cynarAI 3c3961f242
fix(api): keep host folders to the deployment owner (#112)
spaces.create linked any workspacePath to the new project, and
computer.files and computer.readFile then listed and read files under
that folder for anyone in the space. On a deployment with signups, any
member could link / or the API's own checkout and read whatever the API
process can read, such as its .env file. Linking also ran git in the
chosen folder and stored its remote URL.

A linked folder lives on the host, and the host is the deployment
owner's machine, the rule the onboarding scan already follows:

- spaces.create refuses a folder from anyone but the deployment owner,
  before the space is created or the folder is touched.
- Project files are listed and read only for the deployment owner, so a
  space a member linked before this change stays closed too. Space
  navigation no longer shows a linked folder's path and git remote to
  other members.
- A linked folder is stored as its real path, and listing and reading
  follow symlinks only while they stay inside it. Symlinks that leave
  the folder or lead nowhere are left out of a listing instead of
  failing it.
- The web New project dialog offers the folder field only to the
  deployment owner.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EyQw3AEaHYXegvgvTPAsi1
2026-10-03 18:32:48 +02:00
2026-09-20 17:15:16 +02:00
2026-09-20 17:15:16 +02:00

evOo

DE · Lokale Multi-Oo Programmier-Maschine — persistente KI-Teamkollegen mit Voice First, Projekt-Timeline und lokalen Tools.

EN · Local multi-Oo programming machine — persistent AI teammates with Voice First, project timeline, and local tooling.

Clean local checkout for Ingo Wagner. Brand: evOo only. Sourced from cynarAI/evoo @ f00577b (antigravity-handoff/project-timeline), with a fresh git history.

What this is / Was das ist

DE EN
Persönliche Multi-Agenten-App auf dem eigenen Rechner Personal multi-agent app on your own machine
Oos (Agents) mit Memory, Tools, Voice und Computer Oos (agents) with memory, tools, voice, and computer
Antigravity-Zukunftswerkzeuge: self_improve, autonomous-sentinel, self-update, orchestrator, local-stack, pi-local-provider, seed-ollama, Voice First / Oo-Stage Same Antigravity future tools kept on this branch

Quick start

# clone (Mac recommended path)
git clone git@github.com:cynarAI/evOo-local.git ~/Projects/evOo-local
cd ~/Projects/evOo-local

cp .env.example .env
# set POSTGRES_PASSWORD, DATABASE_URL, BETTER_AUTH_SECRET, ENCRYPTION_KEY, SCREEN_PROXY_SECRET, SANDBOX_SUPERVISOR_TOKEN

# Postgres (Compose overlay publishes 127.0.0.1:5433)
docker compose --env-file .env \
  -f infra/compose/docker-compose.yml \
  -f infra/compose/docker-compose.postgres-host.yml \
  up postgres -d

pnpm install
pnpm db:generate
pnpm db:migrate
pnpm sandbox:build   # optional, for Docker computers
pnpm dev
Service URL
Web app http://127.0.0.1:5173
API http://127.0.0.1:3100

Full local notes: docs/LOCAL-SETUP.md

Stack

  • TypeScript monorepo (pnpm + Turborepo)
  • React 19 / Vite / Tailwind (web), Electron (desktop), Expo (mobile)
  • Hono + oRPC, PostgreSQL + Prisma, Better Auth, Graphile Worker
  • Pi model routing, Docker sandboxes, Voice (Kokoro local / BYO keys)

Antigravity tools kept on this branch

  • scripts/self_improve.py
  • scripts/autonomous-sentinel.ts
  • packages/core/src/self-update.ts
  • orchestrator/ (agent_runner + agents.json)
  • apps/desktop/src/local-stack.ts
  • packages/adapters/src/pi-local-provider.ts
  • scripts/seed-ollama.ts
  • Voice First / Oo stage (apps/web CallView + stage components)

Voice (Kokoro)

Large voice model blobs are not in this repo. Recreate Kokoro separately:

docker run -p 8880:8880 ghcr.io/remsky/kokoro-fastapi-cpu:latest
export KOKORO_BASE_URL=http://127.0.0.1:8880

Details: docs/kokoro-voice.md

Tech debt (brand / packages)

Internal workspace packages still use @rakazo/* names (and some RAKAZO_* env vars). Renaming them would break the build; treat as temporary tech debt. User-facing titles and docs say evOo.

License

Apache License 2.0 — see LICENSE.

Description
evOo - Multi-Agent Orchestration Platform
Readme 24 MiB
Languages
TypeScript 94.5%
CSS 1.2%
JavaScript 1.1%
Shell 0.9%
Python 0.8%
Other 1.4%