create-workframe 0.1.10 → 0.1.12

package/workframe-api/test_model_surface_consistency.py

@@ -0,0 +1,116 @@
+#!/usr/bin/env python3
+"""Regression tests for model save/provider surface (WF-034).
+
+Run: python services/workframe-api/test_model_surface_consistency.py
+"""
+import importlib.util
+import os
+import sys
+import tempfile
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent
+tmpdir = tempfile.mkdtemp(prefix="wf-model-surface-")
+os.environ["WORKFRAME_AGENTS_DIR"] = tmpdir
+os.environ["WORKFRAME_PROJECT"] = "ModelSurfaceTest"
+os.environ["NATIVE_PROFILE"] = "surface-test-agent"
+
+spec = importlib.util.spec_from_file_location("wf_server_model_surface", ROOT / "server.py")
+server = importlib.util.module_from_spec(spec)
+sys.modules["wf_server_model_surface"] = server
+spec.loader.exec_module(server)
+
+PROF = "surface-test-agent"
+prof_dir = server._profile_dir(PROF)
+prof_dir.mkdir(parents=True, exist_ok=True)
+(prof_dir / "config.yaml").write_text(
+    "model:\n  default: gpt-5.4-medium\n  provider: openai-codex\n",
+    encoding="utf-8",
+)
+cfg_path = prof_dir / "config.yaml"
+before = cfg_path.read_bytes()
+
+# A: GET models must not mutate config.yaml
+server.hermes_models(PROF, user_id="", workspace_id="")
+assert cfg_path.read_bytes() == before, "hermes_models must not rewrite config on read"
+
+# B: reconcile idempotent when routing already matches codex oauth
+assert server._profile_routing_matches_billing(PROF, "codex")
+assert server._reconcile_profile_llm_for_user(PROF, "user-1", "") is False
+
+# C: billing resolution honors prefer= when model exists in that catalog
+connected = {"codex", "openrouter"}
+assert server._resolve_billing_provider_for_model(
+    "gpt-5.4-medium", connected, prefer="codex",
+) == "codex"
+assert server._resolve_billing_provider_for_model(
+    "openrouter/owl-alpha", connected, prefer="openrouter",
+) == "openrouter"
+assert server._resolve_billing_provider_for_model(
+    "openai-codex/gpt-5.4-mini", {"codex", "openrouter"},
+) == "codex"
+
+# D: set with explicit billing_provider returns billing id in response
+applied = server.hermes_model_set(
+    PROF, "gpt-5.4-medium", user_id="", workspace_id="", billing_provider="codex",
+)
+assert applied.get("ok"), applied
+assert applied.get("billing_provider") == "codex"
+assert applied.get("provider") == "codex"
+
+# E: reconcile picks model billing over stale openrouter proxy yaml
+(prof_dir / "config.yaml").write_text(
+    "model:\n  default: openai-codex/gpt-5.4-mini\n  provider: custom\n"
+    "  base_url: http://workframe-api:8080/internal/llm/openrouter/v1\n",
+    encoding="utf-8",
+)
+_orig_picker = server._user_llm_providers_for_picker
+_orig_can = server._user_can_use_llm
+_orig_sync = server._sync_oauth_llm_to_profile
+server._user_llm_providers_for_picker = lambda uid: {"codex"} if uid == "user-1" else set()
+server._user_can_use_llm = lambda uid, ws, prov: uid == "user-1" and prov == "codex"
+server._sync_oauth_llm_to_profile = lambda *a, **k: None
+try:
+    assert server._reconcile_profile_llm_for_user(PROF, "user-1", "") is True
+    block = server._read_model_block(PROF)
+    assert block.get("provider") == "openai-codex"
+    assert block.get("default") == "gpt-5.4-mini"
+    assert not block.get("base_url")
+finally:
+    server._user_llm_providers_for_picker = _orig_picker
+    server._user_can_use_llm = _orig_can
+    server._sync_oauth_llm_to_profile = _orig_sync
+
+# F: runtime disk wins over template in _read_model_block
+runtime_prof = "u-test-user-surface-test-agent"
+runtime_dir = server._profile_dir(runtime_prof)
+runtime_dir.mkdir(parents=True, exist_ok=True)
+(runtime_dir / "config.yaml").write_text(
+    "model:\n  default: gpt-5.4-mini\n  provider: openai-codex\n",
+    encoding="utf-8",
+)
+block = server._read_model_block(runtime_prof)
+assert block.get("default") == "gpt-5.4-mini", block
+assert block.get("provider") == "openai-codex", block
+
+# G: template model save mirrors to runtime (same model id, not stale template re-read)
+runtime_prof = "u-test-user2-surface-test-agent"
+runtime_dir = server._profile_dir(runtime_prof)
+runtime_dir.mkdir(parents=True, exist_ok=True)
+(runtime_dir / "config.yaml").write_text(
+    "model:\n  default: gpt-5.4-medium\n  provider: openai-codex\n",
+    encoding="utf-8",
+)
+_orig_restart = server._restart_runtime_profile_gateway
+server._restart_runtime_profile_gateway = lambda *a, **k: None
+try:
+    applied = server.hermes_model_set(
+        PROF, "gpt-5.4-mini", user_id="test-user2", workspace_id="", billing_provider="codex",
+    )
+finally:
+    server._restart_runtime_profile_gateway = _orig_restart
+assert applied.get("ok"), applied
+runtime_block = server._parse_model_block_from_disk(runtime_prof)
+assert runtime_block.get("default") == "gpt-5.4-mini", runtime_block
+
+print("model surface consistency self-check ok")

