout.split(`
+`).find(o=>o.endsWith("	refs/crtr/docs"));return{ok:!0,value:e?e.split("	")[0]:null}}i(Q,"remoteDocsTip");async function Y(t,r){const s=await u(t,["fetch","--no-tags","--quiet",r,"+refs/crtr/docs:refs/crtr/remote-docs"],void 0,{timeoutMs:g});if(s.status!==0)return{ok:!1,reason:y(s)};const e=await v(t,"refs/crtr/remote-docs");return e===null?{ok:!1,reason:"fetch succeeded but refs/crtr/remote-docs is missing"}:(await _(x(t.dir,j),`${new Date().toISOString()}
+`),{ok:!0,value:e})}i(Y,"fetchDocs");async function Z(t,r,s){const e=await u(t,["push","--no-verify","--porcelain",r,`${s}:refs/crtr/docs`],void 0,{timeoutMs:g});return e.status===0?{ok:!0,value:"pushed"}:/\[rejected\]|non-fast-forward|fetch first/.test(e.stdout+e.stderr)?{ok:!1,reason:"rejected"}:{ok:!1,reason:y(e)}}i(Z,"pushDocs");export{j as FIRST_FETCH_MARKER,W as commitTree,Y as fetchDocs,J as isAncestor,X as mergeBase,K as openMirror,Z as pushDocs,U as readTree,Q as remoteDocsTip,v as resolveRef,V as setRef};

package/dist/core/graph/repo-sync/ref-format.d.ts

@@ -0,0 +1,76 @@
+import type { RuleOn } from '../types.js';
+export interface RefRule {
+    position: number;
+    on: RuleOn;
+    match: unknown;
+    match_frontmatter: unknown;
+    if: unknown;
+    deliver: 'name' | 'preview' | 'content';
+}
+export interface RefRevision {
+    rev_id: string;
+    number: number;
+    parents: string[];
+    body: string;
+    body_hash: string;
+    /** Object id of the author on the runtime that wrote it; null when unknown. */
+    author: string | null;
+    rationale: string | null;
+    created_at: string;
+    links: Array<{
+        written_as: string;
+        dst: string;
+    }>;
+}
+export interface RefDocument {
+    id: string;
+    name: string;
+    kind: string;
+    privacy: 'public';
+    preview: string;
+    summary: string | null;
+    why_it_exists: string | null;
+    unlisted: boolean;
+    lint_ignore: unknown;
+    extensions: unknown;
+    created_at: string;
+    deleted_at: string | null;
+    rules: RefRule[];
+    revisions: RefRevision[];
+}
+export declare const docPath: (id: string) => string;
+/** Every field merged three-way: all but id, created_at and revisions. */
+export declare const RECORD_FIELDS: readonly ["name", "kind", "privacy", "preview", "summary", "why_it_exists", "unlisted", "lint_ignore", "extensions", "deleted_at", "rules"];
+export declare function sha256(body: string): string;
+export declare function serializeDoc(doc: RefDocument): string;
+/** Parse one ref file. Refuses anything not public, a body whose hash disagrees, or an id that is not the file name. */
+export declare function parseDoc(path: string, text: string): {
+    ok: true;
+    doc: RefDocument;
+} | {
+    ok: false;
+    reason: string;
+};
+/**
+ * Merge one document. Revisions: union by rev_id (first copy kept verbatim). Fields: three-way
+ * against base, remote wins when both changed. A side missing the file while base had it deleted
+ * it: the result is marked deleted (at `now`) and keeps every revision.
+ */
+export declare function mergeDoc(base: RefDocument | null, local: RefDocument | null, remote: RefDocument | null, now?: string): RefDocument | null;
+/**
+ * Merge three trees (path → file text). Per path mergeDoc; then two live documents with one name:
+ * the one already on the remote under that name keeps it, the other becomes `<name>-<id first 8>`.
+ * A file that fails to parse is refused; it stays in the tree only as the local side's text.
+ */
+export declare function mergeTrees(base: Map<string, string>, local: Map<string, string>, remote: Map<string, string>, now?: string): {
+    tree: Map<string, string>;
+    renamed: Array<{
+        id: string;
+        from: string;
+        to: string;
+    }>;
+    refused: Array<{
+        path: string;
+        reason: string;
+    }>;
+};

