@addai/node 0.27.1 → 0.29.0

package/dist/desktop/vault-extension.js

@@ -0,0 +1,112 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.EXTENSION_FILES = exports.EXTENSION_DIR = void 0;
+exports.packagedExtensionDir = packagedExtensionDir;
+exports.ensureVaultExtension = ensureVaultExtension;
+// The +Ai Vault, inside a desktop's browser.
+//
+// The extension already exists — it is the same MV3 build people run on their
+// own machines (addai-credentials/extension). It signs in by reading the
+// `auth` cookie on add.ai and asks the vault edge function what that session
+// may see, so it needs no desktop-specific server work at all: whoever the
+// desktop browser is signed in as, that is the vault it shows. An entity that
+// has logged into add.ai as itself sees exactly what it has been granted, and
+// a person watching over its shoulder sees what they have been granted.
+//
+// It is served straight out of /conf. That directory is already bind-mounted
+// from the host, so the browser can load the extension from disk without the
+// files ever being copied into the container, without a new image, and without
+// the GHCR publish that everything else about desktops is waiting on. Updating
+// the extension is rewriting host files.
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+/** Where the extension lives inside a desktop. /conf is the host's confDir. */
+exports.EXTENSION_DIR = '/conf/vault/extension';
+/** Every file the browser needs. Sourcemaps are deliberately absent: they are
+ *  four times the size of the code and nobody debugs this from inside a
+ *  container. */
+exports.EXTENSION_FILES = [
+    'manifest.json',
+    'background.js',
+    'content.js',
+    'icons/icon-16.png',
+    'icons/icon-32.png',
+    'icons/icon-48.png',
+    'icons/icon-128.png',
+    'assets/inter.woff2',
+];
+/** The vendored copy that ships inside this package. */
+function packagedExtensionDir() {
+    // dist/desktop/vault-extension.js -> ../../.. is the package root.
+    return path.resolve(__dirname, '..', '..', 'assets', 'vault-extension');
+}
+/**
+ * Put the extension where the desktop's browser can load it.
+ *
+ * Copies only what differs, by size and mtime, so calling this on every
+ * desktop start is cheap after the first one.
+ */
+function ensureVaultExtension(confDir) {
+    const src = packagedExtensionDir();
+    if (!fs.existsSync(path.join(src, 'manifest.json'))) {
+        return { changed: false, available: false };
+    }
+    const dest = path.join(confDir, 'vault', 'extension');
+    let changed = false;
+    // The sign-in script travels with the extension: an extension with no
+    // session shows an empty vault, which reads as "broken" rather than "not
+    // signed in".
+    const seedFrom = path.join(__dirname, 'vault-seed.mjs');
+    const seedTo = path.join(confDir, 'vault', 'vault-seed.mjs');
+    if (fs.existsSync(seedFrom)
+        && (!fs.existsSync(seedTo) || fs.statSync(seedTo).size !== fs.statSync(seedFrom).size)) {
+        fs.mkdirSync(path.dirname(seedTo), { recursive: true });
+        fs.copyFileSync(seedFrom, seedTo);
+        changed = true;
+    }
+    for (const rel of exports.EXTENSION_FILES) {
+        const from = path.join(src, rel);
+        if (!fs.existsSync(from))
+            continue;
+        const to = path.join(dest, rel);
+        if (fs.existsSync(to) && fs.statSync(to).size === fs.statSync(from).size)
+            continue;
+        fs.mkdirSync(path.dirname(to), { recursive: true });
+        fs.copyFileSync(from, to);
+        changed = true;
+    }
+    return { changed, available: true };
+}

