@saadnvd1/agent-os 0.3.560 → 0.3.561

package/components/Shares/SharedLinksPanel.tsx

@@ -0,0 +1,147 @@
+"use client";
+
+import { toast } from "sonner";
+import { Copy, Link2 } from "lucide-react";
+import { Button } from "@/components/ui/button";
+import { writeClipboard } from "@/hooks/useCopyToClipboard";
+import {
+  useRevokeShare,
+  useSharesQuery,
+  type SharedLinkRow,
+} from "@/data/shares";
+import { cn } from "@/lib/utils";
+
+const when = (iso: string) =>
+  new Date(iso).toLocaleDateString(undefined, {
+    month: "short",
+    day: "numeric",
+    year: "numeric",
+  });
+
+function Row({ share }: { share: SharedLinkRow }) {
+  const revoke = useRevokeShare();
+  const live = share.status === "active";
+
+  const copy = async () => {
+    try {
+      await writeClipboard(share.url);
+      toast.success("Link copied");
+    } catch {
+      toast.error("Could not copy to clipboard");
+    }
+  };
+  const onRevoke = () => {
+    if (
+      !window.confirm(
+        "Revoke this link? The page is deleted from Connect and the link stops working."
+      )
+    )
+      return;
+    revoke.mutate(share.id, {
+      onError: (err) => toast.error((err as Error).message),
+    });
+  };
+
+  const title =
+    share.kind === "chat" && share.sessionId ? (
+      <a
+        href={`/?session=${encodeURIComponent(share.sessionId)}`}
+        className="hover:underline"
+      >
+        {share.title}
+      </a>
+    ) : (
+      share.title
+    );
+
+  return (
+    <li className="bg-muted/40 flex flex-col gap-2 rounded-lg px-3 py-2.5 sm:flex-row sm:items-center">
+      <div className="min-w-0 flex-1">
+        <div className="truncate text-sm font-medium">{title}</div>
+        <div className="text-muted-foreground flex flex-wrap gap-x-3 text-xs">
+          <span>{share.kind === "chat" ? "Chat" : "Page"}</span>
+          <span>Created {when(share.createdAt)}</span>
+          <span>
+            {share.status === "revoked"
+              ? "Revoked"
+              : share.status === "expired"
+                ? "Expired"
+                : share.expiresAt
+                  ? `Expires ${when(share.expiresAt)}`
+                  : "Never expires"}
+          </span>
+          <span>
+            {share.views === null
+              ? "Views unavailable"
+              : `${share.views} ${share.views === 1 ? "view" : "views"}`}
+          </span>
+        </div>
+      </div>
+      <div className="flex shrink-0 gap-2">
+        <Button
+          variant="outline"
+          className={cn("min-h-11 sm:min-h-8", !live && "invisible")}
+          onClick={copy}
+          disabled={!live}
+        >
+          <Copy className="h-4 w-4" />
+          Copy link
+        </Button>
+        <Button
+          variant="outline"
+          className={cn(
+            "text-destructive min-h-11 sm:min-h-8",
+            !live && "invisible"
+          )}
+          onClick={onRevoke}
+          disabled={!live || revoke.isPending}
+        >
+          Revoke
+        </Button>
+      </div>
+    </li>
+  );
+}
+
+// Every snapshot link made from this machine, with views from Connect.
+export function SharedLinksPanel() {
+  const { data, isLoading, error } = useSharesQuery();
+  return (
+    <div className="space-y-3">
+      <p className="text-muted-foreground text-sm">
+        Read-only snapshots you shared from a chat or a page. Revoking one
+        deletes it from Connect straight away.
+      </p>
+      {data?.connect === "unavailable" && (
+        <p className="text-muted-foreground bg-muted/40 rounded-lg px-3 py-2 text-xs">
+          Can&apos;t reach Connect, so views are hidden and revoking is
+          unavailable until it is back.
+        </p>
+      )}
+      {data?.connect === "unlinked" && data.shares.length > 0 && (
+        <p className="text-muted-foreground bg-muted/40 rounded-lg px-3 py-2 text-xs">
+          This machine isn&apos;t linked to Connect, so views are hidden and
+          revoking is unavailable.
+        </p>
+      )}
+      {error && (
+        <p className="text-destructive text-sm">{(error as Error).message}</p>
+      )}
+      {isLoading ? (
+        <p className="text-muted-foreground text-sm">Loading…</p>
+      ) : data?.shares.length ? (
+        <ul className="space-y-2">
+          {data.shares.map((s) => (
+            <Row key={s.id} share={s} />
+          ))}
+        </ul>
+      ) : (
+        <div className="text-muted-foreground flex items-center gap-2 rounded-lg border border-dashed px-3 py-6 text-sm">
+          <Link2 className="h-4 w-4 shrink-0" />
+          Nothing shared yet. Use Share… in a chat&apos;s menu, or the share
+          button on a page.
+        </div>
+      )}
+    </div>
+  );
+}

package/data/shares/index.ts

@@ -0,0 +1,2 @@
+export * from "./keys";
+export * from "./queries";

package/data/shares/keys.ts

@@ -0,0 +1,4 @@
+export const shareKeys = {
+  all: ["shares"] as const,
+  list: () => [...shareKeys.all, "list"] as const,
+};

package/data/shares/queries.ts

@@ -0,0 +1,111 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import { shareKeys } from "./keys";
+
+async function json<T>(res: Response): Promise<T> {
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error || "Request failed");
+  return data;
+}
+
+export type ShareExpiry = "1d" | "7d" | "30d" | "never";
+
+export interface ShareTarget {
+  kind: "chat" | "artifact";
+  sessionId?: string;
+  artifactId?: string;
+}
+
+export interface PreviewRequest extends ShareTarget {
+  includeTools: boolean;
+  /** Messages left out of the share. */
+  dropIds?: string[];
+}
+
+export interface PreviewItem {
+  id: string;
+  type: string;
+  tools: boolean;
+  excerpt: string;
+}
+
+export interface SharePreview {
+  html: string;
+  title: string;
+  bytes: number;
+  hash: string;
+  sharedAt: string;
+  items: PreviewItem[];
+  hits: Record<"secret" | "path" | "ip" | "host" | "email", number>;
+  tooBig: boolean;
+  connectLinked: boolean;
+}
+
+const post = (url: string, body: unknown) =>
+  fetch(url, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify(body),
+  });
+
+/** What would be uploaded, redacted. Local only. */
+export function useSharePreview() {
+  return useMutation({
+    mutationFn: async (req: PreviewRequest) =>
+      json<SharePreview>(await post("/api/shares/preview", req)),
+  });
+}
+
+export function useCreateShare() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: async (
+      req: PreviewRequest & {
+        sharedAt: string;
+        hash: string;
+        expiresIn: ShareExpiry;
+      }
+    ) =>
+      json<{ id: string; url: string; expiresAt: string | null }>(
+        await post("/api/shares", req)
+      ),
+    onSuccess: () => queryClient.invalidateQueries({ queryKey: shareKeys.all }),
+  });
+}
+
+export interface SharedLinkRow {
+  id: string;
+  url: string;
+  kind: "chat" | "artifact";
+  title: string;
+  sessionId: string | null;
+  artifactId: string | null;
+  createdAt: string;
+  expiresAt: string | null;
+  status: "active" | "expired" | "revoked";
+  views: number | null;
+  lastViewedAt: string | null;
+}
+
+export interface SharesResponse {
+  connect: "ok" | "unavailable" | "unlinked";
+  shares: SharedLinkRow[];
+}
+
+export function useSharesQuery(enabled = true) {
+  return useQuery({
+    queryKey: shareKeys.list(),
+    queryFn: async () => json<SharesResponse>(await fetch("/api/shares")),
+    enabled,
+  });
+}
+
+export function useRevokeShare() {
+  const queryClient = useQueryClient();
+  return useMutation({
+    mutationFn: async (id: string) =>
+      json<{ ok: true }>(
+        await fetch(`/api/shares/${id}`, { method: "DELETE" })
+      ),
+    onSuccess: () => queryClient.invalidateQueries({ queryKey: shareKeys.all }),
+  });
+}

package/lib/chat/drivers/claude.ts

@@ -19,7 +19,11 @@ import { toChatContext, usageTotals } from "../context";
 import { cacheTtlMs } from "../stale";
 import { ClaudeMapper, toCommand, type ClaudeMessage } from "./claude-mapper";
 import { SuggestionTrace } from "./suggestion-trace";
-import { redact } from "../../orchestrator/untrusted";
+import {
+  redact,
+  SECRET_PARAM,
+  URL_USERINFO,
+} from "../../orchestrator/untrusted";
 import { NO_ATTRIBUTION } from "../../agents/attribution";
 import { callFromAssistant } from "../../usage/calls";
 
@@ -52,9 +56,6 @@ const firstLine = (text?: string) => {
 
 // A server's error text can quote its URL, and with it a key: shown and
 // stored redacted, on one line, and short.
-const URL_USERINFO = /\b([a-z][a-z0-9+.-]*:\/\/)[^@\s/]+@/gi;
-const SECRET_PARAM =
-  /([?&][\w.-]*(?:key|token|secret|password|auth|sig|code)[\w.-]*=)[^&\s#]+/gi;
 function cleanError(text?: string): string | undefined {
   if (!text) return undefined;
   const line = redact(

package/lib/connect/control-api.ts

@@ -264,3 +264,87 @@ export async function pushRelay(
     throw new Error("the Connect service sent no push results");
   return r.results;
 }
+
+export type ShareStatus = "active" | "expired" | "revoked";
+
+/** A snapshot link as Connect reports it. The link itself is never in a list. */
+export interface RemoteShare {
+  id: string;
+  kind: string;
+  title: string;
+  status: ShareStatus;
+  byte_size: number;
+  view_count: number;
+  last_viewed_at: string | null;
+  created_at: string;
+  expires_at: string | null;
+}
+
+export type ShareExpiry = "1d" | "7d" | "30d" | "never";
+
+const shareFrom = (r: unknown): RemoteShare => {
+  const s = (r ?? {}) as Record<string, unknown>;
+  if (typeof s.id !== "string" || typeof s.status !== "string")
+    throw new Error("the Connect service sent an unusable share");
+  return s as unknown as RemoteShare;
+};
+
+/** Uploads a rendered snapshot; the answer carries the public link, once. */
+export async function uploadShare(
+  config: ConnectConfig,
+  privateKey: string,
+  share: {
+    kind: "chat" | "artifact";
+    title: string;
+    html: string;
+    expiresIn: ShareExpiry;
+  }
+): Promise<RemoteShare & { url: string }> {
+  const res = await signed(config, privateKey)(
+    "POST",
+    `/api/v1/machines/${config.machineId}/shares`,
+    {
+      kind: share.kind,
+      title: share.title,
+      html: share.html,
+      expires_in: share.expiresIn,
+    }
+  );
+  const r = (await res.json().catch(() => null)) as Record<
+    string,
+    unknown
+  > | null;
+  const url = r?.url;
+  if (typeof url !== "string" || !/^https?:\/\//.test(url))
+    throw new Error("the Connect service sent no link");
+  return { ...shareFrom(r), url };
+}
+
+export async function listShares(
+  config: ConnectConfig,
+  privateKey: string
+): Promise<RemoteShare[]> {
+  const res = await signed(config, privateKey)(
+    "GET",
+    `/api/v1/machines/${config.machineId}/shares`
+  );
+  const r = (await res.json().catch(() => null)) as {
+    shares?: unknown[];
+  } | null;
+  if (!Array.isArray(r?.shares))
+    throw new Error("the Connect service sent no share list");
+  return r.shares.map(shareFrom);
+}
+
+export async function revokeShare(
+  config: ConnectConfig,
+  privateKey: string,
+  id: string
+): Promise<RemoteShare> {
+  if (!/^[a-z0-9]{12}$/.test(id)) throw new Error("not a share id");
+  const res = await signed(config, privateKey)(
+    "DELETE",
+    `/api/v1/machines/${config.machineId}/shares/${id}`
+  );
+  return shareFrom(await res.json().catch(() => null));
+}

package/lib/db/migrations.ts

@@ -2114,6 +2114,29 @@ const migrations: Migration[] = [
       `);
     },
   },
+  {
+    id: 88,
+    name: "shared_links",
+    up: (db) => {
+      // Snapshot links made through Connect. Connect keeps only a digest of
+      // the token, so this is the one place the link can be copied again.
+      db.exec(`
+        CREATE TABLE IF NOT EXISTS shared_links (
+          id TEXT PRIMARY KEY,
+          url TEXT NOT NULL,
+          kind TEXT NOT NULL,
+          title TEXT NOT NULL,
+          session_id TEXT,
+          artifact_id TEXT,
+          expires_at TEXT,
+          created_at TEXT NOT NULL,
+          revoked_at TEXT
+        );
+        CREATE INDEX IF NOT EXISTS idx_shared_links_created
+          ON shared_links(created_at DESC);
+      `);
+    },
+  },
 ];
 
