@xuda.io/ai_module 1.1.5643 → 1.1.5645

package/index.mjs

@@ -253,7 +253,19 @@ const get_openai_codex_exec_args = function (codex_model, opts = {}) {
   // end-user prompts can't run Codex with full host access. The studio/vibe flow
   // passes nothing and keeps the global setting.
   const sandbox = opts.sandbox || _conf.openai_codex_sandbox;
-  const bypass_approvals_and_sandbox = opts.sandbox ? false : typeof _conf.openai_codex_bypass_approvals_and_sandbox === 'undefined' ? true : _conf.openai_codex_bypass_approvals_and_sandbox;
+  // Precedence: an explicit per-call sandbox always confines the run; opts.bypass_sandbox is
+  // the one deliberate escape hatch (the customer-VPS vibe build, which runs on the
+  // customer's OWN box and needs to install and restart things there); otherwise the config
+  // decides. The config default is now false, so a new call site that forgets to say
+  // anything gets a CONFINED run instead of full host access, which is how the mentor Codex
+  // tool ended up unsandboxed.
+  const bypass_approvals_and_sandbox = opts.sandbox
+    ? false
+    : opts.bypass_sandbox === true
+      ? true
+      : typeof _conf.openai_codex_bypass_approvals_and_sandbox === 'undefined'
+        ? true
+        : _conf.openai_codex_bypass_approvals_and_sandbox;
 
   if (codex_model) {
     // codex_model is a catalog code (user pick or cheapest default); the Codex CLI
@@ -333,6 +345,7 @@ const LIST_SORT_PATHS = {
 };
 
 const account_ms = await import(`${module_path}/account_module/index_ms.mjs`);
+const ticket_ms = await import(`${module_path}/ticket_module/index_ms.mjs`);
 const drive_ms = await import(`${module_path}/drive_module/index_ms.mjs`);
 const jobs_ms = await import(`${module_path}/jobs_module/index_ms.mjs`);
 const team_ms = await import(`${module_path}/team_module/index_ms.mjs`);
@@ -1386,6 +1399,9 @@ export const execute_codex_request = async function (req_or_ip, prompt_arg, atta
     // Optional per-call hardening (used by the AI site generator for untrusted
     // prompts): a confined sandbox + a hard wall-clock timeout on the codex run.
     const sandbox = is_req_call ? req_or_ip.sandbox : undefined;
+    // Explicit opt-out of the confined default, for runs that legitimately need full access
+    // on a box the customer owns. Never set this for anything running on Xuda infrastructure.
+    const bypass_sandbox = is_req_call ? req_or_ip.bypass_sandbox === true : false;
     const codex_timeout = is_req_call ? req_or_ip.codex_timeout : undefined;
     // Optional: a scoped MCP server exposed to codex (the in-app vibe's Xuda
     // platform actions). { url, bearer_env_var, bearer_value } — the bearer is
@@ -1594,7 +1610,7 @@ ${prompt}`;
     }
 
     const openai_codex_command = get_openai_codex_cli_command();
-    let codex_args = get_openai_codex_exec_args(codex_model, { sandbox });
+    let codex_args = get_openai_codex_exec_args(codex_model, { sandbox, bypass_sandbox });
     if (agent_mcp && agent_mcp.url) {
       // Register the Xuda MCP server for this run. Global `-c` overrides must
       // precede the `exec` subcommand (args[0]), so prepend them. The bearer
@@ -4696,7 +4712,7 @@ export const classify_external_app_scan = async (req) => {
   }
 };
 
-// Triage a CPI error incident for the central error resolver (support_module).
+// Triage a CPI error incident for the central error resolver (ticket_module).
 // The Zod schema lives here because zodTextFormat schemas cannot cross the
 // message broker (it JSON-serializes args and strips functions). The resolver
 // passes a plain-JSON { incident, catalog_entry } payload and gets back a plain
@@ -4987,10 +5003,17 @@ const get_error_message = function (err, fallback = 'Unknown error') {
 };
 
 const get_plugin_import_specifier = function (app_id, plugin_name, resource, dev = true) {
-  const absolute_path = dev ? path.join(process.env.XUDA_HOME, 'plugins', plugin_name, resource) : path.join(_conf.plugins_drive_path, app_id, 'node_modules', plugin_name, resource);
+  // `dev` asks for the repo working copy under $XUDA_HOME/plugins, which only
+  // exists on the debug box. Anywhere else (master, the regions) that directory
+  // is absent, so the plugin has to be the npm copy installed into the app's own
+  // plugins folder. Without the is_debug gate every plugin-backed agent tool
+  // resolved to a path that does not exist in production.
+  const use_source = dev && _conf.is_debug;
+  const absolute_path = use_source ? path.join(process.env.XUDA_HOME, 'plugins', plugin_name, resource) : path.join(_conf.plugins_drive_path, app_id, 'node_modules', plugin_name, resource);
 
   const file_url = pathToFileURL(absolute_path);
-  if (dev) {
+  if (use_source) {
+    // Cache-bust so an edit to the working copy is picked up without a restart.
     file_url.searchParams.set('ts', `${Date.now()}`);
   }
 
@@ -7037,6 +7060,11 @@ ${conversation_history || `User (dashboard): ${prompt}`}
           prompt: codex_prompt,
           attachments,
           stream: false,
+          // Deliberate: this build runs on the CUSTOMER'S OWN VPS over SSH and has to install
+          // packages, write outside a workspace and restart services there, so it keeps full
+          // access. Stated explicitly now that the global default is confined, so the choice
+          // is visible instead of inherited. Nothing on Xuda infrastructure may set this.
+          bypass_sandbox: true,
           ...(agent_key ? { agent_mcp: { url: 'http://localhost:3012/mcp', bearer_env_var: 'XUDA_AGENT_KEY', bearer_value: agent_key } } : {}),
         },
         job_id,
@@ -9092,7 +9120,9 @@ const run_plugin = async function (app_id, uid, plugin_name, method, prop_data,
     const fields = await get_fields_data(methods[method].fields, prop_data);
     const params = fields;
     const env = { couch, app_id, uid, userName, agent_info };
-    const setup_doc = plugin_doc.setup || { OPENAI_API_KEY: _conf.OPENAI_API_KEY };
+    // Platform credentials come from the box's secrets at call time, never from
+    // the plugin package or a stored per-app copy. See with_platform_plugin_secrets.
+    const setup_doc = _common.with_platform_plugin_secrets(plugin_doc.setup);
 
     ///////////////////////
     const execute_server_script = async function (req, app_id_reference, server_script, method, params, setup_doc) {
@@ -9217,7 +9247,9 @@ const get_plugin_tool = async function (app_id, uid, plugin_name, method, prop_d
     const fields = await get_fields_data(_method.fields, prop_data);
     const params = fields;
     const env = { couch, app_id, uid, userName, agent_info, account_profile_obj };
-    const setup_doc = plugin_doc.setup || { OPENAI_API_KEY: _conf.OPENAI_API_KEY };
+    // Platform credentials come from the box's secrets at call time, never from
+    // the plugin package or a stored per-app copy. See with_platform_plugin_secrets.
+    const setup_doc = _common.with_platform_plugin_secrets(plugin_doc.setup);
 
     ///////////////////////
     const execute_server_script = async function (req, app_id_reference, server_script, method, params, setup_doc) {
@@ -17387,7 +17419,40 @@ export const contact_form_submit = async function (req, job_id, headers) {
         const body_parts = [message];
         const detail_bits = [phone && `Phone: ${phone}`, company && `Company: ${company}`].filter(Boolean);
         if (detail_bits.length) body_parts.push(detail_bits.join(' | '));
-        await _contact_form_create_ticket(account_profile_info, contact_id, subject, body_parts.join('\n\n'), origin);
+        const _conv = await _contact_form_create_ticket(account_profile_info, contact_id, subject, body_parts.join('\n\n'), origin);
+
+        // Source 6 of docs/plans/xuda-tickets.md. The conversation above stays the
+        // human-readable thread and the contact mirror; this ALSO files the uniform
+        // ticket so a contact-form submission shows up in the Tickets manager next
+        // to every other source, with the same status, topic, action and SLA. Best
+        // effort on purpose: the visitor already has their conversation, so a
+        // ticketing failure must never fail the submission.
+        try {
+          const _tk = await ticket_ms.ticket_submit({
+            source: 'profile_contact_form',
+            channel: 'form',
+            owner_uid: account_profile_info.uid,
+            owner_profile_id: account_profile_info.account_profile_id,
+            name,
+            email,
+            phone,
+            company,
+            subject,
+            details: body_parts.join('\n\n'),
+            origin: String(origin || '').slice(0, 200),
+          });
+          // Link both ways so the manager can jump to the thread and vice versa.
+          if (_tk?.code > 0 && _tk.data?._id && _conv?._id) {
+            const _c = await db_module.get_app_couch_doc(account_profile_info.app_id, _conv._id);
+            if (_c.code > -1 && _c.data) {
+              _c.data.ticket_id = _tk.data._id;
+              _c.data.ticket_no = _tk.data.ticket_no;
+              await db_module.save_app_couch_doc(account_profile_info.app_id, _c.data);
+            }
+          }
+        } catch (tk_err) {
+          console.warn('[contact_form] uniform ticket not filed:', tk_err.message);
+        }
 
         // Owner notification email (platform template).
         if (config.notify_email !== false) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@xuda.io/ai_module",
-  "version": "1.1.5643",
+  "version": "1.1.5645",
   "description": "Xuda AI Module",
   "main": "index.mjs",
   "type": "module",