secure-agents 0.7.0 → 0.7.2

package/dist/config.js

@@ -18,7 +18,15 @@ export async function moveOldHome() {
     const running = await fetch(`http://127.0.0.1:${port}/ui`, { signal: AbortSignal.timeout(1500) }).then(() => true, () => false);
     if (running)
         throw new Error('The old Securee is still running. Close its window (or stop it), then run this again: your data moves to ~/.secure.');
-    fs.renameSync(old, HOME);
+    try {
+        fs.renameSync(old, HOME);
+    }
+    catch (e) {
+        const code = e.code;
+        if (code !== 'EPERM' && code !== 'EBUSY' && code !== 'EACCES')
+            throw e;
+        throw new Error(`Could not move ${old}: something still uses it, usually Claude Code or Codex running the old Securee tools. Close Claude Code and Codex completely (or restart the computer), then run this again.`);
+    }
     return `Moved your data from ${old} to ${HOME}: same keys, pairings and passphrase.`;
 }
 export const DEFAULT_LIMITS = { messagesPerMinute: 60, maxPendingPerPeer: 20, maxItems: 2000, maxLoginFailures: 5, lockoutSeconds: 60, sessionHours: 12, pendingHours: 24, updateCheckHours: 6, updateCheckOnOpenMinutes: 60, minFreeDiskMB: 1024, precheckSeconds: 120, historyLogBytes: 16384, notifyGroupSeconds: 3, fileLimitMaxMB: 51200, wakeMinutes: 240 };

package/dist/ui.js

@@ -69,9 +69,12 @@ button:focus-visible,input:focus-visible,select:focus-visible,summary:focus-visi
 .toasts{position:fixed;right:20px;bottom:20px;z-index:20;display:grid;gap:8px;max-width:min(420px,calc(100vw - 40px))}
 .toast{background:var(--inv);color:var(--inv-ink);border-radius:12px;padding:12px 16px;font-size:13.5px;box-shadow:0 12px 32px -8px rgba(0,0,0,.35);animation:rise .2s ease-out} .toast.err{background:var(--bad);color:#fff}
 @keyframes rise{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:none}}
-dialog{border:1px solid var(--line);border-radius:16px;padding:0;background:var(--surface);color:var(--ink);width:min(520px,calc(100vw - 32px));box-shadow:0 30px 80px -20px rgba(0,0,0,.45)}
+dialog{border:1px solid var(--line);border-radius:16px;padding:0;max-height:calc(100dvh - 32px);overflow:auto;background:var(--surface);color:var(--ink);width:min(520px,calc(100vw - 32px));box-shadow:0 30px 80px -20px rgba(0,0,0,.45)}
 dialog::backdrop{background:rgba(0,0,0,.45);backdrop-filter:blur(3px)}
 .dlg{padding:24px;display:grid;gap:16px}
+.flow{display:grid;grid-template-columns:repeat(5,1fr);gap:8px;counter-reset:step} .flow>div{border:1px solid var(--line);border-radius:10px;padding:10px;display:grid;gap:4px;align-content:start;position:relative} .flow>div::before{counter-increment:step;content:counter(step);font-size:11px;color:var(--ink2)} .flow b{font-size:13px} .flow span{font-size:12px;color:var(--ink2)}
+.opts{display:grid;gap:8px;margin:0;padding:0;list-style:none} .opts li{display:grid;grid-template-columns:150px 1fr;gap:12px;font-size:13px} .opts li b{font-weight:600}
+@media (max-width:640px){.flow{grid-template-columns:1fr}.opts li{grid-template-columns:1fr;gap:2px}}
 .notes{margin:0;padding-left:18px;display:grid;gap:6px;color:var(--ink2)}
 .progress{height:4px;border-radius:4px;background:var(--sunk);overflow:hidden} .progress i{display:block;height:100%;width:35%;background:var(--ink);border-radius:4px;animation:slide 1.2s ease-in-out infinite}
 @keyframes slide{0%{transform:translateX(-100%)}100%{transform:translateX(300%)}}
@@ -99,7 +102,7 @@ dialog::backdrop{background:rgba(0,0,0,.45);backdrop-filter:blur(3px)}
 <section class="page" data-page="brain" hidden><div class="head"><h2>Brain</h2><p class="muted">Decisions your agent saved, with why and sources. Shared ones can be searched by paired computers, even while this one is off.</p></div><div id="brain" class="page" style="padding:0"></div></section>
 
