commandmate 0.10.3 → 0.11.0

package/dist/server/src/lib/db/db.js

@@ -11,8 +11,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.removeAgentInstance = exports.addAgentInstance = exports.setAgentInstances = exports.countAgentInstances = exports.getAgentInstance = exports.getAgentInstances = exports.deleteSessionState = exports.clearInProgressMessageId = exports.setInProgressMessageId = exports.updateSessionState = exports.getSessionState = exports.getMessagesByDateRange = exports.ACTIVE_FILTER = exports.markPendingPromptsAsAnswered = exports.updatePromptData = exports.getMessageById = exports.recomputeLastUserMessage = exports.clearLastUserMessage = exports.updateLastUserMessage = exports.deleteMessagesByInstance = exports.deleteMessagesByCliTool = exports.deleteMessageById = exports.deleteAllMessages = exports.getLastMessage = exports.getLastUserMessage = exports.getMessages = exports.updateMessageContent = exports.createMessage = exports.getLastAssistantMessageAt = exports.deleteWorktreesByIds = exports.deleteRepositoryWorktrees = exports.migrateWorktreeIdPreservingChildren = exports.getWorktreesByRepository = exports.getWorktreeIdsByRepository = exports.getInitialBranch = exports.saveInitialBranch = exports.updateVibeLocalContextWindow = exports.updateVibeLocalModel = exports.updateSelectedAgents = exports.updateCliToolId = exports.updateStatus = exports.updateFavorite = exports.updateLastViewedAt = exports.updateWorktreeLink = exports.updateWorktreeDescription = exports.upsertWorktree = exports.getWorktreeById = exports.getRepositories = exports.getWorktrees = exports.initDatabase = void 0;
-exports.getLatestAssistantExecutionByConversation = exports.getAssistantExecutionById = exports.updateAssistantExecution = exports.createAssistantExecution = exports.archiveAssistantMessagesFrom = exports.archiveAllAssistantMessages = exports.getAssistantMessageById = exports.getAssistantMessages = exports.updateAssistantMessageStatus = exports.createAssistantMessage = exports.updateAssistantConversation = exports.createAssistantConversation = exports.getAssistantConversationByRepositoryAndCliTool = exports.getAssistantConversationById = exports.updateDailyReportContent = exports.saveDailyReport = exports.getDailyReport = exports.recoverStuckSendingTimers = exports.clearTimerHistory = exports.cleanupOldTimers = exports.getPendingTimerCountByWorktree = exports.cancelTimersByWorktree = exports.cancelTimer = exports.updateTimerStatus = exports.getPendingTimers = exports.getTimerById = exports.getTimersByWorktree = exports.createTimer = exports.WORKTREE_TODO_STATUSES = exports.isWorktreeTodoStatus = exports.reorderWorktreeTodos = exports.deleteWorktreeTodo = exports.updateWorktreeTodo = exports.createWorktreeTodo = exports.getWorktreeTodoById = exports.getTodosByWorktreeId = exports.deleteTodo = exports.updateTodo = exports.createTodo = exports.getTodoById = exports.getAllTodos = exports.getTodosByRepositoryId = exports.reorderMemos = exports.deleteMemo = exports.updateMemo = exports.createMemo = exports.getMemoById = exports.getMemosByWorktreeId = exports.InvalidAgentInstanceError = exports.AgentInstanceLimitError = void 0;
-exports.deletePushSubscriptionByEndpoint = exports.updatePushSubscriptionPreferences = exports.getPushSubscriptionsForKind = exports.getAllPushSubscriptions = exports.getPushSubscriptionByEndpoint = exports.upsertPushSubscription = exports.deleteAssistantSessionState = exports.updateAssistantSessionState = exports.getAssistantSessionState = exports.listRunningAssistantExecutions = exports.getRunningAssistantExecutionByConversation = void 0;
+exports.getAssistantExecutionById = exports.updateAssistantExecution = exports.createAssistantExecution = exports.archiveAssistantMessagesFrom = exports.archiveAllAssistantMessages = exports.getAssistantMessageById = exports.getAssistantMessages = exports.updateAssistantMessageStatus = exports.createAssistantMessage = exports.updateAssistantConversation = exports.createAssistantConversation = exports.getAssistantConversationByRepositoryAndCliTool = exports.getAssistantConversationById = exports.updateDailyReportContent = exports.saveDailyReport = exports.getDailyReport = exports.recoverStuckSendingTimers = exports.clearTimerHistory = exports.cleanupOldTimers = exports.getPendingTimerCountByWorktree = exports.cancelTimersByWorktree = exports.cancelTimer = exports.updateTimerStatus = exports.getPendingTimers = exports.getTimerById = exports.getTimersByWorktree = exports.createTimer = exports.WORKTREE_TODO_STATUSES = exports.isWorktreeTodoStatus = exports.reorderWorktreeTodos = exports.deleteWorktreeTodo = exports.updateWorktreeTodo = exports.createWorktreeTodo = exports.getWorktreeTodoById = exports.getTodosByWorktreeId = exports.deleteTodo = exports.updateTodo = exports.createTodo = exports.getTodoById = exports.getAllTodos = exports.getTodosByRepositoryId = exports.MemoDbError = exports.reorderMemos = exports.deleteMemo = exports.updateMemo = exports.createMemo = exports.getMemoById = exports.getMemosByWorktreeId = exports.InvalidAgentInstanceError = exports.AgentInstanceLimitError = void 0;
+exports.deletePushSubscriptionByEndpoint = exports.updatePushSubscriptionPreferences = exports.getPushSubscriptionsForKind = exports.getAllPushSubscriptions = exports.getPushSubscriptionByEndpoint = exports.upsertPushSubscription = exports.deleteAssistantSessionState = exports.updateAssistantSessionState = exports.getAssistantSessionState = exports.listRunningAssistantExecutions = exports.getRunningAssistantExecutionByConversation = exports.getLatestAssistantExecutionByConversation = void 0;
 // init-db
 var init_db_1 = require("./init-db");
 Object.defineProperty(exports, "initDatabase", { enumerable: true, get: function () { return init_db_1.initDatabase; } });
@@ -83,6 +83,7 @@ Object.defineProperty(exports, "createMemo", { enumerable: true, get: function (
 Object.defineProperty(exports, "updateMemo", { enumerable: true, get: function () { return memo_db_1.updateMemo; } });
 Object.defineProperty(exports, "deleteMemo", { enumerable: true, get: function () { return memo_db_1.deleteMemo; } });
 Object.defineProperty(exports, "reorderMemos", { enumerable: true, get: function () { return memo_db_1.reorderMemos; } });
+Object.defineProperty(exports, "MemoDbError", { enumerable: true, get: function () { return memo_db_1.MemoDbError; } });
 // todo-db (repository-scoped Home ToDo widget)
 var todo_db_1 = require("./todo-db");
 Object.defineProperty(exports, "getTodosByRepositoryId", { enumerable: true, get: function () { return todo_db_1.getTodosByRepositoryId; } });

package/dist/server/src/lib/db/memo-db.js

@@ -6,6 +6,7 @@
  * Issue #479: Extracted from db.ts for single-responsibility separation
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.MemoDbError = void 0;
 exports.getMemosByWorktreeId = getMemosByWorktreeId;
 exports.getMemoById = getMemoById;
 exports.createMemo = createMemo;
@@ -13,6 +14,26 @@ exports.updateMemo = updateMemo;
 exports.deleteMemo = deleteMemo;
 exports.reorderMemos = reorderMemos;
 const crypto_1 = require("crypto");
+/**
+ * Database error for memo operations.
+ *
+ * Issue #1351: `createMemo` writes to a table with a
+ * `UNIQUE(worktree_id, position)` constraint. Converting the driver's opaque
+ * "UNIQUE constraint failed" message into a typed, coded error lets API callers
+ * map the collision to an explicit 409 instead of a generic 500. Mirrors
+ * `ExternalAppDbError` in `src/lib/external-apps/db.ts`.
+ */
+class MemoDbError extends Error {
+    code;
+    cause;
+    constructor(message, code, cause) {
+        super(message);
+        this.code = code;
+        this.cause = cause;
+        this.name = 'MemoDbError';
+    }
+}
+exports.MemoDbError = MemoDbError;
 /**
  * Map database row to WorktreeMemo model
  */
@@ -73,7 +94,17 @@ function createMemo(db, worktreeId, options) {
     INSERT INTO worktree_memos (id, worktree_id, title, content, position, created_at, updated_at)
     VALUES (?, ?, ?, ?, ?, ?, ?)
   `);
-    stmt.run(id, worktreeId, title, content, options.position, now, now);
+    try {
+        stmt.run(id, worktreeId, title, content, options.position, now, now);
+    }
+    catch (error) {
+        // UNIQUE(worktree_id, position) violation -> typed DUPLICATE error (Issue #1351).
+        // Other failures (e.g. FOREIGN KEY) are re-thrown unchanged.
+        if (error instanceof Error && error.message.includes('UNIQUE constraint')) {
+            throw new MemoDbError(`Memo position ${options.position} is already in use for worktree "${worktreeId}"`, 'DUPLICATE_POSITION', error);
+        }
+        throw error;
+    }
     return {
         id,
         worktreeId,

package/dist/server/src/lib/db/migrations/index.js

@@ -26,6 +26,7 @@ const v39_worktree_todo_detail_1 = require("./v39-worktree-todo-detail");
 const v40_timer_error_1 = require("./v40-timer-error");
 const v41_push_subscriptions_1 = require("./v41-push-subscriptions");
 const v42_push_subscription_locale_1 = require("./v42-push-subscription-locale");
+const v43_remove_cm_root_dir_ghost_repository_1 = require("./v43-remove-cm-root-dir-ghost-repository");
 /**
  * Complete ordered list of all migrations.
  * Used internally by the barrel file (db-migrations.ts); NOT exported from the barrel (DR2-004).
@@ -55,4 +56,5 @@ exports.migrations = [
     ...v40_timer_error_1.v40_migrations,
     ...v41_push_subscriptions_1.v41_migrations,
     ...v42_push_subscription_locale_1.v42_migrations,
+    ...v43_remove_cm_root_dir_ghost_repository_1.v43_migrations,
 ];

package/dist/server/src/lib/db/migrations/runner.js

@@ -17,7 +17,7 @@ const path_1 = __importDefault(require("path"));
  * Current schema version
  * Increment this when adding new migrations
  */
-exports.CURRENT_SCHEMA_VERSION = 42;
+exports.CURRENT_SCHEMA_VERSION = 43;
 /**
  * Get current schema version from database
  */
@@ -56,6 +56,16 @@ function runMigrations(db, migrations) {
     // Get current version
     const currentVersion = getCurrentVersion(db);
     console.log(`Current schema version: ${currentVersion}`);
+    // Issue #1353: refuse a database written by a newer build.
+    // Migrations only move forward, so this build has no definition for the
+    // schema it is looking at: queries still written against renamed/dropped
+    // columns would fail at runtime, long after startup reported success.
+    // The check sits after the version read but before any migration writes.
+    if (currentVersion > exports.CURRENT_SCHEMA_VERSION) {
+        throw new Error(`This database (schema v${currentVersion}) was created by a newer version of CommandMate ` +
+            `(this build supports up to v${exports.CURRENT_SCHEMA_VERSION}). ` +
+            `Please update: commandmate update`);
+    }
     // Find pending migrations
     const pendingMigrations = migrations.filter(migration => migration.version > currentVersion);
     if (pendingMigrations.length === 0) {

package/dist/server/src/lib/db/migrations/v43-remove-cm-root-dir-ghost-repository.js

@@ -0,0 +1,126 @@
+"use strict";
+/**
+ * Migration v43: delete the CM_ROOT_DIR ghost repository row (Issue #1339).
+ *
+ * Before #1328, `getRepositoryPaths()` returned CM_ROOT_DIR as if it were a
+ * single repository path, and the sync route handed it to
+ * `ensureEnvRepositoriesRegistered()`, which wrote it to `repositories` with
+ * `is_env_managed = 1`. But CM_ROOT_DIR is the *container* of repositories, not
+ * a repository: `git worktree list` run there returns nothing, so no `worktrees`
+ * row was ever created for it. The result is a repository row with no worktrees
+ * under it — visible in the repository management screen, absent from the
+ * sidebar (which is driven by `worktrees`), and impossible for the user to tell
+ * apart from a real entry.
+ *
+ * #1328 removed the discovery that created these rows but deliberately left the
+ * existing rows alone. This migration is that clean-up.
+ *
+ * SCOPE: only the `is_env_managed = 1` row whose path is exactly CM_ROOT_DIR.
+ * The `is_env_managed = 0` ghosts written by `disableRepository()` are a
+ * different defect (#1346) and are not touched here.
+ *
+ * The three guards below exist because deleting a *legitimate* env-managed row
+ * is not a harmless mistake: `ensureEnvRepositoriesRegistered()` recreates a
+ * missing row with `enabled: true` (db-repository.ts:469), so a wrong delete
+ * silently re-enables a repository the user had switched off, and drops their
+ * `visible` / `display_name` alongside it. Every guard fails toward keeping the
+ * row.
+ *
+ * Backward compatibility: a DB with no ghost row (the normal case for anyone who
+ * never ran a pre-#1328 build) matches nothing and the migration is a no-op.
+ */
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.v43_migrations = void 0;
+const path_1 = __importDefault(require("path"));
+/**
+ * The configured CM_ROOT_DIR, resolved the same way the ghost row's path was
+ * written: `path.resolve()` over the raw env value (`resolveRepositoryPath()`).
+ *
+ * Deliberately NOT `getEnv()`: that falls back to `process.cwd()` when
+ * CM_ROOT_DIR is unset (env.ts:218), which would aim this DELETE at whatever
+ * directory the server happened to start in — quite plausibly a real repository.
+ * An unset CM_ROOT_DIR must mean "skip", never "target cwd".
+ *
+ * Read straight from process.env rather than through env.ts so the migration
+ * stays frozen: it must keep deleting exactly what the pre-#1328 code wrote,
+ * whatever env.ts grows into later.
+ *
+ * @returns Resolved CM_ROOT_DIR, or null when it is not configured
+ */
+function getConfiguredRootDir() {
+    // MCBD_ROOT_DIR is the pre-#76 name and still supported (env.ts ENV_MAPPING).
+    const raw = process.env.CM_ROOT_DIR ?? process.env.MCBD_ROOT_DIR;
+    if (!raw || !raw.trim()) {
+        return null;
+    }
+    return path_1.default.resolve(raw.trim());
+}
+/**
+ * WORKTREE_REPOS entries, resolved. These are the *legitimate* `is_env_managed`
+ * rows: post-#1328 `getRepositoryPaths()` returns this list and nothing else.
+ *
+ * Parsed inline, mirroring `getRepositoryPaths()` (git/worktrees.ts:144), rather
+ * than imported: worktrees.ts pulls in `@/lib/db`, whose barrel re-exports this
+ * very migration list.
+ *
+ * @returns Resolved WORKTREE_REPOS paths (empty when unset)
+ */
+function getWorktreeRepoPaths() {
+    const raw = process.env.WORKTREE_REPOS;
+    if (!raw || !raw.trim()) {
+        return [];
+    }
+    return raw
+        .split(',')
+        .map((p) => p.trim())
+        .filter((p) => p.length > 0)
+        .map((p) => path_1.default.resolve(p));
+}
+exports.v43_migrations = [
+    {
+        version: 43,
+        name: 'remove-cm-root-dir-ghost-repository',
+        up: (db) => {
+            // Guard 1: no CM_ROOT_DIR, no target. See getConfiguredRootDir().
+            const rootDir = getConfiguredRootDir();
+            if (!rootDir) {
+                console.log('Migration 43: CM_ROOT_DIR is not set; no ghost row to remove');
+                return;
+            }
+            // Guard 2: CM_ROOT_DIR may legitimately also be listed in WORKTREE_REPOS,
+            // which makes its is_env_managed row real and its absence self-healing at
+            // enabled=true. Never delete a row the env still asks for.
+            if (getWorktreeRepoPaths().includes(rootDir)) {
+                console.log(`Migration 43: ${rootDir} is a WORKTREE_REPOS entry; keeping its repository row`);
+                return;
+            }
+            // Guard 3 (the NOT EXISTS): a row with worktrees under it is not a ghost,
+            // whatever the env says. This is the condition the issue names, and it is
+            // what makes the delete provably lossless — nothing references the row.
+            const result = db
+                .prepare(`DELETE FROM repositories
+            WHERE path = ?
+              AND is_env_managed = 1
+              AND NOT EXISTS (
+                SELECT 1 FROM worktrees WHERE worktrees.repository_path = ?
+              )`)
+                .run(rootDir, rootDir);
+            if (result.changes > 0) {
+                console.log(`Migration 43: removed CM_ROOT_DIR ghost repository row (${rootDir})`);
+            }
+            else {
+                console.log(`Migration 43: no ghost repository row at ${rootDir}`);
+            }
+        },
+        down: () => {
+            // The deleted row carried no user data — an env-managed ghost with no
+            // worktrees, no clone URL, and default flags — and re-inserting it would
+            // restore the very defect this migration fixes. No-op rollback (mirrors
+            // v35/v40).
+            console.log('No rollback for the CM_ROOT_DIR ghost row removal');
+        },
+    },
+];

package/dist/server/src/lib/git/worktrees.js

@@ -13,8 +13,11 @@ exports.getRepositoryPaths = getRepositoryPaths;
 exports.scanWorktrees = scanWorktrees;
 exports.scanMultipleRepositories = scanMultipleRepositories;
 exports.syncWorktreesToDB = syncWorktreesToDB;
+exports.repositoryExistsOnDisk = repositoryExistsOnDisk;
+exports.pruneStaleRepositoryWorktrees = pruneStaleRepositoryWorktrees;
 const child_process_1 = require("child_process");
 const util_1 = require("util");
+const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const db_1 = require("../../lib/db");
 const logger_1 = require("../../lib/logger");
@@ -293,3 +296,90 @@ function syncWorktreesToDB(db, worktrees) {
     }
     return { deletedIds: allDeletedIds, upsertedCount };
 }
+/**
+ * Whether a repository still exists on disk as a git working tree.
+ *
+ * Returns `false` only when the directory itself is gone OR its `.git` entry is
+ * missing (a de-gitified directory). Every other state — including a present
+ * directory whose `.git` is intact — is reported as "still there", so a
+ * transient git failure (a locked index, a momentarily-unavailable network
+ * drive whose mount point is still present, …) never satisfies the prune
+ * condition. Issue #1349: fall on the side of NOT pruning whenever the on-disk
+ * state is inconclusive.
+ *
+ * @param repoPath - Canonical repository path (as stored in
+ *   `worktrees.repository_path`, i.e. already `path.resolve()`d by
+ *   {@link scanWorktrees}; see #1347)
+ * @returns `true` if the repository still looks present on disk
+ */
+function repositoryExistsOnDisk(repoPath) {
+    if (!repoPath)
+        return false;
+    try {
+        return fs_1.default.existsSync(repoPath) && fs_1.default.existsSync(path_1.default.join(repoPath, '.git'));
+    }
+    catch {
+        // Inconclusive filesystem read (e.g. EACCES): be conservative and keep rows.
+        return true;
+    }
+}
+/**
+ * Prune DB worktree rows for repositories that have vanished from disk.
+ *
+ * Issue #1349: when a repository directory is deleted or de-gitified,
+ * {@link scanWorktrees} returns `[]` (git exit 128), so the repository silently
+ * drops out of the scan and {@link syncWorktreesToDB} never reaches its per-repo
+ * prune for it — the rows linger as ghost entries in the sidebar. The global
+ * early-return in `syncWorktreesToDB` only fires when *every* repository is
+ * empty, so a single vanished repository among healthy ones is never cleaned up.
+ *
+ * This runs as the global-sync reconciliation step: it enumerates every
+ * `repository_path` that still owns worktree rows and, for those that produced
+ * no worktrees in the current scan, deletes the rows **only when the repository
+ * directory (or its `.git`) is genuinely gone** (see
+ * {@link repositoryExistsOnDisk}). A repository that still exists but merely
+ * errored in git is left untouched, so a transient failure — a network drive
+ * blip, a locked repo — never destroys history.
+ *
+ * Intended for the full-scan endpoint (`POST /api/repositories/sync`) only.
