@yeaft/webchat-agent 1.0.375 → 1.0.376

package/index.js

@@ -22,6 +22,7 @@ import { loadNodePty } from './terminal.js';
 import { connect } from './connection.js';
 import { loadMcpServers } from './mcp.js';
 import { getManagedSandboxIdentity } from './managed-sandbox/identity-store.js';
+import { SAFE_REMOTE_UPGRADE_CAPABILITY } from './upgrade-command.js';
 import { loadConfig as loadYeaftConfig } from './yeaft/config.js';
 import {
   ensureManagedCliTools,
@@ -157,7 +158,7 @@ async function detectCapabilities() {
   // agent build can speak plaintext WS frames. New servers see this and
   // flip `agent.encryptOutbound = false`, stopping outbound encryption
   // to this peer. Old servers ignore the unknown capability token.
-  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', 'work_center', 'work_center_message_v2', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch'];
+  const capabilities = ['background_tasks', 'file_editor', 'ping_session', 'plaintext-ok', SAFE_REMOTE_UPGRADE_CAPABILITY, 'work_center', 'work_center_message_v2', 'session_history_search', 'session_history_outline', 'session_history_window_prefetch'];
   if (MANAGED_SANDBOX_IDENTITY) capabilities.push('managed-sandbox');
   if (process.platform === 'linux') capabilities.push('work_item_attachments');
   const pty = await loadNodePty();

package/local-runtime/server/handlers/agent-sync.js

@@ -176,7 +176,7 @@ export async function handleAgentSync(agentId, agent, msg) {
           (agent.ownerId && client.userId === agent.ownerId) ||
           (!agent.ownerId && client.role === 'admin')
         )) {
-          await sendToWebClient(client, { type: 'upgrade_agent_ack', agentId, success: msg.success, error: msg.error, alreadyLatest: msg.alreadyLatest, version: msg.version, reason: msg.reason, currentNode: msg.currentNode, requiredNode: msg.requiredNode });
+          await sendToWebClient(client, { type: 'upgrade_agent_ack', agentId, success: msg.success, error: msg.error, alreadyLatest: msg.alreadyLatest, version: msg.version, reason: msg.reason, currentNode: msg.currentNode, requiredNode: msg.requiredNode, requiredCapability: msg.requiredCapability });
         }
       }
       break;

package/local-runtime/server/handlers/client-misc.js

@@ -3,23 +3,13 @@ import {
   sendToWebClient, forwardToAgent, broadcastAgentList
 } from '../ws-utils.js';
 
-// v1.0.342 is the first release with the bootstrap -> detached runner handoff.
-// Older Windows Agents can lose their updater to PM2 tree-kill before npm runs.
-export const MIN_SAFE_REMOTE_UPGRADE_VERSION = '1.0.342';
+// Only Agents that explicitly advertise the package-replacement-safe updater
+// may receive remote upgrade commands. Version thresholds are insufficient:
+// builds without this capability may still inherit the installed package cwd.
+export const SAFE_REMOTE_UPGRADE_CAPABILITY = 'remote_upgrade_safe';
 
-function parseVersion(version) {
-  const match = String(version || '').trim().match(/^v?(\d+)\.(\d+)\.(\d+)$/u);
-  return match ? match.slice(1).map(Number) : null;
-}
-
-export function requiresManualUpgradeBridge(version) {
-  const current = parseVersion(version);
-  const minimum = parseVersion(MIN_SAFE_REMOTE_UPGRADE_VERSION);
-  if (!current || !minimum) return true;
-  for (let index = 0; index < minimum.length; index++) {
-    if (current[index] !== minimum[index]) return current[index] < minimum[index];
-  }
-  return false;
+export function requiresManualUpgradeBridge(capabilities) {
+  return !Array.isArray(capabilities) || !capabilities.includes(SAFE_REMOTE_UPGRADE_CAPABILITY);
 }
 
 /**
@@ -46,15 +36,15 @@ export async function handleClientMisc(clientId, client, msg, checkAgentAccess)
       if (!upgradeAgentId) break;
       if (!await checkAgentAccess(upgradeAgentId)) break;
       const upgradeAgent = agents.get(upgradeAgentId);
-      if (requiresManualUpgradeBridge(upgradeAgent?.version)) {
+      if (requiresManualUpgradeBridge(upgradeAgent?.capabilities)) {
         await sendToWebClient(client, {
           type: 'upgrade_agent_ack',
           agentId: upgradeAgentId,
           success: false,
           reason: 'manual_upgrade_required',
           version: upgradeAgent?.version || null,
-          minimumVersion: MIN_SAFE_REMOTE_UPGRADE_VERSION,
-          error: `Agent ${upgradeAgent?.version || 'unknown'} predates the safe remote-upgrade handoff; manually install ${MIN_SAFE_REMOTE_UPGRADE_VERSION} or newer once`,
+          requiredCapability: SAFE_REMOTE_UPGRADE_CAPABILITY,
+          error: `Agent ${upgradeAgent?.version || 'unknown'} does not advertise the safe remote-upgrade contract. First stop the selected Agent/service on that machine: if it runs under PM2 or another service manager, stop that exact instance there; if it runs in a foreground terminal, terminate that process. Confirm that process has exited, then run "npm install -g @yeaft/webchat-agent@latest --registry=https://pkg.yeaft.com/". Finally, restart the same Agent instance with its original configuration.`,
         });
         break;
       }

package/local-runtime/version.json

@@ -1 +1 @@
-{"version":"1.0.375"}
+{"version":"1.0.376"}