@saadnvd1/agent-os 0.3.775 → 0.3.777

package/components/Live/LivePanel.tsx

@@ -0,0 +1,81 @@
+"use client";
+
+import { toast } from "sonner";
+import { useEndLive, useLiveAction, useLiveShare } from "@/data/live";
+import { liveUiActions } from "@/stores/liveUi";
+import { GuestPromptCard } from "./GuestPromptCard";
+import { LiveChip } from "./LiveChip";
+import { LobbyCard } from "./LobbyCard";
+
+// Above the composer while a session has a live link: the Live chip, who is
+// waiting to come in, and the suggestions to send, edit or dismiss.
+export function LivePanel({
+  sessionId,
+  title,
+  onEdit,
+}: {
+  sessionId: string;
+  title: string;
+  onEdit: (text: string) => void;
+}) {
+  const query = useLiveShare(sessionId);
+  const share = query.data?.share;
+  const act = useLiveAction(share?.id ?? "");
+  const end = useEndLive(share?.id ?? "");
+  if (!share) return null;
+  const busy = act.isPending || end.isPending;
+  const fail = (e: Error) => toast.error(e.message);
+  const lobby = share.guests.filter((g) => g.status === "pending");
+  return (
+    <div className="mx-auto flex w-full max-w-3xl flex-col gap-2 px-3 pb-2">
+      <LiveChip
+        share={share}
+        busy={busy}
+        onKick={(guestId) =>
+          act.mutate({ action: "kick", guestId }, { onError: fail })
+        }
+        onEnd={() => end.mutate(undefined, { onError: fail })}
+        onInvite={() => liveUiActions.open(sessionId, title)}
+      />
+      {lobby.map((g) => (
+        <LobbyCard
+          key={g.id}
+          guest={g}
+          busy={busy}
+          onAdmit={() =>
+            act.mutate({ action: "admit", guestId: g.id }, { onError: fail })
+          }
+          onDeny={() =>
+            act.mutate({ action: "deny", guestId: g.id }, { onError: fail })
+          }
+        />
+      ))}
+      {share.suggestions.map((s) => (
+        <GuestPromptCard
+          key={s.id}
+          suggestion={s}
+          busy={busy}
+          onSend={() =>
+            act.mutate(
+              { action: "send", suggestionId: s.id },
+              { onError: fail }
+            )
+          }
+          onEdit={() => {
+            onEdit(s.text);
+            act.mutate(
+              { action: "dismiss", suggestionId: s.id },
+              { onError: fail }
+            );
+          }}
+          onDismiss={() =>
+            act.mutate(
+              { action: "dismiss", suggestionId: s.id },
+              { onError: fail }
+            )
+          }
+        />
+      ))}
+    </div>
+  );
+}

package/components/Live/LobbyCard.tsx

@@ -0,0 +1,64 @@
+"use client";
+
+import { Check, UserRound, X } from "lucide-react";
+import { Button } from "@/components/ui/button";
+import type { LiveView } from "@/data/live";
+
+type Guest = LiveView["guests"][number];
+
+// Someone opened the link and is waiting. The name is whatever they typed.
+export function LobbyCard({
+  guest,
+  busy,
+  onAdmit,
+  onDeny,
+}: {
+  guest: Guest;
+  busy: boolean;
+  onAdmit: () => void;
+  onDeny: () => void;
+}) {
+  return (
+    <div
+      role="group"
+      aria-label={`${guest.name} wants to join`}
+      className="bg-muted/60 flex flex-col gap-2 rounded-xl p-3 shadow-sm sm:flex-row sm:items-center"
+    >
+      <div className="flex min-w-0 flex-1 items-start gap-2">
+        <UserRound
+          className="text-muted-foreground mt-0.5 h-4 w-4 shrink-0"
+          aria-hidden
+        />
+        <div className="min-w-0 text-sm">
+          <p className="[overflow-wrap:anywhere]">
+            <span className="font-medium">{guest.name}</span> wants to join
+          </p>
+          <p className="text-muted-foreground text-xs">
+            {guest.duplicateName
+              ? "Another guest here has the same name. Names aren't verified."
+              : "Names aren't verified."}
+          </p>
+        </div>
+      </div>
+      <div className="flex gap-2">
+        <Button
+          className="min-h-11 flex-1 sm:flex-none"
+          disabled={busy}
+          onClick={onAdmit}
+        >
+          <Check className="h-4 w-4" />
+          Admit
+        </Button>
+        <Button
+          variant="outline"
+          className="min-h-11 flex-1 sm:flex-none"
+          disabled={busy}
+          onClick={onDeny}
+        >
+          <X className="h-4 w-4" />
+          Deny
+        </Button>
+      </div>
+    </div>
+  );
+}

package/components/Pane/MobileTabBar.tsx

@@ -24,6 +24,7 @@ import {
   Search,
   Star,
   Share2,
+  Users,
   Download,
   TextSearch,
   Eye,
@@ -36,6 +37,7 @@ import { HostBadge } from "@/components/Hosts/HostBadge";
 import { RolePill } from "@/components/Sessions/RolePill";
 import { bookmarksUiActions } from "@/stores/bookmarksUi";
 import { shareUiActions } from "@/stores/shareUi";
+import { liveUiActions } from "@/stores/liveUi";
 import { exportUiActions } from "@/stores/exportUi";
 import { analystUiActions } from "@/stores/analystUi";
 import { useCanAddAnalyst } from "@/components/Analyst/pair";
@@ -228,6 +230,12 @@ export function MobileTabBar({
                   <Share2 className="h-4 w-4" />
                   Share…
                 </DropdownMenuItem>
+                <DropdownMenuItem
+                  onSelect={() => liveUiActions.open(session.id, session.name)}
+                >
+                  <Users className="h-4 w-4" />
+                  Invite to watch live…
+                </DropdownMenuItem>
                 <DropdownMenuItem
                   onSelect={() =>
                     exportUiActions.open(session.id, session.name)

package/components/Pane/PaneMenu.tsx

@@ -8,6 +8,7 @@ import {
   Link,
   MoreHorizontal,
   Share2,
+  Users,
   Download,
   SplitSquareHorizontal,
   SplitSquareVertical,
@@ -29,6 +30,7 @@ import {
 import { copySessionLink, writeClipboard } from "@/hooks/useCopyToClipboard";
 import type { Session } from "@/lib/db";
 import { shareUiActions } from "@/stores/shareUi";
+import { liveUiActions } from "@/stores/liveUi";
 import { exportUiActions } from "@/stores/exportUi";
 import { analystUiActions } from "@/stores/analystUi";
 import { useCanAddAnalyst } from "@/components/Analyst/pair";
@@ -125,6 +127,14 @@ export function PaneMenu({
                 Share…
               </DropdownMenuItem>
             )}
+            {session.view === "chat" && (
+              <DropdownMenuItem
+                onSelect={() => liveUiActions.open(session.id, session.name)}
+              >
+                <Users className="h-4 w-4" />
+                Invite to watch live…
+              </DropdownMenuItem>
+            )}
             {session.view === "chat" && (
               <DropdownMenuItem
                 onSelect={() => exportUiActions.open(session.id, session.name)}

package/components/SessionList/SessionRowMenu.tsx

@@ -15,6 +15,7 @@ import {
   KanbanSquare,
   Link,
   Share2,
+  Users,
   Download,
   Loader2,
   Pencil,
@@ -57,6 +58,7 @@ import { copySessionLink } from "@/hooks/useCopyToClipboard";
 import { useLinkedHostNames } from "@/data/hosts";
 import { remoteBlocks, remoteNote } from "@/lib/hosts/remote-menu";
 import { movableSession } from "@/lib/tasks/move-targets";
+import { liveUiActions } from "@/stores/liveUi";
 import { useMoveTargets } from "@/data/tasks/move";
 import {
   rowMenu,
@@ -200,6 +202,10 @@ export function SessionRowMenu({
             title: session.name,
           })
         );
+      case "invite-live":
+        return item("Invite to watch live…", Users, () =>
+          liveUiActions.open(session.id, session.name)
+        );
       case "export":
         return item("Export for AI…", Download, () =>
           exportUiActions.open(session.id, session.name)

package/components/Shares/SharedLinksPanel.tsx

@@ -9,6 +9,7 @@ import {
   useSharesQuery,
   type SharedLinkRow,
 } from "@/data/shares";
+import { useAllLiveShares, useEndLive, type LiveView } from "@/data/live";
 import { cn } from "@/lib/utils";
 import { SessionAnchor } from "@/components/Chat/SessionAnchor";
 
@@ -108,11 +109,61 @@ function Row({ share }: { share: SharedLinkRow }) {
   );
 }
 
