@rubytech/create-realagent-code 0.1.575 → 0.1.577

package/payload/platform/plugins/dispatch/skills/dispatch-page/template/planner.js

@@ -114,20 +114,133 @@
      column order above. */
   var HOUR_KEYS = ['mon', 'tue', 'wed', 'thu', 'fri', 'sat', 'sun'];
 
-  /* One visit. Clicking moves it to the next declared status and posts that
-     through the portal's existing write door. Which transitions are legal is
-     Task 2511's; this cycles the declared list. */
-  function visitButton(v, meta, zone) {
+  /* Whether the account declared this move (Task 2511).
+
+     Absent from the published list means refused, and the list travels with the
+     week, so a drag is refused with the install offline. `visit-status.ts`
+     refuses it a second time from the same list; that refusal is the binding
+     one, and this one exists so the operator is told now rather than in sixty
+     seconds. An unchanged status is NOT a move, which is the same rule the door
+     applies: `[from, to]` declares a move and no account declares a
+     self-transition, so without this every pure re-timing would be refused. */
+  function declared(meta, from, to) {
+    if (from === to) return true;
+    var list = (meta && meta.transitions) || [];
+    for (var i = 0; i < list.length; i++) {
+      if (list[i][0] === from && list[i][1] === to) return true;
+    }
+    return false;
+  }
+
+  /* The same wall-clock time on a different day, IN THE ACCOUNT'S ZONE.
+
+     Built by asking the account's own formatter what instant renders as the
+     wanted wall time, never from the browser's offset: a page that guesses the
+     zone re-times a visit to a plausible wrong hour, which is the Task 2280
+     defect. Two passes, because the offset either side of a daylight-saving
+     transition differs and the first correction can land on the far side of it.
+
+     Returns the shape the door admits, which is what `toISOString` produces. */
+  function retimed(iso, dayKey, zone) {
+    var wall = new Intl.DateTimeFormat('en-GB', {
+      timeZone: zone,
+      hour: '2-digit',
+      minute: '2-digit',
+      hour12: false,
+    });
+    var held = wall.format(new Date(iso));
+    var guess = new Date(dayKey + 'T' + held + ':00.000Z');
+    for (var i = 0; i < 2; i++) {
+      var seen = wall.format(guess);
+      if (seen === held) break;
+      var drift =
+        (Number(held.slice(0, 2)) - Number(seen.slice(0, 2))) * 60 +
+        (Number(held.slice(3)) - Number(seen.slice(3)));
+      guess = new Date(guess.getTime() + drift * 60000);
+    }
+    return guess.toISOString();
+  }
+
+  /* One visit. Clicking moves it to the next declared status; dragging re-times
+     or re-assigns it. Both post through the portal's existing write door, and
+     both are refused here first against the published transition list. */
+  function visitButton(v, data, meta, zone) {
     var b = document.createElement('button');
     b.type = 'button';
     b.className = 'pl-visit';
+    b.draggable = true;
     b.textContent = [timeOf(v.startDate, zone), v.status, v.purpose].filter(Boolean).join(' · ');
     b.addEventListener('click', function () {
       advance(v, meta);
     });
+    /* The panel is a second gesture on the same card, so the click keeps
+       meaning what it meant before this task. */
+    b.addEventListener('contextmenu', function (e) {
+      e.preventDefault();
+      openVisit(v, data, meta, zone);
+    });
+    b.addEventListener('dragstart', function (e) {
+      dragging = v;
+      if (e.dataTransfer) e.dataTransfer.effectAllowed = 'move';
+    });
+    b.addEventListener('dragend', function () {
+      dragging = null;
+    });
     return b;
   }
 
