oysterun 1.5.5 → 1.5.6

package/dev/client/web/index.html

@@ -8659,6 +8659,13 @@
                               data-session-setup-web-shared="web.enabled"
                             />
                           </label>
+                          <div
+                            id="create-website-authority-hint"
+                            class="field-hint field-warning"
+                          >
+                            Website is available only for agents in the Browser
+                            Root.
+                          </div>
                         </div>
                         <label
                           class="kv-label"
@@ -13325,6 +13332,12 @@ Waiting for Claude login output…</pre
       let lastCreateStartActivationAt = 0;
       let createFormPreferenceVersion = 0;
       let latestCreateFolderConfigRequestId = 0;
+      let createWebsiteAuthorityState = {
+        folderPath: "",
+        projectAgentId: "",
+        eligible: false,
+        reason: "Website is available only for agents in the Browser Root.",
+      };
       let createFormDraftRouteKey = "";
       let createSubmitState = {
         inFlight: false,
@@ -26803,6 +26816,7 @@ Waiting for Claude login output…</pre
       function renderAgentProfileWebsiteAccessRow(liveSession) {
         syncAgentProfileWebsiteAccessSession(liveSession);
         const website = getLiveSessionWebsite(liveSession);
+        const websiteAuthorized = website?.browser_root_authorized === true;
         const enabled = website?.enabled === true;
         const access = normalizeAgentWebAccess(website?.access);
         const websitePassword = getOwnerVisibleWebsitePassword(website);
@@ -26836,16 +26850,27 @@ Waiting for Claude login output…</pre
                 type="checkbox"
                 data-session-profile-web-enabled="web.enabled"
                 ${enabled ? "checked" : ""}
-                ${saving ? "disabled" : ""}
+                ${saving || !websiteAuthorized ? "disabled" : ""}
               />
             </label>
+            ${
+              websiteAuthorized
+                ? ""
+                : `<div
+                    class="field-hint field-warning"
+                    data-session-profile-website-authority="outside_browser_root"
+                  >${esc(
+                    website?.reason_message ||
+                      "Website is available only for agents in the Browser Root."
+                  )}</div>`
+            }
             <label class="field compact-field" for="agent-profile-website-access">
               <span>Access</span>
               <select
                 id="agent-profile-website-access"
                 data-session-profile-web-access="web.access"
                 onchange="window.syncAgentProfileWebsitePasswordMode && window.syncAgentProfileWebsitePasswordMode()"
-                ${saving ? "disabled" : ""}
+                ${saving || !websiteAuthorized ? "disabled" : ""}
               >${renderAgentWebAccessOptions(access)}</select>
             </label>
             <label
@@ -26863,7 +26888,11 @@ Waiting for Claude login output…</pre
                 value="${esc(websitePassword)}"
                 data-session-profile-web-local="web.password"
                 oninput="window.syncAgentProfileWebsitePasswordMode && window.syncAgentProfileWebsitePasswordMode()"
-                ${access === "password" && !saving ? "" : "disabled"}
+                ${
+                  access === "password" && !saving && websiteAuthorized
+                    ? ""
+                    : "disabled"
+                }
               />
               <div
                 id="agent-profile-website-password-status"
@@ -26895,7 +26924,7 @@ Waiting for Claude login output…</pre
                 data-session-profile-save="website"
                 data-session-profile-web-access-save="explicit"
                 onclick="window.saveAgentProfileWebsiteAccess && window.saveAgentProfileWebsiteAccess()"
-                ${saving ? "disabled" : ""}
+                ${saving || !websiteAuthorized ? "disabled" : ""}
               >${saving ? "Saving..." : "Save"}</button>
             </div>
             ${
@@ -26914,6 +26943,9 @@ Waiting for Claude login output…</pre
       }
 
       function syncAgentProfileWebsitePasswordMode() {
+        const liveSession = getSelectedLiveSession();
+        const websiteAuthorized =
+          getLiveSessionWebsite(liveSession)?.browser_root_authorized === true;
         const access = normalizeAgentWebAccess(
           $("agent-profile-website-access")?.value
         );
@@ -26923,13 +26955,12 @@ Waiting for Claude login output…</pre
         const passwordMode = access === "password";
         if (row) row.classList.remove("hidden");
         if (input) {
-          input.disabled = !passwordMode;
+          input.disabled = !websiteAuthorized || !passwordMode;
         }
         if (status) {
-          status.textContent = formatOwnerWebsitePasswordHint(
-            access,
-            input?.value || ""
-          );
+          status.textContent = websiteAuthorized
+            ? formatOwnerWebsitePasswordHint(access, input?.value || "")
+            : "Website is available only for agents in the Browser Root.";
         }
       }
 
@@ -26938,6 +26969,19 @@ Waiting for Claude login output…</pre
         if (!liveSession?.sessionId) return;
         syncAgentProfileWebsiteAccessSession(liveSession);
         if (agentProfileWebsiteAccessState.saving === true) return;
+        const previousWebsite = getLiveSessionWebsite(liveSession);
+        if (previousWebsite?.browser_root_authorized !== true) {
+          agentProfileWebsiteAccessState = {
+            ...agentProfileWebsiteAccessState,
+            saving: false,
+            error:
+              previousWebsite?.reason_message ||
+              "Website is available only for agents in the Browser Root.",
+            status: "",
+          };
+          renderAgentProfileView();
+          return;
+        }
         const select = $("agent-profile-website-access");
         const updateConfig = true;
         const nextEnabled =
@@ -26947,7 +26991,6 @@ Waiting for Claude login output…</pre
           nextAccess === "password"
             ? String($("agent-profile-website-password")?.value || "").trim()
             : "";
-        const previousWebsite = getLiveSessionWebsite(liveSession);
         if (nextAccess === "password" && !nextWebsitePassword) {
           agentProfileWebsiteAccessState = {
             ...agentProfileWebsiteAccessState,
@@ -37739,6 +37782,59 @@ Waiting for Claude login output…</pre
         syncCreateAllowedPathsShortcutState();
       }
 
+      function isCreateWebsiteEligible() {
+        return (
+          createWebsiteAuthorityState.eligible === true &&
+          createWebsiteAuthorityState.projectAgentId ===
+            String($("create-agent-id")?.value || "").trim()
+        );
+      }
+
+      function syncCreateWebsiteAuthorityState() {
+        const eligible = isCreateWebsiteEligible();
+        const enabledInput = $("create-website-enabled");
+        const accessSelect = $("create-website-access");
+        const hint = $("create-website-authority-hint");
+        if (enabledInput) {
+          enabledInput.disabled = !eligible;
+          if (!eligible) enabledInput.checked = false;
+        }
+        if (accessSelect) {
+          accessSelect.disabled = !eligible;
+          if (!eligible) accessSelect.value = "owner_only";
+        }
+        if (!eligible) setCreateWebsitePasswordValue("");
+        if (hint) {
+          hint.textContent =
+            createWebsiteAuthorityState.reason ||
+            "Website is available only for agents in the Browser Root.";
+          hint.classList.toggle("hidden", eligible);
+        }
+        syncCreateWebsitePasswordMode();
+      }
+
+      function setCreateWebsiteAuthorityState({
+        folderPath = "",
+        projectAgentId = "",
+        eligible = false,
+        reason = "",
+      } = {}) {
+        createWebsiteAuthorityState = {
+          folderPath: String(folderPath || "").trim(),
+          projectAgentId: String(projectAgentId || "").trim(),
+          eligible: eligible === true,
+          reason:
+            String(reason || "").trim() ||
+            "Website is available only for agents in the Browser Root.",
+        };
+        if (eligible !== true) {
+          setCreateWebsiteEnabledValue(false);
+          setCreateWebsiteAccessValue("owner_only");
+          setCreateWebsitePasswordValue("");
+        }
+        syncCreateWebsiteAuthorityState();
+      }
+
       function setCreateWebsiteAccessValue(value) {
         const select = $("create-website-access");
         if (!select) return;
@@ -37774,16 +37870,19 @@ Waiting for Claude login output…</pre
         const row = $("create-website-password-row");
         const input = $("create-website-password");
         const status = $("create-website-password-status");
+        const eligible = isCreateWebsiteEligible();
         const passwordMode = getCreateWebsiteAccessValue() === "password";
         if (row) row.classList.remove("hidden");
         if (input) {
-          input.disabled = !passwordMode;
+          input.disabled = !eligible || !passwordMode;
         }
         if (status) {
-          status.textContent = formatOwnerWebsitePasswordHint(
-            getCreateWebsiteAccessValue(),
-            input?.value || ""
-          );
+          status.textContent = eligible
+            ? formatOwnerWebsitePasswordHint(
+                getCreateWebsiteAccessValue(),
+                input?.value || ""
+              )
+            : "Website settings are unavailable outside the Browser Root.";
         }
       }
 
