@ours.network/fleet 1.2.0-nightly.8 → 1.2.0-nightly.80

package/dist/application/task-layouts.js

@@ -0,0 +1,261 @@
+import { publishFleetResourceCommit } from './resource-observer.js';
+/** Task ↔ Room Layout bridge.
+ * A layout task owns exactly one Room Layout run, `task-<task_id>`, snapshotted
+ * from the named source layout with task context added to every room contract.
+ * Room opening and closing reuse the #199 engine in detached workers; each
+ * operation's outcome is recorded beside the run so HTTP callers can observe it.
+ */
+import { createHash, randomUUID } from 'node:crypto';
+import { existsSync, readFileSync, rmSync } from 'node:fs';
+import { join } from 'node:path';
+import { canonicalJson } from '../canonical-json.js';
+import { replaceFileAtomically, withFileLock } from '../atomic-file.js';
+import { assertLayoutFile } from '../rooms-tasks/layout-config.js';
+import { getTask as readTask } from '../rooms-tasks/task-state.js';
+import { stateRoot } from '../paths.js';
+import { launchFleetWorker } from '../rooms-tasks/external-worker.js';
+import { layoutSupervisorId } from '../rooms-tasks/layout-control.js';
+import { layoutRunPath, RoomLayoutService } from '../rooms-tasks/layout-service.js';
+import { FleetError } from './errors.js';
+import { ownedLayoutRetirementSeats } from '../rooms-tasks/layout-member-retirement.js';
+import { eraseMemberArtifacts } from '../rooms-tasks/erasure.js';
+import { assertTaskRegistrationsAbsent } from '../supervisor/catalog.js';
+/** Hash of the authorable definition only (never the source file path). */
+export function layoutDefinitionHash(definition) {
+    const { version, description, participants, rooms } = definition;
+    return createHash('sha256').update(canonicalJson({ version, description: description ?? null, participants, rooms })).digest('hex');
+}
+/** Always-current brief for layout participants; rooms may open long after the run snapshot.
+ * It lives in Fleet's private layout state, never in the agent-writable task workspace. */
+export function taskBriefPath(task) {
+    return layoutRunPath(`task-${task.task_id}`).replace(/\.json$/, '.brief.md');
+}
+export function writeTaskBrief(task) {
+    const path = taskBriefPath(task); // layoutRunPath verified the private directory
+    if (existsSync(path))
+        assertLayoutFile(path);
+    replaceFileAtomically(path, `# ${task.title}\n\nTask ${task.task_id}\n\n${task.brief?.trim() ?? ''}\n`, 0o600);
+}
+/** Task context reaches every participant through the room contract (briefing text).
+ * The contract references the brief file instead of copying the brief, so later edits reach later rooms. */
+export function taskScopedDefinition(definition, task) {
+    const preamble = [
+        `Task ${task.task_id}: ${task.title}`,
+        ...(task.workspace ? [`Task workspace: ${task.workspace.path}`] : []),
+        `Current task brief: ${taskBriefPath(task)} (kept up to date by Fleet; read it before starting work)`,
+    ].join('\n');
+    for (const room of Object.values(definition.rooms))
+        room.contract = room.contract ? `${preamble}\n\nRoom contract:\n${room.contract}` : preamble;
+    return definition;
+}
+const ROOM_KEY = /^[A-Za-z][A-Za-z0-9_-]*$/;
+/** Opening rooms requires a started, live task; checked again by the worker before any side effect. */
+export function assertLayoutOpenable(task) {
+    if (task.deletion?.status === 'pending')
+        throw new FleetError('conflict', 'task is being deleted; its layout rooms cannot be opened');
+    if (task.terminal_intent || ['done', 'cancelled', 'failed'].includes(task.state))
+        throw new FleetError('conflict', 'task is closing or closed; its layout rooms cannot be opened');
+    if (task.state !== 'active' && task.state !== 'review')
+        throw new FleetError('conflict', `start the task before opening rooms (state '${task.state}')`);
+}
+export class TaskLayouts {
+    configPath;
+    deps;
+    constructor(configPath, deps = {}) {
+        this.configPath = configPath;
+        this.deps = deps;
+    }
+    service() { return this.deps.service ?? new RoomLayoutService(this.configPath); }
+    operationPath(runId) { return join(stateRoot(), 'layouts', `${runId}.op.json`); }
+    provenancePath(runId) { return layoutRunPath(runId).replace(/\.json$/, '.provenance.json'); }
+    /** Serializes run creation, worker preconditions and deletion's removal of the run. */
