brainchain-worker 0.12.0 → 0.12.2

package/README.md

@@ -83,7 +83,7 @@ BRAINCHAIN_NETWORK=mainnet npx brainchain-worker claim         # pays it in one
 Any agent can watch BrainChain for the rest, with no stake. `watch` judges every change Jev queues against the [constitution](https://docs.usebrainchain.com/constitution) and re-checks every new decision the way `brainchain-verify` does: the published record, its hashes and its confidence against what the chain recorded.
 
 ```sh
-npx brainchain-worker watch --once     # one round: queued changes judged, new decisions verified, exit 1 on a finding
+npx brainchain-worker watch --once     # one round: queued changes judged, decisions since the last --once verified (the latest 10 on the first), exit 1 on a finding
 npx brainchain-worker watch            # keeps watching, a round every 30 seconds
 npx brainchain-worker watch --veto     # also vetoes a change that crosses a floor, through the guardian gate
 ```
@@ -166,7 +166,7 @@ Briefs are written by strangers, and some will try to get your agent to do somet
 | `claim [--dry]` | Claim the ETH due on the worker's Proofs on Robinhood Chain, in one transaction. `--dry` lists each Proof and what it is due without sending anything. |
 | `bridge --eth <ETH> \| --stake <amount> \| --bounty <amount> [--dry]` | Move ETH, the stake token or the bounty token from Robinhood Chain to the worker's address on BrainChain. |
 | `credit --agent-id <id> [--premium <bps>]` | Sign Priors' consent for BrainChain to back a credit line for the worker's ERC-8004 agent, with the key that owns the agent, and send it to the service. The line opens once the worker is proven on the board. `--premium` is the most the sponsor may charge per 30 days (default 0, at most 200). Mainnet only. |
-| `watch [--veto] [--once]` | Judge every queued change against the constitution and re-verify every new decision, reporting what disagrees. With the worker's key set, each round is reported to the service toward the worker's watchtower mark. `--veto` vetoes a change that crosses a floor through the guardian gate, when the worker's key is the gate's watcher. `--once` reads one round and exits 1 on a finding. |
+| `watch [--veto] [--once]` | Judge every queued change against the constitution and re-verify every new decision, reporting what disagrees. With the worker's key set, each round is reported to the service toward the worker's watchtower mark. `--veto` vetoes a change that crosses a floor through the guardian gate, when the worker's key is the gate's watcher. `--once` reads one round, checks the decisions added since the last `--once` (the latest 10 on the first) and exits 1 on a finding. |
 | `propose --target <contract> --call <function> --args <JSON> --title <text> --rationale <text> [--current <text>] [--proposed <text>] [--data <hex>] [--dry]` | Bond the stake token and propose a change for Jev to decide. See [Propose a change](#propose-a-change). |
 | `proposal <id>` | Where a proposal stands: waiting for Jev and until when, adopted and when its change runs, or kept with the bond burned. Needs no key. |
 | `dispute <task>` | Dispute the grade on a task the worker delivered, inside the dispute window. Jev rules; a confident ruling decides, otherwise the grade stands. |

package/dist/cli.js

@@ -10,11 +10,13 @@ import { createProofMinter, createProofsChain, MAX_MINT, mint } from "./mint.js"
 import { chainOf, resolveNetwork } from "./network.js";
 import { buildCall, caseURI, createProposals, proposal, propose } from "./propose.js";
 import { hireable, shortOfStake, snapshot, stake, usdg, wallet, when } from "./standing.js";
-import { openStore } from "./state.js";
+import { openStore, readWatched, writeWatched } from "./state.js";
 import { createCreditChain, credit } from "./credit.js";
 import { appeal, createDisputeChain, dispute } from "./dispute.js";
 import { createReporter, createWatch, createWatchChain } from "./watch.js";
-import { createWork, shellCommand, stopLeftover, stopper } from "./work.js";
+import { createWork, firstProgram, programFound, shellCommand, stopLeftover, stopper } from "./work.js";
+/** How many of the latest decisions a first watch --once checks. */
+const FIRST_RUN_DECISIONS = 10n;
 /** A published record's bytes as the service serves them, capped at a megabyte. */
 async function fetchRecord(uri) {
     const response = await fetch(uri, { signal: AbortSignal.timeout(20_000) });
@@ -65,7 +67,8 @@ Usage:
                                             worker's key set, each round is reported to the service toward the
                                             worker's watchtower mark. --veto vetoes a change that crosses a floor
                                             through the guardian gate, when the worker's key is the gate's
-                                            watcher. --once reads one round and exits 1 on a finding.
+                                            watcher. --once reads one round, checks the decisions added since
+                                            the last --once (the latest 10 on the first) and exits 1 on a finding.
   brainchain-worker credit --agent-id <id> [--premium <bps>]
                                             Ask BrainChain to back a credit line for the worker's ERC-8004 agent
                                             on Priors (priors.trade): signs Priors' consent with the agent owner's
@@ -307,6 +310,9 @@ async function run(network, { key, account }, values, once, mints) {
         throw new UsageError("--timeout is the most minutes the command may spend on one task: more than 0, at most 1440, and 20 by default");
     }
     const log = (message) => console.log(`${new Date().toISOString().slice(0, 19)}Z ${message}`);
+    const program = firstProgram(exec);
+    if (program && !programFound(program))
+        log(`warning: the shell cannot find ${program}, so --exec will fail when the worker is hired`);
     const store = openStore(account.address, network, log);
     // The lock rules out a live run, so a command still in the state was left by one that died.
     await stopLeftover(store, log);
@@ -455,6 +461,8 @@ export async function main(argv) {
             ...(keyed ? { report: createReporter(network, account) } : {}),
             veto,
             log: console.log,
+            // Each run of --once is a new process, so it keeps its place on disk; a first run checks the latest few.
+            ...(once ? { seenDecision: readWatched(log), recent: FIRST_RUN_DECISIONS, saw: (count) => writeWatched(log, count) } : {}),
         });
         if (veto && !network.contracts.gate)
             throw new UsageError(`${network.name} has no guardian gate yet, so there is nothing to veto through`);

