@north-light/crouter 0.3.354 → 0.3.356

package/dist/daemon/reconcilers/delivery-lane.js

@@ -1 +1 @@
-var p=Object.defineProperty;var s=(e,r)=>p(e,"name",{value:r,configurable:!0});import{randomUUID as h}from"node:crypto";import{rmSync as g}from"node:fs";import{claimExternalActionDelivery as y,dueExternalActionDeliveries as I,messageBodyForDelivery as v,settleDelivery as a}from"../../core/canvas/deliveries.js";import{getNode as w}from"../../core/canvas/canvas.js";import{emitEvent as c}from"../../core/events/emit.js";import{operationIdContext as u}from"../../core/events/operation-id.js";import{createPageRequest as _,getRequest as f}from"../../core/human/requests.js";import{synthesizedPageDocument as D,writeSynthesizedPage as k}from"../../core/human/page-synth.js";import{preparePage as $}from"../../core/human/page-authoring.js";import{resolvePageComponents as q}from"../../core/config.js";import{spawnChild as E}from"../../core/runtime/spawn.js";import{runDelivery as x}from"../delivery/run-delivery.js";const m=h();function N(e){if(e.adapter===null||typeof e.adapter.adapter!="string")throw new Error(`delivery ${e.deliveryId} has no adapter`);return e.adapter}s(N,"adapterFor");function d(e,r,t){a(e.deliveryId,e.attempts,r,{state:"permanent_failed",failure:{kind:"spawn_error",message:t}},Date.now())}s(d,"failed");async function P(e,r,t){const n=w(t.nodeId);if(n!==null){if(n.frozen_at!==null||n.pi_session_id!==null||n.status==="idle"||n.status==="done"||n.status==="canceled"){a(e.deliveryId,e.attempts,r,{state:"acknowledged"},Date.now());return}d(e,r,n.status==="dead"?`cron spawn ${t.nodeId} recorded a failed birth`:`cron spawn ${t.nodeId} found an incomplete birth`);return}try{await E({nodeId:t.nodeId,kind:t.kind,cwd:t.cwd,prompt:t.prompt,...t.root?{root:!0,rootLifecycle:t.rootLifecycle}:{parent:t.parent},readiness:"launch",profile:t.profile,wakeOrigin:t.wakeOrigin}),a(e.deliveryId,e.attempts,r,{state:"acknowledged"},Date.now())}catch(o){d(e,r,`cron spawn ${t.nodeId} failed: ${o instanceof Error?o.message:String(o)}`),u.fresh(()=>c({level:"error",event:"delivery.cron_spawn_failed",node_id:t.nodeId,error:o,fields:{delivery_id:e.deliveryId}}))}}s(P,"deliverSpawn");function b(e,r){const t=k(D(e.title,e.summary,r,!1));try{return $({sourceFile:t.path,source:{sessionName:e.sessionName,...e.profileName===null?{}:{profileName:e.profileName}},productKinds:q(),delivery:{placement:"inline",inbox:!0,reply:!1}})}finally{g(t.dir,{recursive:!0,force:!0})}}s(b,"preparedCronPage");function z(e,r,t,n){if(f(t.requestId)!==null){a(e.deliveryId,e.attempts,r,{state:"acknowledged"},Date.now());return}const o=typeof n?.stdout=="string"?n.stdout:null;if(o===null){d(e,r,`cron human ${t.requestId} has no frozen stdout`);return}try{_({request_id:t.requestId,prepared:b(t,o)}),a(e.deliveryId,e.attempts,r,{state:"acknowledged"},Date.now())}catch(i){d(e,r,`cron human ${t.requestId} failed: ${i instanceof Error?i.message:String(i)}`)}}s(z,"deliverHuman");async function S(e,r){const t=N(e),n=v(e.deliveryId);if(n===null){d(e,r,`delivery ${e.deliveryId} has no message body`);return}if(t.adapter==="subprocess"){let o=t.node_id;if(o===void 0){const i=e.idempotencyKey;if(i?.startsWith("node-outcome:"))o=i.slice(13);else if(i?.startsWith("human-action:")){const l=f(i.slice(13));if(!l)throw new Error(`delivery ${e.deliveryId} has no originating human request`);o=l.requester_node_id}else throw new Error(`delivery ${e.deliveryId} has no originating app`)}await x({argv:t.argv,cwd:t.cwd,document:n,attempt:e.attempts,nodeId:o,...t.app?{app:t.app}:{}},i=>{a(e.deliveryId,e.attempts,r,i,Date.now())});return}if(t.adapter==="cron_spawn"){await P(e,r,t);return}z(e,r,t,n)}s(S,"deliverExternal");class J{static{s(this,"DeliveryLaneReconciler")}run(r,t){if(!t.lifecycle.acceptsDetachedWork())return;let n;try{n=I(r)}catch(o){u.fresh(()=>c({level:"error",event:"delivery.scan_failed",error:o}));return}for(const o of n)try{const i=y(o.deliveryId,r,m);if(i===null)continue;t.lifecycle.registerDetached(S(i,m).catch(l=>{u.fresh(()=>c({level:"error",event:"delivery.failed",error:l,fields:{delivery_id:i.deliveryId}}))}))}catch(i){u.fresh(()=>c({level:"error",event:"delivery.claim_failed",error:i,fields:{delivery_id:o.deliveryId}}))}}}export{J as DeliveryLaneReconciler,m as deliveryDaemonInstanceId};
+var m=Object.defineProperty;var o=(e,t)=>m(e,"name",{value:t,configurable:!0});import{randomUUID as v}from"node:crypto";import{claimExternalActionDelivery as y,dueExternalActionDeliveries as u,messageBodyForDelivery as h,settleDelivery as c}from"../../core/canvas/deliveries.js";import{emitEvent as d}from"../../core/events/emit.js";import{operationIdContext as l}from"../../core/events/operation-id.js";import{runDelivery as I}from"../delivery/run-delivery.js";const s=v();function p(e,t,r){c(e.deliveryId,e.attempts,t,{state:"permanent_failed",failure:{kind:"spawn_error",message:r}},Date.now())}o(p,"failed");async function D(e,t){const r=e.adapter;if(r===null||r.adapter!=="subprocess"){p(e,t,`delivery ${e.deliveryId} has no subprocess adapter`);return}const n=h(e.deliveryId);if(n===null){p(e,t,`delivery ${e.deliveryId} has no message body`);return}let a=r.node_id;if(a===void 0){const i=e.idempotencyKey;if(!i?.startsWith("node-outcome:"))throw new Error(`delivery ${e.deliveryId} has no originating app`);a=i.slice(13)}await I({argv:r.argv,cwd:r.cwd,document:n,attempt:e.attempts,nodeId:a,...r.app?{app:r.app}:{}},i=>{c(e.deliveryId,e.attempts,t,i,Date.now())})}o(D,"deliverExternal");class k{static{o(this,"DeliveryLaneReconciler")}run(t,r){if(!r.lifecycle.acceptsDetachedWork())return;let n;try{n=u(t)}catch(a){l.fresh(()=>d({level:"error",event:"delivery.scan_failed",error:a}));return}for(const a of n)try{const i=y(a.deliveryId,t,s);if(i===null)continue;r.lifecycle.registerDetached(D(i,s).catch(f=>{l.fresh(()=>d({level:"error",event:"delivery.failed",error:f,fields:{delivery_id:i.deliveryId}}))}))}catch(i){l.fresh(()=>d({level:"error",event:"delivery.claim_failed",error:i,fields:{delivery_id:a.deliveryId}}))}}}export{k as DeliveryLaneReconciler,s as deliveryDaemonInstanceId};

