crewly 1.20.306 → 1.20.307

package/dist/backend/backend/src/services/board/board-push.service.js

@@ -0,0 +1,312 @@
+/**
+ * Pushes the owner board to Crewly Cloud (crewly#1247).
+ *
+ * - a full snapshot every 60 s (Cloud may ask for another cadence);
+ * - a delta (only the agent rows that changed, plus new timeline events)
+ *   within {@link BOARD_CONSTANTS.DELTA_DELAY_MS} of an activity change;
+ * - gzip bodies, exponential backoff on failure, an hour's pause when Cloud
+ *   does not take board pushes (not deployed / refusing);
+ * - nothing is sent when the machine is not signed in to Cloud, or when
+ *   `CREWLY_BOARD_PUSH=0`.
+ *
+ * Event-driven: a change only marks a session dirty and arms one timer; the
+ * delta is built from the builder's cache and the live tracker, never from a
+ * disk scan.
+ *
+ * @module services/board/board-push.service
+ */
+import { gzipSync } from 'zlib';
+import { BOARD_CONSTANTS } from '../../constants.js';
+import { LoggerService } from '../core/logger.service.js';
+const C = BOARD_CONSTANTS;
+/**
+ * Whether the board push is switched off.
+ *
+ * @param env - Environment
+ * @returns True for `CREWLY_BOARD_PUSH=0` (also `false` / `off`)
+ */
+export function isBoardPushDisabled(env = process.env) {
+    const v = (env[C.ENV_SWITCH] ?? '').trim().toLowerCase();
+    return v === '0' || v === 'false' || v === 'off' || v === 'no';
+}
+/**
+ * Shrink a snapshot until its JSON fits the body limit: the longest list
+ * loses its tail first.
+ *
+ * @param snapshot - Snapshot (mutated)
+ * @returns The same snapshot
+ */
+export function fitSnapshot(snapshot) {
+    const size = () => Buffer.byteLength(JSON.stringify(snapshot));
+    const lists = [snapshot.outcomes.doneToday, snapshot.outcomes.stuck, snapshot.outcomes.waitingOnOwner];
+    let guard = 0;
+    while (size() > C.MAX_BODY_BYTES && guard < 500) {
+        guard += 1;
+        const longest = lists.reduce((a, b) => (b.length > a.length ? b : a), lists[0]);
+        if (longest.length > 0) {
+            longest.length = Math.floor(longest.length / 2);
+            continue;
+        }
+        // Only agents are left: drop the last agent of the biggest team
+        const team = [...snapshot.teams].sort((a, b) => b.agents.length - a.agents.length)[0];
+        if (!team || team.agents.length === 0)
+            break;
+        team.agents.pop();
+    }
+    return snapshot;
+}
+/** Pushes snapshots and deltas. */
+export class BoardPushService {
+    deps;
+    logger;
+    fetchImpl;
+    now;
+    setTimer;
+    clearTimer;
+    started = false;
+    fullTimer = null;
+    deltaTimer = null;
+    unsubscribe = null;
+    dirty = new Set();
+    /** Rows Cloud has, as JSON, by session */
+    lastSent = new Map();
+    lastToken = null;
+    fullOk = false;
+    fullAfterMs = C.FULL_INTERVAL_MS;
+    failures = 0;
+    pausedUntil = 0;
+    pauseLogged = false;
+    inFlight = Promise.resolve();
+    constructor(deps) {
+        this.deps = deps;
+        this.logger = deps.logger ?? LoggerService.getInstance().createComponentLogger('BoardPush');
+        this.fetchImpl = deps.fetchImpl ?? ((input, init) => fetch(input, init));
+        this.now = deps.now ?? Date.now;
+        this.setTimer =
+            deps.setTimeout ??
+                ((fn, ms) => {
+                    const t = setTimeout(fn, ms);
+                    t.unref?.();
+                    return t;
+                });
+        this.clearTimer = deps.clearTimeout ?? ((h) => clearTimeout(h));
+    }
+    /** Whether the push is switched off in the environment. */
+    get disabled() {
+        return isBoardPushDisabled(this.deps.env ?? process.env);
+    }
+    /** Start pushing. Idempotent; a no-op when switched off. Never throws. */
+    start() {
+        if (this.started || this.disabled)
+            return;
+        this.started = true;
+        this.unsubscribe = this.deps.tracker.onChange((session) => this.markDirty(session));
+        this.scheduleFull(0);
+    }
+    /** Stop timers and the subscription. */
+    stop() {
+        this.started = false;
+        if (this.fullTimer)
+            this.clearTimer(this.fullTimer);
+        if (this.deltaTimer)
+            this.clearTimer(this.deltaTimer);
+        this.fullTimer = null;
+        this.deltaTimer = null;
+        this.unsubscribe?.();
+        this.unsubscribe = null;
+        this.dirty.clear();
+    }
+    /**
+     * A session's row may have changed: send a delta soon.
+     *
+     * @param session - Agent session
+     */
+    markDirty(session) {
+        if (!this.started)
+            return;
+        this.dirty.add(session);
+        if (this.deltaTimer)
+            return;
+        this.deltaTimer = this.setTimer(() => {
+            this.deltaTimer = null;
+            void this.flushDelta();
+        }, C.DELTA_DELAY_MS);
+    }
+    scheduleFull(delayMs) {
+        if (!this.started)
+            return;
+        if (this.fullTimer)
+            this.clearTimer(this.fullTimer);
+        this.fullTimer = this.setTimer(() => {
+            this.fullTimer = null;
+            void this.pushFull().finally(() => this.scheduleFull(this.nextFullDelay()));
+        }, delayMs);
+    }
+    nextFullDelay() {
+        // A failure retries by its own backoff (or pause), not by the 60 s cadence
+        const remaining = this.pausedUntil - this.now();
+        return remaining > 0 ? remaining : this.fullAfterMs;
+    }
+    /** The Cloud endpoint and token, or null when the machine is not signed in or a pause is on. */
+    target() {
+        if (this.disabled)
+            return null;
+        const token = this.deps.cloud.getToken();
+        const base = this.deps.cloud.getCloudUrl();
+        if (!token || !base)
+            return null;
+        if (token !== this.lastToken) {
+            // New sign-in / refreshed token: Cloud's copy may be another account's; resend everything
+            if (this.lastToken !== null)
+                this.fullOk = false;
+            this.lastToken = token;
+        }
+        if (this.now() < this.pausedUntil)
+            return 'paused';
+        return { base: base.replace(/\/$/, ''), token };
+    }
+    /**
+     * Build and send the full snapshot, then any timeline events that are
+     * waiting. Serialised with deltas. Never throws.
+     *
+     * @returns What happened
+     */
+    pushFull() {
+        const run = this.inFlight.then(() => this.doFull()).catch(() => 'failed');
+        this.inFlight = run;
+        return run;
+    }
+    async doFull() {
+        const target = this.target();
+        if (target === null)
+            return 'skipped';
+        if (target === 'paused')
+            return 'paused';
+        const snapshot = fitSnapshot(await this.deps.builder.build());
+        const outcome = await this.post(target, C.SNAPSHOT_PATH, snapshot, snapshot.instanceId);
+        if (outcome !== 'sent')
+            return outcome;
+        this.fullOk = true;
+        this.lastSent.clear();
+        for (const team of snapshot.teams)
+            for (const a of team.agents)
+                this.lastSent.set(a.session, JSON.stringify(a));
+        this.dirty.clear();
+        // Timeline events ride in deltas
+        const pending = this.deps.tracker.sessionsWithUnsent();
+        if (pending.length > 0)
+            await this.doDelta(new Set(pending));
+        return 'sent';
+    }
+    /**
+     * Send a delta for the sessions marked dirty. Serialised with full pushes.
+     * Never throws.
+     *
+     * @returns What happened
+     */
+    flushDelta() {
+        const sessions = new Set(this.dirty);
+        this.dirty.clear();
+        const run = this.inFlight.then(() => this.doDelta(sessions)).catch(() => 'failed');
+        this.inFlight = run;
+        return run;
+    }
+    async doDelta(sessions) {
+        if (sessions.size === 0)
+            return 'nothing';
+        const target = this.target();
+        // The next full snapshot carries the rows; a delta before the first one is pointless
+        if (target === null || target === 'paused' || !this.fullOk || !this.deps.builder.primed)
+            return target === 'paused' ? 'paused' : 'skipped';
+        const rows = this.deps.builder.rows(sessions);
+        const changed = rows.filter((r) => this.lastSent.get(r.session) !== JSON.stringify(stripTeam(r)));
+        const timeline = this.deps.tracker.peekUnsent(sessions);
+        if (changed.length === 0 && timeline.length === 0)
+            return 'nothing';
+        const instanceId = (await this.deps.builder.identity()).instanceId;
+        const body = {
+            v: 1,
+            instanceId,
+            generatedAt: new Date(this.now()).toISOString(),
+            agents: changed,
+            ...(timeline.length > 0 ? { timeline } : {}),
+        };
+        const outcome = await this.post(target, C.DELTA_PATH, body, instanceId);
+        if (outcome === 'sent') {
+            for (const r of changed)
+                this.lastSent.set(r.session, JSON.stringify(stripTeam(r)));
+            this.deps.tracker.ackUnsent(timeline);
+        }
+        else if (outcome === 'failed') {
+            // keep them dirty for the next try (the full push also repairs everything)
+            for (const s of sessions)
+                this.dirty.add(s);
+        }
+        return outcome;
+    }
+    async post(target, path, body, instanceId) {
+        const json = JSON.stringify(body);
+        const gz = gzipSync(Buffer.from(json));
+        let status = 0;
+        let code = null;
+        try {
+            const response = await this.fetchImpl(`${target.base}${path}`, {
+                method: 'POST',
+                headers: {
+                    Authorization: `Bearer ${target.token}`,
+                    'Content-Type': 'application/json',
+                    'Content-Encoding': 'gzip',
+                    [C.INSTANCE_HEADER]: instanceId,
+                },
+                body: gz,
+                signal: AbortSignal.timeout(C.REQUEST_TIMEOUT_MS),
+            });
+            status = response.status;
+            if (response.ok) {
+                const parsed = (await response.json().catch(() => null));
+                const sec = parsed?.data?.next?.fullAfterSec;
+                if (typeof sec === 'number' && Number.isFinite(sec))
+                    this.fullAfterMs = Math.min(600, Math.max(15, sec)) * 1000;
+                this.failures = 0;
+                if (this.pauseLogged) {
+                    this.pauseLogged = false;
+                    this.logger.info('Crewly Cloud is taking board updates again');
+                }
+                return 'sent';
+            }
+            const parsed = (await response.json().catch(() => null));
+            code = typeof parsed?.code === 'string' ? parsed.code : null;
+        }
+        catch (error) {
+            code = error instanceof Error ? error.message : String(error);
+        }
+        if (status === 404 || status === 400 || status === 503 || status === 403 || status === 413) {
+            this.pausedUntil = this.now() + C.UNAVAILABLE_RETRY_MS;
+            this.fullOk = false;
+            if (!this.pauseLogged) {
+                this.pauseLogged = true;
+                this.logger.info('Crewly Cloud is not taking board updates right now; checking again later', { status, code });
+            }
+            return 'paused';
+        }
+        if (status === 401)
+            void this.deps.cloud.tryRefreshToken?.().catch(() => false);
+        this.failures += 1;
+        this.fullOk = false;
+        const delay = Math.min(C.BACKOFF_INITIAL_MS * 2 ** (this.failures - 1), C.BACKOFF_MAX_MS);
+        this.pausedUntil = this.now() + delay;
+        // A failed delta: the next full snapshot repairs every row, so bring it forward to the end of the backoff
+        if (path === C.DELTA_PATH)
+            this.scheduleFull(delay);
+        if (this.failures === 1)
+            this.logger.warn('Board push failed; will retry', { status, code, retryInMs: delay });
+        return 'failed';
+    }
+}
+/** A row without the delta-only `teamId`, as the full snapshot has it. */
+function stripTeam(row) {
+    const { teamId: _teamId, ...rest } = row;
+    void _teamId;
+    return rest;
