@ironbee-ai/cli 0.5.2 → 0.6.0

package/dist/queue/submit.js

@@ -0,0 +1,94 @@
+"use strict";
+/**
+ * IronBee CLI — Queue submit()
+ *
+ * See docs/job-queue.md §5.1.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.submit = submit;
+const fs_1 = require("fs");
+const crypto_1 = require("crypto");
+const types_1 = require("./types");
+const paths_1 = require("./paths");
+const flush_1 = require("./flush");
+const config_1 = require("../lib/config");
+const logger_1 = require("../lib/logger");
+/**
+ * Append a job to `<projectDir>/.ironbee/sessions/<sessionId>/queue/jobs.jsonl`
+ * via a single O_APPEND write. Returns the job id.
+ *
+ * Throws:
+ *   - InvalidSessionIdError  if sessionId fails validation
+ *   - JobTooLargeError       if serialized line > 4 KB
+ *   - IOError                on filesystem errors (including short write)
+ */
+function submit(projectDir, sessionId, type, data, opts) {
+    (0, paths_1.validateSessionId)(sessionId);
+    // Defense-in-depth gate: when the queue is disabled (default), drop the
+    // job before touching the filesystem. Callers should already short-circuit
+    // before constructing a payload, but this guard stops a stray submit()
+    // from creating the queue dir or growing jobs.jsonl needlessly.
+    if (!(0, config_1.isJobQueueEnabled)(projectDir)) {
+        const id = opts?.id ?? (0, crypto_1.randomUUID)();
+        logger_1.logger.debug(`submit: jobQueue disabled, dropping job type=${type} id=${id}`);
+        return id;
+    }
+    const dir = (0, paths_1.queueDir)(projectDir, sessionId);
+    try {
+        (0, fs_1.mkdirSync)(dir, { recursive: true, mode: 0o700 });
+    }
+    catch (e) {
+        throw new types_1.IOError(`failed to mkdir queue dir: ${dir}`, e);
+    }
+    const id = opts?.id ?? (0, crypto_1.randomUUID)();
+    const job = {
+        id,
+        type,
+        created_at: new Date().toISOString(),
+        data,
+    };
+    const line = JSON.stringify(job) + "\n";
+    const bytes = Buffer.from(line, "utf-8");
+    if (bytes.length > types_1.MAX_LINE_BYTES) {
+        throw new types_1.JobTooLargeError(bytes.length);
+    }
+    const filePath = (0, paths_1.liveQueueFile)(projectDir, sessionId);
+    const flags = fs_1.constants.O_CREAT
+        | fs_1.constants.O_WRONLY
+        | fs_1.constants.O_APPEND
+        | (typeof fs_1.constants.O_NOFOLLOW === "number" ? fs_1.constants.O_NOFOLLOW : 0);
+    let fd;
+    try {
+        fd = (0, fs_1.openSync)(filePath, flags, 0o600);
+    }
+    catch (e) {
+        throw new types_1.IOError(`failed to open ${filePath}`, e);
+    }
+    try {
+        let written;
+        try {
+            written = (0, fs_1.writeSync)(fd, bytes, 0, bytes.length);
+        }
+        catch (e) {
+            // ENOSPC / EIO / etc — wrap to preserve spec §5.1 contract that
+            // submit() throws IOError with the underlying errno.
+            throw new types_1.IOError(`failed to write to ${filePath}`, e);
+        }
+        if (written !== bytes.length) {
+            throw new types_1.IOError(`short write on ${filePath}: wrote ${written} of ${bytes.length} bytes`);
+        }
+    }
+    finally {
+        try {
+            (0, fs_1.closeSync)(fd);
+        }
+        catch {
+            // ignore close errors — the write has already landed (or failed)
+        }
+    }
+    // size-based auto-flush trigger. Fail-safe: never propagates exceptions
+    // to submit()'s caller, the line has already been persisted.
+    (0, flush_1.maybeAutoFlush)(projectDir, sessionId);
+    return id;
+}
+//# sourceMappingURL=submit.js.map

