@agentrific/server 0.4.0 → 0.5.1

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @agentrific/server
 
+## 0.5.1
+
+### Patch Changes
+
+- Add a separate sandbox push service and require explicit test mode for sandbox grants so TestFlight purchases cannot unlock production notifications.
+
+## 0.5.0
+
+### Minor Changes
+
+- fbb6281: Group matching repositories across connected servers while keeping each task and chat associated with its server. Show repository identity and Git status, support explicit checkout association for older servers, and choose a task server directly in the native composer. Allow never-run backlog tasks to move safely between compatible servers.
+
+  Preserve native navigation and floating glass tabs, center and truncate conversation titles, show compact status dots, and improve navigation performance. Fix native task editor character loss, server picker alignment, and tool-call grid sizing.
+
 ## 0.4.0
 
 ### Minor Changes

package/cli.js

@@ -30,7 +30,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@agentrific/server",
-      version: "0.4.0",
+      version: "0.5.1",
       description: "Self-hosted control plane for long-running coding agents",
       keywords: [
         "agentrific",
@@ -246,7 +246,7 @@ function createPairingLink(payload) {
   link.searchParams.set("data", JSON.stringify(PairingPayloadSchema.parse(payload)));
   return link.toString();
 }
-var cronBounds, AutomationConfigSchema, AutomationStateSchema, SessionStatusSchema, AgentKindSchema, ModelReferenceSchema, ModelIdentitySchema, ModelOptionSchema, ModelCatalogSchema, GitFlowSchema, GitDeliverySchema, DeliveryRequestSchema, RunPreparationSchema, SessionSchema, MAX_ATTACHMENTS, MAX_ATTACHMENT_BYTES, AttachmentSchema, AttachmentIdsSchema, CreateSessionSchema, SendMessageSchema, FileChangeSchema, SessionEventSchema, RecordedEventSchema, EventHistorySchema, ServerEventSchema, ServerSettingsSchema, ConnectionsStatusSchema, UpdateSettingsSchema, ProjectSchema, TaskStatusSchema, TaskSchema, CreateTaskSchema, UpdateTaskSchema, PROTOCOL_VERSION, ServerUpdateStatusSchema, ServerHealthSchema, PairingPayloadSchema, PairingInvitationSchema, PairingRequestSchema, DeviceSchema, PairingResultSchema, HandshakeSchema, HandshakeAckSchema;
+var cronBounds, AutomationConfigSchema, AutomationStateSchema, SessionStatusSchema, AgentKindSchema, ModelReferenceSchema, ModelIdentitySchema, ModelOptionSchema, ModelCatalogSchema, GitFlowSchema, GitDeliverySchema, DeliveryRequestSchema, RunPreparationSchema, SessionSchema, MAX_ATTACHMENTS, MAX_ATTACHMENT_BYTES, AttachmentSchema, AttachmentIdsSchema, CreateSessionSchema, SendMessageSchema, FileChangeSchema, SessionEventSchema, RecordedEventSchema, EventHistorySchema, ServerEventSchema, ServerSettingsSchema, ConnectionsStatusSchema, UpdateSettingsSchema, RepositoryIdentitySchema, ProjectGitStatusSchema, ProjectSchema, TaskStatusSchema, TaskSchema, CreateTaskSchema, UpdateTaskSchema, PROTOCOL_VERSION, ServerUpdateStatusSchema, ServerHealthSchema, PairingPayloadSchema, PairingInvitationSchema, PairingRequestSchema, DeviceSchema, PairingResultSchema, HandshakeSchema, HandshakeAckSchema;
 var init_src = __esm({
   "../../packages/contracts/src/index.ts"() {
     cronBounds = [
@@ -476,11 +476,25 @@ var init_src = __esm({
       githubCli: z2.object({ installed: z2.boolean(), authenticated: z2.boolean() })
     });
     UpdateSettingsSchema = z2.object({ projectsRoot: z2.string().trim().min(1).max(4096) });
+    RepositoryIdentitySchema = z2.object({
+      key: z2.string(),
+      display: z2.string()
+    });
+    ProjectGitStatusSchema = z2.object({
+      observedAt: z2.string().datetime(),
+      state: z2.enum(["available", "unavailable"]),
+      repository: RepositoryIdentitySchema.nullable(),
+      head: z2.string().nullable(),
+      branch: z2.string().nullable(),
+      trackedChanges: z2.number().int().nonnegative(),
+      untrackedChanges: z2.number().int().nonnegative()
+    });
     ProjectSchema = z2.object({
       id: z2.string(),
       name: z2.string(),
