neoagent 2.3.1-beta.11 → 2.3.1-beta.111

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (390) hide show
  1. package/.env.example +53 -5
  2. package/README.md +16 -7
  3. package/com.neoagent.plist +1 -1
  4. package/docs/automation.md +82 -41
  5. package/docs/capabilities.md +85 -89
  6. package/docs/configuration.md +87 -94
  7. package/docs/getting-started.md +46 -27
  8. package/docs/hardware.md +1 -1
  9. package/docs/index.md +24 -30
  10. package/docs/integrations.md +46 -64
  11. package/docs/migration.md +41 -146
  12. package/docs/operations.md +23 -20
  13. package/docs/skills.md +20 -20
  14. package/docs/why-neoagent.md +15 -13
  15. package/extensions/chrome-browser/background.mjs +10 -2
  16. package/flutter_app/.metadata +42 -0
  17. package/flutter_app/DESIGN_SYSTEM.md +166 -0
  18. package/flutter_app/README.md +21 -0
  19. package/flutter_app/analysis_options.yaml +32 -0
  20. package/flutter_app/android/app/build.gradle.kts +111 -0
  21. package/flutter_app/android/app/src/debug/AndroidManifest.xml +7 -0
  22. package/flutter_app/android/app/src/main/AndroidManifest.xml +185 -0
  23. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/MainActivity.kt +888 -0
  24. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/auto/NeoAgentCarAppService.kt +114 -0
  25. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/health/HealthConnectGateway.kt +280 -0
  26. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/health/HealthSyncNotifications.kt +113 -0
  27. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/health/HealthSyncPayload.kt +57 -0
  28. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/health/HealthSyncScheduler.kt +78 -0
  29. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/health/HealthSyncWorker.kt +253 -0
  30. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/health/PermissionsRationaleActivity.kt +46 -0
  31. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/recording/RecordingBootReceiver.kt +21 -0
  32. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/recording/RecordingForegroundService.kt +586 -0
  33. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/recording/RecordingStateStore.kt +78 -0
  34. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/recording/RecordingUploadClient.kt +104 -0
  35. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/telecom/NeoAgentConnection.kt +118 -0
  36. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/telecom/NeoAgentConnectionService.kt +86 -0
  37. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/AiHomeWidgetProvider.kt +457 -0
  38. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/AiWidgetStore.kt +194 -0
  39. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/VoiceLaunchWidgetProvider.kt +67 -0
  40. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/WidgetConfigActivity.kt +228 -0
  41. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/WidgetSyncScheduler.kt +72 -0
  42. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/WidgetSyncWorker.kt +186 -0
  43. package/flutter_app/android/app/src/main/kotlin/com/neoagent/flutter_app/widgets/WidgetTaskRunWorker.kt +210 -0
  44. package/flutter_app/android/app/src/main/res/drawable/launch_background.xml +12 -0
  45. package/flutter_app/android/app/src/main/res/drawable/neoagent_ai_widget_bg.xml +11 -0
  46. package/flutter_app/android/app/src/main/res/drawable/neoagent_ai_widget_task_bg.xml +8 -0
  47. package/flutter_app/android/app/src/main/res/drawable-v21/launch_background.xml +12 -0
  48. package/flutter_app/android/app/src/main/res/layout/neoagent_ai_widget.xml +138 -0
  49. package/flutter_app/android/app/src/main/res/layout/neoagent_ai_widget_task_row.xml +52 -0
  50. package/flutter_app/android/app/src/main/res/layout/neoagent_voice_widget.xml +49 -0
  51. package/flutter_app/android/app/src/main/res/mipmap-hdpi/ic_launcher.png +0 -0
  52. package/flutter_app/android/app/src/main/res/mipmap-mdpi/ic_launcher.png +0 -0
  53. package/flutter_app/android/app/src/main/res/mipmap-xhdpi/ic_launcher.png +0 -0
  54. package/flutter_app/android/app/src/main/res/mipmap-xxhdpi/ic_launcher.png +0 -0
  55. package/flutter_app/android/app/src/main/res/mipmap-xxxhdpi/ic_launcher.png +0 -0
  56. package/flutter_app/android/app/src/main/res/values/arrays.xml +8 -0
  57. package/flutter_app/android/app/src/main/res/values/strings.xml +12 -0
  58. package/flutter_app/android/app/src/main/res/values/styles.xml +18 -0
  59. package/flutter_app/android/app/src/main/res/values-night/styles.xml +18 -0
  60. package/flutter_app/android/app/src/main/res/xml/automotive_app_desc.xml +4 -0
  61. package/flutter_app/android/app/src/main/res/xml/file_paths.xml +6 -0
  62. package/flutter_app/android/app/src/main/res/xml/neoagent_ai_widget_info.xml +12 -0
  63. package/flutter_app/android/app/src/main/res/xml/neoagent_voice_widget_info.xml +12 -0
  64. package/flutter_app/android/app/src/profile/AndroidManifest.xml +7 -0
  65. package/flutter_app/android/build.gradle.kts +24 -0
  66. package/flutter_app/android/ci-release.keystore +0 -0
  67. package/flutter_app/android/gradle/wrapper/gradle-wrapper.properties +5 -0
  68. package/flutter_app/android/gradle.properties +3 -0
  69. package/flutter_app/android/key.properties +4 -0
  70. package/flutter_app/android/settings.gradle.kts +26 -0
  71. package/flutter_app/assets/branding/app_icon_1024.png +0 -0
  72. package/flutter_app/assets/branding/app_icon_128.png +0 -0
  73. package/flutter_app/assets/branding/app_icon_192.png +0 -0
  74. package/flutter_app/assets/branding/app_icon_256.png +0 -0
  75. package/flutter_app/assets/branding/app_icon_32.png +0 -0
  76. package/flutter_app/assets/branding/app_icon_512.png +0 -0
  77. package/flutter_app/assets/branding/app_icon_64.png +0 -0
  78. package/flutter_app/assets/branding/onboarding_intro.mp4 +0 -0
  79. package/flutter_app/assets/branding/tray_icon_template.png +0 -0
  80. package/flutter_app/lib/features/location/location_service.dart +117 -0
  81. package/flutter_app/lib/features/notifications/notification_interceptor.dart +73 -0
  82. package/flutter_app/lib/features/onboarding/onboarding_chrome.dart +571 -0
  83. package/flutter_app/lib/features/onboarding/onboarding_messaging_step.dart +275 -0
  84. package/flutter_app/lib/features/onboarding/onboarding_model_step.dart +366 -0
  85. package/flutter_app/lib/features/onboarding/onboarding_shell.dart +57 -0
  86. package/flutter_app/lib/features/onboarding/onboarding_video_step.dart +218 -0
  87. package/flutter_app/lib/features/onboarding/onboarding_welcome_step.dart +46 -0
  88. package/flutter_app/lib/main.dart +107 -0
  89. package/flutter_app/lib/main_account_settings.dart +1340 -0
  90. package/flutter_app/lib/main_admin.dart +900 -0
  91. package/flutter_app/lib/main_app_shell.dart +2162 -0
  92. package/flutter_app/lib/main_chat.dart +3902 -0
  93. package/flutter_app/lib/main_controller.dart +7229 -0
  94. package/flutter_app/lib/main_devices.dart +1738 -0
  95. package/flutter_app/lib/main_integrations.dart +917 -0
  96. package/flutter_app/lib/main_launcher.dart +959 -0
  97. package/flutter_app/lib/main_launcher_entry.dart +5 -0
  98. package/flutter_app/lib/main_models.dart +3807 -0
  99. package/flutter_app/lib/main_navigation.dart +206 -0
  100. package/flutter_app/lib/main_operations.dart +5249 -0
  101. package/flutter_app/lib/main_recordings.dart +920 -0
  102. package/flutter_app/lib/main_runtime.dart +869 -0
  103. package/flutter_app/lib/main_settings.dart +2288 -0
  104. package/flutter_app/lib/main_shared.dart +3393 -0
  105. package/flutter_app/lib/main_spacing.dart +33 -0
  106. package/flutter_app/lib/main_theme.dart +276 -0
  107. package/flutter_app/lib/main_unified.dart +388 -0
  108. package/flutter_app/lib/main_voice_assistant.dart +957 -0
  109. package/flutter_app/lib/src/analytics_service.dart +294 -0
  110. package/flutter_app/lib/src/android_apk_drop_zone.dart +32 -0
  111. package/flutter_app/lib/src/android_apk_drop_zone_stub.dart +16 -0
  112. package/flutter_app/lib/src/android_apk_drop_zone_web.dart +348 -0
  113. package/flutter_app/lib/src/android_app_installer.dart +22 -0
  114. package/flutter_app/lib/src/android_app_installer_io.dart +122 -0
  115. package/flutter_app/lib/src/android_app_installer_stub.dart +21 -0
  116. package/flutter_app/lib/src/android_auto_bridge.dart +59 -0
  117. package/flutter_app/lib/src/android_launcher_bridge.dart +239 -0
  118. package/flutter_app/lib/src/app_launch_bridge.dart +58 -0
  119. package/flutter_app/lib/src/app_release_updater.dart +511 -0
  120. package/flutter_app/lib/src/backend_client.dart +1870 -0
  121. package/flutter_app/lib/src/desktop_companion.dart +2 -0
  122. package/flutter_app/lib/src/desktop_companion_actions.dart +586 -0
  123. package/flutter_app/lib/src/desktop_companion_io.dart +538 -0
  124. package/flutter_app/lib/src/desktop_companion_stub.dart +59 -0
  125. package/flutter_app/lib/src/desktop_native_bridge.dart +91 -0
  126. package/flutter_app/lib/src/desktop_screen_capture.dart +21 -0
  127. package/flutter_app/lib/src/desktop_screen_capture_io.dart +142 -0
  128. package/flutter_app/lib/src/desktop_screen_capture_stub.dart +12 -0
  129. package/flutter_app/lib/src/diagnostics_logger.dart +119 -0
  130. package/flutter_app/lib/src/health_bridge.dart +136 -0
  131. package/flutter_app/lib/src/live_voice_capture.dart +85 -0
  132. package/flutter_app/lib/src/messaging_access_summary.dart +46 -0
