@saadnvd1/agent-os 0.3.786 → 0.3.790

package/components/SidebarFooter.tsx

@@ -9,10 +9,12 @@ import {
 export function SidebarFooter() {
   return (
     <div className="mt-auto px-3 pt-2 pb-3">
-      <WhatsNewButton />
-      <div className="mt-1 flex items-center justify-between">
+      <div className="flex items-center justify-between">
         <span className="label-mono text-muted-foreground">Theme</span>
-        <ThemeToggle />
+        <div className="flex items-center">
+          <WhatsNewButton />
+          <ThemeToggle />
+        </div>
       </div>
       <div className="text-muted-foreground/50 mt-2 text-center text-[10px]">
         <Tooltip>

package/components/Updates/UpdateBanner.tsx

@@ -152,7 +152,7 @@ export function UpdateBannerView({
           {state === "available" && (
             <button
               type="button"
-              className="text-primary inline-flex min-h-11 items-center text-xs underline md:min-h-0"
+              className="text-muted-foreground hover:text-foreground inline-flex min-h-11 items-center text-xs underline md:min-h-0"
               onClick={() => whatsNewActions.open(true)}
             >
               See what&apos;s new
@@ -163,7 +163,7 @@ export function UpdateBannerView({
               href={latest.url}
               target="_blank"
               rel="noreferrer noopener"
-              className="text-primary inline-flex min-h-11 items-center text-xs underline md:min-h-0"
+              className="text-muted-foreground hover:text-foreground inline-flex min-h-11 items-center text-xs underline md:min-h-0"
             >
               Release notes
             </a>

package/components/WhatsNew/WhatsNewButton.tsx

@@ -1,36 +1,33 @@
 "use client";
 
 import { Sparkles } from "lucide-react";
-import { StatusPill } from "@/components/ui/status-pill";
+import { Button } from "@/components/ui/button";
 import { useWhatsNewHead } from "@/data/whats-new";
 import { useWhatsNewSeen } from "@/hooks/useWhatsNewSeen";
-import { unreadLabel } from "@/lib/whats-new/unread";
 import { whatsNewActions } from "@/stores/whatsNew";
 
-/** The sidebar footer row; it opens the one dialog (WhatsNewHost). */
+/** A small footer icon that opens the one dialog (WhatsNewHost); a dot marks unread. */
 export function WhatsNewButton() {
   const { data: head } = useWhatsNewHead();
   const { unread } = useWhatsNewSeen(head);
   return (
-    <button
+    <Button
       type="button"
+      variant="ghost"
+      size="icon"
+      title="What's New"
+      aria-label={unread > 0 ? "What's New (unread changes)" : "What's New"}
       onClick={() => whatsNewActions.open()}
-      className="text-foreground hover:bg-accent/60 flex min-h-11 w-full items-center gap-2.5 rounded-lg px-2.5 text-[13px] transition-colors md:min-h-9"
+      // The ::after widens the tap area to 44px on a phone without adding height.
+      className="text-muted-foreground relative h-8 w-8 after:absolute after:-inset-1.5 after:content-[''] md:after:hidden [@media(hover:none)]:md:h-11 [@media(hover:none)]:md:w-11"
     >
-      <Sparkles className="text-muted-foreground size-4 shrink-0" />
-      <span className="flex-1 text-left">What&apos;s New</span>
+      <Sparkles className="h-4 w-4" />
       {unread > 0 && (
-        <>
-          <StatusPill tone="primary" className="rounded-full px-2">
-            {unreadLabel(unread)} new
-          </StatusPill>
-          <span
-            role="img"
-            aria-label="Unread changes"
-            className="bg-primary size-2 shrink-0 rounded-full"
-          />
-        </>
+        <span
+          data-testid="whats-new-dot"
+          className="bg-primary absolute top-1.5 right-1.5 size-1.5 rounded-full"
+        />
       )}
-    </button>
+    </Button>
   );
 }

package/content/whats-new.json

@@ -1694,8 +1694,9 @@
       "date": "2026-10-10",
       "kind": "new",
       "area": "AgentOS",
-      "text": "You can run /competitor-audit to see how a competitor's latest changes compare with AgentOS.",
-      "url": "https://github.com/saadnvd1/agent-os/pull/184"
+      "text": "Internal tooling update.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/184",
+      "hidden": true
     },
     {
       "id": 200,
@@ -1768,6 +1769,14 @@
       "area": "AgentOS",
       "text": "A What's New list in the sidebar shows what changed in each update.",
       "url": "https://github.com/saadnvd1/agent-os/pull/525"
+    },
+    {
+      "id": 528,
+      "date": "2026-10-30",
+      "kind": "improved",
+      "area": "AgentOS",
+      "text": "What's New now sits as a small icon in the sidebar footer.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/528"
     }
   ]
 }

package/lib/whats-new/lint.ts

@@ -1,6 +1,7 @@
 import fs from "fs";
 import path from "path";
 import { agentosHome } from "@/lib/agentos-home";
+import { loadTerms } from "@/scripts/hooks/banned-terms";
 import type { Entry } from "./schema";
 
 // The repo is public, so this checks only generic shapes. Names that must
@@ -25,6 +26,10 @@ const GENERIC: [string, RegExp][] = [
   ["a vulnerability", /vulnerab|exploit|\bRCE\b/i],
 ];
 
+// The repo-wide banned terms (scripts/check fails on them), read once.
+let banned: RegExp[] | null = null;
+const bannedTerms = () => (banned ??= loadTerms());
+
 const escape = (s: string) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
 /** Why this text can't ship, or null when it can. */
@@ -34,6 +39,8 @@ export function lintText(
 ): string | null {
   for (const [what, re] of GENERIC)
     if (re.test(text)) return `contains ${what}`;
+  if (bannedTerms().some((re) => re.test(text)))
+    return "contains a banned term";
   for (const name of blocklist) {
     if (
       new RegExp(

package/lib/whats-new/unread.ts

@@ -2,13 +2,9 @@
 // Pure, so a native client can use the same rules.
 
 export const SEEN_KEY = "aos:whatsnew:seen";
-export const UNREAD_CAP = 9;
 
 /** How many of the newest entries are newer than the seen id (capped by the head's list). */
 export function unreadCount(recent: number[], seen: number | null): number {
   if (seen === null) return 0;
   return recent.filter((id) => id > seen).length;
 }
-
-export const unreadLabel = (n: number) =>
-  n > UNREAD_CAP ? `${UNREAD_CAP}+` : String(n);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saadnvd1/agent-os",
-  "version": "0.3.786",
+  "version": "0.3.790",
   "description": "Self-hosted web UI for managing Claude Code sessions",
   "bin": {
     "agent-os": "scripts/agent-os"

package/scripts/autodeploy

@@ -135,15 +135,10 @@ fi
 # Publishing waits minutes for npm to serve a version, so it runs on its own
 # with its own lock and never holds up the next deploy.
 if [ "$head" != "$published" ] && mkdir "$state/publish.lock" 2>/dev/null; then
-  (
-    trap 'rmdir "$state/publish.lock"; rm -rf "$tmp"' EXIT
-    tmp=$(mktemp -d)
-    git archive "$head" | tar -x -C "$tmp"
-    base=$(node -p 'require("./package.json").version.split(".").slice(0,2).join(".")')
-    version="$base.$(git rev-list --count "$head")"
-    (cd "$tmp" && npm version "$version" --no-git-tag-version --allow-same-version >/dev/null)
-    log "Publishing $version"
-    "$tmp/scripts/publish" && echo "$head" > "$state/published"
-  ) &
+  # Its own session and command line: serviceman kills the last run's process
+  # group and orphans named like this job, which took a backgrounded subshell
+  # with it every minute.
+  nohup perl -e 'use POSIX; POSIX::setsid(); exec @ARGV' \
+    "$PWD/scripts/publish-detached" "$head" "$state" </dev/null &
   disown
 fi

