neoagent 2.3.1-beta.0 → 2.3.1-beta.100

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.3.1-beta.0",
+  "version": "2.3.1-beta.100",
   "description": "Proactive personal AI agent with no limits",
   "license": "MIT",
   "main": "server/index.js",
@@ -16,6 +16,7 @@
     "runtime",
     "server",
     "extensions",
+    "flutter_app",
     "docs",
     "com.neoagent.plist",
     "LICENSE",
@@ -34,8 +35,8 @@
     "docs:dev": "docusaurus start",
     "docs:build": "docusaurus build",
     "docs:preview": "docusaurus serve build",
-    "flutter:run:web": "cd flutter_app && flutter run -d chrome",
-    "flutter:build:web": "cd flutter_app && flutter build web --output ../server/public --dart-define=NEOAGENT_BACKEND_URL=${NEOAGENT_BACKEND_URL:-}",
+    "flutter:run:web": "cd flutter_app && flutter run -d chrome --dart-define=NEOAGENT_WEB_BUILD_ID=$(node ../scripts/web_build_id.js)",
+    "flutter:build:web": "cd flutter_app && flutter build web --output ../server/public --dart-define=NEOAGENT_BACKEND_URL=${NEOAGENT_BACKEND_URL:-} --dart-define=NEOAGENT_WEB_BUILD_ID=$(node ../scripts/web_build_id.js)",
     "manage": "node bin/neoagent.js",
     "test": "node --test",
     "benchmark:tokens": "node scripts/benchmark-token-cost.js",
@@ -53,6 +54,9 @@
     "@anthropic-ai/sdk": "^0.39.0",
     "@google/generative-ai": "^0.24.0",
     "@modelcontextprotocol/sdk": "^1.12.1",
+    "@remotion/cli": "^4.0.459",
+    "@slidev/cli": "^52.15.2",
+    "@slidev/theme-default": "^0.25.0",
     "baileys": "^6.7.21",
     "bcrypt": "^6.0.0",
     "better-sqlite3": "^11.8.1",
@@ -72,14 +76,18 @@
     "nodemailer": "^8.0.5",
     "openai": "^4.85.4",
     "otplib": "^13.4.0",
+    "playwright-chromium": "^1.59.1",
     "proper-lockfile": "^4.1.2",
     "puppeteer-core": "^24.40.0",
     "puppeteer-extra": "^3.3.6",
     "puppeteer-extra-plugin-stealth": "^2.11.2",
+    "qrcode": "^1.5.4",
+    "remotion": "^4.0.459",
     "sharp": "^0.34.5",
     "socket.io": "^4.8.1",
     "telegraf": "^4.16.3",
     "telnyx": "^5.51.0",
+    "tesseract.js": "^7.0.0",
     "uuid": "^11.1.0",
     "ws": "^8.19.0"
   },

package/runtime/paths.js

@@ -1,6 +1,8 @@
 const fs = require('fs');
+const crypto = require('crypto');
 const os = require('os');
 const path = require('path');
+const { parseEnv } = require('./env');
 
 const APP_DIR = path.resolve(__dirname, '..');
 const HOME_DIR = os.homedir();
@@ -15,6 +17,10 @@ const PID_FILE = path.join(DATA_DIR, 'neoagent.pid');
 const LEGACY_ENV_FILE = path.join(APP_DIR, '.env');
 const LEGACY_DATA_DIR = path.join(APP_DIR, 'data');
 const LEGACY_AGENT_DATA_DIR = path.join(APP_DIR, 'agent-data');
+const DEFAULT_VM_BASE_IMAGE_URLS = Object.freeze({
+  arm64: 'https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-arm64.img',
+  x64: 'https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-amd64.img',
+});
 
 function ensureRuntimeDirs() {
   for (const dir of [RUNTIME_HOME, DATA_DIR, LOG_DIR, AGENT_DATA_DIR]) {
@@ -95,6 +101,134 @@ function migrateLegacyRuntime(logger = () => {}) {
   return changed;
 }
 
+function readEnvFileRaw(envFile = ENV_FILE) {
+  try {
+    return fs.readFileSync(envFile, 'utf8');
+  } catch {
+    return '';
+  }
+}
+
+function upsertEnvValue(envFile, key, value) {
+  const raw = readEnvFileRaw(envFile);
+  const lines = raw ? raw.split('\n') : [];
+  let replaced = false;
+
+  for (let i = 0; i < lines.length; i++) {
+    if (lines[i].startsWith(`${key}=`)) {
+      lines[i] = `${key}=${value}`;
+      replaced = true;
+      break;
+    }
+  }
+
+  if (!replaced) {
+    lines.push(`${key}=${value}`);
+  }
+
+  const output = lines.filter((line, idx, arr) => idx !== arr.length - 1 || line !== '').join('\n') + '\n';
+  fs.mkdirSync(path.dirname(envFile), { recursive: true });
+  fs.writeFileSync(envFile, output, { mode: 0o600 });
+}
+
+function generateSecret(bytes = 32) {
+  return crypto.randomBytes(bytes).toString('hex');
+}
+
+function getDefaultVmBaseImageUrl(arch = 'x64') {
+  return arch === 'arm64' ? DEFAULT_VM_BASE_IMAGE_URLS.arm64 : DEFAULT_VM_BASE_IMAGE_URLS.x64;
+}
+
+function isPlaceholderValue(value, placeholders) {
+  const secret = String(value || '').trim();
+  return !secret || placeholders.has(secret);
+}
+
+function isValidVmGuestToken(value) {
+  const secret = String(value || '').trim();
+  if (!secret || secret.length < 32) return false;
+  if (/^(change|replace|set|your|example|sample|placeholder|token|secret)[-_a-z0-9]*$/i.test(secret)) return false;
+  if (/change-this-guest-token-before-prod/i.test(secret)) return false;
+  if (/^(.)\1+$/.test(secret)) return false;
+  return true;
+}
+
+function ensureSecureRuntimeEnv({ envFile = ENV_FILE, env = process.env, logger = console } = {}) {
+  const raw = readEnvFileRaw(envFile);
+  const parsed = parseEnv(raw);
+  const changes = [];
+  const defaultProfile = 'prod';
+  const sessionPlaceholders = new Set([
+    'neoagent-dev-secret-change-me',
+    'change-this-to-a-random-secret-in-production',
+    'change-me-to-something-random',
+  ]);
+
+  let deploymentProfile = String(env.NEOAGENT_PROFILE || parsed.get('NEOAGENT_PROFILE') || '').trim();
+  if (!deploymentProfile) {
+    deploymentProfile = defaultProfile;
+    upsertEnvValue(envFile, 'NEOAGENT_PROFILE', deploymentProfile);
+    changes.push('NEOAGENT_PROFILE');
+  }
+  env.NEOAGENT_PROFILE = deploymentProfile;
+
+  let vmBaseImageUrl = String(env.NEOAGENT_VM_BASE_IMAGE_URL || parsed.get('NEOAGENT_VM_BASE_IMAGE_URL') || '').trim();
+  const preferredVmBaseImageUrl = getDefaultVmBaseImageUrl();
+  if (!vmBaseImageUrl || /arm64|aarch64/i.test(vmBaseImageUrl)) {
+    vmBaseImageUrl = preferredVmBaseImageUrl;
+    upsertEnvValue(envFile, 'NEOAGENT_VM_BASE_IMAGE_URL', vmBaseImageUrl);
+    changes.push('NEOAGENT_VM_BASE_IMAGE_URL');
+  }
+  env.NEOAGENT_VM_BASE_IMAGE_URL = vmBaseImageUrl;
