mirror of
https://github.com/kuhyx/signal-bot.git
synced 2026-11-11 12:57:32 +01:00
Release n is pope n, so the version is a fact about the ordinal rather than a judgement about the size of a change. The constraint that fixes the scheme is Jan Pawel II at 2.13.7: eight patches per minor with majors opening at ordinals 33 and 153 gives (264 - 153) = 13 * 8 + 7 exactly, and both earlier majors happen to divide evenly by eight too, so no bracket needs a fudge factor. The anchors are not arbitrary -- 33 is Sylwester I, pope through the Edict of Milan and Nicaea, and 153 is Wiktor II, the first pope elected after the 1054 schism. popes.json is scraped by tool/gen_popes.py rather than recalled, because antipopes, Benedykt IX's three separate reigns and the Stefan II question all shift the count and being wrong by one moves Jan Pawel II off 2.13.7 silently. The generator refuses to write a list that is not 267 contiguous entries with Jan Pawel II at 264. A second, independent parse of the same page agreed on every ordinal, which is the only reason to believe either. On startup each watched group is told about the releases it has not seen. A group with no record has seen none of them, so the first announcement starts at 0.0.0 "Swiety Piotr Apostol" rather than skipping to whatever is current -- watching the ladder start at Peter is the point of naming releases after popes. A group added years from now would otherwise be handed the whole backlog, so the message is capped at ten releases and says how many it left out. The version is recorded before the message is sent: with Restart=always and RestartSec=5, a crash between the two would re-announce on every restart, and a missed announcement is far cheaper than a looping one. DOCS-changelog.md is the single source -- the bot parses it, so there is no second machine-readable copy to drift. It is DOCS-, not CHANGELOG.md, because the md-naming gate allows four namespaces and that is not one of them. Deliberately NOT bumping SCHEMA_VERSION for the new group_meta table: _apply_schema drops every table on a bump, so bumping to add a table would have thrown away the live tallies to gain nothing. Verified against the real database -- group_meta appeared and all four counts survived the restart. The schema moves to its own module so store.py stays under the 250-line cap, and /healthz now names the build, because there was previously no way to ask a running bot which version it is. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_015d48t4qsQLBJnDwDeo2Nom
243 lines
8.3 KiB
Python
243 lines
8.3 KiB
Python
# Copyright (c) 2026 Krzysztof Rudnicki. MIT licence.
|
|
"""Application wiring and the ASGI entrypoint."""
|
|
|
|
from __future__ import annotations
|
|
|
|
import asyncio
|
|
import contextlib
|
|
import datetime as dt
|
|
import logging
|
|
from dataclasses import dataclass, field
|
|
from typing import TYPE_CHECKING
|
|
|
|
if TYPE_CHECKING:
|
|
from collections.abc import AsyncIterator
|
|
|
|
from signal_bot.transport_base import Transport
|
|
|
|
import httpx
|
|
from fastapi import FastAPI, Response, status
|
|
|
|
from signal_bot.animals import register_animal_commands
|
|
from signal_bot.announce import announce_all
|
|
from signal_bot.changelog import load as load_changelog
|
|
from signal_bot.config import Config, load_config
|
|
from signal_bot.counting import format_tally
|
|
from signal_bot.decorators import cooldown
|
|
from signal_bot.discovery import GroupDirectory
|
|
from signal_bot.dispatcher import Dispatcher
|
|
from signal_bot.http_client import ImageFetcher
|
|
from signal_bot.liveness import Liveness
|
|
from signal_bot.registry import CommandRegistry
|
|
from signal_bot.scheduler import DailyScheduler
|
|
from signal_bot.store import Store
|
|
from signal_bot.transport_rest import RestTransport
|
|
from signal_bot.trust import InviteTrust
|
|
from signal_bot.versioning import POPE, __version__
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
COOLDOWN_MESSAGE = "BEEP BOOP POCZEKAJ {seconds} SEKUND."
|
|
HTTP_TIMEOUT_SECONDS = 30.0
|
|
|
|
|
|
def now_local() -> dt.datetime:
|
|
"""Current local time, timezone-aware."""
|
|
return dt.datetime.now().astimezone()
|
|
|
|
|
|
@dataclass
|
|
class Bot:
|
|
"""The wired-up bot and its two long-running loops."""
|
|
|
|
config: Config
|
|
store: Store
|
|
transport: Transport
|
|
directory: GroupDirectory
|
|
dispatcher: Dispatcher
|
|
liveness: Liveness
|
|
|
|
async def publish_report(self) -> None:
|
|
"""Post each group's own tally into that group, and reset it.
|
|
|
|
Each group is isolated on purpose. One group refusing the report --
|
|
the bot removed from it, a transient send failure -- must not cost
|
|
every other group its report, and a tally is cleared only after its
|
|
report has actually gone out, so a failed send loses nothing. A
|
|
group where nobody spoke is skipped entirely.
|
|
"""
|
|
for group_id in self.directory.groups:
|
|
rows = [(t.display_name or t.uuid, t.count) for t in self.store.tallies(group_id)]
|
|
if not rows:
|
|
# Logged, not posted. The bot is in every group it was ever
|
|
# added to, so posting "nobody spoke" would mean a nightly
|
|
# ping into every quiet group, forever.
|
|
logger.info("no messages in %s today; not posting a report", group_id)
|
|
continue
|
|
try:
|
|
await self.transport.send_text(format_tally(rows), group_id)
|
|
except Exception:
|
|
logger.exception("daily report failed for group %s", group_id)
|
|
continue
|
|
self.store.reset_tallies(group_id)
|
|
|
|
async def announce_release(self) -> None:
|
|
"""Tell every watched group about a version it has not seen yet."""
|
|
await announce_all(
|
|
self.transport,
|
|
self.store,
|
|
list(self.directory.groups),
|
|
load_changelog(),
|
|
__version__,
|
|
POPE.name,
|
|
)
|
|
|
|
async def listen(self) -> None:
|
|
"""Consume frames forever, handing each to the dispatcher."""
|
|
async for frame in self.transport.receive():
|
|
# Every frame counts, including receipts and typing indicators:
|
|
# the question this answers is "can anything still reach us?",
|
|
# not "did anybody address the bot?".
|
|
self.liveness.note_envelope()
|
|
await self.dispatcher.handle(frame)
|
|
|
|
|
|
def build_bot(
|
|
config: Config,
|
|
client: httpx.AsyncClient,
|
|
store: Store,
|
|
transport: Transport,
|
|
directory: GroupDirectory,
|
|
liveness: Liveness,
|
|
) -> Bot:
|
|
"""Assemble the object graph from its injected dependencies."""
|
|
registry = CommandRegistry()
|
|
register_animal_commands(
|
|
registry,
|
|
ImageFetcher(client),
|
|
decorate=cooldown(config.cooldown_seconds, COOLDOWN_MESSAGE),
|
|
endpoints={"cat": config.cat_api_url, "dog": config.dog_api_url},
|
|
)
|
|
dispatcher = Dispatcher(
|
|
config=config,
|
|
directory=directory,
|
|
registry=registry,
|
|
store=store,
|
|
transport=transport,
|
|
clock=now_local,
|
|
)
|
|
return Bot(
|
|
config=config,
|
|
store=store,
|
|
transport=transport,
|
|
directory=directory,
|
|
dispatcher=dispatcher,
|
|
liveness=liveness,
|
|
)
|
|
|
|
|
|
@dataclass
|
|
class Runtime:
|
|
"""Owns everything that must be torn down when the app stops."""
|
|
|
|
bot: Bot
|
|
client: httpx.AsyncClient
|
|
store: Store
|
|
tasks: list[asyncio.Task[None]] = field(default_factory=list)
|
|
|
|
def start(self) -> None:
|
|
"""Spawn the listener and the daily scheduler as background tasks."""
