@chainingintention/pi-web-cn 1.202607.11 → 1.202608.2

package/dist/server/sessions/globalProviderPolicy.js

@@ -0,0 +1,167 @@
+import { mkdtemp, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { isDeepStrictEqual } from "node:util";
+import { createAgentSessionServices, } from "@earendil-works/pi-coding-agent";
+const LOG_CONTEXT = "global-provider-bootstrap";
+const MODELS_FIELD = "models";
+/**
+ * Snapshot the merged config Pi holds for every config-registered provider.
+ * Pi merges defined values over the previous registration, so the runtime's
+ * own record — not the extension's last argument — is the accurate baseline.
+ * Native providers have no comparable config and are deliberately absent.
+ */
+function captureProviderConfigBaseline(runtime) {
+    const baseline = new Map();
+    for (const providerId of runtime.getRegisteredProviderIds()) {
+        const config = runtime.getRegisteredProviderConfig(providerId);
+        if (config)
+            baseline.set(providerId, config);
+    }
+    return baseline;
+}
+/**
+ * True when `incoming` would change the model catalog of `baseline` and nothing
+ * else.
+ *
+ * Extensions that refresh their catalog re-send a complete provider config, so
+ * the test is "equal to the baseline except for models", not "contains only
+ * models". Omitted fields are not changes: Pi's merge keeps the previous value,
+ * which also makes an unchanged catalog a plain replay rather than an update.
+ * Function-valued fields (`streamSimple`, `refreshModels`, `oauth` methods)
+ * compare by reference under deep strict equality, so a freshly created closure
+ * reads as a mismatch. That conservative direction is intentional: an unclear
+ * comparison must fall back to the frozen no-op.
+ */
+function isModelsOnlyProviderUpdate(baseline, incoming) {
+    const baselineFields = new Map(Object.entries(baseline));
+    const otherFieldsMatch = Object.entries(incoming).every(([field, value]) => {
+        if (field === MODELS_FIELD || value === undefined)
+            return true;
+        return isDeepStrictEqual(value, baselineFields.get(field));
+    });
+    if (!otherFieldsMatch)
+        return false;
+    return incoming.models !== undefined && !isDeepStrictEqual(incoming.models, baseline.models);
+}
+async function loadGlobalExtensionServices(runtime, agentDir) {
+    const scratchCwd = await mkdtemp(join(tmpdir(), "pi-web-global-ext-"));
+    try {
+        return await createAgentSessionServices({ cwd: scratchCwd, agentDir, modelRuntime: runtime });
+    }
+    finally {
+        await rm(scratchCwd, { recursive: true, force: true });
+    }
+}
+function logBootstrapDiagnostic(logger, diagnostic) {
+    const details = {
+        context: LOG_CONTEXT,
+        diagnosticType: diagnostic.type,
+        diagnostic: diagnostic.message,
+    };
+    if (diagnostic.type === "error") {
+        logger.error(details, "global extension provider bootstrap diagnostic");
+    }
+    else if (diagnostic.type === "warning") {
+        logger.warn(details, "global extension provider bootstrap diagnostic");
+    }
+    else {
+        logger.info(details, "global extension provider bootstrap diagnostic");
+    }
+}
+function freezeProviderMutations(runtime, logger, configBaseline) {
+    const originalMethods = {
+        registerNativeProvider: runtime.registerNativeProvider.bind(runtime),
+        registerProvider: runtime.registerProvider.bind(runtime),
+        unregisterProvider: runtime.unregisterProvider.bind(runtime),
+    };
+    const loggedProviderIds = {
+        registerNativeProvider: new Set(),
+        registerProvider: new Set(),
+        unregisterProvider: new Set(),
+    };
+    // Logging must never turn a provider mutation into an extension failure.
+    const logQuietly = (details, message) => {
+        try {
+            logger.info(details, message);
+        }
+        catch {
+            // Intentionally ignored; the mutation decision already stands.
+        }
+    };
+    const logIgnoredMutation = (operation, providerId) => {
+        const loggedIds = loggedProviderIds[operation];
+        if (loggedIds.has(providerId))
+            return;
+        loggedIds.add(providerId);
+        logQuietly({ context: LOG_CONTEXT, operation, providerId }, "ignored provider mutation after global bootstrap");
+    };
+    const frozenMethods = {
+        registerProvider(providerId, config) {
+            const baseline = configBaseline.get(providerId);
+            if (!baseline || !isModelsOnlyProviderUpdate(baseline, config)) {
+                logIgnoredMutation("registerProvider", providerId);
+                return;
+            }
+            // Pi validates the registration and ends in a fire-and-forget local
+            // refresh, so this stays synchronous and never reaches the network.
+            originalMethods.registerProvider(providerId, config);
+            const accepted = runtime.getRegisteredProviderConfig(providerId);
+            // Re-read the merged record so the next comparison uses what Pi stored.
+            if (accepted)
+                configBaseline.set(providerId, accepted);
+            logQuietly({
+                context: LOG_CONTEXT,
+                operation: "registerProvider",
+                providerId,
+                modelCount: accepted?.models?.length ?? 0,
+            }, "applied models-only provider update after global bootstrap");
+        },
+        registerNativeProvider(provider) {
+            logIgnoredMutation("registerNativeProvider", provider.id);
+        },
+        unregisterProvider(providerId) {
+            logIgnoredMutation("unregisterProvider", providerId);
+        },
+    };
+    try {
+        Object.assign(runtime, frozenMethods);
+    }
+    catch (error) {
+        Object.assign(runtime, originalMethods);
+        throw error;
+    }
+}
+/**
+ * Load global extensions once against the shared model runtime, then make its
+ * extension-provider baseline immutable for the rest of the daemon lifetime.
+ * All sessions share this runtime, so accepting project-dependent mutations
+ * would leak provider configuration across workspaces. This is an accidental
+ * contamination guard, not a sandbox for otherwise trusted extensions.
+ *
+ * The temporary cwd is guaranteed to be empty, so Pi discovers agent-dir
+ * extensions without loading project resources. Documented initialization-time
+ * config and native registrations therefore reach the runtime through Pi's
+ * public service factory. Pi exposes no provider-freeze hook, so the daemon
+ * deliberately shadows the three public instance mutation methods afterward;
+ * every registration replay or later call is then a logged no-op.
+ *
+ * The one exception is a known config provider refreshing its own model
+ * catalog: a `registerProvider` call whose config matches the recorded
+ * baseline in every field except `models` is applied, because a catalog is a
+ * property of the provider rather than of the project. Native registration
+ * stays fully frozen — it passes a whole `Provider` object with no comparable
+ * config — as does unregistration.
+ */
+export async function bootstrapAndFreezeGlobalExtensionProviders(runtime, agentDir, logger) {
+    const services = await loadGlobalExtensionServices(runtime, agentDir);
+    const providerIds = Object.freeze([...runtime.getRegisteredProviderIds()].sort());
+    freezeProviderMutations(runtime, logger, captureProviderConfigBaseline(runtime));
+    for (const diagnostic of services.diagnostics)
+        logBootstrapDiagnostic(logger, diagnostic);
+    for (const extensionError of services.resourceLoader.getExtensions().errors) {
+        logger.error({ context: LOG_CONTEXT, error: extensionError.error }, "global extension failed during provider bootstrap");
+    }
+    logger.info({ context: LOG_CONTEXT, providerIds }, "global extension provider baseline bootstrapped and frozen");
+}
+//# sourceMappingURL=globalProviderPolicy.js.map

package/dist/server/sessions/globalProviderPolicy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"globalProviderPolicy.js","sourceRoot":"","sources":["../../../src/server/sessions/globalProviderPolicy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EACL,0BAA0B,GAI3B,MAAM,iCAAiC,CAAC;AAczC,MAAM,WAAW,GAAG,2BAA2B,CAAC;AAChD,MAAM,YAAY,GAAG,QAAQ,CAAC;AAE9B;;;;;GAKG;AACH,SAAS,6BAA6B,CAAC,OAAqB;IAC1D,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAoC,CAAC;IAC7D,KAAK,MAAM,UAAU,IAAI,OAAO,CAAC,wBAAwB,EAAE,EAAE,CAAC;QAC5D,MAAM,MAAM,GAAG,OAAO,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC;QAC/D,IAAI,MAAM;YAAE,QAAQ,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,SAAS,0BAA0B,CAAC,QAAkC,EAAE,QAAkC;IACxG,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,EAAE,KAAK,CAAC,EAAE,EAAE;QACzE,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC;QAC/D,OAAO,iBAAiB,CAAC,KAAK,EAAE,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,gBAAgB;QAAE,OAAO,KAAK,CAAC;IACpC,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC/F,CAAC;AAED,KAAK,UAAU,2BAA2B,CAAC,OAAqB,EAAE,QAAgB;IAChF,MAAM,UAAU,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC;QACH,OAAO,MAAM,0BAA0B,CAAC,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,CAAC;IAChG,CAAC;YAAS,CAAC;QACT,MAAM,EAAE,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAC7B,MAAqC,EACrC,UAAyC;IAEzC,MAAM,OAAO,GAAG;QACd,OAAO,EAAE,WAAW;QACpB,cAAc,EAAE,UAAU,CAAC,IAAI;QAC/B,UAAU,EAAE,UAAU,CAAC,OAAO;KAC/B,CAAC;IACF,IAAI,UAAU,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAChC,MAAM,CAAC,KAAK,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAC;IAC1E,CAAC;SAAM,IAAI,UAAU,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACzC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAC;IACzE,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,gDAAgD,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,uBAAuB,CAC9B,OAAqB,EACrB,MAAqC,EACrC,cAAqD;IAErD,MAAM,eAAe,GAA4B;QAC/C,sBAAsB,EAAE,OAAO,CAAC,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC;QACpE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;QACxD,kBAAkB,EAAE,OAAO,CAAC,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC;KAC7D,CAAC;IACF,MAAM,iBAAiB,GAAmD;QACxE,sBAAsB,EAAE,IAAI,GAAG,EAAE;QACjC,gBAAgB,EAAE,IAAI,GAAG,EAAE;QAC3B,kBAAkB,EAAE,IAAI,GAAG,EAAE;KAC9B,CAAC;IACF,yEAAyE;IACzE,MAAM,UAAU,GAAG,CAAC,OAAgC,EAAE,OAAe,EAAQ,EAAE;QAC7E,IAAI,CAAC;YACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,CAAC;QAAC,MAAM,CAAC;YACP,+DAA+D;QACjE,CAAC;IACH,CAAC,CAAC;IACF,MAAM,kBAAkB,GAAG,CAAC,SAAoC,EAAE,UAAkB,EAAQ,EAAE;QAC5F,MAAM,SAAS,GAAG,iBAAiB,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC;YAAE,OAAO;QACtC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC1B,UAAU,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,kDAAkD,CAAC,CAAC;IAClH,CAAC,CAAC;IACF,MAAM,aAAa,GAA4B;QAC7C,gBAAgB,CAAC,UAAU,EAAE,MAAM;YACjC,MAAM,QAAQ,GAAG,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAChD,IAAI,CAAC,QAAQ,IAAI,CAAC,0BAA0B,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC;gBAC/D,kBAAkB,CAAC,kBAAkB,EAAE,UAAU,CAAC,CAAC;gBACnD,OAAO;YACT,CAAC;YACD,oEAAoE;YACpE,oEAAoE;YACpE,eAAe,CAAC,gBAAgB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;YACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,2BAA2B,CAAC,UAAU,CAAC,CAAC;YACjE,wEAAwE;YACxE,IAAI,QAAQ;gBAAE,cAAc,CAAC,GAAG,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC;YACvD,UAAU,CACR;gBACE,OAAO,EAAE,WAAW;gBACpB,SAAS,EAAE,kBAAkB;gBAC7B,UAAU;gBACV,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;aAC1C,EACD,4DAA4D,CAC7D,CAAC;QACJ,CAAC;QACD,sBAAsB,CAAC,QAAQ;YAC7B,kBAAkB,CAAC,wBAAwB,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,kBAAkB,CAAC,UAAU;YAC3B,kBAAkB,CAAC,oBAAoB,EAAE,UAAU,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;IAEF,IAAI,CAAC;QACH,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACxC,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,0CAA0C,CAC9D,OAAqB,EACrB,QAAgB,EAChB,MAAqC;IAErC,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IACtE,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAElF,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,6BAA6B,CAAC,OAAO,CAAC,CAAC,CAAC;IAEjF,KAAK,MAAM,UAAU,IAAI,QAAQ,CAAC,WAAW;QAAE,sBAAsB,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAC1F,KAAK,MAAM,cAAc,IAAI,QAAQ,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,MAAM,EAAE,CAAC;QAC5E,MAAM,CAAC,KAAK,CACV,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,CAAC,KAAK,EAAE,EACrD,mDAAmD,CACpD,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,IAAI,CACT,EAAE,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,EACrC,4DAA4D,CAC7D,CAAC;AACJ,CAAC"}

package/dist/server/sessions/modelCatalogRefresher.js

@@ -0,0 +1,192 @@
+/**
+ * Tick hourly and let pi decide when a fetch is actually due: pi treats stored
+ * catalogs as fresh for REMOTE_CATALOG_REFRESH_INTERVAL_MS (4h) and skips the
+ * network entirely on an unforced refresh inside that window. Ticking at
+ * exactly 4h would land a few seconds short of the window every time, because
+ * pi stamps `checkedAt` only after a fetch completes, so every other tick would
+ * be skipped and the real cadence would be ~8h. A shorter interval removes that
+ * off-by-one-latency skip, tolerates clock skew, and costs nothing when the
+ * cache is fresh, because scheduled runs never set `force`.
+ */
+const DEFAULT_INTERVAL_MS = 60 * 60 * 1000;
+/** Give the daemon a moment to finish startup before the first network refresh. */
+const DEFAULT_INITIAL_DELAY_MS = 15_000;
+/**
+ * Bound every catalog refresh so a stalled provider fetch cannot run forever.
+ * One run covers every refreshable provider under a single signal, so this is a
+ * whole-cycle budget for a background job, not pi's 15s startup budget.
+ */
+const DEFAULT_TIMEOUT_MS = 60_000;
+/**
+ * Wait this long before the single follow-up attempt that a timed-out or failed
+ * run earns, so a transient network problem does not cost a whole interval.
+ */
+const DEFAULT_RETRY_DELAY_MS = 5 * 60 * 1000;
+/** A queued follow-up must keep the strongest mode requested while a run was in flight. */
+const strongestMode = (left, right) => left === "forced" || right === "forced" ? "forced" : "scheduled";
+const noopLogger = {
+    info() { },
+    warn() { },
+    error() { },
+};
+/**
+ * Refreshes provider model catalogs over the network on a background schedule.
+ *
+ * The shared ModelRuntime is constructed offline (see authService.ts), so its
+ * own refreshes never touch the network and stay fast on request paths. This
+ * refresher is the single place that deliberately performs network refreshes —
+ * bounded by an abort timeout, serialized through one in-flight run, stopped by
+ * `dispose()` even mid-flight, and off any request path. `requestRefresh()`
+ * additionally asks for a prompt forced refresh after events that change what
+ * should be listed, such as provider logins, where the cached catalog is known
+ * to be wrong.
+ *
+ * When the operator asked for offline behavior (`PI_OFFLINE` / `PI_WEB_OFFLINE`),
+ * the refresher performs no network I/O at all and the cached catalogs in
+ * models-store.json are used as they are.
+ */
+export class ModelCatalogRefresher {
+    constructor(options) {
+        this.started = false;
+        this.disposed = false;
+        /**
+         * Aborted by `dispose()` so a refresh already in flight stops with the
+         * refresher instead of holding its fetch open for the rest of the timeout
+         * budget, which would delay daemon shutdown.
+         */
+        this.lifetime = new AbortController();
+        this.runtime = options.runtime;
+        this.logger = options.logger ?? noopLogger;
+        this.offline = options.offline ?? false;
+        this.intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
+        this.initialDelayMs = options.initialDelayMs ?? DEFAULT_INITIAL_DELAY_MS;
+        this.timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+        this.retryDelayMs = options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
+    }
+    /** Idempotent: a second call keeps the timers the first call installed. */
+    start() {
+        if (this.disposed || this.started)
+            return;
+        this.started = true;
+        if (this.offline) {
+            this.logger.info({}, "offline mode is enabled; skipping background model catalog refreshes");
+            return;
+        }
+        this.initialTimer = setTimeout(() => { this.queueRefresh("scheduled"); }, this.initialDelayMs);
+        this.initialTimer.unref();
+        this.intervalTimer = setInterval(() => { this.queueRefresh("scheduled"); }, this.intervalMs);
+        this.intervalTimer.unref();
+    }
+    /**
+     * Ask for an immediate refresh that bypasses pi's freshness gate, for callers
+     * that know the cached catalog is stale (auth changes). Coalesces with
+     * concurrent and overlapping requests, and is a no-op in offline mode so auth
+     * changes never trigger network I/O either.
+     */
+    requestRefresh() {
+        this.queueRefresh("forced");
+    }
+    /**
+     * Whether a network catalog refresh is running right now. Read-only: callers
+     * that report what a slow operation is concurrent with need this fact, and
+     * must not be able to change the refresh schedule by asking for it.
+     */
+    isRefreshInFlight() {
+        return this.inflight !== undefined;
+    }
+    /** Terminal: stops the schedule, drops any queued follow-up, and aborts an in-flight run. */
+    dispose() {
+        this.disposed = true;
+        if (this.initialTimer !== undefined)
+            clearTimeout(this.initialTimer);
+        if (this.intervalTimer !== undefined)
+            clearInterval(this.intervalTimer);
+        this.clearRetryTimer();
+        this.lifetime.abort();
+    }
+    /**
+     * Single entry point for every refresh trigger. Only one run is ever in
+     * flight; overlapping requests collapse into one follow-up that keeps the
+     * strongest mode asked for, so a forced request is never downgraded.
+     */
+    queueRefresh(mode, isRetry = false) {
+        if (this.disposed || this.offline)
+            return;
+        // Any fresh trigger supersedes a pending retry, which keeps retries from
+        // stacking up behind normal activity.
+        if (!isRetry)
+            this.clearRetryTimer();
+        if (this.inflight !== undefined) {
+            this.queuedMode = strongestMode(this.queuedMode, mode);
+            return;
+        }
+        // runCycle() reports every failure through the logger and never rejects.
+        this.inflight = this.runCycle(mode, isRetry);
+    }
+    /** One run plus the follow-up it leads to: a queued request, a single retry, or nothing. */
+    async runCycle(mode, isRetry) {
+        const outcome = await this.run(mode);
+        this.inflight = undefined;
+        const queued = this.queuedMode;
+        this.queuedMode = undefined;
+        if (queued !== undefined) {
+            // A request that arrived during the run replaces any retry this run would
+            // have earned; it runs now instead.
+            this.queueRefresh(queued);
+            return;
+        }
+        // Only a first attempt earns a retry, so a failing provider can never turn
+        // into a retry loop.
+        if (outcome === "incomplete" && !isRetry)
+            this.scheduleRetry(mode);
+    }
+    scheduleRetry(mode) {
+        if (this.disposed)
+            return;
+        this.logger.info({ retryDelayMs: this.retryDelayMs, mode }, "scheduling one model catalog refresh retry");
+        this.retryTimer = setTimeout(() => {
+            this.retryTimer = undefined;
+            this.queueRefresh(mode, true);
+        }, this.retryDelayMs);
+        this.retryTimer.unref();
+    }
+    clearRetryTimer() {
+        if (this.retryTimer === undefined)
+            return;
+        clearTimeout(this.retryTimer);
+        this.retryTimer = undefined;
+    }
+    async run(mode) {
+        try {
+            const result = await this.runtime.refresh({
+                allowNetwork: true,
+                force: mode === "forced",
+                signal: AbortSignal.any([this.lifetime.signal, AbortSignal.timeout(this.timeoutMs)]),
+            });
+            if (result.aborted && this.lifetime.signal.aborted) {
+                this.logStoppedByDispose();
+                return "incomplete";
+            }
+            if (result.aborted) {
+                this.logger.warn({ timeoutMs: this.timeoutMs }, "model catalog refresh timed out; keeping cached catalogs");
+            }
+            if (result.errors.size > 0) {
+                const providers = [...result.errors.entries()].map(([providerId, error]) => `${providerId}: ${error.message}`);
+                this.logger.warn({ providers }, "model catalog refresh failed for some providers; keeping cached catalogs");
+            }
+            return result.aborted || result.errors.size > 0 ? "incomplete" : "complete";
+        }
+        catch (error) {
+            if (this.lifetime.signal.aborted)
+                this.logStoppedByDispose();
+            else
+                this.logger.error({ err: error }, "model catalog refresh failed; keeping cached catalogs");
+            return "incomplete";
+        }
+    }
+    /** A shutdown abort is expected, so it must not be reported as a timeout or a fault. */
+    logStoppedByDispose() {
+        this.logger.info({}, "model catalog refresh aborted by dispose; keeping cached catalogs");
+    }
+}
+//# sourceMappingURL=modelCatalogRefresher.js.map

package/dist/server/sessions/modelCatalogRefresher.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelCatalogRefresher.js","sourceRoot":"","sources":["../../../src/server/sessions/modelCatalogRefresher.ts"],"names":[],"mappings":"AAEA;;;;;;;;;GASG;AACH,MAAM,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC3C,mFAAmF;AACnF,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC;;;GAGG;AACH,MAAM,sBAAsB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAQ7C,2FAA2F;AAC3F,MAAM,aAAa,GAAG,CAAC,IAA6B,EAAE,KAAkB,EAAe,EAAE,CACvF,IAAI,KAAK,QAAQ,IAAI,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC;AA2BnE,MAAM,UAAU,GAAgC;IAC9C,IAAI,KAAiB,CAAC;IACtB,IAAI,KAAiB,CAAC;IACtB,KAAK,KAAiB,CAAC;CACxB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,MAAM,OAAO,qBAAqB;IAsBhC,YAAY,OAAqC;QATzC,YAAO,GAAG,KAAK,CAAC;QAChB,aAAQ,GAAG,KAAK,CAAC;QACzB;;;;WAIG;QACc,aAAQ,GAAG,IAAI,eAAe,EAAE,CAAC;QAGhD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC;QAC3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,KAAK,CAAC;QACxC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;QAC5D,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;QACzE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACzD,IAAI,CAAC,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACrE,CAAC;IAED,2EAA2E;IAC3E,KAAK;QACH,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACjB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,sEAAsE,CAAC,CAAC;YAC7F,OAAO;QACT,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,cAAc,CAAC,CAAC;QAC/F,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;QAC7F,IAAI,CAAC,aAAa,CAAC,KAAK,EAAE,CAAC;IAC7B,CAAC;IAED;;;;;OAKG;IACH,cAAc;QACZ,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IAED;;;;OAIG;IACH,iBAAiB;QACf,OAAO,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC;IACrC,CAAC;IAED,6FAA6F;IAC7F,OAAO;QACL,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;YAAE,YAAY,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;QACrE,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;YAAE,aAAa,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACxE,IAAI,CAAC,eAAe,EAAE,CAAC;QACvB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxB,CAAC;IAED;;;;OAIG;IACK,YAAY,CAAC,IAAiB,EAAE,OAAO,GAAG,KAAK;QACrD,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1C,yEAAyE;QACzE,sCAAsC;QACtC,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,eAAe,EAAE,CAAC;QACrC,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAChC,IAAI,CAAC,UAAU,GAAG,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YACvD,OAAO;QACT,CAAC;QACD,yEAAyE;QACzE,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAED,4FAA4F;IACpF,KAAK,CAAC,QAAQ,CAAC,IAAiB,EAAE,OAAgB;QACxD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC1B,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC;QAC/B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,0EAA0E;YAC1E,oCAAoC;YACpC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YAC1B,OAAO;QACT,CAAC;QACD,2EAA2E;QAC3E,qBAAqB;QACrB,IAAI,OAAO,KAAK,YAAY,IAAI,CAAC,OAAO;YAAE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC;IACrE,CAAC;IAEO,aAAa,CAAC,IAAiB;QACrC,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,EAAE,4CAA4C,CAAC,CAAC;QAC1G,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC,GAAG,EAAE;YAChC,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;QACtB,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAEO,eAAe;QACrB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC1C,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC9B,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAEO,KAAK,CAAC,GAAG,CAAC,IAAiB;QACjC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBACxC,YAAY,EAAE,IAAI;gBAClB,KAAK,EAAE,IAAI,KAAK,QAAQ;gBACxB,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;aACrF,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnD,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC3B,OAAO,YAAY,CAAC;YACtB,CAAC;YACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,EAAE,0DAA0D,CAAC,CAAC;YAC9G,CAAC;YACD,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC3B,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,UAAU,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC/G,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,EAAE,0EAA0E,CAAC,CAAC;YAC9G,CAAC;YACD,OAAO,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9E,CAAC;QAAC,OAAO,KAAc,EAAE,CAAC;YACxB,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO;gBAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC;;gBACxD,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,uDAAuD,CAAC,CAAC;YAChG,OAAO,YAAY,CAAC;QACtB,CAAC;IACH,CAAC;IAED,wFAAwF;IAChF,mBAAmB;QACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,mEAAmE,CAAC,CAAC;IAC5F,CAAC;CACF"}