crewly 1.20.147 → 1.20.149

package/dist/backend/backend/src/services/cloud/cloud-disconnect-notice.utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-disconnect-notice.utils.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-disconnect-notice.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,6CAA6C;AAC7C,MAAM,MAAM,gBAAgB,GAAG,MAAM,GAAG,aAAa,CAAC;AAEtD,4CAA4C;AAC5C,MAAM,WAAW,eAAe;IAC/B,sFAAsF;IACtF,QAAQ,EAAE,OAAO,CAAC;IAClB,8BAA8B;IAC9B,MAAM,EAAE,eAAe,CAAC;IACxB,6EAA6E;IAC7E,gBAAgB,EAAE,MAAM,CAAC;IACzB,qBAAqB;IACrB,GAAG,EAAE,MAAM,CAAC;IACZ,oEAAoE;IACpE,WAAW,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,iBAAiB,GAC1B;IAAE,MAAM,EAAE,YAAY,GAAG,WAAW,GAAG,SAAS,CAAA;CAAE,GAClD;IAAE,MAAM,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,iBAAiB,CAO5E;AAED,6EAA6E;AAC7E,MAAM,WAAW,qBAAqB;IACrC,+CAA+C;IAC/C,gBAAgB,EAAE,MAAM,CAAC;IACzB,uBAAuB;IACvB,MAAM,EAAE,gBAAgB,CAAC;IACzB,6DAA6D;IAC7D,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8CAA8C;IAC9C,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8EAA8E;IAC9E,iBAAiB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,qBAAqB,GAAG,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAKxG;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAGlE;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAIlD;AAQD,iDAAiD;AACjD,MAAM,WAAW,qBAAqB;IACrC,0BAA0B;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU;IACV,MAAM,EAAE,gBAAgB,CAAC;IACzB,+BAA+B;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,iFAAiF;IACjF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,iDAAiD;IACjD,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,qBAAqB,GAAG,MAAM,CAY5E;AAED,0CAA0C;AAC1C,eAAO,MAAM,kBAAkB,2GAA2B,CAAC;AAE3D;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAEhF;AAED;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,GAAG,IAAI,CAgB1E;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,qBAAqB,GAAG,IAAI,CAGjF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAMnD"}

package/dist/backend/backend/src/services/cloud/cloud-disconnect-notice.utils.js

@@ -0,0 +1,176 @@
+/**
+ * Cloud disconnect notice — pure rules.
+ *
+ * Detection ({@link evaluateDisconnect}), the notice rate limit
+ * ({@link shouldNotify}), the owner-facing Chinese texts and the persisted
+ * state file. No timers, no network: {@link CloudDisconnectNoticeService}
+ * drives these.
+ *
+ * Background (2026-09-27): a second Mac stopped heart-beating to Crewly
+ * Cloud and never reconnected, while its agents kept posting to Slack with
+ * their own bot tokens. Inbound Slack only reaches a machine through Cloud →
+ * relay, so every DM to its agents queued in Cloud for hours and nobody was
+ * told.
+ *
+ * @module services/cloud/cloud-disconnect-notice.utils
+ */
+import * as fs from 'fs';
+import * as path from 'path';
+/**
+ * Decide whether this machine is disconnected from Cloud.
+ *
+ * Disconnected = signed in AND (sync is `auth_expired`, OR Cloud has not
+ * answered a request for `thresholdMs`). Never fires on a machine that was
+ * never signed in or was logged out on purpose — both leave no Cloud config.
+ * `connected` needs a real answer from Cloud, so a restart that has not
+ * reached Cloud yet reads `pending`, not `connected`.
+ *
+ * @param input - Sign-in, health, clock and threshold
+ * @returns The verdict
+ *
+ * @example
+ * ```ts
+ * evaluateDisconnect({ signedIn: true, health: { state: 'auth_expired', lastContactAt: t0, startedAt: t0, authRejected: true },
+ *   monitorStartedAt: t0, now: t0 + 60_000, thresholdMs: 900_000 });
+ * // { status: 'disconnected', reason: 'auth', since: t0 }
+ * ```
+ */
+export function evaluateDisconnect(input) {
+    const { signedIn, health, monitorStartedAt, now, thresholdMs } = input;
+    if (!signedIn)
+        return { status: 'signed_out' };
+    const since = health.lastContactAt ?? health.startedAt ?? monitorStartedAt;
+    if (health.state === 'auth_expired')
+        return { status: 'disconnected', reason: 'auth', since };
+    if (now - since < thresholdMs)
+        return { status: health.lastContactAt !== null ? 'connected' : 'pending' };
+    return { status: 'disconnected', reason: health.authRejected ? 'auth' : 'unreachable', since };
+}
+/**
+ * Whether a new notice may go out: none yet in this episode, or the last one
+ * is at least `repeatMs` old.
+ *
+ * @param state - Persisted state (null = no episode yet)
+ * @param now - Now (epoch ms)
+ * @param repeatMs - Minimum gap between notices
+ * @returns True when a notice may be sent
+ */
+export function shouldNotify(state, now, repeatMs) {
+    if (!state?.lastNotifiedAt)
+        return true;
+    const last = Date.parse(state.lastNotifiedAt);
+    if (Number.isNaN(last))
+        return true;
+    return now - last >= repeatMs;
+}
+/**
+ * Whether the notice is switched on (`CREWLY_CLOUD_DISCONNECT_NOTICE`).
+ *
+ * @param value - The env value
+ * @returns False for `0`, `false`, `off`, `no`; true otherwise (default on)
+ */
+export function isNoticeEnabled(value) {
+    if (value === undefined)
+        return true;
+    return !['0', 'false', 'off', 'no'].includes(value.trim().toLowerCase());
+}
+/**
+ * Local time in the owner's reading format, e.g. `9月27日 23:38`.
