feat(control-plane): integration interface for task sources

README.md

@@ -266,8 +266,8 @@ To report a vulnerability, see [SECURITY.md](SECURITY.md).
   reasoning, on port 80 or 443 under a DNS name.
 - New tasks come from the CLI and Linear. On GitHub, DevBox only picks up
   follow-ups on its own pull requests; it doesn't start work from GitHub
-  issues. Slack gets only completion updates for Linear tasks. No Jira and no
-  web UI.
+  issues. Slack gets only completion updates, for Linear tasks unless
+  configured for API tasks too. No Jira and no web UI.
 - Stopping a task from Linear isn't supported yet.
 - No stable extension interface. [docs/extending.md](docs/extending.md) shows where hooks would go.
 

cli/interface/commands/ls.ts

@@ -15,6 +15,8 @@ export type LsArgs = CommonArgs & {
 };
 
 const HEADER = ["KEY", "STATE", "TITLE", "DESCRIPTION", "CREATOR", "AGE"];
+// Every task source; the compiler fails here until a new one is listed.
+const SOURCES = Object.keys({ api: true, linear: true } satisfies Record<ApiTaskSource, true>);
 
 export function render(
   tasks: ApiTask[],
@@ -73,7 +75,7 @@ export const ls: CommandModule = {
         .command("ls")
         .description("List tasks, newest first")
         .addOption(
-          new Option("--source <source>", "only tasks from this source").choices(["api", "linear"]),
+          new Option("--source <source>", "only tasks from this source").choices(SOURCES),
         )
         .option("--mine", "only tasks created with your token")
         .addOption(

control-plane/.env.example

@@ -15,6 +15,9 @@ LINEAR_ENABLED=false
 SLACK_ENABLED=false
 # SLACK_BOT_TOKEN=<slack-bot-token>
 # SLACK_CHANNEL_ID=<slack-channel-id>
+# Task sources whose finished tasks post, comma-separated: linear, api.
+# Default: linear.
+# SLACK_NOTIFY_SOURCES=linear
 
 # The CP's own GitHub token. The Docker Compose stack (`bun run up`) does not
 # read this file: it passes GITHUB_TOKEN from the shell, `gh auth token` or a

control-plane/docker-compose.yml

@@ -93,6 +93,10 @@ services:
     image: devbox-control-plane
     build: *control-plane-build
     restart: unless-stopped
+    # Shutdown finishes the event it is handling (the rest of a task's
+    # reconcile: up to 90s when platforms are slow), then drains for
+    # SHUTDOWN_DRAIN_MS (10s); Compose's default 10s would cut both short.
+    stop_grace_period: 150s
     # Explicit, with no env_file. Only allowlisted HARNESS_* settings cross
     # into sandboxes, and a forwarded name must never hold a real secret.
     environment:

control-plane/drizzle/0001_inbox_source_kind_external.sql

@@ -0,0 +1,2 @@
+SET LOCAL lock_timeout = '5s';--> statement-breakpoint
+CREATE UNIQUE INDEX "inbox_source_kind_external_uniq" ON "inbox" USING btree ("source","kind","external_id");

control-plane/drizzle/0002_tasks_key_lower.sql

@@ -0,0 +1,3 @@
+SET LOCAL lock_timeout = '5s';--> statement-breakpoint
+CREATE UNIQUE INDEX "tasks_key_lower_uniq" ON "tasks" USING btree (lower("key"));--> statement-breakpoint
+DROP INDEX "tasks_key_uniq";