copilot-reverse 0.5.1 → 0.5.2

package/dist/shared/config.js

@@ -3,7 +3,7 @@ export function defaultConfig() {
         bindHost: "127.0.0.1",
         supervisorPort: 7890,
         workerPort: 7891,
-        restart: { maxCrashes: 5, windowMs: 60_000, baseBackoffMs: 500, maxBackoffMs: 8_000 },
+        restart: { maxCrashes: 5, windowMs: 60_000, baseBackoffMs: 500, maxBackoffMs: 8_000, unhealthyCooldownMs: 30_000 },
         // Empty = pass the requested model straight through to Copilot. Add entries (or "*") to remap.
         modelMap: {},
         // Set MAESTRO_REPORT_REPO=owner/repo to override where /report files diagnostics issues.

package/dist/supervisor/index.js

@@ -10,6 +10,7 @@ import { dataDir, dbPath } from "../shared/paths.js";
 import { readGhToken } from "../shared/creds.js";
 import { probeGithubAuth } from "../providers/copilot/token.js";
 import { GithubHeartbeat, SIGNED_OUT_DETAIL } from "./github-heartbeat.js";
+import { appendCrashLog } from "../shared/crash-log.js";
 export function startSupervisor() {
     const config = defaultConfig();
     mkdirSync(dataDir(), { recursive: true });
@@ -21,6 +22,9 @@ export function startSupervisor() {
         onStateChange: (s) => { state = s; bus.emit("state", { state: s }); },
         onCrash: (d, exitCode, stderrTail) => {
             recordRestart(db, { ts: Date.now(), reason: d.markedUnhealthy ? "unhealthy" : "crash", exitCode, stderrTail, backoffMs: d.backoffMs, markedUnhealthy: d.markedUnhealthy ? 1 : 0 });
+            // Also persist to crash.log so a worker crash is diagnosable post-mortem — the DB stderrTail can
+            // be empty if the worker died before flushing; this keeps whatever it did emit.
+            appendCrashLog("worker-crash", `exit=${exitCode} unhealthy=${d.markedUnhealthy} backoff=${d.backoffMs}ms\n${stderrTail || "(no stderr captured)"}`);
             bus.emit("crash", { exitCode, ...d });
         },
         onWorkerMessage: (m) => {

package/dist/supervisor/monitor.js

@@ -16,7 +16,7 @@ export class RestartController {
         const backoffMs = Math.min(this.policy.baseBackoffMs * 2 ** (this.consecutive - 1), this.policy.maxBackoffMs);
         return { backoffMs, markedUnhealthy: this.crashTimes.length >= this.policy.maxCrashes, crashesInWindow: this.crashTimes.length };
     }
-    reset() { this.consecutive = 0; }
+    reset() { this.consecutive = 0; this.crashTimes = []; }
 }
 export class WorkerMonitor {
     config;
@@ -58,7 +58,14 @@ export class WorkerMonitor {
             const d = this.controller.onCrash();
             this.hooks.onCrash(d, code, this.stderrTail);
             if (d.markedUnhealthy) {
+                // Don't give up forever: a transient crash burst (token rotation, a flaky upstream) shouldn't
+                // leave the daemon permanently dead. Mark unhealthy, then after a cooldown reset the window and
+                // try once more — recovering on its own if the cause has passed.
                 this.set("unhealthy");
+                setTimeout(() => { if (!this.stopped) {
+                    this.controller.reset();
+                    this.spawn();
+                } }, this.config.restart.unhealthyCooldownMs);
                 return;
             }
             this.set("crashed");

package/dist/version.js

@@ -1,2 +1,2 @@
 // AUTO-GENERATED by scripts/gen-version.mjs from package.json — do not edit.
-export const APP_VERSION = "0.5.1";
+export const APP_VERSION = "0.5.2";

package/dist/worker/index.js

@@ -9,8 +9,13 @@ import { makeGatewayRunner } from "../core/server-tools.js";
 import { borrowSearch } from "../providers/copilot/borrow-search.js";
 import { dataDir } from "../shared/paths.js";
 import { defaultConfig } from "../shared/config.js";
-function send(msg) { if (process.send)
-    process.send(msg); }
+// Sending after the parent tore down the IPC channel throws ERR_IPC_CHANNEL_CLOSED; guard it so a
+// crash-time report can't itself become a second, masking crash.
+function send(msg) { try {
+    if (process.connected)
+        process.send?.(msg);
+}
+catch { /* channel gone */ } }
 const cfg = defaultConfig();
 const port = Number(process.env.WORKER_PORT ?? cfg.workerPort);
 const host = process.env.BIND_HOST ?? cfg.bindHost;
@@ -47,4 +52,18 @@ process.on("message", (m) => { if (m?.type === "shutdown") {
     clearInterval(hb);
     server.close(() => process.exit(0));
 } });
-process.on("uncaughtException", (e) => { send({ type: "error", message: e.message, stack: e.stack }); process.exit(1); });
+// Crash diagnostics: write to STDERR FIRST so the supervisor's stderr capture (and crash.log) records
+// the reason even when the IPC channel is already gone; the IPC send is a best-effort extra. Without
+// the unhandledRejection handler, a stray floating rejection silently kills the worker on Node ≥15 —
+// the exact "exit 1, empty stderr" crash loop we kept seeing.
+function fatal(kind, e) {
+    const detail = e instanceof Error ? `${e.message}\n${e.stack ?? ""}` : String(e);
+    try {
+        process.stderr.write(`worker ${kind}: ${detail}\n`);
+    }
+    catch { /* nothing more we can do */ }
+    send({ type: "error", message: e instanceof Error ? e.message : String(e), stack: e instanceof Error ? e.stack : undefined });
+    process.exit(1);
+}
+process.on("uncaughtException", (e) => fatal("uncaughtException", e));
+process.on("unhandledRejection", (e) => fatal("unhandledRejection", e));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "copilot-reverse",
-  "version": "0.5.1",
+  "version": "0.5.2",
   "description": "Interactive terminal app that exposes your GitHub Copilot subscription as local OpenAI- and Anthropic-compatible endpoints, with a self-healing daemon and a built-in assistant.",
   "type": "module",
   "license": "MIT",