@agentprojectcontext/apx 1.77.0 → 1.77.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentprojectcontext/apx",
-  "version": "1.77.0",
+  "version": "1.77.1",
   "description": "APX — unified CLI + daemon for the Agent Project Context (APC) standard.",
   "publishConfig": {
     "access": "public"
@@ -40,7 +40,8 @@
     "upgrade": "pnpm install && pnpm add -g .",
     "prepare": "node scripts/install-githooks.js",
     "prepack": "node scripts/sync-apc-skill.js && node scripts/build-web.js",
-    "postinstall": "node src/interfaces/cli/postinstall.js"
+    "postinstall": "node src/interfaces/cli/postinstall.js",
+    "smoke:seam": "node --test --test-reporter=spec tests/smoke/*.smoke.js"
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",

package/src/host/daemon/api/web.js

@@ -25,6 +25,7 @@ const API_PREFIXES = [
   "/messages", "/sessions", "/tools", "/mcp", "/voice", "/tts", "/desktop", "/overlay",
   "/transcribe", "/run", "/files", "/memory", "/env", "/pair", "/deck",
   "/super-agent", "/identity", "/skills", "/profiles", "/inbox",
+  "/tasks", "/agents", "/plugins", "/previews", "/embeddings",
 ];
 
 export function isApiPath(p) {

package/src/host/daemon/db.js

@@ -126,6 +126,12 @@ export class ProjectManager {
         name,
         kind,
         agents: readAgents(e.path).length,
+        // Where this project's runtime state lives. The CLI needs it to reach
+        // per-routine memory and anything else stored outside the repo — it has
+        // no other way to resolve it, and `apx routine memory` was silently
+        // broken for want of these two fields.
+        apx_id: e.apxId || null,
+        storage_path: e.storagePath || null,
       };
     });
   }

package/src/host/daemon/index.js

@@ -3,9 +3,13 @@
 // Must run before any outbound fetch — see the module header for why.
 import "#core/net/ipv4-first.js";
 import fs from "node:fs";
+import http from "node:http";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomBytes } from "node:crypto";
+
+// Loopback is always bound, no matter what `host` is configured to.
+const LOOPBACK_HOST = "127.0.0.1";
 import {
   readConfig,
   writeConfig,
@@ -233,9 +237,29 @@ async function main() {
   plugins.installRoutes(app);
 
   let callbackReconciler = null;
-  const server = app.listen(port, host, () => {
+
+  // Loopback is ALWAYS bound, whatever `host` says.
+  //
+  // Binding a single specific LAN address (what `apx panel share` configures)
+  // excludes 127.0.0.1 — and the CLI, the desktop app and /admin/web-token all
+  // reach the daemon over loopback. Sharing the panel with the phone must not
+  // take the local toolchain down with it, so a non-loopback host means TWO
+  // listeners on one app, not a move.
+  const extraHosts =
+    host && host !== LOOPBACK_HOST && host !== "0.0.0.0" && host !== "::" ? [host] : [];
+  const secondary = [];
+
+  const server = app.listen(port, extraHosts.length ? LOOPBACK_HOST : host, () => {
     writePid();
-    log(`apx-daemon ${PKG.version} listening on http://${host}:${port}`);
+    for (const h of extraHosts) {
+      // A secondary bind failing must never take the daemon down — the local
+      // one is already up and is the one everything depends on.
+      const s2 = http.createServer(app);
+      s2.on("error", (e) => log(`bind ${h}:${port} failed (${e.code || e.message}) — local access unaffected`));
+      s2.listen(port, h, () => log(`apx-daemon also listening on http://${h}:${port}`));
+      secondary.push(s2);
+    }
+    log(`apx-daemon ${PKG.version} listening on http://${extraHosts.length ? LOOPBACK_HOST : host}:${port}`);
     log(`projects: ${projects.list().length} | plugins: ${Object.keys(plugins.status()).join(", ") || "(none)"}`);
     plugins.startAll();
     scheduler.start();
@@ -317,6 +341,11 @@ async function main() {
     import("./whisper-server.js").then(({ shutdownWhisperServer }) => {
       shutdownWhisperServer().catch(() => {});
     }).catch(() => {});
+    // Close the LAN listener(s) too, or the port stays held after SIGTERM and
+    // the next `apx restart` fails with "already running".
+    for (const s2 of secondary) {
+      try { s2.close(); } catch { /* already down */ }
+    }
     server.close(() => {
       clearPid();
       process.exit(0);