@epoch-agent/server 0.20.1 → 0.22.0

package/dist/index.js

@@ -1,7 +1,7 @@
 import { createServer } from 'http';
 import { createLogger, t, ApprovalRelay, QuestionRelay, serializeStream, withRoleScope, withModelScope, withToolScope, nextRunAt, observeBackgroundTasks, skillIndexDescription, SANDBOX_EXCLUDES, SANDBOX_COVERS, canProbeGit, guardSpawn, isSystemOpenable, backgroundTaskOutput, listBackgroundTasks, providerLabel, MAX_REASON_CHARS, MAX_OBJECTIVE_CHARS, MAX_GOAL_MAX_ROUNDS, DEFAULT_GOAL_MAX_ROUNDS, SCHEDULE_DEFAULT_ALLOWLIST, SCHEDULE_FORM_BUDGET_USD, SCHEDULE_DEFAULTS, coalesceRecording, readRecording } from '@epoch-agent/runtime';
 import { timingSafeEqual, randomBytes, randomUUID } from 'crypto';
-import { PLAN_OUTCOMES, WIRE_AUTH_COOKIE, WIRE_AUTH_COOKIE_ATTRS, WIRE_AUTH_TOKEN_PARAM, extractAllMentions, MAX_ATTACH_FILES, utf8ByteLength, MAX_SESSION_REFS, attachSessionSurface, isWireRewindScope, WIRE_REWIND_SCOPES, mcpConnectorState, MAX_ATTACH_TOTAL_BYTES, MAX_ATTACH_BYTES, truncateToBudget, WIRE_LANG_PARAM, isLang, conformsToWire, WIRE_LAST_SESSION_FIELDS, isQuestionAnswerMap, isProviderType, apiKeyEnvVar, WIRE_FILE_STAT_MAX, WIRE_SETTING_WRITE_LAYERS, isWirePlanAction, WIRE_PLAN_ACTIONS, isPermissionLevel, PERMISSION_LEVELS, WIRE_TRUST_REQUEST_FIELDS, WIRE_FORGET_WORKSPACE_FIELDS, collectPendingApprovals, unfixedRules, isWireSettingWriteLayer, parseModelRef, WIRE_GOAL_ACTIONS, OPERATION_TYPES, isOperationType, WIRE_PLUGIN_UPLOAD_FORM_FIELDS } from '@epoch-agent/protocol';
+import { PLAN_OUTCOMES, WIRE_AUTH_COOKIE, WIRE_AUTH_COOKIE_ATTRS, WIRE_AUTH_TOKEN_PARAM, extractAllMentions, MAX_ATTACH_FILES, utf8ByteLength, MAX_SESSION_REFS, attachSessionSurface, isWireRewindScope, WIRE_REWIND_SCOPES, mcpConnectorState, MAX_ATTACH_TOTAL_BYTES, MAX_ATTACH_BYTES, truncateToBudget, isAppearanceTheme, isAppearanceLang, WIRE_LANG_PARAM, isLang, conformsToWire, WIRE_LAST_SESSION_FIELDS, isQuestionAnswerMap, isProviderType, apiKeyEnvVar, WIRE_FILE_STAT_MAX, WIRE_SETTING_WRITE_LAYERS, isWirePlanAction, WIRE_PLAN_ACTIONS, isPermissionLevel, PERMISSION_LEVELS, WIRE_TRUST_REQUEST_FIELDS, WIRE_FORGET_WORKSPACE_FIELDS, collectPendingApprovals, unfixedRules, isWireSettingWriteLayer, parseModelRef, WIRE_GOAL_ACTIONS, OPERATION_TYPES, isOperationType, WIRE_PLUGIN_UPLOAD_FORM_FIELDS } from '@epoch-agent/protocol';
 import { resolve, join, relative, isAbsolute, sep, dirname, basename, extname } from 'path';
 import { existsSync, realpathSync, statSync, mkdirSync, createReadStream, readdirSync, createWriteStream, accessSync, constants } from 'fs';
 import { stat, readFile, rm } from 'fs/promises';
@@ -129,12 +129,28 @@ function generateToken() {
 }
 var UI_THEME_PARAM = "theme";
 var UI_LANG_PARAM = "lang";
+function storedUiPreset(stored) {
+  const preset = {};
+  if (isAppearanceTheme(stored.theme)) preset.theme = stored.theme;
+  if (isAppearanceLang(stored.lang)) preset.lang = stored.lang;
+  return preset;
+}
+function resolveUiPreset(host, stored) {
+  return { ...host, ...storedUiPreset(stored) };
+}
+function uiPresetParams(ui) {
+  const params = [];
+  if (ui.theme) params.push([UI_THEME_PARAM, ui.theme]);
+  if (ui.lang) params.push([UI_LANG_PARAM, ui.lang]);
+  return params;
+}
 function firstScreenUrl(host, port, token, ui = {}) {
   const shown = displayHost(host);
   const authority = shown.includes(":") && !shown.startsWith("[") ? `[${shown}]` : shown;
   const params = [`${WIRE_AUTH_TOKEN_PARAM}=${encodeURIComponent(token)}`];
-  if (ui.theme) params.push(`${UI_THEME_PARAM}=${encodeURIComponent(ui.theme)}`);
-  if (ui.lang) params.push(`${UI_LANG_PARAM}=${encodeURIComponent(ui.lang)}`);
+  for (const [name, value] of uiPresetParams(ui)) {
+    params.push(`${name}=${encodeURIComponent(value)}`);
+  }
   return `http://${authority}:${port}/?${params.join("&")}`;
 }
 var HOST_COMPOSE_TTL_MS = 10 * 6e4;
@@ -262,6 +278,7 @@ var SessionRegistry = class {
       turnStartedAt: null,
       lastFinish: null,
       persisted: null,
+      announcedTitle: null,
       queue: [],
       lastActiveTick: ++this.tick
     });
@@ -353,10 +370,13 @@ var EMPTY_INVENTORY = {
   policies: 0,
   settingsFiles: []
 };
-function toWireBinding(state, bound) {
-  if (state === "bound" && bound)
-    return { state: "bound", workspace: toWireSessionWorkspace(bound) };
-  return { state: state === "bound" ? "unbound" : state };
+function toWireBinding(state, bound, changeable) {
+  if (state === "bound") {
+    if (bound) return { state: "bound", workspace: toWireSessionWorkspace(bound), changeable };
+    return { state: "unbound" };
+  }
+  if (state === "none") return { state: "none", changeable };
+  return { state: "unbound" };
 }
 function toWireWorkspaceRef(bound) {
   if (!bound) return null;
@@ -442,6 +462,7 @@ function toWireSummary(id, hub, row, extra = {}) {
     lastFinish: state.lastFinish,
     role: extra.role ?? null,
     archived: row?.archived ?? false,
+    pinned: row?.pinned ?? false,
     ...extra.snippet === void 0 ? {} : { snippet: extra.snippet }
   };
 }
@@ -474,7 +495,9 @@ function listSessionSummaries(hubStates, catalog, query, workspaceOf = () => nul
     return hits;
   }
   const rows = catalog?.list(limit, archived ? { archived: true } : {}) ?? [];
-  const summaries = rows.map(
+  const pinnedRows = archived ? [] : catalog?.list(limit, { pinnedOnly: true }) ?? [];
+  const listedIds = new Set(rows.map((r) => r.id));
+  const summaries = [...rows, ...pinnedRows.filter((r) => !listedIds.has(r.id))].map(
     (row) => toWireSummary(row.id, byId.get(row.id), row, {
       workspace: workspaceOf(row.id),
       role: roleOf(row.id)
@@ -487,6 +510,7 @@ function listSessionSummaries(hubStates, catalog, query, workspaceOf = () => nul
   return [...fresh, ...summaries].sort(compareSummaries).slice(0, limit);
 }
 function compareSummaries(a, b) {
+  if (a.pinned !== b.pinned) return a.pinned ? -1 : 1;
   if (a.live !== b.live) return a.live ? -1 : 1;
   const at = a.updatedAt ?? Number.POSITIVE_INFINITY;
   const bt = b.updatedAt ?? Number.POSITIVE_INFINITY;
@@ -499,6 +523,7 @@ var SessionHub = class {
   idleGraceMs;
   clock;
   onCooled;
+  readTitle;
   registry;
   sinks = /* @__PURE__ */ new Set();
   observers = /* @__PURE__ */ new Set();
@@ -512,6 +537,7 @@ var SessionHub = class {
     this.idleGraceMs = opts.idleGraceMs ?? 3e4;
     this.clock = opts.clock ?? Date.now;
     this.onCooled = opts.onCooled;
+    this.readTitle = opts.readTitle;
     this.registry = new SessionRegistry({
       ...opts.maxActiveSessions === void 0 ? {} : { maxActive: opts.maxActiveSessions },
       ...opts.maxQueuedMessages === void 0 ? {} : { maxQueued: opts.maxQueuedMessages }
@@ -661,6 +687,12 @@ var SessionHub = class {
     if (this.closed) return;
     this.publish(sessionId, { type: "sessions-changed" });
   }
+  notifySessionTitleChanged(sessionId, title) {
+    if (this.closed) return;
+    const entry = this.registry.get(sessionId);
+    if (entry) entry.announcedTitle = title;
+    this.publish(sessionId, { type: "session-title-changed", title });
+  }
   notifyPluginsChanged() {
     if (this.closed) return;
     this.publish(void 0, { type: "plugins-changed" });
@@ -732,6 +764,10 @@ var SessionHub = class {
         if (through !== null && through !== entry.persisted?.id) {
           entry.persisted = { id: through, seq: frame.seq };
         }
+        const title = this.readTitle?.(sessionId) ?? null;
+        if (title !== null && title !== entry.announcedTitle) {
+          this.notifySessionTitleChanged(sessionId, title);
+        }
         if (event.type === "finish") {
           entry.lastFinish = toWireFinish(event, frame.ts, entry.turnStartedAt);
         }
@@ -1747,6 +1783,7 @@ function config(ctx, res, lang) {
     model: runtime.config.model,
     permission: runtime.config.permission,
     workspace: bound ? toWireSessionWorkspace(bound) : null,
+    ...runtime.defaultWorkDir !== void 0 ? { defaultWorkDir: workspaceRefOf(runtime.defaultWorkDir) } : {},
     knownWorkspaces: toWireKnownWorkspaces(runtime.workspaces.known()),
     usageScope: runtime.usageScope,
     compression: runtime.compression,
@@ -1834,9 +1871,11 @@ async function patchSession(ctx, req, res, sessionId, lang) {
   const fields = asRecord(body.value);
   const rawTitle = fields["title"];
   const rawArchived = fields["archived"];
+  const rawPinned = fields["pinned"];
   const wantsTitle = rawTitle !== void 0;
   const wantsArchive = typeof rawArchived === "boolean";
-  if (!wantsTitle && !wantsArchive) {
+  const wantsPinned = typeof rawPinned === "boolean";
+  if (!wantsTitle && !wantsArchive && !wantsPinned) {
     return sendError(res, 400, "bad-patch", t("web.patch_needs_field", void 0, lang));
   }
   const title = typeof rawTitle === "string" ? rawTitle.trim() : "";
@@ -1852,10 +1891,15 @@ async function patchSession(ctx, req, res, sessionId, lang) {
       t("web.session_store_unavailable", void 0, lang)
     );
   }
+  const titleBefore = wantsTitle ? catalog.get(sessionId)?.title ?? null : null;
   let row = wantsTitle ? catalog.rename(sessionId, title) : catalog.get(sessionId);
   const archivedBefore = row?.archived;
   if (row && wantsArchive) row = catalog.setArchived(sessionId, rawArchived);
+  if (row && wantsPinned) row = catalog.setPinned(sessionId, rawPinned);
   if (!row) return sendUnknownSession(res, sessionId, lang);
+  if (wantsTitle && row.title !== titleBefore) {
+    ctx.hub.notifySessionTitleChanged(sessionId, row.title);
+  }
   if (wantsArchive && archivedBefore !== row.archived) ctx.hub.notifySessionsChanged(sessionId);
   const hub = ctx.hub.listSessions().find((s) => s.id === sessionId);
   sendJson(res, 200, {
@@ -2098,6 +2142,37 @@ function parseAttachmentNames(raw) {
   if (!Array.isArray(raw)) return [];
   return raw.filter((name) => typeof name === "string" && name.length > 0);
 }
+async function postAppearance(ctx, req, res, lang) {
+  const control = ctx.runtime.appearance;
+  if (!control) {
+    return sendError(res, 503, "no-appearance-store", t("web.appearance_unavailable", {}, lang));
+  }
+  const body = await readJsonBody(req, void 0, lang);
+  if (!body.ok) return sendError(res, body.status, "bad-body", body.message);
+  const raw = body.value;
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) {
+    return sendError(res, 400, "bad-request", t("web.appearance_bad_request", {}, lang));
+  }
+  const record = raw;
+  const rawTheme = record["theme"];
+  const rawLang = record["lang"];
+  const theme = isAppearanceTheme(rawTheme) ? rawTheme : void 0;
+  const langPref = isAppearanceLang(rawLang) ? rawLang : void 0;
+  if (rawTheme !== void 0 && theme === void 0 || rawLang !== void 0 && langPref === void 0) {
+    return sendError(res, 400, "bad-request", t("web.appearance_bad_request", {}, lang));
+  }
+  const failure = control.set({
+    ...theme === void 0 ? {} : { theme },
+    ...langPref === void 0 ? {} : { lang: langPref }
+  });
+  if (failure) return sendError(res, 500, "write-failed", failure(lang));
+  const stored = control.get();
+  sendJson(res, 200, {
+    ok: true,
+    ...isAppearanceTheme(stored.theme) ? { theme: stored.theme } : {},
+    ...isAppearanceLang(stored.lang) ? { lang: stored.lang } : {}
+  });
+}
 async function revokeApprovalCache(ctx, req, res, sessionId, lang) {
   if (!ctx.hub.has(sessionId)) return sendUnknownSession(res, sessionId, lang);
   const perms = ctx.runtime.permissions;
@@ -2756,14 +2831,15 @@ function sessionWorkspace(ctx, res, sessionId, lang) {
     return sendUnknownSession(res, sessionId);
   }
   const state = ctx.runtime.workspaces.stateOf(sessionId);
+  const changeable = ctx.runtime.workspaces.canChange(sessionId);
   if (state !== "none") {
     return sendJson(res, 200, {
-      binding: toWireBinding(state, ctx.runtime.workspaces.of(sessionId))
+      binding: toWireBinding(state, ctx.runtime.workspaces.of(sessionId), changeable)
     });
   }
   if (ctx.hub.has(sessionId) || ctx.hub.isCooled(sessionId)) {
     return sendJson(res, 200, {
-      binding: { state: "none" }
+      binding: { state: "none", changeable }
     });
   }
   sendError(res, 409, "not-live-session", t("web.workspace_not_live", void 0, lang));
@@ -2777,7 +2853,7 @@ async function bindWorkspace(ctx, req, res, sessionId, lang) {
   const parsed = readBindWorkspaceBody(asRecord(body.value), lang);
   if (!parsed.ok) return sendError(res, 400, "bad-workspace", parsed.message);
   const state = ctx.runtime.workspaces.stateOf(sessionId);
-  if (state !== "unbound") {
+  if (state !== "unbound" && !ctx.runtime.workspaces.canChange(sessionId)) {
     return sendError(
       res,
       409,
@@ -2793,8 +2869,9 @@ async function bindWorkspace(ctx, req, res, sessionId, lang) {
   }
   if (parsed.kind === "none") {
     ctx.runtime.workspaces.decideNone(sessionId);
+    if (state !== "none") ctx.hub.notifySessionsChanged(sessionId);
     return sendJson(res, 200, {
-      binding: { state: "none" }
+      binding: { state: "none", changeable: ctx.runtime.workspaces.canChange(sessionId) }
     });
   }
   const outcome = ctx.runtime.workspaces.bind(sessionId, parsed.root, lang);
@@ -2802,8 +2879,13 @@ async function bindWorkspace(ctx, req, res, sessionId, lang) {
     const mapped = bindFailureToHttp(outcome, lang);
     return sendError(res, mapped.status, mapped.code, mapped.message);
   }
+  if (outcome.changed) ctx.hub.notifySessionsChanged(sessionId);
   sendJson(res, 200, {
-    binding: { state: "bound", workspace: toWireSessionWorkspace(outcome.bound) }
+    binding: {
+      state: "bound",
+      workspace: toWireSessionWorkspace(outcome.bound),
+      changeable: ctx.runtime.workspaces.canChange(sessionId)
+    }
   });
 }
 async function sessionDiff(ctx, res, sessionId, _lang) {
@@ -3344,7 +3426,30 @@ function toWirePreview2(preview) {
     mcpServers: [...inventory.mcpServers],
     ignoredBuckets: [...inventory.ignoredBuckets],
     hasJsTools: inventory.jsTools,
-    conflict: preview.conflict ? { name: preview.conflict.name, version: preview.conflict.version } : null
+    conflict: preview.conflict ? { name: preview.conflict.name, version: preview.conflict.version } : null,
+    dependencies: (preview.dependencies ?? []).map(toWireDependency)
+  };
+}
+function toWireDependency(dep) {
+  const inventory = dep.inventory;
+  return {
+    name: dep.name,
+    status: dep.status,
+    requiredBy: dep.requiredBy,
+    source: dep.source ?? null,
+    reason: dep.reason ?? null,
+    version: dep.manifest?.version ?? null,
+    versionUnmet: dep.versionUnmet ?? null,
+    inventory: inventory ? {
+      commands: [...inventory.commands],
+      roles: [...inventory.roles],
+      skills: [...inventory.skills],
+      hooks: inventory.hooks.map((h) => ({ type: h.type, count: h.count })),
+      denyRules: inventory.denyRules,
+      mcpServers: [...inventory.mcpServers],
+      ignoredBuckets: [...inventory.ignoredBuckets],
+      hasJsTools: inventory.jsTools
+    } : null
   };
 }
 function controlOf(ctx, res, lang) {
@@ -5072,7 +5177,7 @@ async function dispatch(opts, req, res, lang) {
   }
   if (verdict.setCookie) res.setHeader("Set-Cookie", verdict.setCookie);
   if (verdict.setCookie && isRead(method) && !pathname.startsWith("/api/")) {
-    return redirectWithoutToken(res, req.url);
+    return redirectWithoutToken(res, req.url, ctx.runtime.appearance);
   }
   const segments = splitPath(pathname);
   if (segments[0] === "api") return handleApi(opts, req, res, method, segments, lang);
@@ -5101,6 +5206,9 @@ async function handleApi(opts, req, res, method, segments, lang) {
   if (resource === "last-session" && first === void 0 && method === "PUT") {
     return putLastSession(ctx, req, res, lang);
   }
+  if (resource === "appearance" && first === void 0 && method === "POST") {
+    return postAppearance(ctx, req, res, lang);
+  }
   if (resource === "host" && first === "compose" && second === void 0 && method === "POST") {
     return postHostCompose(ctx, req, res, lang);
   }
@@ -5413,9 +5521,12 @@ function archivedFlag(rawUrl) {
   const raw = new URL(rawUrl ?? "/", "http://127.0.0.1").searchParams.get("archived");
   return raw === "1" || raw === "true";
 }
-function redirectWithoutToken(res, rawUrl) {
+function redirectWithoutToken(res, rawUrl, store) {
   const url = new URL(rawUrl ?? "/", "http://127.0.0.1");
   url.searchParams.delete(WIRE_AUTH_TOKEN_PARAM);
+  for (const [name, value] of uiPresetParams(storedUiPreset(store?.get() ?? {}))) {
+    url.searchParams.set(name, value);
+  }
   res.writeHead(303, { ...baseHeaders(), Location: `${url.pathname}${url.search}` });
   res.end();
 }
@@ -5445,7 +5556,8 @@ async function createWebServer(opts) {
     ...opts.idleGraceMs === void 0 ? {} : { idleGraceMs: opts.idleGraceMs },
     ...opts.clock === void 0 ? {} : { clock: opts.clock },
     ...opts.maxActiveSessions === void 0 ? {} : { maxActiveSessions: opts.maxActiveSessions },
-    onCooled: (sessionId) => opts.runtime.sessionFactory.release(sessionId)
+    onCooled: (sessionId) => opts.runtime.sessionFactory.release(sessionId),
+    readTitle: (sessionId) => opts.runtime.sessions?.get(sessionId)?.title || null
   });
   if (opts.runtime.session) hub.register(opts.runtime.session);
   const unsubscribeTasks = observeBackgroundTasks((sessionId) => {
@@ -5469,7 +5581,12 @@ async function createWebServer(opts) {
   return {
     ok: true,
     server: {
-      url: firstScreenUrl(binding.host, listened.port, binding.token, opts.ui ?? {}),
+      url: firstScreenUrl(
+        binding.host,
+        listened.port,
+        binding.token,
+        resolveUiPreset(opts.ui ?? {}, opts.runtime.appearance?.get() ?? {})
+      ),
       port: listened.port,
       host: binding.host,
       token: binding.token,