@addai/node 0.27.0 → 0.28.0

package/dist/desktop/vault-seed.mjs

@@ -0,0 +1,112 @@
+// Plants the add.ai session cookie in a desktop's browser, from inside it.
+//
+// Runs in the container, not the daemon: the debugging port is bound to
+// loopback there on purpose (CDP is total control of a browser, and the host
+// must not be able to reach it), so the only place that can talk to it is the
+// container itself. Node 22 is in the image already — this is the same
+// arrangement +Ai Learn's recorder uses.
+//
+// Launched by the browser wrapper, in the background, immediately before Chrome
+// starts. It waits for the port rather than assuming, sets the cookie, and
+// exits. Nothing depends on its exit code: a browser that comes up without a
+// vault session is worse than one with, but it is still a working browser.
+import * as fs from 'node:fs';
+
+const PORT = Number(process.env.ADDAI_CDP_PORT || 9222);
+const SESSION_FILE = process.env.ADDAI_VAULT_SESSION || '/conf/vault/session.json';
+const DEADLINE_MS = 60_000;
+const POLL_MS = 250;
+
+const log = (m) => process.stdout.write(`[vault-seed] ${m}\n`);
+
+/** The cookie the extension reads: URI-encoded JSON with the two tokens. */
+export function cookieValue(session) {
+  return encodeURIComponent(JSON.stringify({
+    access_token: session.access_token,
+    refresh_token: session.refresh_token,
+  }));
+}
+
+/** Both add.ai itself and every *.add.ai app, which is what the session is
+ *  for — signing in at auth.add.ai signs you in across all of them. */
+export function cookieParams(session) {
+  return {
+    name: 'auth',
+    value: cookieValue(session),
+    domain: '.add.ai',
+    path: '/',
+    secure: true,
+    httpOnly: false,
+    sameSite: 'Lax',
+  };
+}
+
+async function waitForBrowser(deadline) {
+  while (Date.now() < deadline) {
+    try {
+      const res = await fetch(`http://127.0.0.1:${PORT}/json/version`);
+      if (res.ok) return await res.json();
+    } catch { /* not up yet */ }
+    await new Promise((r) => setTimeout(r, POLL_MS));
+  }
+  return null;
+}
+
+async function setCookie(wsUrl, params) {
+  const ws = new WebSocket(wsUrl);
+  await new Promise((resolve, reject) => {
+    ws.addEventListener('open', resolve, { once: true });
+    ws.addEventListener('error', () => reject(new Error('could not open the debugger')), { once: true });
+  });
+  const done = new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error('the browser did not answer')), 10_000);
+    ws.addEventListener('message', (ev) => {
+      let msg;
+      try { msg = JSON.parse(ev.data); } catch { return; }
+      if (msg.id !== 1) return;
+      clearTimeout(timer);
+      if (msg.error) reject(new Error(msg.error.message || 'setCookie failed'));
+      else resolve(msg.result);
+    });
+  });
+  ws.send(JSON.stringify({ id: 1, method: 'Network.setCookie', params }));
+  // finally, not after the await: an error reply rejects, and a socket left
+  // open holds the event loop forever. The failure mode is a hung node process
+  // per browser launch, which is worse than the failure it is reporting.
+  try {
+    return await done;
+  } finally {
+    ws.close();
+  }
+}
+
+async function main() {
+  let session;
+  try {
+    session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf8'));
+  } catch {
+    log('no session staged for this desktop — the vault will be empty until somebody signs in');
+    return;
+  }
+  if (!session?.access_token || !session?.refresh_token) {
+    log('the staged session is not usable');
+    return;
+  }
+
+  const version = await waitForBrowser(Date.now() + DEADLINE_MS);
+  if (!version?.webSocketDebuggerUrl) {
+    log('the browser never opened its debugging port');
+    return;
+  }
+  try {
+    const res = await setCookie(version.webSocketDebuggerUrl, cookieParams(session));
+    log(res?.success === false ? 'the browser refused the cookie' : 'signed in');
+  } catch (err) {
+    log(`could not sign in: ${err.message}`);
+  }
+}
+
+// Importable for tests; only runs when executed directly.
+if (process.argv[1] && process.argv[1].endsWith('vault-seed.mjs')) {
+  main().catch((err) => log(`unexpected: ${err.message}`));
+}

