crewly 1.20.307 → 1.20.308

package/dist/backend/backend/src/services/board/canvas/canvas-terminal.service.d.ts

@@ -0,0 +1,99 @@
+/**
+ * Masked terminal tail for the canvas (crewly#1247 v2).
+ *
+ * The owner opens an agent's terminal in the portal: Cloud relays
+ * `terminal_open`, and this service posts the agent's PTY tail to Cloud about
+ * once a second - the first frame is the last 200 lines - until the viewer
+ * stops renewing (a lease of 2 minutes, renewed by `terminal_renew` every
+ * 60 s), closes it, the agent's session ends, Cloud says it is no longer
+ * wanted, or the stream has run 30 minutes.
+ *
+ * Every frame is masked on the machine ({@link maskTerminalText}: secrets by
+ * value, by name and by shape, emails, URL queries, bearer tokens, password
+ * prompts, long token-like words) BEFORE it is posted; a frame is only posted
+ * when its masked content changed. Frames are never written to disk here and
+ * Cloud keeps them in memory only.
+ *
+ * @module services/board/canvas/canvas-terminal.service
+ */
+import type { SecretEnvValue } from '../../../utils/secret-env.js';
+import { type ComponentLogger } from '../../core/logger.service.js';
+import type { TerminalFrame } from './canvas.types.js';
+/** The Cloud session (CloudClientService). */
+export interface TerminalCloud {
+    getToken(): string | null;
+    getCloudUrl(): string | null;
+    tryRefreshToken?(): Promise<boolean>;
+}
+/** Constructor dependencies. */
+export interface CanvasTerminalDeps {
+    cloud: TerminalCloud;
+    /** This machine's Cloud instance id */
+    identity: () => Promise<{
+        instanceId: string;
+    }>;
+    /** The raw PTY tail of a session, or null when it has none */
+    capture: (session: string, lines: number) => string | null;
+    /** Whether the agent's terminal session exists */
+    exists: (session: string) => boolean;
+    /** Exact secret values to mask */
+    secrets?: () => readonly SecretEnvValue[];
+    fetchImpl?: (input: string, init: RequestInit) => Promise<Response>;
+    now?: () => number;
+    setTimeout?: (fn: () => void, ms: number) => ReturnType<typeof setTimeout>;
+    clearTimeout?: (h: ReturnType<typeof setTimeout>) => void;
+    logger?: ComponentLogger;
+}
+/** Why a stream could not be opened. */
+export type TerminalOpenResult = {
+    ok: true;
+} | {
+    ok: false;
+    code: 'no_session' | 'too_many_streams' | 'not_signed_in';
+};
+/** Streams masked PTY tails to Cloud while a viewer holds a lease. */
+export declare class CanvasTerminalService {
+    private readonly deps;
+    private readonly streams;
+    private readonly logger;
+    private readonly now;
+    private readonly fetchImpl;
+    private readonly setTimer;
+    private readonly clearTimer;
+    constructor(deps: CanvasTerminalDeps);
+    /** Sessions being streamed. */
+    active(): string[];
+    /**
+     * Start (or restart) a stream; the first frame goes out at once.
+     *
+     * @param session - Agent session
+     * @returns Whether it is streaming
+     */
+    open(session: string): TerminalOpenResult;
+    /**
+     * The viewer is still there: extend the lease.
+     *
+     * @param session - Agent session
+     * @returns False when no stream is open (the viewer must open again)
+     */
+    renew(session: string): boolean;
+    /**
+     * Stop a stream; a last frame tells Cloud it ended.
+     *
+     * @param session - Agent session
+     * @param reason - Why it ended
+     */
+    close(session: string, reason?: NonNullable<TerminalFrame['reason']>): void;
+    /** Stop every stream (shutdown). */
+    closeAll(): void;
+    private schedule;
+    /** One frame: stop if the stream is over, else mask the tail and post it when it changed. */
+    private tick;
+    /**
+     * Post one frame.