package/workframe-api/test_profile_model_yaml.py

@@ -0,0 +1,99 @@
+#!/usr/bin/env python3
+"""Coalesce corrupt duplicate model blocks + profile_config_yaml writer (WF-033)."""
+import importlib.util
+import os
+import sys
+import tempfile
+from pathlib import Path
+
+import yaml
+
+ROOT = Path(__file__).resolve().parent
+os.environ.setdefault("WORKFRAME_AGENTS_DIR", tempfile.mkdtemp(prefix="wf-yaml-test-"))
+os.environ.setdefault("WORKFRAME_PROJECT", "YamlTest")
+os.environ.setdefault("NATIVE_PROFILE", "yaml-test-agent")
+
+spec = importlib.util.spec_from_file_location("wf_server_yaml_test", ROOT / "server.py")
+server = importlib.util.module_from_spec(spec)
+sys.modules["wf_server_yaml_test"] = server
+spec.loader.exec_module(server)
+
+import profile_config_yaml  # noqa: E402
+
+BROKEN = """model:
+  default: gpt-5.4-medium
+  provider: openai-codex
+model:
+  default: gpt-5.4-medium
+  - provider: openai-codex
+fallback_providers:
+  - provider: openai-codex
+    model: gpt-5.4-mini
+toolsets:
+"""
+
+prof = "yaml-test-agent"
+prof_dir = server._profile_dir(prof)
+prof_dir.mkdir(parents=True, exist_ok=True)
+cfg_path = prof_dir / "config.yaml"
+cfg_path.write_text(BROKEN, encoding="utf-8")
+
+server._normalize_profile_config_yaml(prof)
+fixed = cfg_path.read_text(encoding="utf-8")
+assert fixed.count("\nmodel:\n") + fixed.count("model:\n") <= 2, fixed
+assert "  - provider:" not in fixed.split("fallback_providers:")[0], fixed
+parsed = yaml.safe_load(fixed)
+assert isinstance(parsed.get("model"), dict), parsed
+assert parsed["model"]["default"] == "gpt-5.4-medium"
+assert parsed["model"]["provider"] == "openai-codex"
+assert len(parsed.get("fallback_providers") or []) == 1
+assert "toolsets" in parsed
+
+# Round-trip via update_model_surface preserves non-model keys
+round_prof = "yaml-round-trip"
+round_dir = server._profile_dir(round_prof)
+round_dir.mkdir(parents=True, exist_ok=True)
+round_path = round_dir / "config.yaml"
+round_path.write_text(
+    "# picker note\nmodel:\n  default: old-model\n  provider: openrouter\ncron: []\n",
+    encoding="utf-8",
+)
+profile_config_yaml.update_model_surface(
+    round_path, default="new-model", provider="custom", base_url="http://proxy/v1",
+)
+rt = yaml.safe_load(round_path.read_text(encoding="utf-8"))
+assert rt["model"]["default"] == "new-model"
+assert rt["model"]["provider"] == "custom"
+assert rt["model"]["base_url"] == "http://proxy/v1"
+assert rt.get("cron") == []
+assert "# picker note" not in round_path.read_text(encoding="utf-8")  # comments not preserved
+
+# Missing file: writer creates parent dirs + config
+missing_prof = "yaml-missing"
+missing_dir = server._profile_dir(missing_prof)
+missing_path = missing_dir / "config.yaml"
+if missing_path.is_file():
+    missing_path.unlink()
+profile_config_yaml.update_model_surface(
+    missing_path, default="gpt-5.4-mini", provider="openai-codex",
+)
+assert missing_path.is_file()
+loaded = yaml.safe_load(missing_path.read_text(encoding="utf-8"))
+assert loaded["model"]["default"] == "gpt-5.4-mini"
+
+# Coalesce flag drops duplicate blocks
+dup_path = round_dir / "dup.yaml"
+dup_path.write_text(BROKEN, encoding="utf-8")
+profile_config_yaml.update_model_surface(
+    dup_path,
+    default="gpt-5.4-medium",
+    provider="openai-codex",
+    fallback_chain=[{"provider": "openai-codex", "model": "gpt-5.4-mini"}],
+    coalesce=True,
+)
+dup_text = dup_path.read_text(encoding="utf-8")
+assert dup_text.count("\nmodel:\n") + dup_text.count("model:\n") <= 2, dup_text
+dup_parsed = yaml.safe_load(dup_text)
+assert dup_parsed["model"]["default"] == "gpt-5.4-medium"
+
+print("profile model yaml coalesce self-check ok")