package/dist/desktop/vault-session.d.ts

@@ -0,0 +1,41 @@
+/** A GoTrue session, reduced to the two fields the cookie carries. */
+export interface VaultSession {
+    access_token: string;
+    refresh_token: string;
+    /** Epoch ms. Used to decide whether to refresh before handing it over. */
+    expires_at: number;
+    email?: string;
+    entity_name?: string;
+}
+export declare function sessionPath(confDir: string): string;
+export declare function readSession(confDir: string): VaultSession | null;
+export declare function writeSession(confDir: string, s: VaultSession): void;
+export declare function isFresh(s: VaultSession | null, now: number): boolean;
+/** Exactly what the extension expects to find: the add.ai `auth` cookie is a
+ *  URI-encoded JSON object with the two tokens in it. */
+export declare function cookieValue(s: VaultSession): string;
+type Fetcher = typeof fetch;
+/** Trade a refresh token for a live one. Returns null when it has expired or
+ *  been revoked — which is the normal way a rotation elsewhere reaches us. */
+export declare function refreshSession(refreshToken: string, doFetch?: Fetcher): Promise<VaultSession | null>;
+/** Sign in with a freshly rotated password. */
+export declare function passwordSession(email: string, password: string, doFetch?: Fetcher): Promise<VaultSession | null>;
+export interface LoginRpc {
+    (desktopId: string, rotate: boolean): Promise<any>;
+}
+export interface EnsureResult {
+    session: VaultSession | null;
+    /** Why there is no session, when there is none. */
+    reason?: string;
+    /** True when a rotation was performed — worth logging, it is destructive. */
+    rotated: boolean;
+}
+/**
+ * Get a live session for this desktop, minting one only when necessary.
+ *
+ * Order matters: cached-and-fresh, then refresh, then rotate. Skipping to
+ * rotation because it is simpler would log the entity out of every other
+ * browser it is signed into, every time a desktop restarts.
+ */
+export declare function ensureVaultSession(confDir: string, login: LoginRpc, desktopId: string, doFetch?: Fetcher, now?: number): Promise<EnsureResult>;
+export {};