+ * Single-repository callers (scan/restore) must NOT run this: they hold no
+ * authority over repositories outside their own scan, and running it there would
+ * prune repositories that merely weren't part of that request.
+ *
+ * Row keys stay consistent with #1347: {@link getRepositories} returns the
+ * stored (already `path.resolve()`d) `repository_path`, and every subsequent DB
+ * and filesystem lookup uses that same canonical value.
+ *
+ * @param db - Database instance
+ * @param liveWorktrees - Worktrees produced by the current scan; their
+ *   repositories are known-present and therefore skipped
+ * @returns IDs of worktrees deleted for vanished repositories
+ */
+function pruneStaleRepositoryWorktrees(db, liveWorktrees) {
+    // Repositories that produced at least one worktree this scan are alive by
+    // definition (git listed them), so they are never candidates for pruning.
+    const liveRepoPaths = new Set(liveWorktrees
+        .map(wt => wt.repositoryPath)
+        .filter((p) => !!p));
+    const deletedIds = [];
+    for (const repo of (0, db_1.getRepositories)(db)) {
+        const repoPath = repo.path;
+        if (!repoPath)
+            continue;
+        if (liveRepoPaths.has(repoPath))
+            continue;
+        // Conservative guard: keep rows unless the directory/.git is truly gone.
+        if (repositoryExistsOnDisk(repoPath))
+            continue;
+        const ids = (0, db_1.getWorktreesByRepository)(db, repoPath).map(row => row.id);
+        if (ids.length === 0)
+            continue;
+        const result = (0, db_1.deleteWorktreesByIds)(db, ids);
+        deletedIds.push(...ids);
+        logger.info('worktree:stale-repo-pruned', {
+            repoPath,
+            deletedCount: result.deletedCount,
+        });
+    }
+    return deletedIds;
+}

package/dist/server/src/lib/job-executor.js

@@ -136,8 +136,12 @@ async function executeSchedule(state) {
         return;
     }
     state.isExecuting = true;
-    const logId = createExecutionLog(state.scheduleId, state.worktreeId, state.entry.message);
+    // Issue #1343: createExecutionLog() must stay inside the try so that a DB
+    // failure still reaches the finally that resets isExecuting. Otherwise the
+    // schedule is skipped by the guard above until the server restarts.
+    let logId;
     try {
+        logId = createExecutionLog(state.scheduleId, state.worktreeId, state.entry.message);
         const db = getLazyDbInstance();
         const worktree = db.prepare('SELECT path, vibe_local_model FROM worktrees WHERE id = ?').get(state.worktreeId);
         if (!worktree) {
@@ -153,7 +157,9 @@ async function executeSchedule(state) {
     }
     catch (error) {
         const errorMessage = error instanceof Error ? error.message : String(error);
-        updateExecutionLog(logId, 'failed', errorMessage, null);
+        if (logId !== undefined) {
+            updateExecutionLog(logId, 'failed', errorMessage, null);
+        }
         logger.error('execution:failed', { name: state.entry.name, error: errorMessage });
     }
     finally {

