nio-cat 0.5.1 → 0.8.0

package/src/control.js

@@ -0,0 +1,238 @@
+'use strict';
+// Control del navegador i de l'escriptori. nio no el construeix: Claude Code i Codex fan servir
+// agent-browser (web) i agent-desktop (apps) per shell. nio s'encarrega de:
+// · saber què hi ha instal·lat i activar-ho per ordinador (desactivat per defecte),
+// · posar les guies oficials a l'abast dels agents (skill de Claude Code i AGENTS.md de Codex),
+// · classificar les ordres: les de mirar passen soles; les que actuen demanen aprovació (amb captura),
+// · fer captures sota demanda i l'aturada d'emergència.
+const fs = require('fs');
+const os = require('os');
+const path = require('path');
+const crypto = require('crypto');
+const { execFile } = require('child_process');
+const { which, childEnv } = require('./proc');
+const config = require('./config');
+const { HOME } = config;
+
+const SHOTS = path.join(HOME, 'shots');
+const httpErr = (status, message) => Object.assign(new Error(message), { status });
+
+// Subordres que només miren. Qualsevol altra cosa actua (clicar, escriure, omplir, pujar fitxers…).
+const READ = {
+  'agent-browser': new Set(['snapshot', 'screenshot', 'status', 'wait', 'open', 'goto', 'navigate', 'get', 'is', 'skills', 'help', '--help', 'version', '--version', 'tabs', 'title', 'url']),
+  'agent-desktop': new Set(['snapshot', 'find', 'get', 'is', 'screenshot', 'list-surfaces', 'list-apps', 'list-windows', 'list-displays', 'list-notifications', 'status', 'version', 'skills', 'wait', 'permissions', 'help', '--help', '--version']),
+};
+const KIND = { 'agent-browser': 'navegador', 'agent-desktop': 'escriptori' };
+const META = /[;&|`$<>(){}\n\r\\]/; // res de redireccions, subordres ni cadenes
+
+// Classifica una ordre de shell. null si no és d'aquestes eines (o si és composta: llavors no ens en refiem).
+function classify(command) {
+  const cmd = String(command || '').trim();
+  const m = cmd.match(/^(?:npx\s+(?:-y\s+)?)?(agent-browser|agent-desktop)(?:\s+(.*))?$/s);
+  if (!m) {
+    const k = cmd.match(/\b(agent-browser|agent-desktop)\b/);
+    return k ? { tool: k[1], kind: KIND[k[1]], act: true, composite: true } : null;
+  }
+  const tool = m[1];
+  const rest = (m[2] || '').trim();
+  if (META.test(rest)) return { tool, kind: KIND[tool], act: true, composite: true };
+  // Saltem opcions globals (--session x, --headed…) per trobar la subordre.
+  const words = rest.match(/"[^"]*"|'[^']*'|\S+/g) || [];
+  let i = 0;
+  while (i < words.length && words[i].startsWith('-') && !READ[tool].has(words[i])) i += /^--(session|session-name|profile|state|executable-path|app|window-id)$/.test(words[i]) ? 2 : 1;
+  const sub = words[i] || 'help';
+  let read = READ[tool].has(sub);
+  if (tool === 'agent-browser' && sub === 'stream') read = words[i + 1] === 'status';
+  return { tool, kind: KIND[tool], sub, act: !read };
+}
+
+function run(bin, args, timeout = 15000) {
+  return new Promise((resolve) => {
+    execFile(bin, args, { timeout, env: childEnv(), maxBuffer: 8 * 1024 * 1024 }, (err, stdout, stderr) => resolve({ ok: !err, out: String(stdout || ''), err: String(stderr || err?.message || '') }));
+  });
+}
+
+class Control {
+  constructor({ cfg, hub, audit }) {
