@cmgmyr/hive 1.2.2 → 1.4.0

package/dist/projectYml.js

@@ -1,11 +1,30 @@
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync, realpathSync } from "node:fs";
-import { join, resolve, sep } from "node:path";
+import { readFileSync, realpathSync } from "node:fs";
+import { resolve, sep } from "node:path";
 import { parse } from "yaml";
 import { harnessNames } from "./harnesses.js";
 import { isValidProfileName } from "./profiles.js";
 import { errorMessage } from "./result.js";
 import { isWindowLayout, WINDOW_LAYOUTS } from "./tmux.js";
+import { globalConfigPath, isEmptyYamlDocument, readGlobalConfig, resolveAttachSetting, } from "./globalConfig.js";
+export const BUILT_IN_PROJECT_YML = Object.freeze({
+    lead: null,
+    placement: null,
+    layout: null,
+    profile: null,
+    agents: null,
+    lead_branches: null,
+    first_message: null,
+    context_checkpoint_percent: null,
+    lead_turn_budget: null,
+    dashboard: false,
+    vars: Object.freeze({}),
+    processes: Object.freeze({}),
+});
+export const PROJECT_YML_KEYS = Object.freeze(Object.keys(BUILT_IN_PROJECT_YML));
+export function createBuiltInProjectYml() {
+    return structuredClone(BUILT_IN_PROJECT_YML);
+}
 export const DEFAULT_LEAD_BRANCHES = ["main", "master"];
 export const NO_PROFILE = "none";
 export function activeProfile(config) {
@@ -37,224 +56,269 @@ export function mergedProjectVars(config) {
         delete safe[key];
     return { ...safe, ...agentVars(config) };
 }
-export function loadProjectYml(projectPath) {
-    const warnings = [];
-    const file = join(projectPath, "hive.yml");
-    if (!existsSync(file))
-        return { config: null, warnings };
-    let raw;
+// Absent sends nothing; "" (or whitespace only) also sends nothing, and a project one beats a global message.
+export function resolveFirstMessage(config, sources = {}) {
+    const value = config?.first_message;
+    if (value == null)
+        return { message: "", source: "unset" };
+    if (value.trim() === "")
+        return { message: "", source: "empty" };
+    return { message: value, source: sources.first_message === "global" ? "global" : "project" };
+}
+function isMapping(value) {
+    if (value === null || typeof value !== "object" || Array.isArray(value))
+        return false;
+    const prototype = Object.getPrototypeOf(value);
+    return prototype === Object.prototype || prototype === null;
+}
+function parseFile(path, warnings) {
+    let text;
     try {
-        raw = parse(readFileSync(file, "utf8"));
+        text = readFileSync(path, "utf8");
     }
-    catch (e) {
-        warnings.push(`hive.yml is not valid YAML: ${errorMessage(e)}`);
-        return { config: null, warnings };
-    }
-    if (raw == null || typeof raw !== "object") {
-        warnings.push("hive.yml must be a YAML mapping.");
-        return { config: null, warnings };
-    }
-    const root = raw;
-    let context_checkpoint_percent = null;
-    if (root.context_checkpoint_percent != null) {
-        const value = root.context_checkpoint_percent;
-        if (typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 100) {
-            context_checkpoint_percent = value;
+    catch (error) {
+        if (error.code !== "ENOENT") {
+            warnings.push(`${path}: could not read hive.yml: ${errorMessage(error)}`);
         }
-        else {
-            warnings.push("context_checkpoint_percent must be an integer from 1 through 100; ignoring it.");
+        return null;
+    }
+    try {
+        const raw = parse(text);
+        if (raw == null && isEmptyYamlDocument(text))
+            return null;
+        if (!isMapping(raw)) {
+            warnings.push(`${path}: hive.yml must be a YAML mapping.`);
+            return null;
         }
+        return raw;
     }
-    let lead_turn_budget = null;
-    if (root.lead_turn_budget != null) {
-        const value = root.lead_turn_budget;
-        const budget = typeof value === "object" && value !== null && !Array.isArray(value)
-            ? value
-            : null;
-        const warn = budget?.warn;
-        const stop = budget?.stop;
-        if (typeof warn === "number" && Number.isInteger(warn) && warn > 0 &&
-            typeof stop === "number" && Number.isInteger(stop) && stop > warn) {
-            lead_turn_budget = { warn, stop };
+    catch (error) {
+        warnings.push(`${path}: hive.yml is not valid YAML: ${errorMessage(error)}`);
