@tablation/crew 0.5.0 → 0.6.1

package/README.md

@@ -207,7 +207,7 @@ crew ports [route]             which checkout owns which ports, and what is up
 crew reap [route]              kill servers left behind by removed worktrees
 crew drop [route] NNN          remove a merged ticket's worktree and branch
 crew sync [route]              fast-forward the checkout and its worktrees from the remote
-crew pause|resume [route] [R]  pause everything, or one role
+crew pause|resume [route] [R|release]  pause everything, one role, or releases only (passengers keep running)
 crew log [route]               tail the log
 crew inbox [--member NAME]    your tickets across every workspace
 crew connect WS[/PROJECT]     resolve a workspace/project's ids into the state tree

package/dist/cli.js

@@ -578,7 +578,8 @@ var SHIP_KEYS = /* @__PURE__ */ new Set([
   "relayHost",
   "relayPort",
   "relayHttpPort",
-  "relayPublicDomain"
+  "relayPublicDomain",
+  "passengerImage"
 ]);
 var ROUTE_KEYS = /* @__PURE__ */ new Set([
   "route",
@@ -912,7 +913,8 @@ Create the first of those:
       // 2222 matches the relay's own RELAY_SSH_PORT default (crew-relay README).
       relayPort: shipRaw.relayPort !== void 0 ? Number(shipRaw.relayPort) : 2222,
       relayHttpPort: shipRaw.relayHttpPort !== void 0 ? Number(shipRaw.relayHttpPort) : 443,
-      relayPublicDomain: shipRaw.relayPublicDomain ? String(shipRaw.relayPublicDomain) : void 0
+      relayPublicDomain: shipRaw.relayPublicDomain ? String(shipRaw.relayPublicDomain) : void 0,
+      passengerImage: shipRaw.passengerImage ? String(shipRaw.passengerImage) : void 0
     },
     routes,
     crewHome,
@@ -1217,6 +1219,31 @@ var State = class _State {
   resume(role) {
     rmSync(role ? this.path(`.role-paused-${role}`) : this.path(".crew-paused"), { force: true });
   }
+  /**
+   * The release phase (merge, deploy, release) has its own sentinel, one
+   * level below the whole-crew pause: `crew pause release` stops shipping
+   * while agents keep working.
+   */
+  isReleasePaused() {
+    return existsSync3(this.path(".release-paused"));
+  }
+  setReleasePaused(paused) {
+    if (paused) writeFileSync(this.path(".release-paused"), "");
+    else rmSync(this.path(".release-paused"), { force: true });
+  }
+  /**
+   * Why a release cycle must not run right now, or null when it may. Every
+   * release entry point checks this first — the release timer, `crew release`,
+   * `crew merge`, `crew deploy` and the inline release a `run` cycle used to
+   * do — so a paused ship cannot merge, deploy, or file release alerts.
+   * A release already in flight when the pause lands finishes; only new
+   * cycles are refused.
+   */
+  releaseSkipReason() {
+    if (this.isPaused()) return "the crew is paused";
+    if (this.isReleasePaused()) return "releases are paused";
+    return null;
+  }
   /**
    * Take an exclusive lock, or report who holds it.
    *
@@ -7775,7 +7802,21 @@ function dockerAvailable(exec = realExec) {
     return false;
   }
 }
-var IMAGE_TAG = "crew-passenger-mcp:latest";
+var PASSENGER_IMAGE_REPO = "tablation/crew-passenger-mcp";
+function passengerImageRef(cfg) {
+  return process.env.CREW_PASSENGER_IMAGE || cfg.ship.passengerImage || `${PASSENGER_IMAGE_REPO}:${crewVersion(cfg.crewHome)}`;
+}
+function imagePresent(image, exec = realExec) {
+  try {
+    exec("docker", ["image", "inspect", image]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function ensureImage(image, exec = realExec) {
+  if (!imagePresent(image, exec)) exec("docker", ["pull", image]);
+}
 function containerNameFor(workspaceId) {
   return `crew-passenger-${workspaceId}`;
 }
@@ -7783,12 +7824,13 @@ function portFor(workspaceId, base = 28765, span = 1e3) {
   const digest = createHash4("sha256").update(workspaceId).digest();
   return base + digest.readUInt32BE(0) % span;
 }
-function mountsDigest(mounts) {
+function mountsDigest(mounts, image) {
   const sorted2 = [...mounts].sort((a, b) => a.containerPath.localeCompare(b.containerPath));
-  return createHash4("sha256").update(JSON.stringify(sorted2)).digest("hex").slice(0, 16);
+  return createHash4("sha256").update(JSON.stringify({ mounts: sorted2, image })).digest("hex").slice(0, 16);
 }
 function planContainers(cfg) {
   const byWorkspace = /* @__PURE__ */ new Map();
+  const image = passengerImageRef(cfg);
   for (const route of cfg.routes) {
     if (!route.enabled || !route.hostPassengers || !route.resolved?.workspaceId) continue;
     const workspaceId = route.resolved.workspaceId;
@@ -7804,8 +7846,9 @@ function planContainers(cfg) {
       workspaceId,
       containerName: containerNameFor(workspaceId),
       port: portFor(workspaceId),
+      image,
       mounts: mountList,
