dsh-taskboard 0.1.2 → 0.2.0

package/lib/host/execution.js

@@ -1,18 +1,5 @@
-import { effectivePrompt, newExecutionId } from "../shared/protocol.js";
+import { effectivePrompt, newCommentId, newExecutionId, normalizeBody } from "../shared/protocol.js";
 import { MessageId } from "./sdk.js";
-//#region src/host/execution.ts
-/**
-* Host execution service: runs a task through dsh's REAL session machinery —
-* a fresh agent+session inside the task's project workspace (creation carries
-* the pinned model when the task has one), the session is attached to the
-* workspace so it appears in the GUI's project session list, the effective
-* prompt is submitted as an ordinary user message, and the turn settlement
-* (turn/end reason) is folded back into the task's execution record.
-*
-* Every execution is a NEW session: clean context, no reuse of previous runs.
-*
-* @module dsh-taskboard/host/execution
-*/
 /** Whether a turn/end payload closed with an error reason. */
 function isErrorTurnEnd(data) {
 	if (typeof data !== "object" || data === null) return void 0;
@@ -30,8 +17,8 @@ function isErrorTurnEnd(data) {
 */
 var ExecutionService = class {
 	deps;
-	/** Execution ids currently settling. */
-	settling = /* @__PURE__ */ new Map();
+	/** Live executions by execution id (settles and cancels remove entries). */
+	runs = /* @__PURE__ */ new Map();
 	/** @param deps - store + agents + workspaces + events + clock. */
 	constructor(deps) {
 		this.deps = deps;
@@ -41,13 +28,25 @@ var ExecutionService = class {
 			if (failure !== void 0) this.noteFailure(sessionId, failure.message);
 		});
 	}
-	/** Record a turn failure against the running execution of that session. */
+	/** Record a turn failure against the running execution of that session and give the task back. */
 	noteFailure(sessionId, message) {
 		this.deps.store.mutate("execution-recorded", (ledger) => {
 			for (const task of ledger.tasks) for (const execution of task.executions) if (execution.sessionId === sessionId && execution.outcome === "running") {
 				execution.outcome = "failed";
 				execution.error = message.slice(0, 500);
 				execution.endedAt = this.deps.now();
+				if (task.status === "in_progress" && task.claimedBy === sessionId) {
+					task.status = "todo";
+					task.updatedAt = this.deps.now();
+					delete task.claimedBy;
+					delete task.claimedAt;
+					task.comments.push({
+						id: newCommentId(),
+						body: normalizeBody(`[系统] 执行失败：${message.slice(0, 300)}；任务已退回待办。`),
+						version: 1,
+						createdAt: this.deps.now()
+					});
+				}
 				return [task];
 			}
 		});
@@ -66,20 +65,26 @@ var ExecutionService = class {
 	}
 	/**
 	* Run one task now (manual button or scheduler tick).
+	*
+	* The in-progress gate and the execution-open write happen inside ONE
+	* serial-queue mutation, so two overlapping run() calls (double click,
+	* overlapping scheduler ticks) can never both pass — exactly one session
+	* is opened per task.
 	* @param taskId - the task to run.
 	* @param trigger - what started it.
 	* @returns the immediate result; settlement lands in the ledger.
 	*/
 	async run(taskId, trigger) {
+		const max = this.deps.maxConcurrent ?? 3;
+		if (this.runs.size >= max) return {
+			ok: false,
+			error: `execution concurrency limit reached (${this.runs.size}/${max} running)`
+		};
 		const task = this.deps.store.get(taskId);
 		if (task === void 0 || task.trashedAt !== void 0) return {
 			ok: false,
 			error: `no task ${taskId}`
 		};
-		if (task.status === "in_progress") return {
-			ok: false,
-			error: "task is already in progress"
-		};
 		const workspace = this.deps.workspaces.get(task.workspaceId);
 		if (workspace === void 0) return {
 			ok: false,
@@ -87,9 +92,17 @@ var ExecutionService = class {
 		};
 		const executionId = newExecutionId();
 		const sessionId = this.deps.mintSessionId?.() ?? `session-taskboard-${crypto.randomUUID()}`;
+		let gate;
 		await this.deps.store.mutate("execution-recorded", (ledger) => {
 			const target = ledger.tasks.find((t) => t.id === taskId);
-			if (target === void 0) return void 0;
+			if (target === void 0 || target.trashedAt !== void 0) {
+				gate = `no task ${taskId}`;
+				return;
+			}
+			if (target.status === "in_progress") {
+				gate = "task is already in progress";
+				return;
+			}
 			target.executions.push({
 				id: executionId,
 				trigger,
@@ -99,8 +112,14 @@ var ExecutionService = class {
 			target.status = "in_progress";
 			target.updatedAt = this.deps.now();
 			target.updatedBy = { kind: "user" };
+			target.claimedBy = sessionId;
+			target.claimedAt = this.deps.now();
 			return [target];
 		});
+		if (gate !== void 0) return {
+			ok: false,
+			error: gate
+		};
 		let handle;
 		try {
 			const model = task.model ?? this.deps.defaultModel?.();
@@ -141,19 +160,40 @@ var ExecutionService = class {
 		};
 		handle.agent.followup(message);
 		const settle = () => {
-			this.settling.delete(executionId);
+			this.runs.delete(executionId);
 			this.deps.store.mutate("execution-recorded", (ledger) => {
 				for (const t of ledger.tasks) {
 					const execution = t.executions.find((e) => e.id === executionId);
 					if (execution !== void 0 && execution.outcome === "running") {
+						const now = this.deps.now();
 						execution.outcome = "succeeded";
-						execution.endedAt = this.deps.now();
+						execution.endedAt = now;
+						if (t.status === "in_progress" && t.claimedBy === sessionId) {
+							delete t.claimedBy;
+							delete t.claimedAt;
+						}
+						if (t.status === "in_progress") {
+							const commented = t.comments.some((c) => c.threadId === sessionId);
+							t.comments.push({
+								id: newCommentId(),
+								body: normalizeBody(commented ? "[系统] 执行会话已结束并留有评论，但未移至待验收；系统自动移入待验收。" : "[系统] 执行会话已结束，但未按协议交接（无评论、未移至待验收）；系统自动移入待验收，请审查后退回或验收。"),
+								version: 1,
+								createdAt: now
+							});
+							t.status = "in_review";
+							t.updatedAt = now;
+							t.updatedBy = { kind: "user" };
+						}
 						return [t];
 					}
 				}
 			});
 		};
-		this.settling.set(executionId, settle);
+		this.runs.set(executionId, {
+			sessionId,
+			settle,
+			dispose: () => handle.dispose()
+		});
 		handle.agent.whenIdle().then(settle, () => {
 			this.noteFailure(sessionId, "agent did not reach quiescence");
 			settle();
@@ -164,19 +204,107 @@ var ExecutionService = class {
 			sessionId
 		};
 	}
-	/** The prompt text one execution submits (task context + instructions). */
+	/** How many executions are currently running (for the concurrency cap). */
+	inFlight() {
+		return this.runs.size;
+	}
+	/**
+	* Cancel the running execution of a task (user action): stop the agent
+	* session, mark the execution cancelled, and hand the task back to todo.
+	* @param taskId - the task whose execution should be stopped.
+	* @returns the immediate result.
+	*/
+	async cancel(taskId) {
+		const task = this.deps.store.get(taskId);
+		if (task === void 0) return {
+			ok: false,
+			error: `no task ${taskId}`
+		};
+		const running = [...task.executions].reverse().find((e) => e.outcome === "running");
+		if (running === void 0) return {
+			ok: false,
+			error: "no running execution"
+		};
+		const entry = this.runs.get(running.id);
+		this.runs.delete(running.id);
+		try {
+			await entry?.dispose();
+		} catch {}
+		await this.deps.store.mutate("execution-recorded", (ledger) => {
+			const target = ledger.tasks.find((t) => t.id === taskId);
+			if (target === void 0) return void 0;
+			const execution = target.executions.find((e) => e.id === running.id);
+			if (execution === void 0 || execution.outcome !== "running") return void 0;
+			execution.outcome = "cancelled";
+			execution.endedAt = this.deps.now();
+			if (target.status === "in_progress") {
+				target.status = "todo";
+				target.updatedAt = this.deps.now();
+				delete target.claimedBy;
+				delete target.claimedAt;
+			}
+			return [target];
+		});
+		return {
+			ok: true,
+			executionId: running.id
+		};
+	}
+	/**
+	* Startup reconciliation after a host restart: executions left `running`
+	* by the previous process can never settle here (their settlement watchers
+	* died with it), so mark them failed and hand their tasks back to todo.
+	*/
+	async reconcile() {
+		await this.deps.store.mutate("execution-recorded", (ledger) => {
+			const now = this.deps.now();
+			const touched = [];
+			for (const task of ledger.tasks) {
+				let dirty = false;
+				for (const execution of task.executions) if (execution.outcome === "running") {
+					execution.outcome = "failed";
+					execution.error = "interrupted by host restart";
+					execution.endedAt = now;
+					dirty = true;
+				}
+				if (!dirty) continue;
+				if (task.status === "in_progress") {
+					task.status = "todo";
+					task.updatedAt = now;
+					delete task.claimedBy;
+					delete task.claimedAt;
+				}
+				touched.push(task);
+			}
+			return touched.length > 0 ? touched : void 0;
+		});
+	}
+	/**
+	* The prompt text one execution submits (task context + instructions).
+	* The effective prompt supports two template variables, rendered from the
+	* task's own history at submit time (valuable for recurring patrols):
+	* `{{lastExecution}}` → the previous execution's trigger/outcome/error;
+	* `{{lastComments}}` → the last three comments (who + body).
+	*/
 	executionPrompt(task) {
 		const state = "本任务由执行服务启动本会话并已置为 in_progress（你无需再认领，也无需移到 done）。";
 		const tail = `完成后请：1) 用 taskboard_get 读取任务 ${task.id} 拿最新 version；2) 用 taskboard_comment_add 留评论（做了什么改动、如何验证、剩余风险）；3) 用 taskboard_move 把任务 ${task.id} 移到 in_review（带 ifVersion）。`;
-		return `【任务】${task.title}（任务 ID: ${task.id}）\n\n${state}\n\n${effectivePrompt(task)}\n\n${tail}`;
+		const base = effectivePrompt(task);
+		const lastExec = [...task.executions].reverse().find((e) => e.outcome !== "running");
+		const lastExecText = lastExec === void 0 ? "（无）" : `${lastExec.trigger} · ${lastExec.outcome}${lastExec.error !== void 0 ? ` · ${lastExec.error.slice(0, 200)}` : ""} · ${new Date(lastExec.startedAt ?? 0).toISOString()}`;
+		const lastCommentsText = task.comments.slice(-3).map((c) => `[${c.threadId !== void 0 ? "agent" : "user"}] ${c.body}`).join("\n") || "（无）";
+		const body = base.replace(/\{\{lastExecution\}\}/g, lastExecText).replace(/\{\{lastComments\}\}/g, lastCommentsText);
+		return `【任务】${task.title}（任务 ID: ${task.id}）\n\n${state}\n\n${body}\n\n${tail}`;
 	}
-	/** Move a task back out of in_progress after a failed start. */
+	/** Move a task back out of in_progress (and release its hold) after a failed start. */
 	async revertProgress(taskId) {
 		await this.deps.store.mutate("execution-recorded", (ledger) => {
 			const target = ledger.tasks.find((t) => t.id === taskId);
 			if (target !== void 0 && target.status === "in_progress") {
 				target.status = "todo";
 				target.updatedAt = this.deps.now();
+				delete target.claimedBy;
+				delete target.claimedAt;
 				return [target];
 			}
 		});

package/lib/host/execution.js.map

@@ -1 +1 @@
-{"version":3,"file":"execution.js","names":[],"sources":["../../src/host/execution.ts"],"sourcesContent":["/**\n * Host execution service: runs a task through dsh's REAL session machinery —\n * a fresh agent+session inside the task's project workspace (creation carries\n * the pinned model when the task has one), the session is attached to the\n * workspace so it appears in the GUI's project session list, the effective\n * prompt is submitted as an ordinary user message, and the turn settlement\n * (turn/end reason) is folded back into the task's execution record.\n *\n * Every execution is a NEW session: clean context, no reuse of previous runs.\n *\n * @module dsh-taskboard/host/execution\n */\nimport { effectivePrompt, newExecutionId, type ExecutionRecord, type TaskRecord } from '../shared/protocol.ts'\nimport { MessageId } from './sdk.ts'\nimport type { TaskStore } from './store.ts'\n\n/** Narrow agents face (the registry's create, structurally). */\nexport interface AgentsFace {\n  create(options: {\n    sessionId: string\n    meta?: { cwd?: string }\n    agentOptions?: { provider?: string; model?: string }\n  }): Promise<{\n    agent: {\n      id: string\n      followup(message: unknown): void\n      whenIdle(): Promise<void>\n    }\n    dispose(): Promise<void>\n  }>\n}\n\n/** Narrow workspaces face for execution. */\nexport interface ExecutionWorkspaceFace {\n  get(id: string): { id: string; path: string } | undefined\n  attach(workspaceId: string, sessionId: string): Promise<void>\n}\n\n/** Narrow event-bus face for settlement listening. */\nexport interface EventsFace {\n  onSessionEvent(listener: (sessionId: string, event: { type: string; data?: unknown }) => void): () => void\n}\n\n/** Everything the execution service needs. */\nexport interface ExecutionDeps {\n  store: TaskStore\n  agents: AgentsFace\n  workspaces: ExecutionWorkspaceFace\n  events: EventsFace\n  now: () => number\n  /** The deployment default model (fills sessions of unpinned tasks). */\n  defaultModel?: () => { provider: string; model: string } | undefined\n  /** Mint session ids (injectable for tests). */\n  mintSessionId?: () => string\n  /** Mint message ids (injectable for tests). */\n  mintMessageId?: () => string\n  /** Best-effort session rename (pins the session list title to the task title). */\n  renameSession?: (sessionId: string, title: string) => void\n}\n\n/** Outcome of a run request (immediate; the run settles asynchronously). */\nexport type RunRequestResult =\n  | { ok: true; executionId: string; sessionId: string }\n  | { ok: false; error: string }\n\n/** Whether a turn/end payload closed with an error reason. */\nfunction isErrorTurnEnd(data: unknown): { message: string } | undefined {\n  if (typeof data !== 'object' || data === null) return undefined\n  const reason = (data as { reason?: unknown }).reason\n  if (typeof reason !== 'object' || reason === null) return undefined\n  const kind = (reason as { kind?: unknown }).kind\n  if (kind !== 'error') return undefined\n  const error = (reason as { error?: { message?: unknown } }).error\n  const detail = JSON.stringify(error) ?? ''\n  const message = typeof error?.message === 'string' ? error.message : 'turn failed'\n  console.error('[dsh-taskboard] turn error detail:', detail.slice(0, 2000))\n  void detail\n  return { message }\n}\n\n/**\n * The execution service.\n */\nexport class ExecutionService {\n  /** Execution ids currently settling. */\n  private readonly settling = new Map<string, () => void>()\n\n  /** @param deps - store + agents + workspaces + events + clock. */\n  constructor(private readonly deps: ExecutionDeps) {\n    deps.events.onSessionEvent((sessionId, event) => {\n      if (event.type !== 'turn/end') return\n      const failure = isErrorTurnEnd(event.data)\n      if (failure !== undefined) this.noteFailure(sessionId, failure.message)\n    })\n  }\n\n  /** Record a turn failure against the running execution of that session. */\n  private noteFailure(sessionId: string, message: string): void {\n    void this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        for (const execution of task.executions) {\n          if (execution.sessionId === sessionId && execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = message.slice(0, 500)\n            execution.endedAt = this.deps.now()\n            return [task]\n          }\n        }\n      }\n      return undefined\n    })\n  }\n\n  /** Patch one task's execution record in the ledger. */\n  private async patchExecution(executionId: string, patch: Partial<ExecutionRecord>): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        const execution = task.executions.find(e => e.id === executionId)\n        if (execution !== undefined) {\n          Object.assign(execution, patch)\n          return [task]\n        }\n      }\n      return undefined\n    })\n  }\n\n  /**\n   * Run one task now (manual button or scheduler tick).\n   * @param taskId - the task to run.\n   * @param trigger - what started it.\n   * @returns the immediate result; settlement lands in the ledger.\n   */\n  async run(taskId: string, trigger: ExecutionRecord['trigger']): Promise<RunRequestResult> {\n    const task = this.deps.store.get(taskId)\n    if (task === undefined || task.trashedAt !== undefined) {\n      return { ok: false, error: `no task ${taskId}` }\n    }\n    if (task.status === 'in_progress') {\n      return { ok: false, error: 'task is already in progress' }\n    }\n    const workspace = this.deps.workspaces.get(task.workspaceId)\n    if (workspace === undefined) {\n      return { ok: false, error: `unknown workspace ${task.workspaceId}` }\n    }\n\n    const executionId = newExecutionId()\n    const sessionId = this.deps.mintSessionId?.() ?? `session-taskboard-${crypto.randomUUID()}`\n\n    // 1. Open the execution record and move the card to in_progress in one write.\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined) return undefined\n      target.executions.push({\n        id: executionId,\n        trigger,\n        startedAt: this.deps.now(),\n        outcome: 'running',\n      })\n      target.status = 'in_progress'\n      target.updatedAt = this.deps.now()\n      target.updatedBy = { kind: 'user' }\n      return [target]\n    })\n\n    // 2. Create the fresh agent+session inside the task's project, carrying\n    //    the pinned model — or the deployment default when unpinned (the\n    //    persona template renders {{model}}, so the session always needs one).\n    let handle: Awaited<ReturnType<AgentsFace['create']>>\n    try {\n      const model = task.model ?? this.deps.defaultModel?.()\n      handle = await this.deps.agents.create({\n        sessionId,\n        meta: { cwd: workspace.path },\n        ...(model !== undefined ? { agentOptions: { provider: model.provider, model: model.model } } : {}),\n      })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      await this.patchExecution(executionId, { outcome: 'failed', error: message.slice(0, 500), endedAt: this.deps.now() })\n      await this.revertProgress(taskId)\n      return { ok: false, error: message }\n    }\n\n    // 3. Attach the session to the workspace (GUI project session list).\n    await this.deps.workspaces.attach(task.workspaceId, sessionId).catch(() => { /* cosmetic */ })\n\n    // 3b. Best-effort rename: pin the session title to the task title so the\n    //     session list shows the task name (a user-sourced title also stops\n    //     automatic first-prompt retitling).\n    try {\n      this.deps.renameSession?.(sessionId, task.title)\n    } catch { /* cosmetic */ }\n\n    // 4. Record the session id (execution is really started now).\n    await this.patchExecution(executionId, { sessionId })\n\n    // 5. Submit the effective prompt as an ordinary user message and settle\n    //    on quiescence (turn/end errors were already folded by the listener).\n    //    Source `user` (not `plugin`) so the opening message renders as a\n    //    normal user bubble in the conversation, exactly like a typed prompt.\n    const message = {\n      id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),\n      role: 'user' as const,\n      content: [{ type: 'text' as const, text: this.executionPrompt(task) }],\n      source: { kind: 'user' as const },\n    }\n    handle.agent.followup(message)\n\n    // 6. Settlement watcher.\n    const settle = (): void => {\n      this.settling.delete(executionId)\n      void this.deps.store.mutate('execution-recorded', (ledger) => {\n        for (const t of ledger.tasks) {\n          const execution = t.executions.find(e => e.id === executionId)\n          if (execution !== undefined && execution.outcome === 'running') {\n            execution.outcome = 'succeeded'\n            execution.endedAt = this.deps.now()\n            return [t]\n          }\n        }\n        return undefined\n      })\n    }\n    this.settling.set(executionId, settle)\n    void handle.agent.whenIdle().then(settle, () => {\n      this.noteFailure(sessionId, 'agent did not reach quiescence')\n      settle()\n    })\n\n    return { ok: true, executionId, sessionId }\n  }\n\n  /** The prompt text one execution submits (task context + instructions). */\n  private executionPrompt(task: TaskRecord): string {\n    const state = '本任务由执行服务启动本会话并已置为 in_progress（你无需再认领，也无需移到 done）。'\n    const tail = `完成后请：1) 用 taskboard_get 读取任务 ${task.id} 拿最新 version；`\n      + `2) 用 taskboard_comment_add 留评论（做了什么改动、如何验证、剩余风险）；`\n      + `3) 用 taskboard_move 把任务 ${task.id} 移到 in_review（带 ifVersion）。`\n    return `【任务】${task.title}（任务 ID: ${task.id}）\\n\\n${state}\\n\\n${effectivePrompt(task)}\\n\\n${tail}`\n  }\n\n  /** Move a task back out of in_progress after a failed start. */\n  private async revertProgress(taskId: string): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target !== undefined && target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        return [target]\n      }\n      return undefined\n    })\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAkEA,SAAS,eAAe,MAAgD;CACtE,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO,KAAA;CACtD,MAAM,SAAU,KAA8B;CAC9C,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;CAE1D,IADc,OAA8B,SAC/B,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAS,OAA6C;CAC5D,MAAM,SAAS,KAAK,UAAU,KAAK,KAAK;CACxC,MAAM,UAAU,OAAO,OAAO,YAAY,WAAW,MAAM,UAAU;CACrE,QAAQ,MAAM,sCAAsC,OAAO,MAAM,GAAG,GAAI,CAAC;CAEzE,OAAO,EAAE,QAAQ;AACnB;;;;AAKA,IAAa,mBAAb,MAA8B;CAKC;;CAH7B,2BAA4B,IAAI,IAAwB;;CAGxD,YAAY,MAAsC;EAArB,KAAA,OAAA;EAC3B,KAAK,OAAO,gBAAgB,WAAW,UAAU;GAC/C,IAAI,MAAM,SAAS,YAAY;GAC/B,MAAM,UAAU,eAAe,MAAM,IAAI;GACzC,IAAI,YAAY,KAAA,GAAW,KAAK,YAAY,WAAW,QAAQ,OAAO;EACxE,CAAC;CACH;;CAGA,YAAoB,WAAmB,SAAuB;EAC5D,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC5D,KAAK,MAAM,QAAQ,OAAO,OACxB,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,cAAc,aAAa,UAAU,YAAY,WAAW;IACxE,UAAU,UAAU;IACpB,UAAU,QAAQ,QAAQ,MAAM,GAAG,GAAG;IACtC,UAAU,UAAU,KAAK,KAAK,IAAI;IAClC,OAAO,CAAC,IAAI;GACd;EAIN,CAAC;CACH;;CAGA,MAAc,eAAe,aAAqB,OAAgD;EAChG,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,MAAM,YAAY,KAAK,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;IAChE,IAAI,cAAc,KAAA,GAAW;KAC3B,OAAO,OAAO,WAAW,KAAK;KAC9B,OAAO,CAAC,IAAI;IACd;GACF;EAEF,CAAC;CACH;;;;;;;CAQA,MAAM,IAAI,QAAgB,SAAgE;EACxF,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,KAAa,KAAK,cAAc,KAAA,GAC3C,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EAEjD,IAAI,KAAK,WAAW,eAClB,OAAO;GAAE,IAAI;GAAO,OAAO;EAA8B;EAE3D,MAAM,YAAY,KAAK,KAAK,WAAW,IAAI,KAAK,WAAW;EAC3D,IAAI,cAAc,KAAA,GAChB,OAAO;GAAE,IAAI;GAAO,OAAO,qBAAqB,KAAK;EAAc;EAGrE,MAAM,cAAc,eAAe;EACnC,MAAM,YAAY,KAAK,KAAK,gBAAgB,KAAK,qBAAqB,OAAO,WAAW;EAGxF,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,OAAO,WAAW,KAAK;IACrB,IAAI;IACJ;IACA,WAAW,KAAK,KAAK,IAAI;IACzB,SAAS;GACX,CAAC;GACD,OAAO,SAAS;GAChB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,YAAY,EAAE,MAAM,OAAO;GAClC,OAAO,CAAC,MAAM;EAChB,CAAC;EAKD,IAAI;EACJ,IAAI;GACF,MAAM,QAAQ,KAAK,SAAS,KAAK,KAAK,eAAe;GACrD,SAAS,MAAM,KAAK,KAAK,OAAO,OAAO;IACrC;IACA,MAAM,EAAE,KAAK,UAAU,KAAK;IAC5B,GAAI,UAAU,KAAA,IAAY,EAAE,cAAc;KAAE,UAAU,MAAM;KAAU,OAAO,MAAM;IAAM,EAAE,IAAI,CAAC;GAClG,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,KAAK,eAAe,aAAa;IAAE,SAAS;IAAU,OAAO,QAAQ,MAAM,GAAG,GAAG;IAAG,SAAS,KAAK,KAAK,IAAI;GAAE,CAAC;GACpH,MAAM,KAAK,eAAe,MAAM;GAChC,OAAO;IAAE,IAAI;IAAO,OAAO;GAAQ;EACrC;EAGA,MAAM,KAAK,KAAK,WAAW,OAAO,KAAK,aAAa,SAAS,CAAC,CAAC,YAAY,CAAiB,CAAC;EAK7F,IAAI;GACF,KAAK,KAAK,gBAAgB,WAAW,KAAK,KAAK;EACjD,QAAQ,CAAiB;EAGzB,MAAM,KAAK,eAAe,aAAa,EAAE,UAAU,CAAC;EAMpD,MAAM,UAAU;GACd,IAAI,KAAK,KAAK,gBAAgB,KAAK,UAAU,iBAAiB,OAAO,WAAW,GAAG;GACnF,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAiB,MAAM,KAAK,gBAAgB,IAAI;GAAE,CAAC;GACrE,QAAQ,EAAE,MAAM,OAAgB;EAClC;EACA,OAAO,MAAM,SAAS,OAAO;EAG7B,MAAM,eAAqB;GACzB,KAAK,SAAS,OAAO,WAAW;GAChC,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;IAC5D,KAAK,MAAM,KAAK,OAAO,OAAO;KAC5B,MAAM,YAAY,EAAE,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;KAC7D,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW;MAC9D,UAAU,UAAU;MACpB,UAAU,UAAU,KAAK,KAAK,IAAI;MAClC,OAAO,CAAC,CAAC;KACX;IACF;GAEF,CAAC;EACH;EACA,KAAK,SAAS,IAAI,aAAa,MAAM;EACrC,OAAY,MAAM,SAAS,CAAC,CAAC,KAAK,cAAc;GAC9C,KAAK,YAAY,WAAW,gCAAgC;GAC5D,OAAO;EACT,CAAC;EAED,OAAO;GAAE,IAAI;GAAM;GAAa;EAAU;CAC5C;;CAGA,gBAAwB,MAA0B;EAChD,MAAM,QAAQ;EACd,MAAM,OAAO,gCAAgC,KAAK,GAAG,wFAEtB,KAAK,GAAG;EACvC,OAAO,OAAO,KAAK,MAAM,UAAU,KAAK,GAAG,OAAO,MAAM,MAAM,gBAAgB,IAAI,EAAE,MAAM;CAC5F;;CAGA,MAAc,eAAe,QAA+B;EAC1D,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,eAAe;IAC3D,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,CAAC,MAAM;GAChB;EAEF,CAAC;CACH;AACF"}
+{"version":3,"file":"execution.js","names":[],"sources":["../../src/host/execution.ts"],"sourcesContent":["/**\n * Host execution service: runs a task through dsh's REAL session machinery —\n * a fresh agent+session inside the task's project workspace (creation carries\n * the pinned model when the task has one), the session is attached to the\n * workspace so it appears in the GUI's project session list, the effective\n * prompt is submitted as an ordinary user message, and the turn settlement\n * (turn/end reason) is folded back into the task's execution record.\n *\n * Every execution is a NEW session: clean context, no reuse of previous runs.\n *\n * @module dsh-taskboard/host/execution\n */\nimport {\n  effectivePrompt,\n  newCommentId,\n  newExecutionId,\n  normalizeBody,\n  type ExecutionRecord,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { MessageId } from './sdk.ts'\nimport type { TaskStore } from './store.ts'\n\n/** Default cap on concurrently running executions (env-overridable). */\nexport const DEFAULT_MAX_CONCURRENT = 3\n\n/** Narrow agents face (the registry's create, structurally). */\nexport interface AgentsFace {\n  create(options: {\n    sessionId: string\n    meta?: { cwd?: string }\n    agentOptions?: { provider?: string; model?: string }\n  }): Promise<{\n    agent: {\n      id: string\n      followup(message: unknown): void\n      whenIdle(): Promise<void>\n    }\n    dispose(): Promise<void>\n  }>\n}\n\n/** Narrow workspaces face for execution. */\nexport interface ExecutionWorkspaceFace {\n  get(id: string): { id: string; path: string } | undefined\n  attach(workspaceId: string, sessionId: string): Promise<void>\n}\n\n/** Narrow event-bus face for settlement listening. */\nexport interface EventsFace {\n  onSessionEvent(listener: (sessionId: string, event: { type: string; data?: unknown }) => void): () => void\n}\n\n/** Everything the execution service needs. */\nexport interface ExecutionDeps {\n  store: TaskStore\n  agents: AgentsFace\n  workspaces: ExecutionWorkspaceFace\n  events: EventsFace\n  now: () => number\n  /** The deployment default model (fills sessions of unpinned tasks). */\n  defaultModel?: () => { provider: string; model: string } | undefined\n  /** Mint session ids (injectable for tests). */\n  mintSessionId?: () => string\n  /** Mint message ids (injectable for tests). */\n  mintMessageId?: () => string\n  /** Best-effort session rename (pins the session list title to the task title). */\n  renameSession?: (sessionId: string, title: string) => void\n  /** Max concurrently running executions across all tasks (default 3). */\n  maxConcurrent?: number\n}\n\n/** Outcome of a run request (immediate; the run settles asynchronously). */\nexport type RunRequestResult =\n  | { ok: true; executionId: string; sessionId: string }\n  | { ok: false; error: string }\n\n/** Outcome of a cancel request. */\nexport type CancelRequestResult =\n  | { ok: true; executionId: string }\n  | { ok: false; error: string }\n\n/** Whether a turn/end payload closed with an error reason. */\nfunction isErrorTurnEnd(data: unknown): { message: string } | undefined {\n  if (typeof data !== 'object' || data === null) return undefined\n  const reason = (data as { reason?: unknown }).reason\n  if (typeof reason !== 'object' || reason === null) return undefined\n  const kind = (reason as { kind?: unknown }).kind\n  if (kind !== 'error') return undefined\n  const error = (reason as { error?: { message?: unknown } }).error\n  const detail = JSON.stringify(error) ?? ''\n  const message = typeof error?.message === 'string' ? error.message : 'turn failed'\n  console.error('[dsh-taskboard] turn error detail:', detail.slice(0, 2000))\n  void detail\n  return { message }\n}\n\n/** One live execution tracked for settlement and cancellation. */\ninterface RunEntry {\n  sessionId: string\n  settle: () => void\n  dispose: () => Promise<void>\n}\n\n/**\n * The execution service.\n */\nexport class ExecutionService {\n  /** Live executions by execution id (settles and cancels remove entries). */\n  private readonly runs = new Map<string, RunEntry>()\n\n  /** @param deps - store + agents + workspaces + events + clock. */\n  constructor(private readonly deps: ExecutionDeps) {\n    deps.events.onSessionEvent((sessionId, event) => {\n      if (event.type !== 'turn/end') return\n      const failure = isErrorTurnEnd(event.data)\n      if (failure !== undefined) this.noteFailure(sessionId, failure.message)\n    })\n  }\n\n  /** Record a turn failure against the running execution of that session and give the task back. */\n  private noteFailure(sessionId: string, message: string): void {\n    void this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        for (const execution of task.executions) {\n          if (execution.sessionId === sessionId && execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = message.slice(0, 500)\n            execution.endedAt = this.deps.now()\n            // The failed session will not finish the work: hand the task back\n            // instead of leaving it stuck in in_progress forever — and leave a\n            // system comment so the GUI shows why.\n            if (task.status === 'in_progress' && task.claimedBy === sessionId) {\n              task.status = 'todo'\n              task.updatedAt = this.deps.now()\n              delete task.claimedBy\n              delete task.claimedAt\n              task.comments.push({\n                id: newCommentId(),\n                body: normalizeBody(`[系统] 执行失败：${message.slice(0, 300)}；任务已退回待办。`),\n                version: 1,\n                createdAt: this.deps.now(),\n              })\n            }\n            return [task]\n          }\n        }\n      }\n      return undefined\n    })\n  }\n\n  /** Patch one task's execution record in the ledger. */\n  private async patchExecution(executionId: string, patch: Partial<ExecutionRecord>): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      for (const task of ledger.tasks) {\n        const execution = task.executions.find(e => e.id === executionId)\n        if (execution !== undefined) {\n          Object.assign(execution, patch)\n          return [task]\n        }\n      }\n      return undefined\n    })\n  }\n\n  /**\n   * Run one task now (manual button or scheduler tick).\n   *\n   * The in-progress gate and the execution-open write happen inside ONE\n   * serial-queue mutation, so two overlapping run() calls (double click,\n   * overlapping scheduler ticks) can never both pass — exactly one session\n   * is opened per task.\n   * @param taskId - the task to run.\n   * @param trigger - what started it.\n   * @returns the immediate result; settlement lands in the ledger.\n   */\n  async run(taskId: string, trigger: ExecutionRecord['trigger']): Promise<RunRequestResult> {\n    const max = this.deps.maxConcurrent ?? DEFAULT_MAX_CONCURRENT\n    if (this.runs.size >= max) {\n      return { ok: false, error: `execution concurrency limit reached (${this.runs.size}/${max} running)` }\n    }\n    const task = this.deps.store.get(taskId)\n    if (task === undefined || task.trashedAt !== undefined) {\n      return { ok: false, error: `no task ${taskId}` }\n    }\n    const workspace = this.deps.workspaces.get(task.workspaceId)\n    if (workspace === undefined) {\n      return { ok: false, error: `unknown workspace ${task.workspaceId}` }\n    }\n\n    const executionId = newExecutionId()\n    const sessionId = this.deps.mintSessionId?.() ?? `session-taskboard-${crypto.randomUUID()}`\n\n    // 1. Open the execution record, flip the card to in_progress, and record\n    //    the executing session as the claim holder — atomically.\n    let gate: string | undefined\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined || target.trashedAt !== undefined) {\n        gate = `no task ${taskId}`\n        return undefined\n      }\n      if (target.status === 'in_progress') {\n        gate = 'task is already in progress'\n        return undefined\n      }\n      target.executions.push({\n        id: executionId,\n        trigger,\n        startedAt: this.deps.now(),\n        outcome: 'running',\n      })\n      target.status = 'in_progress'\n      target.updatedAt = this.deps.now()\n      target.updatedBy = { kind: 'user' }\n      target.claimedBy = sessionId\n      target.claimedAt = this.deps.now()\n      return [target]\n    })\n    if (gate !== undefined) return { ok: false, error: gate }\n\n    // 2. Create the fresh agent+session inside the task's project, carrying\n    //    the pinned model — or the deployment default when unpinned (the\n    //    persona template renders {{model}}, so the session always needs one).\n    let handle: Awaited<ReturnType<AgentsFace['create']>>\n    try {\n      const model = task.model ?? this.deps.defaultModel?.()\n      handle = await this.deps.agents.create({\n        sessionId,\n        meta: { cwd: workspace.path },\n        ...(model !== undefined ? { agentOptions: { provider: model.provider, model: model.model } } : {}),\n      })\n    } catch (error) {\n      const message = error instanceof Error ? error.message : String(error)\n      await this.patchExecution(executionId, { outcome: 'failed', error: message.slice(0, 500), endedAt: this.deps.now() })\n      await this.revertProgress(taskId)\n      return { ok: false, error: message }\n    }\n\n    // 3. Attach the session to the workspace (GUI project session list).\n    await this.deps.workspaces.attach(task.workspaceId, sessionId).catch(() => { /* cosmetic */ })\n\n    // 3b. Best-effort rename: pin the session title to the task title so the\n    //     session list shows the task name (a user-sourced title also stops\n    //     automatic first-prompt retitling).\n    try {\n      this.deps.renameSession?.(sessionId, task.title)\n    } catch { /* cosmetic */ }\n\n    // 4. Record the session id (execution is really started now).\n    await this.patchExecution(executionId, { sessionId })\n\n    // 5. Submit the effective prompt as an ordinary user message and settle\n    //    on quiescence (turn/end errors were already folded by the listener).\n    //    Source `user` (not `plugin`) so the opening message renders as a\n    //    normal user bubble in the conversation, exactly like a typed prompt.\n    const message = {\n      id: this.deps.mintMessageId?.() ?? MessageId(`msg-taskboard-${crypto.randomUUID()}`),\n      role: 'user' as const,\n      content: [{ type: 'text' as const, text: this.executionPrompt(task) }],\n      source: { kind: 'user' as const },\n    }\n    handle.agent.followup(message)\n\n    // 6. Settlement watcher: mark succeeded, release the executing session's\n    //    hold, and — when the session did NOT follow the handoff protocol —\n    //    auto-move the card to in_review with a system comment (otherwise a\n    //    disobedient session would leave it hanging in in_progress forever).\n    const settle = (): void => {\n      this.runs.delete(executionId)\n      void this.deps.store.mutate('execution-recorded', (ledger) => {\n        for (const t of ledger.tasks) {\n          const execution = t.executions.find(e => e.id === executionId)\n          if (execution !== undefined && execution.outcome === 'running') {\n            const now = this.deps.now()\n            execution.outcome = 'succeeded'\n            execution.endedAt = now\n            if (t.status === 'in_progress' && t.claimedBy === sessionId) {\n              delete t.claimedBy\n              delete t.claimedAt\n            }\n            if (t.status === 'in_progress') {\n              const commented = t.comments.some(c => c.threadId === sessionId)\n              t.comments.push({\n                id: newCommentId(),\n                body: normalizeBody(commented\n                  ? '[系统] 执行会话已结束并留有评论，但未移至待验收；系统自动移入待验收。'\n                  : '[系统] 执行会话已结束，但未按协议交接（无评论、未移至待验收）；系统自动移入待验收，请审查后退回或验收。'),\n                version: 1,\n                createdAt: now,\n              })\n              t.status = 'in_review'\n              t.updatedAt = now\n              t.updatedBy = { kind: 'user' }\n            }\n            return [t]\n          }\n        }\n        return undefined\n      })\n    }\n    this.runs.set(executionId, { sessionId, settle, dispose: () => handle.dispose() })\n    void handle.agent.whenIdle().then(settle, () => {\n      this.noteFailure(sessionId, 'agent did not reach quiescence')\n      settle()\n    })\n\n    return { ok: true, executionId, sessionId }\n  }\n\n  /** How many executions are currently running (for the concurrency cap). */\n  inFlight(): number {\n    return this.runs.size\n  }\n\n  /**\n   * Cancel the running execution of a task (user action): stop the agent\n   * session, mark the execution cancelled, and hand the task back to todo.\n   * @param taskId - the task whose execution should be stopped.\n   * @returns the immediate result.\n   */\n  async cancel(taskId: string): Promise<CancelRequestResult> {\n    const task = this.deps.store.get(taskId)\n    if (task === undefined) return { ok: false, error: `no task ${taskId}` }\n    const running = [...task.executions].reverse().find(e => e.outcome === 'running')\n    if (running === undefined) return { ok: false, error: 'no running execution' }\n\n    const entry = this.runs.get(running.id)\n    this.runs.delete(running.id)\n    // Stop the agent first (best effort): dispose stops the loop, unregisters\n    // the agent, and removes its session. A late whenIdle settlement no-ops —\n    // the record is no longer 'running'.\n    try {\n      await entry?.dispose()\n    } catch { /* already gone */ }\n\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target === undefined) return undefined\n      const execution = target.executions.find(e => e.id === running.id)\n      if (execution === undefined || execution.outcome !== 'running') return undefined\n      execution.outcome = 'cancelled'\n      execution.endedAt = this.deps.now()\n      if (target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        delete target.claimedBy\n        delete target.claimedAt\n      }\n      return [target]\n    })\n    return { ok: true, executionId: running.id }\n  }\n\n  /**\n   * Startup reconciliation after a host restart: executions left `running`\n   * by the previous process can never settle here (their settlement watchers\n   * died with it), so mark them failed and hand their tasks back to todo.\n   */\n  async reconcile(): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const now = this.deps.now()\n      const touched: TaskRecord[] = []\n      for (const task of ledger.tasks) {\n        let dirty = false\n        for (const execution of task.executions) {\n          if (execution.outcome === 'running') {\n            execution.outcome = 'failed'\n            execution.error = 'interrupted by host restart'\n            execution.endedAt = now\n            dirty = true\n          }\n        }\n        if (!dirty) continue\n        if (task.status === 'in_progress') {\n          task.status = 'todo'\n          task.updatedAt = now\n          delete task.claimedBy\n          delete task.claimedAt\n        }\n        touched.push(task)\n      }\n      return touched.length > 0 ? touched : undefined\n    })\n  }\n\n  /**\n   * The prompt text one execution submits (task context + instructions).\n   * The effective prompt supports two template variables, rendered from the\n   * task's own history at submit time (valuable for recurring patrols):\n   * `{{lastExecution}}` → the previous execution's trigger/outcome/error;\n   * `{{lastComments}}` → the last three comments (who + body).\n   */\n  private executionPrompt(task: TaskRecord): string {\n    const state = '本任务由执行服务启动本会话并已置为 in_progress（你无需再认领，也无需移到 done）。'\n    const tail = `完成后请：1) 用 taskboard_get 读取任务 ${task.id} 拿最新 version；`\n      + `2) 用 taskboard_comment_add 留评论（做了什么改动、如何验证、剩余风险）；`\n      + `3) 用 taskboard_move 把任务 ${task.id} 移到 in_review（带 ifVersion）。`\n    const base = effectivePrompt(task)\n    const lastExec = [...task.executions].reverse().find(e => e.outcome !== 'running')\n    const lastExecText = lastExec === undefined\n      ? '（无）'\n      : `${lastExec.trigger} · ${lastExec.outcome}${lastExec.error !== undefined ? ` · ${lastExec.error.slice(0, 200)}` : ''} · ${new Date(lastExec.startedAt ?? 0).toISOString()}`\n    const lastCommentsText = task.comments.slice(-3)\n      .map(c => `[${c.threadId !== undefined ? 'agent' : 'user'}] ${c.body}`)\n      .join('\\n') || '（无）'\n    const body = base\n      .replace(/\\{\\{lastExecution\\}\\}/g, lastExecText)\n      .replace(/\\{\\{lastComments\\}\\}/g, lastCommentsText)\n    return `【任务】${task.title}（任务 ID: ${task.id}）\\n\\n${state}\\n\\n${body}\\n\\n${tail}`\n  }\n\n  /** Move a task back out of in_progress (and release its hold) after a failed start. */\n  private async revertProgress(taskId: string): Promise<void> {\n    await this.deps.store.mutate('execution-recorded', (ledger) => {\n      const target = ledger.tasks.find(t => t.id === taskId)\n      if (target !== undefined && target.status === 'in_progress') {\n        target.status = 'todo'\n        target.updatedAt = this.deps.now()\n        delete target.claimedBy\n        delete target.claimedAt\n        return [target]\n      }\n      return undefined\n    })\n  }\n}\n"],"mappings":";;;AAmFA,SAAS,eAAe,MAAgD;CACtE,IAAI,OAAO,SAAS,YAAY,SAAS,MAAM,OAAO,KAAA;CACtD,MAAM,SAAU,KAA8B;CAC9C,IAAI,OAAO,WAAW,YAAY,WAAW,MAAM,OAAO,KAAA;CAE1D,IADc,OAA8B,SAC/B,SAAS,OAAO,KAAA;CAC7B,MAAM,QAAS,OAA6C;CAC5D,MAAM,SAAS,KAAK,UAAU,KAAK,KAAK;CACxC,MAAM,UAAU,OAAO,OAAO,YAAY,WAAW,MAAM,UAAU;CACrE,QAAQ,MAAM,sCAAsC,OAAO,MAAM,GAAG,GAAI,CAAC;CAEzE,OAAO,EAAE,QAAQ;AACnB;;;;AAYA,IAAa,mBAAb,MAA8B;CAKC;;CAH7B,uBAAwB,IAAI,IAAsB;;CAGlD,YAAY,MAAsC;EAArB,KAAA,OAAA;EAC3B,KAAK,OAAO,gBAAgB,WAAW,UAAU;GAC/C,IAAI,MAAM,SAAS,YAAY;GAC/B,MAAM,UAAU,eAAe,MAAM,IAAI;GACzC,IAAI,YAAY,KAAA,GAAW,KAAK,YAAY,WAAW,QAAQ,OAAO;EACxE,CAAC;CACH;;CAGA,YAAoB,WAAmB,SAAuB;EAC5D,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC5D,KAAK,MAAM,QAAQ,OAAO,OACxB,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,cAAc,aAAa,UAAU,YAAY,WAAW;IACxE,UAAU,UAAU;IACpB,UAAU,QAAQ,QAAQ,MAAM,GAAG,GAAG;IACtC,UAAU,UAAU,KAAK,KAAK,IAAI;IAIlC,IAAI,KAAK,WAAW,iBAAiB,KAAK,cAAc,WAAW;KACjE,KAAK,SAAS;KACd,KAAK,YAAY,KAAK,KAAK,IAAI;KAC/B,OAAO,KAAK;KACZ,OAAO,KAAK;KACZ,KAAK,SAAS,KAAK;MACjB,IAAI,aAAa;MACjB,MAAM,cAAc,aAAa,QAAQ,MAAM,GAAG,GAAG,EAAE,UAAU;MACjE,SAAS;MACT,WAAW,KAAK,KAAK,IAAI;KAC3B,CAAC;IACH;IACA,OAAO,CAAC,IAAI;GACd;EAIN,CAAC;CACH;;CAGA,MAAc,eAAe,aAAqB,OAAgD;EAChG,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,MAAM,YAAY,KAAK,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;IAChE,IAAI,cAAc,KAAA,GAAW;KAC3B,OAAO,OAAO,WAAW,KAAK;KAC9B,OAAO,CAAC,IAAI;IACd;GACF;EAEF,CAAC;CACH;;;;;;;;;;;;CAaA,MAAM,IAAI,QAAgB,SAAgE;EACxF,MAAM,MAAM,KAAK,KAAK,iBAAA;EACtB,IAAI,KAAK,KAAK,QAAQ,KACpB,OAAO;GAAE,IAAI;GAAO,OAAO,wCAAwC,KAAK,KAAK,KAAK,GAAG,IAAI;EAAW;EAEtG,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,KAAa,KAAK,cAAc,KAAA,GAC3C,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EAEjD,MAAM,YAAY,KAAK,KAAK,WAAW,IAAI,KAAK,WAAW;EAC3D,IAAI,cAAc,KAAA,GAChB,OAAO;GAAE,IAAI;GAAO,OAAO,qBAAqB,KAAK;EAAc;EAGrE,MAAM,cAAc,eAAe;EACnC,MAAM,YAAY,KAAK,KAAK,gBAAgB,KAAK,qBAAqB,OAAO,WAAW;EAIxF,IAAI;EACJ,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,cAAc,KAAA,GAAW;IAC1D,OAAO,WAAW;IAClB;GACF;GACA,IAAI,OAAO,WAAW,eAAe;IACnC,OAAO;IACP;GACF;GACA,OAAO,WAAW,KAAK;IACrB,IAAI;IACJ;IACA,WAAW,KAAK,KAAK,IAAI;IACzB,SAAS;GACX,CAAC;GACD,OAAO,SAAS;GAChB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,YAAY,EAAE,MAAM,OAAO;GAClC,OAAO,YAAY;GACnB,OAAO,YAAY,KAAK,KAAK,IAAI;GACjC,OAAO,CAAC,MAAM;EAChB,CAAC;EACD,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAK;EAKxD,IAAI;EACJ,IAAI;GACF,MAAM,QAAQ,KAAK,SAAS,KAAK,KAAK,eAAe;GACrD,SAAS,MAAM,KAAK,KAAK,OAAO,OAAO;IACrC;IACA,MAAM,EAAE,KAAK,UAAU,KAAK;IAC5B,GAAI,UAAU,KAAA,IAAY,EAAE,cAAc;KAAE,UAAU,MAAM;KAAU,OAAO,MAAM;IAAM,EAAE,IAAI,CAAC;GAClG,CAAC;EACH,SAAS,OAAO;GACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;GACrE,MAAM,KAAK,eAAe,aAAa;IAAE,SAAS;IAAU,OAAO,QAAQ,MAAM,GAAG,GAAG;IAAG,SAAS,KAAK,KAAK,IAAI;GAAE,CAAC;GACpH,MAAM,KAAK,eAAe,MAAM;GAChC,OAAO;IAAE,IAAI;IAAO,OAAO;GAAQ;EACrC;EAGA,MAAM,KAAK,KAAK,WAAW,OAAO,KAAK,aAAa,SAAS,CAAC,CAAC,YAAY,CAAiB,CAAC;EAK7F,IAAI;GACF,KAAK,KAAK,gBAAgB,WAAW,KAAK,KAAK;EACjD,QAAQ,CAAiB;EAGzB,MAAM,KAAK,eAAe,aAAa,EAAE,UAAU,CAAC;EAMpD,MAAM,UAAU;GACd,IAAI,KAAK,KAAK,gBAAgB,KAAK,UAAU,iBAAiB,OAAO,WAAW,GAAG;GACnF,MAAM;GACN,SAAS,CAAC;IAAE,MAAM;IAAiB,MAAM,KAAK,gBAAgB,IAAI;GAAE,CAAC;GACrE,QAAQ,EAAE,MAAM,OAAgB;EAClC;EACA,OAAO,MAAM,SAAS,OAAO;EAM7B,MAAM,eAAqB;GACzB,KAAK,KAAK,OAAO,WAAW;GAC5B,KAAU,KAAK,MAAM,OAAO,uBAAuB,WAAW;IAC5D,KAAK,MAAM,KAAK,OAAO,OAAO;KAC5B,MAAM,YAAY,EAAE,WAAW,MAAK,MAAK,EAAE,OAAO,WAAW;KAC7D,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW;MAC9D,MAAM,MAAM,KAAK,KAAK,IAAI;MAC1B,UAAU,UAAU;MACpB,UAAU,UAAU;MACpB,IAAI,EAAE,WAAW,iBAAiB,EAAE,cAAc,WAAW;OAC3D,OAAO,EAAE;OACT,OAAO,EAAE;MACX;MACA,IAAI,EAAE,WAAW,eAAe;OAC9B,MAAM,YAAY,EAAE,SAAS,MAAK,MAAK,EAAE,aAAa,SAAS;OAC/D,EAAE,SAAS,KAAK;QACd,IAAI,aAAa;QACjB,MAAM,cAAc,YAChB,yCACA,uDAAuD;QAC3D,SAAS;QACT,WAAW;OACb,CAAC;OACD,EAAE,SAAS;OACX,EAAE,YAAY;OACd,EAAE,YAAY,EAAE,MAAM,OAAO;MAC/B;MACA,OAAO,CAAC,CAAC;KACX;IACF;GAEF,CAAC;EACH;EACA,KAAK,KAAK,IAAI,aAAa;GAAE;GAAW;GAAQ,eAAe,OAAO,QAAQ;EAAE,CAAC;EACjF,OAAY,MAAM,SAAS,CAAC,CAAC,KAAK,cAAc;GAC9C,KAAK,YAAY,WAAW,gCAAgC;GAC5D,OAAO;EACT,CAAC;EAED,OAAO;GAAE,IAAI;GAAM;GAAa;EAAU;CAC5C;;CAGA,WAAmB;EACjB,OAAO,KAAK,KAAK;CACnB;;;;;;;CAQA,MAAM,OAAO,QAA8C;EACzD,MAAM,OAAO,KAAK,KAAK,MAAM,IAAI,MAAM;EACvC,IAAI,SAAS,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO,WAAW;EAAS;EACvE,MAAM,UAAU,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,YAAY,SAAS;EAChF,IAAI,YAAY,KAAA,GAAW,OAAO;GAAE,IAAI;GAAO,OAAO;EAAuB;EAE7E,MAAM,QAAQ,KAAK,KAAK,IAAI,QAAQ,EAAE;EACtC,KAAK,KAAK,OAAO,QAAQ,EAAE;EAI3B,IAAI;GACF,MAAM,OAAO,QAAQ;EACvB,QAAQ,CAAqB;EAE7B,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,GAAW,OAAO,KAAA;GACjC,MAAM,YAAY,OAAO,WAAW,MAAK,MAAK,EAAE,OAAO,QAAQ,EAAE;GACjE,IAAI,cAAc,KAAA,KAAa,UAAU,YAAY,WAAW,OAAO,KAAA;GACvE,UAAU,UAAU;GACpB,UAAU,UAAU,KAAK,KAAK,IAAI;GAClC,IAAI,OAAO,WAAW,eAAe;IACnC,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,OAAO;IACd,OAAO,OAAO;GAChB;GACA,OAAO,CAAC,MAAM;EAChB,CAAC;EACD,OAAO;GAAE,IAAI;GAAM,aAAa,QAAQ;EAAG;CAC7C;;;;;;CAOA,MAAM,YAA2B;EAC/B,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,MAAM,KAAK,KAAK,IAAI;GAC1B,MAAM,UAAwB,CAAC;GAC/B,KAAK,MAAM,QAAQ,OAAO,OAAO;IAC/B,IAAI,QAAQ;IACZ,KAAK,MAAM,aAAa,KAAK,YAC3B,IAAI,UAAU,YAAY,WAAW;KACnC,UAAU,UAAU;KACpB,UAAU,QAAQ;KAClB,UAAU,UAAU;KACpB,QAAQ;IACV;IAEF,IAAI,CAAC,OAAO;IACZ,IAAI,KAAK,WAAW,eAAe;KACjC,KAAK,SAAS;KACd,KAAK,YAAY;KACjB,OAAO,KAAK;KACZ,OAAO,KAAK;IACd;IACA,QAAQ,KAAK,IAAI;GACnB;GACA,OAAO,QAAQ,SAAS,IAAI,UAAU,KAAA;EACxC,CAAC;CACH;;;;;;;;CASA,gBAAwB,MAA0B;EAChD,MAAM,QAAQ;EACd,MAAM,OAAO,gCAAgC,KAAK,GAAG,wFAEtB,KAAK,GAAG;EACvC,MAAM,OAAO,gBAAgB,IAAI;EACjC,MAAM,WAAW,CAAC,GAAG,KAAK,UAAU,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAK,MAAK,EAAE,YAAY,SAAS;EACjF,MAAM,eAAe,aAAa,KAAA,IAC9B,QACA,GAAG,SAAS,QAAQ,KAAK,SAAS,UAAU,SAAS,UAAU,KAAA,IAAY,MAAM,SAAS,MAAM,MAAM,GAAG,GAAG,MAAM,GAAG,KAAK,IAAI,KAAK,SAAS,aAAa,CAAC,CAAC,CAAC,YAAY;EAC5K,MAAM,mBAAmB,KAAK,SAAS,MAAM,EAAE,CAAC,CAC7C,KAAI,MAAK,IAAI,EAAE,aAAa,KAAA,IAAY,UAAU,OAAO,IAAI,EAAE,MAAM,CAAC,CACtE,KAAK,IAAI,KAAK;EACjB,MAAM,OAAO,KACV,QAAQ,0BAA0B,YAAY,CAAC,CAC/C,QAAQ,yBAAyB,gBAAgB;EACpD,OAAO,OAAO,KAAK,MAAM,UAAU,KAAK,GAAG,OAAO,MAAM,MAAM,KAAK,MAAM;CAC3E;;CAGA,MAAc,eAAe,QAA+B;EAC1D,MAAM,KAAK,KAAK,MAAM,OAAO,uBAAuB,WAAW;GAC7D,MAAM,SAAS,OAAO,MAAM,MAAK,MAAK,EAAE,OAAO,MAAM;GACrD,IAAI,WAAW,KAAA,KAAa,OAAO,WAAW,eAAe;IAC3D,OAAO,SAAS;IAChB,OAAO,YAAY,KAAK,KAAK,IAAI;IACjC,OAAO,OAAO;IACd,OAAO,OAAO;IACd,OAAO,CAAC,MAAM;GAChB;EAEF,CAAC;CACH;AACF"}

package/lib/host/routes.js

@@ -1,8 +1,15 @@
-import { asStatus, asUrgency, canTransition, newCommentId, newTaskId, normalizeBody, normalizeExecution, normalizePrompt, normalizeTitle, summarize } from "../shared/protocol.js";
+import { asStatus, asUrgency, canTransition, newCommentId, newTaskId, normalizeBody, normalizeExecution, normalizeModel, normalizePrompt, normalizeTitle, summarize, syncClaim } from "../shared/protocol.js";
 import { ROUTE_PREFIX, SSE_PATH } from "../shared/api.js";
 //#region src/host/routes.ts
 /** Heartbeat cadence for the SSE stream. */
 const HEARTBEAT_MS = 2e4;
+/** Validate a pinned model: structural check always, provider route when known. */
+function checkModel(raw, modelProviders) {
+	const model = normalizeModel(raw);
+	const providers = modelProviders?.();
+	if (providers !== void 0 && !providers.includes(model.provider)) throw new Error(`Error: invalid_input: model provider "${model.provider}" has no registered route (available: ${providers.join(", ")})`);
+	return model;
+}
 /** JSON-envelope writer. */
 function json(res, payload, status = 200) {
 	const body = JSON.stringify(payload);
@@ -141,7 +148,7 @@ function registerTaskboardRoutes(ctx, options) {
 					const urgency = asUrgency(str(body, "urgency") ?? "");
 					const status = str(body, "status") === null ? "todo" : asStatus(str(body, "status"));
 					const execution = normalizeExecution(body.execution ?? {}, options.now());
-					const model = body.model;
+					const model = body.model === void 0 ? void 0 : checkModel(body.model, options.modelProviders);
 					const now = options.now();
 					const task = {
 						id: newTaskId(),
@@ -204,7 +211,7 @@ function registerTaskboardRoutes(ctx, options) {
 						if (typeof body.blocked === "boolean") next.blocked = body.blocked;
 						if (body.execution !== void 0) next.execution = normalizeExecution(body.execution, options.now());
 						if (body.model === null) next.model = void 0;
-						else if (body.model !== void 0) next.model = body.model;
+						else if (body.model !== void 0) next.model = checkModel(body.model, options.modelProviders);
 						next.version = task.version + 1;
 						next.updatedAt = options.now();
 						next.updatedBy = { kind: "user" };
@@ -232,6 +239,7 @@ function registerTaskboardRoutes(ctx, options) {
 						next.updatedAt = options.now();
 						next.updatedBy = { kind: "user" };
 						if (task.status === "todo" && to === "in_progress") next.blocked = false;
+						syncClaim(next, to, options.now());
 						await store.mutate("task-moved", (ledger) => {
 							const i = ledger.tasks.findIndex((t) => t.id === id);
 							ledger.tasks[i] = next;
@@ -312,6 +320,25 @@ function registerTaskboardRoutes(ctx, options) {
 						}
 						return;
 					}
+					if (action === "cancel") {
+						if (options.cancel === void 0) {
+							json(res, fail("invalid_input", "execution service unavailable").res, 501);
+							return;
+						}
+						const result = await options.cancel(id);
+						if (result.ok) json(res, {
+							ok: true,
+							value: {
+								cancelled: true,
+								executionId: result.executionId
+							}
+						}, 202);
+						else {
+							const f = fail("invalid_input", result.error);
+							json(res, f.res, f.status);
+						}
+						return;
+					}
 					const f = fail("not_found", `unknown action ${action}`);
 					json(res, f.res, f.status);
 				} catch (error) {

package/lib/host/routes.js.map

@@ -1 +1 @@
-{"version":3,"file":"routes.js","names":[],"sources":["../../src/host/routes.ts"],"sourcesContent":["/**\n * /dsh-taskboard routes on the shared DSH webserver: a JSON API for the\n * GUI's human operations (create/update/move/comment/delete — actor `user`,\n * the done move IS allowed here) plus an SSE stream mirroring every\n * committed ledger mutation.\n *\n * All domain validation goes through the shared protocol pure functions; the\n * route layer only maps transport to envelope.\n *\n * @module dsh-taskboard/host/routes\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { Context } from '@deepseek-ai/cordis'\n// Type-only: pulls the webServer Context merge (ctx.webServer).\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport {\n  asStatus,\n  asUrgency,\n  canTransition,\n  newCommentId,\n  newTaskId,\n  normalizeBody,\n  normalizeExecution,\n  normalizePrompt,\n  normalizeTitle,\n  summarize,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { ROUTE_PREFIX, SSE_PATH, type ApiFail, type ApiResult } from '../shared/api.ts'\nimport type { TaskStore } from './store.ts'\nimport type { WorkspaceFace } from './tools.ts'\n\n/** Heartbeat cadence for the SSE stream. */\nconst HEARTBEAT_MS = 20_000\n\n/** The workspaces face routes need (same narrow shape as tools). */\nexport type RoutesWorkspaceFace = WorkspaceFace\n\n/** Options. */\nexport interface TaskboardRoutesOptions {\n  store: TaskStore\n  workspaces: RoutesWorkspaceFace\n  now: () => number\n  /** Manual-run hook (the execution service); absent → 501. */\n  run?: (taskId: string) => Promise<{ ok: true; executionId: string; sessionId: string } | { ok: false; error: string }>\n}\n\n/** JSON-envelope writer. */\nfunction json(res: ServerResponse, payload: ApiResult<unknown>, status = 200): void {\n  const body = JSON.stringify(payload)\n  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })\n  res.end(body)\n}\n\n/** Domain failure → envelope + HTTP status. */\nfunction fail(code: ApiFail['error']['code'], message: string): { res: ApiFail; status: number } {\n  const status = code === 'invalid_input' ? 400\n    : code === 'not_found' ? 404\n      : code === 'version_conflict' ? 409\n        : code === 'forbidden' ? 403\n          : 500\n  return { res: { ok: false, error: { code, message } }, status }\n}\n\n/** Read one JSON body (null on parse failure). */\nasync function readBody(req: IncomingMessage): Promise<Record<string, unknown> | null> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(chunk as Buffer)\n  if (chunks.length === 0) return {}\n  try {\n    const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'))\n    return typeof parsed === 'object' && parsed !== null ? parsed as Record<string, unknown> : null\n  } catch {\n    return null\n  }\n}\n\n/** String field accessor (null when absent/not a string). */\nfunction str(body: Record<string, unknown>, key: string): string | null {\n  const v = body[key]\n  return typeof v === 'string' ? v : null\n}\n\n/** Number field accessor (undefined when absent; null when present but not a number). */\nfunction num(body: Record<string, unknown>, key: string): number | undefined | null {\n  const v = body[key]\n  if (v === undefined) return undefined\n  return typeof v === 'number' && Number.isFinite(v) ? v : null\n}\n\n/** Map a thrown domain error to the envelope. */\nfunction toFail(error: unknown): { res: ApiFail; status: number } {\n  const message = error instanceof Error ? error.message : String(error)\n  const code = message.startsWith('Error: ') ? message.slice(7).split(':')[0] : undefined\n  const known: ApiFail['error']['code'][] = ['invalid_input', 'not_found', 'version_conflict', 'invalid_transition', 'forbidden', 'internal']\n  if (code !== undefined && (known as string[]).includes(code)) {\n    return fail(code as ApiFail['error']['code'], message.slice(7 + code.length + 2))\n  }\n  if (code === 'workspace_mismatch') return fail('forbidden', message.slice(7 + code.length + 2))\n  return fail('invalid_input', message)\n}\n\n/**\n * Register the taskboard routes.\n * @param ctx - context carrying the webServer service.\n * @param options - store + workspaces + clock.\n * @returns the disposer.\n */\nexport function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOptions): () => void {\n  const { store, workspaces } = options\n  const subscribers = new Set<ServerResponse>()\n  let heartbeat: NodeJS.Timeout | undefined\n\n  const broadcast = (change: { revision: number; kind: string; tasks: readonly TaskRecord[] }): void => {\n    const frame = `event: change\\ndata: ${JSON.stringify({ revision: change.revision, kind: change.kind, tasks: change.tasks.map(summarize) })}\\n\\n`\n    for (const res of subscribers) res.write(frame)\n  }\n  store.subscribe(broadcast)\n\n  const taskPath = (id: string, action?: string): RegExp | null => {\n    const escaped = id.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&')\n    const pattern = action === undefined\n      ? `^${ROUTE_PREFIX}/tasks/${escaped}$`\n      : `^${ROUTE_PREFIX}/tasks/${escaped}/${action}$`\n    return new RegExp(pattern)\n  }\n\n  const handler = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    try {\n      const url = new URL(req.url ?? '/', 'http://x')\n      const pathname = url.pathname\n\n      // ---------------------------------------------------------------- GET\n      if (req.method === 'GET') {\n        if (pathname === `${ROUTE_PREFIX}/state`) {\n          await store.load()\n          json(res, { ok: true, value: store.snapshot() })\n          return\n        }\n        if (pathname === `${ROUTE_PREFIX}/workspaces`) {\n          json(res, { ok: true, value: workspaces.list() })\n          return\n        }\n        const taskMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)$`))\n        if (taskMatch !== null) {\n          const task = store.get(taskMatch[1]!)\n          if (task === undefined) { const f = fail('not_found', 'no such task'); json(res, f.res, f.status); return }\n          json(res, { ok: true, value: task })\n          return\n        }\n        res.writeHead(404)\n        res.end()\n        return\n      }\n\n      if (req.method !== 'POST') {\n        res.writeHead(405)\n        res.end()\n        return\n      }\n      // CSRF fence: cross-site simple requests cannot set application/json.\n      const contentType = req.headers['content-type'] ?? ''\n      if (!contentType.toLowerCase().startsWith('application/json')) {\n        const f = fail('invalid_input', 'content-type must be application/json')\n        json(res, f.res, 415)\n        return\n      }\n      const body = await readBody(req)\n      if (body === null) {\n        const f = fail('invalid_input', 'body is not a JSON object')\n        json(res, f.res, 400)\n        return\n      }\n\n      // ------------------------------------------------- POST /tasks (create)\n      if (pathname === `${ROUTE_PREFIX}/tasks`) {\n        try {\n          const title = normalizeTitle(str(body, 'title') ?? '')\n          const workspaceId = str(body, 'workspaceId') ?? ''\n          if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n          const urgency = asUrgency(str(body, 'urgency') ?? '')\n          const status = str(body, 'status') === null ? 'todo' as const : asStatus(str(body, 'status')!)\n          const execution = normalizeExecution((body.execution as { mode?: string; cron?: string } | undefined) ?? {}, options.now())\n          const model = body.model as { provider: string; model: string } | undefined\n          const now = options.now()\n          const task: TaskRecord = {\n            id: newTaskId(),\n            title,\n            description: (str(body, 'description') ?? '').trim(),\n            prompt: normalizePrompt(str(body, 'prompt') ?? undefined),\n            workspaceId,\n            urgency,\n            status,\n            blocked: false,\n            execution,\n            model,\n            version: 1,\n            createdAt: now,\n            updatedAt: now,\n            createdBy: { kind: 'user' },\n            updatedBy: { kind: 'user' },\n            comments: [],\n            executions: [],\n          }\n          await store.mutate('task-created', ledger => {\n            ledger.tasks.push(task)\n            return [task]\n          })\n          json(res, { ok: true, value: summarize(task) }, 201)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      // ------------------------------------------- POST /tasks/:id/{action}\n      const actionMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/(\\\\w+)$`))\n      if (actionMatch !== null) {\n        const id = actionMatch[1]!\n        const action = actionMatch[2]!\n        try {\n          const task = store.get(id)\n          if (task === undefined) throw new Error('Error: not_found: no such task')\n          if (action === 'update') {\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            const title = str(body, 'title')\n            if (title !== null) next.title = normalizeTitle(title)\n            const description = str(body, 'description')\n            if (description !== null) next.description = description.trim()\n            const prompt = str(body, 'prompt')\n            if (prompt !== null) next.prompt = normalizePrompt(prompt)\n            const urgency = str(body, 'urgency')\n            if (urgency !== null) next.urgency = asUrgency(urgency)\n            // GUI-only rebind to another project; validated against the workspace registry.\n            const workspaceId = str(body, 'workspaceId')\n            if (workspaceId !== null) {\n              if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n              next.workspaceId = workspaceId\n            }\n            if (typeof body.blocked === 'boolean') next.blocked = body.blocked\n            // The GUI (task owner surface) may edit model/execution; null clears the model.\n            if (body.execution !== undefined) next.execution = normalizeExecution(body.execution as { mode?: string; cron?: string }, options.now())\n            if (body.model === null) next.model = undefined\n            else if (body.model !== undefined) next.model = body.model as { provider: string; model: string }\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            await store.mutate('task-updated', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'move') {\n            const ifVersion = num(body, 'ifVersion')\n            const status = str(body, 'status') ?? ''\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const to = asStatus(status)\n            if (!canTransition(task.status, to)) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → ${to}`)\n            const next = structuredClone(task)\n            next.status = to\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            if (task.status === 'todo' && to === 'in_progress') next.blocked = false\n            await store.mutate('task-moved', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'comment') {\n            const bodyText = str(body, 'body') ?? ''\n            const comment = { id: newCommentId(), body: normalizeBody(bodyText), version: 1, createdAt: options.now() }\n            const next = structuredClone(task)\n            next.comments.push(comment)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            await store.mutate('comment-added', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: comment }, 201)\n            return\n          }\n          if (action === 'delete') {\n            const purge = body.purge === true\n            if (purge) {\n              if (task.trashedAt === undefined) throw new Error('Error: invalid_input: purge requires a trashed task (soft-delete first)')\n              await store.mutate('task-deleted', ledger => {\n                ledger.tasks = ledger.tasks.filter(t => t.id !== id)\n                return []\n              })\n              json(res, { ok: true, value: { purged: true } })\n              return\n            }\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            next.trashedAt = options.now()\n            next.version = task.version + 1\n            await store.mutate('task-deleted', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: { trashed: true } })\n            return\n          }\n          if (action === 'run') {\n            if (options.run === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.run(id)\n            if (result.ok) json(res, { ok: true, value: result }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          const f = fail('not_found', `unknown action ${action}`)\n          json(res, f.res, f.status)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      void taskPath\n      res.writeHead(404)\n      res.end()\n    } catch (error) {\n      const f = fail('internal', error instanceof Error ? error.message : String(error))\n      json(res, f.res, f.status)\n    }\n  }\n\n  const sse = (req: IncomingMessage, res: ServerResponse): void => {\n    res.writeHead(200, {\n      'content-type': 'text/event-stream; charset=utf-8',\n      'cache-control': 'no-cache',\n      connection: 'keep-alive',\n    })\n    res.write('retry: 2000\\n\\n')\n    // Baseline frame: the client reconciles by revision and refetches state on gaps.\n    res.write(`event: hello\\ndata: ${JSON.stringify({ revision: store.snapshot().revision })}\\n\\n`)\n    subscribers.add(res)\n    if (heartbeat === undefined) {\n      heartbeat = setInterval(() => {\n        for (const current of subscribers) current.write(': ping\\n\\n')\n      }, HEARTBEAT_MS)\n    }\n    req.on('close', () => {\n      subscribers.delete(res)\n      if (subscribers.size === 0 && heartbeat !== undefined) {\n        clearInterval(heartbeat)\n        heartbeat = undefined\n      }\n    })\n  }\n\n  const disposers = [\n    ctx.webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }),\n    ctx.webServer.register({ kind: 'exact', path: SSE_PATH, handler: sse }),\n  ]\n  return () => {\n    for (const dispose of disposers) dispose()\n    if (heartbeat !== undefined) clearInterval(heartbeat)\n    for (const res of subscribers) res.end()\n    subscribers.clear()\n  }\n}\n"],"mappings":";;;;AAiCA,MAAM,eAAe;;AAerB,SAAS,KAAK,KAAqB,SAA6B,SAAS,KAAW;CAClF,MAAM,OAAO,KAAK,UAAU,OAAO;CACnC,IAAI,UAAU,QAAQ;EAAE,gBAAgB;EAAmC,iBAAiB;CAAW,CAAC;CACxG,IAAI,IAAI,IAAI;AACd;;AAGA,SAAS,KAAK,MAAgC,SAAmD;CAM/F,OAAO;EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE;IAAM;GAAQ;EAAE;EAAG,QALxC,SAAS,kBAAkB,MACtC,SAAS,cAAc,MACrB,SAAS,qBAAqB,MAC5B,SAAS,cAAc,MACrB;CACoD;AAChE;;AAGA,eAAe,SAAS,KAA+D;CACrF,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KAAK,OAAO,KAAK,KAAe;CAC1D,IAAI,OAAO,WAAW,GAAG,OAAO,CAAC;CACjC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;EAChE,OAAO,OAAO,WAAW,YAAY,WAAW,OAAO,SAAoC;CAC7F,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,IAAI,MAA+B,KAA4B;CACtE,MAAM,IAAI,KAAK;CACf,OAAO,OAAO,MAAM,WAAW,IAAI;AACrC;;AAGA,SAAS,IAAI,MAA+B,KAAwC;CAClF,MAAM,IAAI,KAAK;CACf,IAAI,MAAM,KAAA,GAAW,OAAO,KAAA;CAC5B,OAAO,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,IAAI,IAAI;AAC3D;;AAGA,SAAS,OAAO,OAAkD;CAChE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,MAAM,OAAO,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAA;CAE9E,IAAI,SAAS,KAAA,KAAc;EADgB;EAAiB;EAAa;EAAoB;EAAsB;EAAa;CACjG,CAAC,CAAc,SAAS,IAAI,GACzD,OAAO,KAAK,MAAkC,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAElF,IAAI,SAAS,sBAAsB,OAAO,KAAK,aAAa,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAC9F,OAAO,KAAK,iBAAiB,OAAO;AACtC;;;;;;;AAQA,SAAgB,wBAAwB,KAAc,SAA6C;CACjG,MAAM,EAAE,OAAO,eAAe;CAC9B,MAAM,8BAAc,IAAI,IAAoB;CAC5C,IAAI;CAEJ,MAAM,aAAa,WAAmF;EACpG,MAAM,QAAQ,wBAAwB,KAAK,UAAU;GAAE,UAAU,OAAO;GAAU,MAAM,OAAO;GAAM,OAAO,OAAO,MAAM,IAAI,SAAS;EAAE,CAAC,EAAE;EAC3I,KAAK,MAAM,OAAO,aAAa,IAAI,MAAM,KAAK;CAChD;CACA,MAAM,UAAU,SAAS;CAUzB,MAAM,UAAU,OAAO,KAAsB,QAAuC;EAClF,IAAI;GAEF,MAAM,WAAW,IADD,IAAI,IAAI,OAAO,KAAK,UACjB,CAAC,CAAC;GAGrB,IAAI,IAAI,WAAW,OAAO;IACxB,IAAI,aAAa,wBAAyB;KACxC,MAAM,MAAM,KAAK;KACjB,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,MAAM,SAAS;KAAE,CAAC;KAC/C;IACF;IACA,IAAI,aAAa,6BAA8B;KAC7C,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,WAAW,KAAK;KAAE,CAAC;KAChD;IACF;IACA,MAAM,YAAY,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,gBAAgB,CAAC;IAC9E,IAAI,cAAc,MAAM;KACtB,MAAM,OAAO,MAAM,IAAI,UAAU,EAAG;KACpC,IAAI,SAAS,KAAA,GAAW;MAAE,MAAM,IAAI,KAAK,aAAa,cAAc;MAAG,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAAG;KAAO;KAC1G,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO;KAAK,CAAC;KACnC;IACF;IACA,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAEA,IAAI,IAAI,WAAW,QAAQ;IACzB,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAGA,IAAI,EADgB,IAAI,QAAQ,mBAAmB,GAAA,CAClC,YAAY,CAAC,CAAC,WAAW,kBAAkB,GAAG;IAE7D,KAAK,KADK,KAAK,iBAAiB,uCACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GACA,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,IAAI,SAAS,MAAM;IAEjB,KAAK,KADK,KAAK,iBAAiB,2BACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GAGA,IAAI,aAAa,wBAAyB;IACxC,IAAI;KACF,MAAM,QAAQ,eAAe,IAAI,MAAM,OAAO,KAAK,EAAE;KACrD,MAAM,cAAc,IAAI,MAAM,aAAa,KAAK;KAChD,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;KACpG,MAAM,UAAU,UAAU,IAAI,MAAM,SAAS,KAAK,EAAE;KACpD,MAAM,SAAS,IAAI,MAAM,QAAQ,MAAM,OAAO,SAAkB,SAAS,IAAI,MAAM,QAAQ,CAAE;KAC7F,MAAM,YAAY,mBAAoB,KAAK,aAA8D,CAAC,GAAG,QAAQ,IAAI,CAAC;KAC1H,MAAM,QAAQ,KAAK;KACnB,MAAM,MAAM,QAAQ,IAAI;KACxB,MAAM,OAAmB;MACvB,IAAI,UAAU;MACd;MACA,cAAc,IAAI,MAAM,aAAa,KAAK,GAAA,CAAI,KAAK;MACnD,QAAQ,gBAAgB,IAAI,MAAM,QAAQ,KAAK,KAAA,CAAS;MACxD;MACA;MACA;MACA,SAAS;MACT;MACA;MACA,SAAS;MACT,WAAW;MACX,WAAW;MACX,WAAW,EAAE,MAAM,OAAO;MAC1B,WAAW,EAAE,MAAM,OAAO;MAC1B,UAAU,CAAC;MACX,YAAY,CAAC;KACf;KACA,MAAM,MAAM,OAAO,iBAAgB,WAAU;MAC3C,OAAO,MAAM,KAAK,IAAI;MACtB,OAAO,CAAC,IAAI;KACd,CAAC;KACD,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,UAAU,IAAI;KAAE,GAAG,GAAG;IACrD,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAGA,MAAM,cAAc,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,uBAAuB,CAAC;GACvF,IAAI,gBAAgB,MAAM;IACxB,MAAM,KAAK,YAAY;IACvB,MAAM,SAAS,YAAY;IAC3B,IAAI;KACF,MAAM,OAAO,MAAM,IAAI,EAAE;KACzB,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,gCAAgC;KACxE,IAAI,WAAW,UAAU;MACvB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,MAAM,QAAQ,IAAI,MAAM,OAAO;MAC/B,IAAI,UAAU,MAAM,KAAK,QAAQ,eAAe,KAAK;MACrD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM,KAAK,cAAc,YAAY,KAAK;MAC9D,MAAM,SAAS,IAAI,MAAM,QAAQ;MACjC,IAAI,WAAW,MAAM,KAAK,SAAS,gBAAgB,MAAM;MACzD,MAAM,UAAU,IAAI,MAAM,SAAS;MACnC,IAAI,YAAY,MAAM,KAAK,UAAU,UAAU,OAAO;MAEtD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM;OACxB,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;OACpG,KAAK,cAAc;MACrB;MACA,IAAI,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK;MAE3D,IAAI,KAAK,cAAc,KAAA,GAAW,KAAK,YAAY,mBAAmB,KAAK,WAA+C,QAAQ,IAAI,CAAC;MACvI,IAAI,KAAK,UAAU,MAAM,KAAK,QAAQ,KAAA;WACjC,IAAI,KAAK,UAAU,KAAA,GAAW,KAAK,QAAQ,KAAK;MACrD,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,QAAQ;MACrB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,MAAM,SAAS,IAAI,MAAM,QAAQ,KAAK;MACtC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,KAAK,SAAS,MAAM;MAC1B,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,GAAG,MAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,KAAK,IAAI;MAC3H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS;MACd,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,IAAI,KAAK,WAAW,UAAU,OAAO,eAAe,KAAK,UAAU;MACnE,MAAM,MAAM,OAAO,eAAc,WAAU;OACzC,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,WAAW;MACxB,MAAM,WAAW,IAAI,MAAM,MAAM,KAAK;MACtC,MAAM,UAAU;OAAE,IAAI,aAAa;OAAG,MAAM,cAAc,QAAQ;OAAG,SAAS;OAAG,WAAW,QAAQ,IAAI;MAAE;MAC1G,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS,KAAK,OAAO;MAC1B,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,MAAM,MAAM,OAAO,kBAAiB,WAAU;OAC5C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAQ,GAAG,GAAG;MAC3C;KACF;KACA,IAAI,WAAW,UAAU;MAEvB,IADc,KAAK,UAAU,MAClB;OACT,IAAI,KAAK,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,yEAAyE;OAC3H,MAAM,MAAM,OAAO,iBAAgB,WAAU;QAC3C,OAAO,QAAQ,OAAO,MAAM,QAAO,MAAK,EAAE,OAAO,EAAE;QACnD,OAAO,CAAC;OACV,CAAC;OACD,KAAK,KAAK;QAAE,IAAI;QAAM,OAAO,EAAE,QAAQ,KAAK;OAAE,CAAC;OAC/C;MACF;MACA,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,UAAU,KAAK,UAAU;MAC9B,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,EAAE,SAAS,KAAK;MAAE,CAAC;MAChD;KACF;KACA,IAAI,WAAW,OAAO;MACpB,IAAI,QAAQ,QAAQ,KAAA,GAAW;OAE7B,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,IAAI,EAAE;MACnC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAO,GAAG,GAAG;WACpD;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,MAAM,IAAI,KAAK,aAAa,kBAAkB,QAAQ;KACtD,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAGA,IAAI,UAAU,GAAG;GACjB,IAAI,IAAI;EACV,SAAS,OAAO;GACd,MAAM,IAAI,KAAK,YAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GACjF,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;EAC3B;CACF;CAEA,MAAM,OAAO,KAAsB,QAA8B;EAC/D,IAAI,UAAU,KAAK;GACjB,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;EACd,CAAC;EACD,IAAI,MAAM,iBAAiB;EAE3B,IAAI,MAAM,uBAAuB,KAAK,UAAU,EAAE,UAAU,MAAM,SAAS,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK;EAC9F,YAAY,IAAI,GAAG;EACnB,IAAI,cAAc,KAAA,GAChB,YAAY,kBAAkB;GAC5B,KAAK,MAAM,WAAW,aAAa,QAAQ,MAAM,YAAY;EAC/D,GAAG,YAAY;EAEjB,IAAI,GAAG,eAAe;GACpB,YAAY,OAAO,GAAG;GACtB,IAAI,YAAY,SAAS,KAAK,cAAc,KAAA,GAAW;IACrD,cAAc,SAAS;IACvB,YAAY,KAAA;GACd;EACF,CAAC;CACH;CAEA,MAAM,YAAY,CAChB,IAAI,UAAU,SAAS;EAAE,MAAM;EAAU,MAAM;EAAc;CAAQ,CAAC,GACtE,IAAI,UAAU,SAAS;EAAE,MAAM;EAAS,MAAM;EAAU,SAAS;CAAI,CAAC,CACxE;CACA,aAAa;EACX,KAAK,MAAM,WAAW,WAAW,QAAQ;EACzC,IAAI,cAAc,KAAA,GAAW,cAAc,SAAS;EACpD,KAAK,MAAM,OAAO,aAAa,IAAI,IAAI;EACvC,YAAY,MAAM;CACpB;AACF"}