+        return null;
+    }
+}
+function parseProcesses(value, path, warnings) {
+    if (!isMapping(value)) {
+        warnings.push(`${path}: hive.yml \`processes\` must be a mapping of name to command.`);
+        return null;
+    }
+    const processes = {};
+    for (const [name, item] of Object.entries(value)) {
+        if (typeof item === "string" && item.trim() !== "") {
+            processes[name] = { command: item.trim(), dir: null, auto_start: true, visible: true, env: {} };
+            continue;
         }
-        else {
-            warnings.push("lead_turn_budget must contain positive integer warn and stop values, with stop greater than warn; ignoring it.");
+        if (!isMapping(item)) {
+            warnings.push(`${path}: Process "${name}" needs a command string; skipped.`);
+            continue;
         }
-    }
-    const lead = typeof root.lead === "string" && root.lead.trim() !== "" ? root.lead.trim() : null;
-    let placement = null;
-    if (root.placement != null) {
-        if (root.placement === "split" || root.placement === "window") {
-            placement = root.placement;
+        if (typeof item.command !== "string" || item.command.trim() === "") {
+            warnings.push(`${path}: Process "${name}" has no command; skipped.`);
+            continue;
         }
-        else {
-            warnings.push(`placement must be "split" or "window"; ignoring "${String(root.placement)}".`);
+        const dirValue = item.dir ?? item.working_dir;
+        let visible = true;
+        if (item.visible != null) {
+            if (typeof item.visible === "boolean")
+                visible = item.visible;
+            else
+                warnings.push(`${path}: Process "${name}": visible must be true or false; ignoring "${String(item.visible)}".`);
         }
+        const env = {};
+        if (isMapping(item.env)) {
+            for (const [key, envValue] of Object.entries(item.env))
+                env[key] = String(envValue);
+        }
+        processes[name] = {
+            command: item.command.trim(),
+            dir: typeof dirValue === "string" && dirValue.trim() !== "" ? dirValue.trim() : null,
+            auto_start: item.auto_start !== false,
+            visible,
+            env,
+        };
     }
-    let layout = null;
-    if (root.layout != null) {
-        if (isWindowLayout(root.layout)) {
-            layout = root.layout;
+    return processes;
+}
+function applyLayer(root, path, source, config, sources, warnings) {
+    const has = (key) => Object.hasOwn(root, key);
+    const warn = (message) => warnings.push(`${path}: ${message}`);
+    const assignNullable = (key, valid, message) => {
+        if (!has(key))
+            return;
+        const value = root[key];
+        if (value == null) {
+            config[key] = null;
+            sources[key] = source;
         }
         else {
-            warnings.push(`layout must be one of ${WINDOW_LAYOUTS.join(", ")}; ignoring "${String(root.layout)}".`);
+            const normalized = valid(value);
+            if (normalized === undefined)
+                warn(message(value));
+            else {
+                config[key] = normalized;
+                sources[key] = source;
+            }
         }
-    }
-    let profile = null;
-    if (root.profile != null) {
-        const value = String(root.profile).trim();
-        if (value === "") {
-            warnings.push("profile is empty; ignoring it.");
+    };
+    assignNullable("lead", (value) => typeof value === "string" && value.trim() ? value.trim() : undefined, (value) => `lead must be a non-empty command string; ignoring "${String(value)}".`);
+    assignNullable("placement", (value) => value === "split" || value === "window" ? value : undefined, (value) => `placement must be "split" or "window"; ignoring "${String(value)}".`);
+    assignNullable("layout", (value) => isWindowLayout(value) ? value : undefined, (value) => `layout must be one of ${WINDOW_LAYOUTS.join(", ")}; ignoring "${String(value)}".`);
+    assignNullable("profile", (value) => {
+        const name = String(value).trim();
+        return name !== "" && (name === NO_PROFILE || isValidProfileName(name)) ? name : undefined;
+    }, (value) => typeof value === "string" && value.trim() === ""
+        ? "profile is empty; ignoring it."
