@agentprojectcontext/apx 1.77.3 → 1.79.0

package/src/host/daemon/api/commitments.js

@@ -0,0 +1,135 @@
+// Commitments — what you promised, to whom, by when. Backed by
+// core/stores/commitments.js (JSONL event log, sibling of tasks).
+//
+//   GET    /commitments                              cross-project
+//                                                    ?state=open|kept|missed|all
+//                                                    &counterparty=X&overdue=1
+//                                                    &due_before=ISO&due_after=ISO
+//                                                    &sort=due|newest&limit=N&offset=N
+//   GET    /projects/:pid/commitments                same filters, one project
+//   POST   /projects/:pid/commitments                { counterparty, body, due?, … }
+//   GET    /projects/:pid/commitments/:id            (id or prefix)
+//   PATCH  /projects/:pid/commitments/:id            { patch: {...} }
+//   POST   /projects/:pid/commitments/:id/kept       { note? }
+//   POST   /projects/:pid/commitments/:id/missed     { note? }
+//   POST   /projects/:pid/commitments/:id/renegotiate { due, note? }
+//   GET    /projects/:pid/commitments-summary
+import {
+  createCommitment,
+  listCommitments,
+  listCommitmentsAcrossProjects,
+  getCommitment,
+  patchCommitment,
+  keepCommitment,
+  missCommitment,
+  renegotiateCommitment,
+  countCommitments,
+} from "#core/stores/commitments.js";
+import { pageEnvelope } from "./shared.js";
+
+/** Shared filter parsing so the cross-project and per-project views cannot drift. */
+function filtersFrom(query) {
+  const { state, counterparty, due_before, due_after, overdue, updated_since, sort } = query;
+  return {
+    state: state === "all" ? "all" : (state || undefined),
+    counterparty: counterparty || undefined,
+    due_before: due_before || undefined,
+    due_after: due_after || undefined,
+    overdue: overdue === "1" || overdue === "true" || undefined,
+    updated_since: updated_since || undefined,
+    sort: sort === "newest" ? "newest" : "due",
+  };
+}
+
+export function register(api, { project, projects }) {
+  api.get("/commitments", (req, res) => {
+    const entries = [];
+    for (const entry of projects.list()) {
+      const p = projects.get(entry.id);
+      if (!p?.storagePath) continue;
+      entries.push({
+        id: entry.id,
+        name: entry.name || entry.path,
+        path: entry.path,
+        storagePath: p.storagePath,
+      });
+    }
+
+    const { commitments, skipped } = listCommitmentsAcrossProjects(entries, filtersFrom(req.query));
+    const envelope = pageEnvelope(commitments, req.query);
+    if (skipped.length) envelope.meta = { ...(envelope.meta || {}), skipped };
+    res.json(envelope);
+  });
+
+  api.get("/projects/:pid/commitments", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    res.json(pageEnvelope(listCommitments(p.storagePath, filtersFrom(req.query)), req.query));
+  });
+
+  api.post("/projects/:pid/commitments", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    try {
+      res.status(201).json(createCommitment(p.storagePath, req.body || {}));
+    } catch (e) {
+      res.status(400).json({ error: e.message });
+    }
+  });
+
+  api.get("/projects/:pid/commitments/:id", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    const row = getCommitment(p.storagePath, req.params.id);
+    if (!row) return res.status(404).json({ error: "commitment not found" });
+    res.json(row);
+  });
+
+  api.patch("/projects/:pid/commitments/:id", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    const { patch } = req.body || {};
+    if (!patch || typeof patch !== "object") {
+      return res.status(400).json({ error: "patch object required" });
+    }
+    const updated = patchCommitment(p.storagePath, req.params.id, patch);
+    if (!updated) return res.status(404).json({ error: "commitment not found" });
+    res.json(updated);
+  });
+
+  api.post("/projects/:pid/commitments/:id/kept", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    const updated = keepCommitment(p.storagePath, req.params.id, req.body?.note || null);
+    if (!updated) return res.status(404).json({ error: "commitment not found" });
+    res.json(updated);
+  });
+
+  api.post("/projects/:pid/commitments/:id/missed", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    const updated = missCommitment(p.storagePath, req.params.id, req.body?.note || null);
+    if (!updated) return res.status(404).json({ error: "commitment not found" });
+    res.json(updated);
+  });
+
+  api.post("/projects/:pid/commitments/:id/renegotiate", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    const { due, note } = req.body || {};
+    if (!due) return res.status(400).json({ error: "a new due date is required" });
+    try {
+      const updated = renegotiateCommitment(p.storagePath, req.params.id, due, note || null);
+      if (!updated) return res.status(404).json({ error: "commitment not found" });
+      res.json(updated);
+    } catch (e) {
+      res.status(400).json({ error: e.message });
+    }
+  });
+
+  api.get("/projects/:pid/commitments-summary", (req, res) => {
+    const p = project(req, res);
+    if (!p) return;
+    res.json(countCommitments(p.storagePath));
+  });
+}

package/src/host/daemon/api/config.js

@@ -27,8 +27,8 @@ function writeProjectJson(root, body) {
   fs.writeFileSync(p, JSON.stringify(body, null, 2) + "\n");
 }
 
-export function register(app, { projects, project }) {
-  app.get("/projects/:pid/config", (req, res) => {
+export function register(api, { projects, project }) {
+  api.get("/projects/:pid/config", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     // Redact secrets (engine api_keys, telegram bot tokens) the same way the
@@ -43,7 +43,7 @@ export function register(app, { projects, project }) {
     });
   });
 
-  app.put("/projects/:pid/config", (req, res) => {
+  api.put("/projects/:pid/config", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const body = req.body || {};
@@ -57,7 +57,7 @@ export function register(app, { projects, project }) {
     res.json({ ok: true });
   });
 
-  app.patch("/projects/:pid/config", (req, res) => {
+  api.patch("/projects/:pid/config", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const { set, unset } = req.body || {};
@@ -78,7 +78,7 @@ export function register(app, { projects, project }) {
     res.json({ ok: true, project_only: redactConfig(cfg) });
   });
 
-  app.put("/projects/:pid/apc-project", (req, res) => {
+  api.put("/projects/:pid/apc-project", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const body = req.body || {};
@@ -93,7 +93,7 @@ export function register(app, { projects, project }) {
     }
   });
 
-  app.patch("/projects/:pid/apc-project", (req, res) => {
+  api.patch("/projects/:pid/apc-project", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     try {

package/src/host/daemon/api/confirm.js

@@ -10,8 +10,8 @@
 
 import { getConfirmationStore } from "#core/confirmation/pending-store.js";
 
-export function register(app) {
-  app.post("/super-agent/confirm/:correlationId", async (req, res) => {
+export function register(api) {
+  api.post("/super-agent/confirm/:correlationId", async (req, res) => {
     const { correlationId } = req.params;
     const { confirmed } = req.body;
 

package/src/host/daemon/api/connections.js

@@ -3,8 +3,8 @@
 import { readAgents } from "#core/apc/parser.js";
 import { readProjectMessages } from "#core/stores/messages.js";
 
-export function register(app, { project }) {
-  app.get("/projects/:pid/agents/:slug/connections", (req, res) => {
+export function register(api, { project }) {
+  api.get("/projects/:pid/agents/:slug/connections", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const agents = readAgents(p.path);

package/src/host/daemon/api/conversations.js

@@ -11,9 +11,9 @@ import { listConversations, readConversation, deleteConversation } from "#core/s
 import { listGlobalThreads, readGlobalThread, deleteGlobalThread } from "#core/stores/messages.js";
 import { compactConversation } from "#core/stores/conversations-compactor.js";
 import { replyAsAgent } from "#core/agent/a2a/reply.js";
-import { nowIso } from "./shared.js";
+import { nowIso, asyncRoute } from "./shared.js";
 
