@overdeck/desktop 0.45.24 → 0.47.0

package/server/linear-mcp-auth-BxUOzswy.js

@@ -0,0 +1,280 @@
+import { a as init_event_store, i as initEventStore } from "./event-store-CrHcVC5_.js";
+import { $n as getAgentDir, At as AmbiguousKeyedDeliveryError, It as init_delivery, Y as init_messaging, Z as messageAgentWithOutcome, ir as init_agent_state } from "./queries-C-MUZaIy.js";
+import { _ as init_tmux_dedup, l as KeyedMarkerVerificationError, u as KeyedSubmitTargetDeadError } from "./auto-spawn-consent-CQ9Bi9q6.js";
+import { n as createPromiseCoalescer, r as init_in_flight_guard } from "./in-flight-guard-D-sSkADM.js";
+import { join } from "node:path";
+import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
+//#region ../../lib/linear-mcp-auth.ts
+init_event_store();
+init_agent_state();
+init_delivery();
+init_messaging();
+init_tmux_dedup();
+init_in_flight_guard();
+const LINEAR_MCP_AUTH_URL_TTL_MS = 1800 * 1e3;
+const LINEAR_MCP_AUTH_WAKE_COPY = "Linear MCP authentication has been restored — the operator completed OAuth. Re-check access now with one lightweight read (e.g. mcp__linear__list_issues). If it succeeds, resume your canonical task. If it still returns an authentication error, call mcp__linear__authenticate once and wait; do not retry in a loop.";
+const linearMcpAuthWakeCoalescer = createPromiseCoalescer();
+const LINEAR_MCP_AUTH_EVENT_TYPES = [
+	"linear_mcp_auth.required",
+	"linear_mcp_auth.healthy",
+	"linear_mcp_auth.notified",
+	"linear_mcp_auth.callback_relayed"
+];
+function defaultExpiresAt(declaredAt) {
+	return new Date(Date.parse(declaredAt) + LINEAR_MCP_AUTH_URL_TTL_MS).toISOString();
+}
+function foldLinearMcpAuthEvents(events, initial = {
+	open: null,
+	lastCompleted: null
+}) {
+	let open = initial.open;
+	let lastCompleted = initial.lastCompleted;
+	for (const event of events) switch (event.type) {
+		case "linear_mcp_auth.required": {
+			const payload = event.payload;
+			open ??= {
+				id: `seq-${event.sequence}`,
+				declaredAt: event.timestamp,
+				authUrl: null,
+				authUrlAgentId: null,
+				authUrlExpiresAt: null,
+				agents: /* @__PURE__ */ new Map()
+			};
+			const expiresAt = payload.expiresAt ?? defaultExpiresAt(event.timestamp);
+			open.agents.set(payload.agentId, {
+				agentId: payload.agentId,
+				issueId: payload.issueId,
+				declaredAt: event.timestamp,
+				expiresAt,
+				notifiedAt: null
+			});
+			if (payload.authUrl !== null) {
+				open.authUrl = payload.authUrl;
+				open.authUrlAgentId = payload.agentId;
+				open.authUrlExpiresAt = expiresAt;
+			}
+			break;
+		}
+		case "linear_mcp_auth.healthy":
+			if (open !== null) {
+				lastCompleted = open;
+				open = null;
+			}
+			break;
+		case "linear_mcp_auth.notified": {
+			const payload = event.payload;
+			const lifecycle = payload.lifecycleId !== void 0 ? open?.id === payload.lifecycleId ? open : lastCompleted?.id === payload.lifecycleId ? lastCompleted : null : open ?? lastCompleted;
+			const agent = lifecycle?.agents.get(payload.agentId);
+			if (agent !== void 0 && payload.outcome !== "delivering") lifecycle?.agents.set(payload.agentId, {
+				...agent,
+				notifiedAt: event.timestamp
+			});
+			break;
+		}
+		case "linear_mcp_auth.callback_relayed": break;
+	}
+	return {
+		open,
+		lastCompleted
+	};
+}
+let projectionCache = null;
+/**
+* Read the lifecycle fold from a maintained projection rather than rebuilding
+* it per poll. The projection advances incrementally: each read fetches only
+* auth-typed events newer than the covered sequence via an indexed SQL query
+* (`queryByTypesSince`), so unrelated retained history is never materialized
+* — a full `readFrom(0)` on the seven-day event table has blown the heap in
