8d72e1d27e
ci / rust (push) Has been cancelled
android / android (push) Has been cancelled
apple / swift (push) Has been cancelled
apple / screenshots (push) Has been cancelled
arch / build-publish (push) Has been cancelled
ci / web (push) Has been cancelled
ci / bench (push) Has been cancelled
ci / docs-site (push) Has been cancelled
deb / build-publish-host (push) Has been cancelled
deb / build-publish (push) Has been cancelled
decky / build-publish (push) Has been cancelled
docker / build-push (ci, ci/rust-ci-noble.Dockerfile, punktfunk-rust-ci-noble) (push) Has been cancelled
docker / build-push (ci, ci/rust-ci.Dockerfile, punktfunk-rust-ci) (push) Has been cancelled
docker / build-push (docs-site, docs-site/Dockerfile, punktfunk-docs) (push) Has been cancelled
docker / deploy-docs (push) Has been cancelled
docker / build-push (ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora-rpm) (push) Has been cancelled
docker / build-push (--build-arg FEDORA_VERSION=44, ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora44-rpm) (push) Has been cancelled
docker / build-push (., web/Dockerfile, punktfunk-web) (push) Has been cancelled
rpm / build-publish (44, fedora-44, punktfunk-fedora44-rpm) (push) Has been cancelled
rpm / build-publish (43, bazzite, punktfunk-fedora-rpm) (push) Has been cancelled
windows-host / package (push) Has been cancelled
The ~80% of every plugin that was copy-pasted (rom-manager ↔ playnite), extracted as one Effect-v4 package: - runtime: definePluginKit — async-main boundary hiding a ManagedRuntime (two-effect-instances discipline), signal-driven interruption with a bounded shutdown grace - config: Schema-driven raw round-trip (defaults only in the Schema via withDecodingDefaultKey + encodingStrategy omit; file stays authored-shape), atomic writes, world-writable refusal, changes stream - cache-store: disposable derived state, corrupt→empty, write-through - reconcile: kit-owned provider wire schemas + typed client over the skew-safe untyped pf.request seam - sync-engine: generic poll/watch/debounce/single-flight-coalesce/ fingerprint-skip engine with a status PubSub (the SSE feed) - ui-server + sse: effect/unstable/httpapi behind servePluginUi with core-only env layers (validated by the phase-0 spikes); raw SSE route (httpapi has no event-stream media type) - cli: minimal command dispatcher reusing the plugin layer graph (deliberately not effect/unstable/cli — it needs platform packages) - react subpath: plugin router (path→hash→fallback deep-link restore + pf-ui:navigate bridge), ResultGate, sseAtom, resolvePluginBase - theme.css: the console's violet identity packaged for plugin UIs 18 bun tests incl. the two phase-0 spikes; publish workflow mirrors sdk-publish (tag plugin-kit-v*; 0.1.0 published manually). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
135 lines
4.5 KiB
TypeScript
135 lines
4.5 KiB
TypeScript
// The async-main boundary — the one place the two-effect-instances problem is handled.
|
|
//
|
|
// The packaged runner bundles its OWN copy of effect + the SDK; a plugin package's imports
|
|
// resolve to the plugin's node_modules. An Effect-shaped `main` would therefore hand the
|
|
// runner Effect values built by a different effect instance (Context.Tag identity is not
|
|
// shared across instances). The kit sidesteps this by construction: the plugin exports a
|
|
// plain async `main`, and EVERYTHING Effect happens inside a ManagedRuntime built from the
|
|
// plugin's own effect instance. Only the plain `pf` facade object crosses the boundary.
|
|
//
|
|
// Shutdown: the runner interrupts its supervision tree on SIGINT/SIGTERM, but it cannot
|
|
// cancel an in-flight promise — so the kit installs its own signal hooks, interrupts the
|
|
// plugin fiber (running scoped finalizers: UI deregistration, watcher close, cache flush)
|
|
// and bounds the whole teardown with `shutdownGraceMs` so `main` always resolves.