package/dist/desktop/vault-session.js

@@ -0,0 +1,164 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionPath = sessionPath;
+exports.readSession = readSession;
+exports.writeSession = writeSession;
+exports.isFresh = isFresh;
+exports.cookieValue = cookieValue;
+exports.refreshSession = refreshSession;
+exports.passwordSession = passwordSession;
+exports.ensureVaultSession = ensureVaultSession;
+// Signing a desktop's browser in, so the vault has something in it.
+//
+// The +Ai Vault extension shows whatever the browser's add.ai session can see,
+// so an installed extension and no session is an empty vault. This mints the
+// session on the host and leaves it where the desktop can pick it up.
+//
+// Rotation is destructive — asking for a new password drops every other
+// session that identity holds, which would sign an entity out of every browser
+// it uses. So the order is always: use the cached refresh token, and only ask
+// the server for a password when there is nothing to refresh.
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("../config");
+/** Refresh this long before expiry rather than at it: a browser that starts
+ *  with a token about to die shows an empty vault for its first minute. */
+const EARLY_REFRESH_MS = 5 * 60_000;
+function sessionPath(confDir) {
+    return path.join(confDir, 'vault', 'session.json');
+}
+function readSession(confDir) {
+    try {
+        const raw = fs.readFileSync(sessionPath(confDir), 'utf8');
+        const s = JSON.parse(raw);
+        if (!s?.access_token || !s?.refresh_token)
+            return null;
+        return s;
+    }
+    catch {
+        return null;
+    }
+}
+function writeSession(confDir, s) {
+    const p = sessionPath(confDir);
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    // 0600 on the host side. Inside the container the entity has root and can
+    // read it, which is fine: these are its OWN credentials, and it can already
+    // rotate them through its browser MCP. What matters is that the host does
+    // not leave them world-readable in a shared runtime directory.
+    fs.writeFileSync(p, JSON.stringify(s), { mode: 0o600 });
+}
+function isFresh(s, now) {
+    return !!s && s.expires_at - EARLY_REFRESH_MS > now;
+}
+/** Exactly what the extension expects to find: the add.ai `auth` cookie is a
+ *  URI-encoded JSON object with the two tokens in it. */
+function cookieValue(s) {
+    return encodeURIComponent(JSON.stringify({
+        access_token: s.access_token,
+        refresh_token: s.refresh_token,
+    }));
+}
+function toSession(body, extra = {}) {
+    if (!body?.access_token || !body?.refresh_token)
+        return null;
+    const ttl = Number(body.expires_in ?? 3600) * 1000;
+    return {
+        access_token: body.access_token,
+        refresh_token: body.refresh_token,
+        expires_at: Date.now() + ttl,
+        ...extra,
+    };
+}
+/** Trade a refresh token for a live one. Returns null when it has expired or
+ *  been revoked — which is the normal way a rotation elsewhere reaches us. */
+async function refreshSession(refreshToken, doFetch = fetch) {
+    const res = await doFetch(`${config_1.SUPABASE_URL}/auth/v1/token?grant_type=refresh_token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', apikey: config_1.SUPABASE_ANON_KEY },
+        body: JSON.stringify({ refresh_token: refreshToken }),
+    });
+    if (!res.ok)
+        return null;
+    return toSession(await res.json());
+}
+/** Sign in with a freshly rotated password. */
+async function passwordSession(email, password, doFetch = fetch) {
+    const res = await doFetch(`${config_1.SUPABASE_URL}/auth/v1/token?grant_type=password`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', apikey: config_1.SUPABASE_ANON_KEY },
+        body: JSON.stringify({ email, password }),
+    });
+    if (!res.ok)
+        return null;
+    return toSession(await res.json(), { email });
+}
+/**
+ * Get a live session for this desktop, minting one only when necessary.
+ *
+ * Order matters: cached-and-fresh, then refresh, then rotate. Skipping to
+ * rotation because it is simpler would log the entity out of every other
+ * browser it is signed into, every time a desktop restarts.
+ */
+async function ensureVaultSession(confDir, login, desktopId, doFetch = fetch, now = Date.now()) {
+    const cached = readSession(confDir);
+    if (isFresh(cached, now))
+        return { session: cached, rotated: false };
+    if (cached?.refresh_token) {
+        const refreshed = await refreshSession(cached.refresh_token, doFetch);
+        if (refreshed) {
+            const merged = { ...refreshed, email: cached.email, entity_name: cached.entity_name };
+            writeSession(confDir, merged);
+            return { session: merged, rotated: false };
+        }
+    }
+    // Ask the server who this desktop belongs to AND for a password in one call.
+    // It refuses to guess on a shared desktop with no default entity, which is
+    // the case where planting one entity's session would hand its vault to
+    // another.
+    const info = await login(desktopId, true);
+    if (!info?.ok)
+        return { session: null, reason: info?.reason ?? 'login_refused', rotated: false };
+    if (!info.password || !info.email) {
+        return { session: null, reason: 'no_credentials_returned', rotated: false };
+    }
+    const fresh = await passwordSession(info.email, info.password, doFetch);
+    if (!fresh)
+        return { session: null, reason: 'sign_in_failed', rotated: true };
+    const out = { ...fresh, entity_name: info.entity_name };
+    writeSession(confDir, out);
+    return { session: out, rotated: true };
+}