+{"version":3,"file":"routes.js","names":[],"sources":["../../src/host/routes.ts"],"sourcesContent":["/**\n * /dsh-taskboard routes on the shared DSH webserver: a JSON API for the\n * GUI's human operations (create/update/move/comment/delete — actor `user`,\n * the done move IS allowed here) plus an SSE stream mirroring every\n * committed ledger mutation.\n *\n * All domain validation goes through the shared protocol pure functions; the\n * route layer only maps transport to envelope.\n *\n * @module dsh-taskboard/host/routes\n */\nimport type { IncomingMessage, ServerResponse } from 'node:http'\nimport type { Context } from '@deepseek-ai/cordis'\n// Type-only: pulls the webServer Context merge (ctx.webServer).\nimport type {} from '@deepseek-ai/dsh-host-webserver'\nimport {\n  asStatus,\n  asUrgency,\n  canTransition,\n  newCommentId,\n  newTaskId,\n  normalizeBody,\n  normalizeExecution,\n  normalizeModel,\n  normalizePrompt,\n  normalizeTitle,\n  summarize,\n  syncClaim,\n  type TaskModel,\n  type TaskRecord,\n} from '../shared/protocol.ts'\nimport { ROUTE_PREFIX, SSE_PATH, type ApiFail, type ApiResult } from '../shared/api.ts'\nimport type { TaskStore } from './store.ts'\nimport type { WorkspaceFace } from './tools.ts'\n\n/** Heartbeat cadence for the SSE stream. */\nconst HEARTBEAT_MS = 20_000\n\n/** The workspaces face routes need (same narrow shape as tools). */\nexport type RoutesWorkspaceFace = WorkspaceFace\n\n/** Options. */\nexport interface TaskboardRoutesOptions {\n  store: TaskStore\n  workspaces: RoutesWorkspaceFace\n  now: () => number\n  /** Manual-run hook (the execution service); absent → 501. */\n  run?: (taskId: string) => Promise<{ ok: true; executionId: string; sessionId: string } | { ok: false; error: string }>\n  /** Cancel hook (the execution service); absent → 501. */\n  cancel?: (taskId: string) => Promise<{ ok: true; executionId: string } | { ok: false; error: string }>\n  /**\n   * Registered model provider routes (from the host llm runtime), for\n   * advisory validation of pinned models; undefined = runtime unavailable.\n   */\n  modelProviders?: () => string[] | undefined\n}\n\n/** Validate a pinned model: structural check always, provider route when known. */\nfunction checkModel(raw: unknown, modelProviders?: () => string[] | undefined): TaskModel {\n  const model = normalizeModel(raw)\n  const providers = modelProviders?.()\n  if (providers !== undefined && !providers.includes(model.provider)) {\n    throw new Error(`Error: invalid_input: model provider \"${model.provider}\" has no registered route (available: ${providers.join(', ')})`)\n  }\n  return model\n}\n\n/** JSON-envelope writer. */\nfunction json(res: ServerResponse, payload: ApiResult<unknown>, status = 200): void {\n  const body = JSON.stringify(payload)\n  res.writeHead(status, { 'content-type': 'application/json; charset=utf-8', 'cache-control': 'no-store' })\n  res.end(body)\n}\n\n/** Domain failure → envelope + HTTP status. */\nfunction fail(code: ApiFail['error']['code'], message: string): { res: ApiFail; status: number } {\n  const status = code === 'invalid_input' ? 400\n    : code === 'not_found' ? 404\n      : code === 'version_conflict' ? 409\n        : code === 'forbidden' ? 403\n          : 500\n  return { res: { ok: false, error: { code, message } }, status }\n}\n\n/** Read one JSON body (null on parse failure). */\nasync function readBody(req: IncomingMessage): Promise<Record<string, unknown> | null> {\n  const chunks: Buffer[] = []\n  for await (const chunk of req) chunks.push(chunk as Buffer)\n  if (chunks.length === 0) return {}\n  try {\n    const parsed = JSON.parse(Buffer.concat(chunks).toString('utf8'))\n    return typeof parsed === 'object' && parsed !== null ? parsed as Record<string, unknown> : null\n  } catch {\n    return null\n  }\n}\n\n/** String field accessor (null when absent/not a string). */\nfunction str(body: Record<string, unknown>, key: string): string | null {\n  const v = body[key]\n  return typeof v === 'string' ? v : null\n}\n\n/** Number field accessor (undefined when absent; null when present but not a number). */\nfunction num(body: Record<string, unknown>, key: string): number | undefined | null {\n  const v = body[key]\n  if (v === undefined) return undefined\n  return typeof v === 'number' && Number.isFinite(v) ? v : null\n}\n\n/** Map a thrown domain error to the envelope. */\nfunction toFail(error: unknown): { res: ApiFail; status: number } {\n  const message = error instanceof Error ? error.message : String(error)\n  const code = message.startsWith('Error: ') ? message.slice(7).split(':')[0] : undefined\n  const known: ApiFail['error']['code'][] = ['invalid_input', 'not_found', 'version_conflict', 'invalid_transition', 'forbidden', 'internal']\n  if (code !== undefined && (known as string[]).includes(code)) {\n    return fail(code as ApiFail['error']['code'], message.slice(7 + code.length + 2))\n  }\n  if (code === 'workspace_mismatch') return fail('forbidden', message.slice(7 + code.length + 2))\n  return fail('invalid_input', message)\n}\n\n/**\n * Register the taskboard routes.\n * @param ctx - context carrying the webServer service.\n * @param options - store + workspaces + clock.\n * @returns the disposer.\n */\nexport function registerTaskboardRoutes(ctx: Context, options: TaskboardRoutesOptions): () => void {\n  const { store, workspaces } = options\n  const subscribers = new Set<ServerResponse>()\n  let heartbeat: NodeJS.Timeout | undefined\n\n  const broadcast = (change: { revision: number; kind: string; tasks: readonly TaskRecord[] }): void => {\n    const frame = `event: change\\ndata: ${JSON.stringify({ revision: change.revision, kind: change.kind, tasks: change.tasks.map(summarize) })}\\n\\n`\n    for (const res of subscribers) res.write(frame)\n  }\n  store.subscribe(broadcast)\n\n  const handler = async (req: IncomingMessage, res: ServerResponse): Promise<void> => {\n    try {\n      const url = new URL(req.url ?? '/', 'http://x')\n      const pathname = url.pathname\n\n      // ---------------------------------------------------------------- GET\n      if (req.method === 'GET') {\n        if (pathname === `${ROUTE_PREFIX}/state`) {\n          await store.load()\n          json(res, { ok: true, value: store.snapshot() })\n          return\n        }\n        if (pathname === `${ROUTE_PREFIX}/workspaces`) {\n          json(res, { ok: true, value: workspaces.list() })\n          return\n        }\n        const taskMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)$`))\n        if (taskMatch !== null) {\n          const task = store.get(taskMatch[1]!)\n          if (task === undefined) { const f = fail('not_found', 'no such task'); json(res, f.res, f.status); return }\n          json(res, { ok: true, value: task })\n          return\n        }\n        res.writeHead(404)\n        res.end()\n        return\n      }\n\n      if (req.method !== 'POST') {\n        res.writeHead(405)\n        res.end()\n        return\n      }\n      // CSRF fence: cross-site simple requests cannot set application/json.\n      const contentType = req.headers['content-type'] ?? ''\n      if (!contentType.toLowerCase().startsWith('application/json')) {\n        const f = fail('invalid_input', 'content-type must be application/json')\n        json(res, f.res, 415)\n        return\n      }\n      const body = await readBody(req)\n      if (body === null) {\n        const f = fail('invalid_input', 'body is not a JSON object')\n        json(res, f.res, 400)\n        return\n      }\n\n      // ------------------------------------------------- POST /tasks (create)\n      if (pathname === `${ROUTE_PREFIX}/tasks`) {\n        try {\n          const title = normalizeTitle(str(body, 'title') ?? '')\n          const workspaceId = str(body, 'workspaceId') ?? ''\n          if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n          const urgency = asUrgency(str(body, 'urgency') ?? '')\n          const status = str(body, 'status') === null ? 'todo' as const : asStatus(str(body, 'status')!)\n          const execution = normalizeExecution((body.execution as { mode?: string; cron?: string } | undefined) ?? {}, options.now())\n          const model = body.model === undefined ? undefined : checkModel(body.model, options.modelProviders)\n          const now = options.now()\n          const task: TaskRecord = {\n            id: newTaskId(),\n            title,\n            description: (str(body, 'description') ?? '').trim(),\n            prompt: normalizePrompt(str(body, 'prompt') ?? undefined),\n            workspaceId,\n            urgency,\n            status,\n            blocked: false,\n            execution,\n            model,\n            version: 1,\n            createdAt: now,\n            updatedAt: now,\n            createdBy: { kind: 'user' },\n            updatedBy: { kind: 'user' },\n            comments: [],\n            executions: [],\n          }\n          await store.mutate('task-created', ledger => {\n            ledger.tasks.push(task)\n            return [task]\n          })\n          json(res, { ok: true, value: summarize(task) }, 201)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      // ------------------------------------------- POST /tasks/:id/{action}\n      const actionMatch = pathname.match(new RegExp(`^${ROUTE_PREFIX}/tasks/([^/]+)/(\\\\w+)$`))\n      if (actionMatch !== null) {\n        const id = actionMatch[1]!\n        const action = actionMatch[2]!\n        try {\n          const task = store.get(id)\n          if (task === undefined) throw new Error('Error: not_found: no such task')\n          if (action === 'update') {\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            const title = str(body, 'title')\n            if (title !== null) next.title = normalizeTitle(title)\n            const description = str(body, 'description')\n            if (description !== null) next.description = description.trim()\n            const prompt = str(body, 'prompt')\n            if (prompt !== null) next.prompt = normalizePrompt(prompt)\n            const urgency = str(body, 'urgency')\n            if (urgency !== null) next.urgency = asUrgency(urgency)\n            // GUI-only rebind to another project; validated against the workspace registry.\n            const workspaceId = str(body, 'workspaceId')\n            if (workspaceId !== null) {\n              if (workspaces.get(workspaceId) === undefined) throw new Error('Error: not_found: unknown workspace')\n              next.workspaceId = workspaceId\n            }\n            if (typeof body.blocked === 'boolean') next.blocked = body.blocked\n            // The GUI (task owner surface) may edit model/execution; null clears the model.\n            if (body.execution !== undefined) next.execution = normalizeExecution(body.execution as { mode?: string; cron?: string }, options.now())\n            if (body.model === null) next.model = undefined\n            else if (body.model !== undefined) next.model = checkModel(body.model, options.modelProviders)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            await store.mutate('task-updated', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'move') {\n            const ifVersion = num(body, 'ifVersion')\n            const status = str(body, 'status') ?? ''\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const to = asStatus(status)\n            if (!canTransition(task.status, to)) throw new Error(`Error: invalid_transition: illegal transition ${task.status} → ${to}`)\n            const next = structuredClone(task)\n            next.status = to\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            next.updatedBy = { kind: 'user' }\n            if (task.status === 'todo' && to === 'in_progress') next.blocked = false\n            // A user move records no holder; leaving in_progress releases any hold.\n            syncClaim(next, to, options.now())\n            await store.mutate('task-moved', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: summarize(next) })\n            return\n          }\n          if (action === 'comment') {\n            const bodyText = str(body, 'body') ?? ''\n            const comment = { id: newCommentId(), body: normalizeBody(bodyText), version: 1, createdAt: options.now() }\n            const next = structuredClone(task)\n            next.comments.push(comment)\n            next.version = task.version + 1\n            next.updatedAt = options.now()\n            await store.mutate('comment-added', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: comment }, 201)\n            return\n          }\n          if (action === 'delete') {\n            const purge = body.purge === true\n            if (purge) {\n              if (task.trashedAt === undefined) throw new Error('Error: invalid_input: purge requires a trashed task (soft-delete first)')\n              await store.mutate('task-deleted', ledger => {\n                ledger.tasks = ledger.tasks.filter(t => t.id !== id)\n                return []\n              })\n              json(res, { ok: true, value: { purged: true } })\n              return\n            }\n            const ifVersion = num(body, 'ifVersion')\n            if (ifVersion === undefined || ifVersion === null) throw new Error('Error: version_conflict: ifVersion required')\n            if (ifVersion !