From 82107f73ebd8e2df76d9198c549382f7f3555bed Mon Sep 17 00:00:00 2001 From: Eric Wagoner Date: Tue, 20 Oct 2026 13:21:24 -0400 Subject: [PATCH] The keeper can say a word at a table through the keeper's door, signed as the keeper and heard whether or not the gallery may talk, so a call answered too late, after the game began, can still be answered; -say.sh sends it Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_0141G6xqLeNRYEtviLWSB5Up --- deploy/README.md | 3 +++ deploy/deploy.sh | 1 + deploy/hnefatafl-say.sh | 18 ++++++++++++++++++ docs/conventions.md | 2 ++ server/src/index.ts | 6 ++++++ server/src/rooms.test.ts | 10 ++++++++++ server/src/rooms.ts | 7 ++++++- server/src/store.ts | 2 +- src/lib/components/TableTalk.svelte | 2 +- src/lib/net/view.ts | 2 ++ 10 files changed, 50 insertions(+), 3 deletions(-) create mode 100755 deploy/hnefatafl-say.sh diff --git a/deploy/README.md b/deploy/README.md index a754c1a..c9d4fa1 100644 --- a/deploy/README.md +++ b/deploy/README.md @@ -55,6 +55,9 @@ deploy, so the live copies are the repo copies: - `hnefatafl-visitors.sh [day]`: who is here now and who came that day. - `hnefatafl-reseat.sh ROOM [SEAT]`: who sits at a table; with a seat, a new token for a player locked out of it, as a link to send them. +- `hnefatafl-say.sh ROOM "text"`: a word from the keeper in a table's talk, + signed as the keeper, through the same door; it is heard whether or not + the gallery may talk, so a call that came too late can be answered. - `hnefatafl-pulse.sh`: the weekly health check (service, errors, rollup trend, backup, box). - `hnefatafl-rollup.sh [day]`: one JSON line per day of counts, run diff --git a/deploy/deploy.sh b/deploy/deploy.sh index 170675a..709532c 100755 --- a/deploy/deploy.sh +++ b/deploy/deploy.sh @@ -43,6 +43,7 @@ ssh "root@$HOST" ' install -m 755 /opt/hnefatafl/app/deploy/hnefatafl-rollup.sh /usr/local/bin/hnefatafl-rollup.sh install -m 755 /opt/hnefatafl/app/deploy/hnefatafl-backup.sh /usr/local/bin/hnefatafl-backup.sh install -m 755 /opt/hnefatafl/app/deploy/hnefatafl-reseat.sh /usr/local/bin/hnefatafl-reseat.sh + install -m 755 /opt/hnefatafl/app/deploy/hnefatafl-say.sh /usr/local/bin/hnefatafl-say.sh # The key to the keeper door: made once, readable by root (the reseat script) and the game user (the server) alone. if [ ! -s /etc/hnefatafl/keeper.key ]; then install -d -m 750 -o root -g hnefatafl /etc/hnefatafl diff --git a/deploy/hnefatafl-say.sh b/deploy/hnefatafl-say.sh new file mode 100755 index 0000000..74b37a7 --- /dev/null +++ b/deploy/hnefatafl-say.sh @@ -0,0 +1,18 @@ +#!/usr/bin/env bash +# A word from the keeper in a table's talk, signed as the keeper, whether or +# not the host lets the gallery talk: the answer to a call that came too late, +# or anything else the table should hear from the keeper. Runs ON the droplet, +# through the game server's keeper door. +# hnefatafl-say.sh ROOM "text" +set -euo pipefail +ROOM="${1:?usage: hnefatafl-say.sh ROOM \"text\"}" +TEXT="${2:?usage: hnefatafl-say.sh ROOM \"text\"}" +DOOR="http://127.0.0.1:8789/keeper/rooms/${ROOM^^}" +[ -s /etc/hnefatafl/keeper.key ] || { echo "No keeper's key at /etc/hnefatafl/keeper.key; a deploy makes it." >&2; exit 1; } +# The key goes as a header read from a file descriptor, never on a command line another user could see. +KEY="@/dev/fd/3" +exec 3< <(printf 'x-keeper-key: %s\n' "$(cat /etc/hnefatafl/keeper.key)") +BODY=$(TEXT="$TEXT" python3 -c 'import json, os; print(json.dumps({"text": os.environ["TEXT"]}))') +CODE=$(curl -s -o /tmp/hnefatafl-say.