livedesk 0.1.265 → 0.1.267

package/hub/src/live-desk-update.js

@@ -292,16 +292,9 @@ export function createLiveDeskUpdateManager({
     };
     const result = supportsDedicated
       ? remoteHub.sendCommand(device.deviceId, { command: LIVE_DESK_UPDATE_COMMAND, payload })
-      : remoteHub.requestAgentTask(device.deviceId, {
-        operation: 'command.run',
-        title: 'Update LiveDesk client',
-        instruction: 'Update and restart this LiveDesk client.',
-        toolArguments: {
-          command: buildLegacyUpdateCommand(device, credentials, run.latestClientVersion),
-          timeoutMs: 30_000
-        },
-        permissionMode: 'full-access',
-        approvalLevel: 'once'
+      : remoteHub.sendLegacyClientUpdate(device.deviceId, {
+        command: buildLegacyUpdateCommand(device, credentials, run.latestClientVersion),
+        timeoutMs: 30_000
       });
     if (result?.ok !== true) {
       target.state = 'failed';

package/hub/src/remote-hub.js

@@ -1387,11 +1387,14 @@ export function createRemoteHub(options = {}) {
     const logEvent = options.logEvent || (() => {});
     const logWarn = options.logWarn || (() => {});
     const emitEvent = options.emitEvent || (() => {});
-    const emitFrame = typeof options.emitFrame === 'function' ? options.emitFrame : (() => {});
-    const emitAudio = typeof options.emitAudio === 'function' ? options.emitAudio : (() => {});
-    const getEffectiveDevicePolicy = typeof options.getEffectiveDevicePolicy === 'function'
-        ? options.getEffectiveDevicePolicy
-        : (() => ({}));
+    const emitFrame = typeof options.emitFrame === 'function' ? options.emitFrame : (() => {});
+    const emitAudio = typeof options.emitAudio === 'function' ? options.emitAudio : (() => {});
+    const getEffectiveDevicePolicy = typeof options.getEffectiveDevicePolicy === 'function'
+        ? options.getEffectiveDevicePolicy
+        : (() => ({}));
+    const getWelcomeDevicePolicy = typeof options.getWelcomeDevicePolicy === 'function'
+        ? options.getWelcomeDevicePolicy
+        : getEffectiveDevicePolicy;
 
     function getDevicePolicy(device) {
         try {
@@ -2668,7 +2671,7 @@ export function createRemoteHub(options = {}) {
             heartbeatMs,
             frameProtocol: buildRemoteFrameProtocolDescriptor(),
             frameModes: getSupportedRemoteFrameModeProfiles(),
-            effectivePolicy: getEffectiveDevicePolicy({ deviceId, capabilities }),
+            effectivePolicy: getWelcomeDevicePolicy({ deviceId, capabilities }),
             serverTime: now
         });
 
@@ -4487,7 +4490,7 @@ export function createRemoteHub(options = {}) {
         return true;
     }
 
-    function sendCommand(deviceId, command) {
+    function sendCommand(deviceId, command) {
         const device = devices.get(String(deviceId || ''));
         const commandName = safeString(command?.command || 'ping', 80);
         const requiredPermission = commandName === 'input.control'
@@ -4551,8 +4554,44 @@ export function createRemoteHub(options = {}) {
             command: payload.command,
             channel: dedicatedFileSocket ? 'file' : 'control'
         });
-        return { ok: true, commandId };
-    }
+        return { ok: true, commandId };
+    }
+
+    // Client updates are an explicit Hub maintenance action, not an Agent task.
+    // This legacy path is kept for clients that predate the dedicated update command.
+    function sendLegacyClientUpdate(deviceId, options = {}) {
+        const device = devices.get(String(deviceId || ''));
+        const denied = policyError(device);
+        if (denied) return { ok: false, error: denied };
+        if (!device) return { ok: false, error: 'device-not-found' };
+        if (!device.socket || device.socket.destroyed || !device.connected) {
+            return { ok: false, error: 'device-not-connected' };
+        }
+
+        const command = safeString(options.command, 20000);
+        if (!command) return { ok: false, error: 'client-update-command-missing' };
+        const commandId = safeString(options.commandId, 128) || crypto.randomUUID();
+        const sent = writeJsonLine(device.socket, {
+            type: 'command',
+            commandId,
+            command: 'command.run',
+            payload: {
+                command,
+                timeoutMs: clampNumber(options.timeoutMs, 1000, 120000, 30000),
+                permissionMode: 'full-access'
+            },
+            issuedAt: new Date().toISOString()
+        });
+        if (!sent) return { ok: false, error: 'device-not-connected' };
+        device.counters.commandsSent += 1;
+        emitRemoteEvent('RemoteCommandQueued', device, {
+            commandId,
+            command: 'command.run',
+            maintenance: 'client-update',
+            channel: 'control'
+        });
+        return { ok: true, commandId };
+    }
 
     function sendInputControl(deviceId, input = {}) {
         const device = devices.get(String(deviceId || ''));
@@ -5481,7 +5520,8 @@ export function createRemoteHub(options = {}) {
         retryTaskBatch,
         listDeviceFrames,
         disconnectDevice,
-        sendCommand,
+        sendCommand,
+        sendLegacyClientUpdate,
         sendInputControl,
         requestAgentTask,
         requestAgentTaskBatch,

package/hub/src/server.js

@@ -261,9 +261,19 @@ const remoteHub = createRemoteHub({
   logEvent: (_scope, message) => console.log(`[LiveDesk Hub] ${message}`),
   logWarn: (_scope, message) => console.warn(`[LiveDesk Hub] ${message}`),
   emitEvent: handleRemoteHubEvent,
-  emitFrame: broadcastRemoteBinaryFrame,
-  emitAudio: broadcastRemoteBinaryAudio,
-  getEffectiveDevicePolicy: ({ deviceId, capabilities }) => buildEffectiveDevicePolicy(liveDeskSettingsStore.getCached(), { deviceId, capabilities })
+  emitFrame: broadcastRemoteBinaryFrame,
+  emitAudio: broadcastRemoteBinaryAudio,
+  getEffectiveDevicePolicy: ({ deviceId, capabilities }) => buildEffectiveDevicePolicy(liveDeskSettingsStore.getCached(), { deviceId, capabilities }),
+  getWelcomeDevicePolicy: ({ deviceId, capabilities }) => {
+    const policy = buildEffectiveDevicePolicy(liveDeskSettingsStore.getCached(), { deviceId, capabilities });
+    const hasClientUpdatePath = capabilities?.clientUpdate === true
+      || (Array.isArray(capabilities?.agentTools) && capabilities.agentTools.length > 0);
+    if (!hasClientUpdatePath || policy.allowAgent || policy.accessMode === 'block-remote-access') return policy;
+    // Compatibility grant for the client-side policy gate. The Hub remains
+    // authoritative for every normal Agent command; this only bootstraps the
+    // updater on clients that predate livedesk.client-update.
+    return { ...policy, allowAgent: true };
+  }
 });
 
 function requestHubRestart(request = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "livedesk",
-  "version": "0.1.265",
+  "version": "0.1.267",
   "description": "LiveDesk Hub and client launcher",
   "type": "module",
   "bin": {