@agentprojectcontext/apx 1.77.3 → 1.79.0

package/src/interfaces/cli/commands/artifact.js

@@ -51,13 +51,13 @@ export async function cmdArtifactCreate(args) {
   if (!name) throw new Error("apx artifact create: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
   const content = args.flags.content && args.flags.content !== true ? String(args.flags.content) : "";
-  const r = await http.post(`/projects/${pid}/artifacts`, { name, content });
+  const r = await http.post(`/api/projects/${pid}/artifacts`, { name, content });
   console.log(r.path);
 }
 
 export async function cmdArtifactList(args = {}) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const rows = await http.get(`/projects/${pid}/artifacts`);
+  const rows = await http.get(`/api/projects/${pid}/artifacts`);
   if (rows.length === 0) {
     console.log(`(no artifacts in project #${pid})`);
     return;
@@ -77,7 +77,7 @@ export async function cmdArtifactShow(args) {
   const name = args._[0];
   if (!name) throw new Error("apx artifact show: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const r = await http.get(`/projects/${pid}/artifacts/${encodeURIComponent(name)}`);
+  const r = await http.get(`/api/projects/${pid}/artifacts/${encodeURIComponent(name)}`);
   process.stdout.write(r.content);
 }
 
@@ -85,7 +85,7 @@ export async function cmdArtifactRemove(args) {
   const name = args._[0];
   if (!name) throw new Error("apx artifact remove: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/artifacts/${encodeURIComponent(name)}`);
+  await http.delete(`/api/projects/${pid}/artifacts/${encodeURIComponent(name)}`);
   console.log(`removed artifact "${name}"`);
 }
 
@@ -106,7 +106,7 @@ export async function cmdArtifactRun(args) {
   // Pull the artifact record from the daemon for the absolute path.
   let entry;
   try {
-    entry = await http.get(`/projects/${pid}/artifacts/${encodeURIComponent(name)}`);
+    entry = await http.get(`/api/projects/${pid}/artifacts/${encodeURIComponent(name)}`);
   } catch (e) {
     throw new Error(`artifact "${name}" not found in project #${pid}: ${e.message}`);
   }
@@ -170,7 +170,7 @@ export async function cmdArtifactPreview(args) {
   let view;
   try {
     view = await http.post(
-      `/projects/${pid}/artifacts/${encodeURIComponent(name)}/preview`,
+      `/api/projects/${pid}/artifacts/${encodeURIComponent(name)}/preview`,
       { watch }
     );
   } catch (e) {
@@ -196,7 +196,7 @@ export async function cmdArtifactPreview(args) {
 async function sharePreview(previewId, { open: doOpen = false } = {}) {
   let tunnel;
   try {
-    tunnel = await http.post(`/previews/${previewId}/tunnel`, {});
+    tunnel = await http.post(`/api/previews/${previewId}/tunnel`, {});
   } catch (e) {
     throw new Error(`could not create tunnel: ${e.message}`);
   }
@@ -217,7 +217,7 @@ export async function cmdArtifactShare(args) {
   const watch = args.flags["no-watch"] ? false : true;
 
   const view = await http.post(
-    `/projects/${pid}/artifacts/${encodeURIComponent(name)}/preview`,
+    `/api/projects/${pid}/artifacts/${encodeURIComponent(name)}/preview`,
     { watch }
   );
   console.log(`sharing ${view.kind} artifact "${view.name}"`);
@@ -227,8 +227,8 @@ export async function cmdArtifactShare(args) {
 }
 
 // `apx artifact previews` — list running preview servers.
-export async function cmdArtifactPreviews(args = {}) {
-  const rows = await http.get(`/previews`);
+export async function cmdArtifactPreviews(_args = {}) {
+  const rows = await http.get(`/api/previews`);
   if (!rows.length) {
     console.log("(no running previews)");
     return;
@@ -247,13 +247,13 @@ export async function cmdArtifactPreviews(args = {}) {
 // `apx artifact stop <id> | --all` — stop preview server(s).
 export async function cmdArtifactStop(args) {
   if (args.flags.all) {
-    const rows = await http.get(`/previews`);
-    for (const r of rows) await http.delete(`/previews/${r.id}`);
+    const rows = await http.get(`/api/previews`);
+    for (const r of rows) await http.delete(`/api/previews/${r.id}`);
     console.log(`stopped ${rows.length} preview(s)`);
     return;
   }
   const id = args._[0];
   if (!id) throw new Error("apx artifact stop: missing <id> (or --all)");
-  await http.delete(`/previews/${encodeURIComponent(id)}`);
+  await http.delete(`/api/previews/${encodeURIComponent(id)}`);
   console.log(`stopped preview ${id}`);
 }

