@agentsdock/server 1.0.11-beta.1 → 1.0.11-beta.12

package/server/public_chat_shares.py

@@ -26,6 +26,7 @@ import time
 from typing import Any, Callable, Iterator
 
 from shared_chat_videos import normalize_shared_chat_videos
+from shared_chat_analytics_web import SCRIPT as _ANALYTICS_SCRIPT, CSP_HASH as _ANALYTICS_HASH
 
 
 # Pagination targets, not quotas: one complete message may exceed a page target.
@@ -644,16 +645,21 @@ def _render_message_markdown(text: str) -> str:
     return "".join(parts)
 
 
-def public_chat_share_headers(*, allow_unlock_form: bool = False) -> dict[str, str]:
+def public_chat_share_headers(*, allow_unlock_form: bool = False, analytics: bool = False) -> dict[str, str]:
     """Use these headers for both successful viewer pages and unavailable pages."""
+    analytics = analytics and not allow_unlock_form
     return {
         "Content-Type": "text/html; charset=utf-8",
         "Content-Security-Policy": (
-            "default-src 'none'; script-src 'none'; "
-            f"style-src 'sha256-{_STYLE_HASH}'; "
-            "img-src 'none'; media-src 'self'; connect-src 'none'; base-uri 'none'; "
+            "default-src 'none'; "
+            + (f"script-src 'sha256-{_ANALYTICS_HASH}'; " if analytics else "script-src 'none'; ")
+            + f"style-src 'sha256-{_STYLE_HASH}'; "
+            "img-src 'none'; media-src 'self'; "
+            + ("connect-src https://api.mixpanel.com; " if analytics else "connect-src 'none'; ")
+            + "base-uri 'none'; "
             + ("form-action 'self'; frame-ancestors 'none'; sandbox allow-forms allow-same-origin"
-               if allow_unlock_form else "form-action 'none'; frame-ancestors 'none'; sandbox allow-same-origin")
+               if allow_unlock_form else "form-action 'none'; frame-ancestors 'none'; sandbox allow-same-origin"
+               + (" allow-scripts" if analytics else ""))
         ),
         "Cache-Control": "no-store",
         # A native navigation form under no-referrer submits Origin: null in
@@ -694,7 +700,8 @@ def render_public_chat_unlock_html(share_id: str, *, invalid_token: bool = False
 
 
 def render_public_chat_html(snapshot: dict[str, Any], *, page: int = 0, page_count: int = 1,
-                            message_count: int | None = None, navigation_base: str | None = None) -> bytes:
+                            message_count: int | None = None, navigation_base: str | None = None,
+                            analytics: bool = False) -> bytes:
     """Render a static transcript with escaped, presentation-only Markdown."""
     if not isinstance(snapshot, dict) or set(snapshot) != {"title", "created_at", "messages"}:
         raise PublicChatShareValidationError("Invalid public snapshot fields.")
@@ -753,5 +760,8 @@ def render_public_chat_html(snapshot: dict[str, Any], *, page: int = 0, page_cou
                          f'<figcaption>{filename}</figcaption></figure>')
         parts.append('</div>')
         parts.append('</section>')
-    parts.append(f'</div>{navigation}<footer class="conversation-footer"><p>This is a saved copy. Replies and updates stay in the original chat.</p><p class="footer-brand">Shared with AgentsDock</p></footer><div id="conversation-end"></div></main></body></html>')
+    parts.append(f'</div>{navigation}<footer class="conversation-footer"><p>This is a saved copy. Replies and updates stay in the original chat.</p><p class="footer-brand">Shared with AgentsDock</p></footer><div id="conversation-end"></div></main>')
+    if analytics:
+        parts.append(f'<script data-share-analytics>{_ANALYTICS_SCRIPT}</script>')
+    parts.append('</body></html>')
     return "".join(parts).encode("utf-8")

package/server/server_instances.py

@@ -666,11 +666,8 @@ def show(instance: Instance, *, network: dict[str, str] | None = None):
     print()
 
 
-def show_status(instance: Instance, *, network: dict[str, str]) -> None:
-    """Read-only per-instance summary; never print configuration or tokens."""
-    item = describe(instance)
-    print(terminal_color(f"Server ({item['name']}):", "34"))
-    print(f"  Status:   {item['status']}")
+def show_connection_addresses(instance: Instance, item: dict, network: dict[str, str]) -> None:
+    """Use the same binding-aware address order for status and token display."""
     addresses = []
     if item["port"]:
         choices = connection_choices(read_config(instance).get("AGENTSDOCK_AGENT_BIND", "0.0.0.0"),
@@ -683,11 +680,150 @@ def show_status(instance: Instance, *, network: dict[str, str]) -> None:
     print("  Address:  " + (addresses[0] if addresses else "Not configured"))
     for address in addresses[1:]:
         print("            " + address)
+
+
+def show_status(instance: Instance, *, network: dict[str, str]) -> None:
+    """Read-only per-instance summary; never print configuration or tokens."""
+    item = describe(instance)
+    print(terminal_color(f"Server ({item['name']}):", "34"))
+    print(f"  Status:   {item['status']}")
+    show_connection_addresses(instance, item, network)
     print(f"  Version:  {item['version'] or 'unknown'}")
     print(f"  Port:     {item['port'] or 'Not configured'}")
     print()
 
 
+LOG_READ_BYTES = 1024 * 1024
+
+
+def log_line_count(value: str) -> int:
+    if not re.fullmatch(r"[0-9]{1,5}", value) or int(value) > 10000:
+        raise argparse.ArgumentTypeError("Log lines must be between 0 and 10000.")
+    return int(value)
+
+
+def log_sources(instance: Instance, platform: str) -> tuple[list[Path], list[str]]:
+    """Resolve fixed local log sources; never execute configuration or adopt paths."""
+    manifest = instance.runtime / "execution-layout.json"
+    check_path(manifest, instance.home)
+    if manifest.exists():
+        from execution_install import installed_layout
+
+        layout = installed_layout(instance.runtime)
+        if (instance.name != "default" or layout.install_root != instance.runtime
+                or layout.config_root != instance.config or layout.state_root != instance.state
+                or layout.home != instance.home
+                or layout.platform != ("Darwin" if platform == "darwin" else "Linux")):
+            raise ValueError("Execution log layout does not match the selected instance.")
+        return ([instance.state / "execution/logs" / f"{role}.{stream}.log"
+                 for role in ("gateway", "worker") for stream in ("stdout", "stderr")],
+                ["agents-server-gateway.service", "agents-server.service"])
+    validate_binding(instance, platform)
+    return ([instance.logs / "server.log", instance.logs / "server-error.log"],
+            [service_name(instance.name) + ".service"])
+
+
+def read_log_slice(instance: Instance, path: Path, lines: int,
+                   cursor: tuple[int, int, int] | None = None) -> tuple[bytes, tuple[int, int, int] | None, bool]:
+    """Bounded tail on first read, then bounded appended bytes; reopen on rotation.
+
+    Revalidate every open, including followed replacements. No shell tail process,
+    FIFO, symlink or file outside the selected fixed log roots is followed.
+    """
+    check_path(path, instance.home)
+    try:
+        fd = os.open(path, os.O_RDONLY | os.O_NOFOLLOW | os.O_NONBLOCK)
+    except FileNotFoundError:
+        # Remember that viewing has begun so a file created during --follow is
+        # read from its start, including with --lines 0.
+        return b"", cursor or (0, 0, 0), False
+    with os.fdopen(fd, "rb") as handle:
+        info = os.fstat(handle.fileno())
+        if (not stat.S_ISREG(info.st_mode) or info.st_uid != os.getuid()
+                or info.st_mode & 0o022 or info.st_nlink != 1):
+            raise ValueError(f"Unsafe service log: {path.name}")
+        identity = (info.st_dev, info.st_ino)
+        truncated = False
+        if cursor is None:
+            start = max(0, info.st_size - LOG_READ_BYTES) if lines else info.st_size
