mop-agent 0.1.7 → 0.1.9

package/apps/web/components/AppShell.tsx

@@ -0,0 +1,110 @@
+"use client";
+
+import type { ReactNode } from "react";
+import { usePathname } from "next/navigation";
+import { useState } from "react";
+import { signOut } from "@/lib/auth-client";
+
+export type AppViewer = {
+  name: string;
+  email: string;
+  role: "owner" | "member";
+};
+
+function pageTitle(pathname: string): string {
+  if (pathname === "/assistant") return "Assistant";
+  if (pathname === "/brain/graph") return "Knowledge Graph";
+  if (pathname.startsWith("/brain/")) return "Project Brain";
+  if (pathname.startsWith("/brain")) return "Brain";
+  if (pathname.startsWith("/chat/")) return "Project Chat";
+  if (pathname.startsWith("/settings")) return "Settings";
+  return "MOP-AGENT";
+}
+
+export function AppShell({ viewer, children }: { viewer: AppViewer; children: ReactNode }) {
+  const pathname = usePathname();
+  const [menuOpen, setMenuOpen] = useState(false);
+  const isAdmin = viewer.role === "owner";
+  const title = pageTitle(pathname);
+
+  async function logout() {
+    await signOut();
+    window.location.replace("/login");
+  }
+
+  const nav = [
+    { href: "/assistant", label: "Assistant", icon: "✦", active: pathname.startsWith("/assistant") || pathname.startsWith("/chat/") },
+    { href: "/brain", label: "Brain", icon: "◉", active: pathname.startsWith("/brain") },
+  ];
+
+  return (
+    <div className="mop-app-frame">
+      <header className="mop-app-topbar">
+        <a className="mop-app-brand" href="/assistant" aria-label="MOP-AGENT home">
+          <img src="/icon.svg" alt="" />
+          <span>MOP-AGENT</span>
+        </a>
+        <div className="mop-app-topbar-main">
+          <button
+            className="mop-menu-toggle"
+            type="button"
+            aria-label="Toggle navigation"
+            aria-expanded={menuOpen}
+            onClick={() => setMenuOpen((open) => !open)}
+          >
+            ☰
+          </button>
+          <div className="mop-topbar-title">
+            <span className="mop-live-dot" />
+            <strong>{title}</strong>
+          </div>
+          <div className="mop-topbar-center">MOP MEMORYCORE</div>
+          <div className="mop-topbar-meta">
+            <span>{isAdmin ? "ADMIN" : "MEMBER"}</span>
+            <span className="mop-version">v0.1.9</span>
+          </div>
+        </div>
+      </header>
+
+      {menuOpen && <button className="mop-sidebar-scrim" aria-label="Close navigation" onClick={() => setMenuOpen(false)} />}
+
+      <aside className={`mop-app-sidebar${menuOpen ? " is-open" : ""}`}>
+        <div className="mop-nav-section">
+          <p>WORKSPACE</p>
+          <nav>
+            {nav.map((item) => (
+              <a key={item.href} href={item.href} className={item.active ? "is-active" : ""} onClick={() => setMenuOpen(false)}>
+                <span className="mop-nav-icon">{item.icon}</span>
+                <span>{item.label}</span>
+              </a>
+            ))}
+          </nav>
+        </div>
+
+        {isAdmin && (
+          <div className="mop-nav-section">
+            <p>ADMIN</p>
+            <nav>
+              <a href="/settings" className={pathname.startsWith("/settings") ? "is-active" : ""} onClick={() => setMenuOpen(false)}>
+                <span className="mop-nav-icon">⚙</span>
+                <span>Settings</span>
+              </a>
+            </nav>
+          </div>
+        )}
+
+        <div className="mop-sidebar-spacer" />
+        <button className="mop-account-card" type="button" onClick={logout} title="Sign out">
+          <span className="mop-account-avatar">{viewer.name.slice(0, 1).toUpperCase()}</span>
+          <span className="mop-account-copy">
+            <strong>{viewer.name}</strong>
+            <small>{isAdmin ? "Administrator" : "Member"}</small>
+          </span>
+          <span aria-hidden="true">↪</span>
+        </button>
+      </aside>
+
+      <main className="mop-app-main">{children}</main>
+    </div>
+  );
+}

