open-agents-ai 0.187.364 → 0.187.365

package/dist/index.js

@@ -544461,11 +544461,31 @@ async function handleSlashCommand(input, ctx3) {
           } else {
             ctx4.saveSettings({ oaAccess: val2 });
           }
-          const { stopDaemon: stopDaemon3, ensureDaemon: ensureDaemon3 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
-          stopDaemon3();
-          await new Promise((r2) => setTimeout(r2, 800));
-          const ok3 = await ensureDaemon3();
-          renderInfo2(ok3 ? "Daemon restarted to apply access policy." : "Failed to restart daemon.");
+          const port2 = parseInt(process.env["OA_PORT"] || "11435", 10);
+          let switched2 = false;
+          try {
+            const resp = await fetch(`http://127.0.0.1:${port2}/v1/admin/access`, {
+              method: "POST",
+              headers: { "Content-Type": "application/json" },
+              body: JSON.stringify({ mode: val2 }),
+              signal: AbortSignal.timeout(3e3)
+            });
+            switched2 = resp.ok;
+          } catch {
+          }
+          if (switched2) {
+            renderInfo2(`Access policy now '${val2}' (live, no restart). Persisted to ~/.open-agents/access.`);
+          } else {
+            const { stopDaemon: stopDaemon2, ensureDaemon: ensureDaemon2, isDaemonRunning: isDaemonRunning2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
+            stopDaemon2();
+            const deadline = Date.now() + 4e3;
+            while (Date.now() < deadline) {
+              if (!await isDaemonRunning2(port2)) break;
+              await new Promise((r2) => setTimeout(r2, 200));
+            }
+            const ok2 = await ensureDaemon2();
+            renderInfo2(ok2 ? "Daemon restarted to apply access policy." : "Failed to restart daemon.");
+          }
           return "handled";
         }
       });
@@ -544506,11 +544526,36 @@ async function handleSlashCommand(input, ctx3) {
       } else {
         ctx3.saveSettings({ oaAccess: val });
       }
-      const { stopDaemon: stopDaemon2, ensureDaemon: ensureDaemon2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
-      stopDaemon2();
-      await new Promise((r2) => setTimeout(r2, 800));
-      const ok2 = await ensureDaemon2();
-      renderInfo2(ok2 ? "Daemon restarted to apply access policy." : "Failed to restart daemon.");
+      const port = parseInt(process.env["OA_PORT"] || "11435", 10);
+      let switched = false;
+      try {
+        const resp = await fetch(`http://127.0.0.1:${port}/v1/admin/access`, {
+          method: "POST",
+          headers: { "Content-Type": "application/json" },
+          body: JSON.stringify({ mode: val }),
+          signal: AbortSignal.timeout(3e3)
+        });
+        switched = resp.ok;
+        if (!resp.ok) {
+          const txt = await resp.text().catch(() => "");
+          renderWarning2(`Live access switch HTTP ${resp.status}: ${txt.slice(0, 120)}`);
+        }
+      } catch (e2) {
+        renderWarning2(`Live access switch failed (${e2 instanceof Error ? e2.message : String(e2)}); falling back to daemon restart.`);
+      }
+      if (switched) {
+        renderInfo2(`Access policy now '${val}' (live, no restart). Persisted to ~/.open-agents/access.`);
+      } else {
+        const { stopDaemon: stopDaemon2, ensureDaemon: ensureDaemon2, isDaemonRunning: isDaemonRunning2 } = await Promise.resolve().then(() => (init_daemon(), daemon_exports));
+        stopDaemon2();
+        const deadline = Date.now() + 4e3;
+        while (Date.now() < deadline) {
+          if (!await isDaemonRunning2(port)) break;
+          await new Promise((r2) => setTimeout(r2, 200));
+        }
+        const ok2 = await ensureDaemon2();
+        renderInfo2(ok2 ? "Daemon restarted to apply access policy." : "Failed to restart daemon.");
+      }
       return "handled";
     }
     case "host": {
@@ -576838,23 +576883,85 @@ function startApiServer(options2 = {}) {
       process.exit(1);
     }
   }
-  const accessMode = resolveAccessMode(process.env["OA_ACCESS"], host);
+  let runtimeAccessMode = resolveAccessMode(process.env["OA_ACCESS"], host);
+  try {
+    const accessFile = join104(homedir38(), ".open-agents", "access");
+    if (existsSync87(accessFile)) {
+      const persisted = readFileSync69(accessFile, "utf8").trim();
+      const resolved = resolveAccessMode(persisted, host);
+      if (resolved) runtimeAccessMode = resolved;
+    }
+  } catch {
+  }
   let _accessRejected = 0;
   const handler = (req2, res) => {
     const rawIp = req2.socket?.remoteAddress ?? "";
-    if (!isAllowedIP(rawIp, accessMode)) {
+    if (!isAllowedIP(rawIp, runtimeAccessMode)) {
       _accessRejected++;
       metrics.totalErrors++;
       try {
         res.writeHead(403, { "Content-Type": "application/json" });
         res.end(JSON.stringify({
           error: "access_denied",
-          message: `Address ${rawIp} is not in the allowed network (mode: ${accessMode}). Set OA_ACCESS=any to disable.`
+          message: `Address ${rawIp} is not in the allowed network (mode: ${runtimeAccessMode}). Set OA_ACCESS=any to disable.`
         }));
       } catch {
       }
       return;
     }
+    try {
+      const url = new URL(req2.url || "", "http://local");
+      if (url.pathname === "/v1/admin/access" && req2.method === "POST") {
+        if (!isLoopbackIP(rawIp)) {
+          res.writeHead(403, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ error: "loopback_required", message: "POST /v1/admin/access requires a loopback origin." }));
+          return;
+        }
+        let body = "";
+        req2.on("data", (chunk) => {
+          body += chunk;
+          if (body.length > 4096) {
+            try {
+              req2.destroy();
+            } catch {
+            }
+          }
+        });
+        req2.on("end", () => {
+          try {
+            const payload = JSON.parse(body || "{}");
+            const requested = (payload?.mode || "").toLowerCase().trim();
+            const allowed = /* @__PURE__ */ new Set(["loopback", "lan", "any"]);
+            if (!allowed.has(requested)) {
+              res.writeHead(400, { "Content-Type": "application/json" });
+              res.end(JSON.stringify({ error: "invalid_mode", message: `mode must be one of: ${[...allowed].join(", ")}` }));
+              return;
+            }
+            const previous = runtimeAccessMode;
+            runtimeAccessMode = requested;
+            try {
+              const dir = join104(homedir38(), ".open-agents");
+              mkdirSync54(dir, { recursive: true });
+              writeFileSync47(join104(dir, "access"), `${runtimeAccessMode}
+`, "utf8");
+            } catch {
+            }
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true, previous, current: runtimeAccessMode }));
+          } catch (e2) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ error: "bad_request", message: e2 instanceof Error ? e2.message : String(e2) }));
+          }
+        });
+        return;
+      }
+      if (url.pathname === "/v1/admin/access" && req2.method === "GET") {
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ mode: runtimeAccessMode, host }));
+        return;
+      }
+    } catch {
+    }
     try {
       const url = new URL(req2.url || "", "http://local");
       if (req2.method === "POST" && url.pathname === "/v1/vision/embed") {
@@ -576971,7 +577078,7 @@ function startApiServer(options2 = {}) {
     const proto = useTls ? "https" : "http";
     log22(`  Listening on ${proto}://${host}:${port}
 `);
-    log22(`  Access: ${accessMode} (${describeAccessMode(accessMode)})
+    log22(`  Access: ${runtimeAccessMode} (${describeAccessMode(runtimeAccessMode)})
 `);
     log22(`  Primary: ${config.backendUrl} (${config.backendType || "ollama"})
 `);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "open-agents-ai",
-  "version": "0.187.364",
+  "version": "0.187.365",
   "description": "AI coding agent powered by open-source models (Ollama/vLLM) — interactive TUI with agentic tool-calling loop",
   "type": "module",
   "main": "./dist/index.js",