+  /* The visit under the pointer during a drag. Held here rather than in
+     dataTransfer, which only carries strings and would mean looking the visit
+     back up by id on every drop. */
+  var dragging = null;
+
+  function move(v, meta, zone, toOwnerId, toDayKey) {
+    var body = { visitId: v.visitId, status: v.status };
+    if (toOwnerId !== v.ownerId) body.assignedOwnerId = toOwnerId;
+    if (toDayKey !== dayOf(v.startDate, zone)) {
+      body.startDate = retimed(v.startDate, toDayKey, zone);
+    }
+    /* A drop that changes neither is not a write. */
+    if (body.assignedOwnerId === undefined && body.startDate === undefined) return;
+    say('Saving…');
+    api('/api/visit-status', {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(body),
+    })
+      .then(function (r) {
+        return r.json().then(function (d) {
+          return { s: r.status, d: d };
+        });
+      })
+      .then(function (res) {
+        if (!res.d.ok) {
+          console.error('[planner] move refused', { status: res.s, error: res.d.error });
+          say(
+            res.s === 404
+              ? 'That is not yours to change.'
+              : res.d.error === 'illegal-transition'
+                ? 'That move is not one this account allows.'
+                : 'That change was refused.',
+          );
+          /* The card returns to origin by redrawing what the device last
+             published. Leaving it where it fell would be the page telling the
+             operator something happened that did not. */
+          if (latest) render(latest);
+          return;
+        }
+        if (body.assignedOwnerId !== undefined) v.ownerId = body.assignedOwnerId;
+        if (body.startDate !== undefined) v.startDate = body.startDate;
+        say('Saved. It reaches the office within a minute.');
+        if (latest) render(latest);
+      })
+      .catch(function (err) {
+        console.error('[planner] move failed', { status: 'network', error: err });
+        say('Could not reach the server.');
+        if (latest) render(latest);
+      });
+  }
+
   function advance(v, meta) {
     var names = ((meta && meta.statuses) || []).map(function (s) {
       return s.name;
@@ -137,6 +250,10 @@
       return;
     }
     var next = names[(names.indexOf(v.status) + 1) % names.length];
+    if (!declared(meta, v.status, next)) {
+      say('That move is not one this account allows.');
+      return;
+    }
     say('Saving…');
     api('/api/visit-status', {
       method: 'POST',
@@ -169,6 +286,60 @@
       });
   }
 
+  /* Who may be sent to this record, why the others may not, and what has been
+     recorded against it.
+
+     Rendered from what /api/visits returned and nothing else. The install
+     computed the offers and the exclusions with the one implementation of
+     qualification and clash; re-deciding any of it here would be a second rule
+     to get wrong, which is what `functions/api/visits.ts` rules out. A
+     candidate carries no travel estimate today and is rendered without one
+     rather than dropped. */
+  function openVisit(v, data, meta, zone) {
+    var mine = (data.candidates || []).filter(function (c) {
+      return c.visitId === v.visitId;
+    });
+    document.getElementById('pl-allocate-head').textContent =
+      [timeOf(v.startDate, zone), v.status, v.purpose].filter(Boolean).join(' · ');
+
+    var list = document.getElementById('pl-allocate-list');
+    list.replaceChildren();
+    if (!mine.length) {
+      /* Never an empty box. Nobody offered and nobody excluded is a different
+         fact from an unstaffable record, and the operator cannot tell them
+         apart from a blank panel. */
+      var none = cell('pl-candidate', 'Nobody has been offered for this, and nobody was excluded.');
+      none.setAttribute('data-kind', 'excluded');
+      list.appendChild(none);
+    }
+    mine.forEach(function (c) {
+      var who = c.name || c.workerId;
+      var note =
+        c.kind === 'excluded'
+          ? c.reason
+          : (c.conflicts || []).length
+            ? (c.conflicts || []).length + ' already booked in this window'
+            : 'free';
+      var li = document.createElement('li');
+      li.className = 'pl-candidate';
+      li.setAttribute('data-kind', c.kind);
+      li.textContent = who + ' · ' + note;
+      list.appendChild(li);
+    });
+
+    /* What the worker recorded, as counts. The contents themselves are files,
+       and the portal's own file exchange already carries them. */
+    document.getElementById('pl-record').textContent = [
+      'notes ' + (v.notes || 0),
+      'media ' + (v.media || 0),
+      'parts ' + (v.parts || 0),
+      'checklist ' + (v.checklistDone || 0) + '/' + (v.checklistTotal || 0),
+      'signatures ' + (v.signatures || 0),
+    ].join(' · ');
+
+    document.getElementById('pl-allocate').hidden = false;
+  }
+
   function render(data) {
     var meta = data.meta;
     /* UTC when the account published no config. Never the browser's: a page
@@ -225,12 +396,35 @@
           'data-off',
           w.workingHours && w.workingHours[HOUR_KEYS[i]] ? 'false' : 'true',
         );
+        /* Every cell is a drop target, including a day the worker does not
+           work: the office books into one deliberately, and a cell that
+           refused the drop would make that decision for them. A row with no
+           configured worker is not a target, because there is no ownerId to
+           re-assign to. */
+        if (w.workerId) {
+          c.addEventListener('dragover', function (e) {
+            if (!dragging) return;
+            e.preventDefault();
+            c.setAttribute('data-over', 'true');
+          });
+          c.addEventListener('dragleave', function () {
+            c.removeAttribute('data-over');
+          });
+          c.addEventListener('drop', function (e) {
+            e.preventDefault();
+            c.removeAttribute('data-over');
+            if (!dragging) return;
+            var v = dragging;
+            dragging = null;
+            move(v, meta, zone, w.ownerId, k);
+          });
+        }
         (byOwner[w.ownerId] || [])
           .filter(function (v) {
             return dayOf(v.startDate, zone) === k;
           })
           .forEach(function (v) {
-            c.appendChild(visitButton(v, meta, zone));
+            c.appendChild(visitButton(v, data, meta, zone));
           });
         gridEl.appendChild(c);
       });
@@ -316,6 +510,10 @@
       });
   });
 
+  document.getElementById('pl-allocate-close').addEventListener('click', function () {
+    document.getElementById('pl-allocate').hidden = true;
+  });
+
   document.getElementById('pl-prev').addEventListener('click', function () {
     anchor.setUTCDate(anchor.getUTCDate() - 7);
     if (latest) render(latest);

package/payload/platform/plugins/docs/references/internals.md

@@ -406,7 +406,7 @@ Standing rules the operator gives over a channel are `Preference` nodes. Two mec
 
 **Reconcile by meaning on write (`profile-update`).** The existence check is two-tier. First an exact `(category, key)` match — the classic fast path, unchanged. When that misses, a semantic-neighbour lookup runs over the `preference_embedding` vector index, scoped to the same `accountId` and `scope:'admin'`, non-trashed. If the nearest neighbour is at or above `SAME_SUBJECT_COSINE` (0.85), the write lands on that node through the existing reinforce/update/contradict curve instead of minting a duplicate; the matched neighbours are returned in the tool result so the agent can classify future writes against real prior state. The confidence constants are unchanged — only the join key widens, so a rephrasing under a new `key` no longer forks the rule and a correction demotes the prior node rather than adding a contradictory one.
 
-**Inject the active rule-set every turn (channel gateways).** The one definition of "this account's active rules" is `@maxy/active-rules`: the account owner's admin-scope preferences (resolve the seeded `AdminUser {role:'owner'}`, then select through that owner's `UserProfile` via `HAS_PREFERENCE`), a floor-filtered (`confidence >= 0.4`), confidence-ordered query that returns every such preference verbatim — no cap, no de-confliction, no candidate limit. Concision is enforced at write time by the `conversational-memory` skill (each stored value is a single minimal imperative) and by the write-time semantic reconcile (a same-subject write at or above `SAME_SUBJECT_COSINE` folds into the existing node rather than minting a duplicate), so the injected block stays small because each stored preference is short and non-redundant, not because injection truncates. A preference owned by a non-owner profile (an operator's, stranded on the operator's own profile while managing the account) is never injected; an account with no seeded owner injects nothing. `profile-read` exposes this same owner-scoped set as `activeRules`, and the three inbound gateways (`wa-gateway`, `telegram-gateway`, `webchat-gateway`) fetch it for the effective session account and attach it as `standingRules` on the inbound frame; the channel builders prepend it as a `## Standing rules` block above `## Context`. Both channel-server inbound paths carry the block: the single-target SSE loop parses the whole frame, and the unified multi-target door reader (`runDoorStream`,) reconstructs it through the shared `doorInboundPayload` seam whose `parseFrame` closures read `standingRules` off the frame. The read is by code, not agent discretion, so a rule set last week is applied this week regardless of how many times the session compacted. Telegram and webchat inject for `role:'admin'` only — a public visitor never receives operator rules.
+**Inject the active rule-set every turn (channel gateways).** The one definition of "this account's active rules" is `@maxy/active-rules`: the account owner's admin-scope preferences (resolve the seeded `AdminUser {role:'owner'}`, then select through that owner's `UserProfile` via `HAS_PREFERENCE`), a floor-filtered (`confidence >= 0.4`), confidence-ordered query that returns every such preference verbatim — no cap, no de-confliction, no candidate limit. Concision is enforced at write time by the `conversational-memory` skill (each stored value is a single minimal imperative) and by the write-time semantic reconcile (a same-subject write at or above `SAME_SUBJECT_COSINE` folds into the existing node rather than minting a duplicate), so the injected block stays small because each stored preference is short and non-redundant, not because injection truncates. A preference owned by a non-owner profile (an operator's, stranded on the operator's own profile while managing the account) is never injected; an account with no seeded owner injects nothing. `profile-read` exposes this same owner-scoped set as `activeRules`, and the three inbound gateways (`wa-gateway`, `telegram-gateway`, `webchat-gateway`) fetch it for the effective session account and attach it as `standingRules` on the inbound frame; the channel builders prepend it as a `## Standing rules (account owner)` block above `## Context`, whose header and first line name the owner as the subject of the rules so a third-person rule about the owner is not read as a statement about the sender. Both channel-server inbound paths carry the block: the single-target SSE loop parses the whole frame, and the unified multi-target door reader (`runDoorStream`,) reconstructs it through the shared `doorInboundPayload` seam whose `parseFrame` closures read `standingRules` off the frame. The read is by code, not agent discretion, so a rule set last week is applied this week regardless of how many times the session compacted. Telegram and webchat inject for `role:'admin'` only — a public visitor never receives operator rules.
 