package/dist/queue/submit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"submit.js","sourceRoot":"","sources":["../../src/queue/submit.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;AA4BH,wBA8EC;AAxGD,2BAAyF;AACzF,mCAAoC;AACpC,mCAKiB;AACjB,mCAAqE;AACrE,mCAAyC;AACzC,0CAAkD;AAClD,0CAAuC;AAMvC;;;;;;;;GAQG;AACH,SAAgB,MAAM,CAClB,UAAkB,EAClB,SAAiB,EACjB,IAAY,EACZ,IAAW,EACX,IAAoB;IAEpB,IAAA,yBAAiB,EAAC,SAAS,CAAC,CAAC;IAE7B,wEAAwE;IACxE,2EAA2E;IAC3E,uEAAuE;IACvE,gEAAgE;IAChE,IAAI,CAAC,IAAA,0BAAiB,EAAC,UAAU,CAAC,EAAE,CAAC;QACjC,MAAM,EAAE,GAAW,IAAI,EAAE,EAAE,IAAI,IAAA,mBAAU,GAAE,CAAC;QAC5C,eAAM,CAAC,KAAK,CAAC,gDAAgD,IAAI,OAAO,EAAE,EAAE,CAAC,CAAC;QAC9E,OAAO,EAAE,CAAC;IACd,CAAC;IAED,MAAM,GAAG,GAAW,IAAA,gBAAQ,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IACpD,IAAI,CAAC;QACD,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,MAAM,IAAI,eAAO,CAAC,8BAA8B,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IAED,MAAM,EAAE,GAAW,IAAI,EAAE,EAAE,IAAI,IAAA,mBAAU,GAAE,CAAC;IAC5C,MAAM,GAAG,GAAe;QACpB,EAAE;QACF,IAAI;QACJ,UAAU,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;QACpC,IAAI;KACP,CAAC;IAEF,MAAM,IAAI,GAAW,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC;IAChD,MAAM,KAAK,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACjD,IAAI,KAAK,CAAC,MAAM,GAAG,sBAAc,EAAE,CAAC;QAChC,MAAM,IAAI,wBAAgB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7C,CAAC;IAED,MAAM,QAAQ,GAAW,IAAA,qBAAa,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAC9D,MAAM,KAAK,GAAW,cAAW,CAAC,OAAO;UACnC,cAAW,CAAC,QAAQ;UACpB,cAAW,CAAC,QAAQ;UACpB,CAAC,OAAO,cAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhF,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACD,EAAE,GAAG,IAAA,aAAQ,EAAC,QAAQ,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,CAAU,EAAE,CAAC;QAClB,MAAM,IAAI,eAAO,CAAC,kBAAkB,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC;QACD,IAAI,OAAe,CAAC;QACpB,IAAI,CAAC;YACD,OAAO,GAAG,IAAA,cAAS,EAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QACpD,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YAClB,gEAAgE;YAChE,qDAAqD;YACrD,MAAM,IAAI,eAAO,CAAC,sBAAsB,QAAQ,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3B,MAAM,IAAI,eAAO,CAAC,kBAAkB,QAAQ,WAAW,OAAO,OAAO,KAAK,CAAC,MAAM,QAAQ,CAAC,CAAC;QAC/F,CAAC;IACL,CAAC;YAAS,CAAC;QACP,IAAI,CAAC;YACD,IAAA,cAAS,EAAC,EAAE,CAAC,CAAC;QAClB,CAAC;QAAC,MAAM,CAAC;YACL,iEAAiE;QACrE,CAAC;IACL,CAAC;IAED,wEAAwE;IACxE,6DAA6D;IAC7D,IAAA,sBAAc,EAAC,UAAU,EAAE,SAAS,CAAC,CAAC;IAEtC,OAAO,EAAE,CAAC;AACd,CAAC"}

package/dist/queue/types.d.ts

@@ -0,0 +1,77 @@
+/**
+ * IronBee CLI — Queue Types & Errors
+ *
+ * See docs/job-queue.md §4 (job format), §6 (error classification).
+ */
+export declare class InvalidSessionIdError extends Error {
+    constructor(message: string);
+}
+export declare class JobTooLargeError extends Error {
+    readonly sizeBytes: number;
+    constructor(sizeBytes: number);
+}
+export declare class IOError extends Error {
+    readonly cause?: unknown;
+    constructor(message: string, cause?: unknown);
+}
+/**
+ * Handler throws this on transient failures (network timeout, 5xx, 429).
+ * Worker leaves the snapshot on disk for later retry.
+ */
+export declare class TransientError extends Error {
+    constructor(message: string);
+}
+/**
+ * Handler throws this on auth failures (401, 403, expired credential).
+ * Worker leaves the snapshot on disk and logs an operator-actionable error.
+ */
+export declare class AuthError extends Error {
+    constructor(message: string);
+}
+/**
+ * Handler's batch `dispatch()` throws this when the downstream rejected the
+ * batch but we don't know which line caused it — worker falls back to
+ * per-job `dispatchSingle()`.
+ */
+export declare class BadRequestBatchError extends Error {
+    constructor(message: string);
+}
+/**
+ * Handler's `dispatchSingle()` throws this on a permanent per-job failure
+ * (400 for this specific job). Worker dead-letters the job and continues.
+ */
+export declare class BadRequestError extends Error {
+    constructor(message: string);
+}
+/**
+ * Job envelope — exactly three queue-owned top-level fields plus the opaque
+ * `data` payload. Mirrors the spec's §4 schema.
+ */
+export interface Job<TData = unknown> {
+    id: string;
+    type: string;
+    created_at: string;
+    data: TData;
+}
+export interface DeadLetterParsed {
+    id: string;
+    received_at: string;
+    source_file: string;
+    category: string;
+    original: Job;
+}
+export interface DeadLetterParseError {
+    id: string;
+    received_at: string;
+    source_file: string;
+    category: string;
+    raw: string;
+}
+export type DeadLetterEntry = DeadLetterParsed | DeadLetterParseError;
+export declare const MAX_LINE_BYTES: number;
+export declare const DEAD_LETTER_ROTATE_BYTES: number;
+export declare const DEAD_LETTER_RETAIN_COUNT: number;
+export declare const WORKER_LOG_ROTATE_BYTES: number;
+export declare const WORKER_LOG_RETAIN_COUNT: number;
+export declare const DEAD_LETTER_RAW_MAX: number;
+//# sourceMappingURL=types.d.ts.map

package/dist/queue/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/queue/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,qBAAa,qBAAsB,SAAQ,KAAK;gBAChC,OAAO,EAAE,MAAM;CAI9B;AAED,qBAAa,gBAAiB,SAAQ,KAAK;IACvC,SAAgB,SAAS,EAAE,MAAM,CAAC;gBACtB,SAAS,EAAE,MAAM;CAKhC;AAED,qBAAa,OAAQ,SAAQ,KAAK;IAC9B,SAAgB,KAAK,CAAC,EAAE,OAAO,CAAC;gBACpB,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO;CAK/C;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;gBACzB,OAAO,EAAE,MAAM;CAI9B;AAED;;;GAGG;AACH,qBAAa,SAAU,SAAQ,KAAK;gBACpB,OAAO,EAAE,MAAM;CAI9B;AAED;;;;GAIG;AACH,qBAAa,oBAAqB,SAAQ,KAAK;gBAC/B,OAAO,EAAE,MAAM;CAI9B;AAED;;;GAGG;AACH,qBAAa,eAAgB,SAAQ,KAAK;gBAC1B,OAAO,EAAE,MAAM;CAI9B;AAED;;;GAGG;AACH,MAAM,WAAW,GAAG,CAAC,KAAK,GAAG,OAAO;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,KAAK,CAAC;CACf;AAED,MAAM,WAAW,gBAAgB;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,GAAG,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACjC,EAAE,EAAE,MAAM,CAAC;IACX,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;CACf;AAED,MAAM,MAAM,eAAe,GAAG,gBAAgB,GAAG,oBAAoB,CAAC;AAEtE,eAAO,MAAM,cAAc,EAAE,MAAa,CAAC;AAC3C,eAAO,MAAM,wBAAwB,EAAE,MAAyB,CAAC;AACjE,eAAO,MAAM,wBAAwB,EAAE,MAAU,CAAC;AAClD,eAAO,MAAM,uBAAuB,EAAE,MAAyB,CAAC;AAChE,eAAO,MAAM,uBAAuB,EAAE,MAAU,CAAC;AACjD,eAAO,MAAM,mBAAmB,EAAE,MAAY,CAAC"}

package/dist/queue/types.js

@@ -0,0 +1,83 @@
+"use strict";
+/**
+ * IronBee CLI — Queue Types & Errors
+ *
+ * See docs/job-queue.md §4 (job format), §6 (error classification).
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DEAD_LETTER_RAW_MAX = exports.WORKER_LOG_RETAIN_COUNT = exports.WORKER_LOG_ROTATE_BYTES = exports.DEAD_LETTER_RETAIN_COUNT = exports.DEAD_LETTER_ROTATE_BYTES = exports.MAX_LINE_BYTES = exports.BadRequestError = exports.BadRequestBatchError = exports.AuthError = exports.TransientError = exports.IOError = exports.JobTooLargeError = exports.InvalidSessionIdError = void 0;
+class InvalidSessionIdError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "InvalidSessionIdError";
+    }
+}
+exports.InvalidSessionIdError = InvalidSessionIdError;
+class JobTooLargeError extends Error {
+    constructor(sizeBytes) {
+        super(`job line exceeds 4 KB limit (${sizeBytes} bytes)`);
+        this.name = "JobTooLargeError";
+        this.sizeBytes = sizeBytes;
+    }
+}
+exports.JobTooLargeError = JobTooLargeError;
+class IOError extends Error {
+    constructor(message, cause) {
+        super(message);
+        this.name = "IOError";
+        this.cause = cause;
+    }
+}
+exports.IOError = IOError;
+/**
+ * Handler throws this on transient failures (network timeout, 5xx, 429).
+ * Worker leaves the snapshot on disk for later retry.
+ */
+class TransientError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "TransientError";
+    }
+}
+exports.TransientError = TransientError;
+/**
+ * Handler throws this on auth failures (401, 403, expired credential).
+ * Worker leaves the snapshot on disk and logs an operator-actionable error.
+ */
+class AuthError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "AuthError";
+    }
+}
+exports.AuthError = AuthError;
+/**
+ * Handler's batch `dispatch()` throws this when the downstream rejected the
+ * batch but we don't know which line caused it — worker falls back to
+ * per-job `dispatchSingle()`.
+ */
+class BadRequestBatchError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "BadRequestBatchError";
+    }
+}
+exports.BadRequestBatchError = BadRequestBatchError;
+/**
+ * Handler's `dispatchSingle()` throws this on a permanent per-job failure
+ * (400 for this specific job). Worker dead-letters the job and continues.
+ */
+class BadRequestError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "BadRequestError";
+    }
+}
+exports.BadRequestError = BadRequestError;
+exports.MAX_LINE_BYTES = 4096;
+exports.DEAD_LETTER_ROTATE_BYTES = 10 * 1024 * 1024;
+exports.DEAD_LETTER_RETAIN_COUNT = 3;
+exports.WORKER_LOG_ROTATE_BYTES = 10 * 1024 * 1024;
+exports.WORKER_LOG_RETAIN_COUNT = 5;
+exports.DEAD_LETTER_RAW_MAX = 512;
+//# sourceMappingURL=types.js.map

package/dist/queue/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/queue/types.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,MAAa,qBAAsB,SAAQ,KAAK;IAC5C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;IACxC,CAAC;CACJ;AALD,sDAKC;AAED,MAAa,gBAAiB,SAAQ,KAAK;IAEvC,YAAY,SAAiB;QACzB,KAAK,CAAC,gCAAgC,SAAS,SAAS,CAAC,CAAC;QAC1D,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;CACJ;AAPD,4CAOC;AAED,MAAa,OAAQ,SAAQ,KAAK;IAE9B,YAAY,OAAe,EAAE,KAAe;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,SAAS,CAAC;QACtB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACvB,CAAC;CACJ;AAPD,0BAOC;AAED;;;GAGG;AACH,MAAa,cAAe,SAAQ,KAAK;IACrC,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,gBAAgB,CAAC;IACjC,CAAC;CACJ;AALD,wCAKC;AAED;;;GAGG;AACH,MAAa,SAAU,SAAQ,KAAK;IAChC,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;IAC5B,CAAC;CACJ;AALD,8BAKC;AAED;;;;GAIG;AACH,MAAa,oBAAqB,SAAQ,KAAK;IAC3C,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACvC,CAAC;CACJ;AALD,oDAKC;AAED;;;GAGG;AACH,MAAa,eAAgB,SAAQ,KAAK;IACtC,YAAY,OAAe;QACvB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAClC,CAAC;CACJ;AALD,0CAKC;AA+BY,QAAA,cAAc,GAAW,IAAI,CAAC;AAC9B,QAAA,wBAAwB,GAAW,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACpD,QAAA,wBAAwB,GAAW,CAAC,CAAC;AACrC,QAAA,uBAAuB,GAAW,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,QAAA,uBAAuB,GAAW,CAAC,CAAC;AACpC,QAAA,mBAAmB,GAAW,GAAG,CAAC"}

package/dist/queue/worker-log.d.ts

@@ -0,0 +1,21 @@
+/**
+ * IronBee CLI — Worker Log + Rotation
+ *
+ * See docs/job-queue.md §8.1.
+ */
+export type WorkerLogLevel = "INFO" | "WARN" | "ERROR" | "DEBUG";
+export declare class WorkerLog {
+    private readonly projectDir;
+    private readonly sessionId;
+    constructor(projectDir: string, sessionId: string);
+    info(msg: string): void;
+    warn(msg: string): void;
+    error(msg: string): void;
+    debug(msg: string): void;
+    private write;
+    private format;
+    private appendLine;
+    private rotateIfNeeded;
+    private enforceRetention;
+}
+//# sourceMappingURL=worker-log.d.ts.map

package/dist/queue/worker-log.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-log.d.ts","sourceRoot":"","sources":["../../src/queue/worker-log.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAuBH,MAAM,MAAM,cAAc,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,CAAC;AAEjE,qBAAa,SAAS;IAClB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;gBAEvB,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;IAK1C,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IACvB,IAAI,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IACvB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IACxB,KAAK,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI;IAE/B,OAAO,CAAC,KAAK;IAUb,OAAO,CAAC,MAAM;IAqBd,OAAO,CAAC,UAAU;IAqBlB,OAAO,CAAC,cAAc;IA0BtB,OAAO,CAAC,gBAAgB;CAmC3B"}

