@rubytech/create-realagent-code 0.1.575 → 0.1.576

package/dist/__tests__/preserve-house-cloudflare.test.js

@@ -6,10 +6,10 @@
 // Runs under `node --test dist/__tests__/*`.
 import test from "node:test";
 import assert from "node:assert/strict";
-import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync, statSync } from "node:fs";
+import { mkdtempSync, mkdirSync, writeFileSync, readFileSync, existsSync, rmSync } from "node:fs";
 import { tmpdir } from "node:os";
 import { join } from "node:path";
-import { backupHouseCloudflare, restoreHouseCloudflare, migrateHouseCredentialFromAccount, } from "../preserve-house-cloudflare.js";
+import { backupHouseCloudflare, restoreHouseCloudflare, } from "../preserve-house-cloudflare.js";
 function makeDirs() {
     const root = mkdtempSync(join(tmpdir(), "house-1664-"));
     const installDir = join(root, "install");
@@ -66,73 +66,3 @@ function acctSecrets(installDir, id, contents) {
     writeFileSync(p, contents);
     return p;
 }
-test("relocates a per-account master into the house file, mode 600, account untouched", () => {
-    const { root, installDir } = makeDirs();
-    try {
-        const acct = acctSecrets(installDir, "acc-1", "CLOUDFLARE_API_TOKEN=cfat_minter\nCLOUDFLARE_ACCOUNT_ID=deadbeef\nCF_PAGES_D1_TOKEN=stale\n");
-        const before = readFileSync(acct, "utf-8");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.result, "relocated");
-        assert.equal(r.source, "acc-1");
-        const house = join(installDir, "platform/config", "cloudflare-house.env");
-        assert.equal(readFileSync(house, "utf-8"), "CLOUDFLARE_API_TOKEN=cfat_minter\nCLOUDFLARE_ACCOUNT_ID=deadbeef\n", "only the two master keys are relocated, no stale scoped token");
-        assert.equal(statSync(house).mode & 0o777, 0o600, "house file is mode 600");
-        assert.equal(readFileSync(acct, "utf-8"), before, "account file untouched");
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("no-op when the house file already exists (never overwrites)", () => {
-    const { root, installDir, configDir } = makeDirs();
-    try {
-        const house = join(configDir, "cloudflare-house.env");
-        writeFileSync(house, "CLOUDFLARE_API_TOKEN=existing\nCLOUDFLARE_ACCOUNT_ID=xyz\n");
-        acctSecrets(installDir, "acc-1", "CLOUDFLARE_API_TOKEN=other\nCLOUDFLARE_ACCOUNT_ID=zzz\n");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.result, "noop");
-        assert.equal(readFileSync(house, "utf-8"), "CLOUDFLARE_API_TOKEN=existing\nCLOUDFLARE_ACCOUNT_ID=xyz\n", "existing house file is untouched");
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("absent when no account carries a master (no house file, no error)", () => {
-    const { root, installDir } = makeDirs();
-    try {
-        acctSecrets(installDir, "acc-1", "CF_PAGES_D1_TOKEN=scoped_only\n");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.result, "absent");
-        assert.ok(!existsSync(join(installDir, "platform/config", "cloudflare-house.env")));
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("deterministic pick — lexicographically-first account id wins", () => {
-    const { root, installDir } = makeDirs();
-    try {
-        acctSecrets(installDir, "bbb", "CLOUDFLARE_API_TOKEN=tok_b\nCLOUDFLARE_ACCOUNT_ID=idb\n");
-        acctSecrets(installDir, "aaa", "CLOUDFLARE_API_TOKEN=tok_a\nCLOUDFLARE_ACCOUNT_ID=ida\n");
-        const r = migrateHouseCredentialFromAccount(installDir);
-        assert.equal(r.source, "aaa");
-        assert.match(readFileSync(join(installDir, "platform/config", "cloudflare-house.env"), "utf-8"), /tok_a/);
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});
-test("full upgrade path: pre-1631 relocates, second run is a no-op", () => {
-    const { root, installDir, persistentDir } = makeDirs();
-    try {
-        // Pre-1631 upgrade: no house file survives the wipe/restore (nothing saved).
-        simulateUpgrade(installDir, persistentDir);
-        assert.ok(!existsSync(join(installDir, "platform/config", "cloudflare-house.env")));
-        acctSecrets(installDir, "acc-1", "CLOUDFLARE_API_TOKEN=cfat_minter\nCLOUDFLARE_ACCOUNT_ID=deadbeef\n");
-        assert.equal(migrateHouseCredentialFromAccount(installDir).result, "relocated");
-        assert.equal(migrateHouseCredentialFromAccount(installDir).result, "noop", "second run is idempotent");
-    }
-    finally {
-        rmSync(root, { recursive: true, force: true });
-    }
-});

