@agentrific/server 0.5.0 → 0.5.2

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @agentrific/server
 
+## 0.5.2
+
+### Patch Changes
+
+- fe18d59: Add automatic updates for signed macOS desktop releases and an optional bundled local server that continues in the tray. Defer update installation and server shutdown while local agents are active. Host the web app and architecture-specific update feeds at app.agentrific.com.
+
+  Keep local control sockets usable with long data directory paths and allow the hosted web app to connect to paired servers.
+
+## 0.5.1
+
+### Patch Changes
+
+- Add a separate sandbox push service and require explicit test mode for sandbox grants so TestFlight purchases cannot unlock production notifications.
+
 ## 0.5.0
 
 ### Minor Changes

package/cli.js

@@ -30,7 +30,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@agentrific/server",
-      version: "0.5.0",
+      version: "0.5.2",
       description: "Self-hosted control plane for long-running coding agents",
       keywords: [
         "agentrific",
@@ -203,6 +203,21 @@ var init_updates = __esm({
   }
 });
 
+// ../../packages/contracts/src/control-socket.ts
+import { createHash } from "node:crypto";
+import { join, resolve } from "node:path";
+function controlSocketPath(directory, uid = process.getuid?.()) {
+  const direct = join(resolve(directory), "control.sock");
+  if (Buffer.byteLength(direct) < 100) return direct;
+  if (uid === void 0) throw new Error("Local control sockets require macOS or Linux.");
+  const digest2 = createHash("sha256").update(resolve(directory)).digest("hex").slice(0, 32);
+  return join("/tmp", `agentrific-${uid}`, `${digest2}.sock`);
+}
+var init_control_socket = __esm({
+  "../../packages/contracts/src/control-socket.ts"() {
+  }
+});
+
 // ../../packages/contracts/src/index.ts
 import { z as z2 } from "zod";
 function cronRange(base, min, max, stepped) {
@@ -590,7 +605,7 @@ var init_src = __esm({
 
