@sleds/cli 0.1.39 → 0.1.41

package/README.md

@@ -87,7 +87,7 @@ The flags `sleds route run` and `sleds engine` share:
 --repo <path> | --repos-dir <dir>   where the node's repo is checked out
 ```
 
-`sleds engine` also takes `--name <n>` (default the hostname; it signs as `engine:<n>`), `--interval <s>`, `--lease <min>`, `--idle <min>` (default 20: a session showing nothing new and no PR is parked for a person, its last message the question, and the answer is typed back into it) and `--once` for a single tick. `--jira` reads `JIRA_BASE_URL`, `JIRA_EMAIL` and `JIRA_TOKEN`. `sleds help` has the full list.
+`sleds engine` also takes `--name <n>` (default the hostname; it signs as `engine:<n>`), `--interval <s>`, `--lease <min>`, `--idle <min>` (default 20: a session showing nothing new and no PR is parked for a person, its last message the question, and the answer is typed back into it) and `--once` for a single tick. `--jira` reads `JIRA_BASE_URL`, `JIRA_EMAIL` and `JIRA_TOKEN`, and still needs a seat: before every write to Jira (a status move, a comment) it asks SLEDS, and writes nothing when the org runs Jira read only, the switch is off, the issue's project is not watched, SLEDS cannot be reached, or `JIRA_WRITES=off` is set in its environment (spec 39 rule 4). It will not start when SLEDS says no writes for the epic's project. `sleds help` has the full list.
 
 `sleds engine status [--name <n>] [--json]` says what that engine holds now: the nodes it runs (with where to watch each), the PRs it follows and their checks, the next check, and whether it is alive. It reads the engine's state file and the lock the engine keeps beside it (`<name>.lock`: its pid, written each tick, removed on a clean stop), not SLEDS, so it answers offline. `--json` is the contract a front end reads; both it and the state file carry a version, `v` (spec 28 §4.2). For a `sleds route run` engine, pass `--name <n>-<KEY>`.
 

package/dist/sleds.mjs

@@ -10160,6 +10160,10 @@ var cmuxProbeReason = (r) => {
 };
 var cmuxAuthRefused = (r) => r.status !== 0 && /\b(auth_required|unauthorized|authentication required|invalid password)\b/i.test(`${r.stderr}
 ${r.stdout}`);
+var cmuxNeedsForce = (r) => r.status !== 0 && /\bconfirmation_required\b|--force\b/i.test(`${r.stderr}
+${r.stdout}`);
+var CMUX_LIST_TRIES = 20;
+var CMUX_LIST_WAIT_MS = 250;
 var CMUX_SETTLE_MS = 300;
 var CMUX_ENTER_RETRIES = 2;
 var PROMPT_LINE = /^[\s│|]*[>❯›]\s?(.*)$/;
@@ -10213,6 +10217,12 @@ function cmuxRunner(exec, deps = {}) {
     return pw ? run(args) : r;
   };
   const failed = cmuxFailure;
+  const closeWorkspace = (id) => {
+    const c = cmux(["close-workspace", "--workspace", id]);
+    if (!cmuxNeedsForce(c))
+      return c.status === 0;
+    return cmux(["close-workspace", "--workspace", id, "--force"]).status === 0;
+  };
   return {
     name: "cmux",
     makesWorktree: false,
@@ -10252,19 +10262,29 @@ function cmuxRunner(exec, deps = {}) {
         const why = failed(r);
         const l = cmux(["--id-format", "both", "list-workspaces"]);
         const stray = l.status === 0 ? cmuxIdForName(l.stdout, o.name) : null;
-        const left = l.status !== 0 || (stray ? cmux(["close-workspace", "--workspace", stray]).status !== 0 : namedLines(l.stdout, o.name).length > 0);
+        const left = l.status !== 0 || (stray ? !closeWorkspace(stray) : namedLines(l.stdout, o.name).length > 0);
         throw new Error(`cmux workspace create ${o.name} failed: ${why}${left ? `; ${UNWATCHED}` : ""}`);
       }
       let id = parseCmuxWorkspace(r.stdout);
       const ref = id ? null : parseCmuxRef(r.stdout);
       let closed = false;
       if (ref) {
-        const l = cmux(["--id-format", "both", "list-workspaces"]);
-        if (l.status === 0) {
-          id = cmuxIdForRef(l.stdout, ref, o.name);
-          const stray = id ? null : cmuxIdForName(l.stdout, o.name);
+        let listed = null;
+        for (let i = 0;i < CMUX_LIST_TRIES; i++) {
+          if (i > 0)
+            sleep(CMUX_LIST_WAIT_MS);
+          const l = cmux(["--id-format", "both", "list-workspaces"]);
+          if (l.status !== 0)
+            continue;
+          listed = l.stdout;
+          if (namedLines(l.stdout, o.name).length > 0)
+            break;
+        }
+        if (listed !== null) {
+          id = cmuxIdForRef(listed, ref, o.name);
+          const stray = id ? null : cmuxIdForName(listed, o.name);
           if (stray)
-            closed = cmux(["close-workspace", "--workspace", stray]).status === 0;
+            closed = closeWorkspace(stray);
         }
       }
       if (!id) {
@@ -10402,7 +10422,7 @@ function beatBody(state, flags, host = {}, cap = {}) {
     name: flags.name,
     os: host.os ?? process.platform,
     runner: flags.runner,
-    version: host.version ?? "0.1.39" ?? "dev",
+    version: host.version ?? "0.1.41" ?? "dev",
     running: live.length,
     items: live.slice(0, BEAT_ITEMS).map((r) => `${r.item}/${r.node}`),
     ...cap.atOnce !== undefined ? { atOnce: cap.atOnce } : {},
@@ -11005,6 +11025,29 @@ function adfComment(text) {
     }
   };
 }
+function localWritesOff(env) {
+  return env.JIRA_WRITES?.trim().toLowerCase() === "off";
+}
+function sledsJiraGate(client, env = process.env) {
+  return {
+    async ask(w) {
+      if (localWritesOff(env))
+        return "JIRA_WRITES=off is set here";
+      const r = await client.postFull("/proxy/jira/write", { ...w }).catch(() => null);
+      if (!r)
+        return "SLEDS could not be reached to say whether writes to Jira are on";
+      if (r.status !== 200 || !r.json)
+        return `SLEDS would not say whether writes to Jira are on (HTTP ${r.status})`;
+      const refusal = r.json.refusal;
+      if (refusal === null)
+        return null;
+      return str6(r.json.why) ?? (typeof refusal === "string" ? refusal : "SLEDS refused the write");
+    },
+    async told(w, outcome) {
+      await client.postFull("/proxy/jira/write", { ...w, outcome }).catch(() => null);
+    }
+  };
+}
 function jiraSource(o) {
   const fetchFn = o.fetchFn ?? fetch;
   const base = o.baseUrl.replace(/\/+$/, "");
@@ -11045,23 +11088,35 @@ function jiraSource(o) {
       byNode.set(n.node, n);
     return [epicItem(epic, nodes)];
   };
+  const write = async (issue, sw, what, body) => {
+    const w = {
+      issueKey: issue,
+      switch: sw,
+      method: "POST",
+      endpoint: `/issue/{key}/${what}`
+    };
+    const refused = await o.gate.ask(w).catch((e) => `SLEDS could not be reached (${e instanceof Error ? e.message : String(e)})`);
+    if (refused)
+      return { ok: false, status: 0, json: null, refused };
+    const r = await call(`/rest/api/3/issue/${issue}/${what}`, { method: "POST", body });
+    await o.gate.told(w, r.ok ? "sent" : `failed:${r.status}`).catch(() => {
+      return;
+    });
+    return r;
+  };
   const transitionTo = async (issue, category) => {
     const t = await call(`/rest/api/3/issue/${issue}/transitions`);
     const list = Array.isArray(t.json?.transitions) ? t.json.transitions.filter(isObject8) : [];
     const hit = list.find((x) => isObject8(x.to) && categoryOf({ status: x.to }) === category && x.id !== undefined);
     if (!hit)
-      return false;
-    const r = await call(`/rest/api/3/issue/${issue}/transitions`, {
-      method: "POST",
-      body: { transition: { id: String(hit.id) } }
-    });
-    return r.ok;
+      return { ok: false };
+    const r = await write(issue, "status", "transitions", { transition: { id: String(hit.id) } });
+    return { ok: r.ok, ...r.refused ? { refused: r.refused } : {} };
   };
   const comment = async (issue, text) => {
-    const r = await call(`/rest/api/3/issue/${issue}/comment`, {
-      method: "POST",
-      body: adfComment(text)
-    });
+    const r = await write(issue, "comments", "comment", adfComment(text));
+    if (r.refused)
+      throw new Error(`Jira: not written to ${issue} — ${r.refused}`);
     if (!r.ok)
       throw new Error(`Jira: could not comment on ${issue} — ${errorOf(r)}`);
   };
@@ -11087,8 +11142,16 @@ function jiraSource(o) {
       const pack = `# ${n.issue} · ${n.summary}
 
 ${body}`.trimEnd();
-      const moved = await transitionTo(n.issue, "indeterminate").catch(() => false);
-      if (!moved)
+      const moved = await transitionTo(n.issue, "indeterminate").catch(() => ({
+        ok: false,
+        refused: undefined
+      }));
+      if (moved.refused)
+        return {
+          ok: false,
+          error: `not taken: not written to Jira (${n.issue}) — ${moved.refused}`
+        };
+      if (!moved.ok)
         return {
           ok: false,
           error: `Jira would not move ${n.issue} to In Progress (no such transition, or no permission) — the engine needs it to mark the node taken`
@@ -11115,8 +11178,8 @@ ${body}`.trimEnd();
       if (outcome.kind === "pr")
         return comment(issue, `PR opened by ${by}: ${outcome.ref}`);
       if (outcome.kind === "merged") {
-        const done = await transitionTo(issue, "done").catch(() => false);
-        return comment(issue, done ? `PR merged by ${by}'s engine: ${outcome.ref}` : `PR merged: ${outcome.ref}. Jira would not move this to Done (no such transition, or no permission) — move it so the nodes it blocks can start.`);
+        const done = await transitionTo(issue, "done").catch(() => ({ ok: false }));
+        return comment(issue, done.ok ? `PR merged by ${by}'s engine: ${outcome.ref}` : `PR merged: ${outcome.ref}. Jira would not move this to Done (no such transition, or no permission) — move it so the nodes it blocks can start.`);
       }
       if (outcome.kind === "park")
         return comment(issue, outcome.question);
@@ -11128,20 +11191,21 @@ ${outcome.log.slice(-JIRA_LOG_MAX)}`);
     }
   };
 }
-function jiraFromEnv(epic, env = process.env) {
-  const baseUrl = env.JIRA_BASE_URL?.trim();
-  const email = env.JIRA_EMAIL?.trim();
-  const token = env.JIRA_TOKEN?.trim();
-  const missing = [
-    baseUrl ? null : "JIRA_BASE_URL",
-    email ? null : "JIRA_EMAIL",
-    token ? null : "JIRA_TOKEN"
-  ].filter((m) => m !== null);
-  if (missing.length > 0 || !baseUrl || !email || !token)
-    return {
-      error: `Jira source needs ${missing.join(", ")} (e.g. JIRA_BASE_URL=https://qwick.atlassian.net, an API token in JIRA_TOKEN)`
-    };
-  return jiraSource({ epic, baseUrl, email, token });
+function jiraEnvError(env) {
+  const missing = ["JIRA_BASE_URL", "JIRA_EMAIL", "JIRA_TOKEN"].filter((k) => !env[k]?.trim());
+  return missing.length > 0 ? `Jira source needs ${missing.join(", ")} (e.g. JIRA_BASE_URL=https://qwick.atlassian.net, an API token in JIRA_TOKEN)` : null;
+}
+function jiraFromEnv(epic, gate, env = process.env) {
+  const error = jiraEnvError(env);
+  if (error)
+    return { error };
+  return jiraSource({
+    epic,
+    baseUrl: String(env.JIRA_BASE_URL).trim(),
+    email: String(env.JIRA_EMAIL).trim(),
+    token: String(env.JIRA_TOKEN).trim(),
+    gate
+  });
 }
 
 // src/engine/loop.ts
@@ -16250,7 +16314,7 @@ async function driveEngine(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.39"
+    cliVersion: "0.1.41"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -18067,6 +18131,15 @@ function orgClient2(o, flag) {
   const org = engineOrg2(o, flag);
   return engineClient2(o, org.seated ? org.slug ?? undefined : flag);
 }
+async function jiraWritesAtStart(gate, epic) {
+  const no = await gate.ask({
+    issueKey: epic.trim().toUpperCase(),
+    switch: "status",
+    method: "POST",
+    endpoint: "/issue/{key}/transitions"
+  });
+  return no ? `--jira ${epic}: not starting — SLEDS says no writes to Jira: ${no}. A take moves the issue to In Progress, so the engine cannot take a node without one.` : null;
+}
 function realPidAlive2(pid) {
   try {
     process.kill(pid, 0);
@@ -18303,7 +18376,7 @@ async function driveEngine2(o, flags, deps, until = {}) {
     runner: deps.runner.name,
     atOnce: flags.atOnce,
     interval: flags.interval,
-    cliVersion: "0.1.39"
+    cliVersion: "0.1.41"
   };
   const beat = (checkedAt) => {
     const m = deps.machine;
@@ -18554,7 +18627,24 @@ var engineCmd = async (o) => {
   if (o.source)
     source = o.source;
   else if (flags.jira) {
-    const j = jiraFromEnv(flags.jira, o.env ?? process.env);
+    const env = o.env ?? process.env;
+    const missing = jiraEnvError(env);
+    if (missing) {
+      error(missing);
+      return 1;
+    }
+    const c = o.client ?? orgClient2(o, given);
+    if ("error" in c) {
+      error(`--jira asks SLEDS before every write to Jira (spec 39), so it needs a seat: ${c.error}`);
+      return 1;
+    }
+    const gate = sledsJiraGate(c, env);
+    const no = await jiraWritesAtStart(gate, flags.jira);
+    if (no) {
+      error(no);
+      return 1;
+    }
+    const j = jiraFromEnv(flags.jira, gate, env);
     if ("error" in j) {
       error(j.error);
       return 1;
@@ -24763,7 +24853,7 @@ ${renderHelpText(argv[1])}`);
     case "version":
     case "--version":
     case "-v":
-      console.log("sleds 0.1.39");
+      console.log("sleds 0.1.41");
       return 0;
     default:
       console.error(`unknown command: ${cmd}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sleds/cli",
-  "version": "0.1.39",
+  "version": "0.1.41",
   "description": "SLEDS CLI — the cost and limits of AI agent work, decided at the wall. Point Claude Code at a SLEDS proxy; estimate before you run; hold, switch model, or run overnight when you hit a limit.",
   "license": "UNLICENSED",
   "type": "module",