@rubytech/create-realagent 1.0.869 → 1.0.871

package/payload/server/server.js

@@ -83,7 +83,7 @@ import {
   vncLog,
   waitForExit,
   writeChromiumWrapper
-} from "./chunk-B5VSPQQP.js";
+} from "./chunk-5U36PKG4.js";
 import {
   agentLogStream,
   clearSessionHistory,
@@ -110,7 +110,7 @@ import {
   sigtermFlushStreamLogs,
   unregisterSession,
   validateSession
-} from "./chunk-TOLLHW7W.js";
+} from "./chunk-NDEQBCVI.js";
 import {
   CLOUDFLARE_TASK_DIAGNOSTICS,
   appendCloudflareSteps,
@@ -5205,8 +5205,8 @@ app5.post("/login", async (c) => {
       console.error(`[access-gate] login ip=${clientIp} agent=${agentSlug} contact=${maskContact(contact)} result=expired_at`);
       return c.json({ error: "Access expired", expiresAt: grant.expiresAt }, 403);
     }
-    const passwordValid = await verifyPassword(password, passwordHash);
-    if (!passwordValid) {
+    const verifyResult = await verifyPassword(password, passwordHash);
+    if (!verifyResult.ok) {
       recordAccessFailedAttempt(clientIp, agentSlug);
       console.error(`[access-gate] login ip=${clientIp} agent=${agentSlug} contact=${maskContact(contact)} result=wrong_password`);
       return c.json({ error: "Invalid credentials" }, 401);
@@ -7439,7 +7439,7 @@ var app11 = new Hono();
 app11.post("/cancel", requireAdminSession, async (c) => {
   const session_key = c.var.sessionKey;
   try {
-    const { interruptClient: interruptClient2 } = await import("./client-pool-2IUOSYDF.js");
+    const { interruptClient: interruptClient2 } = await import("./client-pool-XAEDMS5D.js");
     await interruptClient2(session_key);
     return c.json({ ok: true });
   } catch (err) {
@@ -8311,9 +8311,22 @@ ${block.text}` : block.text;
   flushAssistant();
   return { messages, jsonlMissing: false, malformedLines };
 }
+function diffJsonlVsNeo4j(jsonl, neo4j4) {
+  const index = /* @__PURE__ */ new Map();
+  for (const n of neo4j4) index.set(`${n.role}${n.content}`, n);
+  const present = /* @__PURE__ */ new Map();
+  const missing = [];
+  for (let i = 0; i < jsonl.length; i++) {
+    const m = index.get(`${jsonl[i].role}${jsonl[i].content}`);
+    if (m) present.set(i, m);
+    else missing.push(i);
+  }
+  return { present, missing };
+}
 function resolveJsonlPath(homeDir, accountDir, agentSessionId) {
   const projectKey = "-" + accountDir.split("/").filter(Boolean).join("-");
-  return `${homeDir}/.claude/projects/${projectKey}/${agentSessionId}.jsonl`;
+  const base = process.env.CLAUDE_CONFIG_DIR || `${homeDir}/.claude`;
+  return `${base}/projects/${projectKey}/${agentSessionId}.jsonl`;
 }
 