package/dist/kimi-spawn.js

@@ -68,17 +68,37 @@ const child_process_1 = require("child_process");
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const kimi_binary_1 = require("./kimi-binary");
+const harness_registry_1 = require("./harness-registry");
 const win_1 = require("./win");
 const events_1 = require("./events");
 const think_split_1 = require("./think-split");
 const mcp_headers_1 = require("./mcp-headers");
-/** kimi forwards this string to the provider verbatim — the override exists
- *  precisely to bypass the model's declared support_efforts — so a level kimi
- *  has never heard of reaches the API as-is. It retired 'max' (it migrates a
- *  stored 'max' to 'high' on load) and never had our 'xhigh', so both collapse
- *  to the highest level it does know. */
+/**
+ * The effort level to send kimi, or null to send nothing.
+ *
+ * KIMI_MODEL_THINKING_EFFORT is a real kimi env var, but it exists precisely to
+ * BYPASS the model's declared support_efforts — kimi forwards the string to the
+ * provider verbatim and lets the API judge it. Setting it unconditionally is
+ * therefore not a safe default: an entity on medium effort got
+ *
+ *   provider.api_error: 400 Invalid request Error
+ *
+ * four seconds into the run, every run, because the model behind kimi takes no
+ * thinking effort at all.
+ *
+ * The harness registry already records which levels a harness supports, and
+ * kimi's list is empty — so the registry decides, and an empty list means the
+ * variable is never set. If kimi gains effort support, updating the registry is
+ * enough; nothing here needs to change.
+ */
 function kimiEffort(level) {
-    return level === 'max' || level === 'xhigh' ? 'high' : level;
+    const supported = (0, harness_registry_1.harness)('kimi')?.efforts ?? [];
+    if (supported.length === 0)
+        return null;
+    // 'max' was retired by kimi (it migrates a stored 'max' to 'high') and it
+    // never had our 'xhigh', so both collapse to the highest level it declares.
+    const wanted = level === 'max' || level === 'xhigh' ? 'high' : level;
+    return supported.includes(wanted) ? wanted : null;
 }
 /**
  * Write the entity's MCP servers where kimi will actually read them:
@@ -339,13 +359,12 @@ function spawnKimi(input) {
     // No HOME override: the real $HOME flows through so kimi's own auth +
     // shelled-out tools (git/pip/node) can find their config files. The
     // explicit --mcp-config-file already prevents host mcp.json leakage.
+    const effortValue = input.effortLevel ? kimiEffort(input.effortLevel) : null;
     const childEnv = {
         ...process.env,
         TERM: 'dumb',
-        // kimi's own effort override. It bypasses the model's support_efforts
-        // list, and kimi migrates a stored 'max' to 'high' — so normalise here
-        // rather than send a level the provider may reject.
-        ...(input.effortLevel ? { KIMI_MODEL_THINKING_EFFORT: kimiEffort(input.effortLevel) } : {}),
+        // Effort, only when the registry says kimi can take one — see kimiEffort.
+        ...(effortValue ? { KIMI_MODEL_THINKING_EFFORT: effortValue } : {}),
     };
     const listeners = [];
     const emit = (e) => { for (const l of listeners)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@addai/node",
-  "version": "0.27.0",
+  "version": "0.28.0",
   "description": "Daemon that pairs a machine with your +Ai account and runs Claude / Codex / Kimi / Gemini agents on its behalf. Reachable via Supabase from Vault, Entity Studio, or any other +Ai surface.",
   "license": "MIT",
   "keywords": [
@@ -34,10 +34,11 @@
   "files": [
     "dist",
     "scripts",
-    "README.md"
+    "README.md",
+    "assets"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && node scripts/copy-assets.js",
     "start": "node dist/cli.js",
     "dev": "tsc -p tsconfig.json && node dist/cli.js",
     "test": "npm run build && node --test test/*.test.mjs",

package/scripts/copy-assets.js

@@ -0,0 +1,18 @@
+// tsc compiles .ts and ignores everything else, but two files in this package
+// are deliberately plain .mjs: they run inside a desktop container (node 22,
+// no build step, no node_modules) rather than in the daemon. Ship them next to
+// the compiled output so dist/ is self-contained.
+const fs = require('fs');
+const path = require('path');
+
+const ASSETS = [
+  ['src/desktop/learn/recorder.mjs', 'dist/desktop/learn/recorder.mjs'],
+  ['src/desktop/learn/injected.mjs', 'dist/desktop/learn/injected.mjs'],
+  ['src/desktop/vault-seed.mjs', 'dist/desktop/vault-seed.mjs'],
+];
+
+for (const [from, to] of ASSETS) {
+  fs.mkdirSync(path.dirname(to), { recursive: true });
+  fs.copyFileSync(from, to);
+}
+console.log(`copied ${ASSETS.length} runtime assets into dist/`);

package/dist/tui.d.ts

@@ -1 +0,0 @@
-export declare function runHarnessesTui(): Promise<void>;