@jhizzard/termdeck 0.3.9 → 0.4.0

package/README.md

@@ -161,7 +161,7 @@ Honest limits, stated upfront so the skeptic has nothing to chase:
 - **Not a replacement for reading docs.** It's the shortest path to a memory you already wrote. If the memory isn't there, the feature does nothing.
 - **Not fully local by default.** Tier 2+ reaches out to Supabase for storage and OpenAI for embeddings. Tier 1 is fully local. A fully-local Tier 2 (local Postgres + local embeddings) is on the roadmap.
 - **Not free forever.** Tier 2+ pays OpenAI fractions of a cent per memory for embeddings. Self-hosted embeddings via Ollama are on the roadmap.
-- **Not proven at scale.** v0.3.9, validated against 3,527 memories in one developer's production store. First full Rumen kickstart on 2026-04-15 processed 111 sessions into 111 insights in one pass. No multi-user data yet. Bug reports and issues welcome.
+- **Not proven at scale.** v0.4.0, validated against 3,527 memories in one developer's production store. First full Rumen kickstart on 2026-04-15 processed 111 sessions into 111 insights in one pass. No multi-user data yet. Bug reports and issues welcome.
 
 ---
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jhizzard/termdeck",
-  "version": "0.3.9",
+  "version": "0.4.0",
   "description": "Browser-based terminal multiplexer with metadata overlays, panel flashback memory recall, and AI-aware session management",
   "bin": {
     "termdeck": "./packages/cli/src/index.js"

package/packages/client/public/app.js

@@ -1,7 +1,8 @@
 /* Extracted from index.html 2026-04-15 — see git blame on index.html prior to commit UNCOMMITTED for history */
     // ===== TermDeck Client =====
     const API = window.location.origin;
-    const WS_BASE = `ws://${window.location.host}/ws`;
+    const WS_PROTOCOL = window.location.protocol === 'https:' ? 'wss:' : 'ws:';
+    const WS_BASE = `${WS_PROTOCOL}//${window.location.host}/ws`;
 
     // State
     const state = {

package/packages/server/src/index.js

@@ -133,6 +133,11 @@ function createServer(config) {
   // ==================== REST API ====================
 
   // GET /api/health - preflight health checks (Sprint 6 T1, wired by T3)
+  // SECURITY NOTE: Returns operational detail (memory counts, DB latency, project paths,
+  // RAG breaker state). Intentional for local-first use — TermDeck binds to 127.0.0.1 by
+  // default and the CLI guardrail blocks beyond-localhost binds without explicit opt-in.
+  // For any non-loopback deployment (Sprint 18+ remote story), gate this route behind auth
+  // or scope the response to a minimal {status, version} payload.
   app.get('/api/health', createHealthHandler(config));
 
   // GET /api/sessions - list all active sessions

package/packages/server/src/rag.js

@@ -59,8 +59,12 @@ class RAGIntegration {
     };
 
     // Circuit breaker: track consecutive 404s per table name.
-    // After 3 consecutive 404s, disable pushes to that table until restart.
-    this._circuitBreaker = new Map(); // table -> { count: number, open: boolean }
+    // After 3 consecutive 404s, open the breaker. The breaker auto-transitions
+    // to half-open after 5 minutes, allowing one retry attempt. A successful
+    // retry fully resets the breaker; a failed retry re-opens it for another
+    // 5-minute backoff window.
+    this._circuitBreaker = new Map(); // table -> { count, open, openedAt, halfOpen }
+    this._halfOpenDelayMs = 5 * 60 * 1000;
 
     if (this.enabled) {
       this._startSync();
@@ -142,22 +146,34 @@ class RAGIntegration {
     }, this._projectFor(session));
   }
 
-  // Circuit breaker check — returns true if pushes to this table are disabled
+  // Circuit breaker check — returns true if pushes to this table are disabled.
+  // Has a side effect: when the 5-minute half-open window has elapsed, flips
+  // the breaker to half-open and permits one retry attempt through.
   _isCircuitOpen(table) {
     const state = this._circuitBreaker.get(table);
-    return !!(state && state.open);
+    if (!state || !state.open) return false;
+    if (state.halfOpen) return true; // retry already in flight — block concurrent pushes
+
+    const elapsed = Date.now() - (state.openedAt || 0);
+    if (elapsed >= this._halfOpenDelayMs) {
+      state.halfOpen = true;
+      console.log(`[rag] circuit breaker half-open for ${table}, retrying`);
+      return false; // allow one attempt through
+    }
+    return true;
   }
 
   // Record a 404 for a table; opens the breaker after 3 consecutive hits
   _record404(table) {
     let state = this._circuitBreaker.get(table);
     if (!state) {
-      state = { count: 0, open: false };
+      state = { count: 0, open: false, openedAt: null, halfOpen: false };
       this._circuitBreaker.set(table, state);
     }
     state.count += 1;
     if (state.count >= 3 && !state.open) {
       state.open = true;
+      state.openedAt = Date.now();
       console.warn(`[rag] circuit breaker open for ${table} — disabling pushes (table may not exist in Supabase)`);
     }
   }
@@ -208,8 +224,14 @@ class RAGIntegration {
       // Success — reset any accumulated 404 count for this table
       this._resetCircuit(table);
     } catch (err) {
-      // Log at warn (not error) to reduce noise — the circuit breaker handles persistence
-      if (!this._isCircuitOpen(table)) {
+      const state = this._circuitBreaker.get(table);
+      if (state && state.halfOpen) {
+        // Half-open retry failed — re-open for another 5-minute backoff window
+        state.halfOpen = false;
+        state.openedAt = Date.now();
+        console.warn(`[rag] circuit breaker re-opened for ${table} after half-open retry failed`);
+      } else if (!state || !state.open) {
+        // Log at warn (not error) to reduce noise — the circuit breaker handles persistence
         console.warn('[rag] push to', table, 'failed:', err.message);
       }
       throw err; // Propagate to caller so sync loop knows this event failed

package/packages/server/src/transcripts.js

@@ -46,6 +46,8 @@ class TranscriptWriter {
     // Lazy pool
     this._pool = null;
     this._poolFailed = false;
+    this._poolFailedAt = 0;
+    this._poolRetryMs = 30_000;
 
     // Start flush timer
     this._timer = null;
@@ -56,7 +58,13 @@ class TranscriptWriter {
 
   // Lazy-init pg.Pool (same pattern as getRumenPool in index.js)
   _getPool() {
-    if (this._pool || this._poolFailed) return this._pool;
+    if (this._pool) return this._pool;
+    if (this._poolFailed) {
+      if (Date.now() - this._poolFailedAt < this._poolRetryMs) return null;
+      console.warn('[transcript] retrying pool creation after 30s cooldown');
+      this._poolFailed = false;
+      this._poolFailedAt = 0;
+    }
     if (!pg || !this._databaseUrl) return null;
     try {
       this._pool = new pg.Pool({
@@ -72,6 +80,7 @@ class TranscriptWriter {
     } catch (err) {
       console.error('[transcript] pool creation failed:', err.message);
       this._poolFailed = true;
+      this._poolFailedAt = Date.now();
       return null;
     }
   }