package/dist/index.js

@@ -10,9 +10,8 @@ import { buildBrandCronBlock, mergeBrandCronBlock } from "./cron-registration.js
 import { validateTierFlag, validateEntitlementBase64, applyTierToAccountConfig, entitlementPath } from "./tier-flag.js";
 import { parseOsRelease, isUbuntuLike as isUbuntuLikePure, parseAptCacheCandidate, decideAptResolution, } from "./apt-resolve.js";
 import { findPeerBrandOnDefaultNeo4jPort } from "./peer-brand-detect.js";
-import { removeClientAdminsKey } from "./converge-client-admins.js";
 import { seedPublicInstructionFiles } from "./public-instruction-seed.js";
-import { backupHouseCloudflare, restoreHouseCloudflare, migrateHouseCredentialFromAccount, } from "./preserve-house-cloudflare.js";
+import { backupHouseCloudflare, restoreHouseCloudflare, } from "./preserve-house-cloudflare.js";
 import { resolveNeo4jPidfileScrub } from "./neo4j-pidfile-scrub.js";
 import { runInitLogging } from "./init-logging.js";
 import { requireSupportedPlatform, detectPlatform } from "./platform-detect.js";
@@ -2650,15 +2649,6 @@ function deployPayload() {
     if (restoreHouseCloudflare(INSTALL_DIR, persistentDir)) {
         console.log("  Restored Cloudflare house credential (cloudflare-house.env preserved).");
     }
-    // Task 1671 — a pre-1631 install crossing the 0.1.449 boundary has no house
-    // credential yet, but its per-account secrets still carry the account-wide
-    // master (a minter, Task 1670). Relocate it into the house file so the broker
-    // and calendar find it where the 1631 readers expect it, with zero manual
-    // step. Idempotent: no-op once the house file exists (fresh install → absent).
-    {
-        const mig = migrateHouseCredentialFromAccount(INSTALL_DIR);
-        console.log(`  [install] op=house-cred-migrate result=${mig.result}${mig.source ? ` source=${mig.source}` : ""}`);
-    }
     // users.json is read directly from persistentDir by both
     // platform/ui/app/lib/paths.ts (USERS_FILE = MAXY_DIR/users.json) and the
     // admin MCP plugin (USERS_FILE = CONFIG_DIR/users.json). No copy into the
@@ -2690,13 +2680,6 @@ function deployPayload() {
     // installer is its own npm package and doesn't bundle the platform lib.
     // Mirrors checkAdminAuthInvariant() in platform/lib/admins-write/src/index.ts;
     // future divergence between the two should be caught by the test suite.
-    // Task 1623 — converge existing client account.json to drop the vestigial
-    // admins[] key before the invariant check reads them. House untouched.
-    for (const r of removeClientAdminsKey(join(INSTALL_DIR, "data", "accounts"))) {
-        if (r.action === "removed" || r.action === "unreadable" || r.action === "write-failed") {
-            console.log(`  [converge-1623] account=${r.accountId.slice(0, 8)} admins=${r.action}`);
-        }
-    }
     runInstallInvariantCheck(persistentUsersFile, join(INSTALL_DIR, "data", "accounts"));
     // The version marker is NOT written here. It is stamped at the very end of a
     // fully-successful install (after plugin registration and every throwing
@@ -3392,47 +3375,13 @@ function setupAccount() {
         logFile(`  [neo4j] passing NEO4J_URI=${neo4jUri} to seed`);
         shell("bash", [seedScript], { cwd: INSTALL_DIR, env: neo4jEnv });
     }
-    // Task 2213 — converge :Event.startDate onto canonical UTC. The dispatcher
-    // compares startDate to new Date().toISOString() LEXICALLY, so a row storing
-    // a +01:00 offset fires 60 minutes late under BST. Runs after the seed so the
-    // schema exists, with the same Neo4j env, and needs PLATFORM_ROOT to scope
-    // itself to this install's accounts on a shared Neo4j. Idempotent: a converged
-    // install rewrites nothing and prints op=done rewritten=0.
-    const convergeStartDate = join(INSTALL_DIR, "platform/plugins/scheduling/mcp/dist/scripts/converge-startdate-utc.js");
-    if (existsSync(convergeStartDate)) {
-        shell("node", [convergeStartDate], {
-            cwd: INSTALL_DIR,
-            env: { ...neo4jEnv, PLATFORM_ROOT: join(INSTALL_DIR, "platform") },
-        });
-    }
-    // Task 2361 — collapse the two routine description properties onto
-    // `:Event.description`, preferring whichever value the operator or the agent
-    // wrote. Runs after the seed for the same reasons the convergence above does:
-    // the schema exists by then, and the same Neo4j env is already built. Scoped to
-    // this install's accounts via PLATFORM_ROOT, so a co-resident brand sharing one
-    // Neo4j is untouched. Idempotent: a converged install matches nothing and
-    // prints converged=0.
-    const convergeRoutineDescription = join(INSTALL_DIR, "platform/plugins/scheduling/mcp/dist/scripts/converge-routine-description.js");
-    if (existsSync(convergeRoutineDescription)) {
-        shell("node", [convergeRoutineDescription], {
-            cwd: INSTALL_DIR,
-            env: { ...neo4jEnv, PLATFORM_ROOT: join(INSTALL_DIR, "platform") },
-        });
-    }
-    // Task 2513 — converge :Visit.startDate and :Visit.endDate onto canonical
-    // UTC. The planner window compares startDate to Z-suffixed bounds LEXICALLY,
-    // so a row storing a +01:00 offset lands in the wrong day under BST. Runs
-    // after the seed for the same reasons the two convergences above do, and is
-    // scoped to this install's accounts so a co-resident brand sharing one Neo4j
-    // is untouched. Idempotent: a converged install rewrites nothing and prints
-    // op=start-migration rewritten=0.
-    const convergeVisitInstants = join(INSTALL_DIR, "platform/plugins/dispatch/mcp/dist/scripts/converge-visit-instants.js");
-    if (existsSync(convergeVisitInstants)) {
-        shell("node", [convergeVisitInstants], {
-            cwd: INSTALL_DIR,
-            env: { ...neo4jEnv, PLATFORM_ROOT: join(INSTALL_DIR, "platform") },
-        });
-    }
+    // Install-time data migrations were removed on 2026-08-08 by operator
+    // decision. Three convergences ran here (Tasks 2213, 2361, 2513). Every
+    // device in the fleet is past the state each one existed to repair, so on
+    // every install they scanned and rewrote nothing while adding a Neo4j
+    // round-trip and a way to fail: 2513's script leaked its driver and hung
+    // the installer after printing scanned=0. A future migration belongs in a
+    // one-shot the operator runs deliberately, not on the upgrade path.
     // Task 2460 — clear the brand-wide agent root this step used to write.
     // Every bundled specialist now reaches a session through the per-account
     // registry that `syncAccountAgentRegistry` mirrors at spawn from

