neoagent 2.3.1-beta.67 → 2.3.1-beta.68

package/.env.example

@@ -4,7 +4,8 @@
 
 PORT=3333
 NODE_ENV=production
-SESSION_SECRET=change-this-to-a-random-secret-in-production
+# Auto-generated on first start or setup if left blank.
+SESSION_SECRET=
 
 # Optional: dedicated key for encrypting local at-rest secrets (for example API_KEYS.json).
 # If unset, encryption falls back to SESSION_SECRET.
@@ -23,7 +24,7 @@ NEOAGENT_DEPLOYMENT_MODE=self_hosted
 # Deployment profile:
 #   private -> single-user / trusted host runtime
 #   prod    -> multi-user / isolated per-user VM runtime
-NEOAGENT_PROFILE=private
+NEOAGENT_PROFILE=prod
 
 # VM runtime settings used by `prod`.
 # Set these before switching NEOAGENT_PROFILE=prod.
@@ -38,9 +39,8 @@ NEOAGENT_VM_BASE_IMAGE=
 
 # The guest image must boot a Linux guest that runs `npm run start:guest-agent`
 # and exposes the guest agent on port 8421.
-# Replace this placeholder before using NEOAGENT_PROFILE=prod.
-# Example: openssl rand -hex 32
-NEOAGENT_VM_GUEST_TOKEN=change-this-guest-token-before-prod
+# Auto-generated on first start or setup if left blank.
+NEOAGENT_VM_GUEST_TOKEN=
 NEOAGENT_VM_MEMORY_MB=4096
 NEOAGENT_VM_CPUS=2
 

package/lib/manager.js

@@ -18,6 +18,7 @@ const {
   LOG_DIR,
   ENV_FILE,
   PID_FILE,
+  getDefaultVmBaseImageUrl,
   ensureRuntimeDirs,
   migrateLegacyRuntime
 } = require('../runtime/paths');
@@ -425,6 +426,7 @@ async function cmdSetup() {
   ensureRuntimeDirs();
 
   const current = Object.fromEntries(parseEnv(readEnvFileRaw()).entries());
+  const defaultVmBaseImageUrl = getDefaultVmBaseImageUrl();
 
   logInfo('Press Enter to keep the current value shown in brackets.');
 
@@ -436,7 +438,7 @@ async function cmdSetup() {
   const secureCookies = await ask('Secure cookies (true/false)', secureCookiesDefault);
   const trustProxyDefault = current.TRUST_PROXY || secureCookiesDefault;
   const trustProxy = await ask('Trust reverse proxy headers (true/false)', trustProxyDefault);
-  const sessionSecret = await askSecret('Session secret', current.SESSION_SECRET || randomSecret());
+  const sessionSecret = current.SESSION_SECRET || randomSecret();
   const deploymentMode = await ask(
     'Deployment mode (self_hosted/managed)',
     current.NEOAGENT_DEPLOYMENT_MODE || 'self_hosted'
@@ -446,6 +448,11 @@ async function cmdSetup() {
     current.NEOAGENT_RELEASE_CHANNEL || 'stable'
   );
   const origins = await ask('Allowed CORS origins', current.ALLOWED_ORIGINS || '');
+  const deploymentProfile = current.NEOAGENT_PROFILE || 'prod';
+  const vmBaseImageUrl = current.NEOAGENT_VM_BASE_IMAGE_URL || defaultVmBaseImageUrl;
+  const vmMemoryMb = current.NEOAGENT_VM_MEMORY_MB || '4096';
+  const vmCpus = current.NEOAGENT_VM_CPUS || '2';
+  const vmGuestToken = current.NEOAGENT_VM_GUEST_TOKEN || randomSecret();
 
   heading('AI Providers');
   const anthropic = await askSecret('Anthropic API key', current.ANTHROPIC_API_KEY || '');
@@ -562,8 +569,13 @@ async function cmdSetup() {
     `SECURE_COOKIES=${normalizedSecureCookies}`,
     `TRUST_PROXY=${normalizedTrustProxy}`,
     `SESSION_SECRET=${sessionSecret}`,
+    `NEOAGENT_PROFILE=${deploymentProfile}`,
     `NEOAGENT_DEPLOYMENT_MODE=${normalizedDeploymentMode}`,
     `NEOAGENT_RELEASE_CHANNEL=${normalizedReleaseChannel}`,
+    `NEOAGENT_VM_BASE_IMAGE_URL=${vmBaseImageUrl}`,
+    `NEOAGENT_VM_MEMORY_MB=${vmMemoryMb}`,
+    `NEOAGENT_VM_CPUS=${vmCpus}`,
+    `NEOAGENT_VM_GUEST_TOKEN=${vmGuestToken}`,
     anthropic ? `ANTHROPIC_API_KEY=${anthropic}` : '',
     anthropicBaseUrl ? `ANTHROPIC_BASE_URL=${anthropicBaseUrl}` : '',
     openai ? `OPENAI_API_KEY=${openai}` : '',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.3.1-beta.67",
+  "version": "2.3.1-beta.68",
   "description": "Proactive personal AI agent with no limits",
   "license": "MIT",
   "main": "server/index.js",

package/runtime/paths.js

@@ -17,6 +17,10 @@ const PID_FILE = path.join(DATA_DIR, 'neoagent.pid');
 const LEGACY_ENV_FILE = path.join(APP_DIR, '.env');
 const LEGACY_DATA_DIR = path.join(APP_DIR, 'data');
 const LEGACY_AGENT_DATA_DIR = path.join(APP_DIR, 'agent-data');
+const DEFAULT_VM_BASE_IMAGE_URLS = Object.freeze({
+  arm64: 'https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-arm64.img',
+  x64: 'https://cloud-images.ubuntu.com/releases/24.04/release/ubuntu-24.04-server-cloudimg-amd64.img',
+});
 
 function ensureRuntimeDirs() {
   for (const dir of [RUNTIME_HOME, DATA_DIR, LOG_DIR, AGENT_DATA_DIR]) {
@@ -131,6 +135,10 @@ function generateSecret(bytes = 32) {
   return crypto.randomBytes(bytes).toString('hex');
 }
 
+function getDefaultVmBaseImageUrl(arch = process.arch) {
+  return arch === 'arm64' ? DEFAULT_VM_BASE_IMAGE_URLS.arm64 : DEFAULT_VM_BASE_IMAGE_URLS.x64;
+}
+
 function isPlaceholderValue(value, placeholders) {
   const secret = String(value || '').trim();
   return !secret || placeholders.has(secret);
@@ -149,12 +157,45 @@ function ensureSecureRuntimeEnv({ envFile = ENV_FILE, env = process.env, logger
   const raw = readEnvFileRaw(envFile);
   const parsed = parseEnv(raw);
   const changes = [];
+  const defaultProfile = 'prod';
   const sessionPlaceholders = new Set([
     'neoagent-dev-secret-change-me',
     'change-this-to-a-random-secret-in-production',
     'change-me-to-something-random',
   ]);
 
+  let deploymentProfile = String(env.NEOAGENT_PROFILE || parsed.get('NEOAGENT_PROFILE') || '').trim();
+  if (!deploymentProfile) {
+    deploymentProfile = defaultProfile;
+    env.NEOAGENT_PROFILE = deploymentProfile;
+    upsertEnvValue(envFile, 'NEOAGENT_PROFILE', deploymentProfile);
+    changes.push('NEOAGENT_PROFILE');
+  }
+
+  let vmBaseImageUrl = String(env.NEOAGENT_VM_BASE_IMAGE_URL || parsed.get('NEOAGENT_VM_BASE_IMAGE_URL') || '').trim();
+  if (!vmBaseImageUrl) {
+    vmBaseImageUrl = getDefaultVmBaseImageUrl();
+    env.NEOAGENT_VM_BASE_IMAGE_URL = vmBaseImageUrl;
+    upsertEnvValue(envFile, 'NEOAGENT_VM_BASE_IMAGE_URL', vmBaseImageUrl);
+    changes.push('NEOAGENT_VM_BASE_IMAGE_URL');
+  }
+
+  let vmMemoryMb = String(env.NEOAGENT_VM_MEMORY_MB || parsed.get('NEOAGENT_VM_MEMORY_MB') || '').trim();
+  if (!vmMemoryMb) {
+    vmMemoryMb = '4096';
+    env.NEOAGENT_VM_MEMORY_MB = vmMemoryMb;
+    upsertEnvValue(envFile, 'NEOAGENT_VM_MEMORY_MB', vmMemoryMb);
+    changes.push('NEOAGENT_VM_MEMORY_MB');
+  }
+
+  let vmCpus = String(env.NEOAGENT_VM_CPUS || parsed.get('NEOAGENT_VM_CPUS') || '').trim();
+  if (!vmCpus) {
+    vmCpus = '2';
+    env.NEOAGENT_VM_CPUS = vmCpus;
+    upsertEnvValue(envFile, 'NEOAGENT_VM_CPUS', vmCpus);
+    changes.push('NEOAGENT_VM_CPUS');
+  }
+
   let sessionSecret = String(env.SESSION_SECRET || parsed.get('SESSION_SECRET') || '').trim();
   if (isPlaceholderValue(sessionSecret, sessionPlaceholders)) {
     sessionSecret = generateSecret(32);
@@ -172,7 +213,7 @@ function ensureSecureRuntimeEnv({ envFile = ENV_FILE, env = process.env, logger
   }
 
   if (changes.length > 0 && logger) {
-    const message = `Initialized secure runtime secrets: ${changes.join(', ')}`;
+    const message = `Initialized runtime defaults: ${changes.join(', ')}`;
     if (typeof logger.info === 'function') {
       logger.info(message);
     } else if (typeof logger.log === 'function') {
@@ -200,7 +241,9 @@ module.exports = {
   LEGACY_ENV_FILE,
   LEGACY_DATA_DIR,
   LEGACY_AGENT_DATA_DIR,
+  DEFAULT_VM_BASE_IMAGE_URLS,
   ensureRuntimeDirs,
   ensureSecureRuntimeEnv,
+  getDefaultVmBaseImageUrl,
   migrateLegacyRuntime
 };

package/server/public/.last_build_id

@@ -1 +1 @@
-d4a028d4f0ac72510e406325f227aae2
+2cdc5aa958700a8fae243c563d18825d

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"42d3d75a56efe1a2e9902f52dc8006099c45d9
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "889725162" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "1009655341" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });

package/server/public/main.dart.js

@@ -127230,7 +127230,7 @@ r===$&&A.b()
 o.push(A.id(p,A.iS(!1,new A.a3(B.tE,A.dZ(new A.cU(B.h8,new A.a5p(r,p),p),p,p),p),!1,B.I,!0),p,p,0,0,0,p))}r=!1
 if(!s.ay)if(!s.ch){r=s.e
 r===$&&A.b()
-r=B.b.A("mp0we32e-3c36f1d").length!==0&&r.b}if(r){r=s.d
+r=B.b.A("mp0wqm0n-9104fe4").length!==0&&r.b}if(r){r=s.d
 r===$&&A.b()
 r=r.V&&!r.a0?84:0
 q=s.e
@@ -131894,7 +131894,7 @@ $S:324}
 A.Y0.prototype={}
 A.R0.prototype={
 mJ(a){var s=this
-if(B.b.A("mp0we32e-3c36f1d").length===0||s.a!=null)return
+if(B.b.A("mp0wqm0n-9104fe4").length===0||s.a!=null)return
 s.zY()
 s.a=A.pN(B.Pr,new A.b3g(s))},
 zY(){var s=0,r=A.l(t.H),q,p=2,o=[],n=this,m,l,k,j,i,h,g,f
@@ -131912,7 +131912,7 @@ if(!t.f.b(k)){s=1
 break}i=J.Z(k,"buildId")
 h=i==null?null:B.b.A(J.r(i))
 j=h==null?"":h
-if(J.bi(j)===0||J.c(j,"mp0we32e-3c36f1d")){s=1
+if(J.bi(j)===0||J.c(j,"mp0wqm0n-9104fe4")){s=1
 break}n.b=!0
 n.J()
 p=2
@@ -131929,7 +131929,7 @@ case 2:return A.i(o.at(-1),r)}})
 return A.k($async$zY,r)},
 v_(){var s=0,r=A.l(t.H),q,p=2,o=[],n=this,m,l,k,j,i,h,g,f,e,d,c,b,a,a0,a1
 var $async$v_=A.h(function(a2,a3){if(a2===1){o.push(a3)
-s=p}for(;;)switch(s){case 0:if(B.b.A("mp0we32e-3c36f1d").length===0||n.c){s=1
+s=p}for(;;)switch(s){case 0:if(B.b.A("mp0wqm0n-9104fe4").length===0||n.c){s=1
 break}n.c=!0
 n.J()
 p=4