@provos/ironcurtain 0.9.1 → 0.11.0

package/dist/web-ui/dispatch/token-stream-dispatch.js

@@ -0,0 +1,55 @@
+/**
+ * Token stream subscription JSON-RPC dispatch.
+ *
+ * Handles the four token stream methods:
+ *   - sessions.subscribeTokenStream     (per-session)
+ *   - sessions.unsubscribeTokenStream   (per-session)
+ *   - sessions.subscribeAllTokenStreams  (global)
+ *   - sessions.unsubscribeAllTokenStreams (global)
+ *
+ * Per-session methods resolve label to SessionId via sessionManager.
+ * Global methods use bus.subscribeAll via the bridge.
+ */
+import { validateParams, labelSchema } from './types.js';
+import { SessionNotFoundError, MethodNotFoundError, RpcError } from '../web-ui-types.js';
+// ---------------------------------------------------------------------------
+// Dispatch
+// ---------------------------------------------------------------------------
+export function tokenStreamDispatch(ctx, method, params, client) {
+    const bridge = ctx.tokenStreamBridge;
+    if (!bridge) {
+        throw new RpcError('INTERNAL_ERROR', 'Token stream bridge not available');
+    }
+    switch (method) {
+        case 'sessions.subscribeTokenStream': {
+            const { label } = validateParams(labelSchema, params);
+            const managed = ctx.sessionManager.get(label);
+            if (!managed)
+                throw new SessionNotFoundError(label);
+            const sessionId = managed.session.getInfo().id;
+            bridge.addClient(client, label, sessionId);
+            return { subscribed: true };
+        }
+        case 'sessions.unsubscribeTokenStream': {
+            const { label } = validateParams(labelSchema, params);
+            bridge.removeClient(client, label);
+            return { unsubscribed: true };
+        }
+        case 'sessions.subscribeAllTokenStreams': {
+            bridge.addGlobalClient(client);
+            // Register all existing sessions so global events can resolve labels
+            for (const managed of ctx.sessionManager.all()) {
+                const sessionId = managed.session.getInfo().id;
+                bridge.registerSession(managed.label, sessionId);
+            }
+            return { subscribed: true };
+        }
+        case 'sessions.unsubscribeAllTokenStreams': {
+            bridge.removeGlobalClient(client);
+            return { unsubscribed: true };
+        }
+        default:
+            throw new MethodNotFoundError(method);
+    }
+}
+//# sourceMappingURL=token-stream-dispatch.js.map

package/dist/web-ui/dispatch/token-stream-dispatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-stream-dispatch.js","sourceRoot":"","sources":["../../../src/web-ui/dispatch/token-stream-dispatch.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAAwB,cAAc,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAEzF,8EAA8E;AAC9E,WAAW;AACX,8EAA8E;AAE9E,MAAM,UAAU,mBAAmB,CACjC,GAAoB,EACpB,MAAc,EACd,MAA+B,EAC/B,MAAmB;IAEnB,MAAM,MAAM,GAAG,GAAG,CAAC,iBAAiB,CAAC;IACrC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;IAC5E,CAAC;IAED,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,+BAA+B,CAAC,CAAC,CAAC;YACrC,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,OAAO,GAAG,GAAG,CAAC,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAC9C,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,oBAAoB,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,SAAS,CAAC,CAAC;YAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,KAAK,iCAAiC,CAAC,CAAC,CAAC;YACvC,MAAM,EAAE,KAAK,EAAE,GAAG,cAAc,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;YACtD,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YACnC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChC,CAAC;QAED,KAAK,mCAAmC,CAAC,CAAC,CAAC;YACzC,MAAM,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;YAC/B,qEAAqE;YACrE,KAAK,MAAM,OAAO,IAAI,GAAG,CAAC,cAAc,CAAC,GAAG,EAAE,EAAE,CAAC;gBAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC;gBAC/C,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;YACnD,CAAC;YACD,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAC9B,CAAC;QAED,KAAK,qCAAqC,CAAC,CAAC,CAAC;YAC3C,MAAM,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC;YAClC,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChC,CAAC;QAED;YACE,MAAM,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC"}