 **Trust a scheduled turn's provenance, never an inbound's claim (channel-agent grounding).** A cron-dispatched agent turn reaches the same channel builders as a real inbound, so its own authorisation text would otherwise land inside `## Context` — the zone `REFRAME_INSTRUCTION` demotes to untrusted — and a security-cautious agent would distrust its own automation (the self-cancel loop). The dispatcher therefore stamps a `ScheduleProvenance` marker (owning account, event, owner userId, dispatch time) that the channel builders render as a `## Scheduled automation (platform-verified)` preamble **above** `## Context` (and above the rules block); the whatsapp wrap tag names the door `scheduler`. Both channel-server paths carry the marker — the single-target loop and the unified multi-target door reader (via the same `doorInboundPayload` seam that carries `standingRules`); the scheduler only dispatches to the whatsapp/telegram door, so a webchat frame never bears one. Because the marker is dispatcher-stamped and never derived from payload text, an inbound message cannot forge it — placement above `## Context` alone is not the trust signal, the dispatcher provenance is. The grounding binds to it in two places: one recipient-neutral clause added byte-identical to the three reframe instructions (a marker-bearing turn is authorised standing automation; a reconfiguration or re-enable is not intrusion), and the admin `IDENTITY.md` "Untrusted input" rule that the agent never states a platform-level authenticity or impersonation verdict it was not given (an unsourced "this is not from you" is its own inference, flagged, never asserted as the platform's). A sender has exactly one session: every inbound, real or scheduled, resolves to the deterministic `adminSessionIdFor(effectiveAccount, destination)`. An earlier change gave each firing its own salted seat so distrust could not accrete across firings, but the inbound hub keys on `senderId` and replaces its subscriber outright, so a seat's channel server attached under the sender's own key and swallowed the sender's REAL messages until it detached — splitting one conversation across two sessions that each denied what the other held. The seat is removed; the authoritative `agentPrompt`, this provenance marker, and the injected standing rules ground each firing without one. Self-cancel attribution is disarmed while that model beds in: the guard used to compare the cancelling turn's session id to a dispatcher stamp, which discriminated only because each firing ran its own seat, so with one session per sender it would report an autonomous loop on every operator cancel. It now always reports false — under-counting a real loop rather than inventing one — until the discriminator is rebuilt from the turn's own dispatched eventId. See `.docs/scheduling-agent-dispatch.md § Operator-provenance marker`, `§ Session model — one session per sender`, and `§ Self-cancel attribution — disarmed`.
 

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts

@@ -46,6 +46,7 @@ export declare function parseSpawnRole(body: {
 } | null;
 export declare const SESSION_ID_PATTERN: RegExp;
 export declare const RC_SPAWN_URL_WAIT_DEFAULT_MS = 60000;
+export declare const LOG_FOLLOW_KEEPALIVE_DEFAULT_MS = 30000;
 export interface HttpDeps extends Omit<SpawnDeps, 'onSessionReady' | 'watcher'> {
     /** Admin operator's userId, sourced from users.json at boot (same as
      *  RcDaemonDeps.userId). Passed to buildRcChildEnv so the scheduling MCP
@@ -85,6 +86,10 @@ export interface HttpDeps extends Omit<SpawnDeps, 'onSessionReady' | 'watcher'>
      *  omits this and gets RC_SPAWN_URL_WAIT_DEFAULT_MS (60s); tests inject a
      *  short value to exercise the bind-timeout response without a 60s wait. */
     rcSpawnUrlWaitMs?: number;
+    /** Task 2557 — idle gap after which `/log?follow=1` writes a bare newline.
+     *  Production omits this and gets LOG_FOLLOW_KEEPALIVE_DEFAULT_MS (30s);
+     *  tests inject a short value to exercise the keepalive without a 30s wait. */
+    logFollowKeepaliveMs?: number;
     /** Task 1749 — accessor for the standing PTY census's most recent snapshot,
      *  wired from `createPtyCensus(...).latest`. Optional so the pre-1749 test
      *  deps factories keep working; production index.ts always injects it.

package/payload/platform/services/claude-session-manager/dist/http-server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAqB3B,OAAO,KAAK,EAAU,SAAS,EAAW,MAAM,YAAY,CAAA;AAM5D,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAoBlD,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAQlE;;;;;;;;;;;mFAWmF;AACnF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAE/C;AAED;;;;;;;;;;2EAU2E;AAC3E,wBAAgB,cAAc,CAC5B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAOlD;AAsFD,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAIlD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB;;oEAEgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;sBAEkB;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;CAC9C;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;AACjB;;;;;gFAKgF;AAChF,WAAW,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CA8CT;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAwCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAkGD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CASvG;AAUD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,OAAO,GACxB,IAAI,CA4BN;AAkED;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAyxHpD"}
+{"version":3,"file":"http-server.d.ts","sourceRoot":"","sources":["../src/http-server.ts"],"names":[],"mappings":"AAqBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAA;AAqB3B,OAAO,KAAK,EAAU,SAAS,EAAW,MAAM,YAAY,CAAA;AAM5D,OAAO,EAkBL,KAAK,SAAS,EAEf,MAAM,kBAAkB,CAAA;AAqBzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AACxD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAA;AAoBlD,OAAO,KAAK,EAAE,SAAS,EAAyB,MAAM,iBAAiB,CAAA;AACvE,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAA;AAEzE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAA;AAC1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,wBAAwB,CAAA;AAE3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAA;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAA;AAChE,OAAO,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAA;AAQlE;;;;;;;;;;;mFAWmF;AACnF,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE,GACvB,OAAO,CAAC,SAAS,EAAE,OAAO,GAAG,QAAQ,CAAC,GAAG,IAAI,CAE/C;AAED;;;;;;;;;;2EAU2E;AAC3E,wBAAgB,cAAc,CAC5B,IAAI,EAAE;IAAE,IAAI,CAAC,EAAE,OAAO,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,EAC3C,UAAU,EAAE,MAAM,GAAG,SAAS,GAC7B;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,IAAI,CAOlD;AAsFD,eAAO,MAAM,kBAAkB,QAA2B,CAAA;AAS1D,eAAO,MAAM,4BAA4B,QAAS,CAAA;AAYlD,eAAO,MAAM,+BAA+B,QAAS,CAAA;AAIrD,MAAM,WAAW,QAAS,SAAQ,IAAI,CAAC,SAAS,EAAE,gBAAgB,GAAG,SAAS,CAAC;IAC7E;;qEAEiE;IACjE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,SAAS,CAAA;IAClB;;oEAEgE;IAChE,qBAAqB,CAAC,EAAE,qBAAqB,CAAA;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,iBAAiB,EAAE,MAAM,CAAA;IACzB,kBAAkB,EAAE,WAAW,CAAA;IAC/B,eAAe,EAAE,aAAa,CAAA;IAC9B;kFAC8E;IAC9E,WAAW,EAAE,kBAAkB,CAAA;IAC/B;;gFAE4E;IAC5E,cAAc,EAAE,cAAc,CAAA;IAC9B;;;6BAGyB;IACzB,mBAAmB,CAAC,EAAE,mBAAmB,CAAA;IACzC;;sBAEkB;IAClB,UAAU,CAAC,EAAE,UAAU,CAAA;IACvB;;;sCAGkC;IAClC,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C;;gFAE4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB;;mFAE+E;IAC/E,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;4EAGwE;IACxE,YAAY,CAAC,EAAE,MAAM,iBAAiB,GAAG,IAAI,CAAA;CAC9C;AAsFD;;;;;;mEAMmE;AACnE,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,EAAE,CAiC9D;AAMD;;;;;;iBAMiB;AACjB,wBAAgB,yBAAyB,CACvC,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM;AACjB;;;;;gFAKgF;AAChF,WAAW,CAAC,EAAE;IAAE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD,OAAO,CA8CT;AAID;;;;;;yBAMyB;AACzB,wBAAgB,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAiCzD;AAwCD,wBAAgB,eAAe,CAAC,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,EAAE,CAEpG;AAgBD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAUD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAMvE;AAMD,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,GACtB,MAAM,CAER;AAkCD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAe5F;AAkGD,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CASvG;AAUD,wBAAgB,6BAA6B,CAC3C,IAAI,EAAE,QAAQ,EACd,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,OAAO,EAChB,gBAAgB,EAAE,OAAO,GACxB,IAAI,CA4BN;AAkED;;;kEAGkE;AAClE,MAAM,MAAM,OAAO,GAAG,IAAI,GAAG;IAC3B,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACpD;;;+CAG2C;IAC3C,sBAAsB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;CAChD,CAAA;AA8CD,wBAAgB,YAAY,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAyyHpD"}

package/payload/platform/services/claude-session-manager/dist/http-server.js

@@ -207,6 +207,17 @@ export const SESSION_ID_PATTERN = /^[A-Za-z0-9_-]{1,128}$/;
 // Injectable via `HttpDeps.rcSpawnUrlWaitMs` so the timeout path is
 // unit-testable without a real 60s wait.
 export const RC_SPAWN_URL_WAIT_DEFAULT_MS = 60_000;
+// Task 2557 — how long a follow stream may go without writing a byte before it
+// emits a bare newline. The stream writes only when the JSONL grows, and Node's
+// global fetch (undici) kills a response body after 300s with no bytes, so a
+// conversation between messages killed its own reader: 129 of 129
+// log-follow-close lines on laptop 192.168.88.10 read reason=aborted, shortest
+// lifetime 313440ms, and no follower in the whole log history outlived a quiet
+// patch. 30s costs one byte and leaves a tenfold margin against a slow tick.
+// A genuinely stalled manager still trips undici's bound, because a stalled
+// manager writes no keepalive either. Injectable via
+// `HttpDeps.logFollowKeepaliveMs` so the path is testable without a 30s wait.
+export const LOG_FOLLOW_KEEPALIVE_DEFAULT_MS = 30_000;
 const LIST_TAIL_BYTES = 64 * 1024;
 function timed(logger, method, path, status, ms) {
     logger(`api method=${method} path=${path} outcome=${status} ms=${ms}`);
@@ -2534,6 +2545,10 @@ export function buildHttpApp(deps) {
             let position = 0;
             let linesStreamed = 0;
             let closeReason = 'end';
+            // Task 2557 — when this stream last put a byte on the wire. Every real
+            // write stamps it; the poll loop below sends a keepalive once the gap
+            // reaches the threshold, so an idle session never looks dead to undici.
+            let lastWriteAt = Date.now();
             const countNewlines = (buf) => {
                 let n = 0;
                 for (let i = 0; i < buf.length; i++)
@@ -2548,6 +2563,7 @@ export function buildHttpApp(deps) {
                     const buf = chunk;
                     linesStreamed += countNewlines(buf);
                     await out.write(buf);
+                    lastWriteAt = Date.now();
                 }
                 position = initialSize;
             }
@@ -2587,12 +2603,25 @@ export function buildHttpApp(deps) {
                         const buf = chunk;
                         linesStreamed += countNewlines(buf);
                         void out.write(buf);
+                        lastWriteAt = Date.now();
                     }
                 });
             };
             watchFile(jsonlPath, { interval: 250 }, listener);
+            const keepaliveMs = deps.logFollowKeepaliveMs ?? LOG_FOLLOW_KEEPALIVE_DEFAULT_MS;
             while (active) {
                 await new Promise((resolve) => setTimeout(resolve, 1_000));
+                if (!active)
+                    break;
+                if (Date.now() - lastWriteAt < keepaliveMs)
+                    continue;
+                // Task 2557 — a bare newline, not a file line: it is excluded from
+                // `linesStreamed` because that counter is what this stream carried from
+                // the JSONL, and the emitter drops it at its own `if (!line) continue`.
+                // Its only job is to be a byte, so undici's bodyTimeout never elapses
+                // on a conversation that is merely quiet.
+                await out.write(Buffer.from('\n'));
+                lastWriteAt = Date.now();
             }
             deps.logger(`log-follow-close sessionId=${sessionId} reason=${closeReason} linesStreamed=${linesStreamed} ms=${Date.now() - followStreamStart}`);
         });