+ *
+ * @param ms - Epoch ms
+ * @returns Local month/day hour:minute
+ */
+export function formatLocalTime(ms) {
+    const d = new Date(ms);
+    const pad = (n) => String(n).padStart(2, '0');
+    return `${d.getMonth() + 1}月${d.getDate()}日 ${pad(d.getHours())}:${pad(d.getMinutes())}`;
+}
+/** Owner-facing reason text. */
+const REASON_TEXT = {
+    auth: '登录已过期',
+    unreachable: '网络连不上 Cloud',
+};
+/**
+ * The notice DMed to the owner.
+ *
+ * @param input - Device, reason, start time and the login link (if any)
+ * @returns Plain text (the sender escapes it for Slack)
+ *
+ * @example
+ * ```ts
+ * composeDisconnectNotice({ deviceName: 'iriss-air.lan', reason: 'auth', since, loginUrl: 'https://crewlyai.com/cloud/pair?code=ABCD-2345' });
+ * ```
+ */
+export function composeDisconnectNotice(input) {
+    const head = `Crewly（本机：${input.deviceName}）连不上 Crewly Cloud 了（${REASON_TEXT[input.reason]}，从 ${formatLocalTime(input.since)} 起）。` +
+        '发给这台机器上 agent 的 Slack 消息会在 Cloud 排队，收不到。';
+    if (input.loginUrl) {
+        const code = input.userCode ? `，核对码 ${input.userCode}` : '';
+        return `${head}点这里重新登录：${input.loginUrl}（在手机上点一下即可${code}），登录后排队的消息会自动送到。`;
+    }
+    if (input.reason === 'auth') {
+        return `${head}暂时拿不到重新登录的链接，Crewly 会继续重试，拿到后会更新这条消息。`;
+    }
+    return `${head}Crewly 会继续自动重连，连上后排队的消息会自动送到。`;
+}
+/** Follow-up once the machine is back. */
+export const RECONNECTED_NOTICE = '已重新连上 Cloud，排队的消息正在送达。';
+/**
+ * Brief note when a re-login did not finish.
+ *
+ * @param detail - What happened (e.g. 登录被拒绝)
+ * @param retryAt - When the next link goes out (epoch ms)
+ * @returns The note
+ */
+export function composeLoginFailedNotice(detail, retryAt) {
+    return `重新登录没有完成（${detail}）。Crewly 会在 ${formatLocalTime(retryAt)} 再发一次新链接。`;
+}
+/**
+ * Read the persisted state.
+ *
+ * @param file - State file
+ * @returns The state, or null when missing / unreadable
+ */
+export function readNoticeState(file) {
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        if (typeof parsed.episodeStartedAt !== 'string')
+            return null;
+        return {
+            episodeStartedAt: parsed.episodeStartedAt,
+            reason: parsed.reason === 'auth' ? 'auth' : 'unreachable',
+            lastNotifiedAt: typeof parsed.lastNotifiedAt === 'string' ? parsed.lastNotifiedAt : null,
+            ...(typeof parsed.channelId === 'string' ? { channelId: parsed.channelId } : {}),
+            ...(typeof parsed.messageTs === 'string' ? { messageTs: parsed.messageTs } : {}),
+            ...(typeof parsed.hasLink === 'boolean' ? { hasLink: parsed.hasLink } : {}),
+            ...(typeof parsed.loginBlockedUntil === 'string' ? { loginBlockedUntil: parsed.loginBlockedUntil } : {}),
+        };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Persist the state.
+ *
+ * @param file - State file
+ * @param state - State to write
+ */
+export function writeNoticeState(file, state) {
+    fs.mkdirSync(path.dirname(file), { recursive: true });
+    fs.writeFileSync(file, JSON.stringify(state, null, 2), 'utf-8');
+}
+/**
+ * Remove the state (episode over).
+ *
+ * @param file - State file
+ */
+export function clearNoticeState(file) {
+    try {
+        fs.unlinkSync(file);
+    }
+    catch {
+        // Already gone
+    }
+}
+//# sourceMappingURL=cloud-disconnect-notice.utils.js.map

package/dist/backend/backend/src/services/cloud/cloud-disconnect-notice.utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-disconnect-notice.utils.js","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-disconnect-notice.utils.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AA+B7B;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAsB;IACxD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,KAAK,CAAC;IACvE,IAAI,CAAC,QAAQ;QAAE,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IAC/C,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,IAAI,MAAM,CAAC,SAAS,IAAI,gBAAgB,CAAC;IAC3E,IAAI,MAAM,CAAC,KAAK,KAAK,cAAc;QAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC9F,IAAI,GAAG,GAAG,KAAK,GAAG,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC;IAC1G,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,EAAE,KAAK,EAAE,CAAC;AAChG,CAAC;AAoBD;;;;;;;;GAQG;AACH,MAAM,UAAU,YAAY,CAAC,KAAmC,EAAE,GAAW,EAAE,QAAgB;IAC9F,IAAI,CAAC,KAAK,EAAE,cAAc;QAAE,OAAO,IAAI,CAAC;IACxC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9C,IAAI,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,OAAO,GAAG,GAAG,IAAI,IAAI,QAAQ,CAAC;AAC/B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,KAAyB;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,CAAC,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,EAAU;IACzC,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,EAAE,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAG,CAAC,CAAC,QAAQ,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AAC1F,CAAC;AAED,gCAAgC;AAChC,MAAM,WAAW,GAAqC;IACrD,IAAI,EAAE,OAAO;IACb,WAAW,EAAE,aAAa;CAC1B,CAAC;AAgBF;;;;;;;;;;GAUG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA4B;IACnE,MAAM,IAAI,GACT,aAAa,KAAK,CAAC,UAAU,uBAAuB,WAAW,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,eAAe,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM;QACrH,0CAA0C,CAAC;IAC5C,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC;QACpB,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,OAAO,GAAG,IAAI,WAAW,KAAK,CAAC,QAAQ,aAAa,IAAI,kBAAkB,CAAC;IAC5E,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAC7B,OAAO,GAAG,IAAI,uCAAuC,CAAC;IACvD,CAAC;IACD,OAAO,GAAG,IAAI,+BAA+B,CAAC;AAC/C,CAAC;AAED,0CAA0C;AAC1C,MAAM,CAAC,MAAM,kBAAkB,GAAG,wBAAwB,CAAC;AAE3D;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc,EAAE,OAAe;IACvE,OAAO,YAAY,MAAM,eAAe,eAAe,CAAC,OAAO,CAAC,WAAW,CAAC;AAC7E,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY;IAC3C,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAmC,CAAC;QAC5F,IAAI,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC7D,OAAO;YACN,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;YACzC,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa;YACzD,cAAc,EAAE,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI;YACxF,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChF,GAAG,CAAC,OAAO,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3E,GAAG,CAAC,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxG,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAA4B;IAC1E,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtD,EAAE,CAAC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACjE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC5C,IAAI,CAAC;QACJ,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACR,eAAe;IAChB,CAAC;AACF,CAAC"}

package/dist/backend/backend/src/services/cloud/cloud-login-runner.d.ts

@@ -0,0 +1,106 @@
+/**
+ * Runs `crewly cloud login` in a PTY on the owner's behalf.
+ *
+ * Same pattern as the harness login broker (login-broker.service.ts): spawn
+ * the real login command in a wide PTY, normalize the screen, read the
+ * sign-in link and code off it, type the owner's reply in when the command
+ * asks for one, and report success / failure from the output and exit code.
+ * The CLI does the rest itself — device pairing with crewly-auth, saving
+ * `$CREWLY_HOME/cloud/config.json`, and `POST /api/cloud/connect` on this
+ * backend.
+ *
+ * Secrets: the device-code flow prints no token. A reply typed into the PTY
+ * (a pasted token in the `--paste` flow) is echoed by the terminal, so the
+ * screen is never logged or exposed — only the link, the code and the state.
+ *
+ * @module services/cloud/cloud-login-runner
+ */
+import type { BrokerPtySpawner } from '../harness/login-broker.service.js';
+/** Where a CLI login run stands. */
+export type CloudLoginState = 'starting' | 'awaiting_user' | 'verifying' | 'succeeded' | 'failed' | 'expired' | 'timed_out' | 'cancelled';
+/** Snapshot of a run (never contains the screen). */
+export interface CloudLoginSnapshot {
+    state: CloudLoginState;
+    /** Approve page with the code filled in */
+    url: string | null;
+    /** Code shown on the approve page */
+    userCode: string | null;
+    /** The CLI is waiting for typed input */
+    needsInput: boolean;
+    /** Short reason for a failure (from the CLI's ✗ line) */
+    message: string | null;
+}
+/** A live CLI login run. */
+export interface CloudLoginHandle {
+    /** Current snapshot */
+    get(): CloudLoginSnapshot;
+    /** Resolves once a link is shown, the run ends, or `timeoutMs` passes */
+    waitForLink(timeoutMs: number): Promise<CloudLoginSnapshot>;
+    /** Resolves when the run ends */
+    done: Promise<CloudLoginSnapshot>;
+    /** Type a reply followed by Enter */
+    input(text: string): void;
+    /** Kill the run */
+    cancel(): void;
+    /** Subscribe to changes */
+    onChange(listener: (snapshot: CloudLoginSnapshot) => void): void;
+}
+/** Dependencies (injectable for tests). */
+export interface CloudLoginRunnerDeps {
+    /** Node executable (defaults to the running one — never trust PATH) */
+    nodePath?: string;
+    /** CLI entry script (`<package>/dist/cli/cli/src/index.js`) */
+    cliEntry: string;
+    env?: NodeJS.ProcessEnv;
+    spawnPty?: BrokerPtySpawner;
+    timeoutMs?: number;
+}
+/**
+ * Pick the sign-in link off the screen: the approve page with the code filled
+ * in when present, else the first link.
+ *
+ * @param text - Normalized screen
+ * @param hyperlinks - OSC 8 link targets
+ * @returns The link, or null
+ */
+export declare function extractLoginUrl(text: string, hyperlinks?: string[]): string | null;
+/**
+ * Read the run's state off the screen.
+ *
+ * @param screenText - Normalized screen
+ * @param sinceInput - Normalized output after the last typed reply
+ * @param hyperlinks - OSC 8 link targets
+ * @returns Link, code, input prompt, success, expiry and the last ✗ line
+ */
+export declare function parseCloudLoginScreen(screenText: string, sinceInput: string, hyperlinks?: string[]): {
+    url: string | null;
+    userCode: string | null;
+    needsInput: boolean;
+    succeeded: boolean;
+    expired: boolean;
+    failure: string | null;
+};
+/**
+ * Environment for the CLI: the backend's own (CREWLY_HOME, CREWLY_CLOUD_URL
+ * carry over), no colours, and no browser on this machine.
+ *
+ * @param env - Source environment
+ * @returns String-only env map
+ */
+export declare function buildCloudLoginEnv(env: NodeJS.ProcessEnv): Record<string, string>;
+/**
+ * Start `crewly cloud login --no-browser` in a PTY.
+ *
+ * @param deps - CLI location and injectables
+ * @returns The run
+ * @throws Error when the PTY cannot be spawned
+ */
+export declare function startCloudLogin(deps: CloudLoginRunnerDeps): CloudLoginHandle;
+/**
+ * Whether a run has ended.