|
|
import {
|
|
definePlugin,
|
|
type PluginDef,
|
|
type Punktfunk,
|
|
connect,
|
|
} from "@punktfunk/host";
|
|
import {
|
|
Cause,
|
|
Effect,
|
|
Exit,
|
|
Fiber,
|
|
Layer,
|
|
ManagedRuntime,
|
|
Scope,
|
|
} from "effect";
|
|
import {
|
|
type HostClient,
|
|
hostClientFromFacade,
|
|
type PluginInfo,
|
|
pluginInfoLayer,
|
|
} from "./host-client.js";
|
|
import { loggingLayer } from "./logging.js";
|
|
|
|
export interface PluginKitDef<E, R> {
|
|
/** Plugin id (`[a-z][a-z0-9-]*`) — also the registry id and provider id. */
|
|
readonly name: string;
|
|
readonly version?: string;
|
|
/** The plugin's service graph, built over the kit base (HostClient | PluginInfo). */
|
|
readonly layer: Layer.Layer<R, E, HostClient | PluginInfo>;
|
|
/** The long-running program. Scoped: acquired resources release on interruption. */
|
|
readonly main: Effect.Effect<
|
|
void,
|
|
E,
|
|
R | HostClient | PluginInfo | Scope.Scope
|
|
>;
|
|
/** Upper bound on graceful teardown after a signal (default 5000 ms). */
|
|
readonly shutdownGraceMs?: number;
|
|
}
|
|
|
|
const sleep = (ms: number): Promise<"timeout"> =>
|
|
new Promise((resolve) => {
|
|
const t = setTimeout(() => resolve("timeout"), ms);
|
|
(t as { unref?: () => void }).unref?.();
|
|
});
|
|
|
|
const runWithFacade = async <E, R>(
|
|
def: PluginKitDef<E, R>,
|
|
pf: Punktfunk,
|
|
): Promise<void> => {
|
|
const base = Layer.mergeAll(
|
|
hostClientFromFacade(pf),
|
|
pluginInfoLayer({ name: def.name, version: def.version }),
|
|
loggingLayer(def.name),
|
|
);
|
|
const rt = ManagedRuntime.make(Layer.provideMerge(def.layer, base));
|
|
const graceMs = def.shutdownGraceMs ?? 5000;
|
|
|
|
const fiber = rt.runFork(Effect.scoped(def.main));
|
|
|
|
// Fires graceMs after the first signal; never before a signal — so racing against it
|
|
// is a no-op in normal operation and a hard teardown bound once a stop is requested.
|
|
let fireGrace: (v: "timeout") => void = () => {};
|
|
const gracePromise = new Promise<"timeout">((resolve) => {
|
|
fireGrace = resolve;
|
|
});
|
|
let stopping = false;
|
|
const onSignal = () => {
|
|
if (stopping) return;
|
|
stopping = true;
|
|
void sleep(graceMs).then(fireGrace);
|
|
rt.runFork(Fiber.interrupt(fiber));
|
|
};
|
|
process.on("SIGINT", onSignal);
|
|
process.on("SIGTERM", onSignal);
|
|
|
|
try {
|
|
const joined = rt.runPromise(Effect.exit(Fiber.join(fiber)));
|
|
const exit = await Promise.race([joined, gracePromise]);
|
|
if (exit === "timeout") {
|
|
console.error(
|
|
`[${def.name}] shutdown exceeded ${graceMs}ms — abandoning teardown`,
|
|
);
|
|
return;
|
|
}
|
|
if (Exit.isFailure(exit)) {
|
|
const cause = exit.cause;
|
|
// Pure interruption (signal-driven) is a clean stop; real failures propagate so
|
|
// the runner records the crash and restarts with backoff.
|
|
if (Cause.hasFails(cause) || Cause.hasDies(cause)) {
|
|
throw new Error(Cause.pretty(cause));
|
|
}
|
|
}
|
|
} finally {
|
|
process.removeListener("SIGINT", onSignal);
|
|
process.removeListener("SIGTERM", onSignal);
|
|
await Promise.race([rt.dispose(), sleep(2000)]);
|
|
}
|
|
};
|
|
|
|
/**
|
|
* Build the plugin's `PluginDef` (the default export the runner discovers) from an
|
|
* Effect-native definition. The returned def has a plain async `main`, so the runner's
|
|
* sanity checks and supervision treat it exactly like any hand-written plugin.
|
|
*/
|
|
export const definePluginKit = <E, R>(def: PluginKitDef<E, R>): PluginDef =>
|
|
definePlugin({
|
|
name: def.name,
|
|
main: (pf: Punktfunk) => runWithFacade(def, pf),
|
|
});
|
|
|
|
/** Dev/CLI entry: `connect()` a facade ourselves and run the same program. */
|
|
export const runPluginKitDirect = async <E, R>(
|
|
def: PluginKitDef<E, R>,
|
|
): Promise<void> => {
|
|
const pf = await connect();
|
|
try {
|
|
await runWithFacade(def, pf);
|
|
} finally {
|
|
pf.close();
|
|
}
|
|
};
|