@volter/teams 0.2.10 → 0.2.12

package/server/events.mjs

@@ -15,3 +15,23 @@ export function sseRoom(res,bytes,{cap=SSE_BACKLOG_BYTES,patienceMs=SSE_PATIENCE
     res.on('drain',drained);res.on('close',ended);
   });
 }
+// Open event streams are counted per team install: a credential on one machine (a machine credential's own machine, or
+// the enrolled machine of this team its request names in X-Supercode-Machine), else the credential with no machine.
+// An install's connector holds one published-events stream that its local readers share (dispatchers, agents, apps on
+// that machine read through its door), and its people open a few viewers beside it (session follows, a catalogue
+// watch): one stream, one more while a dropped one is still being noticed, about five viewers, and headroom makes 10.
+// A credential's streams over all its machines stop at 40, so a leaked token cannot hold the server's connections.
+export const STREAMS_PER_INSTALL=10, STREAMS_PER_CREDENTIAL=40;
+// A slot frees only when another stream of the install closes; a refused reader asks again no sooner than this.
+export const STREAM_RETRY_SECONDS=30;
+/** Count one open stream for `auth`'s install, refusing past the limits; resolves the release (idempotent). */
+export async function holdStream(api,auth,req){
+  const named=String(req.headers['x-supercode-machine']??'');
+  let machine=auth.kind==='machine'?auth.machine_id:'';
+  if(!machine&&/^mach_[A-Za-z0-9_-]{1,64}$/.test(named)&&await api.store.one('SELECT 1 FROM machines WHERE team_id=? AND id=? AND revoked_at IS NULL',[auth.team_id,named]))machine=named;
+  const keys=[`install:${auth.credential_id}\0${machine}`,`credential:${auth.credential_id}`],limits=[STREAMS_PER_INSTALL,STREAMS_PER_CREDENTIAL];
+  if(keys.some((key,at)=>(api.openStreams.get(key)??0)>=limits[at]))throw Object.assign(new Error(`too many open event streams for this ${machine?'machine':'credential'}`),{status:429,code:'rate_limited',details:{retry_after_seconds:STREAM_RETRY_SECONDS,streams_per_install:STREAMS_PER_INSTALL,machine:machine||null}});
+  for(const key of keys)api.openStreams.set(key,(api.openStreams.get(key)??0)+1);
+  let held=true;
+  return ()=>{if(!held)return;held=false;for(const key of keys){const next=(api.openStreams.get(key)??1)-1;if(next>0)api.openStreams.set(key,next);else api.openStreams.delete(key);}};
+}

package/server/machine-events.mjs

@@ -1,5 +1,5 @@
 // A retained machine transition log for Teams mailbox subscriptions.
-import { writeSse } from './events.mjs';
+import { writeSse, holdStream } from './events.mjs';
 
 export function machineTransition(api, team, machine, linked) {
   // Serialize the read/change/event across asynchronous store calls. A replaced
@@ -37,11 +37,9 @@ export async function reconcileMachinePresence(api) {
 export async function machineEventStream({api,req,res,auth,url,requestId,fail}) {
   const after = url.searchParams.get('after') ?? req.headers['last-event-id'];
   if (after != null && (!/^\d+$/.test(after) || !Number.isSafeInteger(Number(after)))) fail(400,'invalid_request','after must be a machine event cursor');
-  const count = api.openStreams.get(auth.credential_id) ?? 0;
-  if (count >= 10) fail(429,'rate_limited','too many open streams');
-  api.openStreams.set(auth.credential_id,count+1);
+  const release = await holdStream(api,auth,req);
   let closed=false, cursor=after==null?null:Number(after), work=Promise.resolve();
-  const close=()=>{ if(closed)return;closed=true;clearInterval(timer);unsubscribe();req.off('close',close);api.events.off('shutdown',close);api.openStreams.set(auth.credential_id,Math.max(0,(api.openStreams.get(auth.credential_id)??1)-1));res.end(); };
+  const close=()=>{ if(closed)return;closed=true;clearInterval(timer);unsubscribe();req.off('close',close);api.events.off('shutdown',close);release();res.end(); };
   const write=event=>{if(closed)return;if(res.writableLength>1024*1024){close();return;}writeSse(res,event);};
   const drain=async()=>{
     if(closed)return;

package/server/published-events.mjs

@@ -3,7 +3,7 @@ import { appAuthentication } from './apps.mjs';
 import { isAdmin } from './auth.mjs';
 import { exact } from './request-json.mjs';
 import { canonicalJson } from './wire.mjs';
-import { sseRoom, writeSse } from './events.mjs';
+import { sseRoom, writeSse, holdStream } from './events.mjs';
 import { APP_EVENTS, PUBLISHABLE_EVENTS, eventReadAction } from './event-catalogue.mjs';
 import { EVENT_DATA_LIMIT } from '../event-limits.mjs';
 
