agent-relay-server 0.15.1 → 0.17.0

package/docs/openapi.json

@@ -2,7 +2,7 @@
   "openapi": "3.1.0",
   "info": {
     "title": "Agent Relay API",
-    "version": "0.12.4",
+    "version": "0.16.0",
     "description": "Real-time message bus for inter-agent communication. Agent-first: this spec is designed for machine consumption — agents can self-discover the full API surface via GET /api/spec.",
     "license": {
       "name": "MIT",
@@ -5957,6 +5957,100 @@
         ]
       }
     },
+    "/api/workspace-config": {
+      "get": {
+        "operationId": "getWorkspaceConfigRoute",
+        "summary": "Get global workspace (isolated worktree) config",
+        "tags": [
+          "Other"
+        ],
+        "description": "Returns the global workspace provisioning config `{ symlinkPaths: string[] }` — untracked files/filename patterns symlinked from the main checkout into each isolated worktree (the dashboard \"Workspace\" spawn option). Defaults seed `AGENTS.md` and `.claude-rig`; merged over defaults until set.",
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {}
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "bearerAuth": []
+          },
+          {
+            "tokenHeader": []
+          },
+          {
+            "tokenQuery": []
+          }
+        ]
+      },
+      "put": {
+        "operationId": "putWorkspaceConfigRoute",
+        "summary": "Set global workspace (isolated worktree) config",
+        "tags": [
+          "Other"
+        ],
+        "description": "Updates the global workspace config. Body: `{ value: { symlinkPaths: [...] }, updatedBy? }`. Each entry is a relative path or glob pattern; plain names match files and directories, entries with `*?[]{}` are expanded against main. A path is only linked if it exists in main — missing entries are ignored at spawn time. Rejects absolute paths and `..` traversal (400). Versioned with full config history.",
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "value": {
+                    "type": "string"
+                  },
+                  "updatedBy": {
+                    "type": "string"
+                  }
+                }
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "Success",
+            "content": {
+              "application/json": {}
+            }
+          },
+          "400": {
+            "description": "Bad request",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/Error"
+                }
+              }
+            }
+          }
+        },
+        "security": [
+          {
+            "bearerAuth": []
+          },
+          {
+            "tokenHeader": []
+          },
+          {
+            "tokenQuery": []
+          }
+        ]
+      }
+    },
     "/api/insights/config": {
       "get": {
         "operationId": "getInsightsConfigRoute",
@@ -6143,6 +6237,9 @@
                   },
                   "source": {
                     "type": "string"
+                  },
+                  "occurredAt": {
+                    "type": "string"
                   }
                 }
               }
@@ -7217,6 +7314,9 @@
                   "maxAgeSeconds": {
                     "type": "string"
                   },
+                  "occurredAt": {
+                    "type": "string"
+                  },
                   "channel": {
                     "type": "string"
                   },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-relay-server",
-  "version": "0.15.1",
+  "version": "0.17.0",
   "description": "Lightweight HTTP message relay for inter-agent communication across machines",
   "module": "src/index.ts",
   "type": "module",
@@ -33,7 +33,7 @@
     "CONTRIBUTING.md"
   ],
   "dependencies": {
-    "agent-relay-sdk": "0.2.7"
+    "agent-relay-sdk": "0.2.8"
   },
   "scripts": {
     "prepack": "bun run build:dashboard:bundle >&2",

package/public/index.html

@@ -125641,6 +125641,9 @@ function chatTimestamp(iso) {
 		minute: "2-digit"
 	});
 }
+function messageEventTime(msg) {
+	return new Date(msg.occurredAt ?? msg.createdAt).getTime();
+}
 function dateSeparatorLabel(dateStr) {
 	const today = /* @__PURE__ */ new Date();
 	const [y, m, d] = dateStr.split("-").map(Number);
@@ -126444,7 +126447,7 @@ var MessageBubble = (0, import_react.memo)(function MessageBubble({ msg, peer, o
 	const pointerStartRef = (0, import_react.useRef)(null);
 	const suppressBubbleClickRef = (0, import_react.useRef)(false);
 	const body = messageBody(msg);
-	const time = chatTimestamp(msg.createdAt);
+	const time = chatTimestamp(msg.occurredAt ?? msg.createdAt);
 	const attachments = messageAttachments(msg);
 	const reactions = groupedReactions(msg);
 	const receipt = isOutbound ? outboundReceipt(msg, peer) : null;
@@ -126580,7 +126583,7 @@ function sessionActivityStep(msg) {
 		kind: s.type,
 		label: typeof s.label === "string" ? s.label : void 0,
 		text: msg.body,
-		ts: new Date(msg.createdAt).getTime(),
+		ts: messageEventTime(msg),
 		turnId: typeof s.turnId === "string" ? s.turnId : void 0
 	};
 }
@@ -126674,7 +126677,7 @@ function buildTimeline(messages, statusEvents, createdAt, importedHistory = [])
 			continue;
 		}
 		raw.push({
-			ts: new Date(msg.createdAt).getTime(),
+			ts: messageEventTime(msg),
 			entry: {
 				type: "message",
 				msg
@@ -153682,11 +153685,80 @@ function SettingsView() {
 					]
 				})]
 			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(WorkspaceSettings, {}),
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(StewardSettings, {}),
 			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(VoiceSettings, {})
 		]
 	});
 }
+var DEFAULT_WORKSPACE = { symlinkPaths: [] };
+function WorkspaceSettings() {
+	const [config, setConfig] = (0, import_react.useState)(DEFAULT_WORKSPACE);
+	const [status, setStatus] = (0, import_react.useState)("");
+	(0, import_react.useEffect)(() => {
+		api("GET", "/workspace-config").then((entry) => setConfig({
+			...DEFAULT_WORKSPACE,
+			...entry.value
+		})).catch((e) => setStatus(e.message));
+	}, []);
+	async function save() {
+		try {
+			const saved = await api("PUT", "/workspace-config", config);
+			setConfig({
+				...DEFAULT_WORKSPACE,
+				...saved.value
+			});
+			setStatus("Workspace config saved");
+		} catch (e) {
+			setStatus(e.message);
+		}
+	}
+	return /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("section", {
+		className: "space-y-3 rounded-lg border p-4",
+		children: [
+			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "flex items-center gap-2",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(FolderSymlink, { className: "w-4 h-4" }), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", { children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)("h2", {
+					className: "text-sm font-semibold",
+					children: "Isolated worktree symlinks"
+				}), /* @__PURE__ */ (0, import_jsx_runtime.jsxs)("p", {
+					className: "text-xs text-muted-foreground",
+					children: [
+						"Untracked files or filename patterns symlinked from main into each isolated worktree (the \"Workspace\" spawn option), one per line. Plain names like ",
+						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", { children: "AGENTS.md" }),
+						" or ",
+						/* @__PURE__ */ (0, import_jsx_runtime.jsx)("code", { children: ".claude-rig" }),
+						" match files and directories; entries with ",
+						/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("code", { children: ["*?[]", "{}"] }),
+						" are expanded as globs. A path is only linked if it exists in main."
+					]
+				})] })]
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Field, {
+				label: "Paths / patterns",
+				children: /* @__PURE__ */ (0, import_jsx_runtime.jsx)(Textarea, {
+					rows: 5,
+					placeholder: "AGENTS.md\n.claude-rig",
+					value: config.symlinkPaths.join("\n"),
+					onChange: (e) => setConfig({
+						...config,
+						symlinkPaths: lines(e.target.value)
+					})
+				})
+			}),
+			/* @__PURE__ */ (0, import_jsx_runtime.jsxs)("div", {
+				className: "flex items-center gap-2 pt-1",
+				children: [/* @__PURE__ */ (0, import_jsx_runtime.jsxs)(Button, {
+					onClick: save,
+					children: [/* @__PURE__ */ (0, import_jsx_runtime.jsx)(Save, { className: "w-4 h-4" }), "Save"]
+				}), status && /* @__PURE__ */ (0, import_jsx_runtime.jsx)("p", {
+					className: "text-sm text-muted-foreground",
+					children: status
+				})]
+			})
+		]
+	});
+}
 function VoiceSettings() {
 	const voiceInputMode = useRelayStore((s) => s.voiceInputMode);
 	const setVoiceInputMode = useRelayStore((s) => s.setVoiceInputMode);

