crewly 1.14.1 → 1.15.0

package/dist/backend/backend/src/services/agent/oauth-relogin-monitor.service.d.ts

@@ -17,6 +17,7 @@
  */
 import type { RuntimeType } from '../../constants.js';
 import type { EventBusService } from '../event-bus/event-bus.service.js';
+import type { EnqueueMessageInput } from '../../types/messaging.types.js';
 /**
  * URL capture mode — active after /login is sent, waiting for OAuth URL.
  */
@@ -61,6 +62,65 @@ export interface OAuthUrlEventPayload {
     /** OAuth URL that the user needs to visit */
     url: string;
 }
+/**
+ * What the monitor extracted from a sign-in screen.
+ */
+export interface LoginRequiredDetection {
+    /** Login URL, or null when the screen names no URL (e.g. a bare "Sign in with ChatGPT") */
+    url: string | null;
+    /** Device / authorization code (e.g. `FBVZ-MJHKK`), or null for browser-callback flows */
+    code: string | null;
+}
+/**
+ * A session currently waiting on a human sign-in. Held in memory only —
+ * it describes the live screen, and a stale flag after restart would mislead.
+ */
+export interface LoginRequiredInfo extends LoginRequiredDetection {
+    /** PTY session name */
+    sessionName: string;
+    /** Runtime type when known (unmonitored sessions found by the sweep have none) */
+    runtimeType: RuntimeType | null;
+    /** ISO timestamp of first detection for this url/code */
+    detectedAt: string;
+    /** ISO timestamp the owner was last notified for this url/code */
+    notifiedAt: string | null;
+}
+/**
+ * Minimal orchestrator message-queue surface the monitor needs to push an
+ * owner-facing `[NOTIFY]` notice. Structural so tests can pass a stub.
+ */
+export interface LoginNoticeQueueLike {
+    enqueue(input: EnqueueMessageInput): unknown;
+}
+/**
+ * Minimal Slack surface the monitor needs. Structural so the Slack service
+ * (a heavy module with its own dependency graph) can be lazily provided.
+ */
+export interface LoginNoticeSlackLike {
+    isConnected(): boolean;
+    sendNotification(notification: {
+        type: 'agent_error';
+        title: string;
+        message: string;
+        urgency: 'high';
+        timestamp: string;
+        metadata?: {
+            agentId?: string;
+        };
+    }): Promise<void>;
+}
+/**
+ * Minimal chat surface (terminal gateway + chat-v2) for surfacing the notice
+ * in the orchestrator conversation the owner is looking at.
+ */
+export interface LoginNoticeChatLike {
+    /** Conversation the owner currently has open, if any */
+    getActiveConversationId(): string | null;
+    /** Record a system turn in that conversation */
+    recordSystemTurn(conversationId: string, content: string): void;
+    /** Broadcast a WebSocket system notification for a toast/banner */
+    broadcastSystemNotification(message: string, type: 'warning'): void;
+}
 /**
  * Monitors PTY sessions for OAuth token expiry errors and orchestrates the
  * full OAuth re-authentication flow including URL capture and event notification.
@@ -84,7 +144,133 @@ export declare class OAuthReloginMonitorService {
     private eventBusService;
     /** Callback invoked when an OAuth URL is captured (for orchestrator/Slack integration) */
     private onOAuthUrlCallback;
+    /** Sessions currently waiting on a human sign-in, keyed by session name */
+    private loginRequired;
+    /** Orchestrator message queue for the `[NOTIFY]` notice (optional) */
+    private noticeQueue;
+    /** Slack provider (lazy so the Slack module graph is not loaded at import time) */
+    private slackProvider;
+    /** Chat provider for the active orchestrator conversation (optional) */
+    private chatProvider;
+    /** Periodic screen sweep timer (started by `start()`) */
+    private sweepTimer;
     private constructor();
+    /**
+     * Provide the orchestrator message queue used to push the owner-facing
+     * `[NOTIFY]` login notice. Skipped for the orchestrator's own session
+     * (it cannot process its queue while stuck on a sign-in screen).
+     *
+     * @param queue - Message queue (structural — the real MessageQueueService fits)
+     */
+    setNoticeQueue(queue: LoginNoticeQueueLike | null): void;
+    /**
+     * Provide a lazy Slack accessor. Resolved on each notification so a Slack
+     * connection established after boot is still used.
+     *
+     * @param provider - Returns the Slack service, or null when unavailable
+     */
+    setSlackProvider(provider: (() => Promise<LoginNoticeSlackLike | null>) | null): void;
+    /**
+     * Provide a chat accessor for surfacing the notice in the owner's open
+     * orchestrator conversation and as a WebSocket banner.
+     *
+     * @param provider - Returns the chat surface, or null when unavailable
+     */
+    setChatProvider(provider: (() => LoginNoticeChatLike | null) | null): void;
+    /**
+     * Start the boot-level periodic sweep. Every `SWEEP_INTERVAL_MS` the
+     * captured screen of every live PTY session is checked for a sign-in
+     * screen — including sessions that never reached `startMonitoring`
+     * because runtime-ready detection timed out on the login screen — and
+     * flags are cleared once the screen moves past login.
+     *
+     * @param intervalMs - Sweep cadence (defaults to LOGIN_REQUIRED_CONSTANTS.SWEEP_INTERVAL_MS)
+     */
+    start(intervalMs?: number): void;
+    /**
+     * Stop the periodic sweep (monitoring subscriptions are left alone).
+     */
+    stop(): void;
+    /**
+     * Sessions currently flagged as waiting on a human sign-in.
+     *
+     * @returns Snapshot of all pending login records
+     */
+    getAllLoginRequired(): LoginRequiredInfo[];
+    /**
+     * The pending login record for one session, if any.
+     *
+     * @param sessionName - PTY session name
+     * @returns The record, or undefined when the session is not waiting on login
+     */
+    getLoginRequired(sessionName: string): LoginRequiredInfo | undefined;
+    /**
+     * Clear a session's login-required flag (login completed, session gone,
+     * or code submitted).
+     *
+     * @param sessionName - PTY session name
+     * @returns true when a flag was cleared
+     */
+    clearLoginRequired(sessionName: string): boolean;
+    /**
+     * Inspect screen text for a sign-in screen and extract the login URL and
+     * device code. Runtime-agnostic: the pattern sets in
+     * `LOGIN_REQUIRED_PATTERN_SETS` cover Codex (device-code and browser
+     * flows), Claude Code and Gemini CLI. Plain substring matching — no regex
+     * on untrusted length.
+     *
+     * @param screen - Captured terminal text (ANSI is stripped defensively)
+     * @returns The extracted url/code, or null when no sign-in screen is showing
+     *
+     * @example
+     * ```typescript
+     * monitor.detectLoginRequired(
+     *   'Go to https://auth.openai.com/codex/device and enter code FBVZ-MJHKK'
+     * );
+     * // → { url: 'https://auth.openai.com/codex/device', code: 'FBVZ-MJHKK' }
+     * ```
+     */
+    detectLoginRequired(screen: string): LoginRequiredDetection | null;
+    /**
+     * Check one session's current screen for a sign-in state, flag/notify on
+     * a new detection, and clear the flag once login is done.
+     *
+     * @param sessionName - PTY session name
+     * @param screen - Captured screen text
+     * @param runtimeType - Runtime type when known
+     */
+    inspectScreen(sessionName: string, screen: string, runtimeType?: RuntimeType | null): void;
+    /**
+     * Sweep every live PTY session's screen for a sign-in state.
+     * Safe to call at any time; errors are swallowed per session.
+     */
+    sweepAllSessions(): void;
+    /**
+     * Push the owner-facing notice everywhere a human might see it: main log,
+     * event bus, the orchestrator queue (`[NOTIFY]`, skipped when the
+     * orchestrator itself is the one stuck), the open chat conversation +
+     * WebSocket banner, and Slack when connected.
+     *
+     * @param info - The pending login record
+     */
+    private notifyLoginRequired;
+    /**
+     * Human-readable notice: "Agent X needs you to sign in: <url> code <XXXX-XXXXX>".
+     *
+     * @param info - The pending login record
+     * @returns The notice text
+     */
+    private formatLoginNotice;
+    /**
+     * Find a device/authorization code such as `FBVZ-MJHKK`: an upper-case
+     * alphanumeric head of `DEVICE_CODE_HEAD_LEN` chars, a dash, and a tail of
+     * `DEVICE_CODE_TAIL_MIN_LEN`..`DEVICE_CODE_TAIL_MAX_LEN` chars, delimited by
+     * non-alphanumerics. Linear scan, no regex.
+     *
+     * @param text - Screen text
+     * @returns The first code found, or null
+     */
+    private extractDeviceCode;
     /**
      * Get the singleton instance.
      *
@@ -184,6 +370,17 @@ export declare class OAuthReloginMonitorService {
      * @returns The OAuth URL or null if not found
      */
     private extractOAuthUrl;
+    /**
+     * Extract the first `https://` URL from terminal output.
+     *
+     * @param buffer - Terminal output buffer
+     * @param requireOAuthPath - When true, the URL must contain a known
+     *   OAuth path segment (`/oauth`, `/authorize`, `/login`, `/auth`,
+     *   `/consent`, `/device`); when false any https URL qualifies (sign-in
+     *   screens name plain landing pages too)
+     * @returns The URL or null if not found
+     */
+    private extractHttpsUrl;
     /**
      * Emit an `agent:oauth_url` event via the EventBus and invoke the callback.
      *

package/dist/backend/backend/src/services/agent/oauth-relogin-monitor.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth-relogin-monitor.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/agent/oauth-relogin-monitor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAaH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAOzE;;GAEG;AACH,KAAK,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,WAAW,EAAE,WAAW,CAAC;IACzB,mDAAmD;IACnD,WAAW,EAAE,MAAM,IAAI,CAAC;IACxB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,8DAA8D;IAC9D,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,4BAA4B;IAC5B,aAAa,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IACpD,+BAA+B;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,mBAAmB,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IAC1D,sDAAsD;IACtD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;CACZ;AAMD;;;;;;;;;;;;;GAaG;AACH,qBAAa,0BAA0B;IACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA2C;IAClE,OAAO,CAAC,MAAM,CAAkB;IAEhC,mCAAmC;IACnC,OAAO,CAAC,QAAQ,CAA6C;IAE7D,+CAA+C;IAC/C,OAAO,CAAC,eAAe,CAAgC;IAEvD,0FAA0F;IAC1F,OAAO,CAAC,kBAAkB,CAA6D;IAEvF,OAAO;IAIP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,0BAA0B;IAOhD;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAO5B;;;;OAIG;IACH,kBAAkB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAInD;;;;;OAKG;IACH,qBAAqB,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIjF;;;;;;;;;OASG;IACH,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAiClE;;;;;;;;OAQG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI;IA+CpE;;;;OAIG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAmBzC;;;;;OAKG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI5D;;OAEG;IACH,OAAO,IAAI,IAAI;IAQf;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU;IA0DlB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAmCzB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IAsCvB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAsCzB;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;OAOG;YACW,cAAc;CA8F5B"}
+{"version":3,"file":"oauth-relogin-monitor.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/agent/oauth-relogin-monitor.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAgBH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mCAAmC,CAAC;AAEzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gCAAgC,CAAC;AAM1E;;GAEG;AACH,KAAK,WAAW,GAAG,MAAM,GAAG,WAAW,CAAC;AAExC;;GAEG;AACH,MAAM,WAAW,iBAAiB;IACjC,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,2DAA2D;IAC3D,WAAW,EAAE,WAAW,CAAC;IACzB,mDAAmD;IACnD,WAAW,EAAE,MAAM,IAAI,CAAC;IACxB,yCAAyC;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,wCAAwC;IACxC,SAAS,EAAE,MAAM,CAAC;IAClB,4CAA4C;IAC5C,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,8DAA8D;IAC9D,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,4BAA4B;IAC5B,aAAa,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IACpD,+BAA+B;IAC/B,WAAW,EAAE,WAAW,CAAC;IACzB,iFAAiF;IACjF,aAAa,EAAE,MAAM,CAAC;IACtB,4EAA4E;IAC5E,mBAAmB,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,GAAG,IAAI,CAAC;IAC1D,sDAAsD;IACtD,eAAe,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACpC,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,GAAG,EAAE,MAAM,CAAC;CACZ;AAED;;GAEG;AACH,MAAM,WAAW,sBAAsB;IACtC,2FAA2F;IAC3F,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,0FAA0F;IAC1F,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAkB,SAAQ,sBAAsB;IAChE,uBAAuB;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,kFAAkF;IAClF,WAAW,EAAE,WAAW,GAAG,IAAI,CAAC;IAChC,yDAAyD;IACzD,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC,OAAO,CAAC,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC;CAC7C;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACpC,WAAW,IAAI,OAAO,CAAC;IACvB,gBAAgB,CAAC,YAAY,EAAE;QAC9B,IAAI,EAAE,aAAa,CAAC;QACpB,KAAK,EAAE,MAAM,CAAC;QACd,OAAO,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,CAAC;QAChB,SAAS,EAAE,MAAM,CAAC;QAClB,QAAQ,CAAC,EAAE;YAAE,OAAO,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAChC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAClB;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IACnC,wDAAwD;IACxD,uBAAuB,IAAI,MAAM,GAAG,IAAI,CAAC;IACzC,gDAAgD;IAChD,gBAAgB,CAAC,cAAc,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChE,mEAAmE;IACnE,2BAA2B,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;CACpE;AAMD;;;;;;;;;;;;;GAaG;AACH,qBAAa,0BAA0B;IACtC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA2C;IAClE,OAAO,CAAC,MAAM,CAAkB;IAEhC,mCAAmC;IACnC,OAAO,CAAC,QAAQ,CAA6C;IAE7D,+CAA+C;IAC/C,OAAO,CAAC,eAAe,CAAgC;IAEvD,0FAA0F;IAC1F,OAAO,CAAC,kBAAkB,CAA6D;IAEvF,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAA6C;IAElE,sEAAsE;IACtE,OAAO,CAAC,WAAW,CAAqC;IAExD,mFAAmF;IACnF,OAAO,CAAC,aAAa,CAA6D;IAElF,wEAAwE;IACxE,OAAO,CAAC,YAAY,CAAmD;IAEvE,yDAAyD;IACzD,OAAO,CAAC,UAAU,CAA+C;IAEjE,OAAO;IAIP;;;;;;OAMG;IACH,cAAc,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,GAAG,IAAI;IAIxD;;;;;OAKG;IACH,gBAAgB,CAAC,QAAQ,EAAE,CAAC,MAAM,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,IAAI;IAIrF;;;;;OAKG;IACH,eAAe,CAAC,QAAQ,EAAE,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI;IAI1E;;;;;;;;OAQG;IACH,KAAK,CAAC,UAAU,GAAE,MAAmD,GAAG,IAAI;IAW5E;;OAEG;IACH,IAAI,IAAI,IAAI;IAOZ;;;;OAIG;IACH,mBAAmB,IAAI,iBAAiB,EAAE;IAI1C;;;;;OAKG;IACH,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAIpE;;;;;;OAMG;IACH,kBAAkB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAQhD;;;;;;;;;;;;;;;;;OAiBG;IACH,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,sBAAsB,GAAG,IAAI;IAgBlE;;;;;;;OAOG;IACH,aAAa,CAAC,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAE,WAAW,GAAG,IAAW,GAAG,IAAI;IA8ChG;;;OAGG;IACH,gBAAgB,IAAI,IAAI;IA+BxB;;;;;;;OAOG;YACW,mBAAmB;IAmGjC;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAQzB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IA0BzB;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,0BAA0B;IAOhD;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAO5B;;;;OAIG;IACH,kBAAkB,CAAC,QAAQ,EAAE,eAAe,GAAG,IAAI;IAInD;;;;;OAKG;IACH,qBAAqB,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,IAAI,GAAG,IAAI;IAIjF;;;;;;;;;OASG;IACH,MAAM,CAAC,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO;IAkClE;;;;;;;;OAQG;IACH,eAAe,CAAC,WAAW,EAAE,MAAM,EAAE,WAAW,EAAE,WAAW,GAAG,IAAI;IAyDpE;;;;OAIG;IACH,cAAc,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI;IAmBzC;;;;;OAKG;IACH,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO;IAI1C;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS;IAI5D;;OAEG;IACH,OAAO,IAAI,IAAI;IAUf;;;;;;;;OAQG;IACH,OAAO,CAAC,UAAU;IA4ElB;;;;;;;;OAQG;IACH,OAAO,CAAC,iBAAiB;IAmCzB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IAIvB;;;;;;;;;OASG;IACH,OAAO,CAAC,eAAe;IA2CvB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAsCzB;;;;;;;;;OASG;IACH,OAAO,CAAC,gBAAgB;IAiBxB;;;;;;;OAOG;YACW,cAAc;CA8F5B"}