+ *
+ * @param state - Run state
+ * @returns True for a terminal state
+ */
+export declare function isCloudLoginFinished(state: CloudLoginState): boolean;
+//# sourceMappingURL=cloud-login-runner.d.ts.map

package/dist/backend/backend/src/services/cloud/cloud-login-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-login-runner.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-login-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAMH,OAAO,KAAK,EAAa,gBAAgB,EAAE,MAAM,oCAAoC,CAAC;AAItF,oCAAoC;AACpC,MAAM,MAAM,eAAe,GACxB,UAAU,GACV,eAAe,GACf,WAAW,GACX,WAAW,GACX,QAAQ,GACR,SAAS,GACT,WAAW,GACX,WAAW,CAAC;AAEf,qDAAqD;AACrD,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,eAAe,CAAC;IACvB,2CAA2C;IAC3C,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IACnB,qCAAqC;IACrC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,yCAAyC;IACzC,UAAU,EAAE,OAAO,CAAC;IACpB,yDAAyD;IACzD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,4BAA4B;AAC5B,MAAM,WAAW,gBAAgB;IAChC,uBAAuB;IACvB,GAAG,IAAI,kBAAkB,CAAC;IAC1B,yEAAyE;IACzE,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC5D,iCAAiC;IACjC,IAAI,EAAE,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClC,qCAAqC;IACrC,KAAK,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,mBAAmB;IACnB,MAAM,IAAI,IAAI,CAAC;IACf,2BAA2B;IAC3B,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,GAAG,IAAI,CAAC;CACjE;AAED,2CAA2C;AAC3C,MAAM,WAAW,oBAAoB;IACpC,uEAAuE;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,+DAA+D;IAC/D,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IACxB,QAAQ,CAAC,EAAE,gBAAgB,CAAC;IAC5B,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAiBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,MAAM,EAAO,GAAG,MAAM,GAAG,IAAI,CAItF;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CACpC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,MAAM,EAClB,UAAU,GAAE,MAAM,EAAO,GACvB;IAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,UAAU,EAAE,OAAO,CAAC;IAAC,SAAS,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,OAAO,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAWpI;AAaD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAUjF;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,oBAAoB,GAAG,gBAAgB,CAsH5E;AAED;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,eAAe,GAAG,OAAO,CAEpE"}

package/dist/backend/backend/src/services/cloud/cloud-login-runner.js

@@ -0,0 +1,238 @@
+/**
+ * Runs `crewly cloud login` in a PTY on the owner's behalf.
+ *
+ * Same pattern as the harness login broker (login-broker.service.ts): spawn
+ * the real login command in a wide PTY, normalize the screen, read the
+ * sign-in link and code off it, type the owner's reply in when the command
+ * asks for one, and report success / failure from the output and exit code.
+ * The CLI does the rest itself — device pairing with crewly-auth, saving
+ * `$CREWLY_HOME/cloud/config.json`, and `POST /api/cloud/connect` on this
+ * backend.
+ *
+ * Secrets: the device-code flow prints no token. A reply typed into the PTY
+ * (a pasted token in the `--paste` flow) is echoed by the terminal, so the
+ * screen is never logged or exposed — only the link, the code and the state.
+ *
+ * @module services/cloud/cloud-login-runner
+ */
+import * as os from 'os';
+import * as pty from 'node-pty';
+import { CLOUD_DISCONNECT_NOTICE_CONSTANTS } from '../../../../config/constants.js';
+import { normalizeTerminalOutput } from '../harness/login-rules.js';
+const C = CLOUD_DISCONNECT_NOTICE_CONSTANTS;
+/** Terminal states. */
+const TERMINAL = new Set(['succeeded', 'failed', 'expired', 'timed_out', 'cancelled']);
+/** Lines the CLI prints once the login worked. */
+const SUCCESS_PATTERNS = [/✓\s*Approved/, /✓\s*Connected to CrewlyAI Cloud/, /✓\s*Credentials saved/];
+/** The pairing ran out before the owner approved. */
+const EXPIRED_PATTERN = /link expired before it was approved/i;
+/** A prompt waiting for typed input (paste flows). */
+const INPUT_PROMPT_PATTERN = /(paste|enter)[^\n]*[:?]\s*$/i;
+/** Approve-page code, e.g. ABCD-2345. */
+const USER_CODE_PATTERN = /\b([A-Z0-9]{4}-[A-Z0-9]{4})\b/;
+/**
+ * Pick the sign-in link off the screen: the approve page with the code filled
+ * in when present, else the first link.
+ *
+ * @param text - Normalized screen
+ * @param hyperlinks - OSC 8 link targets
+ * @returns The link, or null
+ */
+export function extractLoginUrl(text, hyperlinks = []) {
+    const urls = [...hyperlinks, ...(text.match(/https?:\/\/[^\s)'"<>]+/g) ?? [])];
+    if (urls.length === 0)
+        return null;
+    return urls.find((u) => /[?&]code=/.test(u)) ?? urls[0] ?? null;
+}
+/**
+ * Read the run's state off the screen.
+ *
+ * @param screenText - Normalized screen
+ * @param sinceInput - Normalized output after the last typed reply
+ * @param hyperlinks - OSC 8 link targets
+ * @returns Link, code, input prompt, success, expiry and the last ✗ line
+ */
+export function parseCloudLoginScreen(screenText, sinceInput, hyperlinks = []) {
+    const failureLines = screenText.split('\n').filter((l) => l.includes('✗'));
+    const lastFailure = failureLines.length > 0 ? failureLines[failureLines.length - 1].replace(/^.*✗\s*/, '').trim() : null;
+    return {
+        url: extractLoginUrl(screenText, hyperlinks),
+        userCode: screenText.match(USER_CODE_PATTERN)?.[1] ?? null,
+        needsInput: INPUT_PROMPT_PATTERN.test(sinceInput.trimEnd()),
+        succeeded: SUCCESS_PATTERNS.some((p) => p.test(screenText)),
+        expired: EXPIRED_PATTERN.test(screenText),
+        failure: lastFailure,
+    };
+}
+/**
+ * Default PTY spawner (node-pty).
+ *
+ * @param file - Executable
+ * @param args - Arguments
+ * @param options - Size, cwd, env
+ * @returns The PTY
+ */
+const defaultSpawnPty = (file, args, options) => pty.spawn(file, args, { name: 'xterm-256color', cols: options.cols, rows: options.rows, cwd: options.cwd, env: options.env });
+/**
+ * Environment for the CLI: the backend's own (CREWLY_HOME, CREWLY_CLOUD_URL
+ * carry over), no colours, and no browser on this machine.
+ *
+ * @param env - Source environment
+ * @returns String-only env map
+ */
+export function buildCloudLoginEnv(env) {
+    const out = {};
+    for (const [key, value] of Object.entries(env)) {
+        if (value !== undefined)
+            out[key] = value;
+    }
+    out.BROWSER = 'true';
+    out.TERM = 'xterm-256color';
+    out.FORCE_COLOR = '0';
+    out.NO_COLOR = '1';
+    return out;
+}
+/**
+ * Start `crewly cloud login --no-browser` in a PTY.
+ *
+ * @param deps - CLI location and injectables
+ * @returns The run
+ * @throws Error when the PTY cannot be spawned
+ */
+export function startCloudLogin(deps) {
+    const spawnPty = deps.spawnPty ?? defaultSpawnPty;
+    const timeoutMs = deps.timeoutMs ?? C.LOGIN_TIMEOUT_MS;
+    const listeners = [];
+    let snapshot = { state: 'starting', url: null, userCode: null, needsInput: false, message: null };
+    let raw = '';
+    let inputOffset = 0;
+    let exited = false;
+    let resolveDone = () => undefined;
+    const done = new Promise((resolve) => {
+        resolveDone = resolve;
+    });
+    const emit = () => {
+        for (const l of listeners) {
+            try {
+                l({ ...snapshot });
+            }
+            catch {
+                // A listener must not break the run
+            }
+        }
+    };
+    const update = (patch) => {
+        const next = { ...snapshot, ...patch };
+        const changed = Object.keys(next).some((k) => next[k] !== snapshot[k]);
+        snapshot = next;
+        if (changed)
+            emit();
+    };
+    let term = null;
+    let timer = null;
+    const finish = (state, message) => {
+        if (TERMINAL.has(snapshot.state))
+            return;
+        if (timer)
+            clearTimeout(timer);
+        timer = null;
+        update({ state, message, needsInput: false });
+        if (term && !exited) {
+            try {
+                term.kill();
+            }
+            catch {
+                // Already gone
+            }
+        }
+        resolveDone({ ...snapshot });
+    };
+    const evaluate = (final, exitCode) => {
+        if (TERMINAL.has(snapshot.state))
+            return;
+        const screen = normalizeTerminalOutput(raw);
+        const since = normalizeTerminalOutput(raw.slice(inputOffset)).text;
+        const parsed = parseCloudLoginScreen(screen.text, since, screen.hyperlinks);
+        const url = parsed.url ?? snapshot.url;
+        const needsInput = parsed.needsInput && !final;
+        let state = snapshot.state;
+        if (!final && ((state === 'starting' && (url || needsInput)) || (state === 'verifying' && needsInput)))
+            state = 'awaiting_user';
+        // One update, so listeners never see the link without its state.
+        update({ state, url, userCode: parsed.userCode ?? snapshot.userCode, needsInput });
+        if (!final)
+            return;
+        if (exitCode === 0 && parsed.succeeded)
+            finish('succeeded', null);
+        else if (parsed.expired)
+            finish('expired', parsed.failure);
+        else
+            finish('failed', parsed.failure ?? `crewly cloud login exited (code ${exitCode ?? 'unknown'})`);
+    };
+    term = spawnPty(deps.nodePath ?? process.execPath, [deps.cliEntry, ...C.CLI_LOGIN_ARGS], {
+        cols: C.PTY_COLS,
+        rows: C.PTY_ROWS,
+        cwd: os.homedir(),
+        env: buildCloudLoginEnv(deps.env ?? process.env),
+    });
+    term.onData((data) => {
+        raw += data;
+        if (raw.length > C.RAW_BUFFER_MAX_CHARS) {
+            const drop = raw.length - C.RAW_BUFFER_MAX_CHARS;
+            raw = raw.slice(drop);
+            inputOffset = Math.max(0, inputOffset - drop);
+        }
+        evaluate(false);
+    });
+    term.onExit(({ exitCode }) => {
+        exited = true;
+        evaluate(true, exitCode);
+    });
+    timer = setTimeout(() => finish('timed_out', null), timeoutMs);
+    timer.unref?.();
+    return {
+        get: () => ({ ...snapshot }),
+        done,
+        waitForLink: (ms) => new Promise((resolve) => {
+            if (snapshot.url || TERMINAL.has(snapshot.state)) {
+                resolve({ ...snapshot });
+                return;
+            }
+            let settled = false;
+            const settle = () => {
+                if (settled)
+                    return;
+                settled = true;
+                clearTimeout(t);
+                resolve({ ...snapshot });
+            };
+            const t = setTimeout(settle, ms);
+            t.unref?.();
+            listeners.push((s) => {
+                if (s.url || TERMINAL.has(s.state))
+                    settle();
+            });
+        }),
+        input: (text) => {
+            if (TERMINAL.has(snapshot.state) || exited || !term)
+                return;
+            inputOffset = raw.length;
+            term.write(`${text.replace(/[\r\n]+/g, '')}\r`);
+            update({ state: 'verifying', needsInput: false });
+        },
+        cancel: () => finish('cancelled', null),
+        onChange: (listener) => {
+            listeners.push(listener);
+        },
+    };
+}
+/**
+ * Whether a run has ended.