+}
+//# sourceMappingURL=board-push.service.js.map

package/dist/backend/backend/src/services/board/board-push.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-push.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/board/board-push.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAKhF,MAAM,CAAC,GAAG,eAAe,CAAC;AAyB1B;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACvE,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACzD,OAAO,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,OAAO,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,CAAC;AAChE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,QAAuB;IAClD,MAAM,IAAI,GAAG,GAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;IACvE,MAAM,KAAK,GAAqB,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;IACzH,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,IAAI,EAAE,GAAG,CAAC,CAAC,cAAc,IAAI,KAAK,GAAG,GAAG,EAAE,CAAC;QACjD,KAAK,IAAI,CAAC,CAAC;QACX,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAChF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;YAChD,SAAS;QACV,CAAC;QACD,gEAAgE;QAChE,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM;QAC7C,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;IACnB,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,mCAAmC;AACnC,MAAM,OAAO,gBAAgB;IAsBC;IArBZ,MAAM,CAAkB;IACxB,SAAS,CAA0D;IACnE,GAAG,CAAe;IAClB,QAAQ,CAAgE;IACxE,UAAU,CAAkD;IAErE,OAAO,GAAG,KAAK,CAAC;IAChB,SAAS,GAAyC,IAAI,CAAC;IACvD,UAAU,GAAyC,IAAI,CAAC;IACxD,WAAW,GAAwB,IAAI,CAAC;IAC/B,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,0CAA0C;IACzB,QAAQ,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC9C,SAAS,GAAkB,IAAI,CAAC;IAChC,MAAM,GAAG,KAAK,CAAC;IACf,WAAW,GAAW,CAAC,CAAC,gBAAgB,CAAC;IACzC,QAAQ,GAAG,CAAC,CAAC;IACb,WAAW,GAAG,CAAC,CAAC;IAChB,WAAW,GAAG,KAAK,CAAC;IACpB,QAAQ,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAEvD,YAA6B,IAAmB;QAAnB,SAAI,GAAJ,IAAI,CAAe;QAC/C,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC5F,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,QAAQ;YACZ,IAAI,CAAC,UAAU;gBACf,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;oBACX,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC7B,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBACZ,OAAO,CAAC,CAAC;gBACV,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,2DAA2D;IAC3D,IAAI,QAAQ;QACX,OAAO,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,CAAC;IAED,0EAA0E;IAC1E,KAAK;QACJ,IAAI,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QACpF,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACtB,CAAC;IAED,wCAAwC;IACxC,IAAI;QACH,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACtD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;QACtB,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;QACvB,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAED;;;;OAIG;IACH,SAAS,CAAC,OAAe;QACxB,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU;YAAE,OAAO;QAC5B,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACpC,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC;YACvB,KAAK,IAAI,CAAC,UAAU,EAAE,CAAC;QACxB,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;IACtB,CAAC;IAEO,YAAY,CAAC,OAAe;QACnC,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,OAAO;QAC1B,IAAI,IAAI,CAAC,SAAS;YAAE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YACnC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC;YACtB,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC;QAC7E,CAAC,EAAE,OAAO,CAAC,CAAC;IACb,CAAC;IAEO,aAAa;QACpB,2EAA2E;QAC3E,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAChD,OAAO,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC;IACrD,CAAC;IAED,gGAAgG;IACxF,MAAM;QACb,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC/B,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,IAAI,CAAC;QACjC,IAAI,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9B,0FAA0F;YAC1F,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI;gBAAE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACjD,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC;QACxB,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,WAAW;YAAE,OAAO,QAAQ,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC;IACjD,CAAC;IAED;;;;;OAKG;IACH,QAAQ;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,GAAqB,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC5F,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,MAAM;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACtC,IAAI,MAAM,KAAK,QAAQ;YAAE,OAAO,QAAQ,CAAC;QACzC,MAAM,QAAQ,GAAG,WAAW,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAC9D,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,aAAa,EAAE,QAAQ,EAAE,QAAQ,CAAC,UAAU,CAAC,CAAC;QACxF,IAAI,OAAO,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC;QACvC,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;QACtB,KAAK,MAAM,IAAI,IAAI,QAAQ,CAAC,KAAK;YAAE,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QAChH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,iCAAiC;QACjC,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC;QACvD,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YAAE,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC;IACf,CAAC;IAED;;;;;OAKG;IACH,UAAU;QACT,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACnB,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAqB,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrG,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;QACpB,OAAO,GAAG,CAAC;IACZ,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,QAAqB;QAC1C,IAAI,QAAQ,CAAC,IAAI,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,qFAAqF;QACrF,IAAI,MAAM,KAAK,IAAI,IAAI,MAAM,KAAK,QAAQ,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;QAC3I,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClG,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QACxD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;QACnE,MAAM,IAAI,GAAe;YACxB,CAAC,EAAE,CAAC;YACJ,UAAU;YACV,WAAW,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC/C,MAAM,EAAE,OAAO;YACf,GAAG,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5C,CAAC;QACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;QACxE,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;YACxB,KAAK,MAAM,CAAC,IAAI,OAAO;gBAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YACpF,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACvC,CAAC;aAAM,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YACjC,2EAA2E;YAC3E,KAAK,MAAM,CAAC,IAAI,QAAQ;gBAAE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QAC7C,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAAuC,EAAE,IAAY,EAAE,IAAa,EAAE,UAAkB;QAC1G,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,EAAE,EAAE;gBAC9D,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACR,aAAa,EAAE,UAAU,MAAM,CAAC,KAAK,EAAE;oBACvC,cAAc,EAAE,kBAAkB;oBAClC,kBAAkB,EAAE,MAAM;oBAC1B,CAAC,CAAC,CAAC,eAAe,CAAC,EAAE,UAAU;iBAC/B;gBACD,IAAI,EAAE,EAAE;gBACR,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;aACjD,CAAC,CAAC;YACH,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;YACzB,IAAI,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA4D,CAAC;gBACpH,MAAM,GAAG,GAAG,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,YAAY,CAAC;gBAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;oBAAE,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;gBAChH,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC;gBAClB,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;oBACtB,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;oBACzB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,4CAA4C,CAAC,CAAC;gBAChE,CAAC;gBACD,OAAO,MAAM,CAAC;YACf,CAAC;YACD,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA8B,CAAC;YACtF,IAAI,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAC9D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC/D,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5F,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,oBAAoB,CAAC;YACvD,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;YACpB,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;gBACvB,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC;gBACxB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0EAA0E,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAChH,CAAC;YACD,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,IAAI,MAAM,KAAK,GAAG;YAAE,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;QAChF,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;QACnB,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,kBAAkB,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC,cAAc,CAAC,CAAC;QAC1F,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACtC,0GAA0G;QAC1G,IAAI,IAAI,KAAK,CAAC,CAAC,UAAU;YAAE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC;QACpD,IAAI,IAAI,CAAC,QAAQ,KAAK,CAAC;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/G,OAAO,QAAQ,CAAC;IACjB,CAAC;CACD;AAED,0EAA0E;AAC1E,SAAS,SAAS,CAAgC,GAAM;IACvD,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,IAAI,EAAE,GAAG,GAAG,CAAC;IACzC,KAAK,OAAO,CAAC;IACb,OAAO,IAAI,CAAC;AACb,CAAC"}

package/dist/backend/backend/src/services/board/board-redact.d.ts

@@ -0,0 +1,90 @@
+/**
+ * Redaction for the Owner Board (crewly#1247). Everything that leaves the
+ * machine as board text goes through here first: query strings, tokens,
+ * emails and phone numbers are removed, URLs are cut to host + path, commands
+ * to executable + subcommand, file paths to project-relative, and every text
+ * to at most {@link BOARD_CONSTANTS.MAX_TEXT} characters.
+ *
+ * Pure (no I/O). The functions never throw and never return their input
+ * unchanged when it looks like a secret.