+        : `profile "${String(value).trim()}" is not a valid profile name (letters, digits, dot, dash, underscore); ignoring it.`);
+    assignNullable("context_checkpoint_percent", (value) => typeof value === "number" && Number.isInteger(value) && value >= 1 && value <= 100 ? value : undefined, () => "context_checkpoint_percent must be an integer from 1 through 100; ignoring it.");
+    if (has("lead_turn_budget")) {
+        const value = root.lead_turn_budget;
+        if (value == null) {
+            config.lead_turn_budget = null;
+            sources.lead_turn_budget = source;
         }
-        else if (value !== NO_PROFILE && !isValidProfileName(value)) {
-            warnings.push(`profile "${value}" is not a valid profile name (letters, digits, dot, dash, underscore); ignoring it.`);
+        else if (isMapping(value) && typeof value.warn === "number" && Number.isInteger(value.warn) && value.warn > 0 &&
+            typeof value.stop === "number" && Number.isInteger(value.stop) && value.stop > value.warn) {
+            config.lead_turn_budget = { warn: value.warn, stop: value.stop };
+            sources.lead_turn_budget = source;
         }
         else {
-            profile = value;
+            warn("lead_turn_budget must contain positive integer warn and stop values, with stop greater than warn; ignoring it.");
         }
     }
-    let agents = null;
-    if (root.agents != null) {
-        if (!Array.isArray(root.agents)) {
-            warnings.push("agents must be a list of harness names; ignoring it.");
+    if (has("dashboard")) {
+        const value = root.dashboard;
+        if (value == null) {
+            config.dashboard = false;
+            sources.dashboard = source;
         }
-        else {
-            const known = harnessNames();
-            const valid = [];
-            for (const entry of root.agents) {
-                const value = typeof entry === "string" ? entry.trim() : "";
-                if (value === "") {
-                    warnings.push("agents entry must be a non-empty harness name; skipped.");
-                }
-                else if (!known.includes(value)) {
-                    warnings.push(`agents: "${value}" is not a known harness (${known.join(", ")}); ignoring it.`);
-                }
-                else {
-                    valid.push(value);
-                }
-            }
-            agents = valid.length > 0 ? valid : null;
+        else if (typeof value === "boolean") {
+            config.dashboard = value;
+            sources.dashboard = source;
         }
+        else
+            warn(`dashboard must be true or false; ignoring "${String(value)}".`);
     }
-    const review_tags = [];
-    if (root.review_tags != null) {
-        if (!Array.isArray(root.review_tags)) {
-            warnings.push("review_tags must be a list of todo tags; ignoring it.");
+    if (has("agents")) {
+        const value = root.agents;
+        if (value == null) {
+            config.agents = null;
+            sources.agents = source;
         }
-        else {
-            for (const entry of root.review_tags) {
-                const value = typeof entry === "string" ? entry.trim() : "";
-                if (value === "") {
-                    warnings.push("review_tags entry must be a non-empty tag; skipped.");
-                }
-                else if (!review_tags.includes(value)) {
-                    review_tags.push(value);
-                }
+        else if (Array.isArray(value)) {
+            const known = harnessNames();
+            const valid = [];
+            for (const entry of value) {
+                const name = typeof entry === "string" ? entry.trim() : "";
+                if (!name)
+                    warn("agents entry must be a non-empty harness name; skipped.");
+                else if (!known.includes(name))
+                    warn(`agents: "${name}" is not a known harness (${known.join(", ")}); ignoring it.`);
+                else
+                    valid.push(name);
             }
+            config.agents = valid.length ? valid : null;
+            sources.agents = source;
         }
+        else
+            warn("agents must be a list of harness names; ignoring it.");
     }
-    let lead_branches = null;
-    if (root.lead_branches != null) {
-        const raw = Array.isArray(root.lead_branches) ? root.lead_branches : null;
-        const branches = raw
-            ?.filter((b) => typeof b === "string" && b.trim() !== "")
-            .map((b) => b.trim());
-        if (branches && branches.length === raw.length) {
-            lead_branches = branches;
+    if (has("lead_branches")) {
+        const value = root.lead_branches;
+        if (value == null) {
+            config.lead_branches = null;
+            sources.lead_branches = source;
         }
-        else {
-            warnings.push("lead_branches must be a list of branch names; ignoring it.");
+        else if (Array.isArray(value) && value.every((item) => typeof item === "string" && item.trim() !== "")) {
+            config.lead_branches = value.map((item) => item.trim());
+            sources.lead_branches = source;
         }
+        else
+            warn("lead_branches must be a list of branch names; ignoring it.");
     }
-    let dashboard = false;
-    if (root.dashboard != null) {
-        if (typeof root.dashboard === "boolean") {
-            dashboard = root.dashboard;
-        }
-        else {
-            warnings.push(`dashboard must be true or false; ignoring "${String(root.dashboard)}".`);
+    if (has("first_message")) {
+        const value = root.first_message;
+        if (value == null || typeof value === "string") {
+            config.first_message = value ?? "";
+            sources.first_message = source;
         }
+        else
+            warn("first_message must be a string; ignoring it.");
     }
-    const vars = {};
-    if (root.vars != null) {
-        if (typeof root.vars !== "object" || Array.isArray(root.vars)) {
-            warnings.push("vars must be a mapping of name to value; ignoring it.");
+    if (has("vars")) {
+        const value = root.vars;
+        if (value == null) {
+            for (const key of Object.keys(config.vars))
+                sources[`vars.${key}`] = source;
+            config.vars = {};
+            sources.vars = source;
         }
-        else {
-            for (const [key, value] of Object.entries(root.vars)) {
-                if (value == null || typeof value === "object") {
-                    warnings.push(`var "${key}" must be a scalar; skipped.`);
-                    continue;
+        else if (isMapping(value)) {
+            for (const [key, item] of Object.entries(value)) {
+                if (item == null) {
+                    delete config.vars[key];
+                    sources[`vars.${key}`] = source;
+                    sources.vars = source;
+                }
+                else if (typeof item === "object") {
+                    warn(`var "${key}" must be a scalar; skipped.`);
+                }
+                else {
+                    config.vars[key] = String(item);
+                    sources[`vars.${key}`] = source;
+                    sources.vars = source;
                 }
-                vars[key] = String(value);
             }
         }
+        else
+            warn("vars must be a mapping of name to value; ignoring it.");
     }
-    const processes = {};
-    const rawProcesses = root.processes;
-    if (rawProcesses != null) {
-        if (typeof rawProcesses !== "object") {
-            warnings.push("hive.yml `processes` must be a mapping of name to command.");
-        }
-        else {
-            for (const [name, value] of Object.entries(rawProcesses)) {
-                if (typeof value === "string" && value.trim() !== "") {
-                    processes[name] = { command: value.trim(), dir: null, auto_start: true, visible: true, env: {} };
-                    continue;
-                }
-                if (value == null || typeof value !== "object") {
-                    warnings.push(`Process "${name}" needs a command string; skipped.`);
-                    continue;
-                }
-                const p = value;
-                if (typeof p.command !== "string" || p.command.trim() === "") {
-                    warnings.push(`Process "${name}" has no command; skipped.`);
-                    continue;
-                }
-                const dirValue = p.dir ?? p.working_dir;
-                let visible = true;
-                if (p.visible != null) {
-                    if (typeof p.visible === "boolean") {
-                        visible = p.visible;
-                    }
-                    else {
-                        warnings.push(`Process "${name}": visible must be true or false; ignoring "${String(p.visible)}".`);
