orionfold-relay 0.25.0 → 0.25.1

package/dist/cli.js

@@ -4614,6 +4614,19 @@ var init_history = __esm({
   }
 });
 
+// src/lib/http/self-base-url.ts
+function getSelfBaseUrl() {
+  const explicit = process.env.RELAY_SELF_BASE_URL || process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL;
+  if (explicit) return explicit;
+  const port = process.env.PORT || "3000";
+  return `http://127.0.0.1:${port}`;
+}
+var init_self_base_url = __esm({
+  "src/lib/http/self-base-url.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/workflows/delay.ts
 function parseDuration(input) {
   const match = input.match(DURATION_PATTERN);
@@ -15281,7 +15294,7 @@ Guidelines for schema inference:
         try {
           const table = await getTable(args.tableId);
           if (!table) return err("Table not found");
-          const baseUrl = process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+          const baseUrl = getSelfBaseUrl();
           return ok({
             url: `${baseUrl}/api/tables/${args.tableId}/export?format=${args.format}`,
             table: table.name,
@@ -15727,7 +15740,7 @@ Guidelines for schema inference:
   ];
 }
 function getBaseUrl() {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+  return getSelfBaseUrl();
 }
 var init_table_tools = __esm({
   "src/lib/chat/tools/table-tools.ts"() {
@@ -15738,6 +15751,7 @@ var init_table_tools = __esm({
     init_history();
     init_import();
     init_enrichment();
+    init_self_base_url();
   }
 });
 
@@ -25379,13 +25393,15 @@ async function fireAction(actionType, config, rowData, meta) {
 Trigger data: ${JSON.stringify(rowData, null, 2)}` : `Triggered by table row change.
 
 Data: ${JSON.stringify(rowData, null, 2)}`;
-    await fetch(`${getBaseUrl2()}/api/tasks`, {
+    await fetch(`${getSelfBaseUrl()}/api/tasks`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         title: config.title ?? "Triggered Task",
         description,
-        projectId: config.projectId ?? null
+        // createTaskSchema wants `string | undefined`, not null — sending null
+        // 400s the self-call and the task is never created. Omit when absent.
+        ...config.projectId ? { projectId: config.projectId } : {}
       })
     });
     return;
@@ -25411,7 +25427,7 @@ Data: ${JSON.stringify(rowData, null, 2)}`;
     return;
   }
   if (actionType === "run_workflow" && config.workflowId) {
-    await fetch(`${getBaseUrl2()}/api/workflows/${config.workflowId}/execute`, {
+    await fetch(`${getSelfBaseUrl()}/api/workflows/${config.workflowId}/execute`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -25429,14 +25445,12 @@ function deriveAppIdFromBlueprintId(blueprintId) {
   if (idx <= 0) return null;
   return blueprintId.slice(0, idx);
 }
-function getBaseUrl2() {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
-}
 var init_trigger_evaluator = __esm({
   "src/lib/tables/trigger-evaluator.ts"() {
     "use strict";
     init_db();
     init_schema();
+    init_self_base_url();
   }
 });
 
@@ -25899,8 +25913,8 @@ import { execFileSync as execFileSync3 } from "child_process";
 import yaml12 from "js-yaml";
 import semver from "semver";
 function relayCoreVersion() {
-  if (semver.valid("0.25.0")) {
-    return "0.25.0";
+  if (semver.valid("0.25.1")) {
+    return "0.25.1";
   }
   try {
     const root = getAppRoot(import.meta.dirname, 3);
@@ -27548,6 +27562,11 @@ Falling back to development mode for this run \u2014 Relay still works, but slow
       RELAY_DATA_DIR: DATA_DIR,
       RELAY_LAUNCH_CWD: launchCwd2,
       PORT: String(actualPort),
+      // Origin for Relay's internal loopback self-calls (trigger dispatch,
+      // compose table tools). The server always listens on loopback even when
+      // bound to a non-loopback host, so self-calls target 127.0.0.1 + the real
+      // port — never :3000, never the LAN IP. Fixes issue #29.
+      RELAY_SELF_BASE_URL: buildSidecarUrl(actualPort, "127.0.0.1"),
       ...opts.safeMode ? { RELAY_SAFE_MODE: "true" } : {},
       // In dev mode, Next blocks cross-origin /_next/* dev-asset requests from
       // the LAN client's IP, breaking the app over the network (issue #13).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orionfold-relay",
-  "version": "0.25.0",
+  "version": "0.25.1",
   "description": "Orionfold Relay — a local-first, multi-agent orchestration runtime and builder scaffold for AI-native work.",
   "keywords": [
     "ai",

package/src/app/api/chat/conversations/route.ts

@@ -51,7 +51,10 @@ export async function POST(req: NextRequest) {
     );
   }
 
-  const validRuntimes = ["claude-code", "openai-codex-app-server"];
+  // "ollama" is first-class: getRuntimeForModel() returns it for local models,
+  // engine.ts routes it to sendOllamaMessage. Omitting it here 400'd the
+  // "Best privacy (local only)" tier's first chat/compose on a fresh install (#30).
+  const validRuntimes = ["claude-code", "openai-codex-app-server", "ollama"];
   if (!validRuntimes.includes(runtimeId)) {
     return NextResponse.json(
       { error: `Invalid runtimeId. Must be one of: ${validRuntimes.join(", ")}` },

package/src/components/chat/chat-session-provider.tsx

@@ -297,7 +297,16 @@ export function ChatSessionProvider({ children }: { children: ReactNode }) {
           ...(opts?.title ? { title: opts.title } : {}),
         }),
       });
-      if (!res.ok) return null;
+      if (!res.ok) {
+        // Never swallow a create failure silently again (#30): a rejected
+        // runtime/model used to clear the composer with no signal at all.
+        const detail = await res
+          .json()
+          .then((b) => (b as { error?: string })?.error)
+          .catch(() => null);
+        toast.error(detail || "Couldn't start a chat with this model. Try another model.");
+        return null;
+      }
       const conversation = (await res.json()) as ConversationRow;
       setConversations((prev) => [conversation, ...prev]);
       // Set empty messages BEFORE activating so the conversation has an

package/src/lib/chat/tools/table-tools.ts

@@ -26,6 +26,7 @@ import {
   createImportRecord,
 } from "@/lib/tables/import";
 import { createEnrichmentWorkflow } from "@/lib/tables/enrichment";
+import { getSelfBaseUrl } from "@/lib/http/self-base-url";
 import type { ColumnDef } from "@/lib/tables/types";
 
 export function tableTools(ctx: ToolContext) {
@@ -599,7 +600,7 @@ Guidelines for schema inference:
         try {
           const table = await getTable(args.tableId);
           if (!table) return err("Table not found");
-          const baseUrl = process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+          const baseUrl = getSelfBaseUrl();
           return ok({
             url: `${baseUrl}/api/tables/${args.tableId}/export?format=${args.format}`,
             table: table.name,
@@ -1067,5 +1068,7 @@ Guidelines for schema inference:
 }
 
 function getBaseUrl(): string {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
+  // Loopback self-call origin — derived from the real bind port, not a bare
+  // :3000 literal (issue #29). See @/lib/http/self-base-url.
+  return getSelfBaseUrl();
 }

package/src/lib/http/self-base-url.ts

@@ -0,0 +1,42 @@
+/**
+ * Base URL for Relay's internal loopback self-calls (server → its OWN API).
+ *
+ * Several server-side paths call Relay's own HTTP API — the table-trigger
+ * dispatcher fires `POST /api/tasks` / `/api/workflows/:id/execute`, and the
+ * compose chat tools hit `/api/tables/:id/triggers`, `/export`, `/templates`,
+ * etc. These are loopback self-fetches, so the origin must be *this* server's
+ * own address, not a hardcoded one.
+ *
+ * The bug this fixes: the old fallback was a bare `http://localhost:3000`, which
+ * silently broke every instance NOT on port 3000 (`--port`, `--hostname
+ * 0.0.0.0`, containers, staging on :3199). The CLI sets neither `NEXTAUTH_URL`
+ * nor `NEXT_PUBLIC_APP_URL`, so that fallback was always used → `TypeError:
+ * fetch failed`, caught + swallowed to a server-log line, zero user-facing
+ * signal (issue #29). See memory `self-http-calls-hardcode-3000`.
+ *
+ * Precedence:
+ *   1. `RELAY_SELF_BASE_URL` — explicit override the CLI threads from the known
+ *      bind port (loopback host + real port).
+ *   2. `NEXTAUTH_URL` / `NEXT_PUBLIC_APP_URL` — reverse-proxy / custom-origin
+ *      escape hatch (unchanged behavior for those deployments).
+ *   3. `http://127.0.0.1:${PORT}` — loopback + the real port. The server always
+ *      listens on loopback even when bound to `0.0.0.0` (INADDR_ANY includes the
+ *      loopback interface), so a self-call must target 127.0.0.1, never the LAN
+ *      IP or `0.0.0.0`. `PORT` is already in the child env (`bin/cli.ts`).
+ *   4. `http://127.0.0.1:3000` — last-resort default when even `PORT` is absent.
+ *
+ * ZERO-IMPORT LEAF: this module reads only `process.env` and does string work.
+ * It is imported by `table-tools.ts`, which is reachable from the runtime
+ * catalog — a non-leaf import here would risk the module-load cycle the
+ * smoke-budget rule guards. Keep it import-free. See memory
+ * `shared-constant-zero-import-leaf`.
+ */
+export function getSelfBaseUrl(): string {
+  const explicit =
+    process.env.RELAY_SELF_BASE_URL ||
+    process.env.NEXTAUTH_URL ||
+    process.env.NEXT_PUBLIC_APP_URL;
+  if (explicit) return explicit;
+  const port = process.env.PORT || "3000";
+  return `http://127.0.0.1:${port}`;
+}

package/src/lib/tables/trigger-evaluator.ts

@@ -6,6 +6,7 @@
 import { db } from "@/lib/db";
 import { userTableTriggers } from "@/lib/db/schema";
 import { eq, and } from "drizzle-orm";
+import { getSelfBaseUrl } from "@/lib/http/self-base-url";
 import type { FilterSpec } from "./types";
 
 type TriggerEvent = "row_added" | "row_updated" | "row_deleted";
@@ -147,13 +148,15 @@ async function fireAction(
       ? `${config.description}\n\nTrigger data: ${JSON.stringify(rowData, null, 2)}`
       : `Triggered by table row change.\n\nData: ${JSON.stringify(rowData, null, 2)}`;
 
-    await fetch(`${getBaseUrl()}/api/tasks`, {
+    await fetch(`${getSelfBaseUrl()}/api/tasks`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
         title: config.title ?? "Triggered Task",
         description,
-        projectId: config.projectId ?? null,
+        // createTaskSchema wants `string | undefined`, not null — sending null
+        // 400s the self-call and the task is never created. Omit when absent.
+        ...(config.projectId ? { projectId: config.projectId } : {}),
       }),
     });
     return;
@@ -187,7 +190,7 @@ async function fireAction(
   }
 
   if (actionType === "run_workflow" && config.workflowId) {
-    await fetch(`${getBaseUrl()}/api/workflows/${config.workflowId}/execute`, {
+    await fetch(`${getSelfBaseUrl()}/api/workflows/${config.workflowId}/execute`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({
@@ -212,6 +215,3 @@ function deriveAppIdFromBlueprintId(blueprintId: string): string | null {
   return blueprintId.slice(0, idx);
 }
 
-function getBaseUrl(): string {
-  return process.env.NEXTAUTH_URL || process.env.NEXT_PUBLIC_APP_URL || "http://localhost:3000";
-}