package/src/interfaces/cli/commands/chat.js

@@ -42,7 +42,7 @@ export async function cmdChat(args) {
       if (convId) body.conversation_id = convId;
       if (overrideModel) body.model = overrideModel;
 
-      const result = await http.post(`/projects/${pid}/agents/${slug}/chat`, body);
+      const result = await http.post(`/api/projects/${pid}/agents/${slug}/chat`, body);
       convId = result.conversation_id;
       process.stdout.write("\n" + result.text + "\n\n");
     } catch (e) {
@@ -61,7 +61,7 @@ export async function cmdConversationsList(args) {
   // No slug → the super-agent (default conversational agent).
   const slug = args._[0] || superAgentSlug();
   const pid = await resolveProjectId(args?.flags?.project);
-  const rows = await http.get(`/projects/${pid}/agents/${slug}/conversations`);
+  const rows = await http.get(`/api/projects/${pid}/agents/${slug}/conversations`);
   if (rows.length === 0) {
     console.log(`(no conversations for ${slug})`);
     return;
@@ -85,7 +85,7 @@ export async function cmdConversationsGet(args) {
   else { slug = superAgentSlug(); id = args._[0]; }
   if (!id) throw new Error("apx conversations get: usage: apx conversations get [<agent>] <id>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const conv = await http.get(`/projects/${pid}/agents/${slug}/conversations/${id}`);
+  const conv = await http.get(`/api/projects/${pid}/agents/${slug}/conversations/${id}`);
   process.stdout.write(`# Conversation ${id} (${slug})\n`);
   for (const t of conv.turns) {
     process.stdout.write(`\n## ${t.role} — ${t.ts}\n${t.content}\n`);

package/src/interfaces/cli/commands/command.js

@@ -18,7 +18,7 @@ async function resolveCommandRoot(args = {}) {
   const explicitProject = args?.flags?.project;
   if (explicitProject !== undefined && explicitProject !== null && explicitProject !== "") {
     const pid = await resolveProjectId(explicitProject);
-    const projects = await http.get("/projects");
+    const projects = await http.get("/api/projects");
     const project = projects.find((p) => p.id === pid);
     if (!project) throw new Error(`project ${pid} not found`);
     return project.path;
@@ -28,7 +28,7 @@ async function resolveCommandRoot(args = {}) {
   if (root) return root;
 
   const pid = await resolveProjectId();
-  const projects = await http.get("/projects");
+  const projects = await http.get("/api/projects");
   const project = projects.find((p) => p.id === pid);
   if (!project) throw new Error(`project ${pid} not found`);
   return project.path;

