fraim-hub 2.0.250 → 2.0.252

package/dist/src/ai-hub/cert-store.js

@@ -3,6 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.certPaths = certPaths;
 exports.loadOrCreateCert = loadOrCreateCert;
 exports.trustCert = trustCert;
 const fs_1 = __importDefault(require("fs"));
@@ -40,27 +41,24 @@ async function loadOrCreateCert() {
     fs_1.default.mkdirSync(path_1.default.dirname(keyPath), { recursive: true });
     fs_1.default.writeFileSync(keyPath, pem.private, { mode: 0o600 });
     fs_1.default.writeFileSync(certPath, pem.cert, { mode: 0o644 });
-    // NOTE: we deliberately do NOT install this into the OS trusted-root store here.
-    // Desktop Word/PowerPoint reach the pane over plain HTTP loopback and need no cert.
-    // Trusting a root CA triggers a Windows security popup on every add/remove and is
-    // invasive, so it is reserved for explicit Word-Online opt-in via trustCert() below.
+    // The caller decides when to trust this certificate. Word Online requires the
+    // HTTPS loopback certificate to be trusted before it can render the task pane.
     return { key: pem.private, cert: pem.cert };
 }
 /**
  * Installs the cert as a trusted root CA in the user's OS certificate store.
  * ONLY call this for explicit Word-Online support — it prompts a Windows security
- * dialog. It is idempotent: it no-ops if a matching localhost cert is already
- * trusted, so it never produces the delete/add popup churn.
- *   Windows: certutil -addstore -user Root  (skipped if already present)
+ * dialog. It never deletes certs; importing the same cert is idempotent in the
+ * user root store and also repairs stale installs when the cached cert changed.
+ *   Windows: certutil -addstore -user Root
  *   macOS:   security add-trusted-cert -r trustRoot -k login.keychain
  */
 function trustCert(certPath) {
     if (process.platform === 'win32') {
-        // Skip if a localhost cert is already trusted — avoids the confirmation popup.
-        const check = (0, child_process_1.spawnSync)('certutil', ['-user', '-store', 'Root', 'localhost'], { encoding: 'utf8' });
-        if (check.status === 0 && /localhost/i.test(check.stdout))
-            return;
-        (0, child_process_1.spawnSync)('certutil', ['-addstore', '-user', 'Root', certPath], { stdio: 'ignore' });
+        const result = (0, child_process_1.spawnSync)('certutil', ['-addstore', '-user', 'Root', certPath], { encoding: 'utf8' });
+        if (result.status !== 0) {
+            console.warn('[fraim] could not trust localhost certificate:', result.stderr || result.stdout);
+        }
         return;
     }
     if (process.platform === 'darwin') {

package/dist/src/ai-hub/desktop-main.js

@@ -326,6 +326,12 @@ async function launchDesktopShell(options) {
     // Generate (or load cached) self-signed cert for HTTPS.
     // Fast on subsequent launches (file read); ~200ms on first launch (key gen).
     const certBundle = await (0, cert_store_1.loadOrCreateCert)();
+    try {
+        (0, cert_store_1.trustCert)((0, cert_store_1.certPaths)().certPath);
+    }
+    catch (err) {
+        console.warn('[fraim] could not trust localhost certificate:', err);
+    }
     server = new server_1.AiHubServer({
         ...(options.projectPath ? { projectPath: options.projectPath } : {}),
         // Issue #701: no local DB. Persona/manager-team state resolves through the hosted

package/dist/src/ai-hub/office-sideload.js

@@ -63,7 +63,7 @@ function generatedManifestPath(entry, userDataDir) {
     return path_1.default.join(userDataDir, 'office-manifests', entry.guid, 'manifest.xml');
 }
 function manifestXmlForPort(xml, httpPort) {
-    return xml.replace(/https?:\/\/(?:localhost|127\.0\.0\.1):43091/g, `http://127.0.0.1:${httpPort}`);
+    return xml.replace(/https?:\/\/(?:localhost|127\.0\.0\.1):(43091|43092)/g, `http://127.0.0.1:${httpPort}`);
 }
 function shouldSkipSideloadForFlag(existingFlag, expectedFlag, sideloaded) {
     return existingFlag?.trim() === expectedFlag && sideloaded;