package/workframe-api/test_public_routes.py

@@ -0,0 +1,41 @@
+"""ponytail self-check: session-less GET policy (WF-031).
+
+Run: python services/workframe-api/test_public_routes.py
+"""
+import sys
+from pathlib import Path
+
+sys.path.insert(0, str(Path(__file__).resolve().parent))
+
+import server  # noqa: E402
+
+ALWAYS = "/api/health"
+DATA = "/api/snapshot"
+META = "/api/meta"
+
+
+def allowed(path: str, mode: str, dev: bool = False) -> bool:
+    return server._sessionless_get_allowed(path, deployment_mode=mode, dev_local_unsafe=dev)
+
+
+# Always-public routes work in every deployment mode.
+assert allowed(META, "public_multi_user")
+assert allowed(ALWAYS, "trusted_team")
+assert allowed("/api/public/branding/logo", "public_multi_user")
+
+# Data routes: blocked for multi-user modes without DEV_LOCAL_UNSAFE.
+assert not allowed(DATA, "public_multi_user")
+assert not allowed(DATA, "trusted_team")
+assert not allowed("/api/chat/messages", "public_multi_user")
+assert not allowed("/api/files/list", "trusted_team")
+
+# Data routes: allowed for single_user_local or dev unsafe.
+assert allowed(DATA, "single_user_local")
+assert allowed(DATA, "public_multi_user", dev=True)
+assert allowed("/api/board", "single_user_local")
+
+# _is_public_get composes static/UI paths.
+assert server._is_public_get("/")
+assert server._is_public_get("/assets/app.js")
+
+print("public routes self-check ok")

