opencode-supertask 0.1.17 → 0.1.19

package/dist/gateway/index.js

@@ -1,5 +1,3 @@
-#!/usr/bin/env bun
-
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
@@ -6086,7 +6084,7 @@ import { join, dirname } from "path";
 import { fileURLToPath } from "url";
 function getMigrationsFolder() {
   const __dirname = dirname(fileURLToPath(import.meta.url));
-  return join(__dirname, "../../drizzle");
+  return join(__dirname, "../../../drizzle");
 }
 function initDb() {
   const dataDir = dirname(DB_FILE_PATH);
@@ -6110,7 +6108,9 @@ function initDb() {
     try {
       migrate(_db, { migrationsFolder: getMigrationsFolder() });
     } catch (err) {
-      console.error("[supertask] migration failed:", err instanceof Error ? err.message : String(err));
+      const msg = err instanceof Error ? err.message : String(err);
+      console.error(`[supertask] migration failed: ${msg}`);
+      throw new Error(`[supertask] DB migration failed: ${msg}`);
     }
   }
   return _db;
@@ -6130,14 +6130,15 @@ function closeDb() {
     _db = null;
   }
 }
-var DB_FILE_PATH, _sqlite, _db, _migrationRan, db, sqlite;
+var DEFAULT_DB_PATH, DB_FILE_PATH, _sqlite, _db, _migrationRan, db, sqlite;
 var init_db2 = __esm({
   "src/core/db/index.ts"() {
     "use strict";
     init_bun_sqlite();
     init_migrator2();
     init_schema();
-    DB_FILE_PATH = join(homedir(), ".local/share/opencode/tasks.db");
+    DEFAULT_DB_PATH = join(homedir(), ".local/share/opencode/tasks.db");
+    DB_FILE_PATH = process.env.SUPERTASK_DB_PATH || DEFAULT_DB_PATH;
     _sqlite = null;
     _db = null;
     _migrationRan = false;
@@ -18291,6 +18292,10 @@ function formatDate(ts) {
   const d = ts instanceof Date ? ts : new Date(ts);
   return d.toLocaleString("zh-CN", { month: "2-digit", day: "2-digit", hour: "2-digit", minute: "2-digit" });
 }
+function esc(s) {
+  if (!s) return "";
+  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
+}
 function readCurrentConfig() {
   if (!existsSync3(CONFIG_PATH)) return {};
   try {
@@ -18311,6 +18316,7 @@ async function retryTask(id){if(!confirm('\u786E\u5B9A\u91CD\u8BD5\u4EFB\u52A1 #
 async function deleteTask(id){if(!confirm('\u786E\u5B9A\u5220\u9664\u4EFB\u52A1 #'+id+'?'))return;await fetch('/api/tasks/'+id,{method:'DELETE'});location.reload();}
 async function showDetail(id){try{const r=await fetch('/api/tasks/'+id);const t=await r.json();document.getElementById('dc').textContent=JSON.stringify(t,null,2);document.getElementById('dd').showModal();}catch(e){alert('\u83B7\u53D6\u8BE6\u60C5\u5931\u8D25');}}
 async function showRunDetail(id){try{const r=await fetch('/api/runs/'+id);const t=await r.json();document.getElementById('dc').textContent=JSON.stringify(t,null,2);document.getElementById('dd').showModal();}catch(e){alert('\u83B7\u53D6\u8BE6\u60C5\u5931\u8D25');}}
+async function showTemplateDetail(id){try{const r=await fetch('/api/templates/'+id);const t=await r.json();document.getElementById('dc').textContent=JSON.stringify(t,null,2);document.getElementById('dd').showModal();}catch(e){alert('\u83B7\u53D6\u8BE6\u60C5\u5931\u8D25');}}
 async function enableTmpl(id){await fetch('/api/templates/'+id+'/enable',{method:'POST'});location.reload();}
 async function disableTmpl(id){if(!confirm('\u786E\u5B9A\u7981\u7528\u6B64\u6A21\u677F?'))return;await fetch('/api/templates/'+id+'/disable',{method:'POST'});location.reload();}
 async function deleteTmpl(id){if(!confirm('\u786E\u5B9A\u5220\u9664\u6B64\u6A21\u677F? \u6B64\u64CD\u4F5C\u4E0D\u53EF\u6062\u590D!'))return;await fetch('/api/templates/'+id,{method:'DELETE'});location.reload();}
@@ -18495,8 +18501,8 @@ var init_web = __esm({
         const st = (task.status ?? "").toUpperCase();
         rows += `<tr>
           <td class="mu">#${task.id}</td>
-          <td><div style="font-weight:500">${task.name}</div><div class="mu sm el">${task.prompt.substring(0, 120)}</div></td>
-          <td><span class="tag">${task.agent}</span></td>
+          <td><div style="font-weight:500">${esc(task.name)}</div><div class="mu sm el">${esc(task.prompt.substring(0, 120))}</div></td>
+          <td><span class="tag">${esc(task.agent)}</span></td>
           <td><span class="badge b-${task.status}">${st}</span></td>
           <td class="sm ${task.status === "running" ? "" : "mu"}">${formatDuration(task.startedAt, task.finishedAt)}</td>
           <td class="mu sm">${(task.retryCount ?? 0) > 0 ? task.retryCount : "-"}</td>
@@ -18552,15 +18558,15 @@ var init_web = __esm({
         const toggleBtn = t.enabled ? `<button class="btn btn-sm btn-warn" onclick="disableTmpl(${t.id})">\u7981\u7528</button>` : `<button class="btn btn-sm" onclick="enableTmpl(${t.id})">\u542F\u7528</button>`;
         rows += `<tr>
           <td class="mu">#${t.id}</td>
-          <td><div style="font-weight:500">${t.name}</div><div class="mu sm el">${t.prompt.substring(0, 100)}</div>
-            <div class="sm" style="margin-top:2px"><span class="tag">${t.agent}</span>${t.model && t.model !== "default" ? ` <span class="tag">${t.model}</span>` : ""}</div></td>
+          <td><div style="font-weight:500">${esc(t.name)}</div><div class="mu sm el">${esc(t.prompt.substring(0, 100))}</div>
+            <div class="sm" style="margin-top:2px"><span class="tag">${esc(t.agent)}</span>${t.model && t.model !== "default" ? ` <span class="tag">${esc(t.model)}</span>` : ""}</div></td>
           <td><span class="${typeClass}">${typeLabel}</span></td>
           <td class="m sm">${rule}</td>
           <td>${statusBadge}</td>
           <td class="sm">${t.lastRunAt ? timeAgo(t.lastRunAt) : "-"}</td>
           <td class="sm">${t.nextRunAt ? timeUntil(t.nextRunAt) : "-"}</td>
           <td>
-            <button class="btn btn-sm" onclick="showDetail(${t.id})">\u8BE6\u60C5</button>
+            <button class="btn btn-sm" onclick="showTemplateDetail(${t.id})">\u8BE6\u60C5</button>
             <button class="btn btn-sm btn-primary" onclick="triggerTmpl(${t.id})">\u89E6\u53D1</button>
             ${toggleBtn}
             <button class="btn btn-sm btn-danger" onclick="deleteTmpl(${t.id})">\u5220\u9664</button>
@@ -18612,9 +18618,9 @@ var init_web = __esm({
         const logBtn = run.log ? `<button class="btn btn-sm" onclick="toggleLog(${run.id})">\u65E5\u5FD7</button>` : "";
         rows += `<tr>
           <td class="mu">#${run.id}</td>
-          <td><div style="font-weight:500">${run.taskName} <span class="mu">(#${run.taskId})</span></div>
-            ${run.model ? `<div class="sm"><span class="tag">${run.model}</span></div>` : ""}</td>
-          <td><span class="tag">${run.taskAgent}</span></td>
+          <td><div style="font-weight:500">${esc(run.taskName)} <span class="mu">(#${run.taskId})</span></div>
+            ${run.model ? `<div class="sm"><span class="tag">${esc(run.model)}</span></div>` : ""}</td>
+          <td><span class="tag">${esc(run.taskAgent)}</span></td>
           <td><span class="badge b-${run.status}">${(run.status ?? "").toUpperCase()}</span></td>
           <td class="sm">${formatDuration(run.startedAt, run.finishedAt)}</td>
           <td class="sm mu">${run.heartbeatAt ? timeAgo(run.heartbeatAt) : "-"}</td>
@@ -18660,7 +18666,7 @@ var init_web = __esm({
           runRows += `<tr>
               <td class="mu">#${run.id}</td><td>#${run.taskId}</td>
               <td class="m sm">${shortS}</td>
-              <td class="sm">${run.model || "-"}</td>
+              <td class="sm">${esc(run.model) || "-"}</td>
               <td class="sm">${formatDate(run.startedAt)}</td>
               <td class="sm">${run.heartbeatAt ? timeAgo(run.heartbeatAt) : "-"}</td>
               <td class="m sm">W:${run.workerPid ?? "-"} C:${run.childPid ?? "-"}</td>
@@ -18749,6 +18755,12 @@ var init_web = __esm({
       if (!run) return c.json({ error: "not found" }, 404);
       return c.json(run);
     });
+    app.get("/api/templates/:id", async (c) => {
+      const id = Number(c.req.param("id"));
+      const tmpl = await TaskTemplateService.getById(id);
+      if (!tmpl) return c.json({ error: "not found" }, 404);
+      return c.json(tmpl);
+    });
     app.post("/api/tasks/:id/retry", async (c) => {
       await TaskService.retry(Number(c.req.param("id")));
       return c.json({ success: true });
@@ -18893,10 +18905,13 @@ var WorkerEngine = class {
           status: "running"
         });
         const modelToUse = this.resolveModel(task.model);
-        const modelArg = modelToUse ? ` -m "${modelToUse}"` : "";
-        const cmd = `opencode run --agent supertask-runner${modelArg} --format json "\u6267\u884C\u4EFB\u52A1 ID: ${task.id}${modelToUse ? ` OVERRIDE_MODEL=${modelToUse}` : ""}"`;
+        const args = ["run", "--agent", "supertask-runner", "--format", "json"];
+        if (modelToUse) {
+          args.push("-m", modelToUse);
+        }
+        args.push(`\u6267\u884C\u4EFB\u52A1 ID: ${task.id}${modelToUse ? ` OVERRIDE_MODEL=${modelToUse}` : ""}`);
         const cwd = task.cwd || process.cwd();
-        const child = spawn("sh", ["-c", cmd], { cwd, stdio: ["ignore", "pipe", "pipe"] });
+        const child = spawn("opencode", args, { cwd, stdio: ["ignore", "pipe", "pipe"] });
         await TaskRunService.updatePid(run.id, process.pid, child.pid ?? 0);
         let output = "";
         const handleData = (data) => {
@@ -19357,7 +19372,16 @@ async function main() {
   await scheduler.start();
   if (cfg.dashboard.enabled) {
     const { dashboardApp: dashboardApp2 } = await Promise.resolve().then(() => (init_web(), web_exports));
-    Bun.serve({ port: cfg.dashboard.port, fetch: dashboardApp2.fetch });
+    Bun.serve({
+      port: cfg.dashboard.port,
+      fetch(req) {
+        const url = new URL(req.url);
+        if (url.hostname !== "localhost" && url.hostname !== "127.0.0.1" && url.hostname !== "::1") {
+          return new Response("Forbidden", { status: 403 });
+        }
+        return dashboardApp2.fetch(req);
+      }
+    });
     console.log(JSON.stringify({
       ts: (/* @__PURE__ */ new Date()).toISOString(),
       level: "info",
@@ -19399,9 +19423,11 @@ async function main() {
   process.on("SIGINT", () => shutdown("SIGINT"));
   process.on("uncaughtException", (err) => {
     console.error(JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), level: "fatal", msg: "uncaughtException", error: err.message, stack: err.stack }));
+    process.exit(1);
   });
   process.on("unhandledRejection", (reason) => {
     console.error(JSON.stringify({ ts: (/* @__PURE__ */ new Date()).toISOString(), level: "fatal", msg: "unhandledRejection", reason: String(reason) }));
+    process.exit(1);
   });
 }
 if (import.meta.main) {