package/extensions/office-word/manifest.xml

@@ -9,8 +9,8 @@
   <DefaultLocale>en-US</DefaultLocale>
   <DisplayName DefaultValue="FRAIM"/>
   <Description DefaultValue="AI Hub for your document - legal, product, engineering, and more in one task pane."/>
-  <IconUrl DefaultValue="http://127.0.0.1:43091/word-taskpane/icon-64.png"/>
-  <HighResolutionIconUrl DefaultValue="http://127.0.0.1:43091/word-taskpane/icon-64.png"/>
+  <IconUrl DefaultValue="https://localhost:43092/word-taskpane/icon-64.png"/>
+  <HighResolutionIconUrl DefaultValue="https://localhost:43092/word-taskpane/icon-64.png"/>
   <AppDomains>
     <AppDomain>https://appsforoffice.microsoft.com</AppDomain>
   </AppDomains>
@@ -26,7 +26,7 @@
   </Requirements>
 
   <DefaultSettings>
-    <SourceLocation DefaultValue="http://127.0.0.1:43091/word-taskpane/"/>
+    <SourceLocation DefaultValue="https://localhost:43092/word-taskpane/"/>
   </DefaultSettings>
 
   <Permissions>ReadWriteDocument</Permissions>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim-hub",
-  "version": "2.0.250",
+  "version": "2.0.252",
   "description": "FRAIM Hub local companion package.",
   "bin": {
     "fraim-hub": "bin/fraim-hub.js",
@@ -163,7 +163,7 @@
     "electron": "^41.2.2",
     "electron-updater": "^6.8.9",
     "express": "^5.2.1",
-    "fraim": "2.0.250",
+    "fraim": "2.0.252",
     "mongodb": "^7.0.0",
     "node-cron": "4.2.1",
     "node-edge-tts": "^1.2.10",

package/public/ai-hub/index.html

@@ -500,7 +500,7 @@
                     </div>
                   </div>
                   <div class="coach-input">
-                    <textarea id="coach-text" placeholder="Tell the employee what to do next..."></textarea>
+                    <textarea id="coach-text" aria-label="Coach the employee" placeholder="Tell the employee what to do next..."></textarea>
                     <button class="send-button" type="button" id="send" disabled>↑</button>
                   </div>
                   <div class="coach-note" id="coach-note"></div>

package/public/ai-hub/script.js

@@ -529,12 +529,40 @@ function renderWordContextInModal() {
   body.textContent = buildWordContextBlock(wc);
 }
 
-function isTaskPaneSurface() {
-  return document.body.dataset.surface === 'task-pane' || document.body.dataset.surface === 'extension';
-}
-
-function taskPaneProjectEntries() {
-  const byPath = new Map();
+function isTaskPaneSurface() {
+  return document.body.dataset.surface === 'task-pane' || document.body.dataset.surface === 'extension';
+}
+
+function syncTaskPaneSurfaceMode() {
+  if (!isTaskPaneSurface()) return;
+  const conv = typeof activeConversation === 'function' ? activeConversation() : null;
+  const hasActiveConversation = !!conv;
+  document.body.classList.toggle('task-pane-run-active', hasActiveConversation);
+  if (!hasActiveConversation || typeof tf === 'undefined' || typeof tfSelectProjectView !== 'function') return;
+  const projectPath = (conv && conv.projectPath) || state.projectPath;
+  let project = typeof tfProjectForPath === 'function' ? tfProjectForPath(projectPath) : null;
+  if (!project && projectPath && typeof tfNormalizeProject === 'function' && typeof tfApplyUniqueProjectIds === 'function') {
+    tf.projects = tfApplyUniqueProjectIds([...(tf.projects || []), tfNormalizeProject({
+      name: friendlyProjectShortName(projectPath),
+      folderPath: projectPath,
+    }, projectPath)]);
+    project = typeof tfProjectForPath === 'function' ? tfProjectForPath(projectPath) : null;
+  }
+  const projectId = (project && project.id) || tf.activeProjectId;
+  if (!projectId) return;
+  if (tf.projectView === 'workspace' && tf.activeProjectId === projectId) {
+    const overview = document.getElementById('proj-overview');
+    const workspace = document.getElementById('proj-workspace');
+    if (overview) overview.hidden = true;
+    if (workspace) workspace.hidden = false;
+    return;
+  }
+  tfSelectProjectView('workspace', projectId).catch((error) =>
+    console.warn('[ai-hub] could not show task-pane run workspace:', error));
+}
+
+function taskPaneProjectEntries() {
+  const byPath = new Map();
   const add = (project) => {
     if (!project) return;
     const folderPath = project.folderPath || project.path || project.folder || '';
@@ -654,10 +682,11 @@ function ensureTaskPaneLauncher() {
   return root;
 }
 
-function renderTaskPaneLauncher() {
-  if (!isTaskPaneSurface() || !state.bootstrap) return;
-  ensureTaskPaneLauncher();
-  const projects = taskPaneProjectEntries();
+function renderTaskPaneLauncher() {
+  if (!isTaskPaneSurface() || !state.bootstrap) return;
+  syncTaskPaneSurfaceMode();
+  ensureTaskPaneLauncher();
+  const projects = taskPaneProjectEntries();
   const jobs = taskPaneJobEntries();
   const agents = hubConfiguredAgents().filter((agent) => agent.available !== false && agent.enabled !== false);
   const projectSelect = document.getElementById('task-pane-project-select');
@@ -3152,9 +3181,10 @@ function handleConversationFocusEscape(e) {
   closeConversationFocus();
 }
 
-function renderActive() {
-  const conv = activeConversation();
-  if (typeof tfApplyWorkspaceMode === 'function') tfApplyWorkspaceMode();
+function renderActive() {
+  const conv = activeConversation();
+  if (typeof syncTaskPaneSurfaceMode === 'function') syncTaskPaneSurfaceMode();
+  if (typeof tfApplyWorkspaceMode === 'function') tfApplyWorkspaceMode();
   if (!conv) {
     closeConversationFocus();
     els['empty'].hidden = false;

package/public/ai-hub/styles.css

@@ -2866,24 +2866,52 @@ button.small { padding: 4px 10px; font-size: 12px; }
    body:is([data-surface="task-pane"],[data-surface="extension"]). No media queries — this is a surface
    flag, not a viewport breakpoint. */
 
-body:is([data-surface="task-pane"],[data-surface="extension"]) {
-  font-size: 13px;
-  overflow: auto;
-}
-body:is([data-surface="task-pane"],[data-surface="extension"]) .hub-tabs,
-body:is([data-surface="task-pane"],[data-surface="extension"]) .hub-area,
-body:is([data-surface="task-pane"],[data-surface="extension"]) .proj-tabs {
-  display: none !important;
-}
-.task-pane-launcher { display: none; }
-body:is([data-surface="task-pane"],[data-surface="extension"]) .task-pane-launcher {
-  display: flex;
-  flex-direction: column;
-  gap: 10px;
-  padding: 12px;
-  border-bottom: 1px solid var(--border, rgba(0,0,0,0.07));
-  background: var(--surface, #fff);
-}
+body:is([data-surface="task-pane"],[data-surface="extension"]) {
+  font-size: 13px;
+  overflow: auto;
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]) .hub-tabs,
+body:is([data-surface="task-pane"],[data-surface="extension"]):not(.task-pane-run-active) .hub-area,
+body:is([data-surface="task-pane"],[data-surface="extension"]) .proj-tabs {
+  display: none !important;
+}
+.task-pane-launcher { display: none; }
+body:is([data-surface="task-pane"],[data-surface="extension"]):not(.task-pane-run-active) .task-pane-launcher {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  padding: 12px;
+  border-bottom: 1px solid var(--border, rgba(0,0,0,0.07));
+  background: var(--surface, #fff);
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active #area-projects {
+  display: flex !important;
+  min-height: 100vh;
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active #proj-workspace {
+  display: flex;
+  flex: 1 1 auto;
+  min-width: 0;
+  overflow: visible;
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active .tree-sidebar,
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active .tree-collapse-btn,
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active .tree-resizer {
+  display: none !important;
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active .workspace-conv {
+  width: 100%;
+  min-width: 0;
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active .workspace-conv .layout {
+  display: flex;
+  flex-direction: column;
+  min-width: 0;
+  overflow: visible;
+}
+body:is([data-surface="task-pane"],[data-surface="extension"]).task-pane-run-active .word-context-bar {
+  flex: 0 0 auto;
+}
 .tp-launcher-header {
   display: flex;
   flex-direction: column;