authz_mixin, browser_control_broker, delivery, delivery_ledger, display_config, drain_control, hosted_room_links/peer/policy_checkpoint, hosted_rooms, platform_registry, relay/__init__, relay/ws_transport, run.py and slash_commands.py (comments), session_context, session_state, streaming_tts_consumer, turn_lease and small modules. - HostedRoomPolicyCheckpoint._apply_event -> per-kind handler table - WebSocketRelayTransport._handle_frame -> frame-handler table - GatewayAuthorizationMixin: unified adapter setting/flag/extra readers - dead symbols removed (verified zero references): RoomLinkProbe/select_room_link, relay_bot_username, is_restart_loop_tripped, debug_rows, DeadTargetRegistry.all_dead, BrowserControlBroker.detach_owner/_prune_tickets, StreamingTTSConsumer.started/_enqueue_done/ _iter_stream_chunks/_next_stream_chunk, RecoverableHandleCache.status_for, _auth_env, _copy_default_catalog, _parse_timestamp_prefix, _present_* helpers, _send_result_error_kind, _truthy_env, SessionFieldView/TurnLeaseTokenView dunder shims, and their orphaned tests. - lost WHY/invariant text from the earlier compaction restored compactly (541 hunks audited)
101 lines
3.8 KiB
Python
101 lines
3.8 KiB
Python
"""Disk-usage rollup for ``/api/status``.
|
|
|
|
Companion to :mod:`gateway.memory_status`: a hosted agent can fill its data
|
|
volume (SQLite writes failing, sessions and config saves lost) while its
|
|
dashboard and the NAS agent card look healthy. ``gateway/readiness.py``
|
|
already probes disk, but readiness is a component verdict, not user-facing
|
|
telemetry — this module produces the public block the dashboard SPA and the
|
|
NAS availability sweep consume.
|
|
|
|
Disk is sampled live via :func:`shutil.disk_usage` (one ``statvfs`` call), so
|
|
there is no staleness dimension and no ``sampled_at``.
|
|
|
|
Public-safety: ``/api/status`` is unauthenticated (``PUBLIC_API_PATHS``); this
|
|
block carries only coarse numbers (MB, one-decimal percent) and an enum — the same
|
|
disclosure class as the ``memory`` block.
|
|
|
|
Best-effort and read-only: an unreadable filesystem degrades to
|
|
``pressure="unknown"`` rather than raising into the status endpoint.
|
|
"""
|
|
|
|
from __future__ import annotations
|
|
|
|
import logging
|
|
import shutil
|
|
from pathlib import Path
|
|
from typing import Any, Dict, Optional
|
|
|
|
logger = logging.getLogger(__name__)
|
|
|
|
# Percent alone misleads both ways: 90% used on 100 GB leaves 10 GB, while 50%
|
|
# on a tiny volume is one download from write failures. So percent triggers are
|
|
# gated on absolute headroom also being low, and a hard absolute floor applies
|
|
# regardless of size (below it SQLite journaling / config writes are at risk).
|
|
_CRITICAL_FREE_MB = 256 # < 256 MB free: critical on any volume
|
|
_CRITICAL_PERCENT = 95.0 # >= 95% used AND < 1 GB free: critical
|
|
_CRITICAL_HEADROOM_MB = 1024
|
|
_ELEVATED_FREE_MB = 512 # < 512 MB free: elevated on any volume
|
|
_ELEVATED_PERCENT = 85.0 # >= 85% used AND < 4 GB free: elevated
|
|
_ELEVATED_HEADROOM_MB = 4096
|
|
|
|
_BYTES_PER_MB = 1024 * 1024
|
|
|
|
|
|
def _coerce_mb(value: Any) -> Optional[int]:
|
|
if isinstance(value, bool) or not isinstance(value, int) or value < 0:
|
|
return None
|
|
return value
|
|
|
|
|
|
def classify_disk_pressure(free_mb: Any, total_mb: Any) -> str:
|
|
"""Map free/total MB to ``ok``/``elevated``/``critical``.
|
|
|
|
``unknown`` when the sample is missing or malformed — the caller must
|
|
not treat "we could not read it" as "disk is fine".
|
|
"""
|
|
free = _coerce_mb(free_mb)
|
|
total = _coerce_mb(total_mb)
|
|
if free is None or total is None or total <= 0:
|
|
return "unknown"
|
|
used_percent = (1 - free / total) * 100.0
|
|
for level, free_floor, percent_floor, headroom in (
|
|
("critical", _CRITICAL_FREE_MB, _CRITICAL_PERCENT, _CRITICAL_HEADROOM_MB),
|
|
("elevated", _ELEVATED_FREE_MB, _ELEVATED_PERCENT, _ELEVATED_HEADROOM_MB),
|
|
):
|
|
if free < free_floor or (used_percent >= percent_floor and free < headroom):
|
|
return level
|
|
return "ok"
|
|
|
|
|
|
def collect_disk_status(home: Optional[Path] = None) -> Dict[str, Any]:
|
|
"""Build the ``disk`` block for ``/api/status``.
|
|
|
|
``home`` scopes the sample to a profile's HERMES_HOME (same contract as the
|
|
``memory`` block; on hosted images every profile shares one volume).
|
|
Always returns a dict and never raises — an unreadable/unmounted filesystem
|
|
yields ``{"pressure": "unknown", ...}``.
|
|
"""
|
|
status: Dict[str, Any] = {
|
|
"pressure": "unknown",
|
|
"total_mb": None,
|
|
"free_mb": None,
|
|
"used_percent": None,
|
|
}
|
|
try:
|
|
if home is None:
|
|
from hermes_constants import get_hermes_home
|
|
|
|
home = get_hermes_home()
|
|
usage = shutil.disk_usage(home)
|
|
except Exception:
|
|
return status
|
|
if usage.total <= 0:
|
|
return status
|
|
total_mb = usage.total // _BYTES_PER_MB
|
|
free_mb = usage.free // _BYTES_PER_MB
|
|
status["total_mb"] = total_mb
|
|
status["free_mb"] = free_mb
|
|
status["used_percent"] = round((usage.used / usage.total) * 100, 1)
|
|
status["pressure"] = classify_disk_pressure(free_mb, total_mb)
|
|
return status
|