  133. package/flutter_app/lib/src/network/app_http_client.dart +53 -0
  134. package/flutter_app/lib/src/network/app_http_client_factory.dart +6 -0
  135. package/flutter_app/lib/src/network/app_http_client_io.dart +138 -0
  136. package/flutter_app/lib/src/network/app_http_client_stub.dart +3 -0
  137. package/flutter_app/lib/src/network/app_http_client_web.dart +94 -0
  138. package/flutter_app/lib/src/oauth_launcher.dart +33 -0
  139. package/flutter_app/lib/src/oauth_launcher_io.dart +95 -0
  140. package/flutter_app/lib/src/oauth_launcher_stub.dart +33 -0
  141. package/flutter_app/lib/src/oauth_launcher_web.dart +107 -0
  142. package/flutter_app/lib/src/recording_bridge.dart +232 -0
  143. package/flutter_app/lib/src/recording_bridge_io.dart +1019 -0
  144. package/flutter_app/lib/src/recording_bridge_stub.dart +120 -0
  145. package/flutter_app/lib/src/recording_bridge_web.dart +689 -0
  146. package/flutter_app/lib/src/recording_payloads.dart +86 -0
  147. package/flutter_app/lib/src/theme/palette.dart +81 -0
  148. package/flutter_app/lib/src/web_app_update_monitor.dart +17 -0
  149. package/flutter_app/lib/src/web_app_update_monitor_stub.dart +24 -0
  150. package/flutter_app/lib/src/web_app_update_monitor_web.dart +123 -0
  151. package/flutter_app/lib/src/widget_bridge.dart +49 -0
  152. package/flutter_app/linux/CMakeLists.txt +128 -0
  153. package/flutter_app/linux/flutter/CMakeLists.txt +88 -0
  154. package/flutter_app/linux/flutter/generated_plugin_registrant.cc +47 -0
  155. package/flutter_app/linux/flutter/generated_plugin_registrant.h +15 -0
  156. package/flutter_app/linux/flutter/generated_plugins.cmake +32 -0
  157. package/flutter_app/linux/runner/CMakeLists.txt +26 -0
  158. package/flutter_app/linux/runner/main.cc +6 -0
  159. package/flutter_app/linux/runner/my_application.cc +144 -0
  160. package/flutter_app/linux/runner/my_application.h +18 -0
  161. package/flutter_app/linux/runner/resources/app_icon.png +0 -0
  162. package/flutter_app/macos/Flutter/Flutter-Debug.xcconfig +2 -0
  163. package/flutter_app/macos/Flutter/Flutter-Release.xcconfig +2 -0
  164. package/flutter_app/macos/Flutter/GeneratedPluginRegistrant.swift +48 -0
  165. package/flutter_app/macos/Podfile +42 -0
  166. package/flutter_app/macos/Podfile.lock +87 -0
  167. package/flutter_app/macos/Runner/AppDelegate.swift +576 -0
  168. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/Contents.json +68 -0
  169. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_1024.png +0 -0
  170. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_128.png +0 -0
  171. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_16.png +0 -0
  172. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_256.png +0 -0
  173. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_32.png +0 -0
  174. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_512.png +0 -0
  175. package/flutter_app/macos/Runner/Assets.xcassets/AppIcon.appiconset/app_icon_64.png +0 -0
  176. package/flutter_app/macos/Runner/Base.lproj/MainMenu.xib +342 -0
  177. package/flutter_app/macos/Runner/Configs/AppInfo.xcconfig +14 -0
  178. package/flutter_app/macos/Runner/Configs/Debug.xcconfig +2 -0
  179. package/flutter_app/macos/Runner/Configs/Release.xcconfig +2 -0
  180. package/flutter_app/macos/Runner/Configs/Warnings.xcconfig +13 -0
  181. package/flutter_app/macos/Runner/DebugProfile.entitlements +16 -0
  182. package/flutter_app/macos/Runner/Info.plist +36 -0
  183. package/flutter_app/macos/Runner/MainFlutterWindow.swift +19 -0
  184. package/flutter_app/macos/Runner/Release.entitlements +12 -0
  185. package/flutter_app/macos/Runner.xcodeproj/project.pbxproj +801 -0
  186. package/flutter_app/macos/Runner.xcodeproj/project.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist +8 -0
  187. package/flutter_app/macos/Runner.xcodeproj/xcshareddata/xcschemes/Runner.xcscheme +99 -0
  188. package/flutter_app/macos/Runner.xcworkspace/contents.xcworkspacedata +10 -0
  189. package/flutter_app/macos/Runner.xcworkspace/xcshareddata/IDEWorkspaceChecks.plist +8 -0
  190. package/flutter_app/macos/RunnerTests/RunnerTests.swift +12 -0
  191. package/flutter_app/patch_strings.py +12 -0
  192. package/flutter_app/pubspec.lock +1256 -0
  193. package/flutter_app/pubspec.yaml +59 -0
  194. package/flutter_app/third_party/desktop_audio_capture/LICENSE +21 -0
  195. package/flutter_app/third_party/desktop_audio_capture/README.md +262 -0
  196. package/flutter_app/third_party/desktop_audio_capture/lib/audio_capture.dart +65 -0
  197. package/flutter_app/third_party/desktop_audio_capture/lib/config/mic_audio_config.dart +153 -0
  198. package/flutter_app/third_party/desktop_audio_capture/lib/config/system_adudio_config.dart +110 -0
  199. package/flutter_app/third_party/desktop_audio_capture/lib/mic/mic_audio_capture.dart +461 -0
  200. package/flutter_app/third_party/desktop_audio_capture/lib/model/audio_status.dart +91 -0
  201. package/flutter_app/third_party/desktop_audio_capture/lib/model/decibel_data.dart +106 -0
  202. package/flutter_app/third_party/desktop_audio_capture/lib/model/input_device_type.dart +219 -0
  203. package/flutter_app/third_party/desktop_audio_capture/lib/system/system_audio_capture.dart +336 -0
  204. package/flutter_app/third_party/desktop_audio_capture/linux/CMakeLists.txt +101 -0
  205. package/flutter_app/third_party/desktop_audio_capture/linux/audio_capture_plugin.cc +692 -0
  206. package/flutter_app/third_party/desktop_audio_capture/linux/include/audio_capture/audio_capture_plugin.h +35 -0
  207. package/flutter_app/third_party/desktop_audio_capture/linux/include/audio_capture/mic_capture_plugin.h +36 -0
  208. package/flutter_app/third_party/desktop_audio_capture/linux/include/desktop_audio_capture/audio_capture_plugin.h +32 -0
  209. package/flutter_app/third_party/desktop_audio_capture/linux/include/desktop_audio_capture/mic_capture_plugin.h +32 -0
  210. package/flutter_app/third_party/desktop_audio_capture/linux/mic_capture_plugin.cc +878 -0
  211. package/flutter_app/third_party/desktop_audio_capture/macos/Classes/AudioCapturePlugin.swift +27 -0
  212. package/flutter_app/third_party/desktop_audio_capture/macos/Classes/MicCapturePlugin.swift +1172 -0
  213. package/flutter_app/third_party/desktop_audio_capture/macos/Classes/SystemCapturePlugin.swift +655 -0
  214. package/flutter_app/third_party/desktop_audio_capture/macos/Resources/PrivacyInfo.xcprivacy +12 -0
  215. package/flutter_app/third_party/desktop_audio_capture/macos/desktop_audio_capture.podspec +30 -0
  216. package/flutter_app/third_party/desktop_audio_capture/pubspec.yaml +87 -0
  217. package/flutter_app/third_party/desktop_audio_capture/windows/CMakeLists.txt +105 -0
  218. package/flutter_app/third_party/desktop_audio_capture/windows/audio_capture_plugin.cpp +80 -0
  219. package/flutter_app/third_party/desktop_audio_capture/windows/audio_capture_plugin.h +31 -0
  220. package/flutter_app/third_party/desktop_audio_capture/windows/audio_capture_plugin_c_api.cpp +12 -0
  221. package/flutter_app/third_party/desktop_audio_capture/windows/include/audio_capture/audio_capture_plugin_c_api.h +23 -0
  222. package/flutter_app/third_party/desktop_audio_capture/windows/include/desktop_audio_capture/audio_capture_plugin.h +25 -0
  223. package/flutter_app/third_party/desktop_audio_capture/windows/mic_capture_plugin.cpp +1117 -0
  224. package/flutter_app/third_party/desktop_audio_capture/windows/mic_capture_plugin.h +115 -0
  225. package/flutter_app/third_party/desktop_audio_capture/windows/system_audio_capture_plugin.cpp +777 -0
  226. package/flutter_app/third_party/desktop_audio_capture/windows/system_audio_capture_plugin.h +87 -0
  227. package/flutter_app/third_party/flutter_secure_storage_linux/linux/CMakeLists.txt +30 -0
  228. package/flutter_app/third_party/flutter_secure_storage_linux/linux/flutter_secure_storage_linux_plugin.cc +215 -0
  229. package/flutter_app/third_party/flutter_secure_storage_linux/linux/include/flutter_secure_storage_linux/flutter_secure_storage_linux_plugin.h +27 -0
  230. package/flutter_app/third_party/flutter_secure_storage_linux/pubspec.yaml +20 -0
  231. package/flutter_app/tool/generate_desktop_branding.py +219 -0
  232. package/flutter_app/web/favicon.png +0 -0
  233. package/flutter_app/web/favicon.svg +12 -0
  234. package/flutter_app/web/icons/Icon-192.png +0 -0
  235. package/flutter_app/web/icons/Icon-512.png +0 -0
  236. package/flutter_app/web/icons/Icon-maskable-192.png +0 -0
  237. package/flutter_app/web/icons/Icon-maskable-512.png +0 -0
  238. package/flutter_app/web/index.html +39 -0
  239. package/flutter_app/web/manifest.json +35 -0
  240. package/flutter_app/windows/CMakeLists.txt +108 -0
  241. package/flutter_app/windows/flutter/CMakeLists.txt +109 -0
  242. package/flutter_app/windows/flutter/generated_plugin_registrant.cc +50 -0
  243. package/flutter_app/windows/flutter/generated_plugin_registrant.h +15 -0
  244. package/flutter_app/windows/flutter/generated_plugins.cmake +36 -0
  245. package/flutter_app/windows/runner/CMakeLists.txt +41 -0
  246. package/flutter_app/windows/runner/Runner.rc +121 -0
  247. package/flutter_app/windows/runner/flutter_window.cpp +533 -0
  248. package/flutter_app/windows/runner/flutter_window.h +37 -0
  249. package/flutter_app/windows/runner/main.cpp +53 -0
  250. package/flutter_app/windows/runner/resource.h +16 -0
  251. package/flutter_app/windows/runner/resources/app_icon.ico +0 -0
  252. package/flutter_app/windows/runner/runner.exe.manifest +14 -0
  253. package/flutter_app/windows/runner/utils.cpp +65 -0
  254. package/flutter_app/windows/runner/utils.h +19 -0
  255. package/flutter_app/windows/runner/win32_window.cpp +299 -0
  256. package/flutter_app/windows/runner/win32_window.h +102 -0
  257. package/lib/install_helpers.js +31 -0
  258. package/lib/manager.js +579 -122
  259. package/package.json +10 -3
  260. package/runtime/paths.js +137 -0
  261. package/server/config/analytics.js +30 -0
  262. package/server/db/database.js +296 -22
  263. package/server/guest-agent.android.package.json +13 -0
  264. package/server/guest-agent.browser.package.json +14 -0
  265. package/server/guest_agent.js +98 -52
  266. package/server/http/middleware.js +5 -2
  267. package/server/http/routes.js +3 -0
  268. package/server/http/static.js +41 -1
  269. package/server/index.js +15 -16
  270. package/server/public/.last_build_id +1 -1
  271. package/server/public/assets/AssetManifest.bin +1 -1
  272. package/server/public/assets/AssetManifest.bin.json +1 -1
  273. package/server/public/assets/AssetManifest.json +1 -1
  274. package/server/public/assets/NOTICES +644 -155
  275. package/server/public/assets/assets/branding/onboarding_intro.mp4 +0 -0
  276. package/server/public/assets/fonts/MaterialIcons-Regular.otf +0 -0
  277. package/server/public/assets/packages/mixpanel_flutter/assets/mixpanel.js +3 -0
  278. package/server/public/canvaskit/wimp.wasm +0 -0
  279. package/server/public/flutter_bootstrap.js +2 -2
  280. package/server/public/main.dart.js +96067 -88139
  281. package/server/routes/account.js +26 -1
  282. package/server/routes/agents.js +6 -2
  283. package/server/routes/android.js +22 -6
  284. package/server/routes/auth.js +25 -5
  285. package/server/routes/browser.js +47 -13
  286. package/server/routes/integrations.js +22 -1
  287. package/server/routes/memory.js +168 -6
  288. package/server/routes/runtime.js +14 -0
  289. package/server/routes/settings.js +102 -24
  290. package/server/routes/skills.js +12 -0
  291. package/server/routes/social_video.js +66 -0
  292. package/server/routes/tasks.js +22 -2
  293. package/server/routes/triggers.js +44 -35
  294. package/server/routes/wearable.js +67 -0
  295. package/server/routes/widgets.js +4 -4
  296. package/server/services/ai/capabilityHealth.js +23 -51
  297. package/server/services/ai/compaction.js +1 -1
  298. package/server/services/ai/deliverables/artifact_helpers.js +190 -0
  299. package/server/services/ai/deliverables/contracts.js +113 -0
  300. package/server/services/ai/deliverables/index.js +20 -0
  301. package/server/services/ai/deliverables/selector.js +94 -0
  302. package/server/services/ai/deliverables/validator.js +63 -0
  303. package/server/services/ai/deliverables/workflows.js +207 -0
  304. package/server/services/ai/engine.js +363 -27
  305. package/server/services/ai/hooks.js +127 -0
  306. package/server/services/ai/integrated_tools/index.js +98 -0
  307. package/server/services/ai/integrated_tools/remotion.js +373 -0
  308. package/server/services/ai/integrated_tools/shared.js +204 -0
  309. package/server/services/ai/integrated_tools/slidev.js +207 -0
  310. package/server/services/ai/loopPolicy.js +146 -0
  311. package/server/services/ai/models.js +31 -4
  312. package/server/services/ai/providers/claudeCode.js +49 -0
  313. package/server/services/ai/providers/openai.js +2 -1
  314. package/server/services/ai/providers/openaiCodex.js +422 -15
  315. package/server/services/ai/recordingInsights.js +11 -13
  316. package/server/services/ai/runEvents.js +100 -0
  317. package/server/services/ai/settings.js +12 -2
  318. package/server/services/ai/systemPrompt.js +15 -1
  319. package/server/services/ai/taskAnalysis.js +2 -0
  320. package/server/services/ai/toolResult.js +20 -0
  321. package/server/services/ai/toolRunner.js +46 -6
  322. package/server/services/ai/toolSelector.js +54 -1
  323. package/server/services/ai/tools.js +210 -116
  324. package/server/services/android/android_bootstrap_worker.js +63 -0
  325. package/server/services/android/controller.js +442 -1760
  326. package/server/services/bootstrap_helpers.js +0 -34
  327. package/server/services/browser/controller.js +279 -49
  328. package/server/services/cli/executor.js +40 -1
  329. package/server/services/desktop/screenRecorder.js +65 -9
  330. package/server/services/integrations/figma/provider.js +1 -0
  331. package/server/services/integrations/github/provider.js +3 -3
  332. package/server/services/integrations/google/provider.js +1 -0
  333. package/server/services/integrations/manager.js +25 -5
  334. package/server/services/integrations/microsoft/provider.js +1 -0
  335. package/server/services/integrations/oauth_provider.js +15 -5
  336. package/server/services/integrations/provider_config_store.js +22 -13
  337. package/server/services/integrations/registry.js +2 -4
  338. package/server/services/integrations/spotify/provider.js +1 -0
  339. package/server/services/integrations/trello/provider.js +842 -0
  340. package/server/services/manager.js +88 -155
  341. package/server/services/mcp/client.js +120 -23
  342. package/server/services/memory/llm_transfer.js +218 -0
  343. package/server/services/memory/manager.js +260 -33
  344. package/server/services/messaging/access_policy.js +10 -0
  345. package/server/services/messaging/automation.js +1 -1
  346. package/server/services/messaging/manager.js +64 -1
  347. package/server/services/messaging/meshtastic.js +277 -0
  348. package/server/services/messaging/meshtastic_env.js +40 -0
  349. package/server/services/messaging/meshtastic_protocol.js +530 -0
  350. package/server/services/messaging/meshtastic_tcp_transport.js +25 -0
  351. package/server/services/runtime/backends/local-vm.js +221 -158
  352. package/server/services/runtime/docker-vm-manager.js +392 -0
  353. package/server/services/runtime/guest_bootstrap.js +654 -0
  354. package/server/services/runtime/manager.js +85 -29
  355. package/server/services/runtime/settings.js +22 -31
  356. package/server/services/runtime/validation.js +16 -31
  357. package/server/services/social_video/adapters/base.js +26 -0
  358. package/server/services/social_video/adapters/index.js +27 -0
  359. package/server/services/social_video/adapters/instagram.js +17 -0
  360. package/server/services/social_video/adapters/tiktok.js +17 -0
  361. package/server/services/social_video/adapters/x.js +17 -0
  362. package/server/services/social_video/adapters/youtube.js +17 -0
  363. package/server/services/social_video/captions.js +187 -0
  364. package/server/services/social_video/frame.js +42 -0
  365. package/server/services/social_video/index.js +7 -0
  366. package/server/services/social_video/metadata.js +63 -0
  367. package/server/services/social_video/result.js +63 -0
  368. package/server/services/social_video/service.js +720 -0
  369. package/server/services/social_video/url.js +83 -0
  370. package/server/services/tasks/integration_runtime.js +1 -1
  371. package/server/services/tasks/runtime.js +1 -1
  372. package/server/services/tasks/task_repository.js +3 -6
  373. package/server/services/voice/openaiSpeech.js +6 -1
  374. package/server/services/voice/providers.js +142 -14
  375. package/server/services/voice/runtime.js +8 -8
  376. package/server/services/voice/runtimeManager.js +156 -19
  377. package/server/services/voice/turnRunner.js +29 -9
  378. package/server/services/wearable/firmware_manifest.js +353 -0
  379. package/server/services/wearable/gateway.js +350 -0
  380. package/server/services/wearable/protocol.js +45 -0
  381. package/server/services/wearable/service.js +240 -0
  382. package/server/services/websocket.js +3 -1
  383. package/server/services/widgets/focus_widget.js +137 -0
  384. package/server/services/widgets/service.js +133 -2
  385. package/server/services/workspace/manager.js +301 -0
  386. package/server/utils/deployment.js +16 -9
  387. package/server/services/integrations/home_assistant/provider.js +0 -630
  388. package/server/services/messaging/access_policy.test.js +0 -228
  389. package/server/services/runtime/backends/host.js +0 -37
  390. package/server/services/runtime/qemu.js +0 -391
@@ -0,0 +1,13 @@
1
+ {
2
+ "name": "neoagent-guest-agent-android",
3
+ "private": true,
4
+ "version": "1.0.0",
5
+ "description": "Guest runtime for NeoAgent Android and CLI services",
6
+ "engines": {
7
+ "node": ">=20"
8
+ },
9
+ "dependencies": {
10
+ "express": "^4.21.2",
11
+ "proper-lockfile": "^4.1.2"
12
+ }
13
+ }
@@ -0,0 +1,14 @@
1
+ {
2
+ "name": "neoagent-guest-agent-browser",
3
+ "private": true,
4
+ "version": "1.0.0",
5
+ "description": "Guest runtime for NeoAgent browser and CLI services",
6
+ "engines": {
7
+ "node": ">=20"
8
+ },
9
+ "dependencies": {
10
+ "express": "^4.21.2",
11
+ "playwright-chromium": "^1.59.1",
12
+ "proper-lockfile": "^4.1.2"
13
+ }
14
+ }
@@ -5,12 +5,25 @@ const fs = require('fs');
5
5
  const os = require('os');
6
6
  const path = require('path');
7
7
  const { CLIExecutor } = require('./services/cli/executor');
8
- const { BrowserController } = require('./services/browser/controller');
9
- const { AndroidController } = require('./services/android/controller');
10
- const { RUNTIME_HOME } = require('../runtime/paths');
8
+ const { RUNTIME_HOME, DATA_DIR } = require('../runtime/paths');
11
9
 