+     *
+     * @returns `ok`; `stop` when Cloud no longer wants frames (404 / 403 / 410, `keep: false`); `retry` on any other failure
+     */
+    private post;
+}
+//# sourceMappingURL=canvas-terminal.service.d.ts.map

package/dist/backend/backend/src/services/board/canvas/canvas-terminal.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-terminal.service.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-terminal.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAiB,KAAK,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAEnF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAIvD,8CAA8C;AAC9C,MAAM,WAAW,aAAa;IAC7B,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAC;IAC1B,WAAW,IAAI,MAAM,GAAG,IAAI,CAAC;IAC7B,eAAe,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,CAAC;CACrC;AAED,gCAAgC;AAChC,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,aAAa,CAAC;IACrB,uCAAuC;IACvC,QAAQ,EAAE,MAAM,OAAO,CAAC;QAAE,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,8DAA8D;IAC9D,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IAC3D,kDAAkD;IAClD,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC;IACrC,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,SAAS,cAAc,EAAE,CAAC;IAC1C,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC3E,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAC;CACzB;AAED,wCAAwC;AACxC,MAAM,MAAM,kBAAkB,GAAG;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,YAAY,GAAG,kBAAkB,GAAG,eAAe,CAAA;CAAE,CAAC;AAezH,sEAAsE;AACtE,qBAAa,qBAAqB;IAQrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IAPjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA0D;IACpF,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgE;IACzF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6C;gBAE3C,IAAI,EAAE,kBAAkB;IAcrD,+BAA+B;IAC/B,MAAM,IAAI,MAAM,EAAE;IAIlB;;;;;OAKG;IACH,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB;IAkBzC;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAO/B;;;;;OAKG;IACH,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,GAAE,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAY,GAAG,IAAI;IASrF,oCAAoC;IACpC,QAAQ,IAAI,IAAI;IAIhB,OAAO,CAAC,QAAQ;IAQhB,6FAA6F;YAC/E,IAAI;IAqClB;;;;OAIG;YACW,IAAI;CA4ClB"}

package/dist/backend/backend/src/services/board/canvas/canvas-terminal.service.js

@@ -0,0 +1,223 @@
+/**
+ * Masked terminal tail for the canvas (crewly#1247 v2).
+ *
+ * The owner opens an agent's terminal in the portal: Cloud relays
+ * `terminal_open`, and this service posts the agent's PTY tail to Cloud about
+ * once a second - the first frame is the last 200 lines - until the viewer
+ * stops renewing (a lease of 2 minutes, renewed by `terminal_renew` every
+ * 60 s), closes it, the agent's session ends, Cloud says it is no longer
+ * wanted, or the stream has run 30 minutes.
+ *
+ * Every frame is masked on the machine ({@link maskTerminalText}: secrets by
+ * value, by name and by shape, emails, URL queries, bearer tokens, password
+ * prompts, long token-like words) BEFORE it is posted; a frame is only posted
+ * when its masked content changed. Frames are never written to disk here and
+ * Cloud keeps them in memory only.
+ *
+ * @module services/board/canvas/canvas-terminal.service
+ */
+import { gzipSync } from 'zlib';
+import { CANVAS_CONSTANTS, BOARD_CONSTANTS } from '../../../constants.js';
+import { LoggerService } from '../../core/logger.service.js';
+import { maskTerminalText } from './canvas-redact.js';
+const C = CANVAS_CONSTANTS;
+/** Streams masked PTY tails to Cloud while a viewer holds a lease. */
+export class CanvasTerminalService {
+    deps;
+    streams = new Map();
+    logger;
+    now;
+    fetchImpl;
+    setTimer;
+    clearTimer;
+    constructor(deps) {
+        this.deps = deps;
+        this.logger = deps.logger ?? LoggerService.getInstance().createComponentLogger('CanvasTerminal');
+        this.now = deps.now ?? Date.now;
+        this.fetchImpl = deps.fetchImpl ?? ((input, init) => fetch(input, init));
+        this.setTimer =
+            deps.setTimeout ??
+                ((fn, ms) => {
+                    const t = setTimeout(fn, ms);
+                    t.unref?.();
+                    return t;
+                });
+        this.clearTimer = deps.clearTimeout ?? ((h) => clearTimeout(h));
+    }
+    /** Sessions being streamed. */
+    active() {
+        return [...this.streams.keys()];
+    }
+    /**
+     * Start (or restart) a stream; the first frame goes out at once.
+     *
+     * @param session - Agent session
+     * @returns Whether it is streaming
+     */
+    open(session) {
+        if (!this.deps.cloud.getToken() || !this.deps.cloud.getCloudUrl())
+            return { ok: false, code: 'not_signed_in' };
+        if (!this.deps.exists(session))
+            return { ok: false, code: 'no_session' };
+        const existing = this.streams.get(session);
+        if (existing) {
+            existing.leaseUntil = this.now() + C.TERMINAL_LEASE_MS;
+            existing.force = true;
+            this.schedule(existing, 0);
+            return { ok: true };
+        }
+        if (this.streams.size >= C.TERMINAL_MAX_STREAMS)
+            return { ok: false, code: 'too_many_streams' };
+        const now = this.now();
+        const stream = { session, seq: 0, startedAt: now, leaseUntil: now + C.TERMINAL_LEASE_MS, lastKey: null, failures: 0, timer: null, busy: false, force: true };
+        this.streams.set(session, stream);
+        this.schedule(stream, 0);
+        return { ok: true };
+    }
+    /**
+     * The viewer is still there: extend the lease.
+     *
+     * @param session - Agent session
+     * @returns False when no stream is open (the viewer must open again)
+     */
+    renew(session) {
+        const s = this.streams.get(session);
+        if (!s)
+            return false;
+        s.leaseUntil = this.now() + C.TERMINAL_LEASE_MS;
+        return true;
+    }
+    /**
+     * Stop a stream; a last frame tells Cloud it ended.
+     *
+     * @param session - Agent session
+     * @param reason - Why it ended
+     */
+    close(session, reason = 'closed') {
+        const s = this.streams.get(session);
+        if (!s)
+            return;
+        this.streams.delete(session);
+        if (s.timer)
+            this.clearTimer(s.timer);
+        s.timer = null;
+        void this.post(s, [], true, reason).catch(() => undefined);
+    }
+    /** Stop every stream (shutdown). */
+    closeAll() {
+        for (const session of [...this.streams.keys()])
+            this.close(session, 'closed');
+    }
+    schedule(s, delayMs) {
+        if (s.timer)
+            this.clearTimer(s.timer);
+        s.timer = this.setTimer(() => {
+            s.timer = null;
+            void this.tick(s);
+        }, delayMs);
+    }
+    /** One frame: stop if the stream is over, else mask the tail and post it when it changed. */
+    async tick(s) {
+        if (this.streams.get(s.session) !== s || s.busy)
+            return;
+        s.busy = true;
+        try {
+            const now = this.now();
+            if (now > s.leaseUntil)
+                return this.close(s.session, 'lease_expired');
+            if (now - s.startedAt > C.TERMINAL_MAX_STREAM_MS)
+                return this.close(s.session, 'too_long');
+            if (!this.deps.exists(s.session))
+                return this.close(s.session, 'session_gone');
+            let raw = null;
+            try {
+                raw = this.deps.capture(s.session, C.TERMINAL_TAIL_LINES);
+            }
+            catch {
+                raw = null;
+            }
+            if (raw !== null) {
+                const lines = maskTerminalText(raw, this.deps.secrets?.() ?? []);
+                const key = lines.join('\n');
+                if (s.force || key !== s.lastKey) {
+                    const outcome = await this.post(s, lines, false);
+                    if (this.streams.get(s.session) !== s)
+                        return;
+                    if (outcome === 'stop')
+                        return this.close(s.session, 'cloud_stopped');
+                    if (outcome === 'ok') {
+                        s.lastKey = key;
+                        s.force = false;
+                        s.failures = 0;
+                    }
+                    else {
+                        s.failures += 1;
+                        if (s.failures >= C.TERMINAL_MAX_FAILURES)
+                            return this.close(s.session, 'send_failed');
+                    }
+                }
+            }
+            if (this.streams.get(s.session) === s)
+                this.schedule(s, C.TERMINAL_FRAME_INTERVAL_MS);
+        }
+        finally {
+            s.busy = false;
+        }
+    }
+    /**
+     * Post one frame.