package/apps/web/lib/page-auth.ts

@@ -1,4 +1,4 @@
-import { auth, ownerExists } from "@/lib/auth";
+import { auth, getRole, ownerExists } from "@/lib/auth";
 import { headers } from "next/headers";
 import { redirect } from "next/navigation";
 import { unstable_noStore as noStore } from "next/cache";
@@ -10,6 +10,13 @@ export async function requirePageSession() {
   if (!ownerExists()) redirect("/setup");
 
   const session = await auth.api.getSession({ headers: await headers() });
-  if (!session) redirect("/setup");
+  if (!session) redirect("/login");
+  return session;
+}
+
+/** Server-side guard for pages that expose installation-wide administration. */
+export async function requireOwnerPage() {
+  const session = await requirePageSession();
+  if (getRole(session.user.id) !== "owner") redirect("/assistant");
   return session;
 }

package/installer/mop-agent.mjs

@@ -12,7 +12,7 @@
  */
 import { spawnSync } from "node:child_process";
 import { randomBytes } from "node:crypto";
-import { chmodSync, writeFileSync, mkdirSync, existsSync } from "node:fs";
+import { chmodSync, writeFileSync, mkdirSync, existsSync, readFileSync } from "node:fs";
 import { createInterface } from "node:readline/promises";
 import { stdin as input, stdout as output } from "node:process";
 import { dirname, resolve } from "node:path";
@@ -102,6 +102,57 @@ function q(value) {
   return `'${String(value).replaceAll("'", `'"'"'`)}'`;
 }
 
+function readRuntimeConfig() {
+  const envPath = `${APP_DIR}/apps/web/.env`;
+  if (!existsSync(envPath)) throw new Error(`Runtime environment is missing: ${envPath}`);
+  const env = {};
+  for (const raw of readFileSync(envPath, "utf8").split(/\r?\n/)) {
+    const line = raw.trim();
+    if (!line || line.startsWith("#")) continue;
+    const at = line.indexOf("=");
+    if (at < 1) continue;
+    env[line.slice(0, at)] = line.slice(at + 1).replace(/^(['"])(.*)\1$/, "$2");
+  }
+  const port = env.PORT || "3000";
+  if (!isValidPort(port)) throw new Error(`Invalid PORT in ${envPath}: ${port}`);
+  let publicUrl;
+  try {
+    publicUrl = new URL(env.BETTER_AUTH_URL || `http://localhost:${port}`);
+  } catch {
+    throw new Error(`Invalid BETTER_AUTH_URL in ${envPath}`);
+  }
+  return { env, port, publicUrl };
+}
+
+/** Restore the installer-owned vhost after every update, including TLS. */
+function reconcileNginx() {
+  const os = detectOS();
+  const { port, publicUrl } = readRuntimeConfig();
+  const domain = publicUrl.hostname;
+  if (!isValidDomain(domain) && domain !== "localhost") {
+    throw new Error(`Invalid domain in BETTER_AUTH_URL: ${domain}`);
+  }
+  const nginx = nginxPaths(os.family);
+  const certDir = `/etc/letsencrypt/live/${domain}`;
+  const hasTls = publicUrl.protocol === "https:" && existsSync(`${certDir}/fullchain.pem`) && existsSync(`${certDir}/privkey.pem`);
+  const vhost = hasTls ? renderNginxTlsVhost({ domain, port }) : renderNginxVhost({ domain, port });
+
+  console.log(c("cyan", "▸ Restore nginx reverse proxy"));
+  writeConf(nginx.conf, vhost, { privileged: true });
+  runSteps([
+    ...(nginx.enabled ? [{ label: "Enable nginx vhost", cmd: `ln -sf ${nginx.conf} ${nginx.enabled}` }] : []),
+    { label: "Verify nginx configuration", cmd: "nginx -t" },
+    { label: "Enable + start nginx", cmd: "systemctl enable --now nginx" },
+    { label: "Reload nginx", cmd: "systemctl reload nginx" },
+    { label: "Verify local application", cmd: `curl --fail --silent --show-error --max-time 15 ${q(`http://127.0.0.1:${port}/api/setup/status`)} >/dev/null` },
+    {
+      label: "Verify domain reverse proxy",
+      cmd: `curl --fail --silent --show-error --max-time 15 --resolve ${q(`${domain}:${hasTls ? "443" : "80"}:127.0.0.1`)} ${q(`${hasTls ? "https" : "http"}://${domain}/api/setup/status`)} >/dev/null`,
+    },
+  ], { privileged: true });
+  return { domain, port, protocol: hasTls ? "https" : "http" };
+}
+
 // ---- commands ----------------------------------------------------------
 