 // src/control.ts
 import { createServer, createConnection } from "node:net";
-import { chmod, mkdir as mkdir2, readFile, unlink as unlink2, writeFile as writeFile2 } from "node:fs/promises";
+import { chmod, mkdir as mkdir2, lstat, readFile, unlink as unlink2, writeFile as writeFile2 } from "node:fs/promises";
 import path2 from "node:path";
 import { Effect as Effect2 } from "effect";
 import { z as z3 } from "zod";
@@ -635,8 +650,14 @@ async function acquireServerLock(directory) {
       await unlink2(filename);
   };
 }
-async function startControl(directory, security2, status, maintenance2) {
-  const filename = path2.join(directory, "control.sock");
+async function startControl(directory, security2, status, maintenance2, shutdown) {
+  const filename = controlSocketPath(directory);
+  const socketDirectory = path2.dirname(filename);
+  await mkdir2(socketDirectory, { recursive: true, mode: 448 });
+  const metadata = await lstat(socketDirectory);
+  if (!metadata.isDirectory() || metadata.uid !== process.getuid?.())
+    throw new Error("Local control directory must be private and owned by this user.");
+  await chmod(socketDirectory, 448);
   await unlink2(filename).catch((error) => {
     if (!z3.object({ code: z3.literal("ENOENT") }).safeParse(error).success) throw error;
   });
@@ -656,6 +677,13 @@ async function startControl(directory, security2, status, maintenance2) {
           const request = ControlRequest.parse(JSON.parse(buffer.split("\n")[0]));
           let result;
           switch (request.command) {
+            case "shutdown":
+              if (!shutdown || !maintenance2?.status().drained)
+                throw new Error("Drain the server before shutdown");
+              socket.end(JSON.stringify({ result: { shutdown: true } }) + "\n", () => {
+                setImmediate(() => void shutdown());
+              });
+              return;
             case "pair":
               result = security2.createPairing();
               break;
@@ -682,20 +710,20 @@ async function startControl(directory, security2, status, maintenance2) {
     });
     socket.on("error", () => socket.destroy());
   });
-  await new Promise((resolve, reject) => {
+  await new Promise((resolve2, reject) => {
     server.once("error", reject);
-    server.listen(filename, resolve);
+    server.listen(filename, resolve2);
   });
   await chmod(filename, 384);
   return async () => {
     await new Promise(
-      (resolve, reject) => server.close((error) => error ? reject(error) : resolve())
+      (resolve2, reject) => server.close((error) => error ? reject(error) : resolve2())
     );
   };
 }
 function controlRequest(directory, command) {
-  return new Promise((resolve, reject) => {
-    const socket = createConnection(path2.join(directory, "control.sock"));
+  return new Promise((resolve2, reject) => {
+    const socket = createConnection(controlSocketPath(directory));
     socket.setTimeout(command.command === "maintenance" ? 65e3 : 5e3, () => {
       socket.destroy();
       reject(new Error("Server did not respond."));
@@ -711,7 +739,7 @@ function controlRequest(directory, command) {
         const result = z3.object({ result: ControlResultSchema.optional(), error: z3.string().optional() }).parse(JSON.parse(response));
         if (result.error) throw new Error(result.error);
         if (!result.result) throw new Error("Server returned an empty response.");
-        resolve(result.result);
+        resolve2(result.result);
       } catch (error) {
         reject(error);
       }
@@ -722,6 +750,7 @@ var MaintenanceSchema, ControlStatusSchema, ControlResultSchema, ControlRequest;
 var init_control = __esm({
   "src/control.ts"() {
     "use strict";
+    init_control_socket();
     init_src();
     MaintenanceSchema = z3.object({
       active: z3.boolean(),
@@ -731,6 +760,7 @@ var init_control = __esm({
     ControlStatusSchema = z3.object({
       serverId: z3.string().uuid(),
       publicUrl: z3.string().optional(),
+      localUrl: z3.string().optional(),
       serverVersion: z3.string().optional(),
       connectedDevices: z3.number().optional(),
       connectedSockets: z3.number().optional(),
@@ -748,12 +778,14 @@ var init_control = __esm({
       DeviceSchema.array(),
       ControlStatusSchema,
       z3.object({ revoked: z3.boolean() }),
+      z3.object({ shutdown: z3.literal(true) }),
       MaintenanceSchema
     ]);
     ControlRequest = z3.discriminatedUnion("command", [
       z3.object({ command: z3.literal("pair") }),
       z3.object({ command: z3.literal("devices") }),
       z3.object({ command: z3.literal("status") }),
+      z3.object({ command: z3.literal("shutdown") }),
       z3.object({ command: z3.literal("revoke"), id: z3.string().uuid() }),
       z3.object({
         command: z3.literal("maintenance"),
@@ -855,7 +887,7 @@ function printManualPairing(invitation) {
 }
 function waitForManualPairing(invitation) {
   console.log(styleText2("dim", "  Press j to show manual entry \xB7 Enter or q to finish.\n"));
-  return new Promise((resolve) => {
+  return new Promise((resolve2) => {
     const input = process.stdin;
     const previousRaw = input.isRaw;
     const timeout = setTimeout(
@@ -875,7 +907,7 @@ function waitForManualPairing(invitation) {
       process.removeListener("SIGTERM", terminated);
       input.setRawMode(previousRaw);
       input.pause();
-      resolve();
+      resolve2();
     }
     function interrupted() {
       process.exitCode = 130;
@@ -973,11 +1005,12 @@ function pushSigningText(installationId, operation, request) {
     request.payload
   ].join("\n");
 }
-var PUSH_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
+var PUSH_API_URL, PUSH_SANDBOX_API_URL, PushKindSchema, PushPreferencesSchema, PushPublicKeySchema, PushInstallationSchema, PushRegistrationSchema, PushEnrollmentSchema, PushGrantSchema, PushPullRequestUrlSchema, PushEventSchema, PushSignedRequestSchema, PushEntitlementSchema, PushServerStatusSchema;
 var init_push = __esm({
   "../../packages/contracts/src/push.ts"() {
     "use strict";
     PUSH_API_URL = "https://api.agentrific.com";
+    PUSH_SANDBOX_API_URL = "https://sandbox-api.agentrific.com";
     PushKindSchema = z6.enum([
       "started",
       "completed",
@@ -1541,7 +1574,7 @@ var init_event_server = __esm({
 });
 