+     *
+     * @returns `ok`; `stop` when Cloud no longer wants frames (404 / 403 / 410, `keep: false`); `retry` on any other failure
+     */
+    async post(s, lines, closed, reason) {
+        const token = this.deps.cloud.getToken();
+        const base = this.deps.cloud.getCloudUrl();
+        if (!token || !base)
+            return 'retry';
+        const instanceId = (await this.deps.identity()).instanceId;
+        s.seq += 1;
+        const frame = {
+            instanceId,
+            session: s.session,
+            seq: s.seq,
+            at: new Date(this.now()).toISOString(),
+            lines,
+            ...(closed ? { closed: true, ...(reason ? { reason } : {}) } : {}),
+        };
+        let refreshed = false;
+        for (let attempt = 0; attempt < 2; attempt += 1) {
+            let response;
+            try {
+                response = await this.fetchImpl(`${base.replace(/\/$/, '')}${C.TERMINAL_FRAME_PATH}`, {
+                    method: 'POST',
+                    headers: {
+                        Authorization: `Bearer ${this.deps.cloud.getToken() ?? token}`,
+                        'Content-Type': 'application/json',
+                        'Content-Encoding': 'gzip',
+                        [BOARD_CONSTANTS.INSTANCE_HEADER]: instanceId,
+                    },
+                    body: gzipSync(Buffer.from(JSON.stringify(frame))),
+                    signal: AbortSignal.timeout(C.REQUEST_TIMEOUT_MS),
+                });
+            }
+            catch {
+                return 'retry';
+            }
+            if (response.status === 401 && !refreshed && this.deps.cloud.tryRefreshToken) {
+                refreshed = true;
+                if (await this.deps.cloud.tryRefreshToken().catch(() => false))
+                    continue;
+            }
+            if (response.status === 404 || response.status === 403 || response.status === 410)
+                return 'stop';
+            if (!response.ok)
+                return 'retry';
+            if (closed)
+                return 'ok';
+            const parsed = (await response.json().catch(() => null));
+            return parsed?.data?.keep === false ? 'stop' : 'ok';
+        }
+        return 'retry';
+    }
+}
+//# sourceMappingURL=canvas-terminal.service.js.map

package/dist/backend/backend/src/services/board/canvas/canvas-terminal.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-terminal.service.js","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-terminal.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAC;AAChC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE1E,OAAO,EAAE,aAAa,EAAwB,MAAM,8BAA8B,CAAC;AACnF,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAGtD,MAAM,CAAC,GAAG,gBAAgB,CAAC;AA2C3B,sEAAsE;AACtE,MAAM,OAAO,qBAAqB;IAQJ;IAPZ,OAAO,GAAG,IAAI,GAAG,EAAkB,CAAC;IACpC,MAAM,CAAkB;IACxB,GAAG,CAAe;IAClB,SAAS,CAA0D;IACnE,QAAQ,CAAgE;IACxE,UAAU,CAA6C;IAExE,YAA6B,IAAwB;QAAxB,SAAI,GAAJ,IAAI,CAAoB;QACpD,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,gBAAgB,CAAC,CAAC;QACjG,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,QAAQ;YACZ,IAAI,CAAC,UAAU;gBACf,CAAC,CAAC,EAAE,EAAE,EAAE,EAAE,EAAE;oBACX,MAAM,CAAC,GAAG,UAAU,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC7B,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;oBACZ,OAAO,CAAC,CAAC;gBACV,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,YAAY,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,CAAC;IAED,+BAA+B;IAC/B,MAAM;QACL,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IAED;;;;;OAKG;IACH,IAAI,CAAC,OAAe;QACnB,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QAC/G,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QACzE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC3C,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC;YACvD,QAAQ,CAAC,KAAK,GAAG,IAAI,CAAC;YACtB,IAAI,CAAC,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;YAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACrB,CAAC;QACD,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,CAAC,CAAC,oBAAoB;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;QAChG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,MAAM,GAAW,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,UAAU,EAAE,GAAG,GAAG,CAAC,CAAC,iBAAiB,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QACrK,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;QACzB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrB,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAe;QACpB,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACrB,CAAC,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,iBAAiB,CAAC