+    withTaskLock(runId, fn) {
+        return withFileLock(layoutRunPath(runId).replace(/\.json$/, '.task.lock'), fn);
+    }
+    /** Resolve a layout for task creation: it must exist, parse and reference known Agent Templates. */
+    resolve(name) {
+        return { name, definition_hash: layoutDefinitionHash(this.service().definition(name)) };
+    }
+    runExists(link) { return existsSync(layoutRunPath(link.run_id)); }
+    /** Idempotent: reuse a run whose provenance matches this task, or snapshot one from the pinned source. */
+    async ensureRun(task, precondition) {
+        const link = task.layout;
+        if (!link)
+            throw Error(`task ${task.task_id} has no layout`);
+        await this.withTaskLock(link.run_id, async () => {
+            const current = readTask(task.task_id);
+            precondition?.(current);
+            writeTaskBrief(current);
+            if (this.runExists(link)) {
+                this.verifyProvenance(current);
+                return;
+            }
+            const service = this.service();
+            const source = service.definition(link.name);
+            if (layoutDefinitionHash(source) !== link.definition_hash)
+                throw Error(`room layout ${link.name} changed before this task's layout run was created; create a new task to use the edited layout`);
+            const scoped = taskScopedDefinition(structuredClone(source), current);
+            const provenance = { task_id: current.task_id, source_hash: link.definition_hash, scoped_hash: layoutDefinitionHash(scoped) };
+            // Provenance precedes the run: a crash in between is re-derived from the same pinned source.
+            replaceFileAtomically(this.provenancePath(link.run_id), JSON.stringify(provenance), 0o600);
+            await service.create(link.name, {}, link.run_id, { source: scoped, cwd: current.workspace?.path });
+        });
+    }
+    verifyProvenance(task) {
+        const link = task.layout, path = this.provenancePath(link.run_id);
+        let provenance;
+        try {
+            assertLayoutFile(path);
+            provenance = JSON.parse(readFileSync(path, 'utf8'));
+        }
+        catch { /* missing or untrusted */ }
+        const snapshot = this.service().open(link.run_id, true).snapshot();
+        if (!provenance || provenance.task_id !== task.task_id || provenance.source_hash !== link.definition_hash
+            || provenance.scoped_hash !== layoutDefinitionHash({ version: 1, ...snapshot.definition }))
+            throw Error(`layout run ${link.run_id} does not match this task's pinned layout; inspect it before continuing`);
+    }
+    readOperation(runId) {
+        const path = this.operationPath(runId);
+        try {
+            return existsSync(path) ? JSON.parse(readFileSync(path, 'utf8')) : undefined;
+        }
+        catch {
+            return undefined;
+        }
+    }
+    /** Update only the still-current operation; a superseded or forgotten one is never resurrected. */
+    updateOperation(runId, record) {
+        return withFileLock(this.operationPath(runId) + '.lock', () => {
+            if (this.readOperation(runId)?.id !== record.id)
+                return false;
+            this.writeOperation(runId, record);
+            return true;
+        });
+    }
+    writeOperation(runId, record) {
+        layoutRunPath(runId); // validates the ID and creates the private layouts directory
+        replaceFileAtomically(this.operationPath(runId), JSON.stringify({ ...record, updated_at: new Date().toISOString() }), 0o600);
+        publishFleetResourceCommit(this.operationPath(runId));
+    }
+    /** Sanitized read model: no Agent Template snapshots, owner fingerprints or session internals. */
+    view(task) {
+        const link = task.layout;
+        if (!link)
+            return undefined;
+        const base = { name: link.name, run_id: link.run_id, operation: this.readOperation(link.run_id) };
+        if (!this.runExists(link))
+            return { ...base, created: false, closed: false, closing: false, rooms: [], participants: [] };
+        const state = this.service().open(link.run_id, true).snapshot();
+        return {
+            ...base, created: true, closed: state.closed, closing: Boolean(state.closing),
+            ...(state.uncertain ? { uncertain: state.uncertain } : {}),
+            rooms: Object.entries(state.definition.rooms).map(([key, spec]) => {