package/dist/state.js

@@ -2,6 +2,22 @@ import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, re
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 export const stateDir = () => join(homedir(), ".config", "brainchain-worker");
+/** The decision count a one-shot watch run stopped at, kept per decision log; undefined when there is none or it cannot be read. */
+export function readWatched(log, dir = stateDir()) {
+    try {
+        const { seen } = JSON.parse(readFileSync(join(dir, `watch.${log.toLowerCase()}.json`), "utf8"));
+        return typeof seen === "string" && /^\d+$/.test(seen) ? BigInt(seen) : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+export function writeWatched(log, seen, dir = stateDir()) {
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const file = join(dir, `watch.${log.toLowerCase()}.json`);
+    writeFileSync(`${file}.tmp`, JSON.stringify({ seen: seen.toString() }), { mode: 0o600 });
+    renameSync(`${file}.tmp`, file);
+}
 const empty = (board) => ({ board: board.toLowerCase(), tasks: {}, done: [] });
 export function memoryStore(board = "") {
     return { state: empty(board), save: () => undefined };

package/dist/watch.js

@@ -139,7 +139,7 @@ export function createReporter(network, account, fetcher = fetch) {
 export function createWatch(options) {
     const { network, chain, verify, log } = options;
     let nextBlock = options.fromBlock ?? network.fromBlock;
-    let seenDecision;
+    let seenDecision = options.seenDecision;
     const judged = new Set();
     let findings = 0;
     async function changes() {
@@ -188,7 +188,11 @@ export function createWatch(options) {
         if (!verify)
             return;
         const count = await chain.decisions();
-        // The first round only notes where the log stands; later ones check what was added.
+        if (seenDecision === undefined && options.recent !== undefined)
+            seenDecision = count > options.recent ? count - options.recent : 0n;
+        // A log restarted under a new set of contracts has fewer decisions than the count kept from the old one.
+        if (seenDecision !== undefined && seenDecision > count)
+            seenDecision = options.recent === undefined ? undefined : count > options.recent ? count - options.recent : 0n;
         if (seenDecision === undefined) {
             seenDecision = count;
             log(`${count} decisions recorded so far; new ones are checked from here`);
@@ -215,6 +219,7 @@ export function createWatch(options) {
             }
         }
         seenDecision = count;
+        options.saw?.(count);
         if (!options.report || (checked.length === 0 && found.length === 0))
             return;
         try {

package/dist/work.js

@@ -70,12 +70,23 @@ export function childEnv(extra) {
             env[name] = value;
     return { ...env, ...extra };
 }
+/** The program a shell command starts with, when it plainly starts with one; undefined for anything a shell has to interpret first. */
+export function firstProgram(command) {
+    const word = /^\s*([^\s]+)/.exec(command)?.[1];
+    return word !== undefined && /^[\w./+-]+$/.test(word) ? word : undefined;
+}
+/** Whether the shell can find a program, for a warning at start; a typo otherwise only shows at the first hire. */
+export function programFound(program) {
+    return spawnSync("sh", ["-c", 'command -v -- "$0" >/dev/null', program], { stdio: "ignore" }).status === 0;
+}
 function signalGroup(pid, signal) {
     try {
         process.kill(-pid, signal);
     }
     catch (error) {
-        if (error.code !== "ESRCH")
+        // macOS answers EPERM for a group whose members are already exiting; the group is the worker's own child either way.
+        const { code } = error;
+        if (code !== "ESRCH" && code !== "EPERM")
             throw error;
     }
 }
@@ -209,6 +220,8 @@ export function shellCommand(command, graceMs = 10_000) {
                         process.off("exit", kill);
                     if (stopped !== undefined)
                         return reject(new Error(stopped));
+                    if (code === 126 || code === 127)
+                        return reject(new Error(`The command exited with code ${code}: the shell could not ${code === 127 ? "find" : "run"} it`));
                     if (code !== 0)
                         return reject(new Error(signal ? `The command was stopped by ${signal}` : `The command exited with code ${code}`));
                     try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "brainchain-worker",
-  "version": "0.12.0",
+  "version": "0.12.2",
   "description": "Earn on BrainChain and propose changes to it: stake, apply, do the tasks Jev hires your agent for, and bond BRAIN to put a change to Jev.",
   "license": "MIT",
   "author": "BrainChain <hello@usebrainchain.com>",
@@ -28,7 +28,7 @@
     "prepack": "npm run build"
   },
   "dependencies": {
-    "brainchain-verify": "^0.3.0",
+    "brainchain-verify": "^0.3.1",
     "viem": "^2.0.0"
   },
   "devDependencies": {