 <section class="page" data-page="settings" hidden><div class="head"><h2>Settings</h2><p class="muted">How your agent is started, updates, and your passkeys.</p></div>
-<div class="card"><div><h3>Wake your agent</h3><p class="muted small">Starts your agent by itself for a question or task you approved, so it answers without you opening it. Questions never change files.</p></div>
+<div class="card"><div class="row"><div class="grow"><h3>Wake your agent</h3><p class="muted small">Starts your agent by itself for a question or task you approved, so it answers without you opening it. Questions never change files.</p></div><button class="ghost" id="wake-help">How this works</button></div>
 <p id="wake"></p>
 <div class="row"><select id="wake-preset" aria-label="Agent to wake"><option value="off">Off: I tell my agent myself</option><option value="claude">Claude Code</option><option value="codex">Codex</option><option value="custom">Other agent (type its command)</option></select>
 <input id="wake-cwd" class="field" placeholder="Folder where tasks may make changes, e.g. /Users/me/project" aria-label="Folder where tasks may make changes"></div>
@@ -116,6 +119,16 @@ dialog::backdrop{background:rgba(0,0,0,.45);backdrop-filter:blur(3px)}
 </div>
 </main>
 <div class="toasts" id="toasts" aria-live="polite"></div>
+<dialog id="wake-dlg" style="width:min(760px,calc(100vw - 32px))"><div class="dlg"><div class="row"><div class="mark">${lock()}</div><div class="grow"><h3>How waking your agent works</h3><p class="muted small">What happens when another computer asks your agent something.</p></div></div>
+<div class="flow"><div><b>Request arrives</b><span>A question or a task from a paired computer.</span></div><div><b>You approve</b><span>With your passkey. Automatic questions skip this unless Secure flags them.</span></div><div><b>Secure starts your agent</b><span>Claude Code or Codex, in the background, inside its sandbox.</span></div><div><b>It does the work</b><span>Questions only read. Tasks change files only inside your folder.</span></div><div><b>Result goes back</b><span>An answer with sources, or a signed task result.</span></div></div>
+<p class="sub" style="margin:0">The settings</p>
+<ul class="opts"><li><b>Off</b><span>Nothing starts by itself. Approved requests wait until you open your agent and say "check Secure".</span></li>
+<li><b>Claude Code / Codex</b><span>Secure starts that agent for you. What it may read is set per computer (Computers, then Reach).</span></li>
+<li><b>Folder</b><span>Where tasks may change files, including every folder inside it. Nothing outside it can be changed. Questions never change files.</span></li>
+<li><b>Tasks may run commands</b><span>Lets a task run tests, builds and scripts. Off: it can only read and edit files.</span></li>
+<li><b>Tasks may use the internet</b><span>Lets a task open web pages and call online services.</span></li>
+<li><b>Stop a run after</b><span>The longest one run may take before Secure stops it.</span></li></ul>
+<div class="row"><span class="grow"></span><button class="primary" id="wake-dlg-close">Got it</button></div></div></dialog>
 <dialog id="update-dlg"><div class="dlg"><div class="row"><div class="mark">${lock()}</div><div class="grow"><h3 id="dlg-title">Update</h3><p class="muted small" id="dlg-sub"></p></div></div>
 <div id="dlg-notes-wrap"><p class="sub" style="margin-bottom:8px">What's new</p><ul class="notes" id="dlg-notes"></ul></div>
 <p class="small"><a id="dlg-link" target="_blank" rel="noopener">See the exact code changes on npm</a></p>
@@ -136,8 +149,10 @@ $('out').onclick = () => api('/human/logout', {}).then(load);
 // Tabs
 let tab = 'inbox';
 try { tab = localStorage.getItem('secure-tab') || 'inbox'; } catch (e) {}
-function show(t) { tab = t; try { localStorage.setItem('secure-tab', t); } catch (e) {} for (const b of document.querySelectorAll('nav.tabs button')) b.setAttribute('aria-selected', String(b.dataset.tab === t)); for (const s of document.querySelectorAll('[data-page]')) s.hidden = s.dataset.page !== t; if (t === 'history') loadHistory(); }
+function show(t) { tab = t; try { localStorage.setItem('secure-tab', t); } catch (e) {}
+  if (t === 'settings' && !app.hidden) { let seen = true; try { seen = !!localStorage.getItem('secure-wake-explained'); localStorage.setItem('secure-wake-explained', '1'); } catch (e) {} if (!seen) $('wake-dlg').showModal(); } for (const b of document.querySelectorAll('nav.tabs button')) b.setAttribute('aria-selected', String(b.dataset.tab === t)); for (const s of document.querySelectorAll('[data-page]')) s.hidden = s.dataset.page !== t; if (t === 'history') loadHistory(); }
 for (const b of document.querySelectorAll('nav.tabs button')) b.onclick = () => show(b.dataset.tab);
+$('wake-help').onclick = () => $('wake-dlg').showModal(); $('wake-dlg-close').onclick = () => $('wake-dlg').close();
 
 // Passkeys: the server fixes exactly what will happen, then your touch confirms it.
 const b64 = (s) => Uint8Array.from(atob(s.replace(/-/g, '+').replace(/_/g, '/') + '==='.slice((s.length + 3) % 4)), c => c.charCodeAt(0));
@@ -303,7 +318,7 @@ function brainCards(list) {
     el('p', { textContent: d.decision }), d.why ? el('p', { className: 'muted small', textContent: 'Why: ' + d.why }) : null, (d.sources || []).length ? el('p', { className: 'mono muted', textContent: d.sources.join(' · ') }) : null));
 }
 