       path: z2.string(),
-      available: z2.boolean().default(true)
+      available: z2.boolean().default(true),
+      repository: RepositoryIdentitySchema.nullable().optional()
     });
     TaskStatusSchema = z2.enum(["backlog", "needs_user_input", "running", "done"]);
     TaskSchema = z2.object({
@@ -499,6 +513,7 @@ var init_src = __esm({
       deletedAt: z2.string().datetime().optional()
     });
     CreateTaskSchema = z2.object({
+      clientTaskId: z2.string().min(1).max(128).regex(/^[a-zA-Z0-9_-]+$/).optional(),
       projectId: z2.string().min(1),
       title: z2.string().trim().min(1).max(120),
       prompt: z2.string().trim().max(2e4).default(""),
@@ -958,11 +973,12 @@ function pushSigningText(installationId, operation, request) {
     request.payload
   ].join("\n");
 }
-var PUSH_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
+var PUSH_API_URL, PUSH_SANDBOX_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
 var init_push = __esm({
   "../../packages/contracts/src/push.ts"() {
     "use strict";
     PUSH_API_URL = "https://api.agentrific.com";
+    PUSH_SANDBOX_API_URL = "https://sandbox-api.agentrific.com";
     PushKindSchema = z6.enum([
       "started",
       "completed",
@@ -1871,7 +1887,7 @@ function editTask(store2, id, input, resolveAttachments) {
   });
 }
 function deleteTask(store2, id, cleanup = async () => {
-}) {
+}, unrunUpdatedAt) {
   return withTaskLock(id, async () => {
     const task = await findTask(store2, id);
     const sessions = await Effect6.runPromise(store2.list());
@@ -1882,6 +1898,8 @@ function deleteTask(store2, id, cleanup = async () => {
     const associated = sessions.filter(
       (session) => session.taskId === task.id || session.id === task.sessionId
     );
+    if (unrunUpdatedAt !== void 0 && (task.updatedAt !== unrunUpdatedAt || task.sessionId || associated.length || task.status !== "backlog"))
+      throw new TaskActionError("This task changed or has already run. It cannot be moved.", 409);
     for (const session of associated) await cleanup(session);
     await Effect6.runPromise(
       store2.purgeTask(
@@ -2320,7 +2338,7 @@ import { promisify as promisify2, stripVTControlCharacters } from "node:util";
 function workflowLog(text) {
   return stripVTControlCharacters(text).slice(-32e3);
 }
-async function workflowCommand(cwd, command, args, signal, managedPreparation = false) {
+function workflowEnvironment() {
   const env = { ...process.env };
   for (const name of [
     "GIT_DIR",
@@ -2340,6 +2358,10 @@ async function workflowCommand(cwd, command, args, signal, managedPreparation =
     "GIT_REPLACE_REF_BASE"
   ])
     delete env[name];
+  return env;
+}
+async function workflowCommand(cwd, command, args, signal, managedPreparation = false) {
+  const env = workflowEnvironment();
   if (managedPreparation) env.AGENTRIFIC_MANAGED_PREPARATION = "1";
   const result = await exec(command, args, {
     cwd,
@@ -3573,6 +3595,113 @@ var init_projects = __esm({
   }
 });
 
+// src/project-git.ts
+import { execFile as execFile3 } from "node:child_process";
+import { promisify as promisify3 } from "node:util";
+function repositoryIdentity(remote) {
+  const input = remote.trim();
+  if (!input || input.startsWith("/") || input.startsWith(".")) return null;
+  const scp = /^(?:[^@/\s]+@)?([^/:\s]+):([^\s]+)$/.exec(input);
+  let url;
+  try {
+    url = new URL(scp && !input.includes("://") ? `ssh://${scp[1]}/${scp[2]}` : input);
+  } catch {
+    return null;
+  }
+  if (!["https:", "http:", "ssh:", "git:"].includes(url.protocol)) return null;
+  if (url.search || url.hash || url.port) return null;
+  const host2 = url.hostname.toLowerCase();
+  let path13 = url.pathname.replace(/^\/+|\/+$/g, "").replace(/\.git$/, "");
+  if (!host2 || !path13 || path13.includes("%") || path13.includes("//")) return null;
+  if (["github.com", "bitbucket.org"].includes(host2)) path13 = path13.toLowerCase();
+  const key = `${host2}/${path13}`;
+  return { key, display: key };
+}
+async function git(directory, args) {
