@tiens.nguyen/gonext-local-worker 1.0.247 → 1.0.249

package/gonext-local-worker.mjs

@@ -867,7 +867,7 @@ async function performHttpMeasurement(params) {
  * line as they arrive. Resolves when the process exits cleanly; rejects on
  * non-zero exit or timeout. stderr is collected and appended to error messages.
  */
-function runProcessWithStreamingStdout(cmd, cmdArgs, stdinStr, timeoutMs, onLine, extraEnv, abortSignal) {
+function runProcessWithStreamingStdout(cmd, cmdArgs, stdinStr, timeoutMs, onLine, extraEnv, abortSignal, onTimeout) {
   return new Promise((resolve, reject) => {
     const spawnOpts = { stdio: ["pipe", "pipe", "pipe"] };
     if (extraEnv && Object.keys(extraEnv).length > 0) {
@@ -878,10 +878,36 @@ function runProcessWithStreamingStdout(cmd, cmdArgs, stdinStr, timeoutMs, onLine
     let lineBuffer = "";
     let timedOut = false;
     let aborted = false;
-    const timer = setTimeout(() => {
+    let closed = false;
+    let timerLive = true;
+    // On the time budget: with no onTimeout handler (probe/legacy) this is a hard cap —
+    // kill immediately. With a handler (task #81, interactive terminal) ask the user
+    // whether to keep waiting; the child keeps running/streaming during the ~60s prompt.
+    // "Keep waiting" disables the cap for the rest of the run; No / no-answer kills it.
+    const fireTimeout = async () => {
+      if (!timerLive || closed || aborted) return;
+      if (typeof onTimeout !== "function") {
+        timedOut = true;
+        timerLive = false;
+        child.kill("SIGKILL");
+        return;
+      }
+      let extend = false;
+      try {
+        extend = await onTimeout();
+      } catch {
+        extend = false;
+      }
+      if (closed || aborted || !timerLive) return; // finished/cancelled during the prompt
+      if (extend) {
+        timerLive = false; // ignore the time budget for the rest of this run
+        return;
+      }
       timedOut = true;
+      timerLive = false;
       child.kill("SIGKILL");
-    }, timeoutMs);
+    };
+    const timer = setTimeout(fireTimeout, timeoutMs);
     // User-requested cancel (gonext Ctrl+C): kill the Python agent so it stops burning
     // steps/tokens. On close we resolve cleanly (not reject) — the caller checks the
     // cancel flag and leaves the job in its already-"cancelled" state.
@@ -913,10 +939,14 @@ function runProcessWithStreamingStdout(cmd, cmdArgs, stdinStr, timeoutMs, onLine
       stderr += d;
     });
     child.on("error", (e) => {
+      closed = true;
+      timerLive = false;
       clearTimeout(timer);
       reject(e);
     });
     child.on("close", (code) => {
+      closed = true;
+      timerLive = false;
       clearTimeout(timer);
       if (abortSignal) abortSignal.removeEventListener?.("abort", onAbort);
       // Drain any remaining buffered line
@@ -1925,15 +1955,27 @@ async function runAgentChatJob(job) {
       // re-validates). Terminal = its launch cwd; web = the temp scratch folder.
       activeWorkspace: jobActiveWorkspace,
     });
-    // 30 min max for an agent run: multi-step ReAct on a 14B/31B with a cold prompt
-    // cache — or a remote Ollama box on slow GPU cold-loading a big model — can run
-    // for many minutes per step. Must stay BELOW the web client's hard WS deadline
-    // (1_860_000 ms) so our clean timeout error reaches the user instead of a generic
-    // WS timeout. On expiry the python child is SIGKILLed, which also shows up as a
-    // BrokenPipeError in the model server log (expected). Liveness during long model
-    // calls comes from the python heartbeat (a keepalive step chunk every 45s), not
-    // from this cap.
-    const timeoutMs = 1_800_000;
+    // Agent run time budget (task #81). Default 60 min; user-configurable in web Settings
+    // (agentTimeoutMinutes → payload.agentTimeoutMs). Multi-step ReAct on a 14B/31B with a
+    // cold prompt cache — or a remote Ollama box slow-cold-loading a big model — can run
+    // for many minutes per step, so a generous budget is normal. On expiry the TERMINAL
+    // (interactive) asks the user whether to keep waiting (onAgentTimeout below); "yes"
+    // ignores the budget for the rest of the run. WEB has no picker AND a hard WS deadline
+    // (1_860_000 ms), so it's capped at 30 min and just aborts — our clean timeout error
+    // then reaches the user instead of a generic WS timeout. On a hard stop the python
+    // child is SIGKILLed (shows as a BrokenPipeError in the model server log — expected).
+    // Liveness during long model calls comes from the python heartbeat (a keepalive step
+    // chunk every 45s), not from this cap.
+    const DEFAULT_AGENT_TIMEOUT_MS = 3_600_000; // 1 hour
+    const WEB_AGENT_TIMEOUT_CAP_MS = 1_800_000; // stay under the web WS deadline
+    const isInteractiveTimeout = payload?.interactiveApproval === true;
+    const requestedTimeoutMs =
+      Number.isFinite(payload?.agentTimeoutMs) && payload.agentTimeoutMs > 0
+        ? payload.agentTimeoutMs
+        : DEFAULT_AGENT_TIMEOUT_MS;
+    const timeoutMs = isInteractiveTimeout
+      ? requestedTimeoutMs
+      : Math.min(requestedTimeoutMs, WEB_AGENT_TIMEOUT_CAP_MS);
 
     let inThink = false;
     let finalText = "";
@@ -1985,6 +2027,45 @@ async function runAgentChatJob(job) {
     }, 1500);
     cancelAc.signal.addEventListener("abort", () => { cancelled = true; }, { once: true });
 
+    // Task #81: when the time budget is reached in the TERMINAL, ask the user whether to
+    // keep waiting instead of just aborting. Reuses the #67 approval plumbing
+    // (approval-request → poll approvalDecision) with a __TIMEOUT__:: sentinel the REPL
+    // recognizes and renders as a Yes/No picker (auto-No at 60s). Returns true = keep
+    // waiting (disable the cap), false = stop. Only wired for interactive jobs (web never
+    // reaches here — it isn't passed as onTimeout).
+    const onAgentTimeout = async () => {
+      if (!isInteractiveTimeout || !jobId) return false;
+      const approvalId = `timeout-${Date.now()}`;
+      const mins = Math.round(timeoutMs / 60000);
+      const command = `__TIMEOUT__::The agent has run for ${mins} min (the time budget). Keep waiting?`;
+      try {
+        const r = await workerFetch(`/api/worker/jobs/${jobId}/approval-request`, {
+          method: "POST",
+          body: JSON.stringify({ id: approvalId, command }),
+        });
+        if (!r.ok) return false;
+      } catch {
+        return false;
+      }
+      // Poll for the user's Yes/No up to ~65s (the REPL auto-answers No at 60s).
+      const deadline = Date.now() + 65_000;
+      while (Date.now() < deadline) {
+        if (cancelAc.signal.aborted) return false;
+        await new Promise((r) => setTimeout(r, 1500));
+        try {
+          const r = await workerFetch(`/api/worker/jobs/${jobId}`);
+          if (r.ok) {
+            const j = await r.json().catch(() => ({}));
+            const dec = j?.approvalDecision;
+            if (dec && dec.id === approvalId) return dec.allow === true;
+          }
+        } catch {
+          /* transient poll error — keep trying */
+        }
+      }
+      return false; // no answer in time → treat as No (stop)
+    };
+
     try {
     await runProcessWithStreamingStdout(python, [scriptPath], input, timeoutMs, (event) => {
       if (event.type === "log" && typeof event.text === "string") {
@@ -2039,7 +2120,7 @@ async function runAgentChatJob(job) {
           enqueueText(event.text);
         }
       }
-    }, pdfEnv, cancelAc.signal);
+    }, pdfEnv, cancelAc.signal, isInteractiveTimeout ? onAgentTimeout : undefined);
     } finally {
       clearInterval(cancelPoll);
     }

package/gonext-repl.mjs

@@ -784,7 +784,21 @@ function onApprovalKey(key) {
 // Returns { allow, dontAsk } — dontAsk is only ever true for the max-step "don't ask
 // again this session" choice (the caller then stops sending the prompt).
 const MAXSTEP_PREFIX = "__MAXSTEP__::";
+const TIMEOUT_PREFIX = "__TIMEOUT__::";
 async function approvalPrompt(command) {
+  // Time-budget prompt (task #81): the agent hit its wall-clock budget. Ask whether to
+  // keep waiting; auto-answer No after 60s of no input so the run can't hang forever.
+  if (command.startsWith(TIMEOUT_PREFIX)) {
+    const label = command.slice(TIMEOUT_PREFIX.length);
+    if (!process.stdin.isTTY) return { allow: false, dontAsk: false };
+    process.stdout.write("\n" + yellow("⏳ " + label) + dim("  (no answer in 60s = stop)") + "\n");
+    const idx = await pickFromList(
+      ["Yes, keep waiting", "No, stop now"],
+      0,
+      { timeoutMs: 60000, timeoutIndex: 1 }
+    );
+    return { allow: idx === 0, dontAsk: false };
+  }
   const isMax = command.startsWith(MAXSTEP_PREFIX);
   if (isMax) {
     const label = command.slice(MAXSTEP_PREFIX.length);
@@ -857,7 +871,7 @@ function onListKey(key) {
     finishList(-1);
   }
 }
-function pickFromList(items, initialSel = 0) {
+function pickFromList(items, initialSel = 0, opts = {}) {
   return new Promise((resolve) => {
     if (!process.stdin.isTTY || items.length === 0) {
       resolve(-1);
@@ -868,6 +882,20 @@ function pickFromList(items, initialSel = 0) {
     listResolve = resolve;
     listPickerActive = true;
     drawList(false);
+    // Optional auto-resolve after opts.timeoutMs (task #81 time-budget prompt): if the
+    // user doesn't choose in time, finish with opts.timeoutIndex (default -1). Wrap
+    // listResolve so any real selection clears the timer.
+    if (opts && opts.timeoutMs > 0) {
+      const to = setTimeout(
+        () => finishList(opts.timeoutIndex ?? -1),
+        opts.timeoutMs
+      );
+      const orig = listResolve;
+      listResolve = (v) => {
+        clearTimeout(to);
+        orig(v);
+      };
+    }
   });
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tiens.nguyen/gonext-local-worker",
-  "version": "1.0.247",
+  "version": "1.0.249",
   "description": "Polls GoNext cloud API for async local LLM jobs and runs them against Ollama/OpenAI-compatible servers on this Mac",
   "type": "module",
   "license": "MIT",