package/dist/desktop/vault-seed.mjs

@@ -0,0 +1,112 @@
+// Plants the add.ai session cookie in a desktop's browser, from inside it.
+//
+// Runs in the container, not the daemon: the debugging port is bound to
+// loopback there on purpose (CDP is total control of a browser, and the host
+// must not be able to reach it), so the only place that can talk to it is the
+// container itself. Node 22 is in the image already — this is the same
+// arrangement +Ai Learn's recorder uses.
+//
+// Launched by the browser wrapper, in the background, immediately before Chrome
+// starts. It waits for the port rather than assuming, sets the cookie, and
+// exits. Nothing depends on its exit code: a browser that comes up without a
+// vault session is worse than one with, but it is still a working browser.
+import * as fs from 'node:fs';
+
+const PORT = Number(process.env.ADDAI_CDP_PORT || 9222);
+const SESSION_FILE = process.env.ADDAI_VAULT_SESSION || '/conf/vault/session.json';
+const DEADLINE_MS = 60_000;
+const POLL_MS = 250;
+
+const log = (m) => process.stdout.write(`[vault-seed] ${m}\n`);
+
+/** The cookie the extension reads: URI-encoded JSON with the two tokens. */
+export function cookieValue(session) {
+  return encodeURIComponent(JSON.stringify({
+    access_token: session.access_token,
+    refresh_token: session.refresh_token,
+  }));
+}
+
+/** Both add.ai itself and every *.add.ai app, which is what the session is
+ *  for — signing in at auth.add.ai signs you in across all of them. */
+export function cookieParams(session) {
+  return {
+    name: 'auth',
+    value: cookieValue(session),
+    domain: '.add.ai',
+    path: '/',
+    secure: true,
+    httpOnly: false,
+    sameSite: 'Lax',
+  };
+}
+
+async function waitForBrowser(deadline) {
+  while (Date.now() < deadline) {
+    try {
+      const res = await fetch(`http://127.0.0.1:${PORT}/json/version`);
+      if (res.ok) return await res.json();
+    } catch { /* not up yet */ }
+    await new Promise((r) => setTimeout(r, POLL_MS));
+  }
+  return null;
+}
+
+async function setCookie(wsUrl, params) {
+  const ws = new WebSocket(wsUrl);
+  await new Promise((resolve, reject) => {
+    ws.addEventListener('open', resolve, { once: true });
+    ws.addEventListener('error', () => reject(new Error('could not open the debugger')), { once: true });
+  });
+  const done = new Promise((resolve, reject) => {
+    const timer = setTimeout(() => reject(new Error('the browser did not answer')), 10_000);
+    ws.addEventListener('message', (ev) => {
+      let msg;
+      try { msg = JSON.parse(ev.data); } catch { return; }
+      if (msg.id !== 1) return;
+      clearTimeout(timer);
+      if (msg.error) reject(new Error(msg.error.message || 'setCookie failed'));
+      else resolve(msg.result);
+    });
+  });
+  ws.send(JSON.stringify({ id: 1, method: 'Network.setCookie', params }));
+  // finally, not after the await: an error reply rejects, and a socket left
+  // open holds the event loop forever. The failure mode is a hung node process
+  // per browser launch, which is worse than the failure it is reporting.
+  try {
+    return await done;
+  } finally {
+    ws.close();
+  }
+}
+
+async function main() {
+  let session;
+  try {
+    session = JSON.parse(fs.readFileSync(SESSION_FILE, 'utf8'));
+  } catch {
+    log('no session staged for this desktop — the vault will be empty until somebody signs in');
+    return;
+  }
+  if (!session?.access_token || !session?.refresh_token) {
+    log('the staged session is not usable');
+    return;
+  }
+
+  const version = await waitForBrowser(Date.now() + DEADLINE_MS);
+  if (!version?.webSocketDebuggerUrl) {
+    log('the browser never opened its debugging port');
+    return;
+  }
+  try {
+    const res = await setCookie(version.webSocketDebuggerUrl, cookieParams(session));
+    log(res?.success === false ? 'the browser refused the cookie' : 'signed in');
+  } catch (err) {
+    log(`could not sign in: ${err.message}`);
+  }
+}
+
+// Importable for tests; only runs when executed directly.
+if (process.argv[1] && process.argv[1].endsWith('vault-seed.mjs')) {
+  main().catch((err) => log(`unexpected: ${err.message}`));
+}