$$ -w '%{http_code}' -X POST -H "$KEY" -H 'content-type: application/json' -d "$BODY" "$DOOR/say") +if [ "$CODE" = 204 ]; then echo "said at ${ROOM^^}"; else cat /tmp/hnefatafl-say.$$ >&2; echo >&2; rm -f /tmp/hnefatafl-say.$$; exit 1; fi +rm -f /tmp/hnefatafl-say.$$ diff --git a/docs/conventions.md b/docs/conventions.md index 4ee77d9..a9e5844 100644 --- a/docs/conventions.md +++ b/docs/conventions.md @@ -147,6 +147,8 @@ Every game gets the same tools, installed by `deploy.sh` on every deploy: time are marked NEW. - `-reseat.sh ROOM [SEAT]`: who sits at a table and when each last acted; with a seat, a new token for a player locked out, as a link. +- `-say.sh ROOM "text"`: a word from the keeper in a table's talk, + signed as the keeper, whether or not the gallery may talk. - `-pulse.sh` (skill `-pulse`): service health, journal errors, the rollup's last week, the backup's last word, the box's vitals. - `-rollup.sh` nightly at 00:12 UTC: one JSON line a day of counts, diff --git a/server/src/index.ts b/server/src/index.ts index eeec5e3..120f6f2 100644 --- a/server/src/index.ts +++ b/server/src/index.ts @@ -31,6 +31,7 @@ // // GET /keeper/rooms/:id who sits at the table, and when each person last moved or spoke // POST /keeper/rooms/:id/reseat {seat} a new token for a player locked out, as a link to send them +// POST /keeper/rooms/:id/say {text} a word from the keeper in the table's talk import * as Sentry from '@sentry/node'; import { createServer, type IncomingMessage, type ServerResponse } from 'node:http'; @@ -223,6 +224,11 @@ async function handleKeeper(req: IncomingMessage, res: ServerResponse, parts: st // The token rides the fragment, which the browser keeps to itself: it reaches neither Caddy's log nor this server. return send(res, 200, { name: seat.name, link: `${PUBLIC_URL}/join/${room.id}#seat=${seat.id}.${token}` }); } + if (parts[3] === 'say' && parts.length === 4 && req.method === 'POST') { + const body = await readBody(req); + rooms.keeperSays(room, body.text); + return send(res, 204, {}); + } throw new RoomError('Not here.', 404); } diff --git a/server/src/rooms.test.ts b/server/src/rooms.test.ts index 38b33c2..6faefbf 100644 --- a/server/src/rooms.test.ts +++ b/server/src/rooms.test.ts @@ -5,6 +5,7 @@ import { afterEach, beforeEach, describe, expect, it } from 'vitest'; import { game } from '../../src/lib/game'; import { Rooms } from './rooms'; import { Store } from './store'; +import { SPECTATOR } from '../../src/lib/game/spec'; let dir: string; beforeEach(() => { @@ -24,6 +25,15 @@ function table() { } describe('rooms', () => { + it("puts the keeper's word in the table's talk though the gallery may not talk, and a restart keeps it", () => { + const { rooms, room } = table(); + expect(room.galleryTalk).toBe(false); + rooms.keeperSays(room, 'I came too late for the seat; call me again.'); + const said = { id: SPECTATOR, name: 'the keeper', keeper: true, text: 'I came too late for the seat; call me again.' }; + expect(room.chat.at(-1)).toMatchObject(said); + expect(new Rooms(game, new