@hyperdrive.bot/paseo-server 0.2.6

package/dist/server/server/managed-processes/managed-processes.d.ts

@@ -0,0 +1,76 @@
+import type { Logger } from "pino";
+import type { ProcessTerminator, TreeKillTarget } from "../../utils/tree-kill.js";
+export interface ManagedProcessSnapshot {
+    pid: number;
+    commandLine: string | null;
+    startedAt: string | null;
+}
+export type ManagedProcessInspection = {
+    status: "alive";
+    snapshot: ManagedProcessSnapshot;
+} | {
+    status: "not-found";
+} | {
+    status: "error";
+    error: unknown;
+};
+export interface ManagedProcessTable {
+    inspect(pid: number): Promise<ManagedProcessInspection>;
+}
+export interface ManagedProcessCommandRunner {
+    exec(command: string, args: string[]): Promise<{
+        stdout: string;
+        stderr: string;
+    }>;
+}
+export interface ManagedProcessOwner {
+    provider: string;
+    kind: string;
+}
+export interface ManagedProcessRecordInput {
+    owner: ManagedProcessOwner;
+    pid: number;
+    command: string;
+    args: string[];
+    metadata?: Record<string, unknown>;
+}
+export interface ManagedProcessRecord extends ManagedProcessRecordInput {
+    id: string;
+    metadata: Record<string, unknown>;
+    identity: {
+        commandLine: string | null;
+        startedAt: string | null;
+    };
+    createdAt: string;
+}
+export interface ManagedProcessReapResult {
+    checked: number;
+    dead: number;
+    mismatched: number;
+    removed: number;
+    terminated: number;
+    errors: Array<{
+        id: string;
+        message: string;
+    }>;
+}
+export interface ManagedProcessRegistry {
+    record(input: ManagedProcessRecordInput): Promise<ManagedProcessRecord>;
+    remove(id: string): Promise<void>;
+    list(): Promise<ManagedProcessRecord[]>;
+    reapStale(): Promise<ManagedProcessReapResult>;
+}
+interface ManagedProcessRegistryOptions {
+    paseoHome: string;
+    processTable: ManagedProcessTable;
+    terminateProcess: ProcessTerminator;
+    logger: Logger;
+}
+export declare function createManagedProcessRegistry(options: ManagedProcessRegistryOptions): ManagedProcessRegistry;
+export declare function createSystemManagedProcessTable(options?: {
+    platform?: NodeJS.Platform;
+    commandRunner?: ManagedProcessCommandRunner;
+}): ManagedProcessTable;
+export declare function createPidTarget(pid: number): TreeKillTarget;
+export {};
+//# sourceMappingURL=managed-processes.d.ts.map

package/dist/server/server/managed-processes/managed-processes.js

@@ -0,0 +1,326 @@
+import { randomUUID } from "node:crypto";
+import { promises as fs } from "node:fs";
+import path from "node:path";
+import { z } from "zod";
+import { writeJsonFileAtomic } from "../atomic-file.js";
+import { execCommand } from "../../utils/spawn.js";
+const MANAGED_PROCESS_GRACEFUL_SHUTDOWN_TIMEOUT_MS = 5000;
+const MANAGED_PROCESS_FORCE_SHUTDOWN_TIMEOUT_MS = 1000;
+const MANAGED_PROCESS_EXIT_POLL_INTERVAL_MS = 50;
+const MANAGED_PROCESS_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
+// `ps -o lstart` emits a fixed-width 24-char ctime stamp, e.g. "Sat Jun 20 10:30:40 2026".
+const POSIX_LSTART_WIDTH = 24;
+const ManagedProcessRecordSchema = z.object({
+    id: z.string().min(1),
+    owner: z.object({
+        provider: z.string().min(1),
+        kind: z.string().min(1),
+    }),
+    pid: z.number().int().positive(),
+    command: z.string().min(1),
+    args: z.array(z.string()),
+    metadata: z.record(z.string(), z.unknown()).default({}),
+    identity: z.object({
+        commandLine: z.string().nullable(),
+        startedAt: z.string().nullable(),
+    }),
+    createdAt: z.string().min(1),
+});
+const WindowsProcessSnapshotSchema = z.object({
+    ProcessId: z.number().int().positive(),
+    CommandLine: z.string().nullable().optional(),
+    CreationDate: z.string().nullable().optional(),
+});
+export function createManagedProcessRegistry(options) {
+    return new FileBackedManagedProcessRegistry(options);
+}
+export function createSystemManagedProcessTable(options) {
+    return new SystemManagedProcessTable({
+        platform: options?.platform ?? process.platform,
+        commandRunner: options?.commandRunner ?? {
+            exec: execCommand,
+        },
+    });
+}
+class SystemManagedProcessTable {
+    constructor(options) {
+        this.platform = options.platform;
+        this.commandRunner = options.commandRunner;
+    }
+    async inspect(pid) {
+        if (!Number.isInteger(pid) || pid <= 0) {
+            return { status: "not-found" };
+        }
+        try {
+            return this.platform === "win32"
+                ? await this.inspectWindows(pid)
+                : await this.inspectPosix(pid);
+        }
+        catch (error) {
+            return { status: "error", error };
+        }
+    }
+    async inspectPosix(pid) {
+        let stdout;
+        try {
+            ({ stdout } = await this.commandRunner.exec("ps", [
+                "-ww",
+                "-p",
+                String(pid),
+                "-o",
+                "lstart=",
+                "-o",
+                "command=",
+            ]));
+        }
+        catch (error) {
+            // `ps -p <pid>` exits non-zero when no process matches the pid; a numeric
+            // exit code means ps ran and found nothing, distinct from ps failing to run.
+            return isCommandExitFailure(error) ? { status: "not-found" } : { status: "error", error };
+        }
+        const line = stdout.trimEnd();
+        if (!line) {
+            return { status: "not-found" };
+        }
+        const startedAt = line.slice(0, POSIX_LSTART_WIDTH).trim();
+        const commandLine = line.slice(POSIX_LSTART_WIDTH).trim();
+        return {
+            status: "alive",
+            snapshot: {
+                pid,
+                commandLine: commandLine || null,
+                startedAt: startedAt || null,
+            },
+        };
+    }
+    async inspectWindows(pid) {
+        const command = [
+            `$process = Get-CimInstance Win32_Process -Filter 'ProcessId = ${pid}';`,
+            "if ($process) { $process | Select-Object ProcessId,CommandLine,CreationDate | ConvertTo-Json -Compress }",
+        ].join(" ");
+        const { stdout } = await this.commandRunner.exec("powershell.exe", [
+            "-NoProfile",
+            "-NonInteractive",
+            "-Command",
+            command,
+        ]);
+        const trimmed = stdout.trim();
+        if (!trimmed) {
+            return { status: "not-found" };
+        }
+        const parsed = WindowsProcessSnapshotSchema.parse(JSON.parse(trimmed));
+        return {
+            status: "alive",
+            snapshot: {
+                pid,
+                commandLine: parsed.CommandLine ?? null,
+                startedAt: parsed.CreationDate ?? null,
+            },
+        };
+    }
+}
+class FileBackedManagedProcessRegistry {
+    constructor(options) {
+        this.directory = path.join(options.paseoHome, "runtime", "managed-processes");
+        this.processTable = options.processTable;
+        this.terminateProcess = options.terminateProcess;
+        this.logger = options.logger.child({ module: "managed-processes" });
+    }
+    async record(input) {
+        const inspection = await this.processTable.inspect(input.pid);
+        const snapshot = inspection.status === "alive" ? inspection.snapshot : null;
+        const record = {
+            id: randomUUID(),
+            owner: input.owner,
+            pid: input.pid,
+            command: input.command,
+            args: input.args,
+            metadata: input.metadata ?? {},
+            identity: {
+                commandLine: snapshot?.commandLine ?? null,
+                startedAt: snapshot?.startedAt ?? null,
+            },
+            createdAt: new Date().toISOString(),
+        };
+        await writeJsonFileAtomic(this.recordPath(record.id), record);
+        return record;
+    }
+    async remove(id) {
+        await fs.rm(this.recordPath(id), { force: true });
+    }
+    async list() {
+        const entries = await this.readEntries();
+        return entries.map((entry) => entry.record);
+    }
+    async reapStale() {
+        const result = {
+            checked: 0,
+            dead: 0,
+            mismatched: 0,
+            removed: 0,
+            terminated: 0,
+            errors: [],
+        };
+        for (const entry of await this.readEntries()) {
+            result.checked += 1;
+            try {
+                const inspection = await this.processTable.inspect(entry.record.pid);
+                if (inspection.status === "not-found") {
+                    await fs.rm(entry.path, { force: true });
+                    result.dead += 1;
+                    result.removed += 1;
+                    continue;
+                }
+                if (inspection.status === "error") {
+                    // Inspection failed, so we cannot tell whether the helper is still
+                    // alive. Keep the record and retry on the next reconcile rather than
+                    // orphaning a live process by deleting its record without killing it.
+                    const message = inspection.error instanceof Error ? inspection.error.message : String(inspection.error);
+                    result.errors.push({ id: entry.record.id, message });
+                    this.logger.warn({
+                        err: inspection.error,
+                        id: entry.record.id,
+                        pid: entry.record.pid,
+                        owner: entry.record.owner,
+                    }, "Could not inspect managed helper process; leaving record for next reconcile");
+                    continue;
+                }
+                const snapshot = inspection.snapshot;
+                if (!processIdentityMatches(entry.record, snapshot)) {
+                    await fs.rm(entry.path, { force: true });
+                    result.mismatched += 1;
+                    result.removed += 1;
+                    continue;
+                }
+                await this.terminateProcess(createPidTarget(entry.record.pid), {
+                    gracefulTimeoutMs: MANAGED_PROCESS_GRACEFUL_SHUTDOWN_TIMEOUT_MS,
+                    forceTimeoutMs: MANAGED_PROCESS_FORCE_SHUTDOWN_TIMEOUT_MS,
+                    onForceSignal: () => {
+                        this.logger.warn({
+                            pid: entry.record.pid,
+                            owner: entry.record.owner,
+                            timeoutMs: MANAGED_PROCESS_GRACEFUL_SHUTDOWN_TIMEOUT_MS,
+                        }, "Managed helper process did not exit after SIGTERM; sending SIGKILL");
+                    },
+                });
+                await fs.rm(entry.path, { force: true });
+                result.terminated += 1;
+                result.removed += 1;
+            }
+            catch (error) {
+                const message = error instanceof Error ? error.message : String(error);
+                result.errors.push({ id: entry.record.id, message });
+                this.logger.warn({ err: error, id: entry.record.id, pid: entry.record.pid, owner: entry.record.owner }, "Failed to reap managed helper process");
+            }
+        }
+        return result;
+    }
+    recordPath(id) {
+        if (!MANAGED_PROCESS_ID_PATTERN.test(id)) {
+            throw new Error(`Invalid managed process record id: ${id}`);
+        }
+        return path.join(this.directory, `${id}.json`);
+    }
+    async readEntries() {
+        let fileNames;
+        try {
+            fileNames = await fs.readdir(this.directory);
+        }
+        catch (error) {
+            if (isNodeErrorWithCode(error, "ENOENT")) {
+                return [];
+            }
+            throw error;
+        }
+        const entries = [];
+        for (const fileName of fileNames) {
+            if (!fileName.endsWith(".json")) {
+                continue;
+            }
+            const filePath = path.join(this.directory, fileName);
+            try {
+                const raw = await fs.readFile(filePath, "utf8");
+                const parsed = ManagedProcessRecordSchema.parse(JSON.parse(raw));
+                entries.push({ path: filePath, record: parsed });
+            }
+            catch (error) {
+                // A single corrupt or partially-written record must not abort the whole
+                // reconcile and leave every other leftover un-reaped. Skip it.