-export function register(app, { project, config }) {
+export function register(api, { project, config }) {
   // The super-agent (default name "apx") is a pseudo-agent: it owns
   // conversations per project but is NOT listed in AGENTS.md. Resolve its slug
   // so `apx conversations list` (which defaults to the super-agent) works
@@ -22,7 +22,7 @@ export function register(app, { project, config }) {
   const agentResolvable = (p, slug) =>
     slug === superAgentSlug() || readAgents(p.path).some((a) => a.slug === slug);
 
-  app.get("/projects/:pid/agents/:slug/conversations", (req, res) => {
+  api.get("/projects/:pid/agents/:slug/conversations", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     if (!agentResolvable(p, req.params.slug))
@@ -30,7 +30,7 @@ export function register(app, { project, config }) {
     res.json(listConversations(p.storagePath, req.params.slug));
   });
 
-  app.get("/projects/:pid/agents/:slug/conversations/:id", (req, res) => {
+  api.get("/projects/:pid/agents/:slug/conversations/:id", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const conv = readConversation(p.storagePath, req.params.slug, req.params.id);
@@ -51,7 +51,7 @@ export function register(app, { project, config }) {
     });
   });
 
-  app.delete("/projects/:pid/agents/:slug/conversations/:id", (req, res) => {
+  api.delete("/projects/:pid/agents/:slug/conversations/:id", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     if (!agentResolvable(p, req.params.slug))
@@ -66,13 +66,13 @@ export function register(app, { project, config }) {
   // in the global per-channel ledger, not in per-agent conversation files.
   // These endpoints surface that ledger as day-threads so the web Chats
   // sidebar can list and reopen them.
-  app.get("/projects/:pid/super-agent/threads", (req, res) => {
+  api.get("/projects/:pid/super-agent/threads", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     res.json(listGlobalThreads());
   });
 
-  app.get("/projects/:pid/super-agent/threads/:channel/:id", (req, res) => {
+  api.get("/projects/:pid/super-agent/threads/:channel/:id", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const thread = readGlobalThread({
@@ -83,7 +83,7 @@ export function register(app, { project, config }) {
     res.json(thread);
   });
 
-  app.delete("/projects/:pid/super-agent/threads/:channel/:id", (req, res) => {
+  api.delete("/projects/:pid/super-agent/threads/:channel/:id", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const ok = deleteGlobalThread({ channel: req.params.channel, date: req.params.id });
@@ -113,17 +113,17 @@ export function register(app, { project, config }) {
     }
   }
 
-  app.post("/projects/:pid/agents/:slug/compact", (req, res) =>
+  api.post("/projects/:pid/agents/:slug/compact", (req, res) =>
     handleCompact(req, res, null)
   );
 
-  app.post(
+  api.post(
     "/projects/:pid/agents/:slug/conversations/:id/compact",
     (req, res) => handleCompact(req, res, req.params.id)
   );
 
   // ---- Agent-to-agent routing ----
-  app.post("/projects/:pid/send", async (req, res) => {
+  api.post("/projects/:pid/send", asyncRoute(async (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const { from, to, body, deliver = false, _depth = 0 } = req.body || {};
@@ -199,5 +199,5 @@ export function register(app, { project, config }) {
     }
 
