tinybeeai 0.0.0-stage → 0.16.1

package/dist/server.js

@@ -0,0 +1,262 @@
+import { existsSync } from 'node:fs';
+import Fastify from 'fastify';
+import fastifyStatic from '@fastify/static';
+import { config, liveEnv, log } from './config.js';
+import { isLoopbackHost, resolveListenHost } from './loopback.js';
+import { registerApi } from './api.js';
+import { handleGithubHook, handleJiraHook, handleLinearHook } from './webhooks.js';
+import { register as registerSetup } from './routes/setup.js';
+import { register as registerRoles } from './routes/roles.js';
+import { register as registerRuns } from './routes/runs.js';
+import { register as registerReports } from './routes/reports.js';
+import { register as registerCall } from './routes/call.js';
+import { register as registerConnections } from './routes/connections.js';
+import { register as registerConnectionPresets } from './routes/connection-presets.js';
+import { register as registerReview } from './routes/review.js';
+import { register as registerConnect, sameOriginWrite } from './routes/connect.js';
+import { register as registerDocs } from './routes/docs.js';
+import { register as registerMarkdown } from './routes/markdown.js';
+import { register as registerRunner } from './routes/runner.js';
+import { register as registerLinks } from './routes/links.js';
+import { register as registerPhone } from './routes/phone.js';
+import { authenticate, AUTH_REQUIRED_CODE, bearerOf, pauseOnlyBody, PHONE_BLOCKED_CODE, PHONE_BLOCKED_MESSAGE, protectedPath, PUBLIC_JOIN_PATH, PUBLIC_PAIR_PATH, remoteAccess, remoteRoleOf, } from './phone/auth.js';
+import { register as registerRepos } from './routes/repos.js';
+import { register as registerTicketStatus } from './routes/ticket-status.js';
+import { register as registerHealth } from './routes/health.js';
+import { register as registerTraceability } from './routes/traceability.js';
+import { register as registerDotSuggest } from './routes/dot-suggest.js';
+import { register as registerActivity } from './routes/activity.js';
+import { register as registerUpdates } from './routes/updates.js';
+import { register as registerOnboarding } from './routes/onboarding.js';
+import { register as registerDisk } from './routes/disk.js';
+import { register as registerCases } from './routes/cases.js';
+import { register as registerImpact } from './routes/impact.js';
+import { register as registerTestRuns } from './routes/test-runs.js';
+import { register as registerCards } from './routes/cards.js';
+import { register as registerTrue } from './routes/true.js';
+import { register as registerLead } from './routes/lead.js';
+import { register as registerRoom } from './routes/room.js';
+import { register as registerReleaseNotes } from './routes/release-notes.js';
+import { register as registerEvidencePack } from './routes/evidence-pack.js';
+import { isDiskFullError, noteDiskFull } from './disk.js';
+import { SANDBOX_WEBHOOK_MESSAGE, sandboxOn } from './sandbox.js';
+import { hiveMode, mountHive } from './hive/embed.js';
+import { beePath, beeRoutes } from './bee/routes.js';
+import { wellKnownRoutes } from './tinybee/well-known.js';
+import { workflowRoutes } from './tinybee/workflows/routes.js';
+import { modelRoutes } from './tinybee/models-routes.js';
+import { HIVE_PREFIX } from './hive/routes.js';
+export { isLoopbackHost, resolveListenHost };
+/** True for a decoded path under /api/hive/ (the TinyBee control plane, which authenticates its own callers). */
+export function hivePath(path) {
+    return path === HIVE_PREFIX || path.startsWith(`${HIVE_PREFIX}/`);
+}
+/** True for a Host header that names a loopback address or a *.localhost name, with or without a port. */
+export function isLoopbackHostHeader(host) {
+    const h = (host ?? '').trim().toLowerCase();
+    if (!h)
+        return false;
+    const name = h.startsWith('[') ? h.slice(0, h.indexOf(']') + 1) : h.replace(/:\d+$/, '');
+    return isLoopbackHost(name) || name.endsWith('.localhost');
+}
+/**
+ * The environment the call routes read: the live settings (environment first, then values saved
+ * in Setup), so an OpenAI key saved in the app reaches the voice routes. OPENAI_API_KEY is hidden
+ * while LOCALDOST_TOKEN is unset, so POST /api/call/session never mints a realtime token for an
+ * unauthenticated caller.
+ */
+export const callEnv = new Proxy(liveEnv, {
+    get(target, key) {
+        if (key === 'OPENAI_API_KEY' && !config.token)
+            return undefined;
+        return Reflect.get(target, key);
+    },
+});
+/** The built file of the composed-view worker (client/src/features/chat/blocks/view-worker.ts). */
+export const VIEW_WORKER_FILE = /\/assets\/view-worker-[\w-]+\.js$/;
+export const VIEW_WORKER_CSP = "default-src 'none'; connect-src 'none'";
+export async function buildServer(opts = {}) {
+    const app = Fastify({
+        logger: opts.logger === false ? false : { level: config.logLevel },
+        bodyLimit: 2 * 1024 * 1024,
+    });
+    // Every listen() goes through resolveListenHost, whatever host the caller passes.
