@promptbook/cli 0.112.0-96 → 0.112.0-98

package/apps/agents-server/playwright.config.ts

@@ -89,7 +89,8 @@ const config = defineConfig({
             },
         },
         {
-            command: 'npm run prebuild && next build && npm run start',
+            command:
+                'npm run prebuild && node -r ./scripts/ignore-kill-eperm.js ../../node_modules/next/dist/bin/next build && npm run start',
             cwd: __dirname,
             url: APP_URL,
             reuseExistingServer: false,

package/apps/agents-server/src/app/admin/cli-access/CliAccessClient.tsx

@@ -0,0 +1,99 @@
+'use client';
+
+import { AlertTriangle } from 'lucide-react';
+import { AdminTerminalCard } from '../../../components/AdminTerminal/AdminTerminalCard';
+import { useAdminTerminalSession } from '../../../components/AdminTerminal/useAdminTerminalSession';
+
+/**
+ * Browser-safe snapshot of one raw CLI access session.
+ */
+type CliAccessSession = {
+    readonly id: string;
+    readonly title: string;
+    readonly shell: string;
+    readonly workingDirectory: string;
+    readonly isRunning: boolean;
+    readonly output: string;
+    readonly startedAt: string;
+    readonly finishedAt: string | null;
+    readonly exitCode: number | null;
+    readonly signal: string | null;
+};
+
+/**
+ * Super-admin UI for the unrestricted standalone VPS shell.
+ */
+export function CliAccessClient() {
+    const terminal = useAdminTerminalSession<CliAccessSession>({
+        basePath: '/api/admin/cli-access',
+        loadErrorMessage: 'Failed to load the CLI access session.',
+        startErrorMessage: 'Failed to start the CLI access session.',
+        sendErrorMessage: 'Failed to send CLI access input.',
+        stopErrorMessage: 'Failed to stop the CLI access session.',
+        startSuccessMessage: 'CLI access terminal started.',
+        finishSuccessMessage: 'CLI access session finished.',
+        finishErrorMessage: 'CLI access session ended with an error.',
+    });
+
+    return (
+        <div className="container mx-auto space-y-6 px-4 py-8">
+            <div className="mt-20">
+                <h1 className="text-3xl font-light text-gray-900">CLI Access</h1>
+                <p className="mt-1 max-w-4xl text-sm text-gray-500">
+                    Open the live server shell directly in the Agents Server UI and run raw commands with the same
+                    permissions as the running Agents Server process.
+                </p>
+            </div>
+
+            {terminal.errorMessage ? (
+                <div className="rounded-xl border border-rose-200 bg-rose-50 px-4 py-3 text-sm text-rose-700">
+                    {terminal.errorMessage}
+                </div>
+            ) : null}
+            {terminal.successMessage ? (
+                <div className="rounded-xl border border-emerald-200 bg-emerald-50 px-4 py-3 text-sm text-emerald-700">
+                    {terminal.successMessage}
+                </div>
+            ) : null}
+
+            <div className="rounded-2xl border border-amber-200 bg-amber-50 px-4 py-4 text-sm text-amber-900">
+                <div className="flex items-start gap-3">
+                    <AlertTriangle className="mt-0.5 h-5 w-5 flex-none" />
+                    <div className="space-y-1">
+                        <p className="font-semibold">Super-admin only</p>
+                        <p>
+                            This terminal is intentionally unrestricted. Every command runs directly on the server as the
+                            same operating-system user that runs the Agents Server.
+                        </p>
+                    </div>
+                </div>
+            </div>
+
+            <AdminTerminalCard
+                title="Raw server shell"
+                description="Start one shared shell session in the managed installation directory, run any command you need, and stop the session when you are done."
+                hint={`Shell: ${terminal.session?.shell || 'bash'}${terminal.session?.workingDirectory ? ` • Working directory: ${terminal.session.workingDirectory}` : ''}`}
+                session={terminal.session}
+                input={terminal.input}
+                onInputChange={terminal.setInput}
+                onStart={() => void terminal.startSession()}
+                onStop={() => void terminal.stopSession()}
+                onSend={(input) => void terminal.sendInput(input)}
+                isLoading={terminal.isLoadingSession}
+                isStarting={terminal.isStarting}
+                isSending={terminal.isSending}
+                isStopping={terminal.isStopping}
+                startLabel="Start CLI session"
+                runningLabel="CLI session running"
+                stopLabel="Stop session"
+                outputLabel="Live shell output"
+                outputEmptyState="No shell output yet. Start the CLI session to see the live server console here."
+                inputPlaceholder="Type any shell command, for example pm2 status, git pull, npm run build, or bash scripts"
+                quickActions={[
+                    { label: 'Send Enter', input: '\n' },
+                    { label: 'Send Ctrl+C', input: '\u0003' },
+                ]}
+            />
+        </div>
+    );
+}

