actionagent 1.8.1 → 1.9.1

data/app/controllers/action_agent/api/telemetry_keys_controller.rb

@@ -0,0 +1,21 @@
+# frozen_string_literal: true
+
+module ActionAgent
+  module Api
+    # The key the owner's applications send traces with, for the Organization
+    # view to show and copy. The dashboard page does not carry it
+    # (DashboardController).
+    class TelemetryKeysController < BaseController
+      before_action :require_owner!
+
+      # GET /api/telemetry_key
+      #
+      # `telemetry_api_key` is the owner's `telemetry_api_key`, or null when
+      # the owner has none.
+      def show
+        response.headers["Cache-Control"] = "no-store"
+        render json: { telemetry_api_key: current_owner.try(:telemetry_api_key) }
+      end
+    end
+  end
+end

data/app/controllers/action_agent/dashboard_controller.rb

@@ -7,7 +7,15 @@ module ActionAgent
   # happens in the browser. Initial state is handed over as a JSON data
   # attribute rather than through Inertia, so the engine works in any host
   # app without adding a frontend framework to it.
+  #
+  # The props carry no credential, because anything that reads the page's
+  # markup reads them, a session recorder included. A view that shows a key
+  # fetches it from its own endpoint (Api::TelemetryKeysController).
   class DashboardController < ApplicationController
+    # The session recorder's bundle, imported by the dashboard while the Run
+    # Agent workbench is open.
+    RECORDER_BUNDLE = "action_agent_recorder.js"
+
     # The React dashboard brings its own chrome, so it does not use the
     # server-rendered layout the traces views share.
     layout -> { ActionAgent.layout || "action_agent/react" }
@@ -46,7 +54,14 @@ module ActionAgent
         assistantEnabled: ActionAgent.assistant_enabled?,
         multiTenant: ActionAgent.multi_tenant?,
         upgradeUrl: ActionAgent.upgrade_url,
-        signOutPath: ActionAgent.sign_out_path
+        memberInviteUrl: ActionAgent.member_invite_url,
+        providerKeyScope: ActionAgent.provider_key_scope,
+        personalProviderKeys: ProviderKey.personal_keys_enabled?,
+        signOutPath: ActionAgent.sign_out_path,
+        # Named here rather than by the layout, so a host layout
+        # (ActionAgent.layout) does not have to know about it. Nil when the
+        # host turned capture off, and the dashboard then loads no recorder.
+        recorderUrl: (helpers.asset_path(RECORDER_BUNDLE) if ActionAgent.capture_dashboard_sessions?)
       }
     end
 
@@ -90,11 +105,7 @@ module ActionAgent
     def current_account_props
       return nil unless current_owner
 
-      {
-        id: current_owner.id,
-        name: current_owner.try(:name),
-        telemetry_api_key: current_owner.try(:telemetry_api_key)
-      }
+      { id: current_owner.id, name: current_owner.try(:name) }
     end
 
     # Where the engine is mounted, so the React app can build API URLs

data/app/controllers/action_agent/session_player_controller.rb

@@ -0,0 +1,58 @@
+# frozen_string_literal: true
+
+module ActionAgent
+  # Serves the document the dashboard's session player runs in. It holds the
+  # replay bundle and no data: the dashboard fetches a recording's events
+  # over its own API and posts them into the frame.
+  #
+  # The dashboard frames it with sandbox="allow-scripts allow-same-origin".
+  # rrweb's Replayer rebuilds the recorded page inside an iframe of its own,
+  # sandboxed to allow-same-origin only, and an iframe created inside an
+  # opaque-origin document gets an opaque origin of its own, which the
+  # Replayer cannot write into. A replayed page is kept inert by that inner
+  # sandbox and by this response's policy, which the inner frame inherits:
+  # no script but the bundle, and nothing loaded from the network.
+  class SessionPlayerController < ApplicationController
+    BUNDLE = "action_agent_replay.js"
+
+    layout false
+
+    # GET <mount>/session_player
+    def show
+      response.headers["Content-Security-Policy"] = self.class.policy(bundle_url)
+      response.headers["X-Frame-Options"] = "SAMEORIGIN"
+      response.headers["Referrer-Policy"] = "no-referrer"
+      render "action_agent/session_player/show", locals: { script_path: helpers.asset_path(BUNDLE) }
+    end
+
+    # The frame's Content-Security-Policy, allowing +script_url+ as its only
+    # script. A host's own policy is not merged in: the frame needs nothing
+    # from it. A source expression cannot carry a query, and matching
+    # ignores one, so the URL's query is left out.
+    # @return [String]
+    def self.policy(script_url)
+      source = URI(script_url).tap { |uri| uri.query = uri.fragment = nil }.to_s
+      [
+        "default-src 'none'",
+        "script-src #{source}",
+        "style-src 'unsafe-inline'",
+        "img-src data: blob:",
+        "font-src data:",
+        "base-uri 'none'",
+        "form-action 'none'",
+        "frame-ancestors 'self'"
+      ].join("; ")
+    end
+
+    private
+
+    # The bundle's absolute URL, for the policy: a CSP source naming a single
+    # file needs its scheme and host, and an asset host may serve it from
+    # another origin. The page loads the bundle by its asset path, so behind
+    # a proxy that does not report https the script keeps the page's scheme.
+    # An http source still matches the https URL.
+    def bundle_url
+      URI.join("#{request.base_url}/", helpers.asset_path(BUNDLE)).to_s
+    end
+  end
+end

data/app/controllers/concerns/action_agent/api/agent_serialization.rb

@@ -38,6 +38,7 @@ module ActionAgent
             action_prompts: agent.action_prompts,
             instruction_sets: agent.instruction_sets,
             tools: agent.tools,
+            approval_required_tools: agent.approval_required_tools,
             mcp_servers: agent.mcp_servers,
             model_config: agent.model_config,
             response_format: agent.response_format,