 async function cmdInstall() {
@@ -242,21 +293,29 @@ function cmdUpdate() {
     { label: "Start new service", cmd: "systemctl start mop-agent", privileged: true },
     { label: "Verify service", cmd: "sleep 2 && systemctl is-active --quiet mop-agent", privileged: true },
   ]);
-  console.log(c("green", "\n✓ updated, rebuilt, and service verified\n"));
+  const proxy = reconcileNginx();
+  console.log(c("green", `\n✓ updated and verified through ${proxy.protocol}://${proxy.domain}\n`));
 }
 
 function cmdStatus() {
   banner();
   if (!printInstallLocations()) return;
+  let runtime;
+  try { runtime = readRuntimeConfig(); } catch { runtime = null; }
+  const os = detectOS();
+  const nginx = nginxPaths(os.family);
   const checks = [
     ["service", "systemctl is-active mop-agent 2>/dev/null || echo inactive"],
     ["nginx", "systemctl is-active nginx 2>/dev/null || echo inactive"],
+    ["nginx conf", `test -f ${q(nginx.conf)} && echo present || echo missing`],
+    ...(nginx.enabled ? [["nginx link", `test -L ${q(nginx.enabled)} && echo present || echo missing`]] : []),
     [".env", existsSync(`${APP_DIR}/apps/web/.env`) ? "echo present" : "echo missing"],
+    ...(runtime ? [["local app", `curl --silent --output /dev/null --write-out '%{http_code}' --max-time 5 ${q(`http://127.0.0.1:${runtime.port}/api/setup/status`)} || echo failed`]] : []),
   ];
   for (const [label, cmd] of checks) {
     const r = run(cmd, { capture: true });
     const val = DRY ? "(dry-run)" : r.stdout.trim();
-    console.log(`  ${label.padEnd(10)} ${val === "active" || val === "present" ? c("green", val) : c("yellow", val)}`);
+    console.log(`  ${label.padEnd(10)} ${val === "active" || val === "present" || val === "200" ? c("green", val) : c("yellow", val)}`);
   }
   console.log("");
 }

package/npm-shrinkwrap.json

@@ -1,12 +1,12 @@
 {
   "name": "mop-agent",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "mop-agent",
-      "version": "0.1.7",
+      "version": "0.1.9",
       "license": "UNLICENSED",
       "workspaces": [
         "packages/*",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mop-agent",
-  "version": "0.1.7",
+  "version": "0.1.9",
   "description": "Self-hosted AI assistant with persistent cross-project memory, installed with npx mop-agent.",
   "author": "BURHANDEV ENTERPRISE",
   "license": "UNLICENSED",
@@ -33,6 +33,7 @@
   "files": [
     "apps/web/app",
     "apps/web/bin",
+    "apps/web/components",
     "apps/web/lib",
     "apps/web/scripts",
     "apps/web/.env.example",