package/apps/agents-server/src/app/admin/cli-access/page.tsx

@@ -0,0 +1,14 @@
+import { ForbiddenPage } from '../../../components/ForbiddenPage/ForbiddenPage';
+import { isUserGlobalAdmin } from '../../../utils/isUserGlobalAdmin';
+import { CliAccessClient } from './CliAccessClient';
+
+/**
+ * Super-admin page for raw browser-based access to the VPS shell.
+ */
+export default async function CliAccessPage() {
+    if (!(await isUserGlobalAdmin())) {
+        return <ForbiddenPage />;
+    }
+
+    return <CliAccessClient />;
+}

package/apps/agents-server/src/app/admin/code-runners/CodeRunnersClient.tsx

@@ -1,7 +1,9 @@
 'use client';
 
 import { Loader2, Save, ServerCog } from 'lucide-react';
-import { useEffect, useState } from 'react';
+import { useCallback, useEffect, useState } from 'react';
+import { AdminTerminalCard } from '../../../components/AdminTerminal/AdminTerminalCard';
+import { useAdminTerminalSession } from '../../../components/AdminTerminal/useAdminTerminalSession';
 import { Card } from '../../../components/Homepage/Card';
 
 /**
@@ -19,6 +21,20 @@ type CodeRunnersResponse = {
     readonly error?: string;
 };
 
+/**
+ * Browser-safe snapshot of one authentication terminal session.
+ */
+type CodeRunnerAuthenticationSession = {
+    readonly id: string;
+    readonly agent: string;
+    readonly isRunning: boolean;
+    readonly output: string;
+    readonly startedAt: string;
+    readonly finishedAt: string | null;
+    readonly exitCode: number | null;
+    readonly signal: string | null;
+};
+
 /**
  * Supported runner options shown by the standalone UI.
  */
@@ -30,6 +46,22 @@ const RUNNER_OPTIONS = [
     { value: 'gemini', label: 'Gemini' },
 ] as const;
 
+/**
+ * Contextual UI copy for the runner authentication terminal.
+ */
+const AUTHENTICATION_HINTS: Record<string, string> = {
+    'github-copilot':
+        'Start the terminal, run `/login` if Copilot asks for it, trust the installation directory, and exit the CLI once the signed-in status is shown.',
+    'openai-codex':
+        'Start the terminal and follow the Codex CLI login flow there. Paste any prompted device or browser code in your browser, then exit the CLI when authentication succeeds.',
+    'claude-code':
+        'Start the terminal and complete the Claude Code login or project-trust prompts directly in the embedded terminal, then exit the CLI once it is ready.',
+    opencode:
+        'Start the terminal and complete the Opencode authentication flow directly there, including any browser/device confirmation, then exit the CLI.',
+    gemini:
+        'Start the terminal and complete the Gemini CLI authentication prompts there, then exit the CLI after it confirms that the runner is ready.',
+};
+
 /**
  * Shared input styling for code-runner controls.
  */
@@ -46,21 +78,48 @@ export function CodeRunnersClient() {
     const [status, setStatus] = useState('');
     const [isLoading, setIsLoading] = useState(true);
     const [isSaving, setIsSaving] = useState(false);
-    const [errorMessage, setErrorMessage] = useState<string | null>(null);
-    const [successMessage, setSuccessMessage] = useState<string | null>(null);
+    const [configurationErrorMessage, setConfigurationErrorMessage] = useState<string | null>(null);
+    const [configurationSuccessMessage, setConfigurationSuccessMessage] = useState<string | null>(null);
     const [applyOutput, setApplyOutput] = useState<string | null>(null);
-
-    useEffect(() => {
-        void loadConfiguration();
-    }, []);
+    const authenticationTerminal = useAdminTerminalSession<CodeRunnerAuthenticationSession>({
+        basePath: '/api/admin/code-runners/authentication',
+        loadErrorMessage: 'Failed to load the authentication session.',
+        startErrorMessage: 'Failed to start the authentication session.',
+        sendErrorMessage: 'Failed to send authentication input.',
+        stopErrorMessage: 'Failed to stop the authentication session.',
+        startSuccessMessage: 'Runner authentication terminal started.',
+        finishSuccessMessage: 'Runner authentication finished.',
+        finishErrorMessage: 'Runner authentication session ended with an error.',
+    });
+    const {
+        session: authenticationSession,
+        input: authenticationInput,
+        setInput: setAuthenticationInput,
+        isStarting: isStartingAuthentication,
+        isSending: isSendingAuthenticationInput,
+        isStopping: isStoppingAuthentication,
+        errorMessage: authenticationErrorMessage,
+        successMessage: authenticationSuccessMessage,
+        clearMessages: clearAuthenticationMessages,
+        loadSession: loadAuthenticationSession,
+        startSession: startAuthenticationSession,
+        sendInput: sendAuthenticationInput,
+        stopSession: stopAuthenticationSession,
+    } = authenticationTerminal;
+    const authenticationHint =
+        AUTHENTICATION_HINTS[agent] ||
+        'Start the terminal, complete the runner authentication flow there, and exit the CLI when the runner is ready.';
+    const errorMessage = configurationErrorMessage ?? authenticationErrorMessage;
+    const successMessage = configurationSuccessMessage ?? authenticationSuccessMessage;
 
