[cueweb] Add Stuck Frames page (CueCommander parity)

cueweb/.env.example

@@ -1,5 +1,12 @@
 NEXT_PUBLIC_OPENCUE_ENDPOINT=http://your-rest-gateway-url.com
 
+# Optional allow-list for the Stuck Frames "Last Line" reader
+# (/api/stuck-frames/lastline), as a colon-separated list of absolute path
+# prefixes. When set, only .rqlog files under one of these roots are read.
+# When unset, reads are not restricted to a root (job log paths are
+# site-specific). Set this to harden the deployment.
+# CUEWEB_LOG_ROOTS=/mnt/logs:/shows
+
 # Sentry values
 SENTRY_ENVIRONMENT='development'
 SENTRY_DSN = sentrydsn

cueweb/app/api/layer/action/setmincores/route.ts

@@ -0,0 +1,54 @@
+/*
+ * Copyright Contributors to the OpenCue Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { handleRoute } from '@/app/utils/api_utils';
+import { NextRequest, NextResponse } from "next/server";
+
+// Set a layer's minimum cores (CueGUI Stuck Frame "Core Up"). Request:
+// { layer, cores }. RPC: /job.LayerInterface/SetMinCores.
+export async function POST(request: NextRequest) {
+  const endpoint = "/job.LayerInterface/SetMinCores";
+  const method = request.method;
+  if (method !== 'POST') {
+    return NextResponse.json({ error: 'Invalid method. Only POST is allowed.' }, { status: 405 });
+  }
+
+  let jsonBody: any;
+  try {
+    jsonBody = await request.json();
+  } catch {
+    return NextResponse.json({ error: 'Invalid JSON in request body' }, { status: 400 });
+  }
+  // cores is a float proto field (fractional core counts are valid), so reject
+  // only non-finite (typeof NaN is "number") and negative values, not fractions.
+  if (
+    !jsonBody ||
+    typeof jsonBody !== 'object' ||
+    !jsonBody.layer ||
+    typeof jsonBody.cores !== 'number' ||
+    !Number.isFinite(jsonBody.cores) ||
+    jsonBody.cores < 0
+  ) {
+    return NextResponse.json({ error: 'Invalid request body: layer and non-negative numeric cores are required' }, { status: 400 });
+  }
+
+  const body = JSON.stringify(jsonBody);
+  const response = await handleRoute(method, endpoint, body, true);
+  const responseData = await response.json();
+
+  if (!response.ok) return NextResponse.json({ error: responseData.error }, { status: response.status });
+  return NextResponse.json({ data: responseData.data }, { status: response.status });
+}

cueweb/app/api/stuck-frames/lastline/route.ts

@@ -0,0 +1,93 @@
+/*
+ * Copyright Contributors to the OpenCue Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { NextRequest, NextResponse } from "next/server";
+import { execFile as execFileCallback } from "child_process";
+import { promisify } from "util";
+import { promises as fs } from "fs";
+import path from "path";
+
+const execFile = promisify(execFileCallback);
+
+// Optional per-site allow-list (colon-separated absolute prefixes). When set,
+// only .rqlog files under one of these roots are read; when unset, reads aren't
+// restricted to a root (job log paths are site-specific).
+function allowedLogRoots(): string[] {
+  return (process.env.CUEWEB_LOG_ROOTS ?? "")
+    .split(":")
+    .map((r) => r.trim())
+    .filter(Boolean);
+}
+
+// Returns the last non-empty line of a frame's .rqlog (the Stuck Frames
+// "Last Line" column, mirroring CueGUI's getLastLine). Best-effort: if the log
+// filesystem isn't mounted in this deployment, or the file is missing, it
+// returns an empty line rather than erroring. execFile (no shell) + canonical
+// path validation (realpath, .rqlog extension, optional root allow-list) keep
+// the caller-supplied path from being abused.
+export async function GET(request: NextRequest) {
+  const rawPath = request.nextUrl.searchParams.get("path");
+  if (!rawPath || !rawPath.endsWith(".rqlog")) {
+    return NextResponse.json({ lastLine: "" }, { status: 200 });
+  }
+
+  // Canonicalize (follows symlinks) so the extension / root checks apply to the
+  // real file rather than a lexical path. A missing/unreadable file resolves to
+  // the best-effort empty response.
+  let target: string;
+  try {
+    target = await fs.realpath(path.resolve(rawPath));
+  } catch {
+    return NextResponse.json({ lastLine: "" }, { status: 200 });
+  }
+  if (!target.endsWith(".rqlog")) {
+    return NextResponse.json({ lastLine: "" }, { status: 200 });
+  }
+
+  const rawRoots = allowedLogRoots();
+  if (rawRoots.length > 0) {
+    const roots = (
+      await Promise.all(
+        rawRoots.map(async (r) => {
+          try {
+            return await fs.realpath(path.resolve(r));
+          } catch {
+            return null;
+          }
+        }),
+      )
+    ).filter((r): r is string => r !== null);
+    const inAllowedRoot = roots.some((root) => {
+      const rel = path.relative(root, target);
+      return rel === "" || (!rel.startsWith("..") && !path.isAbsolute(rel));
+    });
+    if (!inAllowedRoot) {
+      return NextResponse.json({ lastLine: "" }, { status: 200 });
+    }
+  }
+
+  try {
+    // tail the file, then keep the last non-blank line.
+    const { stdout } = await execFile("tail", ["-n", "20", "--", target], {
+      timeout: 5000,
+      maxBuffer: 1024 * 1024,
+    });
+    const lines = stdout.split("\n").map((l) => l.trimEnd()).filter((l) => l.trim() !== "");
+    return NextResponse.json({ lastLine: lines.length ? lines[lines.length - 1] : "" }, { status: 200 });
+  } catch {
+    return NextResponse.json({ lastLine: "" }, { status: 200 });
+  }
+}