package/workframe-api/test_route_registry.py

@@ -0,0 +1,109 @@
+#!/usr/bin/env python3
+"""Route registry audit (WF-037).
+
+Run: python services/workframe-api/test_route_registry.py
+"""
+import re
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent
+sys.path.insert(0, str(ROOT))
+
+import route_registry  # noqa: E402
+
+# Auth level coverage
+assert route_registry.resolve_auth_level("GET", "/api/health") == route_registry.AuthLevel.PUBLIC
+assert route_registry.resolve_auth_level("GET", "/api/meta") == route_registry.AuthLevel.PUBLIC
+assert route_registry.resolve_auth_level("GET", "/api/snapshot") == route_registry.AuthLevel.SINGLE_USER_GET
+assert route_registry.resolve_auth_level("POST", "/api/auth/start") == route_registry.AuthLevel.AUTH_FLOW
+assert route_registry.resolve_auth_level("GET", "/api/me") == route_registry.AuthLevel.SESSION
+assert route_registry.resolve_auth_level("GET", "/api/activity/detail") == route_registry.AuthLevel.SESSION
+
+# Unknown /api paths require session (deny when anonymous)
+assert route_registry.resolve_auth_level("GET", "/api/not-a-real-handler") == route_registry.AuthLevel.SESSION
+assert not route_registry.authorize_request(
+    "GET",
+    "/api/not-a-real-handler",
+    "",
+    deployment_mode="trusted_team",
+    dev_local_unsafe=False,
+    install_window_open=False,
+    validate_session=lambda _s: None,
+    attach_user=lambda _u: None,
+)
+
+# ROUTES table: auth tier matches resolve_auth_level
+auth_mismatch: list[str] = []
+for route in route_registry.ROUTES:
+    resolved = route_registry.resolve_auth_level(route.method, route.path)
+    if resolved != route.auth:
+        auth_mismatch.append(f"{route.method} {route.path}: table={route.auth} resolved={resolved}")
+assert not auth_mismatch, f"route auth mismatch: {auth_mismatch}"
+
+# ROUTES handlers exist on server.Handler
+server_src = (ROOT / "server.py").read_text(encoding="utf-8")
+missing_handlers: list[str] = []
+for route in route_registry.ROUTES:
+    if f"def {route.handler}(" not in server_src:
+        missing_handlers.append(f"{route.method} {route.path} -> {route.handler}")
+assert not missing_handlers, f"missing handler methods: {missing_handlers}"
+
+# Remaining if-chain GET paths still map to a known auth tier
+handler_paths = set(re.findall(r'if path == "(/api/[^"]+)"', server_src))
+handler_paths |= set(re.findall(r"if path == \'(/api/[^\']+)\'", server_src))
+unmapped: list[str] = []
+for p in sorted(handler_paths):
+    level = route_registry.resolve_auth_level("GET", p)
+    if level not in (
+        route_registry.AuthLevel.PUBLIC,
+        route_registry.AuthLevel.SINGLE_USER_GET,
+        route_registry.AuthLevel.SESSION,
+        route_registry.AuthLevel.INSTALL,
+        route_registry.AuthLevel.AUTH_FLOW,
+    ):
+        unmapped.append(p)
+assert not unmapped, f"unmapped auth levels: {unmapped}"
+
+# trusted_team: data GETs need session (not anonymous), not a hard deny
+assert not route_registry.authorize_request(
+    "GET",
+    "/api/agents",
+    "",
+    deployment_mode="trusted_team",
+    dev_local_unsafe=False,
+    install_window_open=False,
+    validate_session=lambda _s: None,
+    attach_user=lambda _u: None,
+)
+assert route_registry.authorize_request(
+    "GET",
+    "/api/agents",
+    "sid-ok",
+    deployment_mode="trusted_team",
+    dev_local_unsafe=False,
+    install_window_open=False,
+    validate_session=lambda s: {"user_id": "u1"} if s == "sid-ok" else None,
+    attach_user=lambda _u: None,
+)
+
+data_read_get = [r for r in route_registry.ROUTES if r.method == "GET"]
+assert len(data_read_get) == 36
+registry_post = [r for r in route_registry.ROUTES if r.method == "POST"]
+assert len(registry_post) == 25
+
+class _PostStub:
+    def __init__(self) -> None:
+        self.called = False
+        self.body: dict | None = None
+
+    def _route_post_auth_start(self, body: dict) -> None:
+        self.called = True
+        self.body = body
+
+_stub = _PostStub()
+assert route_registry.dispatch_post(_stub, "/api/auth/start", {"email": "a@b.c"})
+assert _stub.called and _stub.body == {"email": "a@b.c"}
+assert not route_registry.dispatch_post(_stub, "/api/not-registered", {})
+
+print("route registry self-check ok")

package/workframe-api/time-bind-steps.py

@@ -0,0 +1,75 @@
+#!/usr/bin/env python3
+"""Granular bind + stream lease timings (docker exec)."""
+from __future__ import annotations
+
+import sqlite3
+import sys
+import time
+import uuid
+
+import server
+
+
+def ms(t0: float) -> int:
+    return round((time.perf_counter() - t0) * 1000)
+
+
+def main() -> int:
+    conn = sqlite3.connect(str(server._workframe_db_path()))
+    conn.row_factory = sqlite3.Row
+    room = conn.execute(
+        """
+        SELECT id, workspace_id FROM rooms
+        WHERE room_type = 'direct' AND deleted_at IS NULL
+        ORDER BY updated_at DESC LIMIT 1
+        """,
+    ).fetchone()
+    user = conn.execute(
+        "SELECT id FROM users WHERE status = 'active' ORDER BY created_at LIMIT 1",
+    ).fetchone()
+    conn.close()
+    if not room or not user:
+        print("no room/user", file=sys.stderr)
+        return 1
+
+    uid = str(user["id"])
+    rid = str(room["id"])
+    ws = str(room["workspace_id"])
+    prof = server._resolve_chat_hermes_profile("mybusiness-agent", uid, rid, ws)
+    payload = {
+        "room_id": rid,
+        "workspace_id": ws,
+        "source_id": "steps",
+        "client_id": "steps",
+        "binding_version": 2,
+    }
+    print(f"profile={prof}")
+
+    block = server._read_model_block(prof)
+    t = time.perf_counter()
+    block2 = server._read_model_block(prof)
+    print(f"read_model_block_ms={ms(t)} repeat_ms={ms(t)}")
+
+    t = time.perf_counter()
+    server.ensure_profile_api(prof, uid, ws)
+    print(f"ensure_api_ms={ms(t)}")
+
+    provider = server._llm_billing_provider(prof, user_id=uid, workspace_id=ws, block=block)
+    run_a, run_b = "steps-a", "steps-b"
+    t = time.perf_counter()
+    server._apply_turn_credential_lease(prof, uid, ws, provider, run_a)
+    print(f"lease_cold_ms={ms(t)} provider={provider}")
+    t = time.perf_counter()
+    server._apply_turn_credential_lease(prof, uid, ws, provider, run_b)
+    print(f"lease_warm_ms={ms(t)}")
+
+    for i in range(3):
+        t = time.perf_counter()
+        server.profile_chat_bind("", payload, user_id=uid)
+        print(f"bind_{i}_ms={ms(t)}")
+
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/workframe-api/time-perf.py

