meshcode 2.8.4__tar.gz → 2.8.6__tar.gz

{meshcode-2.8.4 → meshcode-2.8.6}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.8.4
+Version: 2.8.6
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.8.4 → meshcode-2.8.6}/meshcode/__init__.py

@@ -1,2 +1,2 @@
 """MeshCode — Real-time communication between AI agents."""
-__version__ = "2.8.4"
+__version__ = "2.8.6"

{meshcode-2.8.4 → meshcode-2.8.6}/meshcode/comms_v4.py

@@ -1392,9 +1392,20 @@ def _start_heartbeat_daemon(project, name):
         "        d=json.loads(urllib.request.urlopen(req,timeout=10).read())\n"
         "        return d[0]['id'] if d else None\n"
         "    except Exception: return None\n"
+        "def check_still_leased(pid):\n"
+        "    \"\"\"Return False if force-disconnected (instance_id cleared).\"\"\"\n"
+        "    try:\n"
+        "        req=urllib.request.Request(url+'/rest/v1/mc_agents?select=instance_id&project_id=eq.'+pid+'&name=eq.'+urllib.parse.quote(name),\n"
+        "            headers={'apikey':key,'Authorization':'Bearer '+key,'Accept-Profile':'meshcode'})\n"
+        "        d=json.loads(urllib.request.urlopen(req,timeout=10).read())\n"
+        "        return bool(d and d[0].get('instance_id'))\n"
+        "    except Exception: return True\n"
         "pid=get_pid_for_project()\n"
         "while True:\n"
-        "    if pid: post('/rest/v1/rpc/mc_heartbeat', {'p_project_id':pid,'p_agent_name':name})\n"
+        "    if pid:\n"
+        "        if not check_still_leased(pid):\n"
+        "            sys.exit(0)\n"
+        "        post('/rest/v1/rpc/mc_heartbeat', {'p_project_id':pid,'p_agent_name':name})\n"
         "    time.sleep(30)\n"
     )
     # Windows: start_new_session kwarg doesn't exist. Use creationflags.

{meshcode-2.8.4 → meshcode-2.8.6}/meshcode/run_agent.py

@@ -32,6 +32,51 @@ WORKSPACES_ROOT = Path.home() / "meshcode"
 REGISTRY_PATH = WORKSPACES_ROOT / ".registry.json"
 
 
+def _check_agent_ownership(agent: str, project: str) -> Optional[str]:
+    """Pre-flight check: verify caller owns this agent before launching editor.
+
+    Returns an error message string if blocked, None if OK.
+    """
+    try:
+        from .setup_clients import _load_supabase_env
+        import importlib
+        secrets_mod = importlib.import_module("meshcode.secrets")
+    except Exception:
+        return None  # Can't check — let the RPC catch it later
+
+    profile = os.environ.get("MESHCODE_KEYCHAIN_PROFILE") or "default"
+    api_key = secrets_mod.get_api_key(profile=profile)
+    if not api_key:
+        return None  # No key — RPC will reject later
+
+    sb = _load_supabase_env()
+    try:
+        from urllib.request import Request, urlopen
+        body = json.dumps({
+            "p_api_key": api_key,
+            "p_project_name": project,
+            "p_agent_name": agent,
+        }).encode()
+        req = Request(
+            f"{sb['SUPABASE_URL']}/rest/v1/rpc/mc_check_agent_ownership",
+            data=body,
+            method="POST",
+            headers={
+                "apikey": sb["SUPABASE_KEY"],
+                "Authorization": f"Bearer {sb['SUPABASE_KEY']}",
+                "Content-Type": "application/json",
+            },
+        )
+        with urlopen(req, timeout=10) as resp:
+            data = json.loads(resp.read().decode())
+    except Exception:
+        return None  # Network error — let the RPC catch it later
+
+    if isinstance(data, dict) and data.get("error"):
+        return data["error"]
+    return None
+
+
 def _try_auto_setup(agent: str, project: Optional[str] = None) -> Optional[Tuple[Path, str]]:
     """If agent exists on the server but has no local workspace, auto-create it.
 
@@ -203,6 +248,14 @@ def run(agent: str, project: Optional[str] = None, editor_override: Optional[str
             print(f"[meshcode]        Run `meshcode setup <project> {agent}` first.", file=sys.stderr)
             return 2
     ws, resolved_project = found
+
+    # ── Ownership pre-check ──────────────────────────────────────────
+    # Before launching the editor, verify the caller owns this agent.
+    # This prevents hijacking another user's agent in shared meshworks.
+    ownership_err = _check_agent_ownership(agent, resolved_project)
+    if ownership_err:
+        print(f"[meshcode] ERROR: {ownership_err}", file=sys.stderr)
+        return 2
     server_id = f"meshcode-{resolved_project}-{agent}"
 
     editor = editor_override or _detect_editor()

{meshcode-2.8.4 → meshcode-2.8.6}/meshcode.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: meshcode
-Version: 2.8.4
+Version: 2.8.6
 Summary: Real-time communication between AI agents — Supabase-backed CLI
 Author-email: MeshCode <hello@meshcode.io>
 License: MIT

{meshcode-2.8.4 → meshcode-2.8.6}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "meshcode"
-version = "2.8.4"
+version = "2.8.6"
 description = "Real-time communication between AI agents — Supabase-backed CLI"
 readme = "README.md"
 license = {text = "MIT"}