Merge pull request #1649 from jaylfc/dev

release: promote dev to master (v1.0.0-beta.28)

Author: jaylfc

CHANGELOG.md

@@ -7,6 +7,15 @@ Versions follow semver beta: `1.0.0-beta.N`, bumped on each dev->master promotio
 
 ## [Unreleased]
 
+## [1.0.0-beta.28] - 2026-07-05
+
+### Added
+- App Studio is now real: describe an app in plain words and the taOS agent generates it, packages it, runs it through the security analyzer, installs it, and shows it running live in a sandboxed window, all in one flow. Generated apps ship as sandboxed web apps with no elevated permissions.
+- Licensing transparency: services whose model weights are non-commercial (MusicGen, MusicGPT, FLUX-Fill) now carry accurate weight-license metadata (the code license was already MIT, but the weights are CC-BY-NC), the Store shows a "Non-commercial weights" badge, and installing such a service now requires a one-time license acceptance. Nothing non-commercial installs silently.
+
+### Fixed
+- Video Studio generation is no longer a multi-minute blocking request that could time out or fail on a disconnect. Generation now runs as a background job: you get an immediate job id, the UI polls for progress, and a failed job always ends in a clear error state instead of hanging.
+
 ## [1.0.0-beta.27] - 2026-07-04
 
 ### Added

app-catalog/services/flux-fill/manifest.yaml

@@ -6,6 +6,10 @@ version: 1.0.0
 description: "FLUX.1-Fill quality inpaint/outpaint tier - GPU image editing via an A1111-compatible sd.cpp server. Runs on-demand on a shared NVIDIA GPU."
 homepage: https://github.com/leejet/stable-diffusion.cpp
 license: MIT
+# The sd.cpp server is MIT, but this tier pulls the FLUX.1-dev weights,
+# which ship under the FLUX.1-dev non-commercial license.
+weights_license: "flux-1-dev-non-commercial-license"
+license_class: non-commercial
 
 requires:
   ram_mb: 8192

app-catalog/services/musicgen/manifest.yaml

@@ -6,6 +6,10 @@ version: 1.3.0
 description: "Meta's text-to-music — generates 30s clips from prompts. Multiple model sizes (small/medium/large/melody). Conditioning on melody supported."
 homepage: https://github.com/facebookresearch/audiocraft
 license: MIT
+# The wrapper code is MIT, but the pretrained MusicGen weights this service
+# downloads are Meta's CC-BY-NC 4.0 -- non-commercial use only.
+weights_license: "CC-BY-NC 4.0"
+license_class: non-commercial
 
 requires:
   ram_mb: 8192

app-catalog/services/musicgpt/manifest.yaml

@@ -6,6 +6,10 @@ version: 0.4.0
 description: "Generate music from text prompts — runs locally using Meta's MusicGen, no Python required"
 homepage: https://github.com/gabotechs/MusicGPT
 license: MIT
+# The server binary is MIT, but it runs Meta's MusicGen weights under the
+# hood, which are CC-BY-NC 4.0 -- non-commercial use only.
+weights_license: "CC-BY-NC 4.0"
+license_class: non-commercial
 
 requires:
   ram_mb: 2048

desktop/package-lock.json

@@ -1,7 +1,7 @@
 {
   "name": "tinyagentos-desktop",
   "private": true,
-  "version": "1.0.0-beta.27",
+  "version": "1.0.0-beta.28",
   "type": "module",
   "scripts": {
     "dev": "vite",

desktop/package.json

@@ -40,20 +40,13 @@ describe("AppStudioApp", () => {
     expect(screen.getByText("Blank")).toBeInTheDocument();
   });
 
-  it("switches to Publish view and shows capability rows", () => {
+  it("switches to Publish view and shows the empty state before an app is built", () => {
     const { container } = render(<AppStudioApp windowId="test" />);
     const nav = container.querySelector("nav[aria-label='App Studio views']")!;
     const publishBtn = Array.from(nav.querySelectorAll("button")).find(
       (b) => b.getAttribute("aria-label") === "Publish"
     )!;
     fireEvent.click(publishBtn);
-    // app identity
-    expect(screen.getAllByText("Chore Quest").length).toBeGreaterThan(0);
-    // capability row labels
-    expect(screen.getByTestId("perm-row-workspace")).toBeInTheDocument();
-    expect(screen.getByTestId("perm-row-notifications")).toBeInTheDocument();
-    expect(screen.getByTestId("perm-row-household")).toBeInTheDocument();
-    // publish button
-    expect(screen.getByRole("button", { name: /publish to my store/i })).toBeInTheDocument();
+    expect(screen.getByText(/generate an app in the build view first/i)).toBeInTheDocument();
   });
 });

desktop/src/apps/AppStudioApp.test.tsx

@@ -0,0 +1,100 @@
+import { useCallback, useRef } from "react";
+import { createPortal } from "react-dom";
+import { useFocusTrap } from "@/hooks/use-focus-trap";
+
+interface Props {
+  appName: string;
+  weightsLicense: string;
+  text: string;
+  submitting?: boolean;
+  error?: string | null;
+  /** Re-POSTs the install with accepted: true. */
+  onAccept: () => void;
+  onDecline: () => void;
+}
+
+/**
+ * Single-accept license dialog shown before installing a service whose
+ * backend pins non-commercial model weights (#169) -- e.g. musicgen's
+ * MIT wrapper around Meta's CC-BY-NC 4.0 weights. Cloned from
+ * PermissionConsent's modal shell (focus trap, portal, styling) but asks a
+ * single "I agree" question about a weights license instead of a
+ * multi-capability grant.
+ */
+export function LicenseAcceptDialog({
+  appName,
+  weightsLicense,
+  text,
+  submitting = false,
+  error = null,
+  onAccept,
+  onDecline,
+}: Props) {
+  const dialogRef = useRef<HTMLDivElement>(null);
+  useFocusTrap(dialogRef, true);
+
+  const handleAccept = useCallback(() => {
+    if (!submitting) onAccept();
+  }, [submitting, onAccept]);
+
+  return createPortal(
+    <div
+      className="fixed inset-0 z-50 flex items-center justify-center bg-black/50"
+      onClick={(e) => {
+        if (submitting) return;
+        if (e.target === e.currentTarget) onDecline();
+      }}
+      onKeyDown={(e) => {
+        if (submitting) return;
+        if (e.key === "Escape") onDecline();
+      }}
+    >
+      <div
+        ref={dialogRef}
+        role="dialog"
+        aria-modal="true"
+        aria-label={`${appName} weights license`}
+        className="bg-shell-surface border border-white/10 shadow-2xl rounded-2xl w-[26rem] max-w-[90vw] flex flex-col"
+      >
+        <div className="px-5 py-4 border-b border-white/5">
+          <h2 className="text-sm font-semibold text-shell-text">
+            {appName} uses non-commercial model weights
+          </h2>
+        </div>
+        <div className="px-5 py-4 space-y-2.5">
+          <p className="text-[13px] text-shell-text-secondary leading-relaxed">{text}</p>
+          <p className="text-[11px] text-shell-text-tertiary">
+            Weights license: <span className="text-shell-text font-medium">{weightsLicense || "non-commercial (label unavailable)"}</span>
+          </p>
+        </div>
+        {error && (
+          <div role="alert" className="mx-5 mb-3 text-[12px] text-red-300 bg-red-500/10 border border-red-500/20 rounded px-2 py-1">
+            {error}
+          </div>
+        )}
+        <div className="flex justify-end gap-2 px-5 py-4 border-t border-white/5">
+          <button
+            type="button"
+            onClick={onDecline}
+            disabled={submitting}
+            className="px-4 py-1.5 rounded-full text-[13px] font-semibold text-shell-text-secondary hover:text-shell-text hover:bg-white/[0.04] transition-colors disabled:opacity-60"
+          >
+            Cancel
+          </button>
+          <button
+            type="button"
+            onClick={handleAccept}
+            disabled={submitting}
+            className="px-4 py-1.5 rounded-full text-[13px] font-bold text-white transition-colors disabled:opacity-60"
+            style={{ background: "var(--color-accent)" }}
+          >
+            {submitting ? "Installing…" : "Agree & Install"}
+          </button>
+        </div>
+      </div>
+    </div>,
+    document.body,
+  );
+}
+
+export default LicenseAcceptDialog;

desktop/src/apps/StoreApp/LicenseAcceptDialog.tsx

@@ -17,6 +17,7 @@ import { loadFilter, saveFilter } from "./storage";
 import { emitAppEvent, APP_INSTALLED } from "@/lib/app-event-bus";
 import { TaosAppsSection } from "./TaosAppsSection";
 import { ImportAppButton } from "./ImportAppButton";
+import { LicenseAcceptDialog } from "./LicenseAcceptDialog";
 import { useIsMobile } from "@/hooks/use-is-mobile";
 import { MobileStore } from "./MobileStore";
 import { AppIcon, StoreCover } from "./AppIcon";
@@ -419,6 +420,38 @@ function AppCard({
   const showVariantPicker = !app.installed && variantOptions.length > 1;
   const showTargetPicker = !app.installed && installTargets.length > 1;
 
+  interface LicenseGate { weightsLicense: string; name: string; text: string }
+  const [licenseGate, setLicenseGate] = useState<LicenseGate | null>(null);
+  const [licenseSubmitting, setLicenseSubmitting] = useState(false);
+
+  /** POST install-v2. Returns "ok" | "gated" | "error" — "gated" means the
+   * backend returned 412 needs_license_acceptance (non-commercial weights,
+   * #169) and licenseGate state is now set so the accept dialog renders. */
+  const postInstall = async (accepted: boolean): Promise<"ok" | "gated" | "error"> => {
+    const body: Record<string, unknown> = { app_id: app.id, target_remote: selectedTarget };
+    if (selectedVariant !== "auto") body.variant_id = selectedVariant;
+    if (accepted) body.accepted = true;
+    const res = await fetch("/api/store/install-v2", { method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(body) });
+    if (res.status === 412) {
+      try {
+        const gate = await res.json();
+        if (gate?.needs_license_acceptance) {
+          setLicenseGate({ weightsLicense: String(gate.weights_license ?? ""), name: String(gate.name ?? app.name), text: String(gate.text ?? "") });
+          return "gated";
+        }
+      } catch { /* fall through to generic error below */ }
+    }
+    if (!res.ok) { let msg = `Install failed (${res.status})`; try { const err = await res.json(); if (err?.error) msg = String(err.error); } catch { /* ignore */ } setError(msg); return "error"; }
+    if (isFramework) {
+      try {
+        const data = await res.json();
+        if (data?.prefetch === "started") { setPrefetchStatus("downloading"); setPrefetchActive(true); }
+      } catch { /* no body / not framework prefetch */ }
+    }
+    onInstall(app.id);
+    return "ok";
+  };
+
   const handleAction = async () => {
     setBusy(true); setError(null); setProgress(null);
     try {
@@ -427,23 +460,31 @@ function AppCard({
         if (!res.ok) { let msg = `Uninstall failed (${res.status})`; try { const err = await res.json(); if (err?.error) msg = String(err.error); } catch { /* ignore */ } setError(msg); setBusy(false); return; }
         onUninstall(app.id);
       } else {
-        const body: Record<string, unknown> = { app_id: app.id, target_remote: selectedTarget };
-        if (selectedVariant !== "auto") body.variant_id = selectedVariant;
-        const res = await fetch("/api/store/install-v2", { method: "POST", headers: { "Content-Type": "application/json", Accept: "application/json" }, body: JSON.stringify(body) });
-        if (!res.ok) { let msg = `Install failed (${res.status})`; try { const err = await res.json(); if (err?.error) msg = String(err.error); } catch { /* ignore */ } setError(msg); setBusy(false); return; }
-        if (isFramework) {
-          try {
-            const data = await res.json();
-            if (data?.prefetch === "started") { setPrefetchStatus("downloading"); setPrefetchActive(true); }
-          } catch { /* no body / not framework prefetch */ }
-        }
-        onInstall(app.id);
+        const outcome = await postInstall(false);
+        if (outcome === "gated") { setBusy(false); return; }
       }
     } catch (e) { setError(e instanceof Error ? e.message : "Network error"); }
     setBusy(false);
     setTimeout(() => setProgress(null), 1500);
   };
 
+  const handleLicenseAccept = async () => {
+    setLicenseSubmitting(true);
+    // Flip busy back on so the card's install-progress poller (keyed on busy,
+    // and cleared by handleAction when the gate returned) runs during the real
+    // accepted install instead of the card sitting idle behind the dialog.
+    setBusy(true);
+    try {
+      const outcome = await postInstall(true);
+      if (outcome !== "gated") setLicenseGate(null);
+    } catch (e) { setError(e instanceof Error ? e.message : "Network error"); setLicenseGate(null); }
+    setLicenseSubmitting(false);
+    setBusy(false);
+    setTimeout(() => setProgress(null), 1500);
+  };
+
+  const handleLicenseDecline = () => { setLicenseGate(null); setBusy(false); };
+
   const handleOpen = () => {
     window.dispatchEvent(new CustomEvent("taos:open-app", { detail: { app: "agents" } }));
   };
@@ -477,6 +518,15 @@ function AppCard({
             <span className="text-[11px] text-shell-text-tertiary leading-none">v{app.version}</span>
           </div>
         </div>
+        {app.license_class === "non-commercial" && (
+          <span
+            className="inline-flex items-center gap-1 self-start text-[10px] font-semibold px-1.5 py-0.5 rounded-full bg-yellow-700/30 text-yellow-200"
+            title={`Model weights licensed for non-commercial use${app.weights_license ? ` (${app.weights_license})` : ""}`}
+            aria-label={`${app.name} uses non-commercial model weights${app.weights_license ? `: ${app.weights_license}` : ""}`}
+          >
+            Non-commercial weights
+          </span>
+        )}
         <p className="text-[11.5px] text-shell-text-secondary leading-relaxed flex-1">{app.description}</p>
         <div className="flex items-center justify-between">
           {app.stars ? (
@@ -568,6 +618,17 @@ function AppCard({
           </button>
         )}
       </div>
+      {licenseGate && (
+        <LicenseAcceptDialog
+          appName={licenseGate.name}
+          weightsLicense={licenseGate.weightsLicense}
+          text={licenseGate.text}
+          submitting={licenseSubmitting}
+          error={error}
+          onAccept={handleLicenseAccept}
+          onDecline={handleLicenseDecline}
+        />
+      )}
     </div>
   );
 }
@@ -967,6 +1028,9 @@ export function StoreApp({ windowId: _windowId }: { windowId: string }) {
             tagline: a.tagline ? String(a.tagline) : undefined,
             cover: a.cover ? String(a.cover) : COVER_BY_ID[String(a.id)]?.cover,
             coverImage: a.coverImage ? String(a.coverImage) : COVER_BY_ID[String(a.id)]?.coverImage,
+            license: a.license ? String(a.license) : undefined,
+            weights_license: a.weights_license ? String(a.weights_license) : undefined,
+            license_class: a.license_class ? String(a.license_class) : undefined,
           }));
           // Merge homelab apps: only add those not already in the catalog
           const catalogIds = new Set(normalized.map((a) => a.id));