== task.version) throw new Error(`Error: version_conflict: stale version ${ifVersion} (current ${task.version})`)\n            const next = structuredClone(task)\n            next.trashedAt = options.now()\n            next.version = task.version + 1\n            await store.mutate('task-deleted', ledger => {\n              const i = ledger.tasks.findIndex(t => t.id === id)\n              ledger.tasks[i] = next\n              return [next]\n            })\n            json(res, { ok: true, value: { trashed: true } })\n            return\n          }\n          if (action === 'run') {\n            if (options.run === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.run(id)\n            if (result.ok) json(res, { ok: true, value: result }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          if (action === 'cancel') {\n            if (options.cancel === undefined) {\n              const f = fail('invalid_input', 'execution service unavailable')\n              json(res, f.res, 501)\n              return\n            }\n            const result = await options.cancel(id)\n            if (result.ok) json(res, { ok: true, value: { cancelled: true, executionId: result.executionId } }, 202)\n            else {\n              const f = fail('invalid_input', result.error)\n              json(res, f.res, f.status)\n            }\n            return\n          }\n          const f = fail('not_found', `unknown action ${action}`)\n          json(res, f.res, f.status)\n        } catch (error) {\n          const f = toFail(error)\n          json(res, f.res, f.status)\n        }\n        return\n      }\n\n      res.writeHead(404)\n      res.end()\n    } catch (error) {\n      const f = fail('internal', error instanceof Error ? error.message : String(error))\n      json(res, f.res, f.status)\n    }\n  }\n\n  const sse = (req: IncomingMessage, res: ServerResponse): void => {\n    res.writeHead(200, {\n      'content-type': 'text/event-stream; charset=utf-8',\n      'cache-control': 'no-cache',\n      connection: 'keep-alive',\n    })\n    res.write('retry: 2000\\n\\n')\n    // Baseline frame: the client reconciles by revision and refetches state on gaps.\n    res.write(`event: hello\\ndata: ${JSON.stringify({ revision: store.snapshot().revision })}\\n\\n`)\n    subscribers.add(res)\n    if (heartbeat === undefined) {\n      heartbeat = setInterval(() => {\n        for (const current of subscribers) current.write(': ping\\n\\n')\n      }, HEARTBEAT_MS)\n    }\n    req.on('close', () => {\n      subscribers.delete(res)\n      if (subscribers.size === 0 && heartbeat !== undefined) {\n        clearInterval(heartbeat)\n        heartbeat = undefined\n      }\n    })\n  }\n\n  const disposers = [\n    ctx.webServer.register({ kind: 'prefix', path: ROUTE_PREFIX, handler }),\n    ctx.webServer.register({ kind: 'exact', path: SSE_PATH, handler: sse }),\n  ]\n  return () => {\n    for (const dispose of disposers) dispose()\n    if (heartbeat !== undefined) clearInterval(heartbeat)\n    for (const res of subscribers) res.end()\n    subscribers.clear()\n  }\n}\n"],"mappings":";;;;AAoCA,MAAM,eAAe;;AAsBrB,SAAS,WAAW,KAAc,gBAAwD;CACxF,MAAM,QAAQ,eAAe,GAAG;CAChC,MAAM,YAAY,iBAAiB;CACnC,IAAI,cAAc,KAAA,KAAa,CAAC,UAAU,SAAS,MAAM,QAAQ,GAC/D,MAAM,IAAI,MAAM,yCAAyC,MAAM,SAAS,wCAAwC,UAAU,KAAK,IAAI,EAAE,EAAE;CAEzI,OAAO;AACT;;AAGA,SAAS,KAAK,KAAqB,SAA6B,SAAS,KAAW;CAClF,MAAM,OAAO,KAAK,UAAU,OAAO;CACnC,IAAI,UAAU,QAAQ;EAAE,gBAAgB;EAAmC,iBAAiB;CAAW,CAAC;CACxG,IAAI,IAAI,IAAI;AACd;;AAGA,SAAS,KAAK,MAAgC,SAAmD;CAM/F,OAAO;EAAE,KAAK;GAAE,IAAI;GAAO,OAAO;IAAE;IAAM;GAAQ;EAAE;EAAG,QALxC,SAAS,kBAAkB,MACtC,SAAS,cAAc,MACrB,SAAS,qBAAqB,MAC5B,SAAS,cAAc,MACrB;CACoD;AAChE;;AAGA,eAAe,SAAS,KAA+D;CACrF,MAAM,SAAmB,CAAC;CAC1B,WAAW,MAAM,SAAS,KAAK,OAAO,KAAK,KAAe;CAC1D,IAAI,OAAO,WAAW,GAAG,OAAO,CAAC;CACjC,IAAI;EACF,MAAM,SAAS,KAAK,MAAM,OAAO,OAAO,MAAM,CAAC,CAAC,SAAS,MAAM,CAAC;EAChE,OAAO,OAAO,WAAW,YAAY,WAAW,OAAO,SAAoC;CAC7F,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,IAAI,MAA+B,KAA4B;CACtE,MAAM,IAAI,KAAK;CACf,OAAO,OAAO,MAAM,WAAW,IAAI;AACrC;;AAGA,SAAS,IAAI,MAA+B,KAAwC;CAClF,MAAM,IAAI,KAAK;CACf,IAAI,MAAM,KAAA,GAAW,OAAO,KAAA;CAC5B,OAAO,OAAO,MAAM,YAAY,OAAO,SAAS,CAAC,IAAI,IAAI;AAC3D;;AAGA,SAAS,OAAO,OAAkD;CAChE,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK;CACrE,MAAM,OAAO,QAAQ,WAAW,SAAS,IAAI,QAAQ,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,KAAK,KAAA;CAE9E,IAAI,SAAS,KAAA,KAAc;EADgB;EAAiB;EAAa;EAAoB;EAAsB;EAAa;CACjG,CAAC,CAAc,SAAS,IAAI,GACzD,OAAO,KAAK,MAAkC,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAElF,IAAI,SAAS,sBAAsB,OAAO,KAAK,aAAa,QAAQ,MAAM,IAAI,KAAK,SAAS,CAAC,CAAC;CAC9F,OAAO,KAAK,iBAAiB,OAAO;AACtC;;;;;;;AAQA,SAAgB,wBAAwB,KAAc,SAA6C;CACjG,MAAM,EAAE,OAAO,eAAe;CAC9B,MAAM,8BAAc,IAAI,IAAoB;CAC5C,IAAI;CAEJ,MAAM,aAAa,WAAmF;EACpG,MAAM,QAAQ,wBAAwB,KAAK,UAAU;GAAE,UAAU,OAAO;GAAU,MAAM,OAAO;GAAM,OAAO,OAAO,MAAM,IAAI,SAAS;EAAE,CAAC,EAAE;EAC3I,KAAK,MAAM,OAAO,aAAa,IAAI,MAAM,KAAK;CAChD;CACA,MAAM,UAAU,SAAS;CAEzB,MAAM,UAAU,OAAO,KAAsB,QAAuC;EAClF,IAAI;GAEF,MAAM,WAAW,IADD,IAAI,IAAI,OAAO,KAAK,UACjB,CAAC,CAAC;GAGrB,IAAI,IAAI,WAAW,OAAO;IACxB,IAAI,aAAa,wBAAyB;KACxC,MAAM,MAAM,KAAK;KACjB,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,MAAM,SAAS;KAAE,CAAC;KAC/C;IACF;IACA,IAAI,aAAa,6BAA8B;KAC7C,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,WAAW,KAAK;KAAE,CAAC;KAChD;IACF;IACA,MAAM,YAAY,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,gBAAgB,CAAC;IAC9E,IAAI,cAAc,MAAM;KACtB,MAAM,OAAO,MAAM,IAAI,UAAU,EAAG;KACpC,IAAI,SAAS,KAAA,GAAW;MAAE,MAAM,IAAI,KAAK,aAAa,cAAc;MAAG,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAAG;KAAO;KAC1G,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO;KAAK,CAAC;KACnC;IACF;IACA,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAEA,IAAI,IAAI,WAAW,QAAQ;IACzB,IAAI,UAAU,GAAG;IACjB,IAAI,IAAI;IACR;GACF;GAGA,IAAI,EADgB,IAAI,QAAQ,mBAAmB,GAAA,CAClC,YAAY,CAAC,CAAC,WAAW,kBAAkB,GAAG;IAE7D,KAAK,KADK,KAAK,iBAAiB,uCACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GACA,MAAM,OAAO,MAAM,SAAS,GAAG;GAC/B,IAAI,SAAS,MAAM;IAEjB,KAAK,KADK,KAAK,iBAAiB,2BACtB,CAAC,CAAC,KAAK,GAAG;IACpB;GACF;GAGA,IAAI,aAAa,wBAAyB;IACxC,IAAI;KACF,MAAM,QAAQ,eAAe,IAAI,MAAM,OAAO,KAAK,EAAE;KACrD,MAAM,cAAc,IAAI,MAAM,aAAa,KAAK;KAChD,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;KACpG,MAAM,UAAU,UAAU,IAAI,MAAM,SAAS,KAAK,EAAE;KACpD,MAAM,SAAS,IAAI,MAAM,QAAQ,MAAM,OAAO,SAAkB,SAAS,IAAI,MAAM,QAAQ,CAAE;KAC7F,MAAM,YAAY,mBAAoB,KAAK,aAA8D,CAAC,GAAG,QAAQ,IAAI,CAAC;KAC1H,MAAM,QAAQ,KAAK,UAAU,KAAA,IAAY,KAAA,IAAY,WAAW,KAAK,OAAO,QAAQ,cAAc;KAClG,MAAM,MAAM,QAAQ,IAAI;KACxB,MAAM,OAAmB;MACvB,IAAI,UAAU;MACd;MACA,cAAc,IAAI,MAAM,aAAa,KAAK,GAAA,CAAI,KAAK;MACnD,QAAQ,gBAAgB,IAAI,MAAM,QAAQ,KAAK,KAAA,CAAS;MACxD;MACA;MACA;MACA,SAAS;MACT;MACA;MACA,SAAS;MACT,WAAW;MACX,WAAW;MACX,WAAW,EAAE,MAAM,OAAO;MAC1B,WAAW,EAAE,MAAM,OAAO;MAC1B,UAAU,CAAC;MACX,YAAY,CAAC;KACf;KACA,MAAM,MAAM,OAAO,iBAAgB,WAAU;MAC3C,OAAO,MAAM,KAAK,IAAI;MACtB,OAAO,CAAC,IAAI;KACd,CAAC;KACD,KAAK,KAAK;MAAE,IAAI;MAAM,OAAO,UAAU,IAAI;KAAE,GAAG,GAAG;IACrD,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAGA,MAAM,cAAc,SAAS,MAAM,IAAI,OAAO,IAAI,aAAa,uBAAuB,CAAC;GACvF,IAAI,gBAAgB,MAAM;IACxB,MAAM,KAAK,YAAY;IACvB,MAAM,SAAS,YAAY;IAC3B,IAAI;KACF,MAAM,OAAO,MAAM,IAAI,EAAE;KACzB,IAAI,SAAS,KAAA,GAAW,MAAM,IAAI,MAAM,gCAAgC;KACxE,IAAI,WAAW,UAAU;MACvB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,MAAM,QAAQ,IAAI,MAAM,OAAO;MAC/B,IAAI,UAAU,MAAM,KAAK,QAAQ,eAAe,KAAK;MACrD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM,KAAK,cAAc,YAAY,KAAK;MAC9D,MAAM,SAAS,IAAI,MAAM,QAAQ;MACjC,IAAI,WAAW,MAAM,KAAK,SAAS,gBAAgB,MAAM;MACzD,MAAM,UAAU,IAAI,MAAM,SAAS;MACnC,IAAI,YAAY,MAAM,KAAK,UAAU,UAAU,OAAO;MAEtD,MAAM,cAAc,IAAI,MAAM,aAAa;MAC3C,IAAI,gBAAgB,MAAM;OACxB,IAAI,WAAW,IAAI,WAAW,MAAM,KAAA,GAAW,MAAM,IAAI,MAAM,qCAAqC;OACpG,KAAK,cAAc;MACrB;MACA,IAAI,OAAO,KAAK,YAAY,WAAW,KAAK,UAAU,KAAK;MAE3D,IAAI,KAAK,cAAc,KAAA,GAAW,KAAK,YAAY,mBAAmB,KAAK,WAA+C,QAAQ,IAAI,CAAC;MACvI,IAAI,KAAK,UAAU,MAAM,KAAK,QAAQ,KAAA;WACjC,IAAI,KAAK,UAAU,KAAA,GAAW,KAAK,QAAQ,WAAW,KAAK,OAAO,QAAQ,cAAc;MAC7F,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,QAAQ;MACrB,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,MAAM,SAAS,IAAI,MAAM,QAAQ,KAAK;MACtC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,KAAK,SAAS,MAAM;MAC1B,IAAI,CAAC,cAAc,KAAK,QAAQ,EAAE,GAAG,MAAM,IAAI,MAAM,iDAAiD,KAAK,OAAO,KAAK,IAAI;MAC3H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS;MACd,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,YAAY,EAAE,MAAM,OAAO;MAChC,IAAI,KAAK,WAAW,UAAU,OAAO,eAAe,KAAK,UAAU;MAEnE,UAAU,MAAM,IAAI,QAAQ,IAAI,CAAC;MACjC,MAAM,MAAM,OAAO,eAAc,WAAU;OACzC,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,UAAU,IAAI;MAAE,CAAC;MAC9C;KACF;KACA,IAAI,WAAW,WAAW;MACxB,MAAM,WAAW,IAAI,MAAM,MAAM,KAAK;MACtC,MAAM,UAAU;OAAE,IAAI,aAAa;OAAG,MAAM,cAAc,QAAQ;OAAG,SAAS;OAAG,WAAW,QAAQ,IAAI;MAAE;MAC1G,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,SAAS,KAAK,OAAO;MAC1B,KAAK,UAAU,KAAK,UAAU;MAC9B,KAAK,YAAY,QAAQ,IAAI;MAC7B,MAAM,MAAM,OAAO,kBAAiB,WAAU;OAC5C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAQ,GAAG,GAAG;MAC3C;KACF;KACA,IAAI,WAAW,UAAU;MAEvB,IADc,KAAK,UAAU,MAClB;OACT,IAAI,KAAK,cAAc,KAAA,GAAW,MAAM,IAAI,MAAM,yEAAyE;OAC3H,MAAM,MAAM,OAAO,iBAAgB,WAAU;QAC3C,OAAO,QAAQ,OAAO,MAAM,QAAO,MAAK,EAAE,OAAO,EAAE;QACnD,OAAO,CAAC;OACV,CAAC;OACD,KAAK,KAAK;QAAE,IAAI;QAAM,OAAO,EAAE,QAAQ,KAAK;OAAE,CAAC;OAC/C;MACF;MACA,MAAM,YAAY,IAAI,MAAM,WAAW;MACvC,IAAI,cAAc,KAAA,KAAa,cAAc,MAAM,MAAM,IAAI,MAAM,6CAA6C;MAChH,IAAI,cAAc,KAAK,SAAS,MAAM,IAAI,MAAM,0CAA0C,UAAU,YAAY,KAAK,QAAQ,EAAE;MAC/H,MAAM,OAAO,gBAAgB,IAAI;MACjC,KAAK,YAAY,QAAQ,IAAI;MAC7B,KAAK,UAAU,KAAK,UAAU;MAC9B,MAAM,MAAM,OAAO,iBAAgB,WAAU;OAC3C,MAAM,IAAI,OAAO,MAAM,WAAU,MAAK,EAAE,OAAO,EAAE;OACjD,OAAO,MAAM,KAAK;OAClB,OAAO,CAAC,IAAI;MACd,CAAC;MACD,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO,EAAE,SAAS,KAAK;MAAE,CAAC;MAChD;KACF;KACA,IAAI,WAAW,OAAO;MACpB,IAAI,QAAQ,QAAQ,KAAA,GAAW;OAE7B,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,IAAI,EAAE;MACnC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;MAAO,GAAG,GAAG;WACpD;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,IAAI,WAAW,UAAU;MACvB,IAAI,QAAQ,WAAW,KAAA,GAAW;OAEhC,KAAK,KADK,KAAK,iBAAiB,+BACtB,CAAC,CAAC,KAAK,GAAG;OACpB;MACF;MACA,MAAM,SAAS,MAAM,QAAQ,OAAO,EAAE;MACtC,IAAI,OAAO,IAAI,KAAK,KAAK;OAAE,IAAI;OAAM,OAAO;QAAE,WAAW;QAAM,aAAa,OAAO;OAAY;MAAE,GAAG,GAAG;WAClG;OACH,MAAM,IAAI,KAAK,iBAAiB,OAAO,KAAK;OAC5C,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;MAC3B;MACA;KACF;KACA,MAAM,IAAI,KAAK,aAAa,kBAAkB,QAAQ;KACtD,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B,SAAS,OAAO;KACd,MAAM,IAAI,OAAO,KAAK;KACtB,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;IAC3B;IACA;GACF;GAEA,IAAI,UAAU,GAAG;GACjB,IAAI,IAAI;EACV,SAAS,OAAO;GACd,MAAM,IAAI,KAAK,YAAY,iBAAiB,QAAQ,MAAM,UAAU,OAAO,KAAK,CAAC;GACjF,KAAK,KAAK,EAAE,KAAK,EAAE,MAAM;EAC3B;CACF;CAEA,MAAM,OAAO,KAAsB,QAA8B;EAC/D,IAAI,UAAU,KAAK;GACjB,gBAAgB;GAChB,iBAAiB;GACjB,YAAY;EACd,CAAC;EACD,IAAI,MAAM,iBAAiB;EAE3B,IAAI,MAAM,uBAAuB,KAAK,UAAU,EAAE,UAAU,MAAM,SAAS,CAAC,CAAC,SAAS,CAAC,EAAE,KAAK;EAC9F,YAAY,IAAI,GAAG;EACnB,IAAI,cAAc,KAAA,GAChB,YAAY,kBAAkB;GAC5B,KAAK,MAAM,WAAW,aAAa,QAAQ,MAAM,YAAY;EAC/D,GAAG,YAAY;EAEjB,IAAI,GAAG,eAAe;GACpB,YAAY,OAAO,GAAG;GACtB,IAAI,YAAY,SAAS,KAAK,cAAc,KAAA,GAAW;IACrD,cAAc,SAAS;IACvB,YAAY,KAAA;GACd;EACF,CAAC;CACH;CAEA,MAAM,YAAY,CAChB,IAAI,UAAU,SAAS;EAAE,MAAM;EAAU,MAAM;EAAc;CAAQ,CAAC,GACtE,IAAI,UAAU,SAAS;EAAE,MAAM;EAAS,MAAM;EAAU,SAAS;CAAI,CAAC,CACxE;CACA,aAAa;EACX,KAAK,MAAM,WAAW,WAAW,QAAQ;EACzC,IAAI,cAAc,KAAA,GAAW,cAAc,SAAS;EACpD,KAAK,MAAM,OAAO,aAAa,IAAI,IAAI;EACvC,YAAY,MAAM;CACpB;AACF"}

package/lib/host/scheduler.js

@@ -1,4 +1,5 @@
 import { nextCronTime, parseCron } from "../shared/protocol.js";
+import "./execution.js";
 //#region src/host/scheduler.ts
 /**
 * Host-side cron scheduler: one tick per minute over the ledger's scheduled
@@ -20,6 +21,7 @@ const SKIP_AFTER_MS = 5 * 6e4;
 var SchedulerService = class {
 	deps;
 	handle;
+	catchup;
 	/** @param deps - store + execution + clock. */
 	constructor(deps) {
 		this.deps = deps;
@@ -33,25 +35,32 @@ var SchedulerService = class {
 		this.handle = timers.setInterval(() => {
 			this.tick();
 		}, TICK_MS);
-		setTimeout(() => {
+		this.catchup = setTimeout(() => {
 			this.tick();
 		}, 3e3);
 	}
 	/** Stop ticking. */
 	dispose() {
+		if (this.catchup !== void 0) {
+			clearTimeout(this.catchup);
+			this.catchup = void 0;
+		}
 		if (this.handle === void 0) return;
 		(this.deps.timers ?? { clearInterval: (h) => clearInterval(h) }).clearInterval(this.handle);
 		this.handle = void 0;
 	}
 	/** One scheduler pass (exported for tests). */
 	async tick() {
+		await this.deps.store.load();
 		const now = this.deps.now();
 		const ledger = this.deps.store.snapshot();
+		const atCapacity = this.deps.execution.inFlight() >= (this.deps.maxConcurrent ?? 3);
 		for (const task of ledger.tasks) {
 			if (task.execution.mode !== "scheduled" || task.execution.cron === void 0) continue;
 			if (task.execution.nextRunAt === void 0) continue;
 			if (task.status === "in_progress" || task.trashedAt !== void 0) continue;
 			if (task.execution.nextRunAt > now) continue;
+			if (atCapacity) continue;
 			const missed = now - task.execution.nextRunAt > SKIP_AFTER_MS;
 			await this.advance(task.id, now);
 			if (missed) continue;