@join-pantheon/cli 0.29.0 → 0.29.1

package/dist/cli.js

@@ -794,6 +794,7 @@ async function main() {
         }
         case "relay": {
             process.on("unhandledRejection", (e) => { console.error(`! unhandled rejection: ${e?.stack ?? String(e)}`); });
+            process.on("uncaughtException", (e) => { console.error(`! uncaught exception (kept serving): ${e?.stack ?? String(e)}`); });
             const relay = new Relay({
                 port: Number(flag("port", process.env.PORT ?? "8787")),
                 host: flag("host", "0.0.0.0"),

package/dist/machine.js

@@ -148,15 +148,22 @@ export function logFileFor(kind, proc) {
 export function dataSummary(dir) {
     if (!dir || !existsSync(dir))
         return "no ledger yet";
-    const files = sh(`ls -1 "${dir}"/*.jsonl 2>/dev/null`);
-    if (!files)
+    let files = [];
+    try {
+        files = readdirSync(dir).filter((f) => f.endsWith(".jsonl")).map((f) => join(dir, f));
+    }
+    catch { }
+    if (!files.length)
         return `${dir} (empty)`;
     let acts = 0;
-    for (const f of files.split("\n")) {
-        const n = sh(`wc -l < "${f}"`);
-        acts += Number(n ?? 0);
+    for (const f of files) {
+        try {
+            const t = readFileSync(f, "utf8");
+            acts += t.split("\n").filter((l) => l.trim()).length;
+        }
+        catch { }
     }
-    const spaces = files.split("\n").length;
+    const spaces = files.length;
     return `${acts} acts across ${spaces} space${spaces > 1 ? "s" : ""}`;
 }
 const defaultStopIo = (port = 8787) => ({

package/dist/quickstart.js

@@ -102,7 +102,12 @@ export function wireUp(opts, deps = {}) {
     }
     else if (opts.unattended) {
         const project = opts.unattended;
-        const isRepo = sh(`git -C ${JSON.stringify(project)} rev-parse --is-inside-work-tree 2>/dev/null`) === "true";
+        const isRepo = (() => { try {
+            return execFileSync("git", ["-C", project, "rev-parse", "--is-inside-work-tree"], { encoding: "utf8", stdio: ["ignore", "pipe", "ignore"], timeout: 10_000 }).trim() === "true";
+        }
+        catch {
+            return false;
+        } })();
         if (!isRepo && how === "explicit") {
             tools.push({ tool: "worker", status: `not installed — ${project} is not a git repo` });
             warnings.push(`--unattended needs a git repo to work in; pass --project <a clone>. Nothing was installed.`);

