npm - @openchambery/web - Versions diffs - 1.19.0-beta.1 → 1.19.0-beta.11 - Mend

@openchambery/web 1.19.0-beta.1 → 1.19.0-beta.11

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (65) hide show

package/dist/index.html CHANGED Viewed

@@ -552,7 +552,7 @@
         opacity: 0.72;
       }
     </style>
-    <script type="module" crossorigin src="/assets/main-CAFEHmFO.js"></script>
+    <script type="module" crossorigin src="/assets/main-CCSoX-f8.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -569,8 +569,8 @@
     <link rel="modulepreload" crossorigin href="/assets/terminalApi-BpPeXWIu.js">
     <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
     <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-DCowZ2ab.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-Ir8clpcX.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-BDOLh3pc.css">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-BusKIsc-.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-RGaBtbGz.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <!-- Keep the startup layer outside #root. React replaces every child of

package/dist/mini-chat.html CHANGED Viewed

@@ -74,7 +74,7 @@
       }
     </style>
-    <script type="module" crossorigin src="/assets/miniChat-CaoA6FTj.js"></script>
+    <script type="module" crossorigin src="/assets/miniChat-ByP4lmB2.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -91,8 +91,8 @@
     <link rel="modulepreload" crossorigin href="/assets/terminalApi-BpPeXWIu.js">
     <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
     <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-DCowZ2ab.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-Ir8clpcX.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-BDOLh3pc.css">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-BusKIsc-.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-RGaBtbGz.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full">

package/dist/mobile.html CHANGED Viewed

@@ -63,7 +63,7 @@
       })();
     </script>
-    <script type="module" crossorigin src="/assets/mobile-BmT1oGJE.js"></script>
+    <script type="module" crossorigin src="/assets/mobile-itPS85I5.js"></script>
     <link rel="modulepreload" crossorigin href="/assets/rolldown-runtime-C0FnF6B9.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-base-ui-CnHfUmDN.js">
     <link rel="modulepreload" crossorigin href="/assets/vendor-zustand-B4dlGEM2.js">
@@ -80,8 +80,8 @@
     <link rel="modulepreload" crossorigin href="/assets/terminalApi-BpPeXWIu.js">
     <link rel="modulepreload" crossorigin href="/assets/types-BuiqMmh_.js">
     <link rel="modulepreload" crossorigin href="/assets/capgoAdapter-DCowZ2ab.js">
-    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-Ir8clpcX.js">
-    <link rel="stylesheet" crossorigin href="/assets/src-BDOLh3pc.css">
+    <link rel="modulepreload" crossorigin href="/assets/runtimeConfig-BusKIsc-.js">
+    <link rel="stylesheet" crossorigin href="/assets/src-RGaBtbGz.css">
   </head>
   <body class="h-full bg-background text-foreground">
     <div id="root" class="h-full"></div>

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@openchambery/web",
-  "version": "1.19.0-beta.1",
+  "version": "1.19.0-beta.11",
   "private": false,
   "type": "module",
   "main": "./server/index.js",

package/server/lib/config-sync/DOCUMENTATION.md CHANGED Viewed

@@ -17,7 +17,6 @@ Own the direction-agnostic OpenCode config sync contract: allowlist planning on
 | `local-backup.js` | Local (pull destination) generational backup + tar extract |
 | `tar.js` | `collectLocalTarBuffer` (buffered) |
 | `engine.js` | `applyConfigSyncPlan` orchestration for **push** (prepare → putTar* → finalize) |
-| `credential-auth.js` | Credential grant enforcement helpers |
 | `target-id.js` | `ssh:<instanceId>` namespace helper |
 ## Contract shape
@@ -28,6 +27,7 @@ Own the direction-agnostic OpenCode config sync contract: allowlist planning on
 - **Plan** (source-computed): `{ direction: 'push' | 'pull', syncRunId?, sourceTargetId?, targetId?, files, directories, agentsRoot, authFile, deletes, totalBytes, selections? }`
 - **Selections**: `{ fileGroups: boolean[], singleFiles: boolean[], directories: boolean[], agentsRoot: boolean, authFile: boolean }`
   - Preview and apply must share one selections snapshot so the confirmed scope cannot drift.
+  - `authFile` defaults unchecked like an opt-in ordinary selection; once checked it syncs the same way as other allowlisted files (no extra grant).
 ## Direction flow
@@ -45,7 +45,7 @@ Switching direction in the wizard **must** discard the previous preview and re-c
 - Prepare (remote or local) writes generational backups under `<backupRoot>/<syncRunId>/` and prunes older than `OPENCODE_CONFIG_SYNC_BACKUP_GENERATIONS`. Failed runs keep their scene until pruned.
 - Finalize confirms the run's backup directory exists.
 - Run records (Electron `sync-run-store`) persist `direction` alongside `syncRunId` / summary; they are not stored in `settings.json`.
-- **Credential sync:** target reachability ≠ credential transfer. `auth.json` is omitted unless the SSH target has an explicit grant. Push and pull reuse the same grant. Unauthorized credential plans fail with `code: credential_sync_unauthorized`.
+- **`auth.json` sync:** treated like any other selected allowlist item. Default selection leaves it unchecked; when selected, push/pull transfer it under the dedicated auth backup directory with no separate credential grant.
 ## HTTP receive protocol (direct / later relay)
@@ -53,18 +53,17 @@ Routes under `/api/openchamber/config-sync/*` (global `/api` auth gate: session
 | Method | Path | Role |
 |--------|------|------|
-| POST | `/probe` | Inventory + existence vs plan; reports `inboundCredentialAuthorized` |
+| POST | `/probe` | Inventory + existence vs plan |
 | POST | `/prepare` | Generational local backup + deletes; one inflight `syncRunId` |
 | PUT | `/put/:kind?syncRunId=` | Stream tar.gz (`config` \| `agents` \| `auth`) |
 | GET | `/download/:kind` | Stream tar.gz for pull source |
 | POST | `/finalize` | Confirm backup generation + success receipt |
 | POST | `/abort` | Clear inflight |
-| GET/PUT | `/credential-auth` | Host inbound credential grant (`configSyncInboundCredentialAuthorized`) |
-`auth` put/download requires inbound credential authorization (`credential_sync_unauthorized`). Concurrent prepare → `sync_in_progress`.
+`auth` put/download follows the same selection/plan rules as other kinds. Concurrent prepare → `sync_in_progress`.
 ## Composition
 - Electron SSH: `TargetExecutor` push + inventory/tar pull.
-- Electron direct hosts: `direct-config-sync.mjs` calls these HTTP routes (`host:<id>` grants in `desktopCredentialSyncGrants`, channel `host-settings`).
-- **Relay hosts (ticket 06):** UI opens an E2EE tunnel (`packages/ui/src/lib/relay/relay-config-sync.ts`) and calls the same HTTP routes via `tunnel.fetch`. Target id is `relay:<serverId>` (signing-key fingerprint). Preview/apply refresh candidates and refuse on `serverId` mismatch (`relay_identity_changed`) with no fallback identity. Outbound credential grants use channel `pairing-settings` (pairing trust UX / host trust settings for the paired relay). Inbound credential grants remain `configSyncInboundCredentialAuthorized` on the receiving Host. Auth is always bearer + grant — never “reachable ⇒ trusted”.
+- Electron direct hosts: `direct-config-sync.mjs` calls these HTTP routes.
+- **Relay hosts (ticket 06):** UI opens an E2EE tunnel (`packages/ui/src/lib/relay/relay-config-sync.ts`) and calls the same HTTP routes via `tunnel.fetch`. Target id is `relay:<serverId>` (signing-key fingerprint). Preview/apply refresh candidates and refuse on `serverId` mismatch (`relay_identity_changed`) with no fallback identity. Auth remains the global `/api` bearer gate; selected `auth.json` transfers without a separate credential grant.

package/server/lib/config-sync/engine.js CHANGED Viewed

@@ -1,13 +1,11 @@
 import path from 'node:path';
 import { assertPlanDirection } from './contract.js';
-import { assertCredentialSyncAuthorized } from './credential-auth.js';
 import { collectLocalTarBuffer } from './tar.js';
 /**
  * Run a source-side plan against a TargetExecutor (probe → prepare → putTar* → finalize).
  * Direction-agnostic orchestration; ticket 02 only drives push from a local home snapshot.
- * Credential-bearing plans require an explicit per-target grant (ticket 03).
  *
  * @param {{
  *   plan: object,
@@ -15,7 +13,6 @@ import { collectLocalTarBuffer } from './tar.js';
  *   syncRunId: string,
  *   sourceHomedir: string,
  *   collectTar?: typeof collectLocalTarBuffer,
- *   credentialSyncAuthorized?: boolean,
  * }} args
  */
 export const applyConfigSyncPlan = async ({
@@ -24,13 +21,8 @@ export const applyConfigSyncPlan = async ({
   syncRunId,
   sourceHomedir,
   collectTar = collectLocalTarBuffer,
-  credentialSyncAuthorized = false,
 }) => {
   assertPlanDirection(plan);
-  assertCredentialSyncAuthorized(plan, {
-    targetId: plan?.targetId || 'unknown',
-    authorized: credentialSyncAuthorized === true,
-  });
   const home = String(sourceHomedir || '');
   const configDir = path.join(home, '.config', 'opencode');
   const tarEntries = [

package/server/lib/config-sync/index.js CHANGED Viewed

@@ -48,13 +48,6 @@ export {
 } from './scripts.js';
 export { collectLocalTarBuffer } from './tar.js';
 export { applyConfigSyncPlan, probePathsForPlan } from './engine.js';
-export {
-  CREDENTIAL_SYNC_UNAUTHORIZED_CODE,
-  CREDENTIAL_SYNC_GRANT_CHANNEL_INSTANCE_SETTINGS,
-  CredentialSyncUnauthorizedError,
-  planIncludesCredentials,
-  assertCredentialSyncAuthorized,
-} from './credential-auth.js';
 export {
   buildDefaultSyncSelections,
   normalizeSyncSelections,

package/server/lib/config-sync/receiver.js CHANGED Viewed

@@ -11,7 +11,6 @@ import {
   OPENCODE_CONFIG_SYNC_MAX_BYTES,
   OPENCODE_CONFIG_SYNC_MAX_FILES,
 } from './constants.js';
-import { CREDENTIAL_SYNC_UNAUTHORIZED_CODE } from './credential-auth.js';
 import {
   extractTarGzBuffer,
   finalizeLocalSyncDestination,
@@ -20,8 +19,6 @@ import {
 import { walkAllowlistDirectory } from './plan.js';
 import { sanitizeSyncRunIdForPath } from './scripts.js';
-const INBOUND_CREDENTIAL_SETTINGS_KEY = 'configSyncInboundCredentialAuthorized';
 /**
  * In-process receiver for HTTP config-sync (direct/relay hosts).
  * One inflight sync at a time; backups use the same local generational helpers as pull.
@@ -29,8 +26,6 @@ const INBOUND_CREDENTIAL_SETTINGS_KEY = 'configSyncInboundCredentialAuthorized';
 export const createConfigSyncReceiver = (deps = {}) => {
   const {
     homedir = () => os.homedir(),
-    readSettings = async () => ({}),
-    writeSettingsPatch = async () => {},
   } = deps;
   let inflight = null;
@@ -148,18 +143,6 @@ export const createConfigSyncReceiver = (deps = {}) => {
     };
   };
-  const isInboundCredentialAuthorized = async () => {
-    const settings = await readSettings();
-    return settings?.[INBOUND_CREDENTIAL_SETTINGS_KEY] === true;
-  };
-  const setInboundCredentialAuthorized = async (authorized) => {
-    await writeSettingsPatch({
-      [INBOUND_CREDENTIAL_SETTINGS_KEY]: authorized === true,
-    });
-    return { authorized: authorized === true };
-  };
   const probe = async (plan) => {
     const snapshot = buildInventory();
     const existing = new Set(snapshot.remoteExisting);
@@ -171,7 +154,6 @@ export const createConfigSyncReceiver = (deps = {}) => {
     return {
       ...snapshot,
       remoteExisting: [...new Set(planPaths.filter((rel) => existing.has(rel)))],
-      inboundCredentialAuthorized: await isInboundCredentialAuthorized(),
     };
   };
@@ -211,14 +193,6 @@ export const createConfigSyncReceiver = (deps = {}) => {
       error.code = 'sync_not_prepared';
       throw error;
     }
-    if (kind === 'auth') {
-      const authorized = await isInboundCredentialAuthorized();
-      if (!authorized) {
-        const error = new Error('Credential sync is not authorized on this host');
-        error.code = CREDENTIAL_SYNC_UNAUTHORIZED_CODE;
-        throw error;
-      }
-    }
     const buffer = await readStreamToBuffer(stream, { maxBytes: OPENCODE_CONFIG_SYNC_MAX_BYTES });
     const home = homedir();
     if (kind === 'config') {
@@ -279,12 +253,6 @@ export const createConfigSyncReceiver = (deps = {}) => {
       return collectTarGz(home, ['.agents']);
     }
     if (kind === 'auth') {
-      const authorized = await isInboundCredentialAuthorized();
-      if (!authorized) {
-        const error = new Error('Credential sync is not authorized on this host');
-        error.code = CREDENTIAL_SYNC_UNAUTHORIZED_CODE;
-        throw error;
-      }
       return collectTarGz(path.join(home, '.local', 'share', 'opencode'), ['auth.json']);
     }
     const error = new Error(`Unsupported download kind: ${String(kind)}`);
@@ -315,7 +283,6 @@ export const createConfigSyncReceiver = (deps = {}) => {
   };
   return {
-    INBOUND_CREDENTIAL_SETTINGS_KEY,
     probe,
     prepare,
     put,
@@ -323,8 +290,6 @@ export const createConfigSyncReceiver = (deps = {}) => {
     finalize,
     abort,
     getInflight: () => inflight,
-    isInboundCredentialAuthorized,
-    setInboundCredentialAuthorized,
     buildInventory,
   };
 };

package/server/lib/config-sync/routes.js CHANGED Viewed

@@ -2,43 +2,29 @@ import { createConfigSyncReceiver } from './receiver.js';
 /**
  * Register HTTP config-sync receive/download routes for direct (and later relay) hosts.
- * Auth is the global `/api` UI/client-token gate. Credential kinds additionally
- * require inbound credential authorization on this host.
+ * Auth is the global `/api` UI/client-token gate. Selected kinds (including auth)
+ * sync when present in the plan — no extra credential grant checks.
  *
  * @param {import('express').Express} app
  * @param {{
  *   receiver?: ReturnType<typeof createConfigSyncReceiver>,
- *   readSettingsFromDiskMigrated?: () => Promise<object>,
- *   persistSettings?: (changes: object) => Promise<object>,
  *   express?: typeof import('express'),
  * }} deps
  */
 export const registerConfigSyncRoutes = (app, deps = {}) => {
   const {
-    readSettingsFromDiskMigrated,
-    persistSettings,
     express,
   } = deps;
-  const receiver = deps.receiver || createConfigSyncReceiver({
-    readSettings: async () => (typeof readSettingsFromDiskMigrated === 'function'
-      ? readSettingsFromDiskMigrated()
-      : {}),
-    writeSettingsPatch: async (patch) => {
-      if (typeof persistSettings === 'function') {
-        await persistSettings(patch);
-      }
-    },
-  });
+  const receiver = deps.receiver || createConfigSyncReceiver();
   const sendError = (res, error, fallbackStatus = 500) => {
     const code = typeof error?.code === 'string' ? error.code : undefined;
-    const status = code === 'credential_sync_unauthorized' ? 403
-      : code === 'sync_in_progress' ? 409
-        : code === 'sync_not_prepared' ? 409
-          : code === 'sync_payload_too_large' || code === 'sync_too_many_files' ? 413
-            : code === 'sync_invalid_kind' ? 400
-              : fallbackStatus;
+    const status = code === 'sync_in_progress' ? 409
+      : code === 'sync_not_prepared' ? 409
+        : code === 'sync_payload_too_large' || code === 'sync_too_many_files' ? 413
+          : code === 'sync_invalid_kind' ? 400
+            : fallbackStatus;
     res.status(status).json({
       error: error instanceof Error ? error.message : String(error),
       ...(code ? { code } : {}),
@@ -118,24 +104,5 @@ export const registerConfigSyncRoutes = (app, deps = {}) => {
     }
   });
-  app.get('/api/openchamber/config-sync/credential-auth', async (_req, res) => {
-    try {
-      const authorized = await receiver.isInboundCredentialAuthorized();
-      res.json({ authorized });
-    } catch (error) {
-      sendError(res, error);
-    }
-  });
-  app.put('/api/openchamber/config-sync/credential-auth', express?.json?.({ limit: '16kb' }) || ((req, _res, next) => next()), async (req, res) => {
-    try {
-      const authorized = req.body?.authorized === true;
-      const result = await receiver.setInboundCredentialAuthorized(authorized);
-      res.json(result);
-    } catch (error) {
-      sendError(res, error);
-    }
-  });
   return { receiver };
 };

package/server/lib/config-sync/routes.test.js CHANGED Viewed

@@ -8,7 +8,6 @@ import request from 'supertest';
 import { createConfigSyncReceiver } from './receiver.js';
 import { registerConfigSyncRoutes } from './routes.js';
-import { CREDENTIAL_SYNC_UNAUTHORIZED_CODE } from './credential-auth.js';
 const tempDirs = [];
@@ -31,18 +30,13 @@ const createApp = async () => {
   await fsp.writeFile(path.join(configDir, 'opencode.jsonc'), '{}\n');
   await fsp.writeFile(path.join(configDir, 'AGENTS.md'), 'hi\n');
-  let settings = {};
   const receiver = createConfigSyncReceiver({
     homedir: () => home,
-    readSettings: async () => ({ ...settings }),
-    writeSettingsPatch: async (patch) => {
-      settings = { ...settings, ...patch };
-    },
   });
   const app = express();
   registerConfigSyncRoutes(app, { receiver, express });
-  return { app, home, receiver, getSettings: () => settings };
+  return { app, home, receiver };
 };
 describe('config-sync HTTP routes', () => {
@@ -79,27 +73,6 @@ describe('config-sync HTTP routes', () => {
     await expect(fsp.stat(backup)).resolves.toMatchObject({ });
   });
-  it('rejects auth put without inbound credential authorization', async () => {
-    const { app } = await createApp();
-    const plan = {
-      direction: 'push',
-      files: [],
-      directories: [],
-      deletes: [],
-      agentsRoot: null,
-      authFile: { bytes: 2 },
-      totalBytes: 2,
-    };
-    await request(app).post('/api/openchamber/config-sync/prepare').send({ plan, syncRunId: 'run-auth' });
-    const put = await request(app)
-      .put('/api/openchamber/config-sync/put/auth?syncRunId=run-auth')
-      .set('Content-Type', 'application/gzip')
-      .send(Buffer.from('xx'));
-    expect(put.status).toBe(403);
-    expect(put.body.code).toBe(CREDENTIAL_SYNC_UNAUTHORIZED_CODE);
-    await request(app).post('/api/openchamber/config-sync/abort').send({ syncRunId: 'run-auth' });
-  });
   it('rejects a second concurrent prepare', async () => {
     const { app } = await createApp();
     const plan = {
@@ -131,7 +104,6 @@ describe('config-sync HTTP routes', () => {
       totalBytes: 0,
     };
     await request(app).post('/api/openchamber/config-sync/prepare').send({ plan, syncRunId: 'run-stream' });
-    await receiver.setInboundCredentialAuthorized(true);
     // Tiny invalid tar still proves chunk aggregation reached extract.
     await expect(receiver.put({
@@ -142,13 +114,4 @@ describe('config-sync HTTP routes', () => {
     await request(app).post('/api/openchamber/config-sync/abort').send({ syncRunId: 'run-stream' });
   });
-  it('persists inbound credential authorization flag', async () => {
-    const { app, getSettings } = await createApp();
-    const before = await request(app).get('/api/openchamber/config-sync/credential-auth');
-    expect(before.body.authorized).toBe(false);
-    const after = await request(app).put('/api/openchamber/config-sync/credential-auth').send({ authorized: true });
-    expect(after.body.authorized).toBe(true);
-    expect(getSettings().configSyncInboundCredentialAuthorized).toBe(true);
-  });
 });

package/server/lib/opencode/openchamber-routes.js CHANGED Viewed

@@ -10,8 +10,6 @@ export const registerOpenChamberRoutes = (app, dependencies) => {
     server,
     __dirname,
     openchamberDataDir,
-    readSettingsFromDiskMigrated,
-    persistSettings,
     fetchFreeZenModels,
     getCachedZenModels,
     sessionIndexService,
@@ -22,11 +20,7 @@ export const registerOpenChamberRoutes = (app, dependencies) => {
   registerSessionIndexRoutes(app, { sessionIndexService, sessionIndexSyncRuntime });
   registerTranscriptCacheRoutes(app, { transcriptCacheService });
-  registerConfigSyncRoutes(app, {
-    readSettingsFromDiskMigrated,
-    persistSettings,
-    express,
-  });
+  registerConfigSyncRoutes(app, { express });
   app.get('/api/openchamber/update-check', async (req, res) => {
     try {