@agora-build/atem 0.8.0 → 0.8.1

package/README.md

@@ -269,11 +269,13 @@ done
 
 **`serv files`** — serves a directory (or a single file) over HTTPS. Markdown is rendered to HTML; append `?raw=1` to any URL for the raw bytes. Useful for browsing AI-generated docs on a remote machine.
 
-**`serv webhooks`** — local receiver for Agora webhook events (ConvoAI: `agent_joined`, `agent_left`, `agent_history`, `agent_error`, `agent_metrics`, …; RTC NCS events). Validates `Agora-Signature-V2` (HMAC-SHA256) when a `secret` is configured in `webhooks.toml`; accepts unsigned events otherwise with a warning. Live web console at `http://127.0.0.1:9090/` shows incoming events; each event also prints a one-line summary to stdout. Default tunnel provider is **ngrok**; set `tunnel_provider = "cloudflared"` for zero-auth quick tunnels. Use `--no-tunnel` if you're running cloudflared / ngrok separately for stable URLs across atem restarts.
+**`serv webhooks`** — local receiver for Agora webhook events (ConvoAI: `agent_joined`, `agent_left`, `agent_history`, `agent_error`, `agent_metrics`, …; RTC NCS events). Validates `Agora-Signature-V2` (HMAC-SHA256) when a `secret` is configured in `webhooks.toml`; accepts unsigned events otherwise with a warning. Live web console at `http://127.0.0.1:9090/?t=…` (the printed URL) shows incoming events; each event also prints a one-line summary to stdout. Default tunnel provider is **ngrok**; set `tunnel_provider = "cloudflared"` for zero-auth quick tunnels. Use `--no-tunnel` if you're running cloudflared / ngrok separately for stable URLs across atem restarts.
+
+**Access code.** Every `atem serv` page and API needs the access code in the URL it prints (`https://…:8443/?t=…`), new at each start. Opening that URL sets a cookie for the server and drops the code from the address bar; without it, every path is a plain 404, so other devices on your network can't find or use the server. Background servers print it too (`atem serv files`, `rtc`, `webhooks`), and their log has it. For `serv webhooks` only the live console needs it: Agora's POSTs to `/webhook` keep the URL you registered. In the ConvoAI page's API History, credentials are masked on screen; **Copy with full credentials** copies the requests with them.
 
 **Channel placeholders** — `--channel` accepts `{appid}` (first 12 chars of the active app id) and `{ts}` (unix epoch seconds at startup). Useful in for-loops to match the auto-gen channel format.
 
-### AI Agents (WIP)
+### AI Agents
 
 ```bash
 atem agent launch                       # Open the original Claude Code CLI in an Atem terminal
@@ -310,9 +312,11 @@ locally takes control back at once), and chat with the agent: sending a
 prompt takes control when nobody holds it (if another device does, Astation
 asks before taking over), the whole retained conversation can be scrolled
 back page by page, and each finished prompt names its reply messages.
-Every remote request names the exact session and speaks atem-session r8
-(Astation must be current: older clients are refused); old `agentInput`,
-`agentPrompt`, voice and `userCommand` messages were removed.
+Every remote request names the exact session. On a verified host,
+Astation, your phone and approved services reach it over end-to-end
+encrypted channels checked against your account's signed device list. Keep
+Atem and Astation up to date together: an older Astation is refused until
+it is updated.
 
 Atem's own keys start with a prefix, Ctrl+] by default. Press it, then:
 
@@ -320,6 +324,7 @@ Atem's own keys start with a prefix, Ctrl+] by default. Press it, then:
 |-----|--------|
 | `h` or `m` | Hide the terminal; the agent keeps running |
 | `g` | Take control back locally |
+| `a` | You answered an approval in the agent's own dialog: end its wait (see below) |
 | `x` | Stop the agent |
 | `r` | Redraw the screen |
 | `[` | Browse local history (arrows, Space to select, Enter to copy, Esc to return) |
@@ -379,7 +384,12 @@ control it answers, whoever is typing, and the first answer wins. The
 finished card shows how it ended. The terminal can
 always answer instead: Claude keeps its own dialog on screen (the first
 answer wins), and for Codex any key you type in the terminal hands the
-prompt back to Codex's own dialog. If nobody answers, nothing is allowed:
+prompt back to Codex's own dialog. The agents don't tell Atem which tool
+call a permission prompt was about, so Atem can't see an answer given in
+their own dialog: after answering there, press the prefix, then `a` (Atem
+reminds you when a tool ran while an approval waits). Until then the card
+stays open and chat prompts are held, so a prompt is never typed into an
+open dialog. If nobody answers, nothing is allowed:
 after the hook's wait (Claude 10 min, Codex 5 min) the agent asks in the
 terminal as usual. Claude gets the hook with `--settings` for each launch;
 to turn it off, set `approvals_hook = false` under `[claude]` in
@@ -389,7 +399,7 @@ The first `atem agent launch codex` asks once whether to add Atem's hooks
 (one per Codex event, for approvals and chat) to `~/.codex/hooks.json`, after
 your own (a backup is kept as `hooks.json.atem-bak`); to turn them off later,
 set `hooks = false` under `[codex]` in `~/.config/atem/config.toml` — the next
-`atem agent launch codex` removes them. See §6a and the r8 appendix of the [session protocol](https://github.com/Agora-Build/Atem/blob/main/designs/protocol/atem-session-v1.md).
+`atem agent launch codex` removes them. See the [session protocol](https://github.com/Agora-Build/Atem/blob/main/designs/protocol/atem-session-v1.md) for the details.
 
 ## TUI Modes
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agora-build/atem",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "A terminal that connects people, Agora platform, and AI agents.",
   "bin": {
     "atem": "bin/atem"