mistagent 0.1.18 → 0.1.20

package/dist/src/hooks/useChat.js

@@ -9,12 +9,60 @@ import { executeFileOperation, isSensitiveOperation, isAlwaysConfirmRequired } f
 import { DEBUG_LOG_AITEXT, DEBUG_AITEXT_FILE, CODE_ANALYZER_DIR } from '../utils/config.js';
 import { useChatState, useChatDispatch, StreamingState, } from '../contexts/ChatContext.js';
 import { useModelState } from '../contexts/ModelContext.js';
+/**
+ * Throttled token buffer — accumulates tokens and flushes at most every
+ * FLUSH_INTERVAL_MS to reduce Ink re-renders and prevent iTerm scroll jitter.
+ */
+const FLUSH_INTERVAL_MS = 50;
+function createTokenBuffer(dispatch) {
+    let buffer = '';
+    let timer = null;
+    function flush() {
+        timer = null;
+        if (buffer) {
+            const content = buffer;
+            buffer = '';
+            dispatch({ type: 'STREAM_TOKEN', content });
+        }
+    }
+    return {
+        push(content) {
+            buffer += content;
+            if (!timer) {
+                timer = setTimeout(flush, FLUSH_INTERVAL_MS);
+            }
+        },
+        /** Flush any remaining buffered tokens immediately (e.g. on stream end) */
+        flushNow() {
+            if (timer) {
+                clearTimeout(timer);
+                timer = null;
+            }
+            if (buffer) {
+                const content = buffer;
+                buffer = '';
+                dispatch({ type: 'STREAM_TOKEN', content });
+            }
+        },
+        dispose() {
+            if (timer) {
+                clearTimeout(timer);
+                timer = null;
+            }
+            buffer = '';
+        },
+    };
+}
 export function useChat() {
     const state = useChatState();
     const dispatch = useChatDispatch();
     const { currentModel } = useModelState();
     const abortRef = useRef(null);
     const toolApprovalResolveRef = useRef(null);
+    // Ref 保持 sessionAutoApproved 最新值，避免 stale closure 问题
+    // （plan confirm 流式执行中 handleToolExecuteRequest 闭包会捕获旧值）
+    const sessionAutoApprovedRef = useRef(state.sessionAutoApproved);
+    sessionAutoApprovedRef.current = state.sessionAutoApproved;
     /**
      * 请求用户批准敏感操作。返回 Promise，在用户做出选择后 resolve。
      */
@@ -46,9 +94,10 @@ export function useChat() {
             name: `[local] ${data.tool_name}`,
             args: JSON.stringify(data.args),
         });
-        const sensitive = isSensitiveOperation(data.tool_name);
+        const sensitive = isSensitiveOperation(data.tool_name, data.args);
         const alwaysConfirm = isAlwaysConfirmRequired(data);
-        const autoApproved = state.sessionAutoApproved.has(data.tool_name);
+        // 使用 ref 读取最新值，避免 stale closure（plan confirm 流式中尤为重要）
+        const autoApproved = sessionAutoApprovedRef.current.has(data.tool_name);
         // 需要确认：(1) 敏感操作且未自动批准，或 (2) 始终需要确认的高危操作
         if (sensitive && (!autoApproved || alwaysConfirm)) {
             const decision = await requestToolApproval(data, alwaysConfirm);
@@ -75,7 +124,7 @@ export function useChat() {
                 error: 'Failed to submit tunnel result',
             }).catch(() => { });
         }
-    }, [dispatch, state.sessionAutoApproved, requestToolApproval]);
+    }, [dispatch, requestToolApproval]);
     const sendMessage = useCallback(async (message) => {
         if (state.streamingState !== StreamingState.Idle)
             return;
@@ -100,6 +149,7 @@ export function useChat() {
         dispatch({ type: 'ADD_ITEM', item: { type: 'user', text: displayText } });
         // Enter streaming state immediately so UI shows loading indicator
         dispatch({ type: 'STREAM_START', threadId: state.threadId ?? 'pending' });
+        const tokenBuf = createTokenBuffer(dispatch);
         try {
             const reader = await chatApi.stream(finalAiText, state.threadId, currentModel?.model, currentModel?.provider, state.forceMode === 'plan' ? 'plan' : null);
             const decoder = new TextDecoder();
@@ -126,7 +176,7 @@ export function useChat() {
                             }
                             case 'text': {
                                 const data = JSON.parse(event.data);
-                                dispatch({ type: 'STREAM_TOKEN', content: data.content });
+                                tokenBuf.push(data.content);
                                 break;
                             }
                             case 'status': {
@@ -158,10 +208,12 @@ export function useChat() {
                                 break;
                             }
                             case 'plan_confirm': {
+                                tokenBuf.flushNow();
                                 const data = JSON.parse(event.data);
                                 const planData = data.content || {};
                                 const steps = planData.plan || [];
-                                dispatch({ type: 'PLAN_CONFIRM', steps });
+                                const planContent = planData.content || '';
+                                dispatch({ type: 'PLAN_CONFIRM', steps, content: planContent });
                                 // Stop reading the SSE stream — the plan review UI takes over.
                                 abort.abort();
                                 break;
@@ -192,19 +244,20 @@ export function useChat() {
                                     const planText = '\n**Plan:**\n' +
                                         meta.plan.map((s, i) => `${i + 1}. ${s}`).join('\n') +
                                         '\n\n';
-                                    dispatch({ type: 'STREAM_TOKEN', content: planText });
+                                    tokenBuf.push(planText);
                                 }
                                 // Show replan result
                                 if (nodeName === 'replan' && meta.plan) {
                                     const replanText = '\n**Updated Plan:**\n' +
                                         meta.plan.map((s, i) => `${i + 1}. ${s}`).join('\n') +
                                         '\n\n';
-                                    dispatch({ type: 'STREAM_TOKEN', content: replanText });
+                                    tokenBuf.push(replanText);
                                 }
                                 dispatch({ type: 'TOOL_CALL_DONE' });
                                 break;
                             }
                             case 'done': {
+                                tokenBuf.flushNow();
                                 dispatch({ type: 'STREAM_DONE' });
                                 break;
                             }
@@ -233,10 +286,12 @@ export function useChat() {
             }
             // If stream ended without a done event, finalize
             if (!streamDoneReceived && !abort.signal.aborted) {
+                tokenBuf.flushNow();
                 dispatch({ type: 'STREAM_DONE' });
             }
         }
         catch (err) {
+            tokenBuf.dispose();
             const errorMessage = err instanceof Error ? err.message : 'Unknown error';
             dispatch({ type: 'STREAM_ERROR', error: errorMessage });
         }
@@ -249,6 +304,7 @@ export function useChat() {
         const decoder = new TextDecoder();
         const abort = new AbortController();
         abortRef.current = abort;
+        const tokenBuf = createTokenBuffer(dispatch);
         dispatch({ type: 'STREAM_START', threadId: state.threadId ?? 'pending' });
         const parser = createParser({
             onEvent(event) {
@@ -265,7 +321,7 @@ export function useChat() {
                         }
                         case 'text': {
                             const data = JSON.parse(event.data);
-                            dispatch({ type: 'STREAM_TOKEN', content: data.content });
+                            tokenBuf.push(data.content);
                             break;
                         }
                         case 'tool_call': {
@@ -305,23 +361,27 @@ export function useChat() {
                             if (data.content === 'replan' && meta.plan) {
                                 const text = '\n**Updated Plan:**\n' +
                                     meta.plan.map((s, i) => `${i + 1}. ${s}`).join('\n') + '\n\n';
-                                dispatch({ type: 'STREAM_TOKEN', content: text });
+                                tokenBuf.push(text);
                             }
                             dispatch({ type: 'TOOL_CALL_DONE' });
                             break;
                         }
                         case 'plan_confirm': {
+                            tokenBuf.flushNow();
                             const data = JSON.parse(event.data);
                             const planData = data.content || {};
                             const steps = planData.plan || [];
-                            dispatch({ type: 'PLAN_CONFIRM', steps });
+                            const planContent = planData.content || '';
+                            dispatch({ type: 'PLAN_CONFIRM', steps, content: planContent });
                             break;
                         }
                         case 'done': {
+                            tokenBuf.flushNow();
                             dispatch({ type: 'STREAM_DONE' });
                             break;
                         }
                         case 'error': {
+                            tokenBuf.dispose();
                             const data = JSON.parse(event.data);
                             dispatch({ type: 'STREAM_ERROR', error: data.content });
                             break;
@@ -342,6 +402,7 @@ export function useChat() {
             parser.feed(text);
         }
         if (!streamDoneReceived && !abort.signal.aborted) {
+            tokenBuf.flushNow();
             dispatch({ type: 'STREAM_DONE' });
         }
         abortRef.current = null;

package/dist/src/main.js

@@ -9,7 +9,7 @@ import { toolsApi } from './api/tools.js';
 import { skillsApi } from './api/skills.js';
 import { scanLocalSkills } from './utils/skillScanner.js';
 import { sessionsApi } from './api/sessions.js';
-import { getServerUrl, loadToken, saveToken, clearToken, loadTheme, loadModel } from './utils/config.js';
+import { getServerUrl, loadToken, saveToken, clearToken, loadTheme, loadModel, saveRefreshToken, loadRefreshToken } from './utils/config.js';
 import chalk from 'chalk';
 import { setTheme, palette } from './utils/colors.js';
 import { VERSION } from './utils/constants.js';
@@ -64,7 +64,6 @@ export async function main() {
             const muted = chalk.hex(palette.textMuted);
             const accent = chalk.hex(palette.accent);
             const rawMsg = err instanceof Error ? err.message : String(err);
-            // Detect specific failure reasons
             let reason;
             let hint;
             if (rawMsg.includes('ECONNREFUSED') || rawMsg.includes('fetch failed')) {
@@ -101,6 +100,41 @@ export async function main() {
     catch {
         authStatus = { auth_enabled: false };
     }
+    // Token refresh (Supabase tokens expire in ~1 hour)
+    let refreshTimer = null;
+    const startTokenRefresh = () => {
+        if (refreshTimer)
+            return;
+        const supabaseUrl = authStatus.supabase_url;
+        const supabaseKey = authStatus.supabase_anon_key;
+        if (!supabaseUrl || !supabaseKey)
+            return;
+        refreshTimer = setInterval(async () => {
+            const rt = loadRefreshToken();
+            if (!rt)
+                return;
+            try {
+                const res = await fetch(`${supabaseUrl}/auth/v1/token?grant_type=refresh_token`, {
+                    method: 'POST',
+                    headers: {
+                        'Content-Type': 'application/json',
+                        'apikey': supabaseKey,
+                    },
+                    body: JSON.stringify({ refresh_token: rt }),
+                });
+                if (res.ok) {
+                    const data = await res.json();
+                    client.setToken(data.access_token);
+                    saveToken(data.access_token);
+                    saveRefreshToken(data.refresh_token);
+                    token = data.access_token;
+                }
+            }
+            catch {
+                // Silent — will retry next interval
+            }
+        }, 50 * 60 * 1000); // 50 minutes
+    };
     // Try to restore token
     let token = null;
     let username = null;
@@ -114,6 +148,7 @@ export async function main() {
                 token = savedToken;
                 username = me.username;
                 isAuthenticated = true;
+                startTokenRefresh();
             }
             catch {
                 client.setToken(null);
@@ -167,16 +202,27 @@ export async function main() {
     ];
     // Login handler
     let loginError = null;
-    const renderApp = (overrides = {}) => (_jsx(App, { serverUrl: serverUrl, token: overrides.token ?? token, username: overrides.username ?? username, authEnabled: authStatus.auth_enabled, version: healthData?.version ?? VERSION, healthData: healthData, availableCommands: commands, availableTools: tools, initialModels: models, initialCurrentModel: currentModel, initialSessions: initialSessions, initialTheme: initialTheme, onLogin: handleLogin, onLogout: handleLogout, loginError: overrides.loginError ?? loginError, isAuthenticated: overrides.isAuthenticated ?? isAuthenticated }));
+    // Terminal size — tracked outside React so rerender() can inject fresh values
+    // This mirrors the claude-code pattern: Ink's renderer owns resize detection,
+    // and we piggyback by re-calling render()/rerender() with updated props.
+    const getTerminalSize = () => ({
+        terminalWidth: process.stdout.columns || 80,
+        terminalHeight: process.stdout.rows || 24,
+    });
+    const renderApp = (overrides = {}) => (_jsx(App, { serverUrl: serverUrl, token: overrides.token ?? token, username: overrides.username ?? username, authEnabled: authStatus.auth_enabled, version: healthData?.version ?? VERSION, healthData: healthData, availableCommands: commands, availableTools: tools, initialModels: models, initialCurrentModel: currentModel, initialSessions: initialSessions, initialTheme: initialTheme, onLogin: handleLogin, onLogout: handleLogout, loginError: overrides.loginError ?? loginError, isAuthenticated: overrides.isAuthenticated ?? isAuthenticated, ...getTerminalSize() }));
     const handleLogin = async (user, pass) => {
         try {
             const res = await authApi.login(user, pass);
             client.setToken(res.access_token);
             saveToken(res.access_token);
+            if (res.refresh_token) {
+                saveRefreshToken(res.refresh_token);
+            }
             token = res.access_token;
             username = res.user.username;
             isAuthenticated = true;
             loginError = null;
+            startTokenRefresh();
             rerender(renderApp({ token, username, isAuthenticated: true, loginError: null }));
         }
         catch (err) {
@@ -185,6 +231,10 @@ export async function main() {
         }
     };
     const handleLogout = () => {
+        if (refreshTimer) {
+            clearInterval(refreshTimer);
+            refreshTimer = null;
+        }
         client.setToken(null);
         clearToken();
         token = null;
@@ -199,9 +249,17 @@ export async function main() {
         process.stderr.write(formatUpdateMessage(updateInfo) + '\n\n');
     }
     // Render the app
-    const { rerender } = render(renderApp(), {
+    const { rerender, clear } = render(renderApp(), {
         exitOnCtrlC: false,
         kittyKeyboard: { mode: 'auto' },
     });
+    // On resize: clear the screen first to avoid stale rows left over when the
+    // Header shrinks (e.g. horizontal→compact reduces height by ~10 rows and
+    // Ink's in-place diff won't erase the leftover lines). Then rerender with
+    // fresh terminal dimensions.
+    process.stdout.on('resize', () => {
+        clear();
+        rerender(renderApp());
+    });
 }
 //# sourceMappingURL=main.js.map

package/dist/src/types/api.d.ts

@@ -1,6 +1,7 @@
 export interface LoginResponse {
     success: boolean;
     access_token: string;
+    refresh_token?: string;
     token_type: string;
     user: {
         user_id: string;
@@ -13,9 +14,12 @@ export interface UserInfo {
     user_id: string;
     username: string;
     display_name: string;
+    is_admin?: boolean;
 }
 export interface AuthStatus {
     auth_enabled: boolean;
+    supabase_url?: string;
+    supabase_anon_key?: string;
 }
 export interface SessionInfo {
     thread_id: string;