+    const listen = app.listen.bind(app);
+    app.listen = (async (o = {}) => {
+        const host = resolveListenHost(o.host ?? config.host, config.token);
+        if (!config.token)
+            log.warn(`LOCALDOST_TOKEN is unset: listening on ${host} only, and voice calls use browser speech.`);
+        return listen({ ...o, host });
+    });
+    // A write that finds the disk full answers 507 in plain words. The server stays up and the
+    // banner shows the state (KAT-241). Any other error keeps Fastify's own answer.
+    app.setErrorHandler((err, _req, reply) => {
+        if (isDiskFullError(err)) {
+            noteDiskFull(err);
+            return reply.code(507).send({
+                error: 'The disk is full, so localdost could not save this. Free some space, then try again.',
+                code: 'disk_full',
+            });
+        }
+        const status = err.statusCode;
+        return reply.code(typeof status === 'number' && status >= 400 ? status : 500).send(err);
+    });
+    // Every /api and /artifacts request needs a caller (src/phone/auth.ts): the admin token, a paired
+    // device token, the trusted Tailscale owner, or, with no LOCALDOST_TOKEN, a loopback Host. Bearer
+    // header only: a ?token= query would leak into history and request logs. Without LOCALDOST_TOKEN a
+    // DNS-rebinding page or a tunnel reaches the loopback socket with a foreign Host header, so it
+    // gets 403 unless it carries a device token. Webhooks stay reachable; their signatures guard them.
+    // The router percent-decodes the path (/%61pi/runs reaches /api/runs), so every decision uses the
+    // decoded path and the matched route pattern, never the raw URL alone.
+    const hiveOn = hiveMode() !== 'off';
+    app.addHook('onRequest', async (req, reply) => {
+        const raw = req.url.split('?')[0];
+        let path;
+        try {
+            path = decodeURIComponent(raw);
+        }
+        catch {
+            return reply.code(400).send({ error: 'bad path' });
+        }
+        const route = req.routeOptions?.url ?? '';
+        const squashed = path.replace(/\/{2,}/g, '/');
+        if (!protectedPath(path) && !protectedPath(squashed) && !protectedPath(route))
+            return;
+        // Hive (TinyBee control plane) has its own callers and tokens; the localdost admin and device tokens mean nothing to it.
+        // With TinyBee off, /api/hive is an unknown API path like any other and needs a caller as before.
+        if (hiveOn && hivePath(path) && hivePath(squashed) && (route === '' || hivePath(route)))
+            return;
+        // The Bee's own surface: /api/bee is loopback-only with its page token, /api/v1/health takes a Hive session JWT.
+        if (hiveOn && beePath(path) && beePath(squashed) && (route === '' || beePath(route)))
+            return;
+        if (route === PUBLIC_PAIR_PATH && req.method === 'POST')
+            return;
+        if (route === PUBLIC_JOIN_PATH && req.method === 'GET')
+            return;
+        const caller = authenticate(req);
+        if (caller) {
+            req.qdCaller = caller;
+            if (caller.kind === 'device' || caller.kind === 'owner') {
+                // A device is held to its role (KAT-364). A member's dot update is checked again once the body is read (below).
+                if (remoteAccess(req.method, route, remoteRoleOf(caller)) === 'deny')
+                    return reply.code(403).send({ error: PHONE_BLOCKED_MESSAGE, code: PHONE_BLOCKED_CODE });
+                // Owner identity rides on every request from the owner's devices, so a cross-site page could
+                // borrow it: owner writes must come from the localdost page itself.
+                if (caller.kind === 'owner' && !sameOriginWrite(req))
+                    return reply.code(403).send({ error: 'cross-site write refused' });
+            }
+            return;
+        }
+        if (bearerOf(req))
+            return reply.code(401).send({ error: 'unauthorized', code: AUTH_REQUIRED_CODE });
+        if (!config.token)
+            return reply.code(403).send({ error: 'LOCALDOST_TOKEN is unset, so the API answers on localhost and paired devices only' });
+        return reply.code(401).send({ error: 'unauthorized', code: AUTH_REQUIRED_CODE });
+    });
+    // A member may call the dot update route to pause or resume a dot and for nothing else. The body is not read when the
+    // hook above runs, so this one checks it before the route sees it.
+    app.addHook('preValidation', async (req, reply) => {
+        const c = req.qdCaller;
+        if (c?.kind !== 'device' && c?.kind !== 'owner')
+            return;
+        if (remoteAccess(req.method, req.routeOptions?.url ?? '', remoteRoleOf(c)) === 'pause_only' && !pauseOnlyBody(req.body))
+            return reply.code(403).send({ error: PHONE_BLOCKED_MESSAGE, code: PHONE_BLOCKED_CODE });
+    });
+    // Webhooks get the raw body: every source signs the exact bytes, so nothing may parse first.
+    await app.register(async (hooks) => {
+        hooks.removeAllContentTypeParsers();
+        hooks.addContentTypeParser('*', { parseAs: 'buffer', bodyLimit: 25 * 1024 * 1024 }, (_req, body, done) => done(null, body));
+        const wire = (path, fn) => hooks.post(path, async (req, reply) => {
+            // Sandbox mode (KAT-286): nothing comes in either. A plain message, no signature check, no job.
+            if (sandboxOn())
+                return reply.code(503).type('text/plain; charset=utf-8').send(SANDBOX_WEBHOOK_MESSAGE);
+            const raw = Buffer.isBuffer(req.body) ? req.body : Buffer.alloc(0);
+            try {
+                const res = await fn(raw, req.headers);
+                if (res.text !== undefined)
+                    return reply.code(res.status).type('text/plain; charset=utf-8').send(res.text);
+                return reply.code(res.status).send(res.body);
+            }
+            catch (err) {
+                log.error(`webhook ${path} failed`, err);
+                return reply.code(500).send({ error: 'internal error' });
+            }
+        });
+        wire('/hooks/github', handleGithubHook);
+        wire('/hooks/jira', handleJiraHook);
+        wire('/hooks/linear', handleLinearHook);
+    });
+    await app.register(registerApi);
+    // API v2 routes (docs/API-V2.md). Each module owns its paths; /artifacts checks the token itself.
+    for (const routes of [
+        registerSetup,
+        registerRoles,
+        registerRuns,
+        registerReports,
+        registerConnections,
+        registerConnectionPresets,
+        registerReview,
+        registerConnect,
+        registerDocs,
+        registerMarkdown,
+        registerRunner,
+        registerLinks,
+        registerPhone,
+        registerRepos,
+        registerTicketStatus,
+        registerHealth,
+        registerTraceability,
+        registerDotSuggest,
+        registerActivity,
+        registerUpdates,
+        registerOnboarding,
+        registerDisk,
+        registerCases,
+        registerImpact,
+        registerTestRuns,
+        registerCards,
+        registerTrue,
+        registerLead,
+        registerRoom,
+        registerReleaseNotes,
+        registerEvidencePack,
+    ])
+        await app.register(routes);
+    await app.register(registerCall, { env: callEnv });
+    // App Links / Universal Links association files, 404 until the store apps are configured (Phase 7).
+    await app.register(wellKnownRoutes);
+    // TinyBee Hive: embedded in local development, proxied when TINYBEE_HIVE_URL names a Hive, else absent.
+    const hive = await mountHive(app);
+    if (hive !== 'off') {
+        log.info(`tinybee: hive ${hive === 'embedded' ? 'embedded at' : `proxied from ${process.env.TINYBEE_HIVE_URL} at`} ${HIVE_PREFIX}`);
+        await app.register(beeRoutes);
+        await app.register(workflowRoutes);
+        await app.register(modelRoutes);
+    }
+    if (existsSync(config.webDir)) {
+        await app.register(fastifyStatic, {
+            root: config.webDir,
+            prefix: '/',
+            index: ['index.html'],
+            // Hashed bundles never change; the shell and the service worker must always revalidate.
+            setHeaders: (reply, file) => {
+                reply.header('Cache-Control', file.includes('/assets/') ? 'public, max-age=31536000, immutable' : 'no-cache');
+                // The Web Worker that runs the expressions of a composed view (KAT-366) may not open a connection, load a script, or use a
+                // frame: its policy comes from this response, so the browser blocks the network even if the worker's own lockdown failed.
+                if (VIEW_WORKER_FILE.test(file))
+                    reply.header('Content-Security-Policy', VIEW_WORKER_CSP);
+            },
+        });
+        // Hash routes live client side; unknown non-API GETs get the shell.
+        app.setNotFoundHandler((req, reply) => {
+            const apiLike = ['/api/', '/hooks/', '/artifacts/'].some((p) => req.url.startsWith(p));
+            if (req.method === 'GET' && !apiLike)
+                return reply.type('text/html').sendFile('index.html');
+            return reply.code(404).send({ error: 'not found' });
+        });
+    }
+    else
+        log.warn(`client build not found at ${config.webDir}; run npm run build (or npm run demo) to serve the app`);
+    return app;
+}
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,OAA4D,MAAM,SAAS,CAAC;AACnF,OAAO,aAAa,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AACnD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAE,WAAW,EAAE,MAAM,UAAU,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,cAAc,EAAE,gBAAgB,EAAqB,MAAM,eAAe,CAAC;AACtG,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,mBAAmB,EAAE,MAAM,yBAAyB,CAAC;AAC1E,OAAO,EAAE,QAAQ,IAAI,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AACvF,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACnF,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EACL,YAAY,EACZ,kBAAkB,EAClB,QAAQ,EACR,aAAa,EACb,kBAAkB,EAClB,qBAAqB,EACrB,aAAa,EACb,gBAAgB,EAChB,gBAAgB,EAChB,YAAY,EACZ,YAAY,GACb,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACzE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,QAAQ,IAAI,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,QAAQ,IAAI,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,QAAQ,IAAI,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACrE,OAAO,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAC5D,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,QAAQ,IAAI,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC7E,OAAO,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,SAAS,EAAE,MAAM,cAAc,CAAC;AAClE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,WAAW,EAAE,MAAM,4BAA4B,CAAC;AACzD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAE/C,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,CAAC;AAE7C,iHAAiH;AACjH,MAAM,UAAU,QAAQ,CAAC,IAAY;IACnC,OAAO,IAAI,KAAK,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,WAAW,GAAG,CAAC,CAAC;AACpE,CAAC;AAED,0GAA0G;AAC1G,MAAM,UAAU,oBAAoB,CAAC,IAAwB;IAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC5C,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,MAAM,IAAI,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,OAAO,GAAsB,IAAI,KAAK,CAAC,OAAO,EAAE;IAC3D,GAAG,CAAC,MAAM,EAAE,GAAG;QACb,IAAI,GAAG,KAAK,gBAAgB,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,SAAS,CAAC;QAChE,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAClC,CAAC;CACF,CAAC,CAAC;AAEH,mGAAmG;AACnG,MAAM,CAAC,MAAM,gBAAgB,GAAG,mCAAmC,CAAC;AACpE,MAAM,CAAC,MAAM,eAAe,GAAG,wCAAwC,CAAC;AAExE,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,OAA6B,EAAE;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC;QAClB,MAAM,EAAE,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE;QAClE,SAAS,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI;KAC3B,CAAC,CAAC;IAEH,kFAAkF;IAClF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAkD,CAAC;IACrF,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,EAAE,IAA0B,EAAE,EAAE,EAAE;QACnD,MAAM,IAAI,GAAG,iBAAiB,CAAC,CAAC,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;QACpE,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,GAAG,CAAC,IAAI,CAAC,0CAA0C,IAAI,4CAA4C,CAAC,CAAC;QACxH,OAAO,MAAM,CAAC,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC,CAAsB,CAAC;IAExB,2FAA2F;IAC3F,gFAAgF;IAChF,GAAG,CAAC,eAAe,CAAC,CAAC,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE;QACvC,IAAI,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,YAAY,CAAC,GAAG,CAAC,CAAC;YAClB,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;gBAC1B,KAAK,EAAE,sFAAsF;gBAC7F,IAAI,EAAE,WAAW;aAClB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,MAAM,GAAI,GAA+B,CAAC,UAAU,CAAC;QAC3D,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,kGAAkG;IAClG,kGAAkG;IAClG,mGAAmG;IACnG,+FAA+F;IAC/F,mGAAmG;IACnG,kGAAkG;IAClG,uEAAuE;IACvE,MAAM,MAAM,GAAG,QAAQ,EAAE,KAAK,KAAK,CAAC;IACpC,GAAG,CAAC,OAAO,CAAC,WAAW,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAC5C,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAClC,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,IAAI,EAAE,CAAC;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC;YAAE,OAAO;QACtF,yHAAyH;QACzH,kGAAkG;QAClG,IAAI,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,QAAQ,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO;QAChG,iHAAiH;QACjH,IAAI,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,KAAK,EAAE,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO;QAC7F,IAAI,KAAK,KAAK,gBAAgB,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO;QAChE,IAAI,KAAK,KAAK,gBAAgB,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO;QAC/D,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,MAAM,EAAE,CAAC;YACX,GAAG,CAAC,QAAQ,GAAG,MAAM,CAAC;YACtB,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;gBACxD,gHAAgH;gBAChH,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,MAAM;oBAClE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;gBAC1F,6FAA6F;gBAC7F,oEAAoE;gBACpE,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC;oBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAC;YAC3H,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;QACpG,IAAI,CAAC,MAAM,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,mFAAmF,EAAE,CAAC,CAAC;QAC/I,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;IAEH,sHAAsH;IACtH,mEAAmE;IACnE,GAAG,CAAC,OAAO,CAAC,eAAe,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;QAChD,MAAM,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACvB,IAAI,CAAC,EAAE,IAAI,KAAK,QAAQ,IAAI,CAAC,EAAE,IAAI,KAAK,OAAO;YAAE,OAAO;QACxD,IAAI,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,YAAY,EAAE,GAAG,IAAI,EAAE,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,KAAK,YAAY,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC;YACrH,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,qBAAqB,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,CAAC;IAC5F,CAAC,CAAC,CAAC;IAEH,6FAA6F;IAC7F,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,EAAE,EAAE;QACjC,KAAK,CAAC,2BAA2B,EAAE,CAAC;QACpC,KAAK,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5H,MAAM,IAAI,GAAG,CAAC,IAAY,EAAE,EAAqG,EAAE,EAAE,CACnI,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE;YACpC,gGAAgG;YAChG,IAAI,SAAS,EAAE;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;YACxG,MAAM,GAAG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;gBACvC,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;oBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC3G,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC/C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,SAAS,EAAE,GAAG,CAAC,CAAC;gBACzC,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC,CAAC;YAC3D,CAAC;QACH,CAAC,CAAC,CAAC;QACL,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;QACxC,IAAI,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;QACpC,IAAI,CAAC,eAAe,EAAE,gBAAgB,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAChC,kGAAkG;IAClG,KAAK,MAAM,MAAM,IAAI;QACnB,aAAa;QACb,aAAa;QACb,YAAY;QACZ,eAAe;QACf,mBAAmB;QACnB,yBAAyB;QACzB,cAAc;QACd,eAAe;QACf,YAAY;QACZ,gBAAgB;QAChB,cAAc;QACd,aAAa;QACb,aAAa;QACb,aAAa;QACb,oBAAoB;QACpB,cAAc;QACd,oBAAoB;QACpB,kBAAkB;QAClB,gBAAgB;QAChB,eAAe;QACf,kBAAkB;QAClB,YAAY;QACZ,aAAa;QACb,cAAc;QACd,gBAAgB;QAChB,aAAa;QACb,YAAY;QACZ,YAAY;QACZ,YAAY;QACZ,oBAAoB;QACpB,oBAAoB;KACrB;QACC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC7B,MAAM,GAAG,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC;IACnD,oGAAoG;IACpG,MAAM,GAAG,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;IACpC,wGAAwG;IACxG,MAAM,IAAI,GAAG,MAAM,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,IAAI,IAAI,KAAK,KAAK,EAAE,CAAC;QACnB,GAAG,CAAC,IAAI,CAAC,iBAAiB,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,gBAAgB,OAAO,CAAC,GAAG,CAAC,gBAAgB,KAAK,IAAI,WAAW,EAAE,CAAC,CAAC;QACpI,MAAM,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAC9B,MAAM,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACnC,MAAM,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IAClC,CAAC;IAED,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,CAAC,QAAQ,CAAC,aAAa,EAAE;YAChC,IAAI,EAAE,MAAM,CAAC,MAAM;YACnB,MAAM,EAAE,GAAG;YACX,KAAK,EAAE,CAAC,YAAY,CAAC;YACrB,wFAAwF;YACxF,UAAU,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;gBAC1B,KAAK,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,qCAAqC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;gBAC9G,2HAA2H;gBAC3H,0HAA0H;gBAC1H,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC;oBAAE,KAAK,CAAC,MAAM,CAAC,yBAAyB,EAAE,eAAe,CAAC,CAAC;YAC5F,CAAC;SACF,CAAC,CAAC;QACH,oEAAoE;QACpE,GAAG,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,EAAE;YACpC,MAAM,OAAO,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;YACvF,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,OAAO;gBAAE,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC5F,OAAO,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QACtD,CAAC,CAAC,CAAC;IACL,CAAC;;QAAM,GAAG,CAAC,IAAI,CAAC,6BAA6B,MAAM,CAAC,MAAM,wDAAwD,CAAC,CAAC;IAEpH,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/shadow-week.js

@@ -0,0 +1,126 @@
+// The shadow week (KAT-357). A new dot on a shared repo should not comment and post checks under one person's
+// name before anyone has seen what it writes. For `days` days the PR comment and the check run wait in the Inbox
+// (level ask), then they go back to the levels the dot had. The dot stores the end date and the old levels
+// (`shadowWeek`); a boot-time job and a check inside ruleFor() do the revert, so a stopped timer cannot keep a
+// dot silent past the date.
+import { list, update } from './db.js';
+import { log } from './config.js';
+import { DEFAULT_RULES } from './types.js';
+/** The rules the shadow week holds back. */
+export const SHADOW_KINDS = ['pr_comment', 'check_run'];
+export const SHADOW_DAYS = 7;
+const DAY_MS = 24 * 3600_000;
+/** How often the job looks for a shadow week that ended. */
+const SWEEP_MS = 5 * 60_000;
+const levelOf = (rules, kind) => rules?.[kind] ?? DEFAULT_RULES[kind];
+/** Reads `shadowWeekDays` of a dot save: undefined or null leaves it alone, a whole number from 0 to 30 sets it (0 ends it). */
+export function parseShadowDays(v) {
+    if (v === undefined || v === null)
+        return { ok: true, days: undefined };
+    if (typeof v !== 'number' || !Number.isInteger(v) || v < 0 || v > 30)
+        return { ok: false, error: 'shadowWeekDays must be a whole number of days from 0 to 30 (0 ends the shadow week).' };
+    return { ok: true, days: v };
+}
+/** True once the end date has passed. */
+export function shadowExpired(s, now = Date.now()) {
+    return !!s && Date.parse(s.until) <= now;
+}
+/**
+ * Starts (or extends) the shadow week on a rules object. Only a rule that now acts on its own is held back: a rule
+ * already at ask, act_when_asked or hand_off is stricter or different, and stays as the person set it. A week already
+ * running keeps its saved levels and moves its end date.