 // server/routes/admin/sessions.ts
@@ -8597,19 +8610,19 @@ app17.post("/:id/resume", async (c) => {
     jsonlMissing = replay.jsonlMissing;
     jsonlMalformedLines = replay.malformedLines;
     jsonlReplayMessages = replay.messages;
+    if (replay.jsonlMissing) {
+      console.error(`[jsonl-resume-miss] sessionKey=${sessionKey.slice(0, 8)}\u2026 conversationId=${conversationId.slice(0, 8)}\u2026 agentSessionId=${persistedAgentSessionId.slice(0, 8)}\u2026 expectedPath=${jsonlPath} configDir=${process.env.CLAUDE_CONFIG_DIR ?? "<unset>"}`);
+    }
   } else {
     jsonlMissing = true;
   }
   if (jsonlMissing || jsonlReplayMessages.length === 0) {
     messages = neo4jMessages;
   } else {
-    const neo4jByKey = /* @__PURE__ */ new Map();
-    for (const n of neo4jMessages) {
-      neo4jByKey.set(`${n.role}${n.content}`, n);
-    }
+    const diff = diffJsonlVsNeo4j(jsonlReplayMessages, neo4jMessages);
     const healQueue = [];
-    messages = jsonlReplayMessages.map((j) => {
-      const match = neo4jByKey.get(`${j.role}${j.content}`);
+    messages = jsonlReplayMessages.map((j, idx) => {
+      const match = diff.present.get(idx);
       if (match) {
         const mergedComponents = j.components.map((c2, i) => {
           const neoComp = match.components?.[i];
@@ -12821,12 +12834,13 @@ app38.post("/__remote-auth/login", async (c) => {
   const rawRedirect = params.get("redirect")?.trim() || "/";
   const redirect = rawRedirect.startsWith("/") && !rawRedirect.startsWith("//") ? rawRedirect : "/";
   if (!password) {
+    console.error(`[remote-auth] login failed ip=${clientIp} why=empty-input hashBytes=0`);
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), error: "Password is required", redirect }), 200);
   }
-  const valid = await verifyRemotePassword(password);
-  if (!valid) {
+  const outcome = await verifyRemotePassword(password);
+  if (!outcome.ok) {
     recordFailedAttempt(client);
-    console.error(`[remote-auth] login failed ip=${clientIp}`);
+    console.error(`[remote-auth] login failed ip=${clientIp} why=${outcome.why} hashBytes=${outcome.hashBytes}`);
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), error: "Invalid credentials", redirect }), 200);
   }
   clearRateLimit(client);
@@ -12843,6 +12857,9 @@ app38.post("/__remote-auth/login", async (c) => {
   });
 });
 app38.get("/__remote-auth/logout", (c) => {
+  const client = clientFrom(c);
+  const clientIp = client.ip || "unknown";
+  console.error(`[remote-auth] logout ip=${clientIp}`);
   return new Response(null, {
     status: 302,
     headers: {
@@ -12871,12 +12888,13 @@ app38.post("/__remote-auth/change-password", async (c) => {
   const rawRedirect = params.get("redirect")?.trim() || "/";
   const redirect = rawRedirect.startsWith("/") && !rawRedirect.startsWith("//") ? rawRedirect : "/";
   if (!currentPassword || !newPassword || !confirmPassword) {
+    console.error(`[remote-auth] change-password failed ip=${clientIp} why=empty-input hashBytes=0`);
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "change", changeError: "All fields are required", redirect }), 200);
   }
-  const valid = await verifyRemotePassword(currentPassword);
-  if (!valid) {
+  const outcome = await verifyRemotePassword(currentPassword);
+  if (!outcome.ok) {
     recordFailedAttempt(client);
-    console.error(`[remote-auth] change-password failed (wrong current) ip=${clientIp}`);
+    console.error(`[remote-auth] change-password failed ip=${clientIp} why=${outcome.why} hashBytes=${outcome.hashBytes}`);
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "change", changeError: "Current password is incorrect", redirect }), 200);
   }
   if (newPassword !== confirmPassword) {
@@ -12920,6 +12938,8 @@ app38.post("/__remote-auth/set-initial-password", async (c) => {
   const password = params.get("password") ?? "";
   const confirmPassword = params.get("confirm_password") ?? "";
   if (!password || !confirmPassword) {
+    const clientIp = c.var.clientIp || "unknown";
+    console.error(`[remote-auth] set-initial-password failed ip=${clientIp} why=empty-input hashBytes=0`);
     return c.html(renderLoginPage({ ...resolveRemoteAuthOpts(), mode: "setup", setupError: "Both fields are required" }), 200);
   }
   if (password !== confirmPassword) {

package/payload/server/public/assets/data-Da6iYRW1.js

@@ -1 +0,0 @@
-import{i as e,t}from"./jsx-runtime-nxP_2eNo.js";import{t as n}from"./page-OVrxtgOZ.js";import"./graph-labels-ChinGFwI.js";var r=e(),i=t();(0,r.createRoot)(document.getElementById(`root`)).render((0,i.jsx)(n,{}));

package/payload/server/public/assets/graph-BHq-JYwV.js

@@ -1 +0,0 @@
-import{i as e,t}from"./jsx-runtime-nxP_2eNo.js";import{n}from"./page-DqPf65sS.js";import"./graph-labels-ChinGFwI.js";import"./Checkbox-B9hff9s8.js";var r=e(),i=t();(0,r.createRoot)(document.getElementById(`root`)).render((0,i.jsx)(n,{}));