Store(dir)).get(room.id).chat.at(-1)).toMatchObject(said); + }); + it("gives a seat a new token at the keeper's word: the old one opens nothing, and a restart keeps the change", () => { const { rooms, room, bo } = table(); const phrase = rooms.transfer(room, bo).phrase; diff --git a/server/src/rooms.ts b/server/src/rooms.ts index 63b70b4..4d24da8 100644 --- a/server/src/rooms.ts +++ b/server/src/rooms.ts @@ -229,6 +229,11 @@ export class Rooms { this.commit(room, { t: 'galleryTalk', at: Date.now(), on, by: seat.id }); } + /** The keeper of the site says a word at a table from the keeper's door, whether or not the gallery may talk: the answer to a call they could not take up. */ + keeperSays(room: Room, raw: unknown): void { + this.commit(room, { t: 'chat', at: Date.now(), id: SPECTATOR, name: this.keeper.name, text: this.cleanTalk(raw), keeper: true }); + } + /** A word from the Peanut Gallery, when the host allows it: signed with a name no seat holds. */ sayFromGallery(room: Room, rawName: unknown, raw: unknown): void { if (!room.galleryTalk) throw new RoomError('The gallery listens at this table; the host has not let it talk.', 403); @@ -599,7 +604,7 @@ export class Rooms { room.resolved += 1; break; case 'chat': - room.chat.push({ id: line.id, text: line.text, at: line.at, ...(line.name ? { name: line.name } : {}) }); + room.chat.push({ id: line.id, text: line.text, at: line.at, ...(line.name ? { name: line.name } : {}), ...(line.keeper ? { keeper: true as const } : {}) }); if (room.chat.length > CHAT_KEEP) room.chat.splice(0, room.chat.length - CHAT_KEEP); break; } diff --git a/server/src/store.ts b/server/src/store.ts index 2a3f871..9a7a1c6 100644 --- a/server/src/store.ts +++ b/server/src/store.ts @@ -28,7 +28,7 @@ export type LedgerLine = /** Written after the turn that ends the game, for anything that reads ledgers without the engine. */ | { t: 'over'; at: number; winner: SeatId | null; reason: string } /** A line of table talk: from a seat, or, with `name`, from the Peanut Gallery (id SPECTATOR). */ - | { t: 'chat'; at: number; id: SeatId; text: string; name?: string } + | { t: 'chat'; at: number; id: SeatId; text: string; name?: string; keeper?: true } /** The host let the gallery talk, or hushed it. */ | { t: 'galleryTalk'; at: number; on: boolean; by: SeatId } /** A seat is held for the keeper of the site, called to the table. */ diff --git a/src/lib/components/TableTalk.svelte b/src/lib/components/TableTalk.svelte index 2d90d6c..6162322 100644 --- a/src/lib/components/TableTalk.svelte +++ b/src/lib/components/TableTalk.svelte @@ -47,7 +47,7 @@
  • Nobody has said a word.
    • {/if} {#each lines as line, i (line.at + ':' + i)} -
  • {line.name ? `${line.name} (gallery)` : line.id === room.me ? 'You' : room.nameOf(line.id)} {line.text}
    • +
  • {line.keeper ? `${line.name}, the keeper` : line.name ? `${line.name} (gallery)` : line.id === room.me ? 'You' : room.nameOf(line.id)} {line.text}
    • {/each} {#if room.spectating && room.view.galleryTalk} diff --git a/src/lib/net/view.ts b/src/lib/net/view.ts index 24746c4..b139ce2 100644 --- a/src/lib/net/view.ts +++ b/src/lib/net/view.ts @@ -9,6 +9,8 @@ export interface ChatLine { text: string; at: number; name?: string; + /** Said by the keeper of the site, through the keeper's door. */ + keeper?: true; } export interface RoomView {