+
+  let vmMemoryMb = String(env.NEOAGENT_VM_MEMORY_MB || parsed.get('NEOAGENT_VM_MEMORY_MB') || '').trim();
+  if (!vmMemoryMb) {
+    vmMemoryMb = '4096';
+    upsertEnvValue(envFile, 'NEOAGENT_VM_MEMORY_MB', vmMemoryMb);
+    changes.push('NEOAGENT_VM_MEMORY_MB');
+  }
+  env.NEOAGENT_VM_MEMORY_MB = vmMemoryMb;
+
+  let vmCpus = String(env.NEOAGENT_VM_CPUS || parsed.get('NEOAGENT_VM_CPUS') || '').trim();
+  if (!vmCpus) {
+    vmCpus = '2';
+    upsertEnvValue(envFile, 'NEOAGENT_VM_CPUS', vmCpus);
+    changes.push('NEOAGENT_VM_CPUS');
+  }
+  env.NEOAGENT_VM_CPUS = vmCpus;
+
+  let sessionSecret = String(env.SESSION_SECRET || parsed.get('SESSION_SECRET') || '').trim();
+  if (isPlaceholderValue(sessionSecret, sessionPlaceholders)) {
+    sessionSecret = generateSecret(32);
+    upsertEnvValue(envFile, 'SESSION_SECRET', sessionSecret);
+    changes.push('SESSION_SECRET');
+  }
+  env.SESSION_SECRET = sessionSecret;
+
+  let guestToken = String(env.NEOAGENT_VM_GUEST_TOKEN || parsed.get('NEOAGENT_VM_GUEST_TOKEN') || '').trim();
+  if (!isValidVmGuestToken(guestToken)) {
+    guestToken = generateSecret(32);
+    upsertEnvValue(envFile, 'NEOAGENT_VM_GUEST_TOKEN', guestToken);
+    changes.push('NEOAGENT_VM_GUEST_TOKEN');
+  }
+  env.NEOAGENT_VM_GUEST_TOKEN = guestToken;
+
+  if (changes.length > 0 && logger) {
+    const message = `Initialized runtime defaults: ${changes.join(', ')}`;
+    if (typeof logger.info === 'function') {
+      logger.info(message);
+    } else if (typeof logger.log === 'function') {
+      logger.log(message);
+    }
+  }
+
+  return {
+    changes,
+    sessionSecret: env.SESSION_SECRET || null,
+    guestToken: env.NEOAGENT_VM_GUEST_TOKEN || null,
+  };
+}
+
 module.exports = {
   APP_DIR,
   HOME_DIR,
@@ -108,6 +242,9 @@ module.exports = {
   LEGACY_ENV_FILE,
   LEGACY_DATA_DIR,
   LEGACY_AGENT_DATA_DIR,
+  DEFAULT_VM_BASE_IMAGE_URLS,
   ensureRuntimeDirs,
+  ensureSecureRuntimeEnv,
+  getDefaultVmBaseImageUrl,
   migrateLegacyRuntime
 };

package/server/config/analytics.js

@@ -0,0 +1,30 @@
+'use strict';
+
+const DEFAULT_MIXPANEL_TOKEN = '4a47ae6a05cf39a8faf0438a1200dde6';
+
+function normalizeToken(value) {
+  return String(value || '').trim();
+}
+
+function resolveMixpanelToken() {
+  if (Object.prototype.hasOwnProperty.call(process.env, 'NEOAGENT_MIXPANEL_TOKEN')) {
+    return normalizeToken(process.env.NEOAGENT_MIXPANEL_TOKEN);
+  }
+  return normalizeToken(DEFAULT_MIXPANEL_TOKEN);
+}
+
+function getAnalyticsConfig() {
+  const mixpanelToken = resolveMixpanelToken();
+  return {
+    mixpanel: {
+      enabled: mixpanelToken.length > 0,
+      token: mixpanelToken || null,
+    },
+  };
+}
+
+module.exports = {
+  DEFAULT_MIXPANEL_TOKEN,
+  getAnalyticsConfig,
+  resolveMixpanelToken,
+};