     res.json({ from, to, body, ts, reply });
-  });
+  }));
 }

package/src/host/daemon/api/deck.js

@@ -30,8 +30,8 @@ function safeProjects(projects) {
   }
 }
 
-export function register(app, ctx) {
-  app.get("/deck/manifest", (_req, res) => {
+export function register(api, ctx) {
+  api.get("/deck/manifest", (_req, res) => {
     const overrides =
       (ctx.config?.deck && typeof ctx.config.deck === "object" && ctx.config.deck.widget_overrides) || {};
     res.json(
@@ -51,7 +51,7 @@ export function register(app, ctx) {
   // Persists the user's enable/disable choice for an external widget into the
   // global config under `deck.widget_overrides[id]`. No-op for unknown widget
   // ids so the deck UI can stay forward-compatible.
-  app.patch("/deck/widgets/:id", async (req, res) => {
+  api.patch("/deck/widgets/:id", async (req, res) => {
     const id = req.params.id;
     if (!TOGGLEABLE_WIDGETS.has(id)) {
       return res.status(404).json({ error: `unknown widget: ${id}` });
@@ -92,7 +92,7 @@ export function register(app, ctx) {
   //
   // Reads the project's AGENTS.md + .apc/memory.md, concatenates them with a
   // small header per file, and ships the result to the daemon-host clipboard.
-  app.post("/projects/:pid/context/copy", async (req, res) => {
+  api.post("/projects/:pid/context/copy", async (req, res) => {
     const project = ctx.project ? ctx.project(req, res) : null;
     if (!project) return; // project() already 404'd
     try {
@@ -106,7 +106,7 @@ export function register(app, ctx) {
   });
 
   // POST /projects/:pid/notes  body: { body: "...", title?: "..." }
-  app.post("/projects/:pid/notes", async (req, res) => {
+  api.post("/projects/:pid/notes", async (req, res) => {
     const project = ctx.project ? ctx.project(req, res) : null;
     if (!project) return;
     const { body, title } = req.body || {};
@@ -129,7 +129,7 @@ export function register(app, ctx) {
   // Light-touch action runner for the deck buttons. Companion clients can't
   // shell out arbitrary commands — body picks from a whitelist of "intent"
   // verbs and the server picks the OS command. See deck-exec.js for the kinds.
-  app.post("/deck/exec", async (req, res) => {
+  api.post("/deck/exec", async (req, res) => {
     const { kind, target, app: appHint, text } = req.body || {};
     if (!kind || typeof kind !== "string") {
       return res.status(400).json({ error: "kind required" });

package/src/host/daemon/api/desktop.js

@@ -25,8 +25,8 @@ import {
   stopDesktop,
 } from "#core/desktop/process.js";
 
-export function register(app, { plugins, config }) {
-  app.get("/desktop/status", (_req, res) => {
+export function register(api, { plugins, config }) {
+  api.get("/desktop/status", (_req, res) => {
     // `running` is the live Electron process (pid file) — the source of truth
     // for the Start/Stop/Restart controls. `connected_clients` is how many of
     // those windows have an open WS to the daemon (a window can be running but
@@ -41,7 +41,7 @@ export function register(app, { plugins, config }) {
 
   // POST /desktop/start — launch the floating window (detached Electron). Same
   // helper the CLI's `apx desktop start` uses. No-op-safe if already running.
-  app.post("/desktop/start", async (_req, res) => {
+  api.post("/desktop/start", async (_req, res) => {
     try {
       const r = await startDesktopDetached({ port: config?.port });
       if (!r.ok) return res.status(500).json({ ok: false, error: r.error });
@@ -53,7 +53,7 @@ export function register(app, { plugins, config }) {
 
   // POST /desktop/stop — terminate the running window (SIGTERM). `stopped` is
   // false when nothing was running.
-  app.post("/desktop/stop", (_req, res) => {
+  api.post("/desktop/stop", (_req, res) => {
     const r = stopDesktop();
     if (!r.ok) return res.status(500).json({ ok: false, error: r.error });
     res.json({ ok: true, stopped: r.stopped });
@@ -66,7 +66,7 @@ export function register(app, { plugins, config }) {
   // the renderer (main.js repositions + reloads webContents), NOT a process
   // kill — the Electron app keeps its tray/shortcut. Returns how many windows
   // were signalled so the UI can tell "reloaded" from "nothing connected".
-  app.post("/desktop/restart", (_req, res) => {
+  api.post("/desktop/restart", (_req, res) => {
     import("../desktop-ws.js")
       .then(({ desktopClients, broadcastDesktop }) => {
         const reloaded = desktopClients.size;
@@ -76,7 +76,7 @@ export function register(app, { plugins, config }) {
       .catch((e) => res.status(500).json({ ok: false, error: e.message }));
   });
 
-  app.post("/desktop/message", async (req, res) => {
+  api.post("/desktop/message", async (req, res) => {
     const { text, previousMessages = [] } = req.body || {};
     if (!text) return res.status(400).json({ error: "text required" });
     // Respond immediately — the real reply goes over WebSocket.
@@ -101,11 +101,11 @@ export function register(app, { plugins, config }) {
   // `apx desktop install/uninstall` CLI commands manage. Web admin uses
   // these so the user can flip the setting without dropping to a terminal.
 
-  app.get("/desktop/autostart", (_req, res) => {
+  api.get("/desktop/autostart", (_req, res) => {
     res.json({ ok: true, enabled: autostartIsOn(), platform: process.platform });
   });
 
-  app.post("/desktop/autostart", (req, res) => {
+  api.post("/desktop/autostart", (req, res) => {
     const { enable } = req.body || {};
     if (typeof enable !== "boolean") {
       return res.status(400).json({ ok: false, error: "body.enable must be a boolean" });

package/src/host/daemon/api/embeddings.js

@@ -18,8 +18,8 @@ import {
 import { embedOne } from "#core/memory/embeddings.js";
 import { reindexMemory } from "#core/memory/index.js";
 
-export function register(app) {
-  app.get("/embeddings/providers", async (_req, res) => {
+export function register(api) {
+  api.get("/embeddings/providers", async (_req, res) => {
     try {
       const cfg = readConfig();
       const embedCfg = embeddingsConfig(cfg);
@@ -34,7 +34,7 @@ export function register(app) {
     }
   });
 
-  app.post("/embeddings/test", async (req, res) => {
+  api.post("/embeddings/test", async (req, res) => {
     try {
       const { text, provider } = req.body || {};
       const sample = typeof text === "string" && text.trim()
@@ -54,7 +54,7 @@ export function register(app) {
     }
   });
 
-  app.post("/embeddings/reindex", async (_req, res) => {
+  api.post("/embeddings/reindex", async (_req, res) => {
     try {
       const result = await reindexMemory({ config: readConfig() });
       res.json({ ok: true, ...result });

package/src/host/daemon/api/engines.js

@@ -5,15 +5,16 @@
 import { ENGINE_IDS } from "#core/engines/index.js";
 import { listModels } from "#core/engines/catalog.js";
 import { ENGINE_PRESETS } from "#core/engines/presets.js";
+import { asyncRoute } from "./shared.js";
 
-export function register(app, { config }) {
-  app.get("/engines", (_req, res) => res.json({ engines: ENGINE_IDS }));
+export function register(api, { config }) {
+  api.get("/engines", (_req, res) => res.json({ engines: ENGINE_IDS }));
 
   // Curated fallback catalog shared with the CLI wizard. The web hydrates its
   // provider forms from here so model lists never drift between surfaces.
-  app.get("/engines/presets", (_req, res) => res.json({ presets: ENGINE_PRESETS }));
+  api.get("/engines/presets", (_req, res) => res.json({ presets: ENGINE_PRESETS }));
 
-  app.post("/engines/models", async (req, res) => {
+  api.post("/engines/models", asyncRoute(async (req, res) => {
     const b = req.body || {};
     const engine = String(b.engine || "").toLowerCase();
     if (!engine) return res.status(400).json({ models: [], error: "engine requerido" });
@@ -25,13 +26,13 @@ export function register(app, { config }) {
     const out = await listModels(engine, b.base_url, apiKey);
     if (out.error) return res.status(502).json({ engine, models: [], error: out.error });
     res.json({ engine, models: out.models.sort((x, y) => x.localeCompare(y)) });
-  });
+  }));
 
   // Legacy GET (Ollama, no auth) — kept for back-compat.
-  app.get("/engines/models", async (req, res) => {
+  api.get("/engines/models", asyncRoute(async (req, res) => {
     const engine = String(req.query.engine || "").toLowerCase();
     const out = await listModels(engine, String(req.query.base_url || ""), "");
     if (out.error) return res.status(502).json({ engine, models: [], error: out.error });
     res.json({ engine, models: out.models });
-  });
+  }));
 }

package/src/host/daemon/api/exec.js

@@ -14,6 +14,7 @@ import {
   readConversation,
   setStatus,
 } from "#core/stores/conversations.js";
+import { asyncRoute } from "./shared.js";
 
