@agentprojectcontext/apx 1.77.3 → 1.78.0

package/src/interfaces/cli/commands/mcp.js

@@ -41,7 +41,7 @@ function sourceToScope(source) {
 export async function cmdMcpList(args = {}) {
   const scope = resolveListScope(args?.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const mcps = await http.get(`/projects/${pid}/mcps`);
+  const mcps = await http.get(`/api/projects/${pid}/mcps`);
   const filtered = scope === "all"
     ? mcps
     : mcps.filter((m) => sourceToScope(m.source) === scope);
@@ -90,7 +90,7 @@ export async function cmdMcpAdd(args) {
 
   const scope = resolveWriteScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const result = await http.post(`/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
+  const result = await http.post(`/api/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
     name,
     command,
     args: mcpArgs,
@@ -105,7 +105,7 @@ export async function cmdMcpRemove(args) {
   if (!name) throw new Error("apx mcp remove: missing <name>");
   const scope = resolveWriteScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/mcps/${name}?scope=${encodeURIComponent(scope)}`);
+  await http.delete(`/api/projects/${pid}/mcps/${name}?scope=${encodeURIComponent(scope)}`);
   console.log(`Removed MCP "${name}" (scope: ${scope})`);
 }
 
@@ -120,7 +120,7 @@ async function toggleEnabled(args, enabled) {
   const name = args._[0];
   if (!name) throw new Error(`apx mcp ${enabled ? "enable" : "disable"}: missing <name>`);
   const pid = await resolveProjectId(args?.flags?.project);
-  const all = await http.get(`/projects/${pid}/mcps`);
+  const all = await http.get(`/api/projects/${pid}/mcps`);
   const m = all.find((x) => x.name === name);
   if (!m) throw new Error(`MCP "${name}" not registered`);
   // Write back to the scope it lives in so we don't accidentally shadow it.
@@ -132,7 +132,7 @@ async function toggleEnabled(args, enabled) {
       `MCP "${name}" comes from foreign source "${m.source}" — toggle it in that IDE's config directly.`
     );
   }
-  await http.post(`/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
+  await http.post(`/api/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
     name: m.name,
     command: m.command,
     args: m.args,
@@ -155,7 +155,7 @@ export async function cmdMcpRun(args) {
     }
   }
   const pid = await resolveProjectId(args?.flags?.project);
-  const result = await http.post(`/projects/${pid}/mcps/${name}/call`, { tool, params });
+  const result = await http.post(`/api/projects/${pid}/mcps/${name}/call`, { tool, params });
   process.stdout.write(JSON.stringify(result.result, null, 2) + "\n");
 }
 
@@ -217,7 +217,7 @@ export async function cmdMcpTools(args) {
   if (!name) throw new Error("apx mcp tools: usage: apx mcp tools <name> [<tool>] [--json]");
   const toolFilter = args._[1];
   const pid = await resolveProjectId(args?.flags?.project);
-  const data = await http.get(`/projects/${pid}/mcps/${name}/tools`);
+  const data = await http.get(`/api/projects/${pid}/mcps/${name}/tools`);
   const tools = data.tools || [];
 
   if (toolFilter) {
@@ -256,7 +256,7 @@ export async function cmdMcpLogs(args) {
   const name = args._[0];
   if (!name) throw new Error("apx mcp logs: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const logs = await http.get(`/projects/${pid}/mcps/${name}/logs`);
+  const logs = await http.get(`/api/projects/${pid}/mcps/${name}/logs`);
   if (args?.flags?.json) {
     process.stdout.write(JSON.stringify(logs, null, 2) + "\n");
     return;
@@ -287,7 +287,7 @@ export async function cmdMcpLogs(args) {
 
 export async function cmdMcpCheck(args = {}) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const data = await http.get(`/projects/${pid}/mcps/check`);
+  const data = await http.get(`/api/projects/${pid}/mcps/check`);
 
   console.log("Source files:");
   for (const s of data.sources) {

package/src/interfaces/cli/commands/memory.js

@@ -12,9 +12,9 @@ function requireRoot() {
 async function nudgeDaemon(root) {
   try {
     if (!(await http.ping())) return;
-    const projects = await http.get("/projects", { autoStart: false });
+    const projects = await http.get("/api/projects", { autoStart: false });
     const me = projects.find((p) => p.path === root);
-    if (me) await http.post(`/projects/${me.id}/rebuild`, undefined, { autoStart: false });
+    if (me) await http.post(`/api/projects/${me.id}/rebuild`, undefined, { autoStart: false });
   } catch {}
 }
 

package/src/interfaces/cli/commands/messages.js

@@ -22,7 +22,7 @@ export async function cmdMessagesTail(args) {
     // Read from global store — no project needed
     const params = new URLSearchParams({ limit: String(n) });
     if (channel) params.set("channel", channel);
-    const rows = await http.get(`/messages/global?${params}`);
+    const rows = await http.get(`/api/messages/global?${params}`);
     if (rows.length === 0) {
       console.log("(no messages)");
       return;
@@ -39,7 +39,7 @@ export async function cmdMessagesTail(args) {
   const params = new URLSearchParams({ limit: String(n) });
   if (args.flags.agent && args.flags.agent !== true) params.set("agent", args.flags.agent);
   if (channel) params.set("channel", channel);
-  const rows = await http.get(`/projects/${pid}/messages?${params}`);
+  const rows = await http.get(`/api/projects/${pid}/messages?${params}`);
   if (rows.length === 0) {
     console.log("(no messages)");
     return;
@@ -82,7 +82,7 @@ export async function cmdMessagesChat(args) {
   if (isGlobal) {
     const params = new URLSearchParams({ limit: String(n) });
     if (channel) params.set("channel", channel);
-    const rows = await http.get(`/messages/global?${params}`);
+    const rows = await http.get(`/api/messages/global?${params}`);
     printChatRows(rows);
     return;
   }
@@ -91,7 +91,7 @@ export async function cmdMessagesChat(args) {
   const params = new URLSearchParams({ limit: String(n) });
   if (args.flags.agent && args.flags.agent !== true) params.set("agent", args.flags.agent);
   if (channel) params.set("channel", channel);
-  const rows = await http.get(`/projects/${pid}/messages?${params}`);
+  const rows = await http.get(`/api/projects/${pid}/messages?${params}`);
   printChatRows(rows.reverse());
 }
 
@@ -99,7 +99,7 @@ export async function cmdMessagesSearch(args) {
   const q = args._[0];
   if (!q) throw new Error("apx messages search: missing <query>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const rows = await http.get(`/projects/${pid}/messages/search?q=${encodeURIComponent(q)}`);
+  const rows = await http.get(`/api/projects/${pid}/messages/search?q=${encodeURIComponent(q)}`);
   if (rows.length === 0) {
     console.log("(no matches)");
     return;

package/src/interfaces/cli/commands/model.js

@@ -18,24 +18,6 @@ function providersFromFallback(cfg) {
   return seen.length ? seen : [...DEFAULT_FALLBACK_ORDER];
 }
 
-function parseValue(raw) {
-  try {
-    return JSON.parse(raw);
-  } catch {
-    return raw;
-  }
-}
-
-function setNested(obj, keyPath, value) {
-  const parts = keyPath.split(".");
-  let cur = obj;
-  for (let i = 0; i < parts.length - 1; i++) {
-    const p = parts[i];
-    if (!cur[p] || typeof cur[p] !== "object") cur[p] = {};
-    cur = cur[p];
-  }
-  cur[parts[parts.length - 1]] = value;
-}
 
 function ensureFallback(cfg) {
   cfg.super_agent = cfg.super_agent || {};

package/src/interfaces/cli/commands/obsidian.js

@@ -34,9 +34,9 @@ export async function cmdObsidianSet(args) {
   if (args.flags.memory || args.flags["memory-sync"]) body.memory_sync = true;
 
   const q = scopeQuery(scope);
-  await http.post(`/projects/${pid}/integrations/${SLUG}/configure${q}`, body);
+  await http.post(`/api/projects/${pid}/integrations/${SLUG}/configure${q}`, body);
   try {
-    const r = await http.post(`/projects/${pid}/integrations/${SLUG}/validate${q}`, {});
+    const r = await http.post(`/api/projects/${pid}/integrations/${SLUG}/validate${q}`, {});
     const badge = r.is_vault ? "Obsidian vault" : "folder (no .obsidian)";
     console.log(`✓ Obsidian connected (${scope}) — ${r.vault_name} · ${r.note_count} notes · ${badge}`);
     console.log(`  ${r.vault_path}`);
@@ -50,7 +50,7 @@ export async function cmdObsidianSet(args) {
 export async function cmdObsidianStatus(args) {
   const scope = resolveScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const s = await http.get(`/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
+  const s = await http.get(`/api/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
   if (!s || s.status === "disconnected") {
     console.log(`(Obsidian not configured in scope "${scope}")`);
     return;
@@ -66,7 +66,7 @@ export async function cmdObsidianStatus(args) {
 export async function cmdObsidianSync(args) {
   const scope = resolveScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const r = await http.post(`/projects/${pid}/integrations/${SLUG}/action/sync_memory${scopeQuery(scope)}`, {});
+  const r = await http.post(`/api/projects/${pid}/integrations/${SLUG}/action/sync_memory${scopeQuery(scope)}`, {});
   console.log(`✓ Synced ${r.count} memory file(s) → vault folder "${r.folder}" (${r.changed} changed)`);
   for (const n of r.notes || []) console.log(`  ${n.changed ? "↑" : "="} ${n.note}`);
 }
@@ -74,6 +74,6 @@ export async function cmdObsidianSync(args) {
 export async function cmdObsidianRemove(args) {
   const scope = resolveScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
+  await http.delete(`/api/projects/${pid}/integrations/${SLUG}${scopeQuery(scope)}`);
   console.log(`Removed Obsidian integration (scope: ${scope})`);
 }

package/src/interfaces/cli/commands/org.js

@@ -27,7 +27,7 @@ function fail(key, msg) {
 
 export async function cmdOrgShow(args) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const org = await http.get(`/projects/${pid}/organization`);
+  const org = await http.get(`/api/projects/${pid}/organization`);
   if (!org.areas.length && !org.roles.length) {
     console.log("(no organization structure yet)");
     return;
@@ -44,7 +44,7 @@ export async function cmdOrgAreaAdd(args) {
   const name = (args._ || []).slice(1).join(" ").trim();
   if (!name) return fail("areaAdd", "name required");
   const pid = await resolveProjectId(args?.flags?.project);
-  const area = await http.post(`/projects/${pid}/organization/areas`, {
+  const area = await http.post(`/api/projects/${pid}/organization/areas`, {
     name, slug: args.flags?.slug, goal: args.flags?.goal,
   });
   console.log(`added area ${area.name} (${area.slug})`);
@@ -54,7 +54,7 @@ export async function cmdOrgAreaRm(args) {
   const slug = (args._ || [])[1];
   if (!slug) return fail("areaRm", "slug required");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/organization/areas/${encodeURIComponent(slug)}`);
+  await http.delete(`/api/projects/${pid}/organization/areas/${encodeURIComponent(slug)}`);
   console.log(`removed area ${slug}`);
 }
 
@@ -62,7 +62,7 @@ export async function cmdOrgRoleAdd(args) {
   const name = (args._ || []).slice(1).join(" ").trim();
   if (!name) return fail("roleAdd", "name required");
   const pid = await resolveProjectId(args?.flags?.project);
-  const role = await http.post(`/projects/${pid}/organization/roles`, {
+  const role = await http.post(`/api/projects/${pid}/organization/roles`, {
     name, slug: args.flags?.slug, area: args.flags?.area, description: args.flags?.desc,
   });
   console.log(`added role ${role.name} (${role.slug})${role.area ? ` in ${role.area}` : ""}`);
@@ -72,6 +72,6 @@ export async function cmdOrgRoleRm(args) {
   const slug = (args._ || [])[1];
   if (!slug) return fail("roleRm", "slug required");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/organization/roles/${encodeURIComponent(slug)}`);
+  await http.delete(`/api/projects/${pid}/organization/roles/${encodeURIComponent(slug)}`);
   console.log(`removed role ${slug}`);
 }

package/src/interfaces/cli/commands/pair.js

@@ -34,7 +34,7 @@ const fmt = {
 // pointing at 127.0.0.1 works through the USB bridge. For pure WiFi
 // pairing, the user should bind APX_HOST=0.0.0.0 and we'll emit the
 // LAN IP here instead.
-function pickHostForQr({ host, port }) {
+function pickHostForQr({ host }) {
   if (host && host !== "0.0.0.0" && host !== "::" && host !== "127.0.0.1") {
     return host;
   }
@@ -74,7 +74,7 @@ async function runPairing(args, channel) {
   // 1. Ask daemon for a pairing nonce.
   let init;
   try {
-    init = await http.post("/pair/init", {});
+    init = await http.post("/api/pair/init", {});
   } catch (e) {
     console.error(fmt.red(`pair init failed: ${e.message}`));
     process.exit(1);
@@ -117,7 +117,7 @@ async function runPairing(args, channel) {
   while (Date.now() < deadline) {
     await sleep(1500);
     try {
-      const s = await http.get(`/pair/status/${init.pairing_id}`);
+      const s = await http.get(`/api/pair/status/${init.pairing_id}`);
       if (s.status === "confirmed") {
         console.log(`  ${fmt.green("●")} ${fmt.bold("paired")} ${fmt.gray("·")} ${s.device_label || ""}`);
         console.log(`    ${fmt.gray("client_id:")} ${s.client_id}`);
@@ -138,7 +138,7 @@ async function runPairing(args, channel) {
 }
 
 export async function cmdPairList() {
-  const { clients } = await http.get("/pair/list");
+  const { clients } = await http.get("/api/pair/list");
   if (!clients.length) {
     console.log(`\n  ${fmt.dim("no paired devices")}\n`);
     return;
@@ -160,12 +160,12 @@ export async function cmdPairRevoke(args = {}) {
     process.exit(1);
   }
   // Allow short prefix: resolve via /pair/list.
-  const { clients } = await http.get("/pair/list");
+  const { clients } = await http.get("/api/pair/list");
   const match = clients.find((c) => c.id === id || c.id.startsWith(id));
   if (!match) {
     console.error(fmt.red(`no paired device matches "${id}"`));
     process.exit(1);
   }
-  await http.delete(`/pair/revoke/${match.id}`);
+  await http.delete(`/api/pair/revoke/${match.id}`);
   console.log(`  ${fmt.green("●")} revoked ${match.label} ${fmt.gray(`(${match.id.slice(0, 8)})`)}`);
 }

package/src/interfaces/cli/commands/plugins.js

@@ -1,7 +1,7 @@
 import { http } from "../http.js";
 
 export async function cmdPluginsList() {
-  const data = await http.get("/plugins");
+  const data = await http.get("/api/plugins");
   const ids = Object.keys(data);
   if (ids.length === 0) {
     console.log("(no plugins loaded)");
@@ -18,6 +18,6 @@ export async function cmdPluginsList() {
 export async function cmdPluginStatus(args) {
   const id = args._[0];
   if (!id) throw new Error("apx plugins status: missing <plugin-id>");
-  const s = await http.get(`/plugins/${id}/status`);
+  const s = await http.get(`/api/plugins/${id}/status`);
   console.log(JSON.stringify(s, null, 2));
 }

package/src/interfaces/cli/commands/profile.js

@@ -73,7 +73,7 @@ function printDoctor(report) {
 // ── list ────────────────────────────────────────────────────────────────────
 
 export async function cmdProfileList() {
-  const { active, profiles } = await http.get("/profiles");
+  const { active, profiles } = await http.get("/api/profiles");
   if (!profiles.length) {
     console.log("(no profiles available)");
     return;
@@ -94,7 +94,7 @@ export async function cmdProfileShow(args) {
   const id = args._[0];
   if (!id) fail("show", "missing <id>");
 
-  const p = await http.get(`/profiles/${encodeURIComponent(id)}`);
+  const p = await http.get(`/api/profiles/${encodeURIComponent(id)}`);
   console.log(`${p.name} (${p.id}) v${p.version || "?"} — ${p.source}${p.active ? " — ACTIVE" : ""}`);
   if (p.description) console.log(p.description);
   console.log(`languages: ${p.languages.join(", ") || "en"}`);
@@ -119,7 +119,7 @@ export async function cmdProfileInstall(args) {
   const source = args._[0];
   if (!source) fail("install", "missing <id|path>");
 
-  const r = await http.post("/profiles/install", { source, force: !!args?.flags?.force });
+  const r = await http.post("/api/profiles/install", { source, force: !!args?.flags?.force });
   console.log(`installed ${r.profile.name} (${r.profile.id}) v${r.profile.version || "?"}`);
   console.log(`  prompt: ~${r.tokens} tokens`);
   printWarnings(r.warnings);
@@ -133,7 +133,7 @@ export async function cmdProfileUse(args) {
   const id = args._[0];
   if (!id) fail("use", "missing <id>");
 
-  const r = await http.post("/profiles/use", { id, force: !!args?.flags?.force });
+  const r = await http.post("/api/profiles/use", { id, force: !!args?.flags?.force });
   console.log(`active profile: ${r.profile.name} (${r.profile.id})`);
   printWarnings(r.warnings);
 
@@ -146,7 +146,7 @@ export async function cmdProfileUse(args) {
 }
 
 export async function cmdProfileOff() {
-  const r = await http.post("/profiles/off", {});
+  const r = await http.post("/api/profiles/off", {});
   if (!r.was) {
     console.log("no profile was active — nothing to do");
     return;
@@ -185,14 +185,14 @@ async function interactiveConfig(profile) {
 }
 
 export async function cmdProfileConfig(args) {
-  const { active } = await http.get("/profiles");
+  const { active } = await http.get("/api/profiles");
   const id = args?.flags?.profile || active;
   if (!id) {
     console.error("apx profile config: no profile is active — run: apx profile use <id>");
     process.exit(1);
   }
 
-  const profile = await http.get(`/profiles/${encodeURIComponent(id)}?preview=0`);
+  const profile = await http.get(`/api/profiles/${encodeURIComponent(id)}?preview=0`);
 
   let values = parseSetFlags(args?.flags);
   if (args?.flags?.interactive) {
@@ -217,7 +217,7 @@ export async function cmdProfileConfig(args) {
     return;
   }
 
-  const r = await http.patch("/profiles/config", { values, id });
+  const r = await http.patch("/api/profiles/config", { values, id });
   console.log(`updated: ${r.changed.join(", ")}`);
   for (const k of r.changed) console.log(`  ${k.padEnd(24)} ${r.config[k]}`);
 
@@ -233,14 +233,14 @@ export async function cmdProfileConfig(args) {
 export async function cmdProfileDoctor(args) {
   const id = args._[0];
   const q = id ? `?id=${encodeURIComponent(id)}` : "";
-  printDoctor(await http.get(`/profiles/doctor${q}`));
+  printDoctor(await http.get(`/api/profiles/doctor${q}`));
 }
 
 export async function cmdProfileUninstall(args) {
   const id = args._[0];
   if (!id) fail("uninstall", "missing <id>");
 
-  const r = await http.delete(`/profiles/${encodeURIComponent(id)}`);
+  const r = await http.delete(`/api/profiles/${encodeURIComponent(id)}`);
   console.log(`uninstalled "${r.id}" (${r.source})`);
   if (r.routines?.removed?.length) console.log(`  routines removed: ${r.routines.removed.join(", ")}`);
   if (r.routines?.kept?.length) {

package/src/interfaces/cli/commands/project-config.js

@@ -18,7 +18,7 @@ import { resolveProjectId } from "./project.js";
 
 async function reloadDaemon() {
   try {
-    await http.post("/admin/reload", {});
+    await http.post("/api/admin/reload", {});
   } catch (e) {
     console.log(`⚠️  reload failed: ${e.message} (changes saved, restart daemon to apply)`);
   }
@@ -65,7 +65,7 @@ async function projectIdFromArg(target) {
 export async function cmdProjectConfigShow(args) {
   const target = args._[0];
   const id = await projectIdFromArg(target);
-  const data = await http.get(`/projects/${id}/config`);
+  const data = await http.get(`/api/projects/${id}/config`);
   const key = args.flags.key;
   if (key) {
     const eff = readDotted(data.effective || {}, key);
@@ -89,7 +89,7 @@ export async function cmdProjectConfigSet(args) {
   if (raw === undefined) throw new Error("apx project config set: missing <value>");
   const id = await projectIdFromArg(target);
   const value = coerceValue(raw);
-  await http.patch(`/projects/${id}/config`, { set: { [dotted]: value } });
+  await http.patch(`/api/projects/${id}/config`, { set: { [dotted]: value } });
   await reloadDaemon();
   console.log(`✅ set ${dotted} = ${JSON.stringify(value)}`);
 }
@@ -99,7 +99,7 @@ export async function cmdProjectConfigUnset(args) {
   const dotted = args._[1];
   if (!dotted) throw new Error("apx project config unset: missing <dotted.key>");
   const id = await projectIdFromArg(target);
-  await http.patch(`/projects/${id}/config`, { unset: [dotted] });
+  await http.patch(`/api/projects/${id}/config`, { unset: [dotted] });
   await reloadDaemon();
   console.log(`✅ unset ${dotted}`);
 }
@@ -107,7 +107,7 @@ export async function cmdProjectConfigUnset(args) {
 export async function cmdProjectConfigEdit(args) {
   const target = args._[0];
   const id = await projectIdFromArg(target);
-  const data = await http.get(`/projects/${id}/config`);
+  const data = await http.get(`/api/projects/${id}/config`);
   const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), "apx-cfg-"));
   const tmpFile = path.join(tmpDir, "config.json");
   fs.writeFileSync(tmpFile, JSON.stringify(data.project_only || {}, null, 2) + "\n");
@@ -125,7 +125,7 @@ export async function cmdProjectConfigEdit(args) {
     throw new Error(`invalid JSON after edit: ${e.message}`);
   }
   fs.rmSync(tmpDir, { recursive: true, force: true });
-  await http.put(`/projects/${id}/config`, updated);
+  await http.put(`/api/projects/${id}/config`, updated);
   await reloadDaemon();
   console.log(`✅ saved project_only config for #${id}`);
 }

package/src/interfaces/cli/commands/project.js

@@ -12,12 +12,12 @@ function requireRoot() {
 
 export async function cmdProjectAdd(args) {
   const target = args._[0] || requireRoot();
-  const result = await http.post("/projects", { path: path.resolve(target) });
+  const result = await http.post("/api/projects", { path: path.resolve(target) });
   console.log(`Registered #${result.id}: ${result.path}`);
 }
 
 export async function cmdProjectList() {
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   if (projects.length === 0) {
     console.log("(no projects registered — try `apx project add .`)");
     return;
@@ -31,7 +31,7 @@ export async function cmdProjectList() {
 export async function cmdProjectRemove(args) {
   const target = args._[0];
   if (!target) throw new Error("apx project remove: missing <path|id>");
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   let id;
   if (/^\d+$/.test(target)) id = parseInt(target, 10);
   else {
@@ -40,7 +40,7 @@ export async function cmdProjectRemove(args) {
     if (!found) throw new Error(`not registered: ${target}`);
     id = found.id;
   }
-  await http.delete(`/projects/${id}`);
+  await http.delete(`/api/projects/${id}`);
   console.log(`Removed project #${id}`);
 }
 
@@ -51,19 +51,19 @@ export async function cmdProjectRebuild(args) {
     if (/^\d+$/.test(target)) id = parseInt(target, 10);
     else {
       const abs = path.resolve(target);
-      const projects = await http.get("/projects");
+      const projects = await http.get("/api/projects");
       const found = projects.find((p) => p.path === abs);
       if (!found) throw new Error(`not registered: ${target}`);
       id = found.id;
     }
   } else {
     const root = requireRoot();
-    const projects = await http.get("/projects");
+    const projects = await http.get("/api/projects");
     const found = projects.find((p) => p.path === root);
     if (!found) throw new Error(`current project not registered — run \`apx project add .\``);
     id = found.id;
   }
-  const result = await http.post(`/projects/${id}/rebuild`);
+  const result = await http.post(`/api/projects/${id}/rebuild`);
   console.log(`Rebuilt project #${id}: ${result.agents} agents`);
 }
 
@@ -78,7 +78,7 @@ export async function resolveProjectId(target) {
     if (typeof target === "number" || /^\d+$/.test(String(target))) {
       return parseInt(target, 10);
     }
-    const projects = await http.get("/projects");
+    const projects = await http.get("/api/projects");
     const tgt = String(target);
 
     // exact path
@@ -112,10 +112,10 @@ export async function resolveProjectId(target) {
     // Fall back to the default project (id=0) — always available, no .apc/ required.
     return 0;
   }
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   const found = projects.find((p) => p.path === root);
   if (found) return found.id;
   // auto-register
-  const result = await http.post("/projects", { path: root });
+  const result = await http.post("/api/projects", { path: root });
   return result.id;
 }

package/src/interfaces/cli/commands/routine.js

@@ -1,4 +1,3 @@
-import fs from "node:fs";
 import { http } from "../http.js";
 import { resolveProjectId } from "./project.js";
 import { listRoutines } from "#core/stores/routines.js";
@@ -33,7 +32,7 @@ function parseSpec(args) {
 
 export async function cmdRoutineList(args = {}) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const rows = await http.get(`/projects/${pid}/routines`);
+  const rows = await http.get(`/api/projects/${pid}/routines`);
   if (rows.length === 0) {
     console.log(`(no routines in project #${pid})`);
     return;
@@ -58,7 +57,7 @@ export async function cmdRoutineGet(args) {
   const name = args._[0];
   if (!name) throw new Error("apx routine get: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const r = await http.get(`/projects/${pid}/routines/${name}`);
+  const r = await http.get(`/api/projects/${pid}/routines/${name}`);
   console.log(JSON.stringify(r, null, 2));
 }
 
@@ -88,7 +87,7 @@ export async function cmdRoutineAdd(args) {
     ? args.flags["skip-prompt-on"]
     : undefined;
   const pid = await resolveProjectId(args?.flags?.project);
-  const r = await http.post(`/projects/${pid}/routines`, { name, kind, schedule, spec, permission_mode, allowed_tools, pre_commands, post_commands, skip_prompt_on });
+  const r = await http.post(`/api/projects/${pid}/routines`, { name, kind, schedule, spec, permission_mode, allowed_tools, pre_commands, post_commands, skip_prompt_on });
   console.log(`added routine "${r.name}" (${r.kind}, ${r.schedule}) → next ${r.next_run_at}`);
   if (r.pre_commands?.length)  console.log(`  pre:  ${r.pre_commands.join(", ")}`);
   if (r.post_commands?.length) console.log(`  post: ${r.post_commands.join(", ")}`);
@@ -99,7 +98,7 @@ export async function cmdRoutineRemove(args) {
   const name = args._[0];
   if (!name) throw new Error("apx routine remove: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/routines/${name}`);
+  await http.delete(`/api/projects/${pid}/routines/${name}`);
   console.log(`removed routine "${name}"`);
 }
 
@@ -116,7 +115,7 @@ async function toggle(args, enabled) {
   if (!name) throw new Error(`apx routine ${enabled ? "enable" : "disable"}: missing <name>`);
   const pid = await resolveProjectId(args?.flags?.project);
   await http.post(
-    `/projects/${pid}/routines/${name}/${enabled ? "enable" : "disable"}`
+    `/api/projects/${pid}/routines/${name}/${enabled ? "enable" : "disable"}`
   );
   console.log(`${enabled ? "enabled" : "disabled"} routine "${name}"`);
 }
@@ -125,7 +124,7 @@ export async function cmdRoutineRun(args) {
   const name = args._[0];
   if (!name) throw new Error("apx routine run: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const r = await http.post(`/projects/${pid}/routines/${name}/run`);
+  const r = await http.post(`/api/projects/${pid}/routines/${name}/run`);
   console.log(JSON.stringify(r, null, 2));
 }
 
@@ -134,7 +133,7 @@ export async function cmdRoutineRun(args) {
 async function resolveRoutineRef(pid, refRaw) {
   const ref = String(refRaw || "").trim();
   if (!ref) throw new Error("missing <name|id>");
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   const project = projects.find((p) => String(p.id) === String(pid));
   if (!project) throw new Error(`project #${pid} not found`);
   const storagePath = project.storage_path || projectStorageRoot(project.apx_id);
@@ -183,7 +182,7 @@ export async function cmdRoutineHistory(args) {
   if (!name) throw new Error("apx routine history: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
   const limit = args.flags.n || args.flags.last || "50";
-  const rows = await http.get(`/projects/${pid}/messages?channel=routine&limit=${encodeURIComponent(limit)}`);
+  const rows = await http.get(`/api/projects/${pid}/messages?channel=routine&limit=${encodeURIComponent(limit)}`);
   const filtered = rows
     .filter((r) => r.meta?.routine === name)
     .reverse();

package/src/interfaces/cli/commands/runtime.js

@@ -31,7 +31,7 @@ export async function cmdRun(args) {
     : undefined;
 
   const result = await http.post(
-    `/projects/${pid}/agents/${slug}/runtime`,
+    `/api/projects/${pid}/agents/${slug}/runtime`,
     { runtime, prompt, timeoutMs }
   );
 
@@ -47,7 +47,7 @@ export async function cmdRun(args) {
 }
 
 export async function cmdEnvDetect() {
-  const probes = await http.get("/env/detect");
+  const probes = await http.get("/api/env/detect");
   const groups = { runtime: [], engine: [], tool: [] };
   for (const p of probes) {
     (groups[p.category] || groups.tool).push(p);

package/src/interfaces/cli/commands/search.js

@@ -8,7 +8,6 @@ import { webSearch } from "#core/http-tools/search.js";
 const DIM   = "\x1b[2m";
 const BOLD  = "\x1b[1m";
 const BLUE  = "\x1b[34m";
-const CYAN  = "\x1b[36m";
 const RESET = "\x1b[0m";
 
 export async function cmdSearch(args) {