+                this.logger.warn({ err: error, file: fileName }, "Skipping unreadable managed process record");
+            }
+        }
+        return entries;
+    }
+}
+function processIdentityMatches(record, snapshot) {
+    if (record.identity.startedAt && snapshot.startedAt) {
+        if (record.identity.startedAt !== snapshot.startedAt) {
+            return false;
+        }
+        return snapshot.commandLine ? commandLineMatchesRecord(record, snapshot.commandLine) : true;
+    }
+    if (record.identity.commandLine && snapshot.commandLine) {
+        return (normalizeCommandLine(record.identity.commandLine) ===
+            normalizeCommandLine(snapshot.commandLine));
+    }
+    return snapshot.commandLine ? commandLineMatchesRecord(record, snapshot.commandLine) : false;
+}
+function commandLineMatchesRecord(record, commandLine) {
+    // Require the command name and args as one contiguous run, not scattered
+    // tokens. Without exact process identity (lstart), a reused PID whose command
+    // line merely mentions "opencode", "serve" and the port elsewhere must not be
+    // mistaken for our leftover and killed.
+    const normalized = normalizeCommandLine(commandLine);
+    const commandName = path.basename(record.command).toLowerCase();
+    const signature = [commandName, ...record.args].map((token) => token.toLowerCase()).join(" ");
+    return normalized.includes(signature);
+}
+function normalizeCommandLine(commandLine) {
+    return commandLine.replace(/\s+/g, " ").trim().toLowerCase();
+}
+export function createPidTarget(pid) {
+    return {
+        pid,
+        exitCode: null,
+        signalCode: null,
+        kill(signal) {
+            process.kill(pid, signal);
+            return true;
+        },
+        // The reaper has no ChildProcess handle for a leftover from a previous
+        // daemon, so it observes exit by polling the pid. Without this, termination
+        // can never see a graceful SIGTERM exit and always waits out the full
+        // graceful+force window before escalating to SIGKILL.
+        once(_event, listener) {
+            const timer = setInterval(() => {
+                if (!isProcessAlive(pid)) {
+                    clearInterval(timer);
+                    listener();
+                }
+            }, MANAGED_PROCESS_EXIT_POLL_INTERVAL_MS);
+            timer.unref();
+        },
+    };
+}
+function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch (error) {
+        return isNodeErrorWithCode(error, "EPERM");
+    }
+}
+function isCommandExitFailure(error) {
+    // execFile rejects with a numeric `code` (the process exit status) when the
+    // command ran and exited non-zero; a string `code` (e.g. "ENOENT") means it
+    // never ran.
+    return typeof error?.code === "number";
+}
+function isNodeErrorWithCode(error, code) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "code" in error &&
+        error.code === code);
+}
+//# sourceMappingURL=managed-processes.js.map

package/dist/server/server/meetings/capture-http.d.ts

@@ -0,0 +1,3 @@
+import type { Express } from "express";
+export declare function registerCaptureRoutes(app: Express): void;
+//# sourceMappingURL=capture-http.d.ts.map

package/dist/server/server/meetings/capture-http.js

@@ -0,0 +1,71 @@
+// CAPTURE HTTP — start/stop/status endpoints for a meeting capture session, mirroring
+// the meetings-http.ts route style. Registered from bootstrap.ts alongside the meetings
+// routes. The captured meeting lands in the same ingested store /api/meetings serves.
+import { appendFileSync } from "node:fs";
+import path from "node:path";
+import express from "express";
+import { getCaptureOrchestrator } from "./capture-orchestrator.js";
+export function registerCaptureRoutes(app) {
+    // The app streams the mic (near) track here in chunks WHILE recording — it holds
+    // Microphone permission via the renderer's getUserMedia flow, which meetcap's
+    // open-launched helper structurally cannot acquire. Each MediaRecorder timeslice chunk
+    // is APPENDED to near-upload.webm on disk (the workdir is per-session, so no stale
+    // append), making the near track crash-durable like far: a renderer crash loses only the
+    // last few seconds, not the whole recording. stop() converts it to the near track.