package/dist/preserve-house-cloudflare.js

@@ -6,8 +6,8 @@
 // calendar reconcile/publish scripts) fails with "house credential not found"
 // until an operator re-mints the token by hand. The persistent copy lives in
 // the brand's persistent config dir so even a full reinstall restores it.
-import { existsSync, cpSync, chmodSync, readdirSync, readFileSync, writeFileSync, mkdirSync } from "node:fs";
-import { join, dirname } from "node:path";
+import { existsSync, cpSync, chmodSync } from "node:fs";
+import { join } from "node:path";
 const HOUSE_CRED_FILE = "cloudflare-house.env";
 /**
  * Copy the live house credential (if any) into the persistent store before the
@@ -35,50 +35,3 @@ export function restoreHouseCloudflare(installDir, persistentDir) {
     chmodSync(dest, 0o600);
     return true;
 }
-/**
- * Task 1671 — on upgrade, if no house credential exists yet, relocate an
- * existing per-account master (CLOUDFLARE_API_TOKEN + CLOUDFLARE_ACCOUNT_ID)
- * into the house file (mode 600). This lets a pre-1631 install cross the 0.1.449
- * boundary with zero manual step: the broker/calendar (Task 1670) then mint
- * their scoped tokens from the relocated minter where the 1631 readers expect it.
- *
- * Fail-safe and idempotent:
- * - never overwrites an existing house file (returns "noop");
- * - never guesses a token (both master keys required);
- * - deterministic: scans accounts sorted by id, takes the first with a master;
- * - relocates only the two master keys, so no per-account scoped token leaks
- *   house-side.
- *
- * The relocated file is preserved on subsequent upgrades by backupHouseCloudflare
- * (Task 1664), which runs before the wipe on the next install.
- */
-export function migrateHouseCredentialFromAccount(installDir) {
-    const house = join(installDir, "platform/config", HOUSE_CRED_FILE);
-    if (existsSync(house))
-        return { result: "noop" };
-    const accountsDir = join(installDir, "data/accounts");
-    if (!existsSync(accountsDir))
-        return { result: "absent" };
-    for (const id of readdirSync(accountsDir).sort()) {
-        const secrets = join(accountsDir, id, "secrets", "cloudflare.env");
-        if (!existsSync(secrets))
-            continue;
-        const env = {};
-        for (const line of readFileSync(secrets, "utf8").split("\n")) {
-            const m = line.match(/^\s*([A-Za-z_][A-Za-z0-9_]*)=(.*)$/);
-            if (m)
-                env[m[1]] = m[2].trim();
-        }
-        const apiToken = env.CLOUDFLARE_API_TOKEN;
-        const accountId = env.CLOUDFLARE_ACCOUNT_ID;
-        if (!apiToken || !accountId)
-            continue;
-        mkdirSync(dirname(house), { recursive: true });
-        writeFileSync(house, `CLOUDFLARE_API_TOKEN=${apiToken}\nCLOUDFLARE_ACCOUNT_ID=${accountId}\n`, {
-            mode: 0o600,
-        });
-        chmodSync(house, 0o600);
-        return { result: "relocated", source: id };
-    }
-    return { result: "absent" };
-}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rubytech/create-realagent-code",
-  "version": "0.1.575",
+  "version": "0.1.576",
   "description": "Install Real Agent — Built for agents. By agents.",
   "bin": {
     "create-realagent-code": "./dist/index.js"

package/payload/platform/plugins/admin/skills/whats-new/SKILL.md

@@ -9,6 +9,10 @@ Invoked by the admin agent directly.
 
 This is the platform's release timeline, newest first. Each entry shows the date it shipped and the version it shipped in, so you can tell the operator how current their install is. To compare, read the installed version from `capabilities-here` and match it against the versions below. Keep answers high level and in plain English; this is a summary, not a full commit log.
 
+## 2026-08-08 (0.1.576)
+
+- Installing and upgrading no longer runs data conversions on your existing records. Five had accumulated, each added to repair a state that every install has long since passed, so all five did nothing but add work and risk to every upgrade. One of them stopped the install outright after reporting it had nothing to do. Any future conversion will be something you run deliberately, not part of an upgrade.
+
 ## 2026-08-08 (0.1.575)
 
 - **Reverses one change from 0.1.574.** An answer now stays on the channel you asked from, rather than also being copied to your other channels. The copy arrived as a reply with no question above it, because only the answer travelled and not what you had asked; a WhatsApp question turned up in Telegram as a bare statement. Being reachable on more than one device is already handled per channel, so the copy was removed rather than completed.

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts

@@ -46,6 +46,7 @@ export declare function parseSpawnRole(body: {
 } | null;
 export declare const SESSION_ID_PATTERN: RegExp;
 export declare const RC_SPAWN_URL_WAIT_DEFAULT_MS = 60000;
+export declare const LOG_FOLLOW_KEEPALIVE_DEFAULT_MS = 30000;
 export interface HttpDeps extends Omit<SpawnDeps, 'onSessionReady' | 'watcher'> {
     /** Admin operator's userId, sourced from users.json at boot (same as
      *  RcDaemonDeps.userId). Passed to buildRcChildEnv so the scheduling MCP
@@ -85,6 +86,10 @@ export interface HttpDeps extends Omit<SpawnDeps, 'onSessionReady' | 'watcher'>
      *  omits this and gets RC_SPAWN_URL_WAIT_DEFAULT_MS (60s); tests inject a
      *  short value to exercise the bind-timeout response without a 60s wait. */
     rcSpawnUrlWaitMs?: number;
+    /** Task 2557 — idle gap after which `/log?follow=1` writes a bare newline.
+     *  Production omits this and gets LOG_FOLLOW_KEEPALIVE_DEFAULT_MS (30s);
+     *  tests inject a short value to exercise the keepalive without a 30s wait. */
+    logFollowKeepaliveMs?: number;
     /** Task 1749 — accessor for the standing PTY census's most recent snapshot,
      *  wired from `createPtyCensus(...).latest`. Optional so the pre-1749 test
      *  deps factories keep working; production index.ts always injects it.