-                    }
-                }
-                const env = {};
-                if (p.env != null && typeof p.env === "object") {
-                    for (const [k, v] of Object.entries(p.env)) {
-                        env[k] = String(v);
-                    }
-                }
-                processes[name] = {
-                    command: p.command.trim(),
-                    dir: typeof dirValue === "string" && dirValue.trim() !== "" ? dirValue.trim() : null,
-                    auto_start: p.auto_start !== false,
-                    visible,
-                    env,
-                };
+    if (has("processes")) {
+        if (source === "global")
+            warn("global hive.yml cannot define `processes`; only project commands can be trusted.");
+        else if (root.processes != null) {
+            const processes = parseProcesses(root.processes, path, warnings);
+            if (processes != null) {
+                config.processes = processes;
+                sources.processes = source;
             }
         }
     }
+    for (const key of ["attach", "autoAttach"]) {
+        if (source === "project" && has(key))
+            warn(`${key} is global-only; ignoring it in project hive.yml.`);
+    }
+    if (has("review_tags"))
+        warn("review_tags is no longer used by hive; remove it from hive.yml.");
+}
+export function resolveHiveConfig(projectPath) {
+    const global = readGlobalConfig();
+    const warnings = [...global.warnings];
+    const config = createBuiltInProjectYml();
+    const sources = Object.fromEntries(PROJECT_YML_KEYS.map((key) => [key, "built-in"]));
+    if (global.root)
+        applyLayer(global.root, globalConfigPath(), "global", config, sources, warnings);
+    let projectValid = false;
+    if (projectPath != null) {
+        const file = resolve(projectPath, "hive.yml");
+        const project = parseFile(file, warnings);
+        if (project) {
+            projectValid = true;
+            applyLayer(project, file, "project", config, sources, warnings);
+        }
+    }
+    const attachResult = resolveAttachSetting("attach", global.root, global.legacy, warnings);
+    const autoAttachResult = resolveAttachSetting("autoAttach", global.root, global.legacy, warnings);
     return {
-        config: {
-            lead,
-            placement,
-            layout,
-            profile,
-            agents,
-            review_tags,
-            lead_branches,
-            context_checkpoint_percent,
-            lead_turn_budget,
-            dashboard,
-            vars,
-            processes,
-        },
+        config: global.root || projectValid ? config : null,
         warnings,
+        sources,
+        attach: attachResult,
+        autoAttach: autoAttachResult,
     };
 }
+export function loadProjectYml(projectPath) {
+    return resolveHiveConfig(projectPath);
+}
 export function configHash(name, command, dir, env) {
     return createHash("sha256")
         .update(JSON.stringify([name, command, dir, env]))

package/dist/queenAudit.js

@@ -0,0 +1,118 @@
+import { captureQueenWriteIdentity, effectiveProjectId, isQueenLead } from "./context.js";
+import { db } from "./db.js";
+import { cutToUnitBudget, flatten } from "./slug.js";
+export const QUEEN_AUDIT_SUMMARY_MAX = 160;
+export const QUEEN_AUDIT_DEFAULT_LIMIT = 20;
+export const QUEEN_AUDIT_MAX_LIMIT = 100;
+export const QUEEN_AUDIT_RETENTION = "-30 days";
+export const QUEEN_AUDIT_MAX_ROWS = 20_000;
+function resource(type, value) {
+    return typeof value === "number" && Number.isInteger(value) && value > 0 ? { type, id: value } : null;
+}
+export const QUEEN_AUDIT_OPERATIONS = {
+    todo_create: {
+        mode: "database",
+        resource: (r) => resource("todo", r.todo_id),
+        summary: (a) => String(a.title),
+    },
+    todo_comment: {
+        mode: "database",
+        resource: (r) => resource("todo_comment", r.comment_id),
+        summary: (a) => `todo #${a.todo_id}: ${a.body}`,
+    },
+    wake_set: {
+        mode: "database",
+        resource: (r) => resource("wake", r.wake_id),
+        summary: (a, r) => `to ${r.deliver_to}: ${a.body}`,
+    },
+    wake_when_idle: {
+        mode: "database",
+        resource: (r) => r.status === "already_satisfied" ? null : resource("wake", r.wake_id),
+        summary: (a, r) => `${a.mode ?? "any"} to ${r.deliver_to}: ${a.body}`,
+    },
+    wake_update: {
+        mode: "database",
+        resource: (r) => r.updated === true ? resource("wake", r.wake_id) : null,
+        summary: (a) => `changed ${["body", "delay_seconds", "repeat_every_seconds"].filter((key) => a[key] !== undefined).join(", ")}${a.body === undefined ? "" : `: ${a.body}`}`,
+    },
+    wake_cancel: {
+        mode: "database",
+        resource: (r) => r.cancelled === true ? resource("wake", r.wake_id) : null,
+        summary: (_a, r) => `cancelled; notices ${r.cancelled_notices ?? 0}`,
+    },
+    agent_send: {
+        mode: "external",
+        resource: (r) => r.sent === true ? resource("agent", r.agent_id) : null,
+        summary: (a, r) => `agent #${r.agent_id} ${a.submit === false ? "pasted without submit" : "submitted"}: ${a.text}`,
+    },
+    "hive lead": {
+        mode: "external",
+        resource: (r) => r.disposition === "started" || r.disposition === "adopted" ? resource("agent", r.agent_id) : null,
+        summary: (a, r) => `${r.disposition} lead #${r.agent_id}${a.detach ? " detached" : ""}`,
+    },
+};
+function descriptor(operation) {
+    const found = Object.hasOwn(QUEEN_AUDIT_OPERATIONS, operation) ? QUEEN_AUDIT_OPERATIONS[operation] : undefined;
+    if (!found)
+        throw new Error(`[queen_audit:missing-coverage] ${operation} has no audit descriptor`);
+    return found;
+}
+function insertAudit(operation, targetProjectId, args, receipt, identity) {
+    const spec = descriptor(operation);
+    const touched = spec.resource(receipt);
+    if (!touched)
+        return;
+    const text = flatten(spec.summary(args, receipt));
+    const summary = text.length <= QUEEN_AUDIT_SUMMARY_MAX ? text : cutToUnitBudget(text, QUEEN_AUDIT_SUMMARY_MAX - 1) + "…";
+    db.prepare(`INSERT INTO queen_audit (actor_id, home_project_id, target_project_id, operation, resource_type, resource_id, summary)
+     VALUES (?, ?, ?, ?, ?, ?, ?)`).run(identity.actor_id, identity.home_project_id, targetProjectId, operation, touched.type, touched.id, summary);
+}
+export function commitQueenStateWrite(operation, targetProjectId, args, mutate) {
+    const identity = captureQueenWriteIdentity(targetProjectId);
+    if (!identity)
+        return mutate();
+    const spec = descriptor(operation);
+    if (spec.mode !== "database")
+        throw new Error(`[queen_audit:wrong-mode] ${operation} is not a database write`);
+    return db.transaction(() => {
+        const receipt = mutate();
+        insertAudit(operation, targetProjectId, args, receipt, identity);
+        return receipt;
+    }).immediate();
+}
+export function confirmQueenWrite(operation, targetProjectId, args, receipt, identity = captureQueenWriteIdentity(targetProjectId)) {
+    if (!identity)
+        return;
+    try {
+        insertAudit(operation, targetProjectId, args, receipt, identity);
+    }
+    catch (e) {
+        if (operation !== "agent_send")
+            throw e;
+        throw new Error(`[queen_audit:write-completed-audit-failed] agent #${receipt.agent_id}: the text already landed. Do not resend blindly. ${e instanceof Error ? e.message : String(e)}`);
+    }
+}
+function positiveInteger(value, name) {
+    if (!Number.isInteger(value) || value <= 0)
+        throw new Error(`${name} must be a positive integer`);
+}
+export function recentQueenAudit(limit) {
+    return db.prepare("SELECT * FROM queen_audit ORDER BY id DESC LIMIT ?").all(limit);
+}
+export function listQueenAudit(options = {}, homeProjectId) {
+    const requestedLimit = options.limit ?? QUEEN_AUDIT_DEFAULT_LIMIT;
+    positiveInteger(requestedLimit, "limit");
+    if (options.project_id !== undefined)
+        positiveInteger(options.project_id, "project_id");
+    const target = options.project_id === undefined ? null : effectiveProjectId(options.project_id);
+    const queen = isQueenLead();
+    const home = queen ? null : homeProjectId ?? effectiveProjectId();
+    if (!queen && target !== null && target !== home)
+        throw new Error("Queen audit access is limited to your own project");
+    const projectId = target ?? home;
+    const limit = Math.min(requestedLimit, QUEEN_AUDIT_MAX_LIMIT);
+    const entries = (projectId === null
+        ? db.prepare("SELECT * FROM queen_audit ORDER BY id DESC LIMIT ?").all(limit)
+        : db.prepare("SELECT * FROM queen_audit WHERE target_project_id = ? ORDER BY id DESC LIMIT ?").all(projectId, limit));
+    return { entries, limit, project_id: projectId };
+}