npm - @rubytech/create-maxy-code - Versions diffs - 0.1.58 → 0.1.59 - Mend

@rubytech/create-maxy-code 0.1.58 → 0.1.59

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (77) hide show

package/payload/server/public/graph.html CHANGED Viewed

@@ -5,11 +5,11 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Graph — Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/graph-BVvcFSEQ.js"></script>
+  <script type="module" crossorigin src="/assets/graph-MvYxZOBF.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-DD-I1_y5.js">
   <link rel="modulepreload" crossorigin href="/assets/brand-BWCtpG7_.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-cCvgu38Y.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-BnaN3u86.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-D865qb3K.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-C2b1nlOc.js">
   <link rel="stylesheet" crossorigin href="/assets/brand-BDASZqMG.css">
 </head>
 <body>

package/payload/server/public/index.html CHANGED Viewed

@@ -5,13 +5,13 @@
   <meta name="viewport" content="width=device-width, initial-scale=1.0">
   <title>Maxy</title>
   <link rel="icon" href="/favicon.ico">
-  <script type="module" crossorigin src="/assets/admin-2ZJmzJ_g.js"></script>
+  <script type="module" crossorigin src="/assets/admin-nqCBFiSl.js"></script>
   <link rel="modulepreload" crossorigin href="/assets/chunk-DD-I1_y5.js">
   <link rel="modulepreload" crossorigin href="/assets/brand-BWCtpG7_.js">
-  <link rel="modulepreload" crossorigin href="/assets/graph-labels-cCvgu38Y.js">
+  <link rel="modulepreload" crossorigin href="/assets/graph-labels-D865qb3K.js">
   <link rel="modulepreload" crossorigin href="/assets/device-url-actions-CPoz5fqz.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-BnAxPkmg.js">
-  <link rel="modulepreload" crossorigin href="/assets/page-BnaN3u86.js">
+  <link rel="modulepreload" crossorigin href="/assets/page--hOVRrgN.js">
+  <link rel="modulepreload" crossorigin href="/assets/page-C2b1nlOc.js">
   <link rel="stylesheet" crossorigin href="/assets/brand-BDASZqMG.css">
   <link rel="stylesheet" crossorigin href="/assets/admin-CWMpccrR.css">
   <link rel="stylesheet" href="/brand-defaults.css">

package/payload/server/server.js CHANGED Viewed

@@ -8064,12 +8064,12 @@ async function performSpawnWithInitialMessage(args) {
     permissionMode: args.permissionMode,
     hidden: args.hidden,
     specialist: args.specialist,
+    model: args.model,
     aboutOwner,
     dormantPlugins,
     activePlugins,
     specialistDomains,
-    tunnelUrl,
-    originatingSessionId: args.originatingSessionId
+    tunnelUrl
   });
   console.log(`${TAG18} forward-spawn-start managerBase=${managerBase2()} bytes=${upstreamPayload.length} hidden=${args.hidden} specialist=${args.specialist ?? "none"}`);
   const forwardStart = Date.now();
@@ -8103,20 +8103,15 @@ async function performSpawnWithInitialMessage(args) {
   }
   return new Response(upstream.body, { status: upstream.status, headers: upstream.headers });
 }
-var requireAdminSessionUnlessLoopbackSpawn = async (c, next) => {
-  if (c.req.method === "POST" && c.req.path === "/api/admin/claude-sessions") {
-    const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
-    const isLoopback = remoteAddr === "127.0.0.1" || remoteAddr === "::1" || remoteAddr === "::ffff:127.0.0.1";
-    const xff = c.req.header("x-forwarded-for");
-    const xffPresent = typeof xff === "string" && xff.length > 0;
-    if (isLoopback && !xffPresent) {
-      console.log(`${TAG18} loopback-spawn-bypass remoteAddr=${remoteAddr} xff=absent`);
-      return next();
-    }
+var requireAdminSessionOrLoopback = async (c, next) => {
+  const remoteAddr = c.env?.incoming?.socket?.remoteAddress ?? "";
+  const isLoopback = remoteAddr === "127.0.0.1" || remoteAddr === "::1" || remoteAddr === "::ffff:127.0.0.1";
+  if (isLoopback && c.req.method === "POST" && c.req.path === "/api/admin/claude-sessions") {
+    return next();
   }
   return requireAdminSession(c, next);
 };
-app14.use("*", requireAdminSessionUnlessLoopbackSpawn);
+app14.use("*", requireAdminSessionOrLoopback);
 app14.post("/", async (c) => {
   const routeStart = Date.now();
   const cacheKey = c.get("cacheKey") ?? "";
@@ -8127,8 +8122,6 @@ app14.post("/", async (c) => {
   }
   let senderId;
   let userId;
-  let specialist;
-  let originatingSessionId;
   let authSurface;
   if (cacheKey) {
     authSurface = "cookie";
@@ -8138,42 +8131,31 @@ app14.post("/", async (c) => {
       return c.json({ error: "admin-account-not-resolved" }, 500);
     }
     userId = getUserIdForSession(cacheKey) ?? void 0;
-    specialist = void 0;
-    originatingSessionId = void 0;
   } else {
     authSurface = "loopback";
-    if (typeof body.originatingSessionId !== "string" || !UUID_PATTERN.test(body.originatingSessionId)) {
-      console.log(`[turn-recorder] spawn-failed sessionId=unknown reason=missing-originating-session-id`);
-      return c.json({ error: "originating-session-id-required" }, 400);
+    if (typeof body.adminSessionId !== "string" || !UUID_PATTERN.test(body.adminSessionId)) {
+      return c.json({ error: "admin-session-id-required" }, 400);
     }
-    originatingSessionId = body.originatingSessionId;
+    const lookupSessionId = body.adminSessionId;
     const operatorMeta = await fetch(
-      `${managerBase2()}/${encodeURIComponent(originatingSessionId)}/meta`
+      `${managerBase2()}/${encodeURIComponent(lookupSessionId)}/meta`
     ).then((r) => r.ok ? r.json() : null).catch((err) => {
       console.error(`${TAG18} fetch-failed op=operator-meta-lookup message=${err instanceof Error ? err.message : String(err)}`);
       return null;
     });
     const operatorSenderId = operatorMeta && typeof operatorMeta.senderId === "string" && operatorMeta.senderId.length > 0 ? operatorMeta.senderId : null;
     if (!operatorSenderId) {
-      console.log(
-        `[turn-recorder] spawn-failed sessionId=${originatingSessionId} reason=originating-session-not-found`
-      );
-      return c.json({ error: "originating-session-not-found" }, 404);
+      return c.json({ error: "admin-session-not-found" }, 404);
     }
     senderId = operatorSenderId;
     userId = void 0;
-    specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : "database-operator";
   }
   const channel = typeof body.channel === "string" ? body.channel : "browser";
   const initialMessage = typeof body.initialMessage === "string" && body.initialMessage.trim() ? body.initialMessage : null;
-  const initialMessageBytes = initialMessage ? Buffer.byteLength(initialMessage, "utf8") : 0;
   const permissionMode = typeof body.permissionMode === "string" ? body.permissionMode : void 0;
-  if (authSurface === "cookie") {
-    console.log(`${TAG18} spawn-request-in surface=cookie cacheKey-prefix=${cacheKey.slice(0, 8)} accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
-  } else {
-    console.log(`[turn-recorder] spawn-request sessionId=${originatingSessionId} specialist=${specialist ?? "none"} initialMessageBytes=${initialMessageBytes}`);
-  }
-  const t0 = Date.now();
+  const specialist = typeof body.specialist === "string" && /^[A-Za-z0-9_-]{1,64}$/.test(body.specialist) ? body.specialist : void 0;
+  const model = typeof body.model === "string" && /^[A-Za-z0-9._-]{1,64}$/.test(body.model) ? body.model : void 0;
+  console.log(`${TAG18} spawn-request-in surface=${authSurface} accountId=${senderId.slice(0, 8)} userId=${userId ? userId.slice(0, 8) : "absent"} channel=${channel} permissionMode=${permissionMode ?? "default"} specialist=${specialist ?? "none"} model=${model ?? "default"} initialMessage=${initialMessage ? "yes" : "no"}`);
   const response = await performSpawnWithInitialMessage({
     senderId,
     userId,
@@ -8182,41 +8164,10 @@ app14.post("/", async (c) => {
     permissionMode,
     hidden: false,
     specialist,
-    initialMessage,
-    originatingSessionId
+    model,
+    initialMessage
   });
-  if (authSurface === "loopback" && originatingSessionId) {
-    const respText = await response.text().catch(() => "");
-    const respStatus = response.status;
-    const replay = new Response(respText, { status: respStatus, headers: response.headers });
-    let parsed = null;
-    try {
-      parsed = JSON.parse(respText);
-    } catch {
-      parsed = null;
-    }
-    if (respStatus >= 200 && respStatus < 300 && parsed && typeof parsed.sessionId === "string") {
-      const recorderSessionId = parsed.sessionId;
-      console.log(
-        `[turn-recorder] spawn-success sessionId=${originatingSessionId} recorderSessionId=${recorderSessionId} pid=${parsed.pid ?? 0} latency-ms=${Date.now() - t0}`
-      );
-      if (initialMessage) {
-        console.log(
-          `[turn-recorder] input-delivered sessionId=${originatingSessionId} recorderSessionId=${recorderSessionId} bytes=${initialMessageBytes} multiline=${initialMessage.includes("\n")}`
-        );
-      }
-    } else {
-      const reasonRaw = parsed && typeof parsed.error === "string" ? parsed.error : "unknown";
-      if (reasonRaw !== "tool-surface-missing" && reasonRaw !== "missing-originating-session-id") {
-        const detail = parsed && typeof parsed.detail === "string" ? parsed.detail.slice(0, 200) : "";
-        console.log(
-          `[turn-recorder] spawn-failed sessionId=${originatingSessionId} reason=manager-spawn http=${respStatus} err=${JSON.stringify(detail || reasonRaw)}`
-        );
-      }
-    }
-    return replay;
-  }
-  console.log(`${TAG18} route-done surface=cookie status=${response.status} route-ms=${Date.now() - routeStart}`);
+  console.log(`${TAG18} route-done surface=${authSurface} status=${response.status} route-ms=${Date.now() - routeStart}`);
   return response;
 });
 app14.get("/events", async (c) => {
@@ -8343,23 +8294,6 @@ app14.get("/:sessionId/meta", async (c) => {
   if (!upstream) return c.json({ error: "manager-unreachable" }, 503);
   return new Response(upstream.body, { status: upstream.status, headers: upstream.headers });
 });
-app14.patch("/:sessionId", async (c) => {
-  const sessionId = c.req.param("sessionId");
-  const body = await c.req.text();
-  const upstream = await fetch(
-    `${managerBase2()}/${encodeURIComponent(sessionId)}`,
-    {
-      method: "PATCH",
-      headers: { "content-type": "application/json" },
-      body
-    }
-  ).catch((err) => {
-    console.error(`${TAG18} fetch-failed op=patch message=${err instanceof Error ? err.message : String(err)}`);
-    return null;
-  });
-  if (!upstream) return c.json({ error: "manager-unreachable" }, 503);
-  return new Response(upstream.body, { status: upstream.status, headers: upstream.headers });
-});
 app14.post("/:sessionId/input", async (c) => {
   const sessionId = c.req.param("sessionId");
   const rawBody = await c.req.text();