@@ -159,10 +159,9 @@ async function eventStream({api,req,res,auth,url,requestId}){
   if([...url.searchParams.keys()].some(key=>!['after','source','kinds'].includes(key))||query.kinds?.some(kind=>!APP_EVENTS.includes(kind)))fail(400,'invalid_request','invalid event subscription');
   auth=await liveAuth(api,auth);let codec=cursorCodec(api,auth,query);
   const after=url.searchParams.get('after')??req.headers['last-event-id'];let cursor=after==null?null:codec.decode(after);
-  const count=api.openStreams.get(auth.credential_id)??0;if(count>=10)fail(429,'rate_limited','too many event subscriptions');
-  api.openStreams.set(auth.credential_id,count+1);
+  const release=await holdStream(api,auth,req);
   let closed=false,running=null,dirty=false;
-  const close=()=>{if(closed)return;closed=true;clearInterval(timer);unsubscribe();req.off('close',close);api.events.off('shutdown',close);api.openStreams.set(auth.credential_id,Math.max(0,(api.openStreams.get(auth.credential_id)??1)-1));res.end();};
+  const close=()=>{if(closed)return;closed=true;clearInterval(timer);unsubscribe();req.off('close',close);api.events.off('shutdown',close);release();res.end();};
   const terminal=(type,reason)=>{if(!closed)writeSse(res,{type,reason,terminal:true});close();};
   const write=async event=>{if(closed)return false;const room=await sseRoom(res,Buffer.byteLength(JSON.stringify(event)));if(closed||room==='closed')return false;if(room==='slow'){terminal('resync_required','slow_reader');return false;}writeSse(res,event);return true;};
   const readable=async event=>{

package/session-follow.mjs

@@ -163,6 +163,16 @@ const automationImage = seed => `https://brand.volter.ai/bot/svg?seed=${encodeUR
  * may draw its own faces; `personImage`/`agentImage` choose the default pictures. One author's run within five minutes
  * is `continued`, and each entry has a short local `timeLabel`.
  */
+/**
+ * A Room member's words, without the envelope Teams types ahead of them into the session ('[Room "<name>" ("room_…");
+ * sender "<name>" ("prn_…")] ' then the words). Only that exact quote is taken off, and only when the sender it names is
+ * the principal recorded as typing the turn; any other text, a forged or quoted envelope included, is shown as typed.
+ */
+function roomWords(text, principal) {
+  const m = /^\s*\[Room "(?:[^"\\]|\\.)*" \("room_[A-Za-z0-9]+"\); sender "(?:[^"\\]|\\.)*" \("(prn_[A-Za-z0-9]+)"\)\]\s*/.exec(String(text ?? ''));
+  return m && principal && m[1] === principal ? String(text).slice(m[0].length) : text;
+}
+
 export function withPeople(transcript, messages, { agentName = null, sessionId = '', personImage: person = personImage, agentImage: agent = agentImage, locale = [] } = {}) {
   const byTime = new Map();
   for (const message of messages) {
@@ -204,7 +214,8 @@ export function withPeople(transcript, messages, { agentName = null, sessionId =
     const seed = name ? (metadata.source_principal_id || name) : '';
     const via = typeof metadata.source_via === 'string' ? metadata.source_via.trim() : '';
     const source = ({ room: 'Room', app: 'App', terminal: 'Terminal', api: 'API' })[via] || via || 'Session';
-    return { ...entry, actor: { ...(seed ? { id: seed } : {}), name: name ?? 'Anonymous', anonymous: !name, source, image: person(seed), kind: 'person' } };
+    const text = via === 'room' ? roomWords(entry.text, metadata.source_principal_id) : entry.text;
+    return { ...entry, text, actor: { ...(seed ? { id: seed } : {}), name: name ?? 'Anonymous', anonymous: !name, source, image: person(seed), kind: 'person' } };
   });
   let last = null;
   return people.map((entry) => {