package/dist/web-ui/dispatch/types.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Shared types and utilities for dispatch sub-modules.
+ *
+ * The DispatchContext and validation helpers are used by all
+ * domain-specific dispatch modules (session, job, escalation, etc.).
+ */
+import { z } from 'zod';
+import type { SessionManager, ManagedSession } from '../../session/session-manager.js';
+import type { ControlRequestHandler } from '../../daemon/control-socket.js';
+import type { SessionMode } from '../../session/types.js';
+import type { TokenStreamBridge } from '../token-stream-bridge.js';
+import type { WebEventBus } from '../web-event-bus.js';
+import { type SessionDto, type BudgetSummaryDto, type DaemonStatusDto } from '../web-ui-types.js';
+export declare const labelSchema: z.ZodObject<{
+    label: z.ZodNumber;
+}, z.core.$strip>;
+export interface DispatchContext {
+    readonly handler: ControlRequestHandler;
+    readonly sessionManager: SessionManager;
+    readonly mode: SessionMode;
+    readonly eventBus: WebEventBus;
+    readonly maxConcurrentWebSessions: number;
+    /** @internal Sequencing queues per session -- managed by dispatch module. */
+    readonly sessionQueues: Map<number, Promise<void>>;
+    /** Bridge for per-client token stream subscriptions. */
+    tokenStreamBridge?: TokenStreamBridge;
+}
+export declare function validateParams<T>(schema: z.ZodType<T>, params: Record<string, unknown>): T;
+export declare function toSessionDto(managed: ManagedSession): SessionDto;
+export declare function toBudgetDto(managed: ManagedSession): BudgetSummaryDto;
+export declare function buildStatusDto(ctx: DispatchContext): DaemonStatusDto;

package/dist/web-ui/dispatch/types.js

@@ -0,0 +1,68 @@
+/**
+ * Shared types and utilities for dispatch sub-modules.
+ *
+ * The DispatchContext and validation helpers are used by all
+ * domain-specific dispatch modules (session, job, escalation, etc.).
+ */
+import { z } from 'zod';
+import { InvalidParamsError } from '../web-ui-types.js';
+// ---------------------------------------------------------------------------
+// Shared param schemas
+// ---------------------------------------------------------------------------
+export const labelSchema = z.object({ label: z.number().int().positive() });
+// ---------------------------------------------------------------------------
+// Param validation
+// ---------------------------------------------------------------------------
+export function validateParams(schema, params) {
+    const result = schema.safeParse(params);
+    if (!result.success) {
+        throw new InvalidParamsError(result.error.message);
+    }
+    return result.data;
+}
+// ---------------------------------------------------------------------------
+// DTO builders
+// ---------------------------------------------------------------------------
+export function toSessionDto(managed) {
+    const info = managed.session.getInfo();
+    const persona = managed.source.kind === 'web' ? managed.source.persona : undefined;
+    return {
+        label: managed.label,
+        source: managed.source,
+        status: info.status,
+        turnCount: info.turnCount,
+        createdAt: info.createdAt,
+        hasPendingEscalation: managed.pendingEscalation !== null,
+        messageInFlight: managed.messageInFlight,
+        budget: toBudgetDto(managed),
+        ...(persona ? { persona } : {}),
+    };
+}
+export function toBudgetDto(managed) {
+    const status = managed.session.getBudgetStatus();
+    return {
+        totalTokens: status.totalTokens,
+        stepCount: status.stepCount,
+        elapsedSeconds: status.elapsedSeconds,
+        estimatedCostUsd: status.estimatedCostUsd,
+        tokenTrackingAvailable: status.tokenTrackingAvailable,
+        limits: {
+            maxTotalTokens: status.limits.maxTotalTokens,
+            maxSteps: status.limits.maxSteps,
+            maxSessionSeconds: status.limits.maxSessionSeconds,
+            maxEstimatedCostUsd: status.limits.maxEstimatedCostUsd,
+        },
+    };
+}
+export function buildStatusDto(ctx) {
+    const status = ctx.handler.getStatus();
+    return {
+        uptimeSeconds: status.uptimeSeconds,
+        jobs: status.jobs,
+        signalConnected: status.signalConnected,
+        webUiListening: true,
+        activeSessions: ctx.sessionManager.size,
+        nextFireTime: status.nextFireTime?.toISOString() ?? null,
+    };
+}
+//# sourceMappingURL=types.js.map

