neoagent 2.4.1-beta.8 → 2.4.1

package/server/db/database.js

@@ -581,6 +581,9 @@ db.exec(`
     metadata_json TEXT DEFAULT '{}',
     content TEXT NOT NULL,
     importance INTEGER DEFAULT 5,
+    confidence REAL DEFAULT 0.7,
+    summary TEXT,
+    memory_hash TEXT,
     embedding TEXT,
     access_count INTEGER DEFAULT 0,
     archived INTEGER DEFAULT 0,
@@ -686,6 +689,62 @@ db.exec(`
   CREATE INDEX IF NOT EXISTS idx_memory_ingestion_documents_provider ON memory_ingestion_documents(user_id, agent_id, provider_key, connection_id, updated_at DESC);
   CREATE INDEX IF NOT EXISTS idx_materialized_knowledge_views_user ON materialized_knowledge_views(user_id, agent_id, view_type, updated_at DESC);
 
+  CREATE TABLE IF NOT EXISTS memory_facts (
+    id TEXT PRIMARY KEY,
+    memory_id TEXT NOT NULL,
+    user_id INTEGER NOT NULL,
+    agent_id TEXT,
+    subject TEXT NOT NULL,
+    predicate TEXT NOT NULL,
+    object TEXT NOT NULL,
+    category TEXT DEFAULT 'episodic',
+    confidence REAL DEFAULT 0.7,
+    event_time TEXT,
+    metadata_json TEXT DEFAULT '{}',
+    created_at TEXT DEFAULT (datetime('now')),
+    updated_at TEXT DEFAULT (datetime('now')),
+    FOREIGN KEY (memory_id) REFERENCES memories(id) ON DELETE CASCADE,
+    FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+    FOREIGN KEY (agent_id) REFERENCES agents(id) ON DELETE SET NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS memory_entities (
+    id TEXT PRIMARY KEY,
+    user_id INTEGER NOT NULL,
+    agent_id TEXT,
+    entity_key TEXT NOT NULL,
+    name TEXT NOT NULL,
+    kind TEXT DEFAULT 'concept',
+    aliases_json TEXT DEFAULT '[]',
+    summary TEXT DEFAULT '',
+    mention_count INTEGER DEFAULT 0,
+    first_seen_at TEXT DEFAULT (datetime('now')),
+    last_seen_at TEXT DEFAULT (datetime('now')),
+    metadata_json TEXT DEFAULT '{}',
+    UNIQUE(user_id, agent_id, entity_key),
+    FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+    FOREIGN KEY (agent_id) REFERENCES agents(id) ON DELETE SET NULL
+  );
+
+  CREATE TABLE IF NOT EXISTS memory_entity_mentions (
+    entity_id TEXT NOT NULL,
+    memory_id TEXT NOT NULL,
+    user_id INTEGER NOT NULL,
+    agent_id TEXT,
+    created_at TEXT DEFAULT (datetime('now')),
+    PRIMARY KEY (entity_id, memory_id),
+    FOREIGN KEY (entity_id) REFERENCES memory_entities(id) ON DELETE CASCADE,
+    FOREIGN KEY (memory_id) REFERENCES memories(id) ON DELETE CASCADE,
+    FOREIGN KEY (user_id) REFERENCES users(id) ON DELETE CASCADE,
+    FOREIGN KEY (agent_id) REFERENCES agents(id) ON DELETE SET NULL
+  );
+
+  CREATE INDEX IF NOT EXISTS idx_memory_facts_memory ON memory_facts(memory_id);
+  CREATE INDEX IF NOT EXISTS idx_memory_facts_user ON memory_facts(user_id, agent_id, category, updated_at DESC);
+  CREATE INDEX IF NOT EXISTS idx_memory_entities_user ON memory_entities(user_id, agent_id, mention_count DESC, last_seen_at DESC);
+  CREATE INDEX IF NOT EXISTS idx_memory_entity_mentions_memory ON memory_entity_mentions(memory_id);
+  CREATE INDEX IF NOT EXISTS idx_memory_entity_mentions_entity ON memory_entity_mentions(entity_id);
+
   CREATE TABLE IF NOT EXISTS agent_run_events (
     id INTEGER PRIMARY KEY AUTOINCREMENT,
     run_id TEXT NOT NULL,
@@ -984,6 +1043,16 @@ try {
       INSERT INTO messages_fts(rowid, content, role, user_id, agent_id, run_id, platform, platform_chat_id)
       VALUES (new.id, COALESCE(new.content, ''), new.role, new.user_id, COALESCE(new.agent_id, ''), COALESCE(new.run_id, ''), COALESCE(new.platform, ''), COALESCE(new.platform_chat_id, ''));
     END;
+
+    CREATE VIRTUAL TABLE IF NOT EXISTS memories_fts USING fts5(
+      memory_id UNINDEXED,
+      user_id UNINDEXED,
+      agent_id UNINDEXED,
+      content,
+      category,
+      entities,
+      tokenize = 'porter unicode61'
+    );
   `);
 } catch {
   // FTS5 is optional. The app still works with LIKE-based fallbacks if unavailable.
@@ -1005,6 +1074,25 @@ try {
   // Ignore cleanup failures for obsolete wearable tables.
 }
 
+// Admin 2FA tables (singleton — no foreign key, no user_id)
+db.exec(`
+  CREATE TABLE IF NOT EXISTS admin_two_factor (
+    id              INTEGER PRIMARY KEY CHECK (id = 1),
+    enabled         INTEGER NOT NULL DEFAULT 0,
+    secret          TEXT,
+    pending_secret  TEXT,
+    enabled_at      TEXT,
+    created_at      TEXT NOT NULL DEFAULT (datetime('now')),
+    updated_at      TEXT NOT NULL DEFAULT (datetime('now'))
+  );
+  CREATE TABLE IF NOT EXISTS admin_recovery_codes (
+    id          INTEGER PRIMARY KEY AUTOINCREMENT,
+    code_hash   TEXT NOT NULL,
+    created_at  TEXT NOT NULL DEFAULT (datetime('now')),
+    used_at     TEXT
+  );
+`);
+
 // Migrations for existing databases
 for (const col of [
   "ALTER TABLE agent_runs ADD COLUMN agent_id TEXT",
@@ -1035,6 +1123,9 @@ for (const col of [
   "ALTER TABLE memories ADD COLUMN source_label TEXT",
   "ALTER TABLE memories ADD COLUMN stale_after_days INTEGER",
   "ALTER TABLE memories ADD COLUMN metadata_json TEXT DEFAULT '{}'",
+  "ALTER TABLE memories ADD COLUMN confidence REAL DEFAULT 0.7",
+  "ALTER TABLE memories ADD COLUMN summary TEXT",
+  "ALTER TABLE memories ADD COLUMN memory_hash TEXT",
   "ALTER TABLE scheduled_tasks ADD COLUMN run_at TEXT",
   "ALTER TABLE scheduled_tasks ADD COLUMN one_time INTEGER DEFAULT 0",
   "ALTER TABLE scheduled_tasks ADD COLUMN execution_mode TEXT DEFAULT 'prompt'",
@@ -1094,6 +1185,7 @@ function createAgentScopedIndexes() {
     ['conversation_history', 'CREATE INDEX IF NOT EXISTS idx_conv_history_agent ON conversation_history(user_id, agent_id, created_at DESC)'],
     ['memories', 'CREATE INDEX IF NOT EXISTS idx_memories_agent ON memories(user_id, agent_id, archived, updated_at DESC)'],
     ['memories', 'CREATE INDEX IF NOT EXISTS idx_memories_scope ON memories(user_id, agent_id, scope_type, scope_id, archived, updated_at DESC)'],
+    ['memories', 'CREATE INDEX IF NOT EXISTS idx_memories_hash ON memories(user_id, agent_id, memory_hash, archived)'],
     ['core_memory', 'CREATE INDEX IF NOT EXISTS idx_core_memory_agent ON core_memory(user_id, agent_id, key)'],
     ['ai_widgets', 'CREATE UNIQUE INDEX IF NOT EXISTS idx_ai_widgets_system_key ON ai_widgets(user_id, agent_id, system_key) WHERE system_key IS NOT NULL'],
   ];

package/server/db/ftsQuery.js

@@ -0,0 +1,27 @@
+'use strict';
+
+// Shared builder for SQLite FTS5 MATCH expressions. Any code path that feeds a
+// user-supplied string into a `... MATCH ?` query must route it through here:
+// raw input regularly contains characters that are special in FTS5's query
+// grammar and would otherwise throw at query time.
+//
+// Two pitfalls are handled:
+//   1. Hyphens — inside a MATCH a `-` is the NOT/column operator, so a bareword
+//      like `covid-19*` parses as `covid AND NOT column "19"` and throws
+//      "no such column: 19". The token regex excludes `-`, splitting on it.
+//   2. Bareword operators — an uppercase token such as AND/OR/NOT/NEAR is parsed
+//      as an operator ("syntax error near AND"). FTS5's tokenizer is
+//      case-insensitive, so lowercasing each token neutralizes the collision
+//      while preserving matches.
+//
+// Returns a prefix-matched AND query (e.g. `covid* AND 19*`), or null when the
+// input yields no usable tokens — callers should treat null as "no FTS filter".
+
+function buildFtsQuery(query) {
+  const tokens = String(query || '')
+    .match(/[\p{L}\p{N}_]{2,}/gu) || [];
+  if (!tokens.length) return null;
+  return tokens.map((token) => `${token.toLowerCase().replace(/"/g, '')}*`).join(' AND ');
+}
+
+module.exports = { buildFtsQuery };

package/server/http/routes.js

@@ -18,6 +18,7 @@ const routeRegistry = [
   { basePath: '/api/skills', modulePath: '../routes/skills' },
   { basePath: '/api/store', modulePath: '../routes/store' },
   { basePath: '/api/artifacts', modulePath: '../routes/artifacts' },
+  { basePath: '/api/workspace', modulePath: '../routes/workspace' },
   { basePath: '/api/memory', modulePath: '../routes/memory' },
   { basePath: '/api/tasks', modulePath: '../routes/tasks' },
   { basePath: '/api/widgets', modulePath: '../routes/widgets' },

package/server/http/static.js

@@ -7,6 +7,7 @@ const { DATA_DIR } = require('../../runtime/paths');
 const { requireAuth } = require('../middleware/auth');
 
 const FLUTTER_WEB_DIR = path.join(__dirname, '..', 'public');
+const LANDING_DIR = path.join(__dirname, '..', '..', 'landing');
 const BUILD_ID_PATH = path.join(FLUTTER_WEB_DIR, '.last_build_id');
 
 function setNoStoreHeaders(res) {
@@ -63,11 +64,23 @@ function registerStaticRoutes(app) {
     });
   });
 
-  app.use(express.static(FLUTTER_WEB_DIR, {
-    index: false,
-    setHeaders: setFlutterStaticHeaders,
-  }));
-  app.get(/^\/(?!api|screenshots|telnyx-audio).*/, serveFlutterApp);
+  const adminRouter = require('../routes/admin');
+  app.use('/admin', adminRouter);
+
+  // Flutter app at /app
+  app.use(
+    '/app',
+    express.static(FLUTTER_WEB_DIR, {
+      index: false,
+      setHeaders: setFlutterStaticHeaders,
+    })
+  );
+  app.get(/^\/app(\/.*)?$/, serveFlutterApp);
+
+  // Landing page at /
+  app.use(express.static(LANDING_DIR));
+  app.get('/', (req, res) => res.sendFile(path.join(LANDING_DIR, 'index.html')));
+  app.get('/legal.html', (req, res) => res.sendFile(path.join(LANDING_DIR, 'legal.html')));
 }
 
 function serveFlutterApp(req, res) {
@@ -80,11 +93,15 @@ function serveFlutterApp(req, res) {
       );
   }
   setNoStoreHeaders(res);
-  return res.sendFile(entry);
+  // Rewrite <base href="/"> to <base href="/app/"> so Flutter asset paths resolve correctly
+  const html = fs.readFileSync(entry, 'utf8').replace('<base href="/">', '<base href="/app/">');
+  res.set('Content-Type', 'text/html');
+  return res.send(html);
 }
 
 module.exports = {
   FLUTTER_WEB_DIR,
+  LANDING_DIR,
   registerStaticRoutes,
   serveFlutterApp
 };

package/server/index.js

@@ -103,7 +103,7 @@ const sessionMiddleware = createSessionMiddleware({
 });
 const activeSockets = new Set();
 
-setupConsoleInterceptor(io);
+app.locals.logHistory = setupConsoleInterceptor(io);
 applyHttpMiddleware(app, {
   secureCookies: SECURE_COOKIES,
   trustProxy: TRUST_PROXY,

package/server/middleware/adminAuth.js

@@ -0,0 +1,48 @@
+'use strict';
+
+const crypto = require('crypto');
+
+/**
+ * Constant-time string comparison — prevents timing attacks on API key checks.
+ */
+function safeEqual(a, b) {
+  if (!a || !b) return false;
+  const bufA = Buffer.from(String(a));
+  const bufB = Buffer.from(String(b));
+  if (bufA.length !== bufB.length) {
+    // Lengths differ — do a dummy compare anyway to keep timing consistent
+    crypto.timingSafeEqual(bufA, Buffer.alloc(bufA.length));
+    return false;
+  }
+  return crypto.timingSafeEqual(bufA, bufB);
+}
+
+/**
+ * Allows admin access via either:
+ *   1. Browser session  (`req.session.isAdmin === true`)
+ *   2. API key          (`Authorization: Bearer <ADMIN_API_KEY>`)
+ *
+ * When ADMIN_API_KEY is absent or empty, Bearer auth is disabled entirely.
+ */
+function requireAdminAuth(req, res, next) {
+  // 1. Session-based auth (admin web dashboard)
+  if (req.session?.isAdmin === true) return next();
+
+  // 2. API key auth (programmatic / scripts)
+  const configuredKey = process.env.ADMIN_API_KEY;
+  if (configuredKey) {
+    const authHeader = String(req.headers.authorization || '');
+    if (authHeader.startsWith('Bearer ')) {
+      const provided = authHeader.slice(7).trim();
+      if (safeEqual(provided, configuredKey)) return next();
+    }
+  }
+
+  // 3. Reject
+  if (req.path.startsWith('/api/')) {
+    return res.status(401).json({ error: 'Admin authentication required' });
+  }
+  return res.redirect('/admin/login');
+}
+
+module.exports = { requireAdminAuth };

package/server/middleware/auth.js

@@ -18,43 +18,4 @@ function requireNoAuth(req, res, next) {
   next();
 }
 
-function attachUser(req, res, next) {
-  if (req.session && req.session.userId) {
-    const db = require('../db/database');
-    const now = Date.now();
-    const cacheMaxAgeMs = 5 * 60 * 1000;
-    const cachedUser = req.session._cachedUser;
-    const cachedAt = Number(req.session._cachedUserAt || 0);
-    const cacheFresh = (
-      cachedUser
-      && Number(cachedUser.id) === Number(req.session.userId)
-      && cachedAt > 0
-      && (now - cachedAt) < cacheMaxAgeMs
-    );
-
-    if (cacheFresh) {
-      req.user = { ...cachedUser };
-      return next();
-    }
-
-    const user = db.prepare('SELECT id, username, email, created_at FROM users WHERE id = ?').get(req.session.userId);
-    if (user) {
-      req.user = { ...user };
-      req.session._cachedUser = { ...user };
-      req.session._cachedUserAt = now;
-      console.log(`[Auth] Attached user ${user.id} (${user.username}) to ${req.method} ${req.originalUrl || req.url}`);
-      return next();
-    }
-
-    console.warn(`[Auth] Session user ${req.session.userId} not found for ${req.method} ${req.originalUrl || req.url}; destroying session`);
-    req.session.destroy(() => {});
-    const requestPath = req.originalUrl || req.url || req.path || '';
-    if (requestPath.startsWith('/api/')) {
-      return res.status(401).json({ error: 'Session invalid' });
-    }
-    return res.redirect('/login');
-  }
-  next();
-}
-
-module.exports = { requireAuth, requireNoAuth, attachUser };
+module.exports = { requireAuth, requireNoAuth };

package/server/public/.last_build_id

@@ -1 +1 @@
-f09d02f54b922317d6897b53a29a5868
+dcad55b6198b066ebc14a3b7bb789972

package/server/public/assets/AssetManifest.bin

@@ -1 +1 @@
-
+

package/server/public/assets/AssetManifest.bin.json

@@ -1 +1 @@
-"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"
+"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"

package/server/public/favicon.svg

@@ -1,12 +1,43 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 32 32">
+<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 100 100">
   <defs>
-    <linearGradient id="bg" x1="0%" y1="0%" x2="100%" y2="100%">
-      <stop offset="0%" stop-color="#8f6d3e"/>
-      <stop offset="100%" stop-color="#2f7d6e"/>
+    <linearGradient id="tile" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#705331"></stop>
+      <stop offset="100%" stop-color="#22564c"></stop>
     </linearGradient>
+    <radialGradient id="shine" cx="26%" cy="14%" r="72%">
+      <stop offset="0%" stop-color="#ffffff" stop-opacity="0.22"></stop>
+      <stop offset="100%" stop-color="#ffffff" stop-opacity="0"></stop>
+    </radialGradient>
+    <radialGradient id="core" cx="38%" cy="32%" r="75%">
+      <stop offset="0%" stop-color="#fffdf6"></stop>
+      <stop offset="48%" stop-color="#eee3cc"></stop>
+      <stop offset="100%" stop-color="#b5a888"></stop>
+    </radialGradient>
+    <radialGradient id="node" cx="36%" cy="30%" r="80%">
+      <stop offset="0%" stop-color="#f8dca8"></stop>
+      <stop offset="52%" stop-color="#d3a85f"></stop>
+      <stop offset="100%" stop-color="#9b6f2f"></stop>
+    </radialGradient>
+    <linearGradient id="tube" x1="0%" y1="0%" x2="0%" y2="100%">
+      <stop offset="0%" stop-color="#fffaf0"></stop>
+      <stop offset="52%" stop-color="#efe7d6"></stop>
+      <stop offset="100%" stop-color="#cabf9f"></stop>
+    </linearGradient>
+    <filter id="sh" x="-30%" y="-30%" width="160%" height="160%">
+      <feDropShadow dx="0" dy="1.1" stdDeviation="1.1" flood-color="#000000" flood-opacity="0.45"></feDropShadow>
+    </filter>
+    <clipPath id="tc"><rect x="0" y="0" width="100" height="100" rx="22.5"></rect></clipPath>
   </defs>
-  <rect x="2.5" y="2.5" width="27" height="27" rx="9" ry="9" fill="url(#bg)" stroke="#ffffff" stroke-opacity="0.16" stroke-width="1"/>
-  <polygon points="16,5.7 5.2,11.6 16,17.6 26.8,11.6" fill="white"/>
-  <polyline points="5.2,17.6 16,23.5 26.8,17.6" fill="none" stroke="white" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round"/>
-  <polyline points="5.2,22.7 16,28.1 26.8,22.7" fill="none" stroke="white" stroke-width="2.2" stroke-linecap="round" stroke-linejoin="round"/>
-</svg>
+  <g clip-path="url(#tc)">
+    <rect x="0" y="0" width="100" height="100" fill="url(#tile)"></rect>
+    <rect x="0" y="0" width="100" height="100" fill="url(#shine)"></rect>
+    <g fill="none" stroke="url(#tube)" stroke-linecap="round" filter="url(#sh)">
+      <circle cx="50" cy="50" r="17" stroke-width="5" stroke-dasharray="78 29" transform="rotate(-35 50 50)" stroke-opacity="0.92"></circle>
+      <circle cx="50" cy="50" r="30" stroke-width="5" stroke-dasharray="150 39" transform="rotate(70 50 50)" stroke-opacity="0.8"></circle>
+    </g>
+    <circle cx="50" cy="50" r="7" fill="url(#core)"></circle>
+    <circle cx="50" cy="20" r="5.6" fill="url(#node)"></circle>
+    <circle cx="48" cy="18.4" r="1.7" fill="#fff7e6" fill-opacity="0.8"></circle>
+  </g>
+  <rect x="0.6" y="0.6" width="98.8" height="98.8" rx="22" fill="none" stroke="#ffffff" stroke-opacity="0.16" stroke-width="1.2"></rect>
+</svg>

package/server/public/favicon_light.svg

@@ -0,0 +1,43 @@
+<svg xmlns="http://www.w3.org/2000/svg" width="512" height="512" viewBox="0 0 100 100">
+  <defs>
+    <linearGradient id="tile" x1="0%" y1="0%" x2="100%" y2="100%">
+      <stop offset="0%" stop-color="#705331"></stop>
+      <stop offset="100%" stop-color="#22564c"></stop>
+    </linearGradient>
+    <radialGradient id="shine" cx="26%" cy="14%" r="72%">
+      <stop offset="0%" stop-color="#ffffff" stop-opacity="0.22"></stop>
+      <stop offset="100%" stop-color="#ffffff" stop-opacity="0"></stop>
+    </radialGradient>
+    <radialGradient id="core" cx="38%" cy="32%" r="75%">
+      <stop offset="0%" stop-color="#fffdf6"></stop>
+      <stop offset="48%" stop-color="#eee3cc"></stop>
+      <stop offset="100%" stop-color="#b5a888"></stop>
+    </radialGradient>
+    <radialGradient id="node" cx="36%" cy="30%" r="80%">
+      <stop offset="0%" stop-color="#f8dca8"></stop>
+      <stop offset="52%" stop-color="#d3a85f"></stop>
+      <stop offset="100%" stop-color="#9b6f2f"></stop>
+    </radialGradient>
+    <linearGradient id="tube" x1="0%" y1="0%" x2="0%" y2="100%">
+      <stop offset="0%" stop-color="#fffaf0"></stop>
+      <stop offset="52%" stop-color="#efe7d6"></stop>
+      <stop offset="100%" stop-color="#cabf9f"></stop>
+    </linearGradient>
+    <filter id="sh" x="-30%" y="-30%" width="160%" height="160%">
+      <feDropShadow dx="0" dy="1.1" stdDeviation="1.1" flood-color="#000000" flood-opacity="0.45"></feDropShadow>
+    </filter>
+    <clipPath id="tc"><rect x="0" y="0" width="100" height="100" rx="22.5"></rect></clipPath>
+  </defs>
+  <g clip-path="url(#tc)">
+    <rect x="0" y="0" width="100" height="100" fill="url(#tile)"></rect>
+    <rect x="0" y="0" width="100" height="100" fill="url(#shine)"></rect>
+    <g fill="none" stroke="url(#tube)" stroke-linecap="round" filter="url(#sh)">
+      <circle cx="50" cy="50" r="17" stroke-width="5" stroke-dasharray="78 29" transform="rotate(-35 50 50)" stroke-opacity="0.92"></circle>
+      <circle cx="50" cy="50" r="30" stroke-width="5" stroke-dasharray="150 39" transform="rotate(70 50 50)" stroke-opacity="0.8"></circle>
+    </g>
+    <circle cx="50" cy="50" r="7" fill="url(#core)"></circle>
+    <circle cx="50" cy="20" r="5.6" fill="url(#node)"></circle>
+    <circle cx="48" cy="18.4" r="1.7" fill="#fff7e6" fill-opacity="0.8"></circle>
+  </g>
+  <rect x="0.6" y="0.6" width="98.8" height="98.8" rx="22" fill="none" stroke="#ffffff" stroke-opacity="0.16" stroke-width="1.2"></rect>
+</svg>

package/server/public/flutter_bootstrap.js

@@ -33,10 +33,10 @@ addEventListener("message", eventListener);
 if (!window._flutter) {
   window._flutter = {};
 }
-_flutter.buildConfig = {"engineRevision":"4c525dac5ebe5971c5708ef73558ed8edcf4a362","builds":[{"compileTarget":"dart2js","renderer":"canvaskit","mainJsPath":"main.dart.js"},{}]};
+_flutter.buildConfig = {"engineRevision":"c416acfeb8126e097f758c664aaa3da929e27da0","builds":[{"compileTarget":"dart2js","renderer":"canvaskit","mainJsPath":"main.dart.js"},{}]};
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "1854193544" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "141262336" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });