@agenthippo-ai/agenthippo 0.1.1 → 1.110.9

package/out/agentpack/index.js

@@ -3,7 +3,7 @@
  *  Copyright (c) AgentHippo.ai. All rights reserved.
  *--------------------------------------------------------------------------------------------*/
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.checkGitHubUpdate = exports.installFromGitHub = exports.validateForPublish = exports.publishToGitHub = exports.getGitHubUser = exports.isGitHubAuthenticated = exports.getGitHubToken = exports.formatGitHubSource = exports.parseGitHubSource = exports.resetDefaultAgent = exports.duplicateAgent = exports.updateFromUserLibrary = exports.checkForUpdate = exports.readAgentSource = exports.promoteToUserLibrary = exports.hydrateFromUserLibrary = exports.isAgentInUserLibrary = exports.isWorkspaceAgentAvailable = exports.listUserLibraryAgents = exports.updateManifestName = exports.parseAgentManifest = exports.loadAgentManifest = exports.stringifyYaml = exports.parseYaml = exports.AgentPackManager = exports.getUserAgentCurrentPath = exports.getUserAgentVersionDir = exports.getUserAgentRoot = exports.getUserAgentsDir = exports.getAgentideHome = exports.parseAgentIdFromPath = exports.getSessionsDir = exports.getAgentMcpDir = exports.getAgentRulesDir = exports.getAgentSkillsDir = exports.getAgentContextPath = exports.getAgentAgentsMdPath = exports.getAgentManifestPath = exports.isDefaultAgent = exports.resolveRuntimePaths = exports.resolveAgentRuntimePaths = exports.getAgentRoot = exports.getAgentsDir = exports.getAgentideDir = exports.AGENT_CONSTANTS = void 0;
+exports.checkGitHubUpdate = exports.installFromGitHub = exports.validateForPublish = exports.publishToGitHub = exports.getGitHubUser = exports.isGitHubAuthenticated = exports.getGitHubToken = exports.formatGitHubSource = exports.parseGitHubSource = exports.resetDefaultAgent = exports.duplicateAgent = exports.updateFromUserLibrary = exports.checkForUpdate = exports.readAgentSource = exports.promoteToUserLibrary = exports.hydrateFromUserLibrary = exports.isAgentInUserLibrary = exports.isWorkspaceAgentAvailable = exports.listUserLibraryAgents = exports.updateManifestName = exports.parseAgentManifest = exports.loadAgentManifest = exports.stringifyYaml = exports.parseYaml = exports.AgentPackManager = exports.getUserAgentCurrentPath = exports.getUserAgentVersionDir = exports.getUserAgentRoot = exports.getUserAgentsDir = exports.getAgentideHome = exports.parseAgentIdFromPath = exports.getSessionsDir = exports.getAgentMcpDir = exports.getAgentRulesDir = exports.getAgentSkillsDir = exports.getAgentContextPath = exports.getAgentAgentsMdPath = exports.getAgentManifestPath = exports.isDefaultAgent = exports.userScopedEngineHome = exports.resolveRuntimePaths = exports.resolveAgentRuntimePaths = exports.getAgentRoot = exports.getAgentsDir = exports.getAgentideDir = exports.AGENT_CONSTANTS = void 0;
 // Path utilities
 var paths_1 = require("./paths");
 Object.defineProperty(exports, "AGENT_CONSTANTS", { enumerable: true, get: function () { return paths_1.AGENT_CONSTANTS; } });
@@ -12,6 +12,7 @@ Object.defineProperty(exports, "getAgentsDir", { enumerable: true, get: function
 Object.defineProperty(exports, "getAgentRoot", { enumerable: true, get: function () { return paths_1.getAgentRoot; } });
 Object.defineProperty(exports, "resolveAgentRuntimePaths", { enumerable: true, get: function () { return paths_1.resolveAgentRuntimePaths; } });
 Object.defineProperty(exports, "resolveRuntimePaths", { enumerable: true, get: function () { return paths_1.resolveRuntimePaths; } });
+Object.defineProperty(exports, "userScopedEngineHome", { enumerable: true, get: function () { return paths_1.userScopedEngineHome; } });
 Object.defineProperty(exports, "isDefaultAgent", { enumerable: true, get: function () { return paths_1.isDefaultAgent; } });
 Object.defineProperty(exports, "getAgentManifestPath", { enumerable: true, get: function () { return paths_1.getAgentManifestPath; } });
 Object.defineProperty(exports, "getAgentAgentsMdPath", { enumerable: true, get: function () { return paths_1.getAgentAgentsMdPath; } });

package/out/agentpack/paths.js

@@ -51,6 +51,7 @@ exports.getAgentsDir = getAgentsDir;
 exports.getAgentRoot = getAgentRoot;
 exports.resolveAgentRuntimePaths = resolveAgentRuntimePaths;
 exports.resolveRuntimePaths = resolveRuntimePaths;
+exports.userScopedEngineHome = userScopedEngineHome;
 exports.isDefaultAgent = isDefaultAgent;
 exports.getAgentManifestPath = getAgentManifestPath;
 exports.getAgentAgentsMdPath = getAgentAgentsMdPath;
@@ -70,6 +71,7 @@ exports.generateAgentYaml = generateAgentYaml;
 exports.generateAgentsMd = generateAgentsMd;
 const path = __importStar(require("path"));
 const os = __importStar(require("os"));
+const crypto = __importStar(require("crypto"));
 const branding_1 = require("../branding");
 /**
  * Constants for agent directory structure.
@@ -211,6 +213,27 @@ function resolveRuntimePaths(workspaceRoot, storageUri, agentId, agentVersion) {
     const effectiveAgentId = agentId ?? exports.AGENT_CONSTANTS.DEFAULT_AGENT_ID;
     return resolveAgentRuntimePaths(workspaceRoot, storageUri, effectiveAgentId, agentVersion);
 }
+/**
+ * Key an engine's SDK state dir (CODEX_HOME / claudeConfigDir) by the verified request
+ * user in multi-tenant serve/headless deployments (secure-obo-design §8 Phase 0).
+ *
+ * The base dir is per-agent, not per-user — under concurrent turns of different users the
+ * codex engine rewrites the shared config.toml per turn, so one user's engine can launch
+ * pointed at another user's per-turn credential state. Scoping the home per verified user
+ * makes any remaining config race same-user (same credential ⇒ harmless).
+ *
+ * Returns the base dir unchanged when no verified user is in scope: the IDE and
+ * single-tenant CLI paths have no `runWithCredential` frame and must be unaffected.
+ * The user id is hashed — it is an email/subject, never safe as a raw path segment.
+ */
+function userScopedEngineHome(baseHome, verifiedUserId) {
+    const uid = verifiedUserId?.trim();
+    if (!uid) {
+        return baseHome;
+    }
+    const hash = crypto.createHash('sha256').update(uid).digest('hex').slice(0, 16);
+    return path.join(baseHome, 'users', hash);
+}
 /**
  * Check if an agent is the default workspace agent.
  */

package/out/analytics/dashboard/fleetDisplayUtils.js

@@ -74,6 +74,9 @@ function formatFleetModelLabel(model, engine) {
         }
         return '—';
     }
+    if (raw === 'ah-auto' || raw.endsWith('::ah-auto')) {
+        return 'Auto';
+    }
     if (raw.startsWith('agentide-cursor::')) {
         const tail = raw.slice('agentide-cursor::'.length).trim() || 'auto';
         if (tail === 'auto') {

package/out/analytics/dashboard/provider.js

@@ -2058,12 +2058,23 @@ class AnalyticsDashboardProvider {
         await fs_1.promises.mkdir(panelDir, { recursive: true });
         const webviewBasePath = this.getWebviewPath();
         const bundledDir = path.join(this.extensionContext.extensionPath, webviewBasePath);
-        // Bundled source → user destination filename
+        // Bundled source → user destination filename.
+        // panel.js is deliberately NOT seeded: getHtmlContent always loads the bundled panel.js,
+        // so a seeded copy is never executed. Writing one only created a file that looks editable,
+        // silently diverges from the bundle, and makes "my dashboard edit did nothing" reports.
         const seedMap = [
-            { bundled: 'panel.js', userFile: 'panel.js' },
             { bundled: 'styles.css', userFile: 'panel.css' },
             { bundled: 'analytics-panel.html', userFile: 'panel.html' },
         ];
+        // Explain a pre-existing seeded copy rather than deleting the user's file.
+        try {
+            await fs_1.promises.access(path.join(panelDir, 'panel.js'));
+            this.outputChannel.appendLine(`[Dashboard] Note: ${path.join(panelDir, 'panel.js')} is not used — the bundled panel.js always loads. ` +
+                `Edit panel.html / panel.css to customize the dashboard.`);
+        }
+        catch {
+            // No stale copy — nothing to explain.
+        }
         for (const { bundled, userFile } of seedMap) {
             const dest = path.join(panelDir, userFile);
             try {