orkestrator 2.35.0-beta → 2.35.1-beta

package/dist/client.js

@@ -8334,7 +8334,7 @@ import path5 from "path";
 // ../../apps/backend/package.json
 var package_default = {
   name: "@orkestrator/backend",
-  version: "2.35.0-beta",
+  version: "2.35.1-beta",
   private: true,
   type: "module",
   exports: {

package/dist/main.js

@@ -7238,7 +7238,7 @@ var package_default;
 var init_package = __esm(() => {
   package_default = {
     name: "@orkestrator/backend",
-    version: "2.35.0-beta",
+    version: "2.35.1-beta",
     private: true,
     type: "module",
     exports: {
@@ -11594,6 +11594,7 @@ class StorageDatabase {
       }
       const update = mutate(current);
       let document2 = header.document;
+      let nextRow = null;
       if (update.delete) {
         if (!existing)
           return update.result;
@@ -11613,6 +11614,7 @@ class StorageDatabase {
              VALUES (?, ?, ?, ?, ?, ?)
              ON CONFLICT (store, collection, key) DO UPDATE SET
                owner = excluded.owner, value = excluded.value`).run(store, collection, key, position, owner ?? null, value);
+        nextRow = { collection, key, position, value };
         if (collection && document2 !== null) {
           const envelope = JSON.parse(document2);
           if (envelope[collection] !== STORAGE_COLLECTION_MARKER) {
@@ -11625,7 +11627,17 @@ class StorageDatabase {
       }
       const revision = header.revision + 1;
       this.db.query("UPDATE stores SET revision = ?, document = ?, updated_at = ? WHERE name = ?").run(revision, document2, Date.now(), store);
-      this.setCache(store, null);
+      const cached = this.pendingCache?.has(store) ? this.pendingCache.get(store) : this.cache.get(store);
+      if (cached?.revision === header.revision && cached.mode === "rows") {
+        const rows = new Map(cached.rows);
+        if (nextRow)
+          rows.set(rowId(collection, key), nextRow);
+        else
+          rows.delete(rowId(collection, key));
+        this.setCache(store, { ...cached, revision, document: document2, rows });
+      } else {
+        this.setCache(store, null);
+      }
       return update.result;
     });
   }
@@ -13555,6 +13567,12 @@ class StorageContext {
       throw error;
     }
   }
+  storeHeldAsDocument(filePath) {
+    const store = this.storeForFile(filePath);
+    if (store === null)
+      throw new Error("storeHeldAsDocument requires a database store");
+    return this.database.readStoreHeader(store)?.mode === "document";
+  }
   loadStoreSerialized(filePath) {
     const store = this.storeForFile(filePath);
     if (store === null)
@@ -24321,7 +24339,8 @@ class DraftsRepository {
   async getComposeDraft(draftKey) {
     if (!isNonBlankString(draftKey))
       throw new Error("Compose draft key must not be blank");
-    return (await this.repos.prompts.loadComposeDrafts())[draftKey] ?? null;
+    const stored = this.context.loadStoreRow(this.files.composeDraftsFile(), draftKey);
+    return isPersistedComposeDraft(stored, draftKey) ? stored : null;
   }
   async listComposeDrafts(ownerType, ownerId) {
     if (ownerType !== "environment" && ownerType !== "project") {
@@ -24675,8 +24694,8 @@ class DraftsRepository {
     });
   }
   async getSession(sessionId) {
-    const sessions = await this.context.loadJson(this.files.sessionsFile(), () => []);
-    return sessions.find((session) => session.id === sessionId) ?? null;
+    const stored = this.context.loadStoreRow(this.files.sessionsFile(), sessionId);
+    return isRecord6(stored) && stored.id === sessionId ? stored : null;
   }
   async getSessionsByEnvironment(environmentId) {
     const sessions = this.context.loadStoreRowsByOwner(this.files.sessionsFile(), environmentId);
@@ -43989,17 +44008,25 @@ class NativeAgentSessionsRepository {
     });
   }
   assertReadableNativeAgentSession(loaded, key) {
-    if (key in loaded.opaque) {
-      throw new Error("Stored native agent session metadata is invalid or uses an unsupported version");
-    }
+    if (key in loaded.opaque)
+      throw new Error(UNREADABLE_NATIVE_SESSION);
   }
   async getNativeAgentSession(key) {
     if (!isNonBlankString(key)) {
       throw new Error("Native agent session key must not be blank");
     }
-    const loaded = await this.loadNativeAgentSessions();
-    this.assertReadableNativeAgentSession(loaded, key);
-    return loaded.sessions[key] ?? null;
+    const file = this.files.nativeAgentSessionsFile();
+    const stored = this.context.loadStoreRow(file, key);
+    if (stored === undefined) {
+      if (!this.context.storeHeldAsDocument(file))
+        return null;
+      const loaded = await this.loadNativeAgentSessions();
+      this.assertReadableNativeAgentSession(loaded, key);
+      return loaded.sessions[key] ?? null;
+    }
+    if (!isPersistedNativeAgentSession(stored, key))
+      throw new Error(UNREADABLE_NATIVE_SESSION);
+    return stored;
   }
   async getNativeAgentSessionAfterMutations(key) {
     return this.enqueueNativeAgentSessionMutation(key, () => this.getNativeAgentSession(key));
@@ -44543,6 +44570,7 @@ class NativeAgentSessionsRepository {
     return environment;
   }
 }
+var UNREADABLE_NATIVE_SESSION = "Stored native agent session metadata is invalid or uses an unsupported version";
 var init_storage_native = __esm(() => {
   init_native_agent_session_controls();
   init_models();
@@ -46206,6 +46234,14 @@ class PromptQueueStore {
     }
     return added.length === 0 ? existing : [...existing, ...added].slice(-64);
   }
+  loadPromptQueue(queueKey) {
+    const stored = this.context.loadStoreRow(this.files.promptQueuesFile(), queueKey);
+    if (stored === undefined)
+      return null;
+    const restored = restoreLegacyPromptQueueClaims({ [queueKey]: stored });
+    const queue = restored[queueKey];
+    return isPersistedPromptQueue(queue, queueKey) ? queue : null;
+  }
   async loadPromptQueues() {
     const stored = await this.context.loadJson(this.files.promptQueuesFile(), () => ({}));
     return Object.fromEntries(Object.entries(restoreLegacyPromptQueueClaims(stored)).filter(([storedKey, queue]) => isPersistedPromptQueue(queue, storedKey)));
@@ -47033,6 +47069,18 @@ function parseWorktreeMoveRecord(value) {
     startedAt: value.startedAt
   };
 }
+function normalizeStoredEnvironment(environment) {
+  environment.setupPhase ??= environment.setupScriptsComplete ? "ready" : "pending";
+  environment.setupOverride ??= false;
+  const migrated = migrateEnvironmentAgentSettings(environment);
+  if (isEmptyAgentSettings(migrated))
+    delete environment.agentSettings;
+  else
+    environment.agentSettings = migrated;
+  for (const key of LEGACY_ENVIRONMENT_AGENT_KEYS) {
+    delete environment[key];
+  }
+}
 
 class ProjectsRepository {
   context;
@@ -47173,18 +47221,8 @@ class ProjectsRepository {
   }
   async loadEnvironments() {
     const environments = await this.context.loadJsonCached(this.files.environmentsFile(), () => []);
-    for (const environment of environments) {
-      environment.setupPhase ??= environment.setupScriptsComplete ? "ready" : "pending";
-      environment.setupOverride ??= false;
-      const migrated = migrateEnvironmentAgentSettings(environment);
-      if (isEmptyAgentSettings(migrated))
-        delete environment.agentSettings;
-      else
-        environment.agentSettings = migrated;
-      for (const key of LEGACY_ENVIRONMENT_AGENT_KEYS) {
-        delete environment[key];
-      }
-    }
+    for (const environment of environments)
+      normalizeStoredEnvironment(environment);
     return environments.sort((a, b) => a.order - b.order);
   }
   async saveEnvironments(environments, options2 = {}) {
@@ -47208,7 +47246,12 @@ class ProjectsRepository {
     return (await this.loadEnvironments()).filter((environment) => environment.projectId === projectId);
   }
   async getEnvironment(environmentId) {
-    return (await this.loadEnvironments()).find((environment) => environment.id === environmentId) ?? null;
+    const stored = this.context.loadStoreRow(this.files.environmentsFile(), environmentId);
+    if (!isRecord6(stored) || stored.id !== environmentId)
+      return null;
+    const environment = stored;
+    normalizeStoredEnvironment(environment);
+    return environment;
   }
   projectRemovalFencesFile() {
     return this.context.file("project-removal-fences.json");
@@ -48136,7 +48179,7 @@ class PromptsRepository {
     if (!isNonBlankString(queueKey)) {
       throw new Error("Prompt queue key must not be blank");
     }
-    return (await this.repos.promptQueues.loadPromptQueues())[queueKey] ?? null;
+    return this.repos.promptQueues.loadPromptQueue(queueKey);
   }
   async listPromptQueues(environmentId) {
     if (!isNonBlankString(environmentId)) {
@@ -52535,8 +52578,8 @@ class SessionsRepository {
     return session;
   }
   async getPaneLayout(environmentId) {
-    const layouts = await this.context.loadJsonCached(this.files.paneLayoutsFile(), () => ({}));
-    return layouts[environmentId] ?? null;
+    const stored = this.context.loadStoreRow(this.files.paneLayoutsFile(), environmentId);
+    return stored === undefined ? null : stored;
   }
   async removeMultiReviewTabs(environmentId, workflowId) {
     return this.enqueuePaneLayoutMutation(async () => {
@@ -57469,7 +57512,14 @@ function executionFromState(state) {
   };
 }
 async function stopEnvironmentExecWorkers(environmentId, context, options2 = {}) {
-  await stopGoalCheckWorkers(environmentId, context);
+  try {
+    await stopGoalCheckWorkers(environmentId, context);
+  } catch (error) {
+    const environment = await context.storage.getEnvironment(environmentId);
+    if (options2.requireStopped || environment?.environmentType === "local")
+      throw error;
+    console.warn(`[public-api] Could not stop goal checks: ${boundedMessage(error)}`);
+  }
   if (typeof context.storage.publicOperations?.listActivePublicOperations !== "function")
     return;
   const environment = await context.storage.getEnvironment(environmentId);
@@ -61862,11 +61912,13 @@ function parseGatewayEventData(data) {
     return null;
   return { event: parsed.event, payload: parsed.payload };
 }
-function exceedsUtf8Bytes(value, maxBytes) {
-  if (value.length > maxBytes)
-    return true;
-  if (value.length * 3 <= maxBytes)
-    return false;
+function isHighSurrogate(code) {
+  return code >= 55296 && code <= 56319;
+}
+function isLowSurrogate(code) {
+  return code >= 56320 && code <= 57343;
+}
+function utf8Bytes4(value, limit = Number.POSITIVE_INFINITY) {
   let bytes = 0;
   for (let index = 0;index < value.length; index += 1) {
     const code = value.charCodeAt(index);
@@ -61874,25 +61926,30 @@ function exceedsUtf8Bytes(value, maxBytes) {
       bytes += 1;
     else if (code <= 2047)
       bytes += 2;
-    else if (code >= 55296 && code <= 56319 && index + 1 < value.length) {
-      const next = value.charCodeAt(index + 1);
-      if (next >= 56320 && next <= 57343) {
-        bytes += 4;
-        index += 1;
-      } else {
-        bytes += 3;
-      }
+    else if (isHighSurrogate(code) && isLowSurrogate(value.charCodeAt(index + 1))) {
+      bytes += 4;
+      index += 1;
     } else
       bytes += 3;
-    if (bytes > maxBytes)
-      return true;
+    if (bytes > limit)
+      return bytes;
   }
-  return false;
+  return bytes;
+}
+function exceedsUtf8Bytes(value, maxBytes) {
+  if (value.length > maxBytes)
+    return true;
+  if (value.length * 3 <= maxBytes)
+    return false;
+  return utf8Bytes4(value, maxBytes) > maxBytes;
 }
 
 class SseFrameDecoder {
   maxFrameBytes;
-  pending = "";
+  chunks = [];
+  pendingLength = 0;
+  pendingBytes = 0;
+  tail = "";
   constructor(maxFrameBytes = MAX_GATEWAY_EVENT_FRAME_BYTES) {
     this.maxFrameBytes = maxFrameBytes;
     if (!Number.isSafeInteger(maxFrameBytes) || maxFrameBytes < 1) {
@@ -61900,19 +61957,39 @@ class SseFrameDecoder {
     }
   }
   push(chunk) {
-    this.pending += chunk;
+    if (!/\r?\n\r?\n/.test(this.tail + chunk)) {
+      this.pendingBytes += utf8Bytes4(chunk);
+      if (isHighSurrogate(this.tail.charCodeAt(this.tail.length - 1))) {
+        if (isLowSurrogate(chunk.charCodeAt(0)))
+          this.pendingBytes -= 2;
+      }
+      this.chunks.push(chunk);
+      this.pendingLength += chunk.length;
+      this.tail = (this.tail + chunk).slice(-MAX_SPLIT_BOUNDARY_PREFIX);
+      if (this.pendingBytes > this.maxFrameBytes) {
+        throw new GatewayEventFrameTooLargeError(this.maxFrameBytes);
+      }
+      return [];
+    }
+    const text = this.chunks.join("") + chunk;
+    const boundary = /\r?\n\r?\n/g;
+    boundary.lastIndex = this.pendingLength - this.tail.length;
     const frames = [];
-    let boundary = /\r?\n\r?\n/.exec(this.pending);
-    while (boundary) {
-      const block = this.pending.slice(0, boundary.index);
-      this.pending = this.pending.slice(boundary.index + boundary[0].length);
+    let start = 0;
+    for (let match = boundary.exec(text);match; match = boundary.exec(text)) {
+      const block = text.slice(start, match.index);
+      start = match.index + match[0].length;
       if (exceedsUtf8Bytes(block, this.maxFrameBytes)) {
         throw new GatewayEventFrameTooLargeError(this.maxFrameBytes);
       }
       frames.push(parseSseBlock(block));
-      boundary = /\r?\n\r?\n/.exec(this.pending);
     }
-    if (exceedsUtf8Bytes(this.pending, this.maxFrameBytes)) {
+    const remainder = text.slice(start);
+    this.chunks = remainder ? [remainder] : [];
+    this.pendingLength = remainder.length;
+    this.pendingBytes = utf8Bytes4(remainder);
+    this.tail = remainder.slice(-MAX_SPLIT_BOUNDARY_PREFIX);
+    if (this.pendingBytes > this.maxFrameBytes) {
       throw new GatewayEventFrameTooLargeError(this.maxFrameBytes);
     }
     return frames;
@@ -61980,7 +62057,7 @@ class GatewayEventStreamState {
     return { kind: "event", event: parsed.event, payload: parsed.payload };
   }
 }
-var NATIVE_EVENT_STREAM_CONNECTED_EVENT = "native-event-stream-connected", TERMINAL_EVENT_STREAM_CONNECTED_EVENT = "terminal-event-stream-connected", GATEWAY_CONNECTED_EVENT = "gateway.connected", GATEWAY_RECONCILE_REQUIRED_EVENT = "gateway.reconcile-required", GATEWAY_CURSOR_EVENT = "gateway.cursor", GATEWAY_EVENT_CURSOR_PARAM = "since", GATEWAY_KEEPALIVE_EVENTS_PARAM = "keepaliveEvents", GATEWAY_KEEPALIVE_EVENT = "gateway.keepalive", MAX_GATEWAY_EVENT_FRAME_BYTES, GatewayEventFrameTooLargeError;
+var NATIVE_EVENT_STREAM_CONNECTED_EVENT = "native-event-stream-connected", TERMINAL_EVENT_STREAM_CONNECTED_EVENT = "terminal-event-stream-connected", GATEWAY_CONNECTED_EVENT = "gateway.connected", GATEWAY_RECONCILE_REQUIRED_EVENT = "gateway.reconcile-required", GATEWAY_CURSOR_EVENT = "gateway.cursor", GATEWAY_EVENT_CURSOR_PARAM = "since", GATEWAY_KEEPALIVE_EVENTS_PARAM = "keepaliveEvents", GATEWAY_KEEPALIVE_EVENT = "gateway.keepalive", MAX_GATEWAY_EVENT_FRAME_BYTES, GatewayEventFrameTooLargeError, MAX_SPLIT_BOUNDARY_PREFIX = 3;
 var init_gateway_event_stream = __esm(() => {
   MAX_GATEWAY_EVENT_FRAME_BYTES = 8 * 1024 * 1024;
   GatewayEventFrameTooLargeError = class GatewayEventFrameTooLargeError extends Error {
@@ -101206,7 +101283,7 @@ class WebAnnotationToolLimiter {
     }
   }
 }
-function utf8Bytes4(value) {
+function utf8Bytes5(value) {
   return Buffer.byteLength(value, "utf8");
 }
 function success2(value) {
@@ -101308,11 +101385,11 @@ function boundedEvidence(value) {
     entries,
     truncated
   });
-  while (utf8Bytes4(serialize()) > MAX_EVIDENCE_RESPONSE_BYTES2 && entries.length > 0) {
+  while (utf8Bytes5(serialize()) > MAX_EVIDENCE_RESPONSE_BYTES2 && entries.length > 0) {
     entries.pop();
     truncated = true;
   }
-  if (utf8Bytes4(serialize()) > MAX_EVIDENCE_RESPONSE_BYTES2) {
+  if (utf8Bytes5(serialize()) > MAX_EVIDENCE_RESPONSE_BYTES2) {
     return { ok: true, annotation: value.annotation, capture: null, entries: [], truncated: true };
   }
   return { ok: true, annotation: value.annotation, capture: value.capture, entries, truncated };
@@ -101333,7 +101410,7 @@ function registerWebAnnotationTools(server, host, scope, limiter) {
       return await limiter.run(scope, async () => {
         const { request, brief, latestResult } = await assigned(host, scope);
         const summary = requestSummary(request, latestResult ?? null);
-        const briefTruncated = utf8Bytes4(brief) > MAX_BRIEF_RESPONSE_BYTES;
+        const briefTruncated = utf8Bytes5(brief) > MAX_BRIEF_RESPONSE_BYTES;
         return success2({
           ok: true,
           request: summary,
@@ -135283,10 +135360,10 @@ function terminalOutputPayload(data, revision, generation) {
 function createTerminalOutputBuffer() {
   return { chunks: [], headIndex: 0, headOffset: 0, length: 0 };
 }
-function isHighSurrogate(codeUnit) {
+function isHighSurrogate2(codeUnit) {
   return codeUnit >= 55296 && codeUnit <= 56319;
 }
-function isLowSurrogate(codeUnit) {
+function isLowSurrogate2(codeUnit) {
   return codeUnit >= 56320 && codeUnit <= 57343;
 }
 function trimOrphanedLowSurrogate(buffer) {
@@ -135295,11 +135372,11 @@ function trimOrphanedLowSurrogate(buffer) {
   const head = buffer.chunks[buffer.headIndex];
   if (head === undefined || buffer.length === 0)
     return;
-  if (!isLowSurrogate(head.charCodeAt(buffer.headOffset)))
+  if (!isLowSurrogate2(head.charCodeAt(buffer.headOffset)))
     return;
   const previousChunk = buffer.chunks[buffer.headIndex - 1] ?? "";
   const precedingCodeUnit = buffer.headOffset > 0 ? head.charCodeAt(buffer.headOffset - 1) : previousChunk.charCodeAt(previousChunk.length - 1);
-  if (!isHighSurrogate(precedingCodeUnit))
+  if (!isHighSurrogate2(precedingCodeUnit))
     return;
   buffer.headOffset += 1;
   buffer.length -= 1;
@@ -139823,6 +139900,9 @@ function toNodeProjectSummary(nodeId, raw, index) {
     ...icon ? { icon } : {}
   };
 }
+function isMailCount(value) {
+  return typeof value === "number" && Number.isInteger(value) && value > 0 && value <= MAX_SUMMARY_MAIL_COUNT;
+}
 function toNodeEnvironmentSummary(nodeId, raw, index = 0) {
   if (typeof raw.id !== "string" || !raw.id || typeof raw.projectId !== "string")
     return null;
@@ -139846,7 +139926,10 @@ function toNodeEnvironmentSummary(nodeId, raw, index = 0) {
     deleting: raw.lifecycleOperation === "deleting" || typeof raw.deletionRequestedAt === "string" && raw.deletionRequestedAt.length > 0,
     isProjectHome: raw.projectHome === true,
     ...raw.buildPipeline === true ? { buildPipeline: true } : {},
+    ...raw.buildActive === true ? { buildActive: true } : {},
     ...raw.autoMerge === true ? { autoMerge: true } : {},
+    ...isMailCount(raw.agentMailUnread) ? { agentMailUnread: raw.agentMailUnread } : {},
+    ...raw.agentMailFailed === true ? { agentMailFailed: true } : {},
     ...PR_STATES2.has(raw.prState) ? { prState: raw.prState } : {},
     ...typeof raw.hasMergeConflicts === "boolean" ? { prHasMergeConflicts: raw.hasMergeConflicts } : {},
     ...isPrMergeability(raw.prMergeability) ? { prMergeability: raw.prMergeability } : {},
@@ -139857,7 +139940,7 @@ function toNodeEnvironmentSummary(nodeId, raw, index = 0) {
     ...typeof raw.prViewerCanMerge === "boolean" ? { prViewerCanMerge: raw.prViewerCanMerge } : {}
   };
 }
-var NODE_SUMMARY_CHANGED_EVENT = "node-summary-changed", NODE_SUMMARY_ENVIRONMENT_READ_ARGS, MAX_SUMMARY_PROJECTS = 500, MAX_SUMMARY_ENVIRONMENTS_PER_PROJECT = 500, MAX_TEXT2 = 256, MAX_PATH_NAME = 128, MAX_TIMESTAMP = 64, PR_STATES2;
+var NODE_SUMMARY_CHANGED_EVENT = "node-summary-changed", NODE_SUMMARY_ENVIRONMENT_READ_ARGS, MAX_SUMMARY_PROJECTS = 500, MAX_SUMMARY_ENVIRONMENTS_PER_PROJECT = 500, MAX_TEXT2 = 256, MAX_PATH_NAME = 128, MAX_TIMESTAMP = 64, PR_STATES2, MAX_SUMMARY_MAIL_COUNT = 9999;
 var init_node_summaries = __esm(() => {
   init_federation();
   init_pr_merge_readiness();
@@ -146990,7 +147073,7 @@ class NodeReadModel {
   noteLocalEvent(event, payload) {
     if (event === RESOURCE_CHANGED_EVENT) {
       const resource = payload?.resource;
-      if (resource !== "project" && resource !== "environment" && resource !== "environment-pr-health" && resource !== "build-pipeline" && resource !== "config") {
+      if (resource !== "project" && resource !== "environment" && resource !== "environment-pr-health" && resource !== "build-pipeline" && resource !== "agent-mail-summary" && resource !== "config") {
         return;
       }
     } else if (event !== BACKEND_PROFILE_CHANGED_EVENT) {
@@ -147173,6 +147256,10 @@ class NodeReadModel {
         this.scheduleProjectRefresh(state, projectId);
       else
         this.requestHydrate(nodeId);
+    } else if (change.resource === "agent-mail-summary") {
+      for (const project of state.projects) {
+        this.scheduleProjectRefresh(state, project.ref.projectId);
+      }
     }
   }
   projectOfEnvironment(state, environmentId) {
@@ -151459,6 +151546,41 @@ var init_node_ssh = __esm(() => {
   init_ssh();
 });
 
+// ../../apps/backend/src/core/nodes/node-summary-markers.ts
+function environmentMailMarkers(summary) {
+  const totals = new Map;
+  for (const mailbox of summary.mailboxes) {
+    const total = totals.get(mailbox.environmentId) ?? { unread: 0, failed: false };
+    total.unread += mailbox.userUnseenCount ?? mailbox.unreadCount;
+    total.failed ||= mailbox.failedInjectCount > 0;
+    totals.set(mailbox.environmentId, total);
+  }
+  const markers = new Map;
+  for (const [environmentId, total] of totals) {
+    const unread = Math.min(Math.max(0, Math.trunc(total.unread)), MAX_SUMMARY_MAIL_COUNT);
+    if (unread === 0 && !total.failed)
+      continue;
+    markers.set(environmentId, {
+      ...unread > 0 ? { agentMailUnread: unread } : {},
+      ...total.failed ? { agentMailFailed: true } : {}
+    });
+  }
+  return markers;
+}
+function isWorkingPipelineRecord(record) {
+  const snapshot = record.snapshot;
+  if (!snapshot || typeof snapshot !== "object" || typeof snapshot.phase !== "string")
+    return false;
+  return isWorkingBuildPipeline({
+    phase: snapshot.phase,
+    stallWarning: snapshot.stallWarning === undefined ? undefined : snapshot.stallWarning
+  });
+}
+var init_node_summary_markers = __esm(() => {
+  init_build_pipeline();
+  init_node_summaries();
+});
+
 // ../../apps/backend/src/core/nodes/index.ts
 var init_nodes = __esm(() => {
   init_node_action_requests();
@@ -151473,6 +151595,7 @@ var init_nodes = __esm(() => {
   init_node_seed();
   init_node_service();
   init_node_ssh();
+  init_node_summary_markers();
   init_project_summary_icons();
 });
 
@@ -168453,7 +168576,7 @@ async function sendInteractiveData(data, sendLiteral, sendKeys) {
   }
   await flushLiteral();
 }
-var CLAUDE_TMUX_EVENT = "claude-tmux:event", POLL_INTERVAL_MS = 250, TMUX_OBSERVATION_INTERVAL_MS = 3000, TMUX_BUSY_OBSERVATION_INTERVAL_MS = 500, LIVENESS_CHECK_EVERY_TICKS = 8, HOOK_TIMEOUT_SECS, HOOK_HOLD_CEILING_SECS, HOOK_COMMAND_TIMEOUT_SECS, HOOK_LIMIT_MARGIN_SECS = 60, HOOK_HOLD_PROTOCOL = "hold-v1", COMMAND_IDLE_TIMEOUT_MS = 8000, COMMAND_NO_HOOK_SETTLE_MS = 2000, COMMAND_AFTER_IDLE_SETTLE_MS = 400, PERMISSION_MODE_SWITCH_TIMEOUT_MS = 1500, PERMISSION_MODE_POLL_MS = 100, FAST_MODE_SWITCH_TIMEOUT_MS = 2500, FAST_MODE_POLL_MS = 100, FAST_MODE_TMUX_OPTION = "@orkestrator_fast_mode", BACKUP_SENTINEL_NO_ORIGINAL = "__orkestrator_no_original__", CLAUDE_SETTINGS_LOCAL_GIT_EXCLUDE_PATTERN = ".claude/settings.local.json", RUNTIME_ROOT_PREFIX = "/tmp/orkestrator-v2-claude-tmux", THINKING_MODE_ARGS, THINKING_DISPLAY_FLAG = "--thinking-display", THINKING_DISPLAY_VALUE = "summarized", THINKING_DISPLAY_PROBE_VALUE = "__orkestrator_probe__", THINKING_DISPLAY_PROBE_TIMEOUT_MS = 1e4, HOOK_EVENT_KINDS, POLL_SNAPSHOT_PENDING_MARKER = "__ork_pending__", POLL_SNAPSHOT_TIMEOUT_MARKER = "__ork_timeout__", POLL_SNAPSHOT_SIZE_MARKER = "__ork_size__", TRANSCRIPT_HEAD_MARKER = "__ork_head__", MAX_PREVIOUS_SESSIONS = 50, PREVIOUS_SESSION_STAT_CONCURRENCY = 8, INTERACTIVE_KEY_SEQUENCES;
+var CLAUDE_TMUX_EVENT = "claude-tmux:event", POLL_INTERVAL_MS = 250, TMUX_OBSERVATION_INTERVAL_MS = 3000, TMUX_BUSY_OBSERVATION_INTERVAL_MS = 500, LIVENESS_CHECK_EVERY_TICKS = 8, TMUX_IDLE_AFTER_QUIET_TICKS = 8, TMUX_IDLE_POLL_INTERVAL_MS = 1000, TMUX_IDLE_LIVENESS_CHECK_EVERY_TICKS = 2, TMUX_DISCOVERY_MIN_INTERVAL_MS = 2000, TMUX_DISCOVERY_MAX_INTERVAL_MS = 1e4, HOOK_TIMEOUT_SECS, HOOK_HOLD_CEILING_SECS, HOOK_COMMAND_TIMEOUT_SECS, HOOK_LIMIT_MARGIN_SECS = 60, HOOK_HOLD_PROTOCOL = "hold-v1", COMMAND_IDLE_TIMEOUT_MS = 8000, COMMAND_NO_HOOK_SETTLE_MS = 2000, COMMAND_AFTER_IDLE_SETTLE_MS = 400, PERMISSION_MODE_SWITCH_TIMEOUT_MS = 1500, PERMISSION_MODE_POLL_MS = 100, FAST_MODE_SWITCH_TIMEOUT_MS = 2500, FAST_MODE_POLL_MS = 100, FAST_MODE_TMUX_OPTION = "@orkestrator_fast_mode", BACKUP_SENTINEL_NO_ORIGINAL = "__orkestrator_no_original__", CLAUDE_SETTINGS_LOCAL_GIT_EXCLUDE_PATTERN = ".claude/settings.local.json", RUNTIME_ROOT_PREFIX = "/tmp/orkestrator-v2-claude-tmux", THINKING_MODE_ARGS, THINKING_DISPLAY_FLAG = "--thinking-display", THINKING_DISPLAY_VALUE = "summarized", THINKING_DISPLAY_PROBE_VALUE = "__orkestrator_probe__", THINKING_DISPLAY_PROBE_TIMEOUT_MS = 1e4, HOOK_EVENT_KINDS, POLL_SNAPSHOT_PENDING_MARKER = "__ork_pending__", POLL_SNAPSHOT_TIMEOUT_MARKER = "__ork_timeout__", POLL_SNAPSHOT_SIZE_MARKER = "__ork_size__", TRANSCRIPT_HEAD_MARKER = "__ork_head__", MAX_PREVIOUS_SESSIONS = 50, PREVIOUS_SESSION_STAT_CONCURRENCY = 8, INTERACTIVE_KEY_SEQUENCES;
 var init_tmux_shared = __esm(() => {
   init_agent_tools();
   init_shell();
@@ -172987,14 +173110,19 @@ ${help.stderr}`;
     const emittedBlockingIds = new Set;
     let tail;
     let tick = 0;
+    let quietTicks = 0;
+    let nextDiscoveryAt = 0;
+    let discoveryInterval = TMUX_DISCOVERY_MIN_INTERVAL_MS;
     (async () => {
       try {
         while (!this.stopRequested) {
-          await this.pollTick(POLL_INTERVAL_MS);
+          const idle = !this.busy && quietTicks >= TMUX_IDLE_AFTER_QUIET_TICKS;
+          await this.pollTick(idle ? TMUX_IDLE_POLL_INTERVAL_MS : POLL_INTERVAL_MS);
           if (this.stopRequested)
             break;
           tick += 1;
-          if (!tail) {
+          quietTicks += 1;
+          if (!tail && Date.now() >= nextDiscoveryAt) {
             try {
               const transcriptPath = await this.discoverTranscriptPath();
               if (transcriptPath)
@@ -173002,6 +173130,8 @@ ${help.stderr}`;
             } catch (error) {
               console.warn("[tmux] transcript discovery failed", error);
             }
+            nextDiscoveryAt = Date.now() + discoveryInterval;
+            discoveryInterval = Math.min(discoveryInterval * 2, TMUX_DISCOVERY_MAX_INTERVAL_MS);
           }
           let snapshot;
           try {
@@ -173010,6 +173140,11 @@ ${help.stderr}`;
             console.warn("[tmux] poll snapshot failed", error);
           }
           if (snapshot) {
+            if (snapshot.pending.length > 0 || snapshot.timeouts.length > 0) {
+              quietTicks = 0;
+              nextDiscoveryAt = 0;
+              discoveryInterval = TMUX_DISCOVERY_MIN_INTERVAL_MS;
+            }
             try {
               const events = await drainPending(this.backend, this.sessionHookPaths, snapshot.pending, emittedBlockingIds);
               for (const event of events)
@@ -173036,6 +173171,8 @@ ${help.stderr}`;
             if (tail) {
               try {
                 const lines = await tail.readNew(this.backend, snapshot.transcriptSize);
+                if (lines.length > 0)
+                  quietTicks = 0;
                 for (const line of lines) {
                   const permissionMode = permissionModeFromTranscriptLine(line);
                   if (permissionMode)
@@ -173070,7 +173207,8 @@ ${help.stderr}`;
             });
             this.observationInFlight = observation;
           }
-          if (tick % LIVENESS_CHECK_EVERY_TICKS !== 0)
+          const livenessEvery = idle ? TMUX_IDLE_LIVENESS_CHECK_EVERY_TICKS : LIVENESS_CHECK_EVERY_TICKS;
+          if (tick % livenessEvery !== 0)
             continue;
           if (!await this.tmuxAlive().catch(() => false)) {
             let removed = false;
@@ -200213,13 +200351,14 @@ async function stopEnvironmentOnce(environmentId, context, invalidateDiscovery,
   const environment = await storage.getEnvironment(environmentId);
   if (!environment)
     throw new Error(`Environment not found: ${environmentId}`);
+  if (environment.containerId)
+    await assertDockerContainerOwned(environment.containerId, context);
   await stopEnvironmentReviewValidation(environmentId, context);
   await stopEnvironmentExecWorkers(environmentId, context);
   invalidateDiscovery(environment.id);
   context.previews?.registry.beforeEnvironmentTargetChange(environment.id);
   if (environment.containerId) {
     const containerId = environment.containerId;
-    await assertDockerContainerOwned(containerId, context);
     await context.nativeAgents?.runtimeStopRequested(environment.id);
     const outcome = await runContainerOperation(context, environment.id, "stop", identity, async (operation) => {
       const runtime = currentRuntimeIdentity(environment, context);
@@ -280152,7 +280291,7 @@ async function readRun(context, runId) {
 function changed(run) {
   return { status: "changed", run: graphRunViewSnapshot(run) };
 }
-function utf8Bytes5(text) {
+function utf8Bytes6(text) {
   return new TextEncoder().encode(text).byteLength;
 }
 async function readArtifact(context, runId, artifactId) {
@@ -280169,7 +280308,7 @@ async function readArtifact(context, runId, artifactId) {
     return view;
   let size;
   try {
-    size = utf8Bytes5(canonicalJson2(body.value, 128));
+    size = utf8Bytes6(canonicalJson2(body.value, 128));
   } catch {
     size = Number.POSITIVE_INFINITY;
   }
@@ -291179,6 +291318,8 @@ init_container_resources();
 init_portable_input_status();
 init_agent_settings();
 init_agent_platforms();
+init_agent_mail();
+init_nodes();
 init_storage();
 init_docker_ownership();
 init_storage_projects();
@@ -292101,11 +292242,16 @@ function registerEnvironmentCommands(register, dependencies) {
     await runtime.prMonitor.sync(context);
     const environments = await load();
     const announced = runtime.prMonitor.announcedStates();
-    const buildEnvironmentIds = new Set((await storage.listBuildPipelines(asString4(args.projectId, "projectId"))).map((pipeline) => pipeline.environmentId));
+    const pipelines = await storage.listBuildPipelines(asString4(args.projectId, "projectId"));
+    const buildEnvironmentIds = new Set(pipelines.map((pipeline) => pipeline.environmentId));
+    const activeBuildEnvironmentIds = new Set(pipelines.filter(isWorkingPipelineRecord).map((pipeline) => pipeline.environmentId));
+    const mail = normalizeAgentMessagingSettings((await storage.loadConfig()).global.agentMessaging).enabled ? environmentMailMarkers(await storage.getAgentMailSummary()) : new Map;
     return environments.map((environment) => ({
       ...environment,
       ...runtime.prMonitor.relayedHealth(environment, announced),
-      ...buildEnvironmentIds.has(environment.id) ? { buildPipeline: true } : {}
+      ...buildEnvironmentIds.has(environment.id) ? { buildPipeline: true } : {},
+      ...activeBuildEnvironmentIds.has(environment.id) ? { buildActive: true } : {},
+      ...mail.get(environment.id)
     }));
   });
   register("get_environment_pr_health", async (args, { storage, runtime }) => {
@@ -302710,10 +302856,12 @@ import { createInterface } from "readline";
 var MAX_TRACKED = 256;
 var RESTART_MIN_MS = 1000;
 var RESTART_MAX_MS = 60000;
+var FOLLOWED_EVENTS = ["oom", "start", "die", "stop", "destroy"];
 
 class OomEventWatcher {
   owner;
   spawn;
+  onLifecycle;
   counts = new Map;
   child = null;
   restartTimer = null;
@@ -302722,9 +302870,13 @@ class OomEventWatcher {
   running = false;
   resumeFrom = null;
   lastSeenNano = 0n;
-  constructor(owner, spawn = spawnParentBoundCommand) {
+  lastOomNano = 0n;
+  constructor(owner, spawn = spawnParentBoundCommand, onLifecycle = () => {
+    return;
+  }) {
     this.owner = owner;
     this.spawn = spawn;
+    this.onLifecycle = onLifecycle;
   }
   start() {
     if (this.stopped || this.child)
@@ -302733,13 +302885,12 @@ class OomEventWatcher {
       "events",
       "--filter",
       "type=container",
-      "--filter",
-      "event=oom",
+      ...FOLLOWED_EVENTS.flatMap((event) => ["--filter", `event=${event}`]),
       "--filter",
       `label=orkestrator-owner=${this.owner}`,
       ...this.resumeFrom !== null ? ["--since", String(this.resumeFrom)] : [],
       "--format",
-      "{{.Actor.ID}}\t{{.TimeNano}}"
+      "{{.Actor.ID}}\t{{.TimeNano}}\t{{.Action}}"
     ]);
     this.child = child;
     this.running = true;
@@ -302770,14 +302921,20 @@ class OomEventWatcher {
       child.kill("SIGTERM");
   }
   record(line) {
-    const [id = "", nanos = ""] = line.trim().split("\t");
+    const [id = "", nanos = "", action = "oom"] = line.trim().split("\t");
     if (!/^[0-9a-f]{12,64}$/.test(id) || !/^\d{1,20}$/.test(nanos))
       return;
     this.restartDelay = RESTART_MIN_MS;
     const at = BigInt(nanos);
-    if (at <= this.lastSeenNano)
+    if (at > this.lastSeenNano)
+      this.lastSeenNano = at;
+    if (action !== "oom") {
+      this.onLifecycle();
+      return;
+    }
+    if (at <= this.lastOomNano)
       return;
-    this.lastSeenNano = at;
+    this.lastOomNano = at;
     const lastAt = new Date(Number(at / 1000000n)).toISOString();
     const current = this.counts.get(id);
     this.counts.delete(id);
@@ -302809,14 +302966,16 @@ class OomEventWatcher {
 
 class ContainerOomEvents {
   spawn;
+  onLifecycle;
   watcher = null;
-  constructor(spawn = spawnParentBoundCommand) {
+  constructor(spawn = spawnParentBoundCommand, onLifecycle) {
     this.spawn = spawn;
+    this.onLifecycle = onLifecycle;
   }
   start(owner) {
     if (this.watcher)
       return;
-    this.watcher = new OomEventWatcher(owner, this.spawn);
+    this.watcher = new OomEventWatcher(owner, this.spawn, this.onLifecycle);
     this.watcher.start();
   }
   count(containerId) {
@@ -308269,7 +308428,7 @@ class TerminalRuntime {
       if (available > excess) {
         let trim = excess;
         const boundary = buffer.headOffset + trim;
-        if (isLowSurrogate(head.charCodeAt(boundary)) && isHighSurrogate(head.charCodeAt(boundary - 1))) {
+        if (isLowSurrogate2(head.charCodeAt(boundary)) && isHighSurrogate2(head.charCodeAt(boundary - 1))) {
           trim += 1;
         }
         buffer.headOffset += trim;
@@ -308798,7 +308957,7 @@ class BackendRuntime {
     this.prMonitor = new PrMonitorRuntime(options2.prMonitor);
     this.tmux = new TmuxRuntime(options2.tmux);
     this.accounts = new AgentAccountsRuntime(options2.accounts);
-    this.containerOom = new ContainerOomEvents(options2.containerOom?.spawn);
+    this.containerOom = new ContainerOomEvents(options2.containerOom?.spawn, () => this.containerStates.invalidate());
     this.containerLogs = new ContainerLogService(options2.containerLogs?.spawn, options2.containerLogs?.now);
   }
   attachChangeTracking(service) {
@@ -309020,6 +309179,13 @@ function firewallDisplayName(kind) {
       return "your firewall";
   }
 }
+function sudoForEachSource(sources, rule, then) {
+  if (sources.length === 1) {
+    return [`sudo ${rule(sources[0])}`, ...then ? [`sudo ${then}`] : []].join(" && ");
+  }
+  const loop = `for net in ${sources.join(" ")}; do ${rule("$net")} || exit 1; done`;
+  return `sudo sh -c '${loop}${then ? ` && ${then}` : ""}'`;
+}
 function buildContainerHostRemediation(input) {
   const { firewall, port } = input;
   const blocking = input.outcomes.filter(isBlockingOutcome);
@@ -309051,15 +309217,16 @@ function buildContainerHostRemediation(input) {
       return {
         title: "Allow Docker containers through ufw",
         steps: [intro, scope, after],
-        commands: cidrs.map((cidr) => `sudo ufw allow proto tcp from ${cidr} to any port ${port} comment 'Orkestrator agent tools'`)
+        commands: [
+          sudoForEachSource(cidrs, (source) => `ufw allow proto tcp from ${source} to any port ${port} comment "Orkestrator agent tools"`)
+        ]
       };
     case "firewalld":
       return {
         title: "Allow Docker containers through firewalld",
         steps: [intro, scope, after],
         commands: [
-          ...cidrs.map((cidr) => `sudo firewall-cmd --permanent --add-rich-rule='rule family="ipv4" source address="${cidr}" port port="${port}" protocol="tcp" accept'`),
-          "sudo firewall-cmd --reload"
+          sudoForEachSource(cidrs, (source) => `firewall-cmd --permanent --add-rich-rule="rule family=ipv4 source address=${source} port port=${port} protocol=tcp accept"`, "firewall-cmd --reload")
         ]
       };
     default:
@@ -309071,7 +309238,9 @@ function buildContainerHostRemediation(input) {
           "These iptables rules take effect immediately but are lost on reboot. Add the same rule to your firewall's saved configuration to keep it.",
           after
         ],
-        commands: cidrs.map((cidr) => `sudo iptables -I INPUT -p tcp -s ${cidr} --dport ${port} -j ACCEPT`)
+        commands: [
+          sudoForEachSource(cidrs, (source) => `iptables -I INPUT -p tcp -s ${source} --dport ${port} -j ACCEPT`)
+        ]
       };
   }
 }
@@ -309086,12 +309255,14 @@ function buildRootlessHostRemediation(port) {
       `Then press \u201CCheck again\u201D. New containers reach Orkestrator through RootlessKit's host address (${ROOTLESSKIT_HOST_LOOPBACK_ADDRESS}); rebuild existing environments so their network policy includes it.`
     ],
     commands: [
-      "mkdir -p ~/.config/systemd/user/docker.service.d",
-      `printf '[Service]
+      [
+        "mkdir -p ~/.config/systemd/user/docker.service.d",
+        `printf '[Service]
 Environment="DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK=false"
 ' > ${ROOTLESS_HOST_LOOPBACK_DROP_IN}`,
-      "systemctl --user daemon-reload",
-      "systemctl --user restart docker"
+        "systemctl --user daemon-reload",
+        "systemctl --user restart docker"
+      ].join(" && ")
     ]
   };
 }
@@ -327197,6 +327368,8 @@ class AgentMailService {
     return task;
   }
   async refreshPresenceOnce() {
+    if (!(await this.storage.loadConfig()).global.agentMessaging?.enabled)
+      return;
     const mailboxes = [];
     let offset = 0;
     while (true) {
@@ -338477,7 +338650,7 @@ function parseGatewayCompressionMode(value, source = "gateway compression mode")
   throw new Error(`Invalid ${source}: ${value}. Expected one of off, body, on.`);
 }
 function resolveGatewayCompressionMode(explicit, env = process.env) {
-  return explicit ?? parseGatewayCompressionMode(env.ORKESTRATOR_GATEWAY_COMPRESSION, "ORKESTRATOR_GATEWAY_COMPRESSION") ?? "body";
+  return explicit ?? parseGatewayCompressionMode(env.ORKESTRATOR_GATEWAY_COMPRESSION, "ORKESTRATOR_GATEWAY_COMPRESSION") ?? "on";
 }
 function compressionModeForListener(compression, listenerKind) {
   return listenerKind === "control" ? "off" : compression;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "orkestrator",
-  "version": "2.35.0-beta",
+  "version": "2.35.1-beta",
   "description": "Run the Orkestrator backend service without the desktop application",
   "homepage": "https://orkestrator.dev",
   "repository": {
@@ -39,8 +39,8 @@
     "sharp": "0.35.5"
   },
   "devDependencies": {
-    "@orkestrator/protocol": "2.35.0-beta",
-    "@orkestrator/toolchain": "2.35.0-beta"
+    "@orkestrator/protocol": "2.35.1-beta",
+    "@orkestrator/toolchain": "2.35.1-beta"
   },
   "engines": {
     "bun": ">=1.4.4"

package/resources/acp-bridge/dist/index.js

@@ -10114,7 +10114,7 @@ var MAX_SESSIONS = parseBoundedInteger(process.env.ACP_MAX_SESSIONS, 256, 1, 256
 var MAX_APPROVALS_PER_SESSION = 64;
 var MAX_STRUCTURED_RESULTS = 4;
 var MAX_STRUCTURED_RESULT_BYTES = 1024 * 1024;
-var TRANSCRIPT_CHECK_INTERVAL_BYTES = 64 * 1024;
+var TRANSCRIPT_CHECK_INTERVAL_BYTES = 1024 * 1024;
 var MAX_PROMPT_JOURNAL = 512;
 var MAX_PERSISTED_GROK_INTERJECTION_BYTES = 512 * 1024;
 var MAX_STATE_FILE_BYTES = parseBoundedInteger(process.env.ACP_MAX_STATE_FILE_BYTES, 16 * 1024 * 1024, 512 * 1024, 16 * 1024 * 1024);
@@ -11279,6 +11279,24 @@ function persistedSnapshot() {
   };
   return boundPersistedSnapshot(snapshot);
 }
+var STREAMING_PERSIST_INTERVAL_MS = 1000;
+var streamingPersistTimer = null;
+function scheduleStreamingPersist() {
+  if (!stateFile || streamingPersistTimer)
+    return;
+  streamingPersistTimer = setTimeout(() => {
+    streamingPersistTimer = null;
+    schedulePersist();
+  }, STREAMING_PERSIST_INTERVAL_MS);
+  streamingPersistTimer.unref();
+}
+function flushStreamingPersist() {
+  if (streamingPersistTimer) {
+    clearTimeout(streamingPersistTimer);
+    streamingPersistTimer = null;
+  }
+  return persistState();
+}
 function schedulePersist() {
   if (!stateFile || persistenceScheduled)
     return;
@@ -12084,7 +12102,7 @@ function commitToolPartMutation(state, part, source) {
     failTranscriptLimit(state);
     return false;
   }
-  schedulePersist();
+  scheduleStreamingPersist();
   return true;
 }
 function activeSubagentLaunch(state, toolUseId) {
@@ -19481,7 +19499,7 @@ function applySessionUpdate(state, params) {
     failTranscriptLimit(state);
     return;
   }
-  schedulePersist();
+  scheduleStreamingPersist();
 }
 function composerPatchFromSpawn(options) {
   const patch = {};
@@ -22427,9 +22445,7 @@ function shutdown() {
       ...[...sessions.values()].map((state) => state.child?.close()),
       ...[...cursorToolReplayProcesses].map((child) => child.close())
     ]);
-    await persistenceTail.catch(() => {
-      return;
-    });
+    await flushStreamingPersist();
     await new Promise((resolvePromise) => server.close(() => resolvePromise()));
   })();
   return shutdownPromise;
@@ -22624,6 +22640,7 @@ export {
   findHistoryMessage,
   finishSubagentTool,
   flattenedRetriableProviderTail,
+  flushStreamingPersist,
   grokBridgeGeneration,
   grokInterjectionDigest,
   grokQuestionTimeoutMs,
@@ -22745,6 +22762,7 @@ export {
   saturatedText,
   scheduleCursorToolMetadataReconcile,
   schedulePersist,
+  scheduleStreamingPersist,
   sendJson,
   server,
   sessionCreations,