package/scripts/autodeploy.test.ts

@@ -28,6 +28,18 @@ function setup() {
   fs.mkdirSync(path.join(work, "bin"));
   fs.writeFileSync(path.join(work, "bin/aos"), "");
   fs.writeFileSync(path.join(work, "scripts/wait-quiet"), "#!/bin/sh\n");
+  fs.copyFileSync(
+    path.join(__dirname, "publish-detached"),
+    path.join(work, "scripts/publish-detached")
+  );
+  fs.writeFileSync(path.join(work, "package.json"), '{"version":"1.2.0"}\n');
+  // Stands in for the npm publish: records its process group, then takes a while.
+  fs.writeFileSync(
+    path.join(work, "scripts/publish"),
+    '#!/bin/sh\necho "$(ps -o pgid= -p $$ | tr -d " ")" >> "$HOME/publish-starts"\nsleep 2\n'
+  );
+  fs.chmodSync(path.join(work, "scripts/publish-detached"), 0o755);
+  fs.chmodSync(path.join(work, "scripts/publish"), 0o755);
   fs.writeFileSync(
     path.join(work, "scripts/redeploy"),
     "#!/bin/sh\ngit pull -q origin main && echo x >> ../restarts\n"
@@ -45,7 +57,7 @@ function setup() {
   commit("first");
   sh(root, "clone", "-q", origin, clone);
   const state = path.join(home, ".agent-os/autodeploy");
-  const run = () =>
+  const run = (extra: Record<string, string> = {}) =>
     execFileSync(path.join(clone, "scripts/autodeploy"), [], {
       cwd: clone,
       encoding: "utf-8",
@@ -57,6 +69,7 @@ function setup() {
         AGENTOS_RESTART: "true",
         AOS_BIN_DIR: path.join(root, "linkbin"),
         AGENT_OS_HOME: path.join(home, ".agent-os"),
+        ...extra,
       },
     });
   const restarts = () => {
@@ -71,7 +84,7 @@ function setup() {
   };
   const deployed = () =>
     fs.readFileSync(path.join(state, "deployed"), "utf-8").trim();
-  return { root, clone, commit, run, restarts, deployed, state };
+  return { root, home, clone, commit, run, restarts, deployed, state };
 }
 
 describe("autodeploy restart gap", () => {
@@ -187,3 +200,27 @@ describe("autodeploy CLI links", () => {
     );
   });
 });
+
+describe("autodeploy publish", () => {
+  it("keeps publishing in its own process group across the next run", async () => {
+    const t = setup();
+    const head = t.commit("a");
+    const env = { AGENTOS_PUBLISH: "1", AGENTOS_WHATS_NEW: "0" };
+    t.run(env);
+    t.run(env);
+    const starts = path.join(t.home, "publish-starts");
+    const lock = path.join(t.state, "publish.lock");
+    const published = path.join(t.state, "published");
+    for (let i = 0; i < 100 && !fs.existsSync(published); i++)
+      await new Promise((r) => setTimeout(r, 100));
+    const groups = fs.readFileSync(starts, "utf-8").trim().split("\n");
+    expect(groups).toHaveLength(1);
+    expect(Number(groups[0])).not.toBe(
+      Number(execFileSync("ps", ["-o", "pgid=", "-p", String(process.pid)]))
+    );
+    expect(fs.readFileSync(published, "utf-8").trim()).toBe(head);
+    for (let i = 0; i < 20 && fs.existsSync(lock); i++)
+      await new Promise((r) => setTimeout(r, 50));
+    expect(fs.existsSync(lock)).toBe(false);
+  });
+});

package/scripts/publish-detached

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# The publish half of scripts/autodeploy, run in its own process group under
+# its own command line: serviceman kills the previous cron run's process group
+# and any orphan still named like the job, so a forked copy of autodeploy
+# would die with the next minute's run. Holds $state/publish.lock (taken by the
+# caller) and releases it when done.
+#   scripts/publish-detached <sha> <state dir>
+set -euo pipefail
+head=$1
+state=$2
+cd "$(dirname "$0")/.."
+log() { echo "$(date '+%Y-%m-%d %-I:%M %p') $*"; }
+tmp=$(mktemp -d)
+trap 'rmdir "$state/publish.lock"; rm -rf "$tmp"' EXIT
+git archive "$head" | tar -x -C "$tmp"
+base=$(node -p 'require("./package.json").version.split(".").slice(0,2).join(".")')
+version="$base.$(git rev-list --count "$head")"
+(cd "$tmp" && npm version "$version" --no-git-tag-version --allow-same-version >/dev/null)
+log "Publishing $version"
+"$tmp/scripts/publish" && echo "$head" > "$state/published"