+  const { stdout } = await execute3("git", ["-C", directory, ...args], {
+    timeout: 3e3,
+    maxBuffer: 1024 * 1024,
+    env: { ...workflowEnvironment(), GIT_OPTIONAL_LOCKS: "0", GIT_TERMINAL_PROMPT: "0" }
+  });
+  return stdout.trim();
+}
+async function readRepositoryIdentity(directory) {
+  try {
+    const remotes = (await git(directory, ["remote"])).split("\n").filter(Boolean);
+    const remote = remotes.includes("origin") ? "origin" : remotes.length === 1 ? remotes[0] : null;
+    if (!remote) return null;
+    return repositoryIdentity(await git(directory, ["remote", "get-url", remote]));
+  } catch {
+    return null;
+  }
+}
+async function inspect(directory) {
+  const observedAt = (/* @__PURE__ */ new Date()).toISOString();
+  try {
+    const [repository, head, branch, status] = await Promise.all([
+      readRepositoryIdentity(directory),
+      git(directory, ["rev-parse", "--verify", "HEAD"]),
+      git(directory, ["symbolic-ref", "--quiet", "--short", "HEAD"]).catch(() => null),
+      // NUL-separated records avoid ambiguous filenames/newlines. --no-renames
+      // keeps each entry one record, so we only need its two status characters.
+      execute3(
+        "git",
+        [
+          "-C",
+          directory,
+          "status",
+          "--porcelain=v1",
+          "-z",
+          "--no-renames",
+          "--untracked-files=normal"
+        ],
+        {
+          timeout: 3e3,
+          maxBuffer: 1024 * 1024,
+          env: { ...workflowEnvironment(), GIT_OPTIONAL_LOCKS: "0" }
+        }
+      )
+    ]);
+    const records = status.stdout.split("\0").filter(Boolean);
+    return {
+      observedAt,
+      state: "available",
+      repository,
+      head,
+      branch,
+      trackedChanges: records.filter((record) => !record.startsWith("??")).length,
+      untrackedChanges: records.filter((record) => record.startsWith("??")).length
+    };
+  } catch {
+    return {
+      observedAt,
+      state: "unavailable",
+      repository: null,
+      head: null,
+      branch: null,
+      trackedChanges: 0,
+      untrackedChanges: 0
+    };
+  }
+}
+function projectGitStatus(directory) {
+  const cached = observations.get(directory);
+  if (cached && cached.expires > Date.now()) return cached.value;
+  if (observations.size >= 200) observations.delete(observations.keys().next().value);
+  const value = inspect(directory);
+  observations.set(directory, { expires: Date.now() + 15e3, value });
+  return value;
+}
+var execute3, observations;
+var init_project_git = __esm({
+  "src/project-git.ts"() {
+    "use strict";
+    init_workflow_command();
+    execute3 = promisify3(execFile3);
+    observations = /* @__PURE__ */ new Map();
+  }
+});
+
 // src/push-schema.ts
 import { z as z16 } from "zod";
 var PushBindingSchema, PushStateSchema, PendingPushSchema;
@@ -4170,8 +4299,8 @@ import { styleText as styleText4 } from "node:util";
 import cors from "@fastify/cors";
 import multipart from "@fastify/multipart";
 import { randomUUID as randomUUID9 } from "node:crypto";
-import { execFile as execFile3 } from "node:child_process";
-import { promisify as promisify3 } from "node:util";
+import { execFile as execFile4 } from "node:child_process";
+import { promisify as promisify4 } from "node:util";
 import { realpath as realpath2 } from "node:fs/promises";
 import { homedir as homedir4 } from "node:os";
 import path11 from "node:path";
@@ -4384,10 +4513,11 @@ async function withSessionTaskLock(id, operation) {
   const lockId = session ? await sessionTaskLockId(store, session) : `session-${id}`;
   return withTaskLock(lockId, operation);
 }
-var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
+var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, sandboxPushUrl, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
 var init_index = __esm({
   async "src/index.ts"() {
     "use strict";
+    init_push();
     init_warnings();
     init_push2();
     init_attachments();
@@ -4406,6 +4536,7 @@ var init_index = __esm({
     init_models();