+    this.cfg = cfg;
+    this.hub = hub;
+    this.audit = audit || { add() {} };
+    this.capsAt = 0;
+    fs.mkdirSync(SHOTS, { recursive: true, mode: 0o700 });
+  }
+
+  enabled(kind) {
+    return !!this.cfg.control?.[kind];
+  }
+  any() {
+    return this.enabled('navegador') || this.enabled('escriptori');
+  }
+
+  async caps(force) {
+    if (!force && this.capsCache && Date.now() - this.capsAt < 60000) return this.capsCache;
+    const ab = which('agent-browser'), ad = which('agent-desktop');
+    let desk = { installed: !!ad, ready: false, why: ad ? '' : 'No hi és' };
+    if (ad) {
+      const r = await run(ad, ['status'], 8000);
+      let j = null;
+      try { j = JSON.parse(r.out); } catch { /* text */ }
+      desk.ready = j ? j.ok !== false : r.ok;
+      desk.why = desk.ready ? '' : (j?.error?.message || r.err || r.out).split('\n')[0].slice(0, 200);
+    }
+    const shotTool = process.platform === 'darwin' ? which('screencapture') : which('grim') || which('scrot') || which('gnome-screenshot');
+    this.capsCache = {
+      navegador: { installed: !!ab, ready: !!ab, enabled: this.enabled('navegador') },
+      escriptori: { ...desk, enabled: this.enabled('escriptori'), screenshot: !!shotTool },
+      platform: process.platform,
+    };
+    this.capsAt = Date.now();
+    return this.capsCache;
+  }
+
+  // ---------- guies per als agents
+  async installGuides(kind) {
+    const tool = kind === 'navegador' ? 'agent-browser' : 'agent-desktop';
+    const bin = which(tool);
+    if (!bin) throw httpErr(400, `${tool} no està instal·lat en aquest ordinador`);
+    const parts = [];
+    const tries = kind === 'navegador' ? [['skills', 'get', 'core'], ['skills', 'get', 'agent-browser']] : [['skills', 'get', 'desktop'], ['skills', 'get', 'platform']];
+    for (const args of tries) {
+      const r = await run(bin, args, 20000);
+      if (r.ok && r.out.trim()) {
+        parts.push(r.out.trim().replace(/^---[\s\S]*?\n---\s*/, ''));
+        if (kind === 'navegador') break;
+      }
+    }
+    if (!parts.length) parts.push(`Fes servir \`${tool}\`. Abans de començar, executa \`${tool} skills get ${kind === 'navegador' ? 'core' : 'desktop'}\` i segueix-ne les instruccions.`);
+    const rules = `## Normes de nio (obligatòries)
+
+- Cada ordre de \`${tool}\` que actua (clicar, escriure, omplir, pujar fitxers, enviar formularis…) l'ha d'aprovar la persona des del mòbil. Les de mirar (snapshot, screenshot, status, wait, open) passen soles.
+- Mai no facis compres, pagaments, transferències, canvis de contrasenya ni esborrats sense que la persona t'ho hagi demanat explícitament i ho aprovi.
+- No escriguis contrasenyes ni dades de targetes. Si cal iniciar sessió, demana-ho.
+- Executa \`${tool}\` sempre com a ordre sola (sense \`&&\`, \`|\`, \`;\` ni redireccions), una per pas, perquè nio la pugui revisar.`;
+    const title = kind === 'navegador' ? 'Navegador web (agent-browser)' : 'Apps de l’escriptori (agent-desktop)';
+    const body = `# ${title}\n\n${rules}\n\n${parts.join('\n\n')}\n`;
+    const name = `nio-${kind}`;
+    // Claude Code: skill d'usuari.
+    const sdir = path.join(os.homedir(), '.claude', 'skills', name);
+    fs.mkdirSync(sdir, { recursive: true });
+    fs.writeFileSync(path.join(sdir, 'SKILL.md'), `---\nname: ${name}\ndescription: Controla ${kind === 'navegador' ? 'el navegador web' : 'les apps de l’escriptori'} d'aquest ordinador amb ${tool}, amb les normes d'aprovació de nio. Fes-la servir quan calgui ${kind === 'navegador' ? 'obrir webs, llegir-les o actuar-hi' : 'mirar o fer servir apps de l’ordinador'}.\n---\n\n${body}`);
+    // Codex: bloc dins de ~/.codex/AGENTS.md entre marques (es reescriu, no es duplica).
+    const cdir = process.env.CODEX_HOME || path.join(os.homedir(), '.codex');
+    const af = path.join(cdir, 'AGENTS.md');
+    let txt = '';
+    try { txt = fs.readFileSync(af, 'utf8'); } catch { /* nou */ }
+    const start = `<!-- nio:${kind} -->`, end = `<!-- /nio:${kind} -->`;
+    const block = `${start}\n${body}${end}`;
+    const re = new RegExp(`${start}[\\s\\S]*?${end}`);
+    txt = re.test(txt) ? txt.replace(re, block) : `${txt}${txt && !txt.endsWith('\n') ? '\n' : ''}\n${block}\n`;
+    fs.mkdirSync(cdir, { recursive: true });
+    fs.writeFileSync(af, txt);
+    return { claude: path.join(sdir, 'SKILL.md'), codex: af };
+  }
+
+  removeGuides(kind) {
+    fs.rmSync(path.join(os.homedir(), '.claude', 'skills', `nio-${kind}`), { recursive: true, force: true });
+    const af = path.join(process.env.CODEX_HOME || path.join(os.homedir(), '.codex'), 'AGENTS.md');
+    try {
+      const txt = fs.readFileSync(af, 'utf8').replace(new RegExp(`\\n?<!-- nio:${kind} -->[\\s\\S]*?<!-- /nio:${kind} -->\\n?`), '\n');
+      fs.writeFileSync(af, txt);
+    } catch { /* no hi era */ }
+  }
+
+  // ---------- captures
+  shotPath(id) {
+    if (!/^[\w-]{8,40}$/.test(String(id))) throw httpErr(400, 'Captura no vàlida');
+    return path.join(SHOTS, `${id}.png`);
+  }
+  async screenshot(prefer) {
+    const id = `${Date.now().toString(36)}-${crypto.randomBytes(4).toString('hex')}`;
+    const file = this.shotPath(id);
+    let ok = false, from = null;
+    const browser = which('agent-browser');
+    if ((prefer !== 'escriptori') && this.enabled('navegador') && browser) {
+      ok = (await run(browser, ['screenshot', file], 15000)).ok && fs.existsSync(file);
+      from = 'navegador';
+    }
+    if (!ok && this.enabled('escriptori')) {
+      const tool = process.platform === 'darwin' ? ['screencapture', ['-x', file]] : which('grim') ? ['grim', [file]] : which('scrot') ? ['scrot', ['-o', file]] : ['gnome-screenshot', ['-f', file]];
+      const bin = which(tool[0]);
+      if (bin) ok = (await run(bin, tool[1], 15000)).ok && fs.existsSync(file);
+      from = 'escriptori';
+    }
+    if (!ok) throw httpErr(409, this.any() ? 'No he pogut fer la captura (no hi ha navegador obert ni pantalla accessible).' : 'Activa primer el control del navegador o de l’escriptori en aquest ordinador.');
+    this.prune();
+    this.last = { id, t: Date.now(), from };
+    this.hub.emit('out', { type: 'screen', shot: this.last });
+    return this.last;
+  }
+  prune() {
+    const files = fs.readdirSync(SHOTS).filter((f) => f.endsWith('.png')).sort();
+    for (const f of files.slice(0, Math.max(0, files.length - 200))) fs.rmSync(path.join(SHOTS, f), { force: true });
+  }
+
