@agentprojectcontext/apx 1.67.0 → 1.69.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentprojectcontext/apx",
-  "version": "1.67.0",
+  "version": "1.69.0",
   "description": "APX — unified CLI + daemon for the Agent Project Context (APC) standard.",
   "publishConfig": {
     "access": "public"

package/src/core/config/redact.js

@@ -67,6 +67,50 @@ export function redactConfig(cfg) {
   return out;
 }
 
+/** Walk a dotted path on an object, returning the value or undefined. */
+function getDotted(obj, dotted) {
+  let cur = obj;
+  for (const part of dotted.split(".")) {
+    if (!cur || typeof cur !== "object") return undefined;
+    cur = cur[part];
+  }
+  return cur;
+}
+
+/** Set a dotted path on an object, creating intermediate objects. */
+function setDotted(obj, dotted, value) {
+  const parts = dotted.split(".");
+  let cur = obj;
+  for (let i = 0; i < parts.length - 1; i++) {
+    if (!cur[parts[i]] || typeof cur[parts[i]] !== "object") cur[parts[i]] = {};
+    cur = cur[parts[i]];
+  }
+  cur[parts[parts.length - 1]] = value;
+}
+
+/**
+ * Merge a possibly-redacted config `next` against the prior on-disk config.
+ * Anywhere a secret path in `next` holds a marker (the value a redacted view
+ * echoes back), restore the prior real secret — so saving the redacted view
+ * never clobbers a real key with the literal "*** set ***" string. Mutates and
+ * returns `next`.
+ */
+export function mergeRedactedSecrets(next, prior) {
+  if (!next || typeof next !== "object") return next;
+  for (const dotted of SECRET_PATHS) {
+    if (dotted.includes("*")) continue;
+    if (isSecretMarker(getDotted(next, dotted))) {
+      const priorVal = getDotted(prior, dotted);
+      if (typeof priorVal === "string" && priorVal.length) setDotted(next, dotted, priorVal);
+    }
+  }
+  const nextChannels = next?.telegram?.channels;
+  if (Array.isArray(nextChannels)) {
+    next.telegram.channels = mergeRedactedChannels(nextChannels, prior?.telegram?.channels);
+  }
+  return next;
+}
+
 /** Redact a single Telegram channel record. */
 export function redactChannel(channel) {
   if (!channel?.bot_token) return channel;

package/src/host/daemon/api/agents.js

@@ -25,6 +25,40 @@ import {
 import { agentToResponse } from "./shared.js";
 import { normalizeVaultPatch } from "#core/apc/agents-vault.js";
 import { PERMISSION_MODES } from "#core/constants/permissions.js";
+import { listConversations } from "#core/stores/conversations.js";
+import { listTasks } from "#core/stores/tasks.js";
+import { listRoutines } from "#core/stores/routines.js";
+import { readProjectMessages } from "#core/stores/messages.js";
+
+// Attach a per-agent activity summary ({ threads, records, tasks, heartbeats })
+// to a list of agent responses. Reads each store once and tallies by agent, so
+// the whole list costs O(stores) rather than O(agents × stores). Gated behind
+// `?stats=1` on the list endpoint since it touches the message ledger.
+function attachAgentStats(p, agents) {
+  const store = p.storagePath || p.path;
+  const tally = (rows, key) => {
+    const m = Object.create(null);
+    for (const r of rows) {
+      const a = typeof key === "function" ? key(r) : r?.[key];
+      if (a) m[a] = (m[a] || 0) + 1;
+    }
+    return m;
+  };
+  let tasksByAgent = {}, hbByAgent = {}, recByAgent = {};
+  try { tasksByAgent = tally(listTasks(store, { state: "all" }), "agent"); } catch { /* no task store */ }
+  try { hbByAgent = tally(listRoutines(store), (r) => r?.spec?.agent); } catch { /* no routines */ }
+  try { recByAgent = tally(readProjectMessages(store, { limit: 1000 }), "agent_slug"); } catch { /* no ledger */ }
+  for (const a of agents) {
+    let threads = 0;
+    try { threads = listConversations(store, a.slug).length; } catch { /* none */ }
+    a.stats = {
+      threads,
+      records: recByAgent[a.slug] || 0,
+      tasks: tasksByAgent[a.slug] || 0,
+      heartbeats: hbByAgent[a.slug] || 0,
+    };
+  }
+}
 
 // Autonomy mirrors the super-agent permission modes (total/automatico/permiso).
 // An invalid value is dropped rather than persisted so a typo can't silently
@@ -123,7 +157,9 @@ export function register(app, { projects, project }) {
   app.get("/projects/:pid/agents", (req, res) => {
     const p = project(req, res);
     if (!p) return;
-    res.json(readAgents(p.path).map(agentToResponse));
+    const agents = readAgents(p.path).map(agentToResponse);
+    if (req.query.stats === "1") attachAgentStats(p, agents);
+    res.json(agents);
   });
 
   app.get("/projects/:pid/agents/:slug", (req, res) => {

package/src/host/daemon/api/config.js

@@ -11,6 +11,7 @@ import {
   unsetDottedKey,
 } from "../project-config.js";
 import { apcProjectFile, apcProjectConfigFile } from "#core/apc/paths.js";
+import { redactConfig, mergeRedactedSecrets, isSecretMarker } from "#core/config/redact.js";
 
 const projectJsonPath = apcProjectFile;
 
@@ -30,9 +31,12 @@ export function register(app, { projects, project }) {
   app.get("/projects/:pid/config", (req, res) => {
     const p = project(req, res);
     if (!p) return;
+    // Redact secrets (engine api_keys, telegram bot tokens) the same way the
+    // global admin config does — the UI shows "…XXXXX" and echoes the marker
+    // back unchanged, which the write paths below restore from disk.
     res.json({
-      effective: p.config || {},
-      project_only: readProjectConfig(p.path),
+      effective: redactConfig(p.config || {}),
+      project_only: redactConfig(readProjectConfig(p.path)),
       project_config_path: apcProjectConfigFile(p.path),
       apc_project: readProjectJson(p.path),
       project_json_path: projectJsonPath(p.path),
@@ -45,7 +49,10 @@ export function register(app, { projects, project }) {
     const body = req.body || {};
     if (typeof body !== "object" || Array.isArray(body))
       return res.status(400).json({ error: "body must be a JSON object" });
-    writeProjectConfig(p.path, body);
+    // A redacted secret echoed back means "keep the real value" — restore it
+    // from disk so a full replace of the redacted view can't wipe secrets.
+    const merged = mergeRedactedSecrets(body, readProjectConfig(p.path));
+    writeProjectConfig(p.path, merged);
     projects.rebuild(p.id);
     res.json({ ok: true });
   });
@@ -56,14 +63,19 @@ export function register(app, { projects, project }) {
     const { set, unset } = req.body || {};
     const cfg = readProjectConfig(p.path);
     if (set && typeof set === "object") {
-      for (const [k, v] of Object.entries(set)) setDottedKey(cfg, k, v);
+      // Skip echoed secret markers so a redacted field left untouched keeps its
+      // real value instead of being overwritten with the marker string.
+      for (const [k, v] of Object.entries(set)) {
+        if (isSecretMarker(v)) continue;
+        setDottedKey(cfg, k, v);
+      }
     }
     if (Array.isArray(unset)) {
       for (const k of unset) unsetDottedKey(cfg, k);
     }
     writeProjectConfig(p.path, cfg);
     projects.rebuild(p.id);
-    res.json({ ok: true, project_only: cfg });
+    res.json({ ok: true, project_only: redactConfig(cfg) });
   });
 
   app.put("/projects/:pid/apc-project", (req, res) => {

package/src/host/daemon/api/sessions.js

@@ -25,12 +25,21 @@ export function register(app, { projects, project }) {
     const engineId = req.query.engine ? String(req.query.engine) : null;
     const q = req.query.q ? String(req.query.q) : "";
     const deep = req.query.deep === "1" || req.query.deep === "true";
+    // Optional ?cwd= scopes to sessions whose working dir is that folder (or a
+    // child of it) — used by the per-project Sessions view. Omitted = all.
+    const cwd = req.query.cwd ? String(req.query.cwd).replace(/\/+$/, "") : "";
     let rows = [];
     try {
       rows = collectAllSessions({}, { engineId });
     } catch (e) {
       return res.status(500).json({ error: e.message, meta: { total: 0, offset: 0, limit: null, pageSize: 0, page: 1, pageCount: 1 }, data: [] });
     }
+    if (cwd) {
+      rows = rows.filter((r) => {
+        const c = (r.cwd || "").replace(/\/+$/, "");
+        return c === cwd || c.startsWith(cwd + "/");
+      });
+    }
     if (q.trim()) {
       // filterSessionsByQuery already de-dupes and sorts newest-first.
       rows = filterSessionsByQuery(rows, { query: q, deep });