space-architect 5.3.0 → 5.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: de2f5d7d6f80acc7b6a7bd16c9ec3dbaf23ef9c2d425c8b1e532f5c24822533a
-  data.tar.gz: b39f07d1d24b1288d54e37a08624322ad0fc4f5a664459d6bdcbe12acf4d0438
+  metadata.gz: e170b3f69d5b2a6bdeb9422aedc341df20148e7085ea38b120b43508a9aaf3d0
+  data.tar.gz: 8ed8737fdeacf88a4ef1917fcf2a695e3d7f6f679eb1c6745094179bf57a8166
 SHA512:
-  metadata.gz: 5086b34800652f32d243dce10163543a6ee182096b2a42e6938c303de99cf3fa9212591cadba7494491f04f505e16a2c569388c2434c2bbca59585ece77671a9
-  data.tar.gz: 5824a84007e85b84a19ce50c0af0ed6318315b3060caceb5ab4e560416da098d980155bbe74833560a1f7b35330bafb2e73a25e3154f28dc08cf6f53c2ed14e8
+  metadata.gz: '059f2419d80fc974f33c66367f9bc3a3c58492ed095d155c7e9aaa07c0c127ef374e236a973dd21c635e0c2eea97f62fafe83e66c03f8c3a6f5109f4745c20c3'
+  data.tar.gz: 2ee62770684237d0f60eedc5e752695846ff9dfd95836876b555e94e68683bc1ec4367a2006ea35fb350313b568a1d81d6a13822dea4747364f4710688984002

data/CHANGELOG.md

@@ -5,6 +5,104 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.5.0] - 2026-07-22
+
+### Added
+
+- **`architect jobs list` provenance columns** — the table gains Harness /
+  Model / Lane (sourced from the list JSON's existing fields), blank when an
+  older row lacks them, so parallel lanes are tellable apart at a glance.
+- **Server: pagination on the jobs, runs, and conversations indexes** — 50
+  rows per page with a `?page=N` param and Prev/Next controls; runs and
+  conversations were previously unbounded fetches. Conversations order
+  newest-updated first, and the index still never loads messages.
+- **Server: job re-run prefill** — `GET /jobs/new?from=<job id>` (owner-gated)
+  prefills the new-job form field-for-field from that job's spec via the same
+  mapping profile application uses; Jobs/Show gains a "Run again" link.
+- **Server: embedded live run view** — the run stream (SSE + rendering) is
+  extracted into a shared `RunStream` component and embedded on Jobs/Show
+  whenever the job has a run, so watching a job live no longer requires
+  leaving the job page.
+- **Server: browser cancel + honest canceled lifecycle** — Jobs/Show renders a
+  Cancel control while a job is queued/running; runs gain a distinct terminal
+  status `canceled(4)` (a canceled job's run no longer reports `failed`), and
+  a cancel arriving during the env-image build skips the container spawn (and
+  secret resolution) entirely.
+
+### Changed
+
+- **`architect sessions agent install` emits a launchd-proof plist** — the
+  agent's ProgramArguments now open with the installing interpreter's absolute
+  ruby path (`RbConfig.ruby`) ahead of the absolute bin path, and the agent
+  environment carries a homebrew-inclusive PATH, so launchd's bare PATH can no
+  longer resolve macOS system Ruby via an env shebang (LoadError, agent exit
+  1). Reinstall existing agents to migrate; wrapper-script workarounds are
+  obsolete.
+- **`architect dispatch --as-job` requires `--job-model`** — the missing model
+  now fails fast at dispatch with an error naming the flag, instead of
+  composing a spec the server rejects with a late 422.
+
+### Fixed
+
+- **Server: bulk session syncs no longer strand conversations at pending** —
+  transient DB-infrastructure errors (pool timeout, connection loss) inside an
+  import now re-raise so the queue's retry re-fires them, instead of being
+  swallowed as permanent failures; import concurrency is bounded below the DB
+  connection pool so a bulk backfill can't starve it.
+- **Server: NUL bytes can no longer fail imports or live persists** — one
+  shared scrub now covers the claude_code, codex, and pi importers and the
+  live run persistor (Postgres jsonb rejects NUL outright;
+  `PG::UntranslatableCharacter` was failing real claude_code transcripts with
+  NUL in tool-block content).
+- **Server: executor hardening** — a requeued job's raw Redis stream is
+  deleted at execution start (a surviving stale stream silently corrupted the
+  transcript); truncated failure evidence is scrubbed back to valid UTF-8 when
+  the byte boundary splits a multibyte character; the default sandbox base
+  image is `space-claude-base:v1` everywhere (dev bins previously defaulted to
+  `debian:stable-slim`).
+- **Server: models-proxy timeout covers key resolution** — `op://` key
+  resolution now runs inside the same 10s budget as the upstream fetch, and
+  the providers/models action only rescues the operation's own failure
+  classes, so genuine bugs propagate instead of masquerading as
+  `upstream_error`.
+- **Server: `parent_session_id` is clearable** — a re-import whose content no
+  longer implies a parent now nulls the stored link instead of preserving it
+  forever.
+- **Server: theme-aware transcript turn bands** — per-turn tint colors ride
+  CSS custom properties with light and dark definitions (bands were
+  dark-calibrated and near-invisible in light mode); a mid-fetch form edit no
+  longer gets clobbered by the pi-extension sync on the job/profile forms; the
+  generated pi extension places `compat` per-model per the upstream types.
+
+## [5.4.0] - 2026-07-21
+
+### Changed
+
+- **`architect sessions agent install` resolves an `op://` token at install
+  time** — the ref is resolved once via `op read` and the raw value is written
+  to the plist's `EnvironmentVariables` dict (`SPACE_ARCHITECT_INGEST_TOKEN`),
+  with the plist written mode 0600 and ProgramArguments carrying no token
+  material. Interval runs no longer invoke `op` at all, so a locked 1Password
+  can no longer fail the sync (previously the ref rode argv and every fire ran
+  `op read`). Reinstall existing agents to migrate; a non-`op://` token passes
+  through to the env dict unresolved.
+
+### Added
+
+- **`architect sessions sync` env-token fallback** — `--token` is now
+  optional: when absent, the token is read from `SPACE_ARCHITECT_INGEST_TOKEN`.
+  An explicit `--token` always wins; with neither present, the error names
+  both sources.
+- **Server: conversation session links** — importers preserve a session file's
+  own `session_id` and record a differing content-derived id as
+  `parent_session_id`; conversations resolve `parent`/`children` links
+  (owner-scoped) and Conversations/Show renders "part of" / "Subagent
+  transcripts" navigation between them.
+- **Server: denormalized `turns_count` on conversations** — the conversations
+  index reads a counter column recomputed at import instead of loading every
+  conversation's messages, fixing index-page timeouts (502s) at
+  thousand-conversation scale.
+
 ## [5.3.0] - 2026-07-20
 
 ### Added

data/lib/space_architect/architect_project.rb

@@ -939,6 +939,7 @@ module Space::Architect
         resolve_dispatch_harness(lane_entry, model: model, harness: harness, effort: effort, force: force, err: err)
       raise Space::Core::Error, "--as-job only supports the claude-code harness (lane '#{lane}' resolves to '#{resolved_harness}')" \
         unless resolved_harness == "claude-code"
+      raise Space::Core::Error, "--job-model is required with --as-job" unless job_model
 
       id = iteration_id(entry)
       wt_path = space.path.join(lane_entry["worktree"] || "build/#{id}-#{lane}/wt")

data/lib/space_architect/cli/architect.rb

@@ -349,6 +349,7 @@ module Space::Architect
             if as_job
               Jobs.require_credentials!(host, token)
               raise Space::Core::Error, "--backend-url is required with --as-job" unless backend_url
+              raise Space::Core::Error, "--job-model is required with --as-job" unless job_model
               raise Space::Core::Error, "--as-job cannot be combined with --push-url/--push-token/--push-host/--detach" \
                 if push_url || push_token || push_host || detach
             end
@@ -884,8 +885,11 @@ module Space::Architect
               if jobs.empty?
                 terminal.say "No jobs"
               else
-                rows = jobs.map { |j| [j["id"], j["status"], j["run_id"], j["created_at"]] }
-                terminal.say terminal.table(%w[ID Status RunID CreatedAt], rows)
+                rows = jobs.map do |j|
+                  [j["id"], j["status"], j["run_id"], j["created_at"],
+                   j["harness"], j["model"], j.dig("provenance", "lane")]
+                end
+                terminal.say terminal.table(%w[ID Status RunID CreatedAt Harness Model Lane], rows)
               end
               CLI.record_outcome(Outcome.new(exit_code: 0))
             end
@@ -950,13 +954,13 @@ module Space::Architect
         # explicitly rather than relying on dry-cli's `required:` option flag.
         def self.require_credentials!(host, token)
           raise Space::Core::Error, "--host is required" unless host
-          raise Space::Core::Error, "--token is required" unless token
+          raise Space::Core::Error, "--token or #{SessionSync::TOKEN_ENV} is required" unless token
         end
 
         class Sync < BaseCommand
           desc "Scan pi/claude session files and upload new/grown conversations to a space-server"
           option :host,        required: true, desc: "Base URL of the space-server"
-          option :token,       required: true, desc: "Bearer token for authorization (an op:// ref is resolved once via `op read`)"
+          option :token,       default: nil,   desc: "Bearer token for authorization (defaults to $#{SessionSync::TOKEN_ENV}; an explicit --token wins; an op:// ref is resolved once via `op read`)"
           option :state_file,  default: nil,   desc: "Cursor YAML path (default: $XDG_STATE_HOME/space-architect/session-sync.yaml)"
           option :pi_root,     default: nil,   desc: "Override the pi sessions root (default: ~/.pi/agent/sessions)"
           option :claude_root, default: nil,   desc: "Override the claude projects root (default: ~/.claude/projects)"
@@ -965,9 +969,10 @@ module Space::Architect
           def call(host: nil, token: nil, state_file: nil, pi_root: nil, claude_root: nil, dry_run: false, **opts)
             setup_terminal(**opts.slice(:color, :colors))
             handle_errors do
-              Sessions.require_credentials!(host, token)
+              resolved_token = token || ENV[SessionSync::TOKEN_ENV]
+              Sessions.require_credentials!(host, resolved_token)
               runner = SessionSync::Runner.new(
-                client: ConversationsClient.new(host, token),
+                client: ConversationsClient.new(host, resolved_token),
                 state_path: state_file || SessionSync.default_state_file,
                 pi_root: pi_root || SessionSync.default_pi_root,
                 claude_root: claude_root || SessionSync.default_claude_root,
@@ -997,24 +1002,27 @@ module Space::Architect
             include Helpers
             desc "Install the launchd agent that periodically runs `architect sessions sync`"
             option :host,     required: true, desc: "Base URL of the space-server"
-            option :token,    required: true, desc: "Bearer token for authorization (an op:// ref is stored as-is in the plist)"
+            option :token,    required: true, desc: "Bearer token for authorization (an op:// ref is resolved once at install time; the raw value is stored in the plist's EnvironmentVariables, not argv)"
             option :interval, default: "900", desc: "StartInterval in seconds (default 900)"
 
             def call(host: nil, token: nil, interval: "900", **opts)
               setup_terminal(**opts.slice(:color, :colors))
               handle_errors do
                 Sessions.require_credentials!(host, token)
+                resolved_token = token.start_with?("op://") ? SessionSync.resolve_token(token) : token
                 pp = plist_path
                 xml = SessionSync::Plist.call(
                   label: SessionSync::LABEL,
                   refresh_interval: interval.to_i,
                   log_dir: SessionSync.log_dir,
                   bin_path: SessionSync::BinPath.detect,
+                  ruby_bin: RbConfig.ruby,
                   host: host,
-                  token: token
+                  env: {SessionSync::TOKEN_ENV => resolved_token}
                 )
                 FileUtils.mkdir_p(File.dirname(pp))
                 File.write(pp, xml)
+                File.chmod(0o600, pp)
 
                 result = Space::Src::Launchd::Agent.new(label: SessionSync::LABEL).install(pp)
                 raise Space::Core::Error, "bootstrap failed: #{format_failure(result.failure)}" if result.failure?

data/lib/space_architect/conversations_client.rb

@@ -16,7 +16,7 @@ module Space::Architect
       @host = host.chomp("/")
       @token = token
       @client = client
-      @op_resolver = op_resolver || method(:op_read)
+      @op_resolver = op_resolver || SessionSync.method(:resolve_token)
       @resolved_token = nil
     end
 
@@ -62,13 +62,6 @@ module Space::Architect
       @resolved_token ||= @token.start_with?("op://") ? @op_resolver.call(@token) : @token
     end
 
-    def op_read(ref)
-      value = IO.popen(["op", "read", ref], &:read)
-      raise Space::Core::Error, "op read failed for #{ref}" unless $?.success?
-
-      value.chomp
-    end
-
     def build_multipart(boundary, path, session_id)
       crlf = "\r\n"
       filename = File.basename(path)

data/lib/space_architect/session_sync/plist.rb

@@ -3,12 +3,15 @@
 module Space::Architect
   module SessionSync
     # Hand-rolled launchd plist emitter for the session-sync agent, imitating
-    # Space::Src::Launchd::Plist's shape. Unlike that emitter, this one does
-    # NOT wrap the invocation in mise/ruby toolchain resolution: the
-    # `architect` executable is a rubygems binstub (or the dev exe/architect
-    # script, which sets up Bundler itself) and needs no toolchain pinning to
-    # run non-interactively, so ProgramArguments invokes it directly.
+    # Space::Src::Launchd::Plist's shape. Under launchd's bare PATH, a bare
+    # env-relative ruby binstub shebang resolves to macOS system Ruby instead
+    # of the caller's toolchain, so ProgramArguments names the interpreter
+    # explicitly (ruby_bin) rather than relying on shebang resolution — no
+    # mise wrapping needed, since the sync itself pins no toolchain at run
+    # time.
     class Plist
+      DEFAULT_PATH = "/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin"
+
       HEADER = <<~XML
         <?xml version="1.0" encoding="UTF-8"?>
         <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
@@ -22,19 +25,22 @@ module Space::Architect
         # @param refresh_interval [Integer] StartInterval in seconds (must be > 0).
         # @param log_dir [String]          Absolute directory for stdout/stderr logs.
         # @param bin_path [String]         Absolute path to the architect bin script.
+        # @param ruby_bin [String]         Absolute path to the ruby to run bin_path under.
         # @param host [String]             --host value passed to `sessions sync`.
-        # @param token [String]            --token value passed to `sessions sync` (an op:// ref
-        #                                  is passed through verbatim — never resolved here).
+        # @param env [Hash]                EnvironmentVariables dict; must contain a non-empty
+        #                                  SessionSync::TOKEN_ENV value (resolved by the caller —
+        #                                  never resolved here). PATH defaults to DEFAULT_PATH
+        #                                  unless the caller supplies its own.
         # @return [String] the full plist XML.
-        def call(label:, refresh_interval:, log_dir:, bin_path:, host:, token:)
+        def call(label:, refresh_interval:, log_dir:, bin_path:, ruby_bin:, host:, env:)
           raise ArgumentError, "label is required" if label.to_s.empty?
           raise ArgumentError, "refresh_interval must be > 0" unless refresh_interval.is_a?(Integer) && refresh_interval > 0
-          %w[log_dir bin_path].each do |k|
+          %w[log_dir bin_path ruby_bin].each do |k|
             v = binding.local_variable_get(k)
             raise ArgumentError, "#{k} must be absolute (got #{v.inspect})" unless v.is_a?(String) && File.absolute_path?(v)
           end
           raise ArgumentError, "host is required" if host.to_s.empty?
-          raise ArgumentError, "token is required" if token.to_s.empty?
+          raise ArgumentError, "env[#{SessionSync::TOKEN_ENV}] is required" if env.to_h[SessionSync::TOKEN_ENV].to_s.empty?
 
           out_log = File.join(log_dir, "#{label}.out.log")
           err_log = File.join(log_dir, "#{label}.err.log")
@@ -42,12 +48,13 @@ module Space::Architect
           body = +""
           body << key("Label") << string(label) << "\n"
           body << key("ProgramArguments") << "\n" << array([
+            ruby_bin,
             bin_path,
             "sessions",
             "sync",
-            "--host", host,
-            "--token", token
+            "--host", host
           ])
+          body << key("EnvironmentVariables") << "\n" << dict({"PATH" => DEFAULT_PATH}.merge(env.to_h))
           body << key("StartInterval") << integer(refresh_interval) << "\n"
           body << key("RunAtLoad") << boolean(true) << "\n"
           body << key("ProcessType") << string("Background") << "\n"
@@ -89,6 +96,15 @@ module Space::Architect
           items.each { |arg| out << "    <string>#{escape(arg)}</string>\n" }
           out << "  </array>"
         end
+
+        def dict(hash)
+          out = +"  <dict>\n"
+          hash.each do |k, v|
+            out << "    <key>#{escape(k)}</key>\n"
+            out << "    <string>#{escape(v)}</string>\n"
+          end
+          out << "  </dict>"
+        end
       end
     end
   end

data/lib/space_architect/session_sync.rb

@@ -15,9 +15,20 @@ module Space::Architect
   module SessionSync
     LABEL = "io.github.jetpks.space-architect.session-sync"
     APP_NAME = "space-architect"
+    TOKEN_ENV = "SPACE_ARCHITECT_INGEST_TOKEN"
 
     module_function
 
+    # The one op-read seam under lib/: resolves an op:// ref via `op read`.
+    # Shared by ConversationsClient's default op_resolver and
+    # Sessions::Agent::Install (both test-injectable around this call).
+    def resolve_token(ref)
+      value = IO.popen(["op", "read", ref], &:read)
+      raise Space::Core::Error, "op read failed for #{ref}" unless $?.success?
+
+      value.chomp
+    end
+
     def state_dir(env: ENV)
       File.join(Space::Core::XDG.state_home(env: env).to_s, APP_NAME)
     end

data/lib/space_core/version.rb

@@ -2,6 +2,6 @@
 
 module Space
   module Core
-    VERSION = "5.3.0"
+    VERSION = "5.5.0"
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: space-architect
 version: !ruby/object:Gem::Version
-  version: 5.3.0
+  version: 5.5.0
 platform: ruby
 authors:
 - Eric Jacobs