+* smoke testing, and the banner calls this path every 5–30 seconds per
+* connected client.
+*/
+async function readLinearMcpAuthFold() {
+	const store = await initEventStore();
+	if (projectionCache !== null && store.getLatestSequence() < projectionCache.coveredSequence) projectionCache = null;
+	const afterSequence = projectionCache?.coveredSequence ?? 0;
+	const delta = store.queryByTypesSince([...LINEAR_MCP_AUTH_EVENT_TYPES], afterSequence);
+	if (delta.length === 0 && projectionCache !== null) return projectionCache.fold;
+	const fold = foldLinearMcpAuthEvents(delta, projectionCache?.fold);
+	const lastEvent = delta[delta.length - 1];
+	projectionCache = {
+		fold,
+		coveredSequence: lastEvent !== void 0 ? lastEvent.sequence : afterSequence
+	};
+	return fold;
+}
+function projectLifecycle(lifecycle, nowIso) {
+	if (lifecycle === null) return {
+		status: "none",
+		authUrl: null,
+		authUrlAgentId: null,
+		authUrlExpiresAt: null,
+		declaredAt: null,
+		blockedAgents: []
+	};
+	return {
+		status: lifecycle.authUrlExpiresAt !== null && lifecycle.authUrlExpiresAt < nowIso ? "expired" : "active",
+		authUrl: lifecycle.authUrl,
+		authUrlAgentId: lifecycle.authUrlAgentId,
+		authUrlExpiresAt: lifecycle.authUrlExpiresAt,
+		declaredAt: lifecycle.declaredAt,
+		blockedAgents: [...lifecycle.agents.values()]
+	};
+}
+function linearMcpAuthEvent(input) {
+	return {
+		type: input.type,
+		timestamp: input.timestamp ?? (/* @__PURE__ */ new Date()).toISOString(),
+		payload: input.payload
+	};
+}
+async function appendLinearMcpAuthEvent(input) {
+	return (await initEventStore()).appendAsync(linearMcpAuthEvent(input));
+}
+function appendLinearMcpAuthHealthyEvent(payload, timestamp) {
+	return appendLinearMcpAuthEvent({
+		type: "linear_mcp_auth.healthy",
+		payload,
+		timestamp
+	});
+}
+function appendLinearMcpAuthNotifiedEvent(payload, timestamp) {
+	return appendLinearMcpAuthEvent({
+		type: "linear_mcp_auth.notified",
+		payload,
+		timestamp
+	});
+}
+function appendLinearMcpAuthCallbackRelayedEvent(payload, timestamp) {
+	return appendLinearMcpAuthEvent({
+		type: "linear_mcp_auth.callback_relayed",
+		payload,
+		timestamp
+	});
+}
+async function resolveLinearMcpAuthIntervention(nowIso = (/* @__PURE__ */ new Date()).toISOString()) {
+	const { open } = await readLinearMcpAuthFold();
+	return projectLifecycle(open, nowIso);
+}
+async function computeLinearMcpAuthWakeSet() {
+	const { lastCompleted } = await readLinearMcpAuthFold();
+	if (lastCompleted === null) return null;
+	const agents = [...lastCompleted.agents.values()].filter((agent) => agent.notifiedAt === null);
+	return {
+		lifecycleId: lastCompleted.id,
+		agents
+	};
+}
+const MAX_WAKE_PASSES = 10;
+const WAKE_FOLLOW_UP_MIN_DELAY_MS = 1e3;
+const WAKE_FOLLOW_UP_MAX_DELAY_MS = 6e4;
+let wakeFollowUpDelayMs = WAKE_FOLLOW_UP_MIN_DELAY_MS;
+function wakeOutboxPath(agentId, lifecycleId) {
+	return join(getAgentDir(agentId), "linear-mcp-wake", `${lifecycleId}.json`);
+}
+async function readWakeOutbox(agentId, lifecycleId) {
+	try {
+		const raw = await readFile(wakeOutboxPath(agentId, lifecycleId), "utf-8");
+		return JSON.parse(raw);
+	} catch {
+		return null;
+	}
+}
+async function writeWakeOutbox(entry) {
+	const path = wakeOutboxPath(entry.agentId, entry.lifecycleId);
+	await mkdir(join(getAgentDir(entry.agentId), "linear-mcp-wake"), { recursive: true });
+	const tmpPath = `${path}.${process.pid}.tmp`;
+	await writeFile(tmpPath, JSON.stringify(entry, null, 2), "utf-8");
+	await rename(tmpPath, path);
+}
+/**
+* Deliver one lifecycle's wake through the keyed outbox. An acknowledged
+* entry suppresses the replay and replays only its recorded outcome — a
+* crash after the ack write never produces a second send, and the recorded