-let pendingSig = '', peersSig = '', brainSig = '', lastState = {}, announced = '';
+let pendingSig = '', peersSig = '', brainSig = '', wakeSig = '', lastState = {}, announced = '';
 async function load(force) {
   const s = await api('/human/state');
   signin.hidden = s.error !== 'signin';
@@ -323,7 +338,9 @@ async function load(force) {
   if (s.wakeLast) { wl.textContent = 'Last run ' + new Date(s.wakeLast.at).toLocaleTimeString() + ': ' + s.wakeLast.message; wl.style.color = s.wakeLast.ok ? '' : 'var(--bad)'; }
   $('wake').textContent = s.wake ? 'Wakes ' + s.wake + '.' : 'Off. Approved requests wait until you tell your agent "check Secure".';
   if (document.activeElement !== $('wake-preset') && document.activeElement !== $('wake-cwd') && !$('wake-cwd').value && s.wakePreset) $('wake-preset').value = s.wakePreset;
-  if (!lastState.formsFilled) { lastState.formsFilled = true; $('wake-min').value = s.wakeMinutes; $('wake-net').checked = s.wakeInternet; $('wake-cmds').checked = s.wakeCommands; }
+  // Refill only when the saved values change, so a box you just ticked isn't reset before you save.
+  const ws = JSON.stringify([s.wakeMinutes, s.wakeInternet, s.wakeCommands]);
+  if (ws !== wakeSig) { wakeSig = ws; $('wake-min').value = s.wakeMinutes; $('wake-net').checked = s.wakeInternet; $('wake-cmds').checked = s.wakeCommands; }
   $('fl-mb').max = s.fileLimitMaxMB; $('fl-now').textContent = 'Now ' + Math.round(s.maxFileBytes / 1048576) + ' MB';
   // Redraw only what changed, so a half-read card or a typed path isn't reset every refresh.
   // Questions your agent is still checking stay out of the Inbox; they show up only if they need you.

package/dist/waker.js

@@ -29,8 +29,9 @@ export function describeWake(w) {
     if (w.preset === 'custom')
         return `"${w.line}" (not sandboxed by Secure, so "Shared folders" can't be enforced); tasks change files in ${w.cwd}`;
     const old = w.preset === 'claude' && !claudeCanRestrict(w.question.command);
+    const cmds = commandsAllowed(w) ? '; tasks may run commands' : '; tasks may not run commands';
     const net = w.internet ? (w.preset === 'codex' ? '; tasks may use the internet when reach is the whole computer' : '; tasks may use the internet') : '';
-    return `${w.preset === 'codex' ? 'Codex' : 'Claude Code'}; tasks change files in ${w.cwd}${net}${old ? '. This Claude Code is too old to limit reading to shared folders: update it' : ''}`;
+    return `${w.preset === 'codex' ? 'Codex' : 'Claude Code'}; tasks change files in ${w.cwd}${cmds}${net}${old ? '. This Claude Code is too old to limit reading to shared folders: update it' : ''}`;
 }
 /** Older saved wakes kept the task flags in their arguments. */
 const commandsAllowed = (w) => w.allowCommands ?? w.task.args.some((a) => a === 'workspace-write' || a === 'Bash');

package/package.json

@@ -1,16 +1,11 @@
 {
   "name": "secure-agents",
-  "version": "0.7.0",
+  "version": "0.7.2",
   "description": "Let AI agents on different computers and platforms talk to each other over a direct encrypted link, with both people's consent.",
   "changes": [
-    "Renamed from Securee to Secure. The npm package is now secure-agents; your data moves from ~/.securee to ~/.secure on first start.",
-    "Desktop notification and a count in the tab title when something waits for your approval.",
-    "The asking agent is told when its request waits for the other person's approval, and when they approve it, so it can tell you in chat.",
-    "Questions your agent is still checking no longer flash up in the Inbox.",
-    "Clearer reasons when a file isn't found, and whoami now says its rules are what this computer allows others.",
-    "Settings: set the largest file this computer sends or accepts. Paired computers are told, and files move up to the smaller of the two limits.",
-    "Task conversations: the agent doing a task can ask the asker a question and carry on with the answer, and follow-up questions about a task resume the same agent session.",
-    "Settings: choose how long your agent may run (default now 4 hours, was 30 minutes), and whether tasks may use the internet."
+    "Fix: ticking \"Tasks may run commands\" or \"Tasks may use the internet\" in Settings no longer un-ticks itself before you save.",
+    "Settings shows whether tasks may run commands.",
+    "Settings: a \"How this works\" pop-up for Wake your agent, shown the first time you open Settings."
   ],
   "homepage": "https://www.npmjs.com/package/secure-agents",
   "type": "module",