antri_cli 1.45.0 → 1.47.0

package/dist/desktop/public/app.js

@@ -16,6 +16,7 @@ let skillSearchQuery = '';
 
 // Initialize on Load
 document.addEventListener('DOMContentLoaded', async () => {
+  await checkAuthStatus();
   await loadStatus();
   await loadCommands();
   await loadProfiles();
@@ -455,7 +456,24 @@ async function submitPrompt() {
         if (line.startsWith('data: ')) {
           try {
             const data = JSON.parse(line.slice(6));
-            if (data.token) {
+            if (data.requestId && data.name && data.args !== undefined) {
+              // Interactive Permission Request Card
+              const permCard = document.createElement('div');
+              permCard.className = 'permission-prompt-card';
+              permCard.id = `card-${data.requestId}`;
+              permCard.innerHTML = `
+                <div class="perm-title">⚠️ Privacy & Security Permission Request</div>
+                <div class="perm-desc">Agent requested to execute tool: <b style="color:var(--accent-primary);">${data.name}</b></div>
+                <pre class="perm-args">${JSON.stringify(data.args, null, 2)}</pre>
+                <div class="perm-actions">
+                  <button class="perm-btn perm-allow" onclick="respondDesktopPermission('${data.requestId}', true, false)">Allow Once</button>
+                  <button class="perm-btn perm-always" onclick="respondDesktopPermission('${data.requestId}', true, true)">Always Allow</button>
+                  <button class="perm-btn perm-deny" onclick="respondDesktopPermission('${data.requestId}', false, false)">Deny</button>
+                </div>
+              `;
+              assistantMsgEl.insertBefore(permCard, contentEl);
+              scrollToBottom();
+            } else if (data.token) {
               accumulated += data.token;
               contentEl.textContent = accumulated;
               scrollToBottom();
@@ -479,6 +497,26 @@ async function submitPrompt() {
   }
 }
 
+async function respondDesktopPermission(requestId, allowed, alwaysAllow) {
+  const card = document.getElementById(`card-${requestId}`);
+  if (card) {
+    card.innerHTML = `<div style="font-size:12px;font-weight:600;color:${allowed ? '#10b981' : '#f43f5e'};padding:4px 0;">${allowed ? '✓ Permission granted by user.' : '✕ Permission denied by user.'}</div>`;
+  }
+  try {
+    await fetch('/api/permission/response', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ requestId, allowed, alwaysAllow }),
+    });
+    if (alwaysAllow) {
+      showToast('Permissions set to Always-Allow.');
+      await loadStatus();
+    }
+  } catch (e) {
+    console.error('Failed to submit permission response:', e);
+  }
+}
+
 function appendMessage(role, text) {
   const container = document.getElementById('chat-messages');
   const row = document.createElement('div');
@@ -688,6 +726,37 @@ async function saveActiveProfile() {
   showToast('Profile saved successfully.');
 }
 
