viveworker 0.5.2 → 0.5.5

package/README.md

@@ -219,7 +219,7 @@ Open `Settings > Moltbook` in the phone app to see the current auto-scout postin
 
 - **Receive tasks from other agents** worldwide via standard A2A JSON-RPC
 - **Human-in-the-loop**: every incoming task requires your approval on your phone before execution
-- **Public Agent Card**: your profile at `https://a2a.viveworker.com/<user-id>` tells other agents what you can do
+- **Public Agent Card**: your profile at `https://a2a.viveworker.com/u/<user-id>` tells other agents what you can do
 - **Customizable profile**: description, skills, and avatar are all configurable
 
 ### How it works
@@ -250,7 +250,7 @@ The bridge detects the new credentials within 30 seconds and auto-connects.
 
 ### Profile page
 
-Visit `https://a2a.viveworker.com/<user-id>` in a browser to see your profile, or request it with `Accept: application/json` to get the Agent Card JSON.
+Visit `https://a2a.viveworker.com/u/<user-id>` in a browser to see your profile, or request it with `Accept: application/json` to get the Agent Card JSON.
 
 ## Security Model
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "viveworker",
-  "version": "0.5.2",
+  "version": "0.5.5",
   "description": "Local mobile companion for Codex Desktop and Claude Desktop — approvals, code review, Moltbook drafts, and A2A (Agent-to-Agent) task relay on your LAN.",
   "author": "Yuta Hoshino <hoshino.lireneo@gmail.com>",
   "license": "MIT",

package/scripts/a2a-cli.mjs

@@ -153,7 +153,7 @@ async function handleSetup(args) {
 
   console.log(`✅ Credentials saved\n`);
   console.log(`🚀 Setup complete! Restart your viveworker bridge to connect.`);
-  console.log(`   Your A2A endpoint: ${result.relayUrl}/${result.userId}\n`);
+  console.log(`   Your A2A endpoint: ${result.relayUrl}/u/${result.userId}\n`);
 }
 
 // ---------------------------------------------------------------------------

package/scripts/moltbook-api.mjs

@@ -39,22 +39,56 @@ export function createMoltbookClient(apiKey) {
     throw new Error("MOLTBOOK_API_KEY is required");
   }
   return async function mb(pathname, init = {}) {
-    const res = await fetch(`${API_BASE}${pathname}`, {
-      ...init,
-      headers: {
-        "content-type": "application/json",
-        authorization: `Bearer ${apiKey}`,
-        ...(init.headers || {}),
-      },
-    });
-    const text = await res.text().catch(() => "");
-    if (!res.ok) {
-      throw new Error(`moltbook ${res.status} ${pathname}: ${text}`);
-    }
+    const { timeoutMs: overrideTimeoutMs, ...fetchInit } = init;
+    const method = String(fetchInit.method || "GET").toUpperCase();
+    const isWrite = method !== "GET" && method !== "HEAD";
+    // Reads get 30s, writes 60s. A flaky upstream must not be able to hang
+    // the process indefinitely — this exact failure mode took out the
+    // moltbook-watcher in mid-April 2026 when /notifications started
+    // returning 500s and later stopped responding entirely. Bare fetch has
+    // no default timeout and the undici connection pool saturated, leaving
+    // the process alive but unable to log, poll, or push anything.
+    // Writes get a longer budget because POST /posts and /comments do
+    // synchronous spam-screening on the server side.
+    const timeoutMs = typeof overrideTimeoutMs === "number"
+      ? overrideTimeoutMs
+      : (isWrite ? 60_000 : 30_000);
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
     try {
-      return JSON.parse(text);
-    } catch {
-      return text;
+      const res = await fetch(`${API_BASE}${pathname}`, {
+        ...fetchInit,
+        signal: controller.signal,
+        headers: {
+          "content-type": "application/json",
+          authorization: `Bearer ${apiKey}`,
+          ...(fetchInit.headers || {}),
+        },
+      });
+      const text = await res.text().catch(() => "");
+      if (controller.signal.aborted) {
+        const err = new Error("aborted");
+        err.name = "AbortError";
+        throw err;
+      }
+      if (!res.ok) {
+        throw new Error(`moltbook ${res.status} ${pathname}: ${text}`);
+      }
+      try {
+        return JSON.parse(text);
+      } catch {
+        return text;
+      }
+    } catch (error) {
+      if (error?.name === "AbortError") {
+        const hint = isWrite
+          ? " — may have succeeded server-side; run `moltbook reconcile` before retrying"
+          : "";
+        throw new Error(`moltbook timeout after ${timeoutMs}ms ${method} ${pathname}${hint}`);
+      }
+      throw error;
+    } finally {
+      clearTimeout(timer);
     }
   };
 }
@@ -173,7 +207,13 @@ export function rollScoutDayIfNeeded(state) {
 }
 
 export function recordComposeAttempt(state, title, postId, type = "post") {
-  state.composedToday = (state.composedToday || 0) + 1;
+  // Only original posts count against the daily "本日の新規投稿数" quota
+  // (composedToday). Replies are still appended to recentComposeTitles so
+  // the "最近の投稿" list in settings shows them with their reply badge,
+  // but they intentionally do not inflate the counter.
+  if (type === "post") {
+    state.composedToday = (state.composedToday || 0) + 1;
+  }
   state.lastComposeDay = todayKey();
   if (!Array.isArray(state.recentComposeTitles)) state.recentComposeTitles = [];
   const entry = { title: String(title || ""), type };

package/scripts/moltbook-watcher.mjs

@@ -71,18 +71,37 @@ try {
 const pending = new Map(); // sourceId -> { commentId, postId }
 
 async function pushToBridge(item) {
-  const res = await fetch(`${VIVEWORKER_BASE}/api/providers/moltbook/events`, {
-    method: "POST",
-    headers: {
-      "content-type": "application/json",
-      "x-viveworker-hook-secret": HOOK_SECRET,
-    },
-    body: JSON.stringify(item),
-  });
-  if (!res.ok) {
-    throw new Error(`bridge ${res.status}: ${await res.text().catch(() => "")}`);
+  // Loopback HTTPS call to the viveworker bridge. Normally completes in
+  // milliseconds, but if the bridge process is hung this fetch — like any
+  // unbounded fetch — would wait forever and eventually zombify the watcher
+  // (same failure mode that took out the Moltbook poll path in April 2026).
+  // 10s is a generous cap for a local call; anything slower means the bridge
+  // is already unhealthy and we're better off erroring out and retrying next
+  // poll cycle than blocking the whole watcher on it.
+  const controller = new AbortController();
+  const timer = setTimeout(() => controller.abort(), 10_000);
+  try {
+    const res = await fetch(`${VIVEWORKER_BASE}/api/providers/moltbook/events`, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        "x-viveworker-hook-secret": HOOK_SECRET,
+      },
+      body: JSON.stringify(item),
+      signal: controller.signal,
+    });
+    if (!res.ok) {
+      throw new Error(`bridge ${res.status}: ${await res.text().catch(() => "")}`);
+    }
+    return await res.json();
+  } catch (error) {
+    if (error?.name === "AbortError") {
+      throw new Error(`bridge timeout after 10000ms POST /api/providers/moltbook/events`);
+    }
+    throw error;
+  } finally {
+    clearTimeout(timer);
   }
-  return res.json();
 }
 
 function draftReply() {