nodal-agents 0.7.2 → 0.7.5

package/cli.js

@@ -75,7 +75,21 @@ import { z } from "zod";
 import { homedir } from "os";
 import { join as join2 } from "path";
 import { readFileSync, writeFileSync, mkdirSync, existsSync as existsSync2, chmodSync } from "fs";
+import { execFileSync } from "child_process";
 import { randomBytes } from "crypto";
+function restrictFileToOwner(path) {
+  try {
+    chmodSync(path, 384);
+  } catch {
+  }
+  if (process.platform !== "win32") return;
+  const user = process.env["USERNAME"] || process.env["USER"];
+  if (!user) return;
+  try {
+    execFileSync("icacls", [path, "/inheritance:r", "/grant:r", `${user}:F`], { stdio: "ignore" });
+  } catch {
+  }
+}
 function ensureConfigDir() {
   for (const dir of [CONFIG_DIR, PID_DIR, LOG_DIR, PG_DATA_DIR]) {
     if (!existsSync2(dir)) {
@@ -111,6 +125,7 @@ function readConfig(configFile = CONFIG_FILE) {
 function writeConfig(config, configFile = CONFIG_FILE) {
   if (configFile === CONFIG_FILE) ensureConfigDir();
   writeFileSync(configFile, JSON.stringify(config, null, 2), { encoding: "utf-8", mode: 384 });
+  restrictFileToOwner(configFile);
 }
 var ConfigSchema, CONFIG_DIR, CONFIG_FILE, PID_DIR, LOG_DIR, PG_DATA_DIR;
 var init_config = __esm({
@@ -11274,6 +11289,10 @@ var init_job = __esm({
       task: z7.string().min(1),
       original_task: z7.string().nullable(),
       chat_id: z7.string().nullable(),
+      // Groups jobs from the same conversational thread (migration 0059) — see
+      // apps/runner/src/job/conversation-id.ts for the stamping rule. Null for
+      // non-conversational jobs (cron/schedule/webhook with no parent).
+      conversation_id: z7.string().guid().nullable(),
       system_prompt: z7.string().nullable(),
       messages: z7.array(z7.record(z7.string(), z7.unknown())),
       tools_used: z7.array(z7.string()),
@@ -11314,6 +11333,7 @@ var init_job = __esm({
       status: JobStatusSchema.default("pending"),
       original_task: z7.string().nullable().optional(),
       chat_id: z7.string().nullable().optional(),
+      conversation_id: z7.string().guid().nullable().optional(),
       system_prompt: z7.string().nullable().optional(),
       request_id: z7.string().nullable().optional(),
       parent_job_id: z7.string().guid().nullable().optional()
@@ -11321,6 +11341,38 @@ var init_job = __esm({
   }
 });
 
+// ../../packages/shared/src/entities/job-classification.ts
+var CHAT_DELIVERY_TOOLS, CHAT_CONTEXT_READ_TOOLS, CHAT_ALLOWED_TOOLS;
+var init_job_classification = __esm({
+  "../../packages/shared/src/entities/job-classification.ts"() {
+    "use strict";
+    CHAT_DELIVERY_TOOLS = [
+      "telegram_send_message",
+      "send_image",
+      "send_file",
+      "send_video",
+      "send_audio",
+      "send_voice",
+      "return_result",
+      "dashboard_publish"
+    ];
+    CHAT_CONTEXT_READ_TOOLS = [
+      "query_memory",
+      "search_history",
+      "skill_view",
+      "list_models",
+      "list_schedules",
+      "file_read",
+      "file_list",
+      "file_search"
+    ];
+    CHAT_ALLOWED_TOOLS = /* @__PURE__ */ new Set([
+      ...CHAT_DELIVERY_TOOLS,
+      ...CHAT_CONTEXT_READ_TOOLS
+    ]);
+  }
+});
+
 // ../../packages/shared/src/entities/task.ts
 import { z as z8 } from "zod";
 var TaskDescriptionSchema, TaskTitleSchema, AgentTaskSchema, AgentTaskInsertSchema;
@@ -11426,7 +11478,9 @@ var init_connector = __esm({
       name: z10.string().min(1).max(120),
       slug: z10.string().min(1).max(80).regex(/^[a-z0-9-]+$/),
       base_url: z10.string().nullable(),
-      // api_key stored encrypted in DB (pgp_sym_encrypt); raw value never returned
+      // audit#2026-07-07 SEC-5: this comment used to claim pgp_sym_encrypt (pgcrypto),
+      // which is not used anywhere. Real encryption is application-level AES-256-GCM
+      // via @nodal-agents/secrets before the value ever reaches the DB; raw value never returned.
       api_key: z10.string().nullable(),
       active: z10.boolean(),
       auth_type: ConnectorAuthTypeSchema,
@@ -12256,6 +12310,28 @@ var init_timezone = __esm({
   }
 });
 
+// ../../packages/shared/src/redact-secrets.ts
+var init_redact_secrets = __esm({
+  "../../packages/shared/src/redact-secrets.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/shared/src/catastrophic-command.ts
+var init_catastrophic_command = __esm({
+  "../../packages/shared/src/catastrophic-command.ts"() {
+    "use strict";
+  }
+});
+
+// ../../packages/shared/src/approval-impact.ts
+var init_approval_impact = __esm({
+  "../../packages/shared/src/approval-impact.ts"() {
+    "use strict";
+    init_catastrophic_command();
+  }
+});
+
 // ../../packages/shared/src/index.ts
 var init_src2 = __esm({
   "../../packages/shared/src/index.ts"() {
@@ -12266,6 +12342,7 @@ var init_src2 = __esm({
     init_user();
     init_agent();
     init_job();
+    init_job_classification();
     init_task();
     init_credential();
     init_connector();
@@ -12285,6 +12362,9 @@ var init_src2 = __esm({
     init_model_catalog();
     init_mcp_catalog();
     init_timezone();
+    init_redact_secrets();
+    init_approval_impact();
+    init_catastrophic_command();
   }
 });
 
@@ -12464,6 +12544,11 @@ var init_llm_keys = __esm({
         apiKeyLast4: text("api_key_last4").notNull().default(""),
         baseUrl: text("base_url"),
         nickname: text("nickname"),
+        // Real context window (tokens) for a custom/local model the catalog can't
+        // know (É-3). Auto-detected from the endpoint at save time or set by the
+        // user; NULL ⇒ fall back to the catalogued value or DEFAULT_CONTEXT_WINDOW.
+        // Used window-relative to trigger compaction before the model overflows.
+        contextWindow: integer("context_window"),
         isActive: boolean("is_active").notNull().default(true),
         createdAt: timestamp("created_at", { withTimezone: true }).notNull().defaultNow(),
         updatedAt: timestamp("updated_at", { withTimezone: true }).notNull().defaultNow()
@@ -12619,6 +12704,18 @@ var init_jobs = __esm({
         task: text("task").notNull(),
         originalTask: text("original_task"),
         chatId: text("chat_id"),
+        /**
+         * Groups jobs from the same conversational thread for the Jobs page UI
+         * (migration 0059). Purely a reporting/grouping concern — the runtime
+         * execution path (delegation, cron, task-board) never reads this column.
+         * NULL for non-conversational jobs (cron/schedule/webhook with no parent).
+         * Stamped at creation by apps/runner/src/job/conversation-id.ts, reusing
+         * the exact idle-reset session boundary thread-history.ts already uses
+         * for chat continuity — see that file for the gap rule. Delegated/
+         * task-board children inherit their creator's value; nothing else
+         * mutates it after insert.
+         */
+        conversationId: uuid("conversation_id"),
         systemPrompt: text("system_prompt"),
         messages: jsonb("messages").default(sql`'[]'::jsonb`),
         /**
@@ -12701,6 +12798,9 @@ var init_jobs = __esm({
           sql`${table.createdAt} DESC`
         ),
         index("idx_agent_jobs_parent_job_id").on(table.parentJobId),
+        // Migration 0059: the Jobs page groups conversational jobs by
+        // (entity_id, conversation_id) — this index serves that lookup directly.
+        index("idx_agent_jobs_entity_conversation").on(table.entityId, table.conversationId),
         // idx_jobs_parent (F-20, audit #2) was an exact duplicate of
         // idx_agent_jobs_parent_job_id above — same column, same order, both from
         // migration 0000. Dropped in migration 0054; kept this one (matches the
@@ -12844,7 +12944,10 @@ var init_connectors = __esm({
         name: text("name").notNull(),
         slug: text("slug").notNull(),
         baseUrl: text("base_url"),
-        // Encrypted with pgp_sym_encrypt in DB — raw value never returned in select
+        // audit#2026-07-07 SEC-5: this comment used to claim pgp_sym_encrypt (pgcrypto),
+        // which is not used anywhere. Real encryption is application-level AES-256-GCM
+        // via @nodal-agents/secrets before the value ever reaches this column — the DB
+        // column itself just holds ciphertext as opaque text. Raw value never returned in select.
         apiKey: text("api_key"),
         active: boolean("active").default(true),
         authType: text("auth_type").notNull().default("api_key"),
@@ -13804,6 +13907,7 @@ var init_transaction = __esm({
 // ../../packages/secrets/src/index.ts
 import { createCipheriv, createDecipheriv, randomBytes as randomBytes2 } from "crypto";
 import { chmodSync as chmodSync2, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync3 } from "fs";
+import { execFileSync as execFileSync2 } from "child_process";
 import { homedir as homedir2 } from "os";
 import { dirname as dirname3, join as join5 } from "path";
 function masterKeyPath() {
@@ -13843,6 +13947,16 @@ async function assertMasterKeyRestorable(db, options = {}) {
   const llmKeyRows = await db.select({ apiKey: entityLlmKeys.apiKey }).from(entityLlmKeys);
   const hasEncryptedLlmKey = llmKeyRows.some((r) => r.apiKey !== "" && isEncrypted(r.apiKey));
   if (hasEncryptedLlmKey) throw missingKeyError("a stored LLM API key");
+  const connectorRows = await db.select({ apiKey: connectors.apiKey }).from(connectors);
+  const hasEncryptedConnector = connectorRows.some((r) => !!r.apiKey && isEncrypted(r.apiKey));
+  if (hasEncryptedConnector) throw missingKeyError("a stored connector API key");
+  const mcpRows = await db.select({ apiKey: mcpServers.apiKey, envVars: mcpServers.envVars }).from(mcpServers);
+  const hasEncryptedMcp = mcpRows.some((r) => {
+    if (r.apiKey && isEncrypted(r.apiKey)) return true;
+    const env = r.envVars ?? {};
+    return Object.values(env).some((v) => typeof v === "string" && isEncrypted(v));
+  });
+  if (hasEncryptedMcp) throw missingKeyError("a stored MCP server secret");
 }
 function missingKeyError(what) {
   return new Error(
@@ -13854,6 +13968,8 @@ var init_master_key_guard = __esm({
     "use strict";
     init_credentials();
     init_llm_keys();
+    init_connectors();
+    init_mcp();
     init_src3();
   }
 });

package/migrations/0058_entity_llm_keys_context_window.sql

@@ -0,0 +1,6 @@
+-- É-3 (audit sécu 2026-07-07): per-model context window for custom/local models
+-- the catalog can't know. NULL ⇒ fall back to the catalogued value or
+-- DEFAULT_CONTEXT_WINDOW. Used window-relative to trigger conversation
+-- compaction before the model overflows (a too-large default silently killed
+-- local 8-16K models mid-conversation).
+ALTER TABLE "entity_llm_keys" ADD COLUMN "context_window" integer;

package/migrations/0059_agent_jobs_conversation_id.sql

@@ -0,0 +1,10 @@
+-- Conversation grouping (Jobs page): a conversational thread (Telegram DM,
+-- dashboard chat escalation, delegated/task-board child) shares one
+-- conversation_id across the jobs it produced, so the UI can collapse a
+-- 10-message chat into one row instead of 10 identical-looking job rows.
+-- Purely additive/reporting — the runner's execution path never reads this
+-- column. NULL for non-conversational jobs (cron/schedule/webhook with no
+-- parent). See apps/runner/src/job/conversation-id.ts for the stamping rule.
+ALTER TABLE "agent_jobs" ADD COLUMN "conversation_id" uuid;
+--> statement-breakpoint
+CREATE INDEX "idx_agent_jobs_entity_conversation" ON "agent_jobs" ("entity_id","conversation_id");

package/migrations/meta/_journal.json

@@ -400,6 +400,20 @@
       "when": 1783700000000,
       "tag": "0057_telegram_allowed_chats",
       "breakpoints": true
+    },
+    {
+      "idx": 58,
+      "version": "7",
+      "when": 1783800000000,
+      "tag": "0058_entity_llm_keys_context_window",
+      "breakpoints": true
+    },
+    {
+      "idx": 59,
+      "version": "7",
+      "when": 1783900000000,
+      "tag": "0059_agent_jobs_conversation_id",
+      "breakpoints": true
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nodal-agents",
-  "version": "0.7.2",
+  "version": "0.7.5",
   "description": "Local-first AI agent platform with a web dashboard — install in one command.",
   "license": "MIT",
   "repository": {