@saadnvd1/agent-os 0.3.779 → 0.3.781

package/app/api/live-shares/[id]/route.ts

@@ -3,20 +3,41 @@ import { z } from "zod";
 import { fail, readJson, refuseDemo, toResponse } from "@/lib/share/route";
 import {
   admit,
+  changeCode,
   changeLevel,
   deny,
   dismissSuggestion,
   endLive,
+  giveWheel,
   kick,
   sendSuggestion,
   startLive,
 } from "@/lib/live/service";
 
 const Action = z.discriminatedUnion("action", [
-  z.object({ action: z.literal("admit"), guestId: z.string().min(1).max(64) }),
+  z.object({
+    action: z.literal("admit"),
+    guestId: z.string().min(1).max(64),
+    drive: z.boolean().optional(),
+  }),
   z.object({ action: z.literal("deny"), guestId: z.string().min(1).max(64) }),
   z.object({ action: z.literal("kick"), guestId: z.string().min(1).max(64) }),
-  z.object({ action: z.literal("level"), level: z.enum(["watch", "suggest"]) }),
+  z.object({
+    action: z.literal("level"),
+    level: z.enum(["watch", "suggest", "drive"]),
+  }),
+  // Gives the wheel to an admitted guest of a Drive share; null takes it back.
+  z.object({
+    action: z.literal("wheel"),
+    guestId: z.string().min(1).max(64).nullable(),
+  }),
+  // Sets the access code to the host's own, or turns it off (null).
+  z.object({
+    action: z.literal("code"),
+    code: z.string().max(40).nullable(),
+  }),
+  // Turns the access code on, or changes it, to a generated one.
+  z.object({ action: z.literal("new_code") }),
   z.object({
     action: z.literal("send"),
     suggestionId: z.string().min(1).max(64),
@@ -29,7 +50,8 @@ const Action = z.discriminatedUnion("action", [
 ]);
 
 // POST /api/live-shares/:id - the host's decisions: let a guest in, turn one
-// away, remove one, send a suggestion to the agent or dismiss it.
+// away, remove one, send a suggestion to the agent or dismiss it, change the
+// level, give or take back the wheel.
 export async function POST(
   request: Request,
   { params }: { params: Promise<{ id: string }> }
@@ -44,10 +66,14 @@ export async function POST(
   startLive();
   try {
     const a = body.data;
-    if (a.action === "admit") admit(id, a.guestId);
+    if (a.action === "admit") admit(id, a.guestId, { drive: a.drive });
     else if (a.action === "deny") deny(id, a.guestId);
     else if (a.action === "kick") kick(id, a.guestId);
     else if (a.action === "level") changeLevel(id, a.level);
+    else if (a.action === "wheel") giveWheel(id, a.guestId);
+    else if (a.action === "code")
+      await changeCode(id, a.code === null ? null : { code: a.code });
+    else if (a.action === "new_code") await changeCode(id, { generate: true });
     else if (a.action === "send")
       await sendSuggestion(id, a.suggestionId, a.text);
     else dismissSuggestion(id, a.suggestionId);

package/app/api/live-shares/route.test.ts

@@ -43,9 +43,24 @@ describe("live-shares routes", () => {
     );
   });
 
-  it("accept watch and suggest only, and history as a boolean", async () => {
+  it("validate the access code shape (400) and accept the code actions", async () => {
+    expect(
+      (await POST(req({ sessionId: "s", code: { custom: 5 } }))).status
+    ).toBe(400);
+    expect((await POST(req({ sessionId: "s", code: {} }))).status).toBe(409);
+    expect((await POST(req({ sessionId: "s", code: null }))).status).toBe(409);
+    // A bad own code on a share this machine holds nothing of: 404, so it validated.
+    expect((await act(req({ action: "code", code: "ab" }), ctx)).status).toBe(
+      404
+    );
+    expect((await act(req({ action: "code", code: 5 }), ctx)).status).toBe(400);
+    expect((await act(req({ action: "new_code" }), ctx)).status).toBe(404);
+  });
+
+  it("accept watch, suggest and drive, and history as a boolean", async () => {
+    // Past validation: not linked to Connect here, so 409, never 400.
     expect((await POST(req({ sessionId: "s", level: "drive" }))).status).toBe(
-      400
+      409
     );
     expect((await POST(req({ sessionId: "s", level: "root" }))).status).toBe(
       400
@@ -53,8 +68,28 @@ describe("live-shares routes", () => {
     expect((await POST(req({ sessionId: "s", history: "yes" }))).status).toBe(
       400
     );
+    // A level for a share this machine doesn't hold: 404, so it validated.
     expect(
       (await act(req({ action: "level", level: "drive" }), ctx)).status
+    ).toBe(404);
+    expect(
+      (await act(req({ action: "level", level: "admin" }), ctx)).status
     ).toBe(400);
   });
+
+  it("validate the wheel and admit-to-drive actions", async () => {
+    for (const body of [
+      { action: "wheel" },
+      { action: "wheel", guestId: 7 },
+      { action: "wheel", guestId: "" },
+      { action: "admit", guestId: "g", drive: "yes" },
+    ])
+      expect((await act(req(body), ctx)).status).toBe(400);
+    for (const body of [
+      { action: "wheel", guestId: "g1" },
+      { action: "wheel", guestId: null },
+      { action: "admit", guestId: "g", drive: true },
+    ])
+      expect((await act(req(body), ctx)).status).toBe(404);
+  });
 });

package/app/api/live-shares/route.ts

@@ -7,8 +7,13 @@ import { createLive, inviteFor, listLive, startLive } from "@/lib/live/service";
 const Create = z.object({
   sessionId: z.string().min(1).max(100),
   expiresIn: z.enum(["1h", "session"]).default("1h"),
-  level: z.enum(["watch", "suggest"]).default("suggest"),
+  level: z.enum(["watch", "suggest", "drive"]).default("suggest"),
   history: z.boolean().default(true),
+  // Absent or null: no code. {} generates one; { custom } uses the host's.
+  code: z
+    .object({ custom: z.string().max(40).optional() })
+    .nullable()
+    .optional(),
 });
 
 // POST /api/live-shares - mint a live link for one chat and start publishing.
@@ -25,7 +30,8 @@ export async function POST(request: Request) {
       body.data.sessionId,
       body.data.expiresIn,
       body.data.level,
-      body.data.history
+      body.data.history,
+      body.data.code
     );
     return NextResponse.json(view, { status: 201 });
   } catch (err) {

package/components/Chat/Approval.tsx

@@ -1,7 +1,7 @@
 "use client";
 
 import { useState } from "react";
-import { MessageCircleQuestion, ShieldQuestion } from "lucide-react";
+import { MessageCircleQuestion, ShieldQuestion, Users } from "lucide-react";
 import { Button } from "@/components/ui/button";
 import type { ApprovalDecision, ChatItem } from "@/lib/chat/events";
 import { cn } from "@/lib/utils";
@@ -20,6 +20,17 @@ function AccessCard({
 }) {
   return (
     <div className="bg-primary/[0.06] space-y-3 rounded-xl p-3">
+      {item.guest && (
+        <p className="text-muted-foreground flex items-center gap-1.5 text-xs">
+          <Users className="h-3.5 w-3.5 shrink-0" aria-hidden />
+          <span className="min-w-0 truncate">
+            <span className="text-foreground font-medium">
+              {item.guest.name}&apos;s turn
+            </span>{" "}
+            · a live guest asked for this
+          </span>
+        </p>
+      )}
       <div className="flex items-start gap-2 text-sm">
         <ShieldQuestion className="text-primary mt-0.5 h-4 w-4 shrink-0" />
         <span className="min-w-0 break-words">{item.title}</span>
@@ -33,7 +44,7 @@ function AccessCard({
         >
           Deny
         </Button>
-        {item.canAlways && (
+        {item.canAlways && !item.guest && (
           <Button
             variant="secondary"
             className="h-11 md:h-9"

package/components/Chat/EventRow.tsx

@@ -29,6 +29,7 @@ export const ICON: Record<ChatOriginKind, LucideIcon> = {
   decision: UserCheck,
   device: Smartphone,
   guest: Users,
+  "guest-drive": Users,
 };
 
 // Longer than this (what fits beside a source on a phone), or more than one line,
@@ -183,6 +184,10 @@ export function EventRow({
               <span className="truncate font-medium">
                 Suggested by {origin.label}
               </span>
+            ) : origin.kind === "guest-drive" ? (
+              <span className="truncate font-medium">
+                Prompted by {origin.label}
+              </span>
             ) : (
               <Source origin={origin} />
             )

package/components/Chat/Queue.tsx

@@ -53,7 +53,15 @@ export function Queue({
             <span className="text-muted-foreground w-5 shrink-0 pt-3 text-center text-xs tabular-nums">
               {i + 1}
             </span>
-            {editing?.id === m.id ? (
+            {m.guest ? (
+              // A driving guest's prompt: theirs to word, the host's to remove.
+              <div className="min-h-11 min-w-0 flex-1 px-2 py-2.5 text-sm break-words whitespace-pre-wrap">
+                <span className="text-muted-foreground block text-xs">
+                  {m.guest.name} (guest)
+                </span>
+                <span className="line-clamp-3">{m.guest.body}</span>
+              </div>
+            ) : editing?.id === m.id ? (
               <textarea
                 autoFocus
                 value={editing.text}
@@ -99,20 +107,24 @@ export function Queue({
               </button>
             )}
             <div className="flex shrink-0 items-center">
-              <IconButton
-                label="Send now"
-                onClick={() => onSendNow(m.id)}
-                className="text-foreground"
-              >
-                <SendHorizontal className="h-4 w-4" />
-              </IconButton>
-              <IconButton
-                label="Edit"
-                onClick={() => setEditing({ id: m.id, text: m.text })}
-                className="max-md:hidden"
-              >
-                <Pencil className="h-3.5 w-3.5" />
-              </IconButton>
+              {!m.guest && (
+                <>
+                  <IconButton
+                    label="Send now"
+                    onClick={() => onSendNow(m.id)}
+                    className="text-foreground"
+                  >
+                    <SendHorizontal className="h-4 w-4" />
+                  </IconButton>
+                  <IconButton
+                    label="Edit"
+                    onClick={() => setEditing({ id: m.id, text: m.text })}
+                    className="max-md:hidden"
+                  >
+                    <Pencil className="h-3.5 w-3.5" />
+                  </IconButton>
+                </>
+              )}
               <IconButton
                 label="Move up"
                 disabled={i === 0}

package/components/Live/DriveBanner.tsx

@@ -0,0 +1,42 @@
+"use client";
+
+import { Hand, Users } from "lucide-react";
+import { Button } from "@/components/ui/button";
+import type { LiveView } from "@/data/live";
+
+// A guest holds the wheel: what they're doing, and the host's way back.
+export function DriveBanner({
+  banner,
+  busy,
+  onTakeBack,
+}: {
+  banner: NonNullable<LiveView["banner"]>;
+  busy: boolean;
+  onTakeBack: () => void;
+}) {
+  return (
+    <div
+      role="status"
+      className="bg-primary/[0.06] flex items-center gap-2 rounded-xl py-1 pr-1 pl-3 shadow-sm"
+    >
+      <Users className="text-primary h-4 w-4 shrink-0" aria-hidden />
+      <div className="min-w-0 flex-1 text-sm">
+        <p className="leading-snug font-medium">{banner.text}</p>
+        <p className="text-muted-foreground truncate text-xs max-sm:hidden">
+          Every edit, command and outside read asks you first.
+        </p>
+      </div>
+      {banner.action && (
+        <Button
+          variant="outline"
+          className="min-h-11 shrink-0"
+          disabled={busy}
+          onClick={onTakeBack}
+        >
+          <Hand className="h-4 w-4" aria-hidden />
+          {banner.action.label}
+        </Button>
+      )}
+    </div>
+  );
+}

package/components/Live/InviteDialog.tsx

@@ -78,10 +78,13 @@ function Create({
   const [expiresIn, setExpiresIn] = useState<LiveExpiry>("1h");
   const [level, setLevel] = useState<LiveLevel>("suggest");
   const [history, setHistory] = useState<boolean | null>(null);
+  const [codeOn, setCodeOn] = useState<boolean | null>(null);
+  const [custom, setCustom] = useState("");
   const create = useCreateLive();
   const options = invite?.levels ?? [];
   const chosen = options.find((o) => o.value === level);
   const withHistory = history ?? invite?.history.default ?? true;
+  const withCode = codeOn ?? invite?.code.default ?? false;
   return (
     <>
       <div className="flex flex-col gap-1.5">
@@ -118,6 +121,36 @@ function Create({
           {invite.history.label}
         </label>
       )}
+      {invite && (
+        <div className="flex flex-col gap-1.5">
+          <label className="flex min-h-11 items-center gap-3 text-sm">
+            <input
+              type="checkbox"
+              className="size-5"
+              checked={withCode}
+              onChange={(e) => setCodeOn(e.target.checked)}
+            />
+            {invite.code.label}
+          </label>
+          {withCode && (
+            <>
+              <input
+                value={custom}
+                onChange={(e) => setCustom(e.target.value)}
+                maxLength={40}
+                autoComplete="off"
+                spellCheck={false}
+                placeholder={invite.code.customLabel}
+                aria-label={invite.code.customLabel}
+                className="bg-muted min-h-11 rounded-lg px-3 font-mono text-sm"
+              />
+              <p className="text-muted-foreground text-xs">
+                {invite.code.hint} {invite.code.rules}
+              </p>
+            </>
+          )}
+        </div>
+      )}
       <div className="flex flex-col gap-1.5">
         <span className="text-muted-foreground text-xs font-medium">
           The link works for
@@ -139,7 +172,17 @@ function Create({
         className="min-h-11"
         disabled={create.isPending}
         onClick={() =>
-          create.mutate({ sessionId, expiresIn, level, history: withHistory })
+          create.mutate({
+            sessionId,
+            expiresIn,
+            level,
+            history: withHistory,
+            code: withCode
+              ? custom.trim()
+                ? { custom: custom.trim() }
+                : {}
+              : null,
+          })
         }
       >
         <Users className="h-4 w-4" />
@@ -153,6 +196,7 @@ function Link({ share }: { share: LiveView }) {
   const { copied, copy } = useCopyToClipboard();
   const end = useEndLive(share.id);
   const qr = useQr(share.url);
+  const code = share.code;
   const canShare = typeof navigator !== "undefined" && "share" in navigator;
   return (
     <>
@@ -175,6 +219,33 @@ function Link({ share }: { share: LiveView }) {
           className="bg-muted min-h-11 w-full rounded-lg px-3 font-mono text-xs"
         />
       </div>
+      {code.on && code.copyText && (
+        <div className="flex flex-col items-center gap-2">
+          <span className="text-muted-foreground text-xs font-medium">
+            {code.label}
+          </span>
+          <span
+            className="font-mono text-3xl font-semibold tracking-widest"
+            aria-label={code.label}
+          >
+            {code.display}
+          </span>
+          <Button
+            className="min-h-11 w-full"
+            onClick={() => copy(code.copyText!)}
+          >
+            {copied ? (
+              <Check className="h-4 w-4" />
+            ) : (
+              <Copy className="h-4 w-4" />
+            )}
+            Copy link and code
+          </Button>
+          <p className="text-muted-foreground text-center text-xs">
+            {code.hint}
+          </p>
+        </div>
+      )}
       <div className="flex flex-wrap gap-2">
         <Button
           variant="outline"
@@ -186,7 +257,7 @@ function Link({ share }: { share: LiveView }) {
           ) : (
             <Copy className="h-4 w-4" />
           )}
-          Copy
+          Copy link
         </Button>
         {canShare && (
           <Button

package/components/Live/LiveChip.tsx

@@ -1,11 +1,12 @@
 "use client";
 
 import { useState } from "react";
-import { ChevronDown, Radio, UserMinus } from "lucide-react";
+import { Check, ChevronDown, Copy, Radio, UserMinus } from "lucide-react";
 import { Button } from "@/components/ui/button";
 import { Segmented } from "@/components/ui/segmented";
 import { StatusPill } from "@/components/ui/status-pill";
 import type { LiveLevel, LiveView } from "@/data/live";
+import { useCopyToClipboard } from "@/hooks/useCopyToClipboard";
 import { cn } from "@/lib/utils";
 
 export function presenceText(guests: LiveView["guests"]): string {
@@ -21,6 +22,7 @@ export function LiveChip({
   busy,
   onAction,
   onLevel,
+  onCode,
   onEnd,
   onInvite,
 }: {
@@ -28,6 +30,7 @@ export function LiveChip({
   busy: boolean;
   onAction: (guestId: string, kind: string) => void;
   onLevel: (level: LiveLevel) => void;
+  onCode: (kind: string, own?: string) => void;
   onEnd: () => void;
   onInvite: () => void;
 }) {
@@ -76,6 +79,7 @@ export function LiveChip({
           <p className="text-muted-foreground px-2 text-xs">
             {share.levels.find((o) => o.value === share.level)?.hint}
           </p>
+          <CodeRow share={share} busy={busy} onCode={onCode} />
           {admitted.length === 0 && (
             <p className="text-muted-foreground px-2 py-1 text-xs">
               No one has joined yet.
@@ -128,3 +132,66 @@ export function LiveChip({
     </div>
   );
 }
+
+function CodeRow({
+  share,
+  busy,
+  onCode,
+}: {
+  share: LiveView;
+  busy: boolean;
+  onCode: (kind: string, own?: string) => void;
+}) {
+  const { copied, copy } = useCopyToClipboard();
+  const { code } = share;
+  const change = (kind: string) => {
+    if (kind === "copy") copy(code.copyText ?? share.url);
+    else if (kind === "copy_link") copy(share.url);
+    else if (kind === "set_code") {
+      const own = window.prompt(`${code.prompt.title}\n${code.prompt.message}`);
+      if (own?.trim()) onCode(kind, own.trim());
+    } else onCode(kind);
+  };
+  return (
+    <div className="flex flex-col gap-1 px-2 py-1">
+      <div className="flex min-h-11 items-center gap-2">
+        <span className="text-muted-foreground text-xs">{code.label}</span>
+        <span className="min-w-0 flex-1 truncate font-mono text-sm font-semibold tracking-wider">
+          {code.on ? code.display : "Off"}
+        </span>
+        {code.on && code.copyText && (
+          <Button
+            variant="ghost"
+            className="min-h-11"
+            onClick={() => copy(code.copyText!)}
+            aria-label="Copy link and code"
+          >
+            {copied ? (
+              <Check className="h-4 w-4" />
+            ) : (
+              <Copy className="h-4 w-4" />
+            )}
+          </Button>
+        )}
+      </div>
+      {code.notice && (
+        <p className="text-muted-foreground text-xs">{code.notice}</p>
+      )}
+      <div className="flex flex-wrap gap-1">
+        {code.actions
+          .filter((a) => a.kind !== "copy" && a.kind !== "copy_link")
+          .map((a) => (
+            <Button
+              key={a.kind}
+              variant="ghost"
+              className="min-h-11"
+              disabled={busy}
+              onClick={() => change(a.kind)}
+            >
+              {a.label}
+            </Button>
+          ))}
+      </div>
+    </div>
+  );
+}

package/components/Live/LivePanel.tsx

@@ -3,12 +3,14 @@
 import { toast } from "sonner";
 import { useEndLive, useLiveAction, useLiveShare } from "@/data/live";
 import { liveUiActions } from "@/stores/liveUi";
+import { DriveBanner } from "./DriveBanner";
 import { GuestPromptCard } from "./GuestPromptCard";
 import { LiveChip } from "./LiveChip";
 import { LobbyCard } from "./LobbyCard";
 