+                const room = state.rooms[key];
+                return {
+                    key, goal: spec.goal, members: [...spec.members], ...(spec.roles ? { roles: { ...spec.roles } } : {}),
+                    state: room?.state ?? 'declared', ready: [...(room?.ready ?? [])],
+                    ...(room?.native ? { room_id: room.native.room_id, identity_cid: room.native.identity_cid } : {}),
+                };
+            }),
+            participants: Object.entries(state.participants).map(([key, p]) => ({
+                key, ...(p.participant ? { participant: p.participant, room: p.room } : {}),
+                agent_template: state.definition.participants[p.participant ?? key]?.agent_template, owned: p.owned, retired: Boolean(p.retired),
+                ...(p.instance?.agent ? { agent: p.instance.agent } : {}), ...(p.instance?.cid ? { cid: p.instance.cid } : {}),
+            })),
+        };
+    }
+    /** Accept an operation and run it in a detached worker; the outcome is recorded for polling. */
+    async launch(task, operation, room) {
+        const link = task.layout;
+        if (!link)
+            throw Error(`task ${task.task_id} has no layout`);
+        if (operation !== 'close' && (!room || !ROOM_KEY.test(room)))
+            throw new FleetError('invalid_request', 'a valid room key is required');
+        if (room) {
+            const definition = this.runExists(link) ? this.service().open(link.run_id, true).snapshot().definition : undefined;
+            if (definition && !Object.hasOwn(definition.rooms, room))
+                throw new FleetError('resource_not_found', `unknown layout room: ${room}`);
+        }
+        const record = { id: randomUUID(), operation, ...(room ? { room } : {}), status: 'launching' };
+        await withFileLock(this.operationPath(link.run_id) + '.lock', () => {
+            const current = this.readOperation(link.run_id);
+            // Full close always proceeds: terminal cleanup must not wait behind an open; the engine lock serializes them.
+            if (operation !== 'close' && current && ['launching', 'running'].includes(current.status) && Date.now() - Date.parse(current.updated_at) < 10 * 60_000)
+                throw new FleetError('conflict', `layout operation already in progress: ${current.operation}${current.room ? ' ' + current.room : ''}`);
+            this.writeOperation(link.run_id, record);
+        });
+        const args = ['task', '_layout', task.task_id, operation, ...(room ? [room] : []), '--operation-id', record.id];
+        const launch = this.deps.launch
+            ?? ((cli, name) => launchFleetWorker(cli, name, this.configPath, this.deps.binPath?.()));
+        try {
+            await launch(args, `task-layout-${task.task_id}`);
+        }
+        catch (error) {
+            await this.updateOperation(link.run_id, { ...record, status: 'failed', error: `worker failed to start: ${String(error.message ?? error)}` });
+            throw error;
+        }
+        return this.readOperation(link.run_id);
+    }
+    /** Worker body. Errors are recorded and rethrown; unknown engine outcomes stay in run state for inspection. */
+    /** Without an ID (direct CLI use) the worker claims a new current operation. */
+    async run(task, operation, room, operationId) {
+        const link = task.layout;
+        if (!link)
+            throw Error(`task ${task.task_id} has no layout`);
+        const record = { id: operationId ?? randomUUID(), operation, ...(room ? { room } : {}) };
+        if (!operationId)
+            await withFileLock(this.operationPath(link.run_id) + '.lock', () => this.writeOperation(link.run_id, { ...record, status: 'running' }));
+        else
+            await this.updateOperation(link.run_id, { ...record, status: 'running' });
+        try {
+            await this.perform(task, operation, room);
+            await this.updateOperation(link.run_id, { ...record, status: 'succeeded' });
+        }
+        catch (error) {
+            await this.updateOperation(link.run_id, { ...record, status: 'failed', error: error.message ?? String(error) });
+            throw error;
+        }
+    }
+    async perform(task, operation, room) {
+        const link = task.layout;
+        if (operation === 'open') {
+            // Re-read under the task-layout lock: a deletion or terminal action accepted after HTTP admission wins.
