@venturewild/workspace 0.3.0 → 0.3.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@venturewild/workspace",
-  "version": "0.3.0",
+  "version": "0.3.1",
   "description": "Claude Code Web — Replit/Lovable-style chat-first browser UI that wraps the AI agent already installed on your machine.",
   "license": "MIT",
   "bin": {

package/server/src/index.mjs

@@ -36,7 +36,15 @@ import { ActivityBus } from './activity.mjs';
 import { loadIdentity, saveIdentity, markOnboarded, TONES } from './agent-identity.mjs';
 import { probeAgentReadiness } from './agent-readiness.mjs';
 import { AutoUpdater, npmInstall, recordUpdate, loadUpdateSettings, PACKAGE_NAME } from './auto-update.mjs';
-import { consentStatus, revokeConsent, readAudit, OPERATE_TIER } from './support-consent.mjs';
+import {
+  consentStatus,
+  revokeConsent,
+  readAudit,
+  grantConsent,
+  OPERATE_TIER,
+  MAX_TIER,
+  MAX_GRANT_MINUTES,
+} from './support-consent.mjs';
 import { ClaudeLoginSession } from './agent-login.mjs';
 import { ErrorReporter } from './error-reporter.mjs';
 import { DaemonBridge } from './daemon.mjs';
@@ -1081,6 +1089,10 @@ export async function createServer(overrides = {}) {
       remainingMs: s.remainingMs,
       active,
       operate,
+      // Whether THIS viewer may grant/revoke (owner only) — drives the banner's
+      // one-tap "Allow VentureWild support" control so consent is never a CLI paste.
+      canGrant: Boolean(ROLE_CAPABILITIES[c.get('role')]?.chatWrite),
+      maxTier: MAX_TIER,
       lastAction: last ? { action: last.action, ts: last.ts, ok: last.ok } : null,
     });
   });
@@ -1092,6 +1104,31 @@ export async function createServer(overrides = {}) {
     return c.json({ audit: readAudit(globalDir(), { limit }) });
   });
 
+  // Phase 4 (Pillar E): the owner grants time-boxed support consent with a UI tap —
+  // so "yes, VentureWild may help" is a browser click, never a terminal paste (the
+  // CLI `support allow` still works too). Owner-only. Operate tiers (3/4) require an
+  // explicit confirmOperate so a stray tap can't hand over agent/shell control.
+  app.post('/api/support/grant', async (c) => {
+    const forbidden = require(c, 'chatWrite');
+    if (forbidden) return forbidden;
+    let body;
+    try {
+      body = await c.req.json();
+    } catch {
+      body = {};
+    }
+    const tier = Math.min(MAX_TIER, Math.max(1, Math.floor(Number(body.tier) || 1)));
+    const minutes = Math.min(MAX_GRANT_MINUTES, Math.max(1, Math.floor(Number(body.minutes) || 30)));
+    if (tier >= OPERATE_TIER && body.confirmOperate !== true) {
+      return c.json({ error: 'operate-confirm-required', tier }, 400);
+    }
+    const rec = grantConsent(globalDir(), { tier, minutes });
+    if (!rec) return c.json({ error: 'write-failed' }, 500);
+    appendLine('operator', `support consent granted via UI tier=${rec.tier} minutes=${minutes}`);
+    activityBus.publish({ type: 'support-granted', tier: rec.tier, at: Date.now() });
+    return c.json({ granted: true, tier: rec.tier, expiresAt: rec.expiresAt });
+  });
+
   app.post('/api/support/revoke', (c) => {
     const forbidden = require(c, 'chatWrite');
     if (forbidden) return forbidden;