+            truncated = bool(start and lines)
+        elif cursor[:2] == identity and info.st_size >= cursor[2]:
+            start = cursor[2]
+        else:
+            start = 0  # The file was replaced or truncated, not a new history scan.
+        handle.seek(start)
+        data = handle.read(min(LOG_READ_BYTES, max(0, info.st_size - start)))
+        next_cursor = (*identity, start + len(data))
+        if cursor is None:
+            if truncated:
+                _partial, separator, rest = data.partition(b"\n")
+                data = rest if separator else b""
+            data = b"\n".join(data.split(b"\n")[-lines - (1 if data.endswith(b"\n") else 0):]) if lines else b""
+        return data, next_cursor, truncated
+
+
+def print_log_data(data: bytes) -> None:
+    # Logs are untrusted text; do not execute terminal escape/control sequences.
+    text = data.decode("utf-8", errors="replace")
+    text = "".join(f"\\x{ord(char):02x}" if (ord(char) < 32 and char not in "\n\t")
+                   or 127 <= ord(char) < 160 else char for char in text)
+    print(text, end="" if text.endswith("\n") else "\n", flush=True)
+
+
+def show_logs(instance: Instance, *, lines: int = 100, follow: bool = False,
+              platform: str = sys.platform) -> int:
+    if platform != "darwin" and not platform.startswith("linux"):
+        raise ValueError("Service logs are supported on macOS and Linux only.")
+    paths, units = log_sources(instance, platform)
+    port = read_config(instance).get("AGENTSDOCK_AGENT_PORT", "")
+    print(terminal_color(f"Logs ({instance.name}):", "34"), flush=True)
+    if port.isdigit() and 1 <= int(port) <= 65535:
+        print(f"  Port: {int(port)}", flush=True)
+    print("  Logs may contain private data. Review before sharing.", flush=True)
+    if follow:
+        print("  Following new entries; Ctrl+C stops viewing, not the server.", flush=True)
+    if platform.startswith("linux"):
+        print(f"  Last {lines} journal entries across: {', '.join(units)}\n", flush=True)
+        command = ["journalctl", "--user", "--no-pager", "--output=short-iso", "--lines", str(lines)]
+        for unit in units:
+            command += ["--unit", unit]
+        if follow:
+            command.append("--follow")
+        try:
+            result = subprocess.run(command, env={**os.environ, "SYSTEMD_COLORS": "0",
+                                    "SYSTEMD_PAGERSECURE": "1"}, check=False,
+                                    timeout=None if follow else 15)
+            return result.returncode if result.returncode >= 0 else 130
+        except subprocess.TimeoutExpired:
+            raise ValueError("Reading the service journal timed out. Try again with fewer lines.") from None
+        except KeyboardInterrupt:
+            print("\nStopped viewing logs.", flush=True)
+            return 0
+    print(f"  Last {lines} lines per file (up to 1 MiB per file).\n", flush=True)
+    cursors: dict[Path, tuple[int, int, int] | None] = {path: None for path in paths}
+    first = True
+    try:
+        while True:
+            for path in paths:
+                data, cursor, truncated = read_log_slice(instance, path, lines, cursors[path])
+                cursors[path] = cursor
+                if first or data or truncated:
+                    print(f"==> {path.name} <==", flush=True)
+                    if truncated:
+                        print("[Older bytes omitted: initial read is limited to 1 MiB.]", flush=True)
+                    if data:
+                        print_log_data(data)
+                    elif first:
+                        print("(no log entries to show)", flush=True)
+            if not follow:
+                return 0
+            first = False
+            time.sleep(0.25)
+    except KeyboardInterrupt:
+        print("\nStopped viewing logs.", flush=True)
+        return 0
+
+
 def read_token_menu_key(fd: int) -> str:
     key = os.read(fd, 1)
     if key in (b"", b"\x03", b"\x04"):
@@ -754,9 +890,10 @@ def arrow_token_choice(rows: list[str], fd: int, settings: list) -> int | None:
         sys.stdout.flush()
 
 
-def choose_token_instance(registry: Registry) -> Instance | None:
+def choose_token_instance(registry: Registry, items: list[Instance] | None = None) -> Instance | None:
     """Select by stable instance name; never default or expose unselected tokens."""
-    items = registry.instances()
+    if items is None:
+        items = registry.instances()
     if not items:
         print("No installations found. Run agentsdock setup to create your first server.")
         return None
@@ -807,6 +944,34 @@ def choose_token_instance(registry: Registry) -> Instance | None:
         print(f"Please enter a number from 1 to {len(items)} or a listed server name (Enter cancels).")
 
 
+def show_instance_token(instance: Instance, *, network: dict[str, str] | None = None) -> int:
+    # Redirected explicit token commands retain their raw, single-token output.
+    if sys.stdin.isatty() and sys.stdout.isatty():
+        print(terminal_color(f"\nServer ({instance.name}):", "34"))
+        show_connection_addresses(instance, describe(instance), network if network is not None else tailscale_status())
+        sys.stdout.flush()  # Keep the URL before the child helper's token/prompt.
+    try:
+        run(["/bin/bash", str(ROOT / "install.sh"), "--instance", instance.name, "--show-token"],
+            env=clean_environment(instance), cwd=ROOT)
+        return 0
+    except subprocess.CalledProcessError as exc:
+        return exc.returncode if exc.returncode > 0 else 1
+
+
+def offer_status_token(registry: Registry, items: list[Instance], network: dict[str, str]) -> int:
+    if not items or not (sys.stdin.isatty() and sys.stdout.isatty()):
+        return 0
+    try:
+        answer = input("View a server's URL and access token? [y/N] ").strip().lower()
+    except (EOFError, KeyboardInterrupt):
+        print()
+        return 0
+    if answer not in {"y", "yes"}:
+        return 0
+    selected = choose_token_instance(registry, items)
+    return show_instance_token(selected, network=network) if selected is not None else 0
+
+
 def terminal_color(text: str, code: str) -> str:
     color = sys.stdout.isatty() and os.environ.get("TERM") != "dumb" and "NO_COLOR" not in os.environ
     return f"\033[{code}m{text}\033[0m" if color else text
@@ -952,13 +1117,19 @@ def parser() -> argparse.ArgumentParser:
     result = argparse.ArgumentParser(description="Independent AgentsServer instances for the current OS user. Defaults to list.")
     commands = result.add_subparsers(dest="command")
     commands.add_parser("list")
-    commands.add_parser("token", help="Choose an existing server and display only its access token")
+    token = commands.add_parser("token", help="Choose an existing server and display its URL and access token")
+    token.add_argument("name", nargs="?", type=instance_name)
     info = commands.add_parser("info")
     info.add_argument("name", type=instance_name)
     pairing = commands.add_parser("_pair-info", help=argparse.SUPPRESS)
     pairing.add_argument("name", type=instance_name)
     status = commands.add_parser("status", help="Show readable details for all instances or one name")
     status.add_argument("name", nargs="?", type=instance_name)
+    logs = commands.add_parser("logs", help="Read recent local service logs; use --follow for live output")
+    logs.add_argument("name", nargs="?", type=instance_name)
+    logs.add_argument("--instance", dest="named", type=instance_name)
+    logs.add_argument("-n", "--lines", type=log_line_count, default=100)
+    logs.add_argument("-f", "--follow", action="store_true")
     new = commands.add_parser("new")
     new.add_argument("--name", type=instance_name)
     new.add_argument("--port", type=int)
@@ -1001,16 +1172,24 @@ def main(argv: list[str] | None = None) -> int:
                 raise ValueError("Unknown instance. Use agentsdock list.")
             print(json.dumps(pairing_info(selected)))
             return 0
+        if args.command == "logs":
+            if args.name and args.named:
+                raise ValueError("Select the log instance once: NAME or --instance NAME.")
+            name = args.name or args.named or "default"
+            selected = next((item for item in registry.instances() if item.name == name), None)
+            if selected is None:
+                raise ValueError(f"Unknown instance {name!r}. Use agentsdock list to find its name.")
+            return show_logs(selected, lines=args.lines, follow=args.follow)
         if args.command == "token":
-            selected = choose_token_instance(registry)
+            if args.name:
+                # The installer retains read-only legacy token discovery even
+                # when an old default install is absent from the new registry.
+                selected = Instance(args.name, registry.home)
+            else:
+                selected = choose_token_instance(registry)
             if selected is None:
                 return 0
-            try:
-                run(["/bin/bash", str(ROOT / "install.sh"), "--instance", selected.name, "--show-token"],
-                    env=clean_environment(selected), cwd=ROOT)
-                return 0
-            except subprocess.CalledProcessError as exc:
-                return exc.returncode if exc.returncode > 0 else 1
+            return show_instance_token(selected)
         if args.command in {None, "list", "info", "status"}:
             items = registry.instances()
             if args.command in {"info", "status"} and args.name:
@@ -1025,6 +1204,7 @@ def main(argv: list[str] | None = None) -> int:
                     show_status(item, network=network)
                 if not items:
                     print("No installations found. Run agentsdock setup to create your first server.")
+                return offer_status_token(registry, items, network)
             else:
                 network = tailscale_status() if items else None
                 print("NAME                 STATUS     PORT")