-      mountsHash: mountsDigest(mountList)
+      mountsHash: mountsDigest(mountList, image)
     };
   });
 }
@@ -7861,7 +7904,7 @@ function startContainer(plan, tablationApiBaseUrl, sync, exec = realExec) {
     );
   }
   for (const m of plan.mounts) args.push("-v", `${m.hostPath}:${m.containerPath}:ro`);
-  args.push(IMAGE_TAG);
+  args.push(plan.image);
   exec("docker", args);
 }
 function syncPassengerContainers(cfg, tablationApiBaseUrl, exec = realExec, syncEndpoints = /* @__PURE__ */ new Map()) {
@@ -7872,19 +7915,27 @@ function syncPassengerContainers(cfg, tablationApiBaseUrl, exec = realExec, sync
   const started = [];
   const recreated = [];
   const stopped = [];
+  const ensured = /* @__PURE__ */ new Set();
+  const start = (plan, sync) => {
+    if (!ensured.has(plan.image)) {
+      ensureImage(plan.image, exec);
+      ensured.add(plan.image);
+    }
+    startContainer(plan, tablationApiBaseUrl, sync, exec);
+  };
   for (const plan of plans) {
     const sync = syncEndpoints.get(plan.workspaceId);
     const current = existingByName.get(plan.containerName);
     if (!current) {
-      startContainer(plan, tablationApiBaseUrl, sync, exec);
+      start(plan, sync);
       started.push(plan.containerName);
     } else if (!current.running) {
       stopContainer(plan.containerName, exec);
-      startContainer(plan, tablationApiBaseUrl, sync, exec);
+      start(plan, sync);
       started.push(plan.containerName);
     } else if (currentMountsHash(plan.containerName, exec) !== plan.mountsHash) {
       stopContainer(plan.containerName, exec);
-      startContainer(plan, tablationApiBaseUrl, sync, exec);
+      start(plan, sync);
       recreated.push(plan.containerName);
     }
   }
@@ -8499,6 +8550,7 @@ var SpawnBreaker = class {
   }
 };
 async function runOnePass(o) {
+  if (o.state.isPaused()) return { pending: [], started: [], skipped: [] };
   await hydrateApiKeys([o.route], o.getSessionStore);
   const emit = o.newEmitter();
   const decide = o.decide ?? decideCycle;
@@ -8826,7 +8878,8 @@ function usage() {
   crew rotate-passenger-url [route]   force a Host Passengers tunnel to reconnect with a fresh public URL
   crew unassign [route] NNN      hand back a session's ticket \u2014 clears assignee, next cycle picks it up
   crew sync [route]              fast-forward the checkout and its worktrees from the remote
-  crew pause|resume [route] [R]  pause everything, or one role
+  crew pause|resume [route] [R|release]  pause everything, one role, or releases only (merge/deploy/release; passengers keeps running).
+                                 resume with no argument clears only the whole-crew pause; a role or release pause needs its own resume
   crew log [route]               tail the log
   crew inbox [--member NAME]    your tickets across every workspace (or a colleague's)
   crew connect                  resolve a workspace's ids into a crew.yaml block
@@ -8927,6 +8980,11 @@ if (command === "passenger-sync-daemon") {
       urlFor: (slug) => publicUrlFor(slug, relayHost, cfg.ship.relayHttpPort, cfg.ship.relayPublicDomain),
       warn: (m) => emit.warn(m, { step: "passengers" })
     };
+  }, releaseRefused = function() {
+    const why = state.releaseSkipReason();
+    if (!why) return false;
+    emit.emit(`${why} \u2014 release skipped`, { step: "release" });
+    return true;
   }, reportUnplaceable = function(c, unplaceable, verified, emit2) {
     if (unplaceableReported.has(c.route)) return;
     unplaceableReported.add(c.route);
@@ -8935,7 +8993,7 @@ if (command === "passenger-sync-daemon") {
       else emit2.emit(note.message, { step: "release" });
     }
   };
-  requireArmed2 = requireArmed, parseTicketNumber2 = parseTicketNumber, passengerApiKeys2 = passengerApiKeys, endpointApiFor2 = endpointApiFor, endpointReconcileDeps2 = endpointReconcileDeps, reportUnplaceable2 = reportUnplaceable;
+  requireArmed2 = requireArmed, parseTicketNumber2 = parseTicketNumber, passengerApiKeys2 = passengerApiKeys, endpointApiFor2 = endpointApiFor, endpointReconcileDeps2 = endpointReconcileDeps, releaseRefused2 = releaseRefused, reportUnplaceable2 = reportUnplaceable;
   let cfg;
   let firstRun;
   try {
@@ -8977,7 +9035,7 @@ if (command === "passenger-sync-daemon") {
   const releaseFleetWide = ["merge", "deploy", "release"].includes(command) && flag("fleet");
   const DAEMON_SUBCOMMANDS = /* @__PURE__ */ new Set(["start", "stop", "status", "restart"]);
   const named = command === "daemon" && DAEMON_SUBCOMMANDS.has(positional[1] ?? "") ? positional[2] : positional[1];
-  const fleetWide = command === "inbox" || command === "connect" || command === "agents" || command === "skills" || command === "logbook" || command === "repos" || releaseFleetWide || FLEET_CAPABLE.has(command) && !named && cfg.routes.length > 1;
+  const fleetWide = command === "inbox" || command === "connect" || command === "agents" || command === "skills" || command === "logbook" || command === "repos" || releaseFleetWide || command === "pause" || command === "resume" || FLEET_CAPABLE.has(command) && !named && cfg.routes.length > 1;
   let route;
   try {
     route = fleetWide ? cfg.routes[0] : findRoute(cfg, named);
@@ -9067,6 +9125,7 @@ if (command === "passenger-sync-daemon") {
     }
   }
   async function releaseFleet(opts = {}) {
+    if (releaseRefused()) return;
     const summaries = [];
     if (!dryRun) state.releaseHeartbeat().touch();
     for (const c of cfg.routes) {
@@ -9077,6 +9136,7 @@ if (command === "passenger-sync-daemon") {
     if (!dryRun) state.releaseHeartbeat().touch();
   }
   async function releaseTargets(opts = {}) {
+    if (releaseRefused()) return;
     const only = value("repo");
     const targets = reposOf(route);
     const chosen = only ? targets.filter((t) => t.name === only) : targets;
@@ -9129,6 +9189,23 @@ if (command === "passenger-sync-daemon") {
       process.stderr.write("crew install: no scheduler support yet for Windows (Task Scheduler is planned, not built)\n");
       process.exit(2);
     }
+    if (!dryRun && cfg.routes.some((r) => r.enabled && r.hostPassengers) && dockerAvailable()) {
+      const image = passengerImageRef(cfg);
+      if (imagePresent(image)) {
+        process.stdout.write(`Host Passengers image ${image} is already present
+`);
+      } else {
+        process.stdout.write(`pulling Host Passengers image ${image}
+`);
+        try {
+          ensureImage(image);
+        } catch (e) {
+          process.stderr.write(`crew install: could not pull Host Passengers image ${image}: ${e.message}
+`);
+          process.exitCode = 1;
+        }
+      }
+    }
     const hasSystemd = detectSystemd();
     for (const job of ["run", "release", "passengers"]) {
       const plan = planInstall(cfg.ship, CREW_HOME, host, hasSystemd, job);
@@ -10979,6 +11056,12 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
     }
     case "pause":
     case "resume": {
+      if (positional[1] === "release" || positional[2] === "release") {
+        state.setReleasePaused(command === "pause");
+        process.stdout.write(`${command}d releases
+`);
+        break;
+      }
       const role = positional[2] ?? (["dev", "design", "qa"].includes(positional[1] ?? "") ? positional[1] : void 0);
       if (command === "pause") state.pause(role);
       else state.resume(role);
@@ -11070,6 +11153,9 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
           },
           crew: {
             paused: state.isPaused(),
+            // The release timer honors the whole-crew pause too, so this is
+            // true whenever releases are stopped for either reason.
+            releasePaused: state.releaseSkipReason() !== null,
             roles: ROLE_NAMES.map((r) => ({ name: r, label: ROLE_LABEL[r], paused: state.isRolePaused(r) })),
             seats: seats2
           },
@@ -11113,6 +11199,7 @@ Signed in as ${result.identity.email} \u2014 minted an API key in workspace "${r
 route:      ${route.route} -> ${route.dir}
 enabled:    ${route.enabled}
 crew:       ${state.isPaused() ? "paused" : "active"}
+release:    ${state.releaseSkipReason() ? "paused" : "active"}
 watermark:  ${state.watermark()}
 `
       );
@@ -11253,10 +11340,13 @@ git:               ${gitPath ? `OK (${gitPath})` : "NOT FOUND on the scheduler P
       } else {
         const dockerOk = dockerAvailable();
         const keygenOk = sshKeygenAvailable();
+        const image = passengerImageRef(cfg);
+        const imageOk = dockerOk && imagePresent(image);
         process.stdout.write(
           `host passengers:   ON for ${passengerRoutes.map((r) => r.route).join(", ")}
                    docker:     ${dockerOk ? "OK" : "NOT AVAILABLE"}
                    ssh-keygen: ${keygenOk ? "OK" : "NOT AVAILABLE"}
+                   image:      ${image} (${imageOk ? "present" : "missing"})
                    relay host: ${cfg.ship.relayHost ? `${cfg.ship.relayHost}:${cfg.ship.relayPort}` : "not set (ship.relayHost) \u2014 containers will run with no tunnel"}
 `
         );
@@ -11311,4 +11401,5 @@ var parseTicketNumber2;
 var passengerApiKeys2;
 var endpointApiFor2;
 var endpointReconcileDeps2;
+var releaseRefused2;
 var reportUnplaceable2;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tablation/crew",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "A standing team of headless agents that picks work off a Tablation board, does it on a machine you control, and reports back.",
   "type": "module",
   "license": "MIT",