package/src/interfaces/cli/commands/commitment.js

@@ -0,0 +1,154 @@
+// apx commitment — what you promised, to whom, by when.
+//
+//   apx commitment add "<what>" --to "<person>" [--due 2026-05-30] [--project X]
+//                              [--channel telegram] [--ref <message id>]
+//   apx commitment list        [--all | --project X] [--to X] [--state open|kept|missed|all]
+//                              [--overdue] [--due-before ISO] [--limit N]
+//   apx commitment show <id>   [--project X]
+//   apx commitment kept <id>   [--project X] [--note "..."]
+//   apx commitment missed <id> [--project X] [--note "..."]
+//   apx commitment renegotiate <id> --due <ISO> [--project X] [--note "..."]
+//
+// A task is something to do; a commitment is something you promised a person.
+// Kept separate on purpose — see core/stores/commitments.js.
+import { http } from "../http.js";
+import { resolveProjectId } from "./project.js";
+
+export const COMMITMENT_USAGE = {
+  add:         'apx commitment add "<what>" --to "<person>" [--due ISO] [--project X] [--channel C] [--ref R]',
+  list:        "apx commitment list [--all | --project X] [--to X] [--state open|kept|missed|all] [--overdue] [--due-before ISO] [--limit N]",
+  show:        "apx commitment show <id> [--project X]",
+  kept:        'apx commitment kept <id> [--project X] [--note "..."]',
+  missed:      'apx commitment missed <id> [--project X] [--note "..."]',
+  renegotiate: 'apx commitment renegotiate <id> --due <ISO> [--project X] [--note "..."]',
+};
+
+function fail(sub, msg) {
+  console.error(`apx commitment ${sub}: ${msg}`);
+  console.error(`Usage: ${COMMITMENT_USAGE[sub]}`);
+  process.exit(1);
+}
+
+function shortDate(iso) {
+  if (!iso) return "";
+  return String(iso).replace(/T/, " ").replace(/Z$/, "").slice(0, 16);
+}
+
+/** Is this promise past its date and still open? */
+function isOverdue(c) {
+  return c.state === "open" && c.due && c.due < new Date().toISOString();
+}
+
+function renderTable(rows, { showProject = false } = {}) {
+  if (!rows.length) {
+    console.log("(no commitments)");
+    return;
+  }
+  const idW = Math.max(...rows.map((r) => String(r.id).length), 2);
+  const whoW = Math.min(Math.max(...rows.map((r) => String(r.counterparty || "").length), 3), 20);
+  const projW = showProject
+    ? Math.min(Math.max(...rows.map((r) => String(r.project_name || "").length), 7), 18)
+    : 0;
+
+  for (const c of rows) {
+    const proj = showProject
+      ? String(c.project_name || "").slice(0, projW).padEnd(projW) + "  "
+      : "";
+    // The flag carries the whole point of the type: a broken promise should be
+    // impossible to skim past.
+    const flag =
+      c.state === "kept" ? "✓" :
+      c.state === "missed" ? "✗" :
+      isOverdue(c) ? "!" : " ";
+    const moved = c.renegotiated_count ? ` (moved ×${c.renegotiated_count})` : "";
+    console.log(
+      `${flag} ${String(c.id).padEnd(idW)}  ${proj}` +
+      `${String(c.counterparty || "").slice(0, whoW).padEnd(whoW)}  ` +
+      `${(c.due ? shortDate(c.due).slice(0, 10) : "—").padEnd(10)}  ` +
+      `${String(c.body || "").slice(0, 48)}${moved}`
+    );
+  }
+  const overdue = rows.filter(isOverdue).length;
+  if (overdue) console.log(`\n${overdue} past their date.`);
+}
+
+export async function cmdCommitmentAdd(args) {
+  const body = args?._?.[0];
+  const to = args?.flags?.to;
+  if (!body) fail("add", "what you promised is required");
+  if (!to) fail("add", "--to <person> is required — without a counterparty this is a task");
+
+  const pid = await resolveProjectId(args?.flags?.project);
+  const created = await http.post(`/api/projects/${pid}/commitments`, {
+    counterparty: to,
+    body,
+    due: args?.flags?.due || null,
+    origin_channel: args?.flags?.channel || "cli",
+    origin_message_ref: args?.flags?.ref || null,
+  });
+  console.log(`${created.id}  → ${created.counterparty}${created.due ? ` by ${shortDate(created.due).slice(0, 10)}` : ""}`);
+  console.log(`  ${created.body}`);
+}
+
+export async function cmdCommitmentList(args) {
+  const f = args?.flags || {};
+  const q = new URLSearchParams();
+  if (f.state) q.set("state", f.state);
+  if (f.to) q.set("counterparty", f.to);
+  if (f.overdue) q.set("overdue", "1");
+  if (f["due-before"]) q.set("due_before", f["due-before"]);
+  if (f.limit) q.set("limit", f.limit);
+
+  if (f.all) {
+    const { data } = await http.get(`/api/commitments?${q.toString()}`);
+    renderTable(data || [], { showProject: true });
+    return;
+  }
+  const pid = await resolveProjectId(args?.flags?.project);
+  const { data } = await http.get(`/api/projects/${pid}/commitments?${q.toString()}`);
+  renderTable(data || []);
+}
+
+export async function cmdCommitmentShow(args) {
+  const id = args?._?.[0];
+  if (!id) fail("show", "id required");
+  const pid = await resolveProjectId(args?.flags?.project);
+  const c = await http.get(`/api/projects/${pid}/commitments/${encodeURIComponent(id)}`);
+  console.log(`${c.id}  [${c.state}${isOverdue(c) ? " · OVERDUE" : ""}]`);
+  console.log(`  To:        ${c.counterparty}`);
+  console.log(`  What:      ${c.body}`);
+  console.log(`  Promised:  ${shortDate(c.promised_at)}${c.origin_channel ? ` on ${c.origin_channel}` : ""}`);
+  console.log(`  Due:       ${c.due ? shortDate(c.due) : "(no date)"}`);
+  if (c.note) console.log(`  Note:      ${c.note}`);
+  // The history is the relationship record — print it, it is the reason the
+  // renegotiate event exists at all.
+  for (const h of c.history || []) {
+    console.log(`  Moved:     ${shortDate(h.due)?.slice(0, 10) || "?"} → (on ${shortDate(h.moved_at)})${h.note ? ` — ${h.note}` : ""}`);
+  }
+}
+
+async function close(args, sub) {
+  const id = args?._?.[0];
+  if (!id) fail(sub, "id required");
+  const pid = await resolveProjectId(args?.flags?.project);
+  const c = await http.post(`/api/projects/${pid}/commitments/${encodeURIComponent(id)}/${sub}`, {
+    note: args?.flags?.note || null,
+  });
+  console.log(`${c.id} → ${c.state}`);
+}
+
+export const cmdCommitmentKept = (args) => close(args, "kept");
+export const cmdCommitmentMissed = (args) => close(args, "missed");
+
+export async function cmdCommitmentRenegotiate(args) {
+  const id = args?._?.[0];
+  const due = args?.flags?.due;
+  if (!id) fail("renegotiate", "id required");
+  if (!due) fail("renegotiate", "--due <ISO> is required — a promise with no new date is a promise that vanished");
+  const pid = await resolveProjectId(args?.flags?.project);
+  const c = await http.post(`/api/projects/${pid}/commitments/${encodeURIComponent(id)}/renegotiate`, {
+    due,
+    note: args?.flags?.note || null,
+  });
+  console.log(`${c.id} → new date ${shortDate(c.due).slice(0, 10)} (moved ×${c.renegotiated_count})`);
+}

package/src/interfaces/cli/commands/config.js

@@ -1,7 +1,7 @@
 import { http } from "../http.js";
 import { resolveProjectId } from "./project.js";
 import { readConfig, writeConfig } from "#core/config/index.js";
-import { PERMISSION_MODES, DEFAULT_PERMISSION_MODE } from "#core/constants/permissions.js";
+import { DEFAULT_PERMISSION_MODE } from "#core/constants/permissions.js";
 
 function parseValue(raw) {
   // best-effort: try JSON first (covers numbers, bools, objects, arrays, null,
@@ -15,7 +15,7 @@ function parseValue(raw) {
 
 export async function cmdConfigShow(args) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const data = await http.get(`/projects/${pid}/config`);
+  const data = await http.get(`/api/projects/${pid}/config`);
   if (args.flags.effective) {
     process.stdout.write(JSON.stringify(data.effective, null, 2) + "\n");
     return;
@@ -45,7 +45,7 @@ export async function cmdConfigSet(args) {
   }
   const pid = await resolveProjectId(args?.flags?.project);
   const value = parseValue(valueRaw);
-  await http.patch(`/projects/${pid}/config`, { set: { [key]: value } });
+  await http.patch(`/api/projects/${pid}/config`, { set: { [key]: value } });
   console.log(`set ${key} = ${JSON.stringify(value)}`);
 }
 