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAqB3B,OAAO,KAAK,EAAU,SAAS,EAAW,MAAM,YAAY,CAAA;AAM5D,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAoBlD,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAQlE;;;;;;;;;;;mFAWmF;AACnF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAE/C;AAED;;;;;;;;;;2EAU2E;AAC3E,wBAAgB,cAAc,CAC5B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAOlD;AAsFD,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB;;oEAEgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;sBAEkB;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;CAC9C;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;AACjB;;;;;gFAKgF;AAChF,WAAW,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CA8CT;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAwCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAkGD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CASvG;AAUD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,OAAO,GACxB,IAAI,CA4BN;AAkED;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAyxHpD"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAqB3B,OAAO,KAAK,EAAU,SAAS,EAAW,MAAM,YAAY,CAAA;AAM5D,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAoBlD,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAQlE;;;;;;;;;;;mFAWmF;AACnF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAE/C;AAED;;;;;;;;;;2EAU2E;AAC3E,wBAAgB,cAAc,CAC5B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAOlD;AAsFD,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAYlD,eAAO,MAAM,+BAA+B,QAAS,CAAA;AAIrD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB;;oEAEgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;sBAEkB;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;mFAE+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;CAC9C;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;AACjB;;;;;gFAKgF;AAChF,WAAW,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CA8CT;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAwCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAkGD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CASvG;AAUD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,OAAO,GACxB,IAAI,CA4BN;AAkED;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAyyHpD"}

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -207,6 +207,17 @@ export const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
 // Injectable via `HttpDeps.rcSpawnUrlWaitMs` so the timeout path is
 // unit-testable without a real 60s wait.
 export const RC_SPAWN_URL_WAIT_DEFAULT_MS = 60_000;
+// Task 2557 — how long a follow stream may go without writing a byte before it
+// emits a bare newline. The stream writes only when the JSONL grows, and Node's
+// global fetch (undici) kills a response body after 300s with no bytes, so a
+// conversation between messages killed its own reader: 129 of 129
+// log-follow-close lines on laptop 192.168.88.10 read reason=aborted, shortest
+// lifetime 313440ms, and no follower in the whole log history outlived a quiet
+// patch. 30s costs one byte and leaves a tenfold margin against a slow tick.
+// A genuinely stalled manager still trips undici's bound, because a stalled
+// manager writes no keepalive either. Injectable via
+// `HttpDeps.logFollowKeepaliveMs` so the path is testable without a 30s wait.
+export const LOG_FOLLOW_KEEPALIVE_DEFAULT_MS = 30_000;
 const LIST_TAIL_BYTES = 64 * 1024;
 function timed(logger, method, path, status, ms) {
     logger(`api method=${method} path=${path} outcome=${status} ms=${ms}`);
@@ -2534,6 +2545,10 @@ export function buildHttpApp(deps) {
             let position = 0;
             let linesStreamed = 0;
             let closeReason = 'end';
+            // Task 2557 — when this stream last put a byte on the wire. Every real
+            // write stamps it; the poll loop below sends a keepalive once the gap
+            // reaches the threshold, so an idle session never looks dead to undici.
+            let lastWriteAt = Date.now();
             const countNewlines = (buf) => {
                 let n = 0;
                 for (let i = 0; i < buf.length; i++)
@@ -2548,6 +2563,7 @@ export function buildHttpApp(deps) {
                     const buf = chunk;
                     linesStreamed += countNewlines(buf);
                     await out.write(buf);
+                    lastWriteAt = Date.now();
                 }
                 position = initialSize;
             }
@@ -2587,12 +2603,25 @@ export function buildHttpApp(deps) {
                         const buf = chunk;
                         linesStreamed += countNewlines(buf);
                         void out.write(buf);
+                        lastWriteAt = Date.now();
                     }
                 });
             };
             watchFile(jsonlPath, { interval: 250 }, listener);
+            const keepaliveMs = deps.logFollowKeepaliveMs ?? LOG_FOLLOW_KEEPALIVE_DEFAULT_MS;
             while (active) {
                 await new Promise((resolve) => setTimeout(resolve, 1_000));
+                if (!active)
+                    break;
+                if (Date.now() - lastWriteAt < keepaliveMs)
+                    continue;
+                // Task 2557 — a bare newline, not a file line: it is excluded from
+                // `linesStreamed` because that counter is what this stream carried from
+                // the JSONL, and the emitter drops it at its own `if (!line) continue`.
+                // Its only job is to be a byte, so undici's bodyTimeout never elapses
+                // on a conversation that is merely quiet.
+                await out.write(Buffer.from('\n'));
+                lastWriteAt = Date.now();
             }
             deps.logger(`log-follow-close sessionId=${sessionId} reason=${closeReason} linesStreamed=${linesStreamed} ms=${Date.now() - followStreamStart}`);
         });