+    app.post("/api/meetings/capture/near", express.raw({ type: () => true, limit: "50mb" }), (req, res) => {
+        const session = getCaptureOrchestrator().getStatus();
+        if (!session || session.state !== "recording") {
+            res.status(409).json({ error: "no active recording to attach a mic track to" });
+            return;
+        }
+        const body = req.body;
+        if (!Buffer.isBuffer(body) || body.length === 0) {
+            res.status(400).json({ error: "empty mic chunk" });
+            return;
+        }
+        appendFileSync(path.join(session.workdir, "near-upload.webm"), body);
+        res.json({ ok: true, bytes: body.length });
+    });
+    // Liveness heartbeat from the recording app. If it stops arriving, the orchestrator's
+    // watchdog auto-stops the capture (the app crashed/closed) — see capture-orchestrator.
+    app.post("/api/meetings/capture/heartbeat", (_req, res) => {
+        getCaptureOrchestrator().heartbeat();
+        res.json({ ok: true });
+    });
+    // Begin recording (spawns the native meetcap helper). 409 if one is already active.
+    app.post("/api/meetings/capture/start", (req, res) => {
+        try {
+            const appName = typeof req.body?.app === "string" ? req.body.app : null;
+            const session = getCaptureOrchestrator().start({ app: appName });
+            res.json({ session });
+        }
+        catch (e) {
+            res.status(409).json({ error: e instanceof Error ? e.message : String(e) });
+        }
+    });
+    // Stop + run the engine → write the Meeting. 409 if nothing is recording.
+    app.post("/api/meetings/capture/stop", async (_req, res) => {
+        try {
+            const session = await getCaptureOrchestrator().stop();
+            res.json({ session });
+        }
+        catch (e) {
+            res.status(409).json({ error: e instanceof Error ? e.message : String(e) });
+        }
+    });
+    // Current session (or null when idle).
+    app.get("/api/meetings/capture/status", (_req, res) => {
+        res.json({ session: getCaptureOrchestrator().getStatus() });
+    });
+    // Capturable audio-active apps (from `meetcap list`) for the UI's app picker.
+    app.get("/api/meetings/capture/apps", async (_req, res) => {
+        try {
+            const apps = await getCaptureOrchestrator().listApps();
+            res.json({ apps });
+        }
+        catch (e) {
+            res.status(500).json({ error: e instanceof Error ? e.message : String(e) });
+        }
+    });
+}
+//# sourceMappingURL=capture-http.js.map

package/dist/server/server/meetings/capture-orchestrator.d.ts

@@ -0,0 +1,123 @@
+import type { ChildProcess } from "node:child_process";
+import type { Readable } from "node:stream";
+import { type LiveTranscriptEvent, type LiveTranscriptionHandle } from "./live-transcription.js";
+import { type CaptureStreamFrame } from "./capture-stream-ws.js";
+import { type IngestedMeeting, type IngestedParticipant } from "./meetings-http.js";
+export type CaptureState = "idle" | "recording" | "processing" | "ready" | "error";
+/** live streams f32le PCM for realtime transcript; batch is the pre-epic two-track .caf path. */
+export type CaptureMode = "live" | "batch";
+/** A capturable audio-active app, as surfaced by `meetcap list`. */
+export interface CaptureApp {
+    pid: number;
+    name: string;
+}
+export interface CaptureSession {
+    id: string;
+    state: CaptureState;
+    startedAt: string;
+    app: string | null;
+    mode: CaptureMode;
+    far: string;
+    near: string;
+    workdir: string;
+    meetingId: string | null;
+    error: string | null;
+}
+/** What the engine step returns for a finished recording. */
+export interface EngineResult {
+    participants: IngestedParticipant[];
+    transcript: {
+        speaker: string;
+        atSeconds: number;
+        text: string;
+    }[];
+}
+/** Injectable dependencies - real defaults below; overridden in tests. */
+export interface CaptureDeps {
+    spawnCapture: (opts: {
+        app: string | null;
+        cwd: string;
+        mode: CaptureMode;
+    }) => ChildProcess;
+    stopCapture: (session: CaptureSession) => Promise<void>;
+    processRecording: (session: CaptureSession) => Promise<EngineResult>;
+    /** Wire a live f32le stream (meetcap stdout) into the realtime transcript seam (live mode). */
+    createLiveTranscription: (opts: {
+        stream: Readable;
+        sink: (event: LiveTranscriptEvent) => void;
+    }) => Promise<LiveTranscriptionHandle>;
+    listApps: () => Promise<CaptureApp[]>;
+    appendMeeting: (meeting: IngestedMeeting) => void;
+    /** Broadcast a frame to capture-stream WS clients (partial/final transcript + state). */
+    broadcast: (frame: CaptureStreamFrame) => void;
+    now: () => Date;
+    log: (msg: string) => void;
+}
+/**
+ * The meetcap helper MUST run as its own TCC "responsible process" or macOS feeds its
+ * system-audio tap silent (zero-filled) buffers — see the deep root-cause in
+ * docs/research. A child spawned directly by this daemon is attributed to the daemon
+ * (Electron), which lacks the System-Audio-Recording grant. Launching the .app via
+ * LaunchServices (`open`) starts it in its own process tree, so ITS grant applies.
+ *
+ * Returns the .app bundle path if MEETCAP_BIN points inside one (…/X.app/Contents/MacOS/bin),
+ * else null (bare binary on PATH → no responsible-process fix available, direct spawn).
+ */
+export declare function meetcapAppBundle(binPath: string): string | null;
+export declare function parseAppList(stdout: string): CaptureApp[];
+/**
+ * Build the meetcap capture argv. With no app selected (null/empty), capture the whole-system
+ * audio mix via `--system` — a meeting is captured regardless of which app owns the audio,
+ * with no per-app picker or PID hunt. A non-empty app routes to `--app <name>` (single-app
+ * capture). This is the deterministic, unit-testable seam for the default-capture decision.
+ */
+export declare function buildCaptureArgs(app: string | null): string[];
+/**
+ * Mode-aware meetcap argv. Extends `buildCaptureArgs` with `--emit pcm` ONLY in live mode: it
+ * streams f32le PCM on stdout for the realtime seam WHILE STILL writing far/near .caf (so the
+ * Stop-time batch finalize is unaffected). batch mode emits no `--emit`. Exported so the argv
+ * contract (live has `--emit pcm`, batch does not) is directly assertable.
+ */
+export declare function buildCaptureArgv(opts: {
+    app: string | null;
+    mode: CaptureMode;
+}): string[];
+/** Assemble the ingested-store Meeting record from a finished session + engine output. */
+export declare function buildMeeting(session: CaptureSession, engine: EngineResult, now: Date): IngestedMeeting;
+/**
+ * Single in-flight capture session. idle → recording (meetcap spawned) → processing
+ * (engine) → ready (Meeting written) | error. Mirrors the meetings-http store layer.
+ */
+export declare class CaptureOrchestrator {
+    private session;
+    private child;
+    private readonly deps;
+    private liveHandlePromise;
+    private lastHeartbeat;
+    private lastAudioMs;
+    private watchdog;
+    private maxTimer;
+    private silenceTimer;
+    constructor(deps?: Partial<CaptureDeps>);
+    getStatus(): CaptureSession | null;
+    /** The app pings this while recording; a gap → the app crashed/closed → auto-stop. */
+    heartbeat(): void;
+    private clearGuards;
+    /** Auto-stop after a prolonged quiet stretch on the far track (meeting ended / on hold). */
+    private checkSilence;
+    private startGuards;
+    /** Capturable audio-active apps (from `meetcap list`) for the UI's picker. */
+    listApps(): Promise<CaptureApp[]>;
+    start(opts?: {
+        app?: string | null;
+        mode?: CaptureMode;
+    }): CaptureSession;
+    private startLiveTranscription;
+    private onCaptureHelperError;
+    private onLiveEvent;
+    stop(): Promise<CaptureSession>;
+    private finalizeLiveView;
+    private setState;
+}
+export declare function getCaptureOrchestrator(): CaptureOrchestrator;
+//# sourceMappingURL=capture-orchestrator.d.ts.map