cueweb/app/api/stuck-frames/route.ts

@@ -0,0 +1,163 @@
+/*
+ * Copyright Contributors to the OpenCue Project
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import { fetchObjectFromRestGateway } from '@/app/utils/api_utils';
+import { NextRequest, NextResponse } from "next/server";
+
+// Server-side data gathering for the Stuck Frames page. CueGUI's
+// StuckFramePlugin walks every show's procs; we approximate by listing the
+// unfinished jobs (GetJobs) and, per job, fetching its RUNNING frames
+// (GetFrames, FrameState 2) and its layers (GetLayers, for the per-service
+// average frame time). Each frame is stamped with its job, service and the
+// layer's average frame time so the client can apply the full CueGUI
+// stuck-detection predicate (LLU / % stuck / avg-completion / runtime) live
+// against the user's per-service filter thresholds.
+//
+// RPCs: /job.JobInterface/GetJobs, /job.JobInterface/GetFrames,
+//       /job.JobInterface/GetLayers.
+
+const RUNNING_STATE = 2; // FrameState.RUNNING (proto/src/job.proto)
+const MAX_FRAMES_PER_JOB = 1000;
+// Cap the per-job GetFrames/GetLayers fan-out. Without a bound, a farm with
+// thousands of unfinished jobs would fire that many concurrent gateway calls
+// on every 30s poll; this keeps at most N jobs in flight at a time.
+const MAX_CONCURRENT_JOBS = 16;
+
+async function gatewayJson(endpoint: string, body: string): Promise<any | null> {
+  try {
+    const resp = await fetchObjectFromRestGateway(endpoint, "POST", body);
+    const json = await resp.json();
+    if (json?.error) return null;
+    return json?.data ?? null;
+  } catch {
+    return null;
+  }
+}
+
+// Map over items with a fixed-size worker pool, preserving input order. Plain
+// promises (no extra dependency) so the route stays self-contained.
+async function mapWithConcurrency<T, R>(
+  items: T[],
+  limit: number,
+  fn: (item: T, index: number) => Promise<R>,
+): Promise<R[]> {
+  const results: R[] = new Array(items.length);
+  let cursor = 0;
+  async function worker() {
+    while (true) {
+      const index = cursor++;
+      if (index >= items.length) return;
+      results[index] = await fn(items[index], index);
+    }
+  }
+  const workerCount = Math.min(limit, items.length);
+  await Promise.all(Array.from({ length: workerCount }, () => worker()));
+  return results;
+}
+
+// Safety bound on pagination so a malformed/never-shrinking response can't spin
+// forever: MAX_FRAME_PAGES * MAX_FRAMES_PER_JOB frames per job.
+const MAX_FRAME_PAGES = 50;
+
+// Fetch every RUNNING frame for a job, paging through GetFrames until a short
+// page arrives. A single page caps at MAX_FRAMES_PER_JOB, so a job with more
+// running frames than that would otherwise be silently truncated.
+async function getRunningFrames(job: any): Promise<any[]> {
+  const all: any[] = [];
+  for (let page = 1; page <= MAX_FRAME_PAGES; page++) {
+    const framesData = await gatewayJson(
+      "/job.JobInterface/GetFrames",
+      JSON.stringify({
+        job: { id: job.id, name: job.name },
+        req: {
+          include_finished: false,
+          page,
+          limit: MAX_FRAMES_PER_JOB,
+          states: { frame_states: [RUNNING_STATE] },
+        },
+      }),
+    );
+    const batch: any[] = framesData?.frames?.frames ?? [];
+    all.push(...batch);
+    // A short (or empty/failed) page means we've reached the end.
+    if (batch.length < MAX_FRAMES_PER_JOB) break;
+  }
+  return all;
+}
+
+export async function POST(_request: NextRequest) {
+  try {
+    const jobsData = await gatewayJson(
+      "/job.JobInterface/GetJobs",
+      JSON.stringify({ r: { include_finished: false } }),
+    );
+    if (jobsData === null) {
+      return NextResponse.json({ error: "Failed to list jobs" }, { status: 500 });
+    }
+    const jobs: any[] = jobsData?.jobs?.jobs ?? [];
+
+    const perJob = await mapWithConcurrency(
+      jobs,
+      MAX_CONCURRENT_JOBS,
+      async (job) => {
+        const [frames, layersData] = await Promise.all([
+          getRunningFrames(job),
+          gatewayJson(
+            "/job.JobInterface/GetLayers",
+            JSON.stringify({ job: { id: job.id, name: job.name } }),
+          ),
+        ]);
+
+        const layers: any[] = layersData?.layers?.layers ?? [];
+        // layerName -> details for attaching to each frame (service + average
+        // frame time for detection; id + minCores for the Core Up action).
+        const layerInfo = new Map<
+          string,
+          { id: string; service: string; avgFrameSec: number; minCores: number }
+        >();
+        for (const layer of layers) {
+          layerInfo.set(layer.name, {
+            id: layer.id ?? "",
+            service: Array.isArray(layer.services) && layer.services.length ? layer.services[0] : "",
+            avgFrameSec: Number(layer.layerStats?.avgFrameSec ?? 0),
+            minCores: Number(layer.minCores ?? 0),
+          });
+        }
+
+        return frames
+          .filter((f) => f.state === "RUNNING")
+          .map((f) => {
+            const info = layerInfo.get(f.layerName);
+            return {
+              ...f,
+              jobId: job.id,
+              jobName: job.name,
+              jobLogDir: job.logDir ?? "",
+              jobHasComment: !!job.hasComment,
+              service: info?.service ?? "",
+              avgFrameSec: info?.avgFrameSec ?? 0,
+              layerId: info?.id ?? "",
+              layerMinCores: info?.minCores ?? 0,
+            };
+          });
+      },
+    );
+
+    return NextResponse.json({ data: perJob.flat() }, { status: 200 });
+  } catch (error) {
+    return NextResponse.json({ error: (error as Error).message }, { status: 500 });
+  }
+}