package/dist/web-ui/dispatch/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/web-ui/dispatch/types.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAOxB,OAAO,EAAgE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AAEtH,8EAA8E;AAC9E,uBAAuB;AACvB,8EAA8E;AAE9E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AAkB5E,8EAA8E;AAC9E,mBAAmB;AACnB,8EAA8E;AAE9E,MAAM,UAAU,cAAc,CAAI,MAAoB,EAAE,MAA+B;IACrF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACrD,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,8EAA8E;AAC9E,eAAe;AACf,8EAA8E;AAE9E,MAAM,UAAU,YAAY,CAAC,OAAuB;IAClD,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,OAAO;QACL,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,IAAI,CAAC,MAAM;QACnB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,oBAAoB,EAAE,OAAO,CAAC,iBAAiB,KAAK,IAAI;QACxD,eAAe,EAAE,OAAO,CAAC,eAAe;QACxC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC;QAC5B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,OAAuB;IACjD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC;IACjD,OAAO;QACL,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;QACzC,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;QACrD,MAAM,EAAE;YACN,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,cAAc;YAC5C,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ;YAChC,iBAAiB,EAAE,MAAM,CAAC,MAAM,CAAC,iBAAiB;YAClD,mBAAmB,EAAE,MAAM,CAAC,MAAM,CAAC,mBAAmB;SACvD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,GAAoB;IACjD,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC;IACvC,OAAO;QACL,aAAa,EAAE,MAAM,CAAC,aAAa;QACnC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,eAAe,EAAE,MAAM,CAAC,eAAe;QACvC,cAAc,EAAE,IAAI;QACpB,cAAc,EAAE,GAAG,CAAC,cAAc,CAAC,IAAI;QACvC,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,WAAW,EAAE,IAAI,IAAI;KACzD,CAAC;AACJ,CAAC"}

