@edgehero/pi-dispatch-admin 1.8.0 → 1.9.0

package/dist/index.mjs

@@ -9347,7 +9347,7 @@ var init_import_pi = __esm({
 });
 
 // ../worker/src/docker-run.mjs
-function buildDockerRunArgs({
+function containerSpec({
   image,
   env,
   jobDir,
@@ -9364,21 +9364,44 @@ function buildDockerRunArgs({
   if (!image) throw new Error("docker run: image is required");
   if (!name) throw new Error("docker run: container name is required");
   if (!workspace) throw new Error("docker run: workspace mount is required");
-  const args = ["run", `--name=${name}`, ...ISOLATION_FLAGS, `--memory=${memory}`, `--cpus=${cpus}`];
-  if (network) args.push(`--network=${network}`);
-  args.push(...extraFlags);
-  for (const [k, v] of Object.entries(env ?? {})) {
+  const mounts = [];
+  if (jobDir) mounts.push({ host: jobDir, container: "/job", readOnly: true });
+  mounts.push({ host: workspace, container: "/workspace", readOnly: false });
+  if (outboxDir) mounts.push({ host: outboxDir, container: "/outbox", readOnly: false });
+  if (sessionDir) mounts.push({ host: sessionDir, container: CONTAINER_SESSION_DIR, readOnly: false });
+  if (globalPiDir) mounts.push({ host: globalPiDir, container: CONTAINER_GLOBAL_PI_DIR, readOnly: true });
+  return {
+    image,
+    name,
+    memory,
+    cpus,
+    network,
+    // UNCONDITIONALLY true, and there is deliberately no parameter that can unset it. The boundary is
+    // not a thing a caller opts into -- CONST-ISOLATION-CONTAINER-PER-JOB is why every other flag here
+    // exists -- so the spec is simply unable to describe an unisolated container, and the builder below
+    // refuses one it is handed. A field that could be false would be a way to ask for less.
+    isolated: true,
+    mounts,
+    env,
+    dockerExtra: extraFlags
+  };
+}
+function dockerArgsFromSpec(spec) {
+  if (spec?.isolated !== true) throw new Error("docker run: refusing to build an argv for a spec that is not isolated");
+  const args = ["run", `--name=${spec.name}`, ...ISOLATION_FLAGS, `--memory=${spec.memory}`, `--cpus=${spec.cpus}`];
+  if (spec.network) args.push(`--network=${spec.network}`);
+  args.push(...spec.dockerExtra ?? []);
+  for (const [k, v] of Object.entries(spec.env ?? {})) {
     if (v === void 0 || v === null) continue;
     args.push("-e", `${k}=${v}`);
   }
-  if (jobDir) args.push("-v", `${jobDir}:/job:ro`);
-  args.push("-v", `${workspace}:/workspace`);
-  if (outboxDir) args.push("-v", `${outboxDir}:/outbox`);
-  if (sessionDir) args.push("-v", `${sessionDir}:${CONTAINER_SESSION_DIR}`);
-  if (globalPiDir) args.push("-v", `${globalPiDir}:${CONTAINER_GLOBAL_PI_DIR}:ro`);
-  args.push(image);
+  for (const m of spec.mounts ?? []) args.push("-v", `${m.host}:${m.container}${m.readOnly ? ":ro" : ""}`);
+  args.push(spec.image);
   return args;
 }
+function buildDockerRunArgs(opts) {
+  return dockerArgsFromSpec(containerSpec(opts));
+}
 var CONTAINER_GLOBAL_PI_DIR, CONTAINER_SESSION_DIR, CONTAINER_SESSION_FILE, ISOLATION_FLAGS;
 var init_docker_run = __esm({
   "../worker/src/docker-run.mjs"() {
@@ -40175,10 +40198,11 @@ var init_render = __esm({
 });
 