+  // Abans d'una aprovació d'una ordre que actua: captura (si es pot) per veure-ho al mòbil.
+  async beforeApproval(tool, input) {
+    if (tool !== 'Bash' || !this.any()) return {};
+    const c = classify(input?.command);
+    if (!c || !c.act) return {};
+    const extra = { control: c.kind };
+    try {
+      const shot = await Promise.race([this.screenshot(c.kind), new Promise((_, rej) => setTimeout(() => rej(new Error('temps')), 9000))]);
+      extra.shot = shot.id;
+    } catch { /* sense captura */ }
+    return extra;
+  }
+
+  async panic(by) {
+    let stopped = 0;
+    for (const [sid] of this.hub.runs) if (this.hub.stop(sid)) stopped++;
+    for (const a of [...this.hub.approvals.values()]) if (a.state === 'pending') this.hub.decide(a.id, 'deny', 'Aturada d’emergència', by);
+    const ab = which('agent-browser');
+    if (ab) await run(ab, ['close', '--all'], 10000);
+    this.audit.add({ type: 'control', what: `Aturada d’emergència: ${stopped} agents aturats i navegador tancat`, by });
+    return { stopped };
+  }
+
+  routes() {
+    return [
+      { method: 'GET', path: '/api/control', handler: async ({ url }) => this.caps(url.searchParams.has('refresh')) },
+      {
+        method: 'PUT',
+        path: '/api/control',
+        handler: async ({ body, device }) => {
+          const caps = await this.caps(true);
+          this.cfg.control = this.cfg.control || {};
+          const notes = [];
+          for (const kind of ['navegador', 'escriptori']) {
+            if (typeof body[kind] !== 'boolean' || body[kind] === this.enabled(kind)) continue;
+            if (body[kind]) {
+              if (!caps[kind].installed) throw httpErr(400, kind === 'navegador' ? 'agent-browser no està instal·lat. A l’ordinador: npm i -g agent-browser && agent-browser install' : 'agent-desktop no està instal·lat. A l’ordinador: npm i -g agent-desktop');
+              await this.installGuides(kind).catch((e) => notes.push(e.message));
+            } else this.removeGuides(kind);
+            this.cfg.control[kind] = body[kind];
+            this.audit.add({ type: 'control', what: `${kind === 'navegador' ? 'Control del navegador' : 'Control de l’escriptori'} ${body[kind] ? 'activat' : 'desactivat'}`, by: device?.name });
+          }
+          config.save(this.cfg);
+          return { ...(await this.caps(true)), notes };
+        },
+      },
+      { method: 'POST', path: '/api/screen', handler: ({ body }) => this.screenshot(body?.from) },
+      { method: 'GET', path: '/api/screen', handler: () => ({ last: this.last || null, enabled: this.any() }) },
+      {
+        method: 'GET',
+        path: /^\/api\/screen\/shot\/([\w-]+)$/,
+        handler: ({ res, params }) => {
+          const f = this.shotPath(params[0]);
+          if (!fs.existsSync(f)) throw httpErr(404, 'Aquesta captura ja no hi és');
+          const buf = fs.readFileSync(f);
+          res.writeHead(200, { 'content-type': 'image/png', 'content-length': buf.length, 'cache-control': 'private, max-age=3600' });
+          res.end(buf);
+        },
+      },
+      { method: 'POST', path: '/api/panic', handler: ({ device }) => this.panic(device?.name) },
+    ];
+  }
+}
+
+module.exports = { Control, classify };