@@ -0,0 +1,81 @@
+#!/usr/bin/env python3
+"""Measure model-save, gateway reload, bind, and reconcile latency (docker exec)."""
+from __future__ import annotations
+
+import sqlite3
+import sys
+import time
+
+import server
+
+
+def ms(t0: float) -> int:
+    return round((time.perf_counter() - t0) * 1000)
+
+
+def main() -> int:
+    conn = sqlite3.connect(str(server._workframe_db_path()))
+    conn.row_factory = sqlite3.Row
+    room = conn.execute(
+        """
+        SELECT r.id, r.workspace_id
+        FROM rooms r
+        WHERE r.room_type = 'direct' AND r.deleted_at IS NULL
+        ORDER BY r.updated_at DESC
+        LIMIT 1
+        """,
+    ).fetchone()
+    user = conn.execute(
+        "SELECT id FROM users WHERE status = 'active' ORDER BY created_at LIMIT 1",
+    ).fetchone()
+    conn.close()
+    if not room or not user:
+        print("no room/user", file=sys.stderr)
+        return 1
+
+    user_id = str(user["id"])
+    room_id = str(room["id"])
+    ws_id = str(room["workspace_id"])
+    prof = server._resolve_chat_hermes_profile("mybusiness-agent", user_id, room_id, ws_id)
+    print(f"profile={prof}")
+
+    t = time.perf_counter()
+    ok, err = server._apply_model_persisted(
+        prof, "codex", "gpt-5.4-mini", user_id, restart_gateway=False,
+    )
+    print(f"yaml_write_ms={ms(t)} ok={ok} err={err!r}")
+
+    t = time.perf_counter()
+    code, out = server._gateway_exec(prof, ["gateway", "restart"])
+    # ponytail: ~7s vs stop+start ~45s on dogfood
+    healthy = server._wait_profile_api_healthy(prof, attempts=24, delay=0.25)
+    print(f"gateway_restart_ms={ms(t)} code={code} healthy={healthy} out={out[:80]!r}")
+
+    t = time.perf_counter()
+    changed = server._reconcile_profile_llm_for_user(prof, user_id, ws_id)
+    print(f"reconcile_ms={ms(t)} changed={changed}")
+
+    t = time.perf_counter()
+    server.ensure_profile_api(prof, user_id, ws_id)
+    print(f"ensure_api_ms={ms(t)}")
+
+    payload = {
+        "room_id": room_id,
+        "workspace_id": ws_id,
+        "source_id": "perf",
+        "client_id": "perf",
+        "binding_version": 2,
+    }
+    t = time.perf_counter()
+    session = server.profile_chat_session("", payload, user_id=user_id)
+    print(f"bind_ms={ms(t)} session={str(session.get('session_id') or '')[:24]}")
+
+    t = time.perf_counter()
+    changed2 = server._reconcile_profile_llm_for_user(prof, user_id, ws_id)
+    print(f"reconcile_repeat_ms={ms(t)} changed={changed2}")
+
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/workframe-api/time-warm.py

@@ -0,0 +1,107 @@
+#!/usr/bin/env python3
+"""Warm-path timings: model save API return + bind + first stream token."""
+from __future__ import annotations
+
+import json
+import sqlite3
+import sys
+import time
+import urllib.error
+import urllib.request
+
+import server
+
+
+def ms(t0: float) -> int:
+    return round((time.perf_counter() - t0) * 1000)
+
+
+def main() -> int:
+    conn = sqlite3.connect(str(server._workframe_db_path()))
+    conn.row_factory = sqlite3.Row
+    room = conn.execute(
+        """
+        SELECT id, workspace_id FROM rooms
+        WHERE room_type = 'direct' AND deleted_at IS NULL
+        ORDER BY updated_at DESC LIMIT 1
+        """,
+    ).fetchone()
+    user = conn.execute(
+        "SELECT id FROM users WHERE status = 'active' ORDER BY created_at LIMIT 1",
+    ).fetchone()
+    conn.close()
+    if not room or not user:
+        print("no room/user", file=sys.stderr)
+        return 1
+
+    uid = str(user["id"])
+    rid = str(room["id"])
+    ws = str(room["workspace_id"])
+    prof = server._resolve_chat_hermes_profile("mybusiness-agent", uid, rid, ws)
+    payload = {
+        "room_id": rid,
+        "workspace_id": ws,
+        "source_id": "warm",
+        "client_id": "warm",
+        "binding_version": 2,
+    }
+    print(f"profile={prof} healthy={server._profile_api_healthy(prof)}")
+
+    t = time.perf_counter()
+    result = server.hermes_model_set(
+        prof, "gpt-5.4-medium", user_id=uid, workspace_id=ws, billing_provider="codex",
+    )
+    print(f"model_set_ms={ms(t)} ok={result.get('ok')}")
+
+    time.sleep(0.5)
+    t = time.perf_counter()
+    session = server.profile_chat_session("", payload, user_id=uid)
+    sid = str(session.get("session_id") or "")
+    print(f"bind_ms={ms(t)} session={sid[:28]}")
+
+    t = time.perf_counter()
+    server.profile_chat_session("", payload, user_id=uid)
+    print(f"bind_repeat_ms={ms(t)}")
+
+    for i in range(2):
+        t = time.perf_counter()
+        server._reconcile_profile_llm_for_user(prof, uid, ws)
+        print(f"reconcile_cached_{i}_ms={ms(t)}")
+
+    t = time.perf_counter()
+    server.profile_chat_session("", payload, user_id=uid)
+    print(f"bind_cached_ms={ms(t)}")
+
+    port = server._profile_api_port(prof)
+    key = server._profile_api_key(prof)
+    body = json.dumps(server._profile_turn_payload(prof, "Reply with exactly: pong", rid)).encode()
+    url = f"http://gateway:{port}/api/sessions/{sid}/chat/stream"
+    req = urllib.request.Request(
+        url,
+        data=body,
+        headers={"Authorization": f"Bearer {key}", "Content-Type": "application/json"},
+        method="POST",
+    )
+    t = time.perf_counter()
+    first_ms = None
+    try:
+        with urllib.request.urlopen(req, timeout=120) as resp:
+            while True:
+                chunk = resp.read(4096)
+                if not chunk:
+                    break
+                if first_ms is None and b"data:" in chunk:
+                    first_ms = ms(t)
+                    print(f"first_upstream_chunk_ms={first_ms} sample={chunk[:120]!r}")
+                    break
+    except urllib.error.HTTPError as exc:
+        print(f"stream_http_error={exc.code} body={exc.read()[:200]!r}")
+        return 1
+    if first_ms is None:
+        print("no_stream_chunk")
+        return 1
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/workframe-ui/public/assets/{arc-DjpS9a2b.js → arc-B0OFRGmJ.js}

@@ -1 +1 @@
-import{n as e,t}from"./path-BWPyau1x.js";import{a as n,c as r,d as i,f as a,i as o,l as s,m as c,n as l,o as u,p as d,r as f,u as p}from"./dist-CPbiDkEZ.js";function m(e){return e.innerRadius}function h(e){return e.outerRadius}function g(e){return e.startAngle}function _(e){return e.endAngle}function v(e){return e&&e.padAngle}function y(e,t,n,r,i,a,o,s){var c=n-e,l=r-t,u=o-i,d=s-a,f=d*c-u*l;if(!(f*f<1e-12))return f=(u*(t-a)-d*(e-i))/f,[e+f*c,t+f*l]}function b(e,t,n,r,i,a,o){var c=e-n,l=t-r,u=(o?a:-a)/d(c*c+l*l),f=u*l,p=-u*c,m=e+f,h=t+p,g=n+f,_=r+p,v=(m+g)/2,y=(h+_)/2,b=g-m,x=_-h,S=b*b+x*x,C=i-a,w=m*_-g*h,T=(x<0?-1:1)*d(s(0,C*C*S-w*w)),E=(w*x-b*T)/S,D=(-w*b-x*T)/S,O=(w*x+b*T)/S,k=(-w*b+x*T)/S,A=E-v,j=D-y,M=O-v,N=k-y;return A*A+j*j>M*M+N*N&&(E=O,D=k),{cx:E,cy:D,x01:-f,y01:-p,x11:E*(i/C-1),y11:D*(i/C-1)}}function x(){var s=m,x=h,S=e(0),C=null,w=g,T=_,E=v,D=null,O=t(k);function k(){var e,t,m=+s.apply(this,arguments),h=+x.apply(this,arguments),g=w.apply(this,arguments)-r,_=T.apply(this,arguments)-r,v=l(_-g),k=_>g;if(D||=e=O(),h<m&&(t=h,h=m,m=t),!(h>1e-12))D.moveTo(0,0);else if(v>c-1e-12)D.moveTo(h*u(g),h*a(g)),D.arc(0,0,h,g,_,!k),m>1e-12&&(D.moveTo(m*u(_),m*a(_)),D.arc(0,0,m,_,g,k));else{var A=g,j=_,M=g,N=_,P=v,F=v,I=E.apply(this,arguments)/2,L=I>1e-12&&(C?+C.apply(this,arguments):d(m*m+h*h)),R=p(l(h-m)/2,+S.apply(this,arguments)),z=R,B=R,V,H;if(L>1e-12){var U=o(L/m*a(I)),W=o(L/h*a(I));(P-=U*2)>1e-12?(U*=k?1:-1,M+=U,N-=U):(P=0,M=N=(g+_)/2),(F-=W*2)>1e-12?(W*=k?1:-1,A+=W,j-=W):(F=0,A=j=(g+_)/2)}var G=h*u(A),K=h*a(A),q=m*u(N),J=m*a(N);if(R>1e-12){var Y=h*u(j),X=h*a(j),Z=m*u(M),Q=m*a(M),$;if(v<i)if($=y(G,K,Z,Q,Y,X,q,J)){var ee=G-$[0],te=K-$[1],ne=Y-$[0],re=X-$[1],ie=1/a(f((ee*ne+te*re)/(d(ee*ee+te*te)*d(ne*ne+re*re)))/2),ae=d($[0]*$[0]+$[1]*$[1]);z=p(R,(m-ae)/(ie-1)),B=p(R,(h-ae)/(ie+1))}else z=B=0}F>1e-12?B>1e-12?(V=b(Z,Q,G,K,h,B,k),H=b(Y,X,q,J,h,B,k),D.moveTo(V.cx+V.x01,V.cy+V.y01),B<R?D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,h,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),!k),D.arc(H.cx,H.cy,B,n(H.y11,H.x11),n(H.y01,H.x01),!k))):(D.moveTo(G,K),D.arc(0,0,h,A,j,!k)):D.moveTo(G,K),!(m>1e-12)||!(P>1e-12)?D.lineTo(q,J):z>1e-12?(V=b(q,J,Y,X,m,-z,k),H=b(G,K,Z,Q,m,-z,k),D.lineTo(V.cx+V.x01,V.cy+V.y01),z<R?D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,m,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),k),D.arc(H.cx,H.cy,z,n(H.y11,H.x11),n(H.y01,H.x01),!k))):D.arc(0,0,m,N,M,k)}if(D.closePath(),e)return D=null,e+``||null}return k.centroid=function(){var e=(+s.apply(this,arguments)+ +x.apply(this,arguments))/2,t=(+w.apply(this,arguments)+ +T.apply(this,arguments))/2-i/2;return[u(t)*e,a(t)*e]},k.innerRadius=function(t){return arguments.length?(s=typeof t==`function`?t:e(+t),k):s},k.outerRadius=function(t){return arguments.length?(x=typeof t==`function`?t:e(+t),k):x},k.cornerRadius=function(t){return arguments.length?(S=typeof t==`function`?t:e(+t),k):S},k.padRadius=function(t){return arguments.length?(C=t==null?null:typeof t==`function`?t:e(+t),k):C},k.startAngle=function(t){return arguments.length?(w=typeof t==`function`?t:e(+t),k):w},k.endAngle=function(t){return arguments.length?(T=typeof t==`function`?t:e(+t),k):T},k.padAngle=function(t){return arguments.length?(E=typeof t==`function`?t:e(+t),k):E},k.context=function(e){return arguments.length?(D=e??null,k):D},k}export{x as t};
+import{n as e,t}from"./path-BWPyau1x.js";import{a as n,c as r,d as i,f as a,i as o,l as s,m as c,n as l,o as u,p as d,r as f,u as p}from"./dist-Cz2turIT.js";function m(e){return e.innerRadius}function h(e){return e.outerRadius}function g(e){return e.startAngle}function _(e){return e.endAngle}function v(e){return e&&e.padAngle}function y(e,t,n,r,i,a,o,s){var c=n-e,l=r-t,u=o-i,d=s-a,f=d*c-u*l;if(!(f*f<1e-12))return f=(u*(t-a)-d*(e-i))/f,[e+f*c,t+f*l]}function b(e,t,n,r,i,a,o){var c=e-n,l=t-r,u=(o?a:-a)/d(c*c+l*l),f=u*l,p=-u*c,m=e+f,h=t+p,g=n+f,_=r+p,v=(m+g)/2,y=(h+_)/2,b=g-m,x=_-h,S=b*b+x*x,C=i-a,w=m*_-g*h,T=(x<0?-1:1)*d(s(0,C*C*S-w*w)),E=(w*x-b*T)/S,D=(-w*b-x*T)/S,O=(w*x+b*T)/S,k=(-w*b+x*T)/S,A=E-v,j=D-y,M=O-v,N=k-y;return A*A+j*j>M*M+N*N&&(E=O,D=k),{cx:E,cy:D,x01:-f,y01:-p,x11:E*(i/C-1),y11:D*(i/C-1)}}function x(){var s=m,x=h,S=e(0),C=null,w=g,T=_,E=v,D=null,O=t(k);function k(){var e,t,m=+s.apply(this,arguments),h=+x.apply(this,arguments),g=w.apply(this,arguments)-r,_=T.apply(this,arguments)-r,v=l(_-g),k=_>g;if(D||=e=O(),h<m&&(t=h,h=m,m=t),!(h>1e-12))D.moveTo(0,0);else if(v>c-1e-12)D.moveTo(h*u(g),h*a(g)),D.arc(0,0,h,g,_,!k),m>1e-12&&(D.moveTo(m*u(_),m*a(_)),D.arc(0,0,m,_,g,k));else{var A=g,j=_,M=g,N=_,P=v,F=v,I=E.apply(this,arguments)/2,L=I>1e-12&&(C?+C.apply(this,arguments):d(m*m+h*h)),R=p(l(h-m)/2,+S.apply(this,arguments)),z=R,B=R,V,H;if(L>1e-12){var U=o(L/m*a(I)),W=o(L/h*a(I));(P-=U*2)>1e-12?(U*=k?1:-1,M+=U,N-=U):(P=0,M=N=(g+_)/2),(F-=W*2)>1e-12?(W*=k?1:-1,A+=W,j-=W):(F=0,A=j=(g+_)/2)}var G=h*u(A),K=h*a(A),q=m*u(N),J=m*a(N);if(R>1e-12){var Y=h*u(j),X=h*a(j),Z=m*u(M),Q=m*a(M),$;if(v<i)if($=y(G,K,Z,Q,Y,X,q,J)){var ee=G-$[0],te=K-$[1],ne=Y-$[0],re=X-$[1],ie=1/a(f((ee*ne+te*re)/(d(ee*ee+te*te)*d(ne*ne+re*re)))/2),ae=d($[0]*$[0]+$[1]*$[1]);z=p(R,(m-ae)/(ie-1)),B=p(R,(h-ae)/(ie+1))}else z=B=0}F>1e-12?B>1e-12?(V=b(Z,Q,G,K,h,B,k),H=b(Y,X,q,J,h,B,k),D.moveTo(V.cx+V.x01,V.cy+V.y01),B<R?D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,B,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,h,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),!k),D.arc(H.cx,H.cy,B,n(H.y11,H.x11),n(H.y01,H.x01),!k))):(D.moveTo(G,K),D.arc(0,0,h,A,j,!k)):D.moveTo(G,K),!(m>1e-12)||!(P>1e-12)?D.lineTo(q,J):z>1e-12?(V=b(q,J,Y,X,m,-z,k),H=b(G,K,Z,Q,m,-z,k),D.lineTo(V.cx+V.x01,V.cy+V.y01),z<R?D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(H.y01,H.x01),!k):(D.arc(V.cx,V.cy,z,n(V.y01,V.x01),n(V.y11,V.x11),!k),D.arc(0,0,m,n(V.cy+V.y11,V.cx+V.x11),n(H.cy+H.y11,H.cx+H.x11),k),D.arc(H.cx,H.cy,z,n(H.y11,H.x11),n(H.y01,H.x01),!k))):D.arc(0,0,m,N,M,k)}if(D.closePath(),e)return D=null,e+``||null}return k.centroid=function(){var e=(+s.apply(this,arguments)+ +x.apply(this,arguments))/2,t=(+w.apply(this,arguments)+ +T.apply(this,arguments))/2-i/2;return[u(t)*e,a(t)*e]},k.innerRadius=function(t){return arguments.length?(s=typeof t==`function`?t:e(+t),k):s},k.outerRadius=function(t){return arguments.length?(x=typeof t==`function`?t:e(+t),k):x},k.cornerRadius=function(t){return arguments.length?(S=typeof t==`function`?t:e(+t),k):S},k.padRadius=function(t){return arguments.length?(C=t==null?null:typeof t==`function`?t:e(+t),k):C},k.startAngle=function(t){return arguments.length?(w=typeof t==`function`?t:e(+t),k):w},k.endAngle=function(t){return arguments.length?(T=typeof t==`function`?t:e(+t),k):T},k.padAngle=function(t){return arguments.length?(E=typeof t==`function`?t:e(+t),k):E},k.context=function(e){return arguments.length?(D=e??null,k):D},k}export{x as t};

package/workframe-ui/public/assets/architecture-7EHR7CIX-Dwwi9yA0.js

@@ -0,0 +1 @@
+import"./chunk-NNHCCRGN-DlpIbxXb.js";import{x as e}from"./mermaid-parser.core-C_jMeF0a.js";export{e as createArchitectureServices};