 // src/security.ts
-import { createHash, randomBytes, randomInt, randomUUID as randomUUID3, timingSafeEqual } from "node:crypto";
+import { createHash as createHash2, randomBytes, randomInt, randomUUID as randomUUID3, timingSafeEqual } from "node:crypto";
 import { Effect as Effect5 } from "effect";
 import { z as z8 } from "zod";
 async function registerSecurity(app2, security2, version, allowedOrigins2) {
@@ -1629,7 +1662,7 @@ var init_security = __esm({
     init_src();
     init_pairing();
     secret = () => randomBytes(32).toString("hex");
-    digest = (value) => createHash("sha256").update(value).digest("hex");
+    digest = (value) => createHash2("sha256").update(value).digest("hex");
     ServerSecurity = class {
       constructor(store2, serverId) {
         this.store = store2;
@@ -1755,7 +1788,7 @@ var init_maintenance = __esm({
         this.enter();
         const deadline = Date.now() + timeoutMs;
         while (!this.status().drained && Date.now() < deadline)
-          await new Promise((resolve) => setTimeout(resolve, 50));
+          await new Promise((resolve2) => setTimeout(resolve2, 50));
         return this.status();
       }
       attach(app2) {
@@ -4182,7 +4215,7 @@ var init_store = __esm({
 });
 