+            await this.ensureRun(task, assertLayoutOpenable);
+            // If deletion removed the run since, fail rather than recreate it.
+            if (!this.runExists(link))
+                throw new FleetError('conflict', 'task layout run was removed');
+            await this.service().open(link.run_id).activate(layoutSupervisorId(), room);
+            return;
+        }
+        if (!this.runExists(link))
+            return; // nothing was created, nothing to close
+        const engine = this.service().open(link.run_id, true);
+        if (operation === 'close-room') {
+            if (!engine.snapshot().rooms[room]?.native)
+                return; // declared but never opened
+            await engine.closeRoom(layoutSupervisorId(), room);
+        }
+        else
+            await engine.close(layoutSupervisorId());
+    }
+    /** Deletion: close every layout resource, then remove the run and its operation record. */
+    async closeAndForget(task) {
+        const link = task.layout;
+        if (!link)
+            return;
+        if (this.runExists(link)) {
+            const engine = this.service().open(link.run_id, true);
+            await engine.delete(layoutSupervisorId());
+            const state = engine.snapshot();
+            const rooms = Object.values(state.rooms).flatMap(room => room.native ? [room.native.room_id] : []);
+            assertTaskRegistrationsAbsent(task.task_id);
+            await eraseMemberArtifacts('task', task.task_id, ownedLayoutRetirementSeats(state, link.run_id), rooms);
+        }
+        assertTaskRegistrationsAbsent(task.task_id);
+        await this.withTaskLock(link.run_id, async () => {
+            for (const path of [layoutRunPath(link.run_id), this.provenancePath(link.run_id), taskBriefPath(task)])
+                rmSync(path, { force: true });
+            await withFileLock(this.operationPath(link.run_id) + '.lock', () => rmSync(this.operationPath(link.run_id), { force: true }));
+        });
+    }
+}

package/dist/application/task-room-service.d.ts

@@ -1,3 +1,6 @@
+import type { AddMemberRequest } from '../rooms-tasks/add-member.js';
+import { TaskLayouts } from './task-layouts.js';
+import { type LiveReadinessDeps, type TaskReadinessIssue } from '../rooms-tasks/live-readiness.js';
 import { type FleetConfig } from '../config.js';
 import { type CoworkAdapter } from '../rooms-tasks/cowork-adapter.js';
 import { provisionMembers } from '../rooms-tasks/provision.js';
@@ -57,9 +60,9 @@ export interface TaskProvisioningOutcome {
 /** Repairable terminal observation derived entirely from durable Task/Room state. */
 export declare function recordTaskProvisioningOutcome(outcome: TaskProvisioningOutcome): void;
 export declare class TaskRoomApplicationError extends Error {
-    readonly code: 'template_not_found' | 'task_template_drift' | 'template_mismatch' | 'task_terminal' | 'task_terminal_already' | 'task_non_resumable' | 'task_deleting' | 'room_not_found' | 'room_record_not_found';
+    readonly code: 'template_not_found' | 'task_template_drift' | 'template_mismatch' | 'task_terminal' | 'task_terminal_already' | 'task_non_resumable' | 'task_deleting' | 'room_not_found' | 'room_record_not_found' | 'task_not_ready';
     readonly fields: Readonly<Record<string, string>>;
-    constructor(code: 'template_not_found' | 'task_template_drift' | 'template_mismatch' | 'task_terminal' | 'task_terminal_already' | 'task_non_resumable' | 'task_deleting' | 'room_not_found' | 'room_record_not_found', message: string, fields?: Readonly<Record<string, string>>);