package/src/directory.js

@@ -0,0 +1,56 @@
+'use strict';
+// Adreça recordada a nio.cat: l'ordinador publica la seva adreça actual (la del túnel), signada
+// amb una clau Ed25519 pròpia. Si l'adreça canvia, el mòbil la troba allà i comprova la signatura.
+// nio.cat no rep cap altra dada. Es desactiva amb `nio directory off` (cfg.directory = false).
+const crypto = require('crypto');
+const config = require('./config');
+
+const b64u = (b) => Buffer.from(b).toString('base64url');
+
+function identity(cfg) {
+  if (!cfg.identity) {
+    const { publicKey, privateKey } = crypto.generateKeyPairSync('ed25519');
+    cfg.identity = { pub: publicKey.export({ format: 'jwk' }).x, priv: privateKey.export({ format: 'der', type: 'pkcs8' }).toString('base64url') };
+    config.save(cfg);
+  }
+  const pub = cfg.identity.pub;
+  const loc = b64u(crypto.createHash('sha256').update(Buffer.from(pub, 'base64url')).digest().subarray(0, 16));
+  return { pub, loc };
+}
+
+function sign(cfg, url, t = Date.now()) {
+  const { pub, loc } = identity(cfg);
+  const key = crypto.createPrivateKey({ key: Buffer.from(cfg.identity.priv, 'base64url'), format: 'der', type: 'pkcs8' });
+  const sig = b64u(crypto.sign(null, Buffer.from(`nio-node-v1\n${loc}\n${url}\n${t}`), key));
+  return { pub, url, t, sig };
+}
+
+const publicUrl = (u) => /^https:\/\//.test(u || '') && !/^https:\/\/(127\.|localhost|\[)/.test(u);
+
+let current = null;
+let timer = null;
+let retry = 0;
+
+async function publish(cfg, url, log = () => {}) {
+  if (cfg.directory === false || !publicUrl(url)) return false;
+  current = url.replace(/\/$/, '');
+  clearTimeout(timer);
+  const base = (cfg.directoryUrl || 'https://www.nio.cat').replace(/\/$/, '');
+  try {
+    const res = await fetch(`${base}/api/node`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify(sign(cfg, current)), signal: AbortSignal.timeout(10000) });
+    if (res.status === 503) return false; // nio.cat encara no té la llibreta configurada
+    if (!res.ok && res.status !== 409) throw new Error(`nio.cat ${res.status}`);
+    retry = 0;
+    timer = setTimeout(() => publish(cfg, current, log), 6 * 3600 * 1000); // renova abans que caduqui
+    if (timer.unref) timer.unref();
+    return true;
+  } catch (e) {
+    const wait = Math.min(30 * 60 * 1000, 5000 * 2 ** retry++);
+    if (retry === 1) log(`No he pogut desar l’adreça a nio.cat (${e.message}). Ho torno a provar.`);
+    timer = setTimeout(() => current === url.replace(/\/$/, '') && publish(cfg, current, log), wait);
+    if (timer.unref) timer.unref();
+    return false;
+  }
+}
+
+module.exports = { identity, sign, publish };

package/src/hub.js

@@ -19,9 +19,10 @@ const clip = (s, n = MAX_OUT) => {
 };
 
 class Hub extends EventEmitter {
-  constructor(cfg) {
+  constructor(cfg, { audit } = {}) {
     super();
     this.cfg = cfg;
+    this.audit = audit || { add() {} };
     this.sessions = new Map();
     this.runs = new Map(); // sessionId -> { kill, key }
     this.approvals = new Map(); // approvalId -> { ..., resolve }
@@ -258,7 +259,9 @@ class Hub extends EventEmitter {
       stream: (t) => this.chunk(s, String(t)),
       tool: ({ id: tid, name, input }) => {
         toolNames.set(tid, name);
-        this.push(s, 'tool', { id: tid, name, input: summarizeInput(input) });
+        const inp = summarizeInput(input);
+        this.push(s, 'tool', { id: tid, name, input: inp });
+        this.audit.add({ type: 'tool', session: s.id, agent: s.agent, title: s.title, cwd: s.cwd, tool: name, what: describe(name, inp), mode: s.mode });
       },
       toolResult: ({ id: tid, output, error }) =>
         this.push(s, 'tool_result', { id: tid, name: toolNames.get(tid), output: clip(output), error: !!error }),
@@ -287,7 +290,7 @@ class Hub extends EventEmitter {
         finished = true;
         this.runs.delete(sid);
         for (const a of this.approvals.values()) {
-          if (a.session === sid && a.state === 'pending') this.decide(a.id, 'deny', 'La sessió s’ha acabat');
+          if (a.session === sid && a.state === 'pending') this.decide(a.id, 'deny', 'La sessió s’ha acabat', 'sessió acabada');
         }
         if (err) this.push(s, 'error', { text: `No s’ha pogut engegar: ${err.message}` });
         else if (code && code !== 0 && code !== 130 && code !== 143 && !reported) {
@@ -328,7 +331,15 @@ class Hub extends EventEmitter {
     return a.length === b.length && crypto.timingSafeEqual(a, b);
   }
 