package/dist/queue/worker-log.js

@@ -0,0 +1,140 @@
+"use strict";
+/**
+ * IronBee CLI — Worker Log + Rotation
+ *
+ * See docs/job-queue.md §8.1.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WorkerLog = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const crypto_1 = require("crypto");
+const string_decoder_1 = require("string_decoder");
+const types_1 = require("./types");
+const paths_1 = require("./paths");
+class WorkerLog {
+    constructor(projectDir, sessionId) {
+        this.projectDir = projectDir;
+        this.sessionId = sessionId;
+    }
+    info(msg) { this.write("INFO", msg); }
+    warn(msg) { this.write("WARN", msg); }
+    error(msg) { this.write("ERROR", msg); }
+    debug(msg) { this.write("DEBUG", msg); }
+    write(level, msg) {
+        try {
+            const line = this.format(level, msg);
+            this.appendLine(line);
+            this.rotateIfNeeded();
+        }
+        catch {
+            // worker log failures are never fatal
+        }
+    }
+    format(level, msg) {
+        const timestamp = new Date().toISOString();
+        let line = `${timestamp} [${level}] ${msg}\n`;
+        const bytes = Buffer.from(line, "utf-8");
+        if (bytes.length <= types_1.MAX_LINE_BYTES) {
+            return line;
+        }
+        // truncate msg to fit under 4 KB with an ellipsis marker. Use
+        // StringDecoder so a multi-byte UTF-8 codepoint at the budget
+        // boundary is dropped cleanly instead of producing U+FFFD.
+        const prefix = `${timestamp} [${level}] `;
+        const budget = types_1.MAX_LINE_BYTES - Buffer.byteLength(prefix, "utf-8") - Buffer.byteLength("…\n", "utf-8");
+        const safeBudget = Math.max(0, budget);
+        const decoder = new string_decoder_1.StringDecoder("utf-8");
+        const truncated = decoder.write(Buffer.from(msg, "utf-8").subarray(0, safeBudget));
+        // intentionally skip decoder.end() — we want to DROP any incomplete
+        // trailing codepoint, not emit a replacement char.
+        line = `${prefix}${truncated}…\n`;
+        return line;
+    }
+    appendLine(line) {
+        const dir = (0, paths_1.queueDir)(this.projectDir, this.sessionId);
+        (0, fs_1.mkdirSync)(dir, { recursive: true, mode: 0o700 });
+        const path = (0, paths_1.workerLogFile)(this.projectDir, this.sessionId);
+        const flags = fs_1.constants.O_CREAT
+            | fs_1.constants.O_WRONLY
+            | fs_1.constants.O_APPEND
+            | (typeof fs_1.constants.O_NOFOLLOW === "number" ? fs_1.constants.O_NOFOLLOW : 0);
+        const fd = (0, fs_1.openSync)(path, flags, 0o600);
+        try {
+            const bytes = Buffer.from(line, "utf-8");
+            (0, fs_1.writeSync)(fd, bytes, 0, bytes.length);
+        }
+        finally {
+            try {
+                (0, fs_1.closeSync)(fd);
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+    rotateIfNeeded() {
+        const path = (0, paths_1.workerLogFile)(this.projectDir, this.sessionId);
+        let size;
+        try {
+            size = (0, fs_1.statSync)(path).size;
+        }
+        catch {
+            return;
+        }
+        if (size <= types_1.WORKER_LOG_ROTATE_BYTES) {
+            return;
+        }
+        const dir = (0, paths_1.queueDir)(this.projectDir, this.sessionId);
+        const rotated = (0, path_1.join)(dir, `worker-${(0, crypto_1.randomUUID)()}.log`);
+        try {
+            (0, fs_1.renameSync)(path, rotated);
+        }
+        catch (e) {
+            const err = e;
+            if (err.code === "ENOENT") {
+                return;
+            }
+            return;
+        }
+        this.enforceRetention();
+    }
+    enforceRetention() {
+        const dir = (0, paths_1.queueDir)(this.projectDir, this.sessionId);
+        let entries;
+        try {
+            entries = (0, fs_1.readdirSync)(dir);
+        }
+        catch {
+            return;
+        }
+        const rotated = [];
+        for (const name of entries) {
+            if (!paths_1.WORKER_LOG_ROTATED_REGEX.test(name)) {
+                continue;
+            }
+            const full = (0, path_1.join)(dir, name);
+            try {
+                const st = (0, fs_1.statSync)(full);
+                rotated.push({ path: full, mtimeMs: st.mtimeMs });
+            }
+            catch {
+                // ignore
+            }
+        }
+        if (rotated.length <= types_1.WORKER_LOG_RETAIN_COUNT) {
+            return;
+        }
+        rotated.sort((a, b) => b.mtimeMs - a.mtimeMs);
+        for (let i = types_1.WORKER_LOG_RETAIN_COUNT; i < rotated.length; i++) {
+            try {
+                (0, fs_1.unlinkSync)(rotated[i].path);
+            }
+            catch {
+                // ignore
+            }
+        }
+    }
+}
+exports.WorkerLog = WorkerLog;
+//# sourceMappingURL=worker-log.js.map