     /**
      * Loads current code-runner settings.
      */
-    async function loadConfiguration(): Promise<void> {
+    const loadConfiguration = useCallback(async (): Promise<void> => {
         try {
             setIsLoading(true);
-            setErrorMessage(null);
+            setConfigurationErrorMessage(null);
+
             const response = await fetch('/api/admin/code-runners', { cache: 'no-store' });
             const payload = (await response.json()) as CodeRunnersResponse;
 
@@ -72,12 +131,28 @@ export function CodeRunnersClient() {
             setModel(payload.model || 'gpt-5.4');
             setThinkingLevel(payload.thinkingLevel || 'xhigh');
             setStatus(payload.status || '');
+
+            await loadAuthenticationSession();
         } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to load code-runner configuration.');
+            setConfigurationErrorMessage(
+                error instanceof Error ? error.message : 'Failed to load code-runner configuration.',
+            );
         } finally {
             setIsLoading(false);
         }
-    }
+    }, [loadAuthenticationSession]);
+
+    useEffect(() => {
+        void loadConfiguration();
+    }, [loadConfiguration]);
+
+    useEffect(() => {
+        if (!authenticationSession?.finishedAt) {
+            return;
+        }
+
+        void loadConfiguration();
+    }, [authenticationSession?.finishedAt, loadConfiguration]);
 
     /**
      * Saves code-runner settings into `.env`.
@@ -85,8 +160,9 @@ export function CodeRunnersClient() {
     async function saveConfiguration(applyRuntimeConfiguration: boolean): Promise<void> {
         try {
             setIsSaving(true);
-            setErrorMessage(null);
-            setSuccessMessage(null);
+            setConfigurationErrorMessage(null);
+            setConfigurationSuccessMessage(null);
+            clearAuthenticationMessages();
             setApplyOutput(null);
 
             const response = await fetch('/api/admin/code-runners', {
@@ -107,13 +183,15 @@ export function CodeRunnersClient() {
             setThinkingLevel(payload.thinkingLevel || thinkingLevel);
             setStatus(payload.status || '');
             setApplyOutput(payload.applyResult?.output || null);
-            setSuccessMessage(
+            setConfigurationSuccessMessage(
                 applyRuntimeConfiguration
                     ? 'Code-runner configuration was saved and applied.'
                     : 'Code-runner configuration was saved.',
             );
         } catch (error) {
-            setErrorMessage(error instanceof Error ? error.message : 'Failed to save code-runner configuration.');
+            setConfigurationErrorMessage(
+                error instanceof Error ? error.message : 'Failed to save code-runner configuration.',
+            );
         } finally {
             setIsSaving(false);
         }
@@ -146,7 +224,7 @@ export function CodeRunnersClient() {
                         <select
                             value={agent}
                             onChange={(event) => setAgent(event.target.value)}
-                            disabled={isLoading || isSaving}
+                            disabled={isLoading || isSaving || isStartingAuthentication}
                             className={INPUT_CLASS_NAME}
                         >
                             {RUNNER_OPTIONS.map((option) => (
@@ -162,7 +240,7 @@ export function CodeRunnersClient() {
                             type="text"
                             value={model}
                             onChange={(event) => setModel(event.target.value)}
-                            disabled={isLoading || isSaving}
+                            disabled={isLoading || isSaving || isStartingAuthentication}
                             className={INPUT_CLASS_NAME}
                         />
                     </label>
@@ -172,7 +250,7 @@ export function CodeRunnersClient() {
                             type="text"
                             value={thinkingLevel}
                             onChange={(event) => setThinkingLevel(event.target.value)}
-                            disabled={isLoading || isSaving}
+                            disabled={isLoading || isSaving || isStartingAuthentication}
                             className={INPUT_CLASS_NAME}
                         />
                     </label>
@@ -182,7 +260,7 @@ export function CodeRunnersClient() {
                     <button
                         type="button"
                         onClick={() => void saveConfiguration(false)}
-                        disabled={isLoading || isSaving}
+                        disabled={isLoading || isSaving || isStartingAuthentication}
                         className="inline-flex items-center gap-2 rounded-md bg-blue-600 px-4 py-2 text-sm font-semibold text-white hover:bg-blue-700 disabled:cursor-not-allowed disabled:opacity-60"
                     >
                         {isSaving ? <Loader2 className="h-4 w-4 animate-spin" /> : <Save className="h-4 w-4" />}
@@ -191,7 +269,7 @@ export function CodeRunnersClient() {
                     <button
                         type="button"
                         onClick={() => void saveConfiguration(true)}
-                        disabled={isLoading || isSaving}
+                        disabled={isLoading || isSaving || isStartingAuthentication}
                         className="inline-flex items-center gap-2 rounded-md border border-slate-300 bg-white px-4 py-2 text-sm font-semibold text-slate-700 hover:bg-slate-50 disabled:cursor-not-allowed disabled:opacity-60"
                     >
                         {isSaving ? <Loader2 className="h-4 w-4 animate-spin" /> : <ServerCog className="h-4 w-4" />}
@@ -206,20 +284,32 @@ export function CodeRunnersClient() {
                 </pre>
             ) : null}
 
-            <Card className="hover:border-gray-200 hover:shadow-md">
-                <div className="space-y-3">
-                    <h2 className="text-lg font-semibold text-slate-900">Authentication</h2>
-                    <p className="text-sm text-slate-600">
-                        GitHub Copilot still requires an interactive CLI login and project trust setup on the VPS
-                        terminal. Use <span className="font-mono">sudo -u $USER copilot</span>, run{' '}
-                        <span className="font-mono">/login</span> when prompted, trust the install directory, then
-                        restart the pm2 process.
-                    </p>
-                    <pre className="max-h-64 overflow-auto rounded-xl border border-slate-200 bg-slate-950 p-4 text-xs text-slate-100">
-                        {status || 'Runner status was not available.'}
-                    </pre>
-                </div>
-            </Card>
+            <AdminTerminalCard
+                title="Authentication"
+                description="Save runner changes first if you want to authenticate a different CLI, then start the saved-runner terminal here instead of SSHing into the VPS."
+                hint={authenticationHint}
+                session={authenticationSession}
+                input={authenticationInput}
+                onInputChange={setAuthenticationInput}
+                onStart={() => void startAuthenticationSession()}
+                onStop={() => void stopAuthenticationSession()}
+                onSend={(input) => void sendAuthenticationInput(input)}
+                isLoading={isLoading}
+                isStarting={isStartingAuthentication}
+                isSending={isSendingAuthenticationInput}
+                isStopping={isStoppingAuthentication}
+                startLabel="Authenticate saved runner"
+                runningLabel="Authentication running"
+                stopLabel="Stop terminal"
+                outputLabel="Live authentication terminal"
+                outputEmptyState="No authentication session output yet. Start the saved-runner terminal to see the live authentication log here."
+                inputPlaceholder="Type a terminal command such as /login and send it to the running runner CLI"
+                quickActions={[{ label: 'Send Enter', input: '\n' }]}
+            >
+                <pre className="max-h-64 overflow-auto rounded-xl border border-slate-200 bg-slate-950 p-4 text-xs text-slate-100">
+                    {status || 'Runner status was not available.'}
+                </pre>
+            </AdminTerminalCard>
         </div>
     );
 }