+ *
+ * @param state - Run state
+ * @returns True for a terminal state
+ */
+export function isCloudLoginFinished(state) {
+    return TERMINAL.has(state);
+}
+//# sourceMappingURL=cloud-login-runner.js.map

package/dist/backend/backend/src/services/cloud/cloud-login-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-login-runner.js","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-login-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,MAAM,IAAI,CAAC;AACzB,OAAO,KAAK,GAAG,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AACpF,OAAO,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAGpE,MAAM,CAAC,GAAG,iCAAiC,CAAC;AAqD5C,uBAAuB;AACvB,MAAM,QAAQ,GAAiC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAErH,kDAAkD;AAClD,MAAM,gBAAgB,GAAG,CAAC,cAAc,EAAE,iCAAiC,EAAE,uBAAuB,CAAC,CAAC;AAEtG,qDAAqD;AACrD,MAAM,eAAe,GAAG,sCAAsC,CAAC;AAE/D,sDAAsD;AACtD,MAAM,oBAAoB,GAAG,8BAA8B,CAAC;AAE5D,yCAAyC;AACzC,MAAM,iBAAiB,GAAG,+BAA+B,CAAC;AAE1D;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,IAAY,EAAE,aAAuB,EAAE;IACtE,MAAM,IAAI,GAAG,CAAC,GAAG,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC/E,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;AACjE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CACpC,UAAkB,EAClB,UAAkB,EAClB,aAAuB,EAAE;IAEzB,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3E,MAAM,WAAW,GAAG,YAAY,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1H,OAAO;QACN,GAAG,EAAE,eAAe,CAAC,UAAU,EAAE,UAAU,CAAC;QAC5C,QAAQ,EAAE,UAAU,CAAC,KAAK,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI;QAC1D,UAAU,EAAE,oBAAoB,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,CAAC;QAC3D,SAAS,EAAE,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QAC3D,OAAO,EAAE,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC;QACzC,OAAO,EAAE,WAAW;KACpB,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,eAAe,GAAqB,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CACjE,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;AAE/H;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAsB;IACxD,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IAC3C,CAAC;IACD,GAAG,CAAC,OAAO,GAAG,MAAM,CAAC;IACrB,GAAG,CAAC,IAAI,GAAG,gBAAgB,CAAC;IAC5B,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC;IACtB,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;IACnB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,eAAe,CAAC,IAA0B;IACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,eAAe,CAAC;IAClD,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,gBAAgB,CAAC;IACvD,MAAM,SAAS,GAA2C,EAAE,CAAC;IAC7D,IAAI,QAAQ,GAAuB,EAAE,KAAK,EAAE,UAAU,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtH,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,IAAI,WAAW,GAAG,CAAC,CAAC;IACpB,IAAI,MAAM,GAAG,KAAK,CAAC;IACnB,IAAI,WAAW,GAAoC,GAAG,EAAE,CAAC,SAAS,CAAC;IACnE,MAAM,IAAI,GAAG,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;QACxD,WAAW,GAAG,OAAO,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,GAAS,EAAE;QACvB,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC;gBACJ,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YACpB,CAAC;YAAC,MAAM,CAAC;gBACR,oCAAoC;YACrC,CAAC;QACF,CAAC;IACF,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,KAAkC,EAAQ,EAAE;QAC3D,MAAM,IAAI,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC;QACvC,MAAM,OAAO,GAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAqC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5G,QAAQ,GAAG,IAAI,CAAC;QAChB,IAAI,OAAO;YAAE,IAAI,EAAE,CAAC;IACrB,CAAC,CAAC;IAEF,IAAI,IAAI,GAAqB,IAAI,CAAC;IAClC,IAAI,KAAK,GAAyC,IAAI,CAAC;IACvD,MAAM,MAAM,GAAG,CAAC,KAAsB,EAAE,OAAsB,EAAQ,EAAE;QACvE,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QACzC,IAAI,KAAK;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;QAC/B,KAAK,GAAG,IAAI,CAAC;QACb,MAAM,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9C,IAAI,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC;gBACJ,IAAI,CAAC,IAAI,EAAE,CAAC;YACb,CAAC;YAAC,MAAM,CAAC;gBACR,eAAe;YAChB,CAAC;QACF,CAAC;QACD,WAAW,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;IAC9B,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,QAAiB,EAAQ,EAAE;QAC5D,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,OAAO;QACzC,MAAM,MAAM,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,uBAAuB,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC;QACnE,MAAM,MAAM,GAAG,qBAAqB,CAAC,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;QAC5E,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC;QACvC,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,CAAC,KAAK,CAAC;QAC/C,IAAI,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC3B,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,KAAK,UAAU,IAAI,CAAC,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,WAAW,IAAI,UAAU,CAAC,CAAC;YAAE,KAAK,GAAG,eAAe,CAAC;QAChI,iEAAiE;QACjE,MAAM,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,IAAI,QAAQ,KAAK,CAAC,IAAI,MAAM,CAAC,SAAS;YAAE,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;aAC7D,IAAI,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;;YACtD,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,IAAI,mCAAmC,QAAQ,IAAI,SAAS,GAAG,CAAC,CAAC;IACtG,CAAC,CAAC;IAEF,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,cAAc,CAAC,EAAE;QACxF,IAAI,EAAE,CAAC,CAAC,QAAQ;QAChB,IAAI,EAAE,CAAC,CAAC,QAAQ;QAChB,GAAG,EAAE,EAAE,CAAC,OAAO,EAAE;QACjB,GAAG,EAAE,kBAAkB,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;KAChD,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE;QACpB,GAAG,IAAI,IAAI,CAAC;QACZ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;YACzC,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,oBAAoB,CAAC;YACjD,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACtB,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,WAAW,GAAG,IAAI,CAAC,CAAC;QAC/C,CAAC;QACD,QAAQ,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE;QAC5B,MAAM,GAAG,IAAI,CAAC;QACd,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IACH,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAEhB,OAAO;QACN,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC5B,IAAI;QACJ,WAAW,EAAE,CAAC,EAAE,EAAE,EAAE,CACnB,IAAI,OAAO,CAAqB,CAAC,OAAO,EAAE,EAAE;YAC3C,IAAI,QAAQ,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAClD,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;gBACzB,OAAO;YACR,CAAC;YACD,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,GAAS,EAAE;gBACzB,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,YAAY,CAAC,CAAC,CAAC,CAAC;gBAChB,OAAO,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC;YAC1B,CAAC,CAAC;YACF,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;YACZ,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACpB,IAAI,CAAC,CAAC,GAAG,IAAI,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;oBAAE,MAAM,EAAE,CAAC;YAC9C,CAAC,CAAC,CAAC;QACJ,CAAC,CAAC;QACH,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE;YACf,IAAI,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI;gBAAE,OAAO;YAC5D,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC;YACzB,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;YAChD,MAAM,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;QACvC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE;YACtB,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC1B,CAAC;KACD,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAsB;IAC1D,OAAO,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC"}

package/dist/backend/backend/src/services/cloud/cloud-sync.service.d.ts

@@ -15,7 +15,7 @@
  * @module services/cloud/cloud-sync.service
  */
 import { EventEmitter } from 'events';
-import type { CloudSyncConfig, CloudSyncState, SyncDevice, MessageType } from './cloud-sync.types.js';
+import type { CloudSyncConfig, CloudSyncHealth, CloudSyncState, SyncDevice, MessageType } from './cloud-sync.types.js';
 export declare class CloudSyncService extends EventEmitter {
     private static instance;
     private readonly logger;
@@ -60,6 +60,12 @@ export declare class CloudSyncService extends EventEmitter {
      * Keeps the last 500 IDs; pruned on overflow.
