spi-agent-gui 0.1.0 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Changelog
 
+## Unreleased
+
+- macOS Apple Silicon/Intel candidates remain separate from public Linux releases. Developer ID signing and notarization are not configured.
+
+## 0.1.2
+
+- Linux x64/arm64 release containing the actual new editable buffer UI (not only Pi's native queue-count status).
+- User-resizable persisted sidebar split, active directory/recent session highlighting and display-only home-path abbreviation.
+- Main-process editable/cancellable outbox with fixed composer overlay, images, follow-up tail appends / newest-steer head insertion, Stop pause/resume and single-use submission/revision protection.
+- Replace sPi permission modes/rule editor with a session-local YOLO checkbox: on automatically replies Allow once to compatible Pi tool approvals; off delegates to Pi without another sPi prompt. Legacy sPi permission files are preserved but no longer applied. Generic dialogs/direct blocks and Stop/close guards remain effective.
+- Secondary processes exit before readiness; owning-window app quit uses the same confirmation/cleanup controller. Runtime sanitization preserves native helper modes and safe relative framework links.
+- Published 0.1.0/0.1.1 assets remain unchanged. This public release is Linux-only; macOS/Windows public distribution remains deferred.
+
+## 0.1.1
+
+- Original female-spy silhouette icon for the application window, favicon and platform packages.
+- Owned Linux desktop entry for default personal installs, with icon refresh on update/rollback and conservative uninstall.
+- Preserve unknown/modified desktop entries and refuse symlink directories; validate desktop Exec escaping.
+
 ## 0.1.0
 
 - Initial Pi launcher package and verified native desktop archive installer.

package/dist/spi.cjs

@@ -11,7 +11,7 @@ var __commonJS = (cb, mod) => function __require() {
 var define_SPI_RELEASE_default;
 var init_define_SPI_RELEASE = __esm({
   "<define:__SPI_RELEASE__>"() {
-    define_SPI_RELEASE_default = { version: "0.1.0", repository: "DiamondGo/spi", packageName: "spi-agent-gui" };
+    define_SPI_RELEASE_default = { version: "0.1.2", repository: "DiamondGo/spi", packageName: "spi-agent-gui" };
   }
 });
 
@@ -4608,12 +4608,81 @@ var require_yauzl = __commonJS({
   }
 });
 
+// packages/pi-spi/lib/desktop.cjs
+var require_desktop = __commonJS({
+  "packages/pi-spi/lib/desktop.cjs"(exports2, module2) {
+    init_define_SPI_RELEASE();
+    var fs2 = require("node:fs");
+    var path2 = require("node:path");
+    var crypto2 = require("node:crypto");
+    var digest = (file) => crypto2.createHash("sha256").update(fs2.readFileSync(file)).digest("hex");
+    function exists(file) {
+      try {
+        fs2.lstatSync(file);
+        return true;
+      } catch (error) {
+        if (error.code === "ENOENT") return false;
+        throw error;
+      }
+    }
+    function safeParents(directory) {
+      for (let dir = directory; ; dir = path2.dirname(dir)) {
+        if (exists(dir) && (!fs2.lstatSync(dir).isDirectory() || fs2.lstatSync(dir).isSymbolicLink())) throw Error("Refusing symlink desktop directory");
+        if (dir === path2.dirname(dir)) break;
+      }
+    }
+    function assertDesktopOwned2(record) {
+      if (!record) return;
+      if (!path2.isAbsolute(record.path) || path2.basename(record.path) !== "spi.desktop") throw Error("Invalid desktop entry record");
+      safeParents(path2.dirname(record.path));
+      if (exists(record.path) && (fs2.lstatSync(record.path).isSymbolicLink() || !fs2.lstatSync(record.path).isFile() || digest(record.path) !== record.sha256)) throw Error("Refusing modified desktop entry");
+    }
+    function removeDesktopEntry2(record) {
+      assertDesktopOwned2(record);
+      if (record) fs2.rmSync(record.path, { force: true });
+    }
+    var value = (s) => s.replaceAll("\\", "\\\\").replaceAll("\n", "\\n").replaceAll("\r", "\\r").replaceAll("	", "\\t");
+    function desktopText(command, icon) {
+      if (/[\x00-\x1f\x7f]/.test(command + icon)) throw Error("Unsupported control character in desktop path");
+      const argument = '"' + command.replace(/[\\"`$]/g, "\\$&").replaceAll("%", "%%") + '"';
+      return "[Desktop Entry]\nType=Application\nName=sPi\nComment=Pi Coding Agent GUI\nExec=" + value(argument) + "\nIcon=" + value(icon) + "\nTerminal=false\nCategories=Development;\nStartupWMClass=spi\nStartupNotify=true\n";
+    }
+    function syncDesktopEntry2({ enabled, dataHome, root, command, entryPath, previous }) {
+      if (!enabled) return previous;
+      const icon = path2.join(path2.dirname(entryPath), "resources", "icon.png");
+      if (!exists(icon)) {
+        if (previous) removeDesktopEntry2(previous);
+        return void 0;
+      }
+      if (!path2.isAbsolute(dataHome)) throw Error("XDG data home must be absolute");
+      const directory = path2.join(dataHome, "applications"), file = path2.join(directory, "spi.desktop");
+      safeParents(directory);
+      if (exists(file)) {
+        if (!previous || previous.path !== file) throw Error("Refusing unowned desktop entry");
+        assertDesktopOwned2(previous);
+      }
+      if (previous && previous.path !== file) throw Error("Desktop location changed; existing entry was preserved");
+      if (fs2.lstatSync(icon).isSymbolicLink() || !fs2.lstatSync(icon).isFile() || !fs2.realpathSync(icon).startsWith(fs2.realpathSync(root) + path2.sep)) throw Error("Invalid application icon");
+      const text = desktopText(command, icon), temp = file + "." + crypto2.randomUUID() + ".tmp";
+      fs2.mkdirSync(directory, { recursive: true });
+      try {
+        fs2.writeFileSync(temp, text, { mode: 420, flag: "wx" });
+        fs2.renameSync(temp, file);
+      } finally {
+        fs2.rmSync(temp, { force: true });
+      }
+      return { path: file, sha256: digest(file) };
+    }
+    module2.exports = { syncDesktopEntry: syncDesktopEntry2, assertDesktopOwned: assertDesktopOwned2, removeDesktopEntry: removeDesktopEntry2, desktopText };
+  }
+});
+
 // package.json
 var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "spi",
-      version: "0.1.0",
+      version: "0.1.2",
       description: "sPi - Simple Pi Agent GUI",
       private: true,
       license: "UNLICENSED",
@@ -4626,6 +4695,9 @@ var require_package = __commonJS({
         dev: "electron-vite dev",
         postinstall: "electron-builder install-app-deps",
         build: "electron-vite build",
+        "build:icons": "node scripts/icons.cjs",
+        "test:icons": "node scripts/icons.test.cjs",
+        "test:native-build": "node scripts/native-build.test.cjs && node scripts/macos-integrity.test.cjs",
         start: "electron-vite preview",
         dist: "node scripts/build-portable.cjs",
         "dist:linux": "node scripts/build-portable.cjs",
@@ -4643,8 +4715,12 @@ var require_package = __commonJS({
         "test:terminal-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --terminal",
         "test:settings": "node scripts/settings.test.cjs",
         "test:settings-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --settings",
-        "test:permissions": "node scripts/permissions.test.cjs",
-        "test:permission-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --permissions",
+        "test:yolo": "node scripts/yolo.test.cjs && node scripts/session-bridge.test.cjs",
+        "test:extension-ui": "node scripts/extension-ui.test.cjs",
+        "test:workspace-ui": "node scripts/workspace-ui.test.cjs",
+        "test:workspace-ui-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --workspace-ui",
+        "test:extension-ui-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --extension-ui",
+        "test:yolo-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --yolo",
         "test:smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs",
         "test:advanced": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --advanced"
       },
@@ -4657,6 +4733,7 @@ var require_package = __commonJS({
       },
       devDependencies: {
         "@electron/asar": "^3.4.1",
+        "@resvg/resvg-js": "2.6.2",
         "@types/react": "^18.3.12",
         "@types/react-dom": "^18.3.1",
         "@vitejs/plugin-react": "^4.3.4",
@@ -4695,6 +4772,7 @@ var { spawn } = require("node:child_process");
 var { pipeline } = require("node:stream/promises");
 var tar = require_index_min();
 var yauzl = require_yauzl();
+var { syncDesktopEntry, assertDesktopOwned, removeDesktopEntry } = require_desktop();
 var BUILD = typeof define_SPI_RELEASE_default === "undefined" ? { version: require_package().version, repository: require_release_config().repository, packageName: require_release_config().npmPackage } : define_SPI_RELEASE_default;
 var OWNER = "sPi-installer-v1";
 var MAX_ARCHIVE = 700 * 1024 * 1024;
@@ -4709,7 +4787,7 @@ function version(v) {
 }
 function target() {
   const t = process.platform + "-" + process.arch;
-  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64"].includes(t)) fail("Unsupported platform: " + t);
+  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64", "darwin-x64"].includes(t)) fail("Unsupported platform: " + t);
   if (process.platform === "linux" && !process.report.getReport().header.glibcVersionRuntime) fail("Linux requires glibc; musl is not supported");
   return t;
 }
@@ -4774,6 +4852,10 @@ function validateEntries(entries) {
     }
   }
 }
+function checkExtractedLinks(entries, dest) {
+  const base = fs.realpathSync(dest) + path.sep;
+  for (const e of entries) if (e.link && !fs.realpathSync(path.join(dest, e.name)).startsWith(base)) fail("Extracted link escapes destination");
+}
 async function extractTar(file, dest) {
   const entries = [];
   await tar.t({ file, onReadEntry: (e) => entries.push({ name: e.path, size: e.size, type: { File: "file", Directory: "directory", SymbolicLink: "symlink", Link: "hardlink" }[e.type] || "unsupported", link: e.linkpath }) });
@@ -4783,10 +4865,7 @@ async function extractTar(file, dest) {
     const f = path.join(dest, e.name);
     fs.chmodSync(f, fs.statSync(f).mode & 511);
   }
-  for (const e of entries) if (e.link) {
-    const resolved = fs.realpathSync(path.join(dest, e.name));
-    if (!resolved.startsWith(path.resolve(dest) + path.sep)) fail("Extracted link escapes destination");
-  }
+  checkExtractedLinks(entries, dest);
 }
 async function zipEntries(file) {
   return new Promise((resolve, reject) => yauzl.open(file, { lazyEntries: true, strictFileNames: true, validateEntrySizes: true }, (error, zip) => {
@@ -4858,7 +4937,7 @@ async function extractZip(file, dest) {
     fs.mkdirSync(path.dirname(out), { recursive: true });
     fs.symlinkSync(e.link, out);
   }
-  for (const e of entries) if (e.type === "symlink" && !fs.realpathSync(path.join(dest, e.name)).startsWith(path.resolve(dest) + path.sep)) fail("Extracted link escapes destination");
+  checkExtractedLinks(entries, dest);
 }
 function trustedURL(value) {
   const u = new URL(value);
@@ -4956,7 +5035,7 @@ function readCurrent(root) {
   if (readJSON(path.join(root, ".spi-owned.json")).owner !== OWNER) fail("Not an sPi install");
   const current = readJSON(path.join(root, "current.json"));
   version(current.version);
-  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64"].includes(current.target)) fail("Invalid install target");
+  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64", "darwin-x64"].includes(current.target)) fail("Invalid install target");
   if (current.directory !== "releases/" + current.version + "/" + current.target) fail("Invalid install record");
   safeName(current.entry);
   safeName(current.permissionExtension);
@@ -5009,7 +5088,13 @@ function register(root, options2 = {}) {
   fs.renameSync(temp, dest);
   const shims = (oldState.shims || []).filter((s) => s.path !== dest);
   shims.push({ path: dest, sha256: hash(dest) });
-  atomicJSON(path.join(root, "install-state.json"), { owner: OWNER, shims, launcher: { sha256: hash(cli) } });
+  let desktop = oldState.desktop;
+  if (process.platform === "linux" && root === path.resolve(defaultRoot())) try {
+    desktop = syncDesktopEntry({ enabled: true, dataHome: process.env.XDG_DATA_HOME || path.join(os.homedir(), ".local/share"), root, command: dest, entryPath: cur.entryPath, previous: desktop });
+  } catch (error) {
+    console.warn("[sPi] Desktop entry unchanged: " + error.message);
+  }
+  atomicJSON(path.join(root, "install-state.json"), { owner: OWNER, shims, desktop, launcher: { sha256: hash(cli) } });
   console.log("sPi command: " + dest);
   if (!(process.env.PATH || "").split(path.delimiter).some((d) => path.resolve(d) === dir)) console.log("Add this directory to your PATH: " + dir + " (shell configuration was not changed)");
 }
@@ -5157,9 +5242,11 @@ async function uninstall(options2) {
     if (fs.existsSync(launcher) && fs.lstatSync(launcher).isSymbolicLink()) fail("Refusing symlink launcher");
     const cli = path.join(launcher, "spi.cjs");
     if (fs.existsSync(cli) && (!state.launcher || hash(cli) !== state.launcher.sha256 || fs.lstatSync(cli).isSymbolicLink())) fail("Refusing modified launcher");
+    assertDesktopOwned(state.desktop);
     for (const s of state.shims || []) if (fs.existsSync(s.path)) {
       if (fs.lstatSync(s.path).isSymbolicLink() || hash(s.path) !== s.sha256) fail("Refusing to remove a modified command");
     }
+    removeDesktopEntry(state.desktop);
     for (const s of state.shims || []) fs.rmSync(s.path, { force: true });
     for (const dir of owned) fs.rmSync(dir, { recursive: true, force: true });
     fs.rmSync(path.join(launcher, "spi.cjs"), { force: true });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spi-agent-gui",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "sPi - Simple Pi Agent GUI installer and Pi launcher",
   "type": "module",
   "license": "UNLICENSED",