package/dist/core/graph/repo-sync/ref-format.js

@@ -0,0 +1,2 @@
+var $=Object.defineProperty;var a=(n,r)=>$(n,"name",{value:r,configurable:!0});import{createHash as O}from"node:crypto";const D=a(n=>`docs/${n}.json`,"docPath"),N=["name","kind","privacy","preview","summary","why_it_exists","unlisted","lint_ignore","extensions","deleted_at","rules"];function R(n){return O("sha256").update(n,"utf8").digest("hex")}a(R,"sha256");function h(n){if(Array.isArray(n))return n.map(h);if(n&&typeof n=="object"){const r={};for(const o of Object.keys(n).sort())r[o]=h(n[o]);return r}return n}a(h,"sortKeys");const v=a(n=>JSON.stringify(h(n??null)),"stable");function S(n,r){return n.number-r.number||(n.rev_id<r.rev_id?-1:n.rev_id>r.rev_id?1:0)}a(S,"byRevision");function j(n){const r={...n,rules:[...n.rules].sort((o,t)=>o.position-t.position),revisions:[...n.revisions].map(o=>({...o,parents:[...o.parents].sort()})).sort(S)};return`${JSON.stringify(h(r),null,2)}
+`}a(j,"serializeDoc");const E=new Set(["boot","workspace-open","file-read","document-read","command","pre-command","slash-command"]),I=new Set(["name","preview","content"]),p=a(n=>typeof n=="string","isStr"),g=a(n=>n===null||typeof n=="string","isStrOrNull");function x(n,r){let o;try{o=JSON.parse(r)}catch(e){return{ok:!1,reason:`not JSON: ${e.message}`}}if(!o||typeof o!="object"||Array.isArray(o))return{ok:!1,reason:"not an object"};const t=o;if(t.privacy!=="public")return{ok:!1,reason:`privacy is ${String(t.privacy)}; a repo holds only public documents`};if(!p(t.id)||D(t.id)!==n)return{ok:!1,reason:`id ${String(t.id)} does not match file ${n}`};for(const e of["name","kind","preview","created_at"])if(!p(t[e]))return{ok:!1,reason:`${e} is not a string`};for(const e of["summary","why_it_exists","deleted_at"])if(!g(t[e]))return{ok:!1,reason:`${e} is not a string or null`};if(typeof t.unlisted!="boolean")return{ok:!1,reason:"unlisted is not a boolean"};if(!Array.isArray(t.rules))return{ok:!1,reason:"rules is not an array"};for(const e of t.rules)if(!e||typeof e.position!="number"||!E.has(e.on)||!I.has(e.deliver))return{ok:!1,reason:"malformed rule"};if(!Array.isArray(t.revisions)||t.revisions.length===0)return{ok:!1,reason:"no revisions"};const d=new Set;for(const e of t.revisions){if(!e||!p(e.rev_id)||typeof e.number!