+    constructor(code: 'template_not_found' | 'task_template_drift' | 'template_mismatch' | 'task_terminal' | 'task_terminal_already' | 'task_non_resumable' | 'task_deleting' | 'room_not_found' | 'room_record_not_found' | 'task_not_ready', message: string, fields?: Readonly<Record<string, string>>);
 }
 export interface CreateTaskRequest {
     actor: TaskRoomActor;
@@ -74,6 +77,8 @@ export interface CreateTaskRequest {
     list?: string;
     members?: MemberOverrides;
     anonymous?: boolean;
+    /** Room Layout name: the task's rooms and participants come from a layout run. */
+    layout?: string;
 }
 export interface CreateRoomRequest {
     actor: TaskRoomActor;
@@ -87,8 +92,12 @@ export interface CreateRoomRequest {
 }
 export declare function resolveRoomLaunchPolicy(template: TemplateSnapshot | undefined, override: boolean | undefined): RoomLaunchPolicy;
 export interface TaskRoomServiceDeps {
+    taskLayouts?: TaskLayouts;
+    liveReadiness?: LiveReadinessDeps;
     loadConfiguration?(path?: string): FleetConfig;
-    cowork?(config: FleetConfig): CoworkAdapter;
+    cowork?(config: FleetConfig, options?: {
+        timeoutMs: number;
+    }): CoworkAdapter;
     binPath?(): string;
     provisionMembers?: typeof provisionMembers;
     moveTaskToList?: typeof moveTaskToList;
@@ -101,6 +110,67 @@ export declare class TaskRoomApplicationService {
     private readonly configurationPath?;
     private readonly deps;
     constructor(configurationPath?: string | undefined, deps?: TaskRoomServiceDeps);
+    addMember(taskId: string, request: AddMemberRequest): Promise<{
+        requestId: string;
+        taskId: string;
+        roleId: string;
+        state: "running" | "succeeded" | "attention" | "failed";
+        error?: string;
+    } | {
+        state: string;
+        error: string;
+        requestId: string;
+        taskId: string;
+        roleId: string;
+    }>;
+    memberAddition(taskId: string, requestId: string): Promise<{
+        requestId: string;
+        taskId: string;
+        roleId: string;
+        state: "running" | "succeeded" | "attention" | "failed";
+        error?: string;
+    } | {
+        state: string;
+        error: string;
+        requestId: string;
+        taskId: string;
+        roleId: string;
+    }>;
+    private layouts;
+    private createLayoutTask;
+    /** Layout tasks never provision the legacy single room; their run is a local snapshot. */
+    private ensureLayoutWork;
+    /** Compact room list for task listings; never fails the listing on an unreadable run. */
+    withLayoutRooms<T extends TaskRecord>(task: T): T & {
+        layout_rooms?: Array<{
+            key: string;
+            state: string;
+            room_id?: string;
+            identity_cid?: string;
+        }>;
+    };
+    /** Backlog only: choose, change or clear the task's Room Layout before it starts. */
+    setTaskLayout(input: {
+        actor: TaskRoomActor;
+        taskId: string;
+        layout: string | null;
+        expectedLayout: string | null;
+    }): Promise<TaskRecord>;
+    taskLayout(taskId: string): import("./task-layouts.js").TaskLayoutView;
+    launchTaskLayoutOperation(input: {
+        actor: TaskRoomActor;
+        taskId: string;
+        operation: 'open' | 'close-room';
+        room: string;
+    }): Promise<import("./task-layouts.js").TaskLayoutOperationRecord>;