+* outcome stays faithful ('queued' is never upgraded to 'delivered'). A
+* pending or missing entry is (re)driven: a crash before the ack write
+* replays the send, which is correct because that send was never
+* acknowledged.
+*/
+async function deliverWakeWithOutbox(agentId, lifecycleId) {
+	const existing = await readWakeOutbox(agentId, lifecycleId);
+	if (existing?.state === "acknowledged" && existing.outcome !== void 0) return {
+		sent: false,
+		outcome: existing.outcome
+	};
+	if (existing === null) await writeWakeOutbox({
+		lifecycleId,
+		agentId,
+		message: LINEAR_MCP_AUTH_WAKE_COPY,
+		state: "pending",
+		createdAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+	let outcome;
+	try {
+		outcome = await messageAgentWithOutcome(agentId, LINEAR_MCP_AUTH_WAKE_COPY, "linear-mcp-auth-wake", { dedupKey: `linear-mcp-auth-wake:${lifecycleId}` });
+	} catch (error) {
+		if (error instanceof AmbiguousKeyedDeliveryError || error instanceof KeyedSubmitTargetDeadError || error instanceof KeyedMarkerVerificationError) throw error;
+		outcome = "failed";
+	}
+	await writeWakeOutbox({
+		lifecycleId,
+		agentId,
+		message: LINEAR_MCP_AUTH_WAKE_COPY,
+		state: "acknowledged",
+		outcome,
+		createdAt: existing?.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+		acknowledgedAt: (/* @__PURE__ */ new Date()).toISOString()
+	});
+	return {
+		sent: true,
+		outcome
+	};
+}
+/**
+* Record the completion of a delivery attempt in the lifecycle event log —
+* this, not the outbox receipt, is what removes the agent from the wake set.
+* If the append fails, the agent stays in the wake set but the acknowledged
+* outbox entry suppresses any replay: the next pass only retries this
+* completion record.
+*/
+async function recordWakeCompletion(blockedAgent, lifecycleId, outcome) {
+	try {
+		await appendLinearMcpAuthNotifiedEvent({
+			agentId: blockedAgent.agentId,
+			issueId: blockedAgent.issueId,
+			outcome,
+			lifecycleId
+		});
+	} catch (completionError) {
+		console.error(`[linear-mcp-auth] failed to record wake outcome for ${blockedAgent.agentId}:`, completionError);
+	}
+}
+function processLinearMcpAuthWake() {
+	return linearMcpAuthWakeCoalescer.run("global", async () => {
+		let stabilized = false;
+		for (let pass = 0; pass < MAX_WAKE_PASSES; pass++) {
+			const wakeSet = await computeLinearMcpAuthWakeSet();
+			if (wakeSet === null || wakeSet.agents.length === 0) {
+				stabilized = true;
+				wakeFollowUpDelayMs = WAKE_FOLLOW_UP_MIN_DELAY_MS;
+				break;
+			}
+			for (const blockedAgent of wakeSet.agents) try {
+				const delivery = await deliverWakeWithOutbox(blockedAgent.agentId, wakeSet.lifecycleId);
+				await recordWakeCompletion(blockedAgent, wakeSet.lifecycleId, delivery.outcome);
+			} catch (deliveryError) {
+				console.error(`[linear-mcp-auth] wake outbox failure for ${blockedAgent.agentId}; skipping this pass:`, deliveryError);
+			}
+		}
+		if (!stabilized) {
+			console.error(`[linear-mcp-auth] wake pass did not stabilize after ${MAX_WAKE_PASSES} passes — scheduling a follow-up run in ${wakeFollowUpDelayMs}ms`);
+			setTimeout(() => {
+				processLinearMcpAuthWake();
+			}, wakeFollowUpDelayMs).unref();
+			wakeFollowUpDelayMs = Math.min(wakeFollowUpDelayMs * 2, WAKE_FOLLOW_UP_MAX_DELAY_MS);
+		}
+	});
+}
+//#endregion
+export { appendLinearMcpAuthHealthyEvent as a, linearMcpAuthEvent as c, appendLinearMcpAuthEvent as i, processLinearMcpAuthWake as l, LINEAR_MCP_AUTH_WAKE_COPY as n, appendLinearMcpAuthNotifiedEvent as o, appendLinearMcpAuthCallbackRelayedEvent as r, computeLinearMcpAuthWakeSet as s, LINEAR_MCP_AUTH_URL_TTL_MS as t, resolveLinearMcpAuthIntervention as u };
+
+//# sourceMappingURL=linear-mcp-auth-BxUOzswy.js.map

