devops-bot-sdk 1.4.116__tar.gz → 1.4.117__tar.gz

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-bot-sdk
-Version: 1.4.116
+Version: 1.4.117
 Summary: DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app
 Author: noumanaziz2128
 License-Expression: LicenseRef-Proprietary

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/devops_bot_sdk.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: devops-bot-sdk
-Version: 1.4.116
+Version: 1.4.117
 Summary: DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app
 Author: noumanaziz2128
 License-Expression: LicenseRef-Proprietary

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/devops_bot_sdk.egg-info/SOURCES.txt

@@ -16,6 +16,7 @@ sdk/exceptions.py
 sdk/git_ops.py
 sdk/graphify.py
 sdk/local_exec.py
+sdk/platform_compat.py
 sdk/py.typed
 sdk/run_auto.py
 sdk/sse.py

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "devops-bot-sdk"
-version = "1.4.116"
+version = "1.4.117"
 description = "DevOps Bot Desktop SDK — thin client for the AgentOS Electron desktop app"
 readme = "README.md"
 license = "LicenseRef-Proprietary"

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/sdk/__init__.py

@@ -1,6 +1,6 @@
 """AgentOS Desktop SDK — thin HTTPS/SSE client for the Electron app.
 
-Version: 1.4.116
+Version: 1.4.117
 
 Public surface:
   BackendClient.from_config()        — create client from ~/.agentos/config.toml
@@ -30,7 +30,7 @@ Rules:
   - All data egress through submit_webhook only
 """
 
-__version__ = "1.4.116"
+__version__ = "1.4.117"
 __author__  = "AgentOS"
 
 from sdk.client import BackendClient

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/sdk/agentd.py

@@ -618,6 +618,12 @@ def status() -> None:
 
 
 def main() -> None:
+    # macOS: keep the background daemon from aborting ("Python quit unexpectedly")
+    # when it does networking after the double-fork. May re-exec once; must run
+    # before any fork or objc-linked import.
+    from sdk.platform_compat import ensure_macos_fork_safety
+    ensure_macos_fork_safety()
+
     argv = sys.argv[1:]
     if argv and argv[0] == "start":
         foreground = "--foreground" in argv[1:] or "-f" in argv[1:]

devops_bot_sdk-1.4.117/sdk/platform_compat.py

@@ -0,0 +1,48 @@
+"""Cross-platform runtime shims used by the CLI entry points.
+
+Kept dependency-free and import-cheap: these run at the very top of ``main()``
+BEFORE any networking/objc-linked module is imported, and one of them re-execs
+the interpreter — so it must not drag in heavy imports of its own.
+"""
+from __future__ import annotations
+
+import os
+import sys
+
+
+def ensure_macos_fork_safety() -> None:
+    """Stop macOS from killing our background daemons with a native abort.
+
+    ``agentos-auto`` / ``agentos-agentd`` double-fork (fork + setsid, no exec)
+    into a background daemon that then does networking (httpx → CFNetwork /
+    SystemConfiguration) and TLS. When the Objective-C runtime detects objc use
+    after a bare ``fork()`` with no ``exec()`` it calls ``abort()`` — which macOS
+    surfaces as the "Python quit unexpectedly" crash dialog. Exporting
+    ``OBJC_DISABLE_INITIALIZE_FORK_SAFETY=YES`` disables that guard.
+
+    The objc runtime reads that variable when its dylib is first mapped (that is
+    interpreter startup on framework Python builds), so setting it via
+    ``os.environ`` mid-run is too late to help the CURRENT process. We set it and
+    re-exec a FRESH interpreter ONCE, so the replacement process — and every
+    daemon it later forks — starts with the variable already in place. We also
+    short-circuit the system-proxy (``_scproxy``) lookup that most often triggers
+    the objc path on the first outbound request.
+
+    No-op off macOS, and idempotent: the "already YES" check is the re-exec guard
+    that prevents an exec loop.
+    """
+    if sys.platform != "darwin":
+        return
+    if os.environ.get("OBJC_DISABLE_INITIALIZE_FORK_SAFETY") == "YES":
+        return  # already applied on this process → don't re-exec again
+    os.environ["OBJC_DISABLE_INITIALIZE_FORK_SAFETY"] = "YES"
+    os.environ.setdefault("no_proxy", "*")
+    try:
+        # os.execv inherits the just-modified os.environ, so the fresh process
+        # sees the variable from its first instruction. argv[0] is a runnable
+        # Python file for both a console-script launch and `python -m ...`.
+        os.execv(sys.executable, [sys.executable, sys.argv[0], *sys.argv[1:]])
+    except Exception:  # noqa: BLE001
+        # Re-exec failed (unusual argv[0], permissions). The env var is at least
+        # set for child processes we spawn — carry on rather than refuse to start.
+        pass

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/sdk/run_auto.py

@@ -544,6 +544,12 @@ def _run_loop(workspace_root: str | None, only_keys: list[str] | None = None,
 
 
 def main() -> None:
+    # macOS: keep the background daemon from aborting ("Python quit unexpectedly")
+    # when it does networking after the double-fork. May re-exec once; must run
+    # before any fork or objc-linked import.
+    from sdk.platform_compat import ensure_macos_fork_safety
+    ensure_macos_fork_safety()
+
     argv = sys.argv[1:]
     cmd = argv[0] if argv and not argv[0].startswith("-") else "run"
 

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/sdk/ui/static/app.js

@@ -225,7 +225,7 @@
     let toolsNeeded = [];   // AI-assessed; the user never sees or sets these
     let lastInputs = [];    // input DEFINITIONS from analyze/manual-add (for saving)
     let lastOutputs = [];
-    let lastSecrets = [];   // API-key names detected by analyze (values collected at save)
+    let lastSecrets = [];   // API-key names (analyze-detected or hand-added; values collected at save)
     let studioJob = null;   // id of the in-flight analyze/review/run job
 
     function showStop(on) {
@@ -276,17 +276,30 @@
       $("save-panel").style.display = "";
     }
 
-    // Required API keys detected by analyze — collected here, stored (encrypted)
-    // when the agent is saved. Values are password inputs; names are fixed.
+    // Department defaults resolve their keys from the backend/host env, not a local
+    // store — so the value inputs are irrelevant (and hidden) in that scope.
+    function secretsHidden() {
+      return $("sa-scope") && $("sa-scope-field").style.display !== "none"
+        && $("sa-scope").value === "department";
+    }
+    // One secret row: env-var name (+ optional description) + masked value + remove.
+    function secretRowHTML(s, value) {
+      const desc = s.description ? ` <span class="muted" style="font-weight:400">— ${esc(s.description)}</span>` : "";
+      return `<div class="field" data-secret-row="${esc(s.name)}"><label>${esc(s.name)}${desc}` +
+        ` <a href="#" class="secret-rm" data-rmsecret="${esc(s.name)}" style="margin-left:6px;font-weight:400;font-size:12px">remove</a></label>` +
+        `<input class="secret-in" type="password" data-secret="${esc(s.name)}" placeholder="paste value (optional — hidden)" autocomplete="off" value="${esc(value || "")}" /></div>`;
+    }
+    // API keys detected by analyze OR added by hand — collected here, stored
+    // (encrypted) when the agent is saved. Shown once analysis has run so the user
+    // can add a key even when the AI detected none.
     function renderSecrets() {
       const panel = $("studio-secrets-panel"), box = $("studio-secrets");
       if (!panel || !box) return;
-      if (!lastSecrets.length) { panel.style.display = "none"; box.innerHTML = ""; return; }
+      if (secretsHidden()) { panel.style.display = "none"; return; }
       panel.style.display = "";
-      box.innerHTML = lastSecrets.map(s =>
-        `<div class="field"><label>${esc(s.name)}${s.description ? ` <span class="muted" style="font-weight:400">— ${esc(s.description)}</span>` : ""}</label>
-           <input class="secret-in" type="password" data-secret="${esc(s.name)}" placeholder="paste value (optional — hidden)" autocomplete="off" /></div>`
-      ).join("");
+      box.innerHTML = lastSecrets.length
+        ? lastSecrets.map(s => secretRowHTML(s, "")).join("")
+        : "<div class='muted' data-empty>No API keys detected — add one below if this task calls an external service.</div>";
     }
 
     function collectSecrets() {
@@ -391,6 +404,35 @@
       $("studio-inputs").appendChild(wrap.firstChild);
     });
 
+    // Let the user add an API key the AI missed. Names are env-var style
+    // (UPPER_SNAKE); the value is optional here and can be filled in later.
+    $("sp-add-secret").addEventListener("click", () => {
+      const raw = (window.prompt("Environment-variable NAME for this key (e.g. OPENAI_API_KEY):") || "").trim();
+      if (!raw) return;
+      const name = raw.toUpperCase().replace(/[^A-Z0-9_]+/g, "_").replace(/^_+|_+$/g, "");
+      if (!name) { toast("Use an env-var name like OPENAI_API_KEY", "err"); return; }
+      if (lastSecrets.some(s => s.name === name)) { toast("That secret already exists", "err"); return; }
+      const desc = (window.prompt("What is it for? (optional)") || "").trim();
+      lastSecrets.push({ name, description: desc });
+      const empty = $("studio-secrets").querySelector("[data-empty]");
+      if (empty) empty.remove();
+      const wrap = document.createElement("div");
+      wrap.innerHTML = secretRowHTML({ name, description: desc }, "");
+      $("studio-secrets").appendChild(wrap.firstChild);
+    });
+
+    // Drop a secret (AI-detected over-reach or one added by mistake).
+    $("studio-secrets").addEventListener("click", (e) => {
+      const a = e.target.closest(".secret-rm");
+      if (!a) return;
+      e.preventDefault();
+      const nm = a.dataset.rmsecret;
+      lastSecrets = lastSecrets.filter(s => s.name !== nm);
+      const row = $("studio-secrets").querySelector(`[data-secret-row="${nm}"]`);
+      if (row) row.remove();
+      if (!lastSecrets.length) renderSecrets();   // restore the "add one below" hint
+    });
+
     async function pollRunInto(promise) {
       $("sp-run-status").textContent = "Running… (safe to switch pages — it keeps running)";
       $("resp-panel").style.display = "";
@@ -440,9 +482,8 @@
     // when that scope is picked (they resolve keys from the backend/host env).
     if ($("sa-scope")) $("sa-scope").addEventListener("change", () => {
       const panel = $("studio-secrets-panel");
-      if (panel && lastSecrets.length) {
-        panel.style.display = $("sa-scope").value === "department" ? "none" : "";
-      }
+      if (!panel || $("io-panel").style.display === "none") return;  // only after analysis
+      panel.style.display = secretsHidden() ? "none" : "";
     });
 
     // Turn this Studio session into a reusable agent (custom or department default).

{devops_bot_sdk-1.4.116 → devops_bot_sdk-1.4.117}/sdk/ui/static/prompt-studio.html

@@ -43,12 +43,13 @@
         <button class="btn" id="sp-add-input" type="button" style="margin-top:6px">+ Add input</button>
 
         <div id="studio-secrets-panel" style="display:none;margin-top:14px">
-          <div style="font-weight:600;margin-bottom:2px">API keys required <span class="muted" style="font-weight:400">(detected by AI)</span></div>
+          <div style="font-weight:600;margin-bottom:2px">API keys &amp; secrets <span class="muted" style="font-weight:400">(detected by AI — add any it missed)</span></div>
           <p class="muted" style="margin:0 0 .5em;font-size:12px">
             Stored <b>encrypted on this machine</b> when you save the agent, reused every run.
-            Leave blank to fill in later on the Custom Agents page.
+            Leave a value blank to fill in later on the Custom Agents page.
           </p>
           <div id="studio-secrets"></div>
+          <button class="btn" id="sp-add-secret" type="button" style="margin-top:6px">+ Add secret</button>
         </div>
         <div style="margin-top:10px">
           <button class="btn primary" id="sp-run">Run</button>