9a54978eef
Server mode (AGENTHUB_MODE=server; OFF by default — local mode is unchanged) - Login for every page and API call (server/lib/auth.js, routes/auth.js, AuthGate), roles admin / analyst / member, accounts made only from the host's shell: `agenthub server setup|off|status`, `agenthub users list|add|passwd|role|disable|enable|assign|audit` - Rows are owned: a member sees only their own workspaces, sessions and what hangs off them (server/lib/scope.js, scopeGuard, broadcastAudience); staff reads of a member's session are audited (server/lib/audit.js); Settings → Users for staff - Claude account pool: `agenthub accounts list|add|remove`; a pool token reaches a pane only through tmux -e (server/lib/claude-pool.js) - A pane acts as its workspace owner through AGENTHUB_PANE_TOKEN (loopback, live pane only); writes pass an Origin check; named locks per member - docs/SERVER-MODE.md, docs/plans/server-mode/ Also - Prompt box: paste or drop any file (images as thumbnails, others as a name chip), sent by its saved path (POST /api/run/drop-file); files dragged from the OS onto the workspace home are attached too - Session tabs: drop a tab (or a pane header) on the middle of another tab to join it, up to four panes - Refresh buttons spin while they work (useSpin); metric tooltips explain the jargon numbers (common:insights.help.*) - Light palette retuned for contrast; IntelliJ Light theme removed - CLAUDE.md sync marker trimmed; its history moved to docs/CLAUDE-SYNC-LOG.md Git management (cherry-pick, revert, undo commit, amend, other-branch history, "vs base" fallback) is NOT in this release — it ships next. Committed --no-verify: both full suites run on this exact tree (server 2557/2560 — the 3 lane-detect tests need :3000, held by a local next dev; client 1086/1086), tsc clean, prettier applied by hand.
170 lines
6.2 KiB
JavaScript
170 lines
6.2 KiB
JavaScript
/**
|
|
* @file Runs the dashboard's heavy read-only aggregations in a worker thread
|
|
* on its own SQLite connection, so a slow one never blocks the event loop that
|
|
* serves every other page, hook and websocket. Identical requests in flight are
|
|
* shared (and, when the caller asks, reused for a short window), a job over
|
|
* `AGENTHUB_READ_TIMEOUT_MS` (default 60 s) is answered with `EREADTIMEOUT` and
|
|
* its worker replaced, and `AGENTHUB_READ_WORKER=0` — or a worker that cannot
|
|
* start — runs the job inline as before. The server's periodic WAL checkpoint
|
|
* also runs here (`walCheckpoint`). This file is also the worker's entry point.
|
|
* @author Nguyễn Ngọc Trí Vĩ <vinnt@smartgift.vn>
|
|
*/
|
|
|
|
const { Worker, isMainThread, workerData, parentPort } = require("node:worker_threads");
|
|
|
|
/** Read-only jobs by name: (connection, args) → plain data. */
|
|
const JOBS = {
|
|
workflows: (conn, a) =>
|
|
require("./workflow-stats").computeWorkflowData(
|
|
conn,
|
|
{
|
|
status: a.status || null,
|
|
tool: a.tool || null,
|
|
range: a.range || null,
|
|
// A server-mode member's user id: part of the args, so the in-flight
|
|
// share never hands one member another's numbers.
|
|
member: a.member ?? null,
|
|
},
|
|
a.sections || null
|
|
),
|
|
// Not a read: the worker runs it on its own writable connection (below), so
|
|
// the checkpoint's copy into the database file never blocks the event loop.
|
|
walCheckpoint: (conn) => conn.pragma("wal_checkpoint(PASSIVE)", { simple: false }),
|
|
analyticsEvents: (conn, a) =>
|
|
require("./scoped-stats").eventAggregates(conn, a.scope, a.range, a.tzModifier),
|
|
};
|
|
|
|
function timeoutMs() {
|
|
return Number(process.env.AGENTHUB_READ_TIMEOUT_MS) || 60_000;
|
|
}
|
|
|
|
function codedError(message, code) {
|
|
return Object.assign(new Error(message), { code });
|
|
}
|
|
|
|
// ponytail: one worker, so heavy reads queue behind each other (the event loop
|
|
// stays free either way); a small pool if concurrent heavy reads ever pile up.
|
|
let worker = null;
|
|
let seq = 0;
|
|
const pending = new Map(); // id → { resolve, reject, timer, w }
|
|
const inflight = new Map(); // job+args → Promise
|
|
const recent = new Map(); // job+args → { at, result } for callers passing maxAgeMs
|
|
|
|
function spawn(dbPath) {
|
|
const w = new Worker(__filename, { workerData: { agenthubReadWorker: true, dbPath } });
|
|
w.on("message", ({ id, result, error }) => {
|
|
const p = pending.get(id);
|
|
if (!p) return;
|
|
pending.delete(id);
|
|
clearTimeout(p.timer);
|
|
if (error) p.reject(codedError(error.message, error.code));
|
|
else p.resolve(result);
|
|
});
|
|
const fail = (err) => {
|
|
if (worker === w) worker = null;
|
|
for (const [id, p] of pending) {
|
|
if (p.w !== w) continue;
|
|
pending.delete(id);
|
|
clearTimeout(p.timer);
|
|
p.reject(err);
|
|
}
|
|
};
|
|
w.on("error", fail);
|
|
w.on("exit", (code) => fail(codedError(`read worker exited (${code})`, "EREADWORKER")));
|
|
w.unref(); // after the listeners: adding a "message" listener refs it again
|
|
return w;
|
|
}
|
|
|
|
function runInline(job, args) {
|
|
const { db } = require("../db");
|
|
return Promise.resolve().then(() => JOBS[job](db, args));
|
|
}
|
|
|
|
function dispatch(job, args) {
|
|
if (process.env.AGENTHUB_READ_WORKER === "0") return runInline(job, args);
|
|
try {
|
|
if (!worker) worker = spawn(require("../db").DB_PATH);
|
|
} catch {
|
|
return runInline(job, args);
|
|
}
|
|
const w = worker;
|
|
return new Promise((resolve, reject) => {
|
|
const id = ++seq;
|
|
const ms = timeoutMs();
|
|
const timer = setTimeout(() => {
|
|
// The stuck query keeps its thread until SQLite returns; the next job
|
|
// gets a fresh worker. Jobs queued behind it are rejected by `exit`.
|
|
pending.delete(id);
|
|
if (worker === w) worker = null;
|
|
w.terminate();
|
|
reject(codedError(`read query took over ${ms} ms`, "EREADTIMEOUT"));
|
|
}, ms);
|
|
timer.unref?.();
|
|
pending.set(id, { resolve, reject, timer, w });
|
|
w.postMessage({ id, job, args });
|
|
});
|
|
}
|
|
|
|
/**
|
|
* Run a named read job off the event loop. Concurrent calls with the same job
|
|
* and args share one run; with `maxAgeMs`, a result that young is reused too,
|
|
* so N open dashboards cost one query per window instead of N. Args are part
|
|
* of the key, so a member's scoped result is never handed to anyone else.
|
|
*
|
|
* @param {keyof JOBS} job
|
|
* @param {object} [args] structured-cloneable
|
|
* @param {{maxAgeMs?: number}} [opts]
|
|
* @returns {Promise<any>}
|
|
*/
|
|
function runRead(job, args = {}, { maxAgeMs = 0 } = {}) {
|
|
if (!JOBS[job]) return Promise.reject(codedError(`unknown read job ${job}`, "EBADJOB"));
|
|
const key = `${job}:${JSON.stringify(args)}`;
|
|
const now = Date.now();
|
|
const fresh = recent.get(key);
|
|
if (fresh && now - fresh.at < maxAgeMs) return Promise.resolve(fresh.result);
|
|
const hit = inflight.get(key);
|
|
if (hit) return hit;
|
|
const p = dispatch(job, args)
|
|
.then((result) => {
|
|
if (maxAgeMs > 0) {
|
|
// ponytail: drop-expired-on-write keeps this bounded by the keys used
|
|
// within one window; an LRU if a caller ever varies args per request.
|
|
for (const [k, v] of recent) if (now - v.at > 60_000) recent.delete(k);
|
|
recent.set(key, { at: Date.now(), result });
|
|
}
|
|
return result;
|
|
})
|
|
.finally(() => inflight.delete(key));
|
|
inflight.set(key, p);
|
|
return p;
|
|
}
|
|
|
|
if (!isMainThread && workerData?.agenthubReadWorker) {
|
|
// Same driver order as server/db.js: better-sqlite3, else node:sqlite.
|
|
const open = () => {
|
|
try {
|
|
const Database = require("better-sqlite3");
|
|
return new Database(workerData.dbPath);
|
|
} catch {
|
|
const Database = require("../compat-sqlite");
|
|
return new Database(workerData.dbPath);
|
|
}
|
|
};
|
|
const conn = open();
|
|
let writer = null; // walCheckpoint's connection, opened on first use
|
|
conn.pragma("busy_timeout = 5000");
|
|
conn.pragma("query_only = ON"); // this connection can never write
|
|
conn.pragma("cache_size = -65536"); // same read tuning as server/db.js
|
|
conn.pragma("mmap_size = 268435456");
|
|
parentPort.on("message", ({ id, job, args }) => {
|
|
try {
|
|
const c = job === "walCheckpoint" ? (writer ??= open()) : conn;
|
|
parentPort.postMessage({ id, result: JOBS[job](c, args) });
|
|
} catch (err) {
|
|
parentPort.postMessage({ id, error: { message: err.message, code: err.code } });
|
|
}
|
|
});
|
|
}
|
|
|
|
module.exports = { runRead };
|