Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

[Gen UI] Inline visualize cards always fail on SSH remote executors (desktop-attached-remote): "Gen UI file is outside the host output directory"

Abierto
  • ¿Algo no está bien?
#76 1 comentario 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
43/100
Tipo de issue
Error
Claridad
Bien especificado
Estado de actividad
Activo
Stack tecnológico
javascript, node.js
Área
backend, desktop

Línea de trabajo

Start with packages/services/src/gen-ui/adapters/files.ts and the readGenUiDocument path described in the report, then read docs/architecture/r2-server-cli-and-daemon.md to confirm executor ownership. Trace how desktop-attached remote reads reach the executor and compare that with the local validation path. Done when the remote executor validates the file against its output root and returns its HTML for the client card to render.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

Note: filed here because github.com/zai-org/ZCode has issues disabled; this repo already hosts main-repo bug reports (see #64, #60). Happy to repost if the team prefers another channel.

Environment

  • ZCode Desktop client 3.15.1 (Windows 11), latest
  • Remote executor over SSH: Ubuntu 24.04 (root), zcode-server 3.15.1 (matched), service authority mode desktop-attached-remote
  • Executor env: ZCODE_GEN_UI_OUTPUT_ROOT=/root/.zcode/v2/visualizations

Steps to reproduce

  1. Connect Desktop to an SSH remote executor (WSL2 Ubuntu) as a remote workspace
  2. Ask the agent to emit any ::visualize fragment; the executor writes it into the host-injected session dir, e.g. /root/.zcode/v2/visualizations/<sha256(workspace-identity,session-id)>/view.html
  3. Client renders the Gen UI card

Actual behavior

Card fails to load: Gen UI file is outside the host output directory（客户端提示“无法加载交互视图”）。100% reproducible across multiple files; “重试” never helps.

Executor-side checks (all pass)

  • File is inside ZCODE_GEN_UI_OUTPUT_ROOT; directory name = sha256 of [workspace-identity, session-id], exactly as injected by the host
  • Permissions 644, no symlinks on the whole path (verified with namei), valid HTML fragment, well under 5 MB
  • The error string exists in zcode-server.cjs (readGenUiDocument), but at read time the failing validation cannot be the executor's own — the file is under the executor root, so the relative() check would pass there

Root-cause analysis (from the client bundle + repo source)

  • The Desktop client bundle (app.asar 3.15.1) embeds the same reader — readGenUiDocument (minified bL) of packages/services/src/gen-ui/adapters/files.ts: 
    let r = resolve(t),            // t = outputRoot, resolved on the LOCAL client machine
    o = normalize(n.path),     // n.path = remote executor's absolute POSIX path, e.g. /root/.zcode/v2/...
    s = relative(r, o);
if (!s || s === ".." || s.startsWith(`..${sep}`) || isAbsolute(s))
    throw new Error("Gen UI file is outside the host output directory");
    relative() between a Windows local output root and the remote absolute path can never pass, so the client throws before any remote access happens.
  • packages/services/src/gen-ui/adapters/files.ts (current main) states the intended design in a comment: “读取范围只由执行端 Host 的固定输出根目录决定” — the read scope is owned by the executor-side Host. docs/architecture/r2-server-cli-and-daemon.md places the same ownership on the executor.
  • Conclusion: in desktop-attached-remote mode the Gen UI document read/validation is not dispatched to the remote host; the client performs a local-filesystem read with a local output root instead.

Expected behavior

In desktop-attached-remote mode, route the Gen UI document read/validation through the remote transport: the executor validates against its own ZCODE_GEN_UI_OUTPUT_ROOT and returns the HTML content to the client for rendering.

Impact / current workaround

Only inline interactive Gen UI cards are affected; all other remote functionality works fine. Current workaround: executor delivers Playwright PNG screenshots plus standalone HTML files instead of ::visualize cards.

Notes

  • No user-facing configuration found that redirects the client-side validation root (ZCODE_GEN_UI_OUTPUT_ROOT only configures the executor side).
  • Happy to provide full connection logs or a minimal repro if useful.
Lenguaje dominante
Python
Estrellas
95
Forks
57
Sin PR fusionados en 30 d

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de zai-org/zcode-plugins

Todos los issues de zai-org/zcode-plugins

Issues similares

Más issues de Python

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.