open-agents-ai 0.187.338 → 0.187.340

package/dist/index.js

@@ -299783,12 +299783,19 @@ sleep 1
             onEnter: (item, { done }) => {
               (async () => {
                 if (item.key === "__kill__") {
-                  const resp = await doFetch("/v1/scheduled/kill", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({}) });
+                  renderInfo2("Scorched earth: removing all scheduled tasks, timers, crons, and killing processes...");
                   try {
+                    const delResp = await doFetch("/v1/scheduled/all", { method: "DELETE", headers: { "Content-Type": "application/json" } });
+                    const delJ = await delResp.json();
+                    renderInfo2(`Deleted ${delJ.deleted || 0} tasks, ${delJ.timers_disabled || 0} timers, ${delJ.cron_lines_removed || 0} cron entries.`);
+                  } catch {
+                  }
+                  try {
+                    const resp = await doFetch("/v1/scheduled/kill", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({}) });
                     const j = await resp.json();
                     const kb = Array.isArray(j.killed) ? j.killed.length : 0;
                     const ka = Array.isArray(j.additionally) ? j.additionally.length : 0;
-                    renderInfo2(`Killed ${kb + ka} processes (schedulers + active runs).`);
+                    renderInfo2(`Killed ${kb + ka} processes.`);
                     const before = j.gpu_before?.[0];
                     const after = j.gpu_after?.[0];
                     if (before && after) {
@@ -299796,19 +299803,18 @@ sleep 1
                     }
                     const rem = Array.isArray(j.procs_after) ? j.procs_after.length : 0;
                     if (rem > 0) {
-                      renderWarning2(`Remaining matched processes: ${rem}. Escalating with sudo...`);
-                      const script = `systemctl disable --now "oa-*".timer 2>/dev/null || true; systemctl disable --now "oa-*".service 2>/dev/null || true; crontab -l 2>/dev/null | sed '/OPEN-AGENTS-SCHEDULED/d' | crontab - || true; pkill -f 'OPEN-AGENTS-SCHEDULED|oa-sched-|nexus|ollama' || true; sleep 1`;
+                      renderWarning2(`${rem} processes remain. Escalating with sudo...`);
+                      const script = [
+                        `for u in $(systemctl list-unit-files 'oa-*.timer' --no-legend 2>/dev/null | awk '{print $1}'); do systemctl disable --now "$u" 2>/dev/null; done`,
+                        `for u in $(systemctl list-unit-files 'oa-*.service' --no-legend 2>/dev/null | awk '{print $1}'); do systemctl disable --now "$u" 2>/dev/null; done`,
+                        `crontab -l 2>/dev/null | sed '/OPEN-AGENTS-SCHEDULED/d' | crontab - || true`,
+                        `pkill -f 'OPEN-AGENTS-SCHEDULED|oa-sched-' || true`,
+                        `sleep 1`,
+                        `pkill -9 -f 'OPEN-AGENTS-SCHEDULED|oa-sched-' || true`
+                      ].join("; ");
                       await runSudoScript(ctx3, script);
-                      try {
-                        const r22 = await doFetch("/v1/scheduled/kill", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify({}) });
-                        const j2 = await r22.json();
-                        const rem2 = Array.isArray(j2.procs_after) ? j2.procs_after.length : 0;
-                        if (rem2 > 0) renderWarning2(`Remaining after escalation: ${rem2}`);
-                        else renderInfo2("No remaining matched processes after escalation.");
-                      } catch {
-                      }
                     } else {
-                      renderInfo2("No remaining matched processes.");
+                      renderInfo2("All clear — no remaining processes.");
                     }
                   } catch {
                     renderInfo2("Kill signal sent.");
@@ -325574,9 +325580,24 @@ function textResponse(res, status, body, contentType = "text/plain") {
 }
 function isOriginAllowed(origin) {
   if (!origin) return true;
-  if (_corsOrigins.includes("*")) return true;
-  if (_corsLocalOnly) return /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin);
-  return _corsOrigins.some((p2) => origin === p2 || p2.includes("*") && new RegExp("^" + p2.replace(/\*/g, ".*") + "$").test(origin));
+  const accessMode = (process.env["OA_ACCESS"] || "").toLowerCase().trim();
+  if (accessMode === "any") return true;
+  if (accessMode === "lan") {
+    try {
+      const u = new URL(origin);
+      const host = u.hostname;
+      if (/^(localhost|127\.\d+\.\d+\.\d+|::1|\[::1\])$/.test(host)) return true;
+      if (/^(10\.|192\.168\.|172\.(1[6-9]|2\d|3[01])\.|169\.254\.)/.test(host)) return true;
+      if (/^f[cd][0-9a-f]{2}:/i.test(host) || /^fe[89ab][0-9a-f]:/i.test(host)) return true;
+    } catch {
+    }
+  }
+  const corsOrigins = (process.env["OA_CORS_ORIGINS"] || "").split(",").filter(Boolean);
+  if (corsOrigins.includes("*")) return true;
+  if (corsOrigins.length > 0) {
+    return corsOrigins.some((p2) => origin === p2 || p2.includes("*") && new RegExp("^" + p2.replace(/\*/g, ".*") + "$").test(origin));
+  }
+  return /^https?:\/\/(localhost|127\.0\.0\.1)(:\d+)?$/.test(origin);
 }
 function corsHeaders(req2, res) {
   const origin = req2.headers["origin"];
@@ -328163,6 +328184,39 @@ async function handleRequest(req2, res, ollamaUrl, verbose) {
       jsonResponse(res, ok2 ? 200 : 404, ok2 ? { id, enabled: enabled2 } : { error: "Not found" });
       return;
     }
+    if (pathname === "/v1/scheduled/all" && method === "DELETE") {
+      let deleted = 0;
+      try {
+        const tasks = listScheduledTasks();
+        for (let i2 = tasks.length - 1; i2 >= 0; i2--) {
+          try {
+            deleteScheduledById(tasks[i2].id);
+            deleted++;
+          } catch {
+          }
+        }
+      } catch {
+      }
+      const timersDisabled = disableAllOaTimers();
+      const cronRemoved = removeAllOaCrons();
+      try {
+        const tasks = listScheduledTasks();
+        const seenFiles = /* @__PURE__ */ new Set();
+        for (const t2 of tasks) {
+          if (t2.file && t2.file !== "(systemd)") seenFiles.add(t2.file);
+        }
+        for (const f2 of seenFiles) {
+          try {
+            writeFileSync45(f2, JSON.stringify({ tasks: [] }, null, 2));
+            deleted++;
+          } catch {
+          }
+        }
+      } catch {
+      }
+      jsonResponse(res, 200, { deleted, timers_disabled: timersDisabled, cron_lines_removed: cronRemoved });
+      return;
+    }
     if (pathname === "/v1/scheduled/kill" && method === "POST") {
       const body = await parseJsonBody(req2);
       const pids = Array.isArray(body?.pids) ? body.pids.filter((n2) => Number.isInteger(n2)) : void 0;
@@ -330397,7 +330451,7 @@ function setTimerEnabled(name11, enabled2) {
     return false;
   }
 }
-var endpointRegistry, modelRouteMap, endpointUsage, metrics, startedAt, _corsOrigins, _corsLocalOnly, runningProcesses, perKeyUsage, CRON_MARKER2;
+var endpointRegistry, modelRouteMap, endpointUsage, metrics, startedAt, runningProcesses, perKeyUsage, CRON_MARKER2;
 var init_serve = __esm({
   "packages/cli/src/api/serve.ts"() {
     "use strict";
@@ -330430,8 +330484,6 @@ var init_serve = __esm({
       totalErrors: 0
     };
     startedAt = Date.now();
-    _corsOrigins = (process.env["OA_CORS_ORIGINS"] || "").split(",").filter(Boolean);
-    _corsLocalOnly = _corsOrigins.length === 0;
     runningProcesses = /* @__PURE__ */ new Map();
     perKeyUsage = /* @__PURE__ */ new Map();
     CRON_MARKER2 = "# OPEN-AGENTS-SCHEDULED:";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.187.338",
+  "version": "0.187.340",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",