package/server/shared_chat_analytics_web.py

@@ -0,0 +1,5 @@
+"""Generated from the limited shared-chat analytics entry; do not edit by hand."""
+import json
+
+SCRIPT = json.loads("\"/*! @noble/hashes\\nThe MIT License (MIT)\\n\\nCopyright (c) 2022 Paul Miller (https://paulmillr.com)\\n\\nPermission is hereby granted, free of charge, to any person obtaining a copy\\nof this software and associated documentation files (the “Software”), to deal\\nin the Software without restriction, including without limitation the rights\\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\\ncopies of the Software, and to permit persons to whom the Software is\\nfurnished to do so, subject to the following conditions:\\n\\nThe above copyright notice and this permission notice shall be included in\\nall copies or substantial portions of the Software.\\n\\nTHE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN\\nTHE SOFTWARE.\\n*/(function(){\\\"use strict\\\";function H(e){return e instanceof Uint8Array||ArrayBuffer.isView(e)&&e.constructor.name===\\\"Uint8Array\\\"&&\\\"BYTES_PER_ELEMENT\\\"in e&&e.BYTES_PER_ELEMENT===1}function p(e,t,s=\\\"\\\"){const n=H(e),r=e?.length;if(!n||t!==void 0){const i=s&&`\\\"${s}\\\" `,o=\\\"\\\",f=n?`length=${r}`:`type=${typeof e}`,h=i+\\\"expected Uint8Array\\\"+o+\\\", got \\\"+f;throw n?new RangeError(h):new TypeError(h)}return e}function m(e,t=!0){if(e.destroyed)throw new Error(\\\"Hash instance has been destroyed\\\");if(t&&e.finished)throw new Error(\\\"Hash#digest() has already been called\\\")}function S(e,t){p(e,void 0,\\\"digestInto() output\\\");const s=t.outputLen;if(e.length<s)throw new RangeError('\\\"digestInto() output\\\" expected to be of length >='+s)}function y(...e){for(let t=0;t<e.length;t++)e[t].fill(0)}function _(e){return new DataView(e.buffer,e.byteOffset,e.byteLength)}function d(e,t){return e<<32-t|e>>>t}const T=typeof Uint8Array.from([]).toHex==\\\"function\\\"&&typeof Uint8Array.fromHex==\\\"function\\\",k=Array.from({length:256},(e,t)=>t.toString(16).padStart(2,\\\"0\\\"));function B(e){if(p(e),T)return e.toHex();let t=\\\"\\\";for(let s=0;s<e.length;s++)t+=k[e[s]];return t}function O(e){if(typeof e!=\\\"string\\\")throw new TypeError(\\\"string expected\\\");return new Uint8Array(new TextEncoder().encode(e))}function U(e,t={}){const s=(r,c)=>e(c).update(r).digest(),n=e(void 0);return s.outputLen=n.outputLen,s.blockLen=n.blockLen,s.canXOF=n.canXOF,s.create=r=>e(r),Object.assign(s,t),Object.freeze(s)}const v=e=>({oid:Uint8Array.from([6,9,96,134,72,1,101,3,4,2,e])});function C(e,t,s){return e&t^~e&s}function I(e,t,s){return e&t^e&s^t&s}class D{blockLen;outputLen;canXOF=!1;padOffset;isLE;buffer;view;finished=!1;length=0;pos=0;destroyed=!1;constructor(t,s,n,r){this.blockLen=t,this.outputLen=s,this.padOffset=n,this.isLE=r,this.buffer=new Uint8Array(t),this.view=_(this.buffer)}update(t){m(this),p(t);const{view:s,buffer:n,blockLen:r}=this,c=t.length;for(let i=0;i<c;){const o=Math.min(r-this.pos,c-i);if(o===r){const f=_(t);for(;r<=c-i;i+=r)this.process(f,i);continue}n.set(t.subarray(i,i+o),this.pos),this.pos+=o,i+=o,this.pos===r&&(this.process(s,0),this.pos=0)}return this.length+=t.length,this.roundClean(),this}digestInto(t){m(this),S(t,this),this.finished=!0;const{buffer:s,view:n,blockLen:r,isLE:c}=this;let{pos:i}=this;s[i++]=128,y(this.buffer.subarray(i)),this.padOffset>r-i&&(this.process(n,0),i=0);for(let a=i;a<r;a++)s[a]=0;n.setBigUint64(r-8,BigInt(this.length*8),c),this.process(n,0);const o=_(t),f=this.outputLen;if(f%4)throw new Error(\\\"_sha2: outputLen must be aligned to 32bit\\\");const h=f/4,l=this.get();if(h>l.length)throw new Error(\\\"_sha2: outputLen bigger than state\\\");for(let a=0;a<h;a++)o.setUint32(4*a,l[a],c)}digest(){const{buffer:t,outputLen:s}=this;this.digestInto(t);const n=t.slice(0,s);return this.destroy(),n}_cloneInto(t){t||=new this.constructor,t.set(...this.get());const{blockLen:s,buffer:n,length:r,finished:c,destroyed:i,pos:o}=this;return t.destroyed=i,t.finished=c,t.length=r,t.pos=o,r%s&&t.buffer.set(n),t}clone(){return this._cloneInto()}}const x=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]),N=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),u=new Uint32Array(64);class F extends D{constructor(t){super(64,t,8,!1)}get(){const{A:t,B:s,C:n,D:r,E:c,F:i,G:o,H:f}=this;return[t,s,n,r,c,i,o,f]}set(t,s,n,r,c,i,o,f){this.A=t|0,this.B=s|0,this.C=n|0,this.D=r|0,this.E=c|0,this.F=i|0,this.G=o|0,this.H=f|0}process(t,s){for(let a=0;a<16;a++,s+=4)u[a]=t.getUint32(s,!1);for(let a=16;a<64;a++){const g=u[a-15],b=u[a-2],L=d(g,7)^d(g,18)^g>>>3,w=d(b,17)^d(b,19)^b>>>10;u[a]=w+u[a-7]+L+u[a-16]|0}let{A:n,B:r,C:c,D:i,E:o,F:f,G:h,H:l}=this;for(let a=0;a<64;a++){const g=d(o,6)^d(o,11)^d(o,25),b=l+g+C(o,f,h)+N[a]+u[a]|0,w=(d(n,2)^d(n,13)^d(n,22))+I(n,r,c)|0;l=h,h=f,f=o,o=i+b|0,i=c,c=r,r=n,n=b+w|0}n=n+this.A|0,r=r+this.B|0,c=c+this.C|0,i=i+this.D|0,o=o+this.E|0,f=f+this.F|0,h=h+this.G|0,l=l+this.H|0,this.set(n,r,c,i,o,f,h,l)}roundClean(){y(u)}destroy(){this.destroyed=!0,this.set(0,0,0,0,0,0,0,0),y(this.buffer)}}class M extends F{A=x[0]|0;B=x[1]|0;C=x[2]|0;D=x[3]|0;E=x[4]|0;F=x[5]|0;G=x[6]|0;H=x[7]|0;constructor(){super(32)}}const V=U(()=>new M,v(1)),$=[\\\"shared_chat_snapshot_activated\\\",\\\"shared_chat_interactive_activated\\\",\\\"shared_chat_message_sent\\\"],E=\\\"agentsdock:shared-analytics-seen:v1\\\",A=new Set;function G(e,t,s=\\\"\\\"){try{if(!$.includes(e)||!/^\\\\/(?:interactive-chat\\\\/interactive_[a-f0-9]{32}|shared-chat\\\\/share_[a-f0-9]{32}|share\\\\/[A-Za-z0-9_-]{43})$/.test(t)||e===\\\"shared_chat_message_sent\\\"&&!/^[A-Za-z0-9_-]{16,128}$/.test(s)||navigator.doNotTrack===\\\"1\\\"||navigator.globalPrivacyControl||localStorage.getItem(\\\"agentsdock:analytics-consent:v1\\\")===\\\"denied\\\")return;const n=B(V(O(JSON.stringify([e,t,s])))),r=JSON.parse(sessionStorage.getItem(E)??\\\"[]\\\"),c=Array.isArray(r)?r.filter(f=>typeof f==\\\"string\\\"&&/^[a-f0-9]{64}$/.test(f)):[];if(A.has(n)||c.includes(n)||c.length>=4096)return;sessionStorage.setItem(E,JSON.stringify([...c,n])),A.add(n);const i=new AbortController,o=setTimeout(()=>i.abort(),5e3);try{fetch(\\\"https://api.mixpanel.com/track?ip=0\\\",{method:\\\"POST\\\",credentials:\\\"omit\\\",referrerPolicy:\\\"no-referrer\\\",headers:{\\\"Content-Type\\\":\\\"application/json\\\"},signal:i.signal,body:JSON.stringify([{event:e,properties:{token:\\\"66b4fef625e5750d5527870f0ca96d5e\\\",distinct_id:\\\"\\\",platform:\\\"shared_web\\\",time:Math.floor(Date.now()/1e3)}}])}).catch(()=>{}).finally(()=>clearTimeout(o))}catch{clearTimeout(o)}}catch{}}G(\\\"shared_chat_snapshot_activated\\\",location.pathname)})();\"")
+CSP_HASH = "mGoIxolAbIiMaBueHq0pZetv9HOC3PsCEy+QNKDYsaM="

package/server/title_generation.py

@@ -13,6 +13,9 @@ import sys
 import tempfile
 import time
 import unicodedata
+from urllib.parse import quote
+
+import httpx
 
 from codex_app_server import CodexAppServerClient
 from codex_side_question import isolated_config
@@ -35,6 +38,12 @@ class TitleGenerationError(Exception):
     """Keep errors content-free: prompts, credentials and output are private."""
 
 
+def gemini_title_seed(text: str) -> str:
+    # Pasted logs often put the actual question at the end. Keep the same
+    # bounded budget as other providers without storing the full log twice.
+    return text if len(text) <= 1600 else text[:780] + '\n[excerpt omitted]\n' + text[-800:]
+
+
 def title_prompt(user_text: str, reply: str) -> str:
     return INSTRUCTIONS + "\n\n" + json.dumps(
         {"user_message": user_text[:1600], "assistant_reply": reply[:800]},
@@ -329,8 +338,58 @@ async def generate_cursor_title(prompt: str, *, executable: str, model: str | No
         return clean_title(result)
 
 
+async def generate_gemini_title(prompt: str, *, model: str | None, provider_selection: dict) -> str | None:
+    """One tool-free API request on the exact chat binding; no native session.
+
+    No CLI, hooks, MCP, filesystem tools, account fallback or model discovery.
+    The caller resolves CLI Auto from this conversation's native model metadata.
+    """
+    from gemini_api import MODEL, api_base
+
+    if (not isinstance(model, str) or model == 'auto' or not MODEL.fullmatch(model)
+            or provider_selection.get('protocol') != 'gemini'
+            or provider_selection.get('auth_header') != 'x-goog-api-key'
+            or not provider_selection.get('api_key')):
+        raise TitleGenerationError('Gemini title connection/model unavailable')
+    try:
+        async with httpx.AsyncClient(timeout=TIMEOUT_SECONDS, follow_redirects=False, trust_env=False) as client:
+            async with client.stream('POST', api_base(provider_selection) + '/models/' + quote(model, safe='') + ':generateContent',
+                    headers={'x-goog-api-key': provider_selection['api_key']},
+                    json={'contents': [{'role': 'user', 'parts': [{'text': prompt}]}],
+                          'generationConfig': {'maxOutputTokens': 1024, 'candidateCount': 1}}) as response:
+                if response.status_code != 200:
+                    raise TitleGenerationError('Gemini title request failed')
+                raw = bytearray()
+                async for chunk in response.aiter_bytes(chunk_size=8192):
+                    raw.extend(chunk)
+                    if len(raw) > 64 * 1024:
+                        raise TitleGenerationError('Excessive Gemini title output')
+                value = json.loads(raw)
+        candidates = value.get('candidates')
+        if not isinstance(candidates, list) or len(candidates) != 1 or candidates[0].get('finishReason') != 'STOP':
+            raise TitleGenerationError('Gemini title request did not complete')
+        parts = candidates[0].get('content', {}).get('parts')
+        if not isinstance(parts, list) or not parts or len(parts) > 32:
+            raise TitleGenerationError('Invalid Gemini title output')
+        text = []
+        for part in parts:
+            if (not isinstance(part, dict) or not isinstance(part.get('text'), str)
+                    or set(part) - {'text', 'thought', 'thoughtSignature'}
+                    or ('thought' in part and not isinstance(part['thought'], bool))):
+                raise TitleGenerationError('Unexpected Gemini title content')
+            if part.get('thought') is not True:
+                text.append(part['text'])
+        title = clean_title(''.join(text))
+        if title and provider_selection['api_key'] in title:
+            return None
+        return title
+    except (httpx.HTTPError, ValueError, TypeError, AttributeError, KeyError):
+        raise TitleGenerationError('Gemini title request failed') from None
+
+
 async def generate_title(backend: str, user_text: str, reply: str, **options) -> str | None:
-    generator = {'codex': generate_codex_title, 'cursor': generate_cursor_title}.get(backend)
+    generator = {'codex': generate_codex_title, 'cursor': generate_cursor_title,
+                 'gemini': generate_gemini_title}.get(backend)
     if generator is None:
         return None
     return await asyncio.wait_for(generator(title_prompt(user_text, reply), **options), TIMEOUT_SECONDS)

package/server/transcript_reader.py

@@ -109,12 +109,15 @@ class RawRecord:
 
 
 class _RecordParser:
-    def __init__(self, stream, end, deadline, cancelled, project, maximum, budget_seconds):
+    def __init__(self, stream, end, deadline, cancelled, project, maximum, budget_seconds, retained_fields=None, max_nodes=-1, max_depth=None):
         self.stream, self.end = stream, end
         self.deadline, self.cancelled, self.project = deadline, cancelled, project
         self.buffer, self.index, self.final, self.complete = b'', 0, False, False
         self.retained, self.nodes, self.maximum = 0, 0, maximum
         self.budget_seconds = budget_seconds
+        self.retained_fields = retained_fields
+        self.max_nodes = MAX_NODES if max_nodes == -1 else max_nodes
+        self.max_depth = MAX_DEPTH if max_depth is None else max_depth
 