+ */
+export function startShadowWeek(current, days, now = Date.now()) {
+    const rules = { ...(current.rules ?? {}) };
+    const until = new Date(now + days * DAY_MS).toISOString();
+    const running = current.shadowWeek && !shadowExpired(current.shadowWeek, now) ? current.shadowWeek : undefined;
+    if (running)
+        return { rules, shadowWeek: { ...running, until } };
+    const kinds = SHADOW_KINDS.filter((k) => levelOf(rules, k) === 'act');
+    if (!kinds.length)
+        return { rules, shadowWeek: null };
+    const saved = {};
+    for (const k of kinds) {
+        if (rules[k] !== undefined)
+            saved[k] = rules[k];
+        rules[k] = 'ask';
+    }
+    return { rules, shadowWeek: { until, kinds: [...kinds], saved } };
+}
+/**
+ * The rules after the shadow week: each held-back rule that still reads ask goes back to its saved level (or its
+ * default). A rule the person changed meanwhile keeps their choice.
+ */
+export function endShadowWeek(w) {
+    const rules = { ...(w.rules ?? {}) };
+    const s = w.shadowWeek;
+    if (!s)
+        return rules;
+    for (const k of s.kinds) {
+        if (rules[k] !== 'ask')
+            continue;
+        if (s.saved[k] !== undefined)
+            rules[k] = s.saved[k];
+        else
+            delete rules[k];
+    }
+    return rules;
+}
+/**
+ * The rules of a save that differ from the dot's own. The dot dialog sends the whole rules object with every save, so a
+ * rename lists pr_comment and check_run too; only a level that is not the one the dot reads today is a rule set by hand.
+ */
+export function changedRuleKinds(current, sent) {
+    return Object.keys(sent).filter((k) => sent[k] !== levelOf(current, k));
+}
+/** A save that sets a held-back rule by hand ends the shadow week for that rule: what the person typed wins. */
+export function forgetShadowKinds(s, kinds) {
+    if (!s)
+        return null;
+    const left = s.kinds.filter((k) => !kinds.includes(k));
+    if (!left.length)
+        return null;
+    const saved = {};
+    for (const k of left)
+        if (s.saved[k] !== undefined)
+            saved[k] = s.saved[k];
+    return { until: s.until, kinds: left, saved };
+}
+/**
+ * The level of a rule, read through the shadow week: once the end date has passed, a rule that still holds the shadow
+ * value reads as its saved level even if the job has not written that back yet.
+ */
+export function shadowLevel(w, kind, now = Date.now()) {
+    const s = w.shadowWeek;
+    if (!s || !shadowExpired(s, now) || !s.kinds.includes(kind) || w.rules?.[kind] !== 'ask')
+        return undefined;
+    return s.saved[kind] ?? DEFAULT_RULES[kind];
+}
+/** Writes the revert for every dot whose shadow week ended. Returns the names of the dots it changed. */
+export function revertExpiredShadowWeeks(now = new Date()) {
+    const changed = [];
+    for (const w of list('watches')) {
+        if (!w.shadowWeek || !shadowExpired(w.shadowWeek, now.getTime()))
+            continue;
+        update('watches', w.id, { rules: endShadowWeek(w), shadowWeek: null, updatedAt: now.toISOString() });
+        changed.push(w.name);
+        log.info(`shadow week ended for ${w.name}: PR comments and checks follow the saved rules again`);
+    }
+    return changed;
+}
+/** Looks once at boot and then every few minutes. Returns the stop function. */
+export function startShadowWeekJob() {
+    const sweep = () => {
+        try {
+            revertExpiredShadowWeeks();
+        }
+        catch (err) {
+            log.warn(`shadow week: sweep failed: ${String(err)}`);
+        }
+    };
+    sweep();
+    const timer = setInterval(sweep, SWEEP_MS);
+    timer.unref?.();
+    return () => clearInterval(timer);
+}
+//# sourceMappingURL=shadow-week.js.map

package/dist/shadow-week.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shadow-week.js","sourceRoot":"","sources":["../src/shadow-week.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,iHAAiH;AACjH,2GAA2G;AAC3G,+GAA+G;AAC/G,4BAA4B;AAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,aAAa,EAA+C,MAAM,YAAY,CAAC;AAExF,4CAA4C;AAC5C,MAAM,CAAC,MAAM,YAAY,GAA0B,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAC/E,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,MAAM,MAAM,GAAG,EAAE,GAAG,QAAQ,CAAC;AAC7B,4DAA4D;AAC5D,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC;AAK5B,MAAM,OAAO,GAAG,CAAC,KAAwB,EAAE,IAAgB,EAAa,EAAE,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;AAEhH,gIAAgI;AAChI,MAAM,UAAU,eAAe,CAAC,CAAU;IACxC,IAAI,CAAC,KAAK,SAAS,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IACxE,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE;QAClE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sFAAsF,EAAE,CAAC;IACtH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;AAC/B,CAAC;AAED,yCAAyC;AACzC,MAAM,UAAU,aAAa,CAAC,CAA2C,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACzF,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;AAC3C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAA4D,EAC5D,IAAY,EACZ,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IAEhB,MAAM,KAAK,GAAU,EAAE,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,GAAG,IAAI,GAAG,MAAM,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,IAAI,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,GAAG,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC;IACjE,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC;IACtE,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IACtD,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC;IACnB,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAsD;IAClF,MAAM,KAAK,GAAU,EAAE,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;IAC5C,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;IACvB,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IACrB,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK;YAAE,SAAS;QACjC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;;YAC/C,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0B,EAAE,IAA6B;IACxF,OAAO,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,OAAO,EAAE,CAAe,CAAC,CAAC,CAAC;AACxF,CAAC;AAED,gHAAgH;AAChH,MAAM,UAAU,iBAAiB,CAAC,CAAsB,EAAE,KAAe;IACvE,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACvD,IAAI,CAAC,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAC9B,MAAM,KAAK,GAAoB,EAAE,CAAC;IAClC,KAAK,MAAM,CAAC,IAAI,IAAI;QAAE,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1E,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,CAAsC,EAAE,IAAgB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACpG,MAAM,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC;IACvB,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK;QAAE,OAAO,SAAS,CAAC;IAC3G,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,yGAAyG;AACzG,MAAM,UAAU,wBAAwB,CAAC,GAAG,GAAG,IAAI,IAAI,EAAE;IACvD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,IAAI,CAAQ,SAAS,CAAC,EAAE,CAAC;QACvC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,UAAU,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;YAAE,SAAS;QAC3E,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACrG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACrB,GAAG,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC,IAAI,uDAAuD,CAAC,CAAC;IACnG,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,GAAG,EAAE;QACjB,IAAI,CAAC;YACH,wBAAwB,EAAE,CAAC;QAC7B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,8BAA8B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACxD,CAAC;IACH,CAAC,CAAC;IACF,KAAK,EAAE,CAAC;IACR,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC3C,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IAChB,OAAO,GAAG,EAAE,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;AACpC,CAAC"}

package/dist/shutdown.js

@@ -0,0 +1,92 @@
+// Shutdown sequence (KAT-103). SIGTERM used to wait on whatever a run was doing, so a run in
+// `git clone` kept the process alive for minutes. The sequence now:
+//   1. stops the queue from claiming jobs,
+//   2. marks every running run interrupted (retryable) and kills its process groups,
+//   3. closes the services, each under its own timeout,
+//   4. exits, and a watchdog forces the exit if any of that hangs.
+// A second signal exits at once. proc.ts also kills every tracked group in its exit hook.
+import { log } from './config.js';
+import { interruptRunningRuns } from './agent/runs.js';
+import { killAllTracked, killAllTrackedNow, setShuttingDown } from './proc.js';
+import { haltQueue, stopQueue } from './queue.js';
+import { cancelRunProcess } from './runner/index.js';
+/** The process must be gone this long after the first signal, whatever is still running. */
+export const SHUTDOWN_DEADLINE_MS = 10_000;
+/** Child process groups get this long to leave on SIGTERM before SIGKILL. */
+export const KILL_GRACE_MS = 2_000;
+/** One cleanup step (Slack, MCP, the HTTP server) may take this long. */
+export const STEP_TIMEOUT_MS = 3_000;
+function withTimeout(name, work, ms) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(() => {
+            log.warn(`shutdown: ${name} did not finish in ${ms} ms, moving on`);
+            resolve();
+        }, ms);
+        Promise.resolve()
+            .then(work)
+            .catch((err) => log.warn(`shutdown: ${name} failed: ${String(err)}`))
+            .finally(() => {
+            clearTimeout(timer);
+            resolve();
+        });
+    });
+}
+export function createShutdown(o) {
+    const exit = o.exit ?? ((code) => process.exit(code));
+    const deadlineMs = o.deadlineMs ?? SHUTDOWN_DEADLINE_MS;
+    const graceMs = o.killGraceMs ?? KILL_GRACE_MS;
+    const stepMs = o.stepTimeoutMs ?? STEP_TIMEOUT_MS;
+    let stopping = false;
+    const handle = async (signal) => {
+        if (stopping) {
+            log.warn(`${signal}: second signal, exiting now`);
+            killAllTrackedNow();
+            exit(1);
+            return;
+        }
+        stopping = true;
+        process.stderr.write(`[localdost] ${signal} received: shutting down\n`);
+        log.info(`${signal}: shutting down`);
+        // Last resort. Anything that hangs below (a stuck close(), a child that ignores SIGKILL's reaping) ends here.
+        const watchdog = setTimeout(() => {
+            log.error(`shutdown: not finished after ${deadlineMs} ms, forcing exit`);
+            killAllTrackedNow();
+            exit(1);
+        }, deadlineMs);
+        watchdog.unref();
+        setShuttingDown(true);
+        haltQueue();
+        try {
+            const interrupted = interruptRunningRuns('shutdown');
+            if (interrupted.length)
+                log.warn(`shutdown: interrupted ${interrupted.length} run(s): ${interrupted.join(', ')}`);
+            for (const id of interrupted)
+                cancelRunProcess(id);
+            // Everything else that is tracked: a git clone before its run has a process, setup steps, model CLIs.
+            const killed = await killAllTracked(graceMs);
+            if (killed)
+                log.info(`shutdown: stopped ${killed} child process group(s)`);
+        }
+        catch (err) {
+            log.warn(`shutdown: stopping runs failed: ${String(err)}`);
+        }
+        await Promise.all(o.steps.map((s) => withTimeout(s.name, s.run, stepMs)));
+        // Jobs whose runs were just killed unwind quickly; do not wait on anything slower.
+        await withTimeout('queue', stopQueue, stepMs);
+        try {
+            o.finalize?.();
+        }
+        catch {
+            /* already closed */
+        }
+        clearTimeout(watchdog);
+        exit(0);
+    };
+    return {
+        handle,
+        get stopping() {
+            return stopping;
+        },
+    };
+}
+//# sourceMappingURL=shutdown.js.map

package/dist/shutdown.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shutdown.js","sourceRoot":"","sources":["../src/shutdown.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,oEAAoE;AACpE,2CAA2C;AAC3C,qFAAqF;AACrF,wDAAwD;AACxD,mEAAmE;AACnE,0FAA0F;AAC1F,OAAO,EAAE,GAAG,EAAE,MAAM,aAAa,CAAC;AAClC,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAC;AACvD,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAC/E,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,4FAA4F;AAC5F,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,6EAA6E;AAC7E,MAAM,CAAC,MAAM,aAAa,GAAG,KAAK,CAAC;AACnC,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,KAAK,CAAC;AAuBrC,SAAS,WAAW,CAAC,IAAY,EAAE,IAAmB,EAAE,EAAU;IAChE,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;YACpE,OAAO,EAAE,CAAC;QACZ,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,OAAO,CAAC,OAAO,EAAE;aACd,IAAI,CAAC,IAAI,CAAC;aACV,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,aAAa,IAAI,YAAY,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;aACpE,OAAO,CAAC,GAAG,EAAE;YACZ,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,CAAkB;IAC/C,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,UAAU,GAAG,CAAC,CAAC,UAAU,IAAI,oBAAoB,CAAC;IACxD,MAAM,OAAO,GAAG,CAAC,CAAC,WAAW,IAAI,aAAa,CAAC;IAC/C,MAAM,MAAM,GAAG,CAAC,CAAC,aAAa,IAAI,eAAe,CAAC;IAClD,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,MAAM,GAAG,KAAK,EAAE,MAAc,EAAiB,EAAE;QACrD,IAAI,QAAQ,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,8BAA8B,CAAC,CAAC;YAClD,iBAAiB,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,CAAC,CAAC;YACR,OAAO;QACT,CAAC;QACD,QAAQ,GAAG,IAAI,CAAC;QAChB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,eAAe,MAAM,4BAA4B,CAAC,CAAC;QACxE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,iBAAiB,CAAC,CAAC;QAErC,8GAA8G;QAC9G,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,GAAG,CAAC,KAAK,CAAC,gCAAgC,UAAU,mBAAmB,CAAC,CAAC;YACzE,iBAAiB,EAAE,CAAC;YACpB,IAAI,CAAC,CAAC,CAAC,CAAC;QACV,CAAC,EAAE,UAAU,CAAC,CAAC;QACf,QAAQ,CAAC,KAAK,EAAE,CAAC;QAEjB,eAAe,CAAC,IAAI,CAAC,CAAC;QACtB,SAAS,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,MAAM,WAAW,GAAG,oBAAoB,CAAC,UAAU,CAAC,CAAC;YACrD,IAAI,WAAW,CAAC,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,yBAAyB,WAAW,CAAC,MAAM,YAAY,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClH,KAAK,MAAM,EAAE,IAAI,WAAW;gBAAE,gBAAgB,CAAC,EAAE,CAAC,CAAC;YACnD,sGAAsG;YACtG,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,CAAC;YAC7C,IAAI,MAAM;gBAAE,GAAG,CAAC,IAAI,CAAC,qBAAqB,MAAM,yBAAyB,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,GAAG,CAAC,IAAI,CAAC,mCAAmC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7D,CAAC;QAED,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;QAC1E,mFAAmF;QACnF,MAAM,WAAW,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;QAC9C,IAAI,CAAC;YACH,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC;QACjB,CAAC;QAAC,MAAM,CAAC;YACP,oBAAoB;QACtB,CAAC;QACD,YAAY,CAAC,QAAQ,CAAC,CAAC;QACvB,IAAI,CAAC,CAAC,CAAC,CAAC;IACV,CAAC,CAAC;IAEF,OAAO;QACL,MAAM;QACN,IAAI,QAAQ;YACV,OAAO,QAAQ,CAAC;QAClB,CAAC;KACF,CAAC;AACJ,CAAC"}