@livedesk/hub 0.1.35 → 0.1.37

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@livedesk/hub",
-  "version": "0.1.35",
+  "version": "0.1.37",
   "description": "LiveDesk local Hub API and browser frame bridge",
   "type": "module",
   "main": "src/server.js",
@@ -16,7 +16,7 @@
   },
   "dependencies": {
     "@ffmpeg-installer/ffmpeg": "^1.1.0",
-    "@livedesk/runtime-core": "0.1.4",
+    "@livedesk/runtime-core": "0.1.5",
     "@openai/codex-sdk": "0.145.0",
     "cors": "^2.8.5",
     "express": "^4.21.2",

package/src/agents/agent-audit-store.js

@@ -1,4 +1,4 @@
-import { appendFile, mkdir, readFile, rename, rm, writeFile } from 'node:fs/promises';
+import { appendFile, mkdir, readFile, rename, writeFile } from 'node:fs/promises';
 import crypto from 'node:crypto';
 import os from 'node:os';
 import path from 'node:path';
@@ -84,20 +84,10 @@ export function createAgentAuditStore({ dataDir = path.join(os.homedir(), '.live
       await writeQueue;
       return record;
     },
-    async list({ runId = '', limit = 200 } = {}) {
+    async list({ runId = '', limit = 200 } = {}) {
       const current = await load();
       const normalizedLimit = Math.max(1, Math.min(500, Number(limit) || 200));
-      return current.filter(item => !runId || item.runId === String(runId)).slice(-normalizedLimit).reverse();
-    },
-    async clear() {
-      writeQueue = writeQueue.then(async () => {
-        await rm(filePath, { force: true });
-        records = [];
-        fileRecordCount = 0;
-        rewriteNeeded = false;
-      });
-      await writeQueue;
-      return { ok: true };
-    }
-  };
-}
+      return current.filter(item => !runId || item.runId === String(runId)).slice(-normalizedLimit).reverse();
+    }
+  };
+}

package/src/agents/agent-permissions.js

@@ -42,19 +42,19 @@ const PRESET_CATEGORIES = Object.freeze({
     ...DEFAULT_CUSTOM_CATEGORIES,
     userAccount: 'ask'
   },
-  'safe-auto': {
-    read: 'allow',
-    processControl: 'allow',
-    serviceControl: 'allow',
-    // launch_application accepts an executable path, so allowing it would
-    // provide a shell-equivalent escape hatch (for example powershell.exe).
-    applicationControl: 'ask',
-    fileRead: 'allow',
-    fileWrite: 'allow',
-    fileDelete: 'ask',
-    shell: 'ask',
-    // A writable script directory must never become an auto-execution path.
-    script: 'ask',
+  'safe-auto': {
+    read: 'allow',
+    processControl: 'allow',
+    serviceControl: 'allow',
+    // launch_application accepts an executable path, so allowing it would
+    // provide a shell-equivalent escape hatch (for example powershell.exe).
+    applicationControl: 'ask',
+    fileRead: 'allow',
+    fileWrite: 'allow',
+    fileDelete: 'ask',
+    shell: 'ask',
+    // A writable script directory must never become an auto-execution path.
+    script: 'ask',
     softwareInstall: 'ask',
     network: 'allow',
     systemPower: 'ask',
@@ -161,17 +161,17 @@ function isSafeAutoRelativePath(value) {
   return segments.length > 0 && !segments.includes('..');
 }
 
-function safeAutoConstraint(tool, args, mode) {
-  if (mode !== 'safe-auto') return '';
-  if (tool.category === 'fileWrite' && !isSafeAutoRelativePath(args?.path)) {
-    return 'Safe Auto file writes are limited to relative paths inside the LiveDesk files directory.';
-  }
-  if (tool.category === 'fileWrite') {
-    const filePath = String(args?.path || '').trim().replaceAll('\\', '/').toLowerCase();
-    if (filePath === 'scripts' || filePath.startsWith('scripts/')) {
-      return 'Safe Auto cannot write files inside the script directory.';
-    }
-  }
+function safeAutoConstraint(tool, args, mode) {
+  if (mode !== 'safe-auto') return '';
+  if (tool.category === 'fileWrite' && !isSafeAutoRelativePath(args?.path)) {
+    return 'Safe Auto file writes are limited to relative paths inside the LiveDesk files directory.';
+  }
+  if (tool.category === 'fileWrite') {
+    const filePath = String(args?.path || '').trim().replaceAll('\\', '/').toLowerCase();
+    if (filePath === 'scripts' || filePath.startsWith('scripts/')) {
+      return 'Safe Auto cannot write files inside the script directory.';
+    }
+  }
   if (tool.category === 'script') {
     const scriptPath = String(args?.path || '').trim().toLowerCase();
     if (!isSafeAutoRelativePath(scriptPath) || !scriptPath.replaceAll('\\', '/').startsWith('scripts/') || !/\.(ps1|psm1|sh|bash|py|js|mjs|cmd|bat)$/.test(scriptPath)) {
@@ -181,15 +181,9 @@ function safeAutoConstraint(tool, args, mode) {
   return '';
 }
 
-export function evaluateAgentToolPermission({ policy, toolName, arguments: args = {}, deviceIds = [] } = {}) {
-  const tool = getAgentToolDefinition(toolName);
-  if (!tool) return { decision: 'deny', category: 'unknown', risk: 'critical', reason: 'Unknown or unregistered Agent tool.' };
-  // This is deliberately redundant with the filtered MCP registry. A future
-  // registry edit must not make an AI mutation executable merely by exposing
-  // a definition again.
-  if (tool.mutating === true || tool.readOnly !== true) {
-    return { decision: 'deny', category: tool.category, risk: 'critical', reason: 'AI mutating tools are disabled in the first public product.' };
-  }
+export function evaluateAgentToolPermission({ policy, toolName, arguments: args = {}, deviceIds = [] } = {}) {
+  const tool = getAgentToolDefinition(toolName);
+  if (!tool) return { decision: 'deny', category: 'unknown', risk: 'critical', reason: 'Unknown or unregistered Agent tool.' };
   const allowed = new Set(normalizeIds(policy?.deviceIds));
   const requested = targetIdsFromArgs(args, deviceIds);
   if (requested.some(deviceId => !allowed.has(deviceId))) {