package/dist/queue/worker-log.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"worker-log.js","sourceRoot":"","sources":["../../src/queue/worker-log.ts"],"names":[],"mappings":";AAAA;;;;GAIG;;;AAEH,2BAUY;AACZ,+BAA4B;AAC5B,mCAAoC;AACpC,mDAA+C;AAC/C,mCAIiB;AACjB,mCAA4E;AAI5E,MAAa,SAAS;IAIlB,YAAY,UAAkB,EAAE,SAAiB;QAC7C,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IAC/B,CAAC;IAEM,IAAI,CAAC,GAAW,IAAU,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,CAAC,GAAW,IAAU,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACpD,KAAK,CAAC,GAAW,IAAU,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACtD,KAAK,CAAC,GAAW,IAAU,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAErD,KAAK,CAAC,KAAqB,EAAE,GAAW;QAC5C,IAAI,CAAC;YACD,MAAM,IAAI,GAAW,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;YACtB,IAAI,CAAC,cAAc,EAAE,CAAC;QAC1B,CAAC;QAAC,MAAM,CAAC;YACL,sCAAsC;QAC1C,CAAC;IACL,CAAC;IAEO,MAAM,CAAC,KAAqB,EAAE,GAAW;QAC7C,MAAM,SAAS,GAAW,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QACnD,IAAI,IAAI,GAAW,GAAG,SAAS,KAAK,KAAK,KAAK,GAAG,IAAI,CAAC;QACtD,MAAM,KAAK,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,KAAK,CAAC,MAAM,IAAI,sBAAc,EAAE,CAAC;YACjC,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,8DAA8D;QAC9D,8DAA8D;QAC9D,2DAA2D;QAC3D,MAAM,MAAM,GAAW,GAAG,SAAS,KAAK,KAAK,IAAI,CAAC;QAClD,MAAM,MAAM,GAAW,sBAAc,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAC/G,MAAM,UAAU,GAAW,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAkB,IAAI,8BAAa,CAAC,OAAO,CAAC,CAAC;QAC1D,MAAM,SAAS,GAAW,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC;QAC3F,oEAAoE;QACpE,mDAAmD;QACnD,IAAI,GAAG,GAAG,MAAM,GAAG,SAAS,KAAK,CAAC;QAClC,OAAO,IAAI,CAAC;IAChB,CAAC;IAEO,UAAU,CAAC,IAAY;QAC3B,MAAM,GAAG,GAAW,IAAA,gBAAQ,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAA,cAAS,EAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjD,MAAM,IAAI,GAAW,IAAA,qBAAa,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,MAAM,KAAK,GAAW,cAAW,CAAC,OAAO;cACnC,cAAW,CAAC,QAAQ;cACpB,cAAW,CAAC,QAAQ;cACpB,CAAC,OAAO,cAAW,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,cAAW,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,MAAM,EAAE,GAAW,IAAA,aAAQ,EAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QAChD,IAAI,CAAC;YACD,MAAM,KAAK,GAAW,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YACjD,IAAA,cAAS,EAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC1C,CAAC;gBAAS,CAAC;YACP,IAAI,CAAC;gBACD,IAAA,cAAS,EAAC,EAAE,CAAC,CAAC;YAClB,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;QACL,CAAC;IACL,CAAC;IAEO,cAAc;QAClB,MAAM,IAAI,GAAW,IAAA,qBAAa,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACpE,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACD,IAAI,GAAG,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QACD,IAAI,IAAI,IAAI,+BAAuB,EAAE,CAAC;YAClC,OAAO;QACX,CAAC;QAED,MAAM,GAAG,GAAW,IAAA,gBAAQ,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAW,IAAA,WAAI,EAAC,GAAG,EAAE,UAAU,IAAA,mBAAU,GAAE,MAAM,CAAC,CAAC;QAChE,IAAI,CAAC;YACD,IAAA,eAAU,EAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QAC9B,CAAC;QAAC,OAAO,CAAU,EAAE,CAAC;YAClB,MAAM,GAAG,GAA0B,CAA0B,CAAC;YAC9D,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBACxB,OAAO;YACX,CAAC;YACD,OAAO;QACX,CAAC;QACD,IAAI,CAAC,gBAAgB,EAAE,CAAC;IAC5B,CAAC;IAEO,gBAAgB;QACpB,MAAM,GAAG,GAAW,IAAA,gBAAQ,EAAC,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,OAAiB,CAAC;QACtB,IAAI,CAAC;YACD,OAAO,GAAG,IAAA,gBAAW,EAAC,GAAG,CAAC,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACL,OAAO;QACX,CAAC;QAGD,MAAM,OAAO,GAAc,EAAE,CAAC;QAC9B,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;YACzB,IAAI,CAAC,gCAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvC,SAAS;YACb,CAAC;YACD,MAAM,IAAI,GAAW,IAAA,WAAI,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACrC,IAAI,CAAC;gBACD,MAAM,EAAE,GAAgC,IAAA,aAAQ,EAAC,IAAI,CAAC,CAAC;gBACvD,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC;YACtD,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,IAAI,+BAAuB,EAAE,CAAC;YAC5C,OAAO;QACX,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAU,EAAE,CAAU,EAAU,EAAE,CAAC,CAAC,CAAC,OAAO,GAAG,CAAC,CAAC,OAAO,CAAC,CAAC;QACxE,KAAK,IAAI,CAAC,GAAW,+BAAuB,EAAE,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACpE,IAAI,CAAC;gBACD,IAAA,eAAU,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;YAAC,MAAM,CAAC;gBACL,SAAS;YACb,CAAC;QACL,CAAC;IACL,CAAC;CACJ;AA/HD,8BA+HC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ironbee-ai/cli",
-  "version": "0.5.2",
+  "version": "0.6.0",
   "description": "The CLI for IronBee — Verification and Intelligence Layer for Agentic Development",
   "main": "dist/index.js",
   "bin": {