@songsid/agend 2.0.11-beta.3 → 2.0.11-beta.4

package/dist/fleet-manager.d.ts

@@ -66,6 +66,7 @@ export declare class FleetManager implements FleetContext, LifecycleContext, Arc
     private mirrorTimer;
     private sseClients;
     private webToken;
+    private viewToken;
     constructor(dataDir: string);
     lastActivityMs(name: string): number;
     private getInstanceIdle;

package/dist/fleet-manager.js

@@ -33,6 +33,7 @@ import { TopicArchiver } from "./topic-archiver.js";
 import { StatuslineWatcher } from "./statusline-watcher.js";
 import { outboundHandlers } from "./outbound-handlers.js";
 import { handleWebRequest, broadcastSseEvent } from "./web-api.js";
+import { handleViewRequest, isViewPath } from "./view-api.js";
 import { handleAgentRequest } from "./agent-endpoint.js";
 import { ClassicChannelManager, classicInstanceName } from "./classic-channel-manager.js";
 import { getTmuxSession } from "./config.js";
@@ -115,6 +116,7 @@ export class FleetManager {
     // Web UI: SSE clients + auth token
     sseClients = new Set();
     webToken = null;
+    viewToken = null;
     constructor(dataDir) {
         this.dataDir = dataDir;
         this.lifecycle = new InstanceLifecycle(this);
@@ -3955,6 +3957,15 @@ When users create specialized instances, suggest these configurations:
         catch {
             // best-effort
         }
+        // Separate read-only token for the /view page: grants terminal-view + profile
+        // read, but never write (POSTs still require the full web token).
+        this.viewToken = randomBytes(24).toString("hex");
+        const viewTokenPath = join(this.dataDir, "view.token");
+        writeFileSync(viewTokenPath, this.viewToken, { mode: 0o600 });
+        try {
+            chmodSync(viewTokenPath, 0o600);
+        }
+        catch { /* best-effort */ }
         this.healthServer = createServer((req, res) => {
             res.setHeader("Content-Type", "application/json");
             // Public health probe — no auth required.
@@ -3964,6 +3975,10 @@ When users create specialized instances, suggest these configurations:
             else if (req.method === "POST" && req.url === "/agent") {
                 // /agent handles its own instance-level auth via X-Agend-Instance-Token
             }
+            else if (isViewPath(new URL(req.url ?? "/", `http://localhost:${port}`).pathname)) {
+                // /view routes accept the read-only view.token (or web.token) and do
+                // their own per-method auth in view-api.ts — skip the web-token gate.
+            }
             else {
                 // All other endpoints require a valid token (query ?token= or X-Agend-Token header).
                 // /ui/* will also re-check in web-api.ts, which is harmless.
@@ -4147,6 +4162,8 @@ When users create specialized instances, suggest these configurations:
             }
             // ── Web UI endpoints (delegated to web-api.ts) ─────
             const url = new URL(req.url ?? "/", `http://localhost:${port}`);
+            if (handleViewRequest(req, res, url, this))
+                return;
             if (handleWebRequest(req, res, url, this))
                 return;
             res.writeHead(404);
@@ -4188,6 +4205,7 @@ When users create specialized instances, suggest these configurations:
             this.logger.info({ port }, "Health endpoint listening");
         });
         this.logger.info({ url: `http://localhost:${port}/ui?token=${this.webToken}` }, "Web UI available");
+        this.logger.info({ url: `http://localhost:${port}/view?token=${this.viewToken}` }, "Web View available");
     }
     getUiStatus() {
         const instances = Object.keys(this.fleetConfig?.instances ?? {}).map(name => {