0743477d48
* feat(orchestrator): persist N-entry FIFO message queue
Replaces the single-slot, latest-wins, in-memory queue with a SQLite-backed
FIFO queue (default cap 10 per session, configurable via
KANDEV_QUEUE_MAX_PER_SESSION). Drain stays one-per-turn so each entry gets its
own user message and `on_turn_*` workflow cycle. Inter-task `message_task_kandev`
returns a structured `queue_full` error with sender attribution when the
target session is saturated, so the calling LLM can decide whether to retry.
Surfaces a new WS action `message.queue.remove` for single-entry deletion;
`message.queue.cancel` now means clear-all. Edit/remove are keyed on the
entry's UUID, returning `entry_not_found` when atomic-take won the drain race.
* feat(web): N-entry queue state, API, and optimistic hook
Replaces the single-slot QueueStatus with an ordered `entries[]` per session
plus capacity meta (`count`, `max`). API exposes typed `QueueFullError` and
`QueueEntryNotFoundError`; the hook surfaces optimistic edit/remove with
drain-race rollback (refetch on `entry_not_found`).
* feat(web): inline ghost-message queue UI with sender chips
Replaces the floating QueuedMessageIndicator overlay with a stack of ghost
messages rendered above the chat input. Each ghost shows a sender chip
(user / agent) and per-entry edit/remove. A small "n/max queued · clear all"
pill summarizes capacity. Inter-task entries are visually distinct and edit
is gated to the original sender.
* fix(queue): address review — auth guard, TOCTOU, error UX
- Add `messagequeue.QueuedByUser` / `QueuedByAgent` constants and centralize
the `queue_full` error code so the WS and MCP handlers stay in sync.
- WS `message.queue.{add,append,update}` default empty user_id to QueuedByUser
so the UpdateContent ownership guard always runs against a non-empty owner;
inter-task entries (`queued_by="agent"`) can no longer be overwritten by
user-initiated edits even when `user_id` is omitted from the payload.
- memoryRepository: hold the mutex through the whole append-or-insert path
(prior split released the lock between tail-check and Insert, allowing two
same-sender callers to race past coalescing). TransferSession now shifts
source positions past the destination's max so transferred entries always
drain after pre-existing destination entries, matching SQLite semantics.
- Frontend: surface edit/clear/remove failures via `sonner` toasts (drain race
→ "message already sent"); exit edit mode on failure instead of leaving the
textarea silently stuck. Hide the remove button on read-only (agent) ghosts.
- `useQueue.clearAll` no longer derives `max` from pre-clear entry count;
resets to `metaMax ?? 0` so the next status_changed event lands authoritative
capacity.
- `senderKindOf` drops the unreachable metadata fallback; route on `queued_by`
alone since `dispatchTaskMessage` always sets it.
- Test loggers now write to stderr per CLAUDE.md "stderr for logs" guideline.
* test(web): align queue e2e selectors with new ghost-message UI
The ghost-message rewrite renamed button titles ("Cancel queued message"
→ "Remove queued message", "Edit message" → "Edit queued message") and
introduced a `data-testid="queued-ghost-list"` container. The
`message-queue.spec.ts` Playwright tests still pointed at the old titles.
* fix(queue): address second review pass — auth, drain race, tests
- WS handlers (`add` / `append` / `update`) now reject `user_id="agent"`
outright, closing the gap a hostile WS client could exploit by
impersonating the inter-task sender identity to overwrite agent
entries (greptile P1).
- WS `update` / `remove` now require `session_id` so the post-mutation
`MessageQueueStatusChanged` broadcast can never be silently skipped.
- `sqliteRepository.TakeHead` checks `RowsAffected()` after DELETE;
when two concurrent take callers race past the busy-timeout the
loser sees 0 affected rows and now returns `nil, nil` instead of
the already-drained message (would otherwise dispatch the same
prompt twice).
- `Service.GetStatus` returns `Entries: []` instead of `nil` on the
error path so the wire shape stays consistent (frontend already
guards but strict consumers wouldn't tolerate the type mismatch).
- New tests: `queue-api.test.ts` covers `rethrowQueueError` mappings
(queue_full / entry_not_found / generic / Error pass-through);
`session-slice.upsert.test.ts` covers `setQueueEntries`,
`removeQueueEntry`, and `clearQueueStatus`. Backend gains an
agent-impersonation handler test.
- `rethrowQueueError` now surfaces `WSError.message` for non-queue
errors instead of stringifying the whole object.
- Cleanup: replace unused `a, c := ...` discards in service_test
with `_, _ = ...`.
* fix(queue): scope update/remove by session_id (cross-session deletion guard)
The MCP `queue_full` error payload deliberately discloses sibling-task
entry IDs (so the calling agent's LLM can reason about the wedge state).
Without a session_id filter on `DeleteByID` / `UpdateContent`, a hostile
agent that received that payload could call `wsRemoveEntry` /
`wsUpdateMessage` against another task's entries and delete or rewrite
them — only the per-entry UUID was being checked.
- `Repository.UpdateContent` and `Repository.DeleteByID` now require
`sessionID` and add `AND session_id = ?` to the SQL guard. The memory
repo mirrors the scope (lookup keyed on session before the entry scan).
- `Service.UpdateMessage` / `Service.RemoveEntry` take `sessionID`; the
WS handlers thread `req.SessionID` through (already validated as
non-empty in the previous fixup).
- TypeScript: `session_id` is now required on `updateQueuedMessage` /
`removeQueuedEntry` params so callers fail at compile time, matching
the backend contract.
- Tests cover the cross-session attack: `RemoveEntry`/`UpdateMessage`
with an attacker-supplied session_id but a real entry id from another
session must return `ErrEntryNotFound` and leave the victim entry
untouched. SQLite repo gets parallel coverage.
* fix(queue): propagate transfer error + tighten WSError narrowing
- `Service.TransferSession` now returns an error so callers can fail
closed instead of silently leaving entries orphaned on the previous
session. The two existing call sites pick the right policy:
`switchSessionForStep` (reusing an existing session) propagates the
error so the workflow switch aborts; the new-session path logs and
continues, since the new session is already committed and rolling
back here would leave a half-switched workflow.
- `asWSError` now also narrows on `message` / `details`, so WS payloads
without a `code` field are still mapped to a meaningful `Error.message`
via `rethrowQueueError` (instead of "[object Object]"). Native
`Error` instances explicitly skip the WS-error branch so they pass
through untouched, preserving the existing pass-through guarantee.
- `queue-api.test.ts`: `expect.assertions(N)` on the catch-only tests
so a missing throw fails the test instead of silently passing.
* fix(queue): check TransferSession error in service tests
The TransferSession signature change in 83abe6d7 broke errcheck on two
test sites that hadn't been updated. Wrap them in require.NoError.
163 lines
5.1 KiB
TypeScript
163 lines
5.1 KiB
TypeScript
import type { QueueStatus, QueuedMessage } from "@/lib/state/slices/session/types";
|
|
import { getWebSocketClient } from "@/lib/ws/connection";
|
|
|
|
const WS_CLIENT_UNAVAILABLE = "WebSocket client not available";
|
|
|
|
/** Error thrown when the queue would exceed its per-session cap. */
|
|
export class QueueFullError extends Error {
|
|
readonly code = "queue_full";
|
|
readonly queueSize: number;
|
|
readonly max: number;
|
|
|
|
constructor(queueSize: number, max: number) {
|
|
super(`Queue is full (${queueSize}/${max} pending). Wait for the next turn to drain.`);
|
|
this.name = "QueueFullError";
|
|
this.queueSize = queueSize;
|
|
this.max = max;
|
|
}
|
|
}
|
|
|
|
/** Error thrown when the targeted entry was already drained or does not exist. */
|
|
export class QueueEntryNotFoundError extends Error {
|
|
readonly code = "entry_not_found";
|
|
constructor() {
|
|
super("Queue entry was already drained or no longer exists.");
|
|
this.name = "QueueEntryNotFoundError";
|
|
}
|
|
}
|
|
|
|
type WSError = {
|
|
code?: string;
|
|
message?: string;
|
|
details?: { queue_size?: number; max?: number; [k: string]: unknown };
|
|
};
|
|
|
|
function asWSError(err: unknown): WSError | undefined {
|
|
// Some WS error payloads omit `code` and only carry `message`/`details`;
|
|
// narrowing on `code` alone would drop those and stringify the whole object
|
|
// as the eventual Error message ("[object Object]"). Real Error instances
|
|
// are skipped so they pass through unchanged in `rethrowQueueError`.
|
|
if (typeof err !== "object" || err === null || err instanceof Error) {
|
|
return undefined;
|
|
}
|
|
if ("code" in err || "message" in err || "details" in err) {
|
|
return err as WSError;
|
|
}
|
|
return undefined;
|
|
}
|
|
|
|
export function rethrowQueueError(err: unknown): never {
|
|
const wsErr = asWSError(err);
|
|
if (wsErr?.code === "queue_full") {
|
|
const size = typeof wsErr.details?.queue_size === "number" ? wsErr.details.queue_size : 0;
|
|
const max = typeof wsErr.details?.max === "number" ? wsErr.details.max : 0;
|
|
throw new QueueFullError(size, max);
|
|
}
|
|
if (wsErr?.code === "entry_not_found") {
|
|
throw new QueueEntryNotFoundError();
|
|
}
|
|
if (wsErr?.message) {
|
|
throw new Error(wsErr.message);
|
|
}
|
|
throw err instanceof Error ? err : new Error(String(err));
|
|
}
|
|
|
|
export type QueueMessageParams = {
|
|
session_id: string;
|
|
task_id: string;
|
|
content: string;
|
|
model?: string;
|
|
plan_mode?: boolean;
|
|
attachments?: Array<{ type: string; data: string; mime_type: string }>;
|
|
user_id?: string;
|
|
};
|
|
|
|
/** Append a new entry to the session's FIFO queue. Throws QueueFullError on overflow. */
|
|
export async function queueMessage(params: QueueMessageParams): Promise<QueuedMessage> {
|
|
const client = getWebSocketClient();
|
|
if (!client) {
|
|
throw new Error(WS_CLIENT_UNAVAILABLE);
|
|
}
|
|
try {
|
|
return await client.request<QueuedMessage>("message.queue.add", params);
|
|
} catch (err) {
|
|
rethrowQueueError(err);
|
|
}
|
|
}
|
|
|
|
/** Clear every pending entry for the session. */
|
|
export async function clearQueue(sessionId: string): Promise<{ removed: number }> {
|
|
const client = getWebSocketClient();
|
|
if (!client) {
|
|
throw new Error(WS_CLIENT_UNAVAILABLE);
|
|
}
|
|
return client.request<{ removed: number }>("message.queue.cancel", { session_id: sessionId });
|
|
}
|
|
|
|
/** Fetch the full queue snapshot (entries + capacity). */
|
|
export async function getQueueStatus(sessionId: string): Promise<QueueStatus> {
|
|
const client = getWebSocketClient();
|
|
if (!client) {
|
|
throw new Error(WS_CLIENT_UNAVAILABLE);
|
|
}
|
|
return client.request<QueueStatus>("message.queue.get", { session_id: sessionId });
|
|
}
|
|
|
|
/** Append content onto the tail entry when the same caller authored it; otherwise insert a new entry. */
|
|
export async function appendToQueue(params: {
|
|
session_id: string;
|
|
task_id: string;
|
|
content: string;
|
|
model?: string;
|
|
plan_mode?: boolean;
|
|
user_id?: string;
|
|
}): Promise<{ entry_id: string; was_append: boolean }> {
|
|
const client = getWebSocketClient();
|
|
if (!client) {
|
|
throw new Error(WS_CLIENT_UNAVAILABLE);
|
|
}
|
|
try {
|
|
return await client.request<{ entry_id: string; was_append: boolean }>(
|
|
"message.queue.append",
|
|
params,
|
|
);
|
|
} catch (err) {
|
|
rethrowQueueError(err);
|
|
}
|
|
}
|
|
|
|
/** Replace the content/attachments of a queued entry. Throws QueueEntryNotFoundError if drained. */
|
|
export async function updateQueuedMessage(params: {
|
|
session_id: string;
|
|
entry_id: string;
|
|
content: string;
|
|
attachments?: Array<{ type: string; data: string; mime_type: string }>;
|
|
user_id?: string;
|
|
}): Promise<{ entry_id: string }> {
|
|
const client = getWebSocketClient();
|
|
if (!client) {
|
|
throw new Error(WS_CLIENT_UNAVAILABLE);
|
|
}
|
|
try {
|
|
return await client.request<{ entry_id: string }>("message.queue.update", params);
|
|
} catch (err) {
|
|
rethrowQueueError(err);
|
|
}
|
|
}
|
|
|
|
/** Remove a single queued entry by id. Throws QueueEntryNotFoundError if drained. */
|
|
export async function removeQueuedEntry(params: {
|
|
session_id: string;
|
|
entry_id: string;
|
|
}): Promise<{ entry_id: string }> {
|
|
const client = getWebSocketClient();
|
|
if (!client) {
|
|
throw new Error(WS_CLIENT_UNAVAILABLE);
|
|
}
|
|
try {
|
|
return await client.request<{ entry_id: string }>("message.queue.remove", params);
|
|
} catch (err) {
|
|
rethrowQueueError(err);
|
|
}
|
|
}
|