@agentsdock/server 1.0.11-beta.2 → 1.0.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsdock/server",
-  "version": "1.0.11-beta.2",
+  "version": "1.0.11",
   "description": "AgentsDock's self-hosted Python server and explicit installation CLI",
   "license": "Apache-2.0",
   "repository": {

package/server/VERSION

@@ -1 +1 @@
-1.0.11-beta.2
+1.0.11

package/server/agent_server.py

@@ -32364,6 +32364,9 @@ SEMANTIC_TIMELINE_EVENT_BUDGET_PER_ITEM = 4
 SEMANTIC_TIMELINE_ESSENTIAL_LIMIT_PER_ITEM = 32
 SEMANTIC_TIMELINE_ESSENTIAL_PAGE_OVERFLOW_LIMIT = 128
 SEMANTIC_TIMELINE_TRACE_ANCHOR_PAGE_OVERFLOW_LIMIT = 128
+# Same-ID history corrections clear previously cached replay bubbles. They
+# need their own bounded allowance, not the slots reserved for chat content.
+SEMANTIC_TIMELINE_REPAIR_PAGE_OVERFLOW_LIMIT = 256
 JOB_RUN_HISTORY_TEXT_LIMIT = 64 * 1024
 SEMANTIC_TIMELINE_ESSENTIAL_DETAIL_TYPES = {
     "artifact_created",
@@ -35760,9 +35763,6 @@ def collect_semantic_timeline_events(
         deduplicated[identity] = event
         return True
 
-    for event in page_repairs:
-        append_with_limit(event, event_limit)
-
     # Every selected semantic item gets one representative before any item
     # receives detail. The page-size clamp in read_semantic_timeline_page()
     # guarantees that this baseline always fits.
@@ -35777,6 +35777,22 @@ def collect_semantic_timeline_events(
         for event in secondary:
             append_with_limit(event, event_limit)
 
+    # Reserve both sides of ordinary turns before emitting repair receipts.
+    # A single imported run can contain hundreds of corrected boundaries:
+    # charging them to the ordinary budget used to leave only trace anchors
+    # for recent turns. Extend that budget only by receipts actually added,
+    # retaining its remaining detail capacity and the absolute response cap.
+    repair_allowance = min(
+        SEMANTIC_TIMELINE_REPAIR_PAGE_OVERFLOW_LIMIT,
+        MAX_EVENT_RESPONSE_LIMIT - event_limit,
+    )
+    repair_limit = len(deduplicated) + repair_allowance
+    repair_count = 0
+    for event in page_repairs:
+        if append_with_limit(event, repair_limit):
+            repair_count += 1
+    event_limit += repair_count
+
     # Files and reviewable diffs are semantic output, not optional trace
     # detail. Give each selected item a generous but bounded overflow and also
     # cap total page overflow. This preserves normal multi-video workflows
@@ -50729,6 +50745,10 @@ def public_session(sess: dict[str, Any], *, summary: bool = False) -> dict[str,
     if sess.get("title") == "New chat" and not public["backend_locked"]:
         public["empty_chat_cleanup"] = "client-v1"
     public["codex_provider"] = codex_provider.session_choice(sess.get("codex_provider"))
+    if summary and "codex_goal" in sess:
+        goal = sess.get("codex_goal")
+        public["codex_goal_status"] = goal.get("status") if isinstance(goal, dict) else None
+        public["codex_goal_updated_at"] = goal.get("updatedAt") if isinstance(goal, dict) else None
     connection = sess.get("provider_connection") or "default"
     # Keep legacy native summaries sparse, but retain a stored default as the
     # tombstone that clears a previously selected custom API in client caches.
@@ -81506,6 +81526,22 @@ async def codex_provider_mcp(request: Request) -> Response:
     })
 
 
+@app.get("/api/connection-addresses")
+async def connection_addresses(request: Request) -> dict[str, Any]:
+    require_native_admin_control(request)
+    # Discover only on explicit QR sharing, never on the frequently polled health path.
+    from server_instances import candidate_addresses, connection_choices, tailscale_status
+
+    def discover() -> list[str]:
+        choices = connection_choices(
+            SERVER_BIND_ADDRESS, SERVER_PORT,
+            candidate_addresses(SERVER_BIND_ADDRESS, SERVER_PORT), tailscale_status(),
+        )
+        return list(dict.fromkeys(filter(None, [choices["tailscale"], *choices["lan"]])))[:6]
+
+    return {"version": 1, "server_identity": server_identity(), "urls": await asyncio.to_thread(discover)}
+
+
 @app.get("/api/health")
 async def health() -> dict[str, Any]:
     await reconcile_idle_queued_turns_from_health_poll()
@@ -91026,7 +91062,15 @@ def claude_completed_fork_boundary(
     # final projected message can identify the inclusive native cutoff.
     expected_text = projected_text if projected_text and final_text.endswith(projected_text) else final_text
     recorded_uuid = str(final_projection.get("provider_message_id") or "") if expected_text == projected_text else ""
-    cutoff_time = parse_job_timestamp(str(terminal.get("ts") or ""))
+    cutoff_ts = str(terminal.get("ts") or "")
+    cutoff_time = parse_job_timestamp(cutoff_ts)
+    # now_iso() truncates server events to whole seconds; native Claude
+    # records retain milliseconds. Only an exact completed-message UUID can
+    # disambiguate another turn in that same second. Keep legacy text-only
+    # matching and explicitly fractional timestamps on the strict cutoff.
+    cutoff_second_is_truncated = bool(recorded_uuid and re.fullmatch(
+        r"\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}Z", cutoff_ts,
+    ))
     started = next((
         event for event in reversed(events[:-1])
         if event.get("type") == "turn_started" and str(event.get("run_id") or "") == run_id
@@ -91047,7 +91091,11 @@ def claude_completed_fork_boundary(
             if not record_uuid or (recorded_uuid and record_uuid != recorded_uuid):
                 continue
             record_time = parse_job_timestamp(str(record.get("timestamp") or ""))
-            if cutoff_time is None or record_time is None or record_time > cutoff_time:
+            if cutoff_time is None or record_time is None:
+                continue
+            if record_time > cutoff_time and not (
+                cutoff_second_is_truncated and record_time < cutoff_time + 1
+            ):
                 continue
             if not recorded_uuid and (start_time is None or record_time < start_time):
                 continue

package/server/install.sh

@@ -1387,6 +1387,13 @@ print_token_for_copy() {
   local copy_reply=""
   local clipboard_command=()
   printf '\nAccess token (%s):\n%s\n\n' "$INSTANCE_NAME" "$access_token"
+  # Render locally, only in an interactive terminal. No credentials in argv.
+  local pairing_script="$(cd -- "$(dirname -- "${BASH_SOURCE[0]}")" && pwd)/npm/agentsdock/pair.cjs"
+  if [[ -f "$pairing_script" ]] && command -v node >/dev/null 2>&1; then
+    node "$pairing_script" "$INSTANCE_NAME" || true
+  else
+    printf 'Show a connection QR with: agentsdock pair %s\n' "$INSTANCE_NAME"
+  fi
   # A remote clipboard is not the user's local clipboard. Do not emit OSC 52
   # sequences or attempt to modify a remote desktop's clipboard over SSH.
   if [[ -n "${SSH_CONNECTION:-}${SSH_CLIENT:-}${SSH_TTY:-}" ]]; then
@@ -1839,7 +1846,7 @@ if [[ "$TEAM_HUB_MODE" == "host" && "$TEAM_HUB_OPERATION_PENDING" != "true" \
   fi
 fi
 
-RELEASE_FILES=(activation_transaction.py execution_activation.py execution_legacy_runner.py execution_preparation.py update_preparation.py update_handoff.py update_recovery.py execution_update_status.py execution_uninstall.py execution_recovery.py execution_recovery_status.py execution_http.py execution_durability.py execution_control.py execution_install.py execution_maintenance.py execution_manage.py execution_ownership.py execution_service.py execution_transport.py agent_server.py local_session_ownership.py cursor_history.py workspace_git.py team_hub_host.py secure_peer_runtime.py team_mail_runtime.py team_mail_websocket.py team_mail_grants.py secure_peer_delivery.py agentsdock_jobs.py agentsdock_chats.py chat_mailbox.py agentsdock_emergency.py agentsdock_publish.py agentsdock_mail.py agentsdock_team.py provider_commands.py provider_usage.py claude_sdk_client.py claude_model_catalog.py claude_goals.py claude_background_reconciliation.py codex_app_server.py codex_auth.py codex_provider.py codex_response_stream.py provider_connections.py cursor_api_key.py side_questions.py title_generation.py codex_side_question.py codex_side_chat_progress.py claude_side_question.py cursor_agent_client.py cursor_provider_mcp.py opencode_agent_client.py gemini_acp_client.py gemini_history.py gemini_content.py gemini_import.py gemini_runtime.py gemini_runner.py gemini_permissions.py gemini_api.py cursor_process_guard.py transcript_reader.py claude_history_repair.py claude_history_provenance.py codex_history_repair.py public_chat_shares.py public_chat_transcript.py public_chat_share_routes.py interactive_chat_shares.py interactive_chat_share_routes.py interactive_chat_share_web.py interactive_chat_projection.py interactive_chat_runtime.py interactive_chat_native.py shared_chat_videos.py shared_chat_video_stream.py interactive_chat_controls.py install.sh uninstall.sh instances.sh server_instances.py update_runner.py pyproject.toml uv.lock VERSION release-public-key.pem LICENSE NOTICE)
+RELEASE_FILES=(activation_transaction.py execution_activation.py execution_legacy_runner.py execution_preparation.py update_preparation.py update_handoff.py update_recovery.py execution_update_status.py execution_uninstall.py execution_recovery.py execution_recovery_status.py execution_http.py execution_durability.py execution_control.py execution_install.py execution_maintenance.py execution_manage.py execution_ownership.py execution_service.py execution_transport.py agent_server.py local_session_ownership.py cursor_history.py workspace_git.py team_hub_host.py secure_peer_runtime.py team_mail_runtime.py team_mail_websocket.py team_mail_grants.py secure_peer_delivery.py agentsdock_jobs.py agentsdock_chats.py chat_mailbox.py agentsdock_emergency.py agentsdock_publish.py agentsdock_mail.py agentsdock_team.py provider_commands.py provider_usage.py claude_sdk_client.py claude_model_catalog.py claude_goals.py claude_background_reconciliation.py codex_app_server.py codex_auth.py codex_provider.py codex_response_stream.py provider_connections.py cursor_api_key.py side_questions.py title_generation.py codex_side_question.py codex_side_chat_progress.py claude_side_question.py cursor_agent_client.py cursor_provider_mcp.py opencode_agent_client.py gemini_acp_client.py gemini_history.py gemini_content.py gemini_import.py gemini_runtime.py gemini_runner.py gemini_permissions.py gemini_api.py cursor_process_guard.py transcript_reader.py claude_history_repair.py claude_history_provenance.py codex_history_repair.py public_chat_shares.py public_chat_transcript.py public_chat_share_routes.py interactive_chat_shares.py interactive_chat_share_routes.py interactive_chat_share_web.py interactive_chat_projection.py interactive_chat_runtime.py interactive_chat_native.py shared_chat_videos.py shared_chat_analytics_web.py shared_chat_video_stream.py interactive_chat_controls.py install.sh uninstall.sh instances.sh server_instances.py npm/agentsdock/pair.cjs npm/agentsdock/qr-renderer.cjs npm/agentsdock/QR-NOTICES.txt update_runner.py pyproject.toml uv.lock VERSION release-public-key.pem LICENSE NOTICE)
 RELEASE_DIRECTORIES=(agentsdock_team_hub)
 TEAM_HUB_RELEASE_FILES=(
   __init__.py
@@ -1880,6 +1887,12 @@ TEAM_HUB_RELEASE_FILES=(
   migrations/0023_team_message_search.sql
 )
 
+for directory in npm npm/agentsdock; do
+  if [[ ! -d "$SOURCE_DIR/$directory" || -L "$SOURCE_DIR/$directory" ]]; then
+    echo "$directory is missing beside install.sh or is not a real directory." >&2
+    exit 1
+  fi
+done
 for name in "${RELEASE_FILES[@]}"; do
   if [[ ! -f "$SOURCE_DIR/$name" || -L "$SOURCE_DIR/$name" ]]; then
     echo "$name is missing beside install.sh or is not a regular release file." >&2
@@ -3785,12 +3798,13 @@ validate_staged_release_runtime() (
     "$STAGE_DIR/interactive_chat_runtime.py" \
     "$STAGE_DIR/interactive_chat_native.py" \
     "$STAGE_DIR/shared_chat_videos.py" \
+    "$STAGE_DIR/shared_chat_analytics_web.py" \
     "$STAGE_DIR/shared_chat_video_stream.py" \
     "$STAGE_DIR/interactive_chat_controls.py" \
     "$STAGE_DIR/update_runner.py"
   "$STAGE_DIR/.venv/bin/python" -m py_compile "$STAGE_DIR/server_instances.py"
   "$STAGE_DIR/.venv/bin/python" -m compileall -q "$STAGE_DIR/agentsdock_team_hub"
-  PYTHONPATH="$STAGE_DIR" "$STAGE_DIR/.venv/bin/python" -c 'import execution_activation, execution_preparation, update_preparation, update_handoff, update_recovery, execution_update_status, execution_uninstall, execution_recovery, execution_recovery_status, execution_http, execution_durability, execution_control, execution_install, execution_maintenance, execution_manage, execution_ownership, execution_service, execution_transport; import workspace_git, claude_model_catalog, server_instances, local_session_ownership, cursor_history; import codex_auth, codex_provider, codex_response_stream, provider_connections, cursor_api_key, side_questions, title_generation, codex_side_question, codex_side_chat_progress, claude_side_question, agentsdock_team_hub, cursor_agent_client, cursor_provider_mcp, opencode_agent_client, gemini_acp_client, gemini_history, gemini_content, gemini_import, gemini_runtime, gemini_runner, gemini_permissions, gemini_api, cursor_process_guard, secure_peer_delivery, secure_peer_runtime, team_mail_runtime, team_mail_websocket, team_mail_grants, team_hub_host, agentsdock_mail, agentsdock_team, transcript_reader, claude_history_repair, claude_history_provenance, claude_goals, claude_background_reconciliation, codex_history_repair, public_chat_shares, public_chat_transcript, public_chat_share_routes, interactive_chat_shares, interactive_chat_share_routes, interactive_chat_share_web, interactive_chat_projection, interactive_chat_runtime, interactive_chat_native, shared_chat_videos, shared_chat_video_stream, interactive_chat_controls, chat_mailbox, provider_commands, provider_usage; from agentsdock_team_hub import secure_peer, secure_peer_hub' >/dev/null
+  PYTHONPATH="$STAGE_DIR" "$STAGE_DIR/.venv/bin/python" -c 'import execution_activation, execution_preparation, update_preparation, update_handoff, update_recovery, execution_update_status, execution_uninstall, execution_recovery, execution_recovery_status, execution_http, execution_durability, execution_control, execution_install, execution_maintenance, execution_manage, execution_ownership, execution_service, execution_transport; import workspace_git, claude_model_catalog, server_instances, local_session_ownership, cursor_history; import codex_auth, codex_provider, codex_response_stream, provider_connections, cursor_api_key, side_questions, title_generation, codex_side_question, codex_side_chat_progress, claude_side_question, agentsdock_team_hub, cursor_agent_client, cursor_provider_mcp, opencode_agent_client, gemini_acp_client, gemini_history, gemini_content, gemini_import, gemini_runtime, gemini_runner, gemini_permissions, gemini_api, cursor_process_guard, secure_peer_delivery, secure_peer_runtime, team_mail_runtime, team_mail_websocket, team_mail_grants, team_hub_host, agentsdock_mail, agentsdock_team, transcript_reader, claude_history_repair, claude_history_provenance, claude_goals, claude_background_reconciliation, codex_history_repair, public_chat_shares, public_chat_transcript, public_chat_share_routes, interactive_chat_shares, interactive_chat_share_routes, interactive_chat_share_web, interactive_chat_projection, interactive_chat_runtime, interactive_chat_native, shared_chat_videos, shared_chat_analytics_web, shared_chat_video_stream, interactive_chat_controls, chat_mailbox, provider_commands, provider_usage; from agentsdock_team_hub import secure_peer, secure_peer_hub' >/dev/null
 )
 
 abort_unclaimed_team_hub_reactivation() {
@@ -4108,6 +4122,7 @@ if [[ "$stage_identity" != *$'\n'* \
   exit 1
 fi
 for name in "${RELEASE_FILES[@]}"; do
+  mkdir -p "$(dirname -- "$STAGE_DIR/$name")"
   install -m 644 "$SOURCE_DIR/$name" "$STAGE_DIR/$name"
 done
 mkdir -p "$STAGE_DIR/agentsdock_team_hub/migrations"

package/server/interactive_chat_share_routes.py

@@ -47,7 +47,7 @@ HTTP_COOKIE = "AgentsDock-Chat"
 HEADERS = {
     "Cache-Control": "no-store", "Referrer-Policy": "no-referrer", "X-Content-Type-Options": "nosniff",
     "X-Robots-Tag": "noindex, nofollow, noarchive", "Cross-Origin-Resource-Policy": "same-origin",
-    "Content-Security-Policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self'; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; base-uri 'none'; form-action 'none'; frame-ancestors 'none'",
+    "Content-Security-Policy": "default-src 'none'; script-src 'self'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://api.mixpanel.com; img-src 'self' data: blob:; media-src 'self' blob:; font-src 'self' data:; base-uri 'none'; form-action 'none'; frame-ancestors 'none'",
 }