package/src/automations.ts

@@ -12,7 +12,7 @@ import {
   ValidationError,
 } from "./db";
 import { createCommand } from "./commands-db";
-import { getAgentProfile, getSpawnPolicy } from "./config-store";
+import { getAgentProfile, getSpawnPolicy, workspaceSpawnParams } from "./config-store";
 import { resolveProviderSelection, type ProviderEffort } from "agent-relay-sdk/provider-catalog";
 import { runnerRuntimeTokenEnv } from "./runtime-tokens";
 import type {
@@ -284,7 +284,7 @@ export function createAutomation(input: CreateAutomationInput, now = Date.now())
   if (!getOrchestrator(normalized.orchestratorId)) throw new ValidationError(`orchestrator ${normalized.orchestratorId} not found`);
   const id = randomUUID();
   const nextRunAt = normalized.enabled ? nextScheduledAt(normalized.schedule, normalized.timezone, now) : undefined;
-  db().prepare(`
+  db().query(`
     INSERT INTO automations (id, kind, name, description, enabled, schedule, timezone, next_run_at, catch_up_policy, concurrency_policy, orchestrator_id, target_policy, task_template, created_at, updated_at)
     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
   `).run(
@@ -327,7 +327,7 @@ export function updateAutomation(id: string, input: UpdateAutomationInput, now =
   const normalized = normalizeCreateInput(next);
   if (!getOrchestrator(normalized.orchestratorId)) throw new ValidationError(`orchestrator ${normalized.orchestratorId} not found`);
   const nextRunAt = normalized.enabled ? nextScheduledAt(normalized.schedule, normalized.timezone, now) : undefined;
-  db().prepare(`
+  db().query(`
     UPDATE automations
     SET name = ?, description = ?, enabled = ?, schedule = ?, timezone = ?, next_run_at = ?,
         catch_up_policy = ?, concurrency_policy = ?, orchestrator_id = ?, target_policy = ?, task_template = ?, updated_at = ?
@@ -352,18 +352,18 @@ export function updateAutomation(id: string, input: UpdateAutomationInput, now =
 
 export function deleteAutomation(id: string): boolean {
   ensureAutomationTables();
-  return db().prepare("DELETE FROM automations WHERE id = ?").run(id).changes > 0;
+  return db().query("DELETE FROM automations WHERE id = ?").run(id).changes > 0;
 }
 
 export function getAutomation(id: string): Automation | null {
   ensureAutomationTables();
-  const row = db().prepare("SELECT * FROM automations WHERE id = ?").get(id) as any;
+  const row = db().query("SELECT * FROM automations WHERE id = ?").get(id) as any;
   return row ? rowToAutomation(row) : null;
 }
 
 export function listAutomations(): Automation[] {
   ensureAutomationTables();
-  return (db().prepare("SELECT * FROM automations ORDER BY enabled DESC, next_run_at IS NULL, next_run_at ASC, name COLLATE NOCASE").all() as any[])
+  return (db().query("SELECT * FROM automations ORDER BY enabled DESC, next_run_at IS NULL, next_run_at ASC, name COLLATE NOCASE").all() as any[])
     .map(rowToAutomation);
 }
 
@@ -381,20 +381,20 @@ export function listAutomationRuns(filter: { automationId?: string; status?: str
   }
   const where = clauses.length ? `WHERE ${clauses.join(" AND ")}` : "";
   params.push(filter.limit ?? 100);
-  return (db().prepare(`SELECT * FROM automation_runs ${where} ORDER BY created_at DESC LIMIT ?`).all(...params) as any[])
+  return (db().query(`SELECT * FROM automation_runs ${where} ORDER BY created_at DESC LIMIT ?`).all(...params) as any[])
     .map(rowToAutomationRun);
 }
 
 function getAutomationRun(id: string): AutomationRun | null {
   ensureAutomationTables();
-  const row = db().prepare("SELECT * FROM automation_runs WHERE id = ?").get(id) as any;
+  const row = db().query("SELECT * FROM automation_runs WHERE id = ?").get(id) as any;
   return row ? rowToAutomationRun(row) : null;
 }
 
 export function runDueAutomations(now = Date.now()): AutomationDispatchResult[] {
   ensureAutomationTables();
   const results = dispatchQueuedAutomationRuns(now);
-  const due = (db().prepare("SELECT * FROM automations WHERE enabled = 1 AND next_run_at IS NOT NULL AND next_run_at <= ? ORDER BY next_run_at ASC LIMIT 25").all(now) as any[])
+  const due = (db().query("SELECT * FROM automations WHERE enabled = 1 AND next_run_at IS NOT NULL AND next_run_at <= ? ORDER BY next_run_at ASC LIMIT 25").all(now) as any[])
     .map(rowToAutomation);
   for (const automation of due) {
     if (hasActiveRun(automation.id)) {
@@ -421,7 +421,7 @@ export function runAutomationNow(id: string, now = Date.now()): AutomationDispat
 
 export function reconcileAutomationRuns(now = Date.now()): AutomationReconcileResult[] {
   ensureAutomationTables();
-  const rows = db().prepare(`
+  const rows = db().query(`
     SELECT * FROM automation_runs
     WHERE status IN ('scheduled', 'dispatching', 'waiting_agent', 'running') AND task_id IS NOT NULL
     ORDER BY created_at ASC
@@ -559,6 +559,7 @@ function dispatchOnDemandAutomation(
       effort: selection.effort,
       profile: policy.profile,
       agentProfile,
+      ...workspaceSpawnParams(),
       cwd: policy.cwd || orchestrator.baseDir,
       workspaceMode: policy.workspaceMode ?? "inherit",
       label,
@@ -629,7 +630,7 @@ function createRunTask(
 
 function insertRun(automation: Automation, scheduledFor: number, now: number): AutomationRun {
   const id = randomUUID();
-  db().prepare(`
+  db().query(`
     INSERT INTO automation_runs (id, automation_id, status, scheduled_for, orchestrator_id, meta, created_at, updated_at)
     VALUES (?, ?, 'dispatching', ?, ?, '{}', ?, ?)
   `).run(id, automation.id, scheduledFor, automation.orchestratorId, now, now);
@@ -637,11 +638,11 @@ function insertRun(automation: Automation, scheduledFor: number, now: number): A
 }
 
 function enqueueAutomationRun(automation: Automation, scheduledFor: number, now: number): AutomationRun {
-  const existing = db().prepare("SELECT * FROM automation_runs WHERE automation_id = ? AND status = 'scheduled' AND scheduled_for = ?")
+  const existing = db().query("SELECT * FROM automation_runs WHERE automation_id = ? AND status = 'scheduled' AND scheduled_for = ?")
     .get(automation.id, scheduledFor) as any;
   if (existing) return rowToAutomationRun(existing);
   const id = randomUUID();
-  db().prepare(`
+  db().query(`
     INSERT INTO automation_runs (id, automation_id, status, scheduled_for, orchestrator_id, meta, created_at, updated_at)
     VALUES (?, ?, 'scheduled', ?, ?, '{}', ?, ?)
   `).run(id, automation.id, scheduledFor, automation.orchestratorId, now, now);
@@ -649,7 +650,7 @@ function enqueueAutomationRun(automation: Automation, scheduledFor: number, now:
 }
 
 function dispatchQueuedAutomationRuns(now: number): AutomationDispatchResult[] {
-  const queued = (db().prepare(`
+  const queued = (db().query(`
     SELECT r.* FROM automation_runs r
     JOIN automations a ON a.id = r.automation_id
     WHERE r.status = 'scheduled' AND a.enabled = 1
@@ -680,7 +681,7 @@ function updateRun(id: string, input: {
 }, now: number): void {
   const current = getAutomationRun(id);
   const meta = input.meta !== undefined ? input.meta : current?.meta;
-  db().prepare(`
+  db().query(`
     UPDATE automation_runs
     SET status = COALESCE(?, status),
         started_at = COALESCE(?, started_at),
@@ -715,20 +716,20 @@ function updateRun(id: string, input: {
 
 function hasActiveRun(automationId: string): boolean {
   const placeholders = [...BLOCKING_RUN_STATUSES].map(() => "?").join(",");
-  const row = db().prepare(`SELECT id FROM automation_runs WHERE automation_id = ? AND status IN (${placeholders}) LIMIT 1`)
+  const row = db().query(`SELECT id FROM automation_runs WHERE automation_id = ? AND status IN (${placeholders}) LIMIT 1`)
     .get(automationId, ...BLOCKING_RUN_STATUSES) as any;
   return Boolean(row);
 }
 
 function cancelActiveRuns(automationId: string, now: number, reason: string): void {
   const placeholders = [...OPEN_RUN_STATUSES].map(() => "?").join(",");
-  db().prepare(`UPDATE automation_runs SET status = 'canceled', finished_at = ?, error = ?, updated_at = ? WHERE automation_id = ? AND status IN (${placeholders})`)
+  db().query(`UPDATE automation_runs SET status = 'canceled', finished_at = ?, error = ?, updated_at = ? WHERE automation_id = ? AND status IN (${placeholders})`)
     .run(now, reason, now, automationId, ...OPEN_RUN_STATUSES);
 }
 
 function rescheduleAutomation(automation: Automation, now: number): void {
   const next = automation.enabled ? nextScheduledAt(automation.schedule, automation.timezone, now) : undefined;
-  db().prepare("UPDATE automations SET next_run_at = ?, updated_at = ? WHERE id = ?").run(next ?? null, now, automation.id);
+  db().query("UPDATE automations SET next_run_at = ?, updated_at = ? WHERE id = ?").run(next ?? null, now, automation.id);
 }
 
 function requireOnlineOrchestrator(orchestratorId: string): Orchestrator {

package/src/bus-outbox.ts

@@ -20,7 +20,7 @@ interface OutboxRow {
 
 export function appendEvent(type: string, source: string, data: unknown, subject?: string): number {
   const timestamp = Date.now();
-  const result = getDb().prepare(`
+  const result = getDb().query(`
     INSERT INTO bus_outbox (event_type, source, subject, data, timestamp)
     VALUES (?, ?, ?, ?, ?)
   `).run(type, source, subject ?? null, JSON.stringify(data ?? {}), timestamp);
@@ -28,7 +28,7 @@ export function appendEvent(type: string, source: string, data: unknown, subject
 }
 
 export function replayEvents(since: number, limit = 500): BusEvent[] {
-  const rows = getDb().prepare(`
+  const rows = getDb().query(`
     SELECT seq, event_type, source, subject, data, timestamp
     FROM bus_outbox
     WHERE seq > ?
@@ -40,17 +40,17 @@ export function replayEvents(since: number, limit = 500): BusEvent[] {
 
 export function pruneOutbox(retentionMs = 60 * 60 * 1000): number {
   const threshold = Date.now() - retentionMs;
-  const result = getDb().prepare("DELETE FROM bus_outbox WHERE timestamp < ?").run(threshold);
+  const result = getDb().query("DELETE FROM bus_outbox WHERE timestamp < ?").run(threshold);
   return result.changes;
 }
 
 export function getOutboxCursor(): number {
-  const row = getDb().prepare("SELECT coalesce(max(seq), 0) AS cursor FROM bus_outbox").get() as { cursor: number };
+  const row = getDb().query("SELECT coalesce(max(seq), 0) AS cursor FROM bus_outbox").get() as { cursor: number };
   return row.cursor;
 }
 
 export function getOldestOutboxCursor(): number {
-  const row = getDb().prepare("SELECT min(seq) AS cursor FROM bus_outbox").get() as { cursor: number | null };
+  const row = getDb().query("SELECT min(seq) AS cursor FROM bus_outbox").get() as { cursor: number | null };
   return row.cursor ?? 0;
 }
 

package/src/bus.ts

@@ -99,7 +99,7 @@ export function getBusConnectionCount(): number {
 export function expireStaleBusAgents(graceMs = Number(process.env.AGENT_RELAY_STALE_GRACE_MS) || 120_000): { agentIds: string[]; orphanedTasks: Task[] } {
   const cutoff = Date.now() - graceMs;
   const rows = getDb()
-    .prepare("SELECT id FROM agents WHERE status = 'stale' AND last_seen < ? AND id NOT IN ('user', 'system')")
+    .query("SELECT id FROM agents WHERE status = 'stale' AND last_seen < ? AND id NOT IN ('user', 'system')")
     .all(cutoff) as Array<{ id: string }>;
   const orphanedTasks: Task[] = [];
   for (const row of rows) {

package/src/commands-db.ts

@@ -41,7 +41,7 @@ export function createCommand(input: CreateCommandInput): Command {
     updatedAt: now,
     expiresAt: input.ttlMs ? now + input.ttlMs : defaultExpiresAt(input.type, now),
   };
-  getDb().prepare(`
+  getDb().query(`
     INSERT INTO commands (id, type, source, target, params, status, correlation_id, created_at, updated_at, expires_at)
     VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
   `).run(
@@ -60,7 +60,7 @@ export function createCommand(input: CreateCommandInput): Command {
 }
 
 export function getCommand(id: string): Command | null {
-  const row = getDb().prepare("SELECT * FROM commands WHERE id = ?").get(id) as CommandRow | undefined;
+  const row = getDb().query("SELECT * FROM commands WHERE id = ?").get(id) as CommandRow | undefined;
   return row ? rowToCommand(row) : null;
 }
 
@@ -87,7 +87,7 @@ export function listCommands(filters: CommandFilters = {}): Command[] {
   const limit = Math.min(Math.max(filters.limit ?? 100, 1), 500);
   const bindings = [...params, limit] as any[];
   const rows = getDb()
-    .prepare(`SELECT * FROM commands ${where} ORDER BY created_at DESC LIMIT ?`)
+    .query(`SELECT * FROM commands ${where} ORDER BY created_at DESC LIMIT ?`)
     .all(...bindings) as CommandRow[];
   return rows.map(rowToCommand);
 }
@@ -97,7 +97,7 @@ export function updateCommand(id: string, input: UpdateCommandInput): Command |
   if (!existing) return null;
   const nextStatus = input.status ?? existing.status;
   const now = Date.now();
-  getDb().prepare(`
+  getDb().query(`
     UPDATE commands
     SET status = ?, result = ?, error = ?, updated_at = ?
     WHERE id = ?
@@ -121,7 +121,7 @@ export function deleteCommand(id: string): boolean {
 
 export function expireCommands(now: number = Date.now()): Command[] {
   const rows = getDb()
-    .prepare(`SELECT * FROM commands WHERE expires_at IS NOT NULL AND expires_at <= ? AND status IN (${ACTIVE_STATUSES.map(() => "?").join(",")})`)
+    .query(`SELECT * FROM commands WHERE expires_at IS NOT NULL AND expires_at <= ? AND status IN (${ACTIVE_STATUSES.map(() => "?").join(",")})`)
     .all(now, ...ACTIVE_STATUSES) as CommandRow[];
   for (const row of rows) updateCommand(row.id, { status: "timed_out", error: "command timed out" });
   return rows.map((row) => getCommand(row.id)).filter((command): command is Command => Boolean(command));