spi-agent-gui 0.1.1 → 0.1.2

package/CHANGELOG.md

@@ -1,5 +1,18 @@
 # Changelog
 
+## Unreleased
+
+- macOS Apple Silicon/Intel candidates remain separate from public Linux releases. Developer ID signing and notarization are not configured.
+
+## 0.1.2
+
+- Linux x64/arm64 release containing the actual new editable buffer UI (not only Pi's native queue-count status).
+- User-resizable persisted sidebar split, active directory/recent session highlighting and display-only home-path abbreviation.
+- Main-process editable/cancellable outbox with fixed composer overlay, images, follow-up tail appends / newest-steer head insertion, Stop pause/resume and single-use submission/revision protection.
+- Replace sPi permission modes/rule editor with a session-local YOLO checkbox: on automatically replies Allow once to compatible Pi tool approvals; off delegates to Pi without another sPi prompt. Legacy sPi permission files are preserved but no longer applied. Generic dialogs/direct blocks and Stop/close guards remain effective.
+- Secondary processes exit before readiness; owning-window app quit uses the same confirmation/cleanup controller. Runtime sanitization preserves native helper modes and safe relative framework links.
+- Published 0.1.0/0.1.1 assets remain unchanged. This public release is Linux-only; macOS/Windows public distribution remains deferred.
+
 ## 0.1.1
 
 - Original female-spy silhouette icon for the application window, favicon and platform packages.

package/dist/spi.cjs

@@ -11,7 +11,7 @@ var __commonJS = (cb, mod) => function __require() {
 var define_SPI_RELEASE_default;
 var init_define_SPI_RELEASE = __esm({
   "<define:__SPI_RELEASE__>"() {
-    define_SPI_RELEASE_default = { version: "0.1.1", repository: "DiamondGo/spi", packageName: "spi-agent-gui" };
+    define_SPI_RELEASE_default = { version: "0.1.2", repository: "DiamondGo/spi", packageName: "spi-agent-gui" };
   }
 });
 
@@ -4682,7 +4682,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "spi",
-      version: "0.1.1",
+      version: "0.1.2",
       description: "sPi - Simple Pi Agent GUI",
       private: true,
       license: "UNLICENSED",
@@ -4697,6 +4697,7 @@ var require_package = __commonJS({
         build: "electron-vite build",
         "build:icons": "node scripts/icons.cjs",
         "test:icons": "node scripts/icons.test.cjs",
+        "test:native-build": "node scripts/native-build.test.cjs && node scripts/macos-integrity.test.cjs",
         start: "electron-vite preview",
         dist: "node scripts/build-portable.cjs",
         "dist:linux": "node scripts/build-portable.cjs",
@@ -4714,8 +4715,12 @@ var require_package = __commonJS({
         "test:terminal-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --terminal",
         "test:settings": "node scripts/settings.test.cjs",
         "test:settings-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --settings",
-        "test:permissions": "node scripts/permissions.test.cjs",
-        "test:permission-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --permissions",
+        "test:yolo": "node scripts/yolo.test.cjs && node scripts/session-bridge.test.cjs",
+        "test:extension-ui": "node scripts/extension-ui.test.cjs",
+        "test:workspace-ui": "node scripts/workspace-ui.test.cjs",
+        "test:workspace-ui-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --workspace-ui",
+        "test:extension-ui-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --extension-ui",
+        "test:yolo-smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --yolo",
         "test:smoke": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs",
         "test:advanced": "electron-vite build && node scripts/with-display.cjs scripts/smoke.cjs --advanced"
       },
@@ -4782,7 +4787,7 @@ function version(v) {
 }
 function target() {
   const t = process.platform + "-" + process.arch;
-  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64"].includes(t)) fail("Unsupported platform: " + t);
+  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64", "darwin-x64"].includes(t)) fail("Unsupported platform: " + t);
   if (process.platform === "linux" && !process.report.getReport().header.glibcVersionRuntime) fail("Linux requires glibc; musl is not supported");
   return t;
 }
@@ -4847,6 +4852,10 @@ function validateEntries(entries) {
     }
   }
 }
+function checkExtractedLinks(entries, dest) {
+  const base = fs.realpathSync(dest) + path.sep;
+  for (const e of entries) if (e.link && !fs.realpathSync(path.join(dest, e.name)).startsWith(base)) fail("Extracted link escapes destination");
+}
 async function extractTar(file, dest) {
   const entries = [];
   await tar.t({ file, onReadEntry: (e) => entries.push({ name: e.path, size: e.size, type: { File: "file", Directory: "directory", SymbolicLink: "symlink", Link: "hardlink" }[e.type] || "unsupported", link: e.linkpath }) });
@@ -4856,10 +4865,7 @@ async function extractTar(file, dest) {
     const f = path.join(dest, e.name);
     fs.chmodSync(f, fs.statSync(f).mode & 511);
   }
-  for (const e of entries) if (e.link) {
-    const resolved = fs.realpathSync(path.join(dest, e.name));
-    if (!resolved.startsWith(path.resolve(dest) + path.sep)) fail("Extracted link escapes destination");
-  }
+  checkExtractedLinks(entries, dest);
 }
 async function zipEntries(file) {
   return new Promise((resolve, reject) => yauzl.open(file, { lazyEntries: true, strictFileNames: true, validateEntrySizes: true }, (error, zip) => {
@@ -4931,7 +4937,7 @@ async function extractZip(file, dest) {
     fs.mkdirSync(path.dirname(out), { recursive: true });
     fs.symlinkSync(e.link, out);
   }
-  for (const e of entries) if (e.type === "symlink" && !fs.realpathSync(path.join(dest, e.name)).startsWith(path.resolve(dest) + path.sep)) fail("Extracted link escapes destination");
+  checkExtractedLinks(entries, dest);
 }
 function trustedURL(value) {
   const u = new URL(value);
@@ -5029,7 +5035,7 @@ function readCurrent(root) {
   if (readJSON(path.join(root, ".spi-owned.json")).owner !== OWNER) fail("Not an sPi install");
   const current = readJSON(path.join(root, "current.json"));
   version(current.version);
-  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64"].includes(current.target)) fail("Invalid install target");
+  if (!["linux-x64", "linux-arm64", "win32-x64", "darwin-arm64", "darwin-x64"].includes(current.target)) fail("Invalid install target");
   if (current.directory !== "releases/" + current.version + "/" + current.target) fail("Invalid install record");
   safeName(current.entry);
   safeName(current.permissionExtension);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "spi-agent-gui",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "sPi - Simple Pi Agent GUI installer and Pi launcher",
   "type": "module",
   "license": "UNLICENSED",