+ *
+ * @module services/board/board-redact
+ */
+/** Placeholder for removed secrets. */
+export declare const REDACTED = "[redacted]";
+/**
+ * Whether a path segment or word looks like an identifier or a token, not a
+ * human name: long with digits and letters, long hex, or a long number.
+ *
+ * @param s - Segment
+ * @returns True when it should not be shown
+ */
+export declare function looksLikeToken(s: string): boolean;
+/**
+ * Cut a text to the board limit.
+ *
+ * @param s - Text
+ * @param max - Limit (default 140)
+ * @returns The text, ending with an ellipsis when cut
+ */
+export declare function clip(s: string, max?: number): string;
+/**
+ * A URL as host + path: no scheme, credentials, port, query or fragment;
+ * path segments that look like ids or tokens become `:id`.
+ *
+ * @param raw - URL or `host/path`
+ * @returns `host/path` (at most 100 characters), or `[redacted]` when unparseable
+ */
+export declare function redactUrl(raw: string): string;
+/**
+ * A free text made safe: one line, URLs reduced, secrets / emails / phone
+ * numbers removed, at most 140 characters.
+ *
+ * @param input - Any text
+ * @param max - Limit (default 140)
+ * @returns Safe text (possibly empty)
+ */
+export declare function scrubText(input: unknown, max?: number): string;
+/**
+ * A file path relative to the project it is in, so no absolute path, user
+ * name or machine layout leaves the machine.
+ *
+ * @param file - Absolute or relative path
+ * @param roots - Project roots to make it relative to (longest match wins)
+ * @returns `repo/relative/path`, `~/…`, or `…/last/segments`; at most 100 characters
+ */
+export declare function relativePath(file: string, roots?: readonly string[]): string;
+/**
+ * Split a shell command into segments of words (quotes removed). Separators
+ * `&&`, `||`, `;`, `|`, `&` and newlines end a segment. Not a full parser; it
+ * only needs to find the first words of each segment safely.
+ *
+ * @param command - Shell command
+ * @returns Segments
+ */
+export declare function splitCommand(command: string): string[][];
+/** The result of reducing a command. */
+export interface ReducedCommand {
+    /** `git push`, `npm run build`, `python build.py`, `ffmpeg` */
+    label: string;
+    /** Executable name alone */
+    executable: string;
+    /** Skill name when the command runs a Crewly skill script */
+    skill?: string;
+    /** Words of the segment after the executable (not shown; for the normalizer's own parsing) */
+    args: string[];
+}
+/**
+ * Reduce a shell command to the executable and subcommand. Arguments are
+ * never part of the label, so tokens, URLs and prompts in them cannot leak.
+ *
+ * @param command - Shell command
+ * @returns The reduced command, or null when nothing recognisable is in it
+ *
+ * @example
+ * ```typescript
+ * reduceCommand('cd app && GIT_TOKEN=abc git -C x push origin main'); // label: 'git push'
+ * ```
+ */
+export declare function reduceCommand(command: string): ReducedCommand | null;
+//# sourceMappingURL=board-redact.d.ts.map

package/dist/backend/backend/src/services/board/board-redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"board-redact.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/board/board-redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAQH,uCAAuC;AACvC,eAAO,MAAM,QAAQ,eAAe,CAAC;AAgBrC;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAMjD;AAED;;;;;;GAMG;AACH,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,GAAE,MAAY,GAAG,MAAM,CAGzD;AAED;;;;;;GAMG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CA0B7C;AAED;;;;;;;GAOG;AACH,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,GAAE,MAAY,GAAG,MAAM,CAgBnE;AAKD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,GAAE,SAAS,MAAM,EAAO,GAAG,MAAM,CAmChF;AAuBD;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,EAAE,CAiDxD;AAED,wCAAwC;AACxC,MAAM,WAAW,cAAc;IAC9B,+DAA+D;IAC/D,KAAK,EAAE,MAAM,CAAC;IACd,4BAA4B;IAC5B,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8FAA8F;IAC9F,IAAI,EAAE,MAAM,EAAE,CAAC;CACf;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,GAAG,IAAI,CAsEpE"}