      */
     private processedMessageIds;
+    /** Epoch ms of the last request Cloud answered successfully (0 = never) */
+    private lastContactAt;
+    /** Epoch ms of the last start() (0 = never started) */
+    private startedAt;
+    /** True when Cloud's last answer was 401/403 and the token refresh failed */
+    private authRejected;
     /** Maximum size of the processedMessageIds dedup set */
     private static readonly MAX_DEDUP_IDS;
     private constructor();
@@ -100,6 +106,15 @@ export declare class CloudSyncService extends EventEmitter {
      * @returns Current CloudSyncState
      */
     getState(): CloudSyncState;
+    /**
+     * Connection health for the disconnect monitor: the state, when Cloud last
+     * answered, when sync was started and whether Cloud refused the sign-in.
+     *
+     * @returns Health snapshot (times are epoch ms, null when never)
+     */
+    getHealth(): CloudSyncHealth;
+    /** Record a request Cloud answered successfully. */
+    private markContact;
     /**
      * Get all cached devices for this Cloud account.
      *

package/dist/backend/backend/src/services/cloud/cloud-sync.service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud-sync.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-sync.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAQtC,OAAO,KAAK,EACV,eAAe,EACf,cAAc,EACd,UAAU,EAKV,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAsF/B,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,4BAA4B;IAC5B,OAAO,CAAC,KAAK,CAA6B;IAC1C,mCAAmC;IACnC,OAAO,CAAC,MAAM,CAAgC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,OAAO,CAAoB;IACnC,4BAA4B;IAC5B,OAAO,CAAC,OAAO,CAAa;IAE5B,6BAA6B;IAC7B,OAAO,CAAC,cAAc,CAA+C;IACrE,+BAA+B;IAC/B,OAAO,CAAC,eAAe,CAA+C;IACtE,oEAAoE;IACpE,OAAO,CAAC,gBAAgB,CAA8C;IACtE,qEAAqE;IACrE,OAAO,CAAC,kBAAkB,CAAS;IACnC,kEAAkE;IAClE,OAAO,CAAC,iBAAiB,CAAK;IAC9B,4EAA4E;IAC5E,OAAO,CAAC,aAAa,CAA+C;IACpE,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAuB;IAE7C,0CAA0C;IAC1C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,4CAA4C;IAC5C,OAAO,CAAC,kBAAkB,CAAK;IAC/B,6CAA6C;IAC7C,OAAO,CAAC,mBAAmB,CAAK;IAChC,kCAAkC;IAClC,OAAO,CAAC,kBAAkB,CAA+C;IACzE,qEAAqE;IACrE,OAAO,CAAC,qBAAqB,CAAK;IAClC,sFAAsF;IACtF,OAAO,CAAC,OAAO,CAAuB;IACtC,iEAAiE;IACjE,OAAO,CAAC,UAAU,CAAuB;IAEzC;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAqB;IAChD,wDAAwD;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAO;IAE5C,OAAO;IAKP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,gBAAgB;IAOtC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAW5B;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAqEpC;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAqBZ;;;;OAIG;IACH,SAAS,IAAI,OAAO;IAIpB;;;;OAIG;IACH,QAAQ,IAAI,cAAc;IAI1B;;;;OAIG;IACH,UAAU,IAAI,UAAU,EAAE;IAI1B;;;;;;;OAOG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAOnC;;;;OAIG;IACH,gBAAgB,IAAI,UAAU,EAAE;IAIhC;;;;;;;;;;;;;;;OAeG;IACG,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CzF;;;;;;;;;;;;;;;;;;OAkBG;IACG,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC;IA+BhB;;;;;;;;;OASG;YACW,aAAa;IAiC3B;;;;;;OAMG;YACW,eAAe;IAuC7B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,aAAa;IAIrB,wDAAwD;IACxD,OAAO,CAAC,iBAAiB;IAIzB;;;;OAIG;YACW,mBAAmB;IAUjC;;;;;OAKG;YACW,oBAAoB;IAYlC;;;OAGG;YACW,iBAAiB;IAiB/B;;;OAGG;IACH,UAAU,IAAI,MAAM,GAAG,IAAI;IAI3B;;;;;;;;OAQG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAQ9B;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAqDpC;;;;;;;OAOG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAsJlC;;;;;;OAMG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAiIrC;;;;;;;;;;;;;;;;OAgBG;YACW,mBAAmB;IAgCjC;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO;IAkBxD;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAQ/B;;;;;;OAMG;YACW,WAAW;IA2BzB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAkB3B;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAoF7B;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAgB7B,yDAAyD;IACzD,OAAO,CAAC,sBAAsB,CAAS;IAEvC;;;;;;;OAOG;YACW,eAAe;IAmC7B;;;;OAIG;IACH,OAAO,CAAC,WAAW;CAMpB"}