     def fill(self):
         if self.index < len(self.buffer):
@@ -207,15 +210,17 @@ class _RecordParser:
 
     def value(self, path=(), retain=True, depth=0):
         self.nodes += 1
-        if depth > MAX_DEPTH:
+        if depth > self.max_depth:
             raise TranscriptBudgetExceeded(
                 'Single transcript record exceeds the JSON nesting limit: '
-                f'observed depth {depth:,}; limit {MAX_DEPTH:,}.')
-        if self.nodes > MAX_NODES:
+                f'observed depth {depth:,}; limit {self.max_depth:,}.')
+        if self.max_nodes is not None and self.nodes > self.max_nodes:
             raise TranscriptBudgetExceeded(
                 'Single transcript record exceeds the JSON value-count limit: '
-                f'observed at least {self.nodes:,} values; limit {MAX_NODES:,}.')
+                f'observed at least {self.nodes:,} values; limit {self.max_nodes:,}.')
         self.space()
+        if path and self.retained_fields is not None and path[0] not in self.retained_fields:
+            retain = False
         if self.project and opaque_path(path):
             retain = False
         if retain:
@@ -235,7 +240,11 @@ class _RecordParser:
             while True:
                 if obj:
                     self.space()
-                    key = self.string(True, key=True)
+                    # Explicit metadata projection does not need keys inside
+                    # discarded subtrees. Do not charge transient key bytes as
+                    # retained metadata (native import behavior is unchanged).
+                    keep_key = retain or self.retained_fields is None or self.project
+                    key = self.string(keep_key, key=True)
                     self.space()
                     if self.take() != 58:
                         raise InvalidRecord('JSON colon expected')
@@ -271,12 +280,15 @@ class _RecordParser:
 
 def jsonl_records(stream: BinaryIO, *, end: int, project=True, strict=False,
                   require_newline=True, max_records=250_000, deadline=None,
-                  cancelled=None, max_retained_bytes=MAX_RETAINED_BYTES):
+                  cancelled=None, max_retained_bytes=MAX_RETAINED_BYTES, retained_fields=None,
+                  max_nodes=-1, max_depth=None):
     """Yield (projected object or None, ending offset, RawRecord).
 
     Malformed provider lines may be represented by None, as before. Resource
     exhaustion always raises, so callers never commit a partial-success cursor.
     A fixed end excludes concurrent appends; callers own file identity checks.
+    Native-import work budgets remain the default. Durable metadata-only scans
+    can supply separate structural limits without imposing import caps on logs.
     """
     # Externally supplied deadlines can belong to a larger operation. Do not
     # invent a duration for them; the caller can provide its own timeout detail.
@@ -291,7 +303,7 @@ def jsonl_records(stream: BinaryIO, *, end: int, project=True, strict=False,
                 'Transcript scan exceeds the record-count limit: '
                 f'observed at least {count:,} records; limit {max_records:,}. '
                 'This counts JSONL records, not chat messages.').at_record(count, start)
-        parser = _RecordParser(stream, end, deadline, cancelled, project, max_retained_bytes, budget_seconds)
+        parser = _RecordParser(stream, end, deadline, cancelled, project, max_retained_bytes, budget_seconds, retained_fields, max_nodes, max_depth)
         blank = False
         malformed = False
         try:

package/server/update_runner.py

@@ -555,18 +555,20 @@ def server_work_snapshot(
                 "server health response is missing its service-cgroup admission proof"
             )
         raw_count = cgroup.get("unknown_descendant_count")
+        inspection = cgroup.get("inspection")
         if (
             cgroup.get("safe") is not True
             or isinstance(raw_count, bool)
             or not isinstance(raw_count, int)
-            or raw_count != 0
+            or raw_count < 0
+            or (raw_count != 0 and inspection != "verified-preserved")
         ):
             raise RuntimeError(
                 "AgentsServer has an unverified or nonempty service cgroup"
             )
         if (
             require_verified_service_cgroup
-            and cgroup.get("inspection") != "verified"
+            and inspection not in {"verified", "verified-preserved"}
         ):
             raise RuntimeError(
                 "AgentsServer did not return a verified systemd service-cgroup proof"