 // `upTo`: stop after this id (tests that start from an older database).

package/lib/orchestrator/untrusted.ts

@@ -20,8 +20,8 @@ const TOKEN_PATTERNS: RegExp[] = [...SECRET_TOKENS, /\b[a-fA-F0-9]{40,}\b/g];
 
 // A long base64-ish run that reads as random rather than as a path or a
 // slug: mixed case, digits, few separators.
-const BASE64_RUN = /[A-Za-z0-9+/_-]{40,}={0,2}/g;
-const looksRandom = (s: string) =>
+export const BASE64_RUN = /[A-Za-z0-9+/_-]{40,}={0,2}/g;
+export const looksRandom = (s: string) =>
   /[A-Z]/.test(s) &&
   /[a-z]/.test(s) &&
   /[0-9]/.test(s) &&
@@ -31,6 +31,16 @@ const looksRandom = (s: string) =>
 export const SECRET_ASSIGNMENT =
   /^(\s*(?:export\s+)?[A-Z][A-Z0-9_]*(?:KEY|TOKEN|SECRET|PASSWORD|PASS|PWD|CREDENTIALS?|AUTH)[A-Z0-9_]*\s*[=:]\s*).+$/gm;
 
+// A URL's userinfo (https://key@host, postgres://user:pw@host) and a query
+// parameter that carries a credential (?token=, &api_key=).
+export const URL_USERINFO = /\b([a-z][a-z0-9+.-]*:\/\/)[^@\s/]+@/gi;
+export const SECRET_PARAM =
+  /([?&][\w.-]*(?:key|token|secret|password|auth|sig|code)[\w.-]*=)[^&\s#]+/gi;
+
+// A private key block's opening line.
+export const PRIVATE_KEY_BLOCK =
+  /-----BEGIN (?:[A-Z]+ )?PRIVATE KEY-----[\s\S]*?(?:-----END (?:[A-Z]+ )?PRIVATE KEY-----|$)/g;
+
 // The password in a URL: postgres://user:secret@host.
 const URL_PASSWORD = /\b([a-z][a-z0-9+.-]*:\/\/[^:\s/@]+:)[^@\s]+@/gi;
 

package/lib/security/demo.ts

@@ -65,6 +65,7 @@ export const STATIC_SIBLINGS = [
   "me",
   "items",
   "network",
+  "preview",
   "queue",
   "status",
 ];

package/lib/session-audit/normalize.ts

@@ -9,7 +9,7 @@ import { redact } from "../orchestrator/untrusted";
 /** Tokens a text costs, by the usual 4 characters a token. An estimate. */
 export const estTokens = (chars: number) => Math.ceil(chars / 4);
 
-const HOME = /\/(?:Users|home)\/[^/\s"']+/g;
+export const HOME = /\/(?:Users|home)\/[^/\s"']+/g;
 const WORKTREE = /~\/\.agent-os\/worktrees\/[^/\s"']+/g;
 const ORCH_DIR = /~\/\.agent-os\/orchestrators\/[^/\s"']+/g;
 const TMP = /\/(?:private\/)?(?:var\/folders|tmp)\/[^\s"']*/g;

package/lib/settings-url.ts

@@ -10,6 +10,7 @@ export const SETTINGS_SECTIONS = [
   "workspaces",
   "models",
   "devices",
+  "shares",
   "notifications",
   "recipes",
   "schedules",