package/server/linear-mcp-auth-D46fBCLf.js

@@ -0,0 +1,2 @@
+import { l as processLinearMcpAuthWake } from "./linear-mcp-auth-BxUOzswy.js";
+export { processLinearMcpAuthWake };

package/server/memory-fts-worker.js

@@ -1,4 +1,4 @@
-import { a as runMemoryFtsTransactionSync, i as runMemoryFtsStatementSync, n as getMemoryFtsDatabaseSync, r as init_fts_operations, t as closeMemoryFtsDatabasesInProcess } from "./fts-operations-CqY6zl-i.js";
+import { a as runMemoryFtsTransactionSync, i as runMemoryFtsStatementSync, n as getMemoryFtsDatabaseSync, r as init_fts_operations, t as closeMemoryFtsDatabasesInProcess } from "./fts-operations-B9jG8wa3.js";
 import { parentPort } from "node:worker_threads";
 //#region ../../lib/memory/fts-worker.ts
 init_fts_operations();

package/server/{merge-CefQNAnq.js → merge-DiW9RdSB.js}

@@ -1,5 +1,5 @@
-import { C as inArray, _ as integer, a as EventBus, b as and, d as getOverdeckDatabaseSync, f as init_infra, h as text, m as sqliteTable, p as init_sqlite_core, r as Db, s as Forge, v as init_drizzle_orm, x as eq } from "./infra-BEqFxlJc.js";
-import { n as init_issues, t as IssueId } from "./issues-BMmP_77e.js";
+import { C as inArray, _ as integer, a as EventBus, b as and, d as getOverdeckDatabaseSync, f as init_infra, h as text, m as sqliteTable, p as init_sqlite_core, r as Db, s as Forge, v as init_drizzle_orm, x as eq } from "./infra-BDQDRopn.js";
+import { n as init_issues, t as IssueId } from "./issues-DQ5-LatB.js";
 import { Context, Effect, Layer, Schema } from "effect";
 import { HttpApiEndpoint, HttpApiGroup } from "effect/unstable/httpapi";
 //#region ../../lib/overdeck/merge.ts
@@ -87,7 +87,9 @@ const uatGenerationResolutions = sqliteTable("uat_generation_resolutions", {
 	uatName: text("uat_name").notNull(),
 	issueIds: text("issue_ids", { mode: "json" }).notNull(),
 	files: text("files", { mode: "json" }).notNull(),
-	commitSha: text("commit_sha").notNull()
+	commitSha: text("commit_sha").notNull(),
+	kind: text("kind"),
+	note: text("note")
 });
 const ProjectKey = Schema.String.pipe(Schema.brand("ProjectKey"));
 const RepoKey = Schema.String.pipe(Schema.brand("RepoKey"));
@@ -573,7 +575,7 @@ const MergeApi = HttpApiGroup.make("merge").add(HttpApiEndpoint.get("getMergeSet
 })).add(HttpApiEndpoint.get("listQueues", "/merge-queue", { success: Schema.Array(QueueView) })).add(HttpApiEndpoint.get("listAutoMerges", "/flywheel/auto-merge", {
 	query: AutoMergeFilter,
 	success: Schema.Array(AutoMerge)
-})).add(HttpApiEndpoint.get("listBlockers", "/flywheel/merge-blockers", { success: Schema.Array(AutoMerge) })).add(HttpApiEndpoint.get("listUatGenerations", "/flywheel/uat-generations", {
+})).add(HttpApiEndpoint.get("listBlockers", "/flywheel/merge-blockers", { success: Schema.Array(AutoMerge) })).add(HttpApiEndpoint.get("listUatGenerations", "/merge-train/generations", {
 	query: UatGenerationFilter,
 	success: Schema.Array(UatGeneration)
 })).add(HttpApiEndpoint.post("merge", "/issues/:id/merge", {
@@ -593,7 +595,7 @@ const MergeApi = HttpApiGroup.make("merge").add(HttpApiEndpoint.get("getMergeSet
 	params: { id: IssueId },
 	success: MergeSet,
 	error: MergeSetNotFound
-})).add(HttpApiEndpoint.post("mergeNext", "/flywheel/merge-next", {