package/dist/relay.js

@@ -47,8 +47,14 @@ function cookieVal(req, name) {
         return "";
     for (const part of raw.split(";")) {
         const eq = part.indexOf("=");
-        if (eq > -1 && part.slice(0, eq).trim() === name)
-            return decodeURIComponent(part.slice(eq + 1).trim());
+        if (eq > -1 && part.slice(0, eq).trim() === name) {
+            try {
+                return decodeURIComponent(part.slice(eq + 1).trim());
+            }
+            catch {
+                return "";
+            }
+        }
     }
     return "";
 }
@@ -162,7 +168,30 @@ export class Relay {
     spaces = new Map();
     dataDir;
     log;
-    http = createServer((req, res) => this.onHttp(req, res));
+    http = createServer((req, res) => {
+        const fail = (e) => {
+            const bad = e instanceof TypeError || e instanceof URIError;
+            if (!bad)
+                this.log(`! http ${req.method} ${String(req.url ?? "").slice(0, 120)} failed: ${e?.message ?? e}`);
+            try {
+                if (!res.headersSent)
+                    this.json(res, bad ? 400 : 500, { error: bad ? "bad request" : "the relay could not handle that request" });
+                else
+                    res.end();
+            }
+            catch { }
+        };
+        try {
+            if (!URL.canParse(req.url ?? "/", "http://x"))
+                return fail(new TypeError("unparseable request target"));
+            const r = this.onHttp(req, res);
+            if (r && typeof r.catch === "function")
+                r.catch(fail);
+        }
+        catch (e) {
+            fail(e);
+        }
+    });
     wss = new WebSocketServer({ noServer: true, maxPayload: 256 * 1024 });
     heartbeat;
     compactedAt = new Map();
@@ -2179,7 +2208,7 @@ pantheon signup --email you@work.com --username you</code></pre>
                 catch { }
             }
         });
-        ws.on("close", (code) => {
+        const closeWork = (code) => {
             if (dbSession) {
                 this.accounts?.endSession(dbSession);
                 dbSession = null;
@@ -2211,7 +2240,13 @@ pantheon signup --email you@work.com --username you</code></pre>
             this.pushObligations(space);
             this.broadcast(space, { t: "roster", roster: this.roster(space) });
             this.log(`[${space.name}] - ${me.id}/${sessionId}`);
-        });
+        };
+        ws.on("close", (code) => { try {
+            closeWork(code);
+        }
+        catch (e) {
+            this.log(`! cleanup after a disconnect failed: ${e.message}`);
+        } });
         ws.on("error", () => { });
     }
     sweep() {
@@ -2229,11 +2264,21 @@ pantheon signup --email you@work.com --username you</code></pre>
         }
         const now = Date.now();
         for (const sp of this.spaces.values()) {
-            if (now - (this.compactedAt.get(sp.name) ?? 0) > LIMITS.ledgerCompactEveryMs)
-                this.compactSpace(sp);
-            this.lapseClaims(sp, now);
+            try {
+                if (now - (this.compactedAt.get(sp.name) ?? 0) > LIMITS.ledgerCompactEveryMs)
+                    this.compactSpace(sp);
+                this.lapseClaims(sp, now);
+            }
+            catch (e) {
+                this.log(`! [${sp.name}] housekeeping failed: ${e.message}`);
+            }
+        }
+        try {
+            this.evictSpaces();
+        }
+        catch (e) {
+            this.log(`! evicting idle spaces failed: ${e.message}`);
         }
-        this.evictSpaces();
     }
     lapseClaims(sp, now) {
         const live = new Set();

package/dist/service.js

@@ -8,9 +8,28 @@ import { launcher } from "./install.js";
 import { CONFIG_DIR } from "./config.js";
 const HERE = dirname(fileURLToPath(import.meta.url));
 const LABEL = (kind) => `dev.pantheon.${kind}`;
+export function borrowedHome() {
+    if (process.env.PANTHEON_SERVICES_ANY_HOME === "1")
+        return false;
+    try {
+        return resolve(homedir()) !== resolve(userInfo().homedir);
+    }
+    catch {
+        return false;
+    }
+}
+const READ_ONLY = (c, a) => c === "launchctl" ? ["print", "print-disabled", "list"].includes(a[0] ?? "")
+    : c === "systemctl" ? a.some((x) => ["is-enabled", "is-active", "status", "show", "show-environment"].includes(x))
+        : true;
+function guardedExecFile(c, a) {
+    if ((c === "launchctl" || c === "systemctl") && !READ_ONLY(c, a) && borrowedHome()) {
+        throw new Error(`refused: ${c} ${a[0] ?? ""} would change this user's real services, but HOME (${homedir()}) is not the user's home — a test or a sandbox. Set PANTHEON_SERVICES_ANY_HOME=1 to allow it.`);
+    }
+    return execFileSync(c, a, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }) ?? "";
+}
 export const realSys = () => ({
     platform: platform(),
-    exec: (c, a) => execFileSync(c, a, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] }) ?? "",
+    exec: guardedExecFile,
     uid: process.getuid?.() ?? 501,
     user: (() => { try {
         return userInfo().username;
@@ -239,7 +258,7 @@ export function disableService(kind, sys = realSys()) {
     }
     sys.exec("systemctl", ["--user", "disable", "--now", `pantheon-${kind}`]);
 }
-const realExec = (c, a) => execFileSync(c, a, { encoding: "utf8", stdio: ["ignore", "pipe", "pipe"] });
+const realExec = guardedExecFile;
 function outOf(exec, c, a) {
     try {
         return { out: String(exec(c, a) ?? ""), ok: true };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@join-pantheon/cli",
-  "version": "0.29.0",
+  "version": "0.29.1",
   "description": "Let your coding agent collaborate directly with your teammates' agents — ask, agree an interface, and deliver, without a human relaying messages.",
   "type": "module",
   "bin": {