@livedesk/hub 0.1.20 → 0.1.22

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.20",
+  "version": "0.1.22",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",

package/src/agents/agent-manager.js

@@ -13,6 +13,15 @@ function publicCodexStatus(status = {}) {
   };
 }
 
+function publicCodexConnection(result = {}) {
+  const latencyMs = Number(result.latencyMs);
+  return {
+    ok: result.ok === true,
+    latencyMs: Number.isFinite(latencyMs) ? Math.max(0, Math.round(latencyMs)) : 0,
+    threadId: String(result.threadId || '').slice(0, 200)
+  };
+}
+
 export function createAgentManager({
   dataDir = path.join(os.homedir(), '.livedesk'),
   settingsStore,
@@ -56,7 +65,7 @@ export function createAgentManager({
     async testConnection() {
       if (!runtime) throw new AgentRuntimeError('codex-sdk-not-installed', 'Codex SDK is not installed.', { status: 503 });
       statusCache = { expiresAt: 0, value: null };
-      return runtime.testConnection();
+      return publicCodexConnection(await runtime.testConnection());
     },
     async createSummary(input) {
       const source = input && typeof input === 'object' ? input : {};

package/src/remote-hub.js

@@ -658,7 +658,8 @@ function getRetiredAgentTaskError(options = {}) {
     const approvalLevel = safeString(options?.approvalLevel, 80).toLowerCase();
     const hasModelSelection = options
         && typeof options === 'object'
-        && Object.prototype.hasOwnProperty.call(options, 'model');
+        && ['model', 'aiModel', 'aiProvider', 'provider']
+            .some(key => Object.prototype.hasOwnProperty.call(options, key));
     return approvalLevel === 'ai-assist' || hasModelSelection
         ? RETIRED_AGENT_TASK_ERROR
         : '';
@@ -3892,6 +3893,13 @@ export function createRemoteHub(options = {}) {
             agentQueueBeforePaceMs: Number.isFinite(Number(message.agentQueueBeforePaceMs)) ? Number(message.agentQueueBeforePaceMs) : 0,
             agentFrameAgeMs: Number.isFinite(Number(message.agentFrameAgeMs)) ? Number(message.agentFrameAgeMs) : 0,
             nativeCaptureTelemetryAvailable: message.nativeCaptureTelemetryAvailable === true,
+            nativeCaptureTelemetryVersion: Number.isFinite(Number(message.nativeCaptureTelemetryVersion)) ? Number(message.nativeCaptureTelemetryVersion) : 0,
+            nativeCaptureTelemetryAgeMs: message.nativeCaptureTelemetryAgeMs === null
+                || message.nativeCaptureTelemetryAgeMs === undefined
+                ? undefined
+                : Number.isFinite(Number(message.nativeCaptureTelemetryAgeMs))
+                    ? Math.max(0, Number(message.nativeCaptureTelemetryAgeMs))
+                    : undefined,
             nativeEncoderHardwareAccelerationKnown: message.nativeEncoderHardwareAccelerationKnown === true,
             nativeEncoderHardwareAccelerated: typeof message.nativeEncoderHardwareAccelerated === 'boolean'
                 ? message.nativeEncoderHardwareAccelerated
@@ -4281,6 +4289,13 @@ export function createRemoteHub(options = {}) {
             agentQueueBeforePaceMs: Number.isFinite(Number(message.agentQueueBeforePaceMs)) ? Number(message.agentQueueBeforePaceMs) : 0,
             agentFrameAgeMs: Number.isFinite(Number(message.agentFrameAgeMs)) ? Number(message.agentFrameAgeMs) : 0,
             nativeCaptureTelemetryAvailable: message.nativeCaptureTelemetryAvailable === true,
+            nativeCaptureTelemetryVersion: Number.isFinite(Number(message.nativeCaptureTelemetryVersion)) ? Number(message.nativeCaptureTelemetryVersion) : 0,
+            nativeCaptureTelemetryAgeMs: message.nativeCaptureTelemetryAgeMs === null
+                || message.nativeCaptureTelemetryAgeMs === undefined
+                ? undefined
+                : Number.isFinite(Number(message.nativeCaptureTelemetryAgeMs))
+                    ? Math.max(0, Number(message.nativeCaptureTelemetryAgeMs))
+                    : undefined,
             nativeEncoderHardwareAccelerationKnown: message.nativeEncoderHardwareAccelerationKnown === true,
             nativeEncoderHardwareAccelerated: typeof message.nativeEncoderHardwareAccelerated === 'boolean'
                 ? message.nativeEncoderHardwareAccelerated
@@ -5444,11 +5459,13 @@ export function createRemoteHub(options = {}) {
     }
 
     function sendCommand(deviceId, command) {
-        const device = devices.get(String(deviceId || ''));
+        const device = devices.get(String(deviceId || ''));
         const commandName = safeString(command?.command || 'ping', 80);
-        const requiredPermission = commandName === 'input.control'
-            ? 'allowControl'
-            : commandName.startsWith('file.transfer')
+        const requiredPermission = commandName === 'input.control'
+            ? 'allowControl'
+            : commandName === 'system.power'
+                ? 'allowPowerActions'
+            : commandName.startsWith('file.transfer')
                 ? 'allowFileTransfer'
                     : commandName === 'audio.start'
                         ? 'allowRemoteAudio'
@@ -5507,8 +5524,30 @@ export function createRemoteHub(options = {}) {
             command: payload.command,
             channel: dedicatedFileSocket ? 'file' : 'control'
         });
-        return { ok: true, commandId };
-    }
+        return { ok: true, commandId };
+    }
+
+    function refreshDevicePolicies(deviceIds = undefined) {
+        const requestedIds = Array.isArray(deviceIds) && deviceIds.length > 0
+            ? new Set(deviceIds.map(deviceId => safeString(deviceId, 160)).filter(Boolean))
+            : null;
+        let updated = 0;
+        let total = 0;
+        for (const device of devices.values()) {
+            if (requestedIds && !requestedIds.has(device.deviceId)) continue;
+            if (!device?.socket || device.socket.destroyed || !device.connected) continue;
+            total += 1;
+            const effectivePolicy = getDevicePolicy(device);
+            if (writeJsonLine(device.socket, {
+                type: 'policy.update',
+                effectivePolicy,
+                updatedAt: new Date().toISOString()
+            })) {
+                updated += 1;
+            }
+        }
+        return { ok: updated === total, updated, total };
+    }
 
     // Client updates are an explicit Hub maintenance action, not an Agent task.
     // This legacy path is kept for clients that predate the dedicated update command.
@@ -7382,6 +7421,7 @@ export function createRemoteHub(options = {}) {
         disconnectDevice,
         assignDeviceSlot,
         sendCommand,
+        refreshDevicePolicies,
         sendLegacyClientUpdate,
         sendInputControl,
         releaseInputOwner,

package/src/server.js

@@ -1450,7 +1450,8 @@ function normalizeDeviceIds(value) {
 function rejectRetiredAgentTaskRequest(req, res) {
   const body = req.body && typeof req.body === 'object' ? req.body : {};
   const approvalLevel = String(body.approvalLevel || '').trim().toLowerCase();
-  const hasModelSelection = Object.prototype.hasOwnProperty.call(body, 'model');
+  const hasModelSelection = ['model', 'aiModel', 'aiProvider', 'provider']
+    .some(key => Object.prototype.hasOwnProperty.call(body, key));
   if (approvalLevel !== 'ai-assist' && !hasModelSelection) {
     return false;
   }
@@ -2102,6 +2103,13 @@ function buildRemoteFrameBinaryPacket(frameEvent, diagnostics = {}) {
     agentQueueBeforePaceMs: Number(frame.agentQueueBeforePaceMs || 0) || 0,
     agentFrameAgeMs: Number(frame.agentFrameAgeMs || 0) || 0,
     nativeCaptureTelemetryAvailable: frame.nativeCaptureTelemetryAvailable === true,
+    nativeCaptureTelemetryVersion: Number(frame.nativeCaptureTelemetryVersion || 0) || 0,
+    nativeCaptureTelemetryAgeMs: frame.nativeCaptureTelemetryAgeMs === null
+      || frame.nativeCaptureTelemetryAgeMs === undefined
+      ? undefined
+      : Number.isFinite(Number(frame.nativeCaptureTelemetryAgeMs))
+        ? Math.max(0, Number(frame.nativeCaptureTelemetryAgeMs))
+        : undefined,
     nativeEncoderHardwareAccelerationKnown: frame.nativeEncoderHardwareAccelerationKnown === true,
     nativeEncoderHardwareAccelerated: typeof frame.nativeEncoderHardwareAccelerated === 'boolean'
       ? frame.nativeEncoderHardwareAccelerated
@@ -2708,6 +2716,7 @@ app.patch('/api/settings', async (req, res) => {
     if (patch.agent && Object.prototype.hasOwnProperty.call(patch.agent, 'enabled')) {
       await agentSettingsStore.update({ enabled: record.settings.agent?.enabled === true });
     }
+    remoteHub.refreshDevicePolicies();
     res.json({ ok: true, revision: record.revision, updatedAt: record.updatedAt, settings: record.settings });
   } catch (error) {
     if (error instanceof SettingsConflictError) {
@@ -2965,6 +2974,9 @@ app.post('/api/internal/agent-mcp/tool', async (req, res) => {
 
 app.post('/api/settings/agent/run', async (req, res) => {
   noStore(res);
+  if (rejectRetiredAgentTaskRequest(req, res)) {
+    return;
+  }
   try {
     if (!(await synchronizeAgentEnablement())) {
       throw new AgentRuntimeError('agent-disabled', 'Enable Codex Agent in Settings before running commands.', { status: 409 });
@@ -3999,11 +4011,12 @@ app.post('/api/remote/devices/:deviceId/quick-actions', requireHubFeatureAccess,
   }
 
   const settings = await liveDeskSettingsStore.get();
-  if (settings.agent?.enabled !== true) {
+  const policy = effectiveDevicePolicy(settings);
+  if (policy.accessMode !== 'trusted-only') {
     res.status(403).json({ ok: false, error: 'remote-actions-disabled' });
     return;
   }
-  if (settings.agent?.allowPowerActions !== true) {
+  if (policy.allowPowerActions !== true) {
     res.status(403).json({ ok: false, error: 'power-actions-disabled' });
     return;
   }
@@ -4020,14 +4033,18 @@ app.post('/api/remote/devices/:deviceId/quick-actions', requireHubFeatureAccess,
     return;
   }
 
-  const label = action === 'shutdown' ? 'Shut down' : `${action.slice(0, 1).toUpperCase()}${action.slice(1)}`;
-  const result = remoteHub.requestAgentTask(req.params.deviceId, {
-    instruction: `${label} this Client. This action was explicitly requested and confirmed from the LiveDesk Hub action panel.`,
-    title: `${label} Client`,
-    operation: 'system.power',
-    approvalLevel: 'task-only',
-    toolArguments: { action, delaySec: 0 },
-    permissionMode: 'ask'
+  // The Client enforces the same policy. Queue the current policy immediately
+  // before the command so enabling this visible setting works without forcing
+  // a reconnect, while TCP ordering keeps the command behind the policy update.
+  remoteHub.refreshDevicePolicies([req.params.deviceId]);
+  const result = remoteHub.sendCommand(req.params.deviceId, {
+    command: 'system.power',
+    payload: {
+      action,
+      delaySec: 0,
+      permissionMode: 'manual-confirmed',
+      requestSource: 'hub-action-dock'
+    }
   });
   recordAgentAudit({
     event: 'manual-action-dispatched',
@@ -4036,7 +4053,7 @@ app.post('/api/remote/devices/:deviceId/quick-actions', requireHubFeatureAccess,
     category: 'systemPower',
     decision: result.ok ? 'allow' : 'deny',
     status: result.ok ? 'queued' : 'failed',
-    details: { action, taskId: result.taskId || '', error: result.error || '' }
+    details: { action, commandId: result.commandId || '', error: result.error || '' }
   });
   if (!result.ok) {
     res.status(result.error === 'device-not-found' ? 404 : 409).json(result);

package/src/settings/settings-schema.js

@@ -251,6 +251,7 @@ export function effectiveDevicePolicy(settings = DEFAULT_LIVEDESK_SETTINGS) {
     allowUnencryptedLanFallback: normalized.security.allowUnencryptedLanFallback,
     allowControl: allowMutation && normalized.control.allowKeyboardMouse,
     allowClipboardText: allowMutation && normalized.control.allowClipboardText,
+    allowPowerActions: allowMutation && normalized.control.allowRemoteRestart,
     allowFileTransfer: allowMutation && normalized.filesAudio.allowFileTransfer,
     allowRemoteAudio: accessMode !== 'block-remote-access' && normalized.filesAudio.allowRemoteAudio,
     allowAgent: allowMutation && normalized.agent.enabled