+})).add(HttpApiEndpoint.post("mergeNext", "/merge-train/merge-next", {
 	payload: Schema.Struct({ projectKey: ProjectKey }),
 	success: Schema.NullOr(MergeSet),
 	error: Schema.Union([
@@ -617,11 +619,11 @@ const MergeApi = HttpApiGroup.make("merge").add(HttpApiEndpoint.get("getMergeSet
 	payload: Schema.Struct({ cancelledBy: Schema.String }),
 	success: AutoMerge,
 	error: AutoMergeNotFound
-})).add(HttpApiEndpoint.post("assembleUat", "/flywheel/assemble-uat", { success: Schema.Array(UatGeneration) })).add(HttpApiEndpoint.post("startUatStack", "/flywheel/uat-generations/:name/stack", {
+})).add(HttpApiEndpoint.post("assembleUat", "/merge-train/assemble", { success: Schema.Array(UatGeneration) })).add(HttpApiEndpoint.post("startUatStack", "/merge-train/generations/:name/stack", {
 	params: { name: UatName },
 	success: UatGeneration,
 	error: Schema.Union([UatGenerationNotFound, UatNotPromotable])
-})).add(HttpApiEndpoint.post("promoteUat", "/flywheel/uat-generations/:name/promote", {
+})).add(HttpApiEndpoint.post("promoteUat", "/merge-train/generations/:name/promote", {
 	params: { name: UatName },
 	success: UatGeneration,
 	error: Schema.Union([UatGenerationNotFound, UatNotPromotable])
@@ -642,9 +644,9 @@ function enqueueMerge(projectKey, issueId) {
 	db.prepare(`INSERT INTO merge_queue (project_key, issue_id, position, queued_at, status) VALUES (?, ?, ?, ?, 'queued')`).run(projectKey, normalized, position, nowIso());
 	return position;
 }
-/** Mark a queued merge as processing (currently being merged). */
-function markMergeProcessing(projectKey, issueId) {
-	overdeckDb().prepare(`UPDATE merge_queue SET status = 'processing', started_at = ? WHERE issue_id = ? AND status = 'queued'`).run(nowIso(), issueId.toUpperCase());
+/** Toggle whether a queued merge is the project's current processing entry. */
+function markMergeProcessing(projectKey, issueId, processing = true) {
+	overdeckDb().prepare(`UPDATE merge_queue SET status = ?, started_at = ? WHERE project_key = ? AND issue_id = ? AND status = ?`).run(processing ? "processing" : "queued", processing ? nowIso() : null, projectKey, issueId.toUpperCase(), processing ? "queued" : "processing");
 }
 /** Get the currently processing merge for a project, or null. */
 function getCurrentMerge(projectKey) {
@@ -700,4 +702,4 @@ function getAllActiveQueues() {
 //#endregion
 export { UatNotPromotable as A, readyForMerge as B, RepoMergeStatus as C, UatMember as D, UatGenerationNotFound as E, enqueueMerge as F, getAllActiveQueues as I, getCurrentMerge as L, UatStatus as M, WorkspaceType as N, UatMemberRole as O, dequeueMerge as P, getQueueForProject as R, RepoKey as S, UatGenerationFilter as T, NotReadyForMerge as _, ForgeMergeFailed as a, QueueView as b, MergeInProgress as c, MergeSet as d, MergeSetNotFound as f, MergeWriterLive as g, MergeWriter as h, AutoMergeStatus as i, UatResolution as j, UatName as k, MergeResolver as l, MergeSetStatus as m, AutoMergeFilter as n, GateStatus as o, MergeSetRepo as p, AutoMergeNotFound as r, MergeApi as s, AutoMerge as t, MergeResolverLive as u, ProjectKey as v, UatGeneration as w, RebaseStatus as x, QueueEntryStatus as y, markMergeProcessing as z };
 
-//# sourceMappingURL=merge-CefQNAnq.js.map
+//# sourceMappingURL=merge-DiW9RdSB.js.map