package/dist/desktop/vault-session.d.ts

@@ -0,0 +1,41 @@
+/** A GoTrue session, reduced to the two fields the cookie carries. */
+export interface VaultSession {
+    access_token: string;
+    refresh_token: string;
+    /** Epoch ms. Used to decide whether to refresh before handing it over. */
+    expires_at: number;
+    email?: string;
+    entity_name?: string;
+}
+export declare function sessionPath(confDir: string): string;
+export declare function readSession(confDir: string): VaultSession | null;
+export declare function writeSession(confDir: string, s: VaultSession): void;
+export declare function isFresh(s: VaultSession | null, now: number): boolean;
+/** Exactly what the extension expects to find: the add.ai `auth` cookie is a
+ *  URI-encoded JSON object with the two tokens in it. */
+export declare function cookieValue(s: VaultSession): string;
+type Fetcher = typeof fetch;
+/** Trade a refresh token for a live one. Returns null when it has expired or
+ *  been revoked — which is the normal way a rotation elsewhere reaches us. */
+export declare function refreshSession(refreshToken: string, doFetch?: Fetcher): Promise<VaultSession | null>;
+/** Sign in with a freshly rotated password. */
+export declare function passwordSession(email: string, password: string, doFetch?: Fetcher): Promise<VaultSession | null>;
+export interface LoginRpc {
+    (desktopId: string, rotate: boolean): Promise<any>;
+}
+export interface EnsureResult {
+    session: VaultSession | null;
+    /** Why there is no session, when there is none. */
+    reason?: string;
+    /** True when a rotation was performed — worth logging, it is destructive. */
+    rotated: boolean;
+}
+/**
+ * Get a live session for this desktop, minting one only when necessary.
+ *
+ * Order matters: cached-and-fresh, then refresh, then rotate. Skipping to
+ * rotation because it is simpler would log the entity out of every other
+ * browser it is signed into, every time a desktop restarts.
+ */
+export declare function ensureVaultSession(confDir: string, login: LoginRpc, desktopId: string, doFetch?: Fetcher, now?: number): Promise<EnsureResult>;
+export {};

package/dist/desktop/vault-session.js

@@ -0,0 +1,164 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionPath = sessionPath;
+exports.readSession = readSession;
+exports.writeSession = writeSession;
+exports.isFresh = isFresh;
+exports.cookieValue = cookieValue;
+exports.refreshSession = refreshSession;
+exports.passwordSession = passwordSession;
+exports.ensureVaultSession = ensureVaultSession;
+// Signing a desktop's browser in, so the vault has something in it.
+//
+// The +Ai Vault extension shows whatever the browser's add.ai session can see,
+// so an installed extension and no session is an empty vault. This mints the
+// session on the host and leaves it where the desktop can pick it up.
+//
+// Rotation is destructive — asking for a new password drops every other
+// session that identity holds, which would sign an entity out of every browser
+// it uses. So the order is always: use the cached refresh token, and only ask
+// the server for a password when there is nothing to refresh.
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const config_1 = require("../config");
+/** Refresh this long before expiry rather than at it: a browser that starts
+ *  with a token about to die shows an empty vault for its first minute. */
+const EARLY_REFRESH_MS = 5 * 60_000;
+function sessionPath(confDir) {
+    return path.join(confDir, 'vault', 'session.json');
+}
+function readSession(confDir) {
+    try {
+        const raw = fs.readFileSync(sessionPath(confDir), 'utf8');
+        const s = JSON.parse(raw);
+        if (!s?.access_token || !s?.refresh_token)
+            return null;
+        return s;
+    }
+    catch {
+        return null;
+    }
+}
+function writeSession(confDir, s) {
+    const p = sessionPath(confDir);
+    fs.mkdirSync(path.dirname(p), { recursive: true });
+    // 0600 on the host side. Inside the container the entity has root and can
+    // read it, which is fine: these are its OWN credentials, and it can already
+    // rotate them through its browser MCP. What matters is that the host does
+    // not leave them world-readable in a shared runtime directory.
+    fs.writeFileSync(p, JSON.stringify(s), { mode: 0o600 });
+}
+function isFresh(s, now) {
+    return !!s && s.expires_at - EARLY_REFRESH_MS > now;
+}
+/** Exactly what the extension expects to find: the add.ai `auth` cookie is a
+ *  URI-encoded JSON object with the two tokens in it. */
+function cookieValue(s) {
+    return encodeURIComponent(JSON.stringify({
+        access_token: s.access_token,
+        refresh_token: s.refresh_token,
+    }));
+}
+function toSession(body, extra = {}) {
+    if (!body?.access_token || !body?.refresh_token)
+        return null;
+    const ttl = Number(body.expires_in ?? 3600) * 1000;
+    return {
+        access_token: body.access_token,
+        refresh_token: body.refresh_token,
+        expires_at: Date.now() + ttl,
+        ...extra,
+    };
+}
+/** Trade a refresh token for a live one. Returns null when it has expired or
+ *  been revoked — which is the normal way a rotation elsewhere reaches us. */
+async function refreshSession(refreshToken, doFetch = fetch) {
+    const res = await doFetch(`${config_1.SUPABASE_URL}/auth/v1/token?grant_type=refresh_token`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', apikey: config_1.SUPABASE_ANON_KEY },
+        body: JSON.stringify({ refresh_token: refreshToken }),
+    });
+    if (!res.ok)
+        return null;
+    return toSession(await res.json());
+}
+/** Sign in with a freshly rotated password. */
+async function passwordSession(email, password, doFetch = fetch) {
+    const res = await doFetch(`${config_1.SUPABASE_URL}/auth/v1/token?grant_type=password`, {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json', apikey: config_1.SUPABASE_ANON_KEY },
+        body: JSON.stringify({ email, password }),
+    });
+    if (!res.ok)
+        return null;
+    return toSession(await res.json(), { email });
+}
+/**
+ * Get a live session for this desktop, minting one only when necessary.
+ *
+ * Order matters: cached-and-fresh, then refresh, then rotate. Skipping to
+ * rotation because it is simpler would log the entity out of every other
+ * browser it is signed into, every time a desktop restarts.
+ */
+async function ensureVaultSession(confDir, login, desktopId, doFetch = fetch, now = Date.now()) {
+    const cached = readSession(confDir);
+    if (isFresh(cached, now))
+        return { session: cached, rotated: false };
+    if (cached?.refresh_token) {
+        const refreshed = await refreshSession(cached.refresh_token, doFetch);
+        if (refreshed) {
+            const merged = { ...refreshed, email: cached.email, entity_name: cached.entity_name };
+            writeSession(confDir, merged);
+            return { session: merged, rotated: false };
+        }
+    }
+    // Ask the server who this desktop belongs to AND for a password in one call.
+    // It refuses to guess on a shared desktop with no default entity, which is
+    // the case where planting one entity's session would hand its vault to
+    // another.
+    const info = await login(desktopId, true);
+    if (!info?.ok)
+        return { session: null, reason: info?.reason ?? 'login_refused', rotated: false };
+    if (!info.password || !info.email) {
+        return { session: null, reason: 'no_credentials_returned', rotated: false };
+    }
+    const fresh = await passwordSession(info.email, info.password, doFetch);
+    if (!fresh)
+        return { session: null, reason: 'sign_in_failed', rotated: true };
+    const out = { ...fresh, entity_name: info.entity_name };
+    writeSession(confDir, out);
+    return { session: out, rotated: true };
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@addai/node",
-  "version": "0.27.1",
+  "version": "0.29.0",
   "description": "Daemon that pairs a machine with your +Ai account and runs Claude / Codex / Kimi / Gemini agents on its behalf. Reachable via Supabase from Vault, Entity Studio, or any other +Ai surface.",
   "license": "MIT",
   "keywords": [
@@ -34,10 +34,11 @@
   "files": [
     "dist",
     "scripts",
-    "README.md"
+    "README.md",
+    "assets"
   ],
   "scripts": {
-    "build": "tsc -p tsconfig.json",
+    "build": "tsc -p tsconfig.json && node scripts/copy-assets.js",
     "start": "node dist/cli.js",
     "dev": "tsc -p tsconfig.json && node dist/cli.js",
     "test": "npm run build && node --test test/*.test.mjs",

package/scripts/copy-assets.js

@@ -0,0 +1,18 @@
+// tsc compiles .ts and ignores everything else, but two files in this package
+// are deliberately plain .mjs: they run inside a desktop container (node 22,
+// no build step, no node_modules) rather than in the daemon. Ship them next to
+// the compiled output so dist/ is self-contained.
+const fs = require('fs');
+const path = require('path');
+
+const ASSETS = [
+  ['src/desktop/learn/recorder.mjs', 'dist/desktop/learn/recorder.mjs'],
+  ['src/desktop/learn/injected.mjs', 'dist/desktop/learn/injected.mjs'],
+  ['src/desktop/vault-seed.mjs', 'dist/desktop/vault-seed.mjs'],
+];
+
+for (const [from, to] of ASSETS) {
+  fs.mkdirSync(path.dirname(to), { recursive: true });
+  fs.copyFileSync(from, to);
+}
+console.log(`copied ${ASSETS.length} runtime assets into dist/`);

package/dist/tui.d.ts

@@ -1 +0,0 @@
-export declare function runHarnessesTui(): Promise<void>;