package/dist/shared/inbox-entry-body.js

@@ -1,10 +1,10 @@
-var p=Object.defineProperty;var i=(e,t)=>p(e,"name",{value:t,configurable:!0});import{formatInboxRefInstruction as $}from"./generated-context.js";const l=12,f=1e3,j=1e3;function k(e){return(e===void 0?null:/^([a-z0-9-]+)\/reports\/[^/]+$/.exec(e))?.[1]}i(k,"reportRefNodeId");function h(e){let t=e,r=!1;const o=t.split(`
-`);return o.length>l&&(t=o.slice(0,l).join(`
-`),r=!0),t.length>f&&(t=t.slice(0,f),r=!0),{text:t.trimEnd(),clipped:r}}i(h,"clipBody");function y(e){const t=typeof e.data?.body=="string"?String(e.data.body).trim():"";return t===""||t===e.label?"":t}i(y,"inlineBody");function x(e){const t=e.data?.push;return typeof t=="object"&&t!==null&&typeof t.event=="string"?t:null}i(x,"pushOf");function v(e){return e.type==="document"?`[[${e.owner===null?e.name:`${e.owner}/${e.name}`}]]`:e.type==="job"?`job ${e.id} (\`${e.name}\`)`:e.type==="node"?`node ${e.name} (${e.id})`:`${e.type} ${e.name}`}i(v,"objectText");function _(e,t){return t.actor===null?"the runtime":e.from_name===void 0||e.from_name===t.actor?t.actor:`${e.from_name} (${t.actor})`}i(_,"actorText");function u(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):[]}i(u,"list");function R(e,t){const r=v(t.object),o=_(e,t),n=t.attrs,a=t.object.type==="document"?` Read it with \`crtr canvas read ${t.object.owner===null?t.object.name:`${t.object.owner}/${t.object.name}`}\`.`:"";switch(t.event){case"created":return t.object.type==="node"?`${o} created ${r}${typeof n.kind=="string"?`, kind ${n.kind}`:""}.`:`${o} created ${r}.${a}`;case"read":return`${o} read ${r}.`;case"watched":return`${o} started watching ${r}.`;case"deleted":return`${o} deleted ${r}.`;case"edited":{const c=u(n.authors),d=u(n.rationales),s=typeof n.from_revision=="number"&&typeof n.revision=="number"&&n.revision-n.from_revision>1?`revisions ${n.from_revision+1}\u2013${n.revision}`:typeof n.revision=="number"?`revision ${n.revision}`:"a new revision",m=c.length===0?o:c.join(", "),b=d.length===0?"":` Rationale: ${d.join("; ")}.`,g=n.needs_merge===!0?" Two edits were made from the same revision; read it and edit it to merge them.":"",w=` You get this because you read or wrote it; if it no longer concerns your work, stop with \`crtr canvas unwatch ${t.object.owner===null?t.object.name:`${t.object.owner}/${t.object.name}`}\`.`;return`${m} edited ${r} (${s}).${b}${g}${a}${w}`}case"messaged":return`${o} messaged ${r}.`;case"sent":return`${o} sent a message as ${r}.`;case"configured":return`${o} changed the settings of ${r}${typeof n.changed=="string"?`: ${n.changed}`:""}.`;case"exited":return`${r[0].toUpperCase()}${r.slice(1)} exited with code ${String(n["exit-code"])}. Log: ${String(n["log-path"])}`;case"killed":{const c=t.actor===null?"":` by ${o}`,d=typeof n.reason=="string"?` (${n.reason})`:"",s=n.reason==="deadline"?` It was canceled at its deadline; claim it with \`crtr node bash extend ${t.object.id} --for <duration>\` next time.`:"";return`${r[0].toUpperCase()}${r.slice(1)} was killed${c}${d}.${s} Log: ${String(n["log-path"])}`}default:return e.label}}i(R,"renderPush");function E(e,t){if(t!==null&&t.length<j&&e.ref!==void 0)return`${t.trimEnd()}
+var w=Object.defineProperty;var i=(e,t)=>w(e,"name",{value:t,configurable:!0});import{formatInboxRefInstruction as u}from"./generated-context.js";const f=12,l=1e3,y=1e3;function k(e){return(e===void 0?null:/^([a-z0-9-]+)\/reports\/[^/]+$/.exec(e))?.[1]}i(k,"reportRefNodeId");function x(e){let t=e,r=!1;const o=t.split(`
+`);return o.length>f&&(t=o.slice(0,f).join(`
+`),r=!0),t.length>l&&(t=t.slice(0,l),r=!0),{text:t.trimEnd(),clipped:r}}i(x,"clipBody");function j(e){const t=typeof e.data?.body=="string"?String(e.data.body).trim():"";return t===""||t===e.label?"":t}i(j,"inlineBody");function v(e){const t=e.data?.push;return typeof t=="object"&&t!==null&&typeof t.event=="string"?t:null}i(v,"pushOf");function $(e){const t=e.owner_handle??e.owner;return t==null?e.name:`${t}/${e.name}`}i($,"objectRef");function _(e){return e.type==="document"?`[[${$(e)}]]`:e.type==="job"?`job ${e.id} (\`${e.name}\`)`:e.type==="node"?`node ${e.name} (${e.id})`:`${e.type} ${e.name}`}i(_,"objectText");function R(e,t){return t.actor===null?"the runtime":e.from_name===void 0||e.from_name===t.actor?t.actor:`${e.from_name} (${t.actor})`}i(R,"actorText");function m(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):[]}i(m,"list");function A(e,t){const r=_(t.object),o=R(e,t),n=t.attrs,a=t.object.type==="document"?` Read it with \`crtr canvas read ${$(t.object)}\`.`:"";switch(t.event){case"created":return t.object.type==="node"?`${o} created ${r}${typeof n.kind=="string"?`, kind ${n.kind}`:""}.`:`${o} created ${r}.${a}`;case"read":return`${o} read ${r}.`;case"watched":return`${o} started watching ${r}.`;case"deleted":return`${o} deleted ${r}.`;case"edited":{const c=m(n.authors),s=m(n.rationales),d=typeof n.from_revision=="number"&&typeof n.revision=="number"&&n.revision-n.from_revision>1?`revisions ${n.from_revision+1}\u2013${n.revision}`:typeof n.revision=="number"?`revision ${n.revision}`:"a new revision",g=c.length===0?o:c.join(", "),b=s.length===0?"":` Rationale: ${s.join("; ")}.`,p=n.needs_merge===!0?" Two edits were made from the same revision; read it and edit it to merge them.":"",h=` You get this because you read or wrote it; if it no longer concerns your work, stop with \`crtr canvas unwatch ${$(t.object)}\`.`;return`${g} edited ${r} (${d}).${b}${p}${a}${h}`}case"messaged":return`${o} messaged ${r}.`;case"sent":return`${o} sent a message as ${r}.`;case"configured":return`${o} changed the settings of ${r}${typeof n.changed=="string"?`: ${n.changed}`:""}.`;case"exited":return`${r[0].toUpperCase()}${r.slice(1)} exited with code ${String(n["exit-code"])}. Log: ${String(n["log-path"])}`;case"killed":{const c=t.actor===null?"":` by ${o}`,s=typeof n.reason=="string"?` (${n.reason})`:"",d=n.reason==="deadline"?` It was canceled at its deadline; claim it with \`crtr node bash extend ${t.object.id} --for <duration>\` next time.`:"";return`${r[0].toUpperCase()}${r.slice(1)} was killed${c}${s}.${d} Log: ${String(n["log-path"])}`}default:return e.label}}i(A,"renderPush");function E(e,t){if(t!==null&&t.length<y&&e.ref!==void 0)return`${t.trimEnd()}
 
-${$(e.ref)}`;const r=y(e);if(r===""){const a=x(e);return a!==null&&e.ref===void 0?R(e,a):e.ref===void 0?e.label:`${e.label}
+${u(e.ref)}`;const r=j(e);if(r===""){const a=v(e);return a!==null&&e.ref===void 0?A(e,a):e.ref===void 0?e.label:`${e.label}
 
-${$(e.ref)}`}const{text:o,clipped:n}=h(r);return e.ref!==void 0?`${o}
+${u(e.ref)}`}const{text:o,clipped:n}=x(r);return e.ref!==void 0?`${o}
 
-${$(e.ref)}`:n?`${o}
-\u2026 (body clipped)`:o}i(E,"renderEntryBody");export{j as INLINE_REPORT_MAX_CHARS,h as clipBody,y as inlineBody,E as renderEntryBody,k as reportRefNodeId};
+${u(e.ref)}`:n?`${o}
+\u2026 (body clipped)`:o}i(E,"renderEntryBody");export{y as INLINE_REPORT_MAX_CHARS,x as clipBody,j as inlineBody,E as renderEntryBody,k as reportRefNodeId};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.354",
+  "version": "0.3.356",
   "description": "crtr — agent runtime with memory, plugins, and marketplaces",
   "type": "module",
   "main": "dist/index.js",
@@ -131,7 +131,7 @@
     "@earendil-works/pi-ai": "0.87.1",
     "@earendil-works/pi-coding-agent": "0.87.1",
     "@earendil-works/pi-tui": "0.87.1",
-    "@north-light/crouter-identity": "^0.3.354",
+    "@north-light/crouter-identity": "^0.3.356",
     "cron-parser": "^5.6.0",
     "esbuild": "^0.27.7",
     "jose": "^6.2.12",

package/packages/crouter-identity/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@north-light/crouter-identity",
-  "version": "0.3.354",
+  "version": "0.3.356",
   "description": "Northlight access-token verification and scope rules",
   "type": "module",
   "main": "./dist/index.js",

package/runtime.lock.json

@@ -1,12 +1,12 @@
 {
   "name": "@north-light/crouter",
-  "version": "0.3.354",
+  "version": "0.3.356",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "@north-light/crouter",
-      "version": "0.3.354",
+      "version": "0.3.356",
       "hasInstallScript": true,
       "license": "GPL-3.0-only",
       "workspaces": [
@@ -18,7 +18,7 @@
         "@earendil-works/pi-ai": "0.87.1",
         "@earendil-works/pi-coding-agent": "0.87.1",
         "@earendil-works/pi-tui": "0.87.1",
-        "@north-light/crouter-identity": "^0.3.354",
+        "@north-light/crouter-identity": "^0.3.356",
         "cron-parser": "^5.6.0",
         "esbuild": "^0.27.7",
         "jose": "^6.2.12",
@@ -10885,17 +10885,17 @@
     },
     "packages/crouter-api": {
       "name": "@north-light/crouter-api",
-      "version": "0.3.354",
+      "version": "0.3.356",
       "license": "GPL-3.0-only"
     },
     "packages/crouter-env-docker": {
       "name": "@north-light/crouter-env-docker",
-      "version": "0.3.354",
+      "version": "0.3.356",
       "license": "GPL-3.0-only"
     },
     "packages/crouter-identity": {
       "name": "@north-light/crouter-identity",
-      "version": "0.3.354",
+      "version": "0.3.356",
       "license": "GPL-3.0-only",
       "dependencies": {
         "jose": "^6.2.1"
@@ -10903,19 +10903,19 @@
     },
     "packages/crouter-plugin": {
       "name": "@north-light/crouter-plugin",
-      "version": "0.3.354",
+      "version": "0.3.356",
       "license": "GPL-3.0-only",
       "dependencies": {
-        "@north-light/crouter-api": "^0.3.354"
+        "@north-light/crouter-api": "^0.3.356"
       }
     },
     "packages/crouter-sdk": {
       "name": "@north-light/crouter-sdk",
-      "version": "0.3.354",
+      "version": "0.3.356",
       "license": "GPL-3.0-only",
       "dependencies": {
-        "@north-light/crouter-api": "^0.3.354",
-        "@north-light/crouter-identity": "^0.3.354",
+        "@north-light/crouter-api": "^0.3.356",
+        "@north-light/crouter-identity": "^0.3.356",
         "jose": "^6.2.1"
       }
     }

package/scripts/lib/isolation-env.mjs

@@ -1,6 +1,6 @@
 import { realpathSync } from 'node:fs';
 import { tmpdir, userInfo } from 'node:os';
-import { isAbsolute, relative, sep } from 'node:path';
+import { basename, dirname, isAbsolute, join, relative, sep } from 'node:path';
 
 // A node's shell inherits broker identity and pi paths. Neither an installer
 // nor a test lane is that broker; nested processes must resolve their own roots.
@@ -15,6 +15,12 @@ export function scrubInheritedBrokerEnv(env = process.env) {
 
 // A normal host install uses the account HOME. When HOME is overridden, no
 // working directory or configured write root may still point into that account.
+// A node's shell runs with HOME at its app-space home (`~/.crouter/apps/<app>/home`);
+// that is the account acting through a node, not an isolated home.
+function isAccountAppSpaceHome(home, accountHome) {
+  return basename(home) === 'home' && dirname(dirname(home)) === join(accountHome, '.crouter', 'apps');
+}
+
 export function unsafeIsolationReason({ requireTemporaryHome = false, requireCrtrHome = false } = {}) {
   const inside = (home, target) => {
     const rel = relative(home, target);
@@ -23,7 +29,7 @@ export function unsafeIsolationReason({ requireTemporaryHome = false, requireCrt
   try {
     const home = realpathSync(process.env.HOME);
     const accountHome = realpathSync(userInfo().homedir);
-    if (home === accountHome) return requireTemporaryHome ? 'HOME is the account home' : null;
+    if (home === accountHome || isAccountAppSpaceHome(home, accountHome)) return requireTemporaryHome ? 'HOME is the account home' : null;
     if (requireCrtrHome && !process.env.CRTR_HOME) return 'CRTR_HOME is missing';
     for (const [name, path] of [
       ['cwd', process.cwd()], ['TMPDIR', tmpdir()],