Sync the self-hosting stack

This commit is contained in:
2026-10-09 10:00:52 +02:00
parent 4ba344985d
commit 9001d605c4
2 changed files with 54 additions and 1 deletions
+11 -1
View File
@@ -299,7 +299,8 @@ All three are the kind that produce confusing symptoms rather than clean errors.
- **Forward the WebSocket upgrade.** Three separate sockets ride `JARVIS_PORT`: the chat, on
`/socket.io/`; enrolled agents, on `/api/agents/ws`; and, for remote desktop only, one media
connection per live session on `/api/agents/ws/desktop`. None falls back to plain HTTP. Without
connection per live session on `/api/agents/ws/desktop` (and, for Quick Assist, the helper's
`/api/agents/ws/assist` and `/api/agents/ws/assist/desktop`). None falls back to plain HTTP. Without
the upgrade the chat does not lose streaming — it never connects at all, and since the prompt
itself travels over that socket, nothing sends. Presence and in-chat approvals go with it, no
agent can connect, and no screen can be watched. A proxy that forwards `/api/agents/ws` by exact
@@ -480,6 +481,15 @@ which ends active sessions. What the banner guarantees is that watching is never
secret. It does not guarantee consent once it has started, and under the banner policy it is not
asking for any.
**Quick Assist, for a PC Jarvis does not manage.** An operator with the remote desktop permission
starts a session under **Quick Assist**, gets a single-use code that lasts 10 minutes, and sends the
person a link to `/help/<code>` on your instance. That public page names the operator and the
organization, then hands over `JarvisQuickAssist.exe`: the Windows agent, carrying your address and
the code. The person opens it, a Jarvis window shows who is helping, and the screen is shared only
after they accept, with the notice on their screen throughout. It installs nothing and keeps no key on
disk; it shows the person's own session only, with their own rights, and answers nothing but the
screen. The download needs the agent release image, like enrolment does.
## Things worth knowing before you trust it with production
These are deliberate and documented rather than surprises waiting to be found.