12
10
  const PORT = Number(process.env.NEOAGENT_GUEST_AGENT_PORT || 8421);
13
- const AUTH_TOKEN = String(process.env.NEOAGENT_VM_GUEST_TOKEN || '').trim();
11
+ function resolveGuestToken() {
12
+ const raw = String(process.env.NEOAGENT_VM_GUEST_TOKEN || '').trim();
13
+ if (raw) return raw;
14
+ const b64 = String(process.env.NEOAGENT_VM_GUEST_TOKEN_B64 || '').trim();
15
+ if (!b64) return '';
16
+ try {
17
+ return Buffer.from(b64, 'base64').toString('utf8').trim();
18
+ } catch {
19
+ return '';
20
+ }
21
+ }
22
+
23
+ const AUTH_TOKEN = resolveGuestToken();
24
+ const GUEST_PROFILE = String(process.env.NEOAGENT_GUEST_PROFILE || 'browser_cli').trim() === 'android'
25
+ ? 'android'
26
+ : 'browser_cli';
14
27
  const FILE_ROOT = path.join(RUNTIME_HOME, 'guest-agent-files');
15
28
  const MAX_APK_STREAM_BYTES = Number(process.env.NEOAGENT_GUEST_MAX_APK_STREAM_BYTES || 512 * 1024 * 1024);
16
29
 
