stagent 0.1.0 → 0.1.2

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "stagent",
-  "version": "0.1.0",
-  "description": "Governed AI agent workspace for supervised local execution, workflows, documents, and provider runtimes.",
+  "version": "0.1.2",
+  "description": "Governed desktop AI agent workspace for supervised local execution, workflows, documents, and provider runtimes.",
   "keywords": [
     "ai",
     "agents",
@@ -15,54 +15,54 @@
   ],
   "license": "Apache-2.0",
   "type": "module",
-  "repository": {
-    "type": "git",
-    "url": "https://github.com/navam-io/stagent.git"
-  },
-  "bugs": {
-    "url": "https://github.com/navam-io/stagent/issues"
-  },
-  "homepage": "https://github.com/navam-io/stagent#readme",
   "bin": {
     "stagent": "./dist/cli.js"
   },
   "files": [
     "dist/",
     "src/",
-    "!src/**/__tests__/",
-    "!src/**/*.test.ts",
-    "!src/**/*.test.tsx",
-    "!src/**/*.spec.ts",
-    "!src/**/*.spec.tsx",
-    "!src/test/",
     "public/",
     "next.config.mjs",
     "tsconfig.json",
-    "drizzle.config.ts",
     "postcss.config.mjs",
     "components.json",
-    "package.json"
+    "drizzle.config.ts"
   ],
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/navam-io/stagent.git"
+  },
+  "bugs": {
+    "url": "https://github.com/navam-io/stagent/issues"
+  },
+  "homepage": "https://github.com/navam-io/stagent#readme",
   "scripts": {
     "dev": "next dev --turbopack",
     "build": "next build",
     "build:cli": "tsup",
-    "prepublishOnly": "npm run build:cli",
-    "smoke:npm": "node scripts/smoke-npm-package.mjs",
+    "desktop:dev": "node scripts/tauri.mjs dev",
+    "desktop:build": "node scripts/tauri.mjs build",
+    "desktop:smoke": "node scripts/desktop-sidecar-smoke.mjs",
+    "desktop:smoke:dmg": "node scripts/desktop-mounted-dmg-smoke.mjs",
+    "desktop:icon": "node scripts/tauri.mjs icon",
+    "desktop:release": "node scripts/release-desktop.mjs",
     "test": "vitest run",
     "test:watch": "vitest",
     "test:coverage": "vitest run --coverage",
-    "test:ui": "vitest --ui"
+    "test:ui": "vitest --ui",
+    "prepublishOnly": "npm run build:cli"
   },
   "engines": {
     "node": ">=20.0.0"
   },
   "dependencies": {
     "@anthropic-ai/claude-agent-sdk": "^0.2.71",
+    "@anthropic-ai/sdk": "^0.78.0",
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
     "@hookform/resolvers": "^5.2.2",
+    "@tailwindcss/postcss": "^4",
     "@tailwindcss/typography": "^0.5",
     "better-sqlite3": "^12",
     "class-variance-authority": "^0.7.1",
@@ -90,10 +90,11 @@
     "tailwind-merge": "^3",
     "tw-animate-css": "^1",
     "xlsx": "^0.18.5",
+    "tailwindcss": "^4",
+    "typescript": "^5",
     "zod": "^4.3.6"
   },
   "devDependencies": {
-    "@tailwindcss/postcss": "^4",
     "@testing-library/dom": "^10.4.1",
     "@testing-library/jest-dom": "^6.9.1",
     "@testing-library/react": "^16.3.2",
@@ -106,9 +107,7 @@
     "@vitest/coverage-v8": "^4.0.18",
     "drizzle-kit": "^0.30",
     "jsdom": "^28.1.0",
-    "tailwindcss": "^4",
     "tsup": "^8.5",
-    "typescript": "^5",
     "vitest": "^4.0.18"
   }
 }

package/src/app/api/data/clear/route.ts

@@ -2,13 +2,6 @@ import { NextResponse } from "next/server";
 import { clearAllData } from "@/lib/data/clear";
 
 export async function POST() {
-  if (process.env.NODE_ENV === "production") {
-    return NextResponse.json(
-      { error: "This endpoint is disabled in production" },
-      { status: 403 }
-    );
-  }
-
   try {
     const deleted = clearAllData();
     return NextResponse.json({ success: true, deleted });

package/src/app/api/data/seed/route.ts

@@ -2,13 +2,6 @@ import { NextResponse } from "next/server";
 import { seedSampleData } from "@/lib/data/seed";
 
 export async function POST() {
-  if (process.env.NODE_ENV === "production") {
-    return NextResponse.json(
-      { error: "This endpoint is disabled in production" },
-      { status: 403 }
-    );
-  }
-
   try {
     const seeded = await seedSampleData();
     return NextResponse.json({ success: true, seeded });

package/src/app/api/profiles/[id]/context/route.ts

@@ -0,0 +1,109 @@
+import { NextResponse } from "next/server";
+import {
+  getContextHistory,
+  approveProposal,
+  rejectProposal,
+  rollbackToVersion,
+  addDirectContext,
+  checkContextSize,
+} from "@/lib/agents/learned-context";
+
+interface RouteParams {
+  params: Promise<{ id: string }>;
+}
+
+/** GET /api/profiles/[id]/context — version history + size info */
+export async function GET(_request: Request, { params }: RouteParams) {
+  const { id: profileId } = await params;
+
+  const history = await getContextHistory(profileId);
+  const sizeInfo = checkContextSize(profileId);
+
+  return NextResponse.json({ history, ...sizeInfo });
+}
+
+/** POST /api/profiles/[id]/context — manual direct addition */
+export async function POST(request: Request, { params }: RouteParams) {
+  const { id: profileId } = await params;
+
+  const body = await request.json();
+  const { additions } = body as { additions?: string };
+
+  if (!additions || typeof additions !== "string" || !additions.trim()) {
+    return NextResponse.json(
+      { error: "additions is required" },
+      { status: 400 }
+    );
+  }
+
+  await addDirectContext(profileId, additions.trim());
+
+  return NextResponse.json({ ok: true });
+}
+
+/** PATCH /api/profiles/[id]/context — approve / reject / rollback */
+export async function PATCH(request: Request, { params }: RouteParams) {
+  const { id: profileId } = await params;
+
+  const body = await request.json();
+  const { action, notificationId, targetVersion, editedContent } = body as {
+    action?: string;
+    notificationId?: string;
+    targetVersion?: number;
+    editedContent?: string;
+  };
+
+  if (!action) {
+    return NextResponse.json(
+      { error: "action is required (approve | reject | rollback)" },
+      { status: 400 }
+    );
+  }
+
+  try {
+    switch (action) {
+      case "approve":
+        if (!notificationId) {
+          return NextResponse.json(
+            { error: "notificationId is required for approve" },
+            { status: 400 }
+          );
+        }
+        await approveProposal(notificationId, editedContent ?? undefined);
+        break;
+
+      case "reject":
+        if (!notificationId) {
+          return NextResponse.json(
+            { error: "notificationId is required for reject" },
+            { status: 400 }
+          );
+        }
+        await rejectProposal(notificationId);
+        break;
+
+      case "rollback":
+        if (targetVersion === undefined) {
+          return NextResponse.json(
+            { error: "targetVersion is required for rollback" },
+            { status: 400 }
+          );
+        }
+        await rollbackToVersion(profileId, targetVersion);
+        break;
+
+      default:
+        return NextResponse.json(
+          { error: `Unknown action: ${action}` },
+          { status: 400 }
+        );
+    }
+  } catch (error) {
+    return NextResponse.json(
+      { error: error instanceof Error ? error.message : String(error) },
+      { status: 400 }
+    );
+  }
+
+  return NextResponse.json({ ok: true });
+}

package/src/components/dashboard/__tests__/accessibility.test.tsx

@@ -0,0 +1,42 @@
+import { render } from "@testing-library/react";
+
+import { ActivityFeed } from "@/components/dashboard/activity-feed";
+import { PriorityQueue } from "@/components/dashboard/priority-queue";
+
+describe("dashboard accessibility surfaces", () => {
+  it("marks the priority queue updates as a polite live region", () => {
+    const { container } = render(
+      <PriorityQueue
+        tasks={[
+          {
+            id: "task-1",
+            title: "Fix runtime mismatch",
+            status: "failed",
+            priority: 0,
+            projectName: "Stagent",
+          },
+        ]}
+      />
+    );
+
+    expect(container.querySelector('.space-y-1[aria-live="polite"]')).not.toBeNull();
+  });
+
+  it("marks the activity feed updates as a polite live region", () => {
+    const { container } = render(
+      <ActivityFeed
+        entries={[
+          {
+            id: "entry-1",
+            event: "completed",
+            payload: "Wrote a summary",
+            timestamp: new Date("2026-03-12T09:00:00.000Z").toISOString(),
+            taskTitle: "Summarize roadmap",
+          },
+        ]}
+      />
+    );
+
+    expect(container.querySelector('.space-y-1[aria-live="polite"]')).not.toBeNull();
+  });
+});

package/src/components/documents/__tests__/document-upload-dialog.test.tsx

@@ -0,0 +1,46 @@
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+import { useRef, useState } from "react";
+
+import { DocumentUploadDialog } from "@/components/documents/document-upload-dialog";
+
+vi.mock("sonner", () => ({
+  toast: {
+    success: vi.fn(),
+    error: vi.fn(),
+  },
+}));
+
+function DocumentUploadHarness() {
+  const [open, setOpen] = useState(false);
+  const triggerRef = useRef<HTMLButtonElement>(null);
+
+  return (
+    <>
+      <button ref={triggerRef} type="button" onClick={() => setOpen(true)}>
+        Upload documents
+      </button>
+      <DocumentUploadDialog
+        open={open}
+        onClose={() => setOpen(false)}
+        onUploaded={() => {}}
+        restoreFocusElement={triggerRef.current}
+      />
+    </>
+  );
+}
+
+describe("document upload dialog accessibility", () => {
+  it("returns focus to the opener when the dialog closes", async () => {
+    render(<DocumentUploadHarness />);
+
+    const trigger = screen.getByRole("button", { name: "Upload documents" });
+    fireEvent.click(trigger);
+
+    const doneButton = await screen.findByRole("button", { name: "Done" });
+    fireEvent.click(doneButton);
+
+    await waitFor(() => {
+      expect(trigger).toHaveFocus();
+    });
+  });
+});

package/src/components/notifications/__tests__/pending-approval-host.test.tsx

@@ -0,0 +1,122 @@
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+
+import { PendingApprovalHost } from "@/components/notifications/pending-approval-host";
+
+const { push } = vi.hoisted(() => ({
+  push: vi.fn(),
+}));
+
+vi.mock("next/navigation", () => ({
+  useRouter: () => ({
+    push,
+  }),
+  usePathname: () => "/dashboard",
+}));
+
+class EventSourceMock {
+  onerror: ((event: Event) => void) | null = null;
+  onmessage: ((event: MessageEvent) => void) | null = null;
+
+  close() {}
+}
+
+const approvals = [
+  {
+    channel: "in_app" as const,
+    notificationId: "notif-1",
+    taskId: "task-1",
+    workflowId: "workflow-1",
+    toolName: "Bash",
+    permissionLabel: "Bash",
+    compactSummary: "npm run build",
+    deepLink: "/tasks/task-1",
+    supportedActionIds: ["allow_once", "always_allow", "deny", "open_inbox"],
+    title: "Permission required",
+    body: "The agent wants to run the build before publishing.",
+    taskTitle: "Review workspace",
+    workflowName: "Workspace sync",
+    toolInput: { command: "npm run build" },
+    createdAt: "2026-03-12T15:00:00.000Z",
+    read: false,
+  },
+  {
+    channel: "in_app" as const,
+    notificationId: "notif-2",
+    taskId: "task-2",
+    workflowId: null,
+    toolName: "Write",
+    permissionLabel: "Write",
+    compactSummary: "/tmp/report.md",
+    deepLink: "/tasks/task-2",
+    supportedActionIds: ["allow_once", "always_allow", "deny", "open_inbox"],
+    title: "Permission required",
+    body: null,
+    taskTitle: "Write release brief",
+    workflowName: null,
+    toolInput: { path: "/tmp/report.md" },
+    createdAt: "2026-03-12T14:59:00.000Z",
+    read: false,
+  },
+];
+
+describe("pending approval host", () => {
+  beforeEach(() => {
+    Object.defineProperty(window, "innerWidth", {
+      configurable: true,
+      value: 1280,
+    });
+
+    vi.stubGlobal(
+      "matchMedia",
+      vi.fn().mockImplementation(() => ({
+        matches: false,
+        addEventListener: vi.fn(),
+        removeEventListener: vi.fn(),
+      }))
+    );
+
+    vi.stubGlobal("EventSource", EventSourceMock);
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockResolvedValue({
+        ok: true,
+        json: vi.fn().mockResolvedValue(approvals),
+      })
+    );
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+    vi.clearAllMocks();
+  });
+
+  it("shows the primary approval toast and exposes overflow requests in the detail dialog", async () => {
+    render(<PendingApprovalHost />);
+
+    await screen.findByText("Workspace sync · Review workspace");
+    expect(screen.getByText("+1 more")).toBeInTheDocument();
+    expect(screen.getByText("npm run build")).toBeInTheDocument();
+
+    const trigger = screen.getByRole("button", {
+      name: /Workspace sync · Review workspace/i,
+    });
+    fireEvent.click(trigger);
+
+    const dialog = await screen.findByRole("dialog");
+    expect(dialog).toHaveTextContent("Permission required");
+    expect(dialog).toHaveTextContent("Also pending");
+    expect(dialog).toHaveTextContent("Write release brief");
+
+    fireEvent.click(screen.getByRole("button", { name: /Write release brief/i }));
+
+    await waitFor(() => {
+      expect(dialog).toHaveTextContent("/tmp/report.md");
+    });
+
+    fireEvent.click(screen.getByRole("button", { name: "Close" }));
+
+    await waitFor(() => {
+      expect(trigger).toHaveFocus();
+    });
+  });
+});

package/src/components/notifications/__tests__/permission-response-actions.test.tsx

@@ -0,0 +1,79 @@
+import { fireEvent, render, screen, waitFor } from "@testing-library/react";
+
+import { PermissionResponseActions } from "@/components/notifications/permission-response-actions";
+
+const { toastError } = vi.hoisted(() => ({
+  toastError: vi.fn(),
+}));
+
+vi.mock("sonner", () => ({
+  toast: {
+    error: toastError,
+  },
+}));
+
+describe("permission response actions", () => {
+  beforeEach(() => {
+    vi.stubGlobal(
+      "fetch",
+      vi.fn().mockResolvedValue({
+        ok: true,
+        json: vi.fn().mockResolvedValue({ success: true }),
+      })
+    );
+  });
+
+  afterEach(() => {
+    vi.unstubAllGlobals();
+    vi.clearAllMocks();
+  });
+
+  it("sends the persisted permission pattern for always-allow approvals", async () => {
+    const onResponded = vi.fn();
+
+    render(
+      <PermissionResponseActions
+        taskId="task-1"
+        notificationId="notif-1"
+        toolName="Bash"
+        toolInput={{ command: "npm run build" }}
+        responded={false}
+        response={null}
+        onResponded={onResponded}
+      />
+    );
+
+    fireEvent.click(screen.getByRole("button", { name: "Always Allow" }));
+
+    await waitFor(() => {
+      expect(fetch).toHaveBeenCalledWith("/api/tasks/task-1/respond", {
+        method: "POST",
+        headers: { "Content-Type": "application/json" },
+        body: JSON.stringify({
+          notificationId: "notif-1",
+          behavior: "allow",
+          updatedInput: { command: "npm run build" },
+          message: undefined,
+          alwaysAllow: true,
+          permissionPattern: "Bash(command:npm *)",
+        }),
+      });
+      expect(onResponded).toHaveBeenCalled();
+    });
+  });
+
+  it("renders the resolved state label when a response already exists", () => {
+    render(
+      <PermissionResponseActions
+        taskId="task-1"
+        notificationId="notif-1"
+        toolName="Bash"
+        toolInput={{ command: "npm run build" }}
+        responded
+        response={JSON.stringify({ behavior: "allow", alwaysAllow: true })}
+      />
+    );
+
+    expect(screen.getByText("Always allowed")).toBeInTheDocument();
+  });
+});

package/src/components/notifications/pending-approval-host.tsx

@@ -12,6 +12,7 @@ import {
 } from "lucide-react";
 
 import { PermissionResponseActions } from "@/components/notifications/permission-response-actions";
+import { ContextProposalReview } from "@/components/profiles/context-proposal-review";
 import { Badge } from "@/components/ui/badge";
 import {
   Dialog,
@@ -136,23 +137,34 @@ function PendingApprovalDetail({
         </p>
       </div>
 
-      <PermissionDetailFields
-        toolName={selected.toolName}
-        toolInput={selected.toolInput}
-      />
-
-      {selected.taskId && selected.toolName && selected.toolInput && (
-        <PermissionResponseActions
-          taskId={selected.taskId}
+      {selected.notificationType === "context_proposal" ? (
+        <ContextProposalReview
           notificationId={selected.notificationId}
-          toolName={selected.toolName}
-          toolInput={selected.toolInput}
-          responded={false}
-          response={null}
+          profileId={selected.toolName ?? ""}
+          proposedAdditions={selected.body ?? ""}
           onResponded={onResponded}
-          buttonSize="default"
-          layout="stacked"
         />
+      ) : (
+        <>
+          <PermissionDetailFields
+            toolName={selected.toolName}
+            toolInput={selected.toolInput}
+          />
+
+          {selected.taskId && selected.toolName && selected.toolInput && (
+            <PermissionResponseActions
+              taskId={selected.taskId}
+              notificationId={selected.notificationId}
+              toolName={selected.toolName}
+              toolInput={selected.toolInput}
+              responded={false}
+              response={null}
+              onResponded={onResponded}
+              buttonSize="default"
+              layout="stacked"
+            />
+          )}
+        </>
       )}
 
       <div className="flex flex-wrap items-center gap-2">
@@ -393,17 +405,29 @@ export function PendingApprovalHost() {
             </div>
           </button>
 
-          {primary.taskId && primary.toolName && primary.toolInput && (
-            <PermissionResponseActions
-              taskId={primary.taskId}
-              notificationId={primary.notificationId}
-              toolName={primary.toolName}
-              toolInput={primary.toolInput}
-              responded={false}
-              response={null}
-              onResponded={() => removeNotification(primary.notificationId)}
-              className="mt-3"
-            />
+          {primary.notificationType === "context_proposal" ? (
+            <div className="mt-3">
+              <ContextProposalReview
+                notificationId={primary.notificationId}
+                profileId={primary.toolName ?? ""}
+                proposedAdditions={primary.body ?? ""}
+                onResponded={() => removeNotification(primary.notificationId)}
+                compact
+              />
+            </div>
+          ) : (
+            primary.taskId && primary.toolName && primary.toolInput && (
+              <PermissionResponseActions
+                taskId={primary.taskId}
+                notificationId={primary.notificationId}
+                toolName={primary.toolName}
+                toolInput={primary.toolInput}
+                responded={false}
+                response={null}
+                onResponded={() => removeNotification(primary.notificationId)}
+                className="mt-3"
+              />
+            )
           )}
 
           <div className="mt-3 flex items-center justify-between gap-3">