thinkpool-pair 0.7.364 → 0.7.366

package/update-gate.mjs

@@ -1,53 +1 @@
-/* update-gate.mjs — pure predicates for the between-turns update apply (Slice 3
-   nudge protocol, spec docs/specs/2026-06-19-bridge-unified-launcher.md Part 2).
-
-   Extracted import-safe so the "safe to restart now" rule is unit-tested and can't
-   drift. Contract #1: an update only applies at idle / between turns — never mid-turn.
-   bridge.mjs runs the bridge on import (can't be imported by a test), so the gate
-   lives here. */
-
-// Supervisor side: is it safe to restart the account bridge to apply a pending
-// update? True iff a pending update exists, we're not already stopping, EVERY served
-// child is idle (a child reports idle=false while a turn is in flight — that's what
-// keeps Contract #1), AND either a user requested apply (clicked the chip) OR — the
-// unattended fallback — no child has a web peer present (nobody is there to click).
-export function isSafeToRestart({ pendingUpdate, stopping = false, childIdle, childBetween, childPeer, requested = false }) {
-  if (!pendingUpdate || stopping) return false
-  if (requested) {
-    // Explicit "apply" → restart at the next BETWEEN-TURNS gap (no turn in flight),
-    // NOT the full quiet window — in an active room that 90s of silence never comes,
-    // so the click would otherwise do nothing. Fall back to childIdle when a child
-    // doesn't report `between` (older child during the mixed-version update itself).
-    const gate = childBetween instanceof Map ? childBetween : childIdle
-    for (const ready of gate.values()) if (!ready) return false       // any busy child → wait (Contract #1)
-    return true
-  }
-  for (const idle of childIdle.values()) if (!idle) return false      // unattended: full idle window
-  for (const present of childPeer.values()) if (present) return false // someone's watching, no click → wait
-  return true                                                         // unattended: idle + nobody watching → auto-apply
-}
-
-// Child/standalone side: is any structured session mid-turn? Used both to gate a
-// local apply and to make the idle heartbeat honest (idle=false while a turn runs).
-// Accepts a sessions Map whose entries expose turnActive directly or via .session.
-export function turnInFlight(sessions) {
-  for (const s of (sessions?.values?.() || [])) {
-    const ta = s && (typeof s.session?.turnActive === 'boolean' ? s.session.turnActive : s.turnActive)
-    // A permission / question resolver is process-local. Restarting while one is
-    // pending destroys the only promise the eventual durable decision can wake,
-    // even when the runtime has temporarily reported turnActive=false.
-    if (ta || Number(s?.pending?.size || 0) > 0) return true
-  }
-  return false
-}
-
-// Restarting a room process helps only when the HTTP control plane is reachable and
-// Realtime alone is wedged. During a total network outage it destroys healthy local
-// agent processes and cannot improve connectivity; a live turn or permission decision
-// is likewise a hard hold even when HTTP is healthy.
-export function realtimeRecoveryDecision({ brokenSince, now, httpHealthy, activeTurn, graceMs = 60_000 }) {
-  if (!brokenSince || now - brokenSince < graceMs) return 'wait'
-  if (!httpHealthy) return 'hold-offline'
-  if (activeTurn) return 'hold-active'
-  return 'restart'
-}
+export function isSafeToRestart({pendingUpdate:e,stopping:t=!1,childIdle:n,childBetween:r,childPeer:o,requested:i=!1}){if(!e||t)return!1;if(i){const e=r instanceof Map?r:n;for(const t of e.values())if(!t)return!1;return!0}for(const e of n.values())if(!e)return!1;for(const e of o.values())if(e)return!1;return!0}export function turnInFlight(e){for(const t of e?.values?.()||[])if(t&&("boolean"==typeof t.session?.turnActive?t.session.turnActive:t.turnActive)||Number(t?.pending?.size||0)>0)return!0;return!1}export function realtimeRecoveryDecision({brokenSince:e,now:t,httpHealthy:n,activeTurn:r,graceMs:o=6e4}){return!e||t-e<o?"wait":n?r?"hold-active":"restart":"hold-offline"}