+    /** Worker entry for detached layout operations. */
+    runTaskLayoutOperation(input: {
+        actor: TaskRoomActor;
+        taskId: string;
+        operation: 'open' | 'close-room' | 'close';
+        room?: string;
+        operationId?: string;
+    }): Promise<import("./task-layouts.js").TaskLayoutView>;
     createTask(request: CreateTaskRequest): Promise<TaskRecord>;
     createRoom(request: CreateRoomRequest): Promise<RoomOrchestrationRecord>;
     startTask(input: {
@@ -114,12 +184,14 @@ export declare class TaskRoomApplicationService {
         state?: TaskState | TaskState[];
         list?: string;
         includeDeleting?: boolean;
+        strict?: boolean;
     }): TaskRecord[];
     listTaskLists(): TaskListRecord[];
     groupedTasks(filter?: {
         state?: TaskState | TaskState[];
         list?: string;
         includeDeleting?: boolean;
+        strict?: boolean;
     }): Array<{
         list: TaskListRecord;
         tasks: TaskRecord[];
@@ -147,10 +219,17 @@ export declare class TaskRoomApplicationService {
         moved: number;
         destination?: TaskListRecord;
     }>;
+    editTaskDescription(input: {
+        actor: TaskRoomActor;
+        taskId: string;
+        brief: string;
+        expectedBrief: string;
+    }): TaskRecord;
     getTask(taskId: string): {
         task: TaskRecord;
         orchestration: RoomOrchestrationRecord | undefined;
     };
+    /** Durable provisioning progress only; use active task start/work for a live readiness check. */
     taskProvisioningOutcome(taskId: string): TaskProvisioningOutcome;
     awaitTaskProvisioning(input: {
         actor: TaskRoomActor;
@@ -209,10 +288,20 @@ export declare class TaskRoomApplicationService {
         taskId: string;
         outcome?: TaskOutcome;
     }): Promise<TaskSettlementPlan>;
+    /** Terminal layout tasks archive their rooms and retire only agents their run created. */
+    private withLayoutCleanup;
+    /** Retry terminal layout cleanup for known resources (e.g. after a failed close). */
+    retryTaskLayoutCleanup(input: {
+        actor: TaskRoomActor;
+        taskId: string;
+    }): Promise<import("./task-layouts.js").TaskLayoutOperationRecord>;
     cancelTask(input: {
         actor: TaskRoomActor;
         taskId: string;
     }): Promise<TaskSettlementPlan>;
+    /** Continue accepted operations outside the HTTP connection's lifetime. */
+    launchTaskSettlement(taskId: string): Promise<TaskRecord>;
+    launchTaskProvisioning(taskId: string): Promise<TaskProvisioningOutcome>;
     settleTask(input: {
         actor: {
             kind: 'internal_worker';
@@ -279,6 +368,9 @@ export declare class TaskRoomApplicationService {
         actor: TaskRoomActor;
         roomId: string;
     }): Promise<{
+        room: undefined;
+        settlementRequired: true;
+    } | {
         room: RoomOrchestrationRecord;
         settlementRequired: true;
     }>;
@@ -300,6 +392,12 @@ export declare class TaskRoomApplicationService {
         taskId: string;
         outcome?: TaskOutcome;
     }): Promise<TaskSettlementPlan>;
+    /** Point-in-time health, separate from durable provisioning and lifecycle. */
+    observeTaskReadiness(taskId: string): Promise<{
+        state: 'ready';
+    } | TaskReadinessIssue>;
+    private observeLiveReadiness;
+    private assertTaskLiveReadiness;
     ensureTaskWork(input: {
         actor: TaskRoomActor;
         taskId: string;