shadok-ai 0.2.13 → 0.2.14

package/context/scheduler-skill/SKILL.md

@@ -33,6 +33,24 @@ Result: quiet days cost nothing; the LLM is spent only to word a real alert.
 For pure reporting where you WANT output every run (e.g. a daily figures digest),
 omit the check — the prompt runs every time.
 
+### What a check can see — secrets and cwd
+
+A check does **not** run inside this agent's process. The server runs it with
+`sh -c`, in the CHANNEL's directory, with the secrets of the channel's
+**profile** injected as environment variables.
+
+So reference a secret by name (`$MY_API_KEY`) and trust it: never hardcode a
+value into a check script, and never try to source a shell profile to get one.
+
+The sharp edge is the other direction. A channel with **no profile**, or a
+profile that doesn't list that name, gets **nothing** — the variable is simply
+absent, and you find out at 6am rather than now. A name that isn't in the vault
+is skipped just as silently. Your own shell having the key proves nothing about
+the guard's.
+
+`schedule.py env` prints exactly what a guard gets here. Run it before writing a
+check that needs a secret.
+
 ## Commands
 
 ```
@@ -40,6 +58,7 @@ python3 scripts/schedule.py add --schedule <spec> --prompt "<text>" [--check "<s
 python3 scripts/schedule.py list
 python3 scripts/schedule.py del <id>
 python3 scripts/schedule.py tz [<zone>|-]
+python3 scripts/schedule.py env
 ```
 
 `<spec>`: `every:30m` · `every:2h` · `daily:09:00`.

package/context/scheduler-skill/scripts/schedule.py

@@ -59,6 +59,7 @@ def main():
     a.add_argument("--tz", default=None, help="IANA timezone for a daily schedule (e.g. Europe/Paris); default = server setting")
     t = sub.add_parser("tz", help="show or set the default timezone of daily schedules")
     t.add_argument("zone", nargs="?", help="IANA name (e.g. Europe/Paris); omit to show, '-' to clear")
+    sub.add_parser("env", help="show the cwd and the secret names a --check guard will get")
     sub.add_parser("list")
     d = sub.add_parser("del")
     d.add_argument("id")
@@ -89,6 +90,41 @@ def main():
             r = api("GET", "/timezone")
         cur = r.get("timezone")
         print(f"daily schedules run in: {cur or r.get('system')}" + ("" if cur else " (machine default — set one to pin it)"))
+    elif args.cmd == "env":
+        # A guard runs server-side, not in this agent's process: it gets the
+        # secrets of the CHANNEL's profile, never whatever happens to sit in
+        # this shell. Agents that can't see that list assume the worst and
+        # hardcode the value into the check script — printing it is the fix.
+        ch = next((c for c in api("GET", "/channels") if c.get("sessionId") == SID), None)
+        if not ch:
+            print("this channel is not registered server-side: a guard would run from the")
+            print("server's own directory, with no profile secrets at all.")
+            return
+        print(f"guard cwd: {ch.get('cwd') or '(server default)'}")
+        pname = ch.get("profile")
+        if not pname:
+            print("guard secrets: NONE — this channel has no profile.")
+            print("  Secrets reach a guard only through the channel's profile; attach one")
+            print("  (web UI, the agent's profile picker) that lists the names you need.")
+            return
+        prof = next((p for p in api("GET", "/profiles") if p.get("name") == pname), None)
+        if prof is None:
+            # Same end result as "no secrets", but a very different cause: say
+            # which one, or the report reads as a working setup.
+            print(f"guard secrets: NONE — the channel points at profile '{pname}', which no longer exists.")
+            return
+        wanted = prof.get("secrets") or []
+        if not wanted:
+            print(f"guard secrets: NONE — profile '{pname}' lists no secret.")
+            return
+        vault = set(api("GET", "/secrets").get("names") or [])
+        present = [n for n in wanted if n in vault]
+        missing = [n for n in wanted if n not in vault]
+        print(f"guard secrets (profile '{pname}'): {', '.join(present) if present else 'NONE'}")
+        if missing:
+            # `secretsFor` skips an unknown name without a word, so a typo here
+            # looks exactly like a working guard until the day it runs.
+            print(f"  referenced but NOT in the vault, so absent at run time: {', '.join(missing)}")
     elif args.cmd == "del":
         # `list` n'affiche que 8 caractères de l'id : le serveur accepte ce
         # préfixe. On imprime CE QU'IL a supprimé — l'ancienne version

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shadok-ai",
-  "version": "0.2.13",
+  "version": "0.2.14",
   "main": "dist/session.js",
   "scripts": {
     "test": "node --import tsx --test test/*.ts .claude/skills/shadok-ai-agents/test/*.test.mjs",

package/public/index.html

@@ -1227,6 +1227,10 @@
           <div id="profileGrid" role="radiogroup" aria-label="Agent profile"></div>
           <span class="check-hint" id="profileNaNote" hidden>Applies to new sessions only.</span>
         </div>
+        <div class="field">
+          <span class="label">Name</span>
+          <input type="text" id="nameInput" placeholder="agent" autocomplete="off" spellcheck="false">
+        </div>
         <div class="field">
           <span class="label">Working directory</span>
           <input type="text" id="cwdInput" placeholder="/path/to/project">
@@ -1463,12 +1467,13 @@
      qui rend inoffensif le HTML qu'un agent pourrait écrire dans le transcript. -->
 <script type="module" nonce="__CSP_NONCE__">
   import { extractLiveText } from "/live-text.js";
-  import { profileBlurb, profileBadges } from "/profile-card.js";
+  import { profileBlurb, profileBadges, defaultAgentName } from "/profile-card.js";
   import { notifyState, BLINK_MS } from "/notify.js";
   import { dialPos, dialColor, arcSegments, dialTitle, SWEEP_DEG } from "/gauge-dial.js";
   window.extractLiveText = extractLiveText;
   window.profileBlurb = profileBlurb;
   window.profileBadges = profileBadges;
+  window.defaultAgentName = defaultAgentName;
   window.notifyState = notifyState;
   window.BLINK_MS = BLINK_MS;
   window.dialPos = dialPos;
@@ -3228,6 +3233,10 @@
     // écraserait le choix en cours de saisie.
     profileTouched = false;
     applyRememberedProfile();
+    // Même règle que le profil : on ne repropose le défaut qu'à l'OUVERTURE,
+    // pour ne pas écraser un nom en cours de frappe.
+    nameTouched = false;
+    refreshDefaultName();
     refreshRecoverList();
     refreshLiveList();
     $("setupOverlay").hidden = false;
@@ -3256,7 +3265,13 @@
     $("startBtn").disabled = true;
     closeSetup();
     // createTab active l'onglet créé ; launchTab ouvre le lien.
-    launchTab(createTab(), msg);
+    const t = createTab();
+    // Le nom est posé AVANT launchTab, qui sinon écrase avec basename(cwd).
+    // customName le protège aussi du `ready` et de la restauration des canaux.
+    const wanted = $("nameInput").value.trim() || defaultAgentNameNow();
+    t.customName = true;
+    t.nameEl.textContent = wanted;
+    launchTab(t, msg);
   }
 
   // ── Version display + auto-reload ─────────────────────────────────────────
@@ -3685,11 +3700,16 @@
       if (mode === "resume") refreshSessionList();
     })
   );
+  $("nameInput").addEventListener("input", () => {
+    nameTouched = $("nameInput").value.trim() !== "";
+  });
   $("cwdInput").addEventListener("change", () => {
     if (!$("resumeField").hidden) refreshSessionList();
     refreshRecoverList();
     // Un autre dossier a peut-être son propre habitué — sauf si on a déjà choisi.
     if (!profileTouched) applyRememberedProfile();
+    // Sans profil, le défaut EST le dossier : il doit suivre la saisie.
+    refreshDefaultName();
   });
   // Agents can appear while the setup screen sits open (pilotctl spawns one,
   // another tab starts one) — keep the list current without a reload.
@@ -4247,6 +4267,9 @@
     selectedProfile = name || "";
     if (byUser) profileTouched = true;
     syncProfileSelection();
+    // Le nom par défaut DÉRIVE du profil : changer de carte doit le reproposer,
+    // sinon on lance un « Shadok-dev » qui tourne en fait sur Shadok-Support.
+    refreshDefaultName();
   }
 
   function syncProfileSelection() {
@@ -4284,6 +4307,23 @@
     selectProfile(remembered);   // syncProfileSelection retombe sur "" s'il n'existe plus
   }
 
+  // ── Nom par défaut d'un nouvel agent ─────────────────────────────────────
+  let nameTouched = false;   // l'utilisateur a tapé le sien → on n'écrase plus
+
+  /** Le défaut courant, d'après le profil sélectionné et le dossier saisi. */
+  function defaultAgentNameNow() {
+    // Garde alignée sur les autres usages du pont ESM (cf. invariant 10) : si le
+    // module n'est pas encore là, un nom vide vaut mieux qu'une exception.
+    return window.defaultAgentName ? window.defaultAgentName(selectedProfile, $("cwdInput").value) : "";
+  }
+
+  /** Repose le défaut dans le champ, sauf si l'utilisateur l'a déjà écrit. */
+  function refreshDefaultName() {
+    if (nameTouched) return;
+    const el = $("nameInput");
+    if (el) el.value = defaultAgentNameNow();
+  }
+
   /** Flèches = déplacer la sélection (convention radiogroup). Espace/Entrée
    *  sont déjà le clic natif du <button>. */
   function onProfileKey(e, onPick) {

package/public/profile-card.js

@@ -63,3 +63,18 @@ export function profileBadges(profile) {
     });
   return out;
 }
+
+/**
+ * Le nom proposé pour un nouvel agent : celui de son PROFIL, parce que c'est ce
+ * qui distingue deux agents lancés sur le même dépôt — le dossier, lui, est le
+ * même pour tous et donnait des colonnes entières d'onglets homonymes.
+ * Sans profil, on retombe sur le nom du dossier ; en dernier recours "agent",
+ * jamais une chaîne vide (un onglet sans nom est illisible).
+ */
+export function defaultAgentName(profileName, cwd) {
+  const p = String(profileName ?? "").trim();
+  if (p) return p;
+  const dir = String(cwd ?? "").trim().replace(/[/\\]+$/, "");
+  const base = dir.split(/[/\\]/).pop() || "";
+  return base || "agent";
+}