neoagent 3.0.1-beta.20 → 3.0.1-beta.22

package/README.md

@@ -34,9 +34,10 @@
 
 ## 🚀 Install
 
-NeoAgent supports macOS and Linux hosts. You need Node.js 20 or newer; the
-installer handles the rest of the application setup and attempts to install
-QEMU for the isolated browser and terminal runtime.
+NeoAgent supports macOS and Linux hosts. You need Node.js 20 or newer and
+Docker for the isolated browser and terminal runtime; the installer handles the
+rest of the application setup and pre-builds the guest runtime image when Docker
+is available.
 
 ```bash
 npm install -g neoagent

package/docs/getting-started.md

@@ -9,18 +9,20 @@ remote access to work.
 - Node.js 20 or newer with npm
 - A macOS or Linux user account that can install packages
 - Enough disk and memory for the models and runtime you choose
-- QEMU for the isolated browser and terminal runtime
+- Docker for the isolated browser and terminal runtime
 
-The installer attempts to install QEMU with Homebrew, `apt`, `dnf`, or `yum`.
-If the host uses another package manager, install QEMU first.
+The isolated browser and CLI run each user's guest agent in a Docker container.
+Install Docker first; the NeoAgent installer detects it and pre-builds the guest
+runtime image (browser and dependencies baked in) so the first browser or CLI
+action is instant. If Docker is missing, the rest of NeoAgent still installs and
+the cloud browser/CLI become available once Docker is running.
 
 ```bash
-# macOS
-brew install qemu
+# macOS — Docker Desktop
+# https://www.docker.com/products/docker-desktop/
 
-# Ubuntu or Debian
-sudo apt-get update
-sudo apt-get install -y qemu-system qemu-utils
+# Ubuntu or Debian — Docker Engine
+# https://docs.docker.com/engine/install/
 ```
 
 ## Install NeoAgent

package/docs/operations.md

@@ -66,7 +66,7 @@ Protect backups as credentials and personal data.
 |---|---|
 | Service does not start | `neoagent status`, then `neoagent logs` |
 | Chat has no response | Provider connection, selected model, provider quota |
-| Browser or shell unavailable | QEMU installation and first runtime boot |
+| Browser or shell unavailable | Docker installed and running, then first runtime boot |
 | OAuth fails | Reachable HTTPS `PUBLIC_URL` and exact callback URI |
 | Messaging receives nothing | Channel credentials, webhook, and allowlists |
 | Task does not run | Enabled state, trigger account, next run, **Runs** |

package/flutter_app/lib/main_account_settings.dart

@@ -161,6 +161,8 @@ class _AccountSettingsPanelState extends State<AccountSettingsPanel> {
   String? _emailInlineError;
   String? _passwordSuccessMessage;
   String? _passwordInlineError;
+  bool _isExportingData = false;
+  bool _isDeletingAccount = false;
 
   @override
   void initState() {
@@ -592,10 +594,146 @@ class _AccountSettingsPanelState extends State<AccountSettingsPanel> {
                 .toList(),
           ),
         ],
+        const SizedBox(height: 28),
+        const _SectionTitle('Your data'),
+        const SizedBox(height: 10),
+        Text(
+          'Download a copy of your data, or permanently delete your account. '
+          'Deletion removes all your conversations, memories, files, tasks and '
+          'settings and cannot be undone.',
+          style: TextStyle(color: _textSecondary, height: 1.45),
+        ),
+        const SizedBox(height: 14),
+        Wrap(
+          spacing: 12,
+          runSpacing: 12,
+          children: <Widget>[
+            OutlinedButton.icon(
+              onPressed: _isExportingData ? null : _exportMyData,
+              icon: _isExportingData
+                  ? const SizedBox.square(
+                      dimension: 16,
+                      child: CircularProgressIndicator(strokeWidth: 2),
+                    )
+                  : const Icon(Icons.download_outlined),
+              label: const Text('Export my data'),
+            ),
+            OutlinedButton.icon(
+              onPressed: _isDeletingAccount ? null : _confirmDeleteAccount,
+              style: OutlinedButton.styleFrom(
+                foregroundColor: _danger,
+                side: BorderSide(color: _danger.withValues(alpha: 0.6)),
+              ),
+              icon: _isDeletingAccount
+                  ? const SizedBox.square(
+                      dimension: 16,
+                      child: CircularProgressIndicator(strokeWidth: 2),
+                    )
+                  : const Icon(Icons.delete_forever_outlined),
+              label: const Text('Delete account'),
+            ),
+          ],
+        ),
       ],
     );
   }
 
+  Future<void> _exportMyData() async {
+    setState(() => _isExportingData = true);
+    try {
+      final export = await widget.controller.backendClient.exportMyData(
+        widget.controller.backendUrl,
+      );
+      final pretty = const JsonEncoder.withIndent('  ').convert(export);
+      await Clipboard.setData(ClipboardData(text: pretty));
+      if (!mounted) return;
+      ScaffoldMessenger.of(context).showSnackBar(