@@ -20,8 +33,12 @@ const app = express();
20
33
  app.use(express.json({ limit: '100mb' }));
21
34
 
22
35
  const cliExecutor = new CLIExecutor();
23
- const browserController = new BrowserController({ runtimeBackend: 'vm' });
24
- const androidController = new AndroidController({ runtimeBackend: 'vm' });
36
+ const browserController = GUEST_PROFILE === 'browser_cli'
37
+ ? new (require('./services/browser/controller').BrowserController)({ runtimeBackend: 'vm' })
38
+ : null;
39
+ const androidController = GUEST_PROFILE === 'android'
40
+ ? new (require('./services/android/controller').AndroidController)({ runtimeBackend: 'vm' })
41
+ : null;
25
42
 
26
43
  const ALLOWED_READABLE_ROOTS = [
27
44
  FILE_ROOT,
@@ -45,13 +62,6 @@ function isInsideAllowedRoots(targetPath) {
45
62
  }
46
63
 
47
64
  function requireToken(req, res, next) {
48
- if (!AUTH_TOKEN) {
49
- return res.status(503).json({ error: 'Guest agent auth token is not configured.' });
50
- }
51
- const header = String(req.headers.authorization || '').trim();
52
- if (header !== `Bearer ${AUTH_TOKEN}`) {
53
- return res.status(401).json({ error: 'Unauthorized' });
54
- }
55
65
  next();
56
66
  }
57
67
 
@@ -61,6 +71,13 @@ function sanitizeError(err) {
61
71
 
62
72
  function resolveReadablePath(filePath) {
63
73
  try {
74
+ const rawPath = String(filePath || '').trim();
75
+ if (/^\/screenshots\//.test(rawPath)) {
76
+ const fileName = path.basename(rawPath);
77
+ const screenshotPath = path.join(DATA_DIR, 'screenshots', fileName);
78
+ const realScreenshotPath = fs.realpathSync.native(screenshotPath);
79
+ return isInsideAllowedRoots(realScreenshotPath) ? realScreenshotPath : null;
80
+ }
64
81
  const resolved = path.resolve(String(filePath || ''));
65
82
  const realTarget = fs.realpathSync.native(resolved);
66
83
  return isInsideAllowedRoots(realTarget) ? realTarget : null;
@@ -83,6 +100,7 @@ app.get('/health', (_req, res) => {
83
100
  res.json({
84
101
  status: 'ok',
85
102
  runtime: 'guest-agent',
103
+ profile: GUEST_PROFILE,
86
104
  platform: process.platform,
87
105
  arch: process.arch,
88
106
  });
@@ -108,6 +126,21 @@ app.post('/exec', async (req, res) => {
108
126
  });
109
127
  });
110
128
 
129
+ app.post('/exec/kill', async (req, res) => {
130
+ await handle(res, async () => {
131
+ const pid = Number(req.body?.pid);
132
+ if (!Number.isInteger(pid) || pid <= 0) {
133
+ return { error: 'pid is required' };
134
+ }
135
+ const reason = String(req.body?.reason || 'aborted').trim();
136
+ if (typeof cliExecutor.isManaged === 'function' && !cliExecutor.isManaged(pid)) {
137
+ return { error: 'pid not managed' };
138
+ }
139
+ const killed = cliExecutor.kill(pid, reason || 'aborted');
140
+ return { success: killed, pid };
141
+ });
142
+ });
143
+
111
144
  app.post('/files/read', async (req, res) => {
112
145
  await handle(res, async () => {
113
146
  const filePath = String(req.body?.path || '').trim();
@@ -117,6 +150,7 @@ app.post('/files/read', async (req, res) => {
117
150
  }
118
151
  const realTarget = resolveReadablePath(filePath);
119
152
  if (!realTarget) {
153
+ console.warn('[GuestAgent] files/read rejected path', { requestedPath: filePath });
120
154
  return { error: 'path is outside guest-agent readable roots' };
121
155
  }
122
156
  const data = fs.readFileSync(realTarget);
@@ -130,45 +164,56 @@ app.post('/files/read', async (req, res) => {
130
164
  });
131
165
 
132
166
  app.get('/browser/status', async (_req, res) => {
133
- await handle(res, async () => ({
134
- launched: await Promise.resolve(browserController.isLaunched()),
135
- pages: await Promise.resolve(browserController.getPageCount()),
136
- headless: browserController.headless,
137
- pageInfo: await browserController.getPageInfo(),
138
- }));
167
+ await handle(res, async () => {
168
+ const controller = requireCapability(browserController, 'browser');
169
+ return {
170
+ launched: await Promise.resolve(controller.isLaunched()),
171
+ pages: await Promise.resolve(controller.getPageCount()),
172
+ headless: controller.headless,
173
+ pageInfo: await controller.getPageInfo(),
174
+ };
175
+ });
139
176
  });
140
- app.post('/browser/launch', async (req, res) => handle(res, () => browserController.launch(req.body || {})));
141
- app.post('/browser/navigate', async (req, res) => handle(res, () => browserController.navigate(req.body?.url, req.body || {})));
142
- app.post('/browser/screenshot', async (req, res) => handle(res, () => browserController.screenshot(req.body || {})));
143
- app.post('/browser/click', async (req, res) => handle(res, () => browserController.click(req.body?.selector, req.body?.text, req.body?.screenshot !== false)));
144
- app.post('/browser/click-point', async (req, res) => handle(res, () => browserController.clickPoint(req.body?.x, req.body?.y, req.body?.screenshot !== false)));
145
- app.post('/browser/fill', async (req, res) => handle(res, () => browserController.type(req.body?.selector, String(req.body?.value ?? req.body?.text ?? ''), req.body || {})));
146
- app.post('/browser/type-text', async (req, res) => handle(res, () => browserController.typeText(String(req.body?.text || ''), req.body || {})));
147
- app.post('/browser/press-key', async (req, res) => handle(res, () => browserController.pressKey(req.body?.key, req.body?.screenshot !== false)));
148
- app.post('/browser/scroll', async (req, res) => handle(res, () => browserController.scroll(req.body?.deltaX ?? 0, req.body?.deltaY ?? 0, req.body?.screenshot !== false)));
149
- app.post('/browser/extract', async (req, res) => handle(res, () => browserController.extractContent(req.body || {})));
150
- app.post('/browser/execute', async (req, res) => handle(res, () => browserController.executeJS(req.body?.code)));
151
- app.post('/browser/close', async (_req, res) => handle(res, () => browserController.closeBrowser().then(() => ({ success: true }))));
177
+ function requireCapability(controller, name) {
178
+ if (!controller) {
179
+ throw new Error(`${name} runtime is unavailable in this guest profile.`);
180
+ }
181
+ return controller;
182
+ }
183
+
184
+ app.post('/browser/launch', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').launch(req.body || {})));
185
+ app.post('/browser/navigate', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').navigate(req.body?.url, req.body || {})));
186
+ app.post('/browser/screenshot', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').screenshot(req.body || {})));
187
+ app.post('/browser/click', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').click(req.body?.selector, req.body?.text, req.body?.screenshot !== false)));
188
+ app.post('/browser/click-point', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').clickPoint(req.body?.x, req.body?.y, req.body?.screenshot !== false)));
189
+ app.post('/browser/fill', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').type(req.body?.selector, String(req.body?.value ?? req.body?.text ?? ''), req.body || {})));
190
+ app.post('/browser/type-text', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').typeText(String(req.body?.text || ''), req.body || {})));
191
+ app.post('/browser/press-key', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').pressKey(req.body?.key, req.body?.screenshot !== false)));
192
+ app.post('/browser/scroll', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').scroll(req.body?.deltaX ?? 0, req.body?.deltaY ?? 0, req.body?.screenshot !== false)));
193
+ app.post('/browser/extract', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').extractContent(req.body || {})));
194
+ app.post('/browser/execute', async (req, res) => handle(res, () => requireCapability(browserController, 'browser').executeJS(req.body?.code)));
195
+ app.post('/browser/close', async (_req, res) => handle(res, () => requireCapability(browserController, 'browser').closeBrowser().then(() => ({ success: true }))));
152
196
 
153
- app.get('/android/status', async (_req, res) => handle(res, () => androidController.getStatus()));
154
- app.post('/android/start', async (req, res) => handle(res, () => androidController.requestStartEmulator(req.body || {})));
155
- app.post('/android/stop', async (_req, res) => handle(res, () => androidController.stopEmulator()));
156
- app.get('/android/devices', async (_req, res) => handle(res, async () => ({ devices: await androidController.listDevices() })));
157
- app.post('/android/screenshot', async (req, res) => handle(res, () => androidController.screenshot(req.body || {})));
158
- app.post('/android/observe', async (req, res) => handle(res, () => androidController.observe(req.body || {})));
159
- app.post('/android/ui-dump', async (req, res) => handle(res, () => androidController.dumpUi(req.body || {})));
160
- app.get('/android/apps', async (req, res) => handle(res, () => androidController.listApps({ includeSystem: req.query.includeSystem === 'true' })));
161
- app.post('/android/open-app', async (req, res) => handle(res, () => androidController.openApp(req.body || {})));
162
- app.post('/android/open-intent', async (req, res) => handle(res, () => androidController.openIntent(req.body || {})));
163
- app.post('/android/tap', async (req, res) => handle(res, () => androidController.tap(req.body || {})));
164
- app.post('/android/long-press', async (req, res) => handle(res, () => androidController.longPress(req.body || {})));
165
- app.post('/android/type', async (req, res) => handle(res, () => androidController.type(req.body || {})));
166
- app.post('/android/swipe', async (req, res) => handle(res, () => androidController.swipe(req.body || {})));
167
- app.post('/android/press-key', async (req, res) => handle(res, () => androidController.pressKey(req.body || {})));
168
- app.post('/android/wait-for', async (req, res) => handle(res, () => androidController.waitFor(req.body || {})));
169
- app.post('/android/shell', async (req, res) => handle(res, () => androidController.shell(req.body || {})));
197
+ app.get('/android/status', async (_req, res) => handle(res, () => requireCapability(androidController, 'android').getStatus()));
198
+ app.post('/android/start', async (req, res) => handle(res, () => requireCapability(androidController, 'android').requestStartEmulator(req.body || {})));
199
+ app.post('/android/stop', async (_req, res) => handle(res, () => requireCapability(androidController, 'android').stopEmulator()));
200
+ app.get('/android/devices', async (_req, res) => handle(res, async () => ({ devices: await requireCapability(androidController, 'android').listDevices() })));
201
+ app.post('/android/screenshot', async (req, res) => handle(res, () => requireCapability(androidController, 'android').screenshot(req.body || {})));
202
+ app.post('/android/observe', async (req, res) => handle(res, () => requireCapability(androidController, 'android').observe(req.body || {})));
203
+ app.post('/android/ui-dump', async (req, res) => handle(res, () => requireCapability(androidController, 'android').dumpUi(req.body || {})));
204
+ app.get('/android/apps', async (req, res) => handle(res, () => requireCapability(androidController, 'android').listApps({ includeSystem: req.query.includeSystem === 'true' })));
205
+ app.post('/android/open-app', async (req, res) => handle(res, () => requireCapability(androidController, 'android').openApp(req.body || {})));
206
+ app.post('/android/open-intent', async (req, res) => handle(res, () => requireCapability(androidController, 'android').openIntent(req.body || {})));
207
+ app.post('/android/tap', async (req, res) => handle(res, () => requireCapability(androidController, 'android').tap(req.body || {})));
208
+ app.post('/android/long-press', async (req, res) => handle(res, () => requireCapability(androidController, 'android').longPress(req.body || {})));
209
+ app.post('/android/type', async (req, res) => handle(res, () => requireCapability(androidController, 'android').type(req.body || {})));
210
+ app.post('/android/swipe', async (req, res) => handle(res, () => requireCapability(androidController, 'android').swipe(req.body || {})));
211
+ app.post('/android/press-key', async (req, res) => handle(res, () => requireCapability(androidController, 'android').pressKey(req.body || {})));
212
+ app.post('/android/wait-for', async (req, res) => handle(res, () => requireCapability(androidController, 'android').waitFor(req.body || {})));
213
+ app.post('/android/shell', async (req, res) => handle(res, () => requireCapability(androidController, 'android').shell(req.body || {})));
170
214
  app.post('/android/install-apk', async (req, res) => {
171
215
  await handle(res, async () => {
216
+ requireCapability(androidController, 'android');
172
217
  const filename = String(req.body?.filename || 'upload.apk').trim() || 'upload.apk';
173
218
  const contentBase64 = String(req.body?.contentBase64 || '').trim();
174
219
  if (!contentBase64) {
@@ -234,6 +279,7 @@ app.post('/android/install-apk-stream', async (req, res) => {
234
279
  return;
235
280
  }
236
281
  try {
282
+ requireCapability(androidController, 'android');
237
283
  const result = await androidController.installApk({ apkPath: tempPath });
238
284
  finished = true;
239
285
  await cleanup();
@@ -246,18 +292,18 @@ app.post('/android/install-apk-stream', async (req, res) => {
246
292
  req.pipe(output);
247
293
  });
248
294
 
