@venturewild/workspace 0.1.0 → 0.1.1

package/server/src/daemon-supervisor.mjs

@@ -0,0 +1,216 @@
+// Lifecycle owner for the bmo-sync daemon.
+//
+// The daemon is bmo-sync's sync engine running as its own process (a browser
+// app can't embed the Rust library the way wild-terminal's Tauri build did).
+// It does ALL the syncing; wild-workspace only displays its status and tells
+// it what to pair. This module is the one extra responsibility wild-workspace
+// takes on: pressing the daemon's power button.
+//
+// Why wild-workspace owns the lifecycle: on a locked-down (enterprise-managed)
+// machine the daemon cannot register itself as an OS service — logon-triggered
+// scheduled tasks are blocked without admin. So the app the user actually runs
+// starts it instead.
+//
+// The daemon is spawned DETACHED + window-hidden: it keeps running (and so
+// keeps syncing) after wild-workspace — server and browser both — has closed,
+// and it never flashes a console window. It is deliberately NOT stopped when
+// the server stops. The one gap this leaves — sync paused between a reboot and
+// the next `wild-workspace` launch — is covered by bmo-sync's offline-resume.
+
+import { spawn } from 'node:child_process';
+import {
+  openSync,
+  closeSync,
+  mkdirSync,
+  readFileSync,
+  writeFileSync,
+  unlinkSync,
+} from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { resolveDaemonBinary } from './daemon-bin.mjs';
+
+const DEFAULT_HTTP_BASE = 'http://127.0.0.1:8320';
+
+export class DaemonSupervisor {
+  /**
+   * @param {object} [opts]
+   * @param {string} [opts.httpBase]   the daemon's local HTTP origin.
+   * @param {string} [opts.globalDir]  where the pid + log files live. A
+   *   machine-global dir (`~/.wild-workspace`) — the daemon is one per machine,
+   *   not one per workspace, so this is deliberately NOT the per-workspace
+   *   `.wild-workspace/` data dir.
+   * @param {Function} [opts.resolveBinary]  daemon-binary resolver (test seam).
+   * @param {Function} [opts.spawnImpl]      child_process.spawn (test seam).
+   * @param {Function} [opts.fetchImpl]      global fetch (test seam).
+   * @param {Function} [opts.killImpl]       process.kill (test seam).
+   * @param {NodeJS.ProcessEnv} [opts.env]
+   */
+  constructor({
+    httpBase = DEFAULT_HTTP_BASE,
+    globalDir = path.join(os.homedir(), '.wild-workspace'),
+    resolveBinary = resolveDaemonBinary,
+    spawnImpl = spawn,
+    fetchImpl = globalThis.fetch,
+    killImpl = (pid, sig) => process.kill(pid, sig),
+    env = process.env,
+    // b-ii: when the install is logged in (account.json present), these are
+    // injected into the daemon's spawn env so it opens the proxy link
+    // (`BMO_DAEMON_ACCOUNT_TOKEN`) against the right relay
+    // (`BMO_DAEMON_SERVER_URL`). Absent → daemon syncs only, no proxy link.
+    accountToken = null,
+    serverUrl = null,
+  } = {}) {
+    this.httpBase = httpBase.replace(/\/+$/, '');
+    this.globalDir = globalDir;
+    this.pidFile = path.join(globalDir, 'daemon.pid');
+    this.logFile = path.join(globalDir, 'daemon.log');
+    this.resolveBinary = resolveBinary;
+    this.spawnImpl = spawnImpl;
+    this.fetchImpl = fetchImpl;
+    this.killImpl = killImpl;
+    this.env = env;
+    this.accountToken = accountToken;
+    this.serverUrl = serverUrl;
+  }
+
+  /** Probe the daemon's /health endpoint. Never throws. */
+  async health() {
+    try {
+      const res = await this.fetchImpl(`${this.httpBase}/health`, {
+        signal: AbortSignal.timeout(2000),
+      });
+      return { running: !!res.ok };
+    } catch {
+      return { running: false };
+    }
+  }
+
+  /**
+   * Start the daemon unless it is already up. Idempotent and best-effort —
+   * the result is reported, never thrown.
+   * @returns {Promise<{started:boolean, alreadyRunning?:boolean, pid?:number,
+   *   error?:string}>}
+   */
+  async ensureRunning() {
+    if ((await this.health()).running) {
+      return { started: false, alreadyRunning: true };
+    }
+    return this.spawnDaemon();
+  }
+
+  /** Spawn the daemon detached + window-hidden, logging to `daemon.log`. */
+  spawnDaemon() {
+    const bin = this.resolveBinary({ env: this.env });
+    // `null` = an explicit override path that doesn't exist; `path` = nothing
+    // concrete found, only the bare name as a PATH last-resort. In neither case
+    // is there a real binary to launch — refuse rather than ENOENT later.
+    if (!bin || bin.source === 'path') {
+      return { started: false, error: 'daemon-binary-not-found' };
+    }
+
+    try {
+      mkdirSync(this.globalDir, { recursive: true });
+    } catch {
+      /* fall through — openSync below will surface a real problem */
+    }
+
+    // A real fd (not 'ignore') so the daemon's stdout/stderr land in a log the
+    // user can read — and so its eprintln writes hit a valid handle.
+    let logFd = 'ignore';
+    try {
+      logFd = openSync(this.logFile, 'a');
+    } catch {
+      /* can't open the log — run anyway with output discarded */
+    }
+
+    let child;
+    try {
+      child = this.spawnImpl(bin.path, [], {
+        detached: true, //      outlive the wild-workspace server
+        windowsHide: true, //   no console window — the whole point
+        stdio: ['ignore', logFd, logFd],
+        // b-ii proxy link: inject the account token + relay URL when the
+        // install is logged in. Object-spreading a falsy value is a no-op,
+        // so an unauthenticated install spawns with a clean inherited env.
+        env: {
+          ...this.env,
+          ...(this.accountToken && { BMO_DAEMON_ACCOUNT_TOKEN: this.accountToken }),
+          ...(this.serverUrl && { BMO_DAEMON_SERVER_URL: this.serverUrl }),
+        },
+      });
+    } catch (err) {
+      if (typeof logFd === 'number') {
+        try { closeSync(logFd); } catch {}
+      }
+      return { started: false, error: String(err?.message || err) };
+    }
+
+    // The parent must drop its own copy of the log fd + its handle on the
+    // child, or the server process can't exit cleanly.
+    if (typeof logFd === 'number') {
+      try { closeSync(logFd); } catch {}
+    }
+    child.unref();
+
+    try {
+      writeFileSync(this.pidFile, String(child.pid));
+    } catch {
+      /* pid file is best-effort — `stop` falls back to a health probe */
+    }
+    return { started: true, pid: child.pid, binary: bin.path, source: bin.source };
+  }
+
+  /** The pid recorded by the last spawn, or null. */
+  readPid() {
+    try {
+      const pid = Number(readFileSync(this.pidFile, 'utf8').trim());
+      return Number.isInteger(pid) && pid > 0 ? pid : null;
+    } catch {
+      return null;
+    }
+  }
+
+  /** Stop the daemon (best-effort) by signalling the recorded pid. */
+  async stop() {
+    const pid = this.readPid();
+    if (!pid) {
+      const running = (await this.health()).running;
+      return { stopped: false, reason: running ? 'no-pid-file' : 'not-running' };
+    }
+    try {
+      this.killImpl(pid, 'SIGTERM');
+    } catch (err) {
+      if (err?.code === 'ESRCH') {
+        // already gone — tidy the stale pid file
+        try { unlinkSync(this.pidFile); } catch {}
+        return { stopped: false, reason: 'not-running' };
+      }
+      return { stopped: false, reason: String(err?.message || err) };
+    }
+    try { unlinkSync(this.pidFile); } catch {}
+    return { stopped: true, pid };
+  }
+
+  /** Combined status for `wild-workspace daemon status`. */
+  async status() {
+    const { running } = await this.health();
+    return {
+      running,
+      pid: this.readPid(),
+      httpBase: this.httpBase,
+      pidFile: this.pidFile,
+      logFile: this.logFile,
+    };
+  }
+
+  /** Poll /health until the daemon answers or the deadline passes. */
+  async waitForHealthy(timeoutMs = 4000) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+      if ((await this.health()).running) return true;
+      await new Promise((r) => setTimeout(r, 250));
+    }
+    return false;
+  }
+}

