neoagent 2.4.4-beta.7 → 2.4.4-beta.8

package/flutter_app/lib/main_settings.dart

@@ -1513,42 +1513,37 @@ class _SettingsPanelState extends State<SettingsPanel> {
 
   Widget _buildSecuritySection(BuildContext context, NeoAgentController controller) {
     return Card(
-      elevation: 0,
-      shape: RoundedRectangleBorder(
-        borderRadius: BorderRadius.circular(12),
-        side: BorderSide(color: Theme.of(context).colorScheme.outlineVariant),
-      ),
-      child: Column(
-        crossAxisAlignment: CrossAxisAlignment.start,
-        children: <Widget>[
-          ListTile(
-            leading: const Icon(Icons.shield_outlined),
-            title: const Text('Security', style: TextStyle(fontWeight: FontWeight.bold)),
-            subtitle: const Text('Tool allowlists, approval gates, and process isolation.'),
-            trailing: const SizedBox.shrink(),
-          ),
-          const Divider(height: 1),
-          ListTile(
-            leading: const Icon(Icons.checklist_outlined),
-            title: const Text('Tool Permissions'),
-            subtitle: const Text('Set block / ask / allow per tool category, or pick a global mode.'),
-            trailing: Row(
-              mainAxisSize: MainAxisSize.min,
-              children: const <Widget>[
-                Icon(Icons.shield_rounded, size: 16, color: Colors.green),
-                SizedBox(width: 4),
-                Icon(Icons.chevron_right),
-              ],
+      child: Padding(
+        padding: const EdgeInsets.all(20),
+        child: Column(
+          crossAxisAlignment: CrossAxisAlignment.start,
+          children: <Widget>[
+            const _SectionTitle('Security'),
+            const SizedBox(height: 10),
+            Text(
+              'Per-tool permission policies, approval gates, and process isolation for shell execution.',
+              style: TextStyle(color: _textSecondary, height: 1.45),
             ),
-            onTap: () {
-              Navigator.of(context).push(
-                MaterialPageRoute<void>(
-                  builder: (_) => MainSecurity(controller: controller),
-                ),
-              );
-            },
-          ),
-        ],
+            const SizedBox(height: 8),
+            ListTile(
+              contentPadding: EdgeInsets.zero,
+              leading: Icon(Icons.checklist_outlined, color: _accentAlt),
+              title: const Text('Tool Permissions'),
+              subtitle: Text(
+                'Set block / ask / allow per tool category, or pick a global mode.',
+                style: TextStyle(color: _textSecondary),
+              ),
+              trailing: const Icon(Icons.chevron_right),
+              onTap: () {
+                Navigator.of(context).push(
+                  MaterialPageRoute<void>(
+                    builder: (_) => MainSecurity(controller: controller),
+                  ),
+                );
+              },
+            ),
+          ],
+        ),
       ),
     );
   }

package/lib/schema_migrations.js

@@ -196,7 +196,7 @@ function migrateToolPermissions(db) {
     CREATE TABLE IF NOT EXISTS tool_policies (
       user_id    INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
       category   TEXT    NOT NULL,
-      policy     TEXT    NOT NULL CHECK(policy IN ('allow','deny','require_approval')),
+      policy     TEXT    NOT NULL CHECK(policy IN ('allow','deny','require_approval','allow_always')),
       updated_at TEXT    DEFAULT (datetime('now')),
       PRIMARY KEY (user_id, category)
     );
@@ -208,7 +208,7 @@ function migrateToolPermissions(db) {
       tool_name      TEXT    NOT NULL,
       tool_args_json TEXT,
       decision       TEXT    NOT NULL CHECK(decision IN ('approved','denied','timeout')),
-      scope          TEXT    NOT NULL CHECK(scope IN ('once','session')),
+      scope          TEXT    NOT NULL CHECK(scope IN ('once','session','always')),
       decided_at     TEXT    DEFAULT (datetime('now'))
     );
 
@@ -217,6 +217,29 @@ function migrateToolPermissions(db) {
   `);
 }
 
+function migrateToolPoliciesAllowAlways(db) {
+  // SQLite doesn't support ALTER COLUMN — recreate the table to add 'allow_always'
+  // to the CHECK constraint on existing installations.
+  const tableInfo = db.prepare("PRAGMA table_info(tool_policies)").all();
+  if (!tableInfo.length) return; // table doesn't exist yet; migrateToolPermissions will create it correctly
+  const checkRow = db.prepare(
+    "SELECT sql FROM sqlite_master WHERE type='table' AND name='tool_policies'",
+  ).get();
+  if (checkRow && checkRow.sql.includes("'allow_always'")) return; // already migrated
+  db.exec(`
+    CREATE TABLE IF NOT EXISTS tool_policies_v2 (
+      user_id    INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+      category   TEXT    NOT NULL,
+      policy     TEXT    NOT NULL CHECK(policy IN ('allow','deny','require_approval','allow_always')),
+      updated_at TEXT    DEFAULT (datetime('now')),
+      PRIMARY KEY (user_id, category)
+    );
+    INSERT OR IGNORE INTO tool_policies_v2 SELECT * FROM tool_policies;
+    DROP TABLE tool_policies;
+    ALTER TABLE tool_policies_v2 RENAME TO tool_policies;
+  `);
+}
+
 function runSchemaMigrations(db) {
   migrateMemoryEmbeddingIndex(db);
   migrateMemoryProvenance(db);
@@ -224,6 +247,7 @@ function runSchemaMigrations(db) {
   migrateMemoryRetrievalEvents(db);
   migrateMemoryEmbeddingMetadata(db);
   migrateToolPermissions(db);
+  migrateToolPoliciesAllowAlways(db);
 }
 
 module.exports = {
@@ -233,5 +257,6 @@ module.exports = {
   migrateMemoryRetrievalEvents,
   migrateMemoryEmbeddingMetadata,
   migrateToolPermissions,
+  migrateToolPoliciesAllowAlways,
   runSchemaMigrations,
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.4.4-beta.7",
+  "version": "2.4.4-beta.8",
   "description": "Proactive personal AI agent with no limits",
   "license": "AGPL-3.0-only",
   "main": "server/index.js",

package/server/public/.last_build_id

@@ -1 +1 @@
-29d7d0faaf7d97f5cfec115cfea8fcbc
+7e73207d8404cf818eebed5972cebc61

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"77e2e94772b6eb43759e34ed1ad7da4674e19c
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "149219383" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "2478318604" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });