Per-visitor kill switch; live tray status and polling

ag.js

@@ -56,8 +56,8 @@ window.VK_AG = ({el, t, toast}) => ({
     const call = async (path, body, spark) => {
       const ctl = new AbortController(); const to = setTimeout(() => ctl.abort(), 320000);
       try {
-        const r = await fetch((GRAFT() && !spark ? 'api/agx/' : 'api/ag/') + path, body === undefined ? {cache:'no-store', signal:ctl.signal} :
-          {method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(body), signal:ctl.signal});
+        const r = await fetch((GRAFT() && !spark ? 'api/agx/' : 'api/ag/') + path, body === undefined ? {cache:'no-store', signal:ctl.signal, headers:{'X-VK-Session':SID}} :
+          {method:'POST', headers:{'Content-Type':'application/json', 'X-VK-Session':SID}, body:JSON.stringify(body), signal:ctl.signal});
         if (r.status === 429) { toast(t('agRate')); throw new Error('rate'); }
         if (!r.ok) throw new Error('http ' + r.status);
         return await r.json();
@@ -168,6 +168,7 @@ window.VK_AG = ({el, t, toast}) => ({
       const lt = document.querySelector('#models .mrow.live .mt.l'); if (lt && !LIVE) lt.textContent = 'REPLAY';
     })();
     const iv = setInterval(() => { if (!document.body.contains(b)) clearInterval(iv); else refresh(); }, 8000);
+    window.addEventListener('vk-kernel-state', () => refresh());
   },
 });
 

app.js

@@ -50,8 +50,14 @@ function api(path, body) {
 const recTag = () => el('span', {class:'tag rec', title:t('recTip')}, t('recTag'));
 
 function toast(s) { const n = $('#toast'); n.textContent = s; n.classList.add('show'); clearTimeout(toast.h); toast.h = setTimeout(() => n.classList.remove('show'), 2600); }
+let LIVE_S = null;
+async function pullLive() {
+  try { LIVE_S = await window.VK_API('status'); } catch (e) { LIVE_S = null; }
+  refreshTray(); window.dispatchEvent(new CustomEvent('vk-kernel-state', {detail: LIVE_S ? LIVE_S.kernel_state : null}));
+}
+setInterval(pullLive, 12000); setTimeout(pullLive, 500);
 function refreshTray() {
-  const s = api('/api/status'), st = s.kernel_state || '-';
+  const R = api('/api/status'); const s = LIVE_S ? {kernel_state: LIVE_S.kernel_state, boot: 'OK', head: LIVE_S.audit_head} : R, st = s.kernel_state || '-';
   const tS = $('#tState'); tS.className = 'pill ' + (st === 'RUN' ? 'ok' : 'bad');
   tS.querySelector('b').textContent = st; tS.querySelector('b').style.color = st === 'HALTED' ? 'var(--rose)' : '#065F46';
   $('#tBoot b').textContent = s.boot || '-'; $('#tMode b').textContent = 'B';
@@ -351,10 +357,10 @@ function panel() {
       onclick:() => { toast(live ? t('gemmaSel') : t('tryGemma')); if (live) openApp('guard'); }}, el('span', {}, name),
       el('span', {style:'display:flex;gap:4px'}, el('span', {class:'mt ' + (live ? 'l' : ver ? 'v' : 's')}, live ? t('live') : ver ? t('verified') : t('supported'))))); });
   m.append(el('div', {class:'mrow more', title:t('supportedTip')}, t('anyModel')));
-  $('#kKill').onclick = () => { api('/api/vsh', {line:'halt'}); toast(t('halted')); refreshTray(); };
+  $('#kKill').onclick = async () => { try { const r = await window.VK_API('kill', {}); toast(r.message || t('halted')); } catch (e) { toast('Kernel unreachable'); } pullLive(); };
   $('#tKill').onclick = () => $('#kKill').click(); $('#tRes').onclick = () => $('#kResume').click();
   $('#kResume').onclick = () => { const ov = el('div', {class:'kdlg'}), inpk = el('input', {class:'mono', value:'vikernel-demo', 'aria-label':'key'}); const box = el('div', {class:'kbox'}, el('div', {style:'font-weight:700;margin-bottom:6px'}, t('keyTitle')), el('div', {class:'small muted', style:'margin-bottom:8px'}, t('keyPrompt')), inpk, el('div', {style:'display:flex;gap:8px;justify-content:flex-end;margin-top:10px'}, el('button', {class:'btn', onclick:() => ov.remove()}, t('cancel')), el('button', {class:'btn pri', onclick:() => go()}, t('resumeGo')))); ov.append(box); document.body.append(ov); setTimeout(() => { inpk.focus(); inpk.select(); }, 30); inpk.addEventListener('keydown', e => { if (e.key === 'Enter' && !e.isComposing) go(); if (e.key === 'Escape') ov.remove(); }); const go = () => { const k = inpk.value.trim(); ov.remove();
-    const r = api('/api/vsh', {line:k === 'vikernel-demo' ? 'resume --key vikernel-demo' : 'resume'}); toast(/-> RUN/.test(r.out || '') ? t('resumed') : t('resumeNo')); refreshTray(); }; };
+    window.VK_API('resume', {key:k}).then(r => { toast(r.ok ? t('resumed') : t('resumeNo')); }).catch(() => toast('Kernel unreachable')).finally(pullLive); }; };
   const mode = x => { $('#mA').classList.toggle('on', x === 'A'); $('#mB').classList.toggle('on', x === 'B'); $('#modeInfo').textContent = t(x === 'A' ? 'modeInfoA' : 'modeInfoB'); };
   $('#mA').onclick = () => { mode('A'); toast(t('modeOnlyB')); }; $('#mB').onclick = () => mode('B'); mode('A');
   $('#kVerify').onclick = async () => { const v = await verifyChain(api('/api/audit').lines || []); $('#pVer').innerHTML = ''; $('#pVer').append(el('b', {style:`color:${v.ok ? '#065F46' : 'var(--rose)'}`}, v.ok ? `verified ✓ (${v.n})` : `✗ (${v.errors.length})`)); };

common.js

@@ -4,12 +4,14 @@
 try { window.VK_SID = sessionStorage.getItem('vk_sid') || ('s' + Math.random().toString(36).slice(2, 10)); sessionStorage.setItem('vk_sid', window.VK_SID); }
 catch (e) { window.VK_SID = 's' + Math.random().toString(36).slice(2, 10); }
 window.VK_OVERRIDES = window.VK_OVERRIDES || {};
+// every page load starts this visitor's session in RUN (a session KILL never survives a reload)
+try { fetch('api/ag/session/start', {method:'POST', headers:{'Content-Type':'application/json', 'X-VK-Session':window.VK_SID}, body:'{}'}); } catch (e) {}
 window.VK_EXTRA_APPS = window.VK_EXTRA_APPS || [];
 window.VK_API = async (path, body, timeoutMs) => {
   const ctl = new AbortController(); const to = setTimeout(() => ctl.abort(), timeoutMs || 120000);
   try {
-    const r = await fetch('api/ag/' + path, body === undefined ? {cache:'no-store', signal:ctl.signal} :
-      {method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(body), signal:ctl.signal});
+    const r = await fetch('api/ag/' + path, body === undefined ? {cache:'no-store', signal:ctl.signal, headers:{'X-VK-Session':window.VK_SID}} :
+      {method:'POST', headers:{'Content-Type':'application/json', 'X-VK-Session':window.VK_SID}, body:JSON.stringify(body), signal:ctl.signal});
     if (r.status === 429) throw new Error('rate');
     if (!r.ok) throw new Error('http ' + r.status);
     return await r.json();

gpulab.js

@@ -12,7 +12,7 @@ function rnd(n, m) { return Array.from({length:n}, () => Math.floor(Math.random(
 async function gpu(path, body, ms) {
   const ctl = new AbortController(); const to = setTimeout(() => ctl.abort(), ms || 300000);
   try {
-    const r = await fetch('api/agx/' + path, body === undefined ? {cache:'no-store', signal:ctl.signal} : {method:'POST', headers:{'Content-Type':'application/json'}, body:JSON.stringify(body), signal:ctl.signal});
+    const r = await fetch('api/agx/' + path, body === undefined ? {cache:'no-store', signal:ctl.signal, headers:{'X-VK-Session':window.VK_SID}} : {method:'POST', headers:{'Content-Type':'application/json', 'X-VK-Session':window.VK_SID}, body:JSON.stringify(body), signal:ctl.signal});
     if (r.status === 429) throw new Error('rate');
     if (!r.ok) throw new Error('http ' + r.status);
     return await r.json();

server.py

@@ -10,7 +10,7 @@ BK_TOKEN = os.environ.get("BACKEND_TOKEN", "")
 RATE = int(os.environ.get("RATE_PER_10MIN", "20"))
 TIMEOUT = float(os.environ.get("BACKEND_TIMEOUT", "300"))
 GET_OK = {"health", "status", "audit", "store/catalog", "browser/img", "browser/res"}
-POST_OK = {"chat", "scenario", "kill", "resume", "tamper", "reset", "store/submit", "store/publish", "store/app", "store/install", "gate/decide", "vmask", "game/hint", "game/cheat", "browser/open", "browser/agent", "browser/snap", "browser/policy", "settings/get", "settings/revoke", "settings/grant", "settings/egress", "settings/policy", "settings/locked", "rsi/state", "rsi/propose", "rsi/apply", "rsi/rollback", "rsi/reset", "ztc/status", "ztc/judge", "ztc/run", "backdoor/run", "backdoor/scan", "backdoor/wake", "gpu"}
+POST_OK = {"chat", "scenario", "kill", "resume", "tamper", "reset", "store/submit", "store/publish", "store/app", "store/install", "gate/decide", "vmask", "game/hint", "game/cheat", "browser/open", "browser/agent", "browser/snap", "browser/policy", "settings/get", "settings/revoke", "settings/grant", "settings/egress", "settings/policy", "settings/locked", "rsi/state", "rsi/propose", "rsi/apply", "rsi/rollback", "rsi/reset", "ztc/status", "ztc/judge", "ztc/run", "backdoor/run", "backdoor/scan", "backdoor/wake", "gpu", "session/start"}
 STATIC = {"index.html", "app.js", "ag.js", "store.js", "common.js", "display.js", "terminal.js", "mines.js", "browser.js", "settings.js", "live_apps.js", "game.js", "rsi.js", "gpulab.js", "ztc.js", "backdoor.js", "backdoor.css", "backdoor_metrics.json", "downloads/vdrpack.py", "demo/poisoned-page", "samples/weather-plus.vdr", "samples/weather-plus-tampered.vdr", "i18n.js", "demo_data.js", "styles.css", "ag_replay.json"}
 HITS = {}
 
@@ -37,7 +37,7 @@ class H(SimpleHTTPRequestHandler):
         base = base or BACKEND
         if not base:
             return self._json(503, {"error": "backend not configured"})
-        h = {"Content-Type": "application/json", "X-Backend-Token": BK_TOKEN}
+        h = {"Content-Type": "application/json", "X-Backend-Token": BK_TOKEN, "X-VK-Session": (self.headers.get("X-VK-Session") or "")[:60]}
         if HF_AUTH:
             h["Authorization"] = "Bearer " + HF_AUTH
         req = urllib.request.Request(base + "/api/" + name + query, data=body, headers=h, method="POST" if body is not None else "GET")
@@ -94,6 +94,8 @@ class H(SimpleHTTPRequestHandler):
             req["message"] = str(req["message"])[:500]
         if x and not BACKEND2:
             return self._json(503, {"error": "in-weights backend not configured"})
+        if x and name in ("kill", "resume"):
+            x = False  # visitor KILL/RESUME is per session; the in-weights kernel is never halted globally by a visitor
         self._proxy(name, json.dumps(req).encode(), base=BACKEND2 if x else None)
 
     def end_headers(self):

terminal.js

@@ -88,6 +88,8 @@
     let history = [];
     try { history = JSON.parse(sessionStorage.getItem(HIST_KEY) || '[]') || []; } catch (e) { history = []; }
     let halted = false;
+    const poll = setInterval(() => { if (!body.isConnected) { clearInterval(poll); return; } refreshState(); }, 12000);
+    window.addEventListener('vk-kernel-state', e => { halted = e.detail === 'HALTED'; });
     let online = true;
 
     const save = () => {
@@ -564,7 +566,8 @@
 
     async function execLine(line) {
       if (!line.trim()) return '';
-      if (halted && !ALWAYS(line)) return C.y('HALTED: the kernel is stopped. Resume with: vik resume --key <operator key>');
+      if (halted && !ALWAYS(line)) await refreshState();
+      if (halted && !ALWAYS(line)) return C.y('Kernel halted in your session. Press RESUME or type: vik resume --key <demo key from the guide> to continue.');
       const sec = await securityIntercept(line);
       if (sec !== null) return sec;
       const toks = tokenize(line);