package/server/src/daemon.mjs

@@ -147,6 +147,12 @@ export class DaemonBridge {
         path: msg.path,
         resolution: msg.resolution,
         conflictingUser: msg.conflictingUser,
+        // C12-e enrichment — present for daemon-detected conflicts only.
+        mineSha256: msg.mineSha256,
+        theirsSha256: msg.theirsSha256,
+        baseSha256: msg.baseSha256,
+        peerBackOfficePath: msg.peerBackOfficePath,
+        detectedAt: msg.detectedAt,
       });
     } else if (msg.kind === 'fatal') {
       this.activityBus.publish({

package/server/src/error-reporter.mjs

@@ -0,0 +1,86 @@
+// Forwards meaningful errors (agent crashes, daemon exits, etc.) to the
+// central bmo-sync-server so support can see what went wrong on a client's
+// machine. Fire-and-forget — never blocks the user's request, never throws.
+//
+// Off-switch: WILD_WORKSPACE_NO_TELEMETRY=1 disables the reporter entirely.
+// Privacy: only error messages + stack traces are sent — no file contents, no
+// chat content, no file paths beyond their basename.
+
+import os from 'node:os';
+import path from 'node:path';
+import { APP_VERSION } from './config.mjs';
+
+// In-process burst guard so a thrashing daemon can't hammer the central
+// server. Per-(workspace+category) bucket, 10 reports per 60s window.
+const RL_WINDOW_MS = 60_000;
+const RL_CAP = 10;
+const buckets = new Map();
+
+function bucketKey(workspaceId, category) {
+  return `${workspaceId}:${category}`;
+}
+
+function allow(workspaceId, category) {
+  const now = Date.now();
+  const key = bucketKey(workspaceId, category);
+  const ts = buckets.get(key) || [];
+  const recent = ts.filter((t) => now - t < RL_WINDOW_MS);
+  if (recent.length >= RL_CAP) {
+    buckets.set(key, recent);
+    return false;
+  }
+  recent.push(now);
+  buckets.set(key, recent);
+  return true;
+}
+
+// Redact absolute paths down to a basename so we don't leak the user's home
+// directory or file layout to the central server. Picks up POSIX + Windows
+// paths in free text (messages and stack traces).
+const PATH_RE = /([A-Za-z]:\\[\w.\-\\\/]+|\/[\w.\-\/]+\.\w+)/g;
+function redactPaths(text) {
+  if (typeof text !== 'string') return text;
+  return text.replace(PATH_RE, (full) => path.basename(full));
+}
+
+export class ErrorReporter {
+  constructor({ bmoSyncUrl, workspaceId, enabled }) {
+    this.bmoSyncUrl = bmoSyncUrl?.replace(/\/$/, '') || null;
+    this.workspaceId = workspaceId || 'unknown';
+    this.enabled = enabled !== false && !this.bmoSyncUrl?.startsWith('http://127');
+  }
+
+  // Fire-and-forget. Catches every failure path so calling this never breaks
+  // the request that triggered it.
+  report({ category, message, stack, agentLabel, source }) {
+    if (!this.enabled || !this.bmoSyncUrl) return;
+    const cat = (category || 'agent').slice(0, 32);
+    if (!message) return;
+    if (!allow(this.workspaceId, cat)) return;
+    const body = {
+      workspace_id: this.workspaceId,
+      agent_label: agentLabel || null,
+      category: cat,
+      message: redactPaths(String(message)).slice(0, 4096),
+      stack: stack ? redactPaths(String(stack)).slice(0, 8192) : null,
+      app_version: APP_VERSION,
+      os: `${os.platform()}-${os.arch()}`,
+      source: source || 'wild-workspace',
+      ts: Math.floor(Date.now() / 1000),
+    };
+    const url = `${this.bmoSyncUrl}/api/errors/report`;
+    // Detached fetch with a short timeout so a hung server can't pile up.
+    const ctrl = new AbortController();
+    const timer = setTimeout(() => ctrl.abort(), 5000);
+    fetch(url, {
+      method: 'POST',
+      headers: { 'content-type': 'application/json' },
+      body: JSON.stringify(body),
+      signal: ctrl.signal,
+    })
+      .catch(() => {
+        /* swallowed — telemetry never breaks the user's path */
+      })
+      .finally(() => clearTimeout(timer));
+  }
+}