 // Pick a model for a direct agent chat: explicit override → agent's own model →
 // super-agent default (resolved via the same router the super-agent uses, so
@@ -29,8 +30,8 @@ async function pickAgentModel({ modelOverride, agent, config }) {
   }
 }
 
-export function register(app, { projects, project, config }) {
-  app.post("/projects/:pid/agents/:slug/exec", async (req, res) => {
+export function register(api, { projects, project, config }) {
+  api.post("/projects/:pid/agents/:slug/exec", async (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const {
@@ -107,7 +108,7 @@ export function register(app, { projects, project, config }) {
     }
   });
 
-  app.post("/projects/:pid/agents/:slug/chat", async (req, res) => {
+  api.post("/projects/:pid/agents/:slug/chat", asyncRoute(async (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const {
@@ -206,5 +207,5 @@ export function register(app, { projects, project, config }) {
     } catch (e) {
       res.status(500).json({ error: e.message });
     }
-  });
+  }));
 }

package/src/host/daemon/api/files-project.js

@@ -27,8 +27,8 @@ function scopeOpts(p, scope) {
   return { subdir: "", scope: "project" };
 }
 
-export function register(app, { project }) {
-  app.get("/projects/:pid/fs/tree", (req, res) => {
+export function register(api, { project }) {
+  api.get("/projects/:pid/fs/tree", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const { subdir, scope } = scopeOpts(p, req.query?.scope);
@@ -39,7 +39,7 @@ export function register(app, { project }) {
     }
   });
 
-  app.get("/projects/:pid/fs/file", (req, res) => {
+  api.get("/projects/:pid/fs/file", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const rel = req.query?.path;
@@ -54,7 +54,7 @@ export function register(app, { project }) {
     }
   });
 
-  app.put("/projects/:pid/fs/file", (req, res) => {
+  api.put("/projects/:pid/fs/file", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const { path: rel, content, scope } = req.body || {};
@@ -69,7 +69,7 @@ export function register(app, { project }) {
     }
   });
 
-  app.post("/projects/:pid/fs/dir", (req, res) => {
+  api.post("/projects/:pid/fs/dir", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const { path: rel, scope } = req.body || {};
@@ -82,7 +82,7 @@ export function register(app, { project }) {
     }
   });
 
-  app.delete("/projects/:pid/fs/entry", (req, res) => {
+  api.delete("/projects/:pid/fs/entry", (req, res) => {
     const p = project(req, res);
     if (!p) return;
     const rel = req.query?.path;

package/src/host/daemon/api/health.js

@@ -1,6 +1,6 @@
 // GET /health — unauthenticated; everything else requires the bearer token.
-export function register(app, { version, startedAt }) {
-  app.get("/health", (_req, res) => {
+export function register(api, { version, startedAt }) {
+  api.get("/health", (_req, res) => {
     res.json({
       status: "ok",
       version,

package/src/host/daemon/api/identity.js

@@ -11,12 +11,12 @@ const ALLOWED_KEYS = new Set([
   "timezone",
 ]);
 
-export function register(app) {
-  app.get("/identity", (_req, res) => {
+export function register(api) {
+  api.get("/identity", (_req, res) => {
     res.json(readIdentity() || {});
   });
 
-  app.patch("/identity", (req, res) => {
+  api.patch("/identity", (req, res) => {
     const body = req.body || {};
     const patch = {};
     for (const [k, v] of Object.entries(body)) {

package/src/host/daemon/api/inbox.js

@@ -8,8 +8,8 @@ import { readConfig } from "#core/config/index.js";
 import { resolveAgentName } from "#core/identity/index.js";
 import { pageEnvelope } from "./shared.js";
 
-export function register(app, { projects }) {
-  app.get("/inbox", (req, res) => {
+export function register(api, { projects }) {
+  api.get("/inbox", (req, res) => {
     try {
       const entries = [];
       for (const entry of projects.list()) {