@nettee/beacon 0.2.9 → 0.3.0

package/dist/state/trigger-store.js

@@ -1,8 +1,9 @@
 import { createHash, randomUUID } from "node:crypto";
-import { chmod, mkdir, open, readdir, readFile, rename, } from "node:fs/promises";
+import { chmod, mkdir, open, readdir, readFile, rename, rm, } from "node:fs/promises";
 import { basename, dirname, isAbsolute, join } from "node:path";
 import { z } from "zod";
 import { failureCodes, } from "../domain/types.js";
+import { cloudEventSchema } from "../events/cloudevent.js";
 import { feedbackRecordSchema, finalOutcomeContentSchema, parseFinalOutcomeContent, } from "../outcome/content.js";
 const timestamp = z.string().datetime({ offset: true });
 const failureSchema = z
@@ -23,6 +24,7 @@ const messageSchema = z
 })
     .strict();
 const inputSchema = z.discriminatedUnion("kind", [
+    z.object({ kind: z.literal("event"), event: cloudEventSchema }).strict(),
     z
         .object({
         kind: z.literal("feishu_message"),
@@ -202,21 +204,14 @@ export class TriggerStore {
             });
         }
     }
-    async readConcurrentClaim(triggerKey) {
-        for (let attempt = 0; attempt < 100; attempt += 1) {
-            try {
-                return await this.read(triggerKey);
-            }
-            catch (error) {
-                const cause = error instanceof Error
-                    ? error.cause
-                    : undefined;
-                if (cause?.code !== "ENOENT")
-                    throw error;
-                await new Promise((resolve) => setTimeout(resolve, 5));
-            }
+    async syncDirectory(directory) {
+        const handle = await open(directory, "r");
+        try {
+            await handle.sync();
+        }
+        finally {
+            await handle.close();
         }
-        return this.read(triggerKey);
     }
     async write(triggerKey, record) {
         const validated = validateRecord(record);
@@ -231,13 +226,7 @@ export class TriggerStore {
             await handle.close();
         }
         await rename(temporary, this.recordPath(triggerKey));
-        const directoryHandle = await open(directory, "r");
-        try {
-            await directoryHandle.sync();
-        }
-        finally {
-            await directoryHandle.close();
-        }
+        await this.syncDirectory(directory);
     }
     async claim(request) {
         if (request.sourceKey.length < 2 ||
@@ -247,18 +236,6 @@ export class TriggerStore {
         await this.prepare();
         const triggerKey = keyFor(this.profileId, request.sourceKey);
         const directory = join(this.root, triggerKey);
-        try {
-            await mkdir(directory, { mode: 0o700 });
-        }
-        catch (error) {
-            if (error.code === "EEXIST") {
-                return {
-                    created: false,
-                    record: await this.readConcurrentClaim(triggerKey),
-                };
-            }
-            throw new Error(`Cannot claim Trigger ${triggerKey}`, { cause: error });
-        }
         const record = {
             version: 1,
             triggerKey,
@@ -268,10 +245,37 @@ export class TriggerStore {
             acceptedAt: (request.acceptedAt ?? new Date()).toISOString(),
             target: request.target,
             ...(request.notifyTarget ? { notifyTarget: request.notifyTarget } : {}),
+            ...(request.input ? { input: request.input } : {}),
             ...(request.ingress ? { ingress: request.ingress } : {}),
         };
-        await this.write(triggerKey, record);
-        return { created: true, record };
+        const temporaryKey = `.claim-${randomUUID()}`;
+        const temporaryDirectory = join(this.root, temporaryKey);
+        await mkdir(temporaryDirectory, { mode: 0o700 });
+        try {
+            // Publish only after the complete record and its directory are durable.
+            // POSIX rename may replace a legacy empty claim directory, but cannot
+            // replace a populated winner from another concurrent claimant.
+            await this.write(temporaryKey, record);
+            try {
+                await rename(temporaryDirectory, directory);
+            }
+            catch (error) {
+                const code = error.code;
+                if (code !== "EEXIST" && code !== "ENOTEMPTY") {
+                    throw new Error(`Cannot publish Trigger ${triggerKey}`, {
+                        cause: error,
+                    });
+                }
+                const existing = await this.read(triggerKey);
+                await this.syncDirectory(this.root);
+                return { created: false, record: existing };
+            }
+            await this.syncDirectory(this.root);
+            return { created: true, record };
+        }
+        finally {
+            await rm(temporaryDirectory, { recursive: true, force: true });
+        }
     }
     async update(triggerKey, transform) {
         const current = await this.read(triggerKey);
@@ -286,7 +290,7 @@ export class TriggerStore {
         await this.prepare();
         const entries = await readdir(this.root, { withFileTypes: true });
         const records = await Promise.all(entries
-            .filter((entry) => entry.isDirectory())
+            .filter((entry) => entry.isDirectory() && !/^\.claim-[0-9a-f-]{36}$/.test(entry.name))
             .map((entry) => this.read(entry.name)));
         return records.sort((left, right) => left.acceptedAt.localeCompare(right.acceptedAt) ||
             left.triggerId.localeCompare(right.triggerId));

package/examples/config.yaml

@@ -15,3 +15,11 @@ dashboard:
   enabled: true
   listen: 0.0.0.0
   port: 46183
+# Opt in after creating a private event-credentials.json; see README.
+events:
+  enabled: false
+  listen: 127.0.0.1
+  port: 46184
+  max_body_bytes: 262144
+  max_pending: 1000
+  credentials_file: event-credentials.json

package/examples/event-credentials.json.example

@@ -0,0 +1,10 @@
+{
+  "version": 1,
+  "producers": [
+    {
+      "id": "deployment-system",
+      "token": "REPLACE_WITH_A_UNIQUE_RANDOM_TOKEN_AT_LEAST_32_CHARACTERS",
+      "sources": ["https://deploy.example.com/production"]
+    }
+  ]
+}

package/examples/profiles/example/profile.yaml

@@ -12,3 +12,11 @@ schedules:
     input: Prepare the weekday brief.
     notify:
       chat_id: REPLACE_WITH_GROUP_CHAT_ID
+# Optional external event subscription. Both lists use exact matches.
+# listener:
+#   sources:
+#     - https://deploy.example.com/production
+#   types:
+#     - com.example.deployment.completed.v1
+#   notify:
+#     chat_id: REPLACE_WITH_GROUP_CHAT_ID

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nettee/beacon",
-  "version": "0.2.9",
+  "version": "0.3.0",
   "description": "A single-host bridge from messaging and schedules to isolated agent runs",
   "license": "Apache-2.0",
   "repository": {