 // ../worker/src/scheduler-stall-guard.mjs
-var STALL_KEY, STALL_WINDOW_SECONDS;
+var STALL_KEY, stallKey, STALL_WINDOW_SECONDS;
 var init_scheduler_stall_guard = __esm({
   "../worker/src/scheduler-stall-guard.mjs"() {
     STALL_KEY = "pi-dispatch:sched-stalls";
+    stallKey = (schedulerId) => `${STALL_KEY}:${schedulerId}`;
     STALL_WINDOW_SECONDS = 24 * 60 * 60;
   }
 });
@@ -40444,7 +40468,9 @@ function createDashboardDeps(paths, {
     async fetchSnapshot() {
       const queues = await fleetQueues();
       const merged = await mergedRunsOn(redis, { logsDir: paths.logsDir, limit: RUNS_ON_DASHBOARD }).catch(() => ({ runs: [], hosts: [], mirror: "off" }));
-      const [pausedStates, countsPer, workerList, dayRaw, weekRaw, monthRaw, tokenRaw, schedulerLists, activeLists, stallHash] = await Promise.all([
+      const triggersView = readTriggers({ triggersPath: paths.triggersPath });
+      const cronIds = Array.isArray(triggersView?.triggers) ? triggersView.triggers.filter((t) => t?.type === "cron" && typeof t?.id === "string" && t.id !== "").map((t) => t.id) : [];
+      const [pausedStates, countsPer, workerList, dayRaw, weekRaw, monthRaw, tokenRaw, schedulerLists, activeLists, stallCounts] = await Promise.all([
         Promise.all(queues.map((q) => q.isPaused())),
         Promise.all(queues.map((q) => q.getJobCounts("waiting", "active", "paused", "delayed", "failed"))),
         queue.getWorkers().catch(() => []),
@@ -40458,8 +40484,10 @@ function createDashboardDeps(paths, {
         Promise.all(queues.map((q, i) => i === 0 ? q.getJobSchedulers(0, -1, true) : q.getJobSchedulers(0, -1, true).catch(() => []))),
         Promise.all(queues.map((q) => q.getActive(0, 0).catch(() => []))),
         // Per-scheduler stall counts (money backstop) for the cron drill-in; reuses the held client like the
-        // budget GETs. HGETALL of an absent key is `{}`, so a never-stalled deployment shows 0 stalls.
-        redis.hgetall(STALL_KEY).catch(() => ({}))
+        // budget GETs. ONE MGET for every declared cron id, so this stays one round trip however many
+        // schedulers exist. An absent key reads as an honest 0 -- a scheduler that has never stalled -- which
+        // is the same posture `readScopedBudget` takes for a scope that has never run.
+        cronIds.length > 0 ? redis.mget(...cronIds.map((id) => stallKey(id))).catch(() => []) : Promise.resolve([])
       ]);
       const workers = Array.isArray(workerList) && workerList.length > 0 ? workerList.length : "unknown";
       const counts = {};
@@ -40492,7 +40520,9 @@ function createDashboardDeps(paths, {
         queue: { pausedState, pausedPartial, counts, workers, queues: queues.length, fleetDegraded },
         budget: { day: Number(dayRaw ?? 0), week: Number(weekRaw ?? 0), month: Number(monthRaw ?? 0), tokensToday: Number(tokenRaw ?? 0) },
         schedulers: mapSchedulers(schedulerList, Date.now()),
-        schedulerStalls: stallHash ?? {},
+        // Rebuilt into the `{ id -> count }` shape the drill-in and the LIST badge already index by, so
+        // neither reader changes.
+        schedulerStalls: Object.fromEntries(cronIds.map((id, i) => [id, Number(stallCounts?.[i] ?? 0) || 0])),
         schedulerStallMax: paths.schedulerStallMax,
         // Merged across the fleet (issue #57, Gap 3). This host's files stay the truth and the single-host
         // path; the mirror adds the other hosts' records. On a shared `PI_LOGS_DIR` the local read is
@@ -40501,7 +40531,7 @@ function createDashboardDeps(paths, {
         runHosts: merged.hosts,
         runMirror: merged.mirror,
         settings: readSettingsView({ settingsFile: paths.settingsFile }),
-        triggers: readTriggers({ triggersPath: paths.triggersPath }),
+        triggers: triggersView,
         pauseWindows: readPauseWindows({ pauseWindowsPath: paths.pauseWindowsPath }),
         // The operator's staged third-party pi packages (REQ-GLOBAL-PI-OVERLAY), for the armed triggers'
         // trust model. Like the four reads above it is a plain file read whose fs access lives entirely in
@@ -42247,7 +42277,7 @@ var init_setup_wizard = __esm({
     init_deployment_pointer();
     init_read_model();
     init_index();
-    RUNTIME_VERSION = "1.8.0";
+    RUNTIME_VERSION = "1.9.0";
     RECEIVER_VERSION = "1.5.0";
     RUNTIME_PKG = "@edgehero/pi-dispatch";
     RECEIVER_PKG = "@edgehero/pi-dispatch-receiver";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@edgehero/pi-dispatch-admin",
-  "version": "1.8.0",
+  "version": "1.9.0",
   "description": "Operator console (a pi extension) + skill for pi-dispatch: run the pi coding agent as a self-hosted service. A /dispatch TUI for the queue, spend caps, run history, editable GitHub, GitLab, Forgejo and Azure DevOps triggers (cron/label/comment/PR/MR/work item), and scheduled pause windows — plus AI-operable, human-confirmed controls. Runs against a live pi-dispatch deployment.",
   "keywords": [
     "pi-package",