@@ -37889,6 +37988,10 @@ Waiting for Claude login output…</pre
         syncSessionSetupInterfaceStyleVisibility();
         setCreateWebsiteEnabledValue(HOST_DEFAULT_SESSION_DEFAULTS.web.enabled);
         setCreateWebsiteAccessValue(HOST_DEFAULT_SESSION_DEFAULTS.web.access);
+        setCreateWebsiteAuthorityState({
+          folderPath: startFolder,
+          eligible: false,
+        });
         setCreateNotificationsEnabledValue(
           HOST_DEFAULT_SESSION_DEFAULTS.notifications.enabled
         );
@@ -37981,6 +38084,10 @@ Waiting for Claude login output…</pre
         syncSessionSetupInterfaceStyleVisibility();
         setCreateWebsiteEnabledValue(HOST_DEFAULT_SESSION_DEFAULTS.web.enabled);
         setCreateWebsiteAccessValue(HOST_DEFAULT_SESSION_DEFAULTS.web.access);
+        setCreateWebsiteAuthorityState({
+          folderPath: record.agent_folder || "",
+          eligible: false,
+        });
         setCreateNotificationsEnabledValue(
           HOST_DEFAULT_SESSION_DEFAULTS.notifications.enabled
         );
@@ -38389,14 +38496,15 @@ Waiting for Claude login output…</pre
         if (liveSession?.website && typeof liveSession.website === "object") {
           return liveSession.website;
         }
-        if (
-          selectedAgent?.agent_id &&
-          selectedAgent.agent_id === liveSession?.agentId &&
-          selectedAgent.website
-        ) {
-          return selectedAgent.website;
-        }
-        return null;
+        return {
+          enabled: false,
+          available: false,
+          access: "owner_only",
+          browser_root_authorized: false,
+          reason: "session_folder_outside_browser_root",
+          reason_message:
+            "Website is available only for agents in the Browser Root.",
+        };
       }
 
       function getOwnerVisibleWebsitePassword(website = {}) {
@@ -40377,7 +40485,6 @@ Waiting for Claude login output…</pre
           "approval_policy",
           "allow_dangerously_skip_permissions",
           "dangerous_mode",
-          "web_access",
           "notifications_enabled",
           "allowed_paths",
           "runtime_capabilities",
@@ -40529,8 +40636,10 @@ Waiting for Claude login output…</pre
           payload.interface_type || getCreateDefaultInterfaceType()
         );
         syncSessionSetupInterfaceStyleVisibility();
-        setCreateWebsiteEnabledValue(payload.web_enabled === true);
-        setCreateWebsiteAccessValue(payload.web_access || "owner_only");
+        setCreateWebsiteAuthorityState({
+          folderPath: draft.agentFolder || "",
+          eligible: false,
+        });
         setCreateTelegramSettingsValue({});
         $("create-allowed-paths").value = normalizeAllowedPathsForForm(
           payload.allowed_paths
@@ -40603,6 +40712,13 @@ Waiting for Claude login output…</pre
         syncCreateAllowedPathsShortcutState();
         refreshCreateStartButtonEnabled();
         refreshUpdateSessionNameButton();
+        if (draft.agentFolder) {
+          void loadFolderConfigIntoCreateForm(draft.agentFolder, {
+            fillAgentIdIfEmpty: false,
+            applyFormValues: false,
+            showError: false,
+          });
+        }
       }
 
       function readSessionSetupSchedulerDraftForEditor(
@@ -48648,14 +48764,6 @@ Waiting for Claude login output…</pre
         const allowedPaths = isAllowedPathDebugUiVisible()
           ? parseAllowedPathsInput($("create-allowed-paths").value)
           : null;
-        const webAccess = getCreateWebsiteAccessValue();
-        const webPassword =
-          webAccess === "password" ? getCreateWebsitePasswordValue() : "";
-        if (webAccess === "password" && !webPassword) {
-          throw new Error(
-            "Website Password is required when Website Access is Password. Switch Website Access away from Password before clearing it."
-          );
-        }
 
         const payload = {
           provider: createRuntime,
@@ -48672,8 +48780,6 @@ Waiting for Claude login output…</pre
             createRuntime === "codex" ? codexApproval : undefined,
           allow_dangerously_skip_permissions: allowDanger,
           dangerous_mode: allowDanger,
-          web_enabled: getCreateWebsiteEnabledValue(),
-          web_access: webAccess,
           notifications_enabled: getCreateNotificationsEnabledValue(),
           install_oysterun_skills: getCreateInstallOysterunSkillsValue(),
           ...readTelegramFieldsPayload("create"),
@@ -48692,9 +48798,6 @@ Waiting for Claude login output…</pre
         ) {
           payload.confirm_beta_provider_permission_mode = true;
         }
-        if (webPassword) {
-          payload.web_password = webPassword;
-        }
         validateTelegramEnabledPayloadOrThrow(
           payload,
           getCreateTelegramConfiguredState()
@@ -48702,6 +48805,23 @@ Waiting for Claude login output…</pre
         return payload;
       }
 
+      function buildCreateWebsitePayload() {
+        if (!isCreateWebsiteEligible()) return null;
+        const webAccess = getCreateWebsiteAccessValue();
+        const webPassword =
+          webAccess === "password" ? getCreateWebsitePasswordValue() : "";
+        if (webAccess === "password" && !webPassword) {
+          throw new Error(
+            "Website Password is required when Website Access is Password. Switch Website Access away from Password before clearing it."
+          );
+        }
+        return {
+          web_enabled: getCreateWebsiteEnabledValue(),
+          web_access: webAccess,
+          ...(webPassword ? { web_password: webPassword } : {}),
+        };
+      }
+
       function readCreateFormRequest() {
         const agent_id = $("create-agent-id").value.trim();
         const agent_folder = $("create-agent-folder").value.trim();
@@ -48724,6 +48844,7 @@ Waiting for Claude login output…</pre
             configToggleChecked
           ),
           sessionPayload: buildCreateSessionPayload(),
+          websitePayload: buildCreateWebsitePayload(),
         };
       }
 
@@ -48754,6 +48875,7 @@ Waiting for Claude login output…</pre
           persistConfig,
           preventConfigCreate,
           sessionPayload,
+          websitePayload,
         } = request;
         const sessionSetupProof = applyCreateSessionSetupProofAttributes(
           buildCreateSessionSetupProviderModelPermissionProof(sessionPayload)
@@ -48791,28 +48913,37 @@ Waiting for Claude login output…</pre
 
         const configPersistenceAction =
           getCreateConfigPersistenceAction(configToggleMode);
-        let failureStep = shouldPersistConfig
-          ? `Could not ${configPersistenceAction.toLowerCase()} .oysterun/config.json`
-          : resumeSessionId
-          ? "Could not resume session"
-          : "Could not start session";
+        const shouldPersistWebsite = Boolean(websitePayload);
+        let failureStep =
+          shouldPersistConfig || shouldPersistWebsite
+            ? `Could not ${configPersistenceAction.toLowerCase()} .oysterun/config.json`
+            : resumeSessionId
+            ? "Could not resume session"
+            : "Could not start session";
         try {
-          if (shouldPersistConfig) {
+          if (shouldPersistConfig || shouldPersistWebsite) {
             await apiWithAuthRetry(
               "PUT",
               "/agent/config",
               {
                 agent_id,
                 agent_folder,
-                ...sessionPayload,
-                session_setup_provider_model_permission_proof:
-                  sessionSetupProof,
+                ...(shouldPersistConfig
+                  ? {
+                      ...sessionPayload,
+                      session_setup_provider_model_permission_proof:
+                        sessionSetupProof,
+                    }
+                  : {}),
+                ...(websitePayload || {}),
               },
               {
                 onRetry: () => {
                   if (!isCurrentCreateAttempt(attemptId)) return;
                   setCreateStatus(
-                    `${configPersistenceAction} .oysterun/config.json...`,
+                    shouldPersistConfig
+                      ? `${configPersistenceAction} .oysterun/config.json...`
+                      : "Updating Website settings...",
                     "Retrying config save after a brief auth settle."
                   );
                 },
@@ -50190,6 +50321,7 @@ Waiting for Claude login output…</pre
         const folderPath = String(path || "").trim();
         if (!folderPath) {
           hideCreateConfigToggle("");
+          setCreateWebsiteAuthorityState();
           refreshCreateStartButtonEnabled();
           return;
         }
@@ -50207,20 +50339,38 @@ Waiting for Claude login output…</pre
             )}${providerQuery}`
           );
           const resolvedFolderPath = data.agent_folder || folderPath;
+          const currentFolderPath = String(
+            $("create-agent-folder").value || ""
+          ).trim();
+          if (
+            requestId !== latestCreateFolderConfigRequestId ||
+            currentFolderPath !== folderPath
+          ) {
+            return;
+          }
+          setCreateWebsiteAuthorityState({
+            folderPath: resolvedFolderPath,
+            projectAgentId: data.websiteAgentId || "",
+            eligible:
+              data.websiteEligible === true ||
+              data.website?.browser_root_authorized === true,
+            reason:
+              data.website?.reason_message ||
+              "Website is available only for agents in the Browser Root.",
+          });
+          if (opts.applyFormValues === false && isCreateWebsiteEligible()) {
+            setCreateWebsiteEnabledValue(
+              HOST_DEFAULT_SESSION_DEFAULTS.web.enabled
+            );
+            setCreateWebsiteAccessValue(
+              HOST_DEFAULT_SESSION_DEFAULTS.web.access
+            );
+          }
           applyCreateConfigToggleMode(
             resolvedFolderPath,
             data.hasConfig === true
           );
           if (opts.applyFormValues !== false) {
-            const currentFolderPath = String(
-              $("create-agent-folder").value || ""
-            ).trim();
-            if (
-              requestId !== latestCreateFolderConfigRequestId ||
-              currentFolderPath !== folderPath
-            ) {
-              return;
-            }
             const preferencesUntouched =
               createFormPreferenceVersion === requestPreferenceVersion;
             $("create-agent-folder").value = resolvedFolderPath;
@@ -50307,6 +50457,10 @@ Waiting for Claude login output…</pre
           refreshCreateStartButtonEnabled();
         } catch (err) {
           hideCreateConfigToggle(folderPath);
+          setCreateWebsiteAuthorityState({
+            folderPath,
+            eligible: false,
+          });
           setCreateProviderSkillStatus(null);
           setCreateProviderTrustStatus(null);
           refreshCreateStartButtonEnabled();
@@ -50827,6 +50981,10 @@ Waiting for Claude login output…</pre
         markCreatePreferencesEdited();
         syncCreateAllowedPathsShortcutState();
         hideCreateConfigToggle($("create-agent-folder").value);
+        setCreateWebsiteAuthorityState({
+          folderPath: $("create-agent-folder").value,
+          eligible: false,
+        });
         refreshUpdateSessionNameButton();
         void refreshCreateProviderTrustStatus();
         refreshCreateStartButtonEnabled();
@@ -50834,6 +50992,7 @@ Waiting for Claude login output…</pre
       $("create-agent-id").addEventListener("input", () => {
         markCreatePreferencesEdited();
         syncCreateSessionNameDefault();
+        syncCreateWebsiteAuthorityState();
         void refreshCreateProviderSkillStatus();
         void refreshCreateProviderTrustStatus();
         refreshCreateStartButtonEnabled();

package/dev/client/web-chat/dist/assets/{ReactPrism-9mfIwAdN.js → ReactPrism-isi6q-rt.js}

@@ -1,4 +1,4 @@
-import{g as ee,c as Y,r as K,j as Z}from"./index-CpnKlml1.js";var X={exports:{}};(function(e){var t=typeof window<"u"?window:typeof WorkerGlobalScope<"u"&&self instanceof WorkerGlobalScope?self:{};/**
+import{g as ee,c as Y,r as K,j as Z}from"./index-CS0AuJg_.js";var X={exports:{}};(function(e){var t=typeof window<"u"?window:typeof WorkerGlobalScope<"u"&&self instanceof WorkerGlobalScope?self:{};/**
 * Prism: Lightweight, robust, elegant syntax highlighting
 *
 * @license MIT <https://opensource.org/licenses/MIT>