+{"version":3,"file":"cloud-sync.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/cloud/cloud-sync.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAC;AAQtC,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,cAAc,EACd,UAAU,EAKV,WAAW,EACZ,MAAM,uBAAuB,CAAC;AAsF/B,qBAAa,gBAAiB,SAAQ,YAAY;IAChD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAiC;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IAEzC,4BAA4B;IAC5B,OAAO,CAAC,KAAK,CAA6B;IAC1C,mCAAmC;IACnC,OAAO,CAAC,MAAM,CAAgC;IAC9C,wCAAwC;IACxC,OAAO,CAAC,OAAO,CAAoB;IACnC,4BAA4B;IAC5B,OAAO,CAAC,OAAO,CAAa;IAE5B,6BAA6B;IAC7B,OAAO,CAAC,cAAc,CAA+C;IACrE,+BAA+B;IAC/B,OAAO,CAAC,eAAe,CAA+C;IACtE,oEAAoE;IACpE,OAAO,CAAC,gBAAgB,CAA8C;IACtE,qEAAqE;IACrE,OAAO,CAAC,kBAAkB,CAAS;IACnC,kEAAkE;IAClE,OAAO,CAAC,iBAAiB,CAAK;IAC9B,4EAA4E;IAC5E,OAAO,CAAC,aAAa,CAA+C;IACpE,iFAAiF;IACjF,OAAO,CAAC,cAAc,CAAuB;IAE7C,0CAA0C;IAC1C,OAAO,CAAC,iBAAiB,CAAK;IAC9B,4CAA4C;IAC5C,OAAO,CAAC,kBAAkB,CAAK;IAC/B,6CAA6C;IAC7C,OAAO,CAAC,mBAAmB,CAAK;IAChC,kCAAkC;IAClC,OAAO,CAAC,kBAAkB,CAA+C;IACzE,qEAAqE;IACrE,OAAO,CAAC,qBAAqB,CAAK;IAClC,sFAAsF;IACtF,OAAO,CAAC,OAAO,CAAuB;IACtC,iEAAiE;IACjE,OAAO,CAAC,UAAU,CAAuB;IAEzC;;;OAGG;IACH,OAAO,CAAC,mBAAmB,CAAqB;IAChD,2EAA2E;IAC3E,OAAO,CAAC,aAAa,CAAK;IAC1B,uDAAuD;IACvD,OAAO,CAAC,SAAS,CAAK;IACtB,6EAA6E;IAC7E,OAAO,CAAC,YAAY,CAAS;IAC7B,wDAAwD;IACxD,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAO;IAE5C,OAAO;IAKP;;;;OAIG;IACH,MAAM,CAAC,WAAW,IAAI,gBAAgB;IAOtC;;OAEG;IACH,MAAM,CAAC,aAAa,IAAI,IAAI;IAW5B;;;;;;;OAOG;IACH,KAAK,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IA6EpC;;;;OAIG;IACH,IAAI,IAAI,IAAI;IAqBZ;;;;OAIG;IACH,SAAS,IAAI,OAAO;IAIpB;;;;OAIG;IACH,QAAQ,IAAI,cAAc;IAI1B;;;;;OAKG;IACH,SAAS,IAAI,eAAe;IAS5B,oDAAoD;IACpD,OAAO,CAAC,WAAW;IAKnB;;;;OAIG;IACH,UAAU,IAAI,UAAU,EAAE;IAI1B;;;;;;;OAOG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAOnC;;;;OAIG;IACH,gBAAgB,IAAI,UAAU,EAAE;IAIhC;;;;;;;;;;;;;;;OAeG;IACG,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CzF;;;;;;;;;;;;;;;;;;OAkBG;IACG,iBAAiB,CACrB,WAAW,EAAE,MAAM,EACnB,IAAI,EAAE,WAAW,EACjB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,IAAI,CAAC;IA+BhB;;;;;;;;;OASG;YACW,aAAa;IAiC3B;;;;;;OAMG;YACW,eAAe;IAuC7B;;;;;;;;;;;;OAYG;IACH,OAAO,CAAC,aAAa;IAIrB,wDAAwD;IACxD,OAAO,CAAC,iBAAiB;IAIzB;;;;OAIG;YACW,mBAAmB;IAUjC;;;;;OAKG;YACW,oBAAoB;IAYlC;;;OAGG;YACW,iBAAiB;IAiB/B;;;OAGG;IACH,UAAU,IAAI,MAAM,GAAG,IAAI;IAI3B;;;;;;;;OAQG;IACH,aAAa,IAAI,MAAM,GAAG,IAAI;IAQ9B;;;;;;OAMG;IACG,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAsDpC;;;;;;;OAOG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAsJlC;;;;;;OAMG;IACG,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAmIrC;;;;;;;;;;;;;;;;OAgBG;YACW,mBAAmB;IAgCjC;;;;;;;;;;;OAWG;IACH,qBAAqB,CAAC,GAAG,GAAE,MAAmB,GAAG,OAAO;IAkBxD;;;;;OAKG;IACH,OAAO,CAAC,uBAAuB;IAQ/B;;;;;;OAMG;YACW,WAAW;IA2BzB;;;OAGG;IACH,OAAO,CAAC,mBAAmB;IAkB3B;;;;;;;OAOG;IACH,OAAO,CAAC,qBAAqB;IAqF7B;;;OAGG;IACH,OAAO,CAAC,qBAAqB;IAgB7B,yDAAyD;IACzD,OAAO,CAAC,sBAAsB,CAAS;IAEvC;;;;;;;OAOG;YACW,eAAe;IAoC7B;;;;OAIG;IACH,OAAO,CAAC,WAAW;CAMpB"}