|
|
scheduler = DailyScheduler(
|
|
self.bot.config.report_hour,
|
|
self.bot.config.report_minute,
|
|
self.bot.publish_report,
|
|
now_local,
|
|
asyncio.sleep,
|
|
)
|
|
self.tasks = [
|
|
asyncio.create_task(self.bot.listen()),
|
|
asyncio.create_task(scheduler.run()),
|
|
# Third loop: without it, a group added later is only noticed
|
|
# when somebody happens to speak in it.
|
|
asyncio.create_task(self.bot.directory.run()),
|
|
# Fourth loop: without it, a dead connection to Signal is
|
|
# indistinguishable from a quiet evening, for hours.
|
|
asyncio.create_task(self.bot.liveness.run()),
|
|
# Fifth, and one-shot: says hello with a changelog when the
|
|
# running version is newer than what a group was last told.
|
|
asyncio.create_task(self.bot.announce_release()),
|
|
]
|
|
|
|
async def stop(self) -> None:
|
|
"""Cancel the background tasks and close every resource."""
|
|
for task in self.tasks:
|
|
task.cancel()
|
|
for task in self.tasks:
|
|
with contextlib.suppress(asyncio.CancelledError):
|
|
await task
|
|
await self.client.aclose()
|
|
self.store.close()
|
|
|
|
|
|
async def create_runtime(config: Config, client: httpx.AsyncClient) -> Runtime:
|
|
"""Build a Runtime, verifying the container exposes a WebSocket first."""
|
|
store = Store(config.database_path)
|
|
transport = RestTransport(config, client)
|
|
await transport.verify_mode()
|
|
directory = GroupDirectory(config, client, store, InviteTrust(config.trusted_inviters))
|
|
await directory.refresh()
|
|
await directory.verify_allowlist()
|
|
# No probe here: /v1/devices has been seen to hang past 20s, and a
|
|
# startup that can hang is a startup that can burn the unit's restart
|
|
# limit. The gate starts healthy and earns its verdict at runtime.
|
|
liveness = Liveness(config, client)
|
|
return Runtime(
|
|
bot=build_bot(config, client, store, transport, directory, liveness),
|
|
client=client,
|
|
store=store,
|
|
)
|
|
|
|
|
|
@contextlib.asynccontextmanager
|
|
async def lifespan(app: FastAPI) -> AsyncIterator[None]:
|
|
"""Start the background tasks without blocking ASGI startup.
|
|
|
|
The previous version awaited asyncio.gather() on two infinite tasks inside
|
|
an on_event("startup") handler, so uvicorn never finished starting up and
|
|
the HTTP app never began serving.
|
|
"""
|
|
config = load_config()
|
|
client = httpx.AsyncClient(timeout=HTTP_TIMEOUT_SECONDS)
|
|
runtime = await create_runtime(config, client)
|
|
runtime.start()
|
|
logger.info(
|
|
"listening as %s, watching %d group(s): %r",
|
|
config.phone_number,
|
|
len(runtime.bot.directory.groups),
|
|
list(runtime.bot.directory.groups),
|
|
)
|
|
app.state.runtime = runtime
|
|
try:
|
|
yield
|
|
finally:
|
|
await runtime.stop()
|
|
|
|
|
|
app = FastAPI(lifespan=lifespan)
|
|
|
|
|
|
@app.get("/healthz")
|
|
async def healthz(response: Response) -> dict[str, str]:
|
|
"""Liveness probe, and the only place the bot admits it has gone deaf.
|
|
|
|
Answering 200 while nothing can reach Signal is what let a three-hour
|
|
outage look like a quiet evening, so this must go red before anybody
|
|
thinks to look at the logs.
|
|
"""
|
|
liveness: Liveness = app.state.runtime.bot.liveness
|
|
build = {"version": __version__, "pope": POPE.name}
|
|
if liveness.healthy:
|
|
return {"status": "ok", **build}
|
|
response.status_code = status.HTTP_503_SERVICE_UNAVAILABLE
|
|
return {"status": "deaf", "reason": liveness.reason, **build}
|