     init_pi();
     init_projects();
+    init_project_git();
     init_store();
     init_tasks();
     init_worktree_cleanup();
@@ -4416,7 +4547,7 @@ var init_index = __esm({
     worktreesRoot = path11.resolve(
       process.env.AGENTRIFIC_WORKTREES_DIR ?? path11.join(homedir4(), ".agentrific", "workspaces")
     );
-    execFileAsync = promisify3(execFile3);
+    execFileAsync = promisify4(execFile4);
     if (host !== "127.0.0.1" && host !== "::1")
       throw new Error("Bind Agentrific to loopback and expose it with Tailscale Serve or cloudflared.");
     app = Fastify({
@@ -4442,10 +4573,19 @@ var init_index = __esm({
     effects = ManagedRuntime.make(SessionStore.layer(path11.join(dataRoot, "sessions.sqlite")));
     store = await effects.runPromise(SessionStore);
     security = new ServerSecurity(store, await Effect17.runPromise(store.serverIdentity()));
+    sandboxPushUrl = process.env.AGENTRIFIC_PUSH_SANDBOX === "1" ? PUSH_SANDBOX_API_URL : void 0;
+    if (sandboxPushUrl && process.env.AGENTRIFIC_TEST_MODE !== "1")
+      throw new Error("Sandbox push requires explicit test mode.");
     testPushUrl = process.env.AGENTRIFIC_PUSH_TEST_URL;
     if (testPushUrl && (process.env.AGENTRIFIC_TEST_MODE !== "1" || !new URL(testPushUrl).hostname.endsWith(".ts.net") || new URL(testPushUrl).protocol !== "https:"))
       throw new Error("Test relay requires explicit test mode and Tailscale HTTPS.");
-    push = new ServerPush(store, security.serverId, dataRoot, fetch, testPushUrl);
+    push = new ServerPush(
+      store,
+      security.serverId,
+      dataRoot,
+      fetch,
+      testPushUrl ?? sandboxPushUrl
+    );
     allowedOrigins = [
       .../* @__PURE__ */ new Set([
         "agentrific-desktop://app",
@@ -4660,7 +4800,24 @@ var init_index = __esm({
       const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
       const result = await Effect17.runPromise(discoverProjects(root, store).pipe(Effect17.result));
       if (result._tag === "Failure") return reply.code(400).send({ error: result.failure.message });
-      return result.success;
+      return Effect17.runPromise(
+        Effect17.forEach(
+          result.success,
+          (project) => Effect17.promise(async () => ({
+            ...project,
+            repository: project.available ? await readRepositoryIdentity(project.path) : null
+          })),
+          { concurrency: 4 }
+        )
+      );
+    });
+    app.get("/api/projects/:id/git-status", async (request, reply) => {
+      const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+      const projects = await Effect17.runPromise(discoverProjects(root, store));
+      const project = projects.find((item) => item.id === request.params.id);
+      if (!project?.available)
+        return reply.code(404).send({ error: "Project folder unavailable on this server." });
+      return projectGitStatus(project.path);
     });
     app.get("/api/projects/:id", async (request, reply) => {
       const root = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
@@ -4684,39 +4841,51 @@ var init_index = __esm({
       "/api/tasks",
       (request) => boardTasks(store, request.query.projectId)
     );
+    app.get("/api/task-moves", () => ({ supported: true }));
     app.post("/api/tasks", async (request, reply) => {
       const parsed = CreateTaskSchema.safeParse(request.body);
       if (!parsed.success) return reply.code(400).send({ error: "Enter a task title." });
-      if (parsed.data.gitFlow?.delivery === "pull_request") {
-        const github = await githubCliStatus();
-        if (!github.githubCli.authenticated)
-          return reply.code(400).send({ error: "GitHub CLI must be authenticated on the server to open a PR." });
-      }
-      const projectsRoot = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
-      const projects = await Effect17.runPromise(
-        discoverProjects(projectsRoot, store).pipe(Effect17.result)
-      );
-      if (projects._tag === "Failure" || !projects.success.some((project) => project.id === parsed.data.projectId && project.available))
-        return reply.code(404).send({ error: "Project not found in the server's projects folder." });
-      let files;
-      try {
-        files = await Effect17.runPromise(
-          attachments.resolve(parsed.data.projectId, parsed.data.attachmentIds ?? [])
+      const save = async () => {
+        if (parsed.data.clientTaskId) {
+          const existing = await Effect17.runPromise(store.getTask(parsed.data.clientTaskId));
+          if (existing) {
+            if (existing.deletedAt || existing.projectId !== parsed.data.projectId || existing.title !== parsed.data.title || existing.prompt !== parsed.data.prompt || JSON.stringify(existing.gitFlow) !== JSON.stringify(parsed.data.gitFlow) || JSON.stringify(existing.model) !== JSON.stringify(parsed.data.model))
+              return reply.code(409).send({ error: "This task creation request has already been used." });
+            return reply.code(201).send(existing);
+          }
+        }
+        if (parsed.data.gitFlow?.delivery === "pull_request") {
+          const github = await githubCliStatus();
+          if (!github.githubCli.authenticated)
+            return reply.code(400).send({ error: "GitHub CLI must be authenticated on the server to open a PR." });
+        }
+        const projectsRoot = await Effect17.runPromise(store.projectsRoot(defaultProjectsRoot));
+        const projects = await Effect17.runPromise(
+          discoverProjects(projectsRoot, store).pipe(Effect17.result)
         );
-      } catch (error) {
-        return reply.code(400).send({ error: String(error) });
-      }
-      const now = (/* @__PURE__ */ new Date()).toISOString();
-      const task = TaskSchema.parse({
-        id: randomUUID9(),
-        ...parsed.data,
-        attachments: files,
-        status: "backlog",
-        sessionId: null,
-        createdAt: now,
-        updatedAt: now
-      });
-      return reply.code(201).send(await Effect17.runPromise(store.saveTask(task)));
+        if (projects._tag === "Failure" || !projects.success.some((project) => project.id === parsed.data.projectId && project.available))
+          return reply.code(404).send({ error: "Project not found in the server's projects folder." });
+        let files;
+        try {
+          files = await Effect17.runPromise(
+            attachments.resolve(parsed.data.projectId, parsed.data.attachmentIds ?? [])
+          );
+        } catch (error) {
+          return reply.code(400).send({ error: String(error) });
+        }
+        const now = (/* @__PURE__ */ new Date()).toISOString();
+        const task = TaskSchema.parse({
+          id: parsed.data.clientTaskId ?? randomUUID9(),
+          ...parsed.data,
+          attachments: files,
+          status: "backlog",
+          sessionId: null,
+          createdAt: now,
+          updatedAt: now
+        });
+        return reply.code(201).send(await Effect17.runPromise(store.saveTask(task)));
+      };
+      return parsed.data.clientTaskId ? withTaskLock(`create-task:${parsed.data.clientTaskId}`, save) : save();
     });
     app.patch("/api/tasks/:id", async (request, reply) => {
       const parsed = UpdateTaskSchema.safeParse(request.body);
@@ -4743,6 +4912,18 @@ var init_index = __esm({
         throw error;
       }
     });
+    app.post("/api/tasks/:id/discard-unrun", async (request, reply) => {
+      const parsed = z18.object({ updatedAt: z18.string().datetime() }).safeParse(request.body);
+      if (!parsed.success) return reply.code(400).send({ error: "The task revision is required." });
+      try {
+        await deleteTask(store, request.params.id, void 0, parsed.data.updatedAt);
+        return reply.code(204).send();
+      } catch (error) {
+        if (error instanceof TaskActionError)
+          return reply.code(error.status).send({ error: error.message });
+        throw error;
+      }
+    });
     app.delete("/api/tasks/:id", async (request, reply) => {
       try {
         await deleteTask(store, request.params.id, async (session) => {