="number"||!p(e.body)||!p(e.body_hash)||!p(e.created_at)||!g(e.author)||!g(e.rationale)||!Array.isArray(e.parents)||!e.parents.every(p)||!Array.isArray(e.links))return{ok:!1,reason:"malformed revision"};if(d.has(e.rev_id))return{ok:!1,reason:`revision ${e.rev_id} appears twice`};if(d.add(e.rev_id),R(e.body)!==e.body_hash)return{ok:!1,reason:`revision ${e.rev_id} body does not match body_hash`}}return{ok:!0,doc:t}}a(x,"parseDoc");function A(...n){const r=new Map;for(const o of n)for(const t of o?.revisions??[])r.has(t.rev_id)||r.set(t.rev_id,t);return[...r.values()].sort(S)}a(A,"unionRevisions");function M(n,r,o,t=new Date().toISOString()){if(!r&&!o)return null;if(!r||!o){const e=r??o;return n?{...e,deleted_at:e.deleted_at??t,revisions:A(o,r,n)}:e}const d={...o,revisions:A(o,r,n)};for(const e of N){const u=v(r[e]),m=v(o[e]);if(u===m)continue;(n?v(n[e]):void 0)===m&&(d[e]=r[e])}return d}a(M,"mergeDoc");function L(n,r,o,t=new Date().toISOString()){const d=new Map,e=[],u=new Map,m=[...new Set([...n.keys(),...r.keys(),...o.keys()])].sort();for(const i of m){const s=[];let l=null;for(const c of[n,r,o]){const y=c.get(i);if(y===void 0){s.push(null);continue}const k=x(i,y);k.ok?s.push(k.doc):(l??=k.reason,s.push(null))}if(l!==null){e.push({path:i,reason:l});const c=r.get(i);c!==void 0&&d.set(i,c);continue}const f=M(s[0],s[1],s[2],t);f&&u.set(i,f)}const b=a(i=>{const s=o.get(i);if(s===void 0)return null;const l=x(i,s);return l.ok&&l.doc.deleted_at===null?l.doc.name:null},"remoteNameOf"),_=new Map;for(const[i,s]of u)s.deleted_at===null&&_.set(s.name,[..._.get(s.name)??[],i]);const w=[];for(const[i,s]of _){if(s.length<2)continue;const l=s.find(f=>b(f)===i)??[...s].sort((f,c)=>u.get(f).id.localeCompare(u.get(c).id))[0];for(const f of s){if(f===l)continue;const c=u.get(f),y=`${i}-${c.id.slice(0,8)}`;u.set(f,{...c,name:y}),w.push({id:c.id,from:i,to:y})}}for(const[i,s]of u)d.set(i,j(s));return{tree:new Map([...d].sort(([i],[s])=>i.localeCompare(s))),renamed:w,refused:e}}a(L,"mergeTrees");export{N as RECORD_FIELDS,D as docPath,M as mergeDoc,L as mergeTrees,x as parseDoc,j as serializeDoc,R as sha256};

package/dist/core/graph/repo-sync/repos.d.ts

@@ -0,0 +1,17 @@
+/** Repo objects on the canvas: one per repo identity, handle chosen once. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { ObjectRow } from '../types.js';
+import { handleHint } from './identity.js';
+export { handleHint };
+export interface RepoIdentity {
+    scheme: 'git' | 'local-path';
+    externalId: string;
+    handleHint: string;
+}
+/** The repo object for an identity, created on first sight. A handle already
+ *  held by another repo gets `-2`, `-3`, … appended. */
+export declare function ensureRepo(db: DatabaseSync, id: RepoIdentity, handle?: string): ObjectRow;
+/** Repos enclosing `cwd`, nearest first: every enclosing git checkout (created
+ *  on first sight) and every existing local-path repo whose path is `cwd` or
+ *  an ancestor of it. A non-git folder is never created here. */
+export declare function reposForCwd(db: DatabaseSync, cwd: string): ObjectRow[];

package/dist/core/graph/repo-sync/repos.js

@@ -0,0 +1,3 @@
+var f=Object.defineProperty;var a=(t,o)=>f(t,"name",{value:o,configurable:!0});import{resolve as h,sep as c}from"node:path";import{CrtrError as l}from"../../errors.js";import{realpathOrSelf as d}from"../../fs-utils.js";import{ExitCode as m}from"../../../types.js";import{ensureOwner as u}from"../objects.js";import{checkoutChain as E,handleHint as w}from"./identity.js";function x(t,o,n){return t.prepare(`SELECT o.* FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE o.type = 'repo' AND i.scheme = ? AND i.external_id = ?`).get(o,n)??null}a(x,"existingRepo");function N(t,o,n){const r=x(t,o.scheme,o.externalId);if(r)return r;const p=n??o.handleHint,s=t.prepare("SELECT 1 FROM objects WHERE name = ? AND type = 'repo'");let e=p;for(let i=2;s.get(e);i++)e=`${p}-${i}`;return u(t,"repo",o.scheme,o.externalId,e)}a(N,"ensureRepo");function H(t,o){const n=d(h(o)),r=[];for(const e of E(n)){if(!e.ok)throw new l("git-lookup-failed",`cannot identify the repo at ${e.dir}: ${e.reason}`,m.GENERAL,{dir:e.dir});r.push({root:e.root,repo:N(t,e)})}const p=t.prepare(`SELECT o.*, i.external_id AS path FROM identities i JOIN objects o ON o.rowid = i.object
+    WHERE o.type = 'repo' AND i.scheme = 'local-path'`).all();for(const{path:e,...i}of p)(n===e||n.startsWith(e.endsWith(c)?e:e+c))&&r.push({root:e,repo:i});r.sort((e,i)=>i.root.length-e.root.length);const s=new Set;return r.filter(({repo:e})=>!s.has(e.rowid)&&(s.add(e.rowid),!0)).map(({repo:e})=>e)}a(H,"reposForCwd");export{N as ensureRepo,w as handleHint,H as reposForCwd};

package/dist/core/graph/repo-sync/sync.d.ts

@@ -0,0 +1,42 @@
+/** The repo-sync engine in crtrd: per repo at most one sync running and one queued. No timer and
+ *  no retry loop — the next trigger is the retry. A failed sync keeps the local mirror commit and
+ *  every canvas.db revision; the next run sends them. Every outcome is written as an event. */
+import type { DatabaseSync } from 'node:sqlite';
+import type { DetachedWorkLifecycle } from '../../../daemon/reconcilers/broker-supervision.js';
+import type { ObjectRow } from '../types.js';
+import { type ImportResult } from './exchange.js';
+export declare const FIRST_FETCH_WAIT_MS = 20000;
+export type SyncStep = 'export' | 'fetch' | 'merge' | 'import' | 'push';
+export type SyncOutcome = {
+    ok: true;
+    pushed: boolean;
+    imported: ImportResult;
+} | {
+    ok: false;
+    step: SyncStep;
+    reason: string;
+};
+/** Called once by crtrd. Until then triggers are refused loudly. */
+export declare function startRepoSync(lifecycle: DetachedWorkLifecycle, db: () => DatabaseSync): void;
+/**
+ * A node starts working in `cwd`, enclosed by `repos`. For each syncing repo: when no fetch has
+ * ever succeeded on this machine and none was attempted in this daemon's lifetime, wait for its
+ * sync, at most FIRST_FETCH_WAIT_MS; otherwise schedule it and return at once.
+ */
+export declare function noteNodeWorking(repos: ObjectRow[], cwd: string): Promise<void>;
+/**
+ * A node's boot delivery is about to render: it starts working in the repos enclosing its cwd.
+ * Sync them first (the first on this machine waits for the first fetch, bounded), so what the
+ * repo's collaborators wrote is on the canvas before its bearings. Never throws: a failed sync
+ * never fails a boot, and every failure is an event.
+ */
+export declare function noteNodeBooting(nodeId: string): Promise<void>;
+/** A repo-owned document changed (write, edit, move at either end, delete). `cwd`, when the caller
+ *  has one inside a checkout, records the fetch URL. */
+export declare function noteRepoDocumentsChanged(repo: ObjectRow, cwd?: string): void;
+/**
+ * One sync: export canvas.db to a local commit, fetch the remote ref, fast-forward or merge,
+ * import the merged tree into canvas.db, push (never forced). A rejected push fetches again,
+ * at most PUSH_ATTEMPTS times.
+ */
+export declare function syncRepo(repo: ObjectRow): Promise<SyncOutcome>;