@saadnvd1/agent-os 0.3.786 → 0.3.792

package/components/Chat/composer/shrinkImage.ts

@@ -0,0 +1,95 @@
+import { needsShrink, renamed, SHRINK_STEPS, targetSize } from "./shrinkPlan";
+
+type Canvas = OffscreenCanvas | HTMLCanvasElement;
+
+function makeCanvas(width: number, height: number): Canvas {
+  if (typeof OffscreenCanvas !== "undefined")
+    return new OffscreenCanvas(width, height);
+  const c = document.createElement("canvas");
+  c.width = width;
+  c.height = height;
+  return c;
+}
+
+function encode(
+  canvas: Canvas,
+  type: string,
+  quality?: number
+): Promise<Blob | null> {
+  if ("convertToBlob" in canvas) return canvas.convertToBlob({ type, quality });
+  return new Promise((resolve) => canvas.toBlob(resolve, type, quality));
+}
+
+function hasAlpha(
+  ctx: CanvasRenderingContext2D | OffscreenCanvasRenderingContext2D,
+  w: number,
+  h: number
+) {
+  const data = ctx.getImageData(0, 0, w, h).data;
+  for (let i = 3; i < data.length; i += 4) if (data[i] < 255) return true;
+  return false;
+}
+
+export type ShrinkResult = { ok: true; file: File } | { ok: false };
+
+// Downscale an image that is over the byte cap or 2000px on its long edge.
+// Returns the file untouched when it is already fine, and { ok: false } when
+// it can't be decoded or still doesn't fit after every step.
+export async function shrinkImage(
+  file: File,
+  cap: number
+): Promise<ShrinkResult> {
+  let bitmap: ImageBitmap;
+  try {
+    bitmap = await createImageBitmap(file, { imageOrientation: "from-image" });
+  } catch {
+    // A file we can't decode is only a problem if it was too big anyway.
+    return file.size > cap ? { ok: false } : { ok: true, file };
+  }
+  try {
+    if (!needsShrink(bitmap.width, bitmap.height, file.size, cap))
+      return { ok: true, file };
+    // Animated GIFs would lose their frames; only touch one that can't go as is.
+    if (file.type === "image/gif" && file.size <= cap)
+      return { ok: true, file };
+
+    let keepPng: boolean | null = null;
+    for (const { maxEdge, quality } of SHRINK_STEPS) {
+      const { width, height } = targetSize(
+        bitmap.width,
+        bitmap.height,
+        maxEdge
+      );
+      const canvas = makeCanvas(width, height);
+      const ctx = canvas.getContext("2d") as CanvasRenderingContext2D | null;
+      if (!ctx) return { ok: false };
+      ctx.drawImage(bitmap, 0, 0, width, height);
+      if (keepPng === null)
+        keepPng = file.type === "image/png" && hasAlpha(ctx, width, height);
+      if (keepPng) {
+        const png = await encode(canvas, "image/png");
+        if (png && png.size <= cap)
+          return {
+            ok: true,
+            file: new File([png], file.name, { type: "image/png" }),
+          };
+        keepPng = false;
+      }
+      // JPEG has no alpha: put the picture on white first.
+      ctx.globalCompositeOperation = "destination-over";
+      ctx.fillStyle = "#fff";
+      ctx.fillRect(0, 0, width, height);
+      const jpeg = await encode(canvas, "image/jpeg", quality);
+      if (jpeg && jpeg.size <= cap)
+        return {
+          ok: true,
+          file: new File([jpeg], renamed(file.name, "jpg"), {
+            type: "image/jpeg",
+          }),
+        };
+    }
+    return { ok: false };
+  } finally {
+    bitmap.close();
+  }
+}

package/components/Chat/composer/shrinkPlan.test.ts

@@ -0,0 +1,33 @@
+import { describe, expect, it } from "vitest";
+import { needsShrink, renamed, SHRINK_STEPS, targetSize } from "./shrinkPlan";
+
+describe("shrink plan", () => {
+  it("shrinks a big photo and leaves a small one alone", () => {
+    expect(needsShrink(5712, 4284, 8_000_000, 3_750_000)).toBe(true);
+    expect(needsShrink(1200, 800, 4_000_000, 3_750_000)).toBe(true);
+    expect(needsShrink(3000, 1000, 100_000, 3_750_000)).toBe(true);
+    expect(needsShrink(2000, 1500, 500_000, 3_750_000)).toBe(false);
+  });
+
+  it("fits the long edge and keeps the aspect ratio", () => {
+    expect(targetSize(5712, 4284, 2000)).toEqual({ width: 2000, height: 1500 });
+    expect(targetSize(4284, 5712, 1600)).toEqual({ width: 1200, height: 1600 });
+    expect(targetSize(800, 600, 2000)).toEqual({ width: 800, height: 600 });
+  });
+
+  it("steps quality down before size", () => {
+    expect(SHRINK_STEPS.map((s) => `${s.maxEdge}@${s.quality}`)).toEqual([
+      "2000@0.85",
+      "2000@0.75",
+      "2000@0.65",
+      "1600@0.75",
+      "1600@0.65",
+    ]);
+  });
+
+  it("swaps the extension", () => {
+    expect(renamed("IMG_1.HEIC", "jpg")).toBe("IMG_1.jpg");
+    expect(renamed("a.b.png", "jpg")).toBe("a.b.jpg");
+    expect(renamed("noext", "jpg")).toBe("noext.jpg");
+  });
+});

package/components/Chat/composer/shrinkPlan.ts

@@ -0,0 +1,39 @@
+// The decisions behind shrinking a big photo before it is attached, kept pure
+// so they can be tested without a canvas.
+
+export const MAX_EDGE = 2000;
+const FALLBACK_EDGE = 1600;
+
+export interface ShrinkStep {
+  maxEdge: number;
+  quality: number;
+}
+
+// Tried in order until the result fits the cap.
+export const SHRINK_STEPS: ShrinkStep[] = [
+  { maxEdge: MAX_EDGE, quality: 0.85 },
+  { maxEdge: MAX_EDGE, quality: 0.75 },
+  { maxEdge: MAX_EDGE, quality: 0.65 },
+  { maxEdge: FALLBACK_EDGE, quality: 0.75 },
+  { maxEdge: FALLBACK_EDGE, quality: 0.65 },
+];
+
+export const needsShrink = (
+  width: number,
+  height: number,
+  bytes: number,
+  cap: number
+) => bytes > cap || Math.max(width, height) > MAX_EDGE;
+
+// Fit inside maxEdge on the long side; never enlarge.
+export function targetSize(width: number, height: number, maxEdge: number) {
+  const scale = Math.min(1, maxEdge / Math.max(width, height));
+  return {
+    width: Math.max(1, Math.round(width * scale)),
+    height: Math.max(1, Math.round(height * scale)),
+  };
+}
+
+// photo.HEIC -> photo.jpg; a name without an extension just gains one.
+export const renamed = (name: string, ext: "jpg" | "png") =>
+  `${name.replace(/\.[^./\\]+$/, "")}.${ext}`;

package/components/Chat/composer/useAttachFiles.ts

@@ -16,6 +16,7 @@ import {
 import type { ChatFile, ChatImage } from "@/lib/chat/events";
 import { uploadFile } from "@/lib/file-upload";
 import { isImage } from "./paste";
+import { shrinkImage } from "./shrinkImage";
 
 export interface Upload {
   key: string;
@@ -79,9 +80,9 @@ export function useAttachFiles({
       if (held.current + images.length + others.length >= limits.max)
         error = `You can attach up to ${limits.max} files to one message.`;
       else if (isImage(f)) {
-        if (f.size > limits.maxImageBytes)
-          error = tooBigMessage(f.name, f.size, limits.maxImageBytes);
-        else images.push(f);
+        const shrunk = await shrinkImage(f, limits.maxImageBytes);
+        if (shrunk.ok) images.push(shrunk.file);
+        else error = tooBigMessage(f.name, f.size, limits.maxImageBytes);
       } else if (!typeFor(f.name, limits.types))
         error = unsupportedMessage(f.name);
       else if (f.size > limits.maxBytes)

package/components/SidebarFooter.tsx

@@ -9,10 +9,12 @@ import {
 export function SidebarFooter() {
   return (
     <div className="mt-auto px-3 pt-2 pb-3">
-      <WhatsNewButton />
-      <div className="mt-1 flex items-center justify-between">
+      <div className="flex items-center justify-between">
         <span className="label-mono text-muted-foreground">Theme</span>
-        <ThemeToggle />
+        <div className="flex items-center">
+          <WhatsNewButton />
+          <ThemeToggle />
+        </div>
       </div>
       <div className="text-muted-foreground/50 mt-2 text-center text-[10px]">
         <Tooltip>

package/components/Updates/UpdateBanner.tsx

@@ -152,7 +152,7 @@ export function UpdateBannerView({
           {state === "available" && (
             <button
               type="button"
-              className="text-primary inline-flex min-h-11 items-center text-xs underline md:min-h-0"
+              className="text-muted-foreground hover:text-foreground inline-flex min-h-11 items-center text-xs underline md:min-h-0"
               onClick={() => whatsNewActions.open(true)}
             >
               See what&apos;s new
@@ -163,7 +163,7 @@ export function UpdateBannerView({
               href={latest.url}
               target="_blank"
               rel="noreferrer noopener"
-              className="text-primary inline-flex min-h-11 items-center text-xs underline md:min-h-0"
+              className="text-muted-foreground hover:text-foreground inline-flex min-h-11 items-center text-xs underline md:min-h-0"
             >
               Release notes
             </a>

package/components/WhatsNew/WhatsNewButton.tsx

@@ -1,36 +1,33 @@
 "use client";
 
 import { Sparkles } from "lucide-react";
-import { StatusPill } from "@/components/ui/status-pill";
+import { Button } from "@/components/ui/button";
 import { useWhatsNewHead } from "@/data/whats-new";
 import { useWhatsNewSeen } from "@/hooks/useWhatsNewSeen";
-import { unreadLabel } from "@/lib/whats-new/unread";
 import { whatsNewActions } from "@/stores/whatsNew";
 
-/** The sidebar footer row; it opens the one dialog (WhatsNewHost). */
+/** A small footer icon that opens the one dialog (WhatsNewHost); a dot marks unread. */
 export function WhatsNewButton() {
   const { data: head } = useWhatsNewHead();
   const { unread } = useWhatsNewSeen(head);
   return (
-    <button
+    <Button
       type="button"
+      variant="ghost"
+      size="icon"
+      title="What's New"
+      aria-label={unread > 0 ? "What's New (unread changes)" : "What's New"}
       onClick={() => whatsNewActions.open()}
-      className="text-foreground hover:bg-accent/60 flex min-h-11 w-full items-center gap-2.5 rounded-lg px-2.5 text-[13px] transition-colors md:min-h-9"
+      // The ::after widens the tap area to 44px on a phone without adding height.
+      className="text-muted-foreground relative h-8 w-8 after:absolute after:-inset-1.5 after:content-[''] md:after:hidden [@media(hover:none)]:md:h-11 [@media(hover:none)]:md:w-11"
     >
-      <Sparkles className="text-muted-foreground size-4 shrink-0" />
-      <span className="flex-1 text-left">What&apos;s New</span>
+      <Sparkles className="h-4 w-4" />
       {unread > 0 && (
-        <>
-          <StatusPill tone="primary" className="rounded-full px-2">
-            {unreadLabel(unread)} new
-          </StatusPill>
-          <span
-            role="img"
-            aria-label="Unread changes"
-            className="bg-primary size-2 shrink-0 rounded-full"
-          />
-        </>
+        <span
+          data-testid="whats-new-dot"
+          className="bg-primary absolute top-1.5 right-1.5 size-1.5 rounded-full"
+        />
       )}
-    </button>
+    </Button>
   );
 }

package/content/whats-new.json

@@ -1694,8 +1694,9 @@
       "date": "2026-10-10",
       "kind": "new",
       "area": "AgentOS",
-      "text": "You can run /competitor-audit to see how a competitor's latest changes compare with AgentOS.",
-      "url": "https://github.com/saadnvd1/agent-os/pull/184"
+      "text": "Internal tooling update.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/184",
+      "hidden": true
     },
     {
       "id": 200,
@@ -1768,6 +1769,22 @@
       "area": "AgentOS",
       "text": "A What's New list in the sidebar shows what changed in each update.",
       "url": "https://github.com/saadnvd1/agent-os/pull/525"
+    },
+    {
+      "id": 528,
+      "date": "2026-10-30",
+      "kind": "improved",
+      "area": "AgentOS",
+      "text": "What's New now sits as a small icon in the sidebar footer.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/528"
+    },
+    {
+      "id": 529,
+      "date": "2026-10-31",
+      "kind": "fixed",
+      "area": "Chat",
+      "text": "Large photos from your phone now attach to a chat instead of being refused.",
+      "url": "https://github.com/saadnvd1/agent-os/pull/529"
     }
   ]
 }

package/lib/whats-new/lint.ts

@@ -1,6 +1,7 @@
 import fs from "fs";
 import path from "path";
 import { agentosHome } from "@/lib/agentos-home";
+import { loadTerms } from "@/scripts/hooks/banned-terms";
 import type { Entry } from "./schema";
 
 // The repo is public, so this checks only generic shapes. Names that must
@@ -25,6 +26,10 @@ const GENERIC: [string, RegExp][] = [
   ["a vulnerability", /vulnerab|exploit|\bRCE\b/i],
 ];
 
+// The repo-wide banned terms (scripts/check fails on them), read once.
+let banned: RegExp[] | null = null;
+const bannedTerms = () => (banned ??= loadTerms());
+
 const escape = (s: string) => s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 
 /** Why this text can't ship, or null when it can. */
@@ -34,6 +39,8 @@ export function lintText(
 ): string | null {
   for (const [what, re] of GENERIC)
     if (re.test(text)) return `contains ${what}`;
+  if (bannedTerms().some((re) => re.test(text)))
+    return "contains a banned term";
   for (const name of blocklist) {
     if (
       new RegExp(

package/lib/whats-new/unread.ts

@@ -2,13 +2,9 @@
 // Pure, so a native client can use the same rules.
 
 export const SEEN_KEY = "aos:whatsnew:seen";
-export const UNREAD_CAP = 9;
 
 /** How many of the newest entries are newer than the seen id (capped by the head's list). */
 export function unreadCount(recent: number[], seen: number | null): number {
   if (seen === null) return 0;
   return recent.filter((id) => id > seen).length;
 }
-
-export const unreadLabel = (n: number) =>
-  n > UNREAD_CAP ? `${UNREAD_CAP}+` : String(n);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@saadnvd1/agent-os",
-  "version": "0.3.786",
+  "version": "0.3.792",
   "description": "Self-hosted web UI for managing Claude Code sessions",
   "bin": {
     "agent-os": "scripts/agent-os"

package/scripts/autodeploy

@@ -135,15 +135,10 @@ fi
 # Publishing waits minutes for npm to serve a version, so it runs on its own
 # with its own lock and never holds up the next deploy.
 if [ "$head" != "$published" ] && mkdir "$state/publish.lock" 2>/dev/null; then
-  (
-    trap 'rmdir "$state/publish.lock"; rm -rf "$tmp"' EXIT
-    tmp=$(mktemp -d)
-    git archive "$head" | tar -x -C "$tmp"
-    base=$(node -p 'require("./package.json").version.split(".").slice(0,2).join(".")')
-    version="$base.$(git rev-list --count "$head")"
-    (cd "$tmp" && npm version "$version" --no-git-tag-version --allow-same-version >/dev/null)
-    log "Publishing $version"
-    "$tmp/scripts/publish" && echo "$head" > "$state/published"
-  ) &
+  # Its own session and command line: serviceman kills the last run's process
+  # group and orphans named like this job, which took a backgrounded subshell
+  # with it every minute.
+  nohup perl -e 'use POSIX; POSIX::setsid(); exec @ARGV' \
+    "$PWD/scripts/publish-detached" "$head" "$state" </dev/null &
   disown
 fi

package/scripts/autodeploy.test.ts

@@ -28,6 +28,18 @@ function setup() {
   fs.mkdirSync(path.join(work, "bin"));
   fs.writeFileSync(path.join(work, "bin/aos"), "");
   fs.writeFileSync(path.join(work, "scripts/wait-quiet"), "#!/bin/sh\n");
+  fs.copyFileSync(
+    path.join(__dirname, "publish-detached"),
+    path.join(work, "scripts/publish-detached")
+  );
+  fs.writeFileSync(path.join(work, "package.json"), '{"version":"1.2.0"}\n');
+  // Stands in for the npm publish: records its process group, then takes a while.
+  fs.writeFileSync(
+    path.join(work, "scripts/publish"),
+    '#!/bin/sh\necho "$(ps -o pgid= -p $$ | tr -d " ")" >> "$HOME/publish-starts"\nsleep 2\n'
+  );
+  fs.chmodSync(path.join(work, "scripts/publish-detached"), 0o755);
+  fs.chmodSync(path.join(work, "scripts/publish"), 0o755);
   fs.writeFileSync(
     path.join(work, "scripts/redeploy"),
     "#!/bin/sh\ngit pull -q origin main && echo x >> ../restarts\n"
@@ -45,7 +57,7 @@ function setup() {
   commit("first");
   sh(root, "clone", "-q", origin, clone);
   const state = path.join(home, ".agent-os/autodeploy");
-  const run = () =>
+  const run = (extra: Record<string, string> = {}) =>
     execFileSync(path.join(clone, "scripts/autodeploy"), [], {
       cwd: clone,
       encoding: "utf-8",
@@ -57,6 +69,7 @@ function setup() {
         AGENTOS_RESTART: "true",
         AOS_BIN_DIR: path.join(root, "linkbin"),
         AGENT_OS_HOME: path.join(home, ".agent-os"),
+        ...extra,
       },
     });
   const restarts = () => {
@@ -71,7 +84,7 @@ function setup() {
   };
   const deployed = () =>
     fs.readFileSync(path.join(state, "deployed"), "utf-8").trim();
-  return { root, clone, commit, run, restarts, deployed, state };
+  return { root, home, clone, commit, run, restarts, deployed, state };
 }
 
 describe("autodeploy restart gap", () => {
@@ -187,3 +200,27 @@ describe("autodeploy CLI links", () => {
     );
   });
 });
+
+describe("autodeploy publish", () => {
+  it("keeps publishing in its own process group across the next run", async () => {
+    const t = setup();
+    const head = t.commit("a");
+    const env = { AGENTOS_PUBLISH: "1", AGENTOS_WHATS_NEW: "0" };
+    t.run(env);
+    t.run(env);
+    const starts = path.join(t.home, "publish-starts");
+    const lock = path.join(t.state, "publish.lock");
+    const published = path.join(t.state, "published");
+    for (let i = 0; i < 100 && !fs.existsSync(published); i++)
+      await new Promise((r) => setTimeout(r, 100));
+    const groups = fs.readFileSync(starts, "utf-8").trim().split("\n");
+    expect(groups).toHaveLength(1);
+    expect(Number(groups[0])).not.toBe(
+      Number(execFileSync("ps", ["-o", "pgid=", "-p", String(process.pid)]))
+    );
+    expect(fs.readFileSync(published, "utf-8").trim()).toBe(head);
+    for (let i = 0; i < 20 && fs.existsSync(lock); i++)
+      await new Promise((r) => setTimeout(r, 50));
+    expect(fs.existsSync(lock)).toBe(false);
+  });
+});

package/scripts/publish-detached

@@ -0,0 +1,20 @@
+#!/usr/bin/env bash
+# The publish half of scripts/autodeploy, run in its own process group under
+# its own command line: serviceman kills the previous cron run's process group
+# and any orphan still named like the job, so a forked copy of autodeploy
+# would die with the next minute's run. Holds $state/publish.lock (taken by the
+# caller) and releases it when done.
+#   scripts/publish-detached <sha> <state dir>
+set -euo pipefail
+head=$1
+state=$2
+cd "$(dirname "$0")/.."
+log() { echo "$(date '+%Y-%m-%d %-I:%M %p') $*"; }
+tmp=$(mktemp -d)
+trap 'rmdir "$state/publish.lock"; rm -rf "$tmp"' EXIT
+git archive "$head" | tar -x -C "$tmp"
+base=$(node -p 'require("./package.json").version.split(".").slice(0,2).join(".")')
+version="$base.$(git rev-list --count "$head")"
+(cd "$tmp" && npm version "$version" --no-git-tag-version --allow-same-version >/dev/null)
+log "Publishing $version"
+"$tmp/scripts/publish" && echo "$head" > "$state/published"