+        const SnackBar(
+          content: Text('Your data export was copied to the clipboard.'),
+        ),
+      );
+    } catch (err) {
+      if (!mounted) return;
+      ScaffoldMessenger.of(context).showSnackBar(
+        SnackBar(content: Text('Could not export your data: $err')),
+      );
+    } finally {
+      if (mounted) setState(() => _isExportingData = false);
+    }
+  }
+
+  Future<void> _confirmDeleteAccount() async {
+    final username = widget.controller.user?['username']?.toString() ?? '';
+    final confirmController = TextEditingController();
+    final confirmed = await showDialog<bool>(
+      context: context,
+      builder: (dialogContext) {
+        return StatefulBuilder(
+          builder: (context, setDialogState) {
+            final matches = confirmController.text.trim() == username;
+            return AlertDialog(
+              title: const Text('Delete account permanently?'),
+              content: Column(
+                mainAxisSize: MainAxisSize.min,
+                crossAxisAlignment: CrossAxisAlignment.start,
+                children: <Widget>[
+                  const Text(
+                    'This permanently erases all of your data and cannot be '
+                    'undone. Type your username to confirm.',
+                  ),
+                  const SizedBox(height: 14),
+                  TextField(
+                    controller: confirmController,
+                    autofocus: true,
+                    onChanged: (_) => setDialogState(() {}),
+                    decoration: InputDecoration(
+                      labelText: 'Username',
+                      hintText: username,
+                    ),
+                  ),
+                ],
+              ),
+              actions: <Widget>[
+                TextButton(
+                  onPressed: () => Navigator.of(dialogContext).pop(false),
+                  child: const Text('Cancel'),
+                ),
+                FilledButton(
+                  style: FilledButton.styleFrom(backgroundColor: _danger),
+                  onPressed: matches
+                      ? () => Navigator.of(dialogContext).pop(true)
+                      : null,
+                  child: const Text('Delete forever'),
+                ),
+              ],
+            );
+          },
+        );
+      },
+    );
+    confirmController.dispose();
+    if (confirmed != true) return;
+
+    setState(() => _isDeletingAccount = true);
+    try {
+      await widget.controller.backendClient.deleteMyAccount(
+        baseUrl: widget.controller.backendUrl,
+        confirmUsername: username,
+      );
+      if (!mounted) return;
+      ScaffoldMessenger.of(context).showSnackBar(
+        const SnackBar(content: Text('Your account has been deleted.')),
+      );
+      await widget.controller.logout();
+    } catch (err) {
+      if (!mounted) return;
+      setState(() => _isDeletingAccount = false);
+      ScaffoldMessenger.of(context).showSnackBar(
+        SnackBar(content: Text('Could not delete your account: $err')),
+      );
+    }
+  }
+
   String _formatTokens(int amount) {
     if (amount >= 1000000) {
       final value = amount / 1000000;

package/flutter_app/lib/main_chat.dart

@@ -429,6 +429,45 @@ class _ChatPanelState extends State<ChatPanel> with WidgetsBindingObserver {
     if (!force && !_stickToBottom) return;
     final generation = ++_scrollGeneration;
 
+    if (_awaitingInitialScrollSettle) {
+      // Frame-by-frame stability detection: keep jumping and checking until
+      // maxScrollExtent is the same two frames in a row, then reveal.
+      // Falls back to revealing after 120 frames (~2 s) to avoid infinite wait.
+      double? prevExtent;
+      void settleInitial(int framesLeft) {
+        WidgetsBinding.instance.addPostFrameCallback((_) {
+          if (!mounted || generation != _scrollGeneration || !_scrollController.hasClients) {
+            return;
+          }
+          final pos = _scrollController.position;
+          double? currentExtent;
+          if (pos.hasContentDimensions) {
+            currentExtent = pos.maxScrollExtent;
+            _ignoreScrollUpdates = true;
+            _scrollController.jumpTo(currentExtent);
+            _ignoreScrollUpdates = false;
+          }
+          _stickToBottom = true;
+          final stable = currentExtent != null && currentExtent == prevExtent;
+          prevExtent = currentExtent;
+          if (stable || framesLeft <= 0) {
+            if (_awaitingInitialScrollSettle) {
+              setState(() {
+                _awaitingInitialScrollSettle = false;
+                _visibleMessageCountAtLastSettle =
+                    widget.controller.visibleChatMessages.length;
+              });
+            }
+            return;
+          }
+          settleInitial(framesLeft - 1);
+        });
+      }
+      settleInitial(120);
+      return;
+    }
+
+    // Regular settle (content already visible): fixed passes with short delay.
     void settle(int remainingPasses) {
       WidgetsBinding.instance.addPostFrameCallback((_) {
         if (!mounted ||
@@ -452,12 +491,6 @@ class _ChatPanelState extends State<ChatPanel> with WidgetsBindingObserver {
               settle(remainingPasses - 1);
             }
           });
-        } else if (_awaitingInitialScrollSettle) {
-          setState(() {
-            _awaitingInitialScrollSettle = false;
-            _visibleMessageCountAtLastSettle =
-                widget.controller.visibleChatMessages.length;
-          });
         }
       });
     }

package/flutter_app/lib/src/backend_client.dart

@@ -228,6 +228,23 @@ class BackendClient {
     return getMap(baseUrl, '/api/account/usage');
   }
 
+  /// GDPR data portability — returns a structured export of the signed-in
+  /// user's own data (credential fields are redacted server-side).
+  Future<Map<String, dynamic>> exportMyData(String baseUrl) async {
+    return getMap(baseUrl, '/api/account/export');
+  }
+
+  /// GDPR right to erasure — permanently deletes the signed-in user's account
+  /// and all associated data. [confirmUsername] must equal the account username.
+  Future<Map<String, dynamic>> deleteMyAccount({
+    required String baseUrl,
+    required String confirmUsername,
+  }) async {
+    return postMap(baseUrl, '/api/account/delete', <String, dynamic>{
+      'confirmUsername': confirmUsername,
+    });
+  }
+
   Future<Map<String, dynamic>> updateAccountEmail({
     required String baseUrl,
     required String email,

package/landing/index.html

@@ -848,7 +848,7 @@ p { margin: 0; text-wrap: pretty; }
   .logo .ri { transform-box: fill-box; transform-origin: center; }
   .logo .ri-a { animation: spinA 18s linear infinite; }
   .logo .ri-b { animation: spinB 26s linear infinite; }
-  .logo .nd  { animation: nd 14s linear infinite; transform-box: fill-box; transform-origin: 50px 50px; }
+  .logo .nd  { animation: nd 14s linear infinite; transform-box: view-box; transform-origin: 50px 50px; }
   @keyframes spinA { to { transform: rotate(360deg); } }
   @keyframes spinB { to { transform: rotate(-360deg); } }
   @keyframes nd    { to { transform: rotate(360deg); } }

package/lib/manager.js

@@ -1432,81 +1432,43 @@ function startFallback() {
   logOk(`Started detached process (pid ${child.pid})`);
 }
 
-async function ensureQemuInstalled({ required = false } = {}) {
-  heading('Ensure QEMU Installed');
+// The isolated browser/CLI runtime runs each user's guest agent in a Docker
+// container built from a baked image (browser + dependencies installed at build
+// time). Docker cannot be auto-installed safely across platforms, so when it is
+// missing we surface clear guidance; when it is present we pre-build the guest
+// image so the first browser/CLI action is instant rather than paying a one-time
+// multi-minute build on demand.
+async function ensureContainerRuntime({ required = false } = {}) {
+  heading('Ensure Container Runtime');
   const platform = detectPlatform();
-  
-  const hasSystem = commandExists('qemu-system-x86_64') || commandExists('qemu-system-aarch64');
-  const hasImg = commandExists('qemu-img');
 
-  if (hasSystem && hasImg) {
-    logOk('QEMU components are already installed');
-    return;
-  }
+  const dockerReady = commandExists('docker')
+    && spawnSync('docker', ['info'], { stdio: 'ignore', timeout: 10000 }).status === 0;
 
-  logInfo('QEMU components not found. Attempting to install...');
-
-  try {
-    if (platform === 'macos') {
-      if (!commandExists('brew')) {
-        const message = 'Homebrew is required for automatic QEMU install on macOS. Install Homebrew from https://brew.sh/ and run `neoagent install` again.';
-        if (required) throw new Error(message);
-        logWarn('Homebrew not found; VM features will stay unavailable until QEMU is installed.');
-        rememberInstallAction(message);
-        return false;
-      }
-      logInfo('Running "brew install qemu"...');
-      runOrThrow('brew', ['install', 'qemu']);
-    } else if (platform === 'linux') {
-      const isArm = process.arch === 'arm64' || process.arch === 'aarch64';
-      if (commandExists('apt-get')) {
-        const pkgs = ['qemu-utils'];
-        if (isArm) {
-          pkgs.push('qemu-system-arm');
-        } else {
-          pkgs.push('qemu-system-x86');
-        }
-        logInfo(`Running "sudo apt-get update && sudo apt-get install -y ${pkgs.join(' ')}"...`);
-        runOrThrow('sudo', ['apt-get', 'update']);
-        runOrThrow('sudo', ['apt-get', 'install', '-y', ...pkgs]);
-      } else if (commandExists('dnf')) {
-        logInfo('Running "sudo dnf install -y qemu-kvm qemu-img"...');
-        runOrThrow('sudo', ['dnf', 'install', '-y', 'qemu-kvm', 'qemu-img']);
-      } else if (commandExists('yum')) {
-        logInfo('Running "sudo yum install -y qemu-kvm qemu-img"...');
-        runOrThrow('sudo', ['yum', 'install', '-y', 'qemu-kvm', 'qemu-img']);
-      } else {
-        const message = 'Unsupported Linux package manager for automatic QEMU install. Install qemu-system and qemu-utils, then run `neoagent install` again.';
-        if (required) throw new Error(message);
-        logWarn('Could not find apt-get, dnf, or yum for QEMU installation.');
-        rememberInstallAction(message);
-        return false;
-      }
-    } else {
-      const message = 'Unsupported platform for automatic QEMU installation. Install QEMU manually if you need VM-isolated runtime features.';
-      if (required) throw new Error(message);
-      logWarn('Skipping QEMU auto-install on this platform.');
-      rememberInstallAction(message);
-      return false;
-    }
-  } catch (err) {
-    if (required) throw err;
-    logWarn(`QEMU install did not complete: ${err.message}`);
-    rememberInstallAction('Install QEMU manually or rerun `neoagent install` after your package manager is ready.');
+  if (!dockerReady) {
+    const installHint = platform === 'macos'
+      ? 'Install Docker Desktop from https://www.docker.com/products/docker-desktop/ and start it.'
+      : 'Install Docker Engine (https://docs.docker.com/engine/install/) and ensure the daemon is running.';
+    const message = `Docker is required for the isolated browser/CLI runtime. ${installHint} Then run \`neoagent install\` again.`;
+    if (required) throw new Error(message);
+    logWarn('Docker not detected; the cloud browser and CLI will be unavailable until Docker is installed and running.');
+    rememberInstallAction(message);
     return false;
   }
 
-  const verifiedSystem = commandExists('qemu-system-x86_64') || commandExists('qemu-system-aarch64');
-  const verifiedImg = commandExists('qemu-img');
+  logOk('Docker is installed and the daemon is running');
 
-  if (verifiedSystem && verifiedImg) {
-    logOk('QEMU installed successfully');
+  try {
+    logInfo('Building the guest runtime image (one-time; downloads the browser and dependencies)…');
+    const { GuestImageBuilder } = require('../server/services/runtime/guest_image');
+    await new GuestImageBuilder({ runtimeProfile: 'browser_cli' }).ensure();
+    logOk('Guest runtime image is ready');
     return true;
-  } else {
-    const message = 'QEMU installation finished but required binaries were not found in PATH.';
+  } catch (err) {
+    const message = `Guest runtime image build did not complete: ${err.message}`;
     if (required) throw new Error(message);
     logWarn(message);
-    rememberInstallAction('Ensure qemu-system and qemu-img are available in PATH, then run `neoagent install` again.');
+    rememberInstallAction('Rerun `neoagent install` to retry building the guest runtime image, or it will build automatically on first use.');
     return false;
   }
 }
@@ -1585,7 +1547,7 @@ async function cmdInstall() {
   }
 
   installDependencies();
-  await ensureQemuInstalled({ required: false });
+  await ensureContainerRuntime({ required: false });
   ensureYtDlpInstalled();
   buildBundledWebClientIfPossible({ required: true });
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "3.0.1-beta.20",
+  "version": "3.0.1-beta.22",
   "description": "Self-hosted AI agent for long-running tasks, automation, messaging, device control, and local memory",
   "license": "AGPL-3.0-only",
   "main": "server/index.js",

package/server/public/.last_build_id

@@ -1 +1 @@
-83126cc646128e385732d20834eb9ab3
+7f39a61f6aba2158c5e1102d384e066f

package/server/public/flutter_bootstrap.js

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"77e2e94772b6eb43759e34ed1ad7da4674e19c
 
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "1135898170" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "549021239" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });