@corenel/sidecar 0.4.3 → 0.4.4

package/dist/cli.js

@@ -22606,6 +22606,26 @@ async function loadOrCreateToken() {
   return token;
 }
 
+// ../harness/redact.ts
+var MASK = "[redacted]";
+var KEY_PATTERNS = [
+  /\bsk-[A-Za-z0-9_*-]{8,}/g,
+  // OpenAI + Anthropic: sk-, sk-proj-, sk-svcacct-, sk-ant-
+  /\bgsk_[A-Za-z0-9_*-]{8,}/g,
+  // Groq
+  /\bAIza[A-Za-z0-9_*-]{8,}/g,
+  // Google
+  /\bxai-[A-Za-z0-9_*-]{8,}/g
+  // xAI
+];
+var BEARER = /\bBearer\s+[A-Za-z0-9._*-]+/gi;
+function redactSecrets(text) {
+  let out = text;
+  for (const re2 of KEY_PATTERNS) out = out.replace(re2, MASK);
+  out = out.replace(BEARER, `Bearer ${MASK}`);
+  return out;
+}
+
 // ../harness/api/client.ts
 var ApiError = class extends Error {
   status;
@@ -22646,7 +22666,7 @@ var CorenelApiClient = class {
       body = text;
     }
     if (!res.ok) {
-      const message = String(rec(body).error || res.statusText || `HTTP ${res.status}`);
+      const message = redactSecrets(String(rec(body).error || res.statusText || `HTTP ${res.status}`));
       if (res.status === 409 && "epoch" in rec(body)) {
         throw new LeaseConflict(res.status, message, body, Number(rec(body).epoch));
       }
@@ -23551,6 +23571,19 @@ var MAX_CHUNKS = 400;
 var MAX_CHARS = 2e5;
 var KEEP_EXITED = 20;
 var KILL_GRACE_MS = 3e3;
+function signalTree(child, sig) {
+  if (process.platform !== "win32" && typeof child.pid === "number") {
+    try {
+      process.kill(-child.pid, sig);
+      return;
+    } catch {
+    }
+  }
+  try {
+    child.kill(sig);
+  } catch {
+  }
+}
 function createNodeProcs(opts) {
   const entries = /* @__PURE__ */ new Map();
   const subs = /* @__PURE__ */ new Set();
@@ -23594,7 +23627,12 @@ function createNodeProcs(opts) {
       const isWin = process.platform === "win32";
       const shell = isWin ? "cmd.exe" : "/bin/sh";
       const shellArgs = isWin ? ["/d", "/s", "/c", line] : ["-c", line];
-      const child = spawn2(shell, shellArgs, { cwd: dir, windowsHide: true, stdio: "pipe" });
+      const child = spawn2(shell, shellArgs, {
+        cwd: dir,
+        windowsHide: true,
+        stdio: "pipe",
+        detached: !isWin
+      });
       const info = {
         procId: nextId(),
         command: line,
@@ -23651,9 +23689,9 @@ function createNodeProcs(opts) {
       if (!e2) throw new Error(`no such process: ${procId}`);
       if (!e2.info.running || !e2.child) return;
       const child = e2.child;
-      child.kill("SIGTERM");
+      signalTree(child, "SIGTERM");
       const timer = setTimeout(() => {
-        if (e2.info.running) child.kill("SIGKILL");
+        if (e2.info.running) signalTree(child, "SIGKILL");
       }, KILL_GRACE_MS);
       timer.unref?.();
       child.once("close", () => clearTimeout(timer));
@@ -23667,12 +23705,7 @@ function createNodeProcs(opts) {
     shutdown() {
       closed = true;
       for (const e2 of entries.values()) {
-        if (e2.info.running && e2.child) {
-          try {
-            e2.child.kill("SIGKILL");
-          } catch {
-          }
-        }
+        if (e2.info.running && e2.child) signalTree(e2.child, "SIGKILL");
       }
       subs.clear();
     }
@@ -28384,17 +28417,19 @@ async function workspaceRootsFor(dirName2, hostDir) {
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
     if (!WORKSPACE_ID_RE.test(entry.name)) continue;
+    const wsDir = join8(hostDir, WORKSPACES_SEG, entry.name);
     out.push({
       owner: `${dirName2}/ws/${entry.name}`,
-      files: new NodeFileService(join8(hostDir, WORKSPACES_SEG, entry.name)),
-      root: "crew"
+      files: new NodeFileService(wsDir),
+      root: "crew",
+      dir: wsDir
     });
   }
   return out;
 }
 async function listOwnerRoots(stateDir) {
   const roots = [
-    { owner: "", files: new NodeFileService(stateDir), root: "crew" }
+    { owner: "", files: new NodeFileService(stateDir), root: "crew", dir: stateDir }
   ];
   let entries;
   try {
@@ -28411,7 +28446,7 @@ async function listOwnerRoots(stateDir) {
     } catch {
       continue;
     }
-    roots.push({ owner: dirName2, files: new NodeFileService(hostDir), root: "crew" });
+    roots.push({ owner: dirName2, files: new NodeFileService(hostDir), root: "crew", dir: hostDir });
     roots.push(...await workspaceRootsFor(dirName2, hostDir));
   }
   return roots;
@@ -37069,7 +37104,9 @@ async function streamCompletion(client, params, signal, onText) {
   } catch (e2) {
     const err = e2;
     const raw = err?.error;
-    const detail = (typeof raw === "string" ? raw : raw?.error || raw?.message) || err?.message || String(e2);
+    const detail = redactSecrets(
+      String((typeof raw === "string" ? raw : raw?.error || raw?.message) || err?.message || String(e2))
+    );
     const msg = typeof err?.status === "number" ? `Gateway ${err.status}: ${detail}` : detail;
     alog("stream:create-error", msg);
     throw new Error(msg);
@@ -39700,6 +39737,14 @@ function safeForLog(id) {
 function makeHostSync(opts) {
   const log = opts.log ?? (() => {
   });
+  const woke = () => {
+    if (!opts.onWrite) return;
+    try {
+      opts.onWrite();
+    } catch (err) {
+      log(`host-sync: onWrite failed: ${err instanceof Error ? err.message : String(err)}`);
+    }
+  };
   const recordFor = async (clientId) => {
     const rec5 = (await opts.manifest.list())[clientId];
     if (!rec5) throw new Error(`unknown client "${safeForLog(clientId)}" -- no hosts.json entry`);
@@ -39724,12 +39769,14 @@ function makeHostSync(opts) {
       await syncWrite(hostFilesFor(opts.stateDir, rec5.dirName), path, content);
       await ensureMaterialized(clientId, rec5);
       log(`host-sync: wrote ${rec5.dirName}/${path}`);
+      woke();
     },
     async remove(clientId, path) {
       assertSyncPath(path);
       const rec5 = await recordFor(clientId);
       await syncRemove(hostFilesFor(opts.stateDir, rec5.dirName), path);
       log(`host-sync: removed ${rec5.dirName}/${path}`);
+      woke();
     }
   };
 }
@@ -42086,7 +42133,16 @@ async function main() {
   await assertPortFree(probeAddress(args.host), args.port);
   await assertStateDirFree(sidecarSubdir(args.stateDir));
   await checkHostsDrift(args.stateDir, hosts, slog);
-  const hostSync = makeHostSync({ stateDir: args.stateDir, manifest: hosts, log: slog });
+  const hostSync = makeHostSync({
+    stateDir: args.stateDir,
+    manifest: hosts,
+    log: slog,
+    // Same late-bound `core` holder as onScheduleSelf/onRunComplete below: a
+    // synced definition is useless until a clock pass reads it, and with
+    // nothing due the clock sleeps up to 15 minutes. Without this a deployed
+    // schedule looks broken for a quarter of an hour.
+    onWrite: () => core?.wake()
+  });
   const attendance = makeAttendanceRegistry({ log: slog });
   const runs = makeRunHub({ log: slog });
   let core;
@@ -42138,7 +42194,7 @@ async function main() {
   if (args.daemon && runner) {
     const flipped = await runner.reconcilePendingOnBoot();
     if (flipped > 0) slog(`daemon: marked ${flipped} stale pending permission record(s) dead (daemon restarted)`);
-    const hostCrewDirs = (await listOwnerRoots(args.stateDir)).filter((r2) => r2.owner !== "").map((r2) => join15(hostsDirFor(args.stateDir, r2.owner), "crew"));
+    const hostCrewDirs = (await listOwnerRoots(args.stateDir)).filter((r2) => r2.owner !== "").map((r2) => join15(r2.dir, r2.root));
     const watchDirs = [
       join15(args.stateDir, "crew"),
       ...args.roots.map((r2) => join15(r2, stateDirName(), "crew")),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@corenel/sidecar",
-  "version": "0.4.3",
+  "version": "0.4.4",
   "type": "module",
   "license": "Elastic-2.0",
   "description": "Prompd sidecar — a local capability server. Run it next to Prompd (prompd.app) so the browser app can reach your machine: local LLMs (Ollama/LM Studio/vLLM) without CORS, your filesystem, and (opt-in) shell.",
@@ -37,8 +37,8 @@
     "tsx": "^4.19.2",
     "typescript": "^5.9.3",
     "@corenel/protocol": "0.4.2",
-    "@corenel/harness": "0.4.1",
     "@corenel/tools-node": "0.2.2",
+    "@corenel/harness": "0.4.1",
     "@corenel/crew": "0.0.0"
   },
   "scripts": {