package/viewer/session-view.css

@@ -669,6 +669,8 @@
   .scui-configuration-value-input { flex:1; min-width:calc(120px * var(--scui-scaling)); width:100%; }
   .scui-configuration-button { padding:calc(5px * var(--scui-scaling)) calc(12px * var(--scui-scaling)); }
   .scui-configuration-alert { color:var(--scui-danger,var(--scui-fg)); }
+  .scui-configuration-proposed { color:var(--scui-muted,var(--scui-fg)); }
+  .scui-configuration-proposed-link { color:var(--scui-accent,currentColor); }
   .scui-configuration-details { margin-top:calc(20px * var(--scui-scaling)); color:var(--scui-muted); }
   .scui-configuration-summary { cursor:pointer; }
   .scui-configuration-input { box-sizing:border-box; min-width:0; max-width:100%; padding:calc(7px * var(--scui-scaling)) calc(9px * var(--scui-scaling)); }
@@ -704,6 +706,43 @@
   .scui-settings-text { margin:0 }
   .scui-settings-footer { display:flex; gap:calc(6px * var(--scui-scaling)); justify-content:flex-end; margin-top:auto; padding:calc(8px * var(--scui-scaling)); border-top:1px solid var(--scui-border); background:var(--scui-bg-raised) }
   .scui-settings-action { padding:calc(6px * var(--scui-scaling)) calc(9px * var(--scui-scaling)); border-radius:var(--scui-button-radius, var(--scui-radius-md)) }
+  .scui-setup-jobs { display:grid; gap:6px; margin:0 0 8px; padding:0; list-style:none; }
+  .scui-timeline { display:grid; gap:8px; min-width:0; font-size:12.5px; }
+  .scui-timeline-header { display:flex; gap:4px; align-items:center; }
+  .scui-timeline-button { min-width:28px; padding:2px 8px; }
+  .scui-timeline-grid { position:relative; display:grid; gap:2px; min-width:0; }
+  .scui-timeline-axis { position:relative; height:18px; margin-left:var(--scui-timeline-label-width,180px); border-bottom:1px solid var(--scui-border); }
+  .scui-timeline-tick { position:absolute; transform:translateX(-50%); color:var(--scui-muted); font-size:11px; white-space:nowrap; }
+  .scui-timeline-lane { display:grid; grid-template-columns:var(--scui-timeline-label-width,180px) 1fr; align-items:center; min-height:24px; }
+  .scui-timeline-lane-label { overflow:hidden; padding-right:8px; color:var(--scui-fg); text-overflow:ellipsis; white-space:nowrap; }
+  .scui-timeline-track { position:relative; height:20px; border-radius:4px; background:var(--scui-bg-raised); }
+  .scui-timeline-block { position:absolute; top:2px; height:16px; min-width:2px; overflow:hidden; padding:0 4px; border:0; border-radius:3px; background:var(--scui-accent); color:var(--scui-bg); font-size:11px; text-align:left; white-space:nowrap; }
+  .scui-timeline-block[data-kind="forecast"] { border:1px dashed var(--scui-accent); background:transparent; color:var(--scui-fg); }
+  .scui-timeline-block[data-kind="due"] { width:3px !important; padding:0; background:var(--scui-danger); }
+  .scui-timeline-block[data-kind="failed"] { background:var(--scui-danger); }
+  .scui-timeline-block[data-kind="cancelled"] { background:var(--scui-muted); }
+  .scui-timeline-block[data-kind="waiting"] { background:var(--scui-warning); }
+  .scui-timeline-block[data-kind="idle"] { background:var(--scui-fill); color:var(--scui-fg); }
+  .scui-timeline-block-label { pointer-events:none; }
+  .scui-timeline-overlay { position:absolute; inset:18px 0 0 var(--scui-timeline-label-width,180px); width:calc(100% - var(--scui-timeline-label-width,180px)); height:calc(100% - 18px); overflow:visible; pointer-events:none; }
+  .scui-timeline-arrow { fill:none; stroke:var(--scui-muted); stroke-width:1.2; }
+  .scui-timeline-now { stroke:var(--scui-danger); stroke-width:1; }
+  .scui-timeline-series { display:grid; grid-template-columns:var(--scui-timeline-label-width,180px) 1fr; align-items:center; height:48px; }
+  .scui-timeline-series-chart { width:100%; height:44px; }
+  .scui-timeline-series-line { fill:none; stroke:var(--scui-accent); stroke-width:1.5; }
+  .scui-calendar { display:grid; gap:8px; font-size:12.5px; }
+  .scui-calendar-header { display:flex; gap:8px; align-items:center; }
+  .scui-calendar-title { min-width:140px; text-align:center; }
+  .scui-calendar-grid { display:grid; grid-template-columns:repeat(7,minmax(0,1fr)); gap:2px; margin:0; padding:0; list-style:none; }
+  .scui-calendar-day { display:grid; align-content:start; gap:2px; min-height:84px; padding:4px; border-radius:4px; background:var(--scui-bg-raised); }
+  .scui-calendar-day[data-outside="true"] { opacity:.45; }
+  .scui-calendar-day[data-today="true"] { outline:1px solid var(--scui-accent); }
+  .scui-calendar-date { color:var(--scui-muted); font-size:11px; }
+  .scui-calendar-entry { overflow:hidden; padding:1px 4px; border:0; border-radius:3px; background:var(--scui-accent); color:var(--scui-bg); font-size:11px; text-align:left; text-overflow:ellipsis; white-space:nowrap; }
+  .scui-calendar-entry[data-kind="deadline"] { background:var(--scui-danger); }
+  .scui-calendar-entry[data-kind="window"] { background:var(--scui-warning); }
+  .scui-calendar-entry[data-kind="job"] { background:var(--scui-fill); color:var(--scui-fg); }
+  .scui-calendar-empty { margin:0; color:var(--scui-muted); }
 }
 @layer scui.components {
   /* Team view: sessions, machines, pane access and a pane's terminal over a Teams server. */