-  requestApproval({ session, tool, input }) {
+  // El motiu: la descripció que dona l'agent (p. ex. el camp «description» de Bash a Claude Code)
+  // o, si no n'hi ha, l'últim que ha dit abans de demanar-ho.
+  reasonFor(s, input) {
+    if (input && typeof input.description === 'string' && input.description.trim()) return clip(input.description, 400);
+    const last = s ? [...s.events].reverse().find((e) => e.kind === 'text' || e.kind === 'user') : null;
+    return last && last.kind === 'text' ? clip(last.text.trim(), 400) : '';
+  }
+
+  requestApproval({ session, tool, input, extra }) {
     const s = this.get(session);
     const a = {
       id: id(),
@@ -337,29 +348,38 @@ class Hub extends EventEmitter {
       title: s?.title,
       tool,
       input: summarizeInput(input),
+      reason: this.reasonFor(s, input),
       state: 'pending',
       created: Date.now(),
+      ...(extra || {}),
     };
     const p = new Promise((resolve) => {
       a.resolve = resolve;
-      a.timer = setTimeout(() => this.decide(a.id, 'deny', 'Ningú no ha respost en 15 minuts'), APPROVAL_TIMEOUT);
+      a.timer = setTimeout(() => this.decide(a.id, 'deny', 'Ningú no ha respost en 15 minuts', 'temps esgotat'), APPROVAL_TIMEOUT);
     });
     this.approvals.set(a.id, a);
     if (s) {
       s.state = 'waiting';
-      this.push(s, 'approval', { approval: a.id, tool, input: a.input, state: 'pending' });
+      this.push(s, 'approval', { approval: a.id, tool, input: a.input, reason: a.reason, shot: a.shot, state: 'pending' });
     }
     this.emit('out', { type: 'approval', approval: publicApproval(a) });
-    this.notice(s, `${agentName(s)} et demana permís`, `${tool}: ${describe(tool, a.input)}`);
+    this.notice(s, `${agentName(s)} et demana permís`, `${tool}: ${describe(tool, a.input)}`, { approval: a.id });
     return p;
   }
 
-  decide(aid, decision, reason) {
+  // `by`: qui ho ha decidit (nom del dispositiu, «Telegram · …», «temps esgotat»…).
+  decide(aid, decision, reason, by) {
     const a = this.approvals.get(aid);
     if (!a || a.state !== 'pending') return null;
     clearTimeout(a.timer);
     a.state = decision === 'allow' ? 'allowed' : 'denied';
     a.decided = Date.now();
+    a.by = by || 'nio';
+    this.audit.add({
+      type: 'approval', approval: a.id, session: a.session, agent: a.agent, title: a.title,
+      tool: a.tool, what: describe(a.tool, a.input), why: a.reason, decision: a.state, by: a.by,
+      asked: a.created, note: reason || undefined,
+    });
     const s = this.get(a.session);
     if (s) {
       const ev = s.events.find((e) => e.kind === 'approval' && e.approval === aid);
@@ -381,12 +401,13 @@ class Hub extends EventEmitter {
   }
 
   // ---------- avisos (push) ----------
-  notice(s, title, body) {
-    const n = { id: id(6), t: Date.now(), title, body: clip(body || '', 180), session: s?.id };
+  notice(s, title, body, extra = {}) {
+    const n = { id: id(6), t: Date.now(), title, body: clip(body || '', 180), session: s?.id, node: this.cfg.id, ...extra };
     this.notices.unshift(n);
     this.notices.length = Math.min(this.notices.length, 20);
+    this.emit('notice', n, s);
     if (!this.cfg.pushSubs?.length) return;
-    push.notifyAll(this.cfg).then((dead) => {
+    push.notifyAll(this.cfg, n).then((dead) => {
       if (dead.length) {
         this.cfg.pushSubs = this.cfg.pushSubs.filter((x) => !dead.includes(x.endpoint));
         save(this.cfg);
@@ -434,4 +455,4 @@ function httpErr(status, message) {
   return e;
 }
 
-module.exports = { Hub, httpErr };
+module.exports = { Hub, httpErr, describe };