neoagent 2.4.4-beta.0 → 2.4.4-beta.11

package/server/admin/admin.js

@@ -225,6 +225,7 @@ async function triggerUpdate() {
 async function loadConfig() {
   const el = document.getElementById('config-content');
   if (!el) return;
+  loadEmailConfig();
   try {
     const data = await api('/admin/api/config').then((r) => r.json());
     const cfg  = data.config || {};
@@ -246,6 +247,156 @@ async function loadConfig() {
   }
 }
 
+async function loadEmailConfig() {
+  const el = document.getElementById('email-config-content');
+  if (!el) return;
+  try {
+    const data = await api('/admin/api/config/email').then((r) => r.json());
+    const s = data.settings || {};
+    const status = data.configured
+      ? '<span class="badge badge-ok">configured</span><span>Account emails are enabled.</span>'
+      : `<span class="badge badge-idle">not configured</span><span>Missing: ${esc((data.missing || []).join(', '))}</span>`;
+
+    el.innerHTML = `
+      <div class="email-settings-status">${status}</div>
+      <form id="email-settings-form" onsubmit="saveEmailConfig(event)">
+        <div class="email-settings-grid">
+          <div class="field field-wide">
+            <label for="email-from">Sender address</label>
+            <input type="text" id="email-from" value="${esc(s.from)}" autocomplete="off">
+          </div>
+          <div class="field">
+            <label for="email-smtp-host">SMTP host</label>
+            <input type="text" id="email-smtp-host" value="${esc(s.smtpHost)}" autocomplete="off" spellcheck="false">
+          </div>
+          <div class="field">
+            <label for="email-smtp-port">SMTP port</label>
+            <input type="text" inputmode="numeric" id="email-smtp-port" value="${esc(s.smtpPort)}" autocomplete="off">
+          </div>
+          <div class="field">
+            <label for="email-smtp-user">SMTP username</label>
+            <input type="text" id="email-smtp-user" value="${esc(s.smtpUser)}" autocomplete="off" spellcheck="false">
+          </div>
+          <div class="field">
+            <label for="email-smtp-password">SMTP password</label>
+            <input type="password" id="email-smtp-password" value="" autocomplete="new-password">
+            <div style="font-size:11px;color:var(--text-muted);margin-top:6px;">
+              ${s.smtpPasswordConfigured ? 'A password is stored. Leave blank to keep it.' : 'No password is stored.'}
+            </div>
+          </div>
+          <div class="field">
+            <label for="email-reply-to">Reply-To address</label>
+            <input type="text" id="email-reply-to" value="${esc(s.replyTo)}" autocomplete="off">
+          </div>
+          <div class="field">
+            <label for="email-brand-name">Brand name</label>
+            <input type="text" id="email-brand-name" value="${esc(s.brandName)}" autocomplete="off">
+          </div>
+          <div class="field">
+            <label for="email-public-url">Public URL override</label>
+            <input type="text" id="email-public-url" value="${esc(s.publicUrl)}" autocomplete="off" spellcheck="false">
+          </div>
+          <div class="field">
+            <label for="email-support-url">Support URL</label>
+            <input type="text" id="email-support-url" value="${esc(s.supportUrl)}" autocomplete="off" spellcheck="false">
+          </div>
+          <div class="field">
+            <label for="email-token-ttl">Link lifetime (hours)</label>
+            <input type="text" inputmode="numeric" id="email-token-ttl" value="${esc(s.tokenTtlHours)}" autocomplete="off">
+          </div>
+        </div>
+        <div class="email-settings-checks">
+          ${emailConfigCheckbox('email-smtp-secure', 'Implicit TLS', s.smtpSecure)}
+          ${emailConfigCheckbox('email-smtp-require-tls', 'Require STARTTLS', s.smtpRequireTls)}
+          ${emailConfigCheckbox('email-smtp-reject-unauthorized', 'Reject invalid TLS certificates', s.smtpRejectUnauthorized)}
+          ${emailConfigCheckbox('email-signup-confirmation', 'Require signup confirmation', s.requireSignupConfirmation)}
+          ${emailConfigCheckbox('email-change-confirmation', 'Require email change confirmation', s.requireEmailChangeConfirmation)}
+          ${emailConfigCheckbox('email-notify-login', 'Notify on unusual login', s.notifyUnusualLogin)}
+          ${emailConfigCheckbox('email-notify-account', 'Notify on account changes', s.notifyAccountChanges)}
+        </div>
+        <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;">
+          <button class="btn btn-primary" type="submit">Save Email Settings</button>
+          ${s.smtpPasswordConfigured ? '<button class="btn btn-danger" type="button" onclick="clearEmailPassword(this)">Remove SMTP Password</button>' : ''}
+        </div>
+      </form>`;
+  } catch (err) {
+    if (err.message !== 'unauthorized') {
+      el.innerHTML = '<div class="empty">Failed to load email configuration</div>';
+    }
+  }
+}
+
+function emailConfigCheckbox(id, label, checked) {
+  return `<label class="email-setting-check" for="${id}">
+    <input type="checkbox" id="${id}" ${checked ? 'checked' : ''}>
+    <span>${esc(label)}</span>
+  </label>`;
+}
+
+function emailConfigValue(id) {
+  return document.getElementById(id)?.value?.trim() || '';
+}
+
+function collectEmailConfig(clearSmtpPassword = false) {
+  return {
+    from: emailConfigValue('email-from'),
+    smtpHost: emailConfigValue('email-smtp-host'),
+    smtpPort: emailConfigValue('email-smtp-port'),
+    smtpUser: emailConfigValue('email-smtp-user'),
+    smtpPassword: clearSmtpPassword ? '' : emailConfigValue('email-smtp-password'),
+    clearSmtpPassword,
+    smtpSecure: document.getElementById('email-smtp-secure')?.checked === true,
+    smtpRequireTls: document.getElementById('email-smtp-require-tls')?.checked === true,
+    smtpRejectUnauthorized: document.getElementById('email-smtp-reject-unauthorized')?.checked === true,
+    replyTo: emailConfigValue('email-reply-to'),
+    requireSignupConfirmation: document.getElementById('email-signup-confirmation')?.checked === true,
+    requireEmailChangeConfirmation: document.getElementById('email-change-confirmation')?.checked === true,
+    notifyUnusualLogin: document.getElementById('email-notify-login')?.checked === true,
+    notifyAccountChanges: document.getElementById('email-notify-account')?.checked === true,
+    brandName: emailConfigValue('email-brand-name'),
+    supportUrl: emailConfigValue('email-support-url'),
+    publicUrl: emailConfigValue('email-public-url'),
+    tokenTtlHours: emailConfigValue('email-token-ttl'),
+  };
+}
+
+async function persistEmailConfig(payload, btn) {
+  const original = btn?.textContent;
+  if (btn) {
+    btn.disabled = true;
+    btn.textContent = 'Saving…';
+  }
+  try {
+    const res = await api('/admin/api/config/email', {
+      method: 'PUT',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify(payload),
+    });
+    const body = await res.json().catch(() => ({}));
+    if (!res.ok) {
+      alert(body.error || 'Failed to save email settings');
+      return;
+    }
+    await loadEmailConfig();
+  } catch (err) {
+    if (err.message !== 'unauthorized') alert('Network error');
+  } finally {
+    if (btn?.isConnected) {
+      btn.disabled = false;
+      btn.textContent = original;
+    }
+  }
+}
+
+async function saveEmailConfig(event) {
+  event.preventDefault();
+  await persistEmailConfig(collectEmailConfig(), event.submitter);
+}
+
+async function clearEmailPassword(btn) {
+  await persistEmailConfig(collectEmailConfig(true), btn);
+}
+
 // ── Providers ──────────────────────────────────────────────────────────────
 
 async function loadProviders() {

package/server/admin/index.html

@@ -326,6 +326,54 @@
       color: var(--text-muted) !important;
     }
 
+    .email-settings-grid {
+      display: grid;
+      grid-template-columns: repeat(2, minmax(0, 1fr));
+      gap: 0 16px;
+    }
+
+    .email-settings-grid .field-wide {
+      grid-column: 1 / -1;
+    }
+
+    .email-settings-checks {
+      display: grid;
+      grid-template-columns: repeat(2, minmax(0, 1fr));
+      gap: 10px 16px;
+      margin: 4px 0 20px;
+    }
+
+    .email-setting-check {
+      display: flex;
+      align-items: center;
+      gap: 9px;
+      color: var(--text-secondary);
+      font-size: 13px;
+      text-transform: none;
+      letter-spacing: 0;
+      margin: 0;
+    }
+
+    .email-setting-check input {
+      accent-color: var(--accent);
+    }
+
+    .email-settings-status {
+      display: flex;
+      align-items: center;
+      gap: 9px;
+      margin-bottom: 18px;
+      color: var(--text-muted);
+      font-size: 12px;
+    }
+
+    @media (max-width: 760px) {
+      .email-settings-grid,
+      .email-settings-checks {
+        grid-template-columns: 1fr;
+      }
+    }
+
     /* ── Stats grid ────────────────────────────────────────────── */
     .stat-grid {
       display: grid;
@@ -948,7 +996,7 @@
             <div>
               <div style="font-size:15px;font-weight:700;color:var(--text);margin-bottom:4px;">Default Rate Limits</div>
               <div style="font-size:12px;color:var(--text-muted);max-width:480px;">
-                Applied to every user unless they have a custom override. Leave empty for no limit.
+                Applied to every user unless they have a custom override. Empty values restore the built-in defaults.
               </div>
             </div>
             <button class="btn btn-primary" style="flex-shrink:0;" onclick="saveDefaultRateLimits(this)">Save Defaults</button>
@@ -956,12 +1004,12 @@
           <div style="display:grid;grid-template-columns:1fr 1fr;gap:16px;margin-top:18px;" id="default-limits-fields">
             <div>
               <label style="display:block;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:0.05em;color:var(--text-muted);margin-bottom:6px;">4-Hour Limit (tokens)</label>
-              <input type="number" min="0" step="1" id="default-limit-4h" placeholder="e.g. 500000 — empty = no limit"
+              <input type="number" min="0" step="1" id="default-limit-4h" placeholder="Default: 2500000"
                 style="width:100%;padding:9px 12px;background:var(--bg-input);border:1px solid var(--border);border-radius:6px;color:var(--text);font-size:13px;">
             </div>
             <div>
               <label style="display:block;font-size:11px;font-weight:600;text-transform:uppercase;letter-spacing:0.05em;color:var(--text-muted);margin-bottom:6px;">Weekly Limit (tokens)</label>
-              <input type="number" min="0" step="1" id="default-limit-weekly" placeholder="e.g. 2000000 — empty = no limit"
+              <input type="number" min="0" step="1" id="default-limit-weekly" placeholder="Default: 10000000"
                 style="width:100%;padding:9px 12px;background:var(--bg-input);border:1px solid var(--border);border-radius:6px;color:var(--text);font-size:13px;">
             </div>
           </div>
@@ -1051,6 +1099,10 @@
         </div>
       </div>
       <div class="content">
+        <div class="card" style="margin-bottom:20px;">
+          <div class="card-title">Service Email</div>
+          <div id="email-config-content"><div class="empty"><span class="spinner"></span></div></div>
+        </div>
         <div class="card">
           <div class="card-title">Environment</div>
           <div id="config-content"><div class="empty"><span class="spinner"></span></div></div>

package/server/db/database.js

@@ -7,6 +7,7 @@ const {
   encryptValue,
   isEncryptedValue,
 } = require('../services/integrations/secrets');
+const { runSchemaMigrations } = require('../../lib/schema_migrations');
 ensureRuntimeDirs();
 
 const DB_PATH = path.join(DATA_DIR, 'neoagent.db');
@@ -1075,6 +1076,8 @@ db.exec(`
   END;
 `);
 
+runSchemaMigrations(db);
+
 try {
   db.exec(`
     CREATE VIRTUAL TABLE IF NOT EXISTS screen_history_fts USING fts5(

package/server/http/routes.js

@@ -34,7 +34,8 @@ const routeRegistry = [
   { basePath: '/api/wearable', modulePath: '../routes/wearable' },
   { basePath: '/api/mobile/health', modulePath: '../routes/mobile-health' },
   { basePath: '/api/screen-history', modulePath: '../routes/screenHistory' },
-  { basePath: '/api/triggers', modulePath: '../routes/triggers' }
+  { basePath: '/api/triggers', modulePath: '../routes/triggers' },
+  { basePath: '/api/security', modulePath: '../routes/security' },
 ];
 
 function registerApiRoutes(app) {

package/server/public/.last_build_id

@@ -1 +1 @@
-188ecd32a7933acc9202f186675cf3d1
+e5e028ecf14ede4c087c3b8cc9b39300

package/server/public/assets/NOTICES

@@ -5943,6 +5943,67 @@ ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
 (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 
+--------------------------------------------------------------------------------
+flutter_local_notifications
+flutter_local_notifications_linux
+
+Copyright 2018 Michael Bui. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of the copyright holder nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+--------------------------------------------------------------------------------
+flutter_local_notifications_platform_interface
+
+Copyright 2020 Michael Bui. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are
+met:
+
+   * Redistributions of source code must retain the above copyright
+notice, this list of conditions and the following disclaimer.
+   * Redistributions in binary form must reproduce the above
+copyright notice, this list of conditions and the following disclaimer
+in the documentation and/or other materials provided with the
+distribution.
+   * Neither the name of the copyright holder nor the names of its
+contributors may be used to endorse or promote products derived from
+this software without specific prior written permission.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 --------------------------------------------------------------------------------
 flutter_secure_storage
 flutter_secure_storage_macos
@@ -29226,6 +29287,31 @@ The above copyright notice and this permission notice shall be included in all c
 
 THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 --------------------------------------------------------------------------------
+timezone
+
+Copyright (c) 2014, timezone project authors.
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without
+modification, are permitted provided that the following conditions are met:
+
+    * Redistributions of source code must retain the above copyright
+      notice, this list of conditions and the following disclaimer.
+    * Redistributions in binary form must reproduce the above copyright
+      notice, this list of conditions and the following disclaimer in the
+      documentation and/or other materials provided with the distribution.
+
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+DISCLAIMED. IN NO EVENT SHALL <COPYRIGHT HOLDER> BE LIABLE FOR ANY
+DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+--------------------------------------------------------------------------------
 tray_manager
 window_manager
 

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"77e2e94772b6eb43759e34ed1ad7da4674e19c
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "4002287032" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "469569152" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });