@agentprojectcontext/apx 1.77.2 → 1.78.0

package/src/core/config/index.js

@@ -5,7 +5,7 @@
 import fs from "node:fs";
 import path from "node:path";
 import { APX_HOME, CONFIG_PATH } from "./paths.js";
-import { PERMISSION_MODES, DEFAULT_PERMISSION_MODE } from "../constants/permissions.js";
+import { PERMISSION_MODES } from "../constants/permissions.js";
 import { agentsMdFile, apcProjectFile } from "../apc/paths.js";
 
 export {
@@ -62,6 +62,10 @@ const DEFAULT_CONFIG = {
     // snappier but more "want me to continue?" hand-backs. 0/unset → built-in
     // default (TELEGRAM_TOOL_ITERS in src/core/agent/constants.js).
     telegram_max_iters: 0,
+    // Char cap for a FOREIGN project's AGENTS.md in the prompt. 0 = no cap.
+    // The project APX runs inside is never capped regardless of this value —
+    // a project must always read its own contract whole.
+    project_agents_max_chars: 24000,
     // Model fallback: ordered list. Each item carries its own provider
     // prefix; the array order IS the attempt order. The router tries the
     // primary (super_agent.model) first, then walks this list, skipping
@@ -522,186 +526,24 @@ export function removeProject(cfg, idOrPath) {
   if (cfg.projects.length !== before) writeConfig(cfg);
   return { removed: before - cfg.projects.length };
 }
-// ── Telegram channels (multi-channel mode) ──────────────────────────────────
-// Each entry in cfg.telegram.channels[] is { name, bot_token, chat_id,
-// route_to_agent, project, respond_with_engine, poll_interval_ms }.
-// These helpers keep the array shape stable for the CLI and the daemon API.
-
-const CHANNEL_FIELDS = [
-  "name",
-  "bot_token",
-  "chat_id",
-  "route_to_agent",
-  "project",
-  "respond_with_engine",
-  "poll_interval_ms",
-  "owner_user_id",
-];
-
-function ensureChannelsArray(cfg) {
-  cfg.telegram = cfg.telegram || {};
-  if (!Array.isArray(cfg.telegram.channels)) cfg.telegram.channels = [];
-  return cfg.telegram.channels;
-}
-
-export function listTelegramChannels(cfg) {
-  return ensureChannelsArray(cfg).slice();
-}
-
-export function findTelegramChannel(cfg, name) {
-  return ensureChannelsArray(cfg).find((c) => c.name === name) || null;
-}
-
-// Create-or-patch a channel by name. `patch` is a partial channel object;
-// unknown keys are dropped. Returns { created, channel }.
-export function upsertTelegramChannel(cfg, name, patch = {}) {
-  if (!name || typeof name !== "string")
-    throw new Error("upsertTelegramChannel: name required");
-  const channels = ensureChannelsArray(cfg);
-  let entry = channels.find((c) => c.name === name);
-  const created = !entry;
-  if (!entry) {
-    entry = { name };
-    channels.push(entry);
-  }
-  for (const k of CHANNEL_FIELDS) {
-    if (k === "name") continue;
-    if (patch[k] !== undefined) entry[k] = patch[k];
-  }
-  // Default respond_with_engine to true on create.
-  if (created && entry.respond_with_engine === undefined) {
-    entry.respond_with_engine = true;
-  }
-  writeConfig(cfg);
-  return { created, channel: entry };
-}
-
-export function removeTelegramChannel(cfg, name) {
-  const channels = ensureChannelsArray(cfg);
-  const before = channels.length;
-  cfg.telegram.channels = channels.filter((c) => c.name !== name);
-  const removed = before - cfg.telegram.channels.length;
-  if (removed > 0) {
-    // Explicit user-initiated removal — bypass the credential-loss guard
-    // so the write goes through even when this empties the array.
-    cfg._allowClear = true;
-    writeConfig(cfg);
-  }
-  return { removed };
-}
-
-// Clear specific optional fields on a channel (project, route_to_agent, …).
-// Returns { channel } or null when no such channel.
-export function unsetTelegramChannelFields(cfg, name, fields = []) {
-  const ch = findTelegramChannel(cfg, name);
-  if (!ch) return null;
-  let mutated = false;
-  for (const f of fields) {
-    if (!CHANNEL_FIELDS.includes(f) || f === "name") continue;
-    if (f in ch) {
-      delete ch[f];
-      mutated = true;
-    }
-  }
-  if (mutated) writeConfig(cfg);
-  return { channel: ch };
-}
-
-// ── Telegram contacts (global roster, keyed by user_id) ─────────────────────
-// Identity of a person is global; the per-channel owner_user_id only marks who
-// owns a given channel. Role lives on the contact (global), per the chosen
-// design — owner_user_id overrides it to "owner" for that channel only.
-
-const CONTACT_FIELDS = [
-  "user_id",
-  "name",
-  "username",
-  "role",
-  "note",
-  "first_seen",
-  "last_seen",
-];
-
-function ensureContactsArray(cfg) {
-  cfg.telegram = cfg.telegram || {};
-  if (!Array.isArray(cfg.telegram.contacts)) cfg.telegram.contacts = [];
-  return cfg.telegram.contacts;
-}
-
-export function listContacts(cfg) {
-  return ensureContactsArray(cfg).slice();
-}
-
-export function findContact(cfg, userId) {
-  if (userId == null) return null;
-  return (
-    ensureContactsArray(cfg).find((c) => String(c.user_id) === String(userId)) ||
-    null
-  );
-}
-
-// Create-or-patch a contact by user_id. Unknown keys are dropped.
-export function upsertContact(cfg, userId, patch = {}, { persist = true } = {}) {
-  if (userId == null) throw new Error("upsertContact: user_id required");
-  const contacts = ensureContactsArray(cfg);
-  let entry = contacts.find((c) => String(c.user_id) === String(userId));
-  const created = !entry;
-  if (!entry) {
-    entry = { user_id: userId };
-    contacts.push(entry);
-  }
-  for (const k of CONTACT_FIELDS) {
-    if (k === "user_id") continue;
-    if (patch[k] !== undefined) entry[k] = patch[k];
-  }
-  if (persist) writeConfig(cfg);
-  return { created, contact: entry };
-}
-
-export function setContactRole(cfg, userId, role) {
-  const { contact } = upsertContact(cfg, userId, { role });
-  return contact;
-}
-
-export function removeContact(cfg, userId) {
-  const contacts = ensureContactsArray(cfg);
-  const before = contacts.length;
-  cfg.telegram.contacts = contacts.filter(
-    (c) => String(c.user_id) !== String(userId)
-  );
-  const removed = before - cfg.telegram.contacts.length;
-  if (removed > 0) writeConfig(cfg);
-  return { removed };
-}
-
-export function setChannelOwner(cfg, channelName, userId) {
-  return upsertTelegramChannel(cfg, channelName, { owner_user_id: userId });
-}
-
-// ── Telegram roles (role → capability map) ──────────────────────────────────
-
-export function listRoles(cfg) {
-  cfg.telegram = cfg.telegram || {};
-  return { ...(cfg.telegram.roles || {}) };
-}
-
-export function setRole(cfg, name, def) {
-  if (!name || typeof name !== "string") throw new Error("setRole: name required");
-  cfg.telegram = cfg.telegram || {};
-  cfg.telegram.roles = cfg.telegram.roles || {};
-  cfg.telegram.roles[name] = def;
-  writeConfig(cfg);
-  return cfg.telegram.roles[name];
-}
-
-export function removeRole(cfg, name) {
-  cfg.telegram = cfg.telegram || {};
-  if (!cfg.telegram.roles || !(name in cfg.telegram.roles)) return { removed: 0 };
-  if (name === "owner" || name === "guest") {
-    throw new Error(`role "${name}" is built-in and cannot be removed`);
-  }
-  delete cfg.telegram.roles[name];
-  writeConfig(cfg);
-  return { removed: 1 };
-}
 
+// ── Telegram identity ───────────────────────────────────────────────────────
+// Moved to core/channels/telegram/config.js — it is channel domain, not config
+// plumbing. Re-exported here so the CLI, the daemon API and the plugin keep
+// their existing import paths.
+export {
+  listTelegramChannels,
+  findTelegramChannel,
+  upsertTelegramChannel,
+  removeTelegramChannel,
+  unsetTelegramChannelFields,
+  listContacts,
+  findContact,
+  upsertContact,
+  setContactRole,
+  removeContact,
+  setChannelOwner,
+  listRoles,
+  setRole,
+  removeRole,
+} from "../channels/telegram/config.js";

package/src/core/config/paths.js

@@ -4,7 +4,19 @@ import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
 
-export const APX_HOME = path.join(os.homedir(), ".apx");
+/**
+ * Where APX keeps everything. `APX_HOME` in the environment relocates it —
+ * useful for sandboxes and required by tests that need an isolated home.
+ *
+ * Resolve lazily when a caller can be reached after the environment changes
+ * (tests stub os.homedir mid-run); the eager `APX_HOME` constant below is the
+ * common case and stays for the ~30 call sites that read it at import time.
+ */
+export function apxHome() {
+  return process.env.APX_HOME || path.join(os.homedir(), ".apx");
+}
+
+export const APX_HOME = apxHome();
 export const CONFIG_PATH = path.join(APX_HOME, "config.json");
 export const PID_PATH = path.join(APX_HOME, "daemon.pid");
 export const LOG_PATH = path.join(APX_HOME, "daemon.log");
@@ -21,6 +33,47 @@ export const PROJECT_STORE_ROOT = path.join(APX_HOME, "projects");
 export const DEFAULT_PROJECT_ID = "default";
 export const DEFAULT_PROJECT_STORE = path.join(PROJECT_STORE_ROOT, DEFAULT_PROJECT_ID);
 
+// ---------------------------------------------------------------------------
+// Everything else under ~/.apx.
+//
+// These used to be rebuilt from os.homedir() at ~30 call sites, several of them
+// duplicated across modules that then drifted: the TTS scratch dir existed in
+// core/voice/tts.js *and* api/voice.js, the desktop log in core/desktop/
+// process.js *and* cli/commands/desktop.js, the log paths in core/logging.js
+// *and* cli/commands/log.js. One definition each, imported everywhere.
+// ---------------------------------------------------------------------------
+
+/** The super-agent's own notebook (see core/agent/self-memory.js). */
+export const SELF_MEMORY_PATH = path.join(APX_HOME, "memory.md");
+/** Who the super-agent is: name, personality, owner. */
+export const IDENTITY_PATH = path.join(APX_HOME, "identity.json");
+
+/** User-installed skills and the RAG index built over them. */
+export const SKILLS_DIR = path.join(APX_HOME, "skills");
+export const SKILLS_INDEX_PATH = path.join(SKILLS_DIR, ".index.json");
+
+/** Agent vault — reusable agent definitions, not tied to one project. */
+export const AGENT_VAULT_DIR = path.join(APX_HOME, "agents");
+
+/** Unified log tree. Everything writes here so one tail follows the system. */
+export const LOG_DIR = path.join(APX_HOME, "logs");
+export const APX_LOG_PATH = path.join(LOG_DIR, "apx.log");
+export const ERROR_TRACE_PATH = path.join(LOG_DIR, "errors.jsonl");
+
+/** Desktop capsule (Electron) runtime state. */
+export const DESKTOP_PID_PATH = path.join(APX_HOME, "desktop.pid");
+export const DESKTOP_LOG_PATH = path.join(APX_HOME, "desktop.log");
+export const DESKTOP_AUTOSTART_LOG_PATH = path.join(APX_HOME, "desktop-autostart.log");
+
+/** Scratch space. Safe to delete between runs. */
+export const TMP_DIR = path.join(APX_HOME, "tmp");
+export const TTS_TMP_DIR = path.join(TMP_DIR, "tts");
+export const RECORDINGS_TMP_DIR = path.join(TMP_DIR, "recordings");
+
+/** Managed runtimes we install on the user's behalf. */
+export const RUNTIME_DIR = path.join(APX_HOME, "runtime");
+export const WHISPER_VENV_DIR = path.join(RUNTIME_DIR, "whisper-venv");
+
 export function projectStorageRoot(apxId) {
   return path.join(PROJECT_STORE_ROOT, apxId);
 }

package/src/core/confirmation/adapters/web.js

@@ -11,7 +11,7 @@
 //      dialog. The dialog is keyed by correlationId.
 //
 //   3. The user responds → frontend POSTs to
-//      POST /super-agent/confirm/:correlationId  { confirmed: boolean }
+//      POST /api/super-agent/confirm/:correlationId  { confirmed: boolean }
 //
 //   4. The API handler (api/confirm.js) calls pendingStore.resolve(correlationId,
 //      value). This finds the in-memory resolve callback and calls it, unblocking

package/src/core/deck/manifest.js

@@ -1,6 +1,6 @@
 // APX Deck manifest — the data model the companion clients (deck, desktop
 // capsule) read on boot. Pure data + decoration; no HTTP or filesystem.
-// host/daemon/api/deck.js wraps this for the /deck/manifest endpoint.
+// host/daemon/api/deck.js wraps this for the /api/deck/manifest endpoint.
 
 export const CORE_WIDGETS = [
   {
@@ -75,19 +75,19 @@ export const SAFE_ACTIONS = [
     id: "apx.copy_context",
     title: "Copiar contexto APX",
     risk: "safe",
-    endpoint: "/projects/:pid/agents",
+    endpoint: "/api/projects/:pid/agents",
   },
   {
     id: "apx.voice_turn",
     title: "Hablar con APX",
     risk: "safe",
-    endpoint: "/voice/turn",
+    endpoint: "/api/voice/turn",
   },
   {
     id: "apx.super_agent",
     title: "Pedir acción a APX",
     risk: "confirm",
-    endpoint: "/projects/:pid/super-agent/chat",
+    endpoint: "/api/projects/:pid/super-agent/chat",
   },
 ];
 
@@ -131,7 +131,7 @@ export function decorateExternalWidgets(pluginStatus = {}, overrides = {}) {
 }
 
 /**
- * Build the full /deck/manifest response body.
+ * Build the full /api/deck/manifest response body.
  *
  * Inputs are *resolved* runtime values, not the live managers — caller is
  * responsible for catching errors in projects.list()/plugins.status() and
@@ -167,13 +167,13 @@ export function buildDeckManifest({
       projects: projectList,
       plugins: pluginStatus,
       endpoints: {
-        health: "/health",
-        projects: "/projects",
-        plugins: "/plugins",
-        voice_turn: "/voice/turn",
-        transcribe_chunk: "/transcribe/chunk",
-        super_agent_chat: "/projects/:pid/super-agent/chat",
-        super_agent_stream: "/projects/:pid/super-agent/chat/stream",
+        health: "/api/health",
+        projects: "/api/projects",
+        plugins: "/api/plugins",
+        voice_turn: "/api/voice/turn",
+        transcribe_chunk: "/api/transcribe/chunk",
+        super_agent_chat: "/api/projects/:pid/super-agent/chat",
+        super_agent_stream: "/api/projects/:pid/super-agent/chat/stream",
       },
     },
     safety: {

package/src/core/desktop/autostart.js

@@ -1,6 +1,6 @@
 // Per-user "launch APX Desktop at login" wiring. Used by BOTH the CLI
 // (`apx desktop install` / `uninstall`) and the daemon's
-// /desktop/autostart endpoint so the web admin can toggle the same setting
+// /api/desktop/autostart endpoint so the web admin can toggle the same setting
 // without shelling out.
 //
 // Per-user, never sudo, fully reversible. Three platforms supported:
@@ -16,6 +16,7 @@
 import fs from "node:fs";
 import os from "node:os";
 import path from "node:path";
+import { DESKTOP_AUTOSTART_LOG_PATH } from "#core/config/paths.js";
 import { execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { augmentedPath } from "#core/util/path-env.js";
@@ -28,7 +29,7 @@ export const MAC_PLIST_PATH       = path.join(os.homedir(), "Library", "LaunchAg
 export const LINUX_DESKTOP_PATH   = path.join(os.homedir(), ".config", "autostart", "apx-desktop.desktop");
 export const WIN_RUN_KEY          = "HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Run";
 export const WIN_RUN_NAME         = "APXDesktop";
-const AUTOSTART_LOG_PATH          = path.join(os.homedir(), ".apx", "desktop-autostart.log");
+const AUTOSTART_LOG_PATH          = DESKTOP_AUTOSTART_LOG_PATH;
 
 // ── runner resolution ────────────────────────────────────────────────────
 

package/src/core/desktop/process.js

@@ -1,5 +1,5 @@
 // Desktop (Electron floating window) process control — shared by the CLI
-// (`apx desktop start/stop/restart`) and the daemon's /desktop/{start,stop}
+// (`apx desktop start/stop/restart`) and the daemon's /api/desktop/{start,stop}
 // HTTP endpoints, so both spawn/kill the window the exact same way.
 //
 // The window is a detached Electron process (it must survive the spawner so a
@@ -8,8 +8,8 @@
 
 "use strict";
 import fs from "node:fs";
-import os from "node:os";
 import path from "node:path";
+import { DESKTOP_LOG_PATH, DESKTOP_PID_PATH } from "#core/config/paths.js";
 import { spawn, execFileSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 
@@ -19,8 +19,8 @@ const __dirname = path.dirname(__filename);
 // src/core/desktop/ → repo root is three levels up.
 const ROOT = path.resolve(__dirname, "..", "..", "..");
 export const DESKTOP_MAIN = path.resolve(__dirname, "..", "..", "interfaces", "desktop", "main.js");
-export const DESKTOP_PID = path.join(os.homedir(), ".apx", "desktop.pid");
-const DESKTOP_LOG = path.join(os.homedir(), ".apx", "desktop.log");
+export const DESKTOP_PID = DESKTOP_PID_PATH;
+const DESKTOP_LOG = DESKTOP_LOG_PATH;
 
 // ── PID file ────────────────────────────────────────────────────────────────
 export function readPid() {

package/src/core/engines/presets.js

@@ -4,11 +4,11 @@
 // Who consumes this:
 //   • CLI  — `apx setup` builds its provider/model menus from here
 //     (src/interfaces/cli/commands/setup.js).
-//   • Web  — the admin panel fetches it via `GET /engines/presets` and hydrates
+//   • Web  — the admin panel fetches it via `GET /api/engines/presets` and hydrates
 //     its provider forms (src/interfaces/web/.../providers/typeStyles.ts).
 //
 // This is the OFFLINE / no-key fallback list. When the user has an api_key
-// configured, the daemon's `POST /engines/models` returns the provider's LIVE
+// configured, the daemon's `POST /api/engines/models` returns the provider's LIVE
 // catalog instead (see ./catalog.js). The model field is ALWAYS free-text, so
 // any id can be typed even if it is not listed here.
 //

package/src/core/http-tools/browser.js

@@ -9,7 +9,7 @@
 // browser_* tool is actually called. HTTP-only fetching lives in fetch.js
 // (no Chromium needed).
 //
-// Endpoints (mounted at /tools/browser by api.js):
+// Endpoints (mounted at /api/tools/browser by api.js):
 //   POST /navigate          { url, launch_options?, allow_dangerous? }
 //   POST /screenshot        { selector?, full_page?, width?, height?, encoded? }
 //   POST /click             { selector }