 // src/worktree-cleanup.ts
-import { lstat, rm as rm2 } from "node:fs/promises";
+import { lstat as lstat2, rm as rm2 } from "node:fs/promises";
 import path10 from "node:path";
 import { Effect as Effect15 } from "effect";
 async function removeRunFiles(dataRoot2, sessionId) {
@@ -4208,7 +4241,7 @@ var init_worktree_cleanup = __esm({
       async remove(session, discardChanges = true) {
         if (session.gitFlow?.workspace !== "worktree" || !session.workspacePath) return;
         const workspace = path10.resolve(session.workspacePath);
-        const info = await lstat(workspace).catch((error) => {
+        const info = await lstat2(workspace).catch((error) => {
           if (error.code === "ENOENT") return void 0;
           throw error;
         });
@@ -4512,10 +4545,15 @@ async function withSessionTaskLock(id, operation) {
   const lockId = session ? await sessionTaskLockId(store, session) : `session-${id}`;
   return withTaskLock(lockId, operation);
 }
-var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
+function localServerUrl() {
+  const address = z18.object({ port: z18.number() }).safeParse(app.server.address());
+  return address.success ? `http://${host}:${address.data.port}` : void 0;
+}
+var host, port, defaultProjectsRoot, worktreesRoot, execFileAsync, app, dataRoot, releaseLock, effects, store, security, sandboxPushUrl, testPushUrl, push, allowedOrigins, attachmentEffects, attachments, attachmentCleanup, models, delivery, preparation, agentEffects, runtime, worktreeCleanup, maxWorktreeAgeDays, pruneWorktrees, worktreeCleanupTimer, updates, maintenance, stopUpdateDiscovery, HistoryQuery, StartTaskBody, automation, automationTimer, closeControl;
 var init_index = __esm({
   async "src/index.ts"() {
     "use strict";
+    init_push();
     init_warnings();
     init_push2();
     init_attachments();
@@ -4571,13 +4609,23 @@ var init_index = __esm({
     effects = ManagedRuntime.make(SessionStore.layer(path11.join(dataRoot, "sessions.sqlite")));
     store = await effects.runPromise(SessionStore);
     security = new ServerSecurity(store, await Effect17.runPromise(store.serverIdentity()));
+    sandboxPushUrl = process.env.AGENTRIFIC_PUSH_SANDBOX === "1" ? PUSH_SANDBOX_API_URL : void 0;
+    if (sandboxPushUrl && process.env.AGENTRIFIC_TEST_MODE !== "1")
+      throw new Error("Sandbox push requires explicit test mode.");
     testPushUrl = process.env.AGENTRIFIC_PUSH_TEST_URL;
     if (testPushUrl && (process.env.AGENTRIFIC_TEST_MODE !== "1" || !new URL(testPushUrl).hostname.endsWith(".ts.net") || new URL(testPushUrl).protocol !== "https:"))
       throw new Error("Test relay requires explicit test mode and Tailscale HTTPS.");
-    push = new ServerPush(store, security.serverId, dataRoot, fetch, testPushUrl);
+    push = new ServerPush(
+      store,
+      security.serverId,
+      dataRoot,
+      fetch,
+      testPushUrl ?? sandboxPushUrl
+    );
     allowedOrigins = [
       .../* @__PURE__ */ new Set([
         "agentrific-desktop://app",
+        "https://app.agentrific.com",
         ...(process.env.AGENTRIFIC_ALLOWED_ORIGINS ?? "http://localhost:8081,http://127.0.0.1:8081").split(","),
         `http://${host === "::1" ? "[::1]" : host}:${port}`,
         ...process.env.AGENTRIFIC_PUBLIC_URL ? [new URL(process.env.AGENTRIFIC_PUBLIC_URL).origin] : []
@@ -5110,6 +5158,7 @@ var init_index = __esm({
       () => ({
         serverId: security.serverId,
         publicUrl: process.env.AGENTRIFIC_PUBLIC_URL,
+        localUrl: localServerUrl(),
         serverVersion,
         connectedDevices: new Set(security.sockets.values()).size,
         connectedSockets: security.sockets.size,
@@ -5117,7 +5166,11 @@ var init_index = __esm({
         activeRuns: activeAgents(Effect17.runSync(store.list())),
         maintenance: maintenance.status()
       }),
-      maintenance
+      maintenance,
+      async () => {
+        await app.close();
+        process.exit(0);
+      }
     );
     push.start();
     app.addHook("onClose", async () => {
@@ -5285,7 +5338,7 @@ function signalChild(child, signal) {
   }
 }
 function execute2(file, args, timeoutMs, env = process.env) {
-  return new Promise((resolve, reject) => {
+  return new Promise((resolve2, reject) => {
     const child = spawn(file, args, {
       env,
       detached: process.platform !== "win32",
@@ -5313,7 +5366,7 @@ function execute2(file, args, timeoutMs, env = process.env) {
     child.once("close", (code) => {
       clearTimeout(timeout);
       if (code !== 0) reject(new Error("Command probe failed."));
-      else resolve({ stdout, stderr });
+      else resolve2({ stdout, stderr });
     });
     function checkOutput() {
       if (stdout.length + stderr.length <= 1048576) return;
@@ -5460,7 +5513,7 @@ var ManagedTunnel = class {
     process.once("SIGINT", this.stopOnSignal);
     process.once("SIGTERM", this.stopOnSignal);
     process.once("exit", this.stopOnExit);
-    return new Promise((resolve, reject) => {
+    return new Promise((resolve2, reject) => {
       let output = "";
       let address;
       let settled = false;
@@ -5488,7 +5541,7 @@ var ManagedTunnel = class {
         this.connected = true;
         clearTimeout(timeout);
         signal?.removeEventListener("abort", abort);
-        resolve(address);
+        resolve2(address);
       };
       child.stdout?.on("data", read);
       child.stderr?.on("data", read);
@@ -5519,11 +5572,11 @@ var ManagedTunnel = class {
     const child = this.child;
     if (!child?.pid || child.exitCode !== null || child.signalCode !== null)
       return Promise.resolve();
-    this.closing ??= new Promise((resolve) => {
+    this.closing ??= new Promise((resolve2) => {
       const timeout = setTimeout(() => signalChild(child, "SIGKILL"), 2e3);
       child.once("close", () => {
         clearTimeout(timeout);
-        resolve();
+        resolve2();
       });
       signalChild(child, "SIGTERM");
     });