switchroom 0.21.1 → 0.21.4

package/bin/handoff-briefing.sh

@@ -136,6 +136,7 @@ if [ -n "$TELEGRAM_STATE" ] && [ -d "$TELEGRAM_STATE" ]; then
     # under `2>/dev/null`, so the breadcrumb is a debug/manual-run diagnostic.
     TELEGRAM_ROWS=$(python3 - "$HISTORY_DB" "$MAX_MESSAGES" "$TARGET_CHAT_ID" "$TARGET_THREAD_ID" <<'PYEOF'
 import sys, sqlite3, datetime
+from urllib.parse import quote
 
 db_path = sys.argv[1]
 limit = int(sys.argv[2])
@@ -143,7 +144,28 @@ target_chat = sys.argv[3] if len(sys.argv) > 3 else ""
 target_thread = sys.argv[4] if len(sys.argv) > 4 else ""
 
 try:
-    conn = sqlite3.connect(db_path)
+    # READ-ONLY, ALWAYS. `sqlite3.connect(path)` defaults to READ-WRITE, which
+    # makes this briefing assembler a writer on the gateway's live WAL DB. A
+    # read-write connection that closes as the LAST connection runs SQLite's
+    # checkpoint-and-delete path and UNLINKS `history.db-wal` / `-shm` — and
+    # this script runs at agent boot, precisely when the gateway is down or
+    # starting and this process IS the last connection. Any handle still
+    # mapped to those inodes then writes into deleted files: every INSERT
+    # reports success and every row is gone at the next restart (the
+    # `/proc/<pid>/fd/N -> history.db-wal (deleted)` signature that #4595
+    # sweeps for after the fact).
+    #
+    # `mode=ro` removes that primitive entirely: a read-only connection cannot
+    # checkpoint and cannot unlink a sidecar. It still reads a WAL database
+    # correctly in every boot state we care about — sidecars present, `-shm`
+    # absent, and `-shm` absent with an unwritable directory (SQLite falls back
+    # to a heap wal-index rather than failing). Every statement below is a
+    # SELECT or a PRAGMA table_info, so nothing here needs write access.
+    #
+    # The path is percent-encoded: a `?` or `#` in the state dir would
+    # otherwise be parsed as the URI's query/fragment delimiter and silently
+    # truncate the filename.
+    conn = sqlite3.connect("file:" + quote(db_path) + "?mode=ro", uri=True)
     conn.row_factory = sqlite3.Row
     cur = conn.cursor()
 

package/dist/auth-broker/index.js

@@ -20351,6 +20351,8 @@ var EXTERNAL_SPEND_TOP_N = 3;
 var DEFAULT_LITELLM_BASE = "http://127.0.0.1:4010";
 var EXTERNAL_SPEND_CACHE_TTL_MS = 90000;
 var EXTERNAL_SPEND_FETCH_TIMEOUT_MS = 5000;
+var EXTERNAL_SPEND_PAGE_SIZE = 1000;
+var EXTERNAL_SPEND_MAX_PAGES = 50;
 var LITELLM_MASTER_KEY_STATE_BASENAME = "litellm-master-key";
 var BARE_EXTERNAL_NEEDLES = [
   "gpt-oss",
@@ -20447,54 +20449,72 @@ function summarizeExternalSpend(days, now = new Date) {
   const top = Object.entries(byModel).filter(([, usd]) => usd > 0).sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, EXTERNAL_SPEND_TOP_N).map(([name, usd]) => ({ label: shortModelLabel(name), usd }));
   return { day24hUsd, day7dUsd, top };
 }
-function normalizeSpendLogRows(body) {
-  if (Array.isArray(body))
-    return body;
-  if (body && typeof body === "object") {
-    const data = body.data;
-    if (Array.isArray(data))
-      return data;
+function normalizeDailyActivityRows(body) {
+  const results = body && typeof body === "object" && Array.isArray(body.results) ? body.results : [];
+  const rows = [];
+  for (const day of results) {
+    if (!day || typeof day !== "object")
+      continue;
+    const models = {};
+    const breakdown = day.breakdown?.models ?? {};
+    for (const [name, entry] of Object.entries(breakdown)) {
+      const raw = entry?.metrics?.spend;
+      const n = typeof raw === "number" ? raw : Number(raw);
+      if (!Number.isFinite(n))
+        continue;
+      models[name] = (models[name] ?? 0) + n;
+    }
+    rows.push({ startTime: day.date, models });
   }
-  return [];
+  return rows;
 }
 async function fetchAndSummarizeExternalSpend(opts) {
   const now = opts.now ?? new Date;
   const base = (opts.baseUrl ?? DEFAULT_LITELLM_BASE).replace(/\/+$/, "");
   const today = utcDateString(now);
   const start = addUtcDays(today, -6);
-  const end = addUtcDays(today, 1);
-  const url = `${base}/spend/logs?start_date=${encodeURIComponent(start)}` + `&end_date=${encodeURIComponent(end)}`;
   const fetchImpl = opts.fetchImpl ?? fetch;
   const timeoutMs = opts.timeoutMs ?? EXTERNAL_SPEND_FETCH_TIMEOUT_MS;
-  const ac = new AbortController;
-  const timer = setTimeout(() => ac.abort(), timeoutMs);
-  try {
-    const res = await fetchImpl(url, {
-      method: "GET",
-      headers: {
-        Authorization: `Bearer ${opts.adminKey}`,
-        Accept: "application/json"
-      },
-      signal: ac.signal
-    });
-    if (!res.ok) {
-      console.warn(`external-spend: LiteLLM /spend/logs returned HTTP ${res.status} — ` + `External /usage row will be blank (check master key / proxy)`);
-      return null;
-    }
-    let body;
+  const rows = [];
+  for (let page = 1;page <= EXTERNAL_SPEND_MAX_PAGES; page++) {
+    const url = `${base}/user/daily/activity?start_date=${encodeURIComponent(start)}` + `&end_date=${encodeURIComponent(today)}` + `&page=${page}&page_size=${EXTERNAL_SPEND_PAGE_SIZE}&timezone=0`;
+    const ac = new AbortController;
+    const timer = setTimeout(() => ac.abort(), timeoutMs);
     try {
-      body = await res.json();
+      const res = await fetchImpl(url, {
+        method: "GET",
+        headers: {
+          Authorization: `Bearer ${opts.adminKey}`,
+          Accept: "application/json"
+        },
+        signal: ac.signal
+      });
+      if (!res.ok) {
+        console.warn(`external-spend: LiteLLM /user/daily/activity returned HTTP ${res.status} — ` + `External /usage row will be blank (check master key / proxy)`);
+        return null;
+      }
+      let body;
+      try {
+        body = await res.json();
+      } catch (err) {
+        console.warn(`external-spend: failed to parse /user/daily/activity JSON: ${err?.message ?? err}`);
+        return null;
+      }
+      rows.push(...normalizeDailyActivityRows(body));
+      const meta = body && typeof body === "object" ? body.metadata : undefined;
+      if (!meta?.has_more)
+        break;
+      if (page === EXTERNAL_SPEND_MAX_PAGES) {
+        console.warn(`external-spend: LiteLLM /user/daily/activity still reports has_more at ` + `page ${EXTERNAL_SPEND_MAX_PAGES} (pagination cap) — External /usage ` + `total is under-reported (collected ${rows.length} day rows)`);
+      }
     } catch (err) {
-      console.warn(`external-spend: failed to parse /spend/logs JSON: ${err?.message ?? err}`);
+      console.warn(`external-spend: LiteLLM /user/daily/activity fetch failed: ${err?.message ?? err}`);
       return null;
+    } finally {
+      clearTimeout(timer);
     }
-    return summarizeExternalSpend(normalizeSpendLogRows(body), now);
-  } catch (err) {
-    console.warn(`external-spend: LiteLLM /spend/logs fetch failed: ${err?.message ?? err}`);
-    return null;
-  } finally {
-    clearTimeout(timer);
   }
+  return summarizeExternalSpend(rows, now);
 }
 
 // src/auth/broker/mirror-write.ts