+function LiveRow({ share }: { share: LiveView }) {
+  const end = useEndLive(share.id);
+  const watching = share.guests.filter((g) => g.status === "admitted").length;
+  return (
+    <li className="bg-muted/40 flex flex-col gap-2 rounded-lg px-3 py-2.5 sm:flex-row sm:items-center">
+      <div className="min-w-0 flex-1">
+        <div className="truncate text-sm font-medium">
+          <SessionAnchor
+            sessionId={share.sessionId}
+            className="hover:underline"
+          >
+            {share.title}
+          </SessionAnchor>
+        </div>
+        <div className="text-muted-foreground flex flex-wrap gap-x-3 text-xs">
+          <span>Live</span>
+          <span>{watching} joined</span>
+          <span>
+            {share.endsWithSession
+              ? "Until the session ends"
+              : share.expiresAt
+                ? `Ends ${new Date(share.expiresAt).toLocaleTimeString([], { hour: "numeric", minute: "2-digit" })}`
+                : ""}
+          </span>
+        </div>
+      </div>
+      <Button
+        variant="outline"
+        className="text-destructive min-h-11 shrink-0 sm:min-h-8"
+        disabled={end.isPending}
+        onClick={() =>
+          end.mutate(undefined, {
+            onError: (err) => toast.error((err as Error).message),
+          })
+        }
+      >
+        End access
+      </Button>
+    </li>
+  );
+}
+
 // Every snapshot link made from this machine, with views from Connect.
 export function SharedLinksPanel() {
   const { data, isLoading, error } = useSharesQuery();
+  const liveNow = useAllLiveShares().data?.shares ?? [];
   return (
     <div className="space-y-3">
+      {liveNow.length > 0 && (
+        <ul className="space-y-2">
+          {liveNow.map((s) => (
+            <LiveRow key={s.id} share={s} />
+          ))}
+        </ul>
+      )}
       <p className="text-muted-foreground text-sm">
         Read-only snapshots you shared from a chat or a page. Revoking one
         deletes it from Connect straight away.

package/data/live/index.ts

@@ -0,0 +1,2 @@
+export * from "./keys";
+export * from "./queries";

package/data/live/keys.ts

@@ -0,0 +1,4 @@
+export const liveKeys = {
+  all: ["live-shares"] as const,
+  session: (sessionId: string) => [...liveKeys.all, sessionId] as const,
+};

package/data/live/queries.ts

@@ -0,0 +1,81 @@
+import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
+import type { LiveExpiry, LiveResponse, LiveView } from "@/lib/live/types";
+import { liveKeys } from "./keys";
+
+export type { LiveExpiry, LiveResponse, LiveView } from "@/lib/live/types";
+
+async function json<T>(res: Response): Promise<T> {
+  const data = await res.json().catch(() => ({}));
+  if (!res.ok) throw new Error(data.error || "Request failed");
+  return data;
+}
+
+const send = (url: string, method: string, body?: unknown) =>
+  fetch(url, {
+    method,
+    headers: { "Content-Type": "application/json" },
+    body: body === undefined ? undefined : JSON.stringify(body),
+  });
+
+/**
+ * The session's live link, who is waiting and who is watching. Asked every
+ * couple of seconds while a link is live, and once a minute when not, so a
+ * request or a suggestion shows up on the host's screen quickly.
+ */
+export function useLiveShare(sessionId: string | undefined, enabled = true) {
+  return useQuery({
+    queryKey: liveKeys.session(sessionId ?? ""),
+    enabled: enabled && !!sessionId,
+    queryFn: async (): Promise<LiveResponse> =>
+      json(await fetch(`/api/live-shares?sessionId=${sessionId}`)),
+    select: (r) => ({
+      linked: r.linked,
+      share: r.shares[0] as LiveView | undefined,
+    }),
+    refetchInterval: (q) => (q.state.data?.shares.length ? 2000 : 60_000),
+  });
+}
+
+export function useCreateLive() {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: async (req: { sessionId: string; expiresIn: LiveExpiry }) =>
+      json<LiveView>(await send("/api/live-shares", "POST", req)),
+    onSuccess: () => qc.invalidateQueries({ queryKey: liveKeys.all }),
+  });
+}
+
+export type LiveAction =
+  | { action: "admit" | "deny" | "kick"; guestId: string }
+  | { action: "send"; suggestionId: string; text?: string }
+  | { action: "dismiss"; suggestionId: string };
+
+export function useLiveAction(shareId: string) {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: async (req: LiveAction) =>
+      json<{ ok: true }>(
+        await send(`/api/live-shares/${shareId}`, "POST", req)
+      ),
+    onSettled: () => qc.invalidateQueries({ queryKey: liveKeys.all }),
+  });
+}
+
+export function useEndLive(shareId: string) {
+  const qc = useQueryClient();
+  return useMutation({
+    mutationFn: async () =>
+      json<{ ok: true }>(await send(`/api/live-shares/${shareId}`, "DELETE")),
+    onSettled: () => qc.invalidateQueries({ queryKey: liveKeys.all }),
+  });
+}
+
+/** Every live link this machine holds, for the Shared links page. */
+export function useAllLiveShares() {
+  return useQuery({
+    queryKey: [...liveKeys.all, "all"] as const,
+    queryFn: async (): Promise<LiveResponse> =>
+      json(await fetch("/api/live-shares")),
+    refetchInterval: 5000,
+  });
+}

package/lib/chat/events.ts

@@ -81,7 +81,10 @@ export type ChatOriginKind =
   // The reader's own decision, made outside the composer (a plan carried out).
   | "decision"
   // The reader's phone: a shake report or something shared to AgentOS.
-  | "device";
+  | "device"
+  // A suggestion from a guest on a live link, sent by the reader after
+  // reading it. Its label is the guest's name.
+  | "guest";
 
 export interface ChatOrigin {
   kind: ChatOriginKind;

package/lib/chat/registry.ts

@@ -85,6 +85,8 @@ interface Registry {
   caps: Map<string, Capabilities>;
   // Told of every finished turn (lib/analyst), set by the server.
   turnEndHook?: TurnEndHook;
+  // Read-only taps on every message of every conversation (lib/live).
+  taps?: Set<(sessionId: string, m: ChatServerMessage) => void>;
 }
 
 export type TurnEndHook = (
@@ -96,6 +98,13 @@ export function setTurnEndHook(fn: TurnEndHook): void {
   registry.turnEndHook = fn;
 }
 
+export function addTap(
+  fn: (sessionId: string, m: ChatServerMessage) => void
+): () => void {
+  (registry.taps ??= new Set()).add(fn);
+  return () => registry.taps?.delete(fn);
+}
+
 // Shared across every module instance in the process (custom server and the
 // Next.js route bundles each load their own copy of this file).
 const g = globalThis as unknown as { __agentosChat?: Registry };
@@ -120,6 +129,7 @@ export function emit(sessionId: string, m: ChatServerMessage): void {
     touchActive(sessionId);
   if (m.type === "item" && m.item.kind === "turn_end")
     registry.turnEndHook?.(sessionId, m.item);
+  registry.taps?.forEach((tap) => tap(sessionId, m));
   registry.listeners.get(sessionId)?.forEach((fn) => fn(m));
   // Idle, running, waiting and back, and a finished turn (unread): the
   // sidebar hears at once.

package/lib/connect/control-api.ts

@@ -471,3 +471,47 @@ export async function revokeShare(
   );
   return shareFrom(await res.json().catch(() => null));
 }
+
+export type LiveExpiry = "1h" | "session";
+
+export interface LiveShare {
+  id: string;
+  url: string;
+  title: string;
+  status: ShareStatus;
+  expires_at: string | null;
+  ends_with_session: boolean;
+  max_guests: number;
+}
+
+/** Mints a live link for one session; the answer carries the link, once. */
+export async function createLiveShare(
+  config: ConnectConfig,
+  privateKey: string,
+  share: { title: string; expiresIn: LiveExpiry }
+): Promise<LiveShare> {
+  const res = await signed(config, privateKey)(
+    "POST",
+    `/api/v1/machines/${config.machineId}/live-shares`,
+    { title: share.title, expires_in: share.expiresIn }
+  );
+  const r = (await res.json().catch(() => null)) as Record<
+    string,
+    unknown
+  > | null;
+  if (
+    typeof r?.id !== "string" ||
+    typeof r.url !== "string" ||
+    !/^https:\/\//.test(r.url)
+  )
+    throw new Error("the Connect service sent no link");
+  return {
+    id: r.id,
+    url: r.url,
+    title: typeof r.title === "string" ? r.title : share.title,
+    status: (r.status as ShareStatus) ?? "active",
+    expires_at: typeof r.expires_at === "string" ? r.expires_at : null,
+    ends_with_session: r.ends_with_session === true,
+    max_guests: typeof r.max_guests === "number" ? r.max_guests : 0,
+  };
+}

package/lib/db/migrations/20261029T1400_live_shares.ts

@@ -0,0 +1,42 @@
+import type { Migration } from "../migration-types";
+
+export default {
+  key: "20261029T1400_live_shares",
+  up: (db) => {
+    // One row per live link this machine minted. The id is Connect's share id.
+    db.exec(
+      `CREATE TABLE IF NOT EXISTS live_shares (
+         id TEXT PRIMARY KEY,
+         session_id TEXT NOT NULL,
+         title TEXT NOT NULL,
+         url TEXT NOT NULL,
+         ends_with_session INTEGER NOT NULL DEFAULT 0,
+         max_guests INTEGER NOT NULL DEFAULT 0,
+         created_at TEXT NOT NULL,
+         expires_at TEXT,
+         ended_at TEXT
+       )`
+    );
+    db.exec(
+      `CREATE INDEX IF NOT EXISTS idx_live_shares_session ON live_shares(session_id)`
+    );
+    // What happened on a share, kept on this machine only: who asked to join,
+    // who was let in, and each suggestion with the text actually sent.
+    db.exec(
+      `CREATE TABLE IF NOT EXISTS live_share_log (
+         id INTEGER PRIMARY KEY AUTOINCREMENT,
+         share_id TEXT NOT NULL,
+         at INTEGER NOT NULL,
+         kind TEXT NOT NULL,
+         guest_id TEXT,
+         guest_name TEXT,
+         ref TEXT,
+         text TEXT,
+         sent_text TEXT
+       )`
+    );
+    db.exec(
+      `CREATE INDEX IF NOT EXISTS idx_live_share_log_share ON live_share_log(share_id, id)`
+    );
+  },
+} satisfies Migration;

package/lib/live/clean.ts

@@ -0,0 +1,54 @@
+/**
+ * Text from a guest is cleaned here again, on this machine, whatever Connect
+ * did to it: nothing from the wire is shown on a card or reaches the agent
+ * without passing through. Mirrors Connect's Live::Text.
+ */
+
+const INVISIBLE =
+  /[\p{Cf}\p{Default_Ignorable_Code_Point}\p{Zl}\p{Zp}⠀\u{1D159}\u{E0000}-\u{E0FFF}]/gu;
+const SPACES = /\p{Zs}/gu;
+const CONTROL = /[\u0000-\u001F\u007F-\u009F]/g;
+const CONTROL_KEEPING_NEWLINE = /[\u0000-\u0008\u000B-\u001F\u007F-\u009F]/g;
+const MARK_RUN = /\p{M}{3,}/u;
+const SCRIPTS = [
+  /\p{Script=Latin}/u,
+  /\p{Script=Cyrillic}/u,
+  /\p{Script=Greek}/u,
+];
+
+export const MAX_NAME = 40;
+export const MAX_SUGGESTION = 2000;
+
+const wellFormed = (s: string) => s.isWellFormed();
+
+/** A guest's name: one line, 1-40 characters, or null. */
+export function cleanName(input: unknown): string | null {
+  if (typeof input !== "string" || !wellFormed(input)) return null;
+  if (input.length > MAX_NAME * 8) return null;
+  const s = input
+    .normalize("NFC")
+    .replace(SPACES, " ")
+    .replace(INVISIBLE, "")
+    .replace(CONTROL, " ")
+    .replace(/\s+/g, " ")
+    .trim();
+  if (!s || [...s].length > MAX_NAME || !/[\p{L}\p{N}]/u.test(s)) return null;
+  if (MARK_RUN.test(s) || SCRIPTS.filter((r) => r.test(s)).length > 1)
+    return null;
+  return s;
+}
+
+/** A block of text (a suggestion): newlines and tabs kept, or null. */
+export function cleanBody(input: unknown, max = MAX_SUGGESTION): string | null {
+  if (typeof input !== "string" || !wellFormed(input)) return null;
+  if (input.length > max * 8) return null;
+  const s = input
+    .normalize("NFC")
+    .replace(/\r/g, "")
+    .replace(SPACES, " ")
+    .replace(INVISIBLE, "")
+    .replace(CONTROL_KEEPING_NEWLINE, "")
+    .trim();
+  if (!s || [...s].length > max) return null;
+  return s;
+}