package/dist/web-ui/dispatch/workflow-dispatch.d.ts

@@ -0,0 +1,103 @@
+/**
+ * Workflow-related JSON-RPC method dispatch.
+ *
+ * Handles all `workflows.*` methods: list, get, start, resume,
+ * abort, resolveGate, inspect, fileTree, fileContent, artifacts.
+ */
+import { type DispatchContext } from './types.js';
+import { type WorkflowDetailDto, type PastRunDto, type MessageLogResponseDto, type LatestVerdictDto, type LiveWorkflowPhase, type PastRunPhase } from '../web-ui-types.js';
+import type { PastRunLoadSuccess, WorkflowManager } from '../../workflow/workflow-manager.js';
+import { type WorkflowId, type WorkflowCheckpoint, type WorkflowDefinition } from '../../workflow/types.js';
+import { type MessageLogEntry } from '../../workflow/message-log.js';
+import { type WorkflowRunSummary } from '../../workflow/workflow-discovery.js';
+export interface WorkflowDispatchContext extends DispatchContext {
+    workflowManager?: WorkflowManager;
+}
+export declare function workflowDispatch(ctx: WorkflowDispatchContext, method: string, params: Record<string, unknown>): Promise<unknown>;
+/**
+ * Synthesizes a phase value for a checkpoint loaded from disk.
+ *
+ * Requires a defined `WorkflowCheckpoint`. For checkpoint-less past-run rows
+ * (i.e. directories where `checkpoint.json` is absent — e.g. runs completed
+ * before B3b persisted `finalStatus`), callers must use
+ * `synthesizePhaseFromMessageLog` instead.
+ *
+ * Resolution order:
+ * - If `isLive` is true, returns `'running'`.
+ * - Post-B3b checkpoints carry a canonical `finalStatus.phase`. When present
+ *   and valid (matches a `PastRunPhase` value), return it directly —
+ *   this short-circuits the legacy state-name heuristic.
+ * - Legacy pre-B3b checkpoints fall through to the state-name heuristic:
+ *   - Terminal state in the definition: infer `'aborted'` from the
+ *     conventional name pattern (`'aborted'` or contains `'abort'`);
+ *     otherwise `'completed'`. Matches `handleWorkflowComplete` in the
+ *     orchestrator.
+ *   - Human-gate state: `'waiting_human'`.
+ *   - Otherwise: `'interrupted'` (mid-run state with no live instance —
+ *     typical of a daemon crash).
+ */
+export declare function computePastRunPhase(checkpoint: WorkflowCheckpoint, definition: WorkflowDefinition, isLive: boolean): LiveWorkflowPhase | PastRunPhase;
+/**
+ * Synthesize a `PastRunPhase` for a checkpoint-less directory from its message log.
+ * `entries` must be chronological (oldest-first), matching `MessageLog.readAll()`.
+ *
+ * Per D6: the destination state of the last `state_transition` lives in the
+ * `event` field (orchestrator.handleTransition writes it there). For non-terminal,
+ * non-gate destinations, post-transition `quota_exhausted` → 'aborted',
+ * `transient_failure` → 'aborted', `error` → 'failed', none → 'interrupted'.
+ */
+export declare function synthesizePhaseFromMessageLog(entries: readonly MessageLogEntry[], definition: WorkflowDefinition): PastRunPhase;
+/**
+ * `TransitionRecord` doesn't carry a structured verdict; the frontend populates
+ * `latestVerdict` from live `workflow.agent_completed` events. Past-run callers
+ * receive `undefined` until checkpoints capture verdict/confidence first-class.
+ */
+export declare function extractLatestVerdictFromTransitions(): LatestVerdictDto | undefined;
+/** Assembles a `WorkflowDetailDto` from on-disk past-run objects (checkpoint or message-log fallback). */
+export declare function buildDetailFromPastRun(id: WorkflowId, load: PastRunLoadSuccess, summary: WorkflowRunSummary): WorkflowDetailDto;
+/** Map file extensions to language identifiers for syntax highlighting. */
+export declare function inferLanguage(filePath: string): string;
+/**
+ * Resolves a relative path within a workspace and validates containment.
+ * Prevents path traversal attacks.
+ */
+export declare function resolveAndContain(workspacePath: string, relPath: string): string;
+/** Assembles a `PastRunDto` from on-disk past-run objects (checkpoint or message-log fallback). */
+export declare function buildPastRunDto(id: WorkflowId, load: PastRunLoadSuccess, summary: WorkflowRunSummary): PastRunDto;
+/**
+ * Reads a page of {@link MessageLogEntry} records for a workflow with cursor
+ * pagination (per design decision D5).
+ *
+ * Existence semantics: the workflow must be either currently active in the
+ * orchestrator or recoverable from disk via {@link WorkflowManager.loadPastRun}.
+ * Workflows write their checkpoint+definition immediately on `start()`, so
+ * `loadPastRun` succeeds for live workflows too — this single check covers
+ * both the live and past-run cases. Throws `WORKFLOW_NOT_FOUND` when neither
+ * source has the id and `WORKFLOW_CORRUPTED` when the checkpoint or definition
+ * file is present but unparseable.
+ *
+ * Note: `MessageLog.readAll()` silently skips malformed JSONL lines (it's
+ * append-only and tolerant of truncated writes from crashes), so we cannot
+ * surface log-file corruption distinctly here. The corruption error class
+ * therefore reflects only checkpoint/definition issues, not log issues.
+ *
+ * Pagination shape: `entries` is filtered to `ts < before` when `before` is
+ * set, sorted descending by `ts` (newest first), then sliced to `limit`.
+ * `hasMore` is true iff `entries.length === limit` AND at least one entry
+ * with `ts < entries[entries.length - 1].ts` exists in the original log.
+ *
+ * Cost: v1 re-reads and re-parses the whole log on every page request. This
+ * is acceptable given typical message-log sizes (hundreds of entries); a
+ * future `MessageLog.readRange(opts)` API can stream from disk in reverse
+ * order if logs grow pathologically large. The `MessageLogResponseDto` shape
+ * is stable across that change.
+ */
+export declare function readMessageLogPage(manager: WorkflowManager, workflowId: WorkflowId, opts: {
+    before?: string;
+    limit: number;
+}): MessageLogResponseDto;
+/**
+ * Extracts a human-readable state name from an XState machine state snapshot.
+ * The machineState can be a string (simple state) or a nested object (compound state).
+ */
+export declare function extractLastState(machineState: unknown): string;