@@ -53,7 +53,7 @@ export async function cmdConfigUnset(args) {
   const key = args._[0];
   if (!key) throw new Error("apx config unset: usage: apx config unset <key.path>");
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.patch(`/projects/${pid}/config`, { unset: [key] });
+  await http.patch(`/api/projects/${pid}/config`, { unset: [key] });
   console.log(`unset ${key}`);
 }
 

package/src/interfaces/cli/commands/daemon.js

@@ -1,7 +1,7 @@
 import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
+import { PID_PATH, LOG_PATH } from "#core/config/paths.js";
 import { ensureDaemon, http } from "../http.js";
+import { installService, uninstallService, serviceStatus } from "#core/daemon/service.js";
 
 // Wait until nothing answers on the daemon port (old process fully exited and
 // released it), so a fresh start can bind it. Resolves true when down.
@@ -13,8 +13,8 @@ async function waitForPortReleased({ tries = 40, intervalMs = 150 } = {}) {
   return false;
 }
 
-const PID_PATH = path.join(os.homedir(), ".apx", "daemon.pid");
-const LOG_PATH = path.join(os.homedir(), ".apx", "daemon.log");
+
+
 
 // ── ANSI helpers ─────────────────────────────────────────────────────────────
 const c = {
@@ -56,8 +56,8 @@ function debugRaw(label, data) {
 export async function cmdDaemonStart(args = {}) {
   const debug = args.flags?.debug;
   await ensureDaemon();
-  const status = await http.get("/health");
-  if (debug) debugRaw("/health", status);
+  const status = await http.get("/api/health");
+  if (debug) debugRaw("/api/health", status);
   console.log(
     `\n  ${fmt.green("●")} ${fmt.bold("apx daemon")} ${fmt.dim("v" + status.version)}` +
     `  ${fmt.gray("·")}  ${fmt.cyan("port")} ${status.port ?? (process.env.APX_PORT || 7430)}` +
@@ -77,13 +77,13 @@ export async function cmdDaemonStatus(args = {}) {
     process.exit(1);
   }
 
-  const h        = await http.get("/health",   { autoStart: false });
-  const projects = await http.get("/projects", { autoStart: false });
+  const h        = await http.get("/api/health",   { autoStart: false });
+  const projects = await http.get("/api/projects", { autoStart: false });
   const pid      = fs.existsSync(PID_PATH) ? fs.readFileSync(PID_PATH, "utf8").trim() : "?";
 
   if (debug) {
-    debugRaw("/health",   h);
-    debugRaw("/projects", projects);
+    debugRaw("/api/health",   h);
+    debugRaw("/api/projects", projects);
   }
 
   console.log(
@@ -113,8 +113,8 @@ export async function cmdDaemonReload(args = {}) {
     console.log(`\n  ${fmt.yellow("○")} ${fmt.bold("apx daemon")}  ${fmt.dim("not running — start first")}\n`);
     process.exit(1);
   }
-  const res = await http.post("/admin/reload", undefined, { autoStart: false });
-  if (debug) debugRaw("/admin/reload", res);
+  const res = await http.post("/api/admin/reload", undefined, { autoStart: false });
+  if (debug) debugRaw("/api/admin/reload", res);
   console.log(`\n  ${fmt.green("↻")} ${fmt.bold("config reloaded")}`);
   if (res.super_agent_model) console.log(fmt.kv("model", fmt.cyan(res.super_agent_model)));
   if (res.fallback_order?.length) console.log(fmt.kv("fallback", fmt.cyan(res.fallback_order.join(" → "))));
@@ -129,8 +129,8 @@ export async function cmdDaemonRestart(args = {}) {
     // Ask the daemon to shut down cleanly; fall back to a PID kill if the
     // HTTP shutdown route is unreachable (same fallback as `stop`).
     try {
-      const res = await http.post("/admin/shutdown", undefined, { autoStart: false });
-      if (debug) debugRaw("/admin/shutdown", res);
+      const res = await http.post("/api/admin/shutdown", undefined, { autoStart: false });
+      if (debug) debugRaw("/api/admin/shutdown", res);
     } catch {
       if (fs.existsSync(PID_PATH)) {
         try {
@@ -154,8 +154,8 @@ export async function cmdDaemonRestart(args = {}) {
   }
 
   await ensureDaemon({ silent: true });
-  const status = await http.get("/health", { autoStart: false });
-  if (debug) debugRaw("/health", status);
+  const status = await http.get("/api/health", { autoStart: false });
+  if (debug) debugRaw("/api/health", status);
   console.log(
     `\n  ${fmt.green("●")} ${fmt.bold("apx daemon")} ${fmt.dim("v" + status.version)}` +
     `  ${fmt.gray("·")}  ${fmt.green(wasRunning ? "restarted" : "started")}` +
@@ -173,8 +173,8 @@ export async function cmdDaemonStop(args = {}) {
   }
 
   try {
-    const res = await http.post("/admin/shutdown", undefined, { autoStart: false });
-    if (debug) debugRaw("/admin/shutdown", res);
+    const res = await http.post("/api/admin/shutdown", undefined, { autoStart: false });
+    if (debug) debugRaw("/api/admin/shutdown", res);
     console.log(`\n  ${fmt.red("○")} ${fmt.bold("apx daemon")}  ${fmt.dim("stopped")}\n`);
   } catch {
     if (fs.existsSync(PID_PATH)) {
@@ -245,3 +245,59 @@ export async function cmdDaemonLogs(args) {
     return new Promise(() => {});
   }
 }
+
+// ── Service (opt-in supervision) ─────────────────────────────────────────────
+
+export async function cmdDaemonInstallService() {
+  const before = serviceStatus();
+  if (!before.supervised && before.platform !== "win32") {
+    console.error(`apx daemon install-service: ${before.note || "not supported here"}`);
+    process.exit(1);
+  }
+
+  const r = installService();
+  if (!r.ok) {
+    console.error(`apx daemon install-service: ${r.error}`);
+    process.exit(1);
+  }
+
+  console.log(`\n  ${fmt.green("●")} ${fmt.bold("apx daemon")} is now a service`);
+  console.log(`  ${fmt.gray("·")}  ${fmt.cyan("unit")}  ${r.path}`);
+  if (r.log) console.log(`  ${fmt.gray("·")}  ${fmt.cyan("log")}   ${r.log}`);
+  console.log("");
+  if (r.supervised) {
+    console.log("  If it dies, it comes back. It survives a reboot.");
+  } else {
+    // Never let the headline promise more than the platform delivers.
+    console.log(`  ${fmt.yellow("Note")}: ${r.note}`);
+  }
+  if (r.note && r.supervised) console.log(`  ${fmt.yellow("Note")}: ${r.note}`);
+  console.log(`\n  Undo any time: ${fmt.cyan("apx daemon uninstall-service")}\n`);
+}
+
+export async function cmdDaemonUninstallService() {
+  const r = uninstallService();
+  if (!r.ok) {
+    console.error(`apx daemon uninstall-service: ${r.error}`);
+    process.exit(1);
+  }
+  console.log(r.removed
+    ? `\n  service removed — ${r.path}\n  The daemon keeps working; it just is not supervised any more.\n`
+    : "\n  no service was installed — nothing to remove\n");
+}
+
+export async function cmdDaemonServiceStatus() {
+  const s = serviceStatus();
+  if (!s.installed) {
+    console.log(`\n  daemon service: ${fmt.dim("not installed")}`);
+    console.log("  The daemon starts when a command needs it, and nothing restarts it if it dies.");
+    console.log(`  Install: ${fmt.cyan("apx daemon install-service")}\n`);
+    if (s.note) console.log(`  ${fmt.yellow("Note")}: ${s.note}\n`);
+    return;
+  }
+  console.log(`\n  daemon service: ${fmt.green("installed")}  ${fmt.gray("·")}  ${s.path}`);
+  console.log(s.supervised
+    ? "  Supervised: it restarts on its own and survives a reboot."
+    : `  ${fmt.yellow("Not supervised")}: ${s.note}`);
+  console.log("");
+}

