toolroll 0.9.77 → 0.9.79

package/dist/teardown-git.js

@@ -190,7 +190,7 @@ function nestedRepository(path) {
  * repository (boundDirs; `binding.repo` when the caller has the project's), is refused; so is a command whose
  * repository changed under it while git ran.
  */
-async function inView(cwd, binding, work, after = true) {
+async function inView(cwd, binding, work, after = true, lockTimeoutMs, gitFile = "git") {
     const root = checkoutRootOf(cwd);
     if (root === null)
         return NOT_A_REPOSITORY;
@@ -206,7 +206,7 @@ async function inView(cwd, binding, work, after = true) {
         return await withCheckoutLock(realpathSync(homedir()), key, async () => {
             let view;
             try {
-                view = gitView(root, "write", binding);
+                view = gitView(root, "write", binding, gitFile);
             }
             catch (error) {
                 return refused(error instanceof Error ? error.message : "the checkout couldn't be read");
@@ -221,7 +221,7 @@ async function inView(cwd, binding, work, after = true) {
             finally {
                 view.dispose();
             }
-        });
+        }, lockTimeoutMs);
     }
     catch (error) {
         return refused(error instanceof Error ? error.message : "the checkout is busy");
@@ -234,11 +234,11 @@ async function inView(cwd, binding, work, after = true) {
  * target is bound to the same repository as the folder it is removed from. A removal without --force runs under the
  * target's own view (its own config.worktree folded in), so git's last check of whether it is clean reads it as the
  * target itself would. `binding.repo`: the project's main checkout, from the plane's records, when the caller has it. */
-export function teardownGit(runner = run, binding = {}) {
+export function teardownGit(runner = run, binding = {}, lockTimeoutMs, gitFile = "git") {
     const options = (cwd, env) => ({ cwd, envAllowlist: ENV_ALLOWLIST, env: { ...ENV, ...env }, timeoutMs: WORKTREE_TIMEOUT_MS, maxBuffer: 512 * 1024 * 1024 });
     const configProblem = async (cwd, env) => {
         // git-lfs's own filters may stand only beside a .lfsconfig that names no extension (commandSetting's lfsChecked).
-        if (lfsExtensionIn(env["GIT_WORK_TREE"] ?? cwd))
+        if (lfsExtensionIn(env["GIT_WORK_TREE"] ?? cwd, gitFile))
             return refused("the checkout's .lfsconfig sets a git-lfs key that can run a command");
         const config = await runner("git", ["--no-optional-locks", "config", "--list", "--no-includes", "--show-scope", "-z"], options(cwd, env));
         if (config.code !== 0)
@@ -287,8 +287,8 @@ export function teardownGit(runner = run, binding = {}) {
             // the target's view, inspected above, so it judges the target by the target's own settings.
             return ran(removal && !forced ? { ...view.env, GIT_COMMON_DIR: targetView.env["GIT_COMMON_DIR"] } : view.env);
             // A removed target has no git directory left to prove: the folder it was removed from is proven instead.
-        }, !removal);
-    });
+        }, !removal, lockTimeoutMs, gitFile);
+    }, true, lockTimeoutMs, gitFile);
 }
 /**
  * Git on a build's checkout, as the plane runs it outside every fence (staging, committing and inspecting the build's
@@ -364,7 +364,7 @@ function includeIn(path, gitFile = "git") {
     const text = regularFile(path);
     if (text === null)
         return "an unreadable file";
-    const parsed = spawnSync(gitFile, ["config", "--file", path, "--no-includes", "--name-only", "--list", "-z"], { cwd: "/", encoding: "utf8", timeout: 5_000, env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } });
+    const parsed = spawnSync(gitFile, ["config", "--file", path, "--no-includes", "--name-only", "--list", "-z"], { cwd: "/", encoding: "utf8", timeout: 5_000, killSignal: "SIGKILL", env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } });
     if (parsed.status !== 0)
         return "an unreadable file";
     const named = parsed.stdout.split("\0").find(name => /^(include\.path|includeif\..*\.path)$/i.test(name));
@@ -488,7 +488,7 @@ function gitView(checkout, kind, binding = {}, gitFile = "git") {
             throw new Error("the checkout's git config couldn't be read as a plain file");
         const configPath = join(view, "config");
         writeFileSync(configPath, config, { mode: 0o600 });
-        const plain = { cwd: "/", encoding: "utf8", timeout: 5_000, env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } };
+        const plain = { cwd: "/", encoding: "utf8", timeout: 5_000, killSignal: "SIGKILL", env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } };
         if (/worktreeconfig/i.test(config)) {
             const flag = spawnSync(gitFile, ["config", "--file", configPath, "--no-includes", "--type=bool", "--get", "extensions.worktreeConfig"], plain);
             if (flag.status !== 0 && flag.status !== 1)
@@ -1038,7 +1038,7 @@ export function lfsExtensionIn(checkout, gitFile = "git") {
     catch {
         return false;
     }
-    const parsed = spawnSync(gitFile, ["config", "--file", path, "--no-includes", "--name-only", "--list", "-z"], { cwd: "/", encoding: "utf8", timeout: 5_000, env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } });
+    const parsed = spawnSync(gitFile, ["config", "--file", path, "--no-includes", "--name-only", "--list", "-z"], { cwd: "/", encoding: "utf8", timeout: 5_000, killSignal: "SIGKILL", env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } });
     return parsed.status !== 0 || parsed.stdout.split("\0").filter(Boolean).some(name => lfsCommand(name) || ["include", "includeif"].includes(keyParts(name).section));
 }
 /** Every command runs against a view of the checkout's repository (gitView) whose config and info are copies the
@@ -1148,7 +1148,7 @@ export function viewedGitSync(cwd, args, options = {}) {
     const view = gitView(cwd, "read", options.binding, gitFile);
     try {
         const env = { PATH: process.env["PATH"] ?? "", HOME: process.env["HOME"] ?? "", LANG: "C", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", GIT_TERMINAL_PROMPT: "0", ...view.env };
-        const bounded = { cwd, env, encoding: "utf8", timeout: options.timeoutMs ?? 60_000, maxBuffer: options.maxBuffer ?? 1_048_576, stdio: ["ignore", "pipe", "pipe"] };
+        const bounded = { cwd, env, encoding: "utf8", timeout: options.timeoutMs ?? 60_000, killSignal: "SIGKILL", maxBuffer: options.maxBuffer ?? 1_048_576, stdio: ["ignore", "pipe", "pipe"] };
         const own = spawnSync(gitFile, ["--no-optional-locks", "config", "--list", "--show-scope", "-z"], bounded);
         if (own.status !== 0)
             throw new Error("its config couldn't be read");
@@ -1234,7 +1234,7 @@ export function lazyFetchSupported(gitFile = "git") {
     const executable = gitExecutablePath(gitFile);
     let known = lazyFetchByGit.get(executable);
     if (known === undefined) {
-        const probe = spawnSync(executable, ["--no-lazy-fetch", "version"], { cwd: "/", encoding: "utf8", timeout: 5_000, stdio: ["ignore", "pipe", "pipe"],
+        const probe = spawnSync(executable, ["--no-lazy-fetch", "version"], { cwd: "/", encoding: "utf8", timeout: 5_000, killSignal: "SIGKILL", stdio: ["ignore", "pipe", "pipe"],
             env: { PATH: process.env["PATH"] ?? "", GIT_CONFIG_NOSYSTEM: "1", GIT_CONFIG_GLOBAL: "/dev/null", HOME: "/nonexistent" } });
         known = probe.status === 0;
         lazyFetchByGit.set(executable, known);

package/dist/toolroll-update.js

@@ -37,7 +37,7 @@ import { removeTerminalUpdateGate } from "./terminal-catalog.js";
 import { assertCodingUpdateStopped, backupCodingCatalog, codingCatalogExists, releaseStaleCodingOwner, removeCodingUpdateGate } from "./coding-update.js";
 import { installLaunchdService, launchdPlist, stopLaunchdService, writeFileDurably } from "./daemon.js";
 import { NAME } from "./names.js";
-import { orphanKey, updateSafeSchema, V117_RENAMED_COLUMNS, V117_RENAMED_TABLES, V118_MERGED_TABLES, V119_ADDED_COLUMNS, V120_ADDED_COLUMNS, V121_ADDED_COLUMNS, V122_ADDED_COLUMNS, V123_ADDED_COLUMNS, V125_ADDED_COLUMNS, V126_ADDED_COLUMNS, V128_ADDED_COLUMNS, V129_ADDED_COLUMNS, V134_ADDED_COLUMNS, V135_ADDED_COLUMNS } from "./store.js";
+import { orphanKey, updateSafeSchema, V117_RENAMED_COLUMNS, V117_RENAMED_TABLES, V118_MERGED_TABLES, V119_ADDED_COLUMNS, V120_ADDED_COLUMNS, V121_ADDED_COLUMNS, V122_ADDED_COLUMNS, V123_ADDED_COLUMNS, V125_ADDED_COLUMNS, V126_ADDED_COLUMNS, V128_ADDED_COLUMNS, V129_ADDED_COLUMNS, V134_ADDED_COLUMNS, V135_ADDED_COLUMNS, V138_ADDED_COLUMNS } from "./store.js";
 import { isNewer, REGISTRY } from "./releases.js";
 import { markNeverIndex } from "./never-index.js";
 import { readRuntimeUpdateJournal, RUNTIME_PHASES, RUNTIME_UPDATE_STEPS, stagedStartedAt, updaterStartingOf } from "./contracts/update-journal.js";
@@ -409,7 +409,7 @@ const HISTORY_RULES = {
     // v126: a receipt's state, acceptance time and held item, a trigger's credential generation and turned-away count,
     // and who made a card read none, 0, or none. A table with an earlier rule (flow_trigger's v115 move) keeps it too.
     // v128: a lead message's pending flag reads waiting exactly for a team queue's unadmitted operator message.
-    ...Object.fromEntries(Object.entries(addedColumns(V119_ADDED_COLUMNS, V120_ADDED_COLUMNS, V121_ADDED_COLUMNS, V122_ADDED_COLUMNS, V123_ADDED_COLUMNS, V125_ADDED_COLUMNS, V126_ADDED_COLUMNS, V128_ADDED_COLUMNS, V129_ADDED_COLUMNS, V134_ADDED_COLUMNS, V135_ADDED_COLUMNS))
+    ...Object.fromEntries(Object.entries(addedColumns(V119_ADDED_COLUMNS, V120_ADDED_COLUMNS, V121_ADDED_COLUMNS, V122_ADDED_COLUMNS, V123_ADDED_COLUMNS, V125_ADDED_COLUMNS, V126_ADDED_COLUMNS, V128_ADDED_COLUMNS, V129_ADDED_COLUMNS, V134_ADDED_COLUMNS, V135_ADDED_COLUMNS, V138_ADDED_COLUMNS))
         .map(([table, rule]) => [table, { ...EARLIER_RULES[table], ...rule }])),
 };
 /** The tables a migration may remove whole (v115's removed features). */

package/dist/up-role-child.js

@@ -39,8 +39,12 @@ const port = {
 // stop on the second), so a role never acts on SIGINT itself. SIGTERM (the supervisor's stop) drains, once.
 process.on("SIGINT", () => { });
 process.on("SIGTERM", () => stop(false));
-// The parent gone (its channel closed): drain, as a stop would. The worker's own grace timer bounds it.
-process.once("disconnect", () => stop(false));
+// The parent gone (its channel closed): drain, as a stop would. The worker's own grace timer bounds it; past a minute
+// with nobody left to stop it, the role stops its work outright and ends, never running on as an orphan.
+process.once("disconnect", () => {
+    stop(false);
+    setTimeout(() => { stop(true); setTimeout(() => process.exit(1), 5_000).unref(); }, 60_000).unref();
+});
 const start = await new Promise(resolve => {
     const timer = setTimeout(() => resolve(null), 60_000);
     process.once("message", value => { clearTimeout(timer); resolve(value); });

package/dist/workspace-revision.js

@@ -8,7 +8,9 @@ const OMIT = new Set(['schema_version', 'service_cursor', 'wake', 'notification_
     // Who is watching an agent right now: renewed by every open page's keep-alive, never news.
     'agent_view',
     // A run's How it ran, derived from its own records on first view (run-efficiency.ts): a cache, never news.
-    'run_efficiency']);
+    'run_efficiency',
+    // v137: lifecycle heartbeats, latency timelines and the continuous copy's record are bookkeeping, never news.
+    'service_lifecycle', 'latency_timeline', 'live_backup']);
 const QUIET = {
     runner: ['heartbeat_at'], claim: ['heartbeat_at', 'expires_at'], watch_lease: ['heartbeat_at', 'expires_at'],
     watch_episode: ['ticks'], provider_readiness: ['observed_at'],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "toolroll",
-  "version": "0.9.77",
+  "version": "0.9.79",
   "description": "A control plane for unattended coding agents — queue tasks, walk away, come back to pull requests. Agents build in leased worktrees, never touch your default branch, and interrupt you only for decisions that need a human.",
   "directories": {
     "doc": "docs"