package/lib/share/connect.ts

@@ -0,0 +1,86 @@
+/** Connect's share API, answered in terms the dialog can act on. */
+
+import { loadConnect } from "@/lib/connect/config";
+import {
+  ApiError,
+  clean,
+  listShares,
+  revokeShare,
+  uploadShare,
+  type RemoteShare,
+  type ShareExpiry,
+} from "@/lib/connect/control-api";
+
+export const NOT_LINKED = "Link this machine to Connect to share a link.";
+
+export class ShareError extends Error {
+  constructor(
+    message: string,
+    readonly status: number
+  ) {
+    super(message);
+  }
+}
+
+export const linked = () => loadConnect() !== null;
+
+function files() {
+  const f = loadConnect();
+  if (!f) throw new ShareError(NOT_LINKED, 409);
+  return f;
+}
+
+/** A failed call as a message that says what to do next. */
+function explain(err: unknown): never {
+  if (err instanceof ShareError) throw err;
+  if (err instanceof ApiError) {
+    if (err.status === 413)
+      throw new ShareError(
+        `Connect refused it as too big or over your quota: ${clean(err.message, 120)}`,
+        413
+      );
+    if (err.status === 429)
+      throw new ShareError(
+        "Too many shares just now. Try again in a few minutes.",
+        429
+      );
+    if (err.status === 401 || err.status === 403)
+      throw new ShareError(
+        "Connect doesn't accept this machine. Link it again in Settings → Devices & access.",
+        502
+      );
+    if (err.status === 404) throw new ShareError("Not found on Connect.", 404);
+    throw new ShareError(clean(err.message, 120), 502);
+  }
+  throw new ShareError("Couldn't reach Connect. Try again in a moment.", 502);
+}
+
+export async function createRemote(share: {
+  kind: "chat" | "artifact";
+  title: string;
+  html: string;
+  expiresIn: ShareExpiry;
+}) {
+  const { config, machineKey } = files();
+  try {
+    return await uploadShare(config, machineKey, share);
+  } catch (err) {
+    explain(err);
+  }
+}
+
+export async function listRemote(): Promise<RemoteShare[]> {
+  const { config, machineKey } = files();
+  return listShares(config, machineKey);
+}
+
+/** Revokes on Connect; a share Connect no longer has counts as revoked. */
+export async function revokeRemote(id: string): Promise<void> {
+  const { config, machineKey } = files();
+  try {
+    await revokeShare(config, machineKey, id);
+  } catch (err) {
+    if (err instanceof ApiError && err.status === 404) return;
+    explain(err);
+  }
+}

package/lib/share/context.ts

@@ -0,0 +1,50 @@
+import fs from "fs";
+import os from "os";
+import path from "path";
+import type { ShareContext } from "./redact";
+
+// Environment variables that hold a credential, by name.
+const SECRET_NAME = /(KEY|TOKEN|SECRET|PASSWORD|PASS|PWD|CREDENTIALS?|AUTH)/;
+const NOT_SECRET_NAME = /(SOCK|_FILE|_PATH|_DIR)$/;
+const USERINFO_URL = /^[a-z][a-z0-9+.-]*:\/\/[^@\s/]+@/i;
+
+export function envSecrets(env: NodeJS.ProcessEnv = process.env): string[] {
+  const out = new Set<string>();
+  for (const [name, value] of Object.entries(env)) {
+    if (!value || value.length < 8) continue;
+    const named = SECRET_NAME.test(name) && !NOT_SECRET_NAME.test(name);
+    if (named || (name.endsWith("_URL") && USERINFO_URL.test(value)))
+      out.add(value);
+  }
+  return [...out];
+}
+
+/** Host and HostName entries of an ssh config, wildcards left out. */
+export function sshHosts(config: string): string[] {
+  const out = new Set<string>();
+  for (const line of config.split("\n")) {
+    const m = line.match(/^\s*(?:Host|HostName)\s+(.+?)\s*$/i);
+    if (!m) continue;
+    for (const h of m[1].split(/\s+/))
+      if (!/[*?!]/.test(h) && !/^\d+\.\d+\.\d+\.\d+$/.test(h)) out.add(h);
+  }
+  return [...out];
+}
+
+/** This machine's details, read once per request. Every read fails soft. */
+export function shareContext(): ShareContext {
+  const home = os.homedir();
+  let user = "";
+  try {
+    user = os.userInfo().username;
+  } catch {
+    user = process.env.USER ?? "";
+  }
+  const hostname = os.hostname();
+  let ssh = "";
+  try {
+    ssh = fs.readFileSync(path.join(home, ".ssh", "config"), "utf8");
+  } catch {}
+  const hosts = [hostname, hostname.split(".")[0], ...sshHosts(ssh)];
+  return { home, user, secrets: envSecrets(), hosts };
+}