claude-simple 0.2.24 → 0.2.26

package/public/locks.js

@@ -0,0 +1,139 @@
+// locks.js — lease locks for the current session (hub or standalone)
+import { ctx, currentAgent, selectedMachineId } from './state.js';
+import { api } from './api.js';
+
+const TTL_SEC = 60;
+const HEARTBEAT_MS = 20_000; // design: ≤25s
+
+let heartbeatTimer = null;
+let acquireInFlight = null;
+
+export function sessionLockKey({
+  sessionId = ctx.sessionId,
+  agent = ctx.agent || currentAgent.peek() || 'claude',
+  machineId = ctx.machineId || selectedMachineId.peek() || 'local',
+} = {}) {
+  if (!sessionId) return null;
+  return `session:${machineId || 'local'}:${agent || 'claude'}:${sessionId}`;
+}
+
+export function canWriteNow() {
+  const role = ctx.role || 'editor';
+  if (role === 'viewer') return false;
+  if (ctx.lock?.foreign) return false;
+  return true;
+}
+
+function emitLockChange() {
+  document.dispatchEvent(new CustomEvent('session-lock-changed', { detail: ctx.lock }));
+}
+
+function setLockState(next) {
+  ctx.lock = { key: null, token: null, holder: null, held: false, foreign: false, ...(next || {}) };
+  emitLockChange();
+}
+
+export async function acquireSessionLock(identity = {}) {
+  const key = sessionLockKey(identity);
+  if (!key) {
+    setLockState({ foreign: false, held: true, unmanaged: true });
+    return { ok: true, skipped: true };
+  }
+  const role = ctx.role || 'editor';
+  if (role === 'viewer') {
+    setLockState({ key, held: false, foreign: true, holder: 'viewer' });
+    return { ok: false, error: 'viewers cannot take exclusive locks', code: 403 };
+  }
+  if (ctx.lock?.key && ctx.lock.key !== key) {
+    await releaseSessionLock();
+  }
+  if (acquireInFlight) return acquireInFlight;
+  acquireInFlight = (async () => {
+    try {
+      const body = {
+        key,
+        kind: 'session',
+        ttlSec: TTL_SEC,
+        exclusive: true,
+        ...(ctx.lock?.token && ctx.lock?.key === key ? { token: ctx.lock.token } : {}),
+      };
+      const lock = await api('POST', '/api/collab/locks', body, undefined, { hub: true });
+      setLockState({
+        key,
+        token: lock.token,
+        holder: lock.holder,
+        held: true,
+        foreign: false,
+        expiresAt: lock.expiresAt,
+        version: lock.version,
+      });
+      startLockHeartbeat();
+      return { ok: true, lock };
+    } catch (err) {
+      const msg = String(err.message || err);
+      const locked = /locked|HTTP 423|423/.test(msg);
+      if (locked) {
+        setLockState({ key, held: false, foreign: true, holder: 'another user' });
+        return { ok: false, code: 423, error: msg };
+      }
+      // Collab API missing (older standalone): do not block typing.
+      setLockState({ key, held: true, foreign: false, unmanaged: true });
+      return { ok: true, skipped: true, error: msg };
+    } finally {
+      acquireInFlight = null;
+    }
+  })();
+  return acquireInFlight;
+}
+
+async function heartbeatLock() {
+  const { key, token, held } = ctx.lock || {};
+  if (!key || !token || !held) return;
+  try {
+    const lock = await api('POST', '/api/collab/lock-action', {
+      key, action: 'heartbeat', token, ttlSec: TTL_SEC,
+    }, undefined, { hub: true });
+    if (lock?.token) ctx.lock.token = lock.token;
+    if (lock?.expiresAt) ctx.lock.expiresAt = lock.expiresAt;
+  } catch (err) {
+    const msg = String(err.message || err);
+    if (/token mismatch|HTTP 409|409|no lock|HTTP 404|404/.test(msg)) {
+      // Lost the lease — try to reclaim if we are still the holder.
+      const result = await acquireSessionLock();
+      if (!result.ok) stopLockHeartbeat();
+    }
+  }
+}
+
+export function startLockHeartbeat() {
+  stopLockHeartbeat();
+  heartbeatTimer = setInterval(() => { heartbeatLock().catch(() => {}); }, HEARTBEAT_MS);
+}
+
+export function stopLockHeartbeat() {
+  if (heartbeatTimer) { clearInterval(heartbeatTimer); heartbeatTimer = null; }
+}
+
+export async function releaseSessionLock() {
+  stopLockHeartbeat();
+  const { key, token } = ctx.lock || {};
+  setLockState({ held: false, foreign: false });
+  if (!key) return;
+  try {
+    await api('POST', '/api/collab/lock-action', {
+      key, action: 'release', token, ttlSec: TTL_SEC,
+    }, undefined, { hub: true });
+  } catch { /* TTL will expire */ }
+}
+
+export async function loadCollabMe() {
+  try {
+    const me = await api('GET', '/api/collab/me', undefined, undefined, { hub: true });
+    ctx.role = me?.role || ctx.role || 'editor';
+    ctx.username = me?.username || ctx.username || null;
+    return me;
+  } catch {
+    if (!ctx.role) ctx.role = 'editor';
+    return null;
+  }
+}

package/public/privacy.html

@@ -0,0 +1,111 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta name="theme-color" content="#0f172a">
+  <meta name="robots" content="index,follow">
+  <title>AgentUI Privacy Policy</title>
+  <style>
+    :root {
+      color-scheme: dark;
+    }
+    body {
+      margin: 0;
+      min-height: 100dvh;
+      font-family: system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif;
+      background: #0f172a;
+      color: #e2e8f0;
+      line-height: 1.6;
+    }
+    main {
+      max-width: 42rem;
+      margin: 0 auto;
+      padding: 2.5rem 1.5rem 4rem;
+    }
+    h1 {
+      font-size: 1.6rem;
+      font-weight: 700;
+      margin: 0 0 0.35rem;
+      letter-spacing: -0.02em;
+    }
+    .updated {
+      color: #94a3b8;
+      font-size: 0.9rem;
+      margin: 0 0 1.75rem;
+    }
+    h2 {
+      font-size: 1.05rem;
+      margin: 1.75rem 0 0.6rem;
+      color: #cbd5e1;
+    }
+    p, li {
+      font-size: 0.95rem;
+      color: #cbd5e1;
+    }
+    p { margin: 0 0 0.85rem; }
+    ul {
+      margin: 0 0 0.85rem;
+      padding-left: 1.2rem;
+    }
+    li { margin: 0.25rem 0; }
+    a {
+      color: #818cf8;
+      text-decoration: none;
+    }
+    a:hover { text-decoration: underline; }
+    code {
+      font-family: ui-monospace, SFMono-Regular, Menlo, Consolas, monospace;
+      font-size: 0.86em;
+      background: #1e293b;
+      border: 1px solid #334155;
+      border-radius: 0.3rem;
+      padding: 0.05rem 0.35rem;
+    }
+  </style>
+</head>
+<body>
+  <main>
+    <h1>AgentUI Privacy Policy</h1>
+    <p class="updated">Last updated: 31 August 2026</p>
+
+    <p>
+      AgentUI (bundle <code>online.llmlife.agentui</code>) is a mobile client for a self-hosted AI coding hub.
+      The iOS app is published by llmlife.
+    </p>
+
+    <h2>What the app does</h2>
+    <ul>
+      <li>You type a hub URL and credentials. The app talks only to the hub you configure (default <code>https://agentui.antisense.fun</code>).</li>
+      <li>Session chat, files, git, terminal, and memory stay on that hub / your machines. We (the App Store publisher) do not operate a public user database for AgentUI.</li>
+    </ul>
+
+    <h2>Data the iOS app may access on device</h2>
+    <ul>
+      <li><strong>Camera and photo library:</strong> only if you attach a photo to a session. Images are uploaded to YOUR hub.</li>
+      <li><strong>Files you pick:</strong> uploaded to YOUR hub.</li>
+      <li><strong>Local notifications:</strong> session-complete banners on this device. No Apple Push token is required for that.</li>
+      <li><strong>Account token / hub URL:</strong> stored in app preferences on device.</li>
+    </ul>
+
+    <h2>What we do not do</h2>
+    <ul>
+      <li>No third-party analytics SDK, no ads, no tracking pixels in the iOS app.</li>
+      <li>No sale of personal data.</li>
+      <li>We do not require you to create an Apple-ID-linked social account.</li>
+    </ul>
+
+    <h2>Hub operators</h2>
+    <p>
+      Whoever runs the hub you sign into is the controller for chat logs, files, and account data on that server.
+      If you use <code>https://agentui.antisense.fun</code>, contact the operator via the GitHub repo
+      <a href="https://github.com/forechoandlook/claude-simple-ui">https://github.com/forechoandlook/claude-simple-ui</a>.
+    </p>
+
+    <h2>Contact</h2>
+    <p>
+      <a href="https://github.com/forechoandlook/claude-simple-ui/issues">https://github.com/forechoandlook/claude-simple-ui/issues</a>
+    </p>
+  </main>
+</body>
+</html>

package/public/router.js

@@ -54,6 +54,11 @@ export function applyInitialRoute() {
 }
 
 function applyHash(path) {
+  const pathname = String(path || '').split('?')[0];
+  if (pathname === '/settings') {
+    document.dispatchEvent(new CustomEvent('router:settings'));
+    return;
+  }
   // /session/:id  or  /session/:id/:tab
   const parsed = parseHashPath(path);
   if (!parsed) {