package/dist/src/utils/config.d.ts

@@ -3,6 +3,8 @@ export declare function getServerUrl(cliArg?: string): string;
 export declare function saveToken(token: string): void;
 export declare function loadToken(): string | null;
 export declare function clearToken(): void;
+export declare function saveRefreshToken(token: string): void;
+export declare function loadRefreshToken(): string | null;
 export type ThemeMode = 'dark' | 'light';
 export declare function saveTheme(mode: ThemeMode): void;
 export declare function loadTheme(): ThemeMode;

package/dist/src/utils/config.js

@@ -6,6 +6,8 @@ import { homedir } from 'node:os';
 const CONFIG_DIR = join(homedir(), '.mistagent');
 // 登录 token 文件路径，文件权限 0o600 仅当前用户可读写
 const TOKEN_FILE = join(CONFIG_DIR, 'token');
+// Supabase refresh token（用于自动续期 access_token）
+const REFRESH_TOKEN_FILE = join(CONFIG_DIR, 'refresh_token');
 // 后端服务器默认地址，可通过 CLI 参数或环境变量 MISTAGENT_SERVER 覆盖
 // 发布时由 publish.sh 自动切换为 'https://solidity.slowmist.ai'，发布后自动改回
 export const DEFAULT_SERVER_URL = 'https://solidity.slowmist.ai';
@@ -41,11 +43,32 @@ export function loadToken() {
 export function clearToken() {
     try {
         writeFileSync(TOKEN_FILE, '', { mode: 0o600 });
+        writeFileSync(REFRESH_TOKEN_FILE, '', { mode: 0o600 });
     }
     catch {
         // 写入失败时静默处理
     }
 }
+// 保存 refresh token（Supabase token 续期用）
+export function saveRefreshToken(token) {
+    try {
+        mkdirSync(CONFIG_DIR, { recursive: true });
+        writeFileSync(REFRESH_TOKEN_FILE, token, { mode: 0o600 });
+    }
+    catch {
+        // 写入失败时静默处理
+    }
+}
+// 加载 refresh token
+export function loadRefreshToken() {
+    try {
+        const val = readFileSync(REFRESH_TOKEN_FILE, 'utf-8').trim();
+        return val || null;
+    }
+    catch {
+        return null;
+    }
+}
 // ─── 主题偏好 ────────────────────────────────────────────────
 // 主题偏好文件路径，保存 'dark' 或 'light'
 const THEME_FILE = join(CONFIG_DIR, 'theme');

package/dist/src/utils/constants.d.ts

@@ -1,4 +1,4 @@
-export declare const VERSION = "0.1.18";
+export declare const VERSION = "0.1.20";
 export declare const BANNER_LINES: string[];
 export declare const BANNER_SUBTITLE = "          A  G  E  N  T";
 export declare function getBannerGradient(): string[];

package/dist/src/utils/constants.js

@@ -1,4 +1,4 @@
-export const VERSION = '0.1.18';
+export const VERSION = '0.1.20';
 // Banner as line array for per-line gradient coloring
 export const BANNER_LINES = [
     ' ███╗   ███╗██╗███████╗████████╗',

package/dist/src/utils/fileTunnel.d.ts

@@ -23,7 +23,12 @@ export interface TunnelResult {
  * 工具名称和参数与 LangChain FileManagementToolkit 保持一致。
  */
 export declare function executeFileOperation(req: TunnelRequest): Promise<TunnelResult>;
-/** 是否为需要用户确认的敏感操作 */
-export declare function isSensitiveOperation(toolName: string): boolean;
+/**
+ * 是否为需要用户确认的敏感操作
+ * - 写入/修改工具：始终 sensitive
+ * - bash_shell_run：只读命令不 sensitive，其他命令 sensitive
+ * - read_file / list_directory 等只读工具：不 sensitive
+ */
+export declare function isSensitiveOperation(toolName: string, args?: Record<string, unknown>): boolean;
 export declare function isAlwaysConfirmRequired(req: TunnelRequest): boolean;
 //# sourceMappingURL=fileTunnel.d.ts.map