package/server/src/inbox.mjs

@@ -1,81 +1,86 @@
-// Component System inbox surfacing.
-// When `.wild/inbox.md` exists or changes, emit notifications.
-// Drives the "I noticed you imported X — want me to walk integration?" cue in chat.
-
-import fs from 'node:fs/promises';
-import { existsSync } from 'node:fs';
-import path from 'node:path';
-import chokidar from 'chokidar';
-import { EventEmitter } from 'node:events';
-
-export class InboxWatcher extends EventEmitter {
-  constructor(workspaceDir) {
-    super();
-    this.workspaceDir = workspaceDir;
-    this.inboxPath = path.join(workspaceDir, '.wild', 'inbox.md');
-    this.installedPath = path.join(workspaceDir, '.wild', 'installed.json');
-    this.watcher = null;
-  }
-
-  start() {
-    this.watcher = chokidar.watch(
-      [this.inboxPath, this.installedPath, path.join(this.workspaceDir, '.wild', 'imports')],
-      {
-        ignoreInitial: false,
-        persistent: true,
-        depth: 3,
-        awaitWriteFinish: { stabilityThreshold: 200, pollInterval: 100 },
-      },
-    );
-    this.watcher.on('add', () => this._refresh('add'));
-    this.watcher.on('change', () => this._refresh('change'));
-    this.watcher.on('unlink', () => this._refresh('unlink'));
-    return this;
-  }
-
-  async _refresh(kind) {
-    const snapshot = await this.snapshot();
-    this.emit('change', { kind, snapshot });
-  }
-
-  async snapshot() {
-    const out = {
-      hasInbox: existsSync(this.inboxPath),
-      inboxContent: '',
-      installed: {},
-      imports: [],
-    };
-    if (out.hasInbox) {
-      try {
-        out.inboxContent = await fs.readFile(this.inboxPath, 'utf8');
-      } catch {
-        out.inboxContent = '';
-      }
-    }
-    if (existsSync(this.installedPath)) {
-      try {
-        const raw = await fs.readFile(this.installedPath, 'utf8');
-        out.installed = JSON.parse(raw);
-      } catch {
-        out.installed = {};
-      }
-    }
-    const importsDir = path.join(this.workspaceDir, '.wild', 'imports');
-    if (existsSync(importsDir)) {
-      try {
-        const entries = await fs.readdir(importsDir, { withFileTypes: true });
-        out.imports = entries
-          .filter((e) => e.isDirectory())
-          .map((e) => e.name);
-      } catch {
-        out.imports = [];
-      }
-    }
-    return out;
-  }
-
-  stop() {
-    if (this.watcher) this.watcher.close();
-    this.watcher = null;
-  }
-}
+// Component System inbox surfacing.
+// When `.wild/inbox.md` exists or changes, emit notifications.
+// Drives the "I noticed you imported X — want me to walk integration?" cue in chat.
+
+import fs from 'node:fs/promises';
+import { existsSync } from 'node:fs';
+import path from 'node:path';
+import chokidar from 'chokidar';
+import { EventEmitter } from 'node:events';
+
+export class InboxWatcher extends EventEmitter {
+  constructor(workspaceDir) {
+    super();
+    this.workspaceDir = workspaceDir;
+    this.inboxPath = path.join(workspaceDir, '.wild', 'inbox.md');
+    this.installedPath = path.join(workspaceDir, '.wild', 'installed.json');
+    this.watcher = null;
+    // Resolves once the watcher's initial scan is done — see start().
+    this.ready = Promise.resolve();
+  }
+
+  start() {
+    this.watcher = chokidar.watch(
+      [this.inboxPath, this.installedPath, path.join(this.workspaceDir, '.wild', 'imports')],
+      {
+        ignoreInitial: false,
+        persistent: true,
+        depth: 3,
+        awaitWriteFinish: { stabilityThreshold: 200, pollInterval: 100 },
+      },
+    );
+    this.watcher.on('add', () => this._refresh('add'));
+    this.watcher.on('change', () => this._refresh('change'));
+    this.watcher.on('unlink', () => this._refresh('unlink'));
+    // Resolves once chokidar's initial scan completes and it is actively
+    // watching — anything created after this point is reliably detected.
+    this.ready = new Promise((resolve) => this.watcher.once('ready', resolve));
+    return this;
+  }
+
+  async _refresh(kind) {
+    const snapshot = await this.snapshot();
+    this.emit('change', { kind, snapshot });
+  }
+
+  async snapshot() {
+    const out = {
+      hasInbox: existsSync(this.inboxPath),
+      inboxContent: '',
+      installed: {},
+      imports: [],
+    };
+    if (out.hasInbox) {
+      try {
+        out.inboxContent = await fs.readFile(this.inboxPath, 'utf8');
+      } catch {
+        out.inboxContent = '';
+      }
+    }
+    if (existsSync(this.installedPath)) {
+      try {
+        const raw = await fs.readFile(this.installedPath, 'utf8');
+        out.installed = JSON.parse(raw);
+      } catch {
+        out.installed = {};
+      }
+    }
+    const importsDir = path.join(this.workspaceDir, '.wild', 'imports');
+    if (existsSync(importsDir)) {
+      try {
+        const entries = await fs.readdir(importsDir, { withFileTypes: true });
+        out.imports = entries
+          .filter((e) => e.isDirectory())
+          .map((e) => e.name);
+      } catch {
+        out.imports = [];
+      }
+    }
+    return out;
+  }
+
+  stop() {
+    if (this.watcher) this.watcher.close();
+    this.watcher = null;
+  }
+}