 // Above the composer while a session has a live link: the Live chip, who is
-// waiting to come in, and the suggestions to send, edit or dismiss.
+// driving, who is waiting to come in, and the suggestions to send, edit or
+// dismiss.
 export function LivePanel({
   sessionId,
   title,
@@ -28,6 +30,12 @@ export function LivePanel({
   const doAction = (guestId: string, kind: string) => {
     if (kind === "admit" || kind === "deny" || kind === "kick")
       act.mutate({ action: kind, guestId }, { onError: fail });
+    else if (kind === "admit_drive")
+      act.mutate({ action: "admit", guestId, drive: true }, { onError: fail });
+    else if (kind === "give_wheel")
+      act.mutate({ action: "wheel", guestId }, { onError: fail });
+    else if (kind === "take_back")
+      act.mutate({ action: "wheel", guestId: null }, { onError: fail });
   };
   const lobby = share.guests.filter((g) => g.status === "pending");
   return (
@@ -39,9 +47,26 @@ export function LivePanel({
         onLevel={(level) =>
           act.mutate({ action: "level", level }, { onError: fail })
         }
+        onCode={(kind, own) => {
+          if (kind === "code_off")
+            act.mutate({ action: "code", code: null }, { onError: fail });
+          else if (kind === "set_code" && own)
+            act.mutate({ action: "code", code: own }, { onError: fail });
+          else if (kind === "new_code" || kind === "code_on")
+            act.mutate({ action: "new_code" }, { onError: fail });
+        }}
         onEnd={() => end.mutate(undefined, { onError: fail })}
         onInvite={() => liveUiActions.open(sessionId, title)}
       />
+      {share.banner && share.driver && (
+        <DriveBanner
+          banner={share.banner}
+          busy={busy}
+          onTakeBack={() =>
+            act.mutate({ action: "wheel", guestId: null }, { onError: fail })
+          }
+        />
+      )}
       {lobby.map((g) => (
         <LobbyCard
           key={g.id}

package/data/live/queries.ts

@@ -57,14 +57,19 @@ export function useCreateLive() {
       expiresIn: LiveExpiry;
       level: LiveLevel;
       history: boolean;
+      code?: { custom?: string } | null;
     }) => json<LiveView>(await send("/api/live-shares", "POST", req)),
     onSuccess: () => qc.invalidateQueries({ queryKey: liveKeys.all }),
   });
 }
 
 export type LiveAction =
-  | { action: "admit" | "deny" | "kick"; guestId: string }
+  | { action: "admit"; guestId: string; drive?: boolean }
+  | { action: "deny" | "kick"; guestId: string }
+  | { action: "wheel"; guestId: string | null }
   | { action: "level"; level: LiveLevel }
+  | { action: "code"; code: string | null }
+  | { action: "new_code" }
   | { action: "send"; suggestionId: string; text?: string }
   | { action: "dismiss"; suggestionId: string };
 

package/lib/chat/driver.ts

@@ -2,6 +2,7 @@ import type {
   McpServerConfig,
   PermissionMode,
 } from "@anthropic-ai/claude-agent-sdk";
+import type { GuestGate } from "./worker/guest-gate";
 import type {
   ApprovalDecision,
   ChatAccess,
@@ -60,6 +61,9 @@ export interface ChatStartOptions {
   // refused, null to let it go on to them, or a warning the agent is shown
   // while the call still goes on.
   toolGuard?: ToolGuard;
+  // Holds a live guest's turn to the host's taps (./worker/guest-gate). A
+  // driver without it can't take Drive prompts (the worker's caps say so).
+  guestGate?: GuestGate;
   // The note handed back to the agent right after its context is compacted
   // (lib/chat/compact-context), empty for none. Only Claude Code has a hook
   // for it; other drivers ignore it.