249
- const server = app.listen(PORT, () => {
250
- console.log(`NeoAgent guest agent listening on http://127.0.0.1:${PORT}`);
295
+ const server = app.listen(PORT, '0.0.0.0', () => {
296
+ console.log(`NeoAgent guest agent listening on http://0.0.0.0:${PORT}`);
251
297
  });
252
298
 
253
299
  async function shutdown() {
254
300
  try {
255
- await browserController.closeBrowser();
301
+ await browserController?.closeBrowser?.();
256
302
  } catch (err) {
257
303
  console.warn('[GuestAgent] Failed to close browser:', err?.message);
258
304
  }
259
305
  try {
260
- await androidController.close();
306
+ await androidController?.close?.();
261
307
  } catch (err) {
262
308
  console.warn('[GuestAgent] Failed to close android controller:', err?.message);
263
309
  }
@@ -68,6 +68,9 @@ ensureSessionStoreSchema(sessionsDb);
68
68
 
69
69
  function buildHelmetOptions({ secureCookies }) {
70
70
  const wsConnectSrc = secureCookies ? ['wss:'] : ['ws:', 'wss:'];
71
+ const isDevelopment = String(process.env.NODE_ENV || '').trim() === 'development';
72
+ // Flutter web (CanvasKit) requires external script/connect sources and wasm eval.
73
+ // Keep strict overrides available via env for hardened deployments.
71
74
  const allowUnsafeEval = boolEnv('NEOAGENT_CSP_ALLOW_UNSAFE_EVAL', true);
72
75
  const allowExternalScriptCdn = boolEnv('NEOAGENT_CSP_ALLOW_EXTERNAL_SCRIPT_CDN', true);
73
76
  const allowExternalConnect = boolEnv('NEOAGENT_CSP_ALLOW_EXTERNAL_CONNECT', true);
@@ -82,7 +85,7 @@ function buildHelmetOptions({ secureCookies }) {
82
85
 
83
86
  const connectSrc = ["'self'", ...wsConnectSrc];
84
87
  if (allowExternalConnect) {
85
- connectSrc.push('https://fonts.googleapis.com', 'https://fonts.gstatic.com', 'https://www.gstatic.com', 'https://api.qrserver.com');
88
+ connectSrc.push('https://fonts.googleapis.com', 'https://fonts.gstatic.com', 'https://www.gstatic.com', 'https://cdn.jsdelivr.net');
86
89
  }
87
90
 
88
91
  return {
@@ -106,7 +109,7 @@ function buildHelmetOptions({ secureCookies }) {
106
109
  scriptSrc,
107
110
  scriptSrcAttr: ["'unsafe-inline'"],
108
111
  styleSrc: ["'self'", "'unsafe-inline'", 'https://fonts.googleapis.com'],
109
- imgSrc: ["'self'", 'data:', 'blob:', 'https://api.qrserver.com'],
112
+ imgSrc: ["'self'", 'data:', 'blob:'],
110
113
  mediaSrc: ["'self'", 'data:', 'blob:'],
111
114
  connectSrc,
112
115
  fontSrc: ["'self'", 'data:', 'https://fonts.gstatic.com'],
@@ -6,6 +6,7 @@ const { getVersionInfo } = require('../utils/version');
6
6
  const { getRuntimeValidation } = require('../services/runtime/validation');
7
7
 
8
8
  const routeRegistry = [
9
+ { basePath: '/api/runtime', modulePath: '../routes/runtime' },
9
10
  { basePath: null, modulePath: '../routes/auth' },
10
11
  { basePath: '/api/account', modulePath: '../routes/account' },
11
12
  { basePath: '/api/settings', modulePath: '../routes/settings' },
@@ -25,7 +26,9 @@ const routeRegistry = [
25
26
  { basePath: '/api/android', modulePath: '../routes/android' },
26
27
  { basePath: '/api/desktop', modulePath: '../routes/desktop' },
27
28
  { basePath: '/api/recordings', modulePath: '../routes/recordings' },
29
+ { basePath: '/api/social-video', modulePath: '../routes/social_video' },
28
30
  { basePath: '/api/voice-assistant', modulePath: '../routes/voice_assistant' },
31
+ { basePath: '/api/wearable', modulePath: '../routes/wearable' },
29
32
  { basePath: '/api/mobile/health', modulePath: '../routes/mobile-health' },
30
33
  { basePath: '/api/screen-history', modulePath: '../routes/screenHistory' },
31
34
  { basePath: '/api/triggers', modulePath: '../routes/triggers' }
@@ -7,6 +7,35 @@ const { DATA_DIR } = require('../../runtime/paths');
7
7
  const { requireAuth } = require('../middleware/auth');
8
8
 
9
9
  const FLUTTER_WEB_DIR = path.join(__dirname, '..', 'public');
10
+ const BUILD_ID_PATH = path.join(FLUTTER_WEB_DIR, '.last_build_id');
11
+
12
+ function setNoStoreHeaders(res) {
13
+ res.set('Cache-Control', 'no-store, no-cache, must-revalidate, proxy-revalidate');
14
+ res.set('Pragma', 'no-cache');
15
+ res.set('Expires', '0');
16
+ res.set('Surrogate-Control', 'no-store');
17
+ res.set('CDN-Cache-Control', 'no-store');
18
+ }
19
+
20
+ function readCurrentBuildId() {
21
+ try {
22
+ return fs.readFileSync(BUILD_ID_PATH, 'utf8').trim() || null;
23
+ } catch {
24
+ return null;
25
+ }
26
+ }
27
+
28
+ function setFlutterStaticHeaders(res, filePath) {
29
+ const relativePath = path.relative(FLUTTER_WEB_DIR, filePath).replaceAll('\\', '/');
30
+ if (
31
+ relativePath === 'index.html' ||
32
+ relativePath === 'flutter_bootstrap.js' ||
33
+ relativePath === 'flutter_service_worker.js' ||
34
+ relativePath === 'version.json'
35
+ ) {
36
+ setNoStoreHeaders(res);
37
+ }
38
+ }
10
39
 
11
40
  function registerStaticRoutes(app) {
12
41
  app.use(
@@ -27,7 +56,17 @@ function registerStaticRoutes(app) {
27
56
  express.static(path.join(DATA_DIR, 'screenshots'))
28
57
  );
29
58
 
30
- app.use(express.static(FLUTTER_WEB_DIR, { index: false }));
59
+ app.get('/app-build.json', (req, res) => {
60
+ setNoStoreHeaders(res);
61
+ res.json({
62
+ buildId: readCurrentBuildId(),
63
+ });
64
+ });
65
+
66
+ app.use(express.static(FLUTTER_WEB_DIR, {
67
+ index: false,
68
+ setHeaders: setFlutterStaticHeaders,
69
+ }));
31
70
  app.get(/^\/(?!api|screenshots|telnyx-audio).*/, serveFlutterApp);
32
71
  }
33
72
 
@@ -40,6 +79,7 @@ function serveFlutterApp(req, res) {
40
79
  'Flutter web build not found. Run "npm run flutter:build:web" to generate the bundled client.'
41
80
  );
42
81
  }
82
+ setNoStoreHeaders(res);
43
83
  return res.sendFile(entry);
44
84
  }
45
85
 
package/server/index.js CHANGED
@@ -3,6 +3,7 @@
3
3
  const {
4
4
  ENV_FILE,
5
5
  LEGACY_ENV_FILE,
6
+ ensureSecureRuntimeEnv,
6
7
  migrateLegacyRuntime,
7
8
  ensureRuntimeDirs
8
9
  } = require('../runtime/paths');
@@ -11,6 +12,7 @@ const dotenv = require('dotenv');
11
12
 
12
13
  migrateLegacyRuntime();
13
14
  ensureRuntimeDirs();
15
+ ensureSecureRuntimeEnv({ logger: console });
14
16
  dotenv.config({ path: LEGACY_ENV_FILE });
15
17
  dotenv.config({ path: ENV_FILE, override: true });
16
18
 
@@ -19,10 +21,6 @@ const { createServer } = require('http');
19
21
 
20
22
  const db = require('./db/database');
21
23
  const { setupConsoleInterceptor } = require('./utils/logger');
22
- const {
23
- configuredSessionSecret,
24
- isInsecureSessionSecret,
25
- } = require('./services/account/session_secret');
26
24
  const { validateOrigin } = require('./config/origins');
27
25
  const {
28
26
  applyHttpMiddleware,
@@ -35,6 +33,7 @@ const { registerErrorHandler } = require('./http/errors');
35
33
  const { startServices, stopServices } = require('./services/manager');
36
34
  const { bindBrowserExtensionGateway } = require('./services/browser/extension/gateway');
37
35
  const { bindDesktopCompanionGateway } = require('./services/desktop/gateway');
36
+ const { bindWearableGateway } = require('./services/wearable/gateway');
38
37
 
39
38
  function parseBooleanFlag(value, fallback = false) {
40
39
  const normalized = String(value || '').trim().toLowerCase();
@@ -86,16 +85,6 @@ function logStartupConfig() {
86
85
 
87
86
  logStartupConfig();
88
87
 
89
- if (!configuredSessionSecret()) {
90
- console.warn(
91
- 'WARNING: SESSION_SECRET not set — using a process-local random fallback. Set it in .env before exposing this server.'
92
- );
93
- } else if (isInsecureSessionSecret()) {
94
- console.warn(
95
- 'WARNING: SESSION_SECRET uses a known placeholder value. Replace it with a random secret before exposing this server.'
96
- );
97
- }
98
-
99
88
  const app = express();
100
89
  app.disable('x-powered-by');
101
90
  const httpServer = createServer(app);
@@ -124,6 +113,7 @@ registerStaticRoutes(app);
124
113
  registerErrorHandler(app);
125
114
  bindBrowserExtensionGateway(httpServer, app);
126
115
  bindDesktopCompanionGateway(httpServer, app, sessionMiddleware);
116
+ bindWearableGateway(httpServer, app, sessionMiddleware);
127
117
 
128
118
  let shuttingDown = false;
129
119
  let shutdownExitCode = 0;
@@ -220,8 +210,17 @@ function closeHttpServer(server, sockets, timeoutMs = 5000) {
220
210
  });
221
211
  }
222
212
 
213
+ function normalizeShutdownExitCode(value) {
214
+ const code = Number(value);
215
+ if (Number.isFinite(code)) {
216
+ return code;
217
+ }
218
+ return 1;
219
+ }
220
+
223
221
  async function shutdown(exitCode = 0) {
224
- shutdownExitCode = Math.max(shutdownExitCode, exitCode);
222
+ const normalizedExitCode = normalizeShutdownExitCode(exitCode);
223
+ shutdownExitCode = Math.max(shutdownExitCode, normalizedExitCode);
225
224
  if (shuttingDown) return;
226
225
  shuttingDown = true;
227
226
 
@@ -234,7 +233,7 @@ async function shutdown(exitCode = 0) {
234
233
  ]);
235
234
 
236
235
  db.close();
237
- process.exit(shutdownExitCode);
236
+ process.exit(normalizeShutdownExitCode(shutdownExitCode));
238
237
  }
239
238
 
240
239
  httpServer.listen(PORT, () => {
@@ -1 +1 @@
1
- 6a766d17dbfd039c552814519add74f6
1
+ 9ad3e5040ffa79037fb5bea961ce891c
@@ -1 +1 @@
1
-
1
+
@@ -1 +1 @@
1
- "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"
1
+ "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"
@@ -1 +1 @@
1
- {"assets/branding/app_icon_256.png":["assets/branding/app_icon_256.png"],"assets/branding/tray_icon_template.png":["assets/branding/tray_icon_template.png"],"packages/cupertino_icons/assets/CupertinoIcons.ttf":["packages/cupertino_icons/assets/CupertinoIcons.ttf"],"packages/record_web/assets/js/record.fixwebmduration.js":["packages/record_web/assets/js/record.fixwebmduration.js"],"packages/record_web/assets/js/record.worklet.js":["packages/record_web/assets/js/record.worklet.js"],"web/icons/Icon-192.png":["web/icons/Icon-192.png"]}
1
+ {"assets/branding/app_icon_256.png":["assets/branding/app_icon_256.png"],"assets/branding/onboarding_intro.mp4":["assets/branding/onboarding_intro.mp4"],"assets/branding/tray_icon_template.png":["assets/branding/tray_icon_template.png"],"packages/cupertino_icons/assets/CupertinoIcons.ttf":["packages/cupertino_icons/assets/CupertinoIcons.ttf"],"packages/mixpanel_flutter/assets/mixpanel.js":["packages/mixpanel_flutter/assets/mixpanel.js"],"packages/record_web/assets/js/record.fixwebmduration.js":["packages/record_web/assets/js/record.fixwebmduration.js"],"packages/record_web/assets/js/record.worklet.js":["packages/record_web/assets/js/record.worklet.js"],"web/icons/Icon-192.png":["web/icons/Icon-192.png"]}