@whittlelabs/sifter 0.19.0 → 0.20.0

package/bin.js

@@ -3158,7 +3158,6 @@ var require_device_code = __commonJS({
         const device = await startDeviceCode({
           keepApiUrl: reg.keepApiUrl,
           oauthClientId: reg.oauthClientId,
-          scopes: reg.scopes,
           fetcher,
           brand: opts.brand
         });
@@ -3241,8 +3240,7 @@ var require_device_code = __commonJS({
         method: "POST",
         headers: { "Content-Type": "application/json" },
         body: JSON.stringify({
-          client_id: opts.oauthClientId,
-          scope: opts.scopes.join(" ")
+          client_id: opts.oauthClientId
         })
       });
       (0, version_check_1.checkResponseMinVersion)({
@@ -15641,26 +15639,38 @@ var require_subscribe = __commonJS({
           return;
         }
         const controller = new AbortController();
-        let deadlineTimer = null;
-        if (dispatch.deadline) {
-          const ms = new Date(dispatch.deadline).getTime() - Date.now() - 3e4;
+        let quietTimer = null;
+        const quietWindowMs = dispatch.deadline ? new Date(dispatch.deadline).getTime() - Date.now() : null;
+        const armQuietTimer = () => {
+          if (quietWindowMs === null)
+            return;
+          if (quietTimer !== null)
+            clearTimeout(quietTimer);
+          const ms = quietWindowMs - 3e4;
           if (ms > 0) {
-            deadlineTimer = setTimeout(() => controller.abort(), ms);
+            quietTimer = setTimeout(() => controller.abort(), ms);
           } else {
             controller.abort();
           }
-        }
+        };
+        armQuietTimer();
+        const activity = {
+          record: () => {
+            if (!controller.signal.aborted)
+              armQuietTimer();
+          }
+        };
         let result;
         try {
-          result = await opts.onJob(dispatch, controller.signal);
+          result = await opts.onJob(dispatch, controller.signal, activity);
         } catch (err) {
           result = {
             status: "failed",
             reason: `onJob threw: ${err instanceof Error ? err.message : String(err)}`
           };
         } finally {
-          if (deadlineTimer !== null)
-            clearTimeout(deadlineTimer);
+          if (quietTimer !== null)
+            clearTimeout(quietTimer);
         }
         try {
           for (const output of result.outputs ?? []) {
@@ -18569,7 +18579,7 @@ var require_client2 = __commonJS({
       /**
        * Mint a short-lived `act_` token for an end user, with this client's
        * service identity recorded as the conduit. Requires this client to be
-       * constructed with a service token holding `keep:actor-tokens:mint`.
+       * constructed with a service token holding `keep:actor-tokens:write`.
        */
       async mintActorToken(actor) {
         return this.request("POST", "/api/actor-tokens", { actor });
@@ -18691,7 +18701,7 @@ var require_client2 = __commonJS({
       /**
        * Reveal a hosted-Sifter customer's plaintext Anthropic API key for
        * one dispatch. Service-token only; requires the
-       * `keep:managed-sifter-keys:reveal` scope, granted only to the
+       * `keep:managed-sifter-key-material:read` scope, granted only to the
        * `whittle-hosted-sifter` service identity.
        *
        * Callers must use the returned key for a single Anthropic request
@@ -18706,9 +18716,9 @@ var require_client2 = __commonJS({
        * Read a user's hosted-Sifter opt-in status. Returns `{enabled:
        * false}` for users who never opted in (no row) and users who
        * opted in then disabled. Service-to-service only; requires the
-       * `keep:managed-sifter-keys:read-status` scope, which is distinct
-       * from `:reveal` so a service identity can hold one without the
-       * other.
+       * `keep:managed-sifter-enrollments:read` scope, which is distinct
+       * from `keep:managed-sifter-key-material:read` so a service identity
+       * can hold one without the other.
        */
       async getManagedSifterStatus(userId) {
         return this.request("GET", `/api/users/${encodeURIComponent(userId)}/managed-sifter-status`);
@@ -20980,7 +20990,6 @@ var require_defaults2 = __commonJS({
         oauthClientId: "shuttle-dev",
         orgSlug: "whittle-labs",
         roleSlug: "shuttle-dev",
-        scopes: ["jobs:subscribe", "jobs:submit"],
         serviceIdentityDisplayName: "{user}'s Shuttle on {hostname}"
       },
       defaultCaps: {
@@ -21270,7 +21279,7 @@ var require_shuttle = __commonJS({
             error: err instanceof Error ? err.message : String(err)
           });
         };
-        const onJob = async (dispatch, signal) => {
+        const onJob = async (dispatch, signal, activity) => {
           const jobId = dispatch.job.id;
           const attendanceId = dispatch.attendanceId;
           const startedAt = Date.now();
@@ -21308,7 +21317,7 @@ var require_shuttle = __commonJS({
           const dispatchStartedAt = Date.now();
           const executionCtx = {
             reportProgress: (channel, frames) => {
-              void jobsClient.postProgress(jobId, { channel, frames }).catch(() => {
+              void jobsClient.postProgress(jobId, { channel, frames }).then(() => activity.record()).catch(() => {
               });
             }
           };
@@ -21998,7 +22007,7 @@ var import_path = require("path");
 var import_promises = require("fs/promises");
 var import_yaml = __toESM(require_dist());
 var import_shuttle = __toESM(require_dist5());
-var buildVersion = true ? "0.19.0" : pkg.version;
+var buildVersion = true ? "0.20.0" : pkg.version;
 var sifterBrand = {
   product: {
     id: "sifter",
@@ -22036,7 +22045,6 @@ var sifterBrand = {
     oauthClientId: process.env.SIFTER_OAUTH_CLIENT_ID ?? "sifter",
     orgSlug: "whittle-labs",
     roleSlug: "sift-sifter",
-    scopes: ["jobs:subscribe", "jobs:submit"],
     serviceIdentityDisplayName: "{user}'s Sifter on {hostname}"
   },
   defaultCaps: {