;QAChD,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,OAAe,EAAE,SAA+C,QAAQ;QAC7E,MAAM,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QACpC,IAAI,CAAC,CAAC;YAAE,OAAO;QACf,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,CAAC,CAAC,KAAK;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;QACf,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5D,CAAC;IAED,oCAAoC;IACpC,QAAQ;QACP,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;IAC/E,CAAC;IAEO,QAAQ,CAAC,CAAS,EAAE,OAAe;QAC1C,IAAI,CAAC,CAAC,KAAK;YAAE,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtC,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;YAC5B,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC;YACf,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACnB,CAAC,EAAE,OAAO,CAAC,CAAC;IACb,CAAC;IAED,6FAA6F;IACrF,KAAK,CAAC,IAAI,CAAC,CAAS;QAC3B,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI;YAAE,OAAO;QACxD,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,GAAG,GAAG,CAAC,CAAC,UAAU;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;YACtE,IAAI,GAAG,GAAG,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,sBAAsB;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;YAC3F,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC;gBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YAC/E,IAAI,GAAG,GAAkB,IAAI,CAAC;YAC9B,IAAI,CAAC;gBACJ,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,mBAAmB,CAAC,CAAC;YAC3D,CAAC;YAAC,MAAM,CAAC;gBACR,GAAG,GAAG,IAAI,CAAC;YACZ,CAAC;YACD,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;gBACjE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,CAAC,KAAK,IAAI,GAAG,KAAK,CAAC,CAAC,OAAO,EAAE,CAAC;oBAClC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;oBACjD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;wBAAE,OAAO;oBAC9C,IAAI,OAAO,KAAK,MAAM;wBAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,eAAe,CAAC,CAAC;oBACtE,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;wBACtB,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC;wBAChB,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC;wBAChB,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC;oBAChB,CAAC;yBAAM,CAAC;wBACP,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC;wBAChB,IAAI,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,qBAAqB;4BAAE,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;oBACxF,CAAC;gBACF,CAAC;YACF,CAAC;YACD,IAAI,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACvF,CAAC;gBAAS,CAAC;YACV,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC;QAChB,CAAC;IACF,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,IAAI,CAAC,CAAS,EAAE,KAAe,EAAE,MAAe,EAAE,MAAgC;QAC/F,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACzC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC3C,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI;YAAE,OAAO,OAAO,CAAC;QACpC,MAAM,UAAU,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,UAAU,CAAC;QAC3D,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QACX,MAAM,KAAK,GAAkB;YAC5B,UAAU;YACV,OAAO,EAAE,CAAC,CAAC,OAAO;YAClB,GAAG,EAAE,CAAC,CAAC,GAAG;YACV,EAAE,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YACtC,KAAK;YACL,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClE,CAAC;QACF,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,QAAkB,CAAC;YACvB,IAAI,CAAC;gBACJ,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,mBAAmB,EAAE,EAAE;oBACrF,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACR,aAAa,EAAE,UAAU,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,EAAE,IAAI,KAAK,EAAE;wBAC9D,cAAc,EAAE,kBAAkB;wBAClC,kBAAkB,EAAE,MAAM;wBAC1B,CAAC,eAAe,CAAC,eAAe,CAAC,EAAE,UAAU;qBAC7C;oBACD,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;oBAClD,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,kBAAkB,CAAC;iBACjD,CAAC,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACR,OAAO,OAAO,CAAC;YAChB,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC;gBAC9E,SAAS,GAAG,IAAI,CAAC;gBACjB,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC;oBAAE,SAAS;YAC1E,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;gBAAE,OAAO,MAAM,CAAC;YACjG,IAAI,CAAC,QAAQ,CAAC,EAAE;gBAAE,OAAO,OAAO,CAAC;YACjC,IAAI,MAAM;gBAAE,OAAO,IAAI,CAAC;YACxB,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAyC,CAAC;YACjG,OAAO,MAAM,EAAE,IAAI,EAAE,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;QACrD,CAAC;QACD,OAAO,OAAO,CAAC;IAChB,CAAC;CACD"}

package/dist/backend/backend/src/services/board/canvas/canvas-transcript.tail.d.ts

@@ -0,0 +1,126 @@
+/**
+ * Transcript tail for the canvas (crewly#1247 v2): the agent's own short text
+ * lines (and, for Codex, its tool calls) from the runtime's own transcript.
+ *
+ * - Claude Code: `<claude home>/projects/<cwd>/<session id>.jsonl` (located the
+ *   way the turn-state fallback does). Only `assistant` `text` blocks become
+ *   steps, reduced by {@link shortAgentLine}; a `tool_result`'s `is_error` flag
+ *   marks its step failed. Tool inputs, tool OUTPUTS, thinking and user
+ *   messages are never read into anything.
+ * - Codex: `<codex home>/sessions/.../rollout-*-<conversation id>.jsonl`.
+ *   Assistant `output_text` becomes text steps; shell / exec / apply_patch
+ *   calls become command / edit steps (reduced to executable + subcommand /
+ *   file name), paired with their output by call id for the duration. Output
+ *   bodies are not read.
+ *
+ * Incremental: a byte cursor per file, only whole new lines, at most
+ * {@link CANVAS_CONSTANTS.TAIL_MAX_READ_BYTES} per pass; lines that cannot be
+ * a text / error line are skipped by substring before any JSON.parse (tool
+ * results are the bulk of a transcript). Nothing is logged or stored beyond
+ * the redacted step.
+ *
+ * @module services/board/canvas/canvas-transcript.tail
+ */
+import type { SecretEnvValue } from '../../../utils/secret-env.js';
+import { relativePath } from '../board-redact.js';
+import { type StepShape } from './canvas-step.normalizer.js';
+import type { StepStream } from './canvas-step.stream.js';
+/** What a chunk of transcript says. */
+export type TailItem = {
+    kind: 'text';
+    id: string;
+    at: number;
+    text: string;
+} | {
+    kind: 'tool_error';
+    toolUseId: string;
+    at: number;
+} | {
+    kind: 'step_start';
+    id: string;
+    at: number;
+    shape: StepShape;
+} | {
+    kind: 'step_end';
+    id: string;
+    at: number;
+};
+/** Parse options. */
+export interface TailParseOptions {
+    secrets?: readonly SecretEnvValue[];
+    roots?: readonly string[];
+    /** Drop text older than this (epoch ms) */
+    minAt?: number;
+}
+/**
+ * Items from whole lines of a Claude Code transcript.
+ *
+ * @param text - Whole JSONL lines
+ * @param opts - Secrets to mask, oldest text to keep
+ * @param now - Fallback time for an entry with no timestamp
+ * @returns Items in file order
+ */
+export declare function parseClaudeTail(text: string, opts?: TailParseOptions, now?: number): TailItem[];
+/**
+ * Items from whole lines of a Codex rollout.
+ *
+ * @param text - Whole JSONL lines
+ * @param opts - Secrets to mask, project roots, oldest text to keep
+ * @param now - Fallback time for an entry with no timestamp
+ * @returns Items in file order
+ */
+export declare function parseCodexTail(text: string, opts?: TailParseOptions, now?: number): TailItem[];
+/** Where a session's transcript is. */
+export interface TailTarget {
+    kind: 'claude' | 'codex';
+    file: string;
+}
+/** Collaborators. */
+export interface TranscriptTailDeps {
+    steps: StepStream;
+    /** Sessions to follow */
+    sessions: () => string[];
+    /** The session's transcript, or null (Gemini, agy: none) */
+    locate: (session: string) => Promise<TailTarget | null> | TailTarget | null;
+    /** Project roots of a session (relative paths) */
+    roots?: (session: string) => readonly string[];
+    /** Exact secret values to mask */
+    secrets?: () => readonly SecretEnvValue[];
+    /** Someone is watching: poll faster */
+    isLive?: () => boolean;
+    now?: () => number;
+    setTimeout?: (fn: () => void, ms: number) => ReturnType<typeof setTimeout>;
+    clearTimeout?: (h: ReturnType<typeof setTimeout>) => void;
+}
+/**
+ * Follows the transcripts of the agents and feeds the step stream.
+ */
+export declare class TranscriptTailService {
+    private readonly deps;
+    private readonly cursors;
+    private readonly located;
+    private timer;
+    private running;
+    private started;
+    private readonly now;
+    private readonly setTimer;
+    private readonly clearTimer;
+    constructor(deps: TranscriptTailDeps);
+    /** Start polling. Idempotent. */
+    start(): void;
+    /** Stop polling. */
+    stop(): void;
+    private schedule;
+    /**
+     * One pass over every followed session. Never throws.
+     *
+     * @returns Items fed to the stream
+     */
+    tick(): Promise<number>;
+    private target;
+    private follow;
+    private feed;
+}
+/** Re-exported for the wiring: a path made relative to project roots. */
+export { relativePath };
+//# sourceMappingURL=canvas-transcript.tail.d.ts.map

package/dist/backend/backend/src/services/board/canvas/canvas-transcript.tail.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas-transcript.tail.d.ts","sourceRoot":"","sources":["../../../../../../../backend/src/services/board/canvas/canvas-transcript.tail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAKH,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EAAc,KAAK,SAAS,EAAE,MAAM,6BAA6B,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAI1D,uCAAuC;AACvC,MAAM,MAAM,QAAQ,GACjB;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,CAAA;CAAE,GAChE;IAAE,IAAI,EAAE,UAAU,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhD,qBAAqB;AACrB,MAAM,WAAW,gBAAgB;IAChC,OAAO,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IACpC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1B,2CAA2C;IAC3C,KAAK,CAAC,EAAE,MAAM,CAAC;CACf;AAOD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,EAAE,GAAG,GAAE,MAAmB,GAAG,QAAQ,EAAE,CAuC/G;AAgCD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,EAAE,GAAG,GAAE,MAAmB,GAAG,QAAQ,EAAE,CAoD9G;AAED,uCAAuC;AACvC,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,qBAAqB;AACrB,MAAM,WAAW,kBAAkB;IAClC,KAAK,EAAE,UAAU,CAAC;IAClB,yBAAyB;IACzB,QAAQ,EAAE,MAAM,MAAM,EAAE,CAAC;IACzB,4DAA4D;IAC5D,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,UAAU,GAAG,IAAI,CAAC;IAC5E,kDAAkD;IAClD,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,SAAS,MAAM,EAAE,CAAC;IAC/C,kCAAkC;IAClC,OAAO,CAAC,EAAE,MAAM,SAAS,cAAc,EAAE,CAAC;IAC1C,uCAAuC;IACvC,MAAM,CAAC,EAAE,MAAM,OAAO,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,IAAI,EAAE,EAAE,EAAE,MAAM,KAAK,UAAU,CAAC,OAAO,UAAU,CAAC,CAAC;IAC3E,YAAY,CAAC,EAAE,CAAC,CAAC,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,KAAK,IAAI,CAAC;CAC1D;AAUD;;GAEG;AACH,qBAAa,qBAAqB;IAUrB,OAAO,CAAC,QAAQ,CAAC,IAAI;IATjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA6B;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgE;IACxF,OAAO,CAAC,KAAK,CAA8C;IAC3D,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAgE;IACzF,OAAO,CAAC,QAAQ,CAAC,UAAU,CAA6C;gBAE3C,IAAI,EAAE,kBAAkB;IAYrD,iCAAiC;IACjC,KAAK,IAAI,IAAI;IAMb,oBAAoB;IACpB,IAAI,IAAI,IAAI;IAMZ,OAAO,CAAC,QAAQ;IAShB;;;;OAIG;IACG,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC;YAsBf,MAAM;YAcN,MAAM;IAoDpB,OAAO,CAAC,IAAI;CA4BZ;AAED,yEAAyE;AACzE,OAAO,EAAE,YAAY,EAAE,CAAC"}