shraga 0.1.41 → 0.1.43

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shraga",
-  "version": "0.1.41",
+  "version": "0.1.43",
   "description": "The teammate you delegate coding to — a self-hostable, multi-user AI coding agent web UI (Claude Code, with a pluggable engine seam).",
   "type": "module",
   "main": "./src/index.ts",
@@ -70,7 +70,7 @@
     "express": "^4.21.1",
     "firebase": "^11.0.0",
     "lucide-react": "^0.468.0",
-    "mcp-slack-use": "github:Livshitz/mcp-slack-use#1dde291",
+    "mcp-slack-use": "github:Livshitz/mcp-slack-use#38ff8b7",
     "react": "^19.0.0",
     "react-dom": "^19.0.0",
     "react-markdown": "^9.0.0",

package/src/server/engine/claude-code.ts

@@ -19,6 +19,7 @@ const IMMUTABLE_SYSTEM_PROMPT = readFileSync(path.resolve(import.meta.dirname, '
 const DEFAULT_USER_PROMPT = `You are a helpful assistant with access to MCP tools.`;
 const DEFAULT_ALLOWED_TOOLS = ['Read', 'Edit', 'Bash', 'WebSearch', 'Glob', 'LS', 'ToolSearch'];
 const BG_TASK_MAX_WAIT_MS = 15 * 60_000;
+const BG_HEARTBEAT_MS = 60_000;
 const HISTORY_LIMIT = 50;
 
 const NO_INTERACTIVE_ANSWER = 'No interactive channel is available to answer right now. Use your best judgement to proceed, and surface these options to the user in your reply so they can redirect if needed.';
@@ -313,7 +314,8 @@ export class ClaudeCodeEngine implements AgentEngine {
     let waitingForBg = false;
     let bgTimer: Promise<'__bgtimeout'> | null = null;
     let bgTimerHandle: ReturnType<typeof setTimeout> | null = null;
-    const clearBgTimer = () => { if (bgTimerHandle) { clearTimeout(bgTimerHandle); bgTimerHandle = null; } bgTimer = null; };
+    let bgHeartbeat: ReturnType<typeof setInterval> | null = null;
+    const clearBgTimer = () => { if (bgTimerHandle) { clearTimeout(bgTimerHandle); bgTimerHandle = null; } bgTimer = null; if (bgHeartbeat) { clearInterval(bgHeartbeat); bgHeartbeat = null; } };
 
     try {
       while (true) {
@@ -395,7 +397,14 @@ export class ClaudeCodeEngine implements AgentEngine {
           console.log(`[claude] Result: subtype=${m.subtype}→${sub} session=${lastSessionId} turns=${sdkTurns}/${maxTurns} cost=$${m.total_cost_usd?.toFixed(4) ?? '?'} msgs=${messageCount} deltas=${textDeltaCount} (${elapsed()})`);
           logCacheUsage(m.usage, activeModel);
           if (outstandingTasks.size > 0) {
-            if (!waitingForBg) { waitingForBg = true; clearBgTimer(); console.log(`[claude] Holding stream for ${outstandingTasks.size} bg tasks (${elapsed()})`); }
+            if (!waitingForBg) {
+              waitingForBg = true; clearBgTimer();
+              console.log(`[claude] Holding stream for ${outstandingTasks.size} bg tasks (${elapsed()})`);
+              // The hold is invisible to the user (their next message queues behind it), so beat
+              // every minute — otherwise a stuck task reads as a dead agent with nothing in the log.
+              bgHeartbeat = setInterval(() => console.log(`[claude] Still holding for ${outstandingTasks.size} bg task(s): ${[...outstandingTasks].join(',')} (${elapsed()})`), BG_HEARTBEAT_MS);
+              bgHeartbeat.unref?.();
+            }
             continue;
           }
           // The SDK reports `subtype: 'success'` even when the API call failed (e.g. an org spend

package/src/server/self-upgrade/supervisor.sh

@@ -27,6 +27,24 @@ BUN="${BUN:-bun}"
 BOOT_TIMEOUT="${BOOT_TIMEOUT:-180}"
 SOAK="${SOAK:-60}"
 
+# ── Escape the service cgroup ─────────────────────────────────────────────────
+# Under systemd the default KillMode=control-group kills EVERY process in the unit's cgroup on
+# restart — and a detached child of the server is in that cgroup. So the supervisor would be killed
+# by the very restart it triggers, taking the verify AND the rollback with it: exactly the guarantees
+# it exists to provide. Re-exec into a transient scope (same uid, so `bun install` doesn't leave
+# root-owned files) and we live outside the unit. Best-effort: where systemd-run or passwordless sudo
+# is absent, carry on in-cgroup — an unsupervised upgrade still beats no upgrade.
+if [ -z "${UPGRADE_DETACHED:-}" ]; then
+  export UPGRADE_DETACHED=1
+  if command -v systemd-run >/dev/null 2>&1 && sudo -n true >/dev/null 2>&1; then
+    escape=(sudo -n systemd-run --scope --quiet --collect --uid="$(id -u)" --gid="$(id -g)")
+    for v in APP_ROOT PKG TARGET FROM RESTART_CMD HEALTH_URL REPORT BUN BOOT_TIMEOUT SOAK PATH UPGRADE_DETACHED; do
+      escape+=("--setenv=$v=${!v-}")
+    done
+    exec "${escape[@]}" bash "$0"
+  fi
+fi
+
 cd "$APP_ROOT" || exit 1
 BACKUP="$(mktemp -d)"
 LOG="${REPORT%.json}.log"