package/src/interfaces/cli/commands/desktop.js

@@ -1,8 +1,8 @@
 // apx desktop — launch/manage the floating voice desktop window (Electron).
 import fs from "node:fs";
-import os from "node:os";
 import path from "node:path";
-import { spawn, execFileSync } from "node:child_process";
+import { DESKTOP_LOG_PATH, CONFIG_PATH } from "#core/config/paths.js";
+import { spawn } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { http } from "../http.js";
 import {
@@ -11,18 +11,11 @@ import {
   autostartUninstall,
   getApxRunner as _getApxRunner,
   buildPlist as _buildPlist,
-  MAC_PLIST_PATH,
-  LINUX_DESKTOP_PATH,
-  WIN_RUN_KEY,
-  WIN_RUN_NAME,
 } from "#core/desktop/autostart.js";
 import {
   DESKTOP_MAIN,
-  readPid, writePid, clearPid, pidAlive, isDesktopRunning,
-  findElectron as _findElectron,
+  readPid, writePid, clearPid, pidAlive, findElectron as _findElectron,
   buildElectronSpawn as _buildElectronSpawn,
-  startDesktopDetached,
-  stopDesktop,
 } from "#core/desktop/process.js";
 
 // Re-exports — kept so existing tests (tests/desktop-autostart.test.js)
@@ -75,13 +68,13 @@ export async function cmdDesktopStart(args = {}) {
   // Get daemon port from running daemon or env
   let daemonPort = process.env.APX_PORT || "7430";
   try {
-    const health = await http.get("/health").catch(() => null);
+    const health = await http.get("/api/health").catch(() => null);
     if (health?.port) daemonPort = String(health.port);
   } catch {}
 
   const { cmd, argv } = buildElectronSpawn(electronDescriptor, DESKTOP_MAIN, daemonPort);
 
-  const logFile = path.join(os.homedir(), ".apx", "desktop.log");
+  const logFile = DESKTOP_LOG_PATH;
 
   if (debug) {
     // ── Debug mode: start desktop normally, then tail -f the log ─────────
@@ -191,7 +184,7 @@ export async function cmdDesktopStart(args = {}) {
   // Read configured shortcut (if any) for display
   let shortcutHint = "⌘G (macOS) / Ctrl+G (Win/Linux)";
   try {
-    const cfg = JSON.parse(fs.readFileSync(path.join(os.homedir(), ".apx", "config.json"), "utf8"));
+    const cfg = JSON.parse(fs.readFileSync(CONFIG_PATH, "utf8"));
     const sc = cfg?.desktop?.shortcut || cfg?.overlay?.shortcut;
     if (sc) shortcutHint = sc;
   } catch {}
@@ -254,7 +247,7 @@ export async function cmdDesktopStatus(_args = {}) {
 
   let daemonClients = 0;
   try {
-    const s = await http.get("/desktop/status").catch(() => null);
+    const s = await http.get("/api/desktop/status").catch(() => null);
     daemonClients = s?.connected_clients ?? 0;
   } catch {}
 

package/src/interfaces/cli/commands/exec.js

@@ -171,7 +171,7 @@ export async function cmdExec(args) {
     let result;
     try {
       result = await http.streamPost(
-        `/projects/${pid}/super-agent/chat/stream`,
+        `/api/projects/${pid}/super-agent/chat/stream`,
         { ...body, confirm: false },
         (event) => status.set(labelForEvent(event))
       );
@@ -187,7 +187,7 @@ export async function cmdExec(args) {
     return;
   }
 
-  const result = await http.post(`/projects/${pid}/agents/${slug}/exec`, body);
+  const result = await http.post(`/api/projects/${pid}/agents/${slug}/exec`, body);
 
   process.stdout.write(result.text + "\n");
   if (process.stderr.isTTY || args.flags.verbose) {

package/src/interfaces/cli/commands/log.js

@@ -10,11 +10,10 @@
 // here, regardless of which module produced it (telegram, whisper, super-agent…).
 
 import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
+import { APX_LOG_PATH, ERROR_TRACE_PATH } from "#core/config/paths.js";
+
+
 
-const APX_LOG_PATH = path.join(os.homedir(), ".apx", "logs", "apx.log");
-const ERROR_TRACE_PATH = path.join(os.homedir(), ".apx", "logs", "errors.jsonl");
 
 const c = {
   reset: "\x1b[0m", bold: "\x1b[1m", dim: "\x1b[2m",

package/src/interfaces/cli/commands/mcp.js

@@ -41,7 +41,7 @@ function sourceToScope(source) {
 export async function cmdMcpList(args = {}) {
   const scope = resolveListScope(args?.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const mcps = await http.get(`/projects/${pid}/mcps`);
+  const mcps = await http.get(`/api/projects/${pid}/mcps`);
   const filtered = scope === "all"
     ? mcps
     : mcps.filter((m) => sourceToScope(m.source) === scope);
@@ -90,7 +90,7 @@ export async function cmdMcpAdd(args) {
 
   const scope = resolveWriteScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  const result = await http.post(`/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
+  const result = await http.post(`/api/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
     name,
     command,
     args: mcpArgs,
@@ -105,7 +105,7 @@ export async function cmdMcpRemove(args) {
   if (!name) throw new Error("apx mcp remove: missing <name>");
   const scope = resolveWriteScope(args.flags);
   const pid = await resolveProjectId(args?.flags?.project);
-  await http.delete(`/projects/${pid}/mcps/${name}?scope=${encodeURIComponent(scope)}`);
+  await http.delete(`/api/projects/${pid}/mcps/${name}?scope=${encodeURIComponent(scope)}`);
   console.log(`Removed MCP "${name}" (scope: ${scope})`);
 }
 
@@ -120,7 +120,7 @@ async function toggleEnabled(args, enabled) {
   const name = args._[0];
   if (!name) throw new Error(`apx mcp ${enabled ? "enable" : "disable"}: missing <name>`);
   const pid = await resolveProjectId(args?.flags?.project);
-  const all = await http.get(`/projects/${pid}/mcps`);
+  const all = await http.get(`/api/projects/${pid}/mcps`);
   const m = all.find((x) => x.name === name);
   if (!m) throw new Error(`MCP "${name}" not registered`);
   // Write back to the scope it lives in so we don't accidentally shadow it.
@@ -132,7 +132,7 @@ async function toggleEnabled(args, enabled) {
       `MCP "${name}" comes from foreign source "${m.source}" — toggle it in that IDE's config directly.`
     );
   }
-  await http.post(`/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
+  await http.post(`/api/projects/${pid}/mcps?scope=${encodeURIComponent(scope)}`, {
     name: m.name,
     command: m.command,
     args: m.args,
@@ -155,7 +155,7 @@ export async function cmdMcpRun(args) {
     }
   }
   const pid = await resolveProjectId(args?.flags?.project);
-  const result = await http.post(`/projects/${pid}/mcps/${name}/call`, { tool, params });
+  const result = await http.post(`/api/projects/${pid}/mcps/${name}/call`, { tool, params });
   process.stdout.write(JSON.stringify(result.result, null, 2) + "\n");
 }
 
@@ -217,7 +217,7 @@ export async function cmdMcpTools(args) {
   if (!name) throw new Error("apx mcp tools: usage: apx mcp tools <name> [<tool>] [--json]");
   const toolFilter = args._[1];
   const pid = await resolveProjectId(args?.flags?.project);
-  const data = await http.get(`/projects/${pid}/mcps/${name}/tools`);
+  const data = await http.get(`/api/projects/${pid}/mcps/${name}/tools`);
   const tools = data.tools || [];
 
   if (toolFilter) {
@@ -256,7 +256,7 @@ export async function cmdMcpLogs(args) {
   const name = args._[0];
   if (!name) throw new Error("apx mcp logs: missing <name>");
   const pid = await resolveProjectId(args?.flags?.project);
-  const logs = await http.get(`/projects/${pid}/mcps/${name}/logs`);
+  const logs = await http.get(`/api/projects/${pid}/mcps/${name}/logs`);
   if (args?.flags?.json) {
     process.stdout.write(JSON.stringify(logs, null, 2) + "\n");
     return;
@@ -287,7 +287,7 @@ export async function cmdMcpLogs(args) {
 
 export async function cmdMcpCheck(args = {}) {
   const pid = await resolveProjectId(args?.flags?.project);
-  const data = await http.get(`/projects/${pid}/mcps/check`);
+  const data = await http.get(`/api/projects/${pid}/mcps/check`);
 
   console.log("Source files:");
   for (const s of data.sources) {