package/dist/server/src/lib/realtime/types.js

@@ -0,0 +1,76 @@
+"use strict";
+/**
+ * Realtime (WebSocket) message contracts shared by the server broadcasters and
+ * the client consumers. Issue #1120.
+ *
+ * Server broadcasts are double-wrapped by `handleBroadcast` into an envelope:
+ *   { type: 'broadcast', worktreeId, data: { type: '<realType>', ...payload } }
+ * `parseRealtimeEvent` unwraps that envelope and returns the inner payload as
+ * the canonical {@link RealtimeEvent}.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.VERSION_MISMATCH_EVENT_TYPE = exports.CLIENT_VERSION_MESSAGE_TYPE = void 0;
+exports.isVersionMismatch = isVersionMismatch;
+exports.parseRealtimeEvent = parseRealtimeEvent;
+/**
+ * Client → server hello carrying the client bundle version, sent on every
+ * (re)connect so the server can detect a version drift (#1356). Kept as a shared
+ * constant so the client sender and the server handler cannot drift apart.
+ */
+exports.CLIENT_VERSION_MESSAGE_TYPE = 'client_version';
+/**
+ * Server → client notice that the running server version differs from this
+ * tab's bundle version (#1338/#1356). Drives the reload banner.
+ */
+exports.VERSION_MISMATCH_EVENT_TYPE = 'version_mismatch';
+/**
+ * Whether the running server version and this tab's bundle version have drifted
+ * apart and the user should be nudged to reload (#1338/#1356).
+ *
+ * Conservative on purpose (受入条件: 版が一致している間は誤検知しない): an empty or
+ * `'0.0.0'` fallback on either side means "version unknown" and is never treated
+ * as a mismatch, so a server that cannot resolve its own version stays silent.
+ */
+function isVersionMismatch(serverVersion, clientVersion) {
+    if (!serverVersion || !clientVersion)
+        return false;
+    if (serverVersion === '0.0.0' || clientVersion === '0.0.0')
+        return false;
+    return serverVersion !== clientVersion;
+}
+/**
+ * Parse a raw WebSocket frame into the inner realtime event.
+ *
+ * Handles both the room broadcast envelope ({ type:'broadcast', data:{...} })
+ * and (defensively) already-unwrapped frames. Returns null on malformed input
+ * or frames without a usable inner `type`.
+ */
+function parseRealtimeEvent(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return null;
+    }
+    if (!parsed || typeof parsed !== 'object')
+        return null;
+    const env = parsed;
+    if (env.type === 'broadcast') {
+        const inner = env.data;
+        if (!inner || typeof inner !== 'object')
+            return null;
+        const innerObj = inner;
+        if (typeof innerObj.type !== 'string')
+            return null;
+        // Ensure worktreeId is present even if the payload omitted it.
+        if (innerObj.worktreeId === undefined && typeof env.worktreeId === 'string') {
+            innerObj.worktreeId = env.worktreeId;
+        }
+        return innerObj;
+    }
+    if (typeof env.type === 'string') {
+        return env;
+    }
+    return null;
+}

package/dist/server/src/lib/schedule-manager.js

@@ -71,7 +71,15 @@ function createScheduleState(worktreeId, scheduleId, entry) {
         entry,
     };
     cronJob.schedule(() => {
-        void (0, job_executor_1.executeSchedule)(state);
+        // Issue #1343: executeSchedule() rejects if its own error handling fails
+        // (e.g. the DB is still down when writing the 'failed' log). Without this
+        // catch the rejection is silently unhandled.
+        void (0, job_executor_1.executeSchedule)(state).catch((error) => {
+            logger.error('execution:unhandled', {
+                name: entry.name,
+                error: error instanceof Error ? error.message : String(error),
+            });
+        });
     });
     return state;
 }