+async function pushProfilesToCloud() {
+  try {
+    showToast('Pushing profiles to Google Cloud Firestore...');
+    const res = await fetch('/api/profile/push', { method: 'POST' });
+    const data = await res.json();
+    if (data.success) {
+      showToast(`Pushed ${data.count} profile(s) to Google Cloud Firestore.`);
+    } else {
+      showToast(`Push failed: ${data.error || 'Check network connection'}`, true);
+    }
+  } catch (err) {
+    showToast(`Push failed: ${err.message}`, true);
+  }
+}
+
+async function pullProfilesFromCloud() {
+  try {
+    showToast('Pulling profiles from Google Cloud Firestore...');
+    const res = await fetch('/api/profile/pull', { method: 'POST' });
+    const data = await res.json();
+    if (data.success) {
+      await loadProfiles();
+      showToast(`Pulled ${data.count} profile(s) from Google Cloud Firestore.`);
+    } else {
+      showToast(`Pull failed: ${data.error || 'Check network connection'}`, true);
+    }
+  } catch (err) {
+    showToast(`Pull failed: ${err.message}`, true);
+  }
+}
+
 function exportActiveProfile() {
   const activeTitle = document.getElementById('active-profile-title').textContent || 'profile.md';
   const content = document.getElementById('profile-editor').value;
@@ -953,3 +1022,96 @@ async function loadMemory() {
     console.error('Failed to load memory:', err);
   }
 }
+
+// Authentication Helpers
+let currentAuthUser = null;
+
+async function checkAuthStatus() {
+  try {
+    const res = await fetch('/api/auth/status');
+    const data = await res.json();
+    const dot = document.getElementById('auth-status-dot');
+    const text = document.getElementById('auth-status-text');
+
+    if (data.isAuthenticated && data.user) {
+      currentAuthUser = data.user;
+      if (dot) dot.classList.add('logged-in');
+      if (text) text.textContent = data.user.email.split('@')[0];
+    } else {
+      currentAuthUser = null;
+      if (dot) dot.classList.remove('logged-in');
+      if (text) text.textContent = 'Login';
+    }
+  } catch (e) {
+    console.error('Failed to check auth status:', e);
+  }
+}
+
+function openAuthModal() {
+  const modal = document.getElementById('auth-modal');
+  const formView = document.getElementById('auth-form-view');
+  const loggedView = document.getElementById('auth-logged-view');
+  const emailText = document.getElementById('logged-user-email');
+  const idText = document.getElementById('logged-user-id');
+
+  if (currentAuthUser) {
+    if (formView) formView.style.display = 'none';
+    if (loggedView) loggedView.style.display = 'block';
+    if (emailText) emailText.textContent = currentAuthUser.email;
+    if (idText) idText.textContent = `Cloud Partition: ${currentAuthUser.userId}`;
+  } else {
+    if (formView) formView.style.display = 'block';
+    if (loggedView) loggedView.style.display = 'none';
+  }
+
+  if (modal) modal.style.display = 'flex';
+}
+
+function closeAuthModal() {
+  const modal = document.getElementById('auth-modal');
+  if (modal) modal.style.display = 'none';
+}
+
+async function submitDesktopLogin() {
+  const emailInput = document.getElementById('modal-email-input');
+  const passInput = document.getElementById('modal-pass-input');
+  const email = (emailInput ? emailInput.value : '').trim();
+  const password = passInput ? passInput.value : '';
+
+  if (!email || !email.includes('@')) {
+    alert('Please enter a valid email address.');
+    return;
+  }
+
+  try {
+    const res = await fetch('/api/auth/login', {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ email, password }),
+    });
+    const data = await res.json();
+    if (data.success && data.user) {
+      currentAuthUser = data.user;
+      closeAuthModal();
+      await checkAuthStatus();
+      await loadProfiles();
+      showToast(`Logged in as ${data.user.email}`);
+    } else {
+      alert(data.error || 'Login failed.');
+    }
+  } catch (err) {
+    alert('Login error: ' + err.message);
+  }
+}
+
+async function submitDesktopLogout() {
+  try {
+    await fetch('/api/auth/logout', { method: 'POST' });
+    currentAuthUser = null;
+    closeAuthModal();
+    await checkAuthStatus();
+    showToast('Logged out of ANTRI.');
+  } catch (err) {
+    console.error('Logout error:', err);
+  }
+}

package/dist/desktop/public/index.html

@@ -15,7 +15,7 @@
   <header class="app-header">
     <div class="brand-zone">
       <span class="logo-mark">ANTRI</span>
-      <span class="version-tag">v1.45.0</span>
+      <span class="version-tag">v1.47.0</span>
     </div>
 
     <!-- Mode Toggle -->
@@ -63,6 +63,11 @@
       <button id="btn-perms-toggle" class="perms-badge" onclick="toggleAlwaysAllow()">
         <span id="perms-text">Ask-First</span>
       </button>
+
+      <button id="btn-auth-status" class="auth-header-btn" onclick="openAuthModal()">
+        <span id="auth-status-dot" class="status-dot"></span>
+        <span id="auth-status-text">Login</span>
+      </button>
     </div>
   </header>
 
@@ -276,6 +281,8 @@
             <input type="text" id="new-profile-name" placeholder="New profile name (e.g. backend_architect)" />
             <button class="action-btn" onclick="createProfile()">+ Create</button>
             <button class="action-btn-secondary" onclick="document.getElementById('profile-import-input').click()">📁 Import .md</button>
+            <button class="action-btn-secondary" onclick="pushProfilesToCloud()">☁️ Push</button>
+            <button class="action-btn-secondary" onclick="pullProfilesFromCloud()">☁️ Pull</button>
           </div>
         </div>
 
@@ -378,6 +385,36 @@
     </main>
   </div>
 
+  <!-- AUTH MODAL -->
+  <div id="auth-modal" class="modal-backdrop" style="display:none;" onclick="if(event.target===this)closeAuthModal()">
+    <div class="modal-box">
+      <div class="modal-header">
+        <h3 id="modal-auth-title">ANTRI Account</h3>
+        <button class="modal-close" onclick="closeAuthModal()">✕</button>
+      </div>
+      <div class="modal-body" id="modal-auth-body">
+        <div id="auth-form-view">
+          <p style="font-size:13px;color:var(--text-muted);margin-bottom:16px;">Sign in to sync your thinking profiles and memories across CLI, Desktop, and Mobile.</p>
+          <div style="margin-bottom:12px;">
+            <label style="display:block;font-size:12px;font-weight:600;margin-bottom:6px;">Email Address</label>
+            <input type="email" id="modal-email-input" class="modal-input" placeholder="user@gmail.com" />
+          </div>
+          <div style="margin-bottom:16px;">
+            <label style="display:block;font-size:12px;font-weight:600;margin-bottom:6px;">Password</label>
+            <input type="password" id="modal-pass-input" class="modal-input" placeholder="••••••••" />
+          </div>
+          <button class="action-btn" style="width:100%;margin-bottom:8px;" onclick="submitDesktopLogin()">Sign In / Register</button>
+        </div>
+        <div id="auth-logged-view" style="display:none;text-align:center;padding:12px 0;">
+          <div style="font-size:32px;margin-bottom:8px;">👤</div>
+          <div id="logged-user-email" style="font-weight:700;font-size:15px;color:var(--primary);margin-bottom:4px;"></div>
+          <div id="logged-user-id" style="font-size:12px;color:var(--text-muted);margin-bottom:16px;"></div>
+          <button class="action-btn-danger" style="width:100%;" onclick="submitDesktopLogout()">Logout</button>
+        </div>
+      </div>
+    </div>
+  </div>
+
   <script src="app.js"></script>
 </body>
 </html>

package/dist/desktop/public/style.css

@@ -1146,3 +1146,176 @@ body.antri-app {
   transform: translateY(0);
 }
 
+/* Auth Header Button & Modal */
+.auth-header-btn {
+  background: var(--bg-surface);
+  border: 1px solid var(--border-color);
+  color: var(--text-primary);
+  padding: 0.35rem 0.75rem;
+  border-radius: var(--radius-xs);
+  font-size: 0.8rem;
+  font-weight: 600;
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  cursor: pointer;
+  transition: all 0.15s ease;
+}
+
+.auth-header-btn:hover {
+  background: var(--bg-surface-elevated);
+  border-color: var(--accent-primary);
+}
+
+.status-dot {
+  width: 7px;
+  height: 7px;
+  border-radius: 50%;
+  background: #f43f5e;
+}
+
+.status-dot.logged-in {
+  background: #10b981;
+}
+
+.modal-backdrop {
+  position: fixed;
+  inset: 0;
+  background: rgba(0, 0, 0, 0.6);
+  backdrop-filter: blur(4px);
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  z-index: 9999;
+}
+
+.modal-box {
+  background: var(--bg-surface-elevated, #18181b);
+  border: 1px solid var(--border-color, #27272a);
+  border-radius: 12px;
+  width: 100%;
+  max-width: 400px;
+  padding: 24px;
+  box-shadow: 0 10px 30px rgba(0, 0, 0, 0.4);
+}
+
+.modal-header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  margin-bottom: 16px;
+}
+
+.modal-close {
+  background: transparent;
+  border: none;
+  color: var(--text-tertiary);
+  font-size: 16px;
+  cursor: pointer;
+}
+
+.modal-close:hover {
+  color: var(--text-primary);
+}
+
+.modal-input {
+  width: 100%;
+  padding: 10px 12px;
+  background: var(--bg-surface, #09090b);
+  border: 1px solid var(--border-color, #27272a);
+  border-radius: 6px;
+  color: var(--text-primary, #f4f4f5);
+  font-size: 13px;
+  outline: none;
+}
+
+.modal-input:focus {
+  border-color: var(--accent-primary, #6366f1);
+}
+
+.action-btn-danger {
+  background: #dc2626;
+  color: #fff;
+  border: none;
+  padding: 8px 16px;
+  border-radius: 6px;
+  font-weight: 600;
+  font-size: 13px;
+  cursor: pointer;
+}
+
+.action-btn-danger:hover {
+  background: #b91c1c;
+}
+
+/* Tool Permission Prompt Card */
+.permission-prompt-card {
+  background: var(--bg-surface-elevated, #18181b);
+  border: 1px solid #f59e0b;
+  border-radius: 8px;
+  padding: 12px 14px;
+  margin: 10px 0;
+  box-shadow: 0 4px 12px rgba(245, 158, 11, 0.1);
+}
+
+.perm-title {
+  font-size: 12px;
+  font-weight: 700;
+  color: #f59e0b;
+  margin-bottom: 4px;
+}
+
+.perm-desc {
+  font-size: 13px;
+  color: var(--text-primary);
+  margin-bottom: 8px;
+}
+
+.perm-args {
+  background: var(--bg-surface, #09090b);
+  border: 1px solid var(--border-color);
+  padding: 8px 10px;
+  border-radius: 6px;
+  font-family: var(--font-mono);
+  font-size: 11px;
+  max-height: 120px;
+  overflow-y: auto;
+  margin-bottom: 10px;
+  color: #38bdf8;
+}
+
+.perm-actions {
+  display: flex;
+  gap: 8px;
+}
+
+.perm-btn {
+  padding: 6px 12px;
+  border-radius: 4px;
+  font-size: 12px;
+  font-weight: 600;
+  cursor: pointer;
+  border: none;
+  transition: opacity 0.15s;
+}
+
+.perm-btn:hover {
+  opacity: 0.9;
+}
+
+.perm-allow {
+  background: #10b981;
+  color: #fff;
+}
+
+.perm-always {
+  background: #6366f1;
+  color: #fff;
+}
+
+.perm-deny {
+  background: #ef4444;
+  color: #fff;
+}
+
+

package/dist/desktop/server.d.ts

@@ -2,7 +2,10 @@ export declare class DesktopServer {
     private server;
     private port;
     private activeAgent;
+    private pendingPermissions;
+    private currentSseSender;
     constructor();
+    private setupPermissionHandler;
     start(): Promise<number>;
     stop(): Promise<void>;
     private handleApi;

package/dist/desktop/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/desktop/server.ts"],"names":[],"mappings":"AAqCA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,IAAI,CAAQ;IACpB,OAAO,CAAC,WAAW,CAAa;;IAMnB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAqExB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAUpB,SAAS;WA4XH,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAyBnD"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/desktop/server.ts"],"names":[],"mappings":"AAqCA,qBAAa,aAAa;IACxB,OAAO,CAAC,MAAM,CAA4B;IAC1C,OAAO,CAAC,IAAI,CAAQ;IACpB,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,kBAAkB,CAAiD;IAC3E,OAAO,CAAC,gBAAgB,CAAqD;;IAO7E,OAAO,CAAC,sBAAsB;IA2BjB,KAAK,IAAI,OAAO,CAAC,MAAM,CAAC;IAqExB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;YAUpB,SAAS;WA2aH,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;CAyBnD"}

package/dist/desktop/server.js

@@ -12,7 +12,7 @@ import { profileManager } from '../profiles/profileManager.js';
 import { memoryManager } from '../memory/manager.js';
 import { skillManager } from '../skills/skillManager.js';
 import { SkillSynthesizer } from '../core/skillSynthesizer.js';
-import { getAllActiveTools } from '../core/tools.js';
+import { getAllActiveTools, ToolExecutor } from '../core/tools.js';
 import { getAvailableModels } from '../providers/models.js';
 import { PROMPT_TOOLKIT_COMMANDS } from '../cli/promptToolkit.js';
 import { FilePickerService } from '../cli/dialogs/filePicker.js';
@@ -36,8 +36,37 @@ export class DesktopServer {
     server = null;
     port = 3456;
     activeAgent;
+    pendingPermissions = new Map();
+    currentSseSender = null;
     constructor() {
         this.activeAgent = new AntriAgent(configManager.get());
+        this.setupPermissionHandler();
+    }
+    setupPermissionHandler() {
+        this.activeAgent.getToolExecutor().setPermissionHandler(async (name, args) => {
+            const cfg = configManager.get();
+            if (cfg.alwaysAllow)
+                return true;
+            if (!ToolExecutor.isSensitive(name))
+                return true;
+            const reqId = `perm_${Date.now()}_${Math.random().toString(36).slice(2, 7)}`;
+            if (this.currentSseSender) {
+                this.currentSseSender('permission_request', {
+                    requestId: reqId,
+                    name,
+                    args,
+                });
+            }
+            return new Promise((resolve) => {
+                this.pendingPermissions.set(reqId, resolve);
+                setTimeout(() => {
+                    if (this.pendingPermissions.has(reqId)) {
+                        this.pendingPermissions.delete(reqId);
+                        resolve(false);
+                    }
+                }, 90000);
+            });
+        });
     }
     async start() {
         const publicDir = getPublicDir();
@@ -213,6 +242,22 @@ export class DesktopServer {
                     }));
                     return;
                 }
+                // POST /api/permission/response (Desktop tool confirmation response)
+                if (pathname === '/api/permission/response' && req.method === 'POST') {
+                    const { requestId, allowed, alwaysAllow } = payload;
+                    if (alwaysAllow) {
+                        configManager.setAlwaysAllow(true);
+                        this.activeAgent.updateConfig(configManager.get());
+                    }
+                    const resolver = this.pendingPermissions.get(requestId);
+                    if (resolver) {
+                        this.pendingPermissions.delete(requestId);
+                        resolver(!!allowed);
+                    }
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ success: true }));
+                    return;
+                }
                 // POST /api/chat (Real-Time SSE Token Streaming)
                 if (pathname === '/api/chat' && req.method === 'POST') {
                     res.writeHead(200, {
@@ -223,6 +268,7 @@ export class DesktopServer {
                     const sendEvent = (event, data) => {
                         res.write(`event: ${event}\ndata: ${JSON.stringify(data)}\n\n`);
                     };
+                    this.currentSseSender = sendEvent;
                     const userPrompt = payload.prompt || '';
                     this.activeAgent.updateConfig(configManager.get());
                     try {
@@ -241,6 +287,9 @@ export class DesktopServer {
                         sendEvent('error', { message: err.message });
                         res.end();
                     }
+                    finally {
+                        this.currentSseSender = null;
+                    }
                     return;
                 }
                 // POST /api/debate (SSE Streaming)
@@ -337,6 +386,14 @@ export class DesktopServer {
                     res.end(JSON.stringify({ success: true }));
                     return;
                 }
+                // GET/POST /api/auth/status
+                if (pathname === '/api/auth/status') {
+                    const { AuthManager } = await import('../cloud/auth.js');
+                    const user = AuthManager.getCurrentUser();
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify({ isAuthenticated: !!user, user }));
+                    return;
+                }
                 // POST /api/auth/login
                 if (pathname === '/api/auth/login' && req.method === 'POST') {
                     const { AuthManager } = await import('../cloud/auth.js');
@@ -391,6 +448,22 @@ export class DesktopServer {
                     res.end(JSON.stringify({ success: ok }));
                     return;
                 }
+                // POST /api/profile/push
+                if (pathname === '/api/profile/push' && req.method === 'POST') {
+                    const { FirestoreSyncManager } = await import('../cloud/firestore.js');
+                    const result = await FirestoreSyncManager.pushToFirestore();
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify(result));
+                    return;
+                }
+                // POST /api/profile/pull
+                if (pathname === '/api/profile/pull' && req.method === 'POST') {
+                    const { FirestoreSyncManager } = await import('../cloud/firestore.js');
+                    const result = await FirestoreSyncManager.pullFromFirestore();
+                    res.writeHead(200, { 'Content-Type': 'application/json' });
+                    res.end(JSON.stringify(result));
+                    return;
+                }
                 // POST /api/skill/create
                 if (pathname === '/api/skill/create' && req.method === 'POST') {
                     const skill = skillManager.createSkill(payload.name, payload.description || '', payload.category || 'Custom', payload.triggers || [], payload.content);