@codemem/server 0.46.0-beta.2 → 0.46.0-rc.1

package/dist/application/sync-status.d.ts

@@ -34,6 +34,13 @@ export interface SyncStatusInput {
     getSyncRuntimeStatus?: () => SyncRuntimeStatus | null;
     operations: SyncStatusOperations;
 }
+interface PeerStatusReadModel {
+    items: Record<string, unknown>[];
+    byId: Record<string, unknown>;
+}
+export declare function safeDaemonIssueCode(state: string, lastError: string | null | undefined): "coordinator_timeout" | "coordinator_error" | null;
+export declare function latestFailedPeerIds(store: MemoryStore, activePeerIds: Set<string>, isRecentIso: (value: unknown) => boolean): Set<string>;
+export declare function degradedDaemonState(peers: PeerStatusReadModel, failedPeerIds: Set<string>): string;
 export declare function buildSyncStatusResponse(input: SyncStatusInput): Promise<Record<string, unknown>>;
 export {};
 //# sourceMappingURL=sync-status.d.ts.map

package/dist/application/sync-status.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-status.d.ts","sourceRoot":"","sources":["../../src/application/sync-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,yBAAyB,EAEzB,2BAA2B,EAE3B,KAAK,gCAAgC,EAErC,mBAAmB,EACnB,KAAK,WAAW,EAGhB,MAAM,eAAe,CAAC;AAKvB,MAAM,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;IACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF,KAAK,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC/D,KAAK,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;AAarE,MAAM,WAAW,oBAAoB;IACpC,kBAAkB,EAAE,CACnB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,eAAe,EAAE,OAAO,KACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACzC,yBAAyB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,uCAAuC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IACzE,UAAU,EAAE,CACX,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAAe,EAAE,OAAO,EACxB,gBAAgB,EAAE,cAAc,EAChC,eAAe,EAAE,eAAe,EAChC,aAAa,EAAE,MAAM,GAAG,IAAI,KACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,iBAAiB,EAAE,CAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAAe,EAAE,OAAO,EACxB,SAAS,CAAC,EAAE,MAAM,EAAE,KAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7E,aAAa,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,cAAc,CAAC;IACtD,2BAA2B,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,eAAe,CAAC;IACrE,uBAAuB,EAAE,CACxB,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,EAC7D,eAAe,EAAE,OAAO,KACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,8BAA8B,EAAE,CAC/B,WAAW,EAAE,UAAU,CAAC,OAAO,2BAA2B,CAAC,EAC3D,eAAe,EAAE,OAAO,KACpB,OAAO,CAAC;IACb,wBAAwB,EAAE,CACzB,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,EAC5C,eAAe,EAAE,OAAO,KACpB,OAAO,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IACtD,UAAU,EAAE,oBAAoB,CAAC;CACjC;AAyYD,wBAAsB,uBAAuB,CAC5C,KAAK,EAAE,eAAe,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CA4ClC"}
+{"version":3,"file":"sync-status.d.ts","sourceRoot":"","sources":["../../src/application/sync-status.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,yBAAyB,EAEzB,2BAA2B,EAE3B,KAAK,gCAAgC,EAErC,mBAAmB,EACnB,KAAK,WAAW,EAGhB,MAAM,eAAe,CAAC;AAKvB,MAAM,MAAM,iBAAiB,GAAG;IAC/B,KAAK,EACF,UAAU,GACV,SAAS,GACT,UAAU,GACV,OAAO,GACP,UAAU,GACV,iBAAiB,GACjB,iBAAiB,GACjB,IAAI,CAAC;IACR,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAWF,KAAK,cAAc,GAAG,GAAG,CAAC,MAAM,EAAE;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAC/D,KAAK,eAAe,GAAG,GAAG,CAAC,MAAM,EAAE,gCAAgC,CAAC,CAAC;AAarE,MAAM,WAAW,oBAAoB;IACpC,kBAAkB,EAAE,CACnB,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,MAAM,GAAG,IAAI,EAC5B,eAAe,EAAE,OAAO,KACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;IACzC,yBAAyB,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,uCAAuC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,OAAO,CAAC;IACzE,UAAU,EAAE,CACX,KAAK,EAAE,WAAW,EAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAAe,EAAE,OAAO,EACxB,gBAAgB,EAAE,cAAc,EAChC,eAAe,EAAE,eAAe,EAChC,aAAa,EAAE,MAAM,GAAG,IAAI,KACxB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,iBAAiB,EAAE,CAClB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC5B,eAAe,EAAE,OAAO,EACxB,SAAS,CAAC,EAAE,MAAM,EAAE,KAChB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE,iBAAiB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC;IAC7E,aAAa,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,cAAc,CAAC;IACtD,2BAA2B,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,eAAe,CAAC;IACrE,uBAAuB,EAAE,CACxB,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO,yBAAyB,CAAC,CAAC,EAC7D,eAAe,EAAE,OAAO,KACpB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC7B,8BAA8B,EAAE,CAC/B,WAAW,EAAE,UAAU,CAAC,OAAO,2BAA2B,CAAC,EAC3D,eAAe,EAAE,OAAO,KACpB,OAAO,CAAC;IACb,wBAAwB,EAAE,CACzB,IAAI,EAAE,UAAU,CAAC,OAAO,mBAAmB,CAAC,EAC5C,eAAe,EAAE,OAAO,KACpB,OAAO,CAAC;CACb;AAED,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,WAAW,CAAC;IACnB,eAAe,EAAE,OAAO,CAAC;IACzB,mBAAmB,EAAE,OAAO,CAAC;IAC7B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,oBAAoB,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAC;IACtD,UAAU,EAAE,oBAAoB,CAAC;CACjC;AAqBD,UAAU,mBAAmB;IAC5B,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC9B;AAmGD,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,MAAM,EACb,SAAS,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,qBAAqB,GAAG,mBAAmB,GAAG,IAAI,CAMpD;AA4MD,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,WAAW,EAClB,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,EAC1B,WAAW,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACtC,GAAG,CAAC,MAAM,CAAC,CA2Bb;AAmBD,wBAAgB,mBAAmB,CAClC,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,GAAG,CAAC,MAAM,CAAC,GACxB,MAAM,CAYR;AAoCD,wBAAsB,uBAAuB,CAC5C,KAAK,EAAE,eAAe,GACpB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAsDlC"}

package/dist/index.js

@@ -4151,6 +4151,14 @@ async function reconcileRecipientPolicyProjectsOperation(store, options) {
 }
 //#endregion
 //#region src/application/sync-status.ts
+var SAFE_RUNTIME_DETAILS = {
+	starting: "Running initial sync in background",
+	stopping: "Stopping sync daemon",
+	error: "Background sync failed. Open diagnostics for details.",
+	rebootstrapping: "Restoring sync baseline",
+	needs_attention: "Sync needs attention",
+	disabled: "Sync is off"
+};
 function traceSync(label, operation) {
 	if (process.env.CODEMEM_TRACE_SYNC_STATUS !== "1") return operation();
 	const startedAt = Date.now();
@@ -4215,6 +4223,10 @@ function initialDaemonState(config, rows, daemonRunning) {
 	if (!daemonRunning) return "stopped";
 	return "ok";
 }
+function safeDaemonIssueCode(state, lastError) {
+	if (state !== "error" || !lastError?.includes("coordinator enrollment maintenance failed")) return null;
+	return lastError.includes(":request_timeout") || lastError.endsWith(" (coordinator_timeout)") ? "coordinator_timeout" : "coordinator_error";
+}
 function retentionPayload(config, rows, retainedFloor) {
 	const state = rows.retention;
 	return {
@@ -4282,8 +4294,9 @@ function readBaseStatus(input) {
 		state = runtime.phase;
 		statusPayload.daemon_state = state;
 		statusPayload.daemon_running = runtime.phase === "starting" || running;
-		statusPayload.daemon_detail = runtime.detail ?? detail;
+		statusPayload.daemon_detail = input.showDiagnostics ? runtime.detail ?? detail : SAFE_RUNTIME_DETAILS[runtime.phase] ?? null;
 	}
+	statusPayload.daemon_issue_code = safeDaemonIssueCode(state, runtime?.phase === "error" ? null : rows.daemon?.last_error);
 	return {
 		config,
 		localDeviceId: rows.device?.device_id ?? null,
@@ -4340,16 +4353,35 @@ function readAttemptStatus(input) {
 		latestError: String(rows[0]?.error || "").trim()
 	};
 }
+function latestFailedPeerIds(store, activePeerIds, isRecentIso) {
+	const cutoff = (/* @__PURE__ */ new Date(Date.now() - 6e5)).toISOString();
+	const now = (/* @__PURE__ */ new Date()).toISOString();
+	return traceSync("recentPeerFailures", () => {
+		const rows = store.db.prepare(`SELECT peer_device_id, ok, error, finished_at
+				 FROM sync_attempts
+				 WHERE (CASE WHEN finished_at IS NULL THEN started_at ELSE finished_at END) BETWEEN ? AND ?
+				 ORDER BY (CASE WHEN finished_at IS NULL THEN started_at ELSE finished_at END) DESC, id DESC`).iterate(cutoff, now);
+		const seen = /* @__PURE__ */ new Set();
+		const failed = /* @__PURE__ */ new Set();
+		for (const row of rows) {
+			if (!activePeerIds.has(row.peer_device_id) || seen.has(row.peer_device_id)) continue;
+			if (!isRecentIso(row.finished_at)) continue;
+			seen.add(row.peer_device_id);
+			if (!row.ok && row.error) failed.add(row.peer_device_id);
+		}
+		return failed;
+	});
+}
 function peerStates(peers) {
 	return new Set(peers.items.map((peer) => String(peer.status?.peer_state ?? "")));
 }
 function allPeersOffline(peers) {
 	return peers.items.length > 0 && peers.items.every((peer) => String(peer.status?.peer_state ?? "") === "offline");
 }
-function degradedDaemonState(input, peers, attempts) {
+function degradedDaemonState(peers, failedPeerIds) {
 	const states = peerStates(peers);
 	const allOffline = allPeersOffline(peers);
-	if (Boolean(attempts.items[0] && attempts.items[0].status === "error" && input.operations.isRecentIso(attempts.items[0].finished_at))) {
+	if (failedPeerIds.size > 0) {
 		if (states.has("online") || states.has("degraded")) return "degraded";
 		if (allOffline) return "offline-peers";
 		if (peers.items.length > 0) return "stale";
@@ -4359,14 +4391,14 @@ function degradedDaemonState(input, peers, attempts) {
 	if (peers.items.length > 0 && !states.has("online")) return "stale";
 	return "ok";
 }
-function applyDerivedDaemonState(input, base, peers, attempts, statusBlock) {
+function applyDerivedDaemonState(base, peers, attempts, failedPeerIds, statusBlock) {
 	let state = base.daemonState;
 	if (state === "ok" && attempts.latestError.startsWith("needs_attention:")) {
 		state = "needs_attention";
 		const detail = attempts.latestError.replace(/^needs_attention:/, "");
 		base.statusPayload.daemon_detail = detail;
 		statusBlock.daemon_detail = detail;
-	} else if (state === "ok") state = degradedDaemonState(input, peers, attempts);
+	} else if (state === "ok") state = degradedDaemonState(peers, failedPeerIds);
 	base.statusPayload.daemon_state = state;
 	statusBlock.daemon_state = state;
 }
@@ -4384,6 +4416,12 @@ async function buildSyncStatusResponse(input) {
 	const coordinator = traceSync("coordinator", () => input.operations.redactCoordinatorStatus(coordinatorSnapshot, input.showDiagnostics));
 	const peers = readPeerStatus(input, base.localDeviceId);
 	const attempts = readAttemptStatus(input);
+	const activePeerIds = new Set(peers.items.map((peer) => String(peer.peer_device_id ?? "")));
+	const failedPeerIds = latestFailedPeerIds(input.store, activePeerIds, input.operations.isRecentIso);
+	for (const peer of peers.items) {
+		const status = peer.status;
+		status.recent_failed_attempt = failedPeerIds.has(String(peer.peer_device_id ?? ""));
+	}
 	const statusBlock = {
 		...base.statusPayload,
 		background_maintenance: input.operations.summarizeMaintenanceJobs(listMaintenanceJobs(input.store.db), input.showDiagnostics),
@@ -4397,7 +4435,7 @@ async function buildSyncStatusResponse(input) {
 	const sharingReview = traceSync("sharingReview", () => input.store.sharingReviewSummary(input.project));
 	const recipientPolicyReconciliation = traceSync("recipientPolicyReconciliation", () => input.operations.listRecipientPolicyReconciliationStatus(input.store));
 	const joinRequests = await readJoinRequests(input, base.config);
-	applyDerivedDaemonState(input, base, peers, attempts, statusBlock);
+	applyDerivedDaemonState(base, peers, attempts, failedPeerIds, statusBlock);
 	const response = {
 		...base.statusPayload,
 		status: statusBlock,
@@ -7429,6 +7467,21 @@ function recipientPolicyPresenceCapabilityExpiresAt(enrollment, observedAt) {
 function recipientPolicyEnrollmentValueIsValid(value) {
 	return typeof value === "string" && value.length > 0 && value === value.trim();
 }
+function recipientPolicyPresenceCapabilityExpiries(enrollments, observedAt) {
+	return new Map(enrollments.map((enrollment) => [enrollment.device_id, recipientPolicyPresenceCapabilityExpiresAt(enrollment, observedAt)]));
+}
+function recipientPolicySnapshotUnavailable(stage, error) {
+	console.warn(`[sync] recipient policy coordinator snapshot failed: stage=${stage} code=${coordinatorEnrollmentFailureCode(error)}`);
+	throw new Error("recipient_policy_snapshot_not_fresh");
+}
+async function readRecipientPolicyCoordinatorSnapshot(read) {
+	for (let attempt = 0;; attempt++) try {
+		return await read();
+	} catch (error) {
+		if (!(error instanceof RemoteCoordinatorRequestError) || error.status !== 429 || attempt >= 2) throw error;
+		await new Promise((resolve) => setTimeout(resolve, (attempt + 1) * 1e3));
+	}
+}
 function createRecipientPolicyReconcilerEffects(store, options = {}) {
 	const config = options.config ?? readCoordinatorSyncConfig();
 	const now = options.now ?? (() => (/* @__PURE__ */ new Date()).toISOString());
@@ -7470,15 +7523,13 @@ function createRecipientPolicyReconcilerEffects(store, options = {}) {
 		now,
 		snapshot: async ({ scopeId }) => {
 			const targetOptions = coordinatorOptions(scopeId);
-			const snapshotMemberships = (await coordinatorListScopeMembershipsAction({
+			const snapshotMemberships = (await readRecipientPolicyCoordinatorSnapshot(() => coordinatorListScopeMembershipsAction({
 				groupId: targetOptions.groupId,
 				scopeId,
 				includeRevoked: true,
 				remoteUrl: targetOptions.remoteUrl,
 				adminSecret: targetOptions.adminSecret
-			}).catch(() => {
-				throw new Error("recipient_policy_snapshot_not_fresh");
-			})).map((membership) => {
+			})).catch((error) => recipientPolicySnapshotUnavailable("scope_memberships", error))).map((membership) => {
 				if (typeof membership.device_id !== "string" || membership.status !== "active" && membership.status !== "revoked") throw new Error("recipient_policy_snapshot_invalid");
 				const status = membership.status;
 				return {
@@ -7499,15 +7550,13 @@ function createRecipientPolicyReconcilerEffects(store, options = {}) {
 		listBoundaryEnrollments: async ({ scopeId }) => {
 			const targetOptions = coordinatorOptions(scopeId);
 			const observedAt = now();
-			const enrollments = await listDevices({
+			const enrollments = await readRecipientPolicyCoordinatorSnapshot(() => listDevices({
 				groupId: targetOptions.groupId,
 				includeDisabled: true,
 				remoteUrl: targetOptions.remoteUrl,
 				adminSecret: targetOptions.adminSecret
-			}).catch(() => {
-				throw new Error("recipient_policy_snapshot_not_fresh");
-			});
-			const presenceCapabilityExpiries = new Map(enrollments.map((enrollment) => [enrollment.device_id, recipientPolicyPresenceCapabilityExpiresAt(enrollment, observedAt)]));
+			})).catch((error) => recipientPolicySnapshotUnavailable("device_enrollments", error));
+			const presenceCapabilityExpiries = recipientPolicyPresenceCapabilityExpiries(enrollments, observedAt);
 			const mapped = enrollments.map((enrollment) => {
 				if (enrollment.group_id !== targetOptions.groupId || !recipientPolicyEnrollmentValueIsValid(enrollment.device_id) || !recipientPolicyEnrollmentValueIsValid(enrollment.public_key) || !recipientPolicyEnrollmentValueIsValid(enrollment.fingerprint) || fingerprintPublicKey(enrollment.public_key) !== enrollment.fingerprint || enrollment.enabled !== 0 && enrollment.enabled !== 1 || enrollment.identity_